]> git.sesse.net Git - ffmpeg/blob - libavformat/asf.c
fix gsize=0 / -1 case (if(<24) goto fail) before it is not a good idea
[ffmpeg] / libavformat / asf.c
1 /*
2  * ASF compatible demuxer
3  * Copyright (c) 2000, 2001 Fabrice Bellard.
4  *
5  * This file is part of FFmpeg.
6  *
7  * FFmpeg is free software; you can redistribute it and/or
8  * modify it under the terms of the GNU Lesser General Public
9  * License as published by the Free Software Foundation; either
10  * version 2.1 of the License, or (at your option) any later version.
11  *
12  * FFmpeg is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15  * Lesser General Public License for more details.
16  *
17  * You should have received a copy of the GNU Lesser General Public
18  * License along with FFmpeg; if not, write to the Free Software
19  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20  */
21 #include "avformat.h"
22 #include "riff.h"
23 #include "mpegaudio.h"
24 #include "asf.h"
25 #include "common.h"
26
27 #undef NDEBUG
28 #include <assert.h>
29
30 #define FRAME_HEADER_SIZE 17
31 // Fix Me! FRAME_HEADER_SIZE may be different.
32
33 static const GUID index_guid = {
34     0x90, 0x08, 0x00, 0x33, 0xb1, 0xe5, 0xcf, 0x11, 0x89, 0xf4, 0x00, 0xa0, 0xc9, 0x03, 0x49, 0xcb
35 };
36
37 static const GUID stream_bitrate_guid = { /* (http://get.to/sdp) */
38     0xce, 0x75, 0xf8, 0x7b, 0x8d, 0x46, 0xd1, 0x11, 0x8d, 0x82, 0x00, 0x60, 0x97, 0xc9, 0xa2, 0xb2
39 };
40 /**********************************/
41 /* decoding */
42
43 //#define DEBUG
44
45 #ifdef DEBUG
46 #define PRINT_IF_GUID(g,cmp) \
47 if (!memcmp(g, &cmp, sizeof(GUID))) \
48     printf("(GUID: %s) ", #cmp)
49
50 static void print_guid(const GUID *g)
51 {
52     int i;
53     PRINT_IF_GUID(g, asf_header);
54     else PRINT_IF_GUID(g, file_header);
55     else PRINT_IF_GUID(g, stream_header);
56     else PRINT_IF_GUID(g, audio_stream);
57     else PRINT_IF_GUID(g, audio_conceal_none);
58     else PRINT_IF_GUID(g, video_stream);
59     else PRINT_IF_GUID(g, video_conceal_none);
60     else PRINT_IF_GUID(g, command_stream);
61     else PRINT_IF_GUID(g, comment_header);
62     else PRINT_IF_GUID(g, codec_comment_header);
63     else PRINT_IF_GUID(g, codec_comment1_header);
64     else PRINT_IF_GUID(g, data_header);
65     else PRINT_IF_GUID(g, index_guid);
66     else PRINT_IF_GUID(g, head1_guid);
67     else PRINT_IF_GUID(g, head2_guid);
68     else PRINT_IF_GUID(g, my_guid);
69     else PRINT_IF_GUID(g, ext_stream_header);
70     else PRINT_IF_GUID(g, extended_content_header);
71     else PRINT_IF_GUID(g, ext_stream_embed_stream_header);
72     else PRINT_IF_GUID(g, ext_stream_audio_stream);
73     else PRINT_IF_GUID(g, metadata_header);
74     else PRINT_IF_GUID(g, stream_bitrate_guid);
75     else
76         printf("(GUID: unknown) ");
77     for(i=0;i<16;i++)
78         printf(" 0x%02x,", (*g)[i]);
79     printf("}\n");
80 }
81 #undef PRINT_IF_GUID
82 #endif
83
84 static void get_guid(ByteIOContext *s, GUID *g)
85 {
86     assert(sizeof(*g) == 16);
87     get_buffer(s, g, sizeof(*g));
88 }
89
90 #if 0
91 static void get_str16(ByteIOContext *pb, char *buf, int buf_size)
92 {
93     int len, c;
94     char *q;
95
96     len = get_le16(pb);
97     q = buf;
98     while (len > 0) {
99         c = get_le16(pb);
100         if ((q - buf) < buf_size - 1)
101             *q++ = c;
102         len--;
103     }
104     *q = '\0';
105 }
106 #endif
107
108 static void get_str16_nolen(ByteIOContext *pb, int len, char *buf, int buf_size)
109 {
110     char* q = buf;
111     len /= 2;
112     while (len--) {
113         uint8_t tmp;
114         PUT_UTF8(get_le16(pb), tmp, if (q - buf < buf_size - 1) *q++ = tmp;)
115     }
116     *q = '\0';
117 }
118
119 static int asf_probe(AVProbeData *pd)
120 {
121     /* check file header */
122     if (pd->buf_size <= 32)
123         return 0;
124
125     if (!memcmp(pd->buf, &asf_header, sizeof(GUID)))
126         return AVPROBE_SCORE_MAX;
127     else
128         return 0;
129 }
130
131 static int get_value(ByteIOContext *pb, int type){
132     switch(type){
133         case 2: return get_le32(pb);
134         case 3: return get_le32(pb);
135         case 4: return get_le64(pb);
136         case 5: return get_le16(pb);
137         default:return INT_MIN;
138     }
139 }
140
141 static int asf_read_header(AVFormatContext *s, AVFormatParameters *ap)
142 {
143     ASFContext *asf = s->priv_data;
144     GUID g;
145     ByteIOContext *pb = &s->pb;
146     AVStream *st;
147     ASFStream *asf_st;
148     int size, i;
149     int64_t gsize;
150     AVRational dar[128];
151
152     memset(dar, 0, sizeof(dar));
153
154     get_guid(pb, &g);
155     if (memcmp(&g, &asf_header, sizeof(GUID)))
156         goto fail;
157     get_le64(pb);
158     get_le32(pb);
159     get_byte(pb);
160     get_byte(pb);
161     memset(&asf->asfid2avid, -1, sizeof(asf->asfid2avid));
162     for(;;) {
163         get_guid(pb, &g);
164         gsize = get_le64(pb);
165 #ifdef DEBUG
166         printf("%08"PRIx64": ", url_ftell(pb) - 24);
167         print_guid(&g);
168         printf("  size=0x%"PRIx64"\n", gsize);
169 #endif
170         if (!memcmp(&g, &data_header, sizeof(GUID))) {
171             asf->data_object_offset = url_ftell(pb);
172             // if not streaming, gsize is not unlimited (how?), and there is enough space in the file..
173             if (!(asf->hdr.flags & 0x01) && gsize >= 100) {
174                 asf->data_object_size = gsize - 24;
175             } else {
176                 asf->data_object_size = (uint64_t)-1;
177             }
178             break;
179         }
180         if (gsize < 24)
181             goto fail;
182         if (!memcmp(&g, &file_header, sizeof(GUID))) {
183             get_guid(pb, &asf->hdr.guid);
184             asf->hdr.file_size          = get_le64(pb);
185             asf->hdr.create_time        = get_le64(pb);
186             asf->nb_packets             = get_le64(pb);
187             asf->hdr.send_time          = get_le64(pb);
188             asf->hdr.play_time          = get_le64(pb);
189             asf->hdr.preroll            = get_le32(pb);
190             asf->hdr.ignore             = get_le32(pb);
191             asf->hdr.flags              = get_le32(pb);
192             asf->hdr.min_pktsize        = get_le32(pb);
193             asf->hdr.max_pktsize        = get_le32(pb);
194             asf->hdr.max_bitrate        = get_le32(pb);
195             asf->packet_size = asf->hdr.max_pktsize;
196         } else if (!memcmp(&g, &stream_header, sizeof(GUID))) {
197             int type, type_specific_size, sizeX;
198             uint64_t total_size;
199             unsigned int tag1;
200             int64_t pos1, pos2;
201             int test_for_ext_stream_audio;
202
203             pos1 = url_ftell(pb);
204
205             st = av_new_stream(s, 0);
206             if (!st)
207                 goto fail;
208             av_set_pts_info(st, 32, 1, 1000); /* 32 bit pts in ms */
209             asf_st = av_mallocz(sizeof(ASFStream));
210             if (!asf_st)
211                 goto fail;
212             st->priv_data = asf_st;
213             st->start_time = asf->hdr.preroll;
214             if(!(asf->hdr.flags & 0x01)) { // if we aren't streaming...
215                 st->duration = asf->hdr.send_time /
216                     (10000000 / 1000) - st->start_time;
217             }
218             get_guid(pb, &g);
219
220             test_for_ext_stream_audio = 0;
221             if (!memcmp(&g, &audio_stream, sizeof(GUID))) {
222                 type = CODEC_TYPE_AUDIO;
223             } else if (!memcmp(&g, &video_stream, sizeof(GUID))) {
224                 type = CODEC_TYPE_VIDEO;
225             } else if (!memcmp(&g, &command_stream, sizeof(GUID))) {
226                 type = CODEC_TYPE_UNKNOWN;
227             } else if (!memcmp(&g, &ext_stream_embed_stream_header, sizeof(GUID))) {
228                 test_for_ext_stream_audio = 1;
229                 type = CODEC_TYPE_UNKNOWN;
230             } else {
231                 goto fail;
232             }
233             get_guid(pb, &g);
234             total_size = get_le64(pb);
235             type_specific_size = get_le32(pb);
236             get_le32(pb);
237             st->id = get_le16(pb) & 0x7f; /* stream id */
238             // mapping of asf ID to AV stream ID;
239             asf->asfid2avid[st->id] = s->nb_streams - 1;
240
241             get_le32(pb);
242
243             if (test_for_ext_stream_audio) {
244                 get_guid(pb, &g);
245                 if (!memcmp(&g, &ext_stream_audio_stream, sizeof(GUID))) {
246                     type = CODEC_TYPE_AUDIO;
247                     get_guid(pb, &g);
248                     get_le32(pb);
249                     get_le32(pb);
250                     get_le32(pb);
251                     get_guid(pb, &g);
252                     get_le32(pb);
253                 }
254             }
255
256             st->codec->codec_type = type;
257             if (type == CODEC_TYPE_AUDIO) {
258                 get_wav_header(pb, st->codec, type_specific_size);
259                 st->need_parsing = 1;
260                 /* We have to init the frame size at some point .... */
261                 pos2 = url_ftell(pb);
262                 if (gsize >= (pos2 + 8 - pos1 + 24)) {
263                     asf_st->ds_span = get_byte(pb);
264                     asf_st->ds_packet_size = get_le16(pb);
265                     asf_st->ds_chunk_size = get_le16(pb);
266                     get_le16(pb); //ds_data_size
267                     get_byte(pb); //ds_silence_data
268                 }
269                 //printf("Descrambling: ps:%d cs:%d ds:%d s:%d  sd:%d\n",
270                 //       asf_st->ds_packet_size, asf_st->ds_chunk_size,
271                 //       asf_st->ds_data_size, asf_st->ds_span, asf_st->ds_silence_data);
272                 if (asf_st->ds_span > 1) {
273                     if (!asf_st->ds_chunk_size
274                         || (asf_st->ds_packet_size/asf_st->ds_chunk_size <= 1)
275                         || asf_st->ds_packet_size % asf_st->ds_chunk_size)
276                         asf_st->ds_span = 0; // disable descrambling
277                 }
278                 switch (st->codec->codec_id) {
279                 case CODEC_ID_MP3:
280                     st->codec->frame_size = MPA_FRAME_SIZE;
281                     break;
282                 case CODEC_ID_PCM_S16LE:
283                 case CODEC_ID_PCM_S16BE:
284                 case CODEC_ID_PCM_U16LE:
285                 case CODEC_ID_PCM_U16BE:
286                 case CODEC_ID_PCM_S8:
287                 case CODEC_ID_PCM_U8:
288                 case CODEC_ID_PCM_ALAW:
289                 case CODEC_ID_PCM_MULAW:
290                     st->codec->frame_size = 1;
291                     break;
292                 default:
293                     /* This is probably wrong, but it prevents a crash later */
294                     st->codec->frame_size = 1;
295                     break;
296                 }
297             } else if (type == CODEC_TYPE_VIDEO) {
298                 get_le32(pb);
299                 get_le32(pb);
300                 get_byte(pb);
301                 size = get_le16(pb); /* size */
302                 sizeX= get_le32(pb); /* size */
303                 st->codec->width = get_le32(pb);
304                 st->codec->height = get_le32(pb);
305                 /* not available for asf */
306                 get_le16(pb); /* panes */
307                 st->codec->bits_per_sample = get_le16(pb); /* depth */
308                 tag1 = get_le32(pb);
309                 url_fskip(pb, 20);
310 //                av_log(NULL, AV_LOG_DEBUG, "size:%d tsize:%d sizeX:%d\n", size, total_size, sizeX);
311                 size= sizeX;
312                 if (size > 40) {
313                     st->codec->extradata_size = size - 40;
314                     st->codec->extradata = av_mallocz(st->codec->extradata_size + FF_INPUT_BUFFER_PADDING_SIZE);
315                     get_buffer(pb, st->codec->extradata, st->codec->extradata_size);
316                 }
317
318         /* Extract palette from extradata if bpp <= 8 */
319         /* This code assumes that extradata contains only palette */
320         /* This is true for all paletted codecs implemented in ffmpeg */
321         if (st->codec->extradata_size && (st->codec->bits_per_sample <= 8)) {
322             st->codec->palctrl = av_mallocz(sizeof(AVPaletteControl));
323 #ifdef WORDS_BIGENDIAN
324             for (i = 0; i < FFMIN(st->codec->extradata_size, AVPALETTE_SIZE)/4; i++)
325                 st->codec->palctrl->palette[i] = bswap_32(((uint32_t*)st->codec->extradata)[i]);
326 #else
327             memcpy(st->codec->palctrl->palette, st->codec->extradata,
328                    FFMIN(st->codec->extradata_size, AVPALETTE_SIZE));
329 #endif
330             st->codec->palctrl->palette_changed = 1;
331         }
332
333                 st->codec->codec_tag = tag1;
334                 st->codec->codec_id = codec_get_id(codec_bmp_tags, tag1);
335                 if(tag1 == MKTAG('D', 'V', 'R', ' '))
336                     st->need_parsing = 1;
337             }
338             pos2 = url_ftell(pb);
339             url_fskip(pb, gsize - (pos2 - pos1 + 24));
340         } else if (!memcmp(&g, &comment_header, sizeof(GUID))) {
341             int len1, len2, len3, len4, len5;
342
343             len1 = get_le16(pb);
344             len2 = get_le16(pb);
345             len3 = get_le16(pb);
346             len4 = get_le16(pb);
347             len5 = get_le16(pb);
348             get_str16_nolen(pb, len1, s->title    , sizeof(s->title));
349             get_str16_nolen(pb, len2, s->author   , sizeof(s->author));
350             get_str16_nolen(pb, len3, s->copyright, sizeof(s->copyright));
351             get_str16_nolen(pb, len4, s->comment  , sizeof(s->comment));
352             url_fskip(pb, len5);
353         } else if (!memcmp(&g, &stream_bitrate_guid, sizeof(GUID))) {
354             int stream_count = get_le16(pb);
355             int j;
356
357 //            av_log(NULL, AV_LOG_ERROR, "stream bitrate properties\n");
358 //            av_log(NULL, AV_LOG_ERROR, "streams %d\n", streams);
359             for(j = 0; j < stream_count; j++) {
360                 int flags, bitrate, stream_id;
361
362                 flags= get_le16(pb);
363                 bitrate= get_le32(pb);
364                 stream_id= (flags & 0x7f);
365 //                av_log(NULL, AV_LOG_ERROR, "flags: 0x%x stream id %d, bitrate %d\n", flags, stream_id, bitrate);
366                 asf->stream_bitrates[stream_id-1]= bitrate;
367             }
368        } else if (!memcmp(&g, &extended_content_header, sizeof(GUID))) {
369                 int desc_count, i;
370
371                 desc_count = get_le16(pb);
372                 for(i=0;i<desc_count;i++)
373                 {
374                         int name_len,value_type,value_len;
375                         uint64_t value_num = 0;
376                         char name[1024];
377
378                         name_len = get_le16(pb);
379                         get_str16_nolen(pb, name_len, name, sizeof(name));
380                         value_type = get_le16(pb);
381                         value_len = get_le16(pb);
382                         if ((value_type == 0) || (value_type == 1)) // unicode or byte
383                         {
384                                 if     (!strcmp(name,"WM/AlbumTitle")) get_str16_nolen(pb, value_len, s->album, sizeof(s->album));
385                                 else if(!strcmp(name,"WM/Genre"     )) get_str16_nolen(pb, value_len, s->genre, sizeof(s->genre));
386                                 else url_fskip(pb, value_len);
387                         }
388                         if ((value_type >= 2) && (value_type <= 5)) // boolean or DWORD or QWORD or WORD
389                         {
390                                 value_num= get_value(pb, value_type);
391                                 if (!strcmp(name,"WM/Track"      )) s->track = value_num + 1;
392                                 if (!strcmp(name,"WM/TrackNumber")) s->track = value_num;
393                         }
394                 }
395         } else if (!memcmp(&g, &metadata_header, sizeof(GUID))) {
396             int n, stream_num, name_len, value_len, value_type, value_num;
397             n = get_le16(pb);
398
399             for(i=0;i<n;i++) {
400                 char name[1024];
401
402                 get_le16(pb); //lang_list_index
403                 stream_num= get_le16(pb);
404                 name_len=   get_le16(pb);
405                 value_type= get_le16(pb);
406                 value_len=  get_le32(pb);
407
408                 get_str16_nolen(pb, name_len, name, sizeof(name));
409 //av_log(NULL, AV_LOG_ERROR, "%d %d %d %d %d <%s>\n", i, stream_num, name_len, value_type, value_len, name);
410                 value_num= get_le16(pb);//we should use get_value() here but it doesnt work 2 is le16 here but le32 elsewhere
411                 url_fskip(pb, value_len - 2);
412
413                 if(stream_num<128){
414                     if     (!strcmp(name, "AspectRatioX")) dar[stream_num].num= value_num;
415                     else if(!strcmp(name, "AspectRatioY")) dar[stream_num].den= value_num;
416                 }
417             }
418         } else if (!memcmp(&g, &ext_stream_header, sizeof(GUID))) {
419             int ext_len, payload_ext_ct, stream_ct;
420             uint32_t ext_d;
421             int64_t pos_ex_st;
422             pos_ex_st = url_ftell(pb);
423
424             get_le64(pb); // starttime
425             get_le64(pb); // endtime
426             get_le32(pb); // leak-datarate
427             get_le32(pb); // bucket-datasize
428             get_le32(pb); // init-bucket-fullness
429             get_le32(pb); // alt-leak-datarate
430             get_le32(pb); // alt-bucket-datasize
431             get_le32(pb); // alt-init-bucket-fullness
432             get_le32(pb); // max-object-size
433             get_le32(pb); // flags (reliable,seekable,no_cleanpoints?,resend-live-cleanpoints, rest of bits reserved)
434             get_le16(pb); // stream-num
435             get_le16(pb); // stream-language-id-index
436             get_le64(pb); // avg frametime in 100ns units
437             stream_ct = get_le16(pb); //stream-name-count
438             payload_ext_ct = get_le16(pb); //payload-extension-system-count
439
440             for (i=0; i<stream_ct; i++){
441                 get_le16(pb);
442                 ext_len = get_le16(pb);
443                 url_fseek(pb, ext_len, SEEK_CUR);
444             }
445
446             for (i=0; i<payload_ext_ct; i++){
447                 get_guid(pb, &g);
448                 ext_d=get_le16(pb);
449                 ext_len=get_le32(pb);
450                 url_fseek(pb, ext_len, SEEK_CUR);
451             }
452
453             // there could be a optional stream properties object to follow
454             // if so the next iteration will pick it up
455         } else if (!memcmp(&g, &head1_guid, sizeof(GUID))) {
456             int v1, v2;
457             get_guid(pb, &g);
458             v1 = get_le32(pb);
459             v2 = get_le16(pb);
460 #if 0
461         } else if (!memcmp(&g, &codec_comment_header, sizeof(GUID))) {
462             int len, v1, n, num;
463             char str[256], *q;
464             char tag[16];
465
466             get_guid(pb, &g);
467             print_guid(&g);
468
469             n = get_le32(pb);
470             for(i=0;i<n;i++) {
471                 num = get_le16(pb); /* stream number */
472                 get_str16(pb, str, sizeof(str));
473                 get_str16(pb, str, sizeof(str));
474                 len = get_le16(pb);
475                 q = tag;
476                 while (len > 0) {
477                     v1 = get_byte(pb);
478                     if ((q - tag) < sizeof(tag) - 1)
479                         *q++ = v1;
480                     len--;
481                 }
482                 *q = '\0';
483             }
484 #endif
485         } else if (url_feof(pb)) {
486             goto fail;
487         } else {
488             url_fseek(pb, gsize - 24, SEEK_CUR);
489         }
490     }
491     get_guid(pb, &g);
492     get_le64(pb);
493     get_byte(pb);
494     get_byte(pb);
495     if (url_feof(pb))
496         goto fail;
497     asf->data_offset = url_ftell(pb);
498     asf->packet_size_left = 0;
499
500
501     for(i=0; i<128; i++){
502         int stream_num= asf->asfid2avid[i];
503         if(stream_num>=0 && dar[i].num>0 && dar[i].den>0){
504             AVCodecContext *codec= s->streams[stream_num]->codec;
505             av_reduce(&codec->sample_aspect_ratio.num,
506                     &codec->sample_aspect_ratio.den,
507                     dar[i].num, dar[i].den, INT_MAX);
508 //av_log(NULL, AV_LOG_ERROR, "dar %d:%d sar=%d:%d\n", dar[i].num, dar[i].den, codec->sample_aspect_ratio.num, codec->sample_aspect_ratio.den);
509         }
510     }
511
512     return 0;
513
514  fail:
515      for(i=0;i<s->nb_streams;i++) {
516         AVStream *st = s->streams[i];
517         if (st) {
518             av_free(st->priv_data);
519             av_free(st->codec->extradata);
520         }
521         av_free(st);
522     }
523     return -1;
524 }
525
526 #define DO_2BITS(bits, var, defval) \
527     switch (bits & 3) \
528     { \
529     case 3: var = get_le32(pb); rsize += 4; break; \
530     case 2: var = get_le16(pb); rsize += 2; break; \
531     case 1: var = get_byte(pb); rsize++; break; \
532     default: var = defval; break; \
533     }
534
535 /**
536  *
537  * @return <0 in case of an error
538  */
539 static int asf_get_packet(AVFormatContext *s)
540 {
541     ASFContext *asf = s->priv_data;
542     ByteIOContext *pb = &s->pb;
543     uint32_t packet_length, padsize;
544     int rsize = 9;
545     int c, d, e, off;
546
547     off= (url_ftell(&s->pb) - s->data_offset) % asf->packet_size + 3;
548
549     c=d=e=-1;
550     while(off-- > 0){
551         c=d; d=e;
552         e= get_byte(pb);
553         if(c == 0x82 && !d && !e)
554             break;
555     }
556
557     if (c != 0x82) {
558         if (!url_feof(pb))
559             av_log(s, AV_LOG_ERROR, "ff asf bad header %x  at:%"PRId64"\n", c, url_ftell(pb));
560     }
561     if ((c & 0x0f) == 2) { // always true for now
562         if (d || e) {
563             if (!url_feof(pb))
564                 av_log(s, AV_LOG_ERROR, "ff asf bad non zero\n");
565             return -1;
566         }
567         d= get_byte(pb);
568         e= get_byte(pb);
569         rsize+=2;
570 /*    }else{
571         if (!url_feof(pb))
572             printf("ff asf bad header %x  at:%"PRId64"\n", c, url_ftell(pb));
573         return AVERROR_IO;*/
574     }
575
576     asf->packet_flags = d;
577     asf->packet_property = e;
578
579     DO_2BITS(asf->packet_flags >> 5, packet_length, asf->packet_size);
580     DO_2BITS(asf->packet_flags >> 1, padsize, 0); // sequence ignored
581     DO_2BITS(asf->packet_flags >> 3, padsize, 0); // padding length
582
583     //the following checks prevent overflows and infinite loops
584     if(packet_length >= (1U<<29)){
585         av_log(s, AV_LOG_ERROR, "invalid packet_length %d at:%"PRId64"\n", packet_length, url_ftell(pb));
586         return -1;
587     }
588     if(padsize >= packet_length){
589         av_log(s, AV_LOG_ERROR, "invalid padsize %d at:%"PRId64"\n", padsize, url_ftell(pb));
590         return -1;
591     }
592
593     asf->packet_timestamp = get_le32(pb);
594     get_le16(pb); /* duration */
595     // rsize has at least 11 bytes which have to be present
596
597     if (asf->packet_flags & 0x01) {
598         asf->packet_segsizetype = get_byte(pb); rsize++;
599         asf->packet_segments = asf->packet_segsizetype & 0x3f;
600     } else {
601         asf->packet_segments = 1;
602         asf->packet_segsizetype = 0x80;
603     }
604     asf->packet_size_left = packet_length - padsize - rsize;
605     if (packet_length < asf->hdr.min_pktsize)
606         padsize += asf->hdr.min_pktsize - packet_length;
607     asf->packet_padsize = padsize;
608 #ifdef DEBUG
609     printf("packet: size=%d padsize=%d  left=%d\n", asf->packet_size, asf->packet_padsize, asf->packet_size_left);
610 #endif
611     return 0;
612 }
613
614 /**
615  *
616  * @return <0 if error
617  */
618 static int asf_read_frame_header(AVFormatContext *s){
619     ASFContext *asf = s->priv_data;
620     ByteIOContext *pb = &s->pb;
621     int rsize = 1;
622     int num = get_byte(pb);
623     int64_t ts0, ts1;
624
625     asf->packet_segments--;
626     asf->packet_key_frame = num >> 7;
627     asf->stream_index = asf->asfid2avid[num & 0x7f];
628     // sequence should be ignored!
629     DO_2BITS(asf->packet_property >> 4, asf->packet_seq, 0);
630     DO_2BITS(asf->packet_property >> 2, asf->packet_frag_offset, 0);
631     DO_2BITS(asf->packet_property, asf->packet_replic_size, 0);
632 //printf("key:%d stream:%d seq:%d offset:%d replic_size:%d\n", asf->packet_key_frame, asf->stream_index, asf->packet_seq, //asf->packet_frag_offset, asf->packet_replic_size);
633     if (asf->packet_replic_size >= 8) {
634         asf->packet_obj_size = get_le32(pb);
635         if(asf->packet_obj_size >= (1<<24) || asf->packet_obj_size <= 0){
636             av_log(s, AV_LOG_ERROR, "packet_obj_size invalid\n");
637             return -1;
638         }
639         asf->packet_frag_timestamp = get_le32(pb); // timestamp
640         if(asf->packet_replic_size >= 8+38+4){
641 //            for(i=0; i<asf->packet_replic_size-8; i++)
642 //                av_log(s, AV_LOG_DEBUG, "%02X ",get_byte(pb));
643 //            av_log(s, AV_LOG_DEBUG, "\n");
644             url_fskip(pb, 10);
645             ts0= get_le64(pb);
646             ts1= get_le64(pb);
647             url_fskip(pb, 12);
648             get_le32(pb);
649             url_fskip(pb, asf->packet_replic_size - 8 - 38 - 4);
650             if(ts0!= -1) asf->packet_frag_timestamp= ts0/10000;
651             else         asf->packet_frag_timestamp= AV_NOPTS_VALUE;
652         }else
653             url_fskip(pb, asf->packet_replic_size - 8);
654         rsize += asf->packet_replic_size; // FIXME - check validity
655     } else if (asf->packet_replic_size==1){
656         // multipacket - frag_offset is begining timestamp
657         asf->packet_time_start = asf->packet_frag_offset;
658         asf->packet_frag_offset = 0;
659         asf->packet_frag_timestamp = asf->packet_timestamp;
660
661         asf->packet_time_delta = get_byte(pb);
662         rsize++;
663     }else if(asf->packet_replic_size!=0){
664         av_log(s, AV_LOG_ERROR, "unexpected packet_replic_size of %d\n", asf->packet_replic_size);
665         return -1;
666     }
667     if (asf->packet_flags & 0x01) {
668         DO_2BITS(asf->packet_segsizetype >> 6, asf->packet_frag_size, 0); // 0 is illegal
669         if(asf->packet_frag_size > asf->packet_size_left - rsize){
670             av_log(s, AV_LOG_ERROR, "packet_frag_size is invalid\n");
671             return -1;
672         }
673         //printf("Fragsize %d\n", asf->packet_frag_size);
674     } else {
675         asf->packet_frag_size = asf->packet_size_left - rsize;
676         //printf("Using rest  %d %d %d\n", asf->packet_frag_size, asf->packet_size_left, rsize);
677     }
678     if (asf->packet_replic_size == 1) {
679         asf->packet_multi_size = asf->packet_frag_size;
680         if (asf->packet_multi_size > asf->packet_size_left)
681             return -1;
682     }
683     asf->packet_size_left -= rsize;
684     //printf("___objsize____  %d   %d    rs:%d\n", asf->packet_obj_size, asf->packet_frag_offset, rsize);
685
686     return 0;
687 }
688
689 static int asf_read_packet(AVFormatContext *s, AVPacket *pkt)
690 {
691     ASFContext *asf = s->priv_data;
692     ASFStream *asf_st = 0;
693     ByteIOContext *pb = &s->pb;
694     //static int pc = 0;
695     for (;;) {
696         if(url_feof(pb))
697             return AVERROR_IO;
698         if (asf->packet_size_left < FRAME_HEADER_SIZE
699             || asf->packet_segments < 1) {
700             //asf->packet_size_left <= asf->packet_padsize) {
701             int ret = asf->packet_size_left + asf->packet_padsize;
702             //printf("PacketLeftSize:%d  Pad:%d Pos:%"PRId64"\n", asf->packet_size_left, asf->packet_padsize, url_ftell(pb));
703             assert(ret>=0);
704             /* fail safe */
705             url_fskip(pb, ret);
706
707             asf->packet_pos= url_ftell(&s->pb);
708             if (asf->data_object_size != (uint64_t)-1 &&
709                 (asf->packet_pos - asf->data_object_offset >= asf->data_object_size))
710                 return AVERROR_IO; /* Do not exceed the size of the data object */
711             ret = asf_get_packet(s);
712             //printf("READ ASF PACKET  %d   r:%d   c:%d\n", ret, asf->packet_size_left, pc++);
713             if (ret < 0)
714                 assert(asf->packet_size_left < FRAME_HEADER_SIZE || asf->packet_segments < 1);
715             asf->packet_time_start = 0;
716             continue;
717         }
718         if (asf->packet_time_start == 0) {
719             if(asf_read_frame_header(s) < 0){
720                 asf->packet_segments= 0;
721                 continue;
722             }
723             if (asf->stream_index < 0
724                 || s->streams[asf->stream_index]->discard >= AVDISCARD_ALL
725                 || (!asf->packet_key_frame && s->streams[asf->stream_index]->discard >= AVDISCARD_NONKEY)
726                 ) {
727                 asf->packet_time_start = 0;
728                 /* unhandled packet (should not happen) */
729                 url_fskip(pb, asf->packet_frag_size);
730                 asf->packet_size_left -= asf->packet_frag_size;
731                 if(asf->stream_index < 0)
732                     av_log(s, AV_LOG_ERROR, "ff asf skip %d (unknown stream)\n", asf->packet_frag_size);
733                 continue;
734             }
735             asf->asf_st = s->streams[asf->stream_index]->priv_data;
736         }
737         asf_st = asf->asf_st;
738
739         if (asf->packet_replic_size == 1) {
740             // frag_offset is here used as the begining timestamp
741             asf->packet_frag_timestamp = asf->packet_time_start;
742             asf->packet_time_start += asf->packet_time_delta;
743             asf->packet_obj_size = asf->packet_frag_size = get_byte(pb);
744             asf->packet_size_left--;
745             asf->packet_multi_size--;
746             if (asf->packet_multi_size < asf->packet_obj_size)
747             {
748                 asf->packet_time_start = 0;
749                 url_fskip(pb, asf->packet_multi_size);
750                 asf->packet_size_left -= asf->packet_multi_size;
751                 continue;
752             }
753             asf->packet_multi_size -= asf->packet_obj_size;
754             //printf("COMPRESS size  %d  %d  %d   ms:%d\n", asf->packet_obj_size, asf->packet_frag_timestamp, asf->packet_size_left, asf->packet_multi_size);
755         }
756         if (   asf_st->pkt.size != asf->packet_obj_size
757             || asf_st->frag_offset + asf->packet_frag_size > asf_st->pkt.size) { //FIXME is this condition sufficient?
758             if(asf_st->pkt.data){
759                 av_log(s, AV_LOG_INFO, "freeing incomplete packet size %d, new %d\n", asf_st->pkt.size, asf->packet_obj_size);
760                 asf_st->frag_offset = 0;
761                 av_free_packet(&asf_st->pkt);
762             }
763             /* new packet */
764             av_new_packet(&asf_st->pkt, asf->packet_obj_size);
765             asf_st->seq = asf->packet_seq;
766             asf_st->pkt.pts = asf->packet_frag_timestamp;
767             asf_st->pkt.stream_index = asf->stream_index;
768             asf_st->pkt.pos =
769             asf_st->packet_pos= asf->packet_pos;
770 //printf("new packet: stream:%d key:%d packet_key:%d audio:%d size:%d\n",
771 //asf->stream_index, asf->packet_key_frame, asf_st->pkt.flags & PKT_FLAG_KEY,
772 //s->streams[asf->stream_index]->codec->codec_type == CODEC_TYPE_AUDIO, asf->packet_obj_size);
773             if (s->streams[asf->stream_index]->codec->codec_type == CODEC_TYPE_AUDIO)
774                 asf->packet_key_frame = 1;
775             if (asf->packet_key_frame)
776                 asf_st->pkt.flags |= PKT_FLAG_KEY;
777         }
778
779         /* read data */
780         //printf("READ PACKET s:%d  os:%d  o:%d,%d  l:%d   DATA:%p\n",
781         //       asf->packet_size, asf_st->pkt.size, asf->packet_frag_offset,
782         //       asf_st->frag_offset, asf->packet_frag_size, asf_st->pkt.data);
783         asf->packet_size_left -= asf->packet_frag_size;
784         if (asf->packet_size_left < 0)
785             continue;
786
787         if(   asf->packet_frag_offset >= asf_st->pkt.size
788            || asf->packet_frag_size > asf_st->pkt.size - asf->packet_frag_offset){
789             av_log(s, AV_LOG_ERROR, "packet fragment position invalid %u,%u not in %u\n",
790                 asf->packet_frag_offset, asf->packet_frag_size, asf_st->pkt.size);
791             continue;
792         }
793
794         get_buffer(pb, asf_st->pkt.data + asf->packet_frag_offset,
795                    asf->packet_frag_size);
796         asf_st->frag_offset += asf->packet_frag_size;
797         /* test if whole packet is read */
798         if (asf_st->frag_offset == asf_st->pkt.size) {
799             /* return packet */
800             if (asf_st->ds_span > 1) {
801               if(asf_st->pkt.size != asf_st->ds_packet_size * asf_st->ds_span){
802                     av_log(s, AV_LOG_ERROR, "pkt.size != ds_packet_size * ds_span\n");
803               }else{
804                 /* packet descrambling */
805                 uint8_t *newdata = av_malloc(asf_st->pkt.size);
806                 if (newdata) {
807                     int offset = 0;
808                     while (offset < asf_st->pkt.size) {
809                         int off = offset / asf_st->ds_chunk_size;
810                         int row = off / asf_st->ds_span;
811                         int col = off % asf_st->ds_span;
812                         int idx = row + col * asf_st->ds_packet_size / asf_st->ds_chunk_size;
813                         //printf("off:%d  row:%d  col:%d  idx:%d\n", off, row, col, idx);
814
815                         assert(offset + asf_st->ds_chunk_size <= asf_st->pkt.size);
816                         assert(idx+1 <= asf_st->pkt.size / asf_st->ds_chunk_size);
817                         memcpy(newdata + offset,
818                                asf_st->pkt.data + idx * asf_st->ds_chunk_size,
819                                asf_st->ds_chunk_size);
820                         offset += asf_st->ds_chunk_size;
821                     }
822                     av_free(asf_st->pkt.data);
823                     asf_st->pkt.data = newdata;
824                 }
825               }
826             }
827             asf_st->frag_offset = 0;
828             *pkt= asf_st->pkt;
829             //printf("packet %d %d\n", asf_st->pkt.size, asf->packet_frag_size);
830             asf_st->pkt.size = 0;
831             asf_st->pkt.data = 0;
832             break; // packet completed
833         }
834     }
835     return 0;
836 }
837
838 static int asf_read_close(AVFormatContext *s)
839 {
840     int i;
841
842     for(i=0;i<s->nb_streams;i++) {
843         AVStream *st = s->streams[i];
844         av_free(st->priv_data);
845         av_free(st->codec->palctrl);
846     }
847     return 0;
848 }
849
850 // Added to support seeking after packets have been read
851 // If information is not reset, read_packet fails due to
852 // leftover information from previous reads
853 static void asf_reset_header(AVFormatContext *s)
854 {
855     ASFContext *asf = s->priv_data;
856     ASFStream *asf_st;
857     int i;
858
859     asf->packet_nb_frames = 0;
860     asf->packet_size_left = 0;
861     asf->packet_segments = 0;
862     asf->packet_flags = 0;
863     asf->packet_property = 0;
864     asf->packet_timestamp = 0;
865     asf->packet_segsizetype = 0;
866     asf->packet_segments = 0;
867     asf->packet_seq = 0;
868     asf->packet_replic_size = 0;
869     asf->packet_key_frame = 0;
870     asf->packet_padsize = 0;
871     asf->packet_frag_offset = 0;
872     asf->packet_frag_size = 0;
873     asf->packet_frag_timestamp = 0;
874     asf->packet_multi_size = 0;
875     asf->packet_obj_size = 0;
876     asf->packet_time_delta = 0;
877     asf->packet_time_start = 0;
878
879     for(i=0; i<s->nb_streams; i++){
880         asf_st= s->streams[i]->priv_data;
881         av_free_packet(&asf_st->pkt);
882         asf_st->frag_offset=0;
883         asf_st->seq=0;
884     }
885     asf->asf_st= NULL;
886 }
887
888 static int64_t asf_read_pts(AVFormatContext *s, int stream_index, int64_t *ppos, int64_t pos_limit)
889 {
890     ASFContext *asf = s->priv_data;
891     AVPacket pkt1, *pkt = &pkt1;
892     ASFStream *asf_st;
893     int64_t pts;
894     int64_t pos= *ppos;
895     int i;
896     int64_t start_pos[s->nb_streams];
897
898     for(i=0; i<s->nb_streams; i++){
899         start_pos[i]= pos;
900     }
901
902     pos= (pos+asf->packet_size-1-s->data_offset)/asf->packet_size*asf->packet_size+ s->data_offset;
903     *ppos= pos;
904     url_fseek(&s->pb, pos, SEEK_SET);
905
906 //printf("asf_read_pts\n");
907     asf_reset_header(s);
908     for(;;){
909         if (av_read_frame(s, pkt) < 0){
910             av_log(s, AV_LOG_INFO, "asf_read_pts failed\n");
911             return AV_NOPTS_VALUE;
912         }
913
914         pts= pkt->pts;
915
916         av_free_packet(pkt);
917         if(pkt->flags&PKT_FLAG_KEY){
918             i= pkt->stream_index;
919
920             asf_st= s->streams[i]->priv_data;
921
922 //            assert((asf_st->packet_pos - s->data_offset) % asf->packet_size == 0);
923             pos= asf_st->packet_pos;
924
925             av_add_index_entry(s->streams[i], pos, pts, pkt->size, pos - start_pos[i] + 1, AVINDEX_KEYFRAME);
926             start_pos[i]= asf_st->packet_pos + 1;
927
928             if(pkt->stream_index == stream_index)
929                break;
930         }
931     }
932
933     *ppos= pos;
934 //printf("found keyframe at %"PRId64" stream %d stamp:%"PRId64"\n", *ppos, stream_index, pts);
935
936     return pts;
937 }
938
939 static void asf_build_simple_index(AVFormatContext *s, int stream_index)
940 {
941     GUID g;
942     ASFContext *asf = s->priv_data;
943     int64_t gsize, itime;
944     int64_t pos, current_pos, index_pts;
945     int i;
946     int pct,ict;
947
948     current_pos = url_ftell(&s->pb);
949
950     url_fseek(&s->pb, asf->data_object_offset + asf->data_object_size, SEEK_SET);
951     get_guid(&s->pb, &g);
952     if (!memcmp(&g, &index_guid, sizeof(GUID))) {
953         gsize = get_le64(&s->pb);
954         get_guid(&s->pb, &g);
955         itime=get_le64(&s->pb);
956         pct=get_le32(&s->pb);
957         ict=get_le32(&s->pb);
958         av_log(NULL, AV_LOG_DEBUG, "itime:0x%"PRIx64", pct:%d, ict:%d\n",itime,pct,ict);
959
960         for (i=0;i<ict;i++){
961             int pktnum=get_le32(&s->pb);
962             int pktct =get_le16(&s->pb);
963             av_log(NULL, AV_LOG_DEBUG, "pktnum:%d, pktct:%d\n", pktnum, pktct);
964
965             pos=s->data_offset + asf->packet_size*(int64_t)pktnum;
966             index_pts=av_rescale(itime, i, 10000);
967
968             av_add_index_entry(s->streams[stream_index], pos, index_pts, asf->packet_size, 0, AVINDEX_KEYFRAME);
969         }
970         asf->index_read= 1;
971     }
972     url_fseek(&s->pb, current_pos, SEEK_SET);
973 }
974
975 static int asf_read_seek(AVFormatContext *s, int stream_index, int64_t pts, int flags)
976 {
977     ASFContext *asf = s->priv_data;
978     AVStream *st = s->streams[stream_index];
979     int64_t pos;
980     int index;
981
982     if (asf->packet_size <= 0)
983         return -1;
984
985     if (!asf->index_read)
986         asf_build_simple_index(s, stream_index);
987
988     if(!(asf->index_read && st->index_entries)){
989         if(av_seek_frame_binary(s, stream_index, pts, flags)<0)
990             return -1;
991     }else{
992         index= av_index_search_timestamp(st, pts, flags);
993         if(index<0)
994             return -1;
995
996         /* find the position */
997         pos = st->index_entries[index].pos;
998         pts = st->index_entries[index].timestamp;
999
1000     // various attempts to find key frame have failed so far
1001     //    asf_reset_header(s);
1002     //    url_fseek(&s->pb, pos, SEEK_SET);
1003     //    key_pos = pos;
1004     //     for(i=0;i<16;i++){
1005     //         pos = url_ftell(&s->pb);
1006     //         if (av_read_frame(s, &pkt) < 0){
1007     //             av_log(s, AV_LOG_INFO, "seek failed\n");
1008     //             return -1;
1009     //         }
1010     //         asf_st = s->streams[stream_index]->priv_data;
1011     //         pos += st->parser->frame_offset;
1012     //
1013     //         if (pkt.size > b) {
1014     //             b = pkt.size;
1015     //             key_pos = pos;
1016     //         }
1017     //
1018     //         av_free_packet(&pkt);
1019     //     }
1020
1021         /* do the seek */
1022         av_log(NULL, AV_LOG_DEBUG, "SEEKTO: %"PRId64"\n", pos);
1023         url_fseek(&s->pb, pos, SEEK_SET);
1024     }
1025     asf_reset_header(s);
1026     return 0;
1027 }
1028
1029 AVInputFormat asf_demuxer = {
1030     "asf",
1031     "asf format",
1032     sizeof(ASFContext),
1033     asf_probe,
1034     asf_read_header,
1035     asf_read_packet,
1036     asf_read_close,
1037     asf_read_seek,
1038     asf_read_pts,
1039 };