Coverage Report

Created: 2026-04-01 07:42

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ffmpeg/libavformat/asfdec_f.c
Line
Count
Source
1
/*
2
 * ASF compatible demuxer
3
 * Copyright (c) 2000, 2001 Fabrice Bellard
4
 *
5
 * This file is part of FFmpeg.
6
 *
7
 * FFmpeg is free software; you can redistribute it and/or
8
 * modify it under the terms of the GNU Lesser General Public
9
 * License as published by the Free Software Foundation; either
10
 * version 2.1 of the License, or (at your option) any later version.
11
 *
12
 * FFmpeg is distributed in the hope that it will be useful,
13
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15
 * Lesser General Public License for more details.
16
 *
17
 * You should have received a copy of the GNU Lesser General Public
18
 * License along with FFmpeg; if not, write to the Free Software
19
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20
 */
21
22
#include <inttypes.h>
23
24
#include "libavutil/attributes.h"
25
#include "libavutil/avassert.h"
26
#include "libavutil/avstring.h"
27
#include "libavutil/bswap.h"
28
#include "libavutil/common.h"
29
#include "libavutil/dict.h"
30
#include "libavutil/internal.h"
31
#include "libavutil/mathematics.h"
32
#include "libavutil/mem.h"
33
#include "libavutil/opt.h"
34
#include "avformat.h"
35
#include "avio_internal.h"
36
#include "avlanguage.h"
37
#include "demux.h"
38
#include "internal.h"
39
#include "riff.h"
40
#include "asf.h"
41
#include "asfcrypt.h"
42
43
typedef struct ASFPayload {
44
    uint8_t type;
45
    uint16_t size;
46
} ASFPayload;
47
48
typedef struct ASFStream {
49
    int num;
50
    unsigned char seq;
51
    /* use for reading */
52
    AVPacket pkt;
53
    int frag_offset;
54
    int packet_obj_size;
55
    int timestamp;
56
    int64_t duration;
57
    int skip_to_key;
58
    int pkt_clean;
59
60
    int ds_span;                /* descrambling  */
61
    int ds_packet_size;
62
    int ds_chunk_size;
63
64
    int64_t packet_pos;
65
66
    uint16_t stream_language_index;
67
68
    int      palette_changed;
69
    uint32_t palette[256];
70
71
    int payload_ext_ct;
72
    ASFPayload payload[8];
73
} ASFStream;
74
75
typedef struct ASFContext {
76
    const AVClass *class;
77
    int asfid2avid[128];                 ///< conversion table from asf ID 2 AVStream ID
78
    ASFStream streams[128];              ///< it's max number and it's not that big
79
    uint32_t stream_bitrates[128];       ///< max number of streams, bitrate for each (for streaming)
80
    AVRational dar[128];
81
    char stream_languages[128][6];       ///< max number of streams, language for each (RFC1766, e.g. en-US)
82
    /* non streamed additonnal info */
83
    /* packet filling */
84
    int packet_size_left;
85
    /* only for reading */
86
    uint64_t data_offset;                ///< beginning of the first data packet
87
    uint64_t data_object_offset;         ///< data object offset (excl. GUID & size)
88
    uint64_t data_object_size;           ///< size of the data object
89
    int index_read;
90
91
    ASFMainHeader hdr;
92
93
    int packet_flags;
94
    int packet_property;
95
    int packet_timestamp;
96
    int packet_segsizetype;
97
    int packet_segments;
98
    int packet_seq;
99
    int packet_replic_size;
100
    int packet_key_frame;
101
    int packet_padsize;
102
    unsigned int packet_frag_offset;
103
    unsigned int packet_frag_size;
104
    int64_t packet_frag_timestamp;
105
    int ts_is_pts;
106
    int packet_multi_size;
107
    int packet_time_delta;
108
    int64_t packet_time_start;
109
    int64_t packet_pos;
110
111
    int stream_index;
112
113
    ASFStream *asf_st;                   ///< currently decoded stream
114
115
    int no_resync_search;
116
    int export_xmp;
117
118
    int uses_std_ecc;
119
} ASFContext;
120
121
static const AVOption options[] = {
122
    { "no_resync_search", "Don't try to resynchronize by looking for a certain optional start code", offsetof(ASFContext, no_resync_search), AV_OPT_TYPE_BOOL, { .i64 = 0 }, 0, 1, AV_OPT_FLAG_DECODING_PARAM },
123
    { "export_xmp", "Export full XMP metadata", offsetof(ASFContext, export_xmp), AV_OPT_TYPE_BOOL, { .i64 = 0 }, 0, 1, AV_OPT_FLAG_DECODING_PARAM },
124
    { NULL },
125
};
126
127
static const AVClass asf_class = {
128
    .class_name = "asf demuxer",
129
    .item_name  = av_default_item_name,
130
    .option     = options,
131
    .version    = LIBAVUTIL_VERSION_INT,
132
};
133
134
#undef NDEBUG
135
#include <assert.h>
136
137
34.2k
#define ASF_MAX_STREAMS 127
138
23.4M
#define FRAME_HEADER_SIZE 6
139
// Fix Me! FRAME_HEADER_SIZE may be different.
140
// (7 is known to be too large for GipsyGuitar.wmv)
141
142
#ifdef DEBUG
143
static const ff_asf_guid stream_bitrate_guid = { /* (http://get.to/sdp) */
144
    0xce, 0x75, 0xf8, 0x7b, 0x8d, 0x46, 0xd1, 0x11, 0x8d, 0x82, 0x00, 0x60, 0x97, 0xc9, 0xa2, 0xb2
145
};
146
147
static const ff_asf_guid asf_audio_conceal_none = {
148
    // 0x40, 0xa4, 0xf1, 0x49, 0x4ece, 0x11d0, 0xa3, 0xac, 0x00, 0xa0, 0xc9, 0x03, 0x48, 0xf6
149
    // New value lifted from avifile
150
    0x00, 0x57, 0xfb, 0x20, 0x55, 0x5B, 0xCF, 0x11, 0xa8, 0xfd, 0x00, 0x80, 0x5f, 0x5c, 0x44, 0x2b
151
};
152
153
#define PRINT_IF_GUID(g, cmp) \
154
    if (!ff_guidcmp(g, &(cmp))) \
155
        av_log(NULL, AV_LOG_TRACE, "(GUID: %s) ", # cmp)
156
157
static void print_guid(ff_asf_guid *g)
158
{
159
    int i;
160
    PRINT_IF_GUID(g, ff_asf_header);
161
    else PRINT_IF_GUID(g, ff_asf_file_header);
162
    else PRINT_IF_GUID(g, ff_asf_stream_header);
163
    else PRINT_IF_GUID(g, ff_asf_audio_stream);
164
    else PRINT_IF_GUID(g, asf_audio_conceal_none);
165
    else PRINT_IF_GUID(g, ff_asf_video_stream);
166
    else PRINT_IF_GUID(g, ff_asf_video_conceal_none);
167
    else PRINT_IF_GUID(g, ff_asf_command_stream);
168
    else PRINT_IF_GUID(g, ff_asf_comment_header);
169
    else PRINT_IF_GUID(g, ff_asf_codec_comment_header);
170
    else PRINT_IF_GUID(g, ff_asf_codec_comment1_header);
171
    else PRINT_IF_GUID(g, ff_asf_data_header);
172
    else PRINT_IF_GUID(g, ff_asf_simple_index_header);
173
    else PRINT_IF_GUID(g, ff_asf_head1_guid);
174
    else PRINT_IF_GUID(g, ff_asf_head2_guid);
175
    else PRINT_IF_GUID(g, ff_asf_my_guid);
176
    else PRINT_IF_GUID(g, ff_asf_ext_stream_header);
177
    else PRINT_IF_GUID(g, ff_asf_extended_content_header);
178
    else PRINT_IF_GUID(g, ff_asf_ext_stream_embed_stream_header);
179
    else PRINT_IF_GUID(g, ff_asf_ext_stream_audio_stream);
180
    else PRINT_IF_GUID(g, ff_asf_metadata_header);
181
    else PRINT_IF_GUID(g, ff_asf_metadata_library_header);
182
    else PRINT_IF_GUID(g, ff_asf_marker_header);
183
    else PRINT_IF_GUID(g, stream_bitrate_guid);
184
    else PRINT_IF_GUID(g, ff_asf_language_guid);
185
    else
186
        av_log(NULL, AV_LOG_TRACE, "(GUID: unknown) ");
187
    for (i = 0; i < 16; i++)
188
        av_log(NULL, AV_LOG_TRACE, " 0x%02x,", (*g)[i]);
189
    av_log(NULL, AV_LOG_TRACE, "}\n");
190
}
191
#undef PRINT_IF_GUID
192
#else
193
85.0k
#define print_guid(g) while(0)
194
#endif
195
196
static int asf_probe(const AVProbeData *pd)
197
959k
{
198
    /* check file header */
199
959k
    if (!ff_guidcmp(pd->buf, &ff_asf_header))
200
3.41k
        return AVPROBE_SCORE_MAX;
201
955k
    else
202
955k
        return 0;
203
959k
}
204
205
/* size of type 2 (BOOL) is 32bit for "Extended Content Description Object"
206
 * but 16 bit for "Metadata Object" and "Metadata Library Object" */
207
static int get_value(AVIOContext *pb, int type, int type2_size)
208
2.72k
{
209
2.72k
    switch (type) {
210
1.13k
    case ASF_BOOL:
211
1.13k
        return (type2_size == 32) ? avio_rl32(pb) : avio_rl16(pb);
212
661
    case ASF_DWORD:
213
661
        return avio_rl32(pb);
214
448
    case ASF_QWORD:
215
448
        return avio_rl64(pb);
216
410
    case ASF_WORD:
217
410
        return avio_rl16(pb);
218
70
    default:
219
70
        return INT_MIN;
220
2.72k
    }
221
2.72k
}
222
223
static void get_tag(AVFormatContext *s, const char *key, int type, int len, int type2_size)
224
47.9M
{
225
47.9M
    ASFContext *asf = s->priv_data;
226
47.9M
    char *value = NULL;
227
47.9M
    int64_t off = avio_tell(s->pb);
228
48.3M
#define LEN 22
229
230
47.9M
    av_assert0((unsigned)len < (INT_MAX - LEN) / 2);
231
232
47.9M
    if (!asf->export_xmp && !strncmp(key, "xmp", 3))
233
0
        goto finish;
234
235
47.9M
    value = av_malloc(2 * len + LEN);
236
47.9M
    if (!value)
237
0
        goto finish;
238
239
47.9M
    switch (type) {
240
47.8M
    case ASF_UNICODE:
241
47.8M
        avio_get_str16le(s->pb, len, value, 2 * len + 1);
242
47.8M
        break;
243
1.53k
    case -1:; // ASCII
244
1.53k
        int ret = ffio_read_size(s->pb, value, len);
245
1.53k
        if (ret < 0)
246
1.27k
            goto finish;
247
262
        value[len]=0;
248
262
        break;
249
19.7k
    case ASF_BYTE_ARRAY:
250
19.7k
        if (ff_asf_handle_byte_array(s, key, len) > 0)
251
10.5k
            av_log(s, AV_LOG_VERBOSE, "Unsupported byte array in tag %s.\n", key);
252
19.7k
        goto finish;
253
1.10k
    case ASF_BOOL:
254
1.63k
    case ASF_DWORD:
255
2.07k
    case ASF_QWORD:
256
2.48k
    case ASF_WORD: {
257
2.48k
        uint64_t num = get_value(s->pb, type, type2_size);
258
2.48k
        snprintf(value, LEN, "%"PRIu64, num);
259
2.48k
        break;
260
2.07k
    }
261
568
    case ASF_GUID:
262
568
        av_log(s, AV_LOG_DEBUG, "Unsupported GUID value in tag %s.\n", key);
263
568
        goto finish;
264
55.7k
    default:
265
55.7k
        av_log(s, AV_LOG_DEBUG,
266
55.7k
               "Unsupported value type %d in tag %s.\n", type, key);
267
55.7k
        goto finish;
268
47.9M
    }
269
47.8M
    if (*value)
270
11.9k
        av_dict_set(&s->metadata, key, value, 0);
271
272
47.9M
finish:
273
47.9M
    av_freep(&value);
274
47.9M
    avio_seek(s->pb, off + len, SEEK_SET);
275
47.9M
}
276
277
static int asf_read_file_properties(AVFormatContext *s)
278
1.93k
{
279
1.93k
    ASFContext *asf = s->priv_data;
280
1.93k
    AVIOContext *pb = s->pb;
281
282
1.93k
    ff_get_guid(pb, &asf->hdr.guid);
283
1.93k
    asf->hdr.file_size   = avio_rl64(pb);
284
1.93k
    asf->hdr.create_time = avio_rl64(pb);
285
1.93k
    avio_rl64(pb);                               /* number of packets */
286
1.93k
    asf->hdr.play_time   = avio_rl64(pb);
287
1.93k
    asf->hdr.send_time   = avio_rl64(pb);
288
1.93k
    asf->hdr.preroll     = avio_rl32(pb);
289
1.93k
    asf->hdr.ignore      = avio_rl32(pb);
290
1.93k
    asf->hdr.flags       = avio_rl32(pb);
291
1.93k
    asf->hdr.min_pktsize = avio_rl32(pb);
292
1.93k
    asf->hdr.max_pktsize = avio_rl32(pb);
293
1.93k
    if (asf->hdr.min_pktsize >= (1U << 29))
294
4
        return AVERROR_INVALIDDATA;
295
1.92k
    asf->hdr.max_bitrate = avio_rl32(pb);
296
1.92k
    s->packet_size       = asf->hdr.max_pktsize;
297
298
1.92k
    return 0;
299
1.93k
}
300
301
static int asf_read_stream_properties(AVFormatContext *s, int64_t size)
302
34.2k
{
303
34.2k
    ASFContext *asf = s->priv_data;
304
34.2k
    AVIOContext *pb = s->pb;
305
34.2k
    AVStream *st;
306
34.2k
    FFStream *sti;
307
34.2k
    ASFStream *asf_st;
308
34.2k
    ff_asf_guid g;
309
34.2k
    enum AVMediaType type;
310
34.2k
    int type_specific_size, sizeX;
311
34.2k
    unsigned int tag1;
312
34.2k
    int64_t pos1, pos2, start_time;
313
34.2k
    int test_for_ext_stream_audio, is_dvr_ms_audio = 0;
314
315
34.2k
    if (s->nb_streams == ASF_MAX_STREAMS) {
316
1
        av_log(s, AV_LOG_ERROR, "too many streams\n");
317
1
        return AVERROR(EINVAL);
318
1
    }
319
320
34.2k
    pos1 = avio_tell(pb);
321
322
34.2k
    st = avformat_new_stream(s, NULL);
323
34.2k
    if (!st)
324
0
        return AVERROR(ENOMEM);
325
34.2k
    sti = ffstream(st);
326
34.2k
    avpriv_set_pts_info(st, 32, 1, 1000); /* 32 bit pts in ms */
327
34.2k
    start_time     = asf->hdr.preroll;
328
329
34.2k
    if (!(asf->hdr.flags & 0x01)) { // if we aren't streaming...
330
33.8k
        int64_t fsize = avio_size(pb);
331
33.8k
        if (fsize <= 0 || (int64_t)asf->hdr.file_size <= 0 ||
332
1.01k
            FFABS(fsize - (int64_t)asf->hdr.file_size) < FFMIN(fsize, asf->hdr.file_size)/20)
333
32.8k
            st->duration = asf->hdr.play_time /
334
32.8k
                       (10000000 / 1000) - start_time;
335
33.8k
    }
336
34.2k
    ff_get_guid(pb, &g);
337
338
34.2k
    test_for_ext_stream_audio = 0;
339
34.2k
    if (!ff_guidcmp(&g, &ff_asf_audio_stream)) {
340
4.28k
        type = AVMEDIA_TYPE_AUDIO;
341
30.0k
    } else if (!ff_guidcmp(&g, &ff_asf_video_stream)) {
342
3.01k
        type = AVMEDIA_TYPE_VIDEO;
343
26.9k
    } else if (!ff_guidcmp(&g, &ff_asf_jfif_media)) {
344
3.73k
        type                = AVMEDIA_TYPE_VIDEO;
345
3.73k
        st->codecpar->codec_id = AV_CODEC_ID_MJPEG;
346
23.2k
    } else if (!ff_guidcmp(&g, &ff_asf_command_stream)) {
347
645
        type = AVMEDIA_TYPE_DATA;
348
22.6k
    } else if (!ff_guidcmp(&g, &ff_asf_ext_stream_embed_stream_header)) {
349
22.5k
        test_for_ext_stream_audio = 1;
350
22.5k
        type                      = AVMEDIA_TYPE_UNKNOWN;
351
22.5k
    } else {
352
89
        return -1;
353
89
    }
354
34.1k
    ff_get_guid(pb, &g);
355
34.1k
    avio_skip(pb, 8); /* total_size */
356
34.1k
    type_specific_size = avio_rl32(pb);
357
34.1k
    avio_rl32(pb);
358
34.1k
    st->id = avio_rl16(pb) & 0x7f; /* stream id */
359
    // mapping of asf ID to AV stream ID;
360
34.1k
    asf->asfid2avid[st->id] = s->nb_streams - 1;
361
34.1k
    asf_st = &asf->streams[st->id];
362
363
34.1k
    avio_rl32(pb);
364
365
34.1k
    if (test_for_ext_stream_audio) {
366
22.5k
        ff_get_guid(pb, &g);
367
22.5k
        if (!ff_guidcmp(&g, &ff_asf_ext_stream_audio_stream)) {
368
21.5k
            type            = AVMEDIA_TYPE_AUDIO;
369
21.5k
            is_dvr_ms_audio = 1;
370
21.5k
            ff_get_guid(pb, &g);
371
21.5k
            avio_rl32(pb);
372
21.5k
            avio_rl32(pb);
373
21.5k
            avio_rl32(pb);
374
21.5k
            ff_get_guid(pb, &g);
375
21.5k
            avio_rl32(pb);
376
21.5k
        }
377
22.5k
    }
378
379
34.1k
    st->codecpar->codec_type = type;
380
34.1k
    if (type == AVMEDIA_TYPE_AUDIO) {
381
25.8k
        int ret = ff_get_wav_header(s, pb, st->codecpar, type_specific_size, 0);
382
25.8k
        if (ret < 0)
383
117
            return ret;
384
25.7k
        if (is_dvr_ms_audio) {
385
            // codec_id and codec_tag are unreliable in dvr_ms
386
            // files. Set them later by probing stream.
387
21.4k
            sti->request_probe = 1;
388
21.4k
            st->codecpar->codec_tag = 0;
389
21.4k
        }
390
25.7k
        if (st->codecpar->codec_id == AV_CODEC_ID_AAC)
391
80
            sti->need_parsing = AVSTREAM_PARSE_NONE;
392
25.6k
        else
393
25.6k
            sti->need_parsing = AVSTREAM_PARSE_FULL;
394
        /* We have to init the frame size at some point .... */
395
25.7k
        pos2 = avio_tell(pb);
396
25.7k
        if (size >= (pos2 + 8 - pos1 + 24)) {
397
2.97k
            asf_st->ds_span        = avio_r8(pb);
398
2.97k
            asf_st->ds_packet_size = avio_rl16(pb);
399
2.97k
            asf_st->ds_chunk_size  = avio_rl16(pb);
400
2.97k
            avio_rl16(pb);  // ds_data_size
401
2.97k
            avio_r8(pb);    // ds_silence_data
402
2.97k
        }
403
25.7k
        if (asf_st->ds_span > 1) {
404
1.68k
            if (!asf_st->ds_chunk_size                                ||
405
1.65k
                (asf_st->ds_packet_size / asf_st->ds_chunk_size <= 1) ||
406
395
                asf_st->ds_packet_size % asf_st->ds_chunk_size)
407
1.61k
                asf_st->ds_span = 0;  // disable descrambling
408
1.68k
        }
409
25.7k
    } else if (type == AVMEDIA_TYPE_VIDEO &&
410
6.74k
               size - (avio_tell(pb) - pos1 + 24) >= 51) {
411
6.10k
        avio_rl32(pb);
412
6.10k
        avio_rl32(pb);
413
6.10k
        avio_r8(pb);
414
6.10k
        avio_rl16(pb);        /* size */
415
6.10k
        sizeX             = avio_rl32(pb); /* size */
416
6.10k
        st->codecpar->width  = avio_rl32(pb);
417
6.10k
        st->codecpar->height = avio_rl32(pb);
418
        /* not available for asf */
419
6.10k
        avio_rl16(pb); /* panes */
420
6.10k
        st->codecpar->bits_per_coded_sample = avio_rl16(pb); /* depth */
421
6.10k
        tag1                             = avio_rl32(pb);
422
6.10k
        avio_skip(pb, 20);
423
6.10k
        if (sizeX > 40) {
424
634
            if (size < sizeX - 40 || sizeX - 40 > INT_MAX - AV_INPUT_BUFFER_PADDING_SIZE)
425
8
                return AVERROR_INVALIDDATA;
426
626
            st->codecpar->extradata_size = ffio_limit(pb, sizeX - 40);
427
626
            st->codecpar->extradata      = av_mallocz(st->codecpar->extradata_size +
428
626
                                                   AV_INPUT_BUFFER_PADDING_SIZE);
429
626
            if (!st->codecpar->extradata)
430
0
                return AVERROR(ENOMEM);
431
626
            avio_read(pb, st->codecpar->extradata, st->codecpar->extradata_size);
432
626
        }
433
434
        /* Extract palette from extradata if bpp <= 8 */
435
        /* This code assumes that extradata contains only palette */
436
        /* This is true for all paletted codecs implemented in libavcodec */
437
6.09k
        if (st->codecpar->extradata_size && (st->codecpar->bits_per_coded_sample <= 8)) {
438
#if HAVE_BIGENDIAN
439
            int i;
440
            for (i = 0; i < FFMIN(st->codecpar->extradata_size, AVPALETTE_SIZE) / 4; i++)
441
                asf_st->palette[i] = av_bswap32(((uint32_t *)st->codecpar->extradata)[i]);
442
#else
443
35
            memcpy(asf_st->palette, st->codecpar->extradata,
444
35
                   FFMIN(st->codecpar->extradata_size, AVPALETTE_SIZE));
445
35
#endif
446
35
            asf_st->palette_changed = 1;
447
35
        }
448
449
6.09k
        st->codecpar->codec_tag = tag1;
450
6.09k
        st->codecpar->codec_id  = ff_codec_get_id(ff_codec_bmp_tags, tag1);
451
6.09k
        if (!st->codecpar->codec_id)
452
2.94k
            st->codecpar->codec_id = ff_codec_get_id(ff_codec_bmp_tags_unofficial, tag1);
453
6.09k
        if (tag1 == MKTAG('D', 'V', 'R', ' ')) {
454
24
            sti->need_parsing = AVSTREAM_PARSE_FULL;
455
            /* issue658 contains wrong w/h and MS even puts a fake seq header
456
             * with wrong w/h in extradata while a correct one is in the stream.
457
             * maximum lameness */
458
24
            st->codecpar->width      =
459
24
                st->codecpar->height = 0;
460
24
            av_freep(&st->codecpar->extradata);
461
24
            st->codecpar->extradata_size = 0;
462
24
        }
463
6.09k
        if (st->codecpar->codec_id == AV_CODEC_ID_H264)
464
2.76k
            sti->need_parsing = AVSTREAM_PARSE_FULL_ONCE;
465
6.09k
        if (st->codecpar->codec_id == AV_CODEC_ID_MPEG4)
466
6
            sti->need_parsing = AVSTREAM_PARSE_FULL;
467
6.09k
        if (st->codecpar->codec_id == AV_CODEC_ID_HEVC)
468
69
            sti->need_parsing = AVSTREAM_PARSE_FULL;
469
6.09k
    }
470
34.0k
    pos2 = avio_tell(pb);
471
34.0k
    avio_skip(pb, size - (pos2 - pos1 + 24));
472
473
34.0k
    return 0;
474
34.1k
}
475
476
static int asf_read_ext_stream_properties(AVFormatContext *s)
477
1.13k
{
478
1.13k
    ASFContext *asf = s->priv_data;
479
1.13k
    AVIOContext *pb = s->pb;
480
1.13k
    ff_asf_guid g;
481
1.13k
    int ext_len, payload_ext_ct, stream_ct, i;
482
1.13k
    uint32_t leak_rate, stream_num;
483
1.13k
    unsigned int stream_languageid_index;
484
485
1.13k
    avio_rl64(pb); // starttime
486
1.13k
    avio_rl64(pb); // endtime
487
1.13k
    leak_rate = avio_rl32(pb); // leak-datarate
488
1.13k
    avio_rl32(pb); // bucket-datasize
489
1.13k
    avio_rl32(pb); // init-bucket-fullness
490
1.13k
    avio_rl32(pb); // alt-leak-datarate
491
1.13k
    avio_rl32(pb); // alt-bucket-datasize
492
1.13k
    avio_rl32(pb); // alt-init-bucket-fullness
493
1.13k
    avio_rl32(pb); // max-object-size
494
1.13k
    avio_rl32(pb); // flags (reliable,seekable,no_cleanpoints?,resend-live-cleanpoints, rest of bits reserved)
495
1.13k
    stream_num = avio_rl16(pb); // stream-num
496
497
1.13k
    stream_languageid_index = avio_rl16(pb); // stream-language-id-index
498
1.13k
    if (stream_num < 128)
499
1.00k
        asf->streams[stream_num].stream_language_index = stream_languageid_index;
500
501
1.13k
    avio_rl64(pb); // avg frametime in 100ns units
502
1.13k
    stream_ct      = avio_rl16(pb); // stream-name-count
503
1.13k
    payload_ext_ct = avio_rl16(pb); // payload-extension-system-count
504
505
1.13k
    if (stream_num < 128) {
506
1.00k
        asf->stream_bitrates[stream_num] = leak_rate;
507
1.00k
        asf->streams[stream_num].payload_ext_ct = 0;
508
1.00k
    }
509
510
1.07M
    for (i = 0; i < stream_ct; i++) {
511
1.07M
        avio_rl16(pb);
512
1.07M
        ext_len = avio_rl16(pb);
513
1.07M
        avio_skip(pb, ext_len);
514
1.07M
    }
515
516
984k
    for (i = 0; i < payload_ext_ct; i++) {
517
983k
        int size;
518
983k
        ff_get_guid(pb, &g);
519
983k
        size = avio_rl16(pb);
520
983k
        ext_len = avio_rl32(pb);
521
983k
        if (ext_len < 0)
522
712
            return AVERROR_INVALIDDATA;
523
982k
        avio_skip(pb, ext_len);
524
982k
        if (stream_num < 128 && i < FF_ARRAY_ELEMS(asf->streams[stream_num].payload)) {
525
2.57k
            ASFPayload *p = &asf->streams[stream_num].payload[i];
526
2.57k
            p->type = g[0];
527
2.57k
            p->size = size;
528
2.57k
            av_log(s, AV_LOG_DEBUG, "Payload extension %x %d\n", g[0], p->size );
529
2.57k
            asf->streams[stream_num].payload_ext_ct ++;
530
2.57k
        }
531
982k
    }
532
533
418
    return 0;
534
1.13k
}
535
536
static int asf_read_content_desc(AVFormatContext *s)
537
144
{
538
144
    AVIOContext *pb = s->pb;
539
144
    int len1, len2, len3, len4, len5;
540
541
144
    len1 = avio_rl16(pb);
542
144
    len2 = avio_rl16(pb);
543
144
    len3 = avio_rl16(pb);
544
144
    len4 = avio_rl16(pb);
545
144
    len5 = avio_rl16(pb);
546
144
    get_tag(s, "title", 0, len1, 32);
547
144
    get_tag(s, "author", 0, len2, 32);
548
144
    get_tag(s, "copyright", 0, len3, 32);
549
144
    get_tag(s, "comment", 0, len4, 32);
550
144
    avio_skip(pb, len5);
551
552
144
    return 0;
553
144
}
554
555
static int asf_read_ext_content_desc(AVFormatContext *s)
556
4.22k
{
557
4.22k
    AVIOContext *pb = s->pb;
558
4.22k
    ASFContext *asf = s->priv_data;
559
4.22k
    int desc_count, i, ret;
560
561
4.22k
    desc_count = avio_rl16(pb);
562
47.5M
    for (i = 0; i < desc_count; i++) {
563
47.5M
        int name_len, value_type, value_len;
564
47.5M
        char name[1024];
565
566
47.5M
        name_len = avio_rl16(pb);
567
47.5M
        if (name_len % 2)   // must be even, broken lavf versions wrote len-1
568
42.4k
            name_len += 1;
569
47.5M
        if ((ret = avio_get_str16le(pb, name_len, name, sizeof(name))) < name_len)
570
94.2k
            avio_skip(pb, name_len - ret);
571
47.5M
        value_type = avio_rl16(pb);
572
47.5M
        value_len  = avio_rl16(pb);
573
47.5M
        if (!value_type && value_len % 2)
574
4.71k
            value_len += 1;
575
        /* My sample has that stream set to 0 maybe that mean the container.
576
         * ASF stream count starts at 1. I am using 0 to the container value
577
         * since it's unused. */
578
47.5M
        if (!strcmp(name, "AspectRatioX"))
579
36
            asf->dar[0].num = get_value(s->pb, value_type, 32);
580
47.5M
        else if (!strcmp(name, "AspectRatioY"))
581
5
            asf->dar[0].den = get_value(s->pb, value_type, 32);
582
47.5M
        else
583
47.5M
            get_tag(s, name, value_type, value_len, 32);
584
47.5M
    }
585
586
4.22k
    return 0;
587
4.22k
}
588
589
static int asf_read_language_list(AVFormatContext *s)
590
398
{
591
398
    AVIOContext *pb = s->pb;
592
398
    ASFContext *asf = s->priv_data;
593
398
    int j, ret;
594
398
    int stream_count = avio_rl16(pb);
595
2.45M
    for (j = 0; j < stream_count; j++) {
596
2.45M
        char lang[6];
597
2.45M
        unsigned int lang_len = avio_r8(pb);
598
2.45M
        if ((ret = avio_get_str16le(pb, lang_len, lang,
599
2.45M
                                    sizeof(lang))) < lang_len)
600
23.5k
            avio_skip(pb, lang_len - ret);
601
2.45M
        if (j < 128)
602
13.0k
            av_strlcpy(asf->stream_languages[j], lang,
603
13.0k
                       sizeof(*asf->stream_languages));
604
2.45M
    }
605
606
398
    return 0;
607
398
}
608
609
static int asf_read_metadata(AVFormatContext *s)
610
308
{
611
308
    AVIOContext *pb = s->pb;
612
308
    ASFContext *asf = s->priv_data;
613
308
    int n, stream_num, name_len_utf16, name_len_utf8;
614
308
    unsigned int value_len;
615
308
    int ret, i;
616
308
    n = avio_rl16(pb);
617
618
371k
    for (i = 0; i < n; i++) {
619
371k
        uint8_t *name;
620
371k
        int value_type;
621
622
371k
        avio_rl16(pb);  // lang_list_index
623
371k
        stream_num = avio_rl16(pb);
624
371k
        name_len_utf16 = avio_rl16(pb);
625
371k
        value_type = avio_rl16(pb); /* value_type */
626
371k
        value_len  = avio_rl32(pb);
627
628
371k
        if (value_len >= (INT_MAX - LEN) / 2)
629
196
            return AVERROR_INVALIDDATA;
630
631
371k
        name_len_utf8 = 2*name_len_utf16 + 1;
632
371k
        name          = av_malloc(name_len_utf8);
633
371k
        if (!name)
634
0
            return AVERROR(ENOMEM);
635
636
371k
        if ((ret = avio_get_str16le(pb, name_len_utf16, name, name_len_utf8)) < name_len_utf16)
637
408
            avio_skip(pb, name_len_utf16 - ret);
638
371k
        av_log(s, AV_LOG_TRACE, "%d stream %d name_len %2d type %d len %4d <%s>\n",
639
371k
                i, stream_num, name_len_utf16, value_type, value_len, name);
640
641
371k
        if (!strcmp(name, "AspectRatioX")){
642
74
            int aspect_x = get_value(s->pb, value_type, 16);
643
74
            if(stream_num < 128)
644
64
                asf->dar[stream_num].num = aspect_x;
645
371k
        } else if(!strcmp(name, "AspectRatioY")){
646
126
            int aspect_y = get_value(s->pb, value_type, 16);
647
126
            if(stream_num < 128)
648
114
                asf->dar[stream_num].den = aspect_y;
649
371k
        } else {
650
371k
            get_tag(s, name, value_type, value_len, 16);
651
371k
        }
652
371k
        av_freep(&name);
653
371k
    }
654
655
112
    return 0;
656
308
}
657
658
static int asf_read_marker(AVFormatContext *s)
659
1.34k
{
660
1.34k
    AVIOContext *pb = s->pb;
661
1.34k
    ASFContext *asf = s->priv_data;
662
1.34k
    int i, count, name_len, ret;
663
1.34k
    char name[1024];
664
665
1.34k
    avio_rl64(pb);            // reserved 16 bytes
666
1.34k
    avio_rl64(pb);            // ...
667
1.34k
    count = avio_rl32(pb);    // markers count
668
1.34k
    avio_rl16(pb);            // reserved 2 bytes
669
1.34k
    name_len = avio_rl16(pb); // name length
670
1.34k
    avio_skip(pb, name_len);
671
672
102k
    for (i = 0; i < count; i++) {
673
102k
        int64_t pres_time;
674
675
102k
        if (avio_feof(pb))
676
605
            return AVERROR_INVALIDDATA;
677
678
101k
        avio_rl64(pb);             // offset, 8 bytes
679
101k
        pres_time = avio_rl64(pb); // presentation time
680
101k
        pres_time = av_sat_sub64(pres_time, asf->hdr.preroll * 10000LL);
681
101k
        avio_rl16(pb);             // entry length
682
101k
        avio_rl32(pb);             // send time
683
101k
        avio_rl32(pb);             // flags
684
101k
        name_len = avio_rl32(pb);  // name length
685
101k
        if ((unsigned)name_len > INT_MAX / 2)
686
733
            return AVERROR_INVALIDDATA;
687
101k
        if ((ret = avio_get_str16le(pb, name_len * 2, name,
688
101k
                                    sizeof(name))) < name_len)
689
1.94k
            avio_skip(pb, name_len - ret);
690
101k
        avpriv_new_chapter(s, i, (AVRational) { 1, 10000000 }, pres_time,
691
101k
                           AV_NOPTS_VALUE, name);
692
101k
    }
693
694
11
    return 0;
695
1.34k
}
696
697
static int asf_read_header(AVFormatContext *s)
698
29.6k
{
699
29.6k
    ASFContext *asf = s->priv_data;
700
29.6k
    ff_asf_guid g;
701
29.6k
    AVIOContext *pb = s->pb;
702
29.6k
    int i;
703
29.6k
    int64_t gsize;
704
705
29.6k
    ff_get_guid(pb, &g);
706
29.6k
    if (ff_guidcmp(&g, &ff_asf_header))
707
32
        return AVERROR_INVALIDDATA;
708
29.5k
    avio_rl64(pb);
709
29.5k
    avio_rl32(pb);
710
29.5k
    avio_r8(pb);
711
29.5k
    avio_r8(pb);
712
29.5k
    memset(&asf->asfid2avid, -1, sizeof(asf->asfid2avid));
713
714
3.81M
    for (i = 0; i<128; i++)
715
3.78M
        asf->streams[i].stream_language_index = 128; // invalid stream index means no language info
716
717
85.0k
    for (;;) {
718
85.0k
        uint64_t gpos = avio_tell(pb);
719
85.0k
        int ret = 0;
720
85.0k
        ff_get_guid(pb, &g);
721
85.0k
        gsize = avio_rl64(pb);
722
85.0k
        print_guid(&g);
723
85.0k
        if (!ff_guidcmp(&g, &ff_asf_data_header)) {
724
26.8k
            asf->data_object_offset = avio_tell(pb);
725
            /* If not streaming, gsize is not unlimited (how?),
726
             * and there is enough space in the file.. */
727
26.8k
            if (!(asf->hdr.flags & 0x01) && gsize >= 100)
728
12.6k
                asf->data_object_size = gsize - 24;
729
14.1k
            else
730
14.1k
                asf->data_object_size = (uint64_t)-1;
731
26.8k
            break;
732
26.8k
        }
733
58.1k
        if (gsize < 24)
734
2.08k
            return AVERROR_INVALIDDATA;
735
56.0k
        if (!ff_guidcmp(&g, &ff_asf_file_header)) {
736
1.93k
            ret = asf_read_file_properties(s);
737
54.1k
        } else if (!ff_guidcmp(&g, &ff_asf_stream_header)) {
738
34.2k
            ret = asf_read_stream_properties(s, gsize);
739
34.2k
        } else if (!ff_guidcmp(&g, &ff_asf_comment_header)) {
740
144
            asf_read_content_desc(s);
741
19.6k
        } else if (!ff_guidcmp(&g, &ff_asf_language_guid)) {
742
398
            asf_read_language_list(s);
743
19.2k
        } else if (!ff_guidcmp(&g, &ff_asf_extended_content_header)) {
744
4.22k
            asf_read_ext_content_desc(s);
745
15.0k
        } else if (!ff_guidcmp(&g, &ff_asf_metadata_header)) {
746
255
            asf_read_metadata(s);
747
14.8k
        } else if (!ff_guidcmp(&g, &ff_asf_metadata_library_header)) {
748
53
            asf_read_metadata(s);
749
14.7k
        } else if (!ff_guidcmp(&g, &ff_asf_ext_stream_header)) {
750
1.13k
            asf_read_ext_stream_properties(s);
751
752
            // there could be an optional stream properties object to follow
753
            // if so the next iteration will pick it up
754
1.13k
            continue;
755
13.6k
        } else if (!ff_guidcmp(&g, &ff_asf_head1_guid)) {
756
395
            ff_get_guid(pb, &g);
757
395
            avio_skip(pb, 6);
758
395
            continue;
759
13.2k
        } else if (!ff_guidcmp(&g, &ff_asf_marker_header)) {
760
1.34k
            asf_read_marker(s);
761
11.8k
        } else if (avio_feof(pb)) {
762
382
            return AVERROR_EOF;
763
11.4k
        } else {
764
11.4k
            if (!s->keylen) {
765
11.4k
                if (!ff_guidcmp(&g, &ff_asf_content_encryption)) {
766
535
                    AVPacket *const pkt = ffformatcontext(s)->parse_pkt;
767
535
                    unsigned int len;
768
535
                    av_log(s, AV_LOG_WARNING,
769
535
                           "DRM protected stream detected, decoding will likely fail!\n");
770
535
                    len= avio_rl32(pb);
771
535
                    av_log(s, AV_LOG_DEBUG, "Secret data:\n");
772
773
535
                    if ((ret = av_get_packet(pb, pkt, len)) < 0)
774
13
                        return ret;
775
522
                    av_hex_dump_log(s, AV_LOG_DEBUG, pkt->data, pkt->size);
776
522
                    av_packet_unref(pkt);
777
778
522
                    len= avio_rl32(pb);
779
522
                    if (len > UINT16_MAX)
780
5
                        return AVERROR_INVALIDDATA;
781
517
                    get_tag(s, "ASF_Protection_Type", -1, len, 32);
782
783
517
                    len= avio_rl32(pb);
784
517
                    if (len > UINT16_MAX)
785
6
                        return AVERROR_INVALIDDATA;
786
511
                    get_tag(s, "ASF_Key_ID", -1, len, 32);
787
788
511
                    len= avio_rl32(pb);
789
511
                    if (len > UINT16_MAX)
790
3
                        return AVERROR_INVALIDDATA;
791
508
                    get_tag(s, "ASF_License_URL", -1, len, 32);
792
10.9k
                } else if (!ff_guidcmp(&g, &ff_asf_ext_content_encryption)) {
793
94
                    av_log(s, AV_LOG_WARNING,
794
94
                           "Ext DRM protected stream detected, decoding will likely fail!\n");
795
94
                    av_dict_set(&s->metadata, "encryption", "ASF Extended Content Encryption", 0);
796
10.8k
                } else if (!ff_guidcmp(&g, &ff_asf_digital_signature)) {
797
15
                    av_log(s, AV_LOG_INFO, "Digital signature detected!\n");
798
15
                }
799
11.4k
            }
800
11.4k
        }
801
54.1k
        if (ret < 0)
802
219
            return ret;
803
804
53.8k
        if (avio_tell(pb) != gpos + gsize)
805
21.3k
            av_log(s, AV_LOG_DEBUG,
806
21.3k
                   "gpos mismatch our pos=%"PRIu64", end=%"PRId64"\n",
807
21.3k
                   avio_tell(pb) - gpos, gsize);
808
53.8k
        avio_seek(pb, gpos + gsize, SEEK_SET);
809
53.8k
    }
810
26.8k
    ff_get_guid(pb, &g);
811
26.8k
    avio_rl64(pb);
812
26.8k
    avio_r8(pb);
813
26.8k
    avio_r8(pb);
814
26.8k
    if (avio_feof(pb))
815
8
        return AVERROR_EOF;
816
26.8k
    asf->data_offset      = avio_tell(pb);
817
26.8k
    asf->packet_size_left = 0;
818
819
3.46M
    for (i = 0; i < 128; i++) {
820
3.43M
        int stream_num = asf->asfid2avid[i];
821
3.43M
        if (stream_num >= 0) {
822
27.0k
            AVStream *st = s->streams[stream_num];
823
27.0k
            if (!st->codecpar->bit_rate)
824
4.22k
                st->codecpar->bit_rate = asf->stream_bitrates[i];
825
27.0k
            if (asf->dar[i].num > 0 && asf->dar[i].den > 0) {
826
7
                av_reduce(&st->sample_aspect_ratio.num,
827
7
                          &st->sample_aspect_ratio.den,
828
7
                          asf->dar[i].num, asf->dar[i].den, INT_MAX);
829
27.0k
            } else if ((asf->dar[0].num > 0) && (asf->dar[0].den > 0) &&
830
                       // Use ASF container value if the stream doesn't set AR.
831
20
                       (st->codecpar->codec_type == AVMEDIA_TYPE_VIDEO))
832
6
                av_reduce(&st->sample_aspect_ratio.num,
833
6
                          &st->sample_aspect_ratio.den,
834
6
                          asf->dar[0].num, asf->dar[0].den, INT_MAX);
835
836
27.0k
            av_log(s, AV_LOG_TRACE, "i=%d, st->codecpar->codec_type:%d, asf->dar %d:%d sar=%d:%d\n",
837
27.0k
                    i, st->codecpar->codec_type, asf->dar[i].num, asf->dar[i].den,
838
27.0k
                    st->sample_aspect_ratio.num, st->sample_aspect_ratio.den);
839
840
            // copy and convert language codes to the frontend
841
27.0k
            if (asf->streams[i].stream_language_index < 128) {
842
132
                const char *rfc1766 = asf->stream_languages[asf->streams[i].stream_language_index];
843
132
                if (rfc1766 && strlen(rfc1766) > 1) {
844
108
                    const char primary_tag[3] = { rfc1766[0], rfc1766[1], '\0' }; // ignore country code if any
845
108
                    const char *iso6392       = ff_convert_lang_to(primary_tag,
846
108
                                                                   AV_LANG_ISO639_2_BIBL);
847
108
                    if (iso6392)
848
90
                        av_dict_set(&st->metadata, "language", iso6392, 0);
849
108
                }
850
132
            }
851
27.0k
        }
852
3.43M
    }
853
854
26.8k
    ff_metadata_conv(&s->metadata, NULL, ff_asf_metadata_conv);
855
856
26.8k
    return 0;
857
26.8k
}
858
859
#define DO_2BITS(bits, var, defval)             \
860
2.83M
    switch (bits & 3) {                         \
861
306k
    case 3:                                     \
862
306k
        var = avio_rl32(pb);                    \
863
306k
        rsize += 4;                             \
864
306k
        break;                                  \
865
355k
    case 2:                                     \
866
355k
        var = avio_rl16(pb);                    \
867
355k
        rsize += 2;                             \
868
355k
        break;                                  \
869
372k
    case 1:                                     \
870
372k
        var = avio_r8(pb);                      \
871
372k
        rsize++;                                \
872
372k
        break;                                  \
873
1.80M
    default:                                    \
874
1.80M
        var = defval;                           \
875
1.80M
        break;                                  \
876
2.83M
    }
877
878
/**
879
 * Load a single ASF packet into the demuxer.
880
 * @param s demux context
881
 * @param pb context to read data from
882
 * @return 0 on success, <0 on error
883
 */
884
static int asf_get_packet(AVFormatContext *s, AVIOContext *pb)
885
757k
{
886
757k
    ASFContext *asf = s->priv_data;
887
757k
    uint32_t packet_length, padsize;
888
757k
    int rsize = 8;
889
757k
    int c, d, e, off;
890
891
757k
    if (asf->uses_std_ecc > 0) {
892
        // if we do not know packet size, allow skipping up to 32 kB
893
2.77k
        off = 32768;
894
2.77k
        if (asf->no_resync_search)
895
0
            off = 3;
896
//         else if (s->packet_size > 0 && !asf->uses_std_ecc)
897
//             off = (avio_tell(pb) - ffformatcontext(s)->data_offset) % s->packet_size + 3;
898
899
2.77k
        c = d = e = -1;
900
16.0M
        while (off-- > 0) {
901
16.0M
            c = d;
902
16.0M
            d = e;
903
16.0M
            e = avio_r8(pb);
904
16.0M
            if (c == 0x82 && !d && !e)
905
2.35k
                break;
906
16.0M
        }
907
908
2.77k
        if (c != 0x82) {
909
            /* This code allows handling of -EAGAIN at packet boundaries (i.e.
910
            * if the packet sync code above triggers -EAGAIN). This does not
911
            * imply complete -EAGAIN handling support at random positions in
912
            * the stream. */
913
306
            if (pb->error == AVERROR(EAGAIN))
914
0
                return AVERROR(EAGAIN);
915
306
            if (!avio_feof(pb))
916
239
                av_log(s, AV_LOG_ERROR,
917
239
                    "ff asf bad header %x  at:%"PRId64"\n", c, avio_tell(pb));
918
306
        }
919
2.77k
        if ((c & 0x8f) == 0x82) {
920
2.49k
            if (d || e) {
921
142
                if (!avio_feof(pb))
922
140
                    av_log(s, AV_LOG_ERROR, "ff asf bad non zero\n");
923
142
                return AVERROR_INVALIDDATA;
924
142
            }
925
2.35k
            c      = avio_r8(pb);
926
2.35k
            d      = avio_r8(pb);
927
2.35k
            rsize += 3;
928
2.35k
        } else if(!avio_feof(pb)) {
929
206
            avio_seek(pb, -1, SEEK_CUR); // FIXME
930
206
        }
931
755k
    } else {
932
755k
        c = avio_r8(pb);
933
755k
        if (c & 0x80) {
934
124k
            rsize ++;
935
124k
            if (!(c & 0x60)) {
936
21.6k
                d = avio_r8(pb);
937
21.6k
                e = avio_r8(pb);
938
21.6k
                avio_seek(pb, (c & 0xF) - 2, SEEK_CUR);
939
21.6k
                rsize += c & 0xF;
940
21.6k
            }
941
942
124k
            if (c != 0x82)
943
123k
                avpriv_request_sample(s, "Invalid ECC byte");
944
945
124k
            if (!asf->uses_std_ecc)
946
7.73k
                asf->uses_std_ecc =  (c == 0x82 && !d && !e) ? 1 : -1;
947
948
124k
            c = avio_r8(pb);
949
124k
        } else
950
630k
            asf->uses_std_ecc =  -1;
951
755k
        d = avio_r8(pb);
952
755k
    }
953
954
757k
    asf->packet_flags    = c;
955
757k
    asf->packet_property = d;
956
957
757k
    DO_2BITS(asf->packet_flags >> 5, packet_length, s->packet_size);
958
757k
    DO_2BITS(asf->packet_flags >> 1, padsize, 0); // sequence ignored
959
757k
    DO_2BITS(asf->packet_flags >> 3, padsize, 0); // padding length
960
961
    // the following checks prevent overflows and infinite loops
962
757k
    if (!packet_length || packet_length >= (1U << 29)) {
963
606k
        av_log(s, AV_LOG_ERROR,
964
606k
               "invalid packet_length %"PRIu32" at:%"PRId64"\n",
965
606k
               packet_length, avio_tell(pb));
966
606k
        return AVERROR_INVALIDDATA;
967
606k
    }
968
150k
    if (padsize >= packet_length) {
969
53.2k
        av_log(s, AV_LOG_ERROR,
970
53.2k
               "invalid padsize %"PRIu32" at:%"PRId64"\n", padsize, avio_tell(pb));
971
53.2k
        return AVERROR_INVALIDDATA;
972
53.2k
    }
973
974
97.6k
    asf->packet_timestamp = avio_rl32(pb);
975
97.6k
    avio_rl16(pb); /* duration */
976
    // rsize has at least 11 bytes which have to be present
977
978
97.6k
    if (asf->packet_flags & 0x01) {
979
33.3k
        asf->packet_segsizetype = avio_r8(pb);
980
33.3k
        rsize++;
981
33.3k
        asf->packet_segments = asf->packet_segsizetype & 0x3f;
982
64.3k
    } else {
983
64.3k
        asf->packet_segments    = 1;
984
64.3k
        asf->packet_segsizetype = 0x80;
985
64.3k
    }
986
97.6k
    if (rsize > packet_length - padsize) {
987
3.23k
        asf->packet_size_left = 0;
988
3.23k
        av_log(s, AV_LOG_ERROR,
989
3.23k
               "invalid packet header length %d for pktlen %"PRIu32"-%"PRIu32" at %"PRId64"\n",
990
3.23k
               rsize, packet_length, padsize, avio_tell(pb));
991
3.23k
        return AVERROR_INVALIDDATA;
992
3.23k
    }
993
94.4k
    asf->packet_size_left = packet_length - padsize - rsize;
994
94.4k
    if (packet_length < asf->hdr.min_pktsize)
995
55.7k
        padsize += asf->hdr.min_pktsize - packet_length;
996
94.4k
    asf->packet_padsize = padsize;
997
94.4k
    av_log(s, AV_LOG_TRACE, "packet: size=%d padsize=%d  left=%d\n",
998
94.4k
            s->packet_size, asf->packet_padsize, asf->packet_size_left);
999
94.4k
    return 0;
1000
97.6k
}
1001
1002
/**
1003
 *
1004
 * @return <0 if error
1005
 */
1006
static int asf_read_frame_header(AVFormatContext *s, AVIOContext *pb)
1007
159k
{
1008
159k
    ASFContext *asf = s->priv_data;
1009
159k
    ASFStream *asfst;
1010
159k
    int rsize       = 1;
1011
159k
    int num         = avio_r8(pb);
1012
159k
    int i;
1013
159k
    int64_t ts0, ts1 av_unused;
1014
1015
159k
    asf->packet_segments--;
1016
159k
    asf->packet_key_frame = num >> 7;
1017
159k
    asf->stream_index     = asf->asfid2avid[num & 0x7f];
1018
159k
    asfst                 = &asf->streams[num & 0x7f];
1019
    // sequence should be ignored!
1020
159k
    DO_2BITS(asf->packet_property >> 4, asf->packet_seq, 0);
1021
159k
    DO_2BITS(asf->packet_property >> 2, asf->packet_frag_offset, 0);
1022
159k
    DO_2BITS(asf->packet_property, asf->packet_replic_size, 0);
1023
159k
    av_log(asf, AV_LOG_TRACE, "key:%d stream:%d seq:%d offset:%d replic_size:%d num:%X packet_property %X\n",
1024
159k
            asf->packet_key_frame, asf->stream_index, asf->packet_seq,
1025
159k
            asf->packet_frag_offset, asf->packet_replic_size, num, asf->packet_property);
1026
159k
    if (rsize+(int64_t)asf->packet_replic_size > asf->packet_size_left) {
1027
11.0k
        av_log(s, AV_LOG_ERROR, "packet_replic_size %d is invalid\n", asf->packet_replic_size);
1028
11.0k
        return AVERROR_INVALIDDATA;
1029
11.0k
    }
1030
148k
    if (asf->packet_replic_size >= 8) {
1031
25.9k
        int64_t end = avio_tell(pb) + asf->packet_replic_size;
1032
25.9k
        AVRational aspect;
1033
25.9k
        asfst->packet_obj_size = avio_rl32(pb);
1034
25.9k
        if (asfst->packet_obj_size >= (1 << 24) || asfst->packet_obj_size < 0) {
1035
11.2k
            av_log(s, AV_LOG_ERROR, "packet_obj_size %d invalid\n", asfst->packet_obj_size);
1036
11.2k
            asfst->packet_obj_size = 0;
1037
11.2k
            return AVERROR_INVALIDDATA;
1038
11.2k
        }
1039
14.7k
        asf->packet_frag_timestamp = avio_rl32(pb); // timestamp
1040
1041
53.8k
        for (i = 0; i < asfst->payload_ext_ct; i++) {
1042
47.7k
            ASFPayload *p = &asfst->payload[i];
1043
47.7k
            int size = p->size;
1044
47.7k
            int64_t payend;
1045
47.7k
            if (size == 0xFFFF)
1046
1.23k
                size = avio_rl16(pb);
1047
47.7k
            payend = avio_tell(pb) + size;
1048
47.7k
            if (payend > end) {
1049
8.75k
                av_log(s, AV_LOG_ERROR, "too long payload\n");
1050
8.75k
                break;
1051
8.75k
            }
1052
39.0k
            switch (p->type) {
1053
742
            case 0x50:
1054
//              duration = avio_rl16(pb);
1055
742
                break;
1056
13.5k
            case 0x54:
1057
13.5k
                aspect.num = avio_r8(pb);
1058
13.5k
                aspect.den = avio_r8(pb);
1059
13.5k
                if (aspect.num > 0 && aspect.den > 0 && asf->stream_index >= 0) {
1060
2.17k
                    s->streams[asf->stream_index]->sample_aspect_ratio = aspect;
1061
2.17k
                }
1062
13.5k
                break;
1063
2.22k
            case 0x2A:
1064
2.22k
                avio_skip(pb, 8);
1065
2.22k
                ts0 = avio_rl64(pb);
1066
2.22k
                ts1 = avio_rl64(pb);
1067
2.22k
                if (ts0!= -1) asf->packet_frag_timestamp = ts0/10000;
1068
379
                else          asf->packet_frag_timestamp = AV_NOPTS_VALUE;
1069
2.22k
                asf->ts_is_pts = 1;
1070
2.22k
                break;
1071
0
            case 0x5B:
1072
0
            case 0xB7:
1073
0
            case 0xCC:
1074
0
            case 0xC0:
1075
0
            case 0xA0:
1076
                //unknown
1077
0
                break;
1078
39.0k
            }
1079
39.0k
            avio_seek(pb, payend, SEEK_SET);
1080
39.0k
        }
1081
1082
14.7k
        avio_seek(pb, end, SEEK_SET);
1083
14.7k
        rsize += asf->packet_replic_size; // FIXME - check validity
1084
122k
    } else if (asf->packet_replic_size == 1) {
1085
        // multipacket - frag_offset is beginning timestamp
1086
28.7k
        asf->packet_time_start     = asf->packet_frag_offset;
1087
28.7k
        asf->packet_frag_offset    = 0;
1088
28.7k
        asf->packet_frag_timestamp = asf->packet_timestamp;
1089
1090
28.7k
        asf->packet_time_delta = avio_r8(pb);
1091
28.7k
        rsize++;
1092
93.9k
    } else if (asf->packet_replic_size != 0) {
1093
3.98k
        av_log(s, AV_LOG_ERROR, "unexpected packet_replic_size of %d\n",
1094
3.98k
               asf->packet_replic_size);
1095
3.98k
        return AVERROR_INVALIDDATA;
1096
3.98k
    }
1097
133k
    if (asf->packet_flags & 0x01) {
1098
85.1k
        DO_2BITS(asf->packet_segsizetype >> 6, asf->packet_frag_size, 0); // 0 is illegal
1099
85.1k
        if (rsize > asf->packet_size_left) {
1100
62
            av_log(s, AV_LOG_ERROR, "packet_replic_size is invalid\n");
1101
62
            return AVERROR_INVALIDDATA;
1102
85.0k
        } else if (asf->packet_frag_size > asf->packet_size_left - rsize) {
1103
5.78k
            if (asf->packet_frag_size > asf->packet_size_left - rsize + asf->packet_padsize) {
1104
1.68k
                av_log(s, AV_LOG_ERROR, "packet_frag_size is invalid (%d>%d-%d+%d)\n",
1105
1.68k
                       asf->packet_frag_size, asf->packet_size_left, rsize, asf->packet_padsize);
1106
1.68k
                return AVERROR_INVALIDDATA;
1107
4.10k
            } else {
1108
4.10k
                int diff = asf->packet_frag_size - (asf->packet_size_left - rsize);
1109
4.10k
                asf->packet_size_left += diff;
1110
4.10k
                asf->packet_padsize   -= diff;
1111
4.10k
            }
1112
5.78k
        }
1113
85.1k
    } else {
1114
48.3k
        asf->packet_frag_size = asf->packet_size_left - rsize;
1115
48.3k
    }
1116
131k
    if (asf->packet_replic_size == 1) {
1117
28.7k
        asf->packet_multi_size = asf->packet_frag_size;
1118
28.7k
        if (asf->packet_multi_size > asf->packet_size_left)
1119
0
            return AVERROR_INVALIDDATA;
1120
28.7k
    }
1121
131k
    asf->packet_size_left -= rsize;
1122
1123
131k
    return 0;
1124
131k
}
1125
1126
/**
1127
 * Parse data from individual ASF packets (which were previously loaded
1128
 * with asf_get_packet()).
1129
 * @param s demux context
1130
 * @param pb context to read data from
1131
 * @param pkt pointer to store packet data into
1132
 * @return 0 if data was stored in pkt, <0 on error or 1 if more ASF
1133
 *          packets need to be loaded (through asf_get_packet())
1134
 */
1135
static int asf_parse_packet(AVFormatContext *s, AVIOContext *pb, AVPacket *pkt)
1136
4.45M
{
1137
4.45M
    ASFContext *asf   = s->priv_data;
1138
4.45M
    ASFStream *asf_st = 0;
1139
11.5M
    for (;;) {
1140
11.5M
        int read;
1141
11.5M
        if (avio_feof(pb))
1142
74.0k
            return AVERROR_EOF;
1143
11.5M
        if (asf->packet_size_left < FRAME_HEADER_SIZE ||
1144
11.1M
            asf->packet_segments < 1 && asf->packet_time_start == 0) {
1145
757k
            int ret = asf->packet_size_left + asf->packet_padsize;
1146
1147
757k
            if (asf->packet_size_left && asf->packet_size_left < FRAME_HEADER_SIZE)
1148
10.7k
                av_log(s, AV_LOG_WARNING, "Skip due to FRAME_HEADER_SIZE\n");
1149
1150
757k
            assert(ret >= 0);
1151
            /* fail safe */
1152
757k
            avio_skip(pb, ret);
1153
1154
757k
            asf->packet_pos = avio_tell(pb);
1155
757k
            if (asf->data_object_size != (uint64_t)-1 &&
1156
556k
                (asf->packet_pos - asf->data_object_offset >= asf->data_object_size))
1157
67
                return AVERROR_EOF;  /* Do not exceed the size of the data object */
1158
757k
            return 1;
1159
757k
        }
1160
10.7M
        if (asf->packet_time_start == 0) {
1161
159k
            if (asf_read_frame_header(s, pb) < 0) {
1162
28.0k
                asf->packet_time_start = asf->packet_segments = 0;
1163
28.0k
                continue;
1164
28.0k
            }
1165
131k
            if (asf->stream_index < 0 ||
1166
74.2k
                s->streams[asf->stream_index]->discard >= AVDISCARD_ALL ||
1167
74.2k
                (!asf->packet_key_frame &&
1168
66.2k
                 (s->streams[asf->stream_index]->discard >= AVDISCARD_NONKEY || asf->streams[s->streams[asf->stream_index]->id].skip_to_key))) {
1169
57.4k
                asf->packet_time_start = 0;
1170
                /* unhandled packet (should not happen) */
1171
57.4k
                avio_skip(pb, asf->packet_frag_size);
1172
57.4k
                asf->packet_size_left -= asf->packet_frag_size;
1173
57.4k
                if (asf->stream_index < 0)
1174
57.4k
                    av_log(s, AV_LOG_ERROR, "ff asf skip %d (unknown stream)\n",
1175
57.4k
                           asf->packet_frag_size);
1176
57.4k
                continue;
1177
57.4k
            }
1178
74.2k
            asf->asf_st = &asf->streams[s->streams[asf->stream_index]->id];
1179
74.2k
            if (!asf->packet_frag_offset)
1180
63.5k
                asf->asf_st->skip_to_key = 0;
1181
74.2k
        }
1182
10.6M
        asf_st = asf->asf_st;
1183
10.6M
        av_assert0(asf_st);
1184
1185
10.6M
        if (!asf_st->frag_offset && asf->packet_frag_offset) {
1186
8.97k
            av_log(s, AV_LOG_TRACE, "skipping asf data pkt with fragment offset for "
1187
8.97k
                    "stream:%d, expected:%d but got %d from pkt)\n",
1188
8.97k
                    asf->stream_index, asf_st->frag_offset,
1189
8.97k
                    asf->packet_frag_offset);
1190
8.97k
            avio_skip(pb, asf->packet_frag_size);
1191
8.97k
            asf->packet_size_left -= asf->packet_frag_size;
1192
8.97k
            continue;
1193
8.97k
        }
1194
1195
10.6M
        if (asf->packet_replic_size == 1) {
1196
            // frag_offset is here used as the beginning timestamp
1197
10.6M
            asf->packet_frag_timestamp = asf->packet_time_start;
1198
10.6M
            asf->packet_time_start    += asf->packet_time_delta;
1199
10.6M
            asf_st->packet_obj_size    = asf->packet_frag_size = avio_r8(pb);
1200
10.6M
            asf->packet_size_left--;
1201
10.6M
            asf->packet_multi_size--;
1202
10.6M
            if (asf->packet_multi_size < asf_st->packet_obj_size) {
1203
4.24k
                asf->packet_time_start = 0;
1204
4.24k
                avio_skip(pb, asf->packet_multi_size);
1205
4.24k
                asf->packet_size_left -= asf->packet_multi_size;
1206
4.24k
                continue;
1207
4.24k
            }
1208
10.6M
            asf->packet_multi_size -= asf_st->packet_obj_size;
1209
10.6M
        }
1210
1211
10.6M
        if (asf_st->pkt.size != asf_st->packet_obj_size ||
1212
            // FIXME is this condition sufficient?
1213
7.03M
            asf_st->frag_offset + asf->packet_frag_size > asf_st->pkt.size) {
1214
3.63M
            int ret;
1215
1216
3.63M
            if (asf_st->pkt.data) {
1217
8.18k
                av_log(s, AV_LOG_INFO,
1218
8.18k
                       "freeing incomplete packet size %d, new %d\n",
1219
8.18k
                       asf_st->pkt.size, asf_st->packet_obj_size);
1220
8.18k
                asf_st->frag_offset = 0;
1221
8.18k
                av_packet_unref(&asf_st->pkt);
1222
8.18k
            }
1223
            /* new packet */
1224
3.63M
            if ((ret = av_new_packet(&asf_st->pkt, asf_st->packet_obj_size)) < 0)
1225
0
                return ret;
1226
3.63M
            asf_st->seq              = asf->packet_seq;
1227
3.63M
            if (asf->packet_frag_timestamp != AV_NOPTS_VALUE) {
1228
3.63M
                if (asf->ts_is_pts) {
1229
255k
                    asf_st->pkt.pts          = asf->packet_frag_timestamp - asf->hdr.preroll;
1230
255k
                } else
1231
3.38M
                    asf_st->pkt.dts          = asf->packet_frag_timestamp - asf->hdr.preroll;
1232
3.63M
            }
1233
3.63M
            asf_st->pkt.stream_index = asf->stream_index;
1234
3.63M
            asf_st->pkt.pos          = asf_st->packet_pos = asf->packet_pos;
1235
3.63M
            asf_st->pkt_clean        = 0;
1236
1237
3.63M
            if (asf_st->pkt.data && asf_st->palette_changed) {
1238
7
                uint8_t *pal;
1239
7
                pal = av_packet_new_side_data(&asf_st->pkt, AV_PKT_DATA_PALETTE,
1240
7
                                              AVPALETTE_SIZE);
1241
7
                if (!pal) {
1242
0
                    av_log(s, AV_LOG_ERROR, "Cannot append palette to packet\n");
1243
7
                } else {
1244
7
                    memcpy(pal, asf_st->palette, AVPALETTE_SIZE);
1245
7
                    asf_st->palette_changed = 0;
1246
7
                }
1247
7
            }
1248
3.63M
            av_log(asf, AV_LOG_TRACE, "new packet: stream:%d key:%d packet_key:%d audio:%d size:%d\n",
1249
3.63M
                    asf->stream_index, asf->packet_key_frame,
1250
3.63M
                    asf_st->pkt.flags & AV_PKT_FLAG_KEY,
1251
3.63M
                    s->streams[asf->stream_index]->codecpar->codec_type == AVMEDIA_TYPE_AUDIO,
1252
3.63M
                    asf_st->packet_obj_size);
1253
3.63M
            if (s->streams[asf->stream_index]->codecpar->codec_type == AVMEDIA_TYPE_AUDIO)
1254
1.55M
                asf->packet_key_frame = 1;
1255
3.63M
            if (asf->packet_key_frame)
1256
2.08M
                asf_st->pkt.flags |= AV_PKT_FLAG_KEY;
1257
3.63M
        }
1258
1259
        /* read data */
1260
10.6M
        av_log(asf, AV_LOG_TRACE, "READ PACKET s:%d  os:%d  o:%d,%d  l:%d   DATA:%p\n",
1261
10.6M
                s->packet_size, asf_st->pkt.size, asf->packet_frag_offset,
1262
10.6M
                asf_st->frag_offset, asf->packet_frag_size, asf_st->pkt.data);
1263
10.6M
        asf->packet_size_left -= asf->packet_frag_size;
1264
10.6M
        if (asf->packet_size_left < 0)
1265
0
            continue;
1266
1267
10.6M
        if (asf->packet_frag_offset >= asf_st->pkt.size ||
1268
7.02M
            asf->packet_frag_size > asf_st->pkt.size - asf->packet_frag_offset) {
1269
7.02M
            av_log(s, AV_LOG_ERROR,
1270
7.02M
                   "packet fragment position invalid %u,%u not in %u\n",
1271
7.02M
                   asf->packet_frag_offset, asf->packet_frag_size,
1272
7.02M
                   asf_st->pkt.size);
1273
7.02M
            continue;
1274
7.02M
        }
1275
1276
3.64M
        if (asf->packet_frag_offset != asf_st->frag_offset && !asf_st->pkt_clean) {
1277
1.44k
            memset(asf_st->pkt.data + asf_st->frag_offset, 0, asf_st->pkt.size - asf_st->frag_offset);
1278
1.44k
            asf_st->pkt_clean = 1;
1279
1.44k
        }
1280
1281
3.64M
        read = avio_read(pb, asf_st->pkt.data + asf->packet_frag_offset,
1282
3.64M
                         asf->packet_frag_size);
1283
3.64M
        if (read != asf->packet_frag_size) {
1284
23.6k
            if (read < 0 || asf->packet_frag_offset + read == 0)
1285
360
                return read < 0 ? read : AVERROR_EOF;
1286
1287
23.3k
            if (asf_st->ds_span > 1) {
1288
                // scrambling, we can either drop it completely or fill the remainder
1289
                // TODO: should we fill the whole packet instead of just the current
1290
                // fragment?
1291
51
                memset(asf_st->pkt.data + asf->packet_frag_offset + read, 0,
1292
51
                       asf->packet_frag_size - read);
1293
51
                read = asf->packet_frag_size;
1294
23.2k
            } else {
1295
                // no scrambling, so we can return partial packets
1296
23.2k
                av_shrink_packet(&asf_st->pkt, asf->packet_frag_offset + read);
1297
23.2k
            }
1298
23.3k
        }
1299
3.64M
        if (s->key && s->keylen == 20)
1300
0
            ff_asfcrypt_dec(s->key, asf_st->pkt.data + asf->packet_frag_offset,
1301
0
                            read);
1302
3.64M
        asf_st->frag_offset += read;
1303
        /* test if whole packet is read */
1304
3.64M
        if (asf_st->frag_offset == asf_st->pkt.size) {
1305
            // workaround for macroshit radio DVR-MS files
1306
3.62M
            if (s->streams[asf->stream_index]->codecpar->codec_id == AV_CODEC_ID_MPEG2VIDEO &&
1307
4.15k
                asf_st->pkt.size > 100) {
1308
1.73k
                int i;
1309
19.6k
                for (i = 0; i < asf_st->pkt.size && !asf_st->pkt.data[i]; i++)
1310
17.8k
                    ;
1311
1.73k
                if (i == asf_st->pkt.size) {
1312
100
                    av_log(s, AV_LOG_DEBUG, "discarding ms fart\n");
1313
100
                    asf_st->frag_offset = 0;
1314
100
                    av_packet_unref(&asf_st->pkt);
1315
100
                    continue;
1316
100
                }
1317
1.73k
            }
1318
1319
            /* return packet */
1320
3.62M
            if (asf_st->ds_span > 1) {
1321
4.24k
                if (asf_st->pkt.size != asf_st->ds_packet_size * asf_st->ds_span) {
1322
3.58k
                    av_log(s, AV_LOG_ERROR,
1323
3.58k
                           "pkt.size != ds_packet_size * ds_span (%d %d %d)\n",
1324
3.58k
                           asf_st->pkt.size, asf_st->ds_packet_size,
1325
3.58k
                           asf_st->ds_span);
1326
3.58k
                } else {
1327
                    /* packet descrambling */
1328
666
                    AVBufferRef *buf = av_buffer_alloc(asf_st->pkt.size +
1329
666
                                                       AV_INPUT_BUFFER_PADDING_SIZE);
1330
666
                    if (buf) {
1331
666
                        uint8_t *newdata = buf->data;
1332
666
                        int offset = 0;
1333
666
                        memset(newdata + asf_st->pkt.size, 0,
1334
666
                               AV_INPUT_BUFFER_PADDING_SIZE);
1335
130k
                        while (offset < asf_st->pkt.size) {
1336
129k
                            int off = offset / asf_st->ds_chunk_size;
1337
129k
                            int row = off / asf_st->ds_span;
1338
129k
                            int col = off % asf_st->ds_span;
1339
129k
                            int idx = row + col * asf_st->ds_packet_size / asf_st->ds_chunk_size;
1340
129k
                            assert(offset + asf_st->ds_chunk_size <= asf_st->pkt.size);
1341
129k
                            assert(idx + 1 <= asf_st->pkt.size / asf_st->ds_chunk_size);
1342
129k
                            memcpy(newdata + offset,
1343
129k
                                   asf_st->pkt.data + idx * asf_st->ds_chunk_size,
1344
129k
                                   asf_st->ds_chunk_size);
1345
129k
                            offset += asf_st->ds_chunk_size;
1346
129k
                        }
1347
666
                        av_buffer_unref(&asf_st->pkt.buf);
1348
666
                        asf_st->pkt.buf  = buf;
1349
666
                        asf_st->pkt.data = buf->data;
1350
666
                    }
1351
666
                }
1352
4.24k
            }
1353
3.62M
            asf_st->frag_offset         = 0;
1354
3.62M
            *pkt                        = asf_st->pkt;
1355
3.62M
            asf_st->pkt.buf             = 0;
1356
3.62M
            asf_st->pkt.size            = 0;
1357
3.62M
            asf_st->pkt.data            = 0;
1358
3.62M
            asf_st->pkt.side_data_elems = 0;
1359
3.62M
            asf_st->pkt.side_data       = NULL;
1360
3.62M
            break; // packet completed
1361
3.62M
        }
1362
3.64M
    }
1363
3.62M
    return 0;
1364
4.45M
}
1365
1366
static int asf_read_packet(AVFormatContext *s, AVPacket *pkt)
1367
3.70M
{
1368
3.70M
    ASFContext *asf = s->priv_data;
1369
1370
4.45M
    for (;;) {
1371
4.45M
        int ret;
1372
1373
        /* parse cached packets, if any */
1374
4.45M
        if ((ret = asf_parse_packet(s, s->pb, pkt)) <= 0)
1375
3.70M
            return ret;
1376
757k
        if ((ret = asf_get_packet(s, s->pb)) < 0)
1377
757k
            assert(asf->packet_size_left < FRAME_HEADER_SIZE ||
1378
757k
                   asf->packet_segments < 1);
1379
757k
        asf->packet_time_start = 0;
1380
757k
    }
1381
3.70M
}
1382
1383
// Added to support seeking after packets have been read
1384
// If information is not reset, read_packet fails due to
1385
// leftover information from previous reads
1386
static void asf_reset_header(AVFormatContext *s)
1387
26.8k
{
1388
26.8k
    ASFContext *asf = s->priv_data;
1389
26.8k
    ASFStream *asf_st;
1390
26.8k
    int i;
1391
1392
26.8k
    asf->packet_size_left      = 0;
1393
26.8k
    asf->packet_flags          = 0;
1394
26.8k
    asf->packet_property       = 0;
1395
26.8k
    asf->packet_timestamp      = 0;
1396
26.8k
    asf->packet_segsizetype    = 0;
1397
26.8k
    asf->packet_segments       = 0;
1398
26.8k
    asf->packet_seq            = 0;
1399
26.8k
    asf->packet_replic_size    = 0;
1400
26.8k
    asf->packet_key_frame      = 0;
1401
26.8k
    asf->packet_padsize        = 0;
1402
26.8k
    asf->packet_frag_offset    = 0;
1403
26.8k
    asf->packet_frag_size      = 0;
1404
26.8k
    asf->packet_frag_timestamp = 0;
1405
26.8k
    asf->packet_multi_size     = 0;
1406
26.8k
    asf->packet_time_delta     = 0;
1407
26.8k
    asf->packet_time_start     = 0;
1408
1409
3.46M
    for (i = 0; i < 128; i++) {
1410
3.43M
        asf_st = &asf->streams[i];
1411
3.43M
        av_packet_unref(&asf_st->pkt);
1412
3.43M
        asf_st->packet_obj_size = 0;
1413
3.43M
        asf_st->frag_offset = 0;
1414
3.43M
        asf_st->seq         = 0;
1415
3.43M
    }
1416
26.8k
    asf->asf_st = NULL;
1417
26.8k
}
1418
1419
static void skip_to_key(AVFormatContext *s)
1420
0
{
1421
0
    ASFContext *asf = s->priv_data;
1422
0
    int i;
1423
1424
0
    for (i = 0; i < 128; i++) {
1425
0
        int j = asf->asfid2avid[i];
1426
0
        ASFStream *asf_st = &asf->streams[i];
1427
0
        if (j < 0 || s->streams[j]->codecpar->codec_type != AVMEDIA_TYPE_VIDEO)
1428
0
            continue;
1429
1430
0
        asf_st->skip_to_key = 1;
1431
0
    }
1432
0
}
1433
1434
static int asf_read_close(AVFormatContext *s)
1435
26.8k
{
1436
26.8k
    asf_reset_header(s);
1437
1438
26.8k
    return 0;
1439
26.8k
}
1440
1441
static int64_t asf_read_pts(AVFormatContext *s, int stream_index,
1442
                            int64_t *ppos, int64_t pos_limit)
1443
0
{
1444
0
    FFFormatContext *const si = ffformatcontext(s);
1445
0
    ASFContext *asf     = s->priv_data;
1446
0
    AVPacket pkt1, *pkt = &pkt1;
1447
0
    ASFStream *asf_st;
1448
0
    int64_t pts;
1449
0
    int64_t pos = *ppos;
1450
0
    int i;
1451
0
    int64_t start_pos[ASF_MAX_STREAMS];
1452
1453
0
    for (i = 0; i < s->nb_streams; i++)
1454
0
        start_pos[i] = pos;
1455
1456
0
    if (s->packet_size > 0)
1457
0
        pos = (pos + s->packet_size - 1 - si->data_offset) /
1458
0
              s->packet_size * s->packet_size +
1459
0
              si->data_offset;
1460
0
    *ppos = pos;
1461
0
    if (avio_seek(s->pb, pos, SEEK_SET) < 0)
1462
0
        return AV_NOPTS_VALUE;
1463
1464
0
    ff_read_frame_flush(s);
1465
0
    asf_reset_header(s);
1466
0
    for (;;) {
1467
0
        if (av_read_frame(s, pkt) < 0) {
1468
0
            av_log(s, AV_LOG_INFO, "asf_read_pts failed\n");
1469
0
            return AV_NOPTS_VALUE;
1470
0
        }
1471
1472
0
        pts = pkt->dts;
1473
1474
0
        if (pkt->flags & AV_PKT_FLAG_KEY) {
1475
0
            i = pkt->stream_index;
1476
1477
0
            asf_st = &asf->streams[s->streams[i]->id];
1478
1479
//            assert((asf_st->packet_pos - s->data_offset) % s->packet_size == 0);
1480
0
            pos = asf_st->packet_pos;
1481
0
            av_assert1(pkt->pos == asf_st->packet_pos);
1482
1483
0
            av_add_index_entry(s->streams[i], pos, pts, pkt->size,
1484
0
                               pos - start_pos[i] + 1, AVINDEX_KEYFRAME);
1485
0
            start_pos[i] = asf_st->packet_pos + 1;
1486
1487
0
            if (pkt->stream_index == stream_index) {
1488
0
                av_packet_unref(pkt);
1489
0
                break;
1490
0
            }
1491
0
        }
1492
0
        av_packet_unref(pkt);
1493
0
    }
1494
1495
0
    *ppos = pos;
1496
0
    return pts;
1497
0
}
1498
1499
static int asf_build_simple_index(AVFormatContext *s, int stream_index)
1500
0
{
1501
0
    ff_asf_guid g;
1502
0
    ASFContext *asf     = s->priv_data;
1503
0
    int64_t current_pos = avio_tell(s->pb);
1504
0
    int64_t ret;
1505
1506
0
    if((ret = avio_seek(s->pb, asf->data_object_offset + asf->data_object_size, SEEK_SET)) < 0) {
1507
0
        return ret;
1508
0
    }
1509
1510
0
    if ((ret = ff_get_guid(s->pb, &g)) < 0)
1511
0
        goto end;
1512
1513
    /* the data object can be followed by other top-level objects,
1514
     * skip them until the simple index object is reached */
1515
0
    while (ff_guidcmp(&g, &ff_asf_simple_index_header)) {
1516
0
        int64_t gsize = avio_rl64(s->pb);
1517
0
        if (gsize < 24 || avio_feof(s->pb)) {
1518
0
            goto end;
1519
0
        }
1520
0
        avio_skip(s->pb, gsize - 24);
1521
0
        if ((ret = ff_get_guid(s->pb, &g)) < 0)
1522
0
            goto end;
1523
0
    }
1524
1525
0
    {
1526
0
        int64_t itime, last_pos = -1;
1527
0
        int pct, ict;
1528
0
        int i;
1529
0
        av_unused int64_t gsize = avio_rl64(s->pb);
1530
0
        if ((ret = ff_get_guid(s->pb, &g)) < 0)
1531
0
            goto end;
1532
0
        itime = avio_rl64(s->pb);
1533
0
        pct   = avio_rl32(s->pb);
1534
0
        ict   = avio_rl32(s->pb);
1535
0
        av_log(s, AV_LOG_DEBUG,
1536
0
               "itime:0x%"PRIx64", pct:%d, ict:%d\n", itime, pct, ict);
1537
1538
0
        for (i = 0; i < ict; i++) {
1539
0
            int pktnum        = avio_rl32(s->pb);
1540
0
            int pktct         = avio_rl16(s->pb);
1541
0
            int64_t pos       = ffformatcontext(s)->data_offset + s->packet_size * (int64_t)pktnum;
1542
0
            int64_t index_pts = FFMAX(av_rescale(itime, i, 10000) - asf->hdr.preroll, 0);
1543
1544
0
            if (avio_feof(s->pb)) {
1545
0
                ret = AVERROR_INVALIDDATA;
1546
0
                goto end;
1547
0
            }
1548
1549
0
            if (pos != last_pos) {
1550
0
                av_log(s, AV_LOG_DEBUG, "pktnum:%d, pktct:%d  pts: %"PRId64"\n",
1551
0
                       pktnum, pktct, index_pts);
1552
0
                av_add_index_entry(s->streams[stream_index], pos, index_pts,
1553
0
                                   s->packet_size, 0, AVINDEX_KEYFRAME);
1554
0
                last_pos = pos;
1555
0
            }
1556
0
        }
1557
0
        asf->index_read = ict > 1;
1558
0
    }
1559
0
end:
1560
//     if (avio_feof(s->pb)) {
1561
//         ret = 0;
1562
//     }
1563
0
    avio_seek(s->pb, current_pos, SEEK_SET);
1564
0
    return ret;
1565
0
}
1566
1567
static int asf_read_seek(AVFormatContext *s, int stream_index,
1568
                         int64_t pts, int flags)
1569
0
{
1570
0
    ASFContext *asf = s->priv_data;
1571
0
    AVStream *st    = s->streams[stream_index];
1572
0
    FFStream *const sti = ffstream(st);
1573
0
    int ret = 0;
1574
1575
0
    if (s->packet_size <= 0)
1576
0
        return -1;
1577
1578
    /* Try using the protocol's read_seek if available */
1579
0
    if (s->pb) {
1580
0
        int64_t ret64 = avio_seek_time(s->pb, stream_index, pts, flags);
1581
0
        if (ret64 >= 0)
1582
0
            asf_reset_header(s);
1583
0
        if (ret64 != AVERROR(ENOSYS))
1584
0
            return ret64;
1585
0
    }
1586
1587
    /* explicitly handle the case of seeking to 0 */
1588
0
    if (!pts) {
1589
0
        asf_reset_header(s);
1590
0
        avio_seek(s->pb, ffformatcontext(s)->data_offset, SEEK_SET);
1591
0
        return 0;
1592
0
    }
1593
1594
0
    if (!asf->index_read) {
1595
0
        ret = asf_build_simple_index(s, stream_index);
1596
0
        if (ret < 0)
1597
0
            asf->index_read = -1;
1598
0
    }
1599
1600
0
    if (asf->index_read > 0 && sti->index_entries) {
1601
0
        int index = av_index_search_timestamp(st, pts, flags);
1602
0
        if (index >= 0) {
1603
            /* find the position */
1604
0
            uint64_t pos = sti->index_entries[index].pos;
1605
1606
            /* do the seek */
1607
0
            av_log(s, AV_LOG_DEBUG, "SEEKTO: %"PRId64"\n", pos);
1608
0
            if(avio_seek(s->pb, pos, SEEK_SET) < 0)
1609
0
                return -1;
1610
0
            asf_reset_header(s);
1611
0
            skip_to_key(s);
1612
0
            return 0;
1613
0
        }
1614
0
    }
1615
    /* no index or seeking by index failed */
1616
0
    if (ff_seek_frame_binary(s, stream_index, pts, flags) < 0)
1617
0
        return -1;
1618
0
    asf_reset_header(s);
1619
0
    skip_to_key(s);
1620
0
    return 0;
1621
0
}
1622
1623
const FFInputFormat ff_asf_demuxer = {
1624
    .p.name         = "asf",
1625
    .p.long_name    = NULL_IF_CONFIG_SMALL("ASF (Advanced / Active Streaming Format)"),
1626
    .p.flags        = AVFMT_NOBINSEARCH | AVFMT_NOGENSEARCH,
1627
    .p.priv_class   = &asf_class,
1628
    .priv_data_size = sizeof(ASFContext),
1629
    .read_probe     = asf_probe,
1630
    .read_header    = asf_read_header,
1631
    .read_packet    = asf_read_packet,
1632
    .read_close     = asf_read_close,
1633
    .read_seek      = asf_read_seek,
1634
    .read_timestamp = asf_read_pts,
1635
};