Fix CVE-2014-8138 (heap overflow in jp2_decode()).

Copied from Fedora.

http://pkgs.fedoraproject.org/cgit/rpms/jasper.git/tree/jasper-CVE-2014-8138.patch
https://bugzilla.redhat.com/show_bug.cgi?id=1173162

--- jasper-1.900.1.orig/src/libjasper/jp2/jp2_dec.c	2014-12-11 14:06:44.000000000 +0100
+++ jasper-1.900.1/src/libjasper/jp2/jp2_dec.c	2014-12-11 14:06:26.000000000 +0100
@@ -386,6 +386,11 @@ jas_image_t *jp2_decode(jas_stream_t *in
 	/* Determine the type of each component. */
 	if (dec->cdef) {
 		for (i = 0; i < dec->numchans; ++i) {
+			/* Is the channel number reasonable? */
+			if (dec->cdef->data.cdef.ents[i].channo >= dec->numchans) {
+				jas_eprintf("error: invalid channel number in CDEF box\n");
+				goto error;
+			}
 			jas_image_setcmpttype(dec->image,
 			  dec->chantocmptlut[dec->cdef->data.cdef.ents[i].channo],
 			  jp2_getct(jas_image_clrspc(dec->image),
tch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=6ea06a0e3a161be52a8f0b006f29901ccf1c079a'>refs</a><a class='active' href='/guix/log/gnu/packages/lesstif.scm'>log</a><a href='/guix/tree/gnu/packages/lesstif.scm?id=6ea06a0e3a161be52a8f0b006f29901ccf1c079a'>tree</a><a href='/guix/commit/gnu/packages/lesstif.scm?id=6ea06a0e3a161be52a8f0b006f29901ccf1c079a'>commit</a><a href='/guix/diff/gnu/packages/lesstif.scm?id=6ea06a0e3a161be52a8f0b006f29901ccf1c079a'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/lesstif.scm'>
<input type='hidden' name='id' value='6ea06a0e3a161be52a8f0b006f29901ccf1c079a'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=6ea06a0e3a161be52a8f0b006f29901ccf1c079a'>root</a>/<a href='/guix/log/gnu?id=6ea06a0e3a161be52a8f0b006f29901ccf1c079a'>gnu</a>/<a href='/guix/log/gnu/packages?id=6ea06a0e3a161be52a8f0b006f29901ccf1c079a'>packages</a>/<a href='/guix/log/gnu/packages/lesstif.scm?id=6ea06a0e3a161be52a8f0b006f29901ccf1c079a'>lesstif.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/lesstif.scm?id=6ea06a0e3a161be52a8f0b006f29901ccf1c079a&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2015-07-18 13:05:01 +0300'>2015-07-18</span></td><td><a href='/guix/commit/gnu/packages/lesstif.scm?id=e881752c39d455a249731a4e81e64d86f50afc34'>gnu packages: Clean up synopses and descriptions.</a><span class='msg-avail'>...<span class='msg-tooltip'>* gnu/packages/admin.scm, gnu/packages/algebra.scm, gnu/packages/audio.scm,
  gnu/packages/backup.scm, gnu/packages/base.scm, gnu/packages/bittorrent.scm,
  gnu/packages/code.scm, gnu/packages/compression.scm,
  gnu/packages/databases.scm, gnu/packages/enchant.scm,
  gnu/packages/firmware.scm, gnu/packages/fonts.scm,
  gnu/packages/freedesktop.scm, gnu/packages/games.scm, gnu/packages/gd.scm,
  gnu/packages/gl.scm, gnu/packages/gnome.scm, gnu/packages/gsasl.scm,
  gnu/packages/gstreamer.scm, gnu/packages/gtk.scm, gnu/packages/guile.scm,
  gnu/packages/haskell.scm, gnu/packages/language.scm,
  gnu/packages/lesstif.scm, gnu/packages/libreoffice.scm,
  gnu/packages/linux.scm, gnu/packages/llvm.scm, gnu/packages/maths.scm,
  gnu/packages/mcrypt.scm, gnu/packages/mit-krb5.scm, gnu/packages/mp3.scm,
  gnu/packages/ncdu.scm, gnu/packages/networking.scm, gnu/packages/ntp.scm,
  gnu/packages/ocaml.scm, gnu/packages/openbox.scm, gnu/packages/pdf.scm,
  gnu/packages/perl.scm, gnu/packages/pretty-print.scm,
  gnu/packages/pulseaudio.scm, gnu/packages/python.scm,
  gnu/packages/rdesktop.scm, gnu/packages/rdf.scm, gnu/packages/ruby.scm,
  gnu/packages/slang.scm, gnu/packages/slim.scm, gnu/packages/telephony.scm,
  gnu/packages/tls.scm, gnu/packages/tmux.scm, gnu/packages/tre.scm,
  gnu/packages/unrtf.scm, gnu/packages/version-control.scm,
  gnu/packages/vpn.scm, gnu/packages/web.scm, gnu/packages/wget.scm,
  gnu/packages/xdisorg.scm, gnu/packages/xfce.scm, gnu/packages/xiph.scm:
  Fix typos.  Trim long lines.  Add missing periods in the end of sentences.
  Use double spaces between sentences.  Remove trailing whitespaces.
</span></span></td><td>Alex Kost</td></tr>