Coverage Report

Created: 2026-09-14 08:00

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ffmpeg/libavformat/h264dec.c
Line
Count
Source
1
/*
2
 * RAW H.264 video demuxer
3
 * Copyright (c) 2008 Michael Niedermayer <michaelni@gmx.at>
4
 *
5
 * This file is part of FFmpeg.
6
 *
7
 * FFmpeg is free software; you can redistribute it and/or
8
 * modify it under the terms of the GNU Lesser General Public
9
 * License as published by the Free Software Foundation; either
10
 * version 2.1 of the License, or (at your option) any later version.
11
 *
12
 * FFmpeg is distributed in the hope that it will be useful,
13
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15
 * Lesser General Public License for more details.
16
 *
17
 * You should have received a copy of the GNU Lesser General Public
18
 * License along with FFmpeg; if not, write to the Free Software
19
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20
 */
21
22
#include "libavcodec/get_bits.h"
23
#include "libavcodec/golomb.h"
24
#include "avformat.h"
25
#include "rawdec.h"
26
27
399k
#define MAX_SPS_COUNT          32
28
601k
#define MAX_PPS_COUNT         256
29
30
static int h264_probe(const AVProbeData *p)
31
964k
{
32
964k
    uint32_t code = -1;
33
964k
    int sps = 0, pps = 0, idr = 0, res = 0, sli = 0;
34
964k
    int i, ret;
35
964k
    int pps_ids[MAX_PPS_COUNT+1] = {0};
36
964k
    int sps_ids[MAX_SPS_COUNT+1] = {0};
37
964k
    unsigned pps_id, sps_id;
38
964k
    GetBitContext gb;
39
40
677M
    for (i = 0; i + 2 < p->buf_size; i++) {
41
677M
        code = (code << 8) + p->buf[i];
42
677M
        if ((code & 0xffffff00) == 0x100) {
43
2.84M
            int ref_idc = (code >> 5) & 3;
44
2.84M
            int type    = code & 0x1F;
45
2.84M
            static const int8_t ref_zero[] = {
46
2.84M
                 2,  0,  0,  0,  0, -1,  1, -1,
47
2.84M
                -1,  1,  1,  1,  1, -1,  2,  2,
48
2.84M
                 2,  2,  2,  0,  2,  2,  2,  2,
49
2.84M
                 2,  2,  2,  2,  2,  2,  2,  2
50
2.84M
            };
51
52
2.84M
            if (code & 0x80) // forbidden_bit
53
302k
                return 0;
54
55
2.54M
            if (ref_zero[type] == 1 && ref_idc)
56
35.1k
                return 0;
57
2.50M
            if (ref_zero[type] == -1 && !ref_idc)
58
22.1k
                return 0;
59
2.48M
            if (ref_zero[type] == 2) {
60
1.36M
                if (!(code == 0x100 && !p->buf[i + 1] && !p->buf[i + 2]))
61
1.07M
                    res++;
62
1.36M
            }
63
64
2.48M
            ret = init_get_bits8(&gb, p->buf + i + 1, p->buf_size - i - 1);
65
2.48M
            if (ret < 0)
66
0
                return 0;
67
68
2.48M
            switch (type) {
69
238k
            case 1:
70
324k
            case 5:
71
324k
                get_ue_golomb_long(&gb);
72
324k
                if (get_ue_golomb_long(&gb) > 9U)
73
23.3k
                    return 0;
74
301k
                pps_id = get_ue_golomb_long(&gb);
75
301k
                if (pps_id > MAX_PPS_COUNT)
76
3.94k
                    return 0;
77
297k
                if (!pps_ids[pps_id])
78
180k
                    break;
79
80
116k
                if (type == 1)
81
67.3k
                    sli++;
82
49.0k
                else
83
49.0k
                    idr++;
84
116k
                break;
85
111k
            case 7:
86
111k
                skip_bits(&gb, 14);
87
111k
                if (get_bits(&gb, 2))
88
7.27k
                    return 0;
89
104k
                skip_bits(&gb, 8);
90
104k
                sps_id = get_ue_golomb_long(&gb);
91
104k
                if (sps_id > MAX_SPS_COUNT)
92
1.51k
                    return 0;
93
103k
                sps_ids[sps_id] = 1;
94
103k
                sps++;
95
103k
                break;
96
300k
            case 8:
97
300k
                pps_id = get_ue_golomb_long(&gb);
98
300k
                if (pps_id > MAX_PPS_COUNT)
99
5.85k
                    return 0;
100
294k
                sps_id = get_ue_golomb_long(&gb);
101
294k
                if (sps_id > MAX_SPS_COUNT)
102
1.52k
                    return 0;
103
293k
                if (!sps_ids[sps_id])
104
197k
                    break;
105
96.0k
                pps_ids[pps_id] = 1;
106
96.0k
                pps++;
107
96.0k
                break;
108
2.48M
            }
109
2.48M
        }
110
677M
    }
111
561k
    ff_tlog(NULL, "sps:%d pps:%d idr:%d sli:%d res:%d\n", sps, pps, idr, sli, res);
112
113
561k
    if (sps && pps && (idr || sli > 3) && res < (sps + pps + idr))
114
12.9k
        return AVPROBE_SCORE_EXTENSION + 1;  // 1 more than .mpg
115
116
548k
    return 0;
117
561k
}
118
119
FF_DEF_RAWVIDEO_DEMUXER(h264, "raw H.264 video", h264_probe, "h26l,h264,264,avc", AV_CODEC_ID_H264)