You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

2817 lines
91KB

  1. /*
  2. * RTMP network protocol
  3. * Copyright (c) 2009 Konstantin Shishkov
  4. *
  5. * This file is part of Libav.
  6. *
  7. * Libav is free software; you can redistribute it and/or
  8. * modify it under the terms of the GNU Lesser General Public
  9. * License as published by the Free Software Foundation; either
  10. * version 2.1 of the License, or (at your option) any later version.
  11. *
  12. * Libav is distributed in the hope that it will be useful,
  13. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  15. * Lesser General Public License for more details.
  16. *
  17. * You should have received a copy of the GNU Lesser General Public
  18. * License along with Libav; if not, write to the Free Software
  19. * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
  20. */
  21. /**
  22. * @file
  23. * RTMP protocol
  24. */
  25. #include "libavcodec/bytestream.h"
  26. #include "libavutil/avstring.h"
  27. #include "libavutil/base64.h"
  28. #include "libavutil/intfloat.h"
  29. #include "libavutil/lfg.h"
  30. #include "libavutil/md5.h"
  31. #include "libavutil/opt.h"
  32. #include "libavutil/random_seed.h"
  33. #include "libavutil/sha.h"
  34. #include "avformat.h"
  35. #include "internal.h"
  36. #include "network.h"
  37. #include "flv.h"
  38. #include "rtmp.h"
  39. #include "rtmpcrypt.h"
  40. #include "rtmppkt.h"
  41. #include "url.h"
  42. #if CONFIG_ZLIB
  43. #include <zlib.h>
  44. #endif
  45. #define APP_MAX_LENGTH 128
  46. #define PLAYPATH_MAX_LENGTH 256
  47. #define TCURL_MAX_LENGTH 512
  48. #define FLASHVER_MAX_LENGTH 64
  49. #define RTMP_PKTDATA_DEFAULT_SIZE 4096
  50. #define RTMP_HEADER 11
  51. /** RTMP protocol handler state */
  52. typedef enum {
  53. STATE_START, ///< client has not done anything yet
  54. STATE_HANDSHAKED, ///< client has performed handshake
  55. STATE_FCPUBLISH, ///< client FCPublishing stream (for output)
  56. STATE_PLAYING, ///< client has started receiving multimedia data from server
  57. STATE_SEEKING, ///< client has started the seek operation. Back on STATE_PLAYING when the time comes
  58. STATE_PUBLISHING, ///< client has started sending multimedia data to server (for output)
  59. STATE_RECEIVING, ///< received a publish command (for input)
  60. STATE_SENDING, ///< received a play command (for output)
  61. STATE_STOPPED, ///< the broadcast has been stopped
  62. } ClientState;
  63. typedef struct TrackedMethod {
  64. char *name;
  65. int id;
  66. } TrackedMethod;
  67. /** protocol handler context */
  68. typedef struct RTMPContext {
  69. const AVClass *class;
  70. URLContext* stream; ///< TCP stream used in interactions with RTMP server
  71. RTMPPacket prev_pkt[2][RTMP_CHANNELS]; ///< packet history used when reading and sending packets ([0] for reading, [1] for writing)
  72. int in_chunk_size; ///< size of the chunks incoming RTMP packets are divided into
  73. int out_chunk_size; ///< size of the chunks outgoing RTMP packets are divided into
  74. int is_input; ///< input/output flag
  75. char *playpath; ///< stream identifier to play (with possible "mp4:" prefix)
  76. int live; ///< 0: recorded, -1: live, -2: both
  77. char *app; ///< name of application
  78. char *conn; ///< append arbitrary AMF data to the Connect message
  79. ClientState state; ///< current state
  80. int stream_id; ///< ID assigned by the server for the stream
  81. uint8_t* flv_data; ///< buffer with data for demuxer
  82. int flv_size; ///< current buffer size
  83. int flv_off; ///< number of bytes read from current buffer
  84. int flv_nb_packets; ///< number of flv packets published
  85. RTMPPacket out_pkt; ///< rtmp packet, created from flv a/v or metadata (for output)
  86. uint32_t client_report_size; ///< number of bytes after which client should report to server
  87. uint32_t bytes_read; ///< number of bytes read from server
  88. uint32_t last_bytes_read; ///< number of bytes read last reported to server
  89. int skip_bytes; ///< number of bytes to skip from the input FLV stream in the next write call
  90. uint8_t flv_header[RTMP_HEADER]; ///< partial incoming flv packet header
  91. int flv_header_bytes; ///< number of initialized bytes in flv_header
  92. int nb_invokes; ///< keeps track of invoke messages
  93. char* tcurl; ///< url of the target stream
  94. char* flashver; ///< version of the flash plugin
  95. char* swfhash; ///< SHA256 hash of the decompressed SWF file (32 bytes)
  96. int swfhash_len; ///< length of the SHA256 hash
  97. int swfsize; ///< size of the decompressed SWF file
  98. char* swfurl; ///< url of the swf player
  99. char* swfverify; ///< URL to player swf file, compute hash/size automatically
  100. char swfverification[42]; ///< hash of the SWF verification
  101. char* pageurl; ///< url of the web page
  102. char* subscribe; ///< name of live stream to subscribe
  103. int server_bw; ///< server bandwidth
  104. int client_buffer_time; ///< client buffer time in ms
  105. int flush_interval; ///< number of packets flushed in the same request (RTMPT only)
  106. int encrypted; ///< use an encrypted connection (RTMPE only)
  107. TrackedMethod*tracked_methods; ///< tracked methods buffer
  108. int nb_tracked_methods; ///< number of tracked methods
  109. int tracked_methods_size; ///< size of the tracked methods buffer
  110. int listen; ///< listen mode flag
  111. int listen_timeout; ///< listen timeout to wait for new connections
  112. int nb_streamid; ///< The next stream id to return on createStream calls
  113. char username[50];
  114. char password[50];
  115. char auth_params[500];
  116. int do_reconnect;
  117. int auth_tried;
  118. } RTMPContext;
  119. #define PLAYER_KEY_OPEN_PART_LEN 30 ///< length of partial key used for first client digest signing
  120. /** Client key used for digest signing */
  121. static const uint8_t rtmp_player_key[] = {
  122. 'G', 'e', 'n', 'u', 'i', 'n', 'e', ' ', 'A', 'd', 'o', 'b', 'e', ' ',
  123. 'F', 'l', 'a', 's', 'h', ' ', 'P', 'l', 'a', 'y', 'e', 'r', ' ', '0', '0', '1',
  124. 0xF0, 0xEE, 0xC2, 0x4A, 0x80, 0x68, 0xBE, 0xE8, 0x2E, 0x00, 0xD0, 0xD1, 0x02,
  125. 0x9E, 0x7E, 0x57, 0x6E, 0xEC, 0x5D, 0x2D, 0x29, 0x80, 0x6F, 0xAB, 0x93, 0xB8,
  126. 0xE6, 0x36, 0xCF, 0xEB, 0x31, 0xAE
  127. };
  128. #define SERVER_KEY_OPEN_PART_LEN 36 ///< length of partial key used for first server digest signing
  129. /** Key used for RTMP server digest signing */
  130. static const uint8_t rtmp_server_key[] = {
  131. 'G', 'e', 'n', 'u', 'i', 'n', 'e', ' ', 'A', 'd', 'o', 'b', 'e', ' ',
  132. 'F', 'l', 'a', 's', 'h', ' ', 'M', 'e', 'd', 'i', 'a', ' ',
  133. 'S', 'e', 'r', 'v', 'e', 'r', ' ', '0', '0', '1',
  134. 0xF0, 0xEE, 0xC2, 0x4A, 0x80, 0x68, 0xBE, 0xE8, 0x2E, 0x00, 0xD0, 0xD1, 0x02,
  135. 0x9E, 0x7E, 0x57, 0x6E, 0xEC, 0x5D, 0x2D, 0x29, 0x80, 0x6F, 0xAB, 0x93, 0xB8,
  136. 0xE6, 0x36, 0xCF, 0xEB, 0x31, 0xAE
  137. };
  138. static int add_tracked_method(RTMPContext *rt, const char *name, int id)
  139. {
  140. int err;
  141. if (rt->nb_tracked_methods + 1 > rt->tracked_methods_size) {
  142. rt->tracked_methods_size = (rt->nb_tracked_methods + 1) * 2;
  143. if ((err = av_reallocp(&rt->tracked_methods, rt->tracked_methods_size *
  144. sizeof(*rt->tracked_methods))) < 0) {
  145. rt->nb_tracked_methods = 0;
  146. rt->tracked_methods_size = 0;
  147. return err;
  148. }
  149. }
  150. rt->tracked_methods[rt->nb_tracked_methods].name = av_strdup(name);
  151. if (!rt->tracked_methods[rt->nb_tracked_methods].name)
  152. return AVERROR(ENOMEM);
  153. rt->tracked_methods[rt->nb_tracked_methods].id = id;
  154. rt->nb_tracked_methods++;
  155. return 0;
  156. }
  157. static void del_tracked_method(RTMPContext *rt, int index)
  158. {
  159. memmove(&rt->tracked_methods[index], &rt->tracked_methods[index + 1],
  160. sizeof(*rt->tracked_methods) * (rt->nb_tracked_methods - index - 1));
  161. rt->nb_tracked_methods--;
  162. }
  163. static int find_tracked_method(URLContext *s, RTMPPacket *pkt, int offset,
  164. char **tracked_method)
  165. {
  166. RTMPContext *rt = s->priv_data;
  167. GetByteContext gbc;
  168. double pkt_id;
  169. int ret;
  170. int i;
  171. bytestream2_init(&gbc, pkt->data + offset, pkt->size - offset);
  172. if ((ret = ff_amf_read_number(&gbc, &pkt_id)) < 0)
  173. return ret;
  174. for (i = 0; i < rt->nb_tracked_methods; i++) {
  175. if (rt->tracked_methods[i].id != pkt_id)
  176. continue;
  177. *tracked_method = rt->tracked_methods[i].name;
  178. del_tracked_method(rt, i);
  179. break;
  180. }
  181. return 0;
  182. }
  183. static void free_tracked_methods(RTMPContext *rt)
  184. {
  185. int i;
  186. for (i = 0; i < rt->nb_tracked_methods; i ++)
  187. av_free(rt->tracked_methods[i].name);
  188. av_free(rt->tracked_methods);
  189. rt->tracked_methods = NULL;
  190. rt->tracked_methods_size = 0;
  191. rt->nb_tracked_methods = 0;
  192. }
  193. static int rtmp_send_packet(RTMPContext *rt, RTMPPacket *pkt, int track)
  194. {
  195. int ret;
  196. if (pkt->type == RTMP_PT_INVOKE && track) {
  197. GetByteContext gbc;
  198. char name[128];
  199. double pkt_id;
  200. int len;
  201. bytestream2_init(&gbc, pkt->data, pkt->size);
  202. if ((ret = ff_amf_read_string(&gbc, name, sizeof(name), &len)) < 0)
  203. goto fail;
  204. if ((ret = ff_amf_read_number(&gbc, &pkt_id)) < 0)
  205. goto fail;
  206. if ((ret = add_tracked_method(rt, name, pkt_id)) < 0)
  207. goto fail;
  208. }
  209. ret = ff_rtmp_packet_write(rt->stream, pkt, rt->out_chunk_size,
  210. rt->prev_pkt[1]);
  211. fail:
  212. ff_rtmp_packet_destroy(pkt);
  213. return ret;
  214. }
  215. static int rtmp_write_amf_data(URLContext *s, char *param, uint8_t **p)
  216. {
  217. char *field, *value;
  218. char type;
  219. /* The type must be B for Boolean, N for number, S for string, O for
  220. * object, or Z for null. For Booleans the data must be either 0 or 1 for
  221. * FALSE or TRUE, respectively. Likewise for Objects the data must be
  222. * 0 or 1 to end or begin an object, respectively. Data items in subobjects
  223. * may be named, by prefixing the type with 'N' and specifying the name
  224. * before the value (ie. NB:myFlag:1). This option may be used multiple times
  225. * to construct arbitrary AMF sequences. */
  226. if (param[0] && param[1] == ':') {
  227. type = param[0];
  228. value = param + 2;
  229. } else if (param[0] == 'N' && param[1] && param[2] == ':') {
  230. type = param[1];
  231. field = param + 3;
  232. value = strchr(field, ':');
  233. if (!value)
  234. goto fail;
  235. *value = '\0';
  236. value++;
  237. if (!field || !value)
  238. goto fail;
  239. ff_amf_write_field_name(p, field);
  240. } else {
  241. goto fail;
  242. }
  243. switch (type) {
  244. case 'B':
  245. ff_amf_write_bool(p, value[0] != '0');
  246. break;
  247. case 'S':
  248. ff_amf_write_string(p, value);
  249. break;
  250. case 'N':
  251. ff_amf_write_number(p, strtod(value, NULL));
  252. break;
  253. case 'Z':
  254. ff_amf_write_null(p);
  255. break;
  256. case 'O':
  257. if (value[0] != '0')
  258. ff_amf_write_object_start(p);
  259. else
  260. ff_amf_write_object_end(p);
  261. break;
  262. default:
  263. goto fail;
  264. break;
  265. }
  266. return 0;
  267. fail:
  268. av_log(s, AV_LOG_ERROR, "Invalid AMF parameter: %s\n", param);
  269. return AVERROR(EINVAL);
  270. }
  271. /**
  272. * Generate 'connect' call and send it to the server.
  273. */
  274. static int gen_connect(URLContext *s, RTMPContext *rt)
  275. {
  276. RTMPPacket pkt;
  277. uint8_t *p;
  278. int ret;
  279. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  280. 0, 4096)) < 0)
  281. return ret;
  282. p = pkt.data;
  283. ff_amf_write_string(&p, "connect");
  284. ff_amf_write_number(&p, ++rt->nb_invokes);
  285. ff_amf_write_object_start(&p);
  286. ff_amf_write_field_name(&p, "app");
  287. ff_amf_write_string2(&p, rt->app, rt->auth_params);
  288. if (!rt->is_input) {
  289. ff_amf_write_field_name(&p, "type");
  290. ff_amf_write_string(&p, "nonprivate");
  291. }
  292. ff_amf_write_field_name(&p, "flashVer");
  293. ff_amf_write_string(&p, rt->flashver);
  294. if (rt->swfurl) {
  295. ff_amf_write_field_name(&p, "swfUrl");
  296. ff_amf_write_string(&p, rt->swfurl);
  297. }
  298. ff_amf_write_field_name(&p, "tcUrl");
  299. ff_amf_write_string2(&p, rt->tcurl, rt->auth_params);
  300. if (rt->is_input) {
  301. ff_amf_write_field_name(&p, "fpad");
  302. ff_amf_write_bool(&p, 0);
  303. ff_amf_write_field_name(&p, "capabilities");
  304. ff_amf_write_number(&p, 15.0);
  305. /* Tell the server we support all the audio codecs except
  306. * SUPPORT_SND_INTEL (0x0008) and SUPPORT_SND_UNUSED (0x0010)
  307. * which are unused in the RTMP protocol implementation. */
  308. ff_amf_write_field_name(&p, "audioCodecs");
  309. ff_amf_write_number(&p, 4071.0);
  310. ff_amf_write_field_name(&p, "videoCodecs");
  311. ff_amf_write_number(&p, 252.0);
  312. ff_amf_write_field_name(&p, "videoFunction");
  313. ff_amf_write_number(&p, 1.0);
  314. if (rt->pageurl) {
  315. ff_amf_write_field_name(&p, "pageUrl");
  316. ff_amf_write_string(&p, rt->pageurl);
  317. }
  318. }
  319. ff_amf_write_object_end(&p);
  320. if (rt->conn) {
  321. char *param = rt->conn;
  322. // Write arbitrary AMF data to the Connect message.
  323. while (param != NULL) {
  324. char *sep;
  325. param += strspn(param, " ");
  326. if (!*param)
  327. break;
  328. sep = strchr(param, ' ');
  329. if (sep)
  330. *sep = '\0';
  331. if ((ret = rtmp_write_amf_data(s, param, &p)) < 0) {
  332. // Invalid AMF parameter.
  333. ff_rtmp_packet_destroy(&pkt);
  334. return ret;
  335. }
  336. if (sep)
  337. param = sep + 1;
  338. else
  339. break;
  340. }
  341. }
  342. pkt.size = p - pkt.data;
  343. return rtmp_send_packet(rt, &pkt, 1);
  344. }
  345. static int read_connect(URLContext *s, RTMPContext *rt)
  346. {
  347. RTMPPacket pkt = { 0 };
  348. uint8_t *p;
  349. const uint8_t *cp;
  350. int ret;
  351. char command[64];
  352. int stringlen;
  353. double seqnum;
  354. uint8_t tmpstr[256];
  355. GetByteContext gbc;
  356. if ((ret = ff_rtmp_packet_read(rt->stream, &pkt, rt->in_chunk_size,
  357. rt->prev_pkt[0])) < 0)
  358. return ret;
  359. cp = pkt.data;
  360. bytestream2_init(&gbc, cp, pkt.size);
  361. if (ff_amf_read_string(&gbc, command, sizeof(command), &stringlen)) {
  362. av_log(s, AV_LOG_ERROR, "Unable to read command string\n");
  363. ff_rtmp_packet_destroy(&pkt);
  364. return AVERROR_INVALIDDATA;
  365. }
  366. if (strcmp(command, "connect")) {
  367. av_log(s, AV_LOG_ERROR, "Expecting connect, got %s\n", command);
  368. ff_rtmp_packet_destroy(&pkt);
  369. return AVERROR_INVALIDDATA;
  370. }
  371. ret = ff_amf_read_number(&gbc, &seqnum);
  372. if (ret)
  373. av_log(s, AV_LOG_WARNING, "SeqNum not found\n");
  374. /* Here one could parse an AMF Object with data as flashVers and others. */
  375. ret = ff_amf_get_field_value(gbc.buffer,
  376. gbc.buffer + bytestream2_get_bytes_left(&gbc),
  377. "app", tmpstr, sizeof(tmpstr));
  378. if (ret)
  379. av_log(s, AV_LOG_WARNING, "App field not found in connect\n");
  380. if (!ret && strcmp(tmpstr, rt->app))
  381. av_log(s, AV_LOG_WARNING, "App field don't match up: %s <-> %s\n",
  382. tmpstr, rt->app);
  383. ff_rtmp_packet_destroy(&pkt);
  384. // Send Window Acknowledgement Size (as defined in speficication)
  385. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL,
  386. RTMP_PT_SERVER_BW, 0, 4)) < 0)
  387. return ret;
  388. p = pkt.data;
  389. bytestream_put_be32(&p, rt->server_bw);
  390. pkt.size = p - pkt.data;
  391. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  392. rt->prev_pkt[1]);
  393. ff_rtmp_packet_destroy(&pkt);
  394. if (ret < 0)
  395. return ret;
  396. // Send Peer Bandwidth
  397. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL,
  398. RTMP_PT_CLIENT_BW, 0, 5)) < 0)
  399. return ret;
  400. p = pkt.data;
  401. bytestream_put_be32(&p, rt->server_bw);
  402. bytestream_put_byte(&p, 2); // dynamic
  403. pkt.size = p - pkt.data;
  404. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  405. rt->prev_pkt[1]);
  406. ff_rtmp_packet_destroy(&pkt);
  407. if (ret < 0)
  408. return ret;
  409. // Ping request
  410. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL,
  411. RTMP_PT_PING, 0, 6)) < 0)
  412. return ret;
  413. p = pkt.data;
  414. bytestream_put_be16(&p, 0); // 0 -> Stream Begin
  415. bytestream_put_be32(&p, 0);
  416. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  417. rt->prev_pkt[1]);
  418. ff_rtmp_packet_destroy(&pkt);
  419. if (ret < 0)
  420. return ret;
  421. // Chunk size
  422. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL,
  423. RTMP_PT_CHUNK_SIZE, 0, 4)) < 0)
  424. return ret;
  425. p = pkt.data;
  426. bytestream_put_be32(&p, rt->out_chunk_size);
  427. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  428. rt->prev_pkt[1]);
  429. ff_rtmp_packet_destroy(&pkt);
  430. if (ret < 0)
  431. return ret;
  432. // Send result_ NetConnection.Connect.Success to connect
  433. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL,
  434. RTMP_PT_INVOKE, 0,
  435. RTMP_PKTDATA_DEFAULT_SIZE)) < 0)
  436. return ret;
  437. p = pkt.data;
  438. ff_amf_write_string(&p, "_result");
  439. ff_amf_write_number(&p, seqnum);
  440. ff_amf_write_object_start(&p);
  441. ff_amf_write_field_name(&p, "fmsVer");
  442. ff_amf_write_string(&p, "FMS/3,0,1,123");
  443. ff_amf_write_field_name(&p, "capabilities");
  444. ff_amf_write_number(&p, 31);
  445. ff_amf_write_object_end(&p);
  446. ff_amf_write_object_start(&p);
  447. ff_amf_write_field_name(&p, "level");
  448. ff_amf_write_string(&p, "status");
  449. ff_amf_write_field_name(&p, "code");
  450. ff_amf_write_string(&p, "NetConnection.Connect.Success");
  451. ff_amf_write_field_name(&p, "description");
  452. ff_amf_write_string(&p, "Connection succeeded.");
  453. ff_amf_write_field_name(&p, "objectEncoding");
  454. ff_amf_write_number(&p, 0);
  455. ff_amf_write_object_end(&p);
  456. pkt.size = p - pkt.data;
  457. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  458. rt->prev_pkt[1]);
  459. ff_rtmp_packet_destroy(&pkt);
  460. if (ret < 0)
  461. return ret;
  462. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL,
  463. RTMP_PT_INVOKE, 0, 30)) < 0)
  464. return ret;
  465. p = pkt.data;
  466. ff_amf_write_string(&p, "onBWDone");
  467. ff_amf_write_number(&p, 0);
  468. ff_amf_write_null(&p);
  469. ff_amf_write_number(&p, 8192);
  470. pkt.size = p - pkt.data;
  471. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  472. rt->prev_pkt[1]);
  473. ff_rtmp_packet_destroy(&pkt);
  474. return ret;
  475. }
  476. /**
  477. * Generate 'releaseStream' call and send it to the server. It should make
  478. * the server release some channel for media streams.
  479. */
  480. static int gen_release_stream(URLContext *s, RTMPContext *rt)
  481. {
  482. RTMPPacket pkt;
  483. uint8_t *p;
  484. int ret;
  485. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  486. 0, 29 + strlen(rt->playpath))) < 0)
  487. return ret;
  488. av_log(s, AV_LOG_DEBUG, "Releasing stream...\n");
  489. p = pkt.data;
  490. ff_amf_write_string(&p, "releaseStream");
  491. ff_amf_write_number(&p, ++rt->nb_invokes);
  492. ff_amf_write_null(&p);
  493. ff_amf_write_string(&p, rt->playpath);
  494. return rtmp_send_packet(rt, &pkt, 1);
  495. }
  496. /**
  497. * Generate 'FCPublish' call and send it to the server. It should make
  498. * the server preapare for receiving media streams.
  499. */
  500. static int gen_fcpublish_stream(URLContext *s, RTMPContext *rt)
  501. {
  502. RTMPPacket pkt;
  503. uint8_t *p;
  504. int ret;
  505. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  506. 0, 25 + strlen(rt->playpath))) < 0)
  507. return ret;
  508. av_log(s, AV_LOG_DEBUG, "FCPublish stream...\n");
  509. p = pkt.data;
  510. ff_amf_write_string(&p, "FCPublish");
  511. ff_amf_write_number(&p, ++rt->nb_invokes);
  512. ff_amf_write_null(&p);
  513. ff_amf_write_string(&p, rt->playpath);
  514. return rtmp_send_packet(rt, &pkt, 1);
  515. }
  516. /**
  517. * Generate 'FCUnpublish' call and send it to the server. It should make
  518. * the server destroy stream.
  519. */
  520. static int gen_fcunpublish_stream(URLContext *s, RTMPContext *rt)
  521. {
  522. RTMPPacket pkt;
  523. uint8_t *p;
  524. int ret;
  525. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  526. 0, 27 + strlen(rt->playpath))) < 0)
  527. return ret;
  528. av_log(s, AV_LOG_DEBUG, "UnPublishing stream...\n");
  529. p = pkt.data;
  530. ff_amf_write_string(&p, "FCUnpublish");
  531. ff_amf_write_number(&p, ++rt->nb_invokes);
  532. ff_amf_write_null(&p);
  533. ff_amf_write_string(&p, rt->playpath);
  534. return rtmp_send_packet(rt, &pkt, 0);
  535. }
  536. /**
  537. * Generate 'createStream' call and send it to the server. It should make
  538. * the server allocate some channel for media streams.
  539. */
  540. static int gen_create_stream(URLContext *s, RTMPContext *rt)
  541. {
  542. RTMPPacket pkt;
  543. uint8_t *p;
  544. int ret;
  545. av_log(s, AV_LOG_DEBUG, "Creating stream...\n");
  546. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  547. 0, 25)) < 0)
  548. return ret;
  549. p = pkt.data;
  550. ff_amf_write_string(&p, "createStream");
  551. ff_amf_write_number(&p, ++rt->nb_invokes);
  552. ff_amf_write_null(&p);
  553. return rtmp_send_packet(rt, &pkt, 1);
  554. }
  555. /**
  556. * Generate 'deleteStream' call and send it to the server. It should make
  557. * the server remove some channel for media streams.
  558. */
  559. static int gen_delete_stream(URLContext *s, RTMPContext *rt)
  560. {
  561. RTMPPacket pkt;
  562. uint8_t *p;
  563. int ret;
  564. av_log(s, AV_LOG_DEBUG, "Deleting stream...\n");
  565. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  566. 0, 34)) < 0)
  567. return ret;
  568. p = pkt.data;
  569. ff_amf_write_string(&p, "deleteStream");
  570. ff_amf_write_number(&p, ++rt->nb_invokes);
  571. ff_amf_write_null(&p);
  572. ff_amf_write_number(&p, rt->stream_id);
  573. return rtmp_send_packet(rt, &pkt, 0);
  574. }
  575. /**
  576. * Generate client buffer time and send it to the server.
  577. */
  578. static int gen_buffer_time(URLContext *s, RTMPContext *rt)
  579. {
  580. RTMPPacket pkt;
  581. uint8_t *p;
  582. int ret;
  583. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_PING,
  584. 1, 10)) < 0)
  585. return ret;
  586. p = pkt.data;
  587. bytestream_put_be16(&p, 3);
  588. bytestream_put_be32(&p, rt->stream_id);
  589. bytestream_put_be32(&p, rt->client_buffer_time);
  590. return rtmp_send_packet(rt, &pkt, 0);
  591. }
  592. /**
  593. * Generate 'play' call and send it to the server, then ping the server
  594. * to start actual playing.
  595. */
  596. static int gen_play(URLContext *s, RTMPContext *rt)
  597. {
  598. RTMPPacket pkt;
  599. uint8_t *p;
  600. int ret;
  601. av_log(s, AV_LOG_DEBUG, "Sending play command for '%s'\n", rt->playpath);
  602. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SOURCE_CHANNEL, RTMP_PT_INVOKE,
  603. 0, 29 + strlen(rt->playpath))) < 0)
  604. return ret;
  605. pkt.extra = rt->stream_id;
  606. p = pkt.data;
  607. ff_amf_write_string(&p, "play");
  608. ff_amf_write_number(&p, ++rt->nb_invokes);
  609. ff_amf_write_null(&p);
  610. ff_amf_write_string(&p, rt->playpath);
  611. ff_amf_write_number(&p, rt->live * 1000);
  612. return rtmp_send_packet(rt, &pkt, 1);
  613. }
  614. static int gen_seek(URLContext *s, RTMPContext *rt, int64_t timestamp)
  615. {
  616. RTMPPacket pkt;
  617. uint8_t *p;
  618. int ret;
  619. av_log(s, AV_LOG_DEBUG, "Sending seek command for timestamp %"PRId64"\n",
  620. timestamp);
  621. if ((ret = ff_rtmp_packet_create(&pkt, 3, RTMP_PT_INVOKE, 0, 26)) < 0)
  622. return ret;
  623. pkt.extra = rt->stream_id;
  624. p = pkt.data;
  625. ff_amf_write_string(&p, "seek");
  626. ff_amf_write_number(&p, 0); //no tracking back responses
  627. ff_amf_write_null(&p); //as usual, the first null param
  628. ff_amf_write_number(&p, timestamp); //where we want to jump
  629. return rtmp_send_packet(rt, &pkt, 1);
  630. }
  631. /**
  632. * Generate 'publish' call and send it to the server.
  633. */
  634. static int gen_publish(URLContext *s, RTMPContext *rt)
  635. {
  636. RTMPPacket pkt;
  637. uint8_t *p;
  638. int ret;
  639. av_log(s, AV_LOG_DEBUG, "Sending publish command for '%s'\n", rt->playpath);
  640. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SOURCE_CHANNEL, RTMP_PT_INVOKE,
  641. 0, 30 + strlen(rt->playpath))) < 0)
  642. return ret;
  643. pkt.extra = rt->stream_id;
  644. p = pkt.data;
  645. ff_amf_write_string(&p, "publish");
  646. ff_amf_write_number(&p, ++rt->nb_invokes);
  647. ff_amf_write_null(&p);
  648. ff_amf_write_string(&p, rt->playpath);
  649. ff_amf_write_string(&p, "live");
  650. return rtmp_send_packet(rt, &pkt, 1);
  651. }
  652. /**
  653. * Generate ping reply and send it to the server.
  654. */
  655. static int gen_pong(URLContext *s, RTMPContext *rt, RTMPPacket *ppkt)
  656. {
  657. RTMPPacket pkt;
  658. uint8_t *p;
  659. int ret;
  660. if (ppkt->size < 6) {
  661. av_log(s, AV_LOG_ERROR, "Too short ping packet (%d)\n",
  662. ppkt->size);
  663. return AVERROR_INVALIDDATA;
  664. }
  665. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_PING,
  666. ppkt->timestamp + 1, 6)) < 0)
  667. return ret;
  668. p = pkt.data;
  669. bytestream_put_be16(&p, 7);
  670. bytestream_put_be32(&p, AV_RB32(ppkt->data+2));
  671. return rtmp_send_packet(rt, &pkt, 0);
  672. }
  673. /**
  674. * Generate SWF verification message and send it to the server.
  675. */
  676. static int gen_swf_verification(URLContext *s, RTMPContext *rt)
  677. {
  678. RTMPPacket pkt;
  679. uint8_t *p;
  680. int ret;
  681. av_log(s, AV_LOG_DEBUG, "Sending SWF verification...\n");
  682. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_PING,
  683. 0, 44)) < 0)
  684. return ret;
  685. p = pkt.data;
  686. bytestream_put_be16(&p, 27);
  687. memcpy(p, rt->swfverification, 42);
  688. return rtmp_send_packet(rt, &pkt, 0);
  689. }
  690. /**
  691. * Generate server bandwidth message and send it to the server.
  692. */
  693. static int gen_server_bw(URLContext *s, RTMPContext *rt)
  694. {
  695. RTMPPacket pkt;
  696. uint8_t *p;
  697. int ret;
  698. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_SERVER_BW,
  699. 0, 4)) < 0)
  700. return ret;
  701. p = pkt.data;
  702. bytestream_put_be32(&p, rt->server_bw);
  703. return rtmp_send_packet(rt, &pkt, 0);
  704. }
  705. /**
  706. * Generate check bandwidth message and send it to the server.
  707. */
  708. static int gen_check_bw(URLContext *s, RTMPContext *rt)
  709. {
  710. RTMPPacket pkt;
  711. uint8_t *p;
  712. int ret;
  713. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  714. 0, 21)) < 0)
  715. return ret;
  716. p = pkt.data;
  717. ff_amf_write_string(&p, "_checkbw");
  718. ff_amf_write_number(&p, ++rt->nb_invokes);
  719. ff_amf_write_null(&p);
  720. return rtmp_send_packet(rt, &pkt, 1);
  721. }
  722. /**
  723. * Generate report on bytes read so far and send it to the server.
  724. */
  725. static int gen_bytes_read(URLContext *s, RTMPContext *rt, uint32_t ts)
  726. {
  727. RTMPPacket pkt;
  728. uint8_t *p;
  729. int ret;
  730. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_BYTES_READ,
  731. ts, 4)) < 0)
  732. return ret;
  733. p = pkt.data;
  734. bytestream_put_be32(&p, rt->bytes_read);
  735. return rtmp_send_packet(rt, &pkt, 0);
  736. }
  737. static int gen_fcsubscribe_stream(URLContext *s, RTMPContext *rt,
  738. const char *subscribe)
  739. {
  740. RTMPPacket pkt;
  741. uint8_t *p;
  742. int ret;
  743. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  744. 0, 27 + strlen(subscribe))) < 0)
  745. return ret;
  746. p = pkt.data;
  747. ff_amf_write_string(&p, "FCSubscribe");
  748. ff_amf_write_number(&p, ++rt->nb_invokes);
  749. ff_amf_write_null(&p);
  750. ff_amf_write_string(&p, subscribe);
  751. return rtmp_send_packet(rt, &pkt, 1);
  752. }
  753. int ff_rtmp_calc_digest(const uint8_t *src, int len, int gap,
  754. const uint8_t *key, int keylen, uint8_t *dst)
  755. {
  756. struct AVSHA *sha;
  757. uint8_t hmac_buf[64+32] = {0};
  758. int i;
  759. sha = av_sha_alloc();
  760. if (!sha)
  761. return AVERROR(ENOMEM);
  762. if (keylen < 64) {
  763. memcpy(hmac_buf, key, keylen);
  764. } else {
  765. av_sha_init(sha, 256);
  766. av_sha_update(sha,key, keylen);
  767. av_sha_final(sha, hmac_buf);
  768. }
  769. for (i = 0; i < 64; i++)
  770. hmac_buf[i] ^= HMAC_IPAD_VAL;
  771. av_sha_init(sha, 256);
  772. av_sha_update(sha, hmac_buf, 64);
  773. if (gap <= 0) {
  774. av_sha_update(sha, src, len);
  775. } else { //skip 32 bytes used for storing digest
  776. av_sha_update(sha, src, gap);
  777. av_sha_update(sha, src + gap + 32, len - gap - 32);
  778. }
  779. av_sha_final(sha, hmac_buf + 64);
  780. for (i = 0; i < 64; i++)
  781. hmac_buf[i] ^= HMAC_IPAD_VAL ^ HMAC_OPAD_VAL; //reuse XORed key for opad
  782. av_sha_init(sha, 256);
  783. av_sha_update(sha, hmac_buf, 64+32);
  784. av_sha_final(sha, dst);
  785. av_free(sha);
  786. return 0;
  787. }
  788. int ff_rtmp_calc_digest_pos(const uint8_t *buf, int off, int mod_val,
  789. int add_val)
  790. {
  791. int i, digest_pos = 0;
  792. for (i = 0; i < 4; i++)
  793. digest_pos += buf[i + off];
  794. digest_pos = digest_pos % mod_val + add_val;
  795. return digest_pos;
  796. }
  797. /**
  798. * Put HMAC-SHA2 digest of packet data (except for the bytes where this digest
  799. * will be stored) into that packet.
  800. *
  801. * @param buf handshake data (1536 bytes)
  802. * @param encrypted use an encrypted connection (RTMPE)
  803. * @return offset to the digest inside input data
  804. */
  805. static int rtmp_handshake_imprint_with_digest(uint8_t *buf, int encrypted)
  806. {
  807. int ret, digest_pos;
  808. if (encrypted)
  809. digest_pos = ff_rtmp_calc_digest_pos(buf, 772, 728, 776);
  810. else
  811. digest_pos = ff_rtmp_calc_digest_pos(buf, 8, 728, 12);
  812. ret = ff_rtmp_calc_digest(buf, RTMP_HANDSHAKE_PACKET_SIZE, digest_pos,
  813. rtmp_player_key, PLAYER_KEY_OPEN_PART_LEN,
  814. buf + digest_pos);
  815. if (ret < 0)
  816. return ret;
  817. return digest_pos;
  818. }
  819. /**
  820. * Verify that the received server response has the expected digest value.
  821. *
  822. * @param buf handshake data received from the server (1536 bytes)
  823. * @param off position to search digest offset from
  824. * @return 0 if digest is valid, digest position otherwise
  825. */
  826. static int rtmp_validate_digest(uint8_t *buf, int off)
  827. {
  828. uint8_t digest[32];
  829. int ret, digest_pos;
  830. digest_pos = ff_rtmp_calc_digest_pos(buf, off, 728, off + 4);
  831. ret = ff_rtmp_calc_digest(buf, RTMP_HANDSHAKE_PACKET_SIZE, digest_pos,
  832. rtmp_server_key, SERVER_KEY_OPEN_PART_LEN,
  833. digest);
  834. if (ret < 0)
  835. return ret;
  836. if (!memcmp(digest, buf + digest_pos, 32))
  837. return digest_pos;
  838. return 0;
  839. }
  840. static int rtmp_calc_swf_verification(URLContext *s, RTMPContext *rt,
  841. uint8_t *buf)
  842. {
  843. uint8_t *p;
  844. int ret;
  845. if (rt->swfhash_len != 32) {
  846. av_log(s, AV_LOG_ERROR,
  847. "Hash of the decompressed SWF file is not 32 bytes long.\n");
  848. return AVERROR(EINVAL);
  849. }
  850. p = &rt->swfverification[0];
  851. bytestream_put_byte(&p, 1);
  852. bytestream_put_byte(&p, 1);
  853. bytestream_put_be32(&p, rt->swfsize);
  854. bytestream_put_be32(&p, rt->swfsize);
  855. if ((ret = ff_rtmp_calc_digest(rt->swfhash, 32, 0, buf, 32, p)) < 0)
  856. return ret;
  857. return 0;
  858. }
  859. #if CONFIG_ZLIB
  860. static int rtmp_uncompress_swfplayer(uint8_t *in_data, int64_t in_size,
  861. uint8_t **out_data, int64_t *out_size)
  862. {
  863. z_stream zs = { 0 };
  864. void *ptr;
  865. int size;
  866. int ret = 0;
  867. zs.avail_in = in_size;
  868. zs.next_in = in_data;
  869. ret = inflateInit(&zs);
  870. if (ret != Z_OK)
  871. return AVERROR_UNKNOWN;
  872. do {
  873. uint8_t tmp_buf[16384];
  874. zs.avail_out = sizeof(tmp_buf);
  875. zs.next_out = tmp_buf;
  876. ret = inflate(&zs, Z_NO_FLUSH);
  877. if (ret != Z_OK && ret != Z_STREAM_END) {
  878. ret = AVERROR_UNKNOWN;
  879. goto fail;
  880. }
  881. size = sizeof(tmp_buf) - zs.avail_out;
  882. if (!(ptr = av_realloc(*out_data, *out_size + size))) {
  883. ret = AVERROR(ENOMEM);
  884. goto fail;
  885. }
  886. *out_data = ptr;
  887. memcpy(*out_data + *out_size, tmp_buf, size);
  888. *out_size += size;
  889. } while (zs.avail_out == 0);
  890. fail:
  891. inflateEnd(&zs);
  892. return ret;
  893. }
  894. #endif
  895. static int rtmp_calc_swfhash(URLContext *s)
  896. {
  897. RTMPContext *rt = s->priv_data;
  898. uint8_t *in_data = NULL, *out_data = NULL, *swfdata;
  899. int64_t in_size, out_size;
  900. URLContext *stream;
  901. char swfhash[32];
  902. int swfsize;
  903. int ret = 0;
  904. /* Get the SWF player file. */
  905. if ((ret = ffurl_open(&stream, rt->swfverify, AVIO_FLAG_READ,
  906. &s->interrupt_callback, NULL)) < 0) {
  907. av_log(s, AV_LOG_ERROR, "Cannot open connection %s.\n", rt->swfverify);
  908. goto fail;
  909. }
  910. if ((in_size = ffurl_seek(stream, 0, AVSEEK_SIZE)) < 0) {
  911. ret = AVERROR(EIO);
  912. goto fail;
  913. }
  914. if (!(in_data = av_malloc(in_size))) {
  915. ret = AVERROR(ENOMEM);
  916. goto fail;
  917. }
  918. if ((ret = ffurl_read_complete(stream, in_data, in_size)) < 0)
  919. goto fail;
  920. if (in_size < 3) {
  921. ret = AVERROR_INVALIDDATA;
  922. goto fail;
  923. }
  924. if (!memcmp(in_data, "CWS", 3)) {
  925. /* Decompress the SWF player file using Zlib. */
  926. if (!(out_data = av_malloc(8))) {
  927. ret = AVERROR(ENOMEM);
  928. goto fail;
  929. }
  930. *in_data = 'F'; // magic stuff
  931. memcpy(out_data, in_data, 8);
  932. out_size = 8;
  933. #if CONFIG_ZLIB
  934. if ((ret = rtmp_uncompress_swfplayer(in_data + 8, in_size - 8,
  935. &out_data, &out_size)) < 0)
  936. goto fail;
  937. #else
  938. av_log(s, AV_LOG_ERROR,
  939. "Zlib is required for decompressing the SWF player file.\n");
  940. ret = AVERROR(EINVAL);
  941. goto fail;
  942. #endif
  943. swfsize = out_size;
  944. swfdata = out_data;
  945. } else {
  946. swfsize = in_size;
  947. swfdata = in_data;
  948. }
  949. /* Compute the SHA256 hash of the SWF player file. */
  950. if ((ret = ff_rtmp_calc_digest(swfdata, swfsize, 0,
  951. "Genuine Adobe Flash Player 001", 30,
  952. swfhash)) < 0)
  953. goto fail;
  954. /* Set SWFVerification parameters. */
  955. av_opt_set_bin(rt, "rtmp_swfhash", swfhash, 32, 0);
  956. rt->swfsize = swfsize;
  957. fail:
  958. av_freep(&in_data);
  959. av_freep(&out_data);
  960. ffurl_close(stream);
  961. return ret;
  962. }
  963. /**
  964. * Perform handshake with the server by means of exchanging pseudorandom data
  965. * signed with HMAC-SHA2 digest.
  966. *
  967. * @return 0 if handshake succeeds, negative value otherwise
  968. */
  969. static int rtmp_handshake(URLContext *s, RTMPContext *rt)
  970. {
  971. AVLFG rnd;
  972. uint8_t tosend [RTMP_HANDSHAKE_PACKET_SIZE+1] = {
  973. 3, // unencrypted data
  974. 0, 0, 0, 0, // client uptime
  975. RTMP_CLIENT_VER1,
  976. RTMP_CLIENT_VER2,
  977. RTMP_CLIENT_VER3,
  978. RTMP_CLIENT_VER4,
  979. };
  980. uint8_t clientdata[RTMP_HANDSHAKE_PACKET_SIZE];
  981. uint8_t serverdata[RTMP_HANDSHAKE_PACKET_SIZE+1];
  982. int i;
  983. int server_pos, client_pos;
  984. uint8_t digest[32], signature[32];
  985. int ret, type = 0;
  986. av_log(s, AV_LOG_DEBUG, "Handshaking...\n");
  987. av_lfg_init(&rnd, 0xDEADC0DE);
  988. // generate handshake packet - 1536 bytes of pseudorandom data
  989. for (i = 9; i <= RTMP_HANDSHAKE_PACKET_SIZE; i++)
  990. tosend[i] = av_lfg_get(&rnd) >> 24;
  991. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  992. /* When the client wants to use RTMPE, we have to change the command
  993. * byte to 0x06 which means to use encrypted data and we have to set
  994. * the flash version to at least 9.0.115.0. */
  995. tosend[0] = 6;
  996. tosend[5] = 128;
  997. tosend[6] = 0;
  998. tosend[7] = 3;
  999. tosend[8] = 2;
  1000. /* Initialize the Diffie-Hellmann context and generate the public key
  1001. * to send to the server. */
  1002. if ((ret = ff_rtmpe_gen_pub_key(rt->stream, tosend + 1)) < 0)
  1003. return ret;
  1004. }
  1005. client_pos = rtmp_handshake_imprint_with_digest(tosend + 1, rt->encrypted);
  1006. if (client_pos < 0)
  1007. return client_pos;
  1008. if ((ret = ffurl_write(rt->stream, tosend,
  1009. RTMP_HANDSHAKE_PACKET_SIZE + 1)) < 0) {
  1010. av_log(s, AV_LOG_ERROR, "Cannot write RTMP handshake request\n");
  1011. return ret;
  1012. }
  1013. if ((ret = ffurl_read_complete(rt->stream, serverdata,
  1014. RTMP_HANDSHAKE_PACKET_SIZE + 1)) < 0) {
  1015. av_log(s, AV_LOG_ERROR, "Cannot read RTMP handshake response\n");
  1016. return ret;
  1017. }
  1018. if ((ret = ffurl_read_complete(rt->stream, clientdata,
  1019. RTMP_HANDSHAKE_PACKET_SIZE)) < 0) {
  1020. av_log(s, AV_LOG_ERROR, "Cannot read RTMP handshake response\n");
  1021. return ret;
  1022. }
  1023. av_log(s, AV_LOG_DEBUG, "Type answer %d\n", serverdata[0]);
  1024. av_log(s, AV_LOG_DEBUG, "Server version %d.%d.%d.%d\n",
  1025. serverdata[5], serverdata[6], serverdata[7], serverdata[8]);
  1026. if (rt->is_input && serverdata[5] >= 3) {
  1027. server_pos = rtmp_validate_digest(serverdata + 1, 772);
  1028. if (server_pos < 0)
  1029. return server_pos;
  1030. if (!server_pos) {
  1031. type = 1;
  1032. server_pos = rtmp_validate_digest(serverdata + 1, 8);
  1033. if (server_pos < 0)
  1034. return server_pos;
  1035. if (!server_pos) {
  1036. av_log(s, AV_LOG_ERROR, "Server response validating failed\n");
  1037. return AVERROR(EIO);
  1038. }
  1039. }
  1040. /* Generate SWFVerification token (SHA256 HMAC hash of decompressed SWF,
  1041. * key are the last 32 bytes of the server handshake. */
  1042. if (rt->swfsize) {
  1043. if ((ret = rtmp_calc_swf_verification(s, rt, serverdata + 1 +
  1044. RTMP_HANDSHAKE_PACKET_SIZE - 32)) < 0)
  1045. return ret;
  1046. }
  1047. ret = ff_rtmp_calc_digest(tosend + 1 + client_pos, 32, 0,
  1048. rtmp_server_key, sizeof(rtmp_server_key),
  1049. digest);
  1050. if (ret < 0)
  1051. return ret;
  1052. ret = ff_rtmp_calc_digest(clientdata, RTMP_HANDSHAKE_PACKET_SIZE - 32,
  1053. 0, digest, 32, signature);
  1054. if (ret < 0)
  1055. return ret;
  1056. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1057. /* Compute the shared secret key sent by the server and initialize
  1058. * the RC4 encryption. */
  1059. if ((ret = ff_rtmpe_compute_secret_key(rt->stream, serverdata + 1,
  1060. tosend + 1, type)) < 0)
  1061. return ret;
  1062. /* Encrypt the signature received by the server. */
  1063. ff_rtmpe_encrypt_sig(rt->stream, signature, digest, serverdata[0]);
  1064. }
  1065. if (memcmp(signature, clientdata + RTMP_HANDSHAKE_PACKET_SIZE - 32, 32)) {
  1066. av_log(s, AV_LOG_ERROR, "Signature mismatch\n");
  1067. return AVERROR(EIO);
  1068. }
  1069. for (i = 0; i < RTMP_HANDSHAKE_PACKET_SIZE; i++)
  1070. tosend[i] = av_lfg_get(&rnd) >> 24;
  1071. ret = ff_rtmp_calc_digest(serverdata + 1 + server_pos, 32, 0,
  1072. rtmp_player_key, sizeof(rtmp_player_key),
  1073. digest);
  1074. if (ret < 0)
  1075. return ret;
  1076. ret = ff_rtmp_calc_digest(tosend, RTMP_HANDSHAKE_PACKET_SIZE - 32, 0,
  1077. digest, 32,
  1078. tosend + RTMP_HANDSHAKE_PACKET_SIZE - 32);
  1079. if (ret < 0)
  1080. return ret;
  1081. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1082. /* Encrypt the signature to be send to the server. */
  1083. ff_rtmpe_encrypt_sig(rt->stream, tosend +
  1084. RTMP_HANDSHAKE_PACKET_SIZE - 32, digest,
  1085. serverdata[0]);
  1086. }
  1087. // write reply back to the server
  1088. if ((ret = ffurl_write(rt->stream, tosend,
  1089. RTMP_HANDSHAKE_PACKET_SIZE)) < 0)
  1090. return ret;
  1091. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1092. /* Set RC4 keys for encryption and update the keystreams. */
  1093. if ((ret = ff_rtmpe_update_keystream(rt->stream)) < 0)
  1094. return ret;
  1095. }
  1096. } else {
  1097. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1098. /* Compute the shared secret key sent by the server and initialize
  1099. * the RC4 encryption. */
  1100. if ((ret = ff_rtmpe_compute_secret_key(rt->stream, serverdata + 1,
  1101. tosend + 1, 1)) < 0)
  1102. return ret;
  1103. if (serverdata[0] == 9) {
  1104. /* Encrypt the signature received by the server. */
  1105. ff_rtmpe_encrypt_sig(rt->stream, signature, digest,
  1106. serverdata[0]);
  1107. }
  1108. }
  1109. if ((ret = ffurl_write(rt->stream, serverdata + 1,
  1110. RTMP_HANDSHAKE_PACKET_SIZE)) < 0)
  1111. return ret;
  1112. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1113. /* Set RC4 keys for encryption and update the keystreams. */
  1114. if ((ret = ff_rtmpe_update_keystream(rt->stream)) < 0)
  1115. return ret;
  1116. }
  1117. }
  1118. return 0;
  1119. }
  1120. static int rtmp_receive_hs_packet(RTMPContext* rt, uint32_t *first_int,
  1121. uint32_t *second_int, char *arraydata,
  1122. int size)
  1123. {
  1124. int inoutsize;
  1125. inoutsize = ffurl_read_complete(rt->stream, arraydata,
  1126. RTMP_HANDSHAKE_PACKET_SIZE);
  1127. if (inoutsize <= 0)
  1128. return AVERROR(EIO);
  1129. if (inoutsize != RTMP_HANDSHAKE_PACKET_SIZE) {
  1130. av_log(rt, AV_LOG_ERROR, "Erroneous Message size %d"
  1131. " not following standard\n", (int)inoutsize);
  1132. return AVERROR(EINVAL);
  1133. }
  1134. *first_int = AV_RB32(arraydata);
  1135. *second_int = AV_RB32(arraydata + 4);
  1136. return 0;
  1137. }
  1138. static int rtmp_send_hs_packet(RTMPContext* rt, uint32_t first_int,
  1139. uint32_t second_int, char *arraydata, int size)
  1140. {
  1141. int inoutsize;
  1142. AV_WB32(arraydata, first_int);
  1143. AV_WB32(arraydata + 4, second_int);
  1144. inoutsize = ffurl_write(rt->stream, arraydata,
  1145. RTMP_HANDSHAKE_PACKET_SIZE);
  1146. if (inoutsize != RTMP_HANDSHAKE_PACKET_SIZE) {
  1147. av_log(rt, AV_LOG_ERROR, "Unable to write answer\n");
  1148. return AVERROR(EIO);
  1149. }
  1150. return 0;
  1151. }
  1152. /**
  1153. * rtmp handshake server side
  1154. */
  1155. static int rtmp_server_handshake(URLContext *s, RTMPContext *rt)
  1156. {
  1157. uint8_t buffer[RTMP_HANDSHAKE_PACKET_SIZE];
  1158. uint32_t hs_epoch;
  1159. uint32_t hs_my_epoch;
  1160. uint8_t hs_c1[RTMP_HANDSHAKE_PACKET_SIZE];
  1161. uint8_t hs_s1[RTMP_HANDSHAKE_PACKET_SIZE];
  1162. uint32_t zeroes;
  1163. uint32_t temp = 0;
  1164. int randomidx = 0;
  1165. int inoutsize = 0;
  1166. int ret;
  1167. inoutsize = ffurl_read_complete(rt->stream, buffer, 1); // Receive C0
  1168. if (inoutsize <= 0) {
  1169. av_log(s, AV_LOG_ERROR, "Unable to read handshake\n");
  1170. return AVERROR(EIO);
  1171. }
  1172. // Check Version
  1173. if (buffer[0] != 3) {
  1174. av_log(s, AV_LOG_ERROR, "RTMP protocol version mismatch\n");
  1175. return AVERROR(EIO);
  1176. }
  1177. if (ffurl_write(rt->stream, buffer, 1) <= 0) { // Send S0
  1178. av_log(s, AV_LOG_ERROR,
  1179. "Unable to write answer - RTMP S0\n");
  1180. return AVERROR(EIO);
  1181. }
  1182. /* Receive C1 */
  1183. ret = rtmp_receive_hs_packet(rt, &hs_epoch, &zeroes, hs_c1,
  1184. RTMP_HANDSHAKE_PACKET_SIZE);
  1185. if (ret) {
  1186. av_log(s, AV_LOG_ERROR, "RTMP Handshake C1 Error\n");
  1187. return ret;
  1188. }
  1189. /* Send S1 */
  1190. /* By now same epoch will be sent */
  1191. hs_my_epoch = hs_epoch;
  1192. /* Generate random */
  1193. for (randomidx = 8; randomidx < (RTMP_HANDSHAKE_PACKET_SIZE);
  1194. randomidx += 4)
  1195. AV_WB32(hs_s1 + randomidx, av_get_random_seed());
  1196. ret = rtmp_send_hs_packet(rt, hs_my_epoch, 0, hs_s1,
  1197. RTMP_HANDSHAKE_PACKET_SIZE);
  1198. if (ret) {
  1199. av_log(s, AV_LOG_ERROR, "RTMP Handshake S1 Error\n");
  1200. return ret;
  1201. }
  1202. /* Send S2 */
  1203. ret = rtmp_send_hs_packet(rt, hs_epoch, 0, hs_c1,
  1204. RTMP_HANDSHAKE_PACKET_SIZE);
  1205. if (ret) {
  1206. av_log(s, AV_LOG_ERROR, "RTMP Handshake S2 Error\n");
  1207. return ret;
  1208. }
  1209. /* Receive C2 */
  1210. ret = rtmp_receive_hs_packet(rt, &temp, &zeroes, buffer,
  1211. RTMP_HANDSHAKE_PACKET_SIZE);
  1212. if (ret) {
  1213. av_log(s, AV_LOG_ERROR, "RTMP Handshake C2 Error\n");
  1214. return ret;
  1215. }
  1216. if (temp != hs_my_epoch)
  1217. av_log(s, AV_LOG_WARNING,
  1218. "Erroneous C2 Message epoch does not match up with C1 epoch\n");
  1219. if (memcmp(buffer + 8, hs_s1 + 8,
  1220. RTMP_HANDSHAKE_PACKET_SIZE - 8))
  1221. av_log(s, AV_LOG_WARNING,
  1222. "Erroneous C2 Message random does not match up\n");
  1223. return 0;
  1224. }
  1225. static int handle_chunk_size(URLContext *s, RTMPPacket *pkt)
  1226. {
  1227. RTMPContext *rt = s->priv_data;
  1228. int ret;
  1229. if (pkt->size < 4) {
  1230. av_log(s, AV_LOG_ERROR,
  1231. "Too short chunk size change packet (%d)\n",
  1232. pkt->size);
  1233. return AVERROR_INVALIDDATA;
  1234. }
  1235. if (!rt->is_input) {
  1236. /* Send the same chunk size change packet back to the server,
  1237. * setting the outgoing chunk size to the same as the incoming one. */
  1238. if ((ret = ff_rtmp_packet_write(rt->stream, pkt, rt->out_chunk_size,
  1239. rt->prev_pkt[1])) < 0)
  1240. return ret;
  1241. rt->out_chunk_size = AV_RB32(pkt->data);
  1242. }
  1243. rt->in_chunk_size = AV_RB32(pkt->data);
  1244. if (rt->in_chunk_size <= 0) {
  1245. av_log(s, AV_LOG_ERROR, "Incorrect chunk size %d\n",
  1246. rt->in_chunk_size);
  1247. return AVERROR_INVALIDDATA;
  1248. }
  1249. av_log(s, AV_LOG_DEBUG, "New incoming chunk size = %d\n",
  1250. rt->in_chunk_size);
  1251. return 0;
  1252. }
  1253. static int handle_ping(URLContext *s, RTMPPacket *pkt)
  1254. {
  1255. RTMPContext *rt = s->priv_data;
  1256. int t, ret;
  1257. if (pkt->size < 2) {
  1258. av_log(s, AV_LOG_ERROR, "Too short ping packet (%d)\n",
  1259. pkt->size);
  1260. return AVERROR_INVALIDDATA;
  1261. }
  1262. t = AV_RB16(pkt->data);
  1263. if (t == 6) {
  1264. if ((ret = gen_pong(s, rt, pkt)) < 0)
  1265. return ret;
  1266. } else if (t == 26) {
  1267. if (rt->swfsize) {
  1268. if ((ret = gen_swf_verification(s, rt)) < 0)
  1269. return ret;
  1270. } else {
  1271. av_log(s, AV_LOG_WARNING, "Ignoring SWFVerification request.\n");
  1272. }
  1273. }
  1274. return 0;
  1275. }
  1276. static int handle_client_bw(URLContext *s, RTMPPacket *pkt)
  1277. {
  1278. RTMPContext *rt = s->priv_data;
  1279. if (pkt->size < 4) {
  1280. av_log(s, AV_LOG_ERROR,
  1281. "Client bandwidth report packet is less than 4 bytes long (%d)\n",
  1282. pkt->size);
  1283. return AVERROR_INVALIDDATA;
  1284. }
  1285. rt->client_report_size = AV_RB32(pkt->data);
  1286. if (rt->client_report_size <= 0) {
  1287. av_log(s, AV_LOG_ERROR, "Incorrect client bandwidth %d\n",
  1288. rt->client_report_size);
  1289. return AVERROR_INVALIDDATA;
  1290. }
  1291. av_log(s, AV_LOG_DEBUG, "Client bandwidth = %d\n", rt->client_report_size);
  1292. rt->client_report_size >>= 1;
  1293. return 0;
  1294. }
  1295. static int handle_server_bw(URLContext *s, RTMPPacket *pkt)
  1296. {
  1297. RTMPContext *rt = s->priv_data;
  1298. if (pkt->size < 4) {
  1299. av_log(s, AV_LOG_ERROR,
  1300. "Too short server bandwidth report packet (%d)\n",
  1301. pkt->size);
  1302. return AVERROR_INVALIDDATA;
  1303. }
  1304. rt->server_bw = AV_RB32(pkt->data);
  1305. if (rt->server_bw <= 0) {
  1306. av_log(s, AV_LOG_ERROR, "Incorrect server bandwidth %d\n",
  1307. rt->server_bw);
  1308. return AVERROR_INVALIDDATA;
  1309. }
  1310. av_log(s, AV_LOG_DEBUG, "Server bandwidth = %d\n", rt->server_bw);
  1311. return 0;
  1312. }
  1313. static int do_adobe_auth(RTMPContext *rt, const char *user, const char *salt,
  1314. const char *opaque, const char *challenge)
  1315. {
  1316. uint8_t hash[16];
  1317. char hashstr[AV_BASE64_SIZE(sizeof(hash))], challenge2[10];
  1318. struct AVMD5 *md5 = av_md5_alloc();
  1319. if (!md5)
  1320. return AVERROR(ENOMEM);
  1321. snprintf(challenge2, sizeof(challenge2), "%08x", av_get_random_seed());
  1322. av_md5_init(md5);
  1323. av_md5_update(md5, user, strlen(user));
  1324. av_md5_update(md5, salt, strlen(salt));
  1325. av_md5_update(md5, rt->password, strlen(rt->password));
  1326. av_md5_final(md5, hash);
  1327. av_base64_encode(hashstr, sizeof(hashstr), hash,
  1328. sizeof(hash));
  1329. av_md5_init(md5);
  1330. av_md5_update(md5, hashstr, strlen(hashstr));
  1331. if (opaque)
  1332. av_md5_update(md5, opaque, strlen(opaque));
  1333. else if (challenge)
  1334. av_md5_update(md5, challenge, strlen(challenge));
  1335. av_md5_update(md5, challenge2, strlen(challenge2));
  1336. av_md5_final(md5, hash);
  1337. av_base64_encode(hashstr, sizeof(hashstr), hash,
  1338. sizeof(hash));
  1339. snprintf(rt->auth_params, sizeof(rt->auth_params),
  1340. "?authmod=%s&user=%s&challenge=%s&response=%s",
  1341. "adobe", user, challenge2, hashstr);
  1342. if (opaque)
  1343. av_strlcatf(rt->auth_params, sizeof(rt->auth_params),
  1344. "&opaque=%s", opaque);
  1345. av_free(md5);
  1346. return 0;
  1347. }
  1348. static int do_llnw_auth(RTMPContext *rt, const char *user, const char *nonce)
  1349. {
  1350. uint8_t hash[16];
  1351. char hashstr1[33], hashstr2[33];
  1352. const char *realm = "live";
  1353. const char *method = "publish";
  1354. const char *qop = "auth";
  1355. const char *nc = "00000001";
  1356. char cnonce[10];
  1357. struct AVMD5 *md5 = av_md5_alloc();
  1358. if (!md5)
  1359. return AVERROR(ENOMEM);
  1360. snprintf(cnonce, sizeof(cnonce), "%08x", av_get_random_seed());
  1361. av_md5_init(md5);
  1362. av_md5_update(md5, user, strlen(user));
  1363. av_md5_update(md5, ":", 1);
  1364. av_md5_update(md5, realm, strlen(realm));
  1365. av_md5_update(md5, ":", 1);
  1366. av_md5_update(md5, rt->password, strlen(rt->password));
  1367. av_md5_final(md5, hash);
  1368. ff_data_to_hex(hashstr1, hash, 16, 1);
  1369. hashstr1[32] = '\0';
  1370. av_md5_init(md5);
  1371. av_md5_update(md5, method, strlen(method));
  1372. av_md5_update(md5, ":/", 2);
  1373. av_md5_update(md5, rt->app, strlen(rt->app));
  1374. if (!strchr(rt->app, '/'))
  1375. av_md5_update(md5, "/_definst_", strlen("/_definst_"));
  1376. av_md5_final(md5, hash);
  1377. ff_data_to_hex(hashstr2, hash, 16, 1);
  1378. hashstr2[32] = '\0';
  1379. av_md5_init(md5);
  1380. av_md5_update(md5, hashstr1, strlen(hashstr1));
  1381. av_md5_update(md5, ":", 1);
  1382. if (nonce)
  1383. av_md5_update(md5, nonce, strlen(nonce));
  1384. av_md5_update(md5, ":", 1);
  1385. av_md5_update(md5, nc, strlen(nc));
  1386. av_md5_update(md5, ":", 1);
  1387. av_md5_update(md5, cnonce, strlen(cnonce));
  1388. av_md5_update(md5, ":", 1);
  1389. av_md5_update(md5, qop, strlen(qop));
  1390. av_md5_update(md5, ":", 1);
  1391. av_md5_update(md5, hashstr2, strlen(hashstr2));
  1392. av_md5_final(md5, hash);
  1393. ff_data_to_hex(hashstr1, hash, 16, 1);
  1394. snprintf(rt->auth_params, sizeof(rt->auth_params),
  1395. "?authmod=%s&user=%s&nonce=%s&cnonce=%s&nc=%s&response=%s",
  1396. "llnw", user, nonce, cnonce, nc, hashstr1);
  1397. av_free(md5);
  1398. return 0;
  1399. }
  1400. static int handle_connect_error(URLContext *s, const char *desc)
  1401. {
  1402. RTMPContext *rt = s->priv_data;
  1403. char buf[300], *ptr, authmod[15];
  1404. int i = 0, ret = 0;
  1405. const char *user = "", *salt = "", *opaque = NULL,
  1406. *challenge = NULL, *cptr = NULL, *nonce = NULL;
  1407. if (!(cptr = strstr(desc, "authmod=adobe")) &&
  1408. !(cptr = strstr(desc, "authmod=llnw"))) {
  1409. av_log(s, AV_LOG_ERROR,
  1410. "Unknown connect error (unsupported authentication method?)\n");
  1411. return AVERROR_UNKNOWN;
  1412. }
  1413. cptr += strlen("authmod=");
  1414. while (*cptr && *cptr != ' ' && i < sizeof(authmod) - 1)
  1415. authmod[i++] = *cptr++;
  1416. authmod[i] = '\0';
  1417. if (!rt->username[0] || !rt->password[0]) {
  1418. av_log(s, AV_LOG_ERROR, "No credentials set\n");
  1419. return AVERROR_UNKNOWN;
  1420. }
  1421. if (strstr(desc, "?reason=authfailed")) {
  1422. av_log(s, AV_LOG_ERROR, "Incorrect username/password\n");
  1423. return AVERROR_UNKNOWN;
  1424. } else if (strstr(desc, "?reason=nosuchuser")) {
  1425. av_log(s, AV_LOG_ERROR, "Incorrect username\n");
  1426. return AVERROR_UNKNOWN;
  1427. }
  1428. if (rt->auth_tried) {
  1429. av_log(s, AV_LOG_ERROR, "Authentication failed\n");
  1430. return AVERROR_UNKNOWN;
  1431. }
  1432. rt->auth_params[0] = '\0';
  1433. if (strstr(desc, "code=403 need auth")) {
  1434. snprintf(rt->auth_params, sizeof(rt->auth_params),
  1435. "?authmod=%s&user=%s", authmod, rt->username);
  1436. return 0;
  1437. }
  1438. if (!(cptr = strstr(desc, "?reason=needauth"))) {
  1439. av_log(s, AV_LOG_ERROR, "No auth parameters found\n");
  1440. return AVERROR_UNKNOWN;
  1441. }
  1442. av_strlcpy(buf, cptr + 1, sizeof(buf));
  1443. ptr = buf;
  1444. while (ptr) {
  1445. char *next = strchr(ptr, '&');
  1446. char *value = strchr(ptr, '=');
  1447. if (next)
  1448. *next++ = '\0';
  1449. if (value)
  1450. *value++ = '\0';
  1451. if (!strcmp(ptr, "user")) {
  1452. user = value;
  1453. } else if (!strcmp(ptr, "salt")) {
  1454. salt = value;
  1455. } else if (!strcmp(ptr, "opaque")) {
  1456. opaque = value;
  1457. } else if (!strcmp(ptr, "challenge")) {
  1458. challenge = value;
  1459. } else if (!strcmp(ptr, "nonce")) {
  1460. nonce = value;
  1461. }
  1462. ptr = next;
  1463. }
  1464. if (!strcmp(authmod, "adobe")) {
  1465. if ((ret = do_adobe_auth(rt, user, salt, opaque, challenge)) < 0)
  1466. return ret;
  1467. } else {
  1468. if ((ret = do_llnw_auth(rt, user, nonce)) < 0)
  1469. return ret;
  1470. }
  1471. rt->auth_tried = 1;
  1472. return 0;
  1473. }
  1474. static int handle_invoke_error(URLContext *s, RTMPPacket *pkt)
  1475. {
  1476. RTMPContext *rt = s->priv_data;
  1477. const uint8_t *data_end = pkt->data + pkt->size;
  1478. char *tracked_method = NULL;
  1479. int level = AV_LOG_ERROR;
  1480. uint8_t tmpstr[256];
  1481. int ret;
  1482. if ((ret = find_tracked_method(s, pkt, 9, &tracked_method)) < 0)
  1483. return ret;
  1484. if (!ff_amf_get_field_value(pkt->data + 9, data_end,
  1485. "description", tmpstr, sizeof(tmpstr))) {
  1486. if (tracked_method && (!strcmp(tracked_method, "_checkbw") ||
  1487. !strcmp(tracked_method, "releaseStream") ||
  1488. !strcmp(tracked_method, "FCSubscribe") ||
  1489. !strcmp(tracked_method, "FCPublish"))) {
  1490. /* Gracefully ignore Adobe-specific historical artifact errors. */
  1491. level = AV_LOG_WARNING;
  1492. ret = 0;
  1493. } else if (tracked_method && !strcmp(tracked_method, "connect")) {
  1494. ret = handle_connect_error(s, tmpstr);
  1495. if (!ret) {
  1496. rt->do_reconnect = 1;
  1497. level = AV_LOG_VERBOSE;
  1498. }
  1499. } else
  1500. ret = AVERROR_UNKNOWN;
  1501. av_log(s, level, "Server error: %s\n", tmpstr);
  1502. }
  1503. av_free(tracked_method);
  1504. return ret;
  1505. }
  1506. static int write_begin(URLContext *s)
  1507. {
  1508. RTMPContext *rt = s->priv_data;
  1509. PutByteContext pbc;
  1510. RTMPPacket spkt = { 0 };
  1511. int ret;
  1512. // Send Stream Begin 1
  1513. if ((ret = ff_rtmp_packet_create(&spkt, RTMP_NETWORK_CHANNEL,
  1514. RTMP_PT_PING, 0, 6)) < 0) {
  1515. av_log(s, AV_LOG_ERROR, "Unable to create response packet\n");
  1516. return ret;
  1517. }
  1518. bytestream2_init_writer(&pbc, spkt.data, spkt.size);
  1519. bytestream2_put_be16(&pbc, 0); // 0 -> Stream Begin
  1520. bytestream2_put_be32(&pbc, rt->nb_streamid);
  1521. ret = ff_rtmp_packet_write(rt->stream, &spkt, rt->out_chunk_size,
  1522. rt->prev_pkt[1]);
  1523. ff_rtmp_packet_destroy(&spkt);
  1524. return ret;
  1525. }
  1526. static int write_status(URLContext *s, RTMPPacket *pkt,
  1527. const char *status, const char *filename)
  1528. {
  1529. RTMPContext *rt = s->priv_data;
  1530. RTMPPacket spkt = { 0 };
  1531. char statusmsg[128];
  1532. uint8_t *pp;
  1533. int ret;
  1534. if ((ret = ff_rtmp_packet_create(&spkt, RTMP_SYSTEM_CHANNEL,
  1535. RTMP_PT_INVOKE, 0,
  1536. RTMP_PKTDATA_DEFAULT_SIZE)) < 0) {
  1537. av_log(s, AV_LOG_ERROR, "Unable to create response packet\n");
  1538. return ret;
  1539. }
  1540. pp = spkt.data;
  1541. spkt.extra = pkt->extra;
  1542. ff_amf_write_string(&pp, "onStatus");
  1543. ff_amf_write_number(&pp, 0);
  1544. ff_amf_write_null(&pp);
  1545. ff_amf_write_object_start(&pp);
  1546. ff_amf_write_field_name(&pp, "level");
  1547. ff_amf_write_string(&pp, "status");
  1548. ff_amf_write_field_name(&pp, "code");
  1549. ff_amf_write_string(&pp, status);
  1550. ff_amf_write_field_name(&pp, "description");
  1551. snprintf(statusmsg, sizeof(statusmsg),
  1552. "%s is now published", filename);
  1553. ff_amf_write_string(&pp, statusmsg);
  1554. ff_amf_write_field_name(&pp, "details");
  1555. ff_amf_write_string(&pp, filename);
  1556. ff_amf_write_field_name(&pp, "clientid");
  1557. snprintf(statusmsg, sizeof(statusmsg), "%s", LIBAVFORMAT_IDENT);
  1558. ff_amf_write_string(&pp, statusmsg);
  1559. ff_amf_write_object_end(&pp);
  1560. spkt.size = pp - spkt.data;
  1561. ret = ff_rtmp_packet_write(rt->stream, &spkt, rt->out_chunk_size,
  1562. rt->prev_pkt[1]);
  1563. ff_rtmp_packet_destroy(&spkt);
  1564. return ret;
  1565. }
  1566. static int send_invoke_response(URLContext *s, RTMPPacket *pkt)
  1567. {
  1568. RTMPContext *rt = s->priv_data;
  1569. double seqnum;
  1570. char filename[64];
  1571. char command[64];
  1572. int stringlen;
  1573. char *pchar;
  1574. const uint8_t *p = pkt->data;
  1575. uint8_t *pp = NULL;
  1576. RTMPPacket spkt = { 0 };
  1577. GetByteContext gbc;
  1578. int ret;
  1579. bytestream2_init(&gbc, p, pkt->size);
  1580. if (ff_amf_read_string(&gbc, command, sizeof(command),
  1581. &stringlen)) {
  1582. av_log(s, AV_LOG_ERROR, "Error in PT_INVOKE\n");
  1583. return AVERROR_INVALIDDATA;
  1584. }
  1585. ret = ff_amf_read_number(&gbc, &seqnum);
  1586. if (ret)
  1587. return ret;
  1588. ret = ff_amf_read_null(&gbc);
  1589. if (ret)
  1590. return ret;
  1591. if (!strcmp(command, "FCPublish") ||
  1592. !strcmp(command, "publish")) {
  1593. ret = ff_amf_read_string(&gbc, filename,
  1594. sizeof(filename), &stringlen);
  1595. // check with url
  1596. if (s->filename) {
  1597. pchar = strrchr(s->filename, '/');
  1598. if (!pchar) {
  1599. av_log(s, AV_LOG_WARNING,
  1600. "Unable to find / in url %s, bad format\n",
  1601. s->filename);
  1602. pchar = s->filename;
  1603. }
  1604. pchar++;
  1605. if (strcmp(pchar, filename))
  1606. av_log(s, AV_LOG_WARNING, "Unexpected stream %s, expecting"
  1607. " %s\n", filename, pchar);
  1608. }
  1609. rt->state = STATE_RECEIVING;
  1610. }
  1611. if (!strcmp(command, "FCPublish")) {
  1612. if ((ret = ff_rtmp_packet_create(&spkt, RTMP_SYSTEM_CHANNEL,
  1613. RTMP_PT_INVOKE, 0,
  1614. RTMP_PKTDATA_DEFAULT_SIZE)) < 0) {
  1615. av_log(s, AV_LOG_ERROR, "Unable to create response packet\n");
  1616. return ret;
  1617. }
  1618. pp = spkt.data;
  1619. ff_amf_write_string(&pp, "onFCPublish");
  1620. } else if (!strcmp(command, "publish")) {
  1621. ret = write_begin(s);
  1622. if (ret < 0)
  1623. return ret;
  1624. // Send onStatus(NetStream.Publish.Start)
  1625. return write_status(s, pkt, "NetStream.Publish.Start",
  1626. filename);
  1627. } else if (!strcmp(command, "play")) {
  1628. ret = write_begin(s);
  1629. if (ret < 0)
  1630. return ret;
  1631. rt->state = STATE_SENDING;
  1632. return write_status(s, pkt, "NetStream.Play.Start",
  1633. filename);
  1634. } else {
  1635. if ((ret = ff_rtmp_packet_create(&spkt, RTMP_SYSTEM_CHANNEL,
  1636. RTMP_PT_INVOKE, 0,
  1637. RTMP_PKTDATA_DEFAULT_SIZE)) < 0) {
  1638. av_log(s, AV_LOG_ERROR, "Unable to create response packet\n");
  1639. return ret;
  1640. }
  1641. pp = spkt.data;
  1642. ff_amf_write_string(&pp, "_result");
  1643. ff_amf_write_number(&pp, seqnum);
  1644. ff_amf_write_null(&pp);
  1645. if (!strcmp(command, "createStream")) {
  1646. rt->nb_streamid++;
  1647. if (rt->nb_streamid == 0 || rt->nb_streamid == 2)
  1648. rt->nb_streamid++; /* Values 0 and 2 are reserved */
  1649. ff_amf_write_number(&pp, rt->nb_streamid);
  1650. /* By now we don't control which streams are removed in
  1651. * deleteStream. There is no stream creation control
  1652. * if a client creates more than 2^32 - 2 streams. */
  1653. }
  1654. }
  1655. spkt.size = pp - spkt.data;
  1656. ret = ff_rtmp_packet_write(rt->stream, &spkt, rt->out_chunk_size,
  1657. rt->prev_pkt[1]);
  1658. ff_rtmp_packet_destroy(&spkt);
  1659. return ret;
  1660. }
  1661. static int handle_invoke_result(URLContext *s, RTMPPacket *pkt)
  1662. {
  1663. RTMPContext *rt = s->priv_data;
  1664. char *tracked_method = NULL;
  1665. int ret = 0;
  1666. if ((ret = find_tracked_method(s, pkt, 10, &tracked_method)) < 0)
  1667. return ret;
  1668. if (!tracked_method) {
  1669. /* Ignore this reply when the current method is not tracked. */
  1670. return ret;
  1671. }
  1672. if (!strcmp(tracked_method, "connect")) {
  1673. if (!rt->is_input) {
  1674. if ((ret = gen_release_stream(s, rt)) < 0)
  1675. goto fail;
  1676. if ((ret = gen_fcpublish_stream(s, rt)) < 0)
  1677. goto fail;
  1678. } else {
  1679. if ((ret = gen_server_bw(s, rt)) < 0)
  1680. goto fail;
  1681. }
  1682. if ((ret = gen_create_stream(s, rt)) < 0)
  1683. goto fail;
  1684. if (rt->is_input) {
  1685. /* Send the FCSubscribe command when the name of live
  1686. * stream is defined by the user or if it's a live stream. */
  1687. if (rt->subscribe) {
  1688. if ((ret = gen_fcsubscribe_stream(s, rt, rt->subscribe)) < 0)
  1689. goto fail;
  1690. } else if (rt->live == -1) {
  1691. if ((ret = gen_fcsubscribe_stream(s, rt, rt->playpath)) < 0)
  1692. goto fail;
  1693. }
  1694. }
  1695. } else if (!strcmp(tracked_method, "createStream")) {
  1696. //extract a number from the result
  1697. if (pkt->data[10] || pkt->data[19] != 5 || pkt->data[20]) {
  1698. av_log(s, AV_LOG_WARNING, "Unexpected reply on connect()\n");
  1699. } else {
  1700. rt->stream_id = av_int2double(AV_RB64(pkt->data + 21));
  1701. }
  1702. if (!rt->is_input) {
  1703. if ((ret = gen_publish(s, rt)) < 0)
  1704. goto fail;
  1705. } else {
  1706. if ((ret = gen_play(s, rt)) < 0)
  1707. goto fail;
  1708. if ((ret = gen_buffer_time(s, rt)) < 0)
  1709. goto fail;
  1710. }
  1711. }
  1712. fail:
  1713. av_free(tracked_method);
  1714. return ret;
  1715. }
  1716. static int handle_invoke_status(URLContext *s, RTMPPacket *pkt)
  1717. {
  1718. RTMPContext *rt = s->priv_data;
  1719. const uint8_t *data_end = pkt->data + pkt->size;
  1720. const uint8_t *ptr = pkt->data + RTMP_HEADER;
  1721. uint8_t tmpstr[256];
  1722. int i, t;
  1723. for (i = 0; i < 2; i++) {
  1724. t = ff_amf_tag_size(ptr, data_end);
  1725. if (t < 0)
  1726. return 1;
  1727. ptr += t;
  1728. }
  1729. t = ff_amf_get_field_value(ptr, data_end, "level", tmpstr, sizeof(tmpstr));
  1730. if (!t && !strcmp(tmpstr, "error")) {
  1731. t = ff_amf_get_field_value(ptr, data_end,
  1732. "description", tmpstr, sizeof(tmpstr));
  1733. if (t || !tmpstr[0])
  1734. t = ff_amf_get_field_value(ptr, data_end, "code",
  1735. tmpstr, sizeof(tmpstr));
  1736. if (!t)
  1737. av_log(s, AV_LOG_ERROR, "Server error: %s\n", tmpstr);
  1738. return -1;
  1739. }
  1740. t = ff_amf_get_field_value(ptr, data_end, "code", tmpstr, sizeof(tmpstr));
  1741. if (!t && !strcmp(tmpstr, "NetStream.Play.Start")) rt->state = STATE_PLAYING;
  1742. if (!t && !strcmp(tmpstr, "NetStream.Play.Stop")) rt->state = STATE_STOPPED;
  1743. if (!t && !strcmp(tmpstr, "NetStream.Play.UnpublishNotify")) rt->state = STATE_STOPPED;
  1744. if (!t && !strcmp(tmpstr, "NetStream.Publish.Start")) rt->state = STATE_PUBLISHING;
  1745. if (!t && !strcmp(tmpstr, "NetStream.Seek.Notify")) rt->state = STATE_PLAYING;
  1746. return 0;
  1747. }
  1748. static int handle_invoke(URLContext *s, RTMPPacket *pkt)
  1749. {
  1750. RTMPContext *rt = s->priv_data;
  1751. int ret = 0;
  1752. //TODO: check for the messages sent for wrong state?
  1753. if (ff_amf_match_string(pkt->data, pkt->size, "_error")) {
  1754. if ((ret = handle_invoke_error(s, pkt)) < 0)
  1755. return ret;
  1756. } else if (ff_amf_match_string(pkt->data, pkt->size, "_result")) {
  1757. if ((ret = handle_invoke_result(s, pkt)) < 0)
  1758. return ret;
  1759. } else if (ff_amf_match_string(pkt->data, pkt->size, "onStatus")) {
  1760. if ((ret = handle_invoke_status(s, pkt)) < 0)
  1761. return ret;
  1762. } else if (ff_amf_match_string(pkt->data, pkt->size, "onBWDone")) {
  1763. if ((ret = gen_check_bw(s, rt)) < 0)
  1764. return ret;
  1765. } else if (ff_amf_match_string(pkt->data, pkt->size, "releaseStream") ||
  1766. ff_amf_match_string(pkt->data, pkt->size, "FCPublish") ||
  1767. ff_amf_match_string(pkt->data, pkt->size, "publish") ||
  1768. ff_amf_match_string(pkt->data, pkt->size, "play") ||
  1769. ff_amf_match_string(pkt->data, pkt->size, "_checkbw") ||
  1770. ff_amf_match_string(pkt->data, pkt->size, "createStream")) {
  1771. if ((ret = send_invoke_response(s, pkt)) < 0)
  1772. return ret;
  1773. }
  1774. return ret;
  1775. }
  1776. static int update_offset(RTMPContext *rt, int size)
  1777. {
  1778. int old_flv_size;
  1779. // generate packet header and put data into buffer for FLV demuxer
  1780. if (rt->flv_off < rt->flv_size) {
  1781. // There is old unread data in the buffer, thus append at the end
  1782. old_flv_size = rt->flv_size;
  1783. rt->flv_size += size;
  1784. } else {
  1785. // All data has been read, write the new data at the start of the buffer
  1786. old_flv_size = 0;
  1787. rt->flv_size = size;
  1788. rt->flv_off = 0;
  1789. }
  1790. return old_flv_size;
  1791. }
  1792. static int append_flv_data(RTMPContext *rt, RTMPPacket *pkt, int skip)
  1793. {
  1794. int old_flv_size, ret;
  1795. PutByteContext pbc;
  1796. const uint8_t *data = pkt->data + skip;
  1797. const int size = pkt->size - skip;
  1798. uint32_t ts = pkt->timestamp;
  1799. old_flv_size = update_offset(rt, size + 15);
  1800. if ((ret = av_reallocp(&rt->flv_data, rt->flv_size)) < 0) {
  1801. rt->flv_size = rt->flv_off = 0;
  1802. return ret;
  1803. }
  1804. bytestream2_init_writer(&pbc, rt->flv_data, rt->flv_size);
  1805. bytestream2_skip_p(&pbc, old_flv_size);
  1806. bytestream2_put_byte(&pbc, pkt->type);
  1807. bytestream2_put_be24(&pbc, size);
  1808. bytestream2_put_be24(&pbc, ts);
  1809. bytestream2_put_byte(&pbc, ts >> 24);
  1810. bytestream2_put_be24(&pbc, 0);
  1811. bytestream2_put_buffer(&pbc, data, size);
  1812. bytestream2_put_be32(&pbc, 0);
  1813. return 0;
  1814. }
  1815. static int handle_notify(URLContext *s, RTMPPacket *pkt)
  1816. {
  1817. RTMPContext *rt = s->priv_data;
  1818. uint8_t commandbuffer[64];
  1819. char statusmsg[128];
  1820. int stringlen, ret, skip = 0;
  1821. GetByteContext gbc;
  1822. bytestream2_init(&gbc, pkt->data, pkt->size);
  1823. if (ff_amf_read_string(&gbc, commandbuffer, sizeof(commandbuffer),
  1824. &stringlen))
  1825. return AVERROR_INVALIDDATA;
  1826. // Skip the @setDataFrame string and validate it is a notification
  1827. if (!strcmp(commandbuffer, "@setDataFrame")) {
  1828. skip = gbc.buffer - pkt->data;
  1829. ret = ff_amf_read_string(&gbc, statusmsg,
  1830. sizeof(statusmsg), &stringlen);
  1831. if (ret < 0)
  1832. return AVERROR_INVALIDDATA;
  1833. }
  1834. return append_flv_data(rt, pkt, skip);
  1835. }
  1836. /**
  1837. * Parse received packet and possibly perform some action depending on
  1838. * the packet contents.
  1839. * @return 0 for no errors, negative values for serious errors which prevent
  1840. * further communications, positive values for uncritical errors
  1841. */
  1842. static int rtmp_parse_result(URLContext *s, RTMPContext *rt, RTMPPacket *pkt)
  1843. {
  1844. int ret;
  1845. #ifdef DEBUG
  1846. ff_rtmp_packet_dump(s, pkt);
  1847. #endif
  1848. switch (pkt->type) {
  1849. case RTMP_PT_BYTES_READ:
  1850. av_dlog(s, "received bytes read report\n");
  1851. break;
  1852. case RTMP_PT_CHUNK_SIZE:
  1853. if ((ret = handle_chunk_size(s, pkt)) < 0)
  1854. return ret;
  1855. break;
  1856. case RTMP_PT_PING:
  1857. if ((ret = handle_ping(s, pkt)) < 0)
  1858. return ret;
  1859. break;
  1860. case RTMP_PT_CLIENT_BW:
  1861. if ((ret = handle_client_bw(s, pkt)) < 0)
  1862. return ret;
  1863. break;
  1864. case RTMP_PT_SERVER_BW:
  1865. if ((ret = handle_server_bw(s, pkt)) < 0)
  1866. return ret;
  1867. break;
  1868. case RTMP_PT_INVOKE:
  1869. if ((ret = handle_invoke(s, pkt)) < 0)
  1870. return ret;
  1871. break;
  1872. case RTMP_PT_VIDEO:
  1873. case RTMP_PT_AUDIO:
  1874. case RTMP_PT_METADATA:
  1875. case RTMP_PT_NOTIFY:
  1876. /* Audio, Video and Metadata packets are parsed in get_packet() */
  1877. break;
  1878. default:
  1879. av_log(s, AV_LOG_VERBOSE, "Unknown packet type received 0x%02X\n", pkt->type);
  1880. break;
  1881. }
  1882. return 0;
  1883. }
  1884. static int handle_metadata(RTMPContext *rt, RTMPPacket *pkt)
  1885. {
  1886. int ret, old_flv_size, type;
  1887. const uint8_t *next;
  1888. uint8_t *p;
  1889. uint32_t size;
  1890. uint32_t ts, cts, pts = 0;
  1891. old_flv_size = update_offset(rt, pkt->size);
  1892. if ((ret = av_reallocp(&rt->flv_data, rt->flv_size)) < 0) {
  1893. rt->flv_size = rt->flv_off = 0;
  1894. return ret;
  1895. }
  1896. next = pkt->data;
  1897. p = rt->flv_data + old_flv_size;
  1898. /* copy data while rewriting timestamps */
  1899. ts = pkt->timestamp;
  1900. while (next - pkt->data < pkt->size - RTMP_HEADER) {
  1901. type = bytestream_get_byte(&next);
  1902. size = bytestream_get_be24(&next);
  1903. cts = bytestream_get_be24(&next);
  1904. cts |= bytestream_get_byte(&next) << 24;
  1905. if (!pts)
  1906. pts = cts;
  1907. ts += cts - pts;
  1908. pts = cts;
  1909. if (size + 3 + 4 > pkt->data + pkt->size - next)
  1910. break;
  1911. bytestream_put_byte(&p, type);
  1912. bytestream_put_be24(&p, size);
  1913. bytestream_put_be24(&p, ts);
  1914. bytestream_put_byte(&p, ts >> 24);
  1915. memcpy(p, next, size + 3 + 4);
  1916. next += size + 3 + 4;
  1917. p += size + 3 + 4;
  1918. }
  1919. if (p != rt->flv_data + rt->flv_size) {
  1920. av_log(NULL, AV_LOG_WARNING, "Incomplete flv packets in "
  1921. "RTMP_PT_METADATA packet\n");
  1922. rt->flv_size = p - rt->flv_data;
  1923. }
  1924. return 0;
  1925. }
  1926. /**
  1927. * Interact with the server by receiving and sending RTMP packets until
  1928. * there is some significant data (media data or expected status notification).
  1929. *
  1930. * @param s reading context
  1931. * @param for_header non-zero value tells function to work until it
  1932. * gets notification from the server that playing has been started,
  1933. * otherwise function will work until some media data is received (or
  1934. * an error happens)
  1935. * @return 0 for successful operation, negative value in case of error
  1936. */
  1937. static int get_packet(URLContext *s, int for_header)
  1938. {
  1939. RTMPContext *rt = s->priv_data;
  1940. int ret;
  1941. if (rt->state == STATE_STOPPED)
  1942. return AVERROR_EOF;
  1943. for (;;) {
  1944. RTMPPacket rpkt = { 0 };
  1945. if ((ret = ff_rtmp_packet_read(rt->stream, &rpkt,
  1946. rt->in_chunk_size, rt->prev_pkt[0])) <= 0) {
  1947. if (ret == 0) {
  1948. return AVERROR(EAGAIN);
  1949. } else {
  1950. return AVERROR(EIO);
  1951. }
  1952. }
  1953. rt->bytes_read += ret;
  1954. if (rt->bytes_read > rt->last_bytes_read + rt->client_report_size) {
  1955. av_log(s, AV_LOG_DEBUG, "Sending bytes read report\n");
  1956. if ((ret = gen_bytes_read(s, rt, rpkt.timestamp + 1)) < 0)
  1957. return ret;
  1958. rt->last_bytes_read = rt->bytes_read;
  1959. }
  1960. ret = rtmp_parse_result(s, rt, &rpkt);
  1961. // At this point we must check if we are in the seek state and continue
  1962. // with the next packet. handle_invoke will get us out of this state
  1963. // when the right message is encountered
  1964. if (rt->state == STATE_SEEKING) {
  1965. ff_rtmp_packet_destroy(&rpkt);
  1966. // We continue, let the natural flow of things happen:
  1967. // AVERROR(EAGAIN) or handle_invoke gets us out of here
  1968. continue;
  1969. }
  1970. if (ret < 0) {//serious error in current packet
  1971. ff_rtmp_packet_destroy(&rpkt);
  1972. return ret;
  1973. }
  1974. if (rt->do_reconnect && for_header) {
  1975. ff_rtmp_packet_destroy(&rpkt);
  1976. return 0;
  1977. }
  1978. if (rt->state == STATE_STOPPED) {
  1979. ff_rtmp_packet_destroy(&rpkt);
  1980. return AVERROR_EOF;
  1981. }
  1982. if (for_header && (rt->state == STATE_PLAYING ||
  1983. rt->state == STATE_PUBLISHING ||
  1984. rt->state == STATE_SENDING ||
  1985. rt->state == STATE_RECEIVING)) {
  1986. ff_rtmp_packet_destroy(&rpkt);
  1987. return 0;
  1988. }
  1989. if (!rpkt.size || !rt->is_input) {
  1990. ff_rtmp_packet_destroy(&rpkt);
  1991. continue;
  1992. }
  1993. if (rpkt.type == RTMP_PT_VIDEO || rpkt.type == RTMP_PT_AUDIO) {
  1994. ret = append_flv_data(rt, &rpkt, 0);
  1995. ff_rtmp_packet_destroy(&rpkt);
  1996. return ret;
  1997. } else if (rpkt.type == RTMP_PT_NOTIFY) {
  1998. ret = handle_notify(s, &rpkt);
  1999. ff_rtmp_packet_destroy(&rpkt);
  2000. return ret;
  2001. } else if (rpkt.type == RTMP_PT_METADATA) {
  2002. ret = handle_metadata(rt, &rpkt);
  2003. ff_rtmp_packet_destroy(&rpkt);
  2004. return 0;
  2005. }
  2006. ff_rtmp_packet_destroy(&rpkt);
  2007. }
  2008. }
  2009. static int rtmp_close(URLContext *h)
  2010. {
  2011. RTMPContext *rt = h->priv_data;
  2012. int ret = 0, i, j;
  2013. if (!rt->is_input) {
  2014. rt->flv_data = NULL;
  2015. if (rt->out_pkt.size)
  2016. ff_rtmp_packet_destroy(&rt->out_pkt);
  2017. if (rt->state > STATE_FCPUBLISH)
  2018. ret = gen_fcunpublish_stream(h, rt);
  2019. }
  2020. if (rt->state > STATE_HANDSHAKED)
  2021. ret = gen_delete_stream(h, rt);
  2022. for (i = 0; i < 2; i++)
  2023. for (j = 0; j < RTMP_CHANNELS; j++)
  2024. ff_rtmp_packet_destroy(&rt->prev_pkt[i][j]);
  2025. free_tracked_methods(rt);
  2026. av_freep(&rt->flv_data);
  2027. ffurl_close(rt->stream);
  2028. return ret;
  2029. }
  2030. /**
  2031. * Open RTMP connection and verify that the stream can be played.
  2032. *
  2033. * URL syntax: rtmp://server[:port][/app][/playpath]
  2034. * where 'app' is first one or two directories in the path
  2035. * (e.g. /ondemand/, /flash/live/, etc.)
  2036. * and 'playpath' is a file name (the rest of the path,
  2037. * may be prefixed with "mp4:")
  2038. */
  2039. static int rtmp_open(URLContext *s, const char *uri, int flags)
  2040. {
  2041. RTMPContext *rt = s->priv_data;
  2042. char proto[8], hostname[256], path[1024], auth[100], *fname;
  2043. char *old_app;
  2044. uint8_t buf[2048];
  2045. int port;
  2046. AVDictionary *opts = NULL;
  2047. int ret;
  2048. if (rt->listen_timeout > 0)
  2049. rt->listen = 1;
  2050. rt->is_input = !(flags & AVIO_FLAG_WRITE);
  2051. av_url_split(proto, sizeof(proto), auth, sizeof(auth),
  2052. hostname, sizeof(hostname), &port,
  2053. path, sizeof(path), s->filename);
  2054. if (strchr(path, ' ')) {
  2055. av_log(s, AV_LOG_WARNING,
  2056. "Detected librtmp style URL parameters, these aren't supported "
  2057. "by the libavformat internal RTMP handler currently enabled. "
  2058. "See the documentation for the correct way to pass parameters.\n");
  2059. }
  2060. if (auth[0]) {
  2061. char *ptr = strchr(auth, ':');
  2062. if (ptr) {
  2063. *ptr = '\0';
  2064. av_strlcpy(rt->username, auth, sizeof(rt->username));
  2065. av_strlcpy(rt->password, ptr + 1, sizeof(rt->password));
  2066. }
  2067. }
  2068. if (rt->listen && strcmp(proto, "rtmp")) {
  2069. av_log(s, AV_LOG_ERROR, "rtmp_listen not available for %s\n",
  2070. proto);
  2071. return AVERROR(EINVAL);
  2072. }
  2073. if (!strcmp(proto, "rtmpt") || !strcmp(proto, "rtmpts")) {
  2074. if (!strcmp(proto, "rtmpts"))
  2075. av_dict_set(&opts, "ffrtmphttp_tls", "1", 1);
  2076. /* open the http tunneling connection */
  2077. ff_url_join(buf, sizeof(buf), "ffrtmphttp", NULL, hostname, port, NULL);
  2078. } else if (!strcmp(proto, "rtmps")) {
  2079. /* open the tls connection */
  2080. if (port < 0)
  2081. port = RTMPS_DEFAULT_PORT;
  2082. ff_url_join(buf, sizeof(buf), "tls", NULL, hostname, port, NULL);
  2083. } else if (!strcmp(proto, "rtmpe") || (!strcmp(proto, "rtmpte"))) {
  2084. if (!strcmp(proto, "rtmpte"))
  2085. av_dict_set(&opts, "ffrtmpcrypt_tunneling", "1", 1);
  2086. /* open the encrypted connection */
  2087. ff_url_join(buf, sizeof(buf), "ffrtmpcrypt", NULL, hostname, port, NULL);
  2088. rt->encrypted = 1;
  2089. } else {
  2090. /* open the tcp connection */
  2091. if (port < 0)
  2092. port = RTMP_DEFAULT_PORT;
  2093. if (rt->listen)
  2094. ff_url_join(buf, sizeof(buf), "tcp", NULL, hostname, port,
  2095. "?listen&listen_timeout=%d",
  2096. rt->listen_timeout * 1000);
  2097. else
  2098. ff_url_join(buf, sizeof(buf), "tcp", NULL, hostname, port, NULL);
  2099. }
  2100. reconnect:
  2101. if ((ret = ffurl_open(&rt->stream, buf, AVIO_FLAG_READ_WRITE,
  2102. &s->interrupt_callback, &opts)) < 0) {
  2103. av_log(s , AV_LOG_ERROR, "Cannot open connection %s\n", buf);
  2104. goto fail;
  2105. }
  2106. if (rt->swfverify) {
  2107. if ((ret = rtmp_calc_swfhash(s)) < 0)
  2108. goto fail;
  2109. }
  2110. rt->state = STATE_START;
  2111. if (!rt->listen && (ret = rtmp_handshake(s, rt)) < 0)
  2112. goto fail;
  2113. if (rt->listen && (ret = rtmp_server_handshake(s, rt)) < 0)
  2114. goto fail;
  2115. rt->out_chunk_size = 128;
  2116. rt->in_chunk_size = 128; // Probably overwritten later
  2117. rt->state = STATE_HANDSHAKED;
  2118. // Keep the application name when it has been defined by the user.
  2119. old_app = rt->app;
  2120. rt->app = av_malloc(APP_MAX_LENGTH);
  2121. if (!rt->app) {
  2122. ret = AVERROR(ENOMEM);
  2123. goto fail;
  2124. }
  2125. //extract "app" part from path
  2126. if (!strncmp(path, "/ondemand/", 10)) {
  2127. fname = path + 10;
  2128. memcpy(rt->app, "ondemand", 9);
  2129. } else {
  2130. char *next = *path ? path + 1 : path;
  2131. char *p = strchr(next, '/');
  2132. if (!p) {
  2133. fname = next;
  2134. rt->app[0] = '\0';
  2135. } else {
  2136. // make sure we do not mismatch a playpath for an application instance
  2137. char *c = strchr(p + 1, ':');
  2138. fname = strchr(p + 1, '/');
  2139. if (!fname || (c && c < fname)) {
  2140. fname = p + 1;
  2141. av_strlcpy(rt->app, path + 1, p - path);
  2142. } else {
  2143. fname++;
  2144. av_strlcpy(rt->app, path + 1, fname - path - 1);
  2145. }
  2146. }
  2147. }
  2148. if (old_app) {
  2149. // The name of application has been defined by the user, override it.
  2150. av_free(rt->app);
  2151. rt->app = old_app;
  2152. }
  2153. if (!rt->playpath) {
  2154. int len = strlen(fname);
  2155. rt->playpath = av_malloc(PLAYPATH_MAX_LENGTH);
  2156. if (!rt->playpath) {
  2157. ret = AVERROR(ENOMEM);
  2158. goto fail;
  2159. }
  2160. if (!strchr(fname, ':') && len >= 4 &&
  2161. (!strcmp(fname + len - 4, ".f4v") ||
  2162. !strcmp(fname + len - 4, ".mp4"))) {
  2163. memcpy(rt->playpath, "mp4:", 5);
  2164. } else if (len >= 4 && !strcmp(fname + len - 4, ".flv")) {
  2165. fname[len - 4] = '\0';
  2166. } else {
  2167. rt->playpath[0] = 0;
  2168. }
  2169. av_strlcat(rt->playpath, fname, PLAYPATH_MAX_LENGTH);
  2170. }
  2171. if (!rt->tcurl) {
  2172. rt->tcurl = av_malloc(TCURL_MAX_LENGTH);
  2173. if (!rt->tcurl) {
  2174. ret = AVERROR(ENOMEM);
  2175. goto fail;
  2176. }
  2177. ff_url_join(rt->tcurl, TCURL_MAX_LENGTH, proto, NULL, hostname,
  2178. port, "/%s", rt->app);
  2179. }
  2180. if (!rt->flashver) {
  2181. rt->flashver = av_malloc(FLASHVER_MAX_LENGTH);
  2182. if (!rt->flashver) {
  2183. ret = AVERROR(ENOMEM);
  2184. goto fail;
  2185. }
  2186. if (rt->is_input) {
  2187. snprintf(rt->flashver, FLASHVER_MAX_LENGTH, "%s %d,%d,%d,%d",
  2188. RTMP_CLIENT_PLATFORM, RTMP_CLIENT_VER1, RTMP_CLIENT_VER2,
  2189. RTMP_CLIENT_VER3, RTMP_CLIENT_VER4);
  2190. } else {
  2191. snprintf(rt->flashver, FLASHVER_MAX_LENGTH,
  2192. "FMLE/3.0 (compatible; %s)", LIBAVFORMAT_IDENT);
  2193. }
  2194. }
  2195. rt->client_report_size = 1048576;
  2196. rt->bytes_read = 0;
  2197. rt->last_bytes_read = 0;
  2198. rt->server_bw = 2500000;
  2199. av_log(s, AV_LOG_DEBUG, "Proto = %s, path = %s, app = %s, fname = %s\n",
  2200. proto, path, rt->app, rt->playpath);
  2201. if (!rt->listen) {
  2202. if ((ret = gen_connect(s, rt)) < 0)
  2203. goto fail;
  2204. } else {
  2205. if (read_connect(s, s->priv_data) < 0)
  2206. goto fail;
  2207. }
  2208. do {
  2209. ret = get_packet(s, 1);
  2210. } while (ret == AVERROR(EAGAIN));
  2211. if (ret < 0)
  2212. goto fail;
  2213. if (rt->do_reconnect) {
  2214. ffurl_close(rt->stream);
  2215. rt->stream = NULL;
  2216. rt->do_reconnect = 0;
  2217. rt->nb_invokes = 0;
  2218. memset(rt->prev_pkt, 0, sizeof(rt->prev_pkt));
  2219. free_tracked_methods(rt);
  2220. goto reconnect;
  2221. }
  2222. if (rt->is_input) {
  2223. int err;
  2224. // generate FLV header for demuxer
  2225. rt->flv_size = 13;
  2226. if ((err = av_reallocp(&rt->flv_data, rt->flv_size)) < 0)
  2227. return err;
  2228. rt->flv_off = 0;
  2229. memcpy(rt->flv_data, "FLV\1\5\0\0\0\011\0\0\0\0", rt->flv_size);
  2230. } else {
  2231. rt->flv_size = 0;
  2232. rt->flv_data = NULL;
  2233. rt->flv_off = 0;
  2234. rt->skip_bytes = 13;
  2235. }
  2236. s->max_packet_size = rt->stream->max_packet_size;
  2237. s->is_streamed = 1;
  2238. return 0;
  2239. fail:
  2240. av_dict_free(&opts);
  2241. rtmp_close(s);
  2242. return ret;
  2243. }
  2244. static int rtmp_read(URLContext *s, uint8_t *buf, int size)
  2245. {
  2246. RTMPContext *rt = s->priv_data;
  2247. int orig_size = size;
  2248. int ret;
  2249. while (size > 0) {
  2250. int data_left = rt->flv_size - rt->flv_off;
  2251. if (data_left >= size) {
  2252. memcpy(buf, rt->flv_data + rt->flv_off, size);
  2253. rt->flv_off += size;
  2254. return orig_size;
  2255. }
  2256. if (data_left > 0) {
  2257. memcpy(buf, rt->flv_data + rt->flv_off, data_left);
  2258. buf += data_left;
  2259. size -= data_left;
  2260. rt->flv_off = rt->flv_size;
  2261. return data_left;
  2262. }
  2263. if ((ret = get_packet(s, 0)) < 0)
  2264. return ret;
  2265. }
  2266. return orig_size;
  2267. }
  2268. static int64_t rtmp_seek(URLContext *s, int stream_index, int64_t timestamp,
  2269. int flags)
  2270. {
  2271. RTMPContext *rt = s->priv_data;
  2272. int ret;
  2273. av_log(s, AV_LOG_DEBUG,
  2274. "Seek on stream index %d at timestamp %"PRId64" with flags %08x\n",
  2275. stream_index, timestamp, flags);
  2276. if ((ret = gen_seek(s, rt, timestamp)) < 0) {
  2277. av_log(s, AV_LOG_ERROR,
  2278. "Unable to send seek command on stream index %d at timestamp "
  2279. "%"PRId64" with flags %08x\n",
  2280. stream_index, timestamp, flags);
  2281. return ret;
  2282. }
  2283. rt->flv_off = rt->flv_size;
  2284. rt->state = STATE_SEEKING;
  2285. return timestamp;
  2286. }
  2287. static int rtmp_write(URLContext *s, const uint8_t *buf, int size)
  2288. {
  2289. RTMPContext *rt = s->priv_data;
  2290. int size_temp = size;
  2291. int pktsize, pkttype;
  2292. uint32_t ts;
  2293. const uint8_t *buf_temp = buf;
  2294. uint8_t c;
  2295. int ret;
  2296. do {
  2297. if (rt->skip_bytes) {
  2298. int skip = FFMIN(rt->skip_bytes, size_temp);
  2299. buf_temp += skip;
  2300. size_temp -= skip;
  2301. rt->skip_bytes -= skip;
  2302. continue;
  2303. }
  2304. if (rt->flv_header_bytes < RTMP_HEADER) {
  2305. const uint8_t *header = rt->flv_header;
  2306. int copy = FFMIN(RTMP_HEADER - rt->flv_header_bytes, size_temp);
  2307. int channel = RTMP_AUDIO_CHANNEL;
  2308. bytestream_get_buffer(&buf_temp, rt->flv_header + rt->flv_header_bytes, copy);
  2309. rt->flv_header_bytes += copy;
  2310. size_temp -= copy;
  2311. if (rt->flv_header_bytes < RTMP_HEADER)
  2312. break;
  2313. pkttype = bytestream_get_byte(&header);
  2314. pktsize = bytestream_get_be24(&header);
  2315. ts = bytestream_get_be24(&header);
  2316. ts |= bytestream_get_byte(&header) << 24;
  2317. bytestream_get_be24(&header);
  2318. rt->flv_size = pktsize;
  2319. if (pkttype == RTMP_PT_VIDEO)
  2320. channel = RTMP_VIDEO_CHANNEL;
  2321. //force 12bytes header
  2322. if (((pkttype == RTMP_PT_VIDEO || pkttype == RTMP_PT_AUDIO) && ts == 0) ||
  2323. pkttype == RTMP_PT_NOTIFY) {
  2324. if (pkttype == RTMP_PT_NOTIFY)
  2325. pktsize += 16;
  2326. rt->prev_pkt[1][channel].channel_id = 0;
  2327. }
  2328. //this can be a big packet, it's better to send it right here
  2329. if ((ret = ff_rtmp_packet_create(&rt->out_pkt, channel,
  2330. pkttype, ts, pktsize)) < 0)
  2331. return ret;
  2332. rt->out_pkt.extra = rt->stream_id;
  2333. rt->flv_data = rt->out_pkt.data;
  2334. if (pkttype == RTMP_PT_NOTIFY)
  2335. ff_amf_write_string(&rt->flv_data, "@setDataFrame");
  2336. }
  2337. if (rt->flv_size - rt->flv_off > size_temp) {
  2338. bytestream_get_buffer(&buf_temp, rt->flv_data + rt->flv_off, size_temp);
  2339. rt->flv_off += size_temp;
  2340. size_temp = 0;
  2341. } else {
  2342. bytestream_get_buffer(&buf_temp, rt->flv_data + rt->flv_off, rt->flv_size - rt->flv_off);
  2343. size_temp -= rt->flv_size - rt->flv_off;
  2344. rt->flv_off += rt->flv_size - rt->flv_off;
  2345. }
  2346. if (rt->flv_off == rt->flv_size) {
  2347. rt->skip_bytes = 4;
  2348. if ((ret = rtmp_send_packet(rt, &rt->out_pkt, 0)) < 0)
  2349. return ret;
  2350. rt->flv_size = 0;
  2351. rt->flv_off = 0;
  2352. rt->flv_header_bytes = 0;
  2353. rt->flv_nb_packets++;
  2354. }
  2355. } while (buf_temp - buf < size);
  2356. if (rt->flv_nb_packets < rt->flush_interval)
  2357. return size;
  2358. rt->flv_nb_packets = 0;
  2359. /* set stream into nonblocking mode */
  2360. rt->stream->flags |= AVIO_FLAG_NONBLOCK;
  2361. /* try to read one byte from the stream */
  2362. ret = ffurl_read(rt->stream, &c, 1);
  2363. /* switch the stream back into blocking mode */
  2364. rt->stream->flags &= ~AVIO_FLAG_NONBLOCK;
  2365. if (ret == AVERROR(EAGAIN)) {
  2366. /* no incoming data to handle */
  2367. return size;
  2368. } else if (ret < 0) {
  2369. return ret;
  2370. } else if (ret == 1) {
  2371. RTMPPacket rpkt = { 0 };
  2372. if ((ret = ff_rtmp_packet_read_internal(rt->stream, &rpkt,
  2373. rt->in_chunk_size,
  2374. rt->prev_pkt[0], c)) <= 0)
  2375. return ret;
  2376. if ((ret = rtmp_parse_result(s, rt, &rpkt)) < 0)
  2377. return ret;
  2378. ff_rtmp_packet_destroy(&rpkt);
  2379. }
  2380. return size;
  2381. }
  2382. #define OFFSET(x) offsetof(RTMPContext, x)
  2383. #define DEC AV_OPT_FLAG_DECODING_PARAM
  2384. #define ENC AV_OPT_FLAG_ENCODING_PARAM
  2385. static const AVOption rtmp_options[] = {
  2386. {"rtmp_app", "Name of application to connect to on the RTMP server", OFFSET(app), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2387. {"rtmp_buffer", "Set buffer time in milliseconds. The default is 3000.", OFFSET(client_buffer_time), AV_OPT_TYPE_INT, {.i64 = 3000}, 0, INT_MAX, DEC|ENC},
  2388. {"rtmp_conn", "Append arbitrary AMF data to the Connect message", OFFSET(conn), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2389. {"rtmp_flashver", "Version of the Flash plugin used to run the SWF player.", OFFSET(flashver), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2390. {"rtmp_flush_interval", "Number of packets flushed in the same request (RTMPT only).", OFFSET(flush_interval), AV_OPT_TYPE_INT, {.i64 = 10}, 0, INT_MAX, ENC},
  2391. {"rtmp_live", "Specify that the media is a live stream.", OFFSET(live), AV_OPT_TYPE_INT, {.i64 = -2}, INT_MIN, INT_MAX, DEC, "rtmp_live"},
  2392. {"any", "both", 0, AV_OPT_TYPE_CONST, {.i64 = -2}, 0, 0, DEC, "rtmp_live"},
  2393. {"live", "live stream", 0, AV_OPT_TYPE_CONST, {.i64 = -1}, 0, 0, DEC, "rtmp_live"},
  2394. {"recorded", "recorded stream", 0, AV_OPT_TYPE_CONST, {.i64 = 0}, 0, 0, DEC, "rtmp_live"},
  2395. {"rtmp_pageurl", "URL of the web page in which the media was embedded. By default no value will be sent.", OFFSET(pageurl), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC},
  2396. {"rtmp_playpath", "Stream identifier to play or to publish", OFFSET(playpath), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2397. {"rtmp_subscribe", "Name of live stream to subscribe to. Defaults to rtmp_playpath.", OFFSET(subscribe), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC},
  2398. {"rtmp_swfhash", "SHA256 hash of the decompressed SWF file (32 bytes).", OFFSET(swfhash), AV_OPT_TYPE_BINARY, .flags = DEC},
  2399. {"rtmp_swfsize", "Size of the decompressed SWF file, required for SWFVerification.", OFFSET(swfsize), AV_OPT_TYPE_INT, {.i64 = 0}, 0, INT_MAX, DEC},
  2400. {"rtmp_swfurl", "URL of the SWF player. By default no value will be sent", OFFSET(swfurl), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2401. {"rtmp_swfverify", "URL to player swf file, compute hash/size automatically.", OFFSET(swfverify), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC},
  2402. {"rtmp_tcurl", "URL of the target stream. Defaults to proto://host[:port]/app.", OFFSET(tcurl), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2403. {"rtmp_listen", "Listen for incoming rtmp connections", OFFSET(listen), AV_OPT_TYPE_INT, {.i64 = 0}, INT_MIN, INT_MAX, DEC, "rtmp_listen" },
  2404. {"listen", "Listen for incoming rtmp connections", OFFSET(listen), AV_OPT_TYPE_INT, {.i64 = 0}, INT_MIN, INT_MAX, DEC, "rtmp_listen" },
  2405. {"timeout", "Maximum timeout (in seconds) to wait for incoming connections. -1 is infinite. Implies -rtmp_listen 1", OFFSET(listen_timeout), AV_OPT_TYPE_INT, {.i64 = -1}, INT_MIN, INT_MAX, DEC, "rtmp_listen" },
  2406. { NULL },
  2407. };
  2408. #define RTMP_PROTOCOL(flavor) \
  2409. static const AVClass flavor##_class = { \
  2410. .class_name = #flavor, \
  2411. .item_name = av_default_item_name, \
  2412. .option = rtmp_options, \
  2413. .version = LIBAVUTIL_VERSION_INT, \
  2414. }; \
  2415. \
  2416. URLProtocol ff_##flavor##_protocol = { \
  2417. .name = #flavor, \
  2418. .url_open = rtmp_open, \
  2419. .url_read = rtmp_read, \
  2420. .url_read_seek = rtmp_seek, \
  2421. .url_write = rtmp_write, \
  2422. .url_close = rtmp_close, \
  2423. .priv_data_size = sizeof(RTMPContext), \
  2424. .flags = URL_PROTOCOL_FLAG_NETWORK, \
  2425. .priv_data_class= &flavor##_class, \
  2426. };
  2427. RTMP_PROTOCOL(rtmp)
  2428. RTMP_PROTOCOL(rtmpe)
  2429. RTMP_PROTOCOL(rtmps)
  2430. RTMP_PROTOCOL(rtmpt)
  2431. RTMP_PROTOCOL(rtmpte)
  2432. RTMP_PROTOCOL(rtmpts)