From 4bb88e228a6283f32f4fa929b6c38278d59d7261 Mon Sep 17 00:00:00 2001
From: Eric Fischer <enf@pobox.com>
Date: Mon, 29 Jun 2015 17:05:33 -0700
Subject: [PATCH] Fix buffer overflow. This is a bounding box, not sub-tiles.

---
 tile.cc | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/tile.cc b/tile.cc
index 884ffe08..b1745689 100644
--- a/tile.cc
+++ b/tile.cc
@@ -478,9 +478,9 @@ long long write_tile(char **geoms, char *metabase, char *stringpool, unsigned *f
 						for (yo = 0; yo < span; yo++) {
 							int j = xo * span + yo;
 
-							long long bbox2[span * span];
+							long long bbox2[4];
 							int k;
-							for (k = 0; k < span * span; k++) {
+							for (k = 0; k < 4; k++) {
 								bbox2[k] = bbox[k];
 							}
 							if (z != 0) {