reader spiff: fix skip dir marker with invalid len

MartinPulec · MartinPulec · commit e048c99f5a1c · 2025-11-19T08:13:51.000+01:00
diff --git a/src/gpujpeg_reader.c b/src/gpujpeg_reader.c
@@ -450,7 +450,7 @@ gpujpeg_reader_read_spiff_directory(uint8_t** image, struct gpujpeg_reader *read
 {
     if ( length < 8 ) { // ELEN at least 8
         ERROR_MSG("APP8 SPIFF directory too short (%d bytes)\n", length);
-        image += length - 2;
+        *image += length - 2;
         return -1;
     }
     uint32_t tag = gpujpeg_reader_read_4byte(*image);

Original file line number	Diff line number	Diff line change
`@@ -450,7 +450,7 @@ gpujpeg_reader_read_spiff_directory(uint8_t** image, struct gpujpeg_reader *read`
`450`	`450`	`{`
`451`	`451`	`if ( length < 8 ) { // ELEN at least 8`
`452`	`452`	`ERROR_MSG("APP8 SPIFF directory too short (%d bytes)\n", length);`
`453`		`- image += length - 2;`
	`453`	`+ *image += length - 2;`
`454`	`454`	`return -1;`
`455`	`455`	`}`
`456`	`456`	`uint32_t tag = gpujpeg_reader_read_4byte(*image);`