FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/indeo3.c
Date: 2026-09-25 23:13:28
Exec Total Coverage
Lines: 384 488 78.7%
Functions: 16 16 100.0%
Branches: 244 377 64.7%
Line Branch Exec Source
1 /*
2 * Indeo Video v3 compatible decoder
3 * Copyright (c) 2009 - 2011 Maxim Poliakovski
4 *
5 * This file is part of FFmpeg.
6 *
7 * FFmpeg is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
11 *
12 * FFmpeg is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public
18 * License along with FFmpeg; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20 */
21
22 /**
23 * @file
24 * This is a decoder for Intel Indeo Video v3.
25 * It is based on vector quantization, run-length coding and motion compensation.
26 * Known container formats: .avi and .mov
27 * Known FOURCCs: 'IV31', 'IV32'
28 *
29 * @see http://wiki.multimedia.cx/index.php?title=Indeo_3
30 */
31
32 #include "libavutil/attributes.h"
33 #include "libavutil/imgutils.h"
34 #include "libavutil/intreadwrite.h"
35 #include "libavutil/mem.h"
36 #include "libavutil/thread.h"
37 #include "avcodec.h"
38 #include "codec_internal.h"
39 #include "decode.h"
40 #include "copy_block.h"
41 #include "bytestream.h"
42 #include "get_bits.h"
43 #include "hpeldsp.h"
44
45 #include "indeo3data.h"
46
47 /* RLE opcodes. */
48 enum {
49 RLE_ESC_F9 = 249, ///< same as RLE_ESC_FA + do the same with next block
50 RLE_ESC_FA = 250, ///< INTRA: skip block, INTER: copy data from reference
51 RLE_ESC_FB = 251, ///< apply null delta to N blocks / skip N blocks
52 RLE_ESC_FC = 252, ///< same as RLE_ESC_FD + do the same with next block
53 RLE_ESC_FD = 253, ///< apply null delta to all remaining lines of this block
54 RLE_ESC_FE = 254, ///< apply null delta to all lines up to the 3rd line
55 RLE_ESC_FF = 255 ///< apply null delta to all lines up to the 2nd line
56 };
57
58
59 /* Some constants for parsing frame bitstream flags. */
60 #define BS_8BIT_PEL (1 << 1) ///< 8-bit pixel bitdepth indicator
61 #define BS_KEYFRAME (1 << 2) ///< intra frame indicator
62 #define BS_MV_Y_HALF (1 << 4) ///< vertical mv halfpel resolution indicator
63 #define BS_MV_X_HALF (1 << 5) ///< horizontal mv halfpel resolution indicator
64 #define BS_NONREF (1 << 8) ///< nonref (discardable) frame indicator
65 #define BS_BUFFER 9 ///< indicates which of two frame buffers should be used
66
67
68 typedef struct Plane {
69 uint8_t *buffers[2];
70 uint8_t *pixels[2]; ///< pointer to the actual pixel data of the buffers above
71 uint32_t width;
72 uint32_t height;
73 ptrdiff_t pitch;
74 } Plane;
75
76 #define CELL_STACK_MAX 20
77
78 typedef struct Cell {
79 int16_t xpos; ///< cell coordinates in 4x4 blocks
80 int16_t ypos;
81 int16_t width; ///< cell width in 4x4 blocks
82 int16_t height; ///< cell height in 4x4 blocks
83 uint8_t tree; ///< tree id: 0- MC tree, 1 - VQ tree
84 const int8_t *mv_ptr; ///< ptr to the motion vector if any
85 } Cell;
86
87 typedef struct Indeo3DecodeContext {
88 AVCodecContext *avctx;
89 HpelDSPContext hdsp;
90
91 GetBitContext gb;
92 int need_resync;
93 int skip_bits;
94 const uint8_t *next_cell_data;
95 const uint8_t *last_byte;
96 const int8_t *mc_vectors;
97 unsigned num_vectors; ///< number of motion vectors in mc_vectors
98
99 int16_t width, height;
100 uint32_t frame_num; ///< current frame number (zero-based)
101 int data_size; ///< size of the frame data in bytes
102 uint16_t frame_flags; ///< frame properties
103 uint8_t cb_offset; ///< needed for selecting VQ tables
104 uint8_t buf_sel; ///< active frame buffer: 0 - primary, 1 -secondary
105 const uint8_t *y_data_ptr;
106 const uint8_t *v_data_ptr;
107 const uint8_t *u_data_ptr;
108 int32_t y_data_size;
109 int32_t v_data_size;
110 int32_t u_data_size;
111 const uint8_t *alt_quant; ///< secondary VQ table set for the modes 1 and 4
112 Plane planes[3];
113 } Indeo3DecodeContext;
114
115
116 static uint8_t requant_tab[8][128];
117
118 /*
119 * Build the static requantization table.
120 * This table is used to remap pixel values according to a specific
121 * quant index and thus avoid overflows while adding deltas.
122 */
123 2 static av_cold void build_requant_tab(void)
124 {
125 static const int8_t offsets[8] = { 1, 1, 2, -3, -3, 3, 4, 4 };
126 static const int8_t deltas [8] = { 0, 1, 0, 4, 4, 1, 0, 1 };
127
128 int i, j, step;
129
130
2/2
✓ Branch 0 taken 16 times.
✓ Branch 1 taken 2 times.
 18 for (i = 0; i < 8; i++) {
131 16 step = i + 2;
132
2/2
✓ Branch 0 taken 2048 times.
✓ Branch 1 taken 16 times.
 2064 for (j = 0; j < 128; j++)
133 2048 requant_tab[i][j] = (j + offsets[i]) / step * step + deltas[i];
134 }
135
136 /* some last elements calculated above will have values >= 128 */
137 /* pixel values shall never exceed 127 so set them to non-overflowing values */
138 /* according with the quantization step of the respective section */
139 2 requant_tab[0][127] = 126;
140 2 requant_tab[1][119] = 118;
141 2 requant_tab[1][120] = 118;
142 2 requant_tab[2][126] = 124;
143 2 requant_tab[2][127] = 124;
144 2 requant_tab[6][124] = 120;
145 2 requant_tab[6][125] = 120;
146 2 requant_tab[6][126] = 120;
147 2 requant_tab[6][127] = 120;
148
149 /* Patch for compatibility with the Intel's binary decoders */
150 2 requant_tab[1][7] = 10;
151 2 requant_tab[4][8] = 10;
152 2 }
153
154
155 4 static av_cold void free_frame_buffers(Indeo3DecodeContext *ctx)
156 {
157 int p;
158
159 4 ctx->width = ctx->height = 0;
160
161
2/2
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 4 times.
 16 for (p = 0; p < 3; p++) {
162 12 av_freep(&ctx->planes[p].buffers[0]);
163 12 av_freep(&ctx->planes[p].buffers[1]);
164 12 ctx->planes[p].pixels[0] = ctx->planes[p].pixels[1] = 0;
165 }
166 4 }
167
168
169 4 static av_cold int allocate_frame_buffers(Indeo3DecodeContext *ctx,
170 AVCodecContext *avctx, int luma_width, int luma_height)
171 {
172 int p, chroma_width, chroma_height;
173 int luma_size, chroma_size;
174 ptrdiff_t luma_pitch, chroma_pitch;
175
176 4 luma_width = FFALIGN(luma_width , 2);
177 4 luma_height = FFALIGN(luma_height, 2);
178
179
3/6
✓ Branch 0 taken 4 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 4 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 4 times.
✗ Branch 5 not taken.
 4 if (luma_width < 16 || luma_width > 640 ||
180
1/2
✓ Branch 0 taken 4 times.
✗ Branch 1 not taken.
 4 luma_height < 16 || luma_height > 480 ||
181
2/4
✓ Branch 0 taken 4 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 4 times.
 4 luma_width & 1 || luma_height & 1) {
182 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid picture dimensions: %d x %d!\n",
183 luma_width, luma_height);
184 ✗ return AVERROR_INVALIDDATA;
185 }
186
187 4 ctx->width = luma_width ;
188 4 ctx->height = luma_height;
189
190 4 chroma_width = FFALIGN(luma_width >> 2, 4);
191 4 chroma_height = FFALIGN(luma_height >> 2, 4);
192
193 4 luma_pitch = FFALIGN(luma_width, 16);
194 4 chroma_pitch = FFALIGN(chroma_width, 16);
195
196 /* Calculate size of the luminance plane. */
197 /* Add one line more for INTRA prediction. */
198 4 luma_size = luma_pitch * (luma_height + 1);
199
200 /* Calculate size of a chrominance planes. */
201 /* Add one line more for INTRA prediction. */
202 4 chroma_size = chroma_pitch * (chroma_height + 1);
203
204 /* allocate frame buffers */
205
2/2
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 4 times.
 16 for (p = 0; p < 3; p++) {
206
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 8 times.
 12 ctx->planes[p].pitch = !p ? luma_pitch : chroma_pitch;
207
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 8 times.
 12 ctx->planes[p].width = !p ? luma_width : chroma_width;
208
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 8 times.
 12 ctx->planes[p].height = !p ? luma_height : chroma_height;
209
210
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 8 times.
 12 ctx->planes[p].buffers[0] = av_malloc(!p ? luma_size : chroma_size);
211
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 8 times.
 12 ctx->planes[p].buffers[1] = av_malloc(!p ? luma_size : chroma_size);
212
213
2/4
✓ Branch 0 taken 12 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 12 times.
 12 if (!ctx->planes[p].buffers[0] || !ctx->planes[p].buffers[1])
214 ✗ return AVERROR(ENOMEM);
215
216 /* fill the INTRA prediction lines with the middle pixel value = 64 */
217 12 memset(ctx->planes[p].buffers[0], 0x40, ctx->planes[p].pitch);
218 12 memset(ctx->planes[p].buffers[1], 0x40, ctx->planes[p].pitch);
219
220 /* set buffer pointers = buf_ptr + pitch and thus skip the INTRA prediction line */
221 12 ctx->planes[p].pixels[0] = ctx->planes[p].buffers[0] + ctx->planes[p].pitch;
222 12 ctx->planes[p].pixels[1] = ctx->planes[p].buffers[1] + ctx->planes[p].pitch;
223 12 memset(ctx->planes[p].pixels[0], 0, ctx->planes[p].pitch * ctx->planes[p].height);
224 12 memset(ctx->planes[p].pixels[1], 0, ctx->planes[p].pitch * ctx->planes[p].height);
225 }
226
227 4 return 0;
228 }
229
230 /**
231 * Copy pixels of the cell(x + mv_x, y + mv_y) from the previous frame into
232 * the cell(x, y) in the current frame.
233 *
234 * @param ctx pointer to the decoder context
235 * @param plane pointer to the plane descriptor
236 * @param cell pointer to the cell descriptor
237 */
238 1683 static int copy_cell(Indeo3DecodeContext *ctx, Plane *plane, Cell *cell)
239 {
240 int h, w, mv_x, mv_y, offset, offset_dst;
241 uint8_t *src, *dst;
242
243 /* setup output and reference pointers */
244 1683 offset_dst = (cell->ypos << 2) * plane->pitch + (cell->xpos << 2);
245 1683 dst = plane->pixels[ctx->buf_sel] + offset_dst;
246
1/2
✓ Branch 0 taken 1683 times.
✗ Branch 1 not taken.
 1683 if(cell->mv_ptr){
247 1683 mv_y = cell->mv_ptr[0];
248 1683 mv_x = cell->mv_ptr[1];
249 }else
250 ✗ mv_x= mv_y= 0;
251
252 /* -1 because there is an extra line on top for prediction */
253
2/4
✓ Branch 0 taken 1683 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 1683 times.
✗ Branch 3 not taken.
 1683 if ((cell->ypos << 2) + mv_y < -1 || (cell->xpos << 2) + mv_x < 0 ||
254
1/2
✓ Branch 0 taken 1683 times.
✗ Branch 1 not taken.
 1683 ((cell->ypos + cell->height) << 2) + mv_y > plane->height ||
255
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1683 times.
 1683 ((cell->xpos + cell->width) << 2) + mv_x > plane->width) {
256 ✗ av_log(ctx->avctx, AV_LOG_ERROR,
257 "Motion vectors point out of the frame.\n");
258 ✗ return AVERROR_INVALIDDATA;
259 }
260
261 1683 offset = offset_dst + mv_y * plane->pitch + mv_x;
262 1683 src = plane->pixels[ctx->buf_sel ^ 1] + offset;
263
264 1683 h = cell->height << 2;
265
266
2/2
✓ Branch 0 taken 2941 times.
✓ Branch 1 taken 1683 times.
 4624 for (w = cell->width; w > 0;) {
267 /* copy using 16xH blocks */
268
3/4
✓ Branch 0 taken 841 times.
✓ Branch 1 taken 2100 times.
✓ Branch 2 taken 841 times.
✗ Branch 3 not taken.
 2941 if (!((cell->xpos << 2) & 15) && w >= 4) {
269
2/2
✓ Branch 0 taken 841 times.
✓ Branch 1 taken 841 times.
 1682 for (; w >= 4; src += 16, dst += 16, w -= 4)
270 841 ctx->hdsp.put_pixels_tab[0][0](dst, src, plane->pitch, h);
271 }
272
273 /* copy using 8xH blocks */
274
3/4
✓ Branch 0 taken 2941 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 2519 times.
✓ Branch 3 taken 422 times.
 2941 if (!((cell->xpos << 2) & 7) && w >= 2) {
275 2519 ctx->hdsp.put_pixels_tab[1][0](dst, src, plane->pitch, h);
276 2519 w -= 2;
277 2519 src += 8;
278 2519 dst += 8;
279
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 422 times.
 422 } else if (w >= 1) {
280 ✗ ctx->hdsp.put_pixels_tab[2][0](dst, src, plane->pitch, h);
281 ✗ w--;
282 ✗ src += 4;
283 ✗ dst += 4;
284 }
285 }
286
287 1683 return 0;
288 }
289
290
291 /* Average 4/8 pixels at once without rounding using SWAR */
292 #define AVG_32(dst, src, ref) \
293 AV_WN32A(dst, ((AV_RN32(src) + AV_RN32(ref)) >> 1) & 0x7F7F7F7FUL)
294
295 #define AVG_64(dst, src, ref) \
296 AV_WN64A(dst, ((AV_RN64(src) + AV_RN64(ref)) >> 1) & 0x7F7F7F7F7F7F7F7FULL)
297
298
299 /*
300 * Replicate each even pixel as follows:
301 * ABCDEFGH -> AACCEEGG
302 */
303 3811 static inline uint64_t replicate64(uint64_t a) {
304 #if HAVE_BIGENDIAN
305 a &= 0xFF00FF00FF00FF00ULL;
306 a |= a >> 8;
307 #else
308 3811 a &= 0x00FF00FF00FF00FFULL;
309 3811 a |= a << 8;
310 #endif
311 3811 return a;
312 }
313
314 12140 static inline uint32_t replicate32(uint32_t a) {
315 #if HAVE_BIGENDIAN
316 a &= 0xFF00FF00UL;
317 a |= a >> 8;
318 #else
319 12140 a &= 0x00FF00FFUL;
320 12140 a |= a << 8;
321 #endif
322 12140 return a;
323 }
324
325
326 /* Fill n lines with 64-bit pixel value pix */
327 17347 static inline void fill_64(uint8_t *dst, const uint64_t pix, int32_t n,
328 ptrdiff_t row_offset)
329 {
330
2/2
✓ Branch 0 taken 111375 times.
✓ Branch 1 taken 17347 times.
 128722 for (; n > 0; dst += row_offset, n--)
331 111375 AV_WN64A(dst, pix);
332 17347 }
333
334
335 /* Error codes for cell decoding. */
336 enum {
337 IV3_NOERR = 0,
338 IV3_BAD_RLE = 1,
339 IV3_BAD_DATA = 2,
340 IV3_BAD_COUNTER = 3,
341 IV3_UNSUPPORTED = 4,
342 IV3_OUT_OF_DATA = 5
343 };
344
345
346 #define BUFFER_PRECHECK \
347 if (*data_ptr >= last_ptr) \
348 return IV3_OUT_OF_DATA; \
349
350 #define RLE_BLOCK_COPY \
351 if (cell->mv_ptr || !skip_flag) \
352 copy_block4(dst, ref, row_offset, row_offset, 4 << v_zoom)
353
354 #define RLE_BLOCK_COPY_8 \
355 pix64 = AV_RN64(ref);\
356 if (is_first_row) {/* special prediction case: top line of a cell */\
357 pix64 = replicate64(pix64);\
358 fill_64(dst + row_offset, pix64, 7, row_offset);\
359 AVG_64(dst, ref, dst + row_offset);\
360 } else \
361 fill_64(dst, pix64, 8, row_offset)
362
363 #define RLE_LINES_COPY \
364 copy_block4(dst, ref, row_offset, row_offset, num_lines << v_zoom)
365
366 #define RLE_LINES_COPY_M10 \
367 pix64 = AV_RN64(ref);\
368 if (is_top_of_cell) {\
369 pix64 = replicate64(pix64);\
370 fill_64(dst + row_offset, pix64, (num_lines << 1) - 1, row_offset);\
371 AVG_64(dst, ref, dst + row_offset);\
372 } else \
373 fill_64(dst, pix64, num_lines << 1, row_offset)
374
375 #define APPLY_DELTA_4 \
376 AV_WN16A(dst + line_offset ,\
377 (AV_RN16(ref ) + delta_tab->deltas[dyad1]) & 0x7F7F);\
378 AV_WN16A(dst + line_offset + 2,\
379 (AV_RN16(ref + 2) + delta_tab->deltas[dyad2]) & 0x7F7F);\
380 if (mode >= 3) {\
381 if (is_top_of_cell && !cell->ypos) {\
382 AV_COPY32U(dst, dst + row_offset);\
383 } else {\
384 AVG_32(dst, ref, dst + row_offset);\
385 }\
386 }
387
388 #define APPLY_DELTA_8 \
389 /* apply two 32-bit VQ deltas to next even line */\
390 if (is_top_of_cell) { \
391 AV_WN32A(dst + row_offset , \
392 (replicate32(AV_RN32(ref )) + delta_tab->deltas_m10[dyad1]) & 0x7F7F7F7F);\
393 AV_WN32A(dst + row_offset + 4, \
394 (replicate32(AV_RN32(ref + 4)) + delta_tab->deltas_m10[dyad2]) & 0x7F7F7F7F);\
395 } else { \
396 AV_WN32A(dst + row_offset , \
397 (AV_RN32(ref ) + delta_tab->deltas_m10[dyad1]) & 0x7F7F7F7F);\
398 AV_WN32A(dst + row_offset + 4, \
399 (AV_RN32(ref + 4) + delta_tab->deltas_m10[dyad2]) & 0x7F7F7F7F);\
400 } \
401 /* odd lines are not coded but rather interpolated/replicated */\
402 /* first line of the cell on the top of image? - replicate */\
403 /* otherwise - interpolate */\
404 if (is_top_of_cell && !cell->ypos) {\
405 AV_COPY64U(dst, dst + row_offset);\
406 } else \
407 AVG_64(dst, ref, dst + row_offset);
408
409
410 #define APPLY_DELTA_1011_INTER \
411 if (mode == 10) { \
412 AV_WN32A(dst , \
413 (AV_RN32(dst ) + delta_tab->deltas_m10[dyad1]) & 0x7F7F7F7F);\
414 AV_WN32A(dst + 4 , \
415 (AV_RN32(dst + 4 ) + delta_tab->deltas_m10[dyad2]) & 0x7F7F7F7F);\
416 AV_WN32A(dst + row_offset , \
417 (AV_RN32(dst + row_offset ) + delta_tab->deltas_m10[dyad1]) & 0x7F7F7F7F);\
418 AV_WN32A(dst + row_offset + 4, \
419 (AV_RN32(dst + row_offset + 4) + delta_tab->deltas_m10[dyad2]) & 0x7F7F7F7F);\
420 } else { \
421 AV_WN16A(dst , \
422 (AV_RN16(dst ) + delta_tab->deltas[dyad1]) & 0x7F7F);\
423 AV_WN16A(dst + 2 , \
424 (AV_RN16(dst + 2 ) + delta_tab->deltas[dyad2]) & 0x7F7F);\
425 AV_WN16A(dst + row_offset , \
426 (AV_RN16(dst + row_offset ) + delta_tab->deltas[dyad1]) & 0x7F7F);\
427 AV_WN16A(dst + row_offset + 2, \
428 (AV_RN16(dst + row_offset + 2) + delta_tab->deltas[dyad2]) & 0x7F7F);\
429 }
430
431
432 15944 static int decode_cell_data(Indeo3DecodeContext *ctx, Cell *cell,
433 uint8_t *block, const uint8_t *ref_block,
434 ptrdiff_t row_offset, int h_zoom, int v_zoom, int mode,
435 const vqEntry *delta[2], int swap_quads[2],
436 const uint8_t **data_ptr, const uint8_t *last_ptr)
437 {
438 int x, y, line, num_lines;
439 15944 int rle_blocks = 0;
440 const vqEntry *delta_tab;
441 unsigned int dyad1, dyad2;
442 uint64_t pix64;
443 15944 int skip_flag = 0, is_top_of_cell, is_first_row = 1;
444
445 15944 const ptrdiff_t blk_row_offset = (row_offset << (2 + v_zoom)) - (cell->width << 2);
446
2/2
✓ Branch 0 taken 5161 times.
✓ Branch 1 taken 10783 times.
 15944 const ptrdiff_t line_offset = v_zoom ? row_offset : 0;
447
448
2/4
✓ Branch 0 taken 15944 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 15944 times.
 15944 if (cell->height & v_zoom || cell->width & h_zoom)
449 ✗ return IV3_BAD_DATA;
450
451
2/2
✓ Branch 0 taken 77543 times.
✓ Branch 1 taken 15944 times.
 93487 for (y = 0; y < cell->height; is_first_row = 0, y += 1 + v_zoom) {
452
2/2
✓ Branch 0 taken 349555 times.
✓ Branch 1 taken 77543 times.
 427098 for (x = 0; x < cell->width; x += 1 + h_zoom) {
453 349555 const uint8_t *ref = ref_block;
454 349555 uint8_t *dst = block;
455
456
2/2
✓ Branch 0 taken 76314 times.
✓ Branch 1 taken 273241 times.
 349555 if (rle_blocks > 0) {
457
2/2
✓ Branch 0 taken 60984 times.
✓ Branch 1 taken 15330 times.
 76314 if (mode <= 4) {
458
3/4
✓ Branch 0 taken 43666 times.
✓ Branch 1 taken 17318 times.
✓ Branch 2 taken 43666 times.
✗ Branch 3 not taken.
 60984 RLE_BLOCK_COPY;
459
3/4
✓ Branch 0 taken 15330 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 8469 times.
✓ Branch 3 taken 6861 times.
 15330 } else if (mode == 10 && !cell->mv_ptr) {
460
2/2
✓ Branch 0 taken 1781 times.
✓ Branch 1 taken 6688 times.
 8469 RLE_BLOCK_COPY_8;
461 }
462 76314 rle_blocks--;
463 } else {
464
2/2
✓ Branch 0 taken 914444 times.
✓ Branch 1 taken 273241 times.
 1187685 for (line = 0; line < 4;) {
465 914444 num_lines = 1;
466
4/4
✓ Branch 0 taken 177007 times.
✓ Branch 1 taken 737437 times.
✓ Branch 2 taken 55260 times.
✓ Branch 3 taken 121747 times.
 914444 is_top_of_cell = is_first_row && !line;
467
468 /* select primary VQ table for odd, secondary for even lines */
469
2/2
✓ Branch 0 taken 842209 times.
✓ Branch 1 taken 72235 times.
 914444 if (mode <= 4)
470 842209 delta_tab = delta[line & 1];
471 else
472 72235 delta_tab = delta[1];
473
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 914444 times.
 914444 BUFFER_PRECHECK;
474 914444 uint8_t code = bytestream_get_byte(data_ptr);
475
2/2
✓ Branch 0 taken 809297 times.
✓ Branch 1 taken 105147 times.
 914444 if (code < 248) {
476
2/2
✓ Branch 0 taken 342912 times.
✓ Branch 1 taken 466385 times.
 809297 if (code < delta_tab->num_dyads) {
477
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 342912 times.
 342912 BUFFER_PRECHECK;
478 342912 dyad1 = bytestream_get_byte(data_ptr);
479 342912 dyad2 = code;
480
2/4
✓ Branch 0 taken 342912 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 342912 times.
 342912 if (dyad1 >= delta_tab->num_dyads || dyad1 >= 248)
481 ✗ return IV3_BAD_DATA;
482 } else {
483 /* process QUADS */
484 466385 code -= delta_tab->num_dyads;
485 466385 dyad1 = code / delta_tab->quad_exp;
486 466385 dyad2 = code % delta_tab->quad_exp;
487
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 466385 times.
 466385 if (swap_quads[line & 1])
488 ✗ FFSWAP(unsigned int, dyad1, dyad2);
489 }
490
2/2
✓ Branch 0 taken 748407 times.
✓ Branch 1 taken 60890 times.
 809297 if (mode <= 4) {
491
1/6
✗ Branch 0 not taken.
✓ Branch 1 taken 748407 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✗ Branch 5 not taken.
 748407 APPLY_DELTA_4;
492
3/4
✓ Branch 0 taken 60890 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 59579 times.
✓ Branch 3 taken 1311 times.
 60890 } else if (mode == 10 && !cell->mv_ptr) {
493
6/6
✓ Branch 0 taken 6070 times.
✓ Branch 1 taken 53509 times.
✓ Branch 4 taken 6070 times.
✓ Branch 5 taken 53509 times.
✓ Branch 6 taken 1212 times.
✓ Branch 7 taken 4858 times.
 59579 APPLY_DELTA_8;
494 } else {
495
1/2
✓ Branch 0 taken 1311 times.
✗ Branch 1 not taken.
 1311 APPLY_DELTA_1011_INTER;
496 }
497 } else {
498 /* process RLE codes */
499
5/6
✓ Branch 0 taken 11658 times.
✓ Branch 1 taken 77138 times.
✓ Branch 2 taken 14291 times.
✓ Branch 3 taken 570 times.
✓ Branch 4 taken 1490 times.
✗ Branch 5 not taken.
 105147 switch (code) {
500 11658 case RLE_ESC_FC:
501 11658 skip_flag = 0;
502 11658 rle_blocks = 1;
503 11658 code = 253;
504 av_fallthrough;
505 88796 case RLE_ESC_FF:
506 case RLE_ESC_FE:
507 case RLE_ESC_FD:
508 88796 num_lines = 257 - code - line;
509
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 88796 times.
 88796 if (num_lines <= 0)
510 ✗ return IV3_BAD_RLE;
511
2/2
✓ Branch 0 taken 80567 times.
✓ Branch 1 taken 8229 times.
 88796 if (mode <= 4) {
512 80567 RLE_LINES_COPY;
513
3/4
✓ Branch 0 taken 8229 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 7274 times.
✓ Branch 3 taken 955 times.
 8229 } else if (mode == 10 && !cell->mv_ptr) {
514
2/2
✓ Branch 0 taken 1156 times.
✓ Branch 1 taken 6118 times.
 7274 RLE_LINES_COPY_M10;
515 }
516 88796 break;
517 14291 case RLE_ESC_FB:
518
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 14291 times.
 14291 BUFFER_PRECHECK;
519 14291 code = bytestream_get_byte(data_ptr);
520 14291 rle_blocks = (code & 0x1F) - 1; /* set block counter */
521
2/4
✓ Branch 0 taken 14291 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 14291 times.
 14291 if (code >= 64 || rle_blocks < 0)
522 ✗ return IV3_BAD_COUNTER;
523 14291 skip_flag = code & 0x20;
524 14291 num_lines = 4 - line; /* enforce next block processing */
525
5/6
✓ Branch 0 taken 11441 times.
✓ Branch 1 taken 2850 times.
✓ Branch 2 taken 7890 times.
✓ Branch 3 taken 3551 times.
✓ Branch 4 taken 7890 times.
✗ Branch 5 not taken.
 14291 if (mode >= 10 || (cell->mv_ptr || !skip_flag)) {
526
2/2
✓ Branch 0 taken 11441 times.
✓ Branch 1 taken 2850 times.
 14291 if (mode <= 4) {
527 11441 RLE_LINES_COPY;
528
3/4
✓ Branch 0 taken 2850 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 1604 times.
✓ Branch 3 taken 1246 times.
 2850 } else if (mode == 10 && !cell->mv_ptr) {
529
2/2
✓ Branch 0 taken 874 times.
✓ Branch 1 taken 730 times.
 1604 RLE_LINES_COPY_M10;
530 }
531 }
532 14291 break;
533 570 case RLE_ESC_F9:
534 570 skip_flag = 1;
535 570 rle_blocks = 1;
536 av_fallthrough;
537 2060 case RLE_ESC_FA:
538
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2060 times.
 2060 if (line)
539 ✗ return IV3_BAD_RLE;
540 2060 num_lines = 4; /* enforce next block processing */
541
1/2
✓ Branch 0 taken 2060 times.
✗ Branch 1 not taken.
 2060 if (cell->mv_ptr) {
542
2/2
✓ Branch 0 taken 1794 times.
✓ Branch 1 taken 266 times.
 2060 if (mode <= 4) {
543 1794 RLE_LINES_COPY;
544
2/4
✓ Branch 0 taken 266 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 266 times.
 266 } else if (mode == 10 && !cell->mv_ptr) {
545 ✗ RLE_LINES_COPY_M10;
546 }
547 }
548 2060 break;
549 ✗ default:
550 ✗ return IV3_UNSUPPORTED;
551 }
552 }
553
554 914444 line += num_lines;
555 914444 ref += row_offset * (num_lines << v_zoom);
556 914444 dst += row_offset * (num_lines << v_zoom);
557 }
558 }
559
560 /* move to next horizontal block */
561 349555 block += 4 << h_zoom;
562 349555 ref_block += 4 << h_zoom;
563 }
564
565 /* move to next line of blocks */
566 77543 ref_block += blk_row_offset;
567 77543 block += blk_row_offset;
568 }
569 15944 return IV3_NOERR;
570 }
571
572
573 /**
574 * Decode a vector-quantized cell.
575 * It consists of several routines, each of which handles one or more "modes"
576 * with which a cell can be encoded.
577 *
578 * @param ctx pointer to the decoder context
579 * @param avctx ptr to the AVCodecContext
580 * @param plane pointer to the plane descriptor
581 * @param cell pointer to the cell descriptor
582 * @param data_ptr pointer to the compressed data
583 * @param last_ptr pointer to the last byte to catch reads past end of buffer
584 * @return number of consumed bytes or negative number in case of error
585 */
586 15944 static int decode_cell(Indeo3DecodeContext *ctx, AVCodecContext *avctx,
587 Plane *plane, Cell *cell, const uint8_t *data_ptr,
588 const uint8_t *last_ptr)
589 {
590 int x, mv_x, mv_y, mode, vq_index, prim_indx, second_indx;
591 int zoom_fac;
592 15944 int offset, error = 0, swap_quads[2];
593 15944 uint8_t code, *block, *ref_block = 0;
594 const vqEntry *delta[2];
595 15944 const uint8_t *data_start = data_ptr;
596
597
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 15944 times.
 15944 if (data_ptr >= last_ptr) {
598 ✗ av_log(avctx, AV_LOG_ERROR, "attempt to read past end of buffer\n");
599 ✗ return AVERROR_INVALIDDATA;
600 }
601
602 /* get coding mode and VQ table index from the VQ descriptor byte */
603 15944 code = *data_ptr++;
604 15944 mode = code >> 4;
605 15944 vq_index = code & 0xF;
606
607 /* setup output and reference pointers */
608 15944 offset = (cell->ypos << 2) * plane->pitch + (cell->xpos << 2);
609 15944 block = plane->pixels[ctx->buf_sel] + offset;
610
611
2/2
✓ Branch 0 taken 12410 times.
✓ Branch 1 taken 3534 times.
 15944 if (!cell->mv_ptr) {
612 /* use previous line as reference for INTRA cells */
613 12410 ref_block = block - plane->pitch;
614
2/2
✓ Branch 0 taken 1227 times.
✓ Branch 1 taken 2307 times.
 3534 } else if (mode >= 10) {
615 /* for mode 10 and 11 INTER first copy the predicted cell into the current one */
616 /* so we don't need to do data copying for each RLE code later */
617 1227 int ret = copy_cell(ctx, plane, cell);
618
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1227 times.
 1227 if (ret < 0)
619 ✗ return ret;
620 } else {
621 /* set the pointer to the reference pixels for modes 0-4 INTER */
622 2307 mv_y = cell->mv_ptr[0];
623 2307 mv_x = cell->mv_ptr[1];
624
625 /* -1 because there is an extra line on top for prediction */
626
2/4
✓ Branch 0 taken 2307 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 2307 times.
✗ Branch 3 not taken.
 2307 if ((cell->ypos << 2) + mv_y < -1 || (cell->xpos << 2) + mv_x < 0 ||
627
1/2
✓ Branch 0 taken 2307 times.
✗ Branch 1 not taken.
 2307 ((cell->ypos + cell->height) << 2) + mv_y > plane->height ||
628
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2307 times.
 2307 ((cell->xpos + cell->width) << 2) + mv_x > plane->width) {
629 ✗ av_log(ctx->avctx, AV_LOG_ERROR,
630 "Motion vectors point out of the frame.\n");
631 ✗ return AVERROR_INVALIDDATA;
632 }
633
634 2307 offset += mv_y * plane->pitch + mv_x;
635 2307 ref_block = plane->pixels[ctx->buf_sel ^ 1] + offset;
636 }
637
638 /* select VQ tables as follows: */
639 /* modes 0 and 3 use only the primary table for all lines in a block */
640 /* while modes 1 and 4 switch between primary and secondary tables on alternate lines */
641
2/4
✓ Branch 0 taken 15944 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 15944 times.
 15944 if (mode == 1 || mode == 4) {
642 ✗ code = ctx->alt_quant[vq_index];
643 ✗ prim_indx = (code >> 4) + ctx->cb_offset;
644 ✗ second_indx = (code & 0xF) + ctx->cb_offset;
645 } else {
646 15944 vq_index += ctx->cb_offset;
647 15944 prim_indx = second_indx = vq_index;
648 }
649
650
2/4
✓ Branch 0 taken 15944 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 15944 times.
 15944 if (prim_indx >= 24 || second_indx >= 24) {
651 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid VQ table indexes! Primary: %d, secondary: %d!\n",
652 prim_indx, second_indx);
653 ✗ return AVERROR_INVALIDDATA;
654 }
655
656 15944 delta[0] = &vq_tab[second_indx];
657 15944 delta[1] = &vq_tab[prim_indx];
658 15944 swap_quads[0] = second_indx >= 16;
659 15944 swap_quads[1] = prim_indx >= 16;
660
661 /* requantize the prediction if VQ index of this cell differs from VQ index */
662 /* of the predicted cell in order to avoid overflows. */
663
3/4
✓ Branch 0 taken 12410 times.
✓ Branch 1 taken 3534 times.
✓ Branch 2 taken 12410 times.
✗ Branch 3 not taken.
 15944 if (vq_index >= 8 && ref_block) {
664
2/2
✓ Branch 0 taken 251096 times.
✓ Branch 1 taken 12410 times.
 263506 for (x = 0; x < cell->width << 2; x++)
665 251096 ref_block[x] = requant_tab[vq_index & 7][ref_block[x] & 127];
666 }
667
668 15944 error = IV3_NOERR;
669
670
2/3
✓ Branch 0 taken 10783 times.
✓ Branch 1 taken 5161 times.
✗ Branch 2 not taken.
 15944 switch (mode) {
671 10783 case 0: /*------------------ MODES 0 & 1 (4x4 block processing) --------------------*/
672 case 1:
673 case 3: /*------------------ MODES 3 & 4 (4x8 block processing) --------------------*/
674 case 4:
675
1/4
✗ Branch 0 not taken.
✓ Branch 1 taken 10783 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
 10783 if (mode >= 3 && cell->mv_ptr) {
676 ✗ av_log(avctx, AV_LOG_ERROR, "Attempt to apply Mode 3/4 to an INTER cell!\n");
677 ✗ return AVERROR_INVALIDDATA;
678 }
679
680 10783 zoom_fac = mode >= 3;
681 10783 error = decode_cell_data(ctx, cell, block, ref_block, plane->pitch,
682 0, zoom_fac, mode, delta, swap_quads,
683 &data_ptr, last_ptr);
684 10783 break;
685 5161 case 10: /*-------------------- MODE 10 (8x8 block processing) ---------------------*/
686 case 11: /*----------------- MODE 11 (4x8 INTER block processing) ------------------*/
687
3/4
✓ Branch 0 taken 5161 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 3934 times.
✓ Branch 3 taken 1227 times.
 5161 if (mode == 10 && !cell->mv_ptr) { /* MODE 10 INTRA processing */
688 3934 error = decode_cell_data(ctx, cell, block, ref_block, plane->pitch,
689 1, 1, mode, delta, swap_quads,
690 &data_ptr, last_ptr);
691 } else { /* mode 10 and 11 INTER processing */
692
1/4
✗ Branch 0 not taken.
✓ Branch 1 taken 1227 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
 1227 if (mode == 11 && !cell->mv_ptr) {
693 ✗ av_log(avctx, AV_LOG_ERROR, "Attempt to use Mode 11 for an INTRA cell!\n");
694 ✗ return AVERROR_INVALIDDATA;
695 }
696
697 1227 zoom_fac = mode == 10;
698 av_assert2(!ref_block);
699 1227 error = decode_cell_data(ctx, cell, block,
700 block /* dummy to avoid UB pointer arithmetic */,
701 plane->pitch, zoom_fac, 1, mode, delta,
702 swap_quads, &data_ptr, last_ptr);
703 }
704 5161 break;
705 ✗ default:
706 ✗ av_log(avctx, AV_LOG_ERROR, "Unsupported coding mode: %d\n", mode);
707 ✗ return AVERROR_INVALIDDATA;
708 }//switch mode
709
710
1/6
✗ Branch 0 not taken.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 15944 times.
 15944 switch (error) {
711 ✗ case IV3_BAD_RLE:
712 ✗ av_log(avctx, AV_LOG_ERROR, "Mode %d: RLE code %X is not allowed at the current line\n",
713 ✗ mode, data_ptr[-1]);
714 ✗ return AVERROR_INVALIDDATA;
715 ✗ case IV3_BAD_DATA:
716 ✗ av_log(avctx, AV_LOG_ERROR, "Mode %d: invalid VQ data\n", mode);
717 ✗ return AVERROR_INVALIDDATA;
718 ✗ case IV3_BAD_COUNTER:
719 ✗ av_log(avctx, AV_LOG_ERROR, "Mode %d: RLE-FB invalid counter: %d\n", mode, code);
720 ✗ return AVERROR_INVALIDDATA;
721 ✗ case IV3_UNSUPPORTED:
722 ✗ av_log(avctx, AV_LOG_ERROR, "Mode %d: unsupported RLE code: %X\n", mode, data_ptr[-1]);
723 ✗ return AVERROR_INVALIDDATA;
724 ✗ case IV3_OUT_OF_DATA:
725 ✗ av_log(avctx, AV_LOG_ERROR, "Mode %d: attempt to read past end of buffer\n", mode);
726 ✗ return AVERROR_INVALIDDATA;
727 }
728
729 15944 return data_ptr - data_start; /* report number of bytes consumed from the input buffer */
730 }
731
732
733 /* Binary tree codes. */
734 enum {
735 H_SPLIT = 0,
736 V_SPLIT = 1,
737 INTRA_NULL = 2,
738 INTER_DATA = 3
739 };
740
741
742 #define SPLIT_CELL(size, new_size) (new_size) = ((size) > 2) ? ((((size) + 2) >> 2) << 1) : 1
743
744 #define UPDATE_BITPOS(n) \
745 ctx->skip_bits += (n); \
746 ctx->need_resync = 1
747
748 #define RESYNC_BITSTREAM \
749 if (ctx->need_resync && !(get_bits_count(&ctx->gb) & 7)) { \
750 skip_bits_long(&ctx->gb, ctx->skip_bits); \
751 ctx->skip_bits = 0; \
752 ctx->need_resync = 0; \
753 }
754
755 #define CHECK_CELL \
756 if (curr_cell.xpos + curr_cell.width > (plane->width >> 2) || \
757 curr_cell.ypos + curr_cell.height > (plane->height >> 2)) { \
758 av_log(avctx, AV_LOG_ERROR, "Invalid cell: x=%d, y=%d, w=%d, h=%d\n", \
759 curr_cell.xpos, curr_cell.ypos, curr_cell.width, curr_cell.height); \
760 return AVERROR_INVALIDDATA; \
761 }
762
763
764 16400 static int parse_bintree(Indeo3DecodeContext *ctx, AVCodecContext *avctx,
765 Plane *plane, int code, Cell *ref_cell,
766 const int depth, const int strip_width)
767 {
768 Cell curr_cell;
769 int bytes_used, ret;
770
771
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 16400 times.
 16400 if (depth <= 0) {
772 ✗ av_log(avctx, AV_LOG_ERROR, "Stack overflow (corrupted binary tree)!\n");
773 ✗ return AVERROR_INVALIDDATA; // unwind recursion
774 }
775
776 16400 curr_cell = *ref_cell; // clone parent cell
777
2/2
✓ Branch 0 taken 5560 times.
✓ Branch 1 taken 10840 times.
 16400 if (code == H_SPLIT) {
778
1/2
✓ Branch 0 taken 5560 times.
✗ Branch 1 not taken.
 5560 SPLIT_CELL(ref_cell->height, curr_cell.height);
779 5560 ref_cell->ypos += curr_cell.height;
780 5560 ref_cell->height -= curr_cell.height;
781
2/4
✓ Branch 0 taken 5560 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 5560 times.
 5560 if (ref_cell->height <= 0 || curr_cell.height <= 0)
782 ✗ return AVERROR_INVALIDDATA;
783
2/2
✓ Branch 0 taken 10420 times.
✓ Branch 1 taken 420 times.
 10840 } else if (code == V_SPLIT) {
784
2/2
✓ Branch 0 taken 300 times.
✓ Branch 1 taken 10120 times.
 10420 if (curr_cell.width > strip_width) {
785 /* split strip */
786
1/2
✓ Branch 0 taken 300 times.
✗ Branch 1 not taken.
 300 curr_cell.width = (curr_cell.width <= (strip_width << 1) ? 1 : 2) * strip_width;
787 } else
788
1/2
✓ Branch 0 taken 10120 times.
✗ Branch 1 not taken.
 10120 SPLIT_CELL(ref_cell->width, curr_cell.width);
789 10420 ref_cell->xpos += curr_cell.width;
790 10420 ref_cell->width -= curr_cell.width;
791
2/4
✓ Branch 0 taken 10420 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 10420 times.
 10420 if (ref_cell->width <= 0 || curr_cell.width <= 0)
792 ✗ return AVERROR_INVALIDDATA;
793 }
794
795
1/2
✓ Branch 1 taken 37989 times.
✗ Branch 2 not taken.
 54389 while (get_bits_left(&ctx->gb) >= 2) { /* loop until return */
796
4/4
✓ Branch 0 taken 27296 times.
✓ Branch 1 taken 10693 times.
✓ Branch 3 taken 8535 times.
✓ Branch 4 taken 18761 times.
 37989 RESYNC_BITSTREAM;
797
3/4
✗ Branch 1 not taken.
✓ Branch 2 taken 15980 times.
✓ Branch 3 taken 2829 times.
✓ Branch 4 taken 19180 times.
 37989 switch (code = get_bits(&ctx->gb, 2)) {
798 15980 case H_SPLIT:
799 case V_SPLIT:
800
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 15980 times.
 15980 if (parse_bintree(ctx, avctx, plane, code, &curr_cell, depth - 1, strip_width))
801 ✗ return AVERROR_INVALIDDATA;
802 15980 break;
803 2829 case INTRA_NULL:
804
2/2
✓ Branch 0 taken 2373 times.
✓ Branch 1 taken 456 times.
 2829 if (!curr_cell.tree) { /* MC tree INTRA code */
805 2373 curr_cell.mv_ptr = 0; /* mark the current strip as INTRA */
806 2373 curr_cell.tree = 1; /* enter the VQ tree */
807 } else { /* VQ tree NULL code */
808
4/4
✓ Branch 0 taken 254 times.
✓ Branch 1 taken 202 times.
✓ Branch 3 taken 92 times.
✓ Branch 4 taken 162 times.
 456 RESYNC_BITSTREAM;
809 456 code = get_bits(&ctx->gb, 2);
810
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 456 times.
 456 if (code >= 2) {
811 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid VQ_NULL code: %d\n", code);
812 ✗ return AVERROR_INVALIDDATA;
813 }
814
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 456 times.
 456 if (code == 1)
815 ✗ av_log(avctx, AV_LOG_ERROR, "SkipCell procedure not implemented yet!\n");
816
817
2/4
✓ Branch 0 taken 456 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 456 times.
 456 CHECK_CELL
818
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 456 times.
 456 if (!curr_cell.mv_ptr)
819 ✗ return AVERROR_INVALIDDATA;
820
821 456 ret = copy_cell(ctx, plane, &curr_cell);
822 456 return ret;
823 }
824 2373 break;
825 19180 case INTER_DATA:
826
2/2
✓ Branch 0 taken 3236 times.
✓ Branch 1 taken 15944 times.
 19180 if (!curr_cell.tree) { /* MC tree INTER code */
827 unsigned mv_idx;
828 /* get motion vector index and setup the pointer to the mv set */
829
2/2
✓ Branch 0 taken 1544 times.
✓ Branch 1 taken 1692 times.
 3236 if (!ctx->need_resync)
830 1544 ctx->next_cell_data = &ctx->gb.buffer[(get_bits_count(&ctx->gb) + 7) >> 3];
831
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 3236 times.
 3236 if (ctx->next_cell_data >= ctx->last_byte) {
832 ✗ av_log(avctx, AV_LOG_ERROR, "motion vector out of array\n");
833 ✗ return AVERROR_INVALIDDATA;
834 }
835 3236 mv_idx = *(ctx->next_cell_data++);
836
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 3236 times.
 3236 if (mv_idx >= ctx->num_vectors) {
837 ✗ av_log(avctx, AV_LOG_ERROR, "motion vector index out of range\n");
838 ✗ return AVERROR_INVALIDDATA;
839 }
840 3236 curr_cell.mv_ptr = &ctx->mc_vectors[mv_idx << 1];
841 3236 curr_cell.tree = 1; /* enter the VQ tree */
842 3236 UPDATE_BITPOS(8);
843 } else { /* VQ tree DATA code */
844
2/2
✓ Branch 0 taken 7503 times.
✓ Branch 1 taken 8441 times.
 15944 if (!ctx->need_resync)
845 7503 ctx->next_cell_data = &ctx->gb.buffer[(get_bits_count(&ctx->gb) + 7) >> 3];
846
847
2/4
✓ Branch 0 taken 15944 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 15944 times.
 15944 CHECK_CELL
848 15944 bytes_used = decode_cell(ctx, avctx, plane, &curr_cell,
849 ctx->next_cell_data, ctx->last_byte);
850
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 15944 times.
 15944 if (bytes_used < 0)
851 ✗ return AVERROR_INVALIDDATA;
852
853 15944 UPDATE_BITPOS(bytes_used << 3);
854 15944 ctx->next_cell_data += bytes_used;
855 15944 return 0;
856 }
857 3236 break;
858 }
859 }//while
860
861 ✗ return AVERROR_INVALIDDATA;
862 }
863
864
865 420 static int decode_plane(Indeo3DecodeContext *ctx, AVCodecContext *avctx,
866 Plane *plane, const uint8_t *data, int32_t data_size,
867 int32_t strip_width)
868 {
869 Cell curr_cell;
870 unsigned num_vectors;
871
872 /* each plane data starts with mc_vector_count field, */
873 /* an optional array of motion vectors followed by the vq data */
874 420 num_vectors = bytestream_get_le32(&data); data_size -= 4;
875
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 420 times.
 420 if (num_vectors > 256) {
876 ✗ av_log(ctx->avctx, AV_LOG_ERROR,
877 "Read invalid number of motion vectors %d\n", num_vectors);
878 ✗ return AVERROR_INVALIDDATA;
879 }
880
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 420 times.
 420 if (num_vectors * 2 > data_size)
881 ✗ return AVERROR_INVALIDDATA;
882
883 420 ctx->num_vectors = num_vectors;
884
2/2
✓ Branch 0 taken 192 times.
✓ Branch 1 taken 228 times.
 420 ctx->mc_vectors = num_vectors ? data : 0;
885
886 /* init the bitreader */
887 420 init_get_bits(&ctx->gb, &data[num_vectors * 2], (data_size - num_vectors * 2) << 3);
888 420 ctx->skip_bits = 0;
889 420 ctx->need_resync = 0;
890
891 420 ctx->last_byte = data + data_size;
892
893 /* initialize the 1st cell and set its dimensions to whole plane */
894 420 curr_cell.xpos = curr_cell.ypos = 0;
895 420 curr_cell.width = plane->width >> 2;
896 420 curr_cell.height = plane->height >> 2;
897 420 curr_cell.tree = 0; // we are in the MC tree now
898 420 curr_cell.mv_ptr = 0; // no motion vector = INTRA cell
899
900 420 return parse_bintree(ctx, avctx, plane, INTRA_NULL, &curr_cell, CELL_STACK_MAX, strip_width);
901 }
902
903
904 #define OS_HDR_ID MKBETAG('F', 'R', 'M', 'H')
905
906 140 static int decode_frame_headers(Indeo3DecodeContext *ctx, AVCodecContext *avctx,
907 const uint8_t *buf, int buf_size)
908 {
909 GetByteContext gb;
910 const uint8_t *bs_hdr;
911 uint32_t frame_num, word2, check_sum, data_size;
912 int y_offset, u_offset, v_offset;
913 uint32_t starts[3], ends[3];
914 uint16_t height, width;
915 int i, j;
916
917 140 bytestream2_init(&gb, buf, buf_size);
918
919 /* parse and check the OS header */
920 140 frame_num = bytestream2_get_le32(&gb);
921 140 word2 = bytestream2_get_le32(&gb);
922 140 check_sum = bytestream2_get_le32(&gb);
923 140 data_size = bytestream2_get_le32(&gb);
924
925
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 140 times.
 140 if ((frame_num ^ word2 ^ data_size ^ OS_HDR_ID) != check_sum) {
926 ✗ av_log(avctx, AV_LOG_ERROR, "OS header checksum mismatch!\n");
927 ✗ return AVERROR_INVALIDDATA;
928 }
929
930 /* parse the bitstream header */
931 140 bs_hdr = gb.buffer;
932
933
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 140 times.
 140 if (bytestream2_get_le16(&gb) != 32) {
934 ✗ av_log(avctx, AV_LOG_ERROR, "Unsupported codec version!\n");
935 ✗ return AVERROR_INVALIDDATA;
936 }
937
938 140 ctx->frame_num = frame_num;
939 140 ctx->frame_flags = bytestream2_get_le16(&gb);
940 140 ctx->data_size = (bytestream2_get_le32(&gb) + 7) >> 3;
941 140 ctx->cb_offset = bytestream2_get_byte(&gb);
942
943
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 140 times.
 140 if (ctx->data_size == 16)
944 ✗ return 4;
945
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 140 times.
 140 ctx->data_size = FFMIN(ctx->data_size, buf_size - 16);
946
947 140 bytestream2_skip(&gb, 3); // skip reserved byte and checksum
948
949 /* check frame dimensions */
950 140 height = bytestream2_get_le16(&gb);
951 140 width = bytestream2_get_le16(&gb);
952
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 140 times.
 140 if (av_image_check_size(width, height, 0, avctx))
953 ✗ return AVERROR_INVALIDDATA;
954
955
2/4
✓ Branch 0 taken 140 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 140 times.
 140 if (width != ctx->width || height != ctx->height) {
956 int res;
957
958 ff_dlog(avctx, "Frame dimensions changed!\n");
959
960 ✗ if (width < 16 || width > 640 ||
961 ✗ height < 16 || height > 480 ||
962 ✗ width & 3 || height & 3) {
963 ✗ av_log(avctx, AV_LOG_ERROR,
964 "Invalid picture dimensions: %d x %d!\n", width, height);
965 ✗ return AVERROR_INVALIDDATA;
966 }
967 ✗ free_frame_buffers(ctx);
968 ✗ if ((res = allocate_frame_buffers(ctx, avctx, width, height)) < 0)
969 ✗ return res;
970 ✗ if ((res = ff_set_dimensions(avctx, width, height)) < 0)
971 ✗ return res;
972 }
973
974 140 y_offset = bytestream2_get_le32(&gb);
975 140 v_offset = bytestream2_get_le32(&gb);
976 140 u_offset = bytestream2_get_le32(&gb);
977 140 bytestream2_skip(&gb, 4);
978
979 /* unfortunately there is no common order of planes in the buffer */
980 /* so we use that sorting algo for determining planes data sizes */
981 140 starts[0] = y_offset;
982 140 starts[1] = v_offset;
983 140 starts[2] = u_offset;
984
985
2/2
✓ Branch 0 taken 420 times.
✓ Branch 1 taken 140 times.
 560 for (j = 0; j < 3; j++) {
986 420 ends[j] = ctx->data_size;
987
2/2
✓ Branch 0 taken 1260 times.
✓ Branch 1 taken 420 times.
 1680 for (i = 2; i >= 0; i--)
988
4/4
✓ Branch 0 taken 1120 times.
✓ Branch 1 taken 140 times.
✓ Branch 2 taken 280 times.
✓ Branch 3 taken 840 times.
 1260 if (starts[i] < ends[j] && starts[i] > starts[j])
989 280 ends[j] = starts[i];
990 }
991
992 140 ctx->y_data_size = ends[0] - starts[0];
993 140 ctx->v_data_size = ends[1] - starts[1];
994 140 ctx->u_data_size = ends[2] - starts[2];
995
1/2
✓ Branch 0 taken 140 times.
✗ Branch 1 not taken.
 140 if (FFMIN3(y_offset, v_offset, u_offset) < 0 ||
996
1/2
✓ Branch 0 taken 140 times.
✗ Branch 1 not taken.
 140 FFMAX3(y_offset, v_offset, u_offset) >= ctx->data_size - 16 ||
997
1/2
✓ Branch 0 taken 140 times.
✗ Branch 1 not taken.
 140 FFMIN3(y_offset, v_offset, u_offset) < gb.buffer - bs_hdr + 16 ||
998
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 140 times.
 140 FFMIN3(ctx->y_data_size, ctx->v_data_size, ctx->u_data_size) <= 0) {
999 ✗ av_log(avctx, AV_LOG_ERROR, "One of the y/u/v offsets is invalid\n");
1000 ✗ return AVERROR_INVALIDDATA;
1001 }
1002
1003 140 ctx->y_data_ptr = bs_hdr + y_offset;
1004 140 ctx->v_data_ptr = bs_hdr + v_offset;
1005 140 ctx->u_data_ptr = bs_hdr + u_offset;
1006 140 ctx->alt_quant = gb.buffer;
1007
1008
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 140 times.
 140 if (ctx->data_size == 16) {
1009 ✗ av_log(avctx, AV_LOG_DEBUG, "Sync frame encountered!\n");
1010 ✗ return 16;
1011 }
1012
1013
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 140 times.
 140 if (ctx->frame_flags & BS_8BIT_PEL) {
1014 ✗ avpriv_request_sample(avctx, "8-bit pixel format");
1015 ✗ return AVERROR_PATCHWELCOME;
1016 }
1017
1018
2/4
✓ Branch 0 taken 140 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 140 times.
 140 if (ctx->frame_flags & BS_MV_X_HALF || ctx->frame_flags & BS_MV_Y_HALF) {
1019 ✗ avpriv_request_sample(avctx, "Halfpel motion vectors");
1020 ✗ return AVERROR_PATCHWELCOME;
1021 }
1022
1023 140 return 0;
1024 }
1025
1026
1027 /**
1028 * Convert and output the current plane.
1029 * All pixel values will be upsampled by shifting right by one bit.
1030 *
1031 * @param[in] plane pointer to the descriptor of the plane being processed
1032 * @param[in] buf_sel indicates which frame buffer the input data stored in
1033 * @param[out] dst pointer to the buffer receiving converted pixels
1034 * @param[in] dst_pitch pitch for moving to the next y line
1035 * @param[in] dst_height output plane height
1036 */
1037 420 static void output_plane(const Plane *plane, int buf_sel, uint8_t *dst,
1038 ptrdiff_t dst_pitch, int dst_height)
1039 {
1040 int x,y;
1041 420 const uint8_t *src = plane->pixels[buf_sel];
1042 420 ptrdiff_t pitch = plane->pitch;
1043
1044 420 dst_height = FFMIN(dst_height, plane->height);
1045
2/2
✓ Branch 0 taken 35400 times.
✓ Branch 1 taken 420 times.
 35820 for (y = 0; y < dst_height; y++) {
1046 /* convert four pixels at once using SWAR */
1047
2/2
✓ Branch 0 taken 1908000 times.
✓ Branch 1 taken 35400 times.
 1943400 for (x = 0; x < plane->width >> 2; x++) {
1048 1908000 AV_WN32A(dst, (AV_RN32A(src) & 0x7F7F7F7F) << 1);
1049 1908000 src += 4;
1050 1908000 dst += 4;
1051 }
1052
1053
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 35400 times.
 35400 for (x <<= 2; x < plane->width; x++)
1054 ✗ *dst++ = *src++ << 1;
1055
1056 35400 src += pitch - plane->width;
1057 35400 dst += dst_pitch - plane->width;
1058 }
1059 420 }
1060
1061
1062 4 static av_cold int decode_init(AVCodecContext *avctx)
1063 {
1064 static AVOnce init_static_once = AV_ONCE_INIT;
1065 4 Indeo3DecodeContext *ctx = avctx->priv_data;
1066
1067 4 ctx->avctx = avctx;
1068 4 avctx->pix_fmt = AV_PIX_FMT_YUV410P;
1069
1070 4 ff_thread_once(&init_static_once, build_requant_tab);
1071
1072 4 ff_hpeldsp_init(&ctx->hdsp, avctx->flags);
1073
1074 4 return allocate_frame_buffers(ctx, avctx, avctx->width, avctx->height);
1075 }
1076
1077
1078 140 static int decode_frame(AVCodecContext *avctx, AVFrame *frame,
1079 int *got_frame, AVPacket *avpkt)
1080 {
1081 140 Indeo3DecodeContext *ctx = avctx->priv_data;
1082 140 const uint8_t *buf = avpkt->data;
1083 140 int buf_size = avpkt->size;
1084 int res;
1085
1086 140 res = decode_frame_headers(ctx, avctx, buf, buf_size);
1087
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 140 times.
 140 if (res < 0)
1088 ✗ return res;
1089
1090 /* skip sync(null) frames */
1091
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 140 times.
 140 if (res) {
1092 // we have processed 16 bytes but no data was decoded
1093 ✗ *got_frame = 0;
1094 ✗ return buf_size;
1095 }
1096
1097 /* skip droppable INTER frames if requested */
1098
2/2
✓ Branch 0 taken 32 times.
✓ Branch 1 taken 108 times.
 140 if (ctx->frame_flags & BS_NONREF &&
1099
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 32 times.
 32 (avctx->skip_frame >= AVDISCARD_NONREF))
1100 ✗ return 0;
1101
1102 /* skip INTER frames if requested */
1103
3/4
✓ Branch 0 taken 64 times.
✓ Branch 1 taken 76 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 64 times.
 140 if (!(ctx->frame_flags & BS_KEYFRAME) && avctx->skip_frame >= AVDISCARD_NONKEY)
1104 ✗ return 0;
1105
1106 /* use BS_BUFFER flag for buffer switching */
1107 140 ctx->buf_sel = (ctx->frame_flags >> BS_BUFFER) & 1;
1108
1109
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 140 times.
 140 if ((res = ff_get_buffer(avctx, frame, 0)) < 0)
1110 ✗ return res;
1111
1112 /* decode luma plane */
1113
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 140 times.
 140 if ((res = decode_plane(ctx, avctx, ctx->planes, ctx->y_data_ptr, ctx->y_data_size, 40)))
1114 ✗ return res;
1115
1116 /* decode chroma planes */
1117
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 140 times.
 140 if ((res = decode_plane(ctx, avctx, &ctx->planes[1], ctx->u_data_ptr, ctx->u_data_size, 10)))
1118 ✗ return res;
1119
1120
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 140 times.
 140 if ((res = decode_plane(ctx, avctx, &ctx->planes[2], ctx->v_data_ptr, ctx->v_data_size, 10)))
1121 ✗ return res;
1122
1123 140 output_plane(&ctx->planes[0], ctx->buf_sel,
1124 140 frame->data[0], frame->linesize[0],
1125 avctx->height);
1126 140 output_plane(&ctx->planes[1], ctx->buf_sel,
1127 140 frame->data[1], frame->linesize[1],
1128 140 (avctx->height + 3) >> 2);
1129 140 output_plane(&ctx->planes[2], ctx->buf_sel,
1130 140 frame->data[2], frame->linesize[2],
1131 140 (avctx->height + 3) >> 2);
1132
1133 140 *got_frame = 1;
1134
1135 140 return buf_size;
1136 }
1137
1138
1139 4 static av_cold int decode_close(AVCodecContext *avctx)
1140 {
1141 4 free_frame_buffers(avctx->priv_data);
1142
1143 4 return 0;
1144 }
1145
1146 const FFCodec ff_indeo3_decoder = {
1147 .p.name = "indeo3",
1148 CODEC_LONG_NAME("Intel Indeo 3"),
1149 .p.type = AVMEDIA_TYPE_VIDEO,
1150 .p.id = AV_CODEC_ID_INDEO3,
1151 .priv_data_size = sizeof(Indeo3DecodeContext),
1152 .init = decode_init,
1153 .close = decode_close,
1154 FF_CODEC_DECODE_CB(decode_frame),
1155 .p.capabilities = AV_CODEC_CAP_DR1,
1156 .caps_internal = FF_CODEC_CAP_INIT_CLEANUP,
1157 };
1158