FFmpeg coverage

GCC Code Coverage Report

Directory:	../../../ffmpeg/		Exec	Total	Coverage
File:	src/libavcodec/h264_sei.c	Lines:	212	318	66.7 %
Date:	2020-07-11 02:49:52	Branches:	94	176	53.4 %


/*
 * H.26L/H.264/AVC/JVT/14496-10/... SEI decoding
 * Copyright (c) 2003 Michael Niedermayer <michaelni@gmx.at>
 *
 * This file is part of FFmpeg.
 *
 * FFmpeg is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * FFmpeg is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with FFmpeg; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
 */

/**
 * @file
 * H.264 / AVC / MPEG-4 part10 SEI decoding.
 * @author Michael Niedermayer <michaelni@gmx.at>
 */

#include "avcodec.h"
#include "get_bits.h"
#include "golomb.h"
#include "h264_ps.h"
#include "h264_sei.h"
#include "internal.h"

#define AVERROR_PS_NOT_FOUND      FFERRTAG(0xF8,'?','P','S')

static const uint8_t sei_num_clock_ts_table[9] = {
    1, 1, 1, 2, 2, 3, 3, 2, 3
};

void ff_h264_sei_uninit(H264SEIContext *h)
{
    h->recovery_point.recovery_frame_cnt = -1;

    h->picture_timing.dpb_output_delay  = 0;
    h->picture_timing.cpb_removal_delay = -1;

    h->picture_timing.present      = 0;
    h->buffering_period.present    = 0;
    h->frame_packing.present       = 0;
    h->display_orientation.present = 0;
    h->afd.present                 =  0;

    av_buffer_unref(&h->a53_caption.buf_ref);
    for (int i = 0; i < h->unregistered.nb_buf_ref; i++)
        av_buffer_unref(&h->unregistered.buf_ref[i]);
    h->unregistered.nb_buf_ref = 0;
    av_freep(&h->unregistered.buf_ref);
}

int ff_h264_sei_process_picture_timing(H264SEIPictureTiming *h, const SPS *sps,
                                       void *logctx)
{
    GetBitContext gb;

    init_get_bits(&gb, h->payload, h->payload_size_bits);

    if (sps->nal_hrd_parameters_present_flag ||
        sps->vcl_hrd_parameters_present_flag) {
        h->cpb_removal_delay = get_bits_long(&gb, sps->cpb_removal_delay_length);
        h->dpb_output_delay  = get_bits_long(&gb, sps->dpb_output_delay_length);
    }
    if (sps->pic_struct_present_flag) {
        unsigned int i, num_clock_ts;

        h->pic_struct = get_bits(&gb, 4);
        h->ct_type    = 0;

        if (h->pic_struct > H264_SEI_PIC_STRUCT_FRAME_TRIPLING)
            return AVERROR_INVALIDDATA;

        num_clock_ts = sei_num_clock_ts_table[h->pic_struct];
        h->timecode_cnt = 0;
        for (i = 0; i < num_clock_ts; i++) {
            if (get_bits(&gb, 1)) {                      /* clock_timestamp_flag */
                H264SEITimeCode *tc = &h->timecode[h->timecode_cnt++];
                unsigned int full_timestamp_flag;
                unsigned int counting_type, cnt_dropped_flag;
                h->ct_type |= 1 << get_bits(&gb, 2);
                skip_bits(&gb, 1);                       /* nuit_field_based_flag */
                counting_type = get_bits(&gb, 5);        /* counting_type */
                full_timestamp_flag = get_bits(&gb, 1);
                skip_bits(&gb, 1);                       /* discontinuity_flag */
                cnt_dropped_flag = get_bits(&gb, 1);      /* cnt_dropped_flag */
                if (cnt_dropped_flag && counting_type > 1 && counting_type < 7)
                    tc->dropframe = 1;
                tc->frame = get_bits(&gb, 8);         /* n_frames */
                if (full_timestamp_flag) {
                    tc->full = 1;
                    tc->seconds = get_bits(&gb, 6); /* seconds_value 0..59 */
                    tc->minutes = get_bits(&gb, 6); /* minutes_value 0..59 */
                    tc->hours = get_bits(&gb, 5);   /* hours_value 0..23 */
                } else {
                    tc->seconds = tc->minutes = tc->hours = tc->full = 0;
                    if (get_bits(&gb, 1)) {             /* seconds_flag */
                        tc->seconds = get_bits(&gb, 6);
                        if (get_bits(&gb, 1)) {         /* minutes_flag */
                            tc->minutes = get_bits(&gb, 6);
                            if (get_bits(&gb, 1))       /* hours_flag */
                                tc->hours = get_bits(&gb, 5);
                        }
                    }
                }

                if (sps->time_offset_length > 0)
                    skip_bits(&gb,
                              sps->time_offset_length); /* time_offset */
            }
        }

        av_log(logctx, AV_LOG_DEBUG, "ct_type:%X pic_struct:%d\n",
               h->ct_type, h->pic_struct);
    }

    return 0;
}

static int decode_picture_timing(H264SEIPictureTiming *h, GetBitContext *gb,
                                 void *logctx)
{
    int index     = get_bits_count(gb);
    int size_bits = get_bits_left(gb);
    int size      = (size_bits + 7) / 8;

    if (index & 7) {
        av_log(logctx, AV_LOG_ERROR, "Unaligned SEI payload\n");
        return AVERROR_INVALIDDATA;
    }
    if (size > sizeof(h->payload)) {
        av_log(logctx, AV_LOG_ERROR, "Picture timing SEI payload too large\n");
        return AVERROR_INVALIDDATA;
    }
    memcpy(h->payload, gb->buffer + index / 8, size);

    h->payload_size_bits = size_bits;

    h->present = 1;
    return 0;
}

static int decode_registered_user_data_afd(H264SEIAFD *h, GetBitContext *gb, int size)
{
    int flag;

    if (size-- < 1)
        return AVERROR_INVALIDDATA;
    skip_bits(gb, 1);               // 0
    flag = get_bits(gb, 1);         // active_format_flag
    skip_bits(gb, 6);               // reserved

    if (flag) {
        if (size-- < 1)
            return AVERROR_INVALIDDATA;
        skip_bits(gb, 4);           // reserved
        h->active_format_description = get_bits(gb, 4);
        h->present                   = 1;
    }

    return 0;
}

static int decode_registered_user_data_closed_caption(H264SEIA53Caption *h,
                                                     GetBitContext *gb, void *logctx,
                                                     int size)
{
    int flag;
    int user_data_type_code;
    int cc_count;

    if (size < 3)
        return AVERROR(EINVAL);

    user_data_type_code = get_bits(gb, 8);
    if (user_data_type_code == 0x3) {
        skip_bits(gb, 1);           // reserved

        flag = get_bits(gb, 1);     // process_cc_data_flag
        if (flag) {
            skip_bits(gb, 1);       // zero bit
            cc_count = get_bits(gb, 5);
            skip_bits(gb, 8);       // reserved
            size -= 2;

            if (cc_count && size >= cc_count * 3) {
                int old_size = h->buf_ref ? h->buf_ref->size : 0;
                const uint64_t new_size = (old_size + cc_count
                                           * UINT64_C(3));
                int i, ret;

                if (new_size > INT_MAX)
                    return AVERROR(EINVAL);

                /* Allow merging of the cc data from two fields. */
                ret = av_buffer_realloc(&h->buf_ref, new_size);
                if (ret < 0)
                    return ret;

                /* Use of av_buffer_realloc assumes buffer is writeable */
                for (i = 0; i < cc_count; i++) {
                    h->buf_ref->data[old_size++] = get_bits(gb, 8);
                    h->buf_ref->data[old_size++] = get_bits(gb, 8);
                    h->buf_ref->data[old_size++] = get_bits(gb, 8);
                }

                skip_bits(gb, 8);   // marker_bits
            }
        }
    } else {
        int i;
        for (i = 0; i < size - 1; i++)
            skip_bits(gb, 8);
    }

    return 0;
}

static int decode_registered_user_data(H264SEIContext *h, GetBitContext *gb,
                                       void *logctx, int size)
{
    uint32_t country_code;
    uint32_t user_identifier;

    if (size < 7)
        return AVERROR_INVALIDDATA;
    size -= 7;

    country_code = get_bits(gb, 8); // itu_t_t35_country_code
    if (country_code == 0xFF) {
        skip_bits(gb, 8);           // itu_t_t35_country_code_extension_byte
        size--;
    }

    /* itu_t_t35_payload_byte follows */
    skip_bits(gb, 8);              // terminal provider code
    skip_bits(gb, 8);              // terminal provider oriented code
    user_identifier = get_bits_long(gb, 32);

    switch (user_identifier) {
        case MKBETAG('D', 'T', 'G', '1'):       // afd_data
            return decode_registered_user_data_afd(&h->afd, gb, size);
        case MKBETAG('G', 'A', '9', '4'):       // closed captions
            return decode_registered_user_data_closed_caption(&h->a53_caption, gb,
                                                              logctx, size);
        default:
            skip_bits(gb, size * 8);
            break;
    }

    return 0;
}

static int decode_unregistered_user_data(H264SEIUnregistered *h, GetBitContext *gb,
                                         void *logctx, int size)
{
    uint8_t *user_data;
    int e, build, i;
    AVBufferRef *buf_ref, **tmp;

    if (size < 16 || size >= INT_MAX - 1)
        return AVERROR_INVALIDDATA;

    tmp = av_realloc_array(h->buf_ref, h->nb_buf_ref + 1, sizeof(*h->buf_ref));
    if (!tmp)
        return AVERROR(ENOMEM);
    h->buf_ref = tmp;

    buf_ref = av_buffer_alloc(size + 1);
    if (!buf_ref)
        return AVERROR(ENOMEM);
    user_data = buf_ref->data;

    for (i = 0; i < size; i++)
        user_data[i] = get_bits(gb, 8);

    user_data[i] = 0;
    buf_ref->size = size;
    h->buf_ref[h->nb_buf_ref++] = buf_ref;

    e = sscanf(user_data + 16, "x264 - core %d", &build);
    if (e == 1 && build > 0)
        h->x264_build = build;
    if (e == 1 && build == 1 && !strncmp(user_data+16, "x264 - core 0000", 16))
        h->x264_build = 67;

    return 0;
}

static int decode_recovery_point(H264SEIRecoveryPoint *h, GetBitContext *gb, void *logctx)
{
    unsigned recovery_frame_cnt = get_ue_golomb_long(gb);

    if (recovery_frame_cnt >= (1<<MAX_LOG2_MAX_FRAME_NUM)) {
        av_log(logctx, AV_LOG_ERROR, "recovery_frame_cnt %u is out of range\n", recovery_frame_cnt);
        return AVERROR_INVALIDDATA;
    }

    h->recovery_frame_cnt = recovery_frame_cnt;
    /* 1b exact_match_flag,
     * 1b broken_link_flag,
     * 2b changing_slice_group_idc */
    skip_bits(gb, 4);

    return 0;
}

static int decode_buffering_period(H264SEIBufferingPeriod *h, GetBitContext *gb,
                                   const H264ParamSets *ps, void *logctx)
{
    unsigned int sps_id;
    int sched_sel_idx;
    const SPS *sps;

    sps_id = get_ue_golomb_31(gb);
    if (sps_id > 31 || !ps->sps_list[sps_id]) {
        av_log(logctx, AV_LOG_ERROR,
               "non-existing SPS %d referenced in buffering period\n", sps_id);
        return sps_id > 31 ? AVERROR_INVALIDDATA : AVERROR_PS_NOT_FOUND;
    }
    sps = (const SPS*)ps->sps_list[sps_id]->data;

    // NOTE: This is really so duplicated in the standard... See H.264, D.1.1
    if (sps->nal_hrd_parameters_present_flag) {
        for (sched_sel_idx = 0; sched_sel_idx < sps->cpb_cnt; sched_sel_idx++) {
            h->initial_cpb_removal_delay[sched_sel_idx] =
                get_bits_long(gb, sps->initial_cpb_removal_delay_length);
            // initial_cpb_removal_delay_offset
            skip_bits(gb, sps->initial_cpb_removal_delay_length);
        }
    }
    if (sps->vcl_hrd_parameters_present_flag) {
        for (sched_sel_idx = 0; sched_sel_idx < sps->cpb_cnt; sched_sel_idx++) {
            h->initial_cpb_removal_delay[sched_sel_idx] =
                get_bits_long(gb, sps->initial_cpb_removal_delay_length);
            // initial_cpb_removal_delay_offset
            skip_bits(gb, sps->initial_cpb_removal_delay_length);
        }
    }

    h->present = 1;
    return 0;
}

static int decode_frame_packing_arrangement(H264SEIFramePacking *h,
                                            GetBitContext *gb)
{
    h->arrangement_id          = get_ue_golomb_long(gb);
    h->arrangement_cancel_flag = get_bits1(gb);
    h->present = !h->arrangement_cancel_flag;

    if (h->present) {
        h->arrangement_type = get_bits(gb, 7);
        h->quincunx_sampling_flag         = get_bits1(gb);
        h->content_interpretation_type    = get_bits(gb, 6);

        // spatial_flipping_flag, frame0_flipped_flag, field_views_flag
        skip_bits(gb, 3);
        h->current_frame_is_frame0_flag = get_bits1(gb);
        // frame0_self_contained_flag, frame1_self_contained_flag
        skip_bits(gb, 2);

        if (!h->quincunx_sampling_flag && h->arrangement_type != 5)
            skip_bits(gb, 16);      // frame[01]_grid_position_[xy]
        skip_bits(gb, 8);           // frame_packing_arrangement_reserved_byte
        h->arrangement_repetition_period = get_ue_golomb_long(gb);
    }
    skip_bits1(gb);                 // frame_packing_arrangement_extension_flag

    return 0;
}

static int decode_display_orientation(H264SEIDisplayOrientation *h,
                                      GetBitContext *gb)
{
    h->present = !get_bits1(gb);

    if (h->present) {
        h->hflip = get_bits1(gb);     // hor_flip
        h->vflip = get_bits1(gb);     // ver_flip

        h->anticlockwise_rotation = get_bits(gb, 16);
        get_ue_golomb_long(gb);       // display_orientation_repetition_period
        skip_bits1(gb);               // display_orientation_extension_flag
    }

    return 0;
}

static int decode_green_metadata(H264SEIGreenMetaData *h, GetBitContext *gb)
{
    h->green_metadata_type = get_bits(gb, 8);

    if (h->green_metadata_type == 0) {
        h->period_type = get_bits(gb, 8);

        if (h->period_type == 2)
            h->num_seconds = get_bits(gb, 16);
        else if (h->period_type == 3)
            h->num_pictures = get_bits(gb, 16);

        h->percent_non_zero_macroblocks            = get_bits(gb, 8);
        h->percent_intra_coded_macroblocks         = get_bits(gb, 8);
        h->percent_six_tap_filtering               = get_bits(gb, 8);
        h->percent_alpha_point_deblocking_instance = get_bits(gb, 8);

    } else if (h->green_metadata_type == 1) {
        h->xsd_metric_type  = get_bits(gb, 8);
        h->xsd_metric_value = get_bits(gb, 16);
    }

    return 0;
}

static int decode_alternative_transfer(H264SEIAlternativeTransfer *h,
                                       GetBitContext *gb)
{
    h->present = 1;
    h->preferred_transfer_characteristics = get_bits(gb, 8);
    return 0;
}

int ff_h264_sei_decode(H264SEIContext *h, GetBitContext *gb,
                       const H264ParamSets *ps, void *logctx)
{
    int master_ret = 0;

    while (get_bits_left(gb) > 16 && show_bits(gb, 16)) {
        GetBitContext gb_payload;
        int type = 0;
        unsigned size = 0;
        int ret  = 0;

        do {
            if (get_bits_left(gb) < 8)
                return AVERROR_INVALIDDATA;
            type += show_bits(gb, 8);
        } while (get_bits(gb, 8) == 255);

        do {
            if (get_bits_left(gb) < 8)
                return AVERROR_INVALIDDATA;
            size += show_bits(gb, 8);
        } while (get_bits(gb, 8) == 255);

        if (size > get_bits_left(gb) / 8) {
            av_log(logctx, AV_LOG_ERROR, "SEI type %d size %d truncated at %d\n",
                   type, 8*size, get_bits_left(gb));
            return AVERROR_INVALIDDATA;
        }

        ret = init_get_bits8(&gb_payload, gb->buffer + get_bits_count(gb) / 8, size);
        if (ret < 0)
            return ret;

        switch (type) {
        case H264_SEI_TYPE_PIC_TIMING: // Picture timing SEI
            ret = decode_picture_timing(&h->picture_timing, &gb_payload, logctx);
            break;
        case H264_SEI_TYPE_USER_DATA_REGISTERED:
            ret = decode_registered_user_data(h, &gb_payload, logctx, size);
            break;
        case H264_SEI_TYPE_USER_DATA_UNREGISTERED:
            ret = decode_unregistered_user_data(&h->unregistered, &gb_payload, logctx, size);
            break;
        case H264_SEI_TYPE_RECOVERY_POINT:
            ret = decode_recovery_point(&h->recovery_point, &gb_payload, logctx);
            break;
        case H264_SEI_TYPE_BUFFERING_PERIOD:
            ret = decode_buffering_period(&h->buffering_period, &gb_payload, ps, logctx);
            break;
        case H264_SEI_TYPE_FRAME_PACKING:
            ret = decode_frame_packing_arrangement(&h->frame_packing, &gb_payload);
            break;
        case H264_SEI_TYPE_DISPLAY_ORIENTATION:
            ret = decode_display_orientation(&h->display_orientation, &gb_payload);
            break;
        case H264_SEI_TYPE_GREEN_METADATA:
            ret = decode_green_metadata(&h->green_metadata, &gb_payload);
            break;
        case H264_SEI_TYPE_ALTERNATIVE_TRANSFER:
            ret = decode_alternative_transfer(&h->alternative_transfer, &gb_payload);
            break;
        default:
            av_log(logctx, AV_LOG_DEBUG, "unknown SEI type %d\n", type);
        }
        if (ret < 0 && ret != AVERROR_PS_NOT_FOUND)
            return ret;
        if (ret < 0)
            master_ret = ret;

        if (get_bits_left(&gb_payload) < 0) {
            av_log(logctx, AV_LOG_WARNING, "SEI type %d overread by %d bits\n",
                   type, -get_bits_left(&gb_payload));
        }

        skip_bits_long(gb, 8 * size);
    }

    return master_ret;
}

const char *ff_h264_sei_stereo_mode(const H264SEIFramePacking *h)
{
    if (h->arrangement_cancel_flag == 0) {
        switch (h->arrangement_type) {
            case H264_SEI_FPA_TYPE_CHECKERBOARD:
                if (h->content_interpretation_type == 2)
                    return "checkerboard_rl";
                else
                    return "checkerboard_lr";
            case H264_SEI_FPA_TYPE_INTERLEAVE_COLUMN:
                if (h->content_interpretation_type == 2)
                    return "col_interleaved_rl";
                else
                    return "col_interleaved_lr";
            case H264_SEI_FPA_TYPE_INTERLEAVE_ROW:
                if (h->content_interpretation_type == 2)
                    return "row_interleaved_rl";
                else
                    return "row_interleaved_lr";
            case H264_SEI_FPA_TYPE_SIDE_BY_SIDE:
                if (h->content_interpretation_type == 2)
                    return "right_left";
                else
                    return "left_right";
            case H264_SEI_FPA_TYPE_TOP_BOTTOM:
                if (h->content_interpretation_type == 2)
                    return "bottom_top";
                else
                    return "top_bottom";
            case H264_SEI_FPA_TYPE_INTERLEAVE_TEMPORAL:
                if (h->content_interpretation_type == 2)
                    return "block_rl";
                else
                    return "block_lr";
            case H264_SEI_FPA_TYPE_2D:
            default:
                return "mono";
        }
    } else if (h->arrangement_cancel_flag == 1) {
        return "mono";
    } else {
        return NULL;
    }
}


Generated by: GCOVR (Version 4.2)

Line	Branch	Exec	Source
1			/*
2			* H.26L/H.264/AVC/JVT/14496-10/... SEI decoding
3			* Copyright (c) 2003 Michael Niedermayer <michaelni@gmx.at>
4			*
5			* This file is part of FFmpeg.
6			*
7			* FFmpeg is free software; you can redistribute it and/or
8			* modify it under the terms of the GNU Lesser General Public
9			* License as published by the Free Software Foundation; either
10			* version 2.1 of the License, or (at your option) any later version.
11			*
12			* FFmpeg is distributed in the hope that it will be useful,
13			* but WITHOUT ANY WARRANTY; without even the implied warranty of
14			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15			* Lesser General Public License for more details.
16			*
17			* You should have received a copy of the GNU Lesser General Public
18			* License along with FFmpeg; if not, write to the Free Software
19			* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20			*/
21
22			/**
23			* @file
24			* H.264 / AVC / MPEG-4 part10 SEI decoding.
25			* @author Michael Niedermayer <michaelni@gmx.at>
26			*/
27
28			#include "avcodec.h"
29			#include "get_bits.h"
30			#include "golomb.h"
31			#include "h264_ps.h"
32			#include "h264_sei.h"
33			#include "internal.h"
34
35			#define AVERROR_PS_NOT_FOUND FFERRTAG(0xF8,'?','P','S')
36
37			static const uint8_t sei_num_clock_ts_table[9] = {
38			1, 1, 1, 2, 2, 3, 3, 2, 3
39			};
40
41		50802	void ff_h264_sei_uninit(H264SEIContext *h)
42			{
43		50802	h->recovery_point.recovery_frame_cnt = -1;
44
45		50802	h->picture_timing.dpb_output_delay = 0;
46		50802	h->picture_timing.cpb_removal_delay = -1;
47
48		50802	h->picture_timing.present = 0;
49		50802	h->buffering_period.present = 0;
50		50802	h->frame_packing.present = 0;
51		50802	h->display_orientation.present = 0;
52		50802	h->afd.present = 0;
53
54		50802	av_buffer_unref(&h->a53_caption.buf_ref);
55	✓✓	50881	for (int i = 0; i < h->unregistered.nb_buf_ref; i++)
56		79	av_buffer_unref(&h->unregistered.buf_ref[i]);
57		50802	h->unregistered.nb_buf_ref = 0;
58		50802	av_freep(&h->unregistered.buf_ref);
59		50802	}
60
61		2766	int ff_h264_sei_process_picture_timing(H264SEIPictureTiming h, const SPS sps,
62			void *logctx)
63			{
64			GetBitContext gb;
65
66		2766	init_get_bits(&gb, h->payload, h->payload_size_bits);
67
68	✓✓	2766	if (sps->nal_hrd_parameters_present_flag \|\|
69	✗✓	1485	sps->vcl_hrd_parameters_present_flag) {
70		1281	h->cpb_removal_delay = get_bits_long(&gb, sps->cpb_removal_delay_length);
71		1281	h->dpb_output_delay = get_bits_long(&gb, sps->dpb_output_delay_length);
72			}
73	✓✓	2766	if (sps->pic_struct_present_flag) {
74			unsigned int i, num_clock_ts;
75
76		2746	h->pic_struct = get_bits(&gb, 4);
77		2746	h->ct_type = 0;
78
79	✗✓	2746	if (h->pic_struct > H264_SEI_PIC_STRUCT_FRAME_TRIPLING)
80			return AVERROR_INVALIDDATA;
81
82		2746	num_clock_ts = sei_num_clock_ts_table[h->pic_struct];
83		2746	h->timecode_cnt = 0;
84	✓✓	7446	for (i = 0; i < num_clock_ts; i++) {
85	✓✓	4700	if (get_bits(&gb, 1)) { /* clock_timestamp_flag */
86		1552	H264SEITimeCode *tc = &h->timecode[h->timecode_cnt++];
87			unsigned int full_timestamp_flag;
88			unsigned int counting_type, cnt_dropped_flag;
89		1552	h->ct_type \|= 1 << get_bits(&gb, 2);
90		1552	skip_bits(&gb, 1); /* nuit_field_based_flag */
91		1552	counting_type = get_bits(&gb, 5); /* counting_type */
92		1552	full_timestamp_flag = get_bits(&gb, 1);
93		1552	skip_bits(&gb, 1); /* discontinuity_flag */
94		1552	cnt_dropped_flag = get_bits(&gb, 1); /* cnt_dropped_flag */
95	✗✓✗✗ ✗✗	1552	if (cnt_dropped_flag && counting_type > 1 && counting_type < 7)
96			tc->dropframe = 1;
97		1552	tc->frame = get_bits(&gb, 8); /* n_frames */
98	✓✓	1552	if (full_timestamp_flag) {
99		1202	tc->full = 1;
100		1202	tc->seconds = get_bits(&gb, 6); /* seconds_value 0..59 */
101		1202	tc->minutes = get_bits(&gb, 6); /* minutes_value 0..59 */
102		1202	tc->hours = get_bits(&gb, 5); /* hours_value 0..23 */
103			} else {
104		350	tc->seconds = tc->minutes = tc->hours = tc->full = 0;
105	✓✓	350	if (get_bits(&gb, 1)) { /* seconds_flag */
106		81	tc->seconds = get_bits(&gb, 6);
107	✗✓	81	if (get_bits(&gb, 1)) { /* minutes_flag */
108			tc->minutes = get_bits(&gb, 6);
109			if (get_bits(&gb, 1)) /* hours_flag */
110			tc->hours = get_bits(&gb, 5);
111			}
112			}
113			}
114
115	✓✗	1552	if (sps->time_offset_length > 0)
116		1552	skip_bits(&gb,
117			sps->time_offset_length); /* time_offset */
118			}
119			}
120
121		2746	av_log(logctx, AV_LOG_DEBUG, "ct_type:%X pic_struct:%d\n",
122		2746	h->ct_type, h->pic_struct);
123			}
124
125		2766	return 0;
126			}
127
128		3412	static int decode_picture_timing(H264SEIPictureTiming h, GetBitContext gb,
129			void *logctx)
130			{
131		3412	int index = get_bits_count(gb);
132		3412	int size_bits = get_bits_left(gb);
133		3412	int size = (size_bits + 7) / 8;
134
135	✗✓	3412	if (index & 7) {
136			av_log(logctx, AV_LOG_ERROR, "Unaligned SEI payload\n");
137			return AVERROR_INVALIDDATA;
138			}
139	✗✓	3412	if (size > sizeof(h->payload)) {
140			av_log(logctx, AV_LOG_ERROR, "Picture timing SEI payload too large\n");
141			return AVERROR_INVALIDDATA;
142			}
143		3412	memcpy(h->payload, gb->buffer + index / 8, size);
144
145		3412	h->payload_size_bits = size_bits;
146
147		3412	h->present = 1;
148		3412	return 0;
149			}
150
151		639	static int decode_registered_user_data_afd(H264SEIAFD h, GetBitContext gb, int size)
152			{
153			int flag;
154
155	✗✓	639	if (size-- < 1)
156			return AVERROR_INVALIDDATA;
157		639	skip_bits(gb, 1); // 0
158		639	flag = get_bits(gb, 1); // active_format_flag
159		639	skip_bits(gb, 6); // reserved
160
161	✓✗	639	if (flag) {
162	✗✓	639	if (size-- < 1)
163			return AVERROR_INVALIDDATA;
164		639	skip_bits(gb, 4); // reserved
165		639	h->active_format_description = get_bits(gb, 4);
166		639	h->present = 1;
167			}
168
169		639	return 0;
170			}
171
172		6	static int decode_registered_user_data_closed_caption(H264SEIA53Caption *h,
173			GetBitContext gb, void logctx,
174			int size)
175			{
176			int flag;
177			int user_data_type_code;
178			int cc_count;
179
180	✗✓	6	if (size < 3)
181			return AVERROR(EINVAL);
182
183		6	user_data_type_code = get_bits(gb, 8);
184	✓✗	6	if (user_data_type_code == 0x3) {
185		6	skip_bits(gb, 1); // reserved
186
187		6	flag = get_bits(gb, 1); // process_cc_data_flag
188	✓✗	6	if (flag) {
189		6	skip_bits(gb, 1); // zero bit
190		6	cc_count = get_bits(gb, 5);
191		6	skip_bits(gb, 8); // reserved
192		6	size -= 2;
193
194	✓✗✓✗	6	if (cc_count && size >= cc_count * 3) {
195	✗✓	6	int old_size = h->buf_ref ? h->buf_ref->size : 0;
196		6	const uint64_t new_size = (old_size + cc_count
197		6	* UINT64_C(3));
198			int i, ret;
199
200	✗✓	6	if (new_size > INT_MAX)
201			return AVERROR(EINVAL);
202
203			/* Allow merging of the cc data from two fields. */
204		6	ret = av_buffer_realloc(&h->buf_ref, new_size);
205	✗✓	6	if (ret < 0)
206			return ret;
207
208			/* Use of av_buffer_realloc assumes buffer is writeable */
209	✓✓	19	for (i = 0; i < cc_count; i++) {
210		13	h->buf_ref->data[old_size++] = get_bits(gb, 8);
211		13	h->buf_ref->data[old_size++] = get_bits(gb, 8);
212		13	h->buf_ref->data[old_size++] = get_bits(gb, 8);
213			}
214
215		6	skip_bits(gb, 8); // marker_bits
216			}
217			}
218			} else {
219			int i;
220			for (i = 0; i < size - 1; i++)
221			skip_bits(gb, 8);
222			}
223
224		6	return 0;
225			}
226
227		645	static int decode_registered_user_data(H264SEIContext h, GetBitContext gb,
228			void *logctx, int size)
229			{
230			uint32_t country_code;
231			uint32_t user_identifier;
232
233	✗✓	645	if (size < 7)
234			return AVERROR_INVALIDDATA;
235		645	size -= 7;
236
237		645	country_code = get_bits(gb, 8); // itu_t_t35_country_code
238	✗✓	645	if (country_code == 0xFF) {
239			skip_bits(gb, 8); // itu_t_t35_country_code_extension_byte
240			size--;
241			}
242
243			/* itu_t_t35_payload_byte follows */
244		645	skip_bits(gb, 8); // terminal provider code
245		645	skip_bits(gb, 8); // terminal provider oriented code
246		645	user_identifier = get_bits_long(gb, 32);
247
248	✓✓✗	645	switch (user_identifier) {
249		639	case MKBETAG('D', 'T', 'G', '1'): // afd_data
250		639	return decode_registered_user_data_afd(&h->afd, gb, size);
251		6	case MKBETAG('G', 'A', '9', '4'): // closed captions
252		6	return decode_registered_user_data_closed_caption(&h->a53_caption, gb,
253			logctx, size);
254			default:
255			skip_bits(gb, size * 8);
256			break;
257			}
258
259			return 0;
260			}
261
262		248	static int decode_unregistered_user_data(H264SEIUnregistered h, GetBitContext gb,
263			void *logctx, int size)
264			{
265			uint8_t *user_data;
266			int e, build, i;
267			AVBufferRef buf_ref, *tmp;
268
269	✓✗✗✓	248	if (size < 16 \|\| size >= INT_MAX - 1)
270			return AVERROR_INVALIDDATA;
271
272		248	tmp = av_realloc_array(h->buf_ref, h->nb_buf_ref + 1, sizeof(*h->buf_ref));
273	✗✓	248	if (!tmp)
274			return AVERROR(ENOMEM);
275		248	h->buf_ref = tmp;
276
277		248	buf_ref = av_buffer_alloc(size + 1);
278	✗✓	248	if (!buf_ref)
279			return AVERROR(ENOMEM);
280		248	user_data = buf_ref->data;
281
282	✓✓	52451	for (i = 0; i < size; i++)
283		52203	user_data[i] = get_bits(gb, 8);
284
285		248	user_data[i] = 0;
286		248	buf_ref->size = size;
287		248	h->buf_ref[h->nb_buf_ref++] = buf_ref;
288
289		248	e = sscanf(user_data + 16, "x264 - core %d", &build);
290	✓✓✓✓	248	if (e == 1 && build > 0)
291		77	h->x264_build = build;
292	✓✓✗✓ ✗✗	248	if (e == 1 && build == 1 && !strncmp(user_data+16, "x264 - core 0000", 16))
293			h->x264_build = 67;
294
295		248	return 0;
296			}
297
298		63	static int decode_recovery_point(H264SEIRecoveryPoint h, GetBitContext gb, void *logctx)
299			{
300		63	unsigned recovery_frame_cnt = get_ue_golomb_long(gb);
301
302	✗✓	63	if (recovery_frame_cnt >= (1<<MAX_LOG2_MAX_FRAME_NUM)) {
303			av_log(logctx, AV_LOG_ERROR, "recovery_frame_cnt %u is out of range\n", recovery_frame_cnt);
304			return AVERROR_INVALIDDATA;
305			}
306
307		63	h->recovery_frame_cnt = recovery_frame_cnt;
308			/* 1b exact_match_flag,
309			* 1b broken_link_flag,
310			* 2b changing_slice_group_idc */
311		63	skip_bits(gb, 4);
312
313		63	return 0;
314			}
315
316		736	static int decode_buffering_period(H264SEIBufferingPeriod h, GetBitContext gb,
317			const H264ParamSets ps, void logctx)
318			{
319			unsigned int sps_id;
320			int sched_sel_idx;
321			const SPS *sps;
322
323		736	sps_id = get_ue_golomb_31(gb);
324	✓✗✓✓	736	if (sps_id > 31 \|\| !ps->sps_list[sps_id]) {
325		4	av_log(logctx, AV_LOG_ERROR,
326			"non-existing SPS %d referenced in buffering period\n", sps_id);
327	✗✓	4	return sps_id > 31 ? AVERROR_INVALIDDATA : AVERROR_PS_NOT_FOUND;
328			}
329		732	sps = (const SPS*)ps->sps_list[sps_id]->data;
330
331			// NOTE: This is really so duplicated in the standard... See H.264, D.1.1
332	✓✓	732	if (sps->nal_hrd_parameters_present_flag) {
333	✓✓	586	for (sched_sel_idx = 0; sched_sel_idx < sps->cpb_cnt; sched_sel_idx++) {
334		293	h->initial_cpb_removal_delay[sched_sel_idx] =
335		293	get_bits_long(gb, sps->initial_cpb_removal_delay_length);
336			// initial_cpb_removal_delay_offset
337		293	skip_bits(gb, sps->initial_cpb_removal_delay_length);
338			}
339			}
340	✓✓	732	if (sps->vcl_hrd_parameters_present_flag) {
341	✓✓	360	for (sched_sel_idx = 0; sched_sel_idx < sps->cpb_cnt; sched_sel_idx++) {
342		180	h->initial_cpb_removal_delay[sched_sel_idx] =
343		180	get_bits_long(gb, sps->initial_cpb_removal_delay_length);
344			// initial_cpb_removal_delay_offset
345		180	skip_bits(gb, sps->initial_cpb_removal_delay_length);
346			}
347			}
348
349		732	h->present = 1;
350		732	return 0;
351			}
352
353			static int decode_frame_packing_arrangement(H264SEIFramePacking *h,
354			GetBitContext *gb)
355			{
356			h->arrangement_id = get_ue_golomb_long(gb);
357			h->arrangement_cancel_flag = get_bits1(gb);
358			h->present = !h->arrangement_cancel_flag;
359
360			if (h->present) {
361			h->arrangement_type = get_bits(gb, 7);
362			h->quincunx_sampling_flag = get_bits1(gb);
363			h->content_interpretation_type = get_bits(gb, 6);
364
365			// spatial_flipping_flag, frame0_flipped_flag, field_views_flag
366			skip_bits(gb, 3);
367			h->current_frame_is_frame0_flag = get_bits1(gb);
368			// frame0_self_contained_flag, frame1_self_contained_flag
369			skip_bits(gb, 2);
370
371			if (!h->quincunx_sampling_flag && h->arrangement_type != 5)
372			skip_bits(gb, 16); // frame[01]_grid_position_[xy]
373			skip_bits(gb, 8); // frame_packing_arrangement_reserved_byte
374			h->arrangement_repetition_period = get_ue_golomb_long(gb);
375			}
376			skip_bits1(gb); // frame_packing_arrangement_extension_flag
377
378			return 0;
379			}
380
381		2	static int decode_display_orientation(H264SEIDisplayOrientation *h,
382			GetBitContext *gb)
383			{
384		2	h->present = !get_bits1(gb);
385
386	✓✗	2	if (h->present) {
387		2	h->hflip = get_bits1(gb); // hor_flip
388		2	h->vflip = get_bits1(gb); // ver_flip
389
390		2	h->anticlockwise_rotation = get_bits(gb, 16);
391		2	get_ue_golomb_long(gb); // display_orientation_repetition_period
392		2	skip_bits1(gb); // display_orientation_extension_flag
393			}
394
395		2	return 0;
396			}
397
398			static int decode_green_metadata(H264SEIGreenMetaData h, GetBitContext gb)
399			{
400			h->green_metadata_type = get_bits(gb, 8);
401
402			if (h->green_metadata_type == 0) {
403			h->period_type = get_bits(gb, 8);
404
405			if (h->period_type == 2)
406			h->num_seconds = get_bits(gb, 16);
407			else if (h->period_type == 3)
408			h->num_pictures = get_bits(gb, 16);
409
410			h->percent_non_zero_macroblocks = get_bits(gb, 8);
411			h->percent_intra_coded_macroblocks = get_bits(gb, 8);
412			h->percent_six_tap_filtering = get_bits(gb, 8);
413			h->percent_alpha_point_deblocking_instance = get_bits(gb, 8);
414
415			} else if (h->green_metadata_type == 1) {
416			h->xsd_metric_type = get_bits(gb, 8);
417			h->xsd_metric_value = get_bits(gb, 16);
418			}
419
420			return 0;
421			}
422
423			static int decode_alternative_transfer(H264SEIAlternativeTransfer *h,
424			GetBitContext *gb)
425			{
426			h->present = 1;
427			h->preferred_transfer_characteristics = get_bits(gb, 8);
428			return 0;
429			}
430
431		4047	int ff_h264_sei_decode(H264SEIContext h, GetBitContext gb,
432			const H264ParamSets ps, void logctx)
433			{
434		4047	int master_ret = 0;
435
436	✓✓✓✓	9404	while (get_bits_left(gb) > 16 && show_bits(gb, 16)) {
437			GetBitContext gb_payload;
438		5364	int type = 0;
439		5364	unsigned size = 0;
440		5364	int ret = 0;
441
442			do {
443	✗✓	5388	if (get_bits_left(gb) < 8)
444		7	return AVERROR_INVALIDDATA;
445		5388	type += show_bits(gb, 8);
446	✓✓	5388	} while (get_bits(gb, 8) == 255);
447
448			do {
449	✗✓	5520	if (get_bits_left(gb) < 8)
450			return AVERROR_INVALIDDATA;
451		5520	size += show_bits(gb, 8);
452	✓✓	5520	} while (get_bits(gb, 8) == 255);
453
454	✓✓	5364	if (size > get_bits_left(gb) / 8) {
455		7	av_log(logctx, AV_LOG_ERROR, "SEI type %d size %d truncated at %d\n",
456			type, 8*size, get_bits_left(gb));
457		7	return AVERROR_INVALIDDATA;
458			}
459
460		5357	ret = init_get_bits8(&gb_payload, gb->buffer + get_bits_count(gb) / 8, size);
461	✗✓	5357	if (ret < 0)
462			return ret;
463
464	✓✓✓✓ ✓✗✓✗ ✗✓	5357	switch (type) {
465		3412	case H264_SEI_TYPE_PIC_TIMING: // Picture timing SEI
466		3412	ret = decode_picture_timing(&h->picture_timing, &gb_payload, logctx);
467		3412	break;
468		645	case H264_SEI_TYPE_USER_DATA_REGISTERED:
469		645	ret = decode_registered_user_data(h, &gb_payload, logctx, size);
470		645	break;
471		248	case H264_SEI_TYPE_USER_DATA_UNREGISTERED:
472		248	ret = decode_unregistered_user_data(&h->unregistered, &gb_payload, logctx, size);
473		248	break;
474		63	case H264_SEI_TYPE_RECOVERY_POINT:
475		63	ret = decode_recovery_point(&h->recovery_point, &gb_payload, logctx);
476		63	break;
477		736	case H264_SEI_TYPE_BUFFERING_PERIOD:
478		736	ret = decode_buffering_period(&h->buffering_period, &gb_payload, ps, logctx);
479		736	break;
480			case H264_SEI_TYPE_FRAME_PACKING:
481			ret = decode_frame_packing_arrangement(&h->frame_packing, &gb_payload);
482			break;
483		2	case H264_SEI_TYPE_DISPLAY_ORIENTATION:
484		2	ret = decode_display_orientation(&h->display_orientation, &gb_payload);
485		2	break;
486			case H264_SEI_TYPE_GREEN_METADATA:
487			ret = decode_green_metadata(&h->green_metadata, &gb_payload);
488			break;
489			case H264_SEI_TYPE_ALTERNATIVE_TRANSFER:
490			ret = decode_alternative_transfer(&h->alternative_transfer, &gb_payload);
491			break;
492		251	default:
493		251	av_log(logctx, AV_LOG_DEBUG, "unknown SEI type %d\n", type);
494			}
495	✓✓✗✓	5357	if (ret < 0 && ret != AVERROR_PS_NOT_FOUND)
496			return ret;
497	✓✓	5357	if (ret < 0)
498		4	master_ret = ret;
499
500	✓✓	5357	if (get_bits_left(&gb_payload) < 0) {
501		2	av_log(logctx, AV_LOG_WARNING, "SEI type %d overread by %d bits\n",
502		2	type, -get_bits_left(&gb_payload));
503			}
504
505		5357	skip_bits_long(gb, 8 * size);
506			}
507
508		4040	return master_ret;
509			}
510
511		22292	const char ff_h264_sei_stereo_mode(const H264SEIFramePacking h)
512			{
513	✗✓	22292	if (h->arrangement_cancel_flag == 0) {
514			switch (h->arrangement_type) {
515			case H264_SEI_FPA_TYPE_CHECKERBOARD:
516			if (h->content_interpretation_type == 2)
517			return "checkerboard_rl";
518			else
519			return "checkerboard_lr";
520			case H264_SEI_FPA_TYPE_INTERLEAVE_COLUMN:
521			if (h->content_interpretation_type == 2)
522			return "col_interleaved_rl";
523			else
524			return "col_interleaved_lr";
525			case H264_SEI_FPA_TYPE_INTERLEAVE_ROW:
526			if (h->content_interpretation_type == 2)
527			return "row_interleaved_rl";
528			else
529			return "row_interleaved_lr";
530			case H264_SEI_FPA_TYPE_SIDE_BY_SIDE:
531			if (h->content_interpretation_type == 2)
532			return "right_left";
533			else
534			return "left_right";
535			case H264_SEI_FPA_TYPE_TOP_BOTTOM:
536			if (h->content_interpretation_type == 2)
537			return "bottom_top";
538			else
539			return "top_bottom";
540			case H264_SEI_FPA_TYPE_INTERLEAVE_TEMPORAL:
541			if (h->content_interpretation_type == 2)
542			return "block_rl";
543			else
544			return "block_lr";
545			case H264_SEI_FPA_TYPE_2D:
546			default:
547			return "mono";
548			}
549	✗✓	22292	} else if (h->arrangement_cancel_flag == 1) {
550			return "mono";
551			} else {
552		22292	return NULL;
553			}
554			}