out of bounds writes

[setharnold]

openjpeg/src/lib/openmj2/mj2.c

Line 1517 in da5e897

cio_write(cio, tk->urn[urn_num].name[2], 4);

Hello,

Please note that name[2] and name[3] do not exist.

Thanks

    cio_write(cio, tk->urn[urn_num].name[2], 4);
    cio_write(cio, tk->urn[urn_num].name[3], 4);

[mcatanzaro]

This is basically a duplicate of #1078, the other issue is the same thing a few lines lower in the code. And there is more discussion there.