FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/rv10.c
Date: 2025-06-23 20:06:14
Exec Total Coverage
Lines: 224 322 69.6%
Functions: 8 9 88.9%
Branches: 146 233 62.7%
Line Branch Exec Source
1 /*
2 * RV10/RV20 decoder
3 * Copyright (c) 2000,2001 Fabrice Bellard
4 * Copyright (c) 2002-2004 Michael Niedermayer
5 *
6 * This file is part of FFmpeg.
7 *
8 * FFmpeg is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2.1 of the License, or (at your option) any later version.
12 *
13 * FFmpeg is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
17 *
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with FFmpeg; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
21 */
22
23 /**
24 * @file
25 * RV10/RV20 decoder
26 */
27
28 #include <inttypes.h>
29
30 #include "libavutil/imgutils.h"
31 #include "libavutil/thread.h"
32
33 #include "avcodec.h"
34 #include "codec_internal.h"
35 #include "decode.h"
36 #include "error_resilience.h"
37 #include "h263.h"
38 #include "h263data.h"
39 #include "h263dec.h"
40 #include "mpeg_er.h"
41 #include "mpegvideo.h"
42 #include "mpegvideodec.h"
43 #include "mpeg4video.h"
44 #include "mpegvideodata.h"
45 #include "rv10dec.h"
46
47 #define RV_GET_MAJOR_VER(x) ((x) >> 28)
48 #define RV_GET_MINOR_VER(x) (((x) >> 20) & 0xFF)
49 #define RV_GET_MICRO_VER(x) (((x) >> 12) & 0xFF)
50
51 #define MAX_VLC_ENTRIES 1023 // Note: Does not include the skip entries.
52 #define DC_VLC_BITS 9
53
54 typedef struct RVDecContext {
55 MpegEncContext m;
56 int sub_id;
57 int orig_width, orig_height;
58 } RVDecContext;
59
60 /* (run, length) encoded value for the symbols table. The actual symbols
61 * are run..run - length (mod 256).
62 * The last two entries in the following table apply to luma only.
63 * The skip values are not included in this list. */
64 static const uint8_t rv_sym_run_len[][2] = {
65 { 0, 0 }, { 1, 0 }, { 255, 0 }, { 3, 1 }, { 254, 1 },
66 { 7, 3 }, { 252, 3 }, { 15, 7 }, { 248, 7 }, { 31, 15 },
67 { 240, 15 }, { 63, 31 }, { 224, 31 }, { 127, 63 }, { 192, 63 },
68 { 255, 127 }, { 128, 127 }, { 127, 255 }, { 128, 255 },
69 };
70
71 /* entry[i] of the following tables gives
72 * the number of VLC codes of length i + 2. */
73 static const uint16_t rv_lum_len_count[15] = {
74 1, 0, 2, 4, 8, 16, 32, 0, 64, 0, 128, 0, 256, 0, 512,
75 };
76
77 static const uint16_t rv_chrom_len_count[15] = {
78 1, 2, 4, 0, 8, 0, 16, 0, 32, 0, 64, 0, 128, 0, 256,
79 };
80
81 static VLCElem rv_dc_lum[1472], rv_dc_chrom[992];
82
83 ✗ int ff_rv_decode_dc(MpegEncContext *s, int n)
84 {
85 int code;
86
87 ✗ if (n < 4) {
88 ✗ code = get_vlc2(&s->gb, rv_dc_lum, DC_VLC_BITS, 2);
89 } else {
90 ✗ code = get_vlc2(&s->gb, rv_dc_chrom, DC_VLC_BITS, 2);
91 ✗ if (code < 0) {
92 ✗ av_log(s->avctx, AV_LOG_ERROR, "chroma dc error\n");
93 ✗ return -1;
94 }
95 }
96 ✗ return code;
97 }
98
99 /* read RV 1.0 compatible frame header */
100 150 static int rv10_decode_picture_header(MpegEncContext *s)
101 {
102 int mb_count, pb_frame, marker, mb_xy;
103
104 150 marker = get_bits1(&s->gb);
105
106
2/2
✓ Branch 1 taken 135 times.
✓ Branch 2 taken 15 times.
 150 if (get_bits1(&s->gb))
107 135 s->pict_type = AV_PICTURE_TYPE_P;
108 else
109 15 s->pict_type = AV_PICTURE_TYPE_I;
110
111
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
 150 if (!marker)
112 ✗ av_log(s->avctx, AV_LOG_ERROR, "marker missing\n");
113
114 150 pb_frame = get_bits1(&s->gb);
115
116 ff_dlog(s->avctx, "pict_type=%d pb_frame=%d\n", s->pict_type, pb_frame);
117
118
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
 150 if (pb_frame) {
119 ✗ avpriv_request_sample(s->avctx, "PB-frame");
120 ✗ return AVERROR_PATCHWELCOME;
121 }
122
123 150 s->qscale = get_bits(&s->gb, 5);
124
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 150 times.
 150 if (s->qscale == 0) {
125 ✗ av_log(s->avctx, AV_LOG_ERROR, "Invalid qscale value: 0\n");
126 ✗ return AVERROR_INVALIDDATA;
127 }
128
129
2/2
✓ Branch 0 taken 15 times.
✓ Branch 1 taken 135 times.
 150 if (s->pict_type == AV_PICTURE_TYPE_I) {
130
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 15 times.
 15 if (s->rv10_version == 3) {
131 /* specific MPEG like DC coding not used */
132 ✗ s->last_dc[0] = get_bits(&s->gb, 8);
133 ✗ s->last_dc[1] = get_bits(&s->gb, 8);
134 ✗ s->last_dc[2] = get_bits(&s->gb, 8);
135 ff_dlog(s->avctx, "DC:%d %d %d\n", s->last_dc[0],
136 s->last_dc[1], s->last_dc[2]);
137 }
138 }
139 /* if multiple packets per frame are sent, the position at which
140 * to display the macroblocks is coded here */
141
142 150 mb_xy = s->mb_x + s->mb_y * s->mb_width;
143
1/6
✗ Branch 1 not taken.
✓ Branch 2 taken 150 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
 150 if (show_bits(&s->gb, 12) == 0 || (mb_xy && mb_xy < s->mb_num)) {
144 150 s->mb_x = get_bits(&s->gb, 6); /* mb_x */
145 150 s->mb_y = get_bits(&s->gb, 6); /* mb_y */
146 150 mb_count = get_bits(&s->gb, 12);
147 } else {
148 ✗ s->mb_x = 0;
149 ✗ s->mb_y = 0;
150 ✗ mb_count = s->mb_width * s->mb_height;
151 }
152 150 skip_bits(&s->gb, 3); /* ignored */
153
154 150 return mb_count;
155 }
156
157 742 static int rv20_decode_picture_header(RVDecContext *rv, int whole_size)
158 {
159 static const enum AVPictureType pict_types[] =
160 { AV_PICTURE_TYPE_I, AV_PICTURE_TYPE_I /* hmm ... */,
161 AV_PICTURE_TYPE_P, AV_PICTURE_TYPE_B };
162 742 MpegEncContext *s = &rv->m;
163 int seq, mb_pos, ret;
164 int rpr_max;
165
166 742 s->pict_type = pict_types[get_bits(&s->gb, 2)];
167
168
3/4
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 150 times.
 742 if (s->low_delay && s->pict_type == AV_PICTURE_TYPE_B) {
169 ✗ av_log(s->avctx, AV_LOG_ERROR, "low delay B\n");
170 ✗ return -1;
171 }
172
3/4
✓ Branch 0 taken 11 times.
✓ Branch 1 taken 731 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 11 times.
 742 if (!s->last_pic.ptr && s->pict_type == AV_PICTURE_TYPE_B) {
173 ✗ av_log(s->avctx, AV_LOG_ERROR, "early B-frame\n");
174 ✗ return AVERROR_INVALIDDATA;
175 }
176
177
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 742 times.
 742 if (get_bits1(&s->gb)) {
178 ✗ av_log(s->avctx, AV_LOG_ERROR, "reserved bit set\n");
179 ✗ return AVERROR_INVALIDDATA;
180 }
181
182 742 s->qscale = get_bits(&s->gb, 5);
183
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (s->qscale == 0) {
184 ✗ av_log(s->avctx, AV_LOG_ERROR, "Invalid qscale value: 0\n");
185 ✗ return AVERROR_INVALIDDATA;
186 }
187
188
2/2
✓ Branch 0 taken 592 times.
✓ Branch 1 taken 150 times.
 742 if (RV_GET_MINOR_VER(rv->sub_id) >= 2)
189
3/4
✓ Branch 1 taken 413 times.
✓ Branch 2 taken 179 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 413 times.
 592 s->loop_filter = get_bits1(&s->gb) && !s->avctx->lowres;
190
191
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
 742 if (RV_GET_MINOR_VER(rv->sub_id) <= 1)
192 150 seq = get_bits(&s->gb, 8) << 7;
193 else
194 592 seq = get_bits(&s->gb, 13) << 2;
195
196 742 rpr_max = s->avctx->extradata[1] & 7;
197
2/2
✓ Branch 0 taken 592 times.
✓ Branch 1 taken 150 times.
 742 if (rpr_max) {
198 int f, new_w, new_h;
199 592 int rpr_bits = av_log2(rpr_max) + 1;
200
201 592 f = get_bits(&s->gb, rpr_bits);
202
203
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 592 times.
 592 if (f) {
204 ✗ if (s->avctx->extradata_size < 8 + 2 * f) {
205 ✗ av_log(s->avctx, AV_LOG_ERROR, "Extradata too small.\n");
206 ✗ return AVERROR_INVALIDDATA;
207 }
208
209 ✗ new_w = 4 * s->avctx->extradata[6 + 2 * f];
210 ✗ new_h = 4 * s->avctx->extradata[7 + 2 * f];
211 } else {
212 592 new_w = rv->orig_width;
213 592 new_h = rv->orig_height;
214 }
215
3/6
✓ Branch 0 taken 592 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 592 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 592 times.
 592 if (new_w != s->width || new_h != s->height || !s->context_initialized) {
216 ✗ AVRational old_aspect = s->avctx->sample_aspect_ratio;
217 ✗ av_log(s->avctx, AV_LOG_DEBUG,
218 "attempting to change resolution to %dx%d\n", new_w, new_h);
219 ✗ if (av_image_check_size(new_w, new_h, 0, s->avctx) < 0)
220 ✗ return AVERROR_INVALIDDATA;
221
222 ✗ if (whole_size < (new_w + 15)/16 * ((new_h + 15)/16) / 8)
223 ✗ return AVERROR_INVALIDDATA;
224
225 ✗ ff_mpv_common_end(s);
226
227 // attempt to keep aspect during typical resolution switches
228 ✗ if (!old_aspect.num)
229 ✗ old_aspect = (AVRational){1, 1};
230 ✗ if (2 * (int64_t)new_w * s->height == (int64_t)new_h * s->width)
231 ✗ s->avctx->sample_aspect_ratio = av_mul_q(old_aspect, (AVRational){2, 1});
232 ✗ if ((int64_t)new_w * s->height == 2 * (int64_t)new_h * s->width)
233 ✗ s->avctx->sample_aspect_ratio = av_mul_q(old_aspect, (AVRational){1, 2});
234
235 ✗ ret = ff_set_dimensions(s->avctx, new_w, new_h);
236 ✗ if (ret < 0)
237 ✗ return ret;
238
239 ✗ s->width = new_w;
240 ✗ s->height = new_h;
241 ✗ if ((ret = ff_mpv_common_init(s)) < 0)
242 ✗ return ret;
243 }
244
245
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 592 times.
 592 if (s->avctx->debug & FF_DEBUG_PICT_INFO) {
246 ✗ av_log(s->avctx, AV_LOG_DEBUG, "F %d/%d/%d\n", f, rpr_bits, rpr_max);
247 }
248 }
249
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 742 times.
 742 if (av_image_check_size(s->width, s->height, 0, s->avctx) < 0)
250 ✗ return AVERROR_INVALIDDATA;
251
252 742 mb_pos = ff_h263_decode_mba(s);
253
254 742 seq |= s->time & ~0x7FFF;
255
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (seq - s->time > 0x4000)
256 ✗ seq -= 0x8000;
257
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (seq - s->time < -0x4000)
258 ✗ seq += 0x8000;
259
260
2/2
✓ Branch 0 taken 292 times.
✓ Branch 1 taken 450 times.
 742 if (seq != s->time) {
261
2/2
✓ Branch 0 taken 220 times.
✓ Branch 1 taken 72 times.
 292 if (s->pict_type != AV_PICTURE_TYPE_B) {
262 220 s->time = seq;
263 220 s->pp_time = s->time - s->last_non_b_time;
264 220 s->last_non_b_time = s->time;
265 } else {
266 72 s->time = seq;
267 72 s->pb_time = s->pp_time - (s->last_non_b_time - s->time);
268 }
269 }
270
2/2
✓ Branch 0 taken 181 times.
✓ Branch 1 taken 561 times.
 742 if (s->pict_type == AV_PICTURE_TYPE_B) {
271
3/6
✓ Branch 0 taken 181 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 181 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 181 times.
 181 if (s->pp_time <=s->pb_time || s->pp_time <= s->pp_time - s->pb_time || s->pp_time<=0) {
272 ✗ av_log(s->avctx, AV_LOG_DEBUG,
273 "messed up order, possible from seeking? skipping current B-frame\n");
274 #define ERROR_SKIP_FRAME -123
275 ✗ return ERROR_SKIP_FRAME;
276 }
277 181 ff_mpeg4_init_direct_mv(s);
278 }
279
280 742 s->no_rounding = get_bits1(&s->gb);
281
282
3/4
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 150 times.
 742 if (RV_GET_MINOR_VER(rv->sub_id) <= 1 && s->pict_type == AV_PICTURE_TYPE_B)
283 // binary decoder reads 3+2 bits here but they don't seem to be used
284 ✗ skip_bits(&s->gb, 5);
285
286 742 s->h263_aic = s->pict_type == AV_PICTURE_TYPE_I;
287
2/2
✓ Branch 0 taken 67 times.
✓ Branch 1 taken 675 times.
 742 if (s->h263_aic) {
288 67 s->y_dc_scale_table =
289 67 s->c_dc_scale_table = ff_aic_dc_scale_table;
290 } else {
291 675 s->y_dc_scale_table =
292 675 s->c_dc_scale_table = ff_mpeg1_dc_scale_table;
293 }
294
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 592 times.
 742 if (!s->avctx->lowres)
295 150 s->loop_filter = 1;
296
297
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 742 times.
 742 if (s->avctx->debug & FF_DEBUG_PICT_INFO) {
298 ✗ av_log(s->avctx, AV_LOG_INFO,
299 "num:%5d x:%2d y:%2d type:%d qscale:%2d rnd:%d\n",
300 seq, s->mb_x, s->mb_y, s->pict_type, s->qscale,
301 s->no_rounding);
302 }
303
304
3/4
✓ Branch 0 taken 181 times.
✓ Branch 1 taken 561 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 181 times.
 742 av_assert0(s->pict_type != AV_PICTURE_TYPE_B || !s->low_delay);
305
306 742 return s->mb_width * s->mb_height - mb_pos;
307 }
308
309 26 static av_cold void rv10_build_vlc(VLCElem vlc[], int table_size,
310 const uint16_t len_count[15],
311 const uint8_t sym_rl[][2], int sym_rl_elems)
312 {
313 uint16_t syms[MAX_VLC_ENTRIES];
314 uint8_t lens[MAX_VLC_ENTRIES];
315 26 unsigned nb_syms = 0, nb_lens = 0;
316
317
2/2
✓ Branch 0 taken 468 times.
✓ Branch 1 taken 26 times.
 494 for (unsigned i = 0; i < sym_rl_elems; i++) {
318 468 unsigned cur_sym = sym_rl[i][0];
319
2/2
✓ Branch 0 taken 19942 times.
✓ Branch 1 taken 468 times.
 20410 for (unsigned tmp = nb_syms + sym_rl[i][1]; nb_syms <= tmp; nb_syms++)
320 19942 syms[nb_syms] = 0xFF & cur_sym--;
321 }
322
323
2/2
✓ Branch 0 taken 390 times.
✓ Branch 1 taken 26 times.
 416 for (unsigned i = 0; i < 15; i++)
324
2/2
✓ Branch 0 taken 19942 times.
✓ Branch 1 taken 390 times.
 20332 for (unsigned tmp = nb_lens + len_count[i]; nb_lens < tmp; nb_lens++)
325 19942 lens[nb_lens] = i + 2;
326 av_assert1(nb_lens == nb_syms);
327 26 ff_vlc_init_table_from_lengths(vlc, table_size, DC_VLC_BITS, nb_lens,
328 lens, 1, syms, 2, 2, 0, 0);
329 26 }
330
331 13 static av_cold void rv10_init_static(void)
332 {
333 13 rv10_build_vlc(rv_dc_lum, FF_ARRAY_ELEMS(rv_dc_lum), rv_lum_len_count,
334 rv_sym_run_len, FF_ARRAY_ELEMS(rv_sym_run_len));
335
2/2
✓ Branch 0 taken 52 times.
✓ Branch 1 taken 13 times.
 65 for (int i = 0; i < 1 << (DC_VLC_BITS - 7 /* Length of skip prefix */); i++) {
336 /* All codes beginning with 0x7F have the same length and value.
337 * Modifying the table directly saves us the useless subtables. */
338 52 rv_dc_lum[(0x7F << (DC_VLC_BITS - 7)) + i].sym = 255;
339 52 rv_dc_lum[(0x7F << (DC_VLC_BITS - 7)) + i].len = 18;
340 }
341 13 rv10_build_vlc(rv_dc_chrom, FF_ARRAY_ELEMS(rv_dc_chrom), rv_chrom_len_count,
342 rv_sym_run_len, FF_ARRAY_ELEMS(rv_sym_run_len) - 2);
343
2/2
✓ Branch 0 taken 13 times.
✓ Branch 1 taken 13 times.
 26 for (int i = 0; i < 1 << (DC_VLC_BITS - 9 /* Length of skip prefix */); i++) {
344 /* Same as above. */
345 13 rv_dc_chrom[(0x1FE << (DC_VLC_BITS - 9)) + i].sym = 255;
346 13 rv_dc_chrom[(0x1FE << (DC_VLC_BITS - 9)) + i].len = 18;
347 }
348 13 }
349
350 20 static av_cold int rv10_decode_init(AVCodecContext *avctx)
351 {
352 static AVOnce init_static_once = AV_ONCE_INIT;
353 20 RVDecContext *rv = avctx->priv_data;
354 20 MpegEncContext *s = &rv->m;
355 int major_ver, minor_ver, micro_ver, ret;
356
357
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if (avctx->extradata_size < 8) {
358 ✗ av_log(avctx, AV_LOG_ERROR, "Extradata is too small.\n");
359 ✗ return AVERROR_INVALIDDATA;
360 }
361
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if ((ret = av_image_check_size(avctx->coded_width,
362 20 avctx->coded_height, 0, avctx)) < 0)
363 ✗ return ret;
364
365 20 ret = ff_h263_decode_init(avctx);
366
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if (ret < 0)
367 ✗ return ret;
368
369 20 rv->orig_width = avctx->coded_width;
370 20 rv->orig_height = avctx->coded_height;
371
372 20 s->h263_long_vectors = avctx->extradata[3] & 1;
373 20 rv->sub_id = AV_RB32A(avctx->extradata + 4);
374
2/2
✓ Branch 0 taken 11 times.
✓ Branch 1 taken 9 times.
 20 if (avctx->codec_id == AV_CODEC_ID_RV20) {
375 11 s->modified_quant = 1;
376 11 s->chroma_qscale_table = ff_h263_chroma_qscale_table;
377 }
378
379 20 major_ver = RV_GET_MAJOR_VER(rv->sub_id);
380 20 minor_ver = RV_GET_MINOR_VER(rv->sub_id);
381 20 micro_ver = RV_GET_MICRO_VER(rv->sub_id);
382
383
2/3
✓ Branch 0 taken 9 times.
✓ Branch 1 taken 11 times.
✗ Branch 2 not taken.
 20 switch (major_ver) {
384 9 case 1:
385
2/2
✓ Branch 0 taken 1 times.
✓ Branch 1 taken 8 times.
 9 s->rv10_version = micro_ver ? 3 : 1;
386 9 s->obmc = micro_ver == 2;
387 9 break;
388 11 case 2:
389
2/2
✓ Branch 0 taken 3 times.
✓ Branch 1 taken 8 times.
 11 if (minor_ver >= 2) {
390 3 s->low_delay = 0;
391 3 avctx->has_b_frames = 1;
392 }
393 11 break;
394 ✗ default:
395 ✗ av_log(avctx, AV_LOG_ERROR, "unknown header %X\n", rv->sub_id);
396 ✗ avpriv_request_sample(avctx, "RV1/2 version");
397 ✗ return AVERROR_PATCHWELCOME;
398 }
399
400
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 20 times.
 20 if (avctx->debug & FF_DEBUG_PICT_INFO) {
401 ✗ av_log(avctx, AV_LOG_DEBUG, "ver:%X ver0:%"PRIX32"\n", rv->sub_id,
402 ✗ AV_RL32A(avctx->extradata));
403 }
404
405 /* init static VLCs */
406 20 ff_thread_once(&init_static_once, rv10_init_static);
407
408 20 return 0;
409 }
410
411 892 static int rv10_decode_packet(AVCodecContext *avctx, const uint8_t *buf,
412 int buf_size, int buf_size2, int whole_size)
413 {
414 892 RVDecContext *rv = avctx->priv_data;
415 892 MpegEncContext *s = &rv->m;
416 int mb_count, mb_pos, left, start_mb_x, active_bits_size, ret;
417
418 892 active_bits_size = buf_size * 8;
419 892 init_get_bits(&s->gb, buf, FFMAX(buf_size, buf_size2) * 8);
420
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 742 times.
 892 if (s->codec_id == AV_CODEC_ID_RV10)
421 150 mb_count = rv10_decode_picture_header(s);
422 else
423 742 mb_count = rv20_decode_picture_header(rv, whole_size);
424
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (mb_count < 0) {
425 ✗ if (mb_count != ERROR_SKIP_FRAME)
426 ✗ av_log(s->avctx, AV_LOG_ERROR, "HEADER ERROR\n");
427 ✗ return AVERROR_INVALIDDATA;
428 }
429
430
1/2
✓ Branch 0 taken 892 times.
✗ Branch 1 not taken.
 892 if (s->mb_x >= s->mb_width ||
431
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 s->mb_y >= s->mb_height) {
432 ✗ av_log(s->avctx, AV_LOG_ERROR, "POS ERROR %d %d\n", s->mb_x, s->mb_y);
433 ✗ return AVERROR_INVALIDDATA;
434 }
435 892 mb_pos = s->mb_y * s->mb_width + s->mb_x;
436 892 left = s->mb_width * s->mb_height - mb_pos;
437
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (mb_count > left) {
438 ✗ av_log(s->avctx, AV_LOG_ERROR, "COUNT ERROR\n");
439 ✗ return AVERROR_INVALIDDATA;
440 }
441
442
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (whole_size < s->mb_width * s->mb_height / 8)
443 ✗ return AVERROR_INVALIDDATA;
444
445
4/6
✓ Branch 0 taken 445 times.
✓ Branch 1 taken 447 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 445 times.
✗ Branch 4 not taken.
✓ Branch 5 taken 447 times.
 892 if ((s->mb_x == 0 && s->mb_y == 0) || !s->cur_pic.ptr) {
446 // FIXME write parser so we always have complete frames?
447
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 445 times.
 445 if (s->cur_pic.ptr) {
448 ✗ ff_er_frame_end(&s->er, NULL);
449 ✗ ff_mpv_frame_end(s);
450 ✗ s->mb_x = s->mb_y = s->resync_mb_x = s->resync_mb_y = 0;
451 }
452
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 445 times.
 445 if ((ret = ff_mpv_frame_start(s, avctx)) < 0)
453 ✗ return ret;
454 445 ff_mpeg_er_frame_start(s);
455 } else {
456
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 447 times.
 447 if (s->cur_pic.ptr->f->pict_type != s->pict_type) {
457 ✗ av_log(s->avctx, AV_LOG_ERROR, "Slice type mismatch\n");
458 ✗ return AVERROR_INVALIDDATA;
459 }
460 }
461
462
463 ff_dlog(avctx, "qscale=%d\n", s->qscale);
464
465 /* default quantization values */
466
2/2
✓ Branch 0 taken 150 times.
✓ Branch 1 taken 742 times.
 892 if (s->codec_id == AV_CODEC_ID_RV10) {
467
1/2
✓ Branch 0 taken 150 times.
✗ Branch 1 not taken.
 150 if (s->mb_y == 0)
468 150 s->first_slice_line = 1;
469 } else {
470 742 s->first_slice_line = 1;
471 742 s->resync_mb_x = s->mb_x;
472 }
473 892 start_mb_x = s->mb_x;
474 892 s->resync_mb_y = s->mb_y;
475
476 892 ff_set_qscale(s, s->qscale);
477
478 892 s->rv10_first_dc_coded[0] = 0;
479 892 s->rv10_first_dc_coded[1] = 0;
480 892 s->rv10_first_dc_coded[2] = 0;
481 892 ff_init_block_index(s);
482
483 /* decode each macroblock */
484
1/2
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
 162300 for (s->mb_num_left = mb_count; s->mb_num_left > 0; s->mb_num_left--) {
485 int ret;
486 162300 ff_update_block_index(s, 8, s->avctx->lowres, 1);
487 ff_tlog(avctx, "**mb x=%d y=%d\n", s->mb_x, s->mb_y);
488
489 162300 s->mv_dir = MV_DIR_FORWARD;
490 162300 s->mv_type = MV_TYPE_16X16;
491 162300 ret = ff_h263_decode_mb(s, s->block);
492
493 // Repeat the slice end check from ff_h263_decode_mb with our active
494 // bitstream size
495
2/4
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✓ Branch 3 taken 162300 times.
✗ Branch 4 not taken.
 162300 if (ret != SLICE_ERROR && active_bits_size >= get_bits_count(&s->gb)) {
496 162300 int v = show_bits(&s->gb, 16);
497
498
2/2
✓ Branch 1 taken 1341 times.
✓ Branch 2 taken 160959 times.
 162300 if (get_bits_count(&s->gb) + 16 > active_bits_size)
499 1341 v >>= get_bits_count(&s->gb) + 16 - active_bits_size;
500
501
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 161408 times.
 162300 if (!v)
502 892 ret = SLICE_END;
503 }
504
2/6
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 162300 times.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
 162300 if (ret != SLICE_ERROR && active_bits_size < get_bits_count(&s->gb) &&
505 ✗ 8 * buf_size2 >= get_bits_count(&s->gb)) {
506 ✗ active_bits_size = buf_size2 * 8;
507 ✗ av_log(avctx, AV_LOG_DEBUG, "update size from %d to %d\n",
508 8 * buf_size, active_bits_size);
509 ✗ ret = SLICE_OK;
510 }
511
512
2/4
✓ Branch 0 taken 162300 times.
✗ Branch 1 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 162300 times.
 162300 if (ret == SLICE_ERROR || active_bits_size < get_bits_count(&s->gb)) {
513 ✗ av_log(s->avctx, AV_LOG_ERROR, "ERROR at MB %d %d\n", s->mb_x,
514 s->mb_y);
515 ✗ return AVERROR_INVALIDDATA;
516 }
517
2/2
✓ Branch 0 taken 140700 times.
✓ Branch 1 taken 21600 times.
 162300 if (s->pict_type != AV_PICTURE_TYPE_B)
518 140700 ff_h263_update_motion_val(s);
519 162300 ff_mpv_reconstruct_mb(s, s->block);
520
2/2
✓ Branch 0 taken 59400 times.
✓ Branch 1 taken 102900 times.
 162300 if (s->loop_filter)
521 59400 ff_h263_loop_filter(s);
522
523
2/2
✓ Branch 0 taken 7575 times.
✓ Branch 1 taken 154725 times.
 162300 if (++s->mb_x == s->mb_width) {
524 7575 s->mb_x = 0;
525 7575 s->mb_y++;
526 7575 ff_init_block_index(s);
527 }
528
2/2
✓ Branch 0 taken 7297 times.
✓ Branch 1 taken 155003 times.
 162300 if (s->mb_x == s->resync_mb_x)
529 7297 s->first_slice_line = 0;
530
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 161408 times.
 162300 if (ret == SLICE_END)
531 892 break;
532 }
533
534 892 ff_er_add_slice(&s->er, start_mb_x, s->resync_mb_y, s->mb_x - 1, s->mb_y,
535 ER_MB_END);
536
537 892 return active_bits_size;
538 }
539
540 1667 static int get_slice_offset(AVCodecContext *avctx, const uint8_t *buf, int n)
541 {
542 1667 return AV_RL32(buf + n * 8);
543 }
544
545 449 static int rv10_decode_frame(AVCodecContext *avctx, AVFrame *pict,
546 int *got_frame, AVPacket *avpkt)
547 {
548 449 const uint8_t *buf = avpkt->data;
549 449 int buf_size = avpkt->size;
550 449 MpegEncContext *s = avctx->priv_data;
551 int i, ret;
552 int slice_count;
553 449 const uint8_t *slices_hdr = NULL;
554
555 ff_dlog(avctx, "*****frame %"PRId64" size=%d\n", avctx->frame_num, buf_size);
556
557 /* no supplementary picture */
558
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 445 times.
 449 if (buf_size == 0) {
559 4 return 0;
560 }
561
562 445 slice_count = (*buf++) + 1;
563 445 buf_size--;
564
565
2/4
✓ Branch 0 taken 445 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 445 times.
 445 if (!slice_count || buf_size <= 8 * slice_count) {
566 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid slice count: %d.\n",
567 slice_count);
568 ✗ return AVERROR_INVALIDDATA;
569 }
570
571 445 slices_hdr = buf + 4;
572 445 buf += 8 * slice_count;
573 445 buf_size -= 8 * slice_count;
574
575
2/2
✓ Branch 0 taken 892 times.
✓ Branch 1 taken 445 times.
 1337 for (i = 0; i < slice_count; i++) {
576 892 unsigned offset = get_slice_offset(avctx, slices_hdr, i);
577 int size, size2;
578
579
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (offset >= buf_size)
580 ✗ return AVERROR_INVALIDDATA;
581
582
2/2
✓ Branch 0 taken 445 times.
✓ Branch 1 taken 447 times.
 892 if (i + 1 == slice_count)
583 445 size = buf_size - offset;
584 else
585 447 size = get_slice_offset(avctx, slices_hdr, i + 1) - offset;
586
587
2/2
✓ Branch 0 taken 564 times.
✓ Branch 1 taken 328 times.
 892 if (i + 2 >= slice_count)
588 564 size2 = buf_size - offset;
589 else
590 328 size2 = get_slice_offset(avctx, slices_hdr, i + 2) - offset;
591
592
2/4
✓ Branch 0 taken 892 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 892 times.
✗ Branch 3 not taken.
 892 if (size <= 0 || size2 <= 0 ||
593
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 offset + FFMAX(size, size2) > buf_size)
594 ✗ return AVERROR_INVALIDDATA;
595
596
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 892 times.
 892 if ((ret = rv10_decode_packet(avctx, buf + offset, size, size2, buf_size)) < 0)
597 ✗ return ret;
598
599
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 892 times.
 892 if (ret > 8 * size)
600 ✗ i++;
601 }
602
603
2/4
✓ Branch 0 taken 445 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 445 times.
✗ Branch 3 not taken.
 445 if (s->cur_pic.ptr && s->mb_y >= s->mb_height) {
604 445 ff_er_frame_end(&s->er, NULL);
605 445 ff_mpv_frame_end(s);
606
607
4/4
✓ Branch 0 taken 373 times.
✓ Branch 1 taken 72 times.
✓ Branch 2 taken 300 times.
✓ Branch 3 taken 73 times.
 445 if (s->pict_type == AV_PICTURE_TYPE_B || s->low_delay) {
608
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 372 times.
 372 if ((ret = av_frame_ref(pict, s->cur_pic.ptr->f)) < 0)
609 ✗ return ret;
610 372 ff_print_debug_info(s, s->cur_pic.ptr, pict);
611 372 ff_mpv_export_qp_table(s, pict, s->cur_pic.ptr, FF_MPV_QSCALE_TYPE_MPEG1);
612
2/2
✓ Branch 0 taken 72 times.
✓ Branch 1 taken 1 times.
 73 } else if (s->last_pic.ptr) {
613
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 72 times.
 72 if ((ret = av_frame_ref(pict, s->last_pic.ptr->f)) < 0)
614 ✗ return ret;
615 72 ff_print_debug_info(s, s->last_pic.ptr, pict);
616 72 ff_mpv_export_qp_table(s, pict,s->last_pic.ptr, FF_MPV_QSCALE_TYPE_MPEG1);
617 }
618
619
4/4
✓ Branch 0 taken 7 times.
✓ Branch 1 taken 438 times.
✓ Branch 2 taken 6 times.
✓ Branch 3 taken 1 times.
 445 if (s->last_pic.ptr || s->low_delay) {
620 444 *got_frame = 1;
621 }
622
623 // so we can detect if frame_end was not called (find some nicer solution...)
624 445 ff_mpv_unref_picture(&s->cur_pic);
625 }
626
627 445 return avpkt->size;
628 }
629
630 const FFCodec ff_rv10_decoder = {
631 .p.name = "rv10",
632 CODEC_LONG_NAME("RealVideo 1.0"),
633 .p.type = AVMEDIA_TYPE_VIDEO,
634 .p.id = AV_CODEC_ID_RV10,
635 .priv_data_size = sizeof(RVDecContext),
636 .init = rv10_decode_init,
637 FF_CODEC_DECODE_CB(rv10_decode_frame),
638 .close = ff_mpv_decode_close,
639 .p.capabilities = AV_CODEC_CAP_DR1,
640 .p.max_lowres = 3,
641 .caps_internal = FF_CODEC_CAP_INIT_CLEANUP,
642 };
643
644 const FFCodec ff_rv20_decoder = {
645 .p.name = "rv20",
646 CODEC_LONG_NAME("RealVideo 2.0"),
647 .p.type = AVMEDIA_TYPE_VIDEO,
648 .p.id = AV_CODEC_ID_RV20,
649 .priv_data_size = sizeof(RVDecContext),
650 .init = rv10_decode_init,
651 FF_CODEC_DECODE_CB(rv10_decode_frame),
652 .close = ff_mpv_decode_close,
653 .p.capabilities = AV_CODEC_CAP_DR1 | AV_CODEC_CAP_DELAY,
654 .flush = ff_mpeg_flush,
655 .p.max_lowres = 3,
656 .caps_internal = FF_CODEC_CAP_INIT_CLEANUP,
657 };
658