83be9e
From 980da43d8d388a67cac505e734423b2a5aa4cede Mon Sep 17 00:00:00 2001
83be9e
From: Richard Hughes <richard@hughsie.com>
83be9e
Date: Mon, 19 Sep 2016 10:03:36 +0100
83be9e
Subject: [PATCH] CVE-2016-1867
83be9e
83be9e
---
83be9e
 src/libjasper/jpc/jpc_t2cod.c | 2 +-
83be9e
 1 file changed, 1 insertion(+), 1 deletion(-)
83be9e
83be9e
diff --git a/src/libjasper/jpc/jpc_t2cod.c b/src/libjasper/jpc/jpc_t2cod.c
83be9e
index e734900..b80d332 100644
83be9e
--- a/src/libjasper/jpc/jpc_t2cod.c
83be9e
+++ b/src/libjasper/jpc/jpc_t2cod.c
83be9e
@@ -429,7 +429,7 @@ static int jpc_pi_nextcprl(register jpc_pi_t *pi)
83be9e
 	}
83be9e
 
83be9e
 	for (pi->compno = pchg->compnostart, pi->picomp =
83be9e
-	  &pi->picomps[pi->compno]; pi->compno < JAS_CAST(int, pchg->compnoend); ++pi->compno,
83be9e
+	  &pi->picomps[pi->compno]; pi->compno < JAS_CAST(int, pchg->compnoend) && pi->compno < pi->numcomps; ++pi->compno,
83be9e
 	  ++pi->picomp) {
83be9e
 		pirlvl = pi->picomp->pirlvls;
83be9e
 		pi->xstep = pi->picomp->hsamp * (1 << (pirlvl->prcwidthexpn +