lbm: Don't overflow static colormap buffer.

libsdl-org · Jan 24, 2018 · 1559b5c · 1559b5c
1 parent b48777d
commit 1559b5c
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/IMG_lbm.c b/IMG_lbm.c
@@ -183,6 +183,11 @@ SDL_Surface *IMG_LoadLBM_RW( SDL_RWops *src )
 
         if ( !SDL_memcmp( id, "CMAP", 4 ) ) /* palette ( Color Map ) */
         {
+            if (size > sizeof (colormap)) {
+                error="colormap size is too large";
+                goto done;
+            }
+
             if ( !SDL_RWread( src, &colormap, size, 1 ) )
             {
                 error="error reading CMAP chunk";