SIGSEGV if gentity->s.number is too big. You let the control slide through all of the failed security checks...