nuv: sanitize negative fps rate
[libav.git] / libavformat / nuv.c
1 /*
2 * NuppelVideo demuxer.
3 * Copyright (c) 2006 Reimar Doeffinger
4 *
5 * This file is part of Libav.
6 *
7 * Libav is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
11 *
12 * Libav is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public
18 * License along with Libav; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20 */
21
22 #include "libavutil/channel_layout.h"
23 #include "libavutil/imgutils.h"
24 #include "libavutil/intreadwrite.h"
25 #include "libavutil/intfloat.h"
26 #include "avformat.h"
27 #include "internal.h"
28 #include "riff.h"
29
30 static const AVCodecTag nuv_audio_tags[] = {
31 { AV_CODEC_ID_PCM_S16LE, MKTAG('R', 'A', 'W', 'A') },
32 { AV_CODEC_ID_MP3, MKTAG('L', 'A', 'M', 'E') },
33 { AV_CODEC_ID_NONE, 0 },
34 };
35
36 typedef struct NUVContext {
37 int v_id;
38 int a_id;
39 int rtjpg_video;
40 } NUVContext;
41
42 typedef enum {
43 NUV_VIDEO = 'V',
44 NUV_EXTRADATA = 'D',
45 NUV_AUDIO = 'A',
46 NUV_SEEKP = 'R',
47 NUV_MYTHEXT = 'X'
48 } nuv_frametype;
49
50 static int nuv_probe(AVProbeData *p)
51 {
52 if (!memcmp(p->buf, "NuppelVideo", 12))
53 return AVPROBE_SCORE_MAX;
54 if (!memcmp(p->buf, "MythTVVideo", 12))
55 return AVPROBE_SCORE_MAX;
56 return 0;
57 }
58
59 /// little macro to sanitize packet size
60 #define PKTSIZE(s) (s & 0xffffff)
61
62 /**
63 * @brief read until we found all data needed for decoding
64 * @param vst video stream of which to change parameters
65 * @param ast video stream of which to change parameters
66 * @param myth set if this is a MythTVVideo format file
67 * @return 0 or AVERROR code
68 */
69 static int get_codec_data(AVIOContext *pb, AVStream *vst,
70 AVStream *ast, int myth)
71 {
72 nuv_frametype frametype;
73
74 if (!vst && !myth)
75 return 1; // no codec data needed
76 while (!pb->eof_reached) {
77 int size, subtype;
78
79 frametype = avio_r8(pb);
80 switch (frametype) {
81 case NUV_EXTRADATA:
82 subtype = avio_r8(pb);
83 avio_skip(pb, 6);
84 size = PKTSIZE(avio_rl32(pb));
85 if (vst && subtype == 'R') {
86 if (vst->codec->extradata) {
87 av_freep(&vst->codec->extradata);
88 vst->codec->extradata_size = 0;
89 }
90 vst->codec->extradata = av_malloc(size);
91 if (!vst->codec->extradata)
92 return AVERROR(ENOMEM);
93 vst->codec->extradata_size = size;
94 avio_read(pb, vst->codec->extradata, size);
95 size = 0;
96 if (!myth)
97 return 0;
98 }
99 break;
100 case NUV_MYTHEXT:
101 avio_skip(pb, 7);
102 size = PKTSIZE(avio_rl32(pb));
103 if (size != 128 * 4)
104 break;
105 avio_rl32(pb); // version
106 if (vst) {
107 vst->codec->codec_tag = avio_rl32(pb);
108 vst->codec->codec_id =
109 ff_codec_get_id(ff_codec_bmp_tags, vst->codec->codec_tag);
110 if (vst->codec->codec_tag == MKTAG('R', 'J', 'P', 'G'))
111 vst->codec->codec_id = AV_CODEC_ID_NUV;
112 } else
113 avio_skip(pb, 4);
114
115 if (ast) {
116 int id;
117
118 ast->codec->codec_tag = avio_rl32(pb);
119 ast->codec->sample_rate = avio_rl32(pb);
120 ast->codec->bits_per_coded_sample = avio_rl32(pb);
121 ast->codec->channels = avio_rl32(pb);
122 ast->codec->channel_layout = 0;
123
124 id = ff_wav_codec_get_id(ast->codec->codec_tag,
125 ast->codec->bits_per_coded_sample);
126 if (id == AV_CODEC_ID_NONE) {
127 id = ff_codec_get_id(nuv_audio_tags, ast->codec->codec_tag);
128 if (id == AV_CODEC_ID_PCM_S16LE)
129 id = ff_get_pcm_codec_id(ast->codec->bits_per_coded_sample,
130 0, 0, ~1);
131 }
132 ast->codec->codec_id = id;
133
134 ast->need_parsing = AVSTREAM_PARSE_FULL;
135 } else
136 avio_skip(pb, 4 * 4);
137
138 size -= 6 * 4;
139 avio_skip(pb, size);
140 return 0;
141 case NUV_SEEKP:
142 size = 11;
143 break;
144 default:
145 avio_skip(pb, 7);
146 size = PKTSIZE(avio_rl32(pb));
147 break;
148 }
149 avio_skip(pb, size);
150 }
151
152 return 0;
153 }
154
155 static int nuv_header(AVFormatContext *s)
156 {
157 NUVContext *ctx = s->priv_data;
158 AVIOContext *pb = s->pb;
159 char id_string[12];
160 double aspect, fps;
161 int is_mythtv, width, height, v_packs, a_packs, ret;
162 AVStream *vst = NULL, *ast = NULL;
163
164 avio_read(pb, id_string, 12);
165 is_mythtv = !memcmp(id_string, "MythTVVideo", 12);
166 avio_skip(pb, 5); // version string
167 avio_skip(pb, 3); // padding
168 width = avio_rl32(pb);
169 height = avio_rl32(pb);
170 avio_rl32(pb); // unused, "desiredwidth"
171 avio_rl32(pb); // unused, "desiredheight"
172 avio_r8(pb); // 'P' == progressive, 'I' == interlaced
173 avio_skip(pb, 3); // padding
174 aspect = av_int2double(avio_rl64(pb));
175 if (aspect > 0.9999 && aspect < 1.0001)
176 aspect = 4.0 / 3.0;
177 fps = av_int2double(avio_rl64(pb));
178 if (fps < 0.0f) {
179 if (s->error_recognition & AV_EF_EXPLODE) {
180 av_log(s, AV_LOG_ERROR, "Invalid frame rate %f\n", fps);
181 return AVERROR_INVALIDDATA;
182 } else {
183 av_log(s, AV_LOG_WARNING, "Invalid frame rate %f, setting to 0.\n", fps);
184 fps = 0.0f;
185 }
186 }
187
188 // number of packets per stream type, -1 means unknown, e.g. streaming
189 v_packs = avio_rl32(pb);
190 a_packs = avio_rl32(pb);
191 avio_rl32(pb); // text
192
193 avio_rl32(pb); // keyframe distance (?)
194
195 if (v_packs) {
196 vst = avformat_new_stream(s, NULL);
197 if (!vst)
198 return AVERROR(ENOMEM);
199 ctx->v_id = vst->index;
200
201 ret = av_image_check_size(width, height, 0, ctx);
202 if (ret < 0)
203 return ret;
204
205 vst->codec->codec_type = AVMEDIA_TYPE_VIDEO;
206 vst->codec->codec_id = AV_CODEC_ID_NUV;
207 vst->codec->width = width;
208 vst->codec->height = height;
209 vst->codec->bits_per_coded_sample = 10;
210 vst->sample_aspect_ratio = av_d2q(aspect * height / width,
211 10000);
212 vst->avg_frame_rate = av_d2q(fps, 60000);
213 avpriv_set_pts_info(vst, 32, 1, 1000);
214 } else
215 ctx->v_id = -1;
216
217 if (a_packs) {
218 ast = avformat_new_stream(s, NULL);
219 if (!ast)
220 return AVERROR(ENOMEM);
221 ctx->a_id = ast->index;
222
223 ast->codec->codec_type = AVMEDIA_TYPE_AUDIO;
224 ast->codec->codec_id = AV_CODEC_ID_PCM_S16LE;
225 ast->codec->channels = 2;
226 ast->codec->channel_layout = AV_CH_LAYOUT_STEREO;
227 ast->codec->sample_rate = 44100;
228 ast->codec->bit_rate = 2 * 2 * 44100 * 8;
229 ast->codec->block_align = 2 * 2;
230 ast->codec->bits_per_coded_sample = 16;
231 avpriv_set_pts_info(ast, 32, 1, 1000);
232 } else
233 ctx->a_id = -1;
234
235 if ((ret = get_codec_data(pb, vst, ast, is_mythtv)) < 0)
236 return ret;
237
238 ctx->rtjpg_video = vst && vst->codec->codec_id == AV_CODEC_ID_NUV;
239
240 return 0;
241 }
242
243 #define HDRSIZE 12
244
245 static int nuv_packet(AVFormatContext *s, AVPacket *pkt)
246 {
247 NUVContext *ctx = s->priv_data;
248 AVIOContext *pb = s->pb;
249 uint8_t hdr[HDRSIZE];
250 nuv_frametype frametype;
251 int ret, size;
252
253 while (!pb->eof_reached) {
254 int copyhdrsize = ctx->rtjpg_video ? HDRSIZE : 0;
255 uint64_t pos = avio_tell(pb);
256
257 ret = avio_read(pb, hdr, HDRSIZE);
258 if (ret < HDRSIZE)
259 return ret < 0 ? ret : AVERROR(EIO);
260
261 frametype = hdr[0];
262 size = PKTSIZE(AV_RL32(&hdr[8]));
263
264 switch (frametype) {
265 case NUV_EXTRADATA:
266 if (!ctx->rtjpg_video) {
267 avio_skip(pb, size);
268 break;
269 }
270 case NUV_VIDEO:
271 if (ctx->v_id < 0) {
272 av_log(s, AV_LOG_ERROR, "Video packet in file without video stream!\n");
273 avio_skip(pb, size);
274 break;
275 }
276 ret = av_new_packet(pkt, copyhdrsize + size);
277 if (ret < 0)
278 return ret;
279 // HACK: we have no idea if it is a keyframe,
280 // but if we mark none seeking will not work at all.
281 pkt->flags |= AV_PKT_FLAG_KEY;
282 pkt->pos = pos;
283 pkt->pts = AV_RL32(&hdr[4]);
284 pkt->stream_index = ctx->v_id;
285 memcpy(pkt->data, hdr, copyhdrsize);
286 ret = avio_read(pb, pkt->data + copyhdrsize, size);
287 if (ret < 0) {
288 av_packet_unref(pkt);
289 return ret;
290 }
291 if (ret < size)
292 av_shrink_packet(pkt, copyhdrsize + ret);
293 return 0;
294 case NUV_AUDIO:
295 if (ctx->a_id < 0) {
296 av_log(s, AV_LOG_ERROR, "Audio packet in file without audio stream!\n");
297 avio_skip(pb, size);
298 break;
299 }
300 ret = av_get_packet(pb, pkt, size);
301 pkt->flags |= AV_PKT_FLAG_KEY;
302 pkt->pos = pos;
303 pkt->pts = AV_RL32(&hdr[4]);
304 pkt->stream_index = ctx->a_id;
305 if (ret < 0)
306 return ret;
307 return 0;
308 case NUV_SEEKP:
309 // contains no data, size value is invalid
310 break;
311 default:
312 avio_skip(pb, size);
313 break;
314 }
315 }
316
317 return AVERROR(EIO);
318 }
319
320 AVInputFormat ff_nuv_demuxer = {
321 .name = "nuv",
322 .long_name = NULL_IF_CONFIG_SMALL("NuppelVideo"),
323 .priv_data_size = sizeof(NUVContext),
324 .read_probe = nuv_probe,
325 .read_header = nuv_header,
326 .read_packet = nuv_packet,
327 .flags = AVFMT_GENERIC_INDEX,
328 };