diff options
Diffstat (limited to 'libavcodec/faxcompr.c')
| -rw-r--r-- | libavcodec/faxcompr.c | 149 |
1 files changed, 131 insertions, 18 deletions
diff --git a/libavcodec/faxcompr.c b/libavcodec/faxcompr.c index 4cbda3f126..2a1d2bc3f6 100644 --- a/libavcodec/faxcompr.c +++ b/libavcodec/faxcompr.c @@ -2,20 +2,20 @@ * CCITT Fax Group 3 and 4 decompression * Copyright (c) 2008 Konstantin Shishkov * - * This file is part of Libav. + * This file is part of FFmpeg. * - * Libav is free software; you can redistribute it and/or + * FFmpeg is free software; you can redistribute it and/or * modify it under the terms of the GNU Lesser General Public * License as published by the Free Software Foundation; either * version 2.1 of the License, or (at your option) any later version. * - * Libav is distributed in the hope that it will be useful, + * FFmpeg is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * Lesser General Public License for more details. * * You should have received a copy of the GNU Lesser General Public - * License along with Libav; if not, write to the Free Software + * License along with FFmpeg; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA */ @@ -122,6 +122,81 @@ av_cold void ff_ccitt_unpack_init(void) initialized = 1; } +static int decode_uncompressed(AVCodecContext *avctx, GetBitContext *gb, + unsigned int *pix_left, int **runs, + const int *runend, int *mode) +{ + int eob = 0; + int newmode; + int saved_run = 0; + + do { + int cwi, k; + int cw = 0; + int codes[2]; + do { + cwi = show_bits(gb, 11); + if (!cwi) { + av_log(avctx, AV_LOG_ERROR, "Invalid uncompressed codeword\n"); + return AVERROR_INVALIDDATA; + } + cwi = 10 - av_log2(cwi); + skip_bits(gb, cwi + 1); + if (cwi > 5) { + newmode = get_bits1(gb); + eob = 1; + cwi -= 6; + } + cw += cwi; + } while(cwi == 5); + + codes[0] = cw; + codes[1] = !eob; + + for (k = 0; k < 2; k++) { + if (codes[k]) { + if (*mode == !k) { + *(*runs)++ = saved_run; + if (*runs >= runend) { + av_log(avctx, AV_LOG_ERROR, "uncompressed run overrun\n"); + return AVERROR_INVALIDDATA; + } + if (*pix_left <= saved_run) { + av_log(avctx, AV_LOG_ERROR, "uncompressed run went out of bounds\n"); + return AVERROR_INVALIDDATA; + } + *pix_left -= saved_run; + saved_run = 0; + *mode = !*mode; + } + saved_run += codes[k]; + } + } + } while (!eob); + *(*runs)++ = saved_run; + if (*runs >= runend) { + av_log(avctx, AV_LOG_ERROR, "uncompressed run overrun\n"); + return AVERROR_INVALIDDATA; + } + if (*pix_left <= saved_run) { + if (*pix_left == saved_run) + return 1; + av_log(avctx, AV_LOG_ERROR, "uncompressed run went out of boundsE\n"); + return AVERROR_INVALIDDATA; + } + *pix_left -= saved_run; + saved_run = 0; + *mode = !*mode; + if (newmode != *mode) { //FIXME CHECK + *(*runs)++ = 0; + if (*runs >= runend) { + av_log(avctx, AV_LOG_ERROR, "uncompressed run overrun\n"); + return AVERROR_INVALIDDATA; + } + *mode = newmode; + } + return 0; +} static int decode_group3_1d_line(AVCodecContext *avctx, GetBitContext *gb, unsigned int pix_left, int *runs, @@ -149,8 +224,18 @@ static int decode_group3_1d_line(AVCodecContext *avctx, GetBitContext *gb, run = 0; mode = !mode; } else if ((int)t == -1) { - av_log(avctx, AV_LOG_ERROR, "Incorrect code\n"); - return AVERROR_INVALIDDATA; + if (show_bits(gb, 12) == 15) { + int ret; + skip_bits(gb, 12); + ret = decode_uncompressed(avctx, gb, &pix_left, &runs, runend, &mode); + if (ret < 0) { + return ret; + } else if (ret) + break; + } else { + av_log(avctx, AV_LOG_ERROR, "Incorrect code\n"); + return AVERROR_INVALIDDATA; + } } } *runs++ = 0; @@ -165,8 +250,6 @@ static int decode_group3_2d_line(AVCodecContext *avctx, GetBitContext *gb, int run_off = *ref++; unsigned int offs = 0, run = 0; - runend--; // for the last written 0 - while (offs < width) { int cmode = get_vlc2(gb, ccitt_group3_2d_vlc.table, 9, 1); if (cmode == -1) { @@ -174,10 +257,12 @@ static int decode_group3_2d_line(AVCodecContext *avctx, GetBitContext *gb, return AVERROR_INVALIDDATA; } if (!cmode) { //pass mode - run_off += *ref++; + if (run_off < width) + run_off += *ref++; run = run_off - offs; offs = run_off; - run_off += *ref++; + if (run_off < width) + run_off += *ref++; if (offs > width) { av_log(avctx, AV_LOG_ERROR, "Run went out of bounds\n"); return AVERROR_INVALIDDATA; @@ -211,8 +296,25 @@ static int decode_group3_2d_line(AVCodecContext *avctx, GetBitContext *gb, mode = !mode; } } else if (cmode == 9 || cmode == 10) { - avpriv_report_missing_feature(avctx, "Special modes support"); - return AVERROR_PATCHWELCOME; + int xxx = get_bits(gb, 3); + if (cmode == 9 && xxx == 7) { + int ret; + int pix_left = width - offs; + + if (saved_run) { + av_log(avctx, AV_LOG_ERROR, "saved run %d on entering uncompressed mode\n", saved_run); + return AVERROR_INVALIDDATA; + } + ret = decode_uncompressed(avctx, gb, &pix_left, &runs, runend, &mode); + offs = width - pix_left; + if (ret < 0) { + return ret; + } else if (ret) + break; + } else { + avpriv_report_missing_feature(avctx, "Special mode %d xxx=%d support", cmode, xxx); + return AVERROR_PATCHWELCOME; + } } else { //vertical mode run = run_off - offs + (cmode - 5); run_off -= *--ref; @@ -230,13 +332,19 @@ static int decode_group3_2d_line(AVCodecContext *avctx, GetBitContext *gb, mode = !mode; } //sync line pointers - while (run_off <= offs) { + while (offs < width && run_off <= offs) { run_off += *ref++; run_off += *ref++; } } *runs++ = saved_run; - *runs++ = 0; + if (saved_run) { + if (runs >= runend) { + av_log(avctx, AV_LOG_ERROR, "Run overrun\n"); + return -1; + } + *runs++ = 0; + } return 0; } @@ -245,7 +353,7 @@ static void put_line(uint8_t *dst, int size, int width, const int *runs) PutBitContext pb; int run, mode = ~0, pix_left = width, run_idx = 0; - init_put_bits(&pb, dst, size * 8); + init_put_bits(&pb, dst, size); while (pix_left > 0) { run = runs[run_idx++]; mode = ~mode; @@ -279,9 +387,10 @@ int ff_ccitt_unpack(AVCodecContext *avctx, const uint8_t *src, int srcsize, int *runs, *ref = NULL, *runend; int ret; int runsize = avctx->width + 2; + int has_eol; - runs = av_malloc(runsize * sizeof(runs[0])); - ref = av_malloc(runsize * sizeof(ref[0])); + runs = av_malloc_array(runsize, sizeof(runs[0])); + ref = av_malloc_array(runsize, sizeof(ref[0])); if (!runs || !ref) { ret = AVERROR(ENOMEM); goto fail; @@ -289,7 +398,10 @@ int ff_ccitt_unpack(AVCodecContext *avctx, const uint8_t *src, int srcsize, ref[0] = avctx->width; ref[1] = 0; ref[2] = 0; - init_get_bits(&gb, src, srcsize * 8); + if ((ret = init_get_bits8(&gb, src, srcsize)) < 0) + goto fail; + has_eol = show_bits(&gb, 12) == 1 || show_bits(&gb, 16) == 1; + for (j = 0; j < height; j++) { runend = runs + runsize; if (compr == TIFF_G4) { @@ -300,6 +412,7 @@ int ff_ccitt_unpack(AVCodecContext *avctx, const uint8_t *src, int srcsize, } else { int g3d1 = (compr == TIFF_G3) && !(opts & 1); if (compr != TIFF_CCITT_RLE && + has_eol && find_group3_syncmarker(&gb, srcsize * 8) < 0) break; if (compr == TIFF_CCITT_RLE || g3d1 || get_bits1(&gb)) |