• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * "Real" compatible demuxer.
3  * Copyright (c) 2000, 2001 Fabrice Bellard
4  *
5  * This file is part of FFmpeg.
6  *
7  * FFmpeg is free software; you can redistribute it and/or
8  * modify it under the terms of the GNU Lesser General Public
9  * License as published by the Free Software Foundation; either
10  * version 2.1 of the License, or (at your option) any later version.
11  *
12  * FFmpeg is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15  * Lesser General Public License for more details.
16  *
17  * You should have received a copy of the GNU Lesser General Public
18  * License along with FFmpeg; if not, write to the Free Software
19  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20  */
21 
22 #include <inttypes.h>
23 
24 #include "libavutil/avassert.h"
25 #include "libavutil/channel_layout.h"
26 #include "libavutil/internal.h"
27 #include "libavutil/intreadwrite.h"
28 #include "libavutil/dict.h"
29 #include "avformat.h"
30 #include "avio_internal.h"
31 #include "demux.h"
32 #include "internal.h"
33 #include "rmsipr.h"
34 #include "rm.h"
35 
36 #define DEINT_ID_GENR MKTAG('g', 'e', 'n', 'r') ///< interleaving for Cooker/ATRAC
37 #define DEINT_ID_INT0 MKTAG('I', 'n', 't', '0') ///< no interleaving needed
38 #define DEINT_ID_INT4 MKTAG('I', 'n', 't', '4') ///< interleaving for 28.8
39 #define DEINT_ID_SIPR MKTAG('s', 'i', 'p', 'r') ///< interleaving for Sipro
40 #define DEINT_ID_VBRF MKTAG('v', 'b', 'r', 'f') ///< VBR case for AAC
41 #define DEINT_ID_VBRS MKTAG('v', 'b', 'r', 's') ///< VBR case for AAC
42 
43 struct RMStream {
44     AVPacket pkt;      ///< place to store merged video frame / reordered audio data
45     int videobufsize;  ///< current assembled frame size
46     int videobufpos;   ///< position for the next slice in the video buffer
47     int curpic_num;    ///< picture number of current frame
48     int cur_slice, slices;
49     int64_t pktpos;    ///< first slice position in file
50     /// Audio descrambling matrix parameters
51     int64_t audiotimestamp; ///< Audio packet timestamp
52     int sub_packet_cnt; // Subpacket counter, used while reading
53     int sub_packet_size, sub_packet_h, coded_framesize; ///< Descrambling parameters from container
54     int audio_framesize; /// Audio frame size from container
55     int sub_packet_lengths[16]; /// Length of each subpacket
56     int32_t deint_id;  ///< deinterleaver used in audio stream
57 };
58 
59 typedef struct RMDemuxContext {
60     int nb_packets;
61     int old_format;
62     int current_stream;
63     int remaining_len;
64     int audio_stream_num; ///< Stream number for audio packets
65     int audio_pkt_cnt; ///< Output packet counter
66     int data_end;
67 } RMDemuxContext;
68 
get_strl(AVIOContext * pb,char * buf,int buf_size,int len)69 static inline void get_strl(AVIOContext *pb, char *buf, int buf_size, int len)
70 {
71     int read = avio_get_str(pb, len, buf, buf_size);
72 
73     if (read > 0)
74         avio_skip(pb, len - read);
75 }
76 
get_str8(AVIOContext * pb,char * buf,int buf_size)77 static void get_str8(AVIOContext *pb, char *buf, int buf_size)
78 {
79     get_strl(pb, buf, buf_size, avio_r8(pb));
80 }
81 
rm_read_extradata(AVFormatContext * s,AVIOContext * pb,AVCodecParameters * par,unsigned size)82 static int rm_read_extradata(AVFormatContext *s, AVIOContext *pb, AVCodecParameters *par, unsigned size)
83 {
84     if (size >= 1<<24) {
85         av_log(s, AV_LOG_ERROR, "extradata size %u too large\n", size);
86         return -1;
87     }
88     return ff_get_extradata(s, par, pb, size);
89 }
90 
rm_read_metadata(AVFormatContext * s,AVIOContext * pb,int wide)91 static void rm_read_metadata(AVFormatContext *s, AVIOContext *pb, int wide)
92 {
93     char buf[1024];
94     int i;
95 
96     for (i=0; i<FF_ARRAY_ELEMS(ff_rm_metadata); i++) {
97         int len = wide ? avio_rb16(pb) : avio_r8(pb);
98         if (len > 0) {
99             get_strl(pb, buf, sizeof(buf), len);
100             av_dict_set(&s->metadata, ff_rm_metadata[i], buf, 0);
101         }
102     }
103 }
104 
ff_rm_alloc_rmstream(void)105 RMStream *ff_rm_alloc_rmstream (void)
106 {
107     RMStream *rms = av_mallocz(sizeof(RMStream));
108     if (!rms)
109         return NULL;
110     rms->curpic_num = -1;
111     return rms;
112 }
113 
ff_rm_free_rmstream(RMStream * rms)114 void ff_rm_free_rmstream (RMStream *rms)
115 {
116     if (!rms)
117         return;
118 
119     av_packet_unref(&rms->pkt);
120 }
121 
rm_read_audio_stream_info(AVFormatContext * s,AVIOContext * pb,AVStream * st,RMStream * ast,int read_all)122 static int rm_read_audio_stream_info(AVFormatContext *s, AVIOContext *pb,
123                                      AVStream *st, RMStream *ast, int read_all)
124 {
125     FFStream *const sti = ffstream(st);
126     char buf[256];
127     uint32_t version;
128     int ret;
129 
130     /* ra type header */
131     version = avio_rb16(pb); /* version */
132     if (version == 3) {
133         unsigned bytes_per_minute;
134         int header_size = avio_rb16(pb);
135         int64_t startpos = avio_tell(pb);
136         avio_skip(pb, 8);
137         bytes_per_minute = avio_rb16(pb);
138         avio_skip(pb, 4);
139         rm_read_metadata(s, pb, 0);
140         if ((startpos + header_size) >= avio_tell(pb) + 2) {
141             // fourcc (should always be "lpcJ")
142             avio_r8(pb);
143             get_str8(pb, buf, sizeof(buf));
144         }
145         // Skip extra header crap (this should never happen)
146         if ((startpos + header_size) > avio_tell(pb))
147             avio_skip(pb, header_size + startpos - avio_tell(pb));
148         if (bytes_per_minute)
149             st->codecpar->bit_rate = 8LL * bytes_per_minute / 60;
150         st->codecpar->sample_rate = 8000;
151         st->codecpar->ch_layout = (AVChannelLayout)AV_CHANNEL_LAYOUT_MONO;
152         st->codecpar->codec_type = AVMEDIA_TYPE_AUDIO;
153         st->codecpar->codec_id = AV_CODEC_ID_RA_144;
154         ast->deint_id = DEINT_ID_INT0;
155     } else {
156         int flavor, sub_packet_h, coded_framesize, sub_packet_size;
157         int codecdata_length;
158         unsigned bytes_per_minute;
159         /* old version (4) */
160         avio_skip(pb, 2); /* unused */
161         avio_rb32(pb); /* .ra4 */
162         avio_rb32(pb); /* data size */
163         avio_rb16(pb); /* version2 */
164         avio_rb32(pb); /* header size */
165         flavor= avio_rb16(pb); /* add codec info / flavor */
166         coded_framesize = avio_rb32(pb); /* coded frame size */
167         if (coded_framesize < 0)
168             return AVERROR_INVALIDDATA;
169         ast->coded_framesize = coded_framesize;
170 
171         avio_rb32(pb); /* ??? */
172         bytes_per_minute = avio_rb32(pb);
173         if (version == 4) {
174             if (bytes_per_minute)
175                 st->codecpar->bit_rate = 8LL * bytes_per_minute / 60;
176         }
177         avio_rb32(pb); /* ??? */
178         ast->sub_packet_h = sub_packet_h = avio_rb16(pb); /* 1 */
179         st->codecpar->block_align= avio_rb16(pb); /* frame size */
180         ast->sub_packet_size = sub_packet_size = avio_rb16(pb); /* sub packet size */
181         avio_rb16(pb); /* ??? */
182         if (version == 5) {
183             avio_rb16(pb); avio_rb16(pb); avio_rb16(pb);
184         }
185         st->codecpar->sample_rate = avio_rb16(pb);
186         avio_rb32(pb);
187         st->codecpar->ch_layout.nb_channels = avio_rb16(pb);
188         if (version == 5) {
189             ast->deint_id = avio_rl32(pb);
190             if (avio_read(pb, buf, 4) != 4)
191                 return AVERROR_INVALIDDATA;
192             buf[4] = 0;
193         } else {
194             AV_WL32(buf, 0);
195             get_str8(pb, buf, sizeof(buf)); /* desc */
196             ast->deint_id = AV_RL32(buf);
197             get_str8(pb, buf, sizeof(buf)); /* desc */
198         }
199         st->codecpar->codec_type = AVMEDIA_TYPE_AUDIO;
200         st->codecpar->codec_tag  = AV_RL32(buf);
201         st->codecpar->codec_id   = ff_codec_get_id(ff_rm_codec_tags,
202                                                    st->codecpar->codec_tag);
203 
204         switch (st->codecpar->codec_id) {
205         case AV_CODEC_ID_AC3:
206             sti->need_parsing = AVSTREAM_PARSE_FULL;
207             break;
208         case AV_CODEC_ID_RA_288:
209             st->codecpar->extradata_size= 0;
210             av_freep(&st->codecpar->extradata);
211             ast->audio_framesize = st->codecpar->block_align;
212             st->codecpar->block_align = coded_framesize;
213             break;
214         case AV_CODEC_ID_COOK:
215             sti->need_parsing = AVSTREAM_PARSE_HEADERS;
216         case AV_CODEC_ID_ATRAC3:
217         case AV_CODEC_ID_SIPR:
218             if (read_all) {
219                 codecdata_length = 0;
220             } else {
221                 avio_rb16(pb); avio_r8(pb);
222                 if (version == 5)
223                     avio_r8(pb);
224                 codecdata_length = avio_rb32(pb);
225                 if((unsigned)codecdata_length > INT_MAX - AV_INPUT_BUFFER_PADDING_SIZE){
226                     av_log(s, AV_LOG_ERROR, "codecdata_length too large\n");
227                     return -1;
228                 }
229             }
230 
231             ast->audio_framesize = st->codecpar->block_align;
232             if (st->codecpar->codec_id == AV_CODEC_ID_SIPR) {
233                 if (flavor > 3) {
234                     av_log(s, AV_LOG_ERROR, "bad SIPR file flavor %d\n",
235                            flavor);
236                     return -1;
237                 }
238                 st->codecpar->block_align = ff_sipr_subpk_size[flavor];
239                 sti->need_parsing = AVSTREAM_PARSE_FULL_RAW;
240             } else {
241                 if(sub_packet_size <= 0){
242                     av_log(s, AV_LOG_ERROR, "sub_packet_size is invalid\n");
243                     return -1;
244                 }
245                 st->codecpar->block_align = ast->sub_packet_size;
246             }
247             if ((ret = rm_read_extradata(s, pb, st->codecpar, codecdata_length)) < 0)
248                 return ret;
249 
250             break;
251         case AV_CODEC_ID_AAC:
252             avio_rb16(pb); avio_r8(pb);
253             if (version == 5)
254                 avio_r8(pb);
255             codecdata_length = avio_rb32(pb);
256             if((unsigned)codecdata_length > INT_MAX - AV_INPUT_BUFFER_PADDING_SIZE){
257                 av_log(s, AV_LOG_ERROR, "codecdata_length too large\n");
258                 return -1;
259             }
260             if (codecdata_length >= 1) {
261                 avio_r8(pb);
262                 if ((ret = rm_read_extradata(s, pb, st->codecpar, codecdata_length - 1)) < 0)
263                     return ret;
264             }
265             break;
266         }
267         switch (ast->deint_id) {
268         case DEINT_ID_INT4:
269             if (ast->coded_framesize > ast->audio_framesize ||
270                 sub_packet_h <= 1 ||
271                 ast->coded_framesize * (uint64_t)sub_packet_h > (2 + (sub_packet_h & 1)) * ast->audio_framesize)
272                 return AVERROR_INVALIDDATA;
273             if (ast->coded_framesize * (uint64_t)sub_packet_h != 2*ast->audio_framesize) {
274                 avpriv_request_sample(s, "mismatching interleaver parameters");
275                 return AVERROR_INVALIDDATA;
276             }
277             break;
278         case DEINT_ID_GENR:
279             if (ast->sub_packet_size <= 0 ||
280                 ast->sub_packet_size > ast->audio_framesize)
281                 return AVERROR_INVALIDDATA;
282             if (ast->audio_framesize % ast->sub_packet_size)
283                 return AVERROR_INVALIDDATA;
284             break;
285         case DEINT_ID_SIPR:
286         case DEINT_ID_INT0:
287         case DEINT_ID_VBRS:
288         case DEINT_ID_VBRF:
289             break;
290         default:
291             av_log(s, AV_LOG_ERROR ,"Unknown interleaver %"PRIX32"\n", ast->deint_id);
292             return AVERROR_INVALIDDATA;
293         }
294         if (ast->deint_id == DEINT_ID_INT4 ||
295             ast->deint_id == DEINT_ID_GENR ||
296             ast->deint_id == DEINT_ID_SIPR) {
297             if (st->codecpar->block_align <= 0 ||
298                 ast->audio_framesize * (uint64_t)sub_packet_h > (unsigned)INT_MAX ||
299                 ast->audio_framesize * sub_packet_h < st->codecpar->block_align)
300                 return AVERROR_INVALIDDATA;
301             if (av_new_packet(&ast->pkt, ast->audio_framesize * sub_packet_h) < 0)
302                 return AVERROR(ENOMEM);
303         }
304 
305         if (read_all) {
306             avio_r8(pb);
307             avio_r8(pb);
308             avio_r8(pb);
309             rm_read_metadata(s, pb, 0);
310         }
311     }
312     return 0;
313 }
314 
ff_rm_read_mdpr_codecdata(AVFormatContext * s,AVIOContext * pb,AVStream * st,RMStream * rst,unsigned int codec_data_size,const uint8_t * mime)315 int ff_rm_read_mdpr_codecdata(AVFormatContext *s, AVIOContext *pb,
316                               AVStream *st, RMStream *rst,
317                               unsigned int codec_data_size, const uint8_t *mime)
318 {
319     unsigned int v;
320     int size;
321     int64_t codec_pos;
322     int ret;
323 
324     if (codec_data_size > INT_MAX)
325         return AVERROR_INVALIDDATA;
326     if (codec_data_size == 0)
327         return 0;
328 
329     // Duplicate tags
330     if (   st->codecpar->codec_type != AVMEDIA_TYPE_UNKNOWN
331         && st->codecpar->codec_type != AVMEDIA_TYPE_DATA)
332         return AVERROR_INVALIDDATA;
333 
334     avpriv_set_pts_info(st, 64, 1, 1000);
335     codec_pos = avio_tell(pb);
336     v = avio_rb32(pb);
337 
338     if (v == MKTAG(0xfd, 'a', 'r', '.')) {
339         /* ra type header */
340         if (rm_read_audio_stream_info(s, pb, st, rst, 0))
341             return -1;
342     } else if (v == MKBETAG('L', 'S', 'D', ':')) {
343         avio_seek(pb, -4, SEEK_CUR);
344         if ((ret = rm_read_extradata(s, pb, st->codecpar, codec_data_size)) < 0)
345             return ret;
346 
347         st->codecpar->codec_type = AVMEDIA_TYPE_AUDIO;
348         st->codecpar->codec_tag  = AV_RL32(st->codecpar->extradata);
349         st->codecpar->codec_id   = ff_codec_get_id(ff_rm_codec_tags,
350                                                 st->codecpar->codec_tag);
351     } else if(mime && !strcmp(mime, "logical-fileinfo")){
352         int stream_count, rule_count, property_count, i;
353         ff_remove_stream(s, st);
354         if (avio_rb16(pb) != 0) {
355             av_log(s, AV_LOG_WARNING, "Unsupported version\n");
356             goto skip;
357         }
358         stream_count = avio_rb16(pb);
359         avio_skip(pb, 6*stream_count);
360         rule_count = avio_rb16(pb);
361         avio_skip(pb, 2*rule_count);
362         property_count = avio_rb16(pb);
363         for(i=0; i<property_count; i++){
364             uint8_t name[128], val[128];
365             avio_rb32(pb);
366             if (avio_rb16(pb) != 0) {
367                 av_log(s, AV_LOG_WARNING, "Unsupported Name value property version\n");
368                 goto skip; //FIXME skip just this one
369             }
370             get_str8(pb, name, sizeof(name));
371             switch(avio_rb32(pb)) {
372             case 2: get_strl(pb, val, sizeof(val), avio_rb16(pb));
373                 av_dict_set(&s->metadata, name, val, 0);
374                 break;
375             default: avio_skip(pb, avio_rb16(pb));
376             }
377         }
378     } else {
379         int fps;
380         if (avio_rl32(pb) != MKTAG('V', 'I', 'D', 'O')) {
381         fail1:
382             av_log(s, AV_LOG_WARNING, "Unsupported stream type %08x\n", v);
383             goto skip;
384         }
385         st->codecpar->codec_tag = avio_rl32(pb);
386         st->codecpar->codec_id  = ff_codec_get_id(ff_rm_codec_tags,
387                                                   st->codecpar->codec_tag);
388         av_log(s, AV_LOG_TRACE, "%"PRIX32" %X\n",
389                st->codecpar->codec_tag, MKTAG('R', 'V', '2', '0'));
390         if (st->codecpar->codec_id == AV_CODEC_ID_NONE)
391             goto fail1;
392         st->codecpar->width  = avio_rb16(pb);
393         st->codecpar->height = avio_rb16(pb);
394         avio_skip(pb, 2); // looks like bits per sample
395         avio_skip(pb, 4); // always zero?
396         st->codecpar->codec_type = AVMEDIA_TYPE_VIDEO;
397         ffstream(st)->need_parsing = AVSTREAM_PARSE_TIMESTAMPS;
398         fps = avio_rb32(pb);
399 
400         if ((ret = rm_read_extradata(s, pb, st->codecpar, codec_data_size - (avio_tell(pb) - codec_pos))) < 0)
401             return ret;
402 
403         if (fps > 0) {
404             av_reduce(&st->avg_frame_rate.den, &st->avg_frame_rate.num,
405                       0x10000, fps, (1 << 30) - 1);
406 #if FF_API_R_FRAME_RATE
407             st->r_frame_rate = st->avg_frame_rate;
408 #endif
409         } else if (s->error_recognition & AV_EF_EXPLODE) {
410             av_log(s, AV_LOG_ERROR, "Invalid framerate\n");
411             return AVERROR_INVALIDDATA;
412         }
413     }
414 
415 skip:
416     /* skip codec info */
417     size = avio_tell(pb) - codec_pos;
418     if (codec_data_size >= size) {
419         avio_skip(pb, codec_data_size - size);
420     } else {
421         av_log(s, AV_LOG_WARNING, "codec_data_size %u < size %d\n", codec_data_size, size);
422     }
423 
424     return 0;
425 }
426 
427 /** this function assumes that the demuxer has already seeked to the start
428  * of the INDX chunk, and will bail out if not. */
rm_read_index(AVFormatContext * s)429 static int rm_read_index(AVFormatContext *s)
430 {
431     AVIOContext *pb = s->pb;
432     unsigned int size, n_pkts, str_id, next_off, n, pos, pts;
433     AVStream *st;
434 
435     do {
436         if (avio_rl32(pb) != MKTAG('I','N','D','X'))
437             return -1;
438         size     = avio_rb32(pb);
439         if (size < 20)
440             return -1;
441         avio_skip(pb, 2);
442         n_pkts   = avio_rb32(pb);
443         str_id   = avio_rb16(pb);
444         next_off = avio_rb32(pb);
445         for (n = 0; n < s->nb_streams; n++)
446             if (s->streams[n]->id == str_id) {
447                 st = s->streams[n];
448                 break;
449             }
450         if (n == s->nb_streams) {
451             av_log(s, AV_LOG_ERROR,
452                    "Invalid stream index %d for index at pos %"PRId64"\n",
453                    str_id, avio_tell(pb));
454             goto skip;
455         } else if ((avio_size(pb) - avio_tell(pb)) / 14 < n_pkts) {
456             av_log(s, AV_LOG_ERROR,
457                    "Nr. of packets in packet index for stream index %d "
458                    "exceeds filesize (%"PRId64" at %"PRId64" = %"PRId64")\n",
459                    str_id, avio_size(pb), avio_tell(pb),
460                    (avio_size(pb) - avio_tell(pb)) / 14);
461             goto skip;
462         }
463 
464         for (n = 0; n < n_pkts; n++) {
465             if (avio_feof(pb))
466                 return AVERROR_INVALIDDATA;
467             avio_skip(pb, 2);
468             pts = avio_rb32(pb);
469             pos = avio_rb32(pb);
470             avio_skip(pb, 4); /* packet no. */
471 
472             av_add_index_entry(st, pos, pts, 0, 0, AVINDEX_KEYFRAME);
473         }
474 
475 skip:
476         if (next_off && avio_tell(pb) < next_off &&
477             avio_seek(pb, next_off, SEEK_SET) < 0) {
478             av_log(s, AV_LOG_ERROR,
479                    "Non-linear index detected, not supported\n");
480             return -1;
481         }
482     } while (next_off);
483 
484     return 0;
485 }
486 
rm_read_header_old(AVFormatContext * s)487 static int rm_read_header_old(AVFormatContext *s)
488 {
489     RMDemuxContext *rm = s->priv_data;
490     AVStream *st;
491 
492     rm->old_format = 1;
493     st = avformat_new_stream(s, NULL);
494     if (!st)
495         return -1;
496     st->priv_data = ff_rm_alloc_rmstream();
497     if (!st->priv_data)
498         return AVERROR(ENOMEM);
499     return rm_read_audio_stream_info(s, s->pb, st, st->priv_data, 1);
500 }
501 
rm_read_multi(AVFormatContext * s,AVIOContext * pb,AVStream * st,char * mime)502 static int rm_read_multi(AVFormatContext *s, AVIOContext *pb,
503                          AVStream *st, char *mime)
504 {
505     int number_of_streams = avio_rb16(pb);
506     int number_of_mdpr;
507     int i, ret;
508     unsigned size2;
509     for (i = 0; i<number_of_streams; i++)
510         avio_rb16(pb);
511     number_of_mdpr = avio_rb16(pb);
512     if (number_of_mdpr != 1) {
513         avpriv_request_sample(s, "MLTI with multiple (%d) MDPR", number_of_mdpr);
514     }
515     for (i = 0; i < number_of_mdpr; i++) {
516         AVStream *st2;
517         if (i > 0) {
518             st2 = avformat_new_stream(s, NULL);
519             if (!st2) {
520                 ret = AVERROR(ENOMEM);
521                 return ret;
522             }
523             st2->id = st->id + (i<<16);
524             st2->codecpar->bit_rate = st->codecpar->bit_rate;
525             st2->start_time = st->start_time;
526             st2->duration   = st->duration;
527             st2->codecpar->codec_type = AVMEDIA_TYPE_DATA;
528             st2->priv_data = ff_rm_alloc_rmstream();
529             if (!st2->priv_data)
530                 return AVERROR(ENOMEM);
531         } else
532             st2 = st;
533 
534         size2 = avio_rb32(pb);
535         ret = ff_rm_read_mdpr_codecdata(s, s->pb, st2, st2->priv_data,
536                                         size2, NULL);
537         if (ret < 0)
538             return ret;
539     }
540     return 0;
541 }
542 
rm_read_header(AVFormatContext * s)543 static int rm_read_header(AVFormatContext *s)
544 {
545     RMDemuxContext *rm = s->priv_data;
546     AVStream *st;
547     AVIOContext *pb = s->pb;
548     unsigned int tag;
549     int tag_size;
550     unsigned int start_time, duration;
551     unsigned int data_off = 0, indx_off = 0;
552     char buf[128], mime[128];
553     int flags = 0;
554     int ret;
555     unsigned size, v;
556     int64_t codec_pos;
557 
558     tag = avio_rl32(pb);
559     if (tag == MKTAG('.', 'r', 'a', 0xfd)) {
560         /* very old .ra format */
561         return rm_read_header_old(s);
562     } else if (tag != MKTAG('.', 'R', 'M', 'F')) {
563         return AVERROR(EIO);
564     }
565 
566     tag_size = avio_rb32(pb);
567     if (tag_size < 0)
568         return AVERROR_INVALIDDATA;
569     avio_skip(pb, tag_size - 8);
570 
571     for(;;) {
572         if (avio_feof(pb))
573             return AVERROR_INVALIDDATA;
574         tag = avio_rl32(pb);
575         tag_size = avio_rb32(pb);
576         avio_rb16(pb);
577         av_log(s, AV_LOG_TRACE, "tag=%s size=%d\n",
578                av_fourcc2str(tag), tag_size);
579         if (tag_size < 10 && tag != MKTAG('D', 'A', 'T', 'A'))
580             return AVERROR_INVALIDDATA;
581         switch(tag) {
582         case MKTAG('P', 'R', 'O', 'P'):
583             /* file header */
584             avio_rb32(pb); /* max bit rate */
585             avio_rb32(pb); /* avg bit rate */
586             avio_rb32(pb); /* max packet size */
587             avio_rb32(pb); /* avg packet size */
588             avio_rb32(pb); /* nb packets */
589             duration = avio_rb32(pb); /* duration */
590             s->duration = av_rescale(duration, AV_TIME_BASE, 1000);
591             avio_rb32(pb); /* preroll */
592             indx_off = avio_rb32(pb); /* index offset */
593             data_off = avio_rb32(pb); /* data offset */
594             avio_rb16(pb); /* nb streams */
595             flags = avio_rb16(pb); /* flags */
596             break;
597         case MKTAG('C', 'O', 'N', 'T'):
598             rm_read_metadata(s, pb, 1);
599             break;
600         case MKTAG('M', 'D', 'P', 'R'):
601             st = avformat_new_stream(s, NULL);
602             if (!st)
603                 return AVERROR(ENOMEM);
604             st->id = avio_rb16(pb);
605             avio_rb32(pb); /* max bit rate */
606             st->codecpar->bit_rate = avio_rb32(pb); /* bit rate */
607             avio_rb32(pb); /* max packet size */
608             avio_rb32(pb); /* avg packet size */
609             start_time = avio_rb32(pb); /* start time */
610             avio_rb32(pb); /* preroll */
611             duration = avio_rb32(pb); /* duration */
612             st->start_time = start_time;
613             st->duration = duration;
614             if(duration>0)
615                 s->duration = AV_NOPTS_VALUE;
616             get_str8(pb, buf, sizeof(buf)); /* desc */
617             get_str8(pb, mime, sizeof(mime)); /* mimetype */
618             st->codecpar->codec_type = AVMEDIA_TYPE_DATA;
619             st->priv_data = ff_rm_alloc_rmstream();
620             if (!st->priv_data)
621                 return AVERROR(ENOMEM);
622 
623             size = avio_rb32(pb);
624             codec_pos = avio_tell(pb);
625 
626             ffio_ensure_seekback(pb, 4);
627             v = avio_rb32(pb);
628             if (v == MKBETAG('M', 'L', 'T', 'I')) {
629                 ret = rm_read_multi(s, s->pb, st, mime);
630                 if (ret < 0)
631                     return ret;
632                 avio_seek(pb, codec_pos + size, SEEK_SET);
633             } else {
634                 avio_skip(pb, -4);
635                 ret = ff_rm_read_mdpr_codecdata(s, s->pb, st, st->priv_data,
636                                                 size, mime);
637                 if (ret < 0)
638                     return ret;
639             }
640 
641             break;
642         case MKTAG('D', 'A', 'T', 'A'):
643             goto header_end;
644         default:
645             /* unknown tag: skip it */
646             avio_skip(pb, tag_size - 10);
647             break;
648         }
649     }
650  header_end:
651     rm->nb_packets = avio_rb32(pb); /* number of packets */
652     if (!rm->nb_packets && (flags & 4))
653         rm->nb_packets = 3600 * 25;
654     avio_rb32(pb); /* next data header */
655 
656     if (!data_off)
657         data_off = avio_tell(pb) - 18;
658     if (indx_off && (pb->seekable & AVIO_SEEKABLE_NORMAL) &&
659         !(s->flags & AVFMT_FLAG_IGNIDX) &&
660         avio_seek(pb, indx_off, SEEK_SET) >= 0) {
661         rm_read_index(s);
662         avio_seek(pb, data_off + 18, SEEK_SET);
663     }
664 
665     return 0;
666 }
667 
get_num(AVIOContext * pb,int * len)668 static int get_num(AVIOContext *pb, int *len)
669 {
670     int n, n1;
671 
672     n = avio_rb16(pb);
673     (*len)-=2;
674     n &= 0x7FFF;
675     if (n >= 0x4000) {
676         return n - 0x4000;
677     } else {
678         n1 = avio_rb16(pb);
679         (*len)-=2;
680         return (n << 16) | n1;
681     }
682 }
683 
684 /* multiple of 20 bytes for ra144 (ugly) */
685 #define RAW_PACKET_SIZE 1000
686 
rm_sync(AVFormatContext * s,int64_t * timestamp,int * flags,int * stream_index,int64_t * pos)687 static int rm_sync(AVFormatContext *s, int64_t *timestamp, int *flags, int *stream_index, int64_t *pos){
688     RMDemuxContext *rm = s->priv_data;
689     AVIOContext *pb = s->pb;
690     AVStream *st;
691     uint32_t state=0xFFFFFFFF;
692 
693     while(!avio_feof(pb)){
694         int len, num, i;
695         int mlti_id;
696         *pos= avio_tell(pb) - 3;
697         if(rm->remaining_len > 0){
698             num= rm->current_stream;
699             mlti_id = 0;
700             len= rm->remaining_len;
701             *timestamp = AV_NOPTS_VALUE;
702             *flags= 0;
703         }else{
704             state= (state<<8) + avio_r8(pb);
705 
706             if(state == MKBETAG('I', 'N', 'D', 'X')){
707                 int n_pkts;
708                 int64_t expected_len;
709                 len = avio_rb32(pb);
710                 avio_skip(pb, 2);
711                 n_pkts = avio_rb32(pb);
712                 expected_len = 20 + n_pkts * 14LL;
713 
714                 if (len == 20 && expected_len <= INT_MAX)
715                     /* some files don't add index entries to chunk size... */
716                     len = expected_len;
717                 else if (len != expected_len)
718                     av_log(s, AV_LOG_WARNING,
719                            "Index size %d (%d pkts) is wrong, should be %"PRId64".\n",
720                            len, n_pkts, expected_len);
721                 if(len < 14)
722                     continue;
723                 len -= 14; // we already read part of the index header
724                 goto skip;
725             } else if (state == MKBETAG('D','A','T','A')) {
726                 av_log(s, AV_LOG_WARNING,
727                        "DATA tag in middle of chunk, file may be broken.\n");
728             }
729 
730             if(state > (unsigned)0xFFFF || state <= 12)
731                 continue;
732             len=state - 12;
733             state= 0xFFFFFFFF;
734 
735             num = avio_rb16(pb);
736             *timestamp = avio_rb32(pb);
737             mlti_id = (avio_r8(pb) >> 1) - 1;
738             mlti_id = FFMAX(mlti_id, 0) << 16;
739             *flags = avio_r8(pb); /* flags */
740         }
741         for(i=0;i<s->nb_streams;i++) {
742             st = s->streams[i];
743             if (mlti_id + num == st->id)
744                 break;
745         }
746         if (i == s->nb_streams) {
747 skip:
748             /* skip packet if unknown number */
749             avio_skip(pb, len);
750             rm->remaining_len = 0;
751             continue;
752         }
753         *stream_index= i;
754 
755         return len;
756     }
757     return -1;
758 }
759 
rm_assemble_video_frame(AVFormatContext * s,AVIOContext * pb,RMDemuxContext * rm,RMStream * vst,AVPacket * pkt,int len,int * pseq,int64_t * timestamp)760 static int rm_assemble_video_frame(AVFormatContext *s, AVIOContext *pb,
761                                    RMDemuxContext *rm, RMStream *vst,
762                                    AVPacket *pkt, int len, int *pseq,
763                                    int64_t *timestamp)
764 {
765     int hdr;
766     int seq = 0, pic_num = 0, len2 = 0, pos = 0; //init to silence compiler warning
767     int type;
768     int ret;
769 
770     hdr = avio_r8(pb); len--;
771     type = hdr >> 6;
772 
773     if(type != 3){  // not frame as a part of packet
774         seq = avio_r8(pb); len--;
775     }
776     if(type != 1){  // not whole frame
777         len2 = get_num(pb, &len);
778         pos  = get_num(pb, &len);
779         pic_num = avio_r8(pb); len--;
780     }
781     if(len<0) {
782         av_log(s, AV_LOG_ERROR, "Insufficient data\n");
783         return -1;
784     }
785     rm->remaining_len = len;
786     if(type&1){     // frame, not slice
787         if(type == 3){  // frame as a part of packet
788             len= len2;
789             *timestamp = pos;
790         }
791         if(rm->remaining_len < len) {
792             av_log(s, AV_LOG_ERROR, "Insufficient remaining len\n");
793             return -1;
794         }
795         rm->remaining_len -= len;
796         if ((ret = av_new_packet(pkt, len + 9)) < 0)
797             return ret;
798         pkt->data[0] = 0;
799         AV_WL32(pkt->data + 1, 1);
800         AV_WL32(pkt->data + 5, 0);
801         if ((ret = avio_read(pb, pkt->data + 9, len)) != len) {
802             av_packet_unref(pkt);
803             av_log(s, AV_LOG_ERROR, "Failed to read %d bytes\n", len);
804             return ret < 0 ? ret : AVERROR(EIO);
805         }
806         return 0;
807     }
808     //now we have to deal with single slice
809 
810     *pseq = seq;
811     if((seq & 0x7F) == 1 || vst->curpic_num != pic_num){
812         if (len2 > ffio_limit(pb, len2)) {
813             av_log(s, AV_LOG_ERROR, "Impossibly sized packet\n");
814             return AVERROR_INVALIDDATA;
815         }
816         vst->slices = ((hdr & 0x3F) << 1) + 1;
817         vst->videobufsize = len2 + 8*vst->slices + 1;
818         av_packet_unref(&vst->pkt); //FIXME this should be output.
819         if ((ret = av_new_packet(&vst->pkt, vst->videobufsize)) < 0)
820             return ret;
821         vst->videobufpos = 8*vst->slices + 1;
822         vst->cur_slice = 0;
823         vst->curpic_num = pic_num;
824         vst->pktpos = avio_tell(pb);
825     }
826     if(type == 2)
827         len = FFMIN(len, pos);
828 
829     if(++vst->cur_slice > vst->slices) {
830         av_log(s, AV_LOG_ERROR, "cur slice %d, too large\n", vst->cur_slice);
831         return 1;
832     }
833     if(!vst->pkt.data)
834         return AVERROR(ENOMEM);
835     AV_WL32(vst->pkt.data - 7 + 8*vst->cur_slice, 1);
836     AV_WL32(vst->pkt.data - 3 + 8*vst->cur_slice, vst->videobufpos - 8*vst->slices - 1);
837     if(vst->videobufpos + len > vst->videobufsize) {
838         av_log(s, AV_LOG_ERROR, "outside videobufsize\n");
839         return 1;
840     }
841     if (avio_read(pb, vst->pkt.data + vst->videobufpos, len) != len)
842         return AVERROR(EIO);
843     vst->videobufpos += len;
844     rm->remaining_len-= len;
845 
846     if (type == 2 || vst->videobufpos == vst->videobufsize) {
847         vst->pkt.data[0] = vst->cur_slice-1;
848         av_packet_move_ref(pkt, &vst->pkt);
849         if(vst->slices != vst->cur_slice) //FIXME find out how to set slices correct from the begin
850             memmove(pkt->data + 1 + 8*vst->cur_slice, pkt->data + 1 + 8*vst->slices,
851                 vst->videobufpos - 1 - 8*vst->slices);
852         av_shrink_packet(pkt, vst->videobufpos + 8*(vst->cur_slice - vst->slices));
853         pkt->pts = AV_NOPTS_VALUE;
854         pkt->pos = vst->pktpos;
855         vst->slices = 0;
856         return 0;
857     }
858 
859     return 1;
860 }
861 
862 static inline void
rm_ac3_swap_bytes(AVStream * st,AVPacket * pkt)863 rm_ac3_swap_bytes (AVStream *st, AVPacket *pkt)
864 {
865     uint8_t *ptr;
866     int j;
867 
868     if (st->codecpar->codec_id == AV_CODEC_ID_AC3) {
869         ptr = pkt->data;
870         for (j=0;j<pkt->size;j+=2) {
871             FFSWAP(int, ptr[0], ptr[1]);
872             ptr += 2;
873         }
874     }
875 }
876 
readfull(AVFormatContext * s,AVIOContext * pb,uint8_t * dst,int n)877 static int readfull(AVFormatContext *s, AVIOContext *pb, uint8_t *dst, int n) {
878     int ret = avio_read(pb, dst, n);
879     if (ret != n) {
880         if (ret >= 0) memset(dst + ret, 0, n - ret);
881         else          memset(dst      , 0, n);
882         av_log(s, AV_LOG_ERROR, "Failed to fully read block\n");
883     }
884     return ret;
885 }
886 
887 int
ff_rm_parse_packet(AVFormatContext * s,AVIOContext * pb,AVStream * st,RMStream * ast,int len,AVPacket * pkt,int * seq,int flags,int64_t timestamp)888 ff_rm_parse_packet (AVFormatContext *s, AVIOContext *pb,
889                     AVStream *st, RMStream *ast, int len, AVPacket *pkt,
890                     int *seq, int flags, int64_t timestamp)
891 {
892     RMDemuxContext *rm = s->priv_data;
893     int ret;
894 
895     if (st->codecpar->codec_type == AVMEDIA_TYPE_VIDEO) {
896         rm->current_stream= st->id;
897         ret = rm_assemble_video_frame(s, pb, rm, ast, pkt, len, seq, &timestamp);
898         if(ret)
899             return ret < 0 ? ret : -1; //got partial frame or error
900     } else if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO) {
901         if ((ast->deint_id == DEINT_ID_GENR) ||
902             (ast->deint_id == DEINT_ID_INT4) ||
903             (ast->deint_id == DEINT_ID_SIPR)) {
904             int x;
905             int sps = ast->sub_packet_size;
906             int cfs = ast->coded_framesize;
907             int h = ast->sub_packet_h;
908             int y = ast->sub_packet_cnt;
909             int w = ast->audio_framesize;
910 
911             if (flags & 2)
912                 y = ast->sub_packet_cnt = 0;
913             if (!y)
914                 ast->audiotimestamp = timestamp;
915 
916             switch (ast->deint_id) {
917                 case DEINT_ID_INT4:
918                     for (x = 0; x < h/2; x++)
919                         readfull(s, pb, ast->pkt.data+x*2*w+y*cfs, cfs);
920                     break;
921                 case DEINT_ID_GENR:
922                     for (x = 0; x < w/sps; x++)
923                         readfull(s, pb, ast->pkt.data+sps*(h*x+((h+1)/2)*(y&1)+(y>>1)), sps);
924                     break;
925                 case DEINT_ID_SIPR:
926                     readfull(s, pb, ast->pkt.data + y * w, w);
927                     break;
928             }
929 
930             if (++(ast->sub_packet_cnt) < h)
931                 return -1;
932             if (ast->deint_id == DEINT_ID_SIPR)
933                 ff_rm_reorder_sipr_data(ast->pkt.data, h, w);
934 
935              ast->sub_packet_cnt = 0;
936              rm->audio_stream_num = st->index;
937             if (st->codecpar->block_align <= 0) {
938                 av_log(s, AV_LOG_ERROR, "Invalid block alignment %d\n", st->codecpar->block_align);
939                 return AVERROR_INVALIDDATA;
940             }
941              rm->audio_pkt_cnt = h * w / st->codecpar->block_align;
942         } else if ((ast->deint_id == DEINT_ID_VBRF) ||
943                    (ast->deint_id == DEINT_ID_VBRS)) {
944             int x;
945             rm->audio_stream_num = st->index;
946             ast->sub_packet_cnt = (avio_rb16(pb) & 0xf0) >> 4;
947             if (ast->sub_packet_cnt) {
948                 for (x = 0; x < ast->sub_packet_cnt; x++)
949                     ast->sub_packet_lengths[x] = avio_rb16(pb);
950                 rm->audio_pkt_cnt = ast->sub_packet_cnt;
951                 ast->audiotimestamp = timestamp;
952             } else
953                 return -1;
954         } else {
955             ret = av_get_packet(pb, pkt, len);
956             if (ret < 0)
957                 return ret;
958             rm_ac3_swap_bytes(st, pkt);
959         }
960     } else {
961         ret = av_get_packet(pb, pkt, len);
962         if (ret < 0)
963             return ret;
964     }
965 
966     pkt->stream_index = st->index;
967 
968     pkt->pts = timestamp;
969     if (flags & 2)
970         pkt->flags |= AV_PKT_FLAG_KEY;
971 
972     return st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO ? rm->audio_pkt_cnt : 0;
973 }
974 
975 int
ff_rm_retrieve_cache(AVFormatContext * s,AVIOContext * pb,AVStream * st,RMStream * ast,AVPacket * pkt)976 ff_rm_retrieve_cache (AVFormatContext *s, AVIOContext *pb,
977                       AVStream *st, RMStream *ast, AVPacket *pkt)
978 {
979     RMDemuxContext *rm = s->priv_data;
980     int ret;
981 
982     av_assert0 (rm->audio_pkt_cnt > 0);
983 
984     if (ast->deint_id == DEINT_ID_VBRF ||
985         ast->deint_id == DEINT_ID_VBRS) {
986         ret = av_get_packet(pb, pkt, ast->sub_packet_lengths[ast->sub_packet_cnt - rm->audio_pkt_cnt]);
987         if (ret < 0)
988             return ret;
989     } else {
990         ret = av_new_packet(pkt, st->codecpar->block_align);
991         if (ret < 0)
992             return ret;
993         memcpy(pkt->data, ast->pkt.data + st->codecpar->block_align * //FIXME avoid this
994                (ast->sub_packet_h * ast->audio_framesize / st->codecpar->block_align - rm->audio_pkt_cnt),
995                st->codecpar->block_align);
996     }
997     rm->audio_pkt_cnt--;
998     if ((pkt->pts = ast->audiotimestamp) != AV_NOPTS_VALUE) {
999         ast->audiotimestamp = AV_NOPTS_VALUE;
1000         pkt->flags = AV_PKT_FLAG_KEY;
1001     } else
1002         pkt->flags = 0;
1003     pkt->stream_index = st->index;
1004 
1005     return rm->audio_pkt_cnt;
1006 }
1007 
rm_read_packet(AVFormatContext * s,AVPacket * pkt)1008 static int rm_read_packet(AVFormatContext *s, AVPacket *pkt)
1009 {
1010     RMDemuxContext *rm = s->priv_data;
1011     AVStream *st = NULL; // init to silence compiler warning
1012     int i, res, seq = 1;
1013     int64_t timestamp, pos, len;
1014     int flags;
1015 
1016     for (;;) {
1017         if (rm->audio_pkt_cnt) {
1018             // If there are queued audio packet return them first
1019             st = s->streams[rm->audio_stream_num];
1020             res = ff_rm_retrieve_cache(s, s->pb, st, st->priv_data, pkt);
1021             if(res < 0)
1022                 return res;
1023             flags = 0;
1024         } else {
1025             if (rm->old_format) {
1026                 RMStream *ast;
1027 
1028                 st = s->streams[0];
1029                 ast = st->priv_data;
1030                 timestamp = AV_NOPTS_VALUE;
1031                 len = !ast->audio_framesize ? RAW_PACKET_SIZE :
1032                     ast->coded_framesize * (int64_t)ast->sub_packet_h / 2;
1033                 if (len > INT_MAX)
1034                     return AVERROR_INVALIDDATA;
1035                 flags = (seq++ == 1) ? 2 : 0;
1036                 pos = avio_tell(s->pb);
1037             } else {
1038                 len = rm_sync(s, &timestamp, &flags, &i, &pos);
1039                 if (len > 0)
1040                     st = s->streams[i];
1041             }
1042 
1043             if (avio_feof(s->pb))
1044                 return AVERROR_EOF;
1045             if (len <= 0)
1046                 return AVERROR(EIO);
1047 
1048             res = ff_rm_parse_packet (s, s->pb, st, st->priv_data, len, pkt,
1049                                       &seq, flags, timestamp);
1050             if (res < -1)
1051                 return res;
1052             if((flags&2) && (seq&0x7F) == 1)
1053                 av_add_index_entry(st, pos, timestamp, 0, 0, AVINDEX_KEYFRAME);
1054             if (res)
1055                 continue;
1056         }
1057 
1058         if(  (st->discard >= AVDISCARD_NONKEY && !(flags&2))
1059            || st->discard >= AVDISCARD_ALL){
1060             av_packet_unref(pkt);
1061         } else
1062             break;
1063     }
1064 
1065     return 0;
1066 }
1067 
rm_read_close(AVFormatContext * s)1068 static int rm_read_close(AVFormatContext *s)
1069 {
1070     int i;
1071 
1072     for (i=0;i<s->nb_streams;i++)
1073         ff_rm_free_rmstream(s->streams[i]->priv_data);
1074 
1075     return 0;
1076 }
1077 
rm_probe(const AVProbeData * p)1078 static int rm_probe(const AVProbeData *p)
1079 {
1080     /* check file header */
1081     if ((p->buf[0] == '.' && p->buf[1] == 'R' &&
1082          p->buf[2] == 'M' && p->buf[3] == 'F' &&
1083          p->buf[4] == 0 && p->buf[5] == 0) ||
1084         (p->buf[0] == '.' && p->buf[1] == 'r' &&
1085          p->buf[2] == 'a' && p->buf[3] == 0xfd))
1086         return AVPROBE_SCORE_MAX;
1087     else
1088         return 0;
1089 }
1090 
rm_read_dts(AVFormatContext * s,int stream_index,int64_t * ppos,int64_t pos_limit)1091 static int64_t rm_read_dts(AVFormatContext *s, int stream_index,
1092                                int64_t *ppos, int64_t pos_limit)
1093 {
1094     RMDemuxContext *rm = s->priv_data;
1095     int64_t pos, dts;
1096     int stream_index2, flags, len, h;
1097 
1098     pos = *ppos;
1099 
1100     if(rm->old_format)
1101         return AV_NOPTS_VALUE;
1102 
1103     if (avio_seek(s->pb, pos, SEEK_SET) < 0)
1104         return AV_NOPTS_VALUE;
1105 
1106     rm->remaining_len=0;
1107     for(;;){
1108         int seq=1;
1109         AVStream *st;
1110 
1111         len = rm_sync(s, &dts, &flags, &stream_index2, &pos);
1112         if(len<0)
1113             return AV_NOPTS_VALUE;
1114 
1115         st = s->streams[stream_index2];
1116         if (st->codecpar->codec_type == AVMEDIA_TYPE_VIDEO) {
1117             h= avio_r8(s->pb); len--;
1118             if(!(h & 0x40)){
1119                 seq = avio_r8(s->pb); len--;
1120             }
1121         }
1122 
1123         if((flags&2) && (seq&0x7F) == 1){
1124             av_log(s, AV_LOG_TRACE, "%d %d-%d %"PRId64" %d\n",
1125                     flags, stream_index2, stream_index, dts, seq);
1126             av_add_index_entry(st, pos, dts, 0, 0, AVINDEX_KEYFRAME);
1127             if(stream_index2 == stream_index)
1128                 break;
1129         }
1130 
1131         avio_skip(s->pb, len);
1132     }
1133     *ppos = pos;
1134     return dts;
1135 }
1136 
rm_read_seek(AVFormatContext * s,int stream_index,int64_t pts,int flags)1137 static int rm_read_seek(AVFormatContext *s, int stream_index,
1138                         int64_t pts, int flags)
1139 {
1140     RMDemuxContext *rm = s->priv_data;
1141 
1142     if (ff_seek_frame_binary(s, stream_index, pts, flags) < 0)
1143         return -1;
1144     rm->audio_pkt_cnt = 0;
1145     return 0;
1146 }
1147 
1148 
1149 const AVInputFormat ff_rm_demuxer = {
1150     .name           = "rm",
1151     .long_name      = NULL_IF_CONFIG_SMALL("RealMedia"),
1152     .priv_data_size = sizeof(RMDemuxContext),
1153     .flags_internal = FF_FMT_INIT_CLEANUP,
1154     .read_probe     = rm_probe,
1155     .read_header    = rm_read_header,
1156     .read_packet    = rm_read_packet,
1157     .read_close     = rm_read_close,
1158     .read_timestamp = rm_read_dts,
1159     .read_seek      = rm_read_seek,
1160 };
1161 
1162 const AVInputFormat ff_rdt_demuxer = {
1163     .name           = "rdt",
1164     .long_name      = NULL_IF_CONFIG_SMALL("RDT demuxer"),
1165     .priv_data_size = sizeof(RMDemuxContext),
1166     .read_close     = rm_read_close,
1167     .flags          = AVFMT_NOFILE,
1168 };
1169 
ivr_probe(const AVProbeData * p)1170 static int ivr_probe(const AVProbeData *p)
1171 {
1172     if (memcmp(p->buf, ".R1M\x0\x1\x1", 7) &&
1173         memcmp(p->buf, ".REC", 4))
1174         return 0;
1175 
1176     return AVPROBE_SCORE_MAX;
1177 }
1178 
ivr_read_header(AVFormatContext * s)1179 static int ivr_read_header(AVFormatContext *s)
1180 {
1181     unsigned tag, type, len, tlen, value;
1182     int i, j, n, count, nb_streams = 0, ret;
1183     uint8_t key[256], val[256];
1184     AVIOContext *pb = s->pb;
1185     AVStream *st;
1186     int64_t pos, offset=0, temp;
1187 
1188     pos = avio_tell(pb);
1189     tag = avio_rl32(pb);
1190     if (tag == MKTAG('.','R','1','M')) {
1191         if (avio_rb16(pb) != 1)
1192             return AVERROR_INVALIDDATA;
1193         if (avio_r8(pb) != 1)
1194             return AVERROR_INVALIDDATA;
1195         len = avio_rb32(pb);
1196         avio_skip(pb, len);
1197         avio_skip(pb, 5);
1198         temp = avio_rb64(pb);
1199         while (!avio_feof(pb) && temp) {
1200             offset = temp;
1201             temp = avio_rb64(pb);
1202         }
1203         if (offset <= 0)
1204             return AVERROR_INVALIDDATA;
1205         avio_skip(pb, offset - avio_tell(pb));
1206         if (avio_r8(pb) != 1)
1207             return AVERROR_INVALIDDATA;
1208         len = avio_rb32(pb);
1209         avio_skip(pb, len);
1210         if (avio_r8(pb) != 2)
1211             return AVERROR_INVALIDDATA;
1212         avio_skip(pb, 16);
1213         pos = avio_tell(pb);
1214         tag = avio_rl32(pb);
1215     }
1216 
1217     if (tag != MKTAG('.','R','E','C'))
1218         return AVERROR_INVALIDDATA;
1219 
1220     if (avio_r8(pb) != 0)
1221         return AVERROR_INVALIDDATA;
1222     count = avio_rb32(pb);
1223     for (i = 0; i < count; i++) {
1224         if (avio_feof(pb))
1225             return AVERROR_INVALIDDATA;
1226 
1227         type = avio_r8(pb);
1228         tlen = avio_rb32(pb);
1229         avio_get_str(pb, tlen, key, sizeof(key));
1230         len = avio_rb32(pb);
1231         if (type == 5) {
1232             avio_get_str(pb, len, val, sizeof(val));
1233             av_log(s, AV_LOG_DEBUG, "%s = '%s'\n", key, val);
1234         } else if (type == 4) {
1235             av_log(s, AV_LOG_DEBUG, "%s = '0x", key);
1236             for (j = 0; j < len; j++) {
1237                 if (avio_feof(pb))
1238                     return AVERROR_INVALIDDATA;
1239                 av_log(s, AV_LOG_DEBUG, "%X", avio_r8(pb));
1240             }
1241             av_log(s, AV_LOG_DEBUG, "'\n");
1242         } else if (len == 4 && type == 3 && !strncmp(key, "StreamCount", tlen)) {
1243             nb_streams = value = avio_rb32(pb);
1244         } else if (len == 4 && type == 3) {
1245             value = avio_rb32(pb);
1246             av_log(s, AV_LOG_DEBUG, "%s = %d\n", key, value);
1247         } else {
1248             av_log(s, AV_LOG_DEBUG, "Skipping unsupported key: %s\n", key);
1249             avio_skip(pb, len);
1250         }
1251     }
1252 
1253     for (n = 0; n < nb_streams; n++) {
1254         if (!(st = avformat_new_stream(s, NULL)) ||
1255             !(st->priv_data = ff_rm_alloc_rmstream()))
1256             return AVERROR(ENOMEM);
1257 
1258         if (avio_r8(pb) != 1)
1259             return AVERROR_INVALIDDATA;
1260 
1261         count = avio_rb32(pb);
1262         for (i = 0; i < count; i++) {
1263             if (avio_feof(pb))
1264                 return AVERROR_INVALIDDATA;
1265 
1266             type = avio_r8(pb);
1267             tlen  = avio_rb32(pb);
1268             avio_get_str(pb, tlen, key, sizeof(key));
1269             len  = avio_rb32(pb);
1270             if (type == 5) {
1271                 avio_get_str(pb, len, val, sizeof(val));
1272                 av_log(s, AV_LOG_DEBUG, "%s = '%s'\n", key, val);
1273             } else if (type == 4 && !strncmp(key, "OpaqueData", tlen)) {
1274                 ret = ffio_ensure_seekback(pb, 4);
1275                 if (ret < 0)
1276                     return ret;
1277                 if (avio_rb32(pb) == MKBETAG('M', 'L', 'T', 'I')) {
1278                     ret = rm_read_multi(s, pb, st, NULL);
1279                 } else {
1280                     if (avio_feof(pb))
1281                         return AVERROR_INVALIDDATA;
1282                     avio_seek(pb, -4, SEEK_CUR);
1283                     ret = ff_rm_read_mdpr_codecdata(s, pb, st, st->priv_data, len, NULL);
1284                 }
1285 
1286                 if (ret < 0)
1287                     return ret;
1288             } else if (type == 4) {
1289                 int j;
1290 
1291                 av_log(s, AV_LOG_DEBUG, "%s = '0x", key);
1292                 for (j = 0; j < len; j++) {
1293                     if (avio_feof(pb))
1294                         return AVERROR_INVALIDDATA;
1295                     av_log(s, AV_LOG_DEBUG, "%X", avio_r8(pb));
1296                 }
1297                 av_log(s, AV_LOG_DEBUG, "'\n");
1298             } else if (len == 4 && type == 3 && !strncmp(key, "Duration", tlen)) {
1299                 st->duration = avio_rb32(pb);
1300             } else if (len == 4 && type == 3) {
1301                 value = avio_rb32(pb);
1302                 av_log(s, AV_LOG_DEBUG, "%s = %d\n", key, value);
1303             } else {
1304                 av_log(s, AV_LOG_DEBUG, "Skipping unsupported key: %s\n", key);
1305                 avio_skip(pb, len);
1306             }
1307         }
1308     }
1309 
1310     if (avio_r8(pb) != 6)
1311         return AVERROR_INVALIDDATA;
1312     avio_skip(pb, 12);
1313     avio_seek(pb, avio_rb64(pb) + pos, SEEK_SET);
1314     if (avio_r8(pb) != 8)
1315         return AVERROR_INVALIDDATA;
1316     avio_skip(pb, 8);
1317 
1318     return 0;
1319 }
1320 
ivr_read_packet(AVFormatContext * s,AVPacket * pkt)1321 static int ivr_read_packet(AVFormatContext *s, AVPacket *pkt)
1322 {
1323     RMDemuxContext *rm = s->priv_data;
1324     int ret = AVERROR_EOF, opcode;
1325     AVIOContext *pb = s->pb;
1326     unsigned size, index;
1327     int64_t pos, pts;
1328 
1329     if (avio_feof(pb) || rm->data_end)
1330         return AVERROR_EOF;
1331 
1332     pos = avio_tell(pb);
1333 
1334     for (;;) {
1335         if (rm->audio_pkt_cnt) {
1336             // If there are queued audio packet return them first
1337             AVStream *st;
1338 
1339             st = s->streams[rm->audio_stream_num];
1340             ret = ff_rm_retrieve_cache(s, pb, st, st->priv_data, pkt);
1341             if (ret < 0) {
1342                 return ret;
1343             }
1344         } else {
1345             if (rm->remaining_len) {
1346                 avio_skip(pb, rm->remaining_len);
1347                 rm->remaining_len = 0;
1348             }
1349 
1350             if (avio_feof(pb))
1351                 return AVERROR_EOF;
1352 
1353             opcode = avio_r8(pb);
1354             if (opcode == 2) {
1355                 AVStream *st;
1356                 int seq = 1;
1357 
1358                 pts = avio_rb32(pb);
1359                 index = avio_rb16(pb);
1360                 if (index >= s->nb_streams)
1361                     return AVERROR_INVALIDDATA;
1362 
1363                 avio_skip(pb, 4);
1364                 size = avio_rb32(pb);
1365                 avio_skip(pb, 4);
1366 
1367                 if (size < 1 || size > INT_MAX/4) {
1368                     av_log(s, AV_LOG_ERROR, "size %u is invalid\n", size);
1369                     return AVERROR_INVALIDDATA;
1370                 }
1371 
1372                 st = s->streams[index];
1373                 ret = ff_rm_parse_packet(s, pb, st, st->priv_data, size, pkt,
1374                                          &seq, 0, pts);
1375                 if (ret < -1) {
1376                     return ret;
1377                 } else if (ret) {
1378                     continue;
1379                 }
1380 
1381                 pkt->pos = pos;
1382                 pkt->pts = pts;
1383                 pkt->stream_index = index;
1384             } else if (opcode == 7) {
1385                 pos = avio_rb64(pb);
1386                 if (!pos) {
1387                     rm->data_end = 1;
1388                     return AVERROR_EOF;
1389                 }
1390             } else {
1391                 av_log(s, AV_LOG_ERROR, "Unsupported opcode=%d at %"PRIX64"\n", opcode, avio_tell(pb) - 1);
1392                 return AVERROR(EIO);
1393             }
1394         }
1395 
1396         break;
1397     }
1398 
1399     return ret;
1400 }
1401 
1402 const AVInputFormat ff_ivr_demuxer = {
1403     .name           = "ivr",
1404     .long_name      = NULL_IF_CONFIG_SMALL("IVR (Internet Video Recording)"),
1405     .priv_data_size = sizeof(RMDemuxContext),
1406     .flags_internal = FF_FMT_INIT_CLEANUP,
1407     .read_probe     = ivr_probe,
1408     .read_header    = ivr_read_header,
1409     .read_packet    = ivr_read_packet,
1410     .read_close     = rm_read_close,
1411     .extensions     = "ivr",
1412 };
1413