FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/tdsc.c
Date: 2026-10-08 18:39:17
Exec Total Coverage
Lines: 256 329 77.8%
Functions: 11 11 100.0%
Branches: 113 190 59.5%
Line Branch Exec Source
1 /*
2 * TDSC decoder
3 * Copyright (C) 2015 Vittorio Giovara <vittorio.giovara@gmail.com>
4 *
5 * This file is part of FFmpeg.
6 *
7 * FFmpeg is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
11 *
12 * FFmpeg is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public
18 * License along with FFmpeg; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20 */
21
22 /**
23 * @file
24 * TDSC decoder
25 *
26 * Fourcc: TSDC
27 *
28 * TDSC is very simple. It codes picture by tiles, storing them in raw BGR24
29 * format or compressing them in JPEG. Frames can be full pictures or just
30 * updates to the previous frame. Cursor is found in its own frame or at the
31 * bottom of the picture. Every frame is then packed with zlib.
32 *
33 * Supports: BGR24
34 */
35
36 #include <stdint.h>
37 #include <zlib.h>
38
39 #include "libavutil/attributes_internal.h"
40 #include "libavutil/imgutils.h"
41 #include "libavutil/mem.h"
42
43 #include "avcodec.h"
44 #include "bytestream.h"
45 #include "codec_internal.h"
46 #include "decode.h"
47
48 #define BITMAPINFOHEADER_SIZE 0x28
49 #define TDSF_HEADER_SIZE 0x56
50 #define TDSB_HEADER_SIZE 0x08
51
52 typedef struct TDSCContext {
53 AVCodecContext *jpeg_avctx; // wrapper context for MJPEG
54
55 int width, height;
56 GetByteContext gbc;
57
58 AVFrame *refframe; // full decoded frame (without cursor)
59 AVPacket *jpkt; // encoded JPEG tile
60 AVFrame *jpgframe; // decoded JPEG tile
61 uint8_t *tilebuffer; // buffer containing tile data
62
63 /* zlib interaction */
64 uint8_t *deflatebuffer;
65 uLongf deflatelen;
66
67 /* All that is cursor */
68 uint8_t *cursor;
69 int cursor_stride;
70 int cursor_w, cursor_h, cursor_x, cursor_y;
71 int cursor_hot_x, cursor_hot_y;
72 } TDSCContext;
73
74 /* 1 byte bits, 1 byte planes, 2 bytes format (probably) */
75 enum TDSCCursorFormat {
76 CUR_FMT_MONO = 0x01010004,
77 CUR_FMT_BGRA = 0x20010004,
78 CUR_FMT_RGBA = 0x20010008,
79 };
80
81 2 static av_cold int tdsc_close(AVCodecContext *avctx)
82 {
83 2 TDSCContext *ctx = avctx->priv_data;
84
85 2 av_frame_free(&ctx->refframe);
86 2 av_frame_free(&ctx->jpgframe);
87 2 av_packet_free(&ctx->jpkt);
88 2 av_freep(&ctx->deflatebuffer);
89 2 av_freep(&ctx->tilebuffer);
90 2 av_freep(&ctx->cursor);
91 2 avcodec_free_context(&ctx->jpeg_avctx);
92
93 2 return 0;
94 }
95
96 2 static av_cold int tdsc_init(AVCodecContext *avctx)
97 {
98 2 TDSCContext *ctx = avctx->priv_data;
99 int ret;
100
101 2 avctx->pix_fmt = AV_PIX_FMT_BGR24;
102
103 /* These needs to be set to estimate buffer and frame size */
104
2/4
✓ Branch 0 taken 2 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 2 times.
 2 if (!(avctx->width && avctx->height)) {
105 ✗ av_log(avctx, AV_LOG_ERROR, "Video size not set.\n");
106 ✗ return AVERROR_INVALIDDATA;
107 }
108
109 /* This value should be large enough for a RAW-only frame plus headers */
110 2 ctx->deflatelen = avctx->width * avctx->height * (3 + 1);
111 2 ret = av_reallocp(&ctx->deflatebuffer, ctx->deflatelen);
112
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (ret < 0)
113 ✗ return ret;
114
115 /* Allocate reference and JPEG frame */
116 2 ctx->refframe = av_frame_alloc();
117 2 ctx->jpgframe = av_frame_alloc();
118 2 ctx->jpkt = av_packet_alloc();
119
3/6
✓ Branch 0 taken 2 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 2 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 2 times.
 2 if (!ctx->refframe || !ctx->jpgframe || !ctx->jpkt)
120 ✗ return AVERROR(ENOMEM);
121
122 /* Prepare everything needed for JPEG decoding */
123 EXTERN const FFCodec ff_mjpeg_decoder;
124 2 ctx->jpeg_avctx = avcodec_alloc_context3(&ff_mjpeg_decoder.p);
125
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!ctx->jpeg_avctx)
126 ✗ return AVERROR(ENOMEM);
127 2 ctx->jpeg_avctx->flags = avctx->flags;
128 2 ctx->jpeg_avctx->flags2 = avctx->flags2;
129 2 ctx->jpeg_avctx->idct_algo = avctx->idct_algo;
130 2 ctx->jpeg_avctx->max_pixels = avctx->max_pixels;
131 2 ret = avcodec_open2(ctx->jpeg_avctx, NULL, NULL);
132
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (ret < 0)
133 ✗ return ret;
134
135 /* Set the output pixel format on the reference frame */
136 2 ctx->refframe->format = avctx->pix_fmt;
137
138 2 return 0;
139 }
140
141 #define APPLY_ALPHA(src, new, alpha) \
142 src = (src * (256 - alpha) + new * alpha) >> 8
143
144 /* Paint a region over a buffer, without drawing out of its bounds. */
145 41 static void tdsc_paint_cursor(AVCodecContext *avctx, uint8_t *dst, int stride)
146 {
147 41 TDSCContext *ctx = avctx->priv_data;
148 41 const uint8_t *cursor = ctx->cursor;
149 int x, y;
150 41 int w = ctx->cursor_w;
151 41 int h = ctx->cursor_h;
152 int i, j;
153
154
2/2
✓ Branch 0 taken 17 times.
✓ Branch 1 taken 24 times.
 41 if (!ctx->cursor)
155 17 return;
156
157 /* A cursor position outside the frame is invalid; skip drawing it.
158 * cursor_x/y come straight from the bitstream, so bound them before
159 * the (16 bit) hot spot shift to avoid overflowing the clip math. */
160
1/2
✓ Branch 0 taken 24 times.
✗ Branch 1 not taken.
 24 if ((unsigned)ctx->cursor_x >= ctx->width ||
161
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 24 times.
 24 (unsigned)ctx->cursor_y >= ctx->height)
162 ✗ return;
163
164 24 x = ctx->cursor_x - ctx->cursor_hot_x;
165 24 y = ctx->cursor_y - ctx->cursor_hot_y;
166
167
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 24 times.
 24 if (x + w > ctx->width)
168 ✗ w = ctx->width - x;
169
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 24 times.
 24 if (y + h > ctx->height)
170 ✗ h = ctx->height - y;
171
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 24 times.
 24 if (x < 0) {
172 ✗ w += x;
173 ✗ cursor += -x * 4;
174 } else {
175 24 dst += x * 3;
176 }
177
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 24 times.
 24 if (y < 0) {
178 ✗ h += y;
179 ✗ cursor += -y * ctx->cursor_stride;
180 } else {
181 24 dst += y * stride;
182 }
183
2/4
✓ Branch 0 taken 24 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 24 times.
 24 if (w < 0 || h < 0)
184 ✗ return;
185
186
2/2
✓ Branch 0 taken 775 times.
✓ Branch 1 taken 24 times.
 799 for (j = 0; j < h; j++) {
187
2/2
✓ Branch 0 taken 25151 times.
✓ Branch 1 taken 775 times.
 25926 for (i = 0; i < w; i++) {
188 25151 uint8_t alpha = cursor[i * 4];
189 25151 APPLY_ALPHA(dst[i * 3 + 0], cursor[i * 4 + 1], alpha);
190 25151 APPLY_ALPHA(dst[i * 3 + 1], cursor[i * 4 + 2], alpha);
191 25151 APPLY_ALPHA(dst[i * 3 + 2], cursor[i * 4 + 3], alpha);
192 }
193 775 dst += stride;
194 775 cursor += ctx->cursor_stride;
195 }
196 }
197
198 /* Load cursor data and store it in ABGR mode. */
199 3 static int tdsc_load_cursor(AVCodecContext *avctx)
200 {
201 3 TDSCContext *ctx = avctx->priv_data;
202 int i, j, k, ret, cursor_fmt, w, h;
203 uint8_t *dst;
204
205 3 ctx->cursor_hot_x = bytestream2_get_le16(&ctx->gbc);
206 3 ctx->cursor_hot_y = bytestream2_get_le16(&ctx->gbc);
207 3 w = bytestream2_get_le16(&ctx->gbc);
208 3 h = bytestream2_get_le16(&ctx->gbc);
209
210 3 cursor_fmt = bytestream2_get_le32(&ctx->gbc);
211
212
4/8
✓ Branch 0 taken 3 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 3 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 3 times.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
✓ Branch 7 taken 3 times.
 3 if (w < 1 || w > 256 || h < 1 || h > 256) {
213 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid cursor dimensions %dx%d.\n", w, h);
214 ✗ return AVERROR_INVALIDDATA;
215 }
216 3 ctx->cursor_w = w;
217 3 ctx->cursor_h = h;
218 3 ctx->cursor_stride = FFALIGN(w, 32) * 4;
219
1/2
✓ Branch 0 taken 3 times.
✗ Branch 1 not taken.
 3 if (ctx->cursor_hot_x > ctx->cursor_w ||
220
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 3 times.
 3 ctx->cursor_hot_y > ctx->cursor_h) {
221 ✗ av_log(avctx, AV_LOG_WARNING, "Invalid hotspot position %d.%d.\n",
222 ctx->cursor_hot_x, ctx->cursor_hot_y);
223 ✗ ctx->cursor_hot_x = FFMIN(ctx->cursor_hot_x, ctx->cursor_w - 1);
224 ✗ ctx->cursor_hot_y = FFMIN(ctx->cursor_hot_y, ctx->cursor_h - 1);
225 }
226
227 3 ret = av_reallocp(&ctx->cursor, ctx->cursor_stride * ctx->cursor_h);
228
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 3 times.
 3 if (ret < 0) {
229 ✗ av_log(avctx, AV_LOG_ERROR, "Cannot allocate cursor buffer.\n");
230 ✗ return ret;
231 }
232
233 3 dst = ctx->cursor;
234 /* here data is packed in BE */
235
2/3
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 1 times.
✗ Branch 2 not taken.
 3 switch (cursor_fmt) {
236 2 case CUR_FMT_MONO:
237
2/2
✓ Branch 0 taken 64 times.
✓ Branch 1 taken 2 times.
 66 for (j = 0; j < ctx->cursor_h; j++) {
238
2/2
✓ Branch 0 taken 64 times.
✓ Branch 1 taken 64 times.
 128 for (i = 0; i < ctx->cursor_w; i += 32) {
239 64 uint32_t bits = bytestream2_get_be32(&ctx->gbc);
240
2/2
✓ Branch 0 taken 2048 times.
✓ Branch 1 taken 64 times.
 2112 for (k = 0; k < 32; k++) {
241 2048 dst[0] = !!(bits & 0x80000000);
242 2048 dst += 4;
243 2048 bits <<= 1;
244 }
245 }
246 }
247
248 2 dst = ctx->cursor;
249
2/2
✓ Branch 0 taken 64 times.
✓ Branch 1 taken 2 times.
 66 for (j = 0; j < ctx->cursor_h; j++) {
250
2/2
✓ Branch 0 taken 64 times.
✓ Branch 1 taken 64 times.
 128 for (i = 0; i < ctx->cursor_w; i += 32) {
251 64 uint32_t bits = bytestream2_get_be32(&ctx->gbc);
252
2/2
✓ Branch 0 taken 2048 times.
✓ Branch 1 taken 64 times.
 2112 for (k = 0; k < 32; k++) {
253 2048 int mask_bit = !!(bits & 0x80000000);
254
3/3
✓ Branch 0 taken 104 times.
✓ Branch 1 taken 178 times.
✓ Branch 2 taken 1766 times.
 2048 switch (dst[0] * 2 + mask_bit) {
255 104 case 0:
256 104 dst[0] = 0xFF;
257 104 dst[1] = 0x00;
258 104 dst[2] = 0x00;
259 104 dst[3] = 0x00;
260 104 break;
261 178 case 1:
262 178 dst[0] = 0xFF;
263 178 dst[1] = 0xFF;
264 178 dst[2] = 0xFF;
265 178 dst[3] = 0xFF;
266 178 break;
267 1766 default:
268 1766 dst[0] = 0x00;
269 1766 dst[1] = 0x00;
270 1766 dst[2] = 0x00;
271 1766 dst[3] = 0x00;
272 }
273 2048 dst += 4;
274 2048 bits <<= 1;
275 }
276 }
277 }
278 2 break;
279 1 case CUR_FMT_BGRA:
280 case CUR_FMT_RGBA:
281 /* Skip monochrome version of the cursor */
282 1 bytestream2_skip(&ctx->gbc,
283 1 ctx->cursor_h * (FFALIGN(ctx->cursor_w, 32) >> 3));
284
1/2
✓ Branch 0 taken 1 times.
✗ Branch 1 not taken.
 1 if (cursor_fmt & 8) { // RGBA -> ABGR
285
2/2
✓ Branch 0 taken 39 times.
✓ Branch 1 taken 1 times.
 40 for (j = 0; j < ctx->cursor_h; j++) {
286
2/2
✓ Branch 0 taken 1599 times.
✓ Branch 1 taken 39 times.
 1638 for (i = 0; i < ctx->cursor_w; i++) {
287 1599 int val = bytestream2_get_be32(&ctx->gbc);
288 1599 *dst++ = val >> 24;
289 1599 *dst++ = val >> 16;
290 1599 *dst++ = val >> 8;
291 1599 *dst++ = val >> 0;
292 }
293 39 dst += ctx->cursor_stride - ctx->cursor_w * 4;
294 }
295 } else { // BGRA -> ABGR
296 ✗ for (j = 0; j < ctx->cursor_h; j++) {
297 ✗ for (i = 0; i < ctx->cursor_w; i++) {
298 ✗ int val = bytestream2_get_be32(&ctx->gbc);
299 ✗ *dst++ = val >> 0;
300 ✗ *dst++ = val >> 24;
301 ✗ *dst++ = val >> 16;
302 ✗ *dst++ = val >> 8;
303 }
304 ✗ dst += ctx->cursor_stride - ctx->cursor_w * 4;
305 }
306 }
307 1 break;
308 ✗ default:
309 ✗ avpriv_request_sample(avctx, "Cursor format %08x", cursor_fmt);
310 ✗ return AVERROR_PATCHWELCOME;
311 }
312
313 3 return 0;
314 }
315
316 /* Convert a single YUV pixel to RGB. */
317 1231360 static inline void tdsc_yuv2rgb(uint8_t *out, int Y, int U, int V)
318 {
319 1231360 out[0] = av_clip_uint8(Y + ( 91881 * V + 32768 >> 16));
320 1231360 out[1] = av_clip_uint8(Y + (-22554 * U - 46802 * V + 32768 >> 16));
321 1231360 out[2] = av_clip_uint8(Y + (116130 * U + 32768 >> 16));
322 1231360 }
323
324 /* Convert a YUV420 buffer to a RGB buffer. */
325 273 static av_always_inline void tdsc_blit(uint8_t *dst, int dst_stride,
326 const uint8_t *srcy, int srcy_stride,
327 const uint8_t *srcu, const uint8_t *srcv,
328 int srcuv_stride, int width, int height)
329 {
330 int col, line;
331
2/2
✓ Branch 0 taken 8032 times.
✓ Branch 1 taken 273 times.
 8305 for (line = 0; line < height; line++) {
332
2/2
✓ Branch 0 taken 1231360 times.
✓ Branch 1 taken 8032 times.
 1239392 for (col = 0; col < width; col++)
333 1231360 tdsc_yuv2rgb(dst + col * 3, srcy[col],
334 1231360 srcu[col >> 1] - 128, srcv[col >> 1] - 128);
335
336 8032 dst += dst_stride;
337 8032 srcy += srcy_stride;
338 8032 srcu += srcuv_stride * (line & 1);
339 8032 srcv += srcuv_stride * (line & 1);
340 }
341 273 }
342
343 /* Invoke the MJPEG decoder to decode the tile. */
344 273 static int tdsc_decode_jpeg_tile(AVCodecContext *avctx, int tile_size,
345 int x, int y, int w, int h)
346 {
347 273 TDSCContext *ctx = avctx->priv_data;
348 int ret;
349
350 /* Prepare a packet and send to the MJPEG decoder */
351 273 av_packet_unref(ctx->jpkt);
352 273 ctx->jpkt->data = ctx->tilebuffer;
353 273 ctx->jpkt->size = tile_size;
354
355 273 ret = avcodec_send_packet(ctx->jpeg_avctx, ctx->jpkt);
356
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 273 times.
 273 if (ret < 0) {
357 ✗ av_log(avctx, AV_LOG_ERROR, "Error submitting a packet for decoding\n");
358 ✗ return ret;
359 }
360
361 273 ret = avcodec_receive_frame(ctx->jpeg_avctx, ctx->jpgframe);
362
2/4
✓ Branch 0 taken 273 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 273 times.
✗ Branch 3 not taken.
 273 if (ret < 0 || ctx->jpgframe->format != AV_PIX_FMT_YUVJ420P ||
363
2/4
✓ Branch 0 taken 273 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 273 times.
 273 w > ctx->jpgframe->width || h > ctx->jpgframe->height) {
364 ✗ av_log(avctx, AV_LOG_ERROR,
365 "JPEG decoding error (%d).\n", ret);
366
367 /* Normally skip, error if explode */
368 ✗ if (avctx->err_recognition & AV_EF_EXPLODE)
369 ✗ return AVERROR_INVALIDDATA;
370 else
371 ✗ return 0;
372 }
373
374 /* Let's paint onto the buffer */
375 273 tdsc_blit(ctx->refframe->data[0] + x * 3 + ctx->refframe->linesize[0] * y,
376 273 ctx->refframe->linesize[0],
377 273 ctx->jpgframe->data[0], ctx->jpgframe->linesize[0],
378 273 ctx->jpgframe->data[1], ctx->jpgframe->data[2],
379 273 ctx->jpgframe->linesize[1], w, h);
380
381 273 av_frame_unref(ctx->jpgframe);
382
383 273 return 0;
384 }
385
386 /* Parse frame and either copy data or decode JPEG. */
387 36 static int tdsc_decode_tiles(AVCodecContext *avctx, int number_tiles)
388 {
389 36 TDSCContext *ctx = avctx->priv_data;
390 int i;
391
392 /* Iterate over the number of tiles */
393
2/2
✓ Branch 0 taken 562 times.
✓ Branch 1 taken 36 times.
 598 for (i = 0; i < number_tiles; i++) {
394 int tile_size;
395 int tile_mode;
396 int x, y, x2, y2, w, h;
397 int ret;
398
399
2/4
✓ Branch 1 taken 562 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 562 times.
✗ Branch 4 not taken.
 1124 if (bytestream2_get_bytes_left(&ctx->gbc) < 4 ||
400
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 562 times.
 1124 bytestream2_get_le32(&ctx->gbc) != MKTAG('T','D','S','B') ||
401 562 bytestream2_get_bytes_left(&ctx->gbc) < TDSB_HEADER_SIZE - 4) {
402 ✗ av_log(avctx, AV_LOG_ERROR, "TDSB tag is too small.\n");
403 ✗ return AVERROR_INVALIDDATA;
404 }
405
406 562 tile_size = bytestream2_get_le32(&ctx->gbc);
407
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 562 times.
 562 if (bytestream2_get_bytes_left(&ctx->gbc) < tile_size + 24LL)
408 ✗ return AVERROR_INVALIDDATA;
409
410 562 tile_mode = bytestream2_get_le32(&ctx->gbc);
411 562 bytestream2_skip(&ctx->gbc, 4); // unknown
412 562 x = bytestream2_get_le32(&ctx->gbc);
413 562 y = bytestream2_get_le32(&ctx->gbc);
414 562 x2 = bytestream2_get_le32(&ctx->gbc);
415 562 y2 = bytestream2_get_le32(&ctx->gbc);
416
417
4/8
✓ Branch 0 taken 562 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 562 times.
✗ Branch 3 not taken.
✓ Branch 4 taken 562 times.
✗ Branch 5 not taken.
✓ Branch 6 taken 562 times.
✗ Branch 7 not taken.
 562 if (x < 0 || y < 0 || x2 <= x || y2 <= y ||
418
2/4
✓ Branch 0 taken 562 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 562 times.
 562 x2 > ctx->width || y2 > ctx->height
419 ) {
420 ✗ av_log(avctx, AV_LOG_ERROR,
421 "Invalid tile position (%d.%d %d.%d outside %dx%d).\n",
422 x, y, x2, y2, ctx->width, ctx->height);
423 ✗ return AVERROR_INVALIDDATA;
424 }
425 562 w = x2 - x;
426 562 h = y2 - y;
427
428 562 ret = av_reallocp(&ctx->tilebuffer, tile_size);
429
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 562 times.
 562 if (!ctx->tilebuffer)
430 ✗ return ret;
431
432 562 bytestream2_get_buffer(&ctx->gbc, ctx->tilebuffer, tile_size);
433
434
2/2
✓ Branch 0 taken 273 times.
✓ Branch 1 taken 289 times.
 562 if (tile_mode == MKTAG('G','E','P','J')) {
435 /* Decode JPEG tile and copy it in the reference frame */
436 273 ret = tdsc_decode_jpeg_tile(avctx, tile_size, x, y, w, h);
437
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 273 times.
 273 if (ret < 0)
438 ✗ return ret;
439
1/2
✓ Branch 0 taken 289 times.
✗ Branch 1 not taken.
 289 } else if (tile_mode == MKTAG(' ','W','A','R')) {
440
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 289 times.
 289 if (3LL * w * h > tile_size)
441 ✗ return AVERROR_INVALIDDATA;
442
443 /* Just copy the buffer to output */
444 289 av_image_copy_plane(ctx->refframe->data[0] + x * 3 +
445 289 ctx->refframe->linesize[0] * y,
446 289 ctx->refframe->linesize[0], ctx->tilebuffer,
447 w * 3, w * 3, h);
448 } else {
449 ✗ av_log(avctx, AV_LOG_ERROR, "Unknown tile type %08x.\n", tile_mode);
450 ✗ return AVERROR_INVALIDDATA;
451 }
452 562 av_log(avctx, AV_LOG_DEBUG, "Tile %d, %dx%d (%d.%d)\n", i, w, h, x, y);
453 }
454
455 36 return 0;
456 }
457
458 36 static int tdsc_parse_tdsf(AVCodecContext *avctx, int number_tiles)
459 {
460 36 TDSCContext *ctx = avctx->priv_data;
461 36 int ret, w, h, init_refframe = !ctx->refframe->data[0];
462
463 /* BITMAPINFOHEADER
464 * http://msdn.microsoft.com/en-us/library/windows/desktop/dd183376.aspx */
465
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 36 times.
 36 if (bytestream2_get_le32(&ctx->gbc) != BITMAPINFOHEADER_SIZE)
466 ✗ return AVERROR_INVALIDDATA;
467
468 /* Store size, but wait for context reinit before updating avctx */
469 36 w = bytestream2_get_le32(&ctx->gbc);
470 36 h = -bytestream2_get_le32(&ctx->gbc);
471
472
2/4
✓ Branch 1 taken 36 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
✓ Branch 4 taken 36 times.
 72 if (bytestream2_get_le16(&ctx->gbc) != 1 || // 1 plane
473 36 bytestream2_get_le16(&ctx->gbc) != 24) // BGR24
474 ✗ return AVERROR_INVALIDDATA;
475
476 36 bytestream2_skip(&ctx->gbc, 24); // unused fields
477
478 /* Update sizes */
479
2/4
✓ Branch 0 taken 36 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 36 times.
 36 if (avctx->width != w || avctx->height != h) {
480 ✗ av_log(avctx, AV_LOG_DEBUG, "Size update %dx%d -> %d%d.\n",
481 avctx->width, avctx->height, ctx->width, ctx->height);
482 ✗ ret = ff_set_dimensions(avctx, w, h);
483 ✗ if (ret < 0)
484 ✗ return ret;
485 ✗ init_refframe = 1;
486 }
487 36 ctx->width = w;
488 36 ctx->height = h;
489
490 /* Allocate the reference frame if not already done or on size change */
491
2/2
✓ Branch 0 taken 1 times.
✓ Branch 1 taken 35 times.
 36 if (init_refframe) {
492 1 av_frame_unref(ctx->refframe);
493 1 ctx->refframe->format = avctx->pix_fmt;
494 1 ctx->refframe->width = w;
495 1 ctx->refframe->height = h;
496 1 ret = av_frame_get_buffer(ctx->refframe, 0);
497
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1 times.
 1 if (ret < 0)
498 ✗ return ret;
499 }
500
501 /* Decode all tiles in a frame */
502 36 return tdsc_decode_tiles(avctx, number_tiles);
503 }
504
505 34 static int tdsc_parse_dtsm(AVCodecContext *avctx)
506 {
507 34 TDSCContext *ctx = avctx->priv_data;
508 int ret;
509 34 int action = bytestream2_get_le32(&ctx->gbc);
510
511 34 bytestream2_skip(&ctx->gbc, 4); // some kind of ID or version maybe?
512
513
3/4
✓ Branch 0 taken 3 times.
✓ Branch 1 taken 31 times.
✓ Branch 2 taken 3 times.
✗ Branch 3 not taken.
 34 if (action == 2 || action == 3) {
514 /* Load cursor coordinates */
515 34 ctx->cursor_x = bytestream2_get_le32(&ctx->gbc);
516 34 ctx->cursor_y = bytestream2_get_le32(&ctx->gbc);
517
518 /* Load a full cursor sprite */
519
2/2
✓ Branch 0 taken 3 times.
✓ Branch 1 taken 31 times.
 34 if (action == 3) {
520 3 ret = tdsc_load_cursor(avctx);
521 /* Do not consider cursor errors fatal unless in explode mode */
522
1/4
✗ Branch 0 not taken.
✓ Branch 1 taken 3 times.
✗ Branch 2 not taken.
✗ Branch 3 not taken.
 3 if (ret < 0 && (avctx->err_recognition & AV_EF_EXPLODE))
523 ✗ return ret;
524 }
525 } else {
526 ✗ avpriv_request_sample(avctx, "Cursor action %d", action);
527 }
528
529 34 return 0;
530 }
531
532 42 static int tdsc_decode_frame(AVCodecContext *avctx, AVFrame *frame,
533 int *got_frame, AVPacket *avpkt)
534 {
535 42 TDSCContext *ctx = avctx->priv_data;
536 42 int ret, tag_header, keyframe = 0;
537 uLongf dlen;
538
539 /* Resize deflate buffer on resolution change */
540
3/4
✓ Branch 0 taken 41 times.
✓ Branch 1 taken 1 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 41 times.
 42 if (ctx->width != avctx->width || ctx->height != avctx->height) {
541 1 int deflatelen = avctx->width * avctx->height * (3 + 1);
542
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1 times.
 1 if (deflatelen != ctx->deflatelen) {
543 ✗ ctx->deflatelen =deflatelen;
544 ✗ ret = av_reallocp(&ctx->deflatebuffer, ctx->deflatelen);
545 ✗ if (ret < 0) {
546 ✗ ctx->deflatelen = 0;
547 ✗ return ret;
548 }
549 }
550 }
551 42 dlen = ctx->deflatelen;
552
553 /* Frames are deflated, need to inflate them first */
554 42 ret = uncompress(ctx->deflatebuffer, &dlen, avpkt->data, avpkt->size);
555
2/2
✓ Branch 0 taken 1 times.
✓ Branch 1 taken 41 times.
 42 if (ret != Z_OK) {
556 1 av_log(avctx, AV_LOG_ERROR, "Deflate error %d.\n", ret);
557 1 return AVERROR_UNKNOWN;
558 }
559
560 41 bytestream2_init(&ctx->gbc, ctx->deflatebuffer, dlen);
561
562 /* Check for tag and for size info */
563
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 41 times.
 41 if (bytestream2_get_bytes_left(&ctx->gbc) < 4 + 4) {
564 ✗ av_log(avctx, AV_LOG_ERROR, "Frame is too small.\n");
565 ✗ return AVERROR_INVALIDDATA;
566 }
567
568 /* Read tag */
569 41 tag_header = bytestream2_get_le32(&ctx->gbc);
570
571
2/2
✓ Branch 0 taken 36 times.
✓ Branch 1 taken 5 times.
 41 if (tag_header == MKTAG('T','D','S','F')) {
572 int number_tiles;
573
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 36 times.
 36 if (bytestream2_get_bytes_left(&ctx->gbc) < TDSF_HEADER_SIZE) {
574 ✗ av_log(avctx, AV_LOG_ERROR, "TDSF tag is too small.\n");
575 ✗ return AVERROR_INVALIDDATA;
576 }
577 /* First 4 bytes here are the number of GEPJ/WAR tiles in this frame */
578 36 number_tiles = bytestream2_get_le32(&ctx->gbc);
579
580 36 bytestream2_skip(&ctx->gbc, 4); // internal timestamp maybe?
581 36 keyframe = bytestream2_get_le32(&ctx->gbc) == 0x30;
582
583 36 ret = tdsc_parse_tdsf(avctx, number_tiles);
584
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 36 times.
 36 if (ret < 0)
585 ✗ return ret;
586
587 /* Check if there is anything else we are able to parse */
588
2/2
✓ Branch 1 taken 31 times.
✓ Branch 2 taken 5 times.
 36 if (bytestream2_get_bytes_left(&ctx->gbc) >= 4 + 4)
589 31 tag_header = bytestream2_get_le32(&ctx->gbc);
590 }
591
592 /* This tag can be after a TDSF block or on its own frame */
593
2/2
✓ Branch 0 taken 34 times.
✓ Branch 1 taken 7 times.
 41 if (tag_header == MKTAG('D','T','S','M')) {
594 /* First 4 bytes here are the total size in bytes for this frame */
595 34 int tag_size = bytestream2_get_le32(&ctx->gbc);
596
597
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 34 times.
 34 if (bytestream2_get_bytes_left(&ctx->gbc) < tag_size) {
598 ✗ av_log(avctx, AV_LOG_ERROR, "DTSM tag is too small.\n");
599 ✗ return AVERROR_INVALIDDATA;
600 }
601
602 34 ret = tdsc_parse_dtsm(avctx);
603
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 34 times.
 34 if (ret < 0)
604 ✗ return ret;
605 }
606
607 /* Get the output frame and copy the reference frame */
608 41 ret = ff_get_buffer(avctx, frame, 0);
609
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 41 times.
 41 if (ret < 0)
610 ✗ return ret;
611
612 41 ret = av_frame_copy(frame, ctx->refframe);
613
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 41 times.
 41 if (ret < 0)
614 ✗ return ret;
615
616 /* Paint the cursor on the output frame */
617 41 tdsc_paint_cursor(avctx, frame->data[0], frame->linesize[0]);
618
619 /* Frame is ready to be output */
620
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 39 times.
 41 if (keyframe) {
621 2 frame->pict_type = AV_PICTURE_TYPE_I;
622 2 frame->flags |= AV_FRAME_FLAG_KEY;
623 } else {
624 39 frame->pict_type = AV_PICTURE_TYPE_P;
625 }
626 41 *got_frame = 1;
627
628 41 return avpkt->size;
629 }
630
631 const FFCodec ff_tdsc_decoder = {
632 .p.name = "tdsc",
633 CODEC_LONG_NAME("TDSC"),
634 .p.type = AVMEDIA_TYPE_VIDEO,
635 .p.id = AV_CODEC_ID_TDSC,
636 .init = tdsc_init,
637 FF_CODEC_DECODE_CB(tdsc_decode_frame),
638 .close = tdsc_close,
639 .priv_data_size = sizeof(TDSCContext),
640 .p.capabilities = AV_CODEC_CAP_DR1,
641 .caps_internal = FF_CODEC_CAP_INIT_CLEANUP,
642 };
643