diff --git a/ChangeLog.md b/ChangeLog.md index 6eb06f0e..9084bee0 100644 --- a/ChangeLog.md +++ b/ChangeLog.md @@ -1,3 +1,13 @@ +2.1 post-beta +============= + +### Significant changes relative to 2.1 beta1 + +1. Fixed a regression introduced by 2.1 beta1[6(b)] whereby attempting to +decompress certain progressive JPEG images with one or more component planes of +width 8 or less caused a buffer overrun. + + 2.0.90 (2.1 beta1) ================== diff --git a/jdcoefct.c b/jdcoefct.c index 699a4809..a3c6d4e8 100644 --- a/jdcoefct.c +++ b/jdcoefct.c @@ -587,7 +587,7 @@ decompress_smooth_data(j_decompress_ptr cinfo, JSAMPIMAGE output_buf) DC19 = (int)next_block_row[1][0]; DC24 = (int)next_next_block_row[1][0]; } - if (block_num < last_block_column - 1) { + if (block_num + 1 < last_block_column) { DC05 = (int)prev_prev_block_row[2][0]; DC10 = (int)prev_block_row[2][0]; DC15 = (int)buffer_ptr[2][0];