FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/h264_refs.c
Date: 2026-01-16 07:34:38
Exec Total Coverage
Lines: 417 483 86.3%
Functions: 22 22 100.0%
Branches: 316 413 76.5%
Line Branch Exec Source
1 /*
2 * H.26L/H.264/AVC/JVT/14496-10/... reference picture handling
3 * Copyright (c) 2003 Michael Niedermayer <michaelni@gmx.at>
4 *
5 * This file is part of FFmpeg.
6 *
7 * FFmpeg is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
11 *
12 * FFmpeg is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public
18 * License along with FFmpeg; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20 */
21
22 /**
23 * @file
24 * H.264 / AVC / MPEG-4 part10 reference picture handling.
25 * @author Michael Niedermayer <michaelni@gmx.at>
26 */
27
28 #include <inttypes.h>
29
30 #include "libavutil/avassert.h"
31 #include "avcodec.h"
32 #include "h264.h"
33 #include "h264dec.h"
34 #include "golomb.h"
35 #include "mpegutils.h"
36
37 #include <assert.h>
38
39 67870 static void pic_as_field(H264Ref *pic, const int parity)
40 {
41
2/2
✓ Branch 0 taken 203610 times.
✓ Branch 1 taken 67870 times.
 271480 for (int i = 0; i < FF_ARRAY_ELEMS(pic->data); ++i) {
42
2/2
✓ Branch 0 taken 97512 times.
✓ Branch 1 taken 106098 times.
 203610 if (parity == PICT_BOTTOM_FIELD)
43 97512 pic->data[i] += pic->linesize[i];
44 203610 pic->reference = parity;
45 203610 pic->linesize[i] *= 2;
46 }
47 67870 pic->poc = pic->parent->field_poc[parity == PICT_BOTTOM_FIELD];
48 67870 }
49
50 216594 static void ref_from_h264pic(H264Ref *dst, const H264Picture *src)
51 {
52 216594 memcpy(dst->data, src->f->data, sizeof(dst->data));
53 216594 memcpy(dst->linesize, src->f->linesize, sizeof(dst->linesize));
54 216594 dst->reference = src->reference;
55 216594 dst->poc = src->poc;
56 216594 dst->pic_id = src->pic_id;
57 216594 dst->parent = src;
58 216594 }
59
60 203834 static int split_field_copy(H264Ref *dest, const H264Picture *src,
61 int parity, int id_add)
62 {
63 203834 int match = !!(src->reference & parity);
64
65
1/2
✓ Branch 0 taken 203834 times.
✗ Branch 1 not taken.
 203834 if (match) {
66 203834 ref_from_h264pic(dest, src);
67
2/2
✓ Branch 0 taken 66253 times.
✓ Branch 1 taken 137581 times.
 203834 if (parity != PICT_FRAME) {
68 66253 pic_as_field(dest, parity);
69 66253 dest->pic_id *= 2;
70 66253 dest->pic_id += id_add;
71 }
72 }
73
74 203834 return match;
75 }
76
77 103028 static int build_def_list(H264Ref *def, int def_len,
78 H264Picture * const *in, int len, int is_long, int sel)
79 {
80 103028 int i[2] = { 0 };
81 103028 int index = 0;
82
83
4/4
✓ Branch 0 taken 221680 times.
✓ Branch 1 taken 104899 times.
✓ Branch 2 taken 1871 times.
✓ Branch 3 taken 103028 times.
 429607 while (i[0] < len || i[1] < len) {
84
6/6
✓ Branch 0 taken 994255 times.
✓ Branch 1 taken 54069 times.
✓ Branch 2 taken 822218 times.
✓ Branch 3 taken 172037 times.
✓ Branch 4 taken 2555 times.
✓ Branch 5 taken 169482 times.
 1048324 while (i[0] < len && !(in[i[0]] && (in[i[0]]->reference & sel)))
85 824773 i[0]++;
86
6/6
✓ Branch 0 taken 994255 times.
✓ Branch 1 taken 189199 times.
✓ Branch 2 taken 822218 times.
✓ Branch 3 taken 172037 times.
✓ Branch 4 taken 137685 times.
✓ Branch 5 taken 34352 times.
 1183454 while (i[1] < len && !(in[i[1]] && (in[i[1]]->reference & (sel ^ 3))))
87 959903 i[1]++;
88
2/2
✓ Branch 0 taken 169482 times.
✓ Branch 1 taken 54069 times.
 223551 if (i[0] < len) {
89
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 169482 times.
 169482 av_assert0(index < def_len);
90
2/2
✓ Branch 0 taken 2006 times.
✓ Branch 1 taken 167476 times.
 169482 in[i[0]]->pic_id = is_long ? i[0] : in[i[0]]->frame_num;
91 169482 split_field_copy(&def[index++], in[i[0]++], sel, 1);
92 }
93
2/2
✓ Branch 0 taken 189199 times.
✓ Branch 1 taken 34352 times.
 223551 if (i[1] < len) {
94
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 34352 times.
 34352 av_assert0(index < def_len);
95
2/2
✓ Branch 0 taken 577 times.
✓ Branch 1 taken 33775 times.
 34352 in[i[1]]->pic_id = is_long ? i[1] : in[i[1]]->frame_num;
96 34352 split_field_copy(&def[index++], in[i[1]++], sel ^ 3, 0);
97 }
98 }
99
100 103028 return index;
101 }
102
103 53888 static int add_sorted(H264Picture **sorted, H264Picture * const *src,
104 int len, int limit, int dir)
105 {
106 53888 int out_i = 0;
107
108 82040 for (;;) {
109
2/2
✓ Branch 0 taken 74140 times.
✓ Branch 1 taken 61788 times.
 135928 int best_poc = dir ? INT_MIN : INT_MAX;
110
111
2/2
✓ Branch 0 taken 550088 times.
✓ Branch 1 taken 135928 times.
 686016 for (int i = 0; i < len; i++) {
112 550088 const int poc = src[i]->poc;
113
4/4
✓ Branch 0 taken 160282 times.
✓ Branch 1 taken 389806 times.
✓ Branch 2 taken 94486 times.
✓ Branch 3 taken 65796 times.
 550088 if (((poc > limit) ^ dir) && ((poc < best_poc) ^ dir)) {
114 94486 best_poc = poc;
115 94486 sorted[out_i] = src[i];
116 }
117 }
118
4/4
✓ Branch 0 taken 74140 times.
✓ Branch 1 taken 61788 times.
✓ Branch 2 taken 53888 times.
✓ Branch 3 taken 82040 times.
 135928 if (best_poc == (dir ? INT_MIN : INT_MAX))
119 53888 break;
120 82040 limit = sorted[out_i++]->poc - dir;
121 }
122 53888 return out_i;
123 }
124
125 153165 static int mismatches_ref(const H264Context *h, const H264Picture *pic)
126 {
127 153165 const AVFrame *f = pic->f;
128 306330 return (h->cur_pic_ptr->f->width != f->width ||
129
2/4
✓ Branch 0 taken 153165 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 153165 times.
✗ Branch 3 not taken.
 306330 h->cur_pic_ptr->f->height != f->height ||
130
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 153165 times.
 153165 h->cur_pic_ptr->f->format != f->format);
131 }
132
133 38042 static void h264_initialise_ref_list(H264Context *h, H264SliceContext *sl)
134 {
135 int len;
136
137
2/2
✓ Branch 0 taken 13472 times.
✓ Branch 1 taken 24570 times.
 38042 if (sl->slice_type_nos == AV_PICTURE_TYPE_B) {
138 H264Picture *sorted[32];
139 int cur_poc;
140 int lens[2];
141
142
2/2
✓ Branch 0 taken 4995 times.
✓ Branch 1 taken 8477 times.
 13472 if (FIELD_PICTURE(h))
143 4995 cur_poc = h->cur_pic_ptr->field_poc[h->picture_structure == PICT_BOTTOM_FIELD];
144 else
145 8477 cur_poc = h->cur_pic_ptr->poc;
146
147
2/2
✓ Branch 0 taken 26944 times.
✓ Branch 1 taken 13472 times.
 40416 for (int list = 0; list < 2; list++) {
148 26944 len = add_sorted(sorted, h->short_ref, h->short_ref_count, cur_poc, 1 ^ list);
149 26944 len += add_sorted(sorted + len, h->short_ref, h->short_ref_count, cur_poc, 0 ^ list);
150
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 26944 times.
 26944 av_assert0(len <= 32);
151
152 26944 len = build_def_list(sl->ref_list[list], FF_ARRAY_ELEMS(sl->ref_list[0]),
153 sorted, len, 0, h->picture_structure);
154 53888 len += build_def_list(sl->ref_list[list] + len,
155 26944 FF_ARRAY_ELEMS(sl->ref_list[0]) - len,
156 26944 h->long_ref, 16, 1, h->picture_structure);
157
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 26944 times.
 26944 av_assert0(len <= 32);
158
159
2/2
✓ Branch 0 taken 5 times.
✓ Branch 1 taken 26939 times.
 26944 if (len < sl->ref_count[list])
160 5 memset(&sl->ref_list[list][len], 0, sizeof(H264Ref) * (sl->ref_count[list] - len));
161 26944 lens[list] = len;
162 }
163
164
3/4
✓ Branch 0 taken 13472 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 11953 times.
✓ Branch 3 taken 1519 times.
 13472 if (lens[0] == lens[1] && lens[1] > 1) {
165 int i;
166
2/2
✓ Branch 0 taken 14002 times.
✓ Branch 1 taken 1938 times.
 15940 for (i = 0; i < lens[0] &&
167 14002 sl->ref_list[0][i].parent->f->buf[0]->buffer ==
168
2/2
✓ Branch 0 taken 3987 times.
✓ Branch 1 taken 10015 times.
 14002 sl->ref_list[1][i].parent->f->buf[0]->buffer; i++);
169
2/2
✓ Branch 0 taken 1938 times.
✓ Branch 1 taken 10015 times.
 11953 if (i == lens[0]) {
170 1938 FFSWAP(H264Ref, sl->ref_list[1][0], sl->ref_list[1][1]);
171 }
172 }
173 } else {
174 24570 len = build_def_list(sl->ref_list[0], FF_ARRAY_ELEMS(sl->ref_list[0]),
175 24570 h->short_ref, h->short_ref_count, 0, h->picture_structure);
176 49140 len += build_def_list(sl->ref_list[0] + len,
177 24570 FF_ARRAY_ELEMS(sl->ref_list[0]) - len,
178 24570 h-> long_ref, 16, 1, h->picture_structure);
179
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 24570 times.
 24570 av_assert0(len <= 32);
180
181
2/2
✓ Branch 0 taken 904 times.
✓ Branch 1 taken 23666 times.
 24570 if (len < sl->ref_count[0])
182 904 memset(&sl->ref_list[0][len], 0, sizeof(H264Ref) * (sl->ref_count[0] - len));
183 }
184 #ifdef TRACE
185 for (int i = 0; i < sl->ref_count[0]; i++) {
186 ff_tlog(h->avctx, "List0: %s fn:%d 0x%p\n",
187 (sl->ref_list[0][i].parent ? (sl->ref_list[0][i].parent->long_ref ? "LT" : "ST") : "??"),
188 sl->ref_list[0][i].pic_id,
189 sl->ref_list[0][i].data[0]);
190 }
191 if (sl->slice_type_nos == AV_PICTURE_TYPE_B) {
192 for (int i = 0; i < sl->ref_count[1]; i++) {
193 ff_tlog(h->avctx, "List1: %s fn:%d 0x%p\n",
194 (sl->ref_list[1][i].parent ? (sl->ref_list[1][i].parent->long_ref ? "LT" : "ST") : "??"),
195 sl->ref_list[1][i].pic_id,
196 sl->ref_list[1][i].data[0]);
197 }
198 }
199 #endif
200
201
4/4
✓ Branch 0 taken 40416 times.
✓ Branch 1 taken 49140 times.
✓ Branch 2 taken 51514 times.
✓ Branch 3 taken 38042 times.
 89556 for (int j = 0; j < 1 + (sl->slice_type_nos == AV_PICTURE_TYPE_B); j++) {
202
2/2
✓ Branch 0 taken 142005 times.
✓ Branch 1 taken 51514 times.
 193519 for (int i = 0; i < sl->ref_count[j]; i++) {
203
2/2
✓ Branch 0 taken 140405 times.
✓ Branch 1 taken 1600 times.
 142005 if (sl->ref_list[j][i].parent) {
204
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 140405 times.
 140405 if (mismatches_ref(h, sl->ref_list[j][i].parent)) {
205 ✗ av_log(h->avctx, AV_LOG_ERROR, "Discarding mismatching reference\n");
206 ✗ memset(&sl->ref_list[j][i], 0, sizeof(sl->ref_list[j][i]));
207 }
208 }
209 }
210 }
211
2/2
✓ Branch 0 taken 47029 times.
✓ Branch 1 taken 38042 times.
 85071 for (int i = 0; i < sl->list_count; i++)
212 47029 h->default_ref[i] = sl->ref_list[i][0];
213 38042 }
214
215 /**
216 * print short term list
217 */
218 57609 static void print_short_term(const H264Context *h)
219 {
220
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 57609 times.
 57609 if (h->avctx->debug & FF_DEBUG_MMCO) {
221 ✗ av_log(h->avctx, AV_LOG_DEBUG, "short term list:\n");
222 ✗ for (uint32_t i = 0; i < h->short_ref_count; i++) {
223 ✗ H264Picture *pic = h->short_ref[i];
224 ✗ av_log(h->avctx, AV_LOG_DEBUG, "%"PRIu32" fn:%d poc:%d %p\n",
225 ✗ i, pic->frame_num, pic->poc, pic->f->data[0]);
226 }
227 }
228 57609 }
229
230 /**
231 * print long term list
232 */
233 57609 static void print_long_term(const H264Context *h)
234 {
235
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 57609 times.
 57609 if (h->avctx->debug & FF_DEBUG_MMCO) {
236 ✗ av_log(h->avctx, AV_LOG_DEBUG, "long term list:\n");
237 ✗ for (uint32_t i = 0; i < 16; i++) {
238 ✗ H264Picture *pic = h->long_ref[i];
239 ✗ if (pic) {
240 ✗ av_log(h->avctx, AV_LOG_DEBUG, "%"PRIu32" fn:%d poc:%d %p\n",
241 ✗ i, pic->frame_num, pic->poc, pic->f->data[0]);
242 }
243 }
244 }
245 57609 }
246
247 /**
248 * Extract structure information about the picture described by pic_num in
249 * the current decoding context (frame or field). Note that pic_num is
250 * picture number without wrapping (so, 0<=pic_num<max_pic_num).
251 * @param pic_num picture number for which to extract structure information
252 * @param structure one of PICT_XXX describing structure of picture
253 * with pic_num
254 * @return frame number (short term) or long term index of picture
255 * described by pic_num
256 */
257 29542 static int pic_num_extract(const H264Context *h, int pic_num, int *structure)
258 {
259 29542 *structure = h->picture_structure;
260
2/2
✓ Branch 0 taken 4133 times.
✓ Branch 1 taken 25409 times.
 29542 if (FIELD_PICTURE(h)) {
261
2/2
✓ Branch 0 taken 2180 times.
✓ Branch 1 taken 1953 times.
 4133 if (!(pic_num & 1))
262 /* opposite field */
263 2180 *structure ^= PICT_FRAME;
264 4133 pic_num >>= 1;
265 }
266
267 29542 return pic_num;
268 }
269
270 4976 static void h264_fill_mbaff_ref_list(H264SliceContext *sl)
271 {
272
2/2
✓ Branch 0 taken 6673 times.
✓ Branch 1 taken 4976 times.
 11649 for (int list = 0; list < sl->list_count; list++) {
273
2/2
✓ Branch 0 taken 16046 times.
✓ Branch 1 taken 6673 times.
 22719 for (int i = 0; i < sl->ref_count[list]; i++) {
274 16046 const H264Ref *frame = &sl->ref_list[list][i];
275 16046 H264Ref *field = &sl->ref_list[list][16 + 2 * i];
276
277 16046 field[0] = *frame;
278
279
2/2
✓ Branch 0 taken 48138 times.
✓ Branch 1 taken 16046 times.
 64184 for (int j = 0; j < 3; j++)
280 48138 field[0].linesize[j] <<= 1;
281 16046 field[0].reference = PICT_TOP_FIELD;
282 16046 field[0].poc = field[0].parent->field_poc[0];
283
284 16046 field[1] = field[0];
285
286
2/2
✓ Branch 0 taken 48138 times.
✓ Branch 1 taken 16046 times.
 64184 for (int j = 0; j < 3; j++)
287 48138 field[1].data[j] += frame->parent->f->linesize[j];
288 16046 field[1].reference = PICT_BOTTOM_FIELD;
289 16046 field[1].poc = field[1].parent->field_poc[1];
290 }
291 }
292 4976 }
293
294 38042 int ff_h264_build_ref_list(H264Context *h, H264SliceContext *sl)
295 {
296 38042 print_short_term(h);
297 38042 print_long_term(h);
298
299 38042 h264_initialise_ref_list(h, sl);
300
301
2/2
✓ Branch 0 taken 47029 times.
✓ Branch 1 taken 38042 times.
 85071 for (int list = 0; list < sl->list_count; list++) {
302 47029 int pred = sl->curr_pic_num;
303
304
2/2
✓ Branch 0 taken 12760 times.
✓ Branch 1 taken 47029 times.
 59789 for (int index = 0; index < sl->nb_ref_modifications[list]; index++) {
305 12760 unsigned int modification_of_pic_nums_idc = sl->ref_modifications[list][index].op;
306 12760 unsigned int val = sl->ref_modifications[list][index].val;
307 unsigned int pic_id;
308 int i, pic_structure;
309 12760 H264Picture *ref = NULL;
310
311
2/3
✓ Branch 0 taken 12197 times.
✓ Branch 1 taken 563 times.
✗ Branch 2 not taken.
 12760 switch (modification_of_pic_nums_idc) {
312 12197 case 0:
313 case 1: {
314 12197 const unsigned int abs_diff_pic_num = val + 1;
315 int frame_num;
316
317
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 12197 times.
 12197 if (abs_diff_pic_num > sl->max_pic_num) {
318 ✗ av_log(h->avctx, AV_LOG_ERROR,
319 "abs_diff_pic_num overflow\n");
320 ✗ return AVERROR_INVALIDDATA;
321 }
322
323
2/2
✓ Branch 0 taken 9895 times.
✓ Branch 1 taken 2302 times.
 12197 if (modification_of_pic_nums_idc == 0)
324 9895 pred -= abs_diff_pic_num;
325 else
326 2302 pred += abs_diff_pic_num;
327 12197 pred &= sl->max_pic_num - 1;
328
329 12197 frame_num = pic_num_extract(h, pred, &pic_structure);
330
331
1/2
✓ Branch 0 taken 40001 times.
✗ Branch 1 not taken.
 40001 for (i = h->short_ref_count - 1; i >= 0; i--) {
332 40001 ref = h->short_ref[i];
333 assert(ref->reference);
334 assert(!ref->long_ref);
335
2/2
✓ Branch 0 taken 12197 times.
✓ Branch 1 taken 27804 times.
 40001 if (ref->frame_num == frame_num &&
336
1/2
✓ Branch 0 taken 12197 times.
✗ Branch 1 not taken.
 12197 (ref->reference & pic_structure))
337 12197 break;
338 }
339
1/2
✓ Branch 0 taken 12197 times.
✗ Branch 1 not taken.
 12197 if (i >= 0)
340 12197 pic_id = pred;
341 12197 break;
342 }
343 563 case 2: {
344 int long_idx;
345 563 pic_id = val; // long_term_pic_idx
346
347 563 long_idx = pic_num_extract(h, pic_id, &pic_structure);
348
349
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 563 times.
 563 if (long_idx > 31U) {
350 ✗ av_log(h->avctx, AV_LOG_ERROR,
351 "long_term_pic_idx overflow\n");
352 ✗ return AVERROR_INVALIDDATA;
353 }
354 563 ref = h->long_ref[long_idx];
355 assert(!(ref && !ref->reference));
356
2/4
✓ Branch 0 taken 563 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 563 times.
✗ Branch 3 not taken.
 563 if (ref && (ref->reference & pic_structure)) {
357 assert(ref->long_ref);
358 563 i = 0;
359 } else {
360 ✗ i = -1;
361 }
362 563 break;
363 }
364 ✗ default:
365 ✗ av_assert0(0);
366 }
367
368
2/4
✓ Branch 0 taken 12760 times.
✗ Branch 1 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 12760 times.
 12760 if (i < 0 || mismatches_ref(h, ref)) {
369 ✗ av_log(h->avctx, AV_LOG_ERROR,
370 i < 0 ? "reference picture missing during reorder\n" :
371 "mismatching reference\n"
372 );
373 ✗ if (h->avctx->err_recognition & AV_EF_EXPLODE) {
374 ✗ return AVERROR_INVALIDDATA;
375 }
376 ✗ memset(&sl->ref_list[list][index], 0, sizeof(sl->ref_list[0][0])); // FIXME
377 } else {
378
2/2
✓ Branch 0 taken 19447 times.
✓ Branch 1 taken 5375 times.
 24822 for (i = index; i + 1 < sl->ref_count[list]; i++) {
379
2/2
✓ Branch 0 taken 17766 times.
✓ Branch 1 taken 1681 times.
 19447 if (sl->ref_list[list][i].parent &&
380
2/2
✓ Branch 0 taken 15827 times.
✓ Branch 1 taken 1939 times.
 17766 ref->long_ref == sl->ref_list[list][i].parent->long_ref &&
381
2/2
✓ Branch 0 taken 7385 times.
✓ Branch 1 taken 8442 times.
 15827 pic_id == sl->ref_list[list][i].pic_id)
382 7385 break;
383 }
384
2/2
✓ Branch 0 taken 12062 times.
✓ Branch 1 taken 12760 times.
 24822 for (; i > index; i--) {
385 12062 sl->ref_list[list][i] = sl->ref_list[list][i - 1];
386 }
387 12760 ref_from_h264pic(&sl->ref_list[list][index], ref);
388
2/2
✓ Branch 0 taken 1617 times.
✓ Branch 1 taken 11143 times.
 12760 if (FIELD_PICTURE(h)) {
389 1617 pic_as_field(&sl->ref_list[list][index], pic_structure);
390 }
391 }
392 }
393 }
394
2/2
✓ Branch 0 taken 47029 times.
✓ Branch 1 taken 38042 times.
 85071 for (int list = 0; list < sl->list_count; list++) {
395
2/2
✓ Branch 0 taken 142005 times.
✓ Branch 1 taken 47029 times.
 189034 for (int index = 0; index < sl->ref_count[list]; index++) {
396
2/2
✓ Branch 0 taken 141990 times.
✓ Branch 1 taken 15 times.
 142005 if ( !sl->ref_list[list][index].parent
397
3/4
✓ Branch 0 taken 99925 times.
✓ Branch 1 taken 42065 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 99925 times.
 141990 || (!FIELD_PICTURE(h) && (sl->ref_list[list][index].reference&3) != 3)) {
398
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 15 times.
 15 if (h->avctx->err_recognition & AV_EF_EXPLODE) {
399 ✗ av_log(h->avctx, AV_LOG_ERROR, "Missing reference picture\n");
400 ✗ return AVERROR_INVALIDDATA;
401 }
402 15 av_log(h->avctx, AV_LOG_ERROR, "Missing reference picture, default is %d\n", h->default_ref[list].poc);
403
404
2/2
✓ Branch 0 taken 240 times.
✓ Branch 1 taken 15 times.
 255 for (int i = 0; i < FF_ARRAY_ELEMS(h->last_pocs); i++)
405 240 h->last_pocs[i] = INT_MIN;
406
1/2
✓ Branch 0 taken 15 times.
✗ Branch 1 not taken.
 15 if (h->default_ref[list].parent
407
2/4
✓ Branch 0 taken 15 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 15 times.
✗ Branch 3 not taken.
 15 && !(!FIELD_PICTURE(h) && (h->default_ref[list].reference&3) != 3))
408 15 sl->ref_list[list][index] = h->default_ref[list];
409 else
410 ✗ return -1;
411 }
412
5/6
✓ Branch 0 taken 142005 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 1197 times.
✓ Branch 3 taken 140808 times.
✓ Branch 4 taken 42 times.
✓ Branch 5 taken 1155 times.
 142005 if (h->noref_gray>0 && sl->ref_list[list][index].parent->gray && h->non_gray) {
413
1/2
✓ Branch 0 taken 84 times.
✗ Branch 1 not taken.
 84 for (int j=0; j<sl->list_count; j++) {
414 84 int list2 = (list+j)&1;
415
3/4
✓ Branch 0 taken 84 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 42 times.
✓ Branch 3 taken 42 times.
 84 if (h->default_ref[list2].parent && !h->default_ref[list2].parent->gray
416
3/4
✓ Branch 0 taken 36 times.
✓ Branch 1 taken 6 times.
✓ Branch 2 taken 36 times.
✗ Branch 3 not taken.
 42 && !(!FIELD_PICTURE(h) && (h->default_ref[list2].reference&3) != 3)) {
417 42 sl->ref_list[list][index] = h->default_ref[list2];
418 42 av_log(h->avctx, AV_LOG_DEBUG, "replacement of gray gap frame\n");
419 42 break;
420 }
421 }
422 }
423
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 142005 times.
 142005 av_assert0(av_buffer_get_ref_count(sl->ref_list[list][index].parent->f->buf[0]) > 0);
424 }
425 }
426
427
2/2
✓ Branch 0 taken 4976 times.
✓ Branch 1 taken 33066 times.
 38042 if (FRAME_MBAFF(h))
428 4976 h264_fill_mbaff_ref_list(sl);
429
430 38042 return 0;
431 }
432
433 33637 int ff_h264_decode_ref_pic_list_reordering(H264SliceContext *sl, void *logctx)
434 {
435 33637 sl->nb_ref_modifications[0] = 0;
436 33637 sl->nb_ref_modifications[1] = 0;
437
438
2/2
✓ Branch 0 taken 47153 times.
✓ Branch 1 taken 33637 times.
 80790 for (int list = 0; list < sl->list_count; list++) {
439
2/2
✓ Branch 1 taken 43489 times.
✓ Branch 2 taken 3664 times.
 47153 if (!get_bits1(&sl->gb)) // ref_pic_list_modification_flag_l[01]
440 43489 continue;
441
442 3664 for (int index = 0; ; index++) {
443 16496 unsigned int op = get_ue_golomb_31(&sl->gb);
444
445
2/2
✓ Branch 0 taken 3664 times.
✓ Branch 1 taken 12832 times.
 16496 if (op == 3)
446 3664 break;
447
448
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 12832 times.
 12832 if (index >= sl->ref_count[list]) {
449 ✗ av_log(logctx, AV_LOG_ERROR, "reference count overflow\n");
450 ✗ return AVERROR_INVALIDDATA;
451
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 12832 times.
 12832 } else if (op > 2) {
452 ✗ av_log(logctx, AV_LOG_ERROR,
453 "illegal modification_of_pic_nums_idc %u\n",
454 op);
455 ✗ return AVERROR_INVALIDDATA;
456 }
457 12832 sl->ref_modifications[list][index].val = get_ue_golomb_long(&sl->gb);
458 12832 sl->ref_modifications[list][index].op = op;
459 12832 sl->nb_ref_modifications[list]++;
460 }
461 }
462
463 33637 return 0;
464 }
465
466 /**
467 * Mark a picture as no longer needed for reference. The refmask
468 * argument allows unreferencing of individual fields or the whole frame.
469 * If the picture becomes entirely unreferenced, but is being held for
470 * display purposes, it is marked as such.
471 * @param refmask mask of fields to unreference; the mask is bitwise
472 * anded with the reference marking of pic
473 * @return non-zero if pic becomes entirely unreferenced (except possibly
474 * for display purposes) zero if one of the fields remains in
475 * reference
476 */
477 19313 static inline int unreference_pic(H264Context *h, H264Picture *pic, int refmask)
478 {
479
2/2
✓ Branch 0 taken 1226 times.
✓ Branch 1 taken 18087 times.
 19313 if (pic->reference &= refmask) {
480 1226 return 0;
481 } else {
482
2/2
✓ Branch 0 taken 19689 times.
✓ Branch 1 taken 16601 times.
 36290 for (int i = 0; h->delayed_pic[i]; i++)
483
2/2
✓ Branch 0 taken 1486 times.
✓ Branch 1 taken 18203 times.
 19689 if(pic == h->delayed_pic[i]){
484 1486 pic->reference = DELAYED_PIC_REF;
485 1486 break;
486 }
487 18087 return 1;
488 }
489 }
490
491 /**
492 * Find a H264Picture in the short term reference list by frame number.
493 * @param frame_num frame number to search for
494 * @param idx the index into h->short_ref where returned picture is found
495 * undefined if no picture found.
496 * @return pointer to the found picture, or NULL if no pic with the provided
497 * frame number is found
498 */
499 51131 static H264Picture *find_short(H264Context *h, int frame_num, int *idx)
500 {
501
2/2
✓ Branch 0 taken 196810 times.
✓ Branch 1 taken 18061 times.
 214871 for (int i = 0; i < h->short_ref_count; i++) {
502 196810 H264Picture *pic = h->short_ref[i];
503
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 196810 times.
 196810 if (h->avctx->debug & FF_DEBUG_MMCO)
504 ✗ av_log(h->avctx, AV_LOG_DEBUG, "%d %d %p\n", i, pic->frame_num, pic);
505
2/2
✓ Branch 0 taken 33070 times.
✓ Branch 1 taken 163740 times.
 196810 if (pic->frame_num == frame_num) {
506 33070 *idx = i;
507 33070 return pic;
508 }
509 }
510 18061 return NULL;
511 }
512
513 /**
514 * Remove a picture from the short term reference list by its index in
515 * that list. This does no checking on the provided index; it is assumed
516 * to be valid. Other list entries are shifted down.
517 * @param i index into h->short_ref of picture to remove.
518 */
519 15508 static void remove_short_at_index(H264Context *h, int i)
520 {
521 assert(i >= 0 && i < h->short_ref_count);
522 15508 h->short_ref[i] = NULL;
523
2/2
✓ Branch 0 taken 11981 times.
✓ Branch 1 taken 3527 times.
 15508 if (--h->short_ref_count)
524 11981 memmove(&h->short_ref[i], &h->short_ref[i + 1],
525 11981 (h->short_ref_count - i) * sizeof(H264Picture*));
526 15508 }
527
528 /**
529 * @return the removed picture or NULL if an error occurs
530 */
531 34431 static H264Picture *remove_short(H264Context *h, int frame_num, int ref_mask)
532 {
533 H264Picture *pic;
534 int i;
535
536
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 34431 times.
 34431 if (h->avctx->debug & FF_DEBUG_MMCO)
537 ✗ av_log(h->avctx, AV_LOG_DEBUG, "remove short %d count %d\n", frame_num, h->short_ref_count);
538
539 34431 pic = find_short(h, frame_num, &i);
540
2/2
✓ Branch 0 taken 16413 times.
✓ Branch 1 taken 18018 times.
 34431 if (pic) {
541
2/2
✓ Branch 1 taken 15187 times.
✓ Branch 2 taken 1226 times.
 16413 if (unreference_pic(h, pic, ref_mask))
542 15187 remove_short_at_index(h, i);
543 }
544
545 34431 return pic;
546 }
547
548 /**
549 * Remove a picture from the long term reference list by its index in
550 * that list.
551 * @return the removed picture or NULL if an error occurs
552 */
553 44703 static H264Picture *remove_long(H264Context *h, int i, int ref_mask)
554 {
555 H264Picture *pic;
556
557 44703 pic = h->long_ref[i];
558
2/2
✓ Branch 0 taken 342 times.
✓ Branch 1 taken 44361 times.
 44703 if (pic) {
559
1/2
✓ Branch 1 taken 342 times.
✗ Branch 2 not taken.
 342 if (unreference_pic(h, pic, ref_mask)) {
560 assert(h->long_ref[i]->long_ref == 1);
561 342 h->long_ref[i]->long_ref = 0;
562 342 h->long_ref[i] = NULL;
563 342 h->long_ref_count--;
564 }
565 }
566
567 44703 return pic;
568 }
569
570 2373 void ff_h264_remove_all_refs(H264Context *h)
571 {
572
2/2
✓ Branch 0 taken 37968 times.
✓ Branch 1 taken 2373 times.
 40341 for (int i = 0; i < 16; i++)
573 37968 remove_long(h, i, 0);
574 assert(h->long_ref_count == 0);
575
576
3/4
✓ Branch 0 taken 1143 times.
✓ Branch 1 taken 1230 times.
✓ Branch 2 taken 1143 times.
✗ Branch 3 not taken.
 2373 if (h->short_ref_count && !h->last_pic_for_ec.f->data[0]) {
577 1143 ff_h264_unref_picture(&h->last_pic_for_ec);
578 1143 ff_h264_ref_picture(&h->last_pic_for_ec, h->short_ref[0]);
579 }
580
581
2/2
✓ Branch 0 taken 2558 times.
✓ Branch 1 taken 2373 times.
 4931 for (int i = 0; i < h->short_ref_count; i++) {
582 2558 unreference_pic(h, h->short_ref[i], 0);
583 2558 h->short_ref[i] = NULL;
584 }
585 2373 h->short_ref_count = 0;
586
587 2373 memset(h->default_ref, 0, sizeof(h->default_ref));
588 2373 }
589
590 16876 static void generate_sliding_window_mmcos(H264Context *h)
591 {
592 16876 MMCO *mmco = h->mmco;
593 16876 int nb_mmco = 0;
594
595
2/2
✓ Branch 0 taken 16840 times.
✓ Branch 1 taken 36 times.
 16876 if (h->short_ref_count &&
596
2/2
✓ Branch 0 taken 14269 times.
✓ Branch 1 taken 2571 times.
 16840 h->long_ref_count + h->short_ref_count >= h->ps.sps->ref_frame_count &&
597
5/6
✓ Branch 0 taken 2243 times.
✓ Branch 1 taken 12026 times.
✓ Branch 2 taken 1198 times.
✓ Branch 3 taken 1045 times.
✗ Branch 4 not taken.
✓ Branch 5 taken 1198 times.
 14269 !(FIELD_PICTURE(h) && !h->first_field && h->cur_pic_ptr->reference)) {
598 13071 mmco[0].opcode = MMCO_SHORT2UNUSED;
599 13071 mmco[0].short_pic_num = h->short_ref[h->short_ref_count - 1]->frame_num;
600 13071 nb_mmco = 1;
601
2/2
✓ Branch 0 taken 1045 times.
✓ Branch 1 taken 12026 times.
 13071 if (FIELD_PICTURE(h)) {
602 1045 mmco[0].short_pic_num *= 2;
603 1045 mmco[1].opcode = MMCO_SHORT2UNUSED;
604 1045 mmco[1].short_pic_num = mmco[0].short_pic_num + 1;
605 1045 nb_mmco = 2;
606 }
607 }
608
609 16876 h->nb_mmco = nb_mmco;
610 16876 }
611
612 19567 int ff_h264_execute_ref_pic_marking(H264Context *h)
613 {
614 19567 MMCO *mmco = h->mmco;
615 int mmco_count;
616 19567 int pps_ref_count[2] = {0};
617 19567 int current_ref_assigned = 0, err = 0;
618
619
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 19567 times.
 19567 if (!h->ps.sps) {
620 ✗ av_log(h->avctx, AV_LOG_ERROR, "SPS is unset\n");
621 ✗ err = AVERROR_INVALIDDATA;
622 ✗ goto out;
623 }
624
625
2/2
✓ Branch 0 taken 16876 times.
✓ Branch 1 taken 2691 times.
 19567 if (!h->explicit_ref_marking)
626 16876 generate_sliding_window_mmcos(h);
627 19567 mmco_count = h->nb_mmco;
628
629
1/4
✗ Branch 0 not taken.
✓ Branch 1 taken 19567 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
 19567 if ((h->avctx->debug & FF_DEBUG_MMCO) && mmco_count == 0)
630 ✗ av_log(h->avctx, AV_LOG_DEBUG, "no mmco here\n");
631
632
2/2
✓ Branch 0 taken 17225 times.
✓ Branch 1 taken 19567 times.
 36792 for (int i = 0; i < mmco_count; i++) {
633
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 17225 times.
 17225 if (h->avctx->debug & FF_DEBUG_MMCO)
634 ✗ av_log(h->avctx, AV_LOG_DEBUG, "mmco:%d %d %d\n", h->mmco[i].opcode,
635 h->mmco[i].short_pic_num, h->mmco[i].long_arg);
636
637
5/6
✓ Branch 0 taken 16700 times.
✓ Branch 1 taken 82 times.
✓ Branch 2 taken 21 times.
✓ Branch 3 taken 407 times.
✓ Branch 4 taken 15 times.
✗ Branch 5 not taken.
 17225 switch (mmco[i].opcode) {
638 16700 case MMCO_SHORT2UNUSED:
639 case MMCO_SHORT2LONG: {
640 int structure, j;
641 16700 int frame_num = pic_num_extract(h, mmco[i].short_pic_num, &structure);
642 16700 H264Picture *pic = find_short(h, frame_num, &j);
643
644
2/2
✓ Branch 0 taken 43 times.
✓ Branch 1 taken 16657 times.
 16700 if (!pic) {
645
2/2
✓ Branch 0 taken 21 times.
✓ Branch 1 taken 22 times.
 43 if (mmco[i].opcode != MMCO_SHORT2LONG ||
646
1/2
✓ Branch 0 taken 21 times.
✗ Branch 1 not taken.
 21 !h->long_ref[mmco[i].long_arg] ||
647
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 21 times.
 21 h->long_ref[mmco[i].long_arg]->frame_num != frame_num) {
648
1/2
✓ Branch 0 taken 22 times.
✗ Branch 1 not taken.
 22 av_log(h->avctx, h->short_ref_count ? AV_LOG_ERROR : AV_LOG_DEBUG, "mmco: unref short failure\n");
649 22 err = AVERROR_INVALIDDATA;
650 }
651 43 continue;
652 }
653
2/2
✓ Branch 0 taken 16336 times.
✓ Branch 1 taken 321 times.
 16657 if (mmco[i].opcode == MMCO_SHORT2UNUSED) {
654
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 16336 times.
 16336 if (h->avctx->debug & FF_DEBUG_MMCO)
655 ✗ av_log(h->avctx, AV_LOG_DEBUG, "mmco: unref short %d count %d\n",
656 h->mmco[i].short_pic_num, h->short_ref_count);
657 16336 remove_short(h, frame_num, structure ^ PICT_FRAME);
658 } else {
659
1/2
✓ Branch 0 taken 321 times.
✗ Branch 1 not taken.
 321 if (h->long_ref[mmco[i].long_arg] != pic)
660 321 remove_long(h, mmco[i].long_arg, 0);
661
662 321 remove_short_at_index(h, j);
663 321 h->long_ref[ mmco[i].long_arg ] = pic;
664
1/2
✓ Branch 0 taken 321 times.
✗ Branch 1 not taken.
 321 if (h->long_ref[mmco[i].long_arg]) {
665 321 h->long_ref[mmco[i].long_arg]->long_ref = 1;
666 321 h->long_ref_count++;
667 }
668 }
669 16657 break;
670 }
671 82 case MMCO_LONG2UNUSED: {
672 82 int structure, j = pic_num_extract(h, mmco[i].long_arg, &structure);
673 82 H264Picture *pic = h->long_ref[j];
674
1/2
✓ Branch 0 taken 82 times.
✗ Branch 1 not taken.
 82 if (pic) {
675 82 remove_long(h, j, structure ^ PICT_FRAME);
676 ✗ } else if (h->avctx->debug & FF_DEBUG_MMCO)
677 ✗ av_log(h->avctx, AV_LOG_DEBUG, "mmco: unref long failure\n");
678 82 break;
679 }
680 21 case MMCO_LONG:
681 // Comment below left from previous code as it is an interesting note.
682 /* First field in pair is in short term list or
683 * at a different long term index.
684 * This is not allowed; see 7.4.3.3, notes 2 and 3.
685 * Report the problem and keep the pair where it is,
686 * and mark this field valid.
687 */
688
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 21 times.
 21 if (h->short_ref[0] == h->cur_pic_ptr) {
689 ✗ av_log(h->avctx, AV_LOG_ERROR, "mmco: cannot assign current picture to short and long at the same time\n");
690 ✗ remove_short_at_index(h, 0);
691 }
692
693 /* make sure the current picture is not already assigned as a long ref */
694
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 21 times.
 21 if (h->cur_pic_ptr->long_ref) {
695 ✗ for (int j = 0; j < FF_ARRAY_ELEMS(h->long_ref); j++) {
696 ✗ if (h->long_ref[j] == h->cur_pic_ptr) {
697 ✗ if (j != mmco[i].long_arg)
698 ✗ av_log(h->avctx, AV_LOG_ERROR, "mmco: cannot assign current picture to 2 long term references\n");
699 ✗ remove_long(h, j, 0);
700 }
701 }
702 }
703
704
1/2
✓ Branch 0 taken 21 times.
✗ Branch 1 not taken.
 21 if (h->long_ref[mmco[i].long_arg] != h->cur_pic_ptr) {
705
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 21 times.
 21 av_assert0(!h->cur_pic_ptr->long_ref);
706 21 remove_long(h, mmco[i].long_arg, 0);
707
708 21 h->long_ref[mmco[i].long_arg] = h->cur_pic_ptr;
709 21 h->long_ref[mmco[i].long_arg]->long_ref = 1;
710 21 h->long_ref_count++;
711 }
712
713 21 h->cur_pic_ptr->reference |= h->picture_structure;
714 21 current_ref_assigned = 1;
715 21 break;
716 407 case MMCO_SET_MAX_LONG:
717 assert(mmco[i].long_arg <= 16);
718 // just remove the long term which index is greater than new max
719
2/2
✓ Branch 0 taken 6071 times.
✓ Branch 1 taken 407 times.
 6478 for (int j = mmco[i].long_arg; j < 16; j++)
720 6071 remove_long(h, j, 0);
721 407 break;
722 15 case MMCO_RESET:
723
2/2
✓ Branch 0 taken 53 times.
✓ Branch 1 taken 15 times.
 68 while (h->short_ref_count) {
724 53 remove_short(h, h->short_ref[0]->frame_num, 0);
725 }
726
2/2
✓ Branch 0 taken 240 times.
✓ Branch 1 taken 15 times.
 255 for (int j = 0; j < 16; j++)
727 240 remove_long(h, j, 0);
728 15 h->poc.frame_num = h->cur_pic_ptr->frame_num = 0;
729 15 h->mmco_reset = 1;
730 15 h->cur_pic_ptr->mmco_reset = 1;
731
2/2
✓ Branch 0 taken 240 times.
✓ Branch 1 taken 15 times.
 255 for (int j = 0; j < FF_ARRAY_ELEMS(h->last_pocs); j++)
732 240 h->last_pocs[j] = INT_MIN;
733 15 break;
734 ✗ default: av_assert0(0);
735 }
736 }
737
738
2/2
✓ Branch 0 taken 19546 times.
✓ Branch 1 taken 21 times.
 19567 if (!current_ref_assigned) {
739 /* Second field of complementary field pair; the first field of
740 * which is already referenced. If short referenced, it
741 * should be first entry in short_ref. If not, it must exist
742 * in long_ref; trying to put it on the short list here is an
743 * error in the encoded bit stream (ref: 7.4.3.3, NOTE 2 and 3).
744 */
745
4/4
✓ Branch 0 taken 14892 times.
✓ Branch 1 taken 4654 times.
✓ Branch 2 taken 1528 times.
✓ Branch 3 taken 13364 times.
 19546 if (h->short_ref_count && h->short_ref[0] == h->cur_pic_ptr) {
746 /* Just mark the second field valid */
747 1528 h->cur_pic_ptr->reference |= h->picture_structure;
748
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 18018 times.
 18018 } else if (h->cur_pic_ptr->long_ref) {
749 ✗ av_log(h->avctx, AV_LOG_ERROR, "illegal short term reference "
750 "assignment for second field "
751 "in complementary field pair "
752 "(first field is long term)\n");
753 ✗ err = AVERROR_INVALIDDATA;
754 } else {
755 18018 H264Picture *pic = remove_short(h, h->cur_pic_ptr->frame_num, 0);
756
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 18018 times.
 18018 if (pic) {
757 ✗ av_log(h->avctx, AV_LOG_ERROR, "illegal short term buffer state detected\n");
758 ✗ err = AVERROR_INVALIDDATA;
759 }
760
761
2/2
✓ Branch 0 taken 13364 times.
✓ Branch 1 taken 4654 times.
 18018 if (h->short_ref_count)
762 13364 memmove(&h->short_ref[1], &h->short_ref[0],
763 13364 h->short_ref_count * sizeof(H264Picture*));
764
765 18018 h->short_ref[0] = h->cur_pic_ptr;
766 18018 h->short_ref_count++;
767 18018 h->cur_pic_ptr->reference |= h->picture_structure;
768 }
769 }
770
771
2/2
✓ Branch 0 taken 11 times.
✓ Branch 1 taken 19556 times.
 19567 if (h->long_ref_count + h->short_ref_count > FFMAX(h->ps.sps->ref_frame_count, 1)) {
772
773 /* We have too many reference frames, probably due to corrupted
774 * stream. Need to discard one frame. Prevents overrun of the
775 * short_ref and long_ref buffers.
776 */
777 11 av_log(h->avctx, AV_LOG_ERROR,
778 "number of reference frames (%d+%d) exceeds max (%d; probably "
779 "corrupt input), discarding one\n",
780 11 h->long_ref_count, h->short_ref_count, h->ps.sps->ref_frame_count);
781 11 err = AVERROR_INVALIDDATA;
782
783
1/4
✗ Branch 0 not taken.
✓ Branch 1 taken 11 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
 11 if (h->long_ref_count && !h->short_ref_count) {
784 int i;
785 ✗ for (i = 0; i < 16; ++i)
786 ✗ if (h->long_ref[i])
787 ✗ break;
788
789 assert(i < 16);
790 ✗ remove_long(h, i, 0);
791 } else {
792 11 H264Picture *pic = h->short_ref[h->short_ref_count - 1];
793 11 remove_short(h, pic->frame_num, 0);
794 }
795 }
796
797
2/2
✓ Branch 0 taken 81640 times.
✓ Branch 1 taken 19567 times.
 101207 for (int i = 0; i < h->short_ref_count; i++) {
798 81640 H264Picture *pic = h->short_ref[i];
799
2/2
✓ Branch 0 taken 354 times.
✓ Branch 1 taken 81286 times.
 81640 if (pic->invalid_gap) {
800 354 int d = av_zero_extend(h->cur_pic_ptr->frame_num - pic->frame_num, h->ps.sps->log2_max_frame_num);
801
2/2
✓ Branch 0 taken 13 times.
✓ Branch 1 taken 341 times.
 354 if (d > h->ps.sps->ref_frame_count)
802 13 remove_short(h, pic->frame_num, 0);
803 }
804 }
805
806 19567 print_short_term(h);
807 19567 print_long_term(h);
808
809
2/2
✓ Branch 0 taken 5009152 times.
✓ Branch 1 taken 19567 times.
 5028719 for (int i = 0; i < FF_ARRAY_ELEMS(h->ps.pps_list); i++) {
810
2/2
✓ Branch 0 taken 19931 times.
✓ Branch 1 taken 4989221 times.
 5009152 if (h->ps.pps_list[i]) {
811 19931 const PPS *pps = h->ps.pps_list[i];
812 19931 pps_ref_count[0] = FFMAX(pps_ref_count[0], pps->ref_count[0]);
813 19931 pps_ref_count[1] = FFMAX(pps_ref_count[1], pps->ref_count[1]);
814 }
815 }
816
817 // Detect unmarked random access points
818
2/2
✓ Branch 0 taken 11 times.
✓ Branch 1 taken 19556 times.
 19567 if ( err >= 0
819
2/2
✓ Branch 0 taken 1045 times.
✓ Branch 1 taken 18511 times.
 19556 && h->long_ref_count==0
820
2/2
✓ Branch 0 taken 10163 times.
✓ Branch 1 taken 8348 times.
 18511 && ( h->short_ref_count<=2
821
6/6
✓ Branch 0 taken 1760 times.
✓ Branch 1 taken 8403 times.
✓ Branch 2 taken 1643 times.
✓ Branch 3 taken 117 times.
✓ Branch 4 taken 739 times.
✓ Branch 5 taken 904 times.
 10163 || pps_ref_count[0] <= 2 && pps_ref_count[1] <= 1 && h->avctx->has_b_frames
822
6/6
✓ Branch 0 taken 887 times.
✓ Branch 1 taken 8372 times.
✓ Branch 2 taken 8458 times.
✓ Branch 3 taken 801 times.
✓ Branch 4 taken 96 times.
✓ Branch 5 taken 705 times.
 9259 || pps_ref_count[0] <= 1 + (h->picture_structure != PICT_FRAME) && pps_ref_count[1] <= 1)
823
6/6
✓ Branch 0 taken 2404 times.
✓ Branch 1 taken 7553 times.
✓ Branch 2 taken 36 times.
✓ Branch 3 taken 9921 times.
✓ Branch 4 taken 1214 times.
✓ Branch 5 taken 8743 times.
 9957 && pps_ref_count[0]<=2 + (h->picture_structure != PICT_FRAME) + (2*!h->has_recovery_point)
824
2/2
✓ Branch 0 taken 6466 times.
✓ Branch 1 taken 2277 times.
 8743 && h->cur_pic_ptr->f->pict_type == AV_PICTURE_TYPE_I){
825 2277 h->cur_pic_ptr->recovered |= FRAME_RECOVERED_HEURISTIC;
826
2/2
✓ Branch 0 taken 744 times.
✓ Branch 1 taken 1533 times.
 2277 if(!h->avctx->has_b_frames)
827 1533 h->frame_recovered |= FRAME_RECOVERED_HEURISTIC;
828 }
829
830 18034 out:
831
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 19567 times.
 19567 return (h->avctx->err_recognition & AV_EF_EXPLODE) ? err : 0;
832 }
833
834 25447 int ff_h264_decode_ref_pic_marking(H264SliceContext *sl, GetBitContext *gb,
835 const H2645NAL *nal, void *logctx)
836 {
837 25447 MMCO *mmco = sl->mmco;
838 25447 int nb_mmco = 0;
839
840
2/2
✓ Branch 0 taken 2277 times.
✓ Branch 1 taken 23170 times.
 25447 if (nal->type == H264_NAL_IDR_SLICE) { // FIXME fields
841 2277 skip_bits1(gb); // broken_link
842
2/2
✓ Branch 1 taken 3 times.
✓ Branch 2 taken 2274 times.
 2277 if (get_bits1(gb)) {
843 3 mmco[0].opcode = MMCO_LONG;
844 3 mmco[0].long_arg = 0;
845 3 nb_mmco = 1;
846 }
847 2277 sl->explicit_ref_marking = 1;
848 } else {
849 23170 sl->explicit_ref_marking = get_bits1(gb);
850
2/2
✓ Branch 0 taken 2371 times.
✓ Branch 1 taken 20799 times.
 23170 if (sl->explicit_ref_marking) {
851 int i;
852
1/2
✓ Branch 0 taken 6946 times.
✗ Branch 1 not taken.
 6946 for (i = 0; i < FF_ARRAY_ELEMS(sl->mmco); i++) {
853 6946 MMCOOpcode opcode = get_ue_golomb_31(gb);
854
855 6946 mmco[i].opcode = opcode;
856
4/4
✓ Branch 0 taken 3261 times.
✓ Branch 1 taken 3685 times.
✓ Branch 2 taken 365 times.
✓ Branch 3 taken 2896 times.
 6946 if (opcode == MMCO_SHORT2UNUSED || opcode == MMCO_SHORT2LONG) {
857 4050 mmco[i].short_pic_num =
858 4050 (sl->curr_pic_num - get_ue_golomb_long(gb) - 1) &
859 4050 (sl->max_pic_num - 1);
860 }
861
6/6
✓ Branch 0 taken 6581 times.
✓ Branch 1 taken 365 times.
✓ Branch 2 taken 6499 times.
✓ Branch 3 taken 82 times.
✓ Branch 4 taken 6481 times.
✓ Branch 5 taken 18 times.
 6946 if (opcode == MMCO_SHORT2LONG || opcode == MMCO_LONG2UNUSED ||
862
2/2
✓ Branch 0 taken 410 times.
✓ Branch 1 taken 6071 times.
 6481 opcode == MMCO_LONG || opcode == MMCO_SET_MAX_LONG) {
863 875 unsigned int long_arg = get_ue_golomb_31(gb);
864
2/4
✓ Branch 0 taken 875 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 875 times.
 875 if (long_arg >= 32 ||
865 ✗ (long_arg >= 16 && !(opcode == MMCO_SET_MAX_LONG &&
866 ✗ long_arg == 16) &&
867 ✗ !(opcode == MMCO_LONG2UNUSED && FIELD_PICTURE(sl)))) {
868 ✗ av_log(logctx, AV_LOG_ERROR,
869 "illegal long ref in memory management control "
870 "operation %d\n", opcode);
871 ✗ sl->nb_mmco = i;
872 ✗ return -1;
873 }
874 875 mmco[i].long_arg = long_arg;
875 }
876
877
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6946 times.
 6946 if (opcode > (unsigned) MMCO_LONG) {
878 ✗ av_log(logctx, AV_LOG_ERROR,
879 "illegal memory management control operation %d\n",
880 opcode);
881 ✗ sl->nb_mmco = i;
882 ✗ return -1;
883 }
884
2/2
✓ Branch 0 taken 2371 times.
✓ Branch 1 taken 4575 times.
 6946 if (opcode == MMCO_END)
885 2371 break;
886 }
887 2371 nb_mmco = i;
888 }
889 }
890
891 25447 sl->nb_mmco = nb_mmco;
892
893 25447 return 0;
894 }
895