mov.c 111.1 KB
Newer Older
1
/*
2
 * MOV demuxer
3
 * Copyright (c) 2001 Fabrice Bellard
4
 * Copyright (c) 2009 Baptiste Coudurier <baptiste dot coudurier at gmail dot com>
5
 *
6 7 8
 * first version by Francois Revol <revol@free.fr>
 * seek function by Gael Chardon <gael.dev@4now.net>
 *
9
 * This file is part of Libav.
10
 *
11
 * Libav is free software; you can redistribute it and/or
F
Fabrice Bellard 已提交
12 13
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
14
 * version 2.1 of the License, or (at your option) any later version.
15
 *
16
 * Libav is distributed in the hope that it will be useful,
17
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
F
Fabrice Bellard 已提交
18 19
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
20
 *
F
Fabrice Bellard 已提交
21
 * You should have received a copy of the GNU Lesser General Public
22
 * License along with Libav; if not, write to the Free Software
23
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
24
 */
25

26
#include <inttypes.h>
27
#include <limits.h>
28
#include <stdint.h>
29

30
//#define MOV_EXPORT_ALL_METADATA
31

32
#include "libavutil/attributes.h"
33
#include "libavutil/channel_layout.h"
34
#include "libavutil/intreadwrite.h"
35
#include "libavutil/intfloat.h"
36
#include "libavutil/mathematics.h"
37
#include "libavutil/time_internal.h"
38
#include "libavutil/avstring.h"
39
#include "libavutil/dict.h"
40
#include "libavcodec/ac3tab.h"
41
#include "avformat.h"
42
#include "internal.h"
43
#include "avio_internal.h"
44
#include "riff.h"
45
#include "isom.h"
46
#include "libavcodec/get_bits.h"
R
Raivo Hool 已提交
47
#include "id3v1.h"
48
#include "mov_chan.h"
49
#include "replaygain.h"
50

51
#if CONFIG_ZLIB
52 53 54
#include <zlib.h>
#endif

55 56
#include "qtpalette.h"

G
Gael Chardon 已提交
57

58 59 60
#undef NDEBUG
#include <assert.h>

61 62 63
/* those functions parse an atom */
/* links atom IDs to parse functions */
typedef struct MOVParseTableEntry {
64
    uint32_t type;
65
    int (*parse)(MOVContext *ctx, AVIOContext *pb, MOVAtom atom);
66 67
} MOVParseTableEntry;

68
static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom);
69

70 71
static int mov_metadata_track_or_disc_number(MOVContext *c, AVIOContext *pb,
                                             unsigned len, const char *key)
B
Baptiste Coudurier 已提交
72 73 74
{
    char buf[16];

75
    short current, total = 0;
76
    avio_rb16(pb); // unknown
77
    current = avio_rb16(pb);
78 79
    if (len >= 6)
        total = avio_rb16(pb);
80 81 82 83
    if (!total)
        snprintf(buf, sizeof(buf), "%d", current);
    else
        snprintf(buf, sizeof(buf), "%d/%d", current, total);
84
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
85
    av_dict_set(&c->fc->metadata, key, buf, 0);
B
Baptiste Coudurier 已提交
86 87 88 89

    return 0;
}

90 91
static int mov_metadata_int8_bypass_padding(MOVContext *c, AVIOContext *pb,
                                            unsigned len, const char *key)
92
{
93
    char buf[16];
94

95 96 97 98
    /* bypass padding bytes */
    avio_r8(pb);
    avio_r8(pb);
    avio_r8(pb);
99

100
    snprintf(buf, sizeof(buf), "%d", avio_r8(pb));
101
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
102
    av_dict_set(&c->fc->metadata, key, buf, 0);
103

104
    return 0;
105 106
}

107 108
static int mov_metadata_int8_no_padding(MOVContext *c, AVIOContext *pb,
                                        unsigned len, const char *key)
109
{
110
    char buf[16];
111

112
    snprintf(buf, sizeof(buf), "%d", avio_r8(pb));
113
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
114
    av_dict_set(&c->fc->metadata, key, buf, 0);
115

116
    return 0;
117 118
}

R
Raivo Hool 已提交
119 120 121 122 123 124 125 126 127 128 129 130
static int mov_metadata_gnre(MOVContext *c, AVIOContext *pb,
                             unsigned len, const char *key)
{
    short genre;
    char buf[20];

    avio_r8(pb); // unknown

    genre = avio_r8(pb);
    if (genre < 1 || genre > ID3v1_GENRE_MAX)
        return 0;
    snprintf(buf, sizeof(buf), "%s", ff_id3v1_genre_str[genre-1]);
131
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
R
Raivo Hool 已提交
132 133 134 135 136
    av_dict_set(&c->fc->metadata, key, buf, 0);

    return 0;
}

137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155
static const uint32_t mac_to_unicode[128] = {
    0x00C4,0x00C5,0x00C7,0x00C9,0x00D1,0x00D6,0x00DC,0x00E1,
    0x00E0,0x00E2,0x00E4,0x00E3,0x00E5,0x00E7,0x00E9,0x00E8,
    0x00EA,0x00EB,0x00ED,0x00EC,0x00EE,0x00EF,0x00F1,0x00F3,
    0x00F2,0x00F4,0x00F6,0x00F5,0x00FA,0x00F9,0x00FB,0x00FC,
    0x2020,0x00B0,0x00A2,0x00A3,0x00A7,0x2022,0x00B6,0x00DF,
    0x00AE,0x00A9,0x2122,0x00B4,0x00A8,0x2260,0x00C6,0x00D8,
    0x221E,0x00B1,0x2264,0x2265,0x00A5,0x00B5,0x2202,0x2211,
    0x220F,0x03C0,0x222B,0x00AA,0x00BA,0x03A9,0x00E6,0x00F8,
    0x00BF,0x00A1,0x00AC,0x221A,0x0192,0x2248,0x2206,0x00AB,
    0x00BB,0x2026,0x00A0,0x00C0,0x00C3,0x00D5,0x0152,0x0153,
    0x2013,0x2014,0x201C,0x201D,0x2018,0x2019,0x00F7,0x25CA,
    0x00FF,0x0178,0x2044,0x20AC,0x2039,0x203A,0xFB01,0xFB02,
    0x2021,0x00B7,0x201A,0x201E,0x2030,0x00C2,0x00CA,0x00C1,
    0x00CB,0x00C8,0x00CD,0x00CE,0x00CF,0x00CC,0x00D3,0x00D4,
    0xF8FF,0x00D2,0x00DA,0x00DB,0x00D9,0x0131,0x02C6,0x02DC,
    0x00AF,0x02D8,0x02D9,0x02DA,0x00B8,0x02DD,0x02DB,0x02C7,
};

156
static int mov_read_mac_string(MOVContext *c, AVIOContext *pb, int len,
157 158 159 160 161 162 163
                               char *dst, int dstlen)
{
    char *p = dst;
    char *end = dst+dstlen-1;
    int i;

    for (i = 0; i < len; i++) {
164
        uint8_t t, c = avio_r8(pb);
165 166 167 168 169 170 171 172 173
        if (c < 0x80 && p < end)
            *p++ = c;
        else
            PUT_UTF8(mac_to_unicode[c-0x80], t, if (p < end) *p++ = t;);
    }
    *p = 0;
    return p - dst;
}

A
Anton Khirnov 已提交
174 175 176 177 178
static int mov_read_covr(MOVContext *c, AVIOContext *pb, int type, int len)
{
    AVPacket pkt;
    AVStream *st;
    MOVStreamContext *sc;
179
    enum AVCodecID id;
A
Anton Khirnov 已提交
180 181 182
    int ret;

    switch (type) {
183 184 185
    case 0xd:  id = AV_CODEC_ID_MJPEG; break;
    case 0xe:  id = AV_CODEC_ID_PNG;   break;
    case 0x1b: id = AV_CODEC_ID_BMP;   break;
A
Anton Khirnov 已提交
186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215
    default:
        av_log(c->fc, AV_LOG_WARNING, "Unknown cover type: 0x%x.\n", type);
        avio_skip(pb, len);
        return 0;
    }

    st = avformat_new_stream(c->fc, NULL);
    if (!st)
        return AVERROR(ENOMEM);
    sc = av_mallocz(sizeof(*sc));
    if (!sc)
        return AVERROR(ENOMEM);
    st->priv_data = sc;

    ret = av_get_packet(pb, &pkt, len);
    if (ret < 0)
        return ret;

    st->disposition              |= AV_DISPOSITION_ATTACHED_PIC;

    st->attached_pic              = pkt;
    st->attached_pic.stream_index = st->index;
    st->attached_pic.flags       |= AV_PKT_FLAG_KEY;

    st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
    st->codec->codec_id   = id;

    return 0;
}

216 217 218 219 220
static int mov_metadata_loci(MOVContext *c, AVIOContext *pb, unsigned len)
{
    char language[4] = { 0 };
    char buf[100];
    uint16_t langcode = 0;
221
    double longitude, latitude;
222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249
    const char *key = "location";

    if (len < 4 + 2 + 1 + 1 + 4 + 4 + 4)
        return AVERROR_INVALIDDATA;

    avio_skip(pb, 4); // version+flags
    langcode = avio_rb16(pb);
    ff_mov_lang_to_iso639(langcode, language);
    len -= 6;

    len -= avio_get_str(pb, len, buf, sizeof(buf)); // place name
    if (len < 1)
        return AVERROR_INVALIDDATA;
    avio_skip(pb, 1); // role
    len -= 1;

    if (len < 14)
        return AVERROR_INVALIDDATA;
    longitude = ((int32_t) avio_rb32(pb)) / (float) (1 << 16);
    latitude  = ((int32_t) avio_rb32(pb)) / (float) (1 << 16);

    // Try to output in the same format as the ?xyz field
    snprintf(buf, sizeof(buf), "%+08.4f%+09.4f/", latitude, longitude);
    if (*language && strcmp(language, "und")) {
        char key2[16];
        snprintf(key2, sizeof(key2), "%s-%s", key, language);
        av_dict_set(&c->fc->metadata, key2, buf, 0);
    }
250
    c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
251 252 253
    return av_dict_set(&c->fc->metadata, key, buf, 0);
}

254
static int mov_read_udta_string(MOVContext *c, AVIOContext *pb, MOVAtom atom)
255 256 257 258 259 260
{
#ifdef MOV_EXPORT_ALL_METADATA
    char tmp_key[5];
#endif
    char str[1024], key2[16], language[4] = {0};
    const char *key = NULL;
261 262
    uint16_t langcode = 0;
    uint32_t data_type = 0, str_size;
263
    int (*parse)(MOVContext*, AVIOContext*, unsigned, const char*) = NULL;
264 265 266 267

    switch (atom.type) {
    case MKTAG(0xa9,'n','a','m'): key = "title";     break;
    case MKTAG(0xa9,'a','u','t'):
268
    case MKTAG(0xa9,'A','R','T'): key = "artist";    break;
R
Raivo Hool 已提交
269
    case MKTAG( 'a','A','R','T'): key = "album_artist";    break;
270
    case MKTAG(0xa9,'w','r','t'): key = "composer";  break;
271
    case MKTAG( 'c','p','r','t'):
272 273 274 275
    case MKTAG(0xa9,'c','p','y'): key = "copyright"; break;
    case MKTAG(0xa9,'c','m','t'):
    case MKTAG(0xa9,'i','n','f'): key = "comment";   break;
    case MKTAG(0xa9,'a','l','b'): key = "album";     break;
276
    case MKTAG(0xa9,'d','a','y'): key = "date";      break;
277
    case MKTAG(0xa9,'g','e','n'): key = "genre";     break;
R
Raivo Hool 已提交
278 279
    case MKTAG( 'g','n','r','e'): key = "genre";
        parse = mov_metadata_gnre; break;
280
    case MKTAG(0xa9,'t','o','o'):
281
    case MKTAG(0xa9,'s','w','r'): key = "encoder";   break;
282
    case MKTAG(0xa9,'e','n','c'): key = "encoder";   break;
283
    case MKTAG(0xa9,'x','y','z'): key = "location";  break;
284 285 286 287 288
    case MKTAG( 'd','e','s','c'): key = "description";break;
    case MKTAG( 'l','d','e','s'): key = "synopsis";  break;
    case MKTAG( 't','v','s','h'): key = "show";      break;
    case MKTAG( 't','v','e','n'): key = "episode_id";break;
    case MKTAG( 't','v','n','n'): key = "network";   break;
B
Baptiste Coudurier 已提交
289
    case MKTAG( 't','r','k','n'): key = "track";
290 291 292
        parse = mov_metadata_track_or_disc_number; break;
    case MKTAG( 'd','i','s','k'): key = "disc";
        parse = mov_metadata_track_or_disc_number; break;
293
    case MKTAG( 't','v','e','s'): key = "episode_sort";
294
        parse = mov_metadata_int8_bypass_padding; break;
295
    case MKTAG( 't','v','s','n'): key = "season_number";
296
        parse = mov_metadata_int8_bypass_padding; break;
297
    case MKTAG( 's','t','i','k'): key = "media_type";
298
        parse = mov_metadata_int8_no_padding; break;
299 300 301 302
    case MKTAG( 'h','d','v','d'): key = "hd_video";
        parse = mov_metadata_int8_no_padding; break;
    case MKTAG( 'p','g','a','p'): key = "gapless_playback";
        parse = mov_metadata_int8_no_padding; break;
303 304
    case MKTAG( 'l','o','c','i'):
        return mov_metadata_loci(c, pb, atom.size);
305 306 307
    }

    if (c->itunes_metadata && atom.size > 8) {
308 309
        int data_size = avio_rb32(pb);
        int tag = avio_rl32(pb);
310
        if (tag == MKTAG('d','a','t','a')) {
311 312
            data_type = avio_rb32(pb); // type
            avio_rb32(pb); // unknown
313 314
            str_size = data_size - 16;
            atom.size -= 16;
A
Anton Khirnov 已提交
315 316 317 318 319 320 321 322

            if (atom.type == MKTAG('c', 'o', 'v', 'r')) {
                int ret = mov_read_covr(c, pb, data_type, str_size);
                if (ret < 0) {
                    av_log(c->fc, AV_LOG_ERROR, "Error parsing cover art.\n");
                    return ret;
                }
            }
323 324
        } else return 0;
    } else if (atom.size > 4 && key && !c->itunes_metadata) {
325 326
        str_size = avio_rb16(pb); // string length
        langcode = avio_rb16(pb);
327
        ff_mov_lang_to_iso639(langcode, language);
328 329 330 331 332 333 334 335 336 337 338 339 340 341
        atom.size -= 4;
    } else
        str_size = atom.size;

#ifdef MOV_EXPORT_ALL_METADATA
    if (!key) {
        snprintf(tmp_key, 5, "%.4s", (char*)&atom.type);
        key = tmp_key;
    }
#endif

    if (!key)
        return 0;
    if (atom.size < 0)
342
        return AVERROR_INVALIDDATA;
343 344

    str_size = FFMIN3(sizeof(str)-1, str_size, atom.size);
B
Baptiste Coudurier 已提交
345 346

    if (parse)
347
        parse(c, pb, str_size, key);
B
Baptiste Coudurier 已提交
348
    else {
349
        if (data_type == 3 || (data_type == 0 && (langcode < 0x400 || langcode == 0x7fff))) { // MAC Encoded
350 351
            mov_read_mac_string(c, pb, str_size, str, sizeof(str));
        } else {
352
            avio_read(pb, str, str_size);
353 354
            str[str_size] = 0;
        }
355
        c->fc->event_flags |= AVFMT_EVENT_FLAG_METADATA_UPDATED;
356
        av_dict_set(&c->fc->metadata, key, str, 0);
B
Baptiste Coudurier 已提交
357 358
        if (*language && strcmp(language, "und")) {
            snprintf(key2, sizeof(key2), "%s-%s", key, language);
359
            av_dict_set(&c->fc->metadata, key2, str, 0);
B
Baptiste Coudurier 已提交
360
        }
B
Baptiste Coudurier 已提交
361
    }
362 363 364
    av_dlog(c->fc, "lang \"%3s\" ", language);
    av_dlog(c->fc, "tag \"%s\" value \"%s\" atom \"%.4s\" %d %"PRId64"\n",
            key, str, (char*)&atom.type, str_size, atom.size);
365 366 367

    return 0;
}
368

369
static int mov_read_chpl(MOVContext *c, AVIOContext *pb, MOVAtom atom)
D
David Conrad 已提交
370 371
{
    int64_t start;
D
David Conrad 已提交
372
    int i, nb_chapters, str_len, version;
D
David Conrad 已提交
373 374 375 376 377
    char str[256+1];

    if ((atom.size -= 5) < 0)
        return 0;

378 379
    version = avio_r8(pb);
    avio_rb24(pb);
D
David Conrad 已提交
380
    if (version)
381 382
        avio_rb32(pb); // ???
    nb_chapters = avio_r8(pb);
D
David Conrad 已提交
383 384 385 386 387

    for (i = 0; i < nb_chapters; i++) {
        if (atom.size < 9)
            return 0;

388 389
        start = avio_rb64(pb);
        str_len = avio_r8(pb);
D
David Conrad 已提交
390 391 392 393

        if ((atom.size -= 9+str_len) < 0)
            return 0;

394
        avio_read(pb, str, str_len);
D
David Conrad 已提交
395
        str[str_len] = 0;
396
        avpriv_new_chapter(c->fc, i, (AVRational){1,10000000}, start, AV_NOPTS_VALUE, str);
D
David Conrad 已提交
397 398 399 400
    }
    return 0;
}

401
#define MIN_DATA_ENTRY_BOX_SIZE 12
402
static int mov_read_dref(MOVContext *c, AVIOContext *pb, MOVAtom atom)
403
{
404 405
    AVStream *st;
    MOVStreamContext *sc;
406 407
    int entries, i, j;

408 409 410 411 412
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

413 414
    avio_rb32(pb); // version + flags
    entries = avio_rb32(pb);
415 416
    if (entries >  (atom.size - 1) / MIN_DATA_ENTRY_BOX_SIZE + 1 ||
        entries >= UINT_MAX / sizeof(*sc->drefs))
417
        return AVERROR_INVALIDDATA;
418
    av_free(sc->drefs);
419
    sc->drefs = av_mallocz(entries * sizeof(*sc->drefs));
420 421 422
    if (!sc->drefs)
        return AVERROR(ENOMEM);
    sc->drefs_count = entries;
423 424

    for (i = 0; i < sc->drefs_count; i++) {
425
        MOVDref *dref = &sc->drefs[i];
426
        uint32_t size = avio_rb32(pb);
427
        int64_t next = avio_tell(pb) + size - 4;
428

429
        if (size < 12)
430
            return AVERROR_INVALIDDATA;
431

432 433
        dref->type = avio_rl32(pb);
        avio_rb32(pb); // version + flags
L
Luca Barbato 已提交
434
        av_dlog(c->fc, "type %.4s size %d\n", (char*)&dref->type, size);
435 436 437 438 439 440

        if (dref->type == MKTAG('a','l','i','s') && size > 150) {
            /* macintosh alias record */
            uint16_t volume_len, len;
            int16_t type;

441
            avio_skip(pb, 10);
442

443
            volume_len = avio_r8(pb);
444
            volume_len = FFMIN(volume_len, 27);
445
            avio_read(pb, dref->volume, 27);
446 447
            dref->volume[volume_len] = 0;
            av_log(c->fc, AV_LOG_DEBUG, "volume %s, len %d\n", dref->volume, volume_len);
448

449
            avio_skip(pb, 12);
450

451
            len = avio_r8(pb);
452
            len = FFMIN(len, 63);
453
            avio_read(pb, dref->filename, 63);
454 455 456
            dref->filename[len] = 0;
            av_log(c->fc, AV_LOG_DEBUG, "filename %s, len %d\n", dref->filename, len);

457
            avio_skip(pb, 16);
458 459

            /* read next level up_from_alias/down_to_target */
460 461
            dref->nlvl_from = avio_rb16(pb);
            dref->nlvl_to   = avio_rb16(pb);
462 463 464
            av_log(c->fc, AV_LOG_DEBUG, "nlvl from %d, nlvl to %d\n",
                   dref->nlvl_from, dref->nlvl_to);

465
            avio_skip(pb, 16);
466

467
            for (type = 0; type != -1 && avio_tell(pb) < next; ) {
468 469
                if (pb->eof_reached)
                    return AVERROR_EOF;
470 471
                type = avio_rb16(pb);
                len = avio_rb16(pb);
472 473 474 475
                av_log(c->fc, AV_LOG_DEBUG, "type %d, len %d\n", type, len);
                if (len&1)
                    len += 1;
                if (type == 2) { // absolute path
476
                    av_free(dref->path);
477
                    dref->path = av_mallocz(len+1);
478 479
                    if (!dref->path)
                        return AVERROR(ENOMEM);
480
                    avio_read(pb, dref->path, len);
481
                    if (len > volume_len && !strncmp(dref->path, dref->volume, volume_len)) {
482 483 484 485 486 487 488 489
                        len -= volume_len;
                        memmove(dref->path, dref->path+volume_len, len);
                        dref->path[len] = 0;
                    }
                    for (j = 0; j < len; j++)
                        if (dref->path[j] == ':')
                            dref->path[j] = '/';
                    av_log(c->fc, AV_LOG_DEBUG, "path %s\n", dref->path);
490 491 492 493 494
                } else if (type == 0) { // directory name
                    av_free(dref->dir);
                    dref->dir = av_malloc(len+1);
                    if (!dref->dir)
                        return AVERROR(ENOMEM);
495
                    avio_read(pb, dref->dir, len);
496 497 498 499 500
                    dref->dir[len] = 0;
                    for (j = 0; j < len; j++)
                        if (dref->dir[j] == ':')
                            dref->dir[j] = '/';
                    av_log(c->fc, AV_LOG_DEBUG, "dir %s\n", dref->dir);
501
                } else
502
                    avio_skip(pb, len);
503 504
            }
        }
A
Anton Khirnov 已提交
505
        avio_seek(pb, next, SEEK_SET);
506 507 508 509
    }
    return 0;
}

510
static int mov_read_hdlr(MOVContext *c, AVIOContext *pb, MOVAtom atom)
511
{
512
    AVStream *st;
513
    uint32_t type;
514
    uint32_t av_unused ctype;
515

516 517 518 519 520
    if (c->fc->nb_streams < 1) // meta before first trak
        return 0;

    st = c->fc->streams[c->fc->nb_streams-1];

521 522
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
523 524

    /* component type */
525 526
    ctype = avio_rl32(pb);
    type = avio_rl32(pb); /* component subtype */
527

L
Luca Barbato 已提交
528 529
    av_dlog(c->fc, "ctype= %.4s (0x%08x)\n", (char*)&ctype, ctype);
    av_dlog(c->fc, "stype= %.4s\n", (char*)&type);
530

531
    if     (type == MKTAG('v','i','d','e'))
532
        st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
533
    else if (type == MKTAG('s','o','u','n'))
534
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
535
    else if (type == MKTAG('m','1','a',' '))
536
        st->codec->codec_id = AV_CODEC_ID_MP2;
537
    else if ((type == MKTAG('s','u','b','p')) || (type == MKTAG('c','l','c','p')))
538
        st->codec->codec_type = AVMEDIA_TYPE_SUBTITLE;
539

540 541 542
    avio_rb32(pb); /* component  manufacture */
    avio_rb32(pb); /* component flags */
    avio_rb32(pb); /* component flags mask */
543 544 545 546

    return 0;
}

547
int ff_mov_read_esds(AVFormatContext *fc, AVIOContext *pb)
548
{
549
    AVStream *st;
M
Mans Rullgard 已提交
550
    int tag;
551

552
    if (fc->nb_streams < 1)
553
        return 0;
554
    st = fc->streams[fc->nb_streams-1];
555

556
    avio_rb32(pb); /* version + flags */
M
Mans Rullgard 已提交
557
    ff_mp4_read_descr(fc, pb, &tag);
558
    if (tag == MP4ESDescrTag) {
559
        ff_mp4_parse_es_descr(pb, NULL);
560
    } else
561
        avio_rb16(pb); /* ID */
562

M
Mans Rullgard 已提交
563
    ff_mp4_read_descr(fc, pb, &tag);
564 565
    if (tag == MP4DecConfigDescrTag)
        ff_mp4_read_dec_config_descr(fc, st, pb);
566 567 568
    return 0;
}

569
static int mov_read_esds(MOVContext *c, AVIOContext *pb, MOVAtom atom)
570
{
571
    return ff_mov_read_esds(c->fc, pb);
572 573
}

574
static int mov_read_dac3(MOVContext *c, AVIOContext *pb, MOVAtom atom)
575 576
{
    AVStream *st;
577
    int ac3info, acmod, lfeon, bsmod;
578

579 580
    if (c->fc->nb_streams < 1)
        return 0;
581 582
    st = c->fc->streams[c->fc->nb_streams-1];

583
    ac3info = avio_rb24(pb);
584
    bsmod = (ac3info >> 14) & 0x7;
585 586 587
    acmod = (ac3info >> 11) & 0x7;
    lfeon = (ac3info >> 10) & 0x1;
    st->codec->channels = ((int[]){2,1,2,3,3,4,4,5})[acmod] + lfeon;
588 589 590
    st->codec->channel_layout = avpriv_ac3_channel_layout_tab[acmod];
    if (lfeon)
        st->codec->channel_layout |= AV_CH_LOW_FREQUENCY;
591 592 593
    st->codec->audio_service_type = bsmod;
    if (st->codec->channels > 1 && bsmod == 0x7)
        st->codec->audio_service_type = AV_AUDIO_SERVICE_TYPE_KARAOKE;
594 595 596 597

    return 0;
}

598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625
static int mov_read_dec3(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    int eac3info, acmod, lfeon, bsmod;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    /* No need to parse fields for additional independent substreams and its
     * associated dependent substreams since libavcodec's E-AC-3 decoder
     * does not support them yet. */
    avio_rb16(pb); /* data_rate and num_ind_sub */
    eac3info = avio_rb24(pb);
    bsmod = (eac3info >> 12) & 0x1f;
    acmod = (eac3info >>  9) & 0x7;
    lfeon = (eac3info >>  8) & 0x1;
    st->codec->channel_layout = avpriv_ac3_channel_layout_tab[acmod];
    if (lfeon)
        st->codec->channel_layout |= AV_CH_LOW_FREQUENCY;
    st->codec->channels = av_get_channel_layout_nb_channels(st->codec->channel_layout);
    st->codec->audio_service_type = bsmod;
    if (st->codec->channels > 1 && bsmod == 0x7)
        st->codec->audio_service_type = AV_AUDIO_SERVICE_TYPE_KARAOKE;

    return 0;
}

626 627 628 629 630 631 632 633 634 635 636
static int mov_read_chan(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    if (atom.size < 16)
        return 0;

637
    ff_mov_read_chan(c->fc, pb, st, atom.size - 4);
638 639 640 641

    return 0;
}

642 643 644 645 646 647 648 649 650 651 652 653 654
static int mov_read_wfex(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    ff_get_wav_header(pb, st->codec, atom.size);

    return 0;
}

655
static int mov_read_pasp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
656
{
657 658
    const int num = avio_rb32(pb);
    const int den = avio_rb32(pb);
659 660 661 662 663 664
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

665 666 667 668 669 670 671
    if ((st->sample_aspect_ratio.den != 1 || st->sample_aspect_ratio.num) && // default
        (den != st->sample_aspect_ratio.den || num != st->sample_aspect_ratio.num)) {
        av_log(c->fc, AV_LOG_WARNING,
               "sample aspect ratio already set to %d:%d, ignoring 'pasp' atom (%d:%d)\n",
               st->sample_aspect_ratio.num, st->sample_aspect_ratio.den,
               num, den);
    } else if (den != 0) {
672 673 674 675 676 677
        st->sample_aspect_ratio.num = num;
        st->sample_aspect_ratio.den = den;
    }
    return 0;
}

678
/* this atom contains actual media data */
679
static int mov_read_mdat(MOVContext *c, AVIOContext *pb, MOVAtom atom)
680
{
681
    if (atom.size == 0) /* wrong one (MP4) */
682 683 684 685 686
        return 0;
    c->found_mdat=1;
    return 0; /* now go for moov */
}

687
/* read major brand, minor version and compatible brands and store them as metadata */
688
static int mov_read_ftyp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
689
{
690 691 692 693 694 695
    uint32_t minor_ver;
    int comp_brand_size;
    char minor_ver_str[11]; /* 32 bit integer -> 10 digits + null */
    char* comp_brands_str;
    uint8_t type[5] = {0};

696
    avio_read(pb, type, 4);
B
Baptiste Coudurier 已提交
697
    if (strcmp(type, "qt  "))
698
        c->isom = 1;
699
    av_log(c->fc, AV_LOG_DEBUG, "ISO: File Type Major Brand: %.4s\n",(char *)&type);
700
    av_dict_set(&c->fc->metadata, "major_brand", type, 0);
701
    minor_ver = avio_rb32(pb); /* minor version */
702
    snprintf(minor_ver_str, sizeof(minor_ver_str), "%"PRIu32"", minor_ver);
703
    av_dict_set(&c->fc->metadata, "minor_version", minor_ver_str, 0);
704 705 706

    comp_brand_size = atom.size - 8;
    if (comp_brand_size < 0)
707
        return AVERROR_INVALIDDATA;
708 709 710
    comp_brands_str = av_malloc(comp_brand_size + 1); /* Add null terminator */
    if (!comp_brands_str)
        return AVERROR(ENOMEM);
711
    avio_read(pb, comp_brands_str, comp_brand_size);
712
    comp_brands_str[comp_brand_size] = 0;
713
    av_dict_set(&c->fc->metadata, "compatible_brands", comp_brands_str, 0);
714 715
    av_freep(&comp_brands_str);

716 717 718
    return 0;
}

719
/* this atom should contain all header atoms */
720
static int mov_read_moov(MOVContext *c, AVIOContext *pb, MOVAtom atom)
721
{
722 723 724 725
    int ret;

    if ((ret = mov_read_default(c, pb, atom)) < 0)
        return ret;
726 727 728 729 730 731
    /* we parsed the 'moov' atom, we can terminate the parsing as soon as we find the 'mdat' */
    /* so we don't parse the whole file if over a network */
    c->found_moov=1;
    return 0; /* now go for mdat */
}

732
static int mov_read_moof(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
733
{
734
    c->fragment.moof_offset = c->fragment.implicit_offset = avio_tell(pb) - 8;
735
    av_dlog(c->fc, "moof offset %"PRIx64"\n", c->fragment.moof_offset);
B
Baptiste Coudurier 已提交
736 737
    return mov_read_default(c, pb, atom);
}
738

739
static void mov_metadata_creation_time(AVDictionary **metadata, time_t time)
740 741 742
{
    char buffer[32];
    if (time) {
743
        struct tm *ptm, tmbuf;
744
        time -= 2082844800;  /* seconds between 1904-01-01 and Epoch */
745
        ptm = gmtime_r(&time, &tmbuf);
746
        if (!ptm) return;
747 748
        if (strftime(buffer, sizeof(buffer), "%Y-%m-%d %H:%M:%S", ptm))
            av_dict_set(metadata, "creation_time", buffer, 0);
749 750 751
    }
}

752
static int mov_read_mdhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
753
{
754 755 756
    AVStream *st;
    MOVStreamContext *sc;
    int version;
757
    char language[4] = {0};
758
    unsigned lang;
759
    time_t creation_time;
760

761 762 763 764 765
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

766 767 768 769 770
    if (sc->time_scale) {
        av_log(c->fc, AV_LOG_ERROR, "Multiple mdhd?\n");
        return AVERROR_INVALIDDATA;
    }

771
    version = avio_r8(pb);
772
    if (version > 1) {
773
        avpriv_request_sample(c->fc, "Version %d", version);
774 775
        return AVERROR_PATCHWELCOME;
    }
776
    avio_rb24(pb); /* flags */
B
clean  
Baptiste Coudurier 已提交
777
    if (version == 1) {
778 779
        creation_time = avio_rb64(pb);
        avio_rb64(pb);
B
clean  
Baptiste Coudurier 已提交
780
    } else {
781 782
        creation_time = avio_rb32(pb);
        avio_rb32(pb); /* modification time */
B
clean  
Baptiste Coudurier 已提交
783
    }
784
    mov_metadata_creation_time(&st->metadata, creation_time);
785

786 787
    sc->time_scale = avio_rb32(pb);
    st->duration = (version == 1) ? avio_rb64(pb) : avio_rb32(pb); /* duration */
788

789
    lang = avio_rb16(pb); /* language */
790
    if (ff_mov_lang_to_iso639(lang, language))
791
        av_dict_set(&st->metadata, "language", language, 0);
792
    avio_rb16(pb); /* quality */
793 794 795 796

    return 0;
}

797
static int mov_read_mvhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
798
{
799
    time_t creation_time;
800 801
    int version = avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
802

B
Baptiste Coudurier 已提交
803
    if (version == 1) {
804 805
        creation_time = avio_rb64(pb);
        avio_rb64(pb);
B
Baptiste Coudurier 已提交
806
    } else {
807 808
        creation_time = avio_rb32(pb);
        avio_rb32(pb); /* modification time */
B
Baptiste Coudurier 已提交
809
    }
810
    mov_metadata_creation_time(&c->fc->metadata, creation_time);
811
    c->time_scale = avio_rb32(pb); /* time scale */
812

L
Luca Barbato 已提交
813
    av_dlog(c->fc, "time scale = %i\n", c->time_scale);
814

815 816
    c->duration = (version == 1) ? avio_rb64(pb) : avio_rb32(pb); /* duration */
    avio_rb32(pb); /* preferred scale */
817

818
    avio_rb16(pb); /* preferred volume */
819

820
    avio_skip(pb, 10); /* reserved */
821

822
    avio_skip(pb, 36); /* display matrix */
823

824 825 826 827 828 829 830
    avio_rb32(pb); /* preview time */
    avio_rb32(pb); /* preview duration */
    avio_rb32(pb); /* poster time */
    avio_rb32(pb); /* selection time */
    avio_rb32(pb); /* selection duration */
    avio_rb32(pb); /* current time */
    avio_rb32(pb); /* next track ID */
831 832 833 834

    return 0;
}

835
static int mov_read_smi(MOVContext *c, AVIOContext *pb, MOVAtom atom)
836
{
837 838 839 840 841
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
842

843
    if ((uint64_t)atom.size > (1<<30))
844
        return AVERROR_INVALIDDATA;
845

846 847
    // currently SVQ3 decoder expect full STSD header - so let's fake it
    // this should be fixed and just SMI header should be passed
848
    av_free(st->codec->extradata);
849 850 851
    st->codec->extradata = av_mallocz(atom.size + 0x5a + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
B
Baptiste Coudurier 已提交
852 853
    st->codec->extradata_size = 0x5a + atom.size;
    memcpy(st->codec->extradata, "SVQ3", 4); // fake
854
    avio_read(pb, st->codec->extradata + 0x5a, atom.size);
L
Luca Barbato 已提交
855
    av_dlog(c->fc, "Reading SMI %"PRId64"  %s\n", atom.size, st->codec->extradata + 0x5a);
856 857
    return 0;
}
858

859
static int mov_read_enda(MOVContext *c, AVIOContext *pb, MOVAtom atom)
860
{
861 862 863 864 865 866
    AVStream *st;
    int little_endian;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
867

868
    little_endian = avio_rb16(pb);
L
Luca Barbato 已提交
869
    av_dlog(c->fc, "enda %d\n", little_endian);
870
    if (little_endian == 1) {
871
        switch (st->codec->codec_id) {
872 873
        case AV_CODEC_ID_PCM_S24BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_S24LE;
874
            break;
875 876
        case AV_CODEC_ID_PCM_S32BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_S32LE;
877
            break;
878 879
        case AV_CODEC_ID_PCM_F32BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_F32LE;
880
            break;
881 882
        case AV_CODEC_ID_PCM_F64BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_F64LE;
883
            break;
884 885 886 887 888 889 890
        default:
            break;
        }
    }
    return 0;
}

891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917 918 919 920 921 922 923 924 925 926
static int mov_read_colr(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    char color_parameter_type[5] = { 0 };
    int color_primaries, color_trc, color_matrix;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams - 1];

    avio_read(pb, color_parameter_type, 4);
    if (strncmp(color_parameter_type, "nclx", 4) &&
        strncmp(color_parameter_type, "nclc", 4)) {
        av_log(c->fc, AV_LOG_WARNING, "unsupported color_parameter_type %s\n",
               color_parameter_type);
        return 0;
    }

    color_primaries = avio_rb16(pb);
    color_trc = avio_rb16(pb);
    color_matrix = avio_rb16(pb);

    av_dlog(c->fc, "%s: pri %"PRIu16" trc %"PRIu16" matrix %"PRIu16"",
            color_parameter_type, color_primaries, color_trc, color_matrix);

    if (c->isom) {
        uint8_t color_range = avio_r8(pb) >> 7;
        av_dlog(c->fc, " full %"PRIu8"", color_range)
        if (color_range)
            st->codec->color_range = AVCOL_RANGE_JPEG;
        else
            st->codec->color_range = AVCOL_RANGE_MPEG;
        /* 14496-12 references JPEG XR specs (rather than the more complete
         * 23001-8) so some adjusting is required */
        if (color_primaries >= AVCOL_PRI_FILM)
            color_primaries = AVCOL_PRI_UNSPECIFIED;
927 928
        if ((color_trc >= AVCOL_TRC_LINEAR &&
             color_trc <= AVCOL_TRC_LOG_SQRT) ||
929 930 931 932 933 934 935 936 937 938 939 940 941 942 943 944 945 946 947 948 949 950 951 952 953 954 955 956 957 958 959
            color_trc >= AVCOL_TRC_BT2020_10)
            color_trc = AVCOL_TRC_UNSPECIFIED;
        if (color_matrix >= AVCOL_SPC_BT2020_NCL)
            color_matrix = AVCOL_SPC_UNSPECIFIED;
        st->codec->color_primaries = color_primaries;
        st->codec->color_trc = color_trc;
        st->codec->colorspace = color_matrix;
    } else {
        /* color primaries, Table 4-4 */
        switch (color_primaries) {
        case 1: st->codec->color_primaries = AVCOL_PRI_BT709; break;
        case 5: st->codec->color_primaries = AVCOL_PRI_SMPTE170M; break;
        case 6: st->codec->color_primaries = AVCOL_PRI_SMPTE240M; break;
        }
        /* color transfer, Table 4-5 */
        switch (color_trc) {
        case 1: st->codec->color_trc = AVCOL_TRC_BT709; break;
        case 7: st->codec->color_trc = AVCOL_TRC_SMPTE240M; break;
        }
        /* color matrix, Table 4-6 */
        switch (color_matrix) {
        case 1: st->codec->colorspace = AVCOL_SPC_BT709; break;
        case 6: st->codec->colorspace = AVCOL_SPC_BT470BG; break;
        case 7: st->codec->colorspace = AVCOL_SPC_SMPTE240M; break;
        }
    }
    av_dlog(c->fc, "\n")

    return 0;
}

960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983 984 985 986 987 988 989 990 991 992 993
static int mov_read_fiel(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    unsigned mov_field_order;
    enum AVFieldOrder decoded_field_order = AV_FIELD_UNKNOWN;

    if (c->fc->nb_streams < 1) // will happen with jp2 files
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    if (atom.size < 2)
        return AVERROR_INVALIDDATA;
    mov_field_order = avio_rb16(pb);
    if ((mov_field_order & 0xFF00) == 0x0100)
        decoded_field_order = AV_FIELD_PROGRESSIVE;
    else if ((mov_field_order & 0xFF00) == 0x0200) {
        switch (mov_field_order & 0xFF) {
        case 0x01: decoded_field_order = AV_FIELD_TT;
                   break;
        case 0x06: decoded_field_order = AV_FIELD_BB;
                   break;
        case 0x09: decoded_field_order = AV_FIELD_TB;
                   break;
        case 0x0E: decoded_field_order = AV_FIELD_BT;
                   break;
        }
    }
    if (decoded_field_order == AV_FIELD_UNKNOWN && mov_field_order) {
        av_log(NULL, AV_LOG_ERROR, "Unknown MOV field order 0x%04x\n", mov_field_order);
    }
    st->codec->field_order = decoded_field_order;

    return 0;
}

994
/* FIXME modify qdm2/svq3/h264 decoders to take full atom as extradata */
995
static int mov_read_extradata(MOVContext *c, AVIOContext *pb, MOVAtom atom)
996
{
997 998
    AVStream *st;
    uint64_t size;
999
    uint8_t *buf;
1000
    int err;
1001 1002 1003 1004 1005

    if (c->fc->nb_streams < 1) // will happen with jp2 files
        return 0;
    st= c->fc->streams[c->fc->nb_streams-1];
    size= (uint64_t)st->codec->extradata_size + atom.size + 8 + FF_INPUT_BUFFER_PADDING_SIZE;
1006
    if (size > INT_MAX || (uint64_t)atom.size > INT_MAX)
1007
        return AVERROR_INVALIDDATA;
1008 1009
    if ((err = av_reallocp(&st->codec->extradata, size)) < 0) {
        st->codec->extradata_size = 0;
1010
        return err;
1011
    }
1012
    buf = st->codec->extradata + st->codec->extradata_size;
1013 1014 1015
    st->codec->extradata_size= size - FF_INPUT_BUFFER_PADDING_SIZE;
    AV_WB32(       buf    , atom.size + 8);
    AV_WL32(       buf + 4, atom.type);
1016
    avio_read(pb, buf + 8, atom.size);
1017 1018 1019
    return 0;
}

1020
static int mov_read_wave(MOVContext *c, AVIOContext *pb, MOVAtom atom)
R
Roberto Togni 已提交
1021
{
1022 1023 1024 1025 1026
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
R
Roberto Togni 已提交
1027

1028
    if ((uint64_t)atom.size > (1<<30))
1029
        return AVERROR_INVALIDDATA;
1030

1031
    if (st->codec->codec_id == AV_CODEC_ID_QDM2 || st->codec->codec_id == AV_CODEC_ID_QDMC) {
1032
        // pass all frma atom to codec, needed at least for QDMC and QDM2
1033
        av_free(st->codec->extradata);
1034 1035 1036
        st->codec->extradata = av_mallocz(atom.size + FF_INPUT_BUFFER_PADDING_SIZE);
        if (!st->codec->extradata)
            return AVERROR(ENOMEM);
1037
        st->codec->extradata_size = atom.size;
1038
        avio_read(pb, st->codec->extradata, atom.size);
1039
    } else if (atom.size > 8) { /* to read frma, esds atoms */
1040 1041 1042
        int ret;
        if ((ret = mov_read_default(c, pb, atom)) < 0)
            return ret;
1043
    } else
1044
        avio_skip(pb, atom.size);
R
Roberto Togni 已提交
1045 1046 1047
    return 0;
}

1048 1049 1050 1051
/**
 * This function reads atom content and puts data in extradata without tag
 * nor size unlike mov_read_extradata.
 */
1052
static int mov_read_glbl(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1053
{
1054 1055 1056 1057 1058
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
1059

1060
    if ((uint64_t)atom.size > (1<<30))
1061
        return AVERROR_INVALIDDATA;
1062

1063
    if (atom.size >= 10) {
1064
        // Broken files created by legacy versions of libavformat will
1065 1066 1067 1068 1069 1070 1071
        // wrap a whole fiel atom inside of a glbl atom.
        unsigned size = avio_rb32(pb);
        unsigned type = avio_rl32(pb);
        avio_seek(pb, -8, SEEK_CUR);
        if (type == MKTAG('f','i','e','l') && size == atom.size)
            return mov_read_default(c, pb, atom);
    }
1072
    av_free(st->codec->extradata);
1073 1074 1075
    st->codec->extradata = av_mallocz(atom.size + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
1076
    st->codec->extradata_size = atom.size;
1077
    avio_read(pb, st->codec->extradata, atom.size);
1078 1079 1080
    return 0;
}

M
Martin Storsjö 已提交
1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092 1093
static int mov_read_dvc1(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    uint8_t profile_level;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    if (atom.size >= (1<<28) || atom.size < 7)
        return AVERROR_INVALIDDATA;

    profile_level = avio_r8(pb);
1094
    if ((profile_level & 0xf0) != 0xc0)
M
Martin Storsjö 已提交
1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105 1106
        return 0;

    av_free(st->codec->extradata);
    st->codec->extradata = av_mallocz(atom.size - 7 + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = atom.size - 7;
    avio_seek(pb, 6, SEEK_CUR);
    avio_read(pb, st->codec->extradata, st->codec->extradata_size);
    return 0;
}

M
Martin Storsjö 已提交
1107 1108 1109 1110 1111
/**
 * An strf atom is a BITMAPINFOHEADER struct. This struct is 40 bytes itself,
 * but can have extradata appended at the end after the 40 bytes belonging
 * to the struct.
 */
1112
static int mov_read_strf(MOVContext *c, AVIOContext *pb, MOVAtom atom)
M
Martin Storsjö 已提交
1113 1114 1115 1116 1117 1118 1119 1120 1121
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    if (atom.size <= 40)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

1122
    if ((uint64_t)atom.size > (1<<30))
1123
        return AVERROR_INVALIDDATA;
M
Martin Storsjö 已提交
1124 1125 1126 1127 1128 1129

    av_free(st->codec->extradata);
    st->codec->extradata = av_mallocz(atom.size - 40 + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = atom.size - 40;
1130
    avio_skip(pb, 40);
1131
    avio_read(pb, st->codec->extradata, atom.size - 40);
M
Martin Storsjö 已提交
1132 1133 1134
    return 0;
}

1135
static int mov_read_stco(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1136
{
1137 1138
    AVStream *st;
    MOVStreamContext *sc;
1139
    unsigned int i, entries;
1140

1141 1142 1143 1144 1145
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1146 1147
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1148

1149
    entries = avio_rb32(pb);
1150

A
Alex Converse 已提交
1151 1152
    if (!entries)
        return 0;
1153
    if (entries >= UINT_MAX/sizeof(int64_t))
1154
        return AVERROR_INVALIDDATA;
1155

B
Baptiste Coudurier 已提交
1156
    sc->chunk_offsets = av_malloc(entries * sizeof(int64_t));
1157
    if (!sc->chunk_offsets)
1158 1159 1160
        return AVERROR(ENOMEM);
    sc->chunk_count = entries;

1161
    if      (atom.type == MKTAG('s','t','c','o'))
1162
        for (i = 0; i < entries && !pb->eof_reached; i++)
1163
            sc->chunk_offsets[i] = avio_rb32(pb);
1164
    else if (atom.type == MKTAG('c','o','6','4'))
1165
        for (i = 0; i < entries && !pb->eof_reached; i++)
1166
            sc->chunk_offsets[i] = avio_rb64(pb);
1167
    else
1168
        return AVERROR_INVALIDDATA;
1169

1170 1171 1172 1173 1174
    sc->chunk_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1175 1176 1177
    return 0;
}

1178 1179 1180 1181
/**
 * Compute codec id for 'lpcm' tag.
 * See CoreAudioTypes and AudioStreamBasicDescription at Apple.
 */
1182
enum AVCodecID ff_mov_get_lpcm_codec_id(int bps, int flags)
1183
{
1184 1185 1186 1187 1188 1189
    /* lpcm flags:
     * 0x1 = float
     * 0x2 = big-endian
     * 0x4 = signed
     */
    return ff_get_pcm_codec_id(bps, flags & 1, flags & 2, flags & 4 ? -1 : 0);
1190 1191
}

1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222
static int mov_codec_id(AVStream *st, uint32_t format)
{
    int id = ff_codec_get_id(ff_codec_movaudio_tags, format);

    if (id <= 0 &&
        ((format & 0xFFFF) == 'm' + ('s' << 8) ||
         (format & 0xFFFF) == 'T' + ('S' << 8)))
        id = ff_codec_get_id(ff_codec_wav_tags, av_bswap32(format) & 0xFFFF);

    if (st->codec->codec_type != AVMEDIA_TYPE_VIDEO && id > 0) {
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
    } else if (st->codec->codec_type != AVMEDIA_TYPE_AUDIO &&
               /* skip old asf mpeg4 tag */
               format && format != MKTAG('m','p','4','s')) {
        id = ff_codec_get_id(ff_codec_movvideo_tags, format);
        if (id <= 0)
            id = ff_codec_get_id(ff_codec_bmp_tags, format);
        if (id > 0)
            st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
        else if (st->codec->codec_type == AVMEDIA_TYPE_DATA) {
            id = ff_codec_get_id(ff_codec_movsubtitle_tags, format);
            if (id > 0)
                st->codec->codec_type = AVMEDIA_TYPE_SUBTITLE;
        }
    }

    st->codec->codec_tag = format;

    return id;
}

1223 1224 1225
static void mov_parse_stsd_video(MOVContext *c, AVIOContext *pb,
                                 AVStream *st, MOVStreamContext *sc)
{
1226
    uint8_t codec_name[32];
1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247
    unsigned int color_depth, len, j;
    int color_greyscale;
    int color_table_id;

    avio_rb16(pb); /* version */
    avio_rb16(pb); /* revision level */
    avio_rb32(pb); /* vendor */
    avio_rb32(pb); /* temporal quality */
    avio_rb32(pb); /* spatial quality */

    st->codec->width  = avio_rb16(pb); /* width */
    st->codec->height = avio_rb16(pb); /* height */

    avio_rb32(pb); /* horiz resolution */
    avio_rb32(pb); /* vert resolution */
    avio_rb32(pb); /* data size, always 0 */
    avio_rb16(pb); /* frames per samples */

    len = avio_r8(pb); /* codec name, pascal string */
    if (len > 31)
        len = 31;
1248
    mov_read_mac_string(c, pb, len, codec_name, sizeof(codec_name));
1249 1250
    if (len < 31)
        avio_skip(pb, 31 - len);
1251 1252 1253 1254

    if (codec_name[0])
        av_dict_set(&st->metadata, "encoder", codec_name, 0);

1255
    /* codec_tag YV12 triggers an UV swap in rawdec.c */
1256
    if (!memcmp(codec_name, "Planar Y'CbCr 8-bit 4:2:0", 25))
1257 1258 1259
        st->codec->codec_tag = MKTAG('I', '4', '2', '0');
    /* Flash Media Server uses tag H263 with Sorenson Spark */
    if (st->codec->codec_tag == MKTAG('H','2','6','3') &&
1260
        !memcmp(codec_name, "Sorenson H263", 13))
1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333
        st->codec->codec_id = AV_CODEC_ID_FLV1;

    st->codec->bits_per_coded_sample = avio_rb16(pb); /* depth */
    color_table_id = avio_rb16(pb); /* colortable id */
    av_dlog(c->fc, "depth %d, ctab id %d\n",
            st->codec->bits_per_coded_sample, color_table_id);
    /* figure out the palette situation */
    color_depth     = st->codec->bits_per_coded_sample & 0x1F;
    color_greyscale = st->codec->bits_per_coded_sample & 0x20;

    /* if the depth is 2, 4, or 8 bpp, file is palettized */
    if ((color_depth == 2) || (color_depth == 4) || (color_depth == 8)) {
        /* for palette traversal */
        unsigned int color_start, color_count, color_end;
        unsigned char r, g, b;

        if (color_greyscale) {
            int color_index, color_dec;
            /* compute the greyscale palette */
            st->codec->bits_per_coded_sample = color_depth;
            color_count = 1 << color_depth;
            color_index = 255;
            color_dec   = 256 / (color_count - 1);
            for (j = 0; j < color_count; j++) {
                r = g = b = color_index;
                sc->palette[j] = (r << 16) | (g << 8) | (b);
                color_index -= color_dec;
                if (color_index < 0)
                    color_index = 0;
            }
        } else if (color_table_id) {
            const uint8_t *color_table;
            /* if flag bit 3 is set, use the default palette */
            color_count = 1 << color_depth;
            if (color_depth == 2)
                color_table = ff_qt_default_palette_4;
            else if (color_depth == 4)
                color_table = ff_qt_default_palette_16;
            else
                color_table = ff_qt_default_palette_256;

            for (j = 0; j < color_count; j++) {
                r = color_table[j * 3 + 0];
                g = color_table[j * 3 + 1];
                b = color_table[j * 3 + 2];
                sc->palette[j] = (r << 16) | (g << 8) | (b);
            }
        } else {
            /* load the palette from the file */
            color_start = avio_rb32(pb);
            color_count = avio_rb16(pb);
            color_end   = avio_rb16(pb);
            if ((color_start <= 255) && (color_end <= 255)) {
                for (j = color_start; j <= color_end; j++) {
                    /* each R, G, or B component is 16 bits;
                     * only use the top 8 bits; skip alpha bytes
                     * up front */
                    avio_r8(pb);
                    avio_r8(pb);
                    r = avio_r8(pb);
                    avio_r8(pb);
                    g = avio_r8(pb);
                    avio_r8(pb);
                    b = avio_r8(pb);
                    avio_r8(pb);
                    sc->palette[j] = (r << 16) | (g << 8) | (b);
                }
            }
        }
        sc->has_palette = 1;
    }
}

1334 1335 1336 1337 1338 1339 1340 1341 1342 1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419
static void mov_parse_stsd_audio(MOVContext *c, AVIOContext *pb,
                                 AVStream *st, MOVStreamContext *sc)
{
    int bits_per_sample, flags;
    uint16_t version = avio_rb16(pb);

    avio_rb16(pb); /* revision level */
    avio_rb32(pb); /* vendor */

    st->codec->channels              = avio_rb16(pb); /* channel count */
    st->codec->bits_per_coded_sample = avio_rb16(pb); /* sample size */
    av_dlog(c->fc, "audio channels %d\n", st->codec->channels);

    sc->audio_cid = avio_rb16(pb);
    avio_rb16(pb); /* packet size = 0 */

    st->codec->sample_rate = ((avio_rb32(pb) >> 16));

    // Read QT version 1 fields. In version 0 these do not exist.
    av_dlog(c->fc, "version =%d, isom =%d\n", version, c->isom);
    if (!c->isom) {
        if (version == 1) {
            sc->samples_per_frame = avio_rb32(pb);
            avio_rb32(pb); /* bytes per packet */
            sc->bytes_per_frame = avio_rb32(pb);
            avio_rb32(pb); /* bytes per sample */
        } else if (version == 2) {
            avio_rb32(pb); /* sizeof struct only */
            st->codec->sample_rate = av_int2double(avio_rb64(pb));
            st->codec->channels    = avio_rb32(pb);
            avio_rb32(pb); /* always 0x7F000000 */
            st->codec->bits_per_coded_sample = avio_rb32(pb);

            flags = avio_rb32(pb); /* lpcm format specific flag */
            sc->bytes_per_frame   = avio_rb32(pb);
            sc->samples_per_frame = avio_rb32(pb);
            if (st->codec->codec_tag == MKTAG('l','p','c','m'))
                st->codec->codec_id =
                    ff_mov_get_lpcm_codec_id(st->codec->bits_per_coded_sample,
                                             flags);
        }
    }

    switch (st->codec->codec_id) {
    case AV_CODEC_ID_PCM_S8:
    case AV_CODEC_ID_PCM_U8:
        if (st->codec->bits_per_coded_sample == 16)
            st->codec->codec_id = AV_CODEC_ID_PCM_S16BE;
        break;
    case AV_CODEC_ID_PCM_S16LE:
    case AV_CODEC_ID_PCM_S16BE:
        if (st->codec->bits_per_coded_sample == 8)
            st->codec->codec_id = AV_CODEC_ID_PCM_S8;
        else if (st->codec->bits_per_coded_sample == 24)
            st->codec->codec_id =
                st->codec->codec_id == AV_CODEC_ID_PCM_S16BE ?
                AV_CODEC_ID_PCM_S24BE : AV_CODEC_ID_PCM_S24LE;
        break;
    /* set values for old format before stsd version 1 appeared */
    case AV_CODEC_ID_MACE3:
        sc->samples_per_frame = 6;
        sc->bytes_per_frame   = 2 * st->codec->channels;
        break;
    case AV_CODEC_ID_MACE6:
        sc->samples_per_frame = 6;
        sc->bytes_per_frame   = 1 * st->codec->channels;
        break;
    case AV_CODEC_ID_ADPCM_IMA_QT:
        sc->samples_per_frame = 64;
        sc->bytes_per_frame   = 34 * st->codec->channels;
        break;
    case AV_CODEC_ID_GSM:
        sc->samples_per_frame = 160;
        sc->bytes_per_frame   = 33;
        break;
    default:
        break;
    }

    bits_per_sample = av_get_bits_per_sample(st->codec->codec_id);
    if (bits_per_sample) {
        st->codec->bits_per_coded_sample = bits_per_sample;
        sc->sample_size = (bits_per_sample >> 3) * st->codec->channels;
    }
}

1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433
static void mov_parse_stsd_subtitle(MOVContext *c, AVIOContext *pb,
                                    AVStream *st, MOVStreamContext *sc,
                                    int size)
{
    // ttxt stsd contains display flags, justification, background
    // color, fonts, and default styles, so fake an atom to read it
    MOVAtom fake_atom = { .size = size };
    // mp4s contains a regular esds atom
    if (st->codec->codec_tag != AV_RL32("mp4s"))
        mov_read_glbl(c, pb, fake_atom);
    st->codec->width  = sc->width;
    st->codec->height = sc->height;
}

1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467
static uint32_t yuv_to_rgba(uint32_t ycbcr)
{
    uint8_t r, g, b;
    int y, cb, cr;

    y  = (ycbcr >> 16) & 0xFF;
    cr = (ycbcr >> 8)  & 0xFF;
    cb =  ycbcr        & 0xFF;

    b = av_clip_uint8(1.164 * (y - 16)                      + 2.018 * (cb - 128));
    g = av_clip_uint8(1.164 * (y - 16) - 0.813 * (cr - 128) - 0.391 * (cb - 128));
    r = av_clip_uint8(1.164 * (y - 16) + 1.596 * (cr - 128));

    return (r << 16) | (g << 8) | b;
}

static int mov_rewrite_dvd_sub_extradata(AVStream *st)
{
    char buf[256] = {0};
    uint8_t *src = st->codec->extradata;
    int i;

    if (st->codec->extradata_size != 64)
        return 0;

    if (st->codec->width > 0 &&  st->codec->height > 0)
        snprintf(buf, sizeof(buf), "size: %dx%d\n",
                 st->codec->width, st->codec->height);
    av_strlcat(buf, "palette: ", sizeof(buf));

    for (i = 0; i < 16; i++) {
        uint32_t yuv = AV_RB32(src + i * 4);
        uint32_t rgba = yuv_to_rgba(yuv);

1468
        av_strlcatf(buf, sizeof(buf), "%06"PRIx32"%s", rgba, i != 15 ? ", " : "");
1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484
    }

    if (av_strlcat(buf, "\n", sizeof(buf)) >= sizeof(buf))
        return 0;

    av_freep(&st->codec->extradata);
    st->codec->extradata_size = 0;
    st->codec->extradata = av_mallocz(strlen(buf) + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = strlen(buf);
    memcpy(st->codec->extradata, buf, st->codec->extradata_size);

    return 0;
}

L
Luca Barbato 已提交
1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501
static int mov_parse_stsd_data(MOVContext *c, AVIOContext *pb,
                                AVStream *st, MOVStreamContext *sc,
                                int size)
{
    if (st->codec->codec_tag == MKTAG('t','m','c','d')) {
        st->codec->extradata_size = size;
        st->codec->extradata = av_malloc(size + FF_INPUT_BUFFER_PADDING_SIZE);
        if (!st->codec->extradata)
            return AVERROR(ENOMEM);
        avio_read(pb, st->codec->extradata, size);
    } else {
        /* other codec type, just skip (rtp, mp4s ...) */
        avio_skip(pb, size);
    }
    return 0;
}

1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565
static int mov_finalize_stsd_codec(MOVContext *c, AVIOContext *pb,
                                   AVStream *st, MOVStreamContext *sc)
{
    if (st->codec->codec_type == AVMEDIA_TYPE_AUDIO &&
        !st->codec->sample_rate && sc->time_scale > 1)
        st->codec->sample_rate = sc->time_scale;

    /* special codec parameters handling */
    switch (st->codec->codec_id) {
#if CONFIG_DV_DEMUXER
    case AV_CODEC_ID_DVAUDIO:
        c->dv_fctx  = avformat_alloc_context();
        c->dv_demux = avpriv_dv_init_demux(c->dv_fctx);
        if (!c->dv_demux) {
            av_log(c->fc, AV_LOG_ERROR, "dv demux context init error\n");
            return AVERROR(ENOMEM);
        }
        sc->dv_audio_container = 1;
        st->codec->codec_id    = AV_CODEC_ID_PCM_S16LE;
        break;
#endif
    /* no ifdef since parameters are always those */
    case AV_CODEC_ID_QCELP:
        st->codec->channels = 1;
        // force sample rate for qcelp when not stored in mov
        if (st->codec->codec_tag != MKTAG('Q','c','l','p'))
            st->codec->sample_rate = 8000;
        break;
    case AV_CODEC_ID_AMR_NB:
        st->codec->channels    = 1;
        /* force sample rate for amr, stsd in 3gp does not store sample rate */
        st->codec->sample_rate = 8000;
        break;
    case AV_CODEC_ID_AMR_WB:
        st->codec->channels    = 1;
        st->codec->sample_rate = 16000;
        break;
    case AV_CODEC_ID_MP2:
    case AV_CODEC_ID_MP3:
        /* force type after stsd for m1a hdlr */
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
        st->need_parsing      = AVSTREAM_PARSE_FULL;
        break;
    case AV_CODEC_ID_GSM:
    case AV_CODEC_ID_ADPCM_MS:
    case AV_CODEC_ID_ADPCM_IMA_WAV:
    case AV_CODEC_ID_ILBC:
        st->codec->block_align = sc->bytes_per_frame;
        break;
    case AV_CODEC_ID_ALAC:
        if (st->codec->extradata_size == 36) {
            st->codec->channels    = AV_RB8 (st->codec->extradata + 21);
            st->codec->sample_rate = AV_RB32(st->codec->extradata + 32);
        }
        break;
    case AV_CODEC_ID_VC1:
        st->need_parsing = AVSTREAM_PARSE_FULL;
        break;
    default:
        break;
    }
    return 0;
}

1566 1567 1568 1569 1570 1571 1572 1573
static int mov_skip_multiple_stsd(MOVContext *c, AVIOContext *pb,
                                  int codec_tag, int format,
                                  int size)
{
    int video_codec_id = ff_codec_get_id(ff_codec_movvideo_tags, format);

    if (codec_tag &&
        (codec_tag == AV_RL32("avc1") ||
Y
Yusuke Nakamura 已提交
1574 1575
         codec_tag == AV_RL32("hvc1") ||
         codec_tag == AV_RL32("hev1") ||
1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588 1589 1590
         (codec_tag != format &&
          (c->fc->video_codec_id ? video_codec_id != c->fc->video_codec_id
                                 : codec_tag != MKTAG('j','p','e','g'))))) {
        /* Multiple fourcc, we skip JPEG. This is not correct, we should
         * export it as a separate AVStream but this needs a few changes
         * in the MOV demuxer, patch welcome. */

        av_log(c->fc, AV_LOG_WARNING, "multiple fourcc not supported\n");
        avio_skip(pb, size);
        return 1;
    }

    return 0;
}

1591
int ff_mov_read_stsd_entries(MOVContext *c, AVIOContext *pb, int entries)
1592
{
1593 1594
    AVStream *st;
    MOVStreamContext *sc;
1595
    int pseudo_stream_id;
1596

1597 1598 1599 1600 1601
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1602 1603 1604
    for (pseudo_stream_id = 0;
         pseudo_stream_id < entries && !pb->eof_reached;
         pseudo_stream_id++) {
1605
        //Parsing Sample description table
1606
        enum AVCodecID id;
L
Luca Barbato 已提交
1607
        int ret, dref_id = 1;
1608
        MOVAtom a = { AV_RL32("stsd") };
1609
        int64_t start_pos = avio_tell(pb);
1610
        uint32_t size = avio_rb32(pb); /* size */
1611
        uint32_t format = avio_rl32(pb); /* data format */
1612

1613
        if (size >= 16) {
1614 1615 1616
            avio_rb32(pb); /* reserved */
            avio_rb16(pb); /* reserved */
            dref_id = avio_rb16(pb);
1617
        } else {
1618
            av_log(c->fc, AV_LOG_ERROR, "invalid size %"PRIu32" in stsd\n", size);
1619
            return AVERROR_INVALIDDATA;
1620
        }
1621

1622 1623
        if (mov_skip_multiple_stsd(c, pb, st->codec->codec_tag, format,
                                   size - (avio_tell(pb) - start_pos)))
1624
            continue;
1625

1626
        sc->pseudo_stream_id = st->codec->codec_tag ? -1 : pseudo_stream_id;
1627
        sc->dref_id= dref_id;
1628

1629
        id = mov_codec_id(st, format);
1630

1631
        av_dlog(c->fc, "size=%"PRIu32" 4CC= %"PRIu8"%"PRIu8"%"PRIu8"%"PRIu8" codec_type=%d\n", size,
1632 1633
                (format >> 0) & 0xff, (format >> 8) & 0xff, (format >> 16) & 0xff,
                (format >> 24) & 0xff, st->codec->codec_type);
1634

1635
        if (st->codec->codec_type==AVMEDIA_TYPE_VIDEO) {
1636
            st->codec->codec_id = id;
1637
            mov_parse_stsd_video(c, pb, st, sc);
1638
        } else if (st->codec->codec_type==AVMEDIA_TYPE_AUDIO) {
1639
            st->codec->codec_id = id;
1640
            mov_parse_stsd_audio(c, pb, st, sc);
1641
        } else if (st->codec->codec_type==AVMEDIA_TYPE_SUBTITLE){
1642 1643 1644
            st->codec->codec_id = id;
            mov_parse_stsd_subtitle(c, pb, st, sc,
                                    size - (avio_tell(pb) - start_pos));
1645
        } else {
L
Luca Barbato 已提交
1646 1647 1648 1649
            ret = mov_parse_stsd_data(c, pb, st, sc,
                                      size - (avio_tell(pb) - start_pos));
            if (ret < 0)
                return ret;
1650
        }
Y
Yusuke Nakamura 已提交
1651
        /* this will read extra atoms at the end (wave, alac, damr, avcC, hvcC, SMI ...) */
1652
        a.size = size - (avio_tell(pb) - start_pos);
1653
        if (a.size > 8) {
1654 1655
            if ((ret = mov_read_default(c, pb, a)) < 0)
                return ret;
1656
        } else if (a.size > 0)
1657
            avio_skip(pb, a.size);
1658
    }
1659

1660 1661 1662
    if (pb->eof_reached)
        return AVERROR_EOF;

1663
    return mov_finalize_stsd_codec(c, pb, st, sc);
1664 1665
}

1666
static int mov_read_stsd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1667 1668 1669
{
    int entries;

1670 1671 1672
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1673 1674 1675 1676

    return ff_mov_read_stsd_entries(c, pb, entries);
}

1677
static int mov_read_stsc(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1678
{
1679 1680
    AVStream *st;
    MOVStreamContext *sc;
1681
    unsigned int i, entries;
1682

1683 1684 1685 1686 1687
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1688 1689
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1690

1691
    entries = avio_rb32(pb);
1692

L
Luca Barbato 已提交
1693
    av_dlog(c->fc, "track[%i].stsc.entries = %i\n", c->fc->nb_streams-1, entries);
1694

A
Alex Converse 已提交
1695 1696
    if (!entries)
        return 0;
1697
    if (entries >= UINT_MAX / sizeof(*sc->stsc_data))
1698
        return AVERROR_INVALIDDATA;
1699 1700
    sc->stsc_data = av_malloc(entries * sizeof(*sc->stsc_data));
    if (!sc->stsc_data)
1701 1702
        return AVERROR(ENOMEM);

1703
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1704 1705 1706
        sc->stsc_data[i].first = avio_rb32(pb);
        sc->stsc_data[i].count = avio_rb32(pb);
        sc->stsc_data[i].id = avio_rb32(pb);
1707
    }
1708 1709 1710 1711 1712 1713

    sc->stsc_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1714 1715 1716
    return 0;
}

1717
static int mov_read_stps(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1718 1719 1720 1721 1722 1723 1724 1725 1726 1727
{
    AVStream *st;
    MOVStreamContext *sc;
    unsigned i, entries;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1728
    avio_rb32(pb); // version + flags
1729

1730
    entries = avio_rb32(pb);
1731
    if (entries >= UINT_MAX / sizeof(*sc->stps_data))
1732
        return AVERROR_INVALIDDATA;
1733 1734 1735 1736
    sc->stps_data = av_malloc(entries * sizeof(*sc->stps_data));
    if (!sc->stps_data)
        return AVERROR(ENOMEM);

1737
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1738
        sc->stps_data[i] = avio_rb32(pb);
L
Luca Barbato 已提交
1739
        //av_dlog(c->fc, "stps %d\n", sc->stps_data[i]);
1740 1741
    }

1742 1743 1744 1745 1746
    sc->stps_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1747 1748 1749
    return 0;
}

1750
static int mov_read_stss(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1751
{
1752 1753
    AVStream *st;
    MOVStreamContext *sc;
1754
    unsigned int i, entries;
1755

1756 1757 1758 1759 1760
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1761 1762
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1763

1764
    entries = avio_rb32(pb);
1765

L
Luca Barbato 已提交
1766
    av_dlog(c->fc, "keyframe_count = %d\n", entries);
1767

1768
    if (!entries)
1769 1770
    {
        sc->keyframe_absent = 1;
1771
        return 0;
1772
    }
1773
    if (entries >= UINT_MAX / sizeof(int))
1774
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
1775
    sc->keyframes = av_malloc(entries * sizeof(int));
1776
    if (!sc->keyframes)
1777 1778
        return AVERROR(ENOMEM);

1779
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1780
        sc->keyframes[i] = avio_rb32(pb);
L
Luca Barbato 已提交
1781
        //av_dlog(c->fc, "keyframes[]=%d\n", sc->keyframes[i]);
1782
    }
1783 1784 1785 1786 1787 1788

    sc->keyframe_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1789 1790 1791
    return 0;
}

1792
static int mov_read_stsz(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1793
{
1794 1795
    AVStream *st;
    MOVStreamContext *sc;
1796 1797 1798
    unsigned int i, entries, sample_size, field_size, num_bytes;
    GetBitContext gb;
    unsigned char* buf;
1799

1800 1801 1802 1803 1804
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1805 1806
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1807

1808
    if (atom.type == MKTAG('s','t','s','z')) {
1809
        sample_size = avio_rb32(pb);
1810 1811 1812
        if (!sc->sample_size) /* do not overwrite value computed in stsd */
            sc->sample_size = sample_size;
        field_size = 32;
1813 1814
    } else {
        sample_size = 0;
1815 1816
        avio_rb24(pb); /* reserved */
        field_size = avio_r8(pb);
1817
    }
1818
    entries = avio_rb32(pb);
1819

L
Luca Barbato 已提交
1820
    av_dlog(c->fc, "sample_size = %d sample_count = %d\n", sc->sample_size, entries);
1821

1822
    sc->sample_count = entries;
1823 1824 1825
    if (sample_size)
        return 0;

1826 1827
    if (field_size != 4 && field_size != 8 && field_size != 16 && field_size != 32) {
        av_log(c->fc, AV_LOG_ERROR, "Invalid sample field size %d\n", field_size);
1828
        return AVERROR_INVALIDDATA;
1829 1830
    }

A
Alex Converse 已提交
1831 1832
    if (!entries)
        return 0;
1833
    if (entries >= UINT_MAX / sizeof(int) || entries >= (UINT_MAX - 4) / field_size)
1834
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
1835
    sc->sample_sizes = av_malloc(entries * sizeof(int));
1836
    if (!sc->sample_sizes)
1837 1838
        return AVERROR(ENOMEM);

1839 1840
    num_bytes = (entries*field_size+4)>>3;

1841
    buf = av_malloc(num_bytes+FF_INPUT_BUFFER_PADDING_SIZE);
1842 1843 1844 1845 1846
    if (!buf) {
        av_freep(&sc->sample_sizes);
        return AVERROR(ENOMEM);
    }

1847
    if (avio_read(pb, buf, num_bytes) < num_bytes) {
1848 1849
        av_freep(&sc->sample_sizes);
        av_free(buf);
1850
        return AVERROR_INVALIDDATA;
1851 1852 1853 1854
    }

    init_get_bits(&gb, buf, 8*num_bytes);

1855
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1856
        sc->sample_sizes[i] = get_bits_long(&gb, field_size);
1857 1858
        sc->data_size += sc->sample_sizes[i];
    }
1859

1860 1861 1862 1863 1864
    sc->sample_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1865
    av_free(buf);
1866 1867 1868
    return 0;
}

1869
static int mov_read_stts(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1870
{
1871 1872
    AVStream *st;
    MOVStreamContext *sc;
1873
    unsigned int i, entries;
1874 1875
    int64_t duration=0;
    int64_t total_sample_count=0;
1876

1877 1878 1879 1880 1881
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1882 1883 1884
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1885

1886 1887
    av_dlog(c->fc, "track[%i].stts.entries = %i\n",
            c->fc->nb_streams-1, entries);
1888

A
Alex Converse 已提交
1889 1890 1891
    if (!entries)
        return 0;
    if (entries >= UINT_MAX / sizeof(*sc->stts_data))
L
Luca Barbato 已提交
1892
        return AVERROR(EINVAL);
1893

1894
    av_free(sc->stts_data);
1895
    sc->stts_data = av_malloc(entries * sizeof(*sc->stts_data));
1896
    if (!sc->stts_data)
1897
        return AVERROR(ENOMEM);
1898

1899
    for (i = 0; i < entries && !pb->eof_reached; i++) {
M
cleanup  
Michael Niedermayer 已提交
1900 1901
        int sample_duration;
        int sample_count;
1902

1903 1904
        sample_count=avio_rb32(pb);
        sample_duration = avio_rb32(pb);
1905 1906 1907 1908
        if (sample_count < 0) {
            av_log(c->fc, AV_LOG_ERROR, "Invalid sample_count=%d\n", sample_count);
            return AVERROR_INVALIDDATA;
        }
1909 1910 1911
        sc->stts_data[i].count= sample_count;
        sc->stts_data[i].duration= sample_duration;

1912 1913
        av_dlog(c->fc, "sample_count=%d, sample_duration=%d\n",
                sample_count, sample_duration);
1914

B
Baptiste Coudurier 已提交
1915
        duration+=(int64_t)sample_duration*sample_count;
1916 1917 1918
        total_sample_count+=sample_count;
    }

1919 1920 1921 1922 1923
    sc->stts_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1924
    st->nb_frames= total_sample_count;
1925
    if (duration)
1926
        st->duration= duration;
1927
    sc->track_end = duration;
1928 1929 1930
    return 0;
}

1931
static int mov_read_ctts(MOVContext *c, AVIOContext *pb, MOVAtom atom)
M
Michael Niedermayer 已提交
1932
{
1933 1934
    AVStream *st;
    MOVStreamContext *sc;
M
Michael Niedermayer 已提交
1935 1936
    unsigned int i, entries;

1937 1938 1939 1940 1941
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1942 1943 1944
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1945

L
Luca Barbato 已提交
1946
    av_dlog(c->fc, "track[%i].ctts.entries = %i\n", c->fc->nb_streams-1, entries);
1947

A
Alex Converse 已提交
1948 1949
    if (!entries)
        return 0;
1950
    if (entries >= UINT_MAX / sizeof(*sc->ctts_data))
1951
        return AVERROR_INVALIDDATA;
1952
    sc->ctts_data = av_malloc(entries * sizeof(*sc->ctts_data));
1953
    if (!sc->ctts_data)
1954
        return AVERROR(ENOMEM);
1955

1956
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1957 1958
        int count    =avio_rb32(pb);
        int duration =avio_rb32(pb);
1959 1960 1961

        sc->ctts_data[i].count   = count;
        sc->ctts_data[i].duration= duration;
1962 1963
        if (duration < 0)
            sc->dts_shift = FFMAX(sc->dts_shift, -duration);
M
Michael Niedermayer 已提交
1964
    }
1965

1966 1967 1968 1969 1970
    sc->ctts_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

L
Luca Barbato 已提交
1971
    av_dlog(c->fc, "dts shift %d\n", sc->dts_shift);
1972

M
Michael Niedermayer 已提交
1973 1974 1975
    return 0;
}

1976 1977 1978 1979 1980 1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991 1992 1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004 2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015
static int mov_read_sbgp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    MOVStreamContext *sc;
    unsigned int i, entries;
    uint8_t version;
    uint32_t grouping_type;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

    version = avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    grouping_type = avio_rl32(pb);
    if (grouping_type != MKTAG( 'r','a','p',' '))
        return 0; /* only support 'rap ' grouping */
    if (version == 1)
        avio_rb32(pb); /* grouping_type_parameter */

    entries = avio_rb32(pb);
    if (!entries)
        return 0;
    if (entries >= UINT_MAX / sizeof(*sc->rap_group))
        return AVERROR_INVALIDDATA;
    sc->rap_group = av_malloc(entries * sizeof(*sc->rap_group));
    if (!sc->rap_group)
        return AVERROR(ENOMEM);

    for (i = 0; i < entries && !pb->eof_reached; i++) {
        sc->rap_group[i].count = avio_rb32(pb); /* sample_count */
        sc->rap_group[i].index = avio_rb32(pb); /* group_description_index */
    }

    sc->rap_group_count = i;

    return pb->eof_reached ? AVERROR_EOF : 0;
}

2016 2017 2018
static void mov_build_index(MOVContext *mov, AVStream *st)
{
    MOVStreamContext *sc = st->priv_data;
2019
    int64_t current_offset;
2020 2021 2022 2023
    int64_t current_dts = 0;
    unsigned int stts_index = 0;
    unsigned int stsc_index = 0;
    unsigned int stss_index = 0;
2024
    unsigned int stps_index = 0;
2025
    unsigned int i, j;
2026
    uint64_t stream_size = 0;
2027

2028
    /* adjust first dts according to edit list */
2029
    if (sc->time_offset && mov->time_scale > 0) {
2030 2031 2032
        if (sc->time_offset < 0)
            sc->time_offset = av_rescale(sc->time_offset, sc->time_scale, mov->time_scale);
        current_dts = -sc->time_offset;
2033
        if (sc->ctts_data && sc->stts_data && sc->stts_data[0].duration &&
2034
            sc->ctts_data[0].duration / sc->stts_data[0].duration > 16) {
2035 2036 2037 2038 2039
            /* more than 16 frames delay, dts are likely wrong
               this happens with files created by iMovie */
            sc->wrong_dts = 1;
            st->codec->has_b_frames = 1;
        }
2040 2041
    }

2042
    /* only use old uncompressed audio chunk demuxing when stts specifies it */
2043
    if (!(st->codec->codec_type == AVMEDIA_TYPE_AUDIO &&
2044
          sc->stts_count == 1 && sc->stts_data[0].duration == 1)) {
2045 2046
        unsigned int current_sample = 0;
        unsigned int stts_sample = 0;
2047
        unsigned int sample_size;
2048
        unsigned int distance = 0;
2049 2050 2051
        unsigned int rap_group_index = 0;
        unsigned int rap_group_sample = 0;
        int rap_group_present = sc->rap_group_count && sc->rap_group;
2052
        int key_off = (sc->keyframes && sc->keyframes[0] > 0) || (sc->stps_data && sc->stps_data[0] > 0);
2053

2054 2055
        current_dts -= sc->dts_shift;

A
Alex Converse 已提交
2056 2057
        if (!sc->sample_count)
            return;
2058
        if (sc->sample_count >= UINT_MAX / sizeof(*st->index_entries) - st->nb_index_entries)
2059
            return;
2060 2061 2062 2063
        if (av_reallocp_array(&st->index_entries,
                              st->nb_index_entries + sc->sample_count,
                              sizeof(*st->index_entries)) < 0) {
            st->nb_index_entries = 0;
2064
            return;
2065
        }
2066
        st->index_entries_allocated_size = (st->nb_index_entries + sc->sample_count) * sizeof(*st->index_entries);
2067

2068 2069
        for (i = 0; i < sc->chunk_count; i++) {
            current_offset = sc->chunk_offsets[i];
2070
            while (stsc_index + 1 < sc->stsc_count &&
2071
                i + 1 == sc->stsc_data[stsc_index + 1].first)
2072
                stsc_index++;
2073
            for (j = 0; j < sc->stsc_data[stsc_index].count; j++) {
2074
                int keyframe = 0;
2075 2076
                if (current_sample >= sc->sample_count) {
                    av_log(mov->fc, AV_LOG_ERROR, "wrong sample count\n");
2077
                    return;
2078
                }
2079

2080
                if (!sc->keyframe_absent && (!sc->keyframe_count || current_sample+key_off == sc->keyframes[stss_index])) {
2081
                    keyframe = 1;
2082 2083
                    if (stss_index + 1 < sc->keyframe_count)
                        stss_index++;
2084 2085 2086 2087
                } else if (sc->stps_count && current_sample+key_off == sc->stps_data[stps_index]) {
                    keyframe = 1;
                    if (stps_index + 1 < sc->stps_count)
                        stps_index++;
2088
                }
2089 2090 2091 2092 2093 2094 2095 2096
                if (rap_group_present && rap_group_index < sc->rap_group_count) {
                    if (sc->rap_group[rap_group_index].index > 0)
                        keyframe = 1;
                    if (++rap_group_sample == sc->rap_group[rap_group_index].count) {
                        rap_group_sample = 0;
                        rap_group_index++;
                    }
                }
2097 2098
                if (keyframe)
                    distance = 0;
2099
                sample_size = sc->sample_size > 0 ? sc->sample_size : sc->sample_sizes[current_sample];
2100
                if (sc->pseudo_stream_id == -1 ||
2101
                   sc->stsc_data[stsc_index].id - 1 == sc->pseudo_stream_id) {
2102 2103 2104 2105 2106 2107
                    AVIndexEntry *e = &st->index_entries[st->nb_index_entries++];
                    e->pos = current_offset;
                    e->timestamp = current_dts;
                    e->size = sample_size;
                    e->min_distance = distance;
                    e->flags = keyframe ? AVINDEX_KEYFRAME : 0;
L
Luca Barbato 已提交
2108
                    av_dlog(mov->fc, "AVIndex stream %d, sample %d, offset %"PRIx64", dts %"PRId64", "
2109 2110 2111
                            "size %d, distance %d, keyframe %d\n", st->index, current_sample,
                            current_offset, current_dts, sample_size, distance, keyframe);
                }
2112

2113
                current_offset += sample_size;
2114
                stream_size += sample_size;
2115
                current_dts += sc->stts_data[stts_index].duration;
2116 2117 2118 2119 2120 2121 2122 2123 2124
                distance++;
                stts_sample++;
                current_sample++;
                if (stts_index + 1 < sc->stts_count && stts_sample == sc->stts_data[stts_index].count) {
                    stts_sample = 0;
                    stts_index++;
                }
            }
        }
2125 2126
        if (st->duration > 0)
            st->codec->bit_rate = stream_size*8*sc->time_scale/st->duration;
2127
    } else {
2128
        unsigned chunk_samples, total = 0;
2129

2130 2131 2132
        // compute total chunk count
        for (i = 0; i < sc->stsc_count; i++) {
            unsigned count, chunk_count;
2133

2134
            chunk_samples = sc->stsc_data[i].count;
2135 2136
            if (i != sc->stsc_count - 1 &&
                sc->samples_per_frame && chunk_samples % sc->samples_per_frame) {
2137 2138 2139 2140
                av_log(mov->fc, AV_LOG_ERROR, "error unaligned chunk\n");
                return;
            }

2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156
            if (sc->samples_per_frame >= 160) { // gsm
                count = chunk_samples / sc->samples_per_frame;
            } else if (sc->samples_per_frame > 1) {
                unsigned samples = (1024/sc->samples_per_frame)*sc->samples_per_frame;
                count = (chunk_samples+samples-1) / samples;
            } else {
                count = (chunk_samples+1023) / 1024;
            }

            if (i < sc->stsc_count - 1)
                chunk_count = sc->stsc_data[i+1].first - sc->stsc_data[i].first;
            else
                chunk_count = sc->chunk_count - (sc->stsc_data[i].first - 1);
            total += chunk_count * count;
        }

L
Luca Barbato 已提交
2157
        av_dlog(mov->fc, "chunk count %d\n", total);
2158
        if (total >= UINT_MAX / sizeof(*st->index_entries) - st->nb_index_entries)
2159
            return;
2160 2161 2162 2163
        if (av_reallocp_array(&st->index_entries,
                              st->nb_index_entries + total,
                              sizeof(*st->index_entries)) < 0) {
            st->nb_index_entries = 0;
2164
            return;
2165
        }
2166
        st->index_entries_allocated_size = (st->nb_index_entries + total) * sizeof(*st->index_entries);
2167 2168 2169 2170 2171 2172 2173 2174 2175

        // populate index
        for (i = 0; i < sc->chunk_count; i++) {
            current_offset = sc->chunk_offsets[i];
            if (stsc_index + 1 < sc->stsc_count &&
                i + 1 == sc->stsc_data[stsc_index + 1].first)
                stsc_index++;
            chunk_samples = sc->stsc_data[stsc_index].count;

2176
            while (chunk_samples > 0) {
2177
                AVIndexEntry *e;
2178 2179 2180 2181 2182 2183 2184 2185 2186 2187
                unsigned size, samples;

                if (sc->samples_per_frame >= 160) { // gsm
                    samples = sc->samples_per_frame;
                    size = sc->bytes_per_frame;
                } else {
                    if (sc->samples_per_frame > 1) {
                        samples = FFMIN((1024 / sc->samples_per_frame)*
                                        sc->samples_per_frame, chunk_samples);
                        size = (samples / sc->samples_per_frame) * sc->bytes_per_frame;
2188
                    } else {
2189 2190
                        samples = FFMIN(1024, chunk_samples);
                        size = samples * sc->sample_size;
2191 2192
                    }
                }
2193

2194 2195 2196 2197 2198 2199 2200 2201 2202 2203
                if (st->nb_index_entries >= total) {
                    av_log(mov->fc, AV_LOG_ERROR, "wrong chunk count %d\n", total);
                    return;
                }
                e = &st->index_entries[st->nb_index_entries++];
                e->pos = current_offset;
                e->timestamp = current_dts;
                e->size = size;
                e->min_distance = 0;
                e->flags = AVINDEX_KEYFRAME;
L
Luca Barbato 已提交
2204
                av_dlog(mov->fc, "AVIndex stream %d, chunk %d, offset %"PRIx64", dts %"PRId64", "
2205
                        "size %d, duration %d\n", st->index, i, current_offset, current_dts,
2206 2207 2208
                        size, samples);

                current_offset += size;
2209
                current_dts += samples;
2210
                chunk_samples -= samples;
2211 2212 2213 2214
            }
        }
    }
}
2215

2216 2217
static int mov_open_dref(AVIOContext **pb, char *src, MOVDref *ref,
                         AVIOInterruptCB *int_cb)
2218
{
2219 2220
    /* try relative path, we do not try the absolute because it can leak information about our
       system to an attacker */
2221 2222 2223 2224 2225 2226 2227 2228 2229 2230 2231 2232 2233 2234 2235 2236 2237 2238 2239 2240 2241 2242
    if (ref->nlvl_to > 0 && ref->nlvl_from > 0) {
        char filename[1024];
        char *src_path;
        int i, l;

        /* find a source dir */
        src_path = strrchr(src, '/');
        if (src_path)
            src_path++;
        else
            src_path = src;

        /* find a next level down to target */
        for (i = 0, l = strlen(ref->path) - 1; l >= 0; l--)
            if (ref->path[l] == '/') {
                if (i == ref->nlvl_to - 1)
                    break;
                else
                    i++;
            }

        /* compose filename if next level down to target was found */
2243
        if (i == ref->nlvl_to - 1 && src_path - src  < sizeof(filename)) {
2244 2245 2246 2247 2248 2249 2250 2251
            memcpy(filename, src, src_path - src);
            filename[src_path - src] = 0;

            for (i = 1; i < ref->nlvl_from; i++)
                av_strlcat(filename, "../", 1024);

            av_strlcat(filename, ref->path + l + 1, 1024);

2252
            if (!avio_open2(pb, filename, AVIO_FLAG_READ, int_cb, NULL))
2253 2254 2255 2256 2257
                return 0;
        }
    }

    return AVERROR(ENOENT);
M
Mans Rullgard 已提交
2258
}
2259

2260
static int mov_read_trak(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2261 2262 2263
{
    AVStream *st;
    MOVStreamContext *sc;
2264
    int ret;
2265

2266
    st = avformat_new_stream(c->fc, NULL);
B
Baptiste Coudurier 已提交
2267
    if (!st) return AVERROR(ENOMEM);
2268
    st->id = c->fc->nb_streams;
B
Baptiste Coudurier 已提交
2269
    sc = av_mallocz(sizeof(MOVStreamContext));
2270
    if (!sc) return AVERROR(ENOMEM);
2271 2272

    st->priv_data = sc;
2273
    st->codec->codec_type = AVMEDIA_TYPE_DATA;
2274
    sc->ffindex = st->index;
2275

2276 2277 2278 2279
    if ((ret = mov_read_default(c, pb, atom)) < 0)
        return ret;

    /* sanity checks */
2280 2281
    if (sc->chunk_count && (!sc->stts_count || !sc->stsc_count ||
                            (!sc->sample_size && !sc->sample_count))) {
2282 2283
        av_log(c->fc, AV_LOG_ERROR, "stream %d, missing mandatory atoms, broken header\n",
               st->index);
2284 2285
        return 0;
    }
2286

2287
    if (sc->time_scale <= 0) {
2288
        av_log(c->fc, AV_LOG_WARNING, "stream %d, timescale not set\n", st->index);
2289
        sc->time_scale = c->time_scale;
2290
        if (sc->time_scale <= 0)
2291 2292
            sc->time_scale = 1;
    }
2293

2294
    avpriv_set_pts_info(st, 64, 1, sc->time_scale);
2295 2296 2297 2298

    mov_build_index(c, st);

    if (sc->dref_id-1 < sc->drefs_count && sc->drefs[sc->dref_id-1].path) {
2299
        MOVDref *dref = &sc->drefs[sc->dref_id - 1];
2300
        if (mov_open_dref(&sc->pb, c->fc->filename, dref, &c->fc->interrupt_callback) < 0)
2301 2302 2303 2304 2305
            av_log(c->fc, AV_LOG_ERROR,
                   "stream %d, error opening alias: path='%s', dir='%s', "
                   "filename='%s', volume='%s', nlvl_from=%d, nlvl_to=%d\n",
                   st->index, dref->path, dref->dir, dref->filename,
                   dref->volume, dref->nlvl_from, dref->nlvl_to);
2306 2307 2308
    } else
        sc->pb = c->fc->pb;

2309
    if (st->codec->codec_type == AVMEDIA_TYPE_VIDEO) {
2310 2311 2312 2313
        if (!st->sample_aspect_ratio.num &&
            (st->codec->width != sc->width || st->codec->height != sc->height)) {
            st->sample_aspect_ratio = av_d2q(((double)st->codec->height * sc->width) /
                                             ((double)st->codec->width * sc->height), INT_MAX);
2314
        }
2315 2316
    }

2317 2318 2319 2320 2321 2322 2323 2324
    // done for ai5q, ai52, ai55, ai1q, ai12 and ai15.
    if (!st->codec->extradata_size && st->codec->codec_id == AV_CODEC_ID_H264 &&
        TAG_IS_AVCI(st->codec->codec_tag)) {
        ret = ff_generate_avci_extradata(st);
        if (ret < 0)
            return ret;
    }

2325
    switch (st->codec->codec_id) {
2326
#if CONFIG_H261_DECODER
2327
    case AV_CODEC_ID_H261:
2328
#endif
2329
#if CONFIG_H263_DECODER
2330
    case AV_CODEC_ID_H263:
2331
#endif
2332
#if CONFIG_MPEG4_DECODER
2333
    case AV_CODEC_ID_MPEG4:
2334
#endif
2335
        st->codec->width = 0; /* let decoder init width/height */
2336 2337 2338
        st->codec->height= 0;
        break;
    }
B
Baptiste Coudurier 已提交
2339 2340 2341

    /* Do not need those anymore. */
    av_freep(&sc->chunk_offsets);
2342
    av_freep(&sc->stsc_data);
B
Baptiste Coudurier 已提交
2343 2344 2345
    av_freep(&sc->sample_sizes);
    av_freep(&sc->keyframes);
    av_freep(&sc->stts_data);
2346
    av_freep(&sc->stps_data);
2347
    av_freep(&sc->rap_group);
B
Baptiste Coudurier 已提交
2348

2349
    return 0;
2350 2351
}

2352
static int mov_read_ilst(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2353 2354 2355 2356 2357 2358 2359 2360
{
    int ret;
    c->itunes_metadata = 1;
    ret = mov_read_default(c, pb, atom);
    c->itunes_metadata = 0;
    return ret;
}

2361 2362 2363 2364 2365 2366 2367 2368 2369 2370 2371 2372 2373 2374 2375 2376 2377 2378 2379 2380 2381 2382 2383 2384 2385 2386 2387 2388 2389 2390 2391 2392 2393 2394 2395 2396 2397 2398 2399 2400 2401 2402 2403 2404 2405 2406 2407 2408 2409 2410 2411 2412 2413 2414 2415 2416 2417 2418 2419 2420 2421 2422 2423 2424 2425 2426 2427 2428 2429 2430 2431 2432 2433 2434 2435 2436 2437 2438 2439 2440 2441 2442
static int mov_read_replaygain(MOVContext *c, AVIOContext *pb, int size)
{
    int64_t end = avio_tell(pb) + size;
    uint8_t *key = NULL, *val = NULL;
    int i;

    for (i = 0; i < 2; i++) {
        uint8_t **p;
        uint32_t len, tag;

        if (end - avio_tell(pb) <= 12)
            break;

        len = avio_rb32(pb);
        tag = avio_rl32(pb);
        avio_skip(pb, 4); // flags

        if (len < 12 || len - 12 > end - avio_tell(pb))
            break;
        len -= 12;

        if (tag == MKTAG('n', 'a', 'm', 'e'))
            p = &key;
        else if (tag == MKTAG('d', 'a', 't', 'a') && len > 4) {
            avio_skip(pb, 4);
            len -= 4;
            p = &val;
        } else
            break;

        *p = av_malloc(len + 1);
        if (!*p)
            break;
        avio_read(pb, *p, len);
        (*p)[len] = 0;
    }

    if (key && val) {
        av_dict_set(&c->fc->metadata, key, val,
                    AV_DICT_DONT_STRDUP_KEY | AV_DICT_DONT_STRDUP_VAL);
        key = val = NULL;
    }

    avio_seek(pb, end, SEEK_SET);
    av_freep(&key);
    av_freep(&val);
    return 0;
}

static int mov_read_custom(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int64_t end = avio_tell(pb) + atom.size;
    uint32_t tag, len;

    if (atom.size < 8)
        goto fail;

    len = avio_rb32(pb);
    tag = avio_rl32(pb);

    if (len > atom.size)
        goto fail;

    if (tag == MKTAG('m', 'e', 'a', 'n') && len > 12) {
        uint8_t domain[128];
        int domain_len;

        avio_skip(pb, 4); // flags
        len -= 12;

        domain_len = avio_get_str(pb, len, domain, sizeof(domain));
        avio_skip(pb, len - domain_len);
        if (!strcmp(domain, "org.hydrogenaudio.replaygain"))
            return mov_read_replaygain(c, pb, end - avio_tell(pb));
    }

fail:
    av_log(c->fc, AV_LOG_VERBOSE,
           "Unhandled or malformed custom metadata of size %"PRId64"\n", atom.size);
    return 0;
}

2443
static int mov_read_meta(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2444
{
2445
    while (atom.size > 8) {
2446
        uint32_t tag = avio_rl32(pb);
2447 2448
        atom.size -= 4;
        if (tag == MKTAG('h','d','l','r')) {
A
Anton Khirnov 已提交
2449
            avio_seek(pb, -8, SEEK_CUR);
2450 2451 2452 2453 2454
            atom.size += 8;
            return mov_read_default(c, pb, atom);
        }
    }
    return 0;
2455 2456
}

2457
static int mov_read_tkhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2458
{
2459 2460 2461 2462
    int i;
    int width;
    int height;
    int64_t disp_transform[2];
2463
    int display_matrix[3][3];
2464 2465 2466
    AVStream *st;
    MOVStreamContext *sc;
    int version;
2467
    int flags;
2468 2469 2470 2471 2472

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;
2473

2474
    version = avio_r8(pb);
2475 2476
    flags = avio_rb24(pb);
    st->disposition |= (flags & MOV_TKHD_FLAG_ENABLED) ? AV_DISPOSITION_DEFAULT : 0;
2477

B
Baptiste Coudurier 已提交
2478
    if (version == 1) {
2479 2480
        avio_rb64(pb);
        avio_rb64(pb);
B
Baptiste Coudurier 已提交
2481
    } else {
2482 2483
        avio_rb32(pb); /* creation time */
        avio_rb32(pb); /* modification time */
B
Baptiste Coudurier 已提交
2484
    }
2485 2486
    st->id = (int)avio_rb32(pb); /* track id (NOT 0 !)*/
    avio_rb32(pb); /* reserved */
2487

2488
    /* highlevel (considering edits) duration in movie timebase */
2489 2490 2491
    (version == 1) ? avio_rb64(pb) : avio_rb32(pb);
    avio_rb32(pb); /* reserved */
    avio_rb32(pb); /* reserved */
2492

2493 2494 2495 2496
    avio_rb16(pb); /* layer */
    avio_rb16(pb); /* alternate group */
    avio_rb16(pb); /* volume */
    avio_rb16(pb); /* reserved */
2497

2498 2499
    //read in the display matrix (outlined in ISO 14496-12, Section 6.2.2)
    // they're kept in fixed point format through all calculations
2500 2501
    // save u,v,z to store the whole matrix in the AV_PKT_DATA_DISPLAYMATRIX
    // side data, but the scale factor is not needed to calculate aspect ratio
2502
    for (i = 0; i < 3; i++) {
2503 2504
        display_matrix[i][0] = avio_rb32(pb);   // 16.16 fixed point
        display_matrix[i][1] = avio_rb32(pb);   // 16.16 fixed point
2505
        display_matrix[i][2] = avio_rb32(pb);   //  2.30 fixed point
2506
    }
2507

2508 2509
    width = avio_rb32(pb);       // 16.16 fixed point track width
    height = avio_rb32(pb);      // 16.16 fixed point track height
2510 2511
    sc->width = width >> 16;
    sc->height = height >> 16;
2512

2513 2514 2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526 2527 2528 2529 2530 2531
    // save the matrix when it is not the default identity
    if (display_matrix[0][0] != (1 << 16) ||
        display_matrix[1][1] != (1 << 16) ||
        display_matrix[2][2] != (1 << 30) ||
        display_matrix[0][1] || display_matrix[0][2] ||
        display_matrix[1][0] || display_matrix[1][2] ||
        display_matrix[2][0] || display_matrix[2][1]) {
        int i, j;

        av_freep(&sc->display_matrix);
        sc->display_matrix = av_malloc(sizeof(int32_t) * 9);
        if (!sc->display_matrix)
            return AVERROR(ENOMEM);

        for (i = 0; i < 3; i++)
            for (j = 0; j < 3; j++)
                sc->display_matrix[i * 3 + j] = display_matrix[j][i];
    }

2532
    // transform the display width/height according to the matrix
2533
    // skip this if the display matrix is the default identity matrix
2534
    // or if it is rotating the picture, ex iPhone 3GS
2535 2536
    // to keep the same scale, use [width height 1<<16]
    if (width && height &&
2537 2538 2539 2540 2541
        ((display_matrix[0][0] != 65536  ||
          display_matrix[1][1] != 65536) &&
         !display_matrix[0][1] &&
         !display_matrix[1][0] &&
         !display_matrix[2][0] && !display_matrix[2][1])) {
2542 2543 2544 2545 2546 2547 2548
        for (i = 0; i < 2; i++)
            disp_transform[i] =
                (int64_t)  width  * display_matrix[0][i] +
                (int64_t)  height * display_matrix[1][i] +
                ((int64_t) display_matrix[2][i] << 16);

        //sample aspect ratio is new width/height divided by old width/height
2549
        st->sample_aspect_ratio = av_d2q(
2550 2551 2552
            ((double) disp_transform[0] * height) /
            ((double) disp_transform[1] * width), INT_MAX);
    }
2553 2554 2555
    return 0;
}

2556
static int mov_read_tfhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
2557 2558 2559 2560 2561
{
    MOVFragment *frag = &c->fragment;
    MOVTrackExt *trex = NULL;
    int flags, track_id, i;

2562 2563
    avio_r8(pb); /* version */
    flags = avio_rb24(pb);
B
Baptiste Coudurier 已提交
2564

2565
    track_id = avio_rb32(pb);
2566
    if (!track_id)
2567
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
2568 2569 2570 2571 2572 2573 2574 2575
    frag->track_id = track_id;
    for (i = 0; i < c->trex_count; i++)
        if (c->trex_data[i].track_id == frag->track_id) {
            trex = &c->trex_data[i];
            break;
        }
    if (!trex) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding trex\n");
2576
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
2577 2578
    }

2579
    frag->base_data_offset = flags & MOV_TFHD_BASE_DATA_OFFSET ?
2580 2581
                             avio_rb64(pb) : flags & MOV_TFHD_DEFAULT_BASE_IS_MOOF ?
                             frag->moof_offset : frag->implicit_offset;
2582 2583 2584 2585 2586 2587 2588 2589
    frag->stsd_id  = flags & MOV_TFHD_STSD_ID ? avio_rb32(pb) : trex->stsd_id;

    frag->duration = flags & MOV_TFHD_DEFAULT_DURATION ?
                     avio_rb32(pb) : trex->duration;
    frag->size     = flags & MOV_TFHD_DEFAULT_SIZE ?
                     avio_rb32(pb) : trex->size;
    frag->flags    = flags & MOV_TFHD_DEFAULT_FLAGS ?
                     avio_rb32(pb) : trex->flags;
L
Luca Barbato 已提交
2590
    av_dlog(c->fc, "frag flags 0x%x\n", frag->flags);
B
Baptiste Coudurier 已提交
2591 2592 2593
    return 0;
}

2594
static int mov_read_chap(MOVContext *c, AVIOContext *pb, MOVAtom atom)
D
David Conrad 已提交
2595
{
2596
    c->chapter_track = avio_rb32(pb);
D
David Conrad 已提交
2597 2598 2599
    return 0;
}

2600
static int mov_read_trex(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
2601 2602
{
    MOVTrackExt *trex;
2603
    int err;
B
Baptiste Coudurier 已提交
2604 2605

    if ((uint64_t)c->trex_count+1 >= UINT_MAX / sizeof(*c->trex_data))
2606
        return AVERROR_INVALIDDATA;
2607 2608 2609 2610 2611
    if ((err = av_reallocp_array(&c->trex_data, c->trex_count + 1,
                                 sizeof(*c->trex_data))) < 0) {
        c->trex_count = 0;
        return err;
    }
B
Baptiste Coudurier 已提交
2612
    trex = &c->trex_data[c->trex_count++];
2613 2614 2615 2616 2617 2618 2619
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    trex->track_id = avio_rb32(pb);
    trex->stsd_id  = avio_rb32(pb);
    trex->duration = avio_rb32(pb);
    trex->size     = avio_rb32(pb);
    trex->flags    = avio_rb32(pb);
B
Baptiste Coudurier 已提交
2620 2621 2622
    return 0;
}

M
Martin Storsjö 已提交
2623 2624 2625 2626 2627 2628 2629 2630 2631 2632 2633 2634 2635 2636 2637 2638 2639 2640 2641 2642 2643 2644 2645 2646 2647 2648 2649 2650 2651 2652
static int mov_read_tfdt(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    MOVFragment *frag = &c->fragment;
    AVStream *st = NULL;
    MOVStreamContext *sc;
    int version, i;

    for (i = 0; i < c->fc->nb_streams; i++) {
        if (c->fc->streams[i]->id == frag->track_id) {
            st = c->fc->streams[i];
            break;
        }
    }
    if (!st) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding track id %d\n", frag->track_id);
        return AVERROR_INVALIDDATA;
    }
    sc = st->priv_data;
    if (sc->pseudo_stream_id + 1 != frag->stsd_id)
        return 0;
    version = avio_r8(pb);
    avio_rb24(pb); /* flags */
    if (version) {
        sc->track_end = avio_rb64(pb);
    } else {
        sc->track_end = avio_rb32(pb);
    }
    return 0;
}

2653
static int mov_read_trun(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
2654 2655
{
    MOVFragment *frag = &c->fragment;
2656
    AVStream *st = NULL;
2657
    MOVStreamContext *sc;
2658
    MOVStts *ctts_data;
B
Baptiste Coudurier 已提交
2659 2660 2661 2662
    uint64_t offset;
    int64_t dts;
    int data_offset = 0;
    unsigned entries, first_sample_flags = frag->flags;
2663
    int flags, distance, i, found_keyframe = 0, err;
B
Baptiste Coudurier 已提交
2664

2665 2666 2667 2668 2669 2670 2671 2672
    for (i = 0; i < c->fc->nb_streams; i++) {
        if (c->fc->streams[i]->id == frag->track_id) {
            st = c->fc->streams[i];
            break;
        }
    }
    if (!st) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding track id %d\n", frag->track_id);
2673
        return AVERROR_INVALIDDATA;
2674
    }
2675
    sc = st->priv_data;
B
Baptiste Coudurier 已提交
2676 2677
    if (sc->pseudo_stream_id+1 != frag->stsd_id)
        return 0;
2678 2679 2680
    avio_r8(pb); /* version */
    flags = avio_rb24(pb);
    entries = avio_rb32(pb);
L
Luca Barbato 已提交
2681
    av_dlog(c->fc, "flags 0x%x entries %d\n", flags, entries);
2682 2683 2684 2685 2686 2687 2688 2689 2690

    /* Always assume the presence of composition time offsets.
     * Without this assumption, for instance, we cannot deal with a track in fragmented movies that meet the following.
     *  1) in the initial movie, there are no samples.
     *  2) in the first movie fragment, there is only one sample without composition time offset.
     *  3) in the subsequent movie fragments, there are samples with composition time offset. */
    if (!sc->ctts_count && sc->sample_count)
    {
        /* Complement ctts table if moov atom doesn't have ctts atom. */
2691
        ctts_data = av_realloc(NULL, sizeof(*sc->ctts_data));
2692
        if (!ctts_data)
B
Baptiste Coudurier 已提交
2693
            return AVERROR(ENOMEM);
2694
        sc->ctts_data = ctts_data;
2695 2696 2697
        sc->ctts_data[sc->ctts_count].count = sc->sample_count;
        sc->ctts_data[sc->ctts_count].duration = 0;
        sc->ctts_count++;
B
Baptiste Coudurier 已提交
2698
    }
2699
    if ((uint64_t)entries+sc->ctts_count >= UINT_MAX/sizeof(*sc->ctts_data))
2700
        return AVERROR_INVALIDDATA;
2701 2702 2703 2704 2705
    if ((err = av_reallocp_array(&sc->ctts_data, entries + sc->ctts_count,
                                 sizeof(*sc->ctts_data))) < 0) {
        sc->ctts_count = 0;
        return err;
    }
2706 2707
    if (flags & MOV_TRUN_DATA_OFFSET)        data_offset        = avio_rb32(pb);
    if (flags & MOV_TRUN_FIRST_SAMPLE_FLAGS) first_sample_flags = avio_rb32(pb);
2708
    dts    = sc->track_end - sc->time_offset;
B
Baptiste Coudurier 已提交
2709 2710
    offset = frag->base_data_offset + data_offset;
    distance = 0;
L
Luca Barbato 已提交
2711
    av_dlog(c->fc, "first sample flags 0x%x\n", first_sample_flags);
2712
    for (i = 0; i < entries && !pb->eof_reached; i++) {
B
Baptiste Coudurier 已提交
2713 2714 2715
        unsigned sample_size = frag->size;
        int sample_flags = i ? frag->flags : first_sample_flags;
        unsigned sample_duration = frag->duration;
2716
        int keyframe = 0;
B
Baptiste Coudurier 已提交
2717

2718 2719 2720
        if (flags & MOV_TRUN_SAMPLE_DURATION) sample_duration = avio_rb32(pb);
        if (flags & MOV_TRUN_SAMPLE_SIZE)     sample_size     = avio_rb32(pb);
        if (flags & MOV_TRUN_SAMPLE_FLAGS)    sample_flags    = avio_rb32(pb);
2721
        sc->ctts_data[sc->ctts_count].count = 1;
2722 2723
        sc->ctts_data[sc->ctts_count].duration = (flags & MOV_TRUN_SAMPLE_CTS) ?
                                                  avio_rb32(pb) : 0;
2724
        sc->ctts_count++;
2725 2726 2727 2728 2729 2730 2731
        if (st->codec->codec_type == AVMEDIA_TYPE_AUDIO)
            keyframe = 1;
        else if (!found_keyframe)
            keyframe = found_keyframe =
                !(sample_flags & (MOV_FRAG_SAMPLE_FLAG_IS_NON_SYNC |
                                  MOV_FRAG_SAMPLE_FLAG_DEPENDS_YES));
        if (keyframe)
B
Baptiste Coudurier 已提交
2732 2733 2734
            distance = 0;
        av_add_index_entry(st, offset, dts, sample_size, distance,
                           keyframe ? AVINDEX_KEYFRAME : 0);
L
Luca Barbato 已提交
2735
        av_dlog(c->fc, "AVIndex stream %d, sample %d, offset %"PRIx64", dts %"PRId64", "
B
Baptiste Coudurier 已提交
2736 2737 2738
                "size %d, distance %d, keyframe %d\n", st->index, sc->sample_count+i,
                offset, dts, sample_size, distance, keyframe);
        distance++;
2739
        dts += sample_duration;
B
Baptiste Coudurier 已提交
2740
        offset += sample_size;
2741
        sc->data_size += sample_size;
B
Baptiste Coudurier 已提交
2742
    }
2743 2744 2745 2746

    if (pb->eof_reached)
        return AVERROR_EOF;

2747
    frag->implicit_offset = offset;
2748
    st->duration = sc->track_end = dts + sc->time_offset;
B
Baptiste Coudurier 已提交
2749 2750 2751
    return 0;
}

2752 2753 2754
/* this atom should be null (from specs), but some buggy files put the 'moov' atom inside it... */
/* like the files created with Adobe Premiere 5.0, for samples see */
/* http://graphics.tudelft.nl/~wouter/publications/soundtests/ */
2755
static int mov_read_wide(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2756 2757 2758 2759 2760
{
    int err;

    if (atom.size < 8)
        return 0; /* continue */
2761
    if (avio_rb32(pb) != 0) { /* 0 sized mdat atom... use the 'wide' atom size */
2762
        avio_skip(pb, atom.size - 4);
2763 2764
        return 0;
    }
2765
    atom.type = avio_rl32(pb);
2766
    atom.size -= 8;
2767
    if (atom.type != MKTAG('m','d','a','t')) {
2768
        avio_skip(pb, atom.size);
2769 2770 2771 2772 2773 2774
        return 0;
    }
    err = mov_read_mdat(c, pb, atom);
    return err;
}

2775
static int mov_read_cmov(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2776
{
2777
#if CONFIG_ZLIB
2778
    AVIOContext ctx;
2779 2780
    uint8_t *cmov_data;
    uint8_t *moov_data; /* uncompressed data */
2781
    long cmov_len, moov_len;
2782
    int ret = -1;
2783

2784 2785
    avio_rb32(pb); /* dcom atom */
    if (avio_rl32(pb) != MKTAG('d','c','o','m'))
2786
        return AVERROR_INVALIDDATA;
2787
    if (avio_rl32(pb) != MKTAG('z','l','i','b')) {
B
Benoit Fouet 已提交
2788
        av_log(c->fc, AV_LOG_ERROR, "unknown compression for cmov atom !");
2789
        return AVERROR_INVALIDDATA;
2790
    }
2791 2792
    avio_rb32(pb); /* cmvd atom */
    if (avio_rl32(pb) != MKTAG('c','m','v','d'))
2793
        return AVERROR_INVALIDDATA;
2794
    moov_len = avio_rb32(pb); /* uncompressed size */
2795
    cmov_len = atom.size - 6 * 4;
2796

B
Baptiste Coudurier 已提交
2797
    cmov_data = av_malloc(cmov_len);
2798
    if (!cmov_data)
2799
        return AVERROR(ENOMEM);
B
Baptiste Coudurier 已提交
2800
    moov_data = av_malloc(moov_len);
2801 2802
    if (!moov_data) {
        av_free(cmov_data);
2803
        return AVERROR(ENOMEM);
2804
    }
2805
    avio_read(pb, cmov_data, cmov_len);
2806
    if (uncompress (moov_data, (uLongf *) &moov_len, (const Bytef *)cmov_data, cmov_len) != Z_OK)
2807
        goto free_and_return;
2808
    if (ffio_init_context(&ctx, moov_data, moov_len, 0, NULL, NULL, NULL, NULL) != 0)
2809
        goto free_and_return;
2810
    atom.type = MKTAG('m','o','o','v');
2811 2812
    atom.size = moov_len;
    ret = mov_read_default(c, &ctx, atom);
2813
free_and_return:
2814 2815 2816
    av_free(moov_data);
    av_free(cmov_data);
    return ret;
2817 2818
#else
    av_log(c->fc, AV_LOG_ERROR, "this file requires zlib support compiled in\n");
2819
    return AVERROR(ENOSYS);
2820
#endif
2821
}
2822

G
Gael Chardon 已提交
2823
/* edit list atom */
2824
static int mov_read_elst(MOVContext *c, AVIOContext *pb, MOVAtom atom)
G
Gael Chardon 已提交
2825
{
2826
    MOVStreamContext *sc;
2827
    int i, edit_count, version;
B
Baptiste Coudurier 已提交
2828

2829 2830 2831 2832
    if (c->fc->nb_streams < 1)
        return 0;
    sc = c->fc->streams[c->fc->nb_streams-1]->priv_data;

2833
    version = avio_r8(pb); /* version */
2834 2835
    avio_rb24(pb); /* flags */
    edit_count = avio_rb32(pb); /* entries */
B
Baptiste Coudurier 已提交
2836

2837
    if ((uint64_t)edit_count*12+8 > atom.size)
2838
        return AVERROR_INVALIDDATA;
2839

2840
    for (i=0; i<edit_count; i++){
2841 2842 2843 2844 2845 2846 2847
        int64_t time;
        int64_t duration;
        if (version == 1) {
            duration = avio_rb64(pb);
            time     = avio_rb64(pb);
        } else {
            duration = avio_rb32(pb); /* segment duration */
Y
Yusuke Nakamura 已提交
2848
            time     = (int32_t)avio_rb32(pb); /* media time */
2849
        }
2850
        avio_rb32(pb); /* Media rate */
2851 2852
        if (i == 0 && time >= -1) {
            sc->time_offset = time != -1 ? time : -duration;
2853
        }
B
Baptiste Coudurier 已提交
2854
    }
2855

2856
    if (edit_count > 1)
2857 2858 2859
        av_log(c->fc, AV_LOG_WARNING, "multiple edit list entries, "
               "a/v desync might occur, patch welcome\n");

L
Luca Barbato 已提交
2860
    av_dlog(c->fc, "track[%i].edit_count = %i\n", c->fc->nb_streams-1, edit_count);
B
Baptiste Coudurier 已提交
2861
    return 0;
G
Gael Chardon 已提交
2862 2863
}

2864
static const MOVParseTableEntry mov_default_parse_table[] = {
2865
{ MKTAG('a','v','s','s'), mov_read_extradata },
D
David Conrad 已提交
2866
{ MKTAG('c','h','p','l'), mov_read_chpl },
2867
{ MKTAG('c','o','6','4'), mov_read_stco },
2868
{ MKTAG('c','o','l','r'), mov_read_colr },
2869 2870 2871 2872 2873 2874
{ MKTAG('c','t','t','s'), mov_read_ctts }, /* composition time to sample */
{ MKTAG('d','i','n','f'), mov_read_default },
{ MKTAG('d','r','e','f'), mov_read_dref },
{ MKTAG('e','d','t','s'), mov_read_default },
{ MKTAG('e','l','s','t'), mov_read_elst },
{ MKTAG('e','n','d','a'), mov_read_enda },
2875
{ MKTAG('f','i','e','l'), mov_read_fiel },
2876 2877 2878
{ MKTAG('f','t','y','p'), mov_read_ftyp },
{ MKTAG('g','l','b','l'), mov_read_glbl },
{ MKTAG('h','d','l','r'), mov_read_hdlr },
2879
{ MKTAG('i','l','s','t'), mov_read_ilst },
2880 2881 2882 2883
{ MKTAG('j','p','2','h'), mov_read_extradata },
{ MKTAG('m','d','a','t'), mov_read_mdat },
{ MKTAG('m','d','h','d'), mov_read_mdhd },
{ MKTAG('m','d','i','a'), mov_read_default },
2884
{ MKTAG('m','e','t','a'), mov_read_meta },
2885 2886 2887 2888 2889 2890 2891 2892
{ MKTAG('m','i','n','f'), mov_read_default },
{ MKTAG('m','o','o','f'), mov_read_moof },
{ MKTAG('m','o','o','v'), mov_read_moov },
{ MKTAG('m','v','e','x'), mov_read_default },
{ MKTAG('m','v','h','d'), mov_read_mvhd },
{ MKTAG('S','M','I',' '), mov_read_smi }, /* Sorenson extension ??? */
{ MKTAG('a','l','a','c'), mov_read_extradata }, /* alac specific atom */
{ MKTAG('a','v','c','C'), mov_read_glbl },
2893
{ MKTAG('p','a','s','p'), mov_read_pasp },
2894 2895
{ MKTAG('s','t','b','l'), mov_read_default },
{ MKTAG('s','t','c','o'), mov_read_stco },
2896
{ MKTAG('s','t','p','s'), mov_read_stps },
M
Martin Storsjö 已提交
2897
{ MKTAG('s','t','r','f'), mov_read_strf },
2898 2899 2900 2901 2902
{ MKTAG('s','t','s','c'), mov_read_stsc },
{ MKTAG('s','t','s','d'), mov_read_stsd }, /* sample description */
{ MKTAG('s','t','s','s'), mov_read_stss }, /* sync sample */
{ MKTAG('s','t','s','z'), mov_read_stsz }, /* sample size */
{ MKTAG('s','t','t','s'), mov_read_stts },
2903
{ MKTAG('s','t','z','2'), mov_read_stsz }, /* compact sample size */
2904
{ MKTAG('t','k','h','d'), mov_read_tkhd }, /* track header */
M
Martin Storsjö 已提交
2905
{ MKTAG('t','f','d','t'), mov_read_tfdt },
2906 2907 2908
{ MKTAG('t','f','h','d'), mov_read_tfhd }, /* track fragment header */
{ MKTAG('t','r','a','k'), mov_read_trak },
{ MKTAG('t','r','a','f'), mov_read_default },
D
David Conrad 已提交
2909 2910
{ MKTAG('t','r','e','f'), mov_read_default },
{ MKTAG('c','h','a','p'), mov_read_chap },
2911 2912
{ MKTAG('t','r','e','x'), mov_read_trex },
{ MKTAG('t','r','u','n'), mov_read_trun },
B
Baptiste Coudurier 已提交
2913
{ MKTAG('u','d','t','a'), mov_read_default },
2914 2915
{ MKTAG('w','a','v','e'), mov_read_wave },
{ MKTAG('e','s','d','s'), mov_read_esds },
2916
{ MKTAG('d','a','c','3'), mov_read_dac3 }, /* AC-3 info */
2917
{ MKTAG('d','e','c','3'), mov_read_dec3 }, /* EAC-3 info */
2918
{ MKTAG('w','i','d','e'), mov_read_wide }, /* place holder */
2919
{ MKTAG('w','f','e','x'), mov_read_wfex },
2920
{ MKTAG('c','m','o','v'), mov_read_cmov },
2921
{ MKTAG('c','h','a','n'), mov_read_chan }, /* channel layout */
M
Martin Storsjö 已提交
2922
{ MKTAG('d','v','c','1'), mov_read_dvc1 },
2923
{ MKTAG('s','b','g','p'), mov_read_sbgp },
Y
Yusuke Nakamura 已提交
2924
{ MKTAG('h','v','c','C'), mov_read_glbl },
2925
{ MKTAG('-','-','-','-'), mov_read_custom },
B
Baptiste Coudurier 已提交
2926
{ 0, NULL }
2927 2928
};

2929 2930 2931 2932 2933 2934 2935 2936 2937 2938 2939 2940 2941 2942 2943 2944 2945 2946 2947 2948 2949 2950 2951 2952 2953 2954 2955 2956 2957 2958 2959 2960 2961 2962 2963 2964 2965 2966 2967 2968 2969 2970 2971 2972 2973 2974 2975 2976 2977 2978 2979 2980 2981 2982 2983 2984 2985 2986 2987 2988 2989 2990
static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int64_t total_size = 0;
    MOVAtom a;
    int i;

    if (atom.size < 0)
        atom.size = INT64_MAX;
    while (total_size + 8 < atom.size && !pb->eof_reached) {
        int (*parse)(MOVContext*, AVIOContext*, MOVAtom) = NULL;
        a.size = atom.size;
        a.type=0;
        if (atom.size >= 8) {
            a.size = avio_rb32(pb);
            a.type = avio_rl32(pb);
        }
        av_dlog(c->fc, "type: %08x '%.4s' parent:'%.4s' sz: %"PRId64" %"PRId64" %"PRId64"\n",
                a.type, (char*)&a.type, (char*)&atom.type, a.size, total_size, atom.size);
        total_size += 8;
        if (a.size == 1) { /* 64 bit extended size */
            a.size = avio_rb64(pb) - 8;
            total_size += 8;
        }
        if (a.size == 0) {
            a.size = atom.size - total_size;
            if (a.size <= 8)
                break;
        }
        a.size -= 8;
        if (a.size < 0)
            break;
        a.size = FFMIN(a.size, atom.size - total_size);

        for (i = 0; mov_default_parse_table[i].type; i++)
            if (mov_default_parse_table[i].type == a.type) {
                parse = mov_default_parse_table[i].parse;
                break;
            }

        // container is user data
        if (!parse && (atom.type == MKTAG('u','d','t','a') ||
                       atom.type == MKTAG('i','l','s','t')))
            parse = mov_read_udta_string;

        if (!parse) { /* skip leaf atoms data */
            avio_skip(pb, a.size);
        } else {
            int64_t start_pos = avio_tell(pb);
            int64_t left;
            int err = parse(c, pb, a);
            if (err < 0)
                return err;
            if (c->found_moov && c->found_mdat &&
                ((!pb->seekable || c->fc->flags & AVFMT_FLAG_IGNIDX) ||
                 start_pos + a.size == avio_size(pb))) {
                if (!pb->seekable || c->fc->flags & AVFMT_FLAG_IGNIDX)
                    c->next_root_atom = start_pos + a.size;
                return 0;
            }
            left = a.size - avio_tell(pb) + start_pos;
            if (left > 0) /* skip garbage at atom end */
                avio_skip(pb, left);
2991 2992 2993 2994 2995 2996
            else if (left < 0) {
                av_log(c->fc, AV_LOG_WARNING,
                       "overread end of atom '%.4s' by %"PRId64" bytes\n",
                       (char*)&a.type, -left);
                avio_seek(pb, left, SEEK_CUR);
            }
2997 2998 2999 3000 3001 3002 3003 3004 3005 3006 3007
        }

        total_size += a.size;
    }

    if (total_size < atom.size && atom.size < 0x7ffff)
        avio_skip(pb, atom.size - total_size);

    return 0;
}

F
Fabrice Bellard 已提交
3008 3009
static int mov_probe(AVProbeData *p)
{
3010 3011
    unsigned int offset;
    uint32_t tag;
3012
    int score = 0;
3013

F
Fabrice Bellard 已提交
3014
    /* check file header */
3015
    offset = 0;
3016
    for (;;) {
3017 3018
        /* ignore invalid offset */
        if ((offset + 8) > (unsigned int)p->buf_size)
3019
            return score;
3020
        tag = AV_RL32(p->buf + offset + 4);
3021
        switch(tag) {
3022
        /* check for obvious tags */
3023 3024 3025 3026 3027
        case MKTAG('j','P',' ',' '): /* jpeg 2000 signature */
        case MKTAG('m','o','o','v'):
        case MKTAG('m','d','a','t'):
        case MKTAG('p','n','o','t'): /* detect movs with preview pics like ew.mov and april.mov */
        case MKTAG('u','d','t','a'): /* Packet Video PVAuthor adds this and a lot of more junk */
3028
        case MKTAG('f','t','y','p'):
3029
            return AVPROBE_SCORE_MAX;
3030
        /* those are more common words, so rate then a bit less */
3031 3032 3033 3034 3035
        case MKTAG('e','d','i','w'): /* xdcam files have reverted first tags */
        case MKTAG('w','i','d','e'):
        case MKTAG('f','r','e','e'):
        case MKTAG('j','u','n','k'):
        case MKTAG('p','i','c','t'):
3036
            return AVPROBE_SCORE_MAX - 5;
B
Baptiste Coudurier 已提交
3037
        case MKTAG(0x82,0x82,0x7f,0x7d):
3038 3039 3040
        case MKTAG('s','k','i','p'):
        case MKTAG('u','u','i','d'):
        case MKTAG('p','r','f','l'):
3041
            offset = AV_RB32(p->buf+offset) + offset;
3042
            /* if we only find those cause probedata is too small at least rate them */
3043
            score = AVPROBE_SCORE_EXTENSION;
3044 3045 3046
            break;
        default:
            /* unrecognized tag */
3047
            return score;
3048
        }
3049
    }
F
Fabrice Bellard 已提交
3050 3051
}

D
David Conrad 已提交
3052 3053 3054 3055 3056 3057 3058
// must be done after parsing all trak because there's no order requirement
static void mov_read_chapters(AVFormatContext *s)
{
    MOVContext *mov = s->priv_data;
    AVStream *st = NULL;
    MOVStreamContext *sc;
    int64_t cur_pos;
3059
    int i;
D
David Conrad 已提交
3060 3061 3062 3063 3064 3065 3066 3067 3068 3069 3070 3071 3072

    for (i = 0; i < s->nb_streams; i++)
        if (s->streams[i]->id == mov->chapter_track) {
            st = s->streams[i];
            break;
        }
    if (!st) {
        av_log(s, AV_LOG_ERROR, "Referenced QT chapter track not found\n");
        return;
    }

    st->discard = AVDISCARD_ALL;
    sc = st->priv_data;
3073
    cur_pos = avio_tell(sc->pb);
D
David Conrad 已提交
3074 3075 3076 3077

    for (i = 0; i < st->nb_index_entries; i++) {
        AVIndexEntry *sample = &st->index_entries[i];
        int64_t end = i+1 < st->nb_index_entries ? st->index_entries[i+1].timestamp : st->duration;
3078 3079 3080
        uint8_t *title;
        uint16_t ch;
        int len, title_len;
D
David Conrad 已提交
3081

A
Anton Khirnov 已提交
3082
        if (avio_seek(sc->pb, sample->pos, SEEK_SET) != sample->pos) {
D
David Conrad 已提交
3083 3084 3085 3086 3087
            av_log(s, AV_LOG_ERROR, "Chapter %d not found in file\n", i);
            goto finish;
        }

        // the first two bytes are the length of the title
3088
        len = avio_rb16(sc->pb);
D
David Conrad 已提交
3089 3090
        if (len > sample->size-2)
            continue;
3091 3092 3093
        title_len = 2*len + 1;
        if (!(title = av_mallocz(title_len)))
            goto finish;
D
David Conrad 已提交
3094 3095 3096 3097

        // The samples could theoretically be in any encoding if there's an encd
        // atom following, but in practice are only utf-8 or utf-16, distinguished
        // instead by the presence of a BOM
3098 3099 3100 3101 3102 3103 3104 3105 3106 3107 3108
        if (!len) {
            title[0] = 0;
        } else {
            ch = avio_rb16(sc->pb);
            if (ch == 0xfeff)
                avio_get_str16be(sc->pb, len, title, title_len);
            else if (ch == 0xfffe)
                avio_get_str16le(sc->pb, len, title, title_len);
            else {
                AV_WB16(title, ch);
                if (len == 1 || len == 2)
3109
                    title[len] = 0;
3110 3111 3112
                else
                    avio_get_str(sc->pb, len - 2, title + 2, title_len - 2);
            }
D
David Conrad 已提交
3113 3114
        }

3115
        avpriv_new_chapter(s, i, st->time_base, sample->timestamp, end, title);
3116
        av_freep(&title);
D
David Conrad 已提交
3117 3118
    }
finish:
A
Anton Khirnov 已提交
3119
    avio_seek(sc->pb, cur_pos, SEEK_SET);
D
David Conrad 已提交
3120 3121
}

3122 3123 3124 3125 3126 3127 3128 3129 3130 3131 3132 3133 3134 3135 3136 3137 3138
static int mov_read_close(AVFormatContext *s)
{
    MOVContext *mov = s->priv_data;
    int i, j;

    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;

        av_freep(&sc->ctts_data);
        for (j = 0; j < sc->drefs_count; j++) {
            av_freep(&sc->drefs[j].path);
            av_freep(&sc->drefs[j].dir);
        }
        av_freep(&sc->drefs);
        if (sc->pb && sc->pb != s->pb)
            avio_close(sc->pb);
3139 3140 3141 3142 3143 3144 3145 3146

        av_freep(&sc->chunk_offsets);
        av_freep(&sc->stsc_data);
        av_freep(&sc->sample_sizes);
        av_freep(&sc->keyframes);
        av_freep(&sc->stts_data);
        av_freep(&sc->stps_data);
        av_freep(&sc->rap_group);
3147
        av_freep(&sc->display_matrix);
3148 3149 3150
    }

    if (mov->dv_demux) {
3151 3152
        avformat_free_context(mov->dv_fctx);
        mov->dv_fctx = NULL;
3153 3154 3155 3156 3157 3158 3159
    }

    av_freep(&mov->trex_data);

    return 0;
}

3160
static int mov_read_header(AVFormatContext *s)
3161
{
3162
    MOVContext *mov = s->priv_data;
3163
    AVIOContext *pb = s->pb;
B
Baptiste Coudurier 已提交
3164
    int err;
3165
    MOVAtom atom = { AV_RL32("root") };
3166
    int i;
3167 3168

    mov->fc = s;
3169
    /* .mov and .mp4 aren't streamable anyway (only progressive download if moov is before mdat) */
3170
    if (pb->seekable)
A
Anton Khirnov 已提交
3171
        atom.size = avio_size(pb);
3172
    else
B
Baptiste Coudurier 已提交
3173
        atom.size = INT64_MAX;
3174 3175

    /* check MOV header */
B
Baptiste Coudurier 已提交
3176 3177
    if ((err = mov_read_default(mov, pb, atom)) < 0) {
        av_log(s, AV_LOG_ERROR, "error reading header: %d\n", err);
3178
        mov_read_close(s);
B
Baptiste Coudurier 已提交
3179 3180 3181 3182
        return err;
    }
    if (!mov->found_moov) {
        av_log(s, AV_LOG_ERROR, "moov atom not found\n");
3183
        mov_read_close(s);
3184
        return AVERROR_INVALIDDATA;
3185
    }
3186
    av_dlog(mov->fc, "on_parse_exit_offset=%"PRId64"\n", avio_tell(pb));
3187

3188
    if (pb->seekable && mov->chapter_track > 0)
D
David Conrad 已提交
3189 3190
        mov_read_chapters(s);

3191 3192 3193 3194 3195
    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;

        if (st->codec->codec_type == AVMEDIA_TYPE_SUBTITLE) {
V
Vittorio Giovara 已提交
3196
            if (st->codec->width <= 0 || st->codec->height <= 0) {
3197 3198 3199
                st->codec->width  = sc->width;
                st->codec->height = sc->height;
            }
3200 3201 3202 3203
            if (st->codec->codec_id == AV_CODEC_ID_DVD_SUBTITLE) {
                if ((err = mov_rewrite_dvd_sub_extradata(st)) < 0)
                    return err;
            }
3204 3205 3206
        }
    }

3207 3208 3209 3210
    if (mov->trex_data) {
        for (i = 0; i < s->nb_streams; i++) {
            AVStream *st = s->streams[i];
            MOVStreamContext *sc = st->priv_data;
3211
            if (st->duration > 0)
3212 3213 3214 3215
                st->codec->bit_rate = sc->data_size * 8 * sc->time_scale / st->duration;
        }
    }

3216 3217
    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
3218
        MOVStreamContext *sc = st->priv_data;
3219

3220 3221 3222 3223 3224 3225 3226 3227 3228 3229 3230 3231 3232 3233 3234 3235 3236 3237 3238 3239 3240 3241 3242 3243 3244 3245 3246
        switch (st->codec->codec_type) {
        case AVMEDIA_TYPE_AUDIO:
            err = ff_replaygain_export(st, s->metadata);
            if (err < 0) {
                mov_read_close(s);
                return err;
            }
            break;
        case AVMEDIA_TYPE_VIDEO:
            if (sc->display_matrix) {
                AVPacketSideData *sd, *tmp;

                tmp = av_realloc_array(st->side_data,
                                       st->nb_side_data + 1, sizeof(*tmp));
                if (!tmp)
                    return AVERROR(ENOMEM);

                st->side_data = tmp;
                st->nb_side_data++;

                sd = &st->side_data[st->nb_side_data - 1];
                sd->type = AV_PKT_DATA_DISPLAYMATRIX;
                sd->size = sizeof(int32_t) * 9;
                sd->data = (uint8_t*)sc->display_matrix;
                sc->display_matrix = NULL;
            }
            break;
3247 3248 3249
        }
    }

3250 3251 3252
    return 0;
}

3253
static AVIndexEntry *mov_find_next_sample(AVFormatContext *s, AVStream **st)
3254
{
3255
    AVIndexEntry *sample = NULL;
3256
    int64_t best_dts = INT64_MAX;
3257
    int i;
B
Baptiste Coudurier 已提交
3258
    for (i = 0; i < s->nb_streams; i++) {
3259 3260
        AVStream *avst = s->streams[i];
        MOVStreamContext *msc = avst->priv_data;
3261
        if (msc->pb && msc->current_sample < avst->nb_index_entries) {
3262
            AVIndexEntry *current_sample = &avst->index_entries[msc->current_sample];
3263
            int64_t dts = av_rescale(current_sample->timestamp, AV_TIME_BASE, msc->time_scale);
L
Luca Barbato 已提交
3264
            av_dlog(s, "stream %d, sample %d, dts %"PRId64"\n", i, msc->current_sample, dts);
3265 3266
            if (!sample || (!s->pb->seekable && current_sample->pos < sample->pos) ||
                (s->pb->seekable &&
3267
                 ((msc->pb != s->pb && dts < best_dts) || (msc->pb == s->pb &&
B
Baptiste Coudurier 已提交
3268
                 ((FFABS(best_dts - dts) <= AV_TIME_BASE && current_sample->pos < sample->pos) ||
3269
                  (FFABS(best_dts - dts) > AV_TIME_BASE && dts < best_dts)))))) {
3270 3271
                sample = current_sample;
                best_dts = dts;
3272
                *st = avst;
3273
            }
3274 3275
        }
    }
3276 3277 3278 3279 3280 3281 3282 3283 3284 3285 3286 3287
    return sample;
}

static int mov_read_packet(AVFormatContext *s, AVPacket *pkt)
{
    MOVContext *mov = s->priv_data;
    MOVStreamContext *sc;
    AVIndexEntry *sample;
    AVStream *st = NULL;
    int ret;
 retry:
    sample = mov_find_next_sample(s, &st);
3288 3289
    if (!sample) {
        mov->found_mdat = 0;
3290 3291 3292 3293 3294
        if (!mov->next_root_atom)
            return AVERROR_EOF;
        avio_seek(s->pb, mov->next_root_atom, SEEK_SET);
        mov->next_root_atom = 0;
        if (mov_read_default(mov, s->pb, (MOVAtom){ AV_RL32("root"), INT64_MAX }) < 0 ||
A
Anton Khirnov 已提交
3295
            s->pb->eof_reached)
B
Baptiste Coudurier 已提交
3296
            return AVERROR_EOF;
3297
        av_dlog(s, "read fragments, offset 0x%"PRIx64"\n", avio_tell(s->pb));
3298 3299
        goto retry;
    }
3300
    sc = st->priv_data;
3301 3302
    /* must be done just before reading, to avoid infinite loop on sample */
    sc->current_sample++;
3303 3304

    if (st->discard != AVDISCARD_ALL) {
A
Anton Khirnov 已提交
3305
        if (avio_seek(sc->pb, sample->pos, SEEK_SET) != sample->pos) {
R
Reimar Döffinger 已提交
3306 3307
            av_log(mov->fc, AV_LOG_ERROR, "stream %d, offset 0x%"PRIx64": partial file\n",
                   sc->ffindex, sample->pos);
3308
            return AVERROR_INVALIDDATA;
R
Reimar Döffinger 已提交
3309 3310
        }
        ret = av_get_packet(sc->pb, pkt, sample->size);
3311 3312
        if (ret < 0)
            return ret;
3313 3314 3315 3316 3317 3318 3319 3320 3321 3322 3323
        if (sc->has_palette) {
            uint8_t *pal;

            pal = av_packet_new_side_data(pkt, AV_PKT_DATA_PALETTE, AVPALETTE_SIZE);
            if (!pal) {
                av_log(mov->fc, AV_LOG_ERROR, "Cannot append palette to packet\n");
            } else {
                memcpy(pal, sc->palette, AVPALETTE_SIZE);
                sc->has_palette = 0;
            }
        }
R
Reimar Döffinger 已提交
3324 3325
#if CONFIG_DV_DEMUXER
        if (mov->dv_demux && sc->dv_audio_container) {
3326
            avpriv_dv_produce_packet(mov->dv_demux, pkt, pkt->data, pkt->size);
R
Reimar Döffinger 已提交
3327 3328
            av_free(pkt->data);
            pkt->size = 0;
3329
            ret = avpriv_dv_get_packet(mov->dv_demux, pkt);
R
Reimar Döffinger 已提交
3330 3331 3332
            if (ret < 0)
                return ret;
        }
3333
#endif
3334 3335
    }

3336 3337
    pkt->stream_index = sc->ffindex;
    pkt->dts = sample->timestamp;
3338
    if (sc->ctts_data && sc->ctts_index < sc->ctts_count) {
3339
        pkt->pts = pkt->dts + sc->dts_shift + sc->ctts_data[sc->ctts_index].duration;
3340
        /* update ctts context */
3341 3342 3343 3344 3345
        sc->ctts_sample++;
        if (sc->ctts_index < sc->ctts_count &&
            sc->ctts_data[sc->ctts_index].count == sc->ctts_sample) {
            sc->ctts_index++;
            sc->ctts_sample = 0;
3346
        }
3347 3348
        if (sc->wrong_dts)
            pkt->dts = AV_NOPTS_VALUE;
3349
    } else {
3350
        int64_t next_dts = (sc->current_sample < st->nb_index_entries) ?
3351 3352
            st->index_entries[sc->current_sample].timestamp : st->duration;
        pkt->duration = next_dts - pkt->dts;
3353
        pkt->pts = pkt->dts;
3354
    }
3355 3356
    if (st->discard == AVDISCARD_ALL)
        goto retry;
3357
    pkt->flags |= sample->flags & AVINDEX_KEYFRAME ? AV_PKT_FLAG_KEY : 0;
3358
    pkt->pos = sample->pos;
L
Luca Barbato 已提交
3359
    av_dlog(s, "stream %d, pts %"PRId64", dts %"PRId64", pos 0x%"PRIx64", duration %d\n",
3360
            pkt->stream_index, pkt->pts, pkt->dts, pkt->pos, pkt->duration);
3361 3362
    return 0;
}
3363

3364
static int mov_seek_stream(AVFormatContext *s, AVStream *st, int64_t timestamp, int flags)
3365 3366 3367 3368
{
    MOVStreamContext *sc = st->priv_data;
    int sample, time_sample;
    int i;
3369

3370
    sample = av_index_search_timestamp(st, timestamp, flags);
L
Luca Barbato 已提交
3371
    av_dlog(s, "stream %d, timestamp %"PRId64", sample %d\n", st->index, timestamp, sample);
3372 3373
    if (sample < 0 && st->nb_index_entries && timestamp < st->index_entries[0].timestamp)
        sample = 0;
3374
    if (sample < 0) /* not sure what to do */
3375
        return AVERROR_INVALIDDATA;
3376
    sc->current_sample = sample;
L
Luca Barbato 已提交
3377
    av_dlog(s, "stream %d, found sample %d\n", st->index, sc->current_sample);
3378 3379 3380 3381
    /* adjust ctts index */
    if (sc->ctts_data) {
        time_sample = 0;
        for (i = 0; i < sc->ctts_count; i++) {
3382 3383
            int next = time_sample + sc->ctts_data[i].count;
            if (next > sc->current_sample) {
3384 3385
                sc->ctts_index = i;
                sc->ctts_sample = sc->current_sample - time_sample;
3386
                break;
3387
            }
3388
            time_sample = next;
3389 3390
        }
    }
3391
    return sample;
3392 3393
}

3394
static int mov_read_seek(AVFormatContext *s, int stream_index, int64_t sample_time, int flags)
G
Gael Chardon 已提交
3395
{
3396 3397 3398 3399
    AVStream *st;
    int64_t seek_timestamp, timestamp;
    int sample;
    int i;
G
Gael Chardon 已提交
3400

3401
    if (stream_index >= s->nb_streams)
3402
        return AVERROR_INVALIDDATA;
3403 3404
    if (sample_time < 0)
        sample_time = 0;
G
Gael Chardon 已提交
3405

3406
    st = s->streams[stream_index];
3407
    sample = mov_seek_stream(s, st, sample_time, flags);
3408
    if (sample < 0)
3409
        return sample;
G
Gael Chardon 已提交
3410

3411 3412
    /* adjust seek timestamp to found sample timestamp */
    seek_timestamp = st->index_entries[sample].timestamp;
G
Gael Chardon 已提交
3413

3414 3415
    for (i = 0; i < s->nb_streams; i++) {
        st = s->streams[i];
3416
        if (stream_index == i)
3417
            continue;
G
Gael Chardon 已提交
3418

3419
        timestamp = av_rescale_q(seek_timestamp, s->streams[stream_index]->time_base, st->time_base);
3420
        mov_seek_stream(s, st, timestamp, flags);
3421
    }
G
Gael Chardon 已提交
3422 3423 3424
    return 0;
}

3425
AVInputFormat ff_mov_demuxer = {
3426
    .name           = "mov,mp4,m4a,3gp,3g2,mj2",
3427
    .long_name      = NULL_IF_CONFIG_SMALL("QuickTime / MOV"),
3428
    .priv_data_size = sizeof(MOVContext),
3429
    .extensions     = "mov,mp4,m4a,3gp,3g2,mj2",
3430 3431 3432 3433 3434
    .read_probe     = mov_probe,
    .read_header    = mov_read_header,
    .read_packet    = mov_read_packet,
    .read_close     = mov_read_close,
    .read_seek      = mov_read_seek,
3435
};