swfdec.c 18.0 KB
Newer Older
B
Baptiste Coudurier 已提交
1
/*
B
Baptiste Coudurier 已提交
2
 * Flash Compatible Streaming Format demuxer
3 4
 * Copyright (c) 2000 Fabrice Bellard
 * Copyright (c) 2003 Tinic Uro
B
Baptiste Coudurier 已提交
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
 *
 * This file is part of FFmpeg.
 *
 * FFmpeg is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * FFmpeg is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with FFmpeg; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
 */

C
Clément Bœsch 已提交
23 24 25 26 27 28
#include "config.h"

#if CONFIG_ZLIB
#include <zlib.h>
#endif

29
#include "libavutil/avassert.h"
J
Justin Ruggles 已提交
30
#include "libavutil/channel_layout.h"
31
#include "libavutil/imgutils.h"
R
Ronald S. Bultje 已提交
32
#include "libavutil/internal.h"
33
#include "libavutil/intreadwrite.h"
34
#include "libavcodec/get_bits.h"
B
Baptiste Coudurier 已提交
35 36
#include "swf.h"

37
static const AVCodecTag swf_audio_codec_tags[] = {
38 39 40 41 42 43
    { AV_CODEC_ID_PCM_S16LE,  0x00 },
    { AV_CODEC_ID_ADPCM_SWF,  0x01 },
    { AV_CODEC_ID_MP3,        0x02 },
    { AV_CODEC_ID_PCM_S16LE,  0x03 },
//  { AV_CODEC_ID_NELLYMOSER, 0x06 },
    { AV_CODEC_ID_NONE,          0 },
44 45
};

46
static int get_swf_tag(AVIOContext *pb, int *len_ptr)
B
Baptiste Coudurier 已提交
47 48 49
{
    int tag, len;

50
    if (avio_feof(pb))
51
        return AVERROR_EOF;
B
Baptiste Coudurier 已提交
52

53
    tag = avio_rl16(pb);
B
Baptiste Coudurier 已提交
54 55 56
    len = tag & 0x3f;
    tag = tag >> 6;
    if (len == 0x3f) {
57
        len = avio_rl32(pb);
B
Baptiste Coudurier 已提交
58 59 60 61 62 63
    }
    *len_ptr = len;
    return tag;
}


64
static int swf_probe(const AVProbeData *p)
B
Baptiste Coudurier 已提交
65
{
66 67 68
    GetBitContext gb;
    int len, xmin, xmax, ymin, ymax;

69 70 71
    if(p->buf_size < 15)
        return 0;

B
Baptiste Coudurier 已提交
72
    /* check file header */
73 74
    if (   AV_RB24(p->buf) != AV_RB24("CWS")
        && AV_RB24(p->buf) != AV_RB24("FWS"))
B
Baptiste Coudurier 已提交
75
        return 0;
76

77 78 79 80
    if (   AV_RB24(p->buf) == AV_RB24("CWS")
        && p->buf[3] <= 20)
        return AVPROBE_SCORE_MAX / 4 + 1;

81 82
    if (init_get_bits8(&gb, p->buf + 3, p->buf_size - 3) < 0)
        return 0;
83 84 85 86 87 88 89 90 91 92 93 94 95

    skip_bits(&gb, 40);
    len = get_bits(&gb, 5);
    if (!len)
        return 0;
    xmin = get_bits_long(&gb, len);
    xmax = get_bits_long(&gb, len);
    ymin = get_bits_long(&gb, len);
    ymax = get_bits_long(&gb, len);
    if (xmin || ymin || !xmax || !ymax)
        return 0;

    if (p->buf[3] >= 20 || xmax < 16 || ymax < 16)
96 97
        return AVPROBE_SCORE_MAX / 4;

98
    return AVPROBE_SCORE_EXTENSION + 1;
B
Baptiste Coudurier 已提交
99 100
}

101 102 103 104 105 106 107 108 109 110 111
#if CONFIG_ZLIB
static int zlib_refill(void *opaque, uint8_t *buf, int buf_size)
{
    AVFormatContext *s = opaque;
    SWFContext *swf = s->priv_data;
    z_stream *z = &swf->zstream;
    int ret;

retry:
    if (!z->avail_in) {
        int n = avio_read(s->pb, swf->zbuf_in, ZBUF_SIZE);
112
        if (n < 0)
113 114 115 116 117 118 119 120 121 122 123
            return n;
        z->next_in  = swf->zbuf_in;
        z->avail_in = n;
    }

    z->next_out  = buf;
    z->avail_out = buf_size;

    ret = inflate(z, Z_NO_FLUSH);
    if (ret == Z_STREAM_END)
        return AVERROR_EOF;
124 125
    if (ret != Z_OK)
        return AVERROR(EINVAL);
126 127 128 129 130 131 132 133

    if (buf_size - z->avail_out == 0)
        goto retry;

    return buf_size - z->avail_out;
}
#endif

134
static int swf_read_header(AVFormatContext *s)
B
Baptiste Coudurier 已提交
135 136
{
    SWFContext *swf = s->priv_data;
137
    AVIOContext *pb = s->pb;
B
Baptiste Coudurier 已提交
138 139
    int nbits, len, tag;

140
    tag = avio_rb32(pb) & 0xffffff00;
141
    avio_rl32(pb);
B
Baptiste Coudurier 已提交
142 143

    if (tag == MKBETAG('C', 'W', 'S', 0)) {
144 145 146 147 148 149 150 151 152 153 154
        av_log(s, AV_LOG_INFO, "SWF compressed file detected\n");
#if CONFIG_ZLIB
        swf->zbuf_in  = av_malloc(ZBUF_SIZE);
        swf->zbuf_out = av_malloc(ZBUF_SIZE);
        swf->zpb = avio_alloc_context(swf->zbuf_out, ZBUF_SIZE, 0, s,
                                      zlib_refill, NULL, NULL);
        if (!swf->zbuf_in || !swf->zbuf_out || !swf->zpb)
            return AVERROR(ENOMEM);
        swf->zpb->seekable = 0;
        if (inflateInit(&swf->zstream) != Z_OK) {
            av_log(s, AV_LOG_ERROR, "Unable to init zlib context\n");
155 156
            av_freep(&swf->zbuf_in);
            av_freep(&swf->zbuf_out);
157 158 159 160 161
            return AVERROR(EINVAL);
        }
        pb = swf->zpb;
#else
        av_log(s, AV_LOG_ERROR, "zlib support is required to read SWF compressed files\n");
B
Baptiste Coudurier 已提交
162
        return AVERROR(EIO);
163 164
#endif
    } else if (tag != MKBETAG('F', 'W', 'S', 0))
B
Baptiste Coudurier 已提交
165 166
        return AVERROR(EIO);
    /* skip rectangle size */
167
    nbits = avio_r8(pb) >> 3;
B
Baptiste Coudurier 已提交
168
    len = (4 * nbits - 3 + 7) / 8;
169
    avio_skip(pb, len);
170 171
    swf->frame_rate = avio_rl16(pb); /* 8.8 fixed */
    avio_rl16(pb); /* frame count */
B
Baptiste Coudurier 已提交
172 173 174 175 176 177

    swf->samples_per_frame = 0;
    s->ctx_flags |= AVFMTCTX_NOHEADER;
    return 0;
}

178 179
static AVStream *create_new_audio_stream(AVFormatContext *s, int id, int info)
{
180
    int sample_rate_code, sample_size_code;
181 182 183 184 185
    AVStream *ast = avformat_new_stream(s, NULL);
    if (!ast)
        return NULL;
    ast->id = id;
    if (info & 1) {
186 187
        ast->codecpar->channels       = 2;
        ast->codecpar->channel_layout = AV_CH_LAYOUT_STEREO;
188
    } else {
189 190
        ast->codecpar->channels       = 1;
        ast->codecpar->channel_layout = AV_CH_LAYOUT_MONO;
191
    }
192 193
    ast->codecpar->codec_type = AVMEDIA_TYPE_AUDIO;
    ast->codecpar->codec_id   = ff_codec_get_id(swf_audio_codec_tags, info>>4 & 15);
194 195
    ast->need_parsing = AVSTREAM_PARSE_FULL;
    sample_rate_code = info>>2 & 3;
196
    sample_size_code = info>>1 & 1;
197 198 199 200
    if (!sample_size_code && ast->codecpar->codec_id == AV_CODEC_ID_PCM_S16LE)
        ast->codecpar->codec_id = AV_CODEC_ID_PCM_U8;
    ast->codecpar->sample_rate = 44100 >> (3 - sample_rate_code);
    avpriv_set_pts_info(ast, 64, 1, ast->codecpar->sample_rate);
201 202 203
    return ast;
}

B
Baptiste Coudurier 已提交
204 205 206
static int swf_read_packet(AVFormatContext *s, AVPacket *pkt)
{
    SWFContext *swf = s->priv_data;
207
    AVIOContext *pb = s->pb;
B
Baptiste Coudurier 已提交
208
    AVStream *vst = NULL, *ast = NULL, *st = 0;
209
    int tag, len, i, frame, v, res;
B
Baptiste Coudurier 已提交
210

211 212 213 214 215
#if CONFIG_ZLIB
    if (swf->zpb)
        pb = swf->zpb;
#endif

B
Baptiste Coudurier 已提交
216
    for(;;) {
217
        uint64_t pos = avio_tell(pb);
B
Baptiste Coudurier 已提交
218 219
        tag = get_swf_tag(pb, &len);
        if (tag < 0)
220
            return tag;
M
Michael Niedermayer 已提交
221
        if (len < 0) {
222
            av_log(s, AV_LOG_ERROR, "invalid tag length: %d\n", len);
M
Michael Niedermayer 已提交
223 224
            return AVERROR_INVALIDDATA;
        }
225
        if (tag == TAG_VIDEOSTREAM) {
226
            int ch_id = avio_rl16(pb);
227 228 229 230
            len -= 2;

            for (i=0; i<s->nb_streams; i++) {
                st = s->streams[i];
231
                if (st->codecpar->codec_type == AVMEDIA_TYPE_VIDEO && st->id == ch_id)
232 233 234
                    goto skip;
            }

235 236 237 238
            avio_rl16(pb);
            avio_rl16(pb);
            avio_rl16(pb);
            avio_r8(pb);
B
Baptiste Coudurier 已提交
239
            /* Check for FLV1 */
240
            vst = avformat_new_stream(s, NULL);
B
Baptiste Coudurier 已提交
241
            if (!vst)
242
                return AVERROR(ENOMEM);
243
            vst->id = ch_id;
244 245
            vst->codecpar->codec_type = AVMEDIA_TYPE_VIDEO;
            vst->codecpar->codec_id = ff_codec_get_id(ff_swf_codec_tags, avio_r8(pb));
246
            avpriv_set_pts_info(vst, 16, 256, swf->frame_rate);
247 248
            len -= 8;
        } else if (tag == TAG_STREAMHEAD || tag == TAG_STREAMHEAD2) {
B
Baptiste Coudurier 已提交
249
            /* streaming found */
250 251 252

            for (i=0; i<s->nb_streams; i++) {
                st = s->streams[i];
253
                if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO && st->id == -1)
254 255 256
                    goto skip;
            }

257 258 259
            avio_r8(pb);
            v = avio_r8(pb);
            swf->samples_per_frame = avio_rl16(pb);
260
            ast = create_new_audio_stream(s, -1, v); /* -1 to avoid clash with video stream ch_id */
B
Baptiste Coudurier 已提交
261
            if (!ast)
262
                return AVERROR(ENOMEM);
B
Baptiste Coudurier 已提交
263
            len -= 4;
264 265 266 267 268 269
        } else if (tag == TAG_DEFINESOUND) {
            /* audio stream */
            int ch_id = avio_rl16(pb);

            for (i=0; i<s->nb_streams; i++) {
                st = s->streams[i];
270
                if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO && st->id == ch_id)
271 272 273 274 275 276 277
                    goto skip;
            }

            // FIXME: The entire audio stream is stored in a single chunk/tag. Normally,
            // these are smaller audio streams in DEFINESOUND tags, but it's technically
            // possible they could be huge. Break it up into multiple packets if it's big.
            v = avio_r8(pb);
278
            ast = create_new_audio_stream(s, ch_id, v);
279
            if (!ast)
280
                return AVERROR(ENOMEM);
281 282 283 284 285 286 287 288 289 290 291
            ast->duration = avio_rl32(pb); // number of samples
            if (((v>>4) & 15) == 2) { // MP3 sound data record
                ast->skip_samples = avio_rl16(pb);
                len -= 2;
            }
            len -= 7;
            if ((res = av_get_packet(pb, pkt, len)) < 0)
                return res;
            pkt->pos = pos;
            pkt->stream_index = ast->index;
            return pkt->size;
B
Baptiste Coudurier 已提交
292
        } else if (tag == TAG_VIDEOFRAME) {
293
            int ch_id = avio_rl16(pb);
B
Baptiste Coudurier 已提交
294 295 296
            len -= 2;
            for(i=0; i<s->nb_streams; i++) {
                st = s->streams[i];
297
                if (st->codecpar->codec_type == AVMEDIA_TYPE_VIDEO && st->id == ch_id) {
298
                    frame = avio_rl16(pb);
299 300 301 302
                    len -= 2;
                    if (len <= 0)
                        goto skip;
                    if ((res = av_get_packet(pb, pkt, len)) < 0)
303
                        return res;
304
                    pkt->pos = pos;
B
Baptiste Coudurier 已提交
305 306 307 308 309
                    pkt->pts = frame;
                    pkt->stream_index = st->index;
                    return pkt->size;
                }
            }
310 311 312 313 314 315 316 317 318 319 320 321 322
        } else if (tag == TAG_DEFINEBITSLOSSLESS || tag == TAG_DEFINEBITSLOSSLESS2) {
#if CONFIG_ZLIB
            long out_len;
            uint8_t *buf = NULL, *zbuf = NULL, *pal;
            uint32_t colormap[AVPALETTE_COUNT] = {0};
            const int alpha_bmp = tag == TAG_DEFINEBITSLOSSLESS2;
            const int colormapbpp = 3 + alpha_bmp;
            int linesize, colormapsize = 0;

            const int ch_id   = avio_rl16(pb);
            const int bmp_fmt = avio_r8(pb);
            const int width   = avio_rl16(pb);
            const int height  = avio_rl16(pb);
323
            int pix_fmt;
324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354

            len -= 2+1+2+2;

            switch (bmp_fmt) {
            case 3: // PAL-8
                linesize = width;
                colormapsize = avio_r8(pb) + 1;
                len--;
                break;
            case 4: // RGB15
                linesize = width * 2;
                break;
            case 5: // RGB24 (0RGB)
                linesize = width * 4;
                break;
            default:
                av_log(s, AV_LOG_ERROR, "invalid bitmap format %d, skipped\n", bmp_fmt);
                goto bitmap_end_skip;
            }

            linesize = FFALIGN(linesize, 4);

            if (av_image_check_size(width, height, 0, s) < 0 ||
                linesize >= INT_MAX / height ||
                linesize * height >= INT_MAX - colormapsize * colormapbpp) {
                av_log(s, AV_LOG_ERROR, "invalid frame size %dx%d\n", width, height);
                goto bitmap_end_skip;
            }

            out_len = colormapsize * colormapbpp + linesize * height;

R
Ronald S. Bultje 已提交
355
            ff_dlog(s, "bitmap: ch=%d fmt=%d %dx%d (linesize=%d) len=%d->%ld pal=%d\n",
356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372
                    ch_id, bmp_fmt, width, height, linesize, len, out_len, colormapsize);

            zbuf = av_malloc(len);
            buf  = av_malloc(out_len);
            if (!zbuf || !buf) {
                res = AVERROR(ENOMEM);
                goto bitmap_end;
            }

            len = avio_read(pb, zbuf, len);
            if (len < 0 || (res = uncompress(buf, &out_len, zbuf, len)) != Z_OK) {
                av_log(s, AV_LOG_WARNING, "Failed to uncompress one bitmap\n");
                goto bitmap_end_skip;
            }

            for (i = 0; i < s->nb_streams; i++) {
                st = s->streams[i];
373
                if (st->codecpar->codec_id == AV_CODEC_ID_RAWVIDEO && st->id == -3)
374 375 376 377 378 379 380 381 382
                    break;
            }
            if (i == s->nb_streams) {
                vst = avformat_new_stream(s, NULL);
                if (!vst) {
                    res = AVERROR(ENOMEM);
                    goto bitmap_end;
                }
                vst->id = -3; /* -3 to avoid clash with video stream and audio stream */
383 384
                vst->codecpar->codec_type = AVMEDIA_TYPE_VIDEO;
                vst->codecpar->codec_id = AV_CODEC_ID_RAWVIDEO;
385 386 387 388 389 390
                avpriv_set_pts_info(vst, 64, 256, swf->frame_rate);
                st = vst;
            }

            if ((res = av_new_packet(pkt, out_len - colormapsize * colormapbpp)) < 0)
                goto bitmap_end;
391 392 393
            if (!st->codecpar->width && !st->codecpar->height) {
                st->codecpar->width  = width;
                st->codecpar->height = height;
394 395 396
            } else {
                ff_add_param_change(pkt, 0, 0, 0, width, height);
            }
397 398 399
            pkt->pos = pos;
            pkt->stream_index = st->index;

400 401 402 403 404
            if (linesize * height > pkt->size) {
                res = AVERROR_INVALIDDATA;
                goto bitmap_end;
            }

405 406
            switch (bmp_fmt) {
            case 3:
407
                pix_fmt = AV_PIX_FMT_PAL8;
408 409 410 411 412 413 414 415 416 417 418
                for (i = 0; i < colormapsize; i++)
                    if (alpha_bmp)  colormap[i] = buf[3]<<24 | AV_RB24(buf + 4*i);
                    else            colormap[i] = 0xffU <<24 | AV_RB24(buf + 3*i);
                pal = av_packet_new_side_data(pkt, AV_PKT_DATA_PALETTE, AVPALETTE_SIZE);
                if (!pal) {
                    res = AVERROR(ENOMEM);
                    goto bitmap_end;
                }
                memcpy(pal, colormap, AVPALETTE_SIZE);
                break;
            case 4:
419
                pix_fmt = AV_PIX_FMT_RGB555;
420 421
                break;
            case 5:
422
                pix_fmt = alpha_bmp ? AV_PIX_FMT_ARGB : AV_PIX_FMT_0RGB;
423 424 425 426
                break;
            default:
                av_assert0(0);
            }
427
            if (st->codecpar->format != AV_PIX_FMT_NONE && st->codecpar->format != pix_fmt) {
428
                av_log(s, AV_LOG_ERROR, "pixel format change unsupported\n");
429
            } else
430
                st->codecpar->format = pix_fmt;
431

432 433 434 435 436 437 438 439 440 441 442 443 444 445
            memcpy(pkt->data, buf + colormapsize*colormapbpp, linesize * height);

            res = pkt->size;

bitmap_end:
            av_freep(&zbuf);
            av_freep(&buf);
            return res;
bitmap_end_skip:
            av_freep(&zbuf);
            av_freep(&buf);
#else
            av_log(s, AV_LOG_ERROR, "this file requires zlib support compiled in\n");
#endif
B
Baptiste Coudurier 已提交
446
        } else if (tag == TAG_STREAMBLOCK) {
447 448
            for (i = 0; i < s->nb_streams; i++) {
                st = s->streams[i];
449 450
                if (st->codecpar->codec_type == AVMEDIA_TYPE_AUDIO && st->id == -1) {
                    if (st->codecpar->codec_id == AV_CODEC_ID_MP3) {
451 452 453 454 455 456 457 458 459 460 461 462 463 464 465
                        avio_skip(pb, 4);
                        len -= 4;
                        if (len <= 0)
                            goto skip;
                        if ((res = av_get_packet(pb, pkt, len)) < 0)
                            return res;
                    } else { // ADPCM, PCM
                        if (len <= 0)
                            goto skip;
                        if ((res = av_get_packet(pb, pkt, len)) < 0)
                            return res;
                    }
                    pkt->pos          = pos;
                    pkt->stream_index = st->index;
                    return pkt->size;
466 467
                }
            }
B
Baptiste Coudurier 已提交
468 469 470
        } else if (tag == TAG_JPEG2) {
            for (i=0; i<s->nb_streams; i++) {
                st = s->streams[i];
471
                if (st->codecpar->codec_id == AV_CODEC_ID_MJPEG && st->id == -2)
B
Baptiste Coudurier 已提交
472 473 474
                    break;
            }
            if (i == s->nb_streams) {
475
                vst = avformat_new_stream(s, NULL);
B
Baptiste Coudurier 已提交
476
                if (!vst)
477
                    return AVERROR(ENOMEM);
478
                vst->id = -2; /* -2 to avoid clash with video stream and audio stream */
479 480
                vst->codecpar->codec_type = AVMEDIA_TYPE_VIDEO;
                vst->codecpar->codec_id = AV_CODEC_ID_MJPEG;
481
                avpriv_set_pts_info(vst, 64, 256, swf->frame_rate);
B
Baptiste Coudurier 已提交
482 483
                st = vst;
            }
484
            avio_rl16(pb); /* BITMAP_ID */
485 486 487 488
            len -= 2;
            if (len < 4)
                goto skip;
            if ((res = av_new_packet(pkt, len)) < 0)
489
                return res;
490 491 492
            if (avio_read(pb, pkt->data, 4) != 4) {
                return AVERROR_INVALIDDATA;
            }
B
Baptiste Coudurier 已提交
493 494 495 496 497
            if (AV_RB32(pkt->data) == 0xffd8ffd9 ||
                AV_RB32(pkt->data) == 0xffd9ffd8) {
                /* old SWF files containing SOI/EOI as data start */
                /* files created by swink have reversed tag */
                pkt->size -= 4;
498
                memset(pkt->data+pkt->size, 0, 4);
499
                res = avio_read(pb, pkt->data, pkt->size);
B
Baptiste Coudurier 已提交
500
            } else {
501 502 503
                res = avio_read(pb, pkt->data + 4, pkt->size - 4);
                if (res >= 0)
                    res += 4;
B
Baptiste Coudurier 已提交
504
            }
505 506 507 508 509 510 511
            if (res != pkt->size) {
                if (res < 0) {
                    return res;
                }
                av_shrink_packet(pkt, res);
            }

512
            pkt->pos = pos;
B
Baptiste Coudurier 已提交
513 514
            pkt->stream_index = st->index;
            return pkt->size;
515 516
        } else {
            av_log(s, AV_LOG_DEBUG, "Unknown tag: %d\n", tag);
B
Baptiste Coudurier 已提交
517
        }
518
    skip:
519
        if(len<0)
M
Moritz Barsnick 已提交
520
            av_log(s, AV_LOG_WARNING, "Clipping len %d\n", len);
521
        len = FFMAX(0, len);
522
        avio_skip(pb, len);
B
Baptiste Coudurier 已提交
523 524 525
    }
}

526 527 528 529 530 531 532
#if CONFIG_ZLIB
static av_cold int swf_read_close(AVFormatContext *avctx)
{
    SWFContext *s = avctx->priv_data;
    inflateEnd(&s->zstream);
    av_freep(&s->zbuf_in);
    av_freep(&s->zbuf_out);
533
    avio_context_free(&s->zpb);
534 535 536 537
    return 0;
}
#endif

538
AVInputFormat ff_swf_demuxer = {
539
    .name           = "swf",
540
    .long_name      = NULL_IF_CONFIG_SMALL("SWF (ShockWave Flash)"),
541 542 543 544
    .priv_data_size = sizeof(SWFContext),
    .read_probe     = swf_probe,
    .read_header    = swf_read_header,
    .read_packet    = swf_read_packet,
545 546 547
#if CONFIG_ZLIB
    .read_close     = swf_read_close,
#endif
B
Baptiste Coudurier 已提交
548
};