FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/rv10.c
Date: 2025-05-15 14:57:22
Exec Total Coverage
Lines: 228 326 69.9%
Functions: 8 9 88.9%
Branches: 146 233 62.7%
Line Branch Exec Source
1 /*
2 * RV10/RV20 decoder
3 * Copyright (c) 2000,2001 Fabrice Bellard
4 * Copyright (c) 2002-2004 Michael Niedermayer
5 *
6 * This file is part of FFmpeg.
7 *
8 * FFmpeg is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2.1 of the License, or (at your option) any later version.
12 *
13 * FFmpeg is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
17 *
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with FFmpeg; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
21 */
22
23 /**
24 * @file
25 * RV10/RV20 decoder
26 */
27
28 #include <inttypes.h>
29
30 #include "libavutil/imgutils.h"
31 #include "libavutil/thread.h"
32
33 #include "avcodec.h"
34 #include "codec_internal.h"
35 #include "decode.h"
36 #include "error_resilience.h"
37 #include "h263.h"
38 #include "h263data.h"
39 #include "h263dec.h"
40 #include "mpeg_er.h"
41 #include "mpegvideo.h"
42 #include "mpegvideodec.h"
43 #include "mpeg4video.h"
44 #include "mpegvideodata.h"
45 #include "rv10dec.h"
46
47 #define RV_GET_MAJOR_VER(x) ((x) >> 28)
48 #define RV_GET_MINOR_VER(x) (((x) >> 20) & 0xFF)
49 #define RV_GET_MICRO_VER(x) (((x) >> 12) & 0xFF)
50
51 #define MAX_VLC_ENTRIES 1023 // Note: Does not include the skip entries.
52 #define DC_VLC_BITS 9
53
54 typedef struct RVDecContext {
55 MpegEncContext m;
56 int sub_id;
57 int orig_width, orig_height;
58 } RVDecContext;
59
60 /* (run, length) encoded value for the symbols table. The actual symbols
61 * are run..run - length (mod 256).
62 * The last two entries in the following table apply to luma only.
63 * The skip values are not included in this list. */
64 static const uint8_t rv_sym_run_len[][2] = {
65 { 0, 0 }, { 1, 0 }, { 255, 0 }, { 3, 1 }, { 254, 1 },
66 { 7, 3 }, { 252, 3 }, { 15, 7 }, { 248, 7 }, { 31, 15 },
67 { 240, 15 }, { 63, 31 }, { 224, 31 }, { 127, 63 }, { 192, 63 },
68 { 255, 127 }, { 128, 127 }, { 127, 255 }, { 128, 255 },
69 };
70
71 /* entry[i] of the following tables gives
72 * the number of VLC codes of length i + 2. */
73 static const uint16_t rv_lum_len_count[15] = {
74 1, 0, 2, 4, 8, 16, 32, 0, 64, 0, 128, 0, 256, 0, 512,
75 };
76
77 static const uint16_t rv_chrom_len_count[15] = {
78 1, 2, 4, 0, 8, 0, 16, 0, 32, 0, 64, 0, 128, 0, 256,
79 };
80
81 static VLC rv_dc_lum, rv_dc_chrom;
82
83 ✗ int ff_rv_decode_dc(MpegEncContext *s, int n)
84 {
85 int code;
86
87 ✗ if (n < 4) {
88 ✗ code = get_vlc2(&s->gb, rv_dc_lum.table, DC_VLC_BITS, 2);
89 } else {
90 ✗ code = get_vlc2(&s->gb, rv_dc_chrom.table, DC_VLC_BITS, 2);
91 ✗ if (code < 0) {
92 ✗ av_log(s->avctx, AV_LOG_ERROR, "chroma dc error\n");
93 ✗ return -1;
94 }
95 }
96 ✗ return code;
97 }
98
99 /* read RV 1.0 compatible frame header */
100 150 static int rv10_decode_picture_header(MpegEncContext *s)
101 {
102 int mb_count, pb_frame, marker, mb_xy;
103
104 150 marker = get_bits1(&s->gb);
105
106
2/2
✓ Branch 1 taken 135 times.
✓ Branch 2 taken 15 times.
 150 if (get_bits1(&s->gb))
107 135 s->pict_type = AV_PICTURE_TYPE_P;
108 else
109 15 s->pict_type = AV_PICTURE_TYPE_I;
110
111
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
 150 if (!marker)
112 ✗ av_log(s->avctx, AV_LOG_ERROR, "marker missing\n");
113
114 150 pb_frame = get_bits1(&s->gb);
115
116 ff_dlog(s->avctx, "pict_type=%d pb_frame=%d\n", s->pict_type, pb_frame);
117
118
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
 150 if (pb_frame) {
119 ✗ avpriv_request_sample(s->avctx, "PB-frame");
120 ✗ return AVERROR_PATCHWELCOME;
121 }
122
123 150 s->qscale = get_bits(&s->gb, 5);
124
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
 150 if (s->qscale == 0) {
125 ✗ av_log(s->avctx, AV_LOG_ERROR, "Invalid qscale value: 0\n");
126 ✗ return AVERROR_INVALIDDATA;
127 }
128
129
2/2
✓ Branch 0 taken 15 times.
✓ Branch 1 taken 135 times.
 150 if (s->pict_type == AV_PICTURE_TYPE_I) {
130
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 15 times.
 15 if (s->rv10_version == 3) {
131 /* specific MPEG like DC coding not used */
132 ✗ s->last_dc[0] = get_bits(&s->gb, 8);
133 ✗ s->last_dc[1] = get_bits(&s->gb, 8);
134 ✗ s->last_dc[2] = get_bits(&s->gb, 8);
135 ff_dlog(s->avctx, "DC:%d %d %d\n", s->last_dc[0],
136 s->last_dc[1], s->last_dc[2]);
137 }
138 }
139 /* if multiple packets per frame are sent, the position at which
140 * to display the macroblocks is coded here */
141
142 150 mb_xy = s->mb_x + s->mb_y * s->mb_width;
143
1/6
✗ Branch 1 not taken.
✓ Branch 2 taken 150 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
 150 if (show_bits(&s->gb, 12) == 0 || (mb_xy && mb_xy < s->mb_num)) {
144 150 s->mb_x = get_bits(&s->gb, 6); /* mb_x */
145 150 s->mb_y = get_bits(&s->gb, 6); /* mb_y */
146 150 mb_count = get_bits(&s->gb, 12);
147 } else {
148 ✗ s->mb_x = 0;
149 ✗ s->mb_y = 0;
150 ✗ mb_count = s->mb_width * s->mb_height;
151 }
152 150 skip_bits(&s->gb, 3); /* ignored */
153
154 150 return mb_count;
155 }
156
157 742 static int rv20_decode_picture_header(RVDecContext *rv, int whole_size)
158 {
159 static const enum AVPictureType pict_types[] =
160 { AV_PICTURE_TYPE_I, AV_PICTURE_TYPE_I /* hmm ... */,
161 AV_PICTURE_TYPE_P, AV_PICTURE_TYPE_B };
162 742 MpegEncContext *s = &rv->m;
163 int seq, mb_pos, ret;
164 int rpr_max;
165
166 742 s->pict_type = pict_types[get_bits(&s->gb, 2)];
167
168
3/4
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 150 times.
 742 if (s->low_delay && s->pict_type == AV_PICTURE_TYPE_B) {
169 ✗ av_log(s->avctx, AV_LOG_ERROR, "low delay B\n");
170 ✗ return -1;
171 }
172
3/4
✓ Branch 0 taken 11 times.
✓ Branch 1 taken 731 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 11 times.
 742 if (!s->last_pic.ptr && s->pict_type == AV_PICTURE_TYPE_B) {
173 ✗ av_log(s->avctx, AV_LOG_ERROR, "early B-frame\n");
174 ✗ return AVERROR_INVALIDDATA;
175 }
176
177
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 742 times.
 742 if (get_bits1(&s->gb)) {
178 ✗ av_log(s->avctx, AV_LOG_ERROR, "reserved bit set\n");
179 ✗ return AVERROR_INVALIDDATA;
180 }
181
182 742 s->qscale = get_bits(&s->gb, 5);
183
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (s->qscale == 0) {
184 ✗ av_log(s->avctx, AV_LOG_ERROR, "Invalid qscale value: 0\n");
185 ✗ return AVERROR_INVALIDDATA;
186 }
187
188
2/2
✓ Branch 0 taken 592 times.
✓ Branch 1 taken 150 times.
 742 if (RV_GET_MINOR_VER(rv->sub_id) >= 2)
189
3/4
✓ Branch 1 taken 413 times.
✓ Branch 2 taken 179 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 413 times.
 592 s->loop_filter = get_bits1(&s->gb) && !s->avctx->lowres;
190
191
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
 742 if (RV_GET_MINOR_VER(rv->sub_id) <= 1)
192 150 seq = get_bits(&s->gb, 8) << 7;
193 else
194 592 seq = get_bits(&s->gb, 13) << 2;
195
196 742 rpr_max = s->avctx->extradata[1] & 7;
197
2/2
✓ Branch 0 taken 592 times.
✓ Branch 1 taken 150 times.
 742 if (rpr_max) {
198 int f, new_w, new_h;
199 592 int rpr_bits = av_log2(rpr_max) + 1;
200
201 592 f = get_bits(&s->gb, rpr_bits);
202
203
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 592 times.
 592 if (f) {
204 ✗ if (s->avctx->extradata_size < 8 + 2 * f) {
205 ✗ av_log(s->avctx, AV_LOG_ERROR, "Extradata too small.\n");
206 ✗ return AVERROR_INVALIDDATA;
207 }
208
209 ✗ new_w = 4 * s->avctx->extradata[6 + 2 * f];
210 ✗ new_h = 4 * s->avctx->extradata[7 + 2 * f];
211 } else {
212 592 new_w = rv->orig_width;
213 592 new_h = rv->orig_height;
214 }
215
3/6
✓ Branch 0 taken 592 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 592 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 592 times.
 592 if (new_w != s->width || new_h != s->height || !s->context_initialized) {
216 ✗ AVRational old_aspect = s->avctx->sample_aspect_ratio;
217 ✗ av_log(s->avctx, AV_LOG_DEBUG,
218 "attempting to change resolution to %dx%d\n", new_w, new_h);
219 ✗ if (av_image_check_size(new_w, new_h, 0, s->avctx) < 0)
220 ✗ return AVERROR_INVALIDDATA;
221
222 ✗ if (whole_size < (new_w + 15)/16 * ((new_h + 15)/16) / 8)
223 ✗ return AVERROR_INVALIDDATA;
224
225 ✗ ff_mpv_common_end(s);
226
227 // attempt to keep aspect during typical resolution switches
228 ✗ if (!old_aspect.num)
229 ✗ old_aspect = (AVRational){1, 1};
230 ✗ if (2 * (int64_t)new_w * s->height == (int64_t)new_h * s->width)
231 ✗ s->avctx->sample_aspect_ratio = av_mul_q(old_aspect, (AVRational){2, 1});
232 ✗ if ((int64_t)new_w * s->height == 2 * (int64_t)new_h * s->width)
233 ✗ s->avctx->sample_aspect_ratio = av_mul_q(old_aspect, (AVRational){1, 2});
234
235 ✗ ret = ff_set_dimensions(s->avctx, new_w, new_h);
236 ✗ if (ret < 0)
237 ✗ return ret;
238
239 ✗ s->width = new_w;
240 ✗ s->height = new_h;
241 ✗ if ((ret = ff_mpv_common_init(s)) < 0)
242 ✗ return ret;
243 }
244
245
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 592 times.
 592 if (s->avctx->debug & FF_DEBUG_PICT_INFO) {
246 ✗ av_log(s->avctx, AV_LOG_DEBUG, "F %d/%d/%d\n", f, rpr_bits, rpr_max);
247 }
248 }
249
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 742 times.
 742 if (av_image_check_size(s->width, s->height, 0, s->avctx) < 0)
250 ✗ return AVERROR_INVALIDDATA;
251
252 742 mb_pos = ff_h263_decode_mba(s);
253
254 742 seq |= s->time & ~0x7FFF;
255
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (seq - s->time > 0x4000)
256 ✗ seq -= 0x8000;
257
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (seq - s->time < -0x4000)
258 ✗ seq += 0x8000;
259
260
2/2
✓ Branch 0 taken 292 times.
✓ Branch 1 taken 450 times.
 742 if (seq != s->time) {
261
2/2
✓ Branch 0 taken 220 times.
✓ Branch 1 taken 72 times.
 292 if (s->pict_type != AV_PICTURE_TYPE_B) {
262 220 s->time = seq;
263 220 s->pp_time = s->time - s->last_non_b_time;
264 220 s->last_non_b_time = s->time;
265 } else {
266 72 s->time = seq;
267 72 s->pb_time = s->pp_time - (s->last_non_b_time - s->time);
268 }
269 }
270
2/2
✓ Branch 0 taken 181 times.
✓ Branch 1 taken 561 times.
 742 if (s->pict_type == AV_PICTURE_TYPE_B) {
271
3/6
✓ Branch 0 taken 181 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 181 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 181 times.
 181 if (s->pp_time <=s->pb_time || s->pp_time <= s->pp_time - s->pb_time || s->pp_time<=0) {
272 ✗ av_log(s->avctx, AV_LOG_DEBUG,
273 "messed up order, possible from seeking? skipping current B-frame\n");
274 #define ERROR_SKIP_FRAME -123
275 ✗ return ERROR_SKIP_FRAME;
276 }
277 181 ff_mpeg4_init_direct_mv(s);
278 }
279
280 742 s->no_rounding = get_bits1(&s->gb);
281
282
3/4
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 150 times.
 742 if (RV_GET_MINOR_VER(rv->sub_id) <= 1 && s->pict_type == AV_PICTURE_TYPE_B)
283 // binary decoder reads 3+2 bits here but they don't seem to be used
284 ✗ skip_bits(&s->gb, 5);
285
286 742 s->h263_aic = s->pict_type == AV_PICTURE_TYPE_I;
287 742 s->modified_quant = 1;
288
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
 742 if (!s->avctx->lowres)
289 150 s->loop_filter = 1;
290
291
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (s->avctx->debug & FF_DEBUG_PICT_INFO) {
292 ✗ av_log(s->avctx, AV_LOG_INFO,
293 "num:%5d x:%2d y:%2d type:%d qscale:%2d rnd:%d\n",
294 seq, s->mb_x, s->mb_y, s->pict_type, s->qscale,
295 s->no_rounding);
296 }
297
298
3/4
✓ Branch 0 taken 181 times.
✓ Branch 1 taken 561 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 181 times.
 742 av_assert0(s->pict_type != AV_PICTURE_TYPE_B || !s->low_delay);
299
300 742 return s->mb_width * s->mb_height - mb_pos;
301 }
302
303 26 static av_cold void rv10_build_vlc(VLC *vlc, const uint16_t len_count[15],
304 const uint8_t sym_rl[][2], int sym_rl_elems)
305 {
306 uint16_t syms[MAX_VLC_ENTRIES];
307 uint8_t lens[MAX_VLC_ENTRIES];
308 26 unsigned nb_syms = 0, nb_lens = 0;
309
310
2/2
✓ Branch 0 taken 468 times.
✓ Branch 1 taken 26 times.
 494 for (unsigned i = 0; i < sym_rl_elems; i++) {
311 468 unsigned cur_sym = sym_rl[i][0];
312
2/2
✓ Branch 0 taken 19942 times.
✓ Branch 1 taken 468 times.
 20410 for (unsigned tmp = nb_syms + sym_rl[i][1]; nb_syms <= tmp; nb_syms++)
313 19942 syms[nb_syms] = 0xFF & cur_sym--;
314 }
315
316
2/2
✓ Branch 0 taken 390 times.
✓ Branch 1 taken 26 times.
 416 for (unsigned i = 0; i < 15; i++)
317
2/2
✓ Branch 0 taken 19942 times.
✓ Branch 1 taken 390 times.
 20332 for (unsigned tmp = nb_lens + len_count[i]; nb_lens < tmp; nb_lens++)
318 19942 lens[nb_lens] = i + 2;
319 av_assert1(nb_lens == nb_syms);
320 26 ff_vlc_init_from_lengths(vlc, DC_VLC_BITS, nb_lens, lens, 1,
321 syms, 2, 2, 0, VLC_INIT_STATIC_OVERLONG, NULL);
322 26 }
323
324 13 static av_cold void rv10_init_static(void)
325 {
326 static VLCElem table[1472 + 992];
327
328 13 rv_dc_lum.table = table;
329 13 rv_dc_lum.table_allocated = 1472;
330 13 rv10_build_vlc(&rv_dc_lum, rv_lum_len_count,
331 rv_sym_run_len, FF_ARRAY_ELEMS(rv_sym_run_len));
332
2/2
✓ Branch 0 taken 52 times.
✓ Branch 1 taken 13 times.
 65 for (int i = 0; i < 1 << (DC_VLC_BITS - 7 /* Length of skip prefix */); i++) {
333 /* All codes beginning with 0x7F have the same length and value.
334 * Modifying the table directly saves us the useless subtables. */
335 52 rv_dc_lum.table[(0x7F << (DC_VLC_BITS - 7)) + i].sym = 255;
336 52 rv_dc_lum.table[(0x7F << (DC_VLC_BITS - 7)) + i].len = 18;
337 }
338 13 rv_dc_chrom.table = &table[1472];
339 13 rv_dc_chrom.table_allocated = 992;
340 13 rv10_build_vlc(&rv_dc_chrom, rv_chrom_len_count,
341 rv_sym_run_len, FF_ARRAY_ELEMS(rv_sym_run_len) - 2);
342
2/2
✓ Branch 0 taken 13 times.
✓ Branch 1 taken 13 times.
 26 for (int i = 0; i < 1 << (DC_VLC_BITS - 9 /* Length of skip prefix */); i++) {
343 /* Same as above. */
344 13 rv_dc_chrom.table[(0x1FE << (DC_VLC_BITS - 9)) + i].sym = 255;
345 13 rv_dc_chrom.table[(0x1FE << (DC_VLC_BITS - 9)) + i].len = 18;
346 }
347 13 }
348
349 20 static av_cold int rv10_decode_init(AVCodecContext *avctx)
350 {
351 static AVOnce init_static_once = AV_ONCE_INIT;
352 20 RVDecContext *rv = avctx->priv_data;
353 20 MpegEncContext *s = &rv->m;
354 int major_ver, minor_ver, micro_ver, ret;
355
356
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if (avctx->extradata_size < 8) {
357 ✗ av_log(avctx, AV_LOG_ERROR, "Extradata is too small.\n");
358 ✗ return AVERROR_INVALIDDATA;
359 }
360
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if ((ret = av_image_check_size(avctx->coded_width,
361 20 avctx->coded_height, 0, avctx)) < 0)
362 ✗ return ret;
363
364 20 ret = ff_h263_decode_init(avctx);
365
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if (ret < 0)
366 ✗ return ret;
367
368 20 rv->orig_width = avctx->coded_width;
369 20 rv->orig_height = avctx->coded_height;
370
371 20 s->h263_long_vectors = avctx->extradata[3] & 1;
372 20 rv->sub_id = AV_RB32A(avctx->extradata + 4);
373
374 20 major_ver = RV_GET_MAJOR_VER(rv->sub_id);
375 20 minor_ver = RV_GET_MINOR_VER(rv->sub_id);
376 20 micro_ver = RV_GET_MICRO_VER(rv->sub_id);
377
378
2/3
✓ Branch 0 taken 9 times.
✓ Branch 1 taken 11 times.
✗ Branch 2 not taken.
 20 switch (major_ver) {
379 9 case 1:
380
2/2
✓ Branch 0 taken 1 times.
✓ Branch 1 taken 8 times.
 9 s->rv10_version = micro_ver ? 3 : 1;
381 9 s->obmc = micro_ver == 2;
382 9 break;
383 11 case 2:
384
2/2
✓ Branch 0 taken 3 times.
✓ Branch 1 taken 8 times.
 11 if (minor_ver >= 2) {
385 3 s->low_delay = 0;
386 3 avctx->has_b_frames = 1;
387 }
388 11 break;
389 ✗ default:
390 ✗ av_log(avctx, AV_LOG_ERROR, "unknown header %X\n", rv->sub_id);
391 ✗ avpriv_request_sample(avctx, "RV1/2 version");
392 ✗ return AVERROR_PATCHWELCOME;
393 }
394
395
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if (avctx->debug & FF_DEBUG_PICT_INFO) {
396 ✗ av_log(avctx, AV_LOG_DEBUG, "ver:%X ver0:%"PRIX32"\n", rv->sub_id,
397 ✗ AV_RL32A(avctx->extradata));
398 }
399
400 /* init static VLCs */
401 20 ff_thread_once(&init_static_once, rv10_init_static);
402
403 20 return 0;
404 }
405
406 892 static int rv10_decode_packet(AVCodecContext *avctx, const uint8_t *buf,
407 int buf_size, int buf_size2, int whole_size)
408 {
409 892 RVDecContext *rv = avctx->priv_data;
410 892 MpegEncContext *s = &rv->m;
411 int mb_count, mb_pos, left, start_mb_x, active_bits_size, ret;
412
413 892 active_bits_size = buf_size * 8;
414 892 init_get_bits(&s->gb, buf, FFMAX(buf_size, buf_size2) * 8);
415
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 742 times.
 892 if (s->codec_id == AV_CODEC_ID_RV10)
416 150 mb_count = rv10_decode_picture_header(s);
417 else
418 742 mb_count = rv20_decode_picture_header(rv, whole_size);
419
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (mb_count < 0) {
420 ✗ if (mb_count != ERROR_SKIP_FRAME)
421 ✗ av_log(s->avctx, AV_LOG_ERROR, "HEADER ERROR\n");
422 ✗ return AVERROR_INVALIDDATA;
423 }
424
425
1/2
✓ Branch 0 taken 892 times.
✗ Branch 1 not taken.
 892 if (s->mb_x >= s->mb_width ||
426
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 s->mb_y >= s->mb_height) {
427 ✗ av_log(s->avctx, AV_LOG_ERROR, "POS ERROR %d %d\n", s->mb_x, s->mb_y);
428 ✗ return AVERROR_INVALIDDATA;
429 }
430 892 mb_pos = s->mb_y * s->mb_width + s->mb_x;
431 892 left = s->mb_width * s->mb_height - mb_pos;
432
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (mb_count > left) {
433 ✗ av_log(s->avctx, AV_LOG_ERROR, "COUNT ERROR\n");
434 ✗ return AVERROR_INVALIDDATA;
435 }
436
437
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (whole_size < s->mb_width * s->mb_height / 8)
438 ✗ return AVERROR_INVALIDDATA;
439
440
4/6
✓ Branch 0 taken 445 times.
✓ Branch 1 taken 447 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 445 times.
✗ Branch 4 not taken.
✓ Branch 5 taken 447 times.
 892 if ((s->mb_x == 0 && s->mb_y == 0) || !s->cur_pic.ptr) {
441 // FIXME write parser so we always have complete frames?
442
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 445 times.
 445 if (s->cur_pic.ptr) {
443 ✗ ff_er_frame_end(&s->er, NULL);
444 ✗ ff_mpv_frame_end(s);
445 ✗ s->mb_x = s->mb_y = s->resync_mb_x = s->resync_mb_y = 0;
446 }
447
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 445 times.
 445 if ((ret = ff_mpv_frame_start(s, avctx)) < 0)
448 ✗ return ret;
449 445 ff_mpeg_er_frame_start(s);
450 } else {
451
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 447 times.
 447 if (s->cur_pic.ptr->f->pict_type != s->pict_type) {
452 ✗ av_log(s->avctx, AV_LOG_ERROR, "Slice type mismatch\n");
453 ✗ return AVERROR_INVALIDDATA;
454 }
455 }
456
457
458 ff_dlog(avctx, "qscale=%d\n", s->qscale);
459
460 /* default quantization values */
461
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 742 times.
 892 if (s->codec_id == AV_CODEC_ID_RV10) {
462
1/2
✓ Branch 0 taken 150 times.
✗ Branch 1 not taken.
 150 if (s->mb_y == 0)
463 150 s->first_slice_line = 1;
464 } else {
465 742 s->first_slice_line = 1;
466 742 s->resync_mb_x = s->mb_x;
467 }
468 892 start_mb_x = s->mb_x;
469 892 s->resync_mb_y = s->mb_y;
470
2/2
✓ Branch 0 taken 67 times.
✓ Branch 1 taken 825 times.
 892 if (s->h263_aic) {
471 67 s->y_dc_scale_table =
472 67 s->c_dc_scale_table = ff_aic_dc_scale_table;
473 } else {
474 825 s->y_dc_scale_table =
475 825 s->c_dc_scale_table = ff_mpeg1_dc_scale_table;
476 }
477
478
2/2
✓ Branch 0 taken 742 times.
✓ Branch 1 taken 150 times.
 892 if (s->modified_quant)
479 742 s->chroma_qscale_table = ff_h263_chroma_qscale_table;
480
481 892 ff_set_qscale(s, s->qscale);
482
483 892 s->rv10_first_dc_coded[0] = 0;
484 892 s->rv10_first_dc_coded[1] = 0;
485 892 s->rv10_first_dc_coded[2] = 0;
486 892 ff_init_block_index(s);
487
488 /* decode each macroblock */
489
1/2
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
 162300 for (s->mb_num_left = mb_count; s->mb_num_left > 0; s->mb_num_left--) {
490 int ret;
491 162300 ff_update_block_index(s, 8, s->avctx->lowres, 1);
492 ff_tlog(avctx, "**mb x=%d y=%d\n", s->mb_x, s->mb_y);
493
494 162300 s->mv_dir = MV_DIR_FORWARD;
495 162300 s->mv_type = MV_TYPE_16X16;
496 162300 ret = ff_h263_decode_mb(s, s->block);
497
498 // Repeat the slice end check from ff_h263_decode_mb with our active
499 // bitstream size
500
2/4
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✓ Branch 3 taken 162300 times.
✗ Branch 4 not taken.
 162300 if (ret != SLICE_ERROR && active_bits_size >= get_bits_count(&s->gb)) {
501 162300 int v = show_bits(&s->gb, 16);
502
503
2/2
✓ Branch 1 taken 1341 times.
✓ Branch 2 taken 160959 times.
 162300 if (get_bits_count(&s->gb) + 16 > active_bits_size)
504 1341 v >>= get_bits_count(&s->gb) + 16 - active_bits_size;
505
506
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 161408 times.
 162300 if (!v)
507 892 ret = SLICE_END;
508 }
509
2/6
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 162300 times.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
 162300 if (ret != SLICE_ERROR && active_bits_size < get_bits_count(&s->gb) &&
510 ✗ 8 * buf_size2 >= get_bits_count(&s->gb)) {
511 ✗ active_bits_size = buf_size2 * 8;
512 ✗ av_log(avctx, AV_LOG_DEBUG, "update size from %d to %d\n",
513 8 * buf_size, active_bits_size);
514 ✗ ret = SLICE_OK;
515 }
516
517
2/4
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 162300 times.
 162300 if (ret == SLICE_ERROR || active_bits_size < get_bits_count(&s->gb)) {
518 ✗ av_log(s->avctx, AV_LOG_ERROR, "ERROR at MB %d %d\n", s->mb_x,
519 s->mb_y);
520 ✗ return AVERROR_INVALIDDATA;
521 }
522
2/2
✓ Branch 0 taken 140700 times.
✓ Branch 1 taken 21600 times.
 162300 if (s->pict_type != AV_PICTURE_TYPE_B)
523 140700 ff_h263_update_motion_val(s);
524 162300 ff_mpv_reconstruct_mb(s, s->block);
525
2/2
✓ Branch 0 taken 59400 times.
✓ Branch 1 taken 102900 times.
 162300 if (s->loop_filter)
526 59400 ff_h263_loop_filter(s);
527
528
2/2
✓ Branch 0 taken 7575 times.
✓ Branch 1 taken 154725 times.
 162300 if (++s->mb_x == s->mb_width) {
529 7575 s->mb_x = 0;
530 7575 s->mb_y++;
531 7575 ff_init_block_index(s);
532 }
533
2/2
✓ Branch 0 taken 7297 times.
✓ Branch 1 taken 155003 times.
 162300 if (s->mb_x == s->resync_mb_x)
534 7297 s->first_slice_line = 0;
535
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 161408 times.
 162300 if (ret == SLICE_END)
536 892 break;
537 }
538
539 892 ff_er_add_slice(&s->er, start_mb_x, s->resync_mb_y, s->mb_x - 1, s->mb_y,
540 ER_MB_END);
541
542 892 return active_bits_size;
543 }
544
545 1667 static int get_slice_offset(AVCodecContext *avctx, const uint8_t *buf, int n)
546 {
547 1667 return AV_RL32(buf + n * 8);
548 }
549
550 449 static int rv10_decode_frame(AVCodecContext *avctx, AVFrame *pict,
551 int *got_frame, AVPacket *avpkt)
552 {
553 449 const uint8_t *buf = avpkt->data;
554 449 int buf_size = avpkt->size;
555 449 MpegEncContext *s = avctx->priv_data;
556 int i, ret;
557 int slice_count;
558 449 const uint8_t *slices_hdr = NULL;
559
560 ff_dlog(avctx, "*****frame %"PRId64" size=%d\n", avctx->frame_num, buf_size);
561
562 /* no supplementary picture */
563
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 445 times.
 449 if (buf_size == 0) {
564 4 return 0;
565 }
566
567 445 slice_count = (*buf++) + 1;
568 445 buf_size--;
569
570
2/4
✓ Branch 0 taken 445 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 445 times.
 445 if (!slice_count || buf_size <= 8 * slice_count) {
571 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid slice count: %d.\n",
572 slice_count);
573 ✗ return AVERROR_INVALIDDATA;
574 }
575
576 445 slices_hdr = buf + 4;
577 445 buf += 8 * slice_count;
578 445 buf_size -= 8 * slice_count;
579
580
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 445 times.
 1337 for (i = 0; i < slice_count; i++) {
581 892 unsigned offset = get_slice_offset(avctx, slices_hdr, i);
582 int size, size2;
583
584
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (offset >= buf_size)
585 ✗ return AVERROR_INVALIDDATA;
586
587
2/2
✓ Branch 0 taken 445 times.
✓ Branch 1 taken 447 times.
 892 if (i + 1 == slice_count)
588 445 size = buf_size - offset;
589 else
590 447 size = get_slice_offset(avctx, slices_hdr, i + 1) - offset;
591
592
2/2
✓ Branch 0 taken 564 times.
✓ Branch 1 taken 328 times.
 892 if (i + 2 >= slice_count)
593 564 size2 = buf_size - offset;
594 else
595 328 size2 = get_slice_offset(avctx, slices_hdr, i + 2) - offset;
596
597
2/4
✓ Branch 0 taken 892 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 892 times.
✗ Branch 3 not taken.
 892 if (size <= 0 || size2 <= 0 ||
598
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 offset + FFMAX(size, size2) > buf_size)
599 ✗ return AVERROR_INVALIDDATA;
600
601
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 892 times.
 892 if ((ret = rv10_decode_packet(avctx, buf + offset, size, size2, buf_size)) < 0)
602 ✗ return ret;
603
604
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (ret > 8 * size)
605 ✗ i++;
606 }
607
608
2/4
✓ Branch 0 taken 445 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 445 times.
✗ Branch 3 not taken.
 445 if (s->cur_pic.ptr && s->mb_y >= s->mb_height) {
609 445 ff_er_frame_end(&s->er, NULL);
610 445 ff_mpv_frame_end(s);
611
612
4/4
✓ Branch 0 taken 373 times.
✓ Branch 1 taken 72 times.
✓ Branch 2 taken 300 times.
✓ Branch 3 taken 73 times.
 445 if (s->pict_type == AV_PICTURE_TYPE_B || s->low_delay) {
613
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 372 times.
 372 if ((ret = av_frame_ref(pict, s->cur_pic.ptr->f)) < 0)
614 ✗ return ret;
615 372 ff_print_debug_info(s, s->cur_pic.ptr, pict);
616 372 ff_mpv_export_qp_table(s, pict, s->cur_pic.ptr, FF_MPV_QSCALE_TYPE_MPEG1);
617
2/2
✓ Branch 0 taken 72 times.
✓ Branch 1 taken 1 times.
 73 } else if (s->last_pic.ptr) {
618
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 72 times.
 72 if ((ret = av_frame_ref(pict, s->last_pic.ptr->f)) < 0)
619 ✗ return ret;
620 72 ff_print_debug_info(s, s->last_pic.ptr, pict);
621 72 ff_mpv_export_qp_table(s, pict,s->last_pic.ptr, FF_MPV_QSCALE_TYPE_MPEG1);
622 }
623
624
4/4
✓ Branch 0 taken 7 times.
✓ Branch 1 taken 438 times.
✓ Branch 2 taken 6 times.
✓ Branch 3 taken 1 times.
 445 if (s->last_pic.ptr || s->low_delay) {
625 444 *got_frame = 1;
626 }
627
628 // so we can detect if frame_end was not called (find some nicer solution...)
629 445 ff_mpv_unref_picture(&s->cur_pic);
630 }
631
632 445 return avpkt->size;
633 }
634
635 const FFCodec ff_rv10_decoder = {
636 .p.name = "rv10",
637 CODEC_LONG_NAME("RealVideo 1.0"),
638 .p.type = AVMEDIA_TYPE_VIDEO,
639 .p.id = AV_CODEC_ID_RV10,
640 .priv_data_size = sizeof(RVDecContext),
641 .init = rv10_decode_init,
642 FF_CODEC_DECODE_CB(rv10_decode_frame),
643 .close = ff_mpv_decode_close,
644 .p.capabilities = AV_CODEC_CAP_DR1,
645 .p.max_lowres = 3,
646 .caps_internal = FF_CODEC_CAP_INIT_CLEANUP,
647 };
648
649 const FFCodec ff_rv20_decoder = {
650 .p.name = "rv20",
651 CODEC_LONG_NAME("RealVideo 2.0"),
652 .p.type = AVMEDIA_TYPE_VIDEO,
653 .p.id = AV_CODEC_ID_RV20,
654 .priv_data_size = sizeof(RVDecContext),
655 .init = rv10_decode_init,
656 FF_CODEC_DECODE_CB(rv10_decode_frame),
657 .close = ff_mpv_decode_close,
658 .p.capabilities = AV_CODEC_CAP_DR1 | AV_CODEC_CAP_DELAY,
659 .flush = ff_mpeg_flush,
660 .p.max_lowres = 3,
661 .caps_internal = FF_CODEC_CAP_INIT_CLEANUP,
662 };
663