Coverage Report

Created: 2026-09-01 06:39

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/FreeRDP/libfreerdp/codec/nsc.c
Line
Count
Source
1
/**
2
 * FreeRDP: A Remote Desktop Protocol Implementation
3
 * NSCodec Codec
4
 *
5
 * Copyright 2011 Samsung, Author Jiten Pathy
6
 * Copyright 2012 Vic Lee
7
 * Copyright 2016 Armin Novak <armin.novak@thincast.com>
8
 * Copyright 2016 Thincast Technologies GmbH
9
 *
10
 * Licensed under the Apache License, Version 2.0 (the "License");
11
 * you may not use this file except in compliance with the License.
12
 * You may obtain a copy of the License at
13
 *
14
 *   http://www.apache.org/licenses/LICENSE-2.0
15
 *
16
 * Unless required by applicable law or agreed to in writing, software
17
 * distributed under the License is distributed on an "AS IS" BASIS,
18
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
19
 * See the License for the specific language governing permissions and
20
 * limitations under the License.
21
 */
22
23
#include <freerdp/config.h>
24
25
#include <stdio.h>
26
#include <stdlib.h>
27
#include <string.h>
28
29
#include <winpr/assert.h>
30
#include <winpr/cast.h>
31
#include <winpr/crt.h>
32
33
#include <freerdp/codec/nsc.h>
34
#include <freerdp/codec/color.h>
35
36
#include "nsc_types.h"
37
#include "nsc_encode.h"
38
39
#include "sse/nsc_sse2.h"
40
#include "neon/nsc_neon.h"
41
42
#include <freerdp/log.h>
43
44
static BOOL nsc_decode(NSC_CONTEXT* WINPR_RESTRICT context)
45
742
{
46
742
  size_t pos = 0;
47
48
742
  if (!context)
49
0
    return FALSE;
50
51
742
  const UINT16 rw = ROUND_UP_TO(context->width, 8);
52
742
  WINPR_ASSERT(context->ColorLossLevel >= 1);
53
742
  const BYTE shift = WINPR_ASSERTING_INT_CAST(BYTE, context->ColorLossLevel -
54
742
                                                        1); /* colorloss recovery + YCoCg shift */
55
742
  BYTE* bmpdata = context->BitmapData;
56
57
742
  if (!bmpdata)
58
0
    return FALSE;
59
60
14.4k
  for (size_t y = 0; y < context->height; y++)
61
13.6k
  {
62
13.6k
    const BYTE* yplane = nullptr;
63
13.6k
    const BYTE* coplane = nullptr;
64
13.6k
    const BYTE* cgplane = nullptr;
65
13.6k
    const BYTE* aplane = context->priv->PlaneBuffers[3] + y * context->width; /* A */
66
67
13.6k
    if (context->ChromaSubsamplingLevel)
68
10.7k
    {
69
10.7k
      yplane = context->priv->PlaneBuffers[0] + y * rw;                /* Y */
70
10.7k
      coplane = context->priv->PlaneBuffers[1] + (y >> 1) * (rw >> 1); /* Co, supersampled */
71
10.7k
      cgplane = context->priv->PlaneBuffers[2] + (y >> 1) * (rw >> 1); /* Cg, supersampled */
72
10.7k
    }
73
2.92k
    else
74
2.92k
    {
75
2.92k
      yplane = context->priv->PlaneBuffers[0] + y * context->width;  /* Y */
76
2.92k
      coplane = context->priv->PlaneBuffers[1] + y * context->width; /* Co */
77
2.92k
      cgplane = context->priv->PlaneBuffers[2] + y * context->width; /* Cg */
78
2.92k
    }
79
80
552k
    for (UINT32 x = 0; x < context->width; x++)
81
538k
    {
82
538k
      INT16 y_val = (INT16)*yplane;
83
538k
      INT16 co_val = (INT16)(INT8)(((INT16)*coplane) << shift);
84
538k
      INT16 cg_val = (INT16)(INT8)(((INT16)*cgplane) << shift);
85
538k
      INT16 r_val = WINPR_ASSERTING_INT_CAST(int16_t, y_val + co_val - cg_val);
86
538k
      INT16 g_val = WINPR_ASSERTING_INT_CAST(int16_t, y_val + cg_val);
87
538k
      INT16 b_val = WINPR_ASSERTING_INT_CAST(int16_t, y_val - co_val - cg_val);
88
89
538k
      if (pos + 4 > context->BitmapDataLength)
90
0
        return FALSE;
91
92
538k
      pos += 4;
93
538k
      *bmpdata++ = MINMAX(b_val, 0, 0xFF);
94
538k
      *bmpdata++ = MINMAX(g_val, 0, 0xFF);
95
538k
      *bmpdata++ = MINMAX(r_val, 0, 0xFF);
96
538k
      *bmpdata++ = *aplane;
97
538k
      yplane++;
98
538k
      coplane += (context->ChromaSubsamplingLevel ? x % 2 : 1);
99
538k
      cgplane += (context->ChromaSubsamplingLevel ? x % 2 : 1);
100
538k
      aplane++;
101
538k
    }
102
13.6k
  }
103
104
742
  return TRUE;
105
742
}
106
107
static BOOL nsc_rle_decode(const BYTE* WINPR_RESTRICT in, size_t inSize, BYTE* WINPR_RESTRICT out,
108
                           UINT32 outSize, UINT32 originalSize)
109
1.50k
{
110
1.50k
  UINT32 left = originalSize;
111
112
32.8k
  while (left > 4)
113
32.3k
  {
114
32.3k
    if (inSize < 1)
115
110
      return FALSE;
116
32.1k
    inSize--;
117
118
32.1k
    const BYTE value = *in++;
119
32.1k
    UINT32 len = 0;
120
121
32.1k
    if (left == 5)
122
364
    {
123
364
      if (outSize < 1)
124
0
        return FALSE;
125
126
364
      outSize--;
127
364
      *out++ = value;
128
364
      left--;
129
364
    }
130
31.8k
    else if (inSize < 1)
131
273
      return FALSE;
132
31.5k
    else if (value == *in)
133
16.0k
    {
134
16.0k
      inSize--;
135
16.0k
      in++;
136
137
16.0k
      if (inSize < 1)
138
49
        return FALSE;
139
15.9k
      else if (*in < 0xFF)
140
15.2k
      {
141
15.2k
        inSize--;
142
15.2k
        len = (UINT32)*in++;
143
15.2k
        len += 2;
144
15.2k
      }
145
781
      else
146
781
      {
147
781
        if (inSize < 5)
148
36
          return FALSE;
149
745
        inSize -= 5;
150
745
        in++;
151
745
        len = ((UINT32)(*in++));
152
745
        len |= ((UINT32)(*in++)) << 8U;
153
745
        len |= ((UINT32)(*in++)) << 16U;
154
745
        len |= ((UINT32)(*in++)) << 24U;
155
745
      }
156
157
15.9k
      if ((outSize < len) || (left < len))
158
452
        return FALSE;
159
160
15.5k
      outSize -= len;
161
15.5k
      FillMemory(out, len, value);
162
15.5k
      out += len;
163
15.5k
      left -= len;
164
15.5k
    }
165
15.5k
    else
166
15.5k
    {
167
15.5k
      if (outSize < 1)
168
0
        return FALSE;
169
170
15.5k
      outSize--;
171
15.5k
      *out++ = value;
172
15.5k
      left--;
173
15.5k
    }
174
32.1k
  }
175
176
581
  if ((outSize < 4) || (left < 4))
177
52
    return FALSE;
178
179
529
  if (inSize < 4)
180
61
    return FALSE;
181
468
  memcpy(out, in, 4);
182
468
  return TRUE;
183
529
}
184
185
static BOOL nsc_rle_decompress_data(NSC_CONTEXT* WINPR_RESTRICT context)
186
1.77k
{
187
1.77k
  if (!context)
188
0
    return FALSE;
189
190
1.77k
  const BYTE* rle = context->Planes;
191
1.77k
  size_t rleSize = context->PlanesSize;
192
1.77k
  WINPR_ASSERT(rle);
193
194
5.77k
  for (size_t i = 0; i < 4; i++)
195
5.03k
  {
196
5.03k
    const UINT32 originalSize = context->OrgByteCount[i];
197
5.03k
    const UINT32 planeSize = context->PlaneByteCount[i];
198
199
5.03k
    if (rleSize < planeSize)
200
0
      return FALSE;
201
202
5.03k
    if (planeSize == 0)
203
2.70k
    {
204
2.70k
      if (context->priv->PlaneBuffersLength < originalSize)
205
0
        return FALSE;
206
207
2.70k
      FillMemory(context->priv->PlaneBuffers[i], originalSize, 0xFF);
208
2.70k
    }
209
2.32k
    else if (planeSize < originalSize)
210
1.50k
    {
211
1.50k
      if (!nsc_rle_decode(rle, rleSize, context->priv->PlaneBuffers[i],
212
1.50k
                          context->priv->PlaneBuffersLength, originalSize))
213
1.03k
        return FALSE;
214
1.50k
    }
215
827
    else
216
827
    {
217
827
      if (context->priv->PlaneBuffersLength < originalSize)
218
0
        return FALSE;
219
220
827
      if (rleSize < originalSize)
221
0
        return FALSE;
222
223
827
      CopyMemory(context->priv->PlaneBuffers[i], rle, originalSize);
224
827
    }
225
226
4.00k
    rle += planeSize;
227
4.00k
    rleSize -= planeSize;
228
4.00k
  }
229
230
742
  return TRUE;
231
1.77k
}
232
233
static BOOL nsc_stream_initialize(NSC_CONTEXT* WINPR_RESTRICT context, wStream* WINPR_RESTRICT s)
234
2.21k
{
235
2.21k
  WINPR_ASSERT(context);
236
2.21k
  WINPR_ASSERT(context->priv);
237
2.21k
  if (!Stream_CheckAndLogRequiredLengthWLog(context->priv->log, s, 20))
238
85
    return FALSE;
239
240
2.13k
  size_t total = 0;
241
10.6k
  for (size_t i = 0; i < 4; i++)
242
8.52k
  {
243
8.52k
    Stream_Read_UINT32(s, context->PlaneByteCount[i]);
244
8.52k
    total += context->PlaneByteCount[i];
245
8.52k
  }
246
247
2.13k
  Stream_Read_UINT8(s, context->ColorLossLevel);         /* ColorLossLevel (1 byte) */
248
2.13k
  if ((context->ColorLossLevel < 1) || (context->ColorLossLevel > 7))
249
96
  {
250
96
    WLog_Print(context->priv->log, WLOG_ERROR,
251
96
               "ColorLossLevel=%" PRIu8 " out of range, must be [1,7] inclusive",
252
96
               context->ColorLossLevel);
253
96
    return FALSE;
254
96
  }
255
2.03k
  Stream_Read_UINT8(s, context->ChromaSubsamplingLevel); /* ChromaSubsamplingLevel (1 byte) */
256
2.03k
  Stream_Seek(s, 2);                                     /* Reserved (2 bytes) */
257
2.03k
  context->Planes = Stream_Pointer(s);
258
2.03k
  context->PlanesSize = total;
259
2.03k
  return Stream_CheckAndLogRequiredLengthWLog(context->priv->log, s, total);
260
2.13k
}
261
262
static BOOL nsc_context_initialize(NSC_CONTEXT* WINPR_RESTRICT context, wStream* WINPR_RESTRICT s)
263
2.21k
{
264
2.21k
  if (!nsc_stream_initialize(context, s))
265
442
    return FALSE;
266
267
1.77k
  const size_t blength = 4ull * context->width * context->height;
268
269
1.77k
  if (!context->BitmapData || (blength > context->BitmapDataLength))
270
1.76k
  {
271
1.76k
    void* tmp = winpr_aligned_recalloc(context->BitmapData, blength + 16, sizeof(BYTE), 32);
272
273
1.76k
    if (!tmp)
274
0
      return FALSE;
275
276
1.76k
    context->BitmapData = tmp;
277
1.76k
    context->BitmapDataLength = blength;
278
1.76k
  }
279
280
1.77k
  const UINT32 tempWidth = ROUND_UP_TO(context->width, 8);
281
1.77k
  const UINT32 tempHeight = ROUND_UP_TO(context->height, 2);
282
  /* The maximum length a decoded plane can reach in all cases */
283
1.77k
  const size_t plength = 1ull * tempWidth * tempHeight;
284
1.77k
  if (plength > UINT32_MAX)
285
0
    return FALSE;
286
287
1.77k
  if (plength > context->priv->PlaneBuffersLength)
288
1.75k
  {
289
8.77k
    for (size_t i = 0; i < 4; i++)
290
7.02k
    {
291
7.02k
      void* tmp = (BYTE*)winpr_aligned_recalloc(context->priv->PlaneBuffers[i], plength,
292
7.02k
                                                sizeof(BYTE), 32);
293
294
7.02k
      if (!tmp)
295
0
        return FALSE;
296
297
7.02k
      context->priv->PlaneBuffers[i] = tmp;
298
7.02k
    }
299
300
1.75k
    context->priv->PlaneBuffersLength = (UINT32)plength;
301
1.75k
  }
302
303
8.87k
  for (size_t i = 0; i < 4; i++)
304
7.10k
    context->OrgByteCount[i] = context->width * context->height;
305
306
1.77k
  if (context->ChromaSubsamplingLevel)
307
1.06k
  {
308
1.06k
    context->OrgByteCount[0] = tempWidth * context->height;
309
1.06k
    context->OrgByteCount[1] = (tempWidth >> 1) * (tempHeight >> 1);
310
1.06k
    context->OrgByteCount[2] = context->OrgByteCount[1];
311
1.06k
  }
312
313
1.77k
  return TRUE;
314
1.77k
}
315
316
static void nsc_profiler_print(NSC_CONTEXT_PRIV* WINPR_RESTRICT priv)
317
18.5k
{
318
18.5k
  WINPR_UNUSED(priv);
319
320
18.5k
  PROFILER_PRINT_HEADER
321
18.5k
  PROFILER_PRINT(priv->prof_nsc_rle_decompress_data)
322
18.5k
  PROFILER_PRINT(priv->prof_nsc_decode)
323
18.5k
  PROFILER_PRINT(priv->prof_nsc_rle_compress_data)
324
18.5k
  PROFILER_PRINT(priv->prof_nsc_encode)
325
18.5k
  PROFILER_PRINT_FOOTER
326
18.5k
}
327
328
BOOL nsc_context_reset(NSC_CONTEXT* WINPR_RESTRICT context, UINT32 width, UINT32 height)
329
0
{
330
0
  if (!context)
331
0
    return FALSE;
332
333
0
  if ((width > UINT16_MAX) || (height > UINT16_MAX))
334
0
    return FALSE;
335
336
0
  context->width = (UINT16)width;
337
0
  context->height = (UINT16)height;
338
0
  return TRUE;
339
0
}
340
341
NSC_CONTEXT* nsc_context_new(void)
342
18.5k
{
343
18.5k
  NSC_CONTEXT* context = (NSC_CONTEXT*)winpr_aligned_calloc(1, sizeof(NSC_CONTEXT), 32);
344
345
18.5k
  if (!context)
346
0
    return nullptr;
347
348
18.5k
  context->priv = (NSC_CONTEXT_PRIV*)winpr_aligned_calloc(1, sizeof(NSC_CONTEXT_PRIV), 32);
349
350
18.5k
  if (!context->priv)
351
0
    goto error;
352
353
18.5k
  context->priv->log = WLog_Get("com.freerdp.codec.nsc");
354
18.5k
  context->BitmapData = nullptr;
355
18.5k
  context->decode = nsc_decode;
356
18.5k
  context->encode = nsc_encode;
357
358
18.5k
  PROFILER_CREATE(context->priv->prof_nsc_rle_decompress_data, "nsc_rle_decompress_data")
359
18.5k
  PROFILER_CREATE(context->priv->prof_nsc_decode, "nsc_decode")
360
18.5k
  PROFILER_CREATE(context->priv->prof_nsc_rle_compress_data, "nsc_rle_compress_data")
361
18.5k
  PROFILER_CREATE(context->priv->prof_nsc_encode, "nsc_encode")
362
  /* Default encoding parameters */
363
18.5k
  context->ColorLossLevel = 3;
364
18.5k
  context->ChromaSubsamplingLevel = 1;
365
  /* init optimized methods */
366
18.5k
  nsc_init_sse2(context);
367
18.5k
  nsc_init_neon(context);
368
18.5k
  return context;
369
0
error:
370
0
  WINPR_PRAGMA_DIAG_PUSH
371
0
  WINPR_PRAGMA_DIAG_IGNORED_MISMATCHED_DEALLOC
372
0
  nsc_context_free(context);
373
0
  WINPR_PRAGMA_DIAG_POP
374
0
  return nullptr;
375
18.5k
}
376
377
void nsc_context_free(NSC_CONTEXT* context)
378
18.5k
{
379
18.5k
  if (!context)
380
0
    return;
381
382
18.5k
  if (context->priv)
383
18.5k
  {
384
111k
    for (size_t i = 0; i < 5; i++)
385
92.7k
      winpr_aligned_free(context->priv->PlaneBuffers[i]);
386
387
18.5k
    nsc_profiler_print(context->priv);
388
18.5k
    PROFILER_FREE(context->priv->prof_nsc_rle_decompress_data)
389
18.5k
    PROFILER_FREE(context->priv->prof_nsc_decode)
390
18.5k
    PROFILER_FREE(context->priv->prof_nsc_rle_compress_data)
391
18.5k
    PROFILER_FREE(context->priv->prof_nsc_encode)
392
18.5k
    winpr_aligned_free(context->priv);
393
18.5k
  }
394
395
18.5k
  winpr_aligned_free(context->BitmapData);
396
18.5k
  winpr_aligned_free(context);
397
18.5k
}
398
399
#if defined(WITH_FREERDP_DEPRECATED)
400
BOOL nsc_context_set_pixel_format(NSC_CONTEXT* context, UINT32 pixel_format)
401
{
402
  return nsc_context_set_parameters(context, NSC_COLOR_FORMAT, pixel_format);
403
}
404
#endif
405
406
BOOL nsc_context_set_parameters(NSC_CONTEXT* WINPR_RESTRICT context, NSC_PARAMETER what,
407
                                UINT32 value)
408
34.0k
{
409
34.0k
  if (!context)
410
0
    return FALSE;
411
412
34.0k
  switch (what)
413
34.0k
  {
414
0
    case NSC_COLOR_LOSS_LEVEL:
415
0
      context->ColorLossLevel = value;
416
0
      break;
417
0
    case NSC_ALLOW_SUBSAMPLING:
418
0
      context->ChromaSubsamplingLevel = value;
419
0
      break;
420
0
    case NSC_DYNAMIC_COLOR_FIDELITY:
421
0
      context->DynamicColorFidelity = value != 0;
422
0
      break;
423
34.0k
    case NSC_COLOR_FORMAT:
424
34.0k
      context->format = value;
425
34.0k
      break;
426
0
    default:
427
0
      return FALSE;
428
34.0k
  }
429
34.0k
  return TRUE;
430
34.0k
}
431
432
BOOL nsc_process_message(NSC_CONTEXT* WINPR_RESTRICT context, UINT16 bpp, UINT32 width,
433
                         UINT32 height, const BYTE* data, UINT32 length,
434
                         BYTE* WINPR_RESTRICT pDstData, UINT32 DstFormat, UINT32 nDstStride,
435
                         UINT32 nXDst, UINT32 nYDst, UINT32 nWidth, UINT32 nHeight, UINT32 flip)
436
2.21k
{
437
2.21k
  if (!context)
438
0
    return FALSE;
439
440
2.21k
  WINPR_ASSERT(context->priv);
441
442
2.21k
  wStream sbuffer = WINPR_C_ARRAY_INIT;
443
2.21k
  BOOL ret = 0;
444
2.21k
  if (!data || !pDstData)
445
0
  {
446
0
    WLog_Print(context->priv->log, WLOG_ERROR, "Invalid argument: data=%p, pDstData=%p",
447
0
               (const void*)data, (void*)pDstData);
448
0
    return FALSE;
449
0
  }
450
451
2.21k
  if (nXDst > nWidth)
452
0
  {
453
0
    WLog_Print(context->priv->log, WLOG_ERROR, "nXDst %" PRIu32 " > nWidth %" PRIu32, nXDst,
454
0
               nWidth);
455
0
    return FALSE;
456
0
  }
457
2.21k
  if (nYDst > nHeight)
458
0
  {
459
0
    WLog_Print(context->priv->log, WLOG_ERROR, "nYDst %" PRIu32 " > nHeight %" PRIu32, nYDst,
460
0
               nHeight);
461
0
    return FALSE;
462
0
  }
463
464
2.21k
  wStream* s = Stream_StaticConstInit(&sbuffer, data, length);
465
2.21k
  if (!s)
466
0
    return FALSE;
467
468
2.21k
  const UINT32 minStride = nWidth * FreeRDPGetBytesPerPixel(DstFormat);
469
2.21k
  if (nDstStride == 0)
470
696
    nDstStride = minStride;
471
2.21k
  if (nDstStride < minStride)
472
0
  {
473
0
    WLog_Print(context->priv->log, WLOG_ERROR,
474
0
               "nDstStride %" PRIu32 " < minimum stride %" PRIu32, nDstStride, minStride);
475
0
    return FALSE;
476
0
  }
477
478
2.21k
  switch (bpp)
479
2.21k
  {
480
1.20k
    case 32:
481
1.20k
      context->format = PIXEL_FORMAT_BGRA32;
482
1.20k
      break;
483
484
507
    case 24:
485
507
      context->format = PIXEL_FORMAT_BGR24;
486
507
      break;
487
488
507
    case 16:
489
507
      context->format = PIXEL_FORMAT_BGR16;
490
507
      break;
491
492
0
    case 8:
493
0
      context->format = PIXEL_FORMAT_RGB8;
494
0
      break;
495
496
0
    case 4:
497
0
      context->format = PIXEL_FORMAT_A4;
498
0
      break;
499
500
0
    default:
501
0
      return FALSE;
502
2.21k
  }
503
504
2.21k
  context->width = WINPR_ASSERTING_INT_CAST(UINT16, width);
505
2.21k
  context->height = WINPR_ASSERTING_INT_CAST(UINT16, height);
506
2.21k
  ret = nsc_context_initialize(context, s);
507
508
2.21k
  if (!ret)
509
442
    return FALSE;
510
511
  /* RLE decode */
512
1.77k
  {
513
1.77k
    BOOL rc = 0;
514
1.77k
    PROFILER_ENTER(context->priv->prof_nsc_rle_decompress_data)
515
1.77k
    rc = nsc_rle_decompress_data(context);
516
1.77k
    PROFILER_EXIT(context->priv->prof_nsc_rle_decompress_data)
517
518
1.77k
    if (!rc)
519
1.03k
      return FALSE;
520
1.77k
  }
521
  /* Colorloss recover, Chroma supersample and AYCoCg to ARGB Conversion in one step */
522
742
  {
523
742
    BOOL rc = 0;
524
742
    PROFILER_ENTER(context->priv->prof_nsc_decode)
525
742
    rc = context->decode(context);
526
742
    PROFILER_EXIT(context->priv->prof_nsc_decode)
527
528
742
    if (!rc)
529
0
      return FALSE;
530
742
  }
531
532
742
  uint32_t cwidth = width;
533
742
  if (1ull * nXDst + width > nWidth)
534
0
    cwidth = nWidth - nXDst;
535
536
742
  uint32_t cheight = height;
537
742
  if (1ull * nYDst + height > nHeight)
538
0
    cheight = nHeight - nYDst;
539
540
742
  return (freerdp_image_copy_no_overlap(pDstData, DstFormat, nDstStride, nXDst, nYDst, cwidth,
541
742
                                        cheight, context->BitmapData, PIXEL_FORMAT_BGRA32, 0, 0,
542
742
                                        0, nullptr, flip));
543
742
}