chbg buffer overflow

Malcrafted background picture change scenario leads to buffer overflow...