Add Scan Num limitation

Signed-off-by: Wu, Stella <[email protected]>

Author: stellawuintel

decode/tinyjpeg.c

@@ -816,6 +816,8 @@ int tinyjpeg_decode(struct jdec_private *priv)
         vaDestroyConfig(va_dpy, config_id);
         vaDestroyContext(va_dpy, context_id);
 
+        if (scan_num > JPEG_SCAN_MAX)
+            break;
         parse_JFIF(priv, priv->stream);
         if (priv->width[scan_num] == 0 && priv->height[scan_num] == 0)
             break;