mov.c 111.1 KB
Newer Older
1
/*
2
 * MOV demuxer
3
 * Copyright (c) 2001 Fabrice Bellard
4
 * Copyright (c) 2009 Baptiste Coudurier <baptiste dot coudurier at gmail dot com>
5
 *
6 7 8
 * first version by Francois Revol <revol@free.fr>
 * seek function by Gael Chardon <gael.dev@4now.net>
 *
9
 * This file is part of Libav.
10
 *
11
 * Libav is free software; you can redistribute it and/or
F
Fabrice Bellard 已提交
12 13
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
14
 * version 2.1 of the License, or (at your option) any later version.
15
 *
16
 * Libav is distributed in the hope that it will be useful,
17
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
F
Fabrice Bellard 已提交
18 19
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
20
 *
F
Fabrice Bellard 已提交
21
 * You should have received a copy of the GNU Lesser General Public
22
 * License along with Libav; if not, write to the Free Software
23
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
24
 */
25

26
#include <inttypes.h>
27
#include <limits.h>
28
#include <stdint.h>
29

30
//#define MOV_EXPORT_ALL_METADATA
31

32
#include "libavutil/attributes.h"
33
#include "libavutil/channel_layout.h"
34
#include "libavutil/intreadwrite.h"
35
#include "libavutil/intfloat.h"
36
#include "libavutil/mathematics.h"
37
#include "libavutil/time_internal.h"
38
#include "libavutil/avstring.h"
39
#include "libavutil/dict.h"
40
#include "libavcodec/ac3tab.h"
41
#include "avformat.h"
42
#include "internal.h"
43
#include "avio_internal.h"
44
#include "riff.h"
45
#include "isom.h"
46
#include "libavcodec/get_bits.h"
R
Raivo Hool 已提交
47
#include "id3v1.h"
48
#include "mov_chan.h"
49
#include "replaygain.h"
50

51
#if CONFIG_ZLIB
52 53 54
#include <zlib.h>
#endif

55 56
#include "qtpalette.h"

G
Gael Chardon 已提交
57

58 59 60
#undef NDEBUG
#include <assert.h>

61 62 63
/* those functions parse an atom */
/* links atom IDs to parse functions */
typedef struct MOVParseTableEntry {
64
    uint32_t type;
65
    int (*parse)(MOVContext *ctx, AVIOContext *pb, MOVAtom atom);
66 67
} MOVParseTableEntry;

68
static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom);
69

70 71
static int mov_metadata_track_or_disc_number(MOVContext *c, AVIOContext *pb,
                                             unsigned len, const char *key)
B
Baptiste Coudurier 已提交
72 73 74
{
    char buf[16];

75
    short current, total = 0;
76
    avio_rb16(pb); // unknown
77
    current = avio_rb16(pb);
78 79
    if (len >= 6)
        total = avio_rb16(pb);
80 81 82 83
    if (!total)
        snprintf(buf, sizeof(buf), "%d", current);
    else
        snprintf(buf, sizeof(buf), "%d/%d", current, total);
84
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
85
    av_dict_set(&c->fc->metadata, key, buf, 0);
B
Baptiste Coudurier 已提交
86 87 88 89

    return 0;
}

90 91
static int mov_metadata_int8_bypass_padding(MOVContext *c, AVIOContext *pb,
                                            unsigned len, const char *key)
92
{
93
    char buf[16];
94

95 96 97 98
    /* bypass padding bytes */
    avio_r8(pb);
    avio_r8(pb);
    avio_r8(pb);
99

100
    snprintf(buf, sizeof(buf), "%d", avio_r8(pb));
101
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
102
    av_dict_set(&c->fc->metadata, key, buf, 0);
103

104
    return 0;
105 106
}

107 108
static int mov_metadata_int8_no_padding(MOVContext *c, AVIOContext *pb,
                                        unsigned len, const char *key)
109
{
110
    char buf[16];
111

112
    snprintf(buf, sizeof(buf), "%d", avio_r8(pb));
113
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
114
    av_dict_set(&c->fc->metadata, key, buf, 0);
115

116
    return 0;
117 118
}

R
Raivo Hool 已提交
119 120 121 122 123 124 125 126 127 128 129 130
static int mov_metadata_gnre(MOVContext *c, AVIOContext *pb,
                             unsigned len, const char *key)
{
    short genre;
    char buf[20];

    avio_r8(pb); // unknown

    genre = avio_r8(pb);
    if (genre < 1 || genre > ID3v1_GENRE_MAX)
        return 0;
    snprintf(buf, sizeof(buf), "%s", ff_id3v1_genre_str[genre-1]);
131
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
R
Raivo Hool 已提交
132 133 134 135 136
    av_dict_set(&c->fc->metadata, key, buf, 0);

    return 0;
}

137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155
static const uint32_t mac_to_unicode[128] = {
    0x00C4,0x00C5,0x00C7,0x00C9,0x00D1,0x00D6,0x00DC,0x00E1,
    0x00E0,0x00E2,0x00E4,0x00E3,0x00E5,0x00E7,0x00E9,0x00E8,
    0x00EA,0x00EB,0x00ED,0x00EC,0x00EE,0x00EF,0x00F1,0x00F3,
    0x00F2,0x00F4,0x00F6,0x00F5,0x00FA,0x00F9,0x00FB,0x00FC,
    0x2020,0x00B0,0x00A2,0x00A3,0x00A7,0x2022,0x00B6,0x00DF,
    0x00AE,0x00A9,0x2122,0x00B4,0x00A8,0x2260,0x00C6,0x00D8,
    0x221E,0x00B1,0x2264,0x2265,0x00A5,0x00B5,0x2202,0x2211,
    0x220F,0x03C0,0x222B,0x00AA,0x00BA,0x03A9,0x00E6,0x00F8,
    0x00BF,0x00A1,0x00AC,0x221A,0x0192,0x2248,0x2206,0x00AB,
    0x00BB,0x2026,0x00A0,0x00C0,0x00C3,0x00D5,0x0152,0x0153,
    0x2013,0x2014,0x201C,0x201D,0x2018,0x2019,0x00F7,0x25CA,
    0x00FF,0x0178,0x2044,0x20AC,0x2039,0x203A,0xFB01,0xFB02,
    0x2021,0x00B7,0x201A,0x201E,0x2030,0x00C2,0x00CA,0x00C1,
    0x00CB,0x00C8,0x00CD,0x00CE,0x00CF,0x00CC,0x00D3,0x00D4,
    0xF8FF,0x00D2,0x00DA,0x00DB,0x00D9,0x0131,0x02C6,0x02DC,
    0x00AF,0x02D8,0x02D9,0x02DA,0x00B8,0x02DD,0x02DB,0x02C7,
};

156
static int mov_read_mac_string(MOVContext *c, AVIOContext *pb, int len,
157 158 159 160 161 162 163
                               char *dst, int dstlen)
{
    char *p = dst;
    char *end = dst+dstlen-1;
    int i;

    for (i = 0; i < len; i++) {
164
        uint8_t t, c = avio_r8(pb);
165 166 167 168 169 170 171 172 173
        if (c < 0x80 && p < end)
            *p++ = c;
        else
            PUT_UTF8(mac_to_unicode[c-0x80], t, if (p < end) *p++ = t;);
    }
    *p = 0;
    return p - dst;
}

A
Anton Khirnov 已提交
174 175 176 177 178
static int mov_read_covr(MOVContext *c, AVIOContext *pb, int type, int len)
{
    AVPacket pkt;
    AVStream *st;
    MOVStreamContext *sc;
179
    enum AVCodecID id;
A
Anton Khirnov 已提交
180 181 182
    int ret;

    switch (type) {
183 184 185
    case 0xd:  id = AV_CODEC_ID_MJPEG; break;
    case 0xe:  id = AV_CODEC_ID_PNG;   break;
    case 0x1b: id = AV_CODEC_ID_BMP;   break;
A
Anton Khirnov 已提交
186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215
    default:
        av_log(c->fc, AV_LOG_WARNING, "Unknown cover type: 0x%x.\n", type);
        avio_skip(pb, len);
        return 0;
    }

    st = avformat_new_stream(c->fc, NULL);
    if (!st)
        return AVERROR(ENOMEM);
    sc = av_mallocz(sizeof(*sc));
    if (!sc)
        return AVERROR(ENOMEM);
    st->priv_data = sc;

    ret = av_get_packet(pb, &pkt, len);
    if (ret < 0)
        return ret;

    st->disposition              |= AV_DISPOSITION_ATTACHED_PIC;

    st->attached_pic              = pkt;
    st->attached_pic.stream_index = st->index;
    st->attached_pic.flags       |= AV_PKT_FLAG_KEY;

    st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
    st->codec->codec_id   = id;

    return 0;
}

216 217 218 219 220
static int mov_metadata_loci(MOVContext *c, AVIOContext *pb, unsigned len)
{
    char language[4] = { 0 };
    char buf[100];
    uint16_t langcode = 0;
221
    double longitude, latitude;
222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249
    const char *key = "location";

    if (len < 4 + 2 + 1 + 1 + 4 + 4 + 4)
        return AVERROR_INVALIDDATA;

    avio_skip(pb, 4); // version+flags
    langcode = avio_rb16(pb);
    ff_mov_lang_to_iso639(langcode, language);
    len -= 6;

    len -= avio_get_str(pb, len, buf, sizeof(buf)); // place name
    if (len < 1)
        return AVERROR_INVALIDDATA;
    avio_skip(pb, 1); // role
    len -= 1;

    if (len < 14)
        return AVERROR_INVALIDDATA;
    longitude = ((int32_t) avio_rb32(pb)) / (float) (1 << 16);
    latitude  = ((int32_t) avio_rb32(pb)) / (float) (1 << 16);

    // Try to output in the same format as the ?xyz field
    snprintf(buf, sizeof(buf), "%+08.4f%+09.4f/", latitude, longitude);
    if (*language && strcmp(language, "und")) {
        char key2[16];
        snprintf(key2, sizeof(key2), "%s-%s", key, language);
        av_dict_set(&c->fc->metadata, key2, buf, 0);
    }
250
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
251 252 253
    return av_dict_set(&c->fc->metadata, key, buf, 0);
}

254
static int mov_read_udta_string(MOVContext *c, AVIOContext *pb, MOVAtom atom)
255 256 257 258
{
#ifdef MOV_EXPORT_ALL_METADATA
    char tmp_key[5];
#endif
259
    char str[1024], key2[32], language[4] = {0};
260
    const char *key = NULL;
261 262
    uint16_t langcode = 0;
    uint32_t data_type = 0, str_size;
263
    int (*parse)(MOVContext*, AVIOContext*, unsigned, const char*) = NULL;
264 265 266 267

    switch (atom.type) {
    case MKTAG(0xa9,'n','a','m'): key = "title";     break;
    case MKTAG(0xa9,'a','u','t'):
268
    case MKTAG(0xa9,'A','R','T'): key = "artist";    break;
R
Raivo Hool 已提交
269
    case MKTAG( 'a','A','R','T'): key = "album_artist";    break;
270
    case MKTAG(0xa9,'w','r','t'): key = "composer";  break;
271
    case MKTAG( 'c','p','r','t'):
272 273 274 275
    case MKTAG(0xa9,'c','p','y'): key = "copyright"; break;
    case MKTAG(0xa9,'c','m','t'):
    case MKTAG(0xa9,'i','n','f'): key = "comment";   break;
    case MKTAG(0xa9,'a','l','b'): key = "album";     break;
276
    case MKTAG(0xa9,'d','a','y'): key = "date";      break;
277
    case MKTAG(0xa9,'g','e','n'): key = "genre";     break;
R
Raivo Hool 已提交
278 279
    case MKTAG( 'g','n','r','e'): key = "genre";
        parse = mov_metadata_gnre; break;
280
    case MKTAG(0xa9,'t','o','o'):
281
    case MKTAG(0xa9,'s','w','r'): key = "encoder";   break;
282
    case MKTAG(0xa9,'e','n','c'): key = "encoder";   break;
283
    case MKTAG(0xa9,'x','y','z'): key = "location";  break;
284 285 286 287 288
    case MKTAG( 'd','e','s','c'): key = "description";break;
    case MKTAG( 'l','d','e','s'): key = "synopsis";  break;
    case MKTAG( 't','v','s','h'): key = "show";      break;
    case MKTAG( 't','v','e','n'): key = "episode_id";break;
    case MKTAG( 't','v','n','n'): key = "network";   break;
B
Baptiste Coudurier 已提交
289
    case MKTAG( 't','r','k','n'): key = "track";
290 291 292
        parse = mov_metadata_track_or_disc_number; break;
    case MKTAG( 'd','i','s','k'): key = "disc";
        parse = mov_metadata_track_or_disc_number; break;
293
    case MKTAG( 't','v','e','s'): key = "episode_sort";
294
        parse = mov_metadata_int8_bypass_padding; break;
295
    case MKTAG( 't','v','s','n'): key = "season_number";
296
        parse = mov_metadata_int8_bypass_padding; break;
297
    case MKTAG( 's','t','i','k'): key = "media_type";
298
        parse = mov_metadata_int8_no_padding; break;
299 300 301 302
    case MKTAG( 'h','d','v','d'): key = "hd_video";
        parse = mov_metadata_int8_no_padding; break;
    case MKTAG( 'p','g','a','p'): key = "gapless_playback";
        parse = mov_metadata_int8_no_padding; break;
303 304
    case MKTAG( 'l','o','c','i'):
        return mov_metadata_loci(c, pb, atom.size);
305 306 307
    }

    if (c->itunes_metadata && atom.size > 8) {
308 309
        int data_size = avio_rb32(pb);
        int tag = avio_rl32(pb);
310
        if (tag == MKTAG('d','a','t','a')) {
311 312
            data_type = avio_rb32(pb); // type
            avio_rb32(pb); // unknown
313 314
            str_size = data_size - 16;
            atom.size -= 16;
A
Anton Khirnov 已提交
315 316 317 318 319 320 321 322

            if (atom.type == MKTAG('c', 'o', 'v', 'r')) {
                int ret = mov_read_covr(c, pb, data_type, str_size);
                if (ret < 0) {
                    av_log(c->fc, AV_LOG_ERROR, "Error parsing cover art.\n");
                    return ret;
                }
            }
323 324
        } else return 0;
    } else if (atom.size > 4 && key && !c->itunes_metadata) {
325 326
        str_size = avio_rb16(pb); // string length
        langcode = avio_rb16(pb);
327
        ff_mov_lang_to_iso639(langcode, language);
328 329 330 331 332 333 334 335 336 337 338 339 340 341
        atom.size -= 4;
    } else
        str_size = atom.size;

#ifdef MOV_EXPORT_ALL_METADATA
    if (!key) {
        snprintf(tmp_key, 5, "%.4s", (char*)&atom.type);
        key = tmp_key;
    }
#endif

    if (!key)
        return 0;
    if (atom.size < 0)
342
        return AVERROR_INVALIDDATA;
343 344

    str_size = FFMIN3(sizeof(str)-1, str_size, atom.size);
B
Baptiste Coudurier 已提交
345 346

    if (parse)
347
        parse(c, pb, str_size, key);
B
Baptiste Coudurier 已提交
348
    else {
349
        if (data_type == 3 || (data_type == 0 && (langcode < 0x400 || langcode == 0x7fff))) { // MAC Encoded
350 351
            mov_read_mac_string(c, pb, str_size, str, sizeof(str));
        } else {
352
            avio_read(pb, str, str_size);
353 354
            str[str_size] = 0;
        }
355
        c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
356
        av_dict_set(&c->fc->metadata, key, str, 0);
B
Baptiste Coudurier 已提交
357 358
        if (*language && strcmp(language, "und")) {
            snprintf(key2, sizeof(key2), "%s-%s", key, language);
359
            av_dict_set(&c->fc->metadata, key2, str, 0);
B
Baptiste Coudurier 已提交
360
        }
B
Baptiste Coudurier 已提交
361
    }
362 363 364
    av_dlog(c->fc, "lang \"%3s\" ", language);
    av_dlog(c->fc, "tag \"%s\" value \"%s\" atom \"%.4s\" %d %"PRId64"\n",
            key, str, (char*)&atom.type, str_size, atom.size);
365 366 367

    return 0;
}
368

369
static int mov_read_chpl(MOVContext *c, AVIOContext *pb, MOVAtom atom)
D
David Conrad 已提交
370 371
{
    int64_t start;
D
David Conrad 已提交
372
    int i, nb_chapters, str_len, version;
D
David Conrad 已提交
373 374 375 376 377
    char str[256+1];

    if ((atom.size -= 5) < 0)
        return 0;

378 379
    version = avio_r8(pb);
    avio_rb24(pb);
D
David Conrad 已提交
380
    if (version)
381 382
        avio_rb32(pb); // ???
    nb_chapters = avio_r8(pb);
D
David Conrad 已提交
383 384 385 386 387

    for (i = 0; i < nb_chapters; i++) {
        if (atom.size < 9)
            return 0;

388 389
        start = avio_rb64(pb);
        str_len = avio_r8(pb);
D
David Conrad 已提交
390 391 392 393

        if ((atom.size -= 9+str_len) < 0)
            return 0;

394
        avio_read(pb, str, str_len);
D
David Conrad 已提交
395
        str[str_len] = 0;
396
        avpriv_new_chapter(c->fc, i, (AVRational){1,10000000}, start, AV_NOPTS_VALUE, str);
D
David Conrad 已提交
397 398 399 400
    }
    return 0;
}

401
#define MIN_DATA_ENTRY_BOX_SIZE 12
402
static int mov_read_dref(MOVContext *c, AVIOContext *pb, MOVAtom atom)
403
{
404 405
    AVStream *st;
    MOVStreamContext *sc;
406 407
    int entries, i, j;

408 409 410 411 412
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

413 414
    avio_rb32(pb); // version + flags
    entries = avio_rb32(pb);
415 416
    if (entries >  (atom.size - 1) / MIN_DATA_ENTRY_BOX_SIZE + 1 ||
        entries >= UINT_MAX / sizeof(*sc->drefs))
417
        return AVERROR_INVALIDDATA;
418
    av_free(sc->drefs);
419
    sc->drefs = av_mallocz(entries * sizeof(*sc->drefs));
420 421 422
    if (!sc->drefs)
        return AVERROR(ENOMEM);
    sc->drefs_count = entries;
423 424

    for (i = 0; i < sc->drefs_count; i++) {
425
        MOVDref *dref = &sc->drefs[i];
426
        uint32_t size = avio_rb32(pb);
427
        int64_t next = avio_tell(pb) + size - 4;
428

429
        if (size < 12)
430
            return AVERROR_INVALIDDATA;
431

432 433
        dref->type = avio_rl32(pb);
        avio_rb32(pb); // version + flags
L
Luca Barbato 已提交
434
        av_dlog(c->fc, "type %.4s size %d\n", (char*)&dref->type, size);
435 436 437 438 439 440

        if (dref->type == MKTAG('a','l','i','s') && size > 150) {
            /* macintosh alias record */
            uint16_t volume_len, len;
            int16_t type;

441
            avio_skip(pb, 10);
442

443
            volume_len = avio_r8(pb);
444
            volume_len = FFMIN(volume_len, 27);
445
            avio_read(pb, dref->volume, 27);
446 447
            dref->volume[volume_len] = 0;
            av_log(c->fc, AV_LOG_DEBUG, "volume %s, len %d\n", dref->volume, volume_len);
448

449
            avio_skip(pb, 12);
450

451
            len = avio_r8(pb);
452
            len = FFMIN(len, 63);
453
            avio_read(pb, dref->filename, 63);
454 455 456
            dref->filename[len] = 0;
            av_log(c->fc, AV_LOG_DEBUG, "filename %s, len %d\n", dref->filename, len);

457
            avio_skip(pb, 16);
458 459

            /* read next level up_from_alias/down_to_target */
460 461
            dref->nlvl_from = avio_rb16(pb);
            dref->nlvl_to   = avio_rb16(pb);
462 463 464
            av_log(c->fc, AV_LOG_DEBUG, "nlvl from %d, nlvl to %d\n",
                   dref->nlvl_from, dref->nlvl_to);

465
            avio_skip(pb, 16);
466

467
            for (type = 0; type != -1 && avio_tell(pb) < next; ) {
468 469
                if (pb->eof_reached)
                    return AVERROR_EOF;
470 471
                type = avio_rb16(pb);
                len = avio_rb16(pb);
472 473 474 475
                av_log(c->fc, AV_LOG_DEBUG, "type %d, len %d\n", type, len);
                if (len&1)
                    len += 1;
                if (type == 2) { // absolute path
476
                    av_free(dref->path);
477
                    dref->path = av_mallocz(len+1);
478 479
                    if (!dref->path)
                        return AVERROR(ENOMEM);
480
                    avio_read(pb, dref->path, len);
481
                    if (len > volume_len && !strncmp(dref->path, dref->volume, volume_len)) {
482 483 484 485 486 487 488 489
                        len -= volume_len;
                        memmove(dref->path, dref->path+volume_len, len);
                        dref->path[len] = 0;
                    }
                    for (j = 0; j < len; j++)
                        if (dref->path[j] == ':')
                            dref->path[j] = '/';
                    av_log(c->fc, AV_LOG_DEBUG, "path %s\n", dref->path);
490 491 492 493 494
                } else if (type == 0) { // directory name
                    av_free(dref->dir);
                    dref->dir = av_malloc(len+1);
                    if (!dref->dir)
                        return AVERROR(ENOMEM);
495
                    avio_read(pb, dref->dir, len);
496 497 498 499 500
                    dref->dir[len] = 0;
                    for (j = 0; j < len; j++)
                        if (dref->dir[j] == ':')
                            dref->dir[j] = '/';
                    av_log(c->fc, AV_LOG_DEBUG, "dir %s\n", dref->dir);
501
                } else
502
                    avio_skip(pb, len);
503 504
            }
        }
A
Anton Khirnov 已提交
505
        avio_seek(pb, next, SEEK_SET);
506 507 508 509
    }
    return 0;
}

510
static int mov_read_hdlr(MOVContext *c, AVIOContext *pb, MOVAtom atom)
511
{
512
    AVStream *st;
513
    uint32_t type;
514
    uint32_t av_unused ctype;
515

516 517 518 519 520
    if (c->fc->nb_streams < 1) // meta before first trak
        return 0;

    st = c->fc->streams[c->fc->nb_streams-1];

521 522
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
523 524

    /* component type */
525 526
    ctype = avio_rl32(pb);
    type = avio_rl32(pb); /* component subtype */
527

L
Luca Barbato 已提交
528 529
    av_dlog(c->fc, "ctype= %.4s (0x%08x)\n", (char*)&ctype, ctype);
    av_dlog(c->fc, "stype= %.4s\n", (char*)&type);
530

531
    if     (type == MKTAG('v','i','d','e'))
532
        st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
533
    else if (type == MKTAG('s','o','u','n'))
534
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
535
    else if (type == MKTAG('m','1','a',' '))
536
        st->codec->codec_id = AV_CODEC_ID_MP2;
537
    else if ((type == MKTAG('s','u','b','p')) || (type == MKTAG('c','l','c','p')))
538
        st->codec->codec_type = AVMEDIA_TYPE_SUBTITLE;
539

540 541 542
    avio_rb32(pb); /* component  manufacture */
    avio_rb32(pb); /* component flags */
    avio_rb32(pb); /* component flags mask */
543 544 545 546

    return 0;
}

547
int ff_mov_read_esds(AVFormatContext *fc, AVIOContext *pb)
548
{
549
    AVStream *st;
M
Mans Rullgard 已提交
550
    int tag;
551

552
    if (fc->nb_streams < 1)
553
        return 0;
554
    st = fc->streams[fc->nb_streams-1];
555

556
    avio_rb32(pb); /* version + flags */
M
Mans Rullgard 已提交
557
    ff_mp4_read_descr(fc, pb, &tag);
558
    if (tag == MP4ESDescrTag) {
559
        ff_mp4_parse_es_descr(pb, NULL);
560
    } else
561
        avio_rb16(pb); /* ID */
562

M
Mans Rullgard 已提交
563
    ff_mp4_read_descr(fc, pb, &tag);
564 565
    if (tag == MP4DecConfigDescrTag)
        ff_mp4_read_dec_config_descr(fc, st, pb);
566 567 568
    return 0;
}

569
static int mov_read_esds(MOVContext *c, AVIOContext *pb, MOVAtom atom)
570
{
571
    return ff_mov_read_esds(c->fc, pb);
572 573
}

574
static int mov_read_dac3(MOVContext *c, AVIOContext *pb, MOVAtom atom)
575 576
{
    AVStream *st;
577
    int ac3info, acmod, lfeon, bsmod;
578

579 580
    if (c->fc->nb_streams < 1)
        return 0;
581 582
    st = c->fc->streams[c->fc->nb_streams-1];

583
    ac3info = avio_rb24(pb);
584
    bsmod = (ac3info >> 14) & 0x7;
585 586 587
    acmod = (ac3info >> 11) & 0x7;
    lfeon = (ac3info >> 10) & 0x1;
    st->codec->channels = ((int[]){2,1,2,3,3,4,4,5})[acmod] + lfeon;
588 589 590
    st->codec->channel_layout = avpriv_ac3_channel_layout_tab[acmod];
    if (lfeon)
        st->codec->channel_layout |= AV_CH_LOW_FREQUENCY;
591 592 593
    st->codec->audio_service_type = bsmod;
    if (st->codec->channels > 1 && bsmod == 0x7)
        st->codec->audio_service_type = AV_AUDIO_SERVICE_TYPE_KARAOKE;
594 595 596 597

    return 0;
}

598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625
static int mov_read_dec3(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    int eac3info, acmod, lfeon, bsmod;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    /* No need to parse fields for additional independent substreams and its
     * associated dependent substreams since libavcodec's E-AC-3 decoder
     * does not support them yet. */
    avio_rb16(pb); /* data_rate and num_ind_sub */
    eac3info = avio_rb24(pb);
    bsmod = (eac3info >> 12) & 0x1f;
    acmod = (eac3info >>  9) & 0x7;
    lfeon = (eac3info >>  8) & 0x1;
    st->codec->channel_layout = avpriv_ac3_channel_layout_tab[acmod];
    if (lfeon)
        st->codec->channel_layout |= AV_CH_LOW_FREQUENCY;
    st->codec->channels = av_get_channel_layout_nb_channels(st->codec->channel_layout);
    st->codec->audio_service_type = bsmod;
    if (st->codec->channels > 1 && bsmod == 0x7)
        st->codec->audio_service_type = AV_AUDIO_SERVICE_TYPE_KARAOKE;

    return 0;
}

626 627 628 629 630 631 632 633 634 635 636
static int mov_read_chan(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    if (atom.size < 16)
        return 0;

637
    ff_mov_read_chan(c->fc, pb, st, atom.size - 4);
638 639 640 641

    return 0;
}

642 643 644 645 646 647 648 649
static int mov_read_wfex(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

650
    return ff_get_wav_header(pb, st->codec, atom.size);
651 652
}

653
static int mov_read_pasp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
654
{
655 656
    const int num = avio_rb32(pb);
    const int den = avio_rb32(pb);
657 658 659 660 661 662
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

663 664 665 666 667 668 669
    if ((st->sample_aspect_ratio.den != 1 || st->sample_aspect_ratio.num) && // default
        (den != st->sample_aspect_ratio.den || num != st->sample_aspect_ratio.num)) {
        av_log(c->fc, AV_LOG_WARNING,
               "sample aspect ratio already set to %d:%d, ignoring 'pasp' atom (%d:%d)\n",
               st->sample_aspect_ratio.num, st->sample_aspect_ratio.den,
               num, den);
    } else if (den != 0) {
670 671 672 673 674 675
        st->sample_aspect_ratio.num = num;
        st->sample_aspect_ratio.den = den;
    }
    return 0;
}

676
/* this atom contains actual media data */
677
static int mov_read_mdat(MOVContext *c, AVIOContext *pb, MOVAtom atom)
678
{
679
    if (atom.size == 0) /* wrong one (MP4) */
680 681 682 683 684
        return 0;
    c->found_mdat=1;
    return 0; /* now go for moov */
}

685
/* read major brand, minor version and compatible brands and store them as metadata */
686
static int mov_read_ftyp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
687
{
688 689 690 691 692 693
    uint32_t minor_ver;
    int comp_brand_size;
    char minor_ver_str[11]; /* 32 bit integer -> 10 digits + null */
    char* comp_brands_str;
    uint8_t type[5] = {0};

694
    avio_read(pb, type, 4);
B
Baptiste Coudurier 已提交
695
    if (strcmp(type, "qt  "))
696
        c->isom = 1;
697
    av_log(c->fc, AV_LOG_DEBUG, "ISO: File Type Major Brand: %.4s\n",(char *)&type);
698
    av_dict_set(&c->fc->metadata, "major_brand", type, 0);
699
    minor_ver = avio_rb32(pb); /* minor version */
700
    snprintf(minor_ver_str, sizeof(minor_ver_str), "%"PRIu32"", minor_ver);
701
    av_dict_set(&c->fc->metadata, "minor_version", minor_ver_str, 0);
702 703 704

    comp_brand_size = atom.size - 8;
    if (comp_brand_size < 0)
705
        return AVERROR_INVALIDDATA;
706 707 708
    comp_brands_str = av_malloc(comp_brand_size + 1); /* Add null terminator */
    if (!comp_brands_str)
        return AVERROR(ENOMEM);
709
    avio_read(pb, comp_brands_str, comp_brand_size);
710
    comp_brands_str[comp_brand_size] = 0;
711
    av_dict_set(&c->fc->metadata, "compatible_brands", comp_brands_str, 0);
712 713
    av_freep(&comp_brands_str);

714 715 716
    return 0;
}

717
/* this atom should contain all header atoms */
718
static int mov_read_moov(MOVContext *c, AVIOContext *pb, MOVAtom atom)
719
{
720 721 722 723
    int ret;

    if ((ret = mov_read_default(c, pb, atom)) < 0)
        return ret;
724 725 726 727 728 729
    /* we parsed the 'moov' atom, we can terminate the parsing as soon as we find the 'mdat' */
    /* so we don't parse the whole file if over a network */
    c->found_moov=1;
    return 0; /* now go for mdat */
}

730
static int mov_read_moof(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
731
{
732
    c->fragment.moof_offset = c->fragment.implicit_offset = avio_tell(pb) - 8;
733
    av_dlog(c->fc, "moof offset %"PRIx64"\n", c->fragment.moof_offset);
B
Baptiste Coudurier 已提交
734 735
    return mov_read_default(c, pb, atom);
}
736

737
static void mov_metadata_creation_time(AVDictionary **metadata, time_t time)
738 739 740
{
    char buffer[32];
    if (time) {
741
        struct tm *ptm, tmbuf;
742
        time -= 2082844800;  /* seconds between 1904-01-01 and Epoch */
743
        ptm = gmtime_r(&time, &tmbuf);
744
        if (!ptm) return;
745 746
        if (strftime(buffer, sizeof(buffer), "%Y-%m-%d %H:%M:%S", ptm))
            av_dict_set(metadata, "creation_time", buffer, 0);
747 748 749
    }
}

750
static int mov_read_mdhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
751
{
752 753 754
    AVStream *st;
    MOVStreamContext *sc;
    int version;
755
    char language[4] = {0};
756
    unsigned lang;
757
    time_t creation_time;
758

759 760 761 762 763
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

764 765 766 767 768
    if (sc->time_scale) {
        av_log(c->fc, AV_LOG_ERROR, "Multiple mdhd?\n");
        return AVERROR_INVALIDDATA;
    }

769
    version = avio_r8(pb);
770
    if (version > 1) {
771
        avpriv_request_sample(c->fc, "Version %d", version);
772 773
        return AVERROR_PATCHWELCOME;
    }
774
    avio_rb24(pb); /* flags */
B
clean  
Baptiste Coudurier 已提交
775
    if (version == 1) {
776 777
        creation_time = avio_rb64(pb);
        avio_rb64(pb);
B
clean  
Baptiste Coudurier 已提交
778
    } else {
779 780
        creation_time = avio_rb32(pb);
        avio_rb32(pb); /* modification time */
B
clean  
Baptiste Coudurier 已提交
781
    }
782
    mov_metadata_creation_time(&st->metadata, creation_time);
783

784 785
    sc->time_scale = avio_rb32(pb);
    st->duration = (version == 1) ? avio_rb64(pb) : avio_rb32(pb); /* duration */
786

787
    lang = avio_rb16(pb); /* language */
788
    if (ff_mov_lang_to_iso639(lang, language))
789
        av_dict_set(&st->metadata, "language", language, 0);
790
    avio_rb16(pb); /* quality */
791 792 793 794

    return 0;
}

795
static int mov_read_mvhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
796
{
797
    time_t creation_time;
798 799
    int version = avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
800

B
Baptiste Coudurier 已提交
801
    if (version == 1) {
802 803
        creation_time = avio_rb64(pb);
        avio_rb64(pb);
B
Baptiste Coudurier 已提交
804
    } else {
805 806
        creation_time = avio_rb32(pb);
        avio_rb32(pb); /* modification time */
B
Baptiste Coudurier 已提交
807
    }
808
    mov_metadata_creation_time(&c->fc->metadata, creation_time);
809
    c->time_scale = avio_rb32(pb); /* time scale */
810

L
Luca Barbato 已提交
811
    av_dlog(c->fc, "time scale = %i\n", c->time_scale);
812

813 814
    c->duration = (version == 1) ? avio_rb64(pb) : avio_rb32(pb); /* duration */
    avio_rb32(pb); /* preferred scale */
815

816
    avio_rb16(pb); /* preferred volume */
817

818
    avio_skip(pb, 10); /* reserved */
819

820
    avio_skip(pb, 36); /* display matrix */
821

822 823 824 825 826 827 828
    avio_rb32(pb); /* preview time */
    avio_rb32(pb); /* preview duration */
    avio_rb32(pb); /* poster time */
    avio_rb32(pb); /* selection time */
    avio_rb32(pb); /* selection duration */
    avio_rb32(pb); /* current time */
    avio_rb32(pb); /* next track ID */
829 830 831 832

    return 0;
}

833
static int mov_read_smi(MOVContext *c, AVIOContext *pb, MOVAtom atom)
834
{
835 836 837 838 839
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
840

841
    if ((uint64_t)atom.size > (1<<30))
842
        return AVERROR_INVALIDDATA;
843

844 845
    // currently SVQ3 decoder expect full STSD header - so let's fake it
    // this should be fixed and just SMI header should be passed
846
    av_free(st->codec->extradata);
847 848 849
    st->codec->extradata = av_mallocz(atom.size + 0x5a + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
B
Baptiste Coudurier 已提交
850 851
    st->codec->extradata_size = 0x5a + atom.size;
    memcpy(st->codec->extradata, "SVQ3", 4); // fake
852
    avio_read(pb, st->codec->extradata + 0x5a, atom.size);
L
Luca Barbato 已提交
853
    av_dlog(c->fc, "Reading SMI %"PRId64"  %s\n", atom.size, st->codec->extradata + 0x5a);
854 855
    return 0;
}
856

857
static int mov_read_enda(MOVContext *c, AVIOContext *pb, MOVAtom atom)
858
{
859 860 861 862 863 864
    AVStream *st;
    int little_endian;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
865

866
    little_endian = avio_rb16(pb);
L
Luca Barbato 已提交
867
    av_dlog(c->fc, "enda %d\n", little_endian);
868
    if (little_endian == 1) {
869
        switch (st->codec->codec_id) {
870 871
        case AV_CODEC_ID_PCM_S24BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_S24LE;
872
            break;
873 874
        case AV_CODEC_ID_PCM_S32BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_S32LE;
875
            break;
876 877
        case AV_CODEC_ID_PCM_F32BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_F32LE;
878
            break;
879 880
        case AV_CODEC_ID_PCM_F64BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_F64LE;
881
            break;
882 883 884 885 886 887 888
        default:
            break;
        }
    }
    return 0;
}

889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924
static int mov_read_colr(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    char color_parameter_type[5] = { 0 };
    int color_primaries, color_trc, color_matrix;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams - 1];

    avio_read(pb, color_parameter_type, 4);
    if (strncmp(color_parameter_type, "nclx", 4) &&
        strncmp(color_parameter_type, "nclc", 4)) {
        av_log(c->fc, AV_LOG_WARNING, "unsupported color_parameter_type %s\n",
               color_parameter_type);
        return 0;
    }

    color_primaries = avio_rb16(pb);
    color_trc = avio_rb16(pb);
    color_matrix = avio_rb16(pb);

    av_dlog(c->fc, "%s: pri %"PRIu16" trc %"PRIu16" matrix %"PRIu16"",
            color_parameter_type, color_primaries, color_trc, color_matrix);

    if (c->isom) {
        uint8_t color_range = avio_r8(pb) >> 7;
        av_dlog(c->fc, " full %"PRIu8"", color_range)
        if (color_range)
            st->codec->color_range = AVCOL_RANGE_JPEG;
        else
            st->codec->color_range = AVCOL_RANGE_MPEG;
        /* 14496-12 references JPEG XR specs (rather than the more complete
         * 23001-8) so some adjusting is required */
        if (color_primaries >= AVCOL_PRI_FILM)
            color_primaries = AVCOL_PRI_UNSPECIFIED;
925 926
        if ((color_trc >= AVCOL_TRC_LINEAR &&
             color_trc <= AVCOL_TRC_LOG_SQRT) ||
927 928 929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957
            color_trc >= AVCOL_TRC_BT2020_10)
            color_trc = AVCOL_TRC_UNSPECIFIED;
        if (color_matrix >= AVCOL_SPC_BT2020_NCL)
            color_matrix = AVCOL_SPC_UNSPECIFIED;
        st->codec->color_primaries = color_primaries;
        st->codec->color_trc = color_trc;
        st->codec->colorspace = color_matrix;
    } else {
        /* color primaries, Table 4-4 */
        switch (color_primaries) {
        case 1: st->codec->color_primaries = AVCOL_PRI_BT709; break;
        case 5: st->codec->color_primaries = AVCOL_PRI_SMPTE170M; break;
        case 6: st->codec->color_primaries = AVCOL_PRI_SMPTE240M; break;
        }
        /* color transfer, Table 4-5 */
        switch (color_trc) {
        case 1: st->codec->color_trc = AVCOL_TRC_BT709; break;
        case 7: st->codec->color_trc = AVCOL_TRC_SMPTE240M; break;
        }
        /* color matrix, Table 4-6 */
        switch (color_matrix) {
        case 1: st->codec->colorspace = AVCOL_SPC_BT709; break;
        case 6: st->codec->colorspace = AVCOL_SPC_BT470BG; break;
        case 7: st->codec->colorspace = AVCOL_SPC_SMPTE240M; break;
        }
    }
    av_dlog(c->fc, "\n")

    return 0;
}

958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991
static int mov_read_fiel(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    unsigned mov_field_order;
    enum AVFieldOrder decoded_field_order = AV_FIELD_UNKNOWN;

    if (c->fc->nb_streams < 1) // will happen with jp2 files
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    if (atom.size < 2)
        return AVERROR_INVALIDDATA;
    mov_field_order = avio_rb16(pb);
    if ((mov_field_order & 0xFF00) == 0x0100)
        decoded_field_order = AV_FIELD_PROGRESSIVE;
    else if ((mov_field_order & 0xFF00) == 0x0200) {
        switch (mov_field_order & 0xFF) {
        case 0x01: decoded_field_order = AV_FIELD_TT;
                   break;
        case 0x06: decoded_field_order = AV_FIELD_BB;
                   break;
        case 0x09: decoded_field_order = AV_FIELD_TB;
                   break;
        case 0x0E: decoded_field_order = AV_FIELD_BT;
                   break;
        }
    }
    if (decoded_field_order == AV_FIELD_UNKNOWN && mov_field_order) {
        av_log(NULL, AV_LOG_ERROR, "Unknown MOV field order 0x%04x\n", mov_field_order);
    }
    st->codec->field_order = decoded_field_order;

    return 0;
}

992
/* FIXME modify qdm2/svq3/h264 decoders to take full atom as extradata */
993
static int mov_read_extradata(MOVContext *c, AVIOContext *pb, MOVAtom atom)
994
{
995 996
    AVStream *st;
    uint64_t size;
997
    uint8_t *buf;
998
    int err;
999 1000 1001 1002 1003

    if (c->fc->nb_streams < 1) // will happen with jp2 files
        return 0;
    st= c->fc->streams[c->fc->nb_streams-1];
    size= (uint64_t)st->codec->extradata_size + atom.size + 8 + FF_INPUT_BUFFER_PADDING_SIZE;
1004
    if (size > INT_MAX || (uint64_t)atom.size > INT_MAX)
1005
        return AVERROR_INVALIDDATA;
1006 1007
    if ((err = av_reallocp(&st->codec->extradata, size)) < 0) {
        st->codec->extradata_size = 0;
1008
        return err;
1009
    }
1010
    buf = st->codec->extradata + st->codec->extradata_size;
1011 1012 1013
    st->codec->extradata_size= size - FF_INPUT_BUFFER_PADDING_SIZE;
    AV_WB32(       buf    , atom.size + 8);
    AV_WL32(       buf + 4, atom.type);
1014
    avio_read(pb, buf + 8, atom.size);
1015 1016 1017
    return 0;
}

1018
static int mov_read_wave(MOVContext *c, AVIOContext *pb, MOVAtom atom)
R
Roberto Togni 已提交
1019
{
1020 1021 1022 1023 1024
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
R
Roberto Togni 已提交
1025

1026
    if ((uint64_t)atom.size > (1<<30))
1027
        return AVERROR_INVALIDDATA;
1028

1029
    if (st->codec->codec_id == AV_CODEC_ID_QDM2 || st->codec->codec_id == AV_CODEC_ID_QDMC) {
1030
        // pass all frma atom to codec, needed at least for QDMC and QDM2
1031
        av_free(st->codec->extradata);
1032 1033 1034
        st->codec->extradata = av_mallocz(atom.size + FF_INPUT_BUFFER_PADDING_SIZE);
        if (!st->codec->extradata)
            return AVERROR(ENOMEM);
1035
        st->codec->extradata_size = atom.size;
1036
        avio_read(pb, st->codec->extradata, atom.size);
1037
    } else if (atom.size > 8) { /* to read frma, esds atoms */
1038 1039 1040
        int ret;
        if ((ret = mov_read_default(c, pb, atom)) < 0)
            return ret;
1041
    } else
1042
        avio_skip(pb, atom.size);
R
Roberto Togni 已提交
1043 1044 1045
    return 0;
}

1046 1047 1048 1049
/**
 * This function reads atom content and puts data in extradata without tag
 * nor size unlike mov_read_extradata.
 */
1050
static int mov_read_glbl(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1051
{
1052 1053 1054 1055 1056
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
1057

1058
    if ((uint64_t)atom.size > (1<<30))
1059
        return AVERROR_INVALIDDATA;
1060

1061
    if (atom.size >= 10) {
1062
        // Broken files created by legacy versions of libavformat will
1063 1064 1065 1066 1067 1068 1069
        // wrap a whole fiel atom inside of a glbl atom.
        unsigned size = avio_rb32(pb);
        unsigned type = avio_rl32(pb);
        avio_seek(pb, -8, SEEK_CUR);
        if (type == MKTAG('f','i','e','l') && size == atom.size)
            return mov_read_default(c, pb, atom);
    }
1070
    av_free(st->codec->extradata);
1071 1072 1073
    st->codec->extradata = av_mallocz(atom.size + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
1074
    st->codec->extradata_size = atom.size;
1075
    avio_read(pb, st->codec->extradata, atom.size);
1076 1077 1078
    return 0;
}

M
Martin Storsjö 已提交
1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091
static int mov_read_dvc1(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    uint8_t profile_level;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    if (atom.size >= (1<<28) || atom.size < 7)
        return AVERROR_INVALIDDATA;

    profile_level = avio_r8(pb);
1092
    if ((profile_level & 0xf0) != 0xc0)
M
Martin Storsjö 已提交
1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104
        return 0;

    av_free(st->codec->extradata);
    st->codec->extradata = av_mallocz(atom.size - 7 + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = atom.size - 7;
    avio_seek(pb, 6, SEEK_CUR);
    avio_read(pb, st->codec->extradata, st->codec->extradata_size);
    return 0;
}

M
Martin Storsjö 已提交
1105 1106 1107 1108 1109
/**
 * An strf atom is a BITMAPINFOHEADER struct. This struct is 40 bytes itself,
 * but can have extradata appended at the end after the 40 bytes belonging
 * to the struct.
 */
1110
static int mov_read_strf(MOVContext *c, AVIOContext *pb, MOVAtom atom)
M
Martin Storsjö 已提交
1111 1112 1113 1114 1115 1116 1117 1118 1119
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    if (atom.size <= 40)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

1120
    if ((uint64_t)atom.size > (1<<30))
1121
        return AVERROR_INVALIDDATA;
M
Martin Storsjö 已提交
1122 1123 1124 1125 1126 1127

    av_free(st->codec->extradata);
    st->codec->extradata = av_mallocz(atom.size - 40 + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = atom.size - 40;
1128
    avio_skip(pb, 40);
1129
    avio_read(pb, st->codec->extradata, atom.size - 40);
M
Martin Storsjö 已提交
1130 1131 1132
    return 0;
}

1133
static int mov_read_stco(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1134
{
1135 1136
    AVStream *st;
    MOVStreamContext *sc;
1137
    unsigned int i, entries;
1138

1139 1140 1141 1142 1143
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1144 1145
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1146

1147
    entries = avio_rb32(pb);
1148

A
Alex Converse 已提交
1149 1150
    if (!entries)
        return 0;
1151
    if (entries >= UINT_MAX/sizeof(int64_t))
1152
        return AVERROR_INVALIDDATA;
1153

B
Baptiste Coudurier 已提交
1154
    sc->chunk_offsets = av_malloc(entries * sizeof(int64_t));
1155
    if (!sc->chunk_offsets)
1156 1157 1158
        return AVERROR(ENOMEM);
    sc->chunk_count = entries;

1159
    if      (atom.type == MKTAG('s','t','c','o'))
1160
        for (i = 0; i < entries && !pb->eof_reached; i++)
1161
            sc->chunk_offsets[i] = avio_rb32(pb);
1162
    else if (atom.type == MKTAG('c','o','6','4'))
1163
        for (i = 0; i < entries && !pb->eof_reached; i++)
1164
            sc->chunk_offsets[i] = avio_rb64(pb);
1165
    else
1166
        return AVERROR_INVALIDDATA;
1167

1168 1169 1170 1171 1172
    sc->chunk_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1173 1174 1175
    return 0;
}

1176 1177 1178 1179
/**
 * Compute codec id for 'lpcm' tag.
 * See CoreAudioTypes and AudioStreamBasicDescription at Apple.
 */
1180
enum AVCodecID ff_mov_get_lpcm_codec_id(int bps, int flags)
1181
{
1182 1183 1184 1185 1186 1187
    /* lpcm flags:
     * 0x1 = float
     * 0x2 = big-endian
     * 0x4 = signed
     */
    return ff_get_pcm_codec_id(bps, flags & 1, flags & 2, flags & 4 ? -1 : 0);
1188 1189
}

1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220
static int mov_codec_id(AVStream *st, uint32_t format)
{
    int id = ff_codec_get_id(ff_codec_movaudio_tags, format);

    if (id <= 0 &&
        ((format & 0xFFFF) == 'm' + ('s' << 8) ||
         (format & 0xFFFF) == 'T' + ('S' << 8)))
        id = ff_codec_get_id(ff_codec_wav_tags, av_bswap32(format) & 0xFFFF);

    if (st->codec->codec_type != AVMEDIA_TYPE_VIDEO && id > 0) {
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
    } else if (st->codec->codec_type != AVMEDIA_TYPE_AUDIO &&
               /* skip old asf mpeg4 tag */
               format && format != MKTAG('m','p','4','s')) {
        id = ff_codec_get_id(ff_codec_movvideo_tags, format);
        if (id <= 0)
            id = ff_codec_get_id(ff_codec_bmp_tags, format);
        if (id > 0)
            st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
        else if (st->codec->codec_type == AVMEDIA_TYPE_DATA) {
            id = ff_codec_get_id(ff_codec_movsubtitle_tags, format);
            if (id > 0)
                st->codec->codec_type = AVMEDIA_TYPE_SUBTITLE;
        }
    }

    st->codec->codec_tag = format;

    return id;
}

1221 1222 1223
static void mov_parse_stsd_video(MOVContext *c, AVIOContext *pb,
                                 AVStream *st, MOVStreamContext *sc)
{
1224
    uint8_t codec_name[32];
1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245
    unsigned int color_depth, len, j;
    int color_greyscale;
    int color_table_id;

    avio_rb16(pb); /* version */
    avio_rb16(pb); /* revision level */
    avio_rb32(pb); /* vendor */
    avio_rb32(pb); /* temporal quality */
    avio_rb32(pb); /* spatial quality */

    st->codec->width  = avio_rb16(pb); /* width */
    st->codec->height = avio_rb16(pb); /* height */

    avio_rb32(pb); /* horiz resolution */
    avio_rb32(pb); /* vert resolution */
    avio_rb32(pb); /* data size, always 0 */
    avio_rb16(pb); /* frames per samples */

    len = avio_r8(pb); /* codec name, pascal string */
    if (len > 31)
        len = 31;
1246
    mov_read_mac_string(c, pb, len, codec_name, sizeof(codec_name));
1247 1248
    if (len < 31)
        avio_skip(pb, 31 - len);
1249 1250 1251 1252

    if (codec_name[0])
        av_dict_set(&st->metadata, "encoder", codec_name, 0);

1253
    /* codec_tag YV12 triggers an UV swap in rawdec.c */
1254
    if (!memcmp(codec_name, "Planar Y'CbCr 8-bit 4:2:0", 25))
1255 1256 1257
        st->codec->codec_tag = MKTAG('I', '4', '2', '0');
    /* Flash Media Server uses tag H263 with Sorenson Spark */
    if (st->codec->codec_tag == MKTAG('H','2','6','3') &&
1258
        !memcmp(codec_name, "Sorenson H263", 13))
1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331
        st->codec->codec_id = AV_CODEC_ID_FLV1;

    st->codec->bits_per_coded_sample = avio_rb16(pb); /* depth */
    color_table_id = avio_rb16(pb); /* colortable id */
    av_dlog(c->fc, "depth %d, ctab id %d\n",
            st->codec->bits_per_coded_sample, color_table_id);
    /* figure out the palette situation */
    color_depth     = st->codec->bits_per_coded_sample & 0x1F;
    color_greyscale = st->codec->bits_per_coded_sample & 0x20;

    /* if the depth is 2, 4, or 8 bpp, file is palettized */
    if ((color_depth == 2) || (color_depth == 4) || (color_depth == 8)) {
        /* for palette traversal */
        unsigned int color_start, color_count, color_end;
        unsigned char r, g, b;

        if (color_greyscale) {
            int color_index, color_dec;
            /* compute the greyscale palette */
            st->codec->bits_per_coded_sample = color_depth;
            color_count = 1 << color_depth;
            color_index = 255;
            color_dec   = 256 / (color_count - 1);
            for (j = 0; j < color_count; j++) {
                r = g = b = color_index;
                sc->palette[j] = (r << 16) | (g << 8) | (b);
                color_index -= color_dec;
                if (color_index < 0)
                    color_index = 0;
            }
        } else if (color_table_id) {
            const uint8_t *color_table;
            /* if flag bit 3 is set, use the default palette */
            color_count = 1 << color_depth;
            if (color_depth == 2)
                color_table = ff_qt_default_palette_4;
            else if (color_depth == 4)
                color_table = ff_qt_default_palette_16;
            else
                color_table = ff_qt_default_palette_256;

            for (j = 0; j < color_count; j++) {
                r = color_table[j * 3 + 0];
                g = color_table[j * 3 + 1];
                b = color_table[j * 3 + 2];
                sc->palette[j] = (r << 16) | (g << 8) | (b);
            }
        } else {
            /* load the palette from the file */
            color_start = avio_rb32(pb);
            color_count = avio_rb16(pb);
            color_end   = avio_rb16(pb);
            if ((color_start <= 255) && (color_end <= 255)) {
                for (j = color_start; j <= color_end; j++) {
                    /* each R, G, or B component is 16 bits;
                     * only use the top 8 bits; skip alpha bytes
                     * up front */
                    avio_r8(pb);
                    avio_r8(pb);
                    r = avio_r8(pb);
                    avio_r8(pb);
                    g = avio_r8(pb);
                    avio_r8(pb);
                    b = avio_r8(pb);
                    avio_r8(pb);
                    sc->palette[j] = (r << 16) | (g << 8) | (b);
                }
            }
        }
        sc->has_palette = 1;
    }
}

1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417
static void mov_parse_stsd_audio(MOVContext *c, AVIOContext *pb,
                                 AVStream *st, MOVStreamContext *sc)
{
    int bits_per_sample, flags;
    uint16_t version = avio_rb16(pb);

    avio_rb16(pb); /* revision level */
    avio_rb32(pb); /* vendor */

    st->codec->channels              = avio_rb16(pb); /* channel count */
    st->codec->bits_per_coded_sample = avio_rb16(pb); /* sample size */
    av_dlog(c->fc, "audio channels %d\n", st->codec->channels);

    sc->audio_cid = avio_rb16(pb);
    avio_rb16(pb); /* packet size = 0 */

    st->codec->sample_rate = ((avio_rb32(pb) >> 16));

    // Read QT version 1 fields. In version 0 these do not exist.
    av_dlog(c->fc, "version =%d, isom =%d\n", version, c->isom);
    if (!c->isom) {
        if (version == 1) {
            sc->samples_per_frame = avio_rb32(pb);
            avio_rb32(pb); /* bytes per packet */
            sc->bytes_per_frame = avio_rb32(pb);
            avio_rb32(pb); /* bytes per sample */
        } else if (version == 2) {
            avio_rb32(pb); /* sizeof struct only */
            st->codec->sample_rate = av_int2double(avio_rb64(pb));
            st->codec->channels    = avio_rb32(pb);
            avio_rb32(pb); /* always 0x7F000000 */
            st->codec->bits_per_coded_sample = avio_rb32(pb);

            flags = avio_rb32(pb); /* lpcm format specific flag */
            sc->bytes_per_frame   = avio_rb32(pb);
            sc->samples_per_frame = avio_rb32(pb);
            if (st->codec->codec_tag == MKTAG('l','p','c','m'))
                st->codec->codec_id =
                    ff_mov_get_lpcm_codec_id(st->codec->bits_per_coded_sample,
                                             flags);
        }
    }

    switch (st->codec->codec_id) {
    case AV_CODEC_ID_PCM_S8:
    case AV_CODEC_ID_PCM_U8:
        if (st->codec->bits_per_coded_sample == 16)
            st->codec->codec_id = AV_CODEC_ID_PCM_S16BE;
        break;
    case AV_CODEC_ID_PCM_S16LE:
    case AV_CODEC_ID_PCM_S16BE:
        if (st->codec->bits_per_coded_sample == 8)
            st->codec->codec_id = AV_CODEC_ID_PCM_S8;
        else if (st->codec->bits_per_coded_sample == 24)
            st->codec->codec_id =
                st->codec->codec_id == AV_CODEC_ID_PCM_S16BE ?
                AV_CODEC_ID_PCM_S24BE : AV_CODEC_ID_PCM_S24LE;
        break;
    /* set values for old format before stsd version 1 appeared */
    case AV_CODEC_ID_MACE3:
        sc->samples_per_frame = 6;
        sc->bytes_per_frame   = 2 * st->codec->channels;
        break;
    case AV_CODEC_ID_MACE6:
        sc->samples_per_frame = 6;
        sc->bytes_per_frame   = 1 * st->codec->channels;
        break;
    case AV_CODEC_ID_ADPCM_IMA_QT:
        sc->samples_per_frame = 64;
        sc->bytes_per_frame   = 34 * st->codec->channels;
        break;
    case AV_CODEC_ID_GSM:
        sc->samples_per_frame = 160;
        sc->bytes_per_frame   = 33;
        break;
    default:
        break;
    }

    bits_per_sample = av_get_bits_per_sample(st->codec->codec_id);
    if (bits_per_sample) {
        st->codec->bits_per_coded_sample = bits_per_sample;
        sc->sample_size = (bits_per_sample >> 3) * st->codec->channels;
    }
}

1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431
static void mov_parse_stsd_subtitle(MOVContext *c, AVIOContext *pb,
                                    AVStream *st, MOVStreamContext *sc,
                                    int size)
{
    // ttxt stsd contains display flags, justification, background
    // color, fonts, and default styles, so fake an atom to read it
    MOVAtom fake_atom = { .size = size };
    // mp4s contains a regular esds atom
    if (st->codec->codec_tag != AV_RL32("mp4s"))
        mov_read_glbl(c, pb, fake_atom);
    st->codec->width  = sc->width;
    st->codec->height = sc->height;
}

1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465
static uint32_t yuv_to_rgba(uint32_t ycbcr)
{
    uint8_t r, g, b;
    int y, cb, cr;

    y  = (ycbcr >> 16) & 0xFF;
    cr = (ycbcr >> 8)  & 0xFF;
    cb =  ycbcr        & 0xFF;

    b = av_clip_uint8(1.164 * (y - 16)                      + 2.018 * (cb - 128));
    g = av_clip_uint8(1.164 * (y - 16) - 0.813 * (cr - 128) - 0.391 * (cb - 128));
    r = av_clip_uint8(1.164 * (y - 16) + 1.596 * (cr - 128));

    return (r << 16) | (g << 8) | b;
}

static int mov_rewrite_dvd_sub_extradata(AVStream *st)
{
    char buf[256] = {0};
    uint8_t *src = st->codec->extradata;
    int i;

    if (st->codec->extradata_size != 64)
        return 0;

    if (st->codec->width > 0 &&  st->codec->height > 0)
        snprintf(buf, sizeof(buf), "size: %dx%d\n",
                 st->codec->width, st->codec->height);
    av_strlcat(buf, "palette: ", sizeof(buf));

    for (i = 0; i < 16; i++) {
        uint32_t yuv = AV_RB32(src + i * 4);
        uint32_t rgba = yuv_to_rgba(yuv);

1466
        av_strlcatf(buf, sizeof(buf), "%06"PRIx32"%s", rgba, i != 15 ? ", " : "");
1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482
    }

    if (av_strlcat(buf, "\n", sizeof(buf)) >= sizeof(buf))
        return 0;

    av_freep(&st->codec->extradata);
    st->codec->extradata_size = 0;
    st->codec->extradata = av_mallocz(strlen(buf) + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = strlen(buf);
    memcpy(st->codec->extradata, buf, st->codec->extradata_size);

    return 0;
}

L
Luca Barbato 已提交
1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499
static int mov_parse_stsd_data(MOVContext *c, AVIOContext *pb,
                                AVStream *st, MOVStreamContext *sc,
                                int size)
{
    if (st->codec->codec_tag == MKTAG('t','m','c','d')) {
        st->codec->extradata_size = size;
        st->codec->extradata = av_malloc(size + FF_INPUT_BUFFER_PADDING_SIZE);
        if (!st->codec->extradata)
            return AVERROR(ENOMEM);
        avio_read(pb, st->codec->extradata, size);
    } else {
        /* other codec type, just skip (rtp, mp4s ...) */
        avio_skip(pb, size);
    }
    return 0;
}

1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563
static int mov_finalize_stsd_codec(MOVContext *c, AVIOContext *pb,
                                   AVStream *st, MOVStreamContext *sc)
{
    if (st->codec->codec_type == AVMEDIA_TYPE_AUDIO &&
        !st->codec->sample_rate && sc->time_scale > 1)
        st->codec->sample_rate = sc->time_scale;

    /* special codec parameters handling */
    switch (st->codec->codec_id) {
#if CONFIG_DV_DEMUXER
    case AV_CODEC_ID_DVAUDIO:
        c->dv_fctx  = avformat_alloc_context();
        c->dv_demux = avpriv_dv_init_demux(c->dv_fctx);
        if (!c->dv_demux) {
            av_log(c->fc, AV_LOG_ERROR, "dv demux context init error\n");
            return AVERROR(ENOMEM);
        }
        sc->dv_audio_container = 1;
        st->codec->codec_id    = AV_CODEC_ID_PCM_S16LE;
        break;
#endif
    /* no ifdef since parameters are always those */
    case AV_CODEC_ID_QCELP:
        st->codec->channels = 1;
        // force sample rate for qcelp when not stored in mov
        if (st->codec->codec_tag != MKTAG('Q','c','l','p'))
            st->codec->sample_rate = 8000;
        break;
    case AV_CODEC_ID_AMR_NB:
        st->codec->channels    = 1;
        /* force sample rate for amr, stsd in 3gp does not store sample rate */
        st->codec->sample_rate = 8000;
        break;
    case AV_CODEC_ID_AMR_WB:
        st->codec->channels    = 1;
        st->codec->sample_rate = 16000;
        break;
    case AV_CODEC_ID_MP2:
    case AV_CODEC_ID_MP3:
        /* force type after stsd for m1a hdlr */
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
        st->need_parsing      = AVSTREAM_PARSE_FULL;
        break;
    case AV_CODEC_ID_GSM:
    case AV_CODEC_ID_ADPCM_MS:
    case AV_CODEC_ID_ADPCM_IMA_WAV:
    case AV_CODEC_ID_ILBC:
        st->codec->block_align = sc->bytes_per_frame;
        break;
    case AV_CODEC_ID_ALAC:
        if (st->codec->extradata_size == 36) {
            st->codec->channels    = AV_RB8 (st->codec->extradata + 21);
            st->codec->sample_rate = AV_RB32(st->codec->extradata + 32);
        }
        break;
    case AV_CODEC_ID_VC1:
        st->need_parsing = AVSTREAM_PARSE_FULL;
        break;
    default:
        break;
    }
    return 0;
}

1564 1565 1566 1567 1568 1569 1570 1571
static int mov_skip_multiple_stsd(MOVContext *c, AVIOContext *pb,
                                  int codec_tag, int format,
                                  int size)
{
    int video_codec_id = ff_codec_get_id(ff_codec_movvideo_tags, format);

    if (codec_tag &&
        (codec_tag == AV_RL32("avc1") ||
Y
Yusuke Nakamura 已提交
1572 1573
         codec_tag == AV_RL32("hvc1") ||
         codec_tag == AV_RL32("hev1") ||
1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588
         (codec_tag != format &&
          (c->fc->video_codec_id ? video_codec_id != c->fc->video_codec_id
                                 : codec_tag != MKTAG('j','p','e','g'))))) {
        /* Multiple fourcc, we skip JPEG. This is not correct, we should
         * export it as a separate AVStream but this needs a few changes
         * in the MOV demuxer, patch welcome. */

        av_log(c->fc, AV_LOG_WARNING, "multiple fourcc not supported\n");
        avio_skip(pb, size);
        return 1;
    }

    return 0;
}

1589
int ff_mov_read_stsd_entries(MOVContext *c, AVIOContext *pb, int entries)
1590
{
1591 1592
    AVStream *st;
    MOVStreamContext *sc;
1593
    int pseudo_stream_id;
1594

1595 1596 1597 1598 1599
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1600 1601 1602
    for (pseudo_stream_id = 0;
         pseudo_stream_id < entries && !pb->eof_reached;
         pseudo_stream_id++) {
1603
        //Parsing Sample description table
1604
        enum AVCodecID id;
L
Luca Barbato 已提交
1605
        int ret, dref_id = 1;
1606
        MOVAtom a = { AV_RL32("stsd") };
1607
        int64_t start_pos = avio_tell(pb);
1608
        uint32_t size = avio_rb32(pb); /* size */
1609
        uint32_t format = avio_rl32(pb); /* data format */
1610

1611
        if (size >= 16) {
1612 1613 1614
            avio_rb32(pb); /* reserved */
            avio_rb16(pb); /* reserved */
            dref_id = avio_rb16(pb);
1615
        } else {
1616
            av_log(c->fc, AV_LOG_ERROR, "invalid size %"PRIu32" in stsd\n", size);
1617
            return AVERROR_INVALIDDATA;
1618
        }
1619

1620 1621
        if (mov_skip_multiple_stsd(c, pb, st->codec->codec_tag, format,
                                   size - (avio_tell(pb) - start_pos)))
1622
            continue;
1623

1624
        sc->pseudo_stream_id = st->codec->codec_tag ? -1 : pseudo_stream_id;
1625
        sc->dref_id= dref_id;
1626

1627
        id = mov_codec_id(st, format);
1628

1629
        av_dlog(c->fc, "size=%"PRIu32" 4CC= %"PRIu8"%"PRIu8"%"PRIu8"%"PRIu8" codec_type=%d\n", size,
1630 1631
                (format >> 0) & 0xff, (format >> 8) & 0xff, (format >> 16) & 0xff,
                (format >> 24) & 0xff, st->codec->codec_type);
1632

1633
        if (st->codec->codec_type==AVMEDIA_TYPE_VIDEO) {
1634
            st->codec->codec_id = id;
1635
            mov_parse_stsd_video(c, pb, st, sc);
1636
        } else if (st->codec->codec_type==AVMEDIA_TYPE_AUDIO) {
1637
            st->codec->codec_id = id;
1638
            mov_parse_stsd_audio(c, pb, st, sc);
1639
        } else if (st->codec->codec_type==AVMEDIA_TYPE_SUBTITLE){
1640 1641 1642
            st->codec->codec_id = id;
            mov_parse_stsd_subtitle(c, pb, st, sc,
                                    size - (avio_tell(pb) - start_pos));
1643
        } else {
L
Luca Barbato 已提交
1644 1645 1646 1647
            ret = mov_parse_stsd_data(c, pb, st, sc,
                                      size - (avio_tell(pb) - start_pos));
            if (ret < 0)
                return ret;
1648
        }
Y
Yusuke Nakamura 已提交
1649
        /* this will read extra atoms at the end (wave, alac, damr, avcC, hvcC, SMI ...) */
1650
        a.size = size - (avio_tell(pb) - start_pos);
1651
        if (a.size > 8) {
1652 1653
            if ((ret = mov_read_default(c, pb, a)) < 0)
                return ret;
1654
        } else if (a.size > 0)
1655
            avio_skip(pb, a.size);
1656
    }
1657

1658 1659 1660
    if (pb->eof_reached)
        return AVERROR_EOF;

1661
    return mov_finalize_stsd_codec(c, pb, st, sc);
1662 1663
}

1664
static int mov_read_stsd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1665 1666 1667
{
    int entries;

1668 1669 1670
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1671 1672 1673 1674

    return ff_mov_read_stsd_entries(c, pb, entries);
}

1675
static int mov_read_stsc(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1676
{
1677 1678
    AVStream *st;
    MOVStreamContext *sc;
1679
    unsigned int i, entries;
1680

1681 1682 1683 1684 1685
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1686 1687
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1688

1689
    entries = avio_rb32(pb);
1690

L
Luca Barbato 已提交
1691
    av_dlog(c->fc, "track[%i].stsc.entries = %i\n", c->fc->nb_streams-1, entries);
1692

A
Alex Converse 已提交
1693 1694
    if (!entries)
        return 0;
1695
    if (entries >= UINT_MAX / sizeof(*sc->stsc_data))
1696
        return AVERROR_INVALIDDATA;
1697 1698
    sc->stsc_data = av_malloc(entries * sizeof(*sc->stsc_data));
    if (!sc->stsc_data)
1699 1700
        return AVERROR(ENOMEM);

1701
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1702 1703 1704
        sc->stsc_data[i].first = avio_rb32(pb);
        sc->stsc_data[i].count = avio_rb32(pb);
        sc->stsc_data[i].id = avio_rb32(pb);
1705
    }
1706 1707 1708 1709 1710 1711

    sc->stsc_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1712 1713 1714
    return 0;
}

1715
static int mov_read_stps(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1716 1717 1718 1719 1720 1721 1722 1723 1724 1725
{
    AVStream *st;
    MOVStreamContext *sc;
    unsigned i, entries;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1726
    avio_rb32(pb); // version + flags
1727

1728
    entries = avio_rb32(pb);
1729
    if (entries >= UINT_MAX / sizeof(*sc->stps_data))
1730
        return AVERROR_INVALIDDATA;
1731 1732 1733 1734
    sc->stps_data = av_malloc(entries * sizeof(*sc->stps_data));
    if (!sc->stps_data)
        return AVERROR(ENOMEM);

1735
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1736
        sc->stps_data[i] = avio_rb32(pb);
L
Luca Barbato 已提交
1737
        //av_dlog(c->fc, "stps %d\n", sc->stps_data[i]);
1738 1739
    }

1740 1741 1742 1743 1744
    sc->stps_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1745 1746 1747
    return 0;
}

1748
static int mov_read_stss(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1749
{
1750 1751
    AVStream *st;
    MOVStreamContext *sc;
1752
    unsigned int i, entries;
1753

1754 1755 1756 1757 1758
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1759 1760
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1761

1762
    entries = avio_rb32(pb);
1763

L
Luca Barbato 已提交
1764
    av_dlog(c->fc, "keyframe_count = %d\n", entries);
1765

1766
    if (!entries)
1767 1768
    {
        sc->keyframe_absent = 1;
1769
        return 0;
1770
    }
1771
    if (entries >= UINT_MAX / sizeof(int))
1772
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
1773
    sc->keyframes = av_malloc(entries * sizeof(int));
1774
    if (!sc->keyframes)
1775 1776
        return AVERROR(ENOMEM);

1777
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1778
        sc->keyframes[i] = avio_rb32(pb);
L
Luca Barbato 已提交
1779
        //av_dlog(c->fc, "keyframes[]=%d\n", sc->keyframes[i]);
1780
    }
1781 1782 1783 1784 1785 1786

    sc->keyframe_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1787 1788 1789
    return 0;
}

1790
static int mov_read_stsz(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1791
{
1792 1793
    AVStream *st;
    MOVStreamContext *sc;
1794 1795 1796
    unsigned int i, entries, sample_size, field_size, num_bytes;
    GetBitContext gb;
    unsigned char* buf;
1797

1798 1799 1800 1801 1802
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1803 1804
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1805

1806
    if (atom.type == MKTAG('s','t','s','z')) {
1807
        sample_size = avio_rb32(pb);
1808 1809 1810
        if (!sc->sample_size) /* do not overwrite value computed in stsd */
            sc->sample_size = sample_size;
        field_size = 32;
1811 1812
    } else {
        sample_size = 0;
1813 1814
        avio_rb24(pb); /* reserved */
        field_size = avio_r8(pb);
1815
    }
1816
    entries = avio_rb32(pb);
1817

L
Luca Barbato 已提交
1818
    av_dlog(c->fc, "sample_size = %d sample_count = %d\n", sc->sample_size, entries);
1819

1820
    sc->sample_count = entries;
1821 1822 1823
    if (sample_size)
        return 0;

1824 1825
    if (field_size != 4 && field_size != 8 && field_size != 16 && field_size != 32) {
        av_log(c->fc, AV_LOG_ERROR, "Invalid sample field size %d\n", field_size);
1826
        return AVERROR_INVALIDDATA;
1827 1828
    }

A
Alex Converse 已提交
1829 1830
    if (!entries)
        return 0;
1831
    if (entries >= UINT_MAX / sizeof(int) || entries >= (UINT_MAX - 4) / field_size)
1832
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
1833
    sc->sample_sizes = av_malloc(entries * sizeof(int));
1834
    if (!sc->sample_sizes)
1835 1836
        return AVERROR(ENOMEM);

1837 1838
    num_bytes = (entries*field_size+4)>>3;

1839
    buf = av_malloc(num_bytes+FF_INPUT_BUFFER_PADDING_SIZE);
1840 1841 1842 1843 1844
    if (!buf) {
        av_freep(&sc->sample_sizes);
        return AVERROR(ENOMEM);
    }

1845
    if (avio_read(pb, buf, num_bytes) < num_bytes) {
1846 1847
        av_freep(&sc->sample_sizes);
        av_free(buf);
1848
        return AVERROR_INVALIDDATA;
1849 1850 1851 1852
    }

    init_get_bits(&gb, buf, 8*num_bytes);

1853
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1854
        sc->sample_sizes[i] = get_bits_long(&gb, field_size);
1855 1856
        sc->data_size += sc->sample_sizes[i];
    }
1857

1858 1859 1860 1861 1862
    sc->sample_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1863
    av_free(buf);
1864 1865 1866
    return 0;
}

1867
static int mov_read_stts(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1868
{
1869 1870
    AVStream *st;
    MOVStreamContext *sc;
1871
    unsigned int i, entries;
1872 1873
    int64_t duration=0;
    int64_t total_sample_count=0;
1874

1875 1876 1877 1878 1879
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1880 1881 1882
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1883

1884 1885
    av_dlog(c->fc, "track[%i].stts.entries = %i\n",
            c->fc->nb_streams-1, entries);
1886

A
Alex Converse 已提交
1887 1888 1889
    if (!entries)
        return 0;
    if (entries >= UINT_MAX / sizeof(*sc->stts_data))
L
Luca Barbato 已提交
1890
        return AVERROR(EINVAL);
1891

1892
    av_free(sc->stts_data);
1893
    sc->stts_data = av_malloc(entries * sizeof(*sc->stts_data));
1894
    if (!sc->stts_data)
1895
        return AVERROR(ENOMEM);
1896

1897
    for (i = 0; i < entries && !pb->eof_reached; i++) {
M
cleanup  
Michael Niedermayer 已提交
1898 1899
        int sample_duration;
        int sample_count;
1900

1901 1902
        sample_count=avio_rb32(pb);
        sample_duration = avio_rb32(pb);
1903 1904 1905 1906
        if (sample_count < 0) {
            av_log(c->fc, AV_LOG_ERROR, "Invalid sample_count=%d\n", sample_count);
            return AVERROR_INVALIDDATA;
        }
1907 1908 1909
        sc->stts_data[i].count= sample_count;
        sc->stts_data[i].duration= sample_duration;

1910 1911
        av_dlog(c->fc, "sample_count=%d, sample_duration=%d\n",
                sample_count, sample_duration);
1912

B
Baptiste Coudurier 已提交
1913
        duration+=(int64_t)sample_duration*sample_count;
1914 1915 1916
        total_sample_count+=sample_count;
    }

1917 1918 1919 1920 1921
    sc->stts_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1922
    st->nb_frames= total_sample_count;
1923
    if (duration)
1924
        st->duration= duration;
1925
    sc->track_end = duration;
1926 1927 1928
    return 0;
}

1929
static int mov_read_ctts(MOVContext *c, AVIOContext *pb, MOVAtom atom)
M
Michael Niedermayer 已提交
1930
{
1931 1932
    AVStream *st;
    MOVStreamContext *sc;
M
Michael Niedermayer 已提交
1933 1934
    unsigned int i, entries;

1935 1936 1937 1938 1939
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1940 1941 1942
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1943

L
Luca Barbato 已提交
1944
    av_dlog(c->fc, "track[%i].ctts.entries = %i\n", c->fc->nb_streams-1, entries);
1945

A
Alex Converse 已提交
1946 1947
    if (!entries)
        return 0;
1948
    if (entries >= UINT_MAX / sizeof(*sc->ctts_data))
1949
        return AVERROR_INVALIDDATA;
1950
    sc->ctts_data = av_malloc(entries * sizeof(*sc->ctts_data));
1951
    if (!sc->ctts_data)
1952
        return AVERROR(ENOMEM);
1953

1954
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1955 1956
        int count    =avio_rb32(pb);
        int duration =avio_rb32(pb);
1957 1958 1959

        sc->ctts_data[i].count   = count;
        sc->ctts_data[i].duration= duration;
1960 1961
        if (duration < 0)
            sc->dts_shift = FFMAX(sc->dts_shift, -duration);
M
Michael Niedermayer 已提交
1962
    }
1963

1964 1965 1966 1967 1968
    sc->ctts_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

L
Luca Barbato 已提交
1969
    av_dlog(c->fc, "dts shift %d\n", sc->dts_shift);
1970

M
Michael Niedermayer 已提交
1971 1972 1973
    return 0;
}

1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013
static int mov_read_sbgp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    MOVStreamContext *sc;
    unsigned int i, entries;
    uint8_t version;
    uint32_t grouping_type;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

    version = avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    grouping_type = avio_rl32(pb);
    if (grouping_type != MKTAG( 'r','a','p',' '))
        return 0; /* only support 'rap ' grouping */
    if (version == 1)
        avio_rb32(pb); /* grouping_type_parameter */

    entries = avio_rb32(pb);
    if (!entries)
        return 0;
    if (entries >= UINT_MAX / sizeof(*sc->rap_group))
        return AVERROR_INVALIDDATA;
    sc->rap_group = av_malloc(entries * sizeof(*sc->rap_group));
    if (!sc->rap_group)
        return AVERROR(ENOMEM);

    for (i = 0; i < entries && !pb->eof_reached; i++) {
        sc->rap_group[i].count = avio_rb32(pb); /* sample_count */
        sc->rap_group[i].index = avio_rb32(pb); /* group_description_index */
    }

    sc->rap_group_count = i;

    return pb->eof_reached ? AVERROR_EOF : 0;
}

2014 2015 2016
static void mov_build_index(MOVContext *mov, AVStream *st)
{
    MOVStreamContext *sc = st->priv_data;
2017
    int64_t current_offset;
2018 2019 2020 2021
    int64_t current_dts = 0;
    unsigned int stts_index = 0;
    unsigned int stsc_index = 0;
    unsigned int stss_index = 0;
2022
    unsigned int stps_index = 0;
2023
    unsigned int i, j;
2024
    uint64_t stream_size = 0;
2025

2026
    /* adjust first dts according to edit list */
2027
    if (sc->time_offset && mov->time_scale > 0) {
2028 2029 2030
        if (sc->time_offset < 0)
            sc->time_offset = av_rescale(sc->time_offset, sc->time_scale, mov->time_scale);
        current_dts = -sc->time_offset;
2031
        if (sc->ctts_data && sc->stts_data && sc->stts_data[0].duration &&
2032
            sc->ctts_data[0].duration / sc->stts_data[0].duration > 16) {
2033 2034 2035 2036 2037
            /* more than 16 frames delay, dts are likely wrong
               this happens with files created by iMovie */
            sc->wrong_dts = 1;
            st->codec->has_b_frames = 1;
        }
2038 2039
    }

2040
    /* only use old uncompressed audio chunk demuxing when stts specifies it */
2041
    if (!(st->codec->codec_type == AVMEDIA_TYPE_AUDIO &&
2042
          sc->stts_count == 1 && sc->stts_data[0].duration == 1)) {
2043 2044
        unsigned int current_sample = 0;
        unsigned int stts_sample = 0;
2045
        unsigned int sample_size;
2046
        unsigned int distance = 0;
2047 2048 2049
        unsigned int rap_group_index = 0;
        unsigned int rap_group_sample = 0;
        int rap_group_present = sc->rap_group_count && sc->rap_group;
2050
        int key_off = (sc->keyframes && sc->keyframes[0] > 0) || (sc->stps_data && sc->stps_data[0] > 0);
2051

2052 2053
        current_dts -= sc->dts_shift;

A
Alex Converse 已提交
2054 2055
        if (!sc->sample_count)
            return;
2056
        if (sc->sample_count >= UINT_MAX / sizeof(*st->index_entries) - st->nb_index_entries)
2057
            return;
2058 2059 2060 2061
        if (av_reallocp_array(&st->index_entries,
                              st->nb_index_entries + sc->sample_count,
                              sizeof(*st->index_entries)) < 0) {
            st->nb_index_entries = 0;
2062
            return;
2063
        }
2064
        st->index_entries_allocated_size = (st->nb_index_entries + sc->sample_count) * sizeof(*st->index_entries);
2065

2066 2067
        for (i = 0; i < sc->chunk_count; i++) {
            current_offset = sc->chunk_offsets[i];
2068
            while (stsc_index + 1 < sc->stsc_count &&
2069
                i + 1 == sc->stsc_data[stsc_index + 1].first)
2070
                stsc_index++;
2071
            for (j = 0; j < sc->stsc_data[stsc_index].count; j++) {
2072
                int keyframe = 0;
2073 2074
                if (current_sample >= sc->sample_count) {
                    av_log(mov->fc, AV_LOG_ERROR, "wrong sample count\n");
2075
                    return;
2076
                }
2077

2078
                if (!sc->keyframe_absent && (!sc->keyframe_count || current_sample+key_off == sc->keyframes[stss_index])) {
2079
                    keyframe = 1;
2080 2081
                    if (stss_index + 1 < sc->keyframe_count)
                        stss_index++;
2082 2083 2084 2085
                } else if (sc->stps_count && current_sample+key_off == sc->stps_data[stps_index]) {
                    keyframe = 1;
                    if (stps_index + 1 < sc->stps_count)
                        stps_index++;
2086
                }
2087 2088 2089 2090 2091 2092 2093 2094
                if (rap_group_present && rap_group_index < sc->rap_group_count) {
                    if (sc->rap_group[rap_group_index].index > 0)
                        keyframe = 1;
                    if (++rap_group_sample == sc->rap_group[rap_group_index].count) {
                        rap_group_sample = 0;
                        rap_group_index++;
                    }
                }
2095 2096
                if (keyframe)
                    distance = 0;
2097
                sample_size = sc->sample_size > 0 ? sc->sample_size : sc->sample_sizes[current_sample];
2098
                if (sc->pseudo_stream_id == -1 ||
2099
                   sc->stsc_data[stsc_index].id - 1 == sc->pseudo_stream_id) {
2100 2101 2102 2103 2104 2105
                    AVIndexEntry *e = &st->index_entries[st->nb_index_entries++];
                    e->pos = current_offset;
                    e->timestamp = current_dts;
                    e->size = sample_size;
                    e->min_distance = distance;
                    e->flags = keyframe ? AVINDEX_KEYFRAME : 0;
L
Luca Barbato 已提交
2106
                    av_dlog(mov->fc, "AVIndex stream %d, sample %d, offset %"PRIx64", dts %"PRId64", "
2107 2108 2109
                            "size %d, distance %d, keyframe %d\n", st->index, current_sample,
                            current_offset, current_dts, sample_size, distance, keyframe);
                }
2110

2111
                current_offset += sample_size;
2112
                stream_size += sample_size;
2113
                current_dts += sc->stts_data[stts_index].duration;
2114 2115 2116 2117 2118 2119 2120 2121 2122
                distance++;
                stts_sample++;
                current_sample++;
                if (stts_index + 1 < sc->stts_count && stts_sample == sc->stts_data[stts_index].count) {
                    stts_sample = 0;
                    stts_index++;
                }
            }
        }
2123 2124
        if (st->duration > 0)
            st->codec->bit_rate = stream_size*8*sc->time_scale/st->duration;
2125
    } else {
2126
        unsigned chunk_samples, total = 0;
2127

2128 2129 2130
        // compute total chunk count
        for (i = 0; i < sc->stsc_count; i++) {
            unsigned count, chunk_count;
2131

2132
            chunk_samples = sc->stsc_data[i].count;
2133 2134
            if (i != sc->stsc_count - 1 &&
                sc->samples_per_frame && chunk_samples % sc->samples_per_frame) {
2135 2136 2137 2138
                av_log(mov->fc, AV_LOG_ERROR, "error unaligned chunk\n");
                return;
            }

2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154
            if (sc->samples_per_frame >= 160) { // gsm
                count = chunk_samples / sc->samples_per_frame;
            } else if (sc->samples_per_frame > 1) {
                unsigned samples = (1024/sc->samples_per_frame)*sc->samples_per_frame;
                count = (chunk_samples+samples-1) / samples;
            } else {
                count = (chunk_samples+1023) / 1024;
            }

            if (i < sc->stsc_count - 1)
                chunk_count = sc->stsc_data[i+1].first - sc->stsc_data[i].first;
            else
                chunk_count = sc->chunk_count - (sc->stsc_data[i].first - 1);
            total += chunk_count * count;
        }

L
Luca Barbato 已提交
2155
        av_dlog(mov->fc, "chunk count %d\n", total);
2156
        if (total >= UINT_MAX / sizeof(*st->index_entries) - st->nb_index_entries)
2157
            return;
2158 2159 2160 2161
        if (av_reallocp_array(&st->index_entries,
                              st->nb_index_entries + total,
                              sizeof(*st->index_entries)) < 0) {
            st->nb_index_entries = 0;
2162
            return;
2163
        }
2164
        st->index_entries_allocated_size = (st->nb_index_entries + total) * sizeof(*st->index_entries);
2165 2166 2167 2168 2169 2170 2171 2172 2173

        // populate index
        for (i = 0; i < sc->chunk_count; i++) {
            current_offset = sc->chunk_offsets[i];
            if (stsc_index + 1 < sc->stsc_count &&
                i + 1 == sc->stsc_data[stsc_index + 1].first)
                stsc_index++;
            chunk_samples = sc->stsc_data[stsc_index].count;

2174
            while (chunk_samples > 0) {
2175
                AVIndexEntry *e;
2176 2177 2178 2179 2180 2181 2182 2183 2184 2185
                unsigned size, samples;

                if (sc->samples_per_frame >= 160) { // gsm
                    samples = sc->samples_per_frame;
                    size = sc->bytes_per_frame;
                } else {
                    if (sc->samples_per_frame > 1) {
                        samples = FFMIN((1024 / sc->samples_per_frame)*
                                        sc->samples_per_frame, chunk_samples);
                        size = (samples / sc->samples_per_frame) * sc->bytes_per_frame;
2186
                    } else {
2187 2188
                        samples = FFMIN(1024, chunk_samples);
                        size = samples * sc->sample_size;
2189 2190
                    }
                }
2191

2192 2193 2194 2195 2196 2197 2198 2199 2200 2201
                if (st->nb_index_entries >= total) {
                    av_log(mov->fc, AV_LOG_ERROR, "wrong chunk count %d\n", total);
                    return;
                }
                e = &st->index_entries[st->nb_index_entries++];
                e->pos = current_offset;
                e->timestamp = current_dts;
                e->size = size;
                e->min_distance = 0;
                e->flags = AVINDEX_KEYFRAME;
L
Luca Barbato 已提交
2202
                av_dlog(mov->fc, "AVIndex stream %d, chunk %d, offset %"PRIx64", dts %"PRId64", "
2203
                        "size %d, duration %d\n", st->index, i, current_offset, current_dts,
2204 2205 2206
                        size, samples);

                current_offset += size;
2207
                current_dts += samples;
2208
                chunk_samples -= samples;
2209 2210 2211 2212
            }
        }
    }
}
2213

2214 2215
static int mov_open_dref(AVIOContext **pb, char *src, MOVDref *ref,
                         AVIOInterruptCB *int_cb)
2216
{
2217 2218
    /* try relative path, we do not try the absolute because it can leak information about our
       system to an attacker */
2219 2220 2221 2222 2223 2224 2225 2226 2227 2228 2229 2230 2231 2232 2233 2234 2235 2236 2237 2238 2239 2240
    if (ref->nlvl_to > 0 && ref->nlvl_from > 0) {
        char filename[1024];
        char *src_path;
        int i, l;

        /* find a source dir */
        src_path = strrchr(src, '/');
        if (src_path)
            src_path++;
        else
            src_path = src;

        /* find a next level down to target */
        for (i = 0, l = strlen(ref->path) - 1; l >= 0; l--)
            if (ref->path[l] == '/') {
                if (i == ref->nlvl_to - 1)
                    break;
                else
                    i++;
            }

        /* compose filename if next level down to target was found */
2241
        if (i == ref->nlvl_to - 1 && src_path - src  < sizeof(filename)) {
2242 2243 2244 2245 2246 2247 2248 2249
            memcpy(filename, src, src_path - src);
            filename[src_path - src] = 0;

            for (i = 1; i < ref->nlvl_from; i++)
                av_strlcat(filename, "../", 1024);

            av_strlcat(filename, ref->path + l + 1, 1024);

2250
            if (!avio_open2(pb, filename, AVIO_FLAG_READ, int_cb, NULL))
2251 2252 2253 2254 2255
                return 0;
        }
    }

    return AVERROR(ENOENT);
M
Mans Rullgard 已提交
2256
}
2257

2258
static int mov_read_trak(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2259 2260 2261
{
    AVStream *st;
    MOVStreamContext *sc;
2262
    int ret;
2263

2264
    st = avformat_new_stream(c->fc, NULL);
B
Baptiste Coudurier 已提交
2265
    if (!st) return AVERROR(ENOMEM);
2266
    st->id = c->fc->nb_streams;
B
Baptiste Coudurier 已提交
2267
    sc = av_mallocz(sizeof(MOVStreamContext));
2268
    if (!sc) return AVERROR(ENOMEM);
2269 2270

    st->priv_data = sc;
2271
    st->codec->codec_type = AVMEDIA_TYPE_DATA;
2272
    sc->ffindex = st->index;
2273

2274 2275 2276 2277
    if ((ret = mov_read_default(c, pb, atom)) < 0)
        return ret;

    /* sanity checks */
2278 2279
    if (sc->chunk_count && (!sc->stts_count || !sc->stsc_count ||
                            (!sc->sample_size && !sc->sample_count))) {
2280 2281
        av_log(c->fc, AV_LOG_ERROR, "stream %d, missing mandatory atoms, broken header\n",
               st->index);
2282 2283
        return 0;
    }
2284

2285
    if (sc->time_scale <= 0) {
2286
        av_log(c->fc, AV_LOG_WARNING, "stream %d, timescale not set\n", st->index);
2287
        sc->time_scale = c->time_scale;
2288
        if (sc->time_scale <= 0)
2289 2290
            sc->time_scale = 1;
    }
2291

2292
    avpriv_set_pts_info(st, 64, 1, sc->time_scale);
2293 2294 2295 2296

    mov_build_index(c, st);

    if (sc->dref_id-1 < sc->drefs_count && sc->drefs[sc->dref_id-1].path) {
2297
        MOVDref *dref = &sc->drefs[sc->dref_id - 1];
2298
        if (mov_open_dref(&sc->pb, c->fc->filename, dref, &c->fc->interrupt_callback) < 0)
2299 2300 2301 2302 2303
            av_log(c->fc, AV_LOG_ERROR,
                   "stream %d, error opening alias: path='%s', dir='%s', "
                   "filename='%s', volume='%s', nlvl_from=%d, nlvl_to=%d\n",
                   st->index, dref->path, dref->dir, dref->filename,
                   dref->volume, dref->nlvl_from, dref->nlvl_to);
2304 2305 2306
    } else
        sc->pb = c->fc->pb;

2307
    if (st->codec->codec_type == AVMEDIA_TYPE_VIDEO) {
2308 2309 2310 2311
        if (!st->sample_aspect_ratio.num &&
            (st->codec->width != sc->width || st->codec->height != sc->height)) {
            st->sample_aspect_ratio = av_d2q(((double)st->codec->height * sc->width) /
                                             ((double)st->codec->width * sc->height), INT_MAX);
2312
        }
2313 2314
    }

2315 2316 2317 2318 2319 2320 2321 2322
    // done for ai5q, ai52, ai55, ai1q, ai12 and ai15.
    if (!st->codec->extradata_size && st->codec->codec_id == AV_CODEC_ID_H264 &&
        TAG_IS_AVCI(st->codec->codec_tag)) {
        ret = ff_generate_avci_extradata(st);
        if (ret < 0)
            return ret;
    }

2323
    switch (st->codec->codec_id) {
2324
#if CONFIG_H261_DECODER
2325
    case AV_CODEC_ID_H261:
2326
#endif
2327
#if CONFIG_H263_DECODER
2328
    case AV_CODEC_ID_H263:
2329
#endif
2330
#if CONFIG_MPEG4_DECODER
2331
    case AV_CODEC_ID_MPEG4:
2332
#endif
2333
        st->codec->width = 0; /* let decoder init width/height */
2334 2335 2336
        st->codec->height= 0;
        break;
    }
B
Baptiste Coudurier 已提交
2337 2338 2339

    /* Do not need those anymore. */
    av_freep(&sc->chunk_offsets);
2340
    av_freep(&sc->stsc_data);
B
Baptiste Coudurier 已提交
2341 2342 2343
    av_freep(&sc->sample_sizes);
    av_freep(&sc->keyframes);
    av_freep(&sc->stts_data);
2344
    av_freep(&sc->stps_data);
2345
    av_freep(&sc->rap_group);
B
Baptiste Coudurier 已提交
2346

2347
    return 0;
2348 2349
}

2350
static int mov_read_ilst(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2351 2352 2353 2354 2355 2356 2357 2358
{
    int ret;
    c->itunes_metadata = 1;
    ret = mov_read_default(c, pb, atom);
    c->itunes_metadata = 0;
    return ret;
}

2359 2360 2361 2362 2363 2364 2365 2366 2367 2368 2369 2370 2371 2372 2373 2374 2375 2376 2377 2378 2379 2380 2381 2382 2383 2384 2385 2386 2387 2388 2389 2390 2391 2392 2393 2394 2395 2396 2397 2398 2399 2400 2401 2402 2403 2404 2405 2406 2407 2408 2409 2410 2411 2412 2413 2414 2415 2416 2417 2418 2419 2420 2421 2422 2423 2424 2425 2426 2427 2428 2429 2430 2431 2432 2433 2434 2435 2436 2437 2438 2439 2440
static int mov_read_replaygain(MOVContext *c, AVIOContext *pb, int size)
{
    int64_t end = avio_tell(pb) + size;
    uint8_t *key = NULL, *val = NULL;
    int i;

    for (i = 0; i < 2; i++) {
        uint8_t **p;
        uint32_t len, tag;

        if (end - avio_tell(pb) <= 12)
            break;

        len = avio_rb32(pb);
        tag = avio_rl32(pb);
        avio_skip(pb, 4); // flags

        if (len < 12 || len - 12 > end - avio_tell(pb))
            break;
        len -= 12;

        if (tag == MKTAG('n', 'a', 'm', 'e'))
            p = &key;
        else if (tag == MKTAG('d', 'a', 't', 'a') && len > 4) {
            avio_skip(pb, 4);
            len -= 4;
            p = &val;
        } else
            break;

        *p = av_malloc(len + 1);
        if (!*p)
            break;
        avio_read(pb, *p, len);
        (*p)[len] = 0;
    }

    if (key && val) {
        av_dict_set(&c->fc->metadata, key, val,
                    AV_DICT_DONT_STRDUP_KEY | AV_DICT_DONT_STRDUP_VAL);
        key = val = NULL;
    }

    avio_seek(pb, end, SEEK_SET);
    av_freep(&key);
    av_freep(&val);
    return 0;
}

static int mov_read_custom(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int64_t end = avio_tell(pb) + atom.size;
    uint32_t tag, len;

    if (atom.size < 8)
        goto fail;

    len = avio_rb32(pb);
    tag = avio_rl32(pb);

    if (len > atom.size)
        goto fail;

    if (tag == MKTAG('m', 'e', 'a', 'n') && len > 12) {
        uint8_t domain[128];
        int domain_len;

        avio_skip(pb, 4); // flags
        len -= 12;

        domain_len = avio_get_str(pb, len, domain, sizeof(domain));
        avio_skip(pb, len - domain_len);
        if (!strcmp(domain, "org.hydrogenaudio.replaygain"))
            return mov_read_replaygain(c, pb, end - avio_tell(pb));
    }

fail:
    av_log(c->fc, AV_LOG_VERBOSE,
           "Unhandled or malformed custom metadata of size %"PRId64"\n", atom.size);
    return 0;
}

2441
static int mov_read_meta(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2442
{
2443
    while (atom.size > 8) {
2444
        uint32_t tag = avio_rl32(pb);
2445 2446
        atom.size -= 4;
        if (tag == MKTAG('h','d','l','r')) {
A
Anton Khirnov 已提交
2447
            avio_seek(pb, -8, SEEK_CUR);
2448 2449 2450 2451 2452
            atom.size += 8;
            return mov_read_default(c, pb, atom);
        }
    }
    return 0;
2453 2454
}

2455
static int mov_read_tkhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2456
{
2457 2458 2459 2460
    int i;
    int width;
    int height;
    int64_t disp_transform[2];
2461
    int display_matrix[3][3];
2462 2463 2464
    AVStream *st;
    MOVStreamContext *sc;
    int version;
2465
    int flags;
2466 2467 2468 2469 2470

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;
2471

2472
    version = avio_r8(pb);
2473 2474
    flags = avio_rb24(pb);
    st->disposition |= (flags & MOV_TKHD_FLAG_ENABLED) ? AV_DISPOSITION_DEFAULT : 0;
2475

B
Baptiste Coudurier 已提交
2476
    if (version == 1) {
2477 2478
        avio_rb64(pb);
        avio_rb64(pb);
B
Baptiste Coudurier 已提交
2479
    } else {
2480 2481
        avio_rb32(pb); /* creation time */
        avio_rb32(pb); /* modification time */
B
Baptiste Coudurier 已提交
2482
    }
2483 2484
    st->id = (int)avio_rb32(pb); /* track id (NOT 0 !)*/
    avio_rb32(pb); /* reserved */
2485

2486
    /* highlevel (considering edits) duration in movie timebase */
2487 2488 2489
    (version == 1) ? avio_rb64(pb) : avio_rb32(pb);
    avio_rb32(pb); /* reserved */
    avio_rb32(pb); /* reserved */
2490

2491 2492 2493 2494
    avio_rb16(pb); /* layer */
    avio_rb16(pb); /* alternate group */
    avio_rb16(pb); /* volume */
    avio_rb16(pb); /* reserved */
2495

2496 2497
    //read in the display matrix (outlined in ISO 14496-12, Section 6.2.2)
    // they're kept in fixed point format through all calculations
2498 2499
    // save u,v,z to store the whole matrix in the AV_PKT_DATA_DISPLAYMATRIX
    // side data, but the scale factor is not needed to calculate aspect ratio
2500
    for (i = 0; i < 3; i++) {
2501 2502
        display_matrix[i][0] = avio_rb32(pb);   // 16.16 fixed point
        display_matrix[i][1] = avio_rb32(pb);   // 16.16 fixed point
2503
        display_matrix[i][2] = avio_rb32(pb);   //  2.30 fixed point
2504
    }
2505

2506 2507
    width = avio_rb32(pb);       // 16.16 fixed point track width
    height = avio_rb32(pb);      // 16.16 fixed point track height
2508 2509
    sc->width = width >> 16;
    sc->height = height >> 16;
2510

2511 2512 2513 2514 2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526 2527 2528 2529
    // save the matrix when it is not the default identity
    if (display_matrix[0][0] != (1 << 16) ||
        display_matrix[1][1] != (1 << 16) ||
        display_matrix[2][2] != (1 << 30) ||
        display_matrix[0][1] || display_matrix[0][2] ||
        display_matrix[1][0] || display_matrix[1][2] ||
        display_matrix[2][0] || display_matrix[2][1]) {
        int i, j;

        av_freep(&sc->display_matrix);
        sc->display_matrix = av_malloc(sizeof(int32_t) * 9);
        if (!sc->display_matrix)
            return AVERROR(ENOMEM);

        for (i = 0; i < 3; i++)
            for (j = 0; j < 3; j++)
                sc->display_matrix[i * 3 + j] = display_matrix[j][i];
    }

2530
    // transform the display width/height according to the matrix
2531
    // skip this if the display matrix is the default identity matrix
2532
    // or if it is rotating the picture, ex iPhone 3GS
2533 2534
    // to keep the same scale, use [width height 1<<16]
    if (width && height &&
2535 2536 2537 2538 2539
        ((display_matrix[0][0] != 65536  ||
          display_matrix[1][1] != 65536) &&
         !display_matrix[0][1] &&
         !display_matrix[1][0] &&
         !display_matrix[2][0] && !display_matrix[2][1])) {
2540 2541 2542 2543 2544 2545 2546
        for (i = 0; i < 2; i++)
            disp_transform[i] =
                (int64_t)  width  * display_matrix[0][i] +
                (int64_t)  height * display_matrix[1][i] +
                ((int64_t) display_matrix[2][i] << 16);

        //sample aspect ratio is new width/height divided by old width/height
2547
        st->sample_aspect_ratio = av_d2q(
2548 2549 2550
            ((double) disp_transform[0] * height) /
            ((double) disp_transform[1] * width), INT_MAX);
    }
2551 2552 2553
    return 0;
}

2554
static int mov_read_tfhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
2555 2556 2557 2558 2559
{
    MOVFragment *frag = &c->fragment;
    MOVTrackExt *trex = NULL;
    int flags, track_id, i;

2560 2561
    avio_r8(pb); /* version */
    flags = avio_rb24(pb);
B
Baptiste Coudurier 已提交
2562

2563
    track_id = avio_rb32(pb);
2564
    if (!track_id)
2565
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
2566 2567 2568 2569 2570 2571 2572 2573
    frag->track_id = track_id;
    for (i = 0; i < c->trex_count; i++)
        if (c->trex_data[i].track_id == frag->track_id) {
            trex = &c->trex_data[i];
            break;
        }
    if (!trex) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding trex\n");
2574
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
2575 2576
    }

2577
    frag->base_data_offset = flags & MOV_TFHD_BASE_DATA_OFFSET ?
2578 2579
                             avio_rb64(pb) : flags & MOV_TFHD_DEFAULT_BASE_IS_MOOF ?
                             frag->moof_offset : frag->implicit_offset;
2580 2581 2582 2583 2584 2585 2586 2587
    frag->stsd_id  = flags & MOV_TFHD_STSD_ID ? avio_rb32(pb) : trex->stsd_id;

    frag->duration = flags & MOV_TFHD_DEFAULT_DURATION ?
                     avio_rb32(pb) : trex->duration;
    frag->size     = flags & MOV_TFHD_DEFAULT_SIZE ?
                     avio_rb32(pb) : trex->size;
    frag->flags    = flags & MOV_TFHD_DEFAULT_FLAGS ?
                     avio_rb32(pb) : trex->flags;
L
Luca Barbato 已提交
2588
    av_dlog(c->fc, "frag flags 0x%x\n", frag->flags);
B
Baptiste Coudurier 已提交
2589 2590 2591
    return 0;
}

2592
static int mov_read_chap(MOVContext *c, AVIOContext *pb, MOVAtom atom)
D
David Conrad 已提交
2593
{
2594
    c->chapter_track = avio_rb32(pb);
D
David Conrad 已提交
2595 2596 2597
    return 0;
}

2598
static int mov_read_trex(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
2599 2600
{
    MOVTrackExt *trex;
2601
    int err;
B
Baptiste Coudurier 已提交
2602 2603

    if ((uint64_t)c->trex_count+1 >= UINT_MAX / sizeof(*c->trex_data))
2604
        return AVERROR_INVALIDDATA;
2605 2606 2607 2608 2609
    if ((err = av_reallocp_array(&c->trex_data, c->trex_count + 1,
                                 sizeof(*c->trex_data))) < 0) {
        c->trex_count = 0;
        return err;
    }
B
Baptiste Coudurier 已提交
2610
    trex = &c->trex_data[c->trex_count++];
2611 2612 2613 2614 2615 2616 2617
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    trex->track_id = avio_rb32(pb);
    trex->stsd_id  = avio_rb32(pb);
    trex->duration = avio_rb32(pb);
    trex->size     = avio_rb32(pb);
    trex->flags    = avio_rb32(pb);
B
Baptiste Coudurier 已提交
2618 2619 2620
    return 0;
}

M
Martin Storsjö 已提交
2621 2622 2623 2624 2625 2626 2627 2628 2629 2630 2631 2632 2633 2634 2635 2636 2637 2638 2639 2640 2641 2642 2643 2644 2645 2646 2647 2648 2649 2650
static int mov_read_tfdt(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    MOVFragment *frag = &c->fragment;
    AVStream *st = NULL;
    MOVStreamContext *sc;
    int version, i;

    for (i = 0; i < c->fc->nb_streams; i++) {
        if (c->fc->streams[i]->id == frag->track_id) {
            st = c->fc->streams[i];
            break;
        }
    }
    if (!st) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding track id %d\n", frag->track_id);
        return AVERROR_INVALIDDATA;
    }
    sc = st->priv_data;
    if (sc->pseudo_stream_id + 1 != frag->stsd_id)
        return 0;
    version = avio_r8(pb);
    avio_rb24(pb); /* flags */
    if (version) {
        sc->track_end = avio_rb64(pb);
    } else {
        sc->track_end = avio_rb32(pb);
    }
    return 0;
}

2651
static int mov_read_trun(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
2652 2653
{
    MOVFragment *frag = &c->fragment;
2654
    AVStream *st = NULL;
2655
    MOVStreamContext *sc;
2656
    MOVStts *ctts_data;
B
Baptiste Coudurier 已提交
2657 2658 2659 2660
    uint64_t offset;
    int64_t dts;
    int data_offset = 0;
    unsigned entries, first_sample_flags = frag->flags;
2661
    int flags, distance, i, found_keyframe = 0, err;
B
Baptiste Coudurier 已提交
2662

2663 2664 2665 2666 2667 2668 2669 2670
    for (i = 0; i < c->fc->nb_streams; i++) {
        if (c->fc->streams[i]->id == frag->track_id) {
            st = c->fc->streams[i];
            break;
        }
    }
    if (!st) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding track id %d\n", frag->track_id);
2671
        return AVERROR_INVALIDDATA;
2672
    }
2673
    sc = st->priv_data;
B
Baptiste Coudurier 已提交
2674 2675
    if (sc->pseudo_stream_id+1 != frag->stsd_id)
        return 0;
2676 2677 2678
    avio_r8(pb); /* version */
    flags = avio_rb24(pb);
    entries = avio_rb32(pb);
L
Luca Barbato 已提交
2679
    av_dlog(c->fc, "flags 0x%x entries %d\n", flags, entries);
2680 2681 2682 2683 2684 2685 2686 2687 2688

    /* Always assume the presence of composition time offsets.
     * Without this assumption, for instance, we cannot deal with a track in fragmented movies that meet the following.
     *  1) in the initial movie, there are no samples.
     *  2) in the first movie fragment, there is only one sample without composition time offset.
     *  3) in the subsequent movie fragments, there are samples with composition time offset. */
    if (!sc->ctts_count && sc->sample_count)
    {
        /* Complement ctts table if moov atom doesn't have ctts atom. */
2689
        ctts_data = av_realloc(NULL, sizeof(*sc->ctts_data));
2690
        if (!ctts_data)
B
Baptiste Coudurier 已提交
2691
            return AVERROR(ENOMEM);
2692
        sc->ctts_data = ctts_data;
2693 2694 2695
        sc->ctts_data[sc->ctts_count].count = sc->sample_count;
        sc->ctts_data[sc->ctts_count].duration = 0;
        sc->ctts_count++;
B
Baptiste Coudurier 已提交
2696
    }
2697
    if ((uint64_t)entries+sc->ctts_count >= UINT_MAX/sizeof(*sc->ctts_data))
2698
        return AVERROR_INVALIDDATA;
2699 2700 2701 2702 2703
    if ((err = av_reallocp_array(&sc->ctts_data, entries + sc->ctts_count,
                                 sizeof(*sc->ctts_data))) < 0) {
        sc->ctts_count = 0;
        return err;
    }
2704 2705
    if (flags & MOV_TRUN_DATA_OFFSET)        data_offset        = avio_rb32(pb);
    if (flags & MOV_TRUN_FIRST_SAMPLE_FLAGS) first_sample_flags = avio_rb32(pb);
2706
    dts    = sc->track_end - sc->time_offset;
B
Baptiste Coudurier 已提交
2707 2708
    offset = frag->base_data_offset + data_offset;
    distance = 0;
L
Luca Barbato 已提交
2709
    av_dlog(c->fc, "first sample flags 0x%x\n", first_sample_flags);
2710
    for (i = 0; i < entries && !pb->eof_reached; i++) {
B
Baptiste Coudurier 已提交
2711 2712 2713
        unsigned sample_size = frag->size;
        int sample_flags = i ? frag->flags : first_sample_flags;
        unsigned sample_duration = frag->duration;
2714
        int keyframe = 0;
B
Baptiste Coudurier 已提交
2715

2716 2717 2718
        if (flags & MOV_TRUN_SAMPLE_DURATION) sample_duration = avio_rb32(pb);
        if (flags & MOV_TRUN_SAMPLE_SIZE)     sample_size     = avio_rb32(pb);
        if (flags & MOV_TRUN_SAMPLE_FLAGS)    sample_flags    = avio_rb32(pb);
2719
        sc->ctts_data[sc->ctts_count].count = 1;
2720 2721
        sc->ctts_data[sc->ctts_count].duration = (flags & MOV_TRUN_SAMPLE_CTS) ?
                                                  avio_rb32(pb) : 0;
2722
        sc->ctts_count++;
2723 2724 2725 2726 2727 2728 2729
        if (st->codec->codec_type == AVMEDIA_TYPE_AUDIO)
            keyframe = 1;
        else if (!found_keyframe)
            keyframe = found_keyframe =
                !(sample_flags & (MOV_FRAG_SAMPLE_FLAG_IS_NON_SYNC |
                                  MOV_FRAG_SAMPLE_FLAG_DEPENDS_YES));
        if (keyframe)
B
Baptiste Coudurier 已提交
2730 2731 2732
            distance = 0;
        av_add_index_entry(st, offset, dts, sample_size, distance,
                           keyframe ? AVINDEX_KEYFRAME : 0);
L
Luca Barbato 已提交
2733
        av_dlog(c->fc, "AVIndex stream %d, sample %d, offset %"PRIx64", dts %"PRId64", "
B
Baptiste Coudurier 已提交
2734 2735 2736
                "size %d, distance %d, keyframe %d\n", st->index, sc->sample_count+i,
                offset, dts, sample_size, distance, keyframe);
        distance++;
2737
        dts += sample_duration;
B
Baptiste Coudurier 已提交
2738
        offset += sample_size;
2739
        sc->data_size += sample_size;
B
Baptiste Coudurier 已提交
2740
    }
2741 2742 2743 2744

    if (pb->eof_reached)
        return AVERROR_EOF;

2745
    frag->implicit_offset = offset;
2746
    st->duration = sc->track_end = dts + sc->time_offset;
B
Baptiste Coudurier 已提交
2747 2748 2749
    return 0;
}

2750 2751 2752
/* this atom should be null (from specs), but some buggy files put the 'moov' atom inside it... */
/* like the files created with Adobe Premiere 5.0, for samples see */
/* http://graphics.tudelft.nl/~wouter/publications/soundtests/ */
2753
static int mov_read_wide(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2754 2755 2756 2757 2758
{
    int err;

    if (atom.size < 8)
        return 0; /* continue */
2759
    if (avio_rb32(pb) != 0) { /* 0 sized mdat atom... use the 'wide' atom size */
2760
        avio_skip(pb, atom.size - 4);
2761 2762
        return 0;
    }
2763
    atom.type = avio_rl32(pb);
2764
    atom.size -= 8;
2765
    if (atom.type != MKTAG('m','d','a','t')) {
2766
        avio_skip(pb, atom.size);
2767 2768 2769 2770 2771 2772
        return 0;
    }
    err = mov_read_mdat(c, pb, atom);
    return err;
}

2773
static int mov_read_cmov(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2774
{
2775
#if CONFIG_ZLIB
2776
    AVIOContext ctx;
2777 2778
    uint8_t *cmov_data;
    uint8_t *moov_data; /* uncompressed data */
2779
    long cmov_len, moov_len;
2780
    int ret = -1;
2781

2782 2783
    avio_rb32(pb); /* dcom atom */
    if (avio_rl32(pb) != MKTAG('d','c','o','m'))
2784
        return AVERROR_INVALIDDATA;
2785
    if (avio_rl32(pb) != MKTAG('z','l','i','b')) {
B
Benoit Fouet 已提交
2786
        av_log(c->fc, AV_LOG_ERROR, "unknown compression for cmov atom !");
2787
        return AVERROR_INVALIDDATA;
2788
    }
2789 2790
    avio_rb32(pb); /* cmvd atom */
    if (avio_rl32(pb) != MKTAG('c','m','v','d'))
2791
        return AVERROR_INVALIDDATA;
2792
    moov_len = avio_rb32(pb); /* uncompressed size */
2793
    cmov_len = atom.size - 6 * 4;
2794

B
Baptiste Coudurier 已提交
2795
    cmov_data = av_malloc(cmov_len);
2796
    if (!cmov_data)
2797
        return AVERROR(ENOMEM);
B
Baptiste Coudurier 已提交
2798
    moov_data = av_malloc(moov_len);
2799 2800
    if (!moov_data) {
        av_free(cmov_data);
2801
        return AVERROR(ENOMEM);
2802
    }
2803
    avio_read(pb, cmov_data, cmov_len);
2804
    if (uncompress (moov_data, (uLongf *) &moov_len, (const Bytef *)cmov_data, cmov_len) != Z_OK)
2805
        goto free_and_return;
2806
    if (ffio_init_context(&ctx, moov_data, moov_len, 0, NULL, NULL, NULL, NULL) != 0)
2807
        goto free_and_return;
2808
    atom.type = MKTAG('m','o','o','v');
2809 2810
    atom.size = moov_len;
    ret = mov_read_default(c, &ctx, atom);
2811
free_and_return:
2812 2813 2814
    av_free(moov_data);
    av_free(cmov_data);
    return ret;
2815 2816
#else
    av_log(c->fc, AV_LOG_ERROR, "this file requires zlib support compiled in\n");
2817
    return AVERROR(ENOSYS);
2818
#endif
2819
}
2820

G
Gael Chardon 已提交
2821
/* edit list atom */
2822
static int mov_read_elst(MOVContext *c, AVIOContext *pb, MOVAtom atom)
G
Gael Chardon 已提交
2823
{
2824
    MOVStreamContext *sc;
2825
    int i, edit_count, version;
B
Baptiste Coudurier 已提交
2826

2827 2828 2829 2830
    if (c->fc->nb_streams < 1)
        return 0;
    sc = c->fc->streams[c->fc->nb_streams-1]->priv_data;

2831
    version = avio_r8(pb); /* version */
2832 2833
    avio_rb24(pb); /* flags */
    edit_count = avio_rb32(pb); /* entries */
B
Baptiste Coudurier 已提交
2834

2835
    if ((uint64_t)edit_count*12+8 > atom.size)
2836
        return AVERROR_INVALIDDATA;
2837

2838
    for (i=0; i<edit_count; i++){
2839 2840 2841 2842 2843 2844 2845
        int64_t time;
        int64_t duration;
        if (version == 1) {
            duration = avio_rb64(pb);
            time     = avio_rb64(pb);
        } else {
            duration = avio_rb32(pb); /* segment duration */
Y
Yusuke Nakamura 已提交
2846
            time     = (int32_t)avio_rb32(pb); /* media time */
2847
        }
2848
        avio_rb32(pb); /* Media rate */
2849 2850
        if (i == 0 && time >= -1) {
            sc->time_offset = time != -1 ? time : -duration;
2851
        }
B
Baptiste Coudurier 已提交
2852
    }
2853

2854
    if (edit_count > 1)
2855 2856 2857
        av_log(c->fc, AV_LOG_WARNING, "multiple edit list entries, "
               "a/v desync might occur, patch welcome\n");

L
Luca Barbato 已提交
2858
    av_dlog(c->fc, "track[%i].edit_count = %i\n", c->fc->nb_streams-1, edit_count);
B
Baptiste Coudurier 已提交
2859
    return 0;
G
Gael Chardon 已提交
2860 2861
}

2862
static const MOVParseTableEntry mov_default_parse_table[] = {
2863
{ MKTAG('a','v','s','s'), mov_read_extradata },
D
David Conrad 已提交
2864
{ MKTAG('c','h','p','l'), mov_read_chpl },
2865
{ MKTAG('c','o','6','4'), mov_read_stco },
2866
{ MKTAG('c','o','l','r'), mov_read_colr },
2867 2868 2869 2870 2871 2872
{ MKTAG('c','t','t','s'), mov_read_ctts }, /* composition time to sample */
{ MKTAG('d','i','n','f'), mov_read_default },
{ MKTAG('d','r','e','f'), mov_read_dref },
{ MKTAG('e','d','t','s'), mov_read_default },
{ MKTAG('e','l','s','t'), mov_read_elst },
{ MKTAG('e','n','d','a'), mov_read_enda },
2873
{ MKTAG('f','i','e','l'), mov_read_fiel },
2874 2875 2876
{ MKTAG('f','t','y','p'), mov_read_ftyp },
{ MKTAG('g','l','b','l'), mov_read_glbl },
{ MKTAG('h','d','l','r'), mov_read_hdlr },
2877
{ MKTAG('i','l','s','t'), mov_read_ilst },
2878 2879 2880 2881
{ MKTAG('j','p','2','h'), mov_read_extradata },
{ MKTAG('m','d','a','t'), mov_read_mdat },
{ MKTAG('m','d','h','d'), mov_read_mdhd },
{ MKTAG('m','d','i','a'), mov_read_default },
2882
{ MKTAG('m','e','t','a'), mov_read_meta },
2883 2884 2885 2886 2887 2888 2889 2890
{ MKTAG('m','i','n','f'), mov_read_default },
{ MKTAG('m','o','o','f'), mov_read_moof },
{ MKTAG('m','o','o','v'), mov_read_moov },
{ MKTAG('m','v','e','x'), mov_read_default },
{ MKTAG('m','v','h','d'), mov_read_mvhd },
{ MKTAG('S','M','I',' '), mov_read_smi }, /* Sorenson extension ??? */
{ MKTAG('a','l','a','c'), mov_read_extradata }, /* alac specific atom */
{ MKTAG('a','v','c','C'), mov_read_glbl },
2891
{ MKTAG('p','a','s','p'), mov_read_pasp },
2892 2893
{ MKTAG('s','t','b','l'), mov_read_default },
{ MKTAG('s','t','c','o'), mov_read_stco },
2894
{ MKTAG('s','t','p','s'), mov_read_stps },
M
Martin Storsjö 已提交
2895
{ MKTAG('s','t','r','f'), mov_read_strf },
2896 2897 2898 2899 2900
{ MKTAG('s','t','s','c'), mov_read_stsc },
{ MKTAG('s','t','s','d'), mov_read_stsd }, /* sample description */
{ MKTAG('s','t','s','s'), mov_read_stss }, /* sync sample */
{ MKTAG('s','t','s','z'), mov_read_stsz }, /* sample size */
{ MKTAG('s','t','t','s'), mov_read_stts },
2901
{ MKTAG('s','t','z','2'), mov_read_stsz }, /* compact sample size */
2902
{ MKTAG('t','k','h','d'), mov_read_tkhd }, /* track header */
M
Martin Storsjö 已提交
2903
{ MKTAG('t','f','d','t'), mov_read_tfdt },
2904 2905 2906
{ MKTAG('t','f','h','d'), mov_read_tfhd }, /* track fragment header */
{ MKTAG('t','r','a','k'), mov_read_trak },
{ MKTAG('t','r','a','f'), mov_read_default },
D
David Conrad 已提交
2907 2908
{ MKTAG('t','r','e','f'), mov_read_default },
{ MKTAG('c','h','a','p'), mov_read_chap },
2909 2910
{ MKTAG('t','r','e','x'), mov_read_trex },
{ MKTAG('t','r','u','n'), mov_read_trun },
B
Baptiste Coudurier 已提交
2911
{ MKTAG('u','d','t','a'), mov_read_default },
2912 2913
{ MKTAG('w','a','v','e'), mov_read_wave },
{ MKTAG('e','s','d','s'), mov_read_esds },
2914
{ MKTAG('d','a','c','3'), mov_read_dac3 }, /* AC-3 info */
2915
{ MKTAG('d','e','c','3'), mov_read_dec3 }, /* EAC-3 info */
2916
{ MKTAG('w','i','d','e'), mov_read_wide }, /* place holder */
2917
{ MKTAG('w','f','e','x'), mov_read_wfex },
2918
{ MKTAG('c','m','o','v'), mov_read_cmov },
2919
{ MKTAG('c','h','a','n'), mov_read_chan }, /* channel layout */
M
Martin Storsjö 已提交
2920
{ MKTAG('d','v','c','1'), mov_read_dvc1 },
2921
{ MKTAG('s','b','g','p'), mov_read_sbgp },
Y
Yusuke Nakamura 已提交
2922
{ MKTAG('h','v','c','C'), mov_read_glbl },
2923
{ MKTAG('-','-','-','-'), mov_read_custom },
B
Baptiste Coudurier 已提交
2924
{ 0, NULL }
2925 2926
};

2927 2928 2929 2930 2931 2932 2933 2934 2935 2936 2937 2938 2939 2940 2941 2942 2943 2944 2945 2946 2947 2948 2949 2950 2951 2952 2953 2954 2955 2956 2957 2958 2959 2960 2961 2962 2963 2964 2965 2966 2967 2968 2969 2970 2971 2972 2973 2974 2975 2976 2977 2978 2979 2980 2981 2982 2983 2984 2985 2986 2987 2988
static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int64_t total_size = 0;
    MOVAtom a;
    int i;

    if (atom.size < 0)
        atom.size = INT64_MAX;
    while (total_size + 8 < atom.size && !pb->eof_reached) {
        int (*parse)(MOVContext*, AVIOContext*, MOVAtom) = NULL;
        a.size = atom.size;
        a.type=0;
        if (atom.size >= 8) {
            a.size = avio_rb32(pb);
            a.type = avio_rl32(pb);
        }
        av_dlog(c->fc, "type: %08x '%.4s' parent:'%.4s' sz: %"PRId64" %"PRId64" %"PRId64"\n",
                a.type, (char*)&a.type, (char*)&atom.type, a.size, total_size, atom.size);
        total_size += 8;
        if (a.size == 1) { /* 64 bit extended size */
            a.size = avio_rb64(pb) - 8;
            total_size += 8;
        }
        if (a.size == 0) {
            a.size = atom.size - total_size;
            if (a.size <= 8)
                break;
        }
        a.size -= 8;
        if (a.size < 0)
            break;
        a.size = FFMIN(a.size, atom.size - total_size);

        for (i = 0; mov_default_parse_table[i].type; i++)
            if (mov_default_parse_table[i].type == a.type) {
                parse = mov_default_parse_table[i].parse;
                break;
            }

        // container is user data
        if (!parse && (atom.type == MKTAG('u','d','t','a') ||
                       atom.type == MKTAG('i','l','s','t')))
            parse = mov_read_udta_string;

        if (!parse) { /* skip leaf atoms data */
            avio_skip(pb, a.size);
        } else {
            int64_t start_pos = avio_tell(pb);
            int64_t left;
            int err = parse(c, pb, a);
            if (err < 0)
                return err;
            if (c->found_moov && c->found_mdat &&
                ((!pb->seekable || c->fc->flags & AVFMT_FLAG_IGNIDX) ||
                 start_pos + a.size == avio_size(pb))) {
                if (!pb->seekable || c->fc->flags & AVFMT_FLAG_IGNIDX)
                    c->next_root_atom = start_pos + a.size;
                return 0;
            }
            left = a.size - avio_tell(pb) + start_pos;
            if (left > 0) /* skip garbage at atom end */
                avio_skip(pb, left);
2989 2990 2991 2992 2993 2994
            else if (left < 0) {
                av_log(c->fc, AV_LOG_WARNING,
                       "overread end of atom '%.4s' by %"PRId64" bytes\n",
                       (char*)&a.type, -left);
                avio_seek(pb, left, SEEK_CUR);
            }
2995 2996 2997 2998 2999 3000 3001 3002 3003 3004 3005
        }

        total_size += a.size;
    }

    if (total_size < atom.size && atom.size < 0x7ffff)
        avio_skip(pb, atom.size - total_size);

    return 0;
}

F
Fabrice Bellard 已提交
3006 3007
static int mov_probe(AVProbeData *p)
{
3008 3009
    unsigned int offset;
    uint32_t tag;
3010
    int score = 0;
3011

F
Fabrice Bellard 已提交
3012
    /* check file header */
3013
    offset = 0;
3014
    for (;;) {
3015 3016
        /* ignore invalid offset */
        if ((offset + 8) > (unsigned int)p->buf_size)
3017
            return score;
3018
        tag = AV_RL32(p->buf + offset + 4);
3019
        switch(tag) {
3020
        /* check for obvious tags */
3021 3022 3023 3024 3025
        case MKTAG('j','P',' ',' '): /* jpeg 2000 signature */
        case MKTAG('m','o','o','v'):
        case MKTAG('m','d','a','t'):
        case MKTAG('p','n','o','t'): /* detect movs with preview pics like ew.mov and april.mov */
        case MKTAG('u','d','t','a'): /* Packet Video PVAuthor adds this and a lot of more junk */
3026
        case MKTAG('f','t','y','p'):
3027
            return AVPROBE_SCORE_MAX;
3028
        /* those are more common words, so rate then a bit less */
3029 3030 3031 3032 3033
        case MKTAG('e','d','i','w'): /* xdcam files have reverted first tags */
        case MKTAG('w','i','d','e'):
        case MKTAG('f','r','e','e'):
        case MKTAG('j','u','n','k'):
        case MKTAG('p','i','c','t'):
3034
            return AVPROBE_SCORE_MAX - 5;
B
Baptiste Coudurier 已提交
3035
        case MKTAG(0x82,0x82,0x7f,0x7d):
3036 3037 3038
        case MKTAG('s','k','i','p'):
        case MKTAG('u','u','i','d'):
        case MKTAG('p','r','f','l'):
3039
            offset = AV_RB32(p->buf+offset) + offset;
3040
            /* if we only find those cause probedata is too small at least rate them */
3041
            score = AVPROBE_SCORE_EXTENSION;
3042 3043 3044
            break;
        default:
            /* unrecognized tag */
3045
            return score;
3046
        }
3047
    }
F
Fabrice Bellard 已提交
3048 3049
}

D
David Conrad 已提交
3050 3051 3052 3053 3054 3055 3056
// must be done after parsing all trak because there's no order requirement
static void mov_read_chapters(AVFormatContext *s)
{
    MOVContext *mov = s->priv_data;
    AVStream *st = NULL;
    MOVStreamContext *sc;
    int64_t cur_pos;
3057
    int i;
D
David Conrad 已提交
3058 3059 3060 3061 3062 3063 3064 3065 3066 3067 3068 3069 3070

    for (i = 0; i < s->nb_streams; i++)
        if (s->streams[i]->id == mov->chapter_track) {
            st = s->streams[i];
            break;
        }
    if (!st) {
        av_log(s, AV_LOG_ERROR, "Referenced QT chapter track not found\n");
        return;
    }

    st->discard = AVDISCARD_ALL;
    sc = st->priv_data;
3071
    cur_pos = avio_tell(sc->pb);
D
David Conrad 已提交
3072 3073 3074 3075

    for (i = 0; i < st->nb_index_entries; i++) {
        AVIndexEntry *sample = &st->index_entries[i];
        int64_t end = i+1 < st->nb_index_entries ? st->index_entries[i+1].timestamp : st->duration;
3076 3077 3078
        uint8_t *title;
        uint16_t ch;
        int len, title_len;
D
David Conrad 已提交
3079

A
Anton Khirnov 已提交
3080
        if (avio_seek(sc->pb, sample->pos, SEEK_SET) != sample->pos) {
D
David Conrad 已提交
3081 3082 3083 3084 3085
            av_log(s, AV_LOG_ERROR, "Chapter %d not found in file\n", i);
            goto finish;
        }

        // the first two bytes are the length of the title
3086
        len = avio_rb16(sc->pb);
D
David Conrad 已提交
3087 3088
        if (len > sample->size-2)
            continue;
3089 3090 3091
        title_len = 2*len + 1;
        if (!(title = av_mallocz(title_len)))
            goto finish;
D
David Conrad 已提交
3092 3093 3094 3095

        // The samples could theoretically be in any encoding if there's an encd
        // atom following, but in practice are only utf-8 or utf-16, distinguished
        // instead by the presence of a BOM
3096 3097 3098 3099 3100 3101 3102 3103 3104 3105 3106
        if (!len) {
            title[0] = 0;
        } else {
            ch = avio_rb16(sc->pb);
            if (ch == 0xfeff)
                avio_get_str16be(sc->pb, len, title, title_len);
            else if (ch == 0xfffe)
                avio_get_str16le(sc->pb, len, title, title_len);
            else {
                AV_WB16(title, ch);
                if (len == 1 || len == 2)
3107
                    title[len] = 0;
3108 3109 3110
                else
                    avio_get_str(sc->pb, len - 2, title + 2, title_len - 2);
            }
D
David Conrad 已提交
3111 3112
        }

3113
        avpriv_new_chapter(s, i, st->time_base, sample->timestamp, end, title);
3114
        av_freep(&title);
D
David Conrad 已提交
3115 3116
    }
finish:
A
Anton Khirnov 已提交
3117
    avio_seek(sc->pb, cur_pos, SEEK_SET);
D
David Conrad 已提交
3118 3119
}

3120 3121 3122 3123 3124 3125 3126 3127 3128 3129 3130 3131 3132 3133 3134 3135 3136
static int mov_read_close(AVFormatContext *s)
{
    MOVContext *mov = s->priv_data;
    int i, j;

    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;

        av_freep(&sc->ctts_data);
        for (j = 0; j < sc->drefs_count; j++) {
            av_freep(&sc->drefs[j].path);
            av_freep(&sc->drefs[j].dir);
        }
        av_freep(&sc->drefs);
        if (sc->pb && sc->pb != s->pb)
            avio_close(sc->pb);
3137 3138 3139 3140 3141 3142 3143 3144

        av_freep(&sc->chunk_offsets);
        av_freep(&sc->stsc_data);
        av_freep(&sc->sample_sizes);
        av_freep(&sc->keyframes);
        av_freep(&sc->stts_data);
        av_freep(&sc->stps_data);
        av_freep(&sc->rap_group);
3145
        av_freep(&sc->display_matrix);
3146 3147 3148
    }

    if (mov->dv_demux) {
3149 3150
        avformat_free_context(mov->dv_fctx);
        mov->dv_fctx = NULL;
3151 3152 3153 3154 3155 3156 3157
    }

    av_freep(&mov->trex_data);

    return 0;
}

3158
static int mov_read_header(AVFormatContext *s)
3159
{
3160
    MOVContext *mov = s->priv_data;
3161
    AVIOContext *pb = s->pb;
B
Baptiste Coudurier 已提交
3162
    int err;
3163
    MOVAtom atom = { AV_RL32("root") };
3164
    int i;
3165 3166

    mov->fc = s;
3167
    /* .mov and .mp4 aren't streamable anyway (only progressive download if moov is before mdat) */
3168
    if (pb->seekable)
A
Anton Khirnov 已提交
3169
        atom.size = avio_size(pb);
3170
    else
B
Baptiste Coudurier 已提交
3171
        atom.size = INT64_MAX;
3172 3173

    /* check MOV header */
B
Baptiste Coudurier 已提交
3174 3175
    if ((err = mov_read_default(mov, pb, atom)) < 0) {
        av_log(s, AV_LOG_ERROR, "error reading header: %d\n", err);
3176
        mov_read_close(s);
B
Baptiste Coudurier 已提交
3177 3178 3179 3180
        return err;
    }
    if (!mov->found_moov) {
        av_log(s, AV_LOG_ERROR, "moov atom not found\n");
3181
        mov_read_close(s);
3182
        return AVERROR_INVALIDDATA;
3183
    }
3184
    av_dlog(mov->fc, "on_parse_exit_offset=%"PRId64"\n", avio_tell(pb));
3185

3186
    if (pb->seekable && mov->chapter_track > 0)
D
David Conrad 已提交
3187 3188
        mov_read_chapters(s);

3189 3190 3191 3192 3193
    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;

        if (st->codec->codec_type == AVMEDIA_TYPE_SUBTITLE) {
V
Vittorio Giovara 已提交
3194
            if (st->codec->width <= 0 || st->codec->height <= 0) {
3195 3196 3197
                st->codec->width  = sc->width;
                st->codec->height = sc->height;
            }
3198 3199 3200 3201
            if (st->codec->codec_id == AV_CODEC_ID_DVD_SUBTITLE) {
                if ((err = mov_rewrite_dvd_sub_extradata(st)) < 0)
                    return err;
            }
3202 3203 3204
        }
    }

3205 3206 3207 3208
    if (mov->trex_data) {
        for (i = 0; i < s->nb_streams; i++) {
            AVStream *st = s->streams[i];
            MOVStreamContext *sc = st->priv_data;
3209
            if (st->duration > 0)
3210 3211 3212 3213
                st->codec->bit_rate = sc->data_size * 8 * sc->time_scale / st->duration;
        }
    }

3214 3215
    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
3216
        MOVStreamContext *sc = st->priv_data;
3217

3218 3219 3220 3221 3222 3223 3224 3225 3226 3227 3228 3229 3230 3231 3232 3233 3234 3235 3236 3237 3238 3239 3240 3241 3242 3243 3244
        switch (st->codec->codec_type) {
        case AVMEDIA_TYPE_AUDIO:
            err = ff_replaygain_export(st, s->metadata);
            if (err < 0) {
                mov_read_close(s);
                return err;
            }
            break;
        case AVMEDIA_TYPE_VIDEO:
            if (sc->display_matrix) {
                AVPacketSideData *sd, *tmp;

                tmp = av_realloc_array(st->side_data,
                                       st->nb_side_data + 1, sizeof(*tmp));
                if (!tmp)
                    return AVERROR(ENOMEM);

                st->side_data = tmp;
                st->nb_side_data++;

                sd = &st->side_data[st->nb_side_data - 1];
                sd->type = AV_PKT_DATA_DISPLAYMATRIX;
                sd->size = sizeof(int32_t) * 9;
                sd->data = (uint8_t*)sc->display_matrix;
                sc->display_matrix = NULL;
            }
            break;
3245 3246 3247
        }
    }

3248 3249 3250
    return 0;
}

3251
static AVIndexEntry *mov_find_next_sample(AVFormatContext *s, AVStream **st)
3252
{
3253
    AVIndexEntry *sample = NULL;
3254
    int64_t best_dts = INT64_MAX;
3255
    int i;
B
Baptiste Coudurier 已提交
3256
    for (i = 0; i < s->nb_streams; i++) {
3257 3258
        AVStream *avst = s->streams[i];
        MOVStreamContext *msc = avst->priv_data;
3259
        if (msc->pb && msc->current_sample < avst->nb_index_entries) {
3260
            AVIndexEntry *current_sample = &avst->index_entries[msc->current_sample];
3261
            int64_t dts = av_rescale(current_sample->timestamp, AV_TIME_BASE, msc->time_scale);
L
Luca Barbato 已提交
3262
            av_dlog(s, "stream %d, sample %d, dts %"PRId64"\n", i, msc->current_sample, dts);
3263 3264
            if (!sample || (!s->pb->seekable && current_sample->pos < sample->pos) ||
                (s->pb->seekable &&
3265
                 ((msc->pb != s->pb && dts < best_dts) || (msc->pb == s->pb &&
B
Baptiste Coudurier 已提交
3266
                 ((FFABS(best_dts - dts) <= AV_TIME_BASE && current_sample->pos < sample->pos) ||
3267
                  (FFABS(best_dts - dts) > AV_TIME_BASE && dts < best_dts)))))) {
3268 3269
                sample = current_sample;
                best_dts = dts;
3270
                *st = avst;
3271
            }
3272 3273
        }
    }
3274 3275 3276 3277 3278 3279 3280 3281 3282 3283 3284 3285
    return sample;
}

static int mov_read_packet(AVFormatContext *s, AVPacket *pkt)
{
    MOVContext *mov = s->priv_data;
    MOVStreamContext *sc;
    AVIndexEntry *sample;
    AVStream *st = NULL;
    int ret;
 retry:
    sample = mov_find_next_sample(s, &st);
3286 3287
    if (!sample) {
        mov->found_mdat = 0;
3288 3289 3290 3291 3292
        if (!mov->next_root_atom)
            return AVERROR_EOF;
        avio_seek(s->pb, mov->next_root_atom, SEEK_SET);
        mov->next_root_atom = 0;
        if (mov_read_default(mov, s->pb, (MOVAtom){ AV_RL32("root"), INT64_MAX }) < 0 ||
A
Anton Khirnov 已提交
3293
            s->pb->eof_reached)
B
Baptiste Coudurier 已提交
3294
            return AVERROR_EOF;
3295
        av_dlog(s, "read fragments, offset 0x%"PRIx64"\n", avio_tell(s->pb));
3296 3297
        goto retry;
    }
3298
    sc = st->priv_data;
3299 3300
    /* must be done just before reading, to avoid infinite loop on sample */
    sc->current_sample++;
3301 3302

    if (st->discard != AVDISCARD_ALL) {
A
Anton Khirnov 已提交
3303
        if (avio_seek(sc->pb, sample->pos, SEEK_SET) != sample->pos) {
R
Reimar Döffinger 已提交
3304 3305
            av_log(mov->fc, AV_LOG_ERROR, "stream %d, offset 0x%"PRIx64": partial file\n",
                   sc->ffindex, sample->pos);
3306
            return AVERROR_INVALIDDATA;
R
Reimar Döffinger 已提交
3307 3308
        }
        ret = av_get_packet(sc->pb, pkt, sample->size);
3309 3310
        if (ret < 0)
            return ret;
3311 3312 3313 3314 3315 3316 3317 3318 3319 3320 3321
        if (sc->has_palette) {
            uint8_t *pal;

            pal = av_packet_new_side_data(pkt, AV_PKT_DATA_PALETTE, AVPALETTE_SIZE);
            if (!pal) {
                av_log(mov->fc, AV_LOG_ERROR, "Cannot append palette to packet\n");
            } else {
                memcpy(pal, sc->palette, AVPALETTE_SIZE);
                sc->has_palette = 0;
            }
        }
R
Reimar Döffinger 已提交
3322 3323
#if CONFIG_DV_DEMUXER
        if (mov->dv_demux && sc->dv_audio_container) {
3324
            avpriv_dv_produce_packet(mov->dv_demux, pkt, pkt->data, pkt->size);
R
Reimar Döffinger 已提交
3325 3326
            av_free(pkt->data);
            pkt->size = 0;
3327
            ret = avpriv_dv_get_packet(mov->dv_demux, pkt);
R
Reimar Döffinger 已提交
3328 3329 3330
            if (ret < 0)
                return ret;
        }
3331
#endif
3332 3333
    }

3334 3335
    pkt->stream_index = sc->ffindex;
    pkt->dts = sample->timestamp;
3336
    if (sc->ctts_data && sc->ctts_index < sc->ctts_count) {
3337
        pkt->pts = pkt->dts + sc->dts_shift + sc->ctts_data[sc->ctts_index].duration;
3338
        /* update ctts context */
3339 3340 3341 3342 3343
        sc->ctts_sample++;
        if (sc->ctts_index < sc->ctts_count &&
            sc->ctts_data[sc->ctts_index].count == sc->ctts_sample) {
            sc->ctts_index++;
            sc->ctts_sample = 0;
3344
        }
3345 3346
        if (sc->wrong_dts)
            pkt->dts = AV_NOPTS_VALUE;
3347
    } else {
3348
        int64_t next_dts = (sc->current_sample < st->nb_index_entries) ?
3349 3350
            st->index_entries[sc->current_sample].timestamp : st->duration;
        pkt->duration = next_dts - pkt->dts;
3351
        pkt->pts = pkt->dts;
3352
    }
3353 3354
    if (st->discard == AVDISCARD_ALL)
        goto retry;
3355
    pkt->flags |= sample->flags & AVINDEX_KEYFRAME ? AV_PKT_FLAG_KEY : 0;
3356
    pkt->pos = sample->pos;
L
Luca Barbato 已提交
3357
    av_dlog(s, "stream %d, pts %"PRId64", dts %"PRId64", pos 0x%"PRIx64", duration %d\n",
3358
            pkt->stream_index, pkt->pts, pkt->dts, pkt->pos, pkt->duration);
3359 3360
    return 0;
}
3361

3362
static int mov_seek_stream(AVFormatContext *s, AVStream *st, int64_t timestamp, int flags)
3363 3364 3365 3366
{
    MOVStreamContext *sc = st->priv_data;
    int sample, time_sample;
    int i;
3367

3368
    sample = av_index_search_timestamp(st, timestamp, flags);
L
Luca Barbato 已提交
3369
    av_dlog(s, "stream %d, timestamp %"PRId64", sample %d\n", st->index, timestamp, sample);
3370 3371
    if (sample < 0 && st->nb_index_entries && timestamp < st->index_entries[0].timestamp)
        sample = 0;
3372
    if (sample < 0) /* not sure what to do */
3373
        return AVERROR_INVALIDDATA;
3374
    sc->current_sample = sample;
L
Luca Barbato 已提交
3375
    av_dlog(s, "stream %d, found sample %d\n", st->index, sc->current_sample);
3376 3377 3378 3379
    /* adjust ctts index */
    if (sc->ctts_data) {
        time_sample = 0;
        for (i = 0; i < sc->ctts_count; i++) {
3380 3381
            int next = time_sample + sc->ctts_data[i].count;
            if (next > sc->current_sample) {
3382 3383
                sc->ctts_index = i;
                sc->ctts_sample = sc->current_sample - time_sample;
3384
                break;
3385
            }
3386
            time_sample = next;
3387 3388
        }
    }
3389
    return sample;
3390 3391
}

3392
static int mov_read_seek(AVFormatContext *s, int stream_index, int64_t sample_time, int flags)
G
Gael Chardon 已提交
3393
{
3394 3395 3396 3397
    AVStream *st;
    int64_t seek_timestamp, timestamp;
    int sample;
    int i;
G
Gael Chardon 已提交
3398

3399
    if (stream_index >= s->nb_streams)
3400
        return AVERROR_INVALIDDATA;
3401 3402
    if (sample_time < 0)
        sample_time = 0;
G
Gael Chardon 已提交
3403

3404
    st = s->streams[stream_index];
3405
    sample = mov_seek_stream(s, st, sample_time, flags);
3406
    if (sample < 0)
3407
        return sample;
G
Gael Chardon 已提交
3408

3409 3410
    /* adjust seek timestamp to found sample timestamp */
    seek_timestamp = st->index_entries[sample].timestamp;
G
Gael Chardon 已提交
3411

3412 3413
    for (i = 0; i < s->nb_streams; i++) {
        st = s->streams[i];
3414
        if (stream_index == i)
3415
            continue;
G
Gael Chardon 已提交
3416

3417
        timestamp = av_rescale_q(seek_timestamp, s->streams[stream_index]->time_base, st->time_base);
3418
        mov_seek_stream(s, st, timestamp, flags);
3419
    }
G
Gael Chardon 已提交
3420 3421 3422
    return 0;
}

3423
AVInputFormat ff_mov_demuxer = {
3424
    .name           = "mov,mp4,m4a,3gp,3g2,mj2",
3425
    .long_name      = NULL_IF_CONFIG_SMALL("QuickTime / MOV"),
3426
    .priv_data_size = sizeof(MOVContext),
3427
    .extensions     = "mov,mp4,m4a,3gp,3g2,mj2",
3428 3429 3430 3431 3432
    .read_probe     = mov_probe,
    .read_header    = mov_read_header,
    .read_packet    = mov_read_packet,
    .read_close     = mov_read_close,
    .read_seek      = mov_read_seek,
3433
};