From 3e914f483fe0fb09002caed082ca8e4ed6fea5ee Mon Sep 17 00:00:00 2001
From: rootvector2 <dxbnaveed.k@gmail.com>
Date: Mon, 1 Jun 2026 19:38:55 +0530
Subject: [PATCH] reject >256-color external colormap in CreateInverseColorMap

---
 lib/jpegli/color_quantize.cc | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/lib/jpegli/color_quantize.cc b/lib/jpegli/color_quantize.cc
index 30c735b1..d759a4cd 100644
--- a/lib/jpegli/color_quantize.cc
+++ b/lib/jpegli/color_quantize.cc
@@ -457,6 +457,10 @@ void CreateInverseColorMap(j_decompress_ptr cinfo) {
   int ncomp = cinfo->out_color_components;
   JPEGLI_CHECK(ncomp > 0);
   JPEGLI_CHECK(ncomp <= kMaxComponents);
+  if (cinfo->actual_number_of_colors > 256) {
+    JPEGLI_ERROR("Too many quantization colors (%d)",
+                 cinfo->actual_number_of_colors);
+  }
   int num_cells = 1;
   for (int c = 0; c < ncomp; ++c) {
     num_cells *= (1 << kNumColorCellBits[c]);