FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/webp.c
Date: 2024-07-26 21:54:09
Exec Total Coverage
Lines: 619 802 77.2%
Functions: 38 41 92.7%
Branches: 264 393 67.2%
Line Branch Exec Source
1 /*
2 * WebP (.webp) image decoder
3 * Copyright (c) 2013 Aneesh Dogra <aneesh@sugarlabs.org>
4 * Copyright (c) 2013 Justin Ruggles <justin.ruggles@gmail.com>
5 *
6 * This file is part of FFmpeg.
7 *
8 * FFmpeg is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2.1 of the License, or (at your option) any later version.
12 *
13 * FFmpeg is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
17 *
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with FFmpeg; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
21 */
22
23 /**
24 * @file
25 * WebP image decoder
26 *
27 * @author Aneesh Dogra <aneesh@sugarlabs.org>
28 * Container and Lossy decoding
29 *
30 * @author Justin Ruggles <justin.ruggles@gmail.com>
31 * Lossless decoder
32 * Compressed alpha for lossy
33 *
34 * @author James Almer <jamrial@gmail.com>
35 * Exif metadata
36 * ICC profile
37 *
38 * Unimplemented:
39 * - Animation
40 * - XMP metadata
41 */
42
43 #include "libavutil/imgutils.h"
44 #include "libavutil/mem.h"
45
46 #define BITSTREAM_READER_LE
47 #include "avcodec.h"
48 #include "bytestream.h"
49 #include "codec_internal.h"
50 #include "decode.h"
51 #include "exif.h"
52 #include "get_bits.h"
53 #include "thread.h"
54 #include "tiff_common.h"
55 #include "vp8.h"
56
57 #define VP8X_FLAG_ANIMATION 0x02
58 #define VP8X_FLAG_XMP_METADATA 0x04
59 #define VP8X_FLAG_EXIF_METADATA 0x08
60 #define VP8X_FLAG_ALPHA 0x10
61 #define VP8X_FLAG_ICC 0x20
62
63 #define MAX_PALETTE_SIZE 256
64 #define MAX_CACHE_BITS 11
65 #define NUM_CODE_LENGTH_CODES 19
66 #define HUFFMAN_CODES_PER_META_CODE 5
67 #define NUM_LITERAL_CODES 256
68 #define NUM_LENGTH_CODES 24
69 #define NUM_DISTANCE_CODES 40
70 #define NUM_SHORT_DISTANCES 120
71 #define MAX_HUFFMAN_CODE_LENGTH 15
72
73 static const uint16_t alphabet_sizes[HUFFMAN_CODES_PER_META_CODE] = {
74 NUM_LITERAL_CODES + NUM_LENGTH_CODES,
75 NUM_LITERAL_CODES, NUM_LITERAL_CODES, NUM_LITERAL_CODES,
76 NUM_DISTANCE_CODES
77 };
78
79 static const uint8_t code_length_code_order[NUM_CODE_LENGTH_CODES] = {
80 17, 18, 0, 1, 2, 3, 4, 5, 16, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
81 };
82
83 static const int8_t lz77_distance_offsets[NUM_SHORT_DISTANCES][2] = {
84 { 0, 1 }, { 1, 0 }, { 1, 1 }, { -1, 1 }, { 0, 2 }, { 2, 0 }, { 1, 2 }, { -1, 2 },
85 { 2, 1 }, { -2, 1 }, { 2, 2 }, { -2, 2 }, { 0, 3 }, { 3, 0 }, { 1, 3 }, { -1, 3 },
86 { 3, 1 }, { -3, 1 }, { 2, 3 }, { -2, 3 }, { 3, 2 }, { -3, 2 }, { 0, 4 }, { 4, 0 },
87 { 1, 4 }, { -1, 4 }, { 4, 1 }, { -4, 1 }, { 3, 3 }, { -3, 3 }, { 2, 4 }, { -2, 4 },
88 { 4, 2 }, { -4, 2 }, { 0, 5 }, { 3, 4 }, { -3, 4 }, { 4, 3 }, { -4, 3 }, { 5, 0 },
89 { 1, 5 }, { -1, 5 }, { 5, 1 }, { -5, 1 }, { 2, 5 }, { -2, 5 }, { 5, 2 }, { -5, 2 },
90 { 4, 4 }, { -4, 4 }, { 3, 5 }, { -3, 5 }, { 5, 3 }, { -5, 3 }, { 0, 6 }, { 6, 0 },
91 { 1, 6 }, { -1, 6 }, { 6, 1 }, { -6, 1 }, { 2, 6 }, { -2, 6 }, { 6, 2 }, { -6, 2 },
92 { 4, 5 }, { -4, 5 }, { 5, 4 }, { -5, 4 }, { 3, 6 }, { -3, 6 }, { 6, 3 }, { -6, 3 },
93 { 0, 7 }, { 7, 0 }, { 1, 7 }, { -1, 7 }, { 5, 5 }, { -5, 5 }, { 7, 1 }, { -7, 1 },
94 { 4, 6 }, { -4, 6 }, { 6, 4 }, { -6, 4 }, { 2, 7 }, { -2, 7 }, { 7, 2 }, { -7, 2 },
95 { 3, 7 }, { -3, 7 }, { 7, 3 }, { -7, 3 }, { 5, 6 }, { -5, 6 }, { 6, 5 }, { -6, 5 },
96 { 8, 0 }, { 4, 7 }, { -4, 7 }, { 7, 4 }, { -7, 4 }, { 8, 1 }, { 8, 2 }, { 6, 6 },
97 { -6, 6 }, { 8, 3 }, { 5, 7 }, { -5, 7 }, { 7, 5 }, { -7, 5 }, { 8, 4 }, { 6, 7 },
98 { -6, 7 }, { 7, 6 }, { -7, 6 }, { 8, 5 }, { 7, 7 }, { -7, 7 }, { 8, 6 }, { 8, 7 }
99 };
100
101 enum AlphaCompression {
102 ALPHA_COMPRESSION_NONE,
103 ALPHA_COMPRESSION_VP8L,
104 };
105
106 enum AlphaFilter {
107 ALPHA_FILTER_NONE,
108 ALPHA_FILTER_HORIZONTAL,
109 ALPHA_FILTER_VERTICAL,
110 ALPHA_FILTER_GRADIENT,
111 };
112
113 enum TransformType {
114 PREDICTOR_TRANSFORM = 0,
115 COLOR_TRANSFORM = 1,
116 SUBTRACT_GREEN = 2,
117 COLOR_INDEXING_TRANSFORM = 3,
118 };
119
120 enum PredictionMode {
121 PRED_MODE_BLACK,
122 PRED_MODE_L,
123 PRED_MODE_T,
124 PRED_MODE_TR,
125 PRED_MODE_TL,
126 PRED_MODE_AVG_T_AVG_L_TR,
127 PRED_MODE_AVG_L_TL,
128 PRED_MODE_AVG_L_T,
129 PRED_MODE_AVG_TL_T,
130 PRED_MODE_AVG_T_TR,
131 PRED_MODE_AVG_AVG_L_TL_AVG_T_TR,
132 PRED_MODE_SELECT,
133 PRED_MODE_ADD_SUBTRACT_FULL,
134 PRED_MODE_ADD_SUBTRACT_HALF,
135 };
136
137 enum HuffmanIndex {
138 HUFF_IDX_GREEN = 0,
139 HUFF_IDX_RED = 1,
140 HUFF_IDX_BLUE = 2,
141 HUFF_IDX_ALPHA = 3,
142 HUFF_IDX_DIST = 4
143 };
144
145 /* The structure of WebP lossless is an optional series of transformation data,
146 * followed by the primary image. The primary image also optionally contains
147 * an entropy group mapping if there are multiple entropy groups. There is a
148 * basic image type called an "entropy coded image" that is used for all of
149 * these. The type of each entropy coded image is referred to by the
150 * specification as its role. */
151 enum ImageRole {
152 /* Primary Image: Stores the actual pixels of the image. */
153 IMAGE_ROLE_ARGB,
154
155 /* Entropy Image: Defines which Huffman group to use for different areas of
156 * the primary image. */
157 IMAGE_ROLE_ENTROPY,
158
159 /* Predictors: Defines which predictor type to use for different areas of
160 * the primary image. */
161 IMAGE_ROLE_PREDICTOR,
162
163 /* Color Transform Data: Defines the color transformation for different
164 * areas of the primary image. */
165 IMAGE_ROLE_COLOR_TRANSFORM,
166
167 /* Color Index: Stored as an image of height == 1. */
168 IMAGE_ROLE_COLOR_INDEXING,
169
170 IMAGE_ROLE_NB,
171 };
172
173 typedef struct HuffReader {
174 VLC vlc; /* Huffman decoder context */
175 int simple; /* whether to use simple mode */
176 int nb_symbols; /* number of coded symbols */
177 uint16_t simple_symbols[2]; /* symbols for simple mode */
178 } HuffReader;
179
180 typedef struct ImageContext {
181 enum ImageRole role; /* role of this image */
182 AVFrame *frame; /* AVFrame for data */
183 int color_cache_bits; /* color cache size, log2 */
184 uint32_t *color_cache; /* color cache data */
185 int nb_huffman_groups; /* number of huffman groups */
186 HuffReader *huffman_groups; /* reader for each huffman group */
187 /* relative size compared to primary image, log2.
188 * for IMAGE_ROLE_COLOR_INDEXING with <= 16 colors, this is log2 of the
189 * number of pixels per byte in the primary image (pixel packing) */
190 int size_reduction;
191 int is_alpha_primary;
192 } ImageContext;
193
194 typedef struct WebPContext {
195 VP8Context v; /* VP8 Context used for lossy decoding */
196 GetBitContext gb; /* bitstream reader for main image chunk */
197 AVFrame *alpha_frame; /* AVFrame for alpha data decompressed from VP8L */
198 AVPacket *pkt; /* AVPacket to be passed to the underlying VP8 decoder */
199 AVCodecContext *avctx; /* parent AVCodecContext */
200 int initialized; /* set once the VP8 context is initialized */
201 int has_alpha; /* has a separate alpha chunk */
202 enum AlphaCompression alpha_compression; /* compression type for alpha chunk */
203 enum AlphaFilter alpha_filter; /* filtering method for alpha chunk */
204 const uint8_t *alpha_data; /* alpha chunk data */
205 int alpha_data_size; /* alpha chunk data size */
206 int has_exif; /* set after an EXIF chunk has been processed */
207 int has_iccp; /* set after an ICCP chunk has been processed */
208 int width; /* image width */
209 int height; /* image height */
210 int lossless; /* indicates lossless or lossy */
211
212 int nb_transforms; /* number of transforms */
213 enum TransformType transforms[4]; /* transformations used in the image, in order */
214 /* reduced width when using a color indexing transform with <= 16 colors (pixel packing)
215 * before pixels are unpacked, or same as width otherwise. */
216 int reduced_width;
217 int nb_huffman_groups; /* number of huffman groups in the primary image */
218 ImageContext image[IMAGE_ROLE_NB]; /* image context for each role */
219 } WebPContext;
220
221 #define GET_PIXEL(frame, x, y) \
222 ((frame)->data[0] + (y) * frame->linesize[0] + 4 * (x))
223
224 #define GET_PIXEL_COMP(frame, x, y, c) \
225 (*((frame)->data[0] + (y) * frame->linesize[0] + 4 * (x) + c))
226
227 60 static void image_ctx_free(ImageContext *img)
228 {
229 int i, j;
230
231 60 av_free(img->color_cache);
232
3/4
✓ Branch 0 taken 22 times.
✓ Branch 1 taken 38 times.
✓ Branch 2 taken 22 times.
✗ Branch 3 not taken.
 60 if (img->role != IMAGE_ROLE_ARGB && !img->is_alpha_primary)
233 22 av_frame_free(&img->frame);
234
2/2
✓ Branch 0 taken 34 times.
✓ Branch 1 taken 26 times.
 60 if (img->huffman_groups) {
235
2/2
✓ Branch 0 taken 42 times.
✓ Branch 1 taken 34 times.
 76 for (i = 0; i < img->nb_huffman_groups; i++) {
236
2/2
✓ Branch 0 taken 210 times.
✓ Branch 1 taken 42 times.
 252 for (j = 0; j < HUFFMAN_CODES_PER_META_CODE; j++)
237 210 ff_vlc_free(&img->huffman_groups[i * HUFFMAN_CODES_PER_META_CODE + j].vlc);
238 }
239 34 av_free(img->huffman_groups);
240 }
241 60 memset(img, 0, sizeof(*img));
242 60 }
243
244 280428 static int huff_reader_get_symbol(HuffReader *r, GetBitContext *gb)
245 {
246
2/2
✓ Branch 0 taken 73834 times.
✓ Branch 1 taken 206594 times.
 280428 if (r->simple) {
247
2/2
✓ Branch 0 taken 73514 times.
✓ Branch 1 taken 320 times.
 73834 if (r->nb_symbols == 1)
248 73514 return r->simple_symbols[0];
249 else
250 320 return r->simple_symbols[get_bits1(gb)];
251 } else
252 206594 return get_vlc2(gb, r->vlc.table, 8, 2);
253 }
254
255 160 static int huff_reader_build_canonical(HuffReader *r, const uint8_t *code_lengths,
256 int alphabet_size)
257 {
258 160 int len = 0, sym, code = 0, ret;
259 160 int max_code_length = 0;
260 uint16_t *codes;
261
262 /* special-case 1 symbol since the vlc reader cannot handle it */
263
1/2
✓ Branch 0 taken 714 times.
✗ Branch 1 not taken.
 714 for (sym = 0; sym < alphabet_size; sym++) {
264
2/2
✓ Branch 0 taken 320 times.
✓ Branch 1 taken 394 times.
 714 if (code_lengths[sym] > 0) {
265 320 len++;
266 320 code = sym;
267
2/2
✓ Branch 0 taken 160 times.
✓ Branch 1 taken 160 times.
 320 if (len > 1)
268 160 break;
269 }
270 }
271
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 160 times.
 160 if (len == 1) {
272 ✗ r->nb_symbols = 1;
273 ✗ r->simple_symbols[0] = code;
274 ✗ r->simple = 1;
275 ✗ return 0;
276 }
277
278
2/2
✓ Branch 0 taken 22912 times.
✓ Branch 1 taken 160 times.
 23072 for (sym = 0; sym < alphabet_size; sym++)
279 22912 max_code_length = FFMAX(max_code_length, code_lengths[sym]);
280
281
2/4
✓ Branch 0 taken 160 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 160 times.
 160 if (max_code_length == 0 || max_code_length > MAX_HUFFMAN_CODE_LENGTH)
282 ✗ return AVERROR(EINVAL);
283
284 160 codes = av_malloc_array(alphabet_size, sizeof(*codes));
285
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 160 times.
 160 if (!codes)
286 ✗ return AVERROR(ENOMEM);
287
288 160 code = 0;
289 160 r->nb_symbols = 0;
290
2/2
✓ Branch 0 taken 1098 times.
✓ Branch 1 taken 160 times.
 1258 for (len = 1; len <= max_code_length; len++) {
291
2/2
✓ Branch 0 taken 200268 times.
✓ Branch 1 taken 1098 times.
 201366 for (sym = 0; sym < alphabet_size; sym++) {
292
2/2
✓ Branch 0 taken 192792 times.
✓ Branch 1 taken 7476 times.
 200268 if (code_lengths[sym] != len)
293 192792 continue;
294 7476 codes[sym] = code++;
295 7476 r->nb_symbols++;
296 }
297 1098 code <<= 1;
298 }
299
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 160 times.
 160 if (!r->nb_symbols) {
300 ✗ av_free(codes);
301 ✗ return AVERROR_INVALIDDATA;
302 }
303
304 160 ret = vlc_init(&r->vlc, 8, alphabet_size,
305 code_lengths, sizeof(*code_lengths), sizeof(*code_lengths),
306 codes, sizeof(*codes), sizeof(*codes), VLC_INIT_OUTPUT_LE);
307
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 160 times.
 160 if (ret < 0) {
308 ✗ av_free(codes);
309 ✗ return ret;
310 }
311 160 r->simple = 0;
312
313 160 av_free(codes);
314 160 return 0;
315 }
316
317 130 static void read_huffman_code_simple(WebPContext *s, HuffReader *hc)
318 {
319 130 hc->nb_symbols = get_bits1(&s->gb) + 1;
320
321
2/2
✓ Branch 1 taken 18 times.
✓ Branch 2 taken 112 times.
 130 if (get_bits1(&s->gb))
322 18 hc->simple_symbols[0] = get_bits(&s->gb, 8);
323 else
324 112 hc->simple_symbols[0] = get_bits1(&s->gb);
325
326
2/2
✓ Branch 0 taken 14 times.
✓ Branch 1 taken 116 times.
 130 if (hc->nb_symbols == 2)
327 14 hc->simple_symbols[1] = get_bits(&s->gb, 8);
328
329 130 hc->simple = 1;
330 130 }
331
332 80 static int read_huffman_code_normal(WebPContext *s, HuffReader *hc,
333 int alphabet_size)
334 {
335 80 HuffReader code_len_hc = { { 0 }, 0, 0, { 0 } };
336 uint8_t *code_lengths;
337 80 uint8_t code_length_code_lengths[NUM_CODE_LENGTH_CODES] = { 0 };
338 int i, symbol, max_symbol, prev_code_len, ret;
339 80 int num_codes = 4 + get_bits(&s->gb, 4);
340
341 av_assert1(num_codes <= NUM_CODE_LENGTH_CODES);
342
343
2/2
✓ Branch 0 taken 1100 times.
✓ Branch 1 taken 80 times.
 1180 for (i = 0; i < num_codes; i++)
344 1100 code_length_code_lengths[code_length_code_order[i]] = get_bits(&s->gb, 3);
345
346 80 ret = huff_reader_build_canonical(&code_len_hc, code_length_code_lengths,
347 NUM_CODE_LENGTH_CODES);
348
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 80 times.
 80 if (ret < 0)
349 ✗ return ret;
350
351 80 code_lengths = av_mallocz(alphabet_size);
352
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 80 times.
 80 if (!code_lengths) {
353 ✗ ret = AVERROR(ENOMEM);
354 ✗ goto finish;
355 }
356
357
2/2
✓ Branch 1 taken 8 times.
✓ Branch 2 taken 72 times.
 80 if (get_bits1(&s->gb)) {
358 8 int bits = 2 + 2 * get_bits(&s->gb, 3);
359 8 max_symbol = 2 + get_bits(&s->gb, bits);
360
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 8 times.
 8 if (max_symbol > alphabet_size) {
361 ✗ av_log(s->avctx, AV_LOG_ERROR, "max symbol %d > alphabet size %d\n",
362 max_symbol, alphabet_size);
363 ✗ ret = AVERROR_INVALIDDATA;
364 ✗ goto finish;
365 }
366 } else {
367 72 max_symbol = alphabet_size;
368 }
369
370 80 prev_code_len = 8;
371 80 symbol = 0;
372
2/2
✓ Branch 0 taken 3264 times.
✓ Branch 1 taken 72 times.
 3336 while (symbol < alphabet_size) {
373 int code_len;
374
375
2/2
✓ Branch 0 taken 8 times.
✓ Branch 1 taken 3256 times.
 3264 if (!max_symbol--)
376 8 break;
377 3256 code_len = huff_reader_get_symbol(&code_len_hc, &s->gb);
378
2/2
✓ Branch 0 taken 1938 times.
✓ Branch 1 taken 1318 times.
 3256 if (code_len < 16) {
379 /* Code length code [0..15] indicates literal code lengths. */
380 1938 code_lengths[symbol++] = code_len;
381
2/2
✓ Branch 0 taken 1818 times.
✓ Branch 1 taken 120 times.
 1938 if (code_len)
382 1818 prev_code_len = code_len;
383 } else {
384 1318 int repeat = 0, length = 0;
385
3/4
✓ Branch 0 taken 888 times.
✓ Branch 1 taken 160 times.
✓ Branch 2 taken 270 times.
✗ Branch 3 not taken.
 1318 switch (code_len) {
386 888 case 16:
387 /* Code 16 repeats the previous non-zero value [3..6] times,
388 * i.e., 3 + ReadBits(2) times. If code 16 is used before a
389 * non-zero value has been emitted, a value of 8 is repeated. */
390 888 repeat = 3 + get_bits(&s->gb, 2);
391 888 length = prev_code_len;
392 888 break;
393 160 case 17:
394 /* Code 17 emits a streak of zeros [3..10], i.e.,
395 * 3 + ReadBits(3) times. */
396 160 repeat = 3 + get_bits(&s->gb, 3);
397 160 break;
398 270 case 18:
399 /* Code 18 emits a streak of zeros of length [11..138], i.e.,
400 * 11 + ReadBits(7) times. */
401 270 repeat = 11 + get_bits(&s->gb, 7);
402 270 break;
403 }
404
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1318 times.
 1318 if (symbol + repeat > alphabet_size) {
405 ✗ av_log(s->avctx, AV_LOG_ERROR,
406 "invalid symbol %d + repeat %d > alphabet size %d\n",
407 symbol, repeat, alphabet_size);
408 ✗ ret = AVERROR_INVALIDDATA;
409 ✗ goto finish;
410 }
411
2/2
✓ Branch 0 taken 18592 times.
✓ Branch 1 taken 1318 times.
 19910 while (repeat-- > 0)
412 18592 code_lengths[symbol++] = length;
413 }
414 }
415
416 80 ret = huff_reader_build_canonical(hc, code_lengths, alphabet_size);
417
418 80 finish:
419 80 ff_vlc_free(&code_len_hc.vlc);
420 80 av_free(code_lengths);
421 80 return ret;
422 }
423
424 static int decode_entropy_coded_image(WebPContext *s, enum ImageRole role,
425 int w, int h);
426
427 #define PARSE_BLOCK_SIZE(w, h) do { \
428 block_bits = get_bits(&s->gb, 3) + 2; \
429 blocks_w = FFALIGN((w), 1 << block_bits) >> block_bits; \
430 blocks_h = FFALIGN((h), 1 << block_bits) >> block_bits; \
431 } while (0)
432
433 4 static int decode_entropy_image(WebPContext *s)
434 {
435 ImageContext *img;
436 int ret, block_bits, blocks_w, blocks_h, x, y, max;
437
438 4 PARSE_BLOCK_SIZE(s->reduced_width, s->height);
439
440 4 ret = decode_entropy_coded_image(s, IMAGE_ROLE_ENTROPY, blocks_w, blocks_h);
441
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (ret < 0)
442 ✗ return ret;
443
444 4 img = &s->image[IMAGE_ROLE_ENTROPY];
445 4 img->size_reduction = block_bits;
446
447 /* the number of huffman groups is determined by the maximum group number
448 * coded in the entropy image */
449 4 max = 0;
450
2/2
✓ Branch 0 taken 64 times.
✓ Branch 1 taken 4 times.
 68 for (y = 0; y < img->frame->height; y++) {
451
2/2
✓ Branch 0 taken 1024 times.
✓ Branch 1 taken 64 times.
 1088 for (x = 0; x < img->frame->width; x++) {
452 1024 int p0 = GET_PIXEL_COMP(img->frame, x, y, 1);
453 1024 int p1 = GET_PIXEL_COMP(img->frame, x, y, 2);
454 1024 int p = p0 << 8 | p1;
455 1024 max = FFMAX(max, p);
456 }
457 }
458 4 s->nb_huffman_groups = max + 1;
459
460 4 return 0;
461 }
462
463 6 static int parse_transform_predictor(WebPContext *s)
464 {
465 int block_bits, blocks_w, blocks_h, ret;
466
467 6 PARSE_BLOCK_SIZE(s->reduced_width, s->height);
468
469 6 ret = decode_entropy_coded_image(s, IMAGE_ROLE_PREDICTOR, blocks_w,
470 blocks_h);
471
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (ret < 0)
472 ✗ return ret;
473
474 6 s->image[IMAGE_ROLE_PREDICTOR].size_reduction = block_bits;
475
476 6 return 0;
477 }
478
479 4 static int parse_transform_color(WebPContext *s)
480 {
481 int block_bits, blocks_w, blocks_h, ret;
482
483 4 PARSE_BLOCK_SIZE(s->reduced_width, s->height);
484
485 4 ret = decode_entropy_coded_image(s, IMAGE_ROLE_COLOR_TRANSFORM, blocks_w,
486 blocks_h);
487
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (ret < 0)
488 ✗ return ret;
489
490 4 s->image[IMAGE_ROLE_COLOR_TRANSFORM].size_reduction = block_bits;
491
492 4 return 0;
493 }
494
495 8 static int parse_transform_color_indexing(WebPContext *s)
496 {
497 ImageContext *img;
498 int width_bits, index_size, ret, x;
499 uint8_t *ct;
500
501 8 index_size = get_bits(&s->gb, 8) + 1;
502
503
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 6 times.
 8 if (index_size <= 2)
504 2 width_bits = 3;
505
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 4 times.
 6 else if (index_size <= 4)
506 2 width_bits = 2;
507
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 else if (index_size <= 16)
508 ✗ width_bits = 1;
509 else
510 4 width_bits = 0;
511
512 8 ret = decode_entropy_coded_image(s, IMAGE_ROLE_COLOR_INDEXING,
513 index_size, 1);
514
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 8 times.
 8 if (ret < 0)
515 ✗ return ret;
516
517 8 img = &s->image[IMAGE_ROLE_COLOR_INDEXING];
518 8 img->size_reduction = width_bits;
519
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 4 times.
 8 if (width_bits > 0)
520 4 s->reduced_width = (s->width + ((1 << width_bits) - 1)) >> width_bits;
521
522 /* color index values are delta-coded */
523 8 ct = img->frame->data[0] + 4;
524
2/2
✓ Branch 0 taken 1424 times.
✓ Branch 1 taken 8 times.
 1432 for (x = 4; x < img->frame->width * 4; x++, ct++)
525 1424 ct[0] += ct[-4];
526
527 8 return 0;
528 }
529
530 69356 static HuffReader *get_huffman_group(WebPContext *s, ImageContext *img,
531 int x, int y)
532 {
533 69356 ImageContext *gimg = &s->image[IMAGE_ROLE_ENTROPY];
534 69356 int group = 0;
535
536
2/2
✓ Branch 0 taken 65536 times.
✓ Branch 1 taken 3820 times.
 69356 if (gimg->size_reduction > 0) {
537 65536 int group_x = x >> gimg->size_reduction;
538 65536 int group_y = y >> gimg->size_reduction;
539 65536 int g0 = GET_PIXEL_COMP(gimg->frame, group_x, group_y, 1);
540 65536 int g1 = GET_PIXEL_COMP(gimg->frame, group_x, group_y, 2);
541 65536 group = g0 << 8 | g1;
542 }
543
544 69356 return &img->huffman_groups[group * HUFFMAN_CODES_PER_META_CODE];
545 }
546
547 ✗ static av_always_inline void color_cache_put(ImageContext *img, uint32_t c)
548 {
549 ✗ uint32_t cache_idx = (0x1E35A7BD * c) >> (32 - img->color_cache_bits);
550 ✗ img->color_cache[cache_idx] = c;
551 ✗ }
552
553 34 static int decode_entropy_coded_image(WebPContext *s, enum ImageRole role,
554 int w, int h)
555 {
556 ImageContext *img;
557 HuffReader *hg;
558 int i, j, ret, x, y, width;
559
560 34 img = &s->image[role];
561 34 img->role = role;
562
563
2/2
✓ Branch 0 taken 22 times.
✓ Branch 1 taken 12 times.
 34 if (!img->frame) {
564 22 img->frame = av_frame_alloc();
565
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 22 times.
 22 if (!img->frame)
566 ✗ return AVERROR(ENOMEM);
567 }
568
569 34 img->frame->format = AV_PIX_FMT_ARGB;
570 34 img->frame->width = w;
571 34 img->frame->height = h;
572
573
4/4
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 22 times.
✓ Branch 2 taken 10 times.
✓ Branch 3 taken 2 times.
 34 if (role == IMAGE_ROLE_ARGB && !img->is_alpha_primary) {
574 10 ret = ff_thread_get_buffer(s->avctx, img->frame, 0);
575 } else
576 24 ret = av_frame_get_buffer(img->frame, 1);
577
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 34 times.
 34 if (ret < 0)
578 ✗ return ret;
579
580
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 34 times.
 34 if (get_bits1(&s->gb)) {
581 ✗ img->color_cache_bits = get_bits(&s->gb, 4);
582 ✗ if (img->color_cache_bits < 1 || img->color_cache_bits > 11) {
583 ✗ av_log(s->avctx, AV_LOG_ERROR, "invalid color cache bits: %d\n",
584 img->color_cache_bits);
585 ✗ return AVERROR_INVALIDDATA;
586 }
587 ✗ img->color_cache = av_calloc(1 << img->color_cache_bits,
588 sizeof(*img->color_cache));
589 ✗ if (!img->color_cache)
590 ✗ return AVERROR(ENOMEM);
591 } else {
592 34 img->color_cache_bits = 0;
593 }
594
595 34 img->nb_huffman_groups = 1;
596
4/4
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 22 times.
✓ Branch 3 taken 4 times.
✓ Branch 4 taken 8 times.
 34 if (role == IMAGE_ROLE_ARGB && get_bits1(&s->gb)) {
597 4 ret = decode_entropy_image(s);
598
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (ret < 0)
599 ✗ return ret;
600 4 img->nb_huffman_groups = s->nb_huffman_groups;
601 }
602 34 img->huffman_groups = av_calloc(img->nb_huffman_groups,
603 HUFFMAN_CODES_PER_META_CODE *
604 sizeof(*img->huffman_groups));
605
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 34 times.
 34 if (!img->huffman_groups)
606 ✗ return AVERROR(ENOMEM);
607
608
2/2
✓ Branch 0 taken 42 times.
✓ Branch 1 taken 34 times.
 76 for (i = 0; i < img->nb_huffman_groups; i++) {
609 42 hg = &img->huffman_groups[i * HUFFMAN_CODES_PER_META_CODE];
610
2/2
✓ Branch 0 taken 210 times.
✓ Branch 1 taken 42 times.
 252 for (j = 0; j < HUFFMAN_CODES_PER_META_CODE; j++) {
611 210 int alphabet_size = alphabet_sizes[j];
612
3/4
✓ Branch 0 taken 42 times.
✓ Branch 1 taken 168 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 42 times.
 210 if (!j && img->color_cache_bits > 0)
613 ✗ alphabet_size += 1 << img->color_cache_bits;
614
615
2/2
✓ Branch 1 taken 130 times.
✓ Branch 2 taken 80 times.
 210 if (get_bits1(&s->gb)) {
616 130 read_huffman_code_simple(s, &hg[j]);
617 } else {
618 80 ret = read_huffman_code_normal(s, &hg[j], alphabet_size);
619
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 80 times.
 80 if (ret < 0)
620 ✗ return ret;
621 }
622 }
623 }
624
625 34 width = img->frame->width;
626
2/2
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 22 times.
 34 if (role == IMAGE_ROLE_ARGB)
627 12 width = s->reduced_width;
628
629 34 x = 0; y = 0;
630
2/2
✓ Branch 0 taken 69356 times.
✓ Branch 1 taken 34 times.
 69390 while (y < img->frame->height) {
631 int v;
632
633
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 69356 times.
 69356 if (get_bits_left(&s->gb) < 0)
634 ✗ return AVERROR_INVALIDDATA;
635
636 69356 hg = get_huffman_group(s, img, x, y);
637 69356 v = huff_reader_get_symbol(&hg[HUFF_IDX_GREEN], &s->gb);
638
2/2
✓ Branch 0 taken 69230 times.
✓ Branch 1 taken 126 times.
 69356 if (v < NUM_LITERAL_CODES) {
639 /* literal pixel values */
640 69230 uint8_t *p = GET_PIXEL(img->frame, x, y);
641 69230 p[2] = v;
642 69230 p[1] = huff_reader_get_symbol(&hg[HUFF_IDX_RED], &s->gb);
643 69230 p[3] = huff_reader_get_symbol(&hg[HUFF_IDX_BLUE], &s->gb);
644 69230 p[0] = huff_reader_get_symbol(&hg[HUFF_IDX_ALPHA], &s->gb);
645
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 69230 times.
 69230 if (img->color_cache_bits)
646 ✗ color_cache_put(img, AV_RB32(p));
647 69230 x++;
648
2/2
✓ Branch 0 taken 750 times.
✓ Branch 1 taken 68480 times.
 69230 if (x == width) {
649 750 x = 0;
650 750 y++;
651 }
652
1/2
✓ Branch 0 taken 126 times.
✗ Branch 1 not taken.
 126 } else if (v < NUM_LITERAL_CODES + NUM_LENGTH_CODES) {
653 /* LZ77 backwards mapping */
654 int prefix_code, length, distance, ref_x, ref_y;
655
656 /* parse length and distance */
657 126 prefix_code = v - NUM_LITERAL_CODES;
658
2/2
✓ Branch 0 taken 48 times.
✓ Branch 1 taken 78 times.
 126 if (prefix_code < 4) {
659 48 length = prefix_code + 1;
660 } else {
661 78 int extra_bits = (prefix_code - 2) >> 1;
662 78 int offset = 2 + (prefix_code & 1) << extra_bits;
663 78 length = offset + get_bits(&s->gb, extra_bits) + 1;
664 }
665 126 prefix_code = huff_reader_get_symbol(&hg[HUFF_IDX_DIST], &s->gb);
666
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 126 times.
 126 if (prefix_code > 39U) {
667 ✗ av_log(s->avctx, AV_LOG_ERROR,
668 "distance prefix code too large: %d\n", prefix_code);
669 ✗ return AVERROR_INVALIDDATA;
670 }
671
1/2
✓ Branch 0 taken 126 times.
✗ Branch 1 not taken.
 126 if (prefix_code < 4) {
672 126 distance = prefix_code + 1;
673 } else {
674 ✗ int extra_bits = prefix_code - 2 >> 1;
675 ✗ int offset = 2 + (prefix_code & 1) << extra_bits;
676 ✗ distance = offset + get_bits(&s->gb, extra_bits) + 1;
677 }
678
679 /* find reference location */
680
1/2
✓ Branch 0 taken 126 times.
✗ Branch 1 not taken.
 126 if (distance <= NUM_SHORT_DISTANCES) {
681 126 int xi = lz77_distance_offsets[distance - 1][0];
682 126 int yi = lz77_distance_offsets[distance - 1][1];
683 126 distance = FFMAX(1, xi + yi * width);
684 } else {
685 ✗ distance -= NUM_SHORT_DISTANCES;
686 }
687 126 ref_x = x;
688 126 ref_y = y;
689
2/2
✓ Branch 0 taken 40 times.
✓ Branch 1 taken 86 times.
 126 if (distance <= x) {
690 40 ref_x -= distance;
691 40 distance = 0;
692 } else {
693 86 ref_x = 0;
694 86 distance -= x;
695 }
696
2/2
✓ Branch 0 taken 22 times.
✓ Branch 1 taken 126 times.
 148 while (distance >= width) {
697 22 ref_y--;
698 22 distance -= width;
699 }
700
2/2
✓ Branch 0 taken 64 times.
✓ Branch 1 taken 62 times.
 126 if (distance > 0) {
701 64 ref_x = width - distance;
702 64 ref_y--;
703 }
704 126 ref_x = FFMAX(0, ref_x);
705 126 ref_y = FFMAX(0, ref_y);
706
707 /* copy pixels
708 * source and dest regions can overlap and wrap lines, so just
709 * copy per-pixel */
710
2/2
✓ Branch 0 taken 958 times.
✓ Branch 1 taken 118 times.
 1076 for (i = 0; i < length; i++) {
711 958 uint8_t *p_ref = GET_PIXEL(img->frame, ref_x, ref_y);
712 958 uint8_t *p = GET_PIXEL(img->frame, x, y);
713
714 958 AV_COPY32(p, p_ref);
715
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 958 times.
 958 if (img->color_cache_bits)
716 ✗ color_cache_put(img, AV_RB32(p));
717 958 x++;
718 958 ref_x++;
719
2/2
✓ Branch 0 taken 74 times.
✓ Branch 1 taken 884 times.
 958 if (x == width) {
720 74 x = 0;
721 74 y++;
722 }
723
2/2
✓ Branch 0 taken 72 times.
✓ Branch 1 taken 886 times.
 958 if (ref_x == width) {
724 72 ref_x = 0;
725 72 ref_y++;
726 }
727
3/4
✓ Branch 0 taken 950 times.
✓ Branch 1 taken 8 times.
✓ Branch 2 taken 950 times.
✗ Branch 3 not taken.
 958 if (y == img->frame->height || ref_y == img->frame->height)
728 break;
729 }
730 } else {
731 /* read from color cache */
732 ✗ uint8_t *p = GET_PIXEL(img->frame, x, y);
733 ✗ int cache_idx = v - (NUM_LITERAL_CODES + NUM_LENGTH_CODES);
734
735 ✗ if (!img->color_cache_bits) {
736 ✗ av_log(s->avctx, AV_LOG_ERROR, "color cache not found\n");
737 ✗ return AVERROR_INVALIDDATA;
738 }
739 ✗ if (cache_idx >= 1 << img->color_cache_bits) {
740 ✗ av_log(s->avctx, AV_LOG_ERROR,
741 "color cache index out-of-bounds\n");
742 ✗ return AVERROR_INVALIDDATA;
743 }
744 ✗ AV_WB32(p, img->color_cache[cache_idx]);
745 ✗ x++;
746 ✗ if (x == width) {
747 ✗ x = 0;
748 ✗ y++;
749 }
750 }
751 }
752
753 34 return 0;
754 }
755
756 /* PRED_MODE_BLACK */
757 6 static void inv_predict_0(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
758 const uint8_t *p_t, const uint8_t *p_tr)
759 {
760 6 AV_WB32(p, 0xFF000000);
761 6 }
762
763 /* PRED_MODE_L */
764 5300 static void inv_predict_1(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
765 const uint8_t *p_t, const uint8_t *p_tr)
766 {
767 5300 AV_COPY32(p, p_l);
768 5300 }
769
770 /* PRED_MODE_T */
771 21182 static void inv_predict_2(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
772 const uint8_t *p_t, const uint8_t *p_tr)
773 {
774 21182 AV_COPY32(p, p_t);
775 21182 }
776
777 /* PRED_MODE_TR */
778 6336 static void inv_predict_3(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
779 const uint8_t *p_t, const uint8_t *p_tr)
780 {
781 6336 AV_COPY32(p, p_tr);
782 6336 }
783
784 /* PRED_MODE_TL */
785 1248 static void inv_predict_4(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
786 const uint8_t *p_t, const uint8_t *p_tr)
787 {
788 1248 AV_COPY32(p, p_tl);
789 1248 }
790
791 /* PRED_MODE_AVG_T_AVG_L_TR */
792 4832 static void inv_predict_5(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
793 const uint8_t *p_t, const uint8_t *p_tr)
794 {
795 4832 p[0] = p_t[0] + (p_l[0] + p_tr[0] >> 1) >> 1;
796 4832 p[1] = p_t[1] + (p_l[1] + p_tr[1] >> 1) >> 1;
797 4832 p[2] = p_t[2] + (p_l[2] + p_tr[2] >> 1) >> 1;
798 4832 p[3] = p_t[3] + (p_l[3] + p_tr[3] >> 1) >> 1;
799 4832 }
800
801 /* PRED_MODE_AVG_L_TL */
802 768 static void inv_predict_6(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
803 const uint8_t *p_t, const uint8_t *p_tr)
804 {
805 768 p[0] = p_l[0] + p_tl[0] >> 1;
806 768 p[1] = p_l[1] + p_tl[1] >> 1;
807 768 p[2] = p_l[2] + p_tl[2] >> 1;
808 768 p[3] = p_l[3] + p_tl[3] >> 1;
809 768 }
810
811 /* PRED_MODE_AVG_L_T */
812 3072 static void inv_predict_7(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
813 const uint8_t *p_t, const uint8_t *p_tr)
814 {
815 3072 p[0] = p_l[0] + p_t[0] >> 1;
816 3072 p[1] = p_l[1] + p_t[1] >> 1;
817 3072 p[2] = p_l[2] + p_t[2] >> 1;
818 3072 p[3] = p_l[3] + p_t[3] >> 1;
819 3072 }
820
821 /* PRED_MODE_AVG_TL_T */
822 4512 static void inv_predict_8(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
823 const uint8_t *p_t, const uint8_t *p_tr)
824 {
825 4512 p[0] = p_tl[0] + p_t[0] >> 1;
826 4512 p[1] = p_tl[1] + p_t[1] >> 1;
827 4512 p[2] = p_tl[2] + p_t[2] >> 1;
828 4512 p[3] = p_tl[3] + p_t[3] >> 1;
829 4512 }
830
831 /* PRED_MODE_AVG_T_TR */
832 11488 static void inv_predict_9(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
833 const uint8_t *p_t, const uint8_t *p_tr)
834 {
835 11488 p[0] = p_t[0] + p_tr[0] >> 1;
836 11488 p[1] = p_t[1] + p_tr[1] >> 1;
837 11488 p[2] = p_t[2] + p_tr[2] >> 1;
838 11488 p[3] = p_t[3] + p_tr[3] >> 1;
839 11488 }
840
841 /* PRED_MODE_AVG_AVG_L_TL_AVG_T_TR */
842 3236 static void inv_predict_10(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
843 const uint8_t *p_t, const uint8_t *p_tr)
844 {
845 3236 p[0] = (p_l[0] + p_tl[0] >> 1) + (p_t[0] + p_tr[0] >> 1) >> 1;
846 3236 p[1] = (p_l[1] + p_tl[1] >> 1) + (p_t[1] + p_tr[1] >> 1) >> 1;
847 3236 p[2] = (p_l[2] + p_tl[2] >> 1) + (p_t[2] + p_tr[2] >> 1) >> 1;
848 3236 p[3] = (p_l[3] + p_tl[3] >> 1) + (p_t[3] + p_tr[3] >> 1) >> 1;
849 3236 }
850
851 /* PRED_MODE_SELECT */
852 3824 static void inv_predict_11(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
853 const uint8_t *p_t, const uint8_t *p_tr)
854 {
855 3824 int diff = (FFABS(p_l[0] - p_tl[0]) - FFABS(p_t[0] - p_tl[0])) +
856 3824 (FFABS(p_l[1] - p_tl[1]) - FFABS(p_t[1] - p_tl[1])) +
857 3824 (FFABS(p_l[2] - p_tl[2]) - FFABS(p_t[2] - p_tl[2])) +
858 3824 (FFABS(p_l[3] - p_tl[3]) - FFABS(p_t[3] - p_tl[3]));
859
2/2
✓ Branch 0 taken 2602 times.
✓ Branch 1 taken 1222 times.
 3824 if (diff <= 0)
860 2602 AV_COPY32(p, p_t);
861 else
862 1222 AV_COPY32(p, p_l);
863 3824 }
864
865 /* PRED_MODE_ADD_SUBTRACT_FULL */
866 ✗ static void inv_predict_12(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
867 const uint8_t *p_t, const uint8_t *p_tr)
868 {
869 ✗ p[0] = av_clip_uint8(p_l[0] + p_t[0] - p_tl[0]);
870 ✗ p[1] = av_clip_uint8(p_l[1] + p_t[1] - p_tl[1]);
871 ✗ p[2] = av_clip_uint8(p_l[2] + p_t[2] - p_tl[2]);
872 ✗ p[3] = av_clip_uint8(p_l[3] + p_t[3] - p_tl[3]);
873 ✗ }
874
875 2048 static av_always_inline uint8_t clamp_add_subtract_half(int a, int b, int c)
876 {
877 2048 int d = a + b >> 1;
878 2048 return av_clip_uint8(d + (d - c) / 2);
879 }
880
881 /* PRED_MODE_ADD_SUBTRACT_HALF */
882 512 static void inv_predict_13(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
883 const uint8_t *p_t, const uint8_t *p_tr)
884 {
885 512 p[0] = clamp_add_subtract_half(p_l[0], p_t[0], p_tl[0]);
886 512 p[1] = clamp_add_subtract_half(p_l[1], p_t[1], p_tl[1]);
887 512 p[2] = clamp_add_subtract_half(p_l[2], p_t[2], p_tl[2]);
888 512 p[3] = clamp_add_subtract_half(p_l[3], p_t[3], p_tl[3]);
889 512 }
890
891 typedef void (*inv_predict_func)(uint8_t *p, const uint8_t *p_l,
892 const uint8_t *p_tl, const uint8_t *p_t,
893 const uint8_t *p_tr);
894
895 static const inv_predict_func inverse_predict[14] = {
896 inv_predict_0, inv_predict_1, inv_predict_2, inv_predict_3,
897 inv_predict_4, inv_predict_5, inv_predict_6, inv_predict_7,
898 inv_predict_8, inv_predict_9, inv_predict_10, inv_predict_11,
899 inv_predict_12, inv_predict_13,
900 };
901
902 66316 static void inverse_prediction(AVFrame *frame, enum PredictionMode m, int x, int y)
903 {
904 uint8_t *dec, *p_l, *p_tl, *p_t, *p_tr;
905 uint8_t p[4];
906
907 66316 dec = GET_PIXEL(frame, x, y);
908 66316 p_l = GET_PIXEL(frame, x - 1, y);
909 66316 p_tl = GET_PIXEL(frame, x - 1, y - 1);
910 66316 p_t = GET_PIXEL(frame, x, y - 1);
911
2/2
✓ Branch 0 taken 512 times.
✓ Branch 1 taken 65804 times.
 66316 if (x == frame->width - 1)
912 512 p_tr = GET_PIXEL(frame, 0, y);
913 else
914 65804 p_tr = GET_PIXEL(frame, x + 1, y - 1);
915
916 66316 inverse_predict[m](p, p_l, p_tl, p_t, p_tr);
917
918 66316 dec[0] += p[0];
919 66316 dec[1] += p[1];
920 66316 dec[2] += p[2];
921 66316 dec[3] += p[3];
922 66316 }
923
924 6 static int apply_predictor_transform(WebPContext *s)
925 {
926 6 ImageContext *img = &s->image[IMAGE_ROLE_ARGB];
927 6 ImageContext *pimg = &s->image[IMAGE_ROLE_PREDICTOR];
928 int x, y;
929
930
2/2
✓ Branch 0 taken 572 times.
✓ Branch 1 taken 6 times.
 578 for (y = 0; y < img->frame->height; y++) {
931
2/2
✓ Branch 0 taken 66316 times.
✓ Branch 1 taken 572 times.
 66888 for (x = 0; x < s->reduced_width; x++) {
932 66316 int tx = x >> pimg->size_reduction;
933 66316 int ty = y >> pimg->size_reduction;
934 66316 enum PredictionMode m = GET_PIXEL_COMP(pimg->frame, tx, ty, 2);
935
936
2/2
✓ Branch 0 taken 572 times.
✓ Branch 1 taken 65744 times.
 66316 if (x == 0) {
937
2/2
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 566 times.
 572 if (y == 0)
938 6 m = PRED_MODE_BLACK;
939 else
940 566 m = PRED_MODE_T;
941
2/2
✓ Branch 0 taken 532 times.
✓ Branch 1 taken 65212 times.
 65744 } else if (y == 0)
942 532 m = PRED_MODE_L;
943
944
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 66316 times.
 66316 if (m > 13) {
945 ✗ av_log(s->avctx, AV_LOG_ERROR,
946 "invalid predictor mode: %d\n", m);
947 ✗ return AVERROR_INVALIDDATA;
948 }
949 66316 inverse_prediction(img->frame, m, x, y);
950 }
951 }
952 6 return 0;
953 }
954
955 196608 static av_always_inline uint8_t color_transform_delta(uint8_t color_pred,
956 uint8_t color)
957 {
958 196608 return (int)ff_u8_to_s8(color_pred) * ff_u8_to_s8(color) >> 5;
959 }
960
961 4 static int apply_color_transform(WebPContext *s)
962 {
963 ImageContext *img, *cimg;
964 int x, y, cx, cy;
965 uint8_t *p, *cp;
966
967 4 img = &s->image[IMAGE_ROLE_ARGB];
968 4 cimg = &s->image[IMAGE_ROLE_COLOR_TRANSFORM];
969
970
2/2
✓ Branch 0 taken 512 times.
✓ Branch 1 taken 4 times.
 516 for (y = 0; y < img->frame->height; y++) {
971
2/2
✓ Branch 0 taken 65536 times.
✓ Branch 1 taken 512 times.
 66048 for (x = 0; x < s->reduced_width; x++) {
972 65536 cx = x >> cimg->size_reduction;
973 65536 cy = y >> cimg->size_reduction;
974 65536 cp = GET_PIXEL(cimg->frame, cx, cy);
975 65536 p = GET_PIXEL(img->frame, x, y);
976
977 65536 p[1] += color_transform_delta(cp[3], p[2]);
978 65536 p[3] += color_transform_delta(cp[2], p[2]) +
979 65536 color_transform_delta(cp[1], p[1]);
980 }
981 }
982 4 return 0;
983 }
984
985 4 static int apply_subtract_green_transform(WebPContext *s)
986 {
987 int x, y;
988 4 ImageContext *img = &s->image[IMAGE_ROLE_ARGB];
989
990
2/2
✓ Branch 0 taken 512 times.
✓ Branch 1 taken 4 times.
 516 for (y = 0; y < img->frame->height; y++) {
991
2/2
✓ Branch 0 taken 65536 times.
✓ Branch 1 taken 512 times.
 66048 for (x = 0; x < s->reduced_width; x++) {
992 65536 uint8_t *p = GET_PIXEL(img->frame, x, y);
993 65536 p[1] += p[2];
994 65536 p[3] += p[2];
995 }
996 }
997 4 return 0;
998 }
999
1000 8 static int apply_color_indexing_transform(WebPContext *s)
1001 {
1002 ImageContext *img;
1003 ImageContext *pal;
1004 int i, x, y;
1005 uint8_t *p;
1006
1007 8 img = &s->image[IMAGE_ROLE_ARGB];
1008 8 pal = &s->image[IMAGE_ROLE_COLOR_INDEXING];
1009
1010
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 4 times.
 8 if (pal->size_reduction > 0) { // undo pixel packing
1011 GetBitContext gb_g;
1012 uint8_t *line;
1013 4 int pixel_bits = 8 >> pal->size_reduction;
1014
1015 4 line = av_malloc(img->frame->linesize[0] + AV_INPUT_BUFFER_PADDING_SIZE);
1016
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (!line)
1017 ✗ return AVERROR(ENOMEM);
1018
1019
2/2
✓ Branch 0 taken 76 times.
✓ Branch 1 taken 4 times.
 80 for (y = 0; y < img->frame->height; y++) {
1020 76 p = GET_PIXEL(img->frame, 0, y);
1021 76 memcpy(line, p, img->frame->linesize[0]);
1022 76 init_get_bits(&gb_g, line, img->frame->linesize[0] * 8);
1023 76 skip_bits(&gb_g, 16);
1024 76 i = 0;
1025
2/2
✓ Branch 0 taken 6192 times.
✓ Branch 1 taken 76 times.
 6268 for (x = 0; x < img->frame->width; x++) {
1026 6192 p = GET_PIXEL(img->frame, x, y);
1027 6192 p[2] = get_bits(&gb_g, pixel_bits);
1028 6192 i++;
1029
2/2
✓ Branch 0 taken 768 times.
✓ Branch 1 taken 5424 times.
 6192 if (i == 1 << pal->size_reduction) {
1030 768 skip_bits(&gb_g, 24);
1031 768 i = 0;
1032 }
1033 }
1034 }
1035 4 av_free(line);
1036 4 s->reduced_width = s->width; // we are back to full size
1037 }
1038
1039 // switch to local palette if it's worth initializing it
1040
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 6 times.
 8 if (img->frame->height * img->frame->width > 300) {
1041 uint8_t palette[256 * 4];
1042 2 const int size = pal->frame->width * 4;
1043
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 av_assert0(size <= 1024U);
1044 2 memcpy(palette, GET_PIXEL(pal->frame, 0, 0), size); // copy palette
1045 // set extra entries to transparent black
1046 2 memset(palette + size, 0, 256 * 4 - size);
1047
2/2
✓ Branch 0 taken 60 times.
✓ Branch 1 taken 2 times.
 62 for (y = 0; y < img->frame->height; y++) {
1048
2/2
✓ Branch 0 taken 6000 times.
✓ Branch 1 taken 60 times.
 6060 for (x = 0; x < img->frame->width; x++) {
1049 6000 p = GET_PIXEL(img->frame, x, y);
1050 6000 i = p[2];
1051 6000 AV_COPY32(p, &palette[i * 4]);
1052 }
1053 }
1054 } else {
1055
2/2
✓ Branch 0 taken 48 times.
✓ Branch 1 taken 6 times.
 54 for (y = 0; y < img->frame->height; y++) {
1056
2/2
✓ Branch 0 taken 576 times.
✓ Branch 1 taken 48 times.
 624 for (x = 0; x < img->frame->width; x++) {
1057 576 p = GET_PIXEL(img->frame, x, y);
1058 576 i = p[2];
1059
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 576 times.
 576 if (i >= pal->frame->width) {
1060 ✗ AV_WB32(p, 0x00000000);
1061 } else {
1062 576 const uint8_t *pi = GET_PIXEL(pal->frame, i, 0);
1063 576 AV_COPY32(p, pi);
1064 }
1065 }
1066 }
1067 }
1068
1069 8 return 0;
1070 }
1071
1072 16 static void update_canvas_size(AVCodecContext *avctx, int w, int h)
1073 {
1074 16 WebPContext *s = avctx->priv_data;
1075
3/4
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 12 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 4 times.
 16 if (s->width && s->width != w) {
1076 ✗ av_log(avctx, AV_LOG_WARNING, "Width mismatch. %d != %d\n",
1077 s->width, w);
1078 }
1079 16 s->width = w;
1080
3/4
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 12 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 4 times.
 16 if (s->height && s->height != h) {
1081 ✗ av_log(avctx, AV_LOG_WARNING, "Height mismatch. %d != %d\n",
1082 s->height, h);
1083 }
1084 16 s->height = h;
1085 16 }
1086
1087 12 static int vp8_lossless_decode_frame(AVCodecContext *avctx, AVFrame *p,
1088 int *got_frame, const uint8_t *data_start,
1089 unsigned int data_size, int is_alpha_chunk)
1090 {
1091 12 WebPContext *s = avctx->priv_data;
1092 int w, h, ret, i, used;
1093
1094
2/2
✓ Branch 0 taken 10 times.
✓ Branch 1 taken 2 times.
 12 if (!is_alpha_chunk) {
1095 10 s->lossless = 1;
1096 10 avctx->pix_fmt = AV_PIX_FMT_ARGB;
1097 }
1098
1099 12 ret = init_get_bits8(&s->gb, data_start, data_size);
1100
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 12 times.
 12 if (ret < 0)
1101 ✗ return ret;
1102
1103
2/2
✓ Branch 0 taken 10 times.
✓ Branch 1 taken 2 times.
 12 if (!is_alpha_chunk) {
1104
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 10 times.
 10 if (get_bits(&s->gb, 8) != 0x2F) {
1105 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid WebP Lossless signature\n");
1106 ✗ return AVERROR_INVALIDDATA;
1107 }
1108
1109 10 w = get_bits(&s->gb, 14) + 1;
1110 10 h = get_bits(&s->gb, 14) + 1;
1111
1112 10 update_canvas_size(avctx, w, h);
1113
1114 10 ret = ff_set_dimensions(avctx, s->width, s->height);
1115
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 10 times.
 10 if (ret < 0)
1116 ✗ return ret;
1117
1118 10 s->has_alpha = get_bits1(&s->gb);
1119
1120
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 10 times.
 10 if (get_bits(&s->gb, 3) != 0x0) {
1121 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid WebP Lossless version\n");
1122 ✗ return AVERROR_INVALIDDATA;
1123 }
1124 } else {
1125
2/4
✓ Branch 0 taken 2 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 2 times.
 2 if (!s->width || !s->height)
1126 ✗ return AVERROR_BUG;
1127 2 w = s->width;
1128 2 h = s->height;
1129 }
1130
1131 /* parse transformations */
1132 12 s->nb_transforms = 0;
1133 12 s->reduced_width = s->width;
1134 12 used = 0;
1135
2/2
✓ Branch 1 taken 22 times.
✓ Branch 2 taken 12 times.
 34 while (get_bits1(&s->gb)) {
1136 22 enum TransformType transform = get_bits(&s->gb, 2);
1137
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 22 times.
 22 if (used & (1 << transform)) {
1138 ✗ av_log(avctx, AV_LOG_ERROR, "Transform %d used more than once\n",
1139 transform);
1140 ✗ ret = AVERROR_INVALIDDATA;
1141 ✗ goto free_and_return;
1142 }
1143 22 used |= (1 << transform);
1144 22 s->transforms[s->nb_transforms++] = transform;
1145
4/4
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 4 times.
✓ Branch 2 taken 8 times.
✓ Branch 3 taken 4 times.
 22 switch (transform) {
1146 6 case PREDICTOR_TRANSFORM:
1147 6 ret = parse_transform_predictor(s);
1148 6 break;
1149 4 case COLOR_TRANSFORM:
1150 4 ret = parse_transform_color(s);
1151 4 break;
1152 8 case COLOR_INDEXING_TRANSFORM:
1153 8 ret = parse_transform_color_indexing(s);
1154 8 break;
1155 }
1156
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 22 times.
 22 if (ret < 0)
1157 ✗ goto free_and_return;
1158 }
1159
1160 /* decode primary image */
1161 12 s->image[IMAGE_ROLE_ARGB].frame = p;
1162
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 10 times.
 12 if (is_alpha_chunk)
1163 2 s->image[IMAGE_ROLE_ARGB].is_alpha_primary = 1;
1164 12 ret = decode_entropy_coded_image(s, IMAGE_ROLE_ARGB, w, h);
1165
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 12 times.
 12 if (ret < 0)
1166 ✗ goto free_and_return;
1167
1168 /* apply transformations */
1169
2/2
✓ Branch 0 taken 22 times.
✓ Branch 1 taken 12 times.
 34 for (i = s->nb_transforms - 1; i >= 0; i--) {
1170
4/5
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 4 times.
✓ Branch 2 taken 4 times.
✓ Branch 3 taken 8 times.
✗ Branch 4 not taken.
 22 switch (s->transforms[i]) {
1171 6 case PREDICTOR_TRANSFORM:
1172 6 ret = apply_predictor_transform(s);
1173 6 break;
1174 4 case COLOR_TRANSFORM:
1175 4 ret = apply_color_transform(s);
1176 4 break;
1177 4 case SUBTRACT_GREEN:
1178 4 ret = apply_subtract_green_transform(s);
1179 4 break;
1180 8 case COLOR_INDEXING_TRANSFORM:
1181 8 ret = apply_color_indexing_transform(s);
1182 8 break;
1183 }
1184
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 22 times.
 22 if (ret < 0)
1185 ✗ goto free_and_return;
1186 }
1187
1188 12 *got_frame = 1;
1189 12 p->pict_type = AV_PICTURE_TYPE_I;
1190 12 p->flags |= AV_FRAME_FLAG_KEY;
1191 12 ret = data_size;
1192
1193 12 free_and_return:
1194
2/2
✓ Branch 0 taken 60 times.
✓ Branch 1 taken 12 times.
 72 for (i = 0; i < IMAGE_ROLE_NB; i++)
1195 60 image_ctx_free(&s->image[i]);
1196
1197 12 return ret;
1198 }
1199
1200 ✗ static void alpha_inverse_prediction(AVFrame *frame, enum AlphaFilter m)
1201 {
1202 int x, y, ls;
1203 uint8_t *dec;
1204
1205 ✗ ls = frame->linesize[3];
1206
1207 /* filter first row using horizontal filter */
1208 ✗ dec = frame->data[3] + 1;
1209 ✗ for (x = 1; x < frame->width; x++, dec++)
1210 ✗ *dec += *(dec - 1);
1211
1212 /* filter first column using vertical filter */
1213 ✗ dec = frame->data[3] + ls;
1214 ✗ for (y = 1; y < frame->height; y++, dec += ls)
1215 ✗ *dec += *(dec - ls);
1216
1217 /* filter the rest using the specified filter */
1218 ✗ switch (m) {
1219 ✗ case ALPHA_FILTER_HORIZONTAL:
1220 ✗ for (y = 1; y < frame->height; y++) {
1221 ✗ dec = frame->data[3] + y * ls + 1;
1222 ✗ for (x = 1; x < frame->width; x++, dec++)
1223 ✗ *dec += *(dec - 1);
1224 }
1225 ✗ break;
1226 ✗ case ALPHA_FILTER_VERTICAL:
1227 ✗ for (y = 1; y < frame->height; y++) {
1228 ✗ dec = frame->data[3] + y * ls + 1;
1229 ✗ for (x = 1; x < frame->width; x++, dec++)
1230 ✗ *dec += *(dec - ls);
1231 }
1232 ✗ break;
1233 ✗ case ALPHA_FILTER_GRADIENT:
1234 ✗ for (y = 1; y < frame->height; y++) {
1235 ✗ dec = frame->data[3] + y * ls + 1;
1236 ✗ for (x = 1; x < frame->width; x++, dec++)
1237 ✗ dec[0] += av_clip_uint8(*(dec - 1) + *(dec - ls) - *(dec - ls - 1));
1238 }
1239 ✗ break;
1240 }
1241 ✗ }
1242
1243 2 static int vp8_lossy_decode_alpha(AVCodecContext *avctx, AVFrame *p,
1244 const uint8_t *data_start,
1245 unsigned int data_size)
1246 {
1247 2 WebPContext *s = avctx->priv_data;
1248 int x, y, ret;
1249
1250
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (s->alpha_compression == ALPHA_COMPRESSION_NONE) {
1251 GetByteContext gb;
1252
1253 ✗ bytestream2_init(&gb, data_start, data_size);
1254 ✗ for (y = 0; y < s->height; y++)
1255 ✗ bytestream2_get_buffer(&gb, p->data[3] + p->linesize[3] * y,
1256 ✗ s->width);
1257
1/2
✓ Branch 0 taken 2 times.
✗ Branch 1 not taken.
 2 } else if (s->alpha_compression == ALPHA_COMPRESSION_VP8L) {
1258 uint8_t *ap, *pp;
1259 2 int alpha_got_frame = 0;
1260
1261 2 s->alpha_frame = av_frame_alloc();
1262
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!s->alpha_frame)
1263 ✗ return AVERROR(ENOMEM);
1264
1265 2 ret = vp8_lossless_decode_frame(avctx, s->alpha_frame, &alpha_got_frame,
1266 data_start, data_size, 1);
1267
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (ret < 0) {
1268 ✗ av_frame_free(&s->alpha_frame);
1269 ✗ return ret;
1270 }
1271
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!alpha_got_frame) {
1272 ✗ av_frame_free(&s->alpha_frame);
1273 ✗ return AVERROR_INVALIDDATA;
1274 }
1275
1276 /* copy green component of alpha image to alpha plane of primary image */
1277
2/2
✓ Branch 0 taken 16 times.
✓ Branch 1 taken 2 times.
 18 for (y = 0; y < s->height; y++) {
1278 16 ap = GET_PIXEL(s->alpha_frame, 0, y) + 2;
1279 16 pp = p->data[3] + p->linesize[3] * y;
1280
2/2
✓ Branch 0 taken 192 times.
✓ Branch 1 taken 16 times.
 208 for (x = 0; x < s->width; x++) {
1281 192 *pp = *ap;
1282 192 pp++;
1283 192 ap += 4;
1284 }
1285 }
1286 2 av_frame_free(&s->alpha_frame);
1287 }
1288
1289 /* apply alpha filtering */
1290
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (s->alpha_filter)
1291 ✗ alpha_inverse_prediction(p, s->alpha_filter);
1292
1293 2 return 0;
1294 }
1295
1296 6 static int vp8_lossy_decode_frame(AVCodecContext *avctx, AVFrame *p,
1297 int *got_frame, uint8_t *data_start,
1298 unsigned int data_size)
1299 {
1300 6 WebPContext *s = avctx->priv_data;
1301 int ret;
1302
1303
1/2
✓ Branch 0 taken 6 times.
✗ Branch 1 not taken.
 6 if (!s->initialized) {
1304 6 ff_vp8_decode_init(avctx);
1305 6 s->initialized = 1;
1306 6 s->v.actually_webp = 1;
1307 }
1308
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 4 times.
 6 avctx->pix_fmt = s->has_alpha ? AV_PIX_FMT_YUVA420P : AV_PIX_FMT_YUV420P;
1309 6 s->lossless = 0;
1310
1311
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (data_size > INT_MAX) {
1312 ✗ av_log(avctx, AV_LOG_ERROR, "unsupported chunk size\n");
1313 ✗ return AVERROR_PATCHWELCOME;
1314 }
1315
1316 6 av_packet_unref(s->pkt);
1317 6 s->pkt->data = data_start;
1318 6 s->pkt->size = data_size;
1319
1320 6 ret = ff_vp8_decode_frame(avctx, p, got_frame, s->pkt);
1321
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (ret < 0)
1322 ✗ return ret;
1323
1324
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (!*got_frame)
1325 ✗ return AVERROR_INVALIDDATA;
1326
1327 6 update_canvas_size(avctx, avctx->width, avctx->height);
1328
1329
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 4 times.
 6 if (s->has_alpha) {
1330 2 ret = vp8_lossy_decode_alpha(avctx, p, s->alpha_data,
1331 2 s->alpha_data_size);
1332
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (ret < 0)
1333 ✗ return ret;
1334 }
1335 6 return ret;
1336 }
1337
1338 16 static int webp_decode_frame(AVCodecContext *avctx, AVFrame *p,
1339 int *got_frame, AVPacket *avpkt)
1340 {
1341 16 WebPContext *s = avctx->priv_data;
1342 GetByteContext gb;
1343 int ret;
1344 uint32_t chunk_type, chunk_size;
1345 16 int vp8x_flags = 0;
1346
1347 16 s->avctx = avctx;
1348 16 s->width = 0;
1349 16 s->height = 0;
1350 16 *got_frame = 0;
1351 16 s->has_alpha = 0;
1352 16 s->has_exif = 0;
1353 16 s->has_iccp = 0;
1354 16 bytestream2_init(&gb, avpkt->data, avpkt->size);
1355
1356
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 16 times.
 16 if (bytestream2_get_bytes_left(&gb) < 12)
1357 ✗ return AVERROR_INVALIDDATA;
1358
1359
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 16 times.
 16 if (bytestream2_get_le32(&gb) != MKTAG('R', 'I', 'F', 'F')) {
1360 ✗ av_log(avctx, AV_LOG_ERROR, "missing RIFF tag\n");
1361 ✗ return AVERROR_INVALIDDATA;
1362 }
1363
1364 16 chunk_size = bytestream2_get_le32(&gb);
1365
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 16 times.
 16 if (bytestream2_get_bytes_left(&gb) < chunk_size)
1366 ✗ return AVERROR_INVALIDDATA;
1367
1368
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 16 times.
 16 if (bytestream2_get_le32(&gb) != MKTAG('W', 'E', 'B', 'P')) {
1369 ✗ av_log(avctx, AV_LOG_ERROR, "missing WEBP tag\n");
1370 ✗ return AVERROR_INVALIDDATA;
1371 }
1372
1373
2/2
✓ Branch 1 taken 24 times.
✓ Branch 2 taken 16 times.
 40 while (bytestream2_get_bytes_left(&gb) > 8) {
1374 24 char chunk_str[5] = { 0 };
1375
1376 24 chunk_type = bytestream2_get_le32(&gb);
1377 24 chunk_size = bytestream2_get_le32(&gb);
1378
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 24 times.
 24 if (chunk_size == UINT32_MAX)
1379 ✗ return AVERROR_INVALIDDATA;
1380 24 chunk_size += chunk_size & 1;
1381
1382
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 24 times.
 24 if (bytestream2_get_bytes_left(&gb) < chunk_size) {
1383 /* we seem to be running out of data, but it could also be that the
1384 bitstream has trailing junk leading to bogus chunk_size. */
1385 ✗ break;
1386 }
1387
1388
5/8
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 10 times.
✓ Branch 2 taken 4 times.
✓ Branch 3 taken 2 times.
✓ Branch 4 taken 2 times.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
✗ Branch 7 not taken.
 24 switch (chunk_type) {
1389 6 case MKTAG('V', 'P', '8', ' '):
1390
1/2
✓ Branch 0 taken 6 times.
✗ Branch 1 not taken.
 6 if (!*got_frame) {
1391 6 ret = vp8_lossy_decode_frame(avctx, p, got_frame,
1392 6 avpkt->data + bytestream2_tell(&gb),
1393 chunk_size);
1394
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (ret < 0)
1395 ✗ return ret;
1396 }
1397 6 bytestream2_skip(&gb, chunk_size);
1398 6 break;
1399 10 case MKTAG('V', 'P', '8', 'L'):
1400
1/2
✓ Branch 0 taken 10 times.
✗ Branch 1 not taken.
 10 if (!*got_frame) {
1401 10 ret = vp8_lossless_decode_frame(avctx, p, got_frame,
1402 10 avpkt->data + bytestream2_tell(&gb),
1403 chunk_size, 0);
1404
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 10 times.
 10 if (ret < 0)
1405 ✗ return ret;
1406 10 avctx->properties |= FF_CODEC_PROPERTY_LOSSLESS;
1407 }
1408 10 bytestream2_skip(&gb, chunk_size);
1409 10 break;
1410 4 case MKTAG('V', 'P', '8', 'X'):
1411
3/6
✓ Branch 0 taken 4 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 4 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 4 times.
 4 if (s->width || s->height || *got_frame) {
1412 ✗ av_log(avctx, AV_LOG_ERROR, "Canvas dimensions are already set\n");
1413 ✗ return AVERROR_INVALIDDATA;
1414 }
1415 4 vp8x_flags = bytestream2_get_byte(&gb);
1416 4 bytestream2_skip(&gb, 3);
1417 4 s->width = bytestream2_get_le24(&gb) + 1;
1418 4 s->height = bytestream2_get_le24(&gb) + 1;
1419 4 ret = av_image_check_size(s->width, s->height, 0, avctx);
1420
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (ret < 0)
1421 ✗ return ret;
1422 4 break;
1423 2 case MKTAG('A', 'L', 'P', 'H'): {
1424 int alpha_header, filter_m, compression;
1425
1426
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!(vp8x_flags & VP8X_FLAG_ALPHA)) {
1427 ✗ av_log(avctx, AV_LOG_WARNING,
1428 "ALPHA chunk present, but alpha bit not set in the "
1429 "VP8X header\n");
1430 }
1431
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (chunk_size == 0) {
1432 ✗ av_log(avctx, AV_LOG_ERROR, "invalid ALPHA chunk size\n");
1433 ✗ return AVERROR_INVALIDDATA;
1434 }
1435 2 alpha_header = bytestream2_get_byte(&gb);
1436 2 s->alpha_data = avpkt->data + bytestream2_tell(&gb);
1437 2 s->alpha_data_size = chunk_size - 1;
1438 2 bytestream2_skip(&gb, s->alpha_data_size);
1439
1440 2 filter_m = (alpha_header >> 2) & 0x03;
1441 2 compression = alpha_header & 0x03;
1442
1443
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (compression > ALPHA_COMPRESSION_VP8L) {
1444 ✗ av_log(avctx, AV_LOG_VERBOSE,
1445 "skipping unsupported ALPHA chunk\n");
1446 } else {
1447 2 s->has_alpha = 1;
1448 2 s->alpha_compression = compression;
1449 2 s->alpha_filter = filter_m;
1450 }
1451
1452 2 break;
1453 }
1454 2 case MKTAG('E', 'X', 'I', 'F'): {
1455 2 int le, ifd_offset, exif_offset = bytestream2_tell(&gb);
1456 2 AVDictionary *exif_metadata = NULL;
1457 GetByteContext exif_gb;
1458
1459
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (s->has_exif) {
1460 ✗ av_log(avctx, AV_LOG_VERBOSE, "Ignoring extra EXIF chunk\n");
1461 ✗ goto exif_end;
1462 }
1463
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!(vp8x_flags & VP8X_FLAG_EXIF_METADATA))
1464 ✗ av_log(avctx, AV_LOG_WARNING,
1465 "EXIF chunk present, but Exif bit not set in the "
1466 "VP8X header\n");
1467
1468 2 s->has_exif = 1;
1469 2 bytestream2_init(&exif_gb, avpkt->data + exif_offset,
1470 2 avpkt->size - exif_offset);
1471
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 2 times.
 2 if (ff_tdecode_header(&exif_gb, &le, &ifd_offset) < 0) {
1472 ✗ av_log(avctx, AV_LOG_ERROR, "invalid TIFF header "
1473 "in Exif data\n");
1474 ✗ goto exif_end;
1475 }
1476
1477 2 bytestream2_seek(&exif_gb, ifd_offset, SEEK_SET);
1478
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 2 times.
 2 if (ff_exif_decode_ifd(avctx, &exif_gb, le, 0, &exif_metadata) < 0) {
1479 ✗ av_log(avctx, AV_LOG_ERROR, "error decoding Exif data\n");
1480 ✗ goto exif_end;
1481 }
1482
1483 2 av_dict_copy(&p->metadata, exif_metadata, 0);
1484
1485 2 exif_end:
1486 2 av_dict_free(&exif_metadata);
1487 2 bytestream2_skip(&gb, chunk_size);
1488 2 break;
1489 }
1490 ✗ case MKTAG('I', 'C', 'C', 'P'): {
1491 AVFrameSideData *sd;
1492
1493 ✗ if (s->has_iccp) {
1494 ✗ av_log(avctx, AV_LOG_VERBOSE, "Ignoring extra ICCP chunk\n");
1495 ✗ bytestream2_skip(&gb, chunk_size);
1496 ✗ break;
1497 }
1498 ✗ if (!(vp8x_flags & VP8X_FLAG_ICC))
1499 ✗ av_log(avctx, AV_LOG_WARNING,
1500 "ICCP chunk present, but ICC Profile bit not set in the "
1501 "VP8X header\n");
1502
1503 ✗ s->has_iccp = 1;
1504
1505 ✗ ret = ff_frame_new_side_data(avctx, p, AV_FRAME_DATA_ICC_PROFILE, chunk_size, &sd);
1506 ✗ if (ret < 0)
1507 ✗ return ret;
1508
1509 ✗ if (sd) {
1510 ✗ bytestream2_get_buffer(&gb, sd->data, chunk_size);
1511 } else {
1512 ✗ bytestream2_skip(&gb, chunk_size);
1513 }
1514 ✗ break;
1515 }
1516 ✗ case MKTAG('A', 'N', 'I', 'M'):
1517 case MKTAG('A', 'N', 'M', 'F'):
1518 case MKTAG('X', 'M', 'P', ' '):
1519 ✗ AV_WL32(chunk_str, chunk_type);
1520 ✗ av_log(avctx, AV_LOG_WARNING, "skipping unsupported chunk: %s\n",
1521 chunk_str);
1522 ✗ bytestream2_skip(&gb, chunk_size);
1523 ✗ break;
1524 ✗ default:
1525 ✗ AV_WL32(chunk_str, chunk_type);
1526 ✗ av_log(avctx, AV_LOG_VERBOSE, "skipping unknown chunk: %s\n",
1527 chunk_str);
1528 ✗ bytestream2_skip(&gb, chunk_size);
1529 ✗ break;
1530 }
1531 }
1532
1533
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 16 times.
 16 if (!*got_frame) {
1534 ✗ av_log(avctx, AV_LOG_ERROR, "image data not found\n");
1535 ✗ return AVERROR_INVALIDDATA;
1536 }
1537
1538 16 return avpkt->size;
1539 }
1540
1541 16 static av_cold int webp_decode_init(AVCodecContext *avctx)
1542 {
1543 16 WebPContext *s = avctx->priv_data;
1544
1545 16 s->pkt = av_packet_alloc();
1546
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 16 times.
 16 if (!s->pkt)
1547 ✗ return AVERROR(ENOMEM);
1548
1549 16 return 0;
1550 }
1551
1552 16 static av_cold int webp_decode_close(AVCodecContext *avctx)
1553 {
1554 16 WebPContext *s = avctx->priv_data;
1555
1556 16 av_packet_free(&s->pkt);
1557
1558
2/2
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 10 times.
 16 if (s->initialized)
1559 6 return ff_vp8_decode_free(avctx);
1560
1561 10 return 0;
1562 }
1563
1564 const FFCodec ff_webp_decoder = {
1565 .p.name = "webp",
1566 CODEC_LONG_NAME("WebP image"),
1567 .p.type = AVMEDIA_TYPE_VIDEO,
1568 .p.id = AV_CODEC_ID_WEBP,
1569 .priv_data_size = sizeof(WebPContext),
1570 .init = webp_decode_init,
1571 FF_CODEC_DECODE_CB(webp_decode_frame),
1572 .close = webp_decode_close,
1573 .p.capabilities = AV_CODEC_CAP_DR1 | AV_CODEC_CAP_FRAME_THREADS,
1574 .caps_internal = FF_CODEC_CAP_ICC_PROFILES |
1575 FF_CODEC_CAP_USES_PROGRESSFRAMES,
1576 };
1577