From a10704f99ddadb9e29ca56af959974826f4e7266 Mon Sep 17 00:00:00 2001
From: Bill Currie <bill@taniwha.org>
Date: Tue, 4 Mar 2003 04:10:25 +0000
Subject: [PATCH] boundscheck the client entity

---
 qw/source/sv_pr_cmds.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/qw/source/sv_pr_cmds.c b/qw/source/sv_pr_cmds.c
index 46cc0da55..926f865ce 100644
--- a/qw/source/sv_pr_cmds.c
+++ b/qw/source/sv_pr_cmds.c
@@ -1745,7 +1745,7 @@ PF_SV_FreeClient (progs_t *pr)
 	int         entnum = P_EDICTNUM (pr, 0);
 	client_t   *cl = svs.clients + entnum - 1;
 
-	if (cl->state != cs_server)
+	if (entnum < 1 || entnum > MAX_CLIENTS || cl->state != cs_server)
 		PR_RunError (pr, "not a server client");
 	if (cl->userinfo)
 		Info_Destroy (cl->userinfo);