[PATCH 2/4] d3d9: Clamp vertex buffer upload range to buffer size.