From 9eef0bc3be5d57176008f441a346f97195a2525b Mon Sep 17 00:00:00 2001 From: ychsiao168 Date: Mon, 20 Jul 2026 17:08:03 +0800 Subject: [PATCH] fix(bmp): reject truncated files in decoder_info (#10350) Signed-off-by: ychsiao168 Co-authored-by: ychsiao168 --- src/image/lv_bmp.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/image/lv_bmp.c b/src/image/lv_bmp.c index 2d3aca204c..25dd75b7ed 100644 --- a/src/image/lv_bmp.c +++ b/src/image/lv_bmp.c @@ -102,7 +102,12 @@ static lv_result_t decoder_info(lv_image_decoder_t * decoder, lv_image_decoder_d /*Save the data in the header*/ uint8_t headers[54]; - lv_fs_read(&dsc->file, headers, 54, NULL); + uint32_t rn = 0; + lv_fs_res_t res = lv_fs_read(&dsc->file, headers, 54, &rn); + if(res != LV_FS_RES_OK || rn < 54) { + return LV_RESULT_INVALID; + } + uint32_t w; uint32_t h; lv_memcpy(&w, headers + 18, 4);