zstd: Reject blocks where reserved values are not 0

ref: facebook/zstd#3821
klauspost · Nov 15, 2023 · bce5e21 · bce5e21
1 parent 80ba129
commit bce5e21
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/zstd/blockdec.go b/zstd/blockdec.go
@@ -554,6 +554,9 @@ func (b *blockDec) prepareSequences(in []byte, hist *history) (err error) {
 		if debugDecoder {
 			printf("Compression modes: 0b%b", compMode)
 		}
+		if compMode&3 != 0 {
+			return errors.New("corrupt block: reserved bits not zero")
+		}
 		for i := uint(0); i < 3; i++ {
 			mode := seqCompMode((compMode >> (6 - i*2)) & 3)
 			if debugDecoder {