Mercurial > mplayer.hg
annotate libmpcodecs/vf_kerndeint.c @ 22188:b9fa8b0ddab9
strncat() misuses, may have been exploitable.
Reported by Sascha Sommer.
author | rtogni |
---|---|
date | Sun, 11 Feb 2007 18:00:06 +0000 |
parents | cea0eb833758 |
children | 6c3b8d7724f7 |
rev | line source |
---|---|
11869 | 1 /* |
2 Original AVISynth Filter Copyright (C) 2003 Donald A. Graft | |
3 Adapted to MPlayer by Tobias Diedrich | |
4 | |
5 This program is free software; you can redistribute it and/or modify | |
6 it under the terms of the GNU General Public License as published by | |
7 the Free Software Foundation. | |
8 | |
9 This program is distributed in the hope that it will be useful, | |
10 but WITHOUT ANY WARRANTY; without even the implied warranty of | |
11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
12 GNU General Public License for more details. | |
13 | |
14 You should have received a copy of the GNU General Public License | |
15 along with this program; if not, write to the Free Software | |
21977
cea0eb833758
Fix FSF address and otherwise broken license headers.
diego
parents:
18976
diff
changeset
|
16 Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA |
11869 | 17 */ |
18 | |
19 #include <stdio.h> | |
20 #include <stdlib.h> | |
21 #include <string.h> | |
22 #include <inttypes.h> | |
23 #include <math.h> | |
24 | |
17012 | 25 #include "config.h" |
26 #include "mp_msg.h" | |
11869 | 27 |
28 #ifdef HAVE_MALLOC_H | |
29 #include <malloc.h> | |
30 #endif | |
31 | |
32 #include "img_format.h" | |
33 #include "mp_image.h" | |
34 #include "vf.h" | |
17012 | 35 #include "libvo/fastmemcpy.h" |
11869 | 36 |
37 //===========================================================================// | |
38 | |
39 struct vf_priv_s { | |
40 int frame; | |
41 int map; | |
42 int order; | |
43 int thresh; | |
44 int sharp; | |
45 int twoway; | |
46 }; | |
47 | |
48 | |
49 /***************************************************************************/ | |
50 | |
51 | |
52 static int config(struct vf_instance_s* vf, | |
53 int width, int height, int d_width, int d_height, | |
54 unsigned int flags, unsigned int outfmt){ | |
55 | |
56 return vf_next_config(vf,width,height,d_width,d_height,flags,outfmt); | |
57 } | |
58 | |
59 | |
60 static void uninit(struct vf_instance_s* vf) | |
61 { | |
62 free(vf->priv); | |
63 } | |
64 | |
65 static inline int IsRGB(mp_image_t *mpi) | |
66 { | |
67 return mpi->imgfmt == IMGFMT_RGB; | |
68 } | |
69 | |
70 static inline int IsYUY2(mp_image_t *mpi) | |
71 { | |
72 return mpi->imgfmt == IMGFMT_YUY2; | |
73 } | |
74 | |
75 #define PLANAR_Y 0 | |
76 #define PLANAR_U 1 | |
77 #define PLANAR_V 2 | |
78 | |
17906
20aca9baf5d8
passing pts through the filter layer (lets see if pts or cola comes out at the end)
michael
parents:
17012
diff
changeset
|
79 static int put_image(struct vf_instance_s* vf, mp_image_t *mpi, double pts){ |
11869 | 80 int cw= mpi->w >> mpi->chroma_x_shift; |
81 int ch= mpi->h >> mpi->chroma_y_shift; | |
82 int W = mpi->w, H = mpi->h; | |
83 const unsigned char *prvp, *prvpp, *prvpn, *prvpnn, *prvppp, *prvp4p, *prvp4n; | |
84 const unsigned char *srcp_saved; | |
85 const unsigned char *srcp, *srcpp, *srcpn, *srcpnn, *srcppp, *srcp3p, *srcp3n, *srcp4p, *srcp4n; | |
86 unsigned char *dstp, *dstp_saved; | |
87 int src_pitch; | |
11879 | 88 int psrc_pitch; |
11869 | 89 int dst_pitch; |
90 int x, y, z; | |
91 int n = vf->priv->frame++; | |
92 int val, hi, lo, w, h; | |
93 double valf; | |
94 int plane; | |
95 int threshold = vf->priv->thresh; | |
96 int order = vf->priv->order; | |
97 int map = vf->priv->map; | |
98 int sharp = vf->priv->sharp; | |
99 int twoway = vf->priv->twoway; | |
100 | |
101 mp_image_t *dmpi=vf_get_image(vf->next,mpi->imgfmt, | |
102 MP_IMGTYPE_IP, MP_IMGFLAG_ACCEPT_STRIDE, | |
103 mpi->w,mpi->h); | |
104 mp_image_t *pmpi=vf_get_image(vf->next,mpi->imgfmt, | |
105 MP_IMGTYPE_TEMP, MP_IMGFLAG_ACCEPT_STRIDE, | |
106 mpi->w,mpi->h); | |
107 if(!dmpi) return 0; | |
108 | |
109 for (z=0; z<mpi->num_planes; z++) { | |
110 if (z == 0) plane = PLANAR_Y; | |
111 else if (z == 1) plane = PLANAR_U; | |
112 else plane = PLANAR_V; | |
113 | |
114 h = plane == PLANAR_Y ? H : ch; | |
115 w = plane == PLANAR_Y ? W : cw; | |
116 | |
117 srcp = srcp_saved = mpi->planes[z]; | |
118 src_pitch = mpi->stride[z]; | |
11879 | 119 psrc_pitch = pmpi->stride[z]; |
11869 | 120 dstp = dstp_saved = dmpi->planes[z]; |
121 dst_pitch = dmpi->stride[z]; | |
122 srcp = srcp_saved + (1-order) * src_pitch; | |
123 dstp = dstp_saved + (1-order) * dst_pitch; | |
124 | |
125 for (y=0; y<h; y+=2) { | |
126 memcpy(dstp, srcp, w); | |
127 srcp += 2*src_pitch; | |
128 dstp += 2*dst_pitch; | |
129 } | |
130 | |
131 // Copy through the lines that will be missed below. | |
132 memcpy(dstp_saved + order*dst_pitch, srcp_saved + (1-order)*src_pitch, w); | |
133 memcpy(dstp_saved + (2+order)*dst_pitch, srcp_saved + (3-order)*src_pitch, w); | |
134 memcpy(dstp_saved + (h-2+order)*dst_pitch, srcp_saved + (h-1-order)*src_pitch, w); | |
135 memcpy(dstp_saved + (h-4+order)*dst_pitch, srcp_saved + (h-3-order)*src_pitch, w); | |
136 /* For the other field choose adaptively between using the previous field | |
137 or the interpolant from the current field. */ | |
138 | |
11879 | 139 prvp = pmpi->planes[z] + 5*psrc_pitch - (1-order)*psrc_pitch; |
140 prvpp = prvp - psrc_pitch; | |
141 prvppp = prvp - 2*psrc_pitch; | |
142 prvp4p = prvp - 4*psrc_pitch; | |
143 prvpn = prvp + psrc_pitch; | |
144 prvpnn = prvp + 2*psrc_pitch; | |
145 prvp4n = prvp + 4*psrc_pitch; | |
11869 | 146 srcp = srcp_saved + 5*src_pitch - (1-order)*src_pitch; |
147 srcpp = srcp - src_pitch; | |
148 srcppp = srcp - 2*src_pitch; | |
149 srcp3p = srcp - 3*src_pitch; | |
150 srcp4p = srcp - 4*src_pitch; | |
151 srcpn = srcp + src_pitch; | |
152 srcpnn = srcp + 2*src_pitch; | |
153 srcp3n = srcp + 3*src_pitch; | |
154 srcp4n = srcp + 4*src_pitch; | |
155 dstp = dstp_saved + 5*dst_pitch - (1-order)*dst_pitch; | |
156 for (y = 5 - (1-order); y <= h - 5 - (1-order); y+=2) | |
157 { | |
158 for (x = 0; x < w; x++) | |
159 { | |
160 if ((threshold == 0) || (n == 0) || | |
161 (abs((int)prvp[x] - (int)srcp[x]) > threshold) || | |
162 (abs((int)prvpp[x] - (int)srcpp[x]) > threshold) || | |
163 (abs((int)prvpn[x] - (int)srcpn[x]) > threshold)) | |
164 { | |
165 if (map == 1) | |
166 { | |
167 int g = x & ~3; | |
168 if (IsRGB(mpi) == 1) | |
169 { | |
170 dstp[g++] = 255; | |
171 dstp[g++] = 255; | |
172 dstp[g++] = 255; | |
173 dstp[g] = 255; | |
174 x = g; | |
175 } | |
176 else if (IsYUY2(mpi) == 1) | |
177 { | |
178 dstp[g++] = 235; | |
179 dstp[g++] = 128; | |
180 dstp[g++] = 235; | |
181 dstp[g] = 128; | |
182 x = g; | |
183 } | |
184 else | |
185 { | |
186 if (plane == PLANAR_Y) dstp[x] = 235; | |
187 else dstp[x] = 128; | |
188 } | |
189 } | |
190 else | |
191 { | |
192 if (IsRGB(mpi)) | |
193 { | |
194 hi = 255; | |
195 lo = 0; | |
196 } | |
197 else if (IsYUY2(mpi)) | |
198 { | |
199 hi = (x & 1) ? 240 : 235; | |
200 lo = 16; | |
201 } | |
202 else | |
203 { | |
204 hi = (plane == PLANAR_Y) ? 235 : 240; | |
205 lo = 16; | |
206 } | |
207 | |
208 if (sharp == 1) | |
209 { | |
210 if (twoway == 1) | |
211 valf = + 0.526*((int)srcpp[x] + (int)srcpn[x]) | |
212 + 0.170*((int)srcp[x] + (int)prvp[x]) | |
213 - 0.116*((int)srcppp[x] + (int)srcpnn[x] + (int)prvppp[x] + (int)prvpnn[x]) | |
214 - 0.026*((int)srcp3p[x] + (int)srcp3n[x]) | |
215 + 0.031*((int)srcp4p[x] + (int)srcp4n[x] + (int)prvp4p[x] + (int)prvp4n[x]); | |
216 else | |
217 valf = + 0.526*((int)srcpp[x] + (int)srcpn[x]) | |
218 + 0.170*((int)prvp[x]) | |
219 - 0.116*((int)prvppp[x] + (int)prvpnn[x]) | |
220 - 0.026*((int)srcp3p[x] + (int)srcp3n[x]) | |
221 + 0.031*((int)prvp4p[x] + (int)prvp4p[x]); | |
222 if (valf > hi) valf = hi; | |
223 else if (valf < lo) valf = lo; | |
224 dstp[x] = (int) valf; | |
225 } | |
226 else | |
227 { | |
228 if (twoway == 1) | |
229 val = (8*((int)srcpp[x] + (int)srcpn[x]) + 2*((int)srcp[x] + (int)prvp[x]) - | |
230 (int)(srcppp[x]) - (int)(srcpnn[x]) - | |
231 (int)(prvppp[x]) - (int)(prvpnn[x])) >> 4; | |
232 else | |
233 val = (8*((int)srcpp[x] + (int)srcpn[x]) + 2*((int)prvp[x]) - | |
234 (int)(prvppp[x]) - (int)(prvpnn[x])) >> 4; | |
235 if (val > hi) val = hi; | |
236 else if (val < lo) val = lo; | |
237 dstp[x] = (int) val; | |
238 } | |
239 } | |
240 } | |
241 else | |
242 { | |
243 dstp[x] = srcp[x]; | |
244 } | |
245 } | |
11879 | 246 prvp += 2*psrc_pitch; |
247 prvpp += 2*psrc_pitch; | |
248 prvppp += 2*psrc_pitch; | |
249 prvpn += 2*psrc_pitch; | |
250 prvpnn += 2*psrc_pitch; | |
251 prvp4p += 2*psrc_pitch; | |
252 prvp4n += 2*psrc_pitch; | |
11869 | 253 srcp += 2*src_pitch; |
254 srcpp += 2*src_pitch; | |
255 srcppp += 2*src_pitch; | |
256 srcp3p += 2*src_pitch; | |
257 srcp4p += 2*src_pitch; | |
258 srcpn += 2*src_pitch; | |
259 srcpnn += 2*src_pitch; | |
260 srcp3n += 2*src_pitch; | |
261 srcp4n += 2*src_pitch; | |
262 dstp += 2*dst_pitch; | |
263 } | |
11879 | 264 |
265 srcp = mpi->planes[z]; | |
266 dstp = pmpi->planes[z]; | |
267 for (y=0; y<h; y++) { | |
268 memcpy(dstp, srcp, w); | |
269 srcp += src_pitch; | |
270 dstp += psrc_pitch; | |
271 } | |
11869 | 272 } |
273 | |
17906
20aca9baf5d8
passing pts through the filter layer (lets see if pts or cola comes out at the end)
michael
parents:
17012
diff
changeset
|
274 return vf_next_put_image(vf,dmpi, pts); |
11869 | 275 } |
276 | |
277 //===========================================================================// | |
278 | |
279 static int query_format(struct vf_instance_s* vf, unsigned int fmt){ | |
280 switch(fmt) | |
281 { | |
282 case IMGFMT_YV12: | |
11991
1c268fb0503d
A bit late, but here's the "more sane options ordering" patch.
ranma
parents:
11879
diff
changeset
|
283 case IMGFMT_RGB: |
1c268fb0503d
A bit late, but here's the "more sane options ordering" patch.
ranma
parents:
11879
diff
changeset
|
284 case IMGFMT_YUY2: |
11869 | 285 return vf_next_query_format(vf, fmt); |
286 } | |
287 return 0; | |
288 } | |
289 | |
290 static int open(vf_instance_t *vf, char* args){ | |
291 | |
292 vf->config=config; | |
293 vf->put_image=put_image; | |
294 vf->query_format=query_format; | |
295 vf->uninit=uninit; | |
296 vf->priv=malloc(sizeof(struct vf_priv_s)); | |
297 memset(vf->priv, 0, sizeof(struct vf_priv_s)); | |
298 | |
299 vf->priv->frame = 0; | |
300 | |
301 vf->priv->map = 0; | |
302 vf->priv->order = 0; | |
303 vf->priv->thresh = 10; | |
304 vf->priv->sharp = 0; | |
305 vf->priv->twoway = 0; | |
306 | |
307 if (args) | |
308 { | |
309 sscanf(args, "%d:%d:%d:%d:%d", | |
11991
1c268fb0503d
A bit late, but here's the "more sane options ordering" patch.
ranma
parents:
11879
diff
changeset
|
310 &vf->priv->thresh, &vf->priv->map, |
1c268fb0503d
A bit late, but here's the "more sane options ordering" patch.
ranma
parents:
11879
diff
changeset
|
311 &vf->priv->order, &vf->priv->sharp, |
11869 | 312 &vf->priv->twoway); |
313 } | |
314 if (vf->priv->order > 1) vf->priv->order = 1; | |
315 | |
316 return 1; | |
317 } | |
318 | |
319 vf_info_t vf_info_kerndeint = { | |
320 "Kernel Deinterlacer", | |
321 "kerndeint", | |
322 "Donald Graft", | |
323 "", | |
324 open, | |
325 NULL | |
326 }; | |
327 | |
328 //===========================================================================// |