Follow-on bug to bug 15778. My original patch had an oversight; I didn't catch the case where an image had an excessively large frame with a nonzero Y-offset, which could still have caused a fault. Simple patch coming shortly.
Created attachment 17133 [details] patch v1 Easy fix.
Comment on attachment 17133 [details] patch v1 r=me
Landed in r27642.