222e7ea5ea
Don't try to subtract the address of "acg.cg_firstfield" from "acg.cg_nextfreeoff", as it's already relative to the start of "&acg". This always worked because the result of the subtraction was always negative, thus could never be > "sblock.fs_cgsize" ...