Check input token length before copy

code/FBX/FBXParser.cpp

@@ -367,8 +367,11 @@ float ParseTokenAsFloat(const Token& t, const char*& err_out)
     // first - next in the fbx token stream comes ',',
     // which fast_atof could interpret as decimal point.
 #define MAX_FLOAT_LENGTH 31
-    char temp[MAX_FLOAT_LENGTH + 1];
     const size_t length = static_cast<size_t>(t.end()-t.begin());
+    if (length > MAX_FLOAT_LENGTH)
+        return 0.f;
+
+    char temp[MAX_FLOAT_LENGTH + 1];
     std::copy(t.begin(), t.end(), temp);
     temp[std::min(static_cast<size_t>(MAX_FLOAT_LENGTH),length)] = '\0';