Coverage Report

Created: 2026-10-28 08:13

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ffmpeg/libavcodec/tscc2.c
Line
Count
Source
1
/*
2
 * TechSmith Screen Codec 2 (aka Dora) decoder
3
 * Copyright (c) 2012 Konstantin Shishkov
4
 *
5
 * This file is part of FFmpeg.
6
 *
7
 * FFmpeg is free software; you can redistribute it and/or
8
 * modify it under the terms of the GNU Lesser General Public
9
 * License as published by the Free Software Foundation; either
10
 * version 2.1 of the License, or (at your option) any later version.
11
 *
12
 * FFmpeg is distributed in the hope that it will be useful,
13
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15
 * Lesser General Public License for more details.
16
 *
17
 * You should have received a copy of the GNU Lesser General Public
18
 * License along with FFmpeg; if not, write to the Free Software
19
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20
 */
21
22
/**
23
 * @file
24
 * TechSmith Screen Codec 2 decoder
25
 */
26
27
#include <inttypes.h>
28
29
#include "libavutil/mem.h"
30
#include "libavutil/thread.h"
31
32
#define BITSTREAM_READER_LE
33
#include "avcodec.h"
34
#include "bytestream.h"
35
#include "codec_internal.h"
36
#include "decode.h"
37
#include "get_bits.h"
38
#include "mathops.h"
39
#include "tscc2data.h"
40
41
699k
#define TSCC2_VLC_BITS 9
42
43
typedef struct TSCC2Context {
44
    AVCodecContext *avctx;
45
    AVFrame       *pic;
46
    int            mb_width, mb_height;
47
    uint8_t        *slice_quants;
48
    int            quant[2];
49
    int            q[2][3];
50
    GetBitContext  gb;
51
52
    int            block[16];
53
} TSCC2Context;
54
55
static VLC dc_vlc, nc_vlc[NUM_VLC_SETS], ac_vlc[NUM_VLC_SETS];
56
57
static av_cold void tscc2_init_vlc(VLC *vlc, int *offset, int nb_codes,
58
                                   const uint8_t *lens, const void *syms,
59
                                   int sym_length)
60
27
{
61
27
    static VLCElem vlc_buf[15442];
62
63
27
    vlc->table           = &vlc_buf[*offset];
64
27
    vlc->table_allocated = FF_ARRAY_ELEMS(vlc_buf) - *offset;
65
27
    ff_vlc_init_from_lengths(vlc, TSCC2_VLC_BITS, nb_codes,
66
27
                             lens, 1, syms, sym_length, sym_length, 0,
67
27
                             VLC_INIT_STATIC_OVERLONG | VLC_INIT_OUTPUT_LE, NULL);
68
27
    *offset += vlc->table_size;
69
27
}
70
71
static av_cold void tscc2_init_vlcs(void)
72
1
{
73
1
    const uint16_t *ac_vlc_syms = tscc2_ac_vlc_syms;
74
1
    const uint8_t  *ac_vlc_lens = tscc2_ac_vlc_lens;
75
1
    int i, offset = 0;
76
77
1
    tscc2_init_vlc(&dc_vlc, &offset, DC_VLC_COUNT,
78
1
                   tscc2_dc_vlc_lens, tscc2_dc_vlc_syms, 2);
79
80
14
    for (i = 0; i < NUM_VLC_SETS; i++) {
81
13
        tscc2_init_vlc(&nc_vlc[i], &offset, 16,
82
13
                       tscc2_nc_vlc_lens[i], tscc2_nc_vlc_syms[i], 1);
83
84
13
        tscc2_init_vlc(&ac_vlc[i], &offset, tscc2_ac_vlc_sizes[i],
85
13
                       ac_vlc_lens, ac_vlc_syms, 2);
86
13
        ac_vlc_lens += tscc2_ac_vlc_sizes[i];
87
13
        ac_vlc_syms += tscc2_ac_vlc_sizes[i];
88
13
    }
89
1
}
90
91
2.02M
#define DEQUANT(val, q) (((q) * (val) + 0x80) >> 8)
92
#define DCT1D(d0, d1, d2, d3, s0, s1, s2, s3, OP) \
93
1.01M
    OP(d0, 5 * ((s0) + (s1) + (s2)) + 2 * (s3));  \
94
1.01M
    OP(d1, 5 * ((s0) - (s2) - (s3)) + 2 * (s1));  \
95
1.01M
    OP(d2, 5 * ((s0) - (s2) + (s3)) - 2 * (s1));  \
96
1.01M
    OP(d3, 5 * ((s0) - (s1) + (s2)) - 2 * (s3));  \
97
98
2.02M
#define COL_OP(a, b)  a = (b)
99
2.02M
#define ROW_OP(a, b)  a = ((b) + 0x20) >> 6
100
101
static void tscc2_idct4_put(int *in, int q[3], uint8_t *dst, int stride)
102
126k
{
103
126k
    int i;
104
126k
    int tblk[4 * 4];
105
126k
    int t0, t1, t2, t3;
106
107
632k
    for (i = 0; i < 4; i++) {
108
506k
        t0 = DEQUANT(q[0 + (i & 1)], in[0 * 4 + i]);
109
506k
        t1 = DEQUANT(q[1 + (i & 1)], in[1 * 4 + i]);
110
506k
        t2 = DEQUANT(q[0 + (i & 1)], in[2 * 4 + i]);
111
506k
        t3 = DEQUANT(q[1 + (i & 1)], in[3 * 4 + i]);
112
506k
        DCT1D(tblk[0 * 4 + i], tblk[1 * 4 + i],
113
506k
              tblk[2 * 4 + i], tblk[3 * 4 + i],
114
2.02M
              t0, t1, t2, t3, COL_OP);
115
506k
    }
116
632k
    for (i = 0; i < 4; i++) {
117
506k
        DCT1D(dst[0], dst[1], dst[2], dst[3],
118
506k
              tblk[i * 4 + 0], tblk[i * 4 + 1],
119
2.02M
              tblk[i * 4 + 2], tblk[i * 4 + 3], ROW_OP);
120
506k
        dst += stride;
121
506k
    }
122
126k
}
123
124
static int tscc2_decode_mb(TSCC2Context *c, int *q, int vlc_set,
125
                           uint8_t *dst, int stride, int plane)
126
31.9k
{
127
31.9k
    GetBitContext *gb = &c->gb;
128
31.9k
    int prev_dc, dc, nc, ac, bpos, val;
129
31.9k
    int i, j, k, l;
130
131
31.9k
    if (get_bits1(gb)) {
132
15.9k
        if (get_bits1(gb)) {
133
14.7k
            val = get_bits(gb, 8);
134
133k
            for (i = 0; i < 8; i++, dst += stride)
135
118k
                memset(dst, val, 16);
136
14.7k
        } else {
137
1.16k
            if (get_bits_left(gb) < 16 * 8 * 8)
138
229
                return AVERROR_INVALIDDATA;
139
8.39k
            for (i = 0; i < 8; i++) {
140
126k
                for (j = 0; j < 16; j++)
141
119k
                    dst[j] = get_bits(gb, 8);
142
7.46k
                dst += stride;
143
7.46k
            }
144
933
        }
145
15.7k
        return 0;
146
15.9k
    }
147
148
16.0k
    prev_dc = 0;
149
47.5k
    for (j = 0; j < 2; j++) {
150
158k
        for (k = 0; k < 4; k++) {
151
126k
            if (!(j | k)) {
152
16.0k
                dc = get_bits(gb, 8);
153
110k
            } else {
154
110k
                dc = get_vlc2(gb, dc_vlc.table, TSCC2_VLC_BITS, 2);
155
110k
                if (dc == 0x100)
156
2.97k
                    dc = get_bits(gb, 8);
157
110k
            }
158
126k
            dc          = (dc + prev_dc) & 0xFF;
159
126k
            prev_dc     = dc;
160
126k
            c->block[0] = dc;
161
162
126k
            nc = get_vlc2(gb, nc_vlc[vlc_set].table, TSCC2_VLC_BITS, 1);
163
164
126k
            bpos = 1;
165
126k
            memset(c->block + 1, 0, 15 * sizeof(*c->block));
166
588k
            for (l = 0; l < nc; l++) {
167
461k
                ac = get_vlc2(gb, ac_vlc[vlc_set].table, TSCC2_VLC_BITS, 2);
168
461k
                if (ac == 0x1000)
169
1.79k
                    ac = get_bits(gb, 12);
170
461k
                bpos += ac & 0xF;
171
461k
                if (bpos >= 16)
172
273
                    return AVERROR_INVALIDDATA;
173
461k
                val = sign_extend(ac >> 4, 8);
174
461k
                c->block[ff_zigzag_scan[bpos++]] = val;
175
461k
            }
176
126k
            tscc2_idct4_put(c->block, q, dst + k * 4, stride);
177
126k
        }
178
31.5k
        dst += 4 * stride;
179
31.5k
    }
180
15.7k
    return 0;
181
16.0k
}
182
183
static int tscc2_decode_slice(TSCC2Context *c, int mb_y,
184
                              const uint8_t *buf, int buf_size)
185
6.88k
{
186
6.88k
    int i, mb_x, q, ret;
187
6.88k
    int off;
188
189
6.88k
    if ((ret = init_get_bits8(&c->gb, buf, buf_size)) < 0)
190
0
        return ret;
191
192
64.0k
    for (mb_x = 0; mb_x < c->mb_width; mb_x++) {
193
57.6k
        q = c->slice_quants[mb_x + c->mb_width * mb_y];
194
195
57.6k
        if (q == 0 || q == 3) // skip block
196
46.7k
            continue;
197
42.3k
        for (i = 0; i < 3; i++) {
198
31.9k
            off = mb_x * 16 + mb_y * 8 * c->pic->linesize[i];
199
31.9k
            ret = tscc2_decode_mb(c, c->q[q - 1], c->quant[q - 1] - 2,
200
31.9k
                                  c->pic->data[i] + off, c->pic->linesize[i], i);
201
31.9k
            if (ret)
202
502
                return ret;
203
31.9k
        }
204
10.8k
    }
205
206
6.38k
    return 0;
207
6.88k
}
208
209
static int tscc2_decode_frame(AVCodecContext *avctx, AVFrame *rframe,
210
                              int *got_frame, AVPacket *avpkt)
211
249k
{
212
249k
    const uint8_t *buf = avpkt->data;
213
249k
    int buf_size = avpkt->size;
214
249k
    TSCC2Context *c = avctx->priv_data;
215
249k
    GetByteContext gb;
216
249k
    uint32_t frame_type, size;
217
249k
    int i, val, len, pos = 0;
218
249k
    int num_mb = c->mb_width * c->mb_height;
219
249k
    int ret;
220
221
249k
    bytestream2_init(&gb, buf, buf_size);
222
249k
    frame_type = bytestream2_get_byte(&gb);
223
249k
    if (frame_type > 1) {
224
97.5k
        av_log(avctx, AV_LOG_ERROR, "Incorrect frame type %"PRIu32"\n",
225
97.5k
               frame_type);
226
97.5k
        return AVERROR_INVALIDDATA;
227
97.5k
    }
228
229
152k
    if (frame_type == 0) {
230
        // Skip duplicate frames
231
136k
        return buf_size;
232
136k
    }
233
234
15.6k
    if ((ret = ff_reget_buffer(avctx, c->pic, 0)) < 0) {
235
3.27k
        return ret;
236
3.27k
    }
237
238
12.3k
    if (bytestream2_get_bytes_left(&gb) < 4) {
239
4.45k
        av_log(avctx, AV_LOG_ERROR, "Frame is too short\n");
240
4.45k
        return AVERROR_INVALIDDATA;
241
4.45k
    }
242
243
7.89k
    c->quant[0] = bytestream2_get_byte(&gb);
244
7.89k
    c->quant[1] = bytestream2_get_byte(&gb);
245
7.89k
    if (c->quant[0] < 2 || c->quant[0] > NUM_VLC_SETS + 1 ||
246
7.16k
        c->quant[1] < 2 || c->quant[1] > NUM_VLC_SETS + 1) {
247
1.21k
        av_log(avctx, AV_LOG_ERROR, "Invalid quantisers %d / %d\n",
248
1.21k
               c->quant[0], c->quant[1]);
249
1.21k
        return AVERROR_INVALIDDATA;
250
1.21k
    }
251
252
26.7k
    for (i = 0; i < 3; i++) {
253
20.0k
        c->q[0][i] = tscc2_quants[c->quant[0] - 2][i];
254
20.0k
        c->q[1][i] = tscc2_quants[c->quant[1] - 2][i];
255
20.0k
    }
256
257
6.67k
    bytestream2_skip(&gb, 1);
258
259
6.67k
    size = bytestream2_get_le32(&gb);
260
6.67k
    if (size > bytestream2_get_bytes_left(&gb)) {
261
456
        av_log(avctx, AV_LOG_ERROR, "Slice properties chunk is too large\n");
262
456
        return AVERROR_INVALIDDATA;
263
456
    }
264
265
76.5k
    for (i = 0; i < size; i++) {
266
70.6k
        val   = bytestream2_get_byte(&gb);
267
70.6k
        len   = val & 0x3F;
268
70.6k
        val >>= 6;
269
70.6k
        if (pos + len > num_mb) {
270
343
            av_log(avctx, AV_LOG_ERROR, "Too many slice properties\n");
271
343
            return AVERROR_INVALIDDATA;
272
343
        }
273
70.3k
        memset(c->slice_quants + pos, val, len);
274
70.3k
        pos += len;
275
70.3k
    }
276
5.88k
    if (pos < num_mb) {
277
1.25k
        av_log(avctx, AV_LOG_ERROR, "Too few slice properties (%d / %d)\n",
278
1.25k
               pos, num_mb);
279
1.25k
        return AVERROR_INVALIDDATA;
280
1.25k
    }
281
282
11.0k
    for (i = 0; i < c->mb_height; i++) {
283
7.55k
        size = bytestream2_peek_byte(&gb);
284
7.55k
        if (size & 1) {
285
2.17k
            size = bytestream2_get_byte(&gb) - 1;
286
5.37k
        } else {
287
5.37k
            size = bytestream2_get_le32(&gb) >> 1;
288
5.37k
        }
289
7.55k
        if (!size) {
290
4.95k
            int skip_row = 1, j, off = i * c->mb_width;
291
14.2k
            for (j = 0; j < c->mb_width; j++) {
292
9.58k
                if (c->slice_quants[off + j] == 1 ||
293
9.30k
                    c->slice_quants[off + j] == 2) {
294
294
                    skip_row = 0;
295
294
                    break;
296
294
                }
297
9.58k
            }
298
4.95k
            if (!skip_row) {
299
294
                av_log(avctx, AV_LOG_ERROR, "Non-skip row with zero size\n");
300
294
                return AVERROR_INVALIDDATA;
301
294
            }
302
4.95k
        }
303
7.25k
        if (bytestream2_get_bytes_left(&gb) < size) {
304
376
            av_log(avctx, AV_LOG_ERROR, "Invalid slice size (%"PRIu32"/%u)\n",
305
376
                   size, bytestream2_get_bytes_left(&gb));
306
376
            return AVERROR_INVALIDDATA;
307
376
        }
308
6.88k
        ret = tscc2_decode_slice(c, i, buf + bytestream2_tell(&gb), size);
309
6.88k
        if (ret) {
310
502
            av_log(avctx, AV_LOG_ERROR, "Error decoding slice %d\n", i);
311
502
            return ret;
312
502
        }
313
6.38k
        bytestream2_skip(&gb, size);
314
6.38k
    }
315
316
3.44k
    *got_frame      = 1;
317
3.44k
    if ((ret = av_frame_ref(rframe, c->pic)) < 0)
318
0
        return ret;
319
320
    /* always report that the buffer was completely consumed */
321
3.44k
    return buf_size;
322
3.44k
}
323
324
static av_cold int tscc2_decode_end(AVCodecContext *avctx)
325
1.03k
{
326
1.03k
    TSCC2Context * const c = avctx->priv_data;
327
328
1.03k
    av_frame_free(&c->pic);
329
1.03k
    av_freep(&c->slice_quants);
330
331
1.03k
    return 0;
332
1.03k
}
333
334
static av_cold int tscc2_decode_init(AVCodecContext *avctx)
335
1.03k
{
336
1.03k
    TSCC2Context * const c = avctx->priv_data;
337
1.03k
    static AVOnce init_static_once = AV_ONCE_INIT;
338
339
1.03k
    c->avctx = avctx;
340
341
1.03k
    avctx->pix_fmt = AV_PIX_FMT_YUV444P;
342
343
1.03k
    c->mb_width     = FFALIGN(avctx->width,  16) >> 4;
344
1.03k
    c->mb_height    = FFALIGN(avctx->height,  8) >> 3;
345
1.03k
    c->slice_quants = av_malloc(c->mb_width * c->mb_height);
346
1.03k
    if (!c->slice_quants) {
347
0
        av_log(avctx, AV_LOG_ERROR, "Cannot allocate slice information\n");
348
0
        return AVERROR(ENOMEM);
349
0
    }
350
351
1.03k
    c->pic = av_frame_alloc();
352
1.03k
    if (!c->pic)
353
0
        return AVERROR(ENOMEM);
354
355
1.03k
    ff_thread_once(&init_static_once, tscc2_init_vlcs);
356
357
1.03k
    return 0;
358
1.03k
}
359
360
const FFCodec ff_tscc2_decoder = {
361
    .p.name         = "tscc2",
362
    CODEC_LONG_NAME("TechSmith Screen Codec 2"),
363
    .p.type         = AVMEDIA_TYPE_VIDEO,
364
    .p.id           = AV_CODEC_ID_TSCC2,
365
    .priv_data_size = sizeof(TSCC2Context),
366
    .init           = tscc2_decode_init,
367
    .close          = tscc2_decode_end,
368
    FF_CODEC_DECODE_CB(tscc2_decode_frame),
369
    .p.capabilities = AV_CODEC_CAP_DR1,
370
    .caps_internal  = FF_CODEC_CAP_INIT_CLEANUP,
371
};