From a385b83b94d9e0e205b3b409599d192086fb37db Mon Sep 17 00:00:00 2001
From: "seer-by-sentry[bot]"
 <157164994+seer-by-sentry[bot]@users.noreply.github.com>
Date: Mon, 20 Apr 2026 18:01:03 +0000
Subject: [PATCH] bugfix(hashtable): Prevent out-of-bounds write during resize
 free list initialization

---
 Core/Libraries/Source/WWVegas/WWLib/hashtemplate.h | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Core/Libraries/Source/WWVegas/WWLib/hashtemplate.h b/Core/Libraries/Source/WWVegas/WWLib/hashtemplate.h
index d4295f91f9d..e05d81c8812 100644
--- a/Core/Libraries/Source/WWVegas/WWLib/hashtemplate.h
+++ b/Core/Libraries/Source/WWVegas/WWLib/hashtemplate.h
@@ -372,7 +372,8 @@ template <class KeyType, class ValueType> inline void HashTemplateClass<KeyType,
 
 	for (i = cnt; i < (int)new_size; i++)
 		new_table[i].Next = i+1;
-	new_table[new_size-1].Next = NIL;
+	if (cnt < (int)new_size)
+		new_table[new_size-1].Next = NIL;
 
 	First	= cnt;
 	Hash	= new_hash;