Coverage Report

Created: 2025-12-31 07:57

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ffmpeg/libavcodec/eamad.c
Line
Count
Source
1
/*
2
 * Electronic Arts Madcow Video Decoder
3
 * Copyright (c) 2007-2009 Peter Ross
4
 *
5
 * This file is part of FFmpeg.
6
 *
7
 * FFmpeg is free software; you can redistribute it and/or
8
 * modify it under the terms of the GNU Lesser General Public
9
 * License as published by the Free Software Foundation; either
10
 * version 2.1 of the License, or (at your option) any later version.
11
 *
12
 * FFmpeg is distributed in the hope that it will be useful,
13
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15
 * Lesser General Public License for more details.
16
 *
17
 * You should have received a copy of the GNU Lesser General Public
18
 * License along with FFmpeg; if not, write to the Free Software
19
 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA  02110-1301  USA
20
 */
21
22
/**
23
 * @file
24
 * Electronic Arts Madcow Video Decoder
25
 * @author Peter Ross <pross@xvid.org>
26
 *
27
 * @see technical details at
28
 * http://wiki.multimedia.cx/index.php?title=Electronic_Arts_MAD
29
 */
30
31
#include "libavutil/mem.h"
32
#include "libavutil/mem_internal.h"
33
34
#include "avcodec.h"
35
#include "blockdsp.h"
36
#include "bytestream.h"
37
#include "bswapdsp.h"
38
#include "codec_internal.h"
39
#include "decode.h"
40
#include "get_bits.h"
41
#include "aandcttab.h"
42
#include "eaidct.h"
43
#include "mpeg12data.h"
44
#include "mpeg12vlc.h"
45
46
#define EA_PREAMBLE_SIZE    8
47
#define MADk_TAG MKTAG('M', 'A', 'D', 'k')    /* MAD I-frame */
48
748k
#define MADm_TAG MKTAG('M', 'A', 'D', 'm')    /* MAD P-frame */
49
739k
#define MADe_TAG MKTAG('M', 'A', 'D', 'e')    /* MAD lqp-frame */
50
51
typedef struct MadContext {
52
    AVCodecContext *avctx;
53
    BlockDSPContext bdsp;
54
    BswapDSPContext bbdsp;
55
    AVFrame *last_frame;
56
    GetBitContext gb;
57
    void *bitstream_buf;
58
    unsigned int bitstream_buf_size;
59
    DECLARE_ALIGNED(32, int16_t, block)[64];
60
    uint16_t quant_matrix[64];
61
} MadContext;
62
63
static av_cold int decode_init(AVCodecContext *avctx)
64
2.01k
{
65
2.01k
    MadContext *s = avctx->priv_data;
66
2.01k
    s->avctx = avctx;
67
2.01k
    avctx->pix_fmt = AV_PIX_FMT_YUV420P;
68
2.01k
    ff_blockdsp_init(&s->bdsp);
69
2.01k
    ff_bswapdsp_init(&s->bbdsp);
70
2.01k
    ff_mpeg12_init_vlcs();
71
72
2.01k
    s->last_frame = av_frame_alloc();
73
2.01k
    if (!s->last_frame)
74
0
        return AVERROR(ENOMEM);
75
76
2.01k
    return 0;
77
2.01k
}
78
79
static inline void comp(unsigned char *dst, ptrdiff_t dst_stride,
80
                        unsigned char *src, ptrdiff_t src_stride, int add)
81
2.38M
{
82
2.38M
    int j, i;
83
21.4M
    for (j=0; j<8; j++)
84
171M
        for (i=0; i<8; i++)
85
152M
            dst[j*dst_stride + i] = av_clip_uint8(src[j*src_stride + i] + add);
86
2.38M
}
87
88
static inline void comp_block(MadContext *t, AVFrame *frame,
89
                              int mb_x, int mb_y,
90
                              int j, int mv_x, int mv_y, int add)
91
2.69M
{
92
2.69M
    if (j < 4) {
93
1.81M
        unsigned offset = (mb_y*16 + ((j&2)<<2) + mv_y)*t->last_frame->linesize[0] + mb_x*16 + ((j&1)<<3) + mv_x;
94
1.81M
        if (offset >= (t->avctx->height - 7) * t->last_frame->linesize[0] - 7)
95
254k
            return;
96
1.56M
        comp(frame->data[0] + (mb_y*16 + ((j&2)<<2))*frame->linesize[0] + mb_x*16 + ((j&1)<<3),
97
1.56M
             frame->linesize[0],
98
1.56M
             t->last_frame->data[0] + offset,
99
1.56M
             t->last_frame->linesize[0], add);
100
1.56M
    } else if (!(t->avctx->flags & AV_CODEC_FLAG_GRAY)) {
101
879k
        int index = j - 3;
102
879k
        unsigned offset = (mb_y * 8 + (mv_y/2))*t->last_frame->linesize[index] + mb_x * 8 + (mv_x/2);
103
879k
        if (offset >= (t->avctx->height/2 - 7) * t->last_frame->linesize[index] - 7)
104
59.1k
            return;
105
820k
        comp(frame->data[index] + (mb_y*8)*frame->linesize[index] + mb_x * 8,
106
820k
             frame->linesize[index],
107
820k
             t->last_frame->data[index] + offset,
108
820k
             t->last_frame->linesize[index], add);
109
820k
    }
110
2.69M
}
111
112
static inline void idct_put(MadContext *t, AVFrame *frame, int16_t *block,
113
                            int mb_x, int mb_y, int j)
114
2.70M
{
115
2.70M
    if (j < 4) {
116
1.78M
        ff_ea_idct_put_c(
117
1.78M
            frame->data[0] + (mb_y*16 + ((j&2)<<2))*frame->linesize[0] + mb_x*16 + ((j&1)<<3),
118
1.78M
            frame->linesize[0], block);
119
1.78M
    } else if (!(t->avctx->flags & AV_CODEC_FLAG_GRAY)) {
120
916k
        int index = j - 3;
121
916k
        ff_ea_idct_put_c(
122
916k
            frame->data[index] + (mb_y*8)*frame->linesize[index] + mb_x*8,
123
916k
            frame->linesize[index], block);
124
916k
    }
125
2.70M
}
126
127
static inline int decode_block_intra(MadContext *s, int16_t * block)
128
2.71M
{
129
2.71M
    int level, i, j, run;
130
2.71M
    const uint8_t *scantable = ff_zigzag_direct;
131
2.71M
    int16_t *quant_matrix = s->quant_matrix;
132
133
2.71M
    block[0] = (128 + get_sbits(&s->gb, 8)) * quant_matrix[0];
134
135
    /* The RL decoder is derived from mpeg1_decode_block_intra;
136
       Escaped level and run values a decoded differently */
137
2.71M
    i = 0;
138
2.71M
    {
139
2.71M
        OPEN_READER(re, &s->gb);
140
        /* now quantify & encode AC coefficients */
141
10.3M
        for (;;) {
142
10.3M
            UPDATE_CACHE(re, &s->gb);
143
10.3M
            GET_RL_VLC(level, run, re, &s->gb, ff_mpeg1_rl_vlc, TEX_VLC_BITS, 2, 0);
144
145
10.3M
            if (level == 127) {
146
2.70M
                break;
147
7.67M
            } else if (level != 0) {
148
7.58M
                i += run;
149
7.58M
                if (i > 63)
150
11.6k
                    return -1;
151
7.57M
                j = scantable[i];
152
7.57M
                level = (level*quant_matrix[j]) >> 4;
153
7.57M
                level = (level-1)|1;
154
7.57M
                level = (level ^ SHOW_SBITS(re, &s->gb, 1)) - SHOW_SBITS(re, &s->gb, 1);
155
7.57M
                LAST_SKIP_BITS(re, &s->gb, 1);
156
7.57M
            } else {
157
                /* escape */
158
88.0k
                level = SHOW_SBITS(re, &s->gb, 10); SKIP_BITS(re, &s->gb, 10);
159
160
88.0k
                run = SHOW_UBITS(re, &s->gb, 6)+1; LAST_SKIP_BITS(re, &s->gb, 6);
161
162
88.0k
                i += run;
163
88.0k
                if (i > 63)
164
241
                    return -1;
165
87.7k
                j = scantable[i];
166
87.7k
                if (level < 0) {
167
84.4k
                    level = -level;
168
84.4k
                    level = (level*quant_matrix[j]) >> 4;
169
84.4k
                    level = (level-1)|1;
170
84.4k
                    level = -level;
171
84.4k
                } else {
172
3.31k
                    level = (level*quant_matrix[j]) >> 4;
173
3.31k
                    level = (level-1)|1;
174
3.31k
                }
175
87.7k
            }
176
177
7.66M
            block[j] = level;
178
7.66M
        }
179
2.70M
        CLOSE_READER(re, &s->gb);
180
2.70M
    }
181
0
    return 0;
182
2.71M
}
183
184
static int decode_motion(GetBitContext *gb)
185
3.68M
{
186
3.68M
    int value = 0;
187
3.68M
    if (get_bits1(gb)) {
188
1.59M
        if (get_bits1(gb))
189
781k
            value = -17;
190
1.59M
        value += get_bits(gb, 4) + 1;
191
1.59M
    }
192
3.68M
    return value;
193
3.68M
}
194
195
static int decode_mb(MadContext *s, AVFrame *frame, int inter, int mb_x, int mb_y)
196
905k
{
197
905k
    int mv_map = 0;
198
905k
    int av_uninit(mv_x), av_uninit(mv_y);
199
905k
    int j;
200
201
905k
    if (inter) {
202
887k
        int v = decode210(&s->gb);
203
887k
        if (v < 2) {
204
491k
            mv_map = v ? get_bits(&s->gb, 6) : 63;
205
491k
            mv_x = decode_motion(&s->gb);
206
491k
            mv_y = decode_motion(&s->gb);
207
491k
        }
208
887k
    }
209
210
6.30M
    for (j=0; j<6; j++) {
211
5.41M
        if (mv_map & (1<<j)) {  // mv_x and mv_y are guarded by mv_map
212
2.69M
            int add = 2*decode_motion(&s->gb);
213
2.69M
            if (s->last_frame->data[0])
214
2.69M
                comp_block(s, frame, mb_x, mb_y, j, mv_x, mv_y, add);
215
2.71M
        } else {
216
2.71M
            s->bdsp.clear_block(s->block);
217
2.71M
            if (decode_block_intra(s, s->block) < 0) {
218
11.8k
                av_log(s->avctx, AV_LOG_ERROR,
219
11.8k
                        "ac-tex damaged at %d %d\n", mb_x, mb_y);
220
11.8k
                return -1;
221
11.8k
            }
222
2.70M
            idct_put(s, frame, s->block, mb_x, mb_y, j);
223
2.70M
        }
224
5.41M
    }
225
894k
    return 0;
226
905k
}
227
228
static void calc_quant_matrix(MadContext *s, int qscale)
229
748k
{
230
748k
    int i;
231
232
748k
    s->quant_matrix[0] = (ff_inv_aanscales[0]*ff_mpeg1_default_intra_matrix[0]) >> 11;
233
47.8M
    for (i=1; i<64; i++)
234
47.1M
        s->quant_matrix[i] = (ff_inv_aanscales[i]*ff_mpeg1_default_intra_matrix[i]*qscale + 32) >> 10;
235
748k
}
236
237
static int decode_frame(AVCodecContext *avctx, AVFrame *frame,
238
                        int *got_frame, AVPacket *avpkt)
239
748k
{
240
748k
    const uint8_t *buf = avpkt->data;
241
748k
    int buf_size       = avpkt->size;
242
748k
    MadContext *s     = avctx->priv_data;
243
748k
    GetByteContext gb;
244
748k
    int width, height;
245
748k
    int chunk_type;
246
748k
    int inter, ret;
247
248
748k
    bytestream2_init(&gb, buf, buf_size);
249
250
748k
    chunk_type = bytestream2_get_le32(&gb);
251
748k
    inter = (chunk_type == MADm_TAG || chunk_type == MADe_TAG);
252
748k
    bytestream2_skip(&gb, 10);
253
254
748k
    av_reduce(&avctx->framerate.den, &avctx->framerate.num,
255
748k
              bytestream2_get_le16(&gb), 1000, 1<<30);
256
257
748k
    width  = bytestream2_get_le16(&gb);
258
748k
    height = bytestream2_get_le16(&gb);
259
748k
    bytestream2_skip(&gb, 1);
260
748k
    calc_quant_matrix(s, bytestream2_get_byte(&gb));
261
748k
    bytestream2_skip(&gb, 2);
262
263
748k
    if (bytestream2_get_bytes_left(&gb) < 2) {
264
576k
        av_log(avctx, AV_LOG_ERROR, "Input data too small\n");
265
576k
        return AVERROR_INVALIDDATA;
266
576k
    }
267
268
171k
    if (width < 16 || height < 16) {
269
1.44k
        av_log(avctx, AV_LOG_ERROR, "Dimensions too small\n");
270
1.44k
        return AVERROR_INVALIDDATA;
271
1.44k
    }
272
273
170k
    if (avctx->width != width || avctx->height != height) {
274
30.6k
        av_frame_unref(s->last_frame);
275
30.6k
        if((width * (int64_t)height)/2048*7 > bytestream2_get_bytes_left(&gb))
276
10.9k
            return AVERROR_INVALIDDATA;
277
19.6k
        if ((ret = ff_set_dimensions(avctx, width, height)) < 0)
278
40
            return ret;
279
19.6k
    }
280
281
159k
    if ((ret = ff_get_buffer(avctx, frame, AV_GET_BUFFER_FLAG_REF)) < 0)
282
194
        return ret;
283
284
159k
    if (inter && !s->last_frame->data[0]) {
285
19.2k
        av_log(avctx, AV_LOG_WARNING, "Missing reference frame.\n");
286
19.2k
        ret = ff_get_buffer(avctx, s->last_frame, AV_GET_BUFFER_FLAG_REF);
287
19.2k
        if (ret < 0)
288
0
            return ret;
289
19.2k
        memset(s->last_frame->data[0], 0, s->last_frame->height *
290
19.2k
               s->last_frame->linesize[0]);
291
19.2k
        memset(s->last_frame->data[1], 0x80, s->last_frame->height / 2 *
292
19.2k
               s->last_frame->linesize[1]);
293
19.2k
        memset(s->last_frame->data[2], 0x80, s->last_frame->height / 2 *
294
19.2k
               s->last_frame->linesize[2]);
295
19.2k
    }
296
297
159k
    av_fast_padded_malloc(&s->bitstream_buf, &s->bitstream_buf_size,
298
159k
                          bytestream2_get_bytes_left(&gb));
299
159k
    if (!s->bitstream_buf)
300
0
        return AVERROR(ENOMEM);
301
159k
    s->bbdsp.bswap16_buf(s->bitstream_buf, (const uint16_t *)(buf + bytestream2_tell(&gb)),
302
159k
                         bytestream2_get_bytes_left(&gb) / 2);
303
159k
    memset((uint8_t*)s->bitstream_buf + bytestream2_get_bytes_left(&gb), 0, AV_INPUT_BUFFER_PADDING_SIZE);
304
159k
    init_get_bits(&s->gb, s->bitstream_buf, 8*(bytestream2_get_bytes_left(&gb)));
305
306
336k
    for (int mb_y = 0; mb_y < (avctx->height + 15) / 16; mb_y++)
307
1.08M
        for (int mb_x = 0; mb_x < (avctx->width + 15) / 16; mb_x++)
308
905k
            if (decode_mb(s, frame, inter, mb_x, mb_y) < 0)
309
11.8k
                return AVERROR_INVALIDDATA;
310
311
147k
    *got_frame = 1;
312
313
147k
    if (chunk_type != MADe_TAG) {
314
139k
        if ((ret = av_frame_replace(s->last_frame, frame)) < 0)
315
0
            return ret;
316
139k
    }
317
318
147k
    return buf_size;
319
147k
}
320
321
static av_cold int decode_end(AVCodecContext *avctx)
322
2.01k
{
323
2.01k
    MadContext *t = avctx->priv_data;
324
2.01k
    av_frame_free(&t->last_frame);
325
2.01k
    av_freep(&t->bitstream_buf);
326
2.01k
    return 0;
327
2.01k
}
328
329
const FFCodec ff_eamad_decoder = {
330
    .p.name         = "eamad",
331
    CODEC_LONG_NAME("Electronic Arts Madcow Video"),
332
    .p.type         = AVMEDIA_TYPE_VIDEO,
333
    .p.id           = AV_CODEC_ID_MAD,
334
    .priv_data_size = sizeof(MadContext),
335
    .init           = decode_init,
336
    .close          = decode_end,
337
    FF_CODEC_DECODE_CB(decode_frame),
338
    .p.capabilities = AV_CODEC_CAP_DR1,
339
};