打开一个bmp并绘制文字出错

打开一个bmp并绘制文字出错，求救

FILE *fp=fopen("d:/0.bmp","rb");

	if(fp == 0)

		    return 1;

	 

	fseek(fp, sizeof(BITMAPFILEHEADER), 0);

	BITMAPINFOHEADER head;

	fread(&head, sizeof(BITMAPINFOHEADER), 1, fp);

	int bmpHeight = head.biHeight;

	 int bmpWidth = head.biWidth;

	 int biBitCount = head.biBitCount;

	 int lineByte = (bmpWidth*biBitCount/8+3)/4*4;

	RGBQUAD *pColorTable;

	 if(biBitCount == 8)

		 {

		     pColorTable = new RGBQUAD[256];

		    fread(pColorTable, sizeof(RGBQUAD), 256, fp);

			 }

	 unsigned char *pBmpBuf = new unsigned char[lineByte*bmpHeight];

	 fread(pBmpBuf, 1, lineByte*bmpHeight, fp);

 


	 CDC *m_pMemDC;

	 m_pMemDC = new CDC();


	 HDC pDC = ::GetDC(AfxGetMainWnd()->m_hWnd);


	 m_pMemDC->CreateCompatibleDC( CDC::FromHandle(pDC));

	 CBitmap *m_pOldBmp = NULL;

	 CBitmap *m_pMemBmp = new CBitmap();       //根据图片的大小创建一个兼容位图

	 m_pMemBmp->CreateCompatibleBitmap( CDC::FromHandle(pDC), bmpWidth, bmpHeight);

	 m_pOldBmp = m_pMemDC->SelectObject(m_pMemBmp);

	 

		 // 把图像的数据绘制到兼容位图上

		 

		 SetDIBits(m_pMemDC->GetSafeHdc(), (HBITMAP)m_pMemBmp->m_hObject, 

		     0, bmpHeight, (LPVOID)pBmpBuf, (BITMAPINFO*)&head, DIB_RGB_COLORS);

	 m_pMemDC->SetBkMode(TRANSPARENT);

	m_pMemDC->SetTextColor(RGB(0, 0, 0));

	m_pMemDC->SetBkColor(RGB(255,0,0));


		//设置字体

		/* CFont font;

		font.CreateFont(10,10,0,0,10,FALSE,FALSE,FALSE,ANSI_CHARSET,OUT_DEFAULT_PRECIS,OUT_DEFAULT_PRECIS,DEFAULT_QUALITY,FF_SWISS,"宋体");

		SelectObject(hMemDC, font); */

	 // 添加文字到指定位置

		m_pMemDC->TextOut(15, 15, _T("北京"));

	 

		 unsigned char *pTemp = new unsigned char[lineByte*bmpHeight];

	 GetDIBits(m_pMemDC->GetSafeHdc(), (HBITMAP)m_pMemBmp->m_hObject, 0, bmpHeight, 

		    (LPVOID)pTemp, (BITMAPINFO*)&head, DIB_RGB_COLORS);

	 fclose(fp);

	  

		char bmpwrite[] = "c:/3.bmp";

	fp = fopen(bmpwrite,"wb");

	 BITMAPFILEHEADER fileHead;

	 fileHead.bfType = 0x4D42;

	fileHead.bfSize = sizeof(BITMAPFILEHEADER)+sizeof(BITMAPINFOHEADER)+lineByte*bmpHeight;

	fileHead.bfReserved1 = 0;

	fileHead.bfReserved2 = 0;

	 fileHead.bfOffBits = 54;

	fwrite(&fileHead, sizeof(BITMAPFILEHEADER), 1, fp);


	fwrite(&head, sizeof(BITMAPINFOHEADER), 1, fp);

	 fwrite(pTemp, lineByte*bmpHeight, 1, fp);

	 fclose(fp);

	  

		 delete m_pMemBmp;

 delete m_pMemDC;

ReleaseDC(NULL,pDC);

	 delete[] pBmpBuf;

	delete[] pTemp;

Run-Time Check Failure #2 - Stack around the variable 'head' was corrupted.
加断点看fp错误的指针，pBmpBuf和pTemp里全是铬，是加载的图片有问题吗？
------解决方案--------------------
 fread(pBmpBuf, lineByte*bmpHeight, 1, fp);