From 1559b5ce67e25c8de65f0d4af020c1ec50cb7b85 Mon Sep 17 00:00:00 2001
From: "Ryan C. Gordon" <icculus@icculus.org>
Date: Wed, 24 Jan 2018 12:00:24 -0500
Subject: [PATCH] lbm: Don't overflow static colormap buffer.

---
 IMG_lbm.c | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/IMG_lbm.c b/IMG_lbm.c
index 7c96fe3b..3e2489f3 100755
--- a/IMG_lbm.c
+++ b/IMG_lbm.c
@@ -183,6 +183,11 @@ SDL_Surface *IMG_LoadLBM_RW( SDL_RWops *src )
 
         if ( !SDL_memcmp( id, "CMAP", 4 ) ) /* palette ( Color Map ) */
         {
+            if (size > sizeof (colormap)) {
+                error="colormap size is too large";
+                goto done;
+            }
+
             if ( !SDL_RWread( src, &colormap, size, 1 ) )
             {
                 error="error reading CMAP chunk";