--- libopenjpeg/t2.c	2007-12-21 13:19:01.000000000 +0300
+++ libopenjpeg/t2.c	2012-09-03 16:53:40.000000000 +0400
@@ -566,6 +566,11 @@ static int t2_decode_packet(opj_t2_t* t2
 #endif /* USE_JPWL */
 				
 				cblk->data = (unsigned char*) opj_realloc(cblk->data, (cblk->len + seg->newlen) * sizeof(unsigned char*));
+
+                                if ((cblk->len + seg->newlen) > 8192) {
+                                        return 0; // OPJ_FALSE
+                                }
+
 				memcpy(cblk->data + cblk->len, c, seg->newlen);
 				if (seg->numpasses == 0) {
 					seg->data = &cblk->data;