Line | Branch | Exec | Source |
---|---|---|---|
1 | /* | ||
2 | * Electronic Arts TGV Video Decoder | ||
3 | * Copyright (c) 2007-2008 Peter Ross | ||
4 | * | ||
5 | * This file is part of FFmpeg. | ||
6 | * | ||
7 | * FFmpeg is free software; you can redistribute it and/or | ||
8 | * modify it under the terms of the GNU Lesser General Public | ||
9 | * License as published by the Free Software Foundation; either | ||
10 | * version 2.1 of the License, or (at your option) any later version. | ||
11 | * | ||
12 | * FFmpeg is distributed in the hope that it will be useful, | ||
13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of | ||
14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | ||
15 | * Lesser General Public License for more details. | ||
16 | * | ||
17 | * You should have received a copy of the GNU Lesser General Public | ||
18 | * License along with FFmpeg; if not, write to the Free Software | ||
19 | * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA | ||
20 | */ | ||
21 | |||
22 | /** | ||
23 | * @file | ||
24 | * Electronic Arts TGV Video Decoder | ||
25 | * by Peter Ross (pross@xvid.org) | ||
26 | * | ||
27 | * Technical details here: | ||
28 | * http://wiki.multimedia.cx/index.php?title=Electronic_Arts_TGV | ||
29 | */ | ||
30 | |||
31 | #include "libavutil/mem.h" | ||
32 | |||
33 | #define BITSTREAM_READER_LE | ||
34 | #include "avcodec.h" | ||
35 | #include "get_bits.h" | ||
36 | #include "codec_internal.h" | ||
37 | #include "decode.h" | ||
38 | |||
39 | #define EA_PREAMBLE_SIZE 8 | ||
40 | #define kVGT_TAG MKTAG('k', 'V', 'G', 'T') | ||
41 | |||
42 | typedef struct TgvContext { | ||
43 | AVCodecContext *avctx; | ||
44 | AVFrame *last_frame; | ||
45 | uint8_t *frame_buffer; | ||
46 | int width,height; | ||
47 | uint32_t palette[AVPALETTE_COUNT]; | ||
48 | |||
49 | int (*mv_codebook)[2]; | ||
50 | uint8_t (*block_codebook)[16]; | ||
51 | int num_mvs; ///< current length of mv_codebook | ||
52 | int num_blocks_packed; ///< current length of block_codebook | ||
53 | } TgvContext; | ||
54 | |||
55 | 6 | static av_cold int tgv_decode_init(AVCodecContext *avctx) | |
56 | { | ||
57 | 6 | TgvContext *s = avctx->priv_data; | |
58 | 6 | s->avctx = avctx; | |
59 | 6 | avctx->framerate = (AVRational){ 15, 1 }; | |
60 | 6 | avctx->pix_fmt = AV_PIX_FMT_PAL8; | |
61 | |||
62 | 6 | s->last_frame = av_frame_alloc(); | |
63 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
|
6 | if (!s->last_frame) |
64 | ✗ | return AVERROR(ENOMEM); | |
65 | |||
66 | 6 | return 0; | |
67 | } | ||
68 | |||
69 | /** | ||
70 | * Unpack buffer | ||
71 | * @return 0 on success, -1 on critical buffer underflow | ||
72 | */ | ||
73 | 11 | static int unpack(const uint8_t *src, const uint8_t *src_end, | |
74 | uint8_t *dst, int width, int height) | ||
75 | { | ||
76 | 11 | uint8_t *dst_end = dst + width*height; | |
77 | int size, size1, size2, offset, run; | ||
78 | 11 | uint8_t *dst_start = dst; | |
79 | |||
80 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 11 times.
|
11 | if (src[0] & 0x01) |
81 | ✗ | src += 5; | |
82 | else | ||
83 | 11 | src += 2; | |
84 | |||
85 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 11 times.
|
11 | if (src_end - src < 3) |
86 | ✗ | return AVERROR_INVALIDDATA; | |
87 | 11 | size = AV_RB24(src); | |
88 | 11 | src += 3; | |
89 | |||
90 |
3/4✓ Branch 0 taken 102018 times.
✓ Branch 1 taken 11 times.
✓ Branch 2 taken 102018 times.
✗ Branch 3 not taken.
|
102029 | while (size > 0 && src < src_end) { |
91 | |||
92 | /* determine size1 and size2 */ | ||
93 | 102018 | size1 = (src[0] & 3); | |
94 |
2/2✓ Branch 0 taken 49446 times.
✓ Branch 1 taken 52572 times.
|
102018 | if (src[0] & 0x80) { // 1 |
95 |
2/2✓ Branch 0 taken 15234 times.
✓ Branch 1 taken 34212 times.
|
49446 | if (src[0] & 0x40 ) { // 11 |
96 |
2/2✓ Branch 0 taken 10712 times.
✓ Branch 1 taken 4522 times.
|
15234 | if (src[0] & 0x20) { // 111 |
97 |
2/2✓ Branch 0 taken 10704 times.
✓ Branch 1 taken 8 times.
|
10712 | if (src[0] < 0xFC) // !(111111) |
98 | 10704 | size1 = (((src[0] & 31) + 1) << 2); | |
99 | 10712 | src++; | |
100 | 10712 | size2 = 0; | |
101 | } else { // 110 | ||
102 | 4522 | offset = ((src[0] & 0x10) << 12) + AV_RB16(&src[1]) + 1; | |
103 | 4522 | size2 = ((src[0] & 0xC) << 6) + src[3] + 5; | |
104 | 4522 | src += 4; | |
105 | } | ||
106 | } else { // 10 | ||
107 | 34212 | size1 = ((src[1] & 0xC0) >> 6); | |
108 | 34212 | offset = (AV_RB16(&src[1]) & 0x3FFF) + 1; | |
109 | 34212 | size2 = (src[0] & 0x3F) + 4; | |
110 | 34212 | src += 3; | |
111 | } | ||
112 | } else { // 0 | ||
113 | 52572 | offset = ((src[0] & 0x60) << 3) + src[1] + 1; | |
114 | 52572 | size2 = ((src[0] & 0x1C) >> 2) + 3; | |
115 | 52572 | src += 2; | |
116 | } | ||
117 | |||
118 | |||
119 | /* fetch strip from src */ | ||
120 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 102018 times.
|
102018 | if (size1 > src_end - src) |
121 | ✗ | break; | |
122 | |||
123 |
2/2✓ Branch 0 taken 35301 times.
✓ Branch 1 taken 66717 times.
|
102018 | if (size1 > 0) { |
124 | 35301 | size -= size1; | |
125 | 35301 | run = FFMIN(size1, dst_end - dst); | |
126 | 35301 | memcpy(dst, src, run); | |
127 | 35301 | dst += run; | |
128 | 35301 | src += run; | |
129 | } | ||
130 | |||
131 |
2/2✓ Branch 0 taken 91306 times.
✓ Branch 1 taken 10712 times.
|
102018 | if (size2 > 0) { |
132 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 91306 times.
|
91306 | if (dst - dst_start < offset) |
133 | ✗ | return 0; | |
134 | 91306 | size -= size2; | |
135 | 91306 | run = FFMIN(size2, dst_end - dst); | |
136 | 91306 | av_memcpy_backptr(dst, offset, run); | |
137 | 91306 | dst += run; | |
138 | } | ||
139 | } | ||
140 | |||
141 | 11 | return 0; | |
142 | } | ||
143 | |||
144 | /** | ||
145 | * Decode inter-frame | ||
146 | * @return 0 on success, -1 on critical buffer underflow | ||
147 | */ | ||
148 | 79 | static int tgv_decode_inter(TgvContext *s, AVFrame *frame, | |
149 | const uint8_t *buf, const uint8_t *buf_end) | ||
150 | { | ||
151 | int num_mvs; | ||
152 | int num_blocks_raw; | ||
153 | int num_blocks_packed; | ||
154 | int vector_bits; | ||
155 | int i,j,x,y; | ||
156 | GetBitContext gb; | ||
157 | int mvbits; | ||
158 | const uint8_t *blocks_raw; | ||
159 | |||
160 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 79 times.
|
79 | if(buf_end - buf < 12) |
161 | ✗ | return AVERROR_INVALIDDATA; | |
162 | |||
163 | 79 | num_mvs = AV_RL16(&buf[0]); | |
164 | 79 | num_blocks_raw = AV_RL16(&buf[2]); | |
165 | 79 | num_blocks_packed = AV_RL16(&buf[4]); | |
166 | 79 | vector_bits = AV_RL16(&buf[6]); | |
167 | 79 | buf += 12; | |
168 | |||
169 |
2/4✓ Branch 0 taken 79 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 79 times.
|
79 | if (vector_bits > MIN_CACHE_BITS || !vector_bits) { |
170 | ✗ | av_log(s->avctx, AV_LOG_ERROR, | |
171 | "Invalid value for motion vector bits: %d\n", vector_bits); | ||
172 | ✗ | return AVERROR_INVALIDDATA; | |
173 | } | ||
174 | |||
175 | /* allocate codebook buffers as necessary */ | ||
176 |
2/2✓ Branch 0 taken 8 times.
✓ Branch 1 taken 71 times.
|
79 | if (num_mvs > s->num_mvs) { |
177 | 8 | int err = av_reallocp_array(&s->mv_codebook, num_mvs, sizeof(*s->mv_codebook)); | |
178 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 8 times.
|
8 | if (err < 0) { |
179 | ✗ | s->num_mvs = 0; | |
180 | ✗ | return err; | |
181 | } | ||
182 | 8 | s->num_mvs = num_mvs; | |
183 | } | ||
184 | |||
185 |
2/2✓ Branch 0 taken 7 times.
✓ Branch 1 taken 72 times.
|
79 | if (num_blocks_packed > s->num_blocks_packed) { |
186 | int err; | ||
187 |
1/2✗ Branch 1 not taken.
✓ Branch 2 taken 7 times.
|
7 | if ((err = av_reallocp(&s->block_codebook, num_blocks_packed * 16)) < 0) { |
188 | ✗ | s->num_blocks_packed = 0; | |
189 | ✗ | return err; | |
190 | } | ||
191 | 7 | s->num_blocks_packed = num_blocks_packed; | |
192 | } | ||
193 | |||
194 | /* read motion vectors */ | ||
195 | 79 | mvbits = (num_mvs * 2 * 10 + 31) & ~31; | |
196 | |||
197 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 79 times.
|
79 | if (buf_end - buf < (mvbits>>3) + 16*num_blocks_raw + 8*num_blocks_packed) |
198 | ✗ | return AVERROR_INVALIDDATA; | |
199 | |||
200 | 79 | init_get_bits(&gb, buf, mvbits); | |
201 |
2/2✓ Branch 0 taken 13374 times.
✓ Branch 1 taken 79 times.
|
13453 | for (i = 0; i < num_mvs; i++) { |
202 | 13374 | s->mv_codebook[i][0] = get_sbits(&gb, 10); | |
203 | 13374 | s->mv_codebook[i][1] = get_sbits(&gb, 10); | |
204 | } | ||
205 | 79 | buf += mvbits >> 3; | |
206 | |||
207 | /* note ptr to uncompressed blocks */ | ||
208 | 79 | blocks_raw = buf; | |
209 | 79 | buf += num_blocks_raw * 16; | |
210 | |||
211 | /* read compressed blocks */ | ||
212 | 79 | init_get_bits(&gb, buf, (buf_end - buf) << 3); | |
213 |
2/2✓ Branch 0 taken 31423 times.
✓ Branch 1 taken 79 times.
|
31502 | for (i = 0; i < num_blocks_packed; i++) { |
214 | int tmp[4]; | ||
215 |
2/2✓ Branch 0 taken 125692 times.
✓ Branch 1 taken 31423 times.
|
157115 | for (j = 0; j < 4; j++) |
216 | 125692 | tmp[j] = get_bits(&gb, 8); | |
217 |
2/2✓ Branch 0 taken 502768 times.
✓ Branch 1 taken 31423 times.
|
534191 | for (j = 0; j < 16; j++) |
218 | 502768 | s->block_codebook[i][15-j] = tmp[get_bits(&gb, 2)]; | |
219 | } | ||
220 | |||
221 | 79 | if (get_bits_left(&gb) < vector_bits * | |
222 |
2/2✓ Branch 0 taken 1 times.
✓ Branch 1 taken 78 times.
|
79 | (s->avctx->height / 4) * (s->avctx->width / 4)) |
223 | 1 | return AVERROR_INVALIDDATA; | |
224 | |||
225 | /* read vectors and build frame */ | ||
226 |
2/2✓ Branch 0 taken 4340 times.
✓ Branch 1 taken 78 times.
|
4418 | for (y = 0; y < s->avctx->height / 4; y++) |
227 |
2/2✓ Branch 0 taken 347200 times.
✓ Branch 1 taken 4340 times.
|
351540 | for (x = 0; x < s->avctx->width / 4; x++) { |
228 | 347200 | unsigned int vector = get_bits(&gb, vector_bits); | |
229 | const uint8_t *src; | ||
230 | ptrdiff_t src_stride; | ||
231 | |||
232 |
2/2✓ Branch 0 taken 293708 times.
✓ Branch 1 taken 53492 times.
|
347200 | if (vector < num_mvs) { |
233 | 293708 | int mx = x * 4 + s->mv_codebook[vector][0]; | |
234 | 293708 | int my = y * 4 + s->mv_codebook[vector][1]; | |
235 | |||
236 |
3/6✓ Branch 0 taken 293708 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 293708 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 293708 times.
✗ Branch 5 not taken.
|
293708 | if (mx < 0 || mx + 4 > s->avctx->width || |
237 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 293708 times.
|
293708 | my < 0 || my + 4 > s->avctx->height) { |
238 | ✗ | av_log(s->avctx, AV_LOG_ERROR, "MV %d %d out of picture\n", mx, my); | |
239 | ✗ | continue; | |
240 | } | ||
241 | |||
242 | 293708 | src = s->last_frame->data[0] + mx + my * s->last_frame->linesize[0]; | |
243 | 293708 | src_stride = s->last_frame->linesize[0]; | |
244 | } else { | ||
245 | 53492 | int offset = vector - num_mvs; | |
246 |
2/2✓ Branch 0 taken 5411 times.
✓ Branch 1 taken 48081 times.
|
53492 | if (offset < num_blocks_raw) |
247 | 5411 | src = blocks_raw + 16*offset; | |
248 |
1/2✓ Branch 0 taken 48081 times.
✗ Branch 1 not taken.
|
48081 | else if (offset - num_blocks_raw < num_blocks_packed) |
249 | 48081 | src = s->block_codebook[offset - num_blocks_raw]; | |
250 | else | ||
251 | ✗ | continue; | |
252 | 53492 | src_stride = 4; | |
253 | } | ||
254 | |||
255 |
2/2✓ Branch 0 taken 1388800 times.
✓ Branch 1 taken 347200 times.
|
1736000 | for (j = 0; j < 4; j++) |
256 |
2/2✓ Branch 0 taken 5555200 times.
✓ Branch 1 taken 1388800 times.
|
6944000 | for (i = 0; i < 4; i++) |
257 | 5555200 | frame->data[0][(y * 4 + j) * frame->linesize[0] + (x * 4 + i)] = | |
258 | 5555200 | src[j * src_stride + i]; | |
259 | } | ||
260 | |||
261 | 78 | return 0; | |
262 | } | ||
263 | |||
264 | 90 | static int tgv_decode_frame(AVCodecContext *avctx, AVFrame *frame, | |
265 | int *got_frame, AVPacket *avpkt) | ||
266 | { | ||
267 | 90 | const uint8_t *buf = avpkt->data; | |
268 | 90 | int buf_size = avpkt->size; | |
269 | 90 | TgvContext *s = avctx->priv_data; | |
270 | 90 | const uint8_t *buf_end = buf + buf_size; | |
271 | int chunk_type, ret; | ||
272 | |||
273 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 90 times.
|
90 | if (buf_end - buf < EA_PREAMBLE_SIZE) |
274 | ✗ | return AVERROR_INVALIDDATA; | |
275 | |||
276 | 90 | chunk_type = AV_RL32(&buf[0]); | |
277 | 90 | buf += EA_PREAMBLE_SIZE; | |
278 | |||
279 |
2/2✓ Branch 0 taken 11 times.
✓ Branch 1 taken 79 times.
|
90 | if (chunk_type == kVGT_TAG) { |
280 | int pal_count, i; | ||
281 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 11 times.
|
11 | if(buf_end - buf < 12) { |
282 | ✗ | av_log(avctx, AV_LOG_WARNING, "truncated header\n"); | |
283 | ✗ | return AVERROR_INVALIDDATA; | |
284 | } | ||
285 | |||
286 | 11 | s->width = AV_RL16(&buf[0]); | |
287 | 11 | s->height = AV_RL16(&buf[2]); | |
288 |
3/4✓ Branch 0 taken 7 times.
✓ Branch 1 taken 4 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 7 times.
|
11 | if (s->avctx->width != s->width || s->avctx->height != s->height) { |
289 | 4 | av_freep(&s->frame_buffer); | |
290 | 4 | av_frame_unref(s->last_frame); | |
291 |
1/2✗ Branch 1 not taken.
✓ Branch 2 taken 4 times.
|
4 | if ((ret = ff_set_dimensions(s->avctx, s->width, s->height)) < 0) |
292 | ✗ | return ret; | |
293 | } | ||
294 | |||
295 | 11 | pal_count = AV_RL16(&buf[6]); | |
296 | 11 | buf += 12; | |
297 |
4/6✓ Branch 0 taken 2816 times.
✓ Branch 1 taken 11 times.
✓ Branch 2 taken 2816 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 2816 times.
✗ Branch 5 not taken.
|
2827 | for(i = 0; i < pal_count && i < AVPALETTE_COUNT && buf_end - buf >= 3; i++) { |
298 | 2816 | s->palette[i] = 0xFFU << 24 | AV_RB24(buf); | |
299 | 2816 | buf += 3; | |
300 | } | ||
301 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 11 times.
|
11 | if (buf_end - buf < 5) { |
302 | ✗ | return AVERROR_INVALIDDATA; | |
303 | } | ||
304 | } | ||
305 | |||
306 |
1/2✗ Branch 1 not taken.
✓ Branch 2 taken 90 times.
|
90 | if ((ret = ff_get_buffer(avctx, frame, AV_GET_BUFFER_FLAG_REF)) < 0) |
307 | ✗ | return ret; | |
308 | |||
309 | 90 | memcpy(frame->data[1], s->palette, AVPALETTE_SIZE); | |
310 | |||
311 |
2/2✓ Branch 0 taken 11 times.
✓ Branch 1 taken 79 times.
|
90 | if (chunk_type == kVGT_TAG) { |
312 | int y; | ||
313 | 11 | frame->flags |= AV_FRAME_FLAG_KEY; | |
314 | 11 | frame->pict_type = AV_PICTURE_TYPE_I; | |
315 | |||
316 |
2/2✓ Branch 0 taken 6 times.
✓ Branch 1 taken 5 times.
|
11 | if (!s->frame_buffer && |
317 |
1/2✗ Branch 1 not taken.
✓ Branch 2 taken 6 times.
|
6 | !(s->frame_buffer = av_mallocz(s->width * s->height))) |
318 | ✗ | return AVERROR(ENOMEM); | |
319 | |||
320 |
1/2✗ Branch 1 not taken.
✓ Branch 2 taken 11 times.
|
11 | if (unpack(buf, buf_end, s->frame_buffer, s->avctx->width, s->avctx->height) < 0) { |
321 | ✗ | av_log(avctx, AV_LOG_WARNING, "truncated intra frame\n"); | |
322 | ✗ | return AVERROR_INVALIDDATA; | |
323 | } | ||
324 |
2/2✓ Branch 0 taken 2400 times.
✓ Branch 1 taken 11 times.
|
2411 | for (y = 0; y < s->height; y++) |
325 | 2400 | memcpy(frame->data[0] + y * frame->linesize[0], | |
326 | 2400 | s->frame_buffer + y * s->width, | |
327 | 2400 | s->width); | |
328 | } else { | ||
329 |
1/2✗ Branch 0 not taken.
✓ Branch 1 taken 79 times.
|
79 | if (!s->last_frame->data[0]) { |
330 | ✗ | av_log(avctx, AV_LOG_WARNING, "inter frame without corresponding intra frame\n"); | |
331 | ✗ | return buf_size; | |
332 | } | ||
333 | 79 | frame->flags &= ~AV_FRAME_FLAG_KEY; | |
334 | 79 | frame->pict_type = AV_PICTURE_TYPE_P; | |
335 |
2/2✓ Branch 1 taken 1 times.
✓ Branch 2 taken 78 times.
|
79 | if (tgv_decode_inter(s, frame, buf, buf_end) < 0) { |
336 | 1 | av_log(avctx, AV_LOG_WARNING, "truncated inter frame\n"); | |
337 | 1 | return AVERROR_INVALIDDATA; | |
338 | } | ||
339 | } | ||
340 | |||
341 |
1/2✗ Branch 1 not taken.
✓ Branch 2 taken 89 times.
|
89 | if ((ret = av_frame_replace(s->last_frame, frame)) < 0) |
342 | ✗ | return ret; | |
343 | |||
344 | 89 | *got_frame = 1; | |
345 | |||
346 | 89 | return buf_size; | |
347 | } | ||
348 | |||
349 | 6 | static av_cold int tgv_decode_end(AVCodecContext *avctx) | |
350 | { | ||
351 | 6 | TgvContext *s = avctx->priv_data; | |
352 | 6 | av_frame_free(&s->last_frame); | |
353 | 6 | av_freep(&s->frame_buffer); | |
354 | 6 | av_freep(&s->mv_codebook); | |
355 | 6 | av_freep(&s->block_codebook); | |
356 | 6 | return 0; | |
357 | } | ||
358 | |||
359 | const FFCodec ff_eatgv_decoder = { | ||
360 | .p.name = "eatgv", | ||
361 | CODEC_LONG_NAME("Electronic Arts TGV video"), | ||
362 | .p.type = AVMEDIA_TYPE_VIDEO, | ||
363 | .p.id = AV_CODEC_ID_TGV, | ||
364 | .priv_data_size = sizeof(TgvContext), | ||
365 | .init = tgv_decode_init, | ||
366 | .close = tgv_decode_end, | ||
367 | FF_CODEC_DECODE_CB(tgv_decode_frame), | ||
368 | .p.capabilities = AV_CODEC_CAP_DR1, | ||
369 | }; | ||
370 |