Fix several security issues in matroskadec.c (MSVR-11-0080).
[ffmpeg.git] / libavformat / matroskadec.c
1 /*
2  * Matroska file demuxer
3  * Copyright (c) 2003-2008 The FFmpeg Project
4  *
5  * This file is part of FFmpeg.
6  *
7  * FFmpeg is free software; you can redistribute it and/or
8  * modify it under the terms of the GNU Lesser General Public
9  * License as published by the Free Software Foundation; either
10  * version 2.1 of the License, or (at your option) any later version.
11  *
12  * FFmpeg is distributed in the hope that it will be useful,
13  * but WITHOUT ANY WARRANTY; without even the implied warranty of
14  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
15  * Lesser General Public License for more details.
16  *
17  * You should have received a copy of the GNU Lesser General Public
18  * License along with FFmpeg; if not, write to the Free Software
19  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
20  */
21
22 /**
23  * @file
24  * Matroska file demuxer
25  * by Ronald Bultje <rbultje@ronald.bitfreak.net>
26  * with a little help from Moritz Bunkus <moritz@bunkus.org>
27  * totally reworked by Aurelien Jacobs <aurel@gnuage.org>
28  * Specs available on the Matroska project page: http://www.matroska.org/.
29  */
30
31 #include <stdio.h>
32 #include "avformat.h"
33 #include "internal.h"
34 #include "avio_internal.h"
35 /* For ff_codec_get_id(). */
36 #include "riff.h"
37 #include "isom.h"
38 #include "rm.h"
39 #include "matroska.h"
40 #include "libavcodec/mpeg4audio.h"
41 #include "libavutil/intfloat_readwrite.h"
42 #include "libavutil/intreadwrite.h"
43 #include "libavutil/avstring.h"
44 #include "libavutil/lzo.h"
45 #include "libavutil/dict.h"
46 #if CONFIG_ZLIB
47 #include <zlib.h>
48 #endif
49 #if CONFIG_BZLIB
50 #include <bzlib.h>
51 #endif
52
53 typedef enum {
54     EBML_NONE,
55     EBML_UINT,
56     EBML_FLOAT,
57     EBML_STR,
58     EBML_UTF8,
59     EBML_BIN,
60     EBML_NEST,
61     EBML_PASS,
62     EBML_STOP,
63     EBML_TYPE_COUNT
64 } EbmlType;
65
66 typedef const struct EbmlSyntax {
67     uint32_t id;
68     EbmlType type;
69     int list_elem_size;
70     int data_offset;
71     union {
72         uint64_t    u;
73         double      f;
74         const char *s;
75         const struct EbmlSyntax *n;
76     } def;
77 } EbmlSyntax;
78
79 typedef struct {
80     int nb_elem;
81     void *elem;
82 } EbmlList;
83
84 typedef struct {
85     int      size;
86     uint8_t *data;
87     int64_t  pos;
88 } EbmlBin;
89
90 typedef struct {
91     uint64_t version;
92     uint64_t max_size;
93     uint64_t id_length;
94     char    *doctype;
95     uint64_t doctype_version;
96 } Ebml;
97
98 typedef struct {
99     uint64_t algo;
100     EbmlBin  settings;
101 } MatroskaTrackCompression;
102
103 typedef struct {
104     uint64_t scope;
105     uint64_t type;
106     MatroskaTrackCompression compression;
107 } MatroskaTrackEncoding;
108
109 typedef struct {
110     double   frame_rate;
111     uint64_t display_width;
112     uint64_t display_height;
113     uint64_t pixel_width;
114     uint64_t pixel_height;
115     EbmlBin color_space;
116     uint64_t stereo_mode;
117 } MatroskaTrackVideo;
118
119 typedef struct {
120     double   samplerate;
121     double   out_samplerate;
122     uint64_t bitdepth;
123     uint64_t channels;
124
125     /* real audio header (extracted from extradata) */
126     int      coded_framesize;
127     int      sub_packet_h;
128     int      frame_size;
129     int      sub_packet_size;
130     int      sub_packet_cnt;
131     int      pkt_cnt;
132     uint64_t buf_timecode;
133     uint8_t *buf;
134 } MatroskaTrackAudio;
135
136 typedef struct {
137     uint64_t uid;
138     uint64_t type;
139 } MatroskaTrackPlane;
140
141 typedef struct {
142     EbmlList combine_planes;
143 } MatroskaTrackOperation;
144
145 typedef struct {
146     uint64_t num;
147     uint64_t uid;
148     uint64_t type;
149     char    *name;
150     char    *codec_id;
151     EbmlBin  codec_priv;
152     char    *language;
153     double time_scale;
154     uint64_t default_duration;
155     uint64_t flag_default;
156     uint64_t flag_forced;
157     MatroskaTrackVideo video;
158     MatroskaTrackAudio audio;
159     MatroskaTrackOperation operation;
160     EbmlList encodings;
161
162     AVStream *stream;
163     int64_t end_timecode;
164     int ms_compat;
165 } MatroskaTrack;
166
167 typedef struct {
168     uint64_t uid;
169     char *filename;
170     char *mime;
171     EbmlBin bin;
172
173     AVStream *stream;
174 } MatroskaAttachement;
175
176 typedef struct {
177     uint64_t start;
178     uint64_t end;
179     uint64_t uid;
180     char    *title;
181
182     AVChapter *chapter;
183 } MatroskaChapter;
184
185 typedef struct {
186     uint64_t track;
187     uint64_t pos;
188 } MatroskaIndexPos;
189
190 typedef struct {
191     uint64_t time;
192     EbmlList pos;
193 } MatroskaIndex;
194
195 typedef struct {
196     char *name;
197     char *string;
198     char *lang;
199     uint64_t def;
200     EbmlList sub;
201 } MatroskaTag;
202
203 typedef struct {
204     char    *type;
205     uint64_t typevalue;
206     uint64_t trackuid;
207     uint64_t chapteruid;
208     uint64_t attachuid;
209 } MatroskaTagTarget;
210
211 typedef struct {
212     MatroskaTagTarget target;
213     EbmlList tag;
214 } MatroskaTags;
215
216 typedef struct {
217     uint64_t id;
218     uint64_t pos;
219 } MatroskaSeekhead;
220
221 typedef struct {
222     uint64_t start;
223     uint64_t length;
224 } MatroskaLevel;
225
226 typedef struct {
227     AVFormatContext *ctx;
228
229     /* EBML stuff */
230     int num_levels;
231     MatroskaLevel levels[EBML_MAX_DEPTH];
232     int level_up;
233     uint32_t current_id;
234
235     uint64_t time_scale;
236     double   duration;
237     char    *title;
238     EbmlList tracks;
239     EbmlList attachments;
240     EbmlList chapters;
241     EbmlList index;
242     EbmlList tags;
243     EbmlList seekhead;
244
245     /* byte position of the segment inside the stream */
246     int64_t segment_start;
247
248     /* the packet queue */
249     AVPacket **packets;
250     int num_packets;
251     AVPacket *prev_pkt;
252
253     int done;
254
255     /* What to skip before effectively reading a packet. */
256     int skip_to_keyframe;
257     uint64_t skip_to_timecode;
258
259     /* File has a CUES element, but we defer parsing until it is needed. */
260     int cues_parsing_deferred;
261 } MatroskaDemuxContext;
262
263 typedef struct {
264     uint64_t duration;
265     int64_t  reference;
266     uint64_t non_simple;
267     EbmlBin  bin;
268 } MatroskaBlock;
269
270 typedef struct {
271     uint64_t timecode;
272     EbmlList blocks;
273 } MatroskaCluster;
274
275 static EbmlSyntax ebml_header[] = {
276     { EBML_ID_EBMLREADVERSION,        EBML_UINT, 0, offsetof(Ebml,version), {.u=EBML_VERSION} },
277     { EBML_ID_EBMLMAXSIZELENGTH,      EBML_UINT, 0, offsetof(Ebml,max_size), {.u=8} },
278     { EBML_ID_EBMLMAXIDLENGTH,        EBML_UINT, 0, offsetof(Ebml,id_length), {.u=4} },
279     { EBML_ID_DOCTYPE,                EBML_STR,  0, offsetof(Ebml,doctype), {.s="(none)"} },
280     { EBML_ID_DOCTYPEREADVERSION,     EBML_UINT, 0, offsetof(Ebml,doctype_version), {.u=1} },
281     { EBML_ID_EBMLVERSION,            EBML_NONE },
282     { EBML_ID_DOCTYPEVERSION,         EBML_NONE },
283     { 0 }
284 };
285
286 static EbmlSyntax ebml_syntax[] = {
287     { EBML_ID_HEADER,                 EBML_NEST, 0, 0, {.n=ebml_header} },
288     { 0 }
289 };
290
291 static EbmlSyntax matroska_info[] = {
292     { MATROSKA_ID_TIMECODESCALE,      EBML_UINT,  0, offsetof(MatroskaDemuxContext,time_scale), {.u=1000000} },
293     { MATROSKA_ID_DURATION,           EBML_FLOAT, 0, offsetof(MatroskaDemuxContext,duration) },
294     { MATROSKA_ID_TITLE,              EBML_UTF8,  0, offsetof(MatroskaDemuxContext,title) },
295     { MATROSKA_ID_WRITINGAPP,         EBML_NONE },
296     { MATROSKA_ID_MUXINGAPP,          EBML_NONE },
297     { MATROSKA_ID_DATEUTC,            EBML_NONE },
298     { MATROSKA_ID_SEGMENTUID,         EBML_NONE },
299     { 0 }
300 };
301
302 static EbmlSyntax matroska_track_video[] = {
303     { MATROSKA_ID_VIDEOFRAMERATE,     EBML_FLOAT,0, offsetof(MatroskaTrackVideo,frame_rate) },
304     { MATROSKA_ID_VIDEODISPLAYWIDTH,  EBML_UINT, 0, offsetof(MatroskaTrackVideo,display_width) },
305     { MATROSKA_ID_VIDEODISPLAYHEIGHT, EBML_UINT, 0, offsetof(MatroskaTrackVideo,display_height) },
306     { MATROSKA_ID_VIDEOPIXELWIDTH,    EBML_UINT, 0, offsetof(MatroskaTrackVideo,pixel_width) },
307     { MATROSKA_ID_VIDEOPIXELHEIGHT,   EBML_UINT, 0, offsetof(MatroskaTrackVideo,pixel_height) },
308     { MATROSKA_ID_VIDEOCOLORSPACE,    EBML_BIN,  0, offsetof(MatroskaTrackVideo,color_space) },
309     { MATROSKA_ID_VIDEOSTEREOMODE,    EBML_UINT, 0, offsetof(MatroskaTrackVideo,stereo_mode) },
310     { MATROSKA_ID_VIDEOPIXELCROPB,    EBML_NONE },
311     { MATROSKA_ID_VIDEOPIXELCROPT,    EBML_NONE },
312     { MATROSKA_ID_VIDEOPIXELCROPL,    EBML_NONE },
313     { MATROSKA_ID_VIDEOPIXELCROPR,    EBML_NONE },
314     { MATROSKA_ID_VIDEODISPLAYUNIT,   EBML_NONE },
315     { MATROSKA_ID_VIDEOFLAGINTERLACED,EBML_NONE },
316     { MATROSKA_ID_VIDEOASPECTRATIO,   EBML_NONE },
317     { 0 }
318 };
319
320 static EbmlSyntax matroska_track_audio[] = {
321     { MATROSKA_ID_AUDIOSAMPLINGFREQ,  EBML_FLOAT,0, offsetof(MatroskaTrackAudio,samplerate), {.f=8000.0} },
322     { MATROSKA_ID_AUDIOOUTSAMPLINGFREQ,EBML_FLOAT,0,offsetof(MatroskaTrackAudio,out_samplerate) },
323     { MATROSKA_ID_AUDIOBITDEPTH,      EBML_UINT, 0, offsetof(MatroskaTrackAudio,bitdepth) },
324     { MATROSKA_ID_AUDIOCHANNELS,      EBML_UINT, 0, offsetof(MatroskaTrackAudio,channels), {.u=1} },
325     { 0 }
326 };
327
328 static EbmlSyntax matroska_track_encoding_compression[] = {
329     { MATROSKA_ID_ENCODINGCOMPALGO,   EBML_UINT, 0, offsetof(MatroskaTrackCompression,algo), {.u=0} },
330     { MATROSKA_ID_ENCODINGCOMPSETTINGS,EBML_BIN, 0, offsetof(MatroskaTrackCompression,settings) },
331     { 0 }
332 };
333
334 static EbmlSyntax matroska_track_encoding[] = {
335     { MATROSKA_ID_ENCODINGSCOPE,      EBML_UINT, 0, offsetof(MatroskaTrackEncoding,scope), {.u=1} },
336     { MATROSKA_ID_ENCODINGTYPE,       EBML_UINT, 0, offsetof(MatroskaTrackEncoding,type), {.u=0} },
337     { MATROSKA_ID_ENCODINGCOMPRESSION,EBML_NEST, 0, offsetof(MatroskaTrackEncoding,compression), {.n=matroska_track_encoding_compression} },
338     { MATROSKA_ID_ENCODINGORDER,      EBML_NONE },
339     { 0 }
340 };
341
342 static EbmlSyntax matroska_track_encodings[] = {
343     { MATROSKA_ID_TRACKCONTENTENCODING, EBML_NEST, sizeof(MatroskaTrackEncoding), offsetof(MatroskaTrack,encodings), {.n=matroska_track_encoding} },
344     { 0 }
345 };
346
347 static EbmlSyntax matroska_track_plane[] = {
348     { MATROSKA_ID_TRACKPLANEUID,  EBML_UINT, 0, offsetof(MatroskaTrackPlane,uid) },
349     { MATROSKA_ID_TRACKPLANETYPE, EBML_UINT, 0, offsetof(MatroskaTrackPlane,type) },
350     { 0 }
351 };
352
353 static EbmlSyntax matroska_track_combine_planes[] = {
354     { MATROSKA_ID_TRACKPLANE, EBML_NEST, sizeof(MatroskaTrackPlane), offsetof(MatroskaTrackOperation,combine_planes), {.n=matroska_track_plane} },
355     { 0 }
356 };
357
358 static EbmlSyntax matroska_track_operation[] = {
359     { MATROSKA_ID_TRACKCOMBINEPLANES, EBML_NEST, 0, 0, {.n=matroska_track_combine_planes} },
360     { 0 }
361 };
362
363 static EbmlSyntax matroska_track[] = {
364     { MATROSKA_ID_TRACKNUMBER,          EBML_UINT, 0, offsetof(MatroskaTrack,num) },
365     { MATROSKA_ID_TRACKNAME,            EBML_UTF8, 0, offsetof(MatroskaTrack,name) },
366     { MATROSKA_ID_TRACKUID,             EBML_UINT, 0, offsetof(MatroskaTrack,uid) },
367     { MATROSKA_ID_TRACKTYPE,            EBML_UINT, 0, offsetof(MatroskaTrack,type) },
368     { MATROSKA_ID_CODECID,              EBML_STR,  0, offsetof(MatroskaTrack,codec_id) },
369     { MATROSKA_ID_CODECPRIVATE,         EBML_BIN,  0, offsetof(MatroskaTrack,codec_priv) },
370     { MATROSKA_ID_TRACKLANGUAGE,        EBML_UTF8, 0, offsetof(MatroskaTrack,language), {.s="eng"} },
371     { MATROSKA_ID_TRACKDEFAULTDURATION, EBML_UINT, 0, offsetof(MatroskaTrack,default_duration) },
372     { MATROSKA_ID_TRACKTIMECODESCALE,   EBML_FLOAT,0, offsetof(MatroskaTrack,time_scale), {.f=1.0} },
373     { MATROSKA_ID_TRACKFLAGDEFAULT,     EBML_UINT, 0, offsetof(MatroskaTrack,flag_default), {.u=1} },
374     { MATROSKA_ID_TRACKFLAGFORCED,      EBML_UINT, 0, offsetof(MatroskaTrack,flag_forced), {.u=0} },
375     { MATROSKA_ID_TRACKVIDEO,           EBML_NEST, 0, offsetof(MatroskaTrack,video), {.n=matroska_track_video} },
376     { MATROSKA_ID_TRACKAUDIO,           EBML_NEST, 0, offsetof(MatroskaTrack,audio), {.n=matroska_track_audio} },
377     { MATROSKA_ID_TRACKOPERATION,       EBML_NEST, 0, offsetof(MatroskaTrack,operation), {.n=matroska_track_operation} },
378     { MATROSKA_ID_TRACKCONTENTENCODINGS,EBML_NEST, 0, 0, {.n=matroska_track_encodings} },
379     { MATROSKA_ID_TRACKFLAGENABLED,     EBML_NONE },
380     { MATROSKA_ID_TRACKFLAGLACING,      EBML_NONE },
381     { MATROSKA_ID_CODECNAME,            EBML_NONE },
382     { MATROSKA_ID_CODECDECODEALL,       EBML_NONE },
383     { MATROSKA_ID_CODECINFOURL,         EBML_NONE },
384     { MATROSKA_ID_CODECDOWNLOADURL,     EBML_NONE },
385     { MATROSKA_ID_TRACKMINCACHE,        EBML_NONE },
386     { MATROSKA_ID_TRACKMAXCACHE,        EBML_NONE },
387     { MATROSKA_ID_TRACKMAXBLKADDID,     EBML_NONE },
388     { 0 }
389 };
390
391 static EbmlSyntax matroska_tracks[] = {
392     { MATROSKA_ID_TRACKENTRY,         EBML_NEST, sizeof(MatroskaTrack), offsetof(MatroskaDemuxContext,tracks), {.n=matroska_track} },
393     { 0 }
394 };
395
396 static EbmlSyntax matroska_attachment[] = {
397     { MATROSKA_ID_FILEUID,            EBML_UINT, 0, offsetof(MatroskaAttachement,uid) },
398     { MATROSKA_ID_FILENAME,           EBML_UTF8, 0, offsetof(MatroskaAttachement,filename) },
399     { MATROSKA_ID_FILEMIMETYPE,       EBML_STR,  0, offsetof(MatroskaAttachement,mime) },
400     { MATROSKA_ID_FILEDATA,           EBML_BIN,  0, offsetof(MatroskaAttachement,bin) },
401     { MATROSKA_ID_FILEDESC,           EBML_NONE },
402     { 0 }
403 };
404
405 static EbmlSyntax matroska_attachments[] = {
406     { MATROSKA_ID_ATTACHEDFILE,       EBML_NEST, sizeof(MatroskaAttachement), offsetof(MatroskaDemuxContext,attachments), {.n=matroska_attachment} },
407     { 0 }
408 };
409
410 static EbmlSyntax matroska_chapter_display[] = {
411     { MATROSKA_ID_CHAPSTRING,         EBML_UTF8, 0, offsetof(MatroskaChapter,title) },
412     { MATROSKA_ID_CHAPLANG,           EBML_NONE },
413     { 0 }
414 };
415
416 static EbmlSyntax matroska_chapter_entry[] = {
417     { MATROSKA_ID_CHAPTERTIMESTART,   EBML_UINT, 0, offsetof(MatroskaChapter,start), {.u=AV_NOPTS_VALUE} },
418     { MATROSKA_ID_CHAPTERTIMEEND,     EBML_UINT, 0, offsetof(MatroskaChapter,end), {.u=AV_NOPTS_VALUE} },
419     { MATROSKA_ID_CHAPTERUID,         EBML_UINT, 0, offsetof(MatroskaChapter,uid) },
420     { MATROSKA_ID_CHAPTERDISPLAY,     EBML_NEST, 0, 0, {.n=matroska_chapter_display} },
421     { MATROSKA_ID_CHAPTERFLAGHIDDEN,  EBML_NONE },
422     { MATROSKA_ID_CHAPTERFLAGENABLED, EBML_NONE },
423     { MATROSKA_ID_CHAPTERPHYSEQUIV,   EBML_NONE },
424     { MATROSKA_ID_CHAPTERATOM,        EBML_NONE },
425     { 0 }
426 };
427
428 static EbmlSyntax matroska_chapter[] = {
429     { MATROSKA_ID_CHAPTERATOM,        EBML_NEST, sizeof(MatroskaChapter), offsetof(MatroskaDemuxContext,chapters), {.n=matroska_chapter_entry} },
430     { MATROSKA_ID_EDITIONUID,         EBML_NONE },
431     { MATROSKA_ID_EDITIONFLAGHIDDEN,  EBML_NONE },
432     { MATROSKA_ID_EDITIONFLAGDEFAULT, EBML_NONE },
433     { MATROSKA_ID_EDITIONFLAGORDERED, EBML_NONE },
434     { 0 }
435 };
436
437 static EbmlSyntax matroska_chapters[] = {
438     { MATROSKA_ID_EDITIONENTRY,       EBML_NEST, 0, 0, {.n=matroska_chapter} },
439     { 0 }
440 };
441
442 static EbmlSyntax matroska_index_pos[] = {
443     { MATROSKA_ID_CUETRACK,           EBML_UINT, 0, offsetof(MatroskaIndexPos,track) },
444     { MATROSKA_ID_CUECLUSTERPOSITION, EBML_UINT, 0, offsetof(MatroskaIndexPos,pos)   },
445     { MATROSKA_ID_CUEBLOCKNUMBER,     EBML_NONE },
446     { 0 }
447 };
448
449 static EbmlSyntax matroska_index_entry[] = {
450     { MATROSKA_ID_CUETIME,            EBML_UINT, 0, offsetof(MatroskaIndex,time) },
451     { MATROSKA_ID_CUETRACKPOSITION,   EBML_NEST, sizeof(MatroskaIndexPos), offsetof(MatroskaIndex,pos), {.n=matroska_index_pos} },
452     { 0 }
453 };
454
455 static EbmlSyntax matroska_index[] = {
456     { MATROSKA_ID_POINTENTRY,         EBML_NEST, sizeof(MatroskaIndex), offsetof(MatroskaDemuxContext,index), {.n=matroska_index_entry} },
457     { 0 }
458 };
459
460 static EbmlSyntax matroska_simpletag[] = {
461     { MATROSKA_ID_TAGNAME,            EBML_UTF8, 0, offsetof(MatroskaTag,name) },
462     { MATROSKA_ID_TAGSTRING,          EBML_UTF8, 0, offsetof(MatroskaTag,string) },
463     { MATROSKA_ID_TAGLANG,            EBML_STR,  0, offsetof(MatroskaTag,lang), {.s="und"} },
464     { MATROSKA_ID_TAGDEFAULT,         EBML_UINT, 0, offsetof(MatroskaTag,def) },
465     { MATROSKA_ID_TAGDEFAULT_BUG,     EBML_UINT, 0, offsetof(MatroskaTag,def) },
466     { MATROSKA_ID_SIMPLETAG,          EBML_NEST, sizeof(MatroskaTag), offsetof(MatroskaTag,sub), {.n=matroska_simpletag} },
467     { 0 }
468 };
469
470 static EbmlSyntax matroska_tagtargets[] = {
471     { MATROSKA_ID_TAGTARGETS_TYPE,      EBML_STR,  0, offsetof(MatroskaTagTarget,type) },
472     { MATROSKA_ID_TAGTARGETS_TYPEVALUE, EBML_UINT, 0, offsetof(MatroskaTagTarget,typevalue), {.u=50} },
473     { MATROSKA_ID_TAGTARGETS_TRACKUID,  EBML_UINT, 0, offsetof(MatroskaTagTarget,trackuid) },
474     { MATROSKA_ID_TAGTARGETS_CHAPTERUID,EBML_UINT, 0, offsetof(MatroskaTagTarget,chapteruid) },
475     { MATROSKA_ID_TAGTARGETS_ATTACHUID, EBML_UINT, 0, offsetof(MatroskaTagTarget,attachuid) },
476     { 0 }
477 };
478
479 static EbmlSyntax matroska_tag[] = {
480     { MATROSKA_ID_SIMPLETAG,          EBML_NEST, sizeof(MatroskaTag), offsetof(MatroskaTags,tag), {.n=matroska_simpletag} },
481     { MATROSKA_ID_TAGTARGETS,         EBML_NEST, 0, offsetof(MatroskaTags,target), {.n=matroska_tagtargets} },
482     { 0 }
483 };
484
485 static EbmlSyntax matroska_tags[] = {
486     { MATROSKA_ID_TAG,                EBML_NEST, sizeof(MatroskaTags), offsetof(MatroskaDemuxContext,tags), {.n=matroska_tag} },
487     { 0 }
488 };
489
490 static EbmlSyntax matroska_seekhead_entry[] = {
491     { MATROSKA_ID_SEEKID,             EBML_UINT, 0, offsetof(MatroskaSeekhead,id) },
492     { MATROSKA_ID_SEEKPOSITION,       EBML_UINT, 0, offsetof(MatroskaSeekhead,pos), {.u=-1} },
493     { 0 }
494 };
495
496 static EbmlSyntax matroska_seekhead[] = {
497     { MATROSKA_ID_SEEKENTRY,          EBML_NEST, sizeof(MatroskaSeekhead), offsetof(MatroskaDemuxContext,seekhead), {.n=matroska_seekhead_entry} },
498     { 0 }
499 };
500
501 static EbmlSyntax matroska_segment[] = {
502     { MATROSKA_ID_INFO,           EBML_NEST, 0, 0, {.n=matroska_info       } },
503     { MATROSKA_ID_TRACKS,         EBML_NEST, 0, 0, {.n=matroska_tracks     } },
504     { MATROSKA_ID_ATTACHMENTS,    EBML_NEST, 0, 0, {.n=matroska_attachments} },
505     { MATROSKA_ID_CHAPTERS,       EBML_NEST, 0, 0, {.n=matroska_chapters   } },
506     { MATROSKA_ID_CUES,           EBML_NEST, 0, 0, {.n=matroska_index      } },
507     { MATROSKA_ID_TAGS,           EBML_NEST, 0, 0, {.n=matroska_tags       } },
508     { MATROSKA_ID_SEEKHEAD,       EBML_NEST, 0, 0, {.n=matroska_seekhead   } },
509     { MATROSKA_ID_CLUSTER,        EBML_STOP },
510     { 0 }
511 };
512
513 static EbmlSyntax matroska_segments[] = {
514     { MATROSKA_ID_SEGMENT,        EBML_NEST, 0, 0, {.n=matroska_segment    } },
515     { 0 }
516 };
517
518 static EbmlSyntax matroska_blockgroup[] = {
519     { MATROSKA_ID_BLOCK,          EBML_BIN,  0, offsetof(MatroskaBlock,bin) },
520     { MATROSKA_ID_SIMPLEBLOCK,    EBML_BIN,  0, offsetof(MatroskaBlock,bin) },
521     { MATROSKA_ID_BLOCKDURATION,  EBML_UINT, 0, offsetof(MatroskaBlock,duration) },
522     { MATROSKA_ID_BLOCKREFERENCE, EBML_UINT, 0, offsetof(MatroskaBlock,reference) },
523     { 1,                          EBML_UINT, 0, offsetof(MatroskaBlock,non_simple), {.u=1} },
524     { 0 }
525 };
526
527 static EbmlSyntax matroska_cluster[] = {
528     { MATROSKA_ID_CLUSTERTIMECODE,EBML_UINT,0, offsetof(MatroskaCluster,timecode) },
529     { MATROSKA_ID_BLOCKGROUP,     EBML_NEST, sizeof(MatroskaBlock), offsetof(MatroskaCluster,blocks), {.n=matroska_blockgroup} },
530     { MATROSKA_ID_SIMPLEBLOCK,    EBML_PASS, sizeof(MatroskaBlock), offsetof(MatroskaCluster,blocks), {.n=matroska_blockgroup} },
531     { MATROSKA_ID_CLUSTERPOSITION,EBML_NONE },
532     { MATROSKA_ID_CLUSTERPREVSIZE,EBML_NONE },
533     { 0 }
534 };
535
536 static EbmlSyntax matroska_clusters[] = {
537     { MATROSKA_ID_CLUSTER,        EBML_NEST, 0, 0, {.n=matroska_cluster} },
538     { MATROSKA_ID_INFO,           EBML_NONE },
539     { MATROSKA_ID_CUES,           EBML_NONE },
540     { MATROSKA_ID_TAGS,           EBML_NONE },
541     { MATROSKA_ID_SEEKHEAD,       EBML_NONE },
542     { 0 }
543 };
544
545 static const char *matroska_doctypes[] = { "matroska", "webm" };
546
547 /*
548  * Return: Whether we reached the end of a level in the hierarchy or not.
549  */
550 static int ebml_level_end(MatroskaDemuxContext *matroska)
551 {
552     AVIOContext *pb = matroska->ctx->pb;
553     int64_t pos = avio_tell(pb);
554
555     if (matroska->num_levels > 0) {
556         MatroskaLevel *level = &matroska->levels[matroska->num_levels - 1];
557         if (pos - level->start >= level->length || matroska->current_id) {
558             matroska->num_levels--;
559             return 1;
560         }
561     }
562     return 0;
563 }
564
565 /*
566  * Read: an "EBML number", which is defined as a variable-length
567  * array of bytes. The first byte indicates the length by giving a
568  * number of 0-bits followed by a one. The position of the first
569  * "one" bit inside the first byte indicates the length of this
570  * number.
571  * Returns: number of bytes read, < 0 on error
572  */
573 static int ebml_read_num(MatroskaDemuxContext *matroska, AVIOContext *pb,
574                          int max_size, uint64_t *number)
575 {
576     int read = 1, n = 1;
577     uint64_t total = 0;
578
579     /* The first byte tells us the length in bytes - avio_r8() can normally
580      * return 0, but since that's not a valid first ebmlID byte, we can
581      * use it safely here to catch EOS. */
582     if (!(total = avio_r8(pb))) {
583         /* we might encounter EOS here */
584         if (!url_feof(pb)) {
585             int64_t pos = avio_tell(pb);
586             av_log(matroska->ctx, AV_LOG_ERROR,
587                    "Read error at pos. %"PRIu64" (0x%"PRIx64")\n",
588                    pos, pos);
589         }
590         return AVERROR(EIO); /* EOS or actual I/O error */
591     }
592
593     /* get the length of the EBML number */
594     read = 8 - ff_log2_tab[total];
595     if (read > max_size) {
596         int64_t pos = avio_tell(pb) - 1;
597         av_log(matroska->ctx, AV_LOG_ERROR,
598                "Invalid EBML number size tag 0x%02x at pos %"PRIu64" (0x%"PRIx64")\n",
599                (uint8_t) total, pos, pos);
600         return AVERROR_INVALIDDATA;
601     }
602
603     /* read out length */
604     total ^= 1 << ff_log2_tab[total];
605     while (n++ < read)
606         total = (total << 8) | avio_r8(pb);
607
608     *number = total;
609
610     return read;
611 }
612
613 /**
614  * Read a EBML length value.
615  * This needs special handling for the "unknown length" case which has multiple
616  * encodings.
617  */
618 static int ebml_read_length(MatroskaDemuxContext *matroska, AVIOContext *pb,
619                             uint64_t *number)
620 {
621     int res = ebml_read_num(matroska, pb, 8, number);
622     if (res > 0 && *number + 1 == 1ULL << (7 * res))
623         *number = 0xffffffffffffffULL;
624     return res;
625 }
626
627 /*
628  * Read the next element as an unsigned int.
629  * 0 is success, < 0 is failure.
630  */
631 static int ebml_read_uint(AVIOContext *pb, int size, uint64_t *num)
632 {
633     int n = 0;
634
635     if (size > 8)
636         return AVERROR_INVALIDDATA;
637
638     /* big-endian ordering; build up number */
639     *num = 0;
640     while (n++ < size)
641         *num = (*num << 8) | avio_r8(pb);
642
643     return 0;
644 }
645
646 /*
647  * Read the next element as a float.
648  * 0 is success, < 0 is failure.
649  */
650 static int ebml_read_float(AVIOContext *pb, int size, double *num)
651 {
652     if (size == 0) {
653         *num = 0;
654     } else if (size == 4) {
655         *num= av_int2flt(avio_rb32(pb));
656     } else if(size==8){
657         *num= av_int2dbl(avio_rb64(pb));
658     } else
659         return AVERROR_INVALIDDATA;
660
661     return 0;
662 }
663
664 /*
665  * Read the next element as an ASCII string.
666  * 0 is success, < 0 is failure.
667  */
668 static int ebml_read_ascii(AVIOContext *pb, int size, char **str)
669 {
670     av_free(*str);
671     /* EBML strings are usually not 0-terminated, so we allocate one
672      * byte more, read the string and NULL-terminate it ourselves. */
673     if (!(*str = av_malloc(size + 1)))
674         return AVERROR(ENOMEM);
675     if (avio_read(pb, (uint8_t *) *str, size) != size) {
676         av_freep(str);
677         return AVERROR(EIO);
678     }
679     (*str)[size] = '\0';
680
681     return 0;
682 }
683
684 /*
685  * Read the next element as binary data.
686  * 0 is success, < 0 is failure.
687  */
688 static int ebml_read_binary(AVIOContext *pb, int length, EbmlBin *bin)
689 {
690     av_free(bin->data);
691     if (!(bin->data = av_malloc(length)))
692         return AVERROR(ENOMEM);
693
694     bin->size = length;
695     bin->pos  = avio_tell(pb);
696     if (avio_read(pb, bin->data, length) != length) {
697         av_freep(&bin->data);
698         return AVERROR(EIO);
699     }
700
701     return 0;
702 }
703
704 /*
705  * Read the next element, but only the header. The contents
706  * are supposed to be sub-elements which can be read separately.
707  * 0 is success, < 0 is failure.
708  */
709 static int ebml_read_master(MatroskaDemuxContext *matroska, uint64_t length)
710 {
711     AVIOContext *pb = matroska->ctx->pb;
712     MatroskaLevel *level;
713
714     if (matroska->num_levels >= EBML_MAX_DEPTH) {
715         av_log(matroska->ctx, AV_LOG_ERROR,
716                "File moves beyond max. allowed depth (%d)\n", EBML_MAX_DEPTH);
717         return AVERROR(ENOSYS);
718     }
719
720     level = &matroska->levels[matroska->num_levels++];
721     level->start = avio_tell(pb);
722     level->length = length;
723
724     return 0;
725 }
726
727 /*
728  * Read signed/unsigned "EBML" numbers.
729  * Return: number of bytes processed, < 0 on error
730  */
731 static int matroska_ebmlnum_uint(MatroskaDemuxContext *matroska,
732                                  uint8_t *data, uint32_t size, uint64_t *num)
733 {
734     AVIOContext pb;
735     ffio_init_context(&pb, data, size, 0, NULL, NULL, NULL, NULL);
736     return ebml_read_num(matroska, &pb, FFMIN(size, 8), num);
737 }
738
739 /*
740  * Same as above, but signed.
741  */
742 static int matroska_ebmlnum_sint(MatroskaDemuxContext *matroska,
743                                  uint8_t *data, uint32_t size, int64_t *num)
744 {
745     uint64_t unum;
746     int res;
747
748     /* read as unsigned number first */
749     if ((res = matroska_ebmlnum_uint(matroska, data, size, &unum)) < 0)
750         return res;
751
752     /* make signed (weird way) */
753     *num = unum - ((1LL << (7*res - 1)) - 1);
754
755     return res;
756 }
757
758 static int ebml_parse_elem(MatroskaDemuxContext *matroska,
759                            EbmlSyntax *syntax, void *data);
760
761 static int ebml_parse_id(MatroskaDemuxContext *matroska, EbmlSyntax *syntax,
762                          uint32_t id, void *data)
763 {
764     int i;
765     for (i=0; syntax[i].id; i++)
766         if (id == syntax[i].id)
767             break;
768     if (!syntax[i].id && id == MATROSKA_ID_CLUSTER &&
769         matroska->num_levels > 0 &&
770         matroska->levels[matroska->num_levels-1].length == 0xffffffffffffff)
771         return 0;  // we reached the end of an unknown size cluster
772     if (!syntax[i].id && id != EBML_ID_VOID && id != EBML_ID_CRC32)
773         av_log(matroska->ctx, AV_LOG_INFO, "Unknown entry 0x%X\n", id);
774     return ebml_parse_elem(matroska, &syntax[i], data);
775 }
776
777 static int ebml_parse(MatroskaDemuxContext *matroska, EbmlSyntax *syntax,
778                       void *data)
779 {
780     if (!matroska->current_id) {
781         uint64_t id;
782         int res = ebml_read_num(matroska, matroska->ctx->pb, 4, &id);
783         if (res < 0)
784             return res;
785         matroska->current_id = id | 1 << 7*res;
786     }
787     return ebml_parse_id(matroska, syntax, matroska->current_id, data);
788 }
789
790 static int ebml_parse_nest(MatroskaDemuxContext *matroska, EbmlSyntax *syntax,
791                            void *data)
792 {
793     int i, res = 0;
794
795     for (i=0; syntax[i].id; i++)
796         switch (syntax[i].type) {
797         case EBML_UINT:
798             *(uint64_t *)((char *)data+syntax[i].data_offset) = syntax[i].def.u;
799             break;
800         case EBML_FLOAT:
801             *(double   *)((char *)data+syntax[i].data_offset) = syntax[i].def.f;
802             break;
803         case EBML_STR:
804         case EBML_UTF8:
805             *(char    **)((char *)data+syntax[i].data_offset) = av_strdup(syntax[i].def.s);
806             break;
807         }
808
809     while (!res && !ebml_level_end(matroska))
810         res = ebml_parse(matroska, syntax, data);
811
812     return res;
813 }
814
815 static int ebml_parse_elem(MatroskaDemuxContext *matroska,
816                            EbmlSyntax *syntax, void *data)
817 {
818     static const uint64_t max_lengths[EBML_TYPE_COUNT] = {
819         [EBML_UINT]  = 8,
820         [EBML_FLOAT] = 8,
821         // max. 16 MB for strings
822         [EBML_STR]   = 0x1000000,
823         [EBML_UTF8]  = 0x1000000,
824         // max. 256 MB for binary data
825         [EBML_BIN]   = 0x10000000,
826         // no limits for anything else
827     };
828     AVIOContext *pb = matroska->ctx->pb;
829     uint32_t id = syntax->id;
830     uint64_t length;
831     int res;
832     void *newelem;
833
834     data = (char *)data + syntax->data_offset;
835     if (syntax->list_elem_size) {
836         EbmlList *list = data;
837         newelem = av_realloc(list->elem, (list->nb_elem+1)*syntax->list_elem_size);
838         if (!newelem)
839             return AVERROR(ENOMEM);
840         list->elem = newelem;
841         data = (char*)list->elem + list->nb_elem*syntax->list_elem_size;
842         memset(data, 0, syntax->list_elem_size);
843         list->nb_elem++;
844     }
845
846     if (syntax->type != EBML_PASS && syntax->type != EBML_STOP) {
847         matroska->current_id = 0;
848         if ((res = ebml_read_length(matroska, pb, &length)) < 0)
849             return res;
850         if (max_lengths[syntax->type] && length > max_lengths[syntax->type]) {
851             av_log(matroska->ctx, AV_LOG_ERROR,
852                    "Invalid length 0x%"PRIx64" > 0x%"PRIx64" for syntax element %i\n",
853                    length, max_lengths[syntax->type], syntax->type);
854             return AVERROR_INVALIDDATA;
855         }
856     }
857
858     switch (syntax->type) {
859     case EBML_UINT:  res = ebml_read_uint  (pb, length, data);  break;
860     case EBML_FLOAT: res = ebml_read_float (pb, length, data);  break;
861     case EBML_STR:
862     case EBML_UTF8:  res = ebml_read_ascii (pb, length, data);  break;
863     case EBML_BIN:   res = ebml_read_binary(pb, length, data);  break;
864     case EBML_NEST:  if ((res=ebml_read_master(matroska, length)) < 0)
865                          return res;
866                      if (id == MATROSKA_ID_SEGMENT)
867                          matroska->segment_start = avio_tell(matroska->ctx->pb);
868                      return ebml_parse_nest(matroska, syntax->def.n, data);
869     case EBML_PASS:  return ebml_parse_id(matroska, syntax->def.n, id, data);
870     case EBML_STOP:  return 1;
871     default:         return avio_skip(pb,length)<0 ? AVERROR(EIO) : 0;
872     }
873     if (res == AVERROR_INVALIDDATA)
874         av_log(matroska->ctx, AV_LOG_ERROR, "Invalid element\n");
875     else if (res == AVERROR(EIO))
876         av_log(matroska->ctx, AV_LOG_ERROR, "Read error\n");
877     return res;
878 }
879
880 static void ebml_free(EbmlSyntax *syntax, void *data)
881 {
882     int i, j;
883     for (i=0; syntax[i].id; i++) {
884         void *data_off = (char *)data + syntax[i].data_offset;
885         switch (syntax[i].type) {
886         case EBML_STR:
887         case EBML_UTF8:  av_freep(data_off);                      break;
888         case EBML_BIN:   av_freep(&((EbmlBin *)data_off)->data);  break;
889         case EBML_NEST:
890             if (syntax[i].list_elem_size) {
891                 EbmlList *list = data_off;
892                 char *ptr = list->elem;
893                 for (j=0; j<list->nb_elem; j++, ptr+=syntax[i].list_elem_size)
894                     ebml_free(syntax[i].def.n, ptr);
895                 av_free(list->elem);
896             } else
897                 ebml_free(syntax[i].def.n, data_off);
898         default:  break;
899         }
900     }
901 }
902
903
904 /*
905  * Autodetecting...
906  */
907 static int matroska_probe(AVProbeData *p)
908 {
909     uint64_t total = 0;
910     int len_mask = 0x80, size = 1, n = 1, i;
911
912     /* EBML header? */
913     if (AV_RB32(p->buf) != EBML_ID_HEADER)
914         return 0;
915
916     /* length of header */
917     total = p->buf[4];
918     while (size <= 8 && !(total & len_mask)) {
919         size++;
920         len_mask >>= 1;
921     }
922     if (size > 8)
923       return 0;
924     total &= (len_mask - 1);
925     while (n < size)
926         total = (total << 8) | p->buf[4 + n++];
927
928     /* Does the probe data contain the whole header? */
929     if (p->buf_size < 4 + size + total)
930       return 0;
931
932     /* The header should contain a known document type. For now,
933      * we don't parse the whole header but simply check for the
934      * availability of that array of characters inside the header.
935      * Not fully fool-proof, but good enough. */
936     for (i = 0; i < FF_ARRAY_ELEMS(matroska_doctypes); i++) {
937         int probelen = strlen(matroska_doctypes[i]);
938         if (total < probelen)
939             continue;
940         for (n = 4+size; n <= 4+size+total-probelen; n++)
941             if (!memcmp(p->buf+n, matroska_doctypes[i], probelen))
942                 return AVPROBE_SCORE_MAX;
943     }
944
945     // probably valid EBML header but no recognized doctype
946     return AVPROBE_SCORE_MAX/2;
947 }
948
949 static MatroskaTrack *matroska_find_track_by_num(MatroskaDemuxContext *matroska,
950                                                  int num)
951 {
952     MatroskaTrack *tracks = matroska->tracks.elem;
953     int i;
954
955     for (i=0; i < matroska->tracks.nb_elem; i++)
956         if (tracks[i].num == num)
957             return &tracks[i];
958
959     av_log(matroska->ctx, AV_LOG_ERROR, "Invalid track number %d\n", num);
960     return NULL;
961 }
962
963 static int matroska_decode_buffer(uint8_t** buf, int* buf_size,
964                                   MatroskaTrack *track)
965 {
966     MatroskaTrackEncoding *encodings = track->encodings.elem;
967     uint8_t* data = *buf;
968     int isize = *buf_size;
969     uint8_t* pkt_data = NULL;
970     int pkt_size = isize;
971     int result = 0;
972     int olen;
973
974     if (pkt_size >= 10000000)
975         return -1;
976
977     switch (encodings[0].compression.algo) {
978     case MATROSKA_TRACK_ENCODING_COMP_HEADERSTRIP:
979         return encodings[0].compression.settings.size;
980     case MATROSKA_TRACK_ENCODING_COMP_LZO:
981         do {
982             olen = pkt_size *= 3;
983             pkt_data = av_realloc(pkt_data, pkt_size+AV_LZO_OUTPUT_PADDING);
984             result = av_lzo1x_decode(pkt_data, &olen, data, &isize);
985         } while (result==AV_LZO_OUTPUT_FULL && pkt_size<10000000);
986         if (result)
987             goto failed;
988         pkt_size -= olen;
989         break;
990 #if CONFIG_ZLIB
991     case MATROSKA_TRACK_ENCODING_COMP_ZLIB: {
992         z_stream zstream = {0};
993         if (inflateInit(&zstream) != Z_OK)
994             return -1;
995         zstream.next_in = data;
996         zstream.avail_in = isize;
997         do {
998             pkt_size *= 3;
999             pkt_data = av_realloc(pkt_data, pkt_size);
1000             zstream.avail_out = pkt_size - zstream.total_out;
1001             zstream.next_out = pkt_data + zstream.total_out;
1002             if (pkt_data) {
1003                 result = inflate(&zstream, Z_NO_FLUSH);
1004             } else
1005                 result = Z_MEM_ERROR;
1006         } while (result==Z_OK && pkt_size<10000000);
1007         pkt_size = zstream.total_out;
1008         inflateEnd(&zstream);
1009         if (result != Z_STREAM_END)
1010             goto failed;
1011         break;
1012     }
1013 #endif
1014 #if CONFIG_BZLIB
1015     case MATROSKA_TRACK_ENCODING_COMP_BZLIB: {
1016         bz_stream bzstream = {0};
1017         if (BZ2_bzDecompressInit(&bzstream, 0, 0) != BZ_OK)
1018             return -1;
1019         bzstream.next_in = data;
1020         bzstream.avail_in = isize;
1021         do {
1022             pkt_size *= 3;
1023             pkt_data = av_realloc(pkt_data, pkt_size);
1024             bzstream.avail_out = pkt_size - bzstream.total_out_lo32;
1025             bzstream.next_out = pkt_data + bzstream.total_out_lo32;
1026             if (pkt_data) {
1027                 result = BZ2_bzDecompress(&bzstream);
1028             } else
1029                 result = BZ_MEM_ERROR;
1030         } while (result==BZ_OK && pkt_size<10000000);
1031         pkt_size = bzstream.total_out_lo32;
1032         BZ2_bzDecompressEnd(&bzstream);
1033         if (result != BZ_STREAM_END)
1034             goto failed;
1035         break;
1036     }
1037 #endif
1038     default:
1039         return -1;
1040     }
1041
1042     *buf = pkt_data;
1043     *buf_size = pkt_size;
1044     return 0;
1045  failed:
1046     av_free(pkt_data);
1047     return -1;
1048 }
1049
1050 static void matroska_fix_ass_packet(MatroskaDemuxContext *matroska,
1051                                     AVPacket *pkt, uint64_t display_duration)
1052 {
1053     char *line, *layer, *ptr = pkt->data, *end = ptr+pkt->size;
1054     for (; *ptr!=',' && ptr<end-1; ptr++);
1055     if (*ptr == ',')
1056         ptr++;
1057     layer = ptr;
1058     for (; *ptr!=',' && ptr<end-1; ptr++);
1059     if (*ptr == ',') {
1060         int64_t end_pts = pkt->pts + display_duration;
1061         int sc = matroska->time_scale * pkt->pts / 10000000;
1062         int ec = matroska->time_scale * end_pts  / 10000000;
1063         int sh, sm, ss, eh, em, es, len;
1064         sh = sc/360000;  sc -= 360000*sh;
1065         sm = sc/  6000;  sc -=   6000*sm;
1066         ss = sc/   100;  sc -=    100*ss;
1067         eh = ec/360000;  ec -= 360000*eh;
1068         em = ec/  6000;  ec -=   6000*em;
1069         es = ec/   100;  ec -=    100*es;
1070         *ptr++ = '\0';
1071         len = 50 + end-ptr + FF_INPUT_BUFFER_PADDING_SIZE;
1072         if (!(line = av_malloc(len)))
1073             return;
1074         snprintf(line,len,"Dialogue: %s,%d:%02d:%02d.%02d,%d:%02d:%02d.%02d,%s\r\n",
1075                  layer, sh, sm, ss, sc, eh, em, es, ec, ptr);
1076         av_free(pkt->data);
1077         pkt->data = line;
1078         pkt->size = strlen(line);
1079     }
1080 }
1081
1082 static int matroska_merge_packets(AVPacket *out, AVPacket *in)
1083 {
1084     void *newdata = av_realloc(out->data, out->size+in->size);
1085     if (!newdata)
1086         return AVERROR(ENOMEM);
1087     out->data = newdata;
1088     memcpy(out->data+out->size, in->data, in->size);
1089     out->size += in->size;
1090     av_destruct_packet(in);
1091     av_free(in);
1092     return 0;
1093 }
1094
1095 static void matroska_convert_tag(AVFormatContext *s, EbmlList *list,
1096                                  AVDictionary **metadata, char *prefix)
1097 {
1098     MatroskaTag *tags = list->elem;
1099     char key[1024];
1100     int i;
1101
1102     for (i=0; i < list->nb_elem; i++) {
1103         const char *lang = strcmp(tags[i].lang, "und") ? tags[i].lang : NULL;
1104
1105         if (!tags[i].name) {
1106             av_log(s, AV_LOG_WARNING, "Skipping invalid tag with no TagName.\n");
1107             continue;
1108         }
1109         if (prefix)  snprintf(key, sizeof(key), "%s/%s", prefix, tags[i].name);
1110         else         av_strlcpy(key, tags[i].name, sizeof(key));
1111         if (tags[i].def || !lang) {
1112         av_dict_set(metadata, key, tags[i].string, 0);
1113         if (tags[i].sub.nb_elem)
1114             matroska_convert_tag(s, &tags[i].sub, metadata, key);
1115         }
1116         if (lang) {
1117             av_strlcat(key, "-", sizeof(key));
1118             av_strlcat(key, lang, sizeof(key));
1119             av_dict_set(metadata, key, tags[i].string, 0);
1120             if (tags[i].sub.nb_elem)
1121                 matroska_convert_tag(s, &tags[i].sub, metadata, key);
1122         }
1123     }
1124     ff_metadata_conv(metadata, NULL, ff_mkv_metadata_conv);
1125 }
1126
1127 static void matroska_convert_tags(AVFormatContext *s)
1128 {
1129     MatroskaDemuxContext *matroska = s->priv_data;
1130     MatroskaTags *tags = matroska->tags.elem;
1131     int i, j;
1132
1133     for (i=0; i < matroska->tags.nb_elem; i++) {
1134         if (tags[i].target.attachuid) {
1135             MatroskaAttachement *attachment = matroska->attachments.elem;
1136             for (j=0; j<matroska->attachments.nb_elem; j++)
1137                 if (attachment[j].uid == tags[i].target.attachuid
1138                     && attachment[j].stream)
1139                     matroska_convert_tag(s, &tags[i].tag,
1140                                          &attachment[j].stream->metadata, NULL);
1141         } else if (tags[i].target.chapteruid) {
1142             MatroskaChapter *chapter = matroska->chapters.elem;
1143             for (j=0; j<matroska->chapters.nb_elem; j++)
1144                 if (chapter[j].uid == tags[i].target.chapteruid
1145                     && chapter[j].chapter)
1146                     matroska_convert_tag(s, &tags[i].tag,
1147                                          &chapter[j].chapter->metadata, NULL);
1148         } else if (tags[i].target.trackuid) {
1149             MatroskaTrack *track = matroska->tracks.elem;
1150             for (j=0; j<matroska->tracks.nb_elem; j++)
1151                 if (track[j].uid == tags[i].target.trackuid && track[j].stream)
1152                     matroska_convert_tag(s, &tags[i].tag,
1153                                          &track[j].stream->metadata, NULL);
1154         } else {
1155             matroska_convert_tag(s, &tags[i].tag, &s->metadata,
1156                                  tags[i].target.type);
1157         }
1158     }
1159 }
1160
1161 static int matroska_parse_seekhead_entry(MatroskaDemuxContext *matroska, int idx)
1162 {
1163     EbmlList *seekhead_list = &matroska->seekhead;
1164     MatroskaSeekhead *seekhead = seekhead_list->elem;
1165     uint32_t level_up = matroska->level_up;
1166     int64_t before_pos = avio_tell(matroska->ctx->pb);
1167     uint32_t saved_id = matroska->current_id;
1168     MatroskaLevel level;
1169     int64_t offset;
1170     int ret = 0;
1171
1172     if (idx >= seekhead_list->nb_elem
1173             || seekhead[idx].id == MATROSKA_ID_SEEKHEAD
1174             || seekhead[idx].id == MATROSKA_ID_CLUSTER)
1175         return 0;
1176
1177     /* seek */
1178     offset = seekhead[idx].pos + matroska->segment_start;
1179     if (avio_seek(matroska->ctx->pb, offset, SEEK_SET) == offset) {
1180         /* We don't want to lose our seekhead level, so we add
1181          * a dummy. This is a crude hack. */
1182         if (matroska->num_levels == EBML_MAX_DEPTH) {
1183             av_log(matroska->ctx, AV_LOG_INFO,
1184                    "Max EBML element depth (%d) reached, "
1185                    "cannot parse further.\n", EBML_MAX_DEPTH);
1186             ret = AVERROR_INVALIDDATA;
1187         } else {
1188             level.start = 0;
1189             level.length = (uint64_t)-1;
1190             matroska->levels[matroska->num_levels] = level;
1191             matroska->num_levels++;
1192             matroska->current_id = 0;
1193
1194             ebml_parse(matroska, matroska_segment, matroska);
1195
1196             /* remove dummy level */
1197             while (matroska->num_levels) {
1198                 uint64_t length = matroska->levels[--matroska->num_levels].length;
1199                 if (length == (uint64_t)-1)
1200                     break;
1201             }
1202         }
1203     }
1204     /* seek back */
1205     avio_seek(matroska->ctx->pb, before_pos, SEEK_SET);
1206     matroska->level_up = level_up;
1207     matroska->current_id = saved_id;
1208
1209     return ret;
1210 }
1211
1212 static void matroska_execute_seekhead(MatroskaDemuxContext *matroska)
1213 {
1214     EbmlList *seekhead_list = &matroska->seekhead;
1215     MatroskaSeekhead *seekhead = seekhead_list->elem;
1216     int64_t before_pos = avio_tell(matroska->ctx->pb);
1217     int i;
1218
1219     // we should not do any seeking in the streaming case
1220     if (!matroska->ctx->pb->seekable ||
1221         (matroska->ctx->flags & AVFMT_FLAG_IGNIDX))
1222         return;
1223
1224     for (i = 0; i < seekhead_list->nb_elem; i++) {
1225         if (seekhead[i].pos <= before_pos)
1226             continue;
1227
1228         // defer cues parsing until we actually need cue data.
1229         if (seekhead[i].id == MATROSKA_ID_CUES) {
1230             matroska->cues_parsing_deferred = 1;
1231             continue;
1232         }
1233
1234         if (matroska_parse_seekhead_entry(matroska, i) < 0)
1235             break;
1236     }
1237 }
1238
1239 static void matroska_parse_cues(MatroskaDemuxContext *matroska) {
1240     EbmlList *seekhead_list = &matroska->seekhead;
1241     MatroskaSeekhead *seekhead = seekhead_list->elem;
1242     EbmlList *index_list;
1243     MatroskaIndex *index;
1244     int index_scale = 1;
1245     int i, j;
1246
1247     for (i = 0; i < seekhead_list->nb_elem; i++)
1248         if (seekhead[i].id == MATROSKA_ID_CUES)
1249             break;
1250     assert(i <= seekhead_list->nb_elem);
1251
1252     matroska_parse_seekhead_entry(matroska, i);
1253
1254     index_list = &matroska->index;
1255     index = index_list->elem;
1256     if (index_list->nb_elem
1257         && index[0].time > 1E14/matroska->time_scale) {
1258         av_log(matroska->ctx, AV_LOG_WARNING, "Working around broken index.\n");
1259         index_scale = matroska->time_scale;
1260     }
1261     for (i = 0; i < index_list->nb_elem; i++) {
1262         EbmlList *pos_list = &index[i].pos;
1263         MatroskaIndexPos *pos = pos_list->elem;
1264         for (j = 0; j < pos_list->nb_elem; j++) {
1265             MatroskaTrack *track = matroska_find_track_by_num(matroska, pos[j].track);
1266             if (track && track->stream)
1267                 av_add_index_entry(track->stream,
1268                                    pos[j].pos + matroska->segment_start,
1269                                    index[i].time/index_scale, 0, 0,
1270                                    AVINDEX_KEYFRAME);
1271         }
1272     }
1273 }
1274
1275 static int matroska_aac_profile(char *codec_id)
1276 {
1277     static const char * const aac_profiles[] = { "MAIN", "LC", "SSR" };
1278     int profile;
1279
1280     for (profile=0; profile<FF_ARRAY_ELEMS(aac_profiles); profile++)
1281         if (strstr(codec_id, aac_profiles[profile]))
1282             break;
1283     return profile + 1;
1284 }
1285
1286 static int matroska_aac_sri(int samplerate)
1287 {
1288     int sri;
1289
1290     for (sri=0; sri<FF_ARRAY_ELEMS(ff_mpeg4audio_sample_rates); sri++)
1291         if (ff_mpeg4audio_sample_rates[sri] == samplerate)
1292             break;
1293     return sri;
1294 }
1295
1296 static int matroska_read_header(AVFormatContext *s, AVFormatParameters *ap)
1297 {
1298     MatroskaDemuxContext *matroska = s->priv_data;
1299     EbmlList *attachements_list = &matroska->attachments;
1300     MatroskaAttachement *attachements;
1301     EbmlList *chapters_list = &matroska->chapters;
1302     MatroskaChapter *chapters;
1303     MatroskaTrack *tracks;
1304     uint64_t max_start = 0;
1305     Ebml ebml = { 0 };
1306     AVStream *st;
1307     int i, j, k, res;
1308
1309     matroska->ctx = s;
1310
1311     /* First read the EBML header. */
1312     if (ebml_parse(matroska, ebml_syntax, &ebml)
1313         || ebml.version > EBML_VERSION       || ebml.max_size > sizeof(uint64_t)
1314         || ebml.id_length > sizeof(uint32_t) || ebml.doctype_version > 3) {
1315         av_log(matroska->ctx, AV_LOG_ERROR,
1316                "EBML header using unsupported features\n"
1317                "(EBML version %"PRIu64", doctype %s, doc version %"PRIu64")\n",
1318                ebml.version, ebml.doctype, ebml.doctype_version);
1319         ebml_free(ebml_syntax, &ebml);
1320         return AVERROR_PATCHWELCOME;
1321     } else if (ebml.doctype_version == 3) {
1322         av_log(matroska->ctx, AV_LOG_WARNING,
1323                "EBML header using unsupported features\n"
1324                "(EBML version %"PRIu64", doctype %s, doc version %"PRIu64")\n",
1325                ebml.version, ebml.doctype, ebml.doctype_version);
1326     }
1327     for (i = 0; i < FF_ARRAY_ELEMS(matroska_doctypes); i++)
1328         if (!strcmp(ebml.doctype, matroska_doctypes[i]))
1329             break;
1330     if (i >= FF_ARRAY_ELEMS(matroska_doctypes)) {
1331         av_log(s, AV_LOG_WARNING, "Unknown EBML doctype '%s'\n", ebml.doctype);
1332     }
1333     ebml_free(ebml_syntax, &ebml);
1334
1335     /* The next thing is a segment. */
1336     if ((res = ebml_parse(matroska, matroska_segments, matroska)) < 0)
1337         return res;
1338     matroska_execute_seekhead(matroska);
1339
1340     if (!matroska->time_scale)
1341         matroska->time_scale = 1000000;
1342     if (matroska->duration)
1343         matroska->ctx->duration = matroska->duration * matroska->time_scale
1344                                   * 1000 / AV_TIME_BASE;
1345     av_dict_set(&s->metadata, "title", matroska->title, 0);
1346
1347     tracks = matroska->tracks.elem;
1348     for (i=0; i < matroska->tracks.nb_elem; i++) {
1349         MatroskaTrack *track = &tracks[i];
1350         enum CodecID codec_id = CODEC_ID_NONE;
1351         EbmlList *encodings_list = &tracks->encodings;
1352         MatroskaTrackEncoding *encodings = encodings_list->elem;
1353         uint8_t *extradata = NULL;
1354         int extradata_size = 0;
1355         int extradata_offset = 0;
1356         uint32_t fourcc = 0;
1357         AVIOContext b;
1358
1359         /* Apply some sanity checks. */
1360         if (track->type != MATROSKA_TRACK_TYPE_VIDEO &&
1361             track->type != MATROSKA_TRACK_TYPE_AUDIO &&
1362             track->type != MATROSKA_TRACK_TYPE_SUBTITLE) {
1363             av_log(matroska->ctx, AV_LOG_INFO,
1364                    "Unknown or unsupported track type %"PRIu64"\n",
1365                    track->type);
1366             continue;
1367         }
1368         if (track->codec_id == NULL)
1369             continue;
1370
1371         if (track->type == MATROSKA_TRACK_TYPE_VIDEO) {
1372             if (!track->default_duration)
1373                 track->default_duration = 1000000000/track->video.frame_rate;
1374             if (!track->video.display_width)
1375                 track->video.display_width = track->video.pixel_width;
1376             if (!track->video.display_height)
1377                 track->video.display_height = track->video.pixel_height;
1378             if (track->video.color_space.size == 4)
1379                 fourcc = AV_RL32(track->video.color_space.data);
1380         } else if (track->type == MATROSKA_TRACK_TYPE_AUDIO) {
1381             if (!track->audio.out_samplerate)
1382                 track->audio.out_samplerate = track->audio.samplerate;
1383         }
1384         if (encodings_list->nb_elem > 1) {
1385             av_log(matroska->ctx, AV_LOG_ERROR,
1386                    "Multiple combined encodings no supported");
1387         } else if (encodings_list->nb_elem == 1) {
1388             if (encodings[0].type ||
1389                 (encodings[0].compression.algo != MATROSKA_TRACK_ENCODING_COMP_HEADERSTRIP &&
1390 #if CONFIG_ZLIB
1391                  encodings[0].compression.algo != MATROSKA_TRACK_ENCODING_COMP_ZLIB &&
1392 #endif
1393 #if CONFIG_BZLIB
1394                  encodings[0].compression.algo != MATROSKA_TRACK_ENCODING_COMP_BZLIB &&
1395 #endif
1396                  encodings[0].compression.algo != MATROSKA_TRACK_ENCODING_COMP_LZO)) {
1397                 encodings[0].scope = 0;
1398                 av_log(matroska->ctx, AV_LOG_ERROR,
1399                        "Unsupported encoding type");
1400             } else if (track->codec_priv.size && encodings[0].scope&2) {
1401                 uint8_t *codec_priv = track->codec_priv.data;
1402                 int offset = matroska_decode_buffer(&track->codec_priv.data,
1403                                                     &track->codec_priv.size,
1404                                                     track);
1405                 if (offset < 0) {
1406                     track->codec_priv.data = NULL;
1407                     track->codec_priv.size = 0;
1408                     av_log(matroska->ctx, AV_LOG_ERROR,
1409                            "Failed to decode codec private data\n");
1410                 } else if (offset > 0) {
1411                     track->codec_priv.data = av_malloc(track->codec_priv.size + offset);
1412                     memcpy(track->codec_priv.data,
1413                            encodings[0].compression.settings.data, offset);
1414                     memcpy(track->codec_priv.data+offset, codec_priv,
1415                            track->codec_priv.size);
1416                     track->codec_priv.size += offset;
1417                 }
1418                 if (codec_priv != track->codec_priv.data)
1419                     av_free(codec_priv);
1420             }
1421         }
1422
1423         for(j=0; ff_mkv_codec_tags[j].id != CODEC_ID_NONE; j++){
1424             if(!strncmp(ff_mkv_codec_tags[j].str, track->codec_id,
1425                         strlen(ff_mkv_codec_tags[j].str))){
1426                 codec_id= ff_mkv_codec_tags[j].id;
1427                 break;
1428             }
1429         }
1430
1431         st = track->stream = av_new_stream(s, 0);
1432         if (st == NULL)
1433             return AVERROR(ENOMEM);
1434
1435         if (!strcmp(track->codec_id, "V_MS/VFW/FOURCC")
1436             && track->codec_priv.size >= 40
1437             && track->codec_priv.data != NULL) {
1438             track->ms_compat = 1;
1439             fourcc = AV_RL32(track->codec_priv.data + 16);
1440             codec_id = ff_codec_get_id(ff_codec_bmp_tags, fourcc);
1441             extradata_offset = 40;
1442         } else if (!strcmp(track->codec_id, "A_MS/ACM")
1443                    && track->codec_priv.size >= 14
1444                    && track->codec_priv.data != NULL) {
1445             int ret;
1446             ffio_init_context(&b, track->codec_priv.data, track->codec_priv.size,
1447                           AVIO_FLAG_READ, NULL, NULL, NULL, NULL);
1448             ret = ff_get_wav_header(&b, st->codec, track->codec_priv.size);
1449             if (ret < 0)
1450                 return ret;
1451             codec_id = st->codec->codec_id;
1452             extradata_offset = FFMIN(track->codec_priv.size, 18);
1453         } else if (!strcmp(track->codec_id, "V_QUICKTIME")
1454                    && (track->codec_priv.size >= 86)
1455                    && (track->codec_priv.data != NULL)) {
1456             fourcc = AV_RL32(track->codec_priv.data);
1457             codec_id = ff_codec_get_id(codec_movvideo_tags, fourcc);
1458         } else if (codec_id == CODEC_ID_PCM_S16BE) {
1459             switch (track->audio.bitdepth) {
1460             case  8:  codec_id = CODEC_ID_PCM_U8;     break;
1461             case 24:  codec_id = CODEC_ID_PCM_S24BE;  break;
1462             case 32:  codec_id = CODEC_ID_PCM_S32BE;  break;
1463             }
1464         } else if (codec_id == CODEC_ID_PCM_S16LE) {
1465             switch (track->audio.bitdepth) {
1466             case  8:  codec_id = CODEC_ID_PCM_U8;     break;
1467             case 24:  codec_id = CODEC_ID_PCM_S24LE;  break;
1468             case 32:  codec_id = CODEC_ID_PCM_S32LE;  break;
1469             }
1470         } else if (codec_id==CODEC_ID_PCM_F32LE && track->audio.bitdepth==64) {
1471             codec_id = CODEC_ID_PCM_F64LE;
1472         } else if (codec_id == CODEC_ID_AAC && !track->codec_priv.size) {
1473             int profile = matroska_aac_profile(track->codec_id);
1474             int sri = matroska_aac_sri(track->audio.samplerate);
1475             extradata = av_malloc(5);
1476             if (extradata == NULL)
1477                 return AVERROR(ENOMEM);
1478             extradata[0] = (profile << 3) | ((sri&0x0E) >> 1);
1479             extradata[1] = ((sri&0x01) << 7) | (track->audio.channels<<3);
1480             if (strstr(track->codec_id, "SBR")) {
1481                 sri = matroska_aac_sri(track->audio.out_samplerate);
1482                 extradata[2] = 0x56;
1483                 extradata[3] = 0xE5;
1484                 extradata[4] = 0x80 | (sri<<3);
1485                 extradata_size = 5;
1486             } else
1487                 extradata_size = 2;
1488         } else if (codec_id == CODEC_ID_TTA) {
1489             extradata_size = 30;
1490             extradata = av_mallocz(extradata_size);
1491             if (extradata == NULL)
1492                 return AVERROR(ENOMEM);
1493             ffio_init_context(&b, extradata, extradata_size, 1,
1494                           NULL, NULL, NULL, NULL);
1495             avio_write(&b, "TTA1", 4);
1496             avio_wl16(&b, 1);
1497             avio_wl16(&b, track->audio.channels);
1498             avio_wl16(&b, track->audio.bitdepth);
1499             avio_wl32(&b, track->audio.out_samplerate);
1500             avio_wl32(&b, matroska->ctx->duration * track->audio.out_samplerate);
1501         } else if (codec_id == CODEC_ID_RV10 || codec_id == CODEC_ID_RV20 ||
1502                    codec_id == CODEC_ID_RV30 || codec_id == CODEC_ID_RV40) {
1503             extradata_offset = 26;
1504         } else if (codec_id == CODEC_ID_RA_144) {
1505             track->audio.out_samplerate = 8000;
1506             track->audio.channels = 1;
1507         } else if (codec_id == CODEC_ID_RA_288 || codec_id == CODEC_ID_COOK ||
1508                    codec_id == CODEC_ID_ATRAC3 || codec_id == CODEC_ID_SIPR) {
1509             int flavor;
1510             ffio_init_context(&b, track->codec_priv.data,track->codec_priv.size,
1511                           0, NULL, NULL, NULL, NULL);
1512             avio_skip(&b, 22);
1513             flavor                       = avio_rb16(&b);
1514             track->audio.coded_framesize = avio_rb32(&b);
1515             avio_skip(&b, 12);
1516             track->audio.sub_packet_h    = avio_rb16(&b);
1517             track->audio.frame_size      = avio_rb16(&b);
1518             track->audio.sub_packet_size = avio_rb16(&b);
1519             track->audio.buf = av_malloc(track->audio.frame_size * track->audio.sub_packet_h);
1520             if (codec_id == CODEC_ID_RA_288) {
1521                 st->codec->block_align = track->audio.coded_framesize;
1522                 track->codec_priv.size = 0;
1523             } else {
1524                 if (codec_id == CODEC_ID_SIPR && flavor < 4) {
1525                     const int sipr_bit_rate[4] = { 6504, 8496, 5000, 16000 };
1526                     track->audio.sub_packet_size = ff_sipr_subpk_size[flavor];
1527                     st->codec->bit_rate = sipr_bit_rate[flavor];
1528                 }
1529                 st->codec->block_align = track->audio.sub_packet_size;
1530                 extradata_offset = 78;
1531             }
1532         }
1533         track->codec_priv.size -= extradata_offset;
1534
1535         if (codec_id == CODEC_ID_NONE)
1536             av_log(matroska->ctx, AV_LOG_INFO,
1537                    "Unknown/unsupported CodecID %s.\n", track->codec_id);
1538
1539         if (track->time_scale < 0.01)
1540             track->time_scale = 1.0;
1541         av_set_pts_info(st, 64, matroska->time_scale*track->time_scale, 1000*1000*1000); /* 64 bit pts in ns */
1542
1543         st->codec->codec_id = codec_id;
1544         st->start_time = 0;
1545         if (strcmp(track->language, "und"))
1546             av_dict_set(&st->metadata, "language", track->language, 0);
1547         av_dict_set(&st->metadata, "title", track->name, 0);
1548
1549         if (track->flag_default)
1550             st->disposition |= AV_DISPOSITION_DEFAULT;
1551         if (track->flag_forced)
1552             st->disposition |= AV_DISPOSITION_FORCED;
1553
1554         if (track->default_duration)
1555             av_reduce(&st->codec->time_base.num, &st->codec->time_base.den,
1556                       track->default_duration, 1000000000, 30000);
1557
1558         if (!st->codec->extradata) {
1559             if(extradata){
1560                 st->codec->extradata = extradata;
1561                 st->codec->extradata_size = extradata_size;
1562             } else if(track->codec_priv.data && track->codec_priv.size > 0){
1563                 st->codec->extradata = av_mallocz(track->codec_priv.size +
1564                                                   FF_INPUT_BUFFER_PADDING_SIZE);
1565                 if(st->codec->extradata == NULL)
1566                     return AVERROR(ENOMEM);
1567                 st->codec->extradata_size = track->codec_priv.size;
1568                 memcpy(st->codec->extradata,
1569                        track->codec_priv.data + extradata_offset,
1570                        track->codec_priv.size);
1571             }
1572         }
1573
1574         if (track->type == MATROSKA_TRACK_TYPE_VIDEO) {
1575             MatroskaTrackPlane *planes = track->operation.combine_planes.elem;
1576
1577             st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
1578             st->codec->codec_tag  = fourcc;
1579             st->codec->width  = track->video.pixel_width;
1580             st->codec->height = track->video.pixel_height;
1581             av_reduce(&st->sample_aspect_ratio.num,
1582                       &st->sample_aspect_ratio.den,
1583                       st->codec->height * track->video.display_width,
1584                       st->codec-> width * track->video.display_height,
1585                       255);
1586             if (st->codec->codec_id != CODEC_ID_H264)
1587             st->need_parsing = AVSTREAM_PARSE_HEADERS;
1588             if (track->default_duration)
1589                 st->avg_frame_rate = av_d2q(1000000000.0/track->default_duration, INT_MAX);
1590
1591             /* export stereo mode flag as metadata tag */
1592             if (track->video.stereo_mode && track->video.stereo_mode < MATROSKA_VIDEO_STEREO_MODE_COUNT)
1593                 av_dict_set(&st->metadata, "stereo_mode", matroska_video_stereo_mode[track->video.stereo_mode], 0);
1594
1595             /* if we have virtual track, mark the real tracks */
1596             for (j=0; j < track->operation.combine_planes.nb_elem; j++) {
1597                 char buf[32];
1598                 if (planes[j].type >= MATROSKA_VIDEO_STEREO_PLANE_COUNT)
1599                     continue;
1600                 snprintf(buf, sizeof(buf), "%s_%d",
1601                          matroska_video_stereo_plane[planes[j].type], i);
1602                 for (k=0; k < matroska->tracks.nb_elem; k++)
1603                     if (planes[j].uid == tracks[k].uid) {
1604                         av_dict_set(&s->streams[k]->metadata,
1605                                     "stereo_mode", buf, 0);
1606                         break;
1607                     }
1608             }
1609         } else if (track->type == MATROSKA_TRACK_TYPE_AUDIO) {
1610             st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
1611             st->codec->sample_rate = track->audio.out_samplerate;
1612             st->codec->channels = track->audio.channels;
1613             if (st->codec->codec_id != CODEC_ID_AAC)
1614             st->need_parsing = AVSTREAM_PARSE_HEADERS;
1615         } else if (track->type == MATROSKA_TRACK_TYPE_SUBTITLE) {
1616             st->codec->codec_type = AVMEDIA_TYPE_SUBTITLE;
1617         }
1618     }
1619
1620     attachements = attachements_list->elem;
1621     for (j=0; j<attachements_list->nb_elem; j++) {
1622         if (!(attachements[j].filename && attachements[j].mime &&
1623               attachements[j].bin.data && attachements[j].bin.size > 0)) {
1624             av_log(matroska->ctx, AV_LOG_ERROR, "incomplete attachment\n");
1625         } else {
1626             AVStream *st = av_new_stream(s, 0);
1627             if (st == NULL)
1628                 break;
1629             av_dict_set(&st->metadata, "filename",attachements[j].filename, 0);
1630             st->codec->codec_id = CODEC_ID_NONE;
1631             st->codec->codec_type = AVMEDIA_TYPE_ATTACHMENT;
1632             st->codec->extradata  = av_malloc(attachements[j].bin.size);
1633             if(st->codec->extradata == NULL)
1634                 break;
1635             st->codec->extradata_size = attachements[j].bin.size;
1636             memcpy(st->codec->extradata, attachements[j].bin.data, attachements[j].bin.size);
1637
1638             for (i=0; ff_mkv_mime_tags[i].id != CODEC_ID_NONE; i++) {
1639                 if (!strncmp(ff_mkv_mime_tags[i].str, attachements[j].mime,
1640                              strlen(ff_mkv_mime_tags[i].str))) {
1641                     st->codec->codec_id = ff_mkv_mime_tags[i].id;
1642                     break;
1643                 }
1644             }
1645             attachements[j].stream = st;
1646         }
1647     }
1648
1649     chapters = chapters_list->elem;
1650     for (i=0; i<chapters_list->nb_elem; i++)
1651         if (chapters[i].start != AV_NOPTS_VALUE && chapters[i].uid
1652             && (max_start==0 || chapters[i].start > max_start)) {
1653             chapters[i].chapter =
1654             ff_new_chapter(s, chapters[i].uid, (AVRational){1, 1000000000},
1655                            chapters[i].start, chapters[i].end,
1656                            chapters[i].title);
1657             av_dict_set(&chapters[i].chapter->metadata,
1658                              "title", chapters[i].title, 0);
1659             max_start = chapters[i].start;
1660         }
1661
1662     matroska_convert_tags(s);
1663
1664     return 0;
1665 }
1666
1667 /*
1668  * Put one packet in an application-supplied AVPacket struct.
1669  * Returns 0 on success or -1 on failure.
1670  */
1671 static int matroska_deliver_packet(MatroskaDemuxContext *matroska,
1672                                    AVPacket *pkt)
1673 {
1674     if (matroska->num_packets > 0) {
1675         memcpy(pkt, matroska->packets[0], sizeof(AVPacket));
1676         av_free(matroska->packets[0]);
1677         if (matroska->num_packets > 1) {
1678             void *newpackets;
1679             memmove(&matroska->packets[0], &matroska->packets[1],
1680                     (matroska->num_packets - 1) * sizeof(AVPacket *));
1681             newpackets = av_realloc(matroska->packets,
1682                             (matroska->num_packets - 1) * sizeof(AVPacket *));
1683             if (newpackets)
1684                 matroska->packets = newpackets;
1685         } else {
1686             av_freep(&matroska->packets);
1687         }
1688         matroska->num_packets--;
1689         return 0;
1690     }
1691
1692     return -1;
1693 }
1694
1695 /*
1696  * Free all packets in our internal queue.
1697  */
1698 static void matroska_clear_queue(MatroskaDemuxContext *matroska)
1699 {
1700     if (matroska->packets) {
1701         int n;
1702         for (n = 0; n < matroska->num_packets; n++) {
1703             av_free_packet(matroska->packets[n]);
1704             av_free(matroska->packets[n]);
1705         }
1706         av_freep(&matroska->packets);
1707         matroska->num_packets = 0;
1708     }
1709 }
1710
1711 static int matroska_parse_block(MatroskaDemuxContext *matroska, uint8_t *data,
1712                                 int size, int64_t pos, uint64_t cluster_time,
1713                                 uint64_t duration, int is_keyframe,
1714                                 int64_t cluster_pos)
1715 {
1716     uint64_t timecode = AV_NOPTS_VALUE;
1717     MatroskaTrack *track;
1718     int res = 0;
1719     AVStream *st;
1720     AVPacket *pkt;
1721     int16_t block_time;
1722     uint32_t *lace_size = NULL;
1723     int n, flags, laces = 0;
1724     uint64_t num;
1725
1726     if ((n = matroska_ebmlnum_uint(matroska, data, size, &num)) < 0) {
1727         av_log(matroska->ctx, AV_LOG_ERROR, "EBML block data error\n");
1728         return res;
1729     }
1730     data += n;
1731     size -= n;
1732
1733     track = matroska_find_track_by_num(matroska, num);
1734     if (size <= 3 || !track || !track->stream) {
1735         av_log(matroska->ctx, AV_LOG_INFO,
1736                "Invalid stream %"PRIu64" or size %u\n", num, size);
1737         return AVERROR_INVALIDDATA;
1738     }
1739     st = track->stream;
1740     if (st->discard >= AVDISCARD_ALL)
1741         return res;
1742     if (!duration)
1743         duration = track->default_duration / matroska->time_scale;
1744
1745     block_time = AV_RB16(data);
1746     data += 2;
1747     flags = *data++;
1748     size -= 3;
1749     if (is_keyframe == -1)
1750         is_keyframe = flags & 0x80 ? AV_PKT_FLAG_KEY : 0;
1751
1752     if (cluster_time != (uint64_t)-1
1753         && (block_time >= 0 || cluster_time >= -block_time)) {
1754         timecode = cluster_time + block_time;
1755         if (track->type == MATROSKA_TRACK_TYPE_SUBTITLE
1756             && timecode < track->end_timecode)
1757             is_keyframe = 0;  /* overlapping subtitles are not key frame */
1758         if (is_keyframe)
1759             av_add_index_entry(st, cluster_pos, timecode, 0,0,AVINDEX_KEYFRAME);
1760         track->end_timecode = FFMAX(track->end_timecode, timecode+duration);
1761     }
1762
1763     if (matroska->skip_to_keyframe && track->type != MATROSKA_TRACK_TYPE_SUBTITLE) {
1764         if (!is_keyframe || timecode < matroska->skip_to_timecode)
1765             return res;
1766         matroska->skip_to_keyframe = 0;
1767     }
1768
1769     switch ((flags & 0x06) >> 1) {
1770         case 0x0: /* no lacing */
1771             laces = 1;
1772             lace_size = av_mallocz(sizeof(int));
1773             lace_size[0] = size;
1774             break;
1775
1776         case 0x1: /* Xiph lacing */
1777         case 0x2: /* fixed-size lacing */
1778         case 0x3: /* EBML lacing */
1779             assert(size>0); // size <=3 is checked before size-=3 above
1780             laces = (*data) + 1;
1781             data += 1;
1782             size -= 1;
1783             lace_size = av_mallocz(laces * sizeof(int));
1784
1785             switch ((flags & 0x06) >> 1) {
1786                 case 0x1: /* Xiph lacing */ {
1787                     uint8_t temp;
1788                     uint32_t total = 0;
1789                     for (n = 0; res == 0 && n < laces - 1; n++) {
1790                         while (1) {
1791                             if (size == 0) {
1792                                 res = -1;
1793                                 break;
1794                             }
1795                             temp = *data;
1796                             lace_size[n] += temp;
1797                             data += 1;
1798                             size -= 1;
1799                             if (temp != 0xff)
1800                                 break;
1801                         }
1802                         total += lace_size[n];
1803                     }
1804                     lace_size[n] = size - total;
1805                     break;
1806                 }
1807
1808                 case 0x2: /* fixed-size lacing */
1809                     for (n = 0; n < laces; n++)
1810                         lace_size[n] = size / laces;
1811                     break;
1812
1813                 case 0x3: /* EBML lacing */ {
1814                     uint32_t total;
1815                     n = matroska_ebmlnum_uint(matroska, data, size, &num);
1816                     if (n < 0) {
1817                         av_log(matroska->ctx, AV_LOG_INFO,
1818                                "EBML block data error\n");
1819                         break;
1820                     }
1821                     data += n;
1822                     size -= n;
1823                     total = lace_size[0] = num;
1824                     for (n = 1; res == 0 && n < laces - 1; n++) {
1825                         int64_t snum;
1826                         int r;
1827                         r = matroska_ebmlnum_sint(matroska, data, size, &snum);
1828                         if (r < 0) {
1829                             av_log(matroska->ctx, AV_LOG_INFO,
1830                                    "EBML block data error\n");
1831                             break;
1832                         }
1833                         data += r;
1834                         size -= r;
1835                         lace_size[n] = lace_size[n - 1] + snum;
1836                         total += lace_size[n];
1837                     }
1838                     lace_size[n] = size - total;
1839                     break;
1840                 }
1841             }
1842             break;
1843     }
1844
1845     if (res == 0) {
1846         for (n = 0; n < laces; n++) {
1847             if ((st->codec->codec_id == CODEC_ID_RA_288 ||
1848                  st->codec->codec_id == CODEC_ID_COOK ||
1849                  st->codec->codec_id == CODEC_ID_SIPR ||
1850                  st->codec->codec_id == CODEC_ID_ATRAC3) &&
1851                  st->codec->block_align && track->audio.sub_packet_size) {
1852                 int a = st->codec->block_align;
1853                 int sps = track->audio.sub_packet_size;
1854                 int cfs = track->audio.coded_framesize;
1855                 int h = track->audio.sub_packet_h;
1856                 int y = track->audio.sub_packet_cnt;
1857                 int w = track->audio.frame_size;
1858                 int x;
1859
1860                 if (!track->audio.pkt_cnt) {
1861                     if (track->audio.sub_packet_cnt == 0)
1862                         track->audio.buf_timecode = timecode;
1863                     if (st->codec->codec_id == CODEC_ID_RA_288)
1864                         for (x=0; x<h/2; x++)
1865                             memcpy(track->audio.buf+x*2*w+y*cfs,
1866                                    data+x*cfs, cfs);
1867                     else if (st->codec->codec_id == CODEC_ID_SIPR)
1868                         memcpy(track->audio.buf + y*w, data, w);
1869                     else
1870                         for (x=0; x<w/sps; x++)
1871                             memcpy(track->audio.buf+sps*(h*x+((h+1)/2)*(y&1)+(y>>1)), data+x*sps, sps);
1872
1873                     if (++track->audio.sub_packet_cnt >= h) {
1874                         if (st->codec->codec_id == CODEC_ID_SIPR)
1875                             ff_rm_reorder_sipr_data(track->audio.buf, h, w);
1876                         track->audio.sub_packet_cnt = 0;
1877                         track->audio.pkt_cnt = h*w / a;
1878                     }
1879                 }
1880                 while (track->audio.pkt_cnt) {
1881                     pkt = av_mallocz(sizeof(AVPacket));
1882                     av_new_packet(pkt, a);
1883                     memcpy(pkt->data, track->audio.buf
1884                            + a * (h*w / a - track->audio.pkt_cnt--), a);
1885                     pkt->pts = track->audio.buf_timecode;
1886                     track->audio.buf_timecode = AV_NOPTS_VALUE;
1887                     pkt->pos = pos;
1888                     pkt->stream_index = st->index;
1889                     dynarray_add(&matroska->packets,&matroska->num_packets,pkt);
1890                 }
1891             } else {
1892                 MatroskaTrackEncoding *encodings = track->encodings.elem;
1893                 int offset = 0, pkt_size = lace_size[n];
1894                 uint8_t *pkt_data = data;
1895
1896                 if (pkt_size > size) {
1897                     av_log(matroska->ctx, AV_LOG_ERROR, "Invalid packet size\n");
1898                     break;
1899                 }
1900
1901                 if (encodings && encodings->scope & 1) {
1902                     offset = matroska_decode_buffer(&pkt_data,&pkt_size, track);
1903                     if (offset < 0)
1904                         continue;
1905                 }
1906
1907                 pkt = av_mallocz(sizeof(AVPacket));
1908                 /* XXX: prevent data copy... */
1909                 if (av_new_packet(pkt, pkt_size+offset) < 0) {
1910                     av_free(pkt);
1911                     res = AVERROR(ENOMEM);
1912                     break;
1913                 }
1914                 if (offset)
1915                     memcpy (pkt->data, encodings->compression.settings.data, offset);
1916                 memcpy (pkt->data+offset, pkt_data, pkt_size);
1917
1918                 if (pkt_data != data)
1919                     av_free(pkt_data);
1920
1921                 if (n == 0)
1922                     pkt->flags = is_keyframe;
1923                 pkt->stream_index = st->index;
1924
1925                 if (track->ms_compat)
1926                     pkt->dts = timecode;
1927                 else
1928                     pkt->pts = timecode;
1929                 pkt->pos = pos;
1930                 if (st->codec->codec_id == CODEC_ID_TEXT)
1931                     pkt->convergence_duration = duration;
1932                 else if (track->type != MATROSKA_TRACK_TYPE_SUBTITLE)
1933                     pkt->duration = duration;
1934
1935                 if (st->codec->codec_id == CODEC_ID_SSA)
1936                     matroska_fix_ass_packet(matroska, pkt, duration);
1937
1938                 if (matroska->prev_pkt &&
1939                     timecode != AV_NOPTS_VALUE &&
1940                     matroska->prev_pkt->pts == timecode &&
1941                     matroska->prev_pkt->stream_index == st->index &&
1942                     st->codec->codec_id == CODEC_ID_SSA)
1943                     matroska_merge_packets(matroska->prev_pkt, pkt);
1944                 else {
1945                     dynarray_add(&matroska->packets,&matroska->num_packets,pkt);
1946                     matroska->prev_pkt = pkt;
1947                 }
1948             }
1949
1950             if (timecode != AV_NOPTS_VALUE)
1951                 timecode = duration ? timecode + duration : AV_NOPTS_VALUE;
1952             data += lace_size[n];
1953             size -= lace_size[n];
1954         }
1955     }
1956
1957     av_free(lace_size);
1958     return res;
1959 }
1960
1961 static int matroska_parse_cluster(MatroskaDemuxContext *matroska)
1962 {
1963     MatroskaCluster cluster = { 0 };
1964     EbmlList *blocks_list;
1965     MatroskaBlock *blocks;
1966     int i, res;
1967     int64_t pos = avio_tell(matroska->ctx->pb);
1968     matroska->prev_pkt = NULL;
1969     if (matroska->current_id)
1970         pos -= 4;  /* sizeof the ID which was already read */
1971     res = ebml_parse(matroska, matroska_clusters, &cluster);
1972     blocks_list = &cluster.blocks;
1973     blocks = blocks_list->elem;
1974     for (i=0; i<blocks_list->nb_elem && !res; i++)
1975         if (blocks[i].bin.size > 0 && blocks[i].bin.data) {
1976             int is_keyframe = blocks[i].non_simple ? !blocks[i].reference : -1;
1977             res=matroska_parse_block(matroska,
1978                                      blocks[i].bin.data, blocks[i].bin.size,
1979                                      blocks[i].bin.pos,  cluster.timecode,
1980                                      blocks[i].duration, is_keyframe,
1981                                      pos);
1982         }
1983     ebml_free(matroska_cluster, &cluster);
1984     if (res < 0)  matroska->done = 1;
1985     return res;
1986 }
1987
1988 static int matroska_read_packet(AVFormatContext *s, AVPacket *pkt)
1989 {
1990     MatroskaDemuxContext *matroska = s->priv_data;
1991     int ret = 0;
1992
1993     while (!ret && matroska_deliver_packet(matroska, pkt)) {
1994         if (matroska->done)
1995             return AVERROR_EOF;
1996         ret = matroska_parse_cluster(matroska);
1997     }
1998
1999     return ret;
2000 }
2001
2002 static int matroska_read_seek(AVFormatContext *s, int stream_index,
2003                               int64_t timestamp, int flags)
2004 {
2005     MatroskaDemuxContext *matroska = s->priv_data;
2006     MatroskaTrack *tracks = matroska->tracks.elem;
2007     AVStream *st = s->streams[stream_index];
2008     int i, index, index_sub, index_min;
2009
2010     /* Parse the CUES now since we need the index data to seek. */
2011     if (matroska->cues_parsing_deferred) {
2012         matroska_parse_cues(matroska);
2013         matroska->cues_parsing_deferred = 0;
2014     }
2015
2016     if (!st->nb_index_entries)
2017         return 0;
2018     timestamp = FFMAX(timestamp, st->index_entries[0].timestamp);
2019
2020     if ((index = av_index_search_timestamp(st, timestamp, flags)) < 0) {
2021         avio_seek(s->pb, st->index_entries[st->nb_index_entries-1].pos, SEEK_SET);
2022         matroska->current_id = 0;
2023         while ((index = av_index_search_timestamp(st, timestamp, flags)) < 0) {
2024             matroska_clear_queue(matroska);
2025             if (matroska_parse_cluster(matroska) < 0)
2026                 break;
2027         }
2028     }
2029
2030     matroska_clear_queue(matroska);
2031     if (index < 0)
2032         return 0;
2033
2034     index_min = index;
2035     for (i=0; i < matroska->tracks.nb_elem; i++) {
2036         tracks[i].audio.pkt_cnt = 0;
2037         tracks[i].audio.sub_packet_cnt = 0;
2038         tracks[i].audio.buf_timecode = AV_NOPTS_VALUE;
2039         tracks[i].end_timecode = 0;
2040         if (tracks[i].type == MATROSKA_TRACK_TYPE_SUBTITLE
2041             && !tracks[i].stream->discard != AVDISCARD_ALL) {
2042             index_sub = av_index_search_timestamp(tracks[i].stream, st->index_entries[index].timestamp, AVSEEK_FLAG_BACKWARD);
2043             if (index_sub >= 0
2044                 && st->index_entries[index_sub].pos < st->index_entries[index_min].pos
2045                 && st->index_entries[index].timestamp - st->index_entries[index_sub].timestamp < 30000000000/matroska->time_scale)
2046                 index_min = index_sub;
2047         }
2048     }
2049
2050     avio_seek(s->pb, st->index_entries[index_min].pos, SEEK_SET);
2051     matroska->current_id = 0;
2052     matroska->skip_to_keyframe = !(flags & AVSEEK_FLAG_ANY);
2053     matroska->skip_to_timecode = st->index_entries[index].timestamp;
2054     matroska->done = 0;
2055     av_update_cur_dts(s, st, st->index_entries[index].timestamp);
2056     return 0;
2057 }
2058
2059 static int matroska_read_close(AVFormatContext *s)
2060 {
2061     MatroskaDemuxContext *matroska = s->priv_data;
2062     MatroskaTrack *tracks = matroska->tracks.elem;
2063     int n;
2064
2065     matroska_clear_queue(matroska);
2066
2067     for (n=0; n < matroska->tracks.nb_elem; n++)
2068         if (tracks[n].type == MATROSKA_TRACK_TYPE_AUDIO)
2069             av_free(tracks[n].audio.buf);
2070     ebml_free(matroska_segment, matroska);
2071
2072     return 0;
2073 }
2074
2075 AVInputFormat ff_matroska_demuxer = {
2076     .name           = "matroska,webm",
2077     .long_name      = NULL_IF_CONFIG_SMALL("Matroska/WebM file format"),
2078     .priv_data_size = sizeof(MatroskaDemuxContext),
2079     .read_probe     = matroska_probe,
2080     .read_header    = matroska_read_header,
2081     .read_packet    = matroska_read_packet,
2082     .read_close     = matroska_read_close,
2083     .read_seek      = matroska_read_seek,
2084 };