FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/rv10.c
Date: 2024-04-19 17:50:32
Exec Total Coverage
Lines: 247 345 71.6%
Functions: 9 10 90.0%
Branches: 146 233 62.7%
Line Branch Exec Source
1 /*
2 * RV10/RV20 decoder
3 * Copyright (c) 2000,2001 Fabrice Bellard
4 * Copyright (c) 2002-2004 Michael Niedermayer
5 *
6 * This file is part of FFmpeg.
7 *
8 * FFmpeg is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2.1 of the License, or (at your option) any later version.
12 *
13 * FFmpeg is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
17 *
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with FFmpeg; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
21 */
22
23 /**
24 * @file
25 * RV10/RV20 decoder
26 */
27
28 #include <inttypes.h>
29
30 #include "libavutil/imgutils.h"
31 #include "libavutil/thread.h"
32
33 #include "avcodec.h"
34 #include "codec_internal.h"
35 #include "decode.h"
36 #include "error_resilience.h"
37 #include "h263.h"
38 #include "h263data.h"
39 #include "h263dec.h"
40 #include "mpeg_er.h"
41 #include "mpegvideo.h"
42 #include "mpegvideodec.h"
43 #include "mpeg4video.h"
44 #include "mpegvideodata.h"
45 #include "rv10dec.h"
46
47 #define RV_GET_MAJOR_VER(x) ((x) >> 28)
48 #define RV_GET_MINOR_VER(x) (((x) >> 20) & 0xFF)
49 #define RV_GET_MICRO_VER(x) (((x) >> 12) & 0xFF)
50
51 #define MAX_VLC_ENTRIES 1023 // Note: Does not include the skip entries.
52 #define DC_VLC_BITS 9
53
54 typedef struct RVDecContext {
55 MpegEncContext m;
56 int sub_id;
57 int orig_width, orig_height;
58 } RVDecContext;
59
60 /* (run, length) encoded value for the symbols table. The actual symbols
61 * are run..run - length (mod 256).
62 * The last two entries in the following table apply to luma only.
63 * The skip values are not included in this list. */
64 static const uint8_t rv_sym_run_len[][2] = {
65 { 0, 0 }, { 1, 0 }, { 255, 0 }, { 3, 1 }, { 254, 1 },
66 { 7, 3 }, { 252, 3 }, { 15, 7 }, { 248, 7 }, { 31, 15 },
67 { 240, 15 }, { 63, 31 }, { 224, 31 }, { 127, 63 }, { 192, 63 },
68 { 255, 127 }, { 128, 127 }, { 127, 255 }, { 128, 255 },
69 };
70
71 /* entry[i] of the following tables gives
72 * the number of VLC codes of length i + 2. */
73 static const uint16_t rv_lum_len_count[15] = {
74 1, 0, 2, 4, 8, 16, 32, 0, 64, 0, 128, 0, 256, 0, 512,
75 };
76
77 static const uint16_t rv_chrom_len_count[15] = {
78 1, 2, 4, 0, 8, 0, 16, 0, 32, 0, 64, 0, 128, 0, 256,
79 };
80
81 static VLC rv_dc_lum, rv_dc_chrom;
82
83 ✗ int ff_rv_decode_dc(MpegEncContext *s, int n)
84 {
85 int code;
86
87 ✗ if (n < 4) {
88 ✗ code = get_vlc2(&s->gb, rv_dc_lum.table, DC_VLC_BITS, 2);
89 } else {
90 ✗ code = get_vlc2(&s->gb, rv_dc_chrom.table, DC_VLC_BITS, 2);
91 ✗ if (code < 0) {
92 ✗ av_log(s->avctx, AV_LOG_ERROR, "chroma dc error\n");
93 ✗ return -1;
94 }
95 }
96 ✗ return code;
97 }
98
99 /* read RV 1.0 compatible frame header */
100 150 static int rv10_decode_picture_header(MpegEncContext *s)
101 {
102 int mb_count, pb_frame, marker, mb_xy;
103
104 150 marker = get_bits1(&s->gb);
105
106
2/2
✓ Branch 1 taken 135 times.
✓ Branch 2 taken 15 times.
 150 if (get_bits1(&s->gb))
107 135 s->pict_type = AV_PICTURE_TYPE_P;
108 else
109 15 s->pict_type = AV_PICTURE_TYPE_I;
110
111
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
 150 if (!marker)
112 ✗ av_log(s->avctx, AV_LOG_ERROR, "marker missing\n");
113
114 150 pb_frame = get_bits1(&s->gb);
115
116 ff_dlog(s->avctx, "pict_type=%d pb_frame=%d\n", s->pict_type, pb_frame);
117
118
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
 150 if (pb_frame) {
119 ✗ avpriv_request_sample(s->avctx, "PB-frame");
120 ✗ return AVERROR_PATCHWELCOME;
121 }
122
123 150 s->qscale = get_bits(&s->gb, 5);
124
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
 150 if (s->qscale == 0) {
125 ✗ av_log(s->avctx, AV_LOG_ERROR, "Invalid qscale value: 0\n");
126 ✗ return AVERROR_INVALIDDATA;
127 }
128
129
2/2
✓ Branch 0 taken 15 times.
✓ Branch 1 taken 135 times.
 150 if (s->pict_type == AV_PICTURE_TYPE_I) {
130
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 15 times.
 15 if (s->rv10_version == 3) {
131 /* specific MPEG like DC coding not used */
132 ✗ s->last_dc[0] = get_bits(&s->gb, 8);
133 ✗ s->last_dc[1] = get_bits(&s->gb, 8);
134 ✗ s->last_dc[2] = get_bits(&s->gb, 8);
135 ff_dlog(s->avctx, "DC:%d %d %d\n", s->last_dc[0],
136 s->last_dc[1], s->last_dc[2]);
137 }
138 }
139 /* if multiple packets per frame are sent, the position at which
140 * to display the macroblocks is coded here */
141
142 150 mb_xy = s->mb_x + s->mb_y * s->mb_width;
143
1/6
✗ Branch 1 not taken.
✓ Branch 2 taken 150 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
 150 if (show_bits(&s->gb, 12) == 0 || (mb_xy && mb_xy < s->mb_num)) {
144 150 s->mb_x = get_bits(&s->gb, 6); /* mb_x */
145 150 s->mb_y = get_bits(&s->gb, 6); /* mb_y */
146 150 mb_count = get_bits(&s->gb, 12);
147 } else {
148 ✗ s->mb_x = 0;
149 ✗ s->mb_y = 0;
150 ✗ mb_count = s->mb_width * s->mb_height;
151 }
152 150 skip_bits(&s->gb, 3); /* ignored */
153 150 s->f_code = 1;
154
155 150 return mb_count;
156 }
157
158 742 static int rv20_decode_picture_header(RVDecContext *rv, int whole_size)
159 {
160 static const enum AVPictureType pict_types[] =
161 { AV_PICTURE_TYPE_I, AV_PICTURE_TYPE_I /* hmm ... */,
162 AV_PICTURE_TYPE_P, AV_PICTURE_TYPE_B };
163 742 MpegEncContext *s = &rv->m;
164 int seq, mb_pos, ret;
165 int rpr_max;
166
167 742 s->pict_type = pict_types[get_bits(&s->gb, 2)];
168
169
3/4
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 150 times.
 742 if (s->low_delay && s->pict_type == AV_PICTURE_TYPE_B) {
170 ✗ av_log(s->avctx, AV_LOG_ERROR, "low delay B\n");
171 ✗ return -1;
172 }
173
3/4
✓ Branch 0 taken 11 times.
✓ Branch 1 taken 731 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 11 times.
 742 if (!s->last_picture_ptr && s->pict_type == AV_PICTURE_TYPE_B) {
174 ✗ av_log(s->avctx, AV_LOG_ERROR, "early B-frame\n");
175 ✗ return AVERROR_INVALIDDATA;
176 }
177
178
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 742 times.
 742 if (get_bits1(&s->gb)) {
179 ✗ av_log(s->avctx, AV_LOG_ERROR, "reserved bit set\n");
180 ✗ return AVERROR_INVALIDDATA;
181 }
182
183 742 s->qscale = get_bits(&s->gb, 5);
184
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (s->qscale == 0) {
185 ✗ av_log(s->avctx, AV_LOG_ERROR, "Invalid qscale value: 0\n");
186 ✗ return AVERROR_INVALIDDATA;
187 }
188
189
2/2
✓ Branch 0 taken 592 times.
✓ Branch 1 taken 150 times.
 742 if (RV_GET_MINOR_VER(rv->sub_id) >= 2)
190
3/4
✓ Branch 1 taken 413 times.
✓ Branch 2 taken 179 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 413 times.
 592 s->loop_filter = get_bits1(&s->gb) && !s->avctx->lowres;
191
192
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
 742 if (RV_GET_MINOR_VER(rv->sub_id) <= 1)
193 150 seq = get_bits(&s->gb, 8) << 7;
194 else
195 592 seq = get_bits(&s->gb, 13) << 2;
196
197 742 rpr_max = s->avctx->extradata[1] & 7;
198
2/2
✓ Branch 0 taken 592 times.
✓ Branch 1 taken 150 times.
 742 if (rpr_max) {
199 int f, new_w, new_h;
200 592 int rpr_bits = av_log2(rpr_max) + 1;
201
202 592 f = get_bits(&s->gb, rpr_bits);
203
204
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 592 times.
 592 if (f) {
205 ✗ if (s->avctx->extradata_size < 8 + 2 * f) {
206 ✗ av_log(s->avctx, AV_LOG_ERROR, "Extradata too small.\n");
207 ✗ return AVERROR_INVALIDDATA;
208 }
209
210 ✗ new_w = 4 * ((uint8_t *) s->avctx->extradata)[6 + 2 * f];
211 ✗ new_h = 4 * ((uint8_t *) s->avctx->extradata)[7 + 2 * f];
212 } else {
213 592 new_w = rv->orig_width;
214 592 new_h = rv->orig_height;
215 }
216
3/6
✓ Branch 0 taken 592 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 592 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 592 times.
 592 if (new_w != s->width || new_h != s->height || !s->context_initialized) {
217 ✗ AVRational old_aspect = s->avctx->sample_aspect_ratio;
218 ✗ av_log(s->avctx, AV_LOG_DEBUG,
219 "attempting to change resolution to %dx%d\n", new_w, new_h);
220 ✗ if (av_image_check_size(new_w, new_h, 0, s->avctx) < 0)
221 ✗ return AVERROR_INVALIDDATA;
222
223 ✗ if (whole_size < (new_w + 15)/16 * ((new_h + 15)/16) / 8)
224 ✗ return AVERROR_INVALIDDATA;
225
226 ✗ ff_mpv_common_end(s);
227
228 // attempt to keep aspect during typical resolution switches
229 ✗ if (!old_aspect.num)
230 ✗ old_aspect = (AVRational){1, 1};
231 ✗ if (2 * (int64_t)new_w * s->height == (int64_t)new_h * s->width)
232 ✗ s->avctx->sample_aspect_ratio = av_mul_q(old_aspect, (AVRational){2, 1});
233 ✗ if ((int64_t)new_w * s->height == 2 * (int64_t)new_h * s->width)
234 ✗ s->avctx->sample_aspect_ratio = av_mul_q(old_aspect, (AVRational){1, 2});
235
236 ✗ ret = ff_set_dimensions(s->avctx, new_w, new_h);
237 ✗ if (ret < 0)
238 ✗ return ret;
239
240 ✗ s->width = new_w;
241 ✗ s->height = new_h;
242 ✗ if ((ret = ff_mpv_common_init(s)) < 0)
243 ✗ return ret;
244 }
245
246
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 592 times.
 592 if (s->avctx->debug & FF_DEBUG_PICT_INFO) {
247 ✗ av_log(s->avctx, AV_LOG_DEBUG, "F %d/%d/%d\n", f, rpr_bits, rpr_max);
248 }
249 }
250
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 742 times.
 742 if (av_image_check_size(s->width, s->height, 0, s->avctx) < 0)
251 ✗ return AVERROR_INVALIDDATA;
252
253 742 mb_pos = ff_h263_decode_mba(s);
254
255 742 seq |= s->time & ~0x7FFF;
256
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (seq - s->time > 0x4000)
257 ✗ seq -= 0x8000;
258
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (seq - s->time < -0x4000)
259 ✗ seq += 0x8000;
260
261
2/2
✓ Branch 0 taken 292 times.
✓ Branch 1 taken 450 times.
 742 if (seq != s->time) {
262
2/2
✓ Branch 0 taken 220 times.
✓ Branch 1 taken 72 times.
 292 if (s->pict_type != AV_PICTURE_TYPE_B) {
263 220 s->time = seq;
264 220 s->pp_time = s->time - s->last_non_b_time;
265 220 s->last_non_b_time = s->time;
266 } else {
267 72 s->time = seq;
268 72 s->pb_time = s->pp_time - (s->last_non_b_time - s->time);
269 }
270 }
271
2/2
✓ Branch 0 taken 181 times.
✓ Branch 1 taken 561 times.
 742 if (s->pict_type == AV_PICTURE_TYPE_B) {
272
3/6
✓ Branch 0 taken 181 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 181 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 181 times.
 181 if (s->pp_time <=s->pb_time || s->pp_time <= s->pp_time - s->pb_time || s->pp_time<=0) {
273 ✗ av_log(s->avctx, AV_LOG_DEBUG,
274 "messed up order, possible from seeking? skipping current B-frame\n");
275 #define ERROR_SKIP_FRAME -123
276 ✗ return ERROR_SKIP_FRAME;
277 }
278 181 ff_mpeg4_init_direct_mv(s);
279 }
280
281 742 s->no_rounding = get_bits1(&s->gb);
282
283
3/4
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 150 times.
 742 if (RV_GET_MINOR_VER(rv->sub_id) <= 1 && s->pict_type == AV_PICTURE_TYPE_B)
284 // binary decoder reads 3+2 bits here but they don't seem to be used
285 ✗ skip_bits(&s->gb, 5);
286
287 742 s->f_code = 1;
288 742 s->h263_aic = s->pict_type == AV_PICTURE_TYPE_I;
289 742 s->modified_quant = 1;
290
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
 742 if (!s->avctx->lowres)
291 150 s->loop_filter = 1;
292
293
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (s->avctx->debug & FF_DEBUG_PICT_INFO) {
294 ✗ av_log(s->avctx, AV_LOG_INFO,
295 "num:%5d x:%2d y:%2d type:%d qscale:%2d rnd:%d\n",
296 seq, s->mb_x, s->mb_y, s->pict_type, s->qscale,
297 s->no_rounding);
298 }
299
300
3/4
✓ Branch 0 taken 181 times.
✓ Branch 1 taken 561 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 181 times.
 742 av_assert0(s->pict_type != AV_PICTURE_TYPE_B || !s->low_delay);
301
302 742 return s->mb_width * s->mb_height - mb_pos;
303 }
304
305 26 static av_cold void rv10_build_vlc(VLC *vlc, const uint16_t len_count[15],
306 const uint8_t sym_rl[][2], int sym_rl_elems)
307 {
308 uint16_t syms[MAX_VLC_ENTRIES];
309 uint8_t lens[MAX_VLC_ENTRIES];
310 26 unsigned nb_syms = 0, nb_lens = 0;
311
312
2/2
✓ Branch 0 taken 468 times.
✓ Branch 1 taken 26 times.
 494 for (unsigned i = 0; i < sym_rl_elems; i++) {
313 468 unsigned cur_sym = sym_rl[i][0];
314
2/2
✓ Branch 0 taken 19942 times.
✓ Branch 1 taken 468 times.
 20410 for (unsigned tmp = nb_syms + sym_rl[i][1]; nb_syms <= tmp; nb_syms++)
315 19942 syms[nb_syms] = 0xFF & cur_sym--;
316 }
317
318
2/2
✓ Branch 0 taken 390 times.
✓ Branch 1 taken 26 times.
 416 for (unsigned i = 0; i < 15; i++)
319
2/2
✓ Branch 0 taken 19942 times.
✓ Branch 1 taken 390 times.
 20332 for (unsigned tmp = nb_lens + len_count[i]; nb_lens < tmp; nb_lens++)
320 19942 lens[nb_lens] = i + 2;
321 av_assert1(nb_lens == nb_syms);
322 26 ff_vlc_init_from_lengths(vlc, DC_VLC_BITS, nb_lens, lens, 1,
323 syms, 2, 2, 0, VLC_INIT_STATIC_OVERLONG, NULL);
324 26 }
325
326 13 static av_cold void rv10_init_static(void)
327 {
328 static VLCElem table[1472 + 992];
329
330 13 rv_dc_lum.table = table;
331 13 rv_dc_lum.table_allocated = 1472;
332 13 rv10_build_vlc(&rv_dc_lum, rv_lum_len_count,
333 rv_sym_run_len, FF_ARRAY_ELEMS(rv_sym_run_len));
334
2/2
✓ Branch 0 taken 52 times.
✓ Branch 1 taken 13 times.
 65 for (int i = 0; i < 1 << (DC_VLC_BITS - 7 /* Length of skip prefix */); i++) {
335 /* All codes beginning with 0x7F have the same length and value.
336 * Modifying the table directly saves us the useless subtables. */
337 52 rv_dc_lum.table[(0x7F << (DC_VLC_BITS - 7)) + i].sym = 255;
338 52 rv_dc_lum.table[(0x7F << (DC_VLC_BITS - 7)) + i].len = 18;
339 }
340 13 rv_dc_chrom.table = &table[1472];
341 13 rv_dc_chrom.table_allocated = 992;
342 13 rv10_build_vlc(&rv_dc_chrom, rv_chrom_len_count,
343 rv_sym_run_len, FF_ARRAY_ELEMS(rv_sym_run_len) - 2);
344
2/2
✓ Branch 0 taken 13 times.
✓ Branch 1 taken 13 times.
 26 for (int i = 0; i < 1 << (DC_VLC_BITS - 9 /* Length of skip prefix */); i++) {
345 /* Same as above. */
346 13 rv_dc_chrom.table[(0x1FE << (DC_VLC_BITS - 9)) + i].sym = 255;
347 13 rv_dc_chrom.table[(0x1FE << (DC_VLC_BITS - 9)) + i].len = 18;
348 }
349 13 ff_h263_decode_init_vlc();
350 13 }
351
352 20 static av_cold int rv10_decode_init(AVCodecContext *avctx)
353 {
354 static AVOnce init_static_once = AV_ONCE_INIT;
355 20 RVDecContext *rv = avctx->priv_data;
356 20 MpegEncContext *s = &rv->m;
357 int major_ver, minor_ver, micro_ver, ret;
358
359
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if (avctx->extradata_size < 8) {
360 ✗ av_log(avctx, AV_LOG_ERROR, "Extradata is too small.\n");
361 ✗ return AVERROR_INVALIDDATA;
362 }
363
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if ((ret = av_image_check_size(avctx->coded_width,
364 20 avctx->coded_height, 0, avctx)) < 0)
365 ✗ return ret;
366
367 20 ff_mpv_decode_init(s, avctx);
368
369 20 s->out_format = FMT_H263;
370
371 20 rv->orig_width =
372 20 s->width = avctx->coded_width;
373 20 rv->orig_height =
374 20 s->height = avctx->coded_height;
375
376 20 s->h263_long_vectors = ((uint8_t *) avctx->extradata)[3] & 1;
377 20 rv->sub_id = AV_RB32((uint8_t *) avctx->extradata + 4);
378
379 20 major_ver = RV_GET_MAJOR_VER(rv->sub_id);
380 20 minor_ver = RV_GET_MINOR_VER(rv->sub_id);
381 20 micro_ver = RV_GET_MICRO_VER(rv->sub_id);
382
383 20 s->low_delay = 1;
384
2/3
✓ Branch 0 taken 9 times.
✓ Branch 1 taken 11 times.
✗ Branch 2 not taken.
 20 switch (major_ver) {
385 9 case 1:
386
2/2
✓ Branch 0 taken 1 times.
✓ Branch 1 taken 8 times.
 9 s->rv10_version = micro_ver ? 3 : 1;
387 9 s->obmc = micro_ver == 2;
388 9 break;
389 11 case 2:
390
2/2
✓ Branch 0 taken 3 times.
✓ Branch 1 taken 8 times.
 11 if (minor_ver >= 2) {
391 3 s->low_delay = 0;
392 3 s->avctx->has_b_frames = 1;
393 }
394 11 break;
395 ✗ default:
396 ✗ av_log(s->avctx, AV_LOG_ERROR, "unknown header %X\n", rv->sub_id);
397 ✗ avpriv_request_sample(avctx, "RV1/2 version");
398 ✗ return AVERROR_PATCHWELCOME;
399 }
400
401
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if (avctx->debug & FF_DEBUG_PICT_INFO) {
402 ✗ av_log(avctx, AV_LOG_DEBUG, "ver:%X ver0:%"PRIX32"\n", rv->sub_id,
403 ✗ ((uint32_t *) avctx->extradata)[0]);
404 }
405
406 20 avctx->pix_fmt = AV_PIX_FMT_YUV420P;
407
408
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 20 times.
 20 if ((ret = ff_mpv_common_init(s)) < 0)
409 ✗ return ret;
410
411 20 ff_h263dsp_init(&s->h263dsp);
412
413 /* init static VLCs */
414 20 ff_thread_once(&init_static_once, rv10_init_static);
415
416 20 return 0;
417 }
418
419 20 static av_cold int rv10_decode_end(AVCodecContext *avctx)
420 {
421 20 MpegEncContext *s = avctx->priv_data;
422
423 20 ff_mpv_common_end(s);
424 20 return 0;
425 }
426
427 892 static int rv10_decode_packet(AVCodecContext *avctx, const uint8_t *buf,
428 int buf_size, int buf_size2, int whole_size)
429 {
430 892 RVDecContext *rv = avctx->priv_data;
431 892 MpegEncContext *s = &rv->m;
432 int mb_count, mb_pos, left, start_mb_x, active_bits_size, ret;
433
434 892 active_bits_size = buf_size * 8;
435 892 init_get_bits(&s->gb, buf, FFMAX(buf_size, buf_size2) * 8);
436
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 742 times.
 892 if (s->codec_id == AV_CODEC_ID_RV10)
437 150 mb_count = rv10_decode_picture_header(s);
438 else
439 742 mb_count = rv20_decode_picture_header(rv, whole_size);
440
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (mb_count < 0) {
441 ✗ if (mb_count != ERROR_SKIP_FRAME)
442 ✗ av_log(s->avctx, AV_LOG_ERROR, "HEADER ERROR\n");
443 ✗ return AVERROR_INVALIDDATA;
444 }
445
446
1/2
✓ Branch 0 taken 892 times.
✗ Branch 1 not taken.
 892 if (s->mb_x >= s->mb_width ||
447
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 s->mb_y >= s->mb_height) {
448 ✗ av_log(s->avctx, AV_LOG_ERROR, "POS ERROR %d %d\n", s->mb_x, s->mb_y);
449 ✗ return AVERROR_INVALIDDATA;
450 }
451 892 mb_pos = s->mb_y * s->mb_width + s->mb_x;
452 892 left = s->mb_width * s->mb_height - mb_pos;
453
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (mb_count > left) {
454 ✗ av_log(s->avctx, AV_LOG_ERROR, "COUNT ERROR\n");
455 ✗ return AVERROR_INVALIDDATA;
456 }
457
458
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (whole_size < s->mb_width * s->mb_height / 8)
459 ✗ return AVERROR_INVALIDDATA;
460
461
4/6
✓ Branch 0 taken 445 times.
✓ Branch 1 taken 447 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 445 times.
✗ Branch 4 not taken.
✓ Branch 5 taken 447 times.
 892 if ((s->mb_x == 0 && s->mb_y == 0) || !s->current_picture_ptr) {
462 // FIXME write parser so we always have complete frames?
463
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 445 times.
 445 if (s->current_picture_ptr) {
464 ✗ ff_er_frame_end(&s->er, NULL);
465 ✗ ff_mpv_frame_end(s);
466 ✗ s->mb_x = s->mb_y = s->resync_mb_x = s->resync_mb_y = 0;
467 }
468
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 445 times.
 445 if ((ret = ff_mpv_frame_start(s, avctx)) < 0)
469 ✗ return ret;
470 445 ff_mpeg_er_frame_start(s);
471 } else {
472
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 447 times.
 447 if (s->current_picture_ptr->f->pict_type != s->pict_type) {
473 ✗ av_log(s->avctx, AV_LOG_ERROR, "Slice type mismatch\n");
474 ✗ return AVERROR_INVALIDDATA;
475 }
476 }
477
478
479 ff_dlog(avctx, "qscale=%d\n", s->qscale);
480
481 /* default quantization values */
482
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 742 times.
 892 if (s->codec_id == AV_CODEC_ID_RV10) {
483
1/2
✓ Branch 0 taken 150 times.
✗ Branch 1 not taken.
 150 if (s->mb_y == 0)
484 150 s->first_slice_line = 1;
485 } else {
486 742 s->first_slice_line = 1;
487 742 s->resync_mb_x = s->mb_x;
488 }
489 892 start_mb_x = s->mb_x;
490 892 s->resync_mb_y = s->mb_y;
491
2/2
✓ Branch 0 taken 67 times.
✓ Branch 1 taken 825 times.
 892 if (s->h263_aic) {
492 67 s->y_dc_scale_table =
493 67 s->c_dc_scale_table = ff_aic_dc_scale_table;
494 } else {
495 825 s->y_dc_scale_table =
496 825 s->c_dc_scale_table = ff_mpeg1_dc_scale_table;
497 }
498
499
2/2
✓ Branch 0 taken 742 times.
✓ Branch 1 taken 150 times.
 892 if (s->modified_quant)
500 742 s->chroma_qscale_table = ff_h263_chroma_qscale_table;
501
502 892 ff_set_qscale(s, s->qscale);
503
504 892 s->rv10_first_dc_coded[0] = 0;
505 892 s->rv10_first_dc_coded[1] = 0;
506 892 s->rv10_first_dc_coded[2] = 0;
507 892 s->block_wrap[0] =
508 892 s->block_wrap[1] =
509 892 s->block_wrap[2] =
510 892 s->block_wrap[3] = s->b8_stride;
511 892 s->block_wrap[4] =
512 892 s->block_wrap[5] = s->mb_stride;
513 892 ff_init_block_index(s);
514
515 /* decode each macroblock */
516
1/2
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
 162300 for (s->mb_num_left = mb_count; s->mb_num_left > 0; s->mb_num_left--) {
517 int ret;
518 162300 ff_update_block_index(s, 8, s->avctx->lowres, 1);
519 ff_tlog(avctx, "**mb x=%d y=%d\n", s->mb_x, s->mb_y);
520
521 162300 s->mv_dir = MV_DIR_FORWARD;
522 162300 s->mv_type = MV_TYPE_16X16;
523 162300 ret = ff_h263_decode_mb(s, s->block);
524
525 // Repeat the slice end check from ff_h263_decode_mb with our active
526 // bitstream size
527
2/4
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✓ Branch 3 taken 162300 times.
✗ Branch 4 not taken.
 162300 if (ret != SLICE_ERROR && active_bits_size >= get_bits_count(&s->gb)) {
528 162300 int v = show_bits(&s->gb, 16);
529
530
2/2
✓ Branch 1 taken 1341 times.
✓ Branch 2 taken 160959 times.
 162300 if (get_bits_count(&s->gb) + 16 > active_bits_size)
531 1341 v >>= get_bits_count(&s->gb) + 16 - active_bits_size;
532
533
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 161408 times.
 162300 if (!v)
534 892 ret = SLICE_END;
535 }
536
2/6
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 162300 times.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
 162300 if (ret != SLICE_ERROR && active_bits_size < get_bits_count(&s->gb) &&
537 ✗ 8 * buf_size2 >= get_bits_count(&s->gb)) {
538 ✗ active_bits_size = buf_size2 * 8;
539 ✗ av_log(avctx, AV_LOG_DEBUG, "update size from %d to %d\n",
540 8 * buf_size, active_bits_size);
541 ✗ ret = SLICE_OK;
542 }
543
544
2/4
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 162300 times.
 162300 if (ret == SLICE_ERROR || active_bits_size < get_bits_count(&s->gb)) {
545 ✗ av_log(s->avctx, AV_LOG_ERROR, "ERROR at MB %d %d\n", s->mb_x,
546 s->mb_y);
547 ✗ return AVERROR_INVALIDDATA;
548 }
549
2/2
✓ Branch 0 taken 140700 times.
✓ Branch 1 taken 21600 times.
 162300 if (s->pict_type != AV_PICTURE_TYPE_B)
550 140700 ff_h263_update_motion_val(s);
551 162300 ff_mpv_reconstruct_mb(s, s->block);
552
2/2
✓ Branch 0 taken 59400 times.
✓ Branch 1 taken 102900 times.
 162300 if (s->loop_filter)
553 59400 ff_h263_loop_filter(s);
554
555
2/2
✓ Branch 0 taken 7575 times.
✓ Branch 1 taken 154725 times.
 162300 if (++s->mb_x == s->mb_width) {
556 7575 s->mb_x = 0;
557 7575 s->mb_y++;
558 7575 ff_init_block_index(s);
559 }
560
2/2
✓ Branch 0 taken 7297 times.
✓ Branch 1 taken 155003 times.
 162300 if (s->mb_x == s->resync_mb_x)
561 7297 s->first_slice_line = 0;
562
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 161408 times.
 162300 if (ret == SLICE_END)
563 892 break;
564 }
565
566 892 ff_er_add_slice(&s->er, start_mb_x, s->resync_mb_y, s->mb_x - 1, s->mb_y,
567 ER_MB_END);
568
569 892 return active_bits_size;
570 }
571
572 1667 static int get_slice_offset(AVCodecContext *avctx, const uint8_t *buf, int n)
573 {
574 1667 return AV_RL32(buf + n * 8);
575 }
576
577 449 static int rv10_decode_frame(AVCodecContext *avctx, AVFrame *pict,
578 int *got_frame, AVPacket *avpkt)
579 {
580 449 const uint8_t *buf = avpkt->data;
581 449 int buf_size = avpkt->size;
582 449 MpegEncContext *s = avctx->priv_data;
583 int i, ret;
584 int slice_count;
585 449 const uint8_t *slices_hdr = NULL;
586
587 ff_dlog(avctx, "*****frame %"PRId64" size=%d\n", avctx->frame_num, buf_size);
588
589 /* no supplementary picture */
590
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 445 times.
 449 if (buf_size == 0) {
591 4 return 0;
592 }
593
594 445 slice_count = (*buf++) + 1;
595 445 buf_size--;
596
597
2/4
✓ Branch 0 taken 445 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 445 times.
 445 if (!slice_count || buf_size <= 8 * slice_count) {
598 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid slice count: %d.\n",
599 slice_count);
600 ✗ return AVERROR_INVALIDDATA;
601 }
602
603 445 slices_hdr = buf + 4;
604 445 buf += 8 * slice_count;
605 445 buf_size -= 8 * slice_count;
606
607
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 445 times.
 1337 for (i = 0; i < slice_count; i++) {
608 892 unsigned offset = get_slice_offset(avctx, slices_hdr, i);
609 int size, size2;
610
611
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (offset >= buf_size)
612 ✗ return AVERROR_INVALIDDATA;
613
614
2/2
✓ Branch 0 taken 445 times.
✓ Branch 1 taken 447 times.
 892 if (i + 1 == slice_count)
615 445 size = buf_size - offset;
616 else
617 447 size = get_slice_offset(avctx, slices_hdr, i + 1) - offset;
618
619
2/2
✓ Branch 0 taken 564 times.
✓ Branch 1 taken 328 times.
 892 if (i + 2 >= slice_count)
620 564 size2 = buf_size - offset;
621 else
622 328 size2 = get_slice_offset(avctx, slices_hdr, i + 2) - offset;
623
624
2/4
✓ Branch 0 taken 892 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 892 times.
✗ Branch 3 not taken.
 892 if (size <= 0 || size2 <= 0 ||
625
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 offset + FFMAX(size, size2) > buf_size)
626 ✗ return AVERROR_INVALIDDATA;
627
628
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 892 times.
 892 if ((ret = rv10_decode_packet(avctx, buf + offset, size, size2, buf_size)) < 0)
629 ✗ return ret;
630
631
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (ret > 8 * size)
632 ✗ i++;
633 }
634
635
2/4
✓ Branch 0 taken 445 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 445 times.
✗ Branch 3 not taken.
 445 if (s->current_picture_ptr && s->mb_y >= s->mb_height) {
636 445 ff_er_frame_end(&s->er, NULL);
637 445 ff_mpv_frame_end(s);
638
639
4/4
✓ Branch 0 taken 373 times.
✓ Branch 1 taken 72 times.
✓ Branch 2 taken 300 times.
✓ Branch 3 taken 73 times.
 445 if (s->pict_type == AV_PICTURE_TYPE_B || s->low_delay) {
640
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 372 times.
 372 if ((ret = av_frame_ref(pict, s->current_picture_ptr->f)) < 0)
641 ✗ return ret;
642 372 ff_print_debug_info(s, s->current_picture_ptr, pict);
643 372 ff_mpv_export_qp_table(s, pict, s->current_picture_ptr, FF_MPV_QSCALE_TYPE_MPEG1);
644
2/2
✓ Branch 0 taken 72 times.
✓ Branch 1 taken 1 times.
 73 } else if (s->last_picture_ptr) {
645
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 72 times.
 72 if ((ret = av_frame_ref(pict, s->last_picture_ptr->f)) < 0)
646 ✗ return ret;
647 72 ff_print_debug_info(s, s->last_picture_ptr, pict);
648 72 ff_mpv_export_qp_table(s, pict,s->last_picture_ptr, FF_MPV_QSCALE_TYPE_MPEG1);
649 }
650
651
4/4
✓ Branch 0 taken 7 times.
✓ Branch 1 taken 438 times.
✓ Branch 2 taken 6 times.
✓ Branch 3 taken 1 times.
 445 if (s->last_picture_ptr || s->low_delay) {
652 444 *got_frame = 1;
653 }
654
655 // so we can detect if frame_end was not called (find some nicer solution...)
656 445 s->current_picture_ptr = NULL;
657 }
658
659 445 return avpkt->size;
660 }
661
662 const FFCodec ff_rv10_decoder = {
663 .p.name = "rv10",
664 CODEC_LONG_NAME("RealVideo 1.0"),
665 .p.type = AVMEDIA_TYPE_VIDEO,
666 .p.id = AV_CODEC_ID_RV10,
667 .priv_data_size = sizeof(RVDecContext),
668 .init = rv10_decode_init,
669 .close = rv10_decode_end,
670 FF_CODEC_DECODE_CB(rv10_decode_frame),
671 .p.capabilities = AV_CODEC_CAP_DR1,
672 .p.max_lowres = 3,
673 };
674
675 const FFCodec ff_rv20_decoder = {
676 .p.name = "rv20",
677 CODEC_LONG_NAME("RealVideo 2.0"),
678 .p.type = AVMEDIA_TYPE_VIDEO,
679 .p.id = AV_CODEC_ID_RV20,
680 .priv_data_size = sizeof(RVDecContext),
681 .init = rv10_decode_init,
682 .close = rv10_decode_end,
683 FF_CODEC_DECODE_CB(rv10_decode_frame),
684 .p.capabilities = AV_CODEC_CAP_DR1 | AV_CODEC_CAP_DELAY,
685 .flush = ff_mpeg_flush,
686 .p.max_lowres = 3,
687 };
688