Commit d00f1e0f authored by Vittorio Giovara's avatar Vittorio Giovara

quickdraw: Convert to bytestream2

Add appropriate error messages and reduce r, g, b variables scope.
Drop the now redundant line checks in RLE decoding.
parent 01fdfa51
...@@ -27,21 +27,19 @@ ...@@ -27,21 +27,19 @@
#include "libavutil/common.h" #include "libavutil/common.h"
#include "libavutil/intreadwrite.h" #include "libavutil/intreadwrite.h"
#include "avcodec.h" #include "avcodec.h"
#include "bytestream.h"
#include "internal.h" #include "internal.h"
static int decode_frame(AVCodecContext *avctx, static int decode_frame(AVCodecContext *avctx,
void *data, int *got_frame, void *data, int *got_frame,
AVPacket *avpkt) AVPacket *avpkt)
{ {
const uint8_t *buf = avpkt->data;
const uint8_t *buf_end = avpkt->data + avpkt->size;
int buf_size = avpkt->size;
AVFrame * const p = data; AVFrame * const p = data;
GetByteContext gbc;
uint8_t* outdata; uint8_t* outdata;
int colors; int colors;
int i, ret; int i, ret;
uint32_t *pal; uint32_t *pal;
int r, g, b;
if ((ret = ff_get_buffer(avctx, p, 0)) < 0) { if ((ret = ff_get_buffer(avctx, p, 0)) < 0) {
av_log(avctx, AV_LOG_ERROR, "get_buffer() failed\n"); av_log(avctx, AV_LOG_ERROR, "get_buffer() failed\n");
...@@ -52,87 +50,79 @@ static int decode_frame(AVCodecContext *avctx, ...@@ -52,87 +50,79 @@ static int decode_frame(AVCodecContext *avctx,
outdata = p->data[0]; outdata = p->data[0];
if (buf_end - buf < 0x68 + 4) bytestream2_init(&gbc, avpkt->data, avpkt->size);
if (bytestream2_get_bytes_left(&gbc) < 0x68 + 4) {
av_log(avctx, AV_LOG_ERROR, "Frame is too small %d\n",
bytestream2_get_bytes_left(&gbc));
return AVERROR_INVALIDDATA; return AVERROR_INVALIDDATA;
buf += 0x68; /* jump to palette */ }
colors = AV_RB32(buf);
buf += 4; /* jump to palette */
bytestream2_skip(&gbc, 0x68);
colors = bytestream2_get_be32(&gbc);
if (colors < 0 || colors > 256) { if (colors < 0 || colors > 256) {
av_log(avctx, AV_LOG_ERROR, "Error color count - %i(0x%X)\n", colors, colors); av_log(avctx, AV_LOG_ERROR, "Error color count - %i(0x%X)\n", colors, colors);
return AVERROR_INVALIDDATA; return AVERROR_INVALIDDATA;
} }
if (buf_end - buf < (colors + 1) * 8) if (bytestream2_get_bytes_left(&gbc) < (colors + 1) * 8) {
av_log(avctx, AV_LOG_ERROR, "Palette is too small %d\n",
bytestream2_get_bytes_left(&gbc));
return AVERROR_INVALIDDATA; return AVERROR_INVALIDDATA;
}
pal = (uint32_t*)p->data[1]; pal = (uint32_t*)p->data[1];
for (i = 0; i <= colors; i++) { for (i = 0; i <= colors; i++) {
unsigned int idx; uint8_t r, g, b;
idx = AV_RB16(buf); /* color index */ unsigned int idx = bytestream2_get_be16(&gbc); /* color index */
buf += 2;
if (idx > 255) { if (idx > 255) {
av_log(avctx, AV_LOG_ERROR, "Palette index out of range: %u\n", idx); av_log(avctx, AV_LOG_ERROR, "Palette index out of range: %u\n", idx);
buf += 6; bytestream2_skip(&gbc, 6);
continue; continue;
} }
r = *buf++; r = bytestream2_get_byte(&gbc);
buf++; bytestream2_skip(&gbc, 1);
g = *buf++; g = bytestream2_get_byte(&gbc);
buf++; bytestream2_skip(&gbc, 1);
b = *buf++; b = bytestream2_get_byte(&gbc);
buf++; bytestream2_skip(&gbc, 1);
pal[idx] = (r << 16) | (g << 8) | b; pal[idx] = (r << 16) | (g << 8) | b;
} }
p->palette_has_changed = 1; p->palette_has_changed = 1;
if (buf_end - buf < 18) /* skip unneeded data */
return AVERROR_INVALIDDATA; bytestream2_skip(&gbc, 18);
buf += 18; /* skip unneeded data */
for (i = 0; i < avctx->height; i++) { for (i = 0; i < avctx->height; i++) {
int size, left, code, pix; int size, left, code, pix;
const uint8_t *next; uint8_t *out = outdata;
uint8_t *out;
int tsize = 0;
/* decode line */ /* size of packed line */
out = outdata; size = left = bytestream2_get_be16(&gbc);
size = AV_RB16(buf); /* size of packed line */ if (bytestream2_get_bytes_left(&gbc) < size)
buf += 2;
if (buf_end - buf < size)
return AVERROR_INVALIDDATA; return AVERROR_INVALIDDATA;
left = size; /* decode line */
next = buf + size;
while (left > 0) { while (left > 0) {
code = *buf++; code = bytestream2_get_byte(&gbc);
if (code & 0x80 ) { /* run */ if (code & 0x80 ) { /* run */
pix = *buf++; pix = bytestream2_get_byte(&gbc);
if ((out + (257 - code)) > (outdata + p->linesize[0]))
break;
memset(out, pix, 257 - code); memset(out, pix, 257 - code);
out += 257 - code; out += 257 - code;
tsize += 257 - code;
left -= 2; left -= 2;
} else { /* copy */ } else { /* copy */
if ((out + code) > (outdata + p->linesize[0])) bytestream2_get_buffer(&gbc, out, code + 1);
break;
if (buf_end - buf < code + 1)
return AVERROR_INVALIDDATA;
memcpy(out, buf, code + 1);
out += code + 1; out += code + 1;
buf += code + 1;
left -= 2 + code; left -= 2 + code;
tsize += code + 1;
} }
} }
buf = next;
outdata += p->linesize[0]; outdata += p->linesize[0];
} }
*got_frame = 1; *got_frame = 1;
return buf_size; return avpkt->size;
} }
static av_cold int decode_init(AVCodecContext *avctx) static av_cold int decode_init(AVCodecContext *avctx)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment