mov.c 107.3 KB
Newer Older
1
/*
2
 * MOV demuxer
3
 * Copyright (c) 2001 Fabrice Bellard
4
 * Copyright (c) 2009 Baptiste Coudurier <baptiste dot coudurier at gmail dot com>
5
 *
6 7 8
 * first version by Francois Revol <revol@free.fr>
 * seek function by Gael Chardon <gael.dev@4now.net>
 *
9
 * This file is part of Libav.
10
 *
11
 * Libav is free software; you can redistribute it and/or
F
Fabrice Bellard 已提交
12 13
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
14
 * version 2.1 of the License, or (at your option) any later version.
15
 *
16
 * Libav is distributed in the hope that it will be useful,
17
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
F
Fabrice Bellard 已提交
18 19
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
20
 *
F
Fabrice Bellard 已提交
21
 * You should have received a copy of the GNU Lesser General Public
22
 * License along with Libav; if not, write to the Free Software
23
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
24
 */
25

26
#include <inttypes.h>
27
#include <limits.h>
28
#include <stdint.h>
29

30
//#define MOV_EXPORT_ALL_METADATA
31

32
#include "libavutil/attributes.h"
33
#include "libavutil/channel_layout.h"
34
#include "libavutil/intreadwrite.h"
35
#include "libavutil/intfloat.h"
36
#include "libavutil/mathematics.h"
37
#include "libavutil/avstring.h"
38
#include "libavutil/dict.h"
39
#include "libavcodec/ac3tab.h"
40
#include "avformat.h"
41
#include "internal.h"
42
#include "avio_internal.h"
43
#include "riff.h"
44
#include "isom.h"
45
#include "libavcodec/get_bits.h"
R
Raivo Hool 已提交
46
#include "id3v1.h"
47
#include "mov_chan.h"
48
#include "replaygain.h"
49

50
#if CONFIG_ZLIB
51 52 53
#include <zlib.h>
#endif

54 55
#include "qtpalette.h"

G
Gael Chardon 已提交
56

57 58 59
#undef NDEBUG
#include <assert.h>

60 61 62
/* those functions parse an atom */
/* links atom IDs to parse functions */
typedef struct MOVParseTableEntry {
63
    uint32_t type;
64
    int (*parse)(MOVContext *ctx, AVIOContext *pb, MOVAtom atom);
65 66
} MOVParseTableEntry;

67
static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom);
68

69 70
static int mov_metadata_track_or_disc_number(MOVContext *c, AVIOContext *pb,
                                             unsigned len, const char *key)
B
Baptiste Coudurier 已提交
71 72 73
{
    char buf[16];

74
    short current, total = 0;
75
    avio_rb16(pb); // unknown
76
    current = avio_rb16(pb);
77 78
    if (len >= 6)
        total = avio_rb16(pb);
79 80 81 82 83
    if (!total)
        snprintf(buf, sizeof(buf), "%d", current);
    else
        snprintf(buf, sizeof(buf), "%d/%d", current, total);
    av_dict_set(&c->fc->metadata, key, buf, 0);
B
Baptiste Coudurier 已提交
84 85 86 87

    return 0;
}

88 89
static int mov_metadata_int8_bypass_padding(MOVContext *c, AVIOContext *pb,
                                            unsigned len, const char *key)
90
{
91
    char buf[16];
92

93 94 95 96
    /* bypass padding bytes */
    avio_r8(pb);
    avio_r8(pb);
    avio_r8(pb);
97

98
    snprintf(buf, sizeof(buf), "%d", avio_r8(pb));
99
    av_dict_set(&c->fc->metadata, key, buf, 0);
100

101
    return 0;
102 103
}

104 105
static int mov_metadata_int8_no_padding(MOVContext *c, AVIOContext *pb,
                                        unsigned len, const char *key)
106
{
107
    char buf[16];
108

109
    snprintf(buf, sizeof(buf), "%d", avio_r8(pb));
110
    av_dict_set(&c->fc->metadata, key, buf, 0);
111

112
    return 0;
113 114
}

R
Raivo Hool 已提交
115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131
static int mov_metadata_gnre(MOVContext *c, AVIOContext *pb,
                             unsigned len, const char *key)
{
    short genre;
    char buf[20];

    avio_r8(pb); // unknown

    genre = avio_r8(pb);
    if (genre < 1 || genre > ID3v1_GENRE_MAX)
        return 0;
    snprintf(buf, sizeof(buf), "%s", ff_id3v1_genre_str[genre-1]);
    av_dict_set(&c->fc->metadata, key, buf, 0);

    return 0;
}

132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150
static const uint32_t mac_to_unicode[128] = {
    0x00C4,0x00C5,0x00C7,0x00C9,0x00D1,0x00D6,0x00DC,0x00E1,
    0x00E0,0x00E2,0x00E4,0x00E3,0x00E5,0x00E7,0x00E9,0x00E8,
    0x00EA,0x00EB,0x00ED,0x00EC,0x00EE,0x00EF,0x00F1,0x00F3,
    0x00F2,0x00F4,0x00F6,0x00F5,0x00FA,0x00F9,0x00FB,0x00FC,
    0x2020,0x00B0,0x00A2,0x00A3,0x00A7,0x2022,0x00B6,0x00DF,
    0x00AE,0x00A9,0x2122,0x00B4,0x00A8,0x2260,0x00C6,0x00D8,
    0x221E,0x00B1,0x2264,0x2265,0x00A5,0x00B5,0x2202,0x2211,
    0x220F,0x03C0,0x222B,0x00AA,0x00BA,0x03A9,0x00E6,0x00F8,
    0x00BF,0x00A1,0x00AC,0x221A,0x0192,0x2248,0x2206,0x00AB,
    0x00BB,0x2026,0x00A0,0x00C0,0x00C3,0x00D5,0x0152,0x0153,
    0x2013,0x2014,0x201C,0x201D,0x2018,0x2019,0x00F7,0x25CA,
    0x00FF,0x0178,0x2044,0x20AC,0x2039,0x203A,0xFB01,0xFB02,
    0x2021,0x00B7,0x201A,0x201E,0x2030,0x00C2,0x00CA,0x00C1,
    0x00CB,0x00C8,0x00CD,0x00CE,0x00CF,0x00CC,0x00D3,0x00D4,
    0xF8FF,0x00D2,0x00DA,0x00DB,0x00D9,0x0131,0x02C6,0x02DC,
    0x00AF,0x02D8,0x02D9,0x02DA,0x00B8,0x02DD,0x02DB,0x02C7,
};

151
static int mov_read_mac_string(MOVContext *c, AVIOContext *pb, int len,
152 153 154 155 156 157 158
                               char *dst, int dstlen)
{
    char *p = dst;
    char *end = dst+dstlen-1;
    int i;

    for (i = 0; i < len; i++) {
159
        uint8_t t, c = avio_r8(pb);
160 161 162 163 164 165 166 167 168
        if (c < 0x80 && p < end)
            *p++ = c;
        else
            PUT_UTF8(mac_to_unicode[c-0x80], t, if (p < end) *p++ = t;);
    }
    *p = 0;
    return p - dst;
}

A
Anton Khirnov 已提交
169 170 171 172 173
static int mov_read_covr(MOVContext *c, AVIOContext *pb, int type, int len)
{
    AVPacket pkt;
    AVStream *st;
    MOVStreamContext *sc;
174
    enum AVCodecID id;
A
Anton Khirnov 已提交
175 176 177
    int ret;

    switch (type) {
178 179 180
    case 0xd:  id = AV_CODEC_ID_MJPEG; break;
    case 0xe:  id = AV_CODEC_ID_PNG;   break;
    case 0x1b: id = AV_CODEC_ID_BMP;   break;
A
Anton Khirnov 已提交
181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210
    default:
        av_log(c->fc, AV_LOG_WARNING, "Unknown cover type: 0x%x.\n", type);
        avio_skip(pb, len);
        return 0;
    }

    st = avformat_new_stream(c->fc, NULL);
    if (!st)
        return AVERROR(ENOMEM);
    sc = av_mallocz(sizeof(*sc));
    if (!sc)
        return AVERROR(ENOMEM);
    st->priv_data = sc;

    ret = av_get_packet(pb, &pkt, len);
    if (ret < 0)
        return ret;

    st->disposition              |= AV_DISPOSITION_ATTACHED_PIC;

    st->attached_pic              = pkt;
    st->attached_pic.stream_index = st->index;
    st->attached_pic.flags       |= AV_PKT_FLAG_KEY;

    st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
    st->codec->codec_id   = id;

    return 0;
}

211 212 213 214 215
static int mov_metadata_loci(MOVContext *c, AVIOContext *pb, unsigned len)
{
    char language[4] = { 0 };
    char buf[100];
    uint16_t langcode = 0;
216
    double longitude, latitude;
217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247
    const char *key = "location";

    if (len < 4 + 2 + 1 + 1 + 4 + 4 + 4)
        return AVERROR_INVALIDDATA;

    avio_skip(pb, 4); // version+flags
    langcode = avio_rb16(pb);
    ff_mov_lang_to_iso639(langcode, language);
    len -= 6;

    len -= avio_get_str(pb, len, buf, sizeof(buf)); // place name
    if (len < 1)
        return AVERROR_INVALIDDATA;
    avio_skip(pb, 1); // role
    len -= 1;

    if (len < 14)
        return AVERROR_INVALIDDATA;
    longitude = ((int32_t) avio_rb32(pb)) / (float) (1 << 16);
    latitude  = ((int32_t) avio_rb32(pb)) / (float) (1 << 16);

    // Try to output in the same format as the ?xyz field
    snprintf(buf, sizeof(buf), "%+08.4f%+09.4f/", latitude, longitude);
    if (*language && strcmp(language, "und")) {
        char key2[16];
        snprintf(key2, sizeof(key2), "%s-%s", key, language);
        av_dict_set(&c->fc->metadata, key2, buf, 0);
    }
    return av_dict_set(&c->fc->metadata, key, buf, 0);
}

248
static int mov_read_udta_string(MOVContext *c, AVIOContext *pb, MOVAtom atom)
249 250 251 252 253 254
{
#ifdef MOV_EXPORT_ALL_METADATA
    char tmp_key[5];
#endif
    char str[1024], key2[16], language[4] = {0};
    const char *key = NULL;
255 256
    uint16_t langcode = 0;
    uint32_t data_type = 0, str_size;
257
    int (*parse)(MOVContext*, AVIOContext*, unsigned, const char*) = NULL;
258 259 260 261

    switch (atom.type) {
    case MKTAG(0xa9,'n','a','m'): key = "title";     break;
    case MKTAG(0xa9,'a','u','t'):
262
    case MKTAG(0xa9,'A','R','T'): key = "artist";    break;
R
Raivo Hool 已提交
263
    case MKTAG( 'a','A','R','T'): key = "album_artist";    break;
264
    case MKTAG(0xa9,'w','r','t'): key = "composer";  break;
265
    case MKTAG( 'c','p','r','t'):
266 267 268 269
    case MKTAG(0xa9,'c','p','y'): key = "copyright"; break;
    case MKTAG(0xa9,'c','m','t'):
    case MKTAG(0xa9,'i','n','f'): key = "comment";   break;
    case MKTAG(0xa9,'a','l','b'): key = "album";     break;
270
    case MKTAG(0xa9,'d','a','y'): key = "date";      break;
271
    case MKTAG(0xa9,'g','e','n'): key = "genre";     break;
R
Raivo Hool 已提交
272 273
    case MKTAG( 'g','n','r','e'): key = "genre";
        parse = mov_metadata_gnre; break;
274
    case MKTAG(0xa9,'t','o','o'):
275
    case MKTAG(0xa9,'s','w','r'): key = "encoder";   break;
276
    case MKTAG(0xa9,'e','n','c'): key = "encoder";   break;
277
    case MKTAG(0xa9,'x','y','z'): key = "location";  break;
278 279 280 281 282
    case MKTAG( 'd','e','s','c'): key = "description";break;
    case MKTAG( 'l','d','e','s'): key = "synopsis";  break;
    case MKTAG( 't','v','s','h'): key = "show";      break;
    case MKTAG( 't','v','e','n'): key = "episode_id";break;
    case MKTAG( 't','v','n','n'): key = "network";   break;
B
Baptiste Coudurier 已提交
283
    case MKTAG( 't','r','k','n'): key = "track";
284 285 286
        parse = mov_metadata_track_or_disc_number; break;
    case MKTAG( 'd','i','s','k'): key = "disc";
        parse = mov_metadata_track_or_disc_number; break;
287
    case MKTAG( 't','v','e','s'): key = "episode_sort";
288
        parse = mov_metadata_int8_bypass_padding; break;
289
    case MKTAG( 't','v','s','n'): key = "season_number";
290
        parse = mov_metadata_int8_bypass_padding; break;
291
    case MKTAG( 's','t','i','k'): key = "media_type";
292
        parse = mov_metadata_int8_no_padding; break;
293 294 295 296
    case MKTAG( 'h','d','v','d'): key = "hd_video";
        parse = mov_metadata_int8_no_padding; break;
    case MKTAG( 'p','g','a','p'): key = "gapless_playback";
        parse = mov_metadata_int8_no_padding; break;
297 298
    case MKTAG( 'l','o','c','i'):
        return mov_metadata_loci(c, pb, atom.size);
299 300 301
    }

    if (c->itunes_metadata && atom.size > 8) {
302 303
        int data_size = avio_rb32(pb);
        int tag = avio_rl32(pb);
304
        if (tag == MKTAG('d','a','t','a')) {
305 306
            data_type = avio_rb32(pb); // type
            avio_rb32(pb); // unknown
307 308
            str_size = data_size - 16;
            atom.size -= 16;
A
Anton Khirnov 已提交
309 310 311 312 313 314 315 316

            if (atom.type == MKTAG('c', 'o', 'v', 'r')) {
                int ret = mov_read_covr(c, pb, data_type, str_size);
                if (ret < 0) {
                    av_log(c->fc, AV_LOG_ERROR, "Error parsing cover art.\n");
                    return ret;
                }
            }
317 318
        } else return 0;
    } else if (atom.size > 4 && key && !c->itunes_metadata) {
319 320
        str_size = avio_rb16(pb); // string length
        langcode = avio_rb16(pb);
321
        ff_mov_lang_to_iso639(langcode, language);
322 323 324 325 326 327 328 329 330 331 332 333 334 335
        atom.size -= 4;
    } else
        str_size = atom.size;

#ifdef MOV_EXPORT_ALL_METADATA
    if (!key) {
        snprintf(tmp_key, 5, "%.4s", (char*)&atom.type);
        key = tmp_key;
    }
#endif

    if (!key)
        return 0;
    if (atom.size < 0)
336
        return AVERROR_INVALIDDATA;
337 338

    str_size = FFMIN3(sizeof(str)-1, str_size, atom.size);
B
Baptiste Coudurier 已提交
339 340

    if (parse)
341
        parse(c, pb, str_size, key);
B
Baptiste Coudurier 已提交
342
    else {
343
        if (data_type == 3 || (data_type == 0 && (langcode < 0x400 || langcode == 0x7fff))) { // MAC Encoded
344 345
            mov_read_mac_string(c, pb, str_size, str, sizeof(str));
        } else {
346
            avio_read(pb, str, str_size);
347 348
            str[str_size] = 0;
        }
349
        av_dict_set(&c->fc->metadata, key, str, 0);
B
Baptiste Coudurier 已提交
350 351
        if (*language && strcmp(language, "und")) {
            snprintf(key2, sizeof(key2), "%s-%s", key, language);
352
            av_dict_set(&c->fc->metadata, key2, str, 0);
B
Baptiste Coudurier 已提交
353
        }
B
Baptiste Coudurier 已提交
354
    }
355 356 357
    av_dlog(c->fc, "lang \"%3s\" ", language);
    av_dlog(c->fc, "tag \"%s\" value \"%s\" atom \"%.4s\" %d %"PRId64"\n",
            key, str, (char*)&atom.type, str_size, atom.size);
358 359 360

    return 0;
}
361

362
static int mov_read_chpl(MOVContext *c, AVIOContext *pb, MOVAtom atom)
D
David Conrad 已提交
363 364
{
    int64_t start;
D
David Conrad 已提交
365
    int i, nb_chapters, str_len, version;
D
David Conrad 已提交
366 367 368 369 370
    char str[256+1];

    if ((atom.size -= 5) < 0)
        return 0;

371 372
    version = avio_r8(pb);
    avio_rb24(pb);
D
David Conrad 已提交
373
    if (version)
374 375
        avio_rb32(pb); // ???
    nb_chapters = avio_r8(pb);
D
David Conrad 已提交
376 377 378 379 380

    for (i = 0; i < nb_chapters; i++) {
        if (atom.size < 9)
            return 0;

381 382
        start = avio_rb64(pb);
        str_len = avio_r8(pb);
D
David Conrad 已提交
383 384 385 386

        if ((atom.size -= 9+str_len) < 0)
            return 0;

387
        avio_read(pb, str, str_len);
D
David Conrad 已提交
388
        str[str_len] = 0;
389
        avpriv_new_chapter(c->fc, i, (AVRational){1,10000000}, start, AV_NOPTS_VALUE, str);
D
David Conrad 已提交
390 391 392 393
    }
    return 0;
}

394
#define MIN_DATA_ENTRY_BOX_SIZE 12
395
static int mov_read_dref(MOVContext *c, AVIOContext *pb, MOVAtom atom)
396
{
397 398
    AVStream *st;
    MOVStreamContext *sc;
399 400
    int entries, i, j;

401 402 403 404 405
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

406 407
    avio_rb32(pb); // version + flags
    entries = avio_rb32(pb);
408 409
    if (entries >  (atom.size - 1) / MIN_DATA_ENTRY_BOX_SIZE + 1 ||
        entries >= UINT_MAX / sizeof(*sc->drefs))
410
        return AVERROR_INVALIDDATA;
411
    av_free(sc->drefs);
412
    sc->drefs = av_mallocz(entries * sizeof(*sc->drefs));
413 414 415
    if (!sc->drefs)
        return AVERROR(ENOMEM);
    sc->drefs_count = entries;
416 417

    for (i = 0; i < sc->drefs_count; i++) {
418
        MOVDref *dref = &sc->drefs[i];
419
        uint32_t size = avio_rb32(pb);
420
        int64_t next = avio_tell(pb) + size - 4;
421

422
        if (size < 12)
423
            return AVERROR_INVALIDDATA;
424

425 426
        dref->type = avio_rl32(pb);
        avio_rb32(pb); // version + flags
L
Luca Barbato 已提交
427
        av_dlog(c->fc, "type %.4s size %d\n", (char*)&dref->type, size);
428 429 430 431 432 433

        if (dref->type == MKTAG('a','l','i','s') && size > 150) {
            /* macintosh alias record */
            uint16_t volume_len, len;
            int16_t type;

434
            avio_skip(pb, 10);
435

436
            volume_len = avio_r8(pb);
437
            volume_len = FFMIN(volume_len, 27);
438
            avio_read(pb, dref->volume, 27);
439 440
            dref->volume[volume_len] = 0;
            av_log(c->fc, AV_LOG_DEBUG, "volume %s, len %d\n", dref->volume, volume_len);
441

442
            avio_skip(pb, 12);
443

444
            len = avio_r8(pb);
445
            len = FFMIN(len, 63);
446
            avio_read(pb, dref->filename, 63);
447 448 449
            dref->filename[len] = 0;
            av_log(c->fc, AV_LOG_DEBUG, "filename %s, len %d\n", dref->filename, len);

450
            avio_skip(pb, 16);
451 452

            /* read next level up_from_alias/down_to_target */
453 454
            dref->nlvl_from = avio_rb16(pb);
            dref->nlvl_to   = avio_rb16(pb);
455 456 457
            av_log(c->fc, AV_LOG_DEBUG, "nlvl from %d, nlvl to %d\n",
                   dref->nlvl_from, dref->nlvl_to);

458
            avio_skip(pb, 16);
459

460
            for (type = 0; type != -1 && avio_tell(pb) < next; ) {
461 462
                if (pb->eof_reached)
                    return AVERROR_EOF;
463 464
                type = avio_rb16(pb);
                len = avio_rb16(pb);
465 466 467 468
                av_log(c->fc, AV_LOG_DEBUG, "type %d, len %d\n", type, len);
                if (len&1)
                    len += 1;
                if (type == 2) { // absolute path
469
                    av_free(dref->path);
470
                    dref->path = av_mallocz(len+1);
471 472
                    if (!dref->path)
                        return AVERROR(ENOMEM);
473
                    avio_read(pb, dref->path, len);
474
                    if (len > volume_len && !strncmp(dref->path, dref->volume, volume_len)) {
475 476 477 478 479 480 481 482
                        len -= volume_len;
                        memmove(dref->path, dref->path+volume_len, len);
                        dref->path[len] = 0;
                    }
                    for (j = 0; j < len; j++)
                        if (dref->path[j] == ':')
                            dref->path[j] = '/';
                    av_log(c->fc, AV_LOG_DEBUG, "path %s\n", dref->path);
483 484 485 486 487
                } else if (type == 0) { // directory name
                    av_free(dref->dir);
                    dref->dir = av_malloc(len+1);
                    if (!dref->dir)
                        return AVERROR(ENOMEM);
488
                    avio_read(pb, dref->dir, len);
489 490 491 492 493
                    dref->dir[len] = 0;
                    for (j = 0; j < len; j++)
                        if (dref->dir[j] == ':')
                            dref->dir[j] = '/';
                    av_log(c->fc, AV_LOG_DEBUG, "dir %s\n", dref->dir);
494
                } else
495
                    avio_skip(pb, len);
496 497
            }
        }
A
Anton Khirnov 已提交
498
        avio_seek(pb, next, SEEK_SET);
499 500 501 502
    }
    return 0;
}

503
static int mov_read_hdlr(MOVContext *c, AVIOContext *pb, MOVAtom atom)
504
{
505
    AVStream *st;
506
    uint32_t type;
507
    uint32_t av_unused ctype;
508

509 510 511 512 513
    if (c->fc->nb_streams < 1) // meta before first trak
        return 0;

    st = c->fc->streams[c->fc->nb_streams-1];

514 515
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
516 517

    /* component type */
518 519
    ctype = avio_rl32(pb);
    type = avio_rl32(pb); /* component subtype */
520

L
Luca Barbato 已提交
521 522
    av_dlog(c->fc, "ctype= %.4s (0x%08x)\n", (char*)&ctype, ctype);
    av_dlog(c->fc, "stype= %.4s\n", (char*)&type);
523

524
    if     (type == MKTAG('v','i','d','e'))
525
        st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
526
    else if (type == MKTAG('s','o','u','n'))
527
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
528
    else if (type == MKTAG('m','1','a',' '))
529
        st->codec->codec_id = AV_CODEC_ID_MP2;
530
    else if ((type == MKTAG('s','u','b','p')) || (type == MKTAG('c','l','c','p')))
531
        st->codec->codec_type = AVMEDIA_TYPE_SUBTITLE;
532

533 534 535
    avio_rb32(pb); /* component  manufacture */
    avio_rb32(pb); /* component flags */
    avio_rb32(pb); /* component flags mask */
536 537 538 539

    return 0;
}

540
int ff_mov_read_esds(AVFormatContext *fc, AVIOContext *pb, MOVAtom atom)
541
{
542
    AVStream *st;
M
Mans Rullgard 已提交
543
    int tag;
544

545
    if (fc->nb_streams < 1)
546
        return 0;
547
    st = fc->streams[fc->nb_streams-1];
548

549
    avio_rb32(pb); /* version + flags */
M
Mans Rullgard 已提交
550
    ff_mp4_read_descr(fc, pb, &tag);
551
    if (tag == MP4ESDescrTag) {
552
        ff_mp4_parse_es_descr(pb, NULL);
553
    } else
554
        avio_rb16(pb); /* ID */
555

M
Mans Rullgard 已提交
556
    ff_mp4_read_descr(fc, pb, &tag);
557 558
    if (tag == MP4DecConfigDescrTag)
        ff_mp4_read_dec_config_descr(fc, st, pb);
559 560 561
    return 0;
}

562
static int mov_read_esds(MOVContext *c, AVIOContext *pb, MOVAtom atom)
563 564 565 566
{
    return ff_mov_read_esds(c->fc, pb, atom);
}

567
static int mov_read_dac3(MOVContext *c, AVIOContext *pb, MOVAtom atom)
568 569
{
    AVStream *st;
570
    int ac3info, acmod, lfeon, bsmod;
571

572 573
    if (c->fc->nb_streams < 1)
        return 0;
574 575
    st = c->fc->streams[c->fc->nb_streams-1];

576
    ac3info = avio_rb24(pb);
577
    bsmod = (ac3info >> 14) & 0x7;
578 579 580
    acmod = (ac3info >> 11) & 0x7;
    lfeon = (ac3info >> 10) & 0x1;
    st->codec->channels = ((int[]){2,1,2,3,3,4,4,5})[acmod] + lfeon;
581 582 583
    st->codec->channel_layout = avpriv_ac3_channel_layout_tab[acmod];
    if (lfeon)
        st->codec->channel_layout |= AV_CH_LOW_FREQUENCY;
584 585 586
    st->codec->audio_service_type = bsmod;
    if (st->codec->channels > 1 && bsmod == 0x7)
        st->codec->audio_service_type = AV_AUDIO_SERVICE_TYPE_KARAOKE;
587 588 589 590

    return 0;
}

591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618
static int mov_read_dec3(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    int eac3info, acmod, lfeon, bsmod;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    /* No need to parse fields for additional independent substreams and its
     * associated dependent substreams since libavcodec's E-AC-3 decoder
     * does not support them yet. */
    avio_rb16(pb); /* data_rate and num_ind_sub */
    eac3info = avio_rb24(pb);
    bsmod = (eac3info >> 12) & 0x1f;
    acmod = (eac3info >>  9) & 0x7;
    lfeon = (eac3info >>  8) & 0x1;
    st->codec->channel_layout = avpriv_ac3_channel_layout_tab[acmod];
    if (lfeon)
        st->codec->channel_layout |= AV_CH_LOW_FREQUENCY;
    st->codec->channels = av_get_channel_layout_nb_channels(st->codec->channel_layout);
    st->codec->audio_service_type = bsmod;
    if (st->codec->channels > 1 && bsmod == 0x7)
        st->codec->audio_service_type = AV_AUDIO_SERVICE_TYPE_KARAOKE;

    return 0;
}

619 620 621 622 623 624 625 626 627 628 629
static int mov_read_chan(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    if (atom.size < 16)
        return 0;

630
    ff_mov_read_chan(c->fc, pb, st, atom.size - 4);
631 632 633 634

    return 0;
}

635 636 637 638 639 640 641 642 643 644 645 646 647
static int mov_read_wfex(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    ff_get_wav_header(pb, st->codec, atom.size);

    return 0;
}

648
static int mov_read_pasp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
649
{
650 651
    const int num = avio_rb32(pb);
    const int den = avio_rb32(pb);
652 653 654 655 656 657
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

658 659 660 661 662 663 664
    if ((st->sample_aspect_ratio.den != 1 || st->sample_aspect_ratio.num) && // default
        (den != st->sample_aspect_ratio.den || num != st->sample_aspect_ratio.num)) {
        av_log(c->fc, AV_LOG_WARNING,
               "sample aspect ratio already set to %d:%d, ignoring 'pasp' atom (%d:%d)\n",
               st->sample_aspect_ratio.num, st->sample_aspect_ratio.den,
               num, den);
    } else if (den != 0) {
665 666 667 668 669 670
        st->sample_aspect_ratio.num = num;
        st->sample_aspect_ratio.den = den;
    }
    return 0;
}

671
/* this atom contains actual media data */
672
static int mov_read_mdat(MOVContext *c, AVIOContext *pb, MOVAtom atom)
673
{
674
    if (atom.size == 0) /* wrong one (MP4) */
675 676 677 678 679
        return 0;
    c->found_mdat=1;
    return 0; /* now go for moov */
}

680
/* read major brand, minor version and compatible brands and store them as metadata */
681
static int mov_read_ftyp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
682
{
683 684 685 686 687 688
    uint32_t minor_ver;
    int comp_brand_size;
    char minor_ver_str[11]; /* 32 bit integer -> 10 digits + null */
    char* comp_brands_str;
    uint8_t type[5] = {0};

689
    avio_read(pb, type, 4);
B
Baptiste Coudurier 已提交
690
    if (strcmp(type, "qt  "))
691
        c->isom = 1;
692
    av_log(c->fc, AV_LOG_DEBUG, "ISO: File Type Major Brand: %.4s\n",(char *)&type);
693
    av_dict_set(&c->fc->metadata, "major_brand", type, 0);
694
    minor_ver = avio_rb32(pb); /* minor version */
695
    snprintf(minor_ver_str, sizeof(minor_ver_str), "%"PRIu32"", minor_ver);
696
    av_dict_set(&c->fc->metadata, "minor_version", minor_ver_str, 0);
697 698 699

    comp_brand_size = atom.size - 8;
    if (comp_brand_size < 0)
700
        return AVERROR_INVALIDDATA;
701 702 703
    comp_brands_str = av_malloc(comp_brand_size + 1); /* Add null terminator */
    if (!comp_brands_str)
        return AVERROR(ENOMEM);
704
    avio_read(pb, comp_brands_str, comp_brand_size);
705
    comp_brands_str[comp_brand_size] = 0;
706
    av_dict_set(&c->fc->metadata, "compatible_brands", comp_brands_str, 0);
707 708
    av_freep(&comp_brands_str);

709 710 711
    return 0;
}

712
/* this atom should contain all header atoms */
713
static int mov_read_moov(MOVContext *c, AVIOContext *pb, MOVAtom atom)
714
{
715 716 717 718
    int ret;

    if ((ret = mov_read_default(c, pb, atom)) < 0)
        return ret;
719 720 721 722 723 724
    /* we parsed the 'moov' atom, we can terminate the parsing as soon as we find the 'mdat' */
    /* so we don't parse the whole file if over a network */
    c->found_moov=1;
    return 0; /* now go for mdat */
}

725
static int mov_read_moof(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
726
{
727
    c->fragment.moof_offset = c->fragment.implicit_offset = avio_tell(pb) - 8;
728
    av_dlog(c->fc, "moof offset %"PRIx64"\n", c->fragment.moof_offset);
B
Baptiste Coudurier 已提交
729 730
    return mov_read_default(c, pb, atom);
}
731

732
static void mov_metadata_creation_time(AVDictionary **metadata, time_t time)
733 734 735
{
    char buffer[32];
    if (time) {
736
        struct tm *ptm;
737
        time -= 2082844800;  /* seconds between 1904-01-01 and Epoch */
738 739 740
        ptm = gmtime(&time);
        if (!ptm) return;
        strftime(buffer, sizeof(buffer), "%Y-%m-%d %H:%M:%S", ptm);
741
        av_dict_set(metadata, "creation_time", buffer, 0);
742 743 744
    }
}

745
static int mov_read_mdhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
746
{
747 748 749
    AVStream *st;
    MOVStreamContext *sc;
    int version;
750
    char language[4] = {0};
751
    unsigned lang;
752
    time_t creation_time;
753

754 755 756 757 758
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

759 760 761 762 763
    if (sc->time_scale) {
        av_log(c->fc, AV_LOG_ERROR, "Multiple mdhd?\n");
        return AVERROR_INVALIDDATA;
    }

764
    version = avio_r8(pb);
765
    if (version > 1) {
766
        avpriv_request_sample(c->fc, "Version %d", version);
767 768
        return AVERROR_PATCHWELCOME;
    }
769
    avio_rb24(pb); /* flags */
B
clean  
Baptiste Coudurier 已提交
770
    if (version == 1) {
771 772
        creation_time = avio_rb64(pb);
        avio_rb64(pb);
B
clean  
Baptiste Coudurier 已提交
773
    } else {
774 775
        creation_time = avio_rb32(pb);
        avio_rb32(pb); /* modification time */
B
clean  
Baptiste Coudurier 已提交
776
    }
777
    mov_metadata_creation_time(&st->metadata, creation_time);
778

779 780
    sc->time_scale = avio_rb32(pb);
    st->duration = (version == 1) ? avio_rb64(pb) : avio_rb32(pb); /* duration */
781

782
    lang = avio_rb16(pb); /* language */
783
    if (ff_mov_lang_to_iso639(lang, language))
784
        av_dict_set(&st->metadata, "language", language, 0);
785
    avio_rb16(pb); /* quality */
786 787 788 789

    return 0;
}

790
static int mov_read_mvhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
791
{
792
    time_t creation_time;
793 794
    int version = avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
795

B
Baptiste Coudurier 已提交
796
    if (version == 1) {
797 798
        creation_time = avio_rb64(pb);
        avio_rb64(pb);
B
Baptiste Coudurier 已提交
799
    } else {
800 801
        creation_time = avio_rb32(pb);
        avio_rb32(pb); /* modification time */
B
Baptiste Coudurier 已提交
802
    }
803
    mov_metadata_creation_time(&c->fc->metadata, creation_time);
804
    c->time_scale = avio_rb32(pb); /* time scale */
805

L
Luca Barbato 已提交
806
    av_dlog(c->fc, "time scale = %i\n", c->time_scale);
807

808 809
    c->duration = (version == 1) ? avio_rb64(pb) : avio_rb32(pb); /* duration */
    avio_rb32(pb); /* preferred scale */
810

811
    avio_rb16(pb); /* preferred volume */
812

813
    avio_skip(pb, 10); /* reserved */
814

815
    avio_skip(pb, 36); /* display matrix */
816

817 818 819 820 821 822 823
    avio_rb32(pb); /* preview time */
    avio_rb32(pb); /* preview duration */
    avio_rb32(pb); /* poster time */
    avio_rb32(pb); /* selection time */
    avio_rb32(pb); /* selection duration */
    avio_rb32(pb); /* current time */
    avio_rb32(pb); /* next track ID */
824 825 826 827

    return 0;
}

828
static int mov_read_smi(MOVContext *c, AVIOContext *pb, MOVAtom atom)
829
{
830 831 832 833 834
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
835

836
    if ((uint64_t)atom.size > (1<<30))
837
        return AVERROR_INVALIDDATA;
838

839 840
    // currently SVQ3 decoder expect full STSD header - so let's fake it
    // this should be fixed and just SMI header should be passed
841
    av_free(st->codec->extradata);
842 843 844
    st->codec->extradata = av_mallocz(atom.size + 0x5a + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
B
Baptiste Coudurier 已提交
845 846
    st->codec->extradata_size = 0x5a + atom.size;
    memcpy(st->codec->extradata, "SVQ3", 4); // fake
847
    avio_read(pb, st->codec->extradata + 0x5a, atom.size);
L
Luca Barbato 已提交
848
    av_dlog(c->fc, "Reading SMI %"PRId64"  %s\n", atom.size, st->codec->extradata + 0x5a);
849 850
    return 0;
}
851

852
static int mov_read_enda(MOVContext *c, AVIOContext *pb, MOVAtom atom)
853
{
854 855 856 857 858 859
    AVStream *st;
    int little_endian;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
860

861
    little_endian = avio_rb16(pb);
L
Luca Barbato 已提交
862
    av_dlog(c->fc, "enda %d\n", little_endian);
863
    if (little_endian == 1) {
864
        switch (st->codec->codec_id) {
865 866
        case AV_CODEC_ID_PCM_S24BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_S24LE;
867
            break;
868 869
        case AV_CODEC_ID_PCM_S32BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_S32LE;
870
            break;
871 872
        case AV_CODEC_ID_PCM_F32BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_F32LE;
873
            break;
874 875
        case AV_CODEC_ID_PCM_F64BE:
            st->codec->codec_id = AV_CODEC_ID_PCM_F64LE;
876
            break;
877 878 879 880 881 882 883
        default:
            break;
        }
    }
    return 0;
}

884 885 886 887 888 889 890 891 892 893 894 895 896 897 898 899 900 901 902 903 904 905 906 907 908 909 910 911 912 913 914 915 916 917
static int mov_read_fiel(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    unsigned mov_field_order;
    enum AVFieldOrder decoded_field_order = AV_FIELD_UNKNOWN;

    if (c->fc->nb_streams < 1) // will happen with jp2 files
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    if (atom.size < 2)
        return AVERROR_INVALIDDATA;
    mov_field_order = avio_rb16(pb);
    if ((mov_field_order & 0xFF00) == 0x0100)
        decoded_field_order = AV_FIELD_PROGRESSIVE;
    else if ((mov_field_order & 0xFF00) == 0x0200) {
        switch (mov_field_order & 0xFF) {
        case 0x01: decoded_field_order = AV_FIELD_TT;
                   break;
        case 0x06: decoded_field_order = AV_FIELD_BB;
                   break;
        case 0x09: decoded_field_order = AV_FIELD_TB;
                   break;
        case 0x0E: decoded_field_order = AV_FIELD_BT;
                   break;
        }
    }
    if (decoded_field_order == AV_FIELD_UNKNOWN && mov_field_order) {
        av_log(NULL, AV_LOG_ERROR, "Unknown MOV field order 0x%04x\n", mov_field_order);
    }
    st->codec->field_order = decoded_field_order;

    return 0;
}

918
/* FIXME modify qdm2/svq3/h264 decoders to take full atom as extradata */
919
static int mov_read_extradata(MOVContext *c, AVIOContext *pb, MOVAtom atom)
920
{
921 922
    AVStream *st;
    uint64_t size;
923
    uint8_t *buf;
924
    int err;
925 926 927 928 929

    if (c->fc->nb_streams < 1) // will happen with jp2 files
        return 0;
    st= c->fc->streams[c->fc->nb_streams-1];
    size= (uint64_t)st->codec->extradata_size + atom.size + 8 + FF_INPUT_BUFFER_PADDING_SIZE;
930
    if (size > INT_MAX || (uint64_t)atom.size > INT_MAX)
931
        return AVERROR_INVALIDDATA;
932 933
    if ((err = av_reallocp(&st->codec->extradata, size)) < 0) {
        st->codec->extradata_size = 0;
934
        return err;
935
    }
936
    buf = st->codec->extradata + st->codec->extradata_size;
937 938 939
    st->codec->extradata_size= size - FF_INPUT_BUFFER_PADDING_SIZE;
    AV_WB32(       buf    , atom.size + 8);
    AV_WL32(       buf + 4, atom.type);
940
    avio_read(pb, buf + 8, atom.size);
941 942 943
    return 0;
}

944
static int mov_read_wave(MOVContext *c, AVIOContext *pb, MOVAtom atom)
R
Roberto Togni 已提交
945
{
946 947 948 949 950
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
R
Roberto Togni 已提交
951

952
    if ((uint64_t)atom.size > (1<<30))
953
        return AVERROR_INVALIDDATA;
954

955
    if (st->codec->codec_id == AV_CODEC_ID_QDM2 || st->codec->codec_id == AV_CODEC_ID_QDMC) {
956
        // pass all frma atom to codec, needed at least for QDMC and QDM2
957
        av_free(st->codec->extradata);
958 959 960
        st->codec->extradata = av_mallocz(atom.size + FF_INPUT_BUFFER_PADDING_SIZE);
        if (!st->codec->extradata)
            return AVERROR(ENOMEM);
961
        st->codec->extradata_size = atom.size;
962
        avio_read(pb, st->codec->extradata, atom.size);
963
    } else if (atom.size > 8) { /* to read frma, esds atoms */
964 965 966
        int ret;
        if ((ret = mov_read_default(c, pb, atom)) < 0)
            return ret;
967
    } else
968
        avio_skip(pb, atom.size);
R
Roberto Togni 已提交
969 970 971
    return 0;
}

972 973 974 975
/**
 * This function reads atom content and puts data in extradata without tag
 * nor size unlike mov_read_extradata.
 */
976
static int mov_read_glbl(MOVContext *c, AVIOContext *pb, MOVAtom atom)
977
{
978 979 980 981 982
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
983

984
    if ((uint64_t)atom.size > (1<<30))
985
        return AVERROR_INVALIDDATA;
986

987
    if (atom.size >= 10) {
988
        // Broken files created by legacy versions of libavformat will
989 990 991 992 993 994 995
        // wrap a whole fiel atom inside of a glbl atom.
        unsigned size = avio_rb32(pb);
        unsigned type = avio_rl32(pb);
        avio_seek(pb, -8, SEEK_CUR);
        if (type == MKTAG('f','i','e','l') && size == atom.size)
            return mov_read_default(c, pb, atom);
    }
996
    av_free(st->codec->extradata);
997 998 999
    st->codec->extradata = av_mallocz(atom.size + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
1000
    st->codec->extradata_size = atom.size;
1001
    avio_read(pb, st->codec->extradata, atom.size);
1002 1003 1004
    return 0;
}

M
Martin Storsjö 已提交
1005 1006 1007 1008 1009 1010 1011 1012 1013 1014 1015 1016 1017
static int mov_read_dvc1(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    uint8_t profile_level;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

    if (atom.size >= (1<<28) || atom.size < 7)
        return AVERROR_INVALIDDATA;

    profile_level = avio_r8(pb);
1018
    if ((profile_level & 0xf0) != 0xc0)
M
Martin Storsjö 已提交
1019 1020 1021 1022 1023 1024 1025 1026 1027 1028 1029 1030
        return 0;

    av_free(st->codec->extradata);
    st->codec->extradata = av_mallocz(atom.size - 7 + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = atom.size - 7;
    avio_seek(pb, 6, SEEK_CUR);
    avio_read(pb, st->codec->extradata, st->codec->extradata_size);
    return 0;
}

M
Martin Storsjö 已提交
1031 1032 1033 1034 1035
/**
 * An strf atom is a BITMAPINFOHEADER struct. This struct is 40 bytes itself,
 * but can have extradata appended at the end after the 40 bytes belonging
 * to the struct.
 */
1036
static int mov_read_strf(MOVContext *c, AVIOContext *pb, MOVAtom atom)
M
Martin Storsjö 已提交
1037 1038 1039 1040 1041 1042 1043 1044 1045
{
    AVStream *st;

    if (c->fc->nb_streams < 1)
        return 0;
    if (atom.size <= 40)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];

1046
    if ((uint64_t)atom.size > (1<<30))
1047
        return AVERROR_INVALIDDATA;
M
Martin Storsjö 已提交
1048 1049 1050 1051 1052 1053

    av_free(st->codec->extradata);
    st->codec->extradata = av_mallocz(atom.size - 40 + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = atom.size - 40;
1054
    avio_skip(pb, 40);
1055
    avio_read(pb, st->codec->extradata, atom.size - 40);
M
Martin Storsjö 已提交
1056 1057 1058
    return 0;
}

1059
static int mov_read_stco(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1060
{
1061 1062
    AVStream *st;
    MOVStreamContext *sc;
1063
    unsigned int i, entries;
1064

1065 1066 1067 1068 1069
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1070 1071
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1072

1073
    entries = avio_rb32(pb);
1074

A
Alex Converse 已提交
1075 1076
    if (!entries)
        return 0;
1077
    if (entries >= UINT_MAX/sizeof(int64_t))
1078
        return AVERROR_INVALIDDATA;
1079

B
Baptiste Coudurier 已提交
1080
    sc->chunk_offsets = av_malloc(entries * sizeof(int64_t));
1081
    if (!sc->chunk_offsets)
1082 1083 1084
        return AVERROR(ENOMEM);
    sc->chunk_count = entries;

1085
    if      (atom.type == MKTAG('s','t','c','o'))
1086
        for (i = 0; i < entries && !pb->eof_reached; i++)
1087
            sc->chunk_offsets[i] = avio_rb32(pb);
1088
    else if (atom.type == MKTAG('c','o','6','4'))
1089
        for (i = 0; i < entries && !pb->eof_reached; i++)
1090
            sc->chunk_offsets[i] = avio_rb64(pb);
1091
    else
1092
        return AVERROR_INVALIDDATA;
1093

1094 1095 1096 1097 1098
    sc->chunk_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1099 1100 1101
    return 0;
}

1102 1103 1104 1105
/**
 * Compute codec id for 'lpcm' tag.
 * See CoreAudioTypes and AudioStreamBasicDescription at Apple.
 */
1106
enum AVCodecID ff_mov_get_lpcm_codec_id(int bps, int flags)
1107
{
1108 1109 1110 1111 1112 1113
    /* lpcm flags:
     * 0x1 = float
     * 0x2 = big-endian
     * 0x4 = signed
     */
    return ff_get_pcm_codec_id(bps, flags & 1, flags & 2, flags & 4 ? -1 : 0);
1114 1115
}

1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146
static int mov_codec_id(AVStream *st, uint32_t format)
{
    int id = ff_codec_get_id(ff_codec_movaudio_tags, format);

    if (id <= 0 &&
        ((format & 0xFFFF) == 'm' + ('s' << 8) ||
         (format & 0xFFFF) == 'T' + ('S' << 8)))
        id = ff_codec_get_id(ff_codec_wav_tags, av_bswap32(format) & 0xFFFF);

    if (st->codec->codec_type != AVMEDIA_TYPE_VIDEO && id > 0) {
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
    } else if (st->codec->codec_type != AVMEDIA_TYPE_AUDIO &&
               /* skip old asf mpeg4 tag */
               format && format != MKTAG('m','p','4','s')) {
        id = ff_codec_get_id(ff_codec_movvideo_tags, format);
        if (id <= 0)
            id = ff_codec_get_id(ff_codec_bmp_tags, format);
        if (id > 0)
            st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
        else if (st->codec->codec_type == AVMEDIA_TYPE_DATA) {
            id = ff_codec_get_id(ff_codec_movsubtitle_tags, format);
            if (id > 0)
                st->codec->codec_type = AVMEDIA_TYPE_SUBTITLE;
        }
    }

    st->codec->codec_tag = format;

    return id;
}

1147 1148 1149
static void mov_parse_stsd_video(MOVContext *c, AVIOContext *pb,
                                 AVStream *st, MOVStreamContext *sc)
{
1150
    uint8_t codec_name[32];
1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171
    unsigned int color_depth, len, j;
    int color_greyscale;
    int color_table_id;

    avio_rb16(pb); /* version */
    avio_rb16(pb); /* revision level */
    avio_rb32(pb); /* vendor */
    avio_rb32(pb); /* temporal quality */
    avio_rb32(pb); /* spatial quality */

    st->codec->width  = avio_rb16(pb); /* width */
    st->codec->height = avio_rb16(pb); /* height */

    avio_rb32(pb); /* horiz resolution */
    avio_rb32(pb); /* vert resolution */
    avio_rb32(pb); /* data size, always 0 */
    avio_rb16(pb); /* frames per samples */

    len = avio_r8(pb); /* codec name, pascal string */
    if (len > 31)
        len = 31;
1172
    mov_read_mac_string(c, pb, len, codec_name, sizeof(codec_name));
1173 1174
    if (len < 31)
        avio_skip(pb, 31 - len);
1175 1176 1177 1178

    if (codec_name[0])
        av_dict_set(&st->metadata, "encoder", codec_name, 0);

1179
    /* codec_tag YV12 triggers an UV swap in rawdec.c */
1180
    if (!memcmp(codec_name, "Planar Y'CbCr 8-bit 4:2:0", 25))
1181 1182 1183
        st->codec->codec_tag = MKTAG('I', '4', '2', '0');
    /* Flash Media Server uses tag H263 with Sorenson Spark */
    if (st->codec->codec_tag == MKTAG('H','2','6','3') &&
1184
        !memcmp(codec_name, "Sorenson H263", 13))
1185 1186 1187 1188 1189 1190 1191 1192 1193 1194 1195 1196 1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237 1238 1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257
        st->codec->codec_id = AV_CODEC_ID_FLV1;

    st->codec->bits_per_coded_sample = avio_rb16(pb); /* depth */
    color_table_id = avio_rb16(pb); /* colortable id */
    av_dlog(c->fc, "depth %d, ctab id %d\n",
            st->codec->bits_per_coded_sample, color_table_id);
    /* figure out the palette situation */
    color_depth     = st->codec->bits_per_coded_sample & 0x1F;
    color_greyscale = st->codec->bits_per_coded_sample & 0x20;

    /* if the depth is 2, 4, or 8 bpp, file is palettized */
    if ((color_depth == 2) || (color_depth == 4) || (color_depth == 8)) {
        /* for palette traversal */
        unsigned int color_start, color_count, color_end;
        unsigned char r, g, b;

        if (color_greyscale) {
            int color_index, color_dec;
            /* compute the greyscale palette */
            st->codec->bits_per_coded_sample = color_depth;
            color_count = 1 << color_depth;
            color_index = 255;
            color_dec   = 256 / (color_count - 1);
            for (j = 0; j < color_count; j++) {
                r = g = b = color_index;
                sc->palette[j] = (r << 16) | (g << 8) | (b);
                color_index -= color_dec;
                if (color_index < 0)
                    color_index = 0;
            }
        } else if (color_table_id) {
            const uint8_t *color_table;
            /* if flag bit 3 is set, use the default palette */
            color_count = 1 << color_depth;
            if (color_depth == 2)
                color_table = ff_qt_default_palette_4;
            else if (color_depth == 4)
                color_table = ff_qt_default_palette_16;
            else
                color_table = ff_qt_default_palette_256;

            for (j = 0; j < color_count; j++) {
                r = color_table[j * 3 + 0];
                g = color_table[j * 3 + 1];
                b = color_table[j * 3 + 2];
                sc->palette[j] = (r << 16) | (g << 8) | (b);
            }
        } else {
            /* load the palette from the file */
            color_start = avio_rb32(pb);
            color_count = avio_rb16(pb);
            color_end   = avio_rb16(pb);
            if ((color_start <= 255) && (color_end <= 255)) {
                for (j = color_start; j <= color_end; j++) {
                    /* each R, G, or B component is 16 bits;
                     * only use the top 8 bits; skip alpha bytes
                     * up front */
                    avio_r8(pb);
                    avio_r8(pb);
                    r = avio_r8(pb);
                    avio_r8(pb);
                    g = avio_r8(pb);
                    avio_r8(pb);
                    b = avio_r8(pb);
                    avio_r8(pb);
                    sc->palette[j] = (r << 16) | (g << 8) | (b);
                }
            }
        }
        sc->has_palette = 1;
    }
}

1258 1259 1260 1261 1262 1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273 1274 1275 1276 1277 1278 1279 1280 1281 1282 1283 1284 1285 1286 1287 1288 1289 1290 1291 1292 1293 1294 1295 1296 1297 1298 1299 1300 1301 1302 1303 1304 1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323 1324 1325 1326 1327 1328 1329 1330 1331 1332 1333 1334 1335 1336 1337 1338 1339 1340 1341 1342 1343
static void mov_parse_stsd_audio(MOVContext *c, AVIOContext *pb,
                                 AVStream *st, MOVStreamContext *sc)
{
    int bits_per_sample, flags;
    uint16_t version = avio_rb16(pb);

    avio_rb16(pb); /* revision level */
    avio_rb32(pb); /* vendor */

    st->codec->channels              = avio_rb16(pb); /* channel count */
    st->codec->bits_per_coded_sample = avio_rb16(pb); /* sample size */
    av_dlog(c->fc, "audio channels %d\n", st->codec->channels);

    sc->audio_cid = avio_rb16(pb);
    avio_rb16(pb); /* packet size = 0 */

    st->codec->sample_rate = ((avio_rb32(pb) >> 16));

    // Read QT version 1 fields. In version 0 these do not exist.
    av_dlog(c->fc, "version =%d, isom =%d\n", version, c->isom);
    if (!c->isom) {
        if (version == 1) {
            sc->samples_per_frame = avio_rb32(pb);
            avio_rb32(pb); /* bytes per packet */
            sc->bytes_per_frame = avio_rb32(pb);
            avio_rb32(pb); /* bytes per sample */
        } else if (version == 2) {
            avio_rb32(pb); /* sizeof struct only */
            st->codec->sample_rate = av_int2double(avio_rb64(pb));
            st->codec->channels    = avio_rb32(pb);
            avio_rb32(pb); /* always 0x7F000000 */
            st->codec->bits_per_coded_sample = avio_rb32(pb);

            flags = avio_rb32(pb); /* lpcm format specific flag */
            sc->bytes_per_frame   = avio_rb32(pb);
            sc->samples_per_frame = avio_rb32(pb);
            if (st->codec->codec_tag == MKTAG('l','p','c','m'))
                st->codec->codec_id =
                    ff_mov_get_lpcm_codec_id(st->codec->bits_per_coded_sample,
                                             flags);
        }
    }

    switch (st->codec->codec_id) {
    case AV_CODEC_ID_PCM_S8:
    case AV_CODEC_ID_PCM_U8:
        if (st->codec->bits_per_coded_sample == 16)
            st->codec->codec_id = AV_CODEC_ID_PCM_S16BE;
        break;
    case AV_CODEC_ID_PCM_S16LE:
    case AV_CODEC_ID_PCM_S16BE:
        if (st->codec->bits_per_coded_sample == 8)
            st->codec->codec_id = AV_CODEC_ID_PCM_S8;
        else if (st->codec->bits_per_coded_sample == 24)
            st->codec->codec_id =
                st->codec->codec_id == AV_CODEC_ID_PCM_S16BE ?
                AV_CODEC_ID_PCM_S24BE : AV_CODEC_ID_PCM_S24LE;
        break;
    /* set values for old format before stsd version 1 appeared */
    case AV_CODEC_ID_MACE3:
        sc->samples_per_frame = 6;
        sc->bytes_per_frame   = 2 * st->codec->channels;
        break;
    case AV_CODEC_ID_MACE6:
        sc->samples_per_frame = 6;
        sc->bytes_per_frame   = 1 * st->codec->channels;
        break;
    case AV_CODEC_ID_ADPCM_IMA_QT:
        sc->samples_per_frame = 64;
        sc->bytes_per_frame   = 34 * st->codec->channels;
        break;
    case AV_CODEC_ID_GSM:
        sc->samples_per_frame = 160;
        sc->bytes_per_frame   = 33;
        break;
    default:
        break;
    }

    bits_per_sample = av_get_bits_per_sample(st->codec->codec_id);
    if (bits_per_sample) {
        st->codec->bits_per_coded_sample = bits_per_sample;
        sc->sample_size = (bits_per_sample >> 3) * st->codec->channels;
    }
}

1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357
static void mov_parse_stsd_subtitle(MOVContext *c, AVIOContext *pb,
                                    AVStream *st, MOVStreamContext *sc,
                                    int size)
{
    // ttxt stsd contains display flags, justification, background
    // color, fonts, and default styles, so fake an atom to read it
    MOVAtom fake_atom = { .size = size };
    // mp4s contains a regular esds atom
    if (st->codec->codec_tag != AV_RL32("mp4s"))
        mov_read_glbl(c, pb, fake_atom);
    st->codec->width  = sc->width;
    st->codec->height = sc->height;
}

1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391
static uint32_t yuv_to_rgba(uint32_t ycbcr)
{
    uint8_t r, g, b;
    int y, cb, cr;

    y  = (ycbcr >> 16) & 0xFF;
    cr = (ycbcr >> 8)  & 0xFF;
    cb =  ycbcr        & 0xFF;

    b = av_clip_uint8(1.164 * (y - 16)                      + 2.018 * (cb - 128));
    g = av_clip_uint8(1.164 * (y - 16) - 0.813 * (cr - 128) - 0.391 * (cb - 128));
    r = av_clip_uint8(1.164 * (y - 16) + 1.596 * (cr - 128));

    return (r << 16) | (g << 8) | b;
}

static int mov_rewrite_dvd_sub_extradata(AVStream *st)
{
    char buf[256] = {0};
    uint8_t *src = st->codec->extradata;
    int i;

    if (st->codec->extradata_size != 64)
        return 0;

    if (st->codec->width > 0 &&  st->codec->height > 0)
        snprintf(buf, sizeof(buf), "size: %dx%d\n",
                 st->codec->width, st->codec->height);
    av_strlcat(buf, "palette: ", sizeof(buf));

    for (i = 0; i < 16; i++) {
        uint32_t yuv = AV_RB32(src + i * 4);
        uint32_t rgba = yuv_to_rgba(yuv);

1392
        av_strlcatf(buf, sizeof(buf), "%06"PRIx32"%s", rgba, i != 15 ? ", " : "");
1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408
    }

    if (av_strlcat(buf, "\n", sizeof(buf)) >= sizeof(buf))
        return 0;

    av_freep(&st->codec->extradata);
    st->codec->extradata_size = 0;
    st->codec->extradata = av_mallocz(strlen(buf) + FF_INPUT_BUFFER_PADDING_SIZE);
    if (!st->codec->extradata)
        return AVERROR(ENOMEM);
    st->codec->extradata_size = strlen(buf);
    memcpy(st->codec->extradata, buf, st->codec->extradata_size);

    return 0;
}

L
Luca Barbato 已提交
1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425
static int mov_parse_stsd_data(MOVContext *c, AVIOContext *pb,
                                AVStream *st, MOVStreamContext *sc,
                                int size)
{
    if (st->codec->codec_tag == MKTAG('t','m','c','d')) {
        st->codec->extradata_size = size;
        st->codec->extradata = av_malloc(size + FF_INPUT_BUFFER_PADDING_SIZE);
        if (!st->codec->extradata)
            return AVERROR(ENOMEM);
        avio_read(pb, st->codec->extradata, size);
    } else {
        /* other codec type, just skip (rtp, mp4s ...) */
        avio_skip(pb, size);
    }
    return 0;
}

1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489
static int mov_finalize_stsd_codec(MOVContext *c, AVIOContext *pb,
                                   AVStream *st, MOVStreamContext *sc)
{
    if (st->codec->codec_type == AVMEDIA_TYPE_AUDIO &&
        !st->codec->sample_rate && sc->time_scale > 1)
        st->codec->sample_rate = sc->time_scale;

    /* special codec parameters handling */
    switch (st->codec->codec_id) {
#if CONFIG_DV_DEMUXER
    case AV_CODEC_ID_DVAUDIO:
        c->dv_fctx  = avformat_alloc_context();
        c->dv_demux = avpriv_dv_init_demux(c->dv_fctx);
        if (!c->dv_demux) {
            av_log(c->fc, AV_LOG_ERROR, "dv demux context init error\n");
            return AVERROR(ENOMEM);
        }
        sc->dv_audio_container = 1;
        st->codec->codec_id    = AV_CODEC_ID_PCM_S16LE;
        break;
#endif
    /* no ifdef since parameters are always those */
    case AV_CODEC_ID_QCELP:
        st->codec->channels = 1;
        // force sample rate for qcelp when not stored in mov
        if (st->codec->codec_tag != MKTAG('Q','c','l','p'))
            st->codec->sample_rate = 8000;
        break;
    case AV_CODEC_ID_AMR_NB:
        st->codec->channels    = 1;
        /* force sample rate for amr, stsd in 3gp does not store sample rate */
        st->codec->sample_rate = 8000;
        break;
    case AV_CODEC_ID_AMR_WB:
        st->codec->channels    = 1;
        st->codec->sample_rate = 16000;
        break;
    case AV_CODEC_ID_MP2:
    case AV_CODEC_ID_MP3:
        /* force type after stsd for m1a hdlr */
        st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
        st->need_parsing      = AVSTREAM_PARSE_FULL;
        break;
    case AV_CODEC_ID_GSM:
    case AV_CODEC_ID_ADPCM_MS:
    case AV_CODEC_ID_ADPCM_IMA_WAV:
    case AV_CODEC_ID_ILBC:
        st->codec->block_align = sc->bytes_per_frame;
        break;
    case AV_CODEC_ID_ALAC:
        if (st->codec->extradata_size == 36) {
            st->codec->channels    = AV_RB8 (st->codec->extradata + 21);
            st->codec->sample_rate = AV_RB32(st->codec->extradata + 32);
        }
        break;
    case AV_CODEC_ID_VC1:
        st->need_parsing = AVSTREAM_PARSE_FULL;
        break;
    default:
        break;
    }
    return 0;
}

1490 1491 1492 1493 1494 1495 1496 1497
static int mov_skip_multiple_stsd(MOVContext *c, AVIOContext *pb,
                                  int codec_tag, int format,
                                  int size)
{
    int video_codec_id = ff_codec_get_id(ff_codec_movvideo_tags, format);

    if (codec_tag &&
        (codec_tag == AV_RL32("avc1") ||
Y
Yusuke Nakamura 已提交
1498 1499
         codec_tag == AV_RL32("hvc1") ||
         codec_tag == AV_RL32("hev1") ||
1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514
         (codec_tag != format &&
          (c->fc->video_codec_id ? video_codec_id != c->fc->video_codec_id
                                 : codec_tag != MKTAG('j','p','e','g'))))) {
        /* Multiple fourcc, we skip JPEG. This is not correct, we should
         * export it as a separate AVStream but this needs a few changes
         * in the MOV demuxer, patch welcome. */

        av_log(c->fc, AV_LOG_WARNING, "multiple fourcc not supported\n");
        avio_skip(pb, size);
        return 1;
    }

    return 0;
}

1515
int ff_mov_read_stsd_entries(MOVContext *c, AVIOContext *pb, int entries)
1516
{
1517 1518
    AVStream *st;
    MOVStreamContext *sc;
1519
    int pseudo_stream_id;
1520

1521 1522 1523 1524 1525
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1526 1527 1528
    for (pseudo_stream_id = 0;
         pseudo_stream_id < entries && !pb->eof_reached;
         pseudo_stream_id++) {
1529
        //Parsing Sample description table
1530
        enum AVCodecID id;
L
Luca Barbato 已提交
1531
        int ret, dref_id = 1;
1532
        MOVAtom a = { AV_RL32("stsd") };
1533
        int64_t start_pos = avio_tell(pb);
1534
        uint32_t size = avio_rb32(pb); /* size */
1535
        uint32_t format = avio_rl32(pb); /* data format */
1536

1537
        if (size >= 16) {
1538 1539 1540
            avio_rb32(pb); /* reserved */
            avio_rb16(pb); /* reserved */
            dref_id = avio_rb16(pb);
1541
        } else {
1542
            av_log(c->fc, AV_LOG_ERROR, "invalid size %"PRIu32" in stsd\n", size);
1543
            return AVERROR_INVALIDDATA;
1544
        }
1545

1546 1547
        if (mov_skip_multiple_stsd(c, pb, st->codec->codec_tag, format,
                                   size - (avio_tell(pb) - start_pos)))
1548
            continue;
1549

1550
        sc->pseudo_stream_id = st->codec->codec_tag ? -1 : pseudo_stream_id;
1551
        sc->dref_id= dref_id;
1552

1553
        id = mov_codec_id(st, format);
1554

1555
        av_dlog(c->fc, "size=%"PRIu32" 4CC= %"PRIu8"%"PRIu8"%"PRIu8"%"PRIu8" codec_type=%d\n", size,
1556 1557
                (format >> 0) & 0xff, (format >> 8) & 0xff, (format >> 16) & 0xff,
                (format >> 24) & 0xff, st->codec->codec_type);
1558

1559
        if (st->codec->codec_type==AVMEDIA_TYPE_VIDEO) {
1560
            st->codec->codec_id = id;
1561
            mov_parse_stsd_video(c, pb, st, sc);
1562
        } else if (st->codec->codec_type==AVMEDIA_TYPE_AUDIO) {
1563
            st->codec->codec_id = id;
1564
            mov_parse_stsd_audio(c, pb, st, sc);
1565
        } else if (st->codec->codec_type==AVMEDIA_TYPE_SUBTITLE){
1566 1567 1568
            st->codec->codec_id = id;
            mov_parse_stsd_subtitle(c, pb, st, sc,
                                    size - (avio_tell(pb) - start_pos));
1569
        } else {
L
Luca Barbato 已提交
1570 1571 1572 1573
            ret = mov_parse_stsd_data(c, pb, st, sc,
                                      size - (avio_tell(pb) - start_pos));
            if (ret < 0)
                return ret;
1574
        }
Y
Yusuke Nakamura 已提交
1575
        /* this will read extra atoms at the end (wave, alac, damr, avcC, hvcC, SMI ...) */
1576
        a.size = size - (avio_tell(pb) - start_pos);
1577
        if (a.size > 8) {
1578 1579
            if ((ret = mov_read_default(c, pb, a)) < 0)
                return ret;
1580
        } else if (a.size > 0)
1581
            avio_skip(pb, a.size);
1582
    }
1583

1584 1585 1586
    if (pb->eof_reached)
        return AVERROR_EOF;

1587
    return mov_finalize_stsd_codec(c, pb, st, sc);
1588 1589
}

1590
static int mov_read_stsd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1591 1592 1593
{
    int entries;

1594 1595 1596
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1597 1598 1599 1600

    return ff_mov_read_stsd_entries(c, pb, entries);
}

1601
static int mov_read_stsc(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1602
{
1603 1604
    AVStream *st;
    MOVStreamContext *sc;
1605
    unsigned int i, entries;
1606

1607 1608 1609 1610 1611
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1612 1613
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1614

1615
    entries = avio_rb32(pb);
1616

L
Luca Barbato 已提交
1617
    av_dlog(c->fc, "track[%i].stsc.entries = %i\n", c->fc->nb_streams-1, entries);
1618

A
Alex Converse 已提交
1619 1620
    if (!entries)
        return 0;
1621
    if (entries >= UINT_MAX / sizeof(*sc->stsc_data))
1622
        return AVERROR_INVALIDDATA;
1623 1624
    sc->stsc_data = av_malloc(entries * sizeof(*sc->stsc_data));
    if (!sc->stsc_data)
1625 1626
        return AVERROR(ENOMEM);

1627
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1628 1629 1630
        sc->stsc_data[i].first = avio_rb32(pb);
        sc->stsc_data[i].count = avio_rb32(pb);
        sc->stsc_data[i].id = avio_rb32(pb);
1631
    }
1632 1633 1634 1635 1636 1637

    sc->stsc_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1638 1639 1640
    return 0;
}

1641
static int mov_read_stps(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1642 1643 1644 1645 1646 1647 1648 1649 1650 1651
{
    AVStream *st;
    MOVStreamContext *sc;
    unsigned i, entries;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1652
    avio_rb32(pb); // version + flags
1653

1654
    entries = avio_rb32(pb);
1655
    if (entries >= UINT_MAX / sizeof(*sc->stps_data))
1656
        return AVERROR_INVALIDDATA;
1657 1658 1659 1660
    sc->stps_data = av_malloc(entries * sizeof(*sc->stps_data));
    if (!sc->stps_data)
        return AVERROR(ENOMEM);

1661
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1662
        sc->stps_data[i] = avio_rb32(pb);
L
Luca Barbato 已提交
1663
        //av_dlog(c->fc, "stps %d\n", sc->stps_data[i]);
1664 1665
    }

1666 1667 1668 1669 1670
    sc->stps_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1671 1672 1673
    return 0;
}

1674
static int mov_read_stss(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1675
{
1676 1677
    AVStream *st;
    MOVStreamContext *sc;
1678
    unsigned int i, entries;
1679

1680 1681 1682 1683 1684
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1685 1686
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1687

1688
    entries = avio_rb32(pb);
1689

L
Luca Barbato 已提交
1690
    av_dlog(c->fc, "keyframe_count = %d\n", entries);
1691

1692
    if (!entries)
1693 1694
    {
        sc->keyframe_absent = 1;
1695
        return 0;
1696
    }
1697
    if (entries >= UINT_MAX / sizeof(int))
1698
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
1699
    sc->keyframes = av_malloc(entries * sizeof(int));
1700
    if (!sc->keyframes)
1701 1702
        return AVERROR(ENOMEM);

1703
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1704
        sc->keyframes[i] = avio_rb32(pb);
L
Luca Barbato 已提交
1705
        //av_dlog(c->fc, "keyframes[]=%d\n", sc->keyframes[i]);
1706
    }
1707 1708 1709 1710 1711 1712

    sc->keyframe_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1713 1714 1715
    return 0;
}

1716
static int mov_read_stsz(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1717
{
1718 1719
    AVStream *st;
    MOVStreamContext *sc;
1720 1721 1722
    unsigned int i, entries, sample_size, field_size, num_bytes;
    GetBitContext gb;
    unsigned char* buf;
1723

1724 1725 1726 1727 1728
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1729 1730
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
1731

1732
    if (atom.type == MKTAG('s','t','s','z')) {
1733
        sample_size = avio_rb32(pb);
1734 1735 1736
        if (!sc->sample_size) /* do not overwrite value computed in stsd */
            sc->sample_size = sample_size;
        field_size = 32;
1737 1738
    } else {
        sample_size = 0;
1739 1740
        avio_rb24(pb); /* reserved */
        field_size = avio_r8(pb);
1741
    }
1742
    entries = avio_rb32(pb);
1743

L
Luca Barbato 已提交
1744
    av_dlog(c->fc, "sample_size = %d sample_count = %d\n", sc->sample_size, entries);
1745

1746
    sc->sample_count = entries;
1747 1748 1749
    if (sample_size)
        return 0;

1750 1751
    if (field_size != 4 && field_size != 8 && field_size != 16 && field_size != 32) {
        av_log(c->fc, AV_LOG_ERROR, "Invalid sample field size %d\n", field_size);
1752
        return AVERROR_INVALIDDATA;
1753 1754
    }

A
Alex Converse 已提交
1755 1756
    if (!entries)
        return 0;
1757
    if (entries >= UINT_MAX / sizeof(int) || entries >= (UINT_MAX - 4) / field_size)
1758
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
1759
    sc->sample_sizes = av_malloc(entries * sizeof(int));
1760
    if (!sc->sample_sizes)
1761 1762
        return AVERROR(ENOMEM);

1763 1764
    num_bytes = (entries*field_size+4)>>3;

1765
    buf = av_malloc(num_bytes+FF_INPUT_BUFFER_PADDING_SIZE);
1766 1767 1768 1769 1770
    if (!buf) {
        av_freep(&sc->sample_sizes);
        return AVERROR(ENOMEM);
    }

1771
    if (avio_read(pb, buf, num_bytes) < num_bytes) {
1772 1773
        av_freep(&sc->sample_sizes);
        av_free(buf);
1774
        return AVERROR_INVALIDDATA;
1775 1776 1777 1778
    }

    init_get_bits(&gb, buf, 8*num_bytes);

1779
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1780
        sc->sample_sizes[i] = get_bits_long(&gb, field_size);
1781 1782
        sc->data_size += sc->sample_sizes[i];
    }
1783

1784 1785 1786 1787 1788
    sc->sample_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1789
    av_free(buf);
1790 1791 1792
    return 0;
}

1793
static int mov_read_stts(MOVContext *c, AVIOContext *pb, MOVAtom atom)
1794
{
1795 1796
    AVStream *st;
    MOVStreamContext *sc;
1797
    unsigned int i, entries;
1798 1799
    int64_t duration=0;
    int64_t total_sample_count=0;
1800

1801 1802 1803 1804 1805
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1806 1807 1808
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1809

1810 1811
    av_dlog(c->fc, "track[%i].stts.entries = %i\n",
            c->fc->nb_streams-1, entries);
1812

A
Alex Converse 已提交
1813 1814 1815
    if (!entries)
        return 0;
    if (entries >= UINT_MAX / sizeof(*sc->stts_data))
L
Luca Barbato 已提交
1816
        return AVERROR(EINVAL);
1817

1818
    av_free(sc->stts_data);
1819
    sc->stts_data = av_malloc(entries * sizeof(*sc->stts_data));
1820
    if (!sc->stts_data)
1821
        return AVERROR(ENOMEM);
1822

1823
    for (i = 0; i < entries && !pb->eof_reached; i++) {
M
cleanup  
Michael Niedermayer 已提交
1824 1825
        int sample_duration;
        int sample_count;
1826

1827 1828
        sample_count=avio_rb32(pb);
        sample_duration = avio_rb32(pb);
1829 1830 1831 1832
        if (sample_count < 0) {
            av_log(c->fc, AV_LOG_ERROR, "Invalid sample_count=%d\n", sample_count);
            return AVERROR_INVALIDDATA;
        }
1833 1834 1835
        sc->stts_data[i].count= sample_count;
        sc->stts_data[i].duration= sample_duration;

1836 1837
        av_dlog(c->fc, "sample_count=%d, sample_duration=%d\n",
                sample_count, sample_duration);
1838

B
Baptiste Coudurier 已提交
1839
        duration+=(int64_t)sample_duration*sample_count;
1840 1841 1842
        total_sample_count+=sample_count;
    }

1843 1844 1845 1846 1847
    sc->stts_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

1848
    st->nb_frames= total_sample_count;
1849
    if (duration)
1850
        st->duration= duration;
1851
    sc->track_end = duration;
1852 1853 1854
    return 0;
}

1855
static int mov_read_ctts(MOVContext *c, AVIOContext *pb, MOVAtom atom)
M
Michael Niedermayer 已提交
1856
{
1857 1858
    AVStream *st;
    MOVStreamContext *sc;
M
Michael Niedermayer 已提交
1859 1860
    unsigned int i, entries;

1861 1862 1863 1864 1865
    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

1866 1867 1868
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    entries = avio_rb32(pb);
1869

L
Luca Barbato 已提交
1870
    av_dlog(c->fc, "track[%i].ctts.entries = %i\n", c->fc->nb_streams-1, entries);
1871

A
Alex Converse 已提交
1872 1873
    if (!entries)
        return 0;
1874
    if (entries >= UINT_MAX / sizeof(*sc->ctts_data))
1875
        return AVERROR_INVALIDDATA;
1876
    sc->ctts_data = av_malloc(entries * sizeof(*sc->ctts_data));
1877
    if (!sc->ctts_data)
1878
        return AVERROR(ENOMEM);
1879

1880
    for (i = 0; i < entries && !pb->eof_reached; i++) {
1881 1882
        int count    =avio_rb32(pb);
        int duration =avio_rb32(pb);
1883 1884 1885

        sc->ctts_data[i].count   = count;
        sc->ctts_data[i].duration= duration;
1886 1887
        if (duration < 0)
            sc->dts_shift = FFMAX(sc->dts_shift, -duration);
M
Michael Niedermayer 已提交
1888
    }
1889

1890 1891 1892 1893 1894
    sc->ctts_count = i;

    if (pb->eof_reached)
        return AVERROR_EOF;

L
Luca Barbato 已提交
1895
    av_dlog(c->fc, "dts shift %d\n", sc->dts_shift);
1896

M
Michael Niedermayer 已提交
1897 1898 1899
    return 0;
}

1900 1901 1902 1903 1904 1905 1906 1907 1908 1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925 1926 1927 1928 1929 1930 1931 1932 1933 1934 1935 1936 1937 1938 1939
static int mov_read_sbgp(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    AVStream *st;
    MOVStreamContext *sc;
    unsigned int i, entries;
    uint8_t version;
    uint32_t grouping_type;

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;

    version = avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    grouping_type = avio_rl32(pb);
    if (grouping_type != MKTAG( 'r','a','p',' '))
        return 0; /* only support 'rap ' grouping */
    if (version == 1)
        avio_rb32(pb); /* grouping_type_parameter */

    entries = avio_rb32(pb);
    if (!entries)
        return 0;
    if (entries >= UINT_MAX / sizeof(*sc->rap_group))
        return AVERROR_INVALIDDATA;
    sc->rap_group = av_malloc(entries * sizeof(*sc->rap_group));
    if (!sc->rap_group)
        return AVERROR(ENOMEM);

    for (i = 0; i < entries && !pb->eof_reached; i++) {
        sc->rap_group[i].count = avio_rb32(pb); /* sample_count */
        sc->rap_group[i].index = avio_rb32(pb); /* group_description_index */
    }

    sc->rap_group_count = i;

    return pb->eof_reached ? AVERROR_EOF : 0;
}

1940 1941 1942
static void mov_build_index(MOVContext *mov, AVStream *st)
{
    MOVStreamContext *sc = st->priv_data;
1943
    int64_t current_offset;
1944 1945 1946 1947
    int64_t current_dts = 0;
    unsigned int stts_index = 0;
    unsigned int stsc_index = 0;
    unsigned int stss_index = 0;
1948
    unsigned int stps_index = 0;
1949
    unsigned int i, j;
1950
    uint64_t stream_size = 0;
1951

1952
    /* adjust first dts according to edit list */
1953
    if (sc->time_offset && mov->time_scale > 0) {
1954 1955 1956
        if (sc->time_offset < 0)
            sc->time_offset = av_rescale(sc->time_offset, sc->time_scale, mov->time_scale);
        current_dts = -sc->time_offset;
1957
        if (sc->ctts_data && sc->stts_data && sc->stts_data[0].duration &&
1958
            sc->ctts_data[0].duration / sc->stts_data[0].duration > 16) {
1959 1960 1961 1962 1963
            /* more than 16 frames delay, dts are likely wrong
               this happens with files created by iMovie */
            sc->wrong_dts = 1;
            st->codec->has_b_frames = 1;
        }
1964 1965
    }

1966
    /* only use old uncompressed audio chunk demuxing when stts specifies it */
1967
    if (!(st->codec->codec_type == AVMEDIA_TYPE_AUDIO &&
1968
          sc->stts_count == 1 && sc->stts_data[0].duration == 1)) {
1969 1970
        unsigned int current_sample = 0;
        unsigned int stts_sample = 0;
1971
        unsigned int sample_size;
1972
        unsigned int distance = 0;
1973 1974 1975
        unsigned int rap_group_index = 0;
        unsigned int rap_group_sample = 0;
        int rap_group_present = sc->rap_group_count && sc->rap_group;
1976
        int key_off = (sc->keyframes && sc->keyframes[0] > 0) || (sc->stps_data && sc->stps_data[0] > 0);
1977

1978 1979
        current_dts -= sc->dts_shift;

A
Alex Converse 已提交
1980 1981
        if (!sc->sample_count)
            return;
1982
        if (sc->sample_count >= UINT_MAX / sizeof(*st->index_entries) - st->nb_index_entries)
1983
            return;
1984 1985 1986 1987
        if (av_reallocp_array(&st->index_entries,
                              st->nb_index_entries + sc->sample_count,
                              sizeof(*st->index_entries)) < 0) {
            st->nb_index_entries = 0;
1988
            return;
1989
        }
1990
        st->index_entries_allocated_size = (st->nb_index_entries + sc->sample_count) * sizeof(*st->index_entries);
1991

1992 1993
        for (i = 0; i < sc->chunk_count; i++) {
            current_offset = sc->chunk_offsets[i];
1994
            while (stsc_index + 1 < sc->stsc_count &&
1995
                i + 1 == sc->stsc_data[stsc_index + 1].first)
1996
                stsc_index++;
1997
            for (j = 0; j < sc->stsc_data[stsc_index].count; j++) {
1998
                int keyframe = 0;
1999 2000
                if (current_sample >= sc->sample_count) {
                    av_log(mov->fc, AV_LOG_ERROR, "wrong sample count\n");
2001
                    return;
2002
                }
2003

2004
                if (!sc->keyframe_absent && (!sc->keyframe_count || current_sample+key_off == sc->keyframes[stss_index])) {
2005
                    keyframe = 1;
2006 2007
                    if (stss_index + 1 < sc->keyframe_count)
                        stss_index++;
2008 2009 2010 2011
                } else if (sc->stps_count && current_sample+key_off == sc->stps_data[stps_index]) {
                    keyframe = 1;
                    if (stps_index + 1 < sc->stps_count)
                        stps_index++;
2012
                }
2013 2014 2015 2016 2017 2018 2019 2020
                if (rap_group_present && rap_group_index < sc->rap_group_count) {
                    if (sc->rap_group[rap_group_index].index > 0)
                        keyframe = 1;
                    if (++rap_group_sample == sc->rap_group[rap_group_index].count) {
                        rap_group_sample = 0;
                        rap_group_index++;
                    }
                }
2021 2022
                if (keyframe)
                    distance = 0;
2023
                sample_size = sc->sample_size > 0 ? sc->sample_size : sc->sample_sizes[current_sample];
2024
                if (sc->pseudo_stream_id == -1 ||
2025
                   sc->stsc_data[stsc_index].id - 1 == sc->pseudo_stream_id) {
2026 2027 2028 2029 2030 2031
                    AVIndexEntry *e = &st->index_entries[st->nb_index_entries++];
                    e->pos = current_offset;
                    e->timestamp = current_dts;
                    e->size = sample_size;
                    e->min_distance = distance;
                    e->flags = keyframe ? AVINDEX_KEYFRAME : 0;
L
Luca Barbato 已提交
2032
                    av_dlog(mov->fc, "AVIndex stream %d, sample %d, offset %"PRIx64", dts %"PRId64", "
2033 2034 2035
                            "size %d, distance %d, keyframe %d\n", st->index, current_sample,
                            current_offset, current_dts, sample_size, distance, keyframe);
                }
2036

2037
                current_offset += sample_size;
2038
                stream_size += sample_size;
2039
                current_dts += sc->stts_data[stts_index].duration;
2040 2041 2042 2043 2044 2045 2046 2047 2048
                distance++;
                stts_sample++;
                current_sample++;
                if (stts_index + 1 < sc->stts_count && stts_sample == sc->stts_data[stts_index].count) {
                    stts_sample = 0;
                    stts_index++;
                }
            }
        }
2049 2050
        if (st->duration > 0)
            st->codec->bit_rate = stream_size*8*sc->time_scale/st->duration;
2051
    } else {
2052
        unsigned chunk_samples, total = 0;
2053

2054 2055 2056
        // compute total chunk count
        for (i = 0; i < sc->stsc_count; i++) {
            unsigned count, chunk_count;
2057

2058
            chunk_samples = sc->stsc_data[i].count;
2059 2060
            if (i != sc->stsc_count - 1 &&
                sc->samples_per_frame && chunk_samples % sc->samples_per_frame) {
2061 2062 2063 2064
                av_log(mov->fc, AV_LOG_ERROR, "error unaligned chunk\n");
                return;
            }

2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076 2077 2078 2079 2080
            if (sc->samples_per_frame >= 160) { // gsm
                count = chunk_samples / sc->samples_per_frame;
            } else if (sc->samples_per_frame > 1) {
                unsigned samples = (1024/sc->samples_per_frame)*sc->samples_per_frame;
                count = (chunk_samples+samples-1) / samples;
            } else {
                count = (chunk_samples+1023) / 1024;
            }

            if (i < sc->stsc_count - 1)
                chunk_count = sc->stsc_data[i+1].first - sc->stsc_data[i].first;
            else
                chunk_count = sc->chunk_count - (sc->stsc_data[i].first - 1);
            total += chunk_count * count;
        }

L
Luca Barbato 已提交
2081
        av_dlog(mov->fc, "chunk count %d\n", total);
2082
        if (total >= UINT_MAX / sizeof(*st->index_entries) - st->nb_index_entries)
2083
            return;
2084 2085 2086 2087
        if (av_reallocp_array(&st->index_entries,
                              st->nb_index_entries + total,
                              sizeof(*st->index_entries)) < 0) {
            st->nb_index_entries = 0;
2088
            return;
2089
        }
2090
        st->index_entries_allocated_size = (st->nb_index_entries + total) * sizeof(*st->index_entries);
2091 2092 2093 2094 2095 2096 2097 2098 2099

        // populate index
        for (i = 0; i < sc->chunk_count; i++) {
            current_offset = sc->chunk_offsets[i];
            if (stsc_index + 1 < sc->stsc_count &&
                i + 1 == sc->stsc_data[stsc_index + 1].first)
                stsc_index++;
            chunk_samples = sc->stsc_data[stsc_index].count;

2100
            while (chunk_samples > 0) {
2101
                AVIndexEntry *e;
2102 2103 2104 2105 2106 2107 2108 2109 2110 2111
                unsigned size, samples;

                if (sc->samples_per_frame >= 160) { // gsm
                    samples = sc->samples_per_frame;
                    size = sc->bytes_per_frame;
                } else {
                    if (sc->samples_per_frame > 1) {
                        samples = FFMIN((1024 / sc->samples_per_frame)*
                                        sc->samples_per_frame, chunk_samples);
                        size = (samples / sc->samples_per_frame) * sc->bytes_per_frame;
2112
                    } else {
2113 2114
                        samples = FFMIN(1024, chunk_samples);
                        size = samples * sc->sample_size;
2115 2116
                    }
                }
2117

2118 2119 2120 2121 2122 2123 2124 2125 2126 2127
                if (st->nb_index_entries >= total) {
                    av_log(mov->fc, AV_LOG_ERROR, "wrong chunk count %d\n", total);
                    return;
                }
                e = &st->index_entries[st->nb_index_entries++];
                e->pos = current_offset;
                e->timestamp = current_dts;
                e->size = size;
                e->min_distance = 0;
                e->flags = AVINDEX_KEYFRAME;
L
Luca Barbato 已提交
2128
                av_dlog(mov->fc, "AVIndex stream %d, chunk %d, offset %"PRIx64", dts %"PRId64", "
2129
                        "size %d, duration %d\n", st->index, i, current_offset, current_dts,
2130 2131 2132
                        size, samples);

                current_offset += size;
2133
                current_dts += samples;
2134
                chunk_samples -= samples;
2135 2136 2137 2138
            }
        }
    }
}
2139

2140 2141
static int mov_open_dref(AVIOContext **pb, char *src, MOVDref *ref,
                         AVIOInterruptCB *int_cb)
2142
{
2143 2144
    /* try relative path, we do not try the absolute because it can leak information about our
       system to an attacker */
2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 2161 2162 2163 2164 2165 2166
    if (ref->nlvl_to > 0 && ref->nlvl_from > 0) {
        char filename[1024];
        char *src_path;
        int i, l;

        /* find a source dir */
        src_path = strrchr(src, '/');
        if (src_path)
            src_path++;
        else
            src_path = src;

        /* find a next level down to target */
        for (i = 0, l = strlen(ref->path) - 1; l >= 0; l--)
            if (ref->path[l] == '/') {
                if (i == ref->nlvl_to - 1)
                    break;
                else
                    i++;
            }

        /* compose filename if next level down to target was found */
2167
        if (i == ref->nlvl_to - 1 && src_path - src  < sizeof(filename)) {
2168 2169 2170 2171 2172 2173 2174 2175
            memcpy(filename, src, src_path - src);
            filename[src_path - src] = 0;

            for (i = 1; i < ref->nlvl_from; i++)
                av_strlcat(filename, "../", 1024);

            av_strlcat(filename, ref->path + l + 1, 1024);

2176
            if (!avio_open2(pb, filename, AVIO_FLAG_READ, int_cb, NULL))
2177 2178 2179 2180 2181
                return 0;
        }
    }

    return AVERROR(ENOENT);
M
Mans Rullgard 已提交
2182
}
2183

2184
static int mov_read_trak(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2185 2186 2187
{
    AVStream *st;
    MOVStreamContext *sc;
2188
    int ret;
2189

2190
    st = avformat_new_stream(c->fc, NULL);
B
Baptiste Coudurier 已提交
2191
    if (!st) return AVERROR(ENOMEM);
2192
    st->id = c->fc->nb_streams;
B
Baptiste Coudurier 已提交
2193
    sc = av_mallocz(sizeof(MOVStreamContext));
2194
    if (!sc) return AVERROR(ENOMEM);
2195 2196

    st->priv_data = sc;
2197
    st->codec->codec_type = AVMEDIA_TYPE_DATA;
2198
    sc->ffindex = st->index;
2199

2200 2201 2202 2203
    if ((ret = mov_read_default(c, pb, atom)) < 0)
        return ret;

    /* sanity checks */
2204 2205
    if (sc->chunk_count && (!sc->stts_count || !sc->stsc_count ||
                            (!sc->sample_size && !sc->sample_count))) {
2206 2207
        av_log(c->fc, AV_LOG_ERROR, "stream %d, missing mandatory atoms, broken header\n",
               st->index);
2208 2209
        return 0;
    }
2210

2211
    if (sc->time_scale <= 0) {
2212
        av_log(c->fc, AV_LOG_WARNING, "stream %d, timescale not set\n", st->index);
2213
        sc->time_scale = c->time_scale;
2214
        if (sc->time_scale <= 0)
2215 2216
            sc->time_scale = 1;
    }
2217

2218
    avpriv_set_pts_info(st, 64, 1, sc->time_scale);
2219 2220 2221 2222

    mov_build_index(c, st);

    if (sc->dref_id-1 < sc->drefs_count && sc->drefs[sc->dref_id-1].path) {
2223
        MOVDref *dref = &sc->drefs[sc->dref_id - 1];
2224
        if (mov_open_dref(&sc->pb, c->fc->filename, dref, &c->fc->interrupt_callback) < 0)
2225 2226 2227 2228 2229
            av_log(c->fc, AV_LOG_ERROR,
                   "stream %d, error opening alias: path='%s', dir='%s', "
                   "filename='%s', volume='%s', nlvl_from=%d, nlvl_to=%d\n",
                   st->index, dref->path, dref->dir, dref->filename,
                   dref->volume, dref->nlvl_from, dref->nlvl_to);
2230 2231 2232
    } else
        sc->pb = c->fc->pb;

2233
    if (st->codec->codec_type == AVMEDIA_TYPE_VIDEO) {
2234 2235 2236 2237
        if (!st->sample_aspect_ratio.num &&
            (st->codec->width != sc->width || st->codec->height != sc->height)) {
            st->sample_aspect_ratio = av_d2q(((double)st->codec->height * sc->width) /
                                             ((double)st->codec->width * sc->height), INT_MAX);
2238
        }
2239 2240
    }

2241 2242 2243 2244 2245 2246 2247 2248
    // done for ai5q, ai52, ai55, ai1q, ai12 and ai15.
    if (!st->codec->extradata_size && st->codec->codec_id == AV_CODEC_ID_H264 &&
        TAG_IS_AVCI(st->codec->codec_tag)) {
        ret = ff_generate_avci_extradata(st);
        if (ret < 0)
            return ret;
    }

2249
    switch (st->codec->codec_id) {
2250
#if CONFIG_H261_DECODER
2251
    case AV_CODEC_ID_H261:
2252
#endif
2253
#if CONFIG_H263_DECODER
2254
    case AV_CODEC_ID_H263:
2255
#endif
2256
#if CONFIG_MPEG4_DECODER
2257
    case AV_CODEC_ID_MPEG4:
2258
#endif
2259
        st->codec->width = 0; /* let decoder init width/height */
2260 2261 2262
        st->codec->height= 0;
        break;
    }
B
Baptiste Coudurier 已提交
2263 2264 2265

    /* Do not need those anymore. */
    av_freep(&sc->chunk_offsets);
2266
    av_freep(&sc->stsc_data);
B
Baptiste Coudurier 已提交
2267 2268 2269
    av_freep(&sc->sample_sizes);
    av_freep(&sc->keyframes);
    av_freep(&sc->stts_data);
2270
    av_freep(&sc->stps_data);
2271
    av_freep(&sc->rap_group);
B
Baptiste Coudurier 已提交
2272

2273
    return 0;
2274 2275
}

2276
static int mov_read_ilst(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2277 2278 2279 2280 2281 2282 2283 2284
{
    int ret;
    c->itunes_metadata = 1;
    ret = mov_read_default(c, pb, atom);
    c->itunes_metadata = 0;
    return ret;
}

2285 2286 2287 2288 2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300 2301 2302 2303 2304 2305 2306 2307 2308 2309 2310 2311 2312 2313 2314 2315 2316 2317 2318 2319 2320 2321 2322 2323 2324 2325 2326 2327 2328 2329 2330 2331 2332 2333 2334 2335 2336 2337 2338 2339 2340 2341 2342 2343 2344 2345 2346 2347 2348 2349 2350 2351 2352 2353 2354 2355 2356 2357 2358 2359 2360 2361 2362 2363 2364 2365 2366
static int mov_read_replaygain(MOVContext *c, AVIOContext *pb, int size)
{
    int64_t end = avio_tell(pb) + size;
    uint8_t *key = NULL, *val = NULL;
    int i;

    for (i = 0; i < 2; i++) {
        uint8_t **p;
        uint32_t len, tag;

        if (end - avio_tell(pb) <= 12)
            break;

        len = avio_rb32(pb);
        tag = avio_rl32(pb);
        avio_skip(pb, 4); // flags

        if (len < 12 || len - 12 > end - avio_tell(pb))
            break;
        len -= 12;

        if (tag == MKTAG('n', 'a', 'm', 'e'))
            p = &key;
        else if (tag == MKTAG('d', 'a', 't', 'a') && len > 4) {
            avio_skip(pb, 4);
            len -= 4;
            p = &val;
        } else
            break;

        *p = av_malloc(len + 1);
        if (!*p)
            break;
        avio_read(pb, *p, len);
        (*p)[len] = 0;
    }

    if (key && val) {
        av_dict_set(&c->fc->metadata, key, val,
                    AV_DICT_DONT_STRDUP_KEY | AV_DICT_DONT_STRDUP_VAL);
        key = val = NULL;
    }

    avio_seek(pb, end, SEEK_SET);
    av_freep(&key);
    av_freep(&val);
    return 0;
}

static int mov_read_custom(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int64_t end = avio_tell(pb) + atom.size;
    uint32_t tag, len;

    if (atom.size < 8)
        goto fail;

    len = avio_rb32(pb);
    tag = avio_rl32(pb);

    if (len > atom.size)
        goto fail;

    if (tag == MKTAG('m', 'e', 'a', 'n') && len > 12) {
        uint8_t domain[128];
        int domain_len;

        avio_skip(pb, 4); // flags
        len -= 12;

        domain_len = avio_get_str(pb, len, domain, sizeof(domain));
        avio_skip(pb, len - domain_len);
        if (!strcmp(domain, "org.hydrogenaudio.replaygain"))
            return mov_read_replaygain(c, pb, end - avio_tell(pb));
    }

fail:
    av_log(c->fc, AV_LOG_VERBOSE,
           "Unhandled or malformed custom metadata of size %"PRId64"\n", atom.size);
    return 0;
}

2367
static int mov_read_meta(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2368
{
2369
    while (atom.size > 8) {
2370
        uint32_t tag = avio_rl32(pb);
2371 2372
        atom.size -= 4;
        if (tag == MKTAG('h','d','l','r')) {
A
Anton Khirnov 已提交
2373
            avio_seek(pb, -8, SEEK_CUR);
2374 2375 2376 2377 2378
            atom.size += 8;
            return mov_read_default(c, pb, atom);
        }
    }
    return 0;
2379 2380
}

2381
static int mov_read_tkhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2382
{
2383 2384 2385 2386
    int i;
    int width;
    int height;
    int64_t disp_transform[2];
2387
    int display_matrix[3][3];
2388 2389 2390
    AVStream *st;
    MOVStreamContext *sc;
    int version;
2391
    int flags;
2392 2393 2394 2395 2396

    if (c->fc->nb_streams < 1)
        return 0;
    st = c->fc->streams[c->fc->nb_streams-1];
    sc = st->priv_data;
2397

2398
    version = avio_r8(pb);
2399 2400
    flags = avio_rb24(pb);
    st->disposition |= (flags & MOV_TKHD_FLAG_ENABLED) ? AV_DISPOSITION_DEFAULT : 0;
2401

B
Baptiste Coudurier 已提交
2402
    if (version == 1) {
2403 2404
        avio_rb64(pb);
        avio_rb64(pb);
B
Baptiste Coudurier 已提交
2405
    } else {
2406 2407
        avio_rb32(pb); /* creation time */
        avio_rb32(pb); /* modification time */
B
Baptiste Coudurier 已提交
2408
    }
2409 2410
    st->id = (int)avio_rb32(pb); /* track id (NOT 0 !)*/
    avio_rb32(pb); /* reserved */
2411

2412
    /* highlevel (considering edits) duration in movie timebase */
2413 2414 2415
    (version == 1) ? avio_rb64(pb) : avio_rb32(pb);
    avio_rb32(pb); /* reserved */
    avio_rb32(pb); /* reserved */
2416

2417 2418 2419 2420
    avio_rb16(pb); /* layer */
    avio_rb16(pb); /* alternate group */
    avio_rb16(pb); /* volume */
    avio_rb16(pb); /* reserved */
2421

2422 2423
    //read in the display matrix (outlined in ISO 14496-12, Section 6.2.2)
    // they're kept in fixed point format through all calculations
2424 2425
    // save u,v,z to store the whole matrix in the AV_PKT_DATA_DISPLAYMATRIX
    // side data, but the scale factor is not needed to calculate aspect ratio
2426
    for (i = 0; i < 3; i++) {
2427 2428
        display_matrix[i][0] = avio_rb32(pb);   // 16.16 fixed point
        display_matrix[i][1] = avio_rb32(pb);   // 16.16 fixed point
2429
        display_matrix[i][2] = avio_rb32(pb);   //  2.30 fixed point
2430
    }
2431

2432 2433
    width = avio_rb32(pb);       // 16.16 fixed point track width
    height = avio_rb32(pb);      // 16.16 fixed point track height
2434 2435
    sc->width = width >> 16;
    sc->height = height >> 16;
2436

2437 2438 2439 2440 2441 2442 2443 2444 2445 2446 2447 2448 2449 2450 2451 2452 2453 2454 2455
    // save the matrix when it is not the default identity
    if (display_matrix[0][0] != (1 << 16) ||
        display_matrix[1][1] != (1 << 16) ||
        display_matrix[2][2] != (1 << 30) ||
        display_matrix[0][1] || display_matrix[0][2] ||
        display_matrix[1][0] || display_matrix[1][2] ||
        display_matrix[2][0] || display_matrix[2][1]) {
        int i, j;

        av_freep(&sc->display_matrix);
        sc->display_matrix = av_malloc(sizeof(int32_t) * 9);
        if (!sc->display_matrix)
            return AVERROR(ENOMEM);

        for (i = 0; i < 3; i++)
            for (j = 0; j < 3; j++)
                sc->display_matrix[i * 3 + j] = display_matrix[j][i];
    }

2456
    // transform the display width/height according to the matrix
2457
    // skip this if the display matrix is the default identity matrix
2458
    // or if it is rotating the picture, ex iPhone 3GS
2459 2460
    // to keep the same scale, use [width height 1<<16]
    if (width && height &&
2461 2462 2463 2464 2465
        ((display_matrix[0][0] != 65536  ||
          display_matrix[1][1] != 65536) &&
         !display_matrix[0][1] &&
         !display_matrix[1][0] &&
         !display_matrix[2][0] && !display_matrix[2][1])) {
2466 2467 2468 2469 2470 2471 2472
        for (i = 0; i < 2; i++)
            disp_transform[i] =
                (int64_t)  width  * display_matrix[0][i] +
                (int64_t)  height * display_matrix[1][i] +
                ((int64_t) display_matrix[2][i] << 16);

        //sample aspect ratio is new width/height divided by old width/height
2473
        st->sample_aspect_ratio = av_d2q(
2474 2475 2476
            ((double) disp_transform[0] * height) /
            ((double) disp_transform[1] * width), INT_MAX);
    }
2477 2478 2479
    return 0;
}

2480
static int mov_read_tfhd(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
2481 2482 2483 2484 2485
{
    MOVFragment *frag = &c->fragment;
    MOVTrackExt *trex = NULL;
    int flags, track_id, i;

2486 2487
    avio_r8(pb); /* version */
    flags = avio_rb24(pb);
B
Baptiste Coudurier 已提交
2488

2489
    track_id = avio_rb32(pb);
2490
    if (!track_id)
2491
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
2492 2493 2494 2495 2496 2497 2498 2499
    frag->track_id = track_id;
    for (i = 0; i < c->trex_count; i++)
        if (c->trex_data[i].track_id == frag->track_id) {
            trex = &c->trex_data[i];
            break;
        }
    if (!trex) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding trex\n");
2500
        return AVERROR_INVALIDDATA;
B
Baptiste Coudurier 已提交
2501 2502
    }

2503
    frag->base_data_offset = flags & MOV_TFHD_BASE_DATA_OFFSET ?
2504 2505
                             avio_rb64(pb) : flags & MOV_TFHD_DEFAULT_BASE_IS_MOOF ?
                             frag->moof_offset : frag->implicit_offset;
2506 2507 2508 2509 2510 2511 2512 2513
    frag->stsd_id  = flags & MOV_TFHD_STSD_ID ? avio_rb32(pb) : trex->stsd_id;

    frag->duration = flags & MOV_TFHD_DEFAULT_DURATION ?
                     avio_rb32(pb) : trex->duration;
    frag->size     = flags & MOV_TFHD_DEFAULT_SIZE ?
                     avio_rb32(pb) : trex->size;
    frag->flags    = flags & MOV_TFHD_DEFAULT_FLAGS ?
                     avio_rb32(pb) : trex->flags;
L
Luca Barbato 已提交
2514
    av_dlog(c->fc, "frag flags 0x%x\n", frag->flags);
B
Baptiste Coudurier 已提交
2515 2516 2517
    return 0;
}

2518
static int mov_read_chap(MOVContext *c, AVIOContext *pb, MOVAtom atom)
D
David Conrad 已提交
2519
{
2520
    c->chapter_track = avio_rb32(pb);
D
David Conrad 已提交
2521 2522 2523
    return 0;
}

2524
static int mov_read_trex(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
2525 2526
{
    MOVTrackExt *trex;
2527
    int err;
B
Baptiste Coudurier 已提交
2528 2529

    if ((uint64_t)c->trex_count+1 >= UINT_MAX / sizeof(*c->trex_data))
2530
        return AVERROR_INVALIDDATA;
2531 2532 2533 2534 2535
    if ((err = av_reallocp_array(&c->trex_data, c->trex_count + 1,
                                 sizeof(*c->trex_data))) < 0) {
        c->trex_count = 0;
        return err;
    }
B
Baptiste Coudurier 已提交
2536
    trex = &c->trex_data[c->trex_count++];
2537 2538 2539 2540 2541 2542 2543
    avio_r8(pb); /* version */
    avio_rb24(pb); /* flags */
    trex->track_id = avio_rb32(pb);
    trex->stsd_id  = avio_rb32(pb);
    trex->duration = avio_rb32(pb);
    trex->size     = avio_rb32(pb);
    trex->flags    = avio_rb32(pb);
B
Baptiste Coudurier 已提交
2544 2545 2546
    return 0;
}

2547
static int mov_read_trun(MOVContext *c, AVIOContext *pb, MOVAtom atom)
B
Baptiste Coudurier 已提交
2548 2549
{
    MOVFragment *frag = &c->fragment;
2550
    AVStream *st = NULL;
2551
    MOVStreamContext *sc;
2552
    MOVStts *ctts_data;
B
Baptiste Coudurier 已提交
2553 2554 2555 2556
    uint64_t offset;
    int64_t dts;
    int data_offset = 0;
    unsigned entries, first_sample_flags = frag->flags;
2557
    int flags, distance, i, found_keyframe = 0, err;
B
Baptiste Coudurier 已提交
2558

2559 2560 2561 2562 2563 2564 2565 2566
    for (i = 0; i < c->fc->nb_streams; i++) {
        if (c->fc->streams[i]->id == frag->track_id) {
            st = c->fc->streams[i];
            break;
        }
    }
    if (!st) {
        av_log(c->fc, AV_LOG_ERROR, "could not find corresponding track id %d\n", frag->track_id);
2567
        return AVERROR_INVALIDDATA;
2568
    }
2569
    sc = st->priv_data;
B
Baptiste Coudurier 已提交
2570 2571
    if (sc->pseudo_stream_id+1 != frag->stsd_id)
        return 0;
2572 2573 2574
    avio_r8(pb); /* version */
    flags = avio_rb24(pb);
    entries = avio_rb32(pb);
L
Luca Barbato 已提交
2575
    av_dlog(c->fc, "flags 0x%x entries %d\n", flags, entries);
2576 2577 2578 2579 2580 2581 2582 2583 2584

    /* Always assume the presence of composition time offsets.
     * Without this assumption, for instance, we cannot deal with a track in fragmented movies that meet the following.
     *  1) in the initial movie, there are no samples.
     *  2) in the first movie fragment, there is only one sample without composition time offset.
     *  3) in the subsequent movie fragments, there are samples with composition time offset. */
    if (!sc->ctts_count && sc->sample_count)
    {
        /* Complement ctts table if moov atom doesn't have ctts atom. */
2585
        ctts_data = av_realloc(NULL, sizeof(*sc->ctts_data));
2586
        if (!ctts_data)
B
Baptiste Coudurier 已提交
2587
            return AVERROR(ENOMEM);
2588
        sc->ctts_data = ctts_data;
2589 2590 2591
        sc->ctts_data[sc->ctts_count].count = sc->sample_count;
        sc->ctts_data[sc->ctts_count].duration = 0;
        sc->ctts_count++;
B
Baptiste Coudurier 已提交
2592
    }
2593
    if ((uint64_t)entries+sc->ctts_count >= UINT_MAX/sizeof(*sc->ctts_data))
2594
        return AVERROR_INVALIDDATA;
2595 2596 2597 2598 2599
    if ((err = av_reallocp_array(&sc->ctts_data, entries + sc->ctts_count,
                                 sizeof(*sc->ctts_data))) < 0) {
        sc->ctts_count = 0;
        return err;
    }
2600 2601
    if (flags & MOV_TRUN_DATA_OFFSET)        data_offset        = avio_rb32(pb);
    if (flags & MOV_TRUN_FIRST_SAMPLE_FLAGS) first_sample_flags = avio_rb32(pb);
2602
    dts    = sc->track_end - sc->time_offset;
B
Baptiste Coudurier 已提交
2603 2604
    offset = frag->base_data_offset + data_offset;
    distance = 0;
L
Luca Barbato 已提交
2605
    av_dlog(c->fc, "first sample flags 0x%x\n", first_sample_flags);
2606
    for (i = 0; i < entries && !pb->eof_reached; i++) {
B
Baptiste Coudurier 已提交
2607 2608 2609
        unsigned sample_size = frag->size;
        int sample_flags = i ? frag->flags : first_sample_flags;
        unsigned sample_duration = frag->duration;
2610
        int keyframe = 0;
B
Baptiste Coudurier 已提交
2611

2612 2613 2614
        if (flags & MOV_TRUN_SAMPLE_DURATION) sample_duration = avio_rb32(pb);
        if (flags & MOV_TRUN_SAMPLE_SIZE)     sample_size     = avio_rb32(pb);
        if (flags & MOV_TRUN_SAMPLE_FLAGS)    sample_flags    = avio_rb32(pb);
2615
        sc->ctts_data[sc->ctts_count].count = 1;
2616 2617
        sc->ctts_data[sc->ctts_count].duration = (flags & MOV_TRUN_SAMPLE_CTS) ?
                                                  avio_rb32(pb) : 0;
2618
        sc->ctts_count++;
2619 2620 2621 2622 2623 2624 2625
        if (st->codec->codec_type == AVMEDIA_TYPE_AUDIO)
            keyframe = 1;
        else if (!found_keyframe)
            keyframe = found_keyframe =
                !(sample_flags & (MOV_FRAG_SAMPLE_FLAG_IS_NON_SYNC |
                                  MOV_FRAG_SAMPLE_FLAG_DEPENDS_YES));
        if (keyframe)
B
Baptiste Coudurier 已提交
2626 2627 2628
            distance = 0;
        av_add_index_entry(st, offset, dts, sample_size, distance,
                           keyframe ? AVINDEX_KEYFRAME : 0);
L
Luca Barbato 已提交
2629
        av_dlog(c->fc, "AVIndex stream %d, sample %d, offset %"PRIx64", dts %"PRId64", "
B
Baptiste Coudurier 已提交
2630 2631 2632
                "size %d, distance %d, keyframe %d\n", st->index, sc->sample_count+i,
                offset, dts, sample_size, distance, keyframe);
        distance++;
2633
        dts += sample_duration;
B
Baptiste Coudurier 已提交
2634
        offset += sample_size;
2635
        sc->data_size += sample_size;
B
Baptiste Coudurier 已提交
2636
    }
2637 2638 2639 2640

    if (pb->eof_reached)
        return AVERROR_EOF;

2641
    frag->implicit_offset = offset;
2642
    st->duration = sc->track_end = dts + sc->time_offset;
B
Baptiste Coudurier 已提交
2643 2644 2645
    return 0;
}

2646 2647 2648
/* this atom should be null (from specs), but some buggy files put the 'moov' atom inside it... */
/* like the files created with Adobe Premiere 5.0, for samples see */
/* http://graphics.tudelft.nl/~wouter/publications/soundtests/ */
2649
static int mov_read_wide(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2650 2651 2652 2653 2654
{
    int err;

    if (atom.size < 8)
        return 0; /* continue */
2655
    if (avio_rb32(pb) != 0) { /* 0 sized mdat atom... use the 'wide' atom size */
2656
        avio_skip(pb, atom.size - 4);
2657 2658
        return 0;
    }
2659
    atom.type = avio_rl32(pb);
2660
    atom.size -= 8;
2661
    if (atom.type != MKTAG('m','d','a','t')) {
2662
        avio_skip(pb, atom.size);
2663 2664 2665 2666 2667 2668
        return 0;
    }
    err = mov_read_mdat(c, pb, atom);
    return err;
}

2669
static int mov_read_cmov(MOVContext *c, AVIOContext *pb, MOVAtom atom)
2670
{
2671
#if CONFIG_ZLIB
2672
    AVIOContext ctx;
2673 2674
    uint8_t *cmov_data;
    uint8_t *moov_data; /* uncompressed data */
2675
    long cmov_len, moov_len;
2676
    int ret = -1;
2677

2678 2679
    avio_rb32(pb); /* dcom atom */
    if (avio_rl32(pb) != MKTAG('d','c','o','m'))
2680
        return AVERROR_INVALIDDATA;
2681
    if (avio_rl32(pb) != MKTAG('z','l','i','b')) {
B
Benoit Fouet 已提交
2682
        av_log(c->fc, AV_LOG_ERROR, "unknown compression for cmov atom !");
2683
        return AVERROR_INVALIDDATA;
2684
    }
2685 2686
    avio_rb32(pb); /* cmvd atom */
    if (avio_rl32(pb) != MKTAG('c','m','v','d'))
2687
        return AVERROR_INVALIDDATA;
2688
    moov_len = avio_rb32(pb); /* uncompressed size */
2689
    cmov_len = atom.size - 6 * 4;
2690

B
Baptiste Coudurier 已提交
2691
    cmov_data = av_malloc(cmov_len);
2692
    if (!cmov_data)
2693
        return AVERROR(ENOMEM);
B
Baptiste Coudurier 已提交
2694
    moov_data = av_malloc(moov_len);
2695 2696
    if (!moov_data) {
        av_free(cmov_data);
2697
        return AVERROR(ENOMEM);
2698
    }
2699
    avio_read(pb, cmov_data, cmov_len);
2700
    if (uncompress (moov_data, (uLongf *) &moov_len, (const Bytef *)cmov_data, cmov_len) != Z_OK)
2701
        goto free_and_return;
2702
    if (ffio_init_context(&ctx, moov_data, moov_len, 0, NULL, NULL, NULL, NULL) != 0)
2703
        goto free_and_return;
2704
    atom.type = MKTAG('m','o','o','v');
2705 2706
    atom.size = moov_len;
    ret = mov_read_default(c, &ctx, atom);
2707
free_and_return:
2708 2709 2710
    av_free(moov_data);
    av_free(cmov_data);
    return ret;
2711 2712
#else
    av_log(c->fc, AV_LOG_ERROR, "this file requires zlib support compiled in\n");
2713
    return AVERROR(ENOSYS);
2714
#endif
2715
}
2716

G
Gael Chardon 已提交
2717
/* edit list atom */
2718
static int mov_read_elst(MOVContext *c, AVIOContext *pb, MOVAtom atom)
G
Gael Chardon 已提交
2719
{
2720
    MOVStreamContext *sc;
2721
    int i, edit_count, version;
B
Baptiste Coudurier 已提交
2722

2723 2724 2725 2726
    if (c->fc->nb_streams < 1)
        return 0;
    sc = c->fc->streams[c->fc->nb_streams-1]->priv_data;

2727
    version = avio_r8(pb); /* version */
2728 2729
    avio_rb24(pb); /* flags */
    edit_count = avio_rb32(pb); /* entries */
B
Baptiste Coudurier 已提交
2730

2731
    if ((uint64_t)edit_count*12+8 > atom.size)
2732
        return AVERROR_INVALIDDATA;
2733

2734
    for (i=0; i<edit_count; i++){
2735 2736 2737 2738 2739 2740 2741
        int64_t time;
        int64_t duration;
        if (version == 1) {
            duration = avio_rb64(pb);
            time     = avio_rb64(pb);
        } else {
            duration = avio_rb32(pb); /* segment duration */
Y
Yusuke Nakamura 已提交
2742
            time     = (int32_t)avio_rb32(pb); /* media time */
2743
        }
2744
        avio_rb32(pb); /* Media rate */
2745 2746
        if (i == 0 && time >= -1) {
            sc->time_offset = time != -1 ? time : -duration;
2747
        }
B
Baptiste Coudurier 已提交
2748
    }
2749

2750
    if (edit_count > 1)
2751 2752 2753
        av_log(c->fc, AV_LOG_WARNING, "multiple edit list entries, "
               "a/v desync might occur, patch welcome\n");

L
Luca Barbato 已提交
2754
    av_dlog(c->fc, "track[%i].edit_count = %i\n", c->fc->nb_streams-1, edit_count);
B
Baptiste Coudurier 已提交
2755
    return 0;
G
Gael Chardon 已提交
2756 2757
}

2758
static const MOVParseTableEntry mov_default_parse_table[] = {
2759
{ MKTAG('a','v','s','s'), mov_read_extradata },
D
David Conrad 已提交
2760
{ MKTAG('c','h','p','l'), mov_read_chpl },
2761 2762 2763 2764 2765 2766 2767
{ MKTAG('c','o','6','4'), mov_read_stco },
{ MKTAG('c','t','t','s'), mov_read_ctts }, /* composition time to sample */
{ MKTAG('d','i','n','f'), mov_read_default },
{ MKTAG('d','r','e','f'), mov_read_dref },
{ MKTAG('e','d','t','s'), mov_read_default },
{ MKTAG('e','l','s','t'), mov_read_elst },
{ MKTAG('e','n','d','a'), mov_read_enda },
2768
{ MKTAG('f','i','e','l'), mov_read_fiel },
2769 2770 2771
{ MKTAG('f','t','y','p'), mov_read_ftyp },
{ MKTAG('g','l','b','l'), mov_read_glbl },
{ MKTAG('h','d','l','r'), mov_read_hdlr },
2772
{ MKTAG('i','l','s','t'), mov_read_ilst },
2773 2774 2775 2776
{ MKTAG('j','p','2','h'), mov_read_extradata },
{ MKTAG('m','d','a','t'), mov_read_mdat },
{ MKTAG('m','d','h','d'), mov_read_mdhd },
{ MKTAG('m','d','i','a'), mov_read_default },
2777
{ MKTAG('m','e','t','a'), mov_read_meta },
2778 2779 2780 2781 2782 2783 2784 2785
{ MKTAG('m','i','n','f'), mov_read_default },
{ MKTAG('m','o','o','f'), mov_read_moof },
{ MKTAG('m','o','o','v'), mov_read_moov },
{ MKTAG('m','v','e','x'), mov_read_default },
{ MKTAG('m','v','h','d'), mov_read_mvhd },
{ MKTAG('S','M','I',' '), mov_read_smi }, /* Sorenson extension ??? */
{ MKTAG('a','l','a','c'), mov_read_extradata }, /* alac specific atom */
{ MKTAG('a','v','c','C'), mov_read_glbl },
2786
{ MKTAG('p','a','s','p'), mov_read_pasp },
2787 2788
{ MKTAG('s','t','b','l'), mov_read_default },
{ MKTAG('s','t','c','o'), mov_read_stco },
2789
{ MKTAG('s','t','p','s'), mov_read_stps },
M
Martin Storsjö 已提交
2790
{ MKTAG('s','t','r','f'), mov_read_strf },
2791 2792 2793 2794 2795
{ MKTAG('s','t','s','c'), mov_read_stsc },
{ MKTAG('s','t','s','d'), mov_read_stsd }, /* sample description */
{ MKTAG('s','t','s','s'), mov_read_stss }, /* sync sample */
{ MKTAG('s','t','s','z'), mov_read_stsz }, /* sample size */
{ MKTAG('s','t','t','s'), mov_read_stts },
2796
{ MKTAG('s','t','z','2'), mov_read_stsz }, /* compact sample size */
2797 2798 2799 2800
{ MKTAG('t','k','h','d'), mov_read_tkhd }, /* track header */
{ MKTAG('t','f','h','d'), mov_read_tfhd }, /* track fragment header */
{ MKTAG('t','r','a','k'), mov_read_trak },
{ MKTAG('t','r','a','f'), mov_read_default },
D
David Conrad 已提交
2801 2802
{ MKTAG('t','r','e','f'), mov_read_default },
{ MKTAG('c','h','a','p'), mov_read_chap },
2803 2804
{ MKTAG('t','r','e','x'), mov_read_trex },
{ MKTAG('t','r','u','n'), mov_read_trun },
B
Baptiste Coudurier 已提交
2805
{ MKTAG('u','d','t','a'), mov_read_default },
2806 2807
{ MKTAG('w','a','v','e'), mov_read_wave },
{ MKTAG('e','s','d','s'), mov_read_esds },
2808
{ MKTAG('d','a','c','3'), mov_read_dac3 }, /* AC-3 info */
2809
{ MKTAG('d','e','c','3'), mov_read_dec3 }, /* EAC-3 info */
2810
{ MKTAG('w','i','d','e'), mov_read_wide }, /* place holder */
2811
{ MKTAG('w','f','e','x'), mov_read_wfex },
2812
{ MKTAG('c','m','o','v'), mov_read_cmov },
2813
{ MKTAG('c','h','a','n'), mov_read_chan }, /* channel layout */
M
Martin Storsjö 已提交
2814
{ MKTAG('d','v','c','1'), mov_read_dvc1 },
2815
{ MKTAG('s','b','g','p'), mov_read_sbgp },
Y
Yusuke Nakamura 已提交
2816
{ MKTAG('h','v','c','C'), mov_read_glbl },
2817
{ MKTAG('-','-','-','-'), mov_read_custom },
B
Baptiste Coudurier 已提交
2818
{ 0, NULL }
2819 2820
};

2821 2822 2823 2824 2825 2826 2827 2828 2829 2830 2831 2832 2833 2834 2835 2836 2837 2838 2839 2840 2841 2842 2843 2844 2845 2846 2847 2848 2849 2850 2851 2852 2853 2854 2855 2856 2857 2858 2859 2860 2861 2862 2863 2864 2865 2866 2867 2868 2869 2870 2871 2872 2873 2874 2875 2876 2877 2878 2879 2880 2881 2882
static int mov_read_default(MOVContext *c, AVIOContext *pb, MOVAtom atom)
{
    int64_t total_size = 0;
    MOVAtom a;
    int i;

    if (atom.size < 0)
        atom.size = INT64_MAX;
    while (total_size + 8 < atom.size && !pb->eof_reached) {
        int (*parse)(MOVContext*, AVIOContext*, MOVAtom) = NULL;
        a.size = atom.size;
        a.type=0;
        if (atom.size >= 8) {
            a.size = avio_rb32(pb);
            a.type = avio_rl32(pb);
        }
        av_dlog(c->fc, "type: %08x '%.4s' parent:'%.4s' sz: %"PRId64" %"PRId64" %"PRId64"\n",
                a.type, (char*)&a.type, (char*)&atom.type, a.size, total_size, atom.size);
        total_size += 8;
        if (a.size == 1) { /* 64 bit extended size */
            a.size = avio_rb64(pb) - 8;
            total_size += 8;
        }
        if (a.size == 0) {
            a.size = atom.size - total_size;
            if (a.size <= 8)
                break;
        }
        a.size -= 8;
        if (a.size < 0)
            break;
        a.size = FFMIN(a.size, atom.size - total_size);

        for (i = 0; mov_default_parse_table[i].type; i++)
            if (mov_default_parse_table[i].type == a.type) {
                parse = mov_default_parse_table[i].parse;
                break;
            }

        // container is user data
        if (!parse && (atom.type == MKTAG('u','d','t','a') ||
                       atom.type == MKTAG('i','l','s','t')))
            parse = mov_read_udta_string;

        if (!parse) { /* skip leaf atoms data */
            avio_skip(pb, a.size);
        } else {
            int64_t start_pos = avio_tell(pb);
            int64_t left;
            int err = parse(c, pb, a);
            if (err < 0)
                return err;
            if (c->found_moov && c->found_mdat &&
                ((!pb->seekable || c->fc->flags & AVFMT_FLAG_IGNIDX) ||
                 start_pos + a.size == avio_size(pb))) {
                if (!pb->seekable || c->fc->flags & AVFMT_FLAG_IGNIDX)
                    c->next_root_atom = start_pos + a.size;
                return 0;
            }
            left = a.size - avio_tell(pb) + start_pos;
            if (left > 0) /* skip garbage at atom end */
                avio_skip(pb, left);
2883 2884 2885 2886 2887 2888
            else if (left < 0) {
                av_log(c->fc, AV_LOG_WARNING,
                       "overread end of atom '%.4s' by %"PRId64" bytes\n",
                       (char*)&a.type, -left);
                avio_seek(pb, left, SEEK_CUR);
            }
2889 2890 2891 2892 2893 2894 2895 2896 2897 2898 2899
        }

        total_size += a.size;
    }

    if (total_size < atom.size && atom.size < 0x7ffff)
        avio_skip(pb, atom.size - total_size);

    return 0;
}

F
Fabrice Bellard 已提交
2900 2901
static int mov_probe(AVProbeData *p)
{
2902 2903
    unsigned int offset;
    uint32_t tag;
2904
    int score = 0;
2905

F
Fabrice Bellard 已提交
2906
    /* check file header */
2907
    offset = 0;
2908
    for (;;) {
2909 2910
        /* ignore invalid offset */
        if ((offset + 8) > (unsigned int)p->buf_size)
2911
            return score;
2912
        tag = AV_RL32(p->buf + offset + 4);
2913
        switch(tag) {
2914
        /* check for obvious tags */
2915 2916 2917 2918 2919
        case MKTAG('j','P',' ',' '): /* jpeg 2000 signature */
        case MKTAG('m','o','o','v'):
        case MKTAG('m','d','a','t'):
        case MKTAG('p','n','o','t'): /* detect movs with preview pics like ew.mov and april.mov */
        case MKTAG('u','d','t','a'): /* Packet Video PVAuthor adds this and a lot of more junk */
2920
        case MKTAG('f','t','y','p'):
2921
            return AVPROBE_SCORE_MAX;
2922
        /* those are more common words, so rate then a bit less */
2923 2924 2925 2926 2927
        case MKTAG('e','d','i','w'): /* xdcam files have reverted first tags */
        case MKTAG('w','i','d','e'):
        case MKTAG('f','r','e','e'):
        case MKTAG('j','u','n','k'):
        case MKTAG('p','i','c','t'):
2928
            return AVPROBE_SCORE_MAX - 5;
B
Baptiste Coudurier 已提交
2929
        case MKTAG(0x82,0x82,0x7f,0x7d):
2930 2931 2932
        case MKTAG('s','k','i','p'):
        case MKTAG('u','u','i','d'):
        case MKTAG('p','r','f','l'):
2933
            offset = AV_RB32(p->buf+offset) + offset;
2934
            /* if we only find those cause probedata is too small at least rate them */
2935
            score = AVPROBE_SCORE_EXTENSION;
2936 2937 2938
            break;
        default:
            /* unrecognized tag */
2939
            return score;
2940
        }
2941
    }
F
Fabrice Bellard 已提交
2942 2943
}

D
David Conrad 已提交
2944 2945 2946 2947 2948 2949 2950
// must be done after parsing all trak because there's no order requirement
static void mov_read_chapters(AVFormatContext *s)
{
    MOVContext *mov = s->priv_data;
    AVStream *st = NULL;
    MOVStreamContext *sc;
    int64_t cur_pos;
2951
    int i;
D
David Conrad 已提交
2952 2953 2954 2955 2956 2957 2958 2959 2960 2961 2962 2963 2964

    for (i = 0; i < s->nb_streams; i++)
        if (s->streams[i]->id == mov->chapter_track) {
            st = s->streams[i];
            break;
        }
    if (!st) {
        av_log(s, AV_LOG_ERROR, "Referenced QT chapter track not found\n");
        return;
    }

    st->discard = AVDISCARD_ALL;
    sc = st->priv_data;
2965
    cur_pos = avio_tell(sc->pb);
D
David Conrad 已提交
2966 2967 2968 2969

    for (i = 0; i < st->nb_index_entries; i++) {
        AVIndexEntry *sample = &st->index_entries[i];
        int64_t end = i+1 < st->nb_index_entries ? st->index_entries[i+1].timestamp : st->duration;
2970 2971 2972
        uint8_t *title;
        uint16_t ch;
        int len, title_len;
D
David Conrad 已提交
2973

A
Anton Khirnov 已提交
2974
        if (avio_seek(sc->pb, sample->pos, SEEK_SET) != sample->pos) {
D
David Conrad 已提交
2975 2976 2977 2978 2979
            av_log(s, AV_LOG_ERROR, "Chapter %d not found in file\n", i);
            goto finish;
        }

        // the first two bytes are the length of the title
2980
        len = avio_rb16(sc->pb);
D
David Conrad 已提交
2981 2982
        if (len > sample->size-2)
            continue;
2983 2984 2985
        title_len = 2*len + 1;
        if (!(title = av_mallocz(title_len)))
            goto finish;
D
David Conrad 已提交
2986 2987 2988 2989

        // The samples could theoretically be in any encoding if there's an encd
        // atom following, but in practice are only utf-8 or utf-16, distinguished
        // instead by the presence of a BOM
2990 2991 2992 2993 2994 2995 2996 2997 2998 2999 3000
        if (!len) {
            title[0] = 0;
        } else {
            ch = avio_rb16(sc->pb);
            if (ch == 0xfeff)
                avio_get_str16be(sc->pb, len, title, title_len);
            else if (ch == 0xfffe)
                avio_get_str16le(sc->pb, len, title, title_len);
            else {
                AV_WB16(title, ch);
                if (len == 1 || len == 2)
3001
                    title[len] = 0;
3002 3003 3004
                else
                    avio_get_str(sc->pb, len - 2, title + 2, title_len - 2);
            }
D
David Conrad 已提交
3005 3006
        }

3007
        avpriv_new_chapter(s, i, st->time_base, sample->timestamp, end, title);
3008
        av_freep(&title);
D
David Conrad 已提交
3009 3010
    }
finish:
A
Anton Khirnov 已提交
3011
    avio_seek(sc->pb, cur_pos, SEEK_SET);
D
David Conrad 已提交
3012 3013
}

3014 3015 3016 3017 3018 3019 3020 3021 3022 3023 3024 3025 3026 3027 3028 3029 3030
static int mov_read_close(AVFormatContext *s)
{
    MOVContext *mov = s->priv_data;
    int i, j;

    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;

        av_freep(&sc->ctts_data);
        for (j = 0; j < sc->drefs_count; j++) {
            av_freep(&sc->drefs[j].path);
            av_freep(&sc->drefs[j].dir);
        }
        av_freep(&sc->drefs);
        if (sc->pb && sc->pb != s->pb)
            avio_close(sc->pb);
3031 3032 3033 3034 3035 3036 3037 3038

        av_freep(&sc->chunk_offsets);
        av_freep(&sc->stsc_data);
        av_freep(&sc->sample_sizes);
        av_freep(&sc->keyframes);
        av_freep(&sc->stts_data);
        av_freep(&sc->stps_data);
        av_freep(&sc->rap_group);
3039
        av_freep(&sc->display_matrix);
3040 3041 3042
    }

    if (mov->dv_demux) {
3043 3044
        avformat_free_context(mov->dv_fctx);
        mov->dv_fctx = NULL;
3045 3046 3047 3048 3049 3050 3051
    }

    av_freep(&mov->trex_data);

    return 0;
}

3052
static int mov_read_header(AVFormatContext *s)
3053
{
3054
    MOVContext *mov = s->priv_data;
3055
    AVIOContext *pb = s->pb;
B
Baptiste Coudurier 已提交
3056
    int err;
3057
    MOVAtom atom = { AV_RL32("root") };
3058
    int i;
3059 3060

    mov->fc = s;
3061
    /* .mov and .mp4 aren't streamable anyway (only progressive download if moov is before mdat) */
3062
    if (pb->seekable)
A
Anton Khirnov 已提交
3063
        atom.size = avio_size(pb);
3064
    else
B
Baptiste Coudurier 已提交
3065
        atom.size = INT64_MAX;
3066 3067

    /* check MOV header */
B
Baptiste Coudurier 已提交
3068 3069
    if ((err = mov_read_default(mov, pb, atom)) < 0) {
        av_log(s, AV_LOG_ERROR, "error reading header: %d\n", err);
3070
        mov_read_close(s);
B
Baptiste Coudurier 已提交
3071 3072 3073 3074
        return err;
    }
    if (!mov->found_moov) {
        av_log(s, AV_LOG_ERROR, "moov atom not found\n");
3075
        mov_read_close(s);
3076
        return AVERROR_INVALIDDATA;
3077
    }
3078
    av_dlog(mov->fc, "on_parse_exit_offset=%"PRId64"\n", avio_tell(pb));
3079

3080
    if (pb->seekable && mov->chapter_track > 0)
D
David Conrad 已提交
3081 3082
        mov_read_chapters(s);

3083 3084 3085 3086 3087 3088 3089 3090 3091
    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
        MOVStreamContext *sc = st->priv_data;

        if (st->codec->codec_type == AVMEDIA_TYPE_SUBTITLE) {
            if (st->codec->width <= 0 && st->codec->width <= 0) {
                st->codec->width  = sc->width;
                st->codec->height = sc->height;
            }
3092 3093 3094 3095
            if (st->codec->codec_id == AV_CODEC_ID_DVD_SUBTITLE) {
                if ((err = mov_rewrite_dvd_sub_extradata(st)) < 0)
                    return err;
            }
3096 3097 3098
        }
    }

3099 3100 3101 3102
    if (mov->trex_data) {
        for (i = 0; i < s->nb_streams; i++) {
            AVStream *st = s->streams[i];
            MOVStreamContext *sc = st->priv_data;
3103
            if (st->duration > 0)
3104 3105 3106 3107
                st->codec->bit_rate = sc->data_size * 8 * sc->time_scale / st->duration;
        }
    }

3108 3109
    for (i = 0; i < s->nb_streams; i++) {
        AVStream *st = s->streams[i];
3110
        MOVStreamContext *sc = st->priv_data;
3111

3112 3113 3114 3115 3116 3117 3118 3119 3120 3121 3122 3123 3124 3125 3126 3127 3128 3129 3130 3131 3132 3133 3134 3135 3136 3137 3138
        switch (st->codec->codec_type) {
        case AVMEDIA_TYPE_AUDIO:
            err = ff_replaygain_export(st, s->metadata);
            if (err < 0) {
                mov_read_close(s);
                return err;
            }
            break;
        case AVMEDIA_TYPE_VIDEO:
            if (sc->display_matrix) {
                AVPacketSideData *sd, *tmp;

                tmp = av_realloc_array(st->side_data,
                                       st->nb_side_data + 1, sizeof(*tmp));
                if (!tmp)
                    return AVERROR(ENOMEM);

                st->side_data = tmp;
                st->nb_side_data++;

                sd = &st->side_data[st->nb_side_data - 1];
                sd->type = AV_PKT_DATA_DISPLAYMATRIX;
                sd->size = sizeof(int32_t) * 9;
                sd->data = (uint8_t*)sc->display_matrix;
                sc->display_matrix = NULL;
            }
            break;
3139 3140 3141
        }
    }

3142 3143 3144
    return 0;
}

3145
static AVIndexEntry *mov_find_next_sample(AVFormatContext *s, AVStream **st)
3146
{
3147
    AVIndexEntry *sample = NULL;
3148
    int64_t best_dts = INT64_MAX;
3149
    int i;
B
Baptiste Coudurier 已提交
3150
    for (i = 0; i < s->nb_streams; i++) {
3151 3152
        AVStream *avst = s->streams[i];
        MOVStreamContext *msc = avst->priv_data;
3153
        if (msc->pb && msc->current_sample < avst->nb_index_entries) {
3154
            AVIndexEntry *current_sample = &avst->index_entries[msc->current_sample];
3155
            int64_t dts = av_rescale(current_sample->timestamp, AV_TIME_BASE, msc->time_scale);
L
Luca Barbato 已提交
3156
            av_dlog(s, "stream %d, sample %d, dts %"PRId64"\n", i, msc->current_sample, dts);
3157 3158
            if (!sample || (!s->pb->seekable && current_sample->pos < sample->pos) ||
                (s->pb->seekable &&
3159
                 ((msc->pb != s->pb && dts < best_dts) || (msc->pb == s->pb &&
B
Baptiste Coudurier 已提交
3160
                 ((FFABS(best_dts - dts) <= AV_TIME_BASE && current_sample->pos < sample->pos) ||
3161
                  (FFABS(best_dts - dts) > AV_TIME_BASE && dts < best_dts)))))) {
3162 3163
                sample = current_sample;
                best_dts = dts;
3164
                *st = avst;
3165
            }
3166 3167
        }
    }
3168 3169 3170 3171 3172 3173 3174 3175 3176 3177 3178 3179
    return sample;
}

static int mov_read_packet(AVFormatContext *s, AVPacket *pkt)
{
    MOVContext *mov = s->priv_data;
    MOVStreamContext *sc;
    AVIndexEntry *sample;
    AVStream *st = NULL;
    int ret;
 retry:
    sample = mov_find_next_sample(s, &st);
3180 3181
    if (!sample) {
        mov->found_mdat = 0;
3182 3183 3184 3185 3186
        if (!mov->next_root_atom)
            return AVERROR_EOF;
        avio_seek(s->pb, mov->next_root_atom, SEEK_SET);
        mov->next_root_atom = 0;
        if (mov_read_default(mov, s->pb, (MOVAtom){ AV_RL32("root"), INT64_MAX }) < 0 ||
A
Anton Khirnov 已提交
3187
            s->pb->eof_reached)
B
Baptiste Coudurier 已提交
3188
            return AVERROR_EOF;
3189
        av_dlog(s, "read fragments, offset 0x%"PRIx64"\n", avio_tell(s->pb));
3190 3191
        goto retry;
    }
3192
    sc = st->priv_data;
3193 3194
    /* must be done just before reading, to avoid infinite loop on sample */
    sc->current_sample++;
3195 3196

    if (st->discard != AVDISCARD_ALL) {
A
Anton Khirnov 已提交
3197
        if (avio_seek(sc->pb, sample->pos, SEEK_SET) != sample->pos) {
R
Reimar Döffinger 已提交
3198 3199
            av_log(mov->fc, AV_LOG_ERROR, "stream %d, offset 0x%"PRIx64": partial file\n",
                   sc->ffindex, sample->pos);
3200
            return AVERROR_INVALIDDATA;
R
Reimar Döffinger 已提交
3201 3202
        }
        ret = av_get_packet(sc->pb, pkt, sample->size);
3203 3204
        if (ret < 0)
            return ret;
3205 3206 3207 3208 3209 3210 3211 3212 3213 3214 3215
        if (sc->has_palette) {
            uint8_t *pal;

            pal = av_packet_new_side_data(pkt, AV_PKT_DATA_PALETTE, AVPALETTE_SIZE);
            if (!pal) {
                av_log(mov->fc, AV_LOG_ERROR, "Cannot append palette to packet\n");
            } else {
                memcpy(pal, sc->palette, AVPALETTE_SIZE);
                sc->has_palette = 0;
            }
        }
R
Reimar Döffinger 已提交
3216 3217
#if CONFIG_DV_DEMUXER
        if (mov->dv_demux && sc->dv_audio_container) {
3218
            avpriv_dv_produce_packet(mov->dv_demux, pkt, pkt->data, pkt->size);
R
Reimar Döffinger 已提交
3219 3220
            av_free(pkt->data);
            pkt->size = 0;
3221
            ret = avpriv_dv_get_packet(mov->dv_demux, pkt);
R
Reimar Döffinger 已提交
3222 3223 3224
            if (ret < 0)
                return ret;
        }
3225
#endif
3226 3227
    }

3228 3229
    pkt->stream_index = sc->ffindex;
    pkt->dts = sample->timestamp;
3230
    if (sc->ctts_data && sc->ctts_index < sc->ctts_count) {
3231
        pkt->pts = pkt->dts + sc->dts_shift + sc->ctts_data[sc->ctts_index].duration;
3232
        /* update ctts context */
3233 3234 3235 3236 3237
        sc->ctts_sample++;
        if (sc->ctts_index < sc->ctts_count &&
            sc->ctts_data[sc->ctts_index].count == sc->ctts_sample) {
            sc->ctts_index++;
            sc->ctts_sample = 0;
3238
        }
3239 3240
        if (sc->wrong_dts)
            pkt->dts = AV_NOPTS_VALUE;
3241
    } else {
3242
        int64_t next_dts = (sc->current_sample < st->nb_index_entries) ?
3243 3244
            st->index_entries[sc->current_sample].timestamp : st->duration;
        pkt->duration = next_dts - pkt->dts;
3245
        pkt->pts = pkt->dts;
3246
    }
3247 3248
    if (st->discard == AVDISCARD_ALL)
        goto retry;
3249
    pkt->flags |= sample->flags & AVINDEX_KEYFRAME ? AV_PKT_FLAG_KEY : 0;
3250
    pkt->pos = sample->pos;
L
Luca Barbato 已提交
3251
    av_dlog(s, "stream %d, pts %"PRId64", dts %"PRId64", pos 0x%"PRIx64", duration %d\n",
3252
            pkt->stream_index, pkt->pts, pkt->dts, pkt->pos, pkt->duration);
3253 3254
    return 0;
}
3255

3256
static int mov_seek_stream(AVFormatContext *s, AVStream *st, int64_t timestamp, int flags)
3257 3258 3259 3260
{
    MOVStreamContext *sc = st->priv_data;
    int sample, time_sample;
    int i;
3261

3262
    sample = av_index_search_timestamp(st, timestamp, flags);
L
Luca Barbato 已提交
3263
    av_dlog(s, "stream %d, timestamp %"PRId64", sample %d\n", st->index, timestamp, sample);
3264 3265
    if (sample < 0 && st->nb_index_entries && timestamp < st->index_entries[0].timestamp)
        sample = 0;
3266
    if (sample < 0) /* not sure what to do */
3267
        return AVERROR_INVALIDDATA;
3268
    sc->current_sample = sample;
L
Luca Barbato 已提交
3269
    av_dlog(s, "stream %d, found sample %d\n", st->index, sc->current_sample);
3270 3271 3272 3273
    /* adjust ctts index */
    if (sc->ctts_data) {
        time_sample = 0;
        for (i = 0; i < sc->ctts_count; i++) {
3274 3275
            int next = time_sample + sc->ctts_data[i].count;
            if (next > sc->current_sample) {
3276 3277
                sc->ctts_index = i;
                sc->ctts_sample = sc->current_sample - time_sample;
3278
                break;
3279
            }
3280
            time_sample = next;
3281 3282
        }
    }
3283
    return sample;
3284 3285
}

3286
static int mov_read_seek(AVFormatContext *s, int stream_index, int64_t sample_time, int flags)
G
Gael Chardon 已提交
3287
{
3288 3289 3290 3291
    AVStream *st;
    int64_t seek_timestamp, timestamp;
    int sample;
    int i;
G
Gael Chardon 已提交
3292

3293
    if (stream_index >= s->nb_streams)
3294
        return AVERROR_INVALIDDATA;
3295 3296
    if (sample_time < 0)
        sample_time = 0;
G
Gael Chardon 已提交
3297

3298
    st = s->streams[stream_index];
3299
    sample = mov_seek_stream(s, st, sample_time, flags);
3300
    if (sample < 0)
3301
        return sample;
G
Gael Chardon 已提交
3302

3303 3304
    /* adjust seek timestamp to found sample timestamp */
    seek_timestamp = st->index_entries[sample].timestamp;
G
Gael Chardon 已提交
3305

3306 3307
    for (i = 0; i < s->nb_streams; i++) {
        st = s->streams[i];
3308
        if (stream_index == i)
3309
            continue;
G
Gael Chardon 已提交
3310

3311
        timestamp = av_rescale_q(seek_timestamp, s->streams[stream_index]->time_base, st->time_base);
3312
        mov_seek_stream(s, st, timestamp, flags);
3313
    }
G
Gael Chardon 已提交
3314 3315 3316
    return 0;
}

3317
AVInputFormat ff_mov_demuxer = {
3318
    .name           = "mov,mp4,m4a,3gp,3g2,mj2",
3319
    .long_name      = NULL_IF_CONFIG_SMALL("QuickTime / MOV"),
3320
    .priv_data_size = sizeof(MOVContext),
3321
    .extensions     = "mov,mp4,m4a,3gp,3g2,mj2",
3322 3323 3324 3325 3326
    .read_probe     = mov_probe,
    .read_header    = mov_read_header,
    .read_packet    = mov_read_packet,
    .read_close     = mov_read_close,
    .read_seek      = mov_read_seek,
3327
};