FFmpeg coverage

Directory: ../../../ffmpeg/
File: src/libavcodec/webp.c
Date: 2026-05-17 16:27:21
Exec Total Coverage
Lines: 612 808 75.7%
Functions: 38 41 92.7%
Branches: 257 390 65.9%
Line Branch Exec Source
1 /*
2 * WebP (.webp) image decoder
3 * Copyright (c) 2013 Aneesh Dogra <aneesh@sugarlabs.org>
4 * Copyright (c) 2013 Justin Ruggles <justin.ruggles@gmail.com>
5 *
6 * This file is part of FFmpeg.
7 *
8 * FFmpeg is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU Lesser General Public
10 * License as published by the Free Software Foundation; either
11 * version 2.1 of the License, or (at your option) any later version.
12 *
13 * FFmpeg is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
16 * Lesser General Public License for more details.
17 *
18 * You should have received a copy of the GNU Lesser General Public
19 * License along with FFmpeg; if not, write to the Free Software
20 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
21 */
22
23 /**
24 * @file
25 * WebP image decoder
26 *
27 * @author Aneesh Dogra <aneesh@sugarlabs.org>
28 * Container and Lossy decoding
29 *
30 * @author Justin Ruggles <justin.ruggles@gmail.com>
31 * Lossless decoder
32 * Compressed alpha for lossy
33 *
34 * @author James Almer <jamrial@gmail.com>
35 * Exif metadata
36 * ICC profile
37 *
38 * @author Thilo Borgmann <thilo.borgmann _at_ mail.de>
39 * XMP metadata
40 *
41 * Unimplemented:
42 * - Animation
43 */
44
45 #include "libavutil/imgutils.h"
46 #include "libavutil/mem.h"
47
48 #define BITSTREAM_READER_LE
49 #include "avcodec.h"
50 #include "bytestream.h"
51 #include "codec_internal.h"
52 #include "decode.h"
53 #include "exif_internal.h"
54 #include "get_bits.h"
55 #include "thread.h"
56 #include "tiff_common.h"
57 #include "vp8.h"
58
59 #define VP8X_FLAG_ANIMATION 0x02
60 #define VP8X_FLAG_XMP_METADATA 0x04
61 #define VP8X_FLAG_EXIF_METADATA 0x08
62 #define VP8X_FLAG_ALPHA 0x10
63 #define VP8X_FLAG_ICC 0x20
64
65 #define MAX_PALETTE_SIZE 256
66 #define MAX_CACHE_BITS 11
67 #define NUM_CODE_LENGTH_CODES 19
68 #define HUFFMAN_CODES_PER_META_CODE 5
69 #define NUM_LITERAL_CODES 256
70 #define NUM_LENGTH_CODES 24
71 #define NUM_DISTANCE_CODES 40
72 #define NUM_SHORT_DISTANCES 120
73 #define MAX_HUFFMAN_CODE_LENGTH 15
74
75 static const uint16_t alphabet_sizes[HUFFMAN_CODES_PER_META_CODE] = {
76 NUM_LITERAL_CODES + NUM_LENGTH_CODES,
77 NUM_LITERAL_CODES, NUM_LITERAL_CODES, NUM_LITERAL_CODES,
78 NUM_DISTANCE_CODES
79 };
80
81 static const uint8_t code_length_code_order[NUM_CODE_LENGTH_CODES] = {
82 17, 18, 0, 1, 2, 3, 4, 5, 16, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15
83 };
84
85 static const int8_t lz77_distance_offsets[NUM_SHORT_DISTANCES][2] = {
86 { 0, 1 }, { 1, 0 }, { 1, 1 }, { -1, 1 }, { 0, 2 }, { 2, 0 }, { 1, 2 }, { -1, 2 },
87 { 2, 1 }, { -2, 1 }, { 2, 2 }, { -2, 2 }, { 0, 3 }, { 3, 0 }, { 1, 3 }, { -1, 3 },
88 { 3, 1 }, { -3, 1 }, { 2, 3 }, { -2, 3 }, { 3, 2 }, { -3, 2 }, { 0, 4 }, { 4, 0 },
89 { 1, 4 }, { -1, 4 }, { 4, 1 }, { -4, 1 }, { 3, 3 }, { -3, 3 }, { 2, 4 }, { -2, 4 },
90 { 4, 2 }, { -4, 2 }, { 0, 5 }, { 3, 4 }, { -3, 4 }, { 4, 3 }, { -4, 3 }, { 5, 0 },
91 { 1, 5 }, { -1, 5 }, { 5, 1 }, { -5, 1 }, { 2, 5 }, { -2, 5 }, { 5, 2 }, { -5, 2 },
92 { 4, 4 }, { -4, 4 }, { 3, 5 }, { -3, 5 }, { 5, 3 }, { -5, 3 }, { 0, 6 }, { 6, 0 },
93 { 1, 6 }, { -1, 6 }, { 6, 1 }, { -6, 1 }, { 2, 6 }, { -2, 6 }, { 6, 2 }, { -6, 2 },
94 { 4, 5 }, { -4, 5 }, { 5, 4 }, { -5, 4 }, { 3, 6 }, { -3, 6 }, { 6, 3 }, { -6, 3 },
95 { 0, 7 }, { 7, 0 }, { 1, 7 }, { -1, 7 }, { 5, 5 }, { -5, 5 }, { 7, 1 }, { -7, 1 },
96 { 4, 6 }, { -4, 6 }, { 6, 4 }, { -6, 4 }, { 2, 7 }, { -2, 7 }, { 7, 2 }, { -7, 2 },
97 { 3, 7 }, { -3, 7 }, { 7, 3 }, { -7, 3 }, { 5, 6 }, { -5, 6 }, { 6, 5 }, { -6, 5 },
98 { 8, 0 }, { 4, 7 }, { -4, 7 }, { 7, 4 }, { -7, 4 }, { 8, 1 }, { 8, 2 }, { 6, 6 },
99 { -6, 6 }, { 8, 3 }, { 5, 7 }, { -5, 7 }, { 7, 5 }, { -7, 5 }, { 8, 4 }, { 6, 7 },
100 { -6, 7 }, { 7, 6 }, { -7, 6 }, { 8, 5 }, { 7, 7 }, { -7, 7 }, { 8, 6 }, { 8, 7 }
101 };
102
103 enum AlphaCompression {
104 ALPHA_COMPRESSION_NONE,
105 ALPHA_COMPRESSION_VP8L,
106 };
107
108 enum AlphaFilter {
109 ALPHA_FILTER_NONE,
110 ALPHA_FILTER_HORIZONTAL,
111 ALPHA_FILTER_VERTICAL,
112 ALPHA_FILTER_GRADIENT,
113 };
114
115 enum TransformType {
116 PREDICTOR_TRANSFORM = 0,
117 COLOR_TRANSFORM = 1,
118 SUBTRACT_GREEN = 2,
119 COLOR_INDEXING_TRANSFORM = 3,
120 };
121
122 enum PredictionMode {
123 PRED_MODE_BLACK,
124 PRED_MODE_L,
125 PRED_MODE_T,
126 PRED_MODE_TR,
127 PRED_MODE_TL,
128 PRED_MODE_AVG_T_AVG_L_TR,
129 PRED_MODE_AVG_L_TL,
130 PRED_MODE_AVG_L_T,
131 PRED_MODE_AVG_TL_T,
132 PRED_MODE_AVG_T_TR,
133 PRED_MODE_AVG_AVG_L_TL_AVG_T_TR,
134 PRED_MODE_SELECT,
135 PRED_MODE_ADD_SUBTRACT_FULL,
136 PRED_MODE_ADD_SUBTRACT_HALF,
137 };
138
139 enum HuffmanIndex {
140 HUFF_IDX_GREEN = 0,
141 HUFF_IDX_RED = 1,
142 HUFF_IDX_BLUE = 2,
143 HUFF_IDX_ALPHA = 3,
144 HUFF_IDX_DIST = 4
145 };
146
147 /* The structure of WebP lossless is an optional series of transformation data,
148 * followed by the primary image. The primary image also optionally contains
149 * an entropy group mapping if there are multiple entropy groups. There is a
150 * basic image type called an "entropy coded image" that is used for all of
151 * these. The type of each entropy coded image is referred to by the
152 * specification as its role. */
153 enum ImageRole {
154 /* Primary Image: Stores the actual pixels of the image. */
155 IMAGE_ROLE_ARGB,
156
157 /* Entropy Image: Defines which Huffman group to use for different areas of
158 * the primary image. */
159 IMAGE_ROLE_ENTROPY,
160
161 /* Predictors: Defines which predictor type to use for different areas of
162 * the primary image. */
163 IMAGE_ROLE_PREDICTOR,
164
165 /* Color Transform Data: Defines the color transformation for different
166 * areas of the primary image. */
167 IMAGE_ROLE_COLOR_TRANSFORM,
168
169 /* Color Index: Stored as an image of height == 1. */
170 IMAGE_ROLE_COLOR_INDEXING,
171
172 IMAGE_ROLE_NB,
173 };
174
175 typedef struct HuffReader {
176 VLC vlc; /* Huffman decoder context */
177 int simple; /* whether to use simple mode */
178 int nb_symbols; /* number of coded symbols */
179 uint16_t simple_symbols[2]; /* symbols for simple mode */
180 } HuffReader;
181
182 typedef struct ImageContext {
183 enum ImageRole role; /* role of this image */
184 AVFrame *frame; /* AVFrame for data */
185 int color_cache_bits; /* color cache size, log2 */
186 uint32_t *color_cache; /* color cache data */
187 int nb_huffman_groups; /* number of huffman groups */
188 HuffReader *huffman_groups; /* reader for each huffman group */
189 /* relative size compared to primary image, log2.
190 * for IMAGE_ROLE_COLOR_INDEXING with <= 16 colors, this is log2 of the
191 * number of pixels per byte in the primary image (pixel packing) */
192 int size_reduction;
193 int is_alpha_primary;
194 } ImageContext;
195
196 typedef struct WebPContext {
197 VP8Context v; /* VP8 Context used for lossy decoding */
198 GetBitContext gb; /* bitstream reader for main image chunk */
199 AVFrame *alpha_frame; /* AVFrame for alpha data decompressed from VP8L */
200 AVPacket *pkt; /* AVPacket to be passed to the underlying VP8 decoder */
201 AVCodecContext *avctx; /* parent AVCodecContext */
202 int initialized; /* set once the VP8 context is initialized */
203 int has_alpha; /* has a separate alpha chunk */
204 enum AlphaCompression alpha_compression; /* compression type for alpha chunk */
205 enum AlphaFilter alpha_filter; /* filtering method for alpha chunk */
206 const uint8_t *alpha_data; /* alpha chunk data */
207 int alpha_data_size; /* alpha chunk data size */
208 int has_exif; /* set after an EXIF chunk has been processed */
209 int has_iccp; /* set after an ICCP chunk has been processed */
210 int has_xmp; /* set after an XMP chunk has been processed */
211 int width; /* image width */
212 int height; /* image height */
213
214 int nb_transforms; /* number of transforms */
215 enum TransformType transforms[4]; /* transformations used in the image, in order */
216 /* reduced width when using a color indexing transform with <= 16 colors (pixel packing)
217 * before pixels are unpacked, or same as width otherwise. */
218 int reduced_width;
219 int nb_huffman_groups; /* number of huffman groups in the primary image */
220 ImageContext image[IMAGE_ROLE_NB]; /* image context for each role */
221 } WebPContext;
222
223 #define GET_PIXEL(frame, x, y) \
224 ((frame)->data[0] + (y) * frame->linesize[0] + 4 * (x))
225
226 #define GET_PIXEL_COMP(frame, x, y, c) \
227 (*((frame)->data[0] + (y) * frame->linesize[0] + 4 * (x) + c))
228
229 60 static void image_ctx_free(ImageContext *img)
230 {
231 int i, j;
232
233 60 av_free(img->color_cache);
234
3/4
✓ Branch 0 taken 22 times.
✓ Branch 1 taken 38 times.
✓ Branch 2 taken 22 times.
✗ Branch 3 not taken.
 60 if (img->role != IMAGE_ROLE_ARGB && !img->is_alpha_primary)
235 22 av_frame_free(&img->frame);
236
2/2
✓ Branch 0 taken 34 times.
✓ Branch 1 taken 26 times.
 60 if (img->huffman_groups) {
237
2/2
✓ Branch 0 taken 42 times.
✓ Branch 1 taken 34 times.
 76 for (i = 0; i < img->nb_huffman_groups; i++) {
238
2/2
✓ Branch 0 taken 210 times.
✓ Branch 1 taken 42 times.
 252 for (j = 0; j < HUFFMAN_CODES_PER_META_CODE; j++)
239 210 ff_vlc_free(&img->huffman_groups[i * HUFFMAN_CODES_PER_META_CODE + j].vlc);
240 }
241 34 av_free(img->huffman_groups);
242 }
243 60 memset(img, 0, sizeof(*img));
244 60 }
245
246 280428 static int huff_reader_get_symbol(HuffReader *r, GetBitContext *gb)
247 {
248
2/2
✓ Branch 0 taken 73834 times.
✓ Branch 1 taken 206594 times.
 280428 if (r->simple) {
249
2/2
✓ Branch 0 taken 73514 times.
✓ Branch 1 taken 320 times.
 73834 if (r->nb_symbols == 1)
250 73514 return r->simple_symbols[0];
251 else
252 320 return r->simple_symbols[get_bits1(gb)];
253 } else
254 206594 return get_vlc2(gb, r->vlc.table, 8, 2);
255 }
256
257 160 static int huff_reader_build_canonical(HuffReader *r, const uint8_t *code_lengths,
258 uint16_t len_counts[MAX_HUFFMAN_CODE_LENGTH + 1],
259 uint8_t lens[], uint16_t syms[],
260 int alphabet_size, void *logctx)
261 {
262 160 unsigned nb_codes = 0;
263 int ret;
264
265 // Count the number of symbols of each length and transform len_counts
266 // into an array of offsets.
267
2/2
✓ Branch 0 taken 2400 times.
✓ Branch 1 taken 160 times.
 2560 for (int len = 1; len <= MAX_HUFFMAN_CODE_LENGTH; ++len) {
268 2400 unsigned cnt = len_counts[len];
269 2400 len_counts[len] = nb_codes;
270 2400 nb_codes += cnt;
271 }
272
273
2/2
✓ Branch 0 taken 22050 times.
✓ Branch 1 taken 160 times.
 22210 for (int sym = 0; sym < alphabet_size; ++sym) {
274
2/2
✓ Branch 0 taken 7476 times.
✓ Branch 1 taken 14574 times.
 22050 if (code_lengths[sym]) {
275 7476 unsigned idx = len_counts[code_lengths[sym]]++;
276 7476 syms[idx] = sym;
277 7476 lens[idx] = code_lengths[sym];
278 }
279 }
280
281
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 160 times.
 160 if (nb_codes == 0) {
282 // No symbols
283 ✗ return AVERROR_INVALIDDATA;
284 }
285
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 160 times.
 160 if (nb_codes == 1) {
286 // Special-case 1 symbol since the VLC reader cannot handle it
287 ✗ r->nb_symbols = 1;
288 ✗ r->simple = 1;
289 ✗ r->simple_symbols[0] = syms[0];
290 ✗ return 0;
291 }
292
293 160 ret = ff_vlc_init_from_lengths(&r->vlc, 8, nb_codes, lens, 1,
294 syms, 2, 2, 0, VLC_INIT_OUTPUT_LE, logctx);
295
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 160 times.
 160 if (ret < 0)
296 ✗ return ret;
297 160 r->simple = 0;
298
299 160 return 0;
300 }
301
302 130 static void read_huffman_code_simple(WebPContext *s, HuffReader *hc)
303 {
304 130 hc->nb_symbols = get_bits1(&s->gb) + 1;
305
306
2/2
✓ Branch 1 taken 18 times.
✓ Branch 2 taken 112 times.
 130 if (get_bits1(&s->gb))
307 18 hc->simple_symbols[0] = get_bits(&s->gb, 8);
308 else
309 112 hc->simple_symbols[0] = get_bits1(&s->gb);
310
311
2/2
✓ Branch 0 taken 14 times.
✓ Branch 1 taken 116 times.
 130 if (hc->nb_symbols == 2)
312 14 hc->simple_symbols[1] = get_bits(&s->gb, 8);
313
314 130 hc->simple = 1;
315 130 }
316
317 80 static int read_huffman_code_normal(WebPContext *s, HuffReader *hc,
318 int alphabet_size)
319 {
320 80 HuffReader code_len_hc = { { 0 }, 0, 0, { 0 } };
321 uint8_t *code_lengths;
322 80 uint8_t code_length_code_lengths[NUM_CODE_LENGTH_CODES] = { 0 };
323 uint8_t reordered_code_length_code_lengths[NUM_CODE_LENGTH_CODES];
324 uint16_t reordered_code_length_syms[NUM_CODE_LENGTH_CODES];
325 80 uint16_t len_counts[MAX_HUFFMAN_CODE_LENGTH + 1] = { 0 };
326 int symbol, max_symbol, prev_code_len, ret;
327 80 int num_codes = 4 + get_bits(&s->gb, 4);
328
329 av_assert1(num_codes <= NUM_CODE_LENGTH_CODES);
330
331
2/2
✓ Branch 0 taken 1100 times.
✓ Branch 1 taken 80 times.
 1180 for (int i = 0; i < num_codes; i++) {
332 1100 unsigned len = get_bits(&s->gb, 3);
333 1100 code_length_code_lengths[code_length_code_order[i]] = len;
334 1100 len_counts[len]++;
335 }
336
337
2/2
✓ Branch 1 taken 8 times.
✓ Branch 2 taken 72 times.
 80 if (get_bits1(&s->gb)) {
338 8 int bits = 2 + 2 * get_bits(&s->gb, 3);
339 8 max_symbol = 2 + get_bits(&s->gb, bits);
340
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 8 times.
 8 if (max_symbol > alphabet_size) {
341 ✗ av_log(s->avctx, AV_LOG_ERROR, "max symbol %d > alphabet size %d\n",
342 max_symbol, alphabet_size);
343 ✗ return AVERROR_INVALIDDATA;
344 }
345 } else {
346 72 max_symbol = alphabet_size;
347 }
348
349 80 ret = huff_reader_build_canonical(&code_len_hc, code_length_code_lengths, len_counts,
350 reordered_code_length_code_lengths,
351 reordered_code_length_syms,
352 80 NUM_CODE_LENGTH_CODES, s->avctx);
353
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 80 times.
 80 if (ret < 0)
354 ✗ return ret;
355
356 80 code_lengths = av_malloc_array(alphabet_size, 2 * sizeof(uint8_t) + sizeof(uint16_t));
357
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 80 times.
 80 if (!code_lengths) {
358 ✗ ret = AVERROR(ENOMEM);
359 ✗ goto finish;
360 }
361
362 80 prev_code_len = 8;
363 80 symbol = 0;
364 80 memset(len_counts, 0, sizeof(len_counts));
365
2/2
✓ Branch 0 taken 3264 times.
✓ Branch 1 taken 72 times.
 3336 while (symbol < alphabet_size) {
366 int code_len;
367
368
2/2
✓ Branch 0 taken 8 times.
✓ Branch 1 taken 3256 times.
 3264 if (!max_symbol--)
369 8 break;
370 3256 code_len = huff_reader_get_symbol(&code_len_hc, &s->gb);
371
2/2
✓ Branch 0 taken 1938 times.
✓ Branch 1 taken 1318 times.
 3256 if (code_len < 16U) {
372 /* Code length code [0..15] indicates literal code lengths. */
373 1938 code_lengths[symbol++] = code_len;
374 1938 len_counts[code_len]++;
375
2/2
✓ Branch 0 taken 1818 times.
✓ Branch 1 taken 120 times.
 1938 if (code_len)
376 1818 prev_code_len = code_len;
377 } else {
378 1318 int repeat = 0, length = 0;
379
3/4
✗ Branch 0 not taken.
✓ Branch 1 taken 888 times.
✓ Branch 2 taken 160 times.
✓ Branch 3 taken 270 times.
 1318 switch (code_len) {
380 ✗ default:
381 ✗ ret = AVERROR_INVALIDDATA;
382 ✗ goto finish;
383 888 case 16:
384 /* Code 16 repeats the previous non-zero value [3..6] times,
385 * i.e., 3 + ReadBits(2) times. If code 16 is used before a
386 * non-zero value has been emitted, a value of 8 is repeated. */
387 888 repeat = 3 + get_bits(&s->gb, 2);
388 888 length = prev_code_len;
389 888 len_counts[length] += repeat;
390 888 break;
391 160 case 17:
392 /* Code 17 emits a streak of zeros [3..10], i.e.,
393 * 3 + ReadBits(3) times. */
394 160 repeat = 3 + get_bits(&s->gb, 3);
395 160 break;
396 270 case 18:
397 /* Code 18 emits a streak of zeros of length [11..138], i.e.,
398 * 11 + ReadBits(7) times. */
399 270 repeat = 11 + get_bits(&s->gb, 7);
400 270 break;
401 }
402
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 1318 times.
 1318 if (symbol + repeat > alphabet_size) {
403 ✗ av_log(s->avctx, AV_LOG_ERROR,
404 "invalid symbol %d + repeat %d > alphabet size %d\n",
405 symbol, repeat, alphabet_size);
406 ✗ ret = AVERROR_INVALIDDATA;
407 ✗ goto finish;
408 }
409
2/2
✓ Branch 0 taken 18592 times.
✓ Branch 1 taken 1318 times.
 19910 while (repeat-- > 0)
410 18592 code_lengths[symbol++] = length;
411 }
412 }
413
414 80 ret = huff_reader_build_canonical(hc, code_lengths, len_counts,
415 code_lengths + symbol,
416 80 (uint16_t*)(code_lengths + 2 * symbol),
417 80 symbol, s->avctx);
418
419 80 finish:
420 80 ff_vlc_free(&code_len_hc.vlc);
421 80 av_free(code_lengths);
422 80 return ret;
423 }
424
425 static int decode_entropy_coded_image(WebPContext *s, enum ImageRole role,
426 int w, int h);
427
428 #define PARSE_BLOCK_SIZE(w, h) do { \
429 block_bits = get_bits(&s->gb, 3) + 2; \
430 blocks_w = FFALIGN((w), 1 << block_bits) >> block_bits; \
431 blocks_h = FFALIGN((h), 1 << block_bits) >> block_bits; \
432 } while (0)
433
434 4 static int decode_entropy_image(WebPContext *s)
435 {
436 ImageContext *img;
437 int ret, block_bits, blocks_w, blocks_h, x, y, max;
438
439 4 PARSE_BLOCK_SIZE(s->reduced_width, s->height);
440
441 4 ret = decode_entropy_coded_image(s, IMAGE_ROLE_ENTROPY, blocks_w, blocks_h);
442
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (ret < 0)
443 ✗ return ret;
444
445 4 img = &s->image[IMAGE_ROLE_ENTROPY];
446 4 img->size_reduction = block_bits;
447
448 /* the number of huffman groups is determined by the maximum group number
449 * coded in the entropy image */
450 4 max = 0;
451
2/2
✓ Branch 0 taken 64 times.
✓ Branch 1 taken 4 times.
 68 for (y = 0; y < img->frame->height; y++) {
452
2/2
✓ Branch 0 taken 1024 times.
✓ Branch 1 taken 64 times.
 1088 for (x = 0; x < img->frame->width; x++) {
453 1024 int p0 = GET_PIXEL_COMP(img->frame, x, y, 1);
454 1024 int p1 = GET_PIXEL_COMP(img->frame, x, y, 2);
455 1024 int p = p0 << 8 | p1;
456 1024 max = FFMAX(max, p);
457 }
458 }
459 4 s->nb_huffman_groups = max + 1;
460
461 4 return 0;
462 }
463
464 6 static int parse_transform_predictor(WebPContext *s)
465 {
466 int block_bits, blocks_w, blocks_h, ret;
467
468 6 PARSE_BLOCK_SIZE(s->reduced_width, s->height);
469
470 6 ret = decode_entropy_coded_image(s, IMAGE_ROLE_PREDICTOR, blocks_w,
471 blocks_h);
472
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (ret < 0)
473 ✗ return ret;
474
475 6 s->image[IMAGE_ROLE_PREDICTOR].size_reduction = block_bits;
476
477 6 return 0;
478 }
479
480 4 static int parse_transform_color(WebPContext *s)
481 {
482 int block_bits, blocks_w, blocks_h, ret;
483
484 4 PARSE_BLOCK_SIZE(s->reduced_width, s->height);
485
486 4 ret = decode_entropy_coded_image(s, IMAGE_ROLE_COLOR_TRANSFORM, blocks_w,
487 blocks_h);
488
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (ret < 0)
489 ✗ return ret;
490
491 4 s->image[IMAGE_ROLE_COLOR_TRANSFORM].size_reduction = block_bits;
492
493 4 return 0;
494 }
495
496 8 static int parse_transform_color_indexing(WebPContext *s)
497 {
498 ImageContext *img;
499 int width_bits, index_size, ret, x;
500 uint8_t *ct;
501
502 8 index_size = get_bits(&s->gb, 8) + 1;
503
504
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 6 times.
 8 if (index_size <= 2)
505 2 width_bits = 3;
506
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 4 times.
 6 else if (index_size <= 4)
507 2 width_bits = 2;
508
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 else if (index_size <= 16)
509 ✗ width_bits = 1;
510 else
511 4 width_bits = 0;
512
513 8 ret = decode_entropy_coded_image(s, IMAGE_ROLE_COLOR_INDEXING,
514 index_size, 1);
515
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 8 times.
 8 if (ret < 0)
516 ✗ return ret;
517
518 8 img = &s->image[IMAGE_ROLE_COLOR_INDEXING];
519 8 img->size_reduction = width_bits;
520
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 4 times.
 8 if (width_bits > 0)
521 4 s->reduced_width = (s->width + ((1 << width_bits) - 1)) >> width_bits;
522
523 /* color index values are delta-coded */
524 8 ct = img->frame->data[0] + 4;
525
2/2
✓ Branch 0 taken 1424 times.
✓ Branch 1 taken 8 times.
 1432 for (x = 4; x < img->frame->width * 4; x++, ct++)
526 1424 ct[0] += ct[-4];
527
528 8 return 0;
529 }
530
531 69356 static HuffReader *get_huffman_group(WebPContext *s, ImageContext *img,
532 int x, int y)
533 {
534 69356 ImageContext *gimg = &s->image[IMAGE_ROLE_ENTROPY];
535 69356 int group = 0;
536
537
2/2
✓ Branch 0 taken 65536 times.
✓ Branch 1 taken 3820 times.
 69356 if (gimg->size_reduction > 0) {
538 65536 int group_x = x >> gimg->size_reduction;
539 65536 int group_y = y >> gimg->size_reduction;
540 65536 int g0 = GET_PIXEL_COMP(gimg->frame, group_x, group_y, 1);
541 65536 int g1 = GET_PIXEL_COMP(gimg->frame, group_x, group_y, 2);
542 65536 group = g0 << 8 | g1;
543 }
544
545 69356 return &img->huffman_groups[group * HUFFMAN_CODES_PER_META_CODE];
546 }
547
548 ✗ static av_always_inline void color_cache_put(ImageContext *img, uint32_t c)
549 {
550 ✗ uint32_t cache_idx = (0x1E35A7BD * c) >> (32 - img->color_cache_bits);
551 ✗ img->color_cache[cache_idx] = c;
552 ✗ }
553
554 34 static int decode_entropy_coded_image(WebPContext *s, enum ImageRole role,
555 int w, int h)
556 {
557 ImageContext *img;
558 HuffReader *hg;
559 int i, j, ret, x, y, width;
560
561 34 img = &s->image[role];
562 34 img->role = role;
563
564
2/2
✓ Branch 0 taken 22 times.
✓ Branch 1 taken 12 times.
 34 if (!img->frame) {
565 22 img->frame = av_frame_alloc();
566
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 22 times.
 22 if (!img->frame)
567 ✗ return AVERROR(ENOMEM);
568 }
569
570 34 img->frame->format = AV_PIX_FMT_ARGB;
571 34 img->frame->width = w;
572 34 img->frame->height = h;
573
574
4/4
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 22 times.
✓ Branch 2 taken 10 times.
✓ Branch 3 taken 2 times.
 34 if (role == IMAGE_ROLE_ARGB && !img->is_alpha_primary) {
575 10 ret = ff_thread_get_buffer(s->avctx, img->frame, 0);
576 } else
577 24 ret = av_frame_get_buffer(img->frame, 1);
578
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 34 times.
 34 if (ret < 0)
579 ✗ return ret;
580
581
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 34 times.
 34 if (get_bits1(&s->gb)) {
582 ✗ img->color_cache_bits = get_bits(&s->gb, 4);
583 ✗ if (img->color_cache_bits < 1 || img->color_cache_bits > 11) {
584 ✗ av_log(s->avctx, AV_LOG_ERROR, "invalid color cache bits: %d\n",
585 img->color_cache_bits);
586 ✗ return AVERROR_INVALIDDATA;
587 }
588 ✗ img->color_cache = av_calloc(1 << img->color_cache_bits,
589 sizeof(*img->color_cache));
590 ✗ if (!img->color_cache)
591 ✗ return AVERROR(ENOMEM);
592 } else {
593 34 img->color_cache_bits = 0;
594 }
595
596 34 img->nb_huffman_groups = 1;
597
4/4
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 22 times.
✓ Branch 3 taken 4 times.
✓ Branch 4 taken 8 times.
 34 if (role == IMAGE_ROLE_ARGB && get_bits1(&s->gb)) {
598 4 ret = decode_entropy_image(s);
599
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (ret < 0)
600 ✗ return ret;
601 4 img->nb_huffman_groups = s->nb_huffman_groups;
602 }
603 34 img->huffman_groups = av_calloc(img->nb_huffman_groups,
604 HUFFMAN_CODES_PER_META_CODE *
605 sizeof(*img->huffman_groups));
606
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 34 times.
 34 if (!img->huffman_groups)
607 ✗ return AVERROR(ENOMEM);
608
609
2/2
✓ Branch 0 taken 42 times.
✓ Branch 1 taken 34 times.
 76 for (i = 0; i < img->nb_huffman_groups; i++) {
610 42 hg = &img->huffman_groups[i * HUFFMAN_CODES_PER_META_CODE];
611
2/2
✓ Branch 0 taken 210 times.
✓ Branch 1 taken 42 times.
 252 for (j = 0; j < HUFFMAN_CODES_PER_META_CODE; j++) {
612 210 int alphabet_size = alphabet_sizes[j];
613
3/4
✓ Branch 0 taken 42 times.
✓ Branch 1 taken 168 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 42 times.
 210 if (!j && img->color_cache_bits > 0)
614 ✗ alphabet_size += 1 << img->color_cache_bits;
615
616
2/2
✓ Branch 1 taken 130 times.
✓ Branch 2 taken 80 times.
 210 if (get_bits1(&s->gb)) {
617 130 read_huffman_code_simple(s, &hg[j]);
618 } else {
619 80 ret = read_huffman_code_normal(s, &hg[j], alphabet_size);
620
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 80 times.
 80 if (ret < 0)
621 ✗ return ret;
622 }
623 }
624 }
625
626 34 width = img->frame->width;
627
2/2
✓ Branch 0 taken 12 times.
✓ Branch 1 taken 22 times.
 34 if (role == IMAGE_ROLE_ARGB)
628 12 width = s->reduced_width;
629
630 34 x = 0; y = 0;
631
2/2
✓ Branch 0 taken 69356 times.
✓ Branch 1 taken 34 times.
 69390 while (y < img->frame->height) {
632 int v;
633
634
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 69356 times.
 69356 if (get_bits_left(&s->gb) < 0)
635 ✗ return AVERROR_INVALIDDATA;
636
637 69356 hg = get_huffman_group(s, img, x, y);
638 69356 v = huff_reader_get_symbol(&hg[HUFF_IDX_GREEN], &s->gb);
639
2/2
✓ Branch 0 taken 69230 times.
✓ Branch 1 taken 126 times.
 69356 if (v < NUM_LITERAL_CODES) {
640 /* literal pixel values */
641 69230 uint8_t *p = GET_PIXEL(img->frame, x, y);
642 69230 p[2] = v;
643 69230 p[1] = huff_reader_get_symbol(&hg[HUFF_IDX_RED], &s->gb);
644 69230 p[3] = huff_reader_get_symbol(&hg[HUFF_IDX_BLUE], &s->gb);
645 69230 p[0] = huff_reader_get_symbol(&hg[HUFF_IDX_ALPHA], &s->gb);
646
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 69230 times.
 69230 if (img->color_cache_bits)
647 ✗ color_cache_put(img, AV_RB32(p));
648 69230 x++;
649
2/2
✓ Branch 0 taken 750 times.
✓ Branch 1 taken 68480 times.
 69230 if (x == width) {
650 750 x = 0;
651 750 y++;
652 }
653
1/2
✓ Branch 0 taken 126 times.
✗ Branch 1 not taken.
 126 } else if (v < NUM_LITERAL_CODES + NUM_LENGTH_CODES) {
654 /* LZ77 backwards mapping */
655 int prefix_code, length, distance, ref_x, ref_y;
656
657 /* parse length and distance */
658 126 prefix_code = v - NUM_LITERAL_CODES;
659
2/2
✓ Branch 0 taken 48 times.
✓ Branch 1 taken 78 times.
 126 if (prefix_code < 4) {
660 48 length = prefix_code + 1;
661 } else {
662 78 int extra_bits = (prefix_code - 2) >> 1;
663 78 int offset = 2 + (prefix_code & 1) << extra_bits;
664 78 length = offset + get_bits(&s->gb, extra_bits) + 1;
665 }
666 126 prefix_code = huff_reader_get_symbol(&hg[HUFF_IDX_DIST], &s->gb);
667
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 126 times.
 126 if (prefix_code > 39U) {
668 ✗ av_log(s->avctx, AV_LOG_ERROR,
669 "distance prefix code too large: %d\n", prefix_code);
670 ✗ return AVERROR_INVALIDDATA;
671 }
672
1/2
✓ Branch 0 taken 126 times.
✗ Branch 1 not taken.
 126 if (prefix_code < 4) {
673 126 distance = prefix_code + 1;
674 } else {
675 ✗ int extra_bits = prefix_code - 2 >> 1;
676 ✗ int offset = 2 + (prefix_code & 1) << extra_bits;
677 ✗ distance = offset + get_bits(&s->gb, extra_bits) + 1;
678 }
679
680 /* find reference location */
681
1/2
✓ Branch 0 taken 126 times.
✗ Branch 1 not taken.
 126 if (distance <= NUM_SHORT_DISTANCES) {
682 126 int xi = lz77_distance_offsets[distance - 1][0];
683 126 int yi = lz77_distance_offsets[distance - 1][1];
684 126 distance = FFMAX(1, xi + yi * width);
685 } else {
686 ✗ distance -= NUM_SHORT_DISTANCES;
687 }
688 126 ref_x = x;
689 126 ref_y = y;
690
2/2
✓ Branch 0 taken 40 times.
✓ Branch 1 taken 86 times.
 126 if (distance <= x) {
691 40 ref_x -= distance;
692 40 distance = 0;
693 } else {
694 86 ref_x = 0;
695 86 distance -= x;
696 }
697
2/2
✓ Branch 0 taken 22 times.
✓ Branch 1 taken 126 times.
 148 while (distance >= width) {
698 22 ref_y--;
699 22 distance -= width;
700 }
701
2/2
✓ Branch 0 taken 64 times.
✓ Branch 1 taken 62 times.
 126 if (distance > 0) {
702 64 ref_x = width - distance;
703 64 ref_y--;
704 }
705 126 ref_x = FFMAX(0, ref_x);
706 126 ref_y = FFMAX(0, ref_y);
707
708
3/4
✓ Branch 0 taken 40 times.
✓ Branch 1 taken 86 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 40 times.
 126 if (ref_y == y && ref_x >= x)
709 ✗ return AVERROR_INVALIDDATA;
710
711 /* copy pixels
712 * source and dest regions can overlap and wrap lines, so just
713 * copy per-pixel */
714
2/2
✓ Branch 0 taken 958 times.
✓ Branch 1 taken 118 times.
 1076 for (i = 0; i < length; i++) {
715 958 uint8_t *p_ref = GET_PIXEL(img->frame, ref_x, ref_y);
716 958 uint8_t *p = GET_PIXEL(img->frame, x, y);
717
718 958 AV_COPY32(p, p_ref);
719
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 958 times.
 958 if (img->color_cache_bits)
720 ✗ color_cache_put(img, AV_RB32(p));
721 958 x++;
722 958 ref_x++;
723
2/2
✓ Branch 0 taken 74 times.
✓ Branch 1 taken 884 times.
 958 if (x == width) {
724 74 x = 0;
725 74 y++;
726 }
727
2/2
✓ Branch 0 taken 72 times.
✓ Branch 1 taken 886 times.
 958 if (ref_x == width) {
728 72 ref_x = 0;
729 72 ref_y++;
730 }
731
3/4
✓ Branch 0 taken 950 times.
✓ Branch 1 taken 8 times.
✓ Branch 2 taken 950 times.
✗ Branch 3 not taken.
 958 if (y == img->frame->height || ref_y == img->frame->height)
732 break;
733 }
734 } else {
735 /* read from color cache */
736 ✗ uint8_t *p = GET_PIXEL(img->frame, x, y);
737 ✗ int cache_idx = v - (NUM_LITERAL_CODES + NUM_LENGTH_CODES);
738
739 ✗ if (!img->color_cache_bits) {
740 ✗ av_log(s->avctx, AV_LOG_ERROR, "color cache not found\n");
741 ✗ return AVERROR_INVALIDDATA;
742 }
743 ✗ if (cache_idx >= 1 << img->color_cache_bits) {
744 ✗ av_log(s->avctx, AV_LOG_ERROR,
745 "color cache index out-of-bounds\n");
746 ✗ return AVERROR_INVALIDDATA;
747 }
748 ✗ AV_WB32(p, img->color_cache[cache_idx]);
749 ✗ x++;
750 ✗ if (x == width) {
751 ✗ x = 0;
752 ✗ y++;
753 }
754 }
755 }
756
757 34 return 0;
758 }
759
760 /* PRED_MODE_BLACK */
761 6 static void inv_predict_0(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
762 const uint8_t *p_t, const uint8_t *p_tr)
763 {
764 6 AV_WB32(p, 0xFF000000);
765 6 }
766
767 /* PRED_MODE_L */
768 5300 static void inv_predict_1(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
769 const uint8_t *p_t, const uint8_t *p_tr)
770 {
771 5300 AV_COPY32(p, p_l);
772 5300 }
773
774 /* PRED_MODE_T */
775 21182 static void inv_predict_2(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
776 const uint8_t *p_t, const uint8_t *p_tr)
777 {
778 21182 AV_COPY32(p, p_t);
779 21182 }
780
781 /* PRED_MODE_TR */
782 6336 static void inv_predict_3(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
783 const uint8_t *p_t, const uint8_t *p_tr)
784 {
785 6336 AV_COPY32(p, p_tr);
786 6336 }
787
788 /* PRED_MODE_TL */
789 1248 static void inv_predict_4(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
790 const uint8_t *p_t, const uint8_t *p_tr)
791 {
792 1248 AV_COPY32(p, p_tl);
793 1248 }
794
795 /* PRED_MODE_AVG_T_AVG_L_TR */
796 4832 static void inv_predict_5(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
797 const uint8_t *p_t, const uint8_t *p_tr)
798 {
799 4832 p[0] = p_t[0] + (p_l[0] + p_tr[0] >> 1) >> 1;
800 4832 p[1] = p_t[1] + (p_l[1] + p_tr[1] >> 1) >> 1;
801 4832 p[2] = p_t[2] + (p_l[2] + p_tr[2] >> 1) >> 1;
802 4832 p[3] = p_t[3] + (p_l[3] + p_tr[3] >> 1) >> 1;
803 4832 }
804
805 /* PRED_MODE_AVG_L_TL */
806 768 static void inv_predict_6(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
807 const uint8_t *p_t, const uint8_t *p_tr)
808 {
809 768 p[0] = p_l[0] + p_tl[0] >> 1;
810 768 p[1] = p_l[1] + p_tl[1] >> 1;
811 768 p[2] = p_l[2] + p_tl[2] >> 1;
812 768 p[3] = p_l[3] + p_tl[3] >> 1;
813 768 }
814
815 /* PRED_MODE_AVG_L_T */
816 3072 static void inv_predict_7(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
817 const uint8_t *p_t, const uint8_t *p_tr)
818 {
819 3072 p[0] = p_l[0] + p_t[0] >> 1;
820 3072 p[1] = p_l[1] + p_t[1] >> 1;
821 3072 p[2] = p_l[2] + p_t[2] >> 1;
822 3072 p[3] = p_l[3] + p_t[3] >> 1;
823 3072 }
824
825 /* PRED_MODE_AVG_TL_T */
826 4512 static void inv_predict_8(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
827 const uint8_t *p_t, const uint8_t *p_tr)
828 {
829 4512 p[0] = p_tl[0] + p_t[0] >> 1;
830 4512 p[1] = p_tl[1] + p_t[1] >> 1;
831 4512 p[2] = p_tl[2] + p_t[2] >> 1;
832 4512 p[3] = p_tl[3] + p_t[3] >> 1;
833 4512 }
834
835 /* PRED_MODE_AVG_T_TR */
836 11488 static void inv_predict_9(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
837 const uint8_t *p_t, const uint8_t *p_tr)
838 {
839 11488 p[0] = p_t[0] + p_tr[0] >> 1;
840 11488 p[1] = p_t[1] + p_tr[1] >> 1;
841 11488 p[2] = p_t[2] + p_tr[2] >> 1;
842 11488 p[3] = p_t[3] + p_tr[3] >> 1;
843 11488 }
844
845 /* PRED_MODE_AVG_AVG_L_TL_AVG_T_TR */
846 3236 static void inv_predict_10(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
847 const uint8_t *p_t, const uint8_t *p_tr)
848 {
849 3236 p[0] = (p_l[0] + p_tl[0] >> 1) + (p_t[0] + p_tr[0] >> 1) >> 1;
850 3236 p[1] = (p_l[1] + p_tl[1] >> 1) + (p_t[1] + p_tr[1] >> 1) >> 1;
851 3236 p[2] = (p_l[2] + p_tl[2] >> 1) + (p_t[2] + p_tr[2] >> 1) >> 1;
852 3236 p[3] = (p_l[3] + p_tl[3] >> 1) + (p_t[3] + p_tr[3] >> 1) >> 1;
853 3236 }
854
855 /* PRED_MODE_SELECT */
856 3824 static void inv_predict_11(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
857 const uint8_t *p_t, const uint8_t *p_tr)
858 {
859 3824 int diff = (FFABS(p_l[0] - p_tl[0]) - FFABS(p_t[0] - p_tl[0])) +
860 3824 (FFABS(p_l[1] - p_tl[1]) - FFABS(p_t[1] - p_tl[1])) +
861 3824 (FFABS(p_l[2] - p_tl[2]) - FFABS(p_t[2] - p_tl[2])) +
862 3824 (FFABS(p_l[3] - p_tl[3]) - FFABS(p_t[3] - p_tl[3]));
863
2/2
✓ Branch 0 taken 2602 times.
✓ Branch 1 taken 1222 times.
 3824 if (diff <= 0)
864 2602 AV_COPY32(p, p_t);
865 else
866 1222 AV_COPY32(p, p_l);
867 3824 }
868
869 /* PRED_MODE_ADD_SUBTRACT_FULL */
870 ✗ static void inv_predict_12(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
871 const uint8_t *p_t, const uint8_t *p_tr)
872 {
873 ✗ p[0] = av_clip_uint8(p_l[0] + p_t[0] - p_tl[0]);
874 ✗ p[1] = av_clip_uint8(p_l[1] + p_t[1] - p_tl[1]);
875 ✗ p[2] = av_clip_uint8(p_l[2] + p_t[2] - p_tl[2]);
876 ✗ p[3] = av_clip_uint8(p_l[3] + p_t[3] - p_tl[3]);
877 ✗ }
878
879 2048 static av_always_inline uint8_t clamp_add_subtract_half(int a, int b, int c)
880 {
881 2048 int d = a + b >> 1;
882 2048 return av_clip_uint8(d + (d - c) / 2);
883 }
884
885 /* PRED_MODE_ADD_SUBTRACT_HALF */
886 512 static void inv_predict_13(uint8_t *p, const uint8_t *p_l, const uint8_t *p_tl,
887 const uint8_t *p_t, const uint8_t *p_tr)
888 {
889 512 p[0] = clamp_add_subtract_half(p_l[0], p_t[0], p_tl[0]);
890 512 p[1] = clamp_add_subtract_half(p_l[1], p_t[1], p_tl[1]);
891 512 p[2] = clamp_add_subtract_half(p_l[2], p_t[2], p_tl[2]);
892 512 p[3] = clamp_add_subtract_half(p_l[3], p_t[3], p_tl[3]);
893 512 }
894
895 typedef void (*inv_predict_func)(uint8_t *p, const uint8_t *p_l,
896 const uint8_t *p_tl, const uint8_t *p_t,
897 const uint8_t *p_tr);
898
899 static const inv_predict_func inverse_predict[14] = {
900 inv_predict_0, inv_predict_1, inv_predict_2, inv_predict_3,
901 inv_predict_4, inv_predict_5, inv_predict_6, inv_predict_7,
902 inv_predict_8, inv_predict_9, inv_predict_10, inv_predict_11,
903 inv_predict_12, inv_predict_13,
904 };
905
906 66316 static void inverse_prediction(AVFrame *frame, enum PredictionMode m, int x, int y)
907 {
908 uint8_t *dec, *p_l, *p_tl, *p_t, *p_tr;
909 uint8_t p[4];
910
911 66316 dec = GET_PIXEL(frame, x, y);
912 66316 p_l = GET_PIXEL(frame, x - 1, y);
913 66316 p_tl = GET_PIXEL(frame, x - 1, y - 1);
914 66316 p_t = GET_PIXEL(frame, x, y - 1);
915
2/2
✓ Branch 0 taken 512 times.
✓ Branch 1 taken 65804 times.
 66316 if (x == frame->width - 1)
916 512 p_tr = GET_PIXEL(frame, 0, y);
917 else
918 65804 p_tr = GET_PIXEL(frame, x + 1, y - 1);
919
920 66316 inverse_predict[m](p, p_l, p_tl, p_t, p_tr);
921
922 66316 dec[0] += p[0];
923 66316 dec[1] += p[1];
924 66316 dec[2] += p[2];
925 66316 dec[3] += p[3];
926 66316 }
927
928 6 static int apply_predictor_transform(WebPContext *s)
929 {
930 6 ImageContext *img = &s->image[IMAGE_ROLE_ARGB];
931 6 ImageContext *pimg = &s->image[IMAGE_ROLE_PREDICTOR];
932 int x, y;
933
934
2/2
✓ Branch 0 taken 572 times.
✓ Branch 1 taken 6 times.
 578 for (y = 0; y < img->frame->height; y++) {
935
2/2
✓ Branch 0 taken 66316 times.
✓ Branch 1 taken 572 times.
 66888 for (x = 0; x < s->reduced_width; x++) {
936 66316 int tx = x >> pimg->size_reduction;
937 66316 int ty = y >> pimg->size_reduction;
938 66316 enum PredictionMode m = GET_PIXEL_COMP(pimg->frame, tx, ty, 2);
939
940
2/2
✓ Branch 0 taken 572 times.
✓ Branch 1 taken 65744 times.
 66316 if (x == 0) {
941
2/2
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 566 times.
 572 if (y == 0)
942 6 m = PRED_MODE_BLACK;
943 else
944 566 m = PRED_MODE_T;
945
2/2
✓ Branch 0 taken 532 times.
✓ Branch 1 taken 65212 times.
 65744 } else if (y == 0)
946 532 m = PRED_MODE_L;
947
948
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 66316 times.
 66316 if (m > 13) {
949 ✗ av_log(s->avctx, AV_LOG_ERROR,
950 "invalid predictor mode: %d\n", m);
951 ✗ return AVERROR_INVALIDDATA;
952 }
953 66316 inverse_prediction(img->frame, m, x, y);
954 }
955 }
956 6 return 0;
957 }
958
959 196608 static av_always_inline uint8_t color_transform_delta(uint8_t color_pred,
960 uint8_t color)
961 {
962 196608 return (int)ff_u8_to_s8(color_pred) * ff_u8_to_s8(color) >> 5;
963 }
964
965 4 static int apply_color_transform(WebPContext *s)
966 {
967 ImageContext *img, *cimg;
968 int x, y, cx, cy;
969 uint8_t *p, *cp;
970
971 4 img = &s->image[IMAGE_ROLE_ARGB];
972 4 cimg = &s->image[IMAGE_ROLE_COLOR_TRANSFORM];
973
974
2/2
✓ Branch 0 taken 512 times.
✓ Branch 1 taken 4 times.
 516 for (y = 0; y < img->frame->height; y++) {
975
2/2
✓ Branch 0 taken 65536 times.
✓ Branch 1 taken 512 times.
 66048 for (x = 0; x < s->reduced_width; x++) {
976 65536 cx = x >> cimg->size_reduction;
977 65536 cy = y >> cimg->size_reduction;
978 65536 cp = GET_PIXEL(cimg->frame, cx, cy);
979 65536 p = GET_PIXEL(img->frame, x, y);
980
981 65536 p[1] += color_transform_delta(cp[3], p[2]);
982 65536 p[3] += color_transform_delta(cp[2], p[2]) +
983 65536 color_transform_delta(cp[1], p[1]);
984 }
985 }
986 4 return 0;
987 }
988
989 4 static int apply_subtract_green_transform(WebPContext *s)
990 {
991 int x, y;
992 4 ImageContext *img = &s->image[IMAGE_ROLE_ARGB];
993
994
2/2
✓ Branch 0 taken 512 times.
✓ Branch 1 taken 4 times.
 516 for (y = 0; y < img->frame->height; y++) {
995
2/2
✓ Branch 0 taken 65536 times.
✓ Branch 1 taken 512 times.
 66048 for (x = 0; x < s->reduced_width; x++) {
996 65536 uint8_t *p = GET_PIXEL(img->frame, x, y);
997 65536 p[1] += p[2];
998 65536 p[3] += p[2];
999 }
1000 }
1001 4 return 0;
1002 }
1003
1004 8 static int apply_color_indexing_transform(WebPContext *s)
1005 {
1006 ImageContext *img;
1007 ImageContext *pal;
1008 int i, x, y;
1009 uint8_t *p;
1010
1011 8 img = &s->image[IMAGE_ROLE_ARGB];
1012 8 pal = &s->image[IMAGE_ROLE_COLOR_INDEXING];
1013
1014
2/2
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 4 times.
 8 if (pal->size_reduction > 0) { // undo pixel packing
1015 GetBitContext gb_g;
1016 uint8_t *line;
1017 4 int pixel_bits = 8 >> pal->size_reduction;
1018
1019 4 line = av_malloc(img->frame->linesize[0] + AV_INPUT_BUFFER_PADDING_SIZE);
1020
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (!line)
1021 ✗ return AVERROR(ENOMEM);
1022
1023
2/2
✓ Branch 0 taken 76 times.
✓ Branch 1 taken 4 times.
 80 for (y = 0; y < img->frame->height; y++) {
1024 76 p = GET_PIXEL(img->frame, 0, y);
1025 76 memcpy(line, p, img->frame->linesize[0]);
1026 76 init_get_bits(&gb_g, line, img->frame->linesize[0] * 8);
1027 76 skip_bits(&gb_g, 16);
1028 76 i = 0;
1029
2/2
✓ Branch 0 taken 6192 times.
✓ Branch 1 taken 76 times.
 6268 for (x = 0; x < img->frame->width; x++) {
1030 6192 p = GET_PIXEL(img->frame, x, y);
1031 6192 p[2] = get_bits(&gb_g, pixel_bits);
1032 6192 i++;
1033
2/2
✓ Branch 0 taken 768 times.
✓ Branch 1 taken 5424 times.
 6192 if (i == 1 << pal->size_reduction) {
1034 768 skip_bits(&gb_g, 24);
1035 768 i = 0;
1036 }
1037 }
1038 }
1039 4 av_free(line);
1040 4 s->reduced_width = s->width; // we are back to full size
1041 }
1042
1043 // switch to local palette if it's worth initializing it
1044
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 6 times.
 8 if (img->frame->height * img->frame->width > 300) {
1045 uint8_t palette[256 * 4];
1046 2 const int size = pal->frame->width * 4;
1047
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 av_assert0(size <= 1024U);
1048 2 memcpy(palette, GET_PIXEL(pal->frame, 0, 0), size); // copy palette
1049 // set extra entries to transparent black
1050 2 memset(palette + size, 0, 256 * 4 - size);
1051
2/2
✓ Branch 0 taken 60 times.
✓ Branch 1 taken 2 times.
 62 for (y = 0; y < img->frame->height; y++) {
1052
2/2
✓ Branch 0 taken 6000 times.
✓ Branch 1 taken 60 times.
 6060 for (x = 0; x < img->frame->width; x++) {
1053 6000 p = GET_PIXEL(img->frame, x, y);
1054 6000 i = p[2];
1055 6000 AV_COPY32(p, &palette[i * 4]);
1056 }
1057 }
1058 } else {
1059
2/2
✓ Branch 0 taken 48 times.
✓ Branch 1 taken 6 times.
 54 for (y = 0; y < img->frame->height; y++) {
1060
2/2
✓ Branch 0 taken 576 times.
✓ Branch 1 taken 48 times.
 624 for (x = 0; x < img->frame->width; x++) {
1061 576 p = GET_PIXEL(img->frame, x, y);
1062 576 i = p[2];
1063
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 576 times.
 576 if (i >= pal->frame->width) {
1064 ✗ AV_WB32(p, 0x00000000);
1065 } else {
1066 576 const uint8_t *pi = GET_PIXEL(pal->frame, i, 0);
1067 576 AV_COPY32(p, pi);
1068 }
1069 }
1070 }
1071 }
1072
1073 8 return 0;
1074 }
1075
1076 16 static void update_canvas_size(AVCodecContext *avctx, int w, int h)
1077 {
1078 16 WebPContext *s = avctx->priv_data;
1079
3/4
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 12 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 4 times.
 16 if (s->width && s->width != w) {
1080 ✗ av_log(avctx, AV_LOG_WARNING, "Width mismatch. %d != %d\n",
1081 s->width, w);
1082 }
1083 16 s->width = w;
1084
3/4
✓ Branch 0 taken 4 times.
✓ Branch 1 taken 12 times.
✗ Branch 2 not taken.
✓ Branch 3 taken 4 times.
 16 if (s->height && s->height != h) {
1085 ✗ av_log(avctx, AV_LOG_WARNING, "Height mismatch. %d != %d\n",
1086 s->height, h);
1087 }
1088 16 s->height = h;
1089 16 }
1090
1091 12 static int vp8_lossless_decode_frame(AVCodecContext *avctx, AVFrame *p,
1092 int *got_frame, const uint8_t *data_start,
1093 unsigned int data_size, int is_alpha_chunk)
1094 {
1095 12 WebPContext *s = avctx->priv_data;
1096 int w, h, ret, i, used;
1097
1098
2/2
✓ Branch 0 taken 10 times.
✓ Branch 1 taken 2 times.
 12 if (!is_alpha_chunk)
1099 10 avctx->pix_fmt = AV_PIX_FMT_ARGB;
1100
1101 12 ret = init_get_bits8(&s->gb, data_start, data_size);
1102
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 12 times.
 12 if (ret < 0)
1103 ✗ return ret;
1104
1105
2/2
✓ Branch 0 taken 10 times.
✓ Branch 1 taken 2 times.
 12 if (!is_alpha_chunk) {
1106
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 10 times.
 10 if (get_bits(&s->gb, 8) != 0x2F) {
1107 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid WebP Lossless signature\n");
1108 ✗ return AVERROR_INVALIDDATA;
1109 }
1110
1111 10 w = get_bits(&s->gb, 14) + 1;
1112 10 h = get_bits(&s->gb, 14) + 1;
1113
1114 10 update_canvas_size(avctx, w, h);
1115
1116 10 ret = ff_set_dimensions(avctx, s->width, s->height);
1117
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 10 times.
 10 if (ret < 0)
1118 ✗ return ret;
1119
1120 10 s->has_alpha = get_bits1(&s->gb);
1121
1122
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 10 times.
 10 if (get_bits(&s->gb, 3) != 0x0) {
1123 ✗ av_log(avctx, AV_LOG_ERROR, "Invalid WebP Lossless version\n");
1124 ✗ return AVERROR_INVALIDDATA;
1125 }
1126 } else {
1127
2/4
✓ Branch 0 taken 2 times.
✗ Branch 1 not taken.
✗ Branch 2 not taken.
✓ Branch 3 taken 2 times.
 2 if (!s->width || !s->height)
1128 ✗ return AVERROR_BUG;
1129 2 w = s->width;
1130 2 h = s->height;
1131 }
1132
1133 /* parse transformations */
1134 12 s->nb_transforms = 0;
1135 12 s->reduced_width = s->width;
1136 12 used = 0;
1137
2/2
✓ Branch 1 taken 22 times.
✓ Branch 2 taken 12 times.
 34 while (get_bits1(&s->gb)) {
1138 22 enum TransformType transform = get_bits(&s->gb, 2);
1139
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 22 times.
 22 if (used & (1 << transform)) {
1140 ✗ av_log(avctx, AV_LOG_ERROR, "Transform %d used more than once\n",
1141 transform);
1142 ✗ ret = AVERROR_INVALIDDATA;
1143 ✗ goto free_and_return;
1144 }
1145 22 used |= (1 << transform);
1146 22 s->transforms[s->nb_transforms++] = transform;
1147
4/4
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 4 times.
✓ Branch 2 taken 8 times.
✓ Branch 3 taken 4 times.
 22 switch (transform) {
1148 6 case PREDICTOR_TRANSFORM:
1149 6 ret = parse_transform_predictor(s);
1150 6 break;
1151 4 case COLOR_TRANSFORM:
1152 4 ret = parse_transform_color(s);
1153 4 break;
1154 8 case COLOR_INDEXING_TRANSFORM:
1155 8 ret = parse_transform_color_indexing(s);
1156 8 break;
1157 }
1158
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 22 times.
 22 if (ret < 0)
1159 ✗ goto free_and_return;
1160 }
1161
1162 /* decode primary image */
1163 12 s->image[IMAGE_ROLE_ARGB].frame = p;
1164
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 10 times.
 12 if (is_alpha_chunk)
1165 2 s->image[IMAGE_ROLE_ARGB].is_alpha_primary = 1;
1166 12 ret = decode_entropy_coded_image(s, IMAGE_ROLE_ARGB, w, h);
1167
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 12 times.
 12 if (ret < 0)
1168 ✗ goto free_and_return;
1169
1170 /* apply transformations */
1171
2/2
✓ Branch 0 taken 22 times.
✓ Branch 1 taken 12 times.
 34 for (i = s->nb_transforms - 1; i >= 0; i--) {
1172
4/5
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 4 times.
✓ Branch 2 taken 4 times.
✓ Branch 3 taken 8 times.
✗ Branch 4 not taken.
 22 switch (s->transforms[i]) {
1173 6 case PREDICTOR_TRANSFORM:
1174 6 ret = apply_predictor_transform(s);
1175 6 break;
1176 4 case COLOR_TRANSFORM:
1177 4 ret = apply_color_transform(s);
1178 4 break;
1179 4 case SUBTRACT_GREEN:
1180 4 ret = apply_subtract_green_transform(s);
1181 4 break;
1182 8 case COLOR_INDEXING_TRANSFORM:
1183 8 ret = apply_color_indexing_transform(s);
1184 8 break;
1185 }
1186
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 22 times.
 22 if (ret < 0)
1187 ✗ goto free_and_return;
1188 }
1189
1190 12 *got_frame = 1;
1191 12 p->pict_type = AV_PICTURE_TYPE_I;
1192 12 p->flags |= AV_FRAME_FLAG_KEY;
1193 12 p->flags |= AV_FRAME_FLAG_LOSSLESS;
1194 12 ret = data_size;
1195
1196 12 free_and_return:
1197
2/2
✓ Branch 0 taken 60 times.
✓ Branch 1 taken 12 times.
 72 for (i = 0; i < IMAGE_ROLE_NB; i++)
1198 60 image_ctx_free(&s->image[i]);
1199
1200 12 return ret;
1201 }
1202
1203 ✗ static void alpha_inverse_prediction(AVFrame *frame, enum AlphaFilter m)
1204 {
1205 int x, y, ls;
1206 uint8_t *dec;
1207
1208 ✗ ls = frame->linesize[3];
1209
1210 /* filter first row using horizontal filter */
1211 ✗ dec = frame->data[3] + 1;
1212 ✗ for (x = 1; x < frame->width; x++, dec++)
1213 ✗ *dec += *(dec - 1);
1214
1215 /* filter first column using vertical filter */
1216 ✗ dec = frame->data[3] + ls;
1217 ✗ for (y = 1; y < frame->height; y++, dec += ls)
1218 ✗ *dec += *(dec - ls);
1219
1220 /* filter the rest using the specified filter */
1221 ✗ switch (m) {
1222 ✗ case ALPHA_FILTER_HORIZONTAL:
1223 ✗ for (y = 1; y < frame->height; y++) {
1224 ✗ dec = frame->data[3] + y * ls + 1;
1225 ✗ for (x = 1; x < frame->width; x++, dec++)
1226 ✗ *dec += *(dec - 1);
1227 }
1228 ✗ break;
1229 ✗ case ALPHA_FILTER_VERTICAL:
1230 ✗ for (y = 1; y < frame->height; y++) {
1231 ✗ dec = frame->data[3] + y * ls + 1;
1232 ✗ for (x = 1; x < frame->width; x++, dec++)
1233 ✗ *dec += *(dec - ls);
1234 }
1235 ✗ break;
1236 ✗ case ALPHA_FILTER_GRADIENT:
1237 ✗ for (y = 1; y < frame->height; y++) {
1238 ✗ dec = frame->data[3] + y * ls + 1;
1239 ✗ for (x = 1; x < frame->width; x++, dec++)
1240 ✗ dec[0] += av_clip_uint8(*(dec - 1) + *(dec - ls) - *(dec - ls - 1));
1241 }
1242 ✗ break;
1243 }
1244 ✗ }
1245
1246 2 static int vp8_lossy_decode_alpha(AVCodecContext *avctx, AVFrame *p,
1247 const uint8_t *data_start,
1248 unsigned int data_size)
1249 {
1250 2 WebPContext *s = avctx->priv_data;
1251 int x, y, ret;
1252
1253
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (s->alpha_compression == ALPHA_COMPRESSION_NONE) {
1254 GetByteContext gb;
1255
1256 ✗ bytestream2_init(&gb, data_start, data_size);
1257 ✗ for (y = 0; y < s->height; y++)
1258 ✗ bytestream2_get_buffer(&gb, p->data[3] + p->linesize[3] * y,
1259 ✗ s->width);
1260
1/2
✓ Branch 0 taken 2 times.
✗ Branch 1 not taken.
 2 } else if (s->alpha_compression == ALPHA_COMPRESSION_VP8L) {
1261 uint8_t *ap, *pp;
1262 2 int alpha_got_frame = 0;
1263
1264 2 s->alpha_frame = av_frame_alloc();
1265
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!s->alpha_frame)
1266 ✗ return AVERROR(ENOMEM);
1267
1268 2 ret = vp8_lossless_decode_frame(avctx, s->alpha_frame, &alpha_got_frame,
1269 data_start, data_size, 1);
1270
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (ret < 0) {
1271 ✗ av_frame_free(&s->alpha_frame);
1272 ✗ return ret;
1273 }
1274
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!alpha_got_frame) {
1275 ✗ av_frame_free(&s->alpha_frame);
1276 ✗ return AVERROR_INVALIDDATA;
1277 }
1278
1279 /* copy green component of alpha image to alpha plane of primary image */
1280
2/2
✓ Branch 0 taken 16 times.
✓ Branch 1 taken 2 times.
 18 for (y = 0; y < s->height; y++) {
1281 16 ap = GET_PIXEL(s->alpha_frame, 0, y) + 2;
1282 16 pp = p->data[3] + p->linesize[3] * y;
1283
2/2
✓ Branch 0 taken 192 times.
✓ Branch 1 taken 16 times.
 208 for (x = 0; x < s->width; x++) {
1284 192 *pp = *ap;
1285 192 pp++;
1286 192 ap += 4;
1287 }
1288 }
1289 2 av_frame_free(&s->alpha_frame);
1290 }
1291
1292 /* apply alpha filtering */
1293
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (s->alpha_filter)
1294 ✗ alpha_inverse_prediction(p, s->alpha_filter);
1295
1296 2 return 0;
1297 }
1298
1299 6 static int vp8_lossy_decode_frame(AVCodecContext *avctx, AVFrame *p,
1300 int *got_frame, uint8_t *data_start,
1301 unsigned int data_size)
1302 {
1303 6 WebPContext *s = avctx->priv_data;
1304 int ret;
1305
1306
1/2
✓ Branch 0 taken 6 times.
✗ Branch 1 not taken.
 6 if (!s->initialized) {
1307 6 ff_vp8_decode_init(avctx);
1308 6 s->initialized = 1;
1309 6 s->v.actually_webp = 1;
1310 }
1311
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 4 times.
 6 avctx->pix_fmt = s->has_alpha ? AV_PIX_FMT_YUVA420P : AV_PIX_FMT_YUV420P;
1312
1313
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (data_size > INT_MAX) {
1314 ✗ av_log(avctx, AV_LOG_ERROR, "unsupported chunk size\n");
1315 ✗ return AVERROR_PATCHWELCOME;
1316 }
1317
1318 6 av_packet_unref(s->pkt);
1319 6 s->pkt->data = data_start;
1320 6 s->pkt->size = data_size;
1321
1322 6 ret = ff_vp8_decode_frame(avctx, p, got_frame, s->pkt);
1323
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (ret < 0)
1324 ✗ return ret;
1325
1326
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (!*got_frame)
1327 ✗ return AVERROR_INVALIDDATA;
1328
1329 6 update_canvas_size(avctx, avctx->width, avctx->height);
1330
1331
2/2
✓ Branch 0 taken 2 times.
✓ Branch 1 taken 4 times.
 6 if (s->has_alpha) {
1332 2 ret = vp8_lossy_decode_alpha(avctx, p, s->alpha_data,
1333 2 s->alpha_data_size);
1334
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (ret < 0)
1335 ✗ return ret;
1336 }
1337 6 return ret;
1338 }
1339
1340 16 static int webp_decode_frame(AVCodecContext *avctx, AVFrame *p,
1341 int *got_frame, AVPacket *avpkt)
1342 {
1343 16 WebPContext *s = avctx->priv_data;
1344 GetByteContext gb;
1345 int ret;
1346 uint32_t chunk_type, chunk_size;
1347 16 int vp8x_flags = 0;
1348
1349 16 s->avctx = avctx;
1350 16 s->width = 0;
1351 16 s->height = 0;
1352 16 *got_frame = 0;
1353 16 s->has_alpha = 0;
1354 16 s->has_exif = 0;
1355 16 s->has_iccp = 0;
1356 16 s->has_xmp = 0;
1357 16 bytestream2_init(&gb, avpkt->data, avpkt->size);
1358
1359
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 16 times.
 16 if (bytestream2_get_bytes_left(&gb) < 12)
1360 ✗ return AVERROR_INVALIDDATA;
1361
1362
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 16 times.
 16 if (bytestream2_get_le32(&gb) != MKTAG('R', 'I', 'F', 'F')) {
1363 ✗ av_log(avctx, AV_LOG_ERROR, "missing RIFF tag\n");
1364 ✗ return AVERROR_INVALIDDATA;
1365 }
1366
1367 16 chunk_size = bytestream2_get_le32(&gb);
1368
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 16 times.
 16 if (bytestream2_get_bytes_left(&gb) < chunk_size)
1369 ✗ return AVERROR_INVALIDDATA;
1370
1371
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 16 times.
 16 if (bytestream2_get_le32(&gb) != MKTAG('W', 'E', 'B', 'P')) {
1372 ✗ av_log(avctx, AV_LOG_ERROR, "missing WEBP tag\n");
1373 ✗ return AVERROR_INVALIDDATA;
1374 }
1375
1376
2/2
✓ Branch 1 taken 24 times.
✓ Branch 2 taken 16 times.
 40 while (bytestream2_get_bytes_left(&gb) > 8) {
1377 24 chunk_type = bytestream2_get_le32(&gb);
1378 24 chunk_size = bytestream2_get_le32(&gb);
1379
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 24 times.
 24 if (chunk_size == UINT32_MAX)
1380 ✗ return AVERROR_INVALIDDATA;
1381 24 chunk_size += chunk_size & 1;
1382
1383
1/2
✗ Branch 1 not taken.
✓ Branch 2 taken 24 times.
 24 if (bytestream2_get_bytes_left(&gb) < chunk_size) {
1384 /* we seem to be running out of data, but it could also be that the
1385 bitstream has trailing junk leading to bogus chunk_size. */
1386 ✗ break;
1387 }
1388
1389
5/9
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 10 times.
✓ Branch 2 taken 4 times.
✓ Branch 3 taken 2 times.
✓ Branch 4 taken 2 times.
✗ Branch 5 not taken.
✗ Branch 6 not taken.
✗ Branch 7 not taken.
✗ Branch 8 not taken.
 24 switch (chunk_type) {
1390 6 case MKTAG('V', 'P', '8', ' '):
1391
1/2
✓ Branch 0 taken 6 times.
✗ Branch 1 not taken.
 6 if (!*got_frame) {
1392 6 ret = vp8_lossy_decode_frame(avctx, p, got_frame,
1393 6 avpkt->data + bytestream2_tell(&gb),
1394 chunk_size);
1395
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 6 times.
 6 if (ret < 0)
1396 ✗ return ret;
1397 }
1398 6 bytestream2_skip(&gb, chunk_size);
1399 24 break;
1400 10 case MKTAG('V', 'P', '8', 'L'):
1401
1/2
✓ Branch 0 taken 10 times.
✗ Branch 1 not taken.
 10 if (!*got_frame) {
1402 10 ret = vp8_lossless_decode_frame(avctx, p, got_frame,
1403 10 avpkt->data + bytestream2_tell(&gb),
1404 chunk_size, 0);
1405
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 10 times.
 10 if (ret < 0)
1406 ✗ return ret;
1407 #if FF_API_CODEC_PROPS
1408 FF_DISABLE_DEPRECATION_WARNINGS
1409 10 avctx->properties |= FF_CODEC_PROPERTY_LOSSLESS;
1410 FF_ENABLE_DEPRECATION_WARNINGS
1411 #endif
1412 }
1413 10 bytestream2_skip(&gb, chunk_size);
1414 10 break;
1415 4 case MKTAG('V', 'P', '8', 'X'):
1416
3/6
✓ Branch 0 taken 4 times.
✗ Branch 1 not taken.
✓ Branch 2 taken 4 times.
✗ Branch 3 not taken.
✗ Branch 4 not taken.
✓ Branch 5 taken 4 times.
 4 if (s->width || s->height || *got_frame) {
1417 ✗ av_log(avctx, AV_LOG_ERROR, "Canvas dimensions are already set\n");
1418 ✗ return AVERROR_INVALIDDATA;
1419 }
1420 4 vp8x_flags = bytestream2_get_byte(&gb);
1421 4 bytestream2_skip(&gb, 3);
1422 4 s->width = bytestream2_get_le24(&gb) + 1;
1423 4 s->height = bytestream2_get_le24(&gb) + 1;
1424 4 ret = av_image_check_size(s->width, s->height, 0, avctx);
1425
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 4 times.
 4 if (ret < 0)
1426 ✗ return ret;
1427 4 break;
1428 2 case MKTAG('A', 'L', 'P', 'H'): {
1429 int alpha_header, filter_m, compression;
1430
1431
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!(vp8x_flags & VP8X_FLAG_ALPHA)) {
1432 ✗ av_log(avctx, AV_LOG_WARNING,
1433 "ALPHA chunk present, but alpha bit not set in the "
1434 "VP8X header\n");
1435 }
1436
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (chunk_size == 0) {
1437 ✗ av_log(avctx, AV_LOG_ERROR, "invalid ALPHA chunk size\n");
1438 ✗ return AVERROR_INVALIDDATA;
1439 }
1440 2 alpha_header = bytestream2_get_byte(&gb);
1441 2 s->alpha_data = avpkt->data + bytestream2_tell(&gb);
1442 2 s->alpha_data_size = chunk_size - 1;
1443 2 bytestream2_skip(&gb, s->alpha_data_size);
1444
1445 2 filter_m = (alpha_header >> 2) & 0x03;
1446 2 compression = alpha_header & 0x03;
1447
1448
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (compression > ALPHA_COMPRESSION_VP8L) {
1449 ✗ av_log(avctx, AV_LOG_VERBOSE,
1450 "skipping unsupported ALPHA chunk\n");
1451 } else {
1452 2 s->has_alpha = 1;
1453 2 s->alpha_compression = compression;
1454 2 s->alpha_filter = filter_m;
1455 }
1456
1457 2 break;
1458 }
1459 2 case MKTAG('E', 'X', 'I', 'F'): {
1460 2 AVBufferRef *exif_buf = NULL;
1461
1462
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (s->has_exif) {
1463 ✗ av_log(avctx, AV_LOG_VERBOSE, "Ignoring extra EXIF chunk\n");
1464 ✗ goto exif_end;
1465 }
1466
1467
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!(vp8x_flags & VP8X_FLAG_EXIF_METADATA))
1468 ✗ av_log(avctx, AV_LOG_WARNING,
1469 "EXIF chunk present, but Exif bit not set in the "
1470 "VP8X header\n");
1471
1472 2 exif_buf = av_buffer_alloc(chunk_size);
1473
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 2 times.
 2 if (!exif_buf) {
1474 ✗ av_log(avctx, AV_LOG_WARNING, "unable to allocate EXIF buffer\n");
1475 ✗ goto exif_end;
1476 }
1477 2 s->has_exif = 1;
1478 2 memcpy(exif_buf->data, gb.buffer, chunk_size);
1479
1480 2 ret = ff_decode_exif_attach_buffer(avctx, p, &exif_buf, AV_EXIF_TIFF_HEADER);
1481
1/2
✓ Branch 0 taken 2 times.
✗ Branch 1 not taken.
 2 if (ret < 0)
1482 ✗ av_log(avctx, AV_LOG_WARNING, "unable to attach EXIF buffer\n");
1483
1484 2 exif_end:
1485 2 bytestream2_skip(&gb, chunk_size);
1486 2 break;
1487 }
1488 ✗ case MKTAG('I', 'C', 'C', 'P'): {
1489 AVFrameSideData *sd;
1490
1491 ✗ if (s->has_iccp) {
1492 ✗ av_log(avctx, AV_LOG_VERBOSE, "Ignoring extra ICCP chunk\n");
1493 ✗ bytestream2_skip(&gb, chunk_size);
1494 ✗ break;
1495 }
1496 ✗ if (!(vp8x_flags & VP8X_FLAG_ICC))
1497 ✗ av_log(avctx, AV_LOG_WARNING,
1498 "ICCP chunk present, but ICC Profile bit not set in the "
1499 "VP8X header\n");
1500
1501 ✗ s->has_iccp = 1;
1502
1503 ✗ ret = ff_frame_new_side_data(avctx, p, AV_FRAME_DATA_ICC_PROFILE, chunk_size, &sd);
1504 ✗ if (ret < 0)
1505 ✗ return ret;
1506
1507 ✗ if (sd) {
1508 ✗ bytestream2_get_buffer(&gb, sd->data, chunk_size);
1509 } else {
1510 ✗ bytestream2_skip(&gb, chunk_size);
1511 }
1512 ✗ break;
1513 }
1514 ✗ case MKTAG('A', 'N', 'I', 'M'):
1515 case MKTAG('A', 'N', 'M', 'F'):
1516 ✗ av_log(avctx, AV_LOG_WARNING, "skipping unsupported chunk: %s\n",
1517 ✗ av_fourcc2str(chunk_type));
1518 ✗ bytestream2_skip(&gb, chunk_size);
1519 ✗ break;
1520 ✗ case MKTAG('X', 'M', 'P', ' '): {
1521 ✗ if (s->has_xmp) {
1522 ✗ av_log(avctx, AV_LOG_VERBOSE, "Ignoring extra XMP chunk\n");
1523 ✗ bytestream2_skip(&gb, chunk_size);
1524 ✗ break;
1525 }
1526 ✗ if (!(vp8x_flags & VP8X_FLAG_XMP_METADATA))
1527 ✗ av_log(avctx, AV_LOG_WARNING,
1528 "XMP chunk present, but XMP bit not set in the "
1529 "VP8X header\n");
1530
1531 ✗ s->has_xmp = 1;
1532
1533 // there are at least chunk_size bytes left to read
1534 ✗ uint8_t *buffer = av_malloc(chunk_size + 1);
1535 ✗ if (!buffer)
1536 ✗ return AVERROR(ENOMEM);
1537
1538 ✗ bytestream2_get_buffer(&gb, buffer, chunk_size);
1539 ✗ buffer[chunk_size] = '\0';
1540
1541 ✗ av_dict_set(&p->metadata, "xmp", buffer, AV_DICT_DONT_STRDUP_VAL);
1542 ✗ break;
1543 }
1544 ✗ default:
1545 ✗ av_log(avctx, AV_LOG_VERBOSE, "skipping unknown chunk: %s\n",
1546 ✗ av_fourcc2str(chunk_type));
1547 ✗ bytestream2_skip(&gb, chunk_size);
1548 ✗ break;
1549 }
1550 }
1551
1552
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 16 times.
 16 if (!*got_frame) {
1553 ✗ av_log(avctx, AV_LOG_ERROR, "image data not found\n");
1554 ✗ return AVERROR_INVALIDDATA;
1555 }
1556
1557 16 return avpkt->size;
1558 }
1559
1560 16 static av_cold int webp_decode_init(AVCodecContext *avctx)
1561 {
1562 16 WebPContext *s = avctx->priv_data;
1563
1564 16 s->pkt = av_packet_alloc();
1565
1/2
✗ Branch 0 not taken.
✓ Branch 1 taken 16 times.
 16 if (!s->pkt)
1566 ✗ return AVERROR(ENOMEM);
1567
1568 16 return 0;
1569 }
1570
1571 16 static av_cold int webp_decode_close(AVCodecContext *avctx)
1572 {
1573 16 WebPContext *s = avctx->priv_data;
1574
1575 16 av_packet_free(&s->pkt);
1576
1577
2/2
✓ Branch 0 taken 6 times.
✓ Branch 1 taken 10 times.
 16 if (s->initialized)
1578 6 return ff_vp8_decode_free(avctx);
1579
1580 10 return 0;
1581 }
1582
1583 const FFCodec ff_webp_decoder = {
1584 .p.name = "webp",
1585 CODEC_LONG_NAME("WebP image"),
1586 .p.type = AVMEDIA_TYPE_VIDEO,
1587 .p.id = AV_CODEC_ID_WEBP,
1588 .priv_data_size = sizeof(WebPContext),
1589 .init = webp_decode_init,
1590 FF_CODEC_DECODE_CB(webp_decode_frame),
1591 .close = webp_decode_close,
1592 .p.capabilities = AV_CODEC_CAP_DR1 | AV_CODEC_CAP_FRAME_THREADS,
1593 .caps_internal = FF_CODEC_CAP_ICC_PROFILES |
1594 FF_CODEC_CAP_USES_PROGRESSFRAMES,
1595 };
1596