[d3d9] fix opCompositeExtract out of bound

Closes: doitsujin#3293

Signed-by: Oleksii Bozhenko <oleksii.bozhenko@globallogic.com>

src/d3d9/d3d9_fixed_function.cpp

@@ -1169,7 +1169,7 @@ namespace dxvk {
       }
 
       uint32_t type = flags;
-      if (type != D3DTTFF_DISABLE) {
+      if (type != D3DTTFF_DISABLE && count < 4) {
         if (!m_vsKey.Data.Contents.HasPositionT) {
           for (uint32_t j = count; j < 4; j++) {
             // If we're outside the component count of the vertex decl for this texcoord then we pad with zeroes.
@@ -1798,10 +1798,9 @@ namespace dxvk {
             texcoord, texcoord, texcoordCnt, indices.data());
 
           uint32_t projIdx = m_fsKey.Stages[i].Contents.ProjectedCount;
-          if (projIdx == 0)
+          if (projIdx == 0 || projIdx > texcoordCnt)
             projIdx = texcoordCnt;
-          else
-            projIdx--;
+          --projIdx;
 
           uint32_t projValue = 0;