mirror of
https://github.com/FFmpeg/FFmpeg.git
synced 2024-11-26 19:01:44 +02:00
689a867413
Fixes integer overflow Fixes: 0c2625f236ced104d402b4a03c0d65c7/asan_generic_274e1ce_5990_9314e7a67c26aecf011b178ade9f217c.avi Found-by: Mateusz "j00ru" Jurczyk and Gynvael Coldwind Signed-off-by: Michael Niedermayer <michael@niedermayer.cc>
96 lines
3.0 KiB
C
96 lines
3.0 KiB
C
/*
|
|
* MSF demuxer
|
|
* Copyright (c) 2015 Paul B Mahol
|
|
*
|
|
* This file is part of FFmpeg.
|
|
*
|
|
* FFmpeg is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* FFmpeg is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public
|
|
* License along with FFmpeg; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
|
|
*/
|
|
|
|
#include "libavutil/intreadwrite.h"
|
|
#include "avformat.h"
|
|
#include "internal.h"
|
|
|
|
static int msf_probe(AVProbeData *p)
|
|
{
|
|
if (memcmp(p->buf, "MSF", 3))
|
|
return 0;
|
|
|
|
if (AV_RB32(p->buf+8) <= 0)
|
|
return 0;
|
|
|
|
if (AV_RB32(p->buf+16) <= 0)
|
|
return 0;
|
|
|
|
return AVPROBE_SCORE_MAX / 3 * 2;
|
|
}
|
|
|
|
static int msf_read_header(AVFormatContext *s)
|
|
{
|
|
unsigned codec, align, size;
|
|
AVStream *st;
|
|
|
|
avio_skip(s->pb, 4);
|
|
|
|
st = avformat_new_stream(s, NULL);
|
|
if (!st)
|
|
return AVERROR(ENOMEM);
|
|
|
|
st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
|
|
codec = avio_rb32(s->pb);
|
|
st->codec->channels = avio_rb32(s->pb);
|
|
if (st->codec->channels <= 0 || st->codec->channels >= INT_MAX / 1024)
|
|
return AVERROR_INVALIDDATA;
|
|
size = avio_rb32(s->pb);
|
|
st->codec->sample_rate = avio_rb32(s->pb);
|
|
if (st->codec->sample_rate <= 0)
|
|
return AVERROR_INVALIDDATA;
|
|
align = avio_rb32(s->pb) ;
|
|
if (align > INT_MAX / st->codec->channels)
|
|
return AVERROR_INVALIDDATA;
|
|
st->codec->block_align = align;
|
|
switch (codec) {
|
|
case 0: st->codec->codec_id = AV_CODEC_ID_PCM_S16BE; break;
|
|
case 3: st->codec->block_align = 16 * st->codec->channels;
|
|
st->codec->codec_id = AV_CODEC_ID_ADPCM_PSX; break;
|
|
case 7: st->need_parsing = AVSTREAM_PARSE_FULL_RAW;
|
|
st->codec->codec_id = AV_CODEC_ID_MP3; break;
|
|
default:
|
|
avpriv_request_sample(s, "Codec %d", codec);
|
|
return AVERROR_PATCHWELCOME;
|
|
}
|
|
st->duration = av_get_audio_frame_duration(st->codec, size);
|
|
avio_skip(s->pb, 0x40 - avio_tell(s->pb));
|
|
avpriv_set_pts_info(st, 64, 1, st->codec->sample_rate);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static int msf_read_packet(AVFormatContext *s, AVPacket *pkt)
|
|
{
|
|
AVCodecContext *codec = s->streams[0]->codec;
|
|
|
|
return av_get_packet(s->pb, pkt, codec->block_align ? codec->block_align : 1024 * codec->channels);
|
|
}
|
|
|
|
AVInputFormat ff_msf_demuxer = {
|
|
.name = "msf",
|
|
.long_name = NULL_IF_CONFIG_SMALL("Sony PS3 MSF"),
|
|
.read_probe = msf_probe,
|
|
.read_header = msf_read_header,
|
|
.read_packet = msf_read_packet,
|
|
.extensions = "msf",
|
|
};
|