Coverage Report

Created: 2025-08-28 07:12

/src/ffmpeg/libavformat/h264dec.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * RAW H.264 video demuxer
3
 * Copyright (c) 2008 Michael Niedermayer <michaelni@gmx.at>
4
 *
5
 * This file is part of FFmpeg.
6
 *
7
 * FFmpeg is free software; you can redistribute it and/or
8
 * modify it under the terms of the GNU Lesser General Public
9
 * License as published by the Free Software Foundation; either
10
 * version 2.1 of the License, or (at your option) any later version.
11
 *
12
 * FFmpeg is distributed in the hope that it will be useful,
13
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15
 * Lesser General Public License for more details.
16
 *
17
 * You should have received a copy of the GNU Lesser General Public
18
 * License along with FFmpeg; if not, write to the Free Software
19
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20
 */
21
22
#include "libavcodec/get_bits.h"
23
#include "libavcodec/golomb.h"
24
#include "avformat.h"
25
#include "rawdec.h"
26
27
382k
#define MAX_SPS_COUNT          32
28
593k
#define MAX_PPS_COUNT         256
29
30
static int h264_probe(const AVProbeData *p)
31
924k
{
32
924k
    uint32_t code = -1;
33
924k
    int sps = 0, pps = 0, idr = 0, res = 0, sli = 0;
34
924k
    int i, ret;
35
924k
    int pps_ids[MAX_PPS_COUNT+1] = {0};
36
924k
    int sps_ids[MAX_SPS_COUNT+1] = {0};
37
924k
    unsigned pps_id, sps_id;
38
924k
    GetBitContext gb;
39
40
651M
    for (i = 0; i + 2 < p->buf_size; i++) {
41
650M
        code = (code << 8) + p->buf[i];
42
650M
        if ((code & 0xffffff00) == 0x100) {
43
2.74M
            int ref_idc = (code >> 5) & 3;
44
2.74M
            int type    = code & 0x1F;
45
2.74M
            static const int8_t ref_zero[] = {
46
2.74M
                 2,  0,  0,  0,  0, -1,  1, -1,
47
2.74M
                -1,  1,  1,  1,  1, -1,  2,  2,
48
2.74M
                 2,  2,  2,  0,  2,  2,  2,  2,
49
2.74M
                 2,  2,  2,  2,  2,  2,  2,  2
50
2.74M
            };
51
52
2.74M
            if (code & 0x80) // forbidden_bit
53
309k
                return 0;
54
55
2.43M
            if (ref_zero[type] == 1 && ref_idc)
56
31.6k
                return 0;
57
2.40M
            if (ref_zero[type] == -1 && !ref_idc)
58
22.8k
                return 0;
59
2.38M
            if (ref_zero[type] == 2) {
60
1.44M
                if (!(code == 0x100 && !p->buf[i + 1] && !p->buf[i + 2]))
61
945k
                    res++;
62
1.44M
            }
63
64
2.38M
            ret = init_get_bits8(&gb, p->buf + i + 1, p->buf_size - i - 1);
65
2.38M
            if (ret < 0)
66
0
                return 0;
67
68
2.38M
            switch (type) {
69
200k
            case 1:
70
286k
            case 5:
71
286k
                get_ue_golomb_long(&gb);
72
286k
                if (get_ue_golomb_long(&gb) > 9U)
73
21.5k
                    return 0;
74
264k
                pps_id = get_ue_golomb_long(&gb);
75
264k
                if (pps_id > MAX_PPS_COUNT)
76
3.55k
                    return 0;
77
261k
                if (!pps_ids[pps_id])
78
175k
                    break;
79
80
85.5k
                if (type == 1)
81
29.3k
                    sli++;
82
56.1k
                else
83
56.1k
                    idr++;
84
85.5k
                break;
85
64.8k
            case 7:
86
64.8k
                skip_bits(&gb, 14);
87
64.8k
                if (get_bits(&gb, 2))
88
7.70k
                    return 0;
89
57.1k
                skip_bits(&gb, 8);
90
57.1k
                sps_id = get_ue_golomb_long(&gb);
91
57.1k
                if (sps_id > MAX_SPS_COUNT)
92
1.28k
                    return 0;
93
55.9k
                sps_ids[sps_id] = 1;
94
55.9k
                sps++;
95
55.9k
                break;
96
329k
            case 8:
97
329k
                pps_id = get_ue_golomb_long(&gb);
98
329k
                if (pps_id > MAX_PPS_COUNT)
99
3.71k
                    return 0;
100
325k
                sps_id = get_ue_golomb_long(&gb);
101
325k
                if (sps_id > MAX_SPS_COUNT)
102
1.11k
                    return 0;
103
324k
                if (!sps_ids[sps_id])
104
275k
                    break;
105
48.8k
                pps_ids[pps_id] = 1;
106
48.8k
                pps++;
107
48.8k
                break;
108
2.38M
            }
109
2.38M
        }
110
650M
    }
111
521k
    ff_tlog(NULL, "sps:%d pps:%d idr:%d sli:%d res:%d\n", sps, pps, idr, sli, res);
112
113
521k
    if (sps && pps && (idr || sli > 3) && res < (sps + pps + idr))
114
6.68k
        return AVPROBE_SCORE_EXTENSION + 1;  // 1 more than .mpg
115
116
514k
    return 0;
117
521k
}
118
119
FF_DEF_RAWVIDEO_DEMUXER(h264, "raw H.264 video", h264_probe, "h26l,h264,264,avc", AV_CODEC_ID_H264)