From 16c57ab1d3e507ca37e89836c0e4aba6053cc161 Mon Sep 17 00:00:00 2001
From: Turo Lamminen <turotl@gmail.com>
Date: Wed, 1 Apr 2015 16:22:06 +0300
Subject: [PATCH] AC3D: Throw exception on too many vertices instead of
 crashing

---
 code/ACLoader.cpp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/code/ACLoader.cpp b/code/ACLoader.cpp
index fc00316bf..fccec4e61 100644
--- a/code/ACLoader.cpp
+++ b/code/ACLoader.cpp
@@ -598,6 +598,9 @@ aiNode* AC3DImporter::ConvertObjectSection(Object& object,
 									face.mIndices[i] = cur++;
 
 									// copy vertex positions
+									if ((vertices - mesh->mVertices) >= mesh->mNumVertices) {
+										throw DeadlyImportError("AC3D: Invalid number of vertices");
+									}
 									*vertices = object.vertices[entry.first] + object.translation;