Memory disclosure via unchecked Huffman indexes

Improper bounds handling in libmobi before 0.8 allows remote attackers to read memory or interrupt processing via crafted Mobipocket files. The mobi_parse_huffdic function now verifies that the number of Huffman indexes read matches the declared count and returns a corrupt-data error when counts differ, preventing out-of-buffer access during parsing. Exploitation requires a victim application to process an attacker-supplied ebook; the resulting impact is limited to information disclosure or denial of service in the parsing process.