Further protect against invalid Huffman codes

git-svn-id: svn+ssh://svn.code.sf.net/p/libjpeg-turbo/code/trunk@314 632fc199-4ca6-4c93-a231-07263d6284db

ChangeLog.txt

@@ -27,6 +27,8 @@ decompressor to output planar YUV images.
 [9] Added an extended version of tjDecompressHeader() to TurboJPEG/OSS which
 allows the caller to determine the type of subsampling used in a JPEG image.
 
+[10] Added further protections against invalid Huffman codes.
+
 
 Significant changes since 1.0.0
 ===============================

jdhuff.c

@@ -660,7 +660,7 @@ decode_mcu_slow (j_decompress_ptr cinfo, JBLOCKROW *MCU_data)
       symbol |= GET_BITS(1); \
       size++; \
     } \
-    symbol = htbl->pub->huffval[ (int) (symbol + htbl->valoffset[size]) ]; \
+    symbol = htbl->pub->huffval[ (int) (symbol + htbl->valoffset[size]) & 0xFF ]; \
   } \
 }