FFmpeg coverage


Directory: ../../../ffmpeg/
File: src/libavcodec/rv10.c
Date: 2024-03-19 07:04:31
Exec Total Coverage
Lines: 247 345 71.6%
Functions: 9 10 90.0%
Branches: 146 233 62.7%

Line Branch Exec Source
1 /*
2 * RV10/RV20 decoder
3 * Copyright (c) 2000,2001 Fabrice Bellard
4 * Copyright (c) 2002-2004 Michael Niedermayer
5 *
6 * This file is part of FFmpeg.
7 *
8 * FFmpeg is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2.1 of the License, or (at your option) any later version.
12 *
13 * FFmpeg is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
17 *
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with FFmpeg; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
21 */
22
23 /**
24 * @file
25 * RV10/RV20 decoder
26 */
27
28 #include <inttypes.h>
29
30 #include "libavutil/imgutils.h"
31 #include "libavutil/thread.h"
32
33 #include "avcodec.h"
34 #include "codec_internal.h"
35 #include "decode.h"
36 #include "error_resilience.h"
37 #include "h263.h"
38 #include "h263data.h"
39 #include "h263dec.h"
40 #include "mpeg_er.h"
41 #include "mpegutils.h"
42 #include "mpegvideo.h"
43 #include "mpegvideodec.h"
44 #include "mpeg4video.h"
45 #include "mpegvideodata.h"
46 #include "rv10dec.h"
47
48 #define RV_GET_MAJOR_VER(x) ((x) >> 28)
49 #define RV_GET_MINOR_VER(x) (((x) >> 20) & 0xFF)
50 #define RV_GET_MICRO_VER(x) (((x) >> 12) & 0xFF)
51
52 #define MAX_VLC_ENTRIES 1023 // Note: Does not include the skip entries.
53 #define DC_VLC_BITS 9
54
55 typedef struct RVDecContext {
56 MpegEncContext m;
57 int sub_id;
58 int orig_width, orig_height;
59 } RVDecContext;
60
61 /* (run, length) encoded value for the symbols table. The actual symbols
62 * are run..run - length (mod 256).
63 * The last two entries in the following table apply to luma only.
64 * The skip values are not included in this list. */
65 static const uint8_t rv_sym_run_len[][2] = {
66 { 0, 0 }, { 1, 0 }, { 255, 0 }, { 3, 1 }, { 254, 1 },
67 { 7, 3 }, { 252, 3 }, { 15, 7 }, { 248, 7 }, { 31, 15 },
68 { 240, 15 }, { 63, 31 }, { 224, 31 }, { 127, 63 }, { 192, 63 },
69 { 255, 127 }, { 128, 127 }, { 127, 255 }, { 128, 255 },
70 };
71
72 /* entry[i] of the following tables gives
73 * the number of VLC codes of length i + 2. */
74 static const uint16_t rv_lum_len_count[15] = {
75 1, 0, 2, 4, 8, 16, 32, 0, 64, 0, 128, 0, 256, 0, 512,
76 };
77
78 static const uint16_t rv_chrom_len_count[15] = {
79 1, 2, 4, 0, 8, 0, 16, 0, 32, 0, 64, 0, 128, 0, 256,
80 };
81
82 static VLC rv_dc_lum, rv_dc_chrom;
83
84 int ff_rv_decode_dc(MpegEncContext *s, int n)
85 {
86 int code;
87
88 if (n < 4) {
89 code = get_vlc2(&s->gb, rv_dc_lum.table, DC_VLC_BITS, 2);
90 } else {
91 code = get_vlc2(&s->gb, rv_dc_chrom.table, DC_VLC_BITS, 2);
92 if (code < 0) {
93 av_log(s->avctx, AV_LOG_ERROR, "chroma dc error\n");
94 return -1;
95 }
96 }
97 return code;
98 }
99
100 /* read RV 1.0 compatible frame header */
101 150 static int rv10_decode_picture_header(MpegEncContext *s)
102 {
103 int mb_count, pb_frame, marker, mb_xy;
104
105 150 marker = get_bits1(&s->gb);
106
107
2/2
✓ Branch 1 taken 135 times.
✓ Branch 2 taken 15 times.
150 if (get_bits1(&s->gb))
108 135 s->pict_type = AV_PICTURE_TYPE_P;
109 else
110 15 s->pict_type = AV_PICTURE_TYPE_I;
111
112
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
150 if (!marker)
113 av_log(s->avctx, AV_LOG_ERROR, "marker missing\n");
114
115 150 pb_frame = get_bits1(&s->gb);
116
117 ff_dlog(s->avctx, "pict_type=%d pb_frame=%d\n", s->pict_type, pb_frame);
118
119
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
150 if (pb_frame) {
120 avpriv_request_sample(s->avctx, "PB-frame");
121 return AVERROR_PATCHWELCOME;
122 }
123
124 150 s->qscale = get_bits(&s->gb, 5);
125
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
150 if (s->qscale == 0) {
126 av_log(s->avctx, AV_LOG_ERROR, "Invalid qscale value: 0\n");
127 return AVERROR_INVALIDDATA;
128 }
129
130
2/2
✓ Branch 0 taken 15 times.
✓ Branch 1 taken 135 times.
150 if (s->pict_type == AV_PICTURE_TYPE_I) {
131
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 15 times.
15 if (s->rv10_version == 3) {
132 /* specific MPEG like DC coding not used */
133 s->last_dc[0] = get_bits(&s->gb, 8);
134 s->last_dc[1] = get_bits(&s->gb, 8);
135 s->last_dc[2] = get_bits(&s->gb, 8);
136 ff_dlog(s->avctx, "DC:%d %d %d\n", s->last_dc[0],
137 s->last_dc[1], s->last_dc[2]);
138 }
139 }
140 /* if multiple packets per frame are sent, the position at which
141 * to display the macroblocks is coded here */
142
143 150 mb_xy = s->mb_x + s->mb_y * s->mb_width;
144
1/6
✗ Branch 1 not taken.
✓ Branch 2 taken 150 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
150 if (show_bits(&s->gb, 12) == 0 || (mb_xy && mb_xy < s->mb_num)) {
145 150 s->mb_x = get_bits(&s->gb, 6); /* mb_x */
146 150 s->mb_y = get_bits(&s->gb, 6); /* mb_y */
147 150 mb_count = get_bits(&s->gb, 12);
148 } else {
149 s->mb_x = 0;
150 s->mb_y = 0;
151 mb_count = s->mb_width * s->mb_height;
152 }
153 150 skip_bits(&s->gb, 3); /* ignored */
154 150 s->f_code = 1;
155
156 150 return mb_count;
157 }
158
159 742 static int rv20_decode_picture_header(RVDecContext *rv, int whole_size)
160 {
161 static const enum AVPictureType pict_types[] =
162 { AV_PICTURE_TYPE_I, AV_PICTURE_TYPE_I /* hmm ... */,
163 AV_PICTURE_TYPE_P, AV_PICTURE_TYPE_B };
164 742 MpegEncContext *s = &rv->m;
165 int seq, mb_pos, ret;
166 int rpr_max;
167
168 742 s->pict_type = pict_types[get_bits(&s->gb, 2)];
169
170
3/4
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 150 times.
742 if (s->low_delay && s->pict_type == AV_PICTURE_TYPE_B) {
171 av_log(s->avctx, AV_LOG_ERROR, "low delay B\n");
172 return -1;
173 }
174
3/4
✓ Branch 0 taken 11 times.
✓ Branch 1 taken 731 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 11 times.
742 if (!s->last_picture_ptr && s->pict_type == AV_PICTURE_TYPE_B) {
175 av_log(s->avctx, AV_LOG_ERROR, "early B-frame\n");
176 return AVERROR_INVALIDDATA;
177 }
178
179
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 742 times.
742 if (get_bits1(&s->gb)) {
180 av_log(s->avctx, AV_LOG_ERROR, "reserved bit set\n");
181 return AVERROR_INVALIDDATA;
182 }
183
184 742 s->qscale = get_bits(&s->gb, 5);
185
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
742 if (s->qscale == 0) {
186 av_log(s->avctx, AV_LOG_ERROR, "Invalid qscale value: 0\n");
187 return AVERROR_INVALIDDATA;
188 }
189
190
2/2
✓ Branch 0 taken 592 times.
✓ Branch 1 taken 150 times.
742 if (RV_GET_MINOR_VER(rv->sub_id) >= 2)
191
3/4
✓ Branch 1 taken 413 times.
✓ Branch 2 taken 179 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 413 times.
592 s->loop_filter = get_bits1(&s->gb) && !s->avctx->lowres;
192
193
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
742 if (RV_GET_MINOR_VER(rv->sub_id) <= 1)
194 150 seq = get_bits(&s->gb, 8) << 7;
195 else
196 592 seq = get_bits(&s->gb, 13) << 2;
197
198 742 rpr_max = s->avctx->extradata[1] & 7;
199
2/2
✓ Branch 0 taken 592 times.
✓ Branch 1 taken 150 times.
742 if (rpr_max) {
200 int f, new_w, new_h;
201 592 int rpr_bits = av_log2(rpr_max) + 1;
202
203 592 f = get_bits(&s->gb, rpr_bits);
204
205
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 592 times.
592 if (f) {
206 if (s->avctx->extradata_size < 8 + 2 * f) {
207 av_log(s->avctx, AV_LOG_ERROR, "Extradata too small.\n");
208 return AVERROR_INVALIDDATA;
209 }
210
211 new_w = 4 * ((uint8_t *) s->avctx->extradata)[6 + 2 * f];
212 new_h = 4 * ((uint8_t *) s->avctx->extradata)[7 + 2 * f];
213 } else {
214 592 new_w = rv->orig_width;
215 592 new_h = rv->orig_height;
216 }
217
3/6
✓ Branch 0 taken 592 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 592 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 592 times.
592 if (new_w != s->width || new_h != s->height || !s->context_initialized) {
218 AVRational old_aspect = s->avctx->sample_aspect_ratio;
219 av_log(s->avctx, AV_LOG_DEBUG,
220 "attempting to change resolution to %dx%d\n", new_w, new_h);
221 if (av_image_check_size(new_w, new_h, 0, s->avctx) < 0)
222 return AVERROR_INVALIDDATA;
223
224 if (whole_size < (new_w + 15)/16 * ((new_h + 15)/16) / 8)
225 return AVERROR_INVALIDDATA;
226
227 ff_mpv_common_end(s);
228
229 // attempt to keep aspect during typical resolution switches
230 if (!old_aspect.num)
231 old_aspect = (AVRational){1, 1};
232 if (2 * (int64_t)new_w * s->height == (int64_t)new_h * s->width)
233 s->avctx->sample_aspect_ratio = av_mul_q(old_aspect, (AVRational){2, 1});
234 if ((int64_t)new_w * s->height == 2 * (int64_t)new_h * s->width)
235 s->avctx->sample_aspect_ratio = av_mul_q(old_aspect, (AVRational){1, 2});
236
237 ret = ff_set_dimensions(s->avctx, new_w, new_h);
238 if (ret < 0)
239 return ret;
240
241 s->width = new_w;
242 s->height = new_h;
243 if ((ret = ff_mpv_common_init(s)) < 0)
244 return ret;
245 }
246
247
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 592 times.
592 if (s->avctx->debug & FF_DEBUG_PICT_INFO) {
248 av_log(s->avctx, AV_LOG_DEBUG, "F %d/%d/%d\n", f, rpr_bits, rpr_max);
249 }
250 }
251
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 742 times.
742 if (av_image_check_size(s->width, s->height, 0, s->avctx) < 0)
252 return AVERROR_INVALIDDATA;
253
254 742 mb_pos = ff_h263_decode_mba(s);
255
256 742 seq |= s->time & ~0x7FFF;
257
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
742 if (seq - s->time > 0x4000)
258 seq -= 0x8000;
259
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
742 if (seq - s->time < -0x4000)
260 seq += 0x8000;
261
262
2/2
✓ Branch 0 taken 292 times.
✓ Branch 1 taken 450 times.
742 if (seq != s->time) {
263
2/2
✓ Branch 0 taken 220 times.
✓ Branch 1 taken 72 times.
292 if (s->pict_type != AV_PICTURE_TYPE_B) {
264 220 s->time = seq;
265 220 s->pp_time = s->time - s->last_non_b_time;
266 220 s->last_non_b_time = s->time;
267 } else {
268 72 s->time = seq;
269 72 s->pb_time = s->pp_time - (s->last_non_b_time - s->time);
270 }
271 }
272
2/2
✓ Branch 0 taken 181 times.
✓ Branch 1 taken 561 times.
742 if (s->pict_type == AV_PICTURE_TYPE_B) {
273
3/6
✓ Branch 0 taken 181 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 181 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 181 times.
181 if (s->pp_time <=s->pb_time || s->pp_time <= s->pp_time - s->pb_time || s->pp_time<=0) {
274 av_log(s->avctx, AV_LOG_DEBUG,
275 "messed up order, possible from seeking? skipping current B-frame\n");
276 #define ERROR_SKIP_FRAME -123
277 return ERROR_SKIP_FRAME;
278 }
279 181 ff_mpeg4_init_direct_mv(s);
280 }
281
282 742 s->no_rounding = get_bits1(&s->gb);
283
284
3/4
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 150 times.
742 if (RV_GET_MINOR_VER(rv->sub_id) <= 1 && s->pict_type == AV_PICTURE_TYPE_B)
285 // binary decoder reads 3+2 bits here but they don't seem to be used
286 skip_bits(&s->gb, 5);
287
288 742 s->f_code = 1;
289 742 s->h263_aic = s->pict_type == AV_PICTURE_TYPE_I;
290 742 s->modified_quant = 1;
291
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
742 if (!s->avctx->lowres)
292 150 s->loop_filter = 1;
293
294
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
742 if (s->avctx->debug & FF_DEBUG_PICT_INFO) {
295 av_log(s->avctx, AV_LOG_INFO,
296 "num:%5d x:%2d y:%2d type:%d qscale:%2d rnd:%d\n",
297 seq, s->mb_x, s->mb_y, s->pict_type, s->qscale,
298 s->no_rounding);
299 }
300
301
3/4
✓ Branch 0 taken 181 times.
✓ Branch 1 taken 561 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 181 times.
742 av_assert0(s->pict_type != AV_PICTURE_TYPE_B || !s->low_delay);
302
303 742 return s->mb_width * s->mb_height - mb_pos;
304 }
305
306 26 static av_cold void rv10_build_vlc(VLC *vlc, const uint16_t len_count[15],
307 const uint8_t sym_rl[][2], int sym_rl_elems)
308 {
309 uint16_t syms[MAX_VLC_ENTRIES];
310 uint8_t lens[MAX_VLC_ENTRIES];
311 26 unsigned nb_syms = 0, nb_lens = 0;
312
313
2/2
✓ Branch 0 taken 468 times.
✓ Branch 1 taken 26 times.
494 for (unsigned i = 0; i < sym_rl_elems; i++) {
314 468 unsigned cur_sym = sym_rl[i][0];
315
2/2
✓ Branch 0 taken 19942 times.
✓ Branch 1 taken 468 times.
20410 for (unsigned tmp = nb_syms + sym_rl[i][1]; nb_syms <= tmp; nb_syms++)
316 19942 syms[nb_syms] = 0xFF & cur_sym--;
317 }
318
319
2/2
✓ Branch 0 taken 390 times.
✓ Branch 1 taken 26 times.
416 for (unsigned i = 0; i < 15; i++)
320
2/2
✓ Branch 0 taken 19942 times.
✓ Branch 1 taken 390 times.
20332 for (unsigned tmp = nb_lens + len_count[i]; nb_lens < tmp; nb_lens++)
321 19942 lens[nb_lens] = i + 2;
322 av_assert1(nb_lens == nb_syms);
323 26 ff_vlc_init_from_lengths(vlc, DC_VLC_BITS, nb_lens, lens, 1,
324 syms, 2, 2, 0, VLC_INIT_STATIC_OVERLONG, NULL);
325 26 }
326
327 13 static av_cold void rv10_init_static(void)
328 {
329 static VLCElem table[1472 + 992];
330
331 13 rv_dc_lum.table = table;
332 13 rv_dc_lum.table_allocated = 1472;
333 13 rv10_build_vlc(&rv_dc_lum, rv_lum_len_count,
334 rv_sym_run_len, FF_ARRAY_ELEMS(rv_sym_run_len));
335
2/2
✓ Branch 0 taken 52 times.
✓ Branch 1 taken 13 times.
65 for (int i = 0; i < 1 << (DC_VLC_BITS - 7 /* Length of skip prefix */); i++) {
336 /* All codes beginning with 0x7F have the same length and value.
337 * Modifying the table directly saves us the useless subtables. */
338 52 rv_dc_lum.table[(0x7F << (DC_VLC_BITS - 7)) + i].sym = 255;
339 52 rv_dc_lum.table[(0x7F << (DC_VLC_BITS - 7)) + i].len = 18;
340 }
341 13 rv_dc_chrom.table = &table[1472];
342 13 rv_dc_chrom.table_allocated = 992;
343 13 rv10_build_vlc(&rv_dc_chrom, rv_chrom_len_count,
344 rv_sym_run_len, FF_ARRAY_ELEMS(rv_sym_run_len) - 2);
345
2/2
✓ Branch 0 taken 13 times.
✓ Branch 1 taken 13 times.
26 for (int i = 0; i < 1 << (DC_VLC_BITS - 9 /* Length of skip prefix */); i++) {
346 /* Same as above. */
347 13 rv_dc_chrom.table[(0x1FE << (DC_VLC_BITS - 9)) + i].sym = 255;
348 13 rv_dc_chrom.table[(0x1FE << (DC_VLC_BITS - 9)) + i].len = 18;
349 }
350 13 ff_h263_decode_init_vlc();
351 13 }
352
353 20 static av_cold int rv10_decode_init(AVCodecContext *avctx)
354 {
355 static AVOnce init_static_once = AV_ONCE_INIT;
356 20 RVDecContext *rv = avctx->priv_data;
357 20 MpegEncContext *s = &rv->m;
358 int major_ver, minor_ver, micro_ver, ret;
359
360
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
20 if (avctx->extradata_size < 8) {
361 av_log(avctx, AV_LOG_ERROR, "Extradata is too small.\n");
362 return AVERROR_INVALIDDATA;
363 }
364
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
20 if ((ret = av_image_check_size(avctx->coded_width,
365 20 avctx->coded_height, 0, avctx)) < 0)
366 return ret;
367
368 20 ff_mpv_decode_init(s, avctx);
369
370 20 s->out_format = FMT_H263;
371
372 20 rv->orig_width =
373 20 s->width = avctx->coded_width;
374 20 rv->orig_height =
375 20 s->height = avctx->coded_height;
376
377 20 s->h263_long_vectors = ((uint8_t *) avctx->extradata)[3] & 1;
378 20 rv->sub_id = AV_RB32((uint8_t *) avctx->extradata + 4);
379
380 20 major_ver = RV_GET_MAJOR_VER(rv->sub_id);
381 20 minor_ver = RV_GET_MINOR_VER(rv->sub_id);
382 20 micro_ver = RV_GET_MICRO_VER(rv->sub_id);
383
384 20 s->low_delay = 1;
385
2/3
✓ Branch 0 taken 9 times.
✓ Branch 1 taken 11 times.
✗ Branch 2 not taken.
20 switch (major_ver) {
386 9 case 1:
387
2/2
✓ Branch 0 taken 1 times.
✓ Branch 1 taken 8 times.
9 s->rv10_version = micro_ver ? 3 : 1;
388 9 s->obmc = micro_ver == 2;
389 9 break;
390 11 case 2:
391
2/2
✓ Branch 0 taken 3 times.
✓ Branch 1 taken 8 times.
11 if (minor_ver >= 2) {
392 3 s->low_delay = 0;
393 3 s->avctx->has_b_frames = 1;
394 }
395 11 break;
396 default:
397 av_log(s->avctx, AV_LOG_ERROR, "unknown header %X\n", rv->sub_id);
398 avpriv_request_sample(avctx, "RV1/2 version");
399 return AVERROR_PATCHWELCOME;
400 }
401
402
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
20 if (avctx->debug & FF_DEBUG_PICT_INFO) {
403 av_log(avctx, AV_LOG_DEBUG, "ver:%X ver0:%"PRIX32"\n", rv->sub_id,
404 ((uint32_t *) avctx->extradata)[0]);
405 }
406
407 20 avctx->pix_fmt = AV_PIX_FMT_YUV420P;
408
409
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 20 times.
20 if ((ret = ff_mpv_common_init(s)) < 0)
410 return ret;
411
412 20 ff_h263dsp_init(&s->h263dsp);
413
414 /* init static VLCs */
415 20 ff_thread_once(&init_static_once, rv10_init_static);
416
417 20 return 0;
418 }
419
420 20 static av_cold int rv10_decode_end(AVCodecContext *avctx)
421 {
422 20 MpegEncContext *s = avctx->priv_data;
423
424 20 ff_mpv_common_end(s);
425 20 return 0;
426 }
427
428 892 static int rv10_decode_packet(AVCodecContext *avctx, const uint8_t *buf,
429 int buf_size, int buf_size2, int whole_size)
430 {
431 892 RVDecContext *rv = avctx->priv_data;
432 892 MpegEncContext *s = &rv->m;
433 int mb_count, mb_pos, left, start_mb_x, active_bits_size, ret;
434
435 892 active_bits_size = buf_size * 8;
436 892 init_get_bits(&s->gb, buf, FFMAX(buf_size, buf_size2) * 8);
437
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 742 times.
892 if (s->codec_id == AV_CODEC_ID_RV10)
438 150 mb_count = rv10_decode_picture_header(s);
439 else
440 742 mb_count = rv20_decode_picture_header(rv, whole_size);
441
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
892 if (mb_count < 0) {
442 if (mb_count != ERROR_SKIP_FRAME)
443 av_log(s->avctx, AV_LOG_ERROR, "HEADER ERROR\n");
444 return AVERROR_INVALIDDATA;
445 }
446
447
1/2
✓ Branch 0 taken 892 times.
✗ Branch 1 not taken.
892 if (s->mb_x >= s->mb_width ||
448
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
892 s->mb_y >= s->mb_height) {
449 av_log(s->avctx, AV_LOG_ERROR, "POS ERROR %d %d\n", s->mb_x, s->mb_y);
450 return AVERROR_INVALIDDATA;
451 }
452 892 mb_pos = s->mb_y * s->mb_width + s->mb_x;
453 892 left = s->mb_width * s->mb_height - mb_pos;
454
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
892 if (mb_count > left) {
455 av_log(s->avctx, AV_LOG_ERROR, "COUNT ERROR\n");
456 return AVERROR_INVALIDDATA;
457 }
458
459
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
892 if (whole_size < s->mb_width * s->mb_height / 8)
460 return AVERROR_INVALIDDATA;
461
462
4/6
✓ Branch 0 taken 445 times.
✓ Branch 1 taken 447 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 445 times.
✗ Branch 4 not taken.
✓ Branch 5 taken 447 times.
892 if ((s->mb_x == 0 && s->mb_y == 0) || !s->current_picture_ptr) {
463 // FIXME write parser so we always have complete frames?
464
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 445 times.
445 if (s->current_picture_ptr) {
465 ff_er_frame_end(&s->er, NULL);
466 ff_mpv_frame_end(s);
467 s->mb_x = s->mb_y = s->resync_mb_x = s->resync_mb_y = 0;
468 }
469
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 445 times.
445 if ((ret = ff_mpv_frame_start(s, avctx)) < 0)
470 return ret;
471 445 ff_mpeg_er_frame_start(s);
472 } else {
473
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 447 times.
447 if (s->current_picture_ptr->f->pict_type != s->pict_type) {
474 av_log(s->avctx, AV_LOG_ERROR, "Slice type mismatch\n");
475 return AVERROR_INVALIDDATA;
476 }
477 }
478
479
480 ff_dlog(avctx, "qscale=%d\n", s->qscale);
481
482 /* default quantization values */
483
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 742 times.
892 if (s->codec_id == AV_CODEC_ID_RV10) {
484
1/2
✓ Branch 0 taken 150 times.
✗ Branch 1 not taken.
150 if (s->mb_y == 0)
485 150 s->first_slice_line = 1;
486 } else {
487 742 s->first_slice_line = 1;
488 742 s->resync_mb_x = s->mb_x;
489 }
490 892 start_mb_x = s->mb_x;
491 892 s->resync_mb_y = s->mb_y;
492
2/2
✓ Branch 0 taken 67 times.
✓ Branch 1 taken 825 times.
892 if (s->h263_aic) {
493 67 s->y_dc_scale_table =
494 67 s->c_dc_scale_table = ff_aic_dc_scale_table;
495 } else {
496 825 s->y_dc_scale_table =
497 825 s->c_dc_scale_table = ff_mpeg1_dc_scale_table;
498 }
499
500
2/2
✓ Branch 0 taken 742 times.
✓ Branch 1 taken 150 times.
892 if (s->modified_quant)
501 742 s->chroma_qscale_table = ff_h263_chroma_qscale_table;
502
503 892 ff_set_qscale(s, s->qscale);
504
505 892 s->rv10_first_dc_coded[0] = 0;
506 892 s->rv10_first_dc_coded[1] = 0;
507 892 s->rv10_first_dc_coded[2] = 0;
508 892 s->block_wrap[0] =
509 892 s->block_wrap[1] =
510 892 s->block_wrap[2] =
511 892 s->block_wrap[3] = s->b8_stride;
512 892 s->block_wrap[4] =
513 892 s->block_wrap[5] = s->mb_stride;
514 892 ff_init_block_index(s);
515
516 /* decode each macroblock */
517
1/2
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
162300 for (s->mb_num_left = mb_count; s->mb_num_left > 0; s->mb_num_left--) {
518 int ret;
519 162300 ff_update_block_index(s, 8, s->avctx->lowres, 1);
520 ff_tlog(avctx, "**mb x=%d y=%d\n", s->mb_x, s->mb_y);
521
522 162300 s->mv_dir = MV_DIR_FORWARD;
523 162300 s->mv_type = MV_TYPE_16X16;
524 162300 ret = ff_h263_decode_mb(s, s->block);
525
526 // Repeat the slice end check from ff_h263_decode_mb with our active
527 // bitstream size
528
2/4
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✓ Branch 3 taken 162300 times.
✗ Branch 4 not taken.
162300 if (ret != SLICE_ERROR && active_bits_size >= get_bits_count(&s->gb)) {
529 162300 int v = show_bits(&s->gb, 16);
530
531
2/2
✓ Branch 1 taken 1341 times.
✓ Branch 2 taken 160959 times.
162300 if (get_bits_count(&s->gb) + 16 > active_bits_size)
532 1341 v >>= get_bits_count(&s->gb) + 16 - active_bits_size;
533
534
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 161408 times.
162300 if (!v)
535 892 ret = SLICE_END;
536 }
537
2/6
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 162300 times.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
162300 if (ret != SLICE_ERROR && active_bits_size < get_bits_count(&s->gb) &&
538 8 * buf_size2 >= get_bits_count(&s->gb)) {
539 active_bits_size = buf_size2 * 8;
540 av_log(avctx, AV_LOG_DEBUG, "update size from %d to %d\n",
541 8 * buf_size, active_bits_size);
542 ret = SLICE_OK;
543 }
544
545
2/4
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 162300 times.
162300 if (ret == SLICE_ERROR || active_bits_size < get_bits_count(&s->gb)) {
546 av_log(s->avctx, AV_LOG_ERROR, "ERROR at MB %d %d\n", s->mb_x,
547 s->mb_y);
548 return AVERROR_INVALIDDATA;
549 }
550
2/2
✓ Branch 0 taken 140700 times.
✓ Branch 1 taken 21600 times.
162300 if (s->pict_type != AV_PICTURE_TYPE_B)
551 140700 ff_h263_update_motion_val(s);
552 162300 ff_mpv_reconstruct_mb(s, s->block);
553
2/2
✓ Branch 0 taken 59400 times.
✓ Branch 1 taken 102900 times.
162300 if (s->loop_filter)
554 59400 ff_h263_loop_filter(s);
555
556
2/2
✓ Branch 0 taken 7575 times.
✓ Branch 1 taken 154725 times.
162300 if (++s->mb_x == s->mb_width) {
557 7575 s->mb_x = 0;
558 7575 s->mb_y++;
559 7575 ff_init_block_index(s);
560 }
561
2/2
✓ Branch 0 taken 7297 times.
✓ Branch 1 taken 155003 times.
162300 if (s->mb_x == s->resync_mb_x)
562 7297 s->first_slice_line = 0;
563
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 161408 times.
162300 if (ret == SLICE_END)
564 892 break;
565 }
566
567 892 ff_er_add_slice(&s->er, start_mb_x, s->resync_mb_y, s->mb_x - 1, s->mb_y,
568 ER_MB_END);
569
570 892 return active_bits_size;
571 }
572
573 1667 static int get_slice_offset(AVCodecContext *avctx, const uint8_t *buf, int n)
574 {
575 1667 return AV_RL32(buf + n * 8);
576 }
577
578 449 static int rv10_decode_frame(AVCodecContext *avctx, AVFrame *pict,
579 int *got_frame, AVPacket *avpkt)
580 {
581 449 const uint8_t *buf = avpkt->data;
582 449 int buf_size = avpkt->size;
583 449 MpegEncContext *s = avctx->priv_data;
584 int i, ret;
585 int slice_count;
586 449 const uint8_t *slices_hdr = NULL;
587
588 ff_dlog(avctx, "*****frame %"PRId64" size=%d\n", avctx->frame_num, buf_size);
589
590 /* no supplementary picture */
591
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 445 times.
449 if (buf_size == 0) {
592 4 return 0;
593 }
594
595 445 slice_count = (*buf++) + 1;
596 445 buf_size--;
597
598
2/4
✓ Branch 0 taken 445 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 445 times.
445 if (!slice_count || buf_size <= 8 * slice_count) {
599 av_log(avctx, AV_LOG_ERROR, "Invalid slice count: %d.\n",
600 slice_count);
601 return AVERROR_INVALIDDATA;
602 }
603
604 445 slices_hdr = buf + 4;
605 445 buf += 8 * slice_count;
606 445 buf_size -= 8 * slice_count;
607
608
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 445 times.
1337 for (i = 0; i < slice_count; i++) {
609 892 unsigned offset = get_slice_offset(avctx, slices_hdr, i);
610 int size, size2;
611
612
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
892 if (offset >= buf_size)
613 return AVERROR_INVALIDDATA;
614
615
2/2
✓ Branch 0 taken 445 times.
✓ Branch 1 taken 447 times.
892 if (i + 1 == slice_count)
616 445 size = buf_size - offset;
617 else
618 447 size = get_slice_offset(avctx, slices_hdr, i + 1) - offset;
619
620
2/2
✓ Branch 0 taken 564 times.
✓ Branch 1 taken 328 times.
892 if (i + 2 >= slice_count)
621 564 size2 = buf_size - offset;
622 else
623 328 size2 = get_slice_offset(avctx, slices_hdr, i + 2) - offset;
624
625
2/4
✓ Branch 0 taken 892 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 892 times.
✗ Branch 3 not taken.
892 if (size <= 0 || size2 <= 0 ||
626
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
892 offset + FFMAX(size, size2) > buf_size)
627 return AVERROR_INVALIDDATA;
628
629
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 892 times.
892 if ((ret = rv10_decode_packet(avctx, buf + offset, size, size2, buf_size)) < 0)
630 return ret;
631
632
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
892 if (ret > 8 * size)
633 i++;
634 }
635
636
2/4
✓ Branch 0 taken 445 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 445 times.
✗ Branch 3 not taken.
445 if (s->current_picture_ptr && s->mb_y >= s->mb_height) {
637 445 ff_er_frame_end(&s->er, NULL);
638 445 ff_mpv_frame_end(s);
639
640
4/4
✓ Branch 0 taken 373 times.
✓ Branch 1 taken 72 times.
✓ Branch 2 taken 300 times.
✓ Branch 3 taken 73 times.
445 if (s->pict_type == AV_PICTURE_TYPE_B || s->low_delay) {
641
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 372 times.
372 if ((ret = av_frame_ref(pict, s->current_picture_ptr->f)) < 0)
642 return ret;
643 372 ff_print_debug_info(s, s->current_picture_ptr, pict);
644 372 ff_mpv_export_qp_table(s, pict, s->current_picture_ptr, FF_MPV_QSCALE_TYPE_MPEG1);
645
2/2
✓ Branch 0 taken 72 times.
✓ Branch 1 taken 1 times.
73 } else if (s->last_picture_ptr) {
646
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 72 times.
72 if ((ret = av_frame_ref(pict, s->last_picture_ptr->f)) < 0)
647 return ret;
648 72 ff_print_debug_info(s, s->last_picture_ptr, pict);
649 72 ff_mpv_export_qp_table(s, pict,s->last_picture_ptr, FF_MPV_QSCALE_TYPE_MPEG1);
650 }
651
652
4/4
✓ Branch 0 taken 7 times.
✓ Branch 1 taken 438 times.
✓ Branch 2 taken 6 times.
✓ Branch 3 taken 1 times.
445 if (s->last_picture_ptr || s->low_delay) {
653 444 *got_frame = 1;
654 }
655
656 // so we can detect if frame_end was not called (find some nicer solution...)
657 445 s->current_picture_ptr = NULL;
658 }
659
660 445 return avpkt->size;
661 }
662
663 const FFCodec ff_rv10_decoder = {
664 .p.name = "rv10",
665 CODEC_LONG_NAME("RealVideo 1.0"),
666 .p.type = AVMEDIA_TYPE_VIDEO,
667 .p.id = AV_CODEC_ID_RV10,
668 .priv_data_size = sizeof(RVDecContext),
669 .init = rv10_decode_init,
670 .close = rv10_decode_end,
671 FF_CODEC_DECODE_CB(rv10_decode_frame),
672 .p.capabilities = AV_CODEC_CAP_DR1,
673 .p.max_lowres = 3,
674 };
675
676 const FFCodec ff_rv20_decoder = {
677 .p.name = "rv20",
678 CODEC_LONG_NAME("RealVideo 2.0"),
679 .p.type = AVMEDIA_TYPE_VIDEO,
680 .p.id = AV_CODEC_ID_RV20,
681 .priv_data_size = sizeof(RVDecContext),
682 .init = rv10_decode_init,
683 .close = rv10_decode_end,
684 FF_CODEC_DECODE_CB(rv10_decode_frame),
685 .p.capabilities = AV_CODEC_CAP_DR1 | AV_CODEC_CAP_DELAY,
686 .flush = ff_mpeg_flush,
687 .p.max_lowres = 3,
688 };
689