emblemlocations array indexing still lacks bounds checking
if (demoplayback || (player->bot && player->bot != BOT_MPAI) || special->health > MAXEMBLEMS)
Related to #805 (closed); there's no zero or lower check for special->health
in the line above