]> git.sesse.net Git - ffmpeg/blob - libavformat/asfdec.c
Avoid divisions by 0 in the ASF demuxer if packet_size is not valid.
[ffmpeg] / libavformat / asfdec.c
1 /*
2  * ASF compatible demuxer
3  * Copyright (c) 2000, 2001 Fabrice Bellard
4  *
5  * This file is part of FFmpeg.
6  *
7  * FFmpeg is free software; you can redistribute it and/or
8  * modify it under the terms of the GNU Lesser General Public
9  * License as published by the Free Software Foundation; either
10  * version 2.1 of the License, or (at your option) any later version.
11  *
12  * FFmpeg is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15  * Lesser General Public License for more details.
16  *
17  * You should have received a copy of the GNU Lesser General Public
18  * License along with FFmpeg; if not, write to the Free Software
19  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20  */
21
22 //#define DEBUG
23
24 #include "libavutil/common.h"
25 #include "libavutil/avstring.h"
26 #include "libavcodec/mpegaudio.h"
27 #include "avformat.h"
28 #include "riff.h"
29 #include "asf.h"
30 #include "asfcrypt.h"
31 #include "avlanguage.h"
32
33 void ff_mms_set_stream_selection(URLContext *h, AVFormatContext *format);
34
35 #undef NDEBUG
36 #include <assert.h>
37
38 #define FRAME_HEADER_SIZE 17
39 // Fix Me! FRAME_HEADER_SIZE may be different.
40
41 static const ff_asf_guid index_guid = {
42     0x90, 0x08, 0x00, 0x33, 0xb1, 0xe5, 0xcf, 0x11, 0x89, 0xf4, 0x00, 0xa0, 0xc9, 0x03, 0x49, 0xcb
43 };
44
45 static const ff_asf_guid stream_bitrate_guid = { /* (http://get.to/sdp) */
46     0xce, 0x75, 0xf8, 0x7b, 0x8d, 0x46, 0xd1, 0x11, 0x8d, 0x82, 0x00, 0x60, 0x97, 0xc9, 0xa2, 0xb2
47 };
48 /**********************************/
49 /* decoding */
50
51 static int guidcmp(const void *g1, const void *g2)
52 {
53     return memcmp(g1, g2, sizeof(ff_asf_guid));
54 }
55
56 #ifdef DEBUG
57 #define PRINT_IF_GUID(g,cmp) \
58 if (!guidcmp(g, &cmp)) \
59     dprintf(NULL, "(GUID: %s) ", #cmp)
60
61 static void print_guid(const ff_asf_guid *g)
62 {
63     int i;
64     PRINT_IF_GUID(g, ff_asf_header);
65     else PRINT_IF_GUID(g, ff_asf_file_header);
66     else PRINT_IF_GUID(g, ff_asf_stream_header);
67     else PRINT_IF_GUID(g, ff_asf_audio_stream);
68     else PRINT_IF_GUID(g, ff_asf_audio_conceal_none);
69     else PRINT_IF_GUID(g, ff_asf_video_stream);
70     else PRINT_IF_GUID(g, ff_asf_video_conceal_none);
71     else PRINT_IF_GUID(g, ff_asf_command_stream);
72     else PRINT_IF_GUID(g, ff_asf_comment_header);
73     else PRINT_IF_GUID(g, ff_asf_codec_comment_header);
74     else PRINT_IF_GUID(g, ff_asf_codec_comment1_header);
75     else PRINT_IF_GUID(g, ff_asf_data_header);
76     else PRINT_IF_GUID(g, index_guid);
77     else PRINT_IF_GUID(g, ff_asf_head1_guid);
78     else PRINT_IF_GUID(g, ff_asf_head2_guid);
79     else PRINT_IF_GUID(g, ff_asf_my_guid);
80     else PRINT_IF_GUID(g, ff_asf_ext_stream_header);
81     else PRINT_IF_GUID(g, ff_asf_extended_content_header);
82     else PRINT_IF_GUID(g, ff_asf_ext_stream_embed_stream_header);
83     else PRINT_IF_GUID(g, ff_asf_ext_stream_audio_stream);
84     else PRINT_IF_GUID(g, ff_asf_metadata_header);
85     else PRINT_IF_GUID(g, stream_bitrate_guid);
86     else PRINT_IF_GUID(g, ff_asf_language_guid);
87     else
88         dprintf(NULL, "(GUID: unknown) ");
89     for(i=0;i<16;i++)
90         dprintf(NULL, " 0x%02x,", (*g)[i]);
91     dprintf(NULL, "}\n");
92 }
93 #undef PRINT_IF_GUID
94 #else
95 #define print_guid(g)
96 #endif
97
98 static void get_guid(ByteIOContext *s, ff_asf_guid *g)
99 {
100     assert(sizeof(*g) == 16);
101     get_buffer(s, *g, sizeof(*g));
102 }
103
104 #if 0
105 static void get_str16(ByteIOContext *pb, char *buf, int buf_size)
106 {
107     int len, c;
108     char *q;
109
110     len = get_le16(pb);
111     q = buf;
112     while (len > 0) {
113         c = get_le16(pb);
114         if ((q - buf) < buf_size - 1)
115             *q++ = c;
116         len--;
117     }
118     *q = '\0';
119 }
120 #endif
121
122 static void get_str16_nolen(ByteIOContext *pb, int len, char *buf, int buf_size)
123 {
124     char* q = buf;
125     for (; len > 1; len -= 2) {
126         uint8_t tmp;
127         PUT_UTF8(get_le16(pb), tmp, if (q - buf < buf_size - 1) *q++ = tmp;)
128     }
129     if (len > 0)
130         url_fskip(pb, len);
131     *q = '\0';
132 }
133
134 static int asf_probe(AVProbeData *pd)
135 {
136     /* check file header */
137     if (!guidcmp(pd->buf, &ff_asf_header))
138         return AVPROBE_SCORE_MAX;
139     else
140         return 0;
141 }
142
143 static int get_value(ByteIOContext *pb, int type){
144     switch(type){
145         case 2: return get_le32(pb);
146         case 3: return get_le32(pb);
147         case 4: return get_le64(pb);
148         case 5: return get_le16(pb);
149         default:return INT_MIN;
150     }
151 }
152
153 static void get_tag(AVFormatContext *s, const char *key, int type, int len)
154 {
155     char value[1024];
156     if (type <= 1) {         // unicode or byte
157         get_str16_nolen(s->pb, len, value, sizeof(value));
158     } else if (type <= 5) {  // boolean or DWORD or QWORD or WORD
159         uint64_t num = get_value(s->pb, type);
160         snprintf(value, sizeof(value), "%"PRIu64, num);
161     } else {
162         url_fskip(s->pb, len);
163         return;
164     }
165     if (!strncmp(key, "WM/", 3))
166         key += 3;
167     av_metadata_set(&s->metadata, key, value);
168 }
169
170 static int asf_read_header(AVFormatContext *s, AVFormatParameters *ap)
171 {
172     ASFContext *asf = s->priv_data;
173     ff_asf_guid g;
174     ByteIOContext *pb = s->pb;
175     AVStream *st;
176     ASFStream *asf_st;
177     int size, i;
178     int64_t gsize;
179     AVRational dar[128];
180     uint32_t bitrate[128];
181
182     memset(dar, 0, sizeof(dar));
183     memset(bitrate, 0, sizeof(bitrate));
184
185     get_guid(pb, &g);
186     if (guidcmp(&g, &ff_asf_header))
187         return -1;
188     get_le64(pb);
189     get_le32(pb);
190     get_byte(pb);
191     get_byte(pb);
192     memset(&asf->asfid2avid, -1, sizeof(asf->asfid2avid));
193     for(;;) {
194         get_guid(pb, &g);
195         gsize = get_le64(pb);
196         dprintf(s, "%08"PRIx64": ", url_ftell(pb) - 24);
197         print_guid(&g);
198         dprintf(s, "  size=0x%"PRIx64"\n", gsize);
199         if (!guidcmp(&g, &ff_asf_data_header)) {
200             asf->data_object_offset = url_ftell(pb);
201             // if not streaming, gsize is not unlimited (how?), and there is enough space in the file..
202             if (!(asf->hdr.flags & 0x01) && gsize >= 100) {
203                 asf->data_object_size = gsize - 24;
204             } else {
205                 asf->data_object_size = (uint64_t)-1;
206             }
207             break;
208         }
209         if (gsize < 24)
210             return -1;
211         if (!guidcmp(&g, &ff_asf_file_header)) {
212             get_guid(pb, &asf->hdr.guid);
213             asf->hdr.file_size          = get_le64(pb);
214             asf->hdr.create_time        = get_le64(pb);
215             asf->nb_packets             = get_le64(pb);
216             asf->hdr.play_time          = get_le64(pb);
217             asf->hdr.send_time          = get_le64(pb);
218             asf->hdr.preroll            = get_le32(pb);
219             asf->hdr.ignore             = get_le32(pb);
220             asf->hdr.flags              = get_le32(pb);
221             asf->hdr.min_pktsize        = get_le32(pb);
222             asf->hdr.max_pktsize        = get_le32(pb);
223             asf->hdr.max_bitrate        = get_le32(pb);
224             s->packet_size = asf->hdr.max_pktsize;
225         } else if (!guidcmp(&g, &ff_asf_stream_header)) {
226             enum CodecType type;
227             int type_specific_size, sizeX;
228             uint64_t total_size;
229             unsigned int tag1;
230             int64_t pos1, pos2, start_time;
231             int test_for_ext_stream_audio, is_dvr_ms_audio=0;
232
233             pos1 = url_ftell(pb);
234
235             st = av_new_stream(s, 0);
236             if (!st)
237                 return AVERROR(ENOMEM);
238             av_set_pts_info(st, 32, 1, 1000); /* 32 bit pts in ms */
239             asf_st = av_mallocz(sizeof(ASFStream));
240             if (!asf_st)
241                 return AVERROR(ENOMEM);
242             st->priv_data = asf_st;
243             start_time = asf->hdr.preroll;
244
245             asf_st->stream_language_index = 128; // invalid stream index means no language info
246
247             if(!(asf->hdr.flags & 0x01)) { // if we aren't streaming...
248                 st->duration = asf->hdr.send_time /
249                     (10000000 / 1000) - start_time;
250             }
251             get_guid(pb, &g);
252
253             test_for_ext_stream_audio = 0;
254             if (!guidcmp(&g, &ff_asf_audio_stream)) {
255                 type = CODEC_TYPE_AUDIO;
256             } else if (!guidcmp(&g, &ff_asf_video_stream)) {
257                 type = CODEC_TYPE_VIDEO;
258             } else if (!guidcmp(&g, &ff_asf_command_stream)) {
259                 type = CODEC_TYPE_DATA;
260             } else if (!guidcmp(&g, &ff_asf_ext_stream_embed_stream_header)) {
261                 test_for_ext_stream_audio = 1;
262                 type = CODEC_TYPE_UNKNOWN;
263             } else {
264                 return -1;
265             }
266             get_guid(pb, &g);
267             total_size = get_le64(pb);
268             type_specific_size = get_le32(pb);
269             get_le32(pb);
270             st->id = get_le16(pb) & 0x7f; /* stream id */
271             // mapping of asf ID to AV stream ID;
272             asf->asfid2avid[st->id] = s->nb_streams - 1;
273
274             get_le32(pb);
275
276             if (test_for_ext_stream_audio) {
277                 get_guid(pb, &g);
278                 if (!guidcmp(&g, &ff_asf_ext_stream_audio_stream)) {
279                     type = CODEC_TYPE_AUDIO;
280                     is_dvr_ms_audio=1;
281                     get_guid(pb, &g);
282                     get_le32(pb);
283                     get_le32(pb);
284                     get_le32(pb);
285                     get_guid(pb, &g);
286                     get_le32(pb);
287                 }
288             }
289
290             st->codec->codec_type = type;
291             if (type == CODEC_TYPE_AUDIO) {
292                 ff_get_wav_header(pb, st->codec, type_specific_size);
293                 if (is_dvr_ms_audio) {
294                     // codec_id and codec_tag are unreliable in dvr_ms
295                     // files. Set them later by probing stream.
296                     st->codec->codec_id = CODEC_ID_PROBE;
297                     st->codec->codec_tag = 0;
298                 }
299                 if (st->codec->codec_id == CODEC_ID_AAC) {
300                     st->need_parsing = AVSTREAM_PARSE_NONE;
301                 } else {
302                     st->need_parsing = AVSTREAM_PARSE_FULL;
303                 }
304                 /* We have to init the frame size at some point .... */
305                 pos2 = url_ftell(pb);
306                 if (gsize >= (pos2 + 8 - pos1 + 24)) {
307                     asf_st->ds_span = get_byte(pb);
308                     asf_st->ds_packet_size = get_le16(pb);
309                     asf_st->ds_chunk_size = get_le16(pb);
310                     get_le16(pb); //ds_data_size
311                     get_byte(pb); //ds_silence_data
312                 }
313                 //printf("Descrambling: ps:%d cs:%d ds:%d s:%d  sd:%d\n",
314                 //       asf_st->ds_packet_size, asf_st->ds_chunk_size,
315                 //       asf_st->ds_data_size, asf_st->ds_span, asf_st->ds_silence_data);
316                 if (asf_st->ds_span > 1) {
317                     if (!asf_st->ds_chunk_size
318                         || (asf_st->ds_packet_size/asf_st->ds_chunk_size <= 1)
319                         || asf_st->ds_packet_size % asf_st->ds_chunk_size)
320                         asf_st->ds_span = 0; // disable descrambling
321                 }
322                 switch (st->codec->codec_id) {
323                 case CODEC_ID_MP3:
324                     st->codec->frame_size = MPA_FRAME_SIZE;
325                     break;
326                 case CODEC_ID_PCM_S16LE:
327                 case CODEC_ID_PCM_S16BE:
328                 case CODEC_ID_PCM_U16LE:
329                 case CODEC_ID_PCM_U16BE:
330                 case CODEC_ID_PCM_S8:
331                 case CODEC_ID_PCM_U8:
332                 case CODEC_ID_PCM_ALAW:
333                 case CODEC_ID_PCM_MULAW:
334                     st->codec->frame_size = 1;
335                     break;
336                 default:
337                     /* This is probably wrong, but it prevents a crash later */
338                     st->codec->frame_size = 1;
339                     break;
340                 }
341             } else if (type == CODEC_TYPE_VIDEO) {
342                 get_le32(pb);
343                 get_le32(pb);
344                 get_byte(pb);
345                 size = get_le16(pb); /* size */
346                 sizeX= get_le32(pb); /* size */
347                 st->codec->width = get_le32(pb);
348                 st->codec->height = get_le32(pb);
349                 /* not available for asf */
350                 get_le16(pb); /* panes */
351                 st->codec->bits_per_coded_sample = get_le16(pb); /* depth */
352                 tag1 = get_le32(pb);
353                 url_fskip(pb, 20);
354 //                av_log(s, AV_LOG_DEBUG, "size:%d tsize:%d sizeX:%d\n", size, total_size, sizeX);
355                 size= sizeX;
356                 if (size > 40) {
357                     st->codec->extradata_size = size - 40;
358                     st->codec->extradata = av_mallocz(st->codec->extradata_size + FF_INPUT_BUFFER_PADDING_SIZE);
359                     get_buffer(pb, st->codec->extradata, st->codec->extradata_size);
360                 }
361
362                 /* Extract palette from extradata if bpp <= 8 */
363                 /* This code assumes that extradata contains only palette */
364                 /* This is true for all paletted codecs implemented in ffmpeg */
365                 if (st->codec->extradata_size && (st->codec->bits_per_coded_sample <= 8)) {
366                     st->codec->palctrl = av_mallocz(sizeof(AVPaletteControl));
367 #ifdef WORDS_BIGENDIAN
368                     for (i = 0; i < FFMIN(st->codec->extradata_size, AVPALETTE_SIZE)/4; i++)
369                         st->codec->palctrl->palette[i] = bswap_32(((uint32_t*)st->codec->extradata)[i]);
370 #else
371                     memcpy(st->codec->palctrl->palette, st->codec->extradata,
372                            FFMIN(st->codec->extradata_size, AVPALETTE_SIZE));
373 #endif
374                     st->codec->palctrl->palette_changed = 1;
375                 }
376
377                 st->codec->codec_tag = tag1;
378                 st->codec->codec_id = ff_codec_get_id(ff_codec_bmp_tags, tag1);
379                 if(tag1 == MKTAG('D', 'V', 'R', ' '))
380                     st->need_parsing = AVSTREAM_PARSE_FULL;
381             }
382             pos2 = url_ftell(pb);
383             url_fskip(pb, gsize - (pos2 - pos1 + 24));
384         } else if (!guidcmp(&g, &ff_asf_comment_header)) {
385             int len1, len2, len3, len4, len5;
386
387             len1 = get_le16(pb);
388             len2 = get_le16(pb);
389             len3 = get_le16(pb);
390             len4 = get_le16(pb);
391             len5 = get_le16(pb);
392             get_tag(s, "title"    , 0, len1);
393             get_tag(s, "author"   , 0, len2);
394             get_tag(s, "copyright", 0, len3);
395             get_tag(s, "comment"  , 0, len4);
396             url_fskip(pb, len5);
397         } else if (!guidcmp(&g, &stream_bitrate_guid)) {
398             int stream_count = get_le16(pb);
399             int j;
400
401 //            av_log(s, AV_LOG_ERROR, "stream bitrate properties\n");
402 //            av_log(s, AV_LOG_ERROR, "streams %d\n", streams);
403             for(j = 0; j < stream_count; j++) {
404                 int flags, bitrate, stream_id;
405
406                 flags= get_le16(pb);
407                 bitrate= get_le32(pb);
408                 stream_id= (flags & 0x7f);
409 //                av_log(s, AV_LOG_ERROR, "flags: 0x%x stream id %d, bitrate %d\n", flags, stream_id, bitrate);
410                 asf->stream_bitrates[stream_id]= bitrate;
411             }
412         } else if (!guidcmp(&g, &ff_asf_language_guid)) {
413             int j;
414             int stream_count = get_le16(pb);
415             for(j = 0; j < stream_count; j++) {
416                 char lang[6];
417                 unsigned int lang_len = get_byte(pb);
418                 get_str16_nolen(pb, lang_len, lang, sizeof(lang));
419                 if (j < 128)
420                     av_strlcpy(asf->stream_languages[j], lang, sizeof(*asf->stream_languages));
421             }
422         } else if (!guidcmp(&g, &ff_asf_extended_content_header)) {
423             int desc_count, i;
424
425             desc_count = get_le16(pb);
426             for(i=0;i<desc_count;i++) {
427                     int name_len,value_type,value_len;
428                     char name[1024];
429
430                     name_len = get_le16(pb);
431                     get_str16_nolen(pb, name_len, name, sizeof(name));
432                     value_type = get_le16(pb);
433                     value_len  = get_le16(pb);
434                     get_tag(s, name, value_type, value_len);
435             }
436         } else if (!guidcmp(&g, &ff_asf_metadata_header)) {
437             int n, stream_num, name_len, value_len, value_type, value_num;
438             n = get_le16(pb);
439
440             for(i=0;i<n;i++) {
441                 char name[1024];
442
443                 get_le16(pb); //lang_list_index
444                 stream_num= get_le16(pb);
445                 name_len=   get_le16(pb);
446                 value_type= get_le16(pb);
447                 value_len=  get_le32(pb);
448
449                 get_str16_nolen(pb, name_len, name, sizeof(name));
450 //av_log(s, AV_LOG_ERROR, "%d %d %d %d %d <%s>\n", i, stream_num, name_len, value_type, value_len, name);
451                 value_num= get_le16(pb);//we should use get_value() here but it does not work 2 is le16 here but le32 elsewhere
452                 url_fskip(pb, value_len - 2);
453
454                 if(stream_num<128){
455                     if     (!strcmp(name, "AspectRatioX")) dar[stream_num].num= value_num;
456                     else if(!strcmp(name, "AspectRatioY")) dar[stream_num].den= value_num;
457                 }
458             }
459         } else if (!guidcmp(&g, &ff_asf_ext_stream_header)) {
460             int ext_len, payload_ext_ct, stream_ct;
461             uint32_t ext_d, leak_rate, stream_num;
462             unsigned int stream_languageid_index;
463
464             get_le64(pb); // starttime
465             get_le64(pb); // endtime
466             leak_rate = get_le32(pb); // leak-datarate
467             get_le32(pb); // bucket-datasize
468             get_le32(pb); // init-bucket-fullness
469             get_le32(pb); // alt-leak-datarate
470             get_le32(pb); // alt-bucket-datasize
471             get_le32(pb); // alt-init-bucket-fullness
472             get_le32(pb); // max-object-size
473             get_le32(pb); // flags (reliable,seekable,no_cleanpoints?,resend-live-cleanpoints, rest of bits reserved)
474             stream_num = get_le16(pb); // stream-num
475
476             stream_languageid_index = get_le16(pb); // stream-language-id-index
477             if (stream_num < 128)
478                 asf->streams[stream_num].stream_language_index = stream_languageid_index;
479
480             get_le64(pb); // avg frametime in 100ns units
481             stream_ct = get_le16(pb); //stream-name-count
482             payload_ext_ct = get_le16(pb); //payload-extension-system-count
483
484             if (stream_num < 128)
485                 bitrate[stream_num] = leak_rate;
486
487             for (i=0; i<stream_ct; i++){
488                 get_le16(pb);
489                 ext_len = get_le16(pb);
490                 url_fseek(pb, ext_len, SEEK_CUR);
491             }
492
493             for (i=0; i<payload_ext_ct; i++){
494                 get_guid(pb, &g);
495                 ext_d=get_le16(pb);
496                 ext_len=get_le32(pb);
497                 url_fseek(pb, ext_len, SEEK_CUR);
498             }
499
500             // there could be a optional stream properties object to follow
501             // if so the next iteration will pick it up
502         } else if (!guidcmp(&g, &ff_asf_head1_guid)) {
503             int v1, v2;
504             get_guid(pb, &g);
505             v1 = get_le32(pb);
506             v2 = get_le16(pb);
507 #if 0
508         } else if (!guidcmp(&g, &ff_asf_codec_comment_header)) {
509             int len, v1, n, num;
510             char str[256], *q;
511             char tag[16];
512
513             get_guid(pb, &g);
514             print_guid(&g);
515
516             n = get_le32(pb);
517             for(i=0;i<n;i++) {
518                 num = get_le16(pb); /* stream number */
519                 get_str16(pb, str, sizeof(str));
520                 get_str16(pb, str, sizeof(str));
521                 len = get_le16(pb);
522                 q = tag;
523                 while (len > 0) {
524                     v1 = get_byte(pb);
525                     if ((q - tag) < sizeof(tag) - 1)
526                         *q++ = v1;
527                     len--;
528                 }
529                 *q = '\0';
530             }
531 #endif
532         } else if (url_feof(pb)) {
533             return -1;
534         } else {
535             url_fseek(pb, gsize - 24, SEEK_CUR);
536         }
537     }
538     get_guid(pb, &g);
539     get_le64(pb);
540     get_byte(pb);
541     get_byte(pb);
542     if (url_feof(pb))
543         return -1;
544     asf->data_offset = url_ftell(pb);
545     asf->packet_size_left = 0;
546
547
548     for(i=0; i<128; i++){
549         int stream_num= asf->asfid2avid[i];
550         if(stream_num>=0){
551             AVStream *st = s->streams[stream_num];
552             if (!st->codec->bit_rate)
553                 st->codec->bit_rate = bitrate[i];
554             if (dar[i].num > 0 && dar[i].den > 0)
555                 av_reduce(&st->sample_aspect_ratio.num,
556                           &st->sample_aspect_ratio.den,
557                           dar[i].num, dar[i].den, INT_MAX);
558 //av_log(s, AV_LOG_ERROR, "dar %d:%d sar=%d:%d\n", dar[i].num, dar[i].den, st->sample_aspect_ratio.num, st->sample_aspect_ratio.den);
559
560             // copy and convert language codes to the frontend
561             if (asf->streams[i].stream_language_index < 128) {
562                 const char *rfc1766 = asf->stream_languages[asf->streams[i].stream_language_index];
563                 if (rfc1766 && strlen(rfc1766) > 1) {
564                     const char primary_tag[3] = { rfc1766[0], rfc1766[1], '\0' }; // ignore country code if any
565                     const char *iso6392 = av_convert_lang_to(primary_tag, AV_LANG_ISO639_2_BIBL);
566                     if (iso6392)
567                         av_metadata_set(&st->metadata, "language", iso6392);
568                 }
569             }
570         }
571     }
572
573     return 0;
574 }
575
576 #define DO_2BITS(bits, var, defval) \
577     switch (bits & 3) \
578     { \
579     case 3: var = get_le32(pb); rsize += 4; break; \
580     case 2: var = get_le16(pb); rsize += 2; break; \
581     case 1: var = get_byte(pb); rsize++; break; \
582     default: var = defval; break; \
583     }
584
585 /**
586  * Load a single ASF packet into the demuxer.
587  * @param s demux context
588  * @param pb context to read data from
589  * @returns 0 on success, <0 on error
590  */
591 static int ff_asf_get_packet(AVFormatContext *s, ByteIOContext *pb)
592 {
593     ASFContext *asf = s->priv_data;
594     uint32_t packet_length, padsize;
595     int rsize = 8;
596     int c, d, e, off;
597
598     // if we do not know packet size, allow skipping up to 32 kB
599     off= 32768;
600     if (s->packet_size > 0)
601     off= (url_ftell(pb) - s->data_offset) % s->packet_size + 3;
602
603     c=d=e=-1;
604     while(off-- > 0){
605         c=d; d=e;
606         e= get_byte(pb);
607         if(c == 0x82 && !d && !e)
608             break;
609     }
610
611     if (c != 0x82) {
612         if (!url_feof(pb))
613             av_log(s, AV_LOG_ERROR, "ff asf bad header %x  at:%"PRId64"\n", c, url_ftell(pb));
614     }
615     if ((c & 0x8f) == 0x82) {
616         if (d || e) {
617             if (!url_feof(pb))
618                 av_log(s, AV_LOG_ERROR, "ff asf bad non zero\n");
619             return -1;
620         }
621         c= get_byte(pb);
622         d= get_byte(pb);
623         rsize+=3;
624     }else{
625         url_fseek(pb, -1, SEEK_CUR); //FIXME
626     }
627
628     asf->packet_flags    = c;
629     asf->packet_property = d;
630
631     DO_2BITS(asf->packet_flags >> 5, packet_length, s->packet_size);
632     DO_2BITS(asf->packet_flags >> 1, padsize, 0); // sequence ignored
633     DO_2BITS(asf->packet_flags >> 3, padsize, 0); // padding length
634
635     //the following checks prevent overflows and infinite loops
636     if(packet_length >= (1U<<29)){
637         av_log(s, AV_LOG_ERROR, "invalid packet_length %d at:%"PRId64"\n", packet_length, url_ftell(pb));
638         return -1;
639     }
640     if(padsize >= packet_length){
641         av_log(s, AV_LOG_ERROR, "invalid padsize %d at:%"PRId64"\n", padsize, url_ftell(pb));
642         return -1;
643     }
644
645     asf->packet_timestamp = get_le32(pb);
646     get_le16(pb); /* duration */
647     // rsize has at least 11 bytes which have to be present
648
649     if (asf->packet_flags & 0x01) {
650         asf->packet_segsizetype = get_byte(pb); rsize++;
651         asf->packet_segments = asf->packet_segsizetype & 0x3f;
652     } else {
653         asf->packet_segments = 1;
654         asf->packet_segsizetype = 0x80;
655     }
656     asf->packet_size_left = packet_length - padsize - rsize;
657     if (packet_length < asf->hdr.min_pktsize)
658         padsize += asf->hdr.min_pktsize - packet_length;
659     asf->packet_padsize = padsize;
660     dprintf(s, "packet: size=%d padsize=%d  left=%d\n", s->packet_size, asf->packet_padsize, asf->packet_size_left);
661     return 0;
662 }
663
664 /**
665  *
666  * @return <0 if error
667  */
668 static int asf_read_frame_header(AVFormatContext *s, ByteIOContext *pb){
669     ASFContext *asf = s->priv_data;
670     int rsize = 1;
671     int num = get_byte(pb);
672     int64_t ts0, ts1;
673
674     asf->packet_segments--;
675     asf->packet_key_frame = num >> 7;
676     asf->stream_index = asf->asfid2avid[num & 0x7f];
677     // sequence should be ignored!
678     DO_2BITS(asf->packet_property >> 4, asf->packet_seq, 0);
679     DO_2BITS(asf->packet_property >> 2, asf->packet_frag_offset, 0);
680     DO_2BITS(asf->packet_property, asf->packet_replic_size, 0);
681 //printf("key:%d stream:%d seq:%d offset:%d replic_size:%d\n", asf->packet_key_frame, asf->stream_index, asf->packet_seq, //asf->packet_frag_offset, asf->packet_replic_size);
682     if (asf->packet_replic_size >= 8) {
683         asf->packet_obj_size = get_le32(pb);
684         if(asf->packet_obj_size >= (1<<24) || asf->packet_obj_size <= 0){
685             av_log(s, AV_LOG_ERROR, "packet_obj_size invalid\n");
686             return -1;
687         }
688         asf->packet_frag_timestamp = get_le32(pb); // timestamp
689         if(asf->packet_replic_size >= 8+38+4){
690 //            for(i=0; i<asf->packet_replic_size-8; i++)
691 //                av_log(s, AV_LOG_DEBUG, "%02X ",get_byte(pb));
692 //            av_log(s, AV_LOG_DEBUG, "\n");
693             url_fskip(pb, 10);
694             ts0= get_le64(pb);
695             ts1= get_le64(pb);
696             url_fskip(pb, 12);
697             get_le32(pb);
698             url_fskip(pb, asf->packet_replic_size - 8 - 38 - 4);
699             if(ts0!= -1) asf->packet_frag_timestamp= ts0/10000;
700             else         asf->packet_frag_timestamp= AV_NOPTS_VALUE;
701         }else
702             url_fskip(pb, asf->packet_replic_size - 8);
703         rsize += asf->packet_replic_size; // FIXME - check validity
704     } else if (asf->packet_replic_size==1){
705         // multipacket - frag_offset is beginning timestamp
706         asf->packet_time_start = asf->packet_frag_offset;
707         asf->packet_frag_offset = 0;
708         asf->packet_frag_timestamp = asf->packet_timestamp;
709
710         asf->packet_time_delta = get_byte(pb);
711         rsize++;
712     }else if(asf->packet_replic_size!=0){
713         av_log(s, AV_LOG_ERROR, "unexpected packet_replic_size of %d\n", asf->packet_replic_size);
714         return -1;
715     }
716     if (asf->packet_flags & 0x01) {
717         DO_2BITS(asf->packet_segsizetype >> 6, asf->packet_frag_size, 0); // 0 is illegal
718         if(asf->packet_frag_size > asf->packet_size_left - rsize){
719             av_log(s, AV_LOG_ERROR, "packet_frag_size is invalid\n");
720             return -1;
721         }
722         //printf("Fragsize %d\n", asf->packet_frag_size);
723     } else {
724         asf->packet_frag_size = asf->packet_size_left - rsize;
725         //printf("Using rest  %d %d %d\n", asf->packet_frag_size, asf->packet_size_left, rsize);
726     }
727     if (asf->packet_replic_size == 1) {
728         asf->packet_multi_size = asf->packet_frag_size;
729         if (asf->packet_multi_size > asf->packet_size_left)
730             return -1;
731     }
732     asf->packet_size_left -= rsize;
733     //printf("___objsize____  %d   %d    rs:%d\n", asf->packet_obj_size, asf->packet_frag_offset, rsize);
734
735     return 0;
736 }
737
738 /**
739  * Parse data from individual ASF packets (which were previously loaded
740  * with asf_get_packet()).
741  * @param s demux context
742  * @param pb context to read data from
743  * @param pkt pointer to store packet data into
744  * @returns 0 if data was stored in pkt, <0 on error or 1 if more ASF
745  *          packets need to be loaded (through asf_get_packet())
746  */
747 static int ff_asf_parse_packet(AVFormatContext *s, ByteIOContext *pb, AVPacket *pkt)
748 {
749     ASFContext *asf = s->priv_data;
750     ASFStream *asf_st = 0;
751     for (;;) {
752         if(url_feof(pb))
753             return AVERROR_EOF;
754         if (asf->packet_size_left < FRAME_HEADER_SIZE
755             || asf->packet_segments < 1) {
756             //asf->packet_size_left <= asf->packet_padsize) {
757             int ret = asf->packet_size_left + asf->packet_padsize;
758             //printf("PacketLeftSize:%d  Pad:%d Pos:%"PRId64"\n", asf->packet_size_left, asf->packet_padsize, url_ftell(pb));
759             assert(ret>=0);
760             /* fail safe */
761             url_fskip(pb, ret);
762
763             asf->packet_pos= url_ftell(pb);
764             if (asf->data_object_size != (uint64_t)-1 &&
765                 (asf->packet_pos - asf->data_object_offset >= asf->data_object_size))
766                 return AVERROR_EOF; /* Do not exceed the size of the data object */
767             return 1;
768         }
769         if (asf->packet_time_start == 0) {
770             if(asf_read_frame_header(s, pb) < 0){
771                 asf->packet_segments= 0;
772                 continue;
773             }
774             if (asf->stream_index < 0
775                 || s->streams[asf->stream_index]->discard >= AVDISCARD_ALL
776                 || (!asf->packet_key_frame && s->streams[asf->stream_index]->discard >= AVDISCARD_NONKEY)
777                 ) {
778                 asf->packet_time_start = 0;
779                 /* unhandled packet (should not happen) */
780                 url_fskip(pb, asf->packet_frag_size);
781                 asf->packet_size_left -= asf->packet_frag_size;
782                 if(asf->stream_index < 0)
783                     av_log(s, AV_LOG_ERROR, "ff asf skip %d (unknown stream)\n", asf->packet_frag_size);
784                 continue;
785             }
786             asf->asf_st = s->streams[asf->stream_index]->priv_data;
787         }
788         asf_st = asf->asf_st;
789
790         if (asf->packet_replic_size == 1) {
791             // frag_offset is here used as the beginning timestamp
792             asf->packet_frag_timestamp = asf->packet_time_start;
793             asf->packet_time_start += asf->packet_time_delta;
794             asf->packet_obj_size = asf->packet_frag_size = get_byte(pb);
795             asf->packet_size_left--;
796             asf->packet_multi_size--;
797             if (asf->packet_multi_size < asf->packet_obj_size)
798             {
799                 asf->packet_time_start = 0;
800                 url_fskip(pb, asf->packet_multi_size);
801                 asf->packet_size_left -= asf->packet_multi_size;
802                 continue;
803             }
804             asf->packet_multi_size -= asf->packet_obj_size;
805             //printf("COMPRESS size  %d  %d  %d   ms:%d\n", asf->packet_obj_size, asf->packet_frag_timestamp, asf->packet_size_left, asf->packet_multi_size);
806         }
807         if(   /*asf->packet_frag_size == asf->packet_obj_size*/
808               asf_st->frag_offset + asf->packet_frag_size <= asf_st->pkt.size
809            && asf_st->frag_offset + asf->packet_frag_size > asf->packet_obj_size){
810             av_log(s, AV_LOG_INFO, "ignoring invalid packet_obj_size (%d %d %d %d)\n",
811                 asf_st->frag_offset, asf->packet_frag_size,
812                 asf->packet_obj_size, asf_st->pkt.size);
813             asf->packet_obj_size= asf_st->pkt.size;
814         }
815
816         if (   asf_st->pkt.size != asf->packet_obj_size
817             || asf_st->frag_offset + asf->packet_frag_size > asf_st->pkt.size) { //FIXME is this condition sufficient?
818             if(asf_st->pkt.data){
819                 av_log(s, AV_LOG_INFO, "freeing incomplete packet size %d, new %d\n", asf_st->pkt.size, asf->packet_obj_size);
820                 asf_st->frag_offset = 0;
821                 av_free_packet(&asf_st->pkt);
822             }
823             /* new packet */
824             av_new_packet(&asf_st->pkt, asf->packet_obj_size);
825             asf_st->seq = asf->packet_seq;
826             asf_st->pkt.dts = asf->packet_frag_timestamp;
827             asf_st->pkt.stream_index = asf->stream_index;
828             asf_st->pkt.pos =
829             asf_st->packet_pos= asf->packet_pos;
830 //printf("new packet: stream:%d key:%d packet_key:%d audio:%d size:%d\n",
831 //asf->stream_index, asf->packet_key_frame, asf_st->pkt.flags & PKT_FLAG_KEY,
832 //s->streams[asf->stream_index]->codec->codec_type == CODEC_TYPE_AUDIO, asf->packet_obj_size);
833             if (s->streams[asf->stream_index]->codec->codec_type == CODEC_TYPE_AUDIO)
834                 asf->packet_key_frame = 1;
835             if (asf->packet_key_frame)
836                 asf_st->pkt.flags |= PKT_FLAG_KEY;
837         }
838
839         /* read data */
840         //printf("READ PACKET s:%d  os:%d  o:%d,%d  l:%d   DATA:%p\n",
841         //       s->packet_size, asf_st->pkt.size, asf->packet_frag_offset,
842         //       asf_st->frag_offset, asf->packet_frag_size, asf_st->pkt.data);
843         asf->packet_size_left -= asf->packet_frag_size;
844         if (asf->packet_size_left < 0)
845             continue;
846
847         if(   asf->packet_frag_offset >= asf_st->pkt.size
848            || asf->packet_frag_size > asf_st->pkt.size - asf->packet_frag_offset){
849             av_log(s, AV_LOG_ERROR, "packet fragment position invalid %u,%u not in %u\n",
850                 asf->packet_frag_offset, asf->packet_frag_size, asf_st->pkt.size);
851             continue;
852         }
853
854         get_buffer(pb, asf_st->pkt.data + asf->packet_frag_offset,
855                    asf->packet_frag_size);
856         if (s->key && s->keylen == 20)
857             ff_asfcrypt_dec(s->key, asf_st->pkt.data + asf->packet_frag_offset,
858                             asf->packet_frag_size);
859         asf_st->frag_offset += asf->packet_frag_size;
860         /* test if whole packet is read */
861         if (asf_st->frag_offset == asf_st->pkt.size) {
862             //workaround for macroshit radio DVR-MS files
863             if(   s->streams[asf->stream_index]->codec->codec_id == CODEC_ID_MPEG2VIDEO
864                && asf_st->pkt.size > 100){
865                 int i;
866                 for(i=0; i<asf_st->pkt.size && !asf_st->pkt.data[i]; i++);
867                 if(i == asf_st->pkt.size){
868                     av_log(s, AV_LOG_DEBUG, "discarding ms fart\n");
869                     asf_st->frag_offset = 0;
870                     av_free_packet(&asf_st->pkt);
871                     continue;
872                 }
873             }
874
875             /* return packet */
876             if (asf_st->ds_span > 1) {
877               if(asf_st->pkt.size != asf_st->ds_packet_size * asf_st->ds_span){
878                     av_log(s, AV_LOG_ERROR, "pkt.size != ds_packet_size * ds_span (%d %d %d)\n", asf_st->pkt.size, asf_st->ds_packet_size, asf_st->ds_span);
879               }else{
880                 /* packet descrambling */
881                 uint8_t *newdata = av_malloc(asf_st->pkt.size);
882                 if (newdata) {
883                     int offset = 0;
884                     while (offset < asf_st->pkt.size) {
885                         int off = offset / asf_st->ds_chunk_size;
886                         int row = off / asf_st->ds_span;
887                         int col = off % asf_st->ds_span;
888                         int idx = row + col * asf_st->ds_packet_size / asf_st->ds_chunk_size;
889                         //printf("off:%d  row:%d  col:%d  idx:%d\n", off, row, col, idx);
890
891                         assert(offset + asf_st->ds_chunk_size <= asf_st->pkt.size);
892                         assert(idx+1 <= asf_st->pkt.size / asf_st->ds_chunk_size);
893                         memcpy(newdata + offset,
894                                asf_st->pkt.data + idx * asf_st->ds_chunk_size,
895                                asf_st->ds_chunk_size);
896                         offset += asf_st->ds_chunk_size;
897                     }
898                     av_free(asf_st->pkt.data);
899                     asf_st->pkt.data = newdata;
900                 }
901               }
902             }
903             asf_st->frag_offset = 0;
904             *pkt= asf_st->pkt;
905             //printf("packet %d %d\n", asf_st->pkt.size, asf->packet_frag_size);
906             asf_st->pkt.size = 0;
907             asf_st->pkt.data = 0;
908             break; // packet completed
909         }
910     }
911     return 0;
912 }
913
914 static int asf_read_packet(AVFormatContext *s, AVPacket *pkt)
915 {
916     ASFContext *asf = s->priv_data;
917
918     for (;;) {
919         int ret;
920
921         /* parse cached packets, if any */
922         if ((ret = ff_asf_parse_packet(s, s->pb, pkt)) <= 0)
923             return ret;
924         if ((ret = ff_asf_get_packet(s, s->pb)) < 0)
925             assert(asf->packet_size_left < FRAME_HEADER_SIZE || asf->packet_segments < 1);
926         asf->packet_time_start = 0;
927     }
928
929     return 0;
930 }
931
932 // Added to support seeking after packets have been read
933 // If information is not reset, read_packet fails due to
934 // leftover information from previous reads
935 static void asf_reset_header(AVFormatContext *s)
936 {
937     ASFContext *asf = s->priv_data;
938     ASFStream *asf_st;
939     int i;
940
941     asf->packet_nb_frames = 0;
942     asf->packet_size_left = 0;
943     asf->packet_segments = 0;
944     asf->packet_flags = 0;
945     asf->packet_property = 0;
946     asf->packet_timestamp = 0;
947     asf->packet_segsizetype = 0;
948     asf->packet_segments = 0;
949     asf->packet_seq = 0;
950     asf->packet_replic_size = 0;
951     asf->packet_key_frame = 0;
952     asf->packet_padsize = 0;
953     asf->packet_frag_offset = 0;
954     asf->packet_frag_size = 0;
955     asf->packet_frag_timestamp = 0;
956     asf->packet_multi_size = 0;
957     asf->packet_obj_size = 0;
958     asf->packet_time_delta = 0;
959     asf->packet_time_start = 0;
960
961     for(i=0; i<s->nb_streams; i++){
962         asf_st= s->streams[i]->priv_data;
963         av_free_packet(&asf_st->pkt);
964         asf_st->frag_offset=0;
965         asf_st->seq=0;
966     }
967     asf->asf_st= NULL;
968 }
969
970 static int asf_read_close(AVFormatContext *s)
971 {
972     int i;
973
974     asf_reset_header(s);
975     for(i=0;i<s->nb_streams;i++) {
976         AVStream *st = s->streams[i];
977         av_free(st->codec->palctrl);
978     }
979     return 0;
980 }
981
982 static int64_t asf_read_pts(AVFormatContext *s, int stream_index, int64_t *ppos, int64_t pos_limit)
983 {
984     AVPacket pkt1, *pkt = &pkt1;
985     ASFStream *asf_st;
986     int64_t pts;
987     int64_t pos= *ppos;
988     int i;
989     int64_t start_pos[s->nb_streams];
990
991     for(i=0; i<s->nb_streams; i++){
992         start_pos[i]= pos;
993     }
994
995     if (s->packet_size > 0)
996     pos= (pos+s->packet_size-1-s->data_offset)/s->packet_size*s->packet_size+ s->data_offset;
997     *ppos= pos;
998     url_fseek(s->pb, pos, SEEK_SET);
999
1000 //printf("asf_read_pts\n");
1001     asf_reset_header(s);
1002     for(;;){
1003         if (av_read_frame(s, pkt) < 0){
1004             av_log(s, AV_LOG_INFO, "asf_read_pts failed\n");
1005             return AV_NOPTS_VALUE;
1006         }
1007
1008         pts= pkt->pts;
1009
1010         av_free_packet(pkt);
1011         if(pkt->flags&PKT_FLAG_KEY){
1012             i= pkt->stream_index;
1013
1014             asf_st= s->streams[i]->priv_data;
1015
1016 //            assert((asf_st->packet_pos - s->data_offset) % s->packet_size == 0);
1017             pos= asf_st->packet_pos;
1018
1019             av_add_index_entry(s->streams[i], pos, pts, pkt->size, pos - start_pos[i] + 1, AVINDEX_KEYFRAME);
1020             start_pos[i]= asf_st->packet_pos + 1;
1021
1022             if(pkt->stream_index == stream_index)
1023                break;
1024         }
1025     }
1026
1027     *ppos= pos;
1028 //printf("found keyframe at %"PRId64" stream %d stamp:%"PRId64"\n", *ppos, stream_index, pts);
1029
1030     return pts;
1031 }
1032
1033 static void asf_build_simple_index(AVFormatContext *s, int stream_index)
1034 {
1035     ff_asf_guid g;
1036     ASFContext *asf = s->priv_data;
1037     int64_t current_pos= url_ftell(s->pb);
1038     int i;
1039
1040     url_fseek(s->pb, asf->data_object_offset + asf->data_object_size, SEEK_SET);
1041     get_guid(s->pb, &g);
1042     if (!guidcmp(&g, &index_guid)) {
1043         int64_t itime;
1044         int pct, ict;
1045         int64_t av_unused gsize= get_le64(s->pb);
1046         get_guid(s->pb, &g);
1047         itime=get_le64(s->pb);
1048         pct=get_le32(s->pb);
1049         ict=get_le32(s->pb);
1050         av_log(s, AV_LOG_DEBUG, "itime:0x%"PRIx64", pct:%d, ict:%d\n",itime,pct,ict);
1051
1052         for (i=0;i<ict;i++){
1053             int pktnum=get_le32(s->pb);
1054             int pktct =get_le16(s->pb);
1055             int64_t pos      = s->data_offset + s->packet_size*(int64_t)pktnum;
1056             int64_t index_pts= av_rescale(itime, i, 10000);
1057
1058             av_log(s, AV_LOG_DEBUG, "pktnum:%d, pktct:%d\n", pktnum, pktct);
1059             av_add_index_entry(s->streams[stream_index], pos, index_pts, s->packet_size, 0, AVINDEX_KEYFRAME);
1060         }
1061         asf->index_read= 1;
1062     }
1063     url_fseek(s->pb, current_pos, SEEK_SET);
1064 }
1065
1066 static int asf_read_seek(AVFormatContext *s, int stream_index, int64_t pts, int flags)
1067 {
1068     ASFContext *asf = s->priv_data;
1069     AVStream *st = s->streams[stream_index];
1070     int64_t pos;
1071     int index;
1072
1073     if (s->packet_size <= 0)
1074         return -1;
1075
1076     /* Try using the protocol's read_seek if available */
1077     if(s->pb) {
1078         int ret = av_url_read_fseek(s->pb, stream_index, pts, flags);
1079         if(ret >= 0)
1080             asf_reset_header(s);
1081         if (ret != AVERROR(ENOSYS))
1082             return ret;
1083     }
1084
1085     if (!asf->index_read)
1086         asf_build_simple_index(s, stream_index);
1087
1088     if(!(asf->index_read && st->index_entries)){
1089         if(av_seek_frame_binary(s, stream_index, pts, flags)<0)
1090             return -1;
1091     }else{
1092         index= av_index_search_timestamp(st, pts, flags);
1093         if(index<0)
1094             return -1;
1095
1096         /* find the position */
1097         pos = st->index_entries[index].pos;
1098
1099     // various attempts to find key frame have failed so far
1100     //    asf_reset_header(s);
1101     //    url_fseek(s->pb, pos, SEEK_SET);
1102     //    key_pos = pos;
1103     //     for(i=0;i<16;i++){
1104     //         pos = url_ftell(s->pb);
1105     //         if (av_read_frame(s, &pkt) < 0){
1106     //             av_log(s, AV_LOG_INFO, "seek failed\n");
1107     //             return -1;
1108     //         }
1109     //         asf_st = s->streams[stream_index]->priv_data;
1110     //         pos += st->parser->frame_offset;
1111     //
1112     //         if (pkt.size > b) {
1113     //             b = pkt.size;
1114     //             key_pos = pos;
1115     //         }
1116     //
1117     //         av_free_packet(&pkt);
1118     //     }
1119
1120         /* do the seek */
1121         av_log(s, AV_LOG_DEBUG, "SEEKTO: %"PRId64"\n", pos);
1122         url_fseek(s->pb, pos, SEEK_SET);
1123     }
1124     asf_reset_header(s);
1125     return 0;
1126 }
1127
1128 AVInputFormat asf_demuxer = {
1129     "asf",
1130     NULL_IF_CONFIG_SMALL("ASF format"),
1131     sizeof(ASFContext),
1132     asf_probe,
1133     asf_read_header,
1134     asf_read_packet,
1135     asf_read_close,
1136     asf_read_seek,
1137     asf_read_pts,
1138     .metadata_conv = ff_asf_metadata_conv,
1139 };