FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/bmp.c
Date: 2026-08-26 10:34:04
Exec Total Coverage
Lines: 156 216 72.2%
Functions: 1 1 100.0%
Branches: 114 184 62.0%
Line Branch Exec Source
1 /*
2 * BMP image format decoder
3 * Copyright (c) 2005 Mans Rullgard
4 *
5 * This file is part of FFmpeg.
6 *
7 * FFmpeg is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
11 *
12 * FFmpeg is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public
18 * License along with FFmpeg; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20 */
21
22 #include <inttypes.h>
23
24 #include "avcodec.h"
25 #include "bytestream.h"
26 #include "bmp.h"
27 #include "codec_internal.h"
28 #include "decode.h"
29 #include "msrledec.h"
30 #include "libavutil/intreadwrite.h"
31
32 53 static int bmp_decode_frame(AVCodecContext *avctx, AVFrame *p,
33 int *got_frame, AVPacket *avpkt)
34 {
35 53 const uint8_t *buf = avpkt->data;
36 53 int buf_size = avpkt->size;
37 unsigned int fsize, hsize;
38 int width, height;
39 unsigned int depth;
40 BiCompression comp;
41 unsigned int ihsize;
42 int i, j, n, linesize, ret;
43 53 uint32_t rgb[3] = {0};
44 53 uint32_t alpha = 0;
45 uint8_t *ptr;
46 int dsize;
47 53 const uint8_t *buf0 = buf;
48 GetByteContext gb;
49
50
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 53 times.
 53 if (buf_size < 14) {
51 ✗ av_log(avctx, AV_LOG_ERROR, "buf size too small (%d)\n", buf_size);
52 ✗ return AVERROR_INVALIDDATA;
53 }
54
55
2/4
✓ Branch 1 taken 53 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 53 times.
 106 if (bytestream_get_byte(&buf) != 'B' ||
56 53 bytestream_get_byte(&buf) != 'M') {
57 ✗ av_log(avctx, AV_LOG_ERROR, "bad magic number\n");
58 ✗ return AVERROR_INVALIDDATA;
59 }
60
61 53 fsize = bytestream_get_le32(&buf);
62
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 53 times.
 53 if (buf_size < fsize) {
63 ✗ av_log(avctx, AV_LOG_ERROR, "not enough data (%d < %u), trying to decode anyway\n",
64 buf_size, fsize);
65 ✗ fsize = buf_size;
66 }
67
68 53 buf += 2; /* reserved1 */
69 53 buf += 2; /* reserved2 */
70
71 53 hsize = bytestream_get_le32(&buf); /* header size */
72 53 ihsize = bytestream_get_le32(&buf); /* more header size */
73
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 53 times.
 53 if (ihsize + 14LL > hsize) {
74 ✗ av_log(avctx, AV_LOG_ERROR, "invalid header size %u\n", hsize);
75 ✗ return AVERROR_INVALIDDATA;
76 }
77
78 /* sometimes file size is set to some headers size, set a real size in that case */
79
3/4
✓ Branch 0 taken 53 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 2 times.
✓ Branch 3 taken 51 times.
 53 if (fsize == 14 || fsize == ihsize + 14)
80 2 fsize = buf_size - 2;
81
82
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 53 times.
 53 if (fsize <= hsize) {
83 ✗ av_log(avctx, AV_LOG_ERROR,
84 "Declared file size is less than header size (%u < %u)\n",
85 fsize, hsize);
86 ✗ return AVERROR_INVALIDDATA;
87 }
88
89
2/3
✓ Branch 0 taken 51 times.
✓ Branch 1 taken 2 times.
✗ Branch 2 not taken.
 53 switch (ihsize) {
90 51 case 40: // windib
91 case 56: // windib v3
92 case 64: // OS/2 v2
93 case 108: // windib v4
94 case 124: // windib v5
95 51 width = bytestream_get_le32(&buf);
96 51 height = bytestream_get_le32(&buf);
97 51 break;
98 2 case 12: // OS/2 v1
99 2 width = bytestream_get_le16(&buf);
100 2 height = bytestream_get_le16(&buf);
101 2 break;
102 ✗ default:
103 ✗ avpriv_report_missing_feature(avctx, "Information header size %u",
104 ihsize);
105 ✗ return AVERROR_PATCHWELCOME;
106 }
107
108 /* planes */
109
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 53 times.
 53 if (bytestream_get_le16(&buf) != 1) {
110 ✗ av_log(avctx, AV_LOG_ERROR, "invalid BMP header\n");
111 ✗ return AVERROR_INVALIDDATA;
112 }
113
114 53 depth = bytestream_get_le16(&buf);
115
116
2/2
✓ Branch 0 taken 51 times.
✓ Branch 1 taken 2 times.
 53 if (ihsize >= 40)
117 51 comp = bytestream_get_le32(&buf);
118 else
119 2 comp = BMP_RGB;
120
121
7/8
✓ Branch 0 taken 11 times.
✓ Branch 1 taken 42 times.
✓ Branch 2 taken 4 times.
✓ Branch 3 taken 7 times.
✓ Branch 4 taken 2 times.
✓ Branch 5 taken 2 times.
✗ Branch 6 not taken.
✓ Branch 7 taken 2 times.
 53 if (comp != BMP_RGB && comp != BMP_BITFIELDS && comp != BMP_RLE4 &&
122 comp != BMP_RLE8) {
123 ✗ av_log(avctx, AV_LOG_ERROR, "BMP coding %d not supported\n", comp);
124 ✗ return AVERROR_INVALIDDATA;
125 }
126
127
2/2
✓ Branch 0 taken 7 times.
✓ Branch 1 taken 46 times.
 53 if (comp == BMP_BITFIELDS) {
128 7 buf += 20;
129 7 rgb[0] = bytestream_get_le32(&buf);
130 7 rgb[1] = bytestream_get_le32(&buf);
131 7 rgb[2] = bytestream_get_le32(&buf);
132
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 7 times.
 7 if (ihsize > 40)
133 ✗ alpha = bytestream_get_le32(&buf);
134 }
135
136 53 ret = ff_set_dimensions(avctx, width, height > 0 ? height : -(unsigned)height);
137
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 53 times.
 53 if (ret < 0) {
138 ✗ av_log(avctx, AV_LOG_ERROR, "Failed to set dimensions %d %d\n", width, height);
139 ✗ return AVERROR_INVALIDDATA;
140 }
141
142 53 avctx->pix_fmt = AV_PIX_FMT_NONE;
143
144
5/6
✓ Branch 0 taken 5 times.
✓ Branch 1 taken 28 times.
✓ Branch 2 taken 6 times.
✓ Branch 3 taken 6 times.
✓ Branch 4 taken 8 times.
✗ Branch 5 not taken.
 53 switch (depth) {
145 5 case 32:
146
2/2
✓ Branch 0 taken 3 times.
✓ Branch 1 taken 2 times.
 5 if (comp == BMP_BITFIELDS) {
147
1/6
✗ Branch 0 not taken.
✓ Branch 1 taken 3 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✗ Branch 5 not taken.
 3 if (rgb[0] == 0xFF000000 && rgb[1] == 0x00FF0000 && rgb[2] == 0x0000FF00)
148 ✗ avctx->pix_fmt = alpha ? AV_PIX_FMT_ABGR : AV_PIX_FMT_0BGR;
149
3/6
✓ Branch 0 taken 3 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 3 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 3 times.
✗ Branch 5 not taken.
 3 else if (rgb[0] == 0x00FF0000 && rgb[1] == 0x0000FF00 && rgb[2] == 0x000000FF)
150
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 3 times.
 3 avctx->pix_fmt = alpha ? AV_PIX_FMT_BGRA : AV_PIX_FMT_BGR0;
151 ✗ else if (rgb[0] == 0x0000FF00 && rgb[1] == 0x00FF0000 && rgb[2] == 0xFF000000)
152 ✗ avctx->pix_fmt = alpha ? AV_PIX_FMT_ARGB : AV_PIX_FMT_0RGB;
153 ✗ else if (rgb[0] == 0x000000FF && rgb[1] == 0x0000FF00 && rgb[2] == 0x00FF0000)
154 ✗ avctx->pix_fmt = alpha ? AV_PIX_FMT_RGBA : AV_PIX_FMT_RGB0;
155 else {
156 ✗ av_log(avctx, AV_LOG_ERROR, "Unknown bitfields "
157 "%0"PRIX32" %0"PRIX32" %0"PRIX32"\n", rgb[0], rgb[1], rgb[2]);
158 ✗ return AVERROR(EINVAL);
159 }
160 } else {
161 2 avctx->pix_fmt = AV_PIX_FMT_BGRA;
162 }
163 5 break;
164 28 case 24:
165 28 avctx->pix_fmt = AV_PIX_FMT_BGR24;
166 28 break;
167 6 case 16:
168
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 4 times.
 6 if (comp == BMP_RGB)
169 2 avctx->pix_fmt = AV_PIX_FMT_RGB555;
170
1/2
✓ Branch 0 taken 4 times.
✗ Branch 1 not taken.
 4 else if (comp == BMP_BITFIELDS) {
171
4/6
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 2 times.
✓ Branch 2 taken 2 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 2 times.
✗ Branch 5 not taken.
 4 if (rgb[0] == 0xF800 && rgb[1] == 0x07E0 && rgb[2] == 0x001F)
172 2 avctx->pix_fmt = AV_PIX_FMT_RGB565;
173
3/6
✓ Branch 0 taken 2 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 2 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 2 times.
✗ Branch 5 not taken.
 2 else if (rgb[0] == 0x7C00 && rgb[1] == 0x03E0 && rgb[2] == 0x001F)
174 2 avctx->pix_fmt = AV_PIX_FMT_RGB555;
175 ✗ else if (rgb[0] == 0x0F00 && rgb[1] == 0x00F0 && rgb[2] == 0x000F)
176 ✗ avctx->pix_fmt = AV_PIX_FMT_RGB444;
177 else {
178 ✗ av_log(avctx, AV_LOG_ERROR,
179 "Unknown bitfields %0"PRIX32" %0"PRIX32" %0"PRIX32"\n",
180 rgb[0], rgb[1], rgb[2]);
181 ✗ return AVERROR(EINVAL);
182 }
183 }
184 6 break;
185 6 case 8:
186
1/2
✓ Branch 0 taken 6 times.
✗ Branch 1 not taken.
 6 if (hsize - ihsize - 14 > 0)
187 6 avctx->pix_fmt = AV_PIX_FMT_PAL8;
188 else
189 ✗ avctx->pix_fmt = AV_PIX_FMT_GRAY8;
190 6 break;
191 8 case 1:
192 case 4:
193
1/2
✓ Branch 0 taken 8 times.
✗ Branch 1 not taken.
 8 if (hsize - ihsize - 14 > 0) {
194 8 avctx->pix_fmt = AV_PIX_FMT_PAL8;
195 } else {
196 ✗ av_log(avctx, AV_LOG_ERROR, "Unknown palette for %u-colour BMP\n",
197 1 << depth);
198 ✗ return AVERROR_INVALIDDATA;
199 }
200 8 break;
201 ✗ default:
202 ✗ av_log(avctx, AV_LOG_ERROR, "depth %u not supported\n", depth);
203 ✗ return AVERROR_INVALIDDATA;
204 }
205
206
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 53 times.
 53 if (avctx->pix_fmt == AV_PIX_FMT_NONE) {
207 ✗ av_log(avctx, AV_LOG_ERROR, "unsupported pixel format\n");
208 ✗ return AVERROR_INVALIDDATA;
209 }
210
211 53 buf = buf0 + hsize;
212 53 dsize = buf_size - hsize;
213
214 /* Line size in file multiple of 4 */
215 53 n = ((avctx->width * depth + 31) / 8) & ~3;
216
217
5/6
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 49 times.
✓ Branch 2 taken 2 times.
✓ Branch 3 taken 2 times.
✗ Branch 4 not taken.
✓ Branch 5 taken 2 times.
 53 if (n * avctx->height > dsize && comp != BMP_RLE4 && comp != BMP_RLE8) {
218 ✗ n = (avctx->width * depth + 7) / 8;
219 ✗ if (n * avctx->height > dsize) {
220 ✗ av_log(avctx, AV_LOG_ERROR, "not enough data (%d < %d)\n",
221 ✗ dsize, n * avctx->height);
222 ✗ return AVERROR_INVALIDDATA;
223 }
224 ✗ av_log(avctx, AV_LOG_ERROR, "data size too small, assuming missing line alignment\n");
225 }
226
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 53 times.
 53 if ((ret = ff_get_buffer(avctx, p, 0)) < 0)
227 ✗ return ret;
228
229 // RLE may skip decoding some picture areas, so blank picture before decoding
230
4/4
✓ Branch 0 taken 51 times.
✓ Branch 1 taken 2 times.
✓ Branch 2 taken 2 times.
✓ Branch 3 taken 49 times.
 53 if (comp == BMP_RLE4 || comp == BMP_RLE8)
231 4 memset(p->data[0], 0, avctx->height * p->linesize[0]);
232
233
1/2
✓ Branch 0 taken 53 times.
✗ Branch 1 not taken.
 53 if (height > 0) {
234 53 ptr = p->data[0] + (avctx->height - 1) * p->linesize[0];
235 53 linesize = -p->linesize[0];
236 } else {
237 ✗ ptr = p->data[0];
238 ✗ linesize = p->linesize[0];
239 }
240
241
2/2
✓ Branch 0 taken 14 times.
✓ Branch 1 taken 39 times.
 53 if (avctx->pix_fmt == AV_PIX_FMT_PAL8) {
242 14 int colors = 1 << depth;
243
244 14 memset(p->data[1], 0, 1024);
245
246
2/2
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 2 times.
 14 if (ihsize >= 36) {
247 int t;
248 12 buf = buf0 + 46;
249 12 t = bytestream_get_le32(&buf);
250
2/4
✓ Branch 0 taken 12 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 12 times.
 12 if (t < 0 || t > (1 << depth)) {
251 ✗ av_log(avctx, AV_LOG_ERROR,
252 "Incorrect number of colors - %X for bitdepth %u\n",
253 t, depth);
254
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 10 times.
 12 } else if (t) {
255 2 colors = t;
256 }
257 } else {
258
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 colors = FFMIN(256, (hsize-ihsize-14) / 3);
259 }
260 14 buf = buf0 + 14 + ihsize; //palette location
261 // OS/2 bitmap, 3 bytes per palette entry
262
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 12 times.
 14 if ((hsize-ihsize-14) < (colors << 2)) {
263
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if ((hsize-ihsize-14) < colors * 3) {
264 ✗ av_log(avctx, AV_LOG_ERROR, "palette doesn't fit in packet\n");
265 ✗ return AVERROR_INVALIDDATA;
266 }
267
2/2
✓ Branch 0 taken 512 times.
✓ Branch 1 taken 2 times.
 514 for (i = 0; i < colors; i++)
268 512 ((uint32_t*)p->data[1])[i] = (0xFFU<<24) | bytestream_get_le24(&buf);
269 } else {
270
2/2
✓ Branch 0 taken 1124 times.
✓ Branch 1 taken 12 times.
 1136 for (i = 0; i < colors; i++)
271 1124 ((uint32_t*)p->data[1])[i] = 0xFFU << 24 | bytestream_get_le32(&buf);
272 }
273 14 buf = buf0 + hsize;
274 }
275
4/4
✓ Branch 0 taken 51 times.
✓ Branch 1 taken 2 times.
✓ Branch 2 taken 2 times.
✓ Branch 3 taken 49 times.
 53 if (comp == BMP_RLE4 || comp == BMP_RLE8) {
276
3/4
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 2 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 2 times.
 4 if (comp == BMP_RLE8 && height < 0) {
277 ✗ p->data[0] += p->linesize[0] * (avctx->height - 1);
278 ✗ p->linesize[0] = -p->linesize[0];
279 }
280 4 bytestream2_init(&gb, buf, dsize);
281 4 ff_msrle_decode(avctx, p, depth, &gb);
282
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (height < 0) {
283 ✗ p->data[0] += p->linesize[0] * (avctx->height - 1);
284 ✗ p->linesize[0] = -p->linesize[0];
285 }
286 } else {
287
4/5
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 37 times.
✓ Branch 2 taken 4 times.
✓ Branch 3 taken 6 times.
✗ Branch 4 not taken.
 49 switch (depth) {
288 2 case 1:
289
2/2
✓ Branch 0 taken 128 times.
✓ Branch 1 taken 2 times.
 130 for (i = 0; i < avctx->height; i++) {
290 int j;
291
2/2
✓ Branch 0 taken 1920 times.
✓ Branch 1 taken 128 times.
 2048 for (j = 0; j < avctx->width >> 3; j++) {
292 1920 ptr[j*8+0] = buf[j] >> 7;
293 1920 ptr[j*8+1] = (buf[j] >> 6) & 1;
294 1920 ptr[j*8+2] = (buf[j] >> 5) & 1;
295 1920 ptr[j*8+3] = (buf[j] >> 4) & 1;
296 1920 ptr[j*8+4] = (buf[j] >> 3) & 1;
297 1920 ptr[j*8+5] = (buf[j] >> 2) & 1;
298 1920 ptr[j*8+6] = (buf[j] >> 1) & 1;
299 1920 ptr[j*8+7] = buf[j] & 1;
300 }
301
2/2
✓ Branch 0 taken 896 times.
✓ Branch 1 taken 128 times.
 1024 for (j = 0; j < (avctx->width & 7); j++) {
302 896 ptr[avctx->width - (avctx->width & 7) + j] = buf[avctx->width >> 3] >> (7 - j) & 1;
303 }
304 128 buf += n;
305 128 ptr += linesize;
306 }
307 2 break;
308 37 case 8:
309 case 24:
310 case 32:
311
2/2
✓ Branch 0 taken 7118 times.
✓ Branch 1 taken 37 times.
 7155 for (i = 0; i < avctx->height; i++) {
312 7118 memcpy(ptr, buf, n);
313 7118 buf += n;
314 7118 ptr += linesize;
315 }
316 37 break;
317 4 case 4:
318
2/2
✓ Branch 0 taken 172 times.
✓ Branch 1 taken 4 times.
 176 for (i = 0; i < avctx->height; i++) {
319 int j;
320
2/2
✓ Branch 0 taken 14880 times.
✓ Branch 1 taken 172 times.
 15052 for (j = 0; j < n; j++) {
321 14880 ptr[j*2+0] = (buf[j] >> 4) & 0xF;
322 14880 ptr[j*2+1] = buf[j] & 0xF;
323 }
324 172 buf += n;
325 172 ptr += linesize;
326 }
327 4 break;
328 6 case 16:
329
2/2
✓ Branch 0 taken 384 times.
✓ Branch 1 taken 6 times.
 390 for (i = 0; i < avctx->height; i++) {
330 384 const uint8_t *src = buf;
331 384 uint16_t *dst = (uint16_t *) ptr;
332
333
2/2
✓ Branch 0 taken 48768 times.
✓ Branch 1 taken 384 times.
 49152 for (j = 0; j < avctx->width; j++) {
334 48768 *dst++ = AV_RL16(src);
335 48768 src += 2;
336 }
337
338 384 buf += n;
339 384 ptr += linesize;
340 }
341 6 break;
342 ✗ default:
343 ✗ av_log(avctx, AV_LOG_ERROR, "BMP decoder is broken\n");
344 ✗ return AVERROR_INVALIDDATA;
345 }
346 }
347
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 51 times.
 53 if (avctx->pix_fmt == AV_PIX_FMT_BGRA) {
348
2/2
✓ Branch 0 taken 128 times.
✓ Branch 1 taken 2 times.
 130 for (i = 0; i < avctx->height; i++) {
349 int j;
350 128 uint8_t *ptr = p->data[0] + p->linesize[0]*i + 3;
351
2/2
✓ Branch 0 taken 16256 times.
✓ Branch 1 taken 128 times.
 16384 for (j = 0; j < avctx->width; j++) {
352
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 16256 times.
 16256 if (ptr[4*j])
353 ✗ break;
354 }
355
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 128 times.
 128 if (j < avctx->width)
356 ✗ break;
357 }
358
1/2
✓ Branch 0 taken 2 times.
✗ Branch 1 not taken.
 2 if (i == avctx->height)
359 2 avctx->pix_fmt = p->format = AV_PIX_FMT_BGR0;
360 }
361
362 53 *got_frame = 1;
363
364 53 return buf_size;
365 }
366
367 const FFCodec ff_bmp_decoder = {
368 .p.name = "bmp",
369 CODEC_LONG_NAME("BMP (Windows and OS/2 bitmap)"),
370 .p.type = AVMEDIA_TYPE_VIDEO,
371 .p.id = AV_CODEC_ID_BMP,
372 .p.capabilities = AV_CODEC_CAP_DR1,
373 FF_CODEC_DECODE_CB(bmp_decode_frame),
374 };
375