Coverage Report

Created: 2025-12-31 07:57

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ffmpeg/libavformat/swfdec.c
Line
Count
Source
1
/*
2
 * Flash Compatible Streaming Format demuxer
3
 * Copyright (c) 2000 Fabrice Bellard
4
 * Copyright (c) 2003 Tinic Uro
5
 *
6
 * This file is part of FFmpeg.
7
 *
8
 * FFmpeg is free software; you can redistribute it and/or
9
 * modify it under the terms of the GNU Lesser General Public
10
 * License as published by the Free Software Foundation; either
11
 * version 2.1 of the License, or (at your option) any later version.
12
 *
13
 * FFmpeg is distributed in the hope that it will be useful,
14
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
16
 * Lesser General Public License for more details.
17
 *
18
 * You should have received a copy of the GNU Lesser General Public
19
 * License along with FFmpeg; if not, write to the Free Software
20
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
21
 */
22
23
#include "config.h"
24
25
#if CONFIG_ZLIB
26
#include <zlib.h>
27
#endif
28
29
#include "libavutil/avassert.h"
30
#include "libavutil/channel_layout.h"
31
#include "libavutil/imgutils.h"
32
#include "libavutil/internal.h"
33
#include "libavutil/intreadwrite.h"
34
#include "libavutil/mem.h"
35
#include "libavcodec/get_bits.h"
36
#include "demux.h"
37
#include "swf.h"
38
#include "flv.h"
39
40
typedef struct SWFDecContext {
41
    int samples_per_frame;
42
    int frame_rate;
43
#if CONFIG_ZLIB
44
37.6k
#define ZBUF_SIZE 4096
45
    AVIOContext *zpb;
46
    uint8_t *zbuf_in;
47
    uint8_t *zbuf_out;
48
    z_stream zstream;
49
#endif
50
} SWFDecContext;
51
52
static const AVCodecTag swf_audio_codec_tags[] = {
53
    { AV_CODEC_ID_PCM_S16LE,  0x00 },
54
    { AV_CODEC_ID_ADPCM_SWF,  0x01 },
55
    { AV_CODEC_ID_MP3,        0x02 },
56
    { AV_CODEC_ID_PCM_S16LE,  0x03 },
57
    { AV_CODEC_ID_NELLYMOSER, 0x06 },
58
    { AV_CODEC_ID_NONE,          0 },
59
};
60
61
static int get_swf_tag(AVIOContext *pb, int *len_ptr)
62
29.0M
{
63
29.0M
    int tag, len;
64
65
29.0M
    if (avio_feof(pb))
66
10.8k
        return AVERROR_EOF;
67
68
29.0M
    tag = avio_rl16(pb);
69
29.0M
    len = tag & 0x3f;
70
29.0M
    tag = tag >> 6;
71
29.0M
    if (len == 0x3f) {
72
148k
        len = avio_rl32(pb);
73
148k
    }
74
29.0M
    *len_ptr = len;
75
29.0M
    return tag;
76
29.0M
}
77
78
79
static int swf_probe(const AVProbeData *p)
80
942k
{
81
942k
    GetBitContext gb;
82
942k
    int len, xmin, xmax, ymin, ymax;
83
84
942k
    if(p->buf_size < 15)
85
140k
        return 0;
86
87
    /* check file header */
88
802k
    if (   AV_RB24(p->buf) != AV_RB24("CWS")
89
801k
        && AV_RB24(p->buf) != AV_RB24("FWS"))
90
799k
        return 0;
91
92
3.45k
    if (   AV_RB24(p->buf) == AV_RB24("CWS")
93
822
        && p->buf[3] <= 20)
94
570
        return AVPROBE_SCORE_MAX / 4 + 1;
95
96
2.88k
    if (init_get_bits8(&gb, p->buf + 8, p->buf_size - 8) < 0)
97
0
        return 0;
98
99
2.88k
    len = get_bits(&gb, 5);
100
2.88k
    if (!len)
101
446
        return 0;
102
2.43k
    xmin = get_bits_long(&gb, len);
103
2.43k
    xmax = get_bits_long(&gb, len);
104
2.43k
    ymin = get_bits_long(&gb, len);
105
2.43k
    ymax = get_bits_long(&gb, len);
106
2.43k
    if (xmin || ymin || !xmax || !ymax)
107
1.46k
        return 0;
108
109
971
    if (p->buf[3] >= 20 || xmax < 16 || ymax < 16)
110
849
        return AVPROBE_SCORE_MAX / 4;
111
112
122
    return AVPROBE_SCORE_EXTENSION + 1;
113
971
}
114
115
#if CONFIG_ZLIB
116
static int zlib_refill(void *opaque, uint8_t *buf, int buf_size)
117
162k
{
118
162k
    AVFormatContext *s = opaque;
119
162k
    SWFDecContext *swf = s->priv_data;
120
162k
    z_stream *z = &swf->zstream;
121
162k
    int ret;
122
123
162k
retry:
124
162k
    if (!z->avail_in) {
125
24.8k
        int n = avio_read(s->pb, swf->zbuf_in, ZBUF_SIZE);
126
24.8k
        if (n < 0)
127
11.3k
            return n;
128
13.4k
        z->next_in  = swf->zbuf_in;
129
13.4k
        z->avail_in = n;
130
13.4k
    }
131
132
151k
    z->next_out  = buf;
133
151k
    z->avail_out = buf_size;
134
135
151k
    ret = inflate(z, Z_NO_FLUSH);
136
151k
    if (ret == Z_STREAM_END)
137
6
        return AVERROR_EOF;
138
151k
    if (ret != Z_OK)
139
1.20k
        return AVERROR(EINVAL);
140
141
149k
    if (buf_size - z->avail_out == 0)
142
113
        goto retry;
143
144
149k
    return buf_size - z->avail_out;
145
149k
}
146
147
static av_cold int swf_read_close(AVFormatContext *avctx);
148
#endif
149
150
static int swf_read_header(AVFormatContext *s)
151
6.34k
{
152
6.34k
    SWFDecContext *swf = s->priv_data;
153
6.34k
    AVIOContext *pb = s->pb;
154
6.34k
    int nbits, len, tag;
155
156
6.34k
    tag = avio_rb32(pb) & 0xffffff00;
157
6.34k
    avio_rl32(pb);
158
159
6.34k
    if (tag == MKBETAG('C', 'W', 'S', 0)) {
160
4.29k
        av_log(s, AV_LOG_INFO, "SWF compressed file detected\n");
161
4.29k
#if CONFIG_ZLIB
162
4.29k
        if (inflateInit(&swf->zstream) != Z_OK) {
163
0
            av_log(s, AV_LOG_ERROR, "Unable to init zlib context\n");
164
0
            return AVERROR(EINVAL);
165
0
        }
166
4.29k
        if (!(swf->zbuf_in  = av_malloc(ZBUF_SIZE)) ||
167
4.29k
            !(swf->zbuf_out = av_malloc(ZBUF_SIZE)) ||
168
4.29k
            !(swf->zpb = avio_alloc_context(swf->zbuf_out, ZBUF_SIZE, 0,
169
4.29k
                                            s, zlib_refill, NULL, NULL))) {
170
0
            swf_read_close(s);
171
0
            return AVERROR(ENOMEM);
172
0
        }
173
4.29k
        swf->zpb->seekable = 0;
174
4.29k
        pb = swf->zpb;
175
#else
176
        av_log(s, AV_LOG_ERROR, "zlib support is required to read SWF compressed files\n");
177
        return AVERROR(ENOSYS);
178
#endif
179
4.29k
    } else if (tag != MKBETAG('F', 'W', 'S', 0))
180
139
        return AVERROR_INVALIDDATA;
181
    /* skip rectangle size */
182
6.20k
    nbits = avio_r8(pb) >> 3;
183
6.20k
    len = (4 * nbits - 3 + 7) / 8;
184
6.20k
    avio_skip(pb, len);
185
6.20k
    swf->frame_rate = avio_rl16(pb); /* 8.8 fixed */
186
6.20k
    avio_rl16(pb); /* frame count */
187
188
6.20k
    swf->samples_per_frame = 0;
189
6.20k
    s->ctx_flags |= AVFMTCTX_NOHEADER;
190
6.20k
    return 0;
191
6.34k
}
192
193
static AVStream *create_new_audio_stream(AVFormatContext *s, int id, int info)
194
10.3k
{
195
10.3k
    int sample_rate_code, sample_size_code;
196
10.3k
    AVStream *ast = avformat_new_stream(s, NULL);
197
10.3k
    if (!ast)
198
0
        return NULL;
199
10.3k
    ast->id = id;
200
10.3k
    av_channel_layout_default(&ast->codecpar->ch_layout, 1 + (info & 1));
201
10.3k
    ast->codecpar->codec_type = AVMEDIA_TYPE_AUDIO;
202
10.3k
    ast->codecpar->codec_id   = ff_codec_get_id(swf_audio_codec_tags, info>>4 & 15);
203
10.3k
    ffstream(ast)->need_parsing = AVSTREAM_PARSE_FULL;
204
10.3k
    sample_rate_code = info>>2 & 3;
205
10.3k
    sample_size_code = info>>1 & 1;
206
10.3k
    if (!sample_size_code && ast->codecpar->codec_id == AV_CODEC_ID_PCM_S16LE)
207
1.17k
        ast->codecpar->codec_id = AV_CODEC_ID_PCM_U8;
208
10.3k
    ast->codecpar->sample_rate = 44100 >> (3 - sample_rate_code);
209
10.3k
    avpriv_set_pts_info(ast, 64, 1, ast->codecpar->sample_rate);
210
10.3k
    return ast;
211
10.3k
}
212
213
static int swf_read_packet(AVFormatContext *s, AVPacket *pkt)
214
11.0M
{
215
11.0M
    SWFDecContext *swf = s->priv_data;
216
11.0M
    AVIOContext *pb = s->pb;
217
11.0M
    AVStream *vst = NULL, *ast = NULL, *st = 0;
218
11.0M
    int tag, len, i, frame, v, res;
219
220
11.0M
#if CONFIG_ZLIB
221
11.0M
    if (swf->zpb)
222
11.0M
        pb = swf->zpb;
223
11.0M
#endif
224
225
29.0M
    for(;;) {
226
29.0M
        uint64_t pos = avio_tell(pb);
227
29.0M
        tag = get_swf_tag(pb, &len);
228
29.0M
        if (tag < 0)
229
10.8k
            return tag;
230
29.0M
        if (len < 0) {
231
11.3k
            av_log(s, AV_LOG_ERROR, "invalid tag length: %d\n", len);
232
11.3k
            return AVERROR_INVALIDDATA;
233
11.3k
        }
234
29.0M
        if (tag == TAG_VIDEOSTREAM) {
235
1.25M
            int ch_id = avio_rl16(pb);
236
1.25M
            len -= 2;
237
238
125M
            for (i=0; i<s->nb_streams; i++) {
239
125M
                st = s->streams[i];
240
125M
                if (st->codecpar->codec_type == AVMEDIA_TYPE_VIDEO && st->id == ch_id)
241
1.20M
                    goto skip;
242
125M
            }
243
244
44.1k
            avio_rl16(pb);
245
44.1k
            avio_rl16(pb);
246
44.1k
            avio_rl16(pb);
247
44.1k
            avio_r8(pb);
248
            /* Check for FLV1 */
249
44.1k
            vst = avformat_new_stream(s, NULL);
250
44.1k
            if (!vst)
251
0
                return AVERROR(ENOMEM);
252
44.1k
            vst->id = ch_id;
253
44.1k
            vst->codecpar->codec_type = AVMEDIA_TYPE_VIDEO;
254
44.1k
            vst->codecpar->codec_id = ff_codec_get_id(ff_swf_codec_tags, avio_r8(pb));
255
44.1k
            avpriv_set_pts_info(vst, 16, 256, swf->frame_rate);
256
44.1k
            len -= 8;
257
27.7M
        } else if (tag == TAG_STREAMHEAD || tag == TAG_STREAMHEAD2) {
258
            /* streaming found */
259
260
127k
            for (i=0; i<s->nb_streams; i++) {
261
125k
                st = s->streams[i];
262
125k
                if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO && st->id == -1)
263
6.95k
                    goto skip;
264
125k
            }
265
266
2.06k
            avio_r8(pb);
267
2.06k
            v = avio_r8(pb);
268
2.06k
            swf->samples_per_frame = avio_rl16(pb);
269
2.06k
            ast = create_new_audio_stream(s, -1, v); /* -1 to avoid clash with video stream ch_id */
270
2.06k
            if (!ast)
271
0
                return AVERROR(ENOMEM);
272
2.06k
            len -= 4;
273
27.7M
        } else if (tag == TAG_DEFINESOUND) {
274
            /* audio stream */
275
73.7k
            int ch_id = avio_rl16(pb);
276
277
2.79M
            for (i=0; i<s->nb_streams; i++) {
278
2.78M
                st = s->streams[i];
279
2.78M
                if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO && st->id == ch_id)
280
65.5k
                    goto skip;
281
2.78M
            }
282
283
            // FIXME: The entire audio stream is stored in a single chunk/tag. Normally,
284
            // these are smaller audio streams in DEFINESOUND tags, but it's technically
285
            // possible they could be huge. Break it up into multiple packets if it's big.
286
8.24k
            v = avio_r8(pb);
287
8.24k
            ast = create_new_audio_stream(s, ch_id, v);
288
8.24k
            if (!ast)
289
0
                return AVERROR(ENOMEM);
290
8.24k
            ast->duration = avio_rl32(pb); // number of samples
291
8.24k
            if (((v>>4) & 15) == 2) { // MP3 sound data record
292
499
                ffstream(ast)->skip_samples = avio_rl16(pb);
293
499
                len -= 2;
294
499
            }
295
8.24k
            len -= 7;
296
8.24k
            if ((res = av_get_packet(pb, pkt, len)) < 0)
297
519
                return res;
298
7.72k
            pkt->pos = pos;
299
7.72k
            pkt->stream_index = ast->index;
300
7.72k
            return pkt->size;
301
27.6M
        } else if (tag == TAG_VIDEOFRAME) {
302
5.47M
            int ch_id = avio_rl16(pb);
303
5.47M
            len -= 2;
304
71.3M
            for(i=0; i<s->nb_streams; i++) {
305
70.6M
                st = s->streams[i];
306
70.6M
                if (st->codecpar->codec_type == AVMEDIA_TYPE_VIDEO && st->id == ch_id) {
307
4.83M
                    int pkt_flags = 0;
308
4.83M
                    frame = avio_rl16(pb);
309
4.83M
                    len -= 2;
310
4.83M
                    if (len <= 0)
311
3.53k
                        goto skip;
312
4.83M
                    if (st->codecpar->codec_id == AV_CODEC_ID_FLASHSV) {
313
1.81k
                        unsigned flags = avio_r8(pb);
314
1.81k
                        len--;
315
1.81k
                        if (len <= 0)
316
202
                            goto skip;
317
1.61k
                        pkt_flags |= (flags & FLV_VIDEO_FRAMETYPE_MASK) == FLV_FRAME_KEY ? AV_PKT_FLAG_KEY : 0;
318
1.61k
                    }
319
4.83M
                    if ((res = av_get_packet(pb, pkt, len)) < 0)
320
55
                        return res;
321
4.83M
                    pkt->pos = pos;
322
4.83M
                    pkt->pts = frame;
323
4.83M
                    pkt->stream_index = st->index;
324
4.83M
                    pkt->flags |= pkt_flags;
325
4.83M
                    return pkt->size;
326
4.83M
                }
327
70.6M
            }
328
22.2M
        } else if (tag == TAG_DEFINEBITSLOSSLESS || tag == TAG_DEFINEBITSLOSSLESS2) {
329
120k
#if CONFIG_ZLIB
330
120k
            long out_len;
331
120k
            uint8_t *buf = NULL, *zbuf = NULL, *pal;
332
120k
            uint32_t colormap[AVPALETTE_COUNT] = {0};
333
120k
            const int alpha_bmp = tag == TAG_DEFINEBITSLOSSLESS2;
334
120k
            const int colormapbpp = 3 + alpha_bmp;
335
120k
            int linesize, colormapsize = 0;
336
337
120k
            const int ch_id   = avio_rl16(pb);
338
120k
            const int bmp_fmt = avio_r8(pb);
339
120k
            const int width   = avio_rl16(pb);
340
120k
            const int height  = avio_rl16(pb);
341
120k
            int pix_fmt;
342
343
120k
            len -= 2+1+2+2;
344
345
120k
            switch (bmp_fmt) {
346
1.93k
            case 3: // PAL-8
347
1.93k
                linesize = width;
348
1.93k
                colormapsize = avio_r8(pb) + 1;
349
1.93k
                len--;
350
1.93k
                break;
351
2.33k
            case 4: // RGB15
352
2.33k
                linesize = width * 2;
353
2.33k
                break;
354
55.8k
            case 5: // RGB24 (0RGB)
355
55.8k
                linesize = width * 4;
356
55.8k
                break;
357
60.6k
            default:
358
60.6k
                av_log(s, AV_LOG_ERROR, "invalid bitmap format %d, skipped\n", bmp_fmt);
359
60.6k
                goto bitmap_end_skip;
360
120k
            }
361
362
60.1k
            linesize = FFALIGN(linesize, 4);
363
364
60.1k
            if (av_image_check_size(width, height, 0, s) < 0 ||
365
56.7k
                linesize >= INT_MAX / height ||
366
56.7k
                linesize * height >= INT_MAX - colormapsize * colormapbpp) {
367
3.34k
                av_log(s, AV_LOG_ERROR, "invalid frame size %dx%d\n", width, height);
368
3.34k
                goto bitmap_end_skip;
369
3.34k
            }
370
371
56.7k
            out_len = colormapsize * colormapbpp + linesize * height;
372
373
56.7k
            ff_dlog(s, "bitmap: ch=%d fmt=%d %dx%d (linesize=%d) len=%d->%ld pal=%d\n",
374
56.7k
                    ch_id, bmp_fmt, width, height, linesize, len, out_len, colormapsize);
375
376
56.7k
            if (len * 17373LL < out_len)
377
35.5k
                goto bitmap_end_skip;
378
379
21.2k
            zbuf = av_malloc(len);
380
21.2k
            if (!zbuf) {
381
0
                res = AVERROR(ENOMEM);
382
0
                goto bitmap_end;
383
0
            }
384
385
21.2k
            len = avio_read(pb, zbuf, len);
386
21.2k
            if (len < 0)
387
33
                goto bitmap_end_skip;
388
389
21.2k
            buf  = av_malloc(out_len);
390
21.2k
            if (!buf) {
391
0
                res = AVERROR(ENOMEM);
392
0
                goto bitmap_end;
393
0
            }
394
21.2k
            if ((res = uncompress(buf, &out_len, zbuf, len)) != Z_OK) {
395
20.4k
                av_log(s, AV_LOG_WARNING, "Failed to uncompress one bitmap\n");
396
20.4k
                goto bitmap_end_skip;
397
20.4k
            }
398
399
1.92k
            for (i = 0; i < s->nb_streams; i++) {
400
1.84k
                st = s->streams[i];
401
1.84k
                if (st->codecpar->codec_id == AV_CODEC_ID_RAWVIDEO && st->id == -3)
402
709
                    break;
403
1.84k
            }
404
791
            if (i == s->nb_streams) {
405
82
                vst = avformat_new_stream(s, NULL);
406
82
                if (!vst) {
407
0
                    res = AVERROR(ENOMEM);
408
0
                    goto bitmap_end;
409
0
                }
410
82
                vst->id = -3; /* -3 to avoid clash with video stream and audio stream */
411
82
                vst->codecpar->codec_type = AVMEDIA_TYPE_VIDEO;
412
82
                vst->codecpar->codec_id = AV_CODEC_ID_RAWVIDEO;
413
82
                avpriv_set_pts_info(vst, 64, 256, swf->frame_rate);
414
82
                st = vst;
415
82
            }
416
417
791
            if ((res = av_new_packet(pkt, out_len - colormapsize * colormapbpp)) < 0)
418
270
                goto bitmap_end;
419
521
            if (!st->codecpar->width && !st->codecpar->height) {
420
67
                st->codecpar->width  = width;
421
67
                st->codecpar->height = height;
422
454
            } else {
423
454
                ff_add_param_change(pkt, 0, 0, 0, width, height);
424
454
            }
425
521
            pkt->pos = pos;
426
521
            pkt->stream_index = st->index;
427
428
521
            if (linesize * height > pkt->size) {
429
521
                res = AVERROR_INVALIDDATA;
430
521
                goto bitmap_end;
431
521
            }
432
433
0
            switch (bmp_fmt) {
434
0
            case 3:
435
0
                pix_fmt = AV_PIX_FMT_PAL8;
436
0
                for (i = 0; i < colormapsize; i++)
437
0
                    if (alpha_bmp)  colormap[i] = buf[3]<<24 | AV_RB24(buf + 4*i);
438
0
                    else            colormap[i] = 0xffU <<24 | AV_RB24(buf + 3*i);
439
0
                pal = av_packet_new_side_data(pkt, AV_PKT_DATA_PALETTE, AVPALETTE_SIZE);
440
0
                if (!pal) {
441
0
                    res = AVERROR(ENOMEM);
442
0
                    goto bitmap_end;
443
0
                }
444
0
                memcpy(pal, colormap, AVPALETTE_SIZE);
445
0
                break;
446
0
            case 4:
447
0
                pix_fmt = AV_PIX_FMT_RGB555;
448
0
                break;
449
0
            case 5:
450
0
                pix_fmt = alpha_bmp ? AV_PIX_FMT_ARGB : AV_PIX_FMT_0RGB;
451
0
                break;
452
0
            default:
453
0
                av_assert0(0);
454
0
            }
455
0
            if (st->codecpar->format != AV_PIX_FMT_NONE && st->codecpar->format != pix_fmt) {
456
0
                av_log(s, AV_LOG_ERROR, "pixel format change unsupported\n");
457
0
            } else
458
0
                st->codecpar->format = pix_fmt;
459
460
0
            memcpy(pkt->data, buf + colormapsize*colormapbpp, linesize * height);
461
462
0
            res = pkt->size;
463
464
791
bitmap_end:
465
791
            av_freep(&zbuf);
466
791
            av_freep(&buf);
467
791
            return res;
468
119k
bitmap_end_skip:
469
119k
            av_freep(&zbuf);
470
119k
            av_freep(&buf);
471
#else
472
            av_log(s, AV_LOG_ERROR, "this file requires zlib support compiled in\n");
473
#endif
474
22.0M
        } else if (tag == TAG_STREAMBLOCK) {
475
6.22M
            for (i = 0; i < s->nb_streams; i++) {
476
6.21M
                st = s->streams[i];
477
6.21M
                if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO && st->id == -1) {
478
6.11M
                    if (st->codecpar->codec_id == AV_CODEC_ID_MP3) {
479
26.2k
                        avio_skip(pb, 4);
480
26.2k
                        len -= 4;
481
26.2k
                        if (len <= 0)
482
354
                            goto skip;
483
25.8k
                        if ((res = av_get_packet(pb, pkt, len)) < 0)
484
344
                            return res;
485
6.09M
                    } else { // ADPCM, PCM
486
6.09M
                        if (len <= 0)
487
393
                            goto skip;
488
6.09M
                        if ((res = av_get_packet(pb, pkt, len)) < 0)
489
448
                            return res;
490
6.09M
                    }
491
6.11M
                    pkt->pos          = pos;
492
6.11M
                    pkt->stream_index = st->index;
493
6.11M
                    return pkt->size;
494
6.11M
                }
495
6.21M
            }
496
15.9M
        } else if (tag == TAG_JPEG2) {
497
895k
            for (i=0; i<s->nb_streams; i++) {
498
893k
                st = s->streams[i];
499
893k
                if (st->codecpar->codec_id == AV_CODEC_ID_MJPEG && st->id == -2)
500
647k
                    break;
501
893k
            }
502
648k
            if (i == s->nb_streams) {
503
1.36k
                vst = avformat_new_stream(s, NULL);
504
1.36k
                if (!vst)
505
0
                    return AVERROR(ENOMEM);
506
1.36k
                vst->id = -2; /* -2 to avoid clash with video stream and audio stream */
507
1.36k
                vst->codecpar->codec_type = AVMEDIA_TYPE_VIDEO;
508
1.36k
                vst->codecpar->codec_id = AV_CODEC_ID_MJPEG;
509
1.36k
                avpriv_set_pts_info(vst, 64, 256, swf->frame_rate);
510
1.36k
                st = vst;
511
1.36k
            }
512
648k
            avio_rl16(pb); /* BITMAP_ID */
513
648k
            len -= 2;
514
648k
            if (len < 4)
515
560k
                goto skip;
516
88.5k
            if ((res = av_new_packet(pkt, len)) < 0)
517
195
                return res;
518
88.3k
            if (avio_read(pb, pkt->data, 4) != 4) {
519
193
                return AVERROR_INVALIDDATA;
520
193
            }
521
88.1k
            if (AV_RB32(pkt->data) == 0xffd8ffd9 ||
522
87.8k
                AV_RB32(pkt->data) == 0xffd9ffd8) {
523
                /* old SWF files containing SOI/EOI as data start */
524
                /* files created by swink have reversed tag */
525
595
                pkt->size -= 4;
526
595
                memset(pkt->data+pkt->size, 0, 4);
527
595
                res = avio_read(pb, pkt->data, pkt->size);
528
87.5k
            } else {
529
87.5k
                res = avio_read(pb, pkt->data + 4, pkt->size - 4);
530
87.5k
                if (res >= 0)
531
87.5k
                    res += 4;
532
87.5k
            }
533
88.1k
            if (res != pkt->size) {
534
193
                if (res < 0) {
535
25
                    return res;
536
25
                }
537
168
                av_shrink_packet(pkt, res);
538
168
            }
539
540
88.0k
            pkt->pos = pos;
541
88.0k
            pkt->stream_index = st->index;
542
88.0k
            return pkt->size;
543
15.3M
        } else {
544
15.3M
            av_log(s, AV_LOG_DEBUG, "Unknown tag: %d\n", tag);
545
15.3M
        }
546
17.9M
    skip:
547
17.9M
        if(len<0)
548
651k
            av_log(s, AV_LOG_WARNING, "Clipping len %d\n", len);
549
17.9M
        len = FFMAX(0, len);
550
17.9M
        avio_skip(pb, len);
551
17.9M
    }
552
11.0M
}
553
554
#if CONFIG_ZLIB
555
static av_cold int swf_read_close(AVFormatContext *avctx)
556
6.20k
{
557
6.20k
    SWFDecContext *s = avctx->priv_data;
558
6.20k
    inflateEnd(&s->zstream);
559
6.20k
    av_freep(&s->zbuf_in);
560
6.20k
    av_freep(&s->zbuf_out);
561
6.20k
    avio_context_free(&s->zpb);
562
6.20k
    return 0;
563
6.20k
}
564
#endif
565
566
const FFInputFormat ff_swf_demuxer = {
567
    .p.name         = "swf",
568
    .p.long_name    = NULL_IF_CONFIG_SMALL("SWF (ShockWave Flash)"),
569
    .priv_data_size = sizeof(SWFDecContext),
570
    .read_probe     = swf_probe,
571
    .read_header    = swf_read_header,
572
    .read_packet    = swf_read_packet,
573
#if CONFIG_ZLIB
574
    .read_close     = swf_read_close,
575
#endif
576
};