can we talk about fmt/42, fmt/43 and fmt/44?
By Jay Gattuso on 26 January 2012 - 9:57pmIn a relatively recent signature update, the fmt/44 signature was updated to in allow some data after the stated EOF marker (ff d9).
In the case that started this off, a number of fmt/44 jpg files were found that had a couple of bytes after what DROID looks for as an absolute EOF.
I had a look into the specs for jpg, trying to unravel this story - were the extra bytes useful to someone? were we missing something by ignoring these bytes?

