1 /*
2  * Copyright (c) 2006 Konstantin Shishkov
3  *
4  * This file is part of FFmpeg.
5  *
6  * FFmpeg is free software; you can redistribute it and/or
7  * modify it under the terms of the GNU Lesser General Public
8  * License as published by the Free Software Foundation; either
9  * version 2.1 of the License, or (at your option) any later version.
10  *
11  * FFmpeg is distributed in the hope that it will be useful,
12  * but WITHOUT ANY WARRANTY; without even the implied warranty of
13  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
14  * Lesser General Public License for more details.
15  *
16  * You should have received a copy of the GNU Lesser General Public
17  * License along with FFmpeg; if not, write to the Free Software
18  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
19  */
20 
21 /**
22  * @file
23  * TIFF image decoder
24  * @author Konstantin Shishkov
25  */
26 
27 #include "config.h"
28 #if CONFIG_ZLIB
29 #include <zlib.h>
30 #endif
31 #if CONFIG_LZMA
32 #define LZMA_API_STATIC
33 #include <lzma.h>
34 #endif
35 
36 #include "libavutil/attributes.h"
37 #include "libavutil/avstring.h"
38 #include "libavutil/error.h"
39 #include "libavutil/intreadwrite.h"
40 #include "libavutil/imgutils.h"
41 #include "libavutil/opt.h"
42 #include "avcodec.h"
43 #include "bytestream.h"
44 #include "faxcompr.h"
45 #include "internal.h"
46 #include "lzw.h"
47 #include "mathops.h"
48 #include "tiff.h"
49 #include "tiff_data.h"
50 #include "mjpegdec.h"
51 #include "thread.h"
52 #include "get_bits.h"
53 
54 typedef struct TiffContext {
55     AVClass *class;
56     AVCodecContext *avctx;
57     GetByteContext gb;
58 
59     /* JPEG decoding for DNG */
60     AVCodecContext *avctx_mjpeg; // wrapper context for MJPEG
61     AVPacket *jpkt;              // encoded JPEG tile
62     AVFrame *jpgframe;           // decoded JPEG tile
63 
64     int get_subimage;
65     uint16_t get_page;
66     int get_thumbnail;
67 
68     enum TiffType tiff_type;
69     int width, height;
70     unsigned int bpp, bppcount;
71     uint32_t palette[256];
72     int palette_is_set;
73     int le;
74     enum TiffCompr compr;
75     enum TiffPhotometric photometric;
76     int planar;
77     int subsampling[2];
78     int fax_opts;
79     int predictor;
80     int fill_order;
81     uint32_t res[4];
82     int is_thumbnail;
83     unsigned last_tag;
84 
85     int is_bayer;
86     uint8_t pattern[4];
87     unsigned black_level;
88     unsigned white_level;
89     uint16_t dng_lut[65536];
90 
91     uint32_t sub_ifd;
92     uint16_t cur_page;
93 
94     int strips, rps, sstype;
95     int sot;
96     int stripsizesoff, stripsize, stripoff, strippos;
97     LZWState *lzw;
98 
99     /* Tile support */
100     int is_tiled;
101     int tile_byte_counts_offset, tile_offsets_offset;
102     int tile_width, tile_length;
103     int tile_count;
104 
105     int is_jpeg;
106 
107     uint8_t *deinvert_buf;
108     int deinvert_buf_size;
109     uint8_t *yuv_line;
110     unsigned int yuv_line_size;
111     uint8_t *fax_buffer;
112     unsigned int fax_buffer_size;
113 
114     int geotag_count;
115     TiffGeoTag *geotags;
116 } TiffContext;
117 
tiff_set_type(TiffContext * s,enum TiffType tiff_type)118 static void tiff_set_type(TiffContext *s, enum TiffType tiff_type) {
119     if (s->tiff_type < tiff_type) // Prioritize higher-valued entries
120         s->tiff_type = tiff_type;
121 }
122 
free_geotags(TiffContext * const s)123 static void free_geotags(TiffContext *const s)
124 {
125     int i;
126     for (i = 0; i < s->geotag_count; i++) {
127         if (s->geotags[i].val)
128             av_freep(&s->geotags[i].val);
129     }
130     av_freep(&s->geotags);
131     s->geotag_count = 0;
132 }
133 
134 #define RET_GEOKEY(TYPE, array, element)\
135     if (key >= TIFF_##TYPE##_KEY_ID_OFFSET &&\
136         key - TIFF_##TYPE##_KEY_ID_OFFSET < FF_ARRAY_ELEMS(tiff_##array##_name_type_map))\
137         return tiff_##array##_name_type_map[key - TIFF_##TYPE##_KEY_ID_OFFSET].element;
138 
get_geokey_name(int key)139 static const char *get_geokey_name(int key)
140 {
141     RET_GEOKEY(VERT, vert, name);
142     RET_GEOKEY(PROJ, proj, name);
143     RET_GEOKEY(GEOG, geog, name);
144     RET_GEOKEY(CONF, conf, name);
145 
146     return NULL;
147 }
148 
get_geokey_type(int key)149 static int get_geokey_type(int key)
150 {
151     RET_GEOKEY(VERT, vert, type);
152     RET_GEOKEY(PROJ, proj, type);
153     RET_GEOKEY(GEOG, geog, type);
154     RET_GEOKEY(CONF, conf, type);
155 
156     return AVERROR_INVALIDDATA;
157 }
158 
cmp_id_key(const void * id,const void * k)159 static int cmp_id_key(const void *id, const void *k)
160 {
161     return *(const int*)id - ((const TiffGeoTagKeyName*)k)->key;
162 }
163 
search_keyval(const TiffGeoTagKeyName * keys,int n,int id)164 static const char *search_keyval(const TiffGeoTagKeyName *keys, int n, int id)
165 {
166     TiffGeoTagKeyName *r = bsearch(&id, keys, n, sizeof(keys[0]), cmp_id_key);
167     if(r)
168         return r->name;
169 
170     return NULL;
171 }
172 
get_geokey_val(int key,int val)173 static char *get_geokey_val(int key, int val)
174 {
175     char *ap;
176 
177     if (val == TIFF_GEO_KEY_UNDEFINED)
178         return av_strdup("undefined");
179     if (val == TIFF_GEO_KEY_USER_DEFINED)
180         return av_strdup("User-Defined");
181 
182 #define RET_GEOKEY_VAL(TYPE, array)\
183     if (val >= TIFF_##TYPE##_OFFSET &&\
184         val - TIFF_##TYPE##_OFFSET < FF_ARRAY_ELEMS(tiff_##array##_codes))\
185         return av_strdup(tiff_##array##_codes[val - TIFF_##TYPE##_OFFSET]);
186 
187     switch (key) {
188     case TIFF_GT_MODEL_TYPE_GEOKEY:
189         RET_GEOKEY_VAL(GT_MODEL_TYPE, gt_model_type);
190         break;
191     case TIFF_GT_RASTER_TYPE_GEOKEY:
192         RET_GEOKEY_VAL(GT_RASTER_TYPE, gt_raster_type);
193         break;
194     case TIFF_GEOG_LINEAR_UNITS_GEOKEY:
195     case TIFF_PROJ_LINEAR_UNITS_GEOKEY:
196     case TIFF_VERTICAL_UNITS_GEOKEY:
197         RET_GEOKEY_VAL(LINEAR_UNIT, linear_unit);
198         break;
199     case TIFF_GEOG_ANGULAR_UNITS_GEOKEY:
200     case TIFF_GEOG_AZIMUTH_UNITS_GEOKEY:
201         RET_GEOKEY_VAL(ANGULAR_UNIT, angular_unit);
202         break;
203     case TIFF_GEOGRAPHIC_TYPE_GEOKEY:
204         RET_GEOKEY_VAL(GCS_TYPE, gcs_type);
205         RET_GEOKEY_VAL(GCSE_TYPE, gcse_type);
206         break;
207     case TIFF_GEOG_GEODETIC_DATUM_GEOKEY:
208         RET_GEOKEY_VAL(GEODETIC_DATUM, geodetic_datum);
209         RET_GEOKEY_VAL(GEODETIC_DATUM_E, geodetic_datum_e);
210         break;
211     case TIFF_GEOG_ELLIPSOID_GEOKEY:
212         RET_GEOKEY_VAL(ELLIPSOID, ellipsoid);
213         break;
214     case TIFF_GEOG_PRIME_MERIDIAN_GEOKEY:
215         RET_GEOKEY_VAL(PRIME_MERIDIAN, prime_meridian);
216         break;
217     case TIFF_PROJECTED_CS_TYPE_GEOKEY:
218         ap = av_strdup(search_keyval(tiff_proj_cs_type_codes, FF_ARRAY_ELEMS(tiff_proj_cs_type_codes), val));
219         if(ap) return ap;
220         break;
221     case TIFF_PROJECTION_GEOKEY:
222         ap = av_strdup(search_keyval(tiff_projection_codes, FF_ARRAY_ELEMS(tiff_projection_codes), val));
223         if(ap) return ap;
224         break;
225     case TIFF_PROJ_COORD_TRANS_GEOKEY:
226         RET_GEOKEY_VAL(COORD_TRANS, coord_trans);
227         break;
228     case TIFF_VERTICAL_CS_TYPE_GEOKEY:
229         RET_GEOKEY_VAL(VERT_CS, vert_cs);
230         RET_GEOKEY_VAL(ORTHO_VERT_CS, ortho_vert_cs);
231         break;
232 
233     }
234 
235     ap = av_malloc(14);
236     if (ap)
237         snprintf(ap, 14, "Unknown-%d", val);
238     return ap;
239 }
240 
doubles2str(double * dp,int count,const char * sep)241 static char *doubles2str(double *dp, int count, const char *sep)
242 {
243     int i;
244     char *ap, *ap0;
245     uint64_t component_len;
246     if (!sep) sep = ", ";
247     component_len = 24LL + strlen(sep);
248     if (count >= (INT_MAX - 1)/component_len)
249         return NULL;
250     ap = av_malloc(component_len * count + 1);
251     if (!ap)
252         return NULL;
253     ap0   = ap;
254     ap[0] = '\0';
255     for (i = 0; i < count; i++) {
256         unsigned l = snprintf(ap, component_len, "%.15g%s", dp[i], sep);
257         if(l >= component_len) {
258             av_free(ap0);
259             return NULL;
260         }
261         ap += l;
262     }
263     ap0[strlen(ap0) - strlen(sep)] = '\0';
264     return ap0;
265 }
266 
add_metadata(int count,int type,const char * name,const char * sep,TiffContext * s,AVFrame * frame)267 static int add_metadata(int count, int type,
268                         const char *name, const char *sep, TiffContext *s, AVFrame *frame)
269 {
270     switch(type) {
271     case TIFF_DOUBLE: return ff_tadd_doubles_metadata(count, name, sep, &s->gb, s->le, &frame->metadata);
272     case TIFF_SHORT : return ff_tadd_shorts_metadata(count, name, sep, &s->gb, s->le, 0, &frame->metadata);
273     case TIFF_STRING: return ff_tadd_string_metadata(count, name, &s->gb, s->le, &frame->metadata);
274     default         : return AVERROR_INVALIDDATA;
275     };
276 }
277 
278 /**
279  * Map stored raw sensor values into linear reference values (see: DNG Specification - Chapter 5)
280  */
dng_process_color16(uint16_t value,const uint16_t * lut,uint16_t black_level,float scale_factor)281 static uint16_t av_always_inline dng_process_color16(uint16_t value,
282                                                      const uint16_t *lut,
283                                                      uint16_t black_level,
284                                                      float scale_factor)
285 {
286     float value_norm;
287 
288     // Lookup table lookup
289     if (lut)
290         value = lut[value];
291 
292     // Black level subtraction
293     value = av_clip_uint16_c((unsigned)value - black_level);
294 
295     // Color scaling
296     value_norm = (float)value * scale_factor;
297 
298     value = av_clip_uint16_c(value_norm * 65535);
299 
300     return value;
301 }
302 
dng_process_color8(uint16_t value,const uint16_t * lut,uint16_t black_level,float scale_factor)303 static uint16_t av_always_inline dng_process_color8(uint16_t value,
304                                                     const uint16_t *lut,
305                                                     uint16_t black_level,
306                                                     float scale_factor)
307 {
308     return dng_process_color16(value, lut, black_level, scale_factor) >> 8;
309 }
310 
dng_blit(TiffContext * s,uint8_t * dst,int dst_stride,const uint8_t * src,int src_stride,int width,int height,int is_single_comp,int is_u16)311 static void av_always_inline dng_blit(TiffContext *s, uint8_t *dst, int dst_stride,
312                                       const uint8_t *src, int src_stride, int width, int height,
313                                       int is_single_comp, int is_u16)
314 {
315     int line, col;
316     float scale_factor;
317 
318     scale_factor = 1.0f / (s->white_level - s->black_level);
319 
320     if (is_single_comp) {
321         if (!is_u16)
322             return; /* <= 8bpp unsupported */
323 
324         /* Image is double the width and half the height we need, each row comprises 2 rows of the output
325            (split vertically in the middle). */
326         for (line = 0; line < height / 2; line++) {
327             uint16_t *dst_u16 = (uint16_t *)dst;
328             uint16_t *src_u16 = (uint16_t *)src;
329 
330             /* Blit first half of input row row to initial row of output */
331             for (col = 0; col < width; col++)
332                 *dst_u16++ = dng_process_color16(*src_u16++, s->dng_lut, s->black_level, scale_factor);
333 
334             /* Advance the destination pointer by a row (source pointer remains in the same place) */
335             dst += dst_stride * sizeof(uint16_t);
336             dst_u16 = (uint16_t *)dst;
337 
338             /* Blit second half of input row row to next row of output */
339             for (col = 0; col < width; col++)
340                 *dst_u16++ = dng_process_color16(*src_u16++, s->dng_lut, s->black_level, scale_factor);
341 
342             dst += dst_stride * sizeof(uint16_t);
343             src += src_stride * sizeof(uint16_t);
344         }
345     } else {
346         /* Input and output image are the same size and the MJpeg decoder has done per-component
347            deinterleaving, so blitting here is straightforward. */
348         if (is_u16) {
349             for (line = 0; line < height; line++) {
350                 uint16_t *dst_u16 = (uint16_t *)dst;
351                 uint16_t *src_u16 = (uint16_t *)src;
352 
353                 for (col = 0; col < width; col++)
354                     *dst_u16++ = dng_process_color16(*src_u16++, s->dng_lut, s->black_level, scale_factor);
355 
356                 dst += dst_stride * sizeof(uint16_t);
357                 src += src_stride * sizeof(uint16_t);
358             }
359         } else {
360             for (line = 0; line < height; line++) {
361                 uint8_t *dst_u8 = dst;
362                 const uint8_t *src_u8 = src;
363 
364                 for (col = 0; col < width; col++)
365                     *dst_u8++ = dng_process_color8(*src_u8++, s->dng_lut, s->black_level, scale_factor);
366 
367                 dst += dst_stride;
368                 src += src_stride;
369             }
370         }
371     }
372 }
373 
horizontal_fill(TiffContext * s,unsigned int bpp,uint8_t * dst,int usePtr,const uint8_t * src,uint8_t c,int width,int offset)374 static void av_always_inline horizontal_fill(TiffContext *s,
375                                              unsigned int bpp, uint8_t* dst,
376                                              int usePtr, const uint8_t *src,
377                                              uint8_t c, int width, int offset)
378 {
379     switch (bpp) {
380     case 1:
381         while (--width >= 0) {
382             dst[(width+offset)*8+7] = (usePtr ? src[width] : c)      & 0x1;
383             dst[(width+offset)*8+6] = (usePtr ? src[width] : c) >> 1 & 0x1;
384             dst[(width+offset)*8+5] = (usePtr ? src[width] : c) >> 2 & 0x1;
385             dst[(width+offset)*8+4] = (usePtr ? src[width] : c) >> 3 & 0x1;
386             dst[(width+offset)*8+3] = (usePtr ? src[width] : c) >> 4 & 0x1;
387             dst[(width+offset)*8+2] = (usePtr ? src[width] : c) >> 5 & 0x1;
388             dst[(width+offset)*8+1] = (usePtr ? src[width] : c) >> 6 & 0x1;
389             dst[(width+offset)*8+0] = (usePtr ? src[width] : c) >> 7;
390         }
391         break;
392     case 2:
393         while (--width >= 0) {
394             dst[(width+offset)*4+3] = (usePtr ? src[width] : c) & 0x3;
395             dst[(width+offset)*4+2] = (usePtr ? src[width] : c) >> 2 & 0x3;
396             dst[(width+offset)*4+1] = (usePtr ? src[width] : c) >> 4 & 0x3;
397             dst[(width+offset)*4+0] = (usePtr ? src[width] : c) >> 6;
398         }
399         break;
400     case 4:
401         while (--width >= 0) {
402             dst[(width+offset)*2+1] = (usePtr ? src[width] : c) & 0xF;
403             dst[(width+offset)*2+0] = (usePtr ? src[width] : c) >> 4;
404         }
405         break;
406     case 10:
407     case 12:
408     case 14: {
409             uint16_t *dst16 = (uint16_t *)dst;
410             int is_dng = (s->tiff_type == TIFF_TYPE_DNG || s->tiff_type == TIFF_TYPE_CINEMADNG);
411             uint8_t shift = is_dng ? 0 : 16 - bpp;
412             GetBitContext gb;
413 
414             init_get_bits8(&gb, src, width);
415             for (int i = 0; i < s->width; i++) {
416                 dst16[i] = get_bits(&gb, bpp) << shift;
417             }
418         }
419         break;
420     default:
421         if (usePtr) {
422             memcpy(dst + offset, src, width);
423         } else {
424             memset(dst + offset, c, width);
425         }
426     }
427 }
428 
deinvert_buffer(TiffContext * s,const uint8_t * src,int size)429 static int deinvert_buffer(TiffContext *s, const uint8_t *src, int size)
430 {
431     int i;
432 
433     av_fast_padded_malloc(&s->deinvert_buf, &s->deinvert_buf_size, size);
434     if (!s->deinvert_buf)
435         return AVERROR(ENOMEM);
436     for (i = 0; i < size; i++)
437         s->deinvert_buf[i] = ff_reverse[src[i]];
438 
439     return 0;
440 }
441 
unpack_gray(TiffContext * s,AVFrame * p,const uint8_t * src,int lnum,int width,int bpp)442 static void unpack_gray(TiffContext *s, AVFrame *p,
443                        const uint8_t *src, int lnum, int width, int bpp)
444 {
445     GetBitContext gb;
446     uint16_t *dst = (uint16_t *)(p->data[0] + lnum * p->linesize[0]);
447 
448     init_get_bits8(&gb, src, width);
449 
450     for (int i = 0; i < s->width; i++) {
451         dst[i] = get_bits(&gb, bpp);
452     }
453 }
454 
unpack_yuv(TiffContext * s,AVFrame * p,const uint8_t * src,int lnum)455 static void unpack_yuv(TiffContext *s, AVFrame *p,
456                        const uint8_t *src, int lnum)
457 {
458     int i, j, k;
459     int w       = (s->width - 1) / s->subsampling[0] + 1;
460     uint8_t *pu = &p->data[1][lnum / s->subsampling[1] * p->linesize[1]];
461     uint8_t *pv = &p->data[2][lnum / s->subsampling[1] * p->linesize[2]];
462     if (s->width % s->subsampling[0] || s->height % s->subsampling[1]) {
463         for (i = 0; i < w; i++) {
464             for (j = 0; j < s->subsampling[1]; j++)
465                 for (k = 0; k < s->subsampling[0]; k++)
466                     p->data[0][FFMIN(lnum + j, s->height-1) * p->linesize[0] +
467                                FFMIN(i * s->subsampling[0] + k, s->width-1)] = *src++;
468             *pu++ = *src++;
469             *pv++ = *src++;
470         }
471     }else{
472         for (i = 0; i < w; i++) {
473             for (j = 0; j < s->subsampling[1]; j++)
474                 for (k = 0; k < s->subsampling[0]; k++)
475                     p->data[0][(lnum + j) * p->linesize[0] +
476                                i * s->subsampling[0] + k] = *src++;
477             *pu++ = *src++;
478             *pv++ = *src++;
479         }
480     }
481 }
482 
483 #if CONFIG_ZLIB
tiff_uncompress(uint8_t * dst,unsigned long * len,const uint8_t * src,int size)484 static int tiff_uncompress(uint8_t *dst, unsigned long *len, const uint8_t *src,
485                            int size)
486 {
487     z_stream zstream = { 0 };
488     int zret;
489 
490     zstream.next_in   = src;
491     zstream.avail_in  = size;
492     zstream.next_out  = dst;
493     zstream.avail_out = *len;
494     zret              = inflateInit(&zstream);
495     if (zret != Z_OK) {
496         av_log(NULL, AV_LOG_ERROR, "Inflate init error: %d\n", zret);
497         return zret;
498     }
499     zret = inflate(&zstream, Z_SYNC_FLUSH);
500     inflateEnd(&zstream);
501     *len = zstream.total_out;
502     return zret == Z_STREAM_END ? Z_OK : zret;
503 }
504 
tiff_unpack_zlib(TiffContext * s,AVFrame * p,uint8_t * dst,int stride,const uint8_t * src,int size,int width,int lines,int strip_start,int is_yuv)505 static int tiff_unpack_zlib(TiffContext *s, AVFrame *p, uint8_t *dst, int stride,
506                             const uint8_t *src, int size, int width, int lines,
507                             int strip_start, int is_yuv)
508 {
509     uint8_t *zbuf;
510     unsigned long outlen;
511     int ret, line;
512     outlen = width * lines;
513     zbuf   = av_malloc(outlen);
514     if (!zbuf)
515         return AVERROR(ENOMEM);
516     if (s->fill_order) {
517         if ((ret = deinvert_buffer(s, src, size)) < 0) {
518             av_free(zbuf);
519             return ret;
520         }
521         src = s->deinvert_buf;
522     }
523     ret = tiff_uncompress(zbuf, &outlen, src, size);
524     if (ret != Z_OK) {
525         av_log(s->avctx, AV_LOG_ERROR,
526                "Uncompressing failed (%lu of %lu) with error %d\n", outlen,
527                (unsigned long)width * lines, ret);
528         av_free(zbuf);
529         return AVERROR_UNKNOWN;
530     }
531     src = zbuf;
532     for (line = 0; line < lines; line++) {
533         if (s->bpp < 8 && s->avctx->pix_fmt == AV_PIX_FMT_PAL8) {
534             horizontal_fill(s, s->bpp, dst, 1, src, 0, width, 0);
535         } else {
536             memcpy(dst, src, width);
537         }
538         if (is_yuv) {
539             unpack_yuv(s, p, dst, strip_start + line);
540             line += s->subsampling[1] - 1;
541         }
542         dst += stride;
543         src += width;
544     }
545     av_free(zbuf);
546     return 0;
547 }
548 #endif
549 
550 #if CONFIG_LZMA
tiff_uncompress_lzma(uint8_t * dst,uint64_t * len,const uint8_t * src,int size)551 static int tiff_uncompress_lzma(uint8_t *dst, uint64_t *len, const uint8_t *src,
552                                 int size)
553 {
554     lzma_stream stream = LZMA_STREAM_INIT;
555     lzma_ret ret;
556 
557     stream.next_in   = (uint8_t *)src;
558     stream.avail_in  = size;
559     stream.next_out  = dst;
560     stream.avail_out = *len;
561     ret              = lzma_stream_decoder(&stream, UINT64_MAX, 0);
562     if (ret != LZMA_OK) {
563         av_log(NULL, AV_LOG_ERROR, "LZMA init error: %d\n", ret);
564         return ret;
565     }
566     ret = lzma_code(&stream, LZMA_RUN);
567     lzma_end(&stream);
568     *len = stream.total_out;
569     return ret == LZMA_STREAM_END ? LZMA_OK : ret;
570 }
571 
tiff_unpack_lzma(TiffContext * s,AVFrame * p,uint8_t * dst,int stride,const uint8_t * src,int size,int width,int lines,int strip_start,int is_yuv)572 static int tiff_unpack_lzma(TiffContext *s, AVFrame *p, uint8_t *dst, int stride,
573                             const uint8_t *src, int size, int width, int lines,
574                             int strip_start, int is_yuv)
575 {
576     uint64_t outlen = width * (uint64_t)lines;
577     int ret, line;
578     uint8_t *buf = av_malloc(outlen);
579     if (!buf)
580         return AVERROR(ENOMEM);
581     if (s->fill_order) {
582         if ((ret = deinvert_buffer(s, src, size)) < 0) {
583             av_free(buf);
584             return ret;
585         }
586         src = s->deinvert_buf;
587     }
588     ret = tiff_uncompress_lzma(buf, &outlen, src, size);
589     if (ret != LZMA_OK) {
590         av_log(s->avctx, AV_LOG_ERROR,
591                "Uncompressing failed (%"PRIu64" of %"PRIu64") with error %d\n", outlen,
592                (uint64_t)width * lines, ret);
593         av_free(buf);
594         return AVERROR_UNKNOWN;
595     }
596     src = buf;
597     for (line = 0; line < lines; line++) {
598         if (s->bpp < 8 && s->avctx->pix_fmt == AV_PIX_FMT_PAL8) {
599             horizontal_fill(s, s->bpp, dst, 1, src, 0, width, 0);
600         } else {
601             memcpy(dst, src, width);
602         }
603         if (is_yuv) {
604             unpack_yuv(s, p, dst, strip_start + line);
605             line += s->subsampling[1] - 1;
606         }
607         dst += stride;
608         src += width;
609     }
610     av_free(buf);
611     return 0;
612 }
613 #endif
614 
tiff_unpack_fax(TiffContext * s,uint8_t * dst,int stride,const uint8_t * src,int size,int width,int lines)615 static int tiff_unpack_fax(TiffContext *s, uint8_t *dst, int stride,
616                            const uint8_t *src, int size, int width, int lines)
617 {
618     int i, ret = 0;
619     int line;
620     uint8_t *src2;
621 
622     av_fast_padded_malloc(&s->fax_buffer, &s->fax_buffer_size, size);
623     src2 = s->fax_buffer;
624 
625     if (!src2) {
626         av_log(s->avctx, AV_LOG_ERROR,
627                "Error allocating temporary buffer\n");
628         return AVERROR(ENOMEM);
629     }
630 
631     if (!s->fill_order) {
632         memcpy(src2, src, size);
633     } else {
634         for (i = 0; i < size; i++)
635             src2[i] = ff_reverse[src[i]];
636     }
637     memset(src2 + size, 0, AV_INPUT_BUFFER_PADDING_SIZE);
638     ret = ff_ccitt_unpack(s->avctx, src2, size, dst, lines, stride,
639                           s->compr, s->fax_opts);
640     if (s->bpp < 8 && s->avctx->pix_fmt == AV_PIX_FMT_PAL8)
641         for (line = 0; line < lines; line++) {
642             horizontal_fill(s, s->bpp, dst, 1, dst, 0, width, 0);
643             dst += stride;
644         }
645     return ret;
646 }
647 
dng_decode_jpeg(AVCodecContext * avctx,AVFrame * frame,int tile_byte_count,int dst_x,int dst_y,int w,int h)648 static int dng_decode_jpeg(AVCodecContext *avctx, AVFrame *frame,
649                            int tile_byte_count, int dst_x, int dst_y, int w, int h)
650 {
651     TiffContext *s = avctx->priv_data;
652     uint8_t *dst_data, *src_data;
653     uint32_t dst_offset; /* offset from dst buffer in pixels */
654     int is_single_comp, is_u16, pixel_size;
655     int ret;
656 
657     if (tile_byte_count < 0 || tile_byte_count > bytestream2_get_bytes_left(&s->gb))
658         return AVERROR_INVALIDDATA;
659 
660     /* Prepare a packet and send to the MJPEG decoder */
661     av_packet_unref(s->jpkt);
662     s->jpkt->data = (uint8_t*)s->gb.buffer;
663     s->jpkt->size = tile_byte_count;
664 
665     if (s->is_bayer) {
666         MJpegDecodeContext *mjpegdecctx = s->avctx_mjpeg->priv_data;
667         /* We have to set this information here, there is no way to know if a given JPEG is a DNG-embedded
668            image or not from its own data (and we need that information when decoding it). */
669         mjpegdecctx->bayer = 1;
670     }
671 
672     ret = avcodec_send_packet(s->avctx_mjpeg, s->jpkt);
673     if (ret < 0) {
674         av_log(avctx, AV_LOG_ERROR, "Error submitting a packet for decoding\n");
675         return ret;
676     }
677 
678     ret = avcodec_receive_frame(s->avctx_mjpeg, s->jpgframe);
679     if (ret < 0) {
680         av_log(avctx, AV_LOG_ERROR, "JPEG decoding error: %s.\n", av_err2str(ret));
681 
682         /* Normally skip, error if explode */
683         if (avctx->err_recognition & AV_EF_EXPLODE)
684             return AVERROR_INVALIDDATA;
685         else
686             return 0;
687     }
688 
689     is_u16 = (s->bpp > 8);
690 
691     /* Copy the outputted tile's pixels from 'jpgframe' to 'frame' (final buffer) */
692 
693     if (s->jpgframe->width  != s->avctx_mjpeg->width  ||
694         s->jpgframe->height != s->avctx_mjpeg->height ||
695         s->jpgframe->format != s->avctx_mjpeg->pix_fmt)
696         return AVERROR_INVALIDDATA;
697 
698     /* See dng_blit for explanation */
699     if (s->avctx_mjpeg->width  == w * 2 &&
700         s->avctx_mjpeg->height == h / 2 &&
701         s->avctx_mjpeg->pix_fmt == AV_PIX_FMT_GRAY16LE) {
702         is_single_comp = 1;
703     } else if (s->avctx_mjpeg->width  >= w &&
704                s->avctx_mjpeg->height >= h &&
705                s->avctx_mjpeg->pix_fmt == (is_u16 ? AV_PIX_FMT_GRAY16 : AV_PIX_FMT_GRAY8)
706               ) {
707         is_single_comp = 0;
708     } else
709         return AVERROR_INVALIDDATA;
710 
711     pixel_size = (is_u16 ? sizeof(uint16_t) : sizeof(uint8_t));
712 
713     if (is_single_comp && !is_u16) {
714         av_log(s->avctx, AV_LOG_ERROR, "DNGs with bpp <= 8 and 1 component are unsupported\n");
715         av_frame_unref(s->jpgframe);
716         return AVERROR_PATCHWELCOME;
717     }
718 
719     dst_offset = dst_x + frame->linesize[0] * dst_y / pixel_size;
720     dst_data = frame->data[0] + dst_offset * pixel_size;
721     src_data = s->jpgframe->data[0];
722 
723     dng_blit(s,
724              dst_data,
725              frame->linesize[0] / pixel_size,
726              src_data,
727              s->jpgframe->linesize[0] / pixel_size,
728              w,
729              h,
730              is_single_comp,
731              is_u16);
732 
733     av_frame_unref(s->jpgframe);
734 
735     return 0;
736 }
737 
dng_decode_strip(AVCodecContext * avctx,AVFrame * frame)738 static int dng_decode_strip(AVCodecContext *avctx, AVFrame *frame)
739 {
740     TiffContext *s = avctx->priv_data;
741 
742     s->jpgframe->width  = s->width;
743     s->jpgframe->height = s->height;
744 
745     s->avctx_mjpeg->width = s->width;
746     s->avctx_mjpeg->height = s->height;
747 
748     return dng_decode_jpeg(avctx, frame, s->stripsize, 0, 0, s->width, s->height);
749 }
750 
tiff_unpack_strip(TiffContext * s,AVFrame * p,uint8_t * dst,int stride,const uint8_t * src,int size,int strip_start,int lines)751 static int tiff_unpack_strip(TiffContext *s, AVFrame *p, uint8_t *dst, int stride,
752                              const uint8_t *src, int size, int strip_start, int lines)
753 {
754     PutByteContext pb;
755     int c, line, pixels, code, ret;
756     const uint8_t *ssrc = src;
757     int width = ((s->width * s->bpp) + 7) >> 3;
758     const AVPixFmtDescriptor *desc = av_pix_fmt_desc_get(p->format);
759     int is_yuv = !(desc->flags & AV_PIX_FMT_FLAG_RGB) &&
760                  (desc->flags & AV_PIX_FMT_FLAG_PLANAR) &&
761                  desc->nb_components >= 3;
762     int is_dng;
763 
764     if (s->planar)
765         width /= s->bppcount;
766 
767     if (size <= 0)
768         return AVERROR_INVALIDDATA;
769 
770     if (is_yuv) {
771         int bytes_per_row = (((s->width - 1) / s->subsampling[0] + 1) * s->bpp *
772                             s->subsampling[0] * s->subsampling[1] + 7) >> 3;
773         av_fast_padded_malloc(&s->yuv_line, &s->yuv_line_size, bytes_per_row);
774         if (s->yuv_line == NULL) {
775             av_log(s->avctx, AV_LOG_ERROR, "Not enough memory\n");
776             return AVERROR(ENOMEM);
777         }
778         dst = s->yuv_line;
779         stride = 0;
780 
781         width = (s->width - 1) / s->subsampling[0] + 1;
782         width = width * s->subsampling[0] * s->subsampling[1] + 2*width;
783         av_assert0(width <= bytes_per_row);
784         av_assert0(s->bpp == 24);
785     }
786     if (s->is_bayer) {
787         av_assert0(width == (s->bpp * s->width + 7) >> 3);
788     }
789     if (p->format == AV_PIX_FMT_GRAY12) {
790         av_fast_padded_malloc(&s->yuv_line, &s->yuv_line_size, width);
791         if (s->yuv_line == NULL) {
792             av_log(s->avctx, AV_LOG_ERROR, "Not enough memory\n");
793             return AVERROR(ENOMEM);
794         }
795         dst = s->yuv_line;
796         stride = 0;
797     }
798 
799     if (s->compr == TIFF_DEFLATE || s->compr == TIFF_ADOBE_DEFLATE) {
800 #if CONFIG_ZLIB
801         return tiff_unpack_zlib(s, p, dst, stride, src, size, width, lines,
802                                 strip_start, is_yuv);
803 #else
804         av_log(s->avctx, AV_LOG_ERROR,
805                "zlib support not enabled, "
806                "deflate compression not supported\n");
807         return AVERROR(ENOSYS);
808 #endif
809     }
810     if (s->compr == TIFF_LZMA) {
811 #if CONFIG_LZMA
812         return tiff_unpack_lzma(s, p, dst, stride, src, size, width, lines,
813                                 strip_start, is_yuv);
814 #else
815         av_log(s->avctx, AV_LOG_ERROR,
816                "LZMA support not enabled\n");
817         return AVERROR(ENOSYS);
818 #endif
819     }
820     if (s->compr == TIFF_LZW) {
821         if (s->fill_order) {
822             if ((ret = deinvert_buffer(s, src, size)) < 0)
823                 return ret;
824             ssrc = src = s->deinvert_buf;
825         }
826         if (size > 1 && !src[0] && (src[1]&1)) {
827             av_log(s->avctx, AV_LOG_ERROR, "Old style LZW is unsupported\n");
828         }
829         if ((ret = ff_lzw_decode_init(s->lzw, 8, src, size, FF_LZW_TIFF)) < 0) {
830             av_log(s->avctx, AV_LOG_ERROR, "Error initializing LZW decoder\n");
831             return ret;
832         }
833         for (line = 0; line < lines; line++) {
834             pixels = ff_lzw_decode(s->lzw, dst, width);
835             if (pixels < width) {
836                 av_log(s->avctx, AV_LOG_ERROR, "Decoded only %i bytes of %i\n",
837                        pixels, width);
838                 return AVERROR_INVALIDDATA;
839             }
840             if (s->bpp < 8 && s->avctx->pix_fmt == AV_PIX_FMT_PAL8)
841                 horizontal_fill(s, s->bpp, dst, 1, dst, 0, width, 0);
842             if (is_yuv) {
843                 unpack_yuv(s, p, dst, strip_start + line);
844                 line += s->subsampling[1] - 1;
845             } else if (p->format == AV_PIX_FMT_GRAY12) {
846                 unpack_gray(s, p, dst, strip_start + line, width, s->bpp);
847             }
848             dst += stride;
849         }
850         return 0;
851     }
852     if (s->compr == TIFF_CCITT_RLE ||
853         s->compr == TIFF_G3        ||
854         s->compr == TIFF_G4) {
855         if (is_yuv || p->format == AV_PIX_FMT_GRAY12)
856             return AVERROR_INVALIDDATA;
857 
858         return tiff_unpack_fax(s, dst, stride, src, size, width, lines);
859     }
860 
861     bytestream2_init(&s->gb, src, size);
862     bytestream2_init_writer(&pb, dst, is_yuv ? s->yuv_line_size : (stride * lines));
863 
864     is_dng = (s->tiff_type == TIFF_TYPE_DNG || s->tiff_type == TIFF_TYPE_CINEMADNG);
865 
866     /* Decode JPEG-encoded DNGs with strips */
867     if (s->compr == TIFF_NEWJPEG && is_dng) {
868         if (s->strips > 1) {
869             av_log(s->avctx, AV_LOG_ERROR, "More than one DNG JPEG strips unsupported\n");
870             return AVERROR_PATCHWELCOME;
871         }
872         if ((ret = dng_decode_strip(s->avctx, p)) < 0)
873             return ret;
874         return 0;
875     }
876 
877     if (is_dng && stride == 0)
878         return AVERROR_INVALIDDATA;
879 
880     for (line = 0; line < lines; line++) {
881         if (src - ssrc > size) {
882             av_log(s->avctx, AV_LOG_ERROR, "Source data overread\n");
883             return AVERROR_INVALIDDATA;
884         }
885 
886         if (bytestream2_get_bytes_left(&s->gb) == 0 || bytestream2_get_eof(&pb))
887             break;
888         bytestream2_seek_p(&pb, stride * line, SEEK_SET);
889         switch (s->compr) {
890         case TIFF_RAW:
891             if (ssrc + size - src < width)
892                 return AVERROR_INVALIDDATA;
893 
894             if (!s->fill_order) {
895                 horizontal_fill(s, s->bpp * (s->avctx->pix_fmt == AV_PIX_FMT_PAL8 || s->is_bayer),
896                                 dst, 1, src, 0, width, 0);
897             } else {
898                 int i;
899                 for (i = 0; i < width; i++)
900                     dst[i] = ff_reverse[src[i]];
901             }
902 
903             /* Color processing for DNG images with uncompressed strips (non-tiled) */
904             if (is_dng) {
905                 int is_u16, pixel_size_bytes, pixel_size_bits, elements;
906 
907                 is_u16 = (s->bpp / s->bppcount > 8);
908                 pixel_size_bits = (is_u16 ? 16 : 8);
909                 pixel_size_bytes = (is_u16 ? sizeof(uint16_t) : sizeof(uint8_t));
910 
911                 elements = width / pixel_size_bytes * pixel_size_bits / s->bpp * s->bppcount; // need to account for [1, 16] bpp
912                 av_assert0 (elements * pixel_size_bytes <= FFABS(stride));
913                 dng_blit(s,
914                          dst,
915                          0, // no stride, only 1 line
916                          dst,
917                          0, // no stride, only 1 line
918                          elements,
919                          1,
920                          0, // single-component variation is only preset in JPEG-encoded DNGs
921                          is_u16);
922             }
923 
924             src += width;
925             break;
926         case TIFF_PACKBITS:
927             for (pixels = 0; pixels < width;) {
928                 if (ssrc + size - src < 2) {
929                     av_log(s->avctx, AV_LOG_ERROR, "Read went out of bounds\n");
930                     return AVERROR_INVALIDDATA;
931                 }
932                 code = s->fill_order ? (int8_t) ff_reverse[*src++]: (int8_t) *src++;
933                 if (code >= 0) {
934                     code++;
935                     if (pixels + code > width ||
936                         ssrc + size - src < code) {
937                         av_log(s->avctx, AV_LOG_ERROR,
938                                "Copy went out of bounds\n");
939                         return AVERROR_INVALIDDATA;
940                     }
941                     horizontal_fill(s, s->bpp * (s->avctx->pix_fmt == AV_PIX_FMT_PAL8),
942                                     dst, 1, src, 0, code, pixels);
943                     src    += code;
944                     pixels += code;
945                 } else if (code != -128) { // -127..-1
946                     code = (-code) + 1;
947                     if (pixels + code > width) {
948                         av_log(s->avctx, AV_LOG_ERROR,
949                                "Run went out of bounds\n");
950                         return AVERROR_INVALIDDATA;
951                     }
952                     c = *src++;
953                     horizontal_fill(s, s->bpp * (s->avctx->pix_fmt == AV_PIX_FMT_PAL8),
954                                     dst, 0, NULL, c, code, pixels);
955                     pixels += code;
956                 }
957             }
958             if (s->fill_order) {
959                 int i;
960                 for (i = 0; i < width; i++)
961                     dst[i] = ff_reverse[dst[i]];
962             }
963             break;
964         }
965         if (is_yuv) {
966             unpack_yuv(s, p, dst, strip_start + line);
967             line += s->subsampling[1] - 1;
968         } else if (p->format == AV_PIX_FMT_GRAY12) {
969             unpack_gray(s, p, dst, strip_start + line, width, s->bpp);
970         }
971         dst += stride;
972     }
973     return 0;
974 }
975 
dng_decode_tiles(AVCodecContext * avctx,AVFrame * frame,const AVPacket * avpkt)976 static int dng_decode_tiles(AVCodecContext *avctx, AVFrame *frame,
977                             const AVPacket *avpkt)
978 {
979     TiffContext *s = avctx->priv_data;
980     int tile_idx;
981     int tile_offset_offset, tile_offset;
982     int tile_byte_count_offset, tile_byte_count;
983     int tile_count_x, tile_count_y;
984     int tile_width, tile_length;
985     int has_width_leftover, has_height_leftover;
986     int tile_x = 0, tile_y = 0;
987     int pos_x = 0, pos_y = 0;
988     int ret;
989 
990     s->jpgframe->width  = s->tile_width;
991     s->jpgframe->height = s->tile_length;
992 
993     s->avctx_mjpeg->width = s->tile_width;
994     s->avctx_mjpeg->height = s->tile_length;
995 
996     has_width_leftover = (s->width % s->tile_width != 0);
997     has_height_leftover = (s->height % s->tile_length != 0);
998 
999     /* Calculate tile counts (round up) */
1000     tile_count_x = (s->width + s->tile_width - 1) / s->tile_width;
1001     tile_count_y = (s->height + s->tile_length - 1) / s->tile_length;
1002 
1003     /* Iterate over the number of tiles */
1004     for (tile_idx = 0; tile_idx < s->tile_count; tile_idx++) {
1005         tile_x = tile_idx % tile_count_x;
1006         tile_y = tile_idx / tile_count_x;
1007 
1008         if (has_width_leftover && tile_x == tile_count_x - 1) // If on the right-most tile
1009             tile_width = s->width % s->tile_width;
1010         else
1011             tile_width = s->tile_width;
1012 
1013         if (has_height_leftover && tile_y == tile_count_y - 1) // If on the bottom-most tile
1014             tile_length = s->height % s->tile_length;
1015         else
1016             tile_length = s->tile_length;
1017 
1018         /* Read tile offset */
1019         tile_offset_offset = s->tile_offsets_offset + tile_idx * sizeof(int);
1020         bytestream2_seek(&s->gb, tile_offset_offset, SEEK_SET);
1021         tile_offset = ff_tget_long(&s->gb, s->le);
1022 
1023         /* Read tile byte size */
1024         tile_byte_count_offset = s->tile_byte_counts_offset + tile_idx * sizeof(int);
1025         bytestream2_seek(&s->gb, tile_byte_count_offset, SEEK_SET);
1026         tile_byte_count = ff_tget_long(&s->gb, s->le);
1027 
1028         /* Seek to tile data */
1029         bytestream2_seek(&s->gb, tile_offset, SEEK_SET);
1030 
1031         /* Decode JPEG tile and copy it in the reference frame */
1032         ret = dng_decode_jpeg(avctx, frame, tile_byte_count, pos_x, pos_y, tile_width, tile_length);
1033 
1034         if (ret < 0)
1035             return ret;
1036 
1037         /* Advance current positions */
1038         pos_x += tile_width;
1039         if (tile_x == tile_count_x - 1) { // If on the right edge
1040             pos_x = 0;
1041             pos_y += tile_length;
1042         }
1043     }
1044 
1045     /* Frame is ready to be output */
1046     frame->pict_type = AV_PICTURE_TYPE_I;
1047     frame->key_frame = 1;
1048 
1049     return avpkt->size;
1050 }
1051 
init_image(TiffContext * s,ThreadFrame * frame)1052 static int init_image(TiffContext *s, ThreadFrame *frame)
1053 {
1054     int ret;
1055     int create_gray_palette = 0;
1056 
1057     // make sure there is no aliasing in the following switch
1058     if (s->bpp >= 100 || s->bppcount >= 10) {
1059         av_log(s->avctx, AV_LOG_ERROR,
1060                "Unsupported image parameters: bpp=%d, bppcount=%d\n",
1061                s->bpp, s->bppcount);
1062         return AVERROR_INVALIDDATA;
1063     }
1064 
1065     switch (s->planar * 1000 + s->bpp * 10 + s->bppcount + s->is_bayer * 10000) {
1066     case 11:
1067         if (!s->palette_is_set) {
1068             s->avctx->pix_fmt = AV_PIX_FMT_MONOBLACK;
1069             break;
1070         }
1071     case 21:
1072     case 41:
1073         s->avctx->pix_fmt = AV_PIX_FMT_PAL8;
1074         if (!s->palette_is_set) {
1075             create_gray_palette = 1;
1076         }
1077         break;
1078     case 81:
1079         s->avctx->pix_fmt = s->palette_is_set ? AV_PIX_FMT_PAL8 : AV_PIX_FMT_GRAY8;
1080         break;
1081     case 121:
1082         s->avctx->pix_fmt = AV_PIX_FMT_GRAY12;
1083         break;
1084     case 10081:
1085         switch (AV_RL32(s->pattern)) {
1086         case 0x02010100:
1087             s->avctx->pix_fmt = AV_PIX_FMT_BAYER_RGGB8;
1088             break;
1089         case 0x00010102:
1090             s->avctx->pix_fmt = AV_PIX_FMT_BAYER_BGGR8;
1091             break;
1092         case 0x01000201:
1093             s->avctx->pix_fmt = AV_PIX_FMT_BAYER_GBRG8;
1094             break;
1095         case 0x01020001:
1096             s->avctx->pix_fmt = AV_PIX_FMT_BAYER_GRBG8;
1097             break;
1098         default:
1099             av_log(s->avctx, AV_LOG_ERROR, "Unsupported Bayer pattern: 0x%X\n",
1100                    AV_RL32(s->pattern));
1101             return AVERROR_PATCHWELCOME;
1102         }
1103         break;
1104     case 10101:
1105     case 10121:
1106     case 10141:
1107     case 10161:
1108         switch (AV_RL32(s->pattern)) {
1109         case 0x02010100:
1110             s->avctx->pix_fmt = AV_PIX_FMT_BAYER_RGGB16;
1111             break;
1112         case 0x00010102:
1113             s->avctx->pix_fmt = AV_PIX_FMT_BAYER_BGGR16;
1114             break;
1115         case 0x01000201:
1116             s->avctx->pix_fmt = AV_PIX_FMT_BAYER_GBRG16;
1117             break;
1118         case 0x01020001:
1119             s->avctx->pix_fmt = AV_PIX_FMT_BAYER_GRBG16;
1120             break;
1121         default:
1122             av_log(s->avctx, AV_LOG_ERROR, "Unsupported Bayer pattern: 0x%X\n",
1123                    AV_RL32(s->pattern));
1124             return AVERROR_PATCHWELCOME;
1125         }
1126         break;
1127     case 243:
1128         if (s->photometric == TIFF_PHOTOMETRIC_YCBCR) {
1129             if (s->subsampling[0] == 1 && s->subsampling[1] == 1) {
1130                 s->avctx->pix_fmt = AV_PIX_FMT_YUV444P;
1131             } else if (s->subsampling[0] == 2 && s->subsampling[1] == 1) {
1132                 s->avctx->pix_fmt = AV_PIX_FMT_YUV422P;
1133             } else if (s->subsampling[0] == 4 && s->subsampling[1] == 1) {
1134                 s->avctx->pix_fmt = AV_PIX_FMT_YUV411P;
1135             } else if (s->subsampling[0] == 1 && s->subsampling[1] == 2) {
1136                 s->avctx->pix_fmt = AV_PIX_FMT_YUV440P;
1137             } else if (s->subsampling[0] == 2 && s->subsampling[1] == 2) {
1138                 s->avctx->pix_fmt = AV_PIX_FMT_YUV420P;
1139             } else if (s->subsampling[0] == 4 && s->subsampling[1] == 4) {
1140                 s->avctx->pix_fmt = AV_PIX_FMT_YUV410P;
1141             } else {
1142                 av_log(s->avctx, AV_LOG_ERROR, "Unsupported YCbCr subsampling\n");
1143                 return AVERROR_PATCHWELCOME;
1144             }
1145         } else
1146             s->avctx->pix_fmt = AV_PIX_FMT_RGB24;
1147         break;
1148     case 161:
1149         s->avctx->pix_fmt = s->le ? AV_PIX_FMT_GRAY16LE : AV_PIX_FMT_GRAY16BE;
1150         break;
1151     case 162:
1152         s->avctx->pix_fmt = AV_PIX_FMT_YA8;
1153         break;
1154     case 322:
1155         s->avctx->pix_fmt = s->le ? AV_PIX_FMT_YA16LE : AV_PIX_FMT_YA16BE;
1156         break;
1157     case 324:
1158         s->avctx->pix_fmt = s->photometric == TIFF_PHOTOMETRIC_SEPARATED ? AV_PIX_FMT_RGB0 : AV_PIX_FMT_RGBA;
1159         break;
1160     case 405:
1161         if (s->photometric == TIFF_PHOTOMETRIC_SEPARATED)
1162             s->avctx->pix_fmt = AV_PIX_FMT_RGBA;
1163         else {
1164             av_log(s->avctx, AV_LOG_ERROR,
1165                 "bpp=40 without PHOTOMETRIC_SEPARATED is unsupported\n");
1166             return AVERROR_PATCHWELCOME;
1167         }
1168         break;
1169     case 483:
1170         s->avctx->pix_fmt = s->le ? AV_PIX_FMT_RGB48LE  : AV_PIX_FMT_RGB48BE;
1171         break;
1172     case 644:
1173         s->avctx->pix_fmt = s->le ? AV_PIX_FMT_RGBA64LE  : AV_PIX_FMT_RGBA64BE;
1174         break;
1175     case 1243:
1176         s->avctx->pix_fmt = AV_PIX_FMT_GBRP;
1177         break;
1178     case 1324:
1179         s->avctx->pix_fmt = AV_PIX_FMT_GBRAP;
1180         break;
1181     case 1483:
1182         s->avctx->pix_fmt = s->le ? AV_PIX_FMT_GBRP16LE : AV_PIX_FMT_GBRP16BE;
1183         break;
1184     case 1644:
1185         s->avctx->pix_fmt = s->le ? AV_PIX_FMT_GBRAP16LE : AV_PIX_FMT_GBRAP16BE;
1186         break;
1187     default:
1188         av_log(s->avctx, AV_LOG_ERROR,
1189                "This format is not supported (bpp=%d, bppcount=%d)\n",
1190                s->bpp, s->bppcount);
1191         return AVERROR_INVALIDDATA;
1192     }
1193 
1194     if (s->photometric == TIFF_PHOTOMETRIC_YCBCR) {
1195         const AVPixFmtDescriptor *desc = av_pix_fmt_desc_get(s->avctx->pix_fmt);
1196         if((desc->flags & AV_PIX_FMT_FLAG_RGB) ||
1197            !(desc->flags & AV_PIX_FMT_FLAG_PLANAR) ||
1198            desc->nb_components < 3) {
1199             av_log(s->avctx, AV_LOG_ERROR, "Unsupported YCbCr variant\n");
1200             return AVERROR_INVALIDDATA;
1201         }
1202     }
1203 
1204     if (s->width != s->avctx->width || s->height != s->avctx->height) {
1205         ret = ff_set_dimensions(s->avctx, s->width, s->height);
1206         if (ret < 0)
1207             return ret;
1208     }
1209     if ((ret = ff_thread_get_buffer(s->avctx, frame, 0)) < 0)
1210         return ret;
1211     if (s->avctx->pix_fmt == AV_PIX_FMT_PAL8) {
1212         if (!create_gray_palette)
1213             memcpy(frame->f->data[1], s->palette, sizeof(s->palette));
1214         else {
1215             /* make default grayscale pal */
1216             int i;
1217             uint32_t *pal = (uint32_t *)frame->f->data[1];
1218             for (i = 0; i < 1<<s->bpp; i++)
1219                 pal[i] = 0xFFU << 24 | i * 255 / ((1<<s->bpp) - 1) * 0x010101;
1220         }
1221     }
1222     return 0;
1223 }
1224 
set_sar(TiffContext * s,unsigned tag,unsigned num,unsigned den)1225 static void set_sar(TiffContext *s, unsigned tag, unsigned num, unsigned den)
1226 {
1227     int offset = tag == TIFF_YRES ? 2 : 0;
1228     s->res[offset++] = num;
1229     s->res[offset]   = den;
1230     if (s->res[0] && s->res[1] && s->res[2] && s->res[3]) {
1231         uint64_t num = s->res[2] * (uint64_t)s->res[1];
1232         uint64_t den = s->res[0] * (uint64_t)s->res[3];
1233         if (num > INT64_MAX || den > INT64_MAX) {
1234             num = num >> 1;
1235             den = den >> 1;
1236         }
1237         av_reduce(&s->avctx->sample_aspect_ratio.num, &s->avctx->sample_aspect_ratio.den,
1238                   num, den, INT32_MAX);
1239         if (!s->avctx->sample_aspect_ratio.den)
1240             s->avctx->sample_aspect_ratio = (AVRational) {0, 1};
1241     }
1242 }
1243 
tiff_decode_tag(TiffContext * s,AVFrame * frame)1244 static int tiff_decode_tag(TiffContext *s, AVFrame *frame)
1245 {
1246     AVFrameSideData *sd;
1247     GetByteContext gb_temp;
1248     unsigned tag, type, count, off, value = 0, value2 = 1; // value2 is a denominator so init. to 1
1249     int i, start;
1250     int pos;
1251     int ret;
1252     double *dp;
1253 
1254     ret = ff_tread_tag(&s->gb, s->le, &tag, &type, &count, &start);
1255     if (ret < 0) {
1256         goto end;
1257     }
1258     if (tag <= s->last_tag)
1259         return AVERROR_INVALIDDATA;
1260 
1261     // We ignore TIFF_STRIP_SIZE as it is sometimes in the logic but wrong order around TIFF_STRIP_OFFS
1262     if (tag != TIFF_STRIP_SIZE)
1263         s->last_tag = tag;
1264 
1265     off = bytestream2_tell(&s->gb);
1266     if (count == 1) {
1267         switch (type) {
1268         case TIFF_BYTE:
1269         case TIFF_SHORT:
1270         case TIFF_LONG:
1271             value = ff_tget(&s->gb, type, s->le);
1272             break;
1273         case TIFF_RATIONAL:
1274             value  = ff_tget(&s->gb, TIFF_LONG, s->le);
1275             value2 = ff_tget(&s->gb, TIFF_LONG, s->le);
1276             if (!value2) {
1277                 av_log(s->avctx, AV_LOG_ERROR, "Invalid denominator in rational\n");
1278                 return AVERROR_INVALIDDATA;
1279             }
1280 
1281             break;
1282         case TIFF_STRING:
1283             if (count <= 4) {
1284                 break;
1285             }
1286         default:
1287             value = UINT_MAX;
1288         }
1289     }
1290 
1291     switch (tag) {
1292     case TIFF_SUBFILE:
1293         s->is_thumbnail = (value != 0);
1294         break;
1295     case TIFF_WIDTH:
1296         s->width = value;
1297         break;
1298     case TIFF_HEIGHT:
1299         s->height = value;
1300         break;
1301     case TIFF_BPP:
1302         if (count > 5 || count <= 0) {
1303             av_log(s->avctx, AV_LOG_ERROR,
1304                    "This format is not supported (bpp=%d, %d components)\n",
1305                    value, count);
1306             return AVERROR_INVALIDDATA;
1307         }
1308         s->bppcount = count;
1309         if (count == 1)
1310             s->bpp = value;
1311         else {
1312             switch (type) {
1313             case TIFF_BYTE:
1314             case TIFF_SHORT:
1315             case TIFF_LONG:
1316                 s->bpp = 0;
1317                 if (bytestream2_get_bytes_left(&s->gb) < type_sizes[type] * count)
1318                     return AVERROR_INVALIDDATA;
1319                 for (i = 0; i < count; i++)
1320                     s->bpp += ff_tget(&s->gb, type, s->le);
1321                 break;
1322             default:
1323                 s->bpp = -1;
1324             }
1325         }
1326         break;
1327     case TIFF_SAMPLES_PER_PIXEL:
1328         if (count != 1) {
1329             av_log(s->avctx, AV_LOG_ERROR,
1330                    "Samples per pixel requires a single value, many provided\n");
1331             return AVERROR_INVALIDDATA;
1332         }
1333         if (value > 5 || value <= 0) {
1334             av_log(s->avctx, AV_LOG_ERROR,
1335                    "Invalid samples per pixel %d\n", value);
1336             return AVERROR_INVALIDDATA;
1337         }
1338         if (s->bppcount == 1)
1339             s->bpp *= value;
1340         s->bppcount = value;
1341         break;
1342     case TIFF_COMPR:
1343         s->compr     = value;
1344         av_log(s->avctx, AV_LOG_DEBUG, "compression: %d\n", s->compr);
1345         s->predictor = 0;
1346         switch (s->compr) {
1347         case TIFF_RAW:
1348         case TIFF_PACKBITS:
1349         case TIFF_LZW:
1350         case TIFF_CCITT_RLE:
1351             break;
1352         case TIFF_G3:
1353         case TIFF_G4:
1354             s->fax_opts = 0;
1355             break;
1356         case TIFF_DEFLATE:
1357         case TIFF_ADOBE_DEFLATE:
1358 #if CONFIG_ZLIB
1359             break;
1360 #else
1361             av_log(s->avctx, AV_LOG_ERROR, "Deflate: ZLib not compiled in\n");
1362             return AVERROR(ENOSYS);
1363 #endif
1364         case TIFF_JPEG:
1365         case TIFF_NEWJPEG:
1366             s->is_jpeg = 1;
1367             break;
1368         case TIFF_LZMA:
1369 #if CONFIG_LZMA
1370             break;
1371 #else
1372             av_log(s->avctx, AV_LOG_ERROR, "LZMA not compiled in\n");
1373             return AVERROR(ENOSYS);
1374 #endif
1375         default:
1376             av_log(s->avctx, AV_LOG_ERROR, "Unknown compression method %i\n",
1377                    s->compr);
1378             return AVERROR_INVALIDDATA;
1379         }
1380         break;
1381     case TIFF_ROWSPERSTRIP:
1382         if (!value || (type == TIFF_LONG && value == UINT_MAX))
1383             value = s->height;
1384         s->rps = FFMIN(value, s->height);
1385         break;
1386     case TIFF_STRIP_OFFS:
1387         if (count == 1) {
1388             if (value > INT_MAX) {
1389                 av_log(s->avctx, AV_LOG_ERROR,
1390                     "strippos %u too large\n", value);
1391                 return AVERROR_INVALIDDATA;
1392             }
1393             s->strippos = 0;
1394             s->stripoff = value;
1395         } else
1396             s->strippos = off;
1397         s->strips = count;
1398         if (s->strips == 1)
1399             s->rps = s->height;
1400         s->sot = type;
1401         break;
1402     case TIFF_STRIP_SIZE:
1403         if (count == 1) {
1404             if (value > INT_MAX) {
1405                 av_log(s->avctx, AV_LOG_ERROR,
1406                     "stripsize %u too large\n", value);
1407                 return AVERROR_INVALIDDATA;
1408             }
1409             s->stripsizesoff = 0;
1410             s->stripsize     = value;
1411             s->strips        = 1;
1412         } else {
1413             s->stripsizesoff = off;
1414         }
1415         s->strips = count;
1416         s->sstype = type;
1417         break;
1418     case TIFF_XRES:
1419     case TIFF_YRES:
1420         set_sar(s, tag, value, value2);
1421         break;
1422     case TIFF_TILE_OFFSETS:
1423         s->tile_offsets_offset = off;
1424         s->tile_count = count;
1425         s->is_tiled = 1;
1426         break;
1427     case TIFF_TILE_BYTE_COUNTS:
1428         s->tile_byte_counts_offset = off;
1429         break;
1430     case TIFF_TILE_LENGTH:
1431         s->tile_length = value;
1432         break;
1433     case TIFF_TILE_WIDTH:
1434         s->tile_width = value;
1435         break;
1436     case TIFF_PREDICTOR:
1437         s->predictor = value;
1438         break;
1439     case TIFF_SUB_IFDS:
1440         if (count == 1)
1441             s->sub_ifd = value;
1442         else if (count > 1)
1443             s->sub_ifd = ff_tget(&s->gb, TIFF_LONG, s->le); /** Only get the first SubIFD */
1444         break;
1445     case DNG_LINEARIZATION_TABLE:
1446         if (count > FF_ARRAY_ELEMS(s->dng_lut))
1447             return AVERROR_INVALIDDATA;
1448         for (int i = 0; i < count; i++)
1449             s->dng_lut[i] = ff_tget(&s->gb, type, s->le);
1450         break;
1451     case DNG_BLACK_LEVEL:
1452         if (count > 1) {    /* Use the first value in the pattern (assume they're all the same) */
1453             if (type == TIFF_RATIONAL) {
1454                 value  = ff_tget(&s->gb, TIFF_LONG, s->le);
1455                 value2 = ff_tget(&s->gb, TIFF_LONG, s->le);
1456                 if (!value2) {
1457                     av_log(s->avctx, AV_LOG_ERROR, "Invalid black level denominator\n");
1458                     return AVERROR_INVALIDDATA;
1459                 }
1460 
1461                 s->black_level = value / value2;
1462             } else
1463                 s->black_level = ff_tget(&s->gb, type, s->le);
1464             av_log(s->avctx, AV_LOG_WARNING, "Assuming black level pattern values are identical\n");
1465         } else {
1466             s->black_level = value / value2;
1467         }
1468         break;
1469     case DNG_WHITE_LEVEL:
1470         s->white_level = value;
1471         break;
1472     case TIFF_CFA_PATTERN_DIM:
1473         if (count != 2 || (ff_tget(&s->gb, type, s->le) != 2 &&
1474                            ff_tget(&s->gb, type, s->le) != 2)) {
1475             av_log(s->avctx, AV_LOG_ERROR, "CFA Pattern dimensions are not 2x2\n");
1476             return AVERROR_INVALIDDATA;
1477         }
1478         break;
1479     case TIFF_CFA_PATTERN:
1480         s->is_bayer = 1;
1481         s->pattern[0] = ff_tget(&s->gb, type, s->le);
1482         s->pattern[1] = ff_tget(&s->gb, type, s->le);
1483         s->pattern[2] = ff_tget(&s->gb, type, s->le);
1484         s->pattern[3] = ff_tget(&s->gb, type, s->le);
1485         break;
1486     case TIFF_PHOTOMETRIC:
1487         switch (value) {
1488         case TIFF_PHOTOMETRIC_WHITE_IS_ZERO:
1489         case TIFF_PHOTOMETRIC_BLACK_IS_ZERO:
1490         case TIFF_PHOTOMETRIC_RGB:
1491         case TIFF_PHOTOMETRIC_PALETTE:
1492         case TIFF_PHOTOMETRIC_SEPARATED:
1493         case TIFF_PHOTOMETRIC_YCBCR:
1494         case TIFF_PHOTOMETRIC_CFA:
1495         case TIFF_PHOTOMETRIC_LINEAR_RAW: // Used by DNG images
1496             s->photometric = value;
1497             break;
1498         case TIFF_PHOTOMETRIC_ALPHA_MASK:
1499         case TIFF_PHOTOMETRIC_CIE_LAB:
1500         case TIFF_PHOTOMETRIC_ICC_LAB:
1501         case TIFF_PHOTOMETRIC_ITU_LAB:
1502         case TIFF_PHOTOMETRIC_LOG_L:
1503         case TIFF_PHOTOMETRIC_LOG_LUV:
1504             avpriv_report_missing_feature(s->avctx,
1505                                           "PhotometricInterpretation 0x%04X",
1506                                           value);
1507             return AVERROR_PATCHWELCOME;
1508         default:
1509             av_log(s->avctx, AV_LOG_ERROR, "PhotometricInterpretation %u is "
1510                    "unknown\n", value);
1511             return AVERROR_INVALIDDATA;
1512         }
1513         break;
1514     case TIFF_FILL_ORDER:
1515         if (value < 1 || value > 2) {
1516             av_log(s->avctx, AV_LOG_ERROR,
1517                    "Unknown FillOrder value %d, trying default one\n", value);
1518             value = 1;
1519         }
1520         s->fill_order = value - 1;
1521         break;
1522     case TIFF_PAL: {
1523         GetByteContext pal_gb[3];
1524         off = type_sizes[type];
1525         if (count / 3 > 256 ||
1526             bytestream2_get_bytes_left(&s->gb) < count / 3 * off * 3)
1527             return AVERROR_INVALIDDATA;
1528 
1529         pal_gb[0] = pal_gb[1] = pal_gb[2] = s->gb;
1530         bytestream2_skip(&pal_gb[1], count / 3 * off);
1531         bytestream2_skip(&pal_gb[2], count / 3 * off * 2);
1532 
1533         off = (type_sizes[type] - 1) << 3;
1534         if (off > 31U) {
1535             av_log(s->avctx, AV_LOG_ERROR, "palette shift %d is out of range\n", off);
1536             return AVERROR_INVALIDDATA;
1537         }
1538 
1539         for (i = 0; i < count / 3; i++) {
1540             uint32_t p = 0xFF000000;
1541             p |= (ff_tget(&pal_gb[0], type, s->le) >> off) << 16;
1542             p |= (ff_tget(&pal_gb[1], type, s->le) >> off) << 8;
1543             p |=  ff_tget(&pal_gb[2], type, s->le) >> off;
1544             s->palette[i] = p;
1545         }
1546         s->palette_is_set = 1;
1547         break;
1548     }
1549     case TIFF_PLANAR:
1550         s->planar = value == 2;
1551         break;
1552     case TIFF_YCBCR_SUBSAMPLING:
1553         if (count != 2) {
1554             av_log(s->avctx, AV_LOG_ERROR, "subsample count invalid\n");
1555             return AVERROR_INVALIDDATA;
1556         }
1557         for (i = 0; i < count; i++) {
1558             s->subsampling[i] = ff_tget(&s->gb, type, s->le);
1559             if (s->subsampling[i] <= 0) {
1560                 av_log(s->avctx, AV_LOG_ERROR, "subsampling %d is invalid\n", s->subsampling[i]);
1561                 s->subsampling[i] = 1;
1562                 return AVERROR_INVALIDDATA;
1563             }
1564         }
1565         break;
1566     case TIFF_T4OPTIONS:
1567         if (s->compr == TIFF_G3)
1568             s->fax_opts = value;
1569         break;
1570     case TIFF_T6OPTIONS:
1571         if (s->compr == TIFF_G4)
1572             s->fax_opts = value;
1573         break;
1574 #define ADD_METADATA(count, name, sep)\
1575     if ((ret = add_metadata(count, type, name, sep, s, frame)) < 0) {\
1576         av_log(s->avctx, AV_LOG_ERROR, "Error allocating temporary buffer\n");\
1577         goto end;\
1578     }
1579     case TIFF_MODEL_PIXEL_SCALE:
1580         ADD_METADATA(count, "ModelPixelScaleTag", NULL);
1581         break;
1582     case TIFF_MODEL_TRANSFORMATION:
1583         ADD_METADATA(count, "ModelTransformationTag", NULL);
1584         break;
1585     case TIFF_MODEL_TIEPOINT:
1586         ADD_METADATA(count, "ModelTiepointTag", NULL);
1587         break;
1588     case TIFF_GEO_KEY_DIRECTORY:
1589         if (s->geotag_count) {
1590             avpriv_request_sample(s->avctx, "Multiple geo key directories");
1591             return AVERROR_INVALIDDATA;
1592         }
1593         ADD_METADATA(1, "GeoTIFF_Version", NULL);
1594         ADD_METADATA(2, "GeoTIFF_Key_Revision", ".");
1595         s->geotag_count   = ff_tget_short(&s->gb, s->le);
1596         if (s->geotag_count > count / 4 - 1) {
1597             s->geotag_count = count / 4 - 1;
1598             av_log(s->avctx, AV_LOG_WARNING, "GeoTIFF key directory buffer shorter than specified\n");
1599         }
1600         if (   bytestream2_get_bytes_left(&s->gb) < s->geotag_count * sizeof(int16_t) * 4
1601             || s->geotag_count == 0) {
1602             s->geotag_count = 0;
1603             return -1;
1604         }
1605         s->geotags = av_mallocz_array(s->geotag_count, sizeof(TiffGeoTag));
1606         if (!s->geotags) {
1607             av_log(s->avctx, AV_LOG_ERROR, "Error allocating temporary buffer\n");
1608             s->geotag_count = 0;
1609             goto end;
1610         }
1611         for (i = 0; i < s->geotag_count; i++) {
1612             s->geotags[i].key    = ff_tget_short(&s->gb, s->le);
1613             s->geotags[i].type   = ff_tget_short(&s->gb, s->le);
1614             s->geotags[i].count  = ff_tget_short(&s->gb, s->le);
1615 
1616             if (!s->geotags[i].type)
1617                 s->geotags[i].val  = get_geokey_val(s->geotags[i].key, ff_tget_short(&s->gb, s->le));
1618             else
1619                 s->geotags[i].offset = ff_tget_short(&s->gb, s->le);
1620         }
1621         break;
1622     case TIFF_GEO_DOUBLE_PARAMS:
1623         if (count >= INT_MAX / sizeof(int64_t))
1624             return AVERROR_INVALIDDATA;
1625         if (bytestream2_get_bytes_left(&s->gb) < count * sizeof(int64_t))
1626             return AVERROR_INVALIDDATA;
1627         dp = av_malloc_array(count, sizeof(double));
1628         if (!dp) {
1629             av_log(s->avctx, AV_LOG_ERROR, "Error allocating temporary buffer\n");
1630             goto end;
1631         }
1632         for (i = 0; i < count; i++)
1633             dp[i] = ff_tget_double(&s->gb, s->le);
1634         for (i = 0; i < s->geotag_count; i++) {
1635             if (s->geotags[i].type == TIFF_GEO_DOUBLE_PARAMS) {
1636                 if (s->geotags[i].count == 0
1637                     || s->geotags[i].offset + s->geotags[i].count > count) {
1638                     av_log(s->avctx, AV_LOG_WARNING, "Invalid GeoTIFF key %d\n", s->geotags[i].key);
1639                 } else if (s->geotags[i].val) {
1640                     av_log(s->avctx, AV_LOG_WARNING, "Duplicate GeoTIFF key %d\n", s->geotags[i].key);
1641                 } else {
1642                     char *ap = doubles2str(&dp[s->geotags[i].offset], s->geotags[i].count, ", ");
1643                     if (!ap) {
1644                         av_log(s->avctx, AV_LOG_ERROR, "Error allocating temporary buffer\n");
1645                         av_freep(&dp);
1646                         return AVERROR(ENOMEM);
1647                     }
1648                     s->geotags[i].val = ap;
1649                 }
1650             }
1651         }
1652         av_freep(&dp);
1653         break;
1654     case TIFF_GEO_ASCII_PARAMS:
1655         pos = bytestream2_tell(&s->gb);
1656         for (i = 0; i < s->geotag_count; i++) {
1657             if (s->geotags[i].type == TIFF_GEO_ASCII_PARAMS) {
1658                 if (s->geotags[i].count == 0
1659                     || s->geotags[i].offset +  s->geotags[i].count > count) {
1660                     av_log(s->avctx, AV_LOG_WARNING, "Invalid GeoTIFF key %d\n", s->geotags[i].key);
1661                 } else {
1662                     char *ap;
1663 
1664                     bytestream2_seek(&s->gb, pos + s->geotags[i].offset, SEEK_SET);
1665                     if (bytestream2_get_bytes_left(&s->gb) < s->geotags[i].count)
1666                         return AVERROR_INVALIDDATA;
1667                     if (s->geotags[i].val)
1668                         return AVERROR_INVALIDDATA;
1669                     ap = av_malloc(s->geotags[i].count);
1670                     if (!ap) {
1671                         av_log(s->avctx, AV_LOG_ERROR, "Error allocating temporary buffer\n");
1672                         return AVERROR(ENOMEM);
1673                     }
1674                     bytestream2_get_bufferu(&s->gb, ap, s->geotags[i].count);
1675                     ap[s->geotags[i].count - 1] = '\0'; //replace the "|" delimiter with a 0 byte
1676                     s->geotags[i].val = ap;
1677                 }
1678             }
1679         }
1680         break;
1681     case TIFF_ICC_PROFILE:
1682         gb_temp = s->gb;
1683         bytestream2_seek(&gb_temp, SEEK_SET, off);
1684 
1685         if (bytestream2_get_bytes_left(&gb_temp) < count)
1686             return AVERROR_INVALIDDATA;
1687 
1688         sd = av_frame_new_side_data(frame, AV_FRAME_DATA_ICC_PROFILE, count);
1689         if (!sd)
1690             return AVERROR(ENOMEM);
1691 
1692         bytestream2_get_bufferu(&gb_temp, sd->data, count);
1693         break;
1694     case TIFF_ARTIST:
1695         ADD_METADATA(count, "artist", NULL);
1696         break;
1697     case TIFF_COPYRIGHT:
1698         ADD_METADATA(count, "copyright", NULL);
1699         break;
1700     case TIFF_DATE:
1701         ADD_METADATA(count, "date", NULL);
1702         break;
1703     case TIFF_DOCUMENT_NAME:
1704         ADD_METADATA(count, "document_name", NULL);
1705         break;
1706     case TIFF_HOST_COMPUTER:
1707         ADD_METADATA(count, "computer", NULL);
1708         break;
1709     case TIFF_IMAGE_DESCRIPTION:
1710         ADD_METADATA(count, "description", NULL);
1711         break;
1712     case TIFF_MAKE:
1713         ADD_METADATA(count, "make", NULL);
1714         break;
1715     case TIFF_MODEL:
1716         ADD_METADATA(count, "model", NULL);
1717         break;
1718     case TIFF_PAGE_NAME:
1719         ADD_METADATA(count, "page_name", NULL);
1720         break;
1721     case TIFF_PAGE_NUMBER:
1722         ADD_METADATA(count, "page_number", " / ");
1723         // need to seek back to re-read the page number
1724         bytestream2_seek(&s->gb, -count * sizeof(uint16_t), SEEK_CUR);
1725         // read the page number
1726         s->cur_page = ff_tget(&s->gb, TIFF_SHORT, s->le);
1727         // get back to where we were before the previous seek
1728         bytestream2_seek(&s->gb, count * sizeof(uint16_t) - sizeof(uint16_t), SEEK_CUR);
1729         break;
1730     case TIFF_SOFTWARE_NAME:
1731         ADD_METADATA(count, "software", NULL);
1732         break;
1733     case DNG_VERSION:
1734         if (count == 4) {
1735             unsigned int ver[4];
1736             ver[0] = ff_tget(&s->gb, type, s->le);
1737             ver[1] = ff_tget(&s->gb, type, s->le);
1738             ver[2] = ff_tget(&s->gb, type, s->le);
1739             ver[3] = ff_tget(&s->gb, type, s->le);
1740 
1741             av_log(s->avctx, AV_LOG_DEBUG, "DNG file, version %u.%u.%u.%u\n",
1742                 ver[0], ver[1], ver[2], ver[3]);
1743 
1744             tiff_set_type(s, TIFF_TYPE_DNG);
1745         }
1746         break;
1747     case CINEMADNG_TIME_CODES:
1748     case CINEMADNG_FRAME_RATE:
1749     case CINEMADNG_T_STOP:
1750     case CINEMADNG_REEL_NAME:
1751     case CINEMADNG_CAMERA_LABEL:
1752         tiff_set_type(s, TIFF_TYPE_CINEMADNG);
1753         break;
1754     default:
1755         if (s->avctx->err_recognition & AV_EF_EXPLODE) {
1756             av_log(s->avctx, AV_LOG_ERROR,
1757                    "Unknown or unsupported tag %d/0x%0X\n",
1758                    tag, tag);
1759             return AVERROR_INVALIDDATA;
1760         }
1761     }
1762 end:
1763     if (s->bpp > 64U) {
1764         av_log(s->avctx, AV_LOG_ERROR,
1765                 "This format is not supported (bpp=%d, %d components)\n",
1766                 s->bpp, count);
1767         s->bpp = 0;
1768         return AVERROR_INVALIDDATA;
1769     }
1770     bytestream2_seek(&s->gb, start, SEEK_SET);
1771     return 0;
1772 }
1773 
decode_frame(AVCodecContext * avctx,void * data,int * got_frame,AVPacket * avpkt)1774 static int decode_frame(AVCodecContext *avctx,
1775                         void *data, int *got_frame, AVPacket *avpkt)
1776 {
1777     TiffContext *const s = avctx->priv_data;
1778     AVFrame *const p = data;
1779     ThreadFrame frame = { .f = data };
1780     unsigned off, last_off;
1781     int le, ret, plane, planes;
1782     int i, j, entries, stride;
1783     unsigned soff, ssize;
1784     uint8_t *dst;
1785     GetByteContext stripsizes;
1786     GetByteContext stripdata;
1787     int retry_for_subifd, retry_for_page;
1788     int is_dng;
1789     int has_tile_bits, has_strip_bits;
1790 
1791     bytestream2_init(&s->gb, avpkt->data, avpkt->size);
1792 
1793     // parse image header
1794     if ((ret = ff_tdecode_header(&s->gb, &le, &off))) {
1795         av_log(avctx, AV_LOG_ERROR, "Invalid TIFF header\n");
1796         return ret;
1797     } else if (off >= UINT_MAX - 14 || avpkt->size < off + 14) {
1798         av_log(avctx, AV_LOG_ERROR, "IFD offset is greater than image size\n");
1799         return AVERROR_INVALIDDATA;
1800     }
1801     s->le          = le;
1802     // TIFF_BPP is not a required tag and defaults to 1
1803 
1804     s->tiff_type   = TIFF_TYPE_TIFF;
1805 again:
1806     s->is_thumbnail = 0;
1807     s->bppcount    = s->bpp = 1;
1808     s->photometric = TIFF_PHOTOMETRIC_NONE;
1809     s->compr       = TIFF_RAW;
1810     s->fill_order  = 0;
1811     s->white_level = 0;
1812     s->is_bayer    = 0;
1813     s->is_tiled    = 0;
1814     s->is_jpeg     = 0;
1815     s->cur_page    = 0;
1816     s->last_tag    = 0;
1817 
1818     for (i = 0; i < 65536; i++)
1819         s->dng_lut[i] = i;
1820 
1821     free_geotags(s);
1822 
1823     // Reset these offsets so we can tell if they were set this frame
1824     s->stripsizesoff = s->strippos = 0;
1825     /* parse image file directory */
1826     bytestream2_seek(&s->gb, off, SEEK_SET);
1827     entries = ff_tget_short(&s->gb, le);
1828     if (bytestream2_get_bytes_left(&s->gb) < entries * 12)
1829         return AVERROR_INVALIDDATA;
1830     for (i = 0; i < entries; i++) {
1831         if ((ret = tiff_decode_tag(s, p)) < 0)
1832             return ret;
1833     }
1834 
1835     if (s->get_thumbnail && !s->is_thumbnail) {
1836         av_log(avctx, AV_LOG_INFO, "No embedded thumbnail present\n");
1837         return AVERROR_EOF;
1838     }
1839 
1840     /** whether we should process this IFD's SubIFD */
1841     retry_for_subifd = s->sub_ifd && (s->get_subimage || (!s->get_thumbnail && s->is_thumbnail));
1842     /** whether we should process this multi-page IFD's next page */
1843     retry_for_page = s->get_page && s->cur_page + 1 < s->get_page;  // get_page is 1-indexed
1844 
1845     last_off = off;
1846     if (retry_for_page) {
1847         // set offset to the next IFD
1848         off = ff_tget_long(&s->gb, le);
1849     } else if (retry_for_subifd) {
1850         // set offset to the SubIFD
1851         off = s->sub_ifd;
1852     }
1853 
1854     if (retry_for_subifd || retry_for_page) {
1855         if (!off) {
1856             av_log(avctx, AV_LOG_ERROR, "Requested entry not found\n");
1857             return AVERROR_INVALIDDATA;
1858         }
1859         if (off <= last_off) {
1860             avpriv_request_sample(s->avctx, "non increasing IFD offset");
1861             return AVERROR_INVALIDDATA;
1862         }
1863         if (off >= UINT_MAX - 14 || avpkt->size < off + 14) {
1864             av_log(avctx, AV_LOG_ERROR, "IFD offset is greater than image size\n");
1865             return AVERROR_INVALIDDATA;
1866         }
1867         s->sub_ifd = 0;
1868         goto again;
1869     }
1870 
1871     /* At this point we've decided on which (Sub)IFD to process */
1872 
1873     is_dng = (s->tiff_type == TIFF_TYPE_DNG || s->tiff_type == TIFF_TYPE_CINEMADNG);
1874 
1875     for (i = 0; i<s->geotag_count; i++) {
1876         const char *keyname = get_geokey_name(s->geotags[i].key);
1877         if (!keyname) {
1878             av_log(avctx, AV_LOG_WARNING, "Unknown or unsupported GeoTIFF key %d\n", s->geotags[i].key);
1879             continue;
1880         }
1881         if (get_geokey_type(s->geotags[i].key) != s->geotags[i].type) {
1882             av_log(avctx, AV_LOG_WARNING, "Type of GeoTIFF key %d is wrong\n", s->geotags[i].key);
1883             continue;
1884         }
1885         ret = av_dict_set(&p->metadata, keyname, s->geotags[i].val, 0);
1886         if (ret<0) {
1887             av_log(avctx, AV_LOG_ERROR, "Writing metadata with key '%s' failed\n", keyname);
1888             return ret;
1889         }
1890     }
1891 
1892     if (is_dng) {
1893         int bps;
1894 
1895         if (s->bpp % s->bppcount)
1896             return AVERROR_INVALIDDATA;
1897         bps = s->bpp / s->bppcount;
1898         if (bps < 8 || bps > 32)
1899             return AVERROR_INVALIDDATA;
1900 
1901         if (s->white_level == 0)
1902             s->white_level = (1LL << bps) - 1; /* Default value as per the spec */
1903 
1904         if (s->white_level <= s->black_level) {
1905             av_log(avctx, AV_LOG_ERROR, "BlackLevel (%"PRId32") must be less than WhiteLevel (%"PRId32")\n",
1906                 s->black_level, s->white_level);
1907             return AVERROR_INVALIDDATA;
1908         }
1909 
1910         if (s->planar)
1911             return AVERROR_PATCHWELCOME;
1912     }
1913 
1914     if (!s->is_tiled && !s->strippos && !s->stripoff) {
1915         av_log(avctx, AV_LOG_ERROR, "Image data is missing\n");
1916         return AVERROR_INVALIDDATA;
1917     }
1918 
1919     has_tile_bits  = s->is_tiled || s->tile_byte_counts_offset || s->tile_offsets_offset || s->tile_width || s->tile_length || s->tile_count;
1920     has_strip_bits = s->strippos || s->strips || s->stripoff || s->rps || s->sot || s->sstype || s->stripsize || s->stripsizesoff;
1921 
1922     if (has_tile_bits && has_strip_bits) {
1923         int tiled_dng = s->is_tiled && is_dng;
1924         av_log(avctx, tiled_dng ? AV_LOG_WARNING : AV_LOG_ERROR, "Tiled TIFF is not allowed to strip\n");
1925         if (!tiled_dng)
1926             return AVERROR_INVALIDDATA;
1927     }
1928 
1929     /* now we have the data and may start decoding */
1930     if ((ret = init_image(s, &frame)) < 0)
1931         return ret;
1932 
1933     if (!s->is_tiled || has_strip_bits) {
1934         if (s->strips == 1 && !s->stripsize) {
1935             av_log(avctx, AV_LOG_WARNING, "Image data size missing\n");
1936             s->stripsize = avpkt->size - s->stripoff;
1937         }
1938 
1939         if (s->stripsizesoff) {
1940             if (s->stripsizesoff >= (unsigned)avpkt->size)
1941                 return AVERROR_INVALIDDATA;
1942             bytestream2_init(&stripsizes, avpkt->data + s->stripsizesoff,
1943                             avpkt->size - s->stripsizesoff);
1944         }
1945         if (s->strippos) {
1946             if (s->strippos >= (unsigned)avpkt->size)
1947                 return AVERROR_INVALIDDATA;
1948             bytestream2_init(&stripdata, avpkt->data + s->strippos,
1949                             avpkt->size - s->strippos);
1950         }
1951 
1952         if (s->rps <= 0 || s->rps % s->subsampling[1]) {
1953             av_log(avctx, AV_LOG_ERROR, "rps %d invalid\n", s->rps);
1954             return AVERROR_INVALIDDATA;
1955         }
1956     }
1957 
1958     if (s->photometric == TIFF_PHOTOMETRIC_LINEAR_RAW ||
1959         s->photometric == TIFF_PHOTOMETRIC_CFA) {
1960         p->color_trc = AVCOL_TRC_LINEAR;
1961     } else if (s->photometric == TIFF_PHOTOMETRIC_BLACK_IS_ZERO) {
1962         p->color_trc = AVCOL_TRC_GAMMA22;
1963     }
1964 
1965     /* Handle DNG images with JPEG-compressed tiles */
1966 
1967     if (is_dng && s->is_tiled) {
1968         if (!s->is_jpeg) {
1969             avpriv_report_missing_feature(avctx, "DNG uncompressed tiled images");
1970             return AVERROR_PATCHWELCOME;
1971         } else if (!s->is_bayer) {
1972             avpriv_report_missing_feature(avctx, "DNG JPG-compressed tiled non-bayer-encoded images");
1973             return AVERROR_PATCHWELCOME;
1974         } else {
1975             if ((ret = dng_decode_tiles(avctx, (AVFrame*)data, avpkt)) > 0)
1976                 *got_frame = 1;
1977             return ret;
1978         }
1979     }
1980 
1981     /* Handle TIFF images and DNG images with uncompressed strips (non-tiled) */
1982 
1983     planes = s->planar ? s->bppcount : 1;
1984     for (plane = 0; plane < planes; plane++) {
1985         uint8_t *five_planes = NULL;
1986         int remaining = avpkt->size;
1987         int decoded_height;
1988         stride = p->linesize[plane];
1989         dst = p->data[plane];
1990         if (s->photometric == TIFF_PHOTOMETRIC_SEPARATED &&
1991             s->avctx->pix_fmt == AV_PIX_FMT_RGBA) {
1992             stride = stride * 5 / 4;
1993             five_planes =
1994             dst = av_malloc(stride * s->height);
1995             if (!dst)
1996                 return AVERROR(ENOMEM);
1997         }
1998         for (i = 0; i < s->height; i += s->rps) {
1999             if (i)
2000                 dst += s->rps * stride;
2001             if (s->stripsizesoff)
2002                 ssize = ff_tget(&stripsizes, s->sstype, le);
2003             else
2004                 ssize = s->stripsize;
2005 
2006             if (s->strippos)
2007                 soff = ff_tget(&stripdata, s->sot, le);
2008             else
2009                 soff = s->stripoff;
2010 
2011             if (soff > avpkt->size || ssize > avpkt->size - soff || ssize > remaining) {
2012                 av_log(avctx, AV_LOG_ERROR, "Invalid strip size/offset\n");
2013                 av_freep(&five_planes);
2014                 return AVERROR_INVALIDDATA;
2015             }
2016             remaining -= ssize;
2017             if ((ret = tiff_unpack_strip(s, p, dst, stride, avpkt->data + soff, ssize, i,
2018                                          FFMIN(s->rps, s->height - i))) < 0) {
2019                 if (avctx->err_recognition & AV_EF_EXPLODE) {
2020                     av_freep(&five_planes);
2021                     return ret;
2022                 }
2023                 break;
2024             }
2025         }
2026         decoded_height = FFMIN(i, s->height);
2027 
2028         if (s->predictor == 2) {
2029             if (s->photometric == TIFF_PHOTOMETRIC_YCBCR) {
2030                 av_log(s->avctx, AV_LOG_ERROR, "predictor == 2 with YUV is unsupported");
2031                 return AVERROR_PATCHWELCOME;
2032             }
2033             dst   = five_planes ? five_planes : p->data[plane];
2034             soff  = s->bpp >> 3;
2035             if (s->planar)
2036                 soff  = FFMAX(soff / s->bppcount, 1);
2037             ssize = s->width * soff;
2038             if (s->avctx->pix_fmt == AV_PIX_FMT_RGB48LE ||
2039                 s->avctx->pix_fmt == AV_PIX_FMT_RGBA64LE ||
2040                 s->avctx->pix_fmt == AV_PIX_FMT_GRAY16LE ||
2041                 s->avctx->pix_fmt == AV_PIX_FMT_YA16LE ||
2042                 s->avctx->pix_fmt == AV_PIX_FMT_GBRP16LE ||
2043                 s->avctx->pix_fmt == AV_PIX_FMT_GBRAP16LE) {
2044                 for (i = 0; i < decoded_height; i++) {
2045                     for (j = soff; j < ssize; j += 2)
2046                         AV_WL16(dst + j, AV_RL16(dst + j) + AV_RL16(dst + j - soff));
2047                     dst += stride;
2048                 }
2049             } else if (s->avctx->pix_fmt == AV_PIX_FMT_RGB48BE ||
2050                        s->avctx->pix_fmt == AV_PIX_FMT_RGBA64BE ||
2051                        s->avctx->pix_fmt == AV_PIX_FMT_GRAY16BE ||
2052                        s->avctx->pix_fmt == AV_PIX_FMT_YA16BE ||
2053                        s->avctx->pix_fmt == AV_PIX_FMT_GBRP16BE ||
2054                        s->avctx->pix_fmt == AV_PIX_FMT_GBRAP16BE) {
2055                 for (i = 0; i < decoded_height; i++) {
2056                     for (j = soff; j < ssize; j += 2)
2057                         AV_WB16(dst + j, AV_RB16(dst + j) + AV_RB16(dst + j - soff));
2058                     dst += stride;
2059                 }
2060             } else {
2061                 for (i = 0; i < decoded_height; i++) {
2062                     for (j = soff; j < ssize; j++)
2063                         dst[j] += dst[j - soff];
2064                     dst += stride;
2065                 }
2066             }
2067         }
2068 
2069         if (s->photometric == TIFF_PHOTOMETRIC_WHITE_IS_ZERO) {
2070             int c = (s->avctx->pix_fmt == AV_PIX_FMT_PAL8 ? (1<<s->bpp) - 1 : 255);
2071             dst = p->data[plane];
2072             for (i = 0; i < s->height; i++) {
2073                 for (j = 0; j < stride; j++)
2074                     dst[j] = c - dst[j];
2075                 dst += stride;
2076             }
2077         }
2078 
2079         if (s->photometric == TIFF_PHOTOMETRIC_SEPARATED &&
2080             (s->avctx->pix_fmt == AV_PIX_FMT_RGB0 || s->avctx->pix_fmt == AV_PIX_FMT_RGBA)) {
2081             int x = s->avctx->pix_fmt == AV_PIX_FMT_RGB0 ? 4 : 5;
2082             uint8_t *src = five_planes ? five_planes : p->data[plane];
2083             dst = p->data[plane];
2084             for (i = 0; i < s->height; i++) {
2085                 for (j = 0; j < s->width; j++) {
2086                     int k =  255 - src[x * j + 3];
2087                     int r = (255 - src[x * j    ]) * k;
2088                     int g = (255 - src[x * j + 1]) * k;
2089                     int b = (255 - src[x * j + 2]) * k;
2090                     dst[4 * j    ] = r * 257 >> 16;
2091                     dst[4 * j + 1] = g * 257 >> 16;
2092                     dst[4 * j + 2] = b * 257 >> 16;
2093                     dst[4 * j + 3] = s->avctx->pix_fmt == AV_PIX_FMT_RGBA ? src[x * j + 4] : 255;
2094                 }
2095                 src += stride;
2096                 dst += p->linesize[plane];
2097             }
2098             av_freep(&five_planes);
2099         } else if (s->photometric == TIFF_PHOTOMETRIC_SEPARATED &&
2100             s->avctx->pix_fmt == AV_PIX_FMT_RGBA64BE) {
2101             dst = p->data[plane];
2102             for (i = 0; i < s->height; i++) {
2103                 for (j = 0; j < s->width; j++) {
2104                     uint64_t k =  65535 - AV_RB16(dst + 8 * j + 6);
2105                     uint64_t r = (65535 - AV_RB16(dst + 8 * j    )) * k;
2106                     uint64_t g = (65535 - AV_RB16(dst + 8 * j + 2)) * k;
2107                     uint64_t b = (65535 - AV_RB16(dst + 8 * j + 4)) * k;
2108                     AV_WB16(dst + 8 * j    , r * 65537 >> 32);
2109                     AV_WB16(dst + 8 * j + 2, g * 65537 >> 32);
2110                     AV_WB16(dst + 8 * j + 4, b * 65537 >> 32);
2111                     AV_WB16(dst + 8 * j + 6, 65535);
2112                 }
2113                 dst += p->linesize[plane];
2114             }
2115         }
2116     }
2117 
2118     if (s->planar && s->bppcount > 2) {
2119         FFSWAP(uint8_t*, p->data[0],     p->data[2]);
2120         FFSWAP(int,      p->linesize[0], p->linesize[2]);
2121         FFSWAP(uint8_t*, p->data[0],     p->data[1]);
2122         FFSWAP(int,      p->linesize[0], p->linesize[1]);
2123     }
2124 
2125     if (s->is_bayer && s->white_level && s->bpp == 16 && !is_dng) {
2126         uint16_t *dst = (uint16_t *)p->data[0];
2127         for (i = 0; i < s->height; i++) {
2128             for (j = 0; j < s->width; j++)
2129                 dst[j] = FFMIN((dst[j] / (float)s->white_level) * 65535, 65535);
2130             dst += stride / 2;
2131         }
2132     }
2133 
2134     *got_frame = 1;
2135 
2136     return avpkt->size;
2137 }
2138 
tiff_init(AVCodecContext * avctx)2139 static av_cold int tiff_init(AVCodecContext *avctx)
2140 {
2141     TiffContext *s = avctx->priv_data;
2142     const AVCodec *codec;
2143     int ret;
2144 
2145     s->width  = 0;
2146     s->height = 0;
2147     s->subsampling[0] =
2148     s->subsampling[1] = 1;
2149     s->avctx  = avctx;
2150     ff_lzw_decode_open(&s->lzw);
2151     if (!s->lzw)
2152         return AVERROR(ENOMEM);
2153     ff_ccitt_unpack_init();
2154 
2155     /* Allocate JPEG frame */
2156     s->jpgframe = av_frame_alloc();
2157     s->jpkt     = av_packet_alloc();
2158     if (!s->jpgframe || !s->jpkt)
2159         return AVERROR(ENOMEM);
2160 
2161     /* Prepare everything needed for JPEG decoding */
2162     codec = avcodec_find_decoder(AV_CODEC_ID_MJPEG);
2163     if (!codec)
2164         return AVERROR_BUG;
2165     s->avctx_mjpeg = avcodec_alloc_context3(codec);
2166     if (!s->avctx_mjpeg)
2167         return AVERROR(ENOMEM);
2168     s->avctx_mjpeg->flags = avctx->flags;
2169     s->avctx_mjpeg->flags2 = avctx->flags2;
2170     s->avctx_mjpeg->dct_algo = avctx->dct_algo;
2171     s->avctx_mjpeg->idct_algo = avctx->idct_algo;
2172     ret = avcodec_open2(s->avctx_mjpeg, codec, NULL);
2173     if (ret < 0) {
2174         return ret;
2175     }
2176 
2177     return 0;
2178 }
2179 
tiff_end(AVCodecContext * avctx)2180 static av_cold int tiff_end(AVCodecContext *avctx)
2181 {
2182     TiffContext *const s = avctx->priv_data;
2183 
2184     free_geotags(s);
2185 
2186     ff_lzw_decode_close(&s->lzw);
2187     av_freep(&s->deinvert_buf);
2188     s->deinvert_buf_size = 0;
2189     av_freep(&s->yuv_line);
2190     s->yuv_line_size = 0;
2191     av_freep(&s->fax_buffer);
2192     s->fax_buffer_size = 0;
2193     av_frame_free(&s->jpgframe);
2194     av_packet_free(&s->jpkt);
2195     avcodec_free_context(&s->avctx_mjpeg);
2196     return 0;
2197 }
2198 
2199 #define OFFSET(x) offsetof(TiffContext, x)
2200 static const AVOption tiff_options[] = {
2201     { "subimage", "decode subimage instead if available", OFFSET(get_subimage), AV_OPT_TYPE_BOOL, {.i64=0},  0, 1, AV_OPT_FLAG_DECODING_PARAM | AV_OPT_FLAG_VIDEO_PARAM },
2202     { "thumbnail", "decode embedded thumbnail subimage instead if available", OFFSET(get_thumbnail), AV_OPT_TYPE_BOOL, {.i64=0},  0, 1, AV_OPT_FLAG_DECODING_PARAM | AV_OPT_FLAG_VIDEO_PARAM },
2203     { "page", "page number of multi-page image to decode (starting from 1)", OFFSET(get_page), AV_OPT_TYPE_INT, {.i64=0}, 0, UINT16_MAX, AV_OPT_FLAG_DECODING_PARAM | AV_OPT_FLAG_VIDEO_PARAM },
2204     { NULL },
2205 };
2206 
2207 static const AVClass tiff_decoder_class = {
2208     .class_name = "TIFF decoder",
2209     .item_name  = av_default_item_name,
2210     .option     = tiff_options,
2211     .version    = LIBAVUTIL_VERSION_INT,
2212 };
2213 
2214 AVCodec ff_tiff_decoder = {
2215     .name           = "tiff",
2216     .long_name      = NULL_IF_CONFIG_SMALL("TIFF image"),
2217     .type           = AVMEDIA_TYPE_VIDEO,
2218     .id             = AV_CODEC_ID_TIFF,
2219     .priv_data_size = sizeof(TiffContext),
2220     .init           = tiff_init,
2221     .close          = tiff_end,
2222     .decode         = decode_frame,
2223     .capabilities   = AV_CODEC_CAP_DR1 | AV_CODEC_CAP_FRAME_THREADS,
2224     .caps_internal  = FF_CODEC_CAP_INIT_THREADSAFE | FF_CODEC_CAP_INIT_CLEANUP,
2225     .priv_class     = &tiff_decoder_class,
2226 };
2227