Coverage Report

Created: 2026-10-17 06:34

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/proc/self/cwd/libfaad/specrec.c
Line
Count
Source
1
/*
2
** FAAD2 - Freeware Advanced Audio (AAC) Decoder including SBR decoding
3
** Copyright (C) 2003-2005 M. Bakker, Nero AG, http://www.nero.com
4
**
5
** This program is free software; you can redistribute it and/or modify
6
** it under the terms of the GNU General Public License as published by
7
** the Free Software Foundation; either version 2 of the License, or
8
** (at your option) any later version.
9
**
10
** This program is distributed in the hope that it will be useful,
11
** but WITHOUT ANY WARRANTY; without even the implied warranty of
12
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
13
** GNU General Public License for more details.
14
**
15
** You should have received a copy of the GNU General Public License
16
** along with this program; if not, write to the Free Software
17
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
18
**
19
** Any non-GPL usage of this software or parts of this software is strictly
20
** forbidden.
21
**
22
** The "appropriate copyright message" mentioned in section 2c of the GPLv2
23
** must read: "Code from FAAD2 is copyright (c) Nero AG, www.nero.com"
24
**
25
** Commercial non-GPL licensing of this software is possible.
26
** For more info contact Nero AG through Mpeg4AAClicense@nero.com.
27
**
28
** $Id: specrec.c,v 1.63 2010/06/04 20:47:56 menno Exp $
29
**/
30
31
/*
32
  Spectral reconstruction:
33
   - grouping/sectioning
34
   - inverse quantization
35
   - applying scalefactors
36
*/
37
38
#include "common.h"
39
#include "structs.h"
40
41
#include <stdlib.h>
42
#include "specrec.h"
43
#include "filtbank.h"
44
#include "syntax.h"
45
#include "iq_table.h"
46
#include "ms.h"
47
#include "is.h"
48
#include "pns.h"
49
#include "tns.h"
50
#include "drc.h"
51
#include "lt_predict.h"
52
#include "ic_predict.h"
53
#ifdef SSR_DEC
54
#include "ssr.h"
55
#include "ssr_fb.h"
56
#endif
57
58
59
/* static function declarations */
60
static uint8_t quant_to_spec(NeAACDecStruct *hDecoder,
61
                             ic_stream *ics, int16_t *quant_data,
62
                             real_t *spec_data, uint16_t frame_len);
63
64
65
#ifdef LD_DEC
66
ALIGN static const uint8_t num_swb_512_window[] =
67
{
68
    0, 0, 0, 36, 36, 37, 31, 31, 0, 0, 0, 0
69
};
70
ALIGN static const uint8_t num_swb_480_window[] =
71
{
72
    0, 0, 0, 35, 35, 37, 30, 30, 0, 0, 0, 0
73
};
74
#endif
75
76
ALIGN static const uint8_t num_swb_960_window[] =
77
{
78
    40, 40, 45, 49, 49, 49, 46, 46, 42, 42, 42, 40
79
};
80
81
ALIGN static const uint8_t num_swb_1024_window[] =
82
{
83
    41, 41, 47, 49, 49, 51, 47, 47, 43, 43, 43, 40
84
};
85
86
ALIGN static const uint8_t num_swb_128_window[] =
87
{
88
    12, 12, 12, 14, 14, 14, 15, 15, 15, 15, 15, 15
89
};
90
91
ALIGN static const uint16_t swb_offset_1024_96[] =
92
{
93
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56,
94
    64, 72, 80, 88, 96, 108, 120, 132, 144, 156, 172, 188, 212, 240,
95
    276, 320, 384, 448, 512, 576, 640, 704, 768, 832, 896, 960, 1024
96
};
97
98
ALIGN static const uint16_t swb_offset_128_96[] =
99
{
100
    0, 4, 8, 12, 16, 20, 24, 32, 40, 48, 64, 92, 128
101
};
102
103
ALIGN static const uint16_t swb_offset_1024_64[] =
104
{
105
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56,
106
    64, 72, 80, 88, 100, 112, 124, 140, 156, 172, 192, 216, 240, 268,
107
    304, 344, 384, 424, 464, 504, 544, 584, 624, 664, 704, 744, 784, 824,
108
    864, 904, 944, 984, 1024
109
};
110
111
ALIGN static const uint16_t swb_offset_128_64[] =
112
{
113
    0, 4, 8, 12, 16, 20, 24, 32, 40, 48, 64, 92, 128
114
};
115
116
ALIGN static const uint16_t swb_offset_1024_48[] =
117
{
118
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 48, 56, 64, 72,
119
    80, 88, 96, 108, 120, 132, 144, 160, 176, 196, 216, 240, 264, 292,
120
    320, 352, 384, 416, 448, 480, 512, 544, 576, 608, 640, 672, 704, 736,
121
    768, 800, 832, 864, 896, 928, 1024
122
};
123
124
#ifdef LD_DEC
125
ALIGN static const uint16_t swb_offset_512_48[] =
126
{
127
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 60, 68, 76, 84,
128
    92, 100, 112, 124, 136, 148, 164, 184, 208, 236, 268, 300, 332, 364, 396,
129
    428, 460, 512
130
};
131
132
ALIGN static const uint16_t swb_offset_480_48[] =
133
{
134
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 64, 72 ,80 ,88,
135
    96, 108, 120, 132, 144, 156, 172, 188, 212, 240, 272, 304, 336, 368, 400,
136
    432, 480
137
};
138
#endif
139
140
ALIGN static const uint16_t swb_offset_128_48[] =
141
{
142
    0, 4, 8, 12, 16, 20, 28, 36, 44, 56, 68, 80, 96, 112, 128
143
};
144
145
ALIGN static const uint16_t swb_offset_1024_32[] =
146
{
147
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 48, 56, 64, 72,
148
    80, 88, 96, 108, 120, 132, 144, 160, 176, 196, 216, 240, 264, 292,
149
    320, 352, 384, 416, 448, 480, 512, 544, 576, 608, 640, 672, 704, 736,
150
    768, 800, 832, 864, 896, 928, 960, 992, 1024
151
};
152
153
#ifdef LD_DEC
154
ALIGN static const uint16_t swb_offset_512_32[] =
155
{
156
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 64, 72, 80,
157
    88, 96, 108, 120, 132, 144, 160, 176, 192, 212, 236, 260, 288, 320, 352,
158
    384, 416, 448, 480, 512
159
};
160
161
ALIGN static const uint16_t swb_offset_480_32[] =
162
{
163
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 48, 52, 56, 60, 64, 72, 80,
164
    88, 96, 104, 112, 124, 136, 148, 164, 180, 200, 224, 256, 288, 320, 352,
165
    384, 416, 448, 480
166
};
167
#endif
168
169
ALIGN static const uint16_t swb_offset_1024_24[] =
170
{
171
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 52, 60, 68,
172
    76, 84, 92, 100, 108, 116, 124, 136, 148, 160, 172, 188, 204, 220,
173
    240, 260, 284, 308, 336, 364, 396, 432, 468, 508, 552, 600, 652, 704,
174
    768, 832, 896, 960, 1024
175
};
176
177
#ifdef LD_DEC
178
ALIGN static const uint16_t swb_offset_512_24[] =
179
{
180
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 52, 60, 68,
181
    80, 92, 104, 120, 140, 164, 192, 224, 256, 288, 320, 352, 384, 416,
182
    448, 480, 512
183
};
184
185
ALIGN static const uint16_t swb_offset_480_24[] =
186
{
187
    0, 4, 8, 12, 16, 20, 24, 28, 32, 36, 40, 44, 52, 60, 68, 80, 92, 104, 120,
188
    140, 164, 192, 224, 256, 288, 320, 352, 384, 416, 448, 480
189
};
190
#endif
191
192
ALIGN static const uint16_t swb_offset_128_24[] =
193
{
194
    0, 4, 8, 12, 16, 20, 24, 28, 36, 44, 52, 64, 76, 92, 108, 128
195
};
196
197
ALIGN static const uint16_t swb_offset_1024_16[] =
198
{
199
    0, 8, 16, 24, 32, 40, 48, 56, 64, 72, 80, 88, 100, 112, 124,
200
    136, 148, 160, 172, 184, 196, 212, 228, 244, 260, 280, 300, 320, 344,
201
    368, 396, 424, 456, 492, 532, 572, 616, 664, 716, 772, 832, 896, 960, 1024
202
};
203
204
ALIGN static const uint16_t swb_offset_128_16[] =
205
{
206
    0, 4, 8, 12, 16, 20, 24, 28, 32, 40, 48, 60, 72, 88, 108, 128
207
};
208
209
ALIGN static const uint16_t swb_offset_1024_8[] =
210
{
211
    0, 12, 24, 36, 48, 60, 72, 84, 96, 108, 120, 132, 144, 156, 172,
212
    188, 204, 220, 236, 252, 268, 288, 308, 328, 348, 372, 396, 420, 448,
213
    476, 508, 544, 580, 620, 664, 712, 764, 820, 880, 944, 1024
214
};
215
216
ALIGN static const uint16_t swb_offset_128_8[] =
217
{
218
    0, 4, 8, 12, 16, 20, 24, 28, 36, 44, 52, 60, 72, 88, 108, 128
219
};
220
221
ALIGN static const uint16_t *swb_offset_1024_window[] =
222
{
223
    swb_offset_1024_96,      /* 96000 */
224
    swb_offset_1024_96,      /* 88200 */
225
    swb_offset_1024_64,      /* 64000 */
226
    swb_offset_1024_48,      /* 48000 */
227
    swb_offset_1024_48,      /* 44100 */
228
    swb_offset_1024_32,      /* 32000 */
229
    swb_offset_1024_24,      /* 24000 */
230
    swb_offset_1024_24,      /* 22050 */
231
    swb_offset_1024_16,      /* 16000 */
232
    swb_offset_1024_16,      /* 12000 */
233
    swb_offset_1024_16,      /* 11025 */
234
    swb_offset_1024_8        /* 8000  */
235
};
236
237
#ifdef LD_DEC
238
ALIGN static const uint16_t *swb_offset_512_window[] =
239
{
240
    0,                       /* 96000 */
241
    0,                       /* 88200 */
242
    0,                       /* 64000 */
243
    swb_offset_512_48,       /* 48000 */
244
    swb_offset_512_48,       /* 44100 */
245
    swb_offset_512_32,       /* 32000 */
246
    swb_offset_512_24,       /* 24000 */
247
    swb_offset_512_24,       /* 22050 */
248
    0,                       /* 16000 */
249
    0,                       /* 12000 */
250
    0,                       /* 11025 */
251
    0                        /* 8000  */
252
};
253
254
ALIGN static const uint16_t *swb_offset_480_window[] =
255
{
256
    0,                       /* 96000 */
257
    0,                       /* 88200 */
258
    0,                       /* 64000 */
259
    swb_offset_480_48,       /* 48000 */
260
    swb_offset_480_48,       /* 44100 */
261
    swb_offset_480_32,       /* 32000 */
262
    swb_offset_480_24,       /* 24000 */
263
    swb_offset_480_24,       /* 22050 */
264
    0,                       /* 16000 */
265
    0,                       /* 12000 */
266
    0,                       /* 11025 */
267
    0                        /* 8000  */
268
};
269
#endif
270
271
ALIGN static const  uint16_t *swb_offset_128_window[] =
272
{
273
    swb_offset_128_96,       /* 96000 */
274
    swb_offset_128_96,       /* 88200 */
275
    swb_offset_128_64,       /* 64000 */
276
    swb_offset_128_48,       /* 48000 */
277
    swb_offset_128_48,       /* 44100 */
278
    swb_offset_128_48,       /* 32000 */
279
    swb_offset_128_24,       /* 24000 */
280
    swb_offset_128_24,       /* 22050 */
281
    swb_offset_128_16,       /* 16000 */
282
    swb_offset_128_16,       /* 12000 */
283
    swb_offset_128_16,       /* 11025 */
284
    swb_offset_128_8         /* 8000  */
285
};
286
287
108k
#define bit_set(A, B) ((A) & (1<<(B)))
288
289
/* 4.5.2.3.4 */
290
/*
291
  - determine the number of windows in a window_sequence named num_windows
292
  - determine the number of window_groups named num_window_groups
293
  - determine the number of windows in each group named window_group_length[g]
294
  - determine the total number of scalefactor window bands named num_swb for
295
    the actual window type
296
  - determine swb_offset[swb], the offset of the first coefficient in
297
    scalefactor window band named swb of the window actually used
298
  - determine sect_sfb_offset[g][section],the offset of the first coefficient
299
    in section named section. This offset depends on window_sequence and
300
    scale_factor_grouping and is needed to decode the spectral_data().
301
*/
302
uint8_t window_grouping_info(NeAACDecStruct *hDecoder, ic_stream *ics)
303
160k
{
304
160k
    uint8_t i, g;
305
306
160k
    uint8_t sf_index = hDecoder->sf_index;
307
308
160k
    if (sf_index >= 12)
309
4
        return 32;
310
311
160k
    switch (ics->window_sequence) {
312
133k
    case ONLY_LONG_SEQUENCE:
313
139k
    case LONG_START_SEQUENCE:
314
144k
    case LONG_STOP_SEQUENCE:
315
144k
        ics->num_windows = 1;
316
144k
        ics->num_window_groups = 1;
317
144k
        ics->window_group_length[ics->num_window_groups-1] = 1;
318
#ifdef LD_DEC
319
        if (hDecoder->object_type == LD)
320
        {
321
            if (hDecoder->frameLength == 512)
322
                ics->num_swb = num_swb_512_window[sf_index];
323
            else /* if (hDecoder->frameLength == 480) */
324
                ics->num_swb = num_swb_480_window[sf_index];
325
        } else {
326
#endif
327
144k
            if (hDecoder->frameLength == 1024)
328
118k
                ics->num_swb = num_swb_1024_window[sf_index];
329
26.1k
            else /* if (hDecoder->frameLength == 960) */
330
26.1k
                ics->num_swb = num_swb_960_window[sf_index];
331
#ifdef LD_DEC
332
        }
333
#endif
334
335
144k
        if (ics->max_sfb > ics->num_swb)
336
57
        {
337
57
            return 32;
338
57
        }
339
340
        /* preparation of sect_sfb_offset for long blocks */
341
        /* also copy the last value! */
342
#ifdef LD_DEC
343
        if (hDecoder->object_type == LD)
344
        {
345
            if (hDecoder->frameLength == 512)
346
            {
347
                for (i = 0; i < ics->num_swb; i++)
348
                {
349
                    ics->sect_sfb_offset[0][i] = swb_offset_512_window[sf_index][i];
350
                    ics->swb_offset[i] = swb_offset_512_window[sf_index][i];
351
                }
352
            } else /* if (hDecoder->frameLength == 480) */ {
353
                for (i = 0; i < ics->num_swb; i++)
354
                {
355
                    ics->sect_sfb_offset[0][i] = swb_offset_480_window[sf_index][i];
356
                    ics->swb_offset[i] = swb_offset_480_window[sf_index][i];
357
                }
358
            }
359
            ics->sect_sfb_offset[0][ics->num_swb] = hDecoder->frameLength;
360
            ics->swb_offset[ics->num_swb] = hDecoder->frameLength;
361
            ics->swb_offset_max = hDecoder->frameLength;
362
        } else {
363
#endif
364
6.33M
            for (i = 0; i < ics->num_swb; i++)
365
6.19M
            {
366
6.19M
                ics->sect_sfb_offset[0][i] = swb_offset_1024_window[sf_index][i];
367
6.19M
                ics->swb_offset[i] = swb_offset_1024_window[sf_index][i];
368
6.19M
            }
369
144k
            ics->sect_sfb_offset[0][ics->num_swb] = hDecoder->frameLength;
370
144k
            ics->swb_offset[ics->num_swb] = hDecoder->frameLength;
371
144k
            ics->swb_offset_max = hDecoder->frameLength;
372
#ifdef LD_DEC
373
        }
374
#endif
375
144k
        if (ics->num_swb > 0 && ics->swb_offset[ics->num_swb] < ics->swb_offset[ics->num_swb-1]) {
376
0
            return 32;
377
0
        }
378
144k
        return 0;
379
15.4k
    case EIGHT_SHORT_SEQUENCE:
380
15.4k
        ics->num_windows = 8;
381
15.4k
        ics->num_window_groups = 1;
382
15.4k
        ics->window_group_length[ics->num_window_groups-1] = 1;
383
15.4k
        ics->num_swb = num_swb_128_window[sf_index];
384
385
15.4k
        if (ics->max_sfb > ics->num_swb)
386
5
        {
387
5
            return 32;
388
5
        }
389
390
232k
        for (i = 0; i < ics->num_swb; i++)
391
216k
            ics->swb_offset[i] = swb_offset_128_window[sf_index][i];
392
15.4k
        ics->swb_offset[ics->num_swb] = hDecoder->frameLength/8;
393
15.4k
        ics->swb_offset_max = hDecoder->frameLength/8;
394
395
123k
        for (i = 0; i < ics->num_windows-1; i++) {
396
108k
            if (bit_set(ics->scale_factor_grouping, 6-i) == 0)
397
84.8k
            {
398
84.8k
                ics->num_window_groups += 1;
399
84.8k
                ics->window_group_length[ics->num_window_groups-1] = 1;
400
84.8k
            } else {
401
23.2k
                ics->window_group_length[ics->num_window_groups-1] += 1;
402
23.2k
            }
403
108k
        }
404
405
        /* preparation of sect_sfb_offset for short blocks */
406
115k
        for (g = 0; g < ics->num_window_groups; g++)
407
100k
        {
408
100k
            uint16_t width;
409
100k
            uint8_t sect_sfb = 0;
410
100k
            uint16_t offset = 0;
411
412
1.50M
            for (i = 0; i < ics->num_swb; i++)
413
1.40M
            {
414
1.40M
                if (i+1 == ics->num_swb)
415
100k
                {
416
100k
                    width = (hDecoder->frameLength/8) - swb_offset_128_window[sf_index][i];
417
1.30M
                } else {
418
1.30M
                    width = swb_offset_128_window[sf_index][i+1] -
419
1.30M
                        swb_offset_128_window[sf_index][i];
420
1.30M
                }
421
1.40M
                width *= ics->window_group_length[g];
422
1.40M
                ics->sect_sfb_offset[g][sect_sfb++] = offset;
423
1.40M
                offset += width;
424
1.40M
            }
425
100k
            ics->sect_sfb_offset[g][sect_sfb] = offset;
426
100k
        }
427
15.4k
        return 0;
428
0
    default:
429
0
        return 32;
430
160k
    }
431
160k
}
432
433
/* iquant() * output = sign(input)*abs(input)^(4/3) */
434
static INLINE real_t iquant(int16_t q, const real_t *tab, uint8_t *error)
435
174M
{
436
#ifdef FIXED_POINT
437
/* For FIXED_POINT the iq_table is prescaled by 3 bits (iq_table[]/8) */
438
/* BIG_IQ_TABLE allows you to use the full 8192 value table, if this is not
439
 * defined a 1026 value table and interpolation will be used
440
 */
441
#ifndef BIG_IQ_TABLE
442
    static const real_t errcorr[] = {
443
        REAL_CONST(0), REAL_CONST(1.0/8.0), REAL_CONST(2.0/8.0), REAL_CONST(3.0/8.0),
444
        REAL_CONST(4.0/8.0),  REAL_CONST(5.0/8.0), REAL_CONST(6.0/8.0), REAL_CONST(7.0/8.0),
445
        REAL_CONST(0)
446
    };
447
    real_t x1, x2;
448
#endif
449
    int16_t sgn = 1;
450
    /* compute the magnitude in int: -q is evaluated as int and so does not
451
       wrap for q == -32768 the way an int16_t negation would, which keeps the
452
       comparison against IQ_TABLE_SIZE in range like the floating-point path */
453
    int aq = q;
454
455
    if (aq < 0)
456
    {
457
        aq = -aq;
458
        sgn = -1;
459
    }
460
461
    if (aq < IQ_TABLE_SIZE)
462
    {
463
//#define IQUANT_PRINT
464
#ifdef IQUANT_PRINT
465
        //printf("0x%.8X\n", sgn * tab[aq]);
466
        printf("%d\n", sgn * tab[aq]);
467
#endif
468
        return sgn * tab[aq];
469
    }
470
471
#ifndef BIG_IQ_TABLE
472
    if (aq >= 8192)
473
    {
474
        *error = 17;
475
        return 0;
476
    }
477
478
    /* linear interpolation */
479
    x1 = tab[aq>>3];
480
    x2 = tab[(aq>>3) + 1];
481
    return sgn * 16 * (MUL_R(errcorr[aq&7],(x2-x1)) + x1);
482
#else
483
    *error = 17;
484
    return 0;
485
#endif
486
487
#else
488
174M
    if (q < 0)
489
96.0k
    {
490
        /* tab contains a value for all possible q [0,8192] */
491
96.0k
        if (-q < IQ_TABLE_SIZE)
492
95.2k
            return -tab[-q];
493
494
835
        *error = 17;
495
835
        return 0;
496
174M
    } else {
497
        /* tab contains a value for all possible q [0,8192] */
498
174M
        if (q < IQ_TABLE_SIZE)
499
174M
            return tab[q];
500
501
790
        *error = 17;
502
790
        return 0;
503
174M
    }
504
174M
#endif
505
174M
}
506
507
#ifndef FIXED_POINT
508
ALIGN static const real_t pow2sf_tab[] = {
509
    2.9802322387695313E-008, 5.9604644775390625E-008, 1.1920928955078125E-007,
510
    2.384185791015625E-007, 4.76837158203125E-007, 9.5367431640625E-007,
511
    1.9073486328125E-006, 3.814697265625E-006, 7.62939453125E-006,
512
    1.52587890625E-005, 3.0517578125E-005, 6.103515625E-005,
513
    0.0001220703125, 0.000244140625, 0.00048828125,
514
    0.0009765625, 0.001953125, 0.00390625,
515
    0.0078125, 0.015625, 0.03125,
516
    0.0625, 0.125, 0.25,
517
    0.5, 1.0, 2.0,
518
    4.0, 8.0, 16.0, 32.0,
519
    64.0, 128.0, 256.0,
520
    512.0, 1024.0, 2048.0,
521
    4096.0, 8192.0, 16384.0,
522
    32768.0, 65536.0, 131072.0,
523
    262144.0, 524288.0, 1048576.0,
524
    2097152.0, 4194304.0, 8388608.0,
525
    16777216.0, 33554432.0, 67108864.0,
526
    134217728.0, 268435456.0, 536870912.0,
527
    1073741824.0, 2147483648.0, 4294967296.0,
528
    8589934592.0, 17179869184.0, 34359738368.0,
529
    68719476736.0, 137438953472.0, 274877906944.0
530
};
531
#endif
532
533
/* quant_to_spec: perform dequantisation and scaling
534
 * and in case of short block it also does the deinterleaving
535
 */
536
/*
537
  For ONLY_LONG_SEQUENCE windows (num_window_groups = 1,
538
  window_group_length[0] = 1) the spectral data is in ascending spectral
539
  order.
540
  For the EIGHT_SHORT_SEQUENCE window, the spectral order depends on the
541
  grouping in the following manner:
542
  - Groups are ordered sequentially
543
  - Within a group, a scalefactor band consists of the spectral data of all
544
    grouped SHORT_WINDOWs for the associated scalefactor window band. To
545
    clarify via example, the length of a group is in the range of one to eight
546
    SHORT_WINDOWs.
547
  - If there are eight groups each with length one (num_window_groups = 8,
548
    window_group_length[0..7] = 1), the result is a sequence of eight spectra,
549
    each in ascending spectral order.
550
  - If there is only one group with length eight (num_window_groups = 1,
551
    window_group_length[0] = 8), the result is that spectral data of all eight
552
    SHORT_WINDOWs is interleaved by scalefactor window bands.
553
  - Within a scalefactor window band, the coefficients are in ascending
554
    spectral order.
555
*/
556
static uint8_t quant_to_spec(NeAACDecStruct *hDecoder,
557
                             ic_stream *ics, int16_t *quant_data,
558
                             real_t *spec_data, uint16_t frame_len)
559
172k
{
560
172k
    ALIGN static const real_t pow2_table[] =
561
172k
    {
562
172k
        COEF_CONST(1.0),
563
172k
        COEF_CONST(1.1892071150027210667174999705605), /* 2^0.25 */
564
172k
        COEF_CONST(1.4142135623730950488016887242097), /* 2^0.5 */
565
172k
        COEF_CONST(1.6817928305074290860622509524664) /* 2^0.75 */
566
172k
    };
567
172k
    const real_t *tab = iq_table;
568
569
172k
    uint8_t g, sfb, win;
570
172k
    uint16_t width, bin, k, gindex;
571
172k
    uint8_t error = 0; /* Init error flag */
572
172k
#ifndef FIXED_POINT
573
172k
    real_t scf;
574
#else
575
    int32_t sat_shift_mask = 0;
576
#endif
577
578
172k
    k = 0;
579
172k
    gindex = 0;
580
581
    /* In this case quant_to_spec is no-op and spec_data remains undefined.
582
     * Without peeking into AAC specification, there is no strong evidence if
583
     * such streams are invalid -> just calm down MSAN. */
584
172k
    if (ics->num_swb == 0)
585
0
        memset(spec_data, 0, frame_len * sizeof(real_t));
586
587
435k
    for (g = 0; g < ics->num_window_groups; g++)
588
262k
    {
589
262k
        uint16_t j = 0;
590
262k
        uint16_t gincrease = 0;
591
262k
        uint16_t win_inc = ics->swb_offset[ics->num_swb];
592
593
8.40M
        for (sfb = 0; sfb < ics->num_swb; sfb++)
594
8.14M
        {
595
8.14M
            int32_t exp, frac;
596
8.14M
            uint16_t wa = gindex + j;
597
8.14M
            int16_t scale_factor = ics->scale_factors[g][sfb];
598
599
8.14M
            width = ics->swb_offset[sfb+1] - ics->swb_offset[sfb];
600
8.14M
            if (width + 3 >= 1024) 
601
0
            {
602
                // quant_data contains 1024 uint16_t, the k iterator + 3
603
                // should never reach more 1024
604
0
                error = 17;
605
0
                continue;
606
0
            }
607
608
#ifdef FIXED_POINT
609
            scale_factor -= 100;
610
            /* IMDCT pre-scaling */
611
            if (hDecoder->object_type == LD)
612
            {
613
                scale_factor -= 24 /*9*/;
614
            } else {
615
                if (ics->window_sequence == EIGHT_SHORT_SEQUENCE)
616
                    scale_factor -= 16 /*7*/;
617
                else
618
                    scale_factor -= 28 /*10*/;
619
            }
620
            if (scale_factor > 120)
621
                scale_factor = 120;  /* => exp <= 30 */
622
#else
623
8.14M
            (void)hDecoder;
624
8.14M
#endif
625
626
            /* scale_factor for IS or PNS, has different meaning; fill with almost zeroes */
627
8.14M
            if (is_intensity(ics, g, sfb) || is_noise(ics, g, sfb))
628
5.57k
            {
629
5.57k
                scale_factor = 0;
630
5.57k
            }
631
632
            /* scale_factor must be between 0 and 255 */
633
8.14M
            exp = (scale_factor /* - 100 */) >> 2;
634
            /* frac must always be > 0 */
635
8.14M
            frac = (scale_factor /* - 100 */) & 3;
636
637
8.14M
#ifndef FIXED_POINT
638
8.14M
            scf = pow2sf_tab[exp/*+25*/] * pow2_table[frac];
639
#else
640
            if (exp > 0)
641
                sat_shift_mask = SAT_SHIFT_MASK(exp);
642
#endif
643
644
16.6M
            for (win = 0; win < ics->window_group_length[g]; win++)
645
8.50M
            {
646
52.1M
                for (bin = 0; bin < width; bin += 4)
647
43.6M
                {
648
43.6M
                    uint16_t wb = wa + bin;
649
43.6M
#ifndef FIXED_POINT
650
43.6M
                    spec_data[wb+0] = iquant(quant_data[k+0], tab, &error) * scf;
651
43.6M
                    spec_data[wb+1] = iquant(quant_data[k+1], tab, &error) * scf;
652
43.6M
                    spec_data[wb+2] = iquant(quant_data[k+2], tab, &error) * scf;
653
43.6M
                    spec_data[wb+3] = iquant(quant_data[k+3], tab, &error) * scf;
654
#else
655
                    real_t iq0 = iquant(quant_data[k+0], tab, &error);
656
                    real_t iq1 = iquant(quant_data[k+1], tab, &error);
657
                    real_t iq2 = iquant(quant_data[k+2], tab, &error);
658
                    real_t iq3 = iquant(quant_data[k+3], tab, &error);
659
660
                    if (exp == -32)
661
                    {
662
                        spec_data[wb+0] = 0;
663
                        spec_data[wb+1] = 0;
664
                        spec_data[wb+2] = 0;
665
                        spec_data[wb+3] = 0;
666
                    } else if (exp <= 0) {
667
                        spec_data[wb+0] = iq0 >> -exp;
668
                        spec_data[wb+1] = iq1 >> -exp;
669
                        spec_data[wb+2] = iq2 >> -exp;
670
                        spec_data[wb+3] = iq3 >> -exp;
671
                    } else { /* exp > 0 */
672
                        spec_data[wb+0] = SAT_SHIFT(iq0, exp, sat_shift_mask);
673
                        spec_data[wb+1] = SAT_SHIFT(iq1, exp, sat_shift_mask);
674
                        spec_data[wb+2] = SAT_SHIFT(iq2, exp, sat_shift_mask);
675
                        spec_data[wb+3] = SAT_SHIFT(iq3, exp, sat_shift_mask);
676
                    }
677
                    if (frac != 0)
678
                    {
679
                        spec_data[wb+0] = MUL_C(spec_data[wb+0],pow2_table[frac]);
680
                        spec_data[wb+1] = MUL_C(spec_data[wb+1],pow2_table[frac]);
681
                        spec_data[wb+2] = MUL_C(spec_data[wb+2],pow2_table[frac]);
682
                        spec_data[wb+3] = MUL_C(spec_data[wb+3],pow2_table[frac]);
683
                    }
684
685
//#define SCFS_PRINT
686
#ifdef SCFS_PRINT
687
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+0]);
688
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+1]);
689
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+2]);
690
                    printf("%d\n", spec_data[gindex+(win*win_inc)+j+bin+3]);
691
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+0]);
692
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+1]);
693
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+2]);
694
                    //printf("0x%.8X\n", spec_data[gindex+(win*win_inc)+j+bin+3]);
695
#endif
696
#endif
697
698
43.6M
                    gincrease += 4;
699
43.6M
                    k += 4;
700
43.6M
                }
701
8.50M
                wa += win_inc;
702
8.50M
            }
703
8.14M
            j += width;
704
8.14M
        }
705
262k
        gindex += gincrease;
706
262k
    }
707
708
172k
    return error;
709
172k
}
710
711
static uint8_t allocate_single_channel(NeAACDecStruct *hDecoder, uint8_t channel,
712
                                       uint8_t output_channels)
713
110k
{
714
110k
    int mul = 1;
715
716
#ifdef MAIN_DEC
717
    /* MAIN object type prediction */
718
    if (hDecoder->object_type == MAIN)
719
    {
720
        /* allocate the state only when needed */
721
        if (hDecoder->pred_stat[channel] != NULL)
722
        {
723
            faad_free(hDecoder->pred_stat[channel]);
724
            hDecoder->pred_stat[channel] = NULL;
725
        }
726
727
        hDecoder->pred_stat[channel] = (pred_state*)faad_malloc(hDecoder->frameLength * sizeof(pred_state));
728
        reset_all_predictors(hDecoder->pred_stat[channel], hDecoder->frameLength);
729
    }
730
#endif
731
732
#ifdef LTP_DEC
733
    if (is_ltp_ot(hDecoder->object_type))
734
    {
735
        /* allocate the state only when needed */
736
        if (hDecoder->lt_pred_stat[channel] != NULL)
737
        {
738
            faad_free(hDecoder->lt_pred_stat[channel]);
739
            hDecoder->lt_pred_stat[channel] = NULL;
740
        }
741
742
        hDecoder->lt_pred_stat[channel] = (int16_t*)faad_malloc(hDecoder->frameLength*4 * sizeof(int16_t));
743
        memset(hDecoder->lt_pred_stat[channel], 0, hDecoder->frameLength*4 * sizeof(int16_t));
744
    }
745
#endif
746
747
110k
    if (hDecoder->time_out[channel] != NULL)
748
0
    {
749
0
        faad_free(hDecoder->time_out[channel]);
750
0
        hDecoder->time_out[channel] = NULL;
751
0
    }
752
753
110k
    {
754
110k
        mul = 1;
755
110k
#ifdef SBR_DEC
756
110k
        hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 0;
757
110k
        if ((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
758
92.4k
        {
759
            /* SBR requires 2 times as much output data */
760
92.4k
            mul = 2;
761
92.4k
            hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 1;
762
92.4k
        }
763
110k
#endif
764
110k
        hDecoder->time_out[channel] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
765
110k
        memset(hDecoder->time_out[channel], 0, mul*hDecoder->frameLength*sizeof(real_t));
766
110k
    }
767
768
110k
#if (defined(PS_DEC) || defined(DRM_PS))
769
110k
    if (output_channels == 2)
770
110k
    {
771
110k
        if (hDecoder->time_out[channel+1] != NULL)
772
0
        {
773
0
            faad_free(hDecoder->time_out[channel+1]);
774
0
            hDecoder->time_out[channel+1] = NULL;
775
0
        }
776
777
110k
        hDecoder->time_out[channel+1] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
778
110k
        memset(hDecoder->time_out[channel+1], 0, mul*hDecoder->frameLength*sizeof(real_t));
779
110k
    }
780
110k
#endif
781
782
110k
    if (hDecoder->fb_intermed[channel] != NULL)
783
0
    {
784
0
        faad_free(hDecoder->fb_intermed[channel]);
785
0
        hDecoder->fb_intermed[channel] = NULL;
786
0
    }
787
788
110k
    hDecoder->fb_intermed[channel] = (real_t*)faad_malloc(hDecoder->frameLength*sizeof(real_t));
789
110k
    memset(hDecoder->fb_intermed[channel], 0, hDecoder->frameLength*sizeof(real_t));
790
791
#ifdef SSR_DEC
792
    if (hDecoder->object_type == SSR)
793
    {
794
        if (hDecoder->ssr_overlap[channel] == NULL)
795
        {
796
            hDecoder->ssr_overlap[channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
797
            memset(hDecoder->ssr_overlap[channel], 0, 2*hDecoder->frameLength*sizeof(real_t));
798
        }
799
        if (hDecoder->prev_fmd[channel] == NULL)
800
        {
801
            uint16_t k;
802
            hDecoder->prev_fmd[channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
803
            for (k = 0; k < 2*hDecoder->frameLength; k++)
804
                hDecoder->prev_fmd[channel][k] = REAL_CONST(-1);
805
        }
806
    }
807
#endif
808
809
110k
    return 0;
810
110k
}
811
812
static uint8_t allocate_channel_pair(NeAACDecStruct *hDecoder,
813
                                     uint8_t channel, uint8_t paired_channel)
814
18.7k
{
815
18.7k
    int mul = 1;
816
817
#ifdef MAIN_DEC
818
    /* MAIN object type prediction */
819
    if (hDecoder->object_type == MAIN)
820
    {
821
        /* allocate the state only when needed */
822
        if (hDecoder->pred_stat[channel] == NULL)
823
        {
824
            hDecoder->pred_stat[channel] = (pred_state*)faad_malloc(hDecoder->frameLength * sizeof(pred_state));
825
            reset_all_predictors(hDecoder->pred_stat[channel], hDecoder->frameLength);
826
        }
827
        if (hDecoder->pred_stat[paired_channel] == NULL)
828
        {
829
            hDecoder->pred_stat[paired_channel] = (pred_state*)faad_malloc(hDecoder->frameLength * sizeof(pred_state));
830
            reset_all_predictors(hDecoder->pred_stat[paired_channel], hDecoder->frameLength);
831
        }
832
    }
833
#endif
834
835
#ifdef LTP_DEC
836
    if (is_ltp_ot(hDecoder->object_type))
837
    {
838
        /* allocate the state only when needed */
839
        if (hDecoder->lt_pred_stat[channel] == NULL)
840
        {
841
            hDecoder->lt_pred_stat[channel] = (int16_t*)faad_malloc(hDecoder->frameLength*4 * sizeof(int16_t));
842
            memset(hDecoder->lt_pred_stat[channel], 0, hDecoder->frameLength*4 * sizeof(int16_t));
843
        }
844
        if (hDecoder->lt_pred_stat[paired_channel] == NULL)
845
        {
846
            hDecoder->lt_pred_stat[paired_channel] = (int16_t*)faad_malloc(hDecoder->frameLength*4 * sizeof(int16_t));
847
            memset(hDecoder->lt_pred_stat[paired_channel], 0, hDecoder->frameLength*4 * sizeof(int16_t));
848
        }
849
    }
850
#endif
851
852
18.7k
    {
853
18.7k
        mul = 1;
854
18.7k
#ifdef SBR_DEC
855
18.7k
        hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 0;
856
18.7k
        if ((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
857
16.1k
        {
858
            /* SBR requires 2 times as much output data */
859
16.1k
            mul = 2;
860
16.1k
            hDecoder->sbr_alloced[hDecoder->fr_ch_ele] = 1;
861
16.1k
        }
862
18.7k
#endif
863
18.7k
    }
864
18.7k
    if (hDecoder->time_out[channel] != NULL)
865
4
    {
866
4
        faad_free(hDecoder->time_out[channel]);
867
4
        hDecoder->time_out[channel] = NULL;
868
4
    }
869
18.7k
    if (hDecoder->time_out[paired_channel] != NULL)
870
4
    {
871
4
        faad_free(hDecoder->time_out[paired_channel]);
872
4
        hDecoder->time_out[paired_channel] = NULL;
873
4
    }
874
18.7k
    hDecoder->time_out[channel] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
875
18.7k
    memset(hDecoder->time_out[channel], 0, mul*hDecoder->frameLength*sizeof(real_t));
876
18.7k
    hDecoder->time_out[paired_channel] = (real_t*)faad_malloc(mul*hDecoder->frameLength*sizeof(real_t));
877
18.7k
    memset(hDecoder->time_out[paired_channel], 0, mul*hDecoder->frameLength*sizeof(real_t));
878
879
18.7k
    if (hDecoder->fb_intermed[channel] != NULL)
880
4
    {
881
4
        faad_free(hDecoder->fb_intermed[channel]);
882
4
        hDecoder->fb_intermed[channel] = NULL;
883
4
    }
884
18.7k
    if (hDecoder->fb_intermed[paired_channel] != NULL)
885
0
    {
886
0
        faad_free(hDecoder->fb_intermed[paired_channel]);
887
0
        hDecoder->fb_intermed[paired_channel] = NULL;
888
0
    }
889
18.7k
    hDecoder->fb_intermed[channel] = (real_t*)faad_malloc(hDecoder->frameLength*sizeof(real_t));
890
18.7k
    memset(hDecoder->fb_intermed[channel], 0, hDecoder->frameLength*sizeof(real_t));
891
18.7k
    hDecoder->fb_intermed[paired_channel] = (real_t*)faad_malloc(hDecoder->frameLength*sizeof(real_t));
892
18.7k
    memset(hDecoder->fb_intermed[paired_channel], 0, hDecoder->frameLength*sizeof(real_t));
893
894
#ifdef SSR_DEC
895
    if (hDecoder->object_type == SSR)
896
    {
897
        if (hDecoder->ssr_overlap[cpe->channel] == NULL)
898
        {
899
            hDecoder->ssr_overlap[cpe->channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
900
            memset(hDecoder->ssr_overlap[cpe->channel], 0, 2*hDecoder->frameLength*sizeof(real_t));
901
        }
902
        if (hDecoder->ssr_overlap[cpe->paired_channel] == NULL)
903
        {
904
            hDecoder->ssr_overlap[cpe->paired_channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
905
            memset(hDecoder->ssr_overlap[cpe->paired_channel], 0, 2*hDecoder->frameLength*sizeof(real_t));
906
        }
907
        if (hDecoder->prev_fmd[cpe->channel] == NULL)
908
        {
909
            uint16_t k;
910
            hDecoder->prev_fmd[cpe->channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
911
            for (k = 0; k < 2*hDecoder->frameLength; k++)
912
                hDecoder->prev_fmd[cpe->channel][k] = REAL_CONST(-1);
913
        }
914
        if (hDecoder->prev_fmd[cpe->paired_channel] == NULL)
915
        {
916
            uint16_t k;
917
            hDecoder->prev_fmd[cpe->paired_channel] = (real_t*)faad_malloc(2*hDecoder->frameLength*sizeof(real_t));
918
            for (k = 0; k < 2*hDecoder->frameLength; k++)
919
                hDecoder->prev_fmd[cpe->paired_channel][k] = REAL_CONST(-1);
920
        }
921
    }
922
#endif
923
924
18.7k
    return 0;
925
18.7k
}
926
927
uint8_t reconstruct_single_channel(NeAACDecStruct *hDecoder, ic_stream *ics,
928
                                   element *sce, int16_t *spec_data)
929
127k
{
930
127k
    uint8_t retval;
931
127k
    uint8_t output_channels;
932
127k
    ALIGN real_t spec_coef[1024];
933
934
#ifdef PROFILE
935
    int64_t count = faad_get_ts();
936
#endif
937
938
939
    /* always allocate 2 channels, PS can always "suddenly" turn up */
940
127k
#if ( (defined(DRM) && defined(DRM_PS)) )
941
127k
    output_channels = 2;
942
#elif defined(PS_DEC)
943
    if (hDecoder->ps_used[hDecoder->fr_ch_ele])
944
        output_channels = 2;
945
    else
946
        output_channels = 1;
947
#else
948
    output_channels = 1;
949
#endif
950
951
127k
    if (hDecoder->element_output_channels[hDecoder->fr_ch_ele] == 0)
952
110k
    {
953
        /* element_output_channels not set yet */
954
110k
        hDecoder->element_output_channels[hDecoder->fr_ch_ele] = output_channels;
955
110k
    } else if (hDecoder->element_output_channels[hDecoder->fr_ch_ele] != output_channels) {
956
        /* element inconsistency */
957
958
        /* this only happens if PS is actually found but not in the first frame
959
         * this means that there is only 1 bitstream element!
960
         */
961
962
        /* The simplest way to fix the accounting,
963
         * is to reallocate this and all the following channels.
964
         */
965
0
        memset(&hDecoder->element_alloced[hDecoder->fr_ch_ele], 0,
966
0
            sizeof(uint8_t) * (MAX_SYNTAX_ELEMENTS - hDecoder->fr_ch_ele));
967
968
0
        hDecoder->element_output_channels[hDecoder->fr_ch_ele] = output_channels;
969
970
        //return 21;
971
0
    }
972
973
127k
    if (hDecoder->element_alloced[hDecoder->fr_ch_ele] == 0)
974
110k
    {
975
110k
        retval = allocate_single_channel(hDecoder, sce->channel, output_channels);
976
110k
        if (retval > 0)
977
0
            return retval;
978
979
110k
        hDecoder->element_alloced[hDecoder->fr_ch_ele] = 1;
980
110k
    }
981
982
    /* sanity check, CVE-2018-20199, CVE-2018-20360 */
983
127k
    if(!hDecoder->time_out[sce->channel])
984
0
        return 15;
985
127k
    if(output_channels > 1 && !hDecoder->time_out[sce->channel+1])
986
0
        return 15;
987
127k
    if(!hDecoder->fb_intermed[sce->channel])
988
0
        return 15;
989
990
    /* dequantisation and scaling */
991
127k
    retval = quant_to_spec(hDecoder, ics, spec_data, spec_coef, hDecoder->frameLength);
992
127k
    if (retval > 0)
993
117
        return retval;
994
995
#ifdef PROFILE
996
    count = faad_get_ts() - count;
997
    hDecoder->requant_cycles += count;
998
#endif
999
1000
1001
    /* pns decoding */
1002
127k
    pns_decode(ics, NULL, spec_coef, NULL, hDecoder->frameLength, 0, hDecoder->object_type,
1003
127k
        &(hDecoder->__r1), &(hDecoder->__r2));
1004
1005
#ifdef MAIN_DEC
1006
    /* MAIN object type prediction */
1007
    if (hDecoder->object_type == MAIN)
1008
    {
1009
        if (!hDecoder->pred_stat[sce->channel])
1010
            return 33;
1011
1012
        /* intra channel prediction */
1013
        ic_prediction(ics, spec_coef, hDecoder->pred_stat[sce->channel], hDecoder->frameLength,
1014
            hDecoder->sf_index);
1015
1016
        /* In addition, for scalefactor bands coded by perceptual
1017
           noise substitution the predictors belonging to the
1018
           corresponding spectral coefficients are reset.
1019
        */
1020
        pns_reset_pred_state(ics, hDecoder->pred_stat[sce->channel]);
1021
    }
1022
#endif
1023
1024
#ifdef LTP_DEC
1025
    if (is_ltp_ot(hDecoder->object_type))
1026
    {
1027
#ifdef LD_DEC
1028
        if (hDecoder->object_type == LD)
1029
        {
1030
            if (ics->ltp.data_present)
1031
            {
1032
                if (ics->ltp.lag_update)
1033
                    hDecoder->ltp_lag[sce->channel] = ics->ltp.lag;
1034
            }
1035
            ics->ltp.lag = hDecoder->ltp_lag[sce->channel];
1036
        }
1037
#endif
1038
1039
        if (!hDecoder->lt_pred_stat[sce->channel])
1040
            return 34;
1041
1042
        /* long term prediction */
1043
        lt_prediction(ics, &(ics->ltp), spec_coef, hDecoder->lt_pred_stat[sce->channel], hDecoder->fb,
1044
            ics->window_shape, hDecoder->window_shape_prev[sce->channel],
1045
            hDecoder->sf_index, hDecoder->object_type, hDecoder->frameLength);
1046
    }
1047
#endif
1048
1049
    /* tns decoding */
1050
127k
    tns_decode_frame(ics, &(ics->tns), hDecoder->sf_index, hDecoder->object_type,
1051
127k
        spec_coef, hDecoder->frameLength);
1052
1053
    /* drc decoding */
1054
127k
#ifdef APPLY_DRC
1055
127k
    if (hDecoder->drc->present)
1056
0
    {
1057
0
        if (!hDecoder->drc->exclude_mask[sce->channel] || !hDecoder->drc->excluded_chns_present)
1058
0
            drc_decode(hDecoder->drc, spec_coef);
1059
0
    }
1060
127k
#endif
1061
    /* filter bank */
1062
#ifdef SSR_DEC
1063
    if (hDecoder->object_type != SSR)
1064
    {
1065
#endif
1066
127k
        ifilter_bank(hDecoder->fb, ics->window_sequence, ics->window_shape,
1067
127k
            hDecoder->window_shape_prev[sce->channel], spec_coef,
1068
127k
            hDecoder->time_out[sce->channel], hDecoder->fb_intermed[sce->channel],
1069
127k
            hDecoder->object_type, hDecoder->frameLength);
1070
#ifdef SSR_DEC
1071
    } else {
1072
        ssr_decode(&(ics->ssr), hDecoder->fb, ics->window_sequence, ics->window_shape,
1073
            hDecoder->window_shape_prev[sce->channel], spec_coef, hDecoder->time_out[sce->channel],
1074
            hDecoder->ssr_overlap[sce->channel], hDecoder->ipqf_buffer[sce->channel], hDecoder->prev_fmd[sce->channel],
1075
            hDecoder->frameLength);
1076
    }
1077
#endif
1078
1079
    /* save window shape for next frame */
1080
127k
    hDecoder->window_shape_prev[sce->channel] = ics->window_shape;
1081
1082
#ifdef LTP_DEC
1083
    if (is_ltp_ot(hDecoder->object_type))
1084
    {
1085
        lt_update_state(hDecoder->lt_pred_stat[sce->channel], hDecoder->time_out[sce->channel],
1086
            hDecoder->fb_intermed[sce->channel], hDecoder->frameLength, hDecoder->object_type);
1087
    }
1088
#endif
1089
1090
127k
#ifdef SBR_DEC
1091
127k
    if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1092
107k
        && hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1093
107k
    {
1094
107k
        int ele = hDecoder->fr_ch_ele;
1095
107k
        int ch = sce->channel;
1096
1097
        /* following case can happen when forceUpSampling == 1 */
1098
107k
        if (hDecoder->sbr[ele] == NULL)
1099
80.1k
        {
1100
80.1k
            hDecoder->sbr[ele] = sbrDecodeInit(hDecoder->frameLength,
1101
80.1k
                hDecoder->element_id[ele], 2*get_sample_rate(hDecoder->sf_index),
1102
80.1k
                hDecoder->downSampledSBR
1103
80.1k
#ifdef DRM
1104
80.1k
                , 0
1105
80.1k
#endif
1106
80.1k
                );
1107
80.1k
        }
1108
107k
        if (!hDecoder->sbr[ele])
1109
0
            return 19;
1110
1111
107k
        if (sce->ics1.window_sequence == EIGHT_SHORT_SEQUENCE)
1112
10.8k
            hDecoder->sbr[ele]->maxAACLine = 8*min(sce->ics1.swb_offset[max(sce->ics1.max_sfb-1, 0)], sce->ics1.swb_offset_max);
1113
96.2k
        else
1114
96.2k
            hDecoder->sbr[ele]->maxAACLine = min(sce->ics1.swb_offset[max(sce->ics1.max_sfb-1, 0)], sce->ics1.swb_offset_max);
1115
1116
        /* check if any of the PS tools is used */
1117
107k
#if (defined(PS_DEC) || defined(DRM_PS))
1118
107k
        if (hDecoder->ps_used[ele] == 0)
1119
100k
        {
1120
100k
#endif
1121
100k
            retval = sbrDecodeSingleFrame(hDecoder->sbr[ele], hDecoder->time_out[ch],
1122
100k
                hDecoder->postSeekResetFlag, hDecoder->downSampledSBR);
1123
100k
#if (defined(PS_DEC) || defined(DRM_PS))
1124
100k
        } else {
1125
6.47k
            retval = sbrDecodeSingleFramePS(hDecoder->sbr[ele], hDecoder->time_out[ch],
1126
6.47k
                hDecoder->time_out[ch+1], hDecoder->postSeekResetFlag,
1127
6.47k
                hDecoder->downSampledSBR);
1128
6.47k
        }
1129
107k
#endif
1130
107k
        if (retval > 0)
1131
12
            return retval;
1132
107k
    } else if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1133
2
        && !hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1134
2
    {
1135
2
        return 23;
1136
2
    }
1137
127k
#endif
1138
1139
    /* copy L to R when no PS is used */
1140
127k
#if (defined(PS_DEC) || defined(DRM_PS))
1141
127k
    if ((hDecoder->ps_used[hDecoder->fr_ch_ele] == 0) &&
1142
120k
        (hDecoder->element_output_channels[hDecoder->fr_ch_ele] == 2))
1143
120k
    {
1144
120k
        int ele = hDecoder->fr_ch_ele;
1145
120k
        int ch = sce->channel;
1146
120k
        int frame_size = 1;
1147
120k
#ifdef SBR_DEC
1148
120k
        if (hDecoder->sbr_alloced[ele])
1149
100k
            frame_size = 2;
1150
120k
#endif
1151
120k
        frame_size *= hDecoder->frameLength*sizeof(real_t);
1152
1153
120k
        memcpy(hDecoder->time_out[ch+1], hDecoder->time_out[ch], frame_size);
1154
120k
    }
1155
127k
#endif
1156
1157
127k
    return 0;
1158
127k
}
1159
1160
uint8_t reconstruct_channel_pair(NeAACDecStruct *hDecoder, ic_stream *ics1, ic_stream *ics2,
1161
                                 element *cpe, int16_t *spec_data1, int16_t *spec_data2)
1162
22.4k
{
1163
22.4k
    uint8_t retval;
1164
22.4k
    ALIGN real_t spec_coef1[1024];
1165
22.4k
    ALIGN real_t spec_coef2[1024];
1166
1167
#ifdef PROFILE
1168
    int64_t count = faad_get_ts();
1169
#endif
1170
22.4k
    if (hDecoder->element_alloced[hDecoder->fr_ch_ele] != 2)
1171
18.7k
    {
1172
18.7k
        retval = allocate_channel_pair(hDecoder, cpe->channel, (uint8_t)cpe->paired_channel);
1173
18.7k
        if (retval > 0)
1174
0
            return retval;
1175
1176
18.7k
        hDecoder->element_alloced[hDecoder->fr_ch_ele] = 2;
1177
18.7k
    }
1178
1179
    /* sanity check, CVE-2018-20199, CVE-2018-20360 */
1180
22.4k
    if(!hDecoder->time_out[cpe->channel] || !hDecoder->time_out[cpe->paired_channel])
1181
0
        return 15;
1182
22.4k
    if(!hDecoder->fb_intermed[cpe->channel] || !hDecoder->fb_intermed[cpe->paired_channel])
1183
0
        return 15;
1184
1185
    /* dequantisation and scaling */
1186
22.4k
    retval = quant_to_spec(hDecoder, ics1, spec_data1, spec_coef1, hDecoder->frameLength);
1187
22.4k
    if (retval > 0)
1188
6
        return retval;
1189
22.4k
    retval = quant_to_spec(hDecoder, ics2, spec_data2, spec_coef2, hDecoder->frameLength);
1190
22.4k
    if (retval > 0)
1191
3
        return retval;
1192
1193
#ifdef PROFILE
1194
    count = faad_get_ts() - count;
1195
    hDecoder->requant_cycles += count;
1196
#endif
1197
1198
    /* pns decoding */
1199
22.4k
    if (ics1->ms_mask_present)
1200
7.92k
    {
1201
7.92k
        pns_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength, 1, hDecoder->object_type,
1202
7.92k
            &(hDecoder->__r1), &(hDecoder->__r2));
1203
14.4k
    } else {
1204
14.4k
        pns_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength, 0, hDecoder->object_type,
1205
14.4k
            &(hDecoder->__r1), &(hDecoder->__r2));
1206
14.4k
    }
1207
1208
    /* mid/side decoding */
1209
22.4k
    ms_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength);
1210
1211
#if 0
1212
    {
1213
        int i;
1214
        for (i = 0; i < 1024; i++)
1215
        {
1216
            //printf("%d\n", spec_coef1[i]);
1217
            printf("0x%.8X\n", spec_coef1[i]);
1218
        }
1219
        for (i = 0; i < 1024; i++)
1220
        {
1221
            //printf("%d\n", spec_coef2[i]);
1222
            printf("0x%.8X\n", spec_coef2[i]);
1223
        }
1224
    }
1225
#endif
1226
1227
    /* intensity stereo decoding */
1228
22.4k
    is_decode(ics1, ics2, spec_coef1, spec_coef2, hDecoder->frameLength);
1229
1230
#if 0
1231
    {
1232
        int i;
1233
        for (i = 0; i < 1024; i++)
1234
        {
1235
            printf("%d\n", spec_coef1[i]);
1236
            //printf("0x%.8X\n", spec_coef1[i]);
1237
        }
1238
        for (i = 0; i < 1024; i++)
1239
        {
1240
            printf("%d\n", spec_coef2[i]);
1241
            //printf("0x%.8X\n", spec_coef2[i]);
1242
        }
1243
    }
1244
#endif
1245
1246
#ifdef MAIN_DEC
1247
    /* MAIN object type prediction */
1248
    if (hDecoder->object_type == MAIN)
1249
    {
1250
        if (!hDecoder->pred_stat[cpe->channel] || !hDecoder->pred_stat[cpe->paired_channel])
1251
            return 33;
1252
1253
        /* intra channel prediction */
1254
        ic_prediction(ics1, spec_coef1, hDecoder->pred_stat[cpe->channel], hDecoder->frameLength,
1255
            hDecoder->sf_index);
1256
        ic_prediction(ics2, spec_coef2, hDecoder->pred_stat[cpe->paired_channel], hDecoder->frameLength,
1257
            hDecoder->sf_index);
1258
1259
        /* In addition, for scalefactor bands coded by perceptual
1260
           noise substitution the predictors belonging to the
1261
           corresponding spectral coefficients are reset.
1262
        */
1263
        pns_reset_pred_state(ics1, hDecoder->pred_stat[cpe->channel]);
1264
        pns_reset_pred_state(ics2, hDecoder->pred_stat[cpe->paired_channel]);
1265
    }
1266
#endif
1267
1268
#ifdef LTP_DEC
1269
    if (is_ltp_ot(hDecoder->object_type))
1270
    {
1271
        ltp_info *ltp1 = &(ics1->ltp);
1272
        ltp_info *ltp2 = (cpe->common_window) ? &(ics2->ltp2) : &(ics2->ltp);
1273
#ifdef LD_DEC
1274
        if (hDecoder->object_type == LD)
1275
        {
1276
            if (ltp1->data_present)
1277
            {
1278
                if (ltp1->lag_update)
1279
                    hDecoder->ltp_lag[cpe->channel] = ltp1->lag;
1280
            }
1281
            ltp1->lag = hDecoder->ltp_lag[cpe->channel];
1282
            if (ltp2->data_present)
1283
            {
1284
                if (ltp2->lag_update)
1285
                    hDecoder->ltp_lag[cpe->paired_channel] = ltp2->lag;
1286
            }
1287
            ltp2->lag = hDecoder->ltp_lag[cpe->paired_channel];
1288
        }
1289
#endif
1290
1291
        if (!hDecoder->lt_pred_stat[cpe->channel] || !hDecoder->lt_pred_stat[cpe->paired_channel])
1292
            return 34;
1293
1294
        /* long term prediction */
1295
        lt_prediction(ics1, ltp1, spec_coef1, hDecoder->lt_pred_stat[cpe->channel], hDecoder->fb,
1296
            ics1->window_shape, hDecoder->window_shape_prev[cpe->channel],
1297
            hDecoder->sf_index, hDecoder->object_type, hDecoder->frameLength);
1298
        lt_prediction(ics2, ltp2, spec_coef2, hDecoder->lt_pred_stat[cpe->paired_channel], hDecoder->fb,
1299
            ics2->window_shape, hDecoder->window_shape_prev[cpe->paired_channel],
1300
            hDecoder->sf_index, hDecoder->object_type, hDecoder->frameLength);
1301
    }
1302
#endif
1303
1304
    /* tns decoding */
1305
22.4k
    tns_decode_frame(ics1, &(ics1->tns), hDecoder->sf_index, hDecoder->object_type,
1306
22.4k
        spec_coef1, hDecoder->frameLength);
1307
22.4k
    tns_decode_frame(ics2, &(ics2->tns), hDecoder->sf_index, hDecoder->object_type,
1308
22.4k
        spec_coef2, hDecoder->frameLength);
1309
1310
    /* drc decoding */
1311
22.4k
#if APPLY_DRC
1312
22.4k
    if (hDecoder->drc->present)
1313
0
    {
1314
0
        if (!hDecoder->drc->exclude_mask[cpe->channel] || !hDecoder->drc->excluded_chns_present)
1315
0
            drc_decode(hDecoder->drc, spec_coef1);
1316
0
        if (!hDecoder->drc->exclude_mask[cpe->paired_channel] || !hDecoder->drc->excluded_chns_present)
1317
0
            drc_decode(hDecoder->drc, spec_coef2);
1318
0
    }
1319
22.4k
#endif
1320
    /* filter bank */
1321
#ifdef SSR_DEC
1322
    if (hDecoder->object_type != SSR)
1323
    {
1324
#endif
1325
22.4k
        ifilter_bank(hDecoder->fb, ics1->window_sequence, ics1->window_shape,
1326
22.4k
            hDecoder->window_shape_prev[cpe->channel], spec_coef1,
1327
22.4k
            hDecoder->time_out[cpe->channel], hDecoder->fb_intermed[cpe->channel],
1328
22.4k
            hDecoder->object_type, hDecoder->frameLength);
1329
22.4k
        ifilter_bank(hDecoder->fb, ics2->window_sequence, ics2->window_shape,
1330
22.4k
            hDecoder->window_shape_prev[cpe->paired_channel], spec_coef2,
1331
22.4k
            hDecoder->time_out[cpe->paired_channel], hDecoder->fb_intermed[cpe->paired_channel],
1332
22.4k
            hDecoder->object_type, hDecoder->frameLength);
1333
#ifdef SSR_DEC
1334
    } else {
1335
        ssr_decode(&(ics1->ssr), hDecoder->fb, ics1->window_sequence, ics1->window_shape,
1336
            hDecoder->window_shape_prev[cpe->channel], spec_coef1, hDecoder->time_out[cpe->channel],
1337
            hDecoder->ssr_overlap[cpe->channel], hDecoder->ipqf_buffer[cpe->channel],
1338
            hDecoder->prev_fmd[cpe->channel], hDecoder->frameLength);
1339
        ssr_decode(&(ics2->ssr), hDecoder->fb, ics2->window_sequence, ics2->window_shape,
1340
            hDecoder->window_shape_prev[cpe->paired_channel], spec_coef2, hDecoder->time_out[cpe->paired_channel],
1341
            hDecoder->ssr_overlap[cpe->paired_channel], hDecoder->ipqf_buffer[cpe->paired_channel],
1342
            hDecoder->prev_fmd[cpe->paired_channel], hDecoder->frameLength);
1343
    }
1344
#endif
1345
1346
    /* save window shape for next frame */
1347
22.4k
    hDecoder->window_shape_prev[cpe->channel] = ics1->window_shape;
1348
22.4k
    hDecoder->window_shape_prev[cpe->paired_channel] = ics2->window_shape;
1349
1350
#ifdef LTP_DEC
1351
    if (is_ltp_ot(hDecoder->object_type))
1352
    {
1353
        lt_update_state(hDecoder->lt_pred_stat[cpe->channel], hDecoder->time_out[cpe->channel],
1354
            hDecoder->fb_intermed[cpe->channel], hDecoder->frameLength, hDecoder->object_type);
1355
        lt_update_state(hDecoder->lt_pred_stat[cpe->paired_channel], hDecoder->time_out[cpe->paired_channel],
1356
            hDecoder->fb_intermed[cpe->paired_channel], hDecoder->frameLength, hDecoder->object_type);
1357
    }
1358
#endif
1359
1360
22.4k
#ifdef SBR_DEC
1361
22.4k
    if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1362
19.5k
        && hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1363
19.5k
    {
1364
19.5k
        int ele = hDecoder->fr_ch_ele;
1365
19.5k
        int ch0 = cpe->channel;
1366
19.5k
        int ch1 = cpe->paired_channel;
1367
1368
        /* following case can happen when forceUpSampling == 1 */
1369
19.5k
        if (hDecoder->sbr[ele] == NULL)
1370
4.29k
        {
1371
4.29k
            hDecoder->sbr[ele] = sbrDecodeInit(hDecoder->frameLength,
1372
4.29k
                hDecoder->element_id[ele], 2*get_sample_rate(hDecoder->sf_index),
1373
4.29k
                hDecoder->downSampledSBR
1374
4.29k
#ifdef DRM
1375
4.29k
                , 0
1376
4.29k
#endif
1377
4.29k
                );
1378
4.29k
        }
1379
19.5k
        if (!hDecoder->sbr[ele])
1380
0
            return 19;
1381
1382
19.5k
        if (cpe->ics1.window_sequence == EIGHT_SHORT_SEQUENCE)
1383
814
            hDecoder->sbr[ele]->maxAACLine = 8*min(cpe->ics1.swb_offset[max(cpe->ics1.max_sfb-1, 0)], cpe->ics1.swb_offset_max);
1384
18.7k
        else
1385
18.7k
            hDecoder->sbr[ele]->maxAACLine = min(cpe->ics1.swb_offset[max(cpe->ics1.max_sfb-1, 0)], cpe->ics1.swb_offset_max);
1386
1387
19.5k
        retval = sbrDecodeCoupleFrame(hDecoder->sbr[ele],
1388
19.5k
            hDecoder->time_out[ch0], hDecoder->time_out[ch1],
1389
19.5k
            hDecoder->postSeekResetFlag, hDecoder->downSampledSBR);
1390
19.5k
        if (retval > 0)
1391
4
            return retval;
1392
19.5k
    } else if (((hDecoder->sbr_present_flag == 1) || (hDecoder->forceUpSampling == 1))
1393
2
        && !hDecoder->sbr_alloced[hDecoder->fr_ch_ele])
1394
2
    {
1395
2
        return 23;
1396
2
    }
1397
22.4k
#endif
1398
1399
22.4k
    return 0;
1400
22.4k
}