On Tue, Nov 26, 2019 at 2:07 PM James Almer <jamr...@gmail.com> wrote:
> Signed-off-by: James Almer <jamr...@gmail.com>
> ---
> libavformat/avc.c | 38 +++++++++++++++++++++++++++++++++-----
> libavformat/avc.h | 1 +
> 2 files changed, 34 insertions(+), 5 deletions(-)
>
> diff --git a/libavformat/avc.c b/libavformat/avc.c
> index a041e84357..9bd215c07f 100644
> --- a/libavformat/avc.c
> +++ b/libavformat/avc.c
> @@ -107,11 +107,11 @@ int ff_avc_parse_nal_units_buf(const uint8_t
> *buf_in, uint8_t **buf, int *size)
>
> int ff_isom_write_avcc(AVIOContext *pb, const uint8_t *data, int len)
> {
> - AVIOContext *sps_pb = NULL, *pps_pb = NULL;
> + AVIOContext *sps_pb = NULL, *pps_pb = NULL, *sps_ext_pb = NULL;
> uint8_t *buf = NULL, *end, *start = NULL;
> - uint8_t *sps = NULL, *pps = NULL;
> - uint32_t sps_size = 0, pps_size = 0;
> - int ret, nb_sps = 0, nb_pps = 0;
> + uint8_t *sps = NULL, *pps = NULL, *sps_ext = NULL;
> + uint32_t sps_size = 0, pps_size = 0, sps_ext_size = 0;
> + int ret, nb_sps = 0, nb_pps = 0, nb_sps_ext = 0;
>
> if (len <= 6)
> return AVERROR_INVALIDDATA;
> @@ -133,6 +133,9 @@ int ff_isom_write_avcc(AVIOContext *pb, const uint8_t
> *data, int len)
> if (ret < 0)
> goto fail;
> ret = avio_open_dyn_buf(&pps_pb);
> + if (ret < 0)
> + goto fail;
> + ret = avio_open_dyn_buf(&sps_ext_pb);
> if (ret < 0)
> goto fail;
>
> @@ -160,12 +163,21 @@ int ff_isom_write_avcc(AVIOContext *pb, const
> uint8_t *data, int len)
> }
> avio_wb16(pps_pb, size);
> avio_write(pps_pb, buf, size);
> + } else if (nal_type == 13) { /* SPS_EXT */
> + nb_sps_ext++;
> + if (size > UINT16_MAX || nb_sps_ext >= 256) {
> + ret = AVERROR_INVALIDDATA;
> + goto fail;
> + }
> + avio_wb16(sps_ext_pb, size);
> + avio_write(sps_ext_pb, buf, size);
> }
>
> buf += size;
> }
> sps_size = avio_close_dyn_buf(sps_pb, &sps);
> pps_size = avio_close_dyn_buf(pps_pb, &pps);
> + sps_ext_size = avio_close_dyn_buf(sps_ext_pb, &sps_ext);
>
> if (sps_size < 6 || !pps_size) {
> ret = AVERROR_INVALIDDATA;
> @@ -183,13 +195,29 @@ int ff_isom_write_avcc(AVIOContext *pb, const
> uint8_t *data, int len)
> avio_w8(pb, nb_pps); /* number of pps */
> avio_write(pb, pps, pps_size);
>
> + if (sps[3] != 66 && sps[3] != 77 && sps[3] != 88) {
> + H264SequenceParameterSet *seq = ff_avc_decode_sps(sps, sps_size);
> + if (!seq)
> + goto fail;
> + avio_w8(pb, 0xfc | seq->chroma_format_idc); /* 6 bits reserved
> (111111) + chroma_format_idc */
> + avio_w8(pb, 0xf8 | seq->bit_depth_luma - 8); /* 5 bits reserved
> (11111) + bit_depth_luma_minus8 */
> + avio_w8(pb, 0xf8 | seq->bit_depth_chroma - 8); /* 5 bits reserved
> (11111) + bit_depth_chroma_minus8 */
> + avio_w8(pb, nb_sps_ext); /* number of sps ext */
> + if (nb_sps_ext)
> + avio_write(pb, sps_ext, sps_ext_size);
> + av_free(seq);
> + }
> +
> fail:
> if (!sps)
> avio_close_dyn_buf(sps_pb, &sps);
> if (!pps)
> avio_close_dyn_buf(pps_pb, &pps);
> + if (!sps_ext)
> + avio_close_dyn_buf(sps_ext_pb, &sps_ext);
>
I don't like how these buffers are freed. How about the following approach:
You don't close the dynamic buffer above; instead you just call
avio_get_dyn_buf(). And here on fail you use ffio_free_dyn_buf()
unconditionally instead of these combinations of avio_close_dyn_buf() and
av_free().
(I have recently looked a bit into the dynamic buffers (mainly because the
Matroska muxer benefits tremendously from setting direct for the dynamic
buffer for the cluster) and there is a potential for improvements from
which the above approach would benefit: One can modify avio_get_dyn_buf()
to return a pointer to the small (1024 B) IO-buffer if nothing has been
written to the big buffer yet; and if one also modifies ffio_free_dyn_buf
to not call avio_close_dyn_buf(), but to free everything directly, an
allocation could be saved if the data one intends to write fits into the
IO-buffer.)
I haven't looked at the rest.
- Andreas
PS: The SPS/PPS ids are supposed to be monotonically increasing, yet
nothing in the above code ensures that. (This is not supposed to block your
patch.)
_______________________________________________
ffmpeg-devel mailing list
ffmpeg-devel@ffmpeg.org
https://ffmpeg.org/mailman/listinfo/ffmpeg-devel
To unsubscribe, visit link above, or email
ffmpeg-devel-requ...@ffmpeg.org with subject "unsubscribe".
