From 1ea73c92f65f5f8342edef1d7b4bba7580217176 Mon Sep 17 00:00:00 2001
From: havoc <havoc@d7cf8633-e32d-0410-b094-e92efae38249>
Date: Mon, 27 Sep 2010 02:44:16 +0000
Subject: [PATCH] avoid crashes if MAX_SVBSP_POLYGONPOINTS would be exceeded

git-svn-id: svn://svn.icculus.org/twilight/trunk/darkplaces@10502 d7cf8633-e32d-0410-b094-e92efae38249
---
 svbsp.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/svbsp.c b/svbsp.c
index f22947b8..437d82a3 100644
--- a/svbsp.c
+++ b/svbsp.c
@@ -409,6 +409,9 @@ int SVBSP_AddPolygon(svbsp_t *b, int numpoints, const float *points, int inserto
 	// note we still allow points and lines to be tested...
 	if (numpoints < 1)
 		return 0;
+	// if the polygon has too many points, we would crash
+	if (numpoints > MAX_SVBSP_POLYGONPOINTS)
+		return 0;
 	poly.numpoints = numpoints;
 	for (i = 0;i < numpoints;i++)
 	{
-- 
2.39.2