Avoid possible buffer overflow when checking face normals

diff --git a/src/client/mesh.cpp b/src/client/mesh.cpp
index 9bbb3a0a8267949a80f744b5a809e3beb162d1da..bec72fb5e79b13f27a89b3043fa12aa644511372 100644 (file)
--- a/src/client/mesh.cpp
+++ b/src/client/mesh.cpp
@@ -348,7 +348,7 @@ bool checkMeshNormals(scene::IMesh *mesh)
                if (!std::isfinite(length) || length < 1e-10f)
                        return false;
 
-               const u16 count = MYMIN(MAX_FACES_TO_CHECK * 3, buffer->getIndexCount());
+               const u16 count = MYMIN(MAX_FACES_TO_CHECK * 3, buffer->getIndexCount() - 3);
                for (u16 i = 0; i < count; i += 3) {
 
                        core::plane3df plane(buffer->getPosition(buffer->getIndices()[i]),