openjpeg: Set proper upper bound for an array in opj_pi_update_decode_poc().

third_party/libopenjpeg20/pi.c

 /*
  * The copyright in this software is being made available under the 2-clauses 
  * BSD License, included below. This software may be subject to other third 
  * party and contributor rights, including patent rights, and no such rights
  * are granted under this license.
  *
  * Copyright (c) 2002-2014, Universite catholique de Louvain (UCL), Belgium
  * Copyright (c) 2002-2014, Professor Benoit Macq
  * Copyright (c) 2001-2003, David Janssens
  * Copyright (c) 2002-2003, Yannick Verschueren
@@ skipping 1010 matching lines @@
         for     (pino = 0;pino<l_bound;++pino) {
                 l_current_pi->poc.prg = l_current_poc->prg; /* Progression Order #0 */
                 l_current_pi->first = 1;
 
                 l_current_pi->poc.resno0 = l_current_poc->resno0; /* Resolution Level Index #0 (Start) */
                 l_current_pi->poc.compno0 = l_current_poc->compno0; /* Component Index #0 (Start) */
                 l_current_pi->poc.layno0 = 0;
                 l_current_pi->poc.precno0 = 0;
                 l_current_pi->poc.resno1 = l_current_poc->resno1; /* Resolution Level Index #0 (End) */
                 l_current_pi->poc.compno1 = l_current_poc->compno1; /* Component Index #0 (End) */
-                l_current_pi->poc.layno1 = l_current_poc->layno1; /* Layer Index #0 (End) */
+                l_current_pi->poc.layno1 = opj_uint_min(l_current_poc->layno1, p_tcp->numlayers); /* Layer Index #0 (End) */
                 l_current_pi->poc.precno1 = p_max_precision;
                 ++l_current_pi;
                 ++l_current_poc;
         }
 }
 
 static void opj_pi_update_decode_not_poc (opj_pi_iterator_t * p_pi,
                                    opj_tcp_t * p_tcp,
                                    OPJ_UINT32 p_max_precision,
                                    OPJ_UINT32 p_max_res)
@@ skipping 842 matching lines @@
                 case OPJ_PCRL:
                         return opj_pi_next_pcrl(pi);
                 case OPJ_CPRL:
                         return opj_pi_next_cprl(pi);
                 case OPJ_PROG_UNKNOWN:
                         return OPJ_FALSE;
         }
         
         return OPJ_FALSE;
 }