Fix missing column bug
Detail: In 1/2/4bpp modes the loop could potentially read off the end of the input buffer (causing an abort if the next page isn't mapped in), or cause the rightmost column to be lost. Refactor the loop to count in destination bits to avoid both problems. Admin: Submission for PNG bounty.