nine/device: fix draw index bounds and indexed UP vertex upload