Fix CVE-2016-1867 (Out-of-bounds read in jpc_pi_nextcprl()).

Copied from SUSE.

https://bugzilla.suse.com/show_bug.cgi?id=961886
https://bugzilla.redhat.com/show_bug.cgi?id=1298135

--- jasper-1.900.1/src/libjasper/jpc/jpc_t2cod.c	2007-01-19 22:43:07.000000000 +0100
+++ jasper-1.900.1/src/libjasper/jpc/jpc_t2cod.c	2016-01-14 14:22:24.569056412 +0100
@@ -429,7 +429,7 @@
 	}
 
 	for (pi->compno = pchg->compnostart, pi->picomp =
-	  &pi->picomps[pi->compno]; pi->compno < JAS_CAST(int, pchg->compnoend); ++pi->compno,
+	  &pi->picomps[pi->compno]; pi->compno < JAS_CAST(int, pchg->compnoend) && pi->compno < pi->numcomps; ++pi->compno,
 	  ++pi->picomp) {
 		pirlvl = pi->picomp->pirlvls;
 		pi->xstep = pi->picomp->hsamp * (1 << (pirlvl->prcwidthexpn +
'selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=8ba50751922be3ed88d9ec9192a21654f66ff8df'>refs</a><a class='active' href='/guix/log/gnu/bootloader.scm'>log</a><a href='/guix/tree/gnu/bootloader.scm?id=8ba50751922be3ed88d9ec9192a21654f66ff8df'>tree</a><a href='/guix/commit/gnu/bootloader.scm?id=8ba50751922be3ed88d9ec9192a21654f66ff8df'>commit</a><a href='/guix/diff/gnu/bootloader.scm?id=8ba50751922be3ed88d9ec9192a21654f66ff8df'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/bootloader.scm'>
<input type='hidden' name='id' value='8ba50751922be3ed88d9ec9192a21654f66ff8df'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=8ba50751922be3ed88d9ec9192a21654f66ff8df'>root</a>/<a href='/guix/log/gnu?id=8ba50751922be3ed88d9ec9192a21654f66ff8df'>gnu</a>/<a href='/guix/log/gnu/bootloader.scm?id=8ba50751922be3ed88d9ec9192a21654f66ff8df'>bootloader.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/bootloader.scm?id=8ba50751922be3ed88d9ec9192a21654f66ff8df&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2022-08-30 08:51:12 +0200'>2022-08-30</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=93ed34977eba26fbb74881bbb3d9af9b3118a663'>bootloader: Wrap lines.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>
<tr><td><span title='2022-08-30 08:50:44 +0200'>2022-08-30</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=f126f23b132148192b2c9a89032a5831af0b3c52'>bootloader: Add device-tree-support? option.</a><span class='msg-avail'>...</span></td><td>Reza Alizadeh Majd</td></tr>
<tr><td><span title='2022-08-28 23:37:28 +0200'>2022-08-28</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=0811d2cb8dff5de9f535e14726c9874ec2f4a96c'>bootloader: Convert device in menu-entry to proper sexp.</a><span class='msg-avail'>...</span></td><td>Josselin Poiret</td></tr>
<tr><td><span title='2022-08-21 02:00:00 +0200'>2022-08-21</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=91b112b8dd28007db9a6f43dd65457e6763b486f'>bootloader: Remove expired export.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2021-11-17 23:05:58 +0100'>2021-11-17</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=7c4142628a397f7863f346635591dbe92b667b45'>gnu: system: Improve location of some configuration warnings.</a><span class='msg-avail'>...</span></td><td>Josselin Poiret</td></tr>
<tr><td><span title='2021-08-30 14:22:35 +0200'>2021-08-30</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=baf4272df2350a40bfa198f5cdb42e707e32ad71'>bootloader: Report location of the deprecated 'target' field.</a><span class='msg-avail'>...</span></td><td>Ludovic Courtès</td></tr>
<tr><td><span title='2021-08-29 01:05:26 -0400'>2021-08-29</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=2ca982ff41270288913ad6b7d5d9e1cad87b06d9'>gnu: bootloader: Support multiple targets.</a><span class='msg-avail'>...</span></td><td>Maxim Cournoyer</td></tr>
<tr><td><span title='2020-11-17 16:03:03 +0100'>2020-11-17</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=ede4117f7f18e118003f2599f5c8e985dfbdf9a5'>gnu: bootloader: efi-bootloader-chain: Allow multiple HOOKS.</a><span class='msg-avail'>...</span></td><td>Stefan</td></tr>
<tr><td><span title='2020-11-16 10:33:18 +0100'>2020-11-16</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=74eeb11daee906cb012f10b6bb3afd254f9ea5c2'>gnu: bootloader: Support chain loading to an EFI bootloader.</a><span class='msg-avail'>...</span></td><td>Stefan</td></tr>
<tr><td><span title='2020-06-08 13:51:18 +0200'>2020-06-08</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=21acd8d6c11b85d06c82b168807b35cb7d2d0adf'>bootloader: Extend `&lt;menu-entry&gt;' for multiboot.</a><span class='msg-avail'>...</span></td><td>Jan (janneke) Nieuwenhuizen</td></tr>
<tr><td><span title='2020-05-29 08:37:13 +0200'>2020-05-29</span></td><td><a href='/guix/commit/gnu/bootloader.scm?id=7feefb3b82186be382725ac2d6b7e9f8953e4a83'>bootloader: Add 'disk-image-installer'.</a><span class='msg-avail'>...</span></td><td>Mathieu Othacehe</td></tr>