Coverage Report

Created: 2026-05-24 06:39

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/proc/self/cwd/libfaad/specrec.c
Line
Count
Source
1
/*
2
** FAAD2 - Freeware Advanced Audio (AAC) Decoder including SBR decoding
3
** Copyright (C) 2003-2005 M. Bakker, Nero AG, http://www.nero.com
4
**
5
** This program is free software; you can redistribute it and/or modify
6
** it under the terms of the GNU General Public License as published by
7
** the Free Software Foundation; either version 2 of the License, or
8
** (at your option) any later version.
9
**
10
** This program is distributed in the hope that it will be useful,
11
** but WITHOUT ANY WARRANTY; without even the implied warranty of
12
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13
** GNU General Public License for more details.
14
**
15
** You should have received a copy of the GNU General Public License
16
** along with this program; if not, write to the Free Software
17
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
18
**
19
** Any non-GPL usage of this software or parts of this software is strictly
20
** forbidden.
21
**
22
** The "appropriate copyright message" mentioned in section 2c of the GPLv2
23
** must read: "Code from FAAD2 is copyright (c) Nero AG, www.nero.com"
24
**
25
** Commercial non-GPL licensing of this software is possible.
26
** For more info contact Nero AG through Mpeg4AAClicense@nero.com.
27
**
28
** $Id: specrec.c,v 1.63 2010/06/04 20:47:56 menno Exp $
29
**/
30
31
/*
32
  Spectral reconstruction:
33
   - grouping/sectioning
34
   - inverse quantization
35
   - applying scalefactors
36
*/
37
38
#include "common.h"
39
#include "structs.h"
40
41
#include <stdlib.h>
42
#include "specrec.h"
43
#include "filtbank.h"
44
#include "syntax.h"
45
#include "iq_table.h"
46
#include "ms.h"
47
#include "is.h"
48
#include "pns.h"
49
#include "tns.h"
50
#include "drc.h"
51
#include "lt_predict.h"
52
#include "ic_predict.h"
53
#ifdef SSR_DEC
54
#include "ssr.h"
55
#include "ssr_fb.h"
56
#endif
57
58
59
/* static function declarations */
60
static uint8_t quant_to_spec(NeAACDecStruct *hDecoder,
61
                             ic_stream *ics, int16_t *quant_data,
62
                             real_t *spec_data, uint16_t frame_len);
63
64
65
#ifdef LD_DEC
66
ALIGN static const uint8_t num_swb_512_window[] =
67
{
68
    0, 0, 0, 36, 36, 37, 31, 31, 0, 0, 0, 0
69
};
70
ALIGN static const uint8_t num_swb_480_window[] =
71
{
72
    0, 0, 0, 35, 35, 37, 30, 30, 0, 0, 0, 0
73
};
74
#endif
75
76
ALIGN static const uint8_t num_swb_960_window[] =
77
{
78
    40, 40, 45, 49, 49, 49, 46, 46, 42, 42, 42, 40
79
};
80
81
ALIGN static const uint8_t num_swb_1024_window[] =
82
{
83
    41, 41, 47, 49, 49, 51, 47, 47, 43, 43, 43, 40
84
};
85
86
ALIGN static const uint8_t num_swb_128_window[] =
87
{
88
    12, 12, 12, 14, 14, 14, 15, 15, 15, 15, 15, 15
89
};
90
91
ALIGN static const uint16_t swb_offset_1024_96[] =
92
{
93
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56,
94
    64, 72, 80, 88, 96, 108, 120, 132, 144, 156, 172, 188, 212, 240,
95
    276, 320, 384, 448, 512, 576, 640, 704, 768, 832, 896, 960, 1024
96
};
97
98
ALIGN static const uint16_t swb_offset_128_96[] =
99
{
100
    0, 4, 8, 12, 16, 20, 24, 32, 40, 48, 64, 92, 128
101
};
102
103
ALIGN static const uint16_t swb_offset_1024_64[] =
104
{
105
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56,
106
    64, 72, 80, 88, 100, 112, 124, 140, 156, 172, 192, 216, 240, 268,
107
    304, 344, 384, 424, 464, 504, 544, 584, 624, 664, 704, 744, 784, 824,
108
    864, 904, 944, 984, 1024
109
};
110
111
ALIGN static const uint16_t swb_offset_128_64[] =
112
{
113
    0, 4, 8, 12, 16, 20, 24, 32, 40, 48, 64, 92, 128
114
};
115
116
ALIGN static const uint16_t swb_offset_1024_48[] =
117
{
118
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 48, 56, 64, 72,
119
    80, 88, 96, 108, 120, 132, 144, 160, 176, 196, 216, 240, 264, 292,
120
    320, 352, 384, 416, 448, 480, 512, 544, 576, 608, 640, 672, 704, 736,
121
    768, 800, 832, 864, 896, 928, 1024
122
};
123
124
#ifdef LD_DEC
125
ALIGN static const uint16_t swb_offset_512_48[] =
126
{
127
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 60, 68, 76, 84,
128
    92, 100, 112, 124, 136, 148, 164, 184, 208, 236, 268, 300, 332, 364, 396,
129
    428, 460, 512
130
};
131
132
ALIGN static const uint16_t swb_offset_480_48[] =
133
{
134
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 64, 72 ,80 ,88,
135
    96, 108, 120, 132, 144, 156, 172, 188, 212, 240, 272, 304, 336, 368, 400,
136
    432, 480
137
};
138
#endif
139
140
ALIGN static const uint16_t swb_offset_128_48[] =
141
{
142
    0, 4, 8, 12, 16, 20, 28, 36, 44, 56, 68, 80, 96, 112, 128
143
};
144
145
ALIGN static const uint16_t swb_offset_1024_32[] =
146
{
147
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 48, 56, 64, 72,
148
    80, 88, 96, 108, 120, 132, 144, 160, 176, 196, 216, 240, 264, 292,
149
    320, 352, 384, 416, 448, 480, 512, 544, 576, 608, 640, 672, 704, 736,
150
    768, 800, 832, 864, 896, 928, 960, 992, 1024
151
};
152
153
#ifdef LD_DEC
154
ALIGN static const uint16_t swb_offset_512_32[] =
155
{
156
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 64, 72, 80,
157
    88, 96, 108, 120, 132, 144, 160, 176, 192, 212, 236, 260, 288, 320, 352,
158
    384, 416, 448, 480, 512
159
};
160
161
ALIGN static const uint16_t swb_offset_480_32[] =
162
{
163
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 60, 64, 72, 80,
164
    88, 96, 104, 112, 124, 136, 148, 164, 180, 200, 224, 256, 288, 320, 352,
165
    384, 416, 448, 480
166
};
167
#endif
168
169
ALIGN static const uint16_t swb_offset_1024_24[] =
170
{
171
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 52, 60, 68,
172
    76, 84, 92, 100, 108, 116, 124, 136, 148, 160, 172, 188, 204, 220,
173
    240, 260, 284, 308, 336, 364, 396, 432, 468, 508, 552, 600, 652, 704,
174
    768, 832, 896, 960, 1024
175
};
176
177
#ifdef LD_DEC
178
ALIGN static const uint16_t swb_offset_512_24[] =
179
{
180
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 52, 60, 68,
181
    80, 92, 104, 120, 140, 164, 192, 224, 256, 288, 320, 352, 384, 416,
182
    448, 480, 512
183
};
184
185
ALIGN static const uint16_t swb_offset_480_24[] =
186
{
187
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 52, 60, 68, 80, 92, 104, 120,
188
    140, 164, 192, 224, 256, 288, 320, 352, 384, 416, 448, 480
189
};
190
#endif
191
192
ALIGN static const uint16_t swb_offset_128_24[] =
193
{
194
    0, 4, 8, 12, 16, 20, 24, 28, 36, 44, 52, 64, 76, 92, 108, 128
195
};
196
197
ALIGN static const uint16_t swb_offset_1024_16[] =
198
{
199
    0, 8, 16, 24, 32, 40, 48, 56, 64, 72, 80, 88, 100, 112, 124,
200
    136, 148, 160, 172, 184, 196, 212, 228, 244, 260, 280, 300, 320, 344,
201
    368, 396, 424, 456, 492, 532, 572, 616, 664, 716, 772, 832, 896, 960, 1024
202
};
203
204
ALIGN static const uint16_t swb_offset_128_16[] =
205
{
206
    0, 4, 8, 12, 16, 20, 24, 28, 32, 40, 48, 60, 72, 88, 108, 128
207
};
208
209
ALIGN static const uint16_t swb_offset_1024_8[] =
210
{
211
    0, 12, 24, 36, 48, 60, 72, 84, 96, 108, 120, 132, 144, 156, 172,
212
    188, 204, 220, 236, 252, 268, 288, 308, 328, 348, 372, 396, 420, 448,
213
    476, 508, 544, 580, 620, 664, 712, 764, 820, 880, 944, 1024
214
};
215
216
ALIGN static const uint16_t swb_offset_128_8[] =
217
{
218
    0, 4, 8, 12, 16, 20, 24, 28, 36, 44, 52, 60, 72, 88, 108, 128
219
};
220
221
ALIGN static const uint16_t *swb_offset_1024_window[] =
222
{
223
    swb_offset_1024_96,      /* 96000 */
224
    swb_offset_1024_96,      /* 88200 */
225
    swb_offset_1024_64,      /* 64000 */
226
    swb_offset_1024_48,      /* 48000 */
227
    swb_offset_1024_48,      /* 44100 */
228
    swb_offset_1024_32,      /* 32000 */
229
    swb_offset_1024_24,      /* 24000 */
230
    swb_offset_1024_24,      /* 22050 */
231
    swb_offset_1024_16,      /* 16000 */
232
    swb_offset_1024_16,      /* 12000 */
233
    swb_offset_1024_16,      /* 11025 */
234
    swb_offset_1024_8        /* 8000  */
235
};
236
237
#ifdef LD_DEC
238
ALIGN static const uint16_t *swb_offset_512_window[] =
239
{
240
    0,                       /* 96000 */
241
    0,                       /* 88200 */
242
    0,                       /* 64000 */
243
    swb_offset_512_48,       /* 48000 */
244
    swb_offset_512_48,       /* 44100 */
245
    swb_offset_512_32,       /* 32000 */
246
    swb_offset_512_24,       /* 24000 */
247
    swb_offset_512_24,       /* 22050 */
248
    0,                       /* 16000 */
249
    0,                       /* 12000 */
250
    0,                       /* 11025 */
251
    0                        /* 8000  */
252
};
253
254
ALIGN static const uint16_t *swb_offset_480_window[] =
255
{
256
    0,                       /* 96000 */
257
    0,                       /* 88200 */
258
    0,                       /* 64000 */
259
    swb_offset_480_48,       /* 48000 */
260
    swb_offset_480_48,       /* 44100 */
261
    swb_offset_480_32,       /* 32000 */
262
    swb_offset_480_24,       /* 24000 */
263
    swb_offset_480_24,       /* 22050 */
264
    0,                       /* 16000 */
265
    0,                       /* 12000 */
266
    0,                       /* 11025 */
267
    0                        /* 8000  */
268
};
269
#endif
270
271
ALIGN static const  uint16_t *swb_offset_128_window[] =
272
{
273
    swb_offset_128_96,       /* 96000 */
274
    swb_offset_128_96,       /* 88200 */
275
    swb_offset_128_64,       /* 64000 */
276
    swb_offset_128_48,       /* 48000 */
277
    swb_offset_128_48,       /* 44100 */
278
    swb_offset_128_48,       /* 32000 */
279
    swb_offset_128_24,       /* 24000 */
280
    swb_offset_128_24,       /* 22050 */
281
    swb_offset_128_16,       /* 16000 */
282
    swb_offset_128_16,       /* 12000 */
283
    swb_offset_128_16,       /* 11025 */
284
    swb_offset_128_8         /* 8000  */
285
};
286
287
106k
#define bit_set(A, B) ((A) & (1<<(B)))
288
289
/* 4.5.2.3.4 */
290
/*
291
  - determine the number of windows in a window_sequence named num_windows
292
  - determine the number of window_groups named num_window_groups
293
  - determine the number of windows in each group named window_group_length[g]
294
  - determine the total number of scalefactor window bands named num_swb for
295
    the actual window type
296
  - determine swb_offset[swb], the offset of the first coefficient in
297
    scalefactor window band named swb of the window actually used
298
  - determine sect_sfb_offset[g][section],the offset of the first coefficient
299
    in section named section. This offset depends on window_sequence and
300
    scale_factor_grouping and is needed to decode the spectral_data().
301
*/
302
uint8_t window_grouping_info(NeAACDecStruct *hDecoder, ic_stream *ics)
303
134k
{
304
134k
    uint8_t i, g;
305
306
134k
    uint8_t sf_index = hDecoder->sf_index;
307
308
134k
    if (sf_index >= 12)
309
4
        return 32;
310
311
134k
    switch (ics->window_sequence) {
312
109k
    case ONLY_LONG_SEQUENCE:
313
113k
    case LONG_START_SEQUENCE:
314
118k
    case LONG_STOP_SEQUENCE:
315
118k
        ics->num_windows = 1;
316
118k
        ics->num_window_groups = 1;
317
118k
        ics->window_group_length[ics->num_window_groups-1] = 1;
318
#ifdef LD_DEC
319
        if (hDecoder->object_type == LD)
320
        {
321
            if (hDecoder->frameLength == 512)
322
                ics->num_swb = num_swb_512_window[sf_index];
323
            else /* if (hDecoder->frameLength == 480) */
324
                ics->num_swb = num_swb_480_window[sf_index];
325
        } else {
326
#endif
327
118k
            if (hDecoder->frameLength == 1024)
328
96.0k
                ics->num_swb = num_swb_1024_window[sf_index];
329
22.7k
            else /* if (hDecoder->frameLength == 960) */
330
22.7k
                ics->num_swb = num_swb_960_window[sf_index];
331
#ifdef LD_DEC
332
        }
333
#endif
334
335
118k
        if (ics->max_sfb > ics->num_swb)
336
65
        {
337
65
            return 32;
338
65
        }
339
340
        /* preparation of sect_sfb_offset for long blocks */
341
        /* also copy the last value! */
342
#ifdef LD_DEC
343
        if (hDecoder->object_type == LD)
344
        {
345
            if (hDecoder->frameLength == 512)
346
            {
347
                for (i = 0; i < ics->num_swb; i++)
348
                {
349
                    ics->sect_sfb_offset[0][i] = swb_offset_512_window[sf_index][i];
350
                    ics->swb_offset[i] = swb_offset_512_window[sf_index][i];
351
                }
352
            } else /* if (hDecoder->frameLength == 480) */ {
353
                for (i = 0; i < ics->num_swb; i++)
354
                {
355
                    ics->sect_sfb_offset[0][i] = swb_offset_480_window[sf_index][i];
356
                    ics->swb_offset[i] = swb_offset_480_window[sf_index][i];
357
                }
358
            }
359
            ics->sect_sfb_offset[0][ics->num_swb] = hDecoder->frameLength;
360
            ics->swb_offset[ics->num_swb] = hDecoder->frameLength;
361
            ics->swb_offset_max = hDecoder->frameLength;
362
        } else {
363
#endif
364
5.20M
            for (i = 0; i < ics->num_swb; i++)
365
5.08M
            {
366
5.08M
                ics->sect_sfb_offset[0][i] = swb_offset_1024_window[sf_index][i];
367
5.08M
                ics->swb_offset[i] = swb_offset_1024_window[sf_index][i];
368
5.08M
            }
369
118k
            ics->sect_sfb_offset[0][ics->num_swb] = hDecoder->frameLength;
370
118k
            ics->swb_offset[ics->num_swb] = hDecoder->frameLength;
371
118k
            ics->swb_offset_max = hDecoder->frameLength;
372
#ifdef LD_DEC
373
        }
374
#endif
375
118k
        return 0;
376
15.1k
    case EIGHT_SHORT_SEQUENCE:
377
15.1k
        ics->num_windows = 8;
378
15.1k
        ics->num_window_groups = 1;
379
15.1k
        ics->window_group_length[ics->num_window_groups-1] = 1;
380
15.1k
        ics->num_swb = num_swb_128_window[sf_index];
381
382
15.1k
        if (ics->max_sfb > ics->num_swb)
383
8
        {
384
8
            return 32;
385
8
        }
386
387
228k
        for (i = 0; i < ics->num_swb; i++)
388
213k
            ics->swb_offset[i] = swb_offset_128_window[sf_index][i];
389
15.1k
        ics->swb_offset[ics->num_swb] = hDecoder->frameLength/8;
390
15.1k
        ics->swb_offset_max = hDecoder->frameLength/8;
391
392
121k
        for (i = 0; i < ics->num_windows-1; i++) {
393
106k
            if (bit_set(ics->scale_factor_grouping, 6-i) == 0)
394
84.2k
            {
395
84.2k
                ics->num_window_groups += 1;
396
84.2k
                ics->window_group_length[ics->num_window_groups-1] = 1;
397
84.2k
            } else {
398
21.8k
                ics->window_group_length[ics->num_window_groups-1] += 1;
399
21.8k
            }
400
106k
        }
401
402
        /* preparation of sect_sfb_offset for short blocks */
403
114k
        for (g = 0; g < ics->num_window_groups; g++)
404
99.3k
        {
405
99.3k
            uint16_t width;
406
99.3k
            uint8_t sect_sfb = 0;
407
99.3k
            uint16_t offset = 0;
408
409
1.49M
            for (i = 0; i < ics->num_swb; i++)
410
1.39M
            {
411
1.39M
                if (i+1 == ics->num_swb)
412
99.3k
                {
413
99.3k
                    width = (hDecoder->frameLength/8) - swb_offset_128_window[sf_index][i];
414
1.29M
                } else {
415
1.29M
                    width = swb_offset_128_window[sf_index][i+1] -
416
1.29M
                        swb_offset_128_window[sf_index][i];
417
1.29M
                }
418
1.39M
                width *= ics->window_group_length[g];
419
1.39M
                ics->sect_sfb_offset[g][sect_sfb++] = offset;
420
1.39M
                offset += width;
421
1.39M
            }
422
99.3k
            ics->sect_sfb_offset[g][sect_sfb] = offset;
423
99.3k
        }
424
15.1k
        return 0;
425
0
    default:
426
0
        return 32;
427
134k
    }
428
134k
}
429
430
/* iquant() * output = sign(input)*abs(input)^(4/3) */
431
static INLINE real_t iquant(int16_t q, const real_t *tab, uint8_t *error)
432
145M
{
433
#ifdef FIXED_POINT
434
/* For FIXED_POINT the iq_table is prescaled by 3 bits (iq_table[]/8) */
435
/* BIG_IQ_TABLE allows you to use the full 8192 value table, if this is not
436
 * defined a 1026 value table and interpolation will be used
437
 */
438
#ifndef BIG_IQ_TABLE
439
    static const real_t errcorr[] = {
440
        REAL_CONST(0), REAL_CONST(1.0/8.0), REAL_CONST(2.0/8.0), REAL_CONST(3.0/8.0),
441
        REAL_CONST(4.0/8.0),  REAL_CONST(5.0/8.0), REAL_CONST(6.0/8.0), REAL_CONST(7.0/8.0),
442
        REAL_CONST(0)
443
    };
444
    real_t x1, x2;
445
#endif
446
    int16_t sgn = 1;
447
448
    if (q < 0)
449
    {
450
        q = -q;
451
        sgn = -1;
452
    }
453
454
    if (q < IQ_TABLE_SIZE)
455
    {
456
//#define IQUANT_PRINT
457
#ifdef IQUANT_PRINT
458
        //printf("0x%.8X\n", sgn * tab[q]);
459
        printf("%d\n", sgn * tab[q]);
460
#endif
461
        return sgn * tab[q];
462
    }
463
464
#ifndef BIG_IQ_TABLE
465
    if (q >= 8192)
466
    {
467
        *error = 17;
468
        return 0;
469
    }
470
471
    /* linear interpolation */
472
    x1 = tab[q>>3];
473
    x2 = tab[(q>>3) + 1];
474
    return sgn * 16 * (MUL_R(errcorr[q&7],(x2-x1)) + x1);
475
#else
476
    *error = 17;
477
    return 0;
478
#endif
479
480
#else
481
145M
    if (q < 0)
482
79.6k
    {
483
        /* tab contains a value for all possible q [0,8192] */
484
79.6k
        if (-q < IQ_TABLE_SIZE)
485
78.7k
            return -tab[-q];
486
487
936
        *error = 17;
488
936
        return 0;
489
145M
    } else {
490
        /* tab contains a value for all possible q [0,8192] */
491
145M
        if (q < IQ_TABLE_SIZE)
492
145M
            return tab[q];
493
494
537
        *error = 17;
495
537
        return 0;
496
145M
    }
497
145M
#endif
498
145M
}
499
500
#ifndef FIXED_POINT
501
ALIGN static const real_t pow2sf_tab[] = {
502
    2.9802322387695313E-008, 5.9604644775390625E-008, 1.1920928955078125E-007,
503
    2.384185791015625E-007, 4.76837158203125E-007, 9.5367431640625E-007,
504
    1.9073486328125E-006, 3.814697265625E-006, 7.62939453125E-006,
505
    1.52587890625E-005, 3.0517578125E-005, 6.103515625E-005,
506
    0.0001220703125, 0.000244140625, 0.00048828125,
507
    0.0009765625, 0.001953125, 0.00390625,
508
    0.0078125, 0.015625, 0.03125,
509
    0.0625, 0.125, 0.25,
510
    0.5, 1.0, 2.0,
511
    4.0, 8.0, 16.0, 32.0,
512
    64.0, 128.0, 256.0,
513
    512.0, 1024.0, 2048.0,
514
    4096.0, 8192.0, 16384.0,
515
    32768.0, 65536.0, 131072.0,
516
    262144.0, 524288.0, 1048576.0,
517
    2097152.0, 4194304.0, 8388608.0,
518
    16777216.0, 33554432.0, 67108864.0,
519
    134217728.0, 268435456.0, 536870912.0,
520
    1073741824.0, 2147483648.0, 4294967296.0,
521
    8589934592.0, 17179869184.0, 34359738368.0,
522
    68719476736.0, 137438953472.0, 274877906944.0
523
};
524
#endif
525
526
/* quant_to_spec: perform dequantisation and scaling
527
 * and in case of short block it also does the deinterleaving
528
 */
529
/*
530
  For ONLY_LONG_SEQUENCE windows (num_window_groups = 1,
531
  window_group_length[0] = 1) the spectral data is in ascending spectral
532
  order.
533
  For the EIGHT_SHORT_SEQUENCE window, the spectral order depends on the
534
  grouping in the following manner:
535
  - Groups are ordered sequentially
536
  - Within a group, a scalefactor band consists of the spectral data of all
537
    grouped SHORT_WINDOWs for the associated scalefactor window band. To
538
    clarify via example, the length of a group is in the range of one to eight
539
    SHORT_WINDOWs.
540
  - If there are eight groups each with length one (num_window_groups = 8,
541
    window_group_length[0..7] = 1), the result is a sequence of eight spectra,
542
    each in ascending spectral order.
543
  - If there is only one group with length eight (num_window_groups = 1,
544
    window_group_length[0] = 8), the result is that spectral data of all eight
545
    SHORT_WINDOWs is interleaved by scalefactor window bands.
546
  - Within a scalefactor window band, the coefficients are in ascending
547
    spectral order.
548
*/
549
static uint8_t quant_to_spec(NeAACDecStruct *hDecoder,
550
                             ic_stream *ics, int16_t *quant_data,
551
                             real_t *spec_data, uint16_t frame_len)
552
144k
{
553
144k
    ALIGN static const real_t pow2_table[] =
554
144k
    {
555
144k
        COEF_CONST(1.0),
556
144k
        COEF_CONST(1.1892071150027210667174999705605), /* 2^0.25 */
557
144k
        COEF_CONST(1.4142135623730950488016887242097), /* 2^0.5 */
558
144k
        COEF_CONST(1.6817928305074290860622509524664) /* 2^0.75 */
559
144k
    };
560
144k
    const real_t *tab = iq_table;
561
562
144k
    uint8_t g, sfb, win;
563
144k
    uint16_t width, bin, k, gindex;
564
144k
    uint8_t error = 0; /* Init error flag */
565
144k
#ifndef FIXED_POINT
566
144k
    real_t scf;
567
#else
568
    int32_t sat_shift_mask = 0;
569
#endif
570
571
144k
    k = 0;
572
144k
    gindex = 0;
573
574
    /* In this case quant_to_spec is no-op and spec_data remains undefined.
575
     * Without peeking into AAC specification, there is no strong evidence if
576
     * such streams are invalid -> just calm down MSAN. */
577
144k
    if (ics->num_swb == 0)
578
0
        memset(spec_data, 0, frame_len * sizeof(real_t));
579
580
376k
    for (g = 0; g < ics->num_window_groups; g++)
581
232k
    {
582
232k
        uint16_t j = 0;
583
232k
        uint16_t gincrease = 0;
584
232k
        uint16_t win_inc = ics->swb_offset[ics->num_swb];
585
586
7.17M
        for (sfb = 0; sfb < ics->num_swb; sfb++)
587
6.94M
        {
588
6.94M
            int32_t exp, frac;
589
6.94M
            uint16_t wa = gindex + j;
590
6.94M
            int16_t scale_factor = ics->scale_factors[g][sfb];
591
592
6.94M
            width = ics->swb_offset[sfb+1] - ics->swb_offset[sfb];
593
594
#ifdef FIXED_POINT
595
            scale_factor -= 100;
596
            /* IMDCT pre-scaling */
597
            if (hDecoder->object_type == LD)
598
            {
599
                scale_factor -= 24 /*9*/;
600
            } else {
601
                if (ics->window_sequence == EIGHT_SHORT_SEQUENCE)
602
                    scale_factor -= 16 /*7*/;
603
                else
604
                    scale_factor -= 28 /*10*/;
605
            }
606
            if (scale_factor > 120)
607
                scale_factor = 120;  /* => exp <= 30 */
608
#else
609
6.94M
            (void)hDecoder;
610
6.94M
#endif
611
612
            /* scale_factor for IS or PNS, has different meaning; fill with almost zeroes */
613
6.94M
            if (is_intensity(ics, g, sfb) || is_noise(ics, g, sfb))
614
6.23k
            {
615
6.23k
                scale_factor = 0;
616
6.23k
            }
617
618
            /* scale_factor must be between 0 and 255 */
619
6.94M
            exp = (scale_factor /* - 100 */) >> 2;
620
            /* frac must always be > 0 */
621
6.94M
            frac = (scale_factor /* - 100 */) & 3;
622
623
6.94M
#ifndef FIXED_POINT
624
6.94M
            scf = pow2sf_tab[exp/*+25*/] * pow2_table[frac];
625
#else
626
            if (exp > 0)
627
                sat_shift_mask = SAT_SHIFT_MASK(exp);
628
#endif
629
630
14.2M
            for (win = 0; win < ics->window_group_length[g]; win++)
631
7.27M
            {
632
43.7M
                for (bin = 0; bin < width; bin += 4)
633
36.4M
                {
634
36.4M
                    uint16_t wb = wa + bin;
635
36.4M
#ifndef FIXED_POINT
636
36.4M
                    spec_data[wb+0] = iquant(quant_data[k+0], tab, &error) * scf;
637
36.4M
                    spec_data[wb+1] = iquant(quant_data[k+1], tab, &error) * scf;
638
36.4M
                    spec_data[wb+2] = iquant(quant_data[k+2], tab, &error) * scf;
639
36.4M
                    spec_data[wb+3] = iquant(quant_data[k+3], tab, &error) * scf;
640
#else
641
                    real_t iq0 = iquant(quant_data[k+0], tab, &error);
642
                    real_t iq1 = iquant(quant_data[k+1], tab, &error);
643
                    real_t iq2 = iquant(quant_data[k+2], tab, &error);
644
                    real_t iq3 = iquant(quant_data[k+3], tab, &error);
645
646
                    if (exp == -32)
647
                    {
648
                        spec_data[wb+0] = 0;
649
                        spec_data[wb+1] = 0;
650
                        spec_data[wb+2] = 0;
651
                        spec_data[wb+3] = 0;
652
                    } else if (exp <= 0) {
653
                        spec_data[wb+0] = iq0 >> -exp;
654
                        spec_data[wb+1] = iq1 >> -exp;
655
                        spec_data[wb+2] = iq2 >> -exp;
656
                        spec_data[wb+3] = iq3 >> -exp;
657
                    } else { /* exp > 0 */
658
                        spec_data[wb+0] = SAT_SHIFT(iq0, exp, sat_shift_mask);
659
                        spec_data[wb+1] = SAT_SHIFT(iq1, exp, sat_shift_mask);
660
                        spec_data[wb+2] = SAT_SHIFT(iq2, exp, sat_shift_mask);
661
                        spec_data[wb+3] = SAT_SHIFT(iq3, exp, sat_shift_mask);
662
                    }
663
                    if (frac != 0)
664
                    {
665
                        spec_data[wb+0] = MUL_C(spec_data[wb+0],pow2_table[frac]);
666
                        spec_data[wb+1] = MUL_C(spec_data[wb+1],pow2_table[frac]);
667
                        spec_data[wb+2] = MUL_C(spec_data[wb+2],pow2_table[frac]);
668
                        spec_data[wb+3] = MUL_C(spec_data[wb+3],pow2_table[frac]);
669
                    }
670
671
//#define SCFS_PRINT
672
#ifdef SCFS_PRINT
673
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+0]);
674
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+1]);
675
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+2]);
676
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+3]);
677
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+0]);
678
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+1]);
679
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+2]);
680
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+3]);
681
#endif
682
#endif
683
684
36.4M
                    gincrease += 4;
685
36.4M
                    k += 4;
686
36.4M
                }
687
7.27M
                wa += win_inc;
688
7.27M
            }
689
6.94M
            j += width;
690
6.94M
        }
691
232k
        gindex += gincrease;
692
232k
    }
693
694
144k
    return error;
695
144k
}
696
697
static uint8_t allocate_single_channel(NeAACDecStruct *hDecoder, uint8_t channel,
698
                                       uint8_t output_channels)
699
89.9k
{
700
89.9k
    int mul = 1;
701
702
#ifdef MAIN_DEC
703
    /* MAIN object type prediction */
704
    if (hDecoder->object_type == MAIN)
705
    {
706
        /* allocate the state only when needed */
707
        if (hDecoder->pred_stat[channel] != NULL)
708
        {
709
            faad_free(hDecoder->pred_stat[channel]);
710
            hDecoder->pred_stat[channel] = NULL;
711
        }
712
713
        hDecoder->pred_stat[channel] = (pred_state*)faad_malloc(hDecoder->frameLength * sizeof(pred_state));
714
        reset_all_predictors(hDecoder->pred_stat[channel], hDecoder->frameLength);
715
    }
716
#endif
717
718
#ifdef LTP_DEC
719
    if (is_ltp_ot(hDecoder->object_type))
720
    {
721
        /* allocate the state only when needed */
722
        if (hDecoder->lt_pred_stat[channel] != NULL)
723
        {
724
            faad_free(hDecoder->lt_pred_stat[channel]);
725
            hDecoder->lt_pred_stat[channel] = NULL;
726
        }
727
728
        hDecoder->lt_pred_stat[channel] = (int16_t*)faad_malloc(hDecoder->frameLength*4 * sizeof(int16_t));
729
        memset(hDecoder->lt_pred_stat[channel], 0, hDecoder->frameLength*4 * sizeof(int16_t));
730
    }
731
#endif
732
733
89.9k
    if (hDecoder->time_out[channel] != NULL)
734
0
    {
735
0
        faad_free(hDecoder->time_out[channel]);
736
0
        hDecoder->time_out[channel] = NULL;
737
0
    }
738
739
89.9k
    {
740
89.9k
        mul = 1;
741
89.9k
#ifdef SBR_DEC
742
89.9k
        hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 0;
743
89.9k
        if ((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
744
76.9k
        {
745
            /* SBR requires 2 times as much output data */
746
76.9k
            mul = 2;
747
76.9k
            hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 1;
748
76.9k
        }
749
89.9k
#endif
750
89.9k
        hDecoder->time_out[channel] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
751
89.9k
        memset(hDecoder->time_out[channel], 0, mul*hDecoder->frameLength*sizeof(real_t));
752
89.9k
    }
753
754
89.9k
#if (defined(PS_DEC) || defined(DRM_PS))
755
89.9k
    if (output_channels == 2)
756
89.9k
    {
757
89.9k
        if (hDecoder->time_out[channel+1] != NULL)
758
0
        {
759
0
            faad_free(hDecoder->time_out[channel+1]);
760
0
            hDecoder->time_out[channel+1] = NULL;
761
0
        }
762
763
89.9k
        hDecoder->time_out[channel+1] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
764
89.9k
        memset(hDecoder->time_out[channel+1], 0, mul*hDecoder->frameLength*sizeof(real_t));
765
89.9k
    }
766
89.9k
#endif
767
768
89.9k
    if (hDecoder->fb_intermed[channel] != NULL)
769
0
    {
770
0
        faad_free(hDecoder->fb_intermed[channel]);
771
0
        hDecoder->fb_intermed[channel] = NULL;
772
0
    }
773
774
89.9k
    hDecoder->fb_intermed[channel] = (real_t*)faad_malloc(hDecoder->frameLength*sizeof(real_t));
775
89.9k
    memset(hDecoder->fb_intermed[channel], 0, hDecoder->frameLength*sizeof(real_t));
776
777
#ifdef SSR_DEC
778
    if (hDecoder->object_type == SSR)
779
    {
780
        if (hDecoder->ssr_overlap[channel] == NULL)
781
        {
782
            hDecoder->ssr_overlap[channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
783
            memset(hDecoder->ssr_overlap[channel], 0, 2*hDecoder->frameLength*sizeof(real_t));
784
        }
785
        if (hDecoder->prev_fmd[channel] == NULL)
786
        {
787
            uint16_t k;
788
            hDecoder->prev_fmd[channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
789
            for (k = 0; k < 2*hDecoder->frameLength; k++)
790
                hDecoder->prev_fmd[channel][k] = REAL_CONST(-1);
791
        }
792
    }
793
#endif
794
795
89.9k
    return 0;
796
89.9k
}
797
798
static uint8_t allocate_channel_pair(NeAACDecStruct *hDecoder,
799
                                     uint8_t channel, uint8_t paired_channel)
800
16.6k
{
801
16.6k
    int mul = 1;
802
803
#ifdef MAIN_DEC
804
    /* MAIN object type prediction */
805
    if (hDecoder->object_type == MAIN)
806
    {
807
        /* allocate the state only when needed */
808
        if (hDecoder->pred_stat[channel] == NULL)
809
        {
810
            hDecoder->pred_stat[channel] = (pred_state*)faad_malloc(hDecoder->frameLength * sizeof(pred_state));
811
            reset_all_predictors(hDecoder->pred_stat[channel], hDecoder->frameLength);
812
        }
813
        if (hDecoder->pred_stat[paired_channel] == NULL)
814
        {
815
            hDecoder->pred_stat[paired_channel] = (pred_state*)faad_malloc(hDecoder->frameLength * sizeof(pred_state));
816
            reset_all_predictors(hDecoder->pred_stat[paired_channel], hDecoder->frameLength);
817
        }
818
    }
819
#endif
820
821
#ifdef LTP_DEC
822
    if (is_ltp_ot(hDecoder->object_type))
823
    {
824
        /* allocate the state only when needed */
825
        if (hDecoder->lt_pred_stat[channel] == NULL)
826
        {
827
            hDecoder->lt_pred_stat[channel] = (int16_t*)faad_malloc(hDecoder->frameLength*4 * sizeof(int16_t));
828
            memset(hDecoder->lt_pred_stat[channel], 0, hDecoder->frameLength*4 * sizeof(int16_t));
829
        }
830
        if (hDecoder->lt_pred_stat[paired_channel] == NULL)
831
        {
832
            hDecoder->lt_pred_stat[paired_channel] = (int16_t*)faad_malloc(hDecoder->frameLength*4 * sizeof(int16_t));
833
            memset(hDecoder->lt_pred_stat[paired_channel], 0, hDecoder->frameLength*4 * sizeof(int16_t));
834
        }
835
    }
836
#endif
837
838
16.6k
    {
839
16.6k
        mul = 1;
840
16.6k
#ifdef SBR_DEC
841
16.6k
        hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 0;
842
16.6k
        if ((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
843
14.5k
        {
844
            /* SBR requires 2 times as much output data */
845
14.5k
            mul = 2;
846
14.5k
            hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 1;
847
14.5k
        }
848
16.6k
#endif
849
16.6k
    }
850
16.6k
    if (hDecoder->time_out[channel] != NULL)
851
3
    {
852
3
        faad_free(hDecoder->time_out[channel]);
853
3
        hDecoder->time_out[channel] = NULL;
854
3
    }
855
16.6k
    if (hDecoder->time_out[paired_channel] != NULL)
856
3
    {
857
3
        faad_free(hDecoder->time_out[paired_channel]);
858
3
        hDecoder->time_out[paired_channel] = NULL;
859
3
    }
860
16.6k
    hDecoder->time_out[channel] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
861
16.6k
    memset(hDecoder->time_out[channel], 0, mul*hDecoder->frameLength*sizeof(real_t));
862
16.6k
    hDecoder->time_out[paired_channel] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
863
16.6k
    memset(hDecoder->time_out[paired_channel], 0, mul*hDecoder->frameLength*sizeof(real_t));
864
865
16.6k
    if (hDecoder->fb_intermed[channel] != NULL)
866
3
    {
867
3
        faad_free(hDecoder->fb_intermed[channel]);
868
3
        hDecoder->fb_intermed[channel] = NULL;
869
3
    }
870
16.6k
    if (hDecoder->fb_intermed[paired_channel] != NULL)
871
0
    {
872
0
        faad_free(hDecoder->fb_intermed[paired_channel]);
873
0
        hDecoder->fb_intermed[paired_channel] = NULL;
874
0
    }
875
16.6k
    hDecoder->fb_intermed[channel] = (real_t*)faad_malloc(hDecoder->frameLength*sizeof(real_t));
876
16.6k
    memset(hDecoder->fb_intermed[channel], 0, hDecoder->frameLength*sizeof(real_t));
877
16.6k
    hDecoder->fb_intermed[paired_channel] = (real_t*)faad_malloc(hDecoder->frameLength*sizeof(real_t));
878
16.6k
    memset(hDecoder->fb_intermed[paired_channel], 0, hDecoder->frameLength*sizeof(real_t));
879
880
#ifdef SSR_DEC
881
    if (hDecoder->object_type == SSR)
882
    {
883
        if (hDecoder->ssr_overlap[cpe->channel] == NULL)
884
        {
885
            hDecoder->ssr_overlap[cpe->channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
886
            memset(hDecoder->ssr_overlap[cpe->channel], 0, 2*hDecoder->frameLength*sizeof(real_t));
887
        }
888
        if (hDecoder->ssr_overlap[cpe->paired_channel] == NULL)
889
        {
890
            hDecoder->ssr_overlap[cpe->paired_channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
891
            memset(hDecoder->ssr_overlap[cpe->paired_channel], 0, 2*hDecoder->frameLength*sizeof(real_t));
892
        }
893
        if (hDecoder->prev_fmd[cpe->channel] == NULL)
894
        {
895
            uint16_t k;
896
            hDecoder->prev_fmd[cpe->channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
897
            for (k = 0; k < 2*hDecoder->frameLength; k++)
898
                hDecoder->prev_fmd[cpe->channel][k] = REAL_CONST(-1);
899
        }
900
        if (hDecoder->prev_fmd[cpe->paired_channel] == NULL)
901
        {
902
            uint16_t k;
903
            hDecoder->prev_fmd[cpe->paired_channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
904
            for (k = 0; k < 2*hDecoder->frameLength; k++)
905
                hDecoder->prev_fmd[cpe->paired_channel][k] = REAL_CONST(-1);
906
        }
907
    }
908
#endif
909
910
16.6k
    return 0;
911
16.6k
}
912
913
uint8_t reconstruct_single_channel(NeAACDecStruct *hDecoder, ic_stream *ics,
914
                                   element *sce, int16_t *spec_data)
915
104k
{
916
104k
    uint8_t retval;
917
104k
    uint8_t output_channels;
918
104k
    ALIGN real_t spec_coef[1024];
919
920
#ifdef PROFILE
921
    int64_t count = faad_get_ts();
922
#endif
923
924
925
    /* always allocate 2 channels, PS can always "suddenly" turn up */
926
104k
#if ( (defined(DRM) && defined(DRM_PS)) )
927
104k
    output_channels = 2;
928
#elif defined(PS_DEC)
929
    if (hDecoder->ps_used[hDecoder->fr_ch_ele])
930
        output_channels = 2;
931
    else
932
        output_channels = 1;
933
#else
934
    output_channels = 1;
935
#endif
936
937
104k
    if (hDecoder->element_output_channels[hDecoder->fr_ch_ele] == 0)
938
89.9k
    {
939
        /* element_output_channels not set yet */
940
89.9k
        hDecoder->element_output_channels[hDecoder->fr_ch_ele] = output_channels;
941
89.9k
    } else if (hDecoder->element_output_channels[hDecoder->fr_ch_ele] != output_channels) {
942
        /* element inconsistency */
943
944
        /* this only happens if PS is actually found but not in the first frame
945
         * this means that there is only 1 bitstream element!
946
         */
947
948
        /* The simplest way to fix the accounting,
949
         * is to reallocate this and all the following channels.
950
         */
951
0
        memset(&hDecoder->element_alloced[hDecoder->fr_ch_ele], 0,
952
0
            sizeof(uint8_t) * (MAX_SYNTAX_ELEMENTS - hDecoder->fr_ch_ele));
953
954
0
        hDecoder->element_output_channels[hDecoder->fr_ch_ele] = output_channels;
955
956
        //return 21;
957
0
    }
958
959
104k
    if (hDecoder->element_alloced[hDecoder->fr_ch_ele] == 0)
960
89.9k
    {
961
89.9k
        retval = allocate_single_channel(hDecoder, sce->channel, output_channels);
962
89.9k
        if (retval > 0)
963
0
            return retval;
964
965
89.9k
        hDecoder->element_alloced[hDecoder->fr_ch_ele] = 1;
966
89.9k
    }
967
968
    /* sanity check, CVE-2018-20199, CVE-2018-20360 */
969
104k
    if(!hDecoder->time_out[sce->channel])
970
0
        return 15;
971
104k
    if(output_channels > 1 && !hDecoder->time_out[sce->channel+1])
972
0
        return 15;
973
104k
    if(!hDecoder->fb_intermed[sce->channel])
974
0
        return 15;
975
976
    /* dequantisation and scaling */
977
104k
    retval = quant_to_spec(hDecoder, ics, spec_data, spec_coef, hDecoder->frameLength);
978
104k
    if (retval > 0)
979
58
        return retval;
980
981
#ifdef PROFILE
982
    count = faad_get_ts() - count;
983
    hDecoder->requant_cycles += count;
984
#endif
985
986
987
    /* pns decoding */
988
104k
    pns_decode(ics, NULL, spec_coef, NULL, hDecoder->frameLength, 0, hDecoder->object_type,
989
104k
        &(hDecoder->__r1), &(hDecoder->__r2));
990
991
#ifdef MAIN_DEC
992
    /* MAIN object type prediction */
993
    if (hDecoder->object_type == MAIN)
994
    {
995
    if (!hDecoder->pred_stat[sce->channel])
996
      return 33;
997
998
        /* intra channel prediction */
999
        ic_prediction(ics, spec_coef, hDecoder->pred_stat[sce->channel], hDecoder->frameLength,
1000
            hDecoder->sf_index);
1001
1002
        /* In addition, for scalefactor bands coded by perceptual
1003
           noise substitution the predictors belonging to the
1004
           corresponding spectral coefficients are reset.
1005
        */
1006
        pns_reset_pred_state(ics, hDecoder->pred_stat[sce->channel]);
1007
    }
1008
#endif
1009
1010
#ifdef LTP_DEC
1011
    if (is_ltp_ot(hDecoder->object_type))
1012
    {
1013
#ifdef LD_DEC
1014
        if (hDecoder->object_type == LD)
1015
        {
1016
            if (ics->ltp.data_present)
1017
            {
1018
                if (ics->ltp.lag_update)
1019
                    hDecoder->ltp_lag[sce->channel] = ics->ltp.lag;
1020
            }
1021
            ics->ltp.lag = hDecoder->ltp_lag[sce->channel];
1022
        }
1023
#endif
1024
1025
        /* long term prediction */
1026
        lt_prediction(ics, &(ics->ltp), spec_coef, hDecoder->lt_pred_stat[sce->channel], hDecoder->fb,
1027
            ics->window_shape, hDecoder->window_shape_prev[sce->channel],
1028
            hDecoder->sf_index, hDecoder->object_type, hDecoder->frameLength);
1029
    }
1030
#endif
1031
1032
    /* tns decoding */
1033
104k
    tns_decode_frame(ics, &(ics->tns), hDecoder->sf_index, hDecoder->object_type,
1034
104k
        spec_coef, hDecoder->frameLength);
1035
1036
    /* drc decoding */
1037
104k
#ifdef APPLY_DRC
1038
104k
    if (hDecoder->drc->present)
1039
0
    {
1040
0
        if (!hDecoder->drc->exclude_mask[sce->channel] || !hDecoder->drc->excluded_chns_present)
1041
0
            drc_decode(hDecoder->drc, spec_coef);
1042
0
    }
1043
104k
#endif
1044
    /* filter bank */
1045
#ifdef SSR_DEC
1046
    if (hDecoder->object_type != SSR)
1047
    {
1048
#endif
1049
104k
        ifilter_bank(hDecoder->fb, ics->window_sequence, ics->window_shape,
1050
104k
            hDecoder->window_shape_prev[sce->channel], spec_coef,
1051
104k
            hDecoder->time_out[sce->channel], hDecoder->fb_intermed[sce->channel],
1052
104k
            hDecoder->object_type, hDecoder->frameLength);
1053
#ifdef SSR_DEC
1054
    } else {
1055
        ssr_decode(&(ics->ssr), hDecoder->fb, ics->window_sequence, ics->window_shape,
1056
            hDecoder->window_shape_prev[sce->channel], spec_coef, hDecoder->time_out[sce->channel],
1057
            hDecoder->ssr_overlap[sce->channel], hDecoder->ipqf_buffer[sce->channel], hDecoder->prev_fmd[sce->channel],
1058
            hDecoder->frameLength);
1059
    }
1060
#endif
1061
1062
    /* save window shape for next frame */
1063
104k
    hDecoder->window_shape_prev[sce->channel] = ics->window_shape;
1064
1065
#ifdef LTP_DEC
1066
    if (is_ltp_ot(hDecoder->object_type))
1067
    {
1068
        lt_update_state(hDecoder->lt_pred_stat[sce->channel], hDecoder->time_out[sce->channel],
1069
            hDecoder->fb_intermed[sce->channel], hDecoder->frameLength, hDecoder->object_type);
1070
    }
1071
#endif
1072
1073
104k
#ifdef SBR_DEC
1074
104k
    if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1075
89.7k
        && hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1076
89.7k
    {
1077
89.7k
        int ele = hDecoder->fr_ch_ele;
1078
89.7k
        int ch = sce->channel;
1079
1080
        /* following case can happen when forceUpSampling == 1 */
1081
89.7k
        if (hDecoder->sbr[ele] == NULL)
1082
65.3k
        {
1083
65.3k
            hDecoder->sbr[ele] = sbrDecodeInit(hDecoder->frameLength,
1084
65.3k
                hDecoder->element_id[ele], 2*get_sample_rate(hDecoder->sf_index),
1085
65.3k
                hDecoder->downSampledSBR
1086
65.3k
#ifdef DRM
1087
65.3k
                , 0
1088
65.3k
#endif
1089
65.3k
                );
1090
65.3k
        }
1091
89.7k
        if (!hDecoder->sbr[ele])
1092
0
            return 19;
1093
1094
89.7k
        if (sce->ics1.window_sequence == EIGHT_SHORT_SEQUENCE)
1095
10.7k
            hDecoder->sbr[ele]->maxAACLine = 8*min(sce->ics1.swb_offset[max(sce->ics1.max_sfb-1, 0)], sce->ics1.swb_offset_max);
1096
79.0k
        else
1097
79.0k
            hDecoder->sbr[ele]->maxAACLine = min(sce->ics1.swb_offset[max(sce->ics1.max_sfb-1, 0)], sce->ics1.swb_offset_max);
1098
1099
        /* check if any of the PS tools is used */
1100
89.7k
#if (defined(PS_DEC) || defined(DRM_PS))
1101
89.7k
        if (hDecoder->ps_used[ele] == 0)
1102
83.8k
        {
1103
83.8k
#endif
1104
83.8k
            retval = sbrDecodeSingleFrame(hDecoder->sbr[ele], hDecoder->time_out[ch],
1105
83.8k
                hDecoder->postSeekResetFlag, hDecoder->downSampledSBR);
1106
83.8k
#if (defined(PS_DEC) || defined(DRM_PS))
1107
83.8k
        } else {
1108
5.88k
            retval = sbrDecodeSingleFramePS(hDecoder->sbr[ele], hDecoder->time_out[ch],
1109
5.88k
                hDecoder->time_out[ch+1], hDecoder->postSeekResetFlag,
1110
5.88k
                hDecoder->downSampledSBR);
1111
5.88k
        }
1112
89.7k
#endif
1113
89.7k
        if (retval > 0)
1114
11
            return retval;
1115
89.7k
    } else if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1116
2
        && !hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1117
2
    {
1118
2
        return 23;
1119
2
    }
1120
104k
#endif
1121
1122
    /* copy L to R when no PS is used */
1123
104k
#if (defined(PS_DEC) || defined(DRM_PS))
1124
104k
    if ((hDecoder->ps_used[hDecoder->fr_ch_ele] == 0) &&
1125
98.1k
        (hDecoder->element_output_channels[hDecoder->fr_ch_ele] == 2))
1126
98.1k
    {
1127
98.1k
        int ele = hDecoder->fr_ch_ele;
1128
98.1k
        int ch = sce->channel;
1129
98.1k
        int frame_size = (hDecoder->sbr_alloced[ele]) ? 2 : 1;
1130
98.1k
        frame_size *= hDecoder->frameLength*sizeof(real_t);
1131
1132
98.1k
        memcpy(hDecoder->time_out[ch+1], hDecoder->time_out[ch], frame_size);
1133
98.1k
    }
1134
104k
#endif
1135
1136
104k
    return 0;
1137
104k
}
1138
1139
uint8_t reconstruct_channel_pair(NeAACDecStruct *hDecoder, ic_stream *ics1, ic_stream *ics2,
1140
                                 element *cpe, int16_t *spec_data1, int16_t *spec_data2)
1141
20.0k
{
1142
20.0k
    uint8_t retval;
1143
20.0k
    ALIGN real_t spec_coef1[1024];
1144
20.0k
    ALIGN real_t spec_coef2[1024];
1145
1146
#ifdef PROFILE
1147
    int64_t count = faad_get_ts();
1148
#endif
1149
20.0k
    if (hDecoder->element_alloced[hDecoder->fr_ch_ele] != 2)
1150
16.6k
    {
1151
16.6k
        retval = allocate_channel_pair(hDecoder, cpe->channel, (uint8_t)cpe->paired_channel);
1152
16.6k
        if (retval > 0)
1153
0
            return retval;
1154
1155
16.6k
        hDecoder->element_alloced[hDecoder->fr_ch_ele] = 2;
1156
16.6k
    }
1157
1158
    /* sanity check, CVE-2018-20199, CVE-2018-20360 */
1159
20.0k
    if(!hDecoder->time_out[cpe->channel] || !hDecoder->time_out[cpe->paired_channel])
1160
0
        return 15;
1161
20.0k
    if(!hDecoder->fb_intermed[cpe->channel] || !hDecoder->fb_intermed[cpe->paired_channel])
1162
0
        return 15;
1163
1164
    /* dequantisation and scaling */
1165
20.0k
    retval = quant_to_spec(hDecoder, ics1, spec_data1, spec_coef1, hDecoder->frameLength);
1166
20.0k
    if (retval > 0)
1167
63
        return retval;
1168
20.0k
    retval = quant_to_spec(hDecoder, ics2, spec_data2, spec_coef2, hDecoder->frameLength);
1169
20.0k
    if (retval > 0)
1170
3
        return retval;
1171
1172
#ifdef PROFILE
1173
    count = faad_get_ts() - count;
1174
    hDecoder->requant_cycles += count;
1175
#endif
1176
1177
    /* pns decoding */
1178
20.0k
    if (ics1->ms_mask_present)
1179
6.88k
    {
1180
6.88k
        pns_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength, 1, hDecoder->object_type,
1181
6.88k
            &(hDecoder->__r1), &(hDecoder->__r2));
1182
13.1k
    } else {
1183
13.1k
        pns_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength, 0, hDecoder->object_type,
1184
13.1k
            &(hDecoder->__r1), &(hDecoder->__r2));
1185
13.1k
    }
1186
1187
    /* mid/side decoding */
1188
20.0k
    ms_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength);
1189
1190
#if 0
1191
    {
1192
        int i;
1193
        for (i = 0; i < 1024; i++)
1194
        {
1195
            //printf("%d\n", spec_coef1[i]);
1196
            printf("0x%.8X\n", spec_coef1[i]);
1197
        }
1198
        for (i = 0; i < 1024; i++)
1199
        {
1200
            //printf("%d\n", spec_coef2[i]);
1201
            printf("0x%.8X\n", spec_coef2[i]);
1202
        }
1203
    }
1204
#endif
1205
1206
    /* intensity stereo decoding */
1207
20.0k
    is_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength);
1208
1209
#if 0
1210
    {
1211
        int i;
1212
        for (i = 0; i < 1024; i++)
1213
        {
1214
            printf("%d\n", spec_coef1[i]);
1215
            //printf("0x%.8X\n", spec_coef1[i]);
1216
        }
1217
        for (i = 0; i < 1024; i++)
1218
        {
1219
            printf("%d\n", spec_coef2[i]);
1220
            //printf("0x%.8X\n", spec_coef2[i]);
1221
        }
1222
    }
1223
#endif
1224
1225
#ifdef MAIN_DEC
1226
    /* MAIN object type prediction */
1227
    if (hDecoder->object_type == MAIN)
1228
    {
1229
        /* intra channel prediction */
1230
        ic_prediction(ics1, spec_coef1, hDecoder->pred_stat[cpe->channel], hDecoder->frameLength,
1231
            hDecoder->sf_index);
1232
        ic_prediction(ics2, spec_coef2, hDecoder->pred_stat[cpe->paired_channel], hDecoder->frameLength,
1233
            hDecoder->sf_index);
1234
1235
        /* In addition, for scalefactor bands coded by perceptual
1236
           noise substitution the predictors belonging to the
1237
           corresponding spectral coefficients are reset.
1238
        */
1239
        pns_reset_pred_state(ics1, hDecoder->pred_stat[cpe->channel]);
1240
        pns_reset_pred_state(ics2, hDecoder->pred_stat[cpe->paired_channel]);
1241
    }
1242
#endif
1243
1244
#ifdef LTP_DEC
1245
    if (is_ltp_ot(hDecoder->object_type))
1246
    {
1247
        ltp_info *ltp1 = &(ics1->ltp);
1248
        ltp_info *ltp2 = (cpe->common_window) ? &(ics2->ltp2) : &(ics2->ltp);
1249
#ifdef LD_DEC
1250
        if (hDecoder->object_type == LD)
1251
        {
1252
            if (ltp1->data_present)
1253
            {
1254
                if (ltp1->lag_update)
1255
                    hDecoder->ltp_lag[cpe->channel] = ltp1->lag;
1256
            }
1257
            ltp1->lag = hDecoder->ltp_lag[cpe->channel];
1258
            if (ltp2->data_present)
1259
            {
1260
                if (ltp2->lag_update)
1261
                    hDecoder->ltp_lag[cpe->paired_channel] = ltp2->lag;
1262
            }
1263
            ltp2->lag = hDecoder->ltp_lag[cpe->paired_channel];
1264
        }
1265
#endif
1266
1267
        /* long term prediction */
1268
        lt_prediction(ics1, ltp1, spec_coef1, hDecoder->lt_pred_stat[cpe->channel], hDecoder->fb,
1269
            ics1->window_shape, hDecoder->window_shape_prev[cpe->channel],
1270
            hDecoder->sf_index, hDecoder->object_type, hDecoder->frameLength);
1271
        lt_prediction(ics2, ltp2, spec_coef2, hDecoder->lt_pred_stat[cpe->paired_channel], hDecoder->fb,
1272
            ics2->window_shape, hDecoder->window_shape_prev[cpe->paired_channel],
1273
            hDecoder->sf_index, hDecoder->object_type, hDecoder->frameLength);
1274
    }
1275
#endif
1276
1277
    /* tns decoding */
1278
20.0k
    tns_decode_frame(ics1, &(ics1->tns), hDecoder->sf_index, hDecoder->object_type,
1279
20.0k
        spec_coef1, hDecoder->frameLength);
1280
20.0k
    tns_decode_frame(ics2, &(ics2->tns), hDecoder->sf_index, hDecoder->object_type,
1281
20.0k
        spec_coef2, hDecoder->frameLength);
1282
1283
    /* drc decoding */
1284
20.0k
#if APPLY_DRC
1285
20.0k
    if (hDecoder->drc->present)
1286
0
    {
1287
0
        if (!hDecoder->drc->exclude_mask[cpe->channel] || !hDecoder->drc->excluded_chns_present)
1288
0
            drc_decode(hDecoder->drc, spec_coef1);
1289
0
        if (!hDecoder->drc->exclude_mask[cpe->paired_channel] || !hDecoder->drc->excluded_chns_present)
1290
0
            drc_decode(hDecoder->drc, spec_coef2);
1291
0
    }
1292
20.0k
#endif
1293
    /* filter bank */
1294
#ifdef SSR_DEC
1295
    if (hDecoder->object_type != SSR)
1296
    {
1297
#endif
1298
20.0k
        ifilter_bank(hDecoder->fb, ics1->window_sequence, ics1->window_shape,
1299
20.0k
            hDecoder->window_shape_prev[cpe->channel], spec_coef1,
1300
20.0k
            hDecoder->time_out[cpe->channel], hDecoder->fb_intermed[cpe->channel],
1301
20.0k
            hDecoder->object_type, hDecoder->frameLength);
1302
20.0k
        ifilter_bank(hDecoder->fb, ics2->window_sequence, ics2->window_shape,
1303
20.0k
            hDecoder->window_shape_prev[cpe->paired_channel], spec_coef2,
1304
20.0k
            hDecoder->time_out[cpe->paired_channel], hDecoder->fb_intermed[cpe->paired_channel],
1305
20.0k
            hDecoder->object_type, hDecoder->frameLength);
1306
#ifdef SSR_DEC
1307
    } else {
1308
        ssr_decode(&(ics1->ssr), hDecoder->fb, ics1->window_sequence, ics1->window_shape,
1309
            hDecoder->window_shape_prev[cpe->channel], spec_coef1, hDecoder->time_out[cpe->channel],
1310
            hDecoder->ssr_overlap[cpe->channel], hDecoder->ipqf_buffer[cpe->channel],
1311
            hDecoder->prev_fmd[cpe->channel], hDecoder->frameLength);
1312
        ssr_decode(&(ics2->ssr), hDecoder->fb, ics2->window_sequence, ics2->window_shape,
1313
            hDecoder->window_shape_prev[cpe->paired_channel], spec_coef2, hDecoder->time_out[cpe->paired_channel],
1314
            hDecoder->ssr_overlap[cpe->paired_channel], hDecoder->ipqf_buffer[cpe->paired_channel],
1315
            hDecoder->prev_fmd[cpe->paired_channel], hDecoder->frameLength);
1316
    }
1317
#endif
1318
1319
    /* save window shape for next frame */
1320
20.0k
    hDecoder->window_shape_prev[cpe->channel] = ics1->window_shape;
1321
20.0k
    hDecoder->window_shape_prev[cpe->paired_channel] = ics2->window_shape;
1322
1323
#ifdef LTP_DEC
1324
    if (is_ltp_ot(hDecoder->object_type))
1325
    {
1326
        lt_update_state(hDecoder->lt_pred_stat[cpe->channel], hDecoder->time_out[cpe->channel],
1327
            hDecoder->fb_intermed[cpe->channel], hDecoder->frameLength, hDecoder->object_type);
1328
        lt_update_state(hDecoder->lt_pred_stat[cpe->paired_channel], hDecoder->time_out[cpe->paired_channel],
1329
            hDecoder->fb_intermed[cpe->paired_channel], hDecoder->frameLength, hDecoder->object_type);
1330
    }
1331
#endif
1332
1333
20.0k
#ifdef SBR_DEC
1334
20.0k
    if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1335
17.7k
        && hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1336
17.7k
    {
1337
17.7k
        int ele = hDecoder->fr_ch_ele;
1338
17.7k
        int ch0 = cpe->channel;
1339
17.7k
        int ch1 = cpe->paired_channel;
1340
1341
        /* following case can happen when forceUpSampling == 1 */
1342
17.7k
        if (hDecoder->sbr[ele] == NULL)
1343
4.16k
        {
1344
4.16k
            hDecoder->sbr[ele] = sbrDecodeInit(hDecoder->frameLength,
1345
4.16k
                hDecoder->element_id[ele], 2*get_sample_rate(hDecoder->sf_index),
1346
4.16k
                hDecoder->downSampledSBR
1347
4.16k
#ifdef DRM
1348
4.16k
                , 0
1349
4.16k
#endif
1350
4.16k
                );
1351
4.16k
        }
1352
17.7k
        if (!hDecoder->sbr[ele])
1353
0
            return 19;
1354
1355
17.7k
        if (cpe->ics1.window_sequence == EIGHT_SHORT_SEQUENCE)
1356
796
            hDecoder->sbr[ele]->maxAACLine = 8*min(cpe->ics1.swb_offset[max(cpe->ics1.max_sfb-1, 0)], cpe->ics1.swb_offset_max);
1357
16.9k
        else
1358
16.9k
            hDecoder->sbr[ele]->maxAACLine = min(cpe->ics1.swb_offset[max(cpe->ics1.max_sfb-1, 0)], cpe->ics1.swb_offset_max);
1359
1360
17.7k
        retval = sbrDecodeCoupleFrame(hDecoder->sbr[ele],
1361
17.7k
            hDecoder->time_out[ch0], hDecoder->time_out[ch1],
1362
17.7k
            hDecoder->postSeekResetFlag, hDecoder->downSampledSBR);
1363
17.7k
        if (retval > 0)
1364
3
            return retval;
1365
17.7k
    } else if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1366
1
        && !hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1367
1
    {
1368
1
        return 23;
1369
1
    }
1370
20.0k
#endif
1371
1372
20.0k
    return 0;
1373
20.0k
}