allocation failure in jp2_colr_getdata

[ResearchReview]

The AddressSanitizer report allocation failure in function jp2_colr_getdata.

Command
jasper --input @@ --output test.bmp --output-format bmp

testcase
POC.zip

==23746==WARNING: AddressSanitizer failed to allocate 0xffffffffffff0004 bytes
==23746==AddressSanitizer's allocator is terminating the process instead of returning 0
==23746==If you don't like this behavior set allocator_may_return_null=1
==23746==AddressSanitizer CHECK failed: /home/hjwang/Tools/llvm-6.0.1/projects/compiler-rt/lib/sanitizer_common/sanitizer_allocator.cc:225 "((0)) != (0)" (0x0, 0x0)
    #0 0x4ede5f in __asan::AsanCheckFailed(char const*, int, char const*, unsigned long long, unsigned long long) /home/hjwang/Tools/llvm-6.0.1/projects/compiler-rt/lib/asan/asan_rtl.cc:69
    #1 0x50add5 in __sanitizer::CheckFailed(char const*, int, char const*, unsigned long long, unsigned long long) /home/hjwang/Tools/llvm-6.0.1/projects/compiler-rt/lib/sanitizer_common/sanitizer_termination.cc:79
    #2 0x4f3c86 in __sanitizer::ReportAllocatorCannotReturnNull() /home/hjwang/Tools/llvm-6.0.1/projects/compiler-rt/lib/sanitizer_common/sanitizer_allocator.cc:225
    #3 0x4f3cc3 in __sanitizer::ReturnNullOrDieOnFailure::OnBadRequest() /home/hjwang/Tools/llvm-6.0.1/projects/compiler-rt/lib/sanitizer_common/sanitizer_allocator.cc:241
    #4 0x424d96 in __asan::asan_malloc(unsigned long, __sanitizer::BufferedStackTrace*) /home/hjwang/Tools/llvm-6.0.1/projects/compiler-rt/lib/asan/asan_allocator.cc:856
    #5 0x4e4944 in malloc /home/hjwang/Tools/llvm-6.0.1/projects/compiler-rt/lib/asan/asan_malloc_linux.cc:89
    #6 0x56d523 in jas_malloc /home/hjwang/Mem_Obj/jasper-version-2.0.14/src/libjasper/base/jas_malloc.c:241:11
    #7 0x56db1d in jas_alloc2 /home/hjwang/Mem_Obj/jasper-version-2.0.14/src/libjasper/base/jas_malloc.c:274:9
    #8 0x6f8483 in jp2_colr_getdata /home/hjwang/Mem_Obj/jasper-version-2.0.14/src/libjasper/jp2/jp2_cod.c:440:22
    #9 0x6fd2f2 in jp2_box_get /home/hjwang/Mem_Obj/jasper-version-2.0.14/src/libjasper/jp2/jp2_cod.c:312:8
    #10 0x59c25f in jp2_decode /home/hjwang/Mem_Obj/jasper-version-2.0.14/src/libjasper/jp2/jp2_dec.c:159:16
    #11 0x557149 in jas_image_decode /home/hjwang/Mem_Obj/jasper-version-2.0.14/src/libjasper/base/jas_image.c:442:16
    #12 0x51db00 in main /home/hjwang/Mem_Obj/jasper-version-2.0.14/src/appl/jasper.c:236:16
    #13 0x7faa193de82f in __libc_start_main /build/glibc-LK5gWL/glibc-2.23/csu/../csu/libc-start.c:291
    #14 0x420738 in _start (/home/hjwang/Mem_Obj/jasper/build/bin/jasper+0x420738)

Similar to #148

[MaxKellermann]

Duplicate of #215, #166 and #175, jasper-maint/jasper#8
Fixed by jasper-maint/jasper@fcbabda in our fork