FFmpeg coverage

Line	Branch	Exec	Source
1			/*
2			* RTSP/SDP client
3			* Copyright (c) 2002 Fabrice Bellard
4			*
5			* This file is part of FFmpeg.
6			*
7			* FFmpeg is free software; you can redistribute it and/or
8			* modify it under the terms of the GNU Lesser General Public
9			* License as published by the Free Software Foundation; either
10			* version 2.1 of the License, or (at your option) any later version.
11			*
12			* FFmpeg is distributed in the hope that it will be useful,
13			* but WITHOUT ANY WARRANTY; without even the implied warranty of
14			* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15			* Lesser General Public License for more details.
16			*
17			* You should have received a copy of the GNU Lesser General Public
18			* License along with FFmpeg; if not, write to the Free Software
19			* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20			*/
21
22			#include "config_components.h"
23
24			#include "libavutil/avassert.h"
25			#include "libavutil/base64.h"
26			#include "libavutil/bprint.h"
27			#include "libavutil/avstring.h"
28			#include "libavutil/intreadwrite.h"
29			#include "libavutil/mathematics.h"
30			#include "libavutil/mem.h"
31			#include "libavutil/parseutils.h"
32			#include "libavutil/random_seed.h"
33			#include "libavutil/dict.h"
34			#include "libavutil/opt.h"
35			#include "libavutil/time.h"
36			#include "libavcodec/codec_desc.h"
37			#include "avformat.h"
38			#include "avio_internal.h"
39			#include "demux.h"
40
41			#if HAVE_POLL_H
42			#include <poll.h>
43			#endif
44			#include "internal.h"
45			#include "network.h"
46			#include "os_support.h"
47			#include "http.h"
48			#include "rtsp.h"
49
50			#include "rtpdec.h"
51			#include "rtpproto.h"
52			#include "rdt.h"
53			#include "rtpdec_formats.h"
54			#include "rtpenc_chain.h"
55			#include "url.h"
56			#include "tls.h"
57			#include "rtpenc.h"
58			#include "mpegts.h"
59			#include "version.h"
60
61			/* Default timeout values for read packet in seconds */
62			#define READ_PACKET_TIMEOUT_S 10
63			#define RECVBUF_SIZE 10 * RTP_MAX_PACKET_LENGTH
64			#define DEFAULT_REORDERING_DELAY 100000
65
66			#define OFFSET(x) offsetof(RTSPState, x)
67			#define DEC AV_OPT_FLAG_DECODING_PARAM
68			#define ENC AV_OPT_FLAG_ENCODING_PARAM
69
70			#define RTSP_FLAG_OPTS(name, longname) \
71			{ name, longname, OFFSET(rtsp_flags), AV_OPT_TYPE_FLAGS, {.i64 = 0}, INT_MIN, INT_MAX, DEC, .unit = "rtsp_flags" }, \
72			{ "filter_src", "only receive packets from the negotiated peer IP", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_FILTER_SRC}, 0, 0, DEC, .unit = "rtsp_flags" }
73
74			#define RTSP_MEDIATYPE_OPTS(name, longname) \
75			{ name, longname, OFFSET(media_type_mask), AV_OPT_TYPE_FLAGS, { .i64 = (1 << (AVMEDIA_TYPE_SUBTITLE+1)) - 1 }, INT_MIN, INT_MAX, DEC, .unit = "allowed_media_types" }, \
76			{ "video", "Video", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_VIDEO}, 0, 0, DEC, .unit = "allowed_media_types" }, \
77			{ "audio", "Audio", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_AUDIO}, 0, 0, DEC, .unit = "allowed_media_types" }, \
78			{ "data", "Data", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_DATA}, 0, 0, DEC, .unit = "allowed_media_types" }, \
79			{ "subtitle", "Subtitle", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << AVMEDIA_TYPE_SUBTITLE}, 0, 0, DEC, .unit = "allowed_media_types" }
80
81			#define COMMON_OPTS() \
82			{ "reorder_queue_size", "set number of packets to buffer for handling of reordered packets", OFFSET(reordering_queue_size), AV_OPT_TYPE_INT, { .i64 = -1 }, -1, INT_MAX, DEC }, \
83			{ "buffer_size", "Underlying protocol send/receive buffer size", OFFSET(buffer_size), AV_OPT_TYPE_INT, { .i64 = -1 }, -1, INT_MAX, DEC|ENC }, \
84			{ "pkt_size", "Underlying protocol send packet size", OFFSET(pkt_size), AV_OPT_TYPE_INT, { .i64 = 1472 }, -1, INT_MAX, ENC } \
85
86
87			const AVOption ff_rtsp_options[] = {
88			{ "initial_pause", "do not start playing the stream immediately", OFFSET(initial_pause), AV_OPT_TYPE_BOOL, {.i64 = 0}, 0, 1, DEC },
89			FF_RTP_FLAG_OPTS(RTSPState, rtp_muxer_flags),
90			{ "rtsp_transport", "set RTSP transport protocols", OFFSET(lower_transport_mask), AV_OPT_TYPE_FLAGS, {.i64 = 0}, INT_MIN, INT_MAX, DEC|ENC, .unit = "rtsp_transport" }, \
91			{ "udp", "UDP", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << RTSP_LOWER_TRANSPORT_UDP}, 0, 0, DEC|ENC, .unit = "rtsp_transport" }, \
92			{ "tcp", "TCP", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << RTSP_LOWER_TRANSPORT_TCP}, 0, 0, DEC|ENC, .unit = "rtsp_transport" }, \
93			{ "udp_multicast", "UDP multicast", 0, AV_OPT_TYPE_CONST, {.i64 = 1 << RTSP_LOWER_TRANSPORT_UDP_MULTICAST}, 0, 0, DEC, .unit = "rtsp_transport" },
94			{ "http", "HTTP tunneling", 0, AV_OPT_TYPE_CONST, {.i64 = (1 << RTSP_LOWER_TRANSPORT_HTTP)}, 0, 0, DEC, .unit = "rtsp_transport" },
95			{ "https", "HTTPS tunneling", 0, AV_OPT_TYPE_CONST, {.i64 = (1 << RTSP_LOWER_TRANSPORT_HTTPS )}, 0, 0, DEC, .unit = "rtsp_transport" },
96			RTSP_FLAG_OPTS("rtsp_flags", "set RTSP flags"),
97			{ "listen", "wait for incoming connections", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_LISTEN}, 0, 0, DEC, .unit = "rtsp_flags" },
98			{ "prefer_tcp", "try RTP via TCP first, if available", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_PREFER_TCP}, 0, 0, DEC|ENC, .unit = "rtsp_flags" },
99			{ "satip_raw", "export raw MPEG-TS stream instead of demuxing", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_SATIP_RAW}, 0, 0, DEC, .unit = "rtsp_flags" },
100			RTSP_MEDIATYPE_OPTS("allowed_media_types", "set media types to accept from the server"),
101			{ "min_port", "set minimum local UDP port", OFFSET(rtp_port_min), AV_OPT_TYPE_INT, {.i64 = RTSP_RTP_PORT_MIN}, 0, 65535, DEC|ENC },
102			{ "max_port", "set maximum local UDP port", OFFSET(rtp_port_max), AV_OPT_TYPE_INT, {.i64 = RTSP_RTP_PORT_MAX}, 0, 65535, DEC|ENC },
103			{ "listen_timeout", "set maximum timeout (in seconds) to wait for incoming connections (-1 is infinite, imply flag listen)", OFFSET(initial_timeout), AV_OPT_TYPE_INT, {.i64 = -1}, INT_MIN, INT_MAX, DEC },
104			{ "timeout", "set timeout (in microseconds) of socket I/O operations", OFFSET(stimeout), AV_OPT_TYPE_INT64, {.i64 = 0}, INT_MIN, INT64_MAX, DEC },
105			COMMON_OPTS(),
106			{ "user_agent", "override User-Agent header", OFFSET(user_agent), AV_OPT_TYPE_STRING, {.str = LIBAVFORMAT_IDENT}, 0, 0, DEC },
107
108			// TLS options
109			FF_TLS_CLIENT_OPTIONS(RTSPState, tls_opts),
110			{ NULL },
111			};
112
113			static const AVOption sdp_options[] = {
114			RTSP_FLAG_OPTS("sdp_flags", "SDP flags"),
115			{ "custom_io", "use custom I/O", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_CUSTOM_IO}, 0, 0, DEC, .unit = "rtsp_flags" },
116			{ "rtcp_to_source", "send RTCP packets to the source address of received packets", 0, AV_OPT_TYPE_CONST, {.i64 = RTSP_FLAG_RTCP_TO_SOURCE}, 0, 0, DEC, .unit = "rtsp_flags" },
117			{ "listen_timeout", "set maximum timeout (in seconds) to wait for incoming connections", OFFSET(stimeout), AV_OPT_TYPE_DURATION, {.i64 = READ_PACKET_TIMEOUT_S*1000000}, INT_MIN, INT64_MAX, DEC },
118			{ "localaddr", "local address", OFFSET(localaddr),AV_OPT_TYPE_STRING, {.str = NULL}, 0, 0, DEC }, \
119			RTSP_MEDIATYPE_OPTS("allowed_media_types", "set media types to accept from the server"),
120			COMMON_OPTS(),
121			{ NULL },
122			};
123
124			static const AVOption rtp_options[] = {
125			RTSP_FLAG_OPTS("rtp_flags", "set RTP flags"),
126			{ "listen_timeout", "set maximum timeout (in seconds) to wait for incoming connections", OFFSET(stimeout), AV_OPT_TYPE_DURATION, {.i64 = READ_PACKET_TIMEOUT_S*1000000}, INT_MIN, INT64_MAX, DEC },
127			{ "localaddr", "local address", OFFSET(localaddr),AV_OPT_TYPE_STRING, {.str = NULL}, 0, 0, DEC }, \
128			RTSP_MEDIATYPE_OPTS("allowed_media_types", "set media types to accept from the server"),
129			COMMON_OPTS(),
130			{ NULL },
131			};
132
133
134		✗	static AVDictionary *map_to_opts(RTSPState *rt)
135			{
136		✗	AVDictionary *opts = NULL;
137
138		✗	av_dict_set_int(&opts, "buffer_size", rt->buffer_size, 0);
139		✗	av_dict_set_int(&opts, "pkt_size", rt->pkt_size, 0);
140		✗	if (rt->localaddr && rt->localaddr[0])
141		✗	av_dict_set(&opts, "localaddr", rt->localaddr, 0);
142
143		✗	return opts;
144			}
145
146			#define ERR_RET(c) \
147			do { \
148			int ret = c; \
149			if (ret < 0) \
150			return ret; \
151			} while (0)
152
153			/**
154			* Add the TLS options of the given RTSPState to the dict
155			*/
156		✗	static int copy_tls_opts_dict(RTSPState *rt, AVDictionary **dict)
157			{
158		✗	ERR_RET(av_dict_set_int(dict, "tls_verify", rt->tls_opts.verify, 0));
159		✗	ERR_RET(av_dict_set(dict, "ca_file", rt->tls_opts.ca_file, 0));
160		✗	ERR_RET(av_dict_set(dict, "cert_file", rt->tls_opts.cert_file, 0));
161		✗	ERR_RET(av_dict_set(dict, "key_file", rt->tls_opts.key_file, 0));
162		✗	ERR_RET(av_dict_set(dict, "verifyhost", rt->tls_opts.host, 0));
163
164		✗	return 0;
165			}
166
167			#undef ERR_RET
168
169		✗	static void get_word_until_chars(char *buf, int buf_size,
170			const char *sep, const char **pp)
171			{
172			const char *p;
173			char *q;
174
175		✗	p = *pp;
176		✗	p += strspn(p, SPACE_CHARS);
177		✗	q = buf;
178		✗	while (!strchr(sep, *p) && *p != '\0') {
179		✗	if ((q - buf) < buf_size - 1)
180		✗	*q++ = *p;
181		✗	p++;
182			}
183		✗	if (buf_size > 0)
184		✗	*q = '\0';
185		✗	*pp = p;
186		✗	}
187
188		✗	static void get_word_sep(char *buf, int buf_size, const char *sep,
189			const char **pp)
190			{
191		✗	if (**pp == '/') (*pp)++;
192		✗	get_word_until_chars(buf, buf_size, sep, pp);
193		✗	}
194
195		✗	static void get_word(char *buf, int buf_size, const char **pp)
196			{
197		✗	get_word_until_chars(buf, buf_size, SPACE_CHARS, pp);
198		✗	}
199
200			/** Parse a string p in the form of Range:npt=xx-xx, and determine the start
201			* and end time.
202			* Used for seeking in the rtp stream.
203			*/
204		✗	static void rtsp_parse_range_npt(const char *p, int64_t *start, int64_t *end)
205			{
206			char buf[256];
207
208		✗	p += strspn(p, SPACE_CHARS);
209		✗	if (!av_stristart(p, "npt=", &p))
210		✗	return;
211
212		✗	*start = AV_NOPTS_VALUE;
213		✗	*end = AV_NOPTS_VALUE;
214
215		✗	get_word_sep(buf, sizeof(buf), "-", &p);
216		✗	if (av_parse_time(start, buf, 1) < 0)
217		✗	return;
218		✗	if (*p == '-') {
219		✗	p++;
220		✗	get_word_sep(buf, sizeof(buf), "-", &p);
221		✗	if (av_parse_time(end, buf, 1) < 0)
222		✗	av_log(NULL, AV_LOG_DEBUG, "Failed to parse interval end specification '%s'\n", buf);
223			}
224			}
225
226		✗	static int get_sockaddr(AVFormatContext *s,
227			const char *buf, struct sockaddr_storage *sock)
228			{
229		✗	struct addrinfo hints = { 0 }, *ai = NULL;
230			int ret;
231
232		✗	hints.ai_flags = AI_NUMERICHOST;
233		✗	if ((ret = getaddrinfo(buf, NULL, &hints, &ai))) {
234		✗	av_log(s, AV_LOG_ERROR, "getaddrinfo(%s): %s\n",
235			buf,
236			gai_strerror(ret));
237		✗	return -1;
238			}
239		✗	memcpy(sock, ai->ai_addr, FFMIN(sizeof(*sock), ai->ai_addrlen));
240		✗	freeaddrinfo(ai);
241		✗	return 0;
242			}
243
244			#if CONFIG_RTPDEC
245		✗	static void init_rtp_handler(const RTPDynamicProtocolHandler *handler,
246			RTSPStream *rtsp_st, AVStream *st)
247			{
248		✗	AVCodecParameters *par = st ? st->codecpar : NULL;
249		✗	if (!handler)
250		✗	return;
251		✗	if (par)
252		✗	par->codec_id = handler->codec_id;
253		✗	rtsp_st->dynamic_handler = handler;
254		✗	if (st)
255		✗	ffstream(st)->need_parsing = handler->need_parsing;
256		✗	if (handler->priv_data_size) {
257		✗	rtsp_st->dynamic_protocol_context = av_mallocz(handler->priv_data_size);
258		✗	if (!rtsp_st->dynamic_protocol_context)
259		✗	rtsp_st->dynamic_handler = NULL;
260			}
261			}
262
263		✗	static void finalize_rtp_handler_init(AVFormatContext *s, RTSPStream *rtsp_st,
264			AVStream *st)
265			{
266		✗	if (rtsp_st->dynamic_handler && rtsp_st->dynamic_handler->init) {
267		✗	int ret = rtsp_st->dynamic_handler->init(s, st ? st->index : -1,
268			rtsp_st->dynamic_protocol_context);
269		✗	if (ret < 0) {
270		✗	if (rtsp_st->dynamic_protocol_context) {
271		✗	if (rtsp_st->dynamic_handler->close)
272		✗	rtsp_st->dynamic_handler->close(
273			rtsp_st->dynamic_protocol_context);
274		✗	av_free(rtsp_st->dynamic_protocol_context);
275			}
276		✗	rtsp_st->dynamic_protocol_context = NULL;
277		✗	rtsp_st->dynamic_handler = NULL;
278			}
279			}
280		✗	}
281
282			#if CONFIG_RTSP_DEMUXER
283		✗	static int init_satip_stream(AVFormatContext *s)
284			{
285		✗	RTSPState *rt = s->priv_data;
286		✗	RTSPStream *rtsp_st = av_mallocz(sizeof(RTSPStream));
287		✗	if (!rtsp_st)
288		✗	return AVERROR(ENOMEM);
289		✗	dynarray_add(&rt->rtsp_streams,
290			&rt->nb_rtsp_streams, rtsp_st);
291
292		✗	rtsp_st->sdp_payload_type = 33; // MP2T
293		✗	av_strlcpy(rtsp_st->control_url,
294		✗	rt->control_uri, sizeof(rtsp_st->control_url));
295
296		✗	if (rt->rtsp_flags & RTSP_FLAG_SATIP_RAW) {
297		✗	AVStream *st = avformat_new_stream(s, NULL);
298		✗	if (!st)
299		✗	return AVERROR(ENOMEM);
300		✗	st->id = rt->nb_rtsp_streams - 1;
301		✗	rtsp_st->stream_index = st->index;
302		✗	st->codecpar->codec_type = AVMEDIA_TYPE_DATA;
303		✗	st->codecpar->codec_id = AV_CODEC_ID_MPEG2TS;
304			} else {
305		✗	rtsp_st->stream_index = -1;
306		✗	init_rtp_handler(&ff_mpegts_dynamic_handler, rtsp_st, NULL);
307		✗	finalize_rtp_handler_init(s, rtsp_st, NULL);
308			}
309		✗	return 0;
310			}
311			#endif
312
313			/* parse the rtpmap description: <codec_name>/<clock_rate>[/<other params>] */
314		✗	static int sdp_parse_rtpmap(AVFormatContext *s,
315			AVStream *st, RTSPStream *rtsp_st,
316			int payload_type, const char *p)
317			{
318		✗	AVCodecParameters *par = st->codecpar;
319			char buf[256];
320			int i;
321			const AVCodecDescriptor *desc;
322			const char *c_name;
323
324			/* See if we can handle this kind of payload.
325			* The space should normally not be there but some Real streams or
326			* particular servers ("RealServer Version 6.1.3.970", see issue 1658)
327			* have a trailing space. */
328		✗	get_word_sep(buf, sizeof(buf), "/ ", &p);
329		✗	if (payload_type < RTP_PT_PRIVATE) {
330			/* We are in a standard case
331			* (from http://www.iana.org/assignments/rtp-parameters). */
332		✗	par->codec_id = ff_rtp_codec_id(buf, par->codec_type);
333			}
334
335		✗	if (par->codec_id == AV_CODEC_ID_NONE) {
336			const RTPDynamicProtocolHandler *handler =
337		✗	ff_rtp_handler_find_by_name(buf, par->codec_type);
338		✗	init_rtp_handler(handler, rtsp_st, st);
339			/* If no dynamic handler was found, check with the list of standard
340			* allocated types, if such a stream for some reason happens to
341			* use a private payload type. This isn't handled in rtpdec.c, since
342			* the format name from the rtpmap line never is passed into rtpdec. */
343		✗	if (!rtsp_st->dynamic_handler)
344		✗	par->codec_id = ff_rtp_codec_id(buf, par->codec_type);
345			}
346
347		✗	desc = avcodec_descriptor_get(par->codec_id);
348		✗	if (desc && desc->name)
349		✗	c_name = desc->name;
350			else
351		✗	c_name = "(null)";
352
353		✗	get_word_sep(buf, sizeof(buf), "/", &p);
354		✗	i = atoi(buf);
355		✗	switch (par->codec_type) {
356		✗	case AVMEDIA_TYPE_AUDIO:
357		✗	av_log(s, AV_LOG_DEBUG, "audio codec set to: %s\n", c_name);
358		✗	par->sample_rate = RTSP_DEFAULT_AUDIO_SAMPLERATE;
359		✗	par->ch_layout = (AVChannelLayout)AV_CHANNEL_LAYOUT_MONO;
360		✗	if (i > 0) {
361		✗	par->sample_rate = i;
362		✗	avpriv_set_pts_info(st, 32, 1, par->sample_rate);
363		✗	get_word_sep(buf, sizeof(buf), "/", &p);
364		✗	i = atoi(buf);
365		✗	if (i > 0)
366		✗	av_channel_layout_default(&par->ch_layout, i);
367			}
368		✗	av_log(s, AV_LOG_DEBUG, "audio samplerate set to: %i\n",
369			par->sample_rate);
370		✗	av_log(s, AV_LOG_DEBUG, "audio channels set to: %i\n",
371			par->ch_layout.nb_channels);
372		✗	break;
373		✗	case AVMEDIA_TYPE_VIDEO:
374		✗	av_log(s, AV_LOG_DEBUG, "video codec set to: %s\n", c_name);
375		✗	if (i > 0)
376		✗	avpriv_set_pts_info(st, 32, 1, i);
377		✗	break;
378		✗	default:
379		✗	break;
380			}
381		✗	finalize_rtp_handler_init(s, rtsp_st, st);
382		✗	return 0;
383			}
384
385			/* parse the attribute line from the fmtp a line of an sdp response. This
386			* is broken out as a function because it is used in rtp_h264.c, which is
387			* forthcoming. */
388		✗	int ff_rtsp_next_attr_and_value(const char **p, char *attr, int attr_size,
389			char *value, int value_size)
390			{
391		✗	*p += strspn(*p, SPACE_CHARS);
392		✗	if (**p) {
393		✗	get_word_sep(attr, attr_size, "=", p);
394		✗	if (**p == '=')
395		✗	(*p)++;
396		✗	get_word_sep(value, value_size, ";", p);
397		✗	if (**p == ';')
398		✗	(*p)++;
399		✗	return 1;
400			}
401		✗	return 0;
402			}
403
404			typedef struct SDPParseState {
405			/* SDP only */
406			struct sockaddr_storage default_ip;
407			int default_ttl;
408			int skip_media; ///< set if an unknown m= line occurs
409			int nb_default_include_source_addrs; /**< Number of source-specific multicast include source IP address (from SDP content) */
410			struct RTSPSource **default_include_source_addrs; /**< Source-specific multicast include source IP address (from SDP content) */
411			int nb_default_exclude_source_addrs; /**< Number of source-specific multicast exclude source IP address (from SDP content) */
412			struct RTSPSource **default_exclude_source_addrs; /**< Source-specific multicast exclude source IP address (from SDP content) */
413			int seen_rtpmap;
414			int seen_fmtp;
415			char delayed_fmtp[2048];
416			} SDPParseState;
417
418		✗	static void copy_default_source_addrs(struct RTSPSource **addrs, int count,
419			struct RTSPSource ***dest, int *dest_count)
420			{
421			RTSPSource *rtsp_src, *rtsp_src2;
422			int i;
423		✗	for (i = 0; i < count; i++) {
424		✗	rtsp_src = addrs[i];
425		✗	rtsp_src2 = av_memdup(rtsp_src, sizeof(*rtsp_src));
426		✗	if (!rtsp_src2)
427		✗	continue;
428		✗	dynarray_add(dest, dest_count, rtsp_src2);
429			}
430		✗	}
431
432		✗	static void parse_fmtp(AVFormatContext *s, RTSPState *rt,
433			int payload_type, const char *line)
434			{
435			int i;
436
437		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
438		✗	RTSPStream *rtsp_st = rt->rtsp_streams[i];
439		✗	if (rtsp_st->sdp_payload_type == payload_type &&
440		✗	rtsp_st->dynamic_handler &&
441		✗	rtsp_st->dynamic_handler->parse_sdp_a_line) {
442		✗	rtsp_st->dynamic_handler->parse_sdp_a_line(s, rtsp_st->stream_index,
443			rtsp_st->dynamic_protocol_context, line);
444			}
445			}
446		✗	}
447
448		✗	static void sdp_parse_line(AVFormatContext *s, SDPParseState *s1,
449			int letter, const char *buf)
450			{
451		✗	RTSPState *rt = s->priv_data;
452			char buf1[64], st_type[64];
453			const char *p;
454			enum AVMediaType codec_type;
455			int payload_type;
456			AVStream *st;
457			RTSPStream *rtsp_st;
458			RTSPSource *rtsp_src;
459			struct sockaddr_storage sdp_ip;
460			int ttl;
461
462		✗	av_log(s, AV_LOG_TRACE, "sdp: %c='%s'\n", letter, buf);
463
464		✗	p = buf;
465		✗	if (s1->skip_media && letter != 'm')
466		✗	return;
467		✗	switch (letter) {
468		✗	case 'c':
469		✗	get_word(buf1, sizeof(buf1), &p);
470		✗	if (strcmp(buf1, "IN") != 0)
471		✗	return;
472		✗	get_word(buf1, sizeof(buf1), &p);
473		✗	if (strcmp(buf1, "IP4") && strcmp(buf1, "IP6"))
474		✗	return;
475		✗	get_word_sep(buf1, sizeof(buf1), "/", &p);
476		✗	if (get_sockaddr(s, buf1, &sdp_ip))
477		✗	return;
478		✗	ttl = 16;
479		✗	if (*p == '/') {
480		✗	p++;
481		✗	get_word_sep(buf1, sizeof(buf1), "/", &p);
482		✗	ttl = atoi(buf1);
483			}
484		✗	if (s->nb_streams == 0) {
485		✗	s1->default_ip = sdp_ip;
486		✗	s1->default_ttl = ttl;
487			} else {
488		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
489		✗	rtsp_st->sdp_ip = sdp_ip;
490		✗	rtsp_st->sdp_ttl = ttl;
491			}
492		✗	break;
493		✗	case 's':
494		✗	av_dict_set(&s->metadata, "title", p, 0);
495		✗	break;
496		✗	case 'i':
497		✗	if (s->nb_streams == 0) {
498		✗	av_dict_set(&s->metadata, "comment", p, 0);
499		✗	break;
500			}
501		✗	break;
502		✗	case 'm':
503			/* new stream */
504		✗	s1->skip_media = 0;
505		✗	s1->seen_fmtp = 0;
506		✗	s1->seen_rtpmap = 0;
507		✗	codec_type = AVMEDIA_TYPE_UNKNOWN;
508		✗	get_word(st_type, sizeof(st_type), &p);
509		✗	if (!strcmp(st_type, "audio")) {
510		✗	codec_type = AVMEDIA_TYPE_AUDIO;
511		✗	} else if (!strcmp(st_type, "video")) {
512		✗	codec_type = AVMEDIA_TYPE_VIDEO;
513		✗	} else if (!strcmp(st_type, "application")) {
514		✗	codec_type = AVMEDIA_TYPE_DATA;
515		✗	} else if (!strcmp(st_type, "text")) {
516		✗	codec_type = AVMEDIA_TYPE_SUBTITLE;
517			}
518		✗	if (codec_type == AVMEDIA_TYPE_UNKNOWN ||
519		✗	!(rt->media_type_mask & (1 << codec_type)) ||
520		✗	rt->nb_rtsp_streams >= s->max_streams
521			) {
522		✗	s1->skip_media = 1;
523		✗	return;
524			}
525		✗	rtsp_st = av_mallocz(sizeof(RTSPStream));
526		✗	if (!rtsp_st)
527		✗	return;
528		✗	rtsp_st->stream_index = -1;
529		✗	dynarray_add(&rt->rtsp_streams, &rt->nb_rtsp_streams, rtsp_st);
530
531		✗	rtsp_st->sdp_ip = s1->default_ip;
532		✗	rtsp_st->sdp_ttl = s1->default_ttl;
533
534		✗	copy_default_source_addrs(s1->default_include_source_addrs,
535			s1->nb_default_include_source_addrs,
536			&rtsp_st->include_source_addrs,
537			&rtsp_st->nb_include_source_addrs);
538		✗	copy_default_source_addrs(s1->default_exclude_source_addrs,
539			s1->nb_default_exclude_source_addrs,
540			&rtsp_st->exclude_source_addrs,
541			&rtsp_st->nb_exclude_source_addrs);
542
543		✗	get_word(buf1, sizeof(buf1), &p); /* port */
544		✗	rtsp_st->sdp_port = atoi(buf1);
545
546		✗	get_word(buf1, sizeof(buf1), &p); /* protocol */
547		✗	if (!strcmp(buf1, "udp"))
548		✗	rt->transport = RTSP_TRANSPORT_RAW;
549		✗	else if (strstr(buf1, "/AVPF") || strstr(buf1, "/SAVPF"))
550		✗	rtsp_st->feedback = 1;
551
552			/* XXX: handle list of formats */
553		✗	get_word(buf1, sizeof(buf1), &p); /* format list */
554		✗	rtsp_st->sdp_payload_type = atoi(buf1);
555
556		✗	if (!strcmp(ff_rtp_enc_name(rtsp_st->sdp_payload_type), "MP2T")) {
557			/* no corresponding stream */
558		✗	if (rt->transport == RTSP_TRANSPORT_RAW) {
559		✗	if (CONFIG_RTPDEC && !rt->ts)
560		✗	rt->ts = avpriv_mpegts_parse_open(s);
561			} else {
562			const RTPDynamicProtocolHandler *handler;
563		✗	handler = ff_rtp_handler_find_by_id(
564			rtsp_st->sdp_payload_type, AVMEDIA_TYPE_DATA);
565		✗	init_rtp_handler(handler, rtsp_st, NULL);
566		✗	finalize_rtp_handler_init(s, rtsp_st, NULL);
567			}
568		✗	} else if (rt->server_type == RTSP_SERVER_WMS &&
569			codec_type == AVMEDIA_TYPE_DATA) {
570			/* RTX stream, a stream that carries all the other actual
571			* audio/video streams. Don't expose this to the callers. */
572			} else {
573		✗	st = avformat_new_stream(s, NULL);
574		✗	if (!st)
575		✗	return;
576		✗	st->id = rt->nb_rtsp_streams - 1;
577		✗	rtsp_st->stream_index = st->index;
578		✗	st->codecpar->codec_type = codec_type;
579		✗	if (rtsp_st->sdp_payload_type < RTP_PT_PRIVATE) {
580			const RTPDynamicProtocolHandler *handler;
581			/* if standard payload type, we can find the codec right now */
582		✗	ff_rtp_get_codec_info(st->codecpar, rtsp_st->sdp_payload_type);
583		✗	if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO &&
584		✗	st->codecpar->sample_rate > 0)
585		✗	avpriv_set_pts_info(st, 32, 1, st->codecpar->sample_rate);
586			/* Even static payload types may need a custom depacketizer */
587		✗	handler = ff_rtp_handler_find_by_id(
588		✗	rtsp_st->sdp_payload_type, st->codecpar->codec_type);
589		✗	init_rtp_handler(handler, rtsp_st, st);
590		✗	finalize_rtp_handler_init(s, rtsp_st, st);
591			}
592		✗	if (rt->default_lang[0])
593		✗	av_dict_set(&st->metadata, "language", rt->default_lang, 0);
594			}
595			/* put a default control url */
596		✗	av_strlcpy(rtsp_st->control_url, rt->control_uri,
597			sizeof(rtsp_st->control_url));
598		✗	break;
599		✗	case 'a':
600		✗	if (av_strstart(p, "control:", &p)) {
601		✗	if (rt->nb_rtsp_streams == 0) {
602		✗	if (!strncmp(p, "rtsp://", 7))
603		✗	av_strlcpy(rt->control_uri, p,
604			sizeof(rt->control_uri));
605			} else {
606			char proto[32];
607			/* get the control url */
608		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
609
610			/* XXX: may need to add full url resolution */
611		✗	av_url_split(proto, sizeof(proto), NULL, 0, NULL, 0,
612			NULL, NULL, 0, p);
613		✗	if (proto[0] == '\0') {
614			/* relative control URL */
615		✗	size_t len = strlen(rtsp_st->control_url);
616		✗	if (len == 0 || rtsp_st->control_url[len - 1] != '/')
617		✗	av_strlcat(rtsp_st->control_url, "/",
618			sizeof(rtsp_st->control_url));
619		✗	av_strlcat(rtsp_st->control_url, p,
620			sizeof(rtsp_st->control_url));
621			} else
622		✗	av_strlcpy(rtsp_st->control_url, p,
623			sizeof(rtsp_st->control_url));
624			}
625		✗	} else if (av_strstart(p, "rtpmap:", &p) && s->nb_streams > 0) {
626			/* NOTE: rtpmap is only supported AFTER the 'm=' tag */
627		✗	get_word(buf1, sizeof(buf1), &p);
628		✗	payload_type = atoi(buf1);
629		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
630		✗	if (rtsp_st->stream_index >= 0) {
631		✗	st = s->streams[rtsp_st->stream_index];
632		✗	sdp_parse_rtpmap(s, st, rtsp_st, payload_type, p);
633			}
634		✗	s1->seen_rtpmap = 1;
635		✗	if (s1->seen_fmtp) {
636		✗	parse_fmtp(s, rt, payload_type, s1->delayed_fmtp);
637			}
638		✗	} else if (av_strstart(p, "fmtp:", &p) ||
639		✗	av_strstart(p, "framesize:", &p)) {
640			// let dynamic protocol handlers have a stab at the line.
641		✗	get_word(buf1, sizeof(buf1), &p);
642		✗	payload_type = atoi(buf1);
643		✗	if (s1->seen_rtpmap) {
644		✗	parse_fmtp(s, rt, payload_type, buf);
645			} else {
646		✗	s1->seen_fmtp = 1;
647		✗	av_strlcpy(s1->delayed_fmtp, buf, sizeof(s1->delayed_fmtp));
648			}
649		✗	} else if (av_strstart(p, "framerate:", &p) && s->nb_streams > 0) {
650			// RFC 8866
651			double framerate;
652		✗	if (av_sscanf(p, "%lf%c", &framerate, &(char){0}) == 1) {
653		✗	st = s->streams[s->nb_streams - 1];
654		✗	st->avg_frame_rate = av_d2q(framerate, INT_MAX);
655			}
656		✗	} else if (av_strstart(p, "ssrc:", &p) && s->nb_streams > 0) {
657		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
658		✗	get_word(buf1, sizeof(buf1), &p);
659		✗	rtsp_st->ssrc = strtoll(buf1, NULL, 10);
660		✗	} else if (av_strstart(p, "range:", &p)) {
661			int64_t start, end;
662
663			// this is so that seeking on a streamed file can work.
664		✗	rtsp_parse_range_npt(p, &start, &end);
665		✗	s->start_time = start;
666			/* AV_NOPTS_VALUE means live broadcast (and can't seek) */
667		✗	if (end != AV_NOPTS_VALUE)
668		✗	s->duration = end - start;
669		✗	} else if (av_strstart(p, "lang:", &p)) {
670		✗	if (s->nb_streams > 0) {
671		✗	get_word(buf1, sizeof(buf1), &p);
672		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
673		✗	if (rtsp_st->stream_index >= 0) {
674		✗	st = s->streams[rtsp_st->stream_index];
675		✗	av_dict_set(&st->metadata, "language", buf1, 0);
676			}
677			} else
678		✗	get_word(rt->default_lang, sizeof(rt->default_lang), &p);
679		✗	} else if (av_strstart(p, "IsRealDataType:integer;",&p)) {
680		✗	if (atoi(p) == 1)
681		✗	rt->transport = RTSP_TRANSPORT_RDT;
682		✗	} else if (av_strstart(p, "SampleRate:integer;", &p) &&
683		✗	s->nb_streams > 0) {
684		✗	st = s->streams[s->nb_streams - 1];
685		✗	st->codecpar->sample_rate = atoi(p);
686		✗	} else if (av_strstart(p, "crypto:", &p) && s->nb_streams > 0) {
687			// RFC 4568
688		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
689		✗	get_word(buf1, sizeof(buf1), &p); // ignore tag
690		✗	get_word(rtsp_st->crypto_suite, sizeof(rtsp_st->crypto_suite), &p);
691		✗	p += strspn(p, SPACE_CHARS);
692		✗	if (av_strstart(p, "inline:", &p))
693		✗	get_word(rtsp_st->crypto_params, sizeof(rtsp_st->crypto_params), &p);
694		✗	} else if (av_strstart(p, "source-filter:", &p)) {
695		✗	int exclude = 0;
696		✗	get_word(buf1, sizeof(buf1), &p);
697		✗	if (strcmp(buf1, "incl") && strcmp(buf1, "excl"))
698		✗	return;
699		✗	exclude = !strcmp(buf1, "excl");
700
701		✗	get_word(buf1, sizeof(buf1), &p);
702		✗	if (strcmp(buf1, "IN") != 0)
703		✗	return;
704		✗	get_word(buf1, sizeof(buf1), &p);
705		✗	if (strcmp(buf1, "IP4") && strcmp(buf1, "IP6") && strcmp(buf1, "*"))
706		✗	return;
707			// not checking that the destination address actually matches or is wildcard
708		✗	get_word(buf1, sizeof(buf1), &p);
709
710		✗	while (*p != '\0') {
711		✗	rtsp_src = av_mallocz(sizeof(*rtsp_src));
712		✗	if (!rtsp_src)
713		✗	return;
714		✗	get_word(rtsp_src->addr, sizeof(rtsp_src->addr), &p);
715		✗	if (exclude) {
716		✗	if (s->nb_streams == 0) {
717		✗	dynarray_add(&s1->default_exclude_source_addrs, &s1->nb_default_exclude_source_addrs, rtsp_src);
718			} else {
719		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
720		✗	dynarray_add(&rtsp_st->exclude_source_addrs, &rtsp_st->nb_exclude_source_addrs, rtsp_src);
721			}
722			} else {
723		✗	if (s->nb_streams == 0) {
724		✗	dynarray_add(&s1->default_include_source_addrs, &s1->nb_default_include_source_addrs, rtsp_src);
725			} else {
726		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
727		✗	dynarray_add(&rtsp_st->include_source_addrs, &rtsp_st->nb_include_source_addrs, rtsp_src);
728			}
729			}
730			}
731			} else {
732		✗	if (rt->server_type == RTSP_SERVER_WMS)
733		✗	ff_wms_parse_sdp_a_line(s, p);
734		✗	if (s->nb_streams > 0) {
735		✗	rtsp_st = rt->rtsp_streams[rt->nb_rtsp_streams - 1];
736
737		✗	if (rt->server_type == RTSP_SERVER_REAL)
738		✗	ff_real_parse_sdp_a_line(s, rtsp_st->stream_index, p);
739
740		✗	if (rtsp_st->dynamic_handler &&
741		✗	rtsp_st->dynamic_handler->parse_sdp_a_line)
742		✗	rtsp_st->dynamic_handler->parse_sdp_a_line(s,
743			rtsp_st->stream_index,
744			rtsp_st->dynamic_protocol_context, buf);
745			}
746			}
747		✗	break;
748			}
749			}
750
751		✗	int ff_sdp_parse(AVFormatContext *s, const char *content)
752			{
753			const char *p;
754			int letter, i;
755			char buf[SDP_MAX_SIZE], *q;
756		✗	SDPParseState sdp_parse_state = { { 0 } }, *s1 = &sdp_parse_state;
757
758		✗	s->duration = AV_NOPTS_VALUE;
759
760		✗	p = content;
761			for (;;) {
762		✗	p += strspn(p, SPACE_CHARS);
763		✗	letter = *p;
764		✗	if (letter == '\0')
765		✗	break;
766		✗	p++;
767		✗	if (*p != '=')
768		✗	goto next_line;
769		✗	p++;
770			/* get the content */
771		✗	q = buf;
772		✗	while (*p != '\n' && *p != '\r' && *p != '\0') {
773		✗	if ((q - buf) < sizeof(buf) - 1)
774		✗	*q++ = *p;
775		✗	p++;
776			}
777		✗	*q = '\0';
778		✗	sdp_parse_line(s, s1, letter, buf);
779		✗	next_line:
780		✗	while (*p != '\n' && *p != '\0')
781		✗	p++;
782		✗	if (*p == '\n')
783		✗	p++;
784			}
785
786		✗	for (i = 0; i < s1->nb_default_include_source_addrs; i++)
787		✗	av_freep(&s1->default_include_source_addrs[i]);
788		✗	av_freep(&s1->default_include_source_addrs);
789		✗	for (i = 0; i < s1->nb_default_exclude_source_addrs; i++)
790		✗	av_freep(&s1->default_exclude_source_addrs[i]);
791		✗	av_freep(&s1->default_exclude_source_addrs);
792
793		✗	if (s->duration == AV_NOPTS_VALUE)
794		✗	s->ctx_flags |= AVFMTCTX_UNSEEKABLE;
795
796		✗	return 0;
797			}
798			#endif /* CONFIG_RTPDEC */
799
800		✗	void ff_rtsp_undo_setup(AVFormatContext *s, int send_packets)
801			{
802		✗	RTSPState *rt = s->priv_data;
803			int i;
804
805		✗	rt->stored_msg.expected_seq = -1;
806		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
807		✗	RTSPStream *rtsp_st = rt->rtsp_streams[i];
808		✗	if (!rtsp_st)
809		✗	continue;
810		✗	if (rtsp_st->transport_priv) {
811		✗	if (s->oformat) {
812		✗	AVFormatContext *rtpctx = rtsp_st->transport_priv;
813		✗	av_write_trailer(rtpctx);
814		✗	if (rt->lower_transport == RTSP_LOWER_TRANSPORT_TCP) {
815		✗	if (CONFIG_RTSP_MUXER && rtpctx->pb && send_packets)
816		✗	ff_rtsp_tcp_write_packet(s, rtsp_st);
817		✗	ffio_free_dyn_buf(&rtpctx->pb);
818			} else {
819		✗	avio_closep(&rtpctx->pb);
820			}
821		✗	avformat_free_context(rtpctx);
822		✗	} else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RDT)
823		✗	ff_rdt_parse_close(rtsp_st->transport_priv);
824		✗	else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RTP)
825		✗	ff_rtp_parse_close(rtsp_st->transport_priv);
826			}
827		✗	rtsp_st->transport_priv = NULL;
828		✗	ffurl_closep(&rtsp_st->rtp_handle);
829			}
830		✗	}
831
832			/* close and free RTSP streams */
833		✗	void ff_rtsp_close_streams(AVFormatContext *s)
834			{
835		✗	RTSPState *rt = s->priv_data;
836			int i, j;
837			RTSPStream *rtsp_st;
838
839		✗	ff_rtsp_undo_setup(s, 0);
840		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
841		✗	rtsp_st = rt->rtsp_streams[i];
842		✗	if (rtsp_st) {
843		✗	if (rtsp_st->dynamic_handler && rtsp_st->dynamic_protocol_context) {
844		✗	if (rtsp_st->dynamic_handler->close)
845		✗	rtsp_st->dynamic_handler->close(
846		✗	rtsp_st->dynamic_protocol_context);
847		✗	av_free(rtsp_st->dynamic_protocol_context);
848			}
849		✗	for (j = 0; j < rtsp_st->nb_include_source_addrs; j++)
850		✗	av_freep(&rtsp_st->include_source_addrs[j]);
851		✗	av_freep(&rtsp_st->include_source_addrs);
852		✗	for (j = 0; j < rtsp_st->nb_exclude_source_addrs; j++)
853		✗	av_freep(&rtsp_st->exclude_source_addrs[j]);
854		✗	av_freep(&rtsp_st->exclude_source_addrs);
855
856		✗	av_freep(&rtsp_st);
857			}
858			}
859		✗	av_freep(&rt->rtsp_streams);
860		✗	if (rt->asf_ctx) {
861		✗	avformat_close_input(&rt->asf_ctx);
862			}
863		✗	if (CONFIG_RTPDEC && rt->ts)
864		✗	avpriv_mpegts_parse_close(rt->ts);
865		✗	av_freep(&rt->p);
866		✗	av_freep(&rt->recvbuf);
867		✗	}
868
869		✗	int ff_rtsp_open_transport_ctx(AVFormatContext *s, RTSPStream *rtsp_st)
870			{
871		✗	RTSPState *rt = s->priv_data;
872		✗	AVStream *st = NULL;
873		✗	int reordering_queue_size = rt->reordering_queue_size;
874		✗	if (reordering_queue_size < 0) {
875		✗	if (rt->lower_transport == RTSP_LOWER_TRANSPORT_TCP || !s->max_delay)
876		✗	reordering_queue_size = 0;
877			else
878		✗	reordering_queue_size = RTP_REORDER_QUEUE_DEFAULT_SIZE;
879			}
880
881			/* open the RTP context */
882		✗	if (rtsp_st->stream_index >= 0)
883		✗	st = s->streams[rtsp_st->stream_index];
884		✗	if (!st)
885		✗	s->ctx_flags |= AVFMTCTX_NOHEADER;
886
887		✗	if (CONFIG_RTSP_MUXER && s->oformat && st) {
888		✗	int ret = ff_rtp_chain_mux_open((AVFormatContext **)&rtsp_st->transport_priv,
889			s, st, rtsp_st->rtp_handle,
890			rt->pkt_size,
891			rtsp_st->stream_index);
892			/* Ownership of rtp_handle is passed to the rtp mux context */
893		✗	rtsp_st->rtp_handle = NULL;
894		✗	if (ret < 0)
895		✗	return ret;
896		✗	st->time_base = ((AVFormatContext*)rtsp_st->transport_priv)->streams[0]->time_base;
897		✗	} else if (rt->transport == RTSP_TRANSPORT_RAW) {
898		✗	return 0; // Don't need to open any parser here
899		✗	} else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RDT && st)
900		✗	rtsp_st->transport_priv = ff_rdt_parse_open(s, st->index,
901		✗	rtsp_st->dynamic_protocol_context,
902			rtsp_st->dynamic_handler);
903			else if (CONFIG_RTPDEC)
904		✗	rtsp_st->transport_priv = ff_rtp_parse_open(s, st,
905			rtsp_st->sdp_payload_type,
906			reordering_queue_size);
907
908		✗	if (!rtsp_st->transport_priv) {
909		✗	return AVERROR(ENOMEM);
910		✗	} else if (CONFIG_RTPDEC && rt->transport == RTSP_TRANSPORT_RTP &&
911		✗	s->iformat) {
912		✗	RTPDemuxContext *rtpctx = rtsp_st->transport_priv;
913		✗	rtpctx->ssrc = rtsp_st->ssrc;
914		✗	if (rtsp_st->dynamic_handler) {
915		✗	ff_rtp_parse_set_dynamic_protocol(rtsp_st->transport_priv,
916			rtsp_st->dynamic_protocol_context,
917			rtsp_st->dynamic_handler);
918			}
919		✗	if (rtsp_st->crypto_suite[0]) {
920		✗	int ret = ff_rtp_parse_set_crypto(rtsp_st->transport_priv,
921		✗	rtsp_st->crypto_suite,
922		✗	rtsp_st->crypto_params);
923		✗	if (ret < 0) {
924		✗	av_log(s, AV_LOG_ERROR,
925			"SRTP setup failed for suite '%s'\n",
926		✗	rtsp_st->crypto_suite);
927		✗	return ret;
928			}
929			}
930			}
931
932		✗	return 0;
933			}
934
935			#if CONFIG_RTSP_DEMUXER || CONFIG_RTSP_MUXER
936		✗	static void rtsp_parse_range(int *min_ptr, int *max_ptr, const char **pp)
937			{
938			const char *q;
939			char *p;
940			int v;
941
942		✗	q = *pp;
943		✗	q += strspn(q, SPACE_CHARS);
944		✗	v = strtol(q, &p, 10);
945		✗	if (*p == '-') {
946		✗	p++;
947		✗	*min_ptr = v;
948		✗	v = strtol(p, &p, 10);
949		✗	*max_ptr = v;
950			} else {
951		✗	*min_ptr = v;
952		✗	*max_ptr = v;
953			}
954		✗	*pp = p;
955		✗	}
956
957			/* XXX: only one transport specification is parsed */
958		✗	static void rtsp_parse_transport(AVFormatContext *s,
959			RTSPMessageHeader *reply, const char *p)
960			{
961			char transport_protocol[16];
962			char profile[16];
963			char lower_transport[16];
964			char parameter[16];
965			RTSPTransportField *th;
966			char buf[256];
967
968		✗	reply->nb_transports = 0;
969
970			for (;;) {
971		✗	p += strspn(p, SPACE_CHARS);
972		✗	if (*p == '\0')
973		✗	break;
974
975		✗	th = &reply->transports[reply->nb_transports];
976
977		✗	get_word_sep(transport_protocol, sizeof(transport_protocol),
978			"/", &p);
979		✗	if (!av_strcasecmp (transport_protocol, "rtp")) {
980		✗	get_word_sep(profile, sizeof(profile), "/;,", &p);
981		✗	lower_transport[0] = '\0';
982			/* rtp/avp/<protocol> */
983		✗	if (*p == '/') {
984		✗	get_word_sep(lower_transport, sizeof(lower_transport),
985			";,", &p);
986			}
987		✗	th->transport = RTSP_TRANSPORT_RTP;
988		✗	} else if (!av_strcasecmp (transport_protocol, "x-pn-tng") ||
989		✗	!av_strcasecmp (transport_protocol, "x-real-rdt")) {
990			/* x-pn-tng/<protocol> */
991		✗	get_word_sep(lower_transport, sizeof(lower_transport), "/;,", &p);
992		✗	profile[0] = '\0';
993		✗	th->transport = RTSP_TRANSPORT_RDT;
994		✗	} else if (!av_strcasecmp(transport_protocol, "raw")) {
995		✗	get_word_sep(profile, sizeof(profile), "/;,", &p);
996		✗	lower_transport[0] = '\0';
997			/* raw/raw/<protocol> */
998		✗	if (*p == '/') {
999		✗	get_word_sep(lower_transport, sizeof(lower_transport),
1000			";,", &p);
1001			}
1002		✗	th->transport = RTSP_TRANSPORT_RAW;
1003			} else {
1004		✗	break;
1005			}
1006		✗	if (!av_strcasecmp(lower_transport, "TCP"))
1007		✗	th->lower_transport = RTSP_LOWER_TRANSPORT_TCP;
1008			else
1009		✗	th->lower_transport = RTSP_LOWER_TRANSPORT_UDP;
1010
1011		✗	if (*p == ';')
1012		✗	p++;
1013			/* get each parameter */
1014		✗	while (*p != '\0' && *p != ',') {
1015		✗	get_word_sep(parameter, sizeof(parameter), "=;,", &p);
1016		✗	if (!strcmp(parameter, "port")) {
1017		✗	if (*p == '=') {
1018		✗	p++;
1019		✗	rtsp_parse_range(&th->port_min, &th->port_max, &p);
1020			}
1021		✗	} else if (!strcmp(parameter, "client_port")) {
1022		✗	if (*p == '=') {
1023		✗	p++;
1024		✗	rtsp_parse_range(&th->client_port_min,
1025			&th->client_port_max, &p);
1026			}
1027		✗	} else if (!strcmp(parameter, "server_port")) {
1028		✗	if (*p == '=') {
1029		✗	p++;
1030		✗	rtsp_parse_range(&th->server_port_min,
1031			&th->server_port_max, &p);
1032			}
1033		✗	} else if (!strcmp(parameter, "interleaved")) {
1034		✗	if (*p == '=') {
1035		✗	p++;
1036		✗	rtsp_parse_range(&th->interleaved_min,
1037			&th->interleaved_max, &p);
1038			}
1039		✗	} else if (!strcmp(parameter, "multicast")) {
1040		✗	if (th->lower_transport == RTSP_LOWER_TRANSPORT_UDP)
1041		✗	th->lower_transport = RTSP_LOWER_TRANSPORT_UDP_MULTICAST;
1042		✗	} else if (!strcmp(parameter, "ttl")) {
1043		✗	if (*p == '=') {
1044			char *end;
1045		✗	p++;
1046		✗	th->ttl = strtol(p, &end, 10);
1047		✗	p = end;
1048			}
1049		✗	} else if (!strcmp(parameter, "destination")) {
1050		✗	if (*p == '=') {
1051		✗	p++;
1052		✗	get_word_sep(buf, sizeof(buf), ";,", &p);
1053		✗	get_sockaddr(s, buf, &th->destination);
1054			}
1055		✗	} else if (!strcmp(parameter, "source")) {
1056		✗	if (*p == '=') {
1057		✗	p++;
1058		✗	get_word_sep(buf, sizeof(buf), ";,", &p);
1059		✗	av_strlcpy(th->source, buf, sizeof(th->source));
1060			}
1061		✗	} else if (!strcmp(parameter, "mode")) {
1062		✗	if (*p == '=') {
1063		✗	p++;
1064		✗	get_word_sep(buf, sizeof(buf), ";, ", &p);
1065		✗	if (!av_strcasecmp(buf, "record") ||
1066		✗	!av_strcasecmp(buf, "receive"))
1067		✗	th->mode_record = 1;
1068			}
1069			}
1070
1071		✗	while (*p != ';' && *p != '\0' && *p != ',')
1072		✗	p++;
1073		✗	if (*p == ';')
1074		✗	p++;
1075			}
1076		✗	if (*p == ',')
1077		✗	p++;
1078
1079		✗	reply->nb_transports++;
1080		✗	if (reply->nb_transports >= RTSP_MAX_TRANSPORTS)
1081		✗	break;
1082			}
1083		✗	}
1084
1085		✗	static void handle_rtp_info(RTSPState *rt, const char *url,
1086			uint32_t seq, uint32_t rtptime)
1087			{
1088			int i;
1089		✗	if (!rtptime || !url[0])
1090		✗	return;
1091		✗	if (rt->transport != RTSP_TRANSPORT_RTP)
1092		✗	return;
1093		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
1094		✗	RTSPStream *rtsp_st = rt->rtsp_streams[i];
1095		✗	RTPDemuxContext *rtpctx = rtsp_st->transport_priv;
1096		✗	if (!rtpctx)
1097		✗	continue;
1098		✗	if (!strcmp(rtsp_st->control_url, url)) {
1099		✗	rtpctx->base_timestamp = rtptime;
1100		✗	break;
1101			}
1102			}
1103			}
1104
1105		✗	static void rtsp_parse_rtp_info(RTSPState *rt, const char *p)
1106			{
1107		✗	int read = 0;
1108		✗	char key[20], value[MAX_URL_SIZE], url[MAX_URL_SIZE] = "";
1109		✗	uint32_t seq = 0, rtptime = 0;
1110
1111			for (;;) {
1112		✗	p += strspn(p, SPACE_CHARS);
1113		✗	if (!*p)
1114		✗	break;
1115		✗	get_word_sep(key, sizeof(key), "=", &p);
1116		✗	if (*p != '=')
1117		✗	break;
1118		✗	p++;
1119		✗	get_word_sep(value, sizeof(value), ";, ", &p);
1120		✗	read++;
1121		✗	if (!strcmp(key, "url"))
1122		✗	av_strlcpy(url, value, sizeof(url));
1123		✗	else if (!strcmp(key, "seq"))
1124		✗	seq = strtoul(value, NULL, 10);
1125		✗	else if (!strcmp(key, "rtptime"))
1126		✗	rtptime = strtoul(value, NULL, 10);
1127		✗	if (*p == ',') {
1128		✗	handle_rtp_info(rt, url, seq, rtptime);
1129		✗	url[0] = '\0';
1130		✗	seq = rtptime = 0;
1131		✗	read = 0;
1132			}
1133		✗	if (*p)
1134		✗	p++;
1135			}
1136		✗	if (read > 0)
1137		✗	handle_rtp_info(rt, url, seq, rtptime);
1138		✗	}
1139
1140		✗	void ff_rtsp_parse_line(AVFormatContext *s,
1141			RTSPMessageHeader *reply, const char *buf,
1142			RTSPState *rt, const char *method)
1143			{
1144			const char *p;
1145
1146			/* NOTE: we do case independent match for broken servers */
1147		✗	p = buf;
1148		✗	if (av_stristart(p, "Session:", &p)) {
1149			int t;
1150		✗	get_word_sep(reply->session_id, sizeof(reply->session_id), ";", &p);
1151		✗	if (av_stristart(p, ";timeout=", &p) &&
1152		✗	(t = strtol(p, NULL, 10)) > 0) {
1153		✗	reply->timeout = t;
1154			}
1155		✗	} else if (av_stristart(p, "Content-Length:", &p)) {
1156		✗	reply->content_length = strtol(p, NULL, 10);
1157		✗	} else if (av_stristart(p, "Transport:", &p)) {
1158		✗	rtsp_parse_transport(s, reply, p);
1159		✗	} else if (av_stristart(p, "CSeq:", &p)) {
1160		✗	reply->seq = strtol(p, NULL, 10);
1161		✗	} else if (av_stristart(p, "Range:", &p)) {
1162		✗	rtsp_parse_range_npt(p, &reply->range_start, &reply->range_end);
1163		✗	} else if (av_stristart(p, "RealChallenge1:", &p)) {
1164		✗	p += strspn(p, SPACE_CHARS);
1165		✗	av_strlcpy(reply->real_challenge, p, sizeof(reply->real_challenge));
1166		✗	} else if (av_stristart(p, "Server:", &p)) {
1167		✗	p += strspn(p, SPACE_CHARS);
1168		✗	av_strlcpy(reply->server, p, sizeof(reply->server));
1169		✗	} else if (av_stristart(p, "Notice:", &p) ||
1170		✗	av_stristart(p, "X-Notice:", &p)) {
1171		✗	reply->notice = strtol(p, NULL, 10);
1172		✗	} else if (av_stristart(p, "Location:", &p)) {
1173		✗	p += strspn(p, SPACE_CHARS);
1174		✗	av_strlcpy(reply->location, p , sizeof(reply->location));
1175		✗	} else if (av_stristart(p, "WWW-Authenticate:", &p) && rt) {
1176		✗	p += strspn(p, SPACE_CHARS);
1177		✗	ff_http_auth_handle_header(&rt->auth_state, "WWW-Authenticate", p);
1178		✗	} else if (av_stristart(p, "Authentication-Info:", &p) && rt) {
1179		✗	p += strspn(p, SPACE_CHARS);
1180		✗	ff_http_auth_handle_header(&rt->auth_state, "Authentication-Info", p);
1181		✗	} else if (av_stristart(p, "Content-Base:", &p) && rt) {
1182		✗	p += strspn(p, SPACE_CHARS);
1183		✗	if (method && !strcmp(method, "DESCRIBE"))
1184		✗	av_strlcpy(rt->control_uri, p , sizeof(rt->control_uri));
1185		✗	} else if (av_stristart(p, "RTP-Info:", &p) && rt) {
1186		✗	p += strspn(p, SPACE_CHARS);
1187		✗	if (method && !strcmp(method, "PLAY"))
1188		✗	rtsp_parse_rtp_info(rt, p);
1189		✗	} else if (av_stristart(p, "Public:", &p) && rt) {
1190		✗	if (strstr(p, "GET_PARAMETER") &&
1191		✗	method && !strcmp(method, "OPTIONS"))
1192		✗	rt->get_parameter_supported = 1;
1193		✗	} else if (av_stristart(p, "x-Accept-Dynamic-Rate:", &p) && rt) {
1194		✗	p += strspn(p, SPACE_CHARS);
1195		✗	rt->accept_dynamic_rate = atoi(p);
1196		✗	} else if (av_stristart(p, "Content-Type:", &p)) {
1197		✗	p += strspn(p, SPACE_CHARS);
1198		✗	av_strlcpy(reply->content_type, p, sizeof(reply->content_type));
1199		✗	} else if (av_stristart(p, "com.ses.streamID:", &p)) {
1200		✗	p += strspn(p, SPACE_CHARS);
1201		✗	av_strlcpy(reply->stream_id, p, sizeof(reply->stream_id));
1202			}
1203		✗	}
1204
1205			/* skip a RTP/TCP interleaved packet */
1206		✗	int ff_rtsp_skip_packet(AVFormatContext *s)
1207			{
1208		✗	RTSPState *rt = s->priv_data;
1209			int ret, len, len1;
1210			uint8_t buf[MAX_URL_SIZE];
1211
1212		✗	rt->pending_packet = 0;
1213		✗	ret = ffurl_read_complete(rt->rtsp_hd, buf, 3);
1214		✗	if (ret != 3)
1215		✗	return ret < 0 ? ret : AVERROR(EIO);
1216		✗	len = AV_RB16(buf + 1);
1217
1218		✗	av_log(s, AV_LOG_TRACE, "skipping RTP packet len=%d\n", len);
1219
1220			/* skip payload */
1221		✗	while (len > 0) {
1222		✗	len1 = len;
1223		✗	if (len1 > sizeof(buf))
1224		✗	len1 = sizeof(buf);
1225		✗	ret = ffurl_read_complete(rt->rtsp_hd, buf, len1);
1226		✗	if (ret != len1)
1227		✗	return ret < 0 ? ret : AVERROR(EIO);
1228		✗	len -= len1;
1229			}
1230
1231		✗	return 0;
1232			}
1233
1234		✗	static int ff_rtsp_read_reply_internal(AVFormatContext *s,
1235			RTSPMessageHeader *reply,
1236			unsigned char **content_ptr,
1237			int return_on_interleaved_data,
1238			const char *method)
1239			{
1240		✗	RTSPState *rt = s->priv_data;
1241			char buf[MAX_URL_SIZE], buf1[MAX_URL_SIZE], *q;
1242			unsigned char ch;
1243			const char *p;
1244			int ret, content_length, line_count, request;
1245			unsigned char *content;
1246
1247		✗	start:
1248		✗	line_count = 0;
1249		✗	request = 0;
1250		✗	content = NULL;
1251		✗	memset(reply, 0, sizeof(*reply));
1252
1253			/* parse reply (XXX: use buffers) */
1254		✗	rt->last_reply[0] = '\0';
1255			for (;;) {
1256		✗	q = buf;
1257			for (;;) {
1258		✗	ret = ffurl_read_complete(rt->rtsp_hd, &ch, 1);
1259		✗	if (ret != 1) {
1260		✗	ret = (ret < 0) ? ret : AVERROR(EIO);
1261		✗	av_log(s, AV_LOG_WARNING, "Failed reading RTSP data: %s\n", av_err2str(ret));
1262		✗	return ret;
1263			}
1264		✗	av_log(s, AV_LOG_TRACE, "ret=%d c=%02x [%c]\n", ret, ch, ch);
1265		✗	if (ch == '\n')
1266		✗	break;
1267		✗	if (ch == '$' && q == buf) {
1268		✗	if (return_on_interleaved_data) {
1269		✗	rt->pending_packet = 1;
1270		✗	return 1;
1271			} else {
1272		✗	ret = ff_rtsp_skip_packet(s);
1273		✗	if (ret < 0)
1274		✗	return ret;
1275			}
1276		✗	} else if (ch != '\r') {
1277		✗	if ((q - buf) < sizeof(buf) - 1)
1278		✗	*q++ = ch;
1279			}
1280			}
1281		✗	*q = '\0';
1282
1283		✗	av_log(s, AV_LOG_TRACE, "line='%s'\n", buf);
1284
1285			/* test if last line */
1286		✗	if (buf[0] == '\0')
1287		✗	break;
1288		✗	p = buf;
1289		✗	if (line_count == 0) {
1290			/* get reply code */
1291		✗	get_word(buf1, sizeof(buf1), &p);
1292		✗	if (!strncmp(buf1, "RTSP/", 5)) {
1293		✗	get_word(buf1, sizeof(buf1), &p);
1294		✗	reply->status_code = atoi(buf1);
1295		✗	p += strspn(p, SPACE_CHARS);
1296		✗	av_strlcpy(reply->reason, p, sizeof(reply->reason));
1297			} else {
1298		✗	av_strlcpy(reply->reason, buf1, sizeof(reply->reason)); // method
1299		✗	get_word(buf1, sizeof(buf1), &p); // object
1300		✗	request = 1;
1301			}
1302			} else {
1303		✗	ff_rtsp_parse_line(s, reply, p, rt, method);
1304		✗	av_strlcat(rt->last_reply, p, sizeof(rt->last_reply));
1305		✗	av_strlcat(rt->last_reply, "\n", sizeof(rt->last_reply));
1306			}
1307		✗	line_count++;
1308			}
1309
1310		✗	if (rt->session_id[0] == '\0' && reply->session_id[0] != '\0' && !request)
1311		✗	av_strlcpy(rt->session_id, reply->session_id, sizeof(rt->session_id));
1312
1313		✗	content_length = reply->content_length;
1314		✗	if (content_length > 0) {
1315			/* leave some room for a trailing '\0' (useful for simple parsing) */
1316		✗	content = av_malloc(content_length + 1);
1317		✗	if (!content)
1318		✗	return AVERROR(ENOMEM);
1319		✗	if ((ret = ffurl_read_complete(rt->rtsp_hd, content, content_length)) != content_length) {
1320		✗	av_freep(&content);
1321		✗	return ret < 0 ? ret : AVERROR(EIO);
1322			}
1323		✗	content[content_length] = '\0';
1324			}
1325		✗	if (content_ptr)
1326		✗	*content_ptr = content;
1327			else
1328		✗	av_freep(&content);
1329
1330		✗	if (request) {
1331			char buf[MAX_URL_SIZE];
1332			char base64buf[AV_BASE64_SIZE(sizeof(buf))];
1333		✗	const char* ptr = buf;
1334
1335		✗	if (!strcmp(reply->reason, "OPTIONS") ||
1336		✗	!strcmp(reply->reason, "GET_PARAMETER")) {
1337		✗	snprintf(buf, sizeof(buf), "RTSP/1.0 200 OK\r\n");
1338		✗	if (reply->seq)
1339		✗	av_strlcatf(buf, sizeof(buf), "CSeq: %d\r\n", reply->seq);
1340		✗	if (reply->session_id[0])
1341		✗	av_strlcatf(buf, sizeof(buf), "Session: %s\r\n",
1342		✗	reply->session_id);
1343			} else {
1344		✗	snprintf(buf, sizeof(buf), "RTSP/1.0 501 Not Implemented\r\n");
1345			}
1346		✗	av_strlcat(buf, "\r\n", sizeof(buf));
1347
1348		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1349		✗	av_base64_encode(base64buf, sizeof(base64buf), buf, strlen(buf));
1350		✗	ptr = base64buf;
1351			}
1352		✗	ffurl_write(rt->rtsp_hd_out, ptr, strlen(ptr));
1353
1354		✗	rt->last_cmd_time = av_gettime_relative();
1355			/* Even if the request from the server had data, it is not the data
1356			* that the caller wants or expects. The memory could also be leaked
1357			* if the actual following reply has content data. */
1358		✗	if (content_ptr)
1359		✗	av_freep(content_ptr);
1360			/* If method is set, this is called from ff_rtsp_send_cmd,
1361			* where a reply to exactly this request is awaited. For
1362			* callers from within packet receiving, we just want to
1363			* return to the caller and go back to receiving packets. */
1364		✗	if (method)
1365		✗	goto start;
1366		✗	return 0;
1367			}
1368
1369		✗	if (rt->seq != reply->seq) {
1370		✗	av_log(s, AV_LOG_WARNING, "CSeq %d expected, %d received.\n",
1371			rt->seq, reply->seq);
1372			}
1373
1374			/* EOS */
1375		✗	if (reply->notice == 2101 /* End-of-Stream Reached */ ||
1376		✗	reply->notice == 2104 /* Start-of-Stream Reached */ ||
1377		✗	reply->notice == 2306 /* Continuous Feed Terminated */) {
1378		✗	rt->state = RTSP_STATE_IDLE;
1379		✗	} else if (reply->notice >= 4400 && reply->notice < 5500) {
1380		✗	return AVERROR(EIO); /* data or server error */
1381		✗	} else if (reply->notice == 2401 /* Ticket Expired */ ||
1382		✗	(reply->notice >= 5500 && reply->notice < 5600) /* end of term */ )
1383		✗	return AVERROR(EPERM);
1384
1385		✗	return 0;
1386			}
1387
1388		✗	int ff_rtsp_read_reply(AVFormatContext *s, RTSPMessageHeader *reply,
1389			unsigned char **content_ptr,
1390			int return_on_interleaved_data, const char *method)
1391			{
1392			int ret;
1393		✗	RTSPState *rt = s->priv_data;
1394
1395			// If we returned on pending packet last time,
1396			// do not try to read again, as it would corrupt
1397			// the state due to the already consumed '$'.
1398		✗	if (rt->pending_packet) {
1399		✗	if (return_on_interleaved_data)
1400		✗	return 1;
1401
1402		✗	ret = ff_rtsp_skip_packet(s);
1403		✗	if (ret < 0)
1404		✗	return ret;
1405			}
1406
1407		✗	if (rt->stored_msg.expected_seq != -1) {
1408			RTSPMessageHeader header;
1409
1410		✗	ret = ff_rtsp_read_reply_internal(s, &header,
1411			&rt->stored_msg.body, return_on_interleaved_data, NULL);
1412		✗	if (ret != 0)
1413		✗	return ret;
1414
1415		✗	if (rt->stored_msg.expected_seq == header.seq) {
1416			// Got the expected reply, store it for later
1417		✗	rt->stored_msg.expected_seq = -1;
1418		✗	rt->stored_msg.header = av_calloc(1, sizeof(*rt->stored_msg.header));
1419		✗	if (!rt->stored_msg.header) {
1420		✗	av_freep(&rt->stored_msg.body);
1421		✗	return AVERROR(ENOMEM);
1422			}
1423		✗	memcpy(rt->stored_msg.header, &header, sizeof(header));
1424			} else {
1425		✗	av_log(s, AV_LOG_WARNING, "Unexpected reply with seq %d, expected %d\n",
1426			header.seq, rt->stored_msg.expected_seq);
1427		✗	av_freep(&rt->stored_msg.body);
1428			}
1429
1430			// Do not return here as we still need to read the reply
1431			// the caller was actually wanting to retrieve.
1432			}
1433
1434		✗	return ff_rtsp_read_reply_internal(s, reply, content_ptr,
1435			return_on_interleaved_data, method);
1436			}
1437
1438			/**
1439			* Send a command to the RTSP server without waiting for the reply.
1440			*
1441			* @param s RTSP (de)muxer context
1442			* @param method the method for the request
1443			* @param url the target url for the request
1444			* @param headers extra header lines to include in the request
1445			* @param send_content if non-null, the data to send as request body content
1446			* @param send_content_length the length of the send_content data, or 0 if
1447			* send_content is null
1448			*
1449			* @return zero if success, nonzero otherwise
1450			*/
1451		✗	int ff_rtsp_send_cmd_with_content_async(AVFormatContext *s,
1452			const char *method, const char *url,
1453			const char *headers,
1454			const unsigned char *send_content,
1455			int send_content_length)
1456			{
1457		✗	RTSPState *rt = s->priv_data;
1458			char buf[MAX_URL_SIZE], *out_buf;
1459			char base64buf[AV_BASE64_SIZE(sizeof(buf))];
1460
1461		✗	if (!rt->rtsp_hd_out)
1462		✗	return AVERROR(ENOTCONN);
1463
1464			/* Add in RTSP headers */
1465		✗	out_buf = buf;
1466		✗	rt->seq++;
1467		✗	snprintf(buf, sizeof(buf), "%s %s RTSP/1.0\r\n", method, url);
1468		✗	if (headers)
1469		✗	av_strlcat(buf, headers, sizeof(buf));
1470		✗	av_strlcatf(buf, sizeof(buf), "CSeq: %d\r\n", rt->seq);
1471		✗	av_strlcatf(buf, sizeof(buf), "User-Agent: %s\r\n", rt->user_agent);
1472		✗	if (rt->session_id[0] != '\0' && (!headers ||
1473		✗	!strstr(headers, "\nIf-Match:"))) {
1474		✗	av_strlcatf(buf, sizeof(buf), "Session: %s\r\n", rt->session_id);
1475			}
1476		✗	if (rt->auth[0]) {
1477		✗	char *str = ff_http_auth_create_response(&rt->auth_state,
1478		✗	rt->auth, url, method);
1479		✗	if (str)
1480		✗	av_strlcat(buf, str, sizeof(buf));
1481		✗	av_free(str);
1482			}
1483		✗	if (send_content_length > 0 && send_content)
1484		✗	av_strlcatf(buf, sizeof(buf), "Content-Length: %d\r\n", send_content_length);
1485		✗	av_strlcat(buf, "\r\n", sizeof(buf));
1486
1487			/* base64 encode rtsp if tunneling */
1488		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1489		✗	av_base64_encode(base64buf, sizeof(base64buf), buf, strlen(buf));
1490		✗	out_buf = base64buf;
1491			}
1492
1493		✗	av_log(s, AV_LOG_TRACE, "Sending:\n%s--\n", buf);
1494
1495		✗	ffurl_write(rt->rtsp_hd_out, out_buf, strlen(out_buf));
1496		✗	if (send_content_length > 0 && send_content) {
1497		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1498		✗	avpriv_report_missing_feature(s, "Tunneling of RTSP requests with content data");
1499		✗	return AVERROR_PATCHWELCOME;
1500			}
1501		✗	ffurl_write(rt->rtsp_hd_out, send_content, send_content_length);
1502			}
1503		✗	rt->last_cmd_time = av_gettime_relative();
1504
1505		✗	return 0;
1506			}
1507
1508		✗	int ff_rtsp_send_cmd_with_content_async_stored(AVFormatContext *s,
1509			const char *method, const char *url,
1510			const char *headers,
1511			const unsigned char *send_content,
1512			int send_content_length)
1513			{
1514		✗	RTSPState *rt = s->priv_data;
1515		✗	int ret = ff_rtsp_send_cmd_with_content_async(s, method, url, headers,
1516			send_content, send_content_length);
1517		✗	if (ret < 0)
1518		✗	return ret;
1519
1520		✗	rt->stored_msg.expected_seq = rt->seq;
1521		✗	av_freep(&rt->stored_msg.header);
1522		✗	av_freep(&rt->stored_msg.body);
1523		✗	return 0;
1524			}
1525
1526		✗	int ff_rtsp_send_cmd_async(AVFormatContext *s, const char *method,
1527			const char *url, const char *headers)
1528			{
1529		✗	return ff_rtsp_send_cmd_with_content_async(s, method, url, headers, NULL, 0);
1530			}
1531
1532		✗	int ff_rtsp_send_cmd(AVFormatContext *s, const char *method, const char *url,
1533			const char *headers, RTSPMessageHeader *reply,
1534			unsigned char **content_ptr)
1535			{
1536		✗	return ff_rtsp_send_cmd_with_content(s, method, url, headers, reply,
1537			content_ptr, NULL, 0);
1538			}
1539
1540		✗	int ff_rtsp_send_cmd_with_content(AVFormatContext *s,
1541			const char *method, const char *url,
1542			const char *header,
1543			RTSPMessageHeader *reply,
1544			unsigned char **content_ptr,
1545			const unsigned char *send_content,
1546			int send_content_length)
1547			{
1548		✗	RTSPState *rt = s->priv_data;
1549			HTTPAuthType cur_auth_type;
1550		✗	int ret, attempts = 0;
1551
1552		✗	retry:
1553		✗	cur_auth_type = rt->auth_state.auth_type;
1554		✗	if ((ret = ff_rtsp_send_cmd_with_content_async(s, method, url, header,
1555			send_content,
1556			send_content_length)) < 0)
1557		✗	return ret;
1558
1559		✗	if ((ret = ff_rtsp_read_reply(s, reply, content_ptr, 0, method) ) < 0)
1560		✗	return ret;
1561		✗	attempts++;
1562
1563		✗	if (reply->status_code == 401 &&
1564		✗	(cur_auth_type == HTTP_AUTH_NONE || rt->auth_state.stale) &&
1565		✗	rt->auth_state.auth_type != HTTP_AUTH_NONE && attempts < 2)
1566		✗	goto retry;
1567
1568		✗	if (reply->status_code > 400){
1569		✗	av_log(s, AV_LOG_ERROR, "method %s failed: %d (%s)\n",
1570			method,
1571		✗	reply->status_code,
1572		✗	reply->reason);
1573		✗	av_log(s, AV_LOG_DEBUG, "%s\n", rt->last_reply);
1574			}
1575
1576		✗	return 0;
1577			}
1578
1579		✗	int ff_rtsp_read_reply_async_stored(AVFormatContext *s, RTSPMessageHeader **reply,
1580			unsigned char **content_ptr)
1581			{
1582		✗	RTSPState *rt = s->priv_data;
1583		✗	if (rt->stored_msg.header == NULL) {
1584		✗	if (rt->stored_msg.expected_seq == -1)
1585		✗	return AVERROR(EINVAL); // Reply to be stored was never requested
1586
1587			// Reply pending, tell caller to try again later
1588		✗	return AVERROR(EAGAIN);
1589			}
1590
1591		✗	if (reply)
1592		✗	*reply = rt->stored_msg.header;
1593			else
1594		✗	av_free(rt->stored_msg.header);
1595
1596		✗	if (content_ptr)
1597		✗	*content_ptr = rt->stored_msg.body;
1598			else
1599		✗	av_free(rt->stored_msg.body);
1600
1601		✗	rt->stored_msg.header = NULL;
1602		✗	rt->stored_msg.body = NULL;
1603		✗	return 0;
1604			}
1605
1606		✗	int ff_rtsp_make_setup_request(AVFormatContext *s, const char *host, int port,
1607			int lower_transport, const char *real_challenge)
1608			{
1609		✗	RTSPState *rt = s->priv_data;
1610		✗	int rtx = 0, j, i, err, interleave = 0, port_off = 0;
1611			RTSPStream *rtsp_st;
1612		✗	RTSPMessageHeader reply1, *reply = &reply1;
1613			char cmd[MAX_URL_SIZE];
1614			const char *trans_pref;
1615
1616		✗	memset(&reply1, 0, sizeof(reply1));
1617
1618		✗	if (rt->transport == RTSP_TRANSPORT_RDT)
1619		✗	trans_pref = "x-pn-tng";
1620		✗	else if (rt->transport == RTSP_TRANSPORT_RAW)
1621		✗	trans_pref = "RAW/RAW";
1622			else
1623		✗	trans_pref = "RTP/AVP";
1624
1625			/* default timeout: 1 minute */
1626		✗	rt->timeout = 60;
1627
1628			/* Choose a random starting offset within the first half of the
1629			* port range, to allow for a number of ports to try even if the offset
1630			* happens to be at the end of the random range. */
1631		✗	if (rt->rtp_port_max - rt->rtp_port_min >= 4) {
1632		✗	port_off = av_get_random_seed() % ((rt->rtp_port_max - rt->rtp_port_min)/2);
1633			/* even random offset */
1634		✗	port_off -= port_off & 0x01;
1635			}
1636
1637		✗	for (j = rt->rtp_port_min + port_off, i = 0; i < rt->nb_rtsp_streams; ++i) {
1638			char transport[MAX_URL_SIZE];
1639
1640			/*
1641			* WMS serves all UDP data over a single connection, the RTX, which
1642			* isn't necessarily the first in the SDP but has to be the first
1643			* to be set up, else the second/third SETUP will fail with a 461.
1644			*/
1645		✗	if (lower_transport == RTSP_LOWER_TRANSPORT_UDP &&
1646		✗	rt->server_type == RTSP_SERVER_WMS) {
1647		✗	if (i == 0) {
1648			/* rtx first */
1649		✗	for (rtx = 0; rtx < rt->nb_rtsp_streams; rtx++) {
1650		✗	int len = strlen(rt->rtsp_streams[rtx]->control_url);
1651		✗	if (len >= 4 &&
1652		✗	!strcmp(rt->rtsp_streams[rtx]->control_url + len - 4,
1653			"/rtx"))
1654		✗	break;
1655			}
1656		✗	if (rtx == rt->nb_rtsp_streams)
1657		✗	return -1; /* no RTX found */
1658		✗	rtsp_st = rt->rtsp_streams[rtx];
1659			} else
1660		✗	rtsp_st = rt->rtsp_streams[i > rtx ? i : i - 1];
1661			} else
1662		✗	rtsp_st = rt->rtsp_streams[i];
1663
1664			/* RTP/UDP */
1665		✗	if (lower_transport == RTSP_LOWER_TRANSPORT_UDP) {
1666			char buf[256];
1667
1668		✗	if (rt->server_type == RTSP_SERVER_WMS && i > 1) {
1669		✗	port = reply->transports[0].client_port_min;
1670		✗	goto have_port;
1671			}
1672
1673			/* first try in specified port range */
1674		✗	while (j + 1 <= rt->rtp_port_max) {
1675		✗	AVDictionary *opts = map_to_opts(rt);
1676
1677		✗	ff_url_join(buf, sizeof(buf), "rtp", NULL, host, -1,
1678			"?localrtpport=%d", j);
1679			/* we will use two ports per rtp stream (rtp and rtcp) */
1680		✗	j += 2;
1681		✗	err = ffurl_open_whitelist(&rtsp_st->rtp_handle, buf, AVIO_FLAG_READ_WRITE,
1682		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
1683
1684		✗	av_dict_free(&opts);
1685
1686		✗	if (!err)
1687		✗	goto rtp_opened;
1688			}
1689		✗	av_log(s, AV_LOG_ERROR, "Unable to open an input RTP port\n");
1690		✗	err = AVERROR(EIO);
1691		✗	goto fail;
1692
1693		✗	rtp_opened:
1694		✗	port = ff_rtp_get_local_rtp_port(rtsp_st->rtp_handle);
1695		✗	have_port:
1696		✗	av_strlcpy(transport, trans_pref, sizeof(transport));
1697		✗	av_strlcat(transport,
1698		✗	rt->server_type == RTSP_SERVER_SATIP ? ";" : "/UDP;",
1699			sizeof(transport));
1700		✗	if (rt->server_type != RTSP_SERVER_REAL)
1701		✗	av_strlcat(transport, "unicast;", sizeof(transport));
1702		✗	av_strlcatf(transport, sizeof(transport),
1703			"client_port=%d", port);
1704		✗	if (rt->transport == RTSP_TRANSPORT_RTP &&
1705		✗	!(rt->server_type == RTSP_SERVER_WMS && i > 0))
1706		✗	av_strlcatf(transport, sizeof(transport), "-%d", port + 1);
1707			}
1708
1709			/* RTP/TCP */
1710		✗	else if (lower_transport == RTSP_LOWER_TRANSPORT_TCP) {
1711			/* For WMS streams, the application streams are only used for
1712			* UDP. When trying to set it up for TCP streams, the server
1713			* will return an error. Therefore, we skip those streams. */
1714		✗	if (rt->server_type == RTSP_SERVER_WMS &&
1715		✗	(rtsp_st->stream_index < 0 ||
1716		✗	s->streams[rtsp_st->stream_index]->codecpar->codec_type ==
1717			AVMEDIA_TYPE_DATA))
1718		✗	continue;
1719		✗	snprintf(transport, sizeof(transport) - 1,
1720			"%s/TCP;", trans_pref);
1721		✗	if (rt->transport != RTSP_TRANSPORT_RDT)
1722		✗	av_strlcat(transport, "unicast;", sizeof(transport));
1723		✗	av_strlcatf(transport, sizeof(transport),
1724			"interleaved=%d-%d",
1725			interleave, interleave + 1);
1726		✗	interleave += 2;
1727			}
1728
1729		✗	else if (lower_transport == RTSP_LOWER_TRANSPORT_UDP_MULTICAST) {
1730		✗	snprintf(transport, sizeof(transport) - 1,
1731			"%s/UDP;multicast", trans_pref);
1732			} else {
1733		✗	err = AVERROR(EINVAL);
1734		✗	goto fail; // transport would be uninitialized
1735			}
1736
1737		✗	if (s->oformat) {
1738		✗	av_strlcat(transport, ";mode=record", sizeof(transport));
1739		✗	} else if (rt->server_type == RTSP_SERVER_REAL ||
1740		✗	rt->server_type == RTSP_SERVER_WMS)
1741		✗	av_strlcat(transport, ";mode=play", sizeof(transport));
1742		✗	snprintf(cmd, sizeof(cmd),
1743			"Transport: %s\r\n",
1744			transport);
1745		✗	if (rt->accept_dynamic_rate)
1746		✗	av_strlcat(cmd, "x-Dynamic-Rate: 0\r\n", sizeof(cmd));
1747		✗	if (CONFIG_RTPDEC && i == 0 && rt->server_type == RTSP_SERVER_REAL) {
1748			char real_res[41], real_csum[9];
1749		✗	ff_rdt_calc_response_and_checksum(real_res, real_csum,
1750			real_challenge);
1751		✗	av_strlcatf(cmd, sizeof(cmd),
1752			"If-Match: %s\r\n"
1753			"RealChallenge2: %s, sd=%s\r\n",
1754		✗	rt->session_id, real_res, real_csum);
1755			}
1756		✗	ff_rtsp_send_cmd(s, "SETUP", rtsp_st->control_url, cmd, reply, NULL);
1757		✗	if (reply->status_code == 461 /* Unsupported protocol */ && i == 0) {
1758		✗	err = 1;
1759		✗	goto fail;
1760		✗	} else if (reply->status_code != RTSP_STATUS_OK ||
1761		✗	reply->nb_transports != 1) {
1762		✗	err = ff_rtsp_averror(reply->status_code, AVERROR_INVALIDDATA);
1763		✗	goto fail;
1764			}
1765
1766		✗	if (rt->server_type == RTSP_SERVER_SATIP && reply->stream_id[0]) {
1767			char proto[128], host[128], path[512], auth[128];
1768			int port;
1769		✗	av_url_split(proto, sizeof(proto), auth, sizeof(auth), host, sizeof(host),
1770		✗	&port, path, sizeof(path), rt->control_uri);
1771		✗	ff_url_join(rt->control_uri, sizeof(rt->control_uri), proto, NULL, host,
1772		✗	port, "/stream=%s", reply->stream_id);
1773			}
1774
1775			/* XXX: same protocol for all streams is required */
1776		✗	if (i > 0) {
1777		✗	if (reply->transports[0].lower_transport != rt->lower_transport ||
1778		✗	reply->transports[0].transport != rt->transport) {
1779		✗	err = AVERROR_INVALIDDATA;
1780		✗	goto fail;
1781			}
1782			} else {
1783		✗	rt->lower_transport = reply->transports[0].lower_transport;
1784		✗	rt->transport = reply->transports[0].transport;
1785			}
1786
1787			/* Fail if the server responded with another lower transport mode
1788			* than what we requested. */
1789		✗	if (reply->transports[0].lower_transport != lower_transport) {
1790		✗	av_log(s, AV_LOG_ERROR, "Nonmatching transport in server reply\n");
1791		✗	err = AVERROR_INVALIDDATA;
1792		✗	goto fail;
1793			}
1794
1795		✗	switch(reply->transports[0].lower_transport) {
1796		✗	case RTSP_LOWER_TRANSPORT_TCP:
1797		✗	rtsp_st->interleaved_min = reply->transports[0].interleaved_min;
1798		✗	rtsp_st->interleaved_max = reply->transports[0].interleaved_max;
1799		✗	break;
1800
1801		✗	case RTSP_LOWER_TRANSPORT_UDP: {
1802		✗	char url[MAX_URL_SIZE], options[30] = "";
1803		✗	const char *peer = host;
1804
1805		✗	if (rt->rtsp_flags & RTSP_FLAG_FILTER_SRC)
1806		✗	av_strlcpy(options, "?connect=1", sizeof(options));
1807			/* Use source address if specified */
1808		✗	if (reply->transports[0].source[0])
1809		✗	peer = reply->transports[0].source;
1810		✗	ff_url_join(url, sizeof(url), "rtp", NULL, peer,
1811			reply->transports[0].server_port_min, "%s", options);
1812		✗	if (!(rt->server_type == RTSP_SERVER_WMS && i > 1) &&
1813		✗	ff_rtp_set_remote_url(rtsp_st->rtp_handle, url) < 0) {
1814		✗	err = AVERROR_INVALIDDATA;
1815		✗	goto fail;
1816			}
1817		✗	break;
1818			}
1819		✗	case RTSP_LOWER_TRANSPORT_UDP_MULTICAST: {
1820		✗	char url[MAX_URL_SIZE], namebuf[50], optbuf[20] = "";
1821			struct sockaddr_storage addr;
1822			int port, ttl;
1823		✗	AVDictionary *opts = map_to_opts(rt);
1824
1825		✗	if (reply->transports[0].destination.ss_family) {
1826		✗	addr = reply->transports[0].destination;
1827		✗	port = reply->transports[0].port_min;
1828		✗	ttl = reply->transports[0].ttl;
1829			} else {
1830		✗	addr = rtsp_st->sdp_ip;
1831		✗	port = rtsp_st->sdp_port;
1832		✗	ttl = rtsp_st->sdp_ttl;
1833			}
1834		✗	if (ttl > 0)
1835		✗	snprintf(optbuf, sizeof(optbuf), "?ttl=%d", ttl);
1836		✗	getnameinfo((struct sockaddr*) &addr, sizeof(addr),
1837			namebuf, sizeof(namebuf), NULL, 0, NI_NUMERICHOST);
1838		✗	ff_url_join(url, sizeof(url), "rtp", NULL, namebuf,
1839			port, "%s", optbuf);
1840		✗	err = ffurl_open_whitelist(&rtsp_st->rtp_handle, url, AVIO_FLAG_READ_WRITE,
1841		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
1842		✗	av_dict_free(&opts);
1843
1844		✗	if (err < 0) {
1845		✗	err = AVERROR_INVALIDDATA;
1846		✗	goto fail;
1847			}
1848		✗	break;
1849			}
1850			}
1851
1852		✗	if ((err = ff_rtsp_open_transport_ctx(s, rtsp_st)))
1853		✗	goto fail;
1854			}
1855
1856		✗	if (rt->nb_rtsp_streams && reply->timeout > 0)
1857		✗	rt->timeout = reply->timeout;
1858
1859		✗	if (rt->server_type == RTSP_SERVER_REAL)
1860		✗	rt->need_subscription = 1;
1861
1862		✗	return 0;
1863
1864		✗	fail:
1865		✗	ff_rtsp_undo_setup(s, 0);
1866		✗	return err;
1867			}
1868
1869		✗	void ff_rtsp_close_connections(AVFormatContext *s)
1870			{
1871		✗	RTSPState *rt = s->priv_data;
1872		✗	if (rt->rtsp_hd_out != rt->rtsp_hd)
1873		✗	ffurl_closep(&rt->rtsp_hd_out);
1874		✗	rt->rtsp_hd_out = NULL;
1875		✗	ffurl_closep(&rt->rtsp_hd);
1876		✗	}
1877
1878		✗	static int rtsp_url_same_origin(const char *url1, const char *url2)
1879			{
1880			char proto1[128], proto2[128];
1881			char host1[1024], host2[1024];
1882			int port1, port2;
1883
1884		✗	av_url_split(proto1, sizeof(proto1), NULL, 0, host1, sizeof(host1),
1885			&port1, NULL, 0, url1);
1886		✗	av_url_split(proto2, sizeof(proto2), NULL, 0, host2, sizeof(host2),
1887			&port2, NULL, 0, url2);
1888
1889		✗	if (!proto1[0] || !proto2[0] || !host1[0] || !host2[0])
1890		✗	return 0;
1891
1892		✗	if (port1 < 0)
1893		✗	port1 = !av_strcasecmp(proto1, "rtsps") ? RTSPS_DEFAULT_PORT
1894		✗	: RTSP_DEFAULT_PORT;
1895		✗	if (port2 < 0)
1896		✗	port2 = !av_strcasecmp(proto2, "rtsps") ? RTSPS_DEFAULT_PORT
1897		✗	: RTSP_DEFAULT_PORT;
1898
1899		✗	return !av_strcasecmp(proto1, proto2) &&
1900		✗	!av_strcasecmp(host1, host2) &&
1901		✗	port1 == port2;
1902			}
1903
1904		✗	int ff_rtsp_connect(AVFormatContext *s)
1905			{
1906		✗	RTSPState *rt = s->priv_data;
1907			char proto[128], host[1024], path[2048];
1908			char tcpname[1024], cmd[MAX_URL_SIZE], auth[128];
1909		✗	const char *lower_rtsp_proto = "tcp";
1910			int port, err, tcp_fd;
1911		✗	RTSPMessageHeader reply1, *reply = &reply1;
1912		✗	int lower_transport_mask = 0;
1913		✗	int default_port = RTSP_DEFAULT_PORT;
1914		✗	int https_tunnel = 0;
1915		✗	char real_challenge[64] = "";
1916			struct sockaddr_storage peer;
1917		✗	socklen_t peer_len = sizeof(peer);
1918
1919		✗	rt->stored_msg.expected_seq = -1;
1920		✗	if (rt->rtp_port_max < rt->rtp_port_min) {
1921		✗	av_log(s, AV_LOG_ERROR, "Invalid UDP port range, max port %d less "
1922			"than min port %d\n", rt->rtp_port_max,
1923			rt->rtp_port_min);
1924		✗	return AVERROR(EINVAL);
1925			}
1926
1927		✗	if ((err = ff_network_init()) < 0)
1928		✗	return err;
1929
1930		✗	if (s->max_delay < 0) /* Not set by the caller */
1931		✗	s->max_delay = s->iformat ? DEFAULT_REORDERING_DELAY : 0;
1932
1933		✗	rt->control_transport = RTSP_MODE_PLAIN;
1934		✗	if (rt->lower_transport_mask & ((1 << RTSP_LOWER_TRANSPORT_HTTP) |
1935			(1 << RTSP_LOWER_TRANSPORT_HTTPS))) {
1936		✗	https_tunnel = !!(rt->lower_transport_mask & (1 << RTSP_LOWER_TRANSPORT_HTTPS));
1937		✗	rt->lower_transport_mask = 1 << RTSP_LOWER_TRANSPORT_TCP;
1938		✗	rt->control_transport = RTSP_MODE_TUNNEL;
1939			}
1940			/* Only pass through valid flags from here */
1941		✗	rt->lower_transport_mask &= (1 << RTSP_LOWER_TRANSPORT_NB) - 1;
1942
1943		✗	redirect:
1944		✗	memset(&reply1, 0, sizeof(reply1));
1945			/* extract hostname and port */
1946		✗	av_url_split(proto, sizeof(proto), auth, sizeof(auth),
1947		✗	host, sizeof(host), &port, path, sizeof(path), s->url);
1948
1949		✗	if (!strcmp(proto, "rtsps")) {
1950		✗	lower_rtsp_proto = "tls";
1951		✗	default_port = RTSPS_DEFAULT_PORT;
1952		✗	rt->lower_transport_mask = 1 << RTSP_LOWER_TRANSPORT_TCP;
1953		✗	} else if (!strcmp(proto, "satip")) {
1954		✗	av_strlcpy(proto, "rtsp", sizeof(proto));
1955		✗	rt->server_type = RTSP_SERVER_SATIP;
1956		✗	} else if (strcmp(proto, "rtsp"))
1957		✗	return AVERROR_INVALIDDATA;
1958
1959		✗	if (*auth) {
1960		✗	av_strlcpy(rt->auth, auth, sizeof(rt->auth));
1961			}
1962		✗	if (port < 0)
1963		✗	port = default_port;
1964
1965		✗	lower_transport_mask = rt->lower_transport_mask;
1966
1967		✗	if (!lower_transport_mask)
1968		✗	lower_transport_mask = (1 << RTSP_LOWER_TRANSPORT_NB) - 1;
1969
1970		✗	if (s->oformat) {
1971			/* Only UDP or TCP - UDP multicast isn't supported. */
1972		✗	lower_transport_mask &= (1 << RTSP_LOWER_TRANSPORT_UDP) |
1973			(1 << RTSP_LOWER_TRANSPORT_TCP);
1974		✗	if (!lower_transport_mask || rt->control_transport == RTSP_MODE_TUNNEL) {
1975		✗	av_log(s, AV_LOG_ERROR, "Unsupported lower transport method, "
1976			"only UDP and TCP are supported for output.\n");
1977		✗	err = AVERROR(EINVAL);
1978		✗	goto fail;
1979			}
1980			}
1981
1982			/* Construct the URI used in request; this is similar to s->url,
1983			* but with authentication credentials removed and RTSP specific options
1984			* stripped out. */
1985		✗	ff_url_join(rt->control_uri, sizeof(rt->control_uri), proto, NULL,
1986			host, port, "%s", path);
1987
1988		✗	if (rt->control_transport == RTSP_MODE_TUNNEL) {
1989			/* set up initial handshake for tunneling */
1990			char httpname[1024];
1991			char sessioncookie[17];
1992			char headers[1024];
1993		✗	AVDictionary *options = NULL;
1994
1995		✗	av_dict_set_int(&options, "timeout", rt->stimeout, 0);
1996		✗	if (https_tunnel) {
1997		✗	int ret = copy_tls_opts_dict(rt, &options);
1998		✗	if (ret < 0) {
1999		✗	av_dict_free(&options);
2000		✗	err = ret;
2001		✗	goto fail;
2002			}
2003			}
2004
2005		✗	ff_url_join(httpname, sizeof(httpname), https_tunnel ? "https" : "http", auth, host, port, "%s", path);
2006		✗	snprintf(sessioncookie, sizeof(sessioncookie), "%08x%08x",
2007			av_get_random_seed(), av_get_random_seed());
2008
2009			/* GET requests */
2010		✗	if (ffurl_alloc(&rt->rtsp_hd, httpname, AVIO_FLAG_READ,
2011		✗	&s->interrupt_callback) < 0) {
2012		✗	av_dict_free(&options);
2013		✗	err = AVERROR(EIO);
2014		✗	goto fail;
2015			}
2016
2017			/* generate GET headers */
2018		✗	snprintf(headers, sizeof(headers),
2019			"x-sessioncookie: %s\r\n"
2020			"Accept: application/x-rtsp-tunnelled\r\n"
2021			"Pragma: no-cache\r\n"
2022			"Cache-Control: no-cache\r\n",
2023			sessioncookie);
2024		✗	av_opt_set(rt->rtsp_hd->priv_data, "headers", headers, 0);
2025
2026		✗	if (!rt->rtsp_hd->protocol_whitelist && s->protocol_whitelist) {
2027		✗	rt->rtsp_hd->protocol_whitelist = av_strdup(s->protocol_whitelist);
2028		✗	if (!rt->rtsp_hd->protocol_whitelist) {
2029		✗	av_dict_free(&options);
2030		✗	err = AVERROR(ENOMEM);
2031		✗	goto fail;
2032			}
2033			}
2034
2035		✗	if (!rt->rtsp_hd->protocol_blacklist && s->protocol_blacklist) {
2036		✗	rt->rtsp_hd->protocol_blacklist = av_strdup(s->protocol_blacklist);
2037		✗	if (!rt->rtsp_hd->protocol_blacklist) {
2038		✗	av_dict_free(&options);
2039		✗	err = AVERROR(ENOMEM);
2040		✗	goto fail;
2041			}
2042			}
2043
2044			/* complete the connection */
2045		✗	if (ffurl_connect(rt->rtsp_hd, &options)) {
2046		✗	av_dict_free(&options);
2047		✗	err = AVERROR(EIO);
2048		✗	goto fail;
2049			}
2050
2051			/* POST requests */
2052		✗	if (ffurl_alloc(&rt->rtsp_hd_out, httpname, AVIO_FLAG_WRITE,
2053		✗	&s->interrupt_callback) < 0 ) {
2054		✗	av_dict_free(&options);
2055		✗	err = AVERROR(EIO);
2056		✗	goto fail;
2057			}
2058
2059			/* generate POST headers */
2060		✗	snprintf(headers, sizeof(headers),
2061			"x-sessioncookie: %s\r\n"
2062			"Content-Type: application/x-rtsp-tunnelled\r\n"
2063			"Pragma: no-cache\r\n"
2064			"Cache-Control: no-cache\r\n"
2065			"Content-Length: 32767\r\n"
2066			"Expires: Sun, 9 Jan 1972 00:00:00 GMT\r\n",
2067			sessioncookie);
2068		✗	av_opt_set(rt->rtsp_hd_out->priv_data, "headers", headers, 0);
2069		✗	av_opt_set(rt->rtsp_hd_out->priv_data, "chunked_post", "0", 0);
2070		✗	av_opt_set(rt->rtsp_hd_out->priv_data, "send_expect_100", "0", 0);
2071
2072			/* Initialize the authentication state for the POST session. The HTTP
2073			* protocol implementation doesn't properly handle multi-pass
2074			* authentication for POST requests, since it would require one of
2075			* the following:
2076			* - implementing Expect: 100-continue, which many HTTP servers
2077			* don't support anyway, even less the RTSP servers that do HTTP
2078			* tunneling
2079			* - sending the whole POST data until getting a 401 reply specifying
2080			* what authentication method to use, then resending all that data
2081			* - waiting for potential 401 replies directly after sending the
2082			* POST header (waiting for some unspecified time)
2083			* Therefore, we copy the full auth state, which works for both basic
2084			* and digest. (For digest, we would have to synchronize the nonce
2085			* count variable between the two sessions, if we'd do more requests
2086			* with the original session, though.)
2087			*/
2088		✗	ff_http_init_auth_state(rt->rtsp_hd_out, rt->rtsp_hd);
2089
2090			/* complete the connection */
2091		✗	if (ffurl_connect(rt->rtsp_hd_out, &options)) {
2092		✗	av_dict_free(&options);
2093		✗	err = AVERROR(EIO);
2094		✗	goto fail;
2095			}
2096		✗	av_dict_free(&options);
2097			} else {
2098			int ret;
2099			/* open the tcp connection */
2100		✗	AVDictionary *proto_opts = NULL;
2101		✗	if (strcmp("tls", lower_rtsp_proto) == 0) {
2102		✗	ret = copy_tls_opts_dict(rt, &proto_opts);
2103		✗	if (ret < 0) {
2104		✗	av_dict_free(&proto_opts);
2105		✗	err = ret;
2106		✗	goto fail;
2107			}
2108			}
2109
2110		✗	ff_url_join(tcpname, sizeof(tcpname), lower_rtsp_proto, NULL,
2111			host, port,
2112			"?timeout=%"PRId64, rt->stimeout);
2113		✗	if ((ret = ffurl_open_whitelist(&rt->rtsp_hd, tcpname, AVIO_FLAG_READ_WRITE,
2114		✗	&s->interrupt_callback, &proto_opts, s->protocol_whitelist, s->protocol_blacklist, NULL)) < 0) {
2115		✗	av_dict_free(&proto_opts);
2116		✗	err = ret;
2117		✗	goto fail;
2118			}
2119		✗	av_dict_free(&proto_opts);
2120		✗	rt->rtsp_hd_out = rt->rtsp_hd;
2121			}
2122		✗	rt->seq = 0;
2123
2124		✗	tcp_fd = ffurl_get_file_handle(rt->rtsp_hd);
2125		✗	if (tcp_fd < 0) {
2126		✗	err = tcp_fd;
2127		✗	goto fail;
2128			}
2129		✗	if (!getpeername(tcp_fd, (struct sockaddr*) &peer, &peer_len)) {
2130		✗	getnameinfo((struct sockaddr*) &peer, peer_len, host, sizeof(host),
2131			NULL, 0, NI_NUMERICHOST);
2132			}
2133
2134			/* request options supported by the server; this also detects server
2135			* type */
2136		✗	if (rt->server_type != RTSP_SERVER_SATIP)
2137		✗	rt->server_type = RTSP_SERVER_RTP;
2138			for (;;) {
2139		✗	cmd[0] = 0;
2140		✗	if (rt->server_type == RTSP_SERVER_REAL)
2141		✗	av_strlcat(cmd,
2142			/*
2143			* The following entries are required for proper
2144			* streaming from a Realmedia server. They are
2145			* interdependent in some way although we currently
2146			* don't quite understand how. Values were copied
2147			* from mplayer SVN r23589.
2148			* ClientChallenge is a 16-byte ID in hex
2149			* CompanyID is a 16-byte ID in base64
2150			*/
2151			"ClientChallenge: 9e26d33f2984236010ef6253fb1887f7\r\n"
2152			"PlayerStarttime: [28/03/2003:22:50:23 00:00]\r\n"
2153			"CompanyID: KnKV4M4I/B2FjJ1TToLycw==\r\n"
2154			"GUID: 00000000-0000-0000-0000-000000000000\r\n",
2155			sizeof(cmd));
2156		✗	ff_rtsp_send_cmd(s, "OPTIONS", rt->control_uri, cmd, reply, NULL);
2157		✗	if (reply->status_code != RTSP_STATUS_OK) {
2158		✗	err = ff_rtsp_averror(reply->status_code, AVERROR_INVALIDDATA);
2159		✗	goto fail;
2160			}
2161
2162			/* detect server type if not standard-compliant RTP */
2163		✗	if (rt->server_type != RTSP_SERVER_REAL && reply->real_challenge[0]) {
2164		✗	rt->server_type = RTSP_SERVER_REAL;
2165		✗	continue;
2166		✗	} else if (!av_strncasecmp(reply->server, "WMServer/", 9)) {
2167		✗	rt->server_type = RTSP_SERVER_WMS;
2168		✗	} else if (rt->server_type == RTSP_SERVER_REAL)
2169		✗	strcpy(real_challenge, reply->real_challenge);
2170		✗	break;
2171			}
2172
2173			#if CONFIG_RTSP_DEMUXER
2174		✗	if (s->iformat) {
2175		✗	if (rt->server_type == RTSP_SERVER_SATIP)
2176		✗	err = init_satip_stream(s);
2177			else
2178		✗	err = ff_rtsp_setup_input_streams(s, reply);
2179			} else
2180			#endif
2181			if (CONFIG_RTSP_MUXER)
2182		✗	err = ff_rtsp_setup_output_streams(s, host);
2183			else
2184			av_unreachable("Either muxer or demuxer must be enabled");
2185		✗	if (err)
2186		✗	goto fail;
2187
2188			do {
2189		✗	int lower_transport = ff_log2_tab[lower_transport_mask &
2190		✗	~(lower_transport_mask - 1)];
2191
2192		✗	if ((lower_transport_mask & (1 << RTSP_LOWER_TRANSPORT_TCP))
2193		✗	&& (rt->rtsp_flags & RTSP_FLAG_PREFER_TCP))
2194		✗	lower_transport = RTSP_LOWER_TRANSPORT_TCP;
2195
2196		✗	err = ff_rtsp_make_setup_request(s, host, port, lower_transport,
2197		✗	rt->server_type == RTSP_SERVER_REAL ?
2198			real_challenge : NULL);
2199		✗	if (err < 0)
2200		✗	goto fail;
2201		✗	lower_transport_mask &= ~(1 << lower_transport);
2202		✗	if (lower_transport_mask == 0 && err == 1) {
2203		✗	err = AVERROR(EPROTONOSUPPORT);
2204		✗	goto fail;
2205			}
2206		✗	} while (err);
2207
2208		✗	rt->lower_transport_mask = lower_transport_mask;
2209		✗	av_strlcpy(rt->real_challenge, real_challenge, sizeof(rt->real_challenge));
2210		✗	rt->state = RTSP_STATE_IDLE;
2211		✗	rt->seek_timestamp = 0; /* default is to start stream at position zero */
2212		✗	return 0;
2213		✗	fail:
2214		✗	ff_rtsp_close_streams(s);
2215		✗	ff_rtsp_close_connections(s);
2216		✗	if (reply->status_code >=300 && reply->status_code < 400 && s->iformat) {
2217			int ret;
2218
2219		✗	if (!rtsp_url_same_origin(s->url, reply->location)) {
2220		✗	memset(rt->auth, 0, sizeof(rt->auth));
2221		✗	memset(&rt->auth_state, 0, sizeof(rt->auth_state));
2222			}
2223		✗	ret = ff_format_check_set_url(s, reply->location);
2224		✗	if (ret < 0) {
2225		✗	err = ret;
2226		✗	goto fail2;
2227			}
2228		✗	rt->session_id[0] = '\0';
2229		✗	av_log(s, AV_LOG_INFO, "Status %d: Redirecting to %s\n",
2230		✗	reply->status_code,
2231			s->url);
2232		✗	goto redirect;
2233			}
2234		✗	fail2:
2235		✗	ff_network_close();
2236		✗	return err;
2237			}
2238			#endif /* CONFIG_RTSP_DEMUXER || CONFIG_RTSP_MUXER */
2239
2240			#if CONFIG_RTPDEC
2241			#if CONFIG_RTSP_DEMUXER
2242		✗	static int parse_rtsp_message(AVFormatContext *s)
2243			{
2244		✗	RTSPState *rt = s->priv_data;
2245			int ret;
2246
2247		✗	if (rt->rtsp_flags & RTSP_FLAG_LISTEN) {
2248		✗	if (rt->state == RTSP_STATE_STREAMING) {
2249		✗	return ff_rtsp_parse_streaming_commands(s);
2250			} else
2251		✗	return AVERROR_EOF;
2252			} else {
2253			RTSPMessageHeader reply;
2254		✗	ret = ff_rtsp_read_reply(s, &reply, NULL, 0, NULL);
2255		✗	if (ret < 0)
2256		✗	return ret;
2257			/* XXX: parse message */
2258		✗	if (rt->state != RTSP_STATE_STREAMING)
2259		✗	return 0;
2260			}
2261
2262		✗	return 0;
2263			}
2264			#endif
2265
2266		✗	static int udp_read_packet(AVFormatContext *s, RTSPStream **prtsp_st,
2267			uint8_t *buf, int buf_size, int64_t wait_end)
2268			{
2269		✗	RTSPState *rt = s->priv_data;
2270			RTSPStream *rtsp_st;
2271			int n, i, ret;
2272		✗	struct pollfd *p = rt->p;
2273		✗	int *fds = NULL, fdsnum, fdsidx;
2274		✗	int64_t runs = rt->stimeout / POLLING_TIME / 1000;
2275
2276		✗	if (!p) {
2277		✗	p = rt->p = av_malloc_array(2 * rt->nb_rtsp_streams + 1, sizeof(*p));
2278		✗	if (!p)
2279		✗	return AVERROR(ENOMEM);
2280
2281		✗	if (rt->rtsp_hd) {
2282		✗	p[rt->max_p].fd = ffurl_get_file_handle(rt->rtsp_hd);
2283		✗	p[rt->max_p++].events = POLLIN;
2284			}
2285		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2286		✗	rtsp_st = rt->rtsp_streams[i];
2287		✗	if (rtsp_st->rtp_handle) {
2288		✗	if (ret = ffurl_get_multi_file_handle(rtsp_st->rtp_handle,
2289			&fds, &fdsnum)) {
2290		✗	av_log(s, AV_LOG_ERROR, "Unable to recover rtp ports\n");
2291		✗	return ret;
2292			}
2293		✗	if (fdsnum != 2) {
2294		✗	av_log(s, AV_LOG_ERROR,
2295			"Number of fds %d not supported\n", fdsnum);
2296		✗	av_freep(&fds);
2297		✗	return AVERROR_INVALIDDATA;
2298			}
2299		✗	for (fdsidx = 0; fdsidx < fdsnum; fdsidx++) {
2300		✗	p[rt->max_p].fd = fds[fdsidx];
2301		✗	p[rt->max_p++].events = POLLIN;
2302			}
2303		✗	av_freep(&fds);
2304			}
2305			}
2306			}
2307
2308			for (;;) {
2309		✗	if (ff_check_interrupt(&s->interrupt_callback))
2310		✗	return AVERROR_EXIT;
2311		✗	if (wait_end && wait_end - av_gettime_relative() < 0)
2312		✗	return AVERROR(EAGAIN);
2313		✗	n = poll(p, rt->max_p, POLLING_TIME);
2314		✗	if (n > 0) {
2315		✗	int j = rt->rtsp_hd ? 1 : 0;
2316		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2317		✗	rtsp_st = rt->rtsp_streams[i];
2318		✗	if (rtsp_st->rtp_handle) {
2319		✗	if (p[j].revents & POLLIN || p[j+1].revents & POLLIN) {
2320		✗	ret = ffurl_read(rtsp_st->rtp_handle, buf, buf_size);
2321		✗	if (ret > 0) {
2322		✗	*prtsp_st = rtsp_st;
2323		✗	return ret;
2324			}
2325			}
2326		✗	j+=2;
2327			}
2328			}
2329			#if CONFIG_RTSP_DEMUXER
2330		✗	if (rt->rtsp_hd && p[0].revents & POLLIN) {
2331		✗	if ((ret = parse_rtsp_message(s)) < 0) {
2332		✗	return ret;
2333			}
2334			}
2335			#endif
2336		✗	} else if (n == 0 && rt->stimeout > 0 && --runs <= 0) {
2337		✗	return AVERROR(ETIMEDOUT);
2338		✗	} else if (n < 0 && errno != EINTR)
2339		✗	return AVERROR(errno);
2340			}
2341			}
2342
2343		✗	static int pick_stream(AVFormatContext *s, RTSPStream **rtsp_st,
2344			const uint8_t *buf, int len)
2345			{
2346		✗	RTSPState *rt = s->priv_data;
2347			int i;
2348		✗	if (len < 0)
2349		✗	return len;
2350		✗	if (rt->nb_rtsp_streams == 1) {
2351		✗	*rtsp_st = rt->rtsp_streams[0];
2352		✗	return len;
2353			}
2354		✗	if (len >= 8 && rt->transport == RTSP_TRANSPORT_RTP) {
2355		✗	if (RTP_PT_IS_RTCP(rt->recvbuf[1])) {
2356		✗	int no_ssrc = 0;
2357		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2358		✗	RTPDemuxContext *rtpctx = rt->rtsp_streams[i]->transport_priv;
2359		✗	if (!rtpctx)
2360		✗	continue;
2361		✗	if (rtpctx->ssrc == AV_RB32(&buf[4])) {
2362		✗	*rtsp_st = rt->rtsp_streams[i];
2363		✗	return len;
2364			}
2365		✗	if (!rtpctx->ssrc)
2366		✗	no_ssrc = 1;
2367			}
2368		✗	if (no_ssrc) {
2369		✗	av_log(s, AV_LOG_WARNING,
2370			"Unable to pick stream for packet - SSRC not known for "
2371			"all streams\n");
2372		✗	return AVERROR(EAGAIN);
2373			}
2374			} else {
2375		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2376		✗	if ((buf[1] & 0x7f) == rt->rtsp_streams[i]->sdp_payload_type) {
2377		✗	*rtsp_st = rt->rtsp_streams[i];
2378		✗	return len;
2379			}
2380			}
2381			}
2382			}
2383		✗	av_log(s, AV_LOG_WARNING, "Unable to pick stream for packet\n");
2384		✗	return AVERROR(EAGAIN);
2385			}
2386
2387		✗	static int read_packet(AVFormatContext *s,
2388			RTSPStream **rtsp_st, RTSPStream *first_queue_st,
2389			int64_t wait_end)
2390			{
2391		✗	RTSPState *rt = s->priv_data;
2392			int len;
2393
2394		✗	switch(rt->lower_transport) {
2395		✗	default:
2396			#if CONFIG_RTSP_DEMUXER
2397			case RTSP_LOWER_TRANSPORT_TCP:
2398		✗	len = ff_rtsp_tcp_read_packet(s, rtsp_st, rt->recvbuf, RECVBUF_SIZE);
2399		✗	break;
2400			#endif
2401		✗	case RTSP_LOWER_TRANSPORT_UDP:
2402			case RTSP_LOWER_TRANSPORT_UDP_MULTICAST:
2403		✗	len = udp_read_packet(s, rtsp_st, rt->recvbuf, RECVBUF_SIZE, wait_end);
2404		✗	if (len > 0 && (*rtsp_st)->transport_priv && rt->transport == RTSP_TRANSPORT_RTP)
2405		✗	ff_rtp_check_and_send_back_rr((*rtsp_st)->transport_priv, (*rtsp_st)->rtp_handle, NULL, len);
2406		✗	break;
2407		✗	case RTSP_LOWER_TRANSPORT_CUSTOM:
2408		✗	if (first_queue_st && rt->transport == RTSP_TRANSPORT_RTP &&
2409		✗	wait_end && wait_end < av_gettime_relative())
2410		✗	len = AVERROR(EAGAIN);
2411			else
2412		✗	len = avio_read_partial(s->pb, rt->recvbuf, RECVBUF_SIZE);
2413		✗	len = pick_stream(s, rtsp_st, rt->recvbuf, len);
2414		✗	if (len > 0 && (*rtsp_st)->transport_priv && rt->transport == RTSP_TRANSPORT_RTP)
2415		✗	ff_rtp_check_and_send_back_rr((*rtsp_st)->transport_priv, NULL, s->pb, len);
2416		✗	break;
2417			}
2418
2419		✗	if (len == 0)
2420		✗	return AVERROR_EOF;
2421
2422		✗	return len;
2423			}
2424
2425		✗	int ff_rtsp_fetch_packet(AVFormatContext *s, AVPacket *pkt)
2426			{
2427		✗	RTSPState *rt = s->priv_data;
2428			int ret, len;
2429		✗	RTSPStream *rtsp_st, *first_queue_st = NULL;
2430		✗	int64_t wait_end = 0;
2431
2432		✗	if (rt->nb_byes == rt->nb_rtsp_streams)
2433		✗	return AVERROR_EOF;
2434
2435			/* get next frames from the same RTP packet */
2436		✗	if (rt->cur_transport_priv) {
2437		✗	if (rt->transport == RTSP_TRANSPORT_RDT) {
2438		✗	ret = ff_rdt_parse_packet(rt->cur_transport_priv, pkt, NULL, 0);
2439		✗	} else if (rt->transport == RTSP_TRANSPORT_RTP) {
2440		✗	ret = ff_rtp_parse_packet(rt->cur_transport_priv, pkt, NULL, 0);
2441		✗	} else if (CONFIG_RTPDEC && rt->ts) {
2442		✗	ret = avpriv_mpegts_parse_packet(rt->ts, pkt, rt->recvbuf + rt->recvbuf_pos, rt->recvbuf_len - rt->recvbuf_pos);
2443		✗	if (ret >= 0) {
2444		✗	rt->recvbuf_pos += ret;
2445		✗	ret = rt->recvbuf_pos < rt->recvbuf_len;
2446			}
2447			} else
2448		✗	ret = -1;
2449		✗	if (ret == 0) {
2450		✗	rt->cur_transport_priv = NULL;
2451		✗	return 0;
2452		✗	} else if (ret == 1) {
2453		✗	return 0;
2454			} else
2455		✗	rt->cur_transport_priv = NULL;
2456			}
2457
2458		✗	redo:
2459		✗	if (rt->transport == RTSP_TRANSPORT_RTP) {
2460			int i;
2461		✗	int64_t first_queue_time = 0;
2462		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2463		✗	RTPDemuxContext *rtpctx = rt->rtsp_streams[i]->transport_priv;
2464			int64_t queue_time;
2465		✗	if (!rtpctx)
2466		✗	continue;
2467		✗	queue_time = ff_rtp_queued_packet_time(rtpctx);
2468		✗	if (queue_time && (queue_time - first_queue_time < 0 ||
2469			!first_queue_time)) {
2470		✗	first_queue_time = queue_time;
2471		✗	first_queue_st = rt->rtsp_streams[i];
2472			}
2473			}
2474		✗	if (first_queue_time) {
2475		✗	wait_end = first_queue_time + s->max_delay;
2476			} else {
2477		✗	wait_end = 0;
2478		✗	first_queue_st = NULL;
2479			}
2480			}
2481
2482			/* read next RTP packet */
2483		✗	if (!rt->recvbuf) {
2484		✗	rt->recvbuf = av_malloc(RECVBUF_SIZE);
2485		✗	if (!rt->recvbuf)
2486		✗	return AVERROR(ENOMEM);
2487			}
2488
2489		✗	len = read_packet(s, &rtsp_st, first_queue_st, wait_end);
2490		✗	if (len == AVERROR(EAGAIN) && first_queue_st &&
2491		✗	rt->transport == RTSP_TRANSPORT_RTP) {
2492		✗	av_log(s, AV_LOG_WARNING,
2493			"max delay reached. need to consume packet\n");
2494		✗	rtsp_st = first_queue_st;
2495		✗	ret = ff_rtp_parse_packet(rtsp_st->transport_priv, pkt, NULL, 0);
2496		✗	goto end;
2497			}
2498		✗	if (len < 0)
2499		✗	return len;
2500
2501		✗	if (rt->transport == RTSP_TRANSPORT_RDT) {
2502		✗	ret = ff_rdt_parse_packet(rtsp_st->transport_priv, pkt, &rt->recvbuf, len);
2503		✗	} else if (rt->transport == RTSP_TRANSPORT_RTP) {
2504		✗	ret = ff_rtp_parse_packet(rtsp_st->transport_priv, pkt, &rt->recvbuf, len);
2505		✗	if (rtsp_st->feedback) {
2506		✗	AVIOContext *pb = NULL;
2507		✗	if (rt->lower_transport == RTSP_LOWER_TRANSPORT_CUSTOM)
2508		✗	pb = s->pb;
2509		✗	ff_rtp_send_rtcp_feedback(rtsp_st->transport_priv, rtsp_st->rtp_handle, pb);
2510			}
2511		✗	if (ret < 0) {
2512			/* Either bad packet, or a RTCP packet. Check if the
2513			* first_rtcp_ntp_time field was initialized. */
2514		✗	RTPDemuxContext *rtpctx = rtsp_st->transport_priv;
2515		✗	if (rtpctx->first_rtcp_ntp_time != AV_NOPTS_VALUE) {
2516			/* first_rtcp_ntp_time has been initialized for this stream,
2517			* copy the same value to all other uninitialized streams,
2518			* in order to map their timestamp origin to the same ntp time
2519			* as this one. */
2520			int i;
2521		✗	AVStream *st = NULL;
2522		✗	if (rtsp_st->stream_index >= 0)
2523		✗	st = s->streams[rtsp_st->stream_index];
2524		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2525		✗	RTPDemuxContext *rtpctx2 = rt->rtsp_streams[i]->transport_priv;
2526		✗	AVStream *st2 = NULL;
2527		✗	if (rt->rtsp_streams[i]->stream_index >= 0)
2528		✗	st2 = s->streams[rt->rtsp_streams[i]->stream_index];
2529		✗	if (rtpctx2 && st && st2 &&
2530		✗	rtpctx2->first_rtcp_ntp_time == AV_NOPTS_VALUE) {
2531		✗	rtpctx2->first_rtcp_ntp_time = rtpctx->first_rtcp_ntp_time;
2532		✗	rtpctx2->rtcp_ts_offset = av_rescale_q(
2533			rtpctx->rtcp_ts_offset, st->time_base,
2534			st2->time_base);
2535			}
2536			}
2537			// Make real NTP start time available in AVFormatContext
2538		✗	if (s->start_time_realtime == AV_NOPTS_VALUE) {
2539		✗	s->start_time_realtime = ff_parse_ntp_time(rtpctx->first_rtcp_ntp_time) - NTP_OFFSET_US;
2540		✗	if (rtpctx->st) {
2541		✗	s->start_time_realtime -=
2542		✗	av_rescale_q (rtpctx->rtcp_ts_offset, rtpctx->st->time_base, AV_TIME_BASE_Q);
2543			}
2544			}
2545			}
2546		✗	if (ret == -RTCP_BYE) {
2547		✗	rt->nb_byes++;
2548
2549		✗	av_log(s, AV_LOG_DEBUG, "Received BYE for stream %d (%d/%d)\n",
2550		✗	rtsp_st->stream_index, rt->nb_byes, rt->nb_rtsp_streams);
2551
2552		✗	if (rt->nb_byes == rt->nb_rtsp_streams)
2553		✗	return AVERROR_EOF;
2554			}
2555			}
2556		✗	} else if (CONFIG_RTPDEC && rt->ts) {
2557		✗	ret = avpriv_mpegts_parse_packet(rt->ts, pkt, rt->recvbuf, len);
2558		✗	if (ret >= 0) {
2559		✗	if (ret < len) {
2560		✗	rt->recvbuf_len = len;
2561		✗	rt->recvbuf_pos = ret;
2562		✗	rt->cur_transport_priv = rt->ts;
2563		✗	return 1;
2564			} else {
2565		✗	ret = 0;
2566			}
2567			}
2568			} else {
2569		✗	return AVERROR_INVALIDDATA;
2570			}
2571		✗	end:
2572		✗	if (ret < 0)
2573		✗	goto redo;
2574		✗	if (ret == 1)
2575			/* more packets may follow, so we save the RTP context */
2576		✗	rt->cur_transport_priv = rtsp_st->transport_priv;
2577
2578		✗	return ret;
2579			}
2580			#endif /* CONFIG_RTPDEC */
2581
2582			#if CONFIG_SDP_DEMUXER
2583		8062	static int sdp_probe(const AVProbeData *p1)
2584			{
2585		8062	const char *p = p1->buf, *p_end = p1->buf + p1->buf_size;
2586
2587			/* we look for a line beginning "c=IN IP" */
2588	3/4 ✓ Branch 0 taken 755638 times. ✗ Branch 1 not taken. ✓ Branch 2 taken 751176 times. ✓ Branch 3 taken 4462 times.	755638	while (p < p_end && *p != '\0') {
2589	3/4 ✓ Branch 0 taken 751014 times. ✓ Branch 1 taken 162 times. ✗ Branch 2 not taken. ✓ Branch 3 taken 751014 times.	1502190	if (sizeof("c=IN IP") - 1 < p_end - p &&
2590		751014	av_strstart(p, "c=IN IP", NULL))
2591		✗	return AVPROBE_SCORE_EXTENSION;
2592
2593	4/4 ✓ Branch 0 taken 120757155 times. ✓ Branch 1 taken 3600 times. ✓ Branch 2 taken 120009579 times. ✓ Branch 3 taken 747576 times.	120760755	while (p < p_end - 1 && *p != '\n') p++;
2594	2/2 ✓ Branch 0 taken 3600 times. ✓ Branch 1 taken 747576 times.	751176	if (++p >= p_end)
2595		3600	break;
2596	2/2 ✓ Branch 0 taken 4336 times. ✓ Branch 1 taken 743240 times.	747576	if (*p == '\r')
2597		4336	p++;
2598			}
2599		8062	return 0;
2600			}
2601
2602		✗	static void append_source_addrs(char *buf, int size, const char *name,
2603			int count, struct RTSPSource **addrs)
2604			{
2605			int i;
2606		✗	if (!count)
2607		✗	return;
2608		✗	av_strlcatf(buf, size, "&%s=%s", name, addrs[0]->addr);
2609		✗	for (i = 1; i < count; i++)
2610		✗	av_strlcatf(buf, size, ",%s", addrs[i]->addr);
2611			}
2612
2613		✗	static int sdp_read_header(AVFormatContext *s)
2614			{
2615		✗	RTSPState *rt = s->priv_data;
2616			RTSPStream *rtsp_st;
2617			int i, err;
2618			char url[MAX_URL_SIZE];
2619			AVBPrint bp;
2620
2621		✗	if ((err = ff_network_init()) < 0)
2622		✗	return err;
2623
2624		✗	if (s->max_delay < 0) /* Not set by the caller */
2625		✗	s->max_delay = DEFAULT_REORDERING_DELAY;
2626		✗	if (rt->rtsp_flags & RTSP_FLAG_CUSTOM_IO)
2627		✗	rt->lower_transport = RTSP_LOWER_TRANSPORT_CUSTOM;
2628
2629			/* read the whole sdp file */
2630		✗	av_bprint_init(&bp, 0, AV_BPRINT_SIZE_UNLIMITED);
2631		✗	err = avio_read_to_bprint(s->pb, &bp, INT_MAX);
2632		✗	if (err < 0 ) {
2633		✗	ff_network_close();
2634		✗	av_bprint_finalize(&bp, NULL);
2635		✗	return err;
2636			}
2637		✗	err = ff_sdp_parse(s, bp.str);
2638		✗	av_bprint_finalize(&bp, NULL);
2639		✗	if (err) goto fail;
2640
2641			/* open each RTP stream */
2642		✗	for (i = 0; i < rt->nb_rtsp_streams; i++) {
2643			char namebuf[50];
2644		✗	rtsp_st = rt->rtsp_streams[i];
2645
2646		✗	if (!(rt->rtsp_flags & RTSP_FLAG_CUSTOM_IO)) {
2647		✗	AVDictionary *opts = map_to_opts(rt);
2648			char buf[MAX_URL_SIZE];
2649			const char *p;
2650
2651		✗	err = getnameinfo((struct sockaddr*) &rtsp_st->sdp_ip,
2652			sizeof(rtsp_st->sdp_ip),
2653			namebuf, sizeof(namebuf), NULL, 0, NI_NUMERICHOST);
2654		✗	if (err) {
2655		✗	av_log(s, AV_LOG_ERROR, "getnameinfo: %s\n", gai_strerror(err));
2656		✗	err = AVERROR(EIO);
2657		✗	av_dict_free(&opts);
2658		✗	goto fail;
2659			}
2660		✗	ff_url_join(url, sizeof(url), "rtp", NULL,
2661			namebuf, rtsp_st->sdp_port,
2662			"?localrtpport=%d&ttl=%d&connect=%d&write_to_source=%d",
2663			rtsp_st->sdp_port, rtsp_st->sdp_ttl,
2664		✗	rt->rtsp_flags & RTSP_FLAG_FILTER_SRC ? 1 : 0,
2665		✗	rt->rtsp_flags & RTSP_FLAG_RTCP_TO_SOURCE ? 1 : 0);
2666
2667		✗	p = strchr(s->url, '?');
2668		✗	if (p && av_find_info_tag(buf, sizeof(buf), "localaddr", p))
2669		✗	av_strlcatf(url, sizeof(url), "&localaddr=%s", buf);
2670		✗	else if (rt->localaddr && rt->localaddr[0])
2671		✗	av_strlcatf(url, sizeof(url), "&localaddr=%s", rt->localaddr);
2672		✗	append_source_addrs(url, sizeof(url), "sources",
2673			rtsp_st->nb_include_source_addrs,
2674			rtsp_st->include_source_addrs);
2675		✗	append_source_addrs(url, sizeof(url), "block",
2676			rtsp_st->nb_exclude_source_addrs,
2677			rtsp_st->exclude_source_addrs);
2678		✗	err = ffurl_open_whitelist(&rtsp_st->rtp_handle, url, AVIO_FLAG_READ,
2679		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
2680
2681		✗	av_dict_free(&opts);
2682
2683		✗	if (err < 0) {
2684		✗	err = AVERROR_INVALIDDATA;
2685		✗	goto fail;
2686			}
2687			}
2688		✗	if ((err = ff_rtsp_open_transport_ctx(s, rtsp_st)))
2689		✗	goto fail;
2690			}
2691		✗	return 0;
2692		✗	fail:
2693		✗	ff_rtsp_close_streams(s);
2694		✗	ff_network_close();
2695		✗	return err;
2696			}
2697
2698		✗	static int sdp_read_close(AVFormatContext *s)
2699			{
2700		✗	ff_rtsp_close_streams(s);
2701		✗	ff_network_close();
2702		✗	return 0;
2703			}
2704
2705			static const AVClass sdp_demuxer_class = {
2706			.class_name = "SDP demuxer",
2707			.item_name = av_default_item_name,
2708			.option = sdp_options,
2709			.version = LIBAVUTIL_VERSION_INT,
2710			};
2711
2712			const FFInputFormat ff_sdp_demuxer = {
2713			.p.name = "sdp",
2714			.p.long_name = NULL_IF_CONFIG_SMALL("SDP"),
2715			.p.priv_class = &sdp_demuxer_class,
2716			.priv_data_size = sizeof(RTSPState),
2717			.read_probe = sdp_probe,
2718			.read_header = sdp_read_header,
2719			.read_packet = ff_rtsp_fetch_packet,
2720			.read_close = sdp_read_close,
2721			};
2722			#endif /* CONFIG_SDP_DEMUXER */
2723
2724			#if CONFIG_RTP_DEMUXER
2725		4287	static int rtp_probe(const AVProbeData *p)
2726			{
2727	1/2 ✗ Branch 1 not taken. ✓ Branch 2 taken 4287 times.	4287	if (av_strstart(p->filename, "rtp:", NULL))
2728		✗	return AVPROBE_SCORE_MAX;
2729		4287	return 0;
2730			}
2731
2732		✗	static int rtp_read_header(AVFormatContext *s)
2733			{
2734			uint8_t recvbuf[RTP_MAX_PACKET_LENGTH];
2735			char host[500], filters_buf[1000];
2736			int ret, port;
2737		✗	URLContext* in = NULL;
2738			int payload_type;
2739		✗	AVCodecParameters *par = NULL;
2740			struct sockaddr_storage addr;
2741			FFIOContext pb;
2742		✗	socklen_t addrlen = sizeof(addr);
2743		✗	RTSPState *rt = s->priv_data;
2744			const char *p;
2745			AVBPrint sdp;
2746		✗	AVDictionary *opts = NULL;
2747
2748		✗	if ((ret = ff_network_init()) < 0)
2749		✗	return ret;
2750
2751		✗	opts = map_to_opts(rt);
2752		✗	ret = ffurl_open_whitelist(&in, s->url, AVIO_FLAG_READ,
2753		✗	&s->interrupt_callback, &opts, s->protocol_whitelist, s->protocol_blacklist, NULL);
2754		✗	av_dict_free(&opts);
2755		✗	if (ret)
2756		✗	goto fail;
2757
2758			while (1) {
2759		✗	ret = ffurl_read(in, recvbuf, sizeof(recvbuf));
2760		✗	if (ret == AVERROR(EAGAIN))
2761		✗	continue;
2762		✗	if (ret < 0)
2763		✗	goto fail;
2764		✗	if (ret < 12) {
2765		✗	av_log(s, AV_LOG_WARNING, "Received too short packet\n");
2766		✗	continue;
2767			}
2768
2769		✗	if ((recvbuf[0] & 0xc0) != 0x80) {
2770		✗	av_log(s, AV_LOG_WARNING, "Unsupported RTP version packet "
2771			"received\n");
2772		✗	continue;
2773			}
2774
2775		✗	if (RTP_PT_IS_RTCP(recvbuf[1]))
2776		✗	continue;
2777
2778		✗	payload_type = recvbuf[1] & 0x7f;
2779		✗	break;
2780			}
2781		✗	getsockname(ffurl_get_file_handle(in), (struct sockaddr*) &addr, &addrlen);
2782		✗	ffurl_closep(&in);
2783
2784		✗	par = avcodec_parameters_alloc();
2785		✗	if (!par) {
2786		✗	ret = AVERROR(ENOMEM);
2787		✗	goto fail;
2788			}
2789
2790		✗	if (ff_rtp_get_codec_info(par, payload_type)) {
2791		✗	av_log(s, AV_LOG_ERROR, "Unable to receive RTP payload type %d "
2792			"without an SDP file describing it\n",
2793			payload_type);
2794		✗	ret = AVERROR_INVALIDDATA;
2795		✗	goto fail;
2796			}
2797		✗	if (par->codec_type != AVMEDIA_TYPE_DATA) {
2798		✗	av_log(s, AV_LOG_WARNING, "Guessing on RTP content - if not received "
2799			"properly you need an SDP file "
2800			"describing it\n");
2801			}
2802
2803		✗	av_url_split(NULL, 0, NULL, 0, host, sizeof(host), &port,
2804		✗	NULL, 0, s->url);
2805
2806		✗	av_bprint_init(&sdp, 0, AV_BPRINT_SIZE_UNLIMITED);
2807		✗	av_bprintf(&sdp, "v=0\r\nc=IN IP%d %s\r\n",
2808		✗	addr.ss_family == AF_INET ? 4 : 6, host);
2809
2810		✗	p = strchr(s->url, '?');
2811		✗	if (p) {
2812			static const char filters[][2][8] = { { "sources", "incl" },
2813			{ "block", "excl" } };
2814			int i;
2815			char *q;
2816		✗	for (i = 0; i < FF_ARRAY_ELEMS(filters); i++) {
2817		✗	if (av_find_info_tag(filters_buf, sizeof(filters_buf), filters[i][0], p)) {
2818		✗	q = filters_buf;
2819		✗	while ((q = strchr(q, ',')) != NULL)
2820		✗	*q = ' ';
2821		✗	av_bprintf(&sdp, "a=source-filter:%s IN IP%d %s %s\r\n",
2822		✗	filters[i][1],
2823		✗	addr.ss_family == AF_INET ? 4 : 6, host,
2824			filters_buf);
2825			}
2826			}
2827			}
2828
2829		✗	av_bprintf(&sdp, "m=%s %d RTP/AVP %d\r\n",
2830		✗	par->codec_type == AVMEDIA_TYPE_DATA ? "application" :
2831		✗	par->codec_type == AVMEDIA_TYPE_VIDEO ? "video" : "audio",
2832			port, payload_type);
2833		✗	av_log(s, AV_LOG_VERBOSE, "SDP:\n%s\n", sdp.str);
2834		✗	if (!av_bprint_is_complete(&sdp))
2835		✗	goto fail_nobuf;
2836		✗	avcodec_parameters_free(&par);
2837
2838		✗	ffio_init_read_context(&pb, sdp.str, sdp.len);
2839		✗	s->pb = &pb.pub;
2840
2841			/* if sdp_read_header() fails then following ff_network_close() cancels out */
2842			/* ff_network_init() at the start of this function. Otherwise it cancels out */
2843			/* ff_network_init() inside sdp_read_header() */
2844		✗	ff_network_close();
2845
2846		✗	rt->media_type_mask = (1 << (AVMEDIA_TYPE_SUBTITLE+1)) - 1;
2847
2848		✗	ret = sdp_read_header(s);
2849		✗	s->pb = NULL;
2850		✗	av_bprint_finalize(&sdp, NULL);
2851		✗	return ret;
2852
2853		✗	fail_nobuf:
2854		✗	ret = AVERROR(ENOMEM);
2855		✗	av_log(s, AV_LOG_ERROR, "rtp_read_header(): not enough buffer space for sdp-headers\n");
2856		✗	av_bprint_finalize(&sdp, NULL);
2857		✗	fail:
2858		✗	avcodec_parameters_free(&par);
2859		✗	ffurl_closep(&in);
2860		✗	ff_network_close();
2861		✗	return ret;
2862			}
2863
2864			static const AVClass rtp_demuxer_class = {
2865			.class_name = "RTP demuxer",
2866			.item_name = av_default_item_name,
2867			.option = rtp_options,
2868			.version = LIBAVUTIL_VERSION_INT,
2869			};
2870
2871			const FFInputFormat ff_rtp_demuxer = {
2872			.p.name = "rtp",
2873			.p.long_name = NULL_IF_CONFIG_SMALL("RTP input"),
2874			.p.flags = AVFMT_NOFILE,
2875			.p.priv_class = &rtp_demuxer_class,
2876			.priv_data_size = sizeof(RTSPState),
2877			.read_probe = rtp_probe,
2878			.read_header = rtp_read_header,
2879			.read_packet = ff_rtsp_fetch_packet,
2880			.read_close = sdp_read_close,
2881			};
2882			#endif /* CONFIG_RTP_DEMUXER */
2883