FFmpeg coverage

Line	Branch	Exec	Source
1			/*
2			* RTMP input format
3			* Copyright (c) 2009 Konstantin Shishkov
4			*
5			* This file is part of FFmpeg.
6			*
7			* FFmpeg is free software; you can redistribute it and/or
8			* modify it under the terms of the GNU Lesser General Public
9			* License as published by the Free Software Foundation; either
10			* version 2.1 of the License, or (at your option) any later version.
11			*
12			* FFmpeg is distributed in the hope that it will be useful,
13			* but WITHOUT ANY WARRANTY; without even the implied warranty of
14			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15			* Lesser General Public License for more details.
16			*
17			* You should have received a copy of the GNU Lesser General Public
18			* License along with FFmpeg; if not, write to the Free Software
19			* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20			*/
21
22			#include "libavcodec/bytestream.h"
23			#include "libavutil/attributes.h"
24			#include "libavutil/intfloat.h"
25			#include "libavutil/mem.h"
26
27			#include "rtmppkt.h"
28			#include "flv.h"
29			#include "url.h"
30
31			#define MAX_DEPTH 16 ///< arbitrary limit to prevent unbounded recursion
32
33		✗	void ff_amf_write_bool(uint8_t **dst, int val)
34			{
35		✗	bytestream_put_byte(dst, AMF_DATA_TYPE_BOOL);
36		✗	bytestream_put_byte(dst, val);
37		✗	}
38
39		✗	void ff_amf_write_number(uint8_t **dst, double val)
40			{
41		✗	bytestream_put_byte(dst, AMF_DATA_TYPE_NUMBER);
42		✗	bytestream_put_be64(dst, av_double2int(val));
43		✗	}
44
45		✗	void ff_amf_write_array_start(uint8_t **dst, uint32_t length)
46			{
47		✗	bytestream_put_byte(dst, AMF_DATA_TYPE_ARRAY);
48		✗	bytestream_put_be32(dst, length);
49		✗	}
50
51		✗	void ff_amf_write_string(uint8_t **dst, const char *str)
52			{
53		✗	bytestream_put_byte(dst, AMF_DATA_TYPE_STRING);
54		✗	bytestream_put_be16(dst, strlen(str));
55		✗	bytestream_put_buffer(dst, str, strlen(str));
56		✗	}
57
58		✗	void ff_amf_write_string2(uint8_t **dst, const char *str1, const char *str2)
59			{
60		✗	int len1 = 0, len2 = 0;
61		✗	if (str1)
62		✗	len1 = strlen(str1);
63		✗	if (str2)
64		✗	len2 = strlen(str2);
65		✗	bytestream_put_byte(dst, AMF_DATA_TYPE_STRING);
66		✗	bytestream_put_be16(dst, len1 + len2);
67		✗	bytestream_put_buffer(dst, str1, len1);
68		✗	bytestream_put_buffer(dst, str2, len2);
69		✗	}
70
71		✗	void ff_amf_write_null(uint8_t **dst)
72			{
73		✗	bytestream_put_byte(dst, AMF_DATA_TYPE_NULL);
74		✗	}
75
76		✗	void ff_amf_write_object_start(uint8_t **dst)
77			{
78		✗	bytestream_put_byte(dst, AMF_DATA_TYPE_OBJECT);
79		✗	}
80
81		✗	void ff_amf_write_field_name(uint8_t **dst, const char *str)
82			{
83		✗	bytestream_put_be16(dst, strlen(str));
84		✗	bytestream_put_buffer(dst, str, strlen(str));
85		✗	}
86
87		✗	void ff_amf_write_object_end(uint8_t **dst)
88			{
89			/* first two bytes are field name length = 0,
90			* AMF object should end with it and end marker
91			*/
92		✗	bytestream_put_be24(dst, AMF_DATA_TYPE_OBJECT_END);
93		✗	}
94
95		✗	int ff_amf_read_number(GetByteContext *bc, double *val)
96			{
97			uint64_t read;
98		✗	if (bytestream2_get_byte(bc) != AMF_DATA_TYPE_NUMBER)
99		✗	return AVERROR_INVALIDDATA;
100		✗	read = bytestream2_get_be64(bc);
101		✗	*val = av_int2double(read);
102		✗	return 0;
103			}
104
105		✗	int ff_amf_get_string(GetByteContext *bc, uint8_t *str,
106			int strsize, int *length)
107			{
108		✗	int stringlen = 0;
109			int readsize;
110		✗	stringlen = bytestream2_get_be16(bc);
111		✗	if (stringlen + 1 > strsize)
112		✗	return AVERROR(EINVAL);
113		✗	readsize = bytestream2_get_buffer(bc, str, stringlen);
114		✗	if (readsize != stringlen) {
115		✗	av_log(NULL, AV_LOG_WARNING,
116			"Unable to read as many bytes as AMF string signaled\n");
117			}
118		✗	str[readsize] = '\0';
119		✗	*length = FFMIN(stringlen, readsize);
120		✗	return 0;
121			}
122
123		✗	int ff_amf_read_string(GetByteContext *bc, uint8_t *str,
124			int strsize, int *length)
125			{
126		✗	if (bytestream2_get_byte(bc) != AMF_DATA_TYPE_STRING)
127		✗	return AVERROR_INVALIDDATA;
128		✗	return ff_amf_get_string(bc, str, strsize, length);
129			}
130
131		✗	int ff_amf_read_null(GetByteContext *bc)
132			{
133		✗	if (bytestream2_get_byte(bc) != AMF_DATA_TYPE_NULL)
134		✗	return AVERROR_INVALIDDATA;
135		✗	return 0;
136			}
137
138		✗	int ff_rtmp_check_alloc_array(RTMPPacket **prev_pkt, int *nb_prev_pkt,
139			int channel)
140			{
141			int nb_alloc;
142			RTMPPacket *ptr;
143		✗	if (channel < *nb_prev_pkt)
144		✗	return 0;
145
146		✗	nb_alloc = channel + 16;
147			// This can't use the av_reallocp family of functions, since we
148			// would need to free each element in the array before the array
149			// itself is freed.
150		✗	ptr = av_realloc_array(*prev_pkt, nb_alloc, sizeof(**prev_pkt));
151		✗	if (!ptr)
152		✗	return AVERROR(ENOMEM);
153		✗	memset(ptr + *nb_prev_pkt, 0, (nb_alloc - *nb_prev_pkt) * sizeof(*ptr));
154		✗	*prev_pkt = ptr;
155		✗	*nb_prev_pkt = nb_alloc;
156		✗	return 0;
157			}
158
159		✗	int ff_rtmp_packet_read(URLContext *h, RTMPPacket *p,
160			int chunk_size, RTMPPacket **prev_pkt, int *nb_prev_pkt)
161			{
162			uint8_t hdr;
163
164		✗	if (ffurl_read(h, &hdr, 1) != 1)
165		✗	return AVERROR(EIO);
166
167		✗	return ff_rtmp_packet_read_internal(h, p, chunk_size, prev_pkt,
168			nb_prev_pkt, hdr);
169			}
170
171		✗	static int rtmp_packet_read_one_chunk(URLContext *h, RTMPPacket *p,
172			int chunk_size, RTMPPacket **prev_pkt_ptr,
173			int *nb_prev_pkt, uint8_t hdr)
174			{
175
176			uint8_t buf[16];
177			int channel_id, timestamp, size;
178			uint32_t ts_field; // non-extended timestamp or delta field
179		✗	uint32_t extra = 0;
180			enum RTMPPacketType type;
181		✗	int written = 0;
182			int ret, toread;
183			RTMPPacket *prev_pkt;
184
185		✗	written++;
186		✗	channel_id = hdr & 0x3F;
187
188		✗	if (channel_id < 2) { //special case for channel number >= 64
189		✗	buf[1] = 0;
190		✗	if (ffurl_read_complete(h, buf, channel_id + 1) != channel_id + 1)
191		✗	return AVERROR(EIO);
192		✗	written += channel_id + 1;
193		✗	channel_id = AV_RL16(buf) + 64;
194			}
195		✗	if ((ret = ff_rtmp_check_alloc_array(prev_pkt_ptr, nb_prev_pkt,
196			channel_id)) < 0)
197		✗	return ret;
198		✗	prev_pkt = *prev_pkt_ptr;
199		✗	size = prev_pkt[channel_id].size;
200		✗	type = prev_pkt[channel_id].type;
201		✗	extra = prev_pkt[channel_id].extra;
202
203		✗	hdr >>= 6; // header size indicator
204		✗	if (hdr == RTMP_PS_ONEBYTE) {
205		✗	ts_field = prev_pkt[channel_id].ts_field;
206			} else {
207		✗	if (ffurl_read_complete(h, buf, 3) != 3)
208		✗	return AVERROR(EIO);
209		✗	written += 3;
210		✗	ts_field = AV_RB24(buf);
211		✗	if (hdr != RTMP_PS_FOURBYTES) {
212		✗	if (ffurl_read_complete(h, buf, 3) != 3)
213		✗	return AVERROR(EIO);
214		✗	written += 3;
215		✗	size = AV_RB24(buf);
216		✗	if (ffurl_read_complete(h, buf, 1) != 1)
217		✗	return AVERROR(EIO);
218		✗	written++;
219		✗	type = buf[0];
220		✗	if (hdr == RTMP_PS_TWELVEBYTES) {
221		✗	if (ffurl_read_complete(h, buf, 4) != 4)
222		✗	return AVERROR(EIO);
223		✗	written += 4;
224		✗	extra = AV_RL32(buf);
225			}
226			}
227			}
228		✗	if (ts_field == 0xFFFFFF) {
229		✗	if (ffurl_read_complete(h, buf, 4) != 4)
230		✗	return AVERROR(EIO);
231		✗	timestamp = AV_RB32(buf);
232			} else {
233		✗	timestamp = ts_field;
234			}
235		✗	if (hdr != RTMP_PS_TWELVEBYTES)
236		✗	timestamp += prev_pkt[channel_id].timestamp;
237
238		✗	if (prev_pkt[channel_id].read && size != prev_pkt[channel_id].size) {
239		✗	av_log(h, AV_LOG_ERROR, "RTMP packet size mismatch %d != %d\n",
240		✗	size, prev_pkt[channel_id].size);
241		✗	ff_rtmp_packet_destroy(&prev_pkt[channel_id]);
242		✗	prev_pkt[channel_id].read = 0;
243		✗	return AVERROR_INVALIDDATA;
244			}
245
246		✗	if (!prev_pkt[channel_id].read) {
247		✗	if ((ret = ff_rtmp_packet_create(p, channel_id, type, timestamp,
248			size)) < 0)
249		✗	return ret;
250		✗	p->read = written;
251		✗	p->offset = 0;
252		✗	prev_pkt[channel_id].ts_field = ts_field;
253		✗	prev_pkt[channel_id].timestamp = timestamp;
254			} else {
255			// previous packet in this channel hasn't completed reading
256		✗	RTMPPacket *prev = &prev_pkt[channel_id];
257		✗	p->data = prev->data;
258		✗	p->size = prev->size;
259		✗	p->channel_id = prev->channel_id;
260		✗	p->type = prev->type;
261		✗	p->ts_field = prev->ts_field;
262		✗	p->extra = prev->extra;
263		✗	p->offset = prev->offset;
264		✗	p->read = prev->read + written;
265		✗	p->timestamp = prev->timestamp;
266		✗	prev->data = NULL;
267			}
268		✗	p->extra = extra;
269			// save history
270		✗	prev_pkt[channel_id].channel_id = channel_id;
271		✗	prev_pkt[channel_id].type = type;
272		✗	prev_pkt[channel_id].size = size;
273		✗	prev_pkt[channel_id].extra = extra;
274		✗	size = size - p->offset;
275
276		✗	toread = FFMIN(size, chunk_size);
277		✗	if (ffurl_read_complete(h, p->data + p->offset, toread) != toread) {
278		✗	ff_rtmp_packet_destroy(p);
279		✗	return AVERROR(EIO);
280			}
281		✗	size -= toread;
282		✗	p->read += toread;
283		✗	p->offset += toread;
284
285		✗	if (size > 0) {
286		✗	RTMPPacket *prev = &prev_pkt[channel_id];
287		✗	prev->data = p->data;
288		✗	prev->read = p->read;
289		✗	prev->offset = p->offset;
290		✗	p->data = NULL;
291		✗	return AVERROR(EAGAIN);
292			}
293
294		✗	prev_pkt[channel_id].read = 0; // read complete; reset if needed
295		✗	return p->read;
296			}
297
298		✗	int ff_rtmp_packet_read_internal(URLContext *h, RTMPPacket *p, int chunk_size,
299			RTMPPacket **prev_pkt, int *nb_prev_pkt,
300			uint8_t hdr)
301			{
302		✗	while (1) {
303		✗	int ret = rtmp_packet_read_one_chunk(h, p, chunk_size, prev_pkt,
304			nb_prev_pkt, hdr);
305		✗	if (ret > 0 || ret != AVERROR(EAGAIN))
306		✗	return ret;
307
308		✗	if (ffurl_read(h, &hdr, 1) != 1)
309		✗	return AVERROR(EIO);
310			}
311			}
312
313		✗	int ff_rtmp_packet_write(URLContext *h, RTMPPacket *pkt,
314			int chunk_size, RTMPPacket **prev_pkt_ptr,
315			int *nb_prev_pkt)
316			{
317		✗	uint8_t pkt_hdr[18], *p = pkt_hdr;
318			int basic_hdr_size;
319		✗	int mode = RTMP_PS_TWELVEBYTES;
320		✗	int off = 0;
321		✗	int written = 0;
322			int ret;
323			RTMPPacket *prev_pkt;
324			int use_delta; // flag if using timestamp delta, not RTMP_PS_TWELVEBYTES
325			uint32_t timestamp; // full 32-bit timestamp or delta value
326
327		✗	if ((ret = ff_rtmp_check_alloc_array(prev_pkt_ptr, nb_prev_pkt,
328			pkt->channel_id)) < 0)
329		✗	return ret;
330		✗	prev_pkt = *prev_pkt_ptr;
331
332			//if channel_id = 0, this is first presentation of prev_pkt, send full hdr.
333		✗	use_delta = prev_pkt[pkt->channel_id].channel_id &&
334		✗	pkt->extra == prev_pkt[pkt->channel_id].extra &&
335		✗	pkt->timestamp >= prev_pkt[pkt->channel_id].timestamp;
336
337		✗	timestamp = pkt->timestamp;
338		✗	if (use_delta) {
339		✗	timestamp -= prev_pkt[pkt->channel_id].timestamp;
340			}
341		✗	if (timestamp >= 0xFFFFFF) {
342		✗	pkt->ts_field = 0xFFFFFF;
343			} else {
344		✗	pkt->ts_field = timestamp;
345			}
346
347		✗	if (use_delta) {
348		✗	if (pkt->type == prev_pkt[pkt->channel_id].type &&
349		✗	pkt->size == prev_pkt[pkt->channel_id].size) {
350		✗	mode = RTMP_PS_FOURBYTES;
351		✗	if (pkt->ts_field == prev_pkt[pkt->channel_id].ts_field)
352		✗	mode = RTMP_PS_ONEBYTE;
353			} else {
354		✗	mode = RTMP_PS_EIGHTBYTES;
355			}
356			}
357
358		✗	if (pkt->channel_id < 64) {
359		✗	bytestream_put_byte(&p, pkt->channel_id | (mode << 6));
360		✗	} else if (pkt->channel_id < 64 + 256) {
361		✗	bytestream_put_byte(&p, 0 | (mode << 6));
362		✗	bytestream_put_byte(&p, pkt->channel_id - 64);
363			} else {
364		✗	bytestream_put_byte(&p, 1 | (mode << 6));
365		✗	bytestream_put_le16(&p, pkt->channel_id - 64);
366			}
367		✗	basic_hdr_size = p - pkt_hdr;
368		✗	if (mode != RTMP_PS_ONEBYTE) {
369		✗	bytestream_put_be24(&p, pkt->ts_field);
370		✗	if (mode != RTMP_PS_FOURBYTES) {
371		✗	bytestream_put_be24(&p, pkt->size);
372		✗	bytestream_put_byte(&p, pkt->type);
373		✗	if (mode == RTMP_PS_TWELVEBYTES)
374		✗	bytestream_put_le32(&p, pkt->extra);
375			}
376			}
377		✗	if (pkt->ts_field == 0xFFFFFF)
378		✗	bytestream_put_be32(&p, timestamp);
379			// save history
380		✗	prev_pkt[pkt->channel_id].channel_id = pkt->channel_id;
381		✗	prev_pkt[pkt->channel_id].type = pkt->type;
382		✗	prev_pkt[pkt->channel_id].size = pkt->size;
383		✗	prev_pkt[pkt->channel_id].timestamp = pkt->timestamp;
384		✗	prev_pkt[pkt->channel_id].ts_field = pkt->ts_field;
385		✗	prev_pkt[pkt->channel_id].extra = pkt->extra;
386
387			// FIXME:
388			// Writing packets is currently not optimized to minimize system calls.
389			// Since system calls flush on exit which we cannot change in a system-independant way.
390			// We should fix this behavior and by writing packets in a single or in as few as possible system calls.
391			// Protocols like TCP and RTMP should benefit from this when enabling TCP_NODELAY.
392
393		✗	if ((ret = ffurl_write(h, pkt_hdr, p - pkt_hdr)) < 0)
394		✗	return ret;
395		✗	written = p - pkt_hdr + pkt->size;
396		✗	pkt_hdr[0] |= RTMP_PS_ONEBYTE << 6;
397		✗	while (off < pkt->size) {
398		✗	int towrite = FFMIN(chunk_size, pkt->size - off);
399		✗	if ((ret = ffurl_write(h, pkt->data + off, towrite)) < 0)
400		✗	return ret;
401		✗	off += towrite;
402		✗	if (off < pkt->size) {
403		✗	if ((ret = ffurl_write(h, pkt_hdr, basic_hdr_size)) < 0)
404		✗	return ret;
405		✗	written += basic_hdr_size;
406		✗	if (pkt->ts_field == 0xFFFFFF) {
407			uint8_t ts_header[4];
408		✗	AV_WB32(ts_header, timestamp);
409		✗	if ((ret = ffurl_write(h, ts_header, 4)) < 0)
410		✗	return ret;
411		✗	written += 4;
412			}
413			}
414			}
415		✗	return written;
416			}
417
418		✗	int ff_rtmp_packet_create(RTMPPacket *pkt, int channel_id, RTMPPacketType type,
419			int timestamp, int size)
420			{
421		✗	if (size) {
422		✗	pkt->data = av_realloc(NULL, size);
423		✗	if (!pkt->data)
424		✗	return AVERROR(ENOMEM);
425			}
426		✗	pkt->size = size;
427		✗	pkt->channel_id = channel_id;
428		✗	pkt->type = type;
429		✗	pkt->timestamp = timestamp;
430		✗	pkt->extra = 0;
431		✗	pkt->ts_field = 0;
432
433		✗	return 0;
434			}
435
436		✗	void ff_rtmp_packet_destroy(RTMPPacket *pkt)
437			{
438		✗	if (!pkt)
439		✗	return;
440		✗	av_freep(&pkt->data);
441		✗	pkt->size = 0;
442			}
443
444		✗	static int amf_tag_skip(GetByteContext *gb, int depth)
445			{
446			AMFDataType type;
447		✗	unsigned nb = -1;
448
449		✗	if (bytestream2_get_bytes_left(gb) < 1)
450		✗	return -1;
451
452		✗	if (depth > MAX_DEPTH) {
453		✗	av_log(NULL, AV_LOG_ERROR, "amf_tag_skip: exceeded max depth\n");
454		✗	return AVERROR_PATCHWELCOME;
455			}
456
457		✗	type = bytestream2_get_byte(gb);
458		✗	switch (type) {
459		✗	case AMF_DATA_TYPE_NUMBER:
460		✗	bytestream2_get_be64(gb);
461		✗	return 0;
462		✗	case AMF_DATA_TYPE_BOOL:
463		✗	bytestream2_get_byte(gb);
464		✗	return 0;
465		✗	case AMF_DATA_TYPE_STRING:
466		✗	bytestream2_skip(gb, bytestream2_get_be16(gb));
467		✗	return 0;
468		✗	case AMF_DATA_TYPE_LONG_STRING:
469		✗	bytestream2_skip(gb, bytestream2_get_be32(gb));
470		✗	return 0;
471		✗	case AMF_DATA_TYPE_NULL:
472		✗	return 0;
473		✗	case AMF_DATA_TYPE_DATE:
474		✗	bytestream2_skip(gb, 10);
475		✗	return 0;
476		✗	case AMF_DATA_TYPE_ARRAY:
477			case AMF_DATA_TYPE_MIXEDARRAY:
478		✗	nb = bytestream2_get_be32(gb);
479			av_fallthrough;
480		✗	case AMF_DATA_TYPE_OBJECT:
481		✗	while (type != AMF_DATA_TYPE_ARRAY || nb-- > 0) {
482			int t;
483		✗	if (type != AMF_DATA_TYPE_ARRAY) {
484		✗	int size = bytestream2_get_be16(gb);
485		✗	if (!size) {
486		✗	bytestream2_get_byte(gb);
487		✗	break;
488			}
489		✗	if (size < 0 || size >= bytestream2_get_bytes_left(gb))
490		✗	return -1;
491		✗	bytestream2_skip(gb, size);
492			}
493		✗	t = amf_tag_skip(gb, depth + 1);
494		✗	if (t < 0 || bytestream2_get_bytes_left(gb) <= 0)
495		✗	return -1;
496			}
497		✗	return 0;
498		✗	case AMF_DATA_TYPE_OBJECT_END: return 0;
499		✗	default: return -1;
500			}
501			}
502
503		✗	int ff_amf_tag_size(const uint8_t *data, const uint8_t *data_end)
504			{
505			GetByteContext gb;
506			int ret;
507
508		✗	if (data >= data_end)
509		✗	return -1;
510
511		✗	bytestream2_init(&gb, data, data_end - data);
512
513		✗	ret = amf_tag_skip(&gb, 0);
514		✗	if (ret < 0 || bytestream2_get_bytes_left(&gb) <= 0)
515		✗	return -1;
516		✗	av_assert0(bytestream2_tell(&gb) >= 0 && bytestream2_tell(&gb) <= data_end - data);
517		✗	return bytestream2_tell(&gb);
518			}
519
520		✗	static int amf_get_field_value2(GetByteContext *gb,
521			const uint8_t *name, uint8_t *dst, int dst_size)
522			{
523		✗	int namelen = strlen(name);
524			int len;
525
526		✗	while (bytestream2_peek_byte(gb) != AMF_DATA_TYPE_OBJECT && bytestream2_get_bytes_left(gb) > 0) {
527		✗	int ret = amf_tag_skip(gb, 0);
528		✗	if (ret < 0)
529		✗	return -1;
530			}
531		✗	if (bytestream2_get_bytes_left(gb) < 3)
532		✗	return -1;
533		✗	bytestream2_get_byte(gb);
534
535		✗	for (;;) {
536		✗	int size = bytestream2_get_be16(gb);
537		✗	if (!size)
538		✗	break;
539		✗	if (size < 0 || size >= bytestream2_get_bytes_left(gb))
540		✗	return -1;
541		✗	bytestream2_skip(gb, size);
542		✗	if (size == namelen && !memcmp(gb->buffer-size, name, namelen)) {
543		✗	switch (bytestream2_get_byte(gb)) {
544		✗	case AMF_DATA_TYPE_NUMBER:
545		✗	snprintf(dst, dst_size, "%g", av_int2double(bytestream2_get_be64(gb)));
546		✗	break;
547		✗	case AMF_DATA_TYPE_BOOL:
548		✗	snprintf(dst, dst_size, "%s", bytestream2_get_byte(gb) ? "true" : "false");
549		✗	break;
550		✗	case AMF_DATA_TYPE_STRING:
551		✗	len = bytestream2_get_be16(gb);
552		✗	if (dst_size < 1)
553		✗	return -1;
554		✗	if (dst_size < len + 1)
555		✗	len = dst_size - 1;
556		✗	len = bytestream2_get_buffer(gb, dst, len);
557		✗	dst[len] = 0;
558		✗	break;
559		✗	default:
560		✗	return -1;
561			}
562		✗	return 0;
563			}
564		✗	len = amf_tag_skip(gb, 0);
565		✗	if (len < 0 || bytestream2_get_bytes_left(gb) <= 0)
566		✗	return -1;
567			}
568		✗	return -1;
569			}
570
571		✗	int ff_amf_get_field_value(const uint8_t *data, const uint8_t *data_end,
572			const uint8_t *name, uint8_t *dst, int dst_size)
573			{
574			GetByteContext gb;
575
576		✗	if (data >= data_end)
577		✗	return -1;
578
579		✗	bytestream2_init(&gb, data, data_end - data);
580
581		✗	return amf_get_field_value2(&gb, name, dst, dst_size);
582			}
583
584			#ifdef DEBUG
585			static const char* rtmp_packet_type(int type)
586			{
587			switch (type) {
588			case RTMP_PT_CHUNK_SIZE: return "chunk size";
589			case RTMP_PT_BYTES_READ: return "bytes read";
590			case RTMP_PT_USER_CONTROL: return "user control";
591			case RTMP_PT_WINDOW_ACK_SIZE: return "window acknowledgement size";
592			case RTMP_PT_SET_PEER_BW: return "set peer bandwidth";
593			case RTMP_PT_AUDIO: return "audio packet";
594			case RTMP_PT_VIDEO: return "video packet";
595			case RTMP_PT_FLEX_STREAM: return "Flex shared stream";
596			case RTMP_PT_FLEX_OBJECT: return "Flex shared object";
597			case RTMP_PT_FLEX_MESSAGE: return "Flex shared message";
598			case RTMP_PT_NOTIFY: return "notification";
599			case RTMP_PT_SHARED_OBJ: return "shared object";
600			case RTMP_PT_INVOKE: return "invoke";
601			case RTMP_PT_METADATA: return "metadata";
602			default: return "unknown";
603			}
604			}
605
606			static void amf_tag_contents(void *ctx, const uint8_t *data,
607			const uint8_t *data_end, int depth)
608			{
609			unsigned int size, nb = -1;
610			char buf[1024];
611			AMFDataType type;
612			int parse_key = 1;
613
614			if (depth > MAX_DEPTH) {
615			av_log(NULL, AV_LOG_ERROR, "amf_tag_contents: exceeded max depth\n");
616			return;
617			}
618
619			if (data >= data_end)
620			return;
621			switch ((type = *data++)) {
622			case AMF_DATA_TYPE_NUMBER:
623			av_log(ctx, AV_LOG_DEBUG, " number %g\n", av_int2double(AV_RB64(data)));
624			return;
625			case AMF_DATA_TYPE_BOOL:
626			av_log(ctx, AV_LOG_DEBUG, " bool %d\n", *data);
627			return;
628			case AMF_DATA_TYPE_STRING:
629			case AMF_DATA_TYPE_LONG_STRING:
630			if (type == AMF_DATA_TYPE_STRING) {
631			size = bytestream_get_be16(&data);
632			} else {
633			size = bytestream_get_be32(&data);
634			}
635			size = FFMIN(size, sizeof(buf) - 1);
636			memcpy(buf, data, size);
637			buf[size] = 0;
638			av_log(ctx, AV_LOG_DEBUG, " string '%s'\n", buf);
639			return;
640			case AMF_DATA_TYPE_NULL:
641			av_log(ctx, AV_LOG_DEBUG, " NULL\n");
642			return;
643			case AMF_DATA_TYPE_ARRAY:
644			parse_key = 0;
645			av_fallthrough;
646			case AMF_DATA_TYPE_MIXEDARRAY:
647			nb = bytestream_get_be32(&data);
648			av_fallthrough;
649			case AMF_DATA_TYPE_OBJECT:
650			av_log(ctx, AV_LOG_DEBUG, " {\n");
651			while (nb-- > 0 || type != AMF_DATA_TYPE_ARRAY) {
652			int t;
653			if (parse_key) {
654			size = bytestream_get_be16(&data);
655			size = FFMIN(size, sizeof(buf) - 1);
656			if (!size) {
657			av_log(ctx, AV_LOG_DEBUG, " }\n");
658			data++;
659			break;
660			}
661			memcpy(buf, data, size);
662			buf[size] = 0;
663			if (size >= data_end - data)
664			return;
665			data += size;
666			av_log(ctx, AV_LOG_DEBUG, " %s: ", buf);
667			}
668			amf_tag_contents(ctx, data, data_end, depth + 1);
669			t = ff_amf_tag_size(data, data_end);
670			if (t < 0 || t >= data_end - data)
671			return;
672			data += t;
673			}
674			return;
675			case AMF_DATA_TYPE_OBJECT_END:
676			av_log(ctx, AV_LOG_DEBUG, " }\n");
677			return;
678			default:
679			return;
680			}
681			}
682
683			void ff_rtmp_packet_dump(void *ctx, RTMPPacket *p)
684			{
685			av_log(ctx, AV_LOG_DEBUG, "RTMP packet type '%s'(%d) for channel %d, timestamp %d, extra field %d size %d\n",
686			rtmp_packet_type(p->type), p->type, p->channel_id, p->timestamp, p->extra, p->size);
687			if (p->type == RTMP_PT_INVOKE || p->type == RTMP_PT_NOTIFY) {
688			uint8_t *src = p->data, *src_end = p->data + p->size;
689			while (src < src_end) {
690			int sz;
691			amf_tag_contents(ctx, src, src_end, 0);
692			sz = ff_amf_tag_size(src, src_end);
693			if (sz < 0)
694			break;
695			src += sz;
696			}
697			} else if (p->type == RTMP_PT_WINDOW_ACK_SIZE) {
698			av_log(ctx, AV_LOG_DEBUG, "Window acknowledgement size = %d\n", AV_RB32(p->data));
699			} else if (p->type == RTMP_PT_SET_PEER_BW) {
700			av_log(ctx, AV_LOG_DEBUG, "Set Peer BW = %d\n", AV_RB32(p->data));
701			} else if (p->type != RTMP_PT_AUDIO && p->type != RTMP_PT_VIDEO && p->type != RTMP_PT_METADATA) {
702			int i;
703			for (i = 0; i < p->size; i++)
704			av_log(ctx, AV_LOG_DEBUG, " %02X", p->data[i]);
705			av_log(ctx, AV_LOG_DEBUG, "\n");
706			}
707			}
708			#endif
709
710		✗	int ff_amf_match_string(const uint8_t *data, int size, const char *str)
711			{
712		✗	int len = strlen(str);
713			int amf_len, type;
714
715		✗	if (size < 1)
716		✗	return 0;
717
718		✗	type = *data++;
719
720		✗	if (type != AMF_DATA_TYPE_LONG_STRING &&
721			type != AMF_DATA_TYPE_STRING)
722		✗	return 0;
723
724		✗	if (type == AMF_DATA_TYPE_LONG_STRING) {
725		✗	if ((size -= 4 + 1) < 0)
726		✗	return 0;
727		✗	amf_len = bytestream_get_be32(&data);
728			} else {
729		✗	if ((size -= 2 + 1) < 0)
730		✗	return 0;
731		✗	amf_len = bytestream_get_be16(&data);
732			}
733
734		✗	if (amf_len > size)
735		✗	return 0;
736
737		✗	if (amf_len != len)
738		✗	return 0;
739
740		✗	return !memcmp(data, str, len);
741			}
742