src/video/SDL_bmp.c
author Sam Lantinga <slouken@libsdl.org>
Mon, 18 Feb 2019 07:48:23 -0800
branchSDL-1.2
changeset 12611 19d8c3b9c251
parent 6227 e11fd9609d10
child 12645 08f3b4992538
permissions -rw-r--r--
Fixed bug 4500 - Heap-Buffer Overflow in Map1toN pertaining to SDL_pixels.c

Petr Pisar

The reproducer has these data in BITMAPINFOHEADER:

biSize = 40
biBitCount = 8
biClrUsed = 131075

SDL_LoadBMP_RW() function passes biBitCount as a color depth to SDL_CreateRGBSurface(), thus 256-color pallete is allocated. But then biClrUsed colors are read from a file and stored into the palette. SDL_LoadBMP_RW should report an error if biClrUsed is greater than 2^biBitCount.
slouken@0
     1
/*
slouken@0
     2
    SDL - Simple DirectMedia Layer
slouken@6137
     3
    Copyright (C) 1997-2012 Sam Lantinga
slouken@0
     4
slouken@0
     5
    This library is free software; you can redistribute it and/or
slouken@1312
     6
    modify it under the terms of the GNU Lesser General Public
slouken@0
     7
    License as published by the Free Software Foundation; either
slouken@1312
     8
    version 2.1 of the License, or (at your option) any later version.
slouken@0
     9
slouken@0
    10
    This library is distributed in the hope that it will be useful,
slouken@0
    11
    but WITHOUT ANY WARRANTY; without even the implied warranty of
slouken@0
    12
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
slouken@1312
    13
    Lesser General Public License for more details.
slouken@0
    14
slouken@1312
    15
    You should have received a copy of the GNU Lesser General Public
slouken@1312
    16
    License along with this library; if not, write to the Free Software
slouken@1312
    17
    Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
slouken@0
    18
slouken@0
    19
    Sam Lantinga
slouken@252
    20
    slouken@libsdl.org
slouken@0
    21
*/
slouken@1402
    22
#include "SDL_config.h"
slouken@0
    23
slouken@0
    24
/* 
slouken@0
    25
   Code to load and save surfaces in Windows BMP format.
slouken@0
    26
slouken@0
    27
   Why support BMP format?  Well, it's a native format for Windows, and
slouken@0
    28
   most image processing programs can read and write it.  It would be nice
slouken@0
    29
   to be able to have at least one image format that we can natively load
slouken@0
    30
   and save, and since PNG is so complex that it would bloat the library,
slouken@0
    31
   BMP is a good alternative. 
slouken@0
    32
slouken@0
    33
   This code currently supports Win32 DIBs in uncompressed 8 and 24 bpp.
slouken@0
    34
*/
slouken@0
    35
slouken@0
    36
#include "SDL_video.h"
slouken@0
    37
#include "SDL_endian.h"
slouken@0
    38
slouken@0
    39
/* Compression encodings for BMP files */
slouken@0
    40
#ifndef BI_RGB
slouken@0
    41
#define BI_RGB		0
slouken@0
    42
#define BI_RLE8		1
slouken@0
    43
#define BI_RLE4		2
slouken@0
    44
#define BI_BITFIELDS	3
slouken@0
    45
#endif
slouken@0
    46
slouken@0
    47
slouken@0
    48
SDL_Surface * SDL_LoadBMP_RW (SDL_RWops *src, int freesrc)
slouken@0
    49
{
slouken@4241
    50
	SDL_bool was_error;
icculus@5988
    51
	long fp_offset = 0;
slouken@0
    52
	int bmpPitch;
slouken@0
    53
	int i, pad;
slouken@0
    54
	SDL_Surface *surface;
slouken@0
    55
	Uint32 Rmask;
slouken@0
    56
	Uint32 Gmask;
slouken@0
    57
	Uint32 Bmask;
slouken@0
    58
	SDL_Palette *palette;
slouken@0
    59
	Uint8 *bits;
slouken@4241
    60
	Uint8 *top, *end;
slouken@4241
    61
	SDL_bool topDown;
slouken@0
    62
	int ExpandBMP;
slouken@0
    63
slouken@0
    64
	/* The Win32 BMP file header (14 bytes) */
slouken@0
    65
	char   magic[2];
slouken@0
    66
	Uint32 bfSize;
slouken@0
    67
	Uint16 bfReserved1;
slouken@0
    68
	Uint16 bfReserved2;
slouken@0
    69
	Uint32 bfOffBits;
slouken@0
    70
slouken@0
    71
	/* The Win32 BITMAPINFOHEADER struct (40 bytes) */
slouken@0
    72
	Uint32 biSize;
slouken@0
    73
	Sint32 biWidth;
slouken@0
    74
	Sint32 biHeight;
slouken@0
    75
	Uint16 biPlanes;
slouken@0
    76
	Uint16 biBitCount;
slouken@0
    77
	Uint32 biCompression;
slouken@0
    78
	Uint32 biSizeImage;
slouken@0
    79
	Sint32 biXPelsPerMeter;
slouken@0
    80
	Sint32 biYPelsPerMeter;
slouken@0
    81
	Uint32 biClrUsed;
slouken@0
    82
	Uint32 biClrImportant;
slouken@0
    83
slouken@0
    84
	/* Make sure we are passed a valid data source */
slouken@0
    85
	surface = NULL;
slouken@4241
    86
	was_error = SDL_FALSE;
slouken@0
    87
	if ( src == NULL ) {
slouken@4241
    88
		was_error = SDL_TRUE;
slouken@0
    89
		goto done;
slouken@0
    90
	}
slouken@0
    91
slouken@0
    92
	/* Read in the BMP file header */
slouken@0
    93
	fp_offset = SDL_RWtell(src);
slouken@0
    94
	SDL_ClearError();
slouken@0
    95
	if ( SDL_RWread(src, magic, 1, 2) != 2 ) {
slouken@0
    96
		SDL_Error(SDL_EFREAD);
slouken@4241
    97
		was_error = SDL_TRUE;
slouken@0
    98
		goto done;
slouken@0
    99
	}
slouken@1336
   100
	if ( SDL_strncmp(magic, "BM", 2) != 0 ) {
slouken@0
   101
		SDL_SetError("File is not a Windows BMP file");
slouken@4241
   102
		was_error = SDL_TRUE;
slouken@0
   103
		goto done;
slouken@0
   104
	}
slouken@0
   105
	bfSize		= SDL_ReadLE32(src);
slouken@0
   106
	bfReserved1	= SDL_ReadLE16(src);
slouken@0
   107
	bfReserved2	= SDL_ReadLE16(src);
slouken@0
   108
	bfOffBits	= SDL_ReadLE32(src);
slouken@0
   109
slouken@0
   110
	/* Read the Win32 BITMAPINFOHEADER */
slouken@0
   111
	biSize		= SDL_ReadLE32(src);
slouken@0
   112
	if ( biSize == 12 ) {
slouken@0
   113
		biWidth		= (Uint32)SDL_ReadLE16(src);
slouken@0
   114
		biHeight	= (Uint32)SDL_ReadLE16(src);
slouken@0
   115
		biPlanes	= SDL_ReadLE16(src);
slouken@0
   116
		biBitCount	= SDL_ReadLE16(src);
slouken@0
   117
		biCompression	= BI_RGB;
slouken@0
   118
		biSizeImage	= 0;
slouken@0
   119
		biXPelsPerMeter	= 0;
slouken@0
   120
		biYPelsPerMeter	= 0;
slouken@0
   121
		biClrUsed	= 0;
slouken@0
   122
		biClrImportant	= 0;
slouken@0
   123
	} else {
slouken@0
   124
		biWidth		= SDL_ReadLE32(src);
slouken@0
   125
		biHeight	= SDL_ReadLE32(src);
slouken@0
   126
		biPlanes	= SDL_ReadLE16(src);
slouken@0
   127
		biBitCount	= SDL_ReadLE16(src);
slouken@0
   128
		biCompression	= SDL_ReadLE32(src);
slouken@0
   129
		biSizeImage	= SDL_ReadLE32(src);
slouken@0
   130
		biXPelsPerMeter	= SDL_ReadLE32(src);
slouken@0
   131
		biYPelsPerMeter	= SDL_ReadLE32(src);
slouken@0
   132
		biClrUsed	= SDL_ReadLE32(src);
slouken@0
   133
		biClrImportant	= SDL_ReadLE32(src);
slouken@0
   134
	}
icculus@6227
   135
icculus@6227
   136
	/* stop some compiler warnings. */
icculus@6227
   137
	(void) bfSize;
icculus@6227
   138
	(void) bfReserved1;
icculus@6227
   139
	(void) bfReserved2;
icculus@6227
   140
	(void) biPlanes;
icculus@6227
   141
	(void) biSizeImage;
icculus@6227
   142
	(void) biXPelsPerMeter;
icculus@6227
   143
	(void) biYPelsPerMeter;
icculus@6227
   144
	(void) biClrImportant;
icculus@6227
   145
slouken@4241
   146
	if (biHeight < 0) {
slouken@4241
   147
		topDown = SDL_TRUE;
slouken@4241
   148
		biHeight = -biHeight;
slouken@4241
   149
	} else {
slouken@4241
   150
		topDown = SDL_FALSE;
slouken@4241
   151
	}
slouken@0
   152
slouken@0
   153
	/* Check for read error */
slouken@1336
   154
	if ( SDL_strcmp(SDL_GetError(), "") != 0 ) {
slouken@4241
   155
		was_error = SDL_TRUE;
slouken@0
   156
		goto done;
slouken@0
   157
	}
slouken@0
   158
slouken@0
   159
	/* Expand 1 and 4 bit bitmaps to 8 bits per pixel */
slouken@0
   160
	switch (biBitCount) {
slouken@0
   161
		case 1:
slouken@0
   162
		case 4:
slouken@0
   163
			ExpandBMP = biBitCount;
slouken@0
   164
			biBitCount = 8;
slouken@0
   165
			break;
slouken@0
   166
		default:
slouken@0
   167
			ExpandBMP = 0;
slouken@0
   168
			break;
slouken@0
   169
	}
slouken@0
   170
slouken@0
   171
	/* We don't support any BMP compression right now */
slouken@0
   172
	Rmask = Gmask = Bmask = 0;
slouken@0
   173
	switch (biCompression) {
slouken@0
   174
		case BI_RGB:
slouken@0
   175
			/* If there are no masks, use the defaults */
slouken@0
   176
			if ( bfOffBits == (14+biSize) ) {
slouken@0
   177
				/* Default values for the BMP format */
slouken@0
   178
				switch (biBitCount) {
slouken@0
   179
					case 15:
slouken@0
   180
					case 16:
slouken@0
   181
						Rmask = 0x7C00;
slouken@0
   182
						Gmask = 0x03E0;
slouken@0
   183
						Bmask = 0x001F;
slouken@0
   184
						break;
slouken@0
   185
					case 24:
slouken@0
   186
#if SDL_BYTEORDER == SDL_BIG_ENDIAN
slouken@0
   187
					        Rmask = 0x000000FF;
slouken@0
   188
					        Gmask = 0x0000FF00;
slouken@0
   189
					        Bmask = 0x00FF0000;
slouken@0
   190
						break;
slouken@0
   191
#endif
slouken@0
   192
					case 32:
slouken@0
   193
						Rmask = 0x00FF0000;
slouken@0
   194
						Gmask = 0x0000FF00;
slouken@0
   195
						Bmask = 0x000000FF;
slouken@0
   196
						break;
slouken@0
   197
					default:
slouken@0
   198
						break;
slouken@0
   199
				}
slouken@0
   200
				break;
slouken@0
   201
			}
slouken@0
   202
			/* Fall through -- read the RGB masks */
slouken@0
   203
slouken@0
   204
		case BI_BITFIELDS:
slouken@0
   205
			switch (biBitCount) {
slouken@0
   206
				case 15:
slouken@0
   207
				case 16:
slouken@0
   208
				case 32:
slouken@0
   209
					Rmask = SDL_ReadLE32(src);
slouken@0
   210
					Gmask = SDL_ReadLE32(src);
slouken@0
   211
					Bmask = SDL_ReadLE32(src);
slouken@0
   212
					break;
slouken@0
   213
				default:
slouken@0
   214
					break;
slouken@0
   215
			}
slouken@0
   216
			break;
slouken@0
   217
		default:
slouken@0
   218
			SDL_SetError("Compressed BMP files not supported");
slouken@4241
   219
			was_error = SDL_TRUE;
slouken@0
   220
			goto done;
slouken@0
   221
	}
slouken@0
   222
slouken@0
   223
	/* Create a compatible surface, note that the colors are RGB ordered */
slouken@0
   224
	surface = SDL_CreateRGBSurface(SDL_SWSURFACE,
slouken@0
   225
			biWidth, biHeight, biBitCount, Rmask, Gmask, Bmask, 0);
slouken@0
   226
	if ( surface == NULL ) {
slouken@4241
   227
		was_error = SDL_TRUE;
slouken@0
   228
		goto done;
slouken@0
   229
	}
slouken@0
   230
slouken@0
   231
	/* Load the palette, if any */
slouken@0
   232
	palette = (surface->format)->palette;
slouken@0
   233
	if ( palette ) {
slouken@0
   234
		if ( biClrUsed == 0 ) {
slouken@0
   235
			biClrUsed = 1 << biBitCount;
slouken@12611
   236
		} else if ( biClrUsed > (1 << biBitCount) ) {
slouken@12611
   237
			SDL_SetError("BMP file has an invalid number of colors");
slouken@12611
   238
			was_error = SDL_TRUE;
slouken@12611
   239
			goto done;
slouken@0
   240
		}
slouken@0
   241
		if ( biSize == 12 ) {
slouken@0
   242
			for ( i = 0; i < (int)biClrUsed; ++i ) {
slouken@0
   243
				SDL_RWread(src, &palette->colors[i].b, 1, 1);
slouken@0
   244
				SDL_RWread(src, &palette->colors[i].g, 1, 1);
slouken@0
   245
				SDL_RWread(src, &palette->colors[i].r, 1, 1);
slouken@0
   246
				palette->colors[i].unused = 0;
slouken@0
   247
			}	
slouken@0
   248
		} else {
slouken@0
   249
			for ( i = 0; i < (int)biClrUsed; ++i ) {
slouken@0
   250
				SDL_RWread(src, &palette->colors[i].b, 1, 1);
slouken@0
   251
				SDL_RWread(src, &palette->colors[i].g, 1, 1);
slouken@0
   252
				SDL_RWread(src, &palette->colors[i].r, 1, 1);
slouken@0
   253
				SDL_RWread(src, &palette->colors[i].unused, 1, 1);
slouken@0
   254
			}	
slouken@0
   255
		}
slouken@0
   256
		palette->ncolors = biClrUsed;
slouken@0
   257
	}
slouken@0
   258
slouken@0
   259
	/* Read the surface pixels.  Note that the bmp image is upside down */
slouken@1330
   260
	if ( SDL_RWseek(src, fp_offset+bfOffBits, RW_SEEK_SET) < 0 ) {
slouken@0
   261
		SDL_Error(SDL_EFSEEK);
slouken@4241
   262
		was_error = SDL_TRUE;
slouken@0
   263
		goto done;
slouken@0
   264
	}
slouken@4241
   265
	top = (Uint8 *)surface->pixels;
slouken@4241
   266
	end = (Uint8 *)surface->pixels+(surface->h*surface->pitch);
slouken@0
   267
	switch (ExpandBMP) {
slouken@0
   268
		case 1:
slouken@0
   269
			bmpPitch = (biWidth + 7) >> 3;
slouken@0
   270
			pad  = (((bmpPitch)%4) ? (4-((bmpPitch)%4)) : 0);
slouken@0
   271
			break;
slouken@0
   272
		case 4:
slouken@0
   273
			bmpPitch = (biWidth + 1) >> 1;
slouken@0
   274
			pad  = (((bmpPitch)%4) ? (4-((bmpPitch)%4)) : 0);
slouken@0
   275
			break;
slouken@0
   276
		default:
slouken@0
   277
			pad  = ((surface->pitch%4) ?
slouken@0
   278
					(4-(surface->pitch%4)) : 0);
slouken@0
   279
			break;
slouken@0
   280
	}
slouken@4241
   281
	if ( topDown ) {
slouken@4241
   282
		bits = top;
slouken@4241
   283
	} else {
slouken@4241
   284
		bits = end - surface->pitch;
slouken@4241
   285
	}
slouken@4241
   286
	while ( bits >= top && bits < end ) {
slouken@0
   287
		switch (ExpandBMP) {
slouken@0
   288
			case 1:
slouken@0
   289
			case 4: {
slouken@0
   290
			Uint8 pixel = 0;
slouken@0
   291
			int   shift = (8-ExpandBMP);
slouken@0
   292
			for ( i=0; i<surface->w; ++i ) {
slouken@0
   293
				if ( i%(8/ExpandBMP) == 0 ) {
slouken@0
   294
					if ( !SDL_RWread(src, &pixel, 1, 1) ) {
slouken@0
   295
						SDL_SetError(
slouken@0
   296
					"Error reading from BMP");
slouken@4241
   297
						was_error = SDL_TRUE;
slouken@0
   298
						goto done;
slouken@0
   299
					}
slouken@0
   300
				}
slouken@0
   301
				*(bits+i) = (pixel>>shift);
slouken@0
   302
				pixel <<= ExpandBMP;
slouken@0
   303
			} }
slouken@0
   304
			break;
slouken@0
   305
slouken@0
   306
			default:
slouken@0
   307
			if ( SDL_RWread(src, bits, 1, surface->pitch)
slouken@0
   308
							 != surface->pitch ) {
slouken@0
   309
				SDL_Error(SDL_EFREAD);
slouken@4241
   310
				was_error = SDL_TRUE;
slouken@0
   311
				goto done;
slouken@0
   312
			}
slouken@0
   313
#if SDL_BYTEORDER == SDL_BIG_ENDIAN
slouken@0
   314
			/* Byte-swap the pixels if needed. Note that the 24bpp
slouken@0
   315
			   case has already been taken care of above. */
slouken@0
   316
			switch(biBitCount) {
slouken@0
   317
				case 15:
slouken@0
   318
				case 16: {
slouken@0
   319
				        Uint16 *pix = (Uint16 *)bits;
slouken@0
   320
					for(i = 0; i < surface->w; i++)
slouken@0
   321
					        pix[i] = SDL_Swap16(pix[i]);
slouken@0
   322
					break;
slouken@0
   323
				}
slouken@0
   324
slouken@0
   325
				case 32: {
slouken@0
   326
				        Uint32 *pix = (Uint32 *)bits;
slouken@0
   327
					for(i = 0; i < surface->w; i++)
slouken@0
   328
					        pix[i] = SDL_Swap32(pix[i]);
slouken@0
   329
					break;
slouken@0
   330
				}
slouken@0
   331
			}
slouken@0
   332
#endif
slouken@0
   333
			break;
slouken@0
   334
		}
slouken@0
   335
		/* Skip padding bytes, ugh */
slouken@0
   336
		if ( pad ) {
slouken@0
   337
			Uint8 padbyte;
slouken@0
   338
			for ( i=0; i<pad; ++i ) {
slouken@0
   339
				SDL_RWread(src, &padbyte, 1, 1);
slouken@0
   340
			}
slouken@0
   341
		}
slouken@4241
   342
		if ( topDown ) {
slouken@4241
   343
			bits += surface->pitch;
slouken@4241
   344
		} else {
slouken@4241
   345
			bits -= surface->pitch;
slouken@4241
   346
		}
slouken@0
   347
	}
slouken@0
   348
done:
slouken@0
   349
	if ( was_error ) {
slouken@1329
   350
		if ( src ) {
slouken@1330
   351
			SDL_RWseek(src, fp_offset, RW_SEEK_SET);
slouken@1329
   352
		}
slouken@0
   353
		if ( surface ) {
slouken@0
   354
			SDL_FreeSurface(surface);
slouken@0
   355
		}
slouken@0
   356
		surface = NULL;
slouken@0
   357
	}
slouken@0
   358
	if ( freesrc && src ) {
slouken@0
   359
		SDL_RWclose(src);
slouken@0
   360
	}
slouken@0
   361
	return(surface);
slouken@0
   362
}
slouken@0
   363
slouken@0
   364
int SDL_SaveBMP_RW (SDL_Surface *saveme, SDL_RWops *dst, int freedst)
slouken@0
   365
{
slouken@0
   366
	long fp_offset;
slouken@0
   367
	int i, pad;
slouken@0
   368
	SDL_Surface *surface;
slouken@0
   369
	Uint8 *bits;
slouken@0
   370
slouken@0
   371
	/* The Win32 BMP file header (14 bytes) */
slouken@0
   372
	char   magic[2] = { 'B', 'M' };
slouken@0
   373
	Uint32 bfSize;
slouken@0
   374
	Uint16 bfReserved1;
slouken@0
   375
	Uint16 bfReserved2;
slouken@0
   376
	Uint32 bfOffBits;
slouken@0
   377
slouken@0
   378
	/* The Win32 BITMAPINFOHEADER struct (40 bytes) */
slouken@0
   379
	Uint32 biSize;
slouken@0
   380
	Sint32 biWidth;
slouken@0
   381
	Sint32 biHeight;
slouken@0
   382
	Uint16 biPlanes;
slouken@0
   383
	Uint16 biBitCount;
slouken@0
   384
	Uint32 biCompression;
slouken@0
   385
	Uint32 biSizeImage;
slouken@0
   386
	Sint32 biXPelsPerMeter;
slouken@0
   387
	Sint32 biYPelsPerMeter;
slouken@0
   388
	Uint32 biClrUsed;
slouken@0
   389
	Uint32 biClrImportant;
slouken@0
   390
slouken@0
   391
	/* Make sure we have somewhere to save */
slouken@0
   392
	surface = NULL;
slouken@0
   393
	if ( dst ) {
slouken@0
   394
		if ( saveme->format->palette ) {
slouken@0
   395
			if ( saveme->format->BitsPerPixel == 8 ) {
slouken@0
   396
				surface = saveme;
slouken@0
   397
			} else {
slouken@0
   398
				SDL_SetError("%d bpp BMP files not supported",
slouken@0
   399
						saveme->format->BitsPerPixel);
slouken@0
   400
			}
slouken@0
   401
		}
slouken@0
   402
		else if ( (saveme->format->BitsPerPixel == 24) &&
slouken@0
   403
#if SDL_BYTEORDER == SDL_LIL_ENDIAN
slouken@0
   404
				(saveme->format->Rmask == 0x00FF0000) &&
slouken@0
   405
				(saveme->format->Gmask == 0x0000FF00) &&
slouken@0
   406
				(saveme->format->Bmask == 0x000000FF)
slouken@0
   407
#else
slouken@0
   408
				(saveme->format->Rmask == 0x000000FF) &&
slouken@0
   409
				(saveme->format->Gmask == 0x0000FF00) &&
slouken@0
   410
				(saveme->format->Bmask == 0x00FF0000)
slouken@0
   411
#endif
slouken@0
   412
			  ) {
slouken@0
   413
			surface = saveme;
slouken@0
   414
		} else {
slouken@0
   415
			SDL_Rect bounds;
slouken@0
   416
slouken@0
   417
			/* Convert to 24 bits per pixel */
slouken@0
   418
			surface = SDL_CreateRGBSurface(SDL_SWSURFACE,
slouken@0
   419
					saveme->w, saveme->h, 24,
slouken@0
   420
#if SDL_BYTEORDER == SDL_LIL_ENDIAN
slouken@0
   421
					0x00FF0000, 0x0000FF00, 0x000000FF,
slouken@0
   422
#else
slouken@0
   423
					0x000000FF, 0x0000FF00, 0x00FF0000,
slouken@0
   424
#endif
slouken@0
   425
					0);
slouken@0
   426
			if ( surface != NULL ) {
slouken@0
   427
				bounds.x = 0;
slouken@0
   428
				bounds.y = 0;
slouken@0
   429
				bounds.w = saveme->w;
slouken@0
   430
				bounds.h = saveme->h;
slouken@0
   431
				if ( SDL_LowerBlit(saveme, &bounds, surface,
slouken@0
   432
							&bounds) < 0 ) {
slouken@0
   433
					SDL_FreeSurface(surface);
slouken@0
   434
					SDL_SetError(
slouken@0
   435
					"Couldn't convert image to 24 bpp");
slouken@0
   436
					surface = NULL;
slouken@0
   437
				}
slouken@0
   438
			}
slouken@0
   439
		}
slouken@0
   440
	}
slouken@0
   441
slouken@0
   442
	if ( surface && (SDL_LockSurface(surface) == 0) ) {
slouken@1012
   443
		const int bw = surface->w*surface->format->BytesPerPixel;
slouken@1012
   444
slouken@0
   445
		/* Set the BMP file header values */
slouken@0
   446
		bfSize = 0;		 /* We'll write this when we're done */
slouken@0
   447
		bfReserved1 = 0;
slouken@0
   448
		bfReserved2 = 0;
slouken@0
   449
		bfOffBits = 0;		/* We'll write this when we're done */
slouken@0
   450
slouken@0
   451
		/* Write the BMP file header values */
slouken@0
   452
		fp_offset = SDL_RWtell(dst);
slouken@0
   453
		SDL_ClearError();
slouken@0
   454
		SDL_RWwrite(dst, magic, 2, 1);
slouken@0
   455
		SDL_WriteLE32(dst, bfSize);
slouken@0
   456
		SDL_WriteLE16(dst, bfReserved1);
slouken@0
   457
		SDL_WriteLE16(dst, bfReserved2);
slouken@0
   458
		SDL_WriteLE32(dst, bfOffBits);
slouken@0
   459
slouken@0
   460
		/* Set the BMP info values */
slouken@0
   461
		biSize = 40;
slouken@0
   462
		biWidth = surface->w;
slouken@0
   463
		biHeight = surface->h;
slouken@0
   464
		biPlanes = 1;
slouken@0
   465
		biBitCount = surface->format->BitsPerPixel;
slouken@0
   466
		biCompression = BI_RGB;
slouken@0
   467
		biSizeImage = surface->h*surface->pitch;
slouken@0
   468
		biXPelsPerMeter = 0;
slouken@0
   469
		biYPelsPerMeter = 0;
slouken@0
   470
		if ( surface->format->palette ) {
slouken@0
   471
			biClrUsed = surface->format->palette->ncolors;
slouken@0
   472
		} else {
slouken@0
   473
			biClrUsed = 0;
slouken@0
   474
		}
slouken@0
   475
		biClrImportant = 0;
slouken@0
   476
slouken@0
   477
		/* Write the BMP info values */
slouken@0
   478
		SDL_WriteLE32(dst, biSize);
slouken@0
   479
		SDL_WriteLE32(dst, biWidth);
slouken@0
   480
		SDL_WriteLE32(dst, biHeight);
slouken@0
   481
		SDL_WriteLE16(dst, biPlanes);
slouken@0
   482
		SDL_WriteLE16(dst, biBitCount);
slouken@0
   483
		SDL_WriteLE32(dst, biCompression);
slouken@0
   484
		SDL_WriteLE32(dst, biSizeImage);
slouken@0
   485
		SDL_WriteLE32(dst, biXPelsPerMeter);
slouken@0
   486
		SDL_WriteLE32(dst, biYPelsPerMeter);
slouken@0
   487
		SDL_WriteLE32(dst, biClrUsed);
slouken@0
   488
		SDL_WriteLE32(dst, biClrImportant);
slouken@0
   489
slouken@0
   490
		/* Write the palette (in BGR color order) */
slouken@0
   491
		if ( surface->format->palette ) {
slouken@0
   492
			SDL_Color *colors;
slouken@0
   493
			int       ncolors;
slouken@0
   494
slouken@0
   495
			colors = surface->format->palette->colors;
slouken@0
   496
			ncolors = surface->format->palette->ncolors;
slouken@0
   497
			for ( i=0; i<ncolors; ++i ) {
slouken@0
   498
				SDL_RWwrite(dst, &colors[i].b, 1, 1);
slouken@0
   499
				SDL_RWwrite(dst, &colors[i].g, 1, 1);
slouken@0
   500
				SDL_RWwrite(dst, &colors[i].r, 1, 1);
slouken@0
   501
				SDL_RWwrite(dst, &colors[i].unused, 1, 1);
slouken@0
   502
			}
slouken@0
   503
		}
slouken@0
   504
slouken@0
   505
		/* Write the bitmap offset */
slouken@0
   506
		bfOffBits = SDL_RWtell(dst)-fp_offset;
slouken@1330
   507
		if ( SDL_RWseek(dst, fp_offset+10, RW_SEEK_SET) < 0 ) {
slouken@0
   508
			SDL_Error(SDL_EFSEEK);
slouken@0
   509
		}
slouken@0
   510
		SDL_WriteLE32(dst, bfOffBits);
slouken@1330
   511
		if ( SDL_RWseek(dst, fp_offset+bfOffBits, RW_SEEK_SET) < 0 ) {
slouken@0
   512
			SDL_Error(SDL_EFSEEK);
slouken@0
   513
		}
slouken@0
   514
slouken@0
   515
		/* Write the bitmap image upside down */
slouken@0
   516
		bits = (Uint8 *)surface->pixels+(surface->h*surface->pitch);
slouken@1012
   517
		pad  = ((bw%4) ? (4-(bw%4)) : 0);
slouken@0
   518
		while ( bits > (Uint8 *)surface->pixels ) {
slouken@0
   519
			bits -= surface->pitch;
slouken@1012
   520
			if ( SDL_RWwrite(dst, bits, 1, bw) != bw) {
slouken@0
   521
				SDL_Error(SDL_EFWRITE);
slouken@0
   522
				break;
slouken@0
   523
			}
slouken@0
   524
			if ( pad ) {
slouken@0
   525
				const Uint8 padbyte = 0;
slouken@0
   526
				for ( i=0; i<pad; ++i ) {
slouken@0
   527
					SDL_RWwrite(dst, &padbyte, 1, 1);
slouken@0
   528
				}
slouken@0
   529
			}
slouken@0
   530
		}
slouken@0
   531
slouken@0
   532
		/* Write the BMP file size */
slouken@0
   533
		bfSize = SDL_RWtell(dst)-fp_offset;
slouken@1330
   534
		if ( SDL_RWseek(dst, fp_offset+2, RW_SEEK_SET) < 0 ) {
slouken@0
   535
			SDL_Error(SDL_EFSEEK);
slouken@0
   536
		}
slouken@0
   537
		SDL_WriteLE32(dst, bfSize);
slouken@1330
   538
		if ( SDL_RWseek(dst, fp_offset+bfSize, RW_SEEK_SET) < 0 ) {
slouken@0
   539
			SDL_Error(SDL_EFSEEK);
slouken@0
   540
		}
slouken@0
   541
slouken@0
   542
		/* Close it up.. */
slouken@0
   543
		SDL_UnlockSurface(surface);
slouken@0
   544
		if ( surface != saveme ) {
slouken@0
   545
			SDL_FreeSurface(surface);
slouken@0
   546
		}
slouken@0
   547
	}
slouken@0
   548
slouken@0
   549
	if ( freedst && dst ) {
slouken@0
   550
		SDL_RWclose(dst);
slouken@0
   551
	}
slouken@1336
   552
	return((SDL_strcmp(SDL_GetError(), "") == 0) ? 0 : -1);
slouken@0
   553
}