diff -up libjpeg-turbo-1.5.3-build/libjpeg-turbo-1.5.3/rdppm.c.CVE-2020-13790p2of3 libjpeg-turbo-1.5.3-build/libjpeg-turbo-1.5.3/rdppm.c --- libjpeg-turbo-1.5.3-build/libjpeg-turbo-1.5.3/rdppm.c.CVE-2020-13790p2of3 2025-05-06 17:38:26.175241021 +0200 +++ libjpeg-turbo-1.5.3-build/libjpeg-turbo-1.5.3/rdppm.c 2025-05-06 17:38:26.177038002 +0200 @@ -116,11 +116,10 @@ read_pbm_integer (j_compress_ptr cinfo, while ((ch = pbm_getc(infile)) >= '0' && ch <= '9') { val *= 10; val += ch - '0'; + if (val > maxval) + ERREXIT(cinfo, JERR_PPM_OUTOFRANGE); } - if (val > maxval) - ERREXIT(cinfo, JERR_PPM_OUTOFRANGE); - return val; }