FFmpeg coverage

Line	Branch	Exec	Source
1			/*
2			* RTSP/SDP client
3			* Copyright (c) 2002 Fabrice Bellard
4			*
5			* This file is part of FFmpeg.
6			*
7			* FFmpeg is free software; you can redistribute it and/or
8			* modify it under the terms of the GNU Lesser General Public
9			* License as published by the Free Software Foundation; either
10			* version 2.1 of the License, or (at your option) any later version.
11			*
12			* FFmpeg is distributed in the hope that it will be useful,
13			* but WITHOUT ANY WARRANTY; without even the implied warranty of
14			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15			* Lesser General Public License for more details.
16			*
17			* You should have received a copy of the GNU Lesser General Public
18			* License along with FFmpeg; if not, write to the Free Software
19			* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20			*/
21
22			#include "config_components.h"
23
24			#include "libavutil/avassert.h"
25			#include "libavutil/base64.h"
26			#include "libavutil/bprint.h"
27			#include "libavutil/avstring.h"
28			#include "libavutil/intreadwrite.h"
29			#include "libavutil/mathematics.h"
30			#include "libavutil/mem.h"
31			#include "libavutil/parseutils.h"
32			#include "libavutil/random_seed.h"
33			#include "libavutil/dict.h"
34			#include "libavutil/opt.h"
35			#include "libavutil/time.h"
36			#include "libavcodec/codec_desc.h"
37			#include "avformat.h"
38			#include "avio_internal.h"
39			#include "demux.h"
40
41			#if HAVE_POLL_H
42			#include <poll.h>
43			#endif
44			#include "internal.h"
45			#include "network.h"
46			#include "os_support.h"
47			#include "http.h"
48			#include "rtsp.h"
49
50			#include "rtpdec.h"
51			#include "rtpproto.h"
52			#include "rdt.h"
53			#include "rtpdec_formats.h"
54			#include "rtpenc_chain.h"
55			#include "url.h"
56			#include "tls.h"
57			#include "rtpenc.h"
58			#include "mpegts.h"
59			#include "version.h"
60
61			/* Default timeout values for read packet in seconds */
62			#define READ_PACKET_TIMEOUT_S 10
63			#define RECVBUF_SIZE 10 * RTP_MAX_PACKET_LENGTH
64			#define DEFAULT_REORDERING_DELAY 100000
65
66			#define OFFSET(x) offsetof(RTSPState, x)
67			#define DEC AV_OPT_FLAG_DECODING_PARAM
68			#define ENC AV_OPT_FLAG_ENCODING_PARAM
69
70			#define RTSP_FLAG_OPTS(name, longname) \
71			{ name, longname, OFFSET(rtsp_flags), AV_OPT_TYPE_FLAGS, {.i64 = 0}, INT_MIN, INT_MAX, DEC, .unit = "rtsp_flags" }, \
72			{ "filter_src", "only receive packets from the negotiated peer IP", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_FILTER_SRC}, 0, 0, DEC, .unit = "rtsp_flags" }
73
74			#define RTSP_MEDIATYPE_OPTS(name, longname) \
75			{ name, longname, OFFSET(media_type_mask), AV_OPT_TYPE_FLAGS, { .i64 = (1 << (AVMEDIA_TYPE_SUBTITLE+1)) - 1 }, INT_MIN, INT_MAX, DEC, .unit = "allowed_media_types" }, \
76			{ "video", "Video", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_VIDEO}, 0, 0, DEC, .unit = "allowed_media_types" }, \
77			{ "audio", "Audio", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_AUDIO}, 0, 0, DEC, .unit = "allowed_media_types" }, \
78			{ "data", "Data", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_DATA}, 0, 0, DEC, .unit = "allowed_media_types" }, \
79			{ "subtitle", "Subtitle", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_SUBTITLE}, 0, 0, DEC, .unit = "allowed_media_types" }
80
81			#define COMMON_OPTS() \
82			{ "reorder_queue_size", "set number of packets to buffer for handling of reordered packets", OFFSET(reordering_queue_size), AV_OPT_TYPE_INT, { .i64 = -1 }, -1, INT_MAX, DEC }, \
83			{ "buffer_size", "Underlying protocol send/receive buffer size", OFFSET(buffer_size), AV_OPT_TYPE_INT, { .i64 = -1 }, -1, INT_MAX, DEC|ENC }, \
84			{ "pkt_size", "Underlying protocol send packet size", OFFSET(pkt_size), AV_OPT_TYPE_INT, { .i64 = 1472 }, -1, INT_MAX, ENC } \
85
86
87			const AVOption ff_rtsp_options[] = {
88			{ "initial_pause", "do not start playing the stream immediately", OFFSET(initial_pause), AV_OPT_TYPE_BOOL, {.i64 = 0}, 0, 1, DEC },
89			FF_RTP_FLAG_OPTS(RTSPState, rtp_muxer_flags),
90			{ "rtsp_transport", "set RTSP transport protocols", OFFSET(lower_transport_mask), AV_OPT_TYPE_FLAGS, {.i64 = 0}, INT_MIN, INT_MAX, DEC|ENC, .unit = "rtsp_transport" }, \
91			{ "udp", "UDP", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << RTSP_LOWER_TRANSPORT_UDP}, 0, 0, DEC|ENC, .unit = "rtsp_transport" }, \
92			{ "tcp", "TCP", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << RTSP_LOWER_TRANSPORT_TCP}, 0, 0, DEC|ENC, .unit = "rtsp_transport" }, \
93			{ "udp_multicast", "UDP multicast", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << RTSP_LOWER_TRANSPORT_UDP_MULTICAST}, 0, 0, DEC, .unit = "rtsp_transport" },
94			{ "http", "HTTP tunneling", 0, AV_OPT_TYPE_CONST, {.i64 = (1 << RTSP_LOWER_TRANSPORT_HTTP)}, 0, 0, DEC, .unit = "rtsp_transport" },
95			{ "https", "HTTPS tunneling", 0, AV_OPT_TYPE_CONST, {.i64 = (1 << RTSP_LOWER_TRANSPORT_HTTPS )}, 0, 0, DEC, .unit = "rtsp_transport" },
96			RTSP_FLAG_OPTS("rtsp_flags", "set RTSP flags"),
97			{ "listen", "wait for incoming connections", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_LISTEN}, 0, 0, DEC, .unit = "rtsp_flags" },
98			{ "prefer_tcp", "try RTP via TCP first, if available", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_PREFER_TCP}, 0, 0, DEC|ENC, .unit = "rtsp_flags" },
99			{ "satip_raw", "export raw MPEG-TS stream instead of demuxing", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_SATIP_RAW}, 0, 0, DEC, .unit = "rtsp_flags" },
100			RTSP_MEDIATYPE_OPTS("allowed_media_types", "set media types to accept from the server"),
101			{ "min_port", "set minimum local UDP port", OFFSET(rtp_port_min), AV_OPT_TYPE_INT, {.i64 = RTSP_RTP_PORT_MIN}, 0, 65535, DEC|ENC },
102			{ "max_port", "set maximum local UDP port", OFFSET(rtp_port_max), AV_OPT_TYPE_INT, {.i64 = RTSP_RTP_PORT_MAX}, 0, 65535, DEC|ENC },
103			{ "listen_timeout", "set maximum timeout (in seconds) to wait for incoming connections (-1 is infinite, imply flag listen)", OFFSET(initial_timeout), AV_OPT_TYPE_INT, {.i64 = -1}, INT_MIN, INT_MAX, DEC },
104			{ "timeout", "set timeout (in microseconds) of socket I/O operations", OFFSET(stimeout), AV_OPT_TYPE_INT64, {.i64 = 0}, INT_MIN, INT64_MAX, DEC },
105			COMMON_OPTS(),
106			{ "user_agent", "override User-Agent header", OFFSET(user_agent), AV_OPT_TYPE_STRING, {.str = LIBAVFORMAT_IDENT}, 0, 0, DEC },
107
108			// TLS options
109			FF_TLS_CLIENT_OPTIONS(RTSPState, tls_opts),
110			{ NULL },
111			};
112
113			static const AVOption sdp_options[] = {
114			RTSP_FLAG_OPTS("sdp_flags", "SDP flags"),
115			{ "custom_io", "use custom I/O", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_CUSTOM_IO}, 0, 0, DEC, .unit = "rtsp_flags" },
116			{ "rtcp_to_source", "send RTCP packets to the source address of received packets", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_RTCP_TO_SOURCE}, 0, 0, DEC, .unit = "rtsp_flags" },
117			{ "listen_timeout", "set maximum timeout (in seconds) to wait for incoming connections", OFFSET(stimeout), AV_OPT_TYPE_DURATION, {.i64 = READ_PACKET_TIMEOUT_S*1000000}, INT_MIN, INT64_MAX, DEC },
118			{ "localaddr", "local address", OFFSET(localaddr),AV_OPT_TYPE_STRING, {.str = NULL}, 0, 0, DEC }, \
119			RTSP_MEDIATYPE_OPTS("allowed_media_types", "set media types to accept from the server"),
120			COMMON_OPTS(),
121			{ NULL },
122			};
123
124			static const AVOption rtp_options[] = {
125			RTSP_FLAG_OPTS("rtp_flags", "set RTP flags"),
126			{ "listen_timeout", "set maximum timeout (in seconds) to wait for incoming connections", OFFSET(stimeout), AV_OPT_TYPE_DURATION, {.i64 = READ_PACKET_TIMEOUT_S*1000000}, INT_MIN, INT64_MAX, DEC },
127			{ "localaddr", "local address", OFFSET(localaddr),AV_OPT_TYPE_STRING, {.str = NULL}, 0, 0, DEC }, \
128			RTSP_MEDIATYPE_OPTS("allowed_media_types", "set media types to accept from the server"),
129			COMMON_OPTS(),
130			{ NULL },
131			};
132
133
134		✗	static AVDictionary *map_to_opts(RTSPState *rt)
135			{
136		✗	AVDictionary *opts = NULL;
137
138		✗	av_dict_set_int(&opts, "buffer_size", rt->buffer_size, 0);
139		✗	av_dict_set_int(&opts, "pkt_size", rt->pkt_size, 0);
140		✗	if (rt->localaddr && rt->localaddr[0])
141		✗	av_dict_set(&opts, "localaddr", rt->localaddr, 0);
142
143		✗	return opts;
144			}
145
146			#define ERR_RET(c) \
147			do { \
148			int ret = c; \
149			if (ret < 0) \
150			return ret; \
151			} while (0)
152
153			/**
154			* Add the TLS options of the given RTSPState to the dict
155			*/
156		✗	static int copy_tls_opts_dict(RTSPState *rt, AVDictionary **dict)
157			{
158		✗	ERR_RET(av_dict_set_int(dict, "tls_verify", rt->tls_opts.verify, 0));
159		✗	ERR_RET(av_dict_set(dict, "ca_file", rt->tls_opts.ca_file, 0));
160		✗	ERR_RET(av_dict_set(dict, "cert_file", rt->tls_opts.cert_file, 0));
161		✗	ERR_RET(av_dict_set(dict, "key_file", rt->tls_opts.key_file, 0));
162		✗	ERR_RET(av_dict_set(dict, "verifyhost", rt->tls_opts.host, 0));
163
164		✗	return 0;
165			}
166
167			#undef ERR_RET
168
169		✗	static void get_word_until_chars(char *buf, int buf_size,
170			const char *sep, const char **pp)
171			{
172			const char *p;
173			char *q;
174
175		✗	p = *pp;
176		✗	p += strspn(p, SPACE_CHARS);
177		✗	q = buf;
178		✗	while (!strchr(sep, *p) && *p != '\0') {
179		✗	if ((q - buf) < buf_size - 1)
180		✗	*q++ = *p;
181		✗	p++;
182			}
183		✗	if (buf_size > 0)
184		✗	*q = '\0';
185		✗	*pp = p;
186		✗	}
187
188		✗	static void get_word_sep(char *buf, int buf_size, const char *sep,
189			const char **pp)
190			{
191		✗	if (**pp == '/') (*pp)++;
192		✗	get_word_until_chars(buf, buf_size, sep, pp);
193		✗	}
194
195		✗	static void get_word(char *buf, int buf_size, const char **pp)
196			{
197		✗	get_word_until_chars(buf, buf_size, SPACE_CHARS, pp);
198		✗	}
199
200			/** Parse a string p in the form of Range:npt=xx-xx, and determine the start
201			* and end time.
202			* Used for seeking in the rtp stream.
203			*/
204		✗	static void rtsp_parse_range_npt(const char *p, int64_t *start, int64_t *end)
205			{
206			char buf[256];
207
208		✗	p += strspn(p, SPACE_CHARS);
209		✗	if (!av_stristart(p, "npt=", &p))
210		✗	return;
211
212		✗	*start = AV_NOPTS_VALUE;
213		✗	*end = AV_NOPTS_VALUE;
214
215		✗	get_word_sep(buf, sizeof(buf), "-", &p);
216		✗	if (av_parse_time(start, buf, 1) < 0)
217		✗	return;
218		✗	if (*p == '-') {
219		✗	p++;
220		✗	get_word_sep(buf, sizeof(buf), "-", &p);
221		✗	if (av_parse_time(end, buf, 1) < 0)
222		✗	av_log(NULL, AV_LOG_DEBUG, "Failed to parse interval end specification '%s'\n", buf);
223			}
224			}
225
226		✗	static int get_sockaddr(AVFormatContext *s,
227			const char *buf, struct sockaddr_storage *sock)
228			{
229		✗	struct addrinfo hints = { 0 }, *ai = NULL;
230			int ret;
231
232		✗	hints.ai_flags = AI_NUMERICHOST;
233		✗	if ((ret = getaddrinfo(buf, NULL, &hints, &ai))) {
234		✗	av_log(s, AV_LOG_ERROR, "getaddrinfo(%s): %s\n",
235			buf,
236			gai_strerror(ret));
237		✗	return -1;
238			}
239		✗	memcpy(sock, ai->ai_addr, FFMIN(sizeof(*sock), ai->ai_addrlen));
240		✗	freeaddrinfo(ai);
241		✗	return 0;
242			}
243
244			#if CONFIG_RTPDEC
245		✗	static void init_rtp_handler(const RTPDynamicProtocolHandler *handler,
246			RTSPStream *rtsp_st, AVStream *st)
247			{
248		✗	AVCodecParameters *par = st ? st->codecpar : NULL;
249		✗	if (!handler)
250		✗	return;
251		✗	if (par)
252		✗	par->codec_id = handler->codec_id;
253		✗	rtsp_st->dynamic_handler = handler;
254		✗	if (st)
255		✗	ffstream(st)->need_parsing = handler->need_parsing;
256		✗	if (handler->priv_data_size) {
257		✗	rtsp_st->dynamic_protocol_context = av_mallocz(handler->priv_data_size);
258		✗	if (!rtsp_st->dynamic_protocol_context)
259		✗	rtsp_st->dynamic_handler = NULL;
260			}
261			}
262
263		✗	static void finalize_rtp_handler_init(AVFormatContext *s, RTSPStream *rtsp_st,
264			AVStream *st)
265			{
266		✗	if (rtsp_st->dynamic_handler && rtsp_st->dynamic_handler->init) {
267		✗	int ret = rtsp_st->dynamic_handler->init(s, st ? st->index : -1,
268			rtsp_st->dynamic_protocol_context);
269		✗	if (ret < 0) {
270		✗	if (rtsp_st->dynamic_protocol_context) {
271		✗	if (rtsp_st->dynamic_handler->close)
272		✗	rtsp_st->dynamic_handler->close(
273			rtsp_st->dynamic_protocol_context);
274		✗	av_free(rtsp_st->dynamic_protocol_context);
275			}
276		✗	rtsp_st->dynamic_protocol_context = NULL;
277		✗	rtsp_st->dynamic_handler = NULL;
278			}
279			}
280		✗	}
281
282			#if CONFIG_RTSP_DEMUXER
283		✗	static int init_satip_stream(AVFormatContext *s)
284			{
285		✗	RTSPState *rt = s->priv_data;
286		✗	RTSPStream *rtsp_st = av_mallocz(sizeof(RTSPStream));
287		✗	if (!rtsp_st)
288		✗	return AVERROR(ENOMEM);
289		✗	dynarray_add(&rt->rtsp_streams,
290			&rt->nb_rtsp_streams, rtsp_st);
291
292		✗	rtsp_st->sdp_payload_type = 33; // MP2T
293		✗	av_strlcpy(rtsp_st->control_url,
294		✗	rt->control_uri, sizeof(rtsp_st->control_url));
295
296		✗	if (rt->rtsp_flags & RTSP_FLAG_SATIP_RAW) {
297		✗	AVStream *st = avformat_new_stream(s, NULL);
298		✗	if (!st)
299		✗	return AVERROR(ENOMEM);
300		✗	st->id = rt->nb_rtsp_streams - 1;
301		✗	rtsp_st->stream_index = st->index;
302		✗	st->codecpar->codec_type = AVMEDIA_TYPE_DATA;
303		✗	st->codecpar->codec_id = AV_CODEC_ID_MPEG2TS;
304			} else {
305		✗	rtsp_st->stream_index = -1;
306		✗	init_rtp_handler(&ff_mpegts_dynamic_handler, rtsp_st, NULL);
307		✗	finalize_rtp_handler_init(s, rtsp_st, NULL);
308			}
309		✗	return 0;
310			}
311			#endif
312
313			/* parse the rtpmap description: <codec_name>/<clock_rate>[/<other params>] */
314		✗	static int sdp_parse_rtpmap(AVFormatContext *s,
315			AVStream *st, RTSPStream *rtsp_st,
316			int payload_type, const char *p)
317			{
318		✗	AVCodecParameters *par = st->codecpar;
319			char buf[256];
320			int i;
321			const AVCodecDescriptor *desc;
322			const char *c_name;
323
324			/* See if we can handle this kind of payload.
325			* The space should normally not be there but some Real streams or
326			* particular servers ("RealServer Version 6.1.3.970", see issue 1658)
327			* have a trailing space. */
328		✗	get_word_sep(buf, sizeof(buf), "/ ", &p);
329		✗	if (payload_type < RTP_PT_PRIVATE) {
330			/* We are in a standard case
331			* (from http://www.iana.org/assignments/rtp-parameters). */
332		✗	par->codec_id = ff_rtp_codec_id(buf, par->codec_type);
333			}
334
335		✗	if (par->codec_id == AV_CODEC_ID_NONE) {
336			const RTPDynamicProtocolHandler *handler =
337		✗	ff_rtp_handler_find_by_name(buf, par->codec_type);
338		✗	init_rtp_handler(handler, rtsp_st, st);
339			/* If no dynamic handler was found, check with the list of standard
340			* allocated types, if such a stream for some reason happens to
341			* use a private payload type. This isn't handled in rtpdec.c, since
342			* the format name from the rtpmap line never is passed into rtpdec. */
343		✗	if (!rtsp_st->dynamic_handler)
344		✗	par->codec_id = ff_rtp_codec_id(buf, par->codec_type);
345			}
346
347		✗	desc = avcodec_descriptor_get(par->codec_id);
348		✗	if (desc && desc->name)
349		✗	c_name = desc->name;
350			else
351		✗	c_name = "(null)";
352
353		✗	get_word_sep(buf, sizeof(buf), "/", &p);
354		✗	i = atoi(buf);
355		✗	switch (par->codec_type) {
356		✗	case AVMEDIA_TYPE_AUDIO:
357		✗	av_log(s, AV_LOG_DEBUG, "audio codec set to: %s\n", c_name);
358		✗	par->sample_rate = RTSP_DEFAULT_AUDIO_SAMPLERATE;
359		✗	par->ch_layout = (AVChannelLayout)AV_CHANNEL_LAYOUT_MONO;
360		✗	if (i > 0) {
361		✗	par->sample_rate = i;
362		✗	avpriv_set_pts_info(st, 32, 1, par->sample_rate);
363		✗	get_word_sep(buf, sizeof(buf), "/", &p);
364		✗	i = atoi(buf);
365		✗	if (i > 0)
366		✗	av_channel_layout_default(&par->ch_layout, i);
367			}
368		✗	av_log(s, AV_LOG_DEBUG, "audio samplerate set to: %i\n",
369			par->sample_rate);
370		✗	av_log(s, AV_LOG_DEBUG, "audio channels set to: %i\n",
371			par->ch_layout.nb_channels);
372		✗	break;
373		✗	case AVMEDIA_TYPE_VIDEO:
374		✗	av_log(s, AV_LOG_DEBUG, "video codec set to: %s\n", c_name);
375		✗	if (i > 0)
376		✗	avpriv_set_pts_info(st, 32, 1, i);
377		✗	break;
378		✗	default:
379		✗	break;
380			}
381		✗	finalize_rtp_handler_init(s, rtsp_st, st);
382		✗	return 0;
383			}
384
385			/* parse the attribute line from the fmtp a line of an sdp response. This
386			* is broken out as a function because it is used in rtp_h264.c, which is
387			* forthcoming. */
388		✗	int ff_rtsp_next_attr_and_value(const char **p, char *attr, int attr_size,
389			char *value, int value_size)
390			{
391		✗	*p += strspn(*p, SPACE_CHARS);
392		✗	if (**p) {
393		✗	get_word_sep(attr, attr_size, "=", p);
394		✗	if (**p == '=')
395		✗	(*p)++;
396		✗	get_word_sep(value, value_size, ";", p);
397		✗	if (**p == ';')
398		✗	(*p)++;
399		✗	return 1;
400			}
401		✗	return 0;
402			}
403
404			typedef struct SDPParseState {
405			/* SDP only */
406			struct sockaddr_storage default_ip;
407			int default_ttl;
408			int skip_media; ///< set if an unknown m= line occurs
409			int nb_default_include_source_addrs; /**< Number of source-specific multicast include source IP address (from SDP content) */
410			struct RTSPSource **default_include_source_addrs; /**< Source-specific multicast include source IP address (from SDP content) */
411			int nb_default_exclude_source_addrs; /**< Number of source-specific multicast exclude source IP address (from SDP content) */
412			struct RTSPSource **default_exclude_source_addrs; /**< Source-specific multicast exclude source IP address (from SDP content) */
413			int seen_rtpmap;
414			int seen_fmtp;
415			char delayed_fmtp[2048];
416			} SDPParseState;
417
418		✗	static void copy_default_source_addrs(struct RTSPSource **addrs, int count,
419			struct RTSPSource ***dest, int *dest_count)
420			{
421			RTSPSource *rtsp_src, *rtsp_src2;
422			int i;
423		✗	for (i = 0; i < count; i++) {
424		✗	rtsp_src = addrs[i];
425		✗	rtsp_src2 = av_memdup(rtsp_src, sizeof(*rtsp_src));
426		✗	if (!rtsp_src2)
427		✗	continue;
428		✗	dynarray_add(dest, dest_count, rtsp_src2);
429			}
430		✗	}
431
432		✗	static void parse_fmtp(AVFormatContext *s, RTSPState *rt,
433			int payload_type, const char *line)
434			{
435			int i;
436
437		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
438		✗	RTSPStream *rtsp_st = rt->rtsp_streams[i];
439		✗	if (rtsp_st->sdp_payload_type == payload_type &&
440		✗	rtsp_st->dynamic_handler &&
441		✗	rtsp_st->dynamic_handler->parse_sdp_a_line) {
442		✗	rtsp_st->dynamic_handler->parse_sdp_a_line(s, rtsp_st->stream_index,
443			rtsp_st->dynamic_protocol_context, line);
444			}
445			}
446		✗	}
447
448		✗	static void sdp_parse_line(AVFormatContext *s, SDPParseState *s1,
449			int letter, const char *buf)
450			{
451		✗	RTSPState *rt = s->priv_data;
452			char buf1[64], st_type[64];
453			const char *p;
454			enum AVMediaType codec_type;
455			int payload_type;
456			AVStream *st;
457			RTSPStream *rtsp_st;
458			RTSPSource *rtsp_src;
459			struct sockaddr_storage sdp_ip;
460			int ttl;
461
462		✗	av_log(s, AV_LOG_TRACE, "sdp: %c='%s'\n", letter, buf);
463
464		✗	p = buf;
465		✗	if (s1->skip_media && letter != 'm')
466		✗	return;
467		✗	switch (letter) {
468		✗	case 'c':
469		✗	get_word(buf1, sizeof(buf1), &p);
470		✗	if (strcmp(buf1, "IN") != 0)
471		✗	return;
472		✗	get_word(buf1, sizeof(buf1), &p);
473		✗	if (strcmp(buf1, "IP4") && strcmp(buf1, "IP6"))
474		✗	return;
475		✗	get_word_sep(buf1, sizeof(buf1), "/", &p);
476		✗	if (get_sockaddr(s, buf1, &sdp_ip))
477		✗	return;
478		✗	ttl = 16;
479		✗	if (*p == '/') {
480		✗	p++;
481		✗	get_word_sep(buf1, sizeof(buf1), "/", &p);
482		✗	ttl = atoi(buf1);
483			}
484		✗	if (s->nb_streams == 0) {
485		✗	s1->default_ip = sdp_ip;
486		✗	s1->default_ttl = ttl;
487			} else {
488		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
489		✗	rtsp_st->sdp_ip = sdp_ip;
490		✗	rtsp_st->sdp_ttl = ttl;
491			}
492		✗	break;
493		✗	case 's':
494		✗	av_dict_set(&s->metadata, "title", p, 0);
495		✗	break;
496		✗	case 'i':
497		✗	if (s->nb_streams == 0) {
498		✗	av_dict_set(&s->metadata, "comment", p, 0);
499		✗	break;
500			}
501		✗	break;
502		✗	case 'm':
503			/* new stream */
504		✗	s1->skip_media = 0;
505		✗	s1->seen_fmtp = 0;
506		✗	s1->seen_rtpmap = 0;
507		✗	codec_type = AVMEDIA_TYPE_UNKNOWN;
508		✗	get_word(st_type, sizeof(st_type), &p);
509		✗	if (!strcmp(st_type, "audio")) {
510		✗	codec_type = AVMEDIA_TYPE_AUDIO;
511		✗	} else if (!strcmp(st_type, "video")) {
512		✗	codec_type = AVMEDIA_TYPE_VIDEO;
513		✗	} else if (!strcmp(st_type, "application")) {
514		✗	codec_type = AVMEDIA_TYPE_DATA;
515		✗	} else if (!strcmp(st_type, "text")) {
516		✗	codec_type = AVMEDIA_TYPE_SUBTITLE;
517			}
518		✗	if (codec_type == AVMEDIA_TYPE_UNKNOWN ||
519		✗	!(rt->media_type_mask & (1 << codec_type)) ||
520		✗	rt->nb_rtsp_streams >= s->max_streams
521			) {
522		✗	s1->skip_media = 1;
523		✗	return;
524			}
525		✗	rtsp_st = av_mallocz(sizeof(RTSPStream));
526		✗	if (!rtsp_st)
527		✗	return;
528		✗	rtsp_st->stream_index = -1;
529		✗	dynarray_add(&rt->rtsp_streams, &rt->nb_rtsp_streams, rtsp_st);
530
531		✗	rtsp_st->sdp_ip = s1->default_ip;
532		✗	rtsp_st->sdp_ttl = s1->default_ttl;
533
534		✗	copy_default_source_addrs(s1->default_include_source_addrs,
535			s1->nb_default_include_source_addrs,
536			&rtsp_st->include_source_addrs,
537			&rtsp_st->nb_include_source_addrs);
538		✗	copy_default_source_addrs(s1->default_exclude_source_addrs,
539			s1->nb_default_exclude_source_addrs,
540			&rtsp_st->exclude_source_addrs,
541			&rtsp_st->nb_exclude_source_addrs);
542
543		✗	get_word(buf1, sizeof(buf1), &p); /* port */
544		✗	rtsp_st->sdp_port = atoi(buf1);
545
546		✗	get_word(buf1, sizeof(buf1), &p); /* protocol */
547		✗	if (!strcmp(buf1, "udp"))
548		✗	rt->transport = RTSP_TRANSPORT_RAW;
549		✗	else if (strstr(buf1, "/AVPF") || strstr(buf1, "/SAVPF"))
550		✗	rtsp_st->feedback = 1;
551
552			/* XXX: handle list of formats */
553		✗	get_word(buf1, sizeof(buf1), &p); /* format list */
554		✗	rtsp_st->sdp_payload_type = atoi(buf1);
555
556		✗	if (!strcmp(ff_rtp_enc_name(rtsp_st->sdp_payload_type), "MP2T")) {
557			/* no corresponding stream */
558		✗	if (rt->transport == RTSP_TRANSPORT_RAW) {
559		✗	if (CONFIG_RTPDEC && !rt->ts)
560		✗	rt->ts = avpriv_mpegts_parse_open(s);
561			} else {
562			const RTPDynamicProtocolHandler *handler;
563		✗	handler = ff_rtp_handler_find_by_id(
564			rtsp_st->sdp_payload_type, AVMEDIA_TYPE_DATA);
565		✗	init_rtp_handler(handler, rtsp_st, NULL);
566		✗	finalize_rtp_handler_init(s, rtsp_st, NULL);
567			}
568		✗	} else if (rt->server_type == RTSP_SERVER_WMS &&
569			codec_type == AVMEDIA_TYPE_DATA) {
570			/* RTX stream, a stream that carries all the other actual
571			* audio/video streams. Don't expose this to the callers. */
572			} else {
573		✗	st = avformat_new_stream(s, NULL);
574		✗	if (!st)
575		✗	return;
576		✗	st->id = rt->nb_rtsp_streams - 1;
577		✗	rtsp_st->stream_index = st->index;
578		✗	st->codecpar->codec_type = codec_type;
579		✗	if (rtsp_st->sdp_payload_type < RTP_PT_PRIVATE) {
580			const RTPDynamicProtocolHandler *handler;
581			/* if standard payload type, we can find the codec right now */
582		✗	ff_rtp_get_codec_info(st->codecpar, rtsp_st->sdp_payload_type);
583		✗	if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO &&
584		✗	st->codecpar->sample_rate > 0)
585		✗	avpriv_set_pts_info(st, 32, 1, st->codecpar->sample_rate);
586			/* Even static payload types may need a custom depacketizer */
587		✗	handler = ff_rtp_handler_find_by_id(
588		✗	rtsp_st->sdp_payload_type, st->codecpar->codec_type);
589		✗	init_rtp_handler(handler, rtsp_st, st);
590		✗	finalize_rtp_handler_init(s, rtsp_st, st);
591			}
592		✗	if (rt->default_lang[0])
593		✗	av_dict_set(&st->metadata, "language", rt->default_lang, 0);
594			}
595			/* put a default control url */
596		✗	av_strlcpy(rtsp_st->control_url, rt->control_uri,
597			sizeof(rtsp_st->control_url));
598		✗	break;
599		✗	case 'a':
600		✗	if (av_strstart(p, "control:", &p)) {
601		✗	if (rt->nb_rtsp_streams == 0) {
602		✗	if (!strncmp(p, "rtsp://", 7))
603		✗	av_strlcpy(rt->control_uri, p,
604			sizeof(rt->control_uri));
605			} else {
606			char proto[32];
607			/* get the control url */
608		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
609
610			/* XXX: may need to add full url resolution */
611		✗	av_url_split(proto, sizeof(proto), NULL, 0, NULL, 0,
612			NULL, NULL, 0, p);
613		✗	if (proto[0] == '\0') {
614			/* relative control URL */
615		✗	if (rtsp_st->control_url[strlen(rtsp_st->control_url)-1]!='/')
616		✗	av_strlcat(rtsp_st->control_url, "/",
617			sizeof(rtsp_st->control_url));
618		✗	av_strlcat(rtsp_st->control_url, p,
619			sizeof(rtsp_st->control_url));
620			} else
621		✗	av_strlcpy(rtsp_st->control_url, p,
622			sizeof(rtsp_st->control_url));
623			}
624		✗	} else if (av_strstart(p, "rtpmap:", &p) && s->nb_streams > 0) {
625			/* NOTE: rtpmap is only supported AFTER the 'm=' tag */
626		✗	get_word(buf1, sizeof(buf1), &p);
627		✗	payload_type = atoi(buf1);
628		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
629		✗	if (rtsp_st->stream_index >= 0) {
630		✗	st = s->streams[rtsp_st->stream_index];
631		✗	sdp_parse_rtpmap(s, st, rtsp_st, payload_type, p);
632			}
633		✗	s1->seen_rtpmap = 1;
634		✗	if (s1->seen_fmtp) {
635		✗	parse_fmtp(s, rt, payload_type, s1->delayed_fmtp);
636			}
637		✗	} else if (av_strstart(p, "fmtp:", &p) ||
638		✗	av_strstart(p, "framesize:", &p)) {
639			// let dynamic protocol handlers have a stab at the line.
640		✗	get_word(buf1, sizeof(buf1), &p);
641		✗	payload_type = atoi(buf1);
642		✗	if (s1->seen_rtpmap) {
643		✗	parse_fmtp(s, rt, payload_type, buf);
644			} else {
645		✗	s1->seen_fmtp = 1;
646		✗	av_strlcpy(s1->delayed_fmtp, buf, sizeof(s1->delayed_fmtp));
647			}
648		✗	} else if (av_strstart(p, "framerate:", &p) && s->nb_streams > 0) {
649			// RFC 8866
650			double framerate;
651		✗	if (av_sscanf(p, "%lf%c", &framerate, &(char){0}) == 1) {
652		✗	st = s->streams[s->nb_streams - 1];
653		✗	st->avg_frame_rate = av_d2q(framerate, INT_MAX);
654			}
655		✗	} else if (av_strstart(p, "ssrc:", &p) && s->nb_streams > 0) {
656		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
657		✗	get_word(buf1, sizeof(buf1), &p);
658		✗	rtsp_st->ssrc = strtoll(buf1, NULL, 10);
659		✗	} else if (av_strstart(p, "range:", &p)) {
660			int64_t start, end;
661
662			// this is so that seeking on a streamed file can work.
663		✗	rtsp_parse_range_npt(p, &start, &end);
664		✗	s->start_time = start;
665			/* AV_NOPTS_VALUE means live broadcast (and can't seek) */
666		✗	if (end != AV_NOPTS_VALUE)
667		✗	s->duration = end - start;
668		✗	} else if (av_strstart(p, "lang:", &p)) {
669		✗	if (s->nb_streams > 0) {
670		✗	get_word(buf1, sizeof(buf1), &p);
671		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
672		✗	if (rtsp_st->stream_index >= 0) {
673		✗	st = s->streams[rtsp_st->stream_index];
674		✗	av_dict_set(&st->metadata, "language", buf1, 0);
675			}
676			} else
677		✗	get_word(rt->default_lang, sizeof(rt->default_lang), &p);
678		✗	} else if (av_strstart(p, "IsRealDataType:integer;",&p)) {
679		✗	if (atoi(p) == 1)
680		✗	rt->transport = RTSP_TRANSPORT_RDT;
681		✗	} else if (av_strstart(p, "SampleRate:integer;", &p) &&
682		✗	s->nb_streams > 0) {
683		✗	st = s->streams[s->nb_streams - 1];
684		✗	st->codecpar->sample_rate = atoi(p);
685		✗	} else if (av_strstart(p, "crypto:", &p) && s->nb_streams > 0) {
686			// RFC 4568
687		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
688		✗	get_word(buf1, sizeof(buf1), &p); // ignore tag
689		✗	get_word(rtsp_st->crypto_suite, sizeof(rtsp_st->crypto_suite), &p);
690		✗	p += strspn(p, SPACE_CHARS);
691		✗	if (av_strstart(p, "inline:", &p))
692		✗	get_word(rtsp_st->crypto_params, sizeof(rtsp_st->crypto_params), &p);
693		✗	} else if (av_strstart(p, "source-filter:", &p)) {
694		✗	int exclude = 0;
695		✗	get_word(buf1, sizeof(buf1), &p);
696		✗	if (strcmp(buf1, "incl") && strcmp(buf1, "excl"))
697		✗	return;
698		✗	exclude = !strcmp(buf1, "excl");
699
700		✗	get_word(buf1, sizeof(buf1), &p);
701		✗	if (strcmp(buf1, "IN") != 0)
702		✗	return;
703		✗	get_word(buf1, sizeof(buf1), &p);
704		✗	if (strcmp(buf1, "IP4") && strcmp(buf1, "IP6") && strcmp(buf1, "*"))
705		✗	return;
706			// not checking that the destination address actually matches or is wildcard
707		✗	get_word(buf1, sizeof(buf1), &p);
708
709		✗	while (*p != '\0') {
710		✗	rtsp_src = av_mallocz(sizeof(*rtsp_src));
711		✗	if (!rtsp_src)
712		✗	return;
713		✗	get_word(rtsp_src->addr, sizeof(rtsp_src->addr), &p);
714		✗	if (exclude) {
715		✗	if (s->nb_streams == 0) {
716		✗	dynarray_add(&s1->default_exclude_source_addrs, &s1->nb_default_exclude_source_addrs, rtsp_src);
717			} else {
718		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
719		✗	dynarray_add(&rtsp_st->exclude_source_addrs, &rtsp_st->nb_exclude_source_addrs, rtsp_src);
720			}
721			} else {
722		✗	if (s->nb_streams == 0) {
723		✗	dynarray_add(&s1->default_include_source_addrs, &s1->nb_default_include_source_addrs, rtsp_src);
724			} else {
725		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
726		✗	dynarray_add(&rtsp_st->include_source_addrs, &rtsp_st->nb_include_source_addrs, rtsp_src);
727			}
728			}
729			}
730			} else {
731		✗	if (rt->server_type == RTSP_SERVER_WMS)
732		✗	ff_wms_parse_sdp_a_line(s, p);
733		✗	if (s->nb_streams > 0) {
734		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
735
736		✗	if (rt->server_type == RTSP_SERVER_REAL)
737		✗	ff_real_parse_sdp_a_line(s, rtsp_st->stream_index, p);
738
739		✗	if (rtsp_st->dynamic_handler &&
740		✗	rtsp_st->dynamic_handler->parse_sdp_a_line)
741		✗	rtsp_st->dynamic_handler->parse_sdp_a_line(s,
742			rtsp_st->stream_index,
743			rtsp_st->dynamic_protocol_context, buf);
744			}
745			}
746		✗	break;
747			}
748			}
749
750		✗	int ff_sdp_parse(AVFormatContext *s, const char *content)
751			{
752			const char *p;
753			int letter, i;
754			char buf[SDP_MAX_SIZE], *q;
755		✗	SDPParseState sdp_parse_state = { { 0 } }, *s1 = &sdp_parse_state;
756
757		✗	s->duration = AV_NOPTS_VALUE;
758
759		✗	p = content;
760			for (;;) {
761		✗	p += strspn(p, SPACE_CHARS);
762		✗	letter = *p;
763		✗	if (letter == '\0')
764		✗	break;
765		✗	p++;
766		✗	if (*p != '=')
767		✗	goto next_line;
768		✗	p++;
769			/* get the content */
770		✗	q = buf;
771		✗	while (*p != '\n' && *p != '\r' && *p != '\0') {
772		✗	if ((q - buf) < sizeof(buf) - 1)
773		✗	*q++ = *p;
774		✗	p++;
775			}
776		✗	*q = '\0';
777		✗	sdp_parse_line(s, s1, letter, buf);
778		✗	next_line:
779		✗	while (*p != '\n' && *p != '\0')
780		✗	p++;
781		✗	if (*p == '\n')
782		✗	p++;
783			}
784
785		✗	for (i = 0; i < s1->nb_default_include_source_addrs; i++)
786		✗	av_freep(&s1->default_include_source_addrs[i]);
787		✗	av_freep(&s1->default_include_source_addrs);
788		✗	for (i = 0; i < s1->nb_default_exclude_source_addrs; i++)
789		✗	av_freep(&s1->default_exclude_source_addrs[i]);
790		✗	av_freep(&s1->default_exclude_source_addrs);
791
792		✗	if (s->duration == AV_NOPTS_VALUE)
793		✗	s->ctx_flags |= AVFMTCTX_UNSEEKABLE;
794
795		✗	return 0;
796			}
797			#endif /* CONFIG_RTPDEC */
798
799		✗	void ff_rtsp_undo_setup(AVFormatContext *s, int send_packets)
800			{
801		✗	RTSPState *rt = s->priv_data;
802			int i;
803
804		✗	rt->stored_msg.expected_seq = -1;
805		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
806		✗	RTSPStream *rtsp_st = rt->rtsp_streams[i];
807		✗	if (!rtsp_st)
808		✗	continue;
809		✗	if (rtsp_st->transport_priv) {
810		✗	if (s->oformat) {
811		✗	AVFormatContext *rtpctx = rtsp_st->transport_priv;
812		✗	av_write_trailer(rtpctx);
813		✗	if (rt->lower_transport == RTSP_LOWER_TRANSPORT_TCP) {
814		✗	if (CONFIG_RTSP_MUXER && rtpctx->pb && send_packets)
815		✗	ff_rtsp_tcp_write_packet(s, rtsp_st);
816		✗	ffio_free_dyn_buf(&rtpctx->pb);
817			} else {
818		✗	avio_closep(&rtpctx->pb);
819			}
820		✗	avformat_free_context(rtpctx);
821		✗	} else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RDT)
822		✗	ff_rdt_parse_close(rtsp_st->transport_priv);
823		✗	else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RTP)
824		✗	ff_rtp_parse_close(rtsp_st->transport_priv);
825			}
826		✗	rtsp_st->transport_priv = NULL;
827		✗	ffurl_closep(&rtsp_st->rtp_handle);
828			}
829		✗	}
830
831			/* close and free RTSP streams */
832		✗	void ff_rtsp_close_streams(AVFormatContext *s)
833			{
834		✗	RTSPState *rt = s->priv_data;
835			int i, j;
836			RTSPStream *rtsp_st;
837
838		✗	ff_rtsp_undo_setup(s, 0);
839		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
840		✗	rtsp_st = rt->rtsp_streams[i];
841		✗	if (rtsp_st) {
842		✗	if (rtsp_st->dynamic_handler && rtsp_st->dynamic_protocol_context) {
843		✗	if (rtsp_st->dynamic_handler->close)
844		✗	rtsp_st->dynamic_handler->close(
845		✗	rtsp_st->dynamic_protocol_context);
846		✗	av_free(rtsp_st->dynamic_protocol_context);
847			}
848		✗	for (j = 0; j < rtsp_st->nb_include_source_addrs; j++)
849		✗	av_freep(&rtsp_st->include_source_addrs[j]);
850		✗	av_freep(&rtsp_st->include_source_addrs);
851		✗	for (j = 0; j < rtsp_st->nb_exclude_source_addrs; j++)
852		✗	av_freep(&rtsp_st->exclude_source_addrs[j]);
853		✗	av_freep(&rtsp_st->exclude_source_addrs);
854
855		✗	av_freep(&rtsp_st);
856			}
857			}
858		✗	av_freep(&rt->rtsp_streams);
859		✗	if (rt->asf_ctx) {
860		✗	avformat_close_input(&rt->asf_ctx);
861			}
862		✗	if (CONFIG_RTPDEC && rt->ts)
863		✗	avpriv_mpegts_parse_close(rt->ts);
864		✗	av_freep(&rt->p);
865		✗	av_freep(&rt->recvbuf);
866		✗	}
867
868		✗	int ff_rtsp_open_transport_ctx(AVFormatContext *s, RTSPStream *rtsp_st)
869			{
870		✗	RTSPState *rt = s->priv_data;
871		✗	AVStream *st = NULL;
872		✗	int reordering_queue_size = rt->reordering_queue_size;
873		✗	if (reordering_queue_size < 0) {
874		✗	if (rt->lower_transport == RTSP_LOWER_TRANSPORT_TCP || !s->max_delay)
875		✗	reordering_queue_size = 0;
876			else
877		✗	reordering_queue_size = RTP_REORDER_QUEUE_DEFAULT_SIZE;
878			}
879
880			/* open the RTP context */
881		✗	if (rtsp_st->stream_index >= 0)
882		✗	st = s->streams[rtsp_st->stream_index];
883		✗	if (!st)
884		✗	s->ctx_flags |= AVFMTCTX_NOHEADER;
885
886		✗	if (CONFIG_RTSP_MUXER && s->oformat && st) {
887		✗	int ret = ff_rtp_chain_mux_open((AVFormatContext **)&rtsp_st->transport_priv,
888			s, st, rtsp_st->rtp_handle,
889			rt->pkt_size,
890			rtsp_st->stream_index);
891			/* Ownership of rtp_handle is passed to the rtp mux context */
892		✗	rtsp_st->rtp_handle = NULL;
893		✗	if (ret < 0)
894		✗	return ret;
895		✗	st->time_base = ((AVFormatContext*)rtsp_st->transport_priv)->streams[0]->time_base;
896		✗	} else if (rt->transport == RTSP_TRANSPORT_RAW) {
897		✗	return 0; // Don't need to open any parser here
898		✗	} else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RDT && st)
899		✗	rtsp_st->transport_priv = ff_rdt_parse_open(s, st->index,
900		✗	rtsp_st->dynamic_protocol_context,
901			rtsp_st->dynamic_handler);
902			else if (CONFIG_RTPDEC)
903		✗	rtsp_st->transport_priv = ff_rtp_parse_open(s, st,
904			rtsp_st->sdp_payload_type,
905			reordering_queue_size);
906
907		✗	if (!rtsp_st->transport_priv) {
908		✗	return AVERROR(ENOMEM);
909		✗	} else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RTP &&
910		✗	s->iformat) {
911		✗	RTPDemuxContext *rtpctx = rtsp_st->transport_priv;
912		✗	rtpctx->ssrc = rtsp_st->ssrc;
913		✗	if (rtsp_st->dynamic_handler) {
914		✗	ff_rtp_parse_set_dynamic_protocol(rtsp_st->transport_priv,
915			rtsp_st->dynamic_protocol_context,
916			rtsp_st->dynamic_handler);
917			}
918		✗	if (rtsp_st->crypto_suite[0])
919		✗	ff_rtp_parse_set_crypto(rtsp_st->transport_priv,
920		✗	rtsp_st->crypto_suite,
921		✗	rtsp_st->crypto_params);
922			}
923
924		✗	return 0;
925			}
926
927			#if CONFIG_RTSP_DEMUXER || CONFIG_RTSP_MUXER
928		✗	static void rtsp_parse_range(int *min_ptr, int *max_ptr, const char **pp)
929			{
930			const char *q;
931			char *p;
932			int v;
933
934		✗	q = *pp;
935		✗	q += strspn(q, SPACE_CHARS);
936		✗	v = strtol(q, &p, 10);
937		✗	if (*p == '-') {
938		✗	p++;
939		✗	*min_ptr = v;
940		✗	v = strtol(p, &p, 10);
941		✗	*max_ptr = v;
942			} else {
943		✗	*min_ptr = v;
944		✗	*max_ptr = v;
945			}
946		✗	*pp = p;
947		✗	}
948
949			/* XXX: only one transport specification is parsed */
950		✗	static void rtsp_parse_transport(AVFormatContext *s,
951			RTSPMessageHeader *reply, const char *p)
952			{
953			char transport_protocol[16];
954			char profile[16];
955			char lower_transport[16];
956			char parameter[16];
957			RTSPTransportField *th;
958			char buf[256];
959
960		✗	reply->nb_transports = 0;
961
962			for (;;) {
963		✗	p += strspn(p, SPACE_CHARS);
964		✗	if (*p == '\0')
965		✗	break;
966
967		✗	th = &reply->transports[reply->nb_transports];
968
969		✗	get_word_sep(transport_protocol, sizeof(transport_protocol),
970			"/", &p);
971		✗	if (!av_strcasecmp (transport_protocol, "rtp")) {
972		✗	get_word_sep(profile, sizeof(profile), "/;,", &p);
973		✗	lower_transport[0] = '\0';
974			/* rtp/avp/<protocol> */
975		✗	if (*p == '/') {
976		✗	get_word_sep(lower_transport, sizeof(lower_transport),
977			";,", &p);
978			}
979		✗	th->transport = RTSP_TRANSPORT_RTP;
980		✗	} else if (!av_strcasecmp (transport_protocol, "x-pn-tng") ||
981		✗	!av_strcasecmp (transport_protocol, "x-real-rdt")) {
982			/* x-pn-tng/<protocol> */
983		✗	get_word_sep(lower_transport, sizeof(lower_transport), "/;,", &p);
984		✗	profile[0] = '\0';
985		✗	th->transport = RTSP_TRANSPORT_RDT;
986		✗	} else if (!av_strcasecmp(transport_protocol, "raw")) {
987		✗	get_word_sep(profile, sizeof(profile), "/;,", &p);
988		✗	lower_transport[0] = '\0';
989			/* raw/raw/<protocol> */
990		✗	if (*p == '/') {
991		✗	get_word_sep(lower_transport, sizeof(lower_transport),
992			";,", &p);
993			}
994		✗	th->transport = RTSP_TRANSPORT_RAW;
995			} else {
996		✗	break;
997			}
998		✗	if (!av_strcasecmp(lower_transport, "TCP"))
999		✗	th->lower_transport = RTSP_LOWER_TRANSPORT_TCP;
1000			else
1001		✗	th->lower_transport = RTSP_LOWER_TRANSPORT_UDP;
1002
1003		✗	if (*p == ';')
1004		✗	p++;
1005			/* get each parameter */
1006		✗	while (*p != '\0' && *p != ',') {
1007		✗	get_word_sep(parameter, sizeof(parameter), "=;,", &p);
1008		✗	if (!strcmp(parameter, "port")) {
1009		✗	if (*p == '=') {
1010		✗	p++;
1011		✗	rtsp_parse_range(&th->port_min, &th->port_max, &p);
1012			}
1013		✗	} else if (!strcmp(parameter, "client_port")) {
1014		✗	if (*p == '=') {
1015		✗	p++;
1016		✗	rtsp_parse_range(&th->client_port_min,
1017			&th->client_port_max, &p);
1018			}
1019		✗	} else if (!strcmp(parameter, "server_port")) {
1020		✗	if (*p == '=') {
1021		✗	p++;
1022		✗	rtsp_parse_range(&th->server_port_min,
1023			&th->server_port_max, &p);
1024			}
1025		✗	} else if (!strcmp(parameter, "interleaved")) {
1026		✗	if (*p == '=') {
1027		✗	p++;
1028		✗	rtsp_parse_range(&th->interleaved_min,
1029			&th->interleaved_max, &p);
1030			}
1031		✗	} else if (!strcmp(parameter, "multicast")) {
1032		✗	if (th->lower_transport == RTSP_LOWER_TRANSPORT_UDP)
1033		✗	th->lower_transport = RTSP_LOWER_TRANSPORT_UDP_MULTICAST;
1034		✗	} else if (!strcmp(parameter, "ttl")) {
1035		✗	if (*p == '=') {
1036			char *end;
1037		✗	p++;
1038		✗	th->ttl = strtol(p, &end, 10);
1039		✗	p = end;
1040			}
1041		✗	} else if (!strcmp(parameter, "destination")) {
1042		✗	if (*p == '=') {
1043		✗	p++;
1044		✗	get_word_sep(buf, sizeof(buf), ";,", &p);
1045		✗	get_sockaddr(s, buf, &th->destination);
1046			}
1047		✗	} else if (!strcmp(parameter, "source")) {
1048		✗	if (*p == '=') {
1049		✗	p++;
1050		✗	get_word_sep(buf, sizeof(buf), ";,", &p);
1051		✗	av_strlcpy(th->source, buf, sizeof(th->source));
1052			}
1053		✗	} else if (!strcmp(parameter, "mode")) {
1054		✗	if (*p == '=') {
1055		✗	p++;
1056		✗	get_word_sep(buf, sizeof(buf), ";, ", &p);
1057		✗	if (!av_strcasecmp(buf, "record") ||
1058		✗	!av_strcasecmp(buf, "receive"))
1059		✗	th->mode_record = 1;
1060			}
1061			}
1062
1063		✗	while (*p != ';' && *p != '\0' && *p != ',')
1064		✗	p++;
1065		✗	if (*p == ';')
1066		✗	p++;
1067			}
1068		✗	if (*p == ',')
1069		✗	p++;
1070
1071		✗	reply->nb_transports++;
1072		✗	if (reply->nb_transports >= RTSP_MAX_TRANSPORTS)
1073		✗	break;
1074			}
1075		✗	}
1076
1077		✗	static void handle_rtp_info(RTSPState *rt, const char *url,
1078			uint32_t seq, uint32_t rtptime)
1079			{
1080			int i;
1081		✗	if (!rtptime || !url[0])
1082		✗	return;
1083		✗	if (rt->transport != RTSP_TRANSPORT_RTP)
1084		✗	return;
1085		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
1086		✗	RTSPStream *rtsp_st = rt->rtsp_streams[i];
1087		✗	RTPDemuxContext *rtpctx = rtsp_st->transport_priv;
1088		✗	if (!rtpctx)
1089		✗	continue;
1090		✗	if (!strcmp(rtsp_st->control_url, url)) {
1091		✗	rtpctx->base_timestamp = rtptime;
1092		✗	break;
1093			}
1094			}
1095			}
1096
1097		✗	static void rtsp_parse_rtp_info(RTSPState *rt, const char *p)
1098			{
1099		✗	int read = 0;
1100		✗	char key[20], value[MAX_URL_SIZE], url[MAX_URL_SIZE] = "";
1101		✗	uint32_t seq = 0, rtptime = 0;
1102
1103			for (;;) {
1104		✗	p += strspn(p, SPACE_CHARS);
1105		✗	if (!*p)
1106		✗	break;
1107		✗	get_word_sep(key, sizeof(key), "=", &p);
1108		✗	if (*p != '=')
1109		✗	break;
1110		✗	p++;
1111		✗	get_word_sep(value, sizeof(value), ";, ", &p);
1112		✗	read++;
1113		✗	if (!strcmp(key, "url"))
1114		✗	av_strlcpy(url, value, sizeof(url));
1115		✗	else if (!strcmp(key, "seq"))
1116		✗	seq = strtoul(value, NULL, 10);
1117		✗	else if (!strcmp(key, "rtptime"))
1118		✗	rtptime = strtoul(value, NULL, 10);
1119		✗	if (*p == ',') {
1120		✗	handle_rtp_info(rt, url, seq, rtptime);
1121		✗	url[0] = '\0';
1122		✗	seq = rtptime = 0;
1123		✗	read = 0;
1124			}
1125		✗	if (*p)
1126		✗	p++;
1127			}
1128		✗	if (read > 0)
1129		✗	handle_rtp_info(rt, url, seq, rtptime);
1130		✗	}
1131
1132		✗	void ff_rtsp_parse_line(AVFormatContext *s,
1133			RTSPMessageHeader *reply, const char *buf,
1134			RTSPState *rt, const char *method)
1135			{
1136			const char *p;
1137
1138			/* NOTE: we do case independent match for broken servers */
1139		✗	p = buf;
1140		✗	if (av_stristart(p, "Session:", &p)) {
1141			int t;
1142		✗	get_word_sep(reply->session_id, sizeof(reply->session_id), ";", &p);
1143		✗	if (av_stristart(p, ";timeout=", &p) &&
1144		✗	(t = strtol(p, NULL, 10)) > 0) {
1145		✗	reply->timeout = t;
1146			}
1147		✗	} else if (av_stristart(p, "Content-Length:", &p)) {
1148		✗	reply->content_length = strtol(p, NULL, 10);
1149		✗	} else if (av_stristart(p, "Transport:", &p)) {
1150		✗	rtsp_parse_transport(s, reply, p);
1151		✗	} else if (av_stristart(p, "CSeq:", &p)) {
1152		✗	reply->seq = strtol(p, NULL, 10);
1153		✗	} else if (av_stristart(p, "Range:", &p)) {
1154		✗	rtsp_parse_range_npt(p, &reply->range_start, &reply->range_end);
1155		✗	} else if (av_stristart(p, "RealChallenge1:", &p)) {
1156		✗	p += strspn(p, SPACE_CHARS);
1157		✗	av_strlcpy(reply->real_challenge, p, sizeof(reply->real_challenge));
1158		✗	} else if (av_stristart(p, "Server:", &p)) {
1159		✗	p += strspn(p, SPACE_CHARS);
1160		✗	av_strlcpy(reply->server, p, sizeof(reply->server));
1161		✗	} else if (av_stristart(p, "Notice:", &p) ||
1162		✗	av_stristart(p, "X-Notice:", &p)) {
1163		✗	reply->notice = strtol(p, NULL, 10);
1164		✗	} else if (av_stristart(p, "Location:", &p)) {
1165		✗	p += strspn(p, SPACE_CHARS);
1166		✗	av_strlcpy(reply->location, p , sizeof(reply->location));
1167		✗	} else if (av_stristart(p, "WWW-Authenticate:", &p) && rt) {
1168		✗	p += strspn(p, SPACE_CHARS);
1169		✗	ff_http_auth_handle_header(&rt->auth_state, "WWW-Authenticate", p);
1170		✗	} else if (av_stristart(p, "Authentication-Info:", &p) && rt) {
1171		✗	p += strspn(p, SPACE_CHARS);
1172		✗	ff_http_auth_handle_header(&rt->auth_state, "Authentication-Info", p);
1173		✗	} else if (av_stristart(p, "Content-Base:", &p) && rt) {
1174		✗	p += strspn(p, SPACE_CHARS);
1175		✗	if (method && !strcmp(method, "DESCRIBE"))
1176		✗	av_strlcpy(rt->control_uri, p , sizeof(rt->control_uri));
1177		✗	} else if (av_stristart(p, "RTP-Info:", &p) && rt) {
1178		✗	p += strspn(p, SPACE_CHARS);
1179		✗	if (method && !strcmp(method, "PLAY"))
1180		✗	rtsp_parse_rtp_info(rt, p);
1181		✗	} else if (av_stristart(p, "Public:", &p) && rt) {
1182		✗	if (strstr(p, "GET_PARAMETER") &&
1183		✗	method && !strcmp(method, "OPTIONS"))
1184		✗	rt->get_parameter_supported = 1;
1185		✗	} else if (av_stristart(p, "x-Accept-Dynamic-Rate:", &p) && rt) {
1186		✗	p += strspn(p, SPACE_CHARS);
1187		✗	rt->accept_dynamic_rate = atoi(p);
1188		✗	} else if (av_stristart(p, "Content-Type:", &p)) {
1189		✗	p += strspn(p, SPACE_CHARS);
1190		✗	av_strlcpy(reply->content_type, p, sizeof(reply->content_type));
1191		✗	} else if (av_stristart(p, "com.ses.streamID:", &p)) {
1192		✗	p += strspn(p, SPACE_CHARS);
1193		✗	av_strlcpy(reply->stream_id, p, sizeof(reply->stream_id));
1194			}
1195		✗	}
1196
1197			/* skip a RTP/TCP interleaved packet */
1198		✗	int ff_rtsp_skip_packet(AVFormatContext *s)
1199			{
1200		✗	RTSPState *rt = s->priv_data;
1201			int ret, len, len1;
1202			uint8_t buf[MAX_URL_SIZE];
1203
1204		✗	rt->pending_packet = 0;
1205		✗	ret = ffurl_read_complete(rt->rtsp_hd, buf, 3);
1206		✗	if (ret != 3)
1207		✗	return ret < 0 ? ret : AVERROR(EIO);
1208		✗	len = AV_RB16(buf + 1);
1209
1210		✗	av_log(s, AV_LOG_TRACE, "skipping RTP packet len=%d\n", len);
1211
1212			/* skip payload */
1213		✗	while (len > 0) {
1214		✗	len1 = len;
1215		✗	if (len1 > sizeof(buf))
1216		✗	len1 = sizeof(buf);
1217		✗	ret = ffurl_read_complete(rt->rtsp_hd, buf, len1);
1218		✗	if (ret != len1)
1219		✗	return ret < 0 ? ret : AVERROR(EIO);
1220		✗	len -= len1;
1221			}
1222
1223		✗	return 0;
1224			}
1225
1226		✗	static int ff_rtsp_read_reply_internal(AVFormatContext *s,
1227			RTSPMessageHeader *reply,
1228			unsigned char **content_ptr,
1229			int return_on_interleaved_data,
1230			const char *method)
1231			{
1232		✗	RTSPState *rt = s->priv_data;
1233			char buf[MAX_URL_SIZE], buf1[MAX_URL_SIZE], *q;
1234			unsigned char ch;
1235			const char *p;
1236			int ret, content_length, line_count, request;
1237			unsigned char *content;
1238
1239		✗	start:
1240		✗	line_count = 0;
1241		✗	request = 0;
1242		✗	content = NULL;
1243		✗	memset(reply, 0, sizeof(*reply));
1244
1245			/* parse reply (XXX: use buffers) */
1246		✗	rt->last_reply[0] = '\0';
1247			for (;;) {
1248		✗	q = buf;
1249			for (;;) {
1250		✗	ret = ffurl_read_complete(rt->rtsp_hd, &ch, 1);
1251		✗	if (ret != 1) {
1252		✗	ret = (ret < 0) ? ret : AVERROR(EIO);
1253		✗	av_log(s, AV_LOG_WARNING, "Failed reading RTSP data: %s\n", av_err2str(ret));
1254		✗	return ret;
1255			}
1256		✗	av_log(s, AV_LOG_TRACE, "ret=%d c=%02x [%c]\n", ret, ch, ch);
1257		✗	if (ch == '\n')
1258		✗	break;
1259		✗	if (ch == '$' && q == buf) {
1260		✗	if (return_on_interleaved_data) {
1261		✗	rt->pending_packet = 1;
1262		✗	return 1;
1263			} else {
1264		✗	ret = ff_rtsp_skip_packet(s);
1265		✗	if (ret < 0)
1266		✗	return ret;
1267			}
1268		✗	} else if (ch != '\r') {
1269		✗	if ((q - buf) < sizeof(buf) - 1)
1270		✗	*q++ = ch;
1271			}
1272			}
1273		✗	*q = '\0';
1274
1275		✗	av_log(s, AV_LOG_TRACE, "line='%s'\n", buf);
1276
1277			/* test if last line */
1278		✗	if (buf[0] == '\0')
1279		✗	break;
1280		✗	p = buf;
1281		✗	if (line_count == 0) {
1282			/* get reply code */
1283		✗	get_word(buf1, sizeof(buf1), &p);
1284		✗	if (!strncmp(buf1, "RTSP/", 5)) {
1285		✗	get_word(buf1, sizeof(buf1), &p);
1286		✗	reply->status_code = atoi(buf1);
1287		✗	p += strspn(p, SPACE_CHARS);
1288		✗	av_strlcpy(reply->reason, p, sizeof(reply->reason));
1289			} else {
1290		✗	av_strlcpy(reply->reason, buf1, sizeof(reply->reason)); // method
1291		✗	get_word(buf1, sizeof(buf1), &p); // object
1292		✗	request = 1;
1293			}
1294			} else {
1295		✗	ff_rtsp_parse_line(s, reply, p, rt, method);
1296		✗	av_strlcat(rt->last_reply, p, sizeof(rt->last_reply));
1297		✗	av_strlcat(rt->last_reply, "\n", sizeof(rt->last_reply));
1298			}
1299		✗	line_count++;
1300			}
1301
1302		✗	if (rt->session_id[0] == '\0' && reply->session_id[0] != '\0' && !request)
1303		✗	av_strlcpy(rt->session_id, reply->session_id, sizeof(rt->session_id));
1304
1305		✗	content_length = reply->content_length;
1306		✗	if (content_length > 0) {
1307			/* leave some room for a trailing '\0' (useful for simple parsing) */
1308		✗	content = av_malloc(content_length + 1);
1309		✗	if (!content)
1310		✗	return AVERROR(ENOMEM);
1311		✗	if ((ret = ffurl_read_complete(rt->rtsp_hd, content, content_length)) != content_length) {
1312		✗	av_freep(&content);
1313		✗	return ret < 0 ? ret : AVERROR(EIO);
1314			}
1315		✗	content[content_length] = '\0';
1316			}
1317		✗	if (content_ptr)
1318		✗	*content_ptr = content;
1319			else
1320		✗	av_freep(&content);
1321
1322		✗	if (request) {
1323			char buf[MAX_URL_SIZE];
1324			char base64buf[AV_BASE64_SIZE(sizeof(buf))];
1325		✗	const char* ptr = buf;
1326
1327		✗	if (!strcmp(reply->reason, "OPTIONS") ||
1328		✗	!strcmp(reply->reason, "GET_PARAMETER")) {
1329		✗	snprintf(buf, sizeof(buf), "RTSP/1.0 200 OK\r\n");
1330		✗	if (reply->seq)
1331		✗	av_strlcatf(buf, sizeof(buf), "CSeq: %d\r\n", reply->seq);
1332		✗	if (reply->session_id[0])
1333		✗	av_strlcatf(buf, sizeof(buf), "Session: %s\r\n",
1334		✗	reply->session_id);
1335			} else {
1336		✗	snprintf(buf, sizeof(buf), "RTSP/1.0 501 Not Implemented\r\n");
1337			}
1338		✗	av_strlcat(buf, "\r\n", sizeof(buf));
1339
1340		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1341		✗	av_base64_encode(base64buf, sizeof(base64buf), buf, strlen(buf));
1342		✗	ptr = base64buf;
1343			}
1344		✗	ffurl_write(rt->rtsp_hd_out, ptr, strlen(ptr));
1345
1346		✗	rt->last_cmd_time = av_gettime_relative();
1347			/* Even if the request from the server had data, it is not the data
1348			* that the caller wants or expects. The memory could also be leaked
1349			* if the actual following reply has content data. */
1350		✗	if (content_ptr)
1351		✗	av_freep(content_ptr);
1352			/* If method is set, this is called from ff_rtsp_send_cmd,
1353			* where a reply to exactly this request is awaited. For
1354			* callers from within packet receiving, we just want to
1355			* return to the caller and go back to receiving packets. */
1356		✗	if (method)
1357		✗	goto start;
1358		✗	return 0;
1359			}
1360
1361		✗	if (rt->seq != reply->seq) {
1362		✗	av_log(s, AV_LOG_WARNING, "CSeq %d expected, %d received.\n",
1363			rt->seq, reply->seq);
1364			}
1365
1366			/* EOS */
1367		✗	if (reply->notice == 2101 /* End-of-Stream Reached */ ||
1368		✗	reply->notice == 2104 /* Start-of-Stream Reached */ ||
1369		✗	reply->notice == 2306 /* Continuous Feed Terminated */) {
1370		✗	rt->state = RTSP_STATE_IDLE;
1371		✗	} else if (reply->notice >= 4400 && reply->notice < 5500) {
1372		✗	return AVERROR(EIO); /* data or server error */
1373		✗	} else if (reply->notice == 2401 /* Ticket Expired */ ||
1374		✗	(reply->notice >= 5500 && reply->notice < 5600) /* end of term */ )
1375		✗	return AVERROR(EPERM);
1376
1377		✗	return 0;
1378			}
1379
1380		✗	int ff_rtsp_read_reply(AVFormatContext *s, RTSPMessageHeader *reply,
1381			unsigned char **content_ptr,
1382			int return_on_interleaved_data, const char *method)
1383			{
1384			int ret;
1385		✗	RTSPState *rt = s->priv_data;
1386
1387			// If we returned on pending packet last time,
1388			// do not try to read again, as it would corrupt
1389			// the state due to the already consumed '$'.
1390		✗	if (rt->pending_packet) {
1391		✗	if (return_on_interleaved_data)
1392		✗	return 1;
1393
1394		✗	ret = ff_rtsp_skip_packet(s);
1395		✗	if (ret < 0)
1396		✗	return ret;
1397			}
1398
1399		✗	if (rt->stored_msg.expected_seq != -1) {
1400			RTSPMessageHeader header;
1401
1402		✗	ret = ff_rtsp_read_reply_internal(s, &header,
1403			&rt->stored_msg.body, return_on_interleaved_data, NULL);
1404		✗	if (ret != 0)
1405		✗	return ret;
1406
1407		✗	if (rt->stored_msg.expected_seq == header.seq) {
1408			// Got the expected reply, store it for later
1409		✗	rt->stored_msg.expected_seq = -1;
1410		✗	rt->stored_msg.header = av_calloc(1, sizeof(*rt->stored_msg.header));
1411		✗	if (!rt->stored_msg.header) {
1412		✗	av_freep(&rt->stored_msg.body);
1413		✗	return AVERROR(ENOMEM);
1414			}
1415		✗	memcpy(rt->stored_msg.header, &header, sizeof(header));
1416			} else {
1417		✗	av_log(s, AV_LOG_WARNING, "Unexpected reply with seq %d, expected %d\n",
1418			header.seq, rt->stored_msg.expected_seq);
1419		✗	av_freep(&rt->stored_msg.body);
1420			}
1421
1422			// Do not return here as we still need to read the reply
1423			// the caller was actually wanting to retrieve.
1424			}
1425
1426		✗	return ff_rtsp_read_reply_internal(s, reply, content_ptr,
1427			return_on_interleaved_data, method);
1428			}
1429
1430			/**
1431			* Send a command to the RTSP server without waiting for the reply.
1432			*
1433			* @param s RTSP (de)muxer context
1434			* @param method the method for the request
1435			* @param url the target url for the request
1436			* @param headers extra header lines to include in the request
1437			* @param send_content if non-null, the data to send as request body content
1438			* @param send_content_length the length of the send_content data, or 0 if
1439			* send_content is null
1440			*
1441			* @return zero if success, nonzero otherwise
1442			*/
1443		✗	int ff_rtsp_send_cmd_with_content_async(AVFormatContext *s,
1444			const char *method, const char *url,
1445			const char *headers,
1446			const unsigned char *send_content,
1447			int send_content_length)
1448			{
1449		✗	RTSPState *rt = s->priv_data;
1450			char buf[MAX_URL_SIZE], *out_buf;
1451			char base64buf[AV_BASE64_SIZE(sizeof(buf))];
1452
1453		✗	if (!rt->rtsp_hd_out)
1454		✗	return AVERROR(ENOTCONN);
1455
1456			/* Add in RTSP headers */
1457		✗	out_buf = buf;
1458		✗	rt->seq++;
1459		✗	snprintf(buf, sizeof(buf), "%s %s RTSP/1.0\r\n", method, url);
1460		✗	if (headers)
1461		✗	av_strlcat(buf, headers, sizeof(buf));
1462		✗	av_strlcatf(buf, sizeof(buf), "CSeq: %d\r\n", rt->seq);
1463		✗	av_strlcatf(buf, sizeof(buf), "User-Agent: %s\r\n", rt->user_agent);
1464		✗	if (rt->session_id[0] != '\0' && (!headers ||
1465		✗	!strstr(headers, "\nIf-Match:"))) {
1466		✗	av_strlcatf(buf, sizeof(buf), "Session: %s\r\n", rt->session_id);
1467			}
1468		✗	if (rt->auth[0]) {
1469		✗	char *str = ff_http_auth_create_response(&rt->auth_state,
1470		✗	rt->auth, url, method);
1471		✗	if (str)
1472		✗	av_strlcat(buf, str, sizeof(buf));
1473		✗	av_free(str);
1474			}
1475		✗	if (send_content_length > 0 && send_content)
1476		✗	av_strlcatf(buf, sizeof(buf), "Content-Length: %d\r\n", send_content_length);
1477		✗	av_strlcat(buf, "\r\n", sizeof(buf));
1478
1479			/* base64 encode rtsp if tunneling */
1480		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1481		✗	av_base64_encode(base64buf, sizeof(base64buf), buf, strlen(buf));
1482		✗	out_buf = base64buf;
1483			}
1484
1485		✗	av_log(s, AV_LOG_TRACE, "Sending:\n%s--\n", buf);
1486
1487		✗	ffurl_write(rt->rtsp_hd_out, out_buf, strlen(out_buf));
1488		✗	if (send_content_length > 0 && send_content) {
1489		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1490		✗	avpriv_report_missing_feature(s, "Tunneling of RTSP requests with content data");
1491		✗	return AVERROR_PATCHWELCOME;
1492			}
1493		✗	ffurl_write(rt->rtsp_hd_out, send_content, send_content_length);
1494			}
1495		✗	rt->last_cmd_time = av_gettime_relative();
1496
1497		✗	return 0;
1498			}
1499
1500		✗	int ff_rtsp_send_cmd_with_content_async_stored(AVFormatContext *s,
1501			const char *method, const char *url,
1502			const char *headers,
1503			const unsigned char *send_content,
1504			int send_content_length)
1505			{
1506		✗	RTSPState *rt = s->priv_data;
1507		✗	int ret = ff_rtsp_send_cmd_with_content_async(s, method, url, headers,
1508			send_content, send_content_length);
1509		✗	if (ret < 0)
1510		✗	return ret;
1511
1512		✗	rt->stored_msg.expected_seq = rt->seq;
1513		✗	av_freep(&rt->stored_msg.header);
1514		✗	av_freep(&rt->stored_msg.body);
1515		✗	return 0;
1516			}
1517
1518		✗	int ff_rtsp_send_cmd_async(AVFormatContext *s, const char *method,
1519			const char *url, const char *headers)
1520			{
1521		✗	return ff_rtsp_send_cmd_with_content_async(s, method, url, headers, NULL, 0);
1522			}
1523
1524		✗	int ff_rtsp_send_cmd(AVFormatContext *s, const char *method, const char *url,
1525			const char *headers, RTSPMessageHeader *reply,
1526			unsigned char **content_ptr)
1527			{
1528		✗	return ff_rtsp_send_cmd_with_content(s, method, url, headers, reply,
1529			content_ptr, NULL, 0);
1530			}
1531
1532		✗	int ff_rtsp_send_cmd_with_content(AVFormatContext *s,
1533			const char *method, const char *url,
1534			const char *header,
1535			RTSPMessageHeader *reply,
1536			unsigned char **content_ptr,
1537			const unsigned char *send_content,
1538			int send_content_length)
1539			{
1540		✗	RTSPState *rt = s->priv_data;
1541			HTTPAuthType cur_auth_type;
1542		✗	int ret, attempts = 0;
1543
1544		✗	retry:
1545		✗	cur_auth_type = rt->auth_state.auth_type;
1546		✗	if ((ret = ff_rtsp_send_cmd_with_content_async(s, method, url, header,
1547			send_content,
1548			send_content_length)) < 0)
1549		✗	return ret;
1550
1551		✗	if ((ret = ff_rtsp_read_reply(s, reply, content_ptr, 0, method) ) < 0)
1552		✗	return ret;
1553		✗	attempts++;
1554
1555		✗	if (reply->status_code == 401 &&
1556		✗	(cur_auth_type == HTTP_AUTH_NONE || rt->auth_state.stale) &&
1557		✗	rt->auth_state.auth_type != HTTP_AUTH_NONE && attempts < 2)
1558		✗	goto retry;
1559
1560		✗	if (reply->status_code > 400){
1561		✗	av_log(s, AV_LOG_ERROR, "method %s failed: %d (%s)\n",
1562			method,
1563		✗	reply->status_code,
1564		✗	reply->reason);
1565		✗	av_log(s, AV_LOG_DEBUG, "%s\n", rt->last_reply);
1566			}
1567
1568		✗	return 0;
1569			}
1570
1571		✗	int ff_rtsp_read_reply_async_stored(AVFormatContext *s, RTSPMessageHeader **reply,
1572			unsigned char **content_ptr)
1573			{
1574		✗	RTSPState *rt = s->priv_data;
1575		✗	if (rt->stored_msg.header == NULL) {
1576		✗	if (rt->stored_msg.expected_seq == -1)
1577		✗	return AVERROR(EINVAL); // Reply to be stored was never requested
1578
1579			// Reply pending, tell caller to try again later
1580		✗	return AVERROR(EAGAIN);
1581			}
1582
1583		✗	if (reply)
1584		✗	*reply = rt->stored_msg.header;
1585			else
1586		✗	av_free(rt->stored_msg.header);
1587
1588		✗	if (content_ptr)
1589		✗	*content_ptr = rt->stored_msg.body;
1590			else
1591		✗	av_free(rt->stored_msg.body);
1592
1593		✗	rt->stored_msg.header = NULL;
1594		✗	rt->stored_msg.body = NULL;
1595		✗	return 0;
1596			}
1597
1598		✗	int ff_rtsp_make_setup_request(AVFormatContext *s, const char *host, int port,
1599			int lower_transport, const char *real_challenge)
1600			{
1601		✗	RTSPState *rt = s->priv_data;
1602		✗	int rtx = 0, j, i, err, interleave = 0, port_off = 0;
1603			RTSPStream *rtsp_st;
1604		✗	RTSPMessageHeader reply1, *reply = &reply1;
1605			char cmd[MAX_URL_SIZE];
1606			const char *trans_pref;
1607
1608		✗	memset(&reply1, 0, sizeof(reply1));
1609
1610		✗	if (rt->transport == RTSP_TRANSPORT_RDT)
1611		✗	trans_pref = "x-pn-tng";
1612		✗	else if (rt->transport == RTSP_TRANSPORT_RAW)
1613		✗	trans_pref = "RAW/RAW";
1614			else
1615		✗	trans_pref = "RTP/AVP";
1616
1617			/* default timeout: 1 minute */
1618		✗	rt->timeout = 60;
1619
1620			/* Choose a random starting offset within the first half of the
1621			* port range, to allow for a number of ports to try even if the offset
1622			* happens to be at the end of the random range. */
1623		✗	if (rt->rtp_port_max - rt->rtp_port_min >= 4) {
1624		✗	port_off = av_get_random_seed() % ((rt->rtp_port_max - rt->rtp_port_min)/2);
1625			/* even random offset */
1626		✗	port_off -= port_off & 0x01;
1627			}
1628
1629		✗	for (j = rt->rtp_port_min + port_off, i = 0; i < rt->nb_rtsp_streams; ++i) {
1630			char transport[MAX_URL_SIZE];
1631
1632			/*
1633			* WMS serves all UDP data over a single connection, the RTX, which
1634			* isn't necessarily the first in the SDP but has to be the first
1635			* to be set up, else the second/third SETUP will fail with a 461.
1636			*/
1637		✗	if (lower_transport == RTSP_LOWER_TRANSPORT_UDP &&
1638		✗	rt->server_type == RTSP_SERVER_WMS) {
1639		✗	if (i == 0) {
1640			/* rtx first */
1641		✗	for (rtx = 0; rtx < rt->nb_rtsp_streams; rtx++) {
1642		✗	int len = strlen(rt->rtsp_streams[rtx]->control_url);
1643		✗	if (len >= 4 &&
1644		✗	!strcmp(rt->rtsp_streams[rtx]->control_url + len - 4,
1645			"/rtx"))
1646		✗	break;
1647			}
1648		✗	if (rtx == rt->nb_rtsp_streams)
1649		✗	return -1; /* no RTX found */
1650		✗	rtsp_st = rt->rtsp_streams[rtx];
1651			} else
1652		✗	rtsp_st = rt->rtsp_streams[i > rtx ? i : i - 1];
1653			} else
1654		✗	rtsp_st = rt->rtsp_streams[i];
1655
1656			/* RTP/UDP */
1657		✗	if (lower_transport == RTSP_LOWER_TRANSPORT_UDP) {
1658			char buf[256];
1659
1660		✗	if (rt->server_type == RTSP_SERVER_WMS && i > 1) {
1661		✗	port = reply->transports[0].client_port_min;
1662		✗	goto have_port;
1663			}
1664
1665			/* first try in specified port range */
1666		✗	while (j + 1 <= rt->rtp_port_max) {
1667		✗	AVDictionary *opts = map_to_opts(rt);
1668
1669		✗	ff_url_join(buf, sizeof(buf), "rtp", NULL, host, -1,
1670			"?localrtpport=%d", j);
1671			/* we will use two ports per rtp stream (rtp and rtcp) */
1672		✗	j += 2;
1673		✗	err = ffurl_open_whitelist(&rtsp_st->rtp_handle, buf, AVIO_FLAG_READ_WRITE,
1674		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
1675
1676		✗	av_dict_free(&opts);
1677
1678		✗	if (!err)
1679		✗	goto rtp_opened;
1680			}
1681		✗	av_log(s, AV_LOG_ERROR, "Unable to open an input RTP port\n");
1682		✗	err = AVERROR(EIO);
1683		✗	goto fail;
1684
1685		✗	rtp_opened:
1686		✗	port = ff_rtp_get_local_rtp_port(rtsp_st->rtp_handle);
1687		✗	have_port:
1688		✗	av_strlcpy(transport, trans_pref, sizeof(transport));
1689		✗	av_strlcat(transport,
1690		✗	rt->server_type == RTSP_SERVER_SATIP ? ";" : "/UDP;",
1691			sizeof(transport));
1692		✗	if (rt->server_type != RTSP_SERVER_REAL)
1693		✗	av_strlcat(transport, "unicast;", sizeof(transport));
1694		✗	av_strlcatf(transport, sizeof(transport),
1695			"client_port=%d", port);
1696		✗	if (rt->transport == RTSP_TRANSPORT_RTP &&
1697		✗	!(rt->server_type == RTSP_SERVER_WMS && i > 0))
1698		✗	av_strlcatf(transport, sizeof(transport), "-%d", port + 1);
1699			}
1700
1701			/* RTP/TCP */
1702		✗	else if (lower_transport == RTSP_LOWER_TRANSPORT_TCP) {
1703			/* For WMS streams, the application streams are only used for
1704			* UDP. When trying to set it up for TCP streams, the server
1705			* will return an error. Therefore, we skip those streams. */
1706		✗	if (rt->server_type == RTSP_SERVER_WMS &&
1707		✗	(rtsp_st->stream_index < 0 ||
1708		✗	s->streams[rtsp_st->stream_index]->codecpar->codec_type ==
1709			AVMEDIA_TYPE_DATA))
1710		✗	continue;
1711		✗	snprintf(transport, sizeof(transport) - 1,
1712			"%s/TCP;", trans_pref);
1713		✗	if (rt->transport != RTSP_TRANSPORT_RDT)
1714		✗	av_strlcat(transport, "unicast;", sizeof(transport));
1715		✗	av_strlcatf(transport, sizeof(transport),
1716			"interleaved=%d-%d",
1717			interleave, interleave + 1);
1718		✗	interleave += 2;
1719			}
1720
1721		✗	else if (lower_transport == RTSP_LOWER_TRANSPORT_UDP_MULTICAST) {
1722		✗	snprintf(transport, sizeof(transport) - 1,
1723			"%s/UDP;multicast", trans_pref);
1724			} else {
1725		✗	err = AVERROR(EINVAL);
1726		✗	goto fail; // transport would be uninitialized
1727			}
1728
1729		✗	if (s->oformat) {
1730		✗	av_strlcat(transport, ";mode=record", sizeof(transport));
1731		✗	} else if (rt->server_type == RTSP_SERVER_REAL ||
1732		✗	rt->server_type == RTSP_SERVER_WMS)
1733		✗	av_strlcat(transport, ";mode=play", sizeof(transport));
1734		✗	snprintf(cmd, sizeof(cmd),
1735			"Transport: %s\r\n",
1736			transport);
1737		✗	if (rt->accept_dynamic_rate)
1738		✗	av_strlcat(cmd, "x-Dynamic-Rate: 0\r\n", sizeof(cmd));
1739		✗	if (CONFIG_RTPDEC && i == 0 && rt->server_type == RTSP_SERVER_REAL) {
1740			char real_res[41], real_csum[9];
1741		✗	ff_rdt_calc_response_and_checksum(real_res, real_csum,
1742			real_challenge);
1743		✗	av_strlcatf(cmd, sizeof(cmd),
1744			"If-Match: %s\r\n"
1745			"RealChallenge2: %s, sd=%s\r\n",
1746		✗	rt->session_id, real_res, real_csum);
1747			}
1748		✗	ff_rtsp_send_cmd(s, "SETUP", rtsp_st->control_url, cmd, reply, NULL);
1749		✗	if (reply->status_code == 461 /* Unsupported protocol */ && i == 0) {
1750		✗	err = 1;
1751		✗	goto fail;
1752		✗	} else if (reply->status_code != RTSP_STATUS_OK ||
1753		✗	reply->nb_transports != 1) {
1754		✗	err = ff_rtsp_averror(reply->status_code, AVERROR_INVALIDDATA);
1755		✗	goto fail;
1756			}
1757
1758		✗	if (rt->server_type == RTSP_SERVER_SATIP && reply->stream_id[0]) {
1759			char proto[128], host[128], path[512], auth[128];
1760			int port;
1761		✗	av_url_split(proto, sizeof(proto), auth, sizeof(auth), host, sizeof(host),
1762		✗	&port, path, sizeof(path), rt->control_uri);
1763		✗	ff_url_join(rt->control_uri, sizeof(rt->control_uri), proto, NULL, host,
1764		✗	port, "/stream=%s", reply->stream_id);
1765			}
1766
1767			/* XXX: same protocol for all streams is required */
1768		✗	if (i > 0) {
1769		✗	if (reply->transports[0].lower_transport != rt->lower_transport ||
1770		✗	reply->transports[0].transport != rt->transport) {
1771		✗	err = AVERROR_INVALIDDATA;
1772		✗	goto fail;
1773			}
1774			} else {
1775		✗	rt->lower_transport = reply->transports[0].lower_transport;
1776		✗	rt->transport = reply->transports[0].transport;
1777			}
1778
1779			/* Fail if the server responded with another lower transport mode
1780			* than what we requested. */
1781		✗	if (reply->transports[0].lower_transport != lower_transport) {
1782		✗	av_log(s, AV_LOG_ERROR, "Nonmatching transport in server reply\n");
1783		✗	err = AVERROR_INVALIDDATA;
1784		✗	goto fail;
1785			}
1786
1787		✗	switch(reply->transports[0].lower_transport) {
1788		✗	case RTSP_LOWER_TRANSPORT_TCP:
1789		✗	rtsp_st->interleaved_min = reply->transports[0].interleaved_min;
1790		✗	rtsp_st->interleaved_max = reply->transports[0].interleaved_max;
1791		✗	break;
1792
1793		✗	case RTSP_LOWER_TRANSPORT_UDP: {
1794		✗	char url[MAX_URL_SIZE], options[30] = "";
1795		✗	const char *peer = host;
1796
1797		✗	if (rt->rtsp_flags & RTSP_FLAG_FILTER_SRC)
1798		✗	av_strlcpy(options, "?connect=1", sizeof(options));
1799			/* Use source address if specified */
1800		✗	if (reply->transports[0].source[0])
1801		✗	peer = reply->transports[0].source;
1802		✗	ff_url_join(url, sizeof(url), "rtp", NULL, peer,
1803			reply->transports[0].server_port_min, "%s", options);
1804		✗	if (!(rt->server_type == RTSP_SERVER_WMS && i > 1) &&
1805		✗	ff_rtp_set_remote_url(rtsp_st->rtp_handle, url) < 0) {
1806		✗	err = AVERROR_INVALIDDATA;
1807		✗	goto fail;
1808			}
1809		✗	break;
1810			}
1811		✗	case RTSP_LOWER_TRANSPORT_UDP_MULTICAST: {
1812		✗	char url[MAX_URL_SIZE], namebuf[50], optbuf[20] = "";
1813			struct sockaddr_storage addr;
1814			int port, ttl;
1815		✗	AVDictionary *opts = map_to_opts(rt);
1816
1817		✗	if (reply->transports[0].destination.ss_family) {
1818		✗	addr = reply->transports[0].destination;
1819		✗	port = reply->transports[0].port_min;
1820		✗	ttl = reply->transports[0].ttl;
1821			} else {
1822		✗	addr = rtsp_st->sdp_ip;
1823		✗	port = rtsp_st->sdp_port;
1824		✗	ttl = rtsp_st->sdp_ttl;
1825			}
1826		✗	if (ttl > 0)
1827		✗	snprintf(optbuf, sizeof(optbuf), "?ttl=%d", ttl);
1828		✗	getnameinfo((struct sockaddr*) &addr, sizeof(addr),
1829			namebuf, sizeof(namebuf), NULL, 0, NI_NUMERICHOST);
1830		✗	ff_url_join(url, sizeof(url), "rtp", NULL, namebuf,
1831			port, "%s", optbuf);
1832		✗	err = ffurl_open_whitelist(&rtsp_st->rtp_handle, url, AVIO_FLAG_READ_WRITE,
1833		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
1834		✗	av_dict_free(&opts);
1835
1836		✗	if (err < 0) {
1837		✗	err = AVERROR_INVALIDDATA;
1838		✗	goto fail;
1839			}
1840		✗	break;
1841			}
1842			}
1843
1844		✗	if ((err = ff_rtsp_open_transport_ctx(s, rtsp_st)))
1845		✗	goto fail;
1846			}
1847
1848		✗	if (rt->nb_rtsp_streams && reply->timeout > 0)
1849		✗	rt->timeout = reply->timeout;
1850
1851		✗	if (rt->server_type == RTSP_SERVER_REAL)
1852		✗	rt->need_subscription = 1;
1853
1854		✗	return 0;
1855
1856		✗	fail:
1857		✗	ff_rtsp_undo_setup(s, 0);
1858		✗	return err;
1859			}
1860
1861		✗	void ff_rtsp_close_connections(AVFormatContext *s)
1862			{
1863		✗	RTSPState *rt = s->priv_data;
1864		✗	if (rt->rtsp_hd_out != rt->rtsp_hd)
1865		✗	ffurl_closep(&rt->rtsp_hd_out);
1866		✗	rt->rtsp_hd_out = NULL;
1867		✗	ffurl_closep(&rt->rtsp_hd);
1868		✗	}
1869
1870		✗	int ff_rtsp_connect(AVFormatContext *s)
1871			{
1872		✗	RTSPState *rt = s->priv_data;
1873			char proto[128], host[1024], path[2048];
1874			char tcpname[1024], cmd[MAX_URL_SIZE], auth[128];
1875		✗	const char *lower_rtsp_proto = "tcp";
1876			int port, err, tcp_fd;
1877		✗	RTSPMessageHeader reply1, *reply = &reply1;
1878		✗	int lower_transport_mask = 0;
1879		✗	int default_port = RTSP_DEFAULT_PORT;
1880		✗	int https_tunnel = 0;
1881		✗	char real_challenge[64] = "";
1882			struct sockaddr_storage peer;
1883		✗	socklen_t peer_len = sizeof(peer);
1884
1885		✗	rt->stored_msg.expected_seq = -1;
1886		✗	if (rt->rtp_port_max < rt->rtp_port_min) {
1887		✗	av_log(s, AV_LOG_ERROR, "Invalid UDP port range, max port %d less "
1888			"than min port %d\n", rt->rtp_port_max,
1889			rt->rtp_port_min);
1890		✗	return AVERROR(EINVAL);
1891			}
1892
1893		✗	if (!ff_network_init())
1894		✗	return AVERROR(EIO);
1895
1896		✗	if (s->max_delay < 0) /* Not set by the caller */
1897		✗	s->max_delay = s->iformat ? DEFAULT_REORDERING_DELAY : 0;
1898
1899		✗	rt->control_transport = RTSP_MODE_PLAIN;
1900		✗	if (rt->lower_transport_mask & ((1 << RTSP_LOWER_TRANSPORT_HTTP) |
1901			(1 << RTSP_LOWER_TRANSPORT_HTTPS))) {
1902		✗	https_tunnel = !!(rt->lower_transport_mask & (1 << RTSP_LOWER_TRANSPORT_HTTPS));
1903		✗	rt->lower_transport_mask = 1 << RTSP_LOWER_TRANSPORT_TCP;
1904		✗	rt->control_transport = RTSP_MODE_TUNNEL;
1905			}
1906			/* Only pass through valid flags from here */
1907		✗	rt->lower_transport_mask &= (1 << RTSP_LOWER_TRANSPORT_NB) - 1;
1908
1909		✗	redirect:
1910		✗	memset(&reply1, 0, sizeof(reply1));
1911			/* extract hostname and port */
1912		✗	av_url_split(proto, sizeof(proto), auth, sizeof(auth),
1913		✗	host, sizeof(host), &port, path, sizeof(path), s->url);
1914
1915		✗	if (!strcmp(proto, "rtsps")) {
1916		✗	lower_rtsp_proto = "tls";
1917		✗	default_port = RTSPS_DEFAULT_PORT;
1918		✗	rt->lower_transport_mask = 1 << RTSP_LOWER_TRANSPORT_TCP;
1919		✗	} else if (!strcmp(proto, "satip")) {
1920		✗	av_strlcpy(proto, "rtsp", sizeof(proto));
1921		✗	rt->server_type = RTSP_SERVER_SATIP;
1922		✗	} else if (strcmp(proto, "rtsp"))
1923		✗	return AVERROR_INVALIDDATA;
1924
1925		✗	if (*auth) {
1926		✗	av_strlcpy(rt->auth, auth, sizeof(rt->auth));
1927			}
1928		✗	if (port < 0)
1929		✗	port = default_port;
1930
1931		✗	lower_transport_mask = rt->lower_transport_mask;
1932
1933		✗	if (!lower_transport_mask)
1934		✗	lower_transport_mask = (1 << RTSP_LOWER_TRANSPORT_NB) - 1;
1935
1936		✗	if (s->oformat) {
1937			/* Only UDP or TCP - UDP multicast isn't supported. */
1938		✗	lower_transport_mask &= (1 << RTSP_LOWER_TRANSPORT_UDP) |
1939			(1 << RTSP_LOWER_TRANSPORT_TCP);
1940		✗	if (!lower_transport_mask || rt->control_transport == RTSP_MODE_TUNNEL) {
1941		✗	av_log(s, AV_LOG_ERROR, "Unsupported lower transport method, "
1942			"only UDP and TCP are supported for output.\n");
1943		✗	err = AVERROR(EINVAL);
1944		✗	goto fail;
1945			}
1946			}
1947
1948			/* Construct the URI used in request; this is similar to s->url,
1949			* but with authentication credentials removed and RTSP specific options
1950			* stripped out. */
1951		✗	ff_url_join(rt->control_uri, sizeof(rt->control_uri), proto, NULL,
1952			host, port, "%s", path);
1953
1954		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1955			/* set up initial handshake for tunneling */
1956			char httpname[1024];
1957			char sessioncookie[17];
1958			char headers[1024];
1959		✗	AVDictionary *options = NULL;
1960
1961		✗	av_dict_set_int(&options, "timeout", rt->stimeout, 0);
1962		✗	if (https_tunnel) {
1963		✗	int ret = copy_tls_opts_dict(rt, &options);
1964		✗	if (ret < 0) {
1965		✗	av_dict_free(&options);
1966		✗	err = ret;
1967		✗	goto fail;
1968			}
1969			}
1970
1971		✗	ff_url_join(httpname, sizeof(httpname), https_tunnel ? "https" : "http", auth, host, port, "%s", path);
1972		✗	snprintf(sessioncookie, sizeof(sessioncookie), "%08x%08x",
1973			av_get_random_seed(), av_get_random_seed());
1974
1975			/* GET requests */
1976		✗	if (ffurl_alloc(&rt->rtsp_hd, httpname, AVIO_FLAG_READ,
1977		✗	&s->interrupt_callback) < 0) {
1978		✗	av_dict_free(&options);
1979		✗	err = AVERROR(EIO);
1980		✗	goto fail;
1981			}
1982
1983			/* generate GET headers */
1984		✗	snprintf(headers, sizeof(headers),
1985			"x-sessioncookie: %s\r\n"
1986			"Accept: application/x-rtsp-tunnelled\r\n"
1987			"Pragma: no-cache\r\n"
1988			"Cache-Control: no-cache\r\n",
1989			sessioncookie);
1990		✗	av_opt_set(rt->rtsp_hd->priv_data, "headers", headers, 0);
1991
1992		✗	if (!rt->rtsp_hd->protocol_whitelist && s->protocol_whitelist) {
1993		✗	rt->rtsp_hd->protocol_whitelist = av_strdup(s->protocol_whitelist);
1994		✗	if (!rt->rtsp_hd->protocol_whitelist) {
1995		✗	av_dict_free(&options);
1996		✗	err = AVERROR(ENOMEM);
1997		✗	goto fail;
1998			}
1999			}
2000
2001		✗	if (!rt->rtsp_hd->protocol_blacklist && s->protocol_blacklist) {
2002		✗	rt->rtsp_hd->protocol_blacklist = av_strdup(s->protocol_blacklist);
2003		✗	if (!rt->rtsp_hd->protocol_blacklist) {
2004		✗	av_dict_free(&options);
2005		✗	err = AVERROR(ENOMEM);
2006		✗	goto fail;
2007			}
2008			}
2009
2010			/* complete the connection */
2011		✗	if (ffurl_connect(rt->rtsp_hd, &options)) {
2012		✗	av_dict_free(&options);
2013		✗	err = AVERROR(EIO);
2014		✗	goto fail;
2015			}
2016
2017			/* POST requests */
2018		✗	if (ffurl_alloc(&rt->rtsp_hd_out, httpname, AVIO_FLAG_WRITE,
2019		✗	&s->interrupt_callback) < 0 ) {
2020		✗	av_dict_free(&options);
2021		✗	err = AVERROR(EIO);
2022		✗	goto fail;
2023			}
2024
2025			/* generate POST headers */
2026		✗	snprintf(headers, sizeof(headers),
2027			"x-sessioncookie: %s\r\n"
2028			"Content-Type: application/x-rtsp-tunnelled\r\n"
2029			"Pragma: no-cache\r\n"
2030			"Cache-Control: no-cache\r\n"
2031			"Content-Length: 32767\r\n"
2032			"Expires: Sun, 9 Jan 1972 00:00:00 GMT\r\n",
2033			sessioncookie);
2034		✗	av_opt_set(rt->rtsp_hd_out->priv_data, "headers", headers, 0);
2035		✗	av_opt_set(rt->rtsp_hd_out->priv_data, "chunked_post", "0", 0);
2036		✗	av_opt_set(rt->rtsp_hd_out->priv_data, "send_expect_100", "0", 0);
2037
2038			/* Initialize the authentication state for the POST session. The HTTP
2039			* protocol implementation doesn't properly handle multi-pass
2040			* authentication for POST requests, since it would require one of
2041			* the following:
2042			* - implementing Expect: 100-continue, which many HTTP servers
2043			* don't support anyway, even less the RTSP servers that do HTTP
2044			* tunneling
2045			* - sending the whole POST data until getting a 401 reply specifying
2046			* what authentication method to use, then resending all that data
2047			* - waiting for potential 401 replies directly after sending the
2048			* POST header (waiting for some unspecified time)
2049			* Therefore, we copy the full auth state, which works for both basic
2050			* and digest. (For digest, we would have to synchronize the nonce
2051			* count variable between the two sessions, if we'd do more requests
2052			* with the original session, though.)
2053			*/
2054		✗	ff_http_init_auth_state(rt->rtsp_hd_out, rt->rtsp_hd);
2055
2056			/* complete the connection */
2057		✗	if (ffurl_connect(rt->rtsp_hd_out, &options)) {
2058		✗	av_dict_free(&options);
2059		✗	err = AVERROR(EIO);
2060		✗	goto fail;
2061			}
2062		✗	av_dict_free(&options);
2063			} else {
2064			int ret;
2065			/* open the tcp connection */
2066		✗	AVDictionary *proto_opts = NULL;
2067		✗	if (strcmp("tls", lower_rtsp_proto) == 0) {
2068		✗	ret = copy_tls_opts_dict(rt, &proto_opts);
2069		✗	if (ret < 0) {
2070		✗	av_dict_free(&proto_opts);
2071		✗	err = ret;
2072		✗	goto fail;
2073			}
2074			}
2075
2076		✗	ff_url_join(tcpname, sizeof(tcpname), lower_rtsp_proto, NULL,
2077			host, port,
2078			"?timeout=%"PRId64, rt->stimeout);
2079		✗	if ((ret = ffurl_open_whitelist(&rt->rtsp_hd, tcpname, AVIO_FLAG_READ_WRITE,
2080		✗	&s->interrupt_callback, &proto_opts, s->protocol_whitelist, s->protocol_blacklist, NULL)) < 0) {
2081		✗	av_dict_free(&proto_opts);
2082		✗	err = ret;
2083		✗	goto fail;
2084			}
2085		✗	av_dict_free(&proto_opts);
2086		✗	rt->rtsp_hd_out = rt->rtsp_hd;
2087			}
2088		✗	rt->seq = 0;
2089
2090		✗	tcp_fd = ffurl_get_file_handle(rt->rtsp_hd);
2091		✗	if (tcp_fd < 0) {
2092		✗	err = tcp_fd;
2093		✗	goto fail;
2094			}
2095		✗	if (!getpeername(tcp_fd, (struct sockaddr*) &peer, &peer_len)) {
2096		✗	getnameinfo((struct sockaddr*) &peer, peer_len, host, sizeof(host),
2097			NULL, 0, NI_NUMERICHOST);
2098			}
2099
2100			/* request options supported by the server; this also detects server
2101			* type */
2102		✗	if (rt->server_type != RTSP_SERVER_SATIP)
2103		✗	rt->server_type = RTSP_SERVER_RTP;
2104			for (;;) {
2105		✗	cmd[0] = 0;
2106		✗	if (rt->server_type == RTSP_SERVER_REAL)
2107		✗	av_strlcat(cmd,
2108			/*
2109			* The following entries are required for proper
2110			* streaming from a Realmedia server. They are
2111			* interdependent in some way although we currently
2112			* don't quite understand how. Values were copied
2113			* from mplayer SVN r23589.
2114			* ClientChallenge is a 16-byte ID in hex
2115			* CompanyID is a 16-byte ID in base64
2116			*/
2117			"ClientChallenge: 9e26d33f2984236010ef6253fb1887f7\r\n"
2118			"PlayerStarttime: [28/03/2003:22:50:23 00:00]\r\n"
2119			"CompanyID: KnKV4M4I/B2FjJ1TToLycw==\r\n"
2120			"GUID: 00000000-0000-0000-0000-000000000000\r\n",
2121			sizeof(cmd));
2122		✗	ff_rtsp_send_cmd(s, "OPTIONS", rt->control_uri, cmd, reply, NULL);
2123		✗	if (reply->status_code != RTSP_STATUS_OK) {
2124		✗	err = ff_rtsp_averror(reply->status_code, AVERROR_INVALIDDATA);
2125		✗	goto fail;
2126			}
2127
2128			/* detect server type if not standard-compliant RTP */
2129		✗	if (rt->server_type != RTSP_SERVER_REAL && reply->real_challenge[0]) {
2130		✗	rt->server_type = RTSP_SERVER_REAL;
2131		✗	continue;
2132		✗	} else if (!av_strncasecmp(reply->server, "WMServer/", 9)) {
2133		✗	rt->server_type = RTSP_SERVER_WMS;
2134		✗	} else if (rt->server_type == RTSP_SERVER_REAL)
2135		✗	strcpy(real_challenge, reply->real_challenge);
2136		✗	break;
2137			}
2138
2139			#if CONFIG_RTSP_DEMUXER
2140		✗	if (s->iformat) {
2141		✗	if (rt->server_type == RTSP_SERVER_SATIP)
2142		✗	err = init_satip_stream(s);
2143			else
2144		✗	err = ff_rtsp_setup_input_streams(s, reply);
2145			} else
2146			#endif
2147			if (CONFIG_RTSP_MUXER)
2148		✗	err = ff_rtsp_setup_output_streams(s, host);
2149			else
2150			av_unreachable("Either muxer or demuxer must be enabled");
2151		✗	if (err)
2152		✗	goto fail;
2153
2154			do {
2155		✗	int lower_transport = ff_log2_tab[lower_transport_mask &
2156		✗	~(lower_transport_mask - 1)];
2157
2158		✗	if ((lower_transport_mask & (1 << RTSP_LOWER_TRANSPORT_TCP))
2159		✗	&& (rt->rtsp_flags & RTSP_FLAG_PREFER_TCP))
2160		✗	lower_transport = RTSP_LOWER_TRANSPORT_TCP;
2161
2162		✗	err = ff_rtsp_make_setup_request(s, host, port, lower_transport,
2163		✗	rt->server_type == RTSP_SERVER_REAL ?
2164			real_challenge : NULL);
2165		✗	if (err < 0)
2166		✗	goto fail;
2167		✗	lower_transport_mask &= ~(1 << lower_transport);
2168		✗	if (lower_transport_mask == 0 && err == 1) {
2169		✗	err = AVERROR(EPROTONOSUPPORT);
2170		✗	goto fail;
2171			}
2172		✗	} while (err);
2173
2174		✗	rt->lower_transport_mask = lower_transport_mask;
2175		✗	av_strlcpy(rt->real_challenge, real_challenge, sizeof(rt->real_challenge));
2176		✗	rt->state = RTSP_STATE_IDLE;
2177		✗	rt->seek_timestamp = 0; /* default is to start stream at position zero */
2178		✗	return 0;
2179		✗	fail:
2180		✗	ff_rtsp_close_streams(s);
2181		✗	ff_rtsp_close_connections(s);
2182		✗	if (reply->status_code >=300 && reply->status_code < 400 && s->iformat) {
2183		✗	int ret = ff_format_check_set_url(s, reply->location);
2184		✗	if (ret < 0) {
2185		✗	err = ret;
2186		✗	goto fail2;
2187			}
2188		✗	rt->session_id[0] = '\0';
2189		✗	av_log(s, AV_LOG_INFO, "Status %d: Redirecting to %s\n",
2190		✗	reply->status_code,
2191			s->url);
2192		✗	goto redirect;
2193			}
2194		✗	fail2:
2195		✗	ff_network_close();
2196		✗	return err;
2197			}
2198			#endif /* CONFIG_RTSP_DEMUXER || CONFIG_RTSP_MUXER */
2199
2200			#if CONFIG_RTPDEC
2201			#if CONFIG_RTSP_DEMUXER
2202		✗	static int parse_rtsp_message(AVFormatContext *s)
2203			{
2204		✗	RTSPState *rt = s->priv_data;
2205			int ret;
2206
2207		✗	if (rt->rtsp_flags & RTSP_FLAG_LISTEN) {
2208		✗	if (rt->state == RTSP_STATE_STREAMING) {
2209		✗	return ff_rtsp_parse_streaming_commands(s);
2210			} else
2211		✗	return AVERROR_EOF;
2212			} else {
2213			RTSPMessageHeader reply;
2214		✗	ret = ff_rtsp_read_reply(s, &reply, NULL, 0, NULL);
2215		✗	if (ret < 0)
2216		✗	return ret;
2217			/* XXX: parse message */
2218		✗	if (rt->state != RTSP_STATE_STREAMING)
2219		✗	return 0;
2220			}
2221
2222		✗	return 0;
2223			}
2224			#endif
2225
2226		✗	static int udp_read_packet(AVFormatContext *s, RTSPStream **prtsp_st,
2227			uint8_t *buf, int buf_size, int64_t wait_end)
2228			{
2229		✗	RTSPState *rt = s->priv_data;
2230			RTSPStream *rtsp_st;
2231			int n, i, ret;
2232		✗	struct pollfd *p = rt->p;
2233		✗	int *fds = NULL, fdsnum, fdsidx;
2234		✗	int64_t runs = rt->stimeout / POLLING_TIME / 1000;
2235
2236		✗	if (!p) {
2237		✗	p = rt->p = av_malloc_array(2 * rt->nb_rtsp_streams + 1, sizeof(*p));
2238		✗	if (!p)
2239		✗	return AVERROR(ENOMEM);
2240
2241		✗	if (rt->rtsp_hd) {
2242		✗	p[rt->max_p].fd = ffurl_get_file_handle(rt->rtsp_hd);
2243		✗	p[rt->max_p++].events = POLLIN;
2244			}
2245		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2246		✗	rtsp_st = rt->rtsp_streams[i];
2247		✗	if (rtsp_st->rtp_handle) {
2248		✗	if (ret = ffurl_get_multi_file_handle(rtsp_st->rtp_handle,
2249			&fds, &fdsnum)) {
2250		✗	av_log(s, AV_LOG_ERROR, "Unable to recover rtp ports\n");
2251		✗	return ret;
2252			}
2253		✗	if (fdsnum != 2) {
2254		✗	av_log(s, AV_LOG_ERROR,
2255			"Number of fds %d not supported\n", fdsnum);
2256		✗	av_freep(&fds);
2257		✗	return AVERROR_INVALIDDATA;
2258			}
2259		✗	for (fdsidx = 0; fdsidx < fdsnum; fdsidx++) {
2260		✗	p[rt->max_p].fd = fds[fdsidx];
2261		✗	p[rt->max_p++].events = POLLIN;
2262			}
2263		✗	av_freep(&fds);
2264			}
2265			}
2266			}
2267
2268			for (;;) {
2269		✗	if (ff_check_interrupt(&s->interrupt_callback))
2270		✗	return AVERROR_EXIT;
2271		✗	if (wait_end && wait_end - av_gettime_relative() < 0)
2272		✗	return AVERROR(EAGAIN);
2273		✗	n = poll(p, rt->max_p, POLLING_TIME);
2274		✗	if (n > 0) {
2275		✗	int j = rt->rtsp_hd ? 1 : 0;
2276		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2277		✗	rtsp_st = rt->rtsp_streams[i];
2278		✗	if (rtsp_st->rtp_handle) {
2279		✗	if (p[j].revents & POLLIN || p[j+1].revents & POLLIN) {
2280		✗	ret = ffurl_read(rtsp_st->rtp_handle, buf, buf_size);
2281		✗	if (ret > 0) {
2282		✗	*prtsp_st = rtsp_st;
2283		✗	return ret;
2284			}
2285			}
2286		✗	j+=2;
2287			}
2288			}
2289			#if CONFIG_RTSP_DEMUXER
2290		✗	if (rt->rtsp_hd && p[0].revents & POLLIN) {
2291		✗	if ((ret = parse_rtsp_message(s)) < 0) {
2292		✗	return ret;
2293			}
2294			}
2295			#endif
2296		✗	} else if (n == 0 && rt->stimeout > 0 && --runs <= 0) {
2297		✗	return AVERROR(ETIMEDOUT);
2298		✗	} else if (n < 0 && errno != EINTR)
2299		✗	return AVERROR(errno);
2300			}
2301			}
2302
2303		✗	static int pick_stream(AVFormatContext *s, RTSPStream **rtsp_st,
2304			const uint8_t *buf, int len)
2305			{
2306		✗	RTSPState *rt = s->priv_data;
2307			int i;
2308		✗	if (len < 0)
2309		✗	return len;
2310		✗	if (rt->nb_rtsp_streams == 1) {
2311		✗	*rtsp_st = rt->rtsp_streams[0];
2312		✗	return len;
2313			}
2314		✗	if (len >= 8 && rt->transport == RTSP_TRANSPORT_RTP) {
2315		✗	if (RTP_PT_IS_RTCP(rt->recvbuf[1])) {
2316		✗	int no_ssrc = 0;
2317		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2318		✗	RTPDemuxContext *rtpctx = rt->rtsp_streams[i]->transport_priv;
2319		✗	if (!rtpctx)
2320		✗	continue;
2321		✗	if (rtpctx->ssrc == AV_RB32(&buf[4])) {
2322		✗	*rtsp_st = rt->rtsp_streams[i];
2323		✗	return len;
2324			}
2325		✗	if (!rtpctx->ssrc)
2326		✗	no_ssrc = 1;
2327			}
2328		✗	if (no_ssrc) {
2329		✗	av_log(s, AV_LOG_WARNING,
2330			"Unable to pick stream for packet - SSRC not known for "
2331			"all streams\n");
2332		✗	return AVERROR(EAGAIN);
2333			}
2334			} else {
2335		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2336		✗	if ((buf[1] & 0x7f) == rt->rtsp_streams[i]->sdp_payload_type) {
2337		✗	*rtsp_st = rt->rtsp_streams[i];
2338		✗	return len;
2339			}
2340			}
2341			}
2342			}
2343		✗	av_log(s, AV_LOG_WARNING, "Unable to pick stream for packet\n");
2344		✗	return AVERROR(EAGAIN);
2345			}
2346
2347		✗	static int read_packet(AVFormatContext *s,
2348			RTSPStream **rtsp_st, RTSPStream *first_queue_st,
2349			int64_t wait_end)
2350			{
2351		✗	RTSPState *rt = s->priv_data;
2352			int len;
2353
2354		✗	switch(rt->lower_transport) {
2355		✗	default:
2356			#if CONFIG_RTSP_DEMUXER
2357			case RTSP_LOWER_TRANSPORT_TCP:
2358		✗	len = ff_rtsp_tcp_read_packet(s, rtsp_st, rt->recvbuf, RECVBUF_SIZE);
2359		✗	break;
2360			#endif
2361		✗	case RTSP_LOWER_TRANSPORT_UDP:
2362			case RTSP_LOWER_TRANSPORT_UDP_MULTICAST:
2363		✗	len = udp_read_packet(s, rtsp_st, rt->recvbuf, RECVBUF_SIZE, wait_end);
2364		✗	if (len > 0 && (*rtsp_st)->transport_priv && rt->transport == RTSP_TRANSPORT_RTP)
2365		✗	ff_rtp_check_and_send_back_rr((*rtsp_st)->transport_priv, (*rtsp_st)->rtp_handle, NULL, len);
2366		✗	break;
2367		✗	case RTSP_LOWER_TRANSPORT_CUSTOM:
2368		✗	if (first_queue_st && rt->transport == RTSP_TRANSPORT_RTP &&
2369		✗	wait_end && wait_end < av_gettime_relative())
2370		✗	len = AVERROR(EAGAIN);
2371			else
2372		✗	len = avio_read_partial(s->pb, rt->recvbuf, RECVBUF_SIZE);
2373		✗	len = pick_stream(s, rtsp_st, rt->recvbuf, len);
2374		✗	if (len > 0 && (*rtsp_st)->transport_priv && rt->transport == RTSP_TRANSPORT_RTP)
2375		✗	ff_rtp_check_and_send_back_rr((*rtsp_st)->transport_priv, NULL, s->pb, len);
2376		✗	break;
2377			}
2378
2379		✗	if (len == 0)
2380		✗	return AVERROR_EOF;
2381
2382		✗	return len;
2383			}
2384
2385		✗	int ff_rtsp_fetch_packet(AVFormatContext *s, AVPacket *pkt)
2386			{
2387		✗	RTSPState *rt = s->priv_data;
2388			int ret, len;
2389		✗	RTSPStream *rtsp_st, *first_queue_st = NULL;
2390		✗	int64_t wait_end = 0;
2391
2392		✗	if (rt->nb_byes == rt->nb_rtsp_streams)
2393		✗	return AVERROR_EOF;
2394
2395			/* get next frames from the same RTP packet */
2396		✗	if (rt->cur_transport_priv) {
2397		✗	if (rt->transport == RTSP_TRANSPORT_RDT) {
2398		✗	ret = ff_rdt_parse_packet(rt->cur_transport_priv, pkt, NULL, 0);
2399		✗	} else if (rt->transport == RTSP_TRANSPORT_RTP) {
2400		✗	ret = ff_rtp_parse_packet(rt->cur_transport_priv, pkt, NULL, 0);
2401		✗	} else if (CONFIG_RTPDEC && rt->ts) {
2402		✗	ret = avpriv_mpegts_parse_packet(rt->ts, pkt, rt->recvbuf + rt->recvbuf_pos, rt->recvbuf_len - rt->recvbuf_pos);
2403		✗	if (ret >= 0) {
2404		✗	rt->recvbuf_pos += ret;
2405		✗	ret = rt->recvbuf_pos < rt->recvbuf_len;
2406			}
2407			} else
2408		✗	ret = -1;
2409		✗	if (ret == 0) {
2410		✗	rt->cur_transport_priv = NULL;
2411		✗	return 0;
2412		✗	} else if (ret == 1) {
2413		✗	return 0;
2414			} else
2415		✗	rt->cur_transport_priv = NULL;
2416			}
2417
2418		✗	redo:
2419		✗	if (rt->transport == RTSP_TRANSPORT_RTP) {
2420			int i;
2421		✗	int64_t first_queue_time = 0;
2422		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2423		✗	RTPDemuxContext *rtpctx = rt->rtsp_streams[i]->transport_priv;
2424			int64_t queue_time;
2425		✗	if (!rtpctx)
2426		✗	continue;
2427		✗	queue_time = ff_rtp_queued_packet_time(rtpctx);
2428		✗	if (queue_time && (queue_time - first_queue_time < 0 ||
2429			!first_queue_time)) {
2430		✗	first_queue_time = queue_time;
2431		✗	first_queue_st = rt->rtsp_streams[i];
2432			}
2433			}
2434		✗	if (first_queue_time) {
2435		✗	wait_end = first_queue_time + s->max_delay;
2436			} else {
2437		✗	wait_end = 0;
2438		✗	first_queue_st = NULL;
2439			}
2440			}
2441
2442			/* read next RTP packet */
2443		✗	if (!rt->recvbuf) {
2444		✗	rt->recvbuf = av_malloc(RECVBUF_SIZE);
2445		✗	if (!rt->recvbuf)
2446		✗	return AVERROR(ENOMEM);
2447			}
2448
2449		✗	len = read_packet(s, &rtsp_st, first_queue_st, wait_end);
2450		✗	if (len == AVERROR(EAGAIN) && first_queue_st &&
2451		✗	rt->transport == RTSP_TRANSPORT_RTP) {
2452		✗	av_log(s, AV_LOG_WARNING,
2453			"max delay reached. need to consume packet\n");
2454		✗	rtsp_st = first_queue_st;
2455		✗	ret = ff_rtp_parse_packet(rtsp_st->transport_priv, pkt, NULL, 0);
2456		✗	goto end;
2457			}
2458		✗	if (len < 0)
2459		✗	return len;
2460
2461		✗	if (rt->transport == RTSP_TRANSPORT_RDT) {
2462		✗	ret = ff_rdt_parse_packet(rtsp_st->transport_priv, pkt, &rt->recvbuf, len);
2463		✗	} else if (rt->transport == RTSP_TRANSPORT_RTP) {
2464		✗	ret = ff_rtp_parse_packet(rtsp_st->transport_priv, pkt, &rt->recvbuf, len);
2465		✗	if (rtsp_st->feedback) {
2466		✗	AVIOContext *pb = NULL;
2467		✗	if (rt->lower_transport == RTSP_LOWER_TRANSPORT_CUSTOM)
2468		✗	pb = s->pb;
2469		✗	ff_rtp_send_rtcp_feedback(rtsp_st->transport_priv, rtsp_st->rtp_handle, pb);
2470			}
2471		✗	if (ret < 0) {
2472			/* Either bad packet, or a RTCP packet. Check if the
2473			* first_rtcp_ntp_time field was initialized. */
2474		✗	RTPDemuxContext *rtpctx = rtsp_st->transport_priv;
2475		✗	if (rtpctx->first_rtcp_ntp_time != AV_NOPTS_VALUE) {
2476			/* first_rtcp_ntp_time has been initialized for this stream,
2477			* copy the same value to all other uninitialized streams,
2478			* in order to map their timestamp origin to the same ntp time
2479			* as this one. */
2480			int i;
2481		✗	AVStream *st = NULL;
2482		✗	if (rtsp_st->stream_index >= 0)
2483		✗	st = s->streams[rtsp_st->stream_index];
2484		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2485		✗	RTPDemuxContext *rtpctx2 = rt->rtsp_streams[i]->transport_priv;
2486		✗	AVStream *st2 = NULL;
2487		✗	if (rt->rtsp_streams[i]->stream_index >= 0)
2488		✗	st2 = s->streams[rt->rtsp_streams[i]->stream_index];
2489		✗	if (rtpctx2 && st && st2 &&
2490		✗	rtpctx2->first_rtcp_ntp_time == AV_NOPTS_VALUE) {
2491		✗	rtpctx2->first_rtcp_ntp_time = rtpctx->first_rtcp_ntp_time;
2492		✗	rtpctx2->rtcp_ts_offset = av_rescale_q(
2493			rtpctx->rtcp_ts_offset, st->time_base,
2494			st2->time_base);
2495			}
2496			}
2497			// Make real NTP start time available in AVFormatContext
2498		✗	if (s->start_time_realtime == AV_NOPTS_VALUE) {
2499		✗	s->start_time_realtime = ff_parse_ntp_time(rtpctx->first_rtcp_ntp_time) - NTP_OFFSET_US;
2500		✗	if (rtpctx->st) {
2501		✗	s->start_time_realtime -=
2502		✗	av_rescale_q (rtpctx->rtcp_ts_offset, rtpctx->st->time_base, AV_TIME_BASE_Q);
2503			}
2504			}
2505			}
2506		✗	if (ret == -RTCP_BYE) {
2507		✗	rt->nb_byes++;
2508
2509		✗	av_log(s, AV_LOG_DEBUG, "Received BYE for stream %d (%d/%d)\n",
2510		✗	rtsp_st->stream_index, rt->nb_byes, rt->nb_rtsp_streams);
2511
2512		✗	if (rt->nb_byes == rt->nb_rtsp_streams)
2513		✗	return AVERROR_EOF;
2514			}
2515			}
2516		✗	} else if (CONFIG_RTPDEC && rt->ts) {
2517		✗	ret = avpriv_mpegts_parse_packet(rt->ts, pkt, rt->recvbuf, len);
2518		✗	if (ret >= 0) {
2519		✗	if (ret < len) {
2520		✗	rt->recvbuf_len = len;
2521		✗	rt->recvbuf_pos = ret;
2522		✗	rt->cur_transport_priv = rt->ts;
2523		✗	return 1;
2524			} else {
2525		✗	ret = 0;
2526			}
2527			}
2528			} else {
2529		✗	return AVERROR_INVALIDDATA;
2530			}
2531		✗	end:
2532		✗	if (ret < 0)
2533		✗	goto redo;
2534		✗	if (ret == 1)
2535			/* more packets may follow, so we save the RTP context */
2536		✗	rt->cur_transport_priv = rtsp_st->transport_priv;
2537
2538		✗	return ret;
2539			}
2540			#endif /* CONFIG_RTPDEC */
2541
2542			#if CONFIG_SDP_DEMUXER
2543		7480	static int sdp_probe(const AVProbeData *p1)
2544			{
2545		7480	const char *p = p1->buf, *p_end = p1->buf + p1->buf_size;
2546
2547			/* we look for a line beginning "c=IN IP" */
2548	3/4 ✓ Branch 0 taken 599495 times. ✗ Branch 1 not taken. ✓ Branch 2 taken 595294 times. ✓ Branch 3 taken 4201 times.	599495	while (p < p_end && *p != '\0') {
2549	3/4 ✓ Branch 0 taken 595154 times. ✓ Branch 1 taken 140 times. ✗ Branch 2 not taken. ✓ Branch 3 taken 595154 times.	1190448	if (sizeof("c=IN IP") - 1 < p_end - p &&
2550		595154	av_strstart(p, "c=IN IP", NULL))
2551		✗	return AVPROBE_SCORE_EXTENSION;
2552
2553	4/4 ✓ Branch 0 taken 96652595 times. ✓ Branch 1 taken 3279 times. ✓ Branch 2 taken 96060580 times. ✓ Branch 3 taken 592015 times.	96655874	while (p < p_end - 1 && *p != '\n') p++;
2554	2/2 ✓ Branch 0 taken 3279 times. ✓ Branch 1 taken 592015 times.	595294	if (++p >= p_end)
2555		3279	break;
2556	2/2 ✓ Branch 0 taken 3507 times. ✓ Branch 1 taken 588508 times.	592015	if (*p == '\r')
2557		3507	p++;
2558			}
2559		7480	return 0;
2560			}
2561
2562		✗	static void append_source_addrs(char *buf, int size, const char *name,
2563			int count, struct RTSPSource **addrs)
2564			{
2565			int i;
2566		✗	if (!count)
2567		✗	return;
2568		✗	av_strlcatf(buf, size, "&%s=%s", name, addrs[0]->addr);
2569		✗	for (i = 1; i < count; i++)
2570		✗	av_strlcatf(buf, size, ",%s", addrs[i]->addr);
2571			}
2572
2573		✗	static int sdp_read_header(AVFormatContext *s)
2574			{
2575		✗	RTSPState *rt = s->priv_data;
2576			RTSPStream *rtsp_st;
2577			int i, err;
2578			char url[MAX_URL_SIZE];
2579			AVBPrint bp;
2580
2581		✗	if (!ff_network_init())
2582		✗	return AVERROR(EIO);
2583
2584		✗	if (s->max_delay < 0) /* Not set by the caller */
2585		✗	s->max_delay = DEFAULT_REORDERING_DELAY;
2586		✗	if (rt->rtsp_flags & RTSP_FLAG_CUSTOM_IO)
2587		✗	rt->lower_transport = RTSP_LOWER_TRANSPORT_CUSTOM;
2588
2589			/* read the whole sdp file */
2590		✗	av_bprint_init(&bp, 0, AV_BPRINT_SIZE_UNLIMITED);
2591		✗	err = avio_read_to_bprint(s->pb, &bp, INT_MAX);
2592		✗	if (err < 0 ) {
2593		✗	ff_network_close();
2594		✗	av_bprint_finalize(&bp, NULL);
2595		✗	return err;
2596			}
2597		✗	err = ff_sdp_parse(s, bp.str);
2598		✗	av_bprint_finalize(&bp, NULL);
2599		✗	if (err) goto fail;
2600
2601			/* open each RTP stream */
2602		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2603			char namebuf[50];
2604		✗	rtsp_st = rt->rtsp_streams[i];
2605
2606		✗	if (!(rt->rtsp_flags & RTSP_FLAG_CUSTOM_IO)) {
2607		✗	AVDictionary *opts = map_to_opts(rt);
2608			char buf[MAX_URL_SIZE];
2609			const char *p;
2610
2611		✗	err = getnameinfo((struct sockaddr*) &rtsp_st->sdp_ip,
2612			sizeof(rtsp_st->sdp_ip),
2613			namebuf, sizeof(namebuf), NULL, 0, NI_NUMERICHOST);
2614		✗	if (err) {
2615		✗	av_log(s, AV_LOG_ERROR, "getnameinfo: %s\n", gai_strerror(err));
2616		✗	err = AVERROR(EIO);
2617		✗	av_dict_free(&opts);
2618		✗	goto fail;
2619			}
2620		✗	ff_url_join(url, sizeof(url), "rtp", NULL,
2621			namebuf, rtsp_st->sdp_port,
2622			"?localrtpport=%d&ttl=%d&connect=%d&write_to_source=%d",
2623			rtsp_st->sdp_port, rtsp_st->sdp_ttl,
2624		✗	rt->rtsp_flags & RTSP_FLAG_FILTER_SRC ? 1 : 0,
2625		✗	rt->rtsp_flags & RTSP_FLAG_RTCP_TO_SOURCE ? 1 : 0);
2626
2627		✗	p = strchr(s->url, '?');
2628		✗	if (p && av_find_info_tag(buf, sizeof(buf), "localaddr", p))
2629		✗	av_strlcatf(url, sizeof(url), "&localaddr=%s", buf);
2630		✗	else if (rt->localaddr && rt->localaddr[0])
2631		✗	av_strlcatf(url, sizeof(url), "&localaddr=%s", rt->localaddr);
2632		✗	append_source_addrs(url, sizeof(url), "sources",
2633			rtsp_st->nb_include_source_addrs,
2634			rtsp_st->include_source_addrs);
2635		✗	append_source_addrs(url, sizeof(url), "block",
2636			rtsp_st->nb_exclude_source_addrs,
2637			rtsp_st->exclude_source_addrs);
2638		✗	err = ffurl_open_whitelist(&rtsp_st->rtp_handle, url, AVIO_FLAG_READ,
2639		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
2640
2641		✗	av_dict_free(&opts);
2642
2643		✗	if (err < 0) {
2644		✗	err = AVERROR_INVALIDDATA;
2645		✗	goto fail;
2646			}
2647			}
2648		✗	if ((err = ff_rtsp_open_transport_ctx(s, rtsp_st)))
2649		✗	goto fail;
2650			}
2651		✗	return 0;
2652		✗	fail:
2653		✗	ff_rtsp_close_streams(s);
2654		✗	ff_network_close();
2655		✗	return err;
2656			}
2657
2658		✗	static int sdp_read_close(AVFormatContext *s)
2659			{
2660		✗	ff_rtsp_close_streams(s);
2661		✗	ff_network_close();
2662		✗	return 0;
2663			}
2664
2665			static const AVClass sdp_demuxer_class = {
2666			.class_name = "SDP demuxer",
2667			.item_name = av_default_item_name,
2668			.option = sdp_options,
2669			.version = LIBAVUTIL_VERSION_INT,
2670			};
2671
2672			const FFInputFormat ff_sdp_demuxer = {
2673			.p.name = "sdp",
2674			.p.long_name = NULL_IF_CONFIG_SMALL("SDP"),
2675			.p.priv_class = &sdp_demuxer_class,
2676			.priv_data_size = sizeof(RTSPState),
2677			.read_probe = sdp_probe,
2678			.read_header = sdp_read_header,
2679			.read_packet = ff_rtsp_fetch_packet,
2680			.read_close = sdp_read_close,
2681			};
2682			#endif /* CONFIG_SDP_DEMUXER */
2683
2684			#if CONFIG_RTP_DEMUXER
2685		3982	static int rtp_probe(const AVProbeData *p)
2686			{
2687	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 3982 times.	3982	if (av_strstart(p->filename, "rtp:", NULL))
2688		✗	return AVPROBE_SCORE_MAX;
2689		3982	return 0;
2690			}
2691
2692		✗	static int rtp_read_header(AVFormatContext *s)
2693			{
2694			uint8_t recvbuf[RTP_MAX_PACKET_LENGTH];
2695			char host[500], filters_buf[1000];
2696			int ret, port;
2697		✗	URLContext* in = NULL;
2698			int payload_type;
2699		✗	AVCodecParameters *par = NULL;
2700			struct sockaddr_storage addr;
2701			FFIOContext pb;
2702		✗	socklen_t addrlen = sizeof(addr);
2703		✗	RTSPState *rt = s->priv_data;
2704			const char *p;
2705			AVBPrint sdp;
2706		✗	AVDictionary *opts = NULL;
2707
2708		✗	if (!ff_network_init())
2709		✗	return AVERROR(EIO);
2710
2711		✗	opts = map_to_opts(rt);
2712		✗	ret = ffurl_open_whitelist(&in, s->url, AVIO_FLAG_READ,
2713		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
2714		✗	av_dict_free(&opts);
2715		✗	if (ret)
2716		✗	goto fail;
2717
2718			while (1) {
2719		✗	ret = ffurl_read(in, recvbuf, sizeof(recvbuf));
2720		✗	if (ret == AVERROR(EAGAIN))
2721		✗	continue;
2722		✗	if (ret < 0)
2723		✗	goto fail;
2724		✗	if (ret < 12) {
2725		✗	av_log(s, AV_LOG_WARNING, "Received too short packet\n");
2726		✗	continue;
2727			}
2728
2729		✗	if ((recvbuf[0] & 0xc0) != 0x80) {
2730		✗	av_log(s, AV_LOG_WARNING, "Unsupported RTP version packet "
2731			"received\n");
2732		✗	continue;
2733			}
2734
2735		✗	if (RTP_PT_IS_RTCP(recvbuf[1]))
2736		✗	continue;
2737
2738		✗	payload_type = recvbuf[1] & 0x7f;
2739		✗	break;
2740			}
2741		✗	getsockname(ffurl_get_file_handle(in), (struct sockaddr*) &addr, &addrlen);
2742		✗	ffurl_closep(&in);
2743
2744		✗	par = avcodec_parameters_alloc();
2745		✗	if (!par) {
2746		✗	ret = AVERROR(ENOMEM);
2747		✗	goto fail;
2748			}
2749
2750		✗	if (ff_rtp_get_codec_info(par, payload_type)) {
2751		✗	av_log(s, AV_LOG_ERROR, "Unable to receive RTP payload type %d "
2752			"without an SDP file describing it\n",
2753			payload_type);
2754		✗	ret = AVERROR_INVALIDDATA;
2755		✗	goto fail;
2756			}
2757		✗	if (par->codec_type != AVMEDIA_TYPE_DATA) {
2758		✗	av_log(s, AV_LOG_WARNING, "Guessing on RTP content - if not received "
2759			"properly you need an SDP file "
2760			"describing it\n");
2761			}
2762
2763		✗	av_url_split(NULL, 0, NULL, 0, host, sizeof(host), &port,
2764		✗	NULL, 0, s->url);
2765
2766		✗	av_bprint_init(&sdp, 0, AV_BPRINT_SIZE_UNLIMITED);
2767		✗	av_bprintf(&sdp, "v=0\r\nc=IN IP%d %s\r\n",
2768		✗	addr.ss_family == AF_INET ? 4 : 6, host);
2769
2770		✗	p = strchr(s->url, '?');
2771		✗	if (p) {
2772			static const char filters[][2][8] = { { "sources", "incl" },
2773			{ "block", "excl" } };
2774			int i;
2775			char *q;
2776		✗	for (i = 0; i < FF_ARRAY_ELEMS(filters); i++) {
2777		✗	if (av_find_info_tag(filters_buf, sizeof(filters_buf), filters[i][0], p)) {
2778		✗	q = filters_buf;
2779		✗	while ((q = strchr(q, ',')) != NULL)
2780		✗	*q = ' ';
2781		✗	av_bprintf(&sdp, "a=source-filter:%s IN IP%d %s %s\r\n",
2782		✗	filters[i][1],
2783		✗	addr.ss_family == AF_INET ? 4 : 6, host,
2784			filters_buf);
2785			}
2786			}
2787			}
2788
2789		✗	av_bprintf(&sdp, "m=%s %d RTP/AVP %d\r\n",
2790		✗	par->codec_type == AVMEDIA_TYPE_DATA ? "application" :
2791		✗	par->codec_type == AVMEDIA_TYPE_VIDEO ? "video" : "audio",
2792			port, payload_type);
2793		✗	av_log(s, AV_LOG_VERBOSE, "SDP:\n%s\n", sdp.str);
2794		✗	if (!av_bprint_is_complete(&sdp))
2795		✗	goto fail_nobuf;
2796		✗	avcodec_parameters_free(&par);
2797
2798		✗	ffio_init_read_context(&pb, sdp.str, sdp.len);
2799		✗	s->pb = &pb.pub;
2800
2801			/* if sdp_read_header() fails then following ff_network_close() cancels out */
2802			/* ff_network_init() at the start of this function. Otherwise it cancels out */
2803			/* ff_network_init() inside sdp_read_header() */
2804		✗	ff_network_close();
2805
2806		✗	rt->media_type_mask = (1 << (AVMEDIA_TYPE_SUBTITLE+1)) - 1;
2807
2808		✗	ret = sdp_read_header(s);
2809		✗	s->pb = NULL;
2810		✗	av_bprint_finalize(&sdp, NULL);
2811		✗	return ret;
2812
2813		✗	fail_nobuf:
2814		✗	ret = AVERROR(ENOMEM);
2815		✗	av_log(s, AV_LOG_ERROR, "rtp_read_header(): not enough buffer space for sdp-headers\n");
2816		✗	av_bprint_finalize(&sdp, NULL);
2817		✗	fail:
2818		✗	avcodec_parameters_free(&par);
2819		✗	ffurl_closep(&in);
2820		✗	ff_network_close();
2821		✗	return ret;
2822			}
2823
2824			static const AVClass rtp_demuxer_class = {
2825			.class_name = "RTP demuxer",
2826			.item_name = av_default_item_name,
2827			.option = rtp_options,
2828			.version = LIBAVUTIL_VERSION_INT,
2829			};
2830
2831			const FFInputFormat ff_rtp_demuxer = {
2832			.p.name = "rtp",
2833			.p.long_name = NULL_IF_CONFIG_SMALL("RTP input"),
2834			.p.flags = AVFMT_NOFILE,
2835			.p.priv_class = &rtp_demuxer_class,
2836			.priv_data_size = sizeof(RTSPState),
2837			.read_probe = rtp_probe,
2838			.read_header = rtp_read_header,
2839			.read_packet = ff_rtsp_fetch_packet,
2840			.read_close = sdp_read_close,
2841			};
2842			#endif /* CONFIG_RTP_DEMUXER */
2843