jffs2: Fix memory corruption in jffs2_read_inode_range()