FFmpeg coverage

Line	Branch	Exec	Source
1			/*
2			* RTSP/SDP client
3			* Copyright (c) 2002 Fabrice Bellard
4			*
5			* This file is part of FFmpeg.
6			*
7			* FFmpeg is free software; you can redistribute it and/or
8			* modify it under the terms of the GNU Lesser General Public
9			* License as published by the Free Software Foundation; either
10			* version 2.1 of the License, or (at your option) any later version.
11			*
12			* FFmpeg is distributed in the hope that it will be useful,
13			* but WITHOUT ANY WARRANTY; without even the implied warranty of
14			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15			* Lesser General Public License for more details.
16			*
17			* You should have received a copy of the GNU Lesser General Public
18			* License along with FFmpeg; if not, write to the Free Software
19			* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20			*/
21
22			#include "config_components.h"
23
24			#include "libavutil/avassert.h"
25			#include "libavutil/base64.h"
26			#include "libavutil/bprint.h"
27			#include "libavutil/avstring.h"
28			#include "libavutil/intreadwrite.h"
29			#include "libavutil/mathematics.h"
30			#include "libavutil/mem.h"
31			#include "libavutil/parseutils.h"
32			#include "libavutil/random_seed.h"
33			#include "libavutil/dict.h"
34			#include "libavutil/opt.h"
35			#include "libavutil/time.h"
36			#include "libavcodec/codec_desc.h"
37			#include "avformat.h"
38			#include "avio_internal.h"
39			#include "demux.h"
40
41			#if HAVE_POLL_H
42			#include <poll.h>
43			#endif
44			#include "internal.h"
45			#include "network.h"
46			#include "os_support.h"
47			#include "http.h"
48			#include "rtsp.h"
49
50			#include "rtpdec.h"
51			#include "rtpproto.h"
52			#include "rdt.h"
53			#include "rtpdec_formats.h"
54			#include "rtpenc_chain.h"
55			#include "url.h"
56			#include "tls.h"
57			#include "rtpenc.h"
58			#include "mpegts.h"
59			#include "version.h"
60
61			/* Default timeout values for read packet in seconds */
62			#define READ_PACKET_TIMEOUT_S 10
63			#define RECVBUF_SIZE 10 * RTP_MAX_PACKET_LENGTH
64			#define DEFAULT_REORDERING_DELAY 100000
65
66			#define OFFSET(x) offsetof(RTSPState, x)
67			#define DEC AV_OPT_FLAG_DECODING_PARAM
68			#define ENC AV_OPT_FLAG_ENCODING_PARAM
69
70			#define RTSP_FLAG_OPTS(name, longname) \
71			{ name, longname, OFFSET(rtsp_flags), AV_OPT_TYPE_FLAGS, {.i64 = 0}, INT_MIN, INT_MAX, DEC, .unit = "rtsp_flags" }, \
72			{ "filter_src", "only receive packets from the negotiated peer IP", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_FILTER_SRC}, 0, 0, DEC, .unit = "rtsp_flags" }
73
74			#define RTSP_MEDIATYPE_OPTS(name, longname) \
75			{ name, longname, OFFSET(media_type_mask), AV_OPT_TYPE_FLAGS, { .i64 = (1 << (AVMEDIA_TYPE_SUBTITLE+1)) - 1 }, INT_MIN, INT_MAX, DEC, .unit = "allowed_media_types" }, \
76			{ "video", "Video", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_VIDEO}, 0, 0, DEC, .unit = "allowed_media_types" }, \
77			{ "audio", "Audio", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_AUDIO}, 0, 0, DEC, .unit = "allowed_media_types" }, \
78			{ "data", "Data", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_DATA}, 0, 0, DEC, .unit = "allowed_media_types" }, \
79			{ "subtitle", "Subtitle", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_SUBTITLE}, 0, 0, DEC, .unit = "allowed_media_types" }
80
81			#define COMMON_OPTS() \
82			{ "reorder_queue_size", "set number of packets to buffer for handling of reordered packets", OFFSET(reordering_queue_size), AV_OPT_TYPE_INT, { .i64 = -1 }, -1, INT_MAX, DEC }, \
83			{ "buffer_size", "Underlying protocol send/receive buffer size", OFFSET(buffer_size), AV_OPT_TYPE_INT, { .i64 = -1 }, -1, INT_MAX, DEC|ENC }, \
84			{ "pkt_size", "Underlying protocol send packet size", OFFSET(pkt_size), AV_OPT_TYPE_INT, { .i64 = 1472 }, -1, INT_MAX, ENC } \
85
86
87			const AVOption ff_rtsp_options[] = {
88			{ "initial_pause", "do not start playing the stream immediately", OFFSET(initial_pause), AV_OPT_TYPE_BOOL, {.i64 = 0}, 0, 1, DEC },
89			FF_RTP_FLAG_OPTS(RTSPState, rtp_muxer_flags),
90			{ "rtsp_transport", "set RTSP transport protocols", OFFSET(lower_transport_mask), AV_OPT_TYPE_FLAGS, {.i64 = 0}, INT_MIN, INT_MAX, DEC|ENC, .unit = "rtsp_transport" }, \
91			{ "udp", "UDP", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << RTSP_LOWER_TRANSPORT_UDP}, 0, 0, DEC|ENC, .unit = "rtsp_transport" }, \
92			{ "tcp", "TCP", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << RTSP_LOWER_TRANSPORT_TCP}, 0, 0, DEC|ENC, .unit = "rtsp_transport" }, \
93			{ "udp_multicast", "UDP multicast", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << RTSP_LOWER_TRANSPORT_UDP_MULTICAST}, 0, 0, DEC, .unit = "rtsp_transport" },
94			{ "http", "HTTP tunneling", 0, AV_OPT_TYPE_CONST, {.i64 = (1 << RTSP_LOWER_TRANSPORT_HTTP)}, 0, 0, DEC, .unit = "rtsp_transport" },
95			{ "https", "HTTPS tunneling", 0, AV_OPT_TYPE_CONST, {.i64 = (1 << RTSP_LOWER_TRANSPORT_HTTPS )}, 0, 0, DEC, .unit = "rtsp_transport" },
96			RTSP_FLAG_OPTS("rtsp_flags", "set RTSP flags"),
97			{ "listen", "wait for incoming connections", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_LISTEN}, 0, 0, DEC, .unit = "rtsp_flags" },
98			{ "prefer_tcp", "try RTP via TCP first, if available", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_PREFER_TCP}, 0, 0, DEC|ENC, .unit = "rtsp_flags" },
99			{ "satip_raw", "export raw MPEG-TS stream instead of demuxing", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_SATIP_RAW}, 0, 0, DEC, .unit = "rtsp_flags" },
100			RTSP_MEDIATYPE_OPTS("allowed_media_types", "set media types to accept from the server"),
101			{ "min_port", "set minimum local UDP port", OFFSET(rtp_port_min), AV_OPT_TYPE_INT, {.i64 = RTSP_RTP_PORT_MIN}, 0, 65535, DEC|ENC },
102			{ "max_port", "set maximum local UDP port", OFFSET(rtp_port_max), AV_OPT_TYPE_INT, {.i64 = RTSP_RTP_PORT_MAX}, 0, 65535, DEC|ENC },
103			{ "listen_timeout", "set maximum timeout (in seconds) to wait for incoming connections (-1 is infinite, imply flag listen)", OFFSET(initial_timeout), AV_OPT_TYPE_INT, {.i64 = -1}, INT_MIN, INT_MAX, DEC },
104			{ "timeout", "set timeout (in microseconds) of socket I/O operations", OFFSET(stimeout), AV_OPT_TYPE_INT64, {.i64 = 0}, INT_MIN, INT64_MAX, DEC },
105			COMMON_OPTS(),
106			{ "user_agent", "override User-Agent header", OFFSET(user_agent), AV_OPT_TYPE_STRING, {.str = LIBAVFORMAT_IDENT}, 0, 0, DEC },
107
108			// TLS options
109			FF_TLS_CLIENT_OPTIONS(RTSPState, tls_opts),
110			{ NULL },
111			};
112
113			static const AVOption sdp_options[] = {
114			RTSP_FLAG_OPTS("sdp_flags", "SDP flags"),
115			{ "custom_io", "use custom I/O", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_CUSTOM_IO}, 0, 0, DEC, .unit = "rtsp_flags" },
116			{ "rtcp_to_source", "send RTCP packets to the source address of received packets", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_RTCP_TO_SOURCE}, 0, 0, DEC, .unit = "rtsp_flags" },
117			{ "listen_timeout", "set maximum timeout (in seconds) to wait for incoming connections", OFFSET(stimeout), AV_OPT_TYPE_DURATION, {.i64 = READ_PACKET_TIMEOUT_S*1000000}, INT_MIN, INT64_MAX, DEC },
118			{ "localaddr", "local address", OFFSET(localaddr),AV_OPT_TYPE_STRING, {.str = NULL}, 0, 0, DEC }, \
119			RTSP_MEDIATYPE_OPTS("allowed_media_types", "set media types to accept from the server"),
120			COMMON_OPTS(),
121			{ NULL },
122			};
123
124			static const AVOption rtp_options[] = {
125			RTSP_FLAG_OPTS("rtp_flags", "set RTP flags"),
126			{ "listen_timeout", "set maximum timeout (in seconds) to wait for incoming connections", OFFSET(stimeout), AV_OPT_TYPE_DURATION, {.i64 = READ_PACKET_TIMEOUT_S*1000000}, INT_MIN, INT64_MAX, DEC },
127			{ "localaddr", "local address", OFFSET(localaddr),AV_OPT_TYPE_STRING, {.str = NULL}, 0, 0, DEC }, \
128			RTSP_MEDIATYPE_OPTS("allowed_media_types", "set media types to accept from the server"),
129			COMMON_OPTS(),
130			{ NULL },
131			};
132
133
134		✗	static AVDictionary *map_to_opts(RTSPState *rt)
135			{
136		✗	AVDictionary *opts = NULL;
137
138		✗	av_dict_set_int(&opts, "buffer_size", rt->buffer_size, 0);
139		✗	av_dict_set_int(&opts, "pkt_size", rt->pkt_size, 0);
140		✗	if (rt->localaddr && rt->localaddr[0])
141		✗	av_dict_set(&opts, "localaddr", rt->localaddr, 0);
142
143		✗	return opts;
144			}
145
146			#define ERR_RET(c) \
147			do { \
148			int ret = c; \
149			if (ret < 0) \
150			return ret; \
151			} while (0)
152
153			/**
154			* Add the TLS options of the given RTSPState to the dict
155			*/
156		✗	static int copy_tls_opts_dict(RTSPState *rt, AVDictionary **dict)
157			{
158		✗	ERR_RET(av_dict_set_int(dict, "tls_verify", rt->tls_opts.verify, 0));
159		✗	ERR_RET(av_dict_set(dict, "ca_file", rt->tls_opts.ca_file, 0));
160		✗	ERR_RET(av_dict_set(dict, "cert_file", rt->tls_opts.cert_file, 0));
161		✗	ERR_RET(av_dict_set(dict, "key_file", rt->tls_opts.key_file, 0));
162		✗	ERR_RET(av_dict_set(dict, "verifyhost", rt->tls_opts.host, 0));
163
164		✗	return 0;
165			}
166
167			#undef ERR_RET
168
169		✗	static void get_word_until_chars(char *buf, int buf_size,
170			const char *sep, const char **pp)
171			{
172			const char *p;
173			char *q;
174
175		✗	p = *pp;
176		✗	p += strspn(p, SPACE_CHARS);
177		✗	q = buf;
178		✗	while (!strchr(sep, *p) && *p != '\0') {
179		✗	if ((q - buf) < buf_size - 1)
180		✗	*q++ = *p;
181		✗	p++;
182			}
183		✗	if (buf_size > 0)
184		✗	*q = '\0';
185		✗	*pp = p;
186		✗	}
187
188		✗	static void get_word_sep(char *buf, int buf_size, const char *sep,
189			const char **pp)
190			{
191		✗	if (**pp == '/') (*pp)++;
192		✗	get_word_until_chars(buf, buf_size, sep, pp);
193		✗	}
194
195		✗	static void get_word(char *buf, int buf_size, const char **pp)
196			{
197		✗	get_word_until_chars(buf, buf_size, SPACE_CHARS, pp);
198		✗	}
199
200			/** Parse a string p in the form of Range:npt=xx-xx, and determine the start
201			* and end time.
202			* Used for seeking in the rtp stream.
203			*/
204		✗	static void rtsp_parse_range_npt(const char *p, int64_t *start, int64_t *end)
205			{
206			char buf[256];
207
208		✗	p += strspn(p, SPACE_CHARS);
209		✗	if (!av_stristart(p, "npt=", &p))
210		✗	return;
211
212		✗	*start = AV_NOPTS_VALUE;
213		✗	*end = AV_NOPTS_VALUE;
214
215		✗	get_word_sep(buf, sizeof(buf), "-", &p);
216		✗	if (av_parse_time(start, buf, 1) < 0)
217		✗	return;
218		✗	if (*p == '-') {
219		✗	p++;
220		✗	get_word_sep(buf, sizeof(buf), "-", &p);
221		✗	if (av_parse_time(end, buf, 1) < 0)
222		✗	av_log(NULL, AV_LOG_DEBUG, "Failed to parse interval end specification '%s'\n", buf);
223			}
224			}
225
226		✗	static int get_sockaddr(AVFormatContext *s,
227			const char *buf, struct sockaddr_storage *sock)
228			{
229		✗	struct addrinfo hints = { 0 }, *ai = NULL;
230			int ret;
231
232		✗	hints.ai_flags = AI_NUMERICHOST;
233		✗	if ((ret = getaddrinfo(buf, NULL, &hints, &ai))) {
234		✗	av_log(s, AV_LOG_ERROR, "getaddrinfo(%s): %s\n",
235			buf,
236			gai_strerror(ret));
237		✗	return -1;
238			}
239		✗	memcpy(sock, ai->ai_addr, FFMIN(sizeof(*sock), ai->ai_addrlen));
240		✗	freeaddrinfo(ai);
241		✗	return 0;
242			}
243
244			#if CONFIG_RTPDEC
245		✗	static void init_rtp_handler(const RTPDynamicProtocolHandler *handler,
246			RTSPStream *rtsp_st, AVStream *st)
247			{
248		✗	AVCodecParameters *par = st ? st->codecpar : NULL;
249		✗	if (!handler)
250		✗	return;
251		✗	if (par)
252		✗	par->codec_id = handler->codec_id;
253		✗	rtsp_st->dynamic_handler = handler;
254		✗	if (st)
255		✗	ffstream(st)->need_parsing = handler->need_parsing;
256		✗	if (handler->priv_data_size) {
257		✗	rtsp_st->dynamic_protocol_context = av_mallocz(handler->priv_data_size);
258		✗	if (!rtsp_st->dynamic_protocol_context)
259		✗	rtsp_st->dynamic_handler = NULL;
260			}
261			}
262
263		✗	static void finalize_rtp_handler_init(AVFormatContext *s, RTSPStream *rtsp_st,
264			AVStream *st)
265			{
266		✗	if (rtsp_st->dynamic_handler && rtsp_st->dynamic_handler->init) {
267		✗	int ret = rtsp_st->dynamic_handler->init(s, st ? st->index : -1,
268			rtsp_st->dynamic_protocol_context);
269		✗	if (ret < 0) {
270		✗	if (rtsp_st->dynamic_protocol_context) {
271		✗	if (rtsp_st->dynamic_handler->close)
272		✗	rtsp_st->dynamic_handler->close(
273			rtsp_st->dynamic_protocol_context);
274		✗	av_free(rtsp_st->dynamic_protocol_context);
275			}
276		✗	rtsp_st->dynamic_protocol_context = NULL;
277		✗	rtsp_st->dynamic_handler = NULL;
278			}
279			}
280		✗	}
281
282			#if CONFIG_RTSP_DEMUXER
283		✗	static int init_satip_stream(AVFormatContext *s)
284			{
285		✗	RTSPState *rt = s->priv_data;
286		✗	RTSPStream *rtsp_st = av_mallocz(sizeof(RTSPStream));
287		✗	if (!rtsp_st)
288		✗	return AVERROR(ENOMEM);
289		✗	dynarray_add(&rt->rtsp_streams,
290			&rt->nb_rtsp_streams, rtsp_st);
291
292		✗	rtsp_st->sdp_payload_type = 33; // MP2T
293		✗	av_strlcpy(rtsp_st->control_url,
294		✗	rt->control_uri, sizeof(rtsp_st->control_url));
295
296		✗	if (rt->rtsp_flags & RTSP_FLAG_SATIP_RAW) {
297		✗	AVStream *st = avformat_new_stream(s, NULL);
298		✗	if (!st)
299		✗	return AVERROR(ENOMEM);
300		✗	st->id = rt->nb_rtsp_streams - 1;
301		✗	rtsp_st->stream_index = st->index;
302		✗	st->codecpar->codec_type = AVMEDIA_TYPE_DATA;
303		✗	st->codecpar->codec_id = AV_CODEC_ID_MPEG2TS;
304			} else {
305		✗	rtsp_st->stream_index = -1;
306		✗	init_rtp_handler(&ff_mpegts_dynamic_handler, rtsp_st, NULL);
307		✗	finalize_rtp_handler_init(s, rtsp_st, NULL);
308			}
309		✗	return 0;
310			}
311			#endif
312
313			/* parse the rtpmap description: <codec_name>/<clock_rate>[/<other params>] */
314		✗	static int sdp_parse_rtpmap(AVFormatContext *s,
315			AVStream *st, RTSPStream *rtsp_st,
316			int payload_type, const char *p)
317			{
318		✗	AVCodecParameters *par = st->codecpar;
319			char buf[256];
320			int i;
321			const AVCodecDescriptor *desc;
322			const char *c_name;
323
324			/* See if we can handle this kind of payload.
325			* The space should normally not be there but some Real streams or
326			* particular servers ("RealServer Version 6.1.3.970", see issue 1658)
327			* have a trailing space. */
328		✗	get_word_sep(buf, sizeof(buf), "/ ", &p);
329		✗	if (payload_type < RTP_PT_PRIVATE) {
330			/* We are in a standard case
331			* (from http://www.iana.org/assignments/rtp-parameters). */
332		✗	par->codec_id = ff_rtp_codec_id(buf, par->codec_type);
333			}
334
335		✗	if (par->codec_id == AV_CODEC_ID_NONE) {
336			const RTPDynamicProtocolHandler *handler =
337		✗	ff_rtp_handler_find_by_name(buf, par->codec_type);
338		✗	init_rtp_handler(handler, rtsp_st, st);
339			/* If no dynamic handler was found, check with the list of standard
340			* allocated types, if such a stream for some reason happens to
341			* use a private payload type. This isn't handled in rtpdec.c, since
342			* the format name from the rtpmap line never is passed into rtpdec. */
343		✗	if (!rtsp_st->dynamic_handler)
344		✗	par->codec_id = ff_rtp_codec_id(buf, par->codec_type);
345			}
346
347		✗	desc = avcodec_descriptor_get(par->codec_id);
348		✗	if (desc && desc->name)
349		✗	c_name = desc->name;
350			else
351		✗	c_name = "(null)";
352
353		✗	get_word_sep(buf, sizeof(buf), "/", &p);
354		✗	i = atoi(buf);
355		✗	switch (par->codec_type) {
356		✗	case AVMEDIA_TYPE_AUDIO:
357		✗	av_log(s, AV_LOG_DEBUG, "audio codec set to: %s\n", c_name);
358		✗	par->sample_rate = RTSP_DEFAULT_AUDIO_SAMPLERATE;
359		✗	par->ch_layout = (AVChannelLayout)AV_CHANNEL_LAYOUT_MONO;
360		✗	if (i > 0) {
361		✗	par->sample_rate = i;
362		✗	avpriv_set_pts_info(st, 32, 1, par->sample_rate);
363		✗	get_word_sep(buf, sizeof(buf), "/", &p);
364		✗	i = atoi(buf);
365		✗	if (i > 0)
366		✗	av_channel_layout_default(&par->ch_layout, i);
367			}
368		✗	av_log(s, AV_LOG_DEBUG, "audio samplerate set to: %i\n",
369			par->sample_rate);
370		✗	av_log(s, AV_LOG_DEBUG, "audio channels set to: %i\n",
371			par->ch_layout.nb_channels);
372		✗	break;
373		✗	case AVMEDIA_TYPE_VIDEO:
374		✗	av_log(s, AV_LOG_DEBUG, "video codec set to: %s\n", c_name);
375		✗	if (i > 0)
376		✗	avpriv_set_pts_info(st, 32, 1, i);
377		✗	break;
378		✗	default:
379		✗	break;
380			}
381		✗	finalize_rtp_handler_init(s, rtsp_st, st);
382		✗	return 0;
383			}
384
385			/* parse the attribute line from the fmtp a line of an sdp response. This
386			* is broken out as a function because it is used in rtp_h264.c, which is
387			* forthcoming. */
388		✗	int ff_rtsp_next_attr_and_value(const char **p, char *attr, int attr_size,
389			char *value, int value_size)
390			{
391		✗	*p += strspn(*p, SPACE_CHARS);
392		✗	if (**p) {
393		✗	get_word_sep(attr, attr_size, "=", p);
394		✗	if (**p == '=')
395		✗	(*p)++;
396		✗	get_word_sep(value, value_size, ";", p);
397		✗	if (**p == ';')
398		✗	(*p)++;
399		✗	return 1;
400			}
401		✗	return 0;
402			}
403
404			typedef struct SDPParseState {
405			/* SDP only */
406			struct sockaddr_storage default_ip;
407			int default_ttl;
408			int skip_media; ///< set if an unknown m= line occurs
409			int nb_default_include_source_addrs; /**< Number of source-specific multicast include source IP address (from SDP content) */
410			struct RTSPSource **default_include_source_addrs; /**< Source-specific multicast include source IP address (from SDP content) */
411			int nb_default_exclude_source_addrs; /**< Number of source-specific multicast exclude source IP address (from SDP content) */
412			struct RTSPSource **default_exclude_source_addrs; /**< Source-specific multicast exclude source IP address (from SDP content) */
413			int seen_rtpmap;
414			int seen_fmtp;
415			char delayed_fmtp[2048];
416			} SDPParseState;
417
418		✗	static void copy_default_source_addrs(struct RTSPSource **addrs, int count,
419			struct RTSPSource ***dest, int *dest_count)
420			{
421			RTSPSource *rtsp_src, *rtsp_src2;
422			int i;
423		✗	for (i = 0; i < count; i++) {
424		✗	rtsp_src = addrs[i];
425		✗	rtsp_src2 = av_memdup(rtsp_src, sizeof(*rtsp_src));
426		✗	if (!rtsp_src2)
427		✗	continue;
428		✗	dynarray_add(dest, dest_count, rtsp_src2);
429			}
430		✗	}
431
432		✗	static void parse_fmtp(AVFormatContext *s, RTSPState *rt,
433			int payload_type, const char *line)
434			{
435			int i;
436
437		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
438		✗	RTSPStream *rtsp_st = rt->rtsp_streams[i];
439		✗	if (rtsp_st->sdp_payload_type == payload_type &&
440		✗	rtsp_st->dynamic_handler &&
441		✗	rtsp_st->dynamic_handler->parse_sdp_a_line) {
442		✗	rtsp_st->dynamic_handler->parse_sdp_a_line(s, rtsp_st->stream_index,
443			rtsp_st->dynamic_protocol_context, line);
444			}
445			}
446		✗	}
447
448		✗	static void sdp_parse_line(AVFormatContext *s, SDPParseState *s1,
449			int letter, const char *buf)
450			{
451		✗	RTSPState *rt = s->priv_data;
452			char buf1[64], st_type[64];
453			const char *p;
454			enum AVMediaType codec_type;
455			int payload_type;
456			AVStream *st;
457			RTSPStream *rtsp_st;
458			RTSPSource *rtsp_src;
459			struct sockaddr_storage sdp_ip;
460			int ttl;
461
462		✗	av_log(s, AV_LOG_TRACE, "sdp: %c='%s'\n", letter, buf);
463
464		✗	p = buf;
465		✗	if (s1->skip_media && letter != 'm')
466		✗	return;
467		✗	switch (letter) {
468		✗	case 'c':
469		✗	get_word(buf1, sizeof(buf1), &p);
470		✗	if (strcmp(buf1, "IN") != 0)
471		✗	return;
472		✗	get_word(buf1, sizeof(buf1), &p);
473		✗	if (strcmp(buf1, "IP4") && strcmp(buf1, "IP6"))
474		✗	return;
475		✗	get_word_sep(buf1, sizeof(buf1), "/", &p);
476		✗	if (get_sockaddr(s, buf1, &sdp_ip))
477		✗	return;
478		✗	ttl = 16;
479		✗	if (*p == '/') {
480		✗	p++;
481		✗	get_word_sep(buf1, sizeof(buf1), "/", &p);
482		✗	ttl = atoi(buf1);
483			}
484		✗	if (s->nb_streams == 0) {
485		✗	s1->default_ip = sdp_ip;
486		✗	s1->default_ttl = ttl;
487			} else {
488		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
489		✗	rtsp_st->sdp_ip = sdp_ip;
490		✗	rtsp_st->sdp_ttl = ttl;
491			}
492		✗	break;
493		✗	case 's':
494		✗	av_dict_set(&s->metadata, "title", p, 0);
495		✗	break;
496		✗	case 'i':
497		✗	if (s->nb_streams == 0) {
498		✗	av_dict_set(&s->metadata, "comment", p, 0);
499		✗	break;
500			}
501		✗	break;
502		✗	case 'm':
503			/* new stream */
504		✗	s1->skip_media = 0;
505		✗	s1->seen_fmtp = 0;
506		✗	s1->seen_rtpmap = 0;
507		✗	codec_type = AVMEDIA_TYPE_UNKNOWN;
508		✗	get_word(st_type, sizeof(st_type), &p);
509		✗	if (!strcmp(st_type, "audio")) {
510		✗	codec_type = AVMEDIA_TYPE_AUDIO;
511		✗	} else if (!strcmp(st_type, "video")) {
512		✗	codec_type = AVMEDIA_TYPE_VIDEO;
513		✗	} else if (!strcmp(st_type, "application")) {
514		✗	codec_type = AVMEDIA_TYPE_DATA;
515		✗	} else if (!strcmp(st_type, "text")) {
516		✗	codec_type = AVMEDIA_TYPE_SUBTITLE;
517			}
518		✗	if (codec_type == AVMEDIA_TYPE_UNKNOWN ||
519		✗	!(rt->media_type_mask & (1 << codec_type)) ||
520		✗	rt->nb_rtsp_streams >= s->max_streams
521			) {
522		✗	s1->skip_media = 1;
523		✗	return;
524			}
525		✗	rtsp_st = av_mallocz(sizeof(RTSPStream));
526		✗	if (!rtsp_st)
527		✗	return;
528		✗	rtsp_st->stream_index = -1;
529		✗	dynarray_add(&rt->rtsp_streams, &rt->nb_rtsp_streams, rtsp_st);
530
531		✗	rtsp_st->sdp_ip = s1->default_ip;
532		✗	rtsp_st->sdp_ttl = s1->default_ttl;
533
534		✗	copy_default_source_addrs(s1->default_include_source_addrs,
535			s1->nb_default_include_source_addrs,
536			&rtsp_st->include_source_addrs,
537			&rtsp_st->nb_include_source_addrs);
538		✗	copy_default_source_addrs(s1->default_exclude_source_addrs,
539			s1->nb_default_exclude_source_addrs,
540			&rtsp_st->exclude_source_addrs,
541			&rtsp_st->nb_exclude_source_addrs);
542
543		✗	get_word(buf1, sizeof(buf1), &p); /* port */
544		✗	rtsp_st->sdp_port = atoi(buf1);
545
546		✗	get_word(buf1, sizeof(buf1), &p); /* protocol */
547		✗	if (!strcmp(buf1, "udp"))
548		✗	rt->transport = RTSP_TRANSPORT_RAW;
549		✗	else if (strstr(buf1, "/AVPF") || strstr(buf1, "/SAVPF"))
550		✗	rtsp_st->feedback = 1;
551
552			/* XXX: handle list of formats */
553		✗	get_word(buf1, sizeof(buf1), &p); /* format list */
554		✗	rtsp_st->sdp_payload_type = atoi(buf1);
555
556		✗	if (!strcmp(ff_rtp_enc_name(rtsp_st->sdp_payload_type), "MP2T")) {
557			/* no corresponding stream */
558		✗	if (rt->transport == RTSP_TRANSPORT_RAW) {
559		✗	if (CONFIG_RTPDEC && !rt->ts)
560		✗	rt->ts = avpriv_mpegts_parse_open(s);
561			} else {
562			const RTPDynamicProtocolHandler *handler;
563		✗	handler = ff_rtp_handler_find_by_id(
564			rtsp_st->sdp_payload_type, AVMEDIA_TYPE_DATA);
565		✗	init_rtp_handler(handler, rtsp_st, NULL);
566		✗	finalize_rtp_handler_init(s, rtsp_st, NULL);
567			}
568		✗	} else if (rt->server_type == RTSP_SERVER_WMS &&
569			codec_type == AVMEDIA_TYPE_DATA) {
570			/* RTX stream, a stream that carries all the other actual
571			* audio/video streams. Don't expose this to the callers. */
572			} else {
573		✗	st = avformat_new_stream(s, NULL);
574		✗	if (!st)
575		✗	return;
576		✗	st->id = rt->nb_rtsp_streams - 1;
577		✗	rtsp_st->stream_index = st->index;
578		✗	st->codecpar->codec_type = codec_type;
579		✗	if (rtsp_st->sdp_payload_type < RTP_PT_PRIVATE) {
580			const RTPDynamicProtocolHandler *handler;
581			/* if standard payload type, we can find the codec right now */
582		✗	ff_rtp_get_codec_info(st->codecpar, rtsp_st->sdp_payload_type);
583		✗	if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO &&
584		✗	st->codecpar->sample_rate > 0)
585		✗	avpriv_set_pts_info(st, 32, 1, st->codecpar->sample_rate);
586			/* Even static payload types may need a custom depacketizer */
587		✗	handler = ff_rtp_handler_find_by_id(
588		✗	rtsp_st->sdp_payload_type, st->codecpar->codec_type);
589		✗	init_rtp_handler(handler, rtsp_st, st);
590		✗	finalize_rtp_handler_init(s, rtsp_st, st);
591			}
592		✗	if (rt->default_lang[0])
593		✗	av_dict_set(&st->metadata, "language", rt->default_lang, 0);
594			}
595			/* put a default control url */
596		✗	av_strlcpy(rtsp_st->control_url, rt->control_uri,
597			sizeof(rtsp_st->control_url));
598		✗	break;
599		✗	case 'a':
600		✗	if (av_strstart(p, "control:", &p)) {
601		✗	if (rt->nb_rtsp_streams == 0) {
602		✗	if (!strncmp(p, "rtsp://", 7))
603		✗	av_strlcpy(rt->control_uri, p,
604			sizeof(rt->control_uri));
605			} else {
606			char proto[32];
607			/* get the control url */
608		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
609
610			/* XXX: may need to add full url resolution */
611		✗	av_url_split(proto, sizeof(proto), NULL, 0, NULL, 0,
612			NULL, NULL, 0, p);
613		✗	if (proto[0] == '\0') {
614			/* relative control URL */
615		✗	size_t len = strlen(rtsp_st->control_url);
616		✗	if (len == 0 || rtsp_st->control_url[len - 1] != '/')
617		✗	av_strlcat(rtsp_st->control_url, "/",
618			sizeof(rtsp_st->control_url));
619		✗	av_strlcat(rtsp_st->control_url, p,
620			sizeof(rtsp_st->control_url));
621			} else
622		✗	av_strlcpy(rtsp_st->control_url, p,
623			sizeof(rtsp_st->control_url));
624			}
625		✗	} else if (av_strstart(p, "rtpmap:", &p) && s->nb_streams > 0) {
626			/* NOTE: rtpmap is only supported AFTER the 'm=' tag */
627		✗	get_word(buf1, sizeof(buf1), &p);
628		✗	payload_type = atoi(buf1);
629		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
630		✗	if (rtsp_st->stream_index >= 0) {
631		✗	st = s->streams[rtsp_st->stream_index];
632		✗	sdp_parse_rtpmap(s, st, rtsp_st, payload_type, p);
633			}
634		✗	s1->seen_rtpmap = 1;
635		✗	if (s1->seen_fmtp) {
636		✗	parse_fmtp(s, rt, payload_type, s1->delayed_fmtp);
637			}
638		✗	} else if (av_strstart(p, "fmtp:", &p) ||
639		✗	av_strstart(p, "framesize:", &p)) {
640			// let dynamic protocol handlers have a stab at the line.
641		✗	get_word(buf1, sizeof(buf1), &p);
642		✗	payload_type = atoi(buf1);
643		✗	if (s1->seen_rtpmap) {
644		✗	parse_fmtp(s, rt, payload_type, buf);
645			} else {
646		✗	s1->seen_fmtp = 1;
647		✗	av_strlcpy(s1->delayed_fmtp, buf, sizeof(s1->delayed_fmtp));
648			}
649		✗	} else if (av_strstart(p, "framerate:", &p) && s->nb_streams > 0) {
650			// RFC 8866
651			double framerate;
652		✗	if (av_sscanf(p, "%lf%c", &framerate, &(char){0}) == 1) {
653		✗	st = s->streams[s->nb_streams - 1];
654		✗	st->avg_frame_rate = av_d2q(framerate, INT_MAX);
655			}
656		✗	} else if (av_strstart(p, "ssrc:", &p) && s->nb_streams > 0) {
657		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
658		✗	get_word(buf1, sizeof(buf1), &p);
659		✗	rtsp_st->ssrc = strtoll(buf1, NULL, 10);
660		✗	} else if (av_strstart(p, "range:", &p)) {
661			int64_t start, end;
662
663			// this is so that seeking on a streamed file can work.
664		✗	rtsp_parse_range_npt(p, &start, &end);
665		✗	s->start_time = start;
666			/* AV_NOPTS_VALUE means live broadcast (and can't seek) */
667		✗	if (end != AV_NOPTS_VALUE)
668		✗	s->duration = end - start;
669		✗	} else if (av_strstart(p, "lang:", &p)) {
670		✗	if (s->nb_streams > 0) {
671		✗	get_word(buf1, sizeof(buf1), &p);
672		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
673		✗	if (rtsp_st->stream_index >= 0) {
674		✗	st = s->streams[rtsp_st->stream_index];
675		✗	av_dict_set(&st->metadata, "language", buf1, 0);
676			}
677			} else
678		✗	get_word(rt->default_lang, sizeof(rt->default_lang), &p);
679		✗	} else if (av_strstart(p, "IsRealDataType:integer;",&p)) {
680		✗	if (atoi(p) == 1)
681		✗	rt->transport = RTSP_TRANSPORT_RDT;
682		✗	} else if (av_strstart(p, "SampleRate:integer;", &p) &&
683		✗	s->nb_streams > 0) {
684		✗	st = s->streams[s->nb_streams - 1];
685		✗	st->codecpar->sample_rate = atoi(p);
686		✗	} else if (av_strstart(p, "crypto:", &p) && s->nb_streams > 0) {
687			// RFC 4568
688		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
689		✗	get_word(buf1, sizeof(buf1), &p); // ignore tag
690		✗	get_word(rtsp_st->crypto_suite, sizeof(rtsp_st->crypto_suite), &p);
691		✗	p += strspn(p, SPACE_CHARS);
692		✗	if (av_strstart(p, "inline:", &p))
693		✗	get_word(rtsp_st->crypto_params, sizeof(rtsp_st->crypto_params), &p);
694		✗	} else if (av_strstart(p, "source-filter:", &p)) {
695		✗	int exclude = 0;
696		✗	get_word(buf1, sizeof(buf1), &p);
697		✗	if (strcmp(buf1, "incl") && strcmp(buf1, "excl"))
698		✗	return;
699		✗	exclude = !strcmp(buf1, "excl");
700
701		✗	get_word(buf1, sizeof(buf1), &p);
702		✗	if (strcmp(buf1, "IN") != 0)
703		✗	return;
704		✗	get_word(buf1, sizeof(buf1), &p);
705		✗	if (strcmp(buf1, "IP4") && strcmp(buf1, "IP6") && strcmp(buf1, "*"))
706		✗	return;
707			// not checking that the destination address actually matches or is wildcard
708		✗	get_word(buf1, sizeof(buf1), &p);
709
710		✗	while (*p != '\0') {
711		✗	rtsp_src = av_mallocz(sizeof(*rtsp_src));
712		✗	if (!rtsp_src)
713		✗	return;
714		✗	get_word(rtsp_src->addr, sizeof(rtsp_src->addr), &p);
715		✗	if (exclude) {
716		✗	if (s->nb_streams == 0) {
717		✗	dynarray_add(&s1->default_exclude_source_addrs, &s1->nb_default_exclude_source_addrs, rtsp_src);
718			} else {
719		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
720		✗	dynarray_add(&rtsp_st->exclude_source_addrs, &rtsp_st->nb_exclude_source_addrs, rtsp_src);
721			}
722			} else {
723		✗	if (s->nb_streams == 0) {
724		✗	dynarray_add(&s1->default_include_source_addrs, &s1->nb_default_include_source_addrs, rtsp_src);
725			} else {
726		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
727		✗	dynarray_add(&rtsp_st->include_source_addrs, &rtsp_st->nb_include_source_addrs, rtsp_src);
728			}
729			}
730			}
731			} else {
732		✗	if (rt->server_type == RTSP_SERVER_WMS)
733		✗	ff_wms_parse_sdp_a_line(s, p);
734		✗	if (s->nb_streams > 0) {
735		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
736
737		✗	if (rt->server_type == RTSP_SERVER_REAL)
738		✗	ff_real_parse_sdp_a_line(s, rtsp_st->stream_index, p);
739
740		✗	if (rtsp_st->dynamic_handler &&
741		✗	rtsp_st->dynamic_handler->parse_sdp_a_line)
742		✗	rtsp_st->dynamic_handler->parse_sdp_a_line(s,
743			rtsp_st->stream_index,
744			rtsp_st->dynamic_protocol_context, buf);
745			}
746			}
747		✗	break;
748			}
749			}
750
751		✗	int ff_sdp_parse(AVFormatContext *s, const char *content)
752			{
753			const char *p;
754			int letter, i;
755			char buf[SDP_MAX_SIZE], *q;
756		✗	SDPParseState sdp_parse_state = { { 0 } }, *s1 = &sdp_parse_state;
757
758		✗	s->duration = AV_NOPTS_VALUE;
759
760		✗	p = content;
761			for (;;) {
762		✗	p += strspn(p, SPACE_CHARS);
763		✗	letter = *p;
764		✗	if (letter == '\0')
765		✗	break;
766		✗	p++;
767		✗	if (*p != '=')
768		✗	goto next_line;
769		✗	p++;
770			/* get the content */
771		✗	q = buf;
772		✗	while (*p != '\n' && *p != '\r' && *p != '\0') {
773		✗	if ((q - buf) < sizeof(buf) - 1)
774		✗	*q++ = *p;
775		✗	p++;
776			}
777		✗	*q = '\0';
778		✗	sdp_parse_line(s, s1, letter, buf);
779		✗	next_line:
780		✗	while (*p != '\n' && *p != '\0')
781		✗	p++;
782		✗	if (*p == '\n')
783		✗	p++;
784			}
785
786		✗	for (i = 0; i < s1->nb_default_include_source_addrs; i++)
787		✗	av_freep(&s1->default_include_source_addrs[i]);
788		✗	av_freep(&s1->default_include_source_addrs);
789		✗	for (i = 0; i < s1->nb_default_exclude_source_addrs; i++)
790		✗	av_freep(&s1->default_exclude_source_addrs[i]);
791		✗	av_freep(&s1->default_exclude_source_addrs);
792
793		✗	if (s->duration == AV_NOPTS_VALUE)
794		✗	s->ctx_flags |= AVFMTCTX_UNSEEKABLE;
795
796		✗	return 0;
797			}
798			#endif /* CONFIG_RTPDEC */
799
800		✗	void ff_rtsp_undo_setup(AVFormatContext *s, int send_packets)
801			{
802		✗	RTSPState *rt = s->priv_data;
803			int i;
804
805		✗	rt->stored_msg.expected_seq = -1;
806		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
807		✗	RTSPStream *rtsp_st = rt->rtsp_streams[i];
808		✗	if (!rtsp_st)
809		✗	continue;
810		✗	if (rtsp_st->transport_priv) {
811		✗	if (s->oformat) {
812		✗	AVFormatContext *rtpctx = rtsp_st->transport_priv;
813		✗	av_write_trailer(rtpctx);
814		✗	if (rt->lower_transport == RTSP_LOWER_TRANSPORT_TCP) {
815		✗	if (CONFIG_RTSP_MUXER && rtpctx->pb && send_packets)
816		✗	ff_rtsp_tcp_write_packet(s, rtsp_st);
817		✗	ffio_free_dyn_buf(&rtpctx->pb);
818			} else {
819		✗	avio_closep(&rtpctx->pb);
820			}
821		✗	avformat_free_context(rtpctx);
822		✗	} else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RDT)
823		✗	ff_rdt_parse_close(rtsp_st->transport_priv);
824		✗	else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RTP)
825		✗	ff_rtp_parse_close(rtsp_st->transport_priv);
826			}
827		✗	rtsp_st->transport_priv = NULL;
828		✗	ffurl_closep(&rtsp_st->rtp_handle);
829			}
830		✗	}
831
832			/* close and free RTSP streams */
833		✗	void ff_rtsp_close_streams(AVFormatContext *s)
834			{
835		✗	RTSPState *rt = s->priv_data;
836			int i, j;
837			RTSPStream *rtsp_st;
838
839		✗	ff_rtsp_undo_setup(s, 0);
840		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
841		✗	rtsp_st = rt->rtsp_streams[i];
842		✗	if (rtsp_st) {
843		✗	if (rtsp_st->dynamic_handler && rtsp_st->dynamic_protocol_context) {
844		✗	if (rtsp_st->dynamic_handler->close)
845		✗	rtsp_st->dynamic_handler->close(
846		✗	rtsp_st->dynamic_protocol_context);
847		✗	av_free(rtsp_st->dynamic_protocol_context);
848			}
849		✗	for (j = 0; j < rtsp_st->nb_include_source_addrs; j++)
850		✗	av_freep(&rtsp_st->include_source_addrs[j]);
851		✗	av_freep(&rtsp_st->include_source_addrs);
852		✗	for (j = 0; j < rtsp_st->nb_exclude_source_addrs; j++)
853		✗	av_freep(&rtsp_st->exclude_source_addrs[j]);
854		✗	av_freep(&rtsp_st->exclude_source_addrs);
855
856		✗	av_freep(&rtsp_st);
857			}
858			}
859		✗	av_freep(&rt->rtsp_streams);
860		✗	if (rt->asf_ctx) {
861		✗	avformat_close_input(&rt->asf_ctx);
862			}
863		✗	if (CONFIG_RTPDEC && rt->ts)
864		✗	avpriv_mpegts_parse_close(rt->ts);
865		✗	av_freep(&rt->p);
866		✗	av_freep(&rt->recvbuf);
867		✗	}
868
869		✗	int ff_rtsp_open_transport_ctx(AVFormatContext *s, RTSPStream *rtsp_st)
870			{
871		✗	RTSPState *rt = s->priv_data;
872		✗	AVStream *st = NULL;
873		✗	int reordering_queue_size = rt->reordering_queue_size;
874		✗	if (reordering_queue_size < 0) {
875		✗	if (rt->lower_transport == RTSP_LOWER_TRANSPORT_TCP || !s->max_delay)
876		✗	reordering_queue_size = 0;
877			else
878		✗	reordering_queue_size = RTP_REORDER_QUEUE_DEFAULT_SIZE;
879			}
880
881			/* open the RTP context */
882		✗	if (rtsp_st->stream_index >= 0)
883		✗	st = s->streams[rtsp_st->stream_index];
884		✗	if (!st)
885		✗	s->ctx_flags |= AVFMTCTX_NOHEADER;
886
887		✗	if (CONFIG_RTSP_MUXER && s->oformat && st) {
888		✗	int ret = ff_rtp_chain_mux_open((AVFormatContext **)&rtsp_st->transport_priv,
889			s, st, rtsp_st->rtp_handle,
890			rt->pkt_size,
891			rtsp_st->stream_index);
892			/* Ownership of rtp_handle is passed to the rtp mux context */
893		✗	rtsp_st->rtp_handle = NULL;
894		✗	if (ret < 0)
895		✗	return ret;
896		✗	st->time_base = ((AVFormatContext*)rtsp_st->transport_priv)->streams[0]->time_base;
897		✗	} else if (rt->transport == RTSP_TRANSPORT_RAW) {
898		✗	return 0; // Don't need to open any parser here
899		✗	} else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RDT && st)
900		✗	rtsp_st->transport_priv = ff_rdt_parse_open(s, st->index,
901		✗	rtsp_st->dynamic_protocol_context,
902			rtsp_st->dynamic_handler);
903			else if (CONFIG_RTPDEC)
904		✗	rtsp_st->transport_priv = ff_rtp_parse_open(s, st,
905			rtsp_st->sdp_payload_type,
906			reordering_queue_size);
907
908		✗	if (!rtsp_st->transport_priv) {
909		✗	return AVERROR(ENOMEM);
910		✗	} else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RTP &&
911		✗	s->iformat) {
912		✗	RTPDemuxContext *rtpctx = rtsp_st->transport_priv;
913		✗	rtpctx->ssrc = rtsp_st->ssrc;
914		✗	if (rtsp_st->dynamic_handler) {
915		✗	ff_rtp_parse_set_dynamic_protocol(rtsp_st->transport_priv,
916			rtsp_st->dynamic_protocol_context,
917			rtsp_st->dynamic_handler);
918			}
919		✗	if (rtsp_st->crypto_suite[0]) {
920		✗	int ret = ff_rtp_parse_set_crypto(rtsp_st->transport_priv,
921		✗	rtsp_st->crypto_suite,
922		✗	rtsp_st->crypto_params);
923		✗	if (ret < 0) {
924		✗	av_log(s, AV_LOG_ERROR,
925			"SRTP setup failed for suite '%s'\n",
926		✗	rtsp_st->crypto_suite);
927		✗	return ret;
928			}
929			}
930			}
931
932		✗	return 0;
933			}
934
935			#if CONFIG_RTSP_DEMUXER || CONFIG_RTSP_MUXER
936		✗	static void rtsp_parse_range(int *min_ptr, int *max_ptr, const char **pp)
937			{
938			const char *q;
939			char *p;
940			int v;
941
942		✗	q = *pp;
943		✗	q += strspn(q, SPACE_CHARS);
944		✗	v = strtol(q, &p, 10);
945		✗	if (*p == '-') {
946		✗	p++;
947		✗	*min_ptr = v;
948		✗	v = strtol(p, &p, 10);
949		✗	*max_ptr = v;
950			} else {
951		✗	*min_ptr = v;
952		✗	*max_ptr = v;
953			}
954		✗	*pp = p;
955		✗	}
956
957			/* XXX: only one transport specification is parsed */
958		✗	static void rtsp_parse_transport(AVFormatContext *s,
959			RTSPMessageHeader *reply, const char *p)
960			{
961			char transport_protocol[16];
962			char profile[16];
963			char lower_transport[16];
964			char parameter[16];
965			RTSPTransportField *th;
966			char buf[256];
967
968		✗	reply->nb_transports = 0;
969
970			for (;;) {
971		✗	p += strspn(p, SPACE_CHARS);
972		✗	if (*p == '\0')
973		✗	break;
974
975		✗	th = &reply->transports[reply->nb_transports];
976
977		✗	get_word_sep(transport_protocol, sizeof(transport_protocol),
978			"/", &p);
979		✗	if (!av_strcasecmp (transport_protocol, "rtp")) {
980		✗	get_word_sep(profile, sizeof(profile), "/;,", &p);
981		✗	lower_transport[0] = '\0';
982			/* rtp/avp/<protocol> */
983		✗	if (*p == '/') {
984		✗	get_word_sep(lower_transport, sizeof(lower_transport),
985			";,", &p);
986			}
987		✗	th->transport = RTSP_TRANSPORT_RTP;
988		✗	} else if (!av_strcasecmp (transport_protocol, "x-pn-tng") ||
989		✗	!av_strcasecmp (transport_protocol, "x-real-rdt")) {
990			/* x-pn-tng/<protocol> */
991		✗	get_word_sep(lower_transport, sizeof(lower_transport), "/;,", &p);
992		✗	profile[0] = '\0';
993		✗	th->transport = RTSP_TRANSPORT_RDT;
994		✗	} else if (!av_strcasecmp(transport_protocol, "raw")) {
995		✗	get_word_sep(profile, sizeof(profile), "/;,", &p);
996		✗	lower_transport[0] = '\0';
997			/* raw/raw/<protocol> */
998		✗	if (*p == '/') {
999		✗	get_word_sep(lower_transport, sizeof(lower_transport),
1000			";,", &p);
1001			}
1002		✗	th->transport = RTSP_TRANSPORT_RAW;
1003			} else {
1004		✗	break;
1005			}
1006		✗	if (!av_strcasecmp(lower_transport, "TCP"))
1007		✗	th->lower_transport = RTSP_LOWER_TRANSPORT_TCP;
1008			else
1009		✗	th->lower_transport = RTSP_LOWER_TRANSPORT_UDP;
1010
1011		✗	if (*p == ';')
1012		✗	p++;
1013			/* get each parameter */
1014		✗	while (*p != '\0' && *p != ',') {
1015		✗	get_word_sep(parameter, sizeof(parameter), "=;,", &p);
1016		✗	if (!strcmp(parameter, "port")) {
1017		✗	if (*p == '=') {
1018		✗	p++;
1019		✗	rtsp_parse_range(&th->port_min, &th->port_max, &p);
1020			}
1021		✗	} else if (!strcmp(parameter, "client_port")) {
1022		✗	if (*p == '=') {
1023		✗	p++;
1024		✗	rtsp_parse_range(&th->client_port_min,
1025			&th->client_port_max, &p);
1026			}
1027		✗	} else if (!strcmp(parameter, "server_port")) {
1028		✗	if (*p == '=') {
1029		✗	p++;
1030		✗	rtsp_parse_range(&th->server_port_min,
1031			&th->server_port_max, &p);
1032			}
1033		✗	} else if (!strcmp(parameter, "interleaved")) {
1034		✗	if (*p == '=') {
1035		✗	p++;
1036		✗	rtsp_parse_range(&th->interleaved_min,
1037			&th->interleaved_max, &p);
1038			}
1039		✗	} else if (!strcmp(parameter, "multicast")) {
1040		✗	if (th->lower_transport == RTSP_LOWER_TRANSPORT_UDP)
1041		✗	th->lower_transport = RTSP_LOWER_TRANSPORT_UDP_MULTICAST;
1042		✗	} else if (!strcmp(parameter, "ttl")) {
1043		✗	if (*p == '=') {
1044			char *end;
1045		✗	p++;
1046		✗	th->ttl = strtol(p, &end, 10);
1047		✗	p = end;
1048			}
1049		✗	} else if (!strcmp(parameter, "destination")) {
1050		✗	if (*p == '=') {
1051		✗	p++;
1052		✗	get_word_sep(buf, sizeof(buf), ";,", &p);
1053		✗	get_sockaddr(s, buf, &th->destination);
1054			}
1055		✗	} else if (!strcmp(parameter, "source")) {
1056		✗	if (*p == '=') {
1057		✗	p++;
1058		✗	get_word_sep(buf, sizeof(buf), ";,", &p);
1059		✗	av_strlcpy(th->source, buf, sizeof(th->source));
1060			}
1061		✗	} else if (!strcmp(parameter, "mode")) {
1062		✗	if (*p == '=') {
1063		✗	p++;
1064		✗	get_word_sep(buf, sizeof(buf), ";, ", &p);
1065		✗	if (!av_strcasecmp(buf, "record") ||
1066		✗	!av_strcasecmp(buf, "receive"))
1067		✗	th->mode_record = 1;
1068			}
1069			}
1070
1071		✗	while (*p != ';' && *p != '\0' && *p != ',')
1072		✗	p++;
1073		✗	if (*p == ';')
1074		✗	p++;
1075			}
1076		✗	if (*p == ',')
1077		✗	p++;
1078
1079		✗	reply->nb_transports++;
1080		✗	if (reply->nb_transports >= RTSP_MAX_TRANSPORTS)
1081		✗	break;
1082			}
1083		✗	}
1084
1085		✗	static void handle_rtp_info(RTSPState *rt, const char *url,
1086			uint32_t seq, uint32_t rtptime)
1087			{
1088			int i;
1089		✗	if (!rtptime || !url[0])
1090		✗	return;
1091		✗	if (rt->transport != RTSP_TRANSPORT_RTP)
1092		✗	return;
1093		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
1094		✗	RTSPStream *rtsp_st = rt->rtsp_streams[i];
1095		✗	RTPDemuxContext *rtpctx = rtsp_st->transport_priv;
1096		✗	if (!rtpctx)
1097		✗	continue;
1098		✗	if (!strcmp(rtsp_st->control_url, url)) {
1099		✗	rtpctx->base_timestamp = rtptime;
1100		✗	break;
1101			}
1102			}
1103			}
1104
1105		✗	static void rtsp_parse_rtp_info(RTSPState *rt, const char *p)
1106			{
1107		✗	int read = 0;
1108		✗	char key[20], value[MAX_URL_SIZE], url[MAX_URL_SIZE] = "";
1109		✗	uint32_t seq = 0, rtptime = 0;
1110
1111			for (;;) {
1112		✗	p += strspn(p, SPACE_CHARS);
1113		✗	if (!*p)
1114		✗	break;
1115		✗	get_word_sep(key, sizeof(key), "=", &p);
1116		✗	if (*p != '=')
1117		✗	break;
1118		✗	p++;
1119		✗	get_word_sep(value, sizeof(value), ";, ", &p);
1120		✗	read++;
1121		✗	if (!strcmp(key, "url"))
1122		✗	av_strlcpy(url, value, sizeof(url));
1123		✗	else if (!strcmp(key, "seq"))
1124		✗	seq = strtoul(value, NULL, 10);
1125		✗	else if (!strcmp(key, "rtptime"))
1126		✗	rtptime = strtoul(value, NULL, 10);
1127		✗	if (*p == ',') {
1128		✗	handle_rtp_info(rt, url, seq, rtptime);
1129		✗	url[0] = '\0';
1130		✗	seq = rtptime = 0;
1131		✗	read = 0;
1132			}
1133		✗	if (*p)
1134		✗	p++;
1135			}
1136		✗	if (read > 0)
1137		✗	handle_rtp_info(rt, url, seq, rtptime);
1138		✗	}
1139
1140		✗	void ff_rtsp_parse_line(AVFormatContext *s,
1141			RTSPMessageHeader *reply, const char *buf,
1142			RTSPState *rt, const char *method)
1143			{
1144			const char *p;
1145
1146			/* NOTE: we do case independent match for broken servers */
1147		✗	p = buf;
1148		✗	if (av_stristart(p, "Session:", &p)) {
1149			int t;
1150		✗	get_word_sep(reply->session_id, sizeof(reply->session_id), ";", &p);
1151		✗	if (av_stristart(p, ";timeout=", &p) &&
1152		✗	(t = strtol(p, NULL, 10)) > 0) {
1153		✗	reply->timeout = t;
1154			}
1155		✗	} else if (av_stristart(p, "Content-Length:", &p)) {
1156		✗	reply->content_length = strtol(p, NULL, 10);
1157		✗	} else if (av_stristart(p, "Transport:", &p)) {
1158		✗	rtsp_parse_transport(s, reply, p);
1159		✗	} else if (av_stristart(p, "CSeq:", &p)) {
1160		✗	reply->seq = strtol(p, NULL, 10);
1161		✗	} else if (av_stristart(p, "Range:", &p)) {
1162		✗	rtsp_parse_range_npt(p, &reply->range_start, &reply->range_end);
1163		✗	} else if (av_stristart(p, "RealChallenge1:", &p)) {
1164		✗	p += strspn(p, SPACE_CHARS);
1165		✗	av_strlcpy(reply->real_challenge, p, sizeof(reply->real_challenge));
1166		✗	} else if (av_stristart(p, "Server:", &p)) {
1167		✗	p += strspn(p, SPACE_CHARS);
1168		✗	av_strlcpy(reply->server, p, sizeof(reply->server));
1169		✗	} else if (av_stristart(p, "Notice:", &p) ||
1170		✗	av_stristart(p, "X-Notice:", &p)) {
1171		✗	reply->notice = strtol(p, NULL, 10);
1172		✗	} else if (av_stristart(p, "Location:", &p)) {
1173		✗	p += strspn(p, SPACE_CHARS);
1174		✗	av_strlcpy(reply->location, p , sizeof(reply->location));
1175		✗	} else if (av_stristart(p, "WWW-Authenticate:", &p) && rt) {
1176		✗	p += strspn(p, SPACE_CHARS);
1177		✗	ff_http_auth_handle_header(&rt->auth_state, "WWW-Authenticate", p);
1178		✗	} else if (av_stristart(p, "Authentication-Info:", &p) && rt) {
1179		✗	p += strspn(p, SPACE_CHARS);
1180		✗	ff_http_auth_handle_header(&rt->auth_state, "Authentication-Info", p);
1181		✗	} else if (av_stristart(p, "Content-Base:", &p) && rt) {
1182		✗	p += strspn(p, SPACE_CHARS);
1183		✗	if (method && !strcmp(method, "DESCRIBE"))
1184		✗	av_strlcpy(rt->control_uri, p , sizeof(rt->control_uri));
1185		✗	} else if (av_stristart(p, "RTP-Info:", &p) && rt) {
1186		✗	p += strspn(p, SPACE_CHARS);
1187		✗	if (method && !strcmp(method, "PLAY"))
1188		✗	rtsp_parse_rtp_info(rt, p);
1189		✗	} else if (av_stristart(p, "Public:", &p) && rt) {
1190		✗	if (strstr(p, "GET_PARAMETER") &&
1191		✗	method && !strcmp(method, "OPTIONS"))
1192		✗	rt->get_parameter_supported = 1;
1193		✗	} else if (av_stristart(p, "x-Accept-Dynamic-Rate:", &p) && rt) {
1194		✗	p += strspn(p, SPACE_CHARS);
1195		✗	rt->accept_dynamic_rate = atoi(p);
1196		✗	} else if (av_stristart(p, "Content-Type:", &p)) {
1197		✗	p += strspn(p, SPACE_CHARS);
1198		✗	av_strlcpy(reply->content_type, p, sizeof(reply->content_type));
1199		✗	} else if (av_stristart(p, "com.ses.streamID:", &p)) {
1200		✗	p += strspn(p, SPACE_CHARS);
1201		✗	av_strlcpy(reply->stream_id, p, sizeof(reply->stream_id));
1202			}
1203		✗	}
1204
1205			/* skip a RTP/TCP interleaved packet */
1206		✗	int ff_rtsp_skip_packet(AVFormatContext *s)
1207			{
1208		✗	RTSPState *rt = s->priv_data;
1209			int ret, len, len1;
1210			uint8_t buf[MAX_URL_SIZE];
1211
1212		✗	rt->pending_packet = 0;
1213		✗	ret = ffurl_read_complete(rt->rtsp_hd, buf, 3);
1214		✗	if (ret != 3)
1215		✗	return ret < 0 ? ret : AVERROR(EIO);
1216		✗	len = AV_RB16(buf + 1);
1217
1218		✗	av_log(s, AV_LOG_TRACE, "skipping RTP packet len=%d\n", len);
1219
1220			/* skip payload */
1221		✗	while (len > 0) {
1222		✗	len1 = len;
1223		✗	if (len1 > sizeof(buf))
1224		✗	len1 = sizeof(buf);
1225		✗	ret = ffurl_read_complete(rt->rtsp_hd, buf, len1);
1226		✗	if (ret != len1)
1227		✗	return ret < 0 ? ret : AVERROR(EIO);
1228		✗	len -= len1;
1229			}
1230
1231		✗	return 0;
1232			}
1233
1234		✗	static int ff_rtsp_read_reply_internal(AVFormatContext *s,
1235			RTSPMessageHeader *reply,
1236			unsigned char **content_ptr,
1237			int return_on_interleaved_data,
1238			const char *method)
1239			{
1240		✗	RTSPState *rt = s->priv_data;
1241			char buf[MAX_URL_SIZE], buf1[MAX_URL_SIZE], *q;
1242			unsigned char ch;
1243			const char *p;
1244			int ret, content_length, line_count, request;
1245			unsigned char *content;
1246
1247		✗	start:
1248		✗	line_count = 0;
1249		✗	request = 0;
1250		✗	content = NULL;
1251		✗	memset(reply, 0, sizeof(*reply));
1252
1253			/* parse reply (XXX: use buffers) */
1254		✗	rt->last_reply[0] = '\0';
1255			for (;;) {
1256		✗	q = buf;
1257			for (;;) {
1258		✗	ret = ffurl_read_complete(rt->rtsp_hd, &ch, 1);
1259		✗	if (ret != 1) {
1260		✗	ret = (ret < 0) ? ret : AVERROR(EIO);
1261		✗	av_log(s, AV_LOG_WARNING, "Failed reading RTSP data: %s\n", av_err2str(ret));
1262		✗	return ret;
1263			}
1264		✗	av_log(s, AV_LOG_TRACE, "ret=%d c=%02x [%c]\n", ret, ch, ch);
1265		✗	if (ch == '\n')
1266		✗	break;
1267		✗	if (ch == '$' && q == buf) {
1268		✗	if (return_on_interleaved_data) {
1269		✗	rt->pending_packet = 1;
1270		✗	return 1;
1271			} else {
1272		✗	ret = ff_rtsp_skip_packet(s);
1273		✗	if (ret < 0)
1274		✗	return ret;
1275			}
1276		✗	} else if (ch != '\r') {
1277		✗	if ((q - buf) < sizeof(buf) - 1)
1278		✗	*q++ = ch;
1279			}
1280			}
1281		✗	*q = '\0';
1282
1283		✗	av_log(s, AV_LOG_TRACE, "line='%s'\n", buf);
1284
1285			/* test if last line */
1286		✗	if (buf[0] == '\0')
1287		✗	break;
1288		✗	p = buf;
1289		✗	if (line_count == 0) {
1290			/* get reply code */
1291		✗	get_word(buf1, sizeof(buf1), &p);
1292		✗	if (!strncmp(buf1, "RTSP/", 5)) {
1293		✗	get_word(buf1, sizeof(buf1), &p);
1294		✗	reply->status_code = atoi(buf1);
1295		✗	p += strspn(p, SPACE_CHARS);
1296		✗	av_strlcpy(reply->reason, p, sizeof(reply->reason));
1297			} else {
1298		✗	av_strlcpy(reply->reason, buf1, sizeof(reply->reason)); // method
1299		✗	get_word(buf1, sizeof(buf1), &p); // object
1300		✗	request = 1;
1301			}
1302			} else {
1303		✗	ff_rtsp_parse_line(s, reply, p, rt, method);
1304		✗	av_strlcat(rt->last_reply, p, sizeof(rt->last_reply));
1305		✗	av_strlcat(rt->last_reply, "\n", sizeof(rt->last_reply));
1306			}
1307		✗	line_count++;
1308			}
1309
1310		✗	if (rt->session_id[0] == '\0' && reply->session_id[0] != '\0' && !request)
1311		✗	av_strlcpy(rt->session_id, reply->session_id, sizeof(rt->session_id));
1312
1313		✗	content_length = reply->content_length;
1314		✗	if (content_length > 0) {
1315			/* leave some room for a trailing '\0' (useful for simple parsing) */
1316		✗	content = av_malloc(content_length + 1);
1317		✗	if (!content)
1318		✗	return AVERROR(ENOMEM);
1319		✗	if ((ret = ffurl_read_complete(rt->rtsp_hd, content, content_length)) != content_length) {
1320		✗	av_freep(&content);
1321		✗	return ret < 0 ? ret : AVERROR(EIO);
1322			}
1323		✗	content[content_length] = '\0';
1324			}
1325		✗	if (content_ptr)
1326		✗	*content_ptr = content;
1327			else
1328		✗	av_freep(&content);
1329
1330		✗	if (request) {
1331			char buf[MAX_URL_SIZE];
1332			char base64buf[AV_BASE64_SIZE(sizeof(buf))];
1333		✗	const char* ptr = buf;
1334
1335		✗	if (!strcmp(reply->reason, "OPTIONS") ||
1336		✗	!strcmp(reply->reason, "GET_PARAMETER")) {
1337		✗	snprintf(buf, sizeof(buf), "RTSP/1.0 200 OK\r\n");
1338		✗	if (reply->seq)
1339		✗	av_strlcatf(buf, sizeof(buf), "CSeq: %d\r\n", reply->seq);
1340		✗	if (reply->session_id[0])
1341		✗	av_strlcatf(buf, sizeof(buf), "Session: %s\r\n",
1342		✗	reply->session_id);
1343			} else {
1344		✗	snprintf(buf, sizeof(buf), "RTSP/1.0 501 Not Implemented\r\n");
1345			}
1346		✗	av_strlcat(buf, "\r\n", sizeof(buf));
1347
1348		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1349		✗	av_base64_encode(base64buf, sizeof(base64buf), buf, strlen(buf));
1350		✗	ptr = base64buf;
1351			}
1352		✗	ffurl_write(rt->rtsp_hd_out, ptr, strlen(ptr));
1353
1354		✗	rt->last_cmd_time = av_gettime_relative();
1355			/* Even if the request from the server had data, it is not the data
1356			* that the caller wants or expects. The memory could also be leaked
1357			* if the actual following reply has content data. */
1358		✗	if (content_ptr)
1359		✗	av_freep(content_ptr);
1360			/* If method is set, this is called from ff_rtsp_send_cmd,
1361			* where a reply to exactly this request is awaited. For
1362			* callers from within packet receiving, we just want to
1363			* return to the caller and go back to receiving packets. */
1364		✗	if (method)
1365		✗	goto start;
1366		✗	return 0;
1367			}
1368
1369		✗	if (rt->seq != reply->seq) {
1370		✗	av_log(s, AV_LOG_WARNING, "CSeq %d expected, %d received.\n",
1371			rt->seq, reply->seq);
1372			/* At close time, drain stale async replies - e.g. queued keepalive
1373			* OPTIONS or GET_PARAMETER responses - until the expected CSeq shows
1374			* up. Otherwise ff_rtsp_send_cmd("TEARDOWN") in rtsp_read_close()
1375			* is satisfied by a queued keepalive reply, leaving the TEARDOWN
1376			* 200 OK unread so the server never frees the session. Only done
1377			* while teardown_deadline bounds the wait; every other synchronous
1378			* command keeps accepting a mismatching reply. */
1379		✗	if (rt->teardown_deadline) {
1380		✗	if (content_ptr)
1381		✗	av_freep(content_ptr);
1382		✗	goto start;
1383			}
1384			}
1385
1386			/* EOS */
1387		✗	if (reply->notice == 2101 /* End-of-Stream Reached */ ||
1388		✗	reply->notice == 2104 /* Start-of-Stream Reached */ ||
1389		✗	reply->notice == 2306 /* Continuous Feed Terminated */) {
1390		✗	rt->state = RTSP_STATE_IDLE;
1391		✗	} else if (reply->notice >= 4400 && reply->notice < 5500) {
1392		✗	return AVERROR(EIO); /* data or server error */
1393		✗	} else if (reply->notice == 2401 /* Ticket Expired */ ||
1394		✗	(reply->notice >= 5500 && reply->notice < 5600) /* end of term */ )
1395		✗	return AVERROR(EPERM);
1396
1397		✗	return 0;
1398			}
1399
1400		✗	int ff_rtsp_read_reply(AVFormatContext *s, RTSPMessageHeader *reply,
1401			unsigned char **content_ptr,
1402			int return_on_interleaved_data, const char *method)
1403			{
1404			int ret;
1405		✗	RTSPState *rt = s->priv_data;
1406
1407			// If we returned on pending packet last time,
1408			// do not try to read again, as it would corrupt
1409			// the state due to the already consumed '$'.
1410		✗	if (rt->pending_packet) {
1411		✗	if (return_on_interleaved_data)
1412		✗	return 1;
1413
1414		✗	ret = ff_rtsp_skip_packet(s);
1415		✗	if (ret < 0)
1416		✗	return ret;
1417			}
1418
1419		✗	if (rt->stored_msg.expected_seq != -1) {
1420			RTSPMessageHeader header;
1421
1422		✗	ret = ff_rtsp_read_reply_internal(s, &header,
1423			&rt->stored_msg.body, return_on_interleaved_data, NULL);
1424		✗	if (ret != 0)
1425		✗	return ret;
1426
1427		✗	if (rt->stored_msg.expected_seq == header.seq) {
1428			// Got the expected reply, store it for later
1429		✗	rt->stored_msg.expected_seq = -1;
1430		✗	rt->stored_msg.header = av_calloc(1, sizeof(*rt->stored_msg.header));
1431		✗	if (!rt->stored_msg.header) {
1432		✗	av_freep(&rt->stored_msg.body);
1433		✗	return AVERROR(ENOMEM);
1434			}
1435		✗	memcpy(rt->stored_msg.header, &header, sizeof(header));
1436			} else {
1437		✗	av_log(s, AV_LOG_WARNING, "Unexpected reply with seq %d, expected %d\n",
1438			header.seq, rt->stored_msg.expected_seq);
1439		✗	av_freep(&rt->stored_msg.body);
1440			}
1441
1442			// Do not return here as we still need to read the reply
1443			// the caller was actually wanting to retrieve.
1444			}
1445
1446		✗	return ff_rtsp_read_reply_internal(s, reply, content_ptr,
1447			return_on_interleaved_data, method);
1448			}
1449
1450			/**
1451			* Send a command to the RTSP server without waiting for the reply.
1452			*
1453			* @param s RTSP (de)muxer context
1454			* @param method the method for the request
1455			* @param url the target url for the request
1456			* @param headers extra header lines to include in the request
1457			* @param send_content if non-null, the data to send as request body content
1458			* @param send_content_length the length of the send_content data, or 0 if
1459			* send_content is null
1460			*
1461			* @return zero if success, nonzero otherwise
1462			*/
1463		✗	int ff_rtsp_send_cmd_with_content_async(AVFormatContext *s,
1464			const char *method, const char *url,
1465			const char *headers,
1466			const unsigned char *send_content,
1467			int send_content_length)
1468			{
1469		✗	RTSPState *rt = s->priv_data;
1470			char buf[MAX_URL_SIZE], *out_buf;
1471			char base64buf[AV_BASE64_SIZE(sizeof(buf))];
1472
1473		✗	if (!rt->rtsp_hd_out)
1474		✗	return AVERROR(ENOTCONN);
1475
1476			/* Add in RTSP headers */
1477		✗	out_buf = buf;
1478		✗	rt->seq++;
1479		✗	snprintf(buf, sizeof(buf), "%s %s RTSP/1.0\r\n", method, url);
1480		✗	if (headers)
1481		✗	av_strlcat(buf, headers, sizeof(buf));
1482		✗	av_strlcatf(buf, sizeof(buf), "CSeq: %d\r\n", rt->seq);
1483		✗	av_strlcatf(buf, sizeof(buf), "User-Agent: %s\r\n", rt->user_agent);
1484		✗	if (rt->session_id[0] != '\0' && (!headers ||
1485		✗	!strstr(headers, "\nIf-Match:"))) {
1486		✗	av_strlcatf(buf, sizeof(buf), "Session: %s\r\n", rt->session_id);
1487			}
1488		✗	if (rt->auth[0]) {
1489		✗	char *str = ff_http_auth_create_response(&rt->auth_state,
1490		✗	rt->auth, url, method);
1491		✗	if (str)
1492		✗	av_strlcat(buf, str, sizeof(buf));
1493		✗	av_free(str);
1494			}
1495		✗	if (send_content_length > 0 && send_content)
1496		✗	av_strlcatf(buf, sizeof(buf), "Content-Length: %d\r\n", send_content_length);
1497		✗	av_strlcat(buf, "\r\n", sizeof(buf));
1498
1499			/* base64 encode rtsp if tunneling */
1500		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1501		✗	av_base64_encode(base64buf, sizeof(base64buf), buf, strlen(buf));
1502		✗	out_buf = base64buf;
1503			}
1504
1505		✗	av_log(s, AV_LOG_TRACE, "Sending:\n%s--\n", buf);
1506
1507		✗	ffurl_write(rt->rtsp_hd_out, out_buf, strlen(out_buf));
1508		✗	if (send_content_length > 0 && send_content) {
1509		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1510		✗	avpriv_report_missing_feature(s, "Tunneling of RTSP requests with content data");
1511		✗	return AVERROR_PATCHWELCOME;
1512			}
1513		✗	ffurl_write(rt->rtsp_hd_out, send_content, send_content_length);
1514			}
1515		✗	rt->last_cmd_time = av_gettime_relative();
1516
1517		✗	return 0;
1518			}
1519
1520		✗	int ff_rtsp_send_cmd_with_content_async_stored(AVFormatContext *s,
1521			const char *method, const char *url,
1522			const char *headers,
1523			const unsigned char *send_content,
1524			int send_content_length)
1525			{
1526		✗	RTSPState *rt = s->priv_data;
1527		✗	int ret = ff_rtsp_send_cmd_with_content_async(s, method, url, headers,
1528			send_content, send_content_length);
1529		✗	if (ret < 0)
1530		✗	return ret;
1531
1532		✗	rt->stored_msg.expected_seq = rt->seq;
1533		✗	av_freep(&rt->stored_msg.header);
1534		✗	av_freep(&rt->stored_msg.body);
1535		✗	return 0;
1536			}
1537
1538		✗	int ff_rtsp_send_cmd_async(AVFormatContext *s, const char *method,
1539			const char *url, const char *headers)
1540			{
1541		✗	return ff_rtsp_send_cmd_with_content_async(s, method, url, headers, NULL, 0);
1542			}
1543
1544		✗	int ff_rtsp_send_cmd(AVFormatContext *s, const char *method, const char *url,
1545			const char *headers, RTSPMessageHeader *reply,
1546			unsigned char **content_ptr)
1547			{
1548		✗	return ff_rtsp_send_cmd_with_content(s, method, url, headers, reply,
1549			content_ptr, NULL, 0);
1550			}
1551
1552		✗	int ff_rtsp_send_cmd_with_content(AVFormatContext *s,
1553			const char *method, const char *url,
1554			const char *header,
1555			RTSPMessageHeader *reply,
1556			unsigned char **content_ptr,
1557			const unsigned char *send_content,
1558			int send_content_length)
1559			{
1560		✗	RTSPState *rt = s->priv_data;
1561			HTTPAuthType cur_auth_type;
1562		✗	int ret, attempts = 0;
1563
1564		✗	retry:
1565		✗	cur_auth_type = rt->auth_state.auth_type;
1566		✗	if ((ret = ff_rtsp_send_cmd_with_content_async(s, method, url, header,
1567			send_content,
1568			send_content_length)) < 0)
1569		✗	return ret;
1570
1571		✗	if ((ret = ff_rtsp_read_reply(s, reply, content_ptr, 0, method) ) < 0)
1572		✗	return ret;
1573		✗	attempts++;
1574
1575		✗	if (reply->status_code == 401 &&
1576		✗	(cur_auth_type == HTTP_AUTH_NONE || rt->auth_state.stale) &&
1577		✗	rt->auth_state.auth_type != HTTP_AUTH_NONE && attempts < 2)
1578		✗	goto retry;
1579
1580		✗	if (reply->status_code > 400){
1581		✗	av_log(s, AV_LOG_ERROR, "method %s failed: %d (%s)\n",
1582			method,
1583		✗	reply->status_code,
1584		✗	reply->reason);
1585		✗	av_log(s, AV_LOG_DEBUG, "%s\n", rt->last_reply);
1586			}
1587
1588		✗	return 0;
1589			}
1590
1591		✗	int ff_rtsp_read_reply_async_stored(AVFormatContext *s, RTSPMessageHeader **reply,
1592			unsigned char **content_ptr)
1593			{
1594		✗	RTSPState *rt = s->priv_data;
1595		✗	if (rt->stored_msg.header == NULL) {
1596		✗	if (rt->stored_msg.expected_seq == -1)
1597		✗	return AVERROR(EINVAL); // Reply to be stored was never requested
1598
1599			// Reply pending, tell caller to try again later
1600		✗	return AVERROR(EAGAIN);
1601			}
1602
1603		✗	if (reply)
1604		✗	*reply = rt->stored_msg.header;
1605			else
1606		✗	av_free(rt->stored_msg.header);
1607
1608		✗	if (content_ptr)
1609		✗	*content_ptr = rt->stored_msg.body;
1610			else
1611		✗	av_free(rt->stored_msg.body);
1612
1613		✗	rt->stored_msg.header = NULL;
1614		✗	rt->stored_msg.body = NULL;
1615		✗	return 0;
1616			}
1617
1618		✗	int ff_rtsp_make_setup_request(AVFormatContext *s, const char *host, int port,
1619			int lower_transport, const char *real_challenge)
1620			{
1621		✗	RTSPState *rt = s->priv_data;
1622		✗	int rtx = 0, j, i, err, interleave = 0, port_off = 0;
1623			RTSPStream *rtsp_st;
1624		✗	RTSPMessageHeader reply1, *reply = &reply1;
1625			char cmd[MAX_URL_SIZE];
1626			const char *trans_pref;
1627
1628		✗	memset(&reply1, 0, sizeof(reply1));
1629
1630		✗	if (rt->transport == RTSP_TRANSPORT_RDT)
1631		✗	trans_pref = "x-pn-tng";
1632		✗	else if (rt->transport == RTSP_TRANSPORT_RAW)
1633		✗	trans_pref = "RAW/RAW";
1634			else
1635		✗	trans_pref = "RTP/AVP";
1636
1637			/* default timeout: 1 minute */
1638		✗	rt->timeout = 60;
1639
1640			/* Choose a random starting offset within the first half of the
1641			* port range, to allow for a number of ports to try even if the offset
1642			* happens to be at the end of the random range. */
1643		✗	if (rt->rtp_port_max - rt->rtp_port_min >= 4) {
1644		✗	port_off = av_get_random_seed() % ((rt->rtp_port_max - rt->rtp_port_min)/2);
1645			/* even random offset */
1646		✗	port_off -= port_off & 0x01;
1647			}
1648
1649		✗	for (j = rt->rtp_port_min + port_off, i = 0; i < rt->nb_rtsp_streams; ++i) {
1650			char transport[MAX_URL_SIZE];
1651
1652			/*
1653			* WMS serves all UDP data over a single connection, the RTX, which
1654			* isn't necessarily the first in the SDP but has to be the first
1655			* to be set up, else the second/third SETUP will fail with a 461.
1656			*/
1657		✗	if (lower_transport == RTSP_LOWER_TRANSPORT_UDP &&
1658		✗	rt->server_type == RTSP_SERVER_WMS) {
1659		✗	if (i == 0) {
1660			/* rtx first */
1661		✗	for (rtx = 0; rtx < rt->nb_rtsp_streams; rtx++) {
1662		✗	int len = strlen(rt->rtsp_streams[rtx]->control_url);
1663		✗	if (len >= 4 &&
1664		✗	!strcmp(rt->rtsp_streams[rtx]->control_url + len - 4,
1665			"/rtx"))
1666		✗	break;
1667			}
1668		✗	if (rtx == rt->nb_rtsp_streams)
1669		✗	return -1; /* no RTX found */
1670		✗	rtsp_st = rt->rtsp_streams[rtx];
1671			} else
1672		✗	rtsp_st = rt->rtsp_streams[i > rtx ? i : i - 1];
1673			} else
1674		✗	rtsp_st = rt->rtsp_streams[i];
1675
1676			/* RTP/UDP */
1677		✗	if (lower_transport == RTSP_LOWER_TRANSPORT_UDP) {
1678			char buf[256];
1679
1680		✗	if (rt->server_type == RTSP_SERVER_WMS && i > 1) {
1681		✗	port = reply->transports[0].client_port_min;
1682		✗	goto have_port;
1683			}
1684
1685			/* first try in specified port range */
1686		✗	while (j + 1 <= rt->rtp_port_max) {
1687		✗	AVDictionary *opts = map_to_opts(rt);
1688
1689		✗	ff_url_join(buf, sizeof(buf), "rtp", NULL, host, -1,
1690			"?localrtpport=%d", j);
1691			/* we will use two ports per rtp stream (rtp and rtcp) */
1692		✗	j += 2;
1693		✗	err = ffurl_open_whitelist(&rtsp_st->rtp_handle, buf, AVIO_FLAG_READ_WRITE,
1694		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
1695
1696		✗	av_dict_free(&opts);
1697
1698		✗	if (!err)
1699		✗	goto rtp_opened;
1700			}
1701		✗	av_log(s, AV_LOG_ERROR, "Unable to open an input RTP port\n");
1702		✗	err = AVERROR(EIO);
1703		✗	goto fail;
1704
1705		✗	rtp_opened:
1706		✗	port = ff_rtp_get_local_rtp_port(rtsp_st->rtp_handle);
1707		✗	have_port:
1708		✗	av_strlcpy(transport, trans_pref, sizeof(transport));
1709		✗	av_strlcat(transport,
1710		✗	rt->server_type == RTSP_SERVER_SATIP ? ";" : "/UDP;",
1711			sizeof(transport));
1712		✗	if (rt->server_type != RTSP_SERVER_REAL)
1713		✗	av_strlcat(transport, "unicast;", sizeof(transport));
1714		✗	av_strlcatf(transport, sizeof(transport),
1715			"client_port=%d", port);
1716		✗	if (rt->transport == RTSP_TRANSPORT_RTP &&
1717		✗	!(rt->server_type == RTSP_SERVER_WMS && i > 0))
1718		✗	av_strlcatf(transport, sizeof(transport), "-%d", port + 1);
1719			}
1720
1721			/* RTP/TCP */
1722		✗	else if (lower_transport == RTSP_LOWER_TRANSPORT_TCP) {
1723			/* For WMS streams, the application streams are only used for
1724			* UDP. When trying to set it up for TCP streams, the server
1725			* will return an error. Therefore, we skip those streams. */
1726		✗	if (rt->server_type == RTSP_SERVER_WMS &&
1727		✗	(rtsp_st->stream_index < 0 ||
1728		✗	s->streams[rtsp_st->stream_index]->codecpar->codec_type ==
1729			AVMEDIA_TYPE_DATA))
1730		✗	continue;
1731		✗	snprintf(transport, sizeof(transport) - 1,
1732			"%s/TCP;", trans_pref);
1733		✗	if (rt->transport != RTSP_TRANSPORT_RDT)
1734		✗	av_strlcat(transport, "unicast;", sizeof(transport));
1735		✗	av_strlcatf(transport, sizeof(transport),
1736			"interleaved=%d-%d",
1737			interleave, interleave + 1);
1738		✗	interleave += 2;
1739			}
1740
1741		✗	else if (lower_transport == RTSP_LOWER_TRANSPORT_UDP_MULTICAST) {
1742		✗	snprintf(transport, sizeof(transport) - 1,
1743			"%s/UDP;multicast", trans_pref);
1744			} else {
1745		✗	err = AVERROR(EINVAL);
1746		✗	goto fail; // transport would be uninitialized
1747			}
1748
1749		✗	if (s->oformat) {
1750		✗	av_strlcat(transport, ";mode=record", sizeof(transport));
1751		✗	} else if (rt->server_type == RTSP_SERVER_REAL ||
1752		✗	rt->server_type == RTSP_SERVER_WMS)
1753		✗	av_strlcat(transport, ";mode=play", sizeof(transport));
1754		✗	snprintf(cmd, sizeof(cmd),
1755			"Transport: %s\r\n",
1756			transport);
1757		✗	if (rt->accept_dynamic_rate)
1758		✗	av_strlcat(cmd, "x-Dynamic-Rate: 0\r\n", sizeof(cmd));
1759		✗	if (CONFIG_RTPDEC && i == 0 && rt->server_type == RTSP_SERVER_REAL) {
1760			char real_res[41], real_csum[9];
1761		✗	ff_rdt_calc_response_and_checksum(real_res, real_csum,
1762			real_challenge);
1763		✗	av_strlcatf(cmd, sizeof(cmd),
1764			"If-Match: %s\r\n"
1765			"RealChallenge2: %s, sd=%s\r\n",
1766		✗	rt->session_id, real_res, real_csum);
1767			}
1768		✗	ff_rtsp_send_cmd(s, "SETUP", rtsp_st->control_url, cmd, reply, NULL);
1769		✗	if (reply->status_code == 461 /* Unsupported protocol */ && i == 0) {
1770		✗	err = 1;
1771		✗	goto fail;
1772		✗	} else if (reply->status_code != RTSP_STATUS_OK ||
1773		✗	reply->nb_transports != 1) {
1774		✗	err = ff_rtsp_averror(reply->status_code, AVERROR_INVALIDDATA);
1775		✗	goto fail;
1776			}
1777
1778		✗	if (rt->server_type == RTSP_SERVER_SATIP && reply->stream_id[0]) {
1779			char proto[128], host[128], path[512], auth[128];
1780			int port;
1781		✗	av_url_split(proto, sizeof(proto), auth, sizeof(auth), host, sizeof(host),
1782		✗	&port, path, sizeof(path), rt->control_uri);
1783		✗	ff_url_join(rt->control_uri, sizeof(rt->control_uri), proto, NULL, host,
1784		✗	port, "/stream=%s", reply->stream_id);
1785			}
1786
1787			/* XXX: same protocol for all streams is required */
1788		✗	if (i > 0) {
1789		✗	if (reply->transports[0].lower_transport != rt->lower_transport ||
1790		✗	reply->transports[0].transport != rt->transport) {
1791		✗	err = AVERROR_INVALIDDATA;
1792		✗	goto fail;
1793			}
1794			} else {
1795		✗	rt->lower_transport = reply->transports[0].lower_transport;
1796		✗	rt->transport = reply->transports[0].transport;
1797			}
1798
1799			/* Fail if the server responded with another lower transport mode
1800			* than what we requested. */
1801		✗	if (reply->transports[0].lower_transport != lower_transport) {
1802		✗	av_log(s, AV_LOG_ERROR, "Nonmatching transport in server reply\n");
1803		✗	err = AVERROR_INVALIDDATA;
1804		✗	goto fail;
1805			}
1806
1807		✗	switch(reply->transports[0].lower_transport) {
1808		✗	case RTSP_LOWER_TRANSPORT_TCP:
1809		✗	rtsp_st->interleaved_min = reply->transports[0].interleaved_min;
1810		✗	rtsp_st->interleaved_max = reply->transports[0].interleaved_max;
1811		✗	break;
1812
1813		✗	case RTSP_LOWER_TRANSPORT_UDP: {
1814		✗	char url[MAX_URL_SIZE], options[30] = "";
1815		✗	const char *peer = host;
1816
1817		✗	if (rt->rtsp_flags & RTSP_FLAG_FILTER_SRC)
1818		✗	av_strlcpy(options, "?connect=1", sizeof(options));
1819			/* Use source address if specified */
1820		✗	if (reply->transports[0].source[0])
1821		✗	peer = reply->transports[0].source;
1822		✗	ff_url_join(url, sizeof(url), "rtp", NULL, peer,
1823			reply->transports[0].server_port_min, "%s", options);
1824		✗	if (!(rt->server_type == RTSP_SERVER_WMS && i > 1) &&
1825		✗	ff_rtp_set_remote_url(rtsp_st->rtp_handle, url) < 0) {
1826		✗	err = AVERROR_INVALIDDATA;
1827		✗	goto fail;
1828			}
1829		✗	break;
1830			}
1831		✗	case RTSP_LOWER_TRANSPORT_UDP_MULTICAST: {
1832		✗	char url[MAX_URL_SIZE], namebuf[50], optbuf[20] = "";
1833			struct sockaddr_storage addr;
1834			int port, ttl;
1835		✗	AVDictionary *opts = map_to_opts(rt);
1836
1837		✗	if (reply->transports[0].destination.ss_family) {
1838		✗	addr = reply->transports[0].destination;
1839		✗	port = reply->transports[0].port_min;
1840		✗	ttl = reply->transports[0].ttl;
1841			} else {
1842		✗	addr = rtsp_st->sdp_ip;
1843		✗	port = rtsp_st->sdp_port;
1844		✗	ttl = rtsp_st->sdp_ttl;
1845			}
1846		✗	if (ttl > 0)
1847		✗	snprintf(optbuf, sizeof(optbuf), "?ttl=%d", ttl);
1848		✗	getnameinfo((struct sockaddr*) &addr, sizeof(addr),
1849			namebuf, sizeof(namebuf), NULL, 0, NI_NUMERICHOST);
1850		✗	ff_url_join(url, sizeof(url), "rtp", NULL, namebuf,
1851			port, "%s", optbuf);
1852		✗	err = ffurl_open_whitelist(&rtsp_st->rtp_handle, url, AVIO_FLAG_READ_WRITE,
1853		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
1854		✗	av_dict_free(&opts);
1855
1856		✗	if (err < 0) {
1857		✗	err = AVERROR_INVALIDDATA;
1858		✗	goto fail;
1859			}
1860		✗	break;
1861			}
1862			}
1863
1864		✗	if ((err = ff_rtsp_open_transport_ctx(s, rtsp_st)))
1865		✗	goto fail;
1866			}
1867
1868		✗	if (rt->nb_rtsp_streams && reply->timeout > 0)
1869		✗	rt->timeout = reply->timeout;
1870
1871		✗	if (rt->server_type == RTSP_SERVER_REAL)
1872		✗	rt->need_subscription = 1;
1873
1874		✗	return 0;
1875
1876		✗	fail:
1877		✗	ff_rtsp_undo_setup(s, 0);
1878		✗	return err;
1879			}
1880
1881		✗	void ff_rtsp_close_connections(AVFormatContext *s)
1882			{
1883		✗	RTSPState *rt = s->priv_data;
1884		✗	if (rt->rtsp_hd_out != rt->rtsp_hd)
1885		✗	ffurl_closep(&rt->rtsp_hd_out);
1886		✗	rt->rtsp_hd_out = NULL;
1887		✗	ffurl_closep(&rt->rtsp_hd);
1888		✗	}
1889
1890		✗	static int rtsp_url_same_origin(const char *url1, const char *url2)
1891			{
1892			char proto1[128], proto2[128];
1893			char host1[1024], host2[1024];
1894			int port1, port2;
1895
1896		✗	av_url_split(proto1, sizeof(proto1), NULL, 0, host1, sizeof(host1),
1897			&port1, NULL, 0, url1);
1898		✗	av_url_split(proto2, sizeof(proto2), NULL, 0, host2, sizeof(host2),
1899			&port2, NULL, 0, url2);
1900
1901		✗	if (!proto1[0] || !proto2[0] || !host1[0] || !host2[0])
1902		✗	return 0;
1903
1904		✗	if (port1 < 0)
1905		✗	port1 = !av_strcasecmp(proto1, "rtsps") ? RTSPS_DEFAULT_PORT
1906		✗	: RTSP_DEFAULT_PORT;
1907		✗	if (port2 < 0)
1908		✗	port2 = !av_strcasecmp(proto2, "rtsps") ? RTSPS_DEFAULT_PORT
1909		✗	: RTSP_DEFAULT_PORT;
1910
1911		✗	return !av_strcasecmp(proto1, proto2) &&
1912		✗	!av_strcasecmp(host1, host2) &&
1913		✗	port1 == port2;
1914			}
1915
1916		✗	static int rtsp_control_interrupt_cb(void *opaque)
1917			{
1918		✗	AVFormatContext *s = opaque;
1919		✗	RTSPState *rt = s->priv_data;
1920
1921			/* While closing, a pending user interrupt must not prevent TEARDOWN from
1922			* being sent and its reply from being read; bound the wait instead. */
1923		✗	if (rt->teardown_deadline)
1924		✗	return av_gettime_relative() >= rt->teardown_deadline;
1925
1926		✗	return ff_check_interrupt(&s->interrupt_callback);
1927			}
1928
1929		✗	int ff_rtsp_connect(AVFormatContext *s)
1930			{
1931		✗	RTSPState *rt = s->priv_data;
1932			char proto[128], host[1024], path[2048];
1933			char tcpname[1024], cmd[MAX_URL_SIZE], auth[128];
1934		✗	const char *lower_rtsp_proto = "tcp";
1935			int port, err, tcp_fd;
1936		✗	RTSPMessageHeader reply1, *reply = &reply1;
1937		✗	int lower_transport_mask = 0;
1938		✗	int redirects = 0;
1939		✗	int default_port = RTSP_DEFAULT_PORT;
1940		✗	int https_tunnel = 0;
1941		✗	char real_challenge[64] = "";
1942			struct sockaddr_storage peer;
1943		✗	socklen_t peer_len = sizeof(peer);
1944
1945		✗	rt->stored_msg.expected_seq = -1;
1946		✗	rt->control_interrupt_cb.callback = rtsp_control_interrupt_cb;
1947		✗	rt->control_interrupt_cb.opaque = s;
1948		✗	if (rt->rtp_port_max < rt->rtp_port_min) {
1949		✗	av_log(s, AV_LOG_ERROR, "Invalid UDP port range, max port %d less "
1950			"than min port %d\n", rt->rtp_port_max,
1951			rt->rtp_port_min);
1952		✗	return AVERROR(EINVAL);
1953			}
1954
1955		✗	if ((err = ff_network_init()) < 0)
1956		✗	return err;
1957
1958		✗	if (s->max_delay < 0) /* Not set by the caller */
1959		✗	s->max_delay = s->iformat ? DEFAULT_REORDERING_DELAY : 0;
1960
1961		✗	rt->control_transport = RTSP_MODE_PLAIN;
1962		✗	if (rt->lower_transport_mask & ((1 << RTSP_LOWER_TRANSPORT_HTTP) |
1963			(1 << RTSP_LOWER_TRANSPORT_HTTPS))) {
1964		✗	https_tunnel = !!(rt->lower_transport_mask & (1 << RTSP_LOWER_TRANSPORT_HTTPS));
1965		✗	rt->lower_transport_mask = 1 << RTSP_LOWER_TRANSPORT_TCP;
1966		✗	rt->control_transport = RTSP_MODE_TUNNEL;
1967			}
1968			/* Only pass through valid flags from here */
1969		✗	rt->lower_transport_mask &= (1 << RTSP_LOWER_TRANSPORT_NB) - 1;
1970
1971		✗	redirect:
1972		✗	memset(&reply1, 0, sizeof(reply1));
1973			/* extract hostname and port */
1974		✗	av_url_split(proto, sizeof(proto), auth, sizeof(auth),
1975		✗	host, sizeof(host), &port, path, sizeof(path), s->url);
1976
1977		✗	if (!strcmp(proto, "rtsps")) {
1978		✗	lower_rtsp_proto = "tls";
1979		✗	default_port = RTSPS_DEFAULT_PORT;
1980		✗	rt->lower_transport_mask = 1 << RTSP_LOWER_TRANSPORT_TCP;
1981		✗	} else if (!strcmp(proto, "satip")) {
1982		✗	av_strlcpy(proto, "rtsp", sizeof(proto));
1983		✗	rt->server_type = RTSP_SERVER_SATIP;
1984		✗	} else if (strcmp(proto, "rtsp"))
1985		✗	return AVERROR_INVALIDDATA;
1986
1987		✗	if (*auth) {
1988		✗	av_strlcpy(rt->auth, auth, sizeof(rt->auth));
1989			}
1990		✗	if (port < 0)
1991		✗	port = default_port;
1992
1993		✗	lower_transport_mask = rt->lower_transport_mask;
1994
1995		✗	if (!lower_transport_mask)
1996		✗	lower_transport_mask = (1 << RTSP_LOWER_TRANSPORT_NB) - 1;
1997
1998		✗	if (s->oformat) {
1999			/* Only UDP or TCP - UDP multicast isn't supported. */
2000		✗	lower_transport_mask &= (1 << RTSP_LOWER_TRANSPORT_UDP) |
2001			(1 << RTSP_LOWER_TRANSPORT_TCP);
2002		✗	if (!lower_transport_mask || rt->control_transport == RTSP_MODE_TUNNEL) {
2003		✗	av_log(s, AV_LOG_ERROR, "Unsupported lower transport method, "
2004			"only UDP and TCP are supported for output.\n");
2005		✗	err = AVERROR(EINVAL);
2006		✗	goto fail;
2007			}
2008			}
2009
2010			/* Construct the URI used in request; this is similar to s->url,
2011			* but with authentication credentials removed and RTSP specific options
2012			* stripped out. */
2013		✗	ff_url_join(rt->control_uri, sizeof(rt->control_uri), proto, NULL,
2014			host, port, "%s", path);
2015
2016		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
2017			/* set up initial handshake for tunneling */
2018			char httpname[1024];
2019			char sessioncookie[17];
2020			char headers[1024];
2021		✗	AVDictionary *options = NULL;
2022
2023		✗	av_dict_set_int(&options, "timeout", rt->stimeout, 0);
2024		✗	if (https_tunnel) {
2025		✗	int ret = copy_tls_opts_dict(rt, &options);
2026		✗	if (ret < 0) {
2027		✗	av_dict_free(&options);
2028		✗	err = ret;
2029		✗	goto fail;
2030			}
2031			}
2032
2033		✗	ff_url_join(httpname, sizeof(httpname), https_tunnel ? "https" : "http", auth, host, port, "%s", path);
2034		✗	snprintf(sessioncookie, sizeof(sessioncookie), "%08x%08x",
2035			av_get_random_seed(), av_get_random_seed());
2036
2037			/* GET requests */
2038		✗	if (ffurl_alloc(&rt->rtsp_hd, httpname, AVIO_FLAG_READ,
2039		✗	&rt->control_interrupt_cb) < 0) {
2040		✗	av_dict_free(&options);
2041		✗	err = AVERROR(EIO);
2042		✗	goto fail;
2043			}
2044
2045			/* generate GET headers */
2046		✗	snprintf(headers, sizeof(headers),
2047			"x-sessioncookie: %s\r\n"
2048			"Accept: application/x-rtsp-tunnelled\r\n"
2049			"Pragma: no-cache\r\n"
2050			"Cache-Control: no-cache\r\n",
2051			sessioncookie);
2052		✗	av_opt_set(rt->rtsp_hd->priv_data, "headers", headers, 0);
2053
2054		✗	if (!rt->rtsp_hd->protocol_whitelist && s->protocol_whitelist) {
2055		✗	rt->rtsp_hd->protocol_whitelist = av_strdup(s->protocol_whitelist);
2056		✗	if (!rt->rtsp_hd->protocol_whitelist) {
2057		✗	av_dict_free(&options);
2058		✗	err = AVERROR(ENOMEM);
2059		✗	goto fail;
2060			}
2061			}
2062
2063		✗	if (!rt->rtsp_hd->protocol_blacklist && s->protocol_blacklist) {
2064		✗	rt->rtsp_hd->protocol_blacklist = av_strdup(s->protocol_blacklist);
2065		✗	if (!rt->rtsp_hd->protocol_blacklist) {
2066		✗	av_dict_free(&options);
2067		✗	err = AVERROR(ENOMEM);
2068		✗	goto fail;
2069			}
2070			}
2071
2072			/* complete the connection */
2073		✗	if (ffurl_connect(rt->rtsp_hd, &options)) {
2074		✗	av_dict_free(&options);
2075		✗	err = AVERROR(EIO);
2076		✗	goto fail;
2077			}
2078
2079			/* POST requests */
2080		✗	if (ffurl_alloc(&rt->rtsp_hd_out, httpname, AVIO_FLAG_WRITE,
2081		✗	&rt->control_interrupt_cb) < 0 ) {
2082		✗	av_dict_free(&options);
2083		✗	err = AVERROR(EIO);
2084		✗	goto fail;
2085			}
2086
2087			/* generate POST headers */
2088		✗	snprintf(headers, sizeof(headers),
2089			"x-sessioncookie: %s\r\n"
2090			"Content-Type: application/x-rtsp-tunnelled\r\n"
2091			"Pragma: no-cache\r\n"
2092			"Cache-Control: no-cache\r\n"
2093			"Content-Length: 32767\r\n"
2094			"Expires: Sun, 9 Jan 1972 00:00:00 GMT\r\n",
2095			sessioncookie);
2096		✗	av_opt_set(rt->rtsp_hd_out->priv_data, "headers", headers, 0);
2097		✗	av_opt_set(rt->rtsp_hd_out->priv_data, "chunked_post", "0", 0);
2098		✗	av_opt_set(rt->rtsp_hd_out->priv_data, "send_expect_100", "0", 0);
2099
2100			/* Initialize the authentication state for the POST session. The HTTP
2101			* protocol implementation doesn't properly handle multi-pass
2102			* authentication for POST requests, since it would require one of
2103			* the following:
2104			* - implementing Expect: 100-continue, which many HTTP servers
2105			* don't support anyway, even less the RTSP servers that do HTTP
2106			* tunneling
2107			* - sending the whole POST data until getting a 401 reply specifying
2108			* what authentication method to use, then resending all that data
2109			* - waiting for potential 401 replies directly after sending the
2110			* POST header (waiting for some unspecified time)
2111			* Therefore, we copy the full auth state, which works for both basic
2112			* and digest. (For digest, we would have to synchronize the nonce
2113			* count variable between the two sessions, if we'd do more requests
2114			* with the original session, though.)
2115			*/
2116		✗	ff_http_init_auth_state(rt->rtsp_hd_out, rt->rtsp_hd);
2117
2118			/* complete the connection */
2119		✗	if (ffurl_connect(rt->rtsp_hd_out, &options)) {
2120		✗	av_dict_free(&options);
2121		✗	err = AVERROR(EIO);
2122		✗	goto fail;
2123			}
2124		✗	av_dict_free(&options);
2125			} else {
2126			int ret;
2127			/* open the tcp connection */
2128		✗	AVDictionary *proto_opts = NULL;
2129		✗	if (strcmp("tls", lower_rtsp_proto) == 0) {
2130		✗	ret = copy_tls_opts_dict(rt, &proto_opts);
2131		✗	if (ret < 0) {
2132		✗	av_dict_free(&proto_opts);
2133		✗	err = ret;
2134		✗	goto fail;
2135			}
2136			}
2137
2138		✗	ff_url_join(tcpname, sizeof(tcpname), lower_rtsp_proto, NULL,
2139			host, port,
2140			"?timeout=%"PRId64, rt->stimeout);
2141		✗	if ((ret = ffurl_open_whitelist(&rt->rtsp_hd, tcpname, AVIO_FLAG_READ_WRITE,
2142		✗	&rt->control_interrupt_cb, &proto_opts, s->protocol_whitelist, s->protocol_blacklist, NULL)) < 0) {
2143		✗	av_dict_free(&proto_opts);
2144		✗	err = ret;
2145		✗	goto fail;
2146			}
2147		✗	av_dict_free(&proto_opts);
2148		✗	rt->rtsp_hd_out = rt->rtsp_hd;
2149			}
2150		✗	rt->seq = 0;
2151
2152		✗	tcp_fd = ffurl_get_file_handle(rt->rtsp_hd);
2153		✗	if (tcp_fd < 0) {
2154		✗	err = tcp_fd;
2155		✗	goto fail;
2156			}
2157		✗	if (!getpeername(tcp_fd, (struct sockaddr*) &peer, &peer_len)) {
2158		✗	getnameinfo((struct sockaddr*) &peer, peer_len, host, sizeof(host),
2159			NULL, 0, NI_NUMERICHOST);
2160			}
2161
2162			/* request options supported by the server; this also detects server
2163			* type */
2164		✗	if (rt->server_type != RTSP_SERVER_SATIP)
2165		✗	rt->server_type = RTSP_SERVER_RTP;
2166			for (;;) {
2167		✗	cmd[0] = 0;
2168		✗	if (rt->server_type == RTSP_SERVER_REAL)
2169		✗	av_strlcat(cmd,
2170			/*
2171			* The following entries are required for proper
2172			* streaming from a Realmedia server. They are
2173			* interdependent in some way although we currently
2174			* don't quite understand how. Values were copied
2175			* from mplayer SVN r23589.
2176			* ClientChallenge is a 16-byte ID in hex
2177			* CompanyID is a 16-byte ID in base64
2178			*/
2179			"ClientChallenge: 9e26d33f2984236010ef6253fb1887f7\r\n"
2180			"PlayerStarttime: [28/03/2003:22:50:23 00:00]\r\n"
2181			"CompanyID: KnKV4M4I/B2FjJ1TToLycw==\r\n"
2182			"GUID: 00000000-0000-0000-0000-000000000000\r\n",
2183			sizeof(cmd));
2184		✗	ff_rtsp_send_cmd(s, "OPTIONS", rt->control_uri, cmd, reply, NULL);
2185		✗	if (reply->status_code != RTSP_STATUS_OK) {
2186		✗	err = ff_rtsp_averror(reply->status_code, AVERROR_INVALIDDATA);
2187		✗	goto fail;
2188			}
2189
2190			/* detect server type if not standard-compliant RTP */
2191		✗	if (rt->server_type != RTSP_SERVER_REAL && reply->real_challenge[0]) {
2192		✗	rt->server_type = RTSP_SERVER_REAL;
2193		✗	continue;
2194		✗	} else if (!av_strncasecmp(reply->server, "WMServer/", 9)) {
2195		✗	rt->server_type = RTSP_SERVER_WMS;
2196		✗	} else if (rt->server_type == RTSP_SERVER_REAL)
2197		✗	strcpy(real_challenge, reply->real_challenge);
2198		✗	break;
2199			}
2200
2201			#if CONFIG_RTSP_DEMUXER
2202		✗	if (s->iformat) {
2203		✗	if (rt->server_type == RTSP_SERVER_SATIP)
2204		✗	err = init_satip_stream(s);
2205			else
2206		✗	err = ff_rtsp_setup_input_streams(s, reply);
2207			} else
2208			#endif
2209			if (CONFIG_RTSP_MUXER)
2210		✗	err = ff_rtsp_setup_output_streams(s, host);
2211			else
2212			av_unreachable("Either muxer or demuxer must be enabled");
2213		✗	if (err)
2214		✗	goto fail;
2215
2216			do {
2217		✗	int lower_transport = ff_log2_tab[lower_transport_mask &
2218		✗	~(lower_transport_mask - 1)];
2219
2220		✗	if ((lower_transport_mask & (1 << RTSP_LOWER_TRANSPORT_TCP))
2221		✗	&& (rt->rtsp_flags & RTSP_FLAG_PREFER_TCP))
2222		✗	lower_transport = RTSP_LOWER_TRANSPORT_TCP;
2223
2224		✗	err = ff_rtsp_make_setup_request(s, host, port, lower_transport,
2225		✗	rt->server_type == RTSP_SERVER_REAL ?
2226			real_challenge : NULL);
2227		✗	if (err < 0)
2228		✗	goto fail;
2229		✗	lower_transport_mask &= ~(1 << lower_transport);
2230		✗	if (lower_transport_mask == 0 && err == 1) {
2231		✗	err = AVERROR(EPROTONOSUPPORT);
2232		✗	goto fail;
2233			}
2234		✗	} while (err);
2235
2236		✗	rt->lower_transport_mask = lower_transport_mask;
2237		✗	av_strlcpy(rt->real_challenge, real_challenge, sizeof(rt->real_challenge));
2238		✗	rt->state = RTSP_STATE_IDLE;
2239		✗	rt->seek_timestamp = 0; /* default is to start stream at position zero */
2240		✗	return 0;
2241		✗	fail:
2242		✗	ff_rtsp_close_streams(s);
2243		✗	ff_rtsp_close_connections(s);
2244		✗	if (reply->status_code >=300 && reply->status_code < 400 && s->iformat) {
2245			int ret;
2246
2247		✗	if (redirects++ >= 8 /* MAX_RTSP_REDIRECTS */) {
2248		✗	av_log(s, AV_LOG_ERROR, "Too many RTSP redirects\n");
2249		✗	err = AVERROR(EIO);
2250		✗	goto fail2;
2251			}
2252		✗	if (!rtsp_url_same_origin(s->url, reply->location)) {
2253		✗	memset(rt->auth, 0, sizeof(rt->auth));
2254		✗	memset(&rt->auth_state, 0, sizeof(rt->auth_state));
2255			}
2256		✗	ret = ff_format_check_set_url(s, reply->location);
2257		✗	if (ret < 0) {
2258		✗	err = ret;
2259		✗	goto fail2;
2260			}
2261		✗	rt->session_id[0] = '\0';
2262		✗	av_log(s, AV_LOG_INFO, "Status %d: Redirecting to %s\n",
2263		✗	reply->status_code,
2264			s->url);
2265		✗	goto redirect;
2266			}
2267		✗	fail2:
2268		✗	ff_network_close();
2269		✗	return err;
2270			}
2271			#endif /* CONFIG_RTSP_DEMUXER || CONFIG_RTSP_MUXER */
2272
2273			#if CONFIG_RTPDEC
2274			#if CONFIG_RTSP_DEMUXER
2275		✗	static int parse_rtsp_message(AVFormatContext *s)
2276			{
2277		✗	RTSPState *rt = s->priv_data;
2278			int ret;
2279
2280		✗	if (rt->rtsp_flags & RTSP_FLAG_LISTEN) {
2281		✗	if (rt->state == RTSP_STATE_STREAMING) {
2282		✗	return ff_rtsp_parse_streaming_commands(s);
2283			} else
2284		✗	return AVERROR_EOF;
2285			} else {
2286			RTSPMessageHeader reply;
2287		✗	ret = ff_rtsp_read_reply(s, &reply, NULL, 0, NULL);
2288		✗	if (ret < 0)
2289		✗	return ret;
2290			/* XXX: parse message */
2291		✗	if (rt->state != RTSP_STATE_STREAMING)
2292		✗	return 0;
2293			}
2294
2295		✗	return 0;
2296			}
2297			#endif
2298
2299		✗	static int udp_read_packet(AVFormatContext *s, RTSPStream **prtsp_st,
2300			uint8_t *buf, int buf_size, int64_t wait_end)
2301			{
2302		✗	RTSPState *rt = s->priv_data;
2303			RTSPStream *rtsp_st;
2304			int n, i, ret;
2305		✗	struct pollfd *p = rt->p;
2306		✗	int *fds = NULL, fdsnum, fdsidx;
2307		✗	int64_t runs = rt->stimeout / POLLING_TIME / 1000;
2308
2309		✗	if (!p) {
2310		✗	p = rt->p = av_malloc_array(2 * rt->nb_rtsp_streams + 1, sizeof(*p));
2311		✗	if (!p)
2312		✗	return AVERROR(ENOMEM);
2313
2314		✗	if (rt->rtsp_hd) {
2315		✗	p[rt->max_p].fd = ffurl_get_file_handle(rt->rtsp_hd);
2316		✗	p[rt->max_p++].events = POLLIN;
2317			}
2318		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2319		✗	rtsp_st = rt->rtsp_streams[i];
2320		✗	if (rtsp_st->rtp_handle) {
2321		✗	if (ret = ffurl_get_multi_file_handle(rtsp_st->rtp_handle,
2322			&fds, &fdsnum)) {
2323		✗	av_log(s, AV_LOG_ERROR, "Unable to recover rtp ports\n");
2324		✗	return ret;
2325			}
2326		✗	if (fdsnum != 2) {
2327		✗	av_log(s, AV_LOG_ERROR,
2328			"Number of fds %d not supported\n", fdsnum);
2329		✗	av_freep(&fds);
2330		✗	return AVERROR_INVALIDDATA;
2331			}
2332		✗	for (fdsidx = 0; fdsidx < fdsnum; fdsidx++) {
2333		✗	p[rt->max_p].fd = fds[fdsidx];
2334		✗	p[rt->max_p++].events = POLLIN;
2335			}
2336		✗	av_freep(&fds);
2337			}
2338			}
2339			}
2340
2341			for (;;) {
2342		✗	if (ff_check_interrupt(&s->interrupt_callback))
2343		✗	return AVERROR_EXIT;
2344		✗	if (wait_end && wait_end - av_gettime_relative() < 0)
2345		✗	return AVERROR(EAGAIN);
2346		✗	n = poll(p, rt->max_p, POLLING_TIME);
2347		✗	if (n > 0) {
2348		✗	int j = rt->rtsp_hd ? 1 : 0;
2349		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2350		✗	rtsp_st = rt->rtsp_streams[i];
2351		✗	if (rtsp_st->rtp_handle) {
2352		✗	if (p[j].revents & POLLIN || p[j+1].revents & POLLIN) {
2353		✗	ret = ffurl_read(rtsp_st->rtp_handle, buf, buf_size);
2354		✗	if (ret > 0) {
2355		✗	*prtsp_st = rtsp_st;
2356		✗	return ret;
2357			}
2358			}
2359		✗	j+=2;
2360			}
2361			}
2362			#if CONFIG_RTSP_DEMUXER
2363		✗	if (rt->rtsp_hd && p[0].revents & POLLIN) {
2364		✗	if ((ret = parse_rtsp_message(s)) < 0) {
2365		✗	return ret;
2366			}
2367			}
2368			#endif
2369		✗	} else if (n == 0 && rt->stimeout > 0 && --runs <= 0) {
2370		✗	return AVERROR(ETIMEDOUT);
2371		✗	} else if (n < 0 && errno != EINTR)
2372		✗	return AVERROR(errno);
2373			}
2374			}
2375
2376		✗	static int pick_stream(AVFormatContext *s, RTSPStream **rtsp_st,
2377			const uint8_t *buf, int len)
2378			{
2379		✗	RTSPState *rt = s->priv_data;
2380			int i;
2381		✗	if (len < 0)
2382		✗	return len;
2383		✗	if (rt->nb_rtsp_streams == 1) {
2384		✗	*rtsp_st = rt->rtsp_streams[0];
2385		✗	return len;
2386			}
2387		✗	if (len >= 8 && rt->transport == RTSP_TRANSPORT_RTP) {
2388		✗	if (RTP_PT_IS_RTCP(rt->recvbuf[1])) {
2389		✗	int no_ssrc = 0;
2390		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2391		✗	RTPDemuxContext *rtpctx = rt->rtsp_streams[i]->transport_priv;
2392		✗	if (!rtpctx)
2393		✗	continue;
2394		✗	if (rtpctx->ssrc == AV_RB32(&buf[4])) {
2395		✗	*rtsp_st = rt->rtsp_streams[i];
2396		✗	return len;
2397			}
2398		✗	if (!rtpctx->ssrc)
2399		✗	no_ssrc = 1;
2400			}
2401		✗	if (no_ssrc) {
2402		✗	av_log(s, AV_LOG_WARNING,
2403			"Unable to pick stream for packet - SSRC not known for "
2404			"all streams\n");
2405		✗	return AVERROR(EAGAIN);
2406			}
2407			} else {
2408		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2409		✗	if ((buf[1] & 0x7f) == rt->rtsp_streams[i]->sdp_payload_type) {
2410		✗	*rtsp_st = rt->rtsp_streams[i];
2411		✗	return len;
2412			}
2413			}
2414			}
2415			}
2416		✗	av_log(s, AV_LOG_WARNING, "Unable to pick stream for packet\n");
2417		✗	return AVERROR(EAGAIN);
2418			}
2419
2420		✗	static int read_packet(AVFormatContext *s,
2421			RTSPStream **rtsp_st, RTSPStream *first_queue_st,
2422			int64_t wait_end)
2423			{
2424		✗	RTSPState *rt = s->priv_data;
2425			int len;
2426
2427		✗	switch(rt->lower_transport) {
2428		✗	default:
2429			#if CONFIG_RTSP_DEMUXER
2430			case RTSP_LOWER_TRANSPORT_TCP:
2431		✗	len = ff_rtsp_tcp_read_packet(s, rtsp_st, rt->recvbuf, RECVBUF_SIZE);
2432		✗	break;
2433			#endif
2434		✗	case RTSP_LOWER_TRANSPORT_UDP:
2435			case RTSP_LOWER_TRANSPORT_UDP_MULTICAST:
2436		✗	len = udp_read_packet(s, rtsp_st, rt->recvbuf, RECVBUF_SIZE, wait_end);
2437		✗	if (len > 0 && (*rtsp_st)->transport_priv && rt->transport == RTSP_TRANSPORT_RTP)
2438		✗	ff_rtp_check_and_send_back_rr((*rtsp_st)->transport_priv, (*rtsp_st)->rtp_handle, NULL, len);
2439		✗	break;
2440		✗	case RTSP_LOWER_TRANSPORT_CUSTOM:
2441		✗	if (first_queue_st && rt->transport == RTSP_TRANSPORT_RTP &&
2442		✗	wait_end && wait_end < av_gettime_relative())
2443		✗	len = AVERROR(EAGAIN);
2444			else
2445		✗	len = avio_read_partial(s->pb, rt->recvbuf, RECVBUF_SIZE);
2446		✗	len = pick_stream(s, rtsp_st, rt->recvbuf, len);
2447		✗	if (len > 0 && (*rtsp_st)->transport_priv && rt->transport == RTSP_TRANSPORT_RTP)
2448		✗	ff_rtp_check_and_send_back_rr((*rtsp_st)->transport_priv, NULL, s->pb, len);
2449		✗	break;
2450			}
2451
2452		✗	if (len == 0)
2453		✗	return AVERROR_EOF;
2454
2455		✗	return len;
2456			}
2457
2458		✗	int ff_rtsp_fetch_packet(AVFormatContext *s, AVPacket *pkt)
2459			{
2460		✗	RTSPState *rt = s->priv_data;
2461			int ret, len;
2462		✗	RTSPStream *rtsp_st, *first_queue_st = NULL;
2463		✗	int64_t wait_end = 0;
2464
2465		✗	if (rt->nb_byes == rt->nb_rtsp_streams)
2466		✗	return AVERROR_EOF;
2467
2468			/* get next frames from the same RTP packet */
2469		✗	if (rt->cur_transport_priv) {
2470		✗	if (rt->transport == RTSP_TRANSPORT_RDT) {
2471		✗	ret = ff_rdt_parse_packet(rt->cur_transport_priv, pkt, NULL, 0);
2472		✗	} else if (rt->transport == RTSP_TRANSPORT_RTP) {
2473		✗	ret = ff_rtp_parse_packet(rt->cur_transport_priv, pkt, NULL, 0);
2474		✗	} else if (CONFIG_RTPDEC && rt->ts) {
2475		✗	ret = avpriv_mpegts_parse_packet(rt->ts, pkt, rt->recvbuf + rt->recvbuf_pos, rt->recvbuf_len - rt->recvbuf_pos);
2476		✗	if (ret >= 0) {
2477		✗	rt->recvbuf_pos += ret;
2478		✗	ret = rt->recvbuf_pos < rt->recvbuf_len;
2479			}
2480			} else
2481		✗	ret = -1;
2482		✗	if (ret == 0) {
2483		✗	rt->cur_transport_priv = NULL;
2484		✗	return 0;
2485		✗	} else if (ret == 1) {
2486		✗	return 0;
2487			} else
2488		✗	rt->cur_transport_priv = NULL;
2489			}
2490
2491		✗	redo:
2492		✗	if (rt->transport == RTSP_TRANSPORT_RTP) {
2493			int i;
2494		✗	int64_t first_queue_time = 0;
2495		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2496		✗	RTPDemuxContext *rtpctx = rt->rtsp_streams[i]->transport_priv;
2497			int64_t queue_time;
2498		✗	if (!rtpctx)
2499		✗	continue;
2500		✗	queue_time = ff_rtp_queued_packet_time(rtpctx);
2501		✗	if (queue_time && (queue_time - first_queue_time < 0 ||
2502			!first_queue_time)) {
2503		✗	first_queue_time = queue_time;
2504		✗	first_queue_st = rt->rtsp_streams[i];
2505			}
2506			}
2507		✗	if (first_queue_time) {
2508		✗	wait_end = first_queue_time + s->max_delay;
2509			} else {
2510		✗	wait_end = 0;
2511		✗	first_queue_st = NULL;
2512			}
2513			}
2514
2515			/* read next RTP packet */
2516		✗	if (!rt->recvbuf) {
2517		✗	rt->recvbuf = av_malloc(RECVBUF_SIZE);
2518		✗	if (!rt->recvbuf)
2519		✗	return AVERROR(ENOMEM);
2520			}
2521
2522		✗	len = read_packet(s, &rtsp_st, first_queue_st, wait_end);
2523		✗	if (len == AVERROR(EAGAIN) && first_queue_st &&
2524		✗	rt->transport == RTSP_TRANSPORT_RTP) {
2525		✗	av_log(s, AV_LOG_WARNING,
2526			"max delay reached. need to consume packet\n");
2527		✗	rtsp_st = first_queue_st;
2528		✗	ret = ff_rtp_parse_packet(rtsp_st->transport_priv, pkt, NULL, 0);
2529		✗	goto end;
2530			}
2531		✗	if (len < 0)
2532		✗	return len;
2533
2534		✗	if (rt->transport == RTSP_TRANSPORT_RDT) {
2535		✗	ret = ff_rdt_parse_packet(rtsp_st->transport_priv, pkt, &rt->recvbuf, len);
2536		✗	} else if (rt->transport == RTSP_TRANSPORT_RTP) {
2537		✗	ret = ff_rtp_parse_packet(rtsp_st->transport_priv, pkt, &rt->recvbuf, len);
2538		✗	if (rtsp_st->feedback) {
2539		✗	AVIOContext *pb = NULL;
2540		✗	if (rt->lower_transport == RTSP_LOWER_TRANSPORT_CUSTOM)
2541		✗	pb = s->pb;
2542		✗	ff_rtp_send_rtcp_feedback(rtsp_st->transport_priv, rtsp_st->rtp_handle, pb);
2543			}
2544		✗	if (ret < 0) {
2545			/* Either bad packet, or a RTCP packet. Check if the
2546			* first_rtcp_ntp_time field was initialized. */
2547		✗	RTPDemuxContext *rtpctx = rtsp_st->transport_priv;
2548		✗	if (rtpctx->first_rtcp_ntp_time != AV_NOPTS_VALUE) {
2549			/* first_rtcp_ntp_time has been initialized for this stream,
2550			* copy the same value to all other uninitialized streams,
2551			* in order to map their timestamp origin to the same ntp time
2552			* as this one. */
2553			int i;
2554		✗	AVStream *st = NULL;
2555		✗	if (rtsp_st->stream_index >= 0)
2556		✗	st = s->streams[rtsp_st->stream_index];
2557		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2558		✗	RTPDemuxContext *rtpctx2 = rt->rtsp_streams[i]->transport_priv;
2559		✗	AVStream *st2 = NULL;
2560		✗	if (rt->rtsp_streams[i]->stream_index >= 0)
2561		✗	st2 = s->streams[rt->rtsp_streams[i]->stream_index];
2562		✗	if (rtpctx2 && st && st2 &&
2563		✗	rtpctx2->first_rtcp_ntp_time == AV_NOPTS_VALUE) {
2564		✗	rtpctx2->first_rtcp_ntp_time = rtpctx->first_rtcp_ntp_time;
2565		✗	rtpctx2->rtcp_ts_offset = av_rescale_q(
2566			rtpctx->rtcp_ts_offset, st->time_base,
2567			st2->time_base);
2568			}
2569			}
2570			// Make real NTP start time available in AVFormatContext
2571		✗	if (s->start_time_realtime == AV_NOPTS_VALUE) {
2572		✗	s->start_time_realtime = ff_parse_ntp_time(rtpctx->first_rtcp_ntp_time) - NTP_OFFSET_US;
2573		✗	if (rtpctx->st) {
2574		✗	s->start_time_realtime -=
2575		✗	av_rescale_q (rtpctx->rtcp_ts_offset, rtpctx->st->time_base, AV_TIME_BASE_Q);
2576			}
2577			}
2578			}
2579		✗	if (ret == -RTCP_BYE) {
2580		✗	rt->nb_byes++;
2581
2582		✗	av_log(s, AV_LOG_DEBUG, "Received BYE for stream %d (%d/%d)\n",
2583		✗	rtsp_st->stream_index, rt->nb_byes, rt->nb_rtsp_streams);
2584
2585		✗	if (rt->nb_byes == rt->nb_rtsp_streams)
2586		✗	return AVERROR_EOF;
2587			}
2588			}
2589		✗	} else if (CONFIG_RTPDEC && rt->ts) {
2590		✗	ret = avpriv_mpegts_parse_packet(rt->ts, pkt, rt->recvbuf, len);
2591		✗	if (ret >= 0) {
2592		✗	if (ret < len) {
2593		✗	rt->recvbuf_len = len;
2594		✗	rt->recvbuf_pos = ret;
2595		✗	rt->cur_transport_priv = rt->ts;
2596		✗	return 1;
2597			} else {
2598		✗	ret = 0;
2599			}
2600			}
2601			} else {
2602		✗	return AVERROR_INVALIDDATA;
2603			}
2604		✗	end:
2605		✗	if (ret < 0)
2606		✗	goto redo;
2607		✗	if (ret == 1)
2608			/* more packets may follow, so we save the RTP context */
2609		✗	rt->cur_transport_priv = rtsp_st->transport_priv;
2610
2611		✗	return ret;
2612			}
2613			#endif /* CONFIG_RTPDEC */
2614
2615			#if CONFIG_SDP_DEMUXER
2616		8152	static int sdp_probe(const AVProbeData *p1)
2617			{
2618		8152	const char *p = p1->buf, *p_end = p1->buf + p1->buf_size;
2619
2620			/* we look for a line beginning "c=IN IP" */
2621	3/4 ✓ Branch 0 taken 797652 times. ✗ Branch 1 not taken. ✓ Branch 2 taken 793143 times. ✓ Branch 3 taken 4509 times.	797652	while (p < p_end && *p != '\0') {
2622	3/4 ✓ Branch 0 taken 792979 times. ✓ Branch 1 taken 164 times. ✗ Branch 2 not taken. ✓ Branch 3 taken 792979 times.	1586122	if (sizeof("c=IN IP") - 1 < p_end - p &&
2623		792979	av_strstart(p, "c=IN IP", NULL))
2624		✗	return AVPROBE_SCORE_EXTENSION;
2625
2626	4/4 ✓ Branch 0 taken 127265560 times. ✓ Branch 1 taken 3643 times. ✓ Branch 2 taken 126476060 times. ✓ Branch 3 taken 789500 times.	127269203	while (p < p_end - 1 && *p != '\n') p++;
2627	2/2 ✓ Branch 0 taken 3643 times. ✓ Branch 1 taken 789500 times.	793143	if (++p >= p_end)
2628		3643	break;
2629	2/2 ✓ Branch 0 taken 4562 times. ✓ Branch 1 taken 784938 times.	789500	if (*p == '\r')
2630		4562	p++;
2631			}
2632		8152	return 0;
2633			}
2634
2635		✗	static void append_source_addrs(char *buf, int size, const char *name,
2636			int count, struct RTSPSource **addrs)
2637			{
2638			int i;
2639		✗	if (!count)
2640		✗	return;
2641		✗	av_strlcatf(buf, size, "&%s=%s", name, addrs[0]->addr);
2642		✗	for (i = 1; i < count; i++)
2643		✗	av_strlcatf(buf, size, ",%s", addrs[i]->addr);
2644			}
2645
2646		✗	static int sdp_read_header(AVFormatContext *s)
2647			{
2648		✗	RTSPState *rt = s->priv_data;
2649			RTSPStream *rtsp_st;
2650			int i, err;
2651			char url[MAX_URL_SIZE];
2652			AVBPrint bp;
2653
2654		✗	if ((err = ff_network_init()) < 0)
2655		✗	return err;
2656
2657		✗	if (s->max_delay < 0) /* Not set by the caller */
2658		✗	s->max_delay = DEFAULT_REORDERING_DELAY;
2659		✗	if (rt->rtsp_flags & RTSP_FLAG_CUSTOM_IO)
2660		✗	rt->lower_transport = RTSP_LOWER_TRANSPORT_CUSTOM;
2661
2662			/* read the whole sdp file */
2663		✗	av_bprint_init(&bp, 0, AV_BPRINT_SIZE_UNLIMITED);
2664		✗	err = avio_read_to_bprint(s->pb, &bp, INT_MAX);
2665		✗	if (err < 0 ) {
2666		✗	ff_network_close();
2667		✗	av_bprint_finalize(&bp, NULL);
2668		✗	return err;
2669			}
2670		✗	err = ff_sdp_parse(s, bp.str);
2671		✗	av_bprint_finalize(&bp, NULL);
2672		✗	if (err) goto fail;
2673
2674			/* open each RTP stream */
2675		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2676			char namebuf[50];
2677		✗	rtsp_st = rt->rtsp_streams[i];
2678
2679		✗	if (!(rt->rtsp_flags & RTSP_FLAG_CUSTOM_IO)) {
2680		✗	AVDictionary *opts = map_to_opts(rt);
2681			char buf[MAX_URL_SIZE];
2682			const char *p;
2683
2684		✗	err = getnameinfo((struct sockaddr*) &rtsp_st->sdp_ip,
2685			sizeof(rtsp_st->sdp_ip),
2686			namebuf, sizeof(namebuf), NULL, 0, NI_NUMERICHOST);
2687		✗	if (err) {
2688		✗	av_log(s, AV_LOG_ERROR, "getnameinfo: %s\n", gai_strerror(err));
2689		✗	err = AVERROR(EIO);
2690		✗	av_dict_free(&opts);
2691		✗	goto fail;
2692			}
2693		✗	ff_url_join(url, sizeof(url), "rtp", NULL,
2694			namebuf, rtsp_st->sdp_port,
2695			"?localrtpport=%d&ttl=%d&connect=%d&write_to_source=%d",
2696			rtsp_st->sdp_port, rtsp_st->sdp_ttl,
2697		✗	rt->rtsp_flags & RTSP_FLAG_FILTER_SRC ? 1 : 0,
2698		✗	rt->rtsp_flags & RTSP_FLAG_RTCP_TO_SOURCE ? 1 : 0);
2699
2700		✗	p = strchr(s->url, '?');
2701		✗	if (p && av_find_info_tag(buf, sizeof(buf), "localaddr", p))
2702		✗	av_strlcatf(url, sizeof(url), "&localaddr=%s", buf);
2703		✗	else if (rt->localaddr && rt->localaddr[0])
2704		✗	av_strlcatf(url, sizeof(url), "&localaddr=%s", rt->localaddr);
2705		✗	append_source_addrs(url, sizeof(url), "sources",
2706			rtsp_st->nb_include_source_addrs,
2707			rtsp_st->include_source_addrs);
2708		✗	append_source_addrs(url, sizeof(url), "block",
2709			rtsp_st->nb_exclude_source_addrs,
2710			rtsp_st->exclude_source_addrs);
2711		✗	err = ffurl_open_whitelist(&rtsp_st->rtp_handle, url, AVIO_FLAG_READ,
2712		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
2713
2714		✗	av_dict_free(&opts);
2715
2716		✗	if (err < 0) {
2717		✗	err = AVERROR_INVALIDDATA;
2718		✗	goto fail;
2719			}
2720			}
2721		✗	if ((err = ff_rtsp_open_transport_ctx(s, rtsp_st)))
2722		✗	goto fail;
2723			}
2724		✗	return 0;
2725		✗	fail:
2726		✗	ff_rtsp_close_streams(s);
2727		✗	ff_network_close();
2728		✗	return err;
2729			}
2730
2731		✗	static int sdp_read_close(AVFormatContext *s)
2732			{
2733		✗	ff_rtsp_close_streams(s);
2734		✗	ff_network_close();
2735		✗	return 0;
2736			}
2737
2738			static const AVClass sdp_demuxer_class = {
2739			.class_name = "SDP demuxer",
2740			.item_name = av_default_item_name,
2741			.option = sdp_options,
2742			.version = LIBAVUTIL_VERSION_INT,
2743			};
2744
2745			const FFInputFormat ff_sdp_demuxer = {
2746			.p.name = "sdp",
2747			.p.long_name = NULL_IF_CONFIG_SMALL("SDP"),
2748			.p.priv_class = &sdp_demuxer_class,
2749			.priv_data_size = sizeof(RTSPState),
2750			.read_probe = sdp_probe,
2751			.read_header = sdp_read_header,
2752			.read_packet = ff_rtsp_fetch_packet,
2753			.read_close = sdp_read_close,
2754			};
2755			#endif /* CONFIG_SDP_DEMUXER */
2756
2757			#if CONFIG_RTP_DEMUXER
2758		4330	static int rtp_probe(const AVProbeData *p)
2759			{
2760	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 4330 times.	4330	if (av_strstart(p->filename, "rtp:", NULL))
2761		✗	return AVPROBE_SCORE_MAX;
2762		4330	return 0;
2763			}
2764
2765		✗	static int rtp_read_header(AVFormatContext *s)
2766			{
2767			uint8_t recvbuf[RTP_MAX_PACKET_LENGTH];
2768			char host[500], filters_buf[1000];
2769			int ret, port;
2770		✗	URLContext* in = NULL;
2771			int payload_type;
2772		✗	AVCodecParameters *par = NULL;
2773			struct sockaddr_storage addr;
2774			FFIOContext pb;
2775		✗	socklen_t addrlen = sizeof(addr);
2776		✗	RTSPState *rt = s->priv_data;
2777			const char *p;
2778			AVBPrint sdp;
2779		✗	AVDictionary *opts = NULL;
2780
2781		✗	if ((ret = ff_network_init()) < 0)
2782		✗	return ret;
2783
2784		✗	opts = map_to_opts(rt);
2785		✗	ret = ffurl_open_whitelist(&in, s->url, AVIO_FLAG_READ,
2786		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
2787		✗	av_dict_free(&opts);
2788		✗	if (ret)
2789		✗	goto fail;
2790
2791			while (1) {
2792		✗	ret = ffurl_read(in, recvbuf, sizeof(recvbuf));
2793		✗	if (ret == AVERROR(EAGAIN))
2794		✗	continue;
2795		✗	if (ret < 0)
2796		✗	goto fail;
2797		✗	if (ret < 12) {
2798		✗	av_log(s, AV_LOG_WARNING, "Received too short packet\n");
2799		✗	continue;
2800			}
2801
2802		✗	if ((recvbuf[0] & 0xc0) != 0x80) {
2803		✗	av_log(s, AV_LOG_WARNING, "Unsupported RTP version packet "
2804			"received\n");
2805		✗	continue;
2806			}
2807
2808		✗	if (RTP_PT_IS_RTCP(recvbuf[1]))
2809		✗	continue;
2810
2811		✗	payload_type = recvbuf[1] & 0x7f;
2812		✗	break;
2813			}
2814		✗	getsockname(ffurl_get_file_handle(in), (struct sockaddr*) &addr, &addrlen);
2815		✗	ffurl_closep(&in);
2816
2817		✗	par = avcodec_parameters_alloc();
2818		✗	if (!par) {
2819		✗	ret = AVERROR(ENOMEM);
2820		✗	goto fail;
2821			}
2822
2823		✗	if (ff_rtp_get_codec_info(par, payload_type)) {
2824		✗	av_log(s, AV_LOG_ERROR, "Unable to receive RTP payload type %d "
2825			"without an SDP file describing it\n",
2826			payload_type);
2827		✗	ret = AVERROR_INVALIDDATA;
2828		✗	goto fail;
2829			}
2830		✗	if (par->codec_type != AVMEDIA_TYPE_DATA) {
2831		✗	av_log(s, AV_LOG_WARNING, "Guessing on RTP content - if not received "
2832			"properly you need an SDP file "
2833			"describing it\n");
2834			}
2835
2836		✗	av_url_split(NULL, 0, NULL, 0, host, sizeof(host), &port,
2837		✗	NULL, 0, s->url);
2838
2839		✗	av_bprint_init(&sdp, 0, AV_BPRINT_SIZE_UNLIMITED);
2840		✗	av_bprintf(&sdp, "v=0\r\nc=IN IP%d %s\r\n",
2841		✗	addr.ss_family == AF_INET ? 4 : 6, host);
2842
2843		✗	p = strchr(s->url, '?');
2844		✗	if (p) {
2845			static const char filters[][2][8] = { { "sources", "incl" },
2846			{ "block", "excl" } };
2847			int i;
2848			char *q;
2849		✗	for (i = 0; i < FF_ARRAY_ELEMS(filters); i++) {
2850		✗	if (av_find_info_tag(filters_buf, sizeof(filters_buf), filters[i][0], p)) {
2851		✗	q = filters_buf;
2852		✗	while ((q = strchr(q, ',')) != NULL)
2853		✗	*q = ' ';
2854		✗	av_bprintf(&sdp, "a=source-filter:%s IN IP%d %s %s\r\n",
2855		✗	filters[i][1],
2856		✗	addr.ss_family == AF_INET ? 4 : 6, host,
2857			filters_buf);
2858			}
2859			}
2860			}
2861
2862		✗	av_bprintf(&sdp, "m=%s %d RTP/AVP %d\r\n",
2863		✗	par->codec_type == AVMEDIA_TYPE_DATA ? "application" :
2864		✗	par->codec_type == AVMEDIA_TYPE_VIDEO ? "video" : "audio",
2865			port, payload_type);
2866		✗	av_log(s, AV_LOG_VERBOSE, "SDP:\n%s\n", sdp.str);
2867		✗	if (!av_bprint_is_complete(&sdp))
2868		✗	goto fail_nobuf;
2869		✗	avcodec_parameters_free(&par);
2870
2871		✗	ffio_init_read_context(&pb, sdp.str, sdp.len);
2872		✗	s->pb = &pb.pub;
2873
2874			/* if sdp_read_header() fails then following ff_network_close() cancels out */
2875			/* ff_network_init() at the start of this function. Otherwise it cancels out */
2876			/* ff_network_init() inside sdp_read_header() */
2877		✗	ff_network_close();
2878
2879		✗	rt->media_type_mask = (1 << (AVMEDIA_TYPE_SUBTITLE+1)) - 1;
2880
2881		✗	ret = sdp_read_header(s);
2882		✗	s->pb = NULL;
2883		✗	av_bprint_finalize(&sdp, NULL);
2884		✗	return ret;
2885
2886		✗	fail_nobuf:
2887		✗	ret = AVERROR(ENOMEM);
2888		✗	av_log(s, AV_LOG_ERROR, "rtp_read_header(): not enough buffer space for sdp-headers\n");
2889		✗	av_bprint_finalize(&sdp, NULL);
2890		✗	fail:
2891		✗	avcodec_parameters_free(&par);
2892		✗	ffurl_closep(&in);
2893		✗	ff_network_close();
2894		✗	return ret;
2895			}
2896
2897			static const AVClass rtp_demuxer_class = {
2898			.class_name = "RTP demuxer",
2899			.item_name = av_default_item_name,
2900			.option = rtp_options,
2901			.version = LIBAVUTIL_VERSION_INT,
2902			};
2903
2904			const FFInputFormat ff_rtp_demuxer = {
2905			.p.name = "rtp",
2906			.p.long_name = NULL_IF_CONFIG_SMALL("RTP input"),
2907			.p.flags = AVFMT_NOFILE,
2908			.p.priv_class = &rtp_demuxer_class,
2909			.priv_data_size = sizeof(RTSPState),
2910			.read_probe = rtp_probe,
2911			.read_header = rtp_read_header,
2912			.read_packet = ff_rtsp_fetch_packet,
2913			.read_close = sdp_read_close,
2914			};
2915			#endif /* CONFIG_RTP_DEMUXER */
2916