vp9: read reserved bit in RGB header.

diff --git a/libavcodec/vp9.c b/libavcodec/vp9.c
index 95af94b29ba250dde0c3013a2b66e7c3b44f47ab..e3593e7332cf37dbf9ea1d24217b46122ac01076 100644 (file)
--- a/libavcodec/vp9.c
+++ b/libavcodec/vp9.c
@@ -503,6 +503,10 @@ static enum AVPixelFormat read_colorspace_details(AVCodecContext *ctx)
             s->ss_h = s->ss_v = 1;
             res = pix_fmt_rgb[bits];
             ctx->color_range = AVCOL_RANGE_JPEG;
+            if (get_bits1(&s->gb)) {
+                av_log(ctx, AV_LOG_ERROR, "Reserved bit set in RGB\n");
+                return AVERROR_INVALIDDATA;
+            }
         } else {
             av_log(ctx, AV_LOG_ERROR, "RGB not supported in profile %d\n",
                    ctx->profile);