--- /n/sources/plan9/sys/src/cmd/jpg/readbmp.c Tue Mar 23 06:00:02 2004 +++ /sys/src/cmd/jpg/readbmp.c Sat Jul 25 01:55:50 2026 @@ -490,7 +490,8 @@ if(num_coltab) { int i; Bseek(b, bmih.size + Filehdrsz, 0); - + if(num_coltab > nelem(clut)) + sysfatal("too many color palette entries: %d > %d", num_coltab, nelem(clut)); for(i = 0; i < num_coltab; i++) { clut[i].blue = (uchar)Bgetc(b); clut[i].green = (uchar)Bgetc(b);