mov.c 150.9 KB
Newer Older
1
/*
2
 * MOV demuxer
3
 * Copyright (c) 2001 Fabrice Bellard
4
 * Copyright (c) 2009 Baptiste Coudurier <baptiste dot coudurier at gmail dot com>
5
 *
6 7 8
 * first version by Francois Revol <revol@free.fr>
 * seek function by Gael Chardon <gael.dev@4now.net>
 *
9 10 11
 * This file is part of FFmpeg.
 *
 * FFmpeg is free software; you can redistribute it and/or
F
Fabrice Bellard 已提交
12 13
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
14
 * version 2.1 of the License, or (at your option) any later version.
15
 *
16
 * FFmpeg is distributed in the hope that it will be useful,
17
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
F
Fabrice Bellard 已提交
18 19
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
20
 *
F
Fabrice Bellard 已提交
21
 * You should have received a copy of the GNU Lesser General Public
22
 * License along with FFmpeg; if not, write to the Free Software
23
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
24
 */
25

26
#include <inttypes.h>
27
#include <limits.h>
28
#include <stdint.h>
29

30
#include "libavutil/attributes.h"
31
#include "libavutil/channel_layout.h"
32
#include "libavutil/intreadwrite.h"
33
#include "libavutil/intfloat.h"
34
#include "libavutil/mathematics.h"
35
#include "libavutil/time_internal.h"
36
#include "libavutil/avstring.h"
37
#include "libavutil/dict.h"
38
#include "libavutil/display.h"
39
#include "libavutil/opt.h"
40
#include "libavutil/timecode.h"
41
#include "libavcodec/ac3tab.h"
42
#include "avformat.h"
43
#include "internal.h"
44
#include "avio_internal.h"
45
#include "riff.h"
46
#include "isom.h"
47
#include "libavcodec/get_bits.h"
R
Raivo Hool 已提交
48
#include "id3v1.h"
49
#include "mov_chan.h"
50
#include "replaygain.h"
51

52
#if CONFIG_ZLIB
53 54 55
#include <zlib.h>
#endif

56 57
#include "qtpalette.h"

58 59 60
/* those functions parse an atom */
/* links atom IDs to parse functions */
typedef struct MOVParseTableEntry {
61
    uint32_t type;
62
    int (*parse)(MOVContext *ctx, AVIOContext *pb, MOVAtom atom);
63 64
} MOVParseTableEntry;

65
static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom);
66
static int mov_read_mfra(MOVContext *c, AVIOContext *f);
67

68 69
static int mov_metadata_track_or_disc_number(MOVContext *c, AVIOContext *pb,
                                             unsigned len, const char *key)
B
Baptiste Coudurier 已提交
70 71 72
{
    char buf[16];

73
    short current, total = 0;
74
    avio_rb16(pb); // unknown
75
    current = avio_rb16(pb);
76 77
    if (len >= 6)
        total = avio_rb16(pb);
78 79 80 81
    if (!total)
        snprintf(buf, sizeof(buf), "%d", current);
    else
        snprintf(buf, sizeof(buf), "%d/%d", current, total);
82
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
83
    av_dict_set(&c->fc->metadata, key, buf, 0);
B
Baptiste Coudurier 已提交
84 85 86 87

    return 0;
}

88 89
static int mov_metadata_int8_bypass_padding(MOVContext *c, AVIOContext *pb,
                                            unsigned len, const char *key)
90
{
91 92 93 94
    /* bypass padding bytes */
    avio_r8(pb);
    avio_r8(pb);
    avio_r8(pb);
95

96
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
97
    av_dict_set_int(&c->fc->metadata, key, avio_r8(pb), 0);
98

99
    return 0;
100 101
}

102 103
static int mov_metadata_int8_no_padding(MOVContext *c, AVIOContext *pb,
                                        unsigned len, const char *key)
104
{
105
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
106
    av_dict_set_int(&c->fc->metadata, key, avio_r8(pb), 0);
107

108
    return 0;
109 110
}

R
Raivo Hool 已提交
111
static int mov_metadata_gnre(MOVContext *c, AVIOContext *pb,
112 113
                             unsigned len, const char *key)
{
R
Raivo Hool 已提交
114
    short genre;
115

R
Raivo Hool 已提交
116
    avio_r8(pb); // unknown
117

R
Raivo Hool 已提交
118 119 120
    genre = avio_r8(pb);
    if (genre < 1 || genre > ID3v1_GENRE_MAX)
        return 0;
121
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
122
    av_dict_set(&c->fc->metadata, key, ff_id3v1_genre_str[genre-1], 0);
R
Raivo Hool 已提交
123 124

    return 0;
125 126
}

127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145
static const uint32_t mac_to_unicode[128] = {
    0x00C4,0x00C5,0x00C7,0x00C9,0x00D1,0x00D6,0x00DC,0x00E1,
    0x00E0,0x00E2,0x00E4,0x00E3,0x00E5,0x00E7,0x00E9,0x00E8,
    0x00EA,0x00EB,0x00ED,0x00EC,0x00EE,0x00EF,0x00F1,0x00F3,
    0x00F2,0x00F4,0x00F6,0x00F5,0x00FA,0x00F9,0x00FB,0x00FC,
    0x2020,0x00B0,0x00A2,0x00A3,0x00A7,0x2022,0x00B6,0x00DF,
    0x00AE,0x00A9,0x2122,0x00B4,0x00A8,0x2260,0x00C6,0x00D8,
    0x221E,0x00B1,0x2264,0x2265,0x00A5,0x00B5,0x2202,0x2211,
    0x220F,0x03C0,0x222B,0x00AA,0x00BA,0x03A9,0x00E6,0x00F8,
    0x00BF,0x00A1,0x00AC,0x221A,0x0192,0x2248,0x2206,0x00AB,
    0x00BB,0x2026,0x00A0,0x00C0,0x00C3,0x00D5,0x0152,0x0153,
    0x2013,0x2014,0x201C,0x201D,0x2018,0x2019,0x00F7,0x25CA,
    0x00FF,0x0178,0x2044,0x20AC,0x2039,0x203A,0xFB01,0xFB02,
    0x2021,0x00B7,0x201A,0x201E,0x2030,0x00C2,0x00CA,0x00C1,
    0x00CB,0x00C8,0x00CD,0x00CE,0x00CF,0x00CC,0x00D3,0x00D4,
    0xF8FF,0x00D2,0x00DA,0x00DB,0x00D9,0x0131,0x02C6,0x02DC,
    0x00AF,0x02D8,0x02D9,0x02DA,0x00B8,0x02DD,0x02DB,0x02C7,
};

146
static int mov_read_mac_string(MOVContext *c, AVIOContext *pb, int len,
147 148 149 150 151 152 153
                               char *dst, int dstlen)
{
    char *p = dst;
    char *end = dst+dstlen-1;
    int i;

    for (i = 0; i < len; i++) {
154
        uint8_t t, c = avio_r8(pb);
155 156
        if (c < 0x80 && p < end)
            *p++ = c;
157
        else if (p < end)
158 159 160 161 162 163
            PUT_UTF8(mac_to_unicode[c-0x80], t, if (p < end) *p++ = t;);
    }
    *p = 0;
    return p - dst;
}

A
Anton Khirnov 已提交
164 165 166 167 168
static int mov_read_covr(MOVContext *c, AVIOContext *pb, int type, int len)
{
    AVPacket pkt;
    AVStream *st;
    MOVStreamContext *sc;
169
    enum AVCodecID id;
A
Anton Khirnov 已提交
170 171 172
    int ret;

    switch (type) {
173 174 175
    case 0xd:  id = AV_CODEC_ID_MJPEG; break;
    case 0xe:  id = AV_CODEC_ID_PNG;   break;
    case 0x1b: id = AV_CODEC_ID_BMP;   break;
A
Anton Khirnov 已提交
176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205
    default:
        av_log(c->fc, AV_LOG_WARNING, "Unknown cover type: 0x%x.\n", type);
        avio_skip(pb, len);
        return 0;
    }

    st = avformat_new_stream(c->fc, NULL);
    if (!st)
        return AVERROR(ENOMEM);
    sc = av_mallocz(sizeof(*sc));
    if (!sc)
        return AVERROR(ENOMEM);
    st->priv_data = sc;

    ret = av_get_packet(pb, &pkt, len);
    if (ret < 0)
        return ret;

    st->disposition              |= AV_DISPOSITION_ATTACHED_PIC;

    st->attached_pic              = pkt;
    st->attached_pic.stream_index = st->index;
    st->attached_pic.flags       |= AV_PKT_FLAG_KEY;

    st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
    st->codec->codec_id   = id;

    return 0;
}

206 207 208 209 210
static int mov_metadata_loci(MOVContext *c, AVIOContext *pb, unsigned len)
{
    char language[4] = { 0 };
    char buf[100];
    uint16_t langcode = 0;
211
    double longitude, latitude;
212 213
    const char *key = "location";

214 215
    if (len < 4 + 2 + 1 + 1 + 4 + 4 + 4) {
        av_log(c->fc, AV_LOG_ERROR, "loci too short\n");
216
        return AVERROR_INVALIDDATA;
217
    }
218 219 220 221 222 223 224

    avio_skip(pb, 4); // version+flags
    langcode = avio_rb16(pb);
    ff_mov_lang_to_iso639(langcode, language);
    len -= 6;

    len -= avio_get_str(pb, len, buf, sizeof(buf)); // place name
225 226
    if (len < 1) {
        av_log(c->fc, AV_LOG_ERROR, "place name too long\n");
227
        return AVERROR_INVALIDDATA;
228
    }
229 230 231
    avio_skip(pb, 1); // role
    len -= 1;

232
    if (len < 12) {
233
        av_log(c->fc, AV_LOG_ERROR, "no space for coordinates left (%d)\n", len);
234
        return AVERROR_INVALIDDATA;
235
    }
236 237 238 239 240 241 242 243 244 245
    longitude = ((int32_t) avio_rb32(pb)) / (float) (1 << 16);
    latitude  = ((int32_t) avio_rb32(pb)) / (float) (1 << 16);

    // Try to output in the same format as the ?xyz field
    snprintf(buf, sizeof(buf), "%+08.4f%+09.4f/", latitude, longitude);
    if (*language && strcmp(language, "und")) {
        char key2[16];
        snprintf(key2, sizeof(key2), "%s-%s", key, language);
        av_dict_set(&c->fc->metadata, key2, buf, 0);
    }
246
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
247 248 249
    return av_dict_set(&c->fc->metadata, key, buf, 0);
}

250
static int mov_read_udta_string(MOVContext *c, AVIOContext *pb, MOVAtom atom)
251 252
{
    char tmp_key[5];
253
    char key2[32], language[4] = {0};
254
    char *str = NULL;
255
    const char *key = NULL;
256
    uint16_t langcode = 0;
257
    uint32_t data_type = 0, str_size, str_size_alloc;
258
    int (*parse)(MOVContext*, AVIOContext*, unsigned, const char*) = NULL;
259
    int raw = 0;
260 261

    switch (atom.type) {
262 263
    case MKTAG( '@','P','R','M'): key = "premiere_version"; raw = 1; break;
    case MKTAG( '@','P','R','Q'): key = "quicktime_version"; raw = 1; break;
264 265
    case MKTAG( 'X','M','P','_'):
        if (c->export_xmp) { key = "xmp"; raw = 1; } break;
R
Raivo Hool 已提交
266
    case MKTAG( 'a','A','R','T'): key = "album_artist";    break;
267 268 269 270
    case MKTAG( 'a','k','I','D'): key = "account_type";
        parse = mov_metadata_int8_no_padding; break;
    case MKTAG( 'a','p','I','D'): key = "account_id"; break;
    case MKTAG( 'c','a','t','g'): key = "category"; break;
271 272
    case MKTAG( 'c','p','i','l'): key = "compilation";
        parse = mov_metadata_int8_no_padding; break;
273 274
    case MKTAG( 'c','p','r','t'): key = "copyright"; break;
    case MKTAG( 'd','e','s','c'): key = "description"; break;
275 276
    case MKTAG( 'd','i','s','k'): key = "disc";
        parse = mov_metadata_track_or_disc_number; break;
277 278
    case MKTAG( 'e','g','i','d'): key = "episode_uid";
        parse = mov_metadata_int8_no_padding; break;
R
Raivo Hool 已提交
279 280
    case MKTAG( 'g','n','r','e'): key = "genre";
        parse = mov_metadata_gnre; break;
281 282
    case MKTAG( 'h','d','v','d'): key = "hd_video";
        parse = mov_metadata_int8_no_padding; break;
283
    case MKTAG( 'k','e','y','w'): key = "keywords";  break;
284
    case MKTAG( 'l','d','e','s'): key = "synopsis";  break;
285 286
    case MKTAG( 'l','o','c','i'):
        return mov_metadata_loci(c, pb, atom.size);
287 288
    case MKTAG( 'p','c','s','t'): key = "podcast";
        parse = mov_metadata_int8_no_padding; break;
289 290
    case MKTAG( 'p','g','a','p'): key = "gapless_playback";
        parse = mov_metadata_int8_no_padding; break;
291 292 293 294 295 296 297 298 299
    case MKTAG( 'p','u','r','d'): key = "purchase_date"; break;
    case MKTAG( 'r','t','n','g'): key = "rating";
        parse = mov_metadata_int8_no_padding; break;
    case MKTAG( 's','o','a','a'): key = "sort_album_artist"; break;
    case MKTAG( 's','o','a','l'): key = "sort_album";   break;
    case MKTAG( 's','o','a','r'): key = "sort_artist";  break;
    case MKTAG( 's','o','c','o'): key = "sort_composer"; break;
    case MKTAG( 's','o','n','m'): key = "sort_name";    break;
    case MKTAG( 's','o','s','n'): key = "sort_show";    break;
300 301
    case MKTAG( 's','t','i','k'): key = "media_type";
        parse = mov_metadata_int8_no_padding; break;
B
Baptiste Coudurier 已提交
302
    case MKTAG( 't','r','k','n'): key = "track";
303
        parse = mov_metadata_track_or_disc_number; break;
304
    case MKTAG( 't','v','e','n'): key = "episode_id"; break;
305
    case MKTAG( 't','v','e','s'): key = "episode_sort";
306
        parse = mov_metadata_int8_bypass_padding; break;
307 308
    case MKTAG( 't','v','n','n'): key = "network";   break;
    case MKTAG( 't','v','s','h'): key = "show";      break;
309
    case MKTAG( 't','v','s','n'): key = "season_number";
310
        parse = mov_metadata_int8_bypass_padding; break;
311
    case MKTAG(0xa9,'A','R','T'): key = "artist";    break;
312
    case MKTAG(0xa9,'P','R','D'): key = "producer";  break;
313 314
    case MKTAG(0xa9,'a','l','b'): key = "album";     break;
    case MKTAG(0xa9,'a','u','t'): key = "artist";    break;
315
    case MKTAG(0xa9,'c','h','p'): key = "chapter";   break;
316
    case MKTAG(0xa9,'c','m','t'): key = "comment";   break;
317
    case MKTAG(0xa9,'c','o','m'): key = "composer";  break;
318 319
    case MKTAG(0xa9,'c','p','y'): key = "copyright"; break;
    case MKTAG(0xa9,'d','a','y'): key = "date";      break;
320 321 322
    case MKTAG(0xa9,'d','i','r'): key = "director";  break;
    case MKTAG(0xa9,'d','i','s'): key = "disclaimer"; break;
    case MKTAG(0xa9,'e','d','1'): key = "edit_date"; break;
323
    case MKTAG(0xa9,'e','n','c'): key = "encoder";   break;
324
    case MKTAG(0xa9,'f','m','t'): key = "original_format"; break;
325
    case MKTAG(0xa9,'g','e','n'): key = "genre";     break;
326
    case MKTAG(0xa9,'g','r','p'): key = "grouping";  break;
327
    case MKTAG(0xa9,'h','s','t'): key = "host_computer"; break;
328
    case MKTAG(0xa9,'i','n','f'): key = "comment";   break;
329 330 331
    case MKTAG(0xa9,'l','y','r'): key = "lyrics";    break;
    case MKTAG(0xa9,'m','a','k'): key = "make";      break;
    case MKTAG(0xa9,'m','o','d'): key = "model";     break;
332
    case MKTAG(0xa9,'n','a','m'): key = "title";     break;
333 334 335 336 337
    case MKTAG(0xa9,'o','p','e'): key = "original_artist"; break;
    case MKTAG(0xa9,'p','r','d'): key = "producer";  break;
    case MKTAG(0xa9,'p','r','f'): key = "performers"; break;
    case MKTAG(0xa9,'r','e','q'): key = "playback_requirements"; break;
    case MKTAG(0xa9,'s','r','c'): key = "original_source"; break;
338
    case MKTAG(0xa9,'s','t','3'): key = "subtitle";  break;
339 340
    case MKTAG(0xa9,'s','w','r'): key = "encoder";   break;
    case MKTAG(0xa9,'t','o','o'): key = "encoder";   break;
341 342 343
    case MKTAG(0xa9,'t','r','k'): key = "track";     break;
    case MKTAG(0xa9,'u','r','l'): key = "URL";       break;
    case MKTAG(0xa9,'w','r','n'): key = "warning";   break;
344 345
    case MKTAG(0xa9,'w','r','t'): key = "composer";  break;
    case MKTAG(0xa9,'x','y','z'): key = "location";  break;
346
    }
347
retry:
348
    if (c->itunes_metadata && atom.size > 8) {
349 350
        int data_size = avio_rb32(pb);
        int tag = avio_rl32(pb);
351
        if (tag == MKTAG('d','a','t','a') && data_size <= atom.size) {
352 353
            data_type = avio_rb32(pb); // type
            avio_rb32(pb); // unknown
354 355
            str_size = data_size - 16;
            atom.size -= 16;
A
Anton Khirnov 已提交
356 357 358 359 360 361

            if (atom.type == MKTAG('c', 'o', 'v', 'r')) {
                int ret = mov_read_covr(c, pb, data_type, str_size);
                if (ret < 0) {
                    av_log(c->fc, AV_LOG_ERROR, "Error parsing cover art.\n");
                }
362
                return ret;
A
Anton Khirnov 已提交
363
            }
364
        } else return 0;
365
    } else if (atom.size > 4 && key && !c->itunes_metadata && !raw) {
366
        str_size = avio_rb16(pb); // string length
367 368 369
        if (str_size > atom.size) {
            raw = 1;
            avio_seek(pb, -2, SEEK_CUR);
370
            av_log(c->fc, AV_LOG_WARNING, "UDTA parsing failed retrying raw\n");
371 372
            goto retry;
        }
373
        langcode = avio_rb16(pb);
374
        ff_mov_lang_to_iso639(langcode, language);
375 376 377 378
        atom.size -= 4;
    } else
        str_size = atom.size;

379
    if (c->export_all && !key) {
380 381 382 383 384 385
        snprintf(tmp_key, 5, "%.4s", (char*)&atom.type);
        key = tmp_key;
    }

    if (!key)
        return 0;
386
    if (atom.size < 0 || str_size >= INT_MAX/2)
387
        return AVERROR_INVALIDDATA;
388

389
    // worst-case requirement for output string in case of utf8 coded input
390
    str_size_alloc = (raw ? str_size : str_size * 2) + 1;
391
    str = av_mallocz(str_size_alloc);
392 393 394
    if (!str)
        return AVERROR(ENOMEM);

B
Baptiste Coudurier 已提交
395
    if (parse)
396
        parse(c, pb, str_size, key);
B
Baptiste Coudurier 已提交
397
    else {
398
        if (!raw && (data_type == 3 || (data_type == 0 && (langcode < 0x400 || langcode == 0x7fff)))) { // MAC Encoded
399
            mov_read_mac_string(c, pb, str_size, str, str_size_alloc);
400
        } else {
401
            int ret = avio_read(pb, str, str_size);
402 403
            if (ret != str_size) {
                av_freep(&str);
404
                return ret < 0 ? ret : AVERROR_INVALIDDATA;
405
            }
406 407
            str[str_size] = 0;
        }
408
        c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
409
        av_dict_set(&c->fc->metadata, key, str, 0);
B
Baptiste Coudurier 已提交
410 411
        if (*language && strcmp(language, "und")) {
            snprintf(key2, sizeof(key2), "%s-%s", key, language);
412
            av_dict_set(&c->fc->metadata, key2, str, 0);
B
Baptiste Coudurier 已提交
413
        }
B
Baptiste Coudurier 已提交
414
    }
415 416
    av_log(c->fc, AV_LOG_TRACE, "lang \"%3s\" ", language);
    av_log(c->fc, AV_LOG_TRACE, "tag \"%s\" value \"%s\" atom \"%.4s\" %d %"PRId64"\n",
417 418 419
            key, str, (char*)&atom.type, str_size_alloc, atom.size);

    av_freep(&str);
420 421
    return 0;
}
422

423
static int mov_read_chpl(MOVContext *c, AVIOContext *pb, MOVAtom atom)
D
David Conrad 已提交
424 425
{
    int64_t start;
D
David Conrad 已提交
426
    int i, nb_chapters, str_len, version;
D
David Conrad 已提交
427 428 429 430 431
    char str[256+1];

    if ((atom.size -= 5) < 0)
        return 0;

432 433
    version = avio_r8(pb);
    avio_rb24(pb);
D
David Conrad 已提交
434
    if (version)
435 436
        avio_rb32(pb); // ???
    nb_chapters = avio_r8(pb);
D
David Conrad 已提交
437 438 439 440 441

    for (i = 0; i < nb_chapters; i++) {
        if (atom.size < 9)
            return 0;

442 443
        start = avio_rb64(pb);
        str_len = avio_r8(pb);
D
David Conrad 已提交
444 445 446 447

        if ((atom.size -= 9+str_len) < 0)
            return 0;

448 449
        if (avio_read(pb, str, str_len) != str_len)
            return AVERROR_INVALIDDATA;
D
David Conrad 已提交
450
        str[str_len] = 0;
451
        avpriv_new_chapter(c->fc, i, (AVRational){1,10000000}, start, AV_NOPTS_VALUE, str);
D
David Conrad 已提交
452 453 454 455
    }
    return 0;
}

456
#define MIN_DATA_ENTRY_BOX_SIZE 12
457
static int mov_read_dref(MOVContext *c, AVIOContext *pb, MOVAtom atom)
458
{
459 460
    AVStream *st;
    MOVStreamContext *sc;
461 462
    int entries, i, j;

463 464 465 466 467
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

468 469
    avio_rb32(pb); // version + flags
    entries = avio_rb32(pb);
470 471
    if (entries >  (atom.size - 1) / MIN_DATA_ENTRY_BOX_SIZE + 1 ||
        entries >= UINT_MAX / sizeof(*sc->drefs))
472
        return AVERROR_INVALIDDATA;
473
    av_free(sc->drefs);
474
    sc->drefs_count = 0;
475
    sc->drefs = av_mallocz(entries * sizeof(*sc->drefs));
476 477 478
    if (!sc->drefs)
        return AVERROR(ENOMEM);
    sc->drefs_count = entries;
479 480

    for (i = 0; i < sc->drefs_count; i++) {
481
        MOVDref *dref = &sc->drefs[i];
482
        uint32_t size = avio_rb32(pb);
483
        int64_t next = avio_tell(pb) + size - 4;
484

485
        if (size < 12)
486
            return AVERROR_INVALIDDATA;
487

488 489
        dref->type = avio_rl32(pb);
        avio_rb32(pb); // version + flags
490
        av_log(c->fc, AV_LOG_TRACE, "type %.4s size %d\n", (char*)&dref->type, size);
491 492 493 494 495 496

        if (dref->type == MKTAG('a','l','i','s') && size > 150) {
            /* macintosh alias record */
            uint16_t volume_len, len;
            int16_t type;

497
            avio_skip(pb, 10);
498

499
            volume_len = avio_r8(pb);
500
            volume_len = FFMIN(volume_len, 27);
501 502
            if (avio_read(pb, dref->volume, 27) != 27)
                return AVERROR_INVALIDDATA;
503 504
            dref->volume[volume_len] = 0;
            av_log(c->fc, AV_LOG_DEBUG, "volume %s, len %d\n", dref->volume, volume_len);
505

506
            avio_skip(pb, 12);
507

508
            len = avio_r8(pb);
509
            len = FFMIN(len, 63);
510 511
            if (avio_read(pb, dref->filename, 63) != 63)
                return AVERROR_INVALIDDATA;
512 513 514
            dref->filename[len] = 0;
            av_log(c->fc, AV_LOG_DEBUG, "filename %s, len %d\n", dref->filename, len);

515
            avio_skip(pb, 16);
516 517

            /* read next level up_from_alias/down_to_target */
518 519
            dref->nlvl_from = avio_rb16(pb);
            dref->nlvl_to   = avio_rb16(pb);
520 521 522
            av_log(c->fc, AV_LOG_DEBUG, "nlvl from %d, nlvl to %d\n",
                   dref->nlvl_from, dref->nlvl_to);

523
            avio_skip(pb, 16);
524

525
            for (type = 0; type != -1 && avio_tell(pb) < next; ) {
526
                if(avio_feof(pb))
527
                    return AVERROR_EOF;
528 529
                type = avio_rb16(pb);
                len = avio_rb16(pb);
530 531 532
                av_log(c->fc, AV_LOG_DEBUG, "type %d, len %d\n", type, len);
                if (len&1)
                    len += 1;
533
                if (type == 2 || type == 18) { // absolute path
534
                    av_free(dref->path);
535
                    dref->path = av_mallocz(len+1);
536 537
                    if (!dref->path)
                        return AVERROR(ENOMEM);
538 539 540 541
                    if (avio_read(pb, dref->path, len) != len) {
                        av_freep(&dref->path);
                        return AVERROR_INVALIDDATA;
                    }
542 543
                    if (type == 18) // no additional processing needed
                        continue;
544
                    if (len > volume_len && !strncmp(dref->path, dref->volume, volume_len)) {
545 546 547 548 549 550 551 552
                        len -= volume_len;
                        memmove(dref->path, dref->path+volume_len, len);
                        dref->path[len] = 0;
                    }
                    for (j = 0; j < len; j++)
                        if (dref->path[j] == ':')
                            dref->path[j] = '/';
                    av_log(c->fc, AV_LOG_DEBUG, "path %s\n", dref->path);
553 554 555 556 557
                } else if (type == 0) { // directory name
                    av_free(dref->dir);
                    dref->dir = av_malloc(len+1);
                    if (!dref->dir)
                        return AVERROR(ENOMEM);
558 559
                    if (avio_read(pb, dref->dir, len) != len) {
                        av_freep(&dref->dir);
560
                        return AVERROR_INVALIDDATA;
561
                    }
562 563 564 565 566
                    dref->dir[len] = 0;
                    for (j = 0; j < len; j++)
                        if (dref->dir[j] == ':')
                            dref->dir[j] = '/';
                    av_log(c->fc, AV_LOG_DEBUG, "dir %s\n", dref->dir);
567
                } else
568
                    avio_skip(pb, len);
569 570
            }
        }
A
Anton Khirnov 已提交
571
        avio_seek(pb, next, SEEK_SET);
572 573 574 575
    }
    return 0;
}

576
static int mov_read_hdlr(MOVContext *c, AVIOContext *pb, MOVAtom atom)
577
{
578
    AVStream *st;
579
    uint32_t type;
580
    uint32_t av_unused ctype;
581
    int64_t title_size;
582
    char *title_str;
583

584 585 586 587 588
    if (c->fc->nb_streams < 1) // meta before first trak
        return 0;

    st = c->fc->streams[c->fc->nb_streams-1];

589 590
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
591 592

    /* component type */
593 594
    ctype = avio_rl32(pb);
    type = avio_rl32(pb); /* component subtype */
595

596 597
    av_log(c->fc, AV_LOG_TRACE, "ctype= %.4s (0x%08x)\n", (char*)&ctype, ctype);
    av_log(c->fc, AV_LOG_TRACE, "stype= %.4s\n", (char*)&type);
598

599
    if     (type == MKTAG('v','i','d','e'))
600
        st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
601
    else if (type == MKTAG('s','o','u','n'))
602
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
603
    else if (type == MKTAG('m','1','a',' '))
604
        st->codec->codec_id = AV_CODEC_ID_MP2;
605
    else if ((type == MKTAG('s','u','b','p')) || (type == MKTAG('c','l','c','p')))
606
        st->codec->codec_type = AVMEDIA_TYPE_SUBTITLE;
607

608 609 610
    avio_rb32(pb); /* component  manufacture */
    avio_rb32(pb); /* component flags */
    avio_rb32(pb); /* component flags mask */
611

612 613 614 615 616
    title_size = atom.size - 24;
    if (title_size > 0) {
        title_str = av_malloc(title_size + 1); /* Add null terminator */
        if (!title_str)
            return AVERROR(ENOMEM);
617 618 619 620
        if (avio_read(pb, title_str, title_size) != title_size) {
            av_freep(&title_str);
            return AVERROR_INVALIDDATA;
        }
621
        title_str[title_size] = 0;
622 623 624 625
        if (title_str[0]) {
            int off = (!c->isom && title_str[0] == title_size - 1);
            av_dict_set(&st->metadata, "handler_name", title_str + off, 0);
        }
626 627 628
        av_freep(&title_str);
    }

629 630 631
    return 0;
}

632
int ff_mov_read_esds(AVFormatContext *fc, AVIOContext *pb)
633
{
634
    AVStream *st;
635
    int tag;
636

637
    if (fc->nb_streams < 1)
638
        return 0;
639
    st = fc->streams[fc->nb_streams-1];
640

641
    avio_rb32(pb); /* version + flags */
642
    ff_mp4_read_descr(fc, pb, &tag);
643
    if (tag == MP4ESDescrTag) {
644
        ff_mp4_parse_es_descr(pb, NULL);
645
    } else
646
        avio_rb16(pb); /* ID */
647

648
    ff_mp4_read_descr(fc, pb, &tag);
649 650
    if (tag == MP4DecConfigDescrTag)
        ff_mp4_read_dec_config_descr(fc, st, pb);
651 652 653
    return 0;
}

654
static int mov_read_esds(MOVContext *c, AVIOContext *pb, MOVAtom atom)
655
{
656
    return ff_mov_read_esds(c->fc, pb);
657 658
}

659
static int mov_read_dac3(MOVContext *c, AVIOContext *pb, MOVAtom atom)
660 661
{
    AVStream *st;
662
    enum AVAudioServiceType *ast;
663
    int ac3info, acmod, lfeon, bsmod;
664

665 666
    if (c->fc->nb_streams < 1)
        return 0;
667 668
    st = c->fc->streams[c->fc->nb_streams-1];

669 670 671 672 673
    ast = (enum AVAudioServiceType*)ff_stream_new_side_data(st, AV_PKT_DATA_AUDIO_SERVICE_TYPE,
                                                            sizeof(*ast));
    if (!ast)
        return AVERROR(ENOMEM);

674
    ac3info = avio_rb24(pb);
675
    bsmod = (ac3info >> 14) & 0x7;
676 677 678
    acmod = (ac3info >> 11) & 0x7;
    lfeon = (ac3info >> 10) & 0x1;
    st->codec->channels = ((int[]){2,1,2,3,3,4,4,5})[acmod] + lfeon;
679 680 681
    st->codec->channel_layout = avpriv_ac3_channel_layout_tab[acmod];
    if (lfeon)
        st->codec->channel_layout |= AV_CH_LOW_FREQUENCY;
682
    *ast = bsmod;
683
    if (st->codec->channels > 1 && bsmod == 0x7)
684 685 686
        *ast = AV_AUDIO_SERVICE_TYPE_KARAOKE;

    st->codec->audio_service_type = *ast;
687 688 689 690

    return 0;
}

691 692 693
static int mov_read_dec3(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
694
    enum AVAudioServiceType *ast;
695 696 697 698 699 700
    int eac3info, acmod, lfeon, bsmod;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

701 702 703 704 705
    ast = (enum AVAudioServiceType*)ff_stream_new_side_data(st, AV_PKT_DATA_AUDIO_SERVICE_TYPE,
                                                            sizeof(*ast));
    if (!ast)
        return AVERROR(ENOMEM);

706 707 708 709 710 711 712 713 714 715 716 717
    /* No need to parse fields for additional independent substreams and its
     * associated dependent substreams since libavcodec's E-AC-3 decoder
     * does not support them yet. */
    avio_rb16(pb); /* data_rate and num_ind_sub */
    eac3info = avio_rb24(pb);
    bsmod = (eac3info >> 12) & 0x1f;
    acmod = (eac3info >>  9) & 0x7;
    lfeon = (eac3info >>  8) & 0x1;
    st->codec->channel_layout = avpriv_ac3_channel_layout_tab[acmod];
    if (lfeon)
        st->codec->channel_layout |= AV_CH_LOW_FREQUENCY;
    st->codec->channels = av_get_channel_layout_nb_channels(st->codec->channel_layout);
718
    *ast = bsmod;
719
    if (st->codec->channels > 1 && bsmod == 0x7)
720 721 722
        *ast = AV_AUDIO_SERVICE_TYPE_KARAOKE;

    st->codec->audio_service_type = *ast;
723 724 725 726

    return 0;
}

727 728 729 730 731 732 733 734 735 736 737
static int mov_read_chan(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    if (atom.size < 16)
        return 0;

738 739 740
    /* skip version and flags */
    avio_skip(pb, 4);

741
    ff_mov_read_chan(c->fc, pb, st, atom.size - 4);
742 743 744 745

    return 0;
}

746 747 748
static int mov_read_wfex(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
749
    int ret;
750 751 752 753 754

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

T
Thomas Volkert 已提交
755
    if ((ret = ff_get_wav_header(pb, st->codec, atom.size, 0)) < 0)
756
        av_log(c->fc, AV_LOG_WARNING, "get_wav_header failed\n");
757

758
    return ret;
759 760
}

761
static int mov_read_pasp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
762
{
763 764
    const int num = avio_rb32(pb);
    const int den = avio_rb32(pb);
765 766 767 768 769 770
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

771 772 773 774 775 776 777
    if ((st->sample_aspect_ratio.den != 1 || st->sample_aspect_ratio.num) && // default
        (den != st->sample_aspect_ratio.den || num != st->sample_aspect_ratio.num)) {
        av_log(c->fc, AV_LOG_WARNING,
               "sample aspect ratio already set to %d:%d, ignoring 'pasp' atom (%d:%d)\n",
               st->sample_aspect_ratio.num, st->sample_aspect_ratio.den,
               num, den);
    } else if (den != 0) {
778 779
        av_reduce(&st->sample_aspect_ratio.num, &st->sample_aspect_ratio.den,
                  num, den, 32767);
780 781 782 783
    }
    return 0;
}

784
/* this atom contains actual media data */
785
static int mov_read_mdat(MOVContext *c, AVIOContext *pb, MOVAtom atom)
786
{
787
    if (atom.size == 0) /* wrong one (MP4) */
788 789 790 791 792
        return 0;
    c->found_mdat=1;
    return 0; /* now go for moov */
}

793
/* read major brand, minor version and compatible brands and store them as metadata */
794
static int mov_read_ftyp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
795
{
796 797 798 799 800
    uint32_t minor_ver;
    int comp_brand_size;
    char* comp_brands_str;
    uint8_t type[5] = {0};

801 802
    if (avio_read(pb, type, 4) != 4)
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
803
    if (strcmp(type, "qt  "))
804
        c->isom = 1;
805
    av_log(c->fc, AV_LOG_DEBUG, "ISO: File Type Major Brand: %.4s\n",(char *)&type);
806
    av_dict_set(&c->fc->metadata, "major_brand", type, 0);
807
    minor_ver = avio_rb32(pb); /* minor version */
808
    av_dict_set_int(&c->fc->metadata, "minor_version", minor_ver, 0);
809 810 811

    comp_brand_size = atom.size - 8;
    if (comp_brand_size < 0)
812
        return AVERROR_INVALIDDATA;
813 814 815
    comp_brands_str = av_malloc(comp_brand_size + 1); /* Add null terminator */
    if (!comp_brands_str)
        return AVERROR(ENOMEM);
816 817 818 819
    if (avio_read(pb, comp_brands_str, comp_brand_size) != comp_brand_size) {
        av_freep(&comp_brands_str);
        return AVERROR_INVALIDDATA;
    }
820
    comp_brands_str[comp_brand_size] = 0;
821
    av_dict_set(&c->fc->metadata, "compatible_brands", comp_brands_str, 0);
822 823
    av_freep(&comp_brands_str);

824 825 826
    return 0;
}

827
/* this atom should contain all header atoms */
828
static int mov_read_moov(MOVContext *c, AVIOContext *pb, MOVAtom atom)
829
{
830 831
    int ret;

832 833 834 835 836 837
    if (c->found_moov) {
        av_log(c->fc, AV_LOG_WARNING, "Found duplicated MOOV Atom. Skipped it\n");
        avio_skip(pb, atom.size);
        return 0;
    }

838 839
    if ((ret = mov_read_default(c, pb, atom)) < 0)
        return ret;
840 841 842 843 844 845
    /* we parsed the 'moov' atom, we can terminate the parsing as soon as we find the 'mdat' */
    /* so we don't parse the whole file if over a network */
    c->found_moov=1;
    return 0; /* now go for mdat */
}

846
static int mov_read_moof(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
847
{
848 849 850
    if (!c->has_looked_for_mfra && c->use_mfra_for > 0) {
        c->has_looked_for_mfra = 1;
        if (pb->seekable) {
851
            int ret;
852 853 854 855 856 857 858 859 860 861 862
            av_log(c->fc, AV_LOG_VERBOSE, "stream has moof boxes, will look "
                    "for a mfra\n");
            if ((ret = mov_read_mfra(c, pb)) < 0) {
                av_log(c->fc, AV_LOG_VERBOSE, "found a moof box but failed to "
                        "read the mfra (may be a live ismv)\n");
            }
        } else {
            av_log(c->fc, AV_LOG_VERBOSE, "found a moof box but stream is not "
                    "seekable, can not look for mfra\n");
        }
    }
863
    c->fragment.moof_offset = c->fragment.implicit_offset = avio_tell(pb) - 8;
864
    av_log(c->fc, AV_LOG_TRACE, "moof offset %"PRIx64"\n", c->fragment.moof_offset);
B
Baptiste Coudurier 已提交
865 866
    return mov_read_default(c, pb, atom);
}
867

868
static void mov_metadata_creation_time(AVDictionary **metadata, int64_t time)
869 870 871
{
    char buffer[32];
    if (time) {
872
        struct tm *ptm, tmbuf;
873
        time_t timet;
874 875
        if(time >= 2082844800)
            time -= 2082844800;  /* seconds between 1904-01-01 and Epoch */
876
        timet = time;
877
        ptm = gmtime_r(&timet, &tmbuf);
878
        if (!ptm) return;
879 880
        if (strftime(buffer, sizeof(buffer), "%Y-%m-%d %H:%M:%S", ptm))
            av_dict_set(metadata, "creation_time", buffer, 0);
881 882 883
    }
}

884
static int mov_read_mdhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
885
{
886 887 888
    AVStream *st;
    MOVStreamContext *sc;
    int version;
889
    char language[4] = {0};
890
    unsigned lang;
891
    int64_t creation_time;
892

893 894 895 896 897
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

898 899 900 901 902
    if (sc->time_scale) {
        av_log(c->fc, AV_LOG_ERROR, "Multiple mdhd?\n");
        return AVERROR_INVALIDDATA;
    }

903
    version = avio_r8(pb);
904
    if (version > 1) {
905
        avpriv_request_sample(c->fc, "Version %d", version);
906 907
        return AVERROR_PATCHWELCOME;
    }
908
    avio_rb24(pb); /* flags */
B
clean  
Baptiste Coudurier 已提交
909
    if (version == 1) {
910 911
        creation_time = avio_rb64(pb);
        avio_rb64(pb);
B
clean  
Baptiste Coudurier 已提交
912
    } else {
913 914
        creation_time = avio_rb32(pb);
        avio_rb32(pb); /* modification time */
B
clean  
Baptiste Coudurier 已提交
915
    }
916
    mov_metadata_creation_time(&st->metadata, creation_time);
917

918 919
    sc->time_scale = avio_rb32(pb);
    st->duration = (version == 1) ? avio_rb64(pb) : avio_rb32(pb); /* duration */
920

921
    lang = avio_rb16(pb); /* language */
922
    if (ff_mov_lang_to_iso639(lang, language))
923
        av_dict_set(&st->metadata, "language", language, 0);
924
    avio_rb16(pb); /* quality */
925 926 927 928

    return 0;
}

929
static int mov_read_mvhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
930
{
931
    int64_t creation_time;
932 933
    int version = avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
934

B
Baptiste Coudurier 已提交
935
    if (version == 1) {
936 937
        creation_time = avio_rb64(pb);
        avio_rb64(pb);
B
Baptiste Coudurier 已提交
938
    } else {
939 940
        creation_time = avio_rb32(pb);
        avio_rb32(pb); /* modification time */
B
Baptiste Coudurier 已提交
941
    }
942
    mov_metadata_creation_time(&c->fc->metadata, creation_time);
943
    c->time_scale = avio_rb32(pb); /* time scale */
944

945
    av_log(c->fc, AV_LOG_TRACE, "time scale = %i\n", c->time_scale);
946

947
    c->duration = (version == 1) ? avio_rb64(pb) : avio_rb32(pb); /* duration */
948 949
    // set the AVCodecContext duration because the duration of individual tracks
    // may be inaccurate
950
    if (c->time_scale > 0 && !c->trex_data)
951
        c->fc->duration = av_rescale(c->duration, AV_TIME_BASE, c->time_scale);
952
    avio_rb32(pb); /* preferred scale */
953

954
    avio_rb16(pb); /* preferred volume */
955

956
    avio_skip(pb, 10); /* reserved */
957

958
    avio_skip(pb, 36); /* display matrix */
959

960 961 962 963 964 965 966
    avio_rb32(pb); /* preview time */
    avio_rb32(pb); /* preview duration */
    avio_rb32(pb); /* poster time */
    avio_rb32(pb); /* selection time */
    avio_rb32(pb); /* selection duration */
    avio_rb32(pb); /* current time */
    avio_rb32(pb); /* next track ID */
967 968 969
    return 0;
}

970
static int mov_read_enda(MOVContext *c, AVIOContext *pb, MOVAtom atom)
971
{
972 973 974 975 976 977
    AVStream *st;
    int little_endian;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
978

979
    little_endian = avio_rb16(pb) & 0xFF;
980
    av_log(c->fc, AV_LOG_TRACE, "enda %d\n", little_endian);
981
    if (little_endian == 1) {
982
        switch (st->codec->codec_id) {
983 984
        case AV_CODEC_ID_PCM_S24BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_S24LE;
985
            break;
986 987
        case AV_CODEC_ID_PCM_S32BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_S32LE;
988
            break;
989 990
        case AV_CODEC_ID_PCM_F32BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_F32LE;
991
            break;
992 993
        case AV_CODEC_ID_PCM_F64BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_F64LE;
994
            break;
995 996 997 998 999 1000 1001
        default:
            break;
        }
    }
    return 0;
}

1002 1003 1004 1005 1006 1007 1008 1009 1010 1011
static int mov_read_colr(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    char color_parameter_type[5] = { 0 };
    int color_primaries, color_trc, color_matrix;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams - 1];

1012 1013
    if (avio_read(pb, color_parameter_type, 4) != 4)
        return AVERROR_INVALIDDATA;
1014 1015 1016 1017 1018 1019 1020 1021 1022 1023 1024
    if (strncmp(color_parameter_type, "nclx", 4) &&
        strncmp(color_parameter_type, "nclc", 4)) {
        av_log(c->fc, AV_LOG_WARNING, "unsupported color_parameter_type %s\n",
               color_parameter_type);
        return 0;
    }

    color_primaries = avio_rb16(pb);
    color_trc = avio_rb16(pb);
    color_matrix = avio_rb16(pb);

1025
    av_log(c->fc, AV_LOG_TRACE,
1026
           "%s: pri %d trc %d matrix %d",
1027
           color_parameter_type, color_primaries, color_trc, color_matrix);
1028

1029
    if (!strncmp(color_parameter_type, "nclx", 4)) {
1030
        uint8_t color_range = avio_r8(pb) >> 7;
1031
        av_log(c->fc, AV_LOG_TRACE, " full %"PRIu8"", color_range);
1032 1033 1034 1035 1036 1037 1038 1039
        if (color_range)
            st->codec->color_range = AVCOL_RANGE_JPEG;
        else
            st->codec->color_range = AVCOL_RANGE_MPEG;
        /* 14496-12 references JPEG XR specs (rather than the more complete
         * 23001-8) so some adjusting is required */
        if (color_primaries >= AVCOL_PRI_FILM)
            color_primaries = AVCOL_PRI_UNSPECIFIED;
1040 1041
        if ((color_trc >= AVCOL_TRC_LINEAR &&
             color_trc <= AVCOL_TRC_LOG_SQRT) ||
1042 1043 1044 1045 1046 1047 1048
            color_trc >= AVCOL_TRC_BT2020_10)
            color_trc = AVCOL_TRC_UNSPECIFIED;
        if (color_matrix >= AVCOL_SPC_BT2020_NCL)
            color_matrix = AVCOL_SPC_UNSPECIFIED;
        st->codec->color_primaries = color_primaries;
        st->codec->color_trc = color_trc;
        st->codec->colorspace = color_matrix;
1049
    } else if (!strncmp(color_parameter_type, "nclc", 4)) {
1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067
        /* color primaries, Table 4-4 */
        switch (color_primaries) {
        case 1: st->codec->color_primaries = AVCOL_PRI_BT709; break;
        case 5: st->codec->color_primaries = AVCOL_PRI_SMPTE170M; break;
        case 6: st->codec->color_primaries = AVCOL_PRI_SMPTE240M; break;
        }
        /* color transfer, Table 4-5 */
        switch (color_trc) {
        case 1: st->codec->color_trc = AVCOL_TRC_BT709; break;
        case 7: st->codec->color_trc = AVCOL_TRC_SMPTE240M; break;
        }
        /* color matrix, Table 4-6 */
        switch (color_matrix) {
        case 1: st->codec->colorspace = AVCOL_SPC_BT709; break;
        case 6: st->codec->colorspace = AVCOL_SPC_BT470BG; break;
        case 7: st->codec->colorspace = AVCOL_SPC_SMPTE240M; break;
        }
    }
1068
    av_log(c->fc, AV_LOG_TRACE, "\n");
1069 1070 1071 1072

    return 0;
}

1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106
static int mov_read_fiel(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    unsigned mov_field_order;
    enum AVFieldOrder decoded_field_order = AV_FIELD_UNKNOWN;

    if (c->fc->nb_streams < 1) // will happen with jp2 files
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    if (atom.size < 2)
        return AVERROR_INVALIDDATA;
    mov_field_order = avio_rb16(pb);
    if ((mov_field_order & 0xFF00) == 0x0100)
        decoded_field_order = AV_FIELD_PROGRESSIVE;
    else if ((mov_field_order & 0xFF00) == 0x0200) {
        switch (mov_field_order & 0xFF) {
        case 0x01: decoded_field_order = AV_FIELD_TT;
                   break;
        case 0x06: decoded_field_order = AV_FIELD_BB;
                   break;
        case 0x09: decoded_field_order = AV_FIELD_TB;
                   break;
        case 0x0E: decoded_field_order = AV_FIELD_BT;
                   break;
        }
    }
    if (decoded_field_order == AV_FIELD_UNKNOWN && mov_field_order) {
        av_log(NULL, AV_LOG_ERROR, "Unknown MOV field order 0x%04x\n", mov_field_order);
    }
    st->codec->field_order = decoded_field_order;

    return 0;
}

1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142
static int mov_realloc_extradata(AVCodecContext *codec, MOVAtom atom)
{
    int err = 0;
    uint64_t size = (uint64_t)codec->extradata_size + atom.size + 8 + FF_INPUT_BUFFER_PADDING_SIZE;
    if (size > INT_MAX || (uint64_t)atom.size > INT_MAX)
        return AVERROR_INVALIDDATA;
    if ((err = av_reallocp(&codec->extradata, size)) < 0) {
        codec->extradata_size = 0;
        return err;
    }
    codec->extradata_size = size - FF_INPUT_BUFFER_PADDING_SIZE;
    return 0;
}

/* Read a whole atom into the extradata return the size of the atom read, possibly truncated if != atom.size */
static int64_t mov_read_atom_into_extradata(MOVContext *c, AVIOContext *pb, MOVAtom atom,
                                        AVCodecContext *codec, uint8_t *buf)
{
    int64_t result = atom.size;
    int err;

    AV_WB32(buf    , atom.size + 8);
    AV_WL32(buf + 4, atom.type);
    err = avio_read(pb, buf + 8, atom.size);
    if (err < 0) {
        codec->extradata_size -= atom.size;
        return err;
    } else if (err < atom.size) {
        av_log(c->fc, AV_LOG_WARNING, "truncated extradata\n");
        codec->extradata_size -= atom.size - err;
        result = err;
    }
    memset(buf + 8 + err, 0, FF_INPUT_BUFFER_PADDING_SIZE);
    return result;
}

1143
/* FIXME modify qdm2/svq3/h264 decoders to take full atom as extradata */
1144
static int mov_read_extradata(MOVContext *c, AVIOContext *pb, MOVAtom atom,
1145
                              enum AVCodecID codec_id)
1146
{
1147
    AVStream *st;
1148
    uint64_t original_size;
1149
    int err;
1150 1151 1152

    if (c->fc->nb_streams < 1) // will happen with jp2 files
        return 0;
1153
    st = c->fc->streams[c->fc->nb_streams-1];
1154 1155 1156 1157

    if (st->codec->codec_id != codec_id)
        return 0; /* unexpected codec_id - don't mess with extradata */

1158 1159 1160
    original_size = st->codec->extradata_size;
    err = mov_realloc_extradata(st->codec, atom);
    if (err)
1161
        return err;
1162 1163 1164

    err =  mov_read_atom_into_extradata(c, pb, atom, st->codec,  st->codec->extradata + original_size);
    if (err < 0)
1165
        return err;
1166
    return 0; // Note: this is the original behavior to ignore truncation.
1167 1168
}

1169 1170 1171
/* wrapper functions for reading ALAC/AVS/MJPEG/MJPEG2000 extradata atoms only for those codecs */
static int mov_read_alac(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
1172
    return mov_read_extradata(c, pb, atom, AV_CODEC_ID_ALAC);
1173 1174 1175 1176
}

static int mov_read_avss(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
1177
    return mov_read_extradata(c, pb, atom, AV_CODEC_ID_AVS);
1178 1179 1180 1181
}

static int mov_read_jp2h(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
1182
    return mov_read_extradata(c, pb, atom, AV_CODEC_ID_JPEG2000);
1183 1184
}

1185 1186 1187 1188 1189
static int mov_read_dpxe(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    return mov_read_extradata(c, pb, atom, AV_CODEC_ID_R10K);
}

C
Carl Eugen Hoyos 已提交
1190
static int mov_read_avid(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1191
{
1192 1193 1194 1195
    int ret = mov_read_extradata(c, pb, atom, AV_CODEC_ID_AVUI);
    if(ret == 0)
        ret = mov_read_extradata(c, pb, atom, AV_CODEC_ID_DNXHD);
    return ret;
1196 1197
}

1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211
static int mov_read_targa_y216(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int ret = mov_read_extradata(c, pb, atom, AV_CODEC_ID_TARGA_Y216);

    if (!ret && c->fc->nb_streams >= 1) {
        AVCodecContext *avctx = c->fc->streams[c->fc->nb_streams-1]->codec;
        if (avctx->extradata_size >= 40) {
            avctx->height = AV_RB16(&avctx->extradata[36]);
            avctx->width  = AV_RB16(&avctx->extradata[38]);
        }
    }
    return ret;
}

1212 1213
static int mov_read_ares(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224
    if (c->fc->nb_streams >= 1) {
        AVCodecContext *codec = c->fc->streams[c->fc->nb_streams-1]->codec;
        if (codec->codec_tag == MKTAG('A', 'V', 'i', 'n') &&
            codec->codec_id == AV_CODEC_ID_H264 &&
            atom.size > 11) {
            avio_skip(pb, 10);
            /* For AVID AVCI50, force width of 1440 to be able to select the correct SPS and PPS */
            if (avio_rb16(pb) == 0xd4d)
                codec->width = 1440;
            return 0;
        }
1225 1226 1227 1228 1229
    }

    return mov_read_avid(c, pb, atom);
}

1230 1231 1232 1233 1234 1235 1236
static int mov_read_aclr(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int ret = 0;
    int length = 0;
    uint64_t original_size;
    if (c->fc->nb_streams >= 1) {
        AVCodecContext *codec = c->fc->streams[c->fc->nb_streams-1]->codec;
1237 1238
        if (codec->codec_id == AV_CODEC_ID_H264)
            return 0;
1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256
        if (atom.size == 16) {
            original_size = codec->extradata_size;
            ret = mov_realloc_extradata(codec, atom);
            if (!ret) {
                length =  mov_read_atom_into_extradata(c, pb, atom, codec, codec->extradata + original_size);
                if (length == atom.size) {
                    const uint8_t range_value = codec->extradata[original_size + 19];
                    switch (range_value) {
                    case 1:
                        codec->color_range = AVCOL_RANGE_MPEG;
                        break;
                    case 2:
                        codec->color_range = AVCOL_RANGE_JPEG;
                        break;
                    default:
                        av_log(c, AV_LOG_WARNING, "ignored unknown aclr value (%d)\n", range_value);
                        break;
                    }
1257
                    av_dlog(c, "color_range: %d\n", codec->color_range);
1258 1259 1260 1261 1262 1263 1264 1265
                } else {
                  /* For some reason the whole atom was not added to the extradata */
                  av_log(c, AV_LOG_ERROR, "aclr not decoded - incomplete atom\n");
                }
            } else {
                av_log(c, AV_LOG_ERROR, "aclr not decoded - unable to add atom to extradata\n");
            }
        } else {
1266
            av_log(c, AV_LOG_WARNING, "aclr not decoded - unexpected size %"PRId64"\n", atom.size);
1267 1268 1269 1270 1271 1272
        }
    }

    return ret;
}

P
Piotr Bandurski 已提交
1273 1274
static int mov_read_svq3(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
1275
    return mov_read_extradata(c, pb, atom, AV_CODEC_ID_SVQ3);
P
Piotr Bandurski 已提交
1276 1277
}

1278
static int mov_read_wave(MOVContext *c, AVIOContext *pb, MOVAtom atom)
R
Roberto Togni 已提交
1279
{
1280 1281 1282 1283 1284
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
R
Roberto Togni 已提交
1285

1286
    if ((uint64_t)atom.size > (1<<30))
1287
        return AVERROR_INVALIDDATA;
1288

1289 1290 1291
    if (st->codec->codec_id == AV_CODEC_ID_QDM2 ||
        st->codec->codec_id == AV_CODEC_ID_QDMC ||
        st->codec->codec_id == AV_CODEC_ID_SPEEX) {
1292
        // pass all frma atom to codec, needed at least for QDMC and QDM2
1293
        av_freep(&st->codec->extradata);
1294
        if (ff_get_extradata(st->codec, pb, atom.size) < 0)
1295
            return AVERROR(ENOMEM);
1296
    } else if (atom.size > 8) { /* to read frma, esds atoms */
1297 1298 1299
        int ret;
        if ((ret = mov_read_default(c, pb, atom)) < 0)
            return ret;
1300
    } else
1301
        avio_skip(pb, atom.size);
R
Roberto Togni 已提交
1302 1303 1304
    return 0;
}

1305 1306 1307 1308
/**
 * This function reads atom content and puts data in extradata without tag
 * nor size unlike mov_read_extradata.
 */
1309
static int mov_read_glbl(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1310
{
1311 1312 1313 1314 1315
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
1316

1317
    if ((uint64_t)atom.size > (1<<30))
1318
        return AVERROR_INVALIDDATA;
1319

1320
    if (atom.size >= 10) {
1321
        // Broken files created by legacy versions of libavformat will
1322 1323 1324 1325 1326 1327 1328
        // wrap a whole fiel atom inside of a glbl atom.
        unsigned size = avio_rb32(pb);
        unsigned type = avio_rl32(pb);
        avio_seek(pb, -8, SEEK_CUR);
        if (type == MKTAG('f','i','e','l') && size == atom.size)
            return mov_read_default(c, pb, atom);
    }
1329 1330 1331 1332
    if (st->codec->extradata_size > 1 && st->codec->extradata) {
        av_log(c, AV_LOG_WARNING, "ignoring multiple glbl\n");
        return 0;
    }
1333
    av_freep(&st->codec->extradata);
1334
    if (ff_get_extradata(st->codec, pb, atom.size) < 0)
1335
        return AVERROR(ENOMEM);
1336

1337 1338 1339
    return 0;
}

M
Martin Storsjö 已提交
1340 1341 1342 1343
static int mov_read_dvc1(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    uint8_t profile_level;
1344
    int ret;
M
Martin Storsjö 已提交
1345 1346 1347 1348 1349 1350 1351 1352 1353

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    if (atom.size >= (1<<28) || atom.size < 7)
        return AVERROR_INVALIDDATA;

    profile_level = avio_r8(pb);
1354
    if ((profile_level & 0xf0) != 0xc0)
M
Martin Storsjö 已提交
1355 1356 1357
        return 0;

    avio_seek(pb, 6, SEEK_CUR);
1358
    av_freep(&st->codec->extradata);
1359 1360
    if ((ret = ff_get_extradata(st->codec, pb, atom.size - 7)) < 0)
        return ret;
1361

M
Martin Storsjö 已提交
1362 1363 1364
    return 0;
}

M
Martin Storsjö 已提交
1365 1366 1367 1368 1369
/**
 * An strf atom is a BITMAPINFOHEADER struct. This struct is 40 bytes itself,
 * but can have extradata appended at the end after the 40 bytes belonging
 * to the struct.
 */
1370
static int mov_read_strf(MOVContext *c, AVIOContext *pb, MOVAtom atom)
M
Martin Storsjö 已提交
1371 1372 1373 1374 1375 1376 1377 1378 1379
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    if (atom.size <= 40)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

1380
    if ((uint64_t)atom.size > (1<<30))
1381
        return AVERROR_INVALIDDATA;
M
Martin Storsjö 已提交
1382

1383
    avio_skip(pb, 40);
1384
    av_freep(&st->codec->extradata);
1385
    if (ff_get_extradata(st->codec, pb, atom.size - 40) < 0)
M
Martin Storsjö 已提交
1386 1387 1388 1389
        return AVERROR(ENOMEM);
    return 0;
}

1390
static int mov_read_stco(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1391
{
1392 1393
    AVStream *st;
    MOVStreamContext *sc;
1394
    unsigned int i, entries;
1395

1396 1397 1398 1399 1400
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1401 1402
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1403

1404
    entries = avio_rb32(pb);
1405

A
Alex Converse 已提交
1406 1407
    if (!entries)
        return 0;
1408

1409
    if (sc->chunk_offsets)
1410
        av_log(c->fc, AV_LOG_WARNING, "Duplicated STCO atom\n");
1411 1412
    av_free(sc->chunk_offsets);
    sc->chunk_count = 0;
1413
    sc->chunk_offsets = av_malloc_array(entries, sizeof(*sc->chunk_offsets));
1414
    if (!sc->chunk_offsets)
1415 1416 1417
        return AVERROR(ENOMEM);
    sc->chunk_count = entries;

1418
    if      (atom.type == MKTAG('s','t','c','o'))
1419
        for (i = 0; i < entries && !pb->eof_reached; i++)
1420
            sc->chunk_offsets[i] = avio_rb32(pb);
1421
    else if (atom.type == MKTAG('c','o','6','4'))
1422
        for (i = 0; i < entries && !pb->eof_reached; i++)
1423
            sc->chunk_offsets[i] = avio_rb64(pb);
1424
    else
1425
        return AVERROR_INVALIDDATA;
1426

1427 1428 1429 1430 1431
    sc->chunk_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1432 1433 1434
    return 0;
}

1435 1436 1437 1438
/**
 * Compute codec id for 'lpcm' tag.
 * See CoreAudioTypes and AudioStreamBasicDescription at Apple.
 */
1439
enum AVCodecID ff_mov_get_lpcm_codec_id(int bps, int flags)
1440
{
1441 1442 1443 1444 1445 1446
    /* lpcm flags:
     * 0x1 = float
     * 0x2 = big-endian
     * 0x4 = signed
     */
    return ff_get_pcm_codec_id(bps, flags & 1, flags & 2, flags & 4 ? -1 : 0);
1447 1448
}

1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467
static int mov_codec_id(AVStream *st, uint32_t format)
{
    int id = ff_codec_get_id(ff_codec_movaudio_tags, format);

    if (id <= 0 &&
        ((format & 0xFFFF) == 'm' + ('s' << 8) ||
         (format & 0xFFFF) == 'T' + ('S' << 8)))
        id = ff_codec_get_id(ff_codec_wav_tags, av_bswap32(format) & 0xFFFF);

    if (st->codec->codec_type != AVMEDIA_TYPE_VIDEO && id > 0) {
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
    } else if (st->codec->codec_type != AVMEDIA_TYPE_AUDIO &&
               /* skip old asf mpeg4 tag */
               format && format != MKTAG('m','p','4','s')) {
        id = ff_codec_get_id(ff_codec_movvideo_tags, format);
        if (id <= 0)
            id = ff_codec_get_id(ff_codec_bmp_tags, format);
        if (id > 0)
            st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
1468 1469 1470
        else if (st->codec->codec_type == AVMEDIA_TYPE_DATA ||
                    (st->codec->codec_type == AVMEDIA_TYPE_SUBTITLE &&
                    st->codec->codec_id == AV_CODEC_ID_NONE)) {
1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481
            id = ff_codec_get_id(ff_codec_movsubtitle_tags, format);
            if (id > 0)
                st->codec->codec_type = AVMEDIA_TYPE_SUBTITLE;
        }
    }

    st->codec->codec_tag = format;

    return id;
}

1482 1483 1484
static void mov_parse_stsd_video(MOVContext *c, AVIOContext *pb,
                                 AVStream *st, MOVStreamContext *sc)
{
1485
    uint8_t codec_name[32];
1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506
    unsigned int color_depth, len, j;
    int color_greyscale;
    int color_table_id;

    avio_rb16(pb); /* version */
    avio_rb16(pb); /* revision level */
    avio_rb32(pb); /* vendor */
    avio_rb32(pb); /* temporal quality */
    avio_rb32(pb); /* spatial quality */

    st->codec->width  = avio_rb16(pb); /* width */
    st->codec->height = avio_rb16(pb); /* height */

    avio_rb32(pb); /* horiz resolution */
    avio_rb32(pb); /* vert resolution */
    avio_rb32(pb); /* data size, always 0 */
    avio_rb16(pb); /* frames per samples */

    len = avio_r8(pb); /* codec name, pascal string */
    if (len > 31)
        len = 31;
1507
    mov_read_mac_string(c, pb, len, codec_name, sizeof(codec_name));
1508 1509
    if (len < 31)
        avio_skip(pb, 31 - len);
1510 1511 1512 1513

    if (codec_name[0])
        av_dict_set(&st->metadata, "encoder", codec_name, 0);

1514
    /* codec_tag YV12 triggers an UV swap in rawdec.c */
1515
    if (!memcmp(codec_name, "Planar Y'CbCr 8-bit 4:2:0", 25)) {
1516
        st->codec->codec_tag = MKTAG('I', '4', '2', '0');
1517 1518 1519
        st->codec->width &= ~1;
        st->codec->height &= ~1;
    }
1520 1521
    /* Flash Media Server uses tag H263 with Sorenson Spark */
    if (st->codec->codec_tag == MKTAG('H','2','6','3') &&
1522
        !memcmp(codec_name, "Sorenson H263", 13))
1523 1524 1525 1526
        st->codec->codec_id = AV_CODEC_ID_FLV1;

    st->codec->bits_per_coded_sample = avio_rb16(pb); /* depth */
    color_table_id = avio_rb16(pb); /* colortable id */
1527
    av_log(c->fc, AV_LOG_TRACE, "depth %d, ctab id %d\n",
1528 1529 1530 1531
            st->codec->bits_per_coded_sample, color_table_id);
    /* figure out the palette situation */
    color_depth     = st->codec->bits_per_coded_sample & 0x1F;
    color_greyscale = st->codec->bits_per_coded_sample & 0x20;
1532 1533 1534
    /* Do not create a greyscale palette for cinepak */
    if (color_greyscale && st->codec->codec_id == AV_CODEC_ID_CINEPAK)
        return;
1535 1536 1537 1538 1539

    /* if the depth is 2, 4, or 8 bpp, file is palettized */
    if ((color_depth == 2) || (color_depth == 4) || (color_depth == 8)) {
        /* for palette traversal */
        unsigned int color_start, color_count, color_end;
1540
        unsigned char a, r, g, b;
1541 1542 1543 1544

        if (color_greyscale) {
            int color_index, color_dec;
            /* compute the greyscale palette */
1545
            st->codec->bits_per_coded_sample = color_depth;
1546 1547 1548 1549 1550
            color_count = 1 << color_depth;
            color_index = 255;
            color_dec   = 256 / (color_count - 1);
            for (j = 0; j < color_count; j++) {
                r = g = b = color_index;
1551
                sc->palette[j] = (0xFFU << 24) | (r << 16) | (g << 8) | (b);
1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570
                color_index -= color_dec;
                if (color_index < 0)
                    color_index = 0;
            }
        } else if (color_table_id) {
            const uint8_t *color_table;
            /* if flag bit 3 is set, use the default palette */
            color_count = 1 << color_depth;
            if (color_depth == 2)
                color_table = ff_qt_default_palette_4;
            else if (color_depth == 4)
                color_table = ff_qt_default_palette_16;
            else
                color_table = ff_qt_default_palette_256;

            for (j = 0; j < color_count; j++) {
                r = color_table[j * 3 + 0];
                g = color_table[j * 3 + 1];
                b = color_table[j * 3 + 2];
1571
                sc->palette[j] = (0xFFU << 24) | (r << 16) | (g << 8) | (b);
1572 1573 1574 1575 1576 1577 1578 1579
            }
        } else {
            /* load the palette from the file */
            color_start = avio_rb32(pb);
            color_count = avio_rb16(pb);
            color_end   = avio_rb16(pb);
            if ((color_start <= 255) && (color_end <= 255)) {
                for (j = color_start; j <= color_end; j++) {
1580 1581 1582
                    /* each A, R, G, or B component is 16 bits;
                        * only use the top 8 bits */
                    a = avio_r8(pb);
1583 1584 1585 1586 1587 1588 1589
                    avio_r8(pb);
                    r = avio_r8(pb);
                    avio_r8(pb);
                    g = avio_r8(pb);
                    avio_r8(pb);
                    b = avio_r8(pb);
                    avio_r8(pb);
1590
                    sc->palette[j] = (a << 24 ) | (r << 16) | (g << 8) | (b);
1591 1592 1593 1594 1595 1596 1597
                }
            }
        }
        sc->has_palette = 1;
    }
}

1598 1599 1600 1601 1602
static void mov_parse_stsd_audio(MOVContext *c, AVIOContext *pb,
                                 AVStream *st, MOVStreamContext *sc)
{
    int bits_per_sample, flags;
    uint16_t version = avio_rb16(pb);
1603
    AVDictionaryEntry *compatible_brands = av_dict_get(c->fc->metadata, "compatible_brands", NULL, AV_DICT_MATCH_CASE);
1604 1605 1606 1607 1608 1609

    avio_rb16(pb); /* revision level */
    avio_rb32(pb); /* vendor */

    st->codec->channels              = avio_rb16(pb); /* channel count */
    st->codec->bits_per_coded_sample = avio_rb16(pb); /* sample size */
1610
    av_log(c->fc, AV_LOG_TRACE, "audio channels %d\n", st->codec->channels);
1611 1612 1613 1614 1615 1616 1617

    sc->audio_cid = avio_rb16(pb);
    avio_rb16(pb); /* packet size = 0 */

    st->codec->sample_rate = ((avio_rb32(pb) >> 16));

    // Read QT version 1 fields. In version 0 these do not exist.
1618
    av_log(c->fc, AV_LOG_TRACE, "version =%d, isom =%d\n", version, c->isom);
1619 1620 1621
    if (!c->isom ||
        (compatible_brands && strstr(compatible_brands->value, "qt  "))) {

1622 1623 1624 1625 1626 1627 1628 1629 1630 1631 1632 1633 1634 1635 1636 1637 1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657
        if (version == 1) {
            sc->samples_per_frame = avio_rb32(pb);
            avio_rb32(pb); /* bytes per packet */
            sc->bytes_per_frame = avio_rb32(pb);
            avio_rb32(pb); /* bytes per sample */
        } else if (version == 2) {
            avio_rb32(pb); /* sizeof struct only */
            st->codec->sample_rate = av_int2double(avio_rb64(pb));
            st->codec->channels    = avio_rb32(pb);
            avio_rb32(pb); /* always 0x7F000000 */
            st->codec->bits_per_coded_sample = avio_rb32(pb);

            flags = avio_rb32(pb); /* lpcm format specific flag */
            sc->bytes_per_frame   = avio_rb32(pb);
            sc->samples_per_frame = avio_rb32(pb);
            if (st->codec->codec_tag == MKTAG('l','p','c','m'))
                st->codec->codec_id =
                    ff_mov_get_lpcm_codec_id(st->codec->bits_per_coded_sample,
                                             flags);
        }
    }

    switch (st->codec->codec_id) {
    case AV_CODEC_ID_PCM_S8:
    case AV_CODEC_ID_PCM_U8:
        if (st->codec->bits_per_coded_sample == 16)
            st->codec->codec_id = AV_CODEC_ID_PCM_S16BE;
        break;
    case AV_CODEC_ID_PCM_S16LE:
    case AV_CODEC_ID_PCM_S16BE:
        if (st->codec->bits_per_coded_sample == 8)
            st->codec->codec_id = AV_CODEC_ID_PCM_S8;
        else if (st->codec->bits_per_coded_sample == 24)
            st->codec->codec_id =
                st->codec->codec_id == AV_CODEC_ID_PCM_S16BE ?
                AV_CODEC_ID_PCM_S24BE : AV_CODEC_ID_PCM_S24LE;
1658 1659 1660 1661
        else if (st->codec->bits_per_coded_sample == 32)
             st->codec->codec_id =
                st->codec->codec_id == AV_CODEC_ID_PCM_S16BE ?
                AV_CODEC_ID_PCM_S32BE : AV_CODEC_ID_PCM_S32LE;
1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672 1673 1674 1675 1676 1677 1678 1679 1680 1681 1682 1683 1684 1685 1686 1687 1688 1689 1690
        break;
    /* set values for old format before stsd version 1 appeared */
    case AV_CODEC_ID_MACE3:
        sc->samples_per_frame = 6;
        sc->bytes_per_frame   = 2 * st->codec->channels;
        break;
    case AV_CODEC_ID_MACE6:
        sc->samples_per_frame = 6;
        sc->bytes_per_frame   = 1 * st->codec->channels;
        break;
    case AV_CODEC_ID_ADPCM_IMA_QT:
        sc->samples_per_frame = 64;
        sc->bytes_per_frame   = 34 * st->codec->channels;
        break;
    case AV_CODEC_ID_GSM:
        sc->samples_per_frame = 160;
        sc->bytes_per_frame   = 33;
        break;
    default:
        break;
    }

    bits_per_sample = av_get_bits_per_sample(st->codec->codec_id);
    if (bits_per_sample) {
        st->codec->bits_per_coded_sample = bits_per_sample;
        sc->sample_size = (bits_per_sample >> 3) * st->codec->channels;
    }
}

1691 1692
static void mov_parse_stsd_subtitle(MOVContext *c, AVIOContext *pb,
                                    AVStream *st, MOVStreamContext *sc,
1693
                                    int64_t size)
1694 1695 1696 1697 1698 1699 1700 1701 1702 1703 1704
{
    // ttxt stsd contains display flags, justification, background
    // color, fonts, and default styles, so fake an atom to read it
    MOVAtom fake_atom = { .size = size };
    // mp4s contains a regular esds atom
    if (st->codec->codec_tag != AV_RL32("mp4s"))
        mov_read_glbl(c, pb, fake_atom);
    st->codec->width  = sc->width;
    st->codec->height = sc->height;
}

1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738
static uint32_t yuv_to_rgba(uint32_t ycbcr)
{
    uint8_t r, g, b;
    int y, cb, cr;

    y  = (ycbcr >> 16) & 0xFF;
    cr = (ycbcr >> 8)  & 0xFF;
    cb =  ycbcr        & 0xFF;

    b = av_clip_uint8(1.164 * (y - 16)                      + 2.018 * (cb - 128));
    g = av_clip_uint8(1.164 * (y - 16) - 0.813 * (cr - 128) - 0.391 * (cb - 128));
    r = av_clip_uint8(1.164 * (y - 16) + 1.596 * (cr - 128));

    return (r << 16) | (g << 8) | b;
}

static int mov_rewrite_dvd_sub_extradata(AVStream *st)
{
    char buf[256] = {0};
    uint8_t *src = st->codec->extradata;
    int i;

    if (st->codec->extradata_size != 64)
        return 0;

    if (st->codec->width > 0 &&  st->codec->height > 0)
        snprintf(buf, sizeof(buf), "size: %dx%d\n",
                 st->codec->width, st->codec->height);
    av_strlcat(buf, "palette: ", sizeof(buf));

    for (i = 0; i < 16; i++) {
        uint32_t yuv = AV_RB32(src + i * 4);
        uint32_t rgba = yuv_to_rgba(yuv);

1739
        av_strlcatf(buf, sizeof(buf), "%06"PRIx32"%s", rgba, i != 15 ? ", " : "");
1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755
    }

    if (av_strlcat(buf, "\n", sizeof(buf)) >= sizeof(buf))
        return 0;

    av_freep(&st->codec->extradata);
    st->codec->extradata_size = 0;
    st->codec->extradata = av_mallocz(strlen(buf) + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = strlen(buf);
    memcpy(st->codec->extradata, buf, st->codec->extradata_size);

    return 0;
}

L
Luca Barbato 已提交
1756 1757
static int mov_parse_stsd_data(MOVContext *c, AVIOContext *pb,
                                AVStream *st, MOVStreamContext *sc,
1758
                                int64_t size)
L
Luca Barbato 已提交
1759 1760
{
    if (st->codec->codec_tag == MKTAG('t','m','c','d')) {
1761
        if ((int)size != size || ff_get_extradata(st->codec, pb, size) < 0)
L
Luca Barbato 已提交
1762
            return AVERROR(ENOMEM);
1763 1764 1765 1766 1767 1768 1769 1770 1771
        if (size > 16) {
            MOVStreamContext *tmcd_ctx = st->priv_data;
            int val;
            val = AV_RB32(st->codec->extradata + 4);
            tmcd_ctx->tmcd_flags = val;
            if (val & 1)
                st->codec->flags2 |= CODEC_FLAG2_DROP_FRAME_TIMECODE;
            st->codec->time_base.den = st->codec->extradata[16]; /* number of frame */
            st->codec->time_base.num = 1;
1772 1773 1774 1775 1776 1777 1778
            /* adjust for per frame dur in counter mode */
            if (tmcd_ctx->tmcd_flags & 0x0008) {
                int timescale = AV_RB32(st->codec->extradata + 8);
                int framedur = AV_RB32(st->codec->extradata + 12);
                st->codec->time_base.den *= timescale;
                st->codec->time_base.num *= framedur;
            }
1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793 1794 1795 1796 1797 1798
            if (size > 30) {
                uint32_t len = AV_RB32(st->codec->extradata + 18); /* name atom length */
                uint32_t format = AV_RB32(st->codec->extradata + 22);
                if (format == AV_RB32("name") && (int64_t)size >= (int64_t)len + 18) {
                    uint16_t str_size = AV_RB16(st->codec->extradata + 26); /* string length */
                    if (str_size > 0 && size >= (int)str_size + 26) {
                        char *reel_name = av_malloc(str_size + 1);
                        if (!reel_name)
                            return AVERROR(ENOMEM);
                        memcpy(reel_name, st->codec->extradata + 30, str_size);
                        reel_name[str_size] = 0; /* Add null terminator */
                        /* don't add reel_name if emtpy string */
                        if (*reel_name == 0) {
                            av_free(reel_name);
                        } else {
                            av_dict_set(&st->metadata, "reel_name", reel_name,  AV_DICT_DONT_STRDUP_VAL);
                        }
                    }
                }
            }
1799
        }
L
Luca Barbato 已提交
1800 1801 1802 1803 1804 1805 1806
    } else {
        /* other codec type, just skip (rtp, mp4s ...) */
        avio_skip(pb, size);
    }
    return 0;
}

1807 1808 1809 1810 1811 1812 1813 1814 1815 1816 1817 1818 1819 1820 1821 1822 1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833
static int mov_finalize_stsd_codec(MOVContext *c, AVIOContext *pb,
                                   AVStream *st, MOVStreamContext *sc)
{
    if (st->codec->codec_type == AVMEDIA_TYPE_AUDIO &&
        !st->codec->sample_rate && sc->time_scale > 1)
        st->codec->sample_rate = sc->time_scale;

    /* special codec parameters handling */
    switch (st->codec->codec_id) {
#if CONFIG_DV_DEMUXER
    case AV_CODEC_ID_DVAUDIO:
        c->dv_fctx  = avformat_alloc_context();
        c->dv_demux = avpriv_dv_init_demux(c->dv_fctx);
        if (!c->dv_demux) {
            av_log(c->fc, AV_LOG_ERROR, "dv demux context init error\n");
            return AVERROR(ENOMEM);
        }
        sc->dv_audio_container = 1;
        st->codec->codec_id    = AV_CODEC_ID_PCM_S16LE;
        break;
#endif
    /* no ifdef since parameters are always those */
    case AV_CODEC_ID_QCELP:
        st->codec->channels = 1;
        // force sample rate for qcelp when not stored in mov
        if (st->codec->codec_tag != MKTAG('Q','c','l','p'))
            st->codec->sample_rate = 8000;
1834 1835 1836 1837
        // FIXME: Why is the following needed for some files?
        sc->samples_per_frame = 160;
        if (!sc->bytes_per_frame)
            sc->bytes_per_frame = 35;
1838 1839 1840 1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857
        break;
    case AV_CODEC_ID_AMR_NB:
        st->codec->channels    = 1;
        /* force sample rate for amr, stsd in 3gp does not store sample rate */
        st->codec->sample_rate = 8000;
        break;
    case AV_CODEC_ID_AMR_WB:
        st->codec->channels    = 1;
        st->codec->sample_rate = 16000;
        break;
    case AV_CODEC_ID_MP2:
    case AV_CODEC_ID_MP3:
        /* force type after stsd for m1a hdlr */
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
        st->need_parsing      = AVSTREAM_PARSE_FULL;
        break;
    case AV_CODEC_ID_GSM:
    case AV_CODEC_ID_ADPCM_MS:
    case AV_CODEC_ID_ADPCM_IMA_WAV:
    case AV_CODEC_ID_ILBC:
1858 1859 1860
    case AV_CODEC_ID_MACE3:
    case AV_CODEC_ID_MACE6:
    case AV_CODEC_ID_QDM2:
1861 1862 1863 1864 1865 1866 1867 1868
        st->codec->block_align = sc->bytes_per_frame;
        break;
    case AV_CODEC_ID_ALAC:
        if (st->codec->extradata_size == 36) {
            st->codec->channels    = AV_RB8 (st->codec->extradata + 21);
            st->codec->sample_rate = AV_RB32(st->codec->extradata + 32);
        }
        break;
1869
    case AV_CODEC_ID_AC3:
1870
    case AV_CODEC_ID_EAC3:
1871
    case AV_CODEC_ID_MPEG1VIDEO:
1872 1873 1874 1875 1876 1877 1878 1879 1880
    case AV_CODEC_ID_VC1:
        st->need_parsing = AVSTREAM_PARSE_FULL;
        break;
    default:
        break;
    }
    return 0;
}

1881 1882
static int mov_skip_multiple_stsd(MOVContext *c, AVIOContext *pb,
                                  int codec_tag, int format,
1883
                                  int64_t size)
1884 1885 1886 1887 1888 1889
{
    int video_codec_id = ff_codec_get_id(ff_codec_movvideo_tags, format);

    if (codec_tag &&
         (codec_tag != format &&
          (c->fc->video_codec_id ? video_codec_id != c->fc->video_codec_id
1890
                                 : codec_tag != MKTAG('j','p','e','g')))) {
1891 1892 1893 1894 1895 1896 1897 1898
        /* Multiple fourcc, we skip JPEG. This is not correct, we should
         * export it as a separate AVStream but this needs a few changes
         * in the MOV demuxer, patch welcome. */

        av_log(c->fc, AV_LOG_WARNING, "multiple fourcc not supported\n");
        avio_skip(pb, size);
        return 1;
    }
Y
Yusuke Nakamura 已提交
1899 1900 1901 1902
    if ( codec_tag == AV_RL32("avc1") ||
         codec_tag == AV_RL32("hvc1") ||
         codec_tag == AV_RL32("hev1")
    )
1903
        av_log(c->fc, AV_LOG_WARNING, "Concatenated H.264 or H.265 might not play correctly.\n");
1904 1905 1906 1907

    return 0;
}

1908
int ff_mov_read_stsd_entries(MOVContext *c, AVIOContext *pb, int entries)
1909
{
1910 1911
    AVStream *st;
    MOVStreamContext *sc;
1912
    int pseudo_stream_id;
1913

1914 1915 1916 1917 1918
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1919 1920 1921
    for (pseudo_stream_id = 0;
         pseudo_stream_id < entries && !pb->eof_reached;
         pseudo_stream_id++) {
1922
        //Parsing Sample description table
1923
        enum AVCodecID id;
L
Luca Barbato 已提交
1924
        int ret, dref_id = 1;
1925
        MOVAtom a = { AV_RL32("stsd") };
1926
        int64_t start_pos = avio_tell(pb);
1927
        int64_t size = avio_rb32(pb); /* size */
1928
        uint32_t format = avio_rl32(pb); /* data format */
1929

1930
        if (size >= 16) {
1931 1932 1933
            avio_rb32(pb); /* reserved */
            avio_rb16(pb); /* reserved */
            dref_id = avio_rb16(pb);
1934
        }else if (size <= 7){
M
Michael Niedermayer 已提交
1935
            av_log(c->fc, AV_LOG_ERROR, "invalid size %"PRId64" in stsd\n", size);
1936
            return AVERROR_INVALIDDATA;
1937
        }
1938

1939 1940
        if (mov_skip_multiple_stsd(c, pb, st->codec->codec_tag, format,
                                   size - (avio_tell(pb) - start_pos)))
1941
            continue;
1942

1943
        sc->pseudo_stream_id = st->codec->codec_tag ? -1 : pseudo_stream_id;
1944
        sc->dref_id= dref_id;
1945

1946
        id = mov_codec_id(st, format);
1947

1948
        av_log(c->fc, AV_LOG_TRACE, "size=%"PRId64" 4CC= %c%c%c%c codec_type=%d\n", size,
1949 1950
                (format >> 0) & 0xff, (format >> 8) & 0xff, (format >> 16) & 0xff,
                (format >> 24) & 0xff, st->codec->codec_type);
1951

1952
        if (st->codec->codec_type==AVMEDIA_TYPE_VIDEO) {
1953
            st->codec->codec_id = id;
1954
            mov_parse_stsd_video(c, pb, st, sc);
1955
        } else if (st->codec->codec_type==AVMEDIA_TYPE_AUDIO) {
1956
            st->codec->codec_id = id;
1957
            mov_parse_stsd_audio(c, pb, st, sc);
1958
        } else if (st->codec->codec_type==AVMEDIA_TYPE_SUBTITLE){
1959 1960 1961
            st->codec->codec_id = id;
            mov_parse_stsd_subtitle(c, pb, st, sc,
                                    size - (avio_tell(pb) - start_pos));
1962
        } else {
L
Luca Barbato 已提交
1963 1964 1965 1966
            ret = mov_parse_stsd_data(c, pb, st, sc,
                                      size - (avio_tell(pb) - start_pos));
            if (ret < 0)
                return ret;
1967
        }
Y
Yusuke Nakamura 已提交
1968
        /* this will read extra atoms at the end (wave, alac, damr, avcC, hvcC, SMI ...) */
1969
        a.size = size - (avio_tell(pb) - start_pos);
1970
        if (a.size > 8) {
1971 1972
            if ((ret = mov_read_default(c, pb, a)) < 0)
                return ret;
1973
        } else if (a.size > 0)
1974
            avio_skip(pb, a.size);
1975
    }
1976

1977 1978 1979
    if (pb->eof_reached)
        return AVERROR_EOF;

1980
    return mov_finalize_stsd_codec(c, pb, st, sc);
1981 1982
}

1983
static int mov_read_stsd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1984 1985 1986
{
    int entries;

1987 1988 1989
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1990 1991 1992 1993

    return ff_mov_read_stsd_entries(c, pb, entries);
}

1994
static int mov_read_stsc(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1995
{
1996 1997
    AVStream *st;
    MOVStreamContext *sc;
1998
    unsigned int i, entries;
1999

2000 2001 2002 2003 2004
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

2005 2006
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
2007

2008
    entries = avio_rb32(pb);
2009

2010
    av_log(c->fc, AV_LOG_TRACE, "track[%i].stsc.entries = %i\n", c->fc->nb_streams-1, entries);
2011

A
Alex Converse 已提交
2012 2013
    if (!entries)
        return 0;
2014
    if (sc->stsc_data)
2015
        av_log(c->fc, AV_LOG_WARNING, "Duplicated STSC atom\n");
2016 2017
    av_free(sc->stsc_data);
    sc->stsc_count = 0;
2018
    sc->stsc_data = av_malloc_array(entries, sizeof(*sc->stsc_data));
2019
    if (!sc->stsc_data)
2020 2021
        return AVERROR(ENOMEM);

2022
    for (i = 0; i < entries && !pb->eof_reached; i++) {
2023 2024 2025
        sc->stsc_data[i].first = avio_rb32(pb);
        sc->stsc_data[i].count = avio_rb32(pb);
        sc->stsc_data[i].id = avio_rb32(pb);
2026
    }
2027 2028 2029 2030 2031 2032

    sc->stsc_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

2033 2034 2035
    return 0;
}

2036
static int mov_read_stps(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2037 2038 2039 2040 2041 2042 2043 2044 2045 2046
{
    AVStream *st;
    MOVStreamContext *sc;
    unsigned i, entries;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

2047
    avio_rb32(pb); // version + flags
2048

2049
    entries = avio_rb32(pb);
2050
    if (sc->stps_data)
2051
        av_log(c->fc, AV_LOG_WARNING, "Duplicated STPS atom\n");
2052 2053 2054
    av_free(sc->stps_data);
    sc->stps_count = 0;
    sc->stps_data = av_malloc_array(entries, sizeof(*sc->stps_data));
2055 2056 2057
    if (!sc->stps_data)
        return AVERROR(ENOMEM);

2058
    for (i = 0; i < entries && !pb->eof_reached; i++) {
2059
        sc->stps_data[i] = avio_rb32(pb);
2060
        //av_log(c->fc, AV_LOG_TRACE, "stps %d\n", sc->stps_data[i]);
2061 2062
    }

2063 2064 2065 2066 2067
    sc->stps_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

2068 2069 2070
    return 0;
}

2071
static int mov_read_stss(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2072
{
2073 2074
    AVStream *st;
    MOVStreamContext *sc;
2075
    unsigned int i, entries;
2076

2077 2078 2079 2080 2081
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

2082 2083
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
2084

2085
    entries = avio_rb32(pb);
2086

2087
    av_log(c->fc, AV_LOG_TRACE, "keyframe_count = %d\n", entries);
2088

2089
    if (!entries)
2090 2091
    {
        sc->keyframe_absent = 1;
2092
        if (!st->need_parsing && st->codec->codec_type == AVMEDIA_TYPE_VIDEO)
2093
            st->need_parsing = AVSTREAM_PARSE_HEADERS;
2094
        return 0;
2095
    }
2096
    if (sc->keyframes)
2097
        av_log(c->fc, AV_LOG_WARNING, "Duplicated STSS atom\n");
2098
    if (entries >= UINT_MAX / sizeof(int))
2099
        return AVERROR_INVALIDDATA;
2100
    av_freep(&sc->keyframes);
2101 2102
    sc->keyframe_count = 0;
    sc->keyframes = av_malloc_array(entries, sizeof(*sc->keyframes));
2103
    if (!sc->keyframes)
2104 2105
        return AVERROR(ENOMEM);

2106
    for (i = 0; i < entries && !pb->eof_reached; i++) {
2107
        sc->keyframes[i] = avio_rb32(pb);
2108
        //av_log(c->fc, AV_LOG_TRACE, "keyframes[]=%d\n", sc->keyframes[i]);
2109
    }
2110 2111 2112 2113 2114 2115

    sc->keyframe_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

2116 2117 2118
    return 0;
}

2119
static int mov_read_stsz(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2120
{
2121 2122
    AVStream *st;
    MOVStreamContext *sc;
2123 2124 2125
    unsigned int i, entries, sample_size, field_size, num_bytes;
    GetBitContext gb;
    unsigned char* buf;
2126

2127 2128 2129 2130 2131
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

2132 2133
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
2134

2135
    if (atom.type == MKTAG('s','t','s','z')) {
2136
        sample_size = avio_rb32(pb);
2137 2138
        if (!sc->sample_size) /* do not overwrite value computed in stsd */
            sc->sample_size = sample_size;
2139
        sc->stsz_sample_size = sample_size;
2140
        field_size = 32;
2141 2142
    } else {
        sample_size = 0;
2143 2144
        avio_rb24(pb); /* reserved */
        field_size = avio_r8(pb);
2145
    }
2146
    entries = avio_rb32(pb);
2147

2148
    av_log(c->fc, AV_LOG_TRACE, "sample_size = %d sample_count = %d\n", sc->sample_size, entries);
2149

2150
    sc->sample_count = entries;
2151 2152 2153
    if (sample_size)
        return 0;

2154 2155
    if (field_size != 4 && field_size != 8 && field_size != 16 && field_size != 32) {
        av_log(c->fc, AV_LOG_ERROR, "Invalid sample field size %d\n", field_size);
2156
        return AVERROR_INVALIDDATA;
2157 2158
    }

A
Alex Converse 已提交
2159 2160
    if (!entries)
        return 0;
2161
    if (entries >= (UINT_MAX - 4) / field_size)
2162
        return AVERROR_INVALIDDATA;
2163
    if (sc->sample_sizes)
2164
        av_log(c->fc, AV_LOG_WARNING, "Duplicated STSZ atom\n");
2165 2166 2167
    av_free(sc->sample_sizes);
    sc->sample_count = 0;
    sc->sample_sizes = av_malloc_array(entries, sizeof(*sc->sample_sizes));
2168
    if (!sc->sample_sizes)
2169 2170
        return AVERROR(ENOMEM);

2171 2172
    num_bytes = (entries*field_size+4)>>3;

2173
    buf = av_malloc(num_bytes+FF_INPUT_BUFFER_PADDING_SIZE);
2174 2175 2176 2177 2178
    if (!buf) {
        av_freep(&sc->sample_sizes);
        return AVERROR(ENOMEM);
    }

2179
    if (avio_read(pb, buf, num_bytes) < num_bytes) {
2180 2181
        av_freep(&sc->sample_sizes);
        av_free(buf);
2182
        return AVERROR_INVALIDDATA;
2183 2184 2185 2186
    }

    init_get_bits(&gb, buf, 8*num_bytes);

2187
    for (i = 0; i < entries && !pb->eof_reached; i++) {
2188
        sc->sample_sizes[i] = get_bits_long(&gb, field_size);
2189 2190
        sc->data_size += sc->sample_sizes[i];
    }
2191

2192 2193
    sc->sample_count = i;

A
Andreas Cadhalpun 已提交
2194 2195
    av_free(buf);

2196 2197 2198
    if (pb->eof_reached)
        return AVERROR_EOF;

2199 2200 2201
    return 0;
}

2202
static int mov_read_stts(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2203
{
2204 2205
    AVStream *st;
    MOVStreamContext *sc;
2206
    unsigned int i, entries;
2207 2208
    int64_t duration=0;
    int64_t total_sample_count=0;
2209

2210 2211 2212 2213 2214
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

2215 2216 2217
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
2218

2219
    av_log(c->fc, AV_LOG_TRACE, "track[%i].stts.entries = %i\n",
2220
            c->fc->nb_streams-1, entries);
2221

2222
    if (sc->stts_data)
2223
        av_log(c->fc, AV_LOG_WARNING, "Duplicated STTS atom\n");
2224
    av_free(sc->stts_data);
2225 2226
    sc->stts_count = 0;
    sc->stts_data = av_malloc_array(entries, sizeof(*sc->stts_data));
2227
    if (!sc->stts_data)
2228
        return AVERROR(ENOMEM);
2229

2230
    for (i = 0; i < entries && !pb->eof_reached; i++) {
M
cleanup  
Michael Niedermayer 已提交
2231 2232
        int sample_duration;
        int sample_count;
2233

2234 2235
        sample_count=avio_rb32(pb);
        sample_duration = avio_rb32(pb);
2236

2237 2238
        /* sample_duration < 0 is invalid based on the spec */
        if (sample_duration < 0) {
2239 2240
            av_log(c->fc, AV_LOG_ERROR, "Invalid SampleDelta %d in STTS, at %d st:%d\n",
                   sample_duration, i, c->fc->nb_streams-1);
2241 2242
            sample_duration = 1;
        }
2243 2244 2245 2246
        if (sample_count < 0) {
            av_log(c->fc, AV_LOG_ERROR, "Invalid sample_count=%d\n", sample_count);
            return AVERROR_INVALIDDATA;
        }
2247 2248 2249
        sc->stts_data[i].count= sample_count;
        sc->stts_data[i].duration= sample_duration;

2250
        av_log(c->fc, AV_LOG_TRACE, "sample_count=%d, sample_duration=%d\n",
2251
                sample_count, sample_duration);
2252

2253 2254 2255 2256 2257 2258
        if (   i+1 == entries
            && i
            && sample_count == 1
            && total_sample_count > 100
            && sample_duration/10 > duration / total_sample_count)
            sample_duration = duration / total_sample_count;
B
Baptiste Coudurier 已提交
2259
        duration+=(int64_t)sample_duration*sample_count;
2260 2261 2262
        total_sample_count+=sample_count;
    }

2263 2264
    sc->stts_count = i;

2265 2266 2267
    sc->duration_for_fps  += duration;
    sc->nb_frames_for_fps += total_sample_count;

2268 2269 2270
    if (pb->eof_reached)
        return AVERROR_EOF;

2271
    st->nb_frames= total_sample_count;
2272
    if (duration)
2273
        st->duration= duration;
2274
    sc->track_end = duration;
2275 2276 2277
    return 0;
}

2278 2279 2280 2281 2282 2283 2284
static void mov_update_dts_shift(MOVStreamContext *sc, int duration)
{
    if (duration < 0) {
        sc->dts_shift = FFMAX(sc->dts_shift, -duration);
    }
}

2285
static int mov_read_ctts(MOVContext *c, AVIOContext *pb, MOVAtom atom)
M
Michael Niedermayer 已提交
2286
{
2287 2288
    AVStream *st;
    MOVStreamContext *sc;
M
Michael Niedermayer 已提交
2289 2290
    unsigned int i, entries;

2291 2292 2293 2294 2295
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

2296 2297 2298
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
2299

2300
    av_log(c->fc, AV_LOG_TRACE, "track[%i].ctts.entries = %i\n", c->fc->nb_streams-1, entries);
2301

A
Alex Converse 已提交
2302 2303
    if (!entries)
        return 0;
2304
    if (entries >= UINT_MAX / sizeof(*sc->ctts_data))
2305
        return AVERROR_INVALIDDATA;
A
Andreas Cadhalpun 已提交
2306
    av_freep(&sc->ctts_data);
2307
    sc->ctts_data = av_malloc(entries * sizeof(*sc->ctts_data));
2308
    if (!sc->ctts_data)
2309
        return AVERROR(ENOMEM);
2310

2311
    for (i = 0; i < entries && !pb->eof_reached; i++) {
2312 2313
        int count    =avio_rb32(pb);
        int duration =avio_rb32(pb);
2314 2315 2316

        sc->ctts_data[i].count   = count;
        sc->ctts_data[i].duration= duration;
M
Michael Niedermayer 已提交
2317

2318
        av_log(c->fc, AV_LOG_TRACE, "count=%d, duration=%d\n",
2319 2320
                count, duration);

M
Michael Niedermayer 已提交
2321 2322 2323 2324 2325 2326 2327
        if (FFABS(duration) > (1<<28) && i+2<entries) {
            av_log(c->fc, AV_LOG_WARNING, "CTTS invalid\n");
            av_freep(&sc->ctts_data);
            sc->ctts_count = 0;
            return 0;
        }

2328 2329
        if (i+2<entries)
            mov_update_dts_shift(sc, duration);
M
Michael Niedermayer 已提交
2330
    }
2331

2332 2333 2334 2335 2336
    sc->ctts_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

2337
    av_log(c->fc, AV_LOG_TRACE, "dts shift %d\n", sc->dts_shift);
2338

M
Michael Niedermayer 已提交
2339 2340 2341
    return 0;
}

2342 2343 2344 2345 2346 2347 2348 2349 2350 2351 2352 2353 2354 2355 2356 2357 2358 2359 2360 2361 2362 2363 2364 2365
static int mov_read_sbgp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    MOVStreamContext *sc;
    unsigned int i, entries;
    uint8_t version;
    uint32_t grouping_type;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

    version = avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    grouping_type = avio_rl32(pb);
    if (grouping_type != MKTAG( 'r','a','p',' '))
        return 0; /* only support 'rap ' grouping */
    if (version == 1)
        avio_rb32(pb); /* grouping_type_parameter */

    entries = avio_rb32(pb);
    if (!entries)
        return 0;
2366
    if (sc->rap_group)
2367
        av_log(c->fc, AV_LOG_WARNING, "Duplicated SBGP atom\n");
2368 2369 2370
    av_free(sc->rap_group);
    sc->rap_group_count = 0;
    sc->rap_group = av_malloc_array(entries, sizeof(*sc->rap_group));
2371 2372 2373 2374 2375 2376 2377 2378 2379 2380 2381 2382 2383
    if (!sc->rap_group)
        return AVERROR(ENOMEM);

    for (i = 0; i < entries && !pb->eof_reached; i++) {
        sc->rap_group[i].count = avio_rb32(pb); /* sample_count */
        sc->rap_group[i].index = avio_rb32(pb); /* group_description_index */
    }

    sc->rap_group_count = i;

    return pb->eof_reached ? AVERROR_EOF : 0;
}

2384 2385 2386
static void mov_build_index(MOVContext *mov, AVStream *st)
{
    MOVStreamContext *sc = st->priv_data;
2387
    int64_t current_offset;
2388 2389 2390 2391
    int64_t current_dts = 0;
    unsigned int stts_index = 0;
    unsigned int stsc_index = 0;
    unsigned int stss_index = 0;
2392
    unsigned int stps_index = 0;
2393
    unsigned int i, j;
2394
    uint64_t stream_size = 0;
2395

2396 2397 2398 2399 2400 2401 2402 2403 2404 2405 2406 2407 2408 2409 2410 2411 2412 2413 2414 2415 2416
    if (sc->elst_count) {
        int i, edit_start_index = 0, unsupported = 0;
        int64_t empty_duration = 0; // empty duration of the first edit list entry
        int64_t start_time = 0; // start time of the media

        for (i = 0; i < sc->elst_count; i++) {
            const MOVElst *e = &sc->elst_data[i];
            if (i == 0 && e->time == -1) {
                /* if empty, the first entry is the start time of the stream
                 * relative to the presentation itself */
                empty_duration = e->duration;
                edit_start_index = 1;
            } else if (i == edit_start_index && e->time >= 0) {
                start_time = e->time;
            } else
                unsupported = 1;
        }
        if (unsupported)
            av_log(mov->fc, AV_LOG_WARNING, "multiple edit list entries, "
                   "a/v desync might occur, patch welcome\n");

2417 2418 2419 2420 2421 2422 2423 2424 2425 2426 2427 2428 2429
        /* adjust first dts according to edit list */
        if ((empty_duration || start_time) && mov->time_scale > 0) {
            if (empty_duration)
                empty_duration = av_rescale(empty_duration, sc->time_scale, mov->time_scale);
            sc->time_offset = start_time - empty_duration;
            current_dts = -sc->time_offset;
            if (sc->ctts_count>0 && sc->stts_count>0 &&
                sc->ctts_data[0].duration / FFMAX(sc->stts_data[0].duration, 1) > 16) {
                /* more than 16 frames delay, dts are likely wrong
                   this happens with files created by iMovie */
                sc->wrong_dts = 1;
                st->codec->has_b_frames = 1;
            }
2430
        }
2431 2432
    }

2433
    /* only use old uncompressed audio chunk demuxing when stts specifies it */
2434
    if (!(st->codec->codec_type == AVMEDIA_TYPE_AUDIO &&
2435
          sc->stts_count == 1 && sc->stts_data[0].duration == 1)) {
2436 2437
        unsigned int current_sample = 0;
        unsigned int stts_sample = 0;
2438
        unsigned int sample_size;
2439
        unsigned int distance = 0;
2440 2441 2442
        unsigned int rap_group_index = 0;
        unsigned int rap_group_sample = 0;
        int rap_group_present = sc->rap_group_count && sc->rap_group;
2443
        int key_off = (sc->keyframe_count && sc->keyframes[0] > 0) || (sc->stps_count && sc->stps_data[0] > 0);
2444

2445 2446
        current_dts -= sc->dts_shift;

2447
        if (!sc->sample_count || st->nb_index_entries)
A
Alex Converse 已提交
2448
            return;
2449
        if (sc->sample_count >= UINT_MAX / sizeof(*st->index_entries) - st->nb_index_entries)
2450
            return;
2451 2452 2453 2454
        if (av_reallocp_array(&st->index_entries,
                              st->nb_index_entries + sc->sample_count,
                              sizeof(*st->index_entries)) < 0) {
            st->nb_index_entries = 0;
2455
            return;
2456
        }
2457
        st->index_entries_allocated_size = (st->nb_index_entries + sc->sample_count) * sizeof(*st->index_entries);
2458

2459
        for (i = 0; i < sc->chunk_count; i++) {
2460
            int64_t next_offset = i+1 < sc->chunk_count ? sc->chunk_offsets[i+1] : INT64_MAX;
2461
            current_offset = sc->chunk_offsets[i];
2462
            while (stsc_index + 1 < sc->stsc_count &&
2463
                i + 1 == sc->stsc_data[stsc_index + 1].first)
2464
                stsc_index++;
2465 2466 2467 2468 2469 2470 2471 2472 2473 2474 2475

            if (next_offset > current_offset && sc->sample_size>0 && sc->sample_size < sc->stsz_sample_size &&
                sc->stsc_data[stsc_index].count * (int64_t)sc->stsz_sample_size > next_offset - current_offset) {
                av_log(mov->fc, AV_LOG_WARNING, "STSZ sample size %d invalid (too large), ignoring\n", sc->stsz_sample_size);
                sc->stsz_sample_size = sc->sample_size;
            }
            if (sc->stsz_sample_size>0 && sc->stsz_sample_size < sc->sample_size) {
                av_log(mov->fc, AV_LOG_WARNING, "STSZ sample size %d invalid (too small), ignoring\n", sc->stsz_sample_size);
                sc->stsz_sample_size = sc->sample_size;
            }

2476
            for (j = 0; j < sc->stsc_data[stsc_index].count; j++) {
2477
                int keyframe = 0;
2478 2479
                if (current_sample >= sc->sample_count) {
                    av_log(mov->fc, AV_LOG_ERROR, "wrong sample count\n");
2480
                    return;
2481
                }
2482

2483
                if (!sc->keyframe_absent && (!sc->keyframe_count || current_sample+key_off == sc->keyframes[stss_index])) {
2484
                    keyframe = 1;
2485 2486
                    if (stss_index + 1 < sc->keyframe_count)
                        stss_index++;
2487 2488 2489 2490
                } else if (sc->stps_count && current_sample+key_off == sc->stps_data[stps_index]) {
                    keyframe = 1;
                    if (stps_index + 1 < sc->stps_count)
                        stps_index++;
2491
                }
2492 2493 2494 2495 2496 2497 2498 2499
                if (rap_group_present && rap_group_index < sc->rap_group_count) {
                    if (sc->rap_group[rap_group_index].index > 0)
                        keyframe = 1;
                    if (++rap_group_sample == sc->rap_group[rap_group_index].count) {
                        rap_group_sample = 0;
                        rap_group_index++;
                    }
                }
2500 2501 2502
                if (sc->keyframe_absent
                    && !sc->stps_count
                    && !rap_group_present
2503
                    && (st->codec->codec_type == AVMEDIA_TYPE_AUDIO || (i==0 && j==0)))
2504
                     keyframe = 1;
2505 2506
                if (keyframe)
                    distance = 0;
2507
                sample_size = sc->stsz_sample_size > 0 ? sc->stsz_sample_size : sc->sample_sizes[current_sample];
2508
                if (sc->pseudo_stream_id == -1 ||
2509
                   sc->stsc_data[stsc_index].id - 1 == sc->pseudo_stream_id) {
2510 2511
                    AVIndexEntry *e = &st->index_entries[st->nb_index_entries++];
                    e->pos = current_offset;
2512
                    e->timestamp = current_dts;
2513 2514 2515
                    e->size = sample_size;
                    e->min_distance = distance;
                    e->flags = keyframe ? AVINDEX_KEYFRAME : 0;
2516
                    av_log(mov->fc, AV_LOG_TRACE, "AVIndex stream %d, sample %d, offset %"PRIx64", dts %"PRId64", "
2517
                            "size %d, distance %d, keyframe %d\n", st->index, current_sample,
2518
                            current_offset, current_dts, sample_size, distance, keyframe);
2519
                    if (st->codec->codec_type == AVMEDIA_TYPE_VIDEO && st->nb_index_entries < 100)
2520
                        ff_rfps_add_frame(mov->fc, st, current_dts);
2521
                }
2522

2523
                current_offset += sample_size;
2524
                stream_size += sample_size;
2525
                current_dts += sc->stts_data[stts_index].duration;
2526 2527 2528 2529 2530 2531 2532 2533 2534
                distance++;
                stts_sample++;
                current_sample++;
                if (stts_index + 1 < sc->stts_count && stts_sample == sc->stts_data[stts_index].count) {
                    stts_sample = 0;
                    stts_index++;
                }
            }
        }
2535 2536
        if (st->duration > 0)
            st->codec->bit_rate = stream_size*8*sc->time_scale/st->duration;
2537
    } else {
2538
        unsigned chunk_samples, total = 0;
2539

2540 2541 2542
        // compute total chunk count
        for (i = 0; i < sc->stsc_count; i++) {
            unsigned count, chunk_count;
2543

2544
            chunk_samples = sc->stsc_data[i].count;
2545 2546
            if (i != sc->stsc_count - 1 &&
                sc->samples_per_frame && chunk_samples % sc->samples_per_frame) {
2547 2548 2549 2550
                av_log(mov->fc, AV_LOG_ERROR, "error unaligned chunk\n");
                return;
            }

2551 2552 2553 2554 2555 2556 2557 2558 2559 2560 2561 2562 2563 2564 2565 2566
            if (sc->samples_per_frame >= 160) { // gsm
                count = chunk_samples / sc->samples_per_frame;
            } else if (sc->samples_per_frame > 1) {
                unsigned samples = (1024/sc->samples_per_frame)*sc->samples_per_frame;
                count = (chunk_samples+samples-1) / samples;
            } else {
                count = (chunk_samples+1023) / 1024;
            }

            if (i < sc->stsc_count - 1)
                chunk_count = sc->stsc_data[i+1].first - sc->stsc_data[i].first;
            else
                chunk_count = sc->chunk_count - (sc->stsc_data[i].first - 1);
            total += chunk_count * count;
        }

2567
        av_log(mov->fc, AV_LOG_TRACE, "chunk count %d\n", total);
2568
        if (total >= UINT_MAX / sizeof(*st->index_entries) - st->nb_index_entries)
2569
            return;
2570 2571 2572 2573
        if (av_reallocp_array(&st->index_entries,
                              st->nb_index_entries + total,
                              sizeof(*st->index_entries)) < 0) {
            st->nb_index_entries = 0;
2574
            return;
2575
        }
2576
        st->index_entries_allocated_size = (st->nb_index_entries + total) * sizeof(*st->index_entries);
2577 2578 2579 2580 2581 2582 2583 2584 2585

        // populate index
        for (i = 0; i < sc->chunk_count; i++) {
            current_offset = sc->chunk_offsets[i];
            if (stsc_index + 1 < sc->stsc_count &&
                i + 1 == sc->stsc_data[stsc_index + 1].first)
                stsc_index++;
            chunk_samples = sc->stsc_data[stsc_index].count;

2586
            while (chunk_samples > 0) {
2587
                AVIndexEntry *e;
2588 2589 2590 2591 2592 2593 2594 2595 2596 2597
                unsigned size, samples;

                if (sc->samples_per_frame >= 160) { // gsm
                    samples = sc->samples_per_frame;
                    size = sc->bytes_per_frame;
                } else {
                    if (sc->samples_per_frame > 1) {
                        samples = FFMIN((1024 / sc->samples_per_frame)*
                                        sc->samples_per_frame, chunk_samples);
                        size = (samples / sc->samples_per_frame) * sc->bytes_per_frame;
2598
                    } else {
2599 2600
                        samples = FFMIN(1024, chunk_samples);
                        size = samples * sc->sample_size;
2601 2602
                    }
                }
2603

2604 2605 2606 2607 2608 2609 2610 2611 2612 2613
                if (st->nb_index_entries >= total) {
                    av_log(mov->fc, AV_LOG_ERROR, "wrong chunk count %d\n", total);
                    return;
                }
                e = &st->index_entries[st->nb_index_entries++];
                e->pos = current_offset;
                e->timestamp = current_dts;
                e->size = size;
                e->min_distance = 0;
                e->flags = AVINDEX_KEYFRAME;
2614
                av_log(mov->fc, AV_LOG_TRACE, "AVIndex stream %d, chunk %d, offset %"PRIx64", dts %"PRId64", "
2615
                        "size %d, duration %d\n", st->index, i, current_offset, current_dts,
2616 2617 2618
                        size, samples);

                current_offset += size;
2619
                current_dts += samples;
2620
                chunk_samples -= samples;
2621 2622 2623 2624
            }
        }
    }
}
2625

2626 2627
static int mov_open_dref(MOVContext *c, AVIOContext **pb, const char *src, MOVDref *ref,
                         AVIOInterruptCB *int_cb)
2628
{
2629 2630 2631 2632 2633
    AVOpenCallback open_func = c->fc->open_cb;

    if (!open_func)
        open_func = ffio_open2_wrapper;

2634 2635
    /* try relative path, we do not try the absolute because it can leak information about our
       system to an attacker */
2636
    if (ref->nlvl_to > 0 && ref->nlvl_from > 0 && ref->path[0] != '/') {
2637
        char filename[1025];
2638
        const char *src_path;
2639 2640 2641 2642 2643 2644 2645 2646 2647 2648 2649 2650 2651 2652 2653 2654 2655 2656 2657
        int i, l;

        /* find a source dir */
        src_path = strrchr(src, '/');
        if (src_path)
            src_path++;
        else
            src_path = src;

        /* find a next level down to target */
        for (i = 0, l = strlen(ref->path) - 1; l >= 0; l--)
            if (ref->path[l] == '/') {
                if (i == ref->nlvl_to - 1)
                    break;
                else
                    i++;
            }

        /* compose filename if next level down to target was found */
2658
        if (i == ref->nlvl_to - 1 && src_path - src  < sizeof(filename)) {
2659 2660 2661 2662
            memcpy(filename, src, src_path - src);
            filename[src_path - src] = 0;

            for (i = 1; i < ref->nlvl_from; i++)
2663
                av_strlcat(filename, "../", sizeof(filename));
2664

2665
            av_strlcat(filename, ref->path + l + 1, sizeof(filename));
2666
            if (!c->use_absolute_path && !c->fc->open_cb)
2667 2668
                if(strstr(ref->path + l + 1, "..") || ref->nlvl_from > 1)
                    return AVERROR(ENOENT);
2669

2670 2671
            if (strlen(filename) + 1 == sizeof(filename))
                return AVERROR(ENOENT);
2672
            if (!open_func(c->fc, pb, filename, AVIO_FLAG_READ, int_cb, NULL))
2673 2674
                return 0;
        }
2675 2676
    } else if (c->use_absolute_path) {
        av_log(c->fc, AV_LOG_WARNING, "Using absolute path on user request, "
2677
               "this is a possible security issue\n");
2678 2679 2680 2681
        if (!open_func(c->fc, pb, ref->path, AVIO_FLAG_READ, int_cb, NULL))
            return 0;
    } else if (c->fc->open_cb) {
        if (!open_func(c->fc, pb, ref->path, AVIO_FLAG_READ, int_cb, NULL))
2682
            return 0;
2683 2684 2685 2686 2687
    } else {
        av_log(c->fc, AV_LOG_ERROR,
               "Absolute path %s not tried for security reasons, "
               "set demuxer option use_absolute_path to allow absolute paths\n",
               ref->path);
2688 2689 2690
    }

    return AVERROR(ENOENT);
M
Mans Rullgard 已提交
2691
}
2692

2693 2694 2695 2696 2697 2698 2699 2700 2701 2702
static void fix_timescale(MOVContext *c, MOVStreamContext *sc)
{
    if (sc->time_scale <= 0) {
        av_log(c->fc, AV_LOG_WARNING, "stream %d, timescale not set\n", sc->ffindex);
        sc->time_scale = c->time_scale;
        if (sc->time_scale <= 0)
            sc->time_scale = 1;
    }
}

2703
static int mov_read_trak(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2704 2705 2706
{
    AVStream *st;
    MOVStreamContext *sc;
2707
    int ret;
2708

2709
    st = avformat_new_stream(c->fc, NULL);
B
Baptiste Coudurier 已提交
2710
    if (!st) return AVERROR(ENOMEM);
2711
    st->id = c->fc->nb_streams;
B
Baptiste Coudurier 已提交
2712
    sc = av_mallocz(sizeof(MOVStreamContext));
2713
    if (!sc) return AVERROR(ENOMEM);
2714 2715

    st->priv_data = sc;
2716
    st->codec->codec_type = AVMEDIA_TYPE_DATA;
2717
    sc->ffindex = st->index;
2718

2719 2720 2721 2722
    if ((ret = mov_read_default(c, pb, atom)) < 0)
        return ret;

    /* sanity checks */
2723 2724
    if (sc->chunk_count && (!sc->stts_count || !sc->stsc_count ||
                            (!sc->sample_size && !sc->sample_count))) {
2725 2726
        av_log(c->fc, AV_LOG_ERROR, "stream %d, missing mandatory atoms, broken header\n",
               st->index);
2727 2728
        return 0;
    }
2729

2730
    fix_timescale(c, sc);
2731

2732
    avpriv_set_pts_info(st, 64, 1, sc->time_scale);
2733 2734 2735 2736

    mov_build_index(c, st);

    if (sc->dref_id-1 < sc->drefs_count && sc->drefs[sc->dref_id-1].path) {
2737
        MOVDref *dref = &sc->drefs[sc->dref_id - 1];
2738 2739
        if (mov_open_dref(c, &sc->pb, c->fc->filename, dref,
                          &c->fc->interrupt_callback) < 0)
2740 2741 2742 2743 2744
            av_log(c->fc, AV_LOG_ERROR,
                   "stream %d, error opening alias: path='%s', dir='%s', "
                   "filename='%s', volume='%s', nlvl_from=%d, nlvl_to=%d\n",
                   st->index, dref->path, dref->dir, dref->filename,
                   dref->volume, dref->nlvl_from, dref->nlvl_to);
2745
    } else {
2746
        sc->pb = c->fc->pb;
2747 2748
        sc->pb_is_copied = 1;
    }
2749

2750
    if (st->codec->codec_type == AVMEDIA_TYPE_VIDEO) {
2751 2752
        if (!st->sample_aspect_ratio.num && st->codec->width && st->codec->height &&
            sc->height && sc->width &&
2753 2754 2755
            (st->codec->width != sc->width || st->codec->height != sc->height)) {
            st->sample_aspect_ratio = av_d2q(((double)st->codec->height * sc->width) /
                                             ((double)st->codec->width * sc->height), INT_MAX);
2756 2757
        }

A
Anton Khirnov 已提交
2758
#if FF_API_R_FRAME_RATE
2759 2760 2761
        if (sc->stts_count == 1 || (sc->stts_count == 2 && sc->stts_data[1].count == 1))
            av_reduce(&st->r_frame_rate.num, &st->r_frame_rate.den,
                      sc->time_scale, sc->stts_data[0].duration, INT_MAX);
A
Anton Khirnov 已提交
2762
#endif
2763 2764
    }

R
Reimar Döffinger 已提交
2765 2766
    // done for ai5q, ai52, ai55, ai1q, ai12 and ai15.
    if (!st->codec->extradata_size && st->codec->codec_id == AV_CODEC_ID_H264 &&
2767 2768 2769 2770
        TAG_IS_AVCI(st->codec->codec_tag)) {
        ret = ff_generate_avci_extradata(st);
        if (ret < 0)
            return ret;
R
Reimar Döffinger 已提交
2771 2772
    }

2773
    switch (st->codec->codec_id) {
2774
#if CONFIG_H261_DECODER
2775
    case AV_CODEC_ID_H261:
2776
#endif
2777
#if CONFIG_H263_DECODER
2778
    case AV_CODEC_ID_H263:
2779
#endif
2780
#if CONFIG_MPEG4_DECODER
2781
    case AV_CODEC_ID_MPEG4:
2782
#endif
2783
        st->codec->width = 0; /* let decoder init width/height */
2784 2785 2786
        st->codec->height= 0;
        break;
    }
B
Baptiste Coudurier 已提交
2787 2788 2789

    /* Do not need those anymore. */
    av_freep(&sc->chunk_offsets);
2790
    av_freep(&sc->stsc_data);
B
Baptiste Coudurier 已提交
2791 2792 2793
    av_freep(&sc->sample_sizes);
    av_freep(&sc->keyframes);
    av_freep(&sc->stts_data);
2794
    av_freep(&sc->stps_data);
2795
    av_freep(&sc->elst_data);
2796
    av_freep(&sc->rap_group);
B
Baptiste Coudurier 已提交
2797

2798
    return 0;
2799 2800
}

2801
static int mov_read_ilst(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2802 2803 2804 2805 2806 2807 2808 2809
{
    int ret;
    c->itunes_metadata = 1;
    ret = mov_read_default(c, pb, atom);
    c->itunes_metadata = 0;
    return ret;
}

2810
static int mov_read_custom_2plus(MOVContext *c, AVIOContext *pb, int size)
2811 2812 2813 2814
{
    int64_t end = avio_tell(pb) + size;
    uint8_t *key = NULL, *val = NULL;
    int i;
2815 2816 2817 2818 2819 2820 2821
    AVStream *st;
    MOVStreamContext *sc;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;
2822 2823 2824 2825 2826 2827 2828 2829 2830 2831 2832 2833 2834 2835 2836 2837 2838 2839 2840 2841 2842 2843 2844 2845 2846 2847 2848 2849

    for (i = 0; i < 2; i++) {
        uint8_t **p;
        uint32_t len, tag;

        if (end - avio_tell(pb) <= 12)
            break;

        len = avio_rb32(pb);
        tag = avio_rl32(pb);
        avio_skip(pb, 4); // flags

        if (len < 12 || len - 12 > end - avio_tell(pb))
            break;
        len -= 12;

        if (tag == MKTAG('n', 'a', 'm', 'e'))
            p = &key;
        else if (tag == MKTAG('d', 'a', 't', 'a') && len > 4) {
            avio_skip(pb, 4);
            len -= 4;
            p = &val;
        } else
            break;

        *p = av_malloc(len + 1);
        if (!*p)
            break;
2850 2851 2852 2853
        if (avio_read(pb, *p, len) != len) {
            av_freep(p);
            return AVERROR_INVALIDDATA;
        }
2854 2855 2856 2857
        (*p)[len] = 0;
    }

    if (key && val) {
2858 2859 2860 2861 2862 2863
        if (strcmp(key, "iTunSMPB") == 0) {
            int priming, remainder, samples;
            if(sscanf(val, "%*X %X %X %X", &priming, &remainder, &samples) == 3){
                if(priming>0 && priming<16384)
                    sc->start_pad = priming;
            }
2864 2865
        }
        if (strcmp(key, "cdec") != 0) {
2866 2867 2868 2869
            av_dict_set(&c->fc->metadata, key, val,
                        AV_DICT_DONT_STRDUP_KEY | AV_DICT_DONT_STRDUP_VAL);
            key = val = NULL;
        }
2870 2871 2872 2873 2874 2875 2876 2877 2878 2879 2880 2881 2882 2883 2884 2885 2886 2887 2888 2889 2890 2891 2892 2893 2894 2895 2896 2897 2898 2899 2900
    }

    avio_seek(pb, end, SEEK_SET);
    av_freep(&key);
    av_freep(&val);
    return 0;
}

static int mov_read_custom(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int64_t end = avio_tell(pb) + atom.size;
    uint32_t tag, len;

    if (atom.size < 8)
        goto fail;

    len = avio_rb32(pb);
    tag = avio_rl32(pb);

    if (len > atom.size)
        goto fail;

    if (tag == MKTAG('m', 'e', 'a', 'n') && len > 12) {
        uint8_t domain[128];
        int domain_len;

        avio_skip(pb, 4); // flags
        len -= 12;

        domain_len = avio_get_str(pb, len, domain, sizeof(domain));
        avio_skip(pb, len - domain_len);
2901
        return mov_read_custom_2plus(c, pb, end - avio_tell(pb));
2902 2903 2904 2905 2906 2907 2908 2909
    }

fail:
    av_log(c->fc, AV_LOG_VERBOSE,
           "Unhandled or malformed custom metadata of size %"PRId64"\n", atom.size);
    return 0;
}

2910
static int mov_read_meta(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2911
{
2912
    while (atom.size > 8) {
2913
        uint32_t tag = avio_rl32(pb);
2914 2915
        atom.size -= 4;
        if (tag == MKTAG('h','d','l','r')) {
A
Anton Khirnov 已提交
2916
            avio_seek(pb, -8, SEEK_CUR);
2917 2918 2919 2920 2921
            atom.size += 8;
            return mov_read_default(c, pb, atom);
        }
    }
    return 0;
2922 2923
}

2924
static int mov_read_tkhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2925
{
2926 2927 2928
    int i;
    int width;
    int height;
2929
    int display_matrix[3][3];
2930 2931 2932
    AVStream *st;
    MOVStreamContext *sc;
    int version;
2933
    int flags;
2934 2935 2936 2937 2938

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;
2939

2940
    version = avio_r8(pb);
2941 2942
    flags = avio_rb24(pb);
    st->disposition |= (flags & MOV_TKHD_FLAG_ENABLED) ? AV_DISPOSITION_DEFAULT : 0;
2943

B
Baptiste Coudurier 已提交
2944
    if (version == 1) {
2945 2946
        avio_rb64(pb);
        avio_rb64(pb);
B
Baptiste Coudurier 已提交
2947
    } else {
2948 2949
        avio_rb32(pb); /* creation time */
        avio_rb32(pb); /* modification time */
B
Baptiste Coudurier 已提交
2950
    }
2951 2952
    st->id = (int)avio_rb32(pb); /* track id (NOT 0 !)*/
    avio_rb32(pb); /* reserved */
2953

2954
    /* highlevel (considering edits) duration in movie timebase */
2955 2956 2957
    (version == 1) ? avio_rb64(pb) : avio_rb32(pb);
    avio_rb32(pb); /* reserved */
    avio_rb32(pb); /* reserved */
2958

2959 2960 2961 2962
    avio_rb16(pb); /* layer */
    avio_rb16(pb); /* alternate group */
    avio_rb16(pb); /* volume */
    avio_rb16(pb); /* reserved */
2963

2964 2965
    //read in the display matrix (outlined in ISO 14496-12, Section 6.2.2)
    // they're kept in fixed point format through all calculations
2966 2967
    // save u,v,z to store the whole matrix in the AV_PKT_DATA_DISPLAYMATRIX
    // side data, but the scale factor is not needed to calculate aspect ratio
2968
    for (i = 0; i < 3; i++) {
2969 2970
        display_matrix[i][0] = avio_rb32(pb);   // 16.16 fixed point
        display_matrix[i][1] = avio_rb32(pb);   // 16.16 fixed point
2971
        display_matrix[i][2] = avio_rb32(pb);   //  2.30 fixed point
2972
    }
2973

2974 2975
    width = avio_rb32(pb);       // 16.16 fixed point track width
    height = avio_rb32(pb);      // 16.16 fixed point track height
2976 2977
    sc->width = width >> 16;
    sc->height = height >> 16;
2978

2979 2980
    // save the matrix and add rotate metadata when it is not the default
    // identity
2981 2982 2983 2984 2985 2986 2987
    if (display_matrix[0][0] != (1 << 16) ||
        display_matrix[1][1] != (1 << 16) ||
        display_matrix[2][2] != (1 << 30) ||
        display_matrix[0][1] || display_matrix[0][2] ||
        display_matrix[1][0] || display_matrix[1][2] ||
        display_matrix[2][0] || display_matrix[2][1]) {
        int i, j;
2988
        double rotate;
2989 2990 2991 2992 2993 2994 2995 2996

        av_freep(&sc->display_matrix);
        sc->display_matrix = av_malloc(sizeof(int32_t) * 9);
        if (!sc->display_matrix)
            return AVERROR(ENOMEM);

        for (i = 0; i < 3; i++)
            for (j = 0; j < 3; j++)
2997
                sc->display_matrix[i * 3 + j] = display_matrix[i][j];
2998 2999 3000 3001 3002 3003 3004 3005 3006 3007

        rotate = av_display_rotation_get(sc->display_matrix);
        if (!isnan(rotate)) {
            char rotate_buf[64];
            rotate = -rotate;
            if (rotate < 0) // for backward compatibility
                rotate += 360;
            snprintf(rotate_buf, sizeof(rotate_buf), "%g", rotate);
            av_dict_set(&st->metadata, "rotate", rotate_buf, 0);
        }
3008 3009
    }

3010
    // transform the display width/height according to the matrix
3011
    // to keep the same scale, use [width height 1<<16]
3012 3013 3014 3015
    if (width && height && sc->display_matrix) {
        double disp_transform[2];

#define SQR(a) ((a)*(double)(a))
3016
        for (i = 0; i < 2; i++)
3017 3018
            disp_transform[i] = sqrt(SQR(display_matrix[i][0]) + SQR(display_matrix[i][1]));

3019 3020
        if (disp_transform[0] > 0       && disp_transform[1] > 0 &&
            disp_transform[0] < (1<<24) && disp_transform[1] < (1<<24) &&
3021
            fabs((disp_transform[0] / disp_transform[1]) - 1.0) > 0.01)
3022 3023 3024
            st->sample_aspect_ratio = av_d2q(
                disp_transform[0] / disp_transform[1],
                INT_MAX);
3025
    }
3026 3027 3028
    return 0;
}

3029
static int mov_read_tfhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
3030 3031 3032
{
    MOVFragment *frag = &c->fragment;
    MOVTrackExt *trex = NULL;
3033
    MOVFragmentIndex* index = NULL;
B
Baptiste Coudurier 已提交
3034 3035
    int flags, track_id, i;

3036 3037
    avio_r8(pb); /* version */
    flags = avio_rb24(pb);
B
Baptiste Coudurier 已提交
3038

3039
    track_id = avio_rb32(pb);
3040
    if (!track_id)
3041
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
3042 3043 3044 3045 3046 3047 3048 3049
    frag->track_id = track_id;
    for (i = 0; i < c->trex_count; i++)
        if (c->trex_data[i].track_id == frag->track_id) {
            trex = &c->trex_data[i];
            break;
        }
    if (!trex) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding trex\n");
3050
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
3051
    }
3052 3053 3054 3055 3056 3057 3058 3059 3060
    for (i = 0; i < c->fragment_index_count; i++) {
        MOVFragmentIndex* candidate = c->fragment_index_data[i];
        if (candidate->track_id == frag->track_id) {
            av_log(c->fc, AV_LOG_DEBUG,
                   "found fragment index for track %u\n", frag->track_id);
            index = candidate;
            break;
        }
    }
B
Baptiste Coudurier 已提交
3061

3062
    frag->base_data_offset = flags & MOV_TFHD_BASE_DATA_OFFSET ?
3063 3064
                             avio_rb64(pb) : flags & MOV_TFHD_DEFAULT_BASE_IS_MOOF ?
                             frag->moof_offset : frag->implicit_offset;
3065 3066 3067 3068 3069 3070 3071 3072
    frag->stsd_id  = flags & MOV_TFHD_STSD_ID ? avio_rb32(pb) : trex->stsd_id;

    frag->duration = flags & MOV_TFHD_DEFAULT_DURATION ?
                     avio_rb32(pb) : trex->duration;
    frag->size     = flags & MOV_TFHD_DEFAULT_SIZE ?
                     avio_rb32(pb) : trex->size;
    frag->flags    = flags & MOV_TFHD_DEFAULT_FLAGS ?
                     avio_rb32(pb) : trex->flags;
3073 3074 3075 3076 3077 3078 3079 3080 3081 3082 3083 3084 3085 3086 3087 3088 3089 3090 3091
    frag->time     = AV_NOPTS_VALUE;
    if (index) {
        int i, found = 0;
        for (i = index->current_item; i < index->item_count; i++) {
            if (frag->implicit_offset == index->items[i].moof_offset) {
                av_log(c->fc, AV_LOG_DEBUG, "found fragment index entry "
                        "for track %u and moof_offset %"PRId64"\n",
                        frag->track_id, index->items[i].moof_offset);
                frag->time = index->items[i].time;
                index->current_item = i + 1;
                found = 1;
            }
        }
        if (!found) {
            av_log(c->fc, AV_LOG_WARNING, "track %u has a fragment index "
                   "but it doesn't have an (in-order) entry for moof_offset "
                   "%"PRId64"\n", frag->track_id, frag->implicit_offset);
        }
    }
3092
    av_log(c->fc, AV_LOG_TRACE, "frag flags 0x%x\n", frag->flags);
B
Baptiste Coudurier 已提交
3093 3094 3095
    return 0;
}

3096
static int mov_read_chap(MOVContext *c, AVIOContext *pb, MOVAtom atom)
D
David Conrad 已提交
3097
{
3098
    c->chapter_track = avio_rb32(pb);
D
David Conrad 已提交
3099 3100 3101
    return 0;
}

3102
static int mov_read_trex(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
3103 3104
{
    MOVTrackExt *trex;
3105
    int err;
B
Baptiste Coudurier 已提交
3106 3107

    if ((uint64_t)c->trex_count+1 >= UINT_MAX / sizeof(*c->trex_data))
3108
        return AVERROR_INVALIDDATA;
3109 3110 3111 3112 3113
    if ((err = av_reallocp_array(&c->trex_data, c->trex_count + 1,
                                 sizeof(*c->trex_data))) < 0) {
        c->trex_count = 0;
        return err;
    }
3114 3115 3116

    c->fc->duration = AV_NOPTS_VALUE; // the duration from mvhd is not representing the whole file when fragments are used.

B
Baptiste Coudurier 已提交
3117
    trex = &c->trex_data[c->trex_count++];
3118 3119 3120 3121 3122 3123 3124
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    trex->track_id = avio_rb32(pb);
    trex->stsd_id  = avio_rb32(pb);
    trex->duration = avio_rb32(pb);
    trex->size     = avio_rb32(pb);
    trex->flags    = avio_rb32(pb);
B
Baptiste Coudurier 已提交
3125 3126 3127
    return 0;
}

M
Martin Storsjö 已提交
3128 3129 3130 3131 3132 3133 3134 3135 3136 3137 3138 3139 3140 3141 3142 3143 3144 3145 3146 3147 3148 3149 3150 3151 3152 3153 3154 3155 3156 3157
static int mov_read_tfdt(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    MOVFragment *frag = &c->fragment;
    AVStream *st = NULL;
    MOVStreamContext *sc;
    int version, i;

    for (i = 0; i < c->fc->nb_streams; i++) {
        if (c->fc->streams[i]->id == frag->track_id) {
            st = c->fc->streams[i];
            break;
        }
    }
    if (!st) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding track id %d\n", frag->track_id);
        return AVERROR_INVALIDDATA;
    }
    sc = st->priv_data;
    if (sc->pseudo_stream_id + 1 != frag->stsd_id)
        return 0;
    version = avio_r8(pb);
    avio_rb24(pb); /* flags */
    if (version) {
        sc->track_end = avio_rb64(pb);
    } else {
        sc->track_end = avio_rb32(pb);
    }
    return 0;
}

3158
static int mov_read_trun(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
3159 3160
{
    MOVFragment *frag = &c->fragment;
3161
    AVStream *st = NULL;
3162
    MOVStreamContext *sc;
3163
    MOVStts *ctts_data;
B
Baptiste Coudurier 已提交
3164 3165 3166 3167
    uint64_t offset;
    int64_t dts;
    int data_offset = 0;
    unsigned entries, first_sample_flags = frag->flags;
3168
    int flags, distance, i, found_keyframe = 0, err;
B
Baptiste Coudurier 已提交
3169

3170 3171 3172 3173 3174 3175 3176 3177
    for (i = 0; i < c->fc->nb_streams; i++) {
        if (c->fc->streams[i]->id == frag->track_id) {
            st = c->fc->streams[i];
            break;
        }
    }
    if (!st) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding track id %d\n", frag->track_id);
3178
        return AVERROR_INVALIDDATA;
3179
    }
3180
    sc = st->priv_data;
3181
    if (sc->pseudo_stream_id+1 != frag->stsd_id && sc->pseudo_stream_id != -1)
B
Baptiste Coudurier 已提交
3182
        return 0;
3183 3184 3185
    avio_r8(pb); /* version */
    flags = avio_rb24(pb);
    entries = avio_rb32(pb);
3186
    av_log(c->fc, AV_LOG_TRACE, "flags 0x%x entries %d\n", flags, entries);
3187 3188 3189 3190 3191 3192 3193 3194 3195

    /* Always assume the presence of composition time offsets.
     * Without this assumption, for instance, we cannot deal with a track in fragmented movies that meet the following.
     *  1) in the initial movie, there are no samples.
     *  2) in the first movie fragment, there is only one sample without composition time offset.
     *  3) in the subsequent movie fragments, there are samples with composition time offset. */
    if (!sc->ctts_count && sc->sample_count)
    {
        /* Complement ctts table if moov atom doesn't have ctts atom. */
3196
        ctts_data = av_realloc(NULL, sizeof(*sc->ctts_data));
3197
        if (!ctts_data)
B
Baptiste Coudurier 已提交
3198
            return AVERROR(ENOMEM);
3199
        sc->ctts_data = ctts_data;
3200 3201 3202
        sc->ctts_data[sc->ctts_count].count = sc->sample_count;
        sc->ctts_data[sc->ctts_count].duration = 0;
        sc->ctts_count++;
B
Baptiste Coudurier 已提交
3203
    }
3204
    if ((uint64_t)entries+sc->ctts_count >= UINT_MAX/sizeof(*sc->ctts_data))
3205
        return AVERROR_INVALIDDATA;
3206 3207 3208 3209 3210
    if ((err = av_reallocp_array(&sc->ctts_data, entries + sc->ctts_count,
                                 sizeof(*sc->ctts_data))) < 0) {
        sc->ctts_count = 0;
        return err;
    }
3211 3212
    if (flags & MOV_TRUN_DATA_OFFSET)        data_offset        = avio_rb32(pb);
    if (flags & MOV_TRUN_FIRST_SAMPLE_FLAGS) first_sample_flags = avio_rb32(pb);
3213
    dts    = sc->track_end - sc->time_offset;
B
Baptiste Coudurier 已提交
3214 3215
    offset = frag->base_data_offset + data_offset;
    distance = 0;
3216
    av_log(c->fc, AV_LOG_TRACE, "first sample flags 0x%x\n", first_sample_flags);
3217
    for (i = 0; i < entries && !pb->eof_reached; i++) {
B
Baptiste Coudurier 已提交
3218 3219 3220
        unsigned sample_size = frag->size;
        int sample_flags = i ? frag->flags : first_sample_flags;
        unsigned sample_duration = frag->duration;
3221
        int keyframe = 0;
B
Baptiste Coudurier 已提交
3222

3223 3224 3225
        if (flags & MOV_TRUN_SAMPLE_DURATION) sample_duration = avio_rb32(pb);
        if (flags & MOV_TRUN_SAMPLE_SIZE)     sample_size     = avio_rb32(pb);
        if (flags & MOV_TRUN_SAMPLE_FLAGS)    sample_flags    = avio_rb32(pb);
3226 3227 3228
        sc->ctts_data[sc->ctts_count].count = 1;
        sc->ctts_data[sc->ctts_count].duration = (flags & MOV_TRUN_SAMPLE_CTS) ?
                                                  avio_rb32(pb) : 0;
3229
        mov_update_dts_shift(sc, sc->ctts_data[sc->ctts_count].duration);
3230 3231 3232 3233 3234 3235 3236 3237 3238 3239 3240 3241 3242 3243 3244 3245 3246 3247 3248 3249 3250 3251
        if (frag->time != AV_NOPTS_VALUE) {
            if (c->use_mfra_for == FF_MOV_FLAG_MFRA_PTS) {
                int64_t pts = frag->time;
                av_log(c->fc, AV_LOG_DEBUG, "found frag time %"PRId64
                        " sc->dts_shift %d ctts.duration %d"
                        " sc->time_offset %"PRId64" flags & MOV_TRUN_SAMPLE_CTS %d\n", pts,
                        sc->dts_shift, sc->ctts_data[sc->ctts_count].duration,
                        sc->time_offset, flags & MOV_TRUN_SAMPLE_CTS);
                dts = pts - sc->dts_shift;
                if (flags & MOV_TRUN_SAMPLE_CTS) {
                    dts -= sc->ctts_data[sc->ctts_count].duration;
                } else {
                    dts -= sc->time_offset;
                }
                av_log(c->fc, AV_LOG_DEBUG, "calculated into dts %"PRId64"\n", dts);
            } else {
                dts = frag->time;
                av_log(c->fc, AV_LOG_DEBUG, "found frag time %"PRId64
                        ", using it for dts\n", dts);
            }
            frag->time = AV_NOPTS_VALUE;
        }
3252
        sc->ctts_count++;
3253 3254 3255 3256 3257 3258 3259
        if (st->codec->codec_type == AVMEDIA_TYPE_AUDIO)
            keyframe = 1;
        else if (!found_keyframe)
            keyframe = found_keyframe =
                !(sample_flags & (MOV_FRAG_SAMPLE_FLAG_IS_NON_SYNC |
                                  MOV_FRAG_SAMPLE_FLAG_DEPENDS_YES));
        if (keyframe)
B
Baptiste Coudurier 已提交
3260
            distance = 0;
3261
        err = av_add_index_entry(st, offset, dts, sample_size, distance,
3262 3263 3264
                                 keyframe ? AVINDEX_KEYFRAME : 0);
        if (err < 0) {
            av_log(c->fc, AV_LOG_ERROR, "Failed to add index entry\n");
3265
        }
3266
        av_log(c->fc, AV_LOG_TRACE, "AVIndex stream %d, sample %d, offset %"PRIx64", dts %"PRId64", "
B
Baptiste Coudurier 已提交
3267
                "size %d, distance %d, keyframe %d\n", st->index, sc->sample_count+i,
3268
                offset, dts, sample_size, distance, keyframe);
B
Baptiste Coudurier 已提交
3269
        distance++;
3270
        dts += sample_duration;
B
Baptiste Coudurier 已提交
3271
        offset += sample_size;
3272
        sc->data_size += sample_size;
3273 3274
        sc->duration_for_fps += sample_duration;
        sc->nb_frames_for_fps ++;
B
Baptiste Coudurier 已提交
3275
    }
3276 3277 3278 3279

    if (pb->eof_reached)
        return AVERROR_EOF;

3280
    frag->implicit_offset = offset;
3281
    st->duration = sc->track_end = dts + sc->time_offset;
B
Baptiste Coudurier 已提交
3282 3283 3284
    return 0;
}

3285 3286 3287
/* this atom should be null (from specs), but some buggy files put the 'moov' atom inside it... */
/* like the files created with Adobe Premiere 5.0, for samples see */
/* http://graphics.tudelft.nl/~wouter/publications/soundtests/ */
3288
static int mov_read_wide(MOVContext *c, AVIOContext *pb, MOVAtom atom)
3289 3290 3291 3292 3293
{
    int err;

    if (atom.size < 8)
        return 0; /* continue */
3294
    if (avio_rb32(pb) != 0) { /* 0 sized mdat atom... use the 'wide' atom size */
3295
        avio_skip(pb, atom.size - 4);
3296 3297
        return 0;
    }
3298
    atom.type = avio_rl32(pb);
3299
    atom.size -= 8;
3300
    if (atom.type != MKTAG('m','d','a','t')) {
3301
        avio_skip(pb, atom.size);
3302 3303 3304 3305 3306 3307
        return 0;
    }
    err = mov_read_mdat(c, pb, atom);
    return err;
}

3308
static int mov_read_cmov(MOVContext *c, AVIOContext *pb, MOVAtom atom)
3309
{
3310
#if CONFIG_ZLIB
3311
    AVIOContext ctx;
3312 3313
    uint8_t *cmov_data;
    uint8_t *moov_data; /* uncompressed data */
3314
    long cmov_len, moov_len;
3315
    int ret = -1;
3316

3317 3318
    avio_rb32(pb); /* dcom atom */
    if (avio_rl32(pb) != MKTAG('d','c','o','m'))
3319
        return AVERROR_INVALIDDATA;
3320
    if (avio_rl32(pb) != MKTAG('z','l','i','b')) {
3321
        av_log(c->fc, AV_LOG_ERROR, "unknown compression for cmov atom !\n");
3322
        return AVERROR_INVALIDDATA;
3323
    }
3324 3325
    avio_rb32(pb); /* cmvd atom */
    if (avio_rl32(pb) != MKTAG('c','m','v','d'))
3326
        return AVERROR_INVALIDDATA;
3327
    moov_len = avio_rb32(pb); /* uncompressed size */
3328
    cmov_len = atom.size - 6 * 4;
3329

B
Baptiste Coudurier 已提交
3330
    cmov_data = av_malloc(cmov_len);
3331
    if (!cmov_data)
3332
        return AVERROR(ENOMEM);
B
Baptiste Coudurier 已提交
3333
    moov_data = av_malloc(moov_len);
3334 3335
    if (!moov_data) {
        av_free(cmov_data);
3336
        return AVERROR(ENOMEM);
3337
    }
3338 3339 3340 3341 3342
    if (avio_read(pb, cmov_data, cmov_len) != cmov_len) {
        av_freep(&cmov_data);
        av_freep(&moov_data);
        return AVERROR_INVALIDDATA;
    }
3343
    if (uncompress (moov_data, (uLongf *) &moov_len, (const Bytef *)cmov_data, cmov_len) != Z_OK)
3344
        goto free_and_return;
3345
    if (ffio_init_context(&ctx, moov_data, moov_len, 0, NULL, NULL, NULL, NULL) != 0)
3346
        goto free_and_return;
3347
    atom.type = MKTAG('m','o','o','v');
3348 3349
    atom.size = moov_len;
    ret = mov_read_default(c, &ctx, atom);
3350
free_and_return:
3351 3352 3353
    av_free(moov_data);
    av_free(cmov_data);
    return ret;
3354 3355
#else
    av_log(c->fc, AV_LOG_ERROR, "this file requires zlib support compiled in\n");
3356
    return AVERROR(ENOSYS);
3357
#endif
3358
}
3359

G
Gael Chardon 已提交
3360
/* edit list atom */
3361
static int mov_read_elst(MOVContext *c, AVIOContext *pb, MOVAtom atom)
G
Gael Chardon 已提交
3362
{
3363
    MOVStreamContext *sc;
3364
    int i, edit_count, version;
B
Baptiste Coudurier 已提交
3365

3366
    if (c->fc->nb_streams < 1 || c->ignore_editlist)
3367 3368 3369
        return 0;
    sc = c->fc->streams[c->fc->nb_streams-1]->priv_data;

3370
    version = avio_r8(pb); /* version */
3371 3372
    avio_rb24(pb); /* flags */
    edit_count = avio_rb32(pb); /* entries */
B
Baptiste Coudurier 已提交
3373

3374 3375 3376 3377 3378 3379 3380 3381 3382
    if (!edit_count)
        return 0;
    if (sc->elst_data)
        av_log(c->fc, AV_LOG_WARNING, "Duplicated ELST atom\n");
    av_free(sc->elst_data);
    sc->elst_count = 0;
    sc->elst_data = av_malloc_array(edit_count, sizeof(*sc->elst_data));
    if (!sc->elst_data)
        return AVERROR(ENOMEM);
3383

3384
    av_log(c->fc, AV_LOG_TRACE, "track[%i].edit_count = %i\n", c->fc->nb_streams-1, edit_count);
3385 3386 3387
    for (i = 0; i < edit_count && !pb->eof_reached; i++) {
        MOVElst *e = &sc->elst_data[i];

3388
        if (version == 1) {
3389 3390
            e->duration = avio_rb64(pb);
            e->time     = avio_rb64(pb);
3391
        } else {
3392 3393
            e->duration = avio_rb32(pb); /* segment duration */
            e->time     = (int32_t)avio_rb32(pb); /* media time */
3394
        }
3395
        e->rate = avio_rb32(pb) / 65536.0;
3396
        av_log(c->fc, AV_LOG_TRACE, "duration=%"PRId64" time=%"PRId64" rate=%f\n",
3397
                e->duration, e->time, e->rate);
B
Baptiste Coudurier 已提交
3398
    }
3399
    sc->elst_count = i;
3400

B
Baptiste Coudurier 已提交
3401
    return 0;
G
Gael Chardon 已提交
3402 3403
}

3404
static int mov_read_tmcd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
C
Clément Bœsch 已提交
3405 3406 3407 3408 3409 3410
{
    MOVStreamContext *sc;

    if (c->fc->nb_streams < 1)
        return AVERROR_INVALIDDATA;
    sc = c->fc->streams[c->fc->nb_streams - 1]->priv_data;
3411
    sc->timecode_track = avio_rb32(pb);
C
Clément Bœsch 已提交
3412 3413 3414
    return 0;
}

3415 3416 3417 3418 3419 3420 3421 3422 3423 3424 3425 3426 3427 3428 3429 3430 3431 3432 3433 3434 3435 3436 3437 3438 3439 3440 3441 3442 3443 3444 3445 3446 3447 3448 3449 3450 3451 3452 3453 3454 3455 3456 3457
static int mov_read_uuid(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int ret;
    uint8_t uuid[16];
    static const uint8_t uuid_isml_manifest[] = {
        0xa5, 0xd4, 0x0b, 0x30, 0xe8, 0x14, 0x11, 0xdd,
        0xba, 0x2f, 0x08, 0x00, 0x20, 0x0c, 0x9a, 0x66
    };

    if (atom.size < sizeof(uuid) || atom.size == INT64_MAX)
        return AVERROR_INVALIDDATA;

    ret = avio_read(pb, uuid, sizeof(uuid));
    if (ret < 0) {
        return ret;
    } else if (ret != sizeof(uuid)) {
        return AVERROR_INVALIDDATA;
    }
    if (!memcmp(uuid, uuid_isml_manifest, sizeof(uuid))) {
        uint8_t *buffer, *ptr;
        char *endptr;
        size_t len = atom.size - sizeof(uuid);

        if (len < 4) {
            return AVERROR_INVALIDDATA;
        }
        ret = avio_skip(pb, 4); // zeroes
        len -= 4;

        buffer = av_mallocz(len + 1);
        if (!buffer) {
            return AVERROR(ENOMEM);
        }
        ret = avio_read(pb, buffer, len);
        if (ret < 0) {
            av_free(buffer);
            return ret;
        } else if (ret != len) {
            av_free(buffer);
            return AVERROR_INVALIDDATA;
        }

        ptr = buffer;
3458
        while ((ptr = av_stristr(ptr, "systemBitrate=\""))) {
3459 3460 3461 3462 3463 3464 3465 3466 3467 3468 3469 3470 3471 3472 3473 3474 3475 3476 3477 3478 3479 3480
            ptr += sizeof("systemBitrate=\"") - 1;
            c->bitrates_count++;
            c->bitrates = av_realloc_f(c->bitrates, c->bitrates_count, sizeof(*c->bitrates));
            if (!c->bitrates) {
                c->bitrates_count = 0;
                av_free(buffer);
                return AVERROR(ENOMEM);
            }
            errno = 0;
            ret = strtol(ptr, &endptr, 10);
            if (ret < 0 || errno || *endptr != '"') {
                c->bitrates[c->bitrates_count - 1] = 0;
            } else {
                c->bitrates[c->bitrates_count - 1] = ret;
            }
        }

        av_free(buffer);
    }
    return 0;
}

3481 3482 3483 3484 3485 3486 3487 3488 3489 3490 3491 3492 3493 3494 3495 3496 3497 3498 3499 3500 3501 3502
static int mov_read_free(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int ret;
    uint8_t content[16];

    if (atom.size < 8)
        return 0;

    ret = avio_read(pb, content, FFMIN(sizeof(content), atom.size));
    if (ret < 0)
        return ret;

    if (   !c->found_moov
        && !c->found_mdat
        && !memcmp(content, "Anevia\x1A\x1A", 8)
        && c->use_mfra_for == FF_MOV_FLAG_MFRA_AUTO) {
        c->use_mfra_for = FF_MOV_FLAG_MFRA_PTS;
    }

    return 0;
}

3503
static const MOVParseTableEntry mov_default_parse_table[] = {
3504
{ MKTAG('A','C','L','R'), mov_read_aclr },
C
Carl Eugen Hoyos 已提交
3505
{ MKTAG('A','P','R','G'), mov_read_avid },
P
Piotr Bandurski 已提交
3506
{ MKTAG('A','A','L','P'), mov_read_avid },
3507
{ MKTAG('A','R','E','S'), mov_read_ares },
3508
{ MKTAG('a','v','s','s'), mov_read_avss },
D
David Conrad 已提交
3509
{ MKTAG('c','h','p','l'), mov_read_chpl },
3510
{ MKTAG('c','o','6','4'), mov_read_stco },
3511
{ MKTAG('c','o','l','r'), mov_read_colr },
3512 3513
{ MKTAG('c','t','t','s'), mov_read_ctts }, /* composition time to sample */
{ MKTAG('d','i','n','f'), mov_read_default },
3514
{ MKTAG('D','p','x','E'), mov_read_dpxe },
3515 3516 3517 3518
{ MKTAG('d','r','e','f'), mov_read_dref },
{ MKTAG('e','d','t','s'), mov_read_default },
{ MKTAG('e','l','s','t'), mov_read_elst },
{ MKTAG('e','n','d','a'), mov_read_enda },
3519
{ MKTAG('f','i','e','l'), mov_read_fiel },
3520 3521 3522
{ MKTAG('f','t','y','p'), mov_read_ftyp },
{ MKTAG('g','l','b','l'), mov_read_glbl },
{ MKTAG('h','d','l','r'), mov_read_hdlr },
3523
{ MKTAG('i','l','s','t'), mov_read_ilst },
3524
{ MKTAG('j','p','2','h'), mov_read_jp2h },
3525 3526 3527
{ MKTAG('m','d','a','t'), mov_read_mdat },
{ MKTAG('m','d','h','d'), mov_read_mdhd },
{ MKTAG('m','d','i','a'), mov_read_default },
3528
{ MKTAG('m','e','t','a'), mov_read_meta },
3529 3530 3531 3532 3533
{ MKTAG('m','i','n','f'), mov_read_default },
{ MKTAG('m','o','o','f'), mov_read_moof },
{ MKTAG('m','o','o','v'), mov_read_moov },
{ MKTAG('m','v','e','x'), mov_read_default },
{ MKTAG('m','v','h','d'), mov_read_mvhd },
P
Piotr Bandurski 已提交
3534
{ MKTAG('S','M','I',' '), mov_read_svq3 },
3535
{ MKTAG('a','l','a','c'), mov_read_alac }, /* alac specific atom */
3536
{ MKTAG('a','v','c','C'), mov_read_glbl },
3537
{ MKTAG('p','a','s','p'), mov_read_pasp },
3538 3539
{ MKTAG('s','t','b','l'), mov_read_default },
{ MKTAG('s','t','c','o'), mov_read_stco },
3540
{ MKTAG('s','t','p','s'), mov_read_stps },
M
Martin Storsjö 已提交
3541
{ MKTAG('s','t','r','f'), mov_read_strf },
3542 3543 3544 3545 3546
{ MKTAG('s','t','s','c'), mov_read_stsc },
{ MKTAG('s','t','s','d'), mov_read_stsd }, /* sample description */
{ MKTAG('s','t','s','s'), mov_read_stss }, /* sync sample */
{ MKTAG('s','t','s','z'), mov_read_stsz }, /* sample size */
{ MKTAG('s','t','t','s'), mov_read_stts },
3547
{ MKTAG('s','t','z','2'), mov_read_stsz }, /* compact sample size */
3548
{ MKTAG('t','k','h','d'), mov_read_tkhd }, /* track header */
M
Martin Storsjö 已提交
3549
{ MKTAG('t','f','d','t'), mov_read_tfdt },
3550 3551 3552
{ MKTAG('t','f','h','d'), mov_read_tfhd }, /* track fragment header */
{ MKTAG('t','r','a','k'), mov_read_trak },
{ MKTAG('t','r','a','f'), mov_read_default },
3553 3554
{ MKTAG('t','r','e','f'), mov_read_default },
{ MKTAG('t','m','c','d'), mov_read_tmcd },
D
David Conrad 已提交
3555
{ MKTAG('c','h','a','p'), mov_read_chap },
3556 3557
{ MKTAG('t','r','e','x'), mov_read_trex },
{ MKTAG('t','r','u','n'), mov_read_trun },
B
Baptiste Coudurier 已提交
3558
{ MKTAG('u','d','t','a'), mov_read_default },
3559 3560
{ MKTAG('w','a','v','e'), mov_read_wave },
{ MKTAG('e','s','d','s'), mov_read_esds },
3561
{ MKTAG('d','a','c','3'), mov_read_dac3 }, /* AC-3 info */
3562
{ MKTAG('d','e','c','3'), mov_read_dec3 }, /* EAC-3 info */
3563
{ MKTAG('w','i','d','e'), mov_read_wide }, /* place holder */
3564
{ MKTAG('w','f','e','x'), mov_read_wfex },
3565
{ MKTAG('c','m','o','v'), mov_read_cmov },
3566
{ MKTAG('c','h','a','n'), mov_read_chan }, /* channel layout */
M
Martin Storsjö 已提交
3567
{ MKTAG('d','v','c','1'), mov_read_dvc1 },
3568
{ MKTAG('s','b','g','p'), mov_read_sbgp },
Y
Yusuke Nakamura 已提交
3569
{ MKTAG('h','v','c','C'), mov_read_glbl },
3570
{ MKTAG('u','u','i','d'), mov_read_uuid },
3571
{ MKTAG('C','i','n', 0x8e), mov_read_targa_y216 },
3572
{ MKTAG('f','r','e','e'), mov_read_free },
3573
{ MKTAG('-','-','-','-'), mov_read_custom },
B
Baptiste Coudurier 已提交
3574
{ 0, NULL }
3575 3576
};

3577 3578 3579 3580 3581 3582
static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int64_t total_size = 0;
    MOVAtom a;
    int i;

3583 3584 3585 3586 3587 3588
    if (c->atom_depth > 10) {
        av_log(c->fc, AV_LOG_ERROR, "Atoms too deeply nested\n");
        return AVERROR_INVALIDDATA;
    }
    c->atom_depth ++;

3589 3590
    if (atom.size < 0)
        atom.size = INT64_MAX;
3591
    while (total_size + 8 <= atom.size && !avio_feof(pb)) {
3592 3593 3594 3595 3596 3597
        int (*parse)(MOVContext*, AVIOContext*, MOVAtom) = NULL;
        a.size = atom.size;
        a.type=0;
        if (atom.size >= 8) {
            a.size = avio_rb32(pb);
            a.type = avio_rl32(pb);
3598 3599 3600 3601 3602
            if (a.type == MKTAG('f','r','e','e') &&
                a.size >= 8 &&
                c->moov_retry) {
                uint8_t buf[8];
                uint32_t *type = (uint32_t *)buf + 1;
3603 3604
                if (avio_read(pb, buf, 8) != 8)
                    return AVERROR_INVALIDDATA;
3605 3606 3607 3608 3609 3610 3611
                avio_seek(pb, -8, SEEK_CUR);
                if (*type == MKTAG('m','v','h','d') ||
                    *type == MKTAG('c','m','o','v')) {
                    av_log(c->fc, AV_LOG_ERROR, "Detected moov in a free atom.\n");
                    a.type = MKTAG('m','o','o','v');
                }
            }
3612 3613 3614 3615 3616 3617 3618
            if (atom.type != MKTAG('r','o','o','t') &&
                atom.type != MKTAG('m','o','o','v'))
            {
                if (a.type == MKTAG('t','r','a','k') || a.type == MKTAG('m','d','a','t'))
                {
                    av_log(c->fc, AV_LOG_ERROR, "Broken file, trak/mdat not at top-level\n");
                    avio_skip(pb, -8);
3619
                    c->atom_depth --;
3620 3621 3622 3623
                    return 0;
                }
            }
            total_size += 8;
3624
            if (a.size == 1 && total_size + 8 <= atom.size) { /* 64 bit extended size */
3625 3626 3627
                a.size = avio_rb64(pb) - 8;
                total_size += 8;
            }
3628
        }
3629
        av_log(c->fc, AV_LOG_TRACE, "type: %08x '%.4s' parent:'%.4s' sz: %"PRId64" %"PRId64" %"PRId64"\n",
3630 3631
                a.type, (char*)&a.type, (char*)&atom.type, a.size, total_size, atom.size);
        if (a.size == 0) {
3632
            a.size = atom.size - total_size + 8;
3633 3634 3635 3636 3637 3638 3639 3640 3641 3642 3643 3644 3645 3646 3647 3648 3649 3650 3651 3652 3653 3654 3655
        }
        a.size -= 8;
        if (a.size < 0)
            break;
        a.size = FFMIN(a.size, atom.size - total_size);

        for (i = 0; mov_default_parse_table[i].type; i++)
            if (mov_default_parse_table[i].type == a.type) {
                parse = mov_default_parse_table[i].parse;
                break;
            }

        // container is user data
        if (!parse && (atom.type == MKTAG('u','d','t','a') ||
                       atom.type == MKTAG('i','l','s','t')))
            parse = mov_read_udta_string;

        if (!parse) { /* skip leaf atoms data */
            avio_skip(pb, a.size);
        } else {
            int64_t start_pos = avio_tell(pb);
            int64_t left;
            int err = parse(c, pb, a);
3656 3657
            if (err < 0) {
                c->atom_depth --;
3658
                return err;
3659
            }
3660 3661 3662 3663 3664
            if (c->found_moov && c->found_mdat &&
                ((!pb->seekable || c->fc->flags & AVFMT_FLAG_IGNIDX) ||
                 start_pos + a.size == avio_size(pb))) {
                if (!pb->seekable || c->fc->flags & AVFMT_FLAG_IGNIDX)
                    c->next_root_atom = start_pos + a.size;
3665
                c->atom_depth --;
3666 3667 3668 3669 3670
                return 0;
            }
            left = a.size - avio_tell(pb) + start_pos;
            if (left > 0) /* skip garbage at atom end */
                avio_skip(pb, left);
3671 3672 3673 3674
            else if (left < 0) {
                av_log(c->fc, AV_LOG_WARNING,
                       "overread end of atom '%.4s' by %"PRId64" bytes\n",
                       (char*)&a.type, -left);
3675 3676
                avio_seek(pb, left, SEEK_CUR);
            }
3677 3678 3679 3680 3681 3682 3683 3684
        }

        total_size += a.size;
    }

    if (total_size < atom.size && atom.size < 0x7ffff)
        avio_skip(pb, atom.size - total_size);

3685
    c->atom_depth --;
3686 3687 3688
    return 0;
}

F
Fabrice Bellard 已提交
3689 3690
static int mov_probe(AVProbeData *p)
{
3691
    int64_t offset;
3692
    uint32_t tag;
3693
    int score = 0;
3694
    int moov_offset = -1;
3695

F
Fabrice Bellard 已提交
3696
    /* check file header */
3697
    offset = 0;
3698
    for (;;) {
3699 3700
        /* ignore invalid offset */
        if ((offset + 8) > (unsigned int)p->buf_size)
3701
            break;
3702
        tag = AV_RL32(p->buf + offset + 4);
3703
        switch(tag) {
3704
        /* check for obvious tags */
3705
        case MKTAG('m','o','o','v'):
3706
            moov_offset = offset + 4;
3707 3708 3709
        case MKTAG('m','d','a','t'):
        case MKTAG('p','n','o','t'): /* detect movs with preview pics like ew.mov and april.mov */
        case MKTAG('u','d','t','a'): /* Packet Video PVAuthor adds this and a lot of more junk */
3710
        case MKTAG('f','t','y','p'):
3711 3712 3713 3714
            if (AV_RB32(p->buf+offset) < 8 &&
                (AV_RB32(p->buf+offset) != 1 ||
                 offset + 12 > (unsigned int)p->buf_size ||
                 AV_RB64(p->buf+offset + 8) == 0)) {
3715
                score = FFMAX(score, AVPROBE_SCORE_EXTENSION);
3716
            } else if (tag == MKTAG('f','t','y','p') &&
3717 3718 3719
                       (   AV_RL32(p->buf + offset + 8) == MKTAG('j','p','2',' ')
                        || AV_RL32(p->buf + offset + 8) == MKTAG('j','p','x',' ')
                    )) {
3720
                score = FFMAX(score, 5);
3721 3722 3723
            } else {
                score = AVPROBE_SCORE_MAX;
            }
3724 3725
            offset = FFMAX(4, AV_RB32(p->buf+offset)) + offset;
            break;
3726
        /* those are more common words, so rate then a bit less */
3727 3728 3729 3730 3731
        case MKTAG('e','d','i','w'): /* xdcam files have reverted first tags */
        case MKTAG('w','i','d','e'):
        case MKTAG('f','r','e','e'):
        case MKTAG('j','u','n','k'):
        case MKTAG('p','i','c','t'):
3732 3733 3734
            score  = FFMAX(score, AVPROBE_SCORE_MAX - 5);
            offset = FFMAX(4, AV_RB32(p->buf+offset)) + offset;
            break;
B
Baptiste Coudurier 已提交
3735
        case MKTAG(0x82,0x82,0x7f,0x7d):
3736 3737 3738
        case MKTAG('s','k','i','p'):
        case MKTAG('u','u','i','d'):
        case MKTAG('p','r','f','l'):
3739
            /* if we only find those cause probedata is too small at least rate them */
3740
            score  = FFMAX(score, AVPROBE_SCORE_EXTENSION);
3741
            offset = FFMAX(4, AV_RB32(p->buf+offset)) + offset;
3742 3743
            break;
        default:
3744 3745 3746
            offset = FFMAX(4, AV_RB32(p->buf+offset)) + offset;
        }
    }
3747
    if(score > AVPROBE_SCORE_MAX - 50 && moov_offset != -1) {
3748 3749 3750 3751
        /* moov atom in the header - we should make sure that this is not a
         * MOV-packed MPEG-PS */
        offset = moov_offset;

3752 3753 3754 3755 3756 3757 3758 3759
        while(offset < (p->buf_size - 16)){ /* Sufficient space */
               /* We found an actual hdlr atom */
            if(AV_RL32(p->buf + offset     ) == MKTAG('h','d','l','r') &&
               AV_RL32(p->buf + offset +  8) == MKTAG('m','h','l','r') &&
               AV_RL32(p->buf + offset + 12) == MKTAG('M','P','E','G')){
                av_log(NULL, AV_LOG_WARNING, "Found media data tag MPEG indicating this is a MOV-packed MPEG-PS.\n");
                /* We found a media handler reference atom describing an
                 * MPEG-PS-in-MOV, return a
3760 3761 3762 3763 3764 3765
                 * low score to force expanding the probe window until
                 * mpegps_probe finds what it needs */
                return 5;
            }else
                /* Keep looking */
                offset+=2;
3766
        }
3767
    }
3768 3769

    return score;
F
Fabrice Bellard 已提交
3770 3771
}

D
David Conrad 已提交
3772 3773 3774 3775 3776 3777 3778
// must be done after parsing all trak because there's no order requirement
static void mov_read_chapters(AVFormatContext *s)
{
    MOVContext *mov = s->priv_data;
    AVStream *st = NULL;
    MOVStreamContext *sc;
    int64_t cur_pos;
3779
    int i;
D
David Conrad 已提交
3780 3781 3782 3783 3784 3785 3786 3787 3788 3789 3790 3791 3792

    for (i = 0; i < s->nb_streams; i++)
        if (s->streams[i]->id == mov->chapter_track) {
            st = s->streams[i];
            break;
        }
    if (!st) {
        av_log(s, AV_LOG_ERROR, "Referenced QT chapter track not found\n");
        return;
    }

    st->discard = AVDISCARD_ALL;
    sc = st->priv_data;
3793
    cur_pos = avio_tell(sc->pb);
D
David Conrad 已提交
3794 3795 3796 3797

    for (i = 0; i < st->nb_index_entries; i++) {
        AVIndexEntry *sample = &st->index_entries[i];
        int64_t end = i+1 < st->nb_index_entries ? st->index_entries[i+1].timestamp : st->duration;
3798 3799 3800
        uint8_t *title;
        uint16_t ch;
        int len, title_len;
D
David Conrad 已提交
3801

3802 3803 3804 3805 3806
        if (end < sample->timestamp) {
            av_log(s, AV_LOG_WARNING, "ignoring stream duration which is shorter than chapters\n");
            end = AV_NOPTS_VALUE;
        }

A
Anton Khirnov 已提交
3807
        if (avio_seek(sc->pb, sample->pos, SEEK_SET) != sample->pos) {
D
David Conrad 已提交
3808 3809 3810 3811 3812
            av_log(s, AV_LOG_ERROR, "Chapter %d not found in file\n", i);
            goto finish;
        }

        // the first two bytes are the length of the title
3813
        len = avio_rb16(sc->pb);
D
David Conrad 已提交
3814 3815
        if (len > sample->size-2)
            continue;
3816 3817 3818
        title_len = 2*len + 1;
        if (!(title = av_mallocz(title_len)))
            goto finish;
D
David Conrad 已提交
3819 3820 3821 3822

        // The samples could theoretically be in any encoding if there's an encd
        // atom following, but in practice are only utf-8 or utf-16, distinguished
        // instead by the presence of a BOM
3823 3824 3825 3826 3827 3828 3829 3830 3831 3832 3833
        if (!len) {
            title[0] = 0;
        } else {
            ch = avio_rb16(sc->pb);
            if (ch == 0xfeff)
                avio_get_str16be(sc->pb, len, title, title_len);
            else if (ch == 0xfffe)
                avio_get_str16le(sc->pb, len, title, title_len);
            else {
                AV_WB16(title, ch);
                if (len == 1 || len == 2)
3834
                    title[len] = 0;
3835
                else
3836
                    avio_get_str(sc->pb, INT_MAX, title + 2, len - 1);
3837
            }
D
David Conrad 已提交
3838 3839
        }

3840
        avpriv_new_chapter(s, i, st->time_base, sample->timestamp, end, title);
3841
        av_freep(&title);
D
David Conrad 已提交
3842 3843
    }
finish:
A
Anton Khirnov 已提交
3844
    avio_seek(sc->pb, cur_pos, SEEK_SET);
D
David Conrad 已提交
3845 3846
}

3847
static int parse_timecode_in_framenum_format(AVFormatContext *s, AVStream *st,
3848
                                             uint32_t value, int flags)
3849
{
3850 3851 3852 3853 3854 3855 3856
    AVTimecode tc;
    char buf[AV_TIMECODE_STR_SIZE];
    AVRational rate = {st->codec->time_base.den,
                       st->codec->time_base.num};
    int ret = av_timecode_init(&tc, rate, flags, 0, s);
    if (ret < 0)
        return ret;
3857
    av_dict_set(&st->metadata, "timecode",
3858
                av_timecode_make_string(&tc, buf, value), 0);
3859 3860 3861 3862 3863 3864
    return 0;
}

static int mov_read_timecode_track(AVFormatContext *s, AVStream *st)
{
    MOVStreamContext *sc = st->priv_data;
3865
    int flags = 0;
3866 3867 3868 3869 3870 3871 3872 3873 3874
    int64_t cur_pos = avio_tell(sc->pb);
    uint32_t value;

    if (!st->nb_index_entries)
        return -1;

    avio_seek(sc->pb, st->index_entries->pos, SEEK_SET);
    value = avio_rb32(s->pb);

3875 3876 3877 3878
    if (sc->tmcd_flags & 0x0001) flags |= AV_TIMECODE_FLAG_DROPFRAME;
    if (sc->tmcd_flags & 0x0002) flags |= AV_TIMECODE_FLAG_24HOURSMAX;
    if (sc->tmcd_flags & 0x0004) flags |= AV_TIMECODE_FLAG_ALLOWNEGATIVE;

3879 3880 3881 3882 3883
    /* Assume Counter flag is set to 1 in tmcd track (even though it is likely
     * not the case) and thus assume "frame number format" instead of QT one.
     * No sample with tmcd track can be found with a QT timecode at the moment,
     * despite what the tmcd track "suggests" (Counter flag set to 0 means QT
     * format). */
3884
    parse_timecode_in_framenum_format(s, st, value, flags);
3885 3886 3887 3888 3889

    avio_seek(sc->pb, cur_pos, SEEK_SET);
    return 0;
}

3890 3891 3892 3893 3894 3895 3896 3897 3898 3899 3900 3901 3902 3903 3904
static int mov_read_close(AVFormatContext *s)
{
    MOVContext *mov = s->priv_data;
    int i, j;

    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;

        av_freep(&sc->ctts_data);
        for (j = 0; j < sc->drefs_count; j++) {
            av_freep(&sc->drefs[j].path);
            av_freep(&sc->drefs[j].dir);
        }
        av_freep(&sc->drefs);
3905 3906 3907

        sc->drefs_count = 0;

3908
        if (!sc->pb_is_copied)
3909
            avio_closep(&sc->pb);
3910

3911
        sc->pb = NULL;
3912 3913
        av_freep(&sc->chunk_offsets);
        av_freep(&sc->stsc_data);
3914 3915
        av_freep(&sc->sample_sizes);
        av_freep(&sc->keyframes);
3916
        av_freep(&sc->stts_data);
3917
        av_freep(&sc->stps_data);
3918
        av_freep(&sc->elst_data);
3919
        av_freep(&sc->rap_group);
3920
        av_freep(&sc->display_matrix);
3921 3922 3923
    }

    if (mov->dv_demux) {
3924 3925
        avformat_free_context(mov->dv_fctx);
        mov->dv_fctx = NULL;
3926 3927 3928
    }

    av_freep(&mov->trex_data);
3929
    av_freep(&mov->bitrates);
3930

3931 3932 3933 3934 3935 3936 3937
    for (i = 0; i < mov->fragment_index_count; i++) {
        MOVFragmentIndex* index = mov->fragment_index_data[i];
        av_freep(&index->items);
        av_freep(&mov->fragment_index_data[i]);
    }
    av_freep(&mov->fragment_index_data);

3938 3939 3940
    return 0;
}

3941 3942
static int tmcd_is_referenced(AVFormatContext *s, int tmcd_id)
{
3943
    int i;
3944 3945 3946 3947 3948

    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;

3949 3950 3951
        if (st->codec->codec_type == AVMEDIA_TYPE_VIDEO &&
            sc->timecode_track == tmcd_id)
            return 1;
3952 3953 3954 3955 3956 3957 3958 3959 3960 3961 3962 3963 3964 3965 3966 3967 3968 3969 3970 3971 3972 3973 3974
    }
    return 0;
}

/* look for a tmcd track not referenced by any video track, and export it globally */
static void export_orphan_timecode(AVFormatContext *s)
{
    int i;

    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];

        if (st->codec->codec_tag  == MKTAG('t','m','c','d') &&
            !tmcd_is_referenced(s, i + 1)) {
            AVDictionaryEntry *tcr = av_dict_get(st->metadata, "timecode", NULL, 0);
            if (tcr) {
                av_dict_set(&s->metadata, "timecode", tcr->value, 0);
                break;
            }
        }
    }
}

3975 3976 3977
static int read_tfra(MOVContext *mov, AVIOContext *f)
{
    MOVFragmentIndex* index = NULL;
3978
    int version, fieldlength, i, j;
3979 3980
    int64_t pos = avio_tell(f);
    uint32_t size = avio_rb32(f);
3981 3982
    void *tmp;

3983
    if (avio_rb32(f) != MKBETAG('t', 'f', 'r', 'a')) {
3984
        return 1;
3985 3986 3987 3988 3989 3990
    }
    av_log(mov->fc, AV_LOG_VERBOSE, "found tfra\n");
    index = av_mallocz(sizeof(MOVFragmentIndex));
    if (!index) {
        return AVERROR(ENOMEM);
    }
3991 3992 3993 3994 3995

    tmp = av_realloc_array(mov->fragment_index_data,
                           mov->fragment_index_count + 1,
                           sizeof(MOVFragmentIndex*));
    if (!tmp) {
3996
        av_freep(&index);
3997
        return AVERROR(ENOMEM);
3998
    }
3999 4000
    mov->fragment_index_data = tmp;
    mov->fragment_index_data[mov->fragment_index_count++] = index;
4001 4002 4003 4004 4005 4006

    version = avio_r8(f);
    avio_rb24(f);
    index->track_id = avio_rb32(f);
    fieldlength = avio_rb32(f);
    index->item_count = avio_rb32(f);
4007 4008
    index->items = av_mallocz_array(
            index->item_count, sizeof(MOVFragmentIndexItem));
4009
    if (!index->items) {
4010
        index->item_count = 0;
4011 4012 4013 4014 4015 4016 4017 4018 4019 4020 4021 4022 4023 4024 4025 4026 4027 4028 4029 4030 4031 4032 4033 4034 4035 4036 4037 4038 4039
        return AVERROR(ENOMEM);
    }
    for (i = 0; i < index->item_count; i++) {
        int64_t time, offset;
        if (version == 1) {
            time   = avio_rb64(f);
            offset = avio_rb64(f);
        } else {
            time   = avio_rb32(f);
            offset = avio_rb32(f);
        }
        index->items[i].time = time;
        index->items[i].moof_offset = offset;
        for (j = 0; j < ((fieldlength >> 4) & 3) + 1; j++)
            avio_r8(f);
        for (j = 0; j < ((fieldlength >> 2) & 3) + 1; j++)
            avio_r8(f);
        for (j = 0; j < ((fieldlength >> 0) & 3) + 1; j++)
            avio_r8(f);
    }

    avio_seek(f, pos + size, SEEK_SET);
    return 0;
}

static int mov_read_mfra(MOVContext *c, AVIOContext *f)
{
    int64_t stream_size = avio_size(f);
    int64_t original_pos = avio_tell(f);
4040
    int64_t seek_ret;
4041 4042
    int32_t mfra_size;
    int ret = -1;
4043 4044 4045 4046
    if ((seek_ret = avio_seek(f, stream_size - 4, SEEK_SET)) < 0) {
        ret = seek_ret;
        goto fail;
    }
4047 4048 4049 4050 4051
    mfra_size = avio_rb32(f);
    if (mfra_size < 0 || mfra_size > stream_size) {
        av_log(c->fc, AV_LOG_DEBUG, "doesn't look like mfra (unreasonable size)\n");
        goto fail;
    }
4052 4053 4054 4055
    if ((seek_ret = avio_seek(f, -mfra_size, SEEK_CUR)) < 0) {
        ret = seek_ret;
        goto fail;
    }
4056 4057 4058 4059 4060 4061 4062 4063 4064
    if (avio_rb32(f) != mfra_size) {
        av_log(c->fc, AV_LOG_DEBUG, "doesn't look like mfra (size mismatch)\n");
        goto fail;
    }
    if (avio_rb32(f) != MKBETAG('m', 'f', 'r', 'a')) {
        av_log(c->fc, AV_LOG_DEBUG, "doesn't look like mfra (tag mismatch)\n");
        goto fail;
    }
    av_log(c->fc, AV_LOG_VERBOSE, "stream has mfra\n");
4065 4066 4067 4068 4069 4070
    do {
        ret = read_tfra(c, f);
        if (ret < 0)
            goto fail;
    } while (!ret);
    ret = 0;
4071
fail:
4072 4073
    seek_ret = avio_seek(f, original_pos, SEEK_SET);
    if (seek_ret < 0) {
4074 4075
        av_log(c->fc, AV_LOG_ERROR,
               "failed to seek back after looking for mfra\n");
4076 4077
        ret = seek_ret;
    }
4078 4079 4080
    return ret;
}

4081
static int mov_read_header(AVFormatContext *s)
4082
{
4083
    MOVContext *mov = s->priv_data;
4084
    AVIOContext *pb = s->pb;
4085
    int j, err;
4086
    MOVAtom atom = { AV_RL32("root") };
4087
    int i;
4088 4089

    mov->fc = s;
4090
    /* .mov and .mp4 aren't streamable anyway (only progressive download if moov is before mdat) */
4091
    if (pb->seekable)
A
Anton Khirnov 已提交
4092
        atom.size = avio_size(pb);
4093
    else
B
Baptiste Coudurier 已提交
4094
        atom.size = INT64_MAX;
4095 4096

    /* check MOV header */
4097 4098 4099
    do {
    if (mov->moov_retry)
        avio_seek(pb, 0, SEEK_SET);
B
Baptiste Coudurier 已提交
4100
    if ((err = mov_read_default(mov, pb, atom)) < 0) {
4101
        av_log(s, AV_LOG_ERROR, "error reading header\n");
4102
        mov_read_close(s);
B
Baptiste Coudurier 已提交
4103 4104
        return err;
    }
4105
    } while (pb->seekable && !mov->found_moov && !mov->moov_retry++);
B
Baptiste Coudurier 已提交
4106 4107
    if (!mov->found_moov) {
        av_log(s, AV_LOG_ERROR, "moov atom not found\n");
4108
        mov_read_close(s);
4109
        return AVERROR_INVALIDDATA;
4110
    }
4111
    av_log(mov->fc, AV_LOG_TRACE, "on_parse_exit_offset=%"PRId64"\n", avio_tell(pb));
4112

4113 4114 4115 4116 4117 4118 4119
    if (pb->seekable) {
        if (mov->chapter_track > 0)
            mov_read_chapters(s);
        for (i = 0; i < s->nb_streams; i++)
            if (s->streams[i]->codec->codec_tag == AV_RL32("tmcd"))
                mov_read_timecode_track(s, s->streams[i]);
    }
D
David Conrad 已提交
4120

4121 4122 4123 4124
    /* copy timecode metadata from tmcd tracks to the related video streams */
    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;
4125
        if (sc->timecode_track > 0) {
4126
            AVDictionaryEntry *tcr;
4127
            int tmcd_st_id = -1;
4128

4129 4130 4131 4132
            for (j = 0; j < s->nb_streams; j++)
                if (s->streams[j]->id == sc->timecode_track)
                    tmcd_st_id = j;

4133
            if (tmcd_st_id < 0 || tmcd_st_id == i)
4134 4135 4136 4137 4138 4139
                continue;
            tcr = av_dict_get(s->streams[tmcd_st_id]->metadata, "timecode", NULL, 0);
            if (tcr)
                av_dict_set(&st->metadata, "timecode", tcr->value, 0);
        }
    }
4140
    export_orphan_timecode(s);
4141

4142 4143 4144
    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;
4145
        fix_timescale(mov, sc);
4146
        if(st->codec->codec_type == AVMEDIA_TYPE_AUDIO && st->codec->codec_id == AV_CODEC_ID_AAC) {
4147 4148
            st->skip_samples = sc->start_pad;
        }
4149 4150
        if (st->codec->codec_type == AVMEDIA_TYPE_VIDEO && sc->nb_frames_for_fps > 0 && sc->duration_for_fps > 0)
            av_reduce(&st->avg_frame_rate.num, &st->avg_frame_rate.den,
4151
                      sc->time_scale*(int64_t)sc->nb_frames_for_fps, sc->duration_for_fps, INT_MAX);
4152
        if (st->codec->codec_type == AVMEDIA_TYPE_SUBTITLE) {
V
Vittorio Giovara 已提交
4153
            if (st->codec->width <= 0 || st->codec->height <= 0) {
4154 4155 4156
                st->codec->width  = sc->width;
                st->codec->height = sc->height;
            }
4157 4158 4159 4160
            if (st->codec->codec_id == AV_CODEC_ID_DVD_SUBTITLE) {
                if ((err = mov_rewrite_dvd_sub_extradata(st)) < 0)
                    return err;
            }
4161
        }
4162 4163
    }

4164 4165 4166 4167
    if (mov->trex_data) {
        for (i = 0; i < s->nb_streams; i++) {
            AVStream *st = s->streams[i];
            MOVStreamContext *sc = st->priv_data;
4168
            if (st->duration > 0)
4169 4170 4171 4172
                st->codec->bit_rate = sc->data_size * 8 * sc->time_scale / st->duration;
        }
    }

4173 4174 4175 4176 4177 4178 4179 4180 4181 4182 4183
    if (mov->use_mfra_for > 0) {
        for (i = 0; i < s->nb_streams; i++) {
            AVStream *st = s->streams[i];
            MOVStreamContext *sc = st->priv_data;
            if (sc->duration_for_fps > 0) {
                st->codec->bit_rate = sc->data_size * 8 * sc->time_scale /
                    sc->duration_for_fps;
            }
        }
    }

4184 4185 4186 4187 4188 4189
    for (i = 0; i < mov->bitrates_count && i < s->nb_streams; i++) {
        if (mov->bitrates[i]) {
            s->streams[i]->codec->bit_rate = mov->bitrates[i];
        }
    }

4190 4191
    ff_rfps_calculate(s);

4192 4193
    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
4194
        MOVStreamContext *sc = st->priv_data;
4195

4196 4197 4198 4199 4200 4201 4202 4203 4204 4205 4206 4207 4208 4209 4210 4211 4212 4213 4214 4215 4216 4217 4218 4219 4220 4221 4222
        switch (st->codec->codec_type) {
        case AVMEDIA_TYPE_AUDIO:
            err = ff_replaygain_export(st, s->metadata);
            if (err < 0) {
                mov_read_close(s);
                return err;
            }
            break;
        case AVMEDIA_TYPE_VIDEO:
            if (sc->display_matrix) {
                AVPacketSideData *sd, *tmp;

                tmp = av_realloc_array(st->side_data,
                                       st->nb_side_data + 1, sizeof(*tmp));
                if (!tmp)
                    return AVERROR(ENOMEM);

                st->side_data = tmp;
                st->nb_side_data++;

                sd = &st->side_data[st->nb_side_data - 1];
                sd->type = AV_PKT_DATA_DISPLAYMATRIX;
                sd->size = sizeof(int32_t) * 9;
                sd->data = (uint8_t*)sc->display_matrix;
                sc->display_matrix = NULL;
            }
            break;
4223 4224 4225
        }
    }

4226 4227 4228
    return 0;
}

4229
static AVIndexEntry *mov_find_next_sample(AVFormatContext *s, AVStream **st)
4230
{
4231
    AVIndexEntry *sample = NULL;
4232
    int64_t best_dts = INT64_MAX;
4233
    int i;
B
Baptiste Coudurier 已提交
4234
    for (i = 0; i < s->nb_streams; i++) {
4235 4236
        AVStream *avst = s->streams[i];
        MOVStreamContext *msc = avst->priv_data;
4237
        if (msc->pb && msc->current_sample < avst->nb_index_entries) {
4238
            AVIndexEntry *current_sample = &avst->index_entries[msc->current_sample];
4239
            int64_t dts = av_rescale(current_sample->timestamp, AV_TIME_BASE, msc->time_scale);
4240
            av_log(s, AV_LOG_TRACE, "stream %d, sample %d, dts %"PRId64"\n", i, msc->current_sample, dts);
4241 4242
            if (!sample || (!s->pb->seekable && current_sample->pos < sample->pos) ||
                (s->pb->seekable &&
4243
                 ((msc->pb != s->pb && dts < best_dts) || (msc->pb == s->pb &&
B
Baptiste Coudurier 已提交
4244
                 ((FFABS(best_dts - dts) <= AV_TIME_BASE && current_sample->pos < sample->pos) ||
4245
                  (FFABS(best_dts - dts) > AV_TIME_BASE && dts < best_dts)))))) {
4246 4247
                sample = current_sample;
                best_dts = dts;
4248
                *st = avst;
4249
            }
4250 4251
        }
    }
4252 4253 4254 4255 4256 4257 4258 4259 4260 4261
    return sample;
}

static int mov_read_packet(AVFormatContext *s, AVPacket *pkt)
{
    MOVContext *mov = s->priv_data;
    MOVStreamContext *sc;
    AVIndexEntry *sample;
    AVStream *st = NULL;
    int ret;
4262
    mov->fc = s;
4263 4264
 retry:
    sample = mov_find_next_sample(s, &st);
4265 4266
    if (!sample) {
        mov->found_mdat = 0;
4267 4268
        if (!mov->next_root_atom)
            return AVERROR_EOF;
4269 4270 4271 4272
        if (avio_seek(s->pb, mov->next_root_atom, SEEK_SET) != mov->next_root_atom) {
            av_log(mov->fc, AV_LOG_ERROR, "next root atom offset 0x%"PRIx64": partial file\n", mov->next_root_atom);
            return AVERROR_INVALIDDATA;
        }
4273 4274
        mov->next_root_atom = 0;
        if (mov_read_default(mov, s->pb, (MOVAtom){ AV_RL32("root"), INT64_MAX }) < 0 ||
4275
            avio_feof(s->pb))
B
Baptiste Coudurier 已提交
4276
            return AVERROR_EOF;
4277
        av_log(s, AV_LOG_TRACE, "read fragments, offset 0x%"PRIx64"\n", avio_tell(s->pb));
4278 4279
        goto retry;
    }
4280
    sc = st->priv_data;
4281 4282
    /* must be done just before reading, to avoid infinite loop on sample */
    sc->current_sample++;
4283

4284 4285 4286 4287 4288
    if (mov->next_root_atom) {
        sample->pos = FFMIN(sample->pos, mov->next_root_atom);
        sample->size = FFMIN(sample->size, (mov->next_root_atom - sample->pos));
    }

4289
    if (st->discard != AVDISCARD_ALL) {
A
Anton Khirnov 已提交
4290
        if (avio_seek(sc->pb, sample->pos, SEEK_SET) != sample->pos) {
R
Reimar Döffinger 已提交
4291 4292
            av_log(mov->fc, AV_LOG_ERROR, "stream %d, offset 0x%"PRIx64": partial file\n",
                   sc->ffindex, sample->pos);
4293
            return AVERROR_INVALIDDATA;
R
Reimar Döffinger 已提交
4294 4295
        }
        ret = av_get_packet(sc->pb, pkt, sample->size);
4296 4297
        if (ret < 0)
            return ret;
4298 4299 4300 4301 4302 4303 4304 4305 4306 4307 4308
        if (sc->has_palette) {
            uint8_t *pal;

            pal = av_packet_new_side_data(pkt, AV_PKT_DATA_PALETTE, AVPALETTE_SIZE);
            if (!pal) {
                av_log(mov->fc, AV_LOG_ERROR, "Cannot append palette to packet\n");
            } else {
                memcpy(pal, sc->palette, AVPALETTE_SIZE);
                sc->has_palette = 0;
            }
        }
R
Reimar Döffinger 已提交
4309 4310
#if CONFIG_DV_DEMUXER
        if (mov->dv_demux && sc->dv_audio_container) {
4311
            avpriv_dv_produce_packet(mov->dv_demux, pkt, pkt->data, pkt->size, pkt->pos);
4312
            av_freep(&pkt->data);
R
Reimar Döffinger 已提交
4313
            pkt->size = 0;
4314
            ret = avpriv_dv_get_packet(mov->dv_demux, pkt);
R
Reimar Döffinger 已提交
4315 4316 4317
            if (ret < 0)
                return ret;
        }
4318
#endif
4319 4320
    }

4321
    pkt->stream_index = sc->ffindex;
4322
    pkt->dts = sample->timestamp;
4323
    if (sc->ctts_data && sc->ctts_index < sc->ctts_count) {
4324
        pkt->pts = pkt->dts + sc->dts_shift + sc->ctts_data[sc->ctts_index].duration;
4325
        /* update ctts context */
4326 4327 4328 4329 4330
        sc->ctts_sample++;
        if (sc->ctts_index < sc->ctts_count &&
            sc->ctts_data[sc->ctts_index].count == sc->ctts_sample) {
            sc->ctts_index++;
            sc->ctts_sample = 0;
4331
        }
4332 4333
        if (sc->wrong_dts)
            pkt->dts = AV_NOPTS_VALUE;
4334
    } else {
4335
        int64_t next_dts = (sc->current_sample < st->nb_index_entries) ?
4336 4337
            st->index_entries[sc->current_sample].timestamp : st->duration;
        pkt->duration = next_dts - pkt->dts;
4338
        pkt->pts = pkt->dts;
4339
    }
4340 4341
    if (st->discard == AVDISCARD_ALL)
        goto retry;
4342
    pkt->flags |= sample->flags & AVINDEX_KEYFRAME ? AV_PKT_FLAG_KEY : 0;
4343
    pkt->pos = sample->pos;
4344

4345 4346
    return 0;
}
4347

4348
static int mov_seek_stream(AVFormatContext *s, AVStream *st, int64_t timestamp, int flags)
4349 4350 4351 4352
{
    MOVStreamContext *sc = st->priv_data;
    int sample, time_sample;
    int i;
4353

4354
    sample = av_index_search_timestamp(st, timestamp, flags);
4355
    av_log(s, AV_LOG_TRACE, "stream %d, timestamp %"PRId64", sample %d\n", st->index, timestamp, sample);
4356 4357
    if (sample < 0 && st->nb_index_entries && timestamp < st->index_entries[0].timestamp)
        sample = 0;
4358
    if (sample < 0) /* not sure what to do */
4359
        return AVERROR_INVALIDDATA;
4360
    sc->current_sample = sample;
4361
    av_log(s, AV_LOG_TRACE, "stream %d, found sample %d\n", st->index, sc->current_sample);
4362 4363 4364 4365
    /* adjust ctts index */
    if (sc->ctts_data) {
        time_sample = 0;
        for (i = 0; i < sc->ctts_count; i++) {
4366 4367
            int next = time_sample + sc->ctts_data[i].count;
            if (next > sc->current_sample) {
4368 4369
                sc->ctts_index = i;
                sc->ctts_sample = sc->current_sample - time_sample;
4370
                break;
4371
            }
4372
            time_sample = next;
4373 4374
        }
    }
4375
    return sample;
4376 4377
}

4378
static int mov_read_seek(AVFormatContext *s, int stream_index, int64_t sample_time, int flags)
G
Gael Chardon 已提交
4379
{
4380
    MOVContext *mc = s->priv_data;
4381 4382 4383
    AVStream *st;
    int sample;
    int i;
G
Gael Chardon 已提交
4384

4385
    if (stream_index >= s->nb_streams)
4386
        return AVERROR_INVALIDDATA;
G
Gael Chardon 已提交
4387

4388
    st = s->streams[stream_index];
4389
    sample = mov_seek_stream(s, st, sample_time, flags);
4390
    if (sample < 0)
4391
        return sample;
G
Gael Chardon 已提交
4392

4393 4394 4395
    if (mc->seek_individually) {
        /* adjust seek timestamp to found sample timestamp */
        int64_t seek_timestamp = st->index_entries[sample].timestamp;
G
Gael Chardon 已提交
4396

4397 4398 4399 4400 4401
        for (i = 0; i < s->nb_streams; i++) {
            int64_t timestamp;
            MOVStreamContext *sc = s->streams[i]->priv_data;
            st = s->streams[i];
            st->skip_samples = (sample_time <= 0) ? sc->start_pad : 0;
4402

4403 4404
            if (stream_index == i)
                continue;
G
Gael Chardon 已提交
4405

4406 4407 4408 4409 4410 4411 4412 4413 4414 4415 4416 4417 4418 4419 4420 4421 4422 4423 4424 4425
            timestamp = av_rescale_q(seek_timestamp, s->streams[stream_index]->time_base, st->time_base);
            mov_seek_stream(s, st, timestamp, flags);
        }
    } else {
        for (i = 0; i < s->nb_streams; i++) {
            MOVStreamContext *sc;
            st = s->streams[i];
            sc = st->priv_data;
            sc->current_sample = 0;
        }
        while (1) {
            MOVStreamContext *sc;
            AVIndexEntry *entry = mov_find_next_sample(s, &st);
            if (!entry)
                return AVERROR_INVALIDDATA;
            sc = st->priv_data;
            if (sc->ffindex == stream_index && sc->current_sample == sample)
                break;
            sc->current_sample++;
        }
4426
    }
G
Gael Chardon 已提交
4427 4428 4429
    return 0;
}

4430 4431 4432
#define OFFSET(x) offsetof(MOVContext, x)
#define FLAGS AV_OPT_FLAG_VIDEO_PARAM | AV_OPT_FLAG_DECODING_PARAM
static const AVOption mov_options[] = {
4433 4434
    {"use_absolute_path",
        "allow using absolute path when opening alias, this is a possible security issue",
4435 4436
        OFFSET(use_absolute_path), FF_OPT_TYPE_INT, {.i64 = 0},
        0, 1, FLAGS},
4437 4438 4439 4440
    {"seek_streams_individually",
        "Seek each stream individually to the to the closest point",
        OFFSET(seek_individually), AV_OPT_TYPE_INT, { .i64 = 1 },
        0, 1, FLAGS},
4441 4442
    {"ignore_editlist", "", OFFSET(ignore_editlist), FF_OPT_TYPE_INT, {.i64 = 0},
        0, 1, FLAGS},
4443 4444
    {"use_mfra_for",
        "use mfra for fragment timestamps",
4445 4446
        OFFSET(use_mfra_for), FF_OPT_TYPE_INT, {.i64 = FF_MOV_FLAG_MFRA_AUTO},
        -1, FF_MOV_FLAG_MFRA_PTS, FLAGS,
4447
        "use_mfra_for"},
4448
    {"auto", "auto", 0, AV_OPT_TYPE_CONST, {.i64 = FF_MOV_FLAG_MFRA_AUTO}, 0, 0,
4449
        FLAGS, "use_mfra_for" },
4450
    {"dts", "dts", 0, AV_OPT_TYPE_CONST, {.i64 = FF_MOV_FLAG_MFRA_DTS}, 0, 0,
4451
        FLAGS, "use_mfra_for" },
4452
    {"pts", "pts", 0, AV_OPT_TYPE_CONST, {.i64 = FF_MOV_FLAG_MFRA_PTS}, 0, 0,
4453
        FLAGS, "use_mfra_for" },
4454 4455
    { "export_all", "Export unrecognized metadata entries", OFFSET(export_all),
        AV_OPT_TYPE_INT, { .i64 = 0 }, 0, 1, .flags = FLAGS },
4456
    { "export_xmp", "Export full XMP metadata", OFFSET(export_xmp),
4457
        AV_OPT_TYPE_INT, { .i64 = 0 }, 0, 1, .flags = FLAGS },
4458
    { NULL },
4459 4460
};

4461
static const AVClass mov_class = {
4462 4463
    .class_name = "mov,mp4,m4a,3gp,3g2,mj2",
    .item_name  = av_default_item_name,
4464
    .option     = mov_options,
4465 4466
    .version    = LIBAVUTIL_VERSION_INT,
};
4467

4468
AVInputFormat ff_mov_demuxer = {
4469
    .name           = "mov,mp4,m4a,3gp,3g2,mj2",
4470
    .long_name      = NULL_IF_CONFIG_SMALL("QuickTime / MOV"),
4471
    .priv_class     = &mov_class,
4472
    .priv_data_size = sizeof(MOVContext),
4473
    .extensions     = "mov,mp4,m4a,3gp,3g2,mj2",
4474 4475 4476 4477 4478
    .read_probe     = mov_probe,
    .read_header    = mov_read_header,
    .read_packet    = mov_read_packet,
    .read_close     = mov_read_close,
    .read_seek      = mov_read_seek,
4479
    .flags          = AVFMT_NO_BYTE_SEEK,
4480
};