Coverage Report

Created: 2026-10-28 08:13

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ffmpeg/libavformat/usmdec.c
Line
Count
Source
1
/*
2
 * USM demuxer
3
 * Copyright (c) 2023 Paul B Mahol
4
 *
5
 * This file is part of FFmpeg.
6
 *
7
 * FFmpeg is free software; you can redistribute it and/or
8
 * modify it under the terms of the GNU Lesser General Public
9
 * License as published by the Free Software Foundation; either
10
 * version 2.1 of the License, or (at your option) any later version.
11
 *
12
 * FFmpeg is distributed in the hope that it will be useful,
13
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15
 * Lesser General Public License for more details.
16
 *
17
 * You should have received a copy of the GNU Lesser General Public
18
 * License along with FFmpeg; if not, write to the Free Software
19
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20
 */
21
22
#include "libavutil/intfloat.h"
23
#include "libavutil/intreadwrite.h"
24
#include "libavutil/mem.h"
25
#include "libavcodec/bytestream.h"
26
27
#include "avformat.h"
28
#include "demux.h"
29
#include "internal.h"
30
31
52.0M
#define VIDEOI 0
32
30.8M
#define AUDIOI 1
33
1.52M
#define ALPHAI 2
34
2.30k
#define SUBTTI 3
35
36
typedef struct USMChannel {
37
    int index;
38
    int used;
39
    int type;
40
    int codec_id;
41
    int nb_channels;
42
    int nb_frames;
43
    AVRational rate;
44
    int width, height;
45
    int64_t duration;
46
    int64_t extradata_pos;
47
} USMChannel;
48
49
typedef struct USMDemuxContext {
50
    USMChannel ch[4][256];
51
    int nb_channels[4];
52
    uint8_t *header;
53
    unsigned header_size;
54
} USMDemuxContext;
55
56
static int usm_probe(const AVProbeData *p)
57
963k
{
58
963k
    if (AV_RL32(p->buf) != MKTAG('C','R','I','D'))
59
962k
        return 0;
60
61
767
    if (AV_RN32(p->buf + 4) == 0)
62
161
        return 0;
63
64
606
    return AVPROBE_SCORE_MAX / 3;
65
767
}
66
67
static int usm_read_header(AVFormatContext *s)
68
9.02k
{
69
9.02k
    s->ctx_flags |= AVFMTCTX_NOHEADER;
70
9.02k
    return 0;
71
9.02k
}
72
73
static int parse_utf(AVFormatContext *s, AVIOContext *pb,
74
                     USMChannel *ch, int ch_type,
75
                     uint32_t parent_chunk_size)
76
9.03k
{
77
9.03k
    USMDemuxContext *usm = s->priv_data;
78
9.03k
    GetByteContext gb, ugb, sgb;
79
9.03k
    uint32_t chunk_type, chunk_size, offset;
80
9.03k
    uint32_t unique_offset, string_offset;
81
9.03k
    int nb_items, unique_size, nb_dictionaries;
82
9.03k
    AVRational fps = { 0 };
83
9.03k
    int type;
84
85
9.03k
    chunk_type = avio_rb32(pb);
86
9.03k
    chunk_size = avio_rb32(pb);
87
88
9.03k
    if (chunk_type != MKBETAG('@','U','T','F'))
89
668
        return AVERROR_INVALIDDATA;
90
91
8.36k
    if (!chunk_size || chunk_size >= parent_chunk_size)
92
56
        return AVERROR_INVALIDDATA;
93
94
8.30k
    av_fast_malloc(&usm->header, &usm->header_size, chunk_size);
95
8.30k
    if (!usm->header)
96
11
        return AVERROR(ENOMEM);
97
98
8.29k
    if (avio_read(pb, usm->header, chunk_size) != chunk_size)
99
149
        return AVERROR_EOF;
100
101
8.14k
    bytestream2_init(&gb, usm->header, chunk_size);
102
8.14k
    ugb = gb;
103
8.14k
    sgb = gb;
104
8.14k
    unique_offset = bytestream2_get_be32(&gb);
105
8.14k
    string_offset = bytestream2_get_be32(&gb);
106
8.14k
    /*byte_offset =*/ bytestream2_get_be32(&gb);
107
8.14k
    /*payload_name_offset =*/ bytestream2_get_be32(&gb);
108
8.14k
    nb_items = bytestream2_get_be16(&gb);
109
8.14k
    unique_size = bytestream2_get_be16(&gb);
110
8.14k
    nb_dictionaries = bytestream2_get_be32(&gb);
111
8.14k
    if (nb_dictionaries == 0)
112
35
        return AVERROR_INVALIDDATA;
113
114
8.11k
    bytestream2_skip(&ugb, unique_offset);
115
8.11k
    if (bytestream2_get_bytes_left(&ugb) < unique_size)
116
52
        return AVERROR_INVALIDDATA;
117
8.06k
    bytestream2_init(&ugb, ugb.buffer, unique_size);
118
119
8.06k
    bytestream2_skip(&sgb, string_offset);
120
121
30.8M
    for (int i = 0; i < nb_items; i++) {
122
30.8M
        GetByteContext *xgb;
123
30.8M
        uint8_t key[256];
124
30.8M
        int64_t value = -1;
125
30.8M
        int n = 0;
126
127
30.8M
        type = bytestream2_get_byte(&gb);
128
30.8M
        offset = bytestream2_get_be32(&gb);
129
130
30.8M
        bytestream2_seek(&sgb, string_offset + offset, SEEK_SET);
131
169M
        while (bytestream2_get_bytes_left(&sgb) > 0) {
132
147M
            key[n] = bytestream2_get_byte(&sgb);
133
147M
            if (!key[n])
134
8.88M
                break;
135
138M
            if (n >= sizeof(key) - 1)
136
89.2k
                break;
137
138M
            n++;
138
138M
        }
139
30.8M
        key[n] = '\0';
140
141
30.8M
        if ((type >> 5) == 1)
142
74.1k
            xgb = &gb;
143
30.7M
        else
144
30.7M
            xgb = &ugb;
145
146
30.8M
        switch (type & 0x1F) {
147
32.3k
        case 0x10:
148
45.6k
        case 0x11:
149
45.6k
            value = bytestream2_get_byte(xgb);
150
45.6k
            break;
151
12.7k
        case 0x12:
152
37.6k
        case 0x13:
153
37.6k
            value = bytestream2_get_be16(xgb);
154
37.6k
            break;
155
23.9k
        case 0x14:
156
43.6k
        case 0x15:
157
43.6k
            value = bytestream2_get_be32(xgb);
158
43.6k
            break;
159
10.0k
        case 0x16:
160
36.3k
        case 0x17:
161
36.3k
            value = bytestream2_get_be64(xgb);
162
36.3k
            break;
163
12.3k
        case 0x18:
164
12.3k
            value = av_int2float(bytestream2_get_be32(xgb));
165
12.3k
            break;
166
11.3k
        case 0x19:
167
11.3k
            value = av_int2double(bytestream2_get_be64(xgb));
168
11.3k
            break;
169
5.35k
        case 0x1A:
170
5.35k
            break;
171
30.8M
        }
172
173
30.8M
        if (ch_type == AUDIOI) {
174
4.82M
            if (!strcmp(key, "sampling_rate")) {
175
27.4k
                ch->rate.num = value;
176
27.4k
                ch->rate.den = 1;
177
4.79M
            } else if (!strcmp(key, "num_channels")) {
178
287
                ch->nb_channels = value;
179
4.79M
            } else if (!strcmp(key, "total_samples")) {
180
256k
                ch->duration = value;
181
4.53M
            } else if (!strcmp(key, "audio_codec")) {
182
454k
                switch (value) {
183
303
                case 2:
184
303
                    ch->codec_id = AV_CODEC_ID_ADPCM_ADX;
185
303
                    break;
186
97
                case 4:
187
97
                    ch->codec_id = AV_CODEC_ID_HCA;
188
97
                    break;
189
453k
                default:
190
453k
                    av_log(s, AV_LOG_ERROR, "unsupported audio: %d\n", (int)value);
191
453k
                    break;
192
454k
                }
193
454k
            }
194
25.9M
        } else if (ch_type == VIDEOI || ch_type == ALPHAI) {
195
25.4M
            if (!strcmp(key, "width")) {
196
114k
                ch->width = value;
197
25.3M
            } else if (!strcmp(key, "height")) {
198
152k
                ch->height = value;
199
25.1M
            } else if (!strcmp(key, "total_frames")) {
200
65.6k
                ch->nb_frames = value;
201
25.0M
            } else if (!strcmp(key, "framerate_n")) {
202
640k
                fps.num = value;
203
24.4M
            } else if (!strcmp(key, "framerate_d")) {
204
97.8k
                fps.den = value;
205
24.3M
            } else if (!strcmp(key, "mpeg_codec")) {
206
111k
                switch (value) {
207
231
                case 1:
208
231
                    ch->codec_id = AV_CODEC_ID_MPEG1VIDEO;
209
231
                    break;
210
5.85k
                case 5:
211
5.85k
                    ch->codec_id = AV_CODEC_ID_H264;
212
5.85k
                    break;
213
84
                case 9:
214
84
                    ch->codec_id = AV_CODEC_ID_VP9;
215
84
                    break;
216
105k
                default:
217
105k
                    av_log(s, AV_LOG_ERROR, "unsupported video: %d\n", (int)value);
218
105k
                    break;
219
111k
                }
220
111k
            }
221
25.4M
        }
222
30.8M
    }
223
224
8.06k
    if (ch_type == VIDEOI && fps.num && fps.den)
225
105
        ch->rate = fps;
226
227
8.06k
    return 0;
228
8.06k
}
229
230
static int64_t parse_chunk(AVFormatContext *s, AVIOContext *pb,
231
                           uint32_t chunk_type, uint32_t chunk_size,
232
                           AVPacket *pkt)
233
48.0k
{
234
48.0k
    const int is_audio = chunk_type == MKBETAG('@','S','F','A');
235
48.0k
    const int is_alpha = chunk_type == MKBETAG('@','A','L','P');
236
48.0k
    const int is_subtt = chunk_type == MKBETAG('@','S','B','T');
237
48.0k
    USMDemuxContext *usm = s->priv_data;
238
48.0k
    int padding_size, payload_type, payload_offset;
239
48.0k
    const int ch_type = is_subtt ? SUBTTI : is_audio ? AUDIOI : is_alpha ? ALPHAI : VIDEOI;
240
48.0k
    int stream_index, frame_rate;
241
48.0k
    int64_t chunk_start, ret;
242
243
48.0k
    ret = avio_tell(pb);
244
48.0k
    if (ret < 0)
245
0
        return ret;
246
48.0k
    chunk_start = ret;
247
48.0k
    avio_skip(pb, 1);
248
48.0k
    payload_offset = avio_r8(pb);
249
48.0k
    padding_size = avio_rb16(pb);
250
48.0k
    stream_index = avio_r8(pb);
251
48.0k
    avio_skip(pb, 2);
252
48.0k
    payload_type = avio_r8(pb);
253
48.0k
    /*frame_time =*/ avio_rb32(pb);
254
48.0k
    frame_rate = avio_rb32(pb);
255
48.0k
    avio_skip(pb, 8);
256
48.0k
    ret = avio_tell(pb);
257
48.0k
    if (ret < 0)
258
0
        return ret;
259
48.0k
    ret = avio_skip(pb, FFMAX(0, (ret - chunk_start) - payload_offset));
260
48.0k
    if (ret < 0)
261
28
        return ret;
262
263
48.0k
    if (payload_type == 1) {
264
10.7k
        if (usm->ch[ch_type][stream_index].used == 0) {
265
9.03k
            USMChannel *ch = &usm->ch[ch_type][stream_index];
266
267
9.03k
            switch (ch_type) {
268
91
            case ALPHAI:
269
7.61k
            case VIDEOI:
270
7.61k
                ch->type = AVMEDIA_TYPE_VIDEO;
271
7.61k
                break;
272
1.12k
            case AUDIOI:
273
1.12k
                ch->type = AVMEDIA_TYPE_AUDIO;
274
1.12k
                break;
275
297
            case SUBTTI:
276
297
                ch->type = AVMEDIA_TYPE_SUBTITLE;
277
297
                break;
278
0
            default:
279
0
                return AVERROR_INVALIDDATA;
280
9.03k
            }
281
282
9.03k
            ch->used = 1;
283
9.03k
            ch->index = -1;
284
9.03k
            usm->nb_channels[ch_type]++;
285
286
9.03k
            ret = parse_utf(s, pb, ch, ch_type, chunk_size);
287
9.03k
            if (ret < 0)
288
971
                return ret;
289
9.03k
        }
290
37.3k
    } else if (payload_type == 0) {
291
34.7k
        if (usm->ch[ch_type][stream_index].used == 1) {
292
30.6k
            USMChannel *ch = &usm->ch[ch_type][stream_index];
293
30.6k
            int get_extradata = 0;
294
30.6k
            uint32_t pkt_size;
295
30.6k
            AVStream *st;
296
297
30.6k
            if (ch->index < 0) {
298
7.59k
                AVCodecParameters *par;
299
7.59k
                st = avformat_new_stream(s, NULL);
300
7.59k
                if (!st)
301
0
                    return AVERROR(ENOMEM);
302
7.59k
                par = st->codecpar;
303
7.59k
                par->codec_type = ch->type;
304
7.59k
                par->codec_id = ch->codec_id;
305
7.59k
                st->start_time = 0;
306
307
7.59k
                switch (ch->type) {
308
6.74k
                case AVMEDIA_TYPE_VIDEO:
309
6.74k
                    par->width = ch->width;
310
6.74k
                    par->height = ch->height;
311
6.74k
                    st->nb_frames = ch->nb_frames;
312
6.74k
                    break;
313
605
                case AVMEDIA_TYPE_AUDIO:
314
605
                    par->sample_rate = ch->rate.num;
315
605
                    par->ch_layout.nb_channels = ch->nb_channels;
316
605
                    st->duration = ch->duration;
317
605
                    break;
318
7.59k
                }
319
320
7.59k
                ch->index = st->index;
321
7.59k
                if (!ch->rate.num || !ch->rate.den)
322
7.44k
                    ch->rate = av_make_q(frame_rate, 100);
323
7.59k
                avpriv_set_pts_info(st, 64, ch->rate.den, ch->rate.num);
324
325
7.59k
                ffstream(st)->need_parsing = AVSTREAM_PARSE_TIMESTAMPS;
326
7.59k
                get_extradata = ch->codec_id == AV_CODEC_ID_ADPCM_ADX;
327
7.59k
                ch->extradata_pos = avio_tell(pb);
328
7.59k
            }
329
330
30.6k
            ret = avio_tell(pb);
331
30.6k
            if (ret < 0)
332
0
                return ret;
333
334
30.6k
            pkt_size = chunk_size - (ret - chunk_start) - padding_size;
335
30.6k
            if (get_extradata) {
336
21
                if ((ret = ff_get_extradata(s, st->codecpar, pb, pkt_size)) < 0)
337
3
                    return ret;
338
30.6k
            } else {
339
30.6k
                if (ret == ch->extradata_pos && ch->codec_id == AV_CODEC_ID_ADPCM_ADX) {
340
0
                    avio_skip(pb, pkt_size);
341
0
                    ret = 0;
342
30.6k
                } else {
343
30.6k
                    ret = av_get_packet(pb, pkt, pkt_size);
344
30.6k
                    if (ret < 0)
345
1.58k
                        return ret;
346
347
29.0k
                    pkt->stream_index = ch->index;
348
29.0k
                }
349
30.6k
            }
350
351
29.0k
            avio_skip(pb, padding_size);
352
353
29.0k
            if (ret != pkt_size)
354
356
                return AVERROR_EOF;
355
28.6k
            if (get_extradata == 0)
356
28.6k
                return ret;
357
28.6k
        }
358
34.7k
    }
359
360
16.4k
    ret = avio_tell(pb);
361
16.4k
    if (ret < 0)
362
0
        return ret;
363
16.4k
    ret = avio_skip(pb, FFMAX(0, chunk_size - (ret - chunk_start)));
364
16.4k
    if (ret < 0)
365
924
        return ret;
366
15.5k
    return FFERROR_REDO;
367
16.4k
}
368
369
static int usm_read_packet(AVFormatContext *s, AVPacket *pkt)
370
70.9k
{
371
70.9k
    AVIOContext *pb = s->pb;
372
70.9k
    int64_t ret = AVERROR_EOF;
373
374
602k
    while (!avio_feof(pb)) {
375
589k
        uint32_t chunk_type, chunk_size;
376
589k
        int got_packet = 0;
377
589k
        int64_t pos;
378
379
589k
        pos = avio_tell(pb);
380
589k
        if (pos < 0)
381
0
            return pos;
382
589k
        chunk_type = avio_rb32(pb);
383
589k
        chunk_size = avio_rb32(pb);
384
589k
        if (!chunk_size)
385
7.78k
            return AVERROR_INVALIDDATA;
386
387
581k
        switch (chunk_type) {
388
20
        case MKBETAG('C','R','I','D'):
389
533k
        default:
390
533k
            ret = avio_skip(pb, chunk_size);
391
533k
            break;
392
287
        case MKBETAG('@','A','L','P'):
393
2.29k
        case MKBETAG('@','S','B','T'):
394
5.79k
        case MKBETAG('@','S','F','A'):
395
48.0k
        case MKBETAG('@','S','F','V'):
396
48.0k
            ret = parse_chunk(s, pb, chunk_type, chunk_size, pkt);
397
48.0k
            got_packet = ret > 0;
398
48.0k
            break;
399
581k
        }
400
401
581k
        if (got_packet)
402
28.3k
            pkt->pos = pos;
403
404
581k
        if (got_packet || ret < 0)
405
49.6k
            break;
406
581k
    }
407
408
63.1k
    return ret;
409
70.9k
}
410
411
static int usm_read_close(AVFormatContext *s)
412
9.02k
{
413
9.02k
    USMDemuxContext *usm = s->priv_data;
414
9.02k
    av_freep(&usm->header);
415
9.02k
    usm->header_size = 0;
416
9.02k
    return 0;
417
9.02k
}
418
419
const FFInputFormat ff_usm_demuxer = {
420
    .p.name         = "usm",
421
    .p.long_name    = NULL_IF_CONFIG_SMALL("CRI USM"),
422
    .p.extensions   = "usm",
423
    .p.flags        = AVFMT_GENERIC_INDEX | AVFMT_NO_BYTE_SEEK | AVFMT_NOBINSEARCH,
424
    .priv_data_size = sizeof(USMDemuxContext),
425
    .read_probe     = usm_probe,
426
    .read_header    = usm_read_header,
427
    .read_packet    = usm_read_packet,
428
    .read_close     = usm_read_close,
429
};