CLM: Check ImageProcessor bounds before copying pixels