On 11/1/21 6:31 AM, Jinoh Kang wrote: > + UINT elm_size = coloruse == DIB_PAL_COLORS ? sizeof(WORD) : sizeof(DWORD); > + UINT colours = dst->biClrUsed; > + > + if (colours > UINT_MAX / elm_size) > + return FALSE; Should we use at most 1 << bpp entries here? Thanks, Jacek