libavformat/id3v2/reader.c - FFmpeg coverage

libavformat/id3v2/reader.c

Line	Branch	Exec	Source
1			/*
2			* Copyright (c) 2003 Fabrice Bellard
3			*
4			* This file is part of FFmpeg.
5			*
6			* FFmpeg is free software; you can redistribute it and/or
7			* modify it under the terms of the GNU Lesser General Public
8			* License as published by the Free Software Foundation; either
9			* version 2.1 of the License, or (at your option) any later version.
10			*
11			* FFmpeg is distributed in the hope that it will be useful,
12			* but WITHOUT ANY WARRANTY; without even the implied warranty of
13			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14			* Lesser General Public License for more details.
15			*
16			* You should have received a copy of the GNU Lesser General Public
17			* License along with FFmpeg; if not, write to the Free Software
18			* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
19			*/
20
21			/**
22			* @file
23			* ID3v2 header parser
24			*
25			* Specifications available at:
26			* http://id3.org/Developer_Information
27			*/
28
29			#include "config.h"
30			#include "libavutil/attributes.h"
31
32			#if CONFIG_ZLIB
33			#include <zlib.h>
34			#endif
35
36			#include "libavutil/attributes_internal.h"
37			#include "libavutil/avstring.h"
38			#include "libavutil/bprint.h"
39			#include "libavutil/dict.h"
40			#include "libavutil/intreadwrite.h"
41			#include "libavutil/mem.h"
42			#include "libavcodec/png.h"
43			#include "libavformat/avio_internal.h"
44			#include "libavformat/avlanguage.h"
45			#include "libavformat/demux.h"
46			#include "libavformat/id3v1.h"
47			#include "libavformat/id3v2.h"
48
49			const AVMetadataConv ff_id3v2_34_metadata_conv[] = {
50			{ "COMM", "comment" },
51			{ "TALB", "album" },
52			{ "TCOM", "composer" },
53			{ "TCON", "genre" },
54			{ "TCOP", "copyright" },
55			{ "TENC", "encoded_by" },
56			{ "TIT2", "title" },
57			{ "TLAN", "language" },
58			{ "TPE1", "artist" },
59			{ "TPE2", "album_artist" },
60			{ "TPE3", "performer" },
61			{ "TPOS", "disc" },
62			{ "TPUB", "publisher" },
63			{ "TRCK", "track" },
64			{ "TSSE", "encoder" },
65			{ "USLT", "lyrics" },
66			{ 0 }
67			};
68
69			const AVMetadataConv ff_id3v2_4_metadata_conv[] = {
70			{ "TCMP", "compilation" },
71			{ "TDRC", "date" },
72			{ "TDRL", "date" },
73			{ "TDEN", "creation_time" },
74			{ "TSOA", "album-sort" },
75			{ "TSOP", "artist-sort" },
76			{ "TSOT", "title-sort" },
77			{ "TSST", "disc_subtitle" },
78			{ "TIT1", "grouping" },
79			{ 0 }
80			};
81
82			static const AVMetadataConv id3v2_2_metadata_conv[] = {
83			{ "TAL", "album" },
84			{ "TCO", "genre" },
85			{ "TCP", "compilation" },
86			{ "TT2", "title" },
87			{ "TEN", "encoded_by" },
88			{ "TP1", "artist" },
89			{ "TP2", "album_artist" },
90			{ "TP3", "performer" },
91			{ "TRK", "track" },
92			{ 0 }
93			};
94
95			attribute_nonstring const char ff_id3v2_tags[][4] = {
96			"TALB", "TBPM", "TCOM", "TCON", "TCOP", "TDLY", "TENC", "TEXT",
97			"TFLT", "TIT1", "TIT2", "TIT3", "TKEY", "TLAN", "TLEN", "TMED",
98			"TOAL", "TOFN", "TOLY", "TOPE", "TOWN", "TPE1", "TPE2", "TPE3",
99			"TPE4", "TPOS", "TPUB", "TRCK", "TRSN", "TRSO", "TSRC", "TSSE",
100			{ 0 },
101			};
102
103			attribute_nonstring const char ff_id3v2_4_tags[][4] = {
104			"TDEN", "TDOR", "TDRC", "TDRL", "TDTG", "TIPL", "TMCL", "TMOO",
105			"TPRO", "TSOA", "TSOP", "TSOT", "TSST",
106			{ 0 },
107			};
108
109			attribute_nonstring const char ff_id3v2_3_tags[][4] = {
110			"TDAT", "TIME", "TORY", "TRDA", "TSIZ", "TYER",
111			{ 0 },
112			};
113
114			const char * const ff_id3v2_picture_types[21] = {
115			"Other",
116			"32x32 pixels 'file icon'",
117			"Other file icon",
118			"Cover (front)",
119			"Cover (back)",
120			"Leaflet page",
121			"Media (e.g. label side of CD)",
122			"Lead artist/lead performer/soloist",
123			"Artist/performer",
124			"Conductor",
125			"Band/Orchestra",
126			"Composer",
127			"Lyricist/text writer",
128			"Recording Location",
129			"During recording",
130			"During performance",
131			"Movie/video screen capture",
132			"A bright coloured fish",
133			"Illustration",
134			"Band/artist logotype",
135			"Publisher/Studio logotype",
136			};
137
138			const CodecMime ff_id3v2_mime_tags[] = {
139			{ "image/gif", AV_CODEC_ID_GIF },
140			{ "image/jpeg", AV_CODEC_ID_MJPEG },
141			{ "image/jpg", AV_CODEC_ID_MJPEG },
142			{ "image/jxl", AV_CODEC_ID_JPEGXL },
143			{ "image/png", AV_CODEC_ID_PNG },
144			{ "image/tiff", AV_CODEC_ID_TIFF },
145			{ "image/bmp", AV_CODEC_ID_BMP },
146			{ "image/webp", AV_CODEC_ID_WEBP },
147			{ "JPG", AV_CODEC_ID_MJPEG }, /* ID3v2.2 */
148			{ "PNG", AV_CODEC_ID_PNG }, /* ID3v2.2 */
149			{ "", AV_CODEC_ID_NONE },
150			};
151
152		26461	int ff_id3v2_match(const uint8_t buf, const char magic)
153			{
154		26851	return buf[0] == magic[0] &&
155	2/2 ✓ Branch 3 → 4 taken 354 times. ✓ Branch 3 → 12 taken 36 times.	390	buf[1] == magic[1] &&
156	1/2 ✓ Branch 4 → 5 taken 354 times. ✗ Branch 4 → 12 not taken.	354	buf[2] == magic[2] &&
157	1/2 ✓ Branch 5 → 6 taken 354 times. ✗ Branch 5 → 12 not taken.	354	buf[3] != 0xff &&
158	1/2 ✓ Branch 6 → 7 taken 354 times. ✗ Branch 6 → 12 not taken.	354	buf[4] != 0xff &&
159	1/2 ✓ Branch 7 → 8 taken 354 times. ✗ Branch 7 → 12 not taken.	354	(buf[6] & 0x80) == 0 &&
160	1/2 ✓ Branch 8 → 9 taken 354 times. ✗ Branch 8 → 12 not taken.	354	(buf[7] & 0x80) == 0 &&
161	3/4 ✓ Branch 2 → 3 taken 390 times. ✓ Branch 2 → 12 taken 26071 times. ✓ Branch 9 → 10 taken 354 times. ✗ Branch 9 → 12 not taken.	27205	(buf[8] & 0x80) == 0 &&
162	1/2 ✓ Branch 10 → 11 taken 354 times. ✗ Branch 10 → 12 not taken.	354	(buf[9] & 0x80) == 0;
163			}
164
165		224	int ff_id3v2_tag_len(const uint8_t *buf)
166			{
167		224	int len = ((buf[6] & 0x7f) << 21) +
168		224	((buf[7] & 0x7f) << 14) +
169		224	((buf[8] & 0x7f) << 7) +
170		224	(buf[9] & 0x7f) +
171			ID3v2_HEADER_SIZE;
172	1/2 ✗ Branch 2 → 3 not taken. ✓ Branch 2 → 4 taken 224 times.	224	if (buf[5] & 0x10)
173		✗	len += ID3v2_HEADER_SIZE;
174		224	return len;
175			}
176
177		35	static unsigned int get_size(AVIOContext *s, int len)
178			{
179		35	int v = 0;
180	2/2 ✓ Branch 5 → 3 taken 140 times. ✓ Branch 5 → 6 taken 35 times.	175	while (len--)
181		140	v = (v << 7) + (avio_r8(s) & 0x7F);
182		35	return v;
183			}
184
185		39	static int is_syncsafe(unsigned int size)
186			{
187		39	return !(size & ((0x80U << 0) \|
188			(0x80U << 8) \|
189			(0x80U << 16) \|
190			(0x80U << 24)));
191			}
192
193		39	static unsigned int size_to_syncsafe(unsigned int size)
194			{
195		39	return (((size) & (0x7f << 0)) >> 0) +
196		39	(((size) & (0x7f << 8)) >> 1) +
197		78	(((size) & (0x7f << 16)) >> 2) +
198		39	(((size) & (0x7f << 24)) >> 3);
199			}
200
201			/* No real verification, only check that the tag consists of
202			* a combination of capital alpha-numerical characters */
203		10	static int is_tag(const char *buf, unsigned int len)
204			{
205	1/2 ✗ Branch 2 → 3 not taken. ✓ Branch 2 → 4 taken 10 times.	10	if (!len)
206		✗	return 0;
207
208	2/2 ✓ Branch 11 → 5 taken 40 times. ✓ Branch 11 → 12 taken 10 times.	50	while (len--)
209	2/2 ✓ Branch 5 → 6 taken 39 times. ✓ Branch 5 → 7 taken 1 time.	40	if ((buf[len] < 'A' \|\|
210	1/2 ✗ Branch 6 → 7 not taken. ✓ Branch 6 → 10 taken 39 times.	39	buf[len] > 'Z') &&
211	1/2 ✓ Branch 7 → 8 taken 1 time. ✗ Branch 7 → 9 not taken.	1	(buf[len] < '0' \|\|
212	1/2 ✗ Branch 8 → 9 not taken. ✓ Branch 8 → 10 taken 1 time.	1	buf[len] > '9'))
213		✗	return 0;
214
215		10	return 1;
216			}
217
218			/**
219			* Return 1 if the candidate frame boundary at offset (with rem bytes left in
220			* the ID3v2 tag after it) is followed by the end of the tag, zero padding, or
221			* a plausible 10-byte ID3v2.3/2.4 frame header; 0 if not, -1 on error.
222			*/
223		10	static int check_tag(AVIOContext *s, int64_t offset, unsigned int rem)
224			{
225			char tag[4];
226			unsigned int nsize, nlen;
227
228	1/2 ✗ Branch 2 → 3 not taken. ✓ Branch 2 → 4 taken 10 times.	10	if (!rem)
229		✗	return 1;
230	1/2 ✗ Branch 5 → 6 not taken. ✓ Branch 5 → 7 taken 10 times.	10	if (avio_seek(s, offset, SEEK_SET) < 0)
231		✗	return -1;
232	1/2 ✗ Branch 7 → 8 not taken. ✓ Branch 7 → 14 taken 10 times.	10	if (rem < sizeof(tag)) {
233	0/2 ✗ Branch 12 → 9 not taken. ✗ Branch 12 → 13 not taken.	✗	while (rem--)
234	0/2 ✗ Branch 10 → 11 not taken. ✗ Branch 10 → 12 not taken.	✗	if (avio_r8(s))
235		✗	return 0;
236		✗	return 1;
237			}
238	1/2 ✗ Branch 15 → 16 not taken. ✓ Branch 15 → 17 taken 10 times.	10	if (avio_read(s, tag, sizeof(tag)) < (int)sizeof(tag))
239		✗	return -1;
240	1/2 ✗ Branch 17 → 18 not taken. ✓ Branch 17 → 19 taken 10 times.	10	if (!AV_RB32(tag))
241		✗	return 1;
242	2/4 ✓ Branch 19 → 20 taken 10 times. ✗ Branch 19 → 22 not taken. ✗ Branch 21 → 22 not taken. ✓ Branch 21 → 23 taken 10 times.	10	if (rem < ID3v2_HEADER_SIZE \|\| !is_tag(tag, sizeof(tag)))
243		✗	return 0;
244		10	nsize = avio_rb32(s);
245	1/2 ✓ Branch 25 → 26 taken 10 times. ✗ Branch 25 → 27 not taken.	10	nlen = is_syncsafe(nsize) ? size_to_syncsafe(nsize) : nsize;
246			/* ID3v2 requires frames to be at least 1 byte, but id3v2_parse()
247			* explicitly skips empty frames (tlen == 0) to recover from broken tags.
248			* Accept nlen == 0 here as well so a valid synchsafe boundary followed by
249			* an empty frame is not rejected. */
250		10	return nlen <= rem - ID3v2_HEADER_SIZE;
251			}
252
253			/**
254			* Free GEOB type extra metadata.
255			*/
256		2	static void free_geobtag(void *obj)
257			{
258		2	ID3v2ExtraMetaGEOB *geob = obj;
259		2	av_freep(&geob->mime_type);
260		2	av_freep(&geob->file_name);
261		2	av_freep(&geob->description);
262		2	av_freep(&geob->data);
263		2	}
264
265			/**
266			* Decode characters to UTF-8 according to encoding type. The decoded buffer is
267			* always null terminated. Stop reading when either *maxread bytes are read from
268			* pb or U+0000 character is found.
269			*
270			* @param dst Pointer where the address of the buffer with the decoded bytes is
271			* stored. Buffer must be freed by caller.
272			* @param maxread Pointer to maximum number of characters to read from the
273			* AVIOContext. After execution the value is decremented by the number of bytes
274			* actually read.
275			* @returns 0 if no error occurred, dst is uninitialized on error
276			*/
277		800	static int decode_str(AVFormatContext s, AVIOContext pb, int encoding,
278			uint8_t *dst, int maxread)
279			{
280			int ret;
281			uint8_t tmp;
282		800	uint32_t ch = 1;
283		800	int left = *maxread, dynsize;
284		800	unsigned int (get)(AVIOContext) = avio_rb16;
285			AVIOContext *dynbuf;
286
287	1/2 ✗ Branch 3 → 4 not taken. ✓ Branch 3 → 6 taken 800 times.	800	if ((ret = avio_open_dyn_buf(&dynbuf)) < 0) {
288		✗	av_log(s, AV_LOG_ERROR, "Error opening memory stream\n");
289		✗	return ret;
290			}
291
292	2/2 ✓ Branch 6 → 7 taken 24 times. ✓ Branch 6 → 8 taken 776 times.	800	if (left == 0)
293		24	goto end;
294
295	4/5 ✓ Branch 8 → 9 taken 346 times. ✓ Branch 8 → 20 taken 12 times. ✓ Branch 8 → 32 taken 18 times. ✓ Branch 8 → 56 taken 400 times. ✗ Branch 8 → 63 not taken.	776	switch (encoding) {
296		346	case ID3v2_ENCODING_ISO8859:
297	4/4 ✓ Branch 17 → 18 taken 7027 times. ✓ Branch 17 → 19 taken 163 times. ✓ Branch 18 → 10 taken 6844 times. ✓ Branch 18 → 19 taken 183 times.	7190	while (left && ch) {
298		6844	ch = avio_r8(pb);
299	4/4 ✓ Branch 11 → 12 taken 6840 times. ✓ Branch 11 → 13 taken 4 times. ✓ Branch 15 → 14 taken 4 times. ✓ Branch 15 → 16 taken 4 times.	6848	PUT_UTF8(ch, tmp, avio_w8(dynbuf, tmp);)
300		6844	left--;
301			}
302		346	break;
303
304		12	case ID3v2_ENCODING_UTF16BOM:
305	1/2 ✗ Branch 20 → 21 not taken. ✓ Branch 20 → 24 taken 12 times.	12	if ((left -= 2) < 0) {
306		✗	av_log(s, AV_LOG_ERROR, "Cannot read BOM value, input too short %d\n", left);
307		✗	ffio_free_dyn_buf(&dynbuf);
308		✗	*dst = NULL;
309		✗	return AVERROR_INVALIDDATA;
310			}
311		12	uint16_t bom = avio_rb16(pb);
312	2/4 ✓ Branch 25 → 26 taken 11 times. ✗ Branch 25 → 27 not taken. ✓ Branch 25 → 28 taken 1 time. ✗ Branch 25 → 29 not taken.	12	switch (bom) {
313		11	case 0xfffe:
314		11	get = avio_rl16;
315		11	break;
316		✗	case 0xfeff:
317		✗	break;
318		1	case 0: // empty string without bom
319		1	goto end;
320		✗	default:
321		✗	av_log(s, AV_LOG_ERROR, "Incorrect BOM value: 0x%x\n", bom);
322		✗	ffio_free_dyn_buf(&dynbuf);
323		✗	*dst = NULL;
324		✗	*maxread = left;
325		✗	return AVERROR_INVALIDDATA;
326			}
327			av_fallthrough;
328
329			case ID3v2_ENCODING_UTF16BE:
330	4/4 ✓ Branch 51 → 52 taken 239 times. ✓ Branch 51 → 53 taken 19 times. ✓ Branch 52 → 33 taken 229 times. ✓ Branch 52 → 53 taken 10 times.	258	while ((left > 1) && ch) {
331	2/10 ✓ Branch 33 → 34 taken 229 times. ✗ Branch 33 → 36 not taken. ✗ Branch 37 → 38 not taken. ✓ Branch 37 → 45 taken 229 times. ✗ Branch 38 → 39 not taken. ✗ Branch 38 → 41 not taken. ✗ Branch 42 → 43 not taken. ✗ Branch 42 → 53 not taken. ✗ Branch 43 → 44 not taken. ✗ Branch 43 → 53 not taken.	229	GET_UTF16(ch, ((left -= 2) >= 0 ? get(pb) : 0), break;)
332	4/4 ✓ Branch 45 → 46 taken 162 times. ✓ Branch 45 → 47 taken 67 times. ✓ Branch 49 → 48 taken 67 times. ✓ Branch 49 → 50 taken 67 times.	296	PUT_UTF8(ch, tmp, avio_w8(dynbuf, tmp);)
333			}
334	1/2 ✗ Branch 53 → 54 not taken. ✓ Branch 53 → 55 taken 29 times.	29	if (left < 0)
335		✗	left += 2; /* did not read last char from pb */
336		29	break;
337
338		400	case ID3v2_ENCODING_UTF8:
339	4/4 ✓ Branch 60 → 61 taken 5473 times. ✓ Branch 60 → 62 taken 327 times. ✓ Branch 61 → 57 taken 5400 times. ✓ Branch 61 → 62 taken 73 times.	5800	while (left && ch) {
340		5400	ch = avio_r8(pb);
341		5400	avio_w8(dynbuf, ch);
342		5400	left--;
343			}
344		400	break;
345		✗	default:
346		✗	av_log(s, AV_LOG_WARNING, "Unknown encoding %d\n", encoding);
347			}
348
349		800	end:
350	2/2 ✓ Branch 64 → 65 taken 64 times. ✓ Branch 64 → 66 taken 736 times.	800	if (ch)
351		64	avio_w8(dynbuf, 0);
352
353		800	dynsize = avio_close_dyn_buf(dynbuf, dst);
354	1/2 ✗ Branch 67 → 68 not taken. ✓ Branch 67 → 70 taken 800 times.	800	if (dynsize <= 0) {
355		✗	av_freep(dst);
356		✗	return AVERROR(ENOMEM);
357			}
358		800	*maxread = left;
359
360		800	return 0;
361			}
362
363			/**
364			* Parse a text tag.
365			*/
366		421	static void read_ttag(AVFormatContext s, AVIOContext pb, int taglen,
367			AVDictionary *metadata, const char key)
368			{
369			uint8_t *dst;
370		421	int encoding, dict_flags = AV_DICT_DONT_OVERWRITE \| AV_DICT_DONT_STRDUP_VAL;
371			unsigned genre;
372
373	1/2 ✗ Branch 2 → 3 not taken. ✓ Branch 2 → 4 taken 421 times.	421	if (taglen < 1)
374		✗	return;
375
376		421	encoding = avio_r8(pb);
377		421	taglen--; /* account for encoding type byte */
378
379	1/2 ✗ Branch 6 → 7 not taken. ✓ Branch 6 → 9 taken 421 times.	421	if (decode_str(s, pb, encoding, &dst, &taglen) < 0) {
380		✗	av_log(s, AV_LOG_ERROR, "Error reading frame %s, skipped\n", key);
381		✗	return;
382			}
383
384	3/4 ✓ Branch 9 → 10 taken 396 times. ✓ Branch 9 → 11 taken 25 times. ✗ Branch 10 → 11 not taken. ✓ Branch 10 → 17 taken 396 times.	421	if (!(strcmp(key, "TCON") && strcmp(key, "TCO")) &&
385	2/4 ✓ Branch 11 → 12 taken 25 times. ✗ Branch 11 → 13 not taken. ✗ Branch 12 → 13 not taken. ✓ Branch 12 → 17 taken 25 times.	25	(sscanf(dst, "(%d)", &genre) == 1 \|\| sscanf(dst, "%d", &genre) == 1) &&
386	0/2 ✗ Branch 13 → 14 not taken. ✗ Branch 13 → 17 not taken.	✗	genre <= ID3v1_GENRE_MAX) {
387		✗	av_freep(&dst);
388		✗	dst = av_strdup(ff_id3v1_genre_str[genre]);
389	3/4 ✓ Branch 17 → 18 taken 386 times. ✓ Branch 17 → 19 taken 35 times. ✗ Branch 18 → 19 not taken. ✓ Branch 18 → 25 taken 386 times.	421	} else if (!(strcmp(key, "TXXX") && strcmp(key, "TXX"))) {
390			/* dst now contains the key, need to get value */
391		35	key = dst;
392	1/2 ✗ Branch 20 → 21 not taken. ✓ Branch 20 → 24 taken 35 times.	35	if (decode_str(s, pb, encoding, &dst, &taglen) < 0) {
393		✗	av_log(s, AV_LOG_ERROR, "Error reading frame %s, skipped\n", key);
394		✗	av_freep(&key);
395		✗	return;
396			}
397		35	dict_flags \|= AV_DICT_DONT_STRDUP_KEY;
398	2/2 ✓ Branch 25 → 26 taken 7 times. ✓ Branch 25 → 27 taken 379 times.	386	} else if (!*dst)
399		7	av_freep(&dst);
400
401	2/2 ✓ Branch 27 → 28 taken 414 times. ✓ Branch 27 → 29 taken 7 times.	421	if (dst)
402		414	av_dict_set(metadata, key, dst, dict_flags);
403			}
404
405			/**
406			* Parse a lang descr tag such as COMM and USLT.
407			*
408			* A non-empty descriptor produces "<base>-<descriptor>-<lang>" keys.
409			*/
410		113	static void read_lang_descr_tag(AVFormatContext s, AVIOContext pb,
411			const char *key, int taglen,
412			AVDictionary **metadata)
413			{
414		113	char *full_key = NULL;
415		113	uint8_t dst, descriptor = NULL;
416			int encoding;
417		113	char language[4] = {0};
418		113	int flags = AV_DICT_DONT_OVERWRITE \| AV_DICT_DONT_STRDUP_VAL;
419
420	1/2 ✗ Branch 2 → 3 not taken. ✓ Branch 2 → 4 taken 113 times.	113	if (taglen < 4)
421		✗	return;
422
423		113	encoding = avio_r8(pb);
424
425	1/2 ✗ Branch 6 → 7 not taken. ✓ Branch 6 → 9 taken 113 times.	113	if (avio_read(pb, language, 3) < 3) {
426		✗	av_log(s, AV_LOG_ERROR, "Error reading %s frame language, skipped\n", key);
427		✗	return;
428			}
429
430	2/2 ✓ Branch 11 → 10 taken 339 times. ✓ Branch 11 → 12 taken 113 times.	452	for (char p = language; p; p++)
431		339	p = av_tolower(p);
432
433			// Some libraries set XXX for unknown language.
434	2/2 ✓ Branch 12 → 13 taken 109 times. ✓ Branch 12 → 14 taken 4 times.	113	if (!strcmp(language, "xxx") \|\|
435			// By convention, "und" is represented as a key with
436			// no language, e.g. "comment" or "lyrics"
437	2/2 ✓ Branch 13 → 14 taken 21 times. ✓ Branch 13 → 15 taken 88 times.	109	!strcmp(language, "und"))
438		25	memset(language, 0, sizeof(language));
439
440		113	taglen -= 4;
441
442	1/2 ✗ Branch 16 → 17 not taken. ✓ Branch 16 → 19 taken 113 times.	113	if (decode_str(s, pb, encoding, &descriptor, &taglen) < 0) {
443		✗	av_log(s, AV_LOG_ERROR, "Error reading %s frame descriptor, skipped\n", key);
444		✗	return;
445			}
446
447	1/2 ✗ Branch 20 → 21 not taken. ✓ Branch 20 → 24 taken 113 times.	113	if (decode_str(s, pb, encoding, &dst, &taglen) < 0) {
448		✗	av_freep(&descriptor);
449		✗	av_log(s, AV_LOG_ERROR, "Error reading %s frame, skipped\n", key);
450		✗	return;
451			}
452
453	3/4 ✓ Branch 24 → 25 taken 113 times. ✗ Branch 24 → 51 not taken. ✓ Branch 25 → 26 taken 86 times. ✓ Branch 25 → 51 taken 27 times.	113	if (descriptor && *descriptor) {
454			#if FF_API_OLD_ID3V2_COMMENT
455	3/4 ✓ Branch 26 → 27 taken 86 times. ✗ Branch 26 → 31 not taken. ✓ Branch 27 → 28 taken 5 times. ✓ Branch 27 → 31 taken 81 times.	86	if (s && (s->flags & AVFMT_FLAG_LEGACY_ID3V2_COMM_KEYS) &&
456	1/2 ✓ Branch 28 → 29 taken 5 times. ✗ Branch 28 → 31 not taken.	5	!strcmp(key, "comment")) {
457		5	av_log(s, AV_LOG_WARNING,
458			"Deprecated: COMM descriptor '%s' exported as metadata key. "
459			"This will be removed in a future version.\n", descriptor);
460		5	av_dict_set(metadata, (const char )descriptor, (const char )dst,
461			AV_DICT_DONT_OVERWRITE);
462			}
463			#endif
464		86	int descr_len = strlen((char *)descriptor);
465	2/2 ✓ Branch 32 → 33 taken 78 times. ✓ Branch 32 → 35 taken 8 times.	86	if (av_strnlen(language, 3) > 0)
466		78	full_key = av_asprintf("%s-%s-%s", key, descriptor, language);
467			// descr = "eng"
468	4/4 ✓ Branch 35 → 36 taken 2 times. ✓ Branch 35 → 38 taken 6 times. ✓ Branch 37 → 38 taken 1 time. ✓ Branch 37 → 42 taken 1 time.	10	else if ((descr_len == 3 &&
469	2/2 ✓ Branch 38 → 39 taken 4 times. ✓ Branch 38 → 44 taken 3 times.	9	ff_convert_lang_to((char *)descriptor, AV_LANG_ISO639_2_BIBL)) \|\|
470			// descr = Foo-eng
471	4/4 ✓ Branch 39 → 40 taken 2 times. ✓ Branch 39 → 44 taken 2 times. ✓ Branch 41 → 42 taken 1 time. ✓ Branch 41 → 44 taken 1 time.	6	(descr_len > 4 && descriptor[descr_len-4] == '-' &&
472		2	ff_convert_lang_to((char *)descriptor+descr_len-3, AV_LANG_ISO639_2_BIBL))) {
473			/* Descriptor looks like a lang code: add trailing lang to
474			* keep the key unambiguous on the write side. */
475		2	full_key = av_asprintf("%s-%s-und", key, descriptor);
476			} else
477		6	full_key = av_asprintf("%s-%s", key, descriptor);
478	1/2 ✗ Branch 46 → 47 not taken. ✓ Branch 46 → 50 taken 86 times.	86	if (!full_key) {
479		✗	av_freep(&descriptor);
480		✗	av_freep(&dst);
481		✗	return;
482			}
483		86	key = full_key;
484	2/2 ✓ Branch 52 → 53 taken 10 times. ✓ Branch 52 → 59 taken 17 times.	27	} else if (av_strnlen(language, 3) == 3) {
485		10	full_key = av_asprintf("%s-%s", key, language);
486	1/2 ✗ Branch 54 → 55 not taken. ✓ Branch 54 → 58 taken 10 times.	10	if (!full_key) {
487		✗	av_freep(&descriptor);
488		✗	av_freep(&dst);
489		✗	return;
490			}
491		10	key = full_key;
492			}
493
494		113	av_freep(&descriptor);
495		113	av_dict_set(metadata, key, (const char *)dst, flags);
496		113	av_freep(&full_key);
497			}
498
499			typedef struct ExtraMetaList {
500			ID3v2ExtraMeta head, tail;
501			} ExtraMetaList;
502
503		114	static void list_append(ID3v2ExtraMeta new_elem, ExtraMetaList list)
504			{
505	2/2 ✓ Branch 2 → 3 taken 51 times. ✓ Branch 2 → 4 taken 63 times.	114	if (list->tail)
506		51	list->tail->next = new_elem;
507			else
508		63	list->head = new_elem;
509		114	list->tail = new_elem;
510		114	}
511
512			/**
513			* Parse GEOB tag into a ID3v2ExtraMetaGEOB struct.
514			*/
515		2	static void read_geobtag(AVFormatContext s, AVIOContext pb, int taglen,
516			const char tag, ExtraMetaList extra_meta, int version)
517			{
518		2	ID3v2ExtraMetaGEOB *geob_data = NULL;
519		2	ID3v2ExtraMeta *new_extra = NULL;
520			char encoding;
521			unsigned int len;
522
523	1/2 ✗ Branch 2 → 3 not taken. ✓ Branch 2 → 4 taken 2 times.	2	if (taglen < 1)
524		✗	return;
525
526		2	new_extra = av_mallocz(sizeof(ID3v2ExtraMeta));
527	1/2 ✗ Branch 5 → 6 not taken. ✓ Branch 5 → 8 taken 2 times.	2	if (!new_extra) {
528		✗	av_log(s, AV_LOG_ERROR, "Failed to alloc %zu bytes\n",
529			sizeof(ID3v2ExtraMeta));
530		✗	return;
531			}
532
533		2	geob_data = &new_extra->data.geob;
534
535			/* read encoding type byte */
536		2	encoding = avio_r8(pb);
537		2	taglen--;
538
539			/* read MIME type (always ISO-8859) */
540	1/2 ✓ Branch 10 → 11 taken 2 times. ✗ Branch 10 → 12 not taken.	2	if (decode_str(s, pb, ID3v2_ENCODING_ISO8859, &geob_data->mime_type,
541		2	&taglen) < 0 \|\|
542	1/2 ✗ Branch 11 → 12 not taken. ✓ Branch 11 → 13 taken 2 times.	2	taglen <= 0)
543		✗	goto fail;
544
545			/* read file name */
546	1/2 ✓ Branch 14 → 15 taken 2 times. ✗ Branch 14 → 16 not taken.	2	if (decode_str(s, pb, encoding, &geob_data->file_name, &taglen) < 0 \|\|
547	1/2 ✗ Branch 15 → 16 not taken. ✓ Branch 15 → 17 taken 2 times.	2	taglen <= 0)
548		✗	goto fail;
549
550			/* read content description */
551	1/2 ✓ Branch 18 → 19 taken 2 times. ✗ Branch 18 → 20 not taken.	2	if (decode_str(s, pb, encoding, &geob_data->description, &taglen) < 0 \|\|
552	1/2 ✗ Branch 19 → 20 not taken. ✓ Branch 19 → 21 taken 2 times.	2	taglen < 0)
553		✗	goto fail;
554
555	1/2 ✓ Branch 21 → 22 taken 2 times. ✗ Branch 21 → 30 not taken.	2	if (taglen) {
556			/* save encapsulated binary data */
557		2	geob_data->data = av_malloc(taglen);
558	1/2 ✗ Branch 23 → 24 not taken. ✓ Branch 23 → 26 taken 2 times.	2	if (!geob_data->data) {
559		✗	av_log(s, AV_LOG_ERROR, "Failed to alloc %d bytes\n", taglen);
560		✗	goto fail;
561			}
562	1/2 ✗ Branch 27 → 28 not taken. ✓ Branch 27 → 29 taken 2 times.	2	if ((len = avio_read(pb, geob_data->data, taglen)) < taglen)
563		✗	av_log(s, AV_LOG_WARNING,
564			"Error reading GEOB frame, data truncated.\n");
565		2	geob_data->datasize = len;
566			} else {
567		✗	geob_data->data = NULL;
568		✗	geob_data->datasize = 0;
569			}
570
571			/* add data to the list */
572		2	new_extra->tag = "GEOB";
573		2	list_append(new_extra, extra_meta);
574
575		2	return;
576
577		✗	fail:
578		✗	av_log(s, AV_LOG_ERROR, "Error reading frame %s, skipped\n", tag);
579		✗	free_geobtag(geob_data);
580		✗	av_free(new_extra);
581		✗	return;
582			}
583
584		8	static int is_number(const char *str)
585			{
586	3/4 ✓ Branch 4 → 5 taken 32 times. ✓ Branch 4 → 6 taken 8 times. ✓ Branch 5 → 3 taken 32 times. ✗ Branch 5 → 6 not taken.	40	while (str >= '0' && str <= '9')
587		32	str++;
588		8	return !*str;
589			}
590
591		1794	static AVDictionaryEntry get_date_tag(AVDictionary m, const char *tag)
592			{
593			AVDictionaryEntry *t;
594	2/2 ✓ Branch 3 → 4 taken 8 times. ✓ Branch 3 → 8 taken 1786 times.	1794	if ((t = av_dict_get(m, tag, NULL, AV_DICT_MATCH_CASE)) &&
595	2/4 ✓ Branch 4 → 5 taken 8 times. ✗ Branch 4 → 8 not taken. ✓ Branch 6 → 7 taken 8 times. ✗ Branch 6 → 8 not taken.	8	strlen(t->value) == 4 && is_number(t->value))
596		8	return t;
597		1786	return NULL;
598			}
599
600		893	static void merge_date(AVDictionary **m)
601			{
602			AVDictionaryEntry *t;
603		893	char date[17] = { 0 }; // YYYY-MM-DD hh:mm
604
605	3/4 ✓ Branch 3 → 4 taken 887 times. ✓ Branch 3 → 7 taken 6 times. ✓ Branch 5 → 6 taken 887 times. ✗ Branch 5 → 7 not taken.	1780	if (!(t = get_date_tag(*m, "TYER")) &&
606		887	!(t = get_date_tag(*m, "TYE")))
607		887	return;
608		6	av_strlcpy(date, t->value, 5);
609		6	av_dict_set(m, "TYER", NULL, 0);
610		6	av_dict_set(m, "TYE", NULL, 0);
611
612	3/4 ✓ Branch 11 → 12 taken 4 times. ✓ Branch 11 → 15 taken 2 times. ✓ Branch 13 → 14 taken 4 times. ✗ Branch 13 → 15 not taken.	10	if (!(t = get_date_tag(*m, "TDAT")) &&
613		4	!(t = get_date_tag(*m, "TDA")))
614		4	goto finish;
615		2	snprintf(date + 4, sizeof(date) - 4, "-%.2s-%.2s", t->value + 2, t->value);
616		2	av_dict_set(m, "TDAT", NULL, 0);
617		2	av_dict_set(m, "TDA", NULL, 0);
618
619	2/4 ✓ Branch 18 → 19 taken 2 times. ✗ Branch 18 → 22 not taken. ✓ Branch 20 → 21 taken 2 times. ✗ Branch 20 → 22 not taken.	4	if (!(t = get_date_tag(*m, "TIME")) &&
620		2	!(t = get_date_tag(*m, "TIM")))
621		2	goto finish;
622		✗	snprintf(date + 10, sizeof(date) - 10,
623		✗	" %.2s:%.2s", t->value, t->value + 2);
624		✗	av_dict_set(m, "TIME", NULL, 0);
625		✗	av_dict_set(m, "TIM", NULL, 0);
626
627		6	finish:
628	1/2 ✓ Branch 24 → 25 taken 6 times. ✗ Branch 24 → 26 not taken.	6	if (date[0])
629		6	av_dict_set(m, "date", date, 0);
630			}
631
632		26	static void free_apic(void *obj)
633			{
634		26	ID3v2ExtraMetaAPIC *apic = obj;
635		26	av_buffer_unref(&apic->buf);
636		26	av_freep(&apic->description);
637		26	}
638
639		26	static void rstrip_spaces(char *buf)
640			{
641		26	size_t len = strlen(buf);
642	3/4 ✓ Branch 4 → 5 taken 10 times. ✓ Branch 4 → 6 taken 16 times. ✗ Branch 5 → 3 not taken. ✓ Branch 5 → 6 taken 10 times.	26	while (len > 0 && buf[len - 1] == ' ')
643		✗	buf[--len] = 0;
644		26	}
645
646		26	static void read_apic(AVFormatContext s, AVIOContext pb, int taglen,
647			const char tag, ExtraMetaList extra_meta, int version)
648			{
649			int enc, pic_type;
650		26	char mimetype[64] = {0};
651		26	const CodecMime *mime = ff_id3v2_mime_tags;
652		26	enum AVCodecID id = AV_CODEC_ID_NONE;
653		26	ID3v2ExtraMetaAPIC *apic = NULL;
654		26	ID3v2ExtraMeta *new_extra = NULL;
655		26	int64_t end = avio_tell(pb) + taglen;
656
657	2/6 ✓ Branch 3 → 4 taken 26 times. ✗ Branch 3 → 6 not taken. ✗ Branch 4 → 5 not taken. ✓ Branch 4 → 7 taken 26 times. ✗ Branch 5 → 6 not taken. ✗ Branch 5 → 7 not taken.	26	if (taglen <= 4 \|\| (version == 2 && taglen <= 6))
658		✗	goto fail;
659
660		26	new_extra = av_mallocz(sizeof(*new_extra));
661	1/2 ✗ Branch 8 → 9 not taken. ✓ Branch 8 → 10 taken 26 times.	26	if (!new_extra)
662		✗	goto fail;
663
664		26	apic = &new_extra->data.apic;
665
666		26	enc = avio_r8(pb);
667		26	taglen--;
668
669			/* mimetype */
670	1/2 ✓ Branch 11 → 12 taken 26 times. ✗ Branch 11 → 17 not taken.	26	if (version != 2) {
671		26	int ret = avio_get_str(pb, taglen, mimetype, sizeof(mimetype));
672	2/4 ✓ Branch 13 → 14 taken 26 times. ✗ Branch 13 → 15 not taken. ✗ Branch 14 → 15 not taken. ✓ Branch 14 → 16 taken 26 times.	26	if (ret < 0 \|\| ret >= taglen)
673		✗	goto fail;
674		26	taglen -= ret;
675			} else {
676	0/2 ✗ Branch 18 → 19 not taken. ✗ Branch 18 → 20 not taken.	✗	if (avio_read(pb, mimetype, 3) < 0)
677		✗	goto fail;
678
679		✗	mimetype[3] = 0;
680		✗	taglen -= 3;
681			}
682
683	1/2 ✓ Branch 26 → 22 taken 92 times. ✗ Branch 26 → 27 not taken.	92	while (mime->id != AV_CODEC_ID_NONE) {
684	2/2 ✓ Branch 23 → 24 taken 26 times. ✓ Branch 23 → 25 taken 66 times.	92	if (!av_strncasecmp(mime->str, mimetype, sizeof(mimetype))) {
685		26	id = mime->id;
686		26	break;
687			}
688		66	mime++;
689			}
690	1/2 ✗ Branch 27 → 28 not taken. ✓ Branch 27 → 30 taken 26 times.	26	if (id == AV_CODEC_ID_NONE) {
691		✗	av_log(s, AV_LOG_WARNING,
692			"Unknown attached picture mimetype: %s, skipping.\n", mimetype);
693		✗	goto fail;
694			}
695		26	apic->id = id;
696
697			/* picture type */
698		26	pic_type = avio_r8(pb);
699		26	taglen--;
700	2/4 ✓ Branch 31 → 32 taken 26 times. ✗ Branch 31 → 33 not taken. ✗ Branch 32 → 33 not taken. ✓ Branch 32 → 35 taken 26 times.	26	if (pic_type < 0 \|\| pic_type >= FF_ARRAY_ELEMS(ff_id3v2_picture_types)) {
701		✗	av_log(s, AV_LOG_WARNING, "Unknown attached picture type %d.\n",
702			pic_type);
703		✗	pic_type = 0;
704			}
705		26	apic->type = ff_id3v2_picture_types[pic_type];
706
707			/* description and picture data */
708	1/2 ✗ Branch 36 → 37 not taken. ✓ Branch 36 → 39 taken 26 times.	26	if (decode_str(s, pb, enc, &apic->description, &taglen) < 0) {
709		✗	av_log(s, AV_LOG_ERROR,
710			"Error decoding attached picture description.\n");
711		✗	goto fail;
712			}
713
714		26	apic->buf = av_buffer_alloc(taglen + AV_INPUT_BUFFER_PADDING_SIZE);
715	3/6 ✓ Branch 40 → 41 taken 26 times. ✗ Branch 40 → 44 not taken. ✓ Branch 41 → 42 taken 26 times. ✗ Branch 41 → 44 not taken. ✗ Branch 43 → 44 not taken. ✓ Branch 43 → 45 taken 26 times.	26	if (!apic->buf \|\| !taglen \|\| avio_read(pb, apic->buf->data, taglen) != taglen)
716		✗	goto fail;
717		26	memset(apic->buf->data + taglen, 0, AV_INPUT_BUFFER_PADDING_SIZE);
718
719		26	new_extra->tag = "APIC";
720
721			// The description must be unique, and some ID3v2 tag writers add spaces
722			// to write several APIC entries with the same description.
723		26	rstrip_spaces(apic->description);
724		26	list_append(new_extra, extra_meta);
725
726		26	return;
727
728		✗	fail:
729	0/2 ✗ Branch 47 → 48 not taken. ✗ Branch 47 → 49 not taken.	✗	if (apic)
730		✗	free_apic(apic);
731		✗	av_freep(&new_extra);
732		✗	avio_seek(pb, end, SEEK_SET);
733			}
734
735		32	static void free_chapter(void *obj)
736			{
737		32	ID3v2ExtraMetaCHAP *chap = obj;
738		32	av_freep(&chap->element_id);
739		32	av_dict_free(&chap->meta);
740		32	}
741
742		32	static void read_chapter(AVFormatContext s, AVIOContext pb, int len,
743			const char ttag, ExtraMetaList extra_meta, int version)
744			{
745			char tag[5];
746		32	ID3v2ExtraMeta *new_extra = NULL;
747		32	ID3v2ExtraMetaCHAP *chap = NULL;
748
749		32	new_extra = av_mallocz(sizeof(*new_extra));
750	1/2 ✗ Branch 3 → 4 not taken. ✓ Branch 3 → 5 taken 32 times.	32	if (!new_extra)
751		32	return;
752
753		32	chap = &new_extra->data.chap;
754
755	1/2 ✗ Branch 6 → 7 not taken. ✓ Branch 6 → 8 taken 32 times.	32	if (decode_str(s, pb, 0, &chap->element_id, &len) < 0)
756		✗	goto fail;
757
758	1/2 ✗ Branch 8 → 9 not taken. ✓ Branch 8 → 10 taken 32 times.	32	if (len < 16)
759		✗	goto fail;
760
761		32	chap->start = avio_rb32(pb);
762		32	chap->end = avio_rb32(pb);
763		32	avio_skip(pb, 8);
764
765		32	len -= 16;
766	2/2 ✓ Branch 33 → 14 taken 42 times. ✓ Branch 33 → 34 taken 30 times.	72	while (len > 10) {
767			unsigned tlen;
768			int64_t start, consumed;
769
770	1/2 ✗ Branch 15 → 16 not taken. ✓ Branch 15 → 17 taken 42 times.	42	if (avio_read(pb, tag, 4) < 4)
771		✗	break;
772		42	tag[4] = 0;
773			/* Embedded frames use the same header as the surrounding tag.
774			* 2.2 has no CHAP. 2.3 sizes are plain; 2.4 sizes are synchsafe. */
775	2/2 ✓ Branch 17 → 18 taken 35 times. ✓ Branch 17 → 19 taken 7 times.	42	if (version == 4)
776		35	tlen = get_size(pb, 4);
777			else
778		7	tlen = avio_rb32(pb);
779		42	avio_skip(pb, 2);
780		42	len -= 10;
781	2/2 ✓ Branch 21 → 22 taken 2 times. ✓ Branch 21 → 24 taken 40 times.	42	if (tlen > (unsigned)len) {
782		2	av_log(s, AV_LOG_WARNING,
783			"Invalid ID3v2 chapter subframe %.4s size %u, keeping the chapter\n",
784			tag, tlen);
785		2	break;
786			}
787		40	start = avio_tell(pb);
788	1/2 ✓ Branch 25 → 26 taken 40 times. ✗ Branch 25 → 27 not taken.	40	if (tag[0] == 'T')
789		40	read_ttag(s, pb, tlen, &chap->meta, tag);
790		40	consumed = avio_tell(pb) - start;
791	3/6 ✓ Branch 28 → 29 taken 40 times. ✗ Branch 28 → 34 not taken. ✓ Branch 29 → 30 taken 40 times. ✗ Branch 29 → 34 not taken. ✓ Branch 31 → 32 taken 40 times. ✗ Branch 31 → 34 not taken.	80	if (consumed < 0 \|\| consumed > tlen \|\|
792		40	avio_skip(pb, tlen - consumed) < 0)
793			break;
794		40	len -= tlen;
795			}
796
797		32	ff_metadata_conv(&chap->meta, NULL, ff_id3v2_34_metadata_conv);
798		32	ff_metadata_conv(&chap->meta, NULL, ff_id3v2_4_metadata_conv);
799
800		32	new_extra->tag = "CHAP";
801		32	list_append(new_extra, extra_meta);
802
803		32	return;
804
805		✗	fail:
806		✗	free_chapter(chap);
807		✗	av_freep(&new_extra);
808			}
809
810		54	static void free_priv(void *obj)
811			{
812		54	ID3v2ExtraMetaPRIV *priv = obj;
813		54	av_freep(&priv->owner);
814		54	av_freep(&priv->data);
815		54	}
816
817		54	static void read_priv(AVFormatContext s, AVIOContext pb, int taglen,
818			const char tag, ExtraMetaList extra_meta, int version)
819			{
820			ID3v2ExtraMeta *meta;
821			ID3v2ExtraMetaPRIV *priv;
822
823		54	meta = av_mallocz(sizeof(*meta));
824	1/2 ✗ Branch 3 → 4 not taken. ✓ Branch 3 → 5 taken 54 times.	54	if (!meta)
825		54	return;
826
827		54	priv = &meta->data.priv;
828
829	1/2 ✗ Branch 6 → 7 not taken. ✓ Branch 6 → 8 taken 54 times.	54	if (decode_str(s, pb, ID3v2_ENCODING_ISO8859, &priv->owner, &taglen) < 0)
830		✗	goto fail;
831
832		54	priv->data = av_malloc(taglen);
833	1/2 ✗ Branch 9 → 10 not taken. ✓ Branch 9 → 11 taken 54 times.	54	if (!priv->data)
834		✗	goto fail;
835
836		54	priv->datasize = taglen;
837
838	1/2 ✗ Branch 12 → 13 not taken. ✓ Branch 12 → 14 taken 54 times.	54	if (avio_read(pb, priv->data, priv->datasize) != priv->datasize)
839		✗	goto fail;
840
841		54	meta->tag = "PRIV";
842		54	list_append(meta, extra_meta);
843
844		54	return;
845
846		✗	fail:
847		✗	free_priv(priv);
848		✗	av_freep(&meta);
849			}
850
851			typedef struct ID3v2EMFunc {
852			const char *tag3;
853			const char *tag4;
854			void (read)(AVFormatContext s, AVIOContext *pb, int taglen,
855			const char tag, ExtraMetaList extra_meta,
856			int version);
857			void (free)(void obj);
858			} ID3v2EMFunc;
859
860			static const ID3v2EMFunc id3v2_extra_meta_funcs[] = {
861			{ "GEO", "GEOB", read_geobtag, free_geobtag },
862			{ "PIC", "APIC", read_apic, free_apic },
863			{ "CHAP","CHAP", read_chapter, free_chapter },
864			{ "PRIV","PRIV", read_priv, free_priv },
865			{ NULL }
866			};
867
868			/**
869			* Get the corresponding ID3v2EMFunc struct for a tag.
870			* @param isv34 Determines if v2.2 or v2.3/4 strings are used
871			* @return A pointer to the ID3v2EMFunc struct if found, NULL otherwise.
872			*/
873		241	static const ID3v2EMFunc get_extra_meta_func(const char tag, int isv34)
874			{
875		241	int i = 0;
876	2/2 ✓ Branch 13 → 3 taken 784 times. ✓ Branch 13 → 14 taken 13 times.	797	while (id3v2_extra_meta_funcs[i].tag3) {
877	5/8 ✓ Branch 3 → 4 taken 784 times. ✗ Branch 3 → 12 not taken. ✓ Branch 4 → 5 taken 784 times. ✗ Branch 4 → 6 not taken. ✓ Branch 7 → 8 taken 784 times. ✗ Branch 7 → 9 not taken. ✓ Branch 10 → 11 taken 228 times. ✓ Branch 10 → 12 taken 556 times.	784	if (tag && !memcmp(tag,
878			(isv34 ? id3v2_extra_meta_funcs[i].tag4 :
879			id3v2_extra_meta_funcs[i].tag3),
880			(isv34 ? 4 : 3)))
881		228	return &id3v2_extra_meta_funcs[i];
882		556	i++;
883			}
884		13	return NULL;
885			}
886
887		139	static void id3v2_parse(AVIOContext pb, AVDictionary *metadata,
888			AVFormatContext *s, int len, uint8_t version,
889			uint8_t flags, ExtraMetaList *extra_meta)
890			{
891			int isv34, unsync;
892			unsigned tlen;
893			char tag[5];
894		139	int64_t next, end = avio_tell(pb);
895			int taghdrlen;
896		139	const char *reason = NULL;
897			FFIOContext pb_local;
898			AVIOContext *pbx;
899		139	unsigned char *buffer = NULL;
900		139	int buffer_size = 0;
901		139	const ID3v2EMFunc *extra_func = NULL;
902		139	unsigned char *uncompressed_buffer = NULL;
903		139	av_unused int uncompressed_buffer_size = 0;
904			const char *comm_frame;
905
906	1/2 ✗ Branch 3 → 4 not taken. ✓ Branch 3 → 5 taken 139 times.	139	if (end > INT64_MAX - len - 10)
907		✗	return;
908		139	end += len;
909
910		139	av_log(s, AV_LOG_DEBUG, "id3v2 ver:%d flags:%02X len:%d\n", version, flags, len);
911
912	2/3 ✓ Branch 6 → 7 taken 18 times. ✓ Branch 6 → 10 taken 121 times. ✗ Branch 6 → 11 not taken.	139	switch (version) {
913		18	case 2:
914	1/2 ✗ Branch 7 → 8 not taken. ✓ Branch 7 → 9 taken 18 times.	18	if (flags & 0x40) {
915		✗	reason = "compression";
916		✗	goto error;
917			}
918		18	isv34 = 0;
919		18	taghdrlen = 6;
920		18	comm_frame = "COM";
921		18	break;
922
923		121	case 3:
924			case 4:
925		121	isv34 = 1;
926		121	taghdrlen = 10;
927		121	comm_frame = "COMM";
928		121	break;
929
930		✗	default:
931		✗	reason = "version";
932		✗	goto error;
933			}
934
935		139	unsync = flags & 0x80;
936
937	3/4 ✓ Branch 12 → 13 taken 121 times. ✓ Branch 12 → 22 taken 18 times. ✗ Branch 13 → 14 not taken. ✓ Branch 13 → 22 taken 121 times.	139	if (isv34 && flags & 0x40) { /* Extended header present, just skip over it */
938		✗	int extlen = get_size(pb, 4);
939	0/2 ✗ Branch 15 → 16 not taken. ✗ Branch 15 → 17 not taken.	✗	if (version == 4)
940			/* In v2.4 the length includes the length field we just read. */
941		✗	extlen -= 4;
942
943	0/2 ✗ Branch 17 → 18 not taken. ✗ Branch 17 → 19 not taken.	✗	if (extlen < 0) {
944		✗	reason = "invalid extended header length";
945		✗	goto error;
946			}
947		✗	avio_skip(pb, extlen);
948		✗	len -= extlen + 4;
949	0/2 ✗ Branch 20 → 21 not taken. ✗ Branch 20 → 22 not taken.	✗	if (len < 0) {
950		✗	reason = "extended header too long.";
951		✗	goto error;
952			}
953			}
954
955	2/2 ✓ Branch 164 → 23 taken 8864 times. ✓ Branch 164 → 165 taken 138 times.	9002	while (len >= taghdrlen) {
956		8864	unsigned int tflags = 0;
957		8864	int tunsync = 0;
958		8864	int tcomp = 0;
959		8864	int tencr = 0;
960			av_unused unsigned long dlen;
961
962	2/2 ✓ Branch 23 → 24 taken 3374 times. ✓ Branch 23 → 51 taken 5490 times.	8864	if (isv34) {
963	2/2 ✓ Branch 25 → 26 taken 1 time. ✓ Branch 25 → 27 taken 3373 times.	3374	if (avio_read(pb, tag, 4) < 4)
964		1	break;
965		3373	tag[4] = 0;
966	2/2 ✓ Branch 27 → 28 taken 1323 times. ✓ Branch 27 → 29 taken 2050 times.	3373	if (version == 3) {
967		1323	tlen = avio_rb32(pb);
968			} else {
969			/* some encoders incorrectly uses v3 sizes instead of syncsafe ones
970			* so check the next tag to see which one to use */
971		2050	tlen = avio_rb32(pb);
972	2/2 ✓ Branch 30 → 31 taken 29 times. ✓ Branch 30 → 49 taken 2021 times.	2050	if (tlen > 0x7f) {
973		29	unsigned int rem = len - taghdrlen;
974
975	2/2 ✓ Branch 31 → 32 taken 9 times. ✓ Branch 31 → 46 taken 20 times.	29	if (tlen <= rem) {
976		9	int64_t cur = avio_tell(pb);
977		9	unsigned int ss_tlen = size_to_syncsafe(tlen);
978
979	1/2 ✗ Branch 35 → 36 not taken. ✓ Branch 35 → 37 taken 9 times.	9	if (ffio_ensure_seekback(pb, 2 /* tflags */ +
980		9	FFMIN(rem, tlen + ID3v2_HEADER_SIZE)))
981		✗	break;
982
983	4/4 ✓ Branch 38 → 39 taken 7 times. ✓ Branch 38 → 42 taken 2 times. ✓ Branch 40 → 41 taken 6 times. ✓ Branch 40 → 42 taken 1 time.	16	if (is_syncsafe(tlen) &&
984		7	check_tag(pb, cur + 2 + ss_tlen, rem - ss_tlen) == 1)
985		6	tlen = ss_tlen;
986	1/2 ✗ Branch 43 → 44 not taken. ✓ Branch 43 → 45 taken 3 times.	3	else if (check_tag(pb, cur + 2 + tlen, rem - tlen) != 1)
987		✗	break;
988		9	avio_seek(pb, cur, SEEK_SET);
989	1/2 ✓ Branch 47 → 48 taken 20 times. ✗ Branch 47 → 49 not taken.	20	} else if (is_syncsafe(tlen))
990		20	tlen = size_to_syncsafe(tlen);
991			}
992			}
993		3373	tflags = avio_rb16(pb);
994		3373	tunsync = tflags & ID3v2_FLAG_UNSYNCH;
995			} else {
996	1/2 ✗ Branch 52 → 53 not taken. ✓ Branch 52 → 54 taken 5490 times.	5490	if (avio_read(pb, tag, 3) < 3)
997		✗	break;
998		5490	tag[3] = 0;
999		5490	tlen = avio_rb24(pb);
1000			}
1001	1/2 ✗ Branch 55 → 56 not taken. ✓ Branch 55 → 57 taken 8863 times.	8863	if (tlen > (1<<28))
1002		✗	break;
1003		8863	len -= taghdrlen + tlen;
1004
1005	1/2 ✗ Branch 57 → 58 not taken. ✓ Branch 57 → 59 taken 8863 times.	8863	if (len < 0)
1006		✗	break;
1007
1008		8863	next = avio_tell(pb) + tlen;
1009
1010	2/2 ✓ Branch 60 → 61 taken 8242 times. ✓ Branch 60 → 64 taken 621 times.	8863	if (!tlen) {
1011	2/2 ✓ Branch 61 → 62 taken 11 times. ✓ Branch 61 → 63 taken 8231 times.	8242	if (tag[0])
1012		11	av_log(s, AV_LOG_DEBUG, "Invalid empty frame %s, skipping.\n",
1013			tag);
1014		8242	continue;
1015			}
1016
1017	1/2 ✗ Branch 64 → 65 not taken. ✓ Branch 64 → 69 taken 621 times.	621	if (tflags & ID3v2_FLAG_DATALEN) {
1018	0/2 ✗ Branch 65 → 66 not taken. ✗ Branch 65 → 67 not taken.	✗	if (tlen < 4)
1019		✗	break;
1020		✗	dlen = avio_rb32(pb);
1021		✗	tlen -= 4;
1022			} else
1023		621	dlen = tlen;
1024
1025		621	tcomp = tflags & ID3v2_FLAG_COMPRESSION;
1026		621	tencr = tflags & ID3v2_FLAG_ENCRYPTION;
1027
1028			/* skip encrypted tags and, if no zlib, compressed tags */
1029	1/2 ✗ Branch 70 → 71 not taken. ✓ Branch 70 → 78 taken 621 times.	621	if (tencr \|\| (!CONFIG_ZLIB && tcomp)) {
1030			const char *type;
1031	0/2 ✗ Branch 71 → 72 not taken. ✗ Branch 71 → 73 not taken.	✗	if (!tcomp)
1032		✗	type = "encrypted";
1033	0/2 ✗ Branch 73 → 74 not taken. ✗ Branch 73 → 75 not taken.	✗	else if (!tencr)
1034		✗	type = "compressed";
1035			else
1036		✗	type = "encrypted and compressed";
1037
1038		✗	av_log(s, AV_LOG_WARNING, "Skipping %s ID3v2 frame %s.\n", type, tag);
1039		✗	avio_skip(pb, tlen);
1040			/* check for text tag or supported special meta tag */
1041	2/2 ✓ Branch 78 → 79 taken 240 times. ✓ Branch 78 → 84 taken 381 times.	621	} else if (tag[0] == 'T' \|\|
1042	2/2 ✓ Branch 79 → 80 taken 231 times. ✓ Branch 79 → 84 taken 9 times.	240	!memcmp(tag, "USLT", 4) \|\|
1043	3/4 ✓ Branch 80 → 81 taken 127 times. ✓ Branch 80 → 84 taken 104 times. ✓ Branch 81 → 82 taken 127 times. ✗ Branch 81 → 153 not taken.	231	!strcmp(tag, comm_frame) \|\|
1044	2/2 ✓ Branch 83 → 84 taken 114 times. ✓ Branch 83 → 153 taken 13 times.	127	(extra_meta &&
1045		127	(extra_func = get_extra_meta_func(tag, isv34)))) {
1046		608	pbx = pb;
1047
1048	4/6 ✓ Branch 84 → 85 taken 601 times. ✓ Branch 84 → 87 taken 7 times. ✓ Branch 85 → 86 taken 601 times. ✗ Branch 85 → 87 not taken. ✗ Branch 86 → 87 not taken. ✓ Branch 86 → 91 taken 601 times.	608	if (unsync \|\| tunsync \|\| tcomp) {
1049		7	av_fast_malloc(&buffer, &buffer_size, tlen);
1050	1/2 ✗ Branch 88 → 89 not taken. ✓ Branch 88 → 91 taken 7 times.	7	if (!buffer) {
1051		✗	av_log(s, AV_LOG_ERROR, "Failed to alloc %d bytes\n", tlen);
1052		✗	goto seek;
1053			}
1054			}
1055	3/4 ✓ Branch 91 → 92 taken 601 times. ✓ Branch 91 → 93 taken 7 times. ✗ Branch 92 → 93 not taken. ✓ Branch 92 → 106 taken 601 times.	608	if (unsync \|\| tunsync) {
1056		7	uint8_t *b = buffer;
1057		7	uint8_t *t = buffer;
1058
1059	1/2 ✗ Branch 94 → 95 not taken. ✓ Branch 94 → 97 taken 7 times.	7	if (avio_read(pb, buffer, tlen) != tlen) {
1060		✗	av_log(s, AV_LOG_ERROR, "Failed to read tag data\n");
1061		✗	goto seek;
1062			}
1063
1064		7	const uint8_t *const buf_end = t + tlen;
1065	2/2 ✓ Branch 103 → 98 taken 111 times. ✓ Branch 103 → 104 taken 7 times.	118	while (t != buf_end) {
1066		111	b++ = t++;
1067	3/6 ✓ Branch 98 → 99 taken 104 times. ✓ Branch 98 → 102 taken 7 times. ✗ Branch 99 → 100 not taken. ✓ Branch 99 → 102 taken 104 times. ✗ Branch 100 → 101 not taken. ✗ Branch 100 → 102 not taken.	111	if (t != buf_end && t[-1] == 0xff && !t[0])
1068		✗	t++;
1069			}
1070
1071		7	ffio_init_read_context(&pb_local, buffer, b - buffer);
1072		7	tlen = b - buffer;
1073		7	pbx = &pb_local.pub; // read from sync buffer
1074			}
1075
1076			#if CONFIG_ZLIB
1077	1/2 ✗ Branch 106 → 107 not taken. ✓ Branch 106 → 129 taken 608 times.	608	if (tcomp) {
1078			int err;
1079
1080		✗	av_log(s, AV_LOG_DEBUG, "Compressed frame %s tlen=%d dlen=%ld\n", tag, tlen, dlen);
1081
1082	0/2 ✗ Branch 108 → 109 not taken. ✗ Branch 108 → 110 not taken.	✗	if (tlen <= 0)
1083		✗	goto seek;
1084	0/2 ✗ Branch 110 → 111 not taken. ✗ Branch 110 → 112 not taken.	✗	if (dlen / 32768 > tlen)
1085		✗	goto seek;
1086
1087		✗	av_fast_malloc(&uncompressed_buffer, &uncompressed_buffer_size, dlen);
1088	0/2 ✗ Branch 113 → 114 not taken. ✗ Branch 113 → 116 not taken.	✗	if (!uncompressed_buffer) {
1089		✗	av_log(s, AV_LOG_ERROR, "Failed to alloc %ld bytes\n", dlen);
1090		✗	goto seek;
1091			}
1092
1093	0/4 ✗ Branch 116 → 117 not taken. ✗ Branch 116 → 123 not taken. ✗ Branch 117 → 118 not taken. ✗ Branch 117 → 123 not taken.	✗	if (!(unsync \|\| tunsync)) {
1094		✗	err = avio_read(pb, buffer, tlen);
1095	0/2 ✗ Branch 119 → 120 not taken. ✗ Branch 119 → 122 not taken.	✗	if (err < 0) {
1096		✗	av_log(s, AV_LOG_ERROR, "Failed to read compressed tag\n");
1097		✗	goto seek;
1098			}
1099		✗	tlen = err;
1100			}
1101
1102		✗	err = uncompress(uncompressed_buffer, &dlen, buffer, tlen);
1103	0/2 ✗ Branch 124 → 125 not taken. ✗ Branch 124 → 127 not taken.	✗	if (err != Z_OK) {
1104		✗	av_log(s, AV_LOG_ERROR, "Failed to uncompress tag: %d\n", err);
1105		✗	goto seek;
1106			}
1107		✗	ffio_init_read_context(&pb_local, uncompressed_buffer, dlen);
1108		✗	tlen = dlen;
1109		✗	pbx = &pb_local.pub; // read from sync buffer
1110			}
1111			#endif
1112	4/4 ✓ Branch 129 → 130 taken 597 times. ✓ Branch 129 → 145 taken 11 times. ✓ Branch 130 → 131 taken 41 times. ✓ Branch 130 → 145 taken 556 times.	608	if (s && (s->debug & AV_FDEBUG_ID3V2)) {
1113		41	int64_t pos = avio_tell(pbx);
1114		41	uint8_t *buf = av_malloc(tlen + 3U);
1115	1/2 ✓ Branch 133 → 134 taken 41 times. ✗ Branch 133 → 145 not taken.	41	if (buf) {
1116		41	int n = avio_read(pbx, buf + 1, tlen);
1117	1/2 ✓ Branch 135 → 136 taken 41 times. ✗ Branch 135 → 143 not taken.	41	if (n >= 0) {
1118		41	buf[0] = '\|';
1119	2/2 ✓ Branch 141 → 137 taken 567 times. ✓ Branch 141 → 142 taken 41 times.	608	for (unsigned i = 1; i <= n; i++)
1120	3/4 ✓ Branch 137 → 138 taken 461 times. ✓ Branch 137 → 139 taken 106 times. ✗ Branch 138 → 139 not taken. ✓ Branch 138 → 140 taken 461 times.	567	if (!(buf[i] >= 0x20 && buf[i] < 0x7f))
1121		106	buf[i] = '.';
1122		41	buf[n + 1] = '\|';
1123		41	buf[n + 2] = '\0';
1124		41	av_log(s, AV_LOG_INFO, "ID3v2 frame %.4s (%d bytes):%s\n",
1125			tag, tlen, buf);
1126			}
1127		41	av_free(buf);
1128		41	avio_seek(pbx, pos, SEEK_SET);
1129			}
1130			}
1131	2/2 ✓ Branch 145 → 146 taken 381 times. ✓ Branch 145 → 147 taken 227 times.	608	if (tag[0] == 'T')
1132			/* parse text tag */
1133		381	read_ttag(s, pbx, tlen, metadata, tag);
1134	2/2 ✓ Branch 147 → 148 taken 9 times. ✓ Branch 147 → 149 taken 218 times.	227	else if (!memcmp(tag, "USLT", 4))
1135		9	read_lang_descr_tag(s, pbx, "lyrics", tlen, metadata);
1136	2/2 ✓ Branch 149 → 150 taken 104 times. ✓ Branch 149 → 151 taken 114 times.	218	else if (!strcmp(tag, comm_frame))
1137		104	read_lang_descr_tag(s, pbx, "comment", tlen, metadata);
1138			else
1139			/* parse special meta tag */
1140		114	extra_func->read(s, pbx, tlen, tag, extra_meta, version);
1141	1/2 ✗ Branch 153 → 154 not taken. ✓ Branch 153 → 157 taken 13 times.	13	} else if (!tag[0]) {
1142	0/2 ✗ Branch 154 → 155 not taken. ✗ Branch 154 → 156 not taken.	✗	if (tag[1])
1143		✗	av_log(s, AV_LOG_WARNING, "invalid frame id, assuming padding\n");
1144		✗	avio_skip(pb, tlen);
1145		✗	break;
1146			}
1147			/* Skip to end of tag */
1148		13	seek:
1149		621	avio_seek(pb, next, SEEK_SET);
1150			}
1151
1152			/* Footer preset, always 10 bytes, skip over it */
1153	3/4 ✓ Branch 165 → 166 taken 44 times. ✓ Branch 165 → 167 taken 95 times. ✓ Branch 167 → 168 taken 95 times. ✗ Branch 167 → 169 not taken.	139	if (version == 4 && flags & 0x10)
1154		✗	end += 10;
1155
1156		139	error:
1157	1/2 ✗ Branch 170 → 171 not taken. ✓ Branch 170 → 172 taken 139 times.	139	if (reason)
1158		✗	av_log(s, AV_LOG_INFO, "ID3v2.%d tag skipped, cannot handle %s\n",
1159			version, reason);
1160		139	avio_seek(pb, end, SEEK_SET);
1161		139	av_free(buffer);
1162		139	av_free(uncompressed_buffer);
1163		139	return;
1164			}
1165
1166		893	static void id3v2_read_internal(AVIOContext pb, AVDictionary *metadata,
1167			AVFormatContext s, const char magic,
1168			ID3v2ExtraMeta **extra_metap, int64_t max_search_size)
1169			{
1170			int len, ret;
1171			uint8_t buf[ID3v2_HEADER_SIZE];
1172		893	ExtraMetaList extra_meta = { NULL };
1173			int found_header;
1174			int64_t start, off;
1175
1176	1/2 ✓ Branch 2 → 3 taken 893 times. ✗ Branch 2 → 4 not taken.	893	if (extra_metap)
1177		893	*extra_metap = NULL;
1178
1179	3/4 ✓ Branch 4 → 5 taken 9 times. ✓ Branch 4 → 7 taken 884 times. ✗ Branch 5 → 6 not taken. ✓ Branch 5 → 7 taken 9 times.	893	if (max_search_size && max_search_size < ID3v2_HEADER_SIZE)
1180		✗	return;
1181
1182		893	start = avio_tell(pb);
1183			do {
1184			/* save the current offset in case there's nothing to read/skip */
1185		1032	off = avio_tell(pb);
1186	4/4 ✓ Branch 9 → 10 taken 18 times. ✓ Branch 9 → 12 taken 1014 times. ✓ Branch 10 → 11 taken 9 times. ✓ Branch 10 → 12 taken 9 times.	1032	if (max_search_size && off - start >= max_search_size - ID3v2_HEADER_SIZE) {
1187		9	avio_seek(pb, off, SEEK_SET);
1188		9	break;
1189			}
1190
1191		1023	ret = ffio_ensure_seekback(pb, ID3v2_HEADER_SIZE);
1192	1/2 ✓ Branch 13 → 14 taken 1023 times. ✗ Branch 13 → 15 not taken.	1023	if (ret >= 0)
1193		1023	ret = avio_read(pb, buf, ID3v2_HEADER_SIZE);
1194	2/2 ✓ Branch 15 → 16 taken 23 times. ✓ Branch 15 → 18 taken 1000 times.	1023	if (ret != ID3v2_HEADER_SIZE) {
1195		23	avio_seek(pb, off, SEEK_SET);
1196		23	break;
1197			}
1198		1000	found_header = ff_id3v2_match(buf, magic);
1199	2/2 ✓ Branch 19 → 20 taken 139 times. ✓ Branch 19 → 24 taken 861 times.	1000	if (found_header) {
1200			/* parse ID3v2 header */
1201		139	len = ((buf[6] & 0x7f) << 21) \|
1202		139	((buf[7] & 0x7f) << 14) \|
1203		139	((buf[8] & 0x7f) << 7) \|
1204		139	(buf[9] & 0x7f);
1205	1/2 ✓ Branch 20 → 21 taken 139 times. ✗ Branch 20 → 22 not taken.	139	id3v2_parse(pb, metadata, s, len, buf[3], buf[5],
1206			extra_metap ? &extra_meta : NULL);
1207			} else {
1208		861	avio_seek(pb, off, SEEK_SET);
1209			}
1210	2/2 ✓ Branch 25 → 26 taken 139 times. ✓ Branch 25 → 28 taken 861 times.	1000	} while (found_header);
1211		893	ff_metadata_conv(metadata, NULL, ff_id3v2_34_metadata_conv);
1212		893	ff_metadata_conv(metadata, NULL, id3v2_2_metadata_conv);
1213		893	ff_metadata_conv(metadata, NULL, ff_id3v2_4_metadata_conv);
1214		893	merge_date(metadata);
1215	1/2 ✓ Branch 32 → 33 taken 893 times. ✗ Branch 32 → 34 not taken.	893	if (extra_metap)
1216		893	*extra_metap = extra_meta.head;
1217			}
1218
1219		857	void ff_id3v2_read_dict(AVFormatContext s, AVIOContext pb, AVDictionary **metadata,
1220			const char magic, ID3v2ExtraMeta *extra_meta)
1221			{
1222		857	id3v2_read_internal(pb, metadata, s, magic, extra_meta, 0);
1223		857	}
1224
1225		36	void ff_id3v2_read(AVFormatContext s, const char magic,
1226			ID3v2ExtraMeta **extra_meta, unsigned int max_search_size)
1227			{
1228		36	id3v2_read_internal(s->pb, &s->metadata, s, magic, extra_meta, max_search_size);
1229		36	}
1230
1231		137	void ff_id3v2_free_extra_meta(ID3v2ExtraMeta **extra_meta)
1232			{
1233		137	ID3v2ExtraMeta current = extra_meta, *next;
1234			const ID3v2EMFunc *extra_func;
1235
1236	2/2 ✓ Branch 8 → 3 taken 114 times. ✓ Branch 8 → 9 taken 137 times.	251	while (current) {
1237	1/2 ✓ Branch 4 → 5 taken 114 times. ✗ Branch 4 → 6 not taken.	114	if ((extra_func = get_extra_meta_func(current->tag, 1)))
1238		114	extra_func->free(&current->data);
1239		114	next = current->next;
1240		114	av_freep(&current);
1241		114	current = next;
1242			}
1243
1244		137	*extra_meta = NULL;
1245		137	}
1246
1247		46	int ff_id3v2_parse_apic(AVFormatContext s, ID3v2ExtraMeta extra_meta)
1248			{
1249			ID3v2ExtraMeta *cur;
1250
1251	2/2 ✓ Branch 14 → 3 taken 85 times. ✓ Branch 14 → 15 taken 46 times.	131	for (cur = extra_meta; cur; cur = cur->next) {
1252			ID3v2ExtraMetaAPIC *apic;
1253			AVStream *st;
1254			int ret;
1255
1256	2/2 ✓ Branch 3 → 4 taken 59 times. ✓ Branch 3 → 5 taken 26 times.	85	if (strcmp(cur->tag, "APIC"))
1257		59	continue;
1258		26	apic = &cur->data.apic;
1259
1260		26	ret = ff_add_attached_pic(s, NULL, NULL, &apic->buf, 0);
1261	1/2 ✗ Branch 6 → 7 not taken. ✓ Branch 6 → 8 taken 26 times.	26	if (ret < 0)
1262		✗	return ret;
1263		26	st = s->streams[s->nb_streams - 1];
1264		26	st->codecpar->codec_id = apic->id;
1265
1266	2/2 ✓ Branch 8 → 9 taken 5 times. ✓ Branch 8 → 10 taken 21 times.	26	if (AV_RB64(st->attached_pic.data) == PNGSIG)
1267		5	st->codecpar->codec_id = AV_CODEC_ID_PNG;
1268
1269	2/2 ✓ Branch 10 → 11 taken 10 times. ✓ Branch 10 → 12 taken 16 times.	26	if (apic->description[0])
1270		10	av_dict_set(&st->metadata, "title", apic->description, 0);
1271
1272		26	av_dict_set(&st->metadata, "comment", apic->type, 0);
1273			}
1274
1275		46	return 0;
1276			}
1277
1278		64	int ff_id3v2_parse_chapters(AVFormatContext s, ID3v2ExtraMeta cur)
1279			{
1280		64	AVRational time_base = {1, 1000};
1281			int ret;
1282
1283	2/2 ✓ Branch 12 → 3 taken 111 times. ✓ Branch 12 → 13 taken 64 times.	175	for (unsigned i = 0; cur; cur = cur->next) {
1284			ID3v2ExtraMetaCHAP *chap;
1285			AVChapter *chapter;
1286
1287	2/2 ✓ Branch 3 → 4 taken 79 times. ✓ Branch 3 → 5 taken 32 times.	111	if (strcmp(cur->tag, "CHAP"))
1288		79	continue;
1289
1290		32	chap = &cur->data.chap;
1291		32	chapter = avpriv_new_chapter(s, i++, time_base, chap->start,
1292		32	chap->end, chap->element_id);
1293	1/2 ✗ Branch 6 → 7 not taken. ✓ Branch 6 → 8 taken 32 times.	32	if (!chapter)
1294		✗	continue;
1295
1296	1/2 ✗ Branch 9 → 10 not taken. ✓ Branch 9 → 11 taken 32 times.	32	if ((ret = av_dict_copy(&chapter->metadata, chap->meta, 0)) < 0)
1297		✗	return ret;
1298			}
1299
1300		64	return 0;
1301			}
1302
1303		48	int ff_id3v2_parse_priv_dict(AVDictionary *metadata, ID3v2ExtraMeta extra_meta)
1304			{
1305			ID3v2ExtraMeta *cur;
1306		48	int dict_flags = AV_DICT_DONT_OVERWRITE \| AV_DICT_DONT_STRDUP_KEY \| AV_DICT_DONT_STRDUP_VAL;
1307
1308	2/2 ✓ Branch 26 → 3 taken 65 times. ✓ Branch 26 → 27 taken 48 times.	113	for (cur = extra_meta; cur; cur = cur->next) {
1309	2/2 ✓ Branch 3 → 4 taken 52 times. ✓ Branch 3 → 25 taken 13 times.	65	if (!strcmp(cur->tag, "PRIV")) {
1310		52	ID3v2ExtraMetaPRIV *priv = &cur->data.priv;
1311			AVBPrint bprint;
1312			char escaped, key;
1313			int i, ret;
1314
1315	1/2 ✗ Branch 5 → 6 not taken. ✓ Branch 5 → 7 taken 52 times.	52	if ((key = av_asprintf(ID3v2_PRIV_METADATA_PREFIX "%s", priv->owner)) == NULL) {
1316		✗	return AVERROR(ENOMEM);
1317			}
1318
1319		52	av_bprint_init(&bprint, priv->datasize + 1, AV_BPRINT_SIZE_UNLIMITED);
1320
1321	2/2 ✓ Branch 15 → 9 taken 322 times. ✓ Branch 15 → 16 taken 52 times.	374	for (i = 0; i < priv->datasize; i++) {
1322	5/6 ✓ Branch 9 → 10 taken 225 times. ✓ Branch 9 → 12 taken 97 times. ✓ Branch 10 → 11 taken 192 times. ✓ Branch 10 → 12 taken 33 times. ✗ Branch 11 → 12 not taken. ✓ Branch 11 → 13 taken 192 times.	322	if (priv->data[i] < 32 \|\| priv->data[i] > 126 \|\| priv->data[i] == '\\') {
1323		130	av_bprintf(&bprint, "\\x%02x", priv->data[i]);
1324			} else {
1325		192	av_bprint_chars(&bprint, priv->data[i], 1);
1326			}
1327			}
1328
1329	1/2 ✗ Branch 17 → 18 not taken. ✓ Branch 17 → 20 taken 52 times.	52	if ((ret = av_bprint_finalize(&bprint, &escaped)) < 0) {
1330		✗	av_free(key);
1331		✗	return ret;
1332			}
1333
1334	1/2 ✗ Branch 21 → 22 not taken. ✓ Branch 21 → 23 taken 52 times.	52	if ((ret = av_dict_set(metadata, key, escaped, dict_flags)) < 0) {
1335		✗	return ret;
1336			}
1337			}
1338			}
1339
1340		48	return 0;
1341			}
1342
1343		37	int ff_id3v2_parse_priv(AVFormatContext s, ID3v2ExtraMeta extra_meta)
1344			{
1345		37	return ff_id3v2_parse_priv_dict(&s->metadata, extra_meta);
1346			}
1347