FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/exr.c
Date: 2026-03-07 22:03:05
Exec Total Coverage
Lines: 870 1354 64.3%
Functions: 23 31 74.2%
Branches: 476 839 56.7%
Line Branch Exec Source
1 /*
2 * OpenEXR (.exr) image decoder
3 * Copyright (c) 2006 Industrial Light & Magic, a division of Lucas Digital Ltd. LLC
4 * Copyright (c) 2009 Jimmy Christensen
5 *
6 * B44/B44A, Tile, UINT32 added by Jokyo Images support by CNC - French National Center for Cinema
7 *
8 * This file is part of FFmpeg.
9 *
10 * FFmpeg is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU Lesser General Public
12 * License as published by the Free Software Foundation; either
13 * version 2.1 of the License, or (at your option) any later version.
14 *
15 * FFmpeg is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
18 * Lesser General Public License for more details.
19 *
20 * You should have received a copy of the GNU Lesser General Public
21 * License along with FFmpeg; if not, write to the Free Software
22 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
23 */
24
25 /**
26 * @file
27 * OpenEXR decoder
28 * @author Jimmy Christensen
29 *
30 * For more information on the OpenEXR format, visit:
31 * http://openexr.com/
32 */
33
34 #include <float.h>
35 #include <zlib.h>
36
37 #include "libavutil/avassert.h"
38 #include "libavutil/common.h"
39 #include "libavutil/csp.h"
40 #include "libavutil/imgutils.h"
41 #include "libavutil/intfloat.h"
42 #include "libavutil/avstring.h"
43 #include "libavutil/mem.h"
44 #include "libavutil/opt.h"
45 #include "libavutil/float2half.h"
46 #include "libavutil/half2float.h"
47
48 #include "avcodec.h"
49 #include "bytestream.h"
50
51 #if HAVE_BIGENDIAN
52 #include "bswapdsp.h"
53 #endif
54
55 #include "codec_internal.h"
56 #include "decode.h"
57 #include "exrdsp.h"
58 #include "get_bits.h"
59 #include "mathops.h"
60 #include "thread.h"
61
62 enum ExrCompr {
63 EXR_RAW,
64 EXR_RLE,
65 EXR_ZIP1,
66 EXR_ZIP16,
67 EXR_PIZ,
68 EXR_PXR24,
69 EXR_B44,
70 EXR_B44A,
71 EXR_DWAA,
72 EXR_DWAB,
73 EXR_UNKN,
74 };
75
76 enum ExrPixelType {
77 EXR_UINT,
78 EXR_HALF,
79 EXR_FLOAT,
80 EXR_UNKNOWN,
81 };
82
83 enum ExrTileLevelMode {
84 EXR_TILE_LEVEL_ONE,
85 EXR_TILE_LEVEL_MIPMAP,
86 EXR_TILE_LEVEL_RIPMAP,
87 EXR_TILE_LEVEL_UNKNOWN,
88 };
89
90 enum ExrTileLevelRound {
91 EXR_TILE_ROUND_UP,
92 EXR_TILE_ROUND_DOWN,
93 EXR_TILE_ROUND_UNKNOWN,
94 };
95
96 typedef struct HuffEntry {
97 uint8_t len;
98 uint16_t sym;
99 uint32_t code;
100 } HuffEntry;
101
102 typedef struct EXRChannel {
103 int xsub, ysub;
104 enum ExrPixelType pixel_type;
105 } EXRChannel;
106
107 typedef struct EXRTileAttribute {
108 int32_t xSize;
109 int32_t ySize;
110 enum ExrTileLevelMode level_mode;
111 enum ExrTileLevelRound level_round;
112 } EXRTileAttribute;
113
114 typedef struct EXRThreadData {
115 uint8_t *uncompressed_data;
116 int uncompressed_size;
117
118 uint8_t *tmp;
119 int tmp_size;
120
121 uint8_t *bitmap;
122 uint16_t *lut;
123
124 uint8_t *ac_data;
125 unsigned ac_size;
126
127 uint8_t *dc_data;
128 unsigned dc_size;
129
130 uint8_t *rle_data;
131 unsigned rle_size;
132
133 uint8_t *rle_raw_data;
134 unsigned rle_raw_size;
135
136 float block[3][64];
137
138 int ysize, xsize;
139
140 int channel_line_size;
141
142 int run_sym;
143 HuffEntry *he;
144 uint64_t *freq;
145 VLC vlc;
146 } EXRThreadData;
147
148 typedef struct EXRContext {
149 AVClass *class;
150 AVFrame *picture;
151 AVCodecContext *avctx;
152 ExrDSPContext dsp;
153
154 #if HAVE_BIGENDIAN
155 BswapDSPContext bbdsp;
156 #endif
157
158 enum ExrCompr compression;
159 enum ExrPixelType pixel_type;
160 int channel_offsets[4]; // 0 = red, 1 = green, 2 = blue and 3 = alpha
161 const AVPixFmtDescriptor *desc;
162
163 int w, h;
164 uint32_t sar;
165 int32_t xmax, xmin;
166 int32_t ymax, ymin;
167 uint32_t xdelta, ydelta;
168
169 int scan_lines_per_block;
170
171 EXRTileAttribute tile_attr; /* header data attribute of tile */
172 int is_tile; /* 0 if scanline, 1 if tile */
173 int is_multipart;
174 int current_part;
175
176 int is_luma;/* 1 if there is an Y plane */
177
178 #define M(chr) (1<<chr - 'A')
179 int has_channel; ///< combination of flags representing the channel codes A-Z
180
181 GetByteContext gb;
182 const uint8_t *buf;
183 int buf_size;
184
185 EXRChannel *channels;
186 int nb_channels;
187 int current_channel_offset;
188 uint32_t chunk_count;
189
190 EXRThreadData *thread_data;
191
192 const char *layer;
193 int selected_part;
194
195
196 uint8_t *offset_table;
197
198 #if FF_API_EXR_GAMMA
199 enum AVColorTransferCharacteristic apply_trc_type;
200 float gamma;
201 uint16_t gamma_table[65536];
202 #endif
203
204 Float2HalfTables f2h_tables;
205 Half2FloatTables h2f_tables;
206 } EXRContext;
207
208 12853 static int zip_uncompress(const EXRContext *s, const uint8_t *src, int compressed_size,
209 int uncompressed_size, EXRThreadData *td)
210 {
211 12853 unsigned long dest_len = uncompressed_size;
212
213
1/2
✓ Branch 1 taken 12853 times.
✗ Branch 2 not taken.
 12853 if (uncompress(td->tmp, &dest_len, src, compressed_size) != Z_OK ||
214
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 12853 times.
 12853 dest_len != uncompressed_size)
215 ✗ return AVERROR_INVALIDDATA;
216
217 av_assert1(uncompressed_size % 2 == 0);
218
219 12853 s->dsp.predictor(td->tmp, uncompressed_size);
220 12853 s->dsp.reorder_pixels(td->uncompressed_data, td->tmp, uncompressed_size);
221
222 12853 return 0;
223 }
224
225 4848 static int rle(uint8_t *dst, const uint8_t *src,
226 int compressed_size, int uncompressed_size)
227 {
228 4848 uint8_t *d = dst;
229 4848 const int8_t *s = src;
230 4848 int ssize = compressed_size;
231 4848 int dsize = uncompressed_size;
232 4848 uint8_t *dend = d + dsize;
233 int count;
234
235
2/2
✓ Branch 0 taken 671923 times.
✓ Branch 1 taken 4848 times.
 676771 while (ssize > 0) {
236 671923 count = *s++;
237
238
2/2
✓ Branch 0 taken 501696 times.
✓ Branch 1 taken 170227 times.
 671923 if (count < 0) {
239 501696 count = -count;
240
241
1/2
✓ Branch 0 taken 501696 times.
✗ Branch 1 not taken.
 501696 if ((dsize -= count) < 0 ||
242
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 501696 times.
 501696 (ssize -= count + 1) < 0)
243 ✗ return AVERROR_INVALIDDATA;
244
245
2/2
✓ Branch 0 taken 21206629 times.
✓ Branch 1 taken 501696 times.
 21708325 while (count--)
246 21206629 *d++ = *s++;
247 } else {
248 170227 count++;
249
250
1/2
✓ Branch 0 taken 170227 times.
✗ Branch 1 not taken.
 170227 if ((dsize -= count) < 0 ||
251
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 170227 times.
 170227 (ssize -= 2) < 0)
252 ✗ return AVERROR_INVALIDDATA;
253
254
2/2
✓ Branch 0 taken 4743203 times.
✓ Branch 1 taken 170227 times.
 4913430 while (count--)
255 4743203 *d++ = *s;
256
257 170227 s++;
258 }
259 }
260
261
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4848 times.
 4848 if (dend != d)
262 ✗ return AVERROR_INVALIDDATA;
263
264 4848 return 0;
265 }
266
267 4848 static int rle_uncompress(const EXRContext *ctx, const uint8_t *src, int compressed_size,
268 int uncompressed_size, EXRThreadData *td)
269 {
270 4848 rle(td->tmp, src, compressed_size, uncompressed_size);
271
272 av_assert1(uncompressed_size % 2 == 0);
273
274 4848 ctx->dsp.predictor(td->tmp, uncompressed_size);
275 4848 ctx->dsp.reorder_pixels(td->uncompressed_data, td->tmp, uncompressed_size);
276
277 4848 return 0;
278 }
279
280 #define USHORT_RANGE (1 << 16)
281 #define BITMAP_SIZE (1 << 13)
282
283 30 static uint16_t reverse_lut(const uint8_t *bitmap, uint16_t *lut)
284 {
285 30 int i, k = 0;
286
287
2/2
✓ Branch 0 taken 1966080 times.
✓ Branch 1 taken 30 times.
 1966110 for (i = 0; i < USHORT_RANGE; i++)
288
4/4
✓ Branch 0 taken 1966050 times.
✓ Branch 1 taken 30 times.
✓ Branch 2 taken 15355 times.
✓ Branch 3 taken 1950695 times.
 1966080 if ((i == 0) || (bitmap[i >> 3] & (1 << (i & 7))))
289 15385 lut[k++] = i;
290
291 30 i = k - 1;
292
293 30 memset(lut + k, 0, (USHORT_RANGE - k) * 2);
294
295 30 return i;
296 }
297
298 30 static void apply_lut(const uint16_t *lut, uint16_t *dst, int dsize)
299 {
300 int i;
301
302
2/2
✓ Branch 0 taken 820722 times.
✓ Branch 1 taken 30 times.
 820752 for (i = 0; i < dsize; ++i)
303 820722 dst[i] = lut[dst[i]];
304 30 }
305
306 #define HUF_ENCBITS 16 // literal (value) bit length
307 #define HUF_ENCSIZE ((1 << HUF_ENCBITS) + 1) // encoding table size
308
309 30 static void huf_canonical_code_table(uint64_t *freq)
310 {
311 30 uint64_t c, n[59] = { 0 };
312 int i;
313
314
2/2
✓ Branch 0 taken 1966110 times.
✓ Branch 1 taken 30 times.
 1966140 for (i = 0; i < HUF_ENCSIZE; i++)
315 1966110 n[freq[i]] += 1;
316
317 30 c = 0;
318
2/2
✓ Branch 0 taken 1740 times.
✓ Branch 1 taken 30 times.
 1770 for (i = 58; i > 0; --i) {
319 1740 uint64_t nc = ((c + n[i]) >> 1);
320 1740 n[i] = c;
321 1740 c = nc;
322 }
323
324
2/2
✓ Branch 0 taken 1966110 times.
✓ Branch 1 taken 30 times.
 1966140 for (i = 0; i < HUF_ENCSIZE; ++i) {
325 1966110 int l = freq[i];
326
327
2/2
✓ Branch 0 taken 6417 times.
✓ Branch 1 taken 1959693 times.
 1966110 if (l > 0)
328 6417 freq[i] = l | (n[l]++ << 6);
329 }
330 30 }
331
332 #define SHORT_ZEROCODE_RUN 59
333 #define LONG_ZEROCODE_RUN 63
334 #define SHORTEST_LONG_RUN (2 + LONG_ZEROCODE_RUN - SHORT_ZEROCODE_RUN)
335 #define LONGEST_LONG_RUN (255 + SHORTEST_LONG_RUN)
336
337 30 static int huf_unpack_enc_table(GetByteContext *gb,
338 int32_t im, int32_t iM, uint64_t *freq)
339 {
340 GetBitContext gbit;
341 30 int ret = init_get_bits8(&gbit, gb->buffer, bytestream2_get_bytes_left(gb));
342
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 30 times.
 30 if (ret < 0)
343 ✗ return ret;
344
345
2/2
✓ Branch 0 taken 16606 times.
✓ Branch 1 taken 30 times.
 16636 for (; im <= iM; im++) {
346 int l;
347
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 16606 times.
 16606 if (get_bits_left(&gbit) < 6)
348 ✗ return AVERROR_INVALIDDATA;
349 16606 l = freq[im] = get_bits(&gbit, 6);
350
351
2/2
✓ Branch 0 taken 8339 times.
✓ Branch 1 taken 8267 times.
 16606 if (l == LONG_ZEROCODE_RUN) {
352 8339 int zerun = get_bits(&gbit, 8) + SHORTEST_LONG_RUN;
353
354
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 8339 times.
 8339 if (im + zerun > iM + 1)
355 ✗ return AVERROR_INVALIDDATA;
356
357
2/2
✓ Branch 0 taken 1955626 times.
✓ Branch 1 taken 8339 times.
 1963965 while (zerun--)
358 1955626 freq[im++] = 0;
359
360 8339 im--;
361
2/2
✓ Branch 0 taken 1053 times.
✓ Branch 1 taken 7214 times.
 8267 } else if (l >= SHORT_ZEROCODE_RUN) {
362 1053 int zerun = l - SHORT_ZEROCODE_RUN + 2;
363
364
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1053 times.
 1053 if (im + zerun > iM + 1)
365 ✗ return AVERROR_INVALIDDATA;
366
367
2/2
✓ Branch 0 taken 3270 times.
✓ Branch 1 taken 1053 times.
 4323 while (zerun--)
368 3270 freq[im++] = 0;
369
370 1053 im--;
371 }
372 }
373
374 30 bytestream2_skip(gb, (get_bits_count(&gbit) + 7) / 8);
375 30 huf_canonical_code_table(freq);
376
377 30 return 0;
378 }
379
380 30 static int huf_build_dec_table(const EXRContext *s,
381 EXRThreadData *td, int im, int iM)
382 {
383 30 int j = 0;
384
385 30 td->run_sym = -1;
386
2/2
✓ Branch 0 taken 1966080 times.
✓ Branch 1 taken 30 times.
 1966110 for (int i = im; i < iM; i++) {
387 1966080 td->he[j].sym = i;
388 1966080 td->he[j].len = td->freq[i] & 63;
389 1966080 td->he[j].code = td->freq[i] >> 6;
390
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1966080 times.
 1966080 if (td->he[j].len > 32) {
391 ✗ avpriv_request_sample(s->avctx, "Too big code length");
392 ✗ return AVERROR_PATCHWELCOME;
393 }
394
2/2
✓ Branch 0 taken 6387 times.
✓ Branch 1 taken 1959693 times.
 1966080 if (td->he[j].len > 0)
395 6387 j++;
396 else
397 1959693 td->run_sym = i;
398 }
399
400
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 30 times.
 30 if (im > 0)
401 ✗ td->run_sym = 0;
402
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 30 times.
 30 else if (iM < 65535)
403 ✗ td->run_sym = 65535;
404
405
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 30 times.
 30 if (td->run_sym == -1) {
406 ✗ avpriv_request_sample(s->avctx, "No place for run symbol");
407 ✗ return AVERROR_PATCHWELCOME;
408 }
409
410 30 td->he[j].sym = td->run_sym;
411 30 td->he[j].len = td->freq[iM] & 63;
412
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 30 times.
 30 if (td->he[j].len > 32) {
413 ✗ avpriv_request_sample(s->avctx, "Too big code length");
414 ✗ return AVERROR_PATCHWELCOME;
415 }
416 30 td->he[j].code = td->freq[iM] >> 6;
417 30 j++;
418
419 30 ff_vlc_free(&td->vlc);
420 30 return ff_vlc_init_sparse(&td->vlc, 12, j,
421 30 &td->he[0].len, sizeof(td->he[0]), sizeof(td->he[0].len),
422 30 &td->he[0].code, sizeof(td->he[0]), sizeof(td->he[0].code),
423 30 &td->he[0].sym, sizeof(td->he[0]), sizeof(td->he[0].sym), 0);
424 }
425
426 30 static int huf_decode(VLC *vlc, GetByteContext *gb, int nbits, int run_sym,
427 int no, uint16_t *out)
428 {
429 GetBitContext gbit;
430 30 int oe = 0;
431
432 30 init_get_bits(&gbit, gb->buffer, nbits);
433
3/4
✓ Branch 1 taken 213481 times.
✓ Branch 2 taken 30 times.
✓ Branch 3 taken 213481 times.
✗ Branch 4 not taken.
 213511 while (get_bits_left(&gbit) > 0 && oe < no) {
434 213481 uint16_t x = get_vlc2(&gbit, vlc->table, 12, 3);
435
436
2/2
✓ Branch 0 taken 3387 times.
✓ Branch 1 taken 210094 times.
 213481 if (x == run_sym) {
437 3387 int run = get_bits(&gbit, 8);
438 uint16_t fill;
439
440
2/4
✓ Branch 0 taken 3387 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 3387 times.
 3387 if (oe == 0 || oe + run > no)
441 ✗ return AVERROR_INVALIDDATA;
442
443 3387 fill = out[oe - 1];
444
445
2/2
✓ Branch 0 taken 610628 times.
✓ Branch 1 taken 3387 times.
 614015 while (run-- > 0)
446 610628 out[oe++] = fill;
447 } else {
448 210094 out[oe++] = x;
449 }
450 }
451
452 30 return 0;
453 }
454
455 30 static int huf_uncompress(const EXRContext *s,
456 EXRThreadData *td,
457 GetByteContext *gb,
458 uint16_t *dst, int dst_size)
459 {
460 int32_t im, iM;
461 uint32_t nBits;
462 int ret;
463
464 30 im = bytestream2_get_le32(gb);
465 30 iM = bytestream2_get_le32(gb);
466 30 bytestream2_skip(gb, 4);
467 30 nBits = bytestream2_get_le32(gb);
468
3/6
✓ Branch 0 taken 30 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 30 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 30 times.
✗ Branch 5 not taken.
 30 if (im < 0 || im >= HUF_ENCSIZE ||
469
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 30 times.
 30 iM < 0 || iM >= HUF_ENCSIZE)
470 ✗ return AVERROR_INVALIDDATA;
471
472 30 bytestream2_skip(gb, 4);
473
474
2/2
✓ Branch 0 taken 7 times.
✓ Branch 1 taken 23 times.
 30 if (!td->freq)
475 7 td->freq = av_malloc_array(HUF_ENCSIZE, sizeof(*td->freq));
476
2/2
✓ Branch 0 taken 7 times.
✓ Branch 1 taken 23 times.
 30 if (!td->he)
477 7 td->he = av_calloc(HUF_ENCSIZE, sizeof(*td->he));
478
2/4
✓ Branch 0 taken 30 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 30 times.
 30 if (!td->freq || !td->he) {
479 ✗ ret = AVERROR(ENOMEM);
480 ✗ return ret;
481 }
482
483 30 memset(td->freq, 0, sizeof(*td->freq) * HUF_ENCSIZE);
484
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 30 times.
 30 if ((ret = huf_unpack_enc_table(gb, im, iM, td->freq)) < 0)
485 ✗ return ret;
486
487
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 30 times.
 30 if (nBits > 8 * bytestream2_get_bytes_left(gb)) {
488 ✗ ret = AVERROR_INVALIDDATA;
489 ✗ return ret;
490 }
491
492
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 30 times.
 30 if ((ret = huf_build_dec_table(s, td, im, iM)) < 0)
493 ✗ return ret;
494 30 return huf_decode(&td->vlc, gb, nBits, td->run_sym, dst_size, dst);
495 }
496
497 1091709 static inline void wdec14(uint16_t l, uint16_t h, uint16_t *a, uint16_t *b)
498 {
499 1091709 int16_t ls = l;
500 1091709 int16_t hs = h;
501 1091709 int hi = hs;
502 1091709 int ai = ls + (hi & 1) + (hi >> 1);
503 1091709 int16_t as = ai;
504 1091709 int16_t bs = ai - hi;
505
506 1091709 *a = as;
507 1091709 *b = bs;
508 1091709 }
509
510 #define NBITS 16
511 #define A_OFFSET (1 << (NBITS - 1))
512 #define MOD_MASK ((1 << NBITS) - 1)
513
514 ✗ static inline void wdec16(uint16_t l, uint16_t h, uint16_t *a, uint16_t *b)
515 {
516 ✗ int m = l;
517 ✗ int d = h;
518 ✗ int bb = (m - (d >> 1)) & MOD_MASK;
519 ✗ int aa = (d + bb - A_OFFSET) & MOD_MASK;
520 ✗ *b = bb;
521 ✗ *a = aa;
522 ✗ }
523
524 102 static void wav_decode(uint16_t *in, int nx, int ox,
525 int ny, int oy, uint16_t mx)
526 {
527 102 int w14 = (mx < (1 << 14));
528 102 int n = (nx > ny) ? ny : nx;
529 102 int p = 1;
530 int p2;
531
532
2/2
✓ Branch 0 taken 591 times.
✓ Branch 1 taken 102 times.
 693 while (p <= n)
533 591 p <<= 1;
534
535 102 p >>= 1;
536 102 p2 = p;
537 102 p >>= 1;
538
539
2/2
✓ Branch 0 taken 489 times.
✓ Branch 1 taken 102 times.
 591 while (p >= 1) {
540 489 uint16_t *py = in;
541 489 uint16_t *ey = in + oy * (ny - p2);
542 uint16_t i00, i01, i10, i11;
543 489 int oy1 = oy * p;
544 489 int oy2 = oy * p2;
545 489 int ox1 = ox * p;
546 489 int ox2 = ox * p2;
547
548
2/2
✓ Branch 0 taken 2940 times.
✓ Branch 1 taken 489 times.
 3429 for (; py <= ey; py += oy2) {
549 2940 uint16_t *px = py;
550 2940 uint16_t *ex = py + ox * (nx - p2);
551
552
2/2
✓ Branch 0 taken 272751 times.
✓ Branch 1 taken 2940 times.
 275691 for (; px <= ex; px += ox2) {
553 272751 uint16_t *p01 = px + ox1;
554 272751 uint16_t *p10 = px + oy1;
555 272751 uint16_t *p11 = p10 + ox1;
556
557
1/2
✓ Branch 0 taken 272751 times.
✗ Branch 1 not taken.
 272751 if (w14) {
558 272751 wdec14(*px, *p10, &i00, &i10);
559 272751 wdec14(*p01, *p11, &i01, &i11);
560 272751 wdec14(i00, i01, px, p01);
561 272751 wdec14(i10, i11, p10, p11);
562 } else {
563 ✗ wdec16(*px, *p10, &i00, &i10);
564 ✗ wdec16(*p01, *p11, &i01, &i11);
565 ✗ wdec16(i00, i01, px, p01);
566 ✗ wdec16(i10, i11, p10, p11);
567 }
568 }
569
570
2/2
✓ Branch 0 taken 324 times.
✓ Branch 1 taken 2616 times.
 2940 if (nx & p) {
571 324 uint16_t *p10 = px + oy1;
572
573
1/2
✓ Branch 0 taken 324 times.
✗ Branch 1 not taken.
 324 if (w14)
574 324 wdec14(*px, *p10, &i00, p10);
575 else
576 ✗ wdec16(*px, *p10, &i00, p10);
577
578 324 *px = i00;
579 }
580 }
581
582
2/2
✓ Branch 0 taken 15 times.
✓ Branch 1 taken 474 times.
 489 if (ny & p) {
583 15 uint16_t *px = py;
584 15 uint16_t *ex = py + ox * (nx - p2);
585
586
2/2
✓ Branch 0 taken 381 times.
✓ Branch 1 taken 15 times.
 396 for (; px <= ex; px += ox2) {
587 381 uint16_t *p01 = px + ox1;
588
589
1/2
✓ Branch 0 taken 381 times.
✗ Branch 1 not taken.
 381 if (w14)
590 381 wdec14(*px, *p01, &i00, p01);
591 else
592 ✗ wdec16(*px, *p01, &i00, p01);
593
594 381 *px = i00;
595 }
596 }
597
598 489 p2 = p;
599 489 p >>= 1;
600 }
601 102 }
602
603 30 static int piz_uncompress(const EXRContext *s, const uint8_t *src, int ssize,
604 int dsize, EXRThreadData *td)
605 {
606 GetByteContext gb;
607 uint16_t maxval, min_non_zero, max_non_zero;
608 uint16_t *ptr;
609 30 uint16_t *tmp = (uint16_t *)td->tmp;
610 uint16_t *out;
611 uint16_t *in;
612 int ret, i, j;
613 int pixel_half_size;/* 1 for half, 2 for float and uint32 */
614 EXRChannel *channel;
615 int tmp_offset;
616
617
2/2
✓ Branch 0 taken 7 times.
✓ Branch 1 taken 23 times.
 30 if (!td->bitmap)
618 7 td->bitmap = av_malloc(BITMAP_SIZE);
619
2/2
✓ Branch 0 taken 7 times.
✓ Branch 1 taken 23 times.
 30 if (!td->lut)
620 7 td->lut = av_malloc(1 << 17);
621
2/4
✓ Branch 0 taken 30 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 30 times.
 30 if (!td->bitmap || !td->lut) {
622 ✗ av_freep(&td->bitmap);
623 ✗ av_freep(&td->lut);
624 ✗ return AVERROR(ENOMEM);
625 }
626
627 30 bytestream2_init(&gb, src, ssize);
628 30 min_non_zero = bytestream2_get_le16(&gb);
629 30 max_non_zero = bytestream2_get_le16(&gb);
630
631
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 30 times.
 30 if (max_non_zero >= BITMAP_SIZE)
632 ✗ return AVERROR_INVALIDDATA;
633
634 30 memset(td->bitmap, 0, FFMIN(min_non_zero, BITMAP_SIZE));
635
1/2
✓ Branch 0 taken 30 times.
✗ Branch 1 not taken.
 30 if (min_non_zero <= max_non_zero)
636 30 bytestream2_get_buffer(&gb, td->bitmap + min_non_zero,
637 30 max_non_zero - min_non_zero + 1);
638 30 memset(td->bitmap + max_non_zero + 1, 0, BITMAP_SIZE - max_non_zero - 1);
639
640 30 maxval = reverse_lut(td->bitmap, td->lut);
641
642 30 bytestream2_skip(&gb, 4);
643 30 ret = huf_uncompress(s, td, &gb, tmp, dsize / sizeof(uint16_t));
644
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 30 times.
 30 if (ret)
645 ✗ return ret;
646
647 30 ptr = tmp;
648
2/2
✓ Branch 0 taken 90 times.
✓ Branch 1 taken 30 times.
 120 for (i = 0; i < s->nb_channels; i++) {
649 90 channel = &s->channels[i];
650
651
2/2
✓ Branch 0 taken 78 times.
✓ Branch 1 taken 12 times.
 90 if (channel->pixel_type == EXR_HALF)
652 78 pixel_half_size = 1;
653 else
654 12 pixel_half_size = 2;
655
656
2/2
✓ Branch 0 taken 102 times.
✓ Branch 1 taken 90 times.
 192 for (j = 0; j < pixel_half_size; j++)
657 102 wav_decode(ptr + j, td->xsize, pixel_half_size, td->ysize,
658 102 td->xsize * pixel_half_size, maxval);
659 90 ptr += td->xsize * td->ysize * pixel_half_size;
660 }
661
662 30 apply_lut(td->lut, tmp, dsize / sizeof(uint16_t));
663
664 30 out = (uint16_t *)td->uncompressed_data;
665
2/2
✓ Branch 0 taken 891 times.
✓ Branch 1 taken 30 times.
 921 for (i = 0; i < td->ysize; i++) {
666 891 tmp_offset = 0;
667
2/2
✓ Branch 0 taken 2673 times.
✓ Branch 1 taken 891 times.
 3564 for (j = 0; j < s->nb_channels; j++) {
668 2673 channel = &s->channels[j];
669
2/2
✓ Branch 0 taken 2289 times.
✓ Branch 1 taken 384 times.
 2673 if (channel->pixel_type == EXR_HALF)
670 2289 pixel_half_size = 1;
671 else
672 384 pixel_half_size = 2;
673
674 2673 in = tmp + tmp_offset * td->xsize * td->ysize + i * td->xsize * pixel_half_size;
675 2673 tmp_offset += pixel_half_size;
676
677 #if HAVE_BIGENDIAN
678 s->bbdsp.bswap16_buf(out, in, td->xsize * pixel_half_size);
679 #else
680 2673 memcpy(out, in, td->xsize * 2 * pixel_half_size);
681 #endif
682 2673 out += td->xsize * pixel_half_size;
683 }
684 }
685
686 30 return 0;
687 }
688
689 61 static int pxr24_uncompress(const EXRContext *s, const uint8_t *src,
690 int compressed_size, int uncompressed_size,
691 EXRThreadData *td)
692 {
693 61 unsigned long dest_len, expected_len = 0;
694 61 const uint8_t *in = td->tmp;
695 uint8_t *out;
696 int c, i, j;
697
698
2/2
✓ Branch 0 taken 218 times.
✓ Branch 1 taken 61 times.
 279 for (i = 0; i < s->nb_channels; i++) {
699
2/2
✓ Branch 0 taken 31 times.
✓ Branch 1 taken 187 times.
 218 if (s->channels[i].pixel_type == EXR_FLOAT) {
700 31 expected_len += (td->xsize * td->ysize * 3);/* PRX 24 store float in 24 bit instead of 32 */
701
2/2
✓ Branch 0 taken 181 times.
✓ Branch 1 taken 6 times.
 187 } else if (s->channels[i].pixel_type == EXR_HALF) {
702 181 expected_len += (td->xsize * td->ysize * 2);
703 } else {//UINT 32
704 6 expected_len += (td->xsize * td->ysize * 4);
705 }
706 }
707
708 61 dest_len = expected_len;
709
710
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 61 times.
 61 if (uncompress(td->tmp, &dest_len, src, compressed_size) != Z_OK) {
711 ✗ return AVERROR_INVALIDDATA;
712
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 61 times.
 61 } else if (dest_len != expected_len) {
713 ✗ return AVERROR_INVALIDDATA;
714 }
715
716 61 out = td->uncompressed_data;
717
2/2
✓ Branch 0 taken 889 times.
✓ Branch 1 taken 61 times.
 950 for (i = 0; i < td->ysize; i++)
718
2/2
✓ Branch 0 taken 2950 times.
✓ Branch 1 taken 889 times.
 3839 for (c = 0; c < s->nb_channels; c++) {
719 2950 EXRChannel *channel = &s->channels[c];
720 const uint8_t *ptr[4];
721 2950 uint32_t pixel = 0;
722
723
3/4
✓ Branch 0 taken 248 times.
✓ Branch 1 taken 2651 times.
✓ Branch 2 taken 51 times.
✗ Branch 3 not taken.
 2950 switch (channel->pixel_type) {
724 248 case EXR_FLOAT:
725 248 ptr[0] = in;
726 248 ptr[1] = ptr[0] + td->xsize;
727 248 ptr[2] = ptr[1] + td->xsize;
728 248 in = ptr[2] + td->xsize;
729
730
2/2
✓ Branch 0 taken 2976 times.
✓ Branch 1 taken 248 times.
 3224 for (j = 0; j < td->xsize; ++j) {
731 2976 uint32_t diff = ((unsigned)*(ptr[0]++) << 24) |
732 2976 (*(ptr[1]++) << 16) |
733 2976 (*(ptr[2]++) << 8);
734 2976 pixel += diff;
735 2976 bytestream_put_le32(&out, pixel);
736 }
737 248 break;
738 2651 case EXR_HALF:
739 2651 ptr[0] = in;
740 2651 ptr[1] = ptr[0] + td->xsize;
741 2651 in = ptr[1] + td->xsize;
742
2/2
✓ Branch 0 taken 1923039 times.
✓ Branch 1 taken 2651 times.
 1925690 for (j = 0; j < td->xsize; j++) {
743 1923039 uint32_t diff = (*(ptr[0]++) << 8) | *(ptr[1]++);
744
745 1923039 pixel += diff;
746 1923039 bytestream_put_le16(&out, pixel);
747 }
748 2651 break;
749 51 case EXR_UINT:
750 51 ptr[0] = in;
751 51 ptr[1] = ptr[0] + td->xsize;
752 51 ptr[2] = ptr[1] + td->xsize;
753 51 ptr[3] = ptr[2] + td->xsize;
754 51 in = ptr[3] + td->xsize;
755
756
2/2
✓ Branch 0 taken 639 times.
✓ Branch 1 taken 51 times.
 690 for (j = 0; j < td->xsize; ++j) {
757 639 uint32_t diff = ((uint32_t)*(ptr[0]++) << 24) |
758 639 (*(ptr[1]++) << 16) |
759 639 (*(ptr[2]++) << 8 ) |
760 639 (*(ptr[3]++));
761 639 pixel += diff;
762 639 bytestream_put_le32(&out, pixel);
763 }
764 51 break;
765 ✗ default:
766 ✗ return AVERROR_INVALIDDATA;
767 }
768 }
769
770 61 return 0;
771 }
772
773 59279 static void unpack_14(const uint8_t b[14], uint16_t s[16])
774 {
775 59279 uint16_t shift = (b[ 2] >> 2) & 15;
776 59279 uint16_t bias = (0x20 << shift);
777 int i;
778
779 59279 s[ 0] = (b[0] << 8) | b[1];
780
781 59279 s[ 4] = s[ 0] + ((((b[ 2] << 4) | (b[ 3] >> 4)) & 0x3f) << shift) - bias;
782 59279 s[ 8] = s[ 4] + ((((b[ 3] << 2) | (b[ 4] >> 6)) & 0x3f) << shift) - bias;
783 59279 s[12] = s[ 8] + ((b[ 4] & 0x3f) << shift) - bias;
784
785 59279 s[ 1] = s[ 0] + ((b[ 5] >> 2) << shift) - bias;
786 59279 s[ 5] = s[ 4] + ((((b[ 5] << 4) | (b[ 6] >> 4)) & 0x3f) << shift) - bias;
787 59279 s[ 9] = s[ 8] + ((((b[ 6] << 2) | (b[ 7] >> 6)) & 0x3f) << shift) - bias;
788 59279 s[13] = s[12] + ((b[ 7] & 0x3f) << shift) - bias;
789
790 59279 s[ 2] = s[ 1] + ((b[ 8] >> 2) << shift) - bias;
791 59279 s[ 6] = s[ 5] + ((((b[ 8] << 4) | (b[ 9] >> 4)) & 0x3f) << shift) - bias;
792 59279 s[10] = s[ 9] + ((((b[ 9] << 2) | (b[10] >> 6)) & 0x3f) << shift) - bias;
793 59279 s[14] = s[13] + ((b[10] & 0x3f) << shift) - bias;
794
795 59279 s[ 3] = s[ 2] + ((b[11] >> 2) << shift) - bias;
796 59279 s[ 7] = s[ 6] + ((((b[11] << 4) | (b[12] >> 4)) & 0x3f) << shift) - bias;
797 59279 s[11] = s[10] + ((((b[12] << 2) | (b[13] >> 6)) & 0x3f) << shift) - bias;
798 59279 s[15] = s[14] + ((b[13] & 0x3f) << shift) - bias;
799
800
2/2
✓ Branch 0 taken 948464 times.
✓ Branch 1 taken 59279 times.
 1007743 for (i = 0; i < 16; ++i) {
801
2/2
✓ Branch 0 taken 942347 times.
✓ Branch 1 taken 6117 times.
 948464 if (s[i] & 0x8000)
802 942347 s[i] &= 0x7fff;
803 else
804 6117 s[i] = ~s[i];
805 }
806 59279 }
807
808 106 static void unpack_3(const uint8_t b[3], uint16_t s[16])
809 {
810 int i;
811
812 106 s[0] = (b[0] << 8) | b[1];
813
814
2/2
✓ Branch 0 taken 105 times.
✓ Branch 1 taken 1 times.
 106 if (s[0] & 0x8000)
815 105 s[0] &= 0x7fff;
816 else
817 1 s[0] = ~s[0];
818
819
2/2
✓ Branch 0 taken 1590 times.
✓ Branch 1 taken 106 times.
 1696 for (i = 1; i < 16; i++)
820 1590 s[i] = s[0];
821 106 }
822
823
824 23 static int b44_uncompress(const EXRContext *s, const uint8_t *src, int compressed_size,
825 int uncompressed_size, EXRThreadData *td) {
826 23 const int8_t *sr = src;
827 23 int stay_to_uncompress = compressed_size;
828 int nb_b44_block_w, nb_b44_block_h;
829 int index_tl_x, index_tl_y, index_out, index_tmp;
830 uint16_t tmp_buffer[16]; /* B44 use 4x4 half float pixel */
831 int c, iY, iX, y, x;
832 23 int target_channel_offset = 0;
833
834 /* calc B44 block count */
835 23 nb_b44_block_w = td->xsize / 4;
836
2/2
✓ Branch 0 taken 13 times.
✓ Branch 1 taken 10 times.
 23 if ((td->xsize % 4) != 0)
837 13 nb_b44_block_w++;
838
839 23 nb_b44_block_h = td->ysize / 4;
840
2/2
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 17 times.
 23 if ((td->ysize % 4) != 0)
841 6 nb_b44_block_h++;
842
843
2/2
✓ Branch 0 taken 133 times.
✓ Branch 1 taken 23 times.
 156 for (c = 0; c < s->nb_channels; c++) {
844
2/2
✓ Branch 0 taken 85 times.
✓ Branch 1 taken 48 times.
 133 if (s->channels[c].pixel_type == EXR_HALF) {/* B44 only compress half float data */
845
2/2
✓ Branch 0 taken 374 times.
✓ Branch 1 taken 85 times.
 459 for (iY = 0; iY < nb_b44_block_h; iY++) {
846
2/2
✓ Branch 0 taken 59385 times.
✓ Branch 1 taken 374 times.
 59759 for (iX = 0; iX < nb_b44_block_w; iX++) {/* For each B44 block */
847
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 59385 times.
 59385 if (stay_to_uncompress < 3)
848 ✗ return AVERROR_INVALIDDATA;
849
850
2/2
✓ Branch 0 taken 106 times.
✓ Branch 1 taken 59279 times.
 59385 if (src[compressed_size - stay_to_uncompress + 2] == 0xfc) { /* B44A block */
851 106 unpack_3(sr, tmp_buffer);
852 106 sr += 3;
853 106 stay_to_uncompress -= 3;
854 } else {/* B44 Block */
855
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 59279 times.
 59279 if (stay_to_uncompress < 14)
856 ✗ return AVERROR_INVALIDDATA;
857 59279 unpack_14(sr, tmp_buffer);
858 59279 sr += 14;
859 59279 stay_to_uncompress -= 14;
860 }
861
862 /* copy data to uncompress buffer (B44 block can exceed target resolution)*/
863 59385 index_tl_x = iX * 4;
864 59385 index_tl_y = iY * 4;
865
866
4/4
✓ Branch 0 taken 3896 times.
✓ Branch 1 taken 291865 times.
✓ Branch 2 taken 236376 times.
✓ Branch 3 taken 59385 times.
 295761 for (y = index_tl_y; y < FFMIN(index_tl_y + 4, td->ysize); y++) {
867
4/4
✓ Branch 0 taken 4358 times.
✓ Branch 1 taken 1176005 times.
✓ Branch 2 taken 943987 times.
✓ Branch 3 taken 236376 times.
 1180363 for (x = index_tl_x; x < FFMIN(index_tl_x + 4, td->xsize); x++) {
868 943987 index_out = target_channel_offset * td->xsize + y * td->channel_line_size + 2 * x;
869 943987 index_tmp = (y-index_tl_y) * 4 + (x-index_tl_x);
870 943987 td->uncompressed_data[index_out] = tmp_buffer[index_tmp] & 0xff;
871 943987 td->uncompressed_data[index_out + 1] = tmp_buffer[index_tmp] >> 8;
872 }
873 }
874 }
875 }
876 85 target_channel_offset += 2;
877 } else {/* Float or UINT 32 channel */
878
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 48 times.
 48 if (stay_to_uncompress < td->ysize * td->xsize * 4)
879 ✗ return AVERROR_INVALIDDATA;
880
881
2/2
✓ Branch 0 taken 400 times.
✓ Branch 1 taken 48 times.
 448 for (y = 0; y < td->ysize; y++) {
882 400 index_out = target_channel_offset * td->xsize + y * td->channel_line_size;
883 400 memcpy(&td->uncompressed_data[index_out], sr, td->xsize * 4);
884 400 sr += td->xsize * 4;
885 }
886 48 target_channel_offset += 4;
887
888 48 stay_to_uncompress -= td->ysize * td->xsize * 4;
889 }
890 }
891
892 23 return 0;
893 }
894
895 ✗ static int ac_uncompress(const EXRContext *s, GetByteContext *gb, float *block)
896 {
897 ✗ int ret = 0, n = 1;
898
899 ✗ while (n < 64) {
900 ✗ uint16_t val = bytestream2_get_ne16(gb);
901
902 ✗ if (val == 0xff00) {
903 ✗ n = 64;
904 ✗ } else if ((val >> 8) == 0xff) {
905 ✗ n += val & 0xff;
906 } else {
907 ✗ ret = n;
908 ✗ block[ff_zigzag_direct[n]] = av_int2float(half2float(val, &s->h2f_tables));
909 ✗ n++;
910 }
911 }
912
913 ✗ return ret;
914 }
915
916 ✗ static void idct_1d(float *blk, int step)
917 {
918 ✗ const float a = .5f * cosf( M_PI / 4.f);
919 ✗ const float b = .5f * cosf( M_PI / 16.f);
920 ✗ const float c = .5f * cosf( M_PI / 8.f);
921 ✗ const float d = .5f * cosf(3.f*M_PI / 16.f);
922 ✗ const float e = .5f * cosf(5.f*M_PI / 16.f);
923 ✗ const float f = .5f * cosf(3.f*M_PI / 8.f);
924 ✗ const float g = .5f * cosf(7.f*M_PI / 16.f);
925
926 float alpha[4], beta[4], theta[4], gamma[4];
927
928 ✗ alpha[0] = c * blk[2 * step];
929 ✗ alpha[1] = f * blk[2 * step];
930 ✗ alpha[2] = c * blk[6 * step];
931 ✗ alpha[3] = f * blk[6 * step];
932
933 ✗ beta[0] = b * blk[1 * step] + d * blk[3 * step] + e * blk[5 * step] + g * blk[7 * step];
934 ✗ beta[1] = d * blk[1 * step] - g * blk[3 * step] - b * blk[5 * step] - e * blk[7 * step];
935 ✗ beta[2] = e * blk[1 * step] - b * blk[3 * step] + g * blk[5 * step] + d * blk[7 * step];
936 ✗ beta[3] = g * blk[1 * step] - e * blk[3 * step] + d * blk[5 * step] - b * blk[7 * step];
937
938 ✗ theta[0] = a * (blk[0 * step] + blk[4 * step]);
939 ✗ theta[3] = a * (blk[0 * step] - blk[4 * step]);
940
941 ✗ theta[1] = alpha[0] + alpha[3];
942 ✗ theta[2] = alpha[1] - alpha[2];
943
944 ✗ gamma[0] = theta[0] + theta[1];
945 ✗ gamma[1] = theta[3] + theta[2];
946 ✗ gamma[2] = theta[3] - theta[2];
947 ✗ gamma[3] = theta[0] - theta[1];
948
949 ✗ blk[0 * step] = gamma[0] + beta[0];
950 ✗ blk[1 * step] = gamma[1] + beta[1];
951 ✗ blk[2 * step] = gamma[2] + beta[2];
952 ✗ blk[3 * step] = gamma[3] + beta[3];
953
954 ✗ blk[4 * step] = gamma[3] - beta[3];
955 ✗ blk[5 * step] = gamma[2] - beta[2];
956 ✗ blk[6 * step] = gamma[1] - beta[1];
957 ✗ blk[7 * step] = gamma[0] - beta[0];
958 ✗ }
959
960 ✗ static void dct_inverse(float *block)
961 {
962 ✗ for (int i = 0; i < 8; i++)
963 ✗ idct_1d(block + i, 8);
964
965 ✗ for (int i = 0; i < 8; i++) {
966 ✗ idct_1d(block, 1);
967 ✗ block += 8;
968 }
969 ✗ }
970
971 ✗ static void convert(float y, float u, float v,
972 float *b, float *g, float *r)
973 {
974 ✗ *r = y + 1.5747f * v;
975 ✗ *g = y - 0.1873f * u - 0.4682f * v;
976 ✗ *b = y + 1.8556f * u;
977 ✗ }
978
979 ✗ static float to_linear(float x, float scale)
980 {
981 ✗ float ax = fabsf(x);
982
983 ✗ if (ax <= 1.f) {
984 ✗ return FFSIGN(x) * powf(ax, 2.2f * scale);
985 } else {
986 ✗ const float log_base = expf(2.2f * scale);
987
988 ✗ return FFSIGN(x) * powf(log_base, ax - 1.f);
989 }
990 }
991
992 ✗ static int dwa_uncompress(const EXRContext *s, const uint8_t *src, int compressed_size,
993 int uncompressed_size, EXRThreadData *td)
994 {
995 int64_t version, lo_usize, lo_size;
996 int64_t ac_size, dc_size, rle_usize, rle_csize, rle_raw_size;
997 int64_t ac_count, dc_count, ac_compression;
998 ✗ const int dc_w = (td->xsize + 7) >> 3;
999 ✗ const int dc_h = (td->ysize + 7) >> 3;
1000 GetByteContext gb, agb;
1001 int skip, ret;
1002 ✗ int have_rle = 0;
1003
1004 ✗ if (compressed_size <= 88)
1005 ✗ return AVERROR_INVALIDDATA;
1006
1007 ✗ version = AV_RL64(src + 0);
1008 ✗ if (version != 2)
1009 ✗ return AVERROR_INVALIDDATA;
1010
1011 ✗ if (s->nb_channels < 3) {
1012 ✗ avpriv_request_sample(s->avctx, "Gray DWA");
1013 ✗ return AVERROR_PATCHWELCOME;
1014 }
1015
1016 ✗ lo_usize = AV_RL64(src + 8);
1017 ✗ lo_size = AV_RL64(src + 16);
1018 ✗ ac_size = AV_RL64(src + 24);
1019 ✗ dc_size = AV_RL64(src + 32);
1020 ✗ rle_csize = AV_RL64(src + 40);
1021 ✗ rle_usize = AV_RL64(src + 48);
1022 ✗ rle_raw_size = AV_RL64(src + 56);
1023 ✗ ac_count = AV_RL64(src + 64);
1024 ✗ dc_count = AV_RL64(src + 72);
1025 ✗ ac_compression = AV_RL64(src + 80);
1026
1027 ✗ if ( compressed_size < (uint64_t)(lo_size | ac_size | dc_size | rle_csize) || compressed_size < 88LL + lo_size + ac_size + dc_size + rle_csize
1028 ✗ || ac_count > (uint64_t)INT_MAX/2
1029 )
1030 ✗ return AVERROR_INVALIDDATA;
1031
1032 ✗ if (ac_size <= 0) {
1033 ✗ avpriv_request_sample(s->avctx, "Zero ac_size");
1034 ✗ return AVERROR_INVALIDDATA;
1035 }
1036
1037 ✗ if ((uint64_t)rle_raw_size > INT_MAX) {
1038 ✗ avpriv_request_sample(s->avctx, "Too big rle_raw_size");
1039 ✗ return AVERROR_INVALIDDATA;
1040 }
1041
1042 ✗ if (td->xsize % 8 || td->ysize % 8) {
1043 ✗ avpriv_request_sample(s->avctx, "odd dimensions DWA");
1044 }
1045
1046 ✗ bytestream2_init(&gb, src + 88, compressed_size - 88);
1047 ✗ skip = bytestream2_get_le16(&gb);
1048 ✗ if (skip < 2)
1049 ✗ return AVERROR_INVALIDDATA;
1050
1051 ✗ bytestream2_skip(&gb, skip - 2);
1052
1053 ✗ if (lo_size > 0) {
1054 ✗ if (lo_usize > uncompressed_size)
1055 ✗ return AVERROR_INVALIDDATA;
1056 ✗ bytestream2_skip(&gb, lo_size);
1057 }
1058
1059 ✗ if (ac_size > 0) {
1060 unsigned long dest_len;
1061 ✗ GetByteContext agb = gb;
1062
1063 ✗ if (ac_count > 3LL * td->xsize * s->scan_lines_per_block)
1064 ✗ return AVERROR_INVALIDDATA;
1065
1066 ✗ dest_len = ac_count * 2LL;
1067
1068 ✗ av_fast_padded_malloc(&td->ac_data, &td->ac_size, dest_len);
1069 ✗ if (!td->ac_data)
1070 ✗ return AVERROR(ENOMEM);
1071
1072 ✗ switch (ac_compression) {
1073 ✗ case 0:
1074 ✗ ret = huf_uncompress(s, td, &agb, (int16_t *)td->ac_data, ac_count);
1075 ✗ if (ret < 0)
1076 ✗ return ret;
1077 ✗ break;
1078 ✗ case 1:
1079 ✗ if (uncompress(td->ac_data, &dest_len, agb.buffer, ac_size) != Z_OK ||
1080 ✗ dest_len != ac_count * 2LL)
1081 ✗ return AVERROR_INVALIDDATA;
1082 ✗ break;
1083 ✗ default:
1084 ✗ return AVERROR_INVALIDDATA;
1085 }
1086
1087 ✗ bytestream2_skip(&gb, ac_size);
1088 }
1089
1090 {
1091 unsigned long dest_len;
1092 ✗ GetByteContext agb = gb;
1093
1094 ✗ if (dc_count != dc_w * dc_h * 3)
1095 ✗ return AVERROR_INVALIDDATA;
1096
1097 ✗ dest_len = dc_count * 2LL;
1098
1099 ✗ av_fast_padded_malloc(&td->dc_data, &td->dc_size, FFALIGN(dest_len, 64) * 2);
1100 ✗ if (!td->dc_data)
1101 ✗ return AVERROR(ENOMEM);
1102
1103 ✗ if (uncompress(td->dc_data + FFALIGN(dest_len, 64), &dest_len, agb.buffer, dc_size) != Z_OK ||
1104 ✗ (dest_len != dc_count * 2LL))
1105 ✗ return AVERROR_INVALIDDATA;
1106
1107 ✗ s->dsp.predictor(td->dc_data + FFALIGN(dest_len, 64), dest_len);
1108 ✗ s->dsp.reorder_pixels(td->dc_data, td->dc_data + FFALIGN(dest_len, 64), dest_len);
1109
1110 ✗ bytestream2_skip(&gb, dc_size);
1111 }
1112
1113 ✗ if (rle_raw_size > 0 && rle_csize > 0 && rle_usize > 0) {
1114 ✗ unsigned long dest_len = rle_usize;
1115
1116 ✗ if (2LL * td->xsize * td->ysize > rle_raw_size)
1117 ✗ return AVERROR_INVALIDDATA;
1118
1119 ✗ av_fast_padded_malloc(&td->rle_data, &td->rle_size, rle_usize);
1120 ✗ if (!td->rle_data)
1121 ✗ return AVERROR(ENOMEM);
1122
1123 ✗ av_fast_padded_malloc(&td->rle_raw_data, &td->rle_raw_size, rle_raw_size);
1124 ✗ if (!td->rle_raw_data)
1125 ✗ return AVERROR(ENOMEM);
1126
1127 ✗ if (uncompress(td->rle_data, &dest_len, gb.buffer, rle_csize) != Z_OK ||
1128 ✗ (dest_len != rle_usize))
1129 ✗ return AVERROR_INVALIDDATA;
1130
1131 ✗ ret = rle(td->rle_raw_data, td->rle_data, rle_usize, rle_raw_size);
1132 ✗ if (ret < 0)
1133 ✗ return ret;
1134 ✗ bytestream2_skip(&gb, rle_csize);
1135
1136 ✗ have_rle = 1;
1137 }
1138
1139 ✗ bytestream2_init(&agb, td->ac_data, ac_count * 2);
1140
1141 ✗ for (int y = 0; y < td->ysize; y += 8) {
1142 ✗ for (int x = 0; x < td->xsize; x += 8) {
1143 ✗ const int o = s->nb_channels == 4;
1144 ✗ float *yb = td->block[0];
1145 ✗ float *ub = td->block[1];
1146 ✗ float *vb = td->block[2];
1147 ✗ int bw = FFMIN(8, td->xsize - x);
1148 ✗ int bh = FFMIN(8, td->ysize - y);
1149
1150 ✗ memset(td->block, 0, sizeof(td->block));
1151
1152 ✗ for (int j = 0; j < 3; j++) {
1153 ✗ float *block = td->block[j];
1154 ✗ const int idx = (x >> 3) + (y >> 3) * dc_w + dc_w * dc_h * j;
1155 ✗ uint16_t *dc = (uint16_t *)td->dc_data;
1156 union av_intfloat32 dc_val;
1157
1158 ✗ dc_val.i = half2float(dc[idx], &s->h2f_tables);
1159
1160 ✗ block[0] = dc_val.f;
1161 ✗ ac_uncompress(s, &agb, block);
1162 ✗ dct_inverse(block);
1163 }
1164
1165 ✗ if (s->pixel_type == EXR_HALF) {
1166 ✗ uint16_t *bo = ((uint16_t *)td->uncompressed_data) +
1167 ✗ y * td->xsize * s->nb_channels + td->xsize * (o + 0) + x;
1168 ✗ uint16_t *go = ((uint16_t *)td->uncompressed_data) +
1169 ✗ y * td->xsize * s->nb_channels + td->xsize * (o + 1) + x;
1170 ✗ uint16_t *ro = ((uint16_t *)td->uncompressed_data) +
1171 ✗ y * td->xsize * s->nb_channels + td->xsize * (o + 2) + x;
1172
1173 ✗ for (int yy = 0; yy < bh; yy++) {
1174 ✗ for (int xx = 0; xx < bw; xx++) {
1175 ✗ const int idx = xx + yy * 8;
1176 float b, g, r;
1177
1178 ✗ convert(yb[idx], ub[idx], vb[idx], &b, &g, &r);
1179
1180 ✗ bo[xx] = float2half(av_float2int(to_linear(b, 1.f)), &s->f2h_tables);
1181 ✗ go[xx] = float2half(av_float2int(to_linear(g, 1.f)), &s->f2h_tables);
1182 ✗ ro[xx] = float2half(av_float2int(to_linear(r, 1.f)), &s->f2h_tables);
1183 }
1184
1185 ✗ bo += td->xsize * s->nb_channels;
1186 ✗ go += td->xsize * s->nb_channels;
1187 ✗ ro += td->xsize * s->nb_channels;
1188 }
1189 } else {
1190 ✗ float *bo = ((float *)td->uncompressed_data) +
1191 ✗ y * td->xsize * s->nb_channels + td->xsize * (o + 0) + x;
1192 ✗ float *go = ((float *)td->uncompressed_data) +
1193 ✗ y * td->xsize * s->nb_channels + td->xsize * (o + 1) + x;
1194 ✗ float *ro = ((float *)td->uncompressed_data) +
1195 ✗ y * td->xsize * s->nb_channels + td->xsize * (o + 2) + x;
1196
1197 ✗ for (int yy = 0; yy < bh; yy++) {
1198 ✗ for (int xx = 0; xx < bw; xx++) {
1199 ✗ const int idx = xx + yy * 8;
1200
1201 ✗ convert(yb[idx], ub[idx], vb[idx], &bo[xx], &go[xx], &ro[xx]);
1202
1203 ✗ bo[xx] = to_linear(bo[xx], 1.f);
1204 ✗ go[xx] = to_linear(go[xx], 1.f);
1205 ✗ ro[xx] = to_linear(ro[xx], 1.f);
1206 }
1207
1208 ✗ bo += td->xsize * s->nb_channels;
1209 ✗ go += td->xsize * s->nb_channels;
1210 ✗ ro += td->xsize * s->nb_channels;
1211 }
1212 }
1213 }
1214 }
1215
1216 ✗ if (s->nb_channels < 4)
1217 ✗ return 0;
1218
1219 ✗ if (s->pixel_type == EXR_HALF) {
1220 ✗ for (int y = 0; y < td->ysize && have_rle; y++) {
1221 ✗ uint16_t *ao = ((uint16_t *)td->uncompressed_data) + y * td->xsize * s->nb_channels;
1222 ✗ uint8_t *ai0 = td->rle_raw_data + y * td->xsize;
1223 ✗ uint8_t *ai1 = td->rle_raw_data + y * td->xsize + rle_raw_size / 2;
1224
1225 ✗ for (int x = 0; x < td->xsize; x++)
1226 ✗ ao[x] = ai0[x] | (ai1[x] << 8);
1227 }
1228 } else {
1229 ✗ for (int y = 0; y < td->ysize && have_rle; y++) {
1230 ✗ uint32_t *ao = ((uint32_t *)td->uncompressed_data) + y * td->xsize * s->nb_channels;
1231 ✗ uint8_t *ai0 = td->rle_raw_data + y * td->xsize;
1232 ✗ uint8_t *ai1 = td->rle_raw_data + y * td->xsize + rle_raw_size / 2;
1233
1234 ✗ for (int x = 0; x < td->xsize; x++) {
1235 ✗ uint16_t ha = ai0[x] | (ai1[x] << 8);
1236
1237 ✗ ao[x] = half2float(ha, &s->h2f_tables);
1238 }
1239 }
1240 }
1241
1242 ✗ return 0;
1243 }
1244
1245 37267 static int decode_block(AVCodecContext *avctx, void *tdata,
1246 int jobnr, int threadnr)
1247 {
1248 37267 const EXRContext *s = avctx->priv_data;
1249 37267 AVFrame *const p = s->picture;
1250 37267 EXRThreadData *td = &s->thread_data[threadnr];
1251 37267 const uint8_t *channel_buffer[4] = { 0 };
1252 37267 const uint8_t *buf = s->buf;
1253 uint64_t line_offset, uncompressed_size;
1254 uint8_t *ptr;
1255 uint32_t data_size;
1256 37267 int line, col = 0;
1257 uint64_t tile_x, tile_y, tile_level_x, tile_level_y;
1258 const uint8_t *src;
1259 37267 int step = s->desc->comp[0].step;
1260 37267 int bxmin = 0, axmax = 0, window_xoffset = 0;
1261 int window_xmin, window_xmax, window_ymin, window_ymax;
1262 int data_xoffset, data_yoffset, data_window_offset, xsize, ysize;
1263 37267 int i, x, buf_size = s->buf_size;
1264 int c, rgb_channel_count;
1265 #if FF_API_EXR_GAMMA
1266 37267 float one_gamma = 1.0f / s->gamma;
1267 37267 av_csp_trc_function trc_func = av_csp_trc_func_from_id(s->apply_trc_type);
1268 #endif
1269 int ret;
1270
1271 37267 line_offset = AV_RL64(s->gb.buffer + jobnr * 8);
1272
1273
2/2
✓ Branch 0 taken 104 times.
✓ Branch 1 taken 37163 times.
 37267 if (s->is_tile) {
1274
2/4
✓ Branch 0 taken 104 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 104 times.
 104 if (buf_size < 20 || line_offset > buf_size - 20)
1275 ✗ return AVERROR_INVALIDDATA;
1276
1277 104 src = buf + line_offset + 20;
1278
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 104 times.
 104 if (s->is_multipart)
1279 ✗ src += 4;
1280
1281 104 tile_x = AV_RL32(src - 20);
1282 104 tile_y = AV_RL32(src - 16);
1283 104 tile_level_x = AV_RL32(src - 12);
1284 104 tile_level_y = AV_RL32(src - 8);
1285
1286 104 data_size = AV_RL32(src - 4);
1287
2/4
✓ Branch 0 taken 104 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 104 times.
 104 if (data_size <= 0 || data_size > buf_size - line_offset - 20)
1288 ✗ return AVERROR_INVALIDDATA;
1289
1290
2/4
✓ Branch 0 taken 104 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 104 times.
 104 if (tile_level_x || tile_level_y) { /* tile level, is not the full res level */
1291 ✗ avpriv_report_missing_feature(s->avctx, "Subres tile before full res tile");
1292 ✗ return AVERROR_PATCHWELCOME;
1293 }
1294
1295
3/4
✓ Branch 0 taken 70 times.
✓ Branch 1 taken 34 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 70 times.
 104 if (tile_x && s->tile_attr.xSize + (int64_t)FFMAX(s->xmin, 0) >= INT_MAX / tile_x )
1296 ✗ return AVERROR_INVALIDDATA;
1297
3/4
✓ Branch 0 taken 66 times.
✓ Branch 1 taken 38 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 66 times.
 104 if (tile_y && s->tile_attr.ySize + (int64_t)FFMAX(s->ymin, 0) >= INT_MAX / tile_y )
1298 ✗ return AVERROR_INVALIDDATA;
1299
1300 104 line = s->ymin + s->tile_attr.ySize * tile_y;
1301 104 col = s->tile_attr.xSize * tile_x;
1302
1303
3/6
✓ Branch 0 taken 104 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 104 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 104 times.
✗ Branch 5 not taken.
 104 if (line < s->ymin || line > s->ymax ||
1304
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 104 times.
 104 s->xmin + col < s->xmin || s->xmin + col > s->xmax)
1305 ✗ return AVERROR_INVALIDDATA;
1306
1307 104 td->ysize = FFMIN(s->tile_attr.ySize, s->ydelta - tile_y * s->tile_attr.ySize);
1308 104 td->xsize = FFMIN(s->tile_attr.xSize, s->xdelta - tile_x * s->tile_attr.xSize);
1309
1310
2/4
✓ Branch 0 taken 104 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 104 times.
 208 if (td->xsize * (uint64_t)s->current_channel_offset > INT_MAX ||
1311 104 av_image_check_size2(td->xsize, td->ysize, s->avctx->max_pixels, AV_PIX_FMT_NONE, 0, s->avctx) < 0)
1312 ✗ return AVERROR_INVALIDDATA;
1313
1314 104 td->channel_line_size = td->xsize * s->current_channel_offset;/* uncompress size of one line */
1315 104 uncompressed_size = td->channel_line_size * (uint64_t)td->ysize;/* uncompress size of the block */
1316 } else {
1317
2/4
✓ Branch 0 taken 37163 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 37163 times.
 37163 if (buf_size < 8 || line_offset > buf_size - 8)
1318 ✗ return AVERROR_INVALIDDATA;
1319
1320 37163 src = buf + line_offset + 8;
1321
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 37163 times.
 37163 if (s->is_multipart)
1322 ✗ src += 4;
1323 37163 line = AV_RL32(src - 8);
1324
1325
2/4
✓ Branch 0 taken 37163 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 37163 times.
 37163 if (line < s->ymin || line > s->ymax)
1326 ✗ return AVERROR_INVALIDDATA;
1327
1328 37163 data_size = AV_RL32(src - 4);
1329
2/4
✓ Branch 0 taken 37163 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 37163 times.
 37163 if (data_size <= 0 || data_size > buf_size - line_offset - 8)
1330 ✗ return AVERROR_INVALIDDATA;
1331
1332 37163 td->ysize = FFMIN(s->scan_lines_per_block, s->ymax - line + 1); /* s->ydelta - line ?? */
1333 37163 td->xsize = s->xdelta;
1334
1335
2/4
✓ Branch 0 taken 37163 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 37163 times.
 74326 if (td->xsize * (uint64_t)s->current_channel_offset > INT_MAX ||
1336 37163 av_image_check_size2(td->xsize, td->ysize, s->avctx->max_pixels, AV_PIX_FMT_NONE, 0, s->avctx) < 0)
1337 ✗ return AVERROR_INVALIDDATA;
1338
1339 37163 td->channel_line_size = td->xsize * s->current_channel_offset;/* uncompress size of one line */
1340 37163 uncompressed_size = td->channel_line_size * (uint64_t)td->ysize;/* uncompress size of the block */
1341
1342
3/4
✓ Branch 0 taken 11927 times.
✓ Branch 1 taken 25236 times.
✓ Branch 2 taken 11927 times.
✗ Branch 3 not taken.
 37163 if ((s->compression == EXR_RAW && (data_size != uncompressed_size ||
1343
1/2
✓ Branch 0 taken 11927 times.
✗ Branch 1 not taken.
 11927 line_offset > buf_size - uncompressed_size)) ||
1344
3/4
✓ Branch 0 taken 25236 times.
✓ Branch 1 taken 11927 times.
✓ Branch 2 taken 25236 times.
✗ Branch 3 not taken.
 37163 (s->compression != EXR_RAW && (data_size > uncompressed_size ||
1345
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 25236 times.
 25236 line_offset > buf_size - data_size))) {
1346 ✗ return AVERROR_INVALIDDATA;
1347 }
1348 }
1349
1350 37267 window_xmin = FFMIN(avctx->width, FFMAX(0, s->xmin + col));
1351 37267 window_xmax = FFMIN(avctx->width, FFMAX(0, s->xmin + col + td->xsize));
1352 37267 window_ymin = FFMIN(avctx->height, FFMAX(0, line ));
1353 37267 window_ymax = FFMIN(avctx->height, FFMAX(0, line + td->ysize));
1354 37267 xsize = window_xmax - window_xmin;
1355 37267 ysize = window_ymax - window_ymin;
1356
1357 /* tile or scanline not visible skip decoding */
1358
4/4
✓ Branch 0 taken 37237 times.
✓ Branch 1 taken 30 times.
✓ Branch 2 taken 403 times.
✓ Branch 3 taken 36834 times.
 37267 if (xsize <= 0 || ysize <= 0)
1359 433 return 0;
1360
1361 /* is the first tile or is a scanline */
1362
2/2
✓ Branch 0 taken 36794 times.
✓ Branch 1 taken 40 times.
 36834 if(col == 0) {
1363 36794 window_xmin = 0;
1364 /* pixels to add at the left of the display window */
1365 36794 window_xoffset = FFMAX(0, s->xmin);
1366 /* bytes to add at the left of the display window */
1367 36794 bxmin = window_xoffset * step;
1368 }
1369
1370 /* is the last tile or is a scanline */
1371
2/2
✓ Branch 0 taken 36794 times.
✓ Branch 1 taken 40 times.
 36834 if(col + td->xsize == s->xdelta) {
1372 36794 window_xmax = avctx->width;
1373 /* bytes to add at the right of the display window */
1374 36794 axmax = FFMAX(0, (avctx->width - (s->xmax + 1))) * step;
1375 }
1376
1377
2/4
✓ Branch 0 taken 36834 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 36834 times.
 36834 if (avctx->max_pixels && uncompressed_size > avctx->max_pixels * 16LL)
1378 ✗ return AVERROR_INVALIDDATA;
1379
1380
4/4
✓ Branch 0 taken 19019 times.
✓ Branch 1 taken 17815 times.
✓ Branch 2 taken 13 times.
✓ Branch 3 taken 19006 times.
 36834 if (data_size < uncompressed_size || s->is_tile) { /* td->tmp is use for tile reorganization */
1381 17828 av_fast_padded_malloc(&td->tmp, &td->tmp_size, uncompressed_size);
1382
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 17828 times.
 17828 if (!td->tmp)
1383 ✗ return AVERROR(ENOMEM);
1384 }
1385
1386
2/2
✓ Branch 0 taken 17815 times.
✓ Branch 1 taken 19019 times.
 36834 if (data_size < uncompressed_size) {
1387 17815 av_fast_padded_malloc(&td->uncompressed_data,
1388 17815 &td->uncompressed_size, uncompressed_size + 64);/* Force 64 padding for AVX2 reorder_pixels dst */
1389
1390
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 17815 times.
 17815 if (!td->uncompressed_data)
1391 ✗ return AVERROR(ENOMEM);
1392
1393 17815 ret = AVERROR_INVALIDDATA;
1394
5/7
✓ Branch 0 taken 12853 times.
✓ Branch 1 taken 30 times.
✓ Branch 2 taken 61 times.
✓ Branch 3 taken 4848 times.
✓ Branch 4 taken 23 times.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
 17815 switch (s->compression) {
1395 12853 case EXR_ZIP1:
1396 case EXR_ZIP16:
1397 12853 ret = zip_uncompress(s, src, data_size, uncompressed_size, td);
1398 12853 break;
1399 30 case EXR_PIZ:
1400 30 ret = piz_uncompress(s, src, data_size, uncompressed_size, td);
1401 30 break;
1402 61 case EXR_PXR24:
1403 61 ret = pxr24_uncompress(s, src, data_size, uncompressed_size, td);
1404 61 break;
1405 4848 case EXR_RLE:
1406 4848 ret = rle_uncompress(s, src, data_size, uncompressed_size, td);
1407 4848 break;
1408 23 case EXR_B44:
1409 case EXR_B44A:
1410 23 ret = b44_uncompress(s, src, data_size, uncompressed_size, td);
1411 23 break;
1412 ✗ case EXR_DWAA:
1413 case EXR_DWAB:
1414 ✗ ret = dwa_uncompress(s, src, data_size, uncompressed_size, td);
1415 ✗ break;
1416 }
1417
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 17815 times.
 17815 if (ret < 0) {
1418 ✗ av_log(avctx, AV_LOG_ERROR, "decode_block() failed.\n");
1419 ✗ return ret;
1420 }
1421 17815 src = td->uncompressed_data;
1422 }
1423
1424 /* offsets to crop data outside display window */
1425
4/4
✓ Branch 0 taken 36724 times.
✓ Branch 1 taken 110 times.
✓ Branch 2 taken 2320 times.
✓ Branch 3 taken 34514 times.
 36834 data_xoffset = FFABS(FFMIN(0, s->xmin + col)) * (s->pixel_type == EXR_HALF ? 2 : 4);
1426
2/2
✓ Branch 0 taken 36828 times.
✓ Branch 1 taken 6 times.
 36834 data_yoffset = FFABS(FFMIN(0, line));
1427 36834 data_window_offset = (data_yoffset * td->channel_line_size) + data_xoffset;
1428
1429
2/2
✓ Branch 0 taken 13595 times.
✓ Branch 1 taken 23239 times.
 36834 if (s->channel_offsets[3] >= 0)
1430 13595 channel_buffer[3] = src + (td->xsize * s->channel_offsets[3]) + data_window_offset;
1431
2/2
✓ Branch 0 taken 25358 times.
✓ Branch 1 taken 11476 times.
 36834 if (!s->is_luma) {
1432 25358 channel_buffer[0] = src + (td->xsize * s->channel_offsets[0]) + data_window_offset;
1433 25358 channel_buffer[1] = src + (td->xsize * s->channel_offsets[1]) + data_window_offset;
1434 25358 channel_buffer[2] = src + (td->xsize * s->channel_offsets[2]) + data_window_offset;
1435 25358 rgb_channel_count = 3;
1436 } else { /* put y data in the first channel_buffer and if needed, alpha in the second */
1437 11476 channel_buffer[0] = src + (td->xsize * s->channel_offsets[1]) + data_window_offset;
1438
1/2
✓ Branch 0 taken 11476 times.
✗ Branch 1 not taken.
 11476 if (!(s->desc->flags & AV_PIX_FMT_FLAG_PLANAR))
1439 11476 channel_buffer[1] = channel_buffer[3];
1440 11476 rgb_channel_count = 1;
1441 }
1442
1443
2/2
✓ Branch 0 taken 36824 times.
✓ Branch 1 taken 10 times.
 36834 if (s->desc->flags & AV_PIX_FMT_FLAG_FLOAT) {
1444
2/2
✓ Branch 0 taken 101115 times.
✓ Branch 1 taken 36824 times.
 137939 for (c = 0; c < s->desc->nb_components; c++) {
1445 101115 int plane = s->desc->comp[c].plane;
1446 101115 ptr = p->data[plane] + window_ymin * p->linesize[plane] + (window_xmin * step) + s->desc->comp[c].offset;
1447
1448
2/2
✓ Branch 0 taken 146508 times.
✓ Branch 1 taken 101115 times.
 247623 for (i = 0; i < ysize; i++, ptr += p->linesize[plane]) {
1449 146508 const uint8_t *src = channel_buffer[c];
1450 146508 uint8_t *ptr_x = ptr + window_xoffset * step;
1451
1452 // Zero out the start if xmin is not 0
1453
4/4
✓ Branch 0 taken 15008 times.
✓ Branch 1 taken 131500 times.
✓ Branch 2 taken 15000 times.
✓ Branch 3 taken 8 times.
 146508 if (s->desc->flags & AV_PIX_FMT_FLAG_PLANAR || !c)
1454 146500 memset(ptr, 0, bxmin);
1455
1456
2/2
✓ Branch 0 taken 121876 times.
✓ Branch 1 taken 24632 times.
 146508 if (s->pixel_type == EXR_FLOAT) {
1457 // 32-bit
1458 #if FF_API_EXR_GAMMA
1459
1/8
✗ Branch 0 not taken.
✓ Branch 1 taken 121876 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
✗ Branch 7 not taken.
 121876 if (trc_func && (!c || (c < 3 && s->desc->flags & AV_PIX_FMT_FLAG_PLANAR))) {
1460 ✗ for (int x = 0; x < xsize; x++, ptr_x += step) {
1461 ✗ float f = av_int2float(bytestream_get_le32(&src));
1462 ✗ AV_WN32A(ptr_x, av_float2int(trc_func(f)));
1463 }
1464
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 121876 times.
 121876 } else if (one_gamma != 1.f) {
1465 ✗ for (int x = 0; x < xsize; x++, ptr_x += step) {
1466 ✗ float f = av_int2float(bytestream_get_le32(&src));
1467 ✗ if (f > 0.0f && c < 3) /* avoid negative values */
1468 ✗ f = powf(f, one_gamma);
1469 ✗ AV_WN32A(ptr_x, av_float2int(f));
1470 }
1471 } else
1472 #endif
1473
2/2
✓ Branch 0 taken 42250824 times.
✓ Branch 1 taken 121876 times.
 42372700 for (int x = 0; x < xsize; x++, ptr_x += step)
1474 42250824 AV_WN32A(ptr_x, bytestream_get_le32(&src));
1475
1/2
✓ Branch 0 taken 24632 times.
✗ Branch 1 not taken.
 24632 } else if (s->pixel_type == EXR_HALF) {
1476 // 16-bit
1477 #if FF_API_EXR_GAMMA
1478
2/10
✓ Branch 0 taken 24632 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 24632 times.
✗ Branch 4 not taken.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
✗ Branch 7 not taken.
✗ Branch 8 not taken.
✗ Branch 9 not taken.
 24632 if (one_gamma != 1.f || (trc_func && (!c || (c < 3 && s->desc->flags & AV_PIX_FMT_FLAG_PLANAR)))) {
1479 ✗ for (int x = 0; x < xsize; x++, ptr_x += step)
1480 ✗ AV_WN16A(ptr_x, s->gamma_table[bytestream_get_le16(&src)]);
1481 } else
1482 #endif
1483
2/2
✓ Branch 0 taken 10513905 times.
✓ Branch 1 taken 24632 times.
 10538537 for (int x = 0; x < xsize; x++, ptr_x += step)
1484 10513905 AV_WN16A(ptr_x, bytestream_get_le16(&src));
1485 }
1486
1487 // Zero out the end if xmax+1 is not w
1488
4/4
✓ Branch 0 taken 15008 times.
✓ Branch 1 taken 131500 times.
✓ Branch 2 taken 15000 times.
✓ Branch 3 taken 8 times.
 146508 if (s->desc->flags & AV_PIX_FMT_FLAG_PLANAR || !c)
1489 146500 memset(ptr_x, 0, axmax);
1490 146508 channel_buffer[c] += td->channel_line_size;
1491 }
1492 }
1493 } else {
1494
1495 av_assert1(s->pixel_type == EXR_UINT);
1496 10 ptr = p->data[0] + window_ymin * p->linesize[0] + (window_xmin * s->desc->nb_components * 2);
1497
1498
2/2
✓ Branch 0 taken 175 times.
✓ Branch 1 taken 10 times.
 185 for (i = 0; i < ysize; i++, ptr += p->linesize[0]) {
1499
1500 const uint8_t * a;
1501 const uint8_t *rgb[3];
1502 uint16_t *ptr_x;
1503
1504
2/2
✓ Branch 0 taken 525 times.
✓ Branch 1 taken 175 times.
 700 for (c = 0; c < rgb_channel_count; c++) {
1505 525 rgb[c] = channel_buffer[c];
1506 }
1507
1508
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 175 times.
 175 if (channel_buffer[3])
1509 ✗ a = channel_buffer[3];
1510
1511 175 ptr_x = (uint16_t *) ptr;
1512
1513 // Zero out the start if xmin is not 0
1514 175 memset(ptr_x, 0, bxmin);
1515 175 ptr_x += window_xoffset * s->desc->nb_components;
1516
1517
2/2
✓ Branch 0 taken 5309 times.
✓ Branch 1 taken 175 times.
 5484 for (x = 0; x < xsize; x++) {
1518
2/2
✓ Branch 0 taken 15927 times.
✓ Branch 1 taken 5309 times.
 21236 for (c = 0; c < rgb_channel_count; c++) {
1519 15927 *ptr_x++ = bytestream_get_le32(&rgb[c]) >> 16;
1520 }
1521
1522
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 5309 times.
 5309 if (channel_buffer[3])
1523 ✗ *ptr_x++ = bytestream_get_le32(&a) >> 16;
1524 }
1525
1526 // Zero out the end if xmax+1 is not w
1527 175 memset(ptr_x, 0, axmax);
1528
1529 175 channel_buffer[0] += td->channel_line_size;
1530 175 channel_buffer[1] += td->channel_line_size;
1531 175 channel_buffer[2] += td->channel_line_size;
1532
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 175 times.
 175 if (channel_buffer[3])
1533 ✗ channel_buffer[3] += td->channel_line_size;
1534 }
1535 }
1536
1537 36834 return 0;
1538 }
1539
1540 ✗ static void skip_header_chunk(EXRContext *s)
1541 {
1542 ✗ GetByteContext *gb = &s->gb;
1543
1544 ✗ while (bytestream2_get_bytes_left(gb) > 0) {
1545 ✗ if (!bytestream2_peek_byte(gb))
1546 ✗ break;
1547
1548 // Process unknown variables
1549 ✗ for (int i = 0; i < 2; i++) // value_name and value_type
1550 ✗ while (bytestream2_get_byte(gb) != 0);
1551
1552 // Skip variable length
1553 ✗ bytestream2_skip(gb, bytestream2_get_le32(gb));
1554 }
1555 ✗ }
1556
1557 /**
1558 * Check if the variable name corresponds to its data type.
1559 *
1560 * @param s the EXRContext
1561 * @param value_name name of the variable to check
1562 * @param value_type type of the variable to check
1563 * @param minimum_length minimum length of the variable data
1564 *
1565 * @return bytes to read containing variable data
1566 * -1 if variable is not found
1567 * 0 if buffer ended prematurely
1568 */
1569 32478 static int check_header_variable(EXRContext *s,
1570 const char *value_name,
1571 const char *value_type,
1572 unsigned int minimum_length)
1573 {
1574 32478 GetByteContext *gb = &s->gb;
1575 32478 int var_size = -1;
1576
1577
1/2
✓ Branch 1 taken 32478 times.
✗ Branch 2 not taken.
 32478 if (bytestream2_get_bytes_left(gb) >= minimum_length &&
1578
2/2
✓ Branch 0 taken 2166 times.
✓ Branch 1 taken 30312 times.
 32478 !strcmp(gb->buffer, value_name)) {
1579 // found value_name, jump to value_type (null terminated strings)
1580 2166 gb->buffer += strlen(value_name) + 1;
1581
1/2
✓ Branch 0 taken 2166 times.
✗ Branch 1 not taken.
 2166 if (!strcmp(gb->buffer, value_type)) {
1582 2166 gb->buffer += strlen(value_type) + 1;
1583 2166 var_size = bytestream2_get_le32(gb);
1584 // don't go read past boundaries
1585
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 2166 times.
 2166 if (var_size > bytestream2_get_bytes_left(gb))
1586 ✗ var_size = 0;
1587 } else {
1588 // value_type not found, reset the buffer
1589 ✗ gb->buffer -= strlen(value_name) + 1;
1590 ✗ av_log(s->avctx, AV_LOG_WARNING,
1591 "Unknown data type %s for header variable %s.\n",
1592 value_type, value_name);
1593 }
1594 }
1595
1596 32478 return var_size;
1597 }
1598
1599 316 static int decode_header(EXRContext *s, AVFrame *frame)
1600 {
1601 316 AVDictionary *metadata = NULL;
1602 316 GetByteContext *gb = &s->gb;
1603 int magic_number, version, flags;
1604 316 int layer_match = 0;
1605 int ret;
1606 316 int dup_channels = 0;
1607
1608 316 s->current_channel_offset = 0;
1609 316 s->xmin = ~0;
1610 316 s->xmax = ~0;
1611 316 s->ymin = ~0;
1612 316 s->ymax = ~0;
1613 316 s->xdelta = ~0;
1614 316 s->ydelta = ~0;
1615 316 s->channel_offsets[0] = -1;
1616 316 s->channel_offsets[1] = -1;
1617 316 s->channel_offsets[2] = -1;
1618 316 s->channel_offsets[3] = -1;
1619 316 s->pixel_type = EXR_UNKNOWN;
1620 316 s->compression = EXR_UNKN;
1621 316 s->nb_channels = 0;
1622 316 s->w = 0;
1623 316 s->h = 0;
1624 316 s->tile_attr.xSize = -1;
1625 316 s->tile_attr.ySize = -1;
1626 316 s->is_tile = 0;
1627 316 s->is_multipart = 0;
1628 316 s->is_luma = 0;
1629 316 s->has_channel = 0;
1630 316 s->current_part = 0;
1631
1632
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 316 times.
 316 if (bytestream2_get_bytes_left(gb) < 10) {
1633 ✗ av_log(s->avctx, AV_LOG_ERROR, "Header too short to parse.\n");
1634 ✗ return AVERROR_INVALIDDATA;
1635 }
1636
1637 316 magic_number = bytestream2_get_le32(gb);
1638
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (magic_number != 20000630) {
1639 /* As per documentation of OpenEXR, it is supposed to be
1640 * int 20000630 little-endian */
1641 ✗ av_log(s->avctx, AV_LOG_ERROR, "Wrong magic number %d.\n", magic_number);
1642 ✗ return AVERROR_INVALIDDATA;
1643 }
1644
1645 316 version = bytestream2_get_byte(gb);
1646
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (version != 2) {
1647 ✗ avpriv_report_missing_feature(s->avctx, "Version %d", version);
1648 ✗ return AVERROR_PATCHWELCOME;
1649 }
1650
1651 316 flags = bytestream2_get_le24(gb);
1652
1653
2/2
✓ Branch 0 taken 44 times.
✓ Branch 1 taken 272 times.
 316 if (flags & 0x02)
1654 44 s->is_tile = 1;
1655
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (flags & 0x10)
1656 ✗ s->is_multipart = 1;
1657
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (flags & 0x08) {
1658 ✗ avpriv_report_missing_feature(s->avctx, "deep data");
1659 ✗ return AVERROR_PATCHWELCOME;
1660 }
1661
1662 // Parse the header
1663
1/2
✓ Branch 1 taken 4396 times.
✗ Branch 2 not taken.
 4396 while (bytestream2_get_bytes_left(gb) > 0) {
1664 int var_size;
1665
1666
1/6
✗ Branch 0 not taken.
✓ Branch 1 taken 4396 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✗ Branch 5 not taken.
 4396 while (s->is_multipart && s->current_part < s->selected_part &&
1667 ✗ bytestream2_get_bytes_left(gb) > 0) {
1668 ✗ if (bytestream2_peek_byte(gb)) {
1669 ✗ skip_header_chunk(s);
1670 } else {
1671 ✗ bytestream2_skip(gb, 1);
1672 ✗ if (!bytestream2_peek_byte(gb))
1673 ✗ break;
1674 }
1675 ✗ bytestream2_skip(gb, 1);
1676 ✗ s->current_part++;
1677 }
1678
1679
2/2
✓ Branch 1 taken 316 times.
✓ Branch 2 taken 4080 times.
 4396 if (!bytestream2_peek_byte(gb)) {
1680
1/2
✓ Branch 0 taken 316 times.
✗ Branch 1 not taken.
 316 if (!s->is_multipart)
1681 316 break;
1682 ✗ bytestream2_skip(gb, 1);
1683 ✗ if (s->current_part == s->selected_part) {
1684 ✗ while (bytestream2_get_bytes_left(gb) > 0) {
1685 ✗ if (bytestream2_peek_byte(gb)) {
1686 ✗ skip_header_chunk(s);
1687 } else {
1688 ✗ bytestream2_skip(gb, 1);
1689 ✗ if (!bytestream2_peek_byte(gb))
1690 ✗ break;
1691 }
1692 }
1693 }
1694 ✗ if (!bytestream2_peek_byte(gb))
1695 ✗ break;
1696 ✗ s->current_part++;
1697 }
1698
1699
2/2
✓ Branch 1 taken 316 times.
✓ Branch 2 taken 3764 times.
 4080 if ((var_size = check_header_variable(s, "channels",
1700 316 "chlist", 38)) >= 0) {
1701 GetByteContext ch_gb;
1702
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (!var_size) {
1703 ✗ ret = AVERROR_INVALIDDATA;
1704 ✗ goto fail;
1705 }
1706
1707 316 bytestream2_init(&ch_gb, gb->buffer, var_size);
1708
1709
2/2
✓ Branch 1 taken 1212 times.
✓ Branch 2 taken 316 times.
 1528 while (bytestream2_get_bytes_left(&ch_gb) >= 19) {
1710 EXRChannel *channel;
1711 enum ExrPixelType current_pixel_type;
1712 1212 int channel_index = -1;
1713 int xsub, ysub;
1714
1715
2/2
✓ Branch 0 taken 272 times.
✓ Branch 1 taken 940 times.
 1212 if (strcmp(s->layer, "") != 0) {
1716
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 122 times.
 272 if (strncmp(ch_gb.buffer, s->layer, strlen(s->layer)) == 0) {
1717 150 layer_match = 1;
1718 150 av_log(s->avctx, AV_LOG_INFO,
1719 "Channel match layer : %s.\n", ch_gb.buffer);
1720 150 ch_gb.buffer += strlen(s->layer);
1721
1/2
✓ Branch 0 taken 150 times.
✗ Branch 1 not taken.
 150 if (*ch_gb.buffer == '.')
1722 150 ch_gb.buffer++; /* skip dot if not given */
1723 } else {
1724 122 layer_match = 0;
1725 122 av_log(s->avctx, AV_LOG_INFO,
1726 "Channel doesn't match layer : %s.\n", ch_gb.buffer);
1727 }
1728 } else {
1729 940 layer_match = 1;
1730 }
1731
1732
2/2
✓ Branch 0 taken 1090 times.
✓ Branch 1 taken 122 times.
 1212 if (layer_match) { /* only search channel if the layer match is valid */
1733
2/2
✓ Branch 0 taken 938 times.
✓ Branch 1 taken 152 times.
 1090 if (strlen(ch_gb.buffer) == 1) {
1734 938 int ch_chr = av_toupper(*ch_gb.buffer);
1735
2/4
✓ Branch 0 taken 938 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 938 times.
✗ Branch 3 not taken.
 938 if (ch_chr >= 'A' && ch_chr <= 'Z')
1736 938 s->has_channel |= M(ch_chr);
1737 938 av_log(s->avctx, AV_LOG_DEBUG, "%c\n", ch_chr);
1738 }
1739
1740
3/4
✓ Branch 1 taken 836 times.
✓ Branch 2 taken 254 times.
✓ Branch 3 taken 836 times.
✗ Branch 4 not taken.
 1926 if (!av_strcasecmp(ch_gb.buffer, "R") ||
1741
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 836 times.
 1672 !av_strcasecmp(ch_gb.buffer, "X") ||
1742 836 !av_strcasecmp(ch_gb.buffer, "U")) {
1743 254 channel_index = 0;
1744
3/4
✓ Branch 1 taken 582 times.
✓ Branch 2 taken 254 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 582 times.
 1418 } else if (!av_strcasecmp(ch_gb.buffer, "G") ||
1745 582 !av_strcasecmp(ch_gb.buffer, "V")) {
1746 254 channel_index = 1;
1747
2/2
✓ Branch 1 taken 62 times.
✓ Branch 2 taken 520 times.
 582 } else if (!av_strcasecmp(ch_gb.buffer, "Y")) {
1748 62 channel_index = 1;
1749
3/4
✓ Branch 1 taken 266 times.
✓ Branch 2 taken 254 times.
✓ Branch 3 taken 266 times.
✗ Branch 4 not taken.
 786 } else if (!av_strcasecmp(ch_gb.buffer, "B") ||
1750
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 266 times.
 532 !av_strcasecmp(ch_gb.buffer, "Z") ||
1751 266 !av_strcasecmp(ch_gb.buffer, "W")) {
1752 254 channel_index = 2;
1753
2/2
✓ Branch 1 taken 114 times.
✓ Branch 2 taken 152 times.
 266 } else if (!av_strcasecmp(ch_gb.buffer, "A")) {
1754 114 channel_index = 3;
1755 } else {
1756 152 av_log(s->avctx, AV_LOG_WARNING,
1757 "Unsupported channel %.256s.\n", ch_gb.buffer);
1758 }
1759 }
1760
1761 /* skip until you get a 0 */
1762
3/4
✓ Branch 1 taken 4856 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 3644 times.
✓ Branch 4 taken 1212 times.
 9712 while (bytestream2_get_bytes_left(&ch_gb) > 0 &&
1763 4856 bytestream2_get_byte(&ch_gb))
1764 3644 continue;
1765
1766
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 1212 times.
 1212 if (bytestream2_get_bytes_left(&ch_gb) < 4) {
1767 ✗ av_log(s->avctx, AV_LOG_ERROR, "Incomplete header.\n");
1768 ✗ ret = AVERROR_INVALIDDATA;
1769 ✗ goto fail;
1770 }
1771
1772 1212 current_pixel_type = bytestream2_get_le32(&ch_gb);
1773
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1212 times.
 1212 if (current_pixel_type >= EXR_UNKNOWN) {
1774 ✗ avpriv_report_missing_feature(s->avctx, "Pixel type %d",
1775 current_pixel_type);
1776 ✗ ret = AVERROR_PATCHWELCOME;
1777 ✗ goto fail;
1778 }
1779
1780 1212 bytestream2_skip(&ch_gb, 4);
1781 1212 xsub = bytestream2_get_le32(&ch_gb);
1782 1212 ysub = bytestream2_get_le32(&ch_gb);
1783
1784
2/4
✓ Branch 0 taken 1212 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 1212 times.
 1212 if (xsub != 1 || ysub != 1) {
1785 ✗ avpriv_report_missing_feature(s->avctx,
1786 "Subsampling %dx%d",
1787 xsub, ysub);
1788 ✗ ret = AVERROR_PATCHWELCOME;
1789 ✗ goto fail;
1790 }
1791
1792
3/4
✓ Branch 0 taken 938 times.
✓ Branch 1 taken 274 times.
✓ Branch 2 taken 938 times.
✗ Branch 3 not taken.
 1212 if (channel_index >= 0 && s->channel_offsets[channel_index] == -1) { /* channel has not been previously assigned */
1793
2/2
✓ Branch 0 taken 622 times.
✓ Branch 1 taken 316 times.
 938 if (s->pixel_type != EXR_UNKNOWN &&
1794
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 622 times.
 622 s->pixel_type != current_pixel_type) {
1795 ✗ av_log(s->avctx, AV_LOG_ERROR,
1796 "RGB channels not of the same depth.\n");
1797 ✗ ret = AVERROR_INVALIDDATA;
1798 ✗ goto fail;
1799 }
1800 938 s->pixel_type = current_pixel_type;
1801 938 s->channel_offsets[channel_index] = s->current_channel_offset;
1802
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 274 times.
 274 } else if (channel_index >= 0) {
1803 ✗ av_log(s->avctx, AV_LOG_WARNING,
1804 "Multiple channels with index %d.\n", channel_index);
1805 ✗ if (++dup_channels > 10) {
1806 ✗ ret = AVERROR_INVALIDDATA;
1807 ✗ goto fail;
1808 }
1809 }
1810
1811
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1212 times.
 1212 av_assert0(s->nb_channels < INT_MAX); // Impossible due to size of the bitstream
1812 1212 EXRChannel *new_channels = av_realloc_array(s->channels,
1813 1212 s->nb_channels + 1,
1814 sizeof(EXRChannel));
1815
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1212 times.
 1212 if (!new_channels) {
1816 ✗ ret = AVERROR(ENOMEM);
1817 ✗ goto fail;
1818 }
1819 1212 s->nb_channels ++;
1820 1212 s->channels = new_channels;
1821
1822 1212 channel = &s->channels[s->nb_channels - 1];
1823 1212 channel->pixel_type = current_pixel_type;
1824 1212 channel->xsub = xsub;
1825 1212 channel->ysub = ysub;
1826
1827
2/2
✓ Branch 0 taken 404 times.
✓ Branch 1 taken 808 times.
 1212 if (current_pixel_type == EXR_HALF) {
1828 404 s->current_channel_offset += 2;
1829 } else {/* Float or UINT32 */
1830 808 s->current_channel_offset += 4;
1831 }
1832 }
1833
2/2
✓ Branch 0 taken 254 times.
✓ Branch 1 taken 62 times.
 316 if (!((M('R') + M('G') + M('B')) & ~s->has_channel)) {
1834 254 s->is_luma = 0;
1835
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 62 times.
 62 } else if (!((M('X') + M('Y') + M('Z')) & ~s->has_channel)) {
1836 ✗ s->is_luma = 0;
1837
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 62 times.
 62 } else if (!((M('Y') + M('U') + M('V')) & ~s->has_channel)) {
1838 ✗ s->is_luma = 0;
1839
1/2
✓ Branch 0 taken 62 times.
✗ Branch 1 not taken.
 62 } else if (!((M('Y') ) & ~s->has_channel) &&
1840
1/2
✓ Branch 0 taken 62 times.
✗ Branch 1 not taken.
 62 !((M('R') + M('G') + M('B') + M('U') + M('V') + M('X') + M('Z')) & s->has_channel)) {
1841 62 s->is_luma = 1;
1842 } else {
1843 ✗ avpriv_request_sample(s->avctx, "Uncommon channel combination");
1844 ✗ ret = AVERROR_PATCHWELCOME;
1845 ✗ goto fail;
1846 }
1847
1848 /* Check if all channels are set with an offset or if the channels
1849 * are causing an overflow */
1850
2/2
✓ Branch 0 taken 254 times.
✓ Branch 1 taken 62 times.
 316 if (!s->is_luma) {/* if we expected to have at least 3 channels */
1851
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 254 times.
 254 if (FFMIN3(s->channel_offsets[0],
1852 s->channel_offsets[1],
1853 s->channel_offsets[2]) < 0) {
1854 ✗ if (s->channel_offsets[0] < 0)
1855 ✗ av_log(s->avctx, AV_LOG_ERROR, "Missing red channel.\n");
1856 ✗ if (s->channel_offsets[1] < 0)
1857 ✗ av_log(s->avctx, AV_LOG_ERROR, "Missing green channel.\n");
1858 ✗ if (s->channel_offsets[2] < 0)
1859 ✗ av_log(s->avctx, AV_LOG_ERROR, "Missing blue channel.\n");
1860 ✗ ret = AVERROR_INVALIDDATA;
1861 ✗ goto fail;
1862 }
1863 }
1864
1865 // skip one last byte and update main gb
1866 316 gb->buffer = ch_gb.buffer + 1;
1867 316 continue;
1868
2/2
✓ Branch 1 taken 316 times.
✓ Branch 2 taken 3448 times.
 3764 } else if ((var_size = check_header_variable(s, "dataWindow", "box2i",
1869 316 31)) >= 0) {
1870 int xmin, ymin, xmax, ymax;
1871
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (!var_size) {
1872 ✗ ret = AVERROR_INVALIDDATA;
1873 ✗ goto fail;
1874 }
1875
1876 316 xmin = bytestream2_get_le32(gb);
1877 316 ymin = bytestream2_get_le32(gb);
1878 316 xmax = bytestream2_get_le32(gb);
1879 316 ymax = bytestream2_get_le32(gb);
1880
1881
3/6
✓ Branch 0 taken 316 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 316 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 316 times.
✗ Branch 5 not taken.
 316 if (xmin > xmax || ymin > ymax ||
1882
1/2
✓ Branch 0 taken 316 times.
✗ Branch 1 not taken.
 316 ymax == INT_MAX || xmax == INT_MAX ||
1883
1/2
✓ Branch 0 taken 316 times.
✗ Branch 1 not taken.
 316 (unsigned)xmax - xmin >= INT_MAX ||
1884
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 (unsigned)ymax - ymin >= INT_MAX) {
1885 ✗ ret = AVERROR_INVALIDDATA;
1886 ✗ goto fail;
1887 }
1888 316 s->xmin = xmin;
1889 316 s->xmax = xmax;
1890 316 s->ymin = ymin;
1891 316 s->ymax = ymax;
1892 316 s->xdelta = (s->xmax - s->xmin) + 1;
1893 316 s->ydelta = (s->ymax - s->ymin) + 1;
1894
1895 316 continue;
1896
2/2
✓ Branch 1 taken 316 times.
✓ Branch 2 taken 3132 times.
 3448 } else if ((var_size = check_header_variable(s, "displayWindow",
1897 316 "box2i", 34)) >= 0) {
1898 int32_t sx, sy, dx, dy;
1899
1900
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (!var_size) {
1901 ✗ ret = AVERROR_INVALIDDATA;
1902 ✗ goto fail;
1903 }
1904
1905 316 sx = bytestream2_get_le32(gb);
1906 316 sy = bytestream2_get_le32(gb);
1907 316 dx = bytestream2_get_le32(gb);
1908 316 dy = bytestream2_get_le32(gb);
1909
1910 316 s->w = (unsigned)dx - sx + 1;
1911 316 s->h = (unsigned)dy - sy + 1;
1912
1913 316 continue;
1914
2/2
✓ Branch 1 taken 316 times.
✓ Branch 2 taken 2816 times.
 3132 } else if ((var_size = check_header_variable(s, "lineOrder",
1915 316 "lineOrder", 25)) >= 0) {
1916 int line_order;
1917
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (!var_size) {
1918 ✗ ret = AVERROR_INVALIDDATA;
1919 ✗ goto fail;
1920 }
1921
1922 316 line_order = bytestream2_get_byte(gb);
1923 316 av_log(s->avctx, AV_LOG_DEBUG, "line order: %d.\n", line_order);
1924
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (line_order > 2) {
1925 ✗ av_log(s->avctx, AV_LOG_ERROR, "Unknown line order.\n");
1926 ✗ ret = AVERROR_INVALIDDATA;
1927 ✗ goto fail;
1928 }
1929
1930 316 continue;
1931
2/2
✓ Branch 1 taken 148 times.
✓ Branch 2 taken 2668 times.
 2816 } else if ((var_size = check_header_variable(s, "pixelAspectRatio",
1932 "float", 31)) >= 0) {
1933
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 148 times.
 148 if (!var_size) {
1934 ✗ ret = AVERROR_INVALIDDATA;
1935 ✗ goto fail;
1936 }
1937
1938 148 s->sar = bytestream2_get_le32(gb);
1939
1940 148 continue;
1941
2/2
✓ Branch 1 taken 316 times.
✓ Branch 2 taken 2352 times.
 2668 } else if ((var_size = check_header_variable(s, "compression",
1942 "compression", 29)) >= 0) {
1943
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (!var_size) {
1944 ✗ ret = AVERROR_INVALIDDATA;
1945 ✗ goto fail;
1946 }
1947
1948
1/2
✓ Branch 0 taken 316 times.
✗ Branch 1 not taken.
 316 if (s->compression == EXR_UNKN)
1949 316 s->compression = bytestream2_get_byte(gb);
1950 else {
1951 ✗ bytestream2_skip(gb, 1);
1952 ✗ av_log(s->avctx, AV_LOG_WARNING,
1953 "Found more than one compression attribute.\n");
1954 }
1955
1956 316 continue;
1957
2/2
✓ Branch 1 taken 44 times.
✓ Branch 2 taken 2308 times.
 2352 } else if ((var_size = check_header_variable(s, "tiles",
1958 44 "tiledesc", 22)) >= 0) {
1959 uint8_t tileLevel;
1960
1961
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 44 times.
 44 if (!s->is_tile)
1962 ✗ av_log(s->avctx, AV_LOG_WARNING,
1963 "Found tile attribute and scanline flags. Exr will be interpreted as scanline.\n");
1964
1965 44 s->tile_attr.xSize = bytestream2_get_le32(gb);
1966 44 s->tile_attr.ySize = bytestream2_get_le32(gb);
1967
1968 44 tileLevel = bytestream2_get_byte(gb);
1969 44 s->tile_attr.level_mode = tileLevel & 0x0f;
1970 44 s->tile_attr.level_round = (tileLevel >> 4) & 0x0f;
1971
1972
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 44 times.
 44 if (s->tile_attr.level_mode >= EXR_TILE_LEVEL_UNKNOWN) {
1973 ✗ avpriv_report_missing_feature(s->avctx, "Tile level mode %d",
1974 ✗ s->tile_attr.level_mode);
1975 ✗ ret = AVERROR_PATCHWELCOME;
1976 ✗ goto fail;
1977 }
1978
1979
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 44 times.
 44 if (s->tile_attr.level_round >= EXR_TILE_ROUND_UNKNOWN) {
1980 ✗ avpriv_report_missing_feature(s->avctx, "Tile level round %d",
1981 ✗ s->tile_attr.level_round);
1982 ✗ ret = AVERROR_PATCHWELCOME;
1983 ✗ goto fail;
1984 }
1985
1986 44 continue;
1987
2/2
✓ Branch 1 taken 184 times.
✓ Branch 2 taken 2124 times.
 2308 } else if ((var_size = check_header_variable(s, "writer",
1988 184 "string", 1)) >= 0) {
1989 184 uint8_t key[256] = { 0 };
1990
1991 184 bytestream2_get_buffer(gb, key, FFMIN(sizeof(key) - 1, var_size));
1992 184 av_dict_set(&metadata, "writer", key, 0);
1993
1994 184 continue;
1995
2/2
✓ Branch 1 taken 184 times.
✓ Branch 2 taken 1940 times.
 2124 } else if ((var_size = check_header_variable(s, "framesPerSecond",
1996 "rational", 33)) >= 0) {
1997
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 184 times.
 184 if (!var_size) {
1998 ✗ ret = AVERROR_INVALIDDATA;
1999 ✗ goto fail;
2000 }
2001
2002 184 s->avctx->framerate.num = bytestream2_get_le32(gb);
2003 184 s->avctx->framerate.den = bytestream2_get_le32(gb);
2004
2005 184 continue;
2006
2/2
✓ Branch 1 taken 8 times.
✓ Branch 2 taken 1932 times.
 1940 } else if ((var_size = check_header_variable(s, "chunkCount",
2007 "int", 23)) >= 0) {
2008
2009 8 s->chunk_count = bytestream2_get_le32(gb);
2010
2011 8 continue;
2012
2/2
✓ Branch 1 taken 18 times.
✓ Branch 2 taken 1914 times.
 1932 } else if ((var_size = check_header_variable(s, "type",
2013 18 "string", 16)) >= 0) {
2014 18 uint8_t key[256] = { 0 };
2015
2016 18 bytestream2_get_buffer(gb, key, FFMIN(sizeof(key) - 1, var_size));
2017
2/2
✓ Branch 0 taken 8 times.
✓ Branch 1 taken 10 times.
 18 if (strncmp("scanlineimage", key, var_size) &&
2018
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 8 times.
 8 strncmp("tiledimage", key, var_size)) {
2019 ✗ ret = AVERROR_PATCHWELCOME;
2020 ✗ goto fail;
2021 }
2022
2023 18 continue;
2024
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 1914 times.
 1914 } else if ((var_size = check_header_variable(s, "preview",
2025 ✗ "preview", 16)) >= 0) {
2026 ✗ uint32_t pw = bytestream2_get_le32(gb);
2027 ✗ uint32_t ph = bytestream2_get_le32(gb);
2028 ✗ uint64_t psize = pw * (uint64_t)ph;
2029 ✗ if (psize > INT64_MAX / 4) {
2030 ✗ ret = AVERROR_INVALIDDATA;
2031 ✗ goto fail;
2032 }
2033 ✗ psize *= 4;
2034
2035 ✗ if ((int64_t)psize >= bytestream2_get_bytes_left(gb)) {
2036 ✗ ret = AVERROR_INVALIDDATA;
2037 ✗ goto fail;
2038 }
2039
2040 ✗ bytestream2_skip(gb, psize);
2041
2042 ✗ continue;
2043 }
2044
2045 // Check if there are enough bytes for a header
2046
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 1914 times.
 1914 if (bytestream2_get_bytes_left(gb) <= 9) {
2047 ✗ av_log(s->avctx, AV_LOG_ERROR, "Incomplete header\n");
2048 ✗ ret = AVERROR_INVALIDDATA;
2049 ✗ goto fail;
2050 }
2051
2052 // Process unknown variables
2053 {
2054 1914 uint8_t name[256] = { 0 };
2055 1914 uint8_t type[256] = { 0 };
2056 1914 uint8_t value[8192] = { 0 };
2057 1914 int i = 0, size;
2058
2059
2/2
✓ Branch 1 taken 26926 times.
✓ Branch 2 taken 1914 times.
 57680 while (bytestream2_get_bytes_left(gb) > 0 &&
2060
2/4
✓ Branch 0 taken 28840 times.
✗ Branch 1 not taken.
✓ Branch 3 taken 26926 times.
✗ Branch 4 not taken.
 55766 bytestream2_peek_byte(gb) && i < 255) {
2061 26926 name[i++] = bytestream2_get_byte(gb);
2062 }
2063
2064 1914 bytestream2_skip(gb, 1);
2065 1914 i = 0;
2066
2/2
✓ Branch 1 taken 8774 times.
✓ Branch 2 taken 1914 times.
 21376 while (bytestream2_get_bytes_left(gb) > 0 &&
2067
2/4
✓ Branch 0 taken 10688 times.
✗ Branch 1 not taken.
✓ Branch 3 taken 8774 times.
✗ Branch 4 not taken.
 19462 bytestream2_peek_byte(gb) && i < 255) {
2068 8774 type[i++] = bytestream2_get_byte(gb);
2069 }
2070 1914 bytestream2_skip(gb, 1);
2071 1914 size = bytestream2_get_le32(gb);
2072
2073 1914 bytestream2_get_buffer(gb, value, FFMIN(sizeof(value) - 1, size));
2074
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1914 times.
 1914 if (size > sizeof(value) - 1)
2075 ✗ bytestream2_skip(gb, size - (sizeof(value) - 1));
2076
2/2
✓ Branch 0 taken 160 times.
✓ Branch 1 taken 1754 times.
 1914 if (!strcmp(type, "string"))
2077 160 av_dict_set(&metadata, name, value, 0);
2078 }
2079 }
2080
2081
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (s->compression == EXR_UNKN) {
2082 ✗ av_log(s->avctx, AV_LOG_ERROR, "Missing compression attribute.\n");
2083 ✗ ret = AVERROR_INVALIDDATA;
2084 ✗ goto fail;
2085 }
2086
2087
2/2
✓ Branch 0 taken 44 times.
✓ Branch 1 taken 272 times.
 316 if (s->is_tile) {
2088
2/4
✓ Branch 0 taken 44 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 44 times.
 44 if (s->tile_attr.xSize < 1 || s->tile_attr.ySize < 1) {
2089 ✗ av_log(s->avctx, AV_LOG_ERROR, "Invalid tile attribute.\n");
2090 ✗ ret = AVERROR_INVALIDDATA;
2091 ✗ goto fail;
2092 }
2093 }
2094
2095
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 316 times.
 316 if (bytestream2_get_bytes_left(gb) <= 0) {
2096 ✗ av_log(s->avctx, AV_LOG_ERROR, "Incomplete frame.\n");
2097 ✗ ret = AVERROR_INVALIDDATA;
2098 ✗ goto fail;
2099 }
2100
2101 316 frame->metadata = metadata;
2102
2103 // aaand we are done
2104 316 bytestream2_skip(gb, 1);
2105 316 return 0;
2106 ✗ fail:
2107 ✗ av_dict_free(&metadata);
2108 ✗ return ret;
2109 }
2110
2111 316 static int decode_frame(AVCodecContext *avctx, AVFrame *picture,
2112 int *got_frame, AVPacket *avpkt)
2113 {
2114 316 EXRContext *s = avctx->priv_data;
2115 316 GetByteContext *gb = &s->gb;
2116 uint8_t *ptr;
2117
2118 int i, y, ret, ymax;
2119 int planes;
2120 int out_line_size;
2121 int nb_blocks; /* nb scanline or nb tile */
2122 uint64_t start_offset_table;
2123 uint64_t start_next_scanline;
2124
2125 316 bytestream2_init(gb, avpkt->data, avpkt->size);
2126
2127
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 316 times.
 316 if ((ret = decode_header(s, picture)) < 0)
2128 ✗ return ret;
2129
2130
1/2
✓ Branch 0 taken 316 times.
✗ Branch 1 not taken.
 316 if (s->compression == EXR_DWAA ||
2131
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 s->compression == EXR_DWAB) {
2132 ✗ for (int i = 0; i<s->nb_channels; i++) {
2133 ✗ EXRChannel *channel = &s->channels[i];
2134 ✗ if (channel->pixel_type != s->pixel_type) {
2135 ✗ avpriv_request_sample(s->avctx, "mixed pixel type DWA");
2136 ✗ return AVERROR_PATCHWELCOME;
2137 }
2138 }
2139 }
2140
2141
3/4
✓ Branch 0 taken 88 times.
✓ Branch 1 taken 218 times.
✓ Branch 2 taken 10 times.
✗ Branch 3 not taken.
 316 switch (s->pixel_type) {
2142 88 case EXR_HALF:
2143
2/2
✓ Branch 0 taken 26 times.
✓ Branch 1 taken 62 times.
 88 if (s->channel_offsets[3] >= 0) {
2144
2/2
✓ Branch 0 taken 24 times.
✓ Branch 1 taken 2 times.
 26 if (!s->is_luma) {
2145 24 avctx->pix_fmt = AV_PIX_FMT_GBRAPF16;
2146 } else {
2147 2 avctx->pix_fmt = AV_PIX_FMT_YAF16;
2148 }
2149 } else {
2150
2/2
✓ Branch 0 taken 58 times.
✓ Branch 1 taken 4 times.
 62 if (!s->is_luma) {
2151 58 avctx->pix_fmt = AV_PIX_FMT_GBRPF16;
2152 } else {
2153 4 avctx->pix_fmt = AV_PIX_FMT_GRAYF16;
2154 }
2155 }
2156 88 break;
2157 218 case EXR_FLOAT:
2158
2/2
✓ Branch 0 taken 88 times.
✓ Branch 1 taken 130 times.
 218 if (s->channel_offsets[3] >= 0) {
2159
1/2
✓ Branch 0 taken 88 times.
✗ Branch 1 not taken.
 88 if (!s->is_luma) {
2160 88 avctx->pix_fmt = AV_PIX_FMT_GBRAPF32;
2161 } else {
2162 ✗ avctx->pix_fmt = AV_PIX_FMT_YAF32;
2163 }
2164 } else {
2165
2/2
✓ Branch 0 taken 74 times.
✓ Branch 1 taken 56 times.
 130 if (!s->is_luma) {
2166 74 avctx->pix_fmt = AV_PIX_FMT_GBRPF32;
2167 } else {
2168 56 avctx->pix_fmt = AV_PIX_FMT_GRAYF32;
2169 }
2170 }
2171 218 break;
2172 10 case EXR_UINT:
2173
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 10 times.
 10 if (s->channel_offsets[3] >= 0) {
2174 ✗ if (!s->is_luma) {
2175 ✗ avctx->pix_fmt = AV_PIX_FMT_RGBA64;
2176 } else {
2177 ✗ avctx->pix_fmt = AV_PIX_FMT_YA16;
2178 }
2179 } else {
2180
1/2
✓ Branch 0 taken 10 times.
✗ Branch 1 not taken.
 10 if (!s->is_luma) {
2181 10 avctx->pix_fmt = AV_PIX_FMT_RGB48;
2182 } else {
2183 ✗ avctx->pix_fmt = AV_PIX_FMT_GRAY16;
2184 }
2185 }
2186 10 break;
2187 ✗ default:
2188 ✗ av_log(avctx, AV_LOG_ERROR, "Missing channel list.\n");
2189 ✗ return AVERROR_INVALIDDATA;
2190 }
2191
2192
2/2
✓ Branch 0 taken 114 times.
✓ Branch 1 taken 202 times.
 316 if (s->channel_offsets[3] >= 0)
2193 114 avctx->alpha_mode = AVALPHA_MODE_PREMULTIPLIED;
2194
2195 #if FF_API_EXR_GAMMA
2196
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 316 times.
 316 if (s->apply_trc_type != AVCOL_TRC_UNSPECIFIED)
2197 ✗ avctx->color_trc = s->apply_trc_type;
2198
2/4
✓ Branch 0 taken 316 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 316 times.
✗ Branch 3 not taken.
 316 else if (s->gamma > 0.9999f && s->gamma < 1.0001f)
2199 #endif
2200 316 avctx->color_trc = AVCOL_TRC_LINEAR;
2201
2202
3/5
✓ Branch 0 taken 174 times.
✓ Branch 1 taken 92 times.
✓ Branch 2 taken 50 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
 316 switch (s->compression) {
2203 174 case EXR_RAW:
2204 case EXR_RLE:
2205 case EXR_ZIP1:
2206 174 s->scan_lines_per_block = 1;
2207 174 break;
2208 92 case EXR_PXR24:
2209 case EXR_ZIP16:
2210 92 s->scan_lines_per_block = 16;
2211 92 break;
2212 50 case EXR_PIZ:
2213 case EXR_B44:
2214 case EXR_B44A:
2215 case EXR_DWAA:
2216 50 s->scan_lines_per_block = 32;
2217 50 break;
2218 ✗ case EXR_DWAB:
2219 ✗ s->scan_lines_per_block = 256;
2220 ✗ break;
2221 ✗ default:
2222 ✗ avpriv_report_missing_feature(avctx, "Compression %d", s->compression);
2223 ✗ return AVERROR_PATCHWELCOME;
2224 }
2225
2226 /* Verify the xmin, xmax, ymin and ymax before setting the actual image size.
2227 * It's possible for the data window can larger or outside the display window */
2228
2/4
✓ Branch 0 taken 316 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 316 times.
✗ Branch 3 not taken.
 316 if (s->xmin > s->xmax || s->ymin > s->ymax ||
2229
2/4
✓ Branch 0 taken 316 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 316 times.
 316 s->ydelta == 0xFFFFFFFF || s->xdelta == 0xFFFFFFFF) {
2230 ✗ av_log(avctx, AV_LOG_ERROR, "Wrong or missing size information.\n");
2231 ✗ return AVERROR_INVALIDDATA;
2232 }
2233
2234
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 316 times.
 316 if ((ret = ff_set_dimensions(avctx, s->w, s->h)) < 0)
2235 ✗ return ret;
2236
2237 316 ff_set_sar(s->avctx, av_d2q(av_int2float(s->sar), 255));
2238
2239
2/2
✓ Branch 0 taken 86 times.
✓ Branch 1 taken 230 times.
 316 if (avctx->skip_frame >= AVDISCARD_ALL)
2240 86 return avpkt->size;
2241
2242 230 s->desc = av_pix_fmt_desc_get(avctx->pix_fmt);
2243
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 230 times.
 230 if (!s->desc)
2244 ✗ return AVERROR_INVALIDDATA;
2245
2246 230 planes = av_pix_fmt_count_planes(avctx->pix_fmt);
2247 230 out_line_size = avctx->width * s->desc->comp[0].step;
2248
2249
2/2
✓ Branch 0 taken 22 times.
✓ Branch 1 taken 208 times.
 230 if (s->is_tile) {
2250
2/4
✓ Branch 0 taken 22 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 22 times.
 22 if (s->tile_attr.ySize <= 0 || s->tile_attr.xSize <= 0)
2251 ✗ return AVERROR_INVALIDDATA;
2252 22 nb_blocks = ((s->xdelta + s->tile_attr.xSize - 1) / s->tile_attr.xSize) *
2253 22 ((s->ydelta + s->tile_attr.ySize - 1) / s->tile_attr.ySize);
2254 } else { /* scanline */
2255 208 nb_blocks = (s->ydelta + s->scan_lines_per_block - 1) /
2256 208 s->scan_lines_per_block;
2257 }
2258
2259
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 230 times.
 230 if ((ret = ff_thread_get_buffer(avctx, picture, 0)) < 0)
2260 ✗ return ret;
2261
2262
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 230 times.
 230 if (bytestream2_get_bytes_left(gb)/8 < nb_blocks)
2263 ✗ return AVERROR_INVALIDDATA;
2264
2265 // check offset table and recreate it if need
2266
4/4
✓ Branch 0 taken 208 times.
✓ Branch 1 taken 22 times.
✓ Branch 3 taken 1 times.
✓ Branch 4 taken 207 times.
 230 if (!s->is_tile && bytestream2_peek_le64(gb) == 0) {
2267 PutByteContext offset_table_writer;
2268
2269 1 av_log(s->avctx, AV_LOG_DEBUG, "recreating invalid scanline offset table\n");
2270
2271 1 s->offset_table = av_realloc_f(s->offset_table, nb_blocks, 8);
2272
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1 times.
 1 if (!s->offset_table)
2273 ✗ return AVERROR(ENOMEM);
2274
2275 1 start_offset_table = bytestream2_tell(gb);
2276 1 start_next_scanline = start_offset_table + nb_blocks * 8;
2277 1 bytestream2_init_writer(&offset_table_writer, s->offset_table, nb_blocks * 8);
2278
2279
2/2
✓ Branch 0 taken 8 times.
✓ Branch 1 taken 1 times.
 9 for (y = 0; y < nb_blocks; y++) {
2280 /* write offset of prev scanline in offset table */
2281 8 bytestream2_put_le64(&offset_table_writer, start_next_scanline);
2282
2283 /* get len of next scanline */
2284 8 bytestream2_seek(gb, start_next_scanline + 4, SEEK_SET);/* skip line number */
2285 8 start_next_scanline += (bytestream2_get_le32(gb) + 8);
2286 }
2287 1 bytestream2_init(gb, s->offset_table, nb_blocks * 8);
2288 }
2289
2290 // save pointer we are going to use in decode_block
2291 230 s->buf = avpkt->data;
2292 230 s->buf_size = avpkt->size;
2293
2294 // Zero out the start if ymin is not 0
2295
2/2
✓ Branch 0 taken 650 times.
✓ Branch 1 taken 230 times.
 880 for (i = 0; i < planes; i++) {
2296 650 ptr = picture->data[i];
2297
2/2
✓ Branch 0 taken 240 times.
✓ Branch 1 taken 650 times.
 890 for (y = 0; y < FFMIN(s->ymin, s->h); y++) {
2298 240 memset(ptr, 0, out_line_size);
2299 240 ptr += picture->linesize[i];
2300 }
2301 }
2302
2303 230 s->picture = picture;
2304
2305 230 avctx->execute2(avctx, decode_block, s->thread_data, NULL, nb_blocks);
2306
2307 230 ymax = FFMAX(0, s->ymax + 1);
2308 // Zero out the end if ymax+1 is not h
2309
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 226 times.
 230 if (ymax < avctx->height)
2310
2/2
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 4 times.
 16 for (i = 0; i < planes; i++) {
2311 12 ptr = picture->data[i] + (ymax * picture->linesize[i]);
2312
2/2
✓ Branch 0 taken 2772 times.
✓ Branch 1 taken 12 times.
 2784 for (y = ymax; y < avctx->height; y++) {
2313 2772 memset(ptr, 0, out_line_size);
2314 2772 ptr += picture->linesize[i];
2315 }
2316 }
2317
2318 230 picture->pict_type = AV_PICTURE_TYPE_I;
2319 230 *got_frame = 1;
2320
2321 230 return avpkt->size;
2322 }
2323
2324 172 static av_cold int decode_init(AVCodecContext *avctx)
2325 {
2326 172 EXRContext *s = avctx->priv_data;
2327 #if FF_API_EXR_GAMMA
2328 uint32_t i;
2329 union av_intfloat32 t;
2330 172 float one_gamma = 1.0f / s->gamma;
2331 172 av_csp_trc_function trc_func = NULL;
2332 #endif
2333
2334 172 ff_init_float2half_tables(&s->f2h_tables);
2335 172 ff_init_half2float_tables(&s->h2f_tables);
2336
2337 172 s->avctx = avctx;
2338
2339 172 ff_exrdsp_init(&s->dsp);
2340
2341 #if HAVE_BIGENDIAN
2342 ff_bswapdsp_init(&s->bbdsp);
2343 #endif
2344
2345 #if FF_API_EXR_GAMMA
2346 172 trc_func = av_csp_trc_func_from_id(s->apply_trc_type);
2347
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 172 times.
 172 if (trc_func) {
2348 ✗ for (i = 0; i < 65536; ++i) {
2349 ✗ t.i = half2float(i, &s->h2f_tables);
2350 ✗ t.f = trc_func(t.f);
2351 ✗ s->gamma_table[i] = float2half(av_float2int(t.f), &s->f2h_tables);
2352 }
2353
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 172 times.
 172 } else if (one_gamma != 1.0f) {
2354 ✗ for (i = 0; i < 65536; ++i) {
2355 ✗ t.i = half2float(i, &s->h2f_tables);
2356 /* If negative value we reuse half value */
2357 ✗ if (t.f <= 0.0f) {
2358 ✗ s->gamma_table[i] = i;
2359 } else {
2360 ✗ t.f = powf(t.f, one_gamma);
2361 ✗ s->gamma_table[i] = float2half(t.i, &s->f2h_tables);
2362 }
2363 }
2364 }
2365 #endif
2366
2367 // allocate thread data, used for non EXR_RAW compression types
2368 172 s->thread_data = av_calloc(avctx->thread_count, sizeof(*s->thread_data));
2369
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 172 times.
 172 if (!s->thread_data)
2370 ✗ return AVERROR(ENOMEM);
2371
2372 172 return 0;
2373 }
2374
2375 172 static av_cold int decode_end(AVCodecContext *avctx)
2376 {
2377 172 EXRContext *s = avctx->priv_data;
2378 int i;
2379
2/2
✓ Branch 0 taken 172 times.
✓ Branch 1 taken 172 times.
 344 for (i = 0; i < avctx->thread_count; i++) {
2380 172 EXRThreadData *td = &s->thread_data[i];
2381 172 av_freep(&td->uncompressed_data);
2382 172 av_freep(&td->tmp);
2383 172 av_freep(&td->bitmap);
2384 172 av_freep(&td->lut);
2385 172 av_freep(&td->he);
2386 172 av_freep(&td->freq);
2387 172 av_freep(&td->ac_data);
2388 172 av_freep(&td->dc_data);
2389 172 av_freep(&td->rle_data);
2390 172 av_freep(&td->rle_raw_data);
2391 172 ff_vlc_free(&td->vlc);
2392 }
2393
2394 172 av_freep(&s->thread_data);
2395 172 av_freep(&s->channels);
2396 172 av_freep(&s->offset_table);
2397
2398 172 return 0;
2399 }
2400
2401 #define OFFSET(x) offsetof(EXRContext, x)
2402 #define VD AV_OPT_FLAG_VIDEO_PARAM | AV_OPT_FLAG_DECODING_PARAM
2403 static const AVOption options[] = {
2404 { "layer", "Set the decoding layer", OFFSET(layer),
2405 AV_OPT_TYPE_STRING, { .str = "" }, 0, 0, VD },
2406 { "part", "Set the decoding part", OFFSET(selected_part),
2407 AV_OPT_TYPE_INT, { .i64 = 0 }, 0, INT_MAX, VD },
2408 #if FF_API_EXR_GAMMA
2409 { "gamma", "Set the float gamma value when decoding (deprecated, use a scaler)", OFFSET(gamma),
2410 AV_OPT_TYPE_FLOAT, { .dbl = 1.0f }, 0.001, FLT_MAX, VD | AV_OPT_FLAG_DEPRECATED },
2411
2412 // XXX: Note the abuse of the enum using AVCOL_TRC_UNSPECIFIED to subsume the existing gamma option
2413 { "apply_trc", "color transfer characteristics to apply to EXR linear input (deprecated, use a scaler)", OFFSET(apply_trc_type),
2414 AV_OPT_TYPE_INT, {.i64 = AVCOL_TRC_UNSPECIFIED }, 1, AVCOL_TRC_NB-1, VD | AV_OPT_FLAG_DEPRECATED, .unit = "apply_trc_type"},
2415 { "bt709", "BT.709", 0,
2416 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_BT709 }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2417 { "gamma", "gamma", 0,
2418 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_UNSPECIFIED }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2419 { "gamma22", "BT.470 M", 0,
2420 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_GAMMA22 }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2421 { "gamma28", "BT.470 BG", 0,
2422 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_GAMMA28 }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2423 { "smpte170m", "SMPTE 170 M", 0,
2424 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_SMPTE170M }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2425 { "smpte240m", "SMPTE 240 M", 0,
2426 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_SMPTE240M }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2427 { "linear", "Linear", 0,
2428 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_LINEAR }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2429 { "log", "Log", 0,
2430 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_LOG }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2431 { "log_sqrt", "Log square root", 0,
2432 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_LOG_SQRT }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2433 { "iec61966_2_4", "IEC 61966-2-4", 0,
2434 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_IEC61966_2_4 }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2435 { "bt1361", "BT.1361", 0,
2436 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_BT1361_ECG }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2437 { "iec61966_2_1", "IEC 61966-2-1", 0,
2438 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_IEC61966_2_1 }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2439 { "bt2020_10bit", "BT.2020 - 10 bit", 0,
2440 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_BT2020_10 }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2441 { "bt2020_12bit", "BT.2020 - 12 bit", 0,
2442 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_BT2020_12 }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2443 { "smpte2084", "SMPTE ST 2084", 0,
2444 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_SMPTEST2084 }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2445 { "smpte428_1", "SMPTE ST 428-1", 0,
2446 AV_OPT_TYPE_CONST, {.i64 = AVCOL_TRC_SMPTEST428_1 }, INT_MIN, INT_MAX, VD, .unit = "apply_trc_type"},
2447 #endif
2448
2449 { NULL },
2450 };
2451
2452 static const AVClass exr_class = {
2453 .class_name = "EXR",
2454 .item_name = av_default_item_name,
2455 .option = options,
2456 .version = LIBAVUTIL_VERSION_INT,
2457 };
2458
2459 const FFCodec ff_exr_decoder = {
2460 .p.name = "exr",
2461 CODEC_LONG_NAME("OpenEXR image"),
2462 .p.type = AVMEDIA_TYPE_VIDEO,
2463 .p.id = AV_CODEC_ID_EXR,
2464 .priv_data_size = sizeof(EXRContext),
2465 .init = decode_init,
2466 .close = decode_end,
2467 FF_CODEC_DECODE_CB(decode_frame),
2468 .p.capabilities = AV_CODEC_CAP_DR1 | AV_CODEC_CAP_FRAME_THREADS |
2469 AV_CODEC_CAP_SLICE_THREADS,
2470 .caps_internal = FF_CODEC_CAP_SKIP_FRAME_FILL_PARAM,
2471 .p.priv_class = &exr_class,
2472 };
2473