• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Microsoft Advanced Streaming Format demuxer
3  * Copyright (c) 2014 Alexandra Hájková
4  *
5  * This file is part of FFmpeg.
6  *
7  * FFmpeg is free software; you can redistribute it and/or
8  * modify it under the terms of the GNU Lesser General Public
9  * License as published by the Free Software Foundation; either
10  * version 2.1 of the License, or (at your option) any later version.
11  *
12  * FFmpeg is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15  * Lesser General Public License for more details.
16  *
17  * You should have received a copy of the GNU Lesser General Public
18  * License along with FFmpeg; if not, write to the Free Software
19  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20  */
21 
22 #include "libavutil/attributes.h"
23 #include "libavutil/avstring.h"
24 #include "libavutil/bswap.h"
25 #include "libavutil/common.h"
26 #include "libavutil/dict.h"
27 #include "libavutil/internal.h"
28 #include "libavutil/mathematics.h"
29 #include "libavutil/opt.h"
30 #include "libavutil/time_internal.h"
31 
32 #include "avformat.h"
33 #include "avio_internal.h"
34 #include "avlanguage.h"
35 #include "id3v2.h"
36 #include "internal.h"
37 #include "riff.h"
38 #include "asf.h"
39 #include "asfcrypt.h"
40 
41 #define ASF_BOOL                              0x2
42 #define ASF_WORD                              0x5
43 #define ASF_GUID                              0x6
44 #define ASF_DWORD                             0x3
45 #define ASF_QWORD                             0x4
46 #define ASF_UNICODE                           0x0
47 #define ASF_FLAG_BROADCAST                    0x1
48 #define ASF_BYTE_ARRAY                        0x1
49 #define ASF_TYPE_AUDIO                        0x2
50 #define ASF_TYPE_VIDEO                        0x1
51 #define ASF_STREAM_NUM                        0x7F
52 #define ASF_MAX_STREAMS                       128
53 #define BMP_HEADER_SIZE                       40
54 #define ASF_NUM_OF_PAYLOADS                   0x3F
55 #define ASF_ERROR_CORRECTION_LENGTH_TYPE      0x60
56 #define ASF_PACKET_ERROR_CORRECTION_DATA_SIZE 0x2
57 
58 typedef struct GUIDParseTable {
59     const char *name;
60     ff_asf_guid guid;
61     int (*read_object)(AVFormatContext *, const struct GUIDParseTable *);
62     int is_subobject;
63 } GUIDParseTable;
64 
65 typedef struct ASFPacket {
66     AVPacket avpkt;
67     int64_t dts;
68     uint32_t frame_num; // ASF payloads with the same number are parts of the same frame
69     int flags;
70     int data_size;
71     int duration;
72     int size_left;
73     uint8_t stream_index;
74 } ASFPacket;
75 
76 typedef struct ASFStream {
77     uint8_t stream_index; // from packet header
78     int index;  // stream index in AVFormatContext, set in asf_read_stream_properties
79     int type;
80     int indexed; // added index entries from the Simple Index Object or not
81     int8_t span;   // for deinterleaving
82     uint16_t virtual_pkt_len;
83     uint16_t virtual_chunk_len;
84     int16_t lang_idx;
85     ASFPacket pkt;
86 } ASFStream;
87 
88 typedef struct ASFStreamData{
89     char langs[32];
90     AVDictionary *asf_met; // for storing per-stream metadata
91     AVRational aspect_ratio;
92 } ASFStreamData;
93 
94 typedef struct ASFContext {
95     int data_reached;
96     int is_simple_index; // is simple index present or not 1/0
97     int is_header;
98 
99     uint64_t preroll;
100     uint64_t nb_packets; // ASF packets
101     uint32_t packet_size;
102     int64_t send_time;
103     int duration;
104 
105     uint32_t b_flags;    // flags with broadcast flag
106     uint32_t prop_flags; // file properties object flags
107 
108     uint64_t data_size; // data object size
109     uint64_t unknown_size; // size of the unknown object
110 
111     int64_t offset; // offset of the current object
112 
113     int64_t data_offset;
114     int64_t first_packet_offset; // packet offset
115     int64_t unknown_offset;   // for top level header objects or subobjects without specified behavior
116 
117     // ASF file must not contain more than 128 streams according to the specification
118     ASFStream *asf_st[ASF_MAX_STREAMS];
119     ASFStreamData asf_sd[ASF_MAX_STREAMS];
120     int nb_streams;
121 
122     int stream_index; // from packet header, for the subpayload case
123 
124     // packet parameters
125     uint64_t sub_header_offset; // offset of subpayload header
126     int64_t sub_dts;
127     uint8_t dts_delta; // for subpayloads
128     uint32_t packet_size_internal; // packet size stored inside ASFPacket, can be 0
129     int64_t packet_offset; // offset of the current packet inside Data Object
130     uint32_t pad_len; // padding after payload
131     uint32_t rep_data_len;
132 
133     // packet state
134     uint64_t sub_left;  // subpayloads left or not
135     unsigned int nb_sub; // number of subpayloads read so far from the current ASF packet
136     uint16_t mult_sub_len; // total length of subpayloads array inside multiple payload
137     uint64_t nb_mult_left; // multiple payloads left
138     int return_subpayload;
139     enum {
140         PARSE_PACKET_HEADER,
141         READ_SINGLE,
142         READ_MULTI,
143         READ_MULTI_SUB
144     } state;
145 } ASFContext;
146 
147 static int detect_unknown_subobject(AVFormatContext *s, int64_t offset, int64_t size);
148 static const GUIDParseTable *find_guid(ff_asf_guid guid);
149 
asf_probe(const AVProbeData * pd)150 static int asf_probe(const AVProbeData *pd)
151 {
152     /* check file header */
153     if (!ff_guidcmp(pd->buf, &ff_asf_header))
154         return AVPROBE_SCORE_MAX/2;
155     else
156         return 0;
157 }
158 
swap_guid(ff_asf_guid guid)159 static void swap_guid(ff_asf_guid guid)
160 {
161     FFSWAP(unsigned char, guid[0], guid[3]);
162     FFSWAP(unsigned char, guid[1], guid[2]);
163     FFSWAP(unsigned char, guid[4], guid[5]);
164     FFSWAP(unsigned char, guid[6], guid[7]);
165 }
166 
align_position(AVIOContext * pb,int64_t offset,uint64_t size)167 static void align_position(AVIOContext *pb,  int64_t offset, uint64_t size)
168 {
169     if (size < INT64_MAX - offset && avio_tell(pb) != offset + size)
170         avio_seek(pb, offset + size, SEEK_SET);
171 }
172 
asf_read_unknown(AVFormatContext * s,const GUIDParseTable * g)173 static int asf_read_unknown(AVFormatContext *s, const GUIDParseTable *g)
174 {
175     ASFContext *asf = s->priv_data;
176     AVIOContext *pb = s->pb;
177     uint64_t size   = avio_rl64(pb);
178     int ret;
179 
180     if (size > INT64_MAX)
181         return AVERROR_INVALIDDATA;
182 
183     if (asf->is_header)
184         asf->unknown_size = size;
185     asf->is_header = 0;
186     if (!g->is_subobject) {
187         if (!(ret = strcmp(g->name, "Header Extension")))
188             avio_skip(pb, 22); // skip reserved fields and Data Size
189         if ((ret = detect_unknown_subobject(s, asf->unknown_offset,
190                                             asf->unknown_size)) < 0)
191             return ret;
192     } else {
193         if (size < 24) {
194             av_log(s, AV_LOG_ERROR, "Too small size %"PRIu64" (< 24).\n", size);
195             return AVERROR_INVALIDDATA;
196         }
197         avio_skip(pb, size - 24);
198     }
199 
200     return 0;
201 }
202 
get_asf_string(AVIOContext * pb,int maxlen,char * buf,int buflen)203 static int get_asf_string(AVIOContext *pb, int maxlen, char *buf, int buflen)
204 {
205     char *q = buf;
206     int ret = 0;
207     if (buflen <= 0)
208         return AVERROR(EINVAL);
209     while (ret + 1 < maxlen) {
210         uint8_t tmp;
211         uint32_t ch;
212         GET_UTF16(ch, (ret += 2) <= maxlen ? avio_rl16(pb) : 0, break;);
213         PUT_UTF8(ch, tmp, if (q - buf < buflen - 1) *q++ = tmp;)
214     }
215     *q = 0;
216 
217     return ret;
218 }
219 
asf_read_marker(AVFormatContext * s,const GUIDParseTable * g)220 static int asf_read_marker(AVFormatContext *s, const GUIDParseTable *g)
221 {
222     ASFContext *asf = s->priv_data;
223     AVIOContext *pb = s->pb;
224     uint64_t size   = avio_rl64(pb);
225     int i, nb_markers, ret;
226     size_t len;
227     char name[1024];
228 
229     avio_skip(pb, 8);
230     avio_skip(pb, 8); // skip reserved GUID
231     nb_markers = avio_rl32(pb);
232     avio_skip(pb, 2); // skip reserved field
233     len = avio_rl16(pb);
234     for (i = 0; i < len; i++)
235         avio_skip(pb, 1);
236 
237     for (i = 0; i < nb_markers; i++) {
238         int64_t pts;
239 
240         avio_skip(pb, 8);
241         pts = avio_rl64(pb);
242         pts -= asf->preroll * 10000;
243         avio_skip(pb, 2); // entry length
244         avio_skip(pb, 4); // send time
245         avio_skip(pb, 4); // flags
246         len = avio_rl32(pb);
247 
248         if (avio_feof(pb))
249             return AVERROR_INVALIDDATA;
250 
251         if ((ret = avio_get_str16le(pb, len, name,
252                                     sizeof(name))) < len)
253             avio_skip(pb, len - ret);
254         avpriv_new_chapter(s, i, (AVRational) { 1, 10000000 }, pts,
255                            AV_NOPTS_VALUE, name);
256     }
257     align_position(pb, asf->offset, size);
258 
259     return 0;
260 }
261 
asf_read_metadata(AVFormatContext * s,const char * title,uint16_t len,unsigned char * ch,uint16_t buflen)262 static int asf_read_metadata(AVFormatContext *s, const char *title, uint16_t len,
263                              unsigned char *ch, uint16_t buflen)
264 {
265     AVIOContext *pb = s->pb;
266 
267     avio_get_str16le(pb, len, ch, buflen);
268     if (ch[0]) {
269         if (av_dict_set(&s->metadata, title, ch, 0) < 0)
270             av_log(s, AV_LOG_WARNING, "av_dict_set failed.\n");
271     }
272 
273     return 0;
274 }
275 
asf_read_value(AVFormatContext * s,const uint8_t * name,uint16_t val_len,int type,AVDictionary ** met)276 static int asf_read_value(AVFormatContext *s, const uint8_t *name,
277                           uint16_t val_len, int type, AVDictionary **met)
278 {
279     int ret;
280     uint8_t *value;
281     uint16_t buflen = 2 * val_len + 1;
282     AVIOContext *pb = s->pb;
283 
284     value = av_malloc(buflen);
285     if (!value)
286         return AVERROR(ENOMEM);
287     if (type == ASF_UNICODE) {
288         // get_asf_string reads UTF-16 and converts it to UTF-8 which needs longer buffer
289         if ((ret = get_asf_string(pb, val_len, value, buflen)) < 0)
290             goto failed;
291         if (av_dict_set(met, name, value, 0) < 0)
292             av_log(s, AV_LOG_WARNING, "av_dict_set failed.\n");
293     } else {
294         char buf[256];
295         if (val_len > sizeof(buf)) {
296             ret = AVERROR_INVALIDDATA;
297             goto failed;
298         }
299         if ((ret = avio_read(pb, value, val_len)) < 0)
300             goto failed;
301         if (ret < 2 * val_len)
302             value[ret] = '\0';
303         else
304             value[2 * val_len - 1] = '\0';
305         snprintf(buf, sizeof(buf), "%s", value);
306         if (av_dict_set(met, name, buf, 0) < 0)
307             av_log(s, AV_LOG_WARNING, "av_dict_set failed.\n");
308     }
309     av_freep(&value);
310 
311     return 0;
312 
313 failed:
314     av_freep(&value);
315     return ret;
316 }
asf_read_generic_value(AVIOContext * pb,int type,uint64_t * value)317 static int asf_read_generic_value(AVIOContext *pb, int type, uint64_t *value)
318 {
319 
320     switch (type) {
321     case ASF_BOOL:
322         *value = avio_rl16(pb);
323         break;
324     case ASF_DWORD:
325         *value = avio_rl32(pb);
326         break;
327     case ASF_QWORD:
328         *value = avio_rl64(pb);
329         break;
330     case ASF_WORD:
331         *value = avio_rl16(pb);
332         break;
333     default:
334         return AVERROR_INVALIDDATA;
335     }
336 
337     return 0;
338 }
339 
asf_set_metadata(AVFormatContext * s,const uint8_t * name,int type,AVDictionary ** met)340 static int asf_set_metadata(AVFormatContext *s, const uint8_t *name,
341                             int type, AVDictionary **met)
342 {
343     AVIOContext *pb = s->pb;
344     uint64_t value;
345     char buf[32];
346     int ret;
347 
348     ret = asf_read_generic_value(pb, type, &value);
349     if (ret < 0)
350         return ret;
351 
352     snprintf(buf, sizeof(buf), "%"PRIu64, value);
353     if (av_dict_set(met, name, buf, 0) < 0)
354         av_log(s, AV_LOG_WARNING, "av_dict_set failed.\n");
355 
356     return 0;
357 }
358 
359 /* MSDN claims that this should be "compatible with the ID3 frame, APIC",
360  * but in reality this is only loosely similar */
asf_read_picture(AVFormatContext * s,int len)361 static int asf_read_picture(AVFormatContext *s, int len)
362 {
363     ASFContext *asf       = s->priv_data;
364     AVPacket pkt          = { 0 };
365     const CodecMime *mime = ff_id3v2_mime_tags;
366     enum  AVCodecID id    = AV_CODEC_ID_NONE;
367     char mimetype[64];
368     uint8_t  *desc = NULL;
369     AVStream   *st = NULL;
370     int ret, type, picsize, desc_len;
371     ASFStream *asf_st;
372 
373     /* type + picsize + mime + desc */
374     if (len < 1 + 4 + 2 + 2) {
375         av_log(s, AV_LOG_ERROR, "Invalid attached picture size: %d.\n", len);
376         return AVERROR_INVALIDDATA;
377     }
378 
379     /* picture type */
380     type = avio_r8(s->pb);
381     len--;
382     if (type >= FF_ARRAY_ELEMS(ff_id3v2_picture_types) || type < 0) {
383         av_log(s, AV_LOG_WARNING, "Unknown attached picture type: %d.\n", type);
384         type = 0;
385     }
386 
387     /* picture data size */
388     picsize = avio_rl32(s->pb);
389     len    -= 4;
390 
391     /* picture MIME type */
392     len -= avio_get_str16le(s->pb, len, mimetype, sizeof(mimetype));
393     while (mime->id != AV_CODEC_ID_NONE) {
394         if (!strncmp(mime->str, mimetype, sizeof(mimetype))) {
395             id = mime->id;
396             break;
397         }
398         mime++;
399     }
400     if (id == AV_CODEC_ID_NONE) {
401         av_log(s, AV_LOG_ERROR, "Unknown attached picture mimetype: %s.\n",
402                mimetype);
403         return 0;
404     }
405 
406     if (picsize >= len) {
407         av_log(s, AV_LOG_ERROR, "Invalid attached picture data size: %d >= %d.\n",
408                picsize, len);
409         return AVERROR_INVALIDDATA;
410     }
411 
412     /* picture description */
413     desc_len = (len - picsize) * 2 + 1;
414     desc     = av_malloc(desc_len);
415     if (!desc)
416         return AVERROR(ENOMEM);
417     len -= avio_get_str16le(s->pb, len - picsize, desc, desc_len);
418 
419     ret = av_get_packet(s->pb, &pkt, picsize);
420     if (ret < 0)
421         goto fail;
422 
423     st  = avformat_new_stream(s, NULL);
424     if (!st) {
425         ret = AVERROR(ENOMEM);
426         goto fail;
427     }
428     asf->asf_st[asf->nb_streams] = av_mallocz(sizeof(*asf_st));
429     asf_st = asf->asf_st[asf->nb_streams];
430     if (!asf_st) {
431         ret = AVERROR(ENOMEM);
432         goto fail;
433     }
434 
435     st->disposition              |= AV_DISPOSITION_ATTACHED_PIC;
436     st->codecpar->codec_type      = asf_st->type = AVMEDIA_TYPE_VIDEO;
437     st->codecpar->codec_id        = id;
438     st->attached_pic              = pkt;
439     st->attached_pic.stream_index = asf_st->index = st->index;
440     st->attached_pic.flags       |= AV_PKT_FLAG_KEY;
441 
442     asf->nb_streams++;
443 
444     if (*desc) {
445         if (av_dict_set(&st->metadata, "title", desc, AV_DICT_DONT_STRDUP_VAL) < 0)
446             av_log(s, AV_LOG_WARNING, "av_dict_set failed.\n");
447     } else
448         av_freep(&desc);
449 
450     if (av_dict_set(&st->metadata, "comment", ff_id3v2_picture_types[type], 0) < 0)
451         av_log(s, AV_LOG_WARNING, "av_dict_set failed.\n");
452 
453     return 0;
454 
455 fail:
456     av_freep(&desc);
457     av_packet_unref(&pkt);
458     return ret;
459 }
460 
get_id3_tag(AVFormatContext * s,int len)461 static void get_id3_tag(AVFormatContext *s, int len)
462 {
463     ID3v2ExtraMeta *id3v2_extra_meta = NULL;
464 
465     ff_id3v2_read(s, ID3v2_DEFAULT_MAGIC, &id3v2_extra_meta, len);
466     if (id3v2_extra_meta) {
467         ff_id3v2_parse_apic(s, id3v2_extra_meta);
468         ff_id3v2_parse_chapters(s, id3v2_extra_meta);
469     }
470     ff_id3v2_free_extra_meta(&id3v2_extra_meta);
471 }
472 
process_metadata(AVFormatContext * s,const uint8_t * name,uint16_t name_len,uint16_t val_len,uint16_t type,AVDictionary ** met)473 static int process_metadata(AVFormatContext *s, const uint8_t *name, uint16_t name_len,
474                             uint16_t val_len, uint16_t type, AVDictionary **met)
475 {
476     int ret;
477     ff_asf_guid guid;
478 
479     if (val_len) {
480         switch (type) {
481         case ASF_UNICODE:
482             asf_read_value(s, name, val_len, type, met);
483             break;
484         case ASF_BYTE_ARRAY:
485             if (!strcmp(name, "WM/Picture")) // handle cover art
486                 asf_read_picture(s, val_len);
487             else if (!strcmp(name, "ID3")) // handle ID3 tag
488                 get_id3_tag(s, val_len);
489             else
490                 asf_read_value(s, name, val_len, type, met);
491             break;
492         case ASF_GUID:
493             ff_get_guid(s->pb, &guid);
494             break;
495         default:
496             if ((ret = asf_set_metadata(s, name, type, met)) < 0)
497                 return ret;
498             break;
499         }
500     }
501 
502     return 0;
503 }
504 
asf_read_ext_content(AVFormatContext * s,const GUIDParseTable * g)505 static int asf_read_ext_content(AVFormatContext *s, const GUIDParseTable *g)
506 {
507     ASFContext *asf  = s->priv_data;
508     AVIOContext *pb  = s->pb;
509     uint64_t size    = avio_rl64(pb);
510     uint16_t nb_desc = avio_rl16(pb);
511     int i, ret;
512 
513     for (i = 0; i < nb_desc; i++) {
514         uint16_t name_len, type, val_len;
515         uint8_t *name = NULL;
516 
517         name_len = avio_rl16(pb);
518         if (!name_len)
519             return AVERROR_INVALIDDATA;
520         name = av_malloc(name_len);
521         if (!name)
522             return AVERROR(ENOMEM);
523         avio_get_str16le(pb, name_len, name,
524                          name_len);
525         type    = avio_rl16(pb);
526         // BOOL values are 16 bits long in the Metadata Object
527         // but 32 bits long in the Extended Content Description Object
528         if (type == ASF_BOOL)
529             type = ASF_DWORD;
530         val_len = avio_rl16(pb);
531 
532         ret = process_metadata(s, name, name_len, val_len, type, &s->metadata);
533         av_freep(&name);
534         if (ret < 0)
535             return ret;
536     }
537 
538     align_position(pb, asf->offset, size);
539     return 0;
540 }
541 
find_stream(AVFormatContext * s,uint16_t st_num)542 static AVStream *find_stream(AVFormatContext *s, uint16_t st_num)
543 {
544     AVStream *st = NULL;
545     ASFContext *asf = s->priv_data;
546     int i;
547 
548     for (i = 0; i < asf->nb_streams; i++) {
549         if (asf->asf_st[i]->stream_index == st_num) {
550             st = s->streams[asf->asf_st[i]->index];
551             break;
552         }
553     }
554 
555     return st;
556 }
557 
asf_store_aspect_ratio(AVFormatContext * s,uint8_t st_num,uint8_t * name,int type)558 static int asf_store_aspect_ratio(AVFormatContext *s, uint8_t st_num, uint8_t *name, int type)
559 {
560     ASFContext *asf   = s->priv_data;
561     AVIOContext *pb   = s->pb;
562     uint64_t value = 0;
563     int ret;
564 
565     ret = asf_read_generic_value(pb, type, &value);
566     if (ret < 0)
567         return ret;
568 
569     if (st_num < ASF_MAX_STREAMS) {
570         if (!strcmp(name, "AspectRatioX"))
571             asf->asf_sd[st_num].aspect_ratio.num = value;
572         else
573             asf->asf_sd[st_num].aspect_ratio.den = value;
574     }
575     return 0;
576 }
577 
asf_read_metadata_obj(AVFormatContext * s,const GUIDParseTable * g)578 static int asf_read_metadata_obj(AVFormatContext *s, const GUIDParseTable *g)
579 {
580     ASFContext *asf   = s->priv_data;
581     AVIOContext *pb   = s->pb;
582     uint64_t size     = avio_rl64(pb);
583     uint16_t nb_recs  = avio_rl16(pb); // number of records in the Description Records list
584     int i, ret;
585 
586     for (i = 0; i < nb_recs; i++) {
587         uint16_t name_len, buflen, type, val_len, st_num;
588         uint8_t *name = NULL;
589 
590         avio_skip(pb, 2); // skip reserved field
591         st_num   = avio_rl16(pb);
592         name_len = avio_rl16(pb);
593         buflen   = 2 * name_len + 1;
594         if (!name_len)
595             break;
596         type     = avio_rl16(pb);
597         val_len  = avio_rl32(pb);
598         name     = av_malloc(buflen);
599         if (!name)
600             return AVERROR(ENOMEM);
601         avio_get_str16le(pb, name_len, name,
602                          buflen);
603         if (!strcmp(name, "AspectRatioX") || !strcmp(name, "AspectRatioY")) {
604             ret = asf_store_aspect_ratio(s, st_num, name, type);
605             if (ret < 0) {
606                 av_freep(&name);
607                 break;
608             }
609         } else {
610             if (st_num < ASF_MAX_STREAMS) {
611                 if ((ret = process_metadata(s, name, name_len, val_len, type,
612                                             &asf->asf_sd[st_num].asf_met)) < 0) {
613                     av_freep(&name);
614                     break;
615                 }
616             }
617         }
618         av_freep(&name);
619     }
620 
621     align_position(pb, asf->offset, size);
622     return 0;
623 }
624 
asf_read_content_desc(AVFormatContext * s,const GUIDParseTable * g)625 static int asf_read_content_desc(AVFormatContext *s, const GUIDParseTable *g)
626 {
627     ASFContext *asf = s->priv_data;
628     AVIOContext *pb = s->pb;
629     int i;
630     static const char *const titles[] =
631     { "Title", "Author", "Copyright", "Description", "Rate" };
632     uint16_t len[5], buflen[5] = { 0 };
633     uint8_t *ch;
634     uint64_t size = avio_rl64(pb);
635 
636     for (i = 0; i < 5; i++) {
637         len[i]  = avio_rl16(pb);
638         // utf8 string should be <= 2 * utf16 string, extra byte for the terminator
639         buflen[i]  = 2 * len[i] + 1;
640     }
641 
642     for (i = 0; i < 5; i++) {
643         ch = av_malloc(buflen[i]);
644         if (!ch)
645             return(AVERROR(ENOMEM));
646         asf_read_metadata(s, titles[i], len[i], ch, buflen[i]);
647         av_freep(&ch);
648     }
649     align_position(pb, asf->offset, size);
650 
651     return 0;
652 }
653 
asf_read_properties(AVFormatContext * s,const GUIDParseTable * g)654 static int asf_read_properties(AVFormatContext *s, const GUIDParseTable *g)
655 {
656     ASFContext *asf = s->priv_data;
657     AVIOContext *pb = s->pb;
658     time_t creation_time;
659 
660     avio_rl64(pb); // read object size
661     avio_skip(pb, 16); // skip File ID
662     avio_skip(pb, 8);  // skip File size
663     creation_time = avio_rl64(pb);
664     if (!(asf->b_flags & ASF_FLAG_BROADCAST)) {
665         struct tm tmbuf;
666         struct tm *tm;
667         char buf[64];
668 
669         // creation date is in 100 ns units from 1 Jan 1601, conversion to s
670         creation_time /= 10000000;
671         // there are 11644473600 seconds between 1 Jan 1601 and 1 Jan 1970
672         creation_time -= 11644473600;
673         tm = gmtime_r(&creation_time, &tmbuf);
674         if (tm) {
675             if (!strftime(buf, sizeof(buf), "%Y-%m-%d %H:%M:%S", tm))
676                 buf[0] = '\0';
677         } else
678             buf[0] = '\0';
679         if (buf[0]) {
680             if (av_dict_set(&s->metadata, "creation_time", buf, 0) < 0)
681                 av_log(s, AV_LOG_WARNING, "av_dict_set failed.\n");
682         }
683     }
684     asf->nb_packets  = avio_rl64(pb);
685     asf->duration    = avio_rl64(pb) / 10000; // stream duration
686     avio_skip(pb, 8); // skip send duration
687     asf->preroll     = avio_rl64(pb);
688     asf->duration   -= asf->preroll;
689     asf->b_flags     = avio_rl32(pb);
690     avio_skip(pb, 4); // skip minimal packet size
691     asf->packet_size  = avio_rl32(pb);
692     avio_skip(pb, 4); // skip max_bitrate
693 
694     return 0;
695 }
696 
parse_video_info(AVIOContext * pb,AVStream * st)697 static int parse_video_info(AVIOContext *pb, AVStream *st)
698 {
699     uint16_t size_asf; // ASF-specific Format Data size
700     uint32_t size_bmp; // BMP_HEADER-specific Format Data size
701     unsigned int tag;
702 
703     st->codecpar->width  = avio_rl32(pb);
704     st->codecpar->height = avio_rl32(pb);
705     avio_skip(pb, 1); // skip reserved flags
706     size_asf = avio_rl16(pb);
707     tag = ff_get_bmp_header(pb, st, &size_bmp);
708     st->codecpar->codec_tag = tag;
709     st->codecpar->codec_id  = ff_codec_get_id(ff_codec_bmp_tags, tag);
710     size_bmp = FFMAX(size_asf, size_bmp);
711 
712     if (size_bmp > BMP_HEADER_SIZE &&
713         size_bmp < INT_MAX - AV_INPUT_BUFFER_PADDING_SIZE) {
714         int ret;
715         st->codecpar->extradata_size  = size_bmp - BMP_HEADER_SIZE;
716         if (!(st->codecpar->extradata = av_malloc(st->codecpar->extradata_size +
717                                                AV_INPUT_BUFFER_PADDING_SIZE))) {
718             st->codecpar->extradata_size = 0;
719             return AVERROR(ENOMEM);
720         }
721         memset(st->codecpar->extradata + st->codecpar->extradata_size , 0,
722                AV_INPUT_BUFFER_PADDING_SIZE);
723         if ((ret = avio_read(pb, st->codecpar->extradata,
724                              st->codecpar->extradata_size)) < 0)
725             return ret;
726     }
727     return 0;
728 }
729 
asf_read_stream_properties(AVFormatContext * s,const GUIDParseTable * g)730 static int asf_read_stream_properties(AVFormatContext *s, const GUIDParseTable *g)
731 {
732     ASFContext *asf = s->priv_data;
733     AVIOContext *pb = s->pb;
734     uint64_t size;
735     uint32_t err_data_len, ts_data_len; // type specific data length
736     uint16_t flags;
737     ff_asf_guid stream_type;
738     enum AVMediaType type;
739     int i, ret;
740     uint8_t stream_index;
741     AVStream *st;
742     ASFStream *asf_st;
743 
744     // ASF file must not contain more than 128 streams according to the specification
745     if (asf->nb_streams >= ASF_MAX_STREAMS)
746         return AVERROR_INVALIDDATA;
747 
748     size = avio_rl64(pb);
749     ff_get_guid(pb, &stream_type);
750     if (!ff_guidcmp(&stream_type, &ff_asf_audio_stream))
751         type = AVMEDIA_TYPE_AUDIO;
752     else if (!ff_guidcmp(&stream_type, &ff_asf_video_stream))
753         type = AVMEDIA_TYPE_VIDEO;
754     else if (!ff_guidcmp(&stream_type, &ff_asf_jfif_media))
755         type = AVMEDIA_TYPE_VIDEO;
756     else if (!ff_guidcmp(&stream_type, &ff_asf_command_stream))
757         type = AVMEDIA_TYPE_DATA;
758     else if (!ff_guidcmp(&stream_type,
759                          &ff_asf_ext_stream_embed_stream_header))
760         type = AVMEDIA_TYPE_UNKNOWN;
761     else
762         return AVERROR_INVALIDDATA;
763 
764     ff_get_guid(pb, &stream_type); // error correction type
765     avio_skip(pb, 8); // skip the time offset
766     ts_data_len      = avio_rl32(pb);
767     err_data_len     = avio_rl32(pb);
768     flags            = avio_rl16(pb); // bit 15 - Encrypted Content
769 
770     stream_index = flags & ASF_STREAM_NUM;
771     for (i = 0; i < asf->nb_streams; i++)
772         if (stream_index == asf->asf_st[i]->stream_index) {
773             av_log(s, AV_LOG_WARNING,
774                    "Duplicate stream found, this stream will be ignored.\n");
775             align_position(pb, asf->offset, size);
776             return 0;
777         }
778 
779     st = avformat_new_stream(s, NULL);
780     if (!st)
781         return AVERROR(ENOMEM);
782     avpriv_set_pts_info(st, 32, 1, 1000); // pts should be dword, in milliseconds
783     st->codecpar->codec_type = type;
784     asf->asf_st[asf->nb_streams] = av_mallocz(sizeof(*asf_st));
785     if (!asf->asf_st[asf->nb_streams])
786         return AVERROR(ENOMEM);
787     asf_st                       = asf->asf_st[asf->nb_streams];
788     asf->nb_streams++;
789     asf_st->stream_index         = stream_index;
790     asf_st->index                = st->index;
791     asf_st->indexed              = 0;
792     st->id                       = flags & ASF_STREAM_NUM;
793     av_init_packet(&asf_st->pkt.avpkt);
794     asf_st->pkt.data_size        = 0;
795     avio_skip(pb, 4); // skip reserved field
796 
797     switch (type) {
798     case AVMEDIA_TYPE_AUDIO:
799         asf_st->type = AVMEDIA_TYPE_AUDIO;
800         if ((ret = ff_get_wav_header(s, pb, st->codecpar, ts_data_len, 0)) < 0)
801             return ret;
802         break;
803     case AVMEDIA_TYPE_VIDEO:
804         asf_st->type = AVMEDIA_TYPE_VIDEO;
805         if ((ret = parse_video_info(pb, st)) < 0)
806             return ret;
807         break;
808     default:
809         avio_skip(pb, ts_data_len);
810         break;
811     }
812 
813     if (err_data_len) {
814         if (type == AVMEDIA_TYPE_AUDIO) {
815             uint8_t span = avio_r8(pb);
816             if (span > 1) {
817                 asf_st->span              = span;
818                 asf_st->virtual_pkt_len   = avio_rl16(pb);
819                 asf_st->virtual_chunk_len = avio_rl16(pb);
820                 if (!asf_st->virtual_chunk_len || !asf_st->virtual_pkt_len)
821                     return AVERROR_INVALIDDATA;
822                 avio_skip(pb, err_data_len - 5);
823             } else
824                 avio_skip(pb, err_data_len - 1);
825         } else
826             avio_skip(pb, err_data_len);
827     }
828 
829     align_position(pb, asf->offset, size);
830 
831     return 0;
832 }
833 
set_language(AVFormatContext * s,const char * rfc1766,AVDictionary ** met)834 static void set_language(AVFormatContext *s, const char *rfc1766, AVDictionary **met)
835 {
836     // language abbr should contain at least 2 chars
837     if (rfc1766 && strlen(rfc1766) > 1) {
838         const char primary_tag[3] = { rfc1766[0], rfc1766[1], '\0' }; // ignore country code if any
839         const char *iso6392       = ff_convert_lang_to(primary_tag,
840                                                        AV_LANG_ISO639_2_BIBL);
841         if (iso6392)
842             if (av_dict_set(met, "language", iso6392, 0) < 0)
843                 av_log(s, AV_LOG_WARNING, "av_dict_set failed.\n");
844     }
845 }
846 
asf_read_ext_stream_properties(AVFormatContext * s,const GUIDParseTable * g)847 static int asf_read_ext_stream_properties(AVFormatContext *s, const GUIDParseTable *g)
848 {
849     ASFContext *asf = s->priv_data;
850     AVIOContext *pb = s->pb;
851     AVStream *st    = NULL;
852     ff_asf_guid guid;
853     uint16_t nb_st_name, nb_pay_exts, st_num, lang_idx;
854     int i, ret;
855     uint32_t bitrate;
856     uint64_t start_time, end_time, time_per_frame;
857     uint64_t size = avio_rl64(pb);
858 
859     start_time = avio_rl64(pb);
860     end_time   = avio_rl64(pb);
861     bitrate    = avio_rl32(pb);
862     avio_skip(pb, 28); // skip some unused values
863     st_num     = avio_rl16(pb);
864     st_num    &= ASF_STREAM_NUM;
865     lang_idx   = avio_rl16(pb); // Stream Language ID Index
866     for (i = 0; i < asf->nb_streams; i++) {
867         if (st_num == asf->asf_st[i]->stream_index) {
868             st                       = s->streams[asf->asf_st[i]->index];
869             asf->asf_st[i]->lang_idx = lang_idx;
870             break;
871         }
872     }
873     time_per_frame = avio_rl64(pb); // average time per frame
874     if (st) {
875         st->start_time           = start_time;
876         st->duration             = end_time - start_time;
877         st->codecpar->bit_rate   = bitrate;
878         st->avg_frame_rate.num   = 10000000;
879         st->avg_frame_rate.den   = time_per_frame;
880     }
881     nb_st_name = avio_rl16(pb);
882     nb_pay_exts   = avio_rl16(pb);
883     for (i = 0; i < nb_st_name; i++) {
884         uint16_t len;
885 
886         avio_rl16(pb); // Language ID Index
887         len = avio_rl16(pb);
888         avio_skip(pb, len);
889     }
890 
891     for (i = 0; i < nb_pay_exts; i++) {
892         uint32_t len;
893         avio_skip(pb, 16); // Extension System ID
894         avio_skip(pb, 2);  // Extension Data Size
895         len = avio_rl32(pb);
896         avio_skip(pb, len);
897     }
898 
899     if ((ret = ff_get_guid(pb, &guid)) < 0) {
900         align_position(pb, asf->offset, size);
901 
902         return 0;
903     }
904 
905     g = find_guid(guid);
906     if (g && !(strcmp(g->name, "Stream Properties"))) {
907         if ((ret = g->read_object(s, g)) < 0)
908             return ret;
909     }
910 
911     align_position(pb, asf->offset, size);
912     return 0;
913 }
914 
asf_read_language_list(AVFormatContext * s,const GUIDParseTable * g)915 static int asf_read_language_list(AVFormatContext *s, const GUIDParseTable *g)
916 {
917     ASFContext *asf   = s->priv_data;
918     AVIOContext *pb   = s->pb;
919     int i, ret;
920     uint64_t size     = avio_rl64(pb);
921     uint16_t nb_langs = avio_rl16(pb);
922 
923     if (nb_langs < ASF_MAX_STREAMS) {
924         for (i = 0; i < nb_langs; i++) {
925             size_t len;
926             len = avio_r8(pb);
927             if (!len)
928                 len = 6;
929             if ((ret = get_asf_string(pb, len, asf->asf_sd[i].langs,
930                                       sizeof(asf->asf_sd[i].langs))) < 0) {
931                 return ret;
932             }
933         }
934     }
935 
936     align_position(pb, asf->offset, size);
937     return 0;
938 }
939 
940 // returns data object offset when reading this object for the first time
asf_read_data(AVFormatContext * s,const GUIDParseTable * g)941 static int asf_read_data(AVFormatContext *s, const GUIDParseTable *g)
942 {
943     ASFContext *asf = s->priv_data;
944     AVIOContext *pb = s->pb;
945     uint64_t size   = asf->data_size = avio_rl64(pb);
946     int i;
947 
948     if (!asf->data_reached) {
949         asf->data_reached       = 1;
950         asf->data_offset        = asf->offset;
951     }
952 
953     for (i = 0; i < asf->nb_streams; i++) {
954         if (!(asf->b_flags & ASF_FLAG_BROADCAST))
955             s->streams[i]->duration = asf->duration;
956     }
957     asf->nb_mult_left           = 0;
958     asf->sub_left               = 0;
959     asf->state                  = PARSE_PACKET_HEADER;
960     asf->return_subpayload      = 0;
961     asf->packet_size_internal   = 0;
962     avio_skip(pb, 16); // skip File ID
963     size = avio_rl64(pb); // Total Data Packets
964     if (size != asf->nb_packets)
965         av_log(s, AV_LOG_WARNING,
966                "Number of Packets from File Properties Object is not equal to Total"
967                "Datapackets value! num of packets %"PRIu64" total num %"PRIu64".\n",
968                size, asf->nb_packets);
969     avio_skip(pb, 2); // skip reserved field
970     asf->first_packet_offset = avio_tell(pb);
971     if ((pb->seekable & AVIO_SEEKABLE_NORMAL) && !(asf->b_flags & ASF_FLAG_BROADCAST))
972         align_position(pb, asf->offset, asf->data_size);
973 
974     return 0;
975 }
976 
asf_read_simple_index(AVFormatContext * s,const GUIDParseTable * g)977 static int asf_read_simple_index(AVFormatContext *s, const GUIDParseTable *g)
978 {
979     ASFContext *asf = s->priv_data;
980     AVIOContext *pb = s->pb;
981     AVStream *st    = NULL;
982     uint64_t interval; // index entry time interval in 100 ns units, usually it's 1s
983     uint32_t pkt_num, nb_entries;
984     int32_t prev_pkt_num = -1;
985     int i;
986     int64_t offset;
987     uint64_t size = avio_rl64(pb);
988 
989     // simple index objects should be ordered by stream number, this loop tries to find
990     // the first not indexed video stream
991     for (i = 0; i < asf->nb_streams; i++) {
992         if ((asf->asf_st[i]->type == AVMEDIA_TYPE_VIDEO) && !asf->asf_st[i]->indexed) {
993             asf->asf_st[i]->indexed = 1;
994             st = s->streams[asf->asf_st[i]->index];
995             break;
996         }
997     }
998     if (!st) {
999         avio_skip(pb, size - 24); // if there's no video stream, skip index object
1000         return 0;
1001     }
1002     avio_skip(pb, 16); // skip File ID
1003     interval = avio_rl64(pb);
1004     avio_skip(pb, 4);
1005     nb_entries = avio_rl32(pb);
1006     for (i = 0; i < nb_entries; i++) {
1007         pkt_num = avio_rl32(pb);
1008         offset = avio_skip(pb, 2);
1009         if (offset < 0) {
1010             av_log(s, AV_LOG_ERROR, "Skipping failed in asf_read_simple_index.\n");
1011             return offset;
1012         }
1013         if (prev_pkt_num != pkt_num) {
1014             av_add_index_entry(st, asf->first_packet_offset + asf->packet_size *
1015                                pkt_num, av_rescale(interval, i, 10000),
1016                                asf->packet_size, 0, AVINDEX_KEYFRAME);
1017             prev_pkt_num = pkt_num;
1018         }
1019     }
1020     asf->is_simple_index = 1;
1021     align_position(pb, asf->offset, size);
1022 
1023     return 0;
1024 }
1025 
1026 static const GUIDParseTable gdef[] = {
1027     { "Data",                         { 0x75, 0xB2, 0x26, 0x36, 0x66, 0x8E, 0x11, 0xCF, 0xA6, 0xD9, 0x00, 0xAA, 0x00, 0x62, 0xCE, 0x6C }, asf_read_data, 1 },
1028     { "Simple Index",                 { 0x33, 0x00, 0x08, 0x90, 0xE5, 0xB1, 0x11, 0xCF, 0x89, 0xF4, 0x00, 0xA0, 0xC9, 0x03, 0x49, 0xCB }, asf_read_simple_index, 1 },
1029     { "Content Description",          { 0x75, 0xB2, 0x26, 0x33, 0x66 ,0x8E, 0x11, 0xCF, 0xA6, 0xD9, 0x00, 0xAA, 0x00, 0x62, 0xCE, 0x6C }, asf_read_content_desc, 1 },
1030     { "Extended Content Description", { 0xD2, 0xD0, 0xA4, 0x40, 0xE3, 0x07, 0x11, 0xD2, 0x97, 0xF0, 0x00, 0xA0, 0xC9, 0x5e, 0xA8, 0x50 }, asf_read_ext_content, 1 },
1031     { "Stream Bitrate Properties",    { 0x7B, 0xF8, 0x75, 0xCE, 0x46, 0x8D, 0x11, 0xD1, 0x8D, 0x82, 0x00, 0x60, 0x97, 0xC9, 0xA2, 0xB2 }, asf_read_unknown, 1 },
1032     { "File Properties",              { 0x8C, 0xAB, 0xDC, 0xA1, 0xA9, 0x47, 0x11, 0xCF, 0x8E, 0xE4, 0x00, 0xC0, 0x0C, 0x20, 0x53, 0x65 }, asf_read_properties, 1 },
1033     { "Header Extension",             { 0x5F, 0xBF, 0x03, 0xB5, 0xA9, 0x2E, 0x11, 0xCF, 0x8E, 0xE3, 0x00, 0xC0, 0x0C, 0x20, 0x53, 0x65 }, asf_read_unknown, 0 },
1034     { "Stream Properties",            { 0xB7, 0xDC, 0x07, 0x91, 0xA9, 0xB7, 0x11, 0xCF, 0x8E, 0xE6, 0x00, 0xC0, 0x0C, 0x20, 0x53, 0x65 }, asf_read_stream_properties, 1 },
1035     { "Codec List",                   { 0x86, 0xD1, 0x52, 0x40, 0x31, 0x1D, 0x11, 0xD0, 0xA3, 0xA4, 0x00, 0xA0, 0xC9, 0x03, 0x48, 0xF6 }, asf_read_unknown, 1 },
1036     { "Marker",                       { 0xF4, 0x87, 0xCD, 0x01, 0xA9, 0x51, 0x11, 0xCF, 0x8E, 0xE6, 0x00, 0xC0, 0x0C, 0x20, 0x53, 0x65 }, asf_read_marker, 1 },
1037     { "Script Command",               { 0x1E, 0xFB, 0x1A, 0x30, 0x0B, 0x62, 0x11, 0xD0, 0xA3, 0x9B, 0x00, 0xA0, 0xC9, 0x03, 0x48, 0xF6 }, asf_read_unknown, 1 },
1038     { "Language List",                { 0x7C, 0x43, 0x46, 0xa9, 0xef, 0xe0, 0x4B, 0xFC, 0xB2, 0x29, 0x39, 0x3e, 0xde, 0x41, 0x5c, 0x85 }, asf_read_language_list, 1},
1039     { "Padding",                      { 0x18, 0x06, 0xD4, 0x74, 0xCA, 0xDF, 0x45, 0x09, 0xA4, 0xBA, 0x9A, 0xAB, 0xCB, 0x96, 0xAA, 0xE8 }, asf_read_unknown, 1 },
1040     { "DRMv1 Header",                 { 0x22, 0x11, 0xB3, 0xFB, 0xBD, 0x23, 0x11, 0xD2, 0xB4, 0xB7, 0x00, 0xA0, 0xC9, 0x55, 0xFC, 0x6E }, asf_read_unknown, 1 },
1041     { "DRMv2 Header",                 { 0x29, 0x8A, 0xE6, 0x14, 0x26, 0x22, 0x4C, 0x17, 0xB9, 0x35, 0xDA, 0xE0, 0x7E, 0xE9, 0x28, 0x9c }, asf_read_unknown, 1 },
1042     { "Index",                        { 0xD6, 0xE2, 0x29, 0xD3, 0x35, 0xDA, 0x11, 0xD1, 0x90, 0x34, 0x00, 0xA0, 0xC9, 0x03, 0x49, 0xBE }, asf_read_unknown, 1 },
1043     { "Media Object Index",           { 0xFE, 0xB1, 0x03, 0xF8, 0x12, 0xAD, 0x4C, 0x64, 0x84, 0x0F, 0x2A, 0x1D, 0x2F, 0x7A, 0xD4, 0x8C }, asf_read_unknown, 1 },
1044     { "Timecode Index",               { 0x3C, 0xB7, 0x3F, 0xD0, 0x0C, 0x4A, 0x48, 0x03, 0x95, 0x3D, 0xED, 0xF7, 0xB6, 0x22, 0x8F, 0x0C }, asf_read_unknown, 0 },
1045     { "Bitrate_Mutual_Exclusion",     { 0xD6, 0xE2, 0x29, 0xDC, 0x35, 0xDA, 0x11, 0xD1, 0x90, 0x34, 0x00, 0xA0, 0xC9, 0x03, 0x49, 0xBE }, asf_read_unknown, 1 },
1046     { "Error Correction",             { 0x75, 0xB2, 0x26, 0x35, 0x66, 0x8E, 0x11, 0xCF, 0xA6, 0xD9, 0x00, 0xAA, 0x00, 0x62, 0xCE, 0x6C }, asf_read_unknown, 1 },
1047     { "Content Branding",             { 0x22, 0x11, 0xB3, 0xFA, 0xBD, 0x23, 0x11, 0xD2, 0xB4, 0xB7, 0x00, 0xA0, 0xC9, 0x55, 0xFC, 0x6E }, asf_read_unknown, 1 },
1048     { "Content Encryption",           { 0x22, 0x11, 0xB3, 0xFB, 0xBD, 0x23, 0x11, 0xD2, 0xB4, 0xB7, 0x00, 0xA0, 0xC9, 0x55, 0xFC, 0x6E }, asf_read_unknown, 1 },
1049     { "Extended Content Encryption",  { 0x29, 0x8A, 0xE6, 0x14, 0x26, 0x22, 0x4C, 0x17, 0xB9, 0x35, 0xDA, 0xE0, 0x7E, 0xE9, 0x28, 0x9C }, asf_read_unknown, 1 },
1050     { "Digital Signature",            { 0x22, 0x11, 0xB3, 0xFC, 0xBD, 0x23, 0x11, 0xD2, 0xB4, 0xB7, 0x00, 0xA0, 0xC9, 0x55, 0xFC, 0x6E }, asf_read_unknown, 1 },
1051     { "Extended Stream Properties",   { 0x14, 0xE6, 0xA5, 0xCB, 0xC6, 0x72, 0x43, 0x32, 0x83, 0x99, 0xA9, 0x69, 0x52, 0x06, 0x5B, 0x5A }, asf_read_ext_stream_properties, 1 },
1052     { "Advanced Mutual Exclusion",    { 0xA0, 0x86, 0x49, 0xCF, 0x47, 0x75, 0x46, 0x70, 0x8A, 0x16, 0x6E, 0x35, 0x35, 0x75, 0x66, 0xCD }, asf_read_unknown, 1 },
1053     { "Group Mutual Exclusion",       { 0xD1, 0x46, 0x5A, 0x40, 0x5A, 0x79, 0x43, 0x38, 0xB7, 0x1B, 0xE3, 0x6B, 0x8F, 0xD6, 0xC2, 0x49 }, asf_read_unknown, 1},
1054     { "Stream Prioritization",        { 0xD4, 0xFE, 0xD1, 0x5B, 0x88, 0xD3, 0x45, 0x4F, 0x81, 0xF0, 0xED, 0x5C, 0x45, 0x99, 0x9E, 0x24 }, asf_read_unknown, 1 },
1055     { "Bandwidth Sharing Object",     { 0xA6, 0x96, 0x09, 0xE6, 0x51, 0x7B, 0x11, 0xD2, 0xB6, 0xAF, 0x00, 0xC0, 0x4F, 0xD9, 0x08, 0xE9 }, asf_read_unknown, 1 },
1056     { "Metadata",                     { 0xC5, 0xF8, 0xCB, 0xEA, 0x5B, 0xAF, 0x48, 0x77, 0x84, 0x67, 0xAA, 0x8C, 0x44, 0xFA, 0x4C, 0xCA }, asf_read_metadata_obj, 1 },
1057     { "Metadata Library",             { 0x44, 0x23, 0x1C, 0x94, 0x94, 0x98, 0x49, 0xD1, 0xA1, 0x41, 0x1D, 0x13, 0x4E, 0x45, 0x70, 0x54 }, asf_read_metadata_obj, 1 },
1058     { "Audio Spread",                 { 0xBF, 0xC3, 0xCD, 0x50, 0x61, 0x8F, 0x11, 0xCF, 0x8B, 0xB2, 0x00, 0xAA, 0x00, 0xB4, 0xE2, 0x20 }, asf_read_unknown, 1 },
1059     { "Index Parameters",             { 0xD6, 0xE2, 0x29, 0xDF, 0x35, 0xDA, 0x11, 0xD1, 0x90, 0x34, 0x00, 0xA0, 0xC9, 0x03, 0x49, 0xBE }, asf_read_unknown, 1 },
1060     { "Content Encryption System Windows Media DRM Network Devices",
1061                                       { 0x7A, 0x07, 0x9B, 0xB6, 0xDA, 0XA4, 0x4e, 0x12, 0xA5, 0xCA, 0x91, 0xD3, 0x8D, 0xC1, 0x1A, 0x8D }, asf_read_unknown, 1 },
1062     { "Mutex Language",               { 0xD6, 0xE2, 0x2A, 0x00, 0x25, 0xDA, 0x11, 0xD1, 0x90, 0x34, 0x00, 0xA0, 0xC9, 0x03, 0x49, 0xBE }, asf_read_unknown, 1 },
1063     { "Mutex Bitrate",                { 0xD6, 0xE2, 0x2A, 0x01, 0x25, 0xDA, 0x11, 0xD1, 0x90, 0x34, 0x00, 0xA0, 0xC9, 0x03, 0x49, 0xBE }, asf_read_unknown, 1 },
1064     { "Mutex Unknown",                { 0xD6, 0xE2, 0x2A, 0x02, 0x25, 0xDA, 0x11, 0xD1, 0x90, 0x34, 0x00, 0xA0, 0xC9, 0x03, 0x49, 0xBE }, asf_read_unknown, 1 },
1065     { "Bandwidth Sharing Exclusive",  { 0xAF, 0x60, 0x60, 0xAA, 0x51, 0x97, 0x11, 0xD2, 0xB6, 0xAF, 0x00, 0xC0, 0x4F, 0xD9, 0x08, 0xE9 }, asf_read_unknown, 1 },
1066     { "Bandwidth Sharing Partial",    { 0xAF, 0x60, 0x60, 0xAB, 0x51, 0x97, 0x11, 0xD2, 0xB6, 0xAF, 0x00, 0xC0, 0x4F, 0xD9, 0x08, 0xE9 }, asf_read_unknown, 1 },
1067     { "Payload Extension System Timecode", { 0x39, 0x95, 0x95, 0xEC, 0x86, 0x67, 0x4E, 0x2D, 0x8F, 0xDB, 0x98, 0x81, 0x4C, 0xE7, 0x6C, 0x1E }, asf_read_unknown, 1 },
1068     { "Payload Extension System File Name", { 0xE1, 0x65, 0xEC, 0x0E, 0x19, 0xED, 0x45, 0xD7, 0xB4, 0xA7, 0x25, 0xCB, 0xD1, 0xE2, 0x8E, 0x9B }, asf_read_unknown, 1 },
1069     { "Payload Extension System Content Type", { 0xD5, 0x90, 0xDC, 0x20, 0x07, 0xBC, 0x43, 0x6C, 0x9C, 0xF7, 0xF3, 0xBB, 0xFB, 0xF1, 0xA4, 0xDC }, asf_read_unknown, 1 },
1070     { "Payload Extension System Pixel Aspect Ratio", { 0x1, 0x1E, 0xE5, 0x54, 0xF9, 0xEA, 0x4B, 0xC8, 0x82, 0x1A, 0x37, 0x6B, 0x74, 0xE4, 0xC4, 0xB8 }, asf_read_unknown, 1 },
1071     { "Payload Extension System Sample Duration", { 0xC6, 0xBD, 0x94, 0x50, 0x86, 0x7F, 0x49, 0x07, 0x83, 0xA3, 0xC7, 0x79, 0x21, 0xB7, 0x33, 0xAD }, asf_read_unknown, 1 },
1072     { "Payload Extension System Encryption Sample ID", { 0x66, 0x98, 0xB8, 0x4E, 0x0A, 0xFA, 0x43, 0x30, 0xAE, 0xB2, 0x1C, 0x0A, 0x98, 0xD7, 0xA4, 0x4D }, asf_read_unknown, 1 },
1073     { "Payload Extension System Degradable JPEG", { 0x00, 0xE1, 0xAF, 0x06, 0x7B, 0xEC, 0x11, 0xD1, 0xA5, 0x82, 0x00, 0xC0, 0x4F, 0xC2, 0x9C, 0xFB }, asf_read_unknown, 1 },
1074 };
1075 
1076 #define READ_LEN(flag, name, len)            \
1077     do {                                     \
1078         if ((flag) == name ## IS_BYTE)       \
1079             len = avio_r8(pb);               \
1080         else if ((flag) == name ## IS_WORD)  \
1081             len = avio_rl16(pb);             \
1082         else if ((flag) == name ## IS_DWORD) \
1083             len = avio_rl32(pb);             \
1084         else                                 \
1085             len = 0;                         \
1086     } while(0)
1087 
asf_read_subpayload(AVFormatContext * s,AVPacket * pkt,int is_header)1088 static int asf_read_subpayload(AVFormatContext *s, AVPacket *pkt, int is_header)
1089 {
1090     ASFContext *asf = s->priv_data;
1091     AVIOContext *pb = s->pb;
1092     uint8_t sub_len;
1093     int ret, i;
1094 
1095     if (is_header) {
1096         asf->dts_delta = avio_r8(pb);
1097         if (asf->nb_mult_left) {
1098             asf->mult_sub_len = avio_rl16(pb); // total
1099         }
1100         asf->sub_header_offset = avio_tell(pb);
1101         asf->nb_sub = 0;
1102         asf->sub_left = 1;
1103     }
1104     sub_len = avio_r8(pb);
1105     if ((ret = av_get_packet(pb, pkt, sub_len)) < 0) // each subpayload is entire frame
1106         return ret;
1107     for (i = 0; i < asf->nb_streams; i++) {
1108         if (asf->stream_index == asf->asf_st[i]->stream_index) {
1109             pkt->stream_index  = asf->asf_st[i]->index;
1110             break;
1111         }
1112     }
1113     asf->return_subpayload = 1;
1114     if (!sub_len)
1115         asf->return_subpayload = 0;
1116 
1117     if (sub_len)
1118         asf->nb_sub++;
1119     pkt->dts = asf->sub_dts + (asf->nb_sub - 1) * asf->dts_delta - asf->preroll;
1120     if (asf->nb_mult_left && (avio_tell(pb) >=
1121                               (asf->sub_header_offset + asf->mult_sub_len))) {
1122         asf->sub_left = 0;
1123         asf->nb_mult_left--;
1124     }
1125     if (avio_tell(pb) >= asf->packet_offset + asf->packet_size - asf->pad_len) {
1126         asf->sub_left = 0;
1127         if (!asf->nb_mult_left) {
1128             avio_skip(pb, asf->pad_len);
1129             if (avio_tell(pb) != asf->packet_offset + asf->packet_size) {
1130                 if (!asf->packet_size)
1131                     return AVERROR_INVALIDDATA;
1132                 av_log(s, AV_LOG_WARNING,
1133                        "Position %"PRId64" wrong, should be %"PRId64"\n",
1134                        avio_tell(pb), asf->packet_offset + asf->packet_size);
1135                 avio_seek(pb, asf->packet_offset + asf->packet_size, SEEK_SET);
1136             }
1137         }
1138     }
1139 
1140     return 0;
1141 }
1142 
reset_packet(ASFPacket * asf_pkt)1143 static void reset_packet(ASFPacket *asf_pkt)
1144 {
1145     asf_pkt->size_left = 0;
1146     asf_pkt->data_size = 0;
1147     asf_pkt->duration  = 0;
1148     asf_pkt->flags     = 0;
1149     asf_pkt->dts       = 0;
1150     asf_pkt->duration  = 0;
1151     av_packet_unref(&asf_pkt->avpkt);
1152     av_init_packet(&asf_pkt->avpkt);
1153 }
1154 
asf_read_replicated_data(AVFormatContext * s,ASFPacket * asf_pkt)1155 static int asf_read_replicated_data(AVFormatContext *s, ASFPacket *asf_pkt)
1156 {
1157     ASFContext *asf = s->priv_data;
1158     AVIOContext *pb = s->pb;
1159     int ret, data_size;
1160 
1161     if (!asf_pkt->data_size) {
1162         data_size = avio_rl32(pb); // read media object size
1163         if (data_size <= 0)
1164             return AVERROR_INVALIDDATA;
1165         if ((ret = av_new_packet(&asf_pkt->avpkt, data_size)) < 0)
1166             return ret;
1167         asf_pkt->data_size = asf_pkt->size_left = data_size;
1168     } else
1169         avio_skip(pb, 4); // reading of media object size is already done
1170     asf_pkt->dts = avio_rl32(pb); // read presentation time
1171     if (asf->rep_data_len >= 8)
1172         avio_skip(pb, asf->rep_data_len - 8); // skip replicated data
1173 
1174     return 0;
1175 }
1176 
asf_read_multiple_payload(AVFormatContext * s,AVPacket * pkt,ASFPacket * asf_pkt)1177 static int asf_read_multiple_payload(AVFormatContext *s, AVPacket *pkt,
1178                                  ASFPacket *asf_pkt)
1179 {
1180     ASFContext *asf = s->priv_data;
1181     AVIOContext *pb = s->pb;
1182     uint16_t pay_len;
1183     unsigned char *p;
1184     int ret;
1185     int skip = 0;
1186 
1187     // if replicated length is 1, subpayloads are present
1188     if (asf->rep_data_len == 1) {
1189         asf->sub_left = 1;
1190         asf->state = READ_MULTI_SUB;
1191         pkt->flags = asf_pkt->flags;
1192         if ((ret = asf_read_subpayload(s, pkt, 1)) < 0)
1193             return ret;
1194     } else {
1195         if (asf->rep_data_len)
1196             if ((ret = asf_read_replicated_data(s, asf_pkt)) < 0)
1197                 return ret;
1198         pay_len = avio_rl16(pb); // payload length should be WORD
1199         if (pay_len > asf->packet_size) {
1200             av_log(s, AV_LOG_ERROR,
1201                    "Error: invalid data packet size, pay_len %"PRIu16", "
1202                    "asf->packet_size %"PRIu32", offset %"PRId64".\n",
1203                    pay_len, asf->packet_size, avio_tell(pb));
1204             return AVERROR_INVALIDDATA;
1205         }
1206         p = asf_pkt->avpkt.data + asf_pkt->data_size - asf_pkt->size_left;
1207         if (pay_len > asf_pkt->size_left) {
1208             av_log(s, AV_LOG_ERROR,
1209                    "Error: invalid buffer size, pay_len %d, data size left %d.\n",
1210             pay_len, asf_pkt->size_left);
1211             skip = pay_len - asf_pkt->size_left;
1212             pay_len = asf_pkt->size_left;
1213         }
1214         if (asf_pkt->size_left <= 0)
1215             return AVERROR_INVALIDDATA;
1216         if ((ret = avio_read(pb, p, pay_len)) < 0)
1217             return ret;
1218         if (s->key && s->keylen == 20)
1219             ff_asfcrypt_dec(s->key, p, ret);
1220         avio_skip(pb, skip);
1221         asf_pkt->size_left -= pay_len;
1222         asf->nb_mult_left--;
1223     }
1224 
1225     return 0;
1226 }
1227 
asf_read_single_payload(AVFormatContext * s,ASFPacket * asf_pkt)1228 static int asf_read_single_payload(AVFormatContext *s, ASFPacket *asf_pkt)
1229 {
1230     ASFContext *asf = s->priv_data;
1231     AVIOContext *pb = s->pb;
1232     int64_t  offset;
1233     uint64_t size;
1234     unsigned char *p;
1235     int ret, data_size;
1236 
1237     if (!asf_pkt->data_size) {
1238         data_size = avio_rl32(pb); // read media object size
1239         if (data_size <= 0)
1240             return AVERROR_EOF;
1241         if ((ret = av_new_packet(&asf_pkt->avpkt, data_size)) < 0)
1242             return ret;
1243         asf_pkt->data_size = asf_pkt->size_left = data_size;
1244     } else
1245         avio_skip(pb, 4); // skip media object size
1246     asf_pkt->dts = avio_rl32(pb); // read presentation time
1247     if (asf->rep_data_len >= 8)
1248         avio_skip(pb, asf->rep_data_len - 8); // skip replicated data
1249     offset = avio_tell(pb);
1250 
1251     // size of the payload - size of the packet without header and padding
1252     if (asf->packet_size_internal)
1253         size = asf->packet_size_internal - offset + asf->packet_offset - asf->pad_len;
1254     else
1255         size = asf->packet_size - offset + asf->packet_offset - asf->pad_len;
1256     if (size > asf->packet_size) {
1257         av_log(s, AV_LOG_ERROR,
1258                "Error: invalid data packet size, offset %"PRId64".\n",
1259                avio_tell(pb));
1260         return AVERROR_INVALIDDATA;
1261     }
1262     p = asf_pkt->avpkt.data + asf_pkt->data_size - asf_pkt->size_left;
1263     if (size > asf_pkt->size_left || asf_pkt->size_left <= 0)
1264         return AVERROR_INVALIDDATA;
1265     if (asf_pkt->size_left > size)
1266         asf_pkt->size_left -= size;
1267     else
1268         asf_pkt->size_left = 0;
1269     if ((ret = avio_read(pb, p, size)) < 0)
1270         return ret;
1271     if (s->key && s->keylen == 20)
1272             ff_asfcrypt_dec(s->key, p, ret);
1273     if (asf->packet_size_internal)
1274         avio_skip(pb, asf->packet_size - asf->packet_size_internal);
1275     avio_skip(pb, asf->pad_len); // skip padding
1276 
1277     return 0;
1278 }
1279 
asf_read_payload(AVFormatContext * s,AVPacket * pkt)1280 static int asf_read_payload(AVFormatContext *s, AVPacket *pkt)
1281 {
1282     ASFContext *asf = s->priv_data;
1283     AVIOContext *pb = s->pb;
1284     int ret, i;
1285     ASFPacket *asf_pkt = NULL;
1286 
1287     if (!asf->sub_left) {
1288         uint32_t off_len, media_len;
1289         uint8_t stream_num;
1290 
1291         stream_num = avio_r8(pb);
1292         asf->stream_index = stream_num & ASF_STREAM_NUM;
1293         for (i = 0; i < asf->nb_streams; i++) {
1294             if (asf->stream_index == asf->asf_st[i]->stream_index) {
1295                 asf_pkt               = &asf->asf_st[i]->pkt;
1296                 asf_pkt->stream_index = asf->asf_st[i]->index;
1297                 break;
1298             }
1299         }
1300         if (!asf_pkt) {
1301             if (asf->packet_offset + asf->packet_size <= asf->data_offset + asf->data_size) {
1302                 if (!asf->packet_size) {
1303                     av_log(s, AV_LOG_ERROR, "Invalid packet size 0.\n");
1304                     return AVERROR_INVALIDDATA;
1305                 }
1306                 avio_seek(pb, asf->packet_offset + asf->packet_size, SEEK_SET);
1307                 av_log(s, AV_LOG_WARNING, "Skipping the stream with the invalid stream index %d.\n",
1308                        asf->stream_index);
1309                 return AVERROR(EAGAIN);
1310             } else
1311                 return AVERROR_INVALIDDATA;
1312         }
1313 
1314         if (stream_num >> 7)
1315             asf_pkt->flags |= AV_PKT_FLAG_KEY;
1316         READ_LEN(asf->prop_flags & ASF_PL_MASK_MEDIA_OBJECT_NUMBER_LENGTH_FIELD_SIZE,
1317                  ASF_PL_FLAG_MEDIA_OBJECT_NUMBER_LENGTH_FIELD_, media_len);
1318         READ_LEN(asf->prop_flags & ASF_PL_MASK_OFFSET_INTO_MEDIA_OBJECT_LENGTH_FIELD_SIZE,
1319                  ASF_PL_FLAG_OFFSET_INTO_MEDIA_OBJECT_LENGTH_FIELD_, off_len);
1320         READ_LEN(asf->prop_flags & ASF_PL_MASK_REPLICATED_DATA_LENGTH_FIELD_SIZE,
1321                  ASF_PL_FLAG_REPLICATED_DATA_LENGTH_FIELD_, asf->rep_data_len);
1322         if (asf_pkt->size_left && (asf_pkt->frame_num != media_len)) {
1323             av_log(s, AV_LOG_WARNING, "Unfinished frame will be ignored\n");
1324             reset_packet(asf_pkt);
1325         }
1326         asf_pkt->frame_num = media_len;
1327         asf->sub_dts = off_len;
1328         if (asf->nb_mult_left) {
1329             if ((ret = asf_read_multiple_payload(s, pkt, asf_pkt)) < 0)
1330                 return ret;
1331         } else if (asf->rep_data_len == 1) {
1332             asf->sub_left = 1;
1333             asf->state    = READ_SINGLE;
1334             pkt->flags    = asf_pkt->flags;
1335             if ((ret = asf_read_subpayload(s, pkt, 1)) < 0)
1336                 return ret;
1337         } else {
1338             if ((ret = asf_read_single_payload(s, asf_pkt)) < 0)
1339                 return ret;
1340         }
1341     } else {
1342         for (i = 0; i <= asf->nb_streams; i++) {
1343             if (asf->stream_index == asf->asf_st[i]->stream_index) {
1344                 asf_pkt = &asf->asf_st[i]->pkt;
1345                 break;
1346             }
1347         }
1348         if (!asf_pkt)
1349             return AVERROR_INVALIDDATA;
1350         pkt->flags         = asf_pkt->flags;
1351         pkt->dts           = asf_pkt->dts;
1352         pkt->stream_index  = asf->asf_st[i]->index;
1353         if ((ret = asf_read_subpayload(s, pkt, 0)) < 0) // read subpayload without its header
1354             return ret;
1355     }
1356 
1357     return 0;
1358 }
1359 
asf_read_packet_header(AVFormatContext * s)1360 static int asf_read_packet_header(AVFormatContext *s)
1361 {
1362     ASFContext *asf = s->priv_data;
1363     AVIOContext *pb = s->pb;
1364     uint64_t size;
1365     uint32_t av_unused seq;
1366     unsigned char error_flags, len_flags, pay_flags;
1367 
1368     asf->packet_offset = avio_tell(pb);
1369     error_flags = avio_r8(pb); // read Error Correction Flags
1370     if (error_flags & ASF_PACKET_FLAG_ERROR_CORRECTION_PRESENT) {
1371         if (!(error_flags & ASF_ERROR_CORRECTION_LENGTH_TYPE)) {
1372             size = error_flags & ASF_PACKET_ERROR_CORRECTION_DATA_SIZE;
1373             avio_skip(pb, size);
1374         }
1375         len_flags       = avio_r8(pb);
1376     } else
1377         len_flags = error_flags;
1378     asf->prop_flags = avio_r8(pb);
1379     READ_LEN(len_flags & ASF_PPI_MASK_PACKET_LENGTH_FIELD_SIZE,
1380              ASF_PPI_FLAG_PACKET_LENGTH_FIELD_, asf->packet_size_internal);
1381     READ_LEN(len_flags & ASF_PPI_MASK_SEQUENCE_FIELD_SIZE,
1382              ASF_PPI_FLAG_SEQUENCE_FIELD_, seq);
1383     READ_LEN(len_flags & ASF_PPI_MASK_PADDING_LENGTH_FIELD_SIZE,
1384              ASF_PPI_FLAG_PADDING_LENGTH_FIELD_, asf->pad_len );
1385     asf->send_time = avio_rl32(pb); // send time
1386     avio_skip(pb, 2); // skip duration
1387     if (len_flags & ASF_PPI_FLAG_MULTIPLE_PAYLOADS_PRESENT) { // Multiple Payloads present
1388         pay_flags = avio_r8(pb);
1389         asf->nb_mult_left = (pay_flags & ASF_NUM_OF_PAYLOADS);
1390     }
1391 
1392     return 0;
1393 }
1394 
asf_deinterleave(AVFormatContext * s,ASFPacket * asf_pkt,int st_num)1395 static int asf_deinterleave(AVFormatContext *s, ASFPacket *asf_pkt, int st_num)
1396 {
1397     ASFContext *asf    = s->priv_data;
1398     ASFStream *asf_st  = asf->asf_st[st_num];
1399     unsigned char *p   = asf_pkt->avpkt.data;
1400     uint16_t pkt_len   = asf->asf_st[st_num]->virtual_pkt_len;
1401     uint16_t chunk_len = asf->asf_st[st_num]->virtual_chunk_len;
1402     int nchunks        = pkt_len / chunk_len;
1403     AVPacket pkt;
1404     int pos = 0, j, l, ret;
1405 
1406 
1407     if ((ret = av_new_packet(&pkt, asf_pkt->data_size)) < 0)
1408         return ret;
1409 
1410     while (asf_pkt->data_size >= asf_st->span * pkt_len + pos) {
1411         if (pos >= asf_pkt->data_size) {
1412             break;
1413         }
1414         for (l = 0; l < pkt_len; l++) {
1415             if (pos >= asf_pkt->data_size) {
1416                 break;
1417             }
1418             for (j = 0; j < asf_st->span; j++) {
1419                 if ((pos + chunk_len) >= asf_pkt->data_size)
1420                     break;
1421                 memcpy(pkt.data + pos,
1422                        p + (j * nchunks + l) * chunk_len,
1423                        chunk_len);
1424                 pos += chunk_len;
1425             }
1426         }
1427         p += asf_st->span * pkt_len;
1428         if (p > asf_pkt->avpkt.data + asf_pkt->data_size)
1429             break;
1430     }
1431     av_packet_unref(&asf_pkt->avpkt);
1432     asf_pkt->avpkt = pkt;
1433 
1434     return 0;
1435 }
1436 
asf_read_packet(AVFormatContext * s,AVPacket * pkt)1437 static int asf_read_packet(AVFormatContext *s, AVPacket *pkt)
1438 {
1439     ASFContext *asf = s->priv_data;
1440     AVIOContext *pb = s->pb;
1441     int ret, i;
1442 
1443     if ((avio_tell(pb) >= asf->data_offset + asf->data_size) &&
1444         !(asf->b_flags & ASF_FLAG_BROADCAST))
1445         return AVERROR_EOF;
1446     while (!pb->eof_reached) {
1447         if (asf->state == PARSE_PACKET_HEADER) {
1448             asf_read_packet_header(s);
1449             if (pb->eof_reached)
1450                 break;
1451             if (!asf->nb_mult_left)
1452                 asf->state = READ_SINGLE;
1453             else
1454                 asf->state = READ_MULTI;
1455         }
1456         ret = asf_read_payload(s, pkt);
1457         if (ret == AVERROR(EAGAIN)) {
1458             asf->state = PARSE_PACKET_HEADER;
1459             continue;
1460         }
1461         else if (ret < 0)
1462             return ret;
1463 
1464         switch (asf->state) {
1465         case READ_SINGLE:
1466             if (!asf->sub_left)
1467                 asf->state = PARSE_PACKET_HEADER;
1468             break;
1469         case READ_MULTI_SUB:
1470             if (!asf->sub_left && !asf->nb_mult_left) {
1471                 asf->state = PARSE_PACKET_HEADER;
1472                 if (!asf->return_subpayload &&
1473                     (avio_tell(pb) <= asf->packet_offset +
1474                      asf->packet_size - asf->pad_len))
1475                     avio_skip(pb, asf->pad_len); // skip padding
1476                 if (asf->packet_offset + asf->packet_size > avio_tell(pb))
1477                     avio_seek(pb, asf->packet_offset + asf->packet_size, SEEK_SET);
1478             } else if (!asf->sub_left)
1479                 asf->state = READ_MULTI;
1480             break;
1481         case READ_MULTI:
1482             if (!asf->nb_mult_left) {
1483                 asf->state = PARSE_PACKET_HEADER;
1484                 if (!asf->return_subpayload &&
1485                     (avio_tell(pb) <= asf->packet_offset +
1486                      asf->packet_size - asf->pad_len))
1487                     avio_skip(pb, asf->pad_len); // skip padding
1488                 if (asf->packet_offset + asf->packet_size > avio_tell(pb))
1489                     avio_seek(pb, asf->packet_offset + asf->packet_size, SEEK_SET);
1490             }
1491             break;
1492         }
1493         if (asf->return_subpayload) {
1494             asf->return_subpayload = 0;
1495             return 0;
1496         }
1497         for (i = 0; i < asf->nb_streams; i++) {
1498             ASFPacket *asf_pkt = &asf->asf_st[i]->pkt;
1499             if (asf_pkt && !asf_pkt->size_left && asf_pkt->data_size) {
1500                 if (asf->asf_st[i]->span > 1 &&
1501                     asf->asf_st[i]->type == AVMEDIA_TYPE_AUDIO)
1502                     if ((ret = asf_deinterleave(s, asf_pkt, i)) < 0)
1503                         return ret;
1504                 av_packet_move_ref(pkt, &asf_pkt->avpkt);
1505                 pkt->stream_index  = asf->asf_st[i]->index;
1506                 pkt->flags         = asf_pkt->flags;
1507                 pkt->dts           = asf_pkt->dts - asf->preroll;
1508                 asf_pkt->data_size = 0;
1509                 asf_pkt->frame_num = 0;
1510                 return 0;
1511             }
1512         }
1513     }
1514 
1515     if (pb->eof_reached)
1516         return AVERROR_EOF;
1517 
1518     return 0;
1519 }
1520 
asf_read_close(AVFormatContext * s)1521 static int asf_read_close(AVFormatContext *s)
1522 {
1523     ASFContext *asf = s->priv_data;
1524     int i;
1525 
1526     for (i = 0; i < ASF_MAX_STREAMS; i++) {
1527         av_dict_free(&asf->asf_sd[i].asf_met);
1528         if (i < asf->nb_streams) {
1529             av_packet_unref(&asf->asf_st[i]->pkt.avpkt);
1530             av_freep(&asf->asf_st[i]);
1531         }
1532     }
1533 
1534     asf->nb_streams = 0;
1535     return 0;
1536 }
1537 
reset_packet_state(AVFormatContext * s)1538 static void reset_packet_state(AVFormatContext *s)
1539 {
1540     ASFContext *asf        = s->priv_data;
1541     int i;
1542 
1543     asf->state             = PARSE_PACKET_HEADER;
1544     asf->offset            = 0;
1545     asf->return_subpayload = 0;
1546     asf->sub_left          = 0;
1547     asf->sub_header_offset = 0;
1548     asf->packet_offset     = asf->first_packet_offset;
1549     asf->pad_len           = 0;
1550     asf->rep_data_len      = 0;
1551     asf->dts_delta         = 0;
1552     asf->mult_sub_len      = 0;
1553     asf->nb_mult_left      = 0;
1554     asf->nb_sub            = 0;
1555     asf->prop_flags        = 0;
1556     asf->sub_dts           = 0;
1557     for (i = 0; i < asf->nb_streams; i++) {
1558         ASFPacket *pkt = &asf->asf_st[i]->pkt;
1559         pkt->size_left = 0;
1560         pkt->data_size = 0;
1561         pkt->duration  = 0;
1562         pkt->flags     = 0;
1563         pkt->dts       = 0;
1564         pkt->duration  = 0;
1565         av_packet_unref(&pkt->avpkt);
1566         av_init_packet(&pkt->avpkt);
1567     }
1568 }
1569 
1570 /*
1571  * Find a timestamp for the requested position within the payload
1572  * where the pos (position) is the offset inside the Data Object.
1573  * When position is not on the packet boundary, asf_read_timestamp tries
1574  * to find the closest packet offset after this position. If this packet
1575  * is a key frame, this packet timestamp is read and an index entry is created
1576  * for the packet. If this packet belongs to the requested stream,
1577  * asf_read_timestamp upgrades pos to the packet beginning offset and
1578  * returns this packet's dts. So returned dts is the dts of the first key frame with
1579  * matching stream number after given position.
1580  */
asf_read_timestamp(AVFormatContext * s,int stream_index,int64_t * pos,int64_t pos_limit)1581 static int64_t asf_read_timestamp(AVFormatContext *s, int stream_index,
1582                                   int64_t *pos, int64_t pos_limit)
1583 {
1584     ASFContext *asf = s->priv_data;
1585     int64_t pkt_pos = *pos, pkt_offset, dts = AV_NOPTS_VALUE, data_end;
1586     AVPacket pkt;
1587     int n;
1588 
1589     data_end = asf->data_offset + asf->data_size;
1590 
1591     n = (pkt_pos - asf->first_packet_offset + asf->packet_size - 1) /
1592         asf->packet_size;
1593     n = av_clip(n, 0, ((data_end - asf->first_packet_offset) / asf->packet_size - 1));
1594     pkt_pos = asf->first_packet_offset +  n * asf->packet_size;
1595 
1596     avio_seek(s->pb, pkt_pos, SEEK_SET);
1597     pkt_offset = pkt_pos;
1598 
1599     reset_packet_state(s);
1600     while (avio_tell(s->pb) < data_end) {
1601 
1602         int i, ret, st_found;
1603 
1604         av_init_packet(&pkt);
1605         pkt_offset = avio_tell(s->pb);
1606         if ((ret = asf_read_packet(s, &pkt)) < 0) {
1607             dts = AV_NOPTS_VALUE;
1608             return ret;
1609         }
1610         // ASFPacket may contain fragments of packets belonging to different streams,
1611         // pkt_offset is the offset of the first fragment within it.
1612         if ((pkt_offset >= (pkt_pos + asf->packet_size)))
1613             pkt_pos += asf->packet_size;
1614         for (i = 0; i < asf->nb_streams; i++) {
1615             ASFStream *st = asf->asf_st[i];
1616 
1617             st_found = 0;
1618             if (pkt.flags & AV_PKT_FLAG_KEY) {
1619                 dts = pkt.dts;
1620                 if (dts) {
1621                     av_add_index_entry(s->streams[pkt.stream_index], pkt_pos,
1622                                        dts, pkt.size, 0, AVINDEX_KEYFRAME);
1623                     if (stream_index == st->index) {
1624                         st_found = 1;
1625                         break;
1626                     }
1627                 }
1628             }
1629         }
1630         if (st_found)
1631             break;
1632         av_packet_unref(&pkt);
1633     }
1634     *pos = pkt_pos;
1635 
1636     av_packet_unref(&pkt);
1637     return dts;
1638 }
1639 
asf_read_seek(AVFormatContext * s,int stream_index,int64_t timestamp,int flags)1640 static int asf_read_seek(AVFormatContext *s, int stream_index,
1641                          int64_t timestamp, int flags)
1642 {
1643     ASFContext *asf = s->priv_data;
1644     int idx, ret;
1645 
1646     if (s->streams[stream_index]->nb_index_entries && asf->is_simple_index) {
1647         idx = av_index_search_timestamp(s->streams[stream_index], timestamp, flags);
1648         if (idx < 0 || idx >= s->streams[stream_index]->nb_index_entries)
1649             return AVERROR_INVALIDDATA;
1650         avio_seek(s->pb, s->streams[stream_index]->index_entries[idx].pos, SEEK_SET);
1651     } else {
1652         if ((ret = ff_seek_frame_binary(s, stream_index, timestamp, flags)) < 0)
1653             return ret;
1654     }
1655 
1656     reset_packet_state(s);
1657 
1658     return 0;
1659 }
1660 
find_guid(ff_asf_guid guid)1661 static const GUIDParseTable *find_guid(ff_asf_guid guid)
1662 {
1663     int j, ret;
1664     const GUIDParseTable *g;
1665 
1666     swap_guid(guid);
1667     g = gdef;
1668     for (j = 0; j < FF_ARRAY_ELEMS(gdef); j++) {
1669         if (!(ret = memcmp(guid, g->guid, sizeof(g->guid))))
1670             return g;
1671         g++;
1672     }
1673 
1674     return NULL;
1675 }
1676 
detect_unknown_subobject(AVFormatContext * s,int64_t offset,int64_t size)1677 static int detect_unknown_subobject(AVFormatContext *s, int64_t offset, int64_t size)
1678 {
1679     ASFContext *asf = s->priv_data;
1680     AVIOContext *pb = s->pb;
1681     const GUIDParseTable *g = NULL;
1682     ff_asf_guid guid;
1683     int ret;
1684 
1685     if (offset > INT64_MAX - size)
1686         return AVERROR_INVALIDDATA;
1687 
1688     while (avio_tell(pb) <= offset + size) {
1689         if (avio_tell(pb) == asf->offset)
1690             break;
1691         asf->offset = avio_tell(pb);
1692         if ((ret = ff_get_guid(pb, &guid)) < 0)
1693             return ret;
1694         g = find_guid(guid);
1695         if (g) {
1696             if ((ret = g->read_object(s, g)) < 0)
1697                 return ret;
1698         } else {
1699             GUIDParseTable g2;
1700 
1701             g2.name         = "Unknown";
1702             g2.is_subobject = 1;
1703             asf_read_unknown(s, &g2);
1704         }
1705     }
1706 
1707     return 0;
1708 }
1709 
asf_read_header(AVFormatContext * s)1710 static int asf_read_header(AVFormatContext *s)
1711 {
1712     ASFContext *asf         = s->priv_data;
1713     AVIOContext *pb         = s->pb;
1714     const GUIDParseTable *g = NULL;
1715     ff_asf_guid guid;
1716     int i, ret;
1717     uint64_t size;
1718 
1719     asf->preroll         = 0;
1720     asf->is_simple_index = 0;
1721     ff_get_guid(pb, &guid);
1722     if (ff_guidcmp(&guid, &ff_asf_header))
1723         return AVERROR_INVALIDDATA;
1724     avio_skip(pb, 8); // skip header object size
1725     avio_skip(pb, 6); // skip number of header objects and 2 reserved bytes
1726     asf->data_reached = 0;
1727 
1728     /* 1  is here instead of pb->eof_reached because (when not streaming), Data are skipped
1729      * for the first time,
1730      * Index object is processed and got eof and then seeking back to the Data is performed.
1731      */
1732     while (1) {
1733         // for the cases when object size is invalid
1734         if (avio_tell(pb) == asf->offset)
1735             break;
1736         asf->offset = avio_tell(pb);
1737         if ((ret = ff_get_guid(pb, &guid)) < 0) {
1738             if (ret == AVERROR_EOF && asf->data_reached)
1739                 break;
1740             else
1741                 goto failed;
1742         }
1743         g = find_guid(guid);
1744         if (g) {
1745             asf->unknown_offset = asf->offset;
1746             asf->is_header = 1;
1747             if ((ret = g->read_object(s, g)) < 0)
1748                 goto failed;
1749         } else {
1750             size = avio_rl64(pb);
1751             align_position(pb, asf->offset, size);
1752         }
1753         if (asf->data_reached &&
1754             (!(pb->seekable & AVIO_SEEKABLE_NORMAL) ||
1755              (asf->b_flags & ASF_FLAG_BROADCAST)))
1756             break;
1757     }
1758 
1759     if (!asf->data_reached) {
1760         av_log(s, AV_LOG_ERROR, "Data Object was not found.\n");
1761         ret = AVERROR_INVALIDDATA;
1762         goto failed;
1763     }
1764     if (pb->seekable & AVIO_SEEKABLE_NORMAL)
1765         avio_seek(pb, asf->first_packet_offset, SEEK_SET);
1766 
1767     for (i = 0; i < asf->nb_streams; i++) {
1768         const char *rfc1766 = asf->asf_sd[asf->asf_st[i]->lang_idx].langs;
1769         AVStream *st        = s->streams[asf->asf_st[i]->index];
1770         set_language(s, rfc1766, &st->metadata);
1771     }
1772 
1773     for (i = 0; i < ASF_MAX_STREAMS; i++) {
1774         AVStream *st = NULL;
1775 
1776         st = find_stream(s, i);
1777         if (st) {
1778             av_dict_copy(&st->metadata, asf->asf_sd[i].asf_met, AV_DICT_IGNORE_SUFFIX);
1779             if (asf->asf_sd[i].aspect_ratio.num > 0 && asf->asf_sd[i].aspect_ratio.den > 0) {
1780                 st->sample_aspect_ratio.num = asf->asf_sd[i].aspect_ratio.num;
1781                 st->sample_aspect_ratio.den = asf->asf_sd[i].aspect_ratio.den;
1782             }
1783         }
1784     }
1785 
1786     return 0;
1787 
1788 failed:
1789     asf_read_close(s);
1790     return ret;
1791 }
1792 
1793 AVInputFormat ff_asf_o_demuxer = {
1794     .name           = "asf_o",
1795     .long_name      = NULL_IF_CONFIG_SMALL("ASF (Advanced / Active Streaming Format)"),
1796     .priv_data_size = sizeof(ASFContext),
1797     .read_probe     = asf_probe,
1798     .read_header    = asf_read_header,
1799     .read_packet    = asf_read_packet,
1800     .read_close     = asf_read_close,
1801     .read_timestamp = asf_read_timestamp,
1802     .read_seek      = asf_read_seek,
1803     .flags          = AVFMT_NOBINSEARCH | AVFMT_NOGENSEARCH,
1804 };
1805