FFmpeg coverage


Directory: ../../../ffmpeg/
File: src/libavformat/rtpdec_asf.c
Date: 2026-08-27 03:59:31
Exec Total Coverage
Lines: 0 149 0.0%
Functions: 0 7 0.0%
Branches: 0 84 0.0%

Line Branch Exec Source
1 /*
2 * Microsoft RTP/ASF support.
3 * Copyright (c) 2008 Ronald S. Bultje
4 *
5 * This file is part of FFmpeg.
6 *
7 * FFmpeg is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
11 *
12 * FFmpeg is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public
18 * License along with FFmpeg; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20 */
21
22 /**
23 * @file
24 * @brief Microsoft RTP/ASF support
25 * @author Ronald S. Bultje <rbultje@ronald.bitfreak.net>
26 */
27
28 #include "libavutil/base64.h"
29 #include "libavutil/avstring.h"
30 #include "libavutil/intreadwrite.h"
31 #include "libavutil/mem.h"
32 #include "rtpdec_formats.h"
33 #include "rtsp.h"
34 #include "asf.h"
35 #include "avio_internal.h"
36 #include "demux.h"
37 #include "internal.h"
38
39 /**
40 * From MSDN 2.2.1.4, we learn that ASF data packets over RTP should not
41 * contain any padding. Unfortunately, the header min/max_pktsize are not
42 * updated (thus making min_pktsize invalid). Here, we "fix" these faulty
43 * min_pktsize values in the ASF file header.
44 * @return 0 on success, <0 on failure (currently -1).
45 */
46 static int rtp_asf_fix_header(uint8_t *buf, int len)
47 {
48 uint8_t *p = buf, *end = buf + len;
49
50 if (len < sizeof(ff_asf_guid) * 2 + 22 ||
51 memcmp(p, ff_asf_header, sizeof(ff_asf_guid))) {
52 return -1;
53 }
54 p += sizeof(ff_asf_guid) + 14;
55 do {
56 uint64_t chunksize = AV_RL64(p + sizeof(ff_asf_guid));
57 int skip = 6 * 8 + 3 * 4 + sizeof(ff_asf_guid) * 2;
58 if (memcmp(p, ff_asf_file_header, sizeof(ff_asf_guid))) {
59 if (chunksize < sizeof(ff_asf_guid) + 8)
60 return -1;
61 if (chunksize > end - p)
62 return -1;
63 p += chunksize;
64 continue;
65 }
66
67 if (end - p < 8 + skip)
68 break;
69 /* skip most of the file header, to min_pktsize */
70 p += skip;
71 if (AV_RL32(p) == AV_RL32(p + 4)) {
72 /* and set that to zero */
73 AV_WL32(p, 0);
74 return 0;
75 }
76 break;
77 } while (end - p >= sizeof(ff_asf_guid) + 8);
78
79 return -1;
80 }
81
82 /**
83 * The following code is basically a buffered AVIOContext,
84 * with the added benefit of returning -EAGAIN (instead of 0)
85 * on packet boundaries, such that the ASF demuxer can return
86 * safely and resume business at the next packet.
87 */
88 static int packetizer_read(void *opaque, uint8_t *buf, int buf_size)
89 {
90 return AVERROR(EAGAIN);
91 }
92
93 static void init_packetizer(FFIOContext *pb, uint8_t *buf, int len)
94 {
95 ffio_init_context(pb, buf, len, 0, NULL, packetizer_read, NULL, NULL);
96
97 /* this "fills" the buffer with its current content */
98 pb->pub.pos = len;
99 pb->pub.buf_end = buf + len;
100 }
101
102 int ff_wms_parse_sdp_a_line(AVFormatContext *s, const char *p)
103 {
104 int ret = 0;
105 if (av_strstart(p, "pgmpu:data:application/vnd.ms.wms-hdr.asfv1;base64,", &p)) {
106 FFIOContext pb;
107 RTSPState *rt = s->priv_data;
108 AVDictionary *opts = NULL;
109 int len = strlen(p) * 6 / 8;
110 char *buf = av_mallocz(len);
111 const AVInputFormat *iformat;
112
113 if (!buf)
114 return AVERROR(ENOMEM);
115 av_base64_decode(buf, p, len);
116
117 if (rtp_asf_fix_header(buf, len) < 0)
118 av_log(s, AV_LOG_ERROR,
119 "Failed to fix invalid RTSP-MS/ASF min_pktsize\n");
120 init_packetizer(&pb, buf, len);
121 if (rt->asf_ctx) {
122 avformat_close_input(&rt->asf_ctx);
123 }
124
125 if (!(iformat = av_find_input_format("asf"))) {
126 av_free(buf);
127 return AVERROR_DEMUXER_NOT_FOUND;
128 }
129
130 rt->asf_ctx = avformat_alloc_context();
131 if (!rt->asf_ctx) {
132 av_free(buf);
133 return AVERROR(ENOMEM);
134 }
135 rt->asf_ctx->pb = &pb.pub;
136 av_dict_set(&opts, "no_resync_search", "1", 0);
137
138 if ((ret = ff_copy_whiteblacklists(rt->asf_ctx, s)) < 0) {
139 av_dict_free(&opts);
140 return ret;
141 }
142
143 ret = avformat_open_input(&rt->asf_ctx, "", iformat, &opts);
144 av_dict_free(&opts);
145 if (ret < 0) {
146 av_free(pb.pub.buffer);
147 return ret;
148 }
149 av_dict_copy(&s->metadata, rt->asf_ctx->metadata, 0);
150 rt->asf_pb_pos = avio_tell(&pb.pub);
151 av_free(pb.pub.buffer);
152 rt->asf_ctx->pb = NULL;
153 }
154 return ret;
155 }
156
157 static int asfrtp_parse_sdp_line(AVFormatContext *s, int stream_index,
158 PayloadContext *asf, const char *line)
159 {
160 if (stream_index < 0)
161 return 0;
162 if (av_strstart(line, "stream:", &line)) {
163 RTSPState *rt = s->priv_data;
164
165 s->streams[stream_index]->id = strtol(line, NULL, 10);
166
167 if (rt->asf_ctx) {
168 int i;
169
170 for (i = 0; i < rt->asf_ctx->nb_streams; i++) {
171 if (s->streams[stream_index]->id == rt->asf_ctx->streams[i]->id) {
172 avcodec_parameters_copy(s->streams[stream_index]->codecpar,
173 rt->asf_ctx->streams[i]->codecpar);
174 ffstream(s->streams[stream_index])->need_parsing =
175 ffstream(rt->asf_ctx->streams[i])->need_parsing;
176 avpriv_set_pts_info(s->streams[stream_index], 32, 1, 1000);
177 }
178 }
179 }
180 }
181
182 return 0;
183 }
184
185 struct PayloadContext {
186 FFIOContext pb;
187 AVIOContext *pktbuf;
188 uint8_t *buf;
189 };
190
191 /**
192 * @return 0 when a packet was written into /p pkt, and no more data is left;
193 * 1 when a packet was written into /p pkt, and more packets might be left;
194 * <0 when not enough data was provided to return a full packet, or on error.
195 */
196 static int asfrtp_parse_packet(AVFormatContext *s, PayloadContext *asf,
197 AVStream *st, AVPacket *pkt,
198 uint32_t *timestamp,
199 const uint8_t *buf, int len, uint16_t seq,
200 int flags)
201 {
202 FFIOContext *const pb0 = &asf->pb;
203 AVIOContext *const pb = &pb0->pub;
204 int res, mflags, len_off;
205 RTSPState *rt = s->priv_data;
206
207 if (!rt->asf_ctx)
208 return -1;
209
210 if (len > 0) {
211 int off, out_len = 0;
212
213 if (len < 4)
214 return -1;
215
216 av_freep(&asf->buf);
217
218 ffio_init_read_context(pb0, buf, len);
219
220 while (avio_tell(pb) + 4 < len) {
221 int start_off = avio_tell(pb);
222
223 mflags = avio_r8(pb);
224 len_off = avio_rb24(pb);
225 if (mflags & 0x20) /**< relative timestamp */
226 avio_skip(pb, 4);
227 if (mflags & 0x10) /**< has duration */
228 avio_skip(pb, 4);
229 if (mflags & 0x8) /**< has location ID */
230 avio_skip(pb, 4);
231 off = avio_tell(pb);
232
233 if (!(mflags & 0x40)) {
234 /**
235 * If 0x40 is not set, the len_off field specifies an offset
236 * of this packet's payload data in the complete (reassembled)
237 * ASF packet. This is used to spread one ASF packet over
238 * multiple RTP packets.
239 */
240 if (asf->pktbuf && len_off != avio_tell(asf->pktbuf)) {
241 ffio_free_dyn_buf(&asf->pktbuf);
242 }
243 if (!len_off && !asf->pktbuf &&
244 (res = avio_open_dyn_buf(&asf->pktbuf)) < 0)
245 return res;
246 if (!asf->pktbuf)
247 return AVERROR(EIO);
248
249 avio_write(asf->pktbuf, buf + off, len - off);
250 avio_skip(pb, len - off);
251 if (!(flags & RTP_FLAG_MARKER))
252 return -1;
253 out_len = avio_close_dyn_buf(asf->pktbuf, &asf->buf);
254 asf->pktbuf = NULL;
255 } else {
256 /**
257 * If 0x40 is set, the len_off field specifies the length of
258 * the next ASF packet that can be read from this payload
259 * data alone. This is commonly the same as the payload size,
260 * but could be less in case of packet splitting (i.e.
261 * multiple ASF packets in one RTP packet).
262 */
263
264 int cur_len = start_off + len_off - off;
265 int prev_len = out_len;
266 out_len += cur_len;
267 if (FFMIN(cur_len, len - off) < 0)
268 return -1;
269 if ((res = av_reallocp(&asf->buf, out_len)) < 0)
270 return res;
271 memcpy(asf->buf + prev_len, buf + off,
272 FFMIN(cur_len, len - off));
273 avio_skip(pb, cur_len);
274 }
275 }
276
277 init_packetizer(pb0, asf->buf, out_len);
278 pb->pos += rt->asf_pb_pos;
279 pb->eof_reached = 0;
280 rt->asf_ctx->pb = pb;
281 }
282
283 for (;;) {
284 int i;
285
286 res = ff_read_packet(rt->asf_ctx, pkt);
287 rt->asf_pb_pos = avio_tell(pb);
288 if (res != 0)
289 break;
290 for (i = 0; i < s->nb_streams; i++) {
291 if (s->streams[i]->id == rt->asf_ctx->streams[pkt->stream_index]->id) {
292 pkt->stream_index = i;
293 return 1; // FIXME: return 0 if last packet
294 }
295 }
296 av_packet_unref(pkt);
297 }
298
299 return res == 1 ? -1 : res;
300 }
301
302 static void asfrtp_close_context(PayloadContext *asf)
303 {
304 ffio_free_dyn_buf(&asf->pktbuf);
305 av_freep(&asf->buf);
306 }
307
308 #define RTP_ASF_HANDLER(n, s, t) \
309 const RTPDynamicProtocolHandler ff_ms_rtp_ ## n ## _handler = { \
310 .enc_name = s, \
311 .codec_type = t, \
312 .codec_id = AV_CODEC_ID_NONE, \
313 .priv_data_size = sizeof(PayloadContext), \
314 .parse_sdp_a_line = asfrtp_parse_sdp_line, \
315 .close = asfrtp_close_context, \
316 .parse_packet = asfrtp_parse_packet, \
317 }
318
319 RTP_ASF_HANDLER(asf_pfv, "x-asf-pf", AVMEDIA_TYPE_VIDEO);
320 RTP_ASF_HANDLER(asf_pfa, "x-asf-pf", AVMEDIA_TYPE_AUDIO);
321