tree 72a8824f7643989d98ae364e472ac49e1270a92e
parent 7b68764905173ecb149b518943c32a27fd345d68
author DRC <information@libjpeg-turbo.org> 1607361169 -0600
committer DRC <information@libjpeg-turbo.org> 1607367086 -0600

decompress_smooth_data(): Fix another uninit. read

Regression introduced by 42825b68d570fb07fe820ac62ad91017e61e9a25

The test case
https://user-images.githubusercontent.com/3491627/101376530-fde56180-38b0-11eb-938d-734119a5b5ba.jpg
is a malformed progressive JPEG image containing an interleaved Y/Cb/Cr
DC scan followed by two non-interleaved Y DC scans.  Thus, the
prev_coef_bits[] array was initialized for the Y component but not the
other components, the uninitialized values for Cb and Cr were
transferred to the prev_coef_bits_latch[] array in smoothing_ok(), and
because cinfo->master->last_good_iMCU_row was 0,
decompress_smooth_data() read those uninitialized values when attempting
to smooth the second iMCU row.

Possibly fixes #478