Head

GCC Code Coverage Report

Directory:	../../../ffmpeg/		Exec	Total	Coverage
File:	src/libavcodec/msrledec.c	Lines:	109	150	72.7 %
Date:	2020-01-28 04:56:05	Branches:	68	100	68.0 %


/*
 * Microsoft RLE decoder
 * Copyright (C) 2008 Konstantin Shishkov
 *
 * This file is part of FFmpeg.
 *
 * FFmpeg is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * FFmpeg is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with FFmpeg; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
 */

/**
 * @file
 * MS RLE decoder based on decoder by Mike Melanson and my own for TSCC
 * For more information about the MS RLE format, visit:
 *   http://www.multimedia.cx/msrle.txt
 */

#include "libavutil/intreadwrite.h"
#include "avcodec.h"
#include "msrledec.h"

static int msrle_decode_pal4(AVCodecContext *avctx, AVFrame *pic,
                             GetByteContext *gb)
{
    unsigned char rle_code;
    unsigned char extra_byte, odd_pixel;
    unsigned char stream_byte;
    int pixel_ptr = 0;
    int line = avctx->height - 1;
    int i;

    while (line >= 0 && pixel_ptr <= avctx->width) {
        if (bytestream2_get_bytes_left(gb) <= 0) {
            av_log(avctx, AV_LOG_ERROR,
                   "MS RLE: bytestream overrun, %dx%d left\n",
                   avctx->width - pixel_ptr, line);
            return AVERROR_INVALIDDATA;
        }
        rle_code = stream_byte = bytestream2_get_byteu(gb);
        if (rle_code == 0) {
            /* fetch the next byte to see how to handle escape code */
            stream_byte = bytestream2_get_byte(gb);
            if (stream_byte == 0) {
                /* line is done, goto the next one */
                line--;
                pixel_ptr = 0;
            } else if (stream_byte == 1) {
                /* decode is done */
                return 0;
            } else if (stream_byte == 2) {
                /* reposition frame decode coordinates */
                stream_byte = bytestream2_get_byte(gb);
                pixel_ptr += stream_byte;
                stream_byte = bytestream2_get_byte(gb);
                line -= stream_byte;
            } else {
                // copy pixels from encoded stream
                odd_pixel =  stream_byte & 1;
                rle_code = (stream_byte + 1) / 2;
                extra_byte = rle_code & 0x01;
                if (pixel_ptr + 2*rle_code - odd_pixel > avctx->width ||
                    bytestream2_get_bytes_left(gb) < rle_code) {
                    av_log(avctx, AV_LOG_ERROR,
                           "MS RLE: frame/stream ptr just went out of bounds (copy)\n");
                    return AVERROR_INVALIDDATA;
                }

                for (i = 0; i < rle_code; i++) {
                    if (pixel_ptr >= avctx->width)
                        break;
                    stream_byte = bytestream2_get_byteu(gb);
                    pic->data[0][line * pic->linesize[0] + pixel_ptr] = stream_byte >> 4;
                    pixel_ptr++;
                    if (i + 1 == rle_code && odd_pixel)
                        break;
                    if (pixel_ptr >= avctx->width)
                        break;
                    pic->data[0][line * pic->linesize[0] + pixel_ptr] = stream_byte & 0x0F;
                    pixel_ptr++;
                }

                // if the RLE code is odd, skip a byte in the stream
                if (extra_byte)
                    bytestream2_skip(gb, 1);
            }
        } else {
            // decode a run of data
            if (pixel_ptr + rle_code > avctx->width + 1) {
                av_log(avctx, AV_LOG_ERROR,
                       "MS RLE: frame ptr just went out of bounds (run) %d %d %d\n", pixel_ptr, rle_code, avctx->width);
                return AVERROR_INVALIDDATA;
            }
            stream_byte = bytestream2_get_byte(gb);
            for (i = 0; i < rle_code; i++) {
                if (pixel_ptr >= avctx->width)
                    break;
                if ((i & 1) == 0)
                    pic->data[0][line * pic->linesize[0] + pixel_ptr] = stream_byte >> 4;
                else
                    pic->data[0][line * pic->linesize[0] + pixel_ptr] = stream_byte & 0x0F;
                pixel_ptr++;
            }
        }
    }

    /* one last sanity check on the way out */
    if (bytestream2_get_bytes_left(gb)) {
        av_log(avctx, AV_LOG_ERROR,
               "MS RLE: ended frame decode with %d bytes left over\n",
               bytestream2_get_bytes_left(gb));
        return AVERROR_INVALIDDATA;
    }

    return 0;
}


static int msrle_decode_8_16_24_32(AVCodecContext *avctx, AVFrame *pic,
                                   int depth, GetByteContext *gb)
{
    uint8_t *output, *output_end;
    int p1, p2, line=avctx->height - 1, pos=0, i;
    uint16_t pix16;
    uint32_t pix32;
    unsigned int width= FFABS(pic->linesize[0]) / (depth >> 3);

    output     = pic->data[0] + (avctx->height - 1) * pic->linesize[0];
    output_end = output + FFABS(pic->linesize[0]);

    while (bytestream2_get_bytes_left(gb) > 0) {
        p1 = bytestream2_get_byteu(gb);
        if(p1 == 0) { //Escape code
            p2 = bytestream2_get_byte(gb);
            if(p2 == 0) { //End-of-line
                if (--line < 0) {
                    if (bytestream2_get_be16(gb) == 1) { // end-of-picture
                        return 0;
                    } else {
                        av_log(avctx, AV_LOG_ERROR,
                               "Next line is beyond picture bounds (%d bytes left)\n",
                               bytestream2_get_bytes_left(gb));
                        return AVERROR_INVALIDDATA;
                    }
                }
                output = pic->data[0] + line * pic->linesize[0];
                output_end = output + FFABS(pic->linesize[0]);
                pos = 0;
                continue;
            } else if(p2 == 1) { //End-of-picture
                return 0;
            } else if(p2 == 2) { //Skip
                p1 = bytestream2_get_byte(gb);
                p2 = bytestream2_get_byte(gb);
                line -= p2;
                pos += p1;
                if (line < 0 || pos >= width){
                    av_log(avctx, AV_LOG_ERROR, "Skip beyond picture bounds\n");
                    return -1;
                }
                output = pic->data[0] + line * pic->linesize[0] + pos * (depth >> 3);
                output_end = pic->data[0] + line * pic->linesize[0] + FFABS(pic->linesize[0]);
                continue;
            }
            // Copy data
            if (output + p2 * (depth >> 3) > output_end) {
                bytestream2_skip(gb, 2 * (depth >> 3));
                continue;
            } else if (bytestream2_get_bytes_left(gb) < p2 * (depth >> 3)) {
                av_log(avctx, AV_LOG_ERROR, "bytestream overrun\n");
                return AVERROR_INVALIDDATA;
            }

            if ((depth == 8) || (depth == 24)) {
                bytestream2_get_bufferu(gb, output, p2 * (depth >> 3));
                output += p2 * (depth >> 3);

                // RLE8 copy is actually padded - and runs are not!
                if(depth == 8 && (p2 & 1)) {
                    bytestream2_skip(gb, 1);
                }
            } else if (depth == 16) {
                for(i = 0; i < p2; i++) {
                    *(uint16_t*)output = bytestream2_get_le16u(gb);
                    output += 2;
                }
            } else if (depth == 32) {
                for(i = 0; i < p2; i++) {
                    *(uint32_t*)output = bytestream2_get_le32u(gb);
                    output += 4;
                }
            }
            pos += p2;
        } else { //run of pixels
            uint8_t pix[3]; //original pixel
            if (output + p1 * (depth >> 3) > output_end)
                continue;

            switch(depth){
            case  8:
                pix[0] = bytestream2_get_byte(gb);
                memset(output, pix[0], p1);
                output += p1;
                break;
            case 16:
                pix16  = bytestream2_get_le16(gb);
                for(i = 0; i < p1; i++) {
                        *(uint16_t*)output = pix16;
                        output += 2;
                }
                break;
            case 24:
                pix[0] = bytestream2_get_byte(gb);
                pix[1] = bytestream2_get_byte(gb);
                pix[2] = bytestream2_get_byte(gb);
                for(i = 0; i < p1; i++) {
                        *output++ = pix[0];
                        *output++ = pix[1];
                        *output++ = pix[2];
                }
                break;
            case 32:
                pix32  = bytestream2_get_le32(gb);
                for(i = 0; i < p1; i++) {
                        *(uint32_t*)output = pix32;
                        output += 4;
                }
                break;
            }
            pos += p1;
        }
    }

    av_log(avctx, AV_LOG_WARNING, "MS RLE warning: no end-of-picture code\n");
    return 0;
}


int ff_msrle_decode(AVCodecContext *avctx, AVFrame *pic,
                    int depth, GetByteContext *gb)
{
    switch(depth){
    case  4:
        return msrle_decode_pal4(avctx, pic, gb);
    case  8:
    case 16:
    case 24:
    case 32:
        return msrle_decode_8_16_24_32(avctx, pic, depth, gb);
    default:
        av_log(avctx, AV_LOG_ERROR, "Unknown depth %d\n", depth);
        return -1;
    }
}


Generated by: GCOVR (Version 4.1)

Line	Branch	Exec	Source
1			/*
2			* Microsoft RLE decoder
3			* Copyright (C) 2008 Konstantin Shishkov
4			*
5			* This file is part of FFmpeg.
6			*
7			* FFmpeg is free software; you can redistribute it and/or
8			* modify it under the terms of the GNU Lesser General Public
9			* License as published by the Free Software Foundation; either
10			* version 2.1 of the License, or (at your option) any later version.
11			*
12			* FFmpeg is distributed in the hope that it will be useful,
13			* but WITHOUT ANY WARRANTY; without even the implied warranty of
14			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15			* Lesser General Public License for more details.
16			*
17			* You should have received a copy of the GNU Lesser General Public
18			* License along with FFmpeg; if not, write to the Free Software
19			* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20			*/
21
22			/**
23			* @file
24			* MS RLE decoder based on decoder by Mike Melanson and my own for TSCC
25			* For more information about the MS RLE format, visit:
26			* http://www.multimedia.cx/msrle.txt
27			*/
28
29			#include "libavutil/intreadwrite.h"
30			#include "avcodec.h"
31			#include "msrledec.h"
32
33		2	static int msrle_decode_pal4(AVCodecContext avctx, AVFrame pic,
34			GetByteContext *gb)
35			{
36			unsigned char rle_code;
37			unsigned char extra_byte, odd_pixel;
38			unsigned char stream_byte;
39		2	int pixel_ptr = 0;
40		2	int line = avctx->height - 1;
41			int i;
42
43	✓✗✓✗	754	while (line >= 0 && pixel_ptr <= avctx->width) {
44	✗✓	754	if (bytestream2_get_bytes_left(gb) <= 0) {
45			av_log(avctx, AV_LOG_ERROR,
46			"MS RLE: bytestream overrun, %dx%d left\n",
47			avctx->width - pixel_ptr, line);
48			return AVERROR_INVALIDDATA;
49			}
50		754	rle_code = stream_byte = bytestream2_get_byteu(gb);
51	✓✓	754	if (rle_code == 0) {
52			/* fetch the next byte to see how to handle escape code */
53		138	stream_byte = bytestream2_get_byte(gb);
54	✓✓	138	if (stream_byte == 0) {
55			/* line is done, goto the next one */
56		126	line--;
57		126	pixel_ptr = 0;
58	✓✓	12	} else if (stream_byte == 1) {
59			/* decode is done */
60		2	return 0;
61	✗✓	10	} else if (stream_byte == 2) {
62			/* reposition frame decode coordinates */
63			stream_byte = bytestream2_get_byte(gb);
64			pixel_ptr += stream_byte;
65			stream_byte = bytestream2_get_byte(gb);
66			line -= stream_byte;
67			} else {
68			// copy pixels from encoded stream
69		10	odd_pixel = stream_byte & 1;
70		10	rle_code = (stream_byte + 1) / 2;
71		10	extra_byte = rle_code & 0x01;
72	✓✗	10	if (pixel_ptr + 2*rle_code - odd_pixel > avctx->width \|\|
73	✗✓	10	bytestream2_get_bytes_left(gb) < rle_code) {
74			av_log(avctx, AV_LOG_ERROR,
75			"MS RLE: frame/stream ptr just went out of bounds (copy)\n");
76			return AVERROR_INVALIDDATA;
77			}
78
79	✓✓	100	for (i = 0; i < rle_code; i++) {
80	✗✓	90	if (pixel_ptr >= avctx->width)
81			break;
82		90	stream_byte = bytestream2_get_byteu(gb);
83		90	pic->data[0][line * pic->linesize[0] + pixel_ptr] = stream_byte >> 4;
84		90	pixel_ptr++;
85	✓✓✗✓	90	if (i + 1 == rle_code && odd_pixel)
86			break;
87	✗✓	90	if (pixel_ptr >= avctx->width)
88			break;
89		90	pic->data[0][line * pic->linesize[0] + pixel_ptr] = stream_byte & 0x0F;
90		90	pixel_ptr++;
91			}
92
93			// if the RLE code is odd, skip a byte in the stream
94	✓✗	10	if (extra_byte)
95		10	bytestream2_skip(gb, 1);
96			}
97			} else {
98			// decode a run of data
99	✗✓	616	if (pixel_ptr + rle_code > avctx->width + 1) {
100			av_log(avctx, AV_LOG_ERROR,
101			"MS RLE: frame ptr just went out of bounds (run) %d %d %d\n", pixel_ptr, rle_code, avctx->width);
102			return AVERROR_INVALIDDATA;
103			}
104		616	stream_byte = bytestream2_get_byte(gb);
105	✓✓	16692	for (i = 0; i < rle_code; i++) {
106	✓✓	16204	if (pixel_ptr >= avctx->width)
107		128	break;
108	✓✓	16076	if ((i & 1) == 0)
109		8102	pic->data[0][line * pic->linesize[0] + pixel_ptr] = stream_byte >> 4;
110			else
111		7974	pic->data[0][line * pic->linesize[0] + pixel_ptr] = stream_byte & 0x0F;
112		16076	pixel_ptr++;
113			}
114			}
115			}
116
117			/* one last sanity check on the way out */
118			if (bytestream2_get_bytes_left(gb)) {
119			av_log(avctx, AV_LOG_ERROR,
120			"MS RLE: ended frame decode with %d bytes left over\n",
121			bytestream2_get_bytes_left(gb));
122			return AVERROR_INVALIDDATA;
123			}
124
125			return 0;
126			}
127
128
129		178	static int msrle_decode_8_16_24_32(AVCodecContext avctx, AVFrame pic,
130			int depth, GetByteContext *gb)
131			{
132			uint8_t output, output_end;
133		178	int p1, p2, line=avctx->height - 1, pos=0, i;
134			uint16_t pix16;
135			uint32_t pix32;
136		178	unsigned int width= FFABS(pic->linesize[0]) / (depth >> 3);
137
138		178	output = pic->data[0] + (avctx->height - 1) * pic->linesize[0];
139	✓✗	178	output_end = output + FFABS(pic->linesize[0]);
140
141	✓✗	130532	while (bytestream2_get_bytes_left(gb) > 0) {
142		130532	p1 = bytestream2_get_byteu(gb);
143	✓✓	130532	if(p1 == 0) { //Escape code
144		58128	p2 = bytestream2_get_byte(gb);
145	✓✓	58128	if(p2 == 0) { //End-of-line
146	✗✓	9220	if (--line < 0) {
147			if (bytestream2_get_be16(gb) == 1) { // end-of-picture
148			return 0;
149			} else {
150			av_log(avctx, AV_LOG_ERROR,
151			"Next line is beyond picture bounds (%d bytes left)\n",
152			bytestream2_get_bytes_left(gb));
153			return AVERROR_INVALIDDATA;
154			}
155			}
156		9220	output = pic->data[0] + line * pic->linesize[0];
157	✓✗	9220	output_end = output + FFABS(pic->linesize[0]);
158		9220	pos = 0;
159		9220	continue;
160	✓✓	48908	} else if(p2 == 1) { //End-of-picture
161		177	return 0;
162	✓✓	48731	} else if(p2 == 2) { //Skip
163		13943	p1 = bytestream2_get_byte(gb);
164		13943	p2 = bytestream2_get_byte(gb);
165		13943	line -= p2;
166		13943	pos += p1;
167	✓✗✗✓	13943	if (line < 0 \|\| pos >= width){
168			av_log(avctx, AV_LOG_ERROR, "Skip beyond picture bounds\n");
169			return -1;
170			}
171		13943	output = pic->data[0] + line * pic->linesize[0] + pos * (depth >> 3);
172	✓✗	13943	output_end = pic->data[0] + line * pic->linesize[0] + FFABS(pic->linesize[0]);
173		13943	continue;
174			}
175			// Copy data
176	✗✓	34788	if (output + p2 * (depth >> 3) > output_end) {
177			bytestream2_skip(gb, 2 * (depth >> 3));
178			continue;
179	✓✓	34788	} else if (bytestream2_get_bytes_left(gb) < p2 * (depth >> 3)) {
180		1	av_log(avctx, AV_LOG_ERROR, "bytestream overrun\n");
181		1	return AVERROR_INVALIDDATA;
182			}
183
184	✓✓✗✓	34787	if ((depth == 8) \|\| (depth == 24)) {
185		9473	bytestream2_get_bufferu(gb, output, p2 * (depth >> 3));
186		9473	output += p2 * (depth >> 3);
187
188			// RLE8 copy is actually padded - and runs are not!
189	✓✗✓✓	9473	if(depth == 8 && (p2 & 1)) {
190		7144	bytestream2_skip(gb, 1);
191			}
192	✓✓	25314	} else if (depth == 16) {
193	✓✓	59976	for(i = 0; i < p2; i++) {
194		52629	(uint16_t)output = bytestream2_get_le16u(gb);
195		52629	output += 2;
196			}
197	✓✗	17967	} else if (depth == 32) {
198	✓✓	165584	for(i = 0; i < p2; i++) {
199		147617	(uint32_t)output = bytestream2_get_le32u(gb);
200		147617	output += 4;
201			}
202			}
203		34787	pos += p2;
204			} else { //run of pixels
205			uint8_t pix[3]; //original pixel
206	✗✓	72404	if (output + p1 * (depth >> 3) > output_end)
207			continue;
208
209	✓✓✗✓ ✗	72404	switch(depth){
210		11494	case 8:
211		11494	pix[0] = bytestream2_get_byte(gb);
212		11494	memset(output, pix[0], p1);
213		11494	output += p1;
214		11494	break;
215		14196	case 16:
216		14196	pix16 = bytestream2_get_le16(gb);
217	✓✓	715555	for(i = 0; i < p1; i++) {
218		701359	(uint16_t)output = pix16;
219		701359	output += 2;
220			}
221		14196	break;
222			case 24:
223			pix[0] = bytestream2_get_byte(gb);
224			pix[1] = bytestream2_get_byte(gb);
225			pix[2] = bytestream2_get_byte(gb);
226			for(i = 0; i < p1; i++) {
227			*output++ = pix[0];
228			*output++ = pix[1];
229			*output++ = pix[2];
230			}
231			break;
232		46714	case 32:
233		46714	pix32 = bytestream2_get_le32(gb);
234	✓✓	1616545	for(i = 0; i < p1; i++) {
235		1569831	(uint32_t)output = pix32;
236		1569831	output += 4;
237			}
238		46714	break;
239			}
240		72404	pos += p1;
241			}
242			}
243
244			av_log(avctx, AV_LOG_WARNING, "MS RLE warning: no end-of-picture code\n");
245			return 0;
246			}
247
248
249		180	int ff_msrle_decode(AVCodecContext avctx, AVFrame pic,
250			int depth, GetByteContext *gb)
251			{
252	✓✓✗	180	switch(depth){
253		2	case 4:
254		2	return msrle_decode_pal4(avctx, pic, gb);
255		178	case 8:
256			case 16:
257			case 24:
258			case 32:
259		178	return msrle_decode_8_16_24_32(avctx, pic, depth, gb);
260			default:
261			av_log(avctx, AV_LOG_ERROR, "Unknown depth %d\n", depth);
262			return -1;
263			}
264			}