From 4e578df4c6aa7f9b891a58477ce282d91694dd8c Mon Sep 17 00:00:00 2001
From: Kp <kp@valhallalegends.com>
Date: Sat, 10 Jun 2017 03:31:04 +0000
Subject: [PATCH] Validate range for d1 bmread ab_load

---
 d1x-rebirth/main/bmread.cpp | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/d1x-rebirth/main/bmread.cpp b/d1x-rebirth/main/bmread.cpp
index aa0e55373..a9f839046 100644
--- a/d1x-rebirth/main/bmread.cpp
+++ b/d1x-rebirth/main/bmread.cpp
@@ -240,7 +240,11 @@ static void ab_load(int skip, const char * filename, array<bitmap_index, MAX_BIT
 		Error("File %s - IFF error: %s",filename,iff_errormsg(iff_error));
 	}
 
-	for (uint_fast32_t i=0;i< *nframes; i++)	{
+	const auto nf = *nframes;
+	if (nf >= bm.size())
+		return;
+	for (uint_fast32_t i = 0; i != nf; ++i)
+	{
 		snprintf(tempname, sizeof(tempname), "%s#%" PRIuFAST32, fname, i);
 		gr_remap_bitmap_good(*bm[i].get(), newpal, iff_has_transparency ? iff_transparent_color : -1, SuperX);
 		bm[i]->avg_color = compute_average_pixel(bm[i].get());