Mercurial > libavformat.hg
annotate rtmppkt.c @ 5399:f042e114451f libavformat
7l trocadero: reading right into enum variable may cause unwanted effects, use
intermediate buffer for reading value instead in RTMP protocol handler.
author | kostya |
---|---|
date | Tue, 01 Dec 2009 14:58:17 +0000 |
parents | c22a1e94e80f |
children | c7d1e90d4935 |
rev | line source |
---|---|
5123 | 1 /* |
2 * RTMP input format | |
3 * Copyright (c) 2009 Kostya Shishkov | |
4 * | |
5 * This file is part of FFmpeg. | |
6 * | |
7 * FFmpeg is free software; you can redistribute it and/or | |
8 * modify it under the terms of the GNU Lesser General Public | |
9 * License as published by the Free Software Foundation; either | |
10 * version 2.1 of the License, or (at your option) any later version. | |
11 * | |
12 * FFmpeg is distributed in the hope that it will be useful, | |
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of | |
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU | |
15 * Lesser General Public License for more details. | |
16 * | |
17 * You should have received a copy of the GNU Lesser General Public | |
18 * License along with FFmpeg; if not, write to the Free Software | |
19 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA | |
20 */ | |
21 | |
22 #include "libavcodec/bytestream.h" | |
23 #include "libavutil/avstring.h" | |
24 #include "avformat.h" | |
25 | |
26 #include "rtmppkt.h" | |
27 #include "flv.h" | |
28 | |
29 void ff_amf_write_bool(uint8_t **dst, int val) | |
30 { | |
31 bytestream_put_byte(dst, AMF_DATA_TYPE_BOOL); | |
32 bytestream_put_byte(dst, val); | |
33 } | |
34 | |
35 void ff_amf_write_number(uint8_t **dst, double val) | |
36 { | |
37 bytestream_put_byte(dst, AMF_DATA_TYPE_NUMBER); | |
38 bytestream_put_be64(dst, av_dbl2int(val)); | |
39 } | |
40 | |
41 void ff_amf_write_string(uint8_t **dst, const char *str) | |
42 { | |
43 bytestream_put_byte(dst, AMF_DATA_TYPE_STRING); | |
44 bytestream_put_be16(dst, strlen(str)); | |
45 bytestream_put_buffer(dst, str, strlen(str)); | |
46 } | |
47 | |
48 void ff_amf_write_null(uint8_t **dst) | |
49 { | |
50 bytestream_put_byte(dst, AMF_DATA_TYPE_NULL); | |
51 } | |
52 | |
53 void ff_amf_write_object_start(uint8_t **dst) | |
54 { | |
55 bytestream_put_byte(dst, AMF_DATA_TYPE_OBJECT); | |
56 } | |
57 | |
58 void ff_amf_write_field_name(uint8_t **dst, const char *str) | |
59 { | |
60 bytestream_put_be16(dst, strlen(str)); | |
61 bytestream_put_buffer(dst, str, strlen(str)); | |
62 } | |
63 | |
64 void ff_amf_write_object_end(uint8_t **dst) | |
65 { | |
66 /* first two bytes are field name length = 0, | |
67 * AMF object should end with it and end marker | |
68 */ | |
69 bytestream_put_be24(dst, AMF_DATA_TYPE_OBJECT_END); | |
70 } | |
71 | |
72 int ff_rtmp_packet_read(URLContext *h, RTMPPacket *p, | |
73 int chunk_size, RTMPPacket *prev_pkt) | |
74 { | |
75 uint8_t hdr, t, buf[16]; | |
76 int channel_id, timestamp, data_size, offset = 0; | |
77 uint32_t extra = 0; | |
5360
a00cc1aac80d
Use enum instead of integer types where appropriate.
cehoyos
parents:
5297
diff
changeset
|
78 enum RTMPPacketType type; |
5123 | 79 |
80 if (url_read(h, &hdr, 1) != 1) | |
81 return AVERROR(EIO); | |
82 channel_id = hdr & 0x3F; | |
83 | |
5297 | 84 if (channel_id < 2) { //special case for channel number >= 64 |
85 buf[1] = 0; | |
86 if (url_read_complete(h, buf, channel_id + 1) != channel_id + 1) | |
87 return AVERROR(EIO); | |
88 channel_id = AV_RL16(buf) + 64; | |
89 } | |
5123 | 90 data_size = prev_pkt[channel_id].data_size; |
91 type = prev_pkt[channel_id].type; | |
92 extra = prev_pkt[channel_id].extra; | |
93 | |
94 hdr >>= 6; | |
95 if (hdr == RTMP_PS_ONEBYTE) { | |
5296 | 96 timestamp = prev_pkt[channel_id].timestamp; |
5123 | 97 } else { |
98 if (url_read_complete(h, buf, 3) != 3) | |
99 return AVERROR(EIO); | |
100 timestamp = AV_RB24(buf); | |
101 if (hdr != RTMP_PS_FOURBYTES) { | |
102 if (url_read_complete(h, buf, 3) != 3) | |
103 return AVERROR(EIO); | |
104 data_size = AV_RB24(buf); | |
5399
f042e114451f
7l trocadero: reading right into enum variable may cause unwanted effects, use
kostya
parents:
5378
diff
changeset
|
105 if (url_read_complete(h, buf, 1) != 1) |
5123 | 106 return AVERROR(EIO); |
5399
f042e114451f
7l trocadero: reading right into enum variable may cause unwanted effects, use
kostya
parents:
5378
diff
changeset
|
107 type = buf[0]; |
5123 | 108 if (hdr == RTMP_PS_TWELVEBYTES) { |
109 if (url_read_complete(h, buf, 4) != 4) | |
110 return AVERROR(EIO); | |
111 extra = AV_RL32(buf); | |
112 } | |
113 } | |
114 } | |
115 if (ff_rtmp_packet_create(p, channel_id, type, timestamp, data_size)) | |
116 return -1; | |
117 p->extra = extra; | |
118 // save history | |
119 prev_pkt[channel_id].channel_id = channel_id; | |
120 prev_pkt[channel_id].type = type; | |
121 prev_pkt[channel_id].data_size = data_size; | |
122 prev_pkt[channel_id].timestamp = timestamp; | |
123 prev_pkt[channel_id].extra = extra; | |
124 while (data_size > 0) { | |
125 int toread = FFMIN(data_size, chunk_size); | |
126 if (url_read_complete(h, p->data + offset, toread) != toread) { | |
127 ff_rtmp_packet_destroy(p); | |
128 return AVERROR(EIO); | |
129 } | |
130 data_size -= chunk_size; | |
131 offset += chunk_size; | |
132 if (data_size > 0) { | |
133 url_read_complete(h, &t, 1); //marker | |
134 if (t != (0xC0 + channel_id)) | |
135 return -1; | |
136 } | |
137 } | |
138 return 0; | |
139 } | |
140 | |
141 int ff_rtmp_packet_write(URLContext *h, RTMPPacket *pkt, | |
142 int chunk_size, RTMPPacket *prev_pkt) | |
143 { | |
144 uint8_t pkt_hdr[16], *p = pkt_hdr; | |
145 int mode = RTMP_PS_TWELVEBYTES; | |
146 int off = 0; | |
147 | |
148 //TODO: header compression | |
149 bytestream_put_byte(&p, pkt->channel_id | (mode << 6)); | |
150 if (mode != RTMP_PS_ONEBYTE) { | |
151 bytestream_put_be24(&p, pkt->timestamp); | |
152 if (mode != RTMP_PS_FOURBYTES) { | |
153 bytestream_put_be24(&p, pkt->data_size); | |
154 bytestream_put_byte(&p, pkt->type); | |
155 if (mode == RTMP_PS_TWELVEBYTES) | |
156 bytestream_put_le32(&p, pkt->extra); | |
157 } | |
158 } | |
159 url_write(h, pkt_hdr, p-pkt_hdr); | |
160 while (off < pkt->data_size) { | |
161 int towrite = FFMIN(chunk_size, pkt->data_size - off); | |
162 url_write(h, pkt->data + off, towrite); | |
163 off += towrite; | |
164 if (off < pkt->data_size) { | |
165 uint8_t marker = 0xC0 | pkt->channel_id; | |
166 url_write(h, &marker, 1); | |
167 } | |
168 } | |
169 return 0; | |
170 } | |
171 | |
172 int ff_rtmp_packet_create(RTMPPacket *pkt, int channel_id, RTMPPacketType type, | |
173 int timestamp, int size) | |
174 { | |
175 pkt->data = av_malloc(size); | |
176 if (!pkt->data) | |
177 return AVERROR(ENOMEM); | |
178 pkt->data_size = size; | |
179 pkt->channel_id = channel_id; | |
180 pkt->type = type; | |
181 pkt->timestamp = timestamp; | |
182 pkt->extra = 0; | |
183 | |
184 return 0; | |
185 } | |
186 | |
187 void ff_rtmp_packet_destroy(RTMPPacket *pkt) | |
188 { | |
189 if (!pkt) | |
190 return; | |
191 av_freep(&pkt->data); | |
192 pkt->data_size = 0; | |
193 } | |
194 | |
195 int ff_amf_tag_size(const uint8_t *data, const uint8_t *data_end) | |
196 { | |
197 const uint8_t *base = data; | |
198 | |
199 if (data >= data_end) | |
200 return -1; | |
201 switch (*data++) { | |
202 case AMF_DATA_TYPE_NUMBER: return 9; | |
203 case AMF_DATA_TYPE_BOOL: return 2; | |
204 case AMF_DATA_TYPE_STRING: return 3 + AV_RB16(data); | |
205 case AMF_DATA_TYPE_LONG_STRING: return 5 + AV_RB32(data); | |
206 case AMF_DATA_TYPE_NULL: return 1; | |
207 case AMF_DATA_TYPE_ARRAY: | |
208 data += 4; | |
209 case AMF_DATA_TYPE_OBJECT: | |
210 for (;;) { | |
211 int size = bytestream_get_be16(&data); | |
212 int t; | |
213 if (!size) { | |
214 data++; | |
215 break; | |
216 } | |
217 if (data + size >= data_end || data + size < data) | |
218 return -1; | |
219 data += size; | |
220 t = ff_amf_tag_size(data, data_end); | |
221 if (t < 0 || data + t >= data_end) | |
222 return -1; | |
223 data += t; | |
224 } | |
225 return data - base; | |
226 case AMF_DATA_TYPE_OBJECT_END: return 1; | |
227 default: return -1; | |
228 } | |
229 } | |
230 | |
231 int ff_amf_get_field_value(const uint8_t *data, const uint8_t *data_end, | |
232 const uint8_t *name, uint8_t *dst, int dst_size) | |
233 { | |
234 int namelen = strlen(name); | |
235 int len; | |
236 | |
5378
c22a1e94e80f
When searching for AMF object field value, try to find that object first
kostya
parents:
5360
diff
changeset
|
237 while (*data != AMF_DATA_TYPE_OBJECT && data < data_end) { |
c22a1e94e80f
When searching for AMF object field value, try to find that object first
kostya
parents:
5360
diff
changeset
|
238 len = ff_amf_tag_size(data, data_end); |
c22a1e94e80f
When searching for AMF object field value, try to find that object first
kostya
parents:
5360
diff
changeset
|
239 if (len < 0) |
c22a1e94e80f
When searching for AMF object field value, try to find that object first
kostya
parents:
5360
diff
changeset
|
240 len = data_end - data; |
c22a1e94e80f
When searching for AMF object field value, try to find that object first
kostya
parents:
5360
diff
changeset
|
241 data += len; |
c22a1e94e80f
When searching for AMF object field value, try to find that object first
kostya
parents:
5360
diff
changeset
|
242 } |
5123 | 243 if (data_end - data < 3) |
244 return -1; | |
5378
c22a1e94e80f
When searching for AMF object field value, try to find that object first
kostya
parents:
5360
diff
changeset
|
245 data++; |
5123 | 246 for (;;) { |
247 int size = bytestream_get_be16(&data); | |
248 if (!size) | |
249 break; | |
250 if (data + size >= data_end || data + size < data) | |
251 return -1; | |
252 data += size; | |
253 if (size == namelen && !memcmp(data-size, name, namelen)) { | |
254 switch (*data++) { | |
255 case AMF_DATA_TYPE_NUMBER: | |
256 snprintf(dst, dst_size, "%g", av_int2dbl(AV_RB64(data))); | |
257 break; | |
258 case AMF_DATA_TYPE_BOOL: | |
259 snprintf(dst, dst_size, "%s", *data ? "true" : "false"); | |
260 break; | |
261 case AMF_DATA_TYPE_STRING: | |
262 len = bytestream_get_be16(&data); | |
263 av_strlcpy(dst, data, FFMIN(len+1, dst_size)); | |
264 break; | |
265 default: | |
266 return -1; | |
267 } | |
268 return 0; | |
269 } | |
270 len = ff_amf_tag_size(data, data_end); | |
271 if (len < 0 || data + len >= data_end || data + len < data) | |
272 return -1; | |
273 data += len; | |
274 } | |
275 return -1; | |
276 } |