Coverage Report

Created: 2018-09-25 14:53

/src/mozilla-central/media/libtheora/lib/decinfo.c
Line
Count
Source (jump to first uncovered line)
1
/********************************************************************
2
 *                                                                  *
3
 * THIS FILE IS PART OF THE OggTheora SOFTWARE CODEC SOURCE CODE.   *
4
 * USE, DISTRIBUTION AND REPRODUCTION OF THIS LIBRARY SOURCE IS     *
5
 * GOVERNED BY A BSD-STYLE SOURCE LICENSE INCLUDED WITH THIS SOURCE *
6
 * IN 'COPYING'. PLEASE READ THESE TERMS BEFORE DISTRIBUTING.       *
7
 *                                                                  *
8
 * THE Theora SOURCE CODE IS COPYRIGHT (C) 2002-2009                *
9
 * by the Xiph.Org Foundation and contributors http://www.xiph.org/ *
10
 *                                                                  *
11
 ********************************************************************
12
13
  function:
14
    last mod: $Id: decinfo.c 17276 2010-06-05 05:57:05Z tterribe $
15
16
 ********************************************************************/
17
18
#include <stdlib.h>
19
#include <string.h>
20
#include <limits.h>
21
#include "decint.h"
22
23
24
25
/*Unpacks a series of octets from a given byte array into the pack buffer.
26
  No checking is done to ensure the buffer contains enough data.
27
  _opb: The pack buffer to read the octets from.
28
  _buf: The byte array to store the unpacked bytes in.
29
  _len: The number of octets to unpack.*/
30
0
static void oc_unpack_octets(oc_pack_buf *_opb,char *_buf,size_t _len){
31
0
  while(_len-->0){
32
0
    long val;
33
0
    val=oc_pack_read(_opb,8);
34
0
    *_buf++=(char)val;
35
0
  }
36
0
}
37
38
/*Unpacks a 32-bit integer encoded by octets in little-endian form.*/
39
0
static long oc_unpack_length(oc_pack_buf *_opb){
40
0
  long ret[4];
41
0
  int  i;
42
0
  for(i=0;i<4;i++)ret[i]=oc_pack_read(_opb,8);
43
0
  return ret[0]|ret[1]<<8|ret[2]<<16|ret[3]<<24;
44
0
}
45
46
0
static int oc_info_unpack(oc_pack_buf *_opb,th_info *_info){
47
0
  long val;
48
0
  /*Check the codec bitstream version.*/
49
0
  val=oc_pack_read(_opb,8);
50
0
  _info->version_major=(unsigned char)val;
51
0
  val=oc_pack_read(_opb,8);
52
0
  _info->version_minor=(unsigned char)val;
53
0
  val=oc_pack_read(_opb,8);
54
0
  _info->version_subminor=(unsigned char)val;
55
0
  /*verify we can parse this bitstream version.
56
0
     We accept earlier minors and all subminors, by spec*/
57
0
  if(_info->version_major>TH_VERSION_MAJOR||
58
0
   _info->version_major==TH_VERSION_MAJOR&&
59
0
   _info->version_minor>TH_VERSION_MINOR){
60
0
    return TH_EVERSION;
61
0
  }
62
0
  /*Read the encoded frame description.*/
63
0
  val=oc_pack_read(_opb,16);
64
0
  _info->frame_width=(ogg_uint32_t)val<<4;
65
0
  val=oc_pack_read(_opb,16);
66
0
  _info->frame_height=(ogg_uint32_t)val<<4;
67
0
  val=oc_pack_read(_opb,24);
68
0
  _info->pic_width=(ogg_uint32_t)val;
69
0
  val=oc_pack_read(_opb,24);
70
0
  _info->pic_height=(ogg_uint32_t)val;
71
0
  val=oc_pack_read(_opb,8);
72
0
  _info->pic_x=(ogg_uint32_t)val;
73
0
  val=oc_pack_read(_opb,8);
74
0
  _info->pic_y=(ogg_uint32_t)val;
75
0
  val=oc_pack_read(_opb,32);
76
0
  _info->fps_numerator=(ogg_uint32_t)val;
77
0
  val=oc_pack_read(_opb,32);
78
0
  _info->fps_denominator=(ogg_uint32_t)val;
79
0
  if(_info->frame_width==0||_info->frame_height==0||
80
0
   _info->pic_width+_info->pic_x>_info->frame_width||
81
0
   _info->pic_height+_info->pic_y>_info->frame_height||
82
0
   _info->fps_numerator==0||_info->fps_denominator==0){
83
0
    return TH_EBADHEADER;
84
0
  }
85
0
  /*Note: The sense of pic_y is inverted in what we pass back to the
86
0
     application compared to how it is stored in the bitstream.
87
0
    This is because the bitstream uses a right-handed coordinate system, while
88
0
     applications expect a left-handed one.*/
89
0
  _info->pic_y=_info->frame_height-_info->pic_height-_info->pic_y;
90
0
  val=oc_pack_read(_opb,24);
91
0
  _info->aspect_numerator=(ogg_uint32_t)val;
92
0
  val=oc_pack_read(_opb,24);
93
0
  _info->aspect_denominator=(ogg_uint32_t)val;
94
0
  val=oc_pack_read(_opb,8);
95
0
  _info->colorspace=(th_colorspace)val;
96
0
  val=oc_pack_read(_opb,24);
97
0
  _info->target_bitrate=(int)val;
98
0
  val=oc_pack_read(_opb,6);
99
0
  _info->quality=(int)val;
100
0
  val=oc_pack_read(_opb,5);
101
0
  _info->keyframe_granule_shift=(int)val;
102
0
  val=oc_pack_read(_opb,2);
103
0
  _info->pixel_fmt=(th_pixel_fmt)val;
104
0
  if(_info->pixel_fmt==TH_PF_RSVD)return TH_EBADHEADER;
105
0
  val=oc_pack_read(_opb,3);
106
0
  if(val!=0||oc_pack_bytes_left(_opb)<0)return TH_EBADHEADER;
107
0
  return 0;
108
0
}
109
110
0
static int oc_comment_unpack(oc_pack_buf *_opb,th_comment *_tc){
111
0
  long len;
112
0
  int  i;
113
0
  /*Read the vendor string.*/
114
0
  len=oc_unpack_length(_opb);
115
0
  if(len<0||len>oc_pack_bytes_left(_opb))return TH_EBADHEADER;
116
0
  _tc->vendor=_ogg_malloc((size_t)len+1);
117
0
  if(_tc->vendor==NULL)return TH_EFAULT;
118
0
  oc_unpack_octets(_opb,_tc->vendor,len);
119
0
  _tc->vendor[len]='\0';
120
0
  /*Read the user comments.*/
121
0
  _tc->comments=(int)oc_unpack_length(_opb);
122
0
  len=_tc->comments;
123
0
  if(len<0||len>(LONG_MAX>>2)||len<<2>oc_pack_bytes_left(_opb)){
124
0
    _tc->comments=0;
125
0
    return TH_EBADHEADER;
126
0
  }
127
0
  _tc->comment_lengths=(int *)_ogg_malloc(
128
0
   _tc->comments*sizeof(_tc->comment_lengths[0]));
129
0
  _tc->user_comments=(char **)_ogg_malloc(
130
0
   _tc->comments*sizeof(_tc->user_comments[0]));
131
0
  if(_tc->comment_lengths==NULL||_tc->user_comments==NULL){
132
0
    _tc->comments=0;
133
0
    return TH_EFAULT;
134
0
  }
135
0
  for(i=0;i<_tc->comments;i++){
136
0
    len=oc_unpack_length(_opb);
137
0
    if(len<0||len>oc_pack_bytes_left(_opb)){
138
0
      _tc->comments=i;
139
0
      return TH_EBADHEADER;
140
0
    }
141
0
    _tc->comment_lengths[i]=len;
142
0
    _tc->user_comments[i]=_ogg_malloc((size_t)len+1);
143
0
    if(_tc->user_comments[i]==NULL){
144
0
      _tc->comments=i;
145
0
      return TH_EFAULT;
146
0
    }
147
0
    oc_unpack_octets(_opb,_tc->user_comments[i],len);
148
0
    _tc->user_comments[i][len]='\0';
149
0
  }
150
0
  return oc_pack_bytes_left(_opb)<0?TH_EBADHEADER:0;
151
0
}
152
153
0
static int oc_setup_unpack(oc_pack_buf *_opb,th_setup_info *_setup){
154
0
  int ret;
155
0
  /*Read the quantizer tables.*/
156
0
  ret=oc_quant_params_unpack(_opb,&_setup->qinfo);
157
0
  if(ret<0)return ret;
158
0
  /*Read the Huffman trees.*/
159
0
  return oc_huff_trees_unpack(_opb,_setup->huff_tables);
160
0
}
161
162
0
static void oc_setup_clear(th_setup_info *_setup){
163
0
  oc_quant_params_clear(&_setup->qinfo);
164
0
  oc_huff_trees_clear(_setup->huff_tables);
165
0
}
166
167
static int oc_dec_headerin(oc_pack_buf *_opb,th_info *_info,
168
0
 th_comment *_tc,th_setup_info **_setup,ogg_packet *_op){
169
0
  char buffer[6];
170
0
  long val;
171
0
  int  packtype;
172
0
  int  ret;
173
0
  val=oc_pack_read(_opb,8);
174
0
  packtype=(int)val;
175
0
  /*If we're at a data packet and we have received all three headers, we're
176
0
     done.*/
177
0
  if(!(packtype&0x80)&&_info->frame_width>0&&_tc->vendor!=NULL&&*_setup!=NULL){
178
0
    return 0;
179
0
  }
180
0
  /*Check the codec string.*/
181
0
  oc_unpack_octets(_opb,buffer,6);
182
0
  if(memcmp(buffer,"theora",6)!=0)return TH_ENOTFORMAT;
183
0
  switch(packtype){
184
0
    /*Codec info header.*/
185
0
    case 0x80:{
186
0
      /*This should be the first packet, and we should not already be
187
0
         initialized.*/
188
0
      if(!_op->b_o_s||_info->frame_width>0)return TH_EBADHEADER;
189
0
      ret=oc_info_unpack(_opb,_info);
190
0
      if(ret<0)th_info_clear(_info);
191
0
      else ret=3;
192
0
    }break;
193
0
    /*Comment header.*/
194
0
    case 0x81:{
195
0
      if(_tc==NULL)return TH_EFAULT;
196
0
      /*We shoud have already decoded the info header, and should not yet have
197
0
         decoded the comment header.*/
198
0
      if(_info->frame_width==0||_tc->vendor!=NULL)return TH_EBADHEADER;
199
0
      ret=oc_comment_unpack(_opb,_tc);
200
0
      if(ret<0)th_comment_clear(_tc);
201
0
      else ret=2;
202
0
    }break;
203
0
    /*Codec setup header.*/
204
0
    case 0x82:{
205
0
      oc_setup_info *setup;
206
0
      if(_tc==NULL||_setup==NULL)return TH_EFAULT;
207
0
      /*We should have already decoded the info header and the comment header,
208
0
         and should not yet have decoded the setup header.*/
209
0
      if(_info->frame_width==0||_tc->vendor==NULL||*_setup!=NULL){
210
0
        return TH_EBADHEADER;
211
0
      }
212
0
      setup=(oc_setup_info *)_ogg_calloc(1,sizeof(*setup));
213
0
      if(setup==NULL)return TH_EFAULT;
214
0
      ret=oc_setup_unpack(_opb,setup);
215
0
      if(ret<0){
216
0
        oc_setup_clear(setup);
217
0
        _ogg_free(setup);
218
0
      }
219
0
      else{
220
0
        *_setup=setup;
221
0
        ret=1;
222
0
      }
223
0
    }break;
224
0
    default:{
225
0
      /*We don't know what this header is.*/
226
0
      return TH_EBADHEADER;
227
0
    }break;
228
0
  }
229
0
  return ret;
230
0
}
231
232
233
/*Decodes one header packet.
234
  This should be called repeatedly with the packets at the beginning of the
235
   stream until it returns 0.*/
236
int th_decode_headerin(th_info *_info,th_comment *_tc,
237
0
 th_setup_info **_setup,ogg_packet *_op){
238
0
  oc_pack_buf opb;
239
0
  if(_op==NULL)return TH_EBADHEADER;
240
0
  if(_info==NULL)return TH_EFAULT;
241
0
  oc_pack_readinit(&opb,_op->packet,_op->bytes);
242
0
  return oc_dec_headerin(&opb,_info,_tc,_setup,_op);
243
0
}
244
245
0
void th_setup_free(th_setup_info *_setup){
246
0
  if(_setup!=NULL){
247
0
    oc_setup_clear(_setup);
248
0
    _ogg_free(_setup);
249
0
  }
250
0
}