libavformat/id3v2.c
2ea512a6
 /*
  * Copyright (c) 2003 Fabrice Bellard
  *
  * This file is part of FFmpeg.
  *
  * FFmpeg is free software; you can redistribute it and/or
  * modify it under the terms of the GNU Lesser General Public
  * License as published by the Free Software Foundation; either
  * version 2.1 of the License, or (at your option) any later version.
  *
  * FFmpeg is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  * Lesser General Public License for more details.
  *
  * You should have received a copy of the GNU Lesser General Public
  * License along with FFmpeg; if not, write to the Free Software
  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
  */
 
b69e5ee9
 /**
  * @file
  * ID3v2 header parser
  *
  * Specifications available at:
  * http://id3.org/Developer_Information
  */
 
7e09fe15
 #include "config.h"
 
 #if CONFIG_ZLIB
 #include <zlib.h>
 #endif
 
2ea512a6
 #include "id3v2.h"
75411182
 #include "id3v1.h"
 #include "libavutil/avstring.h"
3a1350e8
 #include "libavutil/intreadwrite.h"
d2d67e42
 #include "libavutil/dict.h"
ae99313a
 #include "avio_internal.h"
a93b09cb
 #include "internal.h"
2ea512a6
 
3b78c180
 const AVMetadataConv ff_id3v2_34_metadata_conv[] = {
     { "TALB", "album"},
     { "TCOM", "composer"},
     { "TCON", "genre"},
     { "TCOP", "copyright"},
     { "TENC", "encoded_by"},
     { "TIT2", "title"},
     { "TLAN", "language"},
     { "TPE1", "artist"},
     { "TPE2", "album_artist"},
     { "TPE3", "performer"},
     { "TPOS", "disc"},
     { "TPUB", "publisher"},
     { "TRCK", "track"},
     { "TSSE", "encoder"},
     { 0 }
 };
 
 const AVMetadataConv ff_id3v2_4_metadata_conv[] = {
     { "TDRL", "date"},
     { "TDRC", "date"},
     { "TDEN", "creation_time"},
     { "TSOA", "album-sort"},
     { "TSOP", "artist-sort"},
     { "TSOT", "title-sort"},
     { 0 }
 };
 
c4a37885
 static const AVMetadataConv id3v2_2_metadata_conv[] = {
3b78c180
     { "TAL",  "album"},
     { "TCO",  "genre"},
     { "TT2",  "title"},
     { "TEN",  "encoded_by"},
     { "TP1",  "artist"},
     { "TP2",  "album_artist"},
     { "TP3",  "performer"},
     { "TRK",  "track"},
     { 0 }
 };
 
 
 const char ff_id3v2_tags[][4] = {
    "TALB", "TBPM", "TCOM", "TCON", "TCOP", "TDLY", "TENC", "TEXT",
    "TFLT", "TIT1", "TIT2", "TIT3", "TKEY", "TLAN", "TLEN", "TMED",
    "TOAL", "TOFN", "TOLY", "TOPE", "TOWN", "TPE1", "TPE2", "TPE3",
    "TPE4", "TPOS", "TPUB", "TRCK", "TRSN", "TRSO", "TSRC", "TSSE",
    { 0 },
 };
 
 const char ff_id3v2_4_tags[][4] = {
    "TDEN", "TDOR", "TDRC", "TDRL", "TDTG", "TIPL", "TMCL", "TMOO",
    "TPRO", "TSOA", "TSOP", "TSOT", "TSST",
    { 0 },
 };
 
 const char ff_id3v2_3_tags[][4] = {
    "TDAT", "TIME", "TORY", "TRDA", "TSIZ", "TYER",
    { 0 },
 };
 
a93b09cb
 const char *ff_id3v2_picture_types[21] = {
     "Other",
     "32x32 pixels 'file icon'",
     "Other file icon",
     "Cover (front)",
     "Cover (back)",
     "Leaflet page",
     "Media (e.g. label side of CD)",
     "Lead artist/lead performer/soloist",
     "Artist/performer",
     "Conductor",
     "Band/Orchestra",
     "Composer",
     "Lyricist/text writer",
     "Recording Location",
     "During recording",
     "During performance",
     "Movie/video screen capture",
     "A bright coloured fish",
     "Illustration",
     "Band/artist logotype",
     "Publisher/Studio logotype",
 };
 
 const CodecMime ff_id3v2_mime_tags[] = {
36ef5369
     {"image/gif" , AV_CODEC_ID_GIF},
     {"image/jpeg", AV_CODEC_ID_MJPEG},
     {"image/jpg",  AV_CODEC_ID_MJPEG},
     {"image/png" , AV_CODEC_ID_PNG},
     {"image/tiff", AV_CODEC_ID_TIFF},
     {"image/bmp",  AV_CODEC_ID_BMP},
385ec296
     {"JPG",        AV_CODEC_ID_MJPEG}, /* ID3v2.2  */
     {"PNG" ,       AV_CODEC_ID_PNG},   /* ID3v2.2  */
36ef5369
     {"",           AV_CODEC_ID_NONE},
a93b09cb
 };
 
3a1350e8
 int ff_id3v2_match(const uint8_t *buf, const char * magic)
2ea512a6
 {
3a1350e8
     return  buf[0]         == magic[0] &&
             buf[1]         == magic[1] &&
             buf[2]         == magic[2] &&
7d7b8c32
             buf[3]         != 0xff &&
             buf[4]         != 0xff &&
            (buf[6] & 0x80) ==    0 &&
            (buf[7] & 0x80) ==    0 &&
            (buf[8] & 0x80) ==    0 &&
1d4b1bf2
            (buf[9] & 0x80) ==    0;
2ea512a6
 }
ac3ef4a4
 
 int ff_id3v2_tag_len(const uint8_t * buf)
 {
     int len = ((buf[6] & 0x7f) << 21) +
7d7b8c32
               ((buf[7] & 0x7f) << 14) +
               ((buf[8] & 0x7f) << 7) +
                (buf[9] & 0x7f) +
               ID3v2_HEADER_SIZE;
ac3ef4a4
     if (buf[5] & 0x10)
         len += ID3v2_HEADER_SIZE;
     return len;
 }
75411182
 
471fe57e
 static unsigned int get_size(AVIOContext *s, int len)
75411182
 {
7d7b8c32
     int v = 0;
     while (len--)
e63a3628
         v = (v << 7) + (avio_r8(s) & 0x7F);
75411182
     return v;
 }
 
7a019dff
 /**
  * Free GEOB type extra metadata.
  */
a1526cd7
 static void free_geobtag(void *obj)
75411182
 {
a1526cd7
     ID3v2ExtraMetaGEOB *geob = obj;
7a019dff
     av_free(geob->mime_type);
     av_free(geob->file_name);
     av_free(geob->description);
     av_free(geob->data);
     av_free(geob);
 }
75411182
 
7a019dff
 /**
  * Decode characters to UTF-8 according to encoding type. The decoded buffer is
d2961e4e
  * always null terminated. Stop reading when either *maxread bytes are read from
  * pb or U+0000 character is found.
7a019dff
  *
  * @param dst Pointer where the address of the buffer with the decoded bytes is
  * stored. Buffer must be freed by caller.
  * @param maxread Pointer to maximum number of characters to read from the
  * AVIOContext. After execution the value is decremented by the number of bytes
  * actually read.
da9cea77
  * @returns 0 if no error occurred, dst is uninitialized on error
7a019dff
  */
 static int decode_str(AVFormatContext *s, AVIOContext *pb, int encoding,
d2961e4e
                       uint8_t **dst, int *maxread)
7a019dff
 {
d2961e4e
     int ret;
7a019dff
     uint8_t tmp;
     uint32_t ch = 1;
     int left = *maxread;
     unsigned int (*get)(AVIOContext*) = avio_rb16;
     AVIOContext *dynbuf;
75411182
 
7a019dff
     if ((ret = avio_open_dyn_buf(&dynbuf)) < 0) {
         av_log(s, AV_LOG_ERROR, "Error opening memory stream\n");
         return ret;
     }
75411182
 
7a019dff
     switch (encoding) {
75411182
 
eeb0b893
     case ID3v2_ENCODING_ISO8859:
d2961e4e
         while (left && ch) {
7a019dff
             ch = avio_r8(pb);
             PUT_UTF8(ch, tmp, avio_w8(dynbuf, tmp);)
             left--;
75411182
         }
         break;
 
eeb0b893
     case ID3v2_ENCODING_UTF16BOM:
7a019dff
         if ((left -= 2) < 0) {
             av_log(s, AV_LOG_ERROR, "Cannot read BOM value, input too short\n");
60df6b00
             avio_close_dyn_buf(dynbuf, dst);
7a019dff
             av_freep(dst);
             return AVERROR_INVALIDDATA;
         }
e63a3628
         switch (avio_rb16(pb)) {
20c68378
         case 0xfffe:
e63a3628
             get = avio_rl16;
20c68378
         case 0xfeff:
             break;
         default:
7a019dff
             av_log(s, AV_LOG_ERROR, "Incorrect BOM value\n");
60df6b00
             avio_close_dyn_buf(dynbuf, dst);
7a019dff
             av_freep(dst);
             *maxread = left;
             return AVERROR_INVALIDDATA;
20c68378
         }
         // fall-through
 
eeb0b893
     case ID3v2_ENCODING_UTF16BE:
d2961e4e
         while ((left > 1) && ch) {
7a019dff
             GET_UTF16(ch, ((left -= 2) >= 0 ? get(pb) : 0), break;)
             PUT_UTF8(ch, tmp, avio_w8(dynbuf, tmp);)
20c68378
         }
7a019dff
         if (left < 0)
             left += 2; /* did not read last char from pb */
20c68378
         break;
 
eeb0b893
     case ID3v2_ENCODING_UTF8:
d2961e4e
         while (left && ch) {
7a019dff
             ch = avio_r8(pb);
             avio_w8(dynbuf, ch);
             left--;
         }
75411182
         break;
20c68378
     default:
7a019dff
         av_log(s, AV_LOG_WARNING, "Unknown encoding\n");
     }
 
     if (ch)
         avio_w8(dynbuf, 0);
 
60df6b00
     avio_close_dyn_buf(dynbuf, dst);
7a019dff
     *maxread = left;
 
     return 0;
 }
 
 /**
  * Parse a text tag.
  */
 static void read_ttag(AVFormatContext *s, AVIOContext *pb, int taglen, const char *key)
 {
     uint8_t *dst;
e5fcf364
     int encoding, dict_flags = AV_DICT_DONT_OVERWRITE | AV_DICT_DONT_STRDUP_VAL;
7a019dff
     unsigned genre;
 
     if (taglen < 1)
         return;
 
d2961e4e
     encoding = avio_r8(pb);
7a019dff
     taglen--; /* account for encoding type byte */
 
d2961e4e
     if (decode_str(s, pb, encoding, &dst, &taglen) < 0) {
7a019dff
         av_log(s, AV_LOG_ERROR, "Error reading frame %s, skipped\n", key);
         return;
75411182
     }
 
41770abf
     if (!(strcmp(key, "TCON") && strcmp(key, "TCO"))
75411182
         && (sscanf(dst, "(%d)", &genre) == 1 || sscanf(dst, "%d", &genre) == 1)
d2961e4e
         && genre <= ID3v1_GENRE_MAX) {
         av_freep(&dst);
e5fcf364
         dst = av_strdup(ff_id3v1_genre_str[genre]);
d2961e4e
     } else if (!(strcmp(key, "TXXX") && strcmp(key, "TXX"))) {
         /* dst now contains the key, need to get value */
41770abf
         key = dst;
d2961e4e
         if (decode_str(s, pb, encoding, &dst, &taglen) < 0) {
             av_log(s, AV_LOG_ERROR, "Error reading frame %s, skipped\n", key);
             av_freep(&key);
             return;
         }
e5fcf364
         dict_flags |= AV_DICT_DONT_STRDUP_KEY;
     } else if (!*dst)
6ad974ae
         av_freep(&dst);
75411182
 
d2961e4e
     if (dst)
         av_dict_set(&s->metadata, key, dst, dict_flags);
7a019dff
 }
 
 /**
  * Parse GEOB tag into a ID3v2ExtraMetaGEOB struct.
  */
 static void read_geobtag(AVFormatContext *s, AVIOContext *pb, int taglen, char *tag, ID3v2ExtraMeta **extra_meta)
 {
     ID3v2ExtraMetaGEOB *geob_data = NULL;
     ID3v2ExtraMeta *new_extra = NULL;
     char encoding;
     unsigned int len;
 
     if (taglen < 1)
         return;
 
     geob_data = av_mallocz(sizeof(ID3v2ExtraMetaGEOB));
     if (!geob_data) {
         av_log(s, AV_LOG_ERROR, "Failed to alloc %zu bytes\n", sizeof(ID3v2ExtraMetaGEOB));
         return;
     }
 
     new_extra = av_mallocz(sizeof(ID3v2ExtraMeta));
     if (!new_extra) {
         av_log(s, AV_LOG_ERROR, "Failed to alloc %zu bytes\n", sizeof(ID3v2ExtraMeta));
         goto fail;
     }
 
     /* read encoding type byte */
     encoding = avio_r8(pb);
     taglen--;
 
     /* read MIME type (always ISO-8859) */
d2961e4e
     if (decode_str(s, pb, ID3v2_ENCODING_ISO8859, &geob_data->mime_type, &taglen) < 0
7a019dff
         || taglen <= 0)
         goto fail;
 
     /* read file name */
d2961e4e
     if (decode_str(s, pb, encoding, &geob_data->file_name, &taglen) < 0
7a019dff
         || taglen <= 0)
         goto fail;
 
     /* read content description */
d2961e4e
     if (decode_str(s, pb, encoding, &geob_data->description, &taglen) < 0
7a019dff
         || taglen < 0)
         goto fail;
 
     if (taglen) {
         /* save encapsulated binary data */
         geob_data->data = av_malloc(taglen);
         if (!geob_data->data) {
             av_log(s, AV_LOG_ERROR, "Failed to alloc %d bytes\n", taglen);
             goto fail;
         }
         if ((len = avio_read(pb, geob_data->data, taglen)) < taglen)
             av_log(s, AV_LOG_WARNING, "Error reading GEOB frame, data truncated.\n");
         geob_data->datasize = len;
     } else {
         geob_data->data = NULL;
         geob_data->datasize = 0;
     }
 
     /* add data to the list */
     new_extra->tag = "GEOB";
     new_extra->data = geob_data;
     new_extra->next = *extra_meta;
     *extra_meta = new_extra;
 
     return;
 
 fail:
     av_log(s, AV_LOG_ERROR, "Error reading frame %s, skipped\n", tag);
     free_geobtag(geob_data);
     av_free(new_extra);
     return;
75411182
 }
 
56e2ac6b
 static int is_number(const char *str)
 {
     while (*str >= '0' && *str <= '9') str++;
     return !*str;
 }
 
d2d67e42
 static AVDictionaryEntry* get_date_tag(AVDictionary *m, const char *tag)
56e2ac6b
 {
d2d67e42
     AVDictionaryEntry *t;
     if ((t = av_dict_get(m, tag, NULL, AV_DICT_MATCH_CASE)) &&
56e2ac6b
         strlen(t->value) == 4 && is_number(t->value))
         return t;
     return NULL;
 }
 
d2d67e42
 static void merge_date(AVDictionary **m)
56e2ac6b
 {
d2d67e42
     AVDictionaryEntry *t;
56e2ac6b
     char date[17] = {0};      // YYYY-MM-DD hh:mm
 
     if (!(t = get_date_tag(*m, "TYER")) &&
         !(t = get_date_tag(*m, "TYE")))
         return;
     av_strlcpy(date, t->value, 5);
d2d67e42
     av_dict_set(m, "TYER", NULL, 0);
     av_dict_set(m, "TYE",  NULL, 0);
56e2ac6b
 
     if (!(t = get_date_tag(*m, "TDAT")) &&
         !(t = get_date_tag(*m, "TDA")))
         goto finish;
     snprintf(date + 4, sizeof(date) - 4, "-%.2s-%.2s", t->value + 2, t->value);
d2d67e42
     av_dict_set(m, "TDAT", NULL, 0);
     av_dict_set(m, "TDA",  NULL, 0);
56e2ac6b
 
     if (!(t = get_date_tag(*m, "TIME")) &&
         !(t = get_date_tag(*m, "TIM")))
         goto finish;
     snprintf(date + 10, sizeof(date) - 10, " %.2s:%.2s", t->value, t->value + 2);
d2d67e42
     av_dict_set(m, "TIME", NULL, 0);
     av_dict_set(m, "TIM",  NULL, 0);
56e2ac6b
 
 finish:
     if (date[0])
d2d67e42
         av_dict_set(m, "date", date, 0);
56e2ac6b
 }
 
a93b09cb
 static void free_apic(void *obj)
 {
     ID3v2ExtraMetaAPIC *apic = obj;
     av_freep(&apic->data);
     av_freep(&apic->description);
     av_freep(&apic);
 }
 
 static void read_apic(AVFormatContext *s, AVIOContext *pb, int taglen, char *tag, ID3v2ExtraMeta **extra_meta)
 {
     int enc, pic_type;
     char             mimetype[64];
     const CodecMime     *mime = ff_id3v2_mime_tags;
36ef5369
     enum AVCodecID           id = AV_CODEC_ID_NONE;
a93b09cb
     ID3v2ExtraMetaAPIC  *apic = NULL;
     ID3v2ExtraMeta *new_extra = NULL;
     int64_t               end = avio_tell(pb) + taglen;
 
     if (taglen <= 4)
         goto fail;
 
     new_extra = av_mallocz(sizeof(*new_extra));
     apic      = av_mallocz(sizeof(*apic));
     if (!new_extra || !apic)
         goto fail;
 
     enc = avio_r8(pb);
     taglen--;
 
     /* mimetype */
     taglen -= avio_get_str(pb, taglen, mimetype, sizeof(mimetype));
36ef5369
     while (mime->id != AV_CODEC_ID_NONE) {
6e9bbc65
         if (!av_strncasecmp(mime->str, mimetype, sizeof(mimetype))) {
a93b09cb
             id = mime->id;
             break;
         }
         mime++;
     }
36ef5369
     if (id == AV_CODEC_ID_NONE) {
a93b09cb
         av_log(s, AV_LOG_WARNING, "Unknown attached picture mimetype: %s, skipping.\n", mimetype);
         goto fail;
     }
     apic->id = id;
 
     /* picture type */
     pic_type = avio_r8(pb);
     taglen--;
     if (pic_type < 0 || pic_type >= FF_ARRAY_ELEMS(ff_id3v2_picture_types)) {
         av_log(s, AV_LOG_WARNING, "Unknown attached picture type %d.\n", pic_type);
         pic_type = 0;
     }
     apic->type = ff_id3v2_picture_types[pic_type];
 
     /* description and picture data */
     if (decode_str(s, pb, enc, &apic->description, &taglen) < 0) {
         av_log(s, AV_LOG_ERROR, "Error decoding attached picture description.\n");
         goto fail;
     }
 
     apic->len   = taglen;
5ebdfbe8
     apic->data  = av_malloc(taglen + FF_INPUT_BUFFER_PADDING_SIZE);
4d18f4c1
     if (!apic->data || !apic->len || avio_read(pb, apic->data, taglen) != taglen)
a93b09cb
         goto fail;
5ebdfbe8
     memset(apic->data + taglen, 0, FF_INPUT_BUFFER_PADDING_SIZE);
a93b09cb
 
     new_extra->tag    = "APIC";
     new_extra->data   = apic;
     new_extra->next   = *extra_meta;
     *extra_meta       = new_extra;
 
     return;
 
 fail:
     if (apic)
         free_apic(apic);
     av_freep(&new_extra);
     avio_seek(pb, end, SEEK_SET);
 }
 
07ed191b
 static void read_chapter(AVFormatContext *s, AVIOContext *pb, int taglen, char *tag, ID3v2ExtraMeta **extra_meta)
 {
     AVRational time_base = {1, 1000};
     char title[1024];
     uint32_t start, end;
 
     taglen -= avio_get_str(pb, taglen, title, sizeof(title));
     if (taglen < 16)
         return;
 
     start = avio_rb32(pb);
     end   = avio_rb32(pb);
     taglen -= 27;
     if (taglen > 0) {
         char tag[4];
 
         avio_skip(pb, 8);
         avio_read(pb, tag, 4);
         if (!memcmp(tag, "TIT2", 4)) {
             taglen = FFMIN(taglen, avio_rb32(pb));
             if (taglen < 0)
                 return;
             avio_skip(pb, 3);
             avio_get_str(pb, taglen, title, sizeof(title));
         }
     }
 
     avpriv_new_chapter(s, s->nb_chapters + 1, time_base, start, end, title);
 }
 
c4a37885
 typedef struct ID3v2EMFunc {
     const char *tag3;
     const char *tag4;
     void (*read)(AVFormatContext*, AVIOContext*, int, char*, ID3v2ExtraMeta **);
ec22979a
     void (*free)(void *obj);
c4a37885
 } ID3v2EMFunc;
 
 static const ID3v2EMFunc id3v2_extra_meta_funcs[] = {
3b78c180
     { "GEO", "GEOB", read_geobtag, free_geobtag },
a93b09cb
     { "PIC", "APIC", read_apic,    free_apic },
07ed191b
     { "CHAP","CHAP", read_chapter, NULL },
3b78c180
     { NULL }
 };
 
7a019dff
 /**
  * Get the corresponding ID3v2EMFunc struct for a tag.
  * @param isv34 Determines if v2.2 or v2.3/4 strings are used
  * @return A pointer to the ID3v2EMFunc struct if found, NULL otherwise.
  */
 static const ID3v2EMFunc *get_extra_meta_func(const char *tag, int isv34)
 {
     int i = 0;
c4a37885
     while (id3v2_extra_meta_funcs[i].tag3) {
aedd30b6
         if (tag && !memcmp(tag,
c4a37885
                     (isv34 ? id3v2_extra_meta_funcs[i].tag4 :
                              id3v2_extra_meta_funcs[i].tag3),
7a019dff
                     (isv34 ? 4 : 3)))
c4a37885
             return &id3v2_extra_meta_funcs[i];
7a019dff
         i++;
     }
aedd30b6
     return NULL;
7a019dff
 }
 
 static void ff_id3v2_parse(AVFormatContext *s, int len, uint8_t version, uint8_t flags, ID3v2ExtraMeta **extra_meta)
75411182
 {
ac533ac4
     int isv34, unsync;
     unsigned tlen;
41770abf
     char tag[5];
bca6dee3
     int64_t next, end = avio_tell(s->pb) + len;
75411182
     int taghdrlen;
eb1e7f78
     const char *reason = NULL;
471fe57e
     AVIOContext pb;
7a019dff
     AVIOContext *pbx;
18bbe9df
     unsigned char *buffer = NULL;
     int buffer_size = 0;
acc88f07
     const ID3v2EMFunc *extra_func = NULL;
e9c37236
     unsigned char *uncompressed_buffer = NULL;
     int uncompressed_buffer_size = 0;
75411182
 
08e26e7f
     av_log(s, AV_LOG_DEBUG, "id3v2 ver:%d flags:%02X len:%d\n", version, flags, len);
 
7d7b8c32
     switch (version) {
75411182
     case 2:
7d7b8c32
         if (flags & 0x40) {
75411182
             reason = "compression";
             goto error;
         }
         isv34 = 0;
         taghdrlen = 6;
         break;
 
     case 3:
     case 4:
         isv34 = 1;
         taghdrlen = 10;
         break;
 
     default:
         reason = "version";
         goto error;
     }
 
18bbe9df
     unsync = flags & 0x80;
75411182
 
ddb44312
     if (isv34 && flags & 0x40) { /* Extended header present, just skip over it */
         int extlen = get_size(s->pb, 4);
         if (version == 4)
             extlen -= 4;     // in v2.4 the length includes the length field we just read
 
         if (extlen < 0) {
             reason = "invalid extended header length";
dd7453a2
             goto error;
         }
ddb44312
         avio_skip(s->pb, extlen);
49891784
         len -= extlen + 4;
dd7453a2
         if (len < 0) {
             reason = "extended header too long.";
             goto error;
         }
     }
75411182
 
7d7b8c32
     while (len >= taghdrlen) {
40a5dd2f
         unsigned int tflags = 0;
18bbe9df
         int tunsync = 0;
7e09fe15
         int tcomp = 0;
         int tencr = 0;
084bd109
         unsigned long dlen;
18bbe9df
 
7d7b8c32
         if (isv34) {
e63a3628
             avio_read(s->pb, tag, 4);
41770abf
             tag[4] = 0;
3fd5a75b
             if(version==3){
e63a3628
                 tlen = avio_rb32(s->pb);
3fd5a75b
             }else
                 tlen = get_size(s->pb, 4);
e63a3628
             tflags = avio_rb16(s->pb);
7a07d158
             tunsync = tflags & ID3v2_FLAG_UNSYNCH;
75411182
         } else {
e63a3628
             avio_read(s->pb, tag, 3);
41770abf
             tag[3] = 0;
e63a3628
             tlen = avio_rb24(s->pb);
75411182
         }
2f9d6ffd
         if (tlen > (1<<28))
ac533ac4
             break;
75411182
         len -= taghdrlen + tlen;
 
7d7b8c32
         if (len < 0)
75411182
             break;
 
384c9c2f
         next = avio_tell(s->pb) + tlen;
75411182
 
1e18d32d
         if (!tlen) {
             if (tag[0])
                 av_log(s, AV_LOG_DEBUG, "Invalid empty frame %s, skipping.\n", tag);
             continue;
         }
 
a152c77f
         if (tflags & ID3v2_FLAG_DATALEN) {
64be0d1e
             if (tlen < 4)
                 break;
7e09fe15
             dlen = avio_rb32(s->pb);
a152c77f
             tlen -= 4;
7e09fe15
         } else
             dlen = tlen;
 
         tcomp = tflags & ID3v2_FLAG_COMPRESSION;
         tencr = tflags & ID3v2_FLAG_ENCRYPTION;
 
         /* skip encrypted tags and, if no zlib, compressed tags */
         if (tencr || (!CONFIG_ZLIB && tcomp)) {
             const char *type;
             if (!tcomp)
                 type = "encrypted";
             else if (!tencr)
                 type = "compressed";
             else
                 type = "encrypted and compressed";
a152c77f
 
7e09fe15
             av_log(s, AV_LOG_WARNING, "Skipping %s ID3v2 frame %s.\n", type, tag);
45a8a02a
             avio_skip(s->pb, tlen);
7a019dff
         /* check for text tag or supported special meta tag */
c780b543
         } else if (tag[0] == 'T' || (extra_meta && (extra_func = get_extra_meta_func(tag, isv34)))) {
e9c37236
             pbx = s->pb;
7e09fe15
 
e9c37236
             if (unsync || tunsync || tcomp) {
                 av_fast_malloc(&buffer, &buffer_size, tlen);
86f86877
                 if (!buffer) {
e9c37236
                     av_log(s, AV_LOG_ERROR, "Failed to alloc %d bytes\n", tlen);
86f86877
                     goto seek;
                 }
e9c37236
             }
             if (unsync || tunsync) {
                 int64_t end = avio_tell(s->pb) + tlen;
                 uint8_t *b;
 
9ae80e6a
                 b = buffer;
204c8798
                 while (avio_tell(s->pb) < end && b - buffer < tlen && !s->pb->eof_reached) {
e9c37236
                     *b++ = avio_r8(s->pb);
5aac0811
                     if (*(b - 1) == 0xff && avio_tell(s->pb) < end - 1 &&
204c8798
                         b - buffer < tlen &&
5aac0811
                         !s->pb->eof_reached ) {
e9c37236
                         uint8_t val = avio_r8(s->pb);
                         *b++ = val ? val : avio_r8(s->pb);
                     }
                 }
                 ffio_init_context(&pb, buffer, b - buffer, 0, NULL, NULL, NULL, NULL);
                 tlen = b - buffer;
                 pbx = &pb; // read from sync buffer
             }
 
7e09fe15
 #if CONFIG_ZLIB
                 if (tcomp) {
e9c37236
                     int err;
7e09fe15
 
084bd109
                     av_log(s, AV_LOG_DEBUG, "Compresssed frame %s tlen=%d dlen=%ld\n", tag, tlen, dlen);
7e09fe15
 
e9c37236
                     av_fast_malloc(&uncompressed_buffer, &uncompressed_buffer_size, dlen);
                     if (!uncompressed_buffer) {
                         av_log(s, AV_LOG_ERROR, "Failed to alloc %ld bytes\n", dlen);
7e09fe15
                         goto seek;
                     }
 
e9c37236
                     if (!(unsync || tunsync)) {
                         err = avio_read(s->pb, buffer, tlen);
                         if (err < 0) {
                             av_log(s, AV_LOG_ERROR, "Failed to read compressed tag\n");
                             goto seek;
                         }
                         tlen = err;
7e09fe15
                     }
 
e9c37236
                     err = uncompress(uncompressed_buffer, &dlen, buffer, tlen);
7e09fe15
                     if (err != Z_OK) {
                         av_log(s, AV_LOG_ERROR, "Failed to uncompress tag: %d\n", err);
                         goto seek;
                     }
e9c37236
                     ffio_init_context(&pb, uncompressed_buffer, dlen, 0, NULL, NULL, NULL, NULL);
                     tlen = dlen;
                     pbx = &pb; // read from sync buffer
7e09fe15
                 }
 #endif
7a019dff
             if (tag[0] == 'T')
                 /* parse text tag */
                 read_ttag(s, pbx, tlen, tag);
             else
                 /* parse special meta tag */
c780b543
                 extra_func->read(s, pbx, tlen, tag, extra_meta);
18bbe9df
         }
2e3ca1ff
         else if (!tag[0]) {
             if (tag[1])
5081310b
                 av_log(s, AV_LOG_WARNING, "invalid frame id, assuming padding\n");
45a8a02a
             avio_skip(s->pb, tlen);
2e3ca1ff
             break;
         }
75411182
         /* Skip to end of tag */
86f86877
 seek:
f59d8ff8
         avio_seek(s->pb, next, SEEK_SET);
75411182
     }
 
7d7b8c32
     if (version == 4 && flags & 0x10) /* Footer preset, always 10 bytes, skip over it */
bca6dee3
         end += 10;
75411182
 
   error:
eb1e7f78
     if (reason)
         av_log(s, AV_LOG_INFO, "ID3v2.%d tag skipped, cannot handle %s\n", version, reason);
bca6dee3
     avio_seek(s->pb, end, SEEK_SET);
18bbe9df
     av_free(buffer);
e9c37236
     av_free(uncompressed_buffer);
75411182
     return;
 }
6378b062
 
393fd0d8
 void ff_id3v2_read(AVFormatContext *s, const char *magic, ID3v2ExtraMeta **extra_meta)
b3158f7a
 {
     int len, ret;
     uint8_t buf[ID3v2_HEADER_SIZE];
     int     found_header;
     int64_t off;
 
     do {
         /* save the current offset in case there's nothing to read/skip */
384c9c2f
         off = avio_tell(s->pb);
e63a3628
         ret = avio_read(s->pb, buf, ID3v2_HEADER_SIZE);
b3158f7a
         if (ret != ID3v2_HEADER_SIZE)
189665d9
             break;
b3158f7a
             found_header = ff_id3v2_match(buf, magic);
             if (found_header) {
             /* parse ID3v2 header */
             len = ((buf[6] & 0x7f) << 21) |
                   ((buf[7] & 0x7f) << 14) |
                   ((buf[8] & 0x7f) << 7) |
                    (buf[9] & 0x7f);
7a019dff
             ff_id3v2_parse(s, len, buf[3], buf[5], extra_meta);
b3158f7a
         } else {
f59d8ff8
             avio_seek(s->pb, off, SEEK_SET);
b3158f7a
         }
     } while (found_header);
fe01dd8d
     ff_metadata_conv(&s->metadata, NULL, ff_id3v2_34_metadata_conv);
c4a37885
     ff_metadata_conv(&s->metadata, NULL, id3v2_2_metadata_conv);
fe01dd8d
     ff_metadata_conv(&s->metadata, NULL, ff_id3v2_4_metadata_conv);
56e2ac6b
     merge_date(&s->metadata);
b3158f7a
 }
 
7a019dff
 void ff_id3v2_free_extra_meta(ID3v2ExtraMeta **extra_meta)
 {
     ID3v2ExtraMeta *current = *extra_meta, *next;
c780b543
     const ID3v2EMFunc *extra_func;
7a019dff
 
     while (current) {
c780b543
         if ((extra_func = get_extra_meta_func(current->tag, 1)))
             extra_func->free(current->data);
7a019dff
         next = current->next;
         av_freep(&current);
         current = next;
     }
 }
079ea6ca
 
 int ff_id3v2_parse_apic(AVFormatContext *s, ID3v2ExtraMeta **extra_meta)
 {
     ID3v2ExtraMeta *cur;
 
     for (cur = *extra_meta; cur; cur = cur->next) {
         ID3v2ExtraMetaAPIC *apic;
         AVStream *st;
 
         if (strcmp(cur->tag, "APIC"))
             continue;
         apic = cur->data;
 
         if (!(st = avformat_new_stream(s, NULL)))
             return AVERROR(ENOMEM);
 
         st->disposition      |= AV_DISPOSITION_ATTACHED_PIC;
         st->codec->codec_type = AVMEDIA_TYPE_VIDEO;
         st->codec->codec_id   = apic->id;
         av_dict_set(&st->metadata, "title",   apic->description, 0);
         av_dict_set(&st->metadata, "comment", apic->type, 0);
 
         av_init_packet(&st->attached_pic);
         st->attached_pic.data         = apic->data;
         st->attached_pic.size         = apic->len;
         st->attached_pic.destruct     = av_destruct_packet;
         st->attached_pic.stream_index = st->index;
713f3062
         st->attached_pic.flags       |= AV_PKT_FLAG_KEY;
079ea6ca
 
         apic->data = NULL;
         apic->len  = 0;
     }
 
     return 0;
 }