Re-enable bad_bmps regression test and remove lenient files from bad_bmps

Author: telecos

src/codecs/bmp/decoder.rs

@@ -2602,6 +2602,7 @@ mod test {
     /// - `rletopdown`: RLE compression with top-down orientation (spec forbids this)
     /// - `badplanes`: planes field != 1 (spec requires exactly 1)
     /// - `badpalettesize`: colors_used exceeds max for the bit depth
+    /// - `pal8oversizepal`: 8-bit palette with colors_used=300 (max is 256)
     /// - `rgb16-880`: 16-bit bitfields with 8-8-0 channel widths (blue mask is zero)
     #[test]
     fn test_strict_vs_lenient_spec_validation() {
@@ -2618,6 +2619,10 @@ mod test {
                 "tests/images/bmp/images/lenient/badpalettesize.bmp",
                 "badpalettesize: palette size exceeding bit depth should be rejected in strict mode",
             ),
+            (
+                "tests/images/bmp/images/lenient/pal8oversizepal.bmp",
+                "pal8oversizepal: colors_used=300 exceeds max 256 for 8-bit",
+            ),
             (
                 "tests/images/bmp/images/lenient/rgb16-880.bmp",
                 "rgb16-880: zero blue mask should be rejected in strict mode",

tests/images/bmp/images/Bad_badplanes.bad_bmp

@@ -80,11 +80,7 @@ fn check_webp_frames_regressions() {
 /// Check that BMP files with large values could cause OOM issues are rejected.
 ///
 /// The images are postfixed with `bad_bmp` to not be loaded by the other test.
-///
-/// NOTE: Disabled because the BMP decoder now defaults to lenient mode, which
-/// accepts these files. Re-enable when a public API for strict validation is exposed.
 #[test]
-#[ignore]
 fn bad_bmps() {
     let path: PathBuf = BASE_PATH
         .iter()