FFmpeg coverage

Line	Branch	Exec	Source
1			/*
2			* LucasArts Smush video decoder
3			* Copyright (c) 2006 Cyril Zorin
4			* Copyright (c) 2011 Konstantin Shishkov
5			*
6			* This file is part of FFmpeg.
7			*
8			* FFmpeg is free software; you can redistribute it and/or
9			* modify it under the terms of the GNU Lesser General Public
10			* License as published by the Free Software Foundation; either
11			* version 2.1 of the License, or (at your option) any later version.
12			*
13			* FFmpeg is distributed in the hope that it will be useful,
14			* but WITHOUT ANY WARRANTY; without even the implied warranty of
15			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16			* Lesser General Public License for more details.
17			*
18			* You should have received a copy of the GNU Lesser General Public
19			* License along with FFmpeg; if not, write to the Free Software
20			* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
21			*/
22
23			#include "libavutil/avassert.h"
24			#include "libavutil/mem.h"
25
26			#include "avcodec.h"
27			#include "bytestream.h"
28			#include "copy_block.h"
29			#include "codec_internal.h"
30			#include "decode.h"
31
32			#define NGLYPHS 256
33			#define GLYPH_COORD_VECT_SIZE 16
34			#define PALETTE_SIZE 256
35			#define PALETTE_DELTA 768
36
37			static const int8_t glyph4_x[GLYPH_COORD_VECT_SIZE] = {
38			0, 1, 2, 3, 3, 3, 3, 2, 1, 0, 0, 0, 1, 2, 2, 1
39			};
40
41			static const int8_t glyph4_y[GLYPH_COORD_VECT_SIZE] = {
42			0, 0, 0, 0, 1, 2, 3, 3, 3, 3, 2, 1, 1, 1, 2, 2
43			};
44
45			static const int8_t glyph8_x[GLYPH_COORD_VECT_SIZE] = {
46			0, 2, 5, 7, 7, 7, 7, 7, 7, 5, 2, 0, 0, 0, 0, 0
47			};
48
49			static const int8_t glyph8_y[GLYPH_COORD_VECT_SIZE] = {
50			0, 0, 0, 0, 1, 3, 4, 6, 7, 7, 7, 7, 6, 4, 3, 1
51			};
52
53			static const int8_t motion_vectors[256][2] = {
54			{ 0, 0 }, { -1, -43 }, { 6, -43 }, { -9, -42 }, { 13, -41 },
55			{ -16, -40 }, { 19, -39 }, { -23, -36 }, { 26, -34 }, { -2, -33 },
56			{ 4, -33 }, { -29, -32 }, { -9, -32 }, { 11, -31 }, { -16, -29 },
57			{ 32, -29 }, { 18, -28 }, { -34, -26 }, { -22, -25 }, { -1, -25 },
58			{ 3, -25 }, { -7, -24 }, { 8, -24 }, { 24, -23 }, { 36, -23 },
59			{ -12, -22 }, { 13, -21 }, { -38, -20 }, { 0, -20 }, { -27, -19 },
60			{ -4, -19 }, { 4, -19 }, { -17, -18 }, { -8, -17 }, { 8, -17 },
61			{ 18, -17 }, { 28, -17 }, { 39, -17 }, { -12, -15 }, { 12, -15 },
62			{ -21, -14 }, { -1, -14 }, { 1, -14 }, { -41, -13 }, { -5, -13 },
63			{ 5, -13 }, { 21, -13 }, { -31, -12 }, { -15, -11 }, { -8, -11 },
64			{ 8, -11 }, { 15, -11 }, { -2, -10 }, { 1, -10 }, { 31, -10 },
65			{ -23, -9 }, { -11, -9 }, { -5, -9 }, { 4, -9 }, { 11, -9 },
66			{ 42, -9 }, { 6, -8 }, { 24, -8 }, { -18, -7 }, { -7, -7 },
67			{ -3, -7 }, { -1, -7 }, { 2, -7 }, { 18, -7 }, { -43, -6 },
68			{ -13, -6 }, { -4, -6 }, { 4, -6 }, { 8, -6 }, { -33, -5 },
69			{ -9, -5 }, { -2, -5 }, { 0, -5 }, { 2, -5 }, { 5, -5 },
70			{ 13, -5 }, { -25, -4 }, { -6, -4 }, { -3, -4 }, { 3, -4 },
71			{ 9, -4 }, { -19, -3 }, { -7, -3 }, { -4, -3 }, { -2, -3 },
72			{ -1, -3 }, { 0, -3 }, { 1, -3 }, { 2, -3 }, { 4, -3 },
73			{ 6, -3 }, { 33, -3 }, { -14, -2 }, { -10, -2 }, { -5, -2 },
74			{ -3, -2 }, { -2, -2 }, { -1, -2 }, { 0, -2 }, { 1, -2 },
75			{ 2, -2 }, { 3, -2 }, { 5, -2 }, { 7, -2 }, { 14, -2 },
76			{ 19, -2 }, { 25, -2 }, { 43, -2 }, { -7, -1 }, { -3, -1 },
77			{ -2, -1 }, { -1, -1 }, { 0, -1 }, { 1, -1 }, { 2, -1 },
78			{ 3, -1 }, { 10, -1 }, { -5, 0 }, { -3, 0 }, { -2, 0 },
79			{ -1, 0 }, { 1, 0 }, { 2, 0 }, { 3, 0 }, { 5, 0 },
80			{ 7, 0 }, { -10, 1 }, { -7, 1 }, { -3, 1 }, { -2, 1 },
81			{ -1, 1 }, { 0, 1 }, { 1, 1 }, { 2, 1 }, { 3, 1 },
82			{ -43, 2 }, { -25, 2 }, { -19, 2 }, { -14, 2 }, { -5, 2 },
83			{ -3, 2 }, { -2, 2 }, { -1, 2 }, { 0, 2 }, { 1, 2 },
84			{ 2, 2 }, { 3, 2 }, { 5, 2 }, { 7, 2 }, { 10, 2 },
85			{ 14, 2 }, { -33, 3 }, { -6, 3 }, { -4, 3 }, { -2, 3 },
86			{ -1, 3 }, { 0, 3 }, { 1, 3 }, { 2, 3 }, { 4, 3 },
87			{ 19, 3 }, { -9, 4 }, { -3, 4 }, { 3, 4 }, { 7, 4 },
88			{ 25, 4 }, { -13, 5 }, { -5, 5 }, { -2, 5 }, { 0, 5 },
89			{ 2, 5 }, { 5, 5 }, { 9, 5 }, { 33, 5 }, { -8, 6 },
90			{ -4, 6 }, { 4, 6 }, { 13, 6 }, { 43, 6 }, { -18, 7 },
91			{ -2, 7 }, { 0, 7 }, { 2, 7 }, { 7, 7 }, { 18, 7 },
92			{ -24, 8 }, { -6, 8 }, { -42, 9 }, { -11, 9 }, { -4, 9 },
93			{ 5, 9 }, { 11, 9 }, { 23, 9 }, { -31, 10 }, { -1, 10 },
94			{ 2, 10 }, { -15, 11 }, { -8, 11 }, { 8, 11 }, { 15, 11 },
95			{ 31, 12 }, { -21, 13 }, { -5, 13 }, { 5, 13 }, { 41, 13 },
96			{ -1, 14 }, { 1, 14 }, { 21, 14 }, { -12, 15 }, { 12, 15 },
97			{ -39, 17 }, { -28, 17 }, { -18, 17 }, { -8, 17 }, { 8, 17 },
98			{ 17, 18 }, { -4, 19 }, { 0, 19 }, { 4, 19 }, { 27, 19 },
99			{ 38, 20 }, { -13, 21 }, { 12, 22 }, { -36, 23 }, { -24, 23 },
100			{ -8, 24 }, { 7, 24 }, { -3, 25 }, { 1, 25 }, { 22, 25 },
101			{ 34, 26 }, { -18, 28 }, { -32, 29 }, { 16, 29 }, { -11, 31 },
102			{ 9, 32 }, { 29, 32 }, { -4, 33 }, { 2, 33 }, { -26, 34 },
103			{ 23, 36 }, { -19, 39 }, { 16, 40 }, { -13, 41 }, { 9, 42 },
104			{ -6, 43 }, { 1, 43 }, { 0, 0 }, { 0, 0 }, { 0, 0 },
105			};
106
107			static const int8_t c37_mv[] = {
108			0, 0, 1, 0, 2, 0, 3, 0, 5, 0,
109			8, 0, 13, 0, 21, 0, -1, 0, -2, 0,
110			-3, 0, -5, 0, -8, 0, -13, 0, -17, 0,
111			-21, 0, 0, 1, 1, 1, 2, 1, 3, 1,
112			5, 1, 8, 1, 13, 1, 21, 1, -1, 1,
113			-2, 1, -3, 1, -5, 1, -8, 1, -13, 1,
114			-17, 1, -21, 1, 0, 2, 1, 2, 2, 2,
115			3, 2, 5, 2, 8, 2, 13, 2, 21, 2,
116			-1, 2, -2, 2, -3, 2, -5, 2, -8, 2,
117			-13, 2, -17, 2, -21, 2, 0, 3, 1, 3,
118			2, 3, 3, 3, 5, 3, 8, 3, 13, 3,
119			21, 3, -1, 3, -2, 3, -3, 3, -5, 3,
120			-8, 3, -13, 3, -17, 3, -21, 3, 0, 5,
121			1, 5, 2, 5, 3, 5, 5, 5, 8, 5,
122			13, 5, 21, 5, -1, 5, -2, 5, -3, 5,
123			-5, 5, -8, 5, -13, 5, -17, 5, -21, 5,
124			0, 8, 1, 8, 2, 8, 3, 8, 5, 8,
125			8, 8, 13, 8, 21, 8, -1, 8, -2, 8,
126			-3, 8, -5, 8, -8, 8, -13, 8, -17, 8,
127			-21, 8, 0, 13, 1, 13, 2, 13, 3, 13,
128			5, 13, 8, 13, 13, 13, 21, 13, -1, 13,
129			-2, 13, -3, 13, -5, 13, -8, 13, -13, 13,
130			-17, 13, -21, 13, 0, 21, 1, 21, 2, 21,
131			3, 21, 5, 21, 8, 21, 13, 21, 21, 21,
132			-1, 21, -2, 21, -3, 21, -5, 21, -8, 21,
133			-13, 21, -17, 21, -21, 21, 0, -1, 1, -1,
134			2, -1, 3, -1, 5, -1, 8, -1, 13, -1,
135			21, -1, -1, -1, -2, -1, -3, -1, -5, -1,
136			-8, -1, -13, -1, -17, -1, -21, -1, 0, -2,
137			1, -2, 2, -2, 3, -2, 5, -2, 8, -2,
138			13, -2, 21, -2, -1, -2, -2, -2, -3, -2,
139			-5, -2, -8, -2, -13, -2, -17, -2, -21, -2,
140			0, -3, 1, -3, 2, -3, 3, -3, 5, -3,
141			8, -3, 13, -3, 21, -3, -1, -3, -2, -3,
142			-3, -3, -5, -3, -8, -3, -13, -3, -17, -3,
143			-21, -3, 0, -5, 1, -5, 2, -5, 3, -5,
144			5, -5, 8, -5, 13, -5, 21, -5, -1, -5,
145			-2, -5, -3, -5, -5, -5, -8, -5, -13, -5,
146			-17, -5, -21, -5, 0, -8, 1, -8, 2, -8,
147			3, -8, 5, -8, 8, -8, 13, -8, 21, -8,
148			-1, -8, -2, -8, -3, -8, -5, -8, -8, -8,
149			-13, -8, -17, -8, -21, -8, 0, -13, 1, -13,
150			2, -13, 3, -13, 5, -13, 8, -13, 13, -13,
151			21, -13, -1, -13, -2, -13, -3, -13, -5, -13,
152			-8, -13, -13, -13, -17, -13, -21, -13, 0, -17,
153			1, -17, 2, -17, 3, -17, 5, -17, 8, -17,
154			13, -17, 21, -17, -1, -17, -2, -17, -3, -17,
155			-5, -17, -8, -17, -13, -17, -17, -17, -21, -17,
156			0, -21, 1, -21, 2, -21, 3, -21, 5, -21,
157			8, -21, 13, -21, 21, -21, -1, -21, -2, -21,
158			-3, -21, -5, -21, -8, -21, -13, -21, -17, -21,
159			0, 0, -8, -29, 8, -29, -18, -25, 17, -25,
160			0, -23, -6, -22, 6, -22, -13, -19, 12, -19,
161			0, -18, 25, -18, -25, -17, -5, -17, 5, -17,
162			-10, -15, 10, -15, 0, -14, -4, -13, 4, -13,
163			19, -13, -19, -12, -8, -11, -2, -11, 0, -11,
164			2, -11, 8, -11, -15, -10, -4, -10, 4, -10,
165			15, -10, -6, -9, -1, -9, 1, -9, 6, -9,
166			-29, -8, -11, -8, -8, -8, -3, -8, 3, -8,
167			8, -8, 11, -8, 29, -8, -5, -7, -2, -7,
168			0, -7, 2, -7, 5, -7, -22, -6, -9, -6,
169			-6, -6, -3, -6, -1, -6, 1, -6, 3, -6,
170			6, -6, 9, -6, 22, -6, -17, -5, -7, -5,
171			-4, -5, -2, -5, 0, -5, 2, -5, 4, -5,
172			7, -5, 17, -5, -13, -4, -10, -4, -5, -4,
173			-3, -4, -1, -4, 0, -4, 1, -4, 3, -4,
174			5, -4, 10, -4, 13, -4, -8, -3, -6, -3,
175			-4, -3, -3, -3, -2, -3, -1, -3, 0, -3,
176			1, -3, 2, -3, 4, -3, 6, -3, 8, -3,
177			-11, -2, -7, -2, -5, -2, -3, -2, -2, -2,
178			-1, -2, 0, -2, 1, -2, 2, -2, 3, -2,
179			5, -2, 7, -2, 11, -2, -9, -1, -6, -1,
180			-4, -1, -3, -1, -2, -1, -1, -1, 0, -1,
181			1, -1, 2, -1, 3, -1, 4, -1, 6, -1,
182			9, -1, -31, 0, -23, 0, -18, 0, -14, 0,
183			-11, 0, -7, 0, -5, 0, -4, 0, -3, 0,
184			-2, 0, -1, 0, 0, -31, 1, 0, 2, 0,
185			3, 0, 4, 0, 5, 0, 7, 0, 11, 0,
186			14, 0, 18, 0, 23, 0, 31, 0, -9, 1,
187			-6, 1, -4, 1, -3, 1, -2, 1, -1, 1,
188			0, 1, 1, 1, 2, 1, 3, 1, 4, 1,
189			6, 1, 9, 1, -11, 2, -7, 2, -5, 2,
190			-3, 2, -2, 2, -1, 2, 0, 2, 1, 2,
191			2, 2, 3, 2, 5, 2, 7, 2, 11, 2,
192			-8, 3, -6, 3, -4, 3, -2, 3, -1, 3,
193			0, 3, 1, 3, 2, 3, 3, 3, 4, 3,
194			6, 3, 8, 3, -13, 4, -10, 4, -5, 4,
195			-3, 4, -1, 4, 0, 4, 1, 4, 3, 4,
196			5, 4, 10, 4, 13, 4, -17, 5, -7, 5,
197			-4, 5, -2, 5, 0, 5, 2, 5, 4, 5,
198			7, 5, 17, 5, -22, 6, -9, 6, -6, 6,
199			-3, 6, -1, 6, 1, 6, 3, 6, 6, 6,
200			9, 6, 22, 6, -5, 7, -2, 7, 0, 7,
201			2, 7, 5, 7, -29, 8, -11, 8, -8, 8,
202			-3, 8, 3, 8, 8, 8, 11, 8, 29, 8,
203			-6, 9, -1, 9, 1, 9, 6, 9, -15, 10,
204			-4, 10, 4, 10, 15, 10, -8, 11, -2, 11,
205			0, 11, 2, 11, 8, 11, 19, 12, -19, 13,
206			-4, 13, 4, 13, 0, 14, -10, 15, 10, 15,
207			-5, 17, 5, 17, 25, 17, -25, 18, 0, 18,
208			-12, 19, 13, 19, -6, 22, 6, 22, 0, 23,
209			-17, 25, 18, 25, -8, 29, 8, 29, 0, 31,
210			0, 0, -6, -22, 6, -22, -13, -19, 12, -19,
211			0, -18, -5, -17, 5, -17, -10, -15, 10, -15,
212			0, -14, -4, -13, 4, -13, 19, -13, -19, -12,
213			-8, -11, -2, -11, 0, -11, 2, -11, 8, -11,
214			-15, -10, -4, -10, 4, -10, 15, -10, -6, -9,
215			-1, -9, 1, -9, 6, -9, -11, -8, -8, -8,
216			-3, -8, 0, -8, 3, -8, 8, -8, 11, -8,
217			-5, -7, -2, -7, 0, -7, 2, -7, 5, -7,
218			-22, -6, -9, -6, -6, -6, -3, -6, -1, -6,
219			1, -6, 3, -6, 6, -6, 9, -6, 22, -6,
220			-17, -5, -7, -5, -4, -5, -2, -5, -1, -5,
221			0, -5, 1, -5, 2, -5, 4, -5, 7, -5,
222			17, -5, -13, -4, -10, -4, -5, -4, -3, -4,
223			-2, -4, -1, -4, 0, -4, 1, -4, 2, -4,
224			3, -4, 5, -4, 10, -4, 13, -4, -8, -3,
225			-6, -3, -4, -3, -3, -3, -2, -3, -1, -3,
226			0, -3, 1, -3, 2, -3, 3, -3, 4, -3,
227			6, -3, 8, -3, -11, -2, -7, -2, -5, -2,
228			-4, -2, -3, -2, -2, -2, -1, -2, 0, -2,
229			1, -2, 2, -2, 3, -2, 4, -2, 5, -2,
230			7, -2, 11, -2, -9, -1, -6, -1, -5, -1,
231			-4, -1, -3, -1, -2, -1, -1, -1, 0, -1,
232			1, -1, 2, -1, 3, -1, 4, -1, 5, -1,
233			6, -1, 9, -1, -23, 0, -18, 0, -14, 0,
234			-11, 0, -7, 0, -5, 0, -4, 0, -3, 0,
235			-2, 0, -1, 0, 0, -23, 1, 0, 2, 0,
236			3, 0, 4, 0, 5, 0, 7, 0, 11, 0,
237			14, 0, 18, 0, 23, 0, -9, 1, -6, 1,
238			-5, 1, -4, 1, -3, 1, -2, 1, -1, 1,
239			0, 1, 1, 1, 2, 1, 3, 1, 4, 1,
240			5, 1, 6, 1, 9, 1, -11, 2, -7, 2,
241			-5, 2, -4, 2, -3, 2, -2, 2, -1, 2,
242			0, 2, 1, 2, 2, 2, 3, 2, 4, 2,
243			5, 2, 7, 2, 11, 2, -8, 3, -6, 3,
244			-4, 3, -3, 3, -2, 3, -1, 3, 0, 3,
245			1, 3, 2, 3, 3, 3, 4, 3, 6, 3,
246			8, 3, -13, 4, -10, 4, -5, 4, -3, 4,
247			-2, 4, -1, 4, 0, 4, 1, 4, 2, 4,
248			3, 4, 5, 4, 10, 4, 13, 4, -17, 5,
249			-7, 5, -4, 5, -2, 5, -1, 5, 0, 5,
250			1, 5, 2, 5, 4, 5, 7, 5, 17, 5,
251			-22, 6, -9, 6, -6, 6, -3, 6, -1, 6,
252			1, 6, 3, 6, 6, 6, 9, 6, 22, 6,
253			-5, 7, -2, 7, 0, 7, 2, 7, 5, 7,
254			-11, 8, -8, 8, -3, 8, 0, 8, 3, 8,
255			8, 8, 11, 8, -6, 9, -1, 9, 1, 9,
256			6, 9, -15, 10, -4, 10, 4, 10, 15, 10,
257			-8, 11, -2, 11, 0, 11, 2, 11, 8, 11,
258			19, 12, -19, 13, -4, 13, 4, 13, 0, 14,
259			-10, 15, 10, 15, -5, 17, 5, 17, 0, 18,
260			-12, 19, 13, 19, -6, 22, 6, 22, 0, 23,
261			};
262
263			typedef struct SANMVideoContext {
264			AVCodecContext *avctx;
265			GetByteContext gb;
266
267			int version, subversion, have_dimensions, first_fob;
268			uint32_t pal[PALETTE_SIZE];
269			int16_t delta_pal[PALETTE_DELTA];
270
271			ptrdiff_t pitch;
272			int width, height;
273			int aligned_width, aligned_height;
274			int prev_seq;
275
276			AVFrame *frame;
277			uint16_t *fbuf, *frm0, *frm1, *frm2;
278			uint8_t *stored_frame;
279			uint32_t fbuf_size, frm0_size, frm1_size, frm2_size;
280			uint32_t stored_frame_size;
281
282			uint8_t *rle_buf;
283			unsigned int rle_buf_size;
284
285			int rotate_code;
286
287			long npixels, buf_size;
288
289			uint16_t codebook[256];
290			uint16_t small_codebook[4];
291
292			int8_t p4x4glyphs[NGLYPHS][16];
293			int8_t p8x8glyphs[NGLYPHS][64];
294			uint8_t c47itbl[0x10000];
295			uint8_t c23lut[256];
296			uint8_t c4tbl[2][256][16];
297			uint16_t c4param;
298			} SANMVideoContext;
299
300			typedef struct SANMFrameHeader {
301			int seq_num, codec, rotate_code, rle_output_size;
302
303			uint16_t bg_color;
304			uint32_t width, height;
305			} SANMFrameHeader;
306
307			enum GlyphEdge {
308			LEFT_EDGE,
309			TOP_EDGE,
310			RIGHT_EDGE,
311			BOTTOM_EDGE,
312			NO_EDGE
313			};
314
315			enum GlyphDir {
316			DIR_LEFT,
317			DIR_UP,
318			DIR_RIGHT,
319			DIR_DOWN,
320			NO_DIR
321			};
322
323			/**
324			* Return enum GlyphEdge of box where point (x, y) lies.
325			*
326			* @param x x point coordinate
327			* @param y y point coordinate
328			* @param edge_size box width/height.
329			*/
330		1632	static enum GlyphEdge which_edge(int x, int y, int edge_size)
331			{
332		1632	const int edge_max = edge_size - 1;
333
334	2/2 ✓ Branch 0 taken 408 times. ✓ Branch 1 taken 1224 times.	1632	if (!y)
335		408	return BOTTOM_EDGE;
336	2/2 ✓ Branch 0 taken 408 times. ✓ Branch 1 taken 816 times.	1224	else if (y == edge_max)
337		408	return TOP_EDGE;
338	2/2 ✓ Branch 0 taken 306 times. ✓ Branch 1 taken 510 times.	816	else if (!x)
339		306	return LEFT_EDGE;
340	2/2 ✓ Branch 0 taken 306 times. ✓ Branch 1 taken 204 times.	510	else if (x == edge_max)
341		306	return RIGHT_EDGE;
342			else
343		204	return NO_EDGE;
344			}
345
346		1536	static enum GlyphDir which_direction(enum GlyphEdge edge0, enum GlyphEdge edge1)
347			{
348	6/6 ✓ Branch 0 taken 288 times. ✓ Branch 1 taken 1248 times. ✓ Branch 2 taken 228 times. ✓ Branch 3 taken 60 times. ✓ Branch 4 taken 288 times. ✓ Branch 5 taken 1188 times.	1536	if ((edge0 == LEFT_EDGE && edge1 == RIGHT_EDGE) ||
349	4/4 ✓ Branch 0 taken 228 times. ✓ Branch 1 taken 60 times. ✓ Branch 2 taken 384 times. ✓ Branch 3 taken 1032 times.	1476	(edge1 == LEFT_EDGE && edge0 == RIGHT_EDGE) ||
350	4/4 ✓ Branch 0 taken 96 times. ✓ Branch 1 taken 288 times. ✓ Branch 2 taken 288 times. ✓ Branch 3 taken 840 times.	1416	(edge0 == BOTTOM_EDGE && edge1 != TOP_EDGE) ||
351	2/2 ✓ Branch 0 taken 192 times. ✓ Branch 1 taken 96 times.	288	(edge1 == BOTTOM_EDGE && edge0 != TOP_EDGE))
352		600	return DIR_UP;
353	6/6 ✓ Branch 0 taken 384 times. ✓ Branch 1 taken 552 times. ✓ Branch 2 taken 96 times. ✓ Branch 3 taken 288 times. ✓ Branch 4 taken 288 times. ✓ Branch 5 taken 360 times.	936	else if ((edge0 == TOP_EDGE && edge1 != BOTTOM_EDGE) ||
354	2/2 ✓ Branch 0 taken 192 times. ✓ Branch 1 taken 96 times.	288	(edge1 == TOP_EDGE && edge0 != BOTTOM_EDGE))
355		480	return DIR_DOWN;
356	5/6 ✓ Branch 0 taken 84 times. ✓ Branch 1 taken 372 times. ✗ Branch 2 not taken. ✓ Branch 3 taken 84 times. ✓ Branch 4 taken 24 times. ✓ Branch 5 taken 348 times.	456	else if ((edge0 == LEFT_EDGE && edge1 != RIGHT_EDGE) ||
357	1/2 ✓ Branch 0 taken 24 times. ✗ Branch 1 not taken.	24	(edge1 == LEFT_EDGE && edge0 != RIGHT_EDGE))
358		108	return DIR_LEFT;
359	5/6 ✓ Branch 0 taken 96 times. ✓ Branch 1 taken 252 times. ✗ Branch 2 not taken. ✓ Branch 3 taken 96 times. ✓ Branch 4 taken 96 times. ✓ Branch 5 taken 156 times.	348	else if ((edge0 == TOP_EDGE && edge1 == BOTTOM_EDGE) ||
360	3/4 ✗ Branch 0 not taken. ✓ Branch 1 taken 96 times. ✓ Branch 2 taken 84 times. ✓ Branch 3 taken 72 times.	252	(edge1 == TOP_EDGE && edge0 == BOTTOM_EDGE) ||
361	3/4 ✗ Branch 0 not taken. ✓ Branch 1 taken 84 times. ✓ Branch 2 taken 24 times. ✓ Branch 3 taken 48 times.	156	(edge0 == RIGHT_EDGE && edge1 != LEFT_EDGE) ||
362	1/2 ✓ Branch 0 taken 24 times. ✗ Branch 1 not taken.	24	(edge1 == RIGHT_EDGE && edge0 != LEFT_EDGE))
363		300	return DIR_RIGHT;
364
365		48	return NO_DIR;
366			}
367
368			/* Interpolate two points. */
369		6600	static void interp_point(int8_t *points, int x0, int y0, int x1, int y1,
370			int pos, int npoints)
371			{
372	2/2 ✓ Branch 0 taken 6504 times. ✓ Branch 1 taken 96 times.	6600	if (npoints) {
373		6504	points[0] = (x0 * pos + x1 * (npoints - pos) + (npoints >> 1)) / npoints;
374		6504	points[1] = (y0 * pos + y1 * (npoints - pos) + (npoints >> 1)) / npoints;
375			} else {
376		96	points[0] = x0;
377		96	points[1] = y0;
378			}
379		6600	}
380
381			/**
382			* Construct glyphs by iterating through vector coordinates.
383			*
384			* @param pglyphs pointer to table where glyphs are stored
385			* @param xvec pointer to x component of vector coordinates
386			* @param yvec pointer to y component of vector coordinates
387			* @param side_length glyph width/height.
388			*/
389		6	static void make_glyphs(int8_t *pglyphs, const int8_t *xvec, const int8_t *yvec,
390			const int side_length)
391			{
392		6	const int glyph_size = side_length * side_length;
393		6	int8_t *pglyph = pglyphs;
394
395			int i, j;
396	2/2 ✓ Branch 0 taken 96 times. ✓ Branch 1 taken 6 times.	102	for (i = 0; i < GLYPH_COORD_VECT_SIZE; i++) {
397		96	int x0 = xvec[i];
398		96	int y0 = yvec[i];
399		96	enum GlyphEdge edge0 = which_edge(x0, y0, side_length);
400
401	2/2 ✓ Branch 0 taken 1536 times. ✓ Branch 1 taken 96 times.	1632	for (j = 0; j < GLYPH_COORD_VECT_SIZE; j++, pglyph += glyph_size) {
402		1536	int x1 = xvec[j];
403		1536	int y1 = yvec[j];
404		1536	enum GlyphEdge edge1 = which_edge(x1, y1, side_length);
405		1536	enum GlyphDir dir = which_direction(edge0, edge1);
406		1536	int npoints = FFMAX(FFABS(x1 - x0), FFABS(y1 - y0));
407			int ipoint;
408
409	2/2 ✓ Branch 0 taken 6600 times. ✓ Branch 1 taken 1536 times.	8136	for (ipoint = 0; ipoint <= npoints; ipoint++) {
410			int8_t point[2];
411			int irow, icol;
412
413		6600	interp_point(point, x0, y0, x1, y1, ipoint, npoints);
414
415	5/5 ✓ Branch 0 taken 2832 times. ✓ Branch 1 taken 1968 times. ✓ Branch 2 taken 282 times. ✓ Branch 3 taken 1434 times. ✓ Branch 4 taken 84 times.	6600	switch (dir) {
416		2832	case DIR_UP:
417	2/2 ✓ Branch 0 taken 8232 times. ✓ Branch 1 taken 2832 times.	11064	for (irow = point[1]; irow >= 0; irow--)
418		8232	pglyph[point[0] + irow * side_length] = 1;
419		2832	break;
420
421		1968	case DIR_DOWN:
422	2/2 ✓ Branch 0 taken 4500 times. ✓ Branch 1 taken 1968 times.	6468	for (irow = point[1]; irow < side_length; irow++)
423		4500	pglyph[point[0] + irow * side_length] = 1;
424		1968	break;
425
426		282	case DIR_LEFT:
427	2/2 ✓ Branch 0 taken 378 times. ✓ Branch 1 taken 282 times.	660	for (icol = point[0]; icol >= 0; icol--)
428		378	pglyph[icol + point[1] * side_length] = 1;
429		282	break;
430
431		1434	case DIR_RIGHT:
432	2/2 ✓ Branch 0 taken 4794 times. ✓ Branch 1 taken 1434 times.	6228	for (icol = point[0]; icol < side_length; icol++)
433		4794	pglyph[icol + point[1] * side_length] = 1;
434		1434	break;
435			}
436			}
437			}
438			}
439		6	}
440
441		6	static void init_sizes(SANMVideoContext *ctx, int width, int height)
442			{
443		6	ctx->width = width;
444		6	ctx->height = height;
445		6	ctx->npixels = width * height;
446
447		6	ctx->aligned_width = FFALIGN(width, 8);
448		6	ctx->aligned_height = FFALIGN(height, 8);
449
450		6	ctx->buf_size = ctx->aligned_width * ctx->aligned_height * sizeof(ctx->frm0[0]);
451		6	ctx->pitch = width;
452		6	}
453
454		3	static void destroy_buffers(SANMVideoContext *ctx)
455			{
456		3	av_freep(&ctx->fbuf);
457		3	av_freep(&ctx->frm0);
458		3	av_freep(&ctx->frm1);
459		3	av_freep(&ctx->frm2);
460		3	av_freep(&ctx->stored_frame);
461		3	av_freep(&ctx->rle_buf);
462		3	ctx->frm0_size =
463		3	ctx->frm1_size =
464		3	ctx->frm2_size = 0;
465		3	init_sizes(ctx, 0, 0);
466		3	}
467
468		3	static av_cold int init_buffers(SANMVideoContext *ctx)
469			{
470		3	av_fast_padded_mallocz(&ctx->fbuf, &ctx->fbuf_size, ctx->buf_size);
471		3	av_fast_padded_mallocz(&ctx->frm0, &ctx->frm0_size, ctx->buf_size);
472		3	av_fast_padded_mallocz(&ctx->frm1, &ctx->frm1_size, ctx->buf_size);
473		3	av_fast_padded_mallocz(&ctx->frm2, &ctx->frm2_size, ctx->buf_size);
474	1/2 ✗ Branch 0 not taken. ✓ Branch 1 taken 3 times.	3	if (!ctx->version)
475		✗	av_fast_padded_mallocz(&ctx->stored_frame,
476		✗	&ctx->stored_frame_size, ctx->buf_size);
477
478	3/6 ✓ Branch 0 taken 3 times. ✗ Branch 1 not taken. ✓ Branch 2 taken 3 times. ✗ Branch 3 not taken. ✓ Branch 4 taken 3 times. ✗ Branch 5 not taken.	3	if (!ctx->frm0 || !ctx->frm1 || !ctx->frm2 ||
479	2/4 ✓ Branch 0 taken 3 times. ✗ Branch 1 not taken. ✗ Branch 2 not taken. ✓ Branch 3 taken 3 times.	3	(!ctx->stored_frame && !ctx->version)) {
480		✗	destroy_buffers(ctx);
481		✗	return AVERROR(ENOMEM);
482			}
483
484		3	return 0;
485			}
486
487		✗	static void codec33_gen_tiles(SANMVideoContext *ctx, int8_t param1)
488			{
489		✗	uint8_t *dst = &(ctx->c4tbl[0][0][0]);
490			int i, j, k, l, m, n, o, p;
491
492		✗	for (i = 0; i < 8; i++) {
493		✗	for (k = 0; k < 8; k++) {
494		✗	j = i + param1;
495		✗	l = k + param1;
496		✗	p = (j + l) >> 1;
497		✗	n = (j + p) >> 1;
498		✗	m = (p + l) >> 1;
499
500		✗	*dst++ = p; *dst++ = p; *dst++ = n; *dst++ = j;
501		✗	*dst++ = p; *dst++ = p; *dst++ = n; *dst++ = j;
502		✗	*dst++ = m; *dst++ = m; *dst++ = p; *dst++ = j;
503		✗	*dst++ = l; *dst++ = l; *dst++ = m; *dst++ = p;
504			}
505			}
506
507		✗	for (i = 0; i < 8; i++) {
508		✗	for (k = 0; k < 8; k++) {
509		✗	j = i + param1;
510		✗	l = k + param1;
511		✗	n = (j + l) >> 1;
512		✗	m = (l + n) >> 1;
513
514		✗	*dst++ = j; *dst++ = j; *dst++ = j; *dst++ = j;
515		✗	*dst++ = n; *dst++ = n; *dst++ = n; *dst++ = n;
516		✗	*dst++ = m; *dst++ = m; *dst++ = m; *dst++ = m;
517		✗	*dst++ = l; *dst++ = l; *dst++ = l; *dst++ = l;
518			}
519			}
520
521		✗	for (i = 0; i < 8; i++) {
522		✗	for (k = 0; k < 8; k++) {
523		✗	j = i + param1;
524		✗	l = k + param1;
525		✗	m = (j + l) >> 1;
526		✗	n = (j + m) >> 1;
527		✗	o = (l + m) >> 1;
528
529		✗	*dst++ = j; *dst++ = j; *dst++ = n; *dst++ = m;
530		✗	*dst++ = j; *dst++ = j; *dst++ = n; *dst++ = m;
531		✗	*dst++ = n; *dst++ = n; *dst++ = m; *dst++ = o;
532		✗	*dst++ = m; *dst++ = m; *dst++ = o; *dst++ = l;
533			}
534			}
535
536		✗	for (i = 0; i < 8; i++) {
537		✗	for (k = 0; k < 8; k++) {
538		✗	j = i + param1;
539		✗	l = k + param1;
540		✗	m = (j + l) >> 1;
541		✗	n = (l + m) >> 1;
542
543		✗	*dst++ = j; *dst++ = m; *dst++ = n; *dst++ = l;
544		✗	*dst++ = j; *dst++ = m; *dst++ = n; *dst++ = l;
545		✗	*dst++ = j; *dst++ = m; *dst++ = n; *dst++ = l;
546		✗	*dst++ = j; *dst++ = m; *dst++ = n; *dst++ = l;
547			}
548			}
549		✗	}
550
551		✗	static void codec4_gen_tiles(SANMVideoContext *ctx, uint16_t param1)
552			{
553		✗	uint8_t *dst = &(ctx->c4tbl[0][0][0]);
554			int i, j, k, l, m, n, o;
555
556		✗	for (i = 1; i < 16; i += 2) {
557		✗	for (k = 0; k < 16; k++) {
558		✗	j = i + param1;
559		✗	l = k + param1;
560		✗	m = (j + l) / 2;
561		✗	n = (j + m) / 2;
562		✗	o = (l + m) / 2;
563		✗	if (j == m || l == m) {
564		✗	*dst++ = l; *dst++ = j; *dst++ = l; *dst++ = j;
565		✗	*dst++ = j; *dst++ = l; *dst++ = j; *dst++ = j;
566		✗	*dst++ = l; *dst++ = j; *dst++ = l; *dst++ = j;
567		✗	*dst++ = l; *dst++ = l; *dst++ = j; *dst++ = l;
568			} else {
569		✗	*dst++ = m; *dst++ = m; *dst++ = n; *dst++ = j;
570		✗	*dst++ = m; *dst++ = m; *dst++ = n; *dst++ = j;
571		✗	*dst++ = o; *dst++ = o; *dst++ = m; *dst++ = n;
572		✗	*dst++ = l; *dst++ = l; *dst++ = o; *dst++ = m;
573			}
574			}
575			}
576
577		✗	for (i = 0; i < 16; i += 2) {
578		✗	for (k = 0; k < 16; k++) {
579		✗	j = i + param1;
580		✗	l = k + param1;
581		✗	m = (j + l) / 2;
582		✗	n = (j + m) / 2;
583		✗	o = (l + m) / 2;
584		✗	if (m == j || m == l) {
585		✗	*dst++ = j; *dst++ = j; *dst++ = l; *dst++ = j;
586		✗	*dst++ = j; *dst++ = j; *dst++ = j; *dst++ = l;
587		✗	*dst++ = l; *dst++ = j; *dst++ = l; *dst++ = l;
588		✗	*dst++ = j; *dst++ = l; *dst++ = j; *dst++ = l;
589			} else {
590		✗	*dst++ = j; *dst++ = j; *dst++ = n; *dst++ = m;
591		✗	*dst++ = j; *dst++ = j; *dst++ = n; *dst++ = m;
592		✗	*dst++ = n; *dst++ = n; *dst++ = m; *dst++ = o;
593		✗	*dst++ = m; *dst++ = m; *dst++ = o; *dst++ = l;
594			}
595			}
596			}
597		✗	}
598
599
600		✗	static int codec4_load_tiles(SANMVideoContext *ctx, GetByteContext *gb,
601			uint16_t param2, uint8_t clr)
602			{
603		✗	uint8_t c, *dst = (uint8_t *)&(ctx->c4tbl[1][0][0]);
604		✗	uint32_t loop = param2 * 8;
605
606		✗	if ((param2 > 256) || (bytestream2_get_bytes_left(gb) < loop))
607		✗	return AVERROR_INVALIDDATA;
608
609		✗	while (loop--) {
610		✗	c = bytestream2_get_byteu(gb);
611		✗	*dst++ = (c >> 4) + clr;
612		✗	*dst++ = (c & 0xf) + clr;
613			}
614
615		✗	return 0;
616			}
617
618		9	static void rotate_bufs(SANMVideoContext *ctx, int rotate_code)
619			{
620	2/2 ✓ Branch 0 taken 1 times. ✓ Branch 1 taken 8 times.	9	if (rotate_code == 2)
621		1	FFSWAP(uint16_t*, ctx->frm1, ctx->frm2);
622		9	FFSWAP(uint16_t*, ctx->frm2, ctx->frm0);
623		9	}
624
625		3	static av_cold int decode_init(AVCodecContext *avctx)
626			{
627		3	SANMVideoContext *ctx = avctx->priv_data;
628
629		3	ctx->avctx = avctx;
630		3	ctx->version = !avctx->extradata_size;
631			// early sanity check before allocations to avoid need for deallocation code.
632	1/4 ✗ Branch 0 not taken. ✓ Branch 1 taken 3 times. ✗ Branch 2 not taken. ✗ Branch 3 not taken.	3	if (!ctx->version && avctx->extradata_size < 1026) {
633		✗	av_log(avctx, AV_LOG_ERROR, "Not enough extradata.\n");
634		✗	return AVERROR_INVALIDDATA;
635			}
636
637	1/2 ✓ Branch 0 taken 3 times. ✗ Branch 1 not taken.	3	avctx->pix_fmt = ctx->version ? AV_PIX_FMT_RGB565 : AV_PIX_FMT_PAL8;
638
639		3	init_sizes(ctx, avctx->width, avctx->height);
640	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 3 times.	3	if (init_buffers(ctx)) {
641		✗	av_log(avctx, AV_LOG_ERROR, "Error allocating buffers.\n");
642		✗	return AVERROR(ENOMEM);
643			}
644
645		3	make_glyphs(ctx->p4x4glyphs[0], glyph4_x, glyph4_y, 4);
646		3	make_glyphs(ctx->p8x8glyphs[0], glyph8_x, glyph8_y, 8);
647
648	1/2 ✗ Branch 0 not taken. ✓ Branch 1 taken 3 times.	3	if (!ctx->version) {
649			int i;
650
651		✗	ctx->subversion = AV_RL16(avctx->extradata);
652		✗	for (i = 0; i < PALETTE_SIZE; i++)
653		✗	ctx->pal[i] = 0xFFU << 24 | AV_RL32(avctx->extradata + 2 + i * 4);
654		✗	if (ctx->subversion < 2)
655		✗	ctx->pal[0] = 0xFFU << 24;
656			}
657		3	ctx->c4param = 0xffff;
658
659		3	return 0;
660			}
661
662		3	static av_cold int decode_end(AVCodecContext *avctx)
663			{
664		3	SANMVideoContext *ctx = avctx->priv_data;
665
666		3	destroy_buffers(ctx);
667
668		3	return 0;
669			}
670
671		✗	static int old_codec4(SANMVideoContext *ctx, GetByteContext *gb, int top, int left,
672			int w, int h, uint8_t param, uint16_t param2, int codec)
673			{
674		✗	const uint16_t p = ctx->pitch;
675		✗	const uint32_t maxpxo = ctx->height * p;
676		✗	uint8_t mask, bits, idx, *gs, *dst = (uint8_t *)ctx->fbuf;
677			int i, j, k, l, bit, ret;
678			int32_t pxoff, pxo2;
679
680		✗	if (ctx->c4param != param) {
681		✗	if (codec > 32)
682		✗	codec33_gen_tiles(ctx, param);
683			else
684		✗	codec4_gen_tiles(ctx, param);
685		✗	ctx->c4param = param;
686			}
687		✗	if (param2 > 0) {
688		✗	ret = codec4_load_tiles(ctx, gb, param2, param);
689		✗	if (ret)
690		✗	return ret;
691			}
692
693		✗	if (codec > 32)
694		✗	codec -= 29;
695
696		✗	for (j = 0; j < w; j += 4) {
697		✗	mask = bits = 0;
698		✗	for (i = 0; i < h; i += 4) {
699		✗	pxoff = j + left + ((top + i) * p);
700		✗	if (param2 > 0) {
701		✗	if (bits == 0) {
702		✗	if (bytestream2_get_bytes_left(gb) < 1)
703		✗	return AVERROR_INVALIDDATA;
704		✗	mask = bytestream2_get_byteu(gb);
705		✗	bits = 8;
706			}
707		✗	bit = !!(mask & 0x80);
708		✗	mask <<= 1;
709		✗	bits--;
710			} else {
711		✗	bit = 0;
712			}
713
714		✗	if (bytestream2_get_bytes_left(gb) < 1)
715		✗	return AVERROR_INVALIDDATA;
716		✗	idx = bytestream2_get_byteu(gb);
717		✗	if ((bit == 0) && (idx == 0x80) && (codec != 5))
718		✗	continue;
719
720		✗	gs = &(ctx->c4tbl[bit][idx][0]);
721		✗	pxo2 = pxoff;
722		✗	for (k = 0; k < 4; k++) {
723		✗	for (l = 0; l < 4; l++) {
724		✗	if (pxo2 >= 0 && pxo2 < maxpxo) {
725		✗	*(dst + pxo2) = *gs;
726			}
727		✗	gs++;
728		✗	pxo2++;
729			}
730		✗	pxo2 = pxo2 - 4 + p;
731			}
732			}
733			}
734		✗	return 0;
735			}
736
737		1	static int rle_decode(SANMVideoContext *ctx, GetByteContext *gb, uint8_t *dst, const int out_size)
738			{
739		1	int opcode, color, run_len, left = out_size;
740
741	2/2 ✓ Branch 0 taken 4800 times. ✓ Branch 1 taken 1 times.	4801	while (left > 0) {
742		4800	opcode = bytestream2_get_byte(gb);
743		4800	run_len = (opcode >> 1) + 1;
744	2/4 ✓ Branch 0 taken 4800 times. ✗ Branch 1 not taken. ✗ Branch 3 not taken. ✓ Branch 4 taken 4800 times.	4800	if (run_len > left || bytestream2_get_bytes_left(gb) <= 0)
745		✗	return AVERROR_INVALIDDATA;
746
747	1/2 ✓ Branch 0 taken 4800 times. ✗ Branch 1 not taken.	4800	if (opcode & 1) {
748		4800	color = bytestream2_get_byte(gb);
749		4800	memset(dst, color, run_len);
750			} else {
751		✗	if (bytestream2_get_bytes_left(gb) < run_len)
752		✗	return AVERROR_INVALIDDATA;
753		✗	bytestream2_get_bufferu(gb, dst, run_len);
754			}
755
756		4800	dst += run_len;
757		4800	left -= run_len;
758			}
759
760		1	return 0;
761			}
762
763		✗	static int old_codec23(SANMVideoContext *ctx, GetByteContext *gb, int top, int left,
764			int width, int height, uint8_t param, uint16_t param2)
765			{
766		✗	const uint32_t maxpxo = ctx->height * ctx->pitch;
767			uint8_t *dst, lut[256], c;
768			int i, j, k, pc, sk;
769			int32_t pxoff;
770
771		✗	if (ctx->subversion < 2) {
772			/* Rebel Assault 1: constant offset + 0xd0 */
773		✗	for (i = 0; i < 256; i++)
774		✗	lut[i] = (i + param + 0xd0) & 0xff;
775		✗	} else if (param2 == 256) {
776		✗	if (bytestream2_get_bytes_left(gb) < 256)
777		✗	return AVERROR_INVALIDDATA;
778		✗	bytestream2_get_bufferu(gb, ctx->c23lut, 256);
779		✗	} else if (param2 < 256) {
780		✗	for (i = 0; i < 256; i++)
781		✗	lut[i] = (i + param2) & 0xff;
782			} else {
783		✗	memcpy(lut, ctx->c23lut, 256);
784			}
785		✗	if (bytestream2_get_bytes_left(gb) < 1)
786		✗	return 0; /* some c23 frames just set up the LUT */
787
788		✗	dst = (uint8_t *)ctx->fbuf;
789		✗	for (i = 0; i < height; i++) {
790		✗	if (bytestream2_get_bytes_left(gb) < 2)
791		✗	return 0;
792		✗	pxoff = left + ((top + i) * ctx->pitch);
793		✗	k = bytestream2_get_le16u(gb);
794		✗	sk = 1;
795		✗	pc = 0;
796		✗	while (k > 0 && pc <= width) {
797		✗	if (bytestream2_get_bytes_left(gb) < 1)
798		✗	return AVERROR_INVALIDDATA;
799		✗	j = bytestream2_get_byteu(gb);
800		✗	if (sk) {
801		✗	pxoff += j;
802		✗	pc += j;
803			} else {
804		✗	while (j--) {
805		✗	if (pxoff >=0 && pxoff < maxpxo) {
806		✗	c = *(dst + pxoff);
807		✗	*(dst + pxoff) = lut[c];
808			}
809		✗	pxoff++;
810		✗	pc++;
811			}
812			}
813		✗	sk ^= 1;
814			}
815			}
816		✗	return 0;
817			}
818
819		✗	static int old_codec21(SANMVideoContext *ctx, GetByteContext *gb, int top, int left,
820			int width, int height)
821			{
822		✗	const uint32_t maxpxo = ctx->height * ctx->pitch;
823		✗	uint8_t *dst = (uint8_t *)ctx->fbuf, c;
824			int i, j, k, pc, sk, pxoff;
825
826		✗	dst = (uint8_t *)ctx->fbuf;
827		✗	for (i = 0; i < height; i++) {
828		✗	if (bytestream2_get_bytes_left(gb) < 2)
829		✗	return 0;
830		✗	pxoff = left + ((top + i) * ctx->pitch);
831		✗	k = bytestream2_get_le16u(gb);
832		✗	sk = 1;
833		✗	pc = 0;
834		✗	while (k > 0 && pc <= width) {
835		✗	if (bytestream2_get_bytes_left(gb) < 2)
836		✗	return AVERROR_INVALIDDATA;
837		✗	j = bytestream2_get_le16u(gb);
838		✗	k -= 2;
839		✗	if (sk) {
840		✗	pxoff += j;
841		✗	pc += j;
842			} else {
843		✗	if (bytestream2_get_bytes_left(gb) < (j + 1))
844		✗	return AVERROR_INVALIDDATA;
845			do {
846		✗	c = bytestream2_get_byteu(gb);
847		✗	if (pxoff >=0 && pxoff < maxpxo) {
848		✗	*(dst + pxoff) = c;
849			}
850		✗	pxoff++;
851		✗	pc++;
852		✗	j--;
853		✗	k--;
854		✗	} while (j > -1);
855			}
856		✗	sk ^= 1;
857			}
858			}
859		✗	return 0;
860			}
861
862		✗	static int old_codec1(SANMVideoContext *ctx, GetByteContext *gb, int top,
863			int left, int width, int height, int opaque)
864			{
865			int i, j, len, flag, code, val, end, pxoff;
866		✗	const int maxpxo = ctx->height * ctx->pitch;
867		✗	uint8_t *dst = (uint8_t *)ctx->fbuf;
868
869		✗	for (i = 0; i < height; i++) {
870		✗	if (bytestream2_get_bytes_left(gb) < 2)
871		✗	return AVERROR_INVALIDDATA;
872
873		✗	len = bytestream2_get_le16u(gb);
874		✗	end = bytestream2_tell(gb) + len;
875
876		✗	pxoff = left + ((top + i) * ctx->pitch);
877		✗	while (bytestream2_tell(gb) < end) {
878		✗	if (bytestream2_get_bytes_left(gb) < 2)
879		✗	return AVERROR_INVALIDDATA;
880
881		✗	code = bytestream2_get_byteu(gb);
882		✗	flag = code & 1;
883		✗	code = (code >> 1) + 1;
884		✗	if (flag) {
885		✗	val = bytestream2_get_byteu(gb);
886		✗	if (val || opaque) {
887		✗	for (j = 0; j < code; j++) {
888		✗	if (pxoff >= 0 && pxoff < maxpxo)
889		✗	*(dst + pxoff) = val;
890		✗	pxoff++;
891			}
892			} else {
893		✗	pxoff += code;
894			}
895			} else {
896		✗	if (bytestream2_get_bytes_left(gb) < code)
897		✗	return AVERROR_INVALIDDATA;
898		✗	for (j = 0; j < code; j++) {
899		✗	val = bytestream2_get_byteu(gb);
900		✗	if ((pxoff >= 0) && (pxoff < maxpxo) && (val || opaque))
901		✗	*(dst + pxoff) = val;
902		✗	pxoff++;
903			}
904			}
905			}
906			}
907		✗	ctx->rotate_code = 0;
908
909		✗	return 0;
910			}
911
912		✗	static int old_codec31(SANMVideoContext *ctx, GetByteContext *gb, int top,
913			int left, int width, int height, int p1, int opaque)
914			{
915			int i, j, len, flag, code, val, end, pxoff;
916		✗	const int maxpxo = ctx->height * ctx->pitch;
917		✗	uint8_t *dst = (uint8_t *)ctx->fbuf;
918
919		✗	for (i = 0; i < height; i++) {
920		✗	if (bytestream2_get_bytes_left(gb) < 2)
921		✗	return AVERROR_INVALIDDATA;
922
923		✗	len = bytestream2_get_le16u(gb);
924		✗	end = bytestream2_tell(gb) + len;
925
926		✗	pxoff = left + ((top + i) * ctx->pitch);
927		✗	while (bytestream2_tell(gb) < end) {
928		✗	if (bytestream2_get_bytes_left(gb) < 2)
929		✗	return AVERROR_INVALIDDATA;
930
931		✗	code = bytestream2_get_byteu(gb);
932		✗	flag = code & 1;
933		✗	code = (code >> 1) + 1;
934		✗	if (flag) {
935		✗	val = bytestream2_get_byteu(gb);
936		✗	for (j = 0; j < code; j++) {
937		✗	if ((0 != (val & 0xf)) || opaque) {
938		✗	if (pxoff >= 0 && pxoff < maxpxo)
939		✗	*(dst + pxoff) = p1 + (val & 0xf);
940			}
941		✗	pxoff++;
942		✗	if ((0 != (val >> 4)) || opaque) {
943		✗	if (pxoff >= 0 && pxoff < maxpxo)
944		✗	*(dst + pxoff) = p1 + (val >> 4);
945			}
946		✗	pxoff++;
947			}
948			} else {
949		✗	if (bytestream2_get_bytes_left(gb) < code)
950		✗	return AVERROR_INVALIDDATA;
951		✗	for (j = 0; j < code; j++) {
952		✗	val = bytestream2_get_byteu(gb);
953		✗	if ((pxoff >= 0) && (pxoff < maxpxo) && ((0 != (val & 0xf)) || opaque))
954		✗	*(dst + pxoff) = p1 + (val & 0xf);
955		✗	pxoff++;
956		✗	if ((pxoff >= 0) && (pxoff < maxpxo) && ((0 != (val >> 4)) || opaque))
957		✗	*(dst + pxoff) = p1 + (val >> 4);
958		✗	pxoff++;
959			}
960			}
961			}
962			}
963		✗	ctx->rotate_code = 0;
964
965		✗	return 0;
966			}
967
968		✗	static int old_codec2(SANMVideoContext *ctx, GetByteContext *gb, int top,
969			int left, int width, int height)
970			{
971		✗	uint8_t *dst = (uint8_t *)ctx->fbuf, col;
972		✗	int16_t xpos = left, ypos = top;
973
974		✗	while (bytestream2_get_bytes_left(gb) > 3) {
975		✗	xpos += bytestream2_get_le16u(gb);
976		✗	ypos += bytestream2_get_byteu(gb);
977		✗	col = bytestream2_get_byteu(gb);
978		✗	if (xpos >= 0 && ypos >= 0 &&
979		✗	xpos < ctx->width && ypos < ctx->height) {
980		✗	*(dst + xpos + ypos * ctx->pitch) = col;
981			}
982			}
983		✗	return 0;
984			}
985
986		✗	static int old_codec20(SANMVideoContext *ctx, int w, int h)
987			{
988		✗	uint8_t *dst = (uint8_t *)ctx->fbuf;
989
990		✗	if (bytestream2_get_bytes_left(&ctx->gb) < w * h)
991		✗	return AVERROR_INVALIDDATA;
992
993		✗	if (w == ctx->pitch) {
994		✗	bytestream2_get_bufferu(&ctx->gb, dst, w * h);
995			} else {
996		✗	for (int i = 0; i < h; i++) {
997		✗	bytestream2_get_bufferu(&ctx->gb, dst, w);
998		✗	dst += ctx->pitch;
999			}
1000			}
1001		✗	return 0;
1002			}
1003
1004		✗	static inline void codec37_mv(uint8_t *dst, const uint8_t *src,
1005			int height, int stride, int x, int y)
1006			{
1007			int pos, i, j;
1008
1009		✗	pos = x + y * stride;
1010		✗	for (j = 0; j < 4; j++) {
1011		✗	for (i = 0; i < 4; i++) {
1012		✗	if ((pos + i) < 0 || (pos + i) >= height * stride)
1013		✗	dst[i] = 0;
1014			else
1015		✗	dst[i] = src[i];
1016			}
1017		✗	dst += stride;
1018		✗	src += stride;
1019		✗	pos += stride;
1020			}
1021		✗	}
1022
1023		✗	static int old_codec37(SANMVideoContext *ctx, int width, int height)
1024			{
1025			int i, j, k, l, t, run, len, code, skip, mx, my;
1026		✗	ptrdiff_t stride = ctx->pitch;
1027			uint8_t *dst, *prev;
1028		✗	int skip_run = 0;
1029		✗	int compr = bytestream2_get_byte(&ctx->gb);
1030		✗	int mvoff = bytestream2_get_byte(&ctx->gb);
1031		✗	int seq = bytestream2_get_le16(&ctx->gb);
1032		✗	uint32_t decoded_size = bytestream2_get_le32(&ctx->gb);
1033			int flags;
1034
1035		✗	bytestream2_skip(&ctx->gb, 4);
1036		✗	flags = bytestream2_get_byte(&ctx->gb);
1037		✗	bytestream2_skip(&ctx->gb, 3);
1038
1039		✗	if (decoded_size > ctx->height * stride) {
1040		✗	decoded_size = ctx->height * stride;
1041		✗	av_log(ctx->avctx, AV_LOG_WARNING, "Decoded size is too large.\n");
1042			}
1043
1044		✗	ctx->rotate_code = 0;
1045
1046		✗	if (((seq & 1) || !(flags & 1)) && (compr && compr != 2)) {
1047		✗	FFSWAP(uint16_t*, ctx->frm0, ctx->frm2);
1048			}
1049
1050		✗	dst = ((uint8_t*)ctx->frm0);
1051		✗	prev = ((uint8_t*)ctx->frm2);
1052
1053		✗	if (mvoff > 2) {
1054		✗	av_log(ctx->avctx, AV_LOG_ERROR, "Invalid motion base value %d.\n", mvoff);
1055		✗	return AVERROR_INVALIDDATA;
1056			}
1057
1058		✗	switch (compr) {
1059		✗	case 0:
1060		✗	for (i = 0; i < height; i++) {
1061		✗	bytestream2_get_buffer(&ctx->gb, dst, width);
1062		✗	dst += stride;
1063			}
1064		✗	memset(ctx->frm2, 0, ctx->height * stride);
1065		✗	break;
1066		✗	case 1:
1067		✗	run = 0;
1068		✗	len = -1;
1069		✗	code = 0;
1070
1071		✗	for (j = 0; j < height; j += 4) {
1072		✗	for (i = 0; i < width; i += 4) {
1073		✗	if (len < 0) {
1074		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1075		✗	return AVERROR_INVALIDDATA;
1076		✗	code = bytestream2_get_byte(&ctx->gb);
1077		✗	len = code >> 1;
1078		✗	run = code & 1;
1079		✗	skip = 0;
1080			} else {
1081		✗	skip = run;
1082			}
1083
1084		✗	if (!skip) {
1085		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1086		✗	return AVERROR_INVALIDDATA;
1087		✗	code = bytestream2_get_byte(&ctx->gb);
1088		✗	if (code == 0xff) {
1089		✗	len--;
1090		✗	for (k = 0; k < 4; k++) {
1091		✗	for (l = 0; l < 4; l++) {
1092		✗	if (len < 0) {
1093		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1094		✗	return AVERROR_INVALIDDATA;
1095		✗	code = bytestream2_get_byte(&ctx->gb);
1096		✗	len = code >> 1;
1097		✗	run = code & 1;
1098		✗	if (run) {
1099		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1100		✗	return AVERROR_INVALIDDATA;
1101		✗	code = bytestream2_get_byte(&ctx->gb);
1102			}
1103			}
1104		✗	if (!run) {
1105		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1106		✗	return AVERROR_INVALIDDATA;
1107		✗	code = bytestream2_get_byte(&ctx->gb);
1108			}
1109		✗	*(dst + i + (k * stride) + l) = code;
1110		✗	len--;
1111			}
1112			}
1113		✗	continue;
1114			}
1115			}
1116			/* 4x4 block copy from prev with MV */
1117		✗	mx = c37_mv[(mvoff * 255 + code) * 2];
1118		✗	my = c37_mv[(mvoff * 255 + code) * 2 + 1];
1119		✗	codec37_mv(dst + i, prev + i + mx + my * stride,
1120			ctx->height, stride, i + mx, j + my);
1121		✗	len--;
1122			}
1123		✗	dst += stride * 4;
1124		✗	prev += stride * 4;
1125			}
1126		✗	break;
1127		✗	case 2:
1128		✗	if (rle_decode(ctx, &ctx->gb, dst, decoded_size))
1129		✗	return AVERROR_INVALIDDATA;
1130		✗	memset(ctx->frm2, 0, ctx->frm2_size);
1131		✗	break;
1132		✗	case 3:
1133			case 4:
1134		✗	for (j = 0; j < height; j += 4) {
1135		✗	for (i = 0; i < width; i += 4) {
1136			int code;
1137		✗	if (skip_run) {
1138		✗	skip_run--;
1139		✗	copy_block4(dst + i, prev + i, stride, stride, 4);
1140		✗	continue;
1141			}
1142		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1143		✗	return AVERROR_INVALIDDATA;
1144		✗	code = bytestream2_get_byteu(&ctx->gb);
1145		✗	if (code == 0xFF) {
1146		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 16)
1147		✗	return AVERROR_INVALIDDATA;
1148		✗	for (k = 0; k < 4; k++)
1149		✗	bytestream2_get_bufferu(&ctx->gb, dst + i + k * stride, 4);
1150		✗	} else if ((flags & 4) && (code == 0xFE)) {
1151		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 4)
1152		✗	return AVERROR_INVALIDDATA;
1153		✗	for (k = 0; k < 4; k++)
1154		✗	memset(dst + i + k * stride, bytestream2_get_byteu(&ctx->gb), 4);
1155		✗	} else if ((flags & 4) && (code == 0xFD)) {
1156		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1157		✗	return AVERROR_INVALIDDATA;
1158		✗	t = bytestream2_get_byteu(&ctx->gb);
1159		✗	for (k = 0; k < 4; k++)
1160		✗	memset(dst + i + k * stride, t, 4);
1161			} else {
1162		✗	mx = c37_mv[(mvoff * 255 + code) * 2];
1163		✗	my = c37_mv[(mvoff * 255 + code) * 2 + 1];
1164		✗	codec37_mv(dst + i, prev + i + mx + my * stride,
1165			ctx->height, stride, i + mx, j + my);
1166
1167		✗	if ((compr == 4) && (code == 0)) {
1168		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1169		✗	return AVERROR_INVALIDDATA;
1170		✗	skip_run = bytestream2_get_byteu(&ctx->gb);
1171			}
1172			}
1173			}
1174		✗	dst += stride * 4;
1175		✗	prev += stride * 4;
1176			}
1177		✗	break;
1178		✗	default:
1179		✗	avpriv_report_missing_feature(ctx->avctx,
1180			"Subcodec 37 compression %d", compr);
1181		✗	return AVERROR_PATCHWELCOME;
1182			}
1183
1184		✗	return 0;
1185			}
1186
1187		✗	static int process_block(SANMVideoContext *ctx, uint8_t *dst, uint8_t *prev1,
1188			uint8_t *prev2, int stride, int tbl, int size)
1189			{
1190			int code, k, t;
1191			uint8_t colors[2];
1192			int8_t *pglyph;
1193
1194		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1195		✗	return AVERROR_INVALIDDATA;
1196
1197		✗	code = bytestream2_get_byteu(&ctx->gb);
1198		✗	if (code >= 0xF8) {
1199		✗	switch (code) {
1200		✗	case 0xFF:
1201		✗	if (size == 2) {
1202		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 4)
1203		✗	return AVERROR_INVALIDDATA;
1204		✗	dst[0] = bytestream2_get_byteu(&ctx->gb);
1205		✗	dst[1] = bytestream2_get_byteu(&ctx->gb);
1206		✗	dst[0 + stride] = bytestream2_get_byteu(&ctx->gb);
1207		✗	dst[1 + stride] = bytestream2_get_byteu(&ctx->gb);
1208			} else {
1209		✗	size >>= 1;
1210		✗	if (process_block(ctx, dst, prev1, prev2, stride, tbl, size))
1211		✗	return AVERROR_INVALIDDATA;
1212		✗	if (process_block(ctx, dst + size, prev1 + size, prev2 + size,
1213			stride, tbl, size))
1214		✗	return AVERROR_INVALIDDATA;
1215		✗	dst += size * stride;
1216		✗	prev1 += size * stride;
1217		✗	prev2 += size * stride;
1218		✗	if (process_block(ctx, dst, prev1, prev2, stride, tbl, size))
1219		✗	return AVERROR_INVALIDDATA;
1220		✗	if (process_block(ctx, dst + size, prev1 + size, prev2 + size,
1221			stride, tbl, size))
1222		✗	return AVERROR_INVALIDDATA;
1223			}
1224		✗	break;
1225		✗	case 0xFE:
1226		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1227		✗	return AVERROR_INVALIDDATA;
1228
1229		✗	t = bytestream2_get_byteu(&ctx->gb);
1230		✗	for (k = 0; k < size; k++)
1231		✗	memset(dst + k * stride, t, size);
1232		✗	break;
1233		✗	case 0xFD:
1234		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 3)
1235		✗	return AVERROR_INVALIDDATA;
1236
1237		✗	code = bytestream2_get_byteu(&ctx->gb);
1238		✗	pglyph = (size == 8) ? ctx->p8x8glyphs[code] : ctx->p4x4glyphs[code];
1239		✗	bytestream2_get_bufferu(&ctx->gb, colors, 2);
1240
1241		✗	for (k = 0; k < size; k++)
1242		✗	for (t = 0; t < size; t++)
1243		✗	dst[t + k * stride] = colors[!*pglyph++];
1244		✗	break;
1245		✗	case 0xFC:
1246		✗	for (k = 0; k < size; k++)
1247		✗	memcpy(dst + k * stride, prev1 + k * stride, size);
1248		✗	break;
1249		✗	default:
1250		✗	k = bytestream2_tell(&ctx->gb);
1251		✗	bytestream2_seek(&ctx->gb, tbl + (code & 7), SEEK_SET);
1252		✗	t = bytestream2_get_byte(&ctx->gb);
1253		✗	bytestream2_seek(&ctx->gb, k, SEEK_SET);
1254		✗	for (k = 0; k < size; k++)
1255		✗	memset(dst + k * stride, t, size);
1256			}
1257			} else {
1258		✗	int mx = motion_vectors[code][0];
1259		✗	int my = motion_vectors[code][1];
1260		✗	int index = prev2 - (const uint8_t *)ctx->frm2;
1261
1262			av_assert2(index >= 0 && index < (ctx->buf_size >> 1));
1263
1264		✗	if (index < -mx - my * stride ||
1265		✗	(ctx->buf_size >> 1) - index < mx + size + (my + size - 1) * stride) {
1266		✗	av_log(ctx->avctx, AV_LOG_ERROR, "MV is invalid.\n");
1267		✗	return AVERROR_INVALIDDATA;
1268			}
1269
1270		✗	for (k = 0; k < size; k++)
1271		✗	memcpy(dst + k * stride, prev2 + mx + (my + k) * stride, size);
1272			}
1273
1274		✗	return 0;
1275			}
1276
1277		✗	static void codec47_read_interptable(SANMVideoContext *ctx)
1278			{
1279		✗	uint8_t *p1, *p2, *itbl = ctx->c47itbl;
1280			int i, j;
1281
1282		✗	for (i = 0; i < 256; i++) {
1283		✗	p1 = p2 = itbl + i;
1284		✗	for (j = 256 - i; j; j--) {
1285		✗	*p1 = *p2 = bytestream2_get_byte(&ctx->gb);
1286		✗	p1 += 1;
1287		✗	p2 += 256;
1288			}
1289		✗	itbl += 256;
1290			}
1291		✗	}
1292
1293		✗	static void codec47_comp1(SANMVideoContext *ctx, uint8_t *dst_in, int width,
1294			int height, ptrdiff_t stride)
1295			{
1296		✗	uint8_t p1, *dst, *itbl = ctx->c47itbl;
1297			uint16_t px;
1298			int i, j;
1299
1300		✗	dst = dst_in + stride;
1301		✗	for (i = 0; i < height; i += 2) {
1302		✗	p1 = bytestream2_get_byte(&ctx->gb);
1303		✗	*dst++ = p1;
1304		✗	*dst++ = p1;
1305		✗	px = p1;
1306		✗	for (j = 2; j < width; j += 2) {
1307		✗	p1 = bytestream2_get_byte(&ctx->gb);
1308		✗	px = (px << 8) | p1;
1309		✗	*dst++ = itbl[px];
1310		✗	*dst++ = p1;
1311			}
1312		✗	dst += stride;
1313			}
1314
1315		✗	memcpy(dst_in, dst_in + stride, width);
1316		✗	dst = dst_in + stride + stride;
1317		✗	for (i = 2; i < height - 1; i += 2) {
1318		✗	for (j = 0; j < width; j++) {
1319		✗	px = (*(dst - stride) << 8) | *(dst + stride);
1320		✗	*dst++ = itbl[px];
1321			}
1322		✗	dst += stride;
1323			}
1324		✗	}
1325
1326		✗	static int old_codec47(SANMVideoContext *ctx, int width, int height)
1327			{
1328			uint32_t decoded_size;
1329			int i, j;
1330		✗	ptrdiff_t stride = ctx->pitch;
1331		✗	uint8_t *dst = (uint8_t *)ctx->frm0;
1332		✗	uint8_t *prev1 = (uint8_t *)ctx->frm1;
1333		✗	uint8_t *prev2 = (uint8_t *)ctx->frm2;
1334			uint8_t auxcol[2];
1335		✗	int tbl_pos = bytestream2_tell(&ctx->gb);
1336		✗	int seq = bytestream2_get_le16(&ctx->gb);
1337		✗	int compr = bytestream2_get_byte(&ctx->gb);
1338		✗	int new_rot = bytestream2_get_byte(&ctx->gb);
1339		✗	int skip = bytestream2_get_byte(&ctx->gb);
1340
1341		✗	bytestream2_skip(&ctx->gb, 7);
1342		✗	auxcol[0] = bytestream2_get_byteu(&ctx->gb);
1343		✗	auxcol[1] = bytestream2_get_byteu(&ctx->gb);
1344		✗	decoded_size = bytestream2_get_le32(&ctx->gb);
1345		✗	bytestream2_skip(&ctx->gb, 8);
1346
1347		✗	if (decoded_size > ctx->height * stride) {
1348		✗	decoded_size = ctx->height * stride;
1349		✗	av_log(ctx->avctx, AV_LOG_WARNING, "Decoded size is too large.\n");
1350			}
1351
1352		✗	if (skip & 1) {
1353		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 0x8080)
1354		✗	return AVERROR_INVALIDDATA;
1355		✗	codec47_read_interptable(ctx);
1356			}
1357		✗	if (!seq) {
1358		✗	ctx->prev_seq = -1;
1359		✗	memset(prev1, auxcol[0], ctx->height * stride);
1360		✗	memset(prev2, auxcol[1], ctx->height * stride);
1361			}
1362
1363		✗	switch (compr) {
1364		✗	case 0:
1365		✗	if (bytestream2_get_bytes_left(&ctx->gb) < width * height)
1366		✗	return AVERROR_INVALIDDATA;
1367		✗	for (j = 0; j < height; j++) {
1368		✗	bytestream2_get_bufferu(&ctx->gb, dst, width);
1369		✗	dst += stride;
1370			}
1371		✗	break;
1372		✗	case 1:
1373		✗	if (bytestream2_get_bytes_left(&ctx->gb) < ((width + 1) >> 1) * ((height + 1) >> 1))
1374		✗	return AVERROR_INVALIDDATA;
1375		✗	codec47_comp1(ctx, dst, width, height, stride);
1376		✗	break;
1377		✗	case 2:
1378		✗	if (seq == ctx->prev_seq + 1) {
1379		✗	for (j = 0; j < height; j += 8) {
1380		✗	for (i = 0; i < width; i += 8)
1381		✗	if (process_block(ctx, dst + i, prev1 + i, prev2 + i, stride,
1382			tbl_pos + 8, 8))
1383		✗	return AVERROR_INVALIDDATA;
1384		✗	dst += stride * 8;
1385		✗	prev1 += stride * 8;
1386		✗	prev2 += stride * 8;
1387			}
1388			}
1389		✗	break;
1390		✗	case 3:
1391		✗	memcpy(ctx->frm0, ctx->frm2, ctx->pitch * ctx->height);
1392		✗	break;
1393		✗	case 4:
1394		✗	memcpy(ctx->frm0, ctx->frm1, ctx->pitch * ctx->height);
1395		✗	break;
1396		✗	case 5:
1397		✗	if (rle_decode(ctx, &ctx->gb, dst, decoded_size))
1398		✗	return AVERROR_INVALIDDATA;
1399		✗	break;
1400		✗	default:
1401		✗	avpriv_report_missing_feature(ctx->avctx,
1402			"Subcodec 47 compression %d", compr);
1403		✗	return AVERROR_PATCHWELCOME;
1404			}
1405		✗	if (seq == ctx->prev_seq + 1)
1406		✗	ctx->rotate_code = new_rot;
1407			else
1408		✗	ctx->rotate_code = 0;
1409		✗	ctx->prev_seq = seq;
1410
1411		✗	return 0;
1412			}
1413
1414			// scale 4x4 input block to an 8x8 output block
1415		✗	static void c48_4to8(uint8_t *dst, const uint8_t *src, const uint16_t w)
1416			{
1417			uint16_t p;
1418			// dst is always at least 16bit aligned
1419		✗	for (int i = 0; i < 4; i++) {
1420		✗	for (int j = 0; j < 8; j += 2) {
1421		✗	p = *src++;
1422		✗	p = (p << 8) | p;
1423		✗	*((uint16_t *)(dst + w * 0 + j)) = p;
1424		✗	*((uint16_t *)(dst + w * 1 + j)) = p;
1425			}
1426		✗	dst += w * 2;
1427			}
1428		✗	}
1429
1430		✗	static int check_mv(int x, int y, const uint16_t w, int h, int blocksize, int mvofs) {
1431		✗	if (mvofs < -x + -y*w)
1432		✗	return AVERROR_INVALIDDATA;
1433
1434		✗	if (mvofs > w-x-blocksize + w*(h-y-blocksize))
1435		✗	return AVERROR_INVALIDDATA;
1436
1437		✗	return 0;
1438			}
1439
1440		✗	static int codec48_block(SANMVideoContext *ctx, uint8_t *dst, uint8_t *db, int x, int y,
1441			const uint16_t w, int h)
1442			{
1443			uint8_t opc, sb[16];
1444			int i, j, k, l;
1445			int16_t mvofs;
1446			uint32_t ofs;
1447
1448		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1449		✗	return 1;
1450
1451		✗	opc = bytestream2_get_byteu(&ctx->gb);
1452		✗	switch (opc) {
1453		✗	case 0xFF: // 1x1 -> 8x8 block scale
1454		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
1455		✗	return 1;
1456
1457		✗	opc = bytestream2_get_byteu(&ctx->gb);
1458		✗	for (i = 0; i < 16; i++)
1459		✗	sb[i] = opc;
1460		✗	c48_4to8(dst, sb, w);
1461		✗	break;
1462		✗	case 0xFE: // 1x 8x8 copy from deltabuf, 16bit mv from source
1463		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 2)
1464		✗	return 1;
1465		✗	mvofs = bytestream2_get_le16(&ctx->gb);
1466		✗	if (check_mv(x, y, w, h, 8, mvofs))
1467		✗	return 1;
1468		✗	for (i = 0; i < 8; i++) {
1469		✗	ofs = w * i;
1470		✗	for (k = 0; k < 8; k++)
1471		✗	*(dst + ofs + k) = *(db + ofs + k + mvofs);
1472			}
1473		✗	break;
1474		✗	case 0xFD: // 2x2 -> 8x8 block scale
1475		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 4)
1476		✗	return 1;
1477		✗	sb[ 5] = bytestream2_get_byteu(&ctx->gb);
1478		✗	sb[ 7] = bytestream2_get_byteu(&ctx->gb);
1479		✗	sb[13] = bytestream2_get_byteu(&ctx->gb);
1480		✗	sb[15] = bytestream2_get_byteu(&ctx->gb);
1481
1482		✗	sb[0] = sb[1] = sb[4] = sb[5];
1483		✗	sb[2] = sb[3] = sb[6] = sb[7];
1484		✗	sb[8] = sb[9] = sb[12] = sb[13];
1485		✗	sb[10] = sb[11] = sb[14] = sb[15];
1486		✗	c48_4to8(dst, sb, w);
1487		✗	break;
1488		✗	case 0xFC: // 4x copy 4x4 block, per-block c37_mv from source
1489		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 4)
1490		✗	return 1;
1491		✗	for (i = 0; i < 8; i += 4) {
1492		✗	for (k = 0; k < 8; k += 4) {
1493		✗	opc = bytestream2_get_byteu(&ctx->gb);
1494		✗	mvofs = c37_mv[opc * 2] + (c37_mv[opc * 2 + 1] * w);
1495		✗	if (check_mv(x+k, y+i, w, h, 4, mvofs))
1496		✗	return 1;
1497		✗	for (j = 0; j < 4; j++) {
1498		✗	ofs = (w * (j + i)) + k;
1499		✗	for (l = 0; l < 4; l++)
1500		✗	*(dst + ofs + l) = *(db + ofs + l + mvofs);
1501			}
1502			}
1503			}
1504		✗	break;
1505		✗	case 0xFB: // Copy 4x 4x4 blocks, per-block mv from source
1506		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 8)
1507		✗	return 1;
1508		✗	for (i = 0; i < 8; i += 4) {
1509		✗	for (k = 0; k < 8; k += 4) {
1510		✗	mvofs = bytestream2_get_le16(&ctx->gb);
1511		✗	if (check_mv(x+k, y+i, w, h, 4, mvofs))
1512		✗	return 1;
1513		✗	for (j = 0; j < 4; j++) {
1514		✗	ofs = (w * (j + i)) + k;
1515		✗	for (l = 0; l < 4; l++)
1516		✗	*(dst + ofs + l) = *(db + ofs + l + mvofs);
1517			}
1518			}
1519			}
1520		✗	break;
1521		✗	case 0xFA: // scale 4x4 input block to 8x8 dest block
1522		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 16)
1523		✗	return 1;
1524		✗	bytestream2_get_bufferu(&ctx->gb, sb, 16);
1525		✗	c48_4to8(dst, sb, w);
1526		✗	break;
1527		✗	case 0xF9: // 16x 2x2 copy from delta, per-block c37_mv from source
1528		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 16)
1529		✗	return 1;
1530		✗	for (i = 0; i < 8; i += 2) {
1531		✗	for (j = 0; j < 8; j += 2) {
1532		✗	ofs = (w * i) + j;
1533		✗	opc = bytestream2_get_byteu(&ctx->gb);
1534		✗	mvofs = c37_mv[opc * 2] + (c37_mv[opc * 2 + 1] * w);
1535		✗	if (check_mv(x+j, y+i, w, h, 2, mvofs))
1536		✗	return 1;
1537		✗	for (l = 0; l < 2; l++) {
1538		✗	*(dst + ofs + l + 0) = *(db + ofs + l + 0 + mvofs);
1539		✗	*(dst + ofs + l + w) = *(db + ofs + l + w + mvofs);
1540			}
1541			}
1542			}
1543		✗	break;
1544		✗	case 0xF8: // 16x 2x2 blocks copy, 16bit mv from source
1545		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 32)
1546		✗	return 1;
1547		✗	for (i = 0; i < 8; i += 2) {
1548		✗	for (j = 0; j < 8; j += 2) {
1549		✗	ofs = w * i + j;
1550		✗	mvofs = bytestream2_get_le16(&ctx->gb);
1551		✗	if (check_mv(x+j, y+i, w, h, 2, mvofs))
1552		✗	return 1;
1553		✗	for (l = 0; l < 2; l++) {
1554		✗	*(dst + ofs + l + 0) = *(db + ofs + l + 0 + mvofs);
1555		✗	*(dst + ofs + l + w) = *(db + ofs + l + w + mvofs);
1556			}
1557			}
1558			}
1559		✗	break;
1560		✗	case 0xF7: // copy 8x8 block from src to dest
1561		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 64)
1562		✗	return 1;
1563		✗	for (i = 0; i < 8; i++) {
1564		✗	ofs = i * w;
1565		✗	for (l = 0; l < 8; l++)
1566		✗	*(dst + ofs + l) = bytestream2_get_byteu(&ctx->gb);
1567			}
1568		✗	break;
1569		✗	default: // copy 8x8 block from prev, c37_mv from source
1570		✗	mvofs = c37_mv[opc * 2] + (c37_mv[opc * 2 + 1] * w);
1571		✗	if (check_mv(x, y, w, h, 8, mvofs))
1572		✗	return 1;
1573		✗	for (i = 0; i < 8; i++) {
1574		✗	ofs = i * w;
1575		✗	for (l = 0; l < 8; l++)
1576		✗	*(dst + ofs + l) = *(db + ofs + l + mvofs);
1577			}
1578		✗	break;
1579			}
1580		✗	return 0;
1581			}
1582
1583		✗	static int old_codec48(SANMVideoContext *ctx, int width, int height)
1584			{
1585			uint8_t *dst, *prev;
1586		✗	int compr = bytestream2_get_byte(&ctx->gb);
1587		✗	int mvidx = bytestream2_get_byte(&ctx->gb);
1588		✗	int seq = bytestream2_get_le16(&ctx->gb);
1589		✗	uint32_t decoded_size = bytestream2_get_le32(&ctx->gb);
1590			int i, j, flags;
1591
1592			// all codec48 videos use 1, but just to be safe...
1593		✗	if (mvidx != 1) {
1594		✗	av_log(ctx->avctx, AV_LOG_ERROR, "Invalid motion base value %d.\n", mvidx);
1595		✗	return AVERROR_INVALIDDATA;
1596			}
1597
1598		✗	bytestream2_skip(&ctx->gb, 4);
1599		✗	flags = bytestream2_get_byte(&ctx->gb);
1600		✗	bytestream2_skip(&ctx->gb, 3);
1601
1602		✗	if (flags & 8) {
1603		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 0x8080)
1604		✗	return AVERROR_INVALIDDATA;
1605		✗	codec47_read_interptable(ctx);
1606			}
1607
1608		✗	dst = (uint8_t*)ctx->frm0;
1609		✗	prev = (uint8_t*)ctx->frm2;
1610
1611		✗	if (!seq) {
1612		✗	ctx->prev_seq = -1;
1613		✗	memset(prev, 0, ctx->aligned_height * width);
1614			}
1615
1616		✗	switch (compr) {
1617		✗	case 0:
1618		✗	if (bytestream2_get_bytes_left(&ctx->gb) < width * height)
1619		✗	return AVERROR_INVALIDDATA;
1620		✗	for (j = 0; j < height; j++) {
1621		✗	bytestream2_get_bufferu(&ctx->gb, dst, width);
1622		✗	dst += width;
1623			}
1624		✗	break;
1625		✗	case 2:
1626		✗	if (decoded_size > ctx->buf_size) {
1627		✗	av_log(ctx->avctx, AV_LOG_ERROR, "Decoded size %u is too large.\n", decoded_size);
1628		✗	return AVERROR_INVALIDDATA;
1629			}
1630
1631		✗	if (rle_decode(ctx, &ctx->gb, dst, decoded_size))
1632		✗	return AVERROR_INVALIDDATA;
1633		✗	break;
1634		✗	case 3:
1635		✗	if (seq == ctx->prev_seq + 1) {
1636		✗	for (j = 0; j < height; j += 8) {
1637		✗	for (i = 0; i < width; i += 8) {
1638		✗	if (codec48_block(ctx, dst + i, prev + i, i, j, width, height))
1639		✗	return AVERROR_INVALIDDATA;
1640			}
1641		✗	dst += width * 8;
1642		✗	prev += width * 8;
1643			}
1644			}
1645		✗	break;
1646		✗	case 5:
1647		✗	if (bytestream2_get_bytes_left(&ctx->gb) < ((width + 1) >> 1) * ((height + 1) >> 1))
1648		✗	return AVERROR_INVALIDDATA;
1649		✗	codec47_comp1(ctx, dst, width, height, width);
1650		✗	break;
1651		✗	case 6: // in some videos of "Star Wars - Making Magic", ignored.
1652		✗	break;
1653		✗	default:
1654		✗	avpriv_report_missing_feature(ctx->avctx,
1655			"Subcodec 48 compression %d", compr);
1656		✗	return AVERROR_PATCHWELCOME;
1657			}
1658		✗	ctx->rotate_code = 1; // swap frm[0] and frm[2]
1659		✗	ctx->prev_seq = seq;
1660		✗	return 0;
1661			}
1662
1663		✗	static int process_frame_obj(SANMVideoContext *ctx, GetByteContext *gb)
1664			{
1665			uint16_t w, h, parm2;
1666			uint8_t codec, param;
1667			int16_t left, top;
1668			int fsc, sote, ret;
1669
1670		✗	codec = bytestream2_get_byteu(gb);
1671		✗	param = bytestream2_get_byteu(gb);
1672		✗	left = bytestream2_get_le16u(gb);
1673		✗	top = bytestream2_get_le16u(gb);
1674		✗	w = bytestream2_get_le16u(gb);
1675		✗	h = bytestream2_get_le16u(gb);
1676		✗	bytestream2_skip(gb, 2);
1677		✗	parm2 = bytestream2_get_le16u(gb);
1678
1679		✗	if (w < 1 || h < 1 || w > 800 || h > 600 || left > 800 || top > 600 || left + w <= 0 || top + h <= 0) {
1680		✗	av_log(ctx->avctx, AV_LOG_WARNING,
1681			"ignoring invalid fobj dimensions: c%d %d %d @ %d %d\n",
1682			codec, w, h, left, top);
1683		✗	return 0;
1684			}
1685
1686			/* codecs with their own buffers */
1687		✗	fsc = (codec == 37 || codec == 47 || codec == 48);
1688
1689			/* special case for "Shadows of the Empire" videos */
1690		✗	sote = ((w == 640) && (h == 272) && (codec == 47));
1691		✗	if (sote)
1692		✗	left = top = 0;
1693
1694		✗	if (!ctx->have_dimensions) {
1695			int xres, yres;
1696		✗	if (ctx->subversion < 2) {
1697			/* Rebel Assault 1: 384x242 internal size */
1698		✗	xres = 384;
1699		✗	yres = 242;
1700		✗	if (w > xres || h > yres)
1701		✗	return AVERROR_INVALIDDATA;
1702		✗	ctx->have_dimensions = 1;
1703		✗	} else if (codec == 37 || codec == 47 || codec == 48) {
1704			/* these codecs work on full frames, trust their dimensions */
1705		✗	xres = w;
1706		✗	yres = h;
1707		✗	ctx->have_dimensions = 1;
1708			} else {
1709			/* detect common sizes */
1710		✗	xres = w + left;
1711		✗	yres = h + top;
1712		✗	if (sote) {
1713			/* SotE: has top=60 at all times to center video
1714			* inside the 640x480 game window
1715			*/
1716		✗	xres = w;
1717		✗	yres = h;
1718		✗	ctx->have_dimensions = 1;
1719		✗	} else if (((xres == 424) && (yres == 260)) || /* RA1 */
1720		✗	((xres == 320) && (yres == 200)) || /* ft/dig/... */
1721		✗	((xres == 640) && (yres == 480))) { /* ol/comi/mots... */
1722		✗	ctx->have_dimensions = 1;
1723			}
1724
1725		✗	xres = FFMAX(xres, ctx->width);
1726		✗	yres = FFMAX(yres, ctx->height);
1727			}
1728
1729		✗	if (ctx->width < xres || ctx->height < yres) {
1730		✗	int ret = ff_set_dimensions(ctx->avctx, xres, yres);
1731		✗	if (ret < 0)
1732		✗	return ret;
1733		✗	init_sizes(ctx, xres, yres);
1734		✗	if (init_buffers(ctx)) {
1735		✗	av_log(ctx->avctx, AV_LOG_ERROR, "Error resizing buffers.\n");
1736		✗	return AVERROR(ENOMEM);
1737			}
1738			}
1739			} else {
1740		✗	if (((left + w > ctx->width) || (top + h > ctx->height)) && (fsc || codec == 20)) {
1741			/* correct unexpected overly large frames: this happens
1742			* for instance with The Dig's sq1.san video: it has a few
1743			* (all black) 640x480 frames halfway in, while the rest is
1744			* 320x200.
1745			*/
1746		✗	av_log(ctx->avctx, AV_LOG_WARNING,
1747			"resizing too large fobj: c%d %d %d @ %d %d\n", codec, w, h, left, top);
1748		✗	w = ctx->width;
1749		✗	h = ctx->height;
1750			}
1751			}
1752
1753			/* clear the main buffer on the first fob */
1754		✗	if (ctx->first_fob) {
1755		✗	ctx->first_fob = 0;
1756		✗	if (!fsc)
1757		✗	memset(ctx->fbuf, 0, ctx->frm0_size);
1758			}
1759
1760		✗	if (w + FFMAX(left, 0) > ctx->avctx->width || h + FFMAX(top, 0) > ctx->avctx->height) {
1761		✗	avpriv_request_sample(ctx->avctx, "overly large frame\n");
1762		✗	return AVERROR_PATCHWELCOME;
1763			}
1764
1765		✗	switch (codec) {
1766		✗	case 1:
1767			case 3:
1768		✗	return old_codec1(ctx, gb, top, left, w, h, codec == 3);
1769		✗	case 2:
1770		✗	return old_codec2(ctx, gb, top, left, w, h);
1771		✗	case 4:
1772			case 5:
1773			case 33:
1774			case 34:
1775		✗	return old_codec4(ctx, gb, top, left, w, h, param, parm2, codec);
1776		✗	case 20:
1777		✗	return old_codec20(ctx, w, h);
1778		✗	case 21:
1779		✗	return old_codec21(ctx, gb, top, left, w, h);
1780		✗	case 23:
1781		✗	return old_codec23(ctx, gb, top, left, w, h, param, parm2);
1782		✗	case 31:
1783			case 32:
1784		✗	return old_codec31(ctx, gb, top, left, w, h, param, (codec == 32));
1785		✗	case 37:
1786		✗	ret = old_codec37(ctx, w, h); break;
1787		✗	case 45:
1788		✗	return 0;
1789		✗	case 47:
1790		✗	ret = old_codec47(ctx, w, h); break;
1791		✗	case 48:
1792		✗	ret = old_codec48(ctx, w, h); break;
1793		✗	default:
1794		✗	avpriv_request_sample(ctx->avctx, "Subcodec %d", codec);
1795		✗	ctx->frame->flags |= AV_FRAME_FLAG_CORRUPT;
1796		✗	return 0;
1797			}
1798		✗	if (ret)
1799		✗	return ret;
1800
1801			/* copy the codec37/47/48 result to main buffer */
1802		✗	if ((w == ctx->width) && (h == ctx->height)) {
1803		✗	memcpy(ctx->fbuf, ctx->frm0, ctx->fbuf_size);
1804			} else {
1805		✗	const uint8_t *src = (uint8_t *)ctx->frm0;
1806		✗	const int cw = FFMIN(w, ctx->width - left);
1807		✗	const int ch = FFMIN(h, ctx->height - top);
1808		✗	if ((cw > 0) && (ch > 0) && (left >= 0) && (top >= 0)) {
1809		✗	uint8_t *dst = (uint8_t *)ctx->fbuf + left + top * ctx->pitch;
1810		✗	for (int i = 0; i < ch; i++) {
1811		✗	memcpy(dst, src, cw);
1812		✗	dst += ctx->pitch;
1813		✗	src += w;
1814			}
1815			}
1816			}
1817		✗	return 0;
1818			}
1819
1820		✗	static int process_ftch(SANMVideoContext *ctx, int size)
1821			{
1822		✗	uint8_t *sf = ctx->stored_frame;
1823			int xoff, yoff, left, top, ret;
1824			GetByteContext gb;
1825			uint32_t sz;
1826
1827			/* FTCH defines additional x/y offsets */
1828		✗	if (size != 12) {
1829		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 6)
1830		✗	return AVERROR_INVALIDDATA;
1831		✗	bytestream2_skip(&ctx->gb, 2);
1832		✗	xoff = bytestream2_get_le16u(&ctx->gb);
1833		✗	yoff = bytestream2_get_le16u(&ctx->gb);
1834			} else {
1835		✗	if (bytestream2_get_bytes_left(&ctx->gb) < 12)
1836		✗	return AVERROR_INVALIDDATA;
1837		✗	bytestream2_skip(&ctx->gb, 4);
1838		✗	xoff = bytestream2_get_be32u(&ctx->gb);
1839		✗	yoff = bytestream2_get_be32u(&ctx->gb);
1840			}
1841
1842		✗	sz = *(uint32_t *)(sf + 0);
1843		✗	if ((sz > 0) && (sz <= ctx->stored_frame_size - 4)) {
1844			/* add the FTCH offsets to the left/top values of the stored FOBJ */
1845		✗	left = av_le2ne16(*(int16_t *)(sf + 4 + 2));
1846		✗	top = av_le2ne16(*(int16_t *)(sf + 4 + 4));
1847		✗	*(int16_t *)(sf + 4 + 2) = av_le2ne16(left + xoff);
1848		✗	*(int16_t *)(sf + 4 + 4) = av_le2ne16(top + yoff);
1849
1850			/* decode the stored FOBJ */
1851		✗	bytestream2_init(&gb, sf + 4, sz);
1852		✗	ret = process_frame_obj(ctx, &gb);
1853
1854			/* now restore the original left/top values again */
1855		✗	*(int16_t *)(sf + 4 + 2) = av_le2ne16(left);
1856		✗	*(int16_t *)(sf + 4 + 4) = av_le2ne16(top);
1857			} else {
1858			/* this happens a lot in RA1: The individual files are meant to
1859			* be played in sequence, with some referencing objects STORed
1860			* by previous files, e.g. the cockpit codec21 object in RA1 LVL8.
1861			* But spamming the log with errors is also not helpful, so
1862			* here we simply ignore this case.
1863			*/
1864		✗	ret = 0;
1865			}
1866		✗	return ret;
1867			}
1868
1869		✗	static int process_xpal(SANMVideoContext *ctx, int size)
1870			{
1871		✗	int16_t *dp = ctx->delta_pal;
1872		✗	uint32_t *pal = ctx->pal;
1873			uint16_t cmd;
1874			uint8_t c[3];
1875			int i, j;
1876
1877		✗	bytestream2_skip(&ctx->gb, 2);
1878		✗	cmd = bytestream2_get_be16(&ctx->gb);
1879
1880		✗	if (cmd == 1) {
1881		✗	for (i = 0; i < PALETTE_DELTA; i += 3) {
1882		✗	c[0] = (*pal >> 16) & 0xFF;
1883		✗	c[1] = (*pal >> 8) & 0xFF;
1884		✗	c[2] = (*pal >> 0) & 0xFF;
1885		✗	for (j = 0; j < 3; j++) {
1886		✗	int cl = (c[j] * 129) + *dp++;
1887		✗	c[j] = av_clip_uint8(cl / 128) & 0xFF;
1888			}
1889		✗	*pal++ = 0xFFU << 24 | c[0] << 16 | c[1] << 8 | c[2];
1890			}
1891		✗	} else if (cmd == 2) {
1892		✗	if (size < PALETTE_DELTA * 2 + 4) {
1893		✗	av_log(ctx->avctx, AV_LOG_ERROR,
1894			"Incorrect palette change block size %"PRIu32".\n", size);
1895		✗	return AVERROR_INVALIDDATA;
1896			}
1897		✗	for (i = 0; i < PALETTE_DELTA; i++)
1898		✗	dp[i] = bytestream2_get_le16u(&ctx->gb);
1899
1900		✗	if (size >= PALETTE_DELTA * 2 + 4 + PALETTE_SIZE * 3) {
1901		✗	for (i = 0; i < PALETTE_SIZE; i++)
1902		✗	ctx->pal[i] = 0xFFU << 24 | bytestream2_get_be24u(&ctx->gb);
1903		✗	if (ctx->subversion < 2)
1904		✗	ctx->pal[0] = 0xFFU << 24;
1905			}
1906			}
1907		✗	return 0;
1908			}
1909
1910		✗	static int decode_0(SANMVideoContext *ctx)
1911			{
1912		✗	uint16_t *frm = ctx->frm0;
1913			int x, y;
1914
1915		✗	if (bytestream2_get_bytes_left(&ctx->gb) < ctx->width * ctx->height * 2) {
1916		✗	av_log(ctx->avctx, AV_LOG_ERROR, "Insufficient data for raw frame.\n");
1917		✗	return AVERROR_INVALIDDATA;
1918			}
1919		✗	for (y = 0; y < ctx->height; y++) {
1920		✗	for (x = 0; x < ctx->width; x++)
1921		✗	frm[x] = bytestream2_get_le16u(&ctx->gb);
1922		✗	frm += ctx->pitch;
1923			}
1924		✗	return 0;
1925			}
1926
1927		✗	static int decode_nop(SANMVideoContext *ctx)
1928			{
1929		✗	avpriv_request_sample(ctx->avctx, "Unknown/unsupported compression type");
1930		✗	return AVERROR_PATCHWELCOME;
1931			}
1932
1933		42964	static void copy_block(uint16_t *pdest, uint16_t *psrc, int block_size, ptrdiff_t pitch)
1934			{
1935		42964	uint8_t *dst = (uint8_t *)pdest;
1936		42964	uint8_t *src = (uint8_t *)psrc;
1937		42964	ptrdiff_t stride = pitch * 2;
1938
1939	3/4 ✓ Branch 0 taken 14526 times. ✓ Branch 1 taken 12400 times. ✓ Branch 2 taken 16038 times. ✗ Branch 3 not taken.	42964	switch (block_size) {
1940		14526	case 2:
1941		14526	copy_block4(dst, src, stride, stride, 2);
1942		14526	break;
1943		12400	case 4:
1944		12400	copy_block8(dst, src, stride, stride, 4);
1945		12400	break;
1946		16038	case 8:
1947		16038	copy_block16(dst, src, stride, stride, 8);
1948		16038	break;
1949			}
1950		42964	}
1951
1952		7913	static void fill_block(uint16_t *pdest, uint16_t color, int block_size, ptrdiff_t pitch)
1953			{
1954			int x, y;
1955
1956		7913	pitch -= block_size;
1957	2/2 ✓ Branch 0 taken 30438 times. ✓ Branch 1 taken 7913 times.	38351	for (y = 0; y < block_size; y++, pdest += pitch)
1958	2/2 ✓ Branch 0 taken 149540 times. ✓ Branch 1 taken 30438 times.	179978	for (x = 0; x < block_size; x++)
1959		149540	*pdest++ = color;
1960		7913	}
1961
1962		8368	static int draw_glyph(SANMVideoContext *ctx, uint16_t *dst, int index,
1963			uint16_t fg_color, uint16_t bg_color, int block_size,
1964			ptrdiff_t pitch)
1965			{
1966			int8_t *pglyph;
1967		8368	uint16_t colors[2] = { fg_color, bg_color };
1968			int x, y;
1969
1970	1/2 ✗ Branch 0 not taken. ✓ Branch 1 taken 8368 times.	8368	if (index >= NGLYPHS) {
1971		✗	av_log(ctx->avctx, AV_LOG_ERROR, "Ignoring nonexistent glyph #%u.\n", index);
1972		✗	return AVERROR_INVALIDDATA;
1973			}
1974
1975	2/2 ✓ Branch 0 taken 1158 times. ✓ Branch 1 taken 7210 times.	8368	pglyph = block_size == 8 ? ctx->p8x8glyphs[index] : ctx->p4x4glyphs[index];
1976		8368	pitch -= block_size;
1977
1978	2/2 ✓ Branch 0 taken 38104 times. ✓ Branch 1 taken 8368 times.	46472	for (y = 0; y < block_size; y++, dst += pitch)
1979	2/2 ✓ Branch 0 taken 189472 times. ✓ Branch 1 taken 38104 times.	227576	for (x = 0; x < block_size; x++)
1980		189472	*dst++ = colors[*pglyph++];
1981		8368	return 0;
1982			}
1983
1984		8029	static int opcode_0xf7(SANMVideoContext *ctx, int cx, int cy, int block_size, ptrdiff_t pitch)
1985			{
1986		8029	uint16_t *dst = ctx->frm0 + cx + cy * ctx->pitch;
1987
1988	2/2 ✓ Branch 0 taken 825 times. ✓ Branch 1 taken 7204 times.	8029	if (block_size == 2) {
1989			uint32_t indices;
1990
1991	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 825 times.	825	if (bytestream2_get_bytes_left(&ctx->gb) < 4)
1992		✗	return AVERROR_INVALIDDATA;
1993
1994		825	indices = bytestream2_get_le32u(&ctx->gb);
1995		825	dst[0] = ctx->codebook[indices & 0xFF];
1996		825	indices >>= 8;
1997		825	dst[1] = ctx->codebook[indices & 0xFF];
1998		825	indices >>= 8;
1999		825	dst[pitch] = ctx->codebook[indices & 0xFF];
2000		825	indices >>= 8;
2001		825	dst[pitch + 1] = ctx->codebook[indices & 0xFF];
2002			} else {
2003			uint16_t fgcolor, bgcolor;
2004			int glyph;
2005
2006	2/2 ✓ Branch 1 taken 1 times. ✓ Branch 2 taken 7203 times.	7204	if (bytestream2_get_bytes_left(&ctx->gb) < 3)
2007		1	return AVERROR_INVALIDDATA;
2008
2009		7203	glyph = bytestream2_get_byteu(&ctx->gb);
2010		7203	bgcolor = ctx->codebook[bytestream2_get_byteu(&ctx->gb)];
2011		7203	fgcolor = ctx->codebook[bytestream2_get_byteu(&ctx->gb)];
2012
2013		7203	draw_glyph(ctx, dst, glyph, fgcolor, bgcolor, block_size, pitch);
2014			}
2015		8028	return 0;
2016			}
2017
2018		1169	static int opcode_0xf8(SANMVideoContext *ctx, int cx, int cy, int block_size, ptrdiff_t pitch)
2019			{
2020		1169	uint16_t *dst = ctx->frm0 + cx + cy * ctx->pitch;
2021
2022	2/2 ✓ Branch 0 taken 4 times. ✓ Branch 1 taken 1165 times.	1169	if (block_size == 2) {
2023	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 4 times.	4	if (bytestream2_get_bytes_left(&ctx->gb) < 8)
2024		✗	return AVERROR_INVALIDDATA;
2025
2026		4	dst[0] = bytestream2_get_le16u(&ctx->gb);
2027		4	dst[1] = bytestream2_get_le16u(&ctx->gb);
2028		4	dst[pitch] = bytestream2_get_le16u(&ctx->gb);
2029		4	dst[pitch + 1] = bytestream2_get_le16u(&ctx->gb);
2030			} else {
2031			uint16_t fgcolor, bgcolor;
2032			int glyph;
2033
2034	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 1165 times.	1165	if (bytestream2_get_bytes_left(&ctx->gb) < 5)
2035		✗	return AVERROR_INVALIDDATA;
2036
2037		1165	glyph = bytestream2_get_byteu(&ctx->gb);
2038		1165	bgcolor = bytestream2_get_le16u(&ctx->gb);
2039		1165	fgcolor = bytestream2_get_le16u(&ctx->gb);
2040
2041		1165	draw_glyph(ctx, dst, glyph, fgcolor, bgcolor, block_size, pitch);
2042			}
2043		1169	return 0;
2044			}
2045
2046		30376	static int good_mvec(SANMVideoContext *ctx, int cx, int cy, int mx, int my,
2047			int block_size)
2048			{
2049		30376	int start_pos = cx + mx + (cy + my) * ctx->pitch;
2050		30376	int end_pos = start_pos + (block_size - 1) * (ctx->pitch + 1);
2051
2052	2/4 ✓ Branch 0 taken 30376 times. ✗ Branch 1 not taken. ✓ Branch 2 taken 30376 times. ✗ Branch 3 not taken.	30376	int good = start_pos >= 0 && end_pos < (ctx->buf_size >> 1);
2053
2054	1/2 ✗ Branch 0 not taken. ✓ Branch 1 taken 30376 times.	30376	if (!good)
2055		✗	av_log(ctx->avctx, AV_LOG_ERROR,
2056			"Ignoring invalid motion vector (%i, %i)->(%u, %u), block size = %u\n",
2057			cx + mx, cy + my, cx, cy, block_size);
2058
2059		30376	return good;
2060			}
2061
2062		71636	static int codec2subblock(SANMVideoContext *ctx, int cx, int cy, int blk_size)
2063			{
2064			int16_t mx, my, index;
2065			int opcode;
2066
2067	2/2 ✓ Branch 1 taken 1 times. ✓ Branch 2 taken 71635 times.	71636	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
2068		1	return AVERROR_INVALIDDATA;
2069
2070		71635	opcode = bytestream2_get_byteu(&ctx->gb);
2071
2072	9/9 ✓ Branch 0 taken 28212 times. ✓ Branch 1 taken 2164 times. ✓ Branch 2 taken 12588 times. ✓ Branch 3 taken 8029 times. ✓ Branch 4 taken 1169 times. ✓ Branch 5 taken 315 times. ✓ Branch 6 taken 5496 times. ✓ Branch 7 taken 2102 times. ✓ Branch 8 taken 11560 times.	71635	switch (opcode) {
2073		28212	default:
2074		28212	mx = motion_vectors[opcode][0];
2075		28212	my = motion_vectors[opcode][1];
2076
2077			/* The original implementation of this codec precomputes a table
2078			* of int16_t all motion vectors for given image width.
2079			* For larger widths, starting with 762 pixels, the calculation of
2080			* mv table indices 1+ and 255- overflow the int16_t, inverting the
2081			* sign of the offset. This is actively exploited in e.g. the
2082			* "jonesopn_8.snm" video of "Indiana Jones and the Infernal Machine".
2083			* Therefore let the overflow happen and extract x/y components from
2084			* the new value.
2085			*/
2086	1/2 ✗ Branch 0 not taken. ✓ Branch 1 taken 28212 times.	28212	if (ctx->width > 761) {
2087		✗	index = (int16_t)(my * ctx->width + mx);
2088		✗	mx = index % ctx->width;
2089		✗	my = index / ctx->width;
2090			}
2091	1/2 ✓ Branch 1 taken 28212 times. ✗ Branch 2 not taken.	28212	if (good_mvec(ctx, cx, cy, mx, my, blk_size)) {
2092		28212	copy_block(ctx->frm0 + cx + ctx->pitch * cy,
2093		28212	ctx->frm2 + cx + mx + ctx->pitch * (cy + my),
2094			blk_size, ctx->pitch);
2095			}
2096		28212	break;
2097		2164	case 0xF5:
2098	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 2164 times.	2164	if (bytestream2_get_bytes_left(&ctx->gb) < 2)
2099		✗	return AVERROR_INVALIDDATA;
2100		2164	index = bytestream2_get_le16u(&ctx->gb);
2101
2102		2164	mx = index % ctx->width;
2103		2164	my = index / ctx->width;
2104
2105	1/2 ✓ Branch 1 taken 2164 times. ✗ Branch 2 not taken.	2164	if (good_mvec(ctx, cx, cy, mx, my, blk_size)) {
2106		2164	copy_block(ctx->frm0 + cx + ctx->pitch * cy,
2107		2164	ctx->frm2 + cx + mx + ctx->pitch * (cy + my),
2108			blk_size, ctx->pitch);
2109			}
2110		2164	break;
2111		12588	case 0xF6:
2112		12588	copy_block(ctx->frm0 + cx + ctx->pitch * cy,
2113		12588	ctx->frm1 + cx + ctx->pitch * cy,
2114			blk_size, ctx->pitch);
2115		12588	break;
2116		8029	case 0xF7:
2117		8029	opcode_0xf7(ctx, cx, cy, blk_size, ctx->pitch);
2118		8029	break;
2119
2120		1169	case 0xF8:
2121		1169	opcode_0xf8(ctx, cx, cy, blk_size, ctx->pitch);
2122		1169	break;
2123		315	case 0xF9:
2124			case 0xFA:
2125			case 0xFB:
2126			case 0xFC:
2127		315	fill_block(ctx->frm0 + cx + cy * ctx->pitch,
2128		315	ctx->small_codebook[opcode - 0xf9], blk_size, ctx->pitch);
2129		315	break;
2130		5496	case 0xFD:
2131	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 5496 times.	5496	if (bytestream2_get_bytes_left(&ctx->gb) < 1)
2132		✗	return AVERROR_INVALIDDATA;
2133		10992	fill_block(ctx->frm0 + cx + cy * ctx->pitch,
2134		5496	ctx->codebook[bytestream2_get_byteu(&ctx->gb)], blk_size, ctx->pitch);
2135		5496	break;
2136		2102	case 0xFE:
2137	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 2102 times.	2102	if (bytestream2_get_bytes_left(&ctx->gb) < 2)
2138		✗	return AVERROR_INVALIDDATA;
2139		2102	fill_block(ctx->frm0 + cx + cy * ctx->pitch,
2140		2102	bytestream2_get_le16u(&ctx->gb), blk_size, ctx->pitch);
2141		2102	break;
2142		11560	case 0xFF:
2143	1/2 ✗ Branch 0 not taken. ✓ Branch 1 taken 11560 times.	11560	if (blk_size == 2) {
2144		✗	opcode_0xf8(ctx, cx, cy, blk_size, ctx->pitch);
2145			} else {
2146		11560	blk_size >>= 1;
2147	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 11560 times.	11560	if (codec2subblock(ctx, cx, cy, blk_size))
2148		✗	return AVERROR_INVALIDDATA;
2149	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 11560 times.	11560	if (codec2subblock(ctx, cx + blk_size, cy, blk_size))
2150		✗	return AVERROR_INVALIDDATA;
2151	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 11560 times.	11560	if (codec2subblock(ctx, cx, cy + blk_size, blk_size))
2152		✗	return AVERROR_INVALIDDATA;
2153	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 11560 times.	11560	if (codec2subblock(ctx, cx + blk_size, cy + blk_size, blk_size))
2154		✗	return AVERROR_INVALIDDATA;
2155			}
2156		11560	break;
2157			}
2158		71635	return 0;
2159			}
2160
2161		6	static int decode_2(SANMVideoContext *ctx)
2162			{
2163			int cx, cy, ret;
2164
2165	2/2 ✓ Branch 0 taken 318 times. ✓ Branch 1 taken 5 times.	323	for (cy = 0; cy < ctx->aligned_height; cy += 8)
2166	2/2 ✓ Branch 0 taken 25396 times. ✓ Branch 1 taken 317 times.	25713	for (cx = 0; cx < ctx->aligned_width; cx += 8)
2167	2/2 ✓ Branch 1 taken 1 times. ✓ Branch 2 taken 25395 times.	25396	if (ret = codec2subblock(ctx, cx, cy, 8))
2168		1	return ret;
2169
2170		5	return 0;
2171			}
2172
2173		✗	static int decode_3(SANMVideoContext *ctx)
2174			{
2175		✗	memcpy(ctx->frm0, ctx->frm2, ctx->frm2_size);
2176		✗	return 0;
2177			}
2178
2179		9	static int decode_4(SANMVideoContext *ctx)
2180			{
2181		9	memcpy(ctx->frm0, ctx->frm1, ctx->frm1_size);
2182		9	return 0;
2183			}
2184
2185		1	static int decode_5(SANMVideoContext *ctx)
2186			{
2187			#if HAVE_BIGENDIAN
2188			uint16_t *frm;
2189			int npixels;
2190			#endif
2191		1	uint8_t *dst = (uint8_t*)ctx->frm0;
2192
2193	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 1 times.	1	if (rle_decode(ctx, &ctx->gb, dst, ctx->buf_size))
2194		✗	return AVERROR_INVALIDDATA;
2195
2196			#if HAVE_BIGENDIAN
2197			npixels = ctx->npixels;
2198			frm = ctx->frm0;
2199			while (npixels--) {
2200			*frm = av_bswap16(*frm);
2201			frm++;
2202			}
2203			#endif
2204
2205		1	return 0;
2206			}
2207
2208		✗	static int decode_6(SANMVideoContext *ctx)
2209			{
2210		✗	int npixels = ctx->npixels;
2211		✗	uint16_t *frm = ctx->frm0;
2212
2213		✗	if (bytestream2_get_bytes_left(&ctx->gb) < npixels) {
2214		✗	av_log(ctx->avctx, AV_LOG_ERROR, "Insufficient data for frame.\n");
2215		✗	return AVERROR_INVALIDDATA;
2216			}
2217		✗	while (npixels--)
2218		✗	*frm++ = ctx->codebook[bytestream2_get_byteu(&ctx->gb)];
2219
2220		✗	return 0;
2221			}
2222
2223		✗	static int decode_8(SANMVideoContext *ctx)
2224			{
2225		✗	uint16_t *pdest = ctx->frm0;
2226			uint8_t *rsrc;
2227		✗	long npixels = ctx->npixels;
2228
2229		✗	av_fast_malloc(&ctx->rle_buf, &ctx->rle_buf_size, npixels);
2230		✗	if (!ctx->rle_buf) {
2231		✗	av_log(ctx->avctx, AV_LOG_ERROR, "RLE buffer allocation failed.\n");
2232		✗	return AVERROR(ENOMEM);
2233			}
2234		✗	rsrc = ctx->rle_buf;
2235
2236		✗	if (rle_decode(ctx, &ctx->gb, rsrc, npixels))
2237		✗	return AVERROR_INVALIDDATA;
2238
2239		✗	while (npixels--)
2240		✗	*pdest++ = ctx->codebook[*rsrc++];
2241
2242		✗	return 0;
2243			}
2244
2245			typedef int (*frm_decoder)(SANMVideoContext *ctx);
2246
2247			static const frm_decoder v1_decoders[] = {
2248			decode_0, decode_nop, decode_2, decode_3, decode_4, decode_5,
2249			decode_6, decode_nop, decode_8
2250			};
2251
2252		16	static int read_frame_header(SANMVideoContext *ctx, SANMFrameHeader *hdr)
2253			{
2254			int i, ret;
2255
2256	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 16 times.	16	if ((ret = bytestream2_get_bytes_left(&ctx->gb)) < 560) {
2257		✗	av_log(ctx->avctx, AV_LOG_ERROR, "Input frame too short (%d bytes).\n",
2258			ret);
2259		✗	return AVERROR_INVALIDDATA;
2260			}
2261		16	bytestream2_skip(&ctx->gb, 8); // skip pad
2262
2263		16	hdr->width = bytestream2_get_le32u(&ctx->gb);
2264		16	hdr->height = bytestream2_get_le32u(&ctx->gb);
2265
2266	2/4 ✓ Branch 0 taken 16 times. ✗ Branch 1 not taken. ✗ Branch 2 not taken. ✓ Branch 3 taken 16 times.	16	if (hdr->width != ctx->width || hdr->height != ctx->height) {
2267		✗	avpriv_report_missing_feature(ctx->avctx, "Variable size frames");
2268		✗	return AVERROR_PATCHWELCOME;
2269			}
2270
2271		16	hdr->seq_num = bytestream2_get_le16u(&ctx->gb);
2272		16	hdr->codec = bytestream2_get_byteu(&ctx->gb);
2273		16	hdr->rotate_code = bytestream2_get_byteu(&ctx->gb);
2274
2275		16	bytestream2_skip(&ctx->gb, 4); // skip pad
2276
2277	2/2 ✓ Branch 0 taken 64 times. ✓ Branch 1 taken 16 times.	80	for (i = 0; i < 4; i++)
2278		64	ctx->small_codebook[i] = bytestream2_get_le16u(&ctx->gb);
2279		16	hdr->bg_color = bytestream2_get_le16u(&ctx->gb);
2280
2281		16	bytestream2_skip(&ctx->gb, 2); // skip pad
2282
2283		16	hdr->rle_output_size = bytestream2_get_le32u(&ctx->gb);
2284	2/2 ✓ Branch 0 taken 4096 times. ✓ Branch 1 taken 16 times.	4112	for (i = 0; i < 256; i++)
2285		4096	ctx->codebook[i] = bytestream2_get_le16u(&ctx->gb);
2286
2287		16	bytestream2_skip(&ctx->gb, 8); // skip pad
2288
2289		16	return 0;
2290			}
2291
2292		2	static void fill_frame(uint16_t *pbuf, int buf_size, uint16_t color)
2293			{
2294	1/2 ✓ Branch 0 taken 2 times. ✗ Branch 1 not taken.	2	if (buf_size--) {
2295		2	*pbuf++ = color;
2296		2	av_memcpy_backptr((uint8_t*)pbuf, 2, 2*buf_size);
2297			}
2298		2	}
2299
2300		15	static int copy_output(SANMVideoContext *ctx, SANMFrameHeader *hdr)
2301			{
2302			uint8_t *dst;
2303	1/2 ✓ Branch 0 taken 15 times. ✗ Branch 1 not taken.	15	const uint8_t *src = hdr ? (uint8_t *)ctx->frm0 : (uint8_t *)ctx->fbuf;
2304		15	int ret, height = ctx->height;
2305	1/2 ✓ Branch 0 taken 15 times. ✗ Branch 1 not taken.	15	ptrdiff_t dstpitch, srcpitch = ctx->pitch * (hdr ? sizeof(ctx->frm0[0]) : 1);
2306
2307	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 15 times.	15	if ((ret = ff_get_buffer(ctx->avctx, ctx->frame, 0)) < 0)
2308		✗	return ret;
2309
2310		15	dst = ctx->frame->data[0];
2311		15	dstpitch = ctx->frame->linesize[0];
2312
2313	2/2 ✓ Branch 0 taken 7200 times. ✓ Branch 1 taken 15 times.	7215	while (height--) {
2314		7200	memcpy(dst, src, srcpitch);
2315		7200	src += srcpitch;
2316		7200	dst += dstpitch;
2317			}
2318
2319		15	return 0;
2320			}
2321
2322		16	static int decode_frame(AVCodecContext *avctx, AVFrame *frame,
2323			int *got_frame_ptr, AVPacket *pkt)
2324			{
2325		16	SANMVideoContext *ctx = avctx->priv_data;
2326			int i, ret;
2327
2328		16	ctx->frame = frame;
2329		16	bytestream2_init(&ctx->gb, pkt->data, pkt->size);
2330
2331	1/2 ✗ Branch 0 not taken. ✓ Branch 1 taken 16 times.	16	if (!ctx->version) {
2332		✗	int to_store = 0, have_img = 0;
2333
2334		✗	ctx->first_fob = 1;
2335
2336		✗	while (bytestream2_get_bytes_left(&ctx->gb) >= 8) {
2337			uint32_t sig, size;
2338			int pos;
2339
2340		✗	sig = bytestream2_get_be32u(&ctx->gb);
2341		✗	size = bytestream2_get_be32u(&ctx->gb);
2342		✗	pos = bytestream2_tell(&ctx->gb);
2343
2344		✗	if (bytestream2_get_bytes_left(&ctx->gb) < size) {
2345		✗	av_log(avctx, AV_LOG_ERROR, "Incorrect chunk size %"PRIu32".\n", size);
2346		✗	break;
2347			}
2348		✗	switch (sig) {
2349		✗	case MKBETAG('N', 'P', 'A', 'L'):
2350		✗	if (size != PALETTE_SIZE * 3) {
2351		✗	av_log(avctx, AV_LOG_ERROR,
2352			"Incorrect palette block size %"PRIu32".\n", size);
2353		✗	return AVERROR_INVALIDDATA;
2354			}
2355		✗	for (i = 0; i < PALETTE_SIZE; i++)
2356		✗	ctx->pal[i] = 0xFFU << 24 | bytestream2_get_be24u(&ctx->gb);
2357		✗	if (ctx->subversion < 2)
2358		✗	ctx->pal[0] = 0xFFU << 24;
2359		✗	break;
2360		✗	case MKBETAG('F', 'O', 'B', 'J'):
2361		✗	if (size < 16)
2362		✗	return AVERROR_INVALIDDATA;
2363		✗	if (ret = process_frame_obj(ctx, &ctx->gb))
2364		✗	return ret;
2365		✗	have_img = 1;
2366
2367			/* STOR: for ANIMv0/1 store the whole FOBJ datablock, as it
2368			* needs to be replayed on FTCH, since none of the codecs
2369			* it uses work on the full buffer.
2370			* For ANIMv2, it's enough to store the current framebuffer.
2371			*/
2372		✗	if (to_store) {
2373		✗	to_store = 0;
2374		✗	if (ctx->subversion < 2) {
2375		✗	if (size + 4 <= ctx->stored_frame_size) {
2376		✗	int pos2 = bytestream2_tell(&ctx->gb);
2377		✗	bytestream2_seek(&ctx->gb, pos, SEEK_SET);
2378		✗	*(uint32_t *)(ctx->stored_frame) = size;
2379		✗	bytestream2_get_bufferu(&ctx->gb, ctx->stored_frame + 4, size);
2380		✗	bytestream2_seek(&ctx->gb, pos2, SEEK_SET);
2381			} else {
2382		✗	av_log(avctx, AV_LOG_ERROR, "FOBJ too large for STOR\n");
2383		✗	ret = AVERROR(ENOMEM);
2384			}
2385			} else {
2386		✗	memcpy(ctx->stored_frame, ctx->fbuf, ctx->buf_size);
2387			}
2388			}
2389		✗	break;
2390		✗	case MKBETAG('X', 'P', 'A', 'L'):
2391		✗	if (ret = process_xpal(ctx, size))
2392		✗	return ret;
2393		✗	break;
2394		✗	case MKBETAG('S', 'T', 'O', 'R'):
2395		✗	to_store = 1;
2396		✗	break;
2397		✗	case MKBETAG('F', 'T', 'C', 'H'):
2398		✗	if (ctx->subversion < 2) {
2399		✗	if (ret = process_ftch(ctx, size))
2400		✗	return ret;
2401			} else {
2402		✗	memcpy(ctx->fbuf, ctx->stored_frame, ctx->buf_size);
2403			}
2404		✗	have_img = 1;
2405		✗	break;
2406		✗	default:
2407		✗	bytestream2_skip(&ctx->gb, size);
2408		✗	av_log(avctx, AV_LOG_DEBUG,
2409			"Unknown/unsupported chunk %"PRIx32".\n", sig);
2410		✗	break;
2411			}
2412
2413			/* the sizes of chunks are usually a multiple of 2. However
2414			* there are a few unaligned FOBJs in RA1 L2PLAY.ANM only (looks
2415			* like a game bug) and IACT audio chunks which have odd sizes
2416			* but are padded with a zero byte.
2417			*/
2418		✗	bytestream2_seek(&ctx->gb, pos + size, SEEK_SET);
2419		✗	if ((pos + size) & 1) {
2420		✗	if (0 != bytestream2_get_byteu(&ctx->gb))
2421		✗	bytestream2_seek(&ctx->gb, pos + size, SEEK_SET);
2422			}
2423			}
2424
2425		✗	if (have_img) {
2426		✗	if ((ret = copy_output(ctx, NULL)))
2427		✗	return ret;
2428		✗	memcpy(ctx->frame->data[1], ctx->pal, 1024);
2429		✗	*got_frame_ptr = 1;
2430			}
2431			} else {
2432			SANMFrameHeader header;
2433
2434	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 16 times.	16	if ((ret = read_frame_header(ctx, &header)))
2435		1	return ret;
2436
2437		16	ctx->rotate_code = header.rotate_code;
2438	2/2 ✓ Branch 0 taken 1 times. ✓ Branch 1 taken 15 times.	16	if (!header.seq_num) {
2439		1	ctx->frame->flags |= AV_FRAME_FLAG_KEY;
2440		1	ctx->frame->pict_type = AV_PICTURE_TYPE_I;
2441		1	fill_frame(ctx->frm1, ctx->npixels, header.bg_color);
2442		1	fill_frame(ctx->frm2, ctx->npixels, header.bg_color);
2443			} else {
2444		15	ctx->frame->flags &= ~AV_FRAME_FLAG_KEY;
2445		15	ctx->frame->pict_type = AV_PICTURE_TYPE_P;
2446			}
2447
2448	1/2 ✓ Branch 0 taken 16 times. ✗ Branch 1 not taken.	16	if (header.codec < FF_ARRAY_ELEMS(v1_decoders)) {
2449	2/2 ✓ Branch 1 taken 1 times. ✓ Branch 2 taken 15 times.	16	if ((ret = v1_decoders[header.codec](ctx))) {
2450		1	av_log(avctx, AV_LOG_ERROR,
2451			"Subcodec %d: error decoding frame.\n", header.codec);
2452		1	return ret;
2453			}
2454			} else {
2455		✗	avpriv_request_sample(avctx, "Subcodec %d", header.codec);
2456		✗	return AVERROR_PATCHWELCOME;
2457			}
2458
2459	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 15 times.	15	if ((ret = copy_output(ctx, &header)))
2460		✗	return ret;
2461
2462		15	*got_frame_ptr = 1;
2463
2464			}
2465	2/2 ✓ Branch 0 taken 9 times. ✓ Branch 1 taken 6 times.	15	if (ctx->rotate_code)
2466		9	rotate_bufs(ctx, ctx->rotate_code);
2467
2468		15	return pkt->size;
2469			}
2470
2471			const FFCodec ff_sanm_decoder = {
2472			.p.name = "sanm",
2473			CODEC_LONG_NAME("LucasArts SANM/Smush video"),
2474			.p.type = AVMEDIA_TYPE_VIDEO,
2475			.p.id = AV_CODEC_ID_SANM,
2476			.priv_data_size = sizeof(SANMVideoContext),
2477			.init = decode_init,
2478			.close = decode_end,
2479			FF_CODEC_DECODE_CB(decode_frame),
2480			.p.capabilities = AV_CODEC_CAP_DR1,
2481			};
2482