Coverage Report

Created: 2022-10-31 07:00

/src/ghostpdl/obj/jdmarker.c
Line
Count
Source (jump to first uncovered line)
1
/*
2
 * jdmarker.c
3
 *
4
 * Copyright (C) 1991-1998, Thomas G. Lane.
5
 * Modified 2009-2019 by Guido Vollbeding.
6
 * This file is part of the Independent JPEG Group's software.
7
 * For conditions of distribution and use, see the accompanying README file.
8
 *
9
 * This file contains routines to decode JPEG datastream markers.
10
 * Most of the complexity arises from our desire to support input
11
 * suspension: if not all of the data for a marker is available,
12
 * we must exit back to the application.  On resumption, we reprocess
13
 * the marker.
14
 */
15
16
#define JPEG_INTERNALS
17
#include "jinclude.h"
18
#include "jpeglib.h"
19
20
21
typedef enum {      /* JPEG marker codes */
22
  M_SOF0  = 0xc0,
23
  M_SOF1  = 0xc1,
24
  M_SOF2  = 0xc2,
25
  M_SOF3  = 0xc3,
26
27
  M_SOF5  = 0xc5,
28
  M_SOF6  = 0xc6,
29
  M_SOF7  = 0xc7,
30
31
  M_JPG   = 0xc8,
32
  M_SOF9  = 0xc9,
33
  M_SOF10 = 0xca,
34
  M_SOF11 = 0xcb,
35
36
  M_SOF13 = 0xcd,
37
  M_SOF14 = 0xce,
38
  M_SOF15 = 0xcf,
39
40
  M_DHT   = 0xc4,
41
42
  M_DAC   = 0xcc,
43
44
  M_RST0  = 0xd0,
45
  M_RST1  = 0xd1,
46
  M_RST2  = 0xd2,
47
  M_RST3  = 0xd3,
48
  M_RST4  = 0xd4,
49
  M_RST5  = 0xd5,
50
  M_RST6  = 0xd6,
51
  M_RST7  = 0xd7,
52
53
  M_SOI   = 0xd8,
54
  M_EOI   = 0xd9,
55
  M_SOS   = 0xda,
56
  M_DQT   = 0xdb,
57
  M_DNL   = 0xdc,
58
  M_DRI   = 0xdd,
59
  M_DHP   = 0xde,
60
  M_EXP   = 0xdf,
61
62
  M_APP0  = 0xe0,
63
  M_APP1  = 0xe1,
64
  M_APP2  = 0xe2,
65
  M_APP3  = 0xe3,
66
  M_APP4  = 0xe4,
67
  M_APP5  = 0xe5,
68
  M_APP6  = 0xe6,
69
  M_APP7  = 0xe7,
70
  M_APP8  = 0xe8,
71
  M_APP9  = 0xe9,
72
  M_APP10 = 0xea,
73
  M_APP11 = 0xeb,
74
  M_APP12 = 0xec,
75
  M_APP13 = 0xed,
76
  M_APP14 = 0xee,
77
  M_APP15 = 0xef,
78
79
  M_JPG0  = 0xf0,
80
  M_JPG8  = 0xf8,
81
  M_JPG13 = 0xfd,
82
  M_COM   = 0xfe,
83
84
  M_TEM   = 0x01,
85
86
  M_ERROR = 0x100
87
} JPEG_MARKER;
88
89
90
/* Private state */
91
92
typedef struct {
93
  struct jpeg_marker_reader pub; /* public fields */
94
95
  /* Application-overridable marker processing methods */
96
  jpeg_marker_parser_method process_COM;
97
  jpeg_marker_parser_method process_APPn[16];
98
99
  /* Limit on marker data length to save for each marker type */
100
  unsigned int length_limit_COM;
101
  unsigned int length_limit_APPn[16];
102
103
  /* Status of COM/APPn marker saving */
104
  jpeg_saved_marker_ptr cur_marker; /* NULL if not processing a marker */
105
  unsigned int bytes_read;    /* data bytes read so far in marker */
106
  /* Note: cur_marker is not linked into marker_list until it's all read. */
107
} my_marker_reader;
108
109
typedef my_marker_reader * my_marker_ptr;
110
111
112
/*
113
 * Macros for fetching data from the data source module.
114
 *
115
 * At all times, cinfo->src->next_input_byte and ->bytes_in_buffer reflect
116
 * the current restart point; we update them only when we have reached a
117
 * suitable place to restart if a suspension occurs.
118
 */
119
120
/* Declare and initialize local copies of input pointer/count */
121
#define INPUT_VARS(cinfo)  \
122
104k
  struct jpeg_source_mgr * datasrc = (cinfo)->src;  \
123
104k
  const JOCTET * next_input_byte = datasrc->next_input_byte;  \
124
104k
  size_t bytes_in_buffer = datasrc->bytes_in_buffer
125
126
/* Unload the local copies --- do this only at a restart boundary */
127
#define INPUT_SYNC(cinfo)  \
128
9.19M
  ( datasrc->next_input_byte = next_input_byte,  \
129
9.19M
    datasrc->bytes_in_buffer = bytes_in_buffer )
130
131
/* Reload the local copies --- used only in MAKE_BYTE_AVAIL */
132
#define INPUT_RELOAD(cinfo)  \
133
0
  ( next_input_byte = datasrc->next_input_byte,  \
134
0
    bytes_in_buffer = datasrc->bytes_in_buffer )
135
136
/* Internal macro for INPUT_BYTE and INPUT_2BYTES: make a byte available.
137
 * Note we do *not* do INPUT_SYNC before calling fill_input_buffer,
138
 * but we must reload the local copies after a successful fill.
139
 */
140
#define MAKE_BYTE_AVAIL(cinfo,action)  \
141
0
  if (bytes_in_buffer == 0) {  \
142
0
    if (! (*datasrc->fill_input_buffer) (cinfo))  \
143
0
      { action; }  \
144
0
    INPUT_RELOAD(cinfo);  \
145
0
  }
146
147
/* Read a byte into variable V.
148
 * If must suspend, take the specified action (typically "return FALSE").
149
 */
150
#define INPUT_BYTE(cinfo,V,action)  \
151
12.3M
  MAKESTMT( MAKE_BYTE_AVAIL(cinfo,action); \
152
10.6M
      bytes_in_buffer--; \
153
10.6M
      V = GETJOCTET(*next_input_byte++); )
154
155
/* As above, but read two bytes interpreted as an unsigned 16-bit integer.
156
 * V should be declared unsigned int or perhaps INT32.
157
 */
158
#define INPUT_2BYTES(cinfo,V,action)  \
159
58.1k
  MAKESTMT( MAKE_BYTE_AVAIL(cinfo,action); \
160
837k
      bytes_in_buffer--; \
161
837k
      V = ((unsigned int) GETJOCTET(*next_input_byte++)) << 8; \
162
837k
      MAKE_BYTE_AVAIL(cinfo,action); \
163
837k
      bytes_in_buffer--; \
164
837k
      V += GETJOCTET(*next_input_byte++); )
165
166
167
/*
168
 * Routines to process JPEG markers.
169
 *
170
 * Entry condition: JPEG marker itself has been read and its code saved
171
 *   in cinfo->unread_marker; input restart point is just after the marker.
172
 *
173
 * Exit: if return TRUE, have read and processed any parameters, and have
174
 *   updated the restart point to point after the parameters.
175
 *   If return FALSE, was forced to suspend before reaching end of
176
 *   marker parameters; restart point has not been moved.  Same routine
177
 *   will be called again after application supplies more input data.
178
 *
179
 * This approach to suspension assumes that all of a marker's parameters
180
 * can fit into a single input bufferload.  This should hold for "normal"
181
 * markers.  Some COM/APPn markers might have large parameter segments
182
 * that might not fit.  If we are simply dropping such a marker, we use
183
 * skip_input_data to get past it, and thereby put the problem on the
184
 * source manager's shoulders.  If we are saving the marker's contents
185
 * into memory, we use a slightly different convention: when forced to
186
 * suspend, the marker processor updates the restart point to the end of
187
 * what it's consumed (ie, the end of the buffer) before returning FALSE.
188
 * On resumption, cinfo->unread_marker still contains the marker code,
189
 * but the data source will point to the next chunk of marker data.
190
 * The marker processor must retain internal state to deal with this.
191
 *
192
 * Note that we don't bother to avoid duplicate trace messages if a
193
 * suspension occurs within marker parameters.  Other side effects
194
 * require more care.
195
 */
196
197
198
LOCAL(boolean)
199
get_soi (j_decompress_ptr cinfo)
200
/* Process an SOI marker */
201
6.42k
{
202
6.42k
  int i;
203
  
204
6.42k
  TRACEMS(cinfo, 1, JTRC_SOI);
205
206
6.42k
  if (cinfo->marker->saw_SOI)
207
21
    ERREXIT(cinfo, JERR_SOI_DUPLICATE);
208
209
  /* Reset all parameters that are defined to be reset by SOI */
210
211
108k
  for (i = 0; i < NUM_ARITH_TBLS; i++) {
212
102k
    cinfo->arith_dc_L[i] = 0;
213
102k
    cinfo->arith_dc_U[i] = 1;
214
102k
    cinfo->arith_ac_K[i] = 5;
215
102k
  }
216
6.42k
  cinfo->restart_interval = 0;
217
218
  /* Set initial assumptions for colorspace etc */
219
220
6.42k
  cinfo->jpeg_color_space = JCS_UNKNOWN;
221
6.42k
  cinfo->color_transform = JCT_NONE;
222
6.42k
  cinfo->CCIR601_sampling = FALSE; /* Assume non-CCIR sampling??? */
223
224
6.42k
  cinfo->saw_JFIF_marker = FALSE;
225
6.42k
  cinfo->JFIF_major_version = 1; /* set default JFIF APP0 values */
226
6.42k
  cinfo->JFIF_minor_version = 1;
227
6.42k
  cinfo->density_unit = 0;
228
6.42k
  cinfo->X_density = 1;
229
6.42k
  cinfo->Y_density = 1;
230
6.42k
  cinfo->saw_Adobe_marker = FALSE;
231
6.42k
  cinfo->Adobe_transform = 0;
232
233
6.42k
  cinfo->marker->saw_SOI = TRUE;
234
235
6.42k
  return TRUE;
236
6.42k
}
237
238
239
LOCAL(boolean)
240
get_sof (j_decompress_ptr cinfo, boolean is_baseline, boolean is_prog,
241
   boolean is_arith)
242
/* Process a SOFn marker */
243
6.10k
{
244
6.10k
  INT32 length;
245
6.10k
  int c, ci, i;
246
6.10k
  jpeg_component_info * compptr;
247
6.10k
  INPUT_VARS(cinfo);
248
249
6.10k
  cinfo->is_baseline = is_baseline;
250
6.10k
  cinfo->progressive_mode = is_prog;
251
6.10k
  cinfo->arith_code = is_arith;
252
253
6.10k
  INPUT_2BYTES(cinfo, length, return FALSE);
254
255
6.10k
  INPUT_BYTE(cinfo, cinfo->data_precision, return FALSE);
256
6.10k
  INPUT_2BYTES(cinfo, cinfo->image_height, return FALSE);
257
6.10k
  INPUT_2BYTES(cinfo, cinfo->image_width, return FALSE);
258
6.10k
  INPUT_BYTE(cinfo, cinfo->num_components, return FALSE);
259
260
6.10k
  length -= 8;
261
262
6.10k
  TRACEMS4(cinfo, 1, JTRC_SOF, cinfo->unread_marker,
263
6.10k
     (int) cinfo->image_width, (int) cinfo->image_height,
264
6.10k
     cinfo->num_components);
265
266
6.10k
  if (cinfo->marker->saw_SOF)
267
13
    ERREXIT(cinfo, JERR_SOF_DUPLICATE);
268
269
  /* We don't support files in which the image height is initially specified */
270
  /* as 0 and is later redefined by DNL.  As long as we have to check that,  */
271
  /* might as well have a general sanity check. */
272
6.10k
  if (cinfo->image_height <= 0 || cinfo->image_width <= 0 ||
273
6.10k
      cinfo->num_components <= 0)
274
21
    ERREXIT(cinfo, JERR_EMPTY_IMAGE);
275
276
6.10k
  if (length != (cinfo->num_components * 3))
277
6
    ERREXIT(cinfo, JERR_BAD_LENGTH);
278
279
6.10k
  if (cinfo->comp_info == NULL)  /* do only once, even if suspend */
280
6.06k
    cinfo->comp_info = (jpeg_component_info *) (*cinfo->mem->alloc_small)
281
6.06k
      ((j_common_ptr) cinfo, JPOOL_IMAGE,
282
6.06k
       cinfo->num_components * SIZEOF(jpeg_component_info));
283
284
24.9k
  for (ci = 0; ci < cinfo->num_components; ci++) {
285
18.8k
    INPUT_BYTE(cinfo, c, return FALSE);
286
    /* Check to see whether component id has already been seen   */
287
    /* (in violation of the spec, but unfortunately seen in some */
288
    /* files).  If so, create "fake" component id equal to the   */
289
    /* max id seen so far + 1. */
290
39.6k
    for (i = 0, compptr = cinfo->comp_info; i < ci; i++, compptr++) {
291
20.7k
      if (c == compptr->component_id) {
292
8
  compptr = cinfo->comp_info;
293
8
  c = compptr->component_id;
294
8
  compptr++;
295
17
  for (i = 1; i < ci; i++, compptr++) {
296
9
    if (compptr->component_id > c) c = compptr->component_id;
297
9
  }
298
8
  c++;
299
8
  break;
300
8
      }
301
20.7k
    }
302
18.8k
    compptr->component_id = c;
303
18.8k
    compptr->component_index = ci;
304
18.8k
    INPUT_BYTE(cinfo, c, return FALSE);
305
18.8k
    compptr->h_samp_factor = (c >> 4) & 15;
306
18.8k
    compptr->v_samp_factor = (c     ) & 15;
307
18.8k
    INPUT_BYTE(cinfo, compptr->quant_tbl_no, return FALSE);
308
309
18.8k
    TRACEMS4(cinfo, 1, JTRC_SOF_COMPONENT,
310
18.8k
       compptr->component_id, compptr->h_samp_factor,
311
18.8k
       compptr->v_samp_factor, compptr->quant_tbl_no);
312
18.8k
  }
313
314
6.10k
  cinfo->marker->saw_SOF = TRUE;
315
316
6.10k
  INPUT_SYNC(cinfo);
317
6.10k
  return TRUE;
318
6.10k
}
319
320
321
LOCAL(boolean)
322
get_sos (j_decompress_ptr cinfo)
323
/* Process a SOS marker */
324
7.50k
{
325
7.50k
  INT32 length;
326
7.50k
  int c, ci, i, n;
327
7.50k
  jpeg_component_info * compptr;
328
7.50k
  INPUT_VARS(cinfo);
329
330
7.50k
  if (! cinfo->marker->saw_SOF)
331
14
    ERREXITS(cinfo, JERR_SOF_BEFORE, "SOS");
332
333
7.50k
  INPUT_2BYTES(cinfo, length, return FALSE);
334
335
7.50k
  INPUT_BYTE(cinfo, n, return FALSE); /* Number of components */
336
337
7.50k
  TRACEMS1(cinfo, 1, JTRC_SOS, n);
338
339
7.50k
  if (length != (n * 2 + 6) || n > MAX_COMPS_IN_SCAN ||
340
7.50k
      (n == 0 && !cinfo->progressive_mode))
341
      /* pseudo SOS marker only allowed in progressive mode */
342
16
    ERREXIT(cinfo, JERR_BAD_LENGTH);
343
344
7.50k
  cinfo->comps_in_scan = n;
345
346
  /* Collect the component-spec parameters */
347
348
27.1k
  for (i = 0; i < n; i++) {
349
19.7k
    INPUT_BYTE(cinfo, c, return FALSE);
350
351
    /* Detect the case where component id's are not unique, and, if so, */
352
    /* create a fake component id using the same logic as in get_sof.   */
353
    /* Note:  This also ensures that all of the SOF components are      */
354
    /* referenced in the single scan case, which prevents access to     */
355
    /* uninitialized memory in later decoding stages. */
356
39.4k
    for (ci = 0; ci < i; ci++) {
357
19.7k
      if (c == cinfo->cur_comp_info[ci]->component_id) {
358
0
  c = cinfo->cur_comp_info[0]->component_id;
359
0
  for (ci = 1; ci < i; ci++) {
360
0
    compptr = cinfo->cur_comp_info[ci];
361
0
    if (compptr->component_id > c) c = compptr->component_id;
362
0
  }
363
0
  c++;
364
0
  break;
365
0
      }
366
19.7k
    }
367
368
41.0k
    for (ci = 0, compptr = cinfo->comp_info; ci < cinfo->num_components;
369
41.0k
   ci++, compptr++) {
370
41.0k
      if (c == compptr->component_id)
371
19.6k
  goto id_found;
372
41.0k
    }
373
374
17
    ERREXIT1(cinfo, JERR_BAD_COMPONENT_ID, c);
375
376
19.6k
  id_found:
377
378
19.6k
    cinfo->cur_comp_info[i] = compptr;
379
19.6k
    INPUT_BYTE(cinfo, c, return FALSE);
380
19.6k
    compptr->dc_tbl_no = (c >> 4) & 15;
381
19.6k
    compptr->ac_tbl_no = (c     ) & 15;
382
383
19.6k
    TRACEMS3(cinfo, 1, JTRC_SOS_COMPONENT, compptr->component_id,
384
19.6k
       compptr->dc_tbl_no, compptr->ac_tbl_no);
385
19.6k
  }
386
387
  /* Collect the additional scan parameters Ss, Se, Ah/Al. */
388
7.49k
  INPUT_BYTE(cinfo, c, return FALSE);
389
7.49k
  cinfo->Ss = c;
390
7.49k
  INPUT_BYTE(cinfo, c, return FALSE);
391
7.49k
  cinfo->Se = c;
392
7.49k
  INPUT_BYTE(cinfo, c, return FALSE);
393
7.49k
  cinfo->Ah = (c >> 4) & 15;
394
7.49k
  cinfo->Al = (c     ) & 15;
395
396
7.49k
  TRACEMS4(cinfo, 1, JTRC_SOS_PARAMS, cinfo->Ss, cinfo->Se,
397
7.49k
     cinfo->Ah, cinfo->Al);
398
399
  /* Prepare to scan data & restart markers */
400
7.49k
  cinfo->marker->next_restart_num = 0;
401
402
  /* Count another (non-pseudo) SOS marker */
403
7.49k
  if (n) cinfo->input_scan_number++;
404
405
7.49k
  INPUT_SYNC(cinfo);
406
7.49k
  return TRUE;
407
7.49k
}
408
409
410
#ifdef D_ARITH_CODING_SUPPORTED
411
412
LOCAL(boolean)
413
get_dac (j_decompress_ptr cinfo)
414
/* Process a DAC marker */
415
29
{
416
29
  INT32 length;
417
29
  int index, val;
418
29
  INPUT_VARS(cinfo);
419
420
29
  INPUT_2BYTES(cinfo, length, return FALSE);
421
29
  length -= 2;
422
  
423
85
  while (length > 0) {
424
56
    INPUT_BYTE(cinfo, index, return FALSE);
425
56
    INPUT_BYTE(cinfo, val, return FALSE);
426
427
56
    length -= 2;
428
429
56
    TRACEMS2(cinfo, 1, JTRC_DAC, index, val);
430
431
56
    if (index < 0 || index >= (2*NUM_ARITH_TBLS))
432
29
      ERREXIT1(cinfo, JERR_DAC_INDEX, index);
433
434
56
    if (index >= NUM_ARITH_TBLS) { /* define AC table */
435
0
      cinfo->arith_ac_K[index-NUM_ARITH_TBLS] = (UINT8) val;
436
56
    } else {     /* define DC table */
437
56
      cinfo->arith_dc_L[index] = (UINT8) (val & 0x0F);
438
56
      cinfo->arith_dc_U[index] = (UINT8) (val >> 4);
439
56
      if (cinfo->arith_dc_L[index] > cinfo->arith_dc_U[index])
440
0
  ERREXIT1(cinfo, JERR_DAC_VALUE, val);
441
56
    }
442
56
  }
443
444
29
  if (length != 0)
445
0
    ERREXIT(cinfo, JERR_BAD_LENGTH);
446
447
29
  INPUT_SYNC(cinfo);
448
29
  return TRUE;
449
29
}
450
451
#else /* ! D_ARITH_CODING_SUPPORTED */
452
453
#define get_dac(cinfo)  skip_variable(cinfo)
454
455
#endif /* D_ARITH_CODING_SUPPORTED */
456
457
458
LOCAL(boolean)
459
get_dht (j_decompress_ptr cinfo)
460
/* Process a DHT marker */
461
9.28k
{
462
9.28k
  INT32 length;
463
9.28k
  UINT8 bits[17];
464
9.28k
  UINT8 huffval[256];
465
9.28k
  int i, index, count;
466
9.28k
  JHUFF_TBL **htblptr;
467
9.28k
  INPUT_VARS(cinfo);
468
469
9.28k
  INPUT_2BYTES(cinfo, length, return FALSE);
470
9.28k
  length -= 2;
471
  
472
33.5k
  while (length > 16) {
473
24.2k
    INPUT_BYTE(cinfo, index, return FALSE);
474
475
24.2k
    TRACEMS1(cinfo, 1, JTRC_DHT, index);
476
      
477
24.2k
    bits[0] = 0;
478
24.2k
    count = 0;
479
412k
    for (i = 1; i <= 16; i++) {
480
388k
      INPUT_BYTE(cinfo, bits[i], return FALSE);
481
388k
      count += bits[i];
482
388k
    }
483
484
24.2k
    length -= 1 + 16;
485
486
24.2k
    TRACEMS8(cinfo, 2, JTRC_HUFFBITS,
487
24.2k
       bits[1], bits[2], bits[3], bits[4],
488
24.2k
       bits[5], bits[6], bits[7], bits[8]);
489
24.2k
    TRACEMS8(cinfo, 2, JTRC_HUFFBITS,
490
24.2k
       bits[9], bits[10], bits[11], bits[12],
491
24.2k
       bits[13], bits[14], bits[15], bits[16]);
492
493
    /* Here we just do minimal validation of the counts to avoid walking
494
     * off the end of our table space.  jdhuff.c will check more carefully.
495
     */
496
24.2k
    if (count > 256 || ((INT32) count) > length)
497
210
      ERREXIT(cinfo, JERR_BAD_HUFF_TABLE);
498
499
1.66M
    for (i = 0; i < count; i++)
500
1.63M
      INPUT_BYTE(cinfo, huffval[i], return FALSE);
501
502
24.2k
    length -= count;
503
504
24.2k
    if (index & 0x10) {   /* AC table definition */
505
12.1k
      index -= 0x10;
506
12.1k
      htblptr = &cinfo->ac_huff_tbl_ptrs[index];
507
12.1k
    } else {     /* DC table definition */
508
12.1k
      htblptr = &cinfo->dc_huff_tbl_ptrs[index];
509
12.1k
    }
510
511
24.2k
    if (index < 0 || index >= NUM_HUFF_TBLS)
512
49
      ERREXIT1(cinfo, JERR_DHT_INDEX, index);
513
514
24.2k
    if (*htblptr == NULL)
515
23.4k
      *htblptr = jpeg_alloc_huff_table((j_common_ptr) cinfo);
516
  
517
24.2k
    MEMCOPY((*htblptr)->bits, bits, SIZEOF((*htblptr)->bits));
518
24.2k
    if (count > 0)
519
23.9k
      MEMCOPY((*htblptr)->huffval, huffval, count * SIZEOF(UINT8));
520
24.2k
  }
521
522
9.27k
  if (length != 0)
523
5
    ERREXIT(cinfo, JERR_BAD_LENGTH);
524
525
9.27k
  INPUT_SYNC(cinfo);
526
9.27k
  return TRUE;
527
9.28k
}
528
529
530
LOCAL(boolean)
531
get_dqt (j_decompress_ptr cinfo)
532
/* Process a DQT marker */
533
7.13k
{
534
7.13k
  INT32 length, count, i;
535
7.13k
  int n, prec;
536
7.13k
  unsigned int tmp;
537
7.13k
  JQUANT_TBL *quant_ptr;
538
7.13k
  const int *natural_order;
539
7.13k
  INPUT_VARS(cinfo);
540
541
7.13k
  INPUT_2BYTES(cinfo, length, return FALSE);
542
7.13k
  length -= 2;
543
544
19.3k
  while (length > 0) {
545
12.2k
    length--;
546
12.2k
    INPUT_BYTE(cinfo, n, return FALSE);
547
12.2k
    prec = n >> 4;
548
12.2k
    n &= 0x0F;
549
550
12.2k
    TRACEMS2(cinfo, 1, JTRC_DQT, n, prec);
551
552
12.2k
    if (n >= NUM_QUANT_TBLS)
553
51
      ERREXIT1(cinfo, JERR_DQT_INDEX, n);
554
      
555
12.2k
    if (cinfo->quant_tbl_ptrs[n] == NULL)
556
12.1k
      cinfo->quant_tbl_ptrs[n] = jpeg_alloc_quant_table((j_common_ptr) cinfo);
557
12.2k
    quant_ptr = cinfo->quant_tbl_ptrs[n];
558
559
12.2k
    if (prec) {
560
27
      if (length < DCTSIZE2 * 2) {
561
  /* Initialize full table for safety. */
562
1.56k
  for (i = 0; i < DCTSIZE2; i++) {
563
1.53k
    quant_ptr->quantval[i] = 1;
564
1.53k
  }
565
24
  count = length >> 1;
566
24
      } else
567
3
  count = DCTSIZE2;
568
12.2k
    } else {
569
12.2k
      if (length < DCTSIZE2) {
570
  /* Initialize full table for safety. */
571
65
  for (i = 0; i < DCTSIZE2; i++) {
572
64
    quant_ptr->quantval[i] = 1;
573
64
  }
574
1
  count = length;
575
1
      } else
576
12.2k
  count = DCTSIZE2;
577
12.2k
    }
578
579
12.2k
    switch ((int) count) {
580
0
    case (2*2): natural_order = jpeg_natural_order2; break;
581
0
    case (3*3): natural_order = jpeg_natural_order3; break;
582
0
    case (4*4): natural_order = jpeg_natural_order4; break;
583
0
    case (5*5): natural_order = jpeg_natural_order5; break;
584
0
    case (6*6): natural_order = jpeg_natural_order6; break;
585
0
    case (7*7): natural_order = jpeg_natural_order7; break;
586
12.2k
    default:    natural_order = jpeg_natural_order;
587
12.2k
    }
588
589
792k
    for (i = 0; i < count; i++) {
590
779k
      if (prec)
591
779k
  INPUT_2BYTES(cinfo, tmp, return FALSE);
592
779k
      else
593
779k
  INPUT_BYTE(cinfo, tmp, return FALSE);
594
      /* We convert the zigzag-order table to natural array order. */
595
779k
      quant_ptr->quantval[natural_order[i]] = (UINT16) tmp;
596
779k
    }
597
598
12.1k
    if (cinfo->err->trace_level >= 2) {
599
0
      for (i = 0; i < DCTSIZE2; i += 8) {
600
0
  TRACEMS8(cinfo, 2, JTRC_QUANTVALS,
601
0
     quant_ptr->quantval[i],   quant_ptr->quantval[i+1],
602
0
     quant_ptr->quantval[i+2], quant_ptr->quantval[i+3],
603
0
     quant_ptr->quantval[i+4], quant_ptr->quantval[i+5],
604
0
     quant_ptr->quantval[i+6], quant_ptr->quantval[i+7]);
605
0
      }
606
0
    }
607
608
12.1k
    length -= count;
609
12.1k
    if (prec) length -= count;
610
12.1k
  }
611
612
7.07k
  if (length != 0)
613
0
    ERREXIT(cinfo, JERR_BAD_LENGTH);
614
615
7.07k
  INPUT_SYNC(cinfo);
616
7.07k
  return TRUE;
617
7.13k
}
618
619
620
LOCAL(boolean)
621
get_dri (j_decompress_ptr cinfo)
622
/* Process a DRI marker */
623
575
{
624
575
  INT32 length;
625
575
  unsigned int tmp;
626
575
  INPUT_VARS(cinfo);
627
628
575
  INPUT_2BYTES(cinfo, length, return FALSE);
629
  
630
575
  if (length != 4)
631
5
    ERREXIT(cinfo, JERR_BAD_LENGTH);
632
633
575
  INPUT_2BYTES(cinfo, tmp, return FALSE);
634
635
575
  TRACEMS1(cinfo, 1, JTRC_DRI, tmp);
636
637
575
  cinfo->restart_interval = tmp;
638
639
575
  INPUT_SYNC(cinfo);
640
575
  return TRUE;
641
575
}
642
643
644
LOCAL(boolean)
645
get_lse (j_decompress_ptr cinfo)
646
/* Process an LSE marker */
647
2
{
648
2
  INT32 length;
649
2
  unsigned int tmp;
650
2
  int cid;
651
2
  INPUT_VARS(cinfo);
652
653
2
  if (! cinfo->marker->saw_SOF)
654
0
    ERREXITS(cinfo, JERR_SOF_BEFORE, "LSE");
655
656
2
  if (cinfo->num_components < 3) goto bad;
657
658
2
  INPUT_2BYTES(cinfo, length, return FALSE);
659
660
2
  if (length != 24)
661
2
    ERREXIT(cinfo, JERR_BAD_LENGTH);
662
663
2
  INPUT_BYTE(cinfo, tmp, return FALSE);
664
2
  if (tmp != 0x0D)  /* ID inverse transform specification */
665
0
    ERREXIT1(cinfo, JERR_UNKNOWN_MARKER, cinfo->unread_marker);
666
2
  INPUT_2BYTES(cinfo, tmp, return FALSE);
667
2
  if (tmp != MAXJSAMPLE) goto bad;   /* MAXTRANS */
668
2
  INPUT_BYTE(cinfo, tmp, return FALSE);
669
2
  if (tmp != 3) goto bad;     /* Nt=3 */
670
2
  INPUT_BYTE(cinfo, cid, return FALSE);
671
2
  if (cid != cinfo->comp_info[1].component_id) goto bad;
672
2
  INPUT_BYTE(cinfo, cid, return FALSE);
673
2
  if (cid != cinfo->comp_info[0].component_id) goto bad;
674
2
  INPUT_BYTE(cinfo, cid, return FALSE);
675
2
  if (cid != cinfo->comp_info[2].component_id) goto bad;
676
2
  INPUT_BYTE(cinfo, tmp, return FALSE);
677
2
  if (tmp != 0x80) goto bad;   /* F1: CENTER1=1, NORM1=0 */
678
2
  INPUT_2BYTES(cinfo, tmp, return FALSE);
679
2
  if (tmp != 0) goto bad;     /* A(1,1)=0 */
680
2
  INPUT_2BYTES(cinfo, tmp, return FALSE);
681
2
  if (tmp != 0) goto bad;     /* A(1,2)=0 */
682
2
  INPUT_BYTE(cinfo, tmp, return FALSE);
683
2
  if (tmp != 0) goto bad;   /* F2: CENTER2=0, NORM2=0 */
684
2
  INPUT_2BYTES(cinfo, tmp, return FALSE);
685
2
  if (tmp != 1) goto bad;     /* A(2,1)=1 */
686
2
  INPUT_2BYTES(cinfo, tmp, return FALSE);
687
2
  if (tmp != 0) goto bad;     /* A(2,2)=0 */
688
2
  INPUT_BYTE(cinfo, tmp, return FALSE);
689
2
  if (tmp != 0) goto bad;   /* F3: CENTER3=0, NORM3=0 */
690
2
  INPUT_2BYTES(cinfo, tmp, return FALSE);
691
2
  if (tmp != 1) goto bad;     /* A(3,1)=1 */
692
2
  INPUT_2BYTES(cinfo, tmp, return FALSE);
693
2
  if (tmp != 0) {       /* A(3,2)=0 */
694
0
    bad:
695
0
    ERREXIT(cinfo, JERR_CONVERSION_NOTIMPL);
696
0
  }
697
698
  /* OK, valid transform that we can handle. */
699
2
  cinfo->color_transform = JCT_SUBTRACT_GREEN;
700
701
2
  INPUT_SYNC(cinfo);
702
2
  return TRUE;
703
2
}
704
705
706
/*
707
 * Routines for processing APPn and COM markers.
708
 * These are either saved in memory or discarded, per application request.
709
 * APP0 and APP14 are specially checked to see if they are
710
 * JFIF and Adobe markers, respectively.
711
 */
712
713
11.2k
#define APP0_DATA_LEN 14  /* Length of interesting data in APP0 */
714
10.6k
#define APP14_DATA_LEN  12  /* Length of interesting data in APP14 */
715
13.0k
#define APPN_DATA_LEN 14  /* Must be the largest of the above!! */
716
717
718
LOCAL(void)
719
examine_app0 (j_decompress_ptr cinfo, JOCTET FAR * data,
720
        unsigned int datalen, INT32 remaining)
721
/* Examine first few bytes from an APP0.
722
 * Take appropriate action if it is a JFIF marker.
723
 * datalen is # of bytes at data[], remaining is length of rest of marker data.
724
 */
725
3.77k
{
726
3.77k
  INT32 totallen = (INT32) datalen + remaining;
727
728
3.77k
  if (datalen >= APP0_DATA_LEN &&
729
3.77k
      GETJOCTET(data[0]) == 0x4A &&
730
3.77k
      GETJOCTET(data[1]) == 0x46 &&
731
3.77k
      GETJOCTET(data[2]) == 0x49 &&
732
3.77k
      GETJOCTET(data[3]) == 0x46 &&
733
3.77k
      GETJOCTET(data[4]) == 0) {
734
    /* Found JFIF APP0 marker: save info */
735
3.71k
    cinfo->saw_JFIF_marker = TRUE;
736
3.71k
    cinfo->JFIF_major_version = GETJOCTET(data[5]);
737
3.71k
    cinfo->JFIF_minor_version = GETJOCTET(data[6]);
738
3.71k
    cinfo->density_unit = GETJOCTET(data[7]);
739
3.71k
    cinfo->X_density = (GETJOCTET(data[8]) << 8) + GETJOCTET(data[9]);
740
3.71k
    cinfo->Y_density = (GETJOCTET(data[10]) << 8) + GETJOCTET(data[11]);
741
    /* Check version.
742
     * Major version must be 1 or 2, anything else signals an incompatible
743
     * change.
744
     * (We used to treat this as an error, but now it's a nonfatal warning,
745
     * because some bozo at Hijaak couldn't read the spec.)
746
     * Minor version should be 0..2, but process anyway if newer.
747
     */
748
3.71k
    if (cinfo->JFIF_major_version != 1 && cinfo->JFIF_major_version != 2)
749
2
      WARNMS2(cinfo, JWRN_JFIF_MAJOR,
750
3.71k
        cinfo->JFIF_major_version, cinfo->JFIF_minor_version);
751
    /* Generate trace messages */
752
3.71k
    TRACEMS5(cinfo, 1, JTRC_JFIF,
753
3.71k
       cinfo->JFIF_major_version, cinfo->JFIF_minor_version,
754
3.71k
       cinfo->X_density, cinfo->Y_density, cinfo->density_unit);
755
    /* Validate thumbnail dimensions and issue appropriate messages */
756
3.71k
    if (GETJOCTET(data[12]) | GETJOCTET(data[13]))
757
45
      TRACEMS2(cinfo, 1, JTRC_JFIF_THUMBNAIL,
758
3.71k
         GETJOCTET(data[12]), GETJOCTET(data[13]));
759
3.71k
    totallen -= APP0_DATA_LEN;
760
3.71k
    if (totallen !=
761
3.71k
  ((INT32)GETJOCTET(data[12]) * (INT32)GETJOCTET(data[13]) * (INT32) 3))
762
17
      TRACEMS1(cinfo, 1, JTRC_JFIF_BADTHUMBNAILSIZE, (int) totallen);
763
3.71k
  } else if (datalen >= 6 &&
764
58
      GETJOCTET(data[0]) == 0x4A &&
765
58
      GETJOCTET(data[1]) == 0x46 &&
766
58
      GETJOCTET(data[2]) == 0x58 &&
767
58
      GETJOCTET(data[3]) == 0x58 &&
768
58
      GETJOCTET(data[4]) == 0) {
769
    /* Found JFIF "JFXX" extension APP0 marker */
770
    /* The library doesn't actually do anything with these,
771
     * but we try to produce a helpful trace message.
772
     */
773
0
    switch (GETJOCTET(data[5])) {
774
0
    case 0x10:
775
0
      TRACEMS1(cinfo, 1, JTRC_THUMB_JPEG, (int) totallen);
776
0
      break;
777
0
    case 0x11:
778
0
      TRACEMS1(cinfo, 1, JTRC_THUMB_PALETTE, (int) totallen);
779
0
      break;
780
0
    case 0x13:
781
0
      TRACEMS1(cinfo, 1, JTRC_THUMB_RGB, (int) totallen);
782
0
      break;
783
0
    default:
784
0
      TRACEMS2(cinfo, 1, JTRC_JFIF_EXTENSION,
785
0
         GETJOCTET(data[5]), (int) totallen);
786
0
    }
787
58
  } else {
788
    /* Start of APP0 does not match "JFIF" or "JFXX", or too short */
789
58
    TRACEMS1(cinfo, 1, JTRC_APP0, (int) totallen);
790
58
  }
791
3.77k
}
792
793
794
LOCAL(void)
795
examine_app14 (j_decompress_ptr cinfo, JOCTET FAR * data,
796
         unsigned int datalen, INT32 remaining)
797
/* Examine first few bytes from an APP14.
798
 * Take appropriate action if it is an Adobe marker.
799
 * datalen is # of bytes at data[], remaining is length of rest of marker data.
800
 */
801
5.32k
{
802
5.32k
  unsigned int version, flags0, flags1, transform;
803
804
5.32k
  if (datalen >= APP14_DATA_LEN &&
805
5.32k
      GETJOCTET(data[0]) == 0x41 &&
806
5.32k
      GETJOCTET(data[1]) == 0x64 &&
807
5.32k
      GETJOCTET(data[2]) == 0x6F &&
808
5.32k
      GETJOCTET(data[3]) == 0x62 &&
809
5.32k
      GETJOCTET(data[4]) == 0x65) {
810
    /* Found Adobe APP14 marker */
811
5.29k
    version = (GETJOCTET(data[5]) << 8) + GETJOCTET(data[6]);
812
5.29k
    flags0 = (GETJOCTET(data[7]) << 8) + GETJOCTET(data[8]);
813
5.29k
    flags1 = (GETJOCTET(data[9]) << 8) + GETJOCTET(data[10]);
814
5.29k
    transform = GETJOCTET(data[11]);
815
5.29k
    TRACEMS4(cinfo, 1, JTRC_ADOBE, version, flags0, flags1, transform);
816
5.29k
    cinfo->saw_Adobe_marker = TRUE;
817
5.29k
    cinfo->Adobe_transform = (UINT8) transform;
818
5.29k
  } else {
819
    /* Start of APP14 does not match "Adobe", or too short */
820
25
    TRACEMS1(cinfo, 1, JTRC_APP14, (int) (datalen + remaining));
821
25
  }
822
5.32k
}
823
824
825
METHODDEF(boolean)
826
get_interesting_appn (j_decompress_ptr cinfo)
827
/* Process an APP0 or APP14 marker without saving it */
828
9.10k
{
829
9.10k
  INT32 length;
830
9.10k
  JOCTET b[APPN_DATA_LEN];
831
9.10k
  unsigned int i, numtoread;
832
9.10k
  INPUT_VARS(cinfo);
833
834
9.10k
  INPUT_2BYTES(cinfo, length, return FALSE);
835
9.10k
  length -= 2;
836
837
  /* get the interesting part of the marker data */
838
9.10k
  if (length >= APPN_DATA_LEN)
839
3.96k
    numtoread = APPN_DATA_LEN;
840
5.13k
  else if (length > 0)
841
5.12k
    numtoread = (unsigned int) length;
842
8
  else
843
8
    numtoread = 0;
844
126k
  for (i = 0; i < numtoread; i++)
845
116k
    INPUT_BYTE(cinfo, b[i], return FALSE);
846
9.10k
  length -= numtoread;
847
848
  /* process it */
849
9.10k
  switch (cinfo->unread_marker) {
850
3.77k
  case M_APP0:
851
3.77k
    examine_app0(cinfo, (JOCTET FAR *) b, numtoread, length);
852
3.77k
    break;
853
5.32k
  case M_APP14:
854
5.32k
    examine_app14(cinfo, (JOCTET FAR *) b, numtoread, length);
855
5.32k
    break;
856
0
  default:
857
    /* can't get here unless jpeg_save_markers chooses wrong processor */
858
0
    ERREXIT1(cinfo, JERR_UNKNOWN_MARKER, cinfo->unread_marker);
859
9.10k
  }
860
861
  /* skip any remaining data -- could be lots */
862
9.10k
  INPUT_SYNC(cinfo);
863
9.10k
  if (length > 0)
864
244
    (*cinfo->src->skip_input_data) (cinfo, (long) length);
865
866
9.10k
  return TRUE;
867
9.10k
}
868
869
870
#ifdef SAVE_MARKERS_SUPPORTED
871
872
METHODDEF(boolean)
873
save_marker (j_decompress_ptr cinfo)
874
/* Save an APPn or COM marker into the marker list */
875
0
{
876
0
  my_marker_ptr marker = (my_marker_ptr) cinfo->marker;
877
0
  jpeg_saved_marker_ptr cur_marker = marker->cur_marker;
878
0
  unsigned int bytes_read, data_length;
879
0
  JOCTET FAR * data;
880
0
  INT32 length = 0;
881
0
  INPUT_VARS(cinfo);
882
883
0
  if (cur_marker == NULL) {
884
    /* begin reading a marker */
885
0
    INPUT_2BYTES(cinfo, length, return FALSE);
886
0
    length -= 2;
887
0
    if (length >= 0) {   /* watch out for bogus length word */
888
      /* figure out how much we want to save */
889
0
      unsigned int limit;
890
0
      if (cinfo->unread_marker == (int) M_COM)
891
0
  limit = marker->length_limit_COM;
892
0
      else
893
0
  limit = marker->length_limit_APPn[cinfo->unread_marker - (int) M_APP0];
894
0
      if ((unsigned int) length < limit)
895
0
  limit = (unsigned int) length;
896
      /* allocate and initialize the marker item */
897
0
      cur_marker = (jpeg_saved_marker_ptr)
898
0
  (*cinfo->mem->alloc_large) ((j_common_ptr) cinfo, JPOOL_IMAGE,
899
0
            SIZEOF(struct jpeg_marker_struct) + limit);
900
0
      cur_marker->next = NULL;
901
0
      cur_marker->marker = (UINT8) cinfo->unread_marker;
902
0
      cur_marker->original_length = (unsigned int) length;
903
0
      cur_marker->data_length = limit;
904
      /* data area is just beyond the jpeg_marker_struct */
905
0
      data = cur_marker->data = (JOCTET FAR *) (cur_marker + 1);
906
0
      marker->cur_marker = cur_marker;
907
0
      marker->bytes_read = 0;
908
0
      bytes_read = 0;
909
0
      data_length = limit;
910
0
    } else {
911
      /* deal with bogus length word */
912
0
      bytes_read = data_length = 0;
913
0
      data = NULL;
914
0
    }
915
0
  } else {
916
    /* resume reading a marker */
917
0
    bytes_read = marker->bytes_read;
918
0
    data_length = cur_marker->data_length;
919
0
    data = cur_marker->data + bytes_read;
920
0
  }
921
922
0
  while (bytes_read < data_length) {
923
0
    INPUT_SYNC(cinfo);    /* move the restart point to here */
924
0
    marker->bytes_read = bytes_read;
925
    /* If there's not at least one byte in buffer, suspend */
926
0
    MAKE_BYTE_AVAIL(cinfo, return FALSE);
927
    /* Copy bytes with reasonable rapidity */
928
0
    while (bytes_read < data_length && bytes_in_buffer > 0) {
929
0
      *data++ = *next_input_byte++;
930
0
      bytes_in_buffer--;
931
0
      bytes_read++;
932
0
    }
933
0
  }
934
935
  /* Done reading what we want to read */
936
0
  if (cur_marker != NULL) { /* will be NULL if bogus length word */
937
    /* Add new marker to end of list */
938
0
    if (cinfo->marker_list == NULL) {
939
0
      cinfo->marker_list = cur_marker;
940
0
    } else {
941
0
      jpeg_saved_marker_ptr prev = cinfo->marker_list;
942
0
      while (prev->next != NULL)
943
0
  prev = prev->next;
944
0
      prev->next = cur_marker;
945
0
    }
946
    /* Reset pointer & calc remaining data length */
947
0
    data = cur_marker->data;
948
0
    length = cur_marker->original_length - data_length;
949
0
  }
950
  /* Reset to initial state for next marker */
951
0
  marker->cur_marker = NULL;
952
953
  /* Process the marker if interesting; else just make a generic trace msg */
954
0
  switch (cinfo->unread_marker) {
955
0
  case M_APP0:
956
0
    examine_app0(cinfo, data, data_length, length);
957
0
    break;
958
0
  case M_APP14:
959
0
    examine_app14(cinfo, data, data_length, length);
960
0
    break;
961
0
  default:
962
0
    TRACEMS2(cinfo, 1, JTRC_MISC_MARKER, cinfo->unread_marker,
963
0
       (int) (data_length + length));
964
0
  }
965
966
  /* skip any remaining data -- could be lots */
967
0
  INPUT_SYNC(cinfo);    /* do before skip_input_data */
968
0
  if (length > 0)
969
0
    (*cinfo->src->skip_input_data) (cinfo, (long) length);
970
971
0
  return TRUE;
972
0
}
973
974
#endif /* SAVE_MARKERS_SUPPORTED */
975
976
977
METHODDEF(boolean)
978
skip_variable (j_decompress_ptr cinfo)
979
/* Skip over an unknown or uninteresting variable-length marker */
980
4.65k
{
981
4.65k
  INT32 length;
982
4.65k
  INPUT_VARS(cinfo);
983
984
4.65k
  INPUT_2BYTES(cinfo, length, return FALSE);
985
4.65k
  length -= 2;
986
  
987
4.65k
  TRACEMS2(cinfo, 1, JTRC_MISC_MARKER, cinfo->unread_marker, (int) length);
988
989
4.65k
  INPUT_SYNC(cinfo);    /* do before skip_input_data */
990
4.65k
  if (length > 0)
991
4.65k
    (*cinfo->src->skip_input_data) (cinfo, (long) length);
992
993
4.65k
  return TRUE;
994
4.65k
}
995
996
997
/*
998
 * Find the next JPEG marker, save it in cinfo->unread_marker.
999
 * Returns FALSE if had to suspend before reaching a marker;
1000
 * in that case cinfo->unread_marker is unchanged.
1001
 *
1002
 * Note that the result might not be a valid marker code,
1003
 * but it will never be 0 or FF.
1004
 */
1005
1006
LOCAL(boolean)
1007
next_marker (j_decompress_ptr cinfo)
1008
53.4k
{
1009
53.4k
  int c;
1010
53.4k
  INPUT_VARS(cinfo);
1011
1012
87.3k
  for (;;) {
1013
87.3k
    INPUT_BYTE(cinfo, c, return FALSE);
1014
    /* Skip any non-FF bytes.
1015
     * This may look a bit inefficient, but it will not occur in a valid file.
1016
     * We sync after each discarded byte so that a suspending data source
1017
     * can discard the byte from its buffer.
1018
     */
1019
9.14M
    while (c != 0xFF) {
1020
9.06M
      cinfo->marker->discarded_bytes++;
1021
9.06M
      INPUT_SYNC(cinfo);
1022
9.06M
      INPUT_BYTE(cinfo, c, return FALSE);
1023
9.06M
    }
1024
    /* This loop swallows any duplicate FF bytes.  Extra FFs are legal as
1025
     * pad bytes, so don't count them in discarded_bytes.  We assume there
1026
     * will not be so many consecutive FF bytes as to overflow a suspending
1027
     * data source's input buffer.
1028
     */
1029
82.5k
    do {
1030
82.5k
      INPUT_BYTE(cinfo, c, return FALSE);
1031
82.5k
    } while (c == 0xFF);
1032
80.5k
    if (c != 0)
1033
46.7k
      break;      /* found a valid marker, exit loop */
1034
    /* Reach here if we found a stuffed-zero data sequence (FF/00).
1035
     * Discard it and loop back to try again.
1036
     */
1037
33.8k
    cinfo->marker->discarded_bytes += 2;
1038
33.8k
    INPUT_SYNC(cinfo);
1039
33.8k
  }
1040
1041
46.7k
  if (cinfo->marker->discarded_bytes != 0) {
1042
2.69k
    WARNMS2(cinfo, JWRN_EXTRANEOUS_DATA, cinfo->marker->discarded_bytes, c);
1043
2.69k
    cinfo->marker->discarded_bytes = 0;
1044
2.69k
  }
1045
1046
46.7k
  cinfo->unread_marker = c;
1047
1048
46.7k
  INPUT_SYNC(cinfo);
1049
46.7k
  return TRUE;
1050
53.4k
}
1051
1052
1053
LOCAL(boolean)
1054
first_marker (j_decompress_ptr cinfo)
1055
/* Like next_marker, but used to obtain the initial SOI marker. */
1056
/* For this marker, we do not allow preceding garbage or fill; otherwise,
1057
 * we might well scan an entire input file before realizing it ain't JPEG.
1058
 * If an application wants to process non-JFIF files, it must seek to the
1059
 * SOI before calling the JPEG library.
1060
 */
1061
6.42k
{
1062
6.42k
  int c, c2;
1063
6.42k
  INPUT_VARS(cinfo);
1064
1065
6.42k
  INPUT_BYTE(cinfo, c, return FALSE);
1066
6.42k
  INPUT_BYTE(cinfo, c2, return FALSE);
1067
6.42k
  if (c != 0xFF || c2 != (int) M_SOI)
1068
16
    ERREXIT2(cinfo, JERR_NO_SOI, c, c2);
1069
1070
6.42k
  cinfo->unread_marker = c2;
1071
1072
6.42k
  INPUT_SYNC(cinfo);
1073
6.42k
  return TRUE;
1074
6.42k
}
1075
1076
1077
/*
1078
 * Read markers until SOS or EOI.
1079
 *
1080
 * Returns same codes as are defined for jpeg_consume_input:
1081
 * JPEG_SUSPENDED, JPEG_REACHED_SOS, or JPEG_REACHED_EOI.
1082
 *
1083
 * Note: This function may return a pseudo SOS marker (with zero
1084
 * component number) for treat by input controller's consume_input.
1085
 * consume_input itself should filter out (skip) the pseudo marker
1086
 * after processing for the caller.
1087
 */
1088
1089
METHODDEF(int)
1090
read_markers (j_decompress_ptr cinfo)
1091
20.5k
{
1092
  /* Outer loop repeats once for each marker. */
1093
64.6k
  for (;;) {
1094
    /* Collect the marker proper, unless we already did. */
1095
    /* NB: first_marker() enforces the requirement that SOI appear first. */
1096
64.6k
    if (cinfo->unread_marker == 0) {
1097
58.8k
      if (! cinfo->marker->saw_SOI) {
1098
6.42k
  if (! first_marker(cinfo))
1099
0
    return JPEG_SUSPENDED;
1100
52.4k
      } else {
1101
52.4k
  if (! next_marker(cinfo))
1102
6.73k
    return JPEG_SUSPENDED;
1103
52.4k
      }
1104
58.8k
    }
1105
    /* At this point cinfo->unread_marker contains the marker code and the
1106
     * input point is just past the marker proper, but before any parameters.
1107
     * A suspension will cause us to return with this state still true.
1108
     */
1109
57.8k
    switch (cinfo->unread_marker) {
1110
6.42k
    case M_SOI:
1111
6.42k
      if (! get_soi(cinfo))
1112
0
  return JPEG_SUSPENDED;
1113
6.42k
      break;
1114
1115
6.42k
    case M_SOF0:    /* Baseline */
1116
5.82k
      if (! get_sof(cinfo, TRUE, FALSE, FALSE))
1117
0
  return JPEG_SUSPENDED;
1118
5.82k
      break;
1119
1120
5.82k
    case M_SOF1:    /* Extended sequential, Huffman */
1121
5
      if (! get_sof(cinfo, FALSE, FALSE, FALSE))
1122
0
  return JPEG_SUSPENDED;
1123
5
      break;
1124
1125
270
    case M_SOF2:    /* Progressive, Huffman */
1126
270
      if (! get_sof(cinfo, FALSE, TRUE, FALSE))
1127
0
  return JPEG_SUSPENDED;
1128
270
      break;
1129
1130
270
    case M_SOF9:    /* Extended sequential, arithmetic */
1131
3
      if (! get_sof(cinfo, FALSE, FALSE, TRUE))
1132
0
  return JPEG_SUSPENDED;
1133
3
      break;
1134
1135
3
    case M_SOF10:   /* Progressive, arithmetic */
1136
0
      if (! get_sof(cinfo, FALSE, TRUE, TRUE))
1137
0
  return JPEG_SUSPENDED;
1138
0
      break;
1139
1140
    /* Currently unsupported SOFn types */
1141
2
    case M_SOF3:    /* Lossless, Huffman */
1142
6
    case M_SOF5:    /* Differential sequential, Huffman */
1143
10
    case M_SOF6:    /* Differential progressive, Huffman */
1144
12
    case M_SOF7:    /* Differential lossless, Huffman */
1145
16
    case M_JPG:     /* Reserved for JPEG extensions */
1146
18
    case M_SOF11:   /* Lossless, arithmetic */
1147
22
    case M_SOF13:   /* Differential sequential, arithmetic */
1148
28
    case M_SOF14:   /* Differential progressive, arithmetic */
1149
33
    case M_SOF15:   /* Differential lossless, arithmetic */
1150
33
      ERREXIT1(cinfo, JERR_SOF_UNSUPPORTED, cinfo->unread_marker);
1151
33
      break;
1152
1153
7.50k
    case M_SOS:
1154
7.50k
      if (! get_sos(cinfo))
1155
1
  return JPEG_SUSPENDED;
1156
7.50k
      cinfo->unread_marker = 0; /* processed the marker */
1157
7.50k
      return JPEG_REACHED_SOS;
1158
1159
5.26k
    case M_EOI:
1160
5.26k
      TRACEMS(cinfo, 1, JTRC_EOI);
1161
5.26k
      cinfo->unread_marker = 0; /* processed the marker */
1162
5.26k
      return JPEG_REACHED_EOI;
1163
1164
29
    case M_DAC:
1165
29
      if (! get_dac(cinfo))
1166
0
  return JPEG_SUSPENDED;
1167
29
      break;
1168
1169
9.28k
    case M_DHT:
1170
9.28k
      if (! get_dht(cinfo))
1171
18
  return JPEG_SUSPENDED;
1172
9.27k
      break;
1173
1174
9.27k
    case M_DQT:
1175
7.13k
      if (! get_dqt(cinfo))
1176
7
  return JPEG_SUSPENDED;
1177
7.12k
      break;
1178
1179
7.12k
    case M_DRI:
1180
575
      if (! get_dri(cinfo))
1181
0
  return JPEG_SUSPENDED;
1182
575
      break;
1183
1184
575
    case M_JPG8:
1185
2
      if (! get_lse(cinfo))
1186
0
  return JPEG_SUSPENDED;
1187
2
      break;
1188
1189
3.77k
    case M_APP0:
1190
5.28k
    case M_APP1:
1191
5.48k
    case M_APP2:
1192
5.49k
    case M_APP3:
1193
5.50k
    case M_APP4:
1194
5.50k
    case M_APP5:
1195
5.51k
    case M_APP6:
1196
5.51k
    case M_APP7:
1197
5.51k
    case M_APP8:
1198
5.52k
    case M_APP9:
1199
5.52k
    case M_APP10:
1200
5.53k
    case M_APP11:
1201
7.75k
    case M_APP12:
1202
8.40k
    case M_APP13:
1203
13.7k
    case M_APP14:
1204
13.7k
    case M_APP15:
1205
13.7k
      if (! (*((my_marker_ptr) cinfo->marker)->process_APPn[
1206
13.7k
    cinfo->unread_marker - (int) M_APP0]) (cinfo))
1207
1
  return JPEG_SUSPENDED;
1208
13.7k
      break;
1209
1210
13.7k
    case M_COM:
1211
22
      if (! (*((my_marker_ptr) cinfo->marker)->process_COM) (cinfo))
1212
0
  return JPEG_SUSPENDED;
1213
22
      break;
1214
1215
90
    case M_RST0:    /* these are all parameterless */
1216
280
    case M_RST1:
1217
425
    case M_RST2:
1218
574
    case M_RST3:
1219
721
    case M_RST4:
1220
865
    case M_RST5:
1221
1.00k
    case M_RST6:
1222
1.15k
    case M_RST7:
1223
1.16k
    case M_TEM:
1224
1.16k
      TRACEMS1(cinfo, 1, JTRC_PARMLESS_MARKER, cinfo->unread_marker);
1225
1.16k
      break;
1226
1227
2
    case M_DNL:     /* Ignore DNL ... perhaps the wrong thing */
1228
2
      if (! skip_variable(cinfo))
1229
0
  return JPEG_SUSPENDED;
1230
2
      break;
1231
1232
562
    default:      /* must be DHP, EXP, JPGn, or RESn */
1233
      /* For now, we treat the reserved markers as fatal errors since they are
1234
       * likely to be used to signal incompatible JPEG Part 3 extensions.
1235
       * Once the JPEG 3 version-number marker is well defined, this code
1236
       * ought to change!
1237
       */
1238
562
      ERREXIT1(cinfo, JERR_UNKNOWN_MARKER, cinfo->unread_marker);
1239
57.8k
    }
1240
    /* Successfully processed marker, so reset state variable */
1241
44.0k
    cinfo->unread_marker = 0;
1242
44.0k
  } /* end loop */
1243
20.5k
}
1244
1245
1246
/*
1247
 * Read a restart marker, which is expected to appear next in the datastream;
1248
 * if the marker is not there, take appropriate recovery action.
1249
 * Returns FALSE if suspension is required.
1250
 *
1251
 * This is called by the entropy decoder after it has read an appropriate
1252
 * number of MCUs.  cinfo->unread_marker may be nonzero if the entropy decoder
1253
 * has already read a marker from the data source.  Under normal conditions
1254
 * cinfo->unread_marker will be reset to 0 before returning; if not reset,
1255
 * it holds a marker which the decoder will be unable to read past.
1256
 */
1257
1258
METHODDEF(boolean)
1259
read_restart_marker (j_decompress_ptr cinfo)
1260
14.5k
{
1261
  /* Obtain a marker unless we already did. */
1262
  /* Note that next_marker will complain if it skips any data. */
1263
14.5k
  if (cinfo->unread_marker == 0) {
1264
993
    if (! next_marker(cinfo))
1265
4
      return FALSE;
1266
993
  }
1267
1268
14.4k
  if (cinfo->unread_marker ==
1269
14.4k
      ((int) M_RST0 + cinfo->marker->next_restart_num)) {
1270
    /* Normal case --- swallow the marker and let entropy decoder continue */
1271
14.3k
    TRACEMS1(cinfo, 3, JTRC_RST, cinfo->marker->next_restart_num);
1272
14.3k
    cinfo->unread_marker = 0;
1273
14.3k
  } else {
1274
    /* Uh-oh, the restart markers have been messed up. */
1275
    /* Let the data source manager determine how to resync. */
1276
118
    if (! (*cinfo->src->resync_to_restart) (cinfo,
1277
118
              cinfo->marker->next_restart_num))
1278
3
      return FALSE;
1279
118
  }
1280
1281
  /* Update next-restart state */
1282
14.4k
  cinfo->marker->next_restart_num = (cinfo->marker->next_restart_num + 1) & 7;
1283
1284
14.4k
  return TRUE;
1285
14.4k
}
1286
1287
1288
/*
1289
 * This is the default resync_to_restart method for data source managers
1290
 * to use if they don't have any better approach.  Some data source managers
1291
 * may be able to back up, or may have additional knowledge about the data
1292
 * which permits a more intelligent recovery strategy; such managers would
1293
 * presumably supply their own resync method.
1294
 *
1295
 * read_restart_marker calls resync_to_restart if it finds a marker other than
1296
 * the restart marker it was expecting.  (This code is *not* used unless
1297
 * a nonzero restart interval has been declared.)  cinfo->unread_marker is
1298
 * the marker code actually found (might be anything, except 0 or FF).
1299
 * The desired restart marker number (0..7) is passed as a parameter.
1300
 * This routine is supposed to apply whatever error recovery strategy seems
1301
 * appropriate in order to position the input stream to the next data segment.
1302
 * Note that cinfo->unread_marker is treated as a marker appearing before
1303
 * the current data-source input point; usually it should be reset to zero
1304
 * before returning.
1305
 * Returns FALSE if suspension is required.
1306
 *
1307
 * This implementation is substantially constrained by wanting to treat the
1308
 * input as a data stream; this means we can't back up.  Therefore, we have
1309
 * only the following actions to work with:
1310
 *   1. Simply discard the marker and let the entropy decoder resume at next
1311
 *      byte of file.
1312
 *   2. Read forward until we find another marker, discarding intervening
1313
 *      data.  (In theory we could look ahead within the current bufferload,
1314
 *      without having to discard data if we don't find the desired marker.
1315
 *      This idea is not implemented here, in part because it makes behavior
1316
 *      dependent on buffer size and chance buffer-boundary positions.)
1317
 *   3. Leave the marker unread (by failing to zero cinfo->unread_marker).
1318
 *      This will cause the entropy decoder to process an empty data segment,
1319
 *      inserting dummy zeroes, and then we will reprocess the marker.
1320
 *
1321
 * #2 is appropriate if we think the desired marker lies ahead, while #3 is
1322
 * appropriate if the found marker is a future restart marker (indicating
1323
 * that we have missed the desired restart marker, probably because it got
1324
 * corrupted).
1325
 * We apply #2 or #3 if the found marker is a restart marker no more than
1326
 * two counts behind or ahead of the expected one.  We also apply #2 if the
1327
 * found marker is not a legal JPEG marker code (it's certainly bogus data).
1328
 * If the found marker is a restart marker more than 2 counts away, we do #1
1329
 * (too much risk that the marker is erroneous; with luck we will be able to
1330
 * resync at some future point).
1331
 * For any valid non-restart JPEG marker, we apply #3.  This keeps us from
1332
 * overrunning the end of a scan.  An implementation limited to single-scan
1333
 * files might find it better to apply #2 for markers other than EOI, since
1334
 * any other marker would have to be bogus data in that case.
1335
 */
1336
1337
GLOBAL(boolean)
1338
jpeg_resync_to_restart (j_decompress_ptr cinfo, int desired)
1339
118
{
1340
118
  int marker = cinfo->unread_marker;
1341
118
  int action = 1;
1342
  
1343
  /* Always put up a warning. */
1344
118
  WARNMS2(cinfo, JWRN_MUST_RESYNC, marker, desired);
1345
  
1346
  /* Outer loop handles repeated decision after scanning forward. */
1347
128
  for (;;) {
1348
128
    if (marker < (int) M_SOF0)
1349
8
      action = 2;    /* invalid marker */
1350
120
    else if (marker < (int) M_RST0 || marker > (int) M_RST7)
1351
101
      action = 3;    /* valid non-restart marker */
1352
19
    else {
1353
19
      if (marker == ((int) M_RST0 + ((desired+1) & 7)) ||
1354
19
    marker == ((int) M_RST0 + ((desired+2) & 7)))
1355
6
  action = 3;    /* one of the next two expected restarts */
1356
13
      else if (marker == ((int) M_RST0 + ((desired-1) & 7)) ||
1357
13
         marker == ((int) M_RST0 + ((desired-2) & 7)))
1358
5
  action = 2;    /* a prior restart, so advance */
1359
8
      else
1360
8
  action = 1;   /* desired restart or too far away */
1361
19
    }
1362
128
    TRACEMS2(cinfo, 4, JTRC_RECOVERY_ACTION, marker, action);
1363
128
    switch (action) {
1364
8
    case 1:
1365
      /* Discard marker and let entropy decoder resume processing. */
1366
8
      cinfo->unread_marker = 0;
1367
8
      return TRUE;
1368
13
    case 2:
1369
      /* Scan to the next marker, and repeat the decision loop. */
1370
13
      if (! next_marker(cinfo))
1371
3
  return FALSE;
1372
10
      marker = cinfo->unread_marker;
1373
10
      break;
1374
107
    case 3:
1375
      /* Return without advancing past this marker. */
1376
      /* Entropy decoder will be forced to process an empty segment. */
1377
107
      return TRUE;
1378
128
    }
1379
128
  } /* end loop */
1380
118
}
1381
1382
1383
/*
1384
 * Reset marker processing state to begin a fresh datastream.
1385
 */
1386
1387
METHODDEF(void)
1388
reset_marker_reader (j_decompress_ptr cinfo)
1389
12.8k
{
1390
12.8k
  my_marker_ptr marker = (my_marker_ptr) cinfo->marker;
1391
1392
12.8k
  cinfo->comp_info = NULL;    /* until allocated by get_sof */
1393
12.8k
  cinfo->input_scan_number = 0;   /* no SOS seen yet */
1394
12.8k
  cinfo->unread_marker = 0;   /* no pending marker */
1395
12.8k
  marker->pub.saw_SOI = FALSE;    /* set internal state too */
1396
12.8k
  marker->pub.saw_SOF = FALSE;
1397
12.8k
  marker->pub.discarded_bytes = 0;
1398
12.8k
  marker->cur_marker = NULL;
1399
12.8k
}
1400
1401
1402
/*
1403
 * Initialize the marker reader module.
1404
 * This is called only once, when the decompression object is created.
1405
 */
1406
1407
GLOBAL(void)
1408
jinit_marker_reader (j_decompress_ptr cinfo)
1409
6.44k
{
1410
6.44k
  my_marker_ptr marker;
1411
6.44k
  int i;
1412
1413
  /* Create subobject in permanent pool */
1414
6.44k
  marker = (my_marker_ptr) (*cinfo->mem->alloc_small)
1415
6.44k
    ((j_common_ptr) cinfo, JPOOL_PERMANENT, SIZEOF(my_marker_reader));
1416
6.44k
  cinfo->marker = &marker->pub;
1417
  /* Initialize public method pointers */
1418
6.44k
  marker->pub.reset_marker_reader = reset_marker_reader;
1419
6.44k
  marker->pub.read_markers = read_markers;
1420
6.44k
  marker->pub.read_restart_marker = read_restart_marker;
1421
  /* Initialize COM/APPn processing.
1422
   * By default, we examine and then discard APP0 and APP14,
1423
   * but simply discard COM and all other APPn.
1424
   */
1425
6.44k
  marker->process_COM = skip_variable;
1426
6.44k
  marker->length_limit_COM = 0;
1427
109k
  for (i = 0; i < 16; i++) {
1428
103k
    marker->process_APPn[i] = skip_variable;
1429
103k
    marker->length_limit_APPn[i] = 0;
1430
103k
  }
1431
6.44k
  marker->process_APPn[0] = get_interesting_appn;
1432
6.44k
  marker->process_APPn[14] = get_interesting_appn;
1433
  /* Reset marker processing state */
1434
6.44k
  reset_marker_reader(cinfo);
1435
6.44k
}
1436
1437
1438
/*
1439
 * Control saving of COM and APPn markers into marker_list.
1440
 */
1441
1442
#ifdef SAVE_MARKERS_SUPPORTED
1443
1444
GLOBAL(void)
1445
jpeg_save_markers (j_decompress_ptr cinfo, int marker_code,
1446
       unsigned int length_limit)
1447
0
{
1448
0
  my_marker_ptr marker = (my_marker_ptr) cinfo->marker;
1449
0
  long maxlength;
1450
0
  jpeg_marker_parser_method processor;
1451
1452
  /* Length limit mustn't be larger than what we can allocate
1453
   * (should only be a concern in a 16-bit environment).
1454
   */
1455
0
  maxlength = cinfo->mem->max_alloc_chunk - SIZEOF(struct jpeg_marker_struct);
1456
0
  if (((long) length_limit) > maxlength)
1457
0
    length_limit = (unsigned int) maxlength;
1458
1459
  /* Choose processor routine to use.
1460
   * APP0/APP14 have special requirements.
1461
   */
1462
0
  if (length_limit) {
1463
0
    processor = save_marker;
1464
    /* If saving APP0/APP14, save at least enough for our internal use. */
1465
0
    if (marker_code == (int) M_APP0 && length_limit < APP0_DATA_LEN)
1466
0
      length_limit = APP0_DATA_LEN;
1467
0
    else if (marker_code == (int) M_APP14 && length_limit < APP14_DATA_LEN)
1468
0
      length_limit = APP14_DATA_LEN;
1469
0
  } else {
1470
0
    processor = skip_variable;
1471
    /* If discarding APP0/APP14, use our regular on-the-fly processor. */
1472
0
    if (marker_code == (int) M_APP0 || marker_code == (int) M_APP14)
1473
0
      processor = get_interesting_appn;
1474
0
  }
1475
1476
0
  if (marker_code == (int) M_COM) {
1477
0
    marker->process_COM = processor;
1478
0
    marker->length_limit_COM = length_limit;
1479
0
  } else if (marker_code >= (int) M_APP0 && marker_code <= (int) M_APP15) {
1480
0
    marker->process_APPn[marker_code - (int) M_APP0] = processor;
1481
0
    marker->length_limit_APPn[marker_code - (int) M_APP0] = length_limit;
1482
0
  } else
1483
0
    ERREXIT1(cinfo, JERR_UNKNOWN_MARKER, marker_code);
1484
0
}
1485
1486
#endif /* SAVE_MARKERS_SUPPORTED */
1487
1488
1489
/*
1490
 * Install a special processing method for COM or APPn markers.
1491
 */
1492
1493
GLOBAL(void)
1494
jpeg_set_marker_processor (j_decompress_ptr cinfo, int marker_code,
1495
         jpeg_marker_parser_method routine)
1496
0
{
1497
0
  my_marker_ptr marker = (my_marker_ptr) cinfo->marker;
1498
1499
0
  if (marker_code == (int) M_COM)
1500
0
    marker->process_COM = routine;
1501
0
  else if (marker_code >= (int) M_APP0 && marker_code <= (int) M_APP15)
1502
0
    marker->process_APPn[marker_code - (int) M_APP0] = routine;
1503
0
  else
1504
0
    ERREXIT1(cinfo, JERR_UNKNOWN_MARKER, marker_code);
1505
0
}