Coverage Report

Created: 2026-02-14 06:59

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ffmpeg/libavformat/vividas.c
Line
Count
Source
1
/*
2
 * Vividas VIV format Demuxer
3
 * Copyright (c) 2012 Krzysztof Klinikowski
4
 * Copyright (c) 2010 Andrzej Szombierski
5
 * based on vivparse Copyright (c) 2007 Måns Rullgård
6
 *
7
 * This file is part of FFmpeg.
8
 *
9
 * FFmpeg is free software; you can redistribute it and/or
10
 * modify it under the terms of the GNU Lesser General Public
11
 * License as published by the Free Software Foundation; either
12
 * version 2.1 of the License, or (at your option) any later version.
13
 *
14
 * FFmpeg is distributed in the hope that it will be useful,
15
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
17
 * Lesser General Public License for more details.
18
 *
19
 * You should have received a copy of the GNU Lesser General Public
20
 * License along with FFmpeg; if not, write to the Free Software
21
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
22
 */
23
24
/**
25
 * @file
26
 * @brief Vividas VIV (.viv) file demuxer
27
 * @author Andrzej Szombierski [qq at kuku eu org] (2010-07)
28
 * @sa http://wiki.multimedia.cx/index.php?title=Vividas_VIV
29
 */
30
31
#include "libavutil/avassert.h"
32
#include "libavutil/intreadwrite.h"
33
#include "libavutil/mem.h"
34
#include "avio_internal.h"
35
#include "avformat.h"
36
#include "demux.h"
37
#include "internal.h"
38
39
81
#define MAX_AUDIO_SUBPACKETS 100
40
41
typedef struct VIV_SB_block {
42
    int size, n_packets;
43
    int64_t byte_offset;
44
    int64_t packet_offset;
45
} VIV_SB_block;
46
47
typedef struct VIV_SB_entry {
48
    int size, flag;
49
} VIV_SB_entry;
50
51
typedef struct VIV_AudioSubpacket {
52
    int start, pcm_bytes;
53
} VIV_AudioSubpacket;
54
55
typedef struct VividasDemuxContext {
56
    int n_sb_blocks;
57
    VIV_SB_block *sb_blocks;
58
    int num_audio;
59
60
    uint32_t sb_key;
61
    int64_t sb_offset;
62
63
    int current_sb, current_sb_entry;
64
    uint8_t *sb_buf;
65
    AVIOContext *sb_pb;
66
    int n_sb_entries;
67
    VIV_SB_entry *sb_entries;
68
69
    int n_audio_subpackets;
70
    int current_audio_subpacket;
71
72
    int64_t audio_sample;
73
74
    VIV_AudioSubpacket audio_subpackets[MAX_AUDIO_SUBPACKETS];
75
} VividasDemuxContext;
76
77
static int viv_probe(const AVProbeData *p)
78
936k
{
79
936k
    if (memcmp(p->buf, "vividas03", 9))
80
936k
        return 0;
81
82
464
    return AVPROBE_SCORE_MAX;
83
936k
}
84
85
static const uint8_t keybits[32] = {
86
 20,  52, 111,  10,  27,  71, 142,  53,
87
 82, 138,   1,  78,  86, 121, 183,  85,
88
105, 152,  39, 140, 172,  11,  64, 144,
89
155,   6,  71, 163, 186,  49, 126,  43,
90
};
91
92
static uint32_t decode_key(uint8_t *buf)
93
3.37k
{
94
3.37k
    uint32_t key = 0;
95
96
111k
    for (int i = 0; i < 32; i++) {
97
108k
        unsigned p = keybits[i];
98
108k
        key |= ((buf[p] >> ((i*5+3)&7)) & 1u) << i;
99
108k
    }
100
101
3.37k
    return key;
102
3.37k
}
103
104
static void put_v(uint8_t *p, unsigned v)
105
113
{
106
113
    if (v>>28)
107
0
        *p++ = ((v>>28)&0x7f)|0x80;
108
113
    if (v>>21)
109
3
        *p++ = ((v>>21)&0x7f)|0x80;
110
113
    if (v>>14)
111
3
        *p++ = ((v>>14)&0x7f)|0x80;
112
113
    if (v>>7)
113
93
        *p++ =  ((v>>7)&0x7f)|0x80;
114
113
}
115
116
static unsigned recover_key(unsigned char sample[4], unsigned expected_size)
117
113
{
118
113
    unsigned char plaintext[8] = { 'S', 'B' };
119
120
113
    put_v(plaintext+2, expected_size);
121
122
113
    return AV_RL32(sample) ^ AV_RL32(plaintext);
123
113
}
124
125
static void xor_block(void *p1, void *p2, unsigned size, int key, unsigned *key_ptr)
126
2.84k
{
127
2.84k
    unsigned *d1 = p1;
128
2.84k
    unsigned *d2 = p2;
129
2.84k
    unsigned k = *key_ptr;
130
131
2.84k
    size >>= 2;
132
133
533k
    while (size > 0) {
134
530k
        *d2 = *d1 ^ (HAVE_BIGENDIAN ? av_bswap32(k) : k);
135
530k
        k += key;
136
530k
        d1++;
137
530k
        d2++;
138
530k
        size--;
139
530k
    }
140
141
2.84k
    *key_ptr = k;
142
2.84k
}
143
144
static void decode_block(uint8_t *src, uint8_t *dest, unsigned size,
145
                         uint32_t key, uint32_t *key_ptr,
146
                         int align)
147
2.10k
{
148
2.10k
    unsigned s = size;
149
2.10k
    char tmp[4];
150
2.10k
    int a2;
151
152
2.10k
    if (!size)
153
12
        return;
154
155
2.09k
    align &= 3;
156
2.09k
    a2 = (4 - align) & 3;
157
158
2.09k
    if (align) {
159
180
        uint32_t tmpkey = *key_ptr - key;
160
180
        if (a2 > s) {
161
1
            a2 = s;
162
1
            avpriv_request_sample(NULL, "tiny aligned block");
163
1
        }
164
180
        memcpy(tmp + align, src, a2);
165
180
        xor_block(tmp, tmp, 4, key, &tmpkey);
166
180
        memcpy(dest, tmp + align, a2);
167
180
        s -= a2;
168
180
    }
169
170
2.09k
    if (s >= 4) {
171
1.98k
        xor_block(src + a2, dest + a2, s & ~3,
172
1.98k
                  key, key_ptr);
173
1.98k
        s &= 3;
174
1.98k
    }
175
176
2.09k
    if (s) {
177
679
        size -= s;
178
679
        memcpy(tmp, src + size, s);
179
679
        xor_block(&tmp, &tmp, 4, key, key_ptr);
180
679
        memcpy(dest + size, tmp, s);
181
679
    }
182
2.09k
}
183
184
static uint32_t get_v(uint8_t *p, int len)
185
1.14k
{
186
1.14k
    uint32_t v = 0;
187
1.14k
    const uint8_t *end = p + len;
188
189
1.63k
    do {
190
1.63k
        if (p >= end || v >= UINT_MAX / 128 - *p)
191
18
            return v;
192
1.61k
        v <<= 7;
193
1.61k
        v += *p & 0x7f;
194
1.61k
    } while (*p++ & 0x80);
195
196
1.12k
    return v;
197
1.14k
}
198
199
static uint8_t *read_vblock(AVIOContext *src, uint32_t *size,
200
                            uint32_t key, uint32_t *k2, int align)
201
493
{
202
493
    uint8_t tmp[4];
203
493
    uint8_t *buf;
204
493
    unsigned n;
205
206
493
    if (avio_read(src, tmp, 4) != 4)
207
17
        return NULL;
208
209
476
    decode_block(tmp, tmp, 4, key, k2, align);
210
211
476
    n = get_v(tmp, 4);
212
476
    if (n < 4)
213
2
        return NULL;
214
215
474
    buf = av_malloc(n);
216
474
    if (!buf)
217
0
        return NULL;
218
219
474
    *size = n;
220
474
    n -= 4;
221
222
474
    memcpy(buf, tmp, 4);
223
224
474
    if (avio_read(src, buf + 4, n) == n) {
225
441
        decode_block(buf + 4, buf + 4, n, key, k2, align);
226
441
    } else {
227
33
        av_free(buf);
228
33
        buf = NULL;
229
33
    }
230
231
474
    return buf;
232
474
}
233
234
static uint8_t *read_sb_block(AVIOContext *src, unsigned *size,
235
                              uint32_t *key, unsigned expected_size)
236
579
{
237
579
    uint8_t *buf;
238
579
    uint8_t ibuf[8], sbuf[8];
239
579
    uint32_t k2;
240
579
    unsigned n;
241
242
579
    if (avio_read(src, ibuf, 8) < 8)
243
22
        return NULL;
244
245
557
    k2 = *key;
246
557
    decode_block(ibuf, sbuf, 8, *key, &k2, 0);
247
248
557
    n = get_v(sbuf+2, 6);
249
250
557
    if (sbuf[0] != 'S' || sbuf[1] != 'B' || (expected_size>0 && n != expected_size)) {
251
113
        uint32_t tmpkey = recover_key(ibuf, expected_size);
252
113
        k2 = tmpkey;
253
113
        decode_block(ibuf, sbuf, 8, tmpkey, &k2, 0);
254
113
        n = get_v(sbuf+2, 6);
255
113
        if (sbuf[0] != 'S' || sbuf[1] != 'B' || expected_size != n)
256
21
            return NULL;
257
92
        *key = tmpkey;
258
92
    }
259
260
536
    if (n < 8)
261
7
        return NULL;
262
263
529
    buf = av_malloc(n);
264
529
    if (!buf)
265
0
        return NULL;
266
267
529
    memcpy(buf, sbuf, 8);
268
269
529
    *size = n;
270
529
    n -= 8;
271
272
529
    if (avio_read(src, buf+8, n) != n) {
273
9
        av_free(buf);
274
9
        return NULL;
275
9
    }
276
277
520
    decode_block(buf + 8, buf + 8, n, *key, &k2, 0);
278
279
520
    return buf;
280
529
}
281
282
static int track_header(VividasDemuxContext *viv, AVFormatContext *s,
283
                        const uint8_t *buf, int size)
284
289
{
285
289
    int i, j, ret;
286
289
    int64_t off;
287
289
    int val_1;
288
289
    int num_video;
289
289
    FFIOContext pb0;
290
289
    AVIOContext *const pb = &pb0.pub;
291
292
289
    ffio_init_read_context(&pb0, buf, size);
293
294
289
    ffio_read_varlen(pb); // track_header_len
295
289
    avio_r8(pb); // '1'
296
297
289
    val_1 = ffio_read_varlen(pb);
298
299
1.18k
    for (i=0;i<val_1;i++) {
300
951
        int c = avio_r8(pb);
301
951
        if (avio_feof(pb))
302
4
            return AVERROR_EOF;
303
79.9k
        for (j=0;j<c;j++) {
304
79.0k
            if (avio_feof(pb))
305
47
                return AVERROR_EOF;
306
79.0k
            avio_r8(pb); // val_3
307
79.0k
            avio_r8(pb); // val_4
308
79.0k
        }
309
947
    }
310
311
238
    avio_r8(pb); // num_streams
312
313
238
    off = avio_tell(pb);
314
238
    off += ffio_read_varlen(pb); // val_5
315
316
238
    avio_r8(pb); // '2'
317
238
    num_video = avio_r8(pb);
318
319
238
    avio_seek(pb, off, SEEK_SET);
320
238
    if (num_video != 1) {
321
8
        av_log(s, AV_LOG_ERROR, "number of video tracks %d is not 1\n", num_video);
322
8
        return AVERROR_PATCHWELCOME;
323
8
    }
324
325
460
    for (i = 0; i < num_video; i++) {
326
230
        AVStream *st = avformat_new_stream(s, NULL);
327
230
        int num, den;
328
329
230
        if (!st)
330
0
            return AVERROR(ENOMEM);
331
332
230
        st->id = i;
333
334
230
        st->codecpar->codec_type = AVMEDIA_TYPE_VIDEO;
335
230
        st->codecpar->codec_id = AV_CODEC_ID_VP6;
336
337
230
        off = avio_tell(pb);
338
230
        off += ffio_read_varlen(pb);
339
230
        avio_r8(pb); // '3'
340
230
        avio_r8(pb); // val_7
341
230
        num = avio_rl32(pb); // frame_time
342
230
        den = avio_rl32(pb); // time_base
343
230
        avpriv_set_pts_info(st, 64, num, den);
344
230
        st->nb_frames = avio_rl32(pb); // n frames
345
230
        st->codecpar->width = avio_rl16(pb); // width
346
230
        st->codecpar->height = avio_rl16(pb); // height
347
230
        avio_r8(pb); // val_8
348
230
        avio_rl32(pb); // val_9
349
350
230
        avio_seek(pb, off, SEEK_SET);
351
230
    }
352
353
230
    off = avio_tell(pb);
354
230
    off += ffio_read_varlen(pb); // val_10
355
230
    avio_r8(pb); // '4'
356
230
    viv->num_audio = avio_r8(pb);
357
230
    avio_seek(pb, off, SEEK_SET);
358
359
230
    if (viv->num_audio != 1)
360
177
        av_log(s, AV_LOG_WARNING, "number of audio tracks %d is not 1\n", viv->num_audio);
361
362
9.56k
    for(i=0;i<viv->num_audio;i++) {
363
9.40k
        int q;
364
9.40k
        AVStream *st = avformat_new_stream(s, NULL);
365
9.40k
        if (!st)
366
0
            return AVERROR(ENOMEM);
367
368
9.40k
        st->id = num_video + i;
369
370
9.40k
        st->codecpar->codec_type = AVMEDIA_TYPE_AUDIO;
371
9.40k
        st->codecpar->codec_id = AV_CODEC_ID_VORBIS;
372
373
9.40k
        off = avio_tell(pb);
374
9.40k
        off += ffio_read_varlen(pb); // length
375
9.40k
        avio_r8(pb); // '5'
376
9.40k
        avio_r8(pb); //codec_id
377
9.40k
        avio_rl16(pb); //codec_subid
378
9.40k
        st->codecpar->ch_layout.nb_channels = avio_rl16(pb); // channels
379
9.40k
        st->codecpar->sample_rate = avio_rl32(pb); // sample_rate
380
9.40k
        if (st->codecpar->sample_rate <= 0 || st->codecpar->ch_layout.nb_channels <= 0)
381
66
            return AVERROR_INVALIDDATA;
382
9.34k
        avio_seek(pb, 10, SEEK_CUR); // data_1
383
9.34k
        q = avio_r8(pb);
384
9.34k
        avio_seek(pb, q, SEEK_CUR); // data_2
385
9.34k
        avio_r8(pb); // zeropad
386
387
9.34k
        if (avio_tell(pb) < off) {
388
933
            int num_data;
389
933
            int xd_size = 1;
390
933
            int data_len[256];
391
933
            int offset = 1;
392
933
            uint8_t *p;
393
933
            ffio_read_varlen(pb); // val_13
394
933
            avio_r8(pb); // '19'
395
933
            ffio_read_varlen(pb); // len_3
396
933
            num_data = avio_r8(pb);
397
7.97k
            for (j = 0; j < num_data; j++) {
398
7.05k
                int64_t len = ffio_read_varlen(pb);
399
7.05k
                if (len < 0 || len > INT_MAX/2 - xd_size) {
400
8
                    return AVERROR_INVALIDDATA;
401
8
                }
402
7.04k
                data_len[j] = len;
403
7.04k
                xd_size += len + 1 + len/255;
404
7.04k
            }
405
406
925
            ret = ff_alloc_extradata(st->codecpar, xd_size);
407
925
            if (ret < 0)
408
0
                return ret;
409
410
925
            p = st->codecpar->extradata;
411
925
            p[0] = 2;
412
413
7.08k
            for (j = 0; j < num_data - 1; j++) {
414
6.16k
                unsigned delta = av_xiphlacing(&p[offset], data_len[j]);
415
6.16k
                av_assert0(delta <= xd_size - offset);
416
6.16k
                offset += delta;
417
6.16k
            }
418
419
3.07k
            for (j = 0; j < num_data; j++) {
420
2.21k
                int ret = avio_read(pb, &p[offset], data_len[j]);
421
2.21k
                if (ret < data_len[j]) {
422
64
                    st->codecpar->extradata_size = 0;
423
64
                    av_freep(&st->codecpar->extradata);
424
64
                    break;
425
64
                }
426
2.15k
                av_assert0(data_len[j] <= xd_size - offset);
427
2.15k
                offset += data_len[j];
428
2.15k
            }
429
430
925
            if (offset < st->codecpar->extradata_size)
431
715
                st->codecpar->extradata_size = offset;
432
925
        }
433
9.34k
    }
434
435
156
    return 0;
436
230
}
437
438
static int track_index(VividasDemuxContext *viv, AVFormatContext *s,
439
                       const uint8_t *buf, unsigned size)
440
150
{
441
150
    int64_t off;
442
150
    int64_t poff;
443
150
    int maxnp=0;
444
150
    FFIOContext pb0;
445
150
    AVIOContext *const pb = &pb0.pub;
446
150
    int i;
447
150
    int64_t filesize = avio_size(s->pb);
448
150
    uint64_t n_sb_blocks_tmp;
449
450
150
    ffio_init_read_context(&pb0, buf, size);
451
452
150
    ffio_read_varlen(pb); // track_index_len
453
150
    avio_r8(pb); // 'c'
454
150
    n_sb_blocks_tmp = ffio_read_varlen(pb);
455
150
    if (n_sb_blocks_tmp > size / 2)
456
3
        return AVERROR_INVALIDDATA;
457
147
    viv->sb_blocks = av_calloc(n_sb_blocks_tmp, sizeof(*viv->sb_blocks));
458
147
    if (!viv->sb_blocks) {
459
0
        return AVERROR(ENOMEM);
460
0
    }
461
147
    viv->n_sb_blocks = n_sb_blocks_tmp;
462
463
147
    off = 0;
464
147
    poff = 0;
465
466
1.77k
    for (i = 0; i < viv->n_sb_blocks; i++) {
467
1.63k
        uint64_t size_tmp      = ffio_read_varlen(pb);
468
1.63k
        uint64_t n_packets_tmp = ffio_read_varlen(pb);
469
470
1.63k
        if (size_tmp > INT_MAX || n_packets_tmp > INT_MAX)
471
7
            return AVERROR_INVALIDDATA;
472
473
1.62k
        viv->sb_blocks[i].byte_offset = off;
474
1.62k
        viv->sb_blocks[i].packet_offset = poff;
475
476
1.62k
        viv->sb_blocks[i].size = size_tmp;
477
1.62k
        viv->sb_blocks[i].n_packets = n_packets_tmp;
478
479
1.62k
        off += viv->sb_blocks[i].size;
480
1.62k
        poff += viv->sb_blocks[i].n_packets;
481
482
1.62k
        if (maxnp < viv->sb_blocks[i].n_packets)
483
184
            maxnp = viv->sb_blocks[i].n_packets;
484
1.62k
    }
485
486
140
    if (filesize > 0 && poff > filesize)
487
3
        return AVERROR_INVALIDDATA;
488
489
137
    viv->sb_entries = av_calloc(maxnp, sizeof(VIV_SB_entry));
490
137
    if (!viv->sb_entries)
491
0
        return AVERROR(ENOMEM);
492
493
137
    return 0;
494
137
}
495
496
static void load_sb_block(AVFormatContext *s, VividasDemuxContext *viv, unsigned expected_size)
497
579
{
498
579
    uint32_t size = 0;
499
579
    int i;
500
579
    AVIOContext *pb = 0;
501
502
579
    if (viv->sb_pb) {
503
454
        av_free(viv->sb_pb);
504
454
        viv->sb_pb = NULL;
505
454
    }
506
507
579
    if (viv->sb_buf)
508
454
        av_free(viv->sb_buf);
509
510
579
    viv->sb_buf = read_sb_block(s->pb, &size, &viv->sb_key, expected_size);
511
579
    if (!viv->sb_buf) {
512
59
        return;
513
59
    }
514
515
520
    pb = avio_alloc_context(viv->sb_buf, size, 0, NULL, NULL, NULL, NULL);
516
520
    if (!pb)
517
0
        return;
518
519
520
    viv->sb_pb = pb;
520
521
520
    avio_r8(pb); //  'S'
522
520
    avio_r8(pb); //  'B'
523
520
    ffio_read_varlen(pb); //  size
524
520
    avio_r8(pb); //  junk
525
520
    ffio_read_varlen(pb); // first packet
526
527
520
    viv->n_sb_entries = viv->sb_blocks[viv->current_sb].n_packets;
528
529
6.47k
    for (i = 0; i < viv->n_sb_entries; i++) {
530
5.95k
        viv->sb_entries[i].size = ffio_read_varlen(pb);
531
5.95k
        viv->sb_entries[i].flag = avio_r8(pb);
532
5.95k
    }
533
534
520
    ffio_read_varlen(pb);
535
520
    avio_r8(pb);
536
537
520
    viv->current_sb_entry = 0;
538
520
}
539
540
static int viv_read_header(AVFormatContext *s)
541
523
{
542
523
    VividasDemuxContext *viv = s->priv_data;
543
523
    AVIOContext *pb = s->pb;
544
523
    int64_t header_end;
545
523
    int num_tracks;
546
523
    uint32_t key, k2;
547
523
    uint32_t v;
548
523
    uint8_t keybuffer[187];
549
523
    uint32_t b22_size = 0;
550
523
    uint32_t b22_key = 0;
551
523
    uint8_t *buf = 0;
552
523
    int ret;
553
554
523
    avio_skip(pb, 9);
555
556
523
    header_end = avio_tell(pb);
557
558
523
    header_end += ffio_read_varlen(pb);
559
560
523
    num_tracks = avio_r8(pb);
561
562
523
    if (num_tracks != 1) {
563
40
        av_log(s, AV_LOG_ERROR, "number of tracks %d is not 1\n", num_tracks);
564
40
        return AVERROR(EINVAL);
565
40
    }
566
567
483
    v = avio_r8(pb);
568
483
    avio_seek(pb, v, SEEK_CUR);
569
570
483
    ret = ffio_read_size(pb, keybuffer, 187);
571
483
    if (ret < 0)
572
2
        return ret;
573
481
    key = decode_key(keybuffer);
574
481
    viv->sb_key = key;
575
576
481
    avio_rl32(pb);
577
578
16.5k
    for (;;) {
579
16.5k
        int64_t here = avio_tell(pb);
580
16.5k
        int block_len, block_type;
581
582
16.5k
        if (here >= header_end)
583
335
            break;
584
585
16.1k
        block_len = ffio_read_varlen(pb);
586
16.1k
        if (avio_feof(pb) || block_len <= 0)
587
146
            return AVERROR_INVALIDDATA;
588
589
16.0k
        block_type = avio_r8(pb);
590
591
16.0k
        if (block_type == 22) {
592
2.89k
            avio_read(pb, keybuffer, 187);
593
2.89k
            b22_key = decode_key(keybuffer);
594
2.89k
            b22_size = avio_rl32(pb);
595
2.89k
        }
596
597
16.0k
        avio_seek(pb, here + block_len, SEEK_SET);
598
16.0k
    }
599
600
335
    if (b22_size) {
601
5
        k2 = b22_key;
602
5
        buf = read_vblock(pb, &v, b22_key, &k2, 0);
603
5
        if (!buf)
604
3
            return AVERROR_INVALIDDATA;
605
606
2
        av_free(buf);
607
2
    }
608
609
332
    k2 = key;
610
332
    buf = read_vblock(pb, &v, key, &k2, 0);
611
332
    if (!buf)
612
43
        return AVERROR_INVALIDDATA;
613
289
    ret = track_header(viv, s, buf, v);
614
289
    av_free(buf);
615
289
    if (ret < 0)
616
133
        return ret;
617
618
156
    buf = read_vblock(pb, &v, key, &k2, v);
619
156
    if (!buf)
620
6
        return AVERROR_INVALIDDATA;
621
150
    ret = track_index(viv, s, buf, v);
622
150
    av_free(buf);
623
150
    if (ret < 0)
624
13
        return ret;
625
626
137
    viv->sb_offset = avio_tell(pb);
627
137
    if (viv->n_sb_blocks > 0) {
628
125
        viv->current_sb = 0;
629
125
        load_sb_block(s, viv, viv->sb_blocks[0].size);
630
125
    } else {
631
12
        viv->current_sb = -1;
632
12
    }
633
634
137
    return 0;
635
150
}
636
637
static int viv_read_packet(AVFormatContext *s,
638
                           AVPacket *pkt)
639
3.80k
{
640
3.80k
    VividasDemuxContext *viv = s->priv_data;
641
3.80k
    AVIOContext *pb;
642
3.80k
    int64_t off;
643
3.80k
    int ret;
644
645
3.80k
    if (!viv->sb_pb)
646
102
        return AVERROR_INVALIDDATA;
647
3.70k
    if (avio_feof(viv->sb_pb))
648
94
        return AVERROR_EOF;
649
650
3.60k
    if (viv->current_audio_subpacket < viv->n_audio_subpackets) {
651
42
        AVStream *astream;
652
42
        int size = viv->audio_subpackets[viv->current_audio_subpacket+1].start - viv->audio_subpackets[viv->current_audio_subpacket].start;
653
654
42
        pb = viv->sb_pb;
655
42
        ret = av_get_packet(pb, pkt, size);
656
42
        if (ret < 0)
657
0
            return ret;
658
42
        pkt->pos += viv->sb_offset + viv->sb_blocks[viv->current_sb].byte_offset;
659
660
42
        pkt->stream_index = 1;
661
42
        astream = s->streams[pkt->stream_index];
662
663
42
        pkt->pts = av_rescale_q(viv->audio_sample, av_make_q(1, astream->codecpar->sample_rate), astream->time_base);
664
42
        viv->audio_sample += viv->audio_subpackets[viv->current_audio_subpacket].pcm_bytes / 2 /
665
42
                             astream->codecpar->ch_layout.nb_channels;
666
42
        pkt->flags |= AV_PKT_FLAG_KEY;
667
42
        viv->current_audio_subpacket++;
668
42
        return 0;
669
42
    }
670
671
3.56k
    if (viv->current_sb_entry >= viv->n_sb_entries) {
672
456
        if (viv->current_sb+1 >= viv->n_sb_blocks)
673
2
            return AVERROR_INVALIDDATA;
674
454
        viv->current_sb++;
675
676
454
        load_sb_block(s, viv, 0);
677
454
        viv->current_sb_entry = 0;
678
454
    }
679
680
3.56k
    pb = viv->sb_pb;
681
3.56k
    if (!pb)
682
25
        return AVERROR_INVALIDDATA;
683
3.53k
    off = avio_tell(pb);
684
685
3.53k
    if (viv->current_sb_entry >= viv->n_sb_entries)
686
0
        return AVERROR_INVALIDDATA;
687
688
3.53k
    off += viv->sb_entries[viv->current_sb_entry].size;
689
690
3.53k
    if (viv->sb_entries[viv->current_sb_entry].flag == 0) {
691
19
        uint64_t v_size = ffio_read_varlen(pb);
692
19
        int last = 0, last_start;
693
694
19
        if (!viv->num_audio)
695
1
            return AVERROR_INVALIDDATA;
696
697
18
        ffio_read_varlen(pb);
698
18
        if (v_size > INT_MAX || !v_size)
699
0
            return AVERROR_INVALIDDATA;
700
18
        ret = av_get_packet(pb, pkt, v_size);
701
18
        if (ret < 0)
702
0
            return ret;
703
18
        pkt->pos += viv->sb_offset + viv->sb_blocks[viv->current_sb].byte_offset;
704
705
18
        pkt->pts = viv->sb_blocks[viv->current_sb].packet_offset + viv->current_sb_entry;
706
18
        pkt->flags |= (pkt->data[0]&0x80)?0:AV_PKT_FLAG_KEY;
707
18
        pkt->stream_index = 0;
708
709
81
        for (int i = 0; i < MAX_AUDIO_SUBPACKETS - 1; i++) {
710
81
            int start, pcm_bytes;
711
81
            start = ffio_read_varlen(pb);
712
81
            pcm_bytes = ffio_read_varlen(pb);
713
714
81
            if (i > 0 && start == 0)
715
6
                break;
716
75
            if (start < last)
717
12
                return AVERROR_INVALIDDATA;
718
719
63
            viv->n_audio_subpackets = i + 1;
720
63
            last =
721
63
            viv->audio_subpackets[i].start = start;
722
63
            viv->audio_subpackets[i].pcm_bytes = pcm_bytes;
723
63
        }
724
6
        last_start =
725
6
        viv->audio_subpackets[viv->n_audio_subpackets].start = (int)(off - avio_tell(pb));
726
6
        if (last_start < last)
727
1
            return AVERROR_INVALIDDATA;
728
5
        viv->current_audio_subpacket = 0;
729
730
3.52k
    } else {
731
3.52k
        uint64_t v_size = ffio_read_varlen(pb);
732
733
3.52k
        if (v_size > INT_MAX || !v_size)
734
8
            return AVERROR_INVALIDDATA;
735
3.51k
        ret = av_get_packet(pb, pkt, v_size);
736
3.51k
        if (ret < 0)
737
1
            return ret;
738
3.51k
        pkt->pos += viv->sb_offset + viv->sb_blocks[viv->current_sb].byte_offset;
739
3.51k
        pkt->pts = viv->sb_blocks[viv->current_sb].packet_offset + viv->current_sb_entry;
740
3.51k
        pkt->flags |= (pkt->data[0] & 0x80) ? 0 : AV_PKT_FLAG_KEY;
741
3.51k
        pkt->stream_index = 0;
742
3.51k
    }
743
744
3.51k
    viv->current_sb_entry++;
745
746
3.51k
    return 0;
747
3.53k
}
748
749
static int viv_read_close(AVFormatContext *s)
750
523
{
751
523
    VividasDemuxContext *viv = s->priv_data;
752
753
523
    av_freep(&viv->sb_pb);
754
523
    av_freep(&viv->sb_buf);
755
523
    av_freep(&viv->sb_blocks);
756
523
    av_freep(&viv->sb_entries);
757
758
523
    return 0;
759
523
}
760
761
static int viv_read_seek(AVFormatContext *s, int stream_index, int64_t timestamp, int flags)
762
0
{
763
0
    VividasDemuxContext *viv = s->priv_data;
764
0
    int64_t frame;
765
766
0
    if (stream_index == 0)
767
0
        frame = timestamp;
768
0
    else
769
0
        frame = av_rescale_q(timestamp, s->streams[0]->time_base, s->streams[stream_index]->time_base);
770
771
0
    for (int i = 0; i < viv->n_sb_blocks; i++) {
772
0
        if (frame >= viv->sb_blocks[i].packet_offset && frame < viv->sb_blocks[i].packet_offset + viv->sb_blocks[i].n_packets) {
773
0
            viv->current_sb = i;
774
            // seek to ith sb block
775
0
            avio_seek(s->pb, viv->sb_offset + viv->sb_blocks[i].byte_offset, SEEK_SET);
776
            // load the block
777
0
            load_sb_block(s, viv, 0);
778
0
            if (viv->num_audio) {
779
0
                const AVCodecParameters *par = s->streams[1]->codecpar;
780
                // flush audio packet queue
781
0
                viv->current_audio_subpacket = 0;
782
0
                viv->n_audio_subpackets      = 0;
783
                // most problematic part: guess audio offset
784
0
                viv->audio_sample = av_rescale_q(viv->sb_blocks[i].packet_offset,
785
0
                                                 av_make_q(par->sample_rate, 1),
786
0
                                                 av_inv_q(s->streams[0]->time_base));
787
                // hand-tuned 1.s a/v offset
788
0
                viv->audio_sample += par->sample_rate;
789
0
            }
790
0
            viv->current_sb_entry = 0;
791
0
            return 1;
792
0
        }
793
0
    }
794
0
    return 0;
795
0
}
796
797
const FFInputFormat ff_vividas_demuxer = {
798
    .p.name         = "vividas",
799
    .p.long_name    = NULL_IF_CONFIG_SMALL("Vividas VIV"),
800
    .priv_data_size = sizeof(VividasDemuxContext),
801
    .flags_internal = FF_INFMT_FLAG_INIT_CLEANUP,
802
    .read_probe     = viv_probe,
803
    .read_header    = viv_read_header,
804
    .read_packet    = viv_read_packet,
805
    .read_close     = viv_read_close,
806
    .read_seek      = viv_read_seek,
807
};