This can overread (either before start or beyond end) of the buffer in
Nx1 (i.e. height=1) images.

Fixes mozilla bug 1240080.

(cherry picked from commit 0f88b3f8)
Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>