Coverage Report

Created: 2026-08-31 07:13

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/proc/self/cwd/libfaad/specrec.c
Line
Count
Source
1
/*
2
** FAAD2 - Freeware Advanced Audio (AAC) Decoder including SBR decoding
3
** Copyright (C) 2003-2005 M. Bakker, Nero AG, http://www.nero.com
4
**
5
** This program is free software; you can redistribute it and/or modify
6
** it under the terms of the GNU General Public License as published by
7
** the Free Software Foundation; either version 2 of the License, or
8
** (at your option) any later version.
9
**
10
** This program is distributed in the hope that it will be useful,
11
** but WITHOUT ANY WARRANTY; without even the implied warranty of
12
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13
** GNU General Public License for more details.
14
**
15
** You should have received a copy of the GNU General Public License
16
** along with this program; if not, write to the Free Software
17
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
18
**
19
** Any non-GPL usage of this software or parts of this software is strictly
20
** forbidden.
21
**
22
** The "appropriate copyright message" mentioned in section 2c of the GPLv2
23
** must read: "Code from FAAD2 is copyright (c) Nero AG, www.nero.com"
24
**
25
** Commercial non-GPL licensing of this software is possible.
26
** For more info contact Nero AG through Mpeg4AAClicense@nero.com.
27
**
28
** $Id: specrec.c,v 1.63 2010/06/04 20:47:56 menno Exp $
29
**/
30
31
/*
32
  Spectral reconstruction:
33
   - grouping/sectioning
34
   - inverse quantization
35
   - applying scalefactors
36
*/
37
38
#include "common.h"
39
#include "structs.h"
40
41
#include <stdlib.h>
42
#include "specrec.h"
43
#include "filtbank.h"
44
#include "syntax.h"
45
#include "iq_table.h"
46
#include "ms.h"
47
#include "is.h"
48
#include "pns.h"
49
#include "tns.h"
50
#include "drc.h"
51
#include "lt_predict.h"
52
#include "ic_predict.h"
53
#ifdef SSR_DEC
54
#include "ssr.h"
55
#include "ssr_fb.h"
56
#endif
57
58
59
/* static function declarations */
60
static uint8_t quant_to_spec(NeAACDecStruct *hDecoder,
61
                             ic_stream *ics, int16_t *quant_data,
62
                             real_t *spec_data, uint16_t frame_len);
63
64
65
#ifdef LD_DEC
66
ALIGN static const uint8_t num_swb_512_window[] =
67
{
68
    0, 0, 0, 36, 36, 37, 31, 31, 0, 0, 0, 0
69
};
70
ALIGN static const uint8_t num_swb_480_window[] =
71
{
72
    0, 0, 0, 35, 35, 37, 30, 30, 0, 0, 0, 0
73
};
74
#endif
75
76
ALIGN static const uint8_t num_swb_960_window[] =
77
{
78
    40, 40, 45, 49, 49, 49, 46, 46, 42, 42, 42, 40
79
};
80
81
ALIGN static const uint8_t num_swb_1024_window[] =
82
{
83
    41, 41, 47, 49, 49, 51, 47, 47, 43, 43, 43, 40
84
};
85
86
ALIGN static const uint8_t num_swb_128_window[] =
87
{
88
    12, 12, 12, 14, 14, 14, 15, 15, 15, 15, 15, 15
89
};
90
91
ALIGN static const uint16_t swb_offset_1024_96[] =
92
{
93
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56,
94
    64, 72, 80, 88, 96, 108, 120, 132, 144, 156, 172, 188, 212, 240,
95
    276, 320, 384, 448, 512, 576, 640, 704, 768, 832, 896, 960, 1024
96
};
97
98
ALIGN static const uint16_t swb_offset_128_96[] =
99
{
100
    0, 4, 8, 12, 16, 20, 24, 32, 40, 48, 64, 92, 128
101
};
102
103
ALIGN static const uint16_t swb_offset_1024_64[] =
104
{
105
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56,
106
    64, 72, 80, 88, 100, 112, 124, 140, 156, 172, 192, 216, 240, 268,
107
    304, 344, 384, 424, 464, 504, 544, 584, 624, 664, 704, 744, 784, 824,
108
    864, 904, 944, 984, 1024
109
};
110
111
ALIGN static const uint16_t swb_offset_128_64[] =
112
{
113
    0, 4, 8, 12, 16, 20, 24, 32, 40, 48, 64, 92, 128
114
};
115
116
ALIGN static const uint16_t swb_offset_1024_48[] =
117
{
118
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 48, 56, 64, 72,
119
    80, 88, 96, 108, 120, 132, 144, 160, 176, 196, 216, 240, 264, 292,
120
    320, 352, 384, 416, 448, 480, 512, 544, 576, 608, 640, 672, 704, 736,
121
    768, 800, 832, 864, 896, 928, 1024
122
};
123
124
#ifdef LD_DEC
125
ALIGN static const uint16_t swb_offset_512_48[] =
126
{
127
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 60, 68, 76, 84,
128
    92, 100, 112, 124, 136, 148, 164, 184, 208, 236, 268, 300, 332, 364, 396,
129
    428, 460, 512
130
};
131
132
ALIGN static const uint16_t swb_offset_480_48[] =
133
{
134
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 64, 72 ,80 ,88,
135
    96, 108, 120, 132, 144, 156, 172, 188, 212, 240, 272, 304, 336, 368, 400,
136
    432, 480
137
};
138
#endif
139
140
ALIGN static const uint16_t swb_offset_128_48[] =
141
{
142
    0, 4, 8, 12, 16, 20, 28, 36, 44, 56, 68, 80, 96, 112, 128
143
};
144
145
ALIGN static const uint16_t swb_offset_1024_32[] =
146
{
147
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 48, 56, 64, 72,
148
    80, 88, 96, 108, 120, 132, 144, 160, 176, 196, 216, 240, 264, 292,
149
    320, 352, 384, 416, 448, 480, 512, 544, 576, 608, 640, 672, 704, 736,
150
    768, 800, 832, 864, 896, 928, 960, 992, 1024
151
};
152
153
#ifdef LD_DEC
154
ALIGN static const uint16_t swb_offset_512_32[] =
155
{
156
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 64, 72, 80,
157
    88, 96, 108, 120, 132, 144, 160, 176, 192, 212, 236, 260, 288, 320, 352,
158
    384, 416, 448, 480, 512
159
};
160
161
ALIGN static const uint16_t swb_offset_480_32[] =
162
{
163
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 60, 64, 72, 80,
164
    88, 96, 104, 112, 124, 136, 148, 164, 180, 200, 224, 256, 288, 320, 352,
165
    384, 416, 448, 480
166
};
167
#endif
168
169
ALIGN static const uint16_t swb_offset_1024_24[] =
170
{
171
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 52, 60, 68,
172
    76, 84, 92, 100, 108, 116, 124, 136, 148, 160, 172, 188, 204, 220,
173
    240, 260, 284, 308, 336, 364, 396, 432, 468, 508, 552, 600, 652, 704,
174
    768, 832, 896, 960, 1024
175
};
176
177
#ifdef LD_DEC
178
ALIGN static const uint16_t swb_offset_512_24[] =
179
{
180
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 52, 60, 68,
181
    80, 92, 104, 120, 140, 164, 192, 224, 256, 288, 320, 352, 384, 416,
182
    448, 480, 512
183
};
184
185
ALIGN static const uint16_t swb_offset_480_24[] =
186
{
187
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 52, 60, 68, 80, 92, 104, 120,
188
    140, 164, 192, 224, 256, 288, 320, 352, 384, 416, 448, 480
189
};
190
#endif
191
192
ALIGN static const uint16_t swb_offset_128_24[] =
193
{
194
    0, 4, 8, 12, 16, 20, 24, 28, 36, 44, 52, 64, 76, 92, 108, 128
195
};
196
197
ALIGN static const uint16_t swb_offset_1024_16[] =
198
{
199
    0, 8, 16, 24, 32, 40, 48, 56, 64, 72, 80, 88, 100, 112, 124,
200
    136, 148, 160, 172, 184, 196, 212, 228, 244, 260, 280, 300, 320, 344,
201
    368, 396, 424, 456, 492, 532, 572, 616, 664, 716, 772, 832, 896, 960, 1024
202
};
203
204
ALIGN static const uint16_t swb_offset_128_16[] =
205
{
206
    0, 4, 8, 12, 16, 20, 24, 28, 32, 40, 48, 60, 72, 88, 108, 128
207
};
208
209
ALIGN static const uint16_t swb_offset_1024_8[] =
210
{
211
    0, 12, 24, 36, 48, 60, 72, 84, 96, 108, 120, 132, 144, 156, 172,
212
    188, 204, 220, 236, 252, 268, 288, 308, 328, 348, 372, 396, 420, 448,
213
    476, 508, 544, 580, 620, 664, 712, 764, 820, 880, 944, 1024
214
};
215
216
ALIGN static const uint16_t swb_offset_128_8[] =
217
{
218
    0, 4, 8, 12, 16, 20, 24, 28, 36, 44, 52, 60, 72, 88, 108, 128
219
};
220
221
ALIGN static const uint16_t *swb_offset_1024_window[] =
222
{
223
    swb_offset_1024_96,      /* 96000 */
224
    swb_offset_1024_96,      /* 88200 */
225
    swb_offset_1024_64,      /* 64000 */
226
    swb_offset_1024_48,      /* 48000 */
227
    swb_offset_1024_48,      /* 44100 */
228
    swb_offset_1024_32,      /* 32000 */
229
    swb_offset_1024_24,      /* 24000 */
230
    swb_offset_1024_24,      /* 22050 */
231
    swb_offset_1024_16,      /* 16000 */
232
    swb_offset_1024_16,      /* 12000 */
233
    swb_offset_1024_16,      /* 11025 */
234
    swb_offset_1024_8        /* 8000  */
235
};
236
237
#ifdef LD_DEC
238
ALIGN static const uint16_t *swb_offset_512_window[] =
239
{
240
    0,                       /* 96000 */
241
    0,                       /* 88200 */
242
    0,                       /* 64000 */
243
    swb_offset_512_48,       /* 48000 */
244
    swb_offset_512_48,       /* 44100 */
245
    swb_offset_512_32,       /* 32000 */
246
    swb_offset_512_24,       /* 24000 */
247
    swb_offset_512_24,       /* 22050 */
248
    0,                       /* 16000 */
249
    0,                       /* 12000 */
250
    0,                       /* 11025 */
251
    0                        /* 8000  */
252
};
253
254
ALIGN static const uint16_t *swb_offset_480_window[] =
255
{
256
    0,                       /* 96000 */
257
    0,                       /* 88200 */
258
    0,                       /* 64000 */
259
    swb_offset_480_48,       /* 48000 */
260
    swb_offset_480_48,       /* 44100 */
261
    swb_offset_480_32,       /* 32000 */
262
    swb_offset_480_24,       /* 24000 */
263
    swb_offset_480_24,       /* 22050 */
264
    0,                       /* 16000 */
265
    0,                       /* 12000 */
266
    0,                       /* 11025 */
267
    0                        /* 8000  */
268
};
269
#endif
270
271
ALIGN static const  uint16_t *swb_offset_128_window[] =
272
{
273
    swb_offset_128_96,       /* 96000 */
274
    swb_offset_128_96,       /* 88200 */
275
    swb_offset_128_64,       /* 64000 */
276
    swb_offset_128_48,       /* 48000 */
277
    swb_offset_128_48,       /* 44100 */
278
    swb_offset_128_48,       /* 32000 */
279
    swb_offset_128_24,       /* 24000 */
280
    swb_offset_128_24,       /* 22050 */
281
    swb_offset_128_16,       /* 16000 */
282
    swb_offset_128_16,       /* 12000 */
283
    swb_offset_128_16,       /* 11025 */
284
    swb_offset_128_8         /* 8000  */
285
};
286
287
108k
#define bit_set(A, B) ((A) & (1<<(B)))
288
289
/* 4.5.2.3.4 */
290
/*
291
  - determine the number of windows in a window_sequence named num_windows
292
  - determine the number of window_groups named num_window_groups
293
  - determine the number of windows in each group named window_group_length[g]
294
  - determine the total number of scalefactor window bands named num_swb for
295
    the actual window type
296
  - determine swb_offset[swb], the offset of the first coefficient in
297
    scalefactor window band named swb of the window actually used
298
  - determine sect_sfb_offset[g][section],the offset of the first coefficient
299
    in section named section. This offset depends on window_sequence and
300
    scale_factor_grouping and is needed to decode the spectral_data().
301
*/
302
uint8_t window_grouping_info(NeAACDecStruct *hDecoder, ic_stream *ics)
303
144k
{
304
144k
    uint8_t i, g;
305
306
144k
    uint8_t sf_index = hDecoder->sf_index;
307
308
144k
    if (sf_index >= 12)
309
3
        return 32;
310
311
144k
    switch (ics->window_sequence) {
312
118k
    case ONLY_LONG_SEQUENCE:
313
123k
    case LONG_START_SEQUENCE:
314
128k
    case LONG_STOP_SEQUENCE:
315
128k
        ics->num_windows = 1;
316
128k
        ics->num_window_groups = 1;
317
128k
        ics->window_group_length[ics->num_window_groups-1] = 1;
318
#ifdef LD_DEC
319
        if (hDecoder->object_type == LD)
320
        {
321
            if (hDecoder->frameLength == 512)
322
                ics->num_swb = num_swb_512_window[sf_index];
323
            else /* if (hDecoder->frameLength == 480) */
324
                ics->num_swb = num_swb_480_window[sf_index];
325
        } else {
326
#endif
327
128k
            if (hDecoder->frameLength == 1024)
328
104k
                ics->num_swb = num_swb_1024_window[sf_index];
329
24.1k
            else /* if (hDecoder->frameLength == 960) */
330
24.1k
                ics->num_swb = num_swb_960_window[sf_index];
331
#ifdef LD_DEC
332
        }
333
#endif
334
335
128k
        if (ics->max_sfb > ics->num_swb)
336
49
        {
337
49
            return 32;
338
49
        }
339
340
        /* preparation of sect_sfb_offset for long blocks */
341
        /* also copy the last value! */
342
#ifdef LD_DEC
343
        if (hDecoder->object_type == LD)
344
        {
345
            if (hDecoder->frameLength == 512)
346
            {
347
                for (i = 0; i < ics->num_swb; i++)
348
                {
349
                    ics->sect_sfb_offset[0][i] = swb_offset_512_window[sf_index][i];
350
                    ics->swb_offset[i] = swb_offset_512_window[sf_index][i];
351
                }
352
            } else /* if (hDecoder->frameLength == 480) */ {
353
                for (i = 0; i < ics->num_swb; i++)
354
                {
355
                    ics->sect_sfb_offset[0][i] = swb_offset_480_window[sf_index][i];
356
                    ics->swb_offset[i] = swb_offset_480_window[sf_index][i];
357
                }
358
            }
359
            ics->sect_sfb_offset[0][ics->num_swb] = hDecoder->frameLength;
360
            ics->swb_offset[ics->num_swb] = hDecoder->frameLength;
361
            ics->swb_offset_max = hDecoder->frameLength;
362
        } else {
363
#endif
364
5.63M
            for (i = 0; i < ics->num_swb; i++)
365
5.51M
            {
366
5.51M
                ics->sect_sfb_offset[0][i] = swb_offset_1024_window[sf_index][i];
367
5.51M
                ics->swb_offset[i] = swb_offset_1024_window[sf_index][i];
368
5.51M
            }
369
128k
            ics->sect_sfb_offset[0][ics->num_swb] = hDecoder->frameLength;
370
128k
            ics->swb_offset[ics->num_swb] = hDecoder->frameLength;
371
128k
            ics->swb_offset_max = hDecoder->frameLength;
372
#ifdef LD_DEC
373
        }
374
#endif
375
128k
        if (ics->num_swb > 0 && ics->swb_offset[ics->num_swb] < ics->swb_offset[ics->num_swb-1]) {
376
0
            return 32;
377
0
        }
378
128k
        return 0;
379
15.4k
    case EIGHT_SHORT_SEQUENCE:
380
15.4k
        ics->num_windows = 8;
381
15.4k
        ics->num_window_groups = 1;
382
15.4k
        ics->window_group_length[ics->num_window_groups-1] = 1;
383
15.4k
        ics->num_swb = num_swb_128_window[sf_index];
384
385
15.4k
        if (ics->max_sfb > ics->num_swb)
386
5
        {
387
5
            return 32;
388
5
        }
389
390
232k
        for (i = 0; i < ics->num_swb; i++)
391
216k
            ics->swb_offset[i] = swb_offset_128_window[sf_index][i];
392
15.4k
        ics->swb_offset[ics->num_swb] = hDecoder->frameLength/8;
393
15.4k
        ics->swb_offset_max = hDecoder->frameLength/8;
394
395
123k
        for (i = 0; i < ics->num_windows-1; i++) {
396
108k
            if (bit_set(ics->scale_factor_grouping, 6-i) == 0)
397
84.7k
            {
398
84.7k
                ics->num_window_groups += 1;
399
84.7k
                ics->window_group_length[ics->num_window_groups-1] = 1;
400
84.7k
            } else {
401
23.2k
                ics->window_group_length[ics->num_window_groups-1] += 1;
402
23.2k
            }
403
108k
        }
404
405
        /* preparation of sect_sfb_offset for short blocks */
406
115k
        for (g = 0; g < ics->num_window_groups; g++)
407
100k
        {
408
100k
            uint16_t width;
409
100k
            uint8_t sect_sfb = 0;
410
100k
            uint16_t offset = 0;
411
412
1.50M
            for (i = 0; i < ics->num_swb; i++)
413
1.40M
            {
414
1.40M
                if (i+1 == ics->num_swb)
415
100k
                {
416
100k
                    width = (hDecoder->frameLength/8) - swb_offset_128_window[sf_index][i];
417
1.30M
                } else {
418
1.30M
                    width = swb_offset_128_window[sf_index][i+1] -
419
1.30M
                        swb_offset_128_window[sf_index][i];
420
1.30M
                }
421
1.40M
                width *= ics->window_group_length[g];
422
1.40M
                ics->sect_sfb_offset[g][sect_sfb++] = offset;
423
1.40M
                offset += width;
424
1.40M
            }
425
100k
            ics->sect_sfb_offset[g][sect_sfb] = offset;
426
100k
        }
427
15.4k
        return 0;
428
0
    default:
429
0
        return 32;
430
144k
    }
431
144k
}
432
433
/* iquant() * output = sign(input)*abs(input)^(4/3) */
434
static INLINE real_t iquant(int16_t q, const real_t *tab, uint8_t *error)
435
157M
{
436
#ifdef FIXED_POINT
437
/* For FIXED_POINT the iq_table is prescaled by 3 bits (iq_table[]/8) */
438
/* BIG_IQ_TABLE allows you to use the full 8192 value table, if this is not
439
 * defined a 1026 value table and interpolation will be used
440
 */
441
#ifndef BIG_IQ_TABLE
442
    static const real_t errcorr[] = {
443
        REAL_CONST(0), REAL_CONST(1.0/8.0), REAL_CONST(2.0/8.0), REAL_CONST(3.0/8.0),
444
        REAL_CONST(4.0/8.0),  REAL_CONST(5.0/8.0), REAL_CONST(6.0/8.0), REAL_CONST(7.0/8.0),
445
        REAL_CONST(0)
446
    };
447
    real_t x1, x2;
448
#endif
449
    int16_t sgn = 1;
450
    /* compute the magnitude in int: -q is evaluated as int and so does not
451
       wrap for q == -32768 the way an int16_t negation would, which keeps the
452
       comparison against IQ_TABLE_SIZE in range like the floating-point path */
453
    int aq = q;
454
455
    if (aq < 0)
456
    {
457
        aq = -aq;
458
        sgn = -1;
459
    }
460
461
    if (aq < IQ_TABLE_SIZE)
462
    {
463
//#define IQUANT_PRINT
464
#ifdef IQUANT_PRINT
465
        //printf("0x%.8X\n", sgn * tab[aq]);
466
        printf("%d\n", sgn * tab[aq]);
467
#endif
468
        return sgn * tab[aq];
469
    }
470
471
#ifndef BIG_IQ_TABLE
472
    if (aq >= 8192)
473
    {
474
        *error = 17;
475
        return 0;
476
    }
477
478
    /* linear interpolation */
479
    x1 = tab[aq>>3];
480
    x2 = tab[(aq>>3) + 1];
481
    return sgn * 16 * (MUL_R(errcorr[aq&7],(x2-x1)) + x1);
482
#else
483
    *error = 17;
484
    return 0;
485
#endif
486
487
#else
488
157M
    if (q < 0)
489
86.4k
    {
490
        /* tab contains a value for all possible q [0,8192] */
491
86.4k
        if (-q < IQ_TABLE_SIZE)
492
85.6k
            return -tab[-q];
493
494
843
        *error = 17;
495
843
        return 0;
496
157M
    } else {
497
        /* tab contains a value for all possible q [0,8192] */
498
157M
        if (q < IQ_TABLE_SIZE)
499
157M
            return tab[q];
500
501
543
        *error = 17;
502
543
        return 0;
503
157M
    }
504
157M
#endif
505
157M
}
506
507
#ifndef FIXED_POINT
508
ALIGN static const real_t pow2sf_tab[] = {
509
    2.9802322387695313E-008, 5.9604644775390625E-008, 1.1920928955078125E-007,
510
    2.384185791015625E-007, 4.76837158203125E-007, 9.5367431640625E-007,
511
    1.9073486328125E-006, 3.814697265625E-006, 7.62939453125E-006,
512
    1.52587890625E-005, 3.0517578125E-005, 6.103515625E-005,
513
    0.0001220703125, 0.000244140625, 0.00048828125,
514
    0.0009765625, 0.001953125, 0.00390625,
515
    0.0078125, 0.015625, 0.03125,
516
    0.0625, 0.125, 0.25,
517
    0.5, 1.0, 2.0,
518
    4.0, 8.0, 16.0, 32.0,
519
    64.0, 128.0, 256.0,
520
    512.0, 1024.0, 2048.0,
521
    4096.0, 8192.0, 16384.0,
522
    32768.0, 65536.0, 131072.0,
523
    262144.0, 524288.0, 1048576.0,
524
    2097152.0, 4194304.0, 8388608.0,
525
    16777216.0, 33554432.0, 67108864.0,
526
    134217728.0, 268435456.0, 536870912.0,
527
    1073741824.0, 2147483648.0, 4294967296.0,
528
    8589934592.0, 17179869184.0, 34359738368.0,
529
    68719476736.0, 137438953472.0, 274877906944.0
530
};
531
#endif
532
533
/* quant_to_spec: perform dequantisation and scaling
534
 * and in case of short block it also does the deinterleaving
535
 */
536
/*
537
  For ONLY_LONG_SEQUENCE windows (num_window_groups = 1,
538
  window_group_length[0] = 1) the spectral data is in ascending spectral
539
  order.
540
  For the EIGHT_SHORT_SEQUENCE window, the spectral order depends on the
541
  grouping in the following manner:
542
  - Groups are ordered sequentially
543
  - Within a group, a scalefactor band consists of the spectral data of all
544
    grouped SHORT_WINDOWs for the associated scalefactor window band. To
545
    clarify via example, the length of a group is in the range of one to eight
546
    SHORT_WINDOWs.
547
  - If there are eight groups each with length one (num_window_groups = 8,
548
    window_group_length[0..7] = 1), the result is a sequence of eight spectra,
549
    each in ascending spectral order.
550
  - If there is only one group with length eight (num_window_groups = 1,
551
    window_group_length[0] = 8), the result is that spectral data of all eight
552
    SHORT_WINDOWs is interleaved by scalefactor window bands.
553
  - Within a scalefactor window band, the coefficients are in ascending
554
    spectral order.
555
*/
556
static uint8_t quant_to_spec(NeAACDecStruct *hDecoder,
557
                             ic_stream *ics, int16_t *quant_data,
558
                             real_t *spec_data, uint16_t frame_len)
559
155k
{
560
155k
    ALIGN static const real_t pow2_table[] =
561
155k
    {
562
155k
        COEF_CONST(1.0),
563
155k
        COEF_CONST(1.1892071150027210667174999705605), /* 2^0.25 */
564
155k
        COEF_CONST(1.4142135623730950488016887242097), /* 2^0.5 */
565
155k
        COEF_CONST(1.6817928305074290860622509524664) /* 2^0.75 */
566
155k
    };
567
155k
    const real_t *tab = iq_table;
568
569
155k
    uint8_t g, sfb, win;
570
155k
    uint16_t width, bin, k, gindex;
571
155k
    uint8_t error = 0; /* Init error flag */
572
155k
#ifndef FIXED_POINT
573
155k
    real_t scf;
574
#else
575
    int32_t sat_shift_mask = 0;
576
#endif
577
578
155k
    k = 0;
579
155k
    gindex = 0;
580
581
    /* In this case quant_to_spec is no-op and spec_data remains undefined.
582
     * Without peeking into AAC specification, there is no strong evidence if
583
     * such streams are invalid -> just calm down MSAN. */
584
155k
    if (ics->num_swb == 0)
585
0
        memset(spec_data, 0, frame_len * sizeof(real_t));
586
587
401k
    for (g = 0; g < ics->num_window_groups; g++)
588
245k
    {
589
245k
        uint16_t j = 0;
590
245k
        uint16_t gincrease = 0;
591
245k
        uint16_t win_inc = ics->swb_offset[ics->num_swb];
592
593
7.68M
        for (sfb = 0; sfb < ics->num_swb; sfb++)
594
7.44M
        {
595
7.44M
            int32_t exp, frac;
596
7.44M
            uint16_t wa = gindex + j;
597
7.44M
            int16_t scale_factor = ics->scale_factors[g][sfb];
598
599
7.44M
            width = ics->swb_offset[sfb+1] - ics->swb_offset[sfb];
600
7.44M
            if (width + 3 >= 1024) 
601
0
            {
602
                // quant_data contains 1024 uint16_t, the k iterator + 3
603
                // should never reach more 1024
604
0
                error = 17;
605
0
                continue;
606
0
            }
607
608
#ifdef FIXED_POINT
609
            scale_factor -= 100;
610
            /* IMDCT pre-scaling */
611
            if (hDecoder->object_type == LD)
612
            {
613
                scale_factor -= 24 /*9*/;
614
            } else {
615
                if (ics->window_sequence == EIGHT_SHORT_SEQUENCE)
616
                    scale_factor -= 16 /*7*/;
617
                else
618
                    scale_factor -= 28 /*10*/;
619
            }
620
            if (scale_factor > 120)
621
                scale_factor = 120;  /* => exp <= 30 */
622
#else
623
7.44M
            (void)hDecoder;
624
7.44M
#endif
625
626
            /* scale_factor for IS or PNS, has different meaning; fill with almost zeroes */
627
7.44M
            if (is_intensity(ics, g, sfb) || is_noise(ics, g, sfb))
628
6.66k
            {
629
6.66k
                scale_factor = 0;
630
6.66k
            }
631
632
            /* scale_factor must be between 0 and 255 */
633
7.44M
            exp = (scale_factor /* - 100 */) >> 2;
634
            /* frac must always be > 0 */
635
7.44M
            frac = (scale_factor /* - 100 */) & 3;
636
637
7.44M
#ifndef FIXED_POINT
638
7.44M
            scf = pow2sf_tab[exp/*+25*/] * pow2_table[frac];
639
#else
640
            if (exp > 0)
641
                sat_shift_mask = SAT_SHIFT_MASK(exp);
642
#endif
643
644
15.2M
            for (win = 0; win < ics->window_group_length[g]; win++)
645
7.79M
            {
646
47.2M
                for (bin = 0; bin < width; bin += 4)
647
39.4M
                {
648
39.4M
                    uint16_t wb = wa + bin;
649
39.4M
#ifndef FIXED_POINT
650
39.4M
                    spec_data[wb+0] = iquant(quant_data[k+0], tab, &error) * scf;
651
39.4M
                    spec_data[wb+1] = iquant(quant_data[k+1], tab, &error) * scf;
652
39.4M
                    spec_data[wb+2] = iquant(quant_data[k+2], tab, &error) * scf;
653
39.4M
                    spec_data[wb+3] = iquant(quant_data[k+3], tab, &error) * scf;
654
#else
655
                    real_t iq0 = iquant(quant_data[k+0], tab, &error);
656
                    real_t iq1 = iquant(quant_data[k+1], tab, &error);
657
                    real_t iq2 = iquant(quant_data[k+2], tab, &error);
658
                    real_t iq3 = iquant(quant_data[k+3], tab, &error);
659
660
                    if (exp == -32)
661
                    {
662
                        spec_data[wb+0] = 0;
663
                        spec_data[wb+1] = 0;
664
                        spec_data[wb+2] = 0;
665
                        spec_data[wb+3] = 0;
666
                    } else if (exp <= 0) {
667
                        spec_data[wb+0] = iq0 >> -exp;
668
                        spec_data[wb+1] = iq1 >> -exp;
669
                        spec_data[wb+2] = iq2 >> -exp;
670
                        spec_data[wb+3] = iq3 >> -exp;
671
                    } else { /* exp > 0 */
672
                        spec_data[wb+0] = SAT_SHIFT(iq0, exp, sat_shift_mask);
673
                        spec_data[wb+1] = SAT_SHIFT(iq1, exp, sat_shift_mask);
674
                        spec_data[wb+2] = SAT_SHIFT(iq2, exp, sat_shift_mask);
675
                        spec_data[wb+3] = SAT_SHIFT(iq3, exp, sat_shift_mask);
676
                    }
677
                    if (frac != 0)
678
                    {
679
                        spec_data[wb+0] = MUL_C(spec_data[wb+0],pow2_table[frac]);
680
                        spec_data[wb+1] = MUL_C(spec_data[wb+1],pow2_table[frac]);
681
                        spec_data[wb+2] = MUL_C(spec_data[wb+2],pow2_table[frac]);
682
                        spec_data[wb+3] = MUL_C(spec_data[wb+3],pow2_table[frac]);
683
                    }
684
685
//#define SCFS_PRINT
686
#ifdef SCFS_PRINT
687
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+0]);
688
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+1]);
689
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+2]);
690
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+3]);
691
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+0]);
692
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+1]);
693
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+2]);
694
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+3]);
695
#endif
696
#endif
697
698
39.4M
                    gincrease += 4;
699
39.4M
                    k += 4;
700
39.4M
                }
701
7.79M
                wa += win_inc;
702
7.79M
            }
703
7.44M
            j += width;
704
7.44M
        }
705
245k
        gindex += gincrease;
706
245k
    }
707
708
155k
    return error;
709
155k
}
710
711
static uint8_t allocate_single_channel(NeAACDecStruct *hDecoder, uint8_t channel,
712
                                       uint8_t output_channels)
713
96.9k
{
714
96.9k
    int mul = 1;
715
716
#ifdef MAIN_DEC
717
    /* MAIN object type prediction */
718
    if (hDecoder->object_type == MAIN)
719
    {
720
        /* allocate the state only when needed */
721
        if (hDecoder->pred_stat[channel] != NULL)
722
        {
723
            faad_free(hDecoder->pred_stat[channel]);
724
            hDecoder->pred_stat[channel] = NULL;
725
        }
726
727
        hDecoder->pred_stat[channel] = (pred_state*)faad_malloc(hDecoder->frameLength * sizeof(pred_state));
728
        reset_all_predictors(hDecoder->pred_stat[channel], hDecoder->frameLength);
729
    }
730
#endif
731
732
#ifdef LTP_DEC
733
    if (is_ltp_ot(hDecoder->object_type))
734
    {
735
        /* allocate the state only when needed */
736
        if (hDecoder->lt_pred_stat[channel] != NULL)
737
        {
738
            faad_free(hDecoder->lt_pred_stat[channel]);
739
            hDecoder->lt_pred_stat[channel] = NULL;
740
        }
741
742
        hDecoder->lt_pred_stat[channel] = (int16_t*)faad_malloc(hDecoder->frameLength*4 * sizeof(int16_t));
743
        memset(hDecoder->lt_pred_stat[channel], 0, hDecoder->frameLength*4 * sizeof(int16_t));
744
    }
745
#endif
746
747
96.9k
    if (hDecoder->time_out[channel] != NULL)
748
0
    {
749
0
        faad_free(hDecoder->time_out[channel]);
750
0
        hDecoder->time_out[channel] = NULL;
751
0
    }
752
753
96.9k
    {
754
96.9k
        mul = 1;
755
96.9k
#ifdef SBR_DEC
756
96.9k
        hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 0;
757
96.9k
        if ((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
758
82.0k
        {
759
            /* SBR requires 2 times as much output data */
760
82.0k
            mul = 2;
761
82.0k
            hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 1;
762
82.0k
        }
763
96.9k
#endif
764
96.9k
        hDecoder->time_out[channel] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
765
96.9k
        memset(hDecoder->time_out[channel], 0, mul*hDecoder->frameLength*sizeof(real_t));
766
96.9k
    }
767
768
96.9k
#if (defined(PS_DEC) || defined(DRM_PS))
769
96.9k
    if (output_channels == 2)
770
96.9k
    {
771
96.9k
        if (hDecoder->time_out[channel+1] != NULL)
772
0
        {
773
0
            faad_free(hDecoder->time_out[channel+1]);
774
0
            hDecoder->time_out[channel+1] = NULL;
775
0
        }
776
777
96.9k
        hDecoder->time_out[channel+1] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
778
96.9k
        memset(hDecoder->time_out[channel+1], 0, mul*hDecoder->frameLength*sizeof(real_t));
779
96.9k
    }
780
96.9k
#endif
781
782
96.9k
    if (hDecoder->fb_intermed[channel] != NULL)
783
0
    {
784
0
        faad_free(hDecoder->fb_intermed[channel]);
785
0
        hDecoder->fb_intermed[channel] = NULL;
786
0
    }
787
788
96.9k
    hDecoder->fb_intermed[channel] = (real_t*)faad_malloc(hDecoder->frameLength*sizeof(real_t));
789
96.9k
    memset(hDecoder->fb_intermed[channel], 0, hDecoder->frameLength*sizeof(real_t));
790
791
#ifdef SSR_DEC
792
    if (hDecoder->object_type == SSR)
793
    {
794
        if (hDecoder->ssr_overlap[channel] == NULL)
795
        {
796
            hDecoder->ssr_overlap[channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
797
            memset(hDecoder->ssr_overlap[channel], 0, 2*hDecoder->frameLength*sizeof(real_t));
798
        }
799
        if (hDecoder->prev_fmd[channel] == NULL)
800
        {
801
            uint16_t k;
802
            hDecoder->prev_fmd[channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
803
            for (k = 0; k < 2*hDecoder->frameLength; k++)
804
                hDecoder->prev_fmd[channel][k] = REAL_CONST(-1);
805
        }
806
    }
807
#endif
808
809
96.9k
    return 0;
810
96.9k
}
811
812
static uint8_t allocate_channel_pair(NeAACDecStruct *hDecoder,
813
                                     uint8_t channel, uint8_t paired_channel)
814
18.4k
{
815
18.4k
    int mul = 1;
816
817
#ifdef MAIN_DEC
818
    /* MAIN object type prediction */
819
    if (hDecoder->object_type == MAIN)
820
    {
821
        /* allocate the state only when needed */
822
        if (hDecoder->pred_stat[channel] == NULL)
823
        {
824
            hDecoder->pred_stat[channel] = (pred_state*)faad_malloc(hDecoder->frameLength * sizeof(pred_state));
825
            reset_all_predictors(hDecoder->pred_stat[channel], hDecoder->frameLength);
826
        }
827
        if (hDecoder->pred_stat[paired_channel] == NULL)
828
        {
829
            hDecoder->pred_stat[paired_channel] = (pred_state*)faad_malloc(hDecoder->frameLength * sizeof(pred_state));
830
            reset_all_predictors(hDecoder->pred_stat[paired_channel], hDecoder->frameLength);
831
        }
832
    }
833
#endif
834
835
#ifdef LTP_DEC
836
    if (is_ltp_ot(hDecoder->object_type))
837
    {
838
        /* allocate the state only when needed */
839
        if (hDecoder->lt_pred_stat[channel] == NULL)
840
        {
841
            hDecoder->lt_pred_stat[channel] = (int16_t*)faad_malloc(hDecoder->frameLength*4 * sizeof(int16_t));
842
            memset(hDecoder->lt_pred_stat[channel], 0, hDecoder->frameLength*4 * sizeof(int16_t));
843
        }
844
        if (hDecoder->lt_pred_stat[paired_channel] == NULL)
845
        {
846
            hDecoder->lt_pred_stat[paired_channel] = (int16_t*)faad_malloc(hDecoder->frameLength*4 * sizeof(int16_t));
847
            memset(hDecoder->lt_pred_stat[paired_channel], 0, hDecoder->frameLength*4 * sizeof(int16_t));
848
        }
849
    }
850
#endif
851
852
18.4k
    {
853
18.4k
        mul = 1;
854
18.4k
#ifdef SBR_DEC
855
18.4k
        hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 0;
856
18.4k
        if ((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
857
15.7k
        {
858
            /* SBR requires 2 times as much output data */
859
15.7k
            mul = 2;
860
15.7k
            hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 1;
861
15.7k
        }
862
18.4k
#endif
863
18.4k
    }
864
18.4k
    if (hDecoder->time_out[channel] != NULL)
865
6
    {
866
6
        faad_free(hDecoder->time_out[channel]);
867
6
        hDecoder->time_out[channel] = NULL;
868
6
    }
869
18.4k
    if (hDecoder->time_out[paired_channel] != NULL)
870
6
    {
871
6
        faad_free(hDecoder->time_out[paired_channel]);
872
6
        hDecoder->time_out[paired_channel] = NULL;
873
6
    }
874
18.4k
    hDecoder->time_out[channel] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
875
18.4k
    memset(hDecoder->time_out[channel], 0, mul*hDecoder->frameLength*sizeof(real_t));
876
18.4k
    hDecoder->time_out[paired_channel] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
877
18.4k
    memset(hDecoder->time_out[paired_channel], 0, mul*hDecoder->frameLength*sizeof(real_t));
878
879
18.4k
    if (hDecoder->fb_intermed[channel] != NULL)
880
6
    {
881
6
        faad_free(hDecoder->fb_intermed[channel]);
882
6
        hDecoder->fb_intermed[channel] = NULL;
883
6
    }
884
18.4k
    if (hDecoder->fb_intermed[paired_channel] != NULL)
885
0
    {
886
0
        faad_free(hDecoder->fb_intermed[paired_channel]);
887
0
        hDecoder->fb_intermed[paired_channel] = NULL;
888
0
    }
889
18.4k
    hDecoder->fb_intermed[channel] = (real_t*)faad_malloc(hDecoder->frameLength*sizeof(real_t));
890
18.4k
    memset(hDecoder->fb_intermed[channel], 0, hDecoder->frameLength*sizeof(real_t));
891
18.4k
    hDecoder->fb_intermed[paired_channel] = (real_t*)faad_malloc(hDecoder->frameLength*sizeof(real_t));
892
18.4k
    memset(hDecoder->fb_intermed[paired_channel], 0, hDecoder->frameLength*sizeof(real_t));
893
894
#ifdef SSR_DEC
895
    if (hDecoder->object_type == SSR)
896
    {
897
        if (hDecoder->ssr_overlap[cpe->channel] == NULL)
898
        {
899
            hDecoder->ssr_overlap[cpe->channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
900
            memset(hDecoder->ssr_overlap[cpe->channel], 0, 2*hDecoder->frameLength*sizeof(real_t));
901
        }
902
        if (hDecoder->ssr_overlap[cpe->paired_channel] == NULL)
903
        {
904
            hDecoder->ssr_overlap[cpe->paired_channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
905
            memset(hDecoder->ssr_overlap[cpe->paired_channel], 0, 2*hDecoder->frameLength*sizeof(real_t));
906
        }
907
        if (hDecoder->prev_fmd[cpe->channel] == NULL)
908
        {
909
            uint16_t k;
910
            hDecoder->prev_fmd[cpe->channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
911
            for (k = 0; k < 2*hDecoder->frameLength; k++)
912
                hDecoder->prev_fmd[cpe->channel][k] = REAL_CONST(-1);
913
        }
914
        if (hDecoder->prev_fmd[cpe->paired_channel] == NULL)
915
        {
916
            uint16_t k;
917
            hDecoder->prev_fmd[cpe->paired_channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
918
            for (k = 0; k < 2*hDecoder->frameLength; k++)
919
                hDecoder->prev_fmd[cpe->paired_channel][k] = REAL_CONST(-1);
920
        }
921
    }
922
#endif
923
924
18.4k
    return 0;
925
18.4k
}
926
927
uint8_t reconstruct_single_channel(NeAACDecStruct *hDecoder, ic_stream *ics,
928
                                   element *sce, int16_t *spec_data)
929
111k
{
930
111k
    uint8_t retval;
931
111k
    uint8_t output_channels;
932
111k
    ALIGN real_t spec_coef[1024];
933
934
#ifdef PROFILE
935
    int64_t count = faad_get_ts();
936
#endif
937
938
939
    /* always allocate 2 channels, PS can always "suddenly" turn up */
940
111k
#if ( (defined(DRM) && defined(DRM_PS)) )
941
111k
    output_channels = 2;
942
#elif defined(PS_DEC)
943
    if (hDecoder->ps_used[hDecoder->fr_ch_ele])
944
        output_channels = 2;
945
    else
946
        output_channels = 1;
947
#else
948
    output_channels = 1;
949
#endif
950
951
111k
    if (hDecoder->element_output_channels[hDecoder->fr_ch_ele] == 0)
952
96.9k
    {
953
        /* element_output_channels not set yet */
954
96.9k
        hDecoder->element_output_channels[hDecoder->fr_ch_ele] = output_channels;
955
96.9k
    } else if (hDecoder->element_output_channels[hDecoder->fr_ch_ele] != output_channels) {
956
        /* element inconsistency */
957
958
        /* this only happens if PS is actually found but not in the first frame
959
         * this means that there is only 1 bitstream element!
960
         */
961
962
        /* The simplest way to fix the accounting,
963
         * is to reallocate this and all the following channels.
964
         */
965
0
        memset(&hDecoder->element_alloced[hDecoder->fr_ch_ele], 0,
966
0
            sizeof(uint8_t) * (MAX_SYNTAX_ELEMENTS - hDecoder->fr_ch_ele));
967
968
0
        hDecoder->element_output_channels[hDecoder->fr_ch_ele] = output_channels;
969
970
        //return 21;
971
0
    }
972
973
111k
    if (hDecoder->element_alloced[hDecoder->fr_ch_ele] == 0)
974
96.9k
    {
975
96.9k
        retval = allocate_single_channel(hDecoder, sce->channel, output_channels);
976
96.9k
        if (retval > 0)
977
0
            return retval;
978
979
96.9k
        hDecoder->element_alloced[hDecoder->fr_ch_ele] = 1;
980
96.9k
    }
981
982
    /* sanity check, CVE-2018-20199, CVE-2018-20360 */
983
111k
    if(!hDecoder->time_out[sce->channel])
984
0
        return 15;
985
111k
    if(output_channels > 1 && !hDecoder->time_out[sce->channel+1])
986
0
        return 15;
987
111k
    if(!hDecoder->fb_intermed[sce->channel])
988
0
        return 15;
989
990
    /* dequantisation and scaling */
991
111k
    retval = quant_to_spec(hDecoder, ics, spec_data, spec_coef, hDecoder->frameLength);
992
111k
    if (retval > 0)
993
59
        return retval;
994
995
#ifdef PROFILE
996
    count = faad_get_ts() - count;
997
    hDecoder->requant_cycles += count;
998
#endif
999
1000
1001
    /* pns decoding */
1002
111k
    pns_decode(ics, NULL, spec_coef, NULL, hDecoder->frameLength, 0, hDecoder->object_type,
1003
111k
        &(hDecoder->__r1), &(hDecoder->__r2));
1004
1005
#ifdef MAIN_DEC
1006
    /* MAIN object type prediction */
1007
    if (hDecoder->object_type == MAIN)
1008
    {
1009
        if (!hDecoder->pred_stat[sce->channel])
1010
            return 33;
1011
1012
        /* intra channel prediction */
1013
        ic_prediction(ics, spec_coef, hDecoder->pred_stat[sce->channel], hDecoder->frameLength,
1014
            hDecoder->sf_index);
1015
1016
        /* In addition, for scalefactor bands coded by perceptual
1017
           noise substitution the predictors belonging to the
1018
           corresponding spectral coefficients are reset.
1019
        */
1020
        pns_reset_pred_state(ics, hDecoder->pred_stat[sce->channel]);
1021
    }
1022
#endif
1023
1024
#ifdef LTP_DEC
1025
    if (is_ltp_ot(hDecoder->object_type))
1026
    {
1027
#ifdef LD_DEC
1028
        if (hDecoder->object_type == LD)
1029
        {
1030
            if (ics->ltp.data_present)
1031
            {
1032
                if (ics->ltp.lag_update)
1033
                    hDecoder->ltp_lag[sce->channel] = ics->ltp.lag;
1034
            }
1035
            ics->ltp.lag = hDecoder->ltp_lag[sce->channel];
1036
        }
1037
#endif
1038
1039
        if (!hDecoder->lt_pred_stat[sce->channel])
1040
            return 34;
1041
1042
        /* long term prediction */
1043
        lt_prediction(ics, &(ics->ltp), spec_coef, hDecoder->lt_pred_stat[sce->channel], hDecoder->fb,
1044
            ics->window_shape, hDecoder->window_shape_prev[sce->channel],
1045
            hDecoder->sf_index, hDecoder->object_type, hDecoder->frameLength);
1046
    }
1047
#endif
1048
1049
    /* tns decoding */
1050
111k
    tns_decode_frame(ics, &(ics->tns), hDecoder->sf_index, hDecoder->object_type,
1051
111k
        spec_coef, hDecoder->frameLength);
1052
1053
    /* drc decoding */
1054
111k
#ifdef APPLY_DRC
1055
111k
    if (hDecoder->drc->present)
1056
0
    {
1057
0
        if (!hDecoder->drc->exclude_mask[sce->channel] || !hDecoder->drc->excluded_chns_present)
1058
0
            drc_decode(hDecoder->drc, spec_coef);
1059
0
    }
1060
111k
#endif
1061
    /* filter bank */
1062
#ifdef SSR_DEC
1063
    if (hDecoder->object_type != SSR)
1064
    {
1065
#endif
1066
111k
        ifilter_bank(hDecoder->fb, ics->window_sequence, ics->window_shape,
1067
111k
            hDecoder->window_shape_prev[sce->channel], spec_coef,
1068
111k
            hDecoder->time_out[sce->channel], hDecoder->fb_intermed[sce->channel],
1069
111k
            hDecoder->object_type, hDecoder->frameLength);
1070
#ifdef SSR_DEC
1071
    } else {
1072
        ssr_decode(&(ics->ssr), hDecoder->fb, ics->window_sequence, ics->window_shape,
1073
            hDecoder->window_shape_prev[sce->channel], spec_coef, hDecoder->time_out[sce->channel],
1074
            hDecoder->ssr_overlap[sce->channel], hDecoder->ipqf_buffer[sce->channel], hDecoder->prev_fmd[sce->channel],
1075
            hDecoder->frameLength);
1076
    }
1077
#endif
1078
1079
    /* save window shape for next frame */
1080
111k
    hDecoder->window_shape_prev[sce->channel] = ics->window_shape;
1081
1082
#ifdef LTP_DEC
1083
    if (is_ltp_ot(hDecoder->object_type))
1084
    {
1085
        lt_update_state(hDecoder->lt_pred_stat[sce->channel], hDecoder->time_out[sce->channel],
1086
            hDecoder->fb_intermed[sce->channel], hDecoder->frameLength, hDecoder->object_type);
1087
    }
1088
#endif
1089
1090
111k
#ifdef SBR_DEC
1091
111k
    if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1092
95.3k
        && hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1093
95.3k
    {
1094
95.3k
        int ele = hDecoder->fr_ch_ele;
1095
95.3k
        int ch = sce->channel;
1096
1097
        /* following case can happen when forceUpSampling == 1 */
1098
95.3k
        if (hDecoder->sbr[ele] == NULL)
1099
70.2k
        {
1100
70.2k
            hDecoder->sbr[ele] = sbrDecodeInit(hDecoder->frameLength,
1101
70.2k
                hDecoder->element_id[ele], 2*get_sample_rate(hDecoder->sf_index),
1102
70.2k
                hDecoder->downSampledSBR
1103
70.2k
#ifdef DRM
1104
70.2k
                , 0
1105
70.2k
#endif
1106
70.2k
                );
1107
70.2k
        }
1108
95.3k
        if (!hDecoder->sbr[ele])
1109
0
            return 19;
1110
1111
95.3k
        if (sce->ics1.window_sequence == EIGHT_SHORT_SEQUENCE)
1112
10.7k
            hDecoder->sbr[ele]->maxAACLine = 8*min(sce->ics1.swb_offset[max(sce->ics1.max_sfb-1, 0)], sce->ics1.swb_offset_max);
1113
84.5k
        else
1114
84.5k
            hDecoder->sbr[ele]->maxAACLine = min(sce->ics1.swb_offset[max(sce->ics1.max_sfb-1, 0)], sce->ics1.swb_offset_max);
1115
1116
        /* check if any of the PS tools is used */
1117
95.3k
#if (defined(PS_DEC) || defined(DRM_PS))
1118
95.3k
        if (hDecoder->ps_used[ele] == 0)
1119
89.4k
        {
1120
89.4k
#endif
1121
89.4k
            retval = sbrDecodeSingleFrame(hDecoder->sbr[ele], hDecoder->time_out[ch],
1122
89.4k
                hDecoder->postSeekResetFlag, hDecoder->downSampledSBR);
1123
89.4k
#if (defined(PS_DEC) || defined(DRM_PS))
1124
89.4k
        } else {
1125
5.87k
            retval = sbrDecodeSingleFramePS(hDecoder->sbr[ele], hDecoder->time_out[ch],
1126
5.87k
                hDecoder->time_out[ch+1], hDecoder->postSeekResetFlag,
1127
5.87k
                hDecoder->downSampledSBR);
1128
5.87k
        }
1129
95.3k
#endif
1130
95.3k
        if (retval > 0)
1131
13
            return retval;
1132
95.3k
    } else if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1133
3
        && !hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1134
3
    {
1135
3
        return 23;
1136
3
    }
1137
111k
#endif
1138
1139
    /* copy L to R when no PS is used */
1140
111k
#if (defined(PS_DEC) || defined(DRM_PS))
1141
111k
    if ((hDecoder->ps_used[hDecoder->fr_ch_ele] == 0) &&
1142
105k
        (hDecoder->element_output_channels[hDecoder->fr_ch_ele] == 2))
1143
105k
    {
1144
105k
        int ele = hDecoder->fr_ch_ele;
1145
105k
        int ch = sce->channel;
1146
105k
        int frame_size = (hDecoder->sbr_alloced[ele]) ? 2 : 1;
1147
105k
        frame_size *= hDecoder->frameLength*sizeof(real_t);
1148
1149
105k
        memcpy(hDecoder->time_out[ch+1], hDecoder->time_out[ch], frame_size);
1150
105k
    }
1151
111k
#endif
1152
1153
111k
    return 0;
1154
111k
}
1155
1156
uint8_t reconstruct_channel_pair(NeAACDecStruct *hDecoder, ic_stream *ics1, ic_stream *ics2,
1157
                                 element *cpe, int16_t *spec_data1, int16_t *spec_data2)
1158
22.0k
{
1159
22.0k
    uint8_t retval;
1160
22.0k
    ALIGN real_t spec_coef1[1024];
1161
22.0k
    ALIGN real_t spec_coef2[1024];
1162
1163
#ifdef PROFILE
1164
    int64_t count = faad_get_ts();
1165
#endif
1166
22.0k
    if (hDecoder->element_alloced[hDecoder->fr_ch_ele] != 2)
1167
18.4k
    {
1168
18.4k
        retval = allocate_channel_pair(hDecoder, cpe->channel, (uint8_t)cpe->paired_channel);
1169
18.4k
        if (retval > 0)
1170
0
            return retval;
1171
1172
18.4k
        hDecoder->element_alloced[hDecoder->fr_ch_ele] = 2;
1173
18.4k
    }
1174
1175
    /* sanity check, CVE-2018-20199, CVE-2018-20360 */
1176
22.0k
    if(!hDecoder->time_out[cpe->channel] || !hDecoder->time_out[cpe->paired_channel])
1177
0
        return 15;
1178
22.0k
    if(!hDecoder->fb_intermed[cpe->channel] || !hDecoder->fb_intermed[cpe->paired_channel])
1179
0
        return 15;
1180
1181
    /* dequantisation and scaling */
1182
22.0k
    retval = quant_to_spec(hDecoder, ics1, spec_data1, spec_coef1, hDecoder->frameLength);
1183
22.0k
    if (retval > 0)
1184
71
        return retval;
1185
21.9k
    retval = quant_to_spec(hDecoder, ics2, spec_data2, spec_coef2, hDecoder->frameLength);
1186
21.9k
    if (retval > 0)
1187
3
        return retval;
1188
1189
#ifdef PROFILE
1190
    count = faad_get_ts() - count;
1191
    hDecoder->requant_cycles += count;
1192
#endif
1193
1194
    /* pns decoding */
1195
21.9k
    if (ics1->ms_mask_present)
1196
7.59k
    {
1197
7.59k
        pns_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength, 1, hDecoder->object_type,
1198
7.59k
            &(hDecoder->__r1), &(hDecoder->__r2));
1199
14.3k
    } else {
1200
14.3k
        pns_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength, 0, hDecoder->object_type,
1201
14.3k
            &(hDecoder->__r1), &(hDecoder->__r2));
1202
14.3k
    }
1203
1204
    /* mid/side decoding */
1205
21.9k
    ms_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength);
1206
1207
#if 0
1208
    {
1209
        int i;
1210
        for (i = 0; i < 1024; i++)
1211
        {
1212
            //printf("%d\n", spec_coef1[i]);
1213
            printf("0x%.8X\n", spec_coef1[i]);
1214
        }
1215
        for (i = 0; i < 1024; i++)
1216
        {
1217
            //printf("%d\n", spec_coef2[i]);
1218
            printf("0x%.8X\n", spec_coef2[i]);
1219
        }
1220
    }
1221
#endif
1222
1223
    /* intensity stereo decoding */
1224
21.9k
    is_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength);
1225
1226
#if 0
1227
    {
1228
        int i;
1229
        for (i = 0; i < 1024; i++)
1230
        {
1231
            printf("%d\n", spec_coef1[i]);
1232
            //printf("0x%.8X\n", spec_coef1[i]);
1233
        }
1234
        for (i = 0; i < 1024; i++)
1235
        {
1236
            printf("%d\n", spec_coef2[i]);
1237
            //printf("0x%.8X\n", spec_coef2[i]);
1238
        }
1239
    }
1240
#endif
1241
1242
#ifdef MAIN_DEC
1243
    /* MAIN object type prediction */
1244
    if (hDecoder->object_type == MAIN)
1245
    {
1246
        if (!hDecoder->pred_stat[cpe->channel] || !hDecoder->pred_stat[cpe->paired_channel])
1247
            return 33;
1248
1249
        /* intra channel prediction */
1250
        ic_prediction(ics1, spec_coef1, hDecoder->pred_stat[cpe->channel], hDecoder->frameLength,
1251
            hDecoder->sf_index);
1252
        ic_prediction(ics2, spec_coef2, hDecoder->pred_stat[cpe->paired_channel], hDecoder->frameLength,
1253
            hDecoder->sf_index);
1254
1255
        /* In addition, for scalefactor bands coded by perceptual
1256
           noise substitution the predictors belonging to the
1257
           corresponding spectral coefficients are reset.
1258
        */
1259
        pns_reset_pred_state(ics1, hDecoder->pred_stat[cpe->channel]);
1260
        pns_reset_pred_state(ics2, hDecoder->pred_stat[cpe->paired_channel]);
1261
    }
1262
#endif
1263
1264
#ifdef LTP_DEC
1265
    if (is_ltp_ot(hDecoder->object_type))
1266
    {
1267
        ltp_info *ltp1 = &(ics1->ltp);
1268
        ltp_info *ltp2 = (cpe->common_window) ? &(ics2->ltp2) : &(ics2->ltp);
1269
#ifdef LD_DEC
1270
        if (hDecoder->object_type == LD)
1271
        {
1272
            if (ltp1->data_present)
1273
            {
1274
                if (ltp1->lag_update)
1275
                    hDecoder->ltp_lag[cpe->channel] = ltp1->lag;
1276
            }
1277
            ltp1->lag = hDecoder->ltp_lag[cpe->channel];
1278
            if (ltp2->data_present)
1279
            {
1280
                if (ltp2->lag_update)
1281
                    hDecoder->ltp_lag[cpe->paired_channel] = ltp2->lag;
1282
            }
1283
            ltp2->lag = hDecoder->ltp_lag[cpe->paired_channel];
1284
        }
1285
#endif
1286
1287
        if (!hDecoder->lt_pred_stat[cpe->channel] || !hDecoder->lt_pred_stat[cpe->paired_channel])
1288
            return 34;
1289
1290
        /* long term prediction */
1291
        lt_prediction(ics1, ltp1, spec_coef1, hDecoder->lt_pred_stat[cpe->channel], hDecoder->fb,
1292
            ics1->window_shape, hDecoder->window_shape_prev[cpe->channel],
1293
            hDecoder->sf_index, hDecoder->object_type, hDecoder->frameLength);
1294
        lt_prediction(ics2, ltp2, spec_coef2, hDecoder->lt_pred_stat[cpe->paired_channel], hDecoder->fb,
1295
            ics2->window_shape, hDecoder->window_shape_prev[cpe->paired_channel],
1296
            hDecoder->sf_index, hDecoder->object_type, hDecoder->frameLength);
1297
    }
1298
#endif
1299
1300
    /* tns decoding */
1301
21.9k
    tns_decode_frame(ics1, &(ics1->tns), hDecoder->sf_index, hDecoder->object_type,
1302
21.9k
        spec_coef1, hDecoder->frameLength);
1303
21.9k
    tns_decode_frame(ics2, &(ics2->tns), hDecoder->sf_index, hDecoder->object_type,
1304
21.9k
        spec_coef2, hDecoder->frameLength);
1305
1306
    /* drc decoding */
1307
21.9k
#if APPLY_DRC
1308
21.9k
    if (hDecoder->drc->present)
1309
0
    {
1310
0
        if (!hDecoder->drc->exclude_mask[cpe->channel] || !hDecoder->drc->excluded_chns_present)
1311
0
            drc_decode(hDecoder->drc, spec_coef1);
1312
0
        if (!hDecoder->drc->exclude_mask[cpe->paired_channel] || !hDecoder->drc->excluded_chns_present)
1313
0
            drc_decode(hDecoder->drc, spec_coef2);
1314
0
    }
1315
21.9k
#endif
1316
    /* filter bank */
1317
#ifdef SSR_DEC
1318
    if (hDecoder->object_type != SSR)
1319
    {
1320
#endif
1321
21.9k
        ifilter_bank(hDecoder->fb, ics1->window_sequence, ics1->window_shape,
1322
21.9k
            hDecoder->window_shape_prev[cpe->channel], spec_coef1,
1323
21.9k
            hDecoder->time_out[cpe->channel], hDecoder->fb_intermed[cpe->channel],
1324
21.9k
            hDecoder->object_type, hDecoder->frameLength);
1325
21.9k
        ifilter_bank(hDecoder->fb, ics2->window_sequence, ics2->window_shape,
1326
21.9k
            hDecoder->window_shape_prev[cpe->paired_channel], spec_coef2,
1327
21.9k
            hDecoder->time_out[cpe->paired_channel], hDecoder->fb_intermed[cpe->paired_channel],
1328
21.9k
            hDecoder->object_type, hDecoder->frameLength);
1329
#ifdef SSR_DEC
1330
    } else {
1331
        ssr_decode(&(ics1->ssr), hDecoder->fb, ics1->window_sequence, ics1->window_shape,
1332
            hDecoder->window_shape_prev[cpe->channel], spec_coef1, hDecoder->time_out[cpe->channel],
1333
            hDecoder->ssr_overlap[cpe->channel], hDecoder->ipqf_buffer[cpe->channel],
1334
            hDecoder->prev_fmd[cpe->channel], hDecoder->frameLength);
1335
        ssr_decode(&(ics2->ssr), hDecoder->fb, ics2->window_sequence, ics2->window_shape,
1336
            hDecoder->window_shape_prev[cpe->paired_channel], spec_coef2, hDecoder->time_out[cpe->paired_channel],
1337
            hDecoder->ssr_overlap[cpe->paired_channel], hDecoder->ipqf_buffer[cpe->paired_channel],
1338
            hDecoder->prev_fmd[cpe->paired_channel], hDecoder->frameLength);
1339
    }
1340
#endif
1341
1342
    /* save window shape for next frame */
1343
21.9k
    hDecoder->window_shape_prev[cpe->channel] = ics1->window_shape;
1344
21.9k
    hDecoder->window_shape_prev[cpe->paired_channel] = ics2->window_shape;
1345
1346
#ifdef LTP_DEC
1347
    if (is_ltp_ot(hDecoder->object_type))
1348
    {
1349
        lt_update_state(hDecoder->lt_pred_stat[cpe->channel], hDecoder->time_out[cpe->channel],
1350
            hDecoder->fb_intermed[cpe->channel], hDecoder->frameLength, hDecoder->object_type);
1351
        lt_update_state(hDecoder->lt_pred_stat[cpe->paired_channel], hDecoder->time_out[cpe->paired_channel],
1352
            hDecoder->fb_intermed[cpe->paired_channel], hDecoder->frameLength, hDecoder->object_type);
1353
    }
1354
#endif
1355
1356
21.9k
#ifdef SBR_DEC
1357
21.9k
    if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1358
18.9k
        && hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1359
18.9k
    {
1360
18.9k
        int ele = hDecoder->fr_ch_ele;
1361
18.9k
        int ch0 = cpe->channel;
1362
18.9k
        int ch1 = cpe->paired_channel;
1363
1364
        /* following case can happen when forceUpSampling == 1 */
1365
18.9k
        if (hDecoder->sbr[ele] == NULL)
1366
4.23k
        {
1367
4.23k
            hDecoder->sbr[ele] = sbrDecodeInit(hDecoder->frameLength,
1368
4.23k
                hDecoder->element_id[ele], 2*get_sample_rate(hDecoder->sf_index),
1369
4.23k
                hDecoder->downSampledSBR
1370
4.23k
#ifdef DRM
1371
4.23k
                , 0
1372
4.23k
#endif
1373
4.23k
                );
1374
4.23k
        }
1375
18.9k
        if (!hDecoder->sbr[ele])
1376
0
            return 19;
1377
1378
18.9k
        if (cpe->ics1.window_sequence == EIGHT_SHORT_SEQUENCE)
1379
772
            hDecoder->sbr[ele]->maxAACLine = 8*min(cpe->ics1.swb_offset[max(cpe->ics1.max_sfb-1, 0)], cpe->ics1.swb_offset_max);
1380
18.1k
        else
1381
18.1k
            hDecoder->sbr[ele]->maxAACLine = min(cpe->ics1.swb_offset[max(cpe->ics1.max_sfb-1, 0)], cpe->ics1.swb_offset_max);
1382
1383
18.9k
        retval = sbrDecodeCoupleFrame(hDecoder->sbr[ele],
1384
18.9k
            hDecoder->time_out[ch0], hDecoder->time_out[ch1],
1385
18.9k
            hDecoder->postSeekResetFlag, hDecoder->downSampledSBR);
1386
18.9k
        if (retval > 0)
1387
6
            return retval;
1388
18.9k
    } else if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1389
1
        && !hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1390
1
    {
1391
1
        return 23;
1392
1
    }
1393
21.9k
#endif
1394
1395
21.9k
    return 0;
1396
21.9k
}