You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

2681 lines
87KB

  1. /*
  2. * RTMP network protocol
  3. * Copyright (c) 2009 Kostya Shishkov
  4. *
  5. * This file is part of Libav.
  6. *
  7. * Libav is free software; you can redistribute it and/or
  8. * modify it under the terms of the GNU Lesser General Public
  9. * License as published by the Free Software Foundation; either
  10. * version 2.1 of the License, or (at your option) any later version.
  11. *
  12. * Libav is distributed in the hope that it will be useful,
  13. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  14. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  15. * Lesser General Public License for more details.
  16. *
  17. * You should have received a copy of the GNU Lesser General Public
  18. * License along with Libav; if not, write to the Free Software
  19. * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
  20. */
  21. /**
  22. * @file
  23. * RTMP protocol
  24. */
  25. #include "libavcodec/bytestream.h"
  26. #include "libavutil/avstring.h"
  27. #include "libavutil/base64.h"
  28. #include "libavutil/intfloat.h"
  29. #include "libavutil/lfg.h"
  30. #include "libavutil/md5.h"
  31. #include "libavutil/opt.h"
  32. #include "libavutil/random_seed.h"
  33. #include "libavutil/sha.h"
  34. #include "avformat.h"
  35. #include "internal.h"
  36. #include "network.h"
  37. #include "flv.h"
  38. #include "rtmp.h"
  39. #include "rtmpcrypt.h"
  40. #include "rtmppkt.h"
  41. #include "url.h"
  42. #if CONFIG_ZLIB
  43. #include <zlib.h>
  44. #endif
  45. //#define DEBUG
  46. #define APP_MAX_LENGTH 128
  47. #define PLAYPATH_MAX_LENGTH 256
  48. #define TCURL_MAX_LENGTH 512
  49. #define FLASHVER_MAX_LENGTH 64
  50. #define RTMP_PKTDATA_DEFAULT_SIZE 4096
  51. /** RTMP protocol handler state */
  52. typedef enum {
  53. STATE_START, ///< client has not done anything yet
  54. STATE_HANDSHAKED, ///< client has performed handshake
  55. STATE_FCPUBLISH, ///< client FCPublishing stream (for output)
  56. STATE_PLAYING, ///< client has started receiving multimedia data from server
  57. STATE_PUBLISHING, ///< client has started sending multimedia data to server (for output)
  58. STATE_RECEIVING, ///< received a publish command (for input)
  59. STATE_STOPPED, ///< the broadcast has been stopped
  60. } ClientState;
  61. typedef struct TrackedMethod {
  62. char *name;
  63. int id;
  64. } TrackedMethod;
  65. /** protocol handler context */
  66. typedef struct RTMPContext {
  67. const AVClass *class;
  68. URLContext* stream; ///< TCP stream used in interactions with RTMP server
  69. RTMPPacket prev_pkt[2][RTMP_CHANNELS]; ///< packet history used when reading and sending packets
  70. int in_chunk_size; ///< size of the chunks incoming RTMP packets are divided into
  71. int out_chunk_size; ///< size of the chunks outgoing RTMP packets are divided into
  72. int is_input; ///< input/output flag
  73. char *playpath; ///< stream identifier to play (with possible "mp4:" prefix)
  74. int live; ///< 0: recorded, -1: live, -2: both
  75. char *app; ///< name of application
  76. char *conn; ///< append arbitrary AMF data to the Connect message
  77. ClientState state; ///< current state
  78. int main_channel_id; ///< an additional channel ID which is used for some invocations
  79. uint8_t* flv_data; ///< buffer with data for demuxer
  80. int flv_size; ///< current buffer size
  81. int flv_off; ///< number of bytes read from current buffer
  82. int flv_nb_packets; ///< number of flv packets published
  83. RTMPPacket out_pkt; ///< rtmp packet, created from flv a/v or metadata (for output)
  84. uint32_t client_report_size; ///< number of bytes after which client should report to server
  85. uint32_t bytes_read; ///< number of bytes read from server
  86. uint32_t last_bytes_read; ///< number of bytes read last reported to server
  87. int skip_bytes; ///< number of bytes to skip from the input FLV stream in the next write call
  88. uint8_t flv_header[11]; ///< partial incoming flv packet header
  89. int flv_header_bytes; ///< number of initialized bytes in flv_header
  90. int nb_invokes; ///< keeps track of invoke messages
  91. char* tcurl; ///< url of the target stream
  92. char* flashver; ///< version of the flash plugin
  93. char* swfhash; ///< SHA256 hash of the decompressed SWF file (32 bytes)
  94. int swfhash_len; ///< length of the SHA256 hash
  95. int swfsize; ///< size of the decompressed SWF file
  96. char* swfurl; ///< url of the swf player
  97. char* swfverify; ///< URL to player swf file, compute hash/size automatically
  98. char swfverification[42]; ///< hash of the SWF verification
  99. char* pageurl; ///< url of the web page
  100. char* subscribe; ///< name of live stream to subscribe
  101. int server_bw; ///< server bandwidth
  102. int client_buffer_time; ///< client buffer time in ms
  103. int flush_interval; ///< number of packets flushed in the same request (RTMPT only)
  104. int encrypted; ///< use an encrypted connection (RTMPE only)
  105. TrackedMethod*tracked_methods; ///< tracked methods buffer
  106. int nb_tracked_methods; ///< number of tracked methods
  107. int tracked_methods_size; ///< size of the tracked methods buffer
  108. int listen; ///< listen mode flag
  109. int listen_timeout; ///< listen timeout to wait for new connections
  110. int nb_streamid; ///< The next stream id to return on createStream calls
  111. char username[50];
  112. char password[50];
  113. char auth_params[500];
  114. int do_reconnect;
  115. int auth_tried;
  116. } RTMPContext;
  117. #define PLAYER_KEY_OPEN_PART_LEN 30 ///< length of partial key used for first client digest signing
  118. /** Client key used for digest signing */
  119. static const uint8_t rtmp_player_key[] = {
  120. 'G', 'e', 'n', 'u', 'i', 'n', 'e', ' ', 'A', 'd', 'o', 'b', 'e', ' ',
  121. 'F', 'l', 'a', 's', 'h', ' ', 'P', 'l', 'a', 'y', 'e', 'r', ' ', '0', '0', '1',
  122. 0xF0, 0xEE, 0xC2, 0x4A, 0x80, 0x68, 0xBE, 0xE8, 0x2E, 0x00, 0xD0, 0xD1, 0x02,
  123. 0x9E, 0x7E, 0x57, 0x6E, 0xEC, 0x5D, 0x2D, 0x29, 0x80, 0x6F, 0xAB, 0x93, 0xB8,
  124. 0xE6, 0x36, 0xCF, 0xEB, 0x31, 0xAE
  125. };
  126. #define SERVER_KEY_OPEN_PART_LEN 36 ///< length of partial key used for first server digest signing
  127. /** Key used for RTMP server digest signing */
  128. static const uint8_t rtmp_server_key[] = {
  129. 'G', 'e', 'n', 'u', 'i', 'n', 'e', ' ', 'A', 'd', 'o', 'b', 'e', ' ',
  130. 'F', 'l', 'a', 's', 'h', ' ', 'M', 'e', 'd', 'i', 'a', ' ',
  131. 'S', 'e', 'r', 'v', 'e', 'r', ' ', '0', '0', '1',
  132. 0xF0, 0xEE, 0xC2, 0x4A, 0x80, 0x68, 0xBE, 0xE8, 0x2E, 0x00, 0xD0, 0xD1, 0x02,
  133. 0x9E, 0x7E, 0x57, 0x6E, 0xEC, 0x5D, 0x2D, 0x29, 0x80, 0x6F, 0xAB, 0x93, 0xB8,
  134. 0xE6, 0x36, 0xCF, 0xEB, 0x31, 0xAE
  135. };
  136. static int add_tracked_method(RTMPContext *rt, const char *name, int id)
  137. {
  138. void *ptr;
  139. if (rt->nb_tracked_methods + 1 > rt->tracked_methods_size) {
  140. rt->tracked_methods_size = (rt->nb_tracked_methods + 1) * 2;
  141. ptr = av_realloc(rt->tracked_methods,
  142. rt->tracked_methods_size * sizeof(*rt->tracked_methods));
  143. if (!ptr)
  144. return AVERROR(ENOMEM);
  145. rt->tracked_methods = ptr;
  146. }
  147. rt->tracked_methods[rt->nb_tracked_methods].name = av_strdup(name);
  148. if (!rt->tracked_methods[rt->nb_tracked_methods].name)
  149. return AVERROR(ENOMEM);
  150. rt->tracked_methods[rt->nb_tracked_methods].id = id;
  151. rt->nb_tracked_methods++;
  152. return 0;
  153. }
  154. static void del_tracked_method(RTMPContext *rt, int index)
  155. {
  156. memmove(&rt->tracked_methods[index], &rt->tracked_methods[index + 1],
  157. sizeof(*rt->tracked_methods) * (rt->nb_tracked_methods - index - 1));
  158. rt->nb_tracked_methods--;
  159. }
  160. static int find_tracked_method(URLContext *s, RTMPPacket *pkt, int offset,
  161. char **tracked_method)
  162. {
  163. RTMPContext *rt = s->priv_data;
  164. GetByteContext gbc;
  165. double pkt_id;
  166. int ret;
  167. int i;
  168. bytestream2_init(&gbc, pkt->data + offset, pkt->data_size - offset);
  169. if ((ret = ff_amf_read_number(&gbc, &pkt_id)) < 0)
  170. return ret;
  171. for (i = 0; i < rt->nb_tracked_methods; i++) {
  172. if (rt->tracked_methods[i].id != pkt_id)
  173. continue;
  174. *tracked_method = rt->tracked_methods[i].name;
  175. del_tracked_method(rt, i);
  176. break;
  177. }
  178. return 0;
  179. }
  180. static void free_tracked_methods(RTMPContext *rt)
  181. {
  182. int i;
  183. for (i = 0; i < rt->nb_tracked_methods; i ++)
  184. av_free(rt->tracked_methods[i].name);
  185. av_free(rt->tracked_methods);
  186. rt->tracked_methods = NULL;
  187. rt->tracked_methods_size = 0;
  188. rt->nb_tracked_methods = 0;
  189. }
  190. static int rtmp_send_packet(RTMPContext *rt, RTMPPacket *pkt, int track)
  191. {
  192. int ret;
  193. if (pkt->type == RTMP_PT_INVOKE && track) {
  194. GetByteContext gbc;
  195. char name[128];
  196. double pkt_id;
  197. int len;
  198. bytestream2_init(&gbc, pkt->data, pkt->data_size);
  199. if ((ret = ff_amf_read_string(&gbc, name, sizeof(name), &len)) < 0)
  200. goto fail;
  201. if ((ret = ff_amf_read_number(&gbc, &pkt_id)) < 0)
  202. goto fail;
  203. if ((ret = add_tracked_method(rt, name, pkt_id)) < 0)
  204. goto fail;
  205. }
  206. ret = ff_rtmp_packet_write(rt->stream, pkt, rt->out_chunk_size,
  207. rt->prev_pkt[1]);
  208. fail:
  209. ff_rtmp_packet_destroy(pkt);
  210. return ret;
  211. }
  212. static int rtmp_write_amf_data(URLContext *s, char *param, uint8_t **p)
  213. {
  214. char *field, *value;
  215. char type;
  216. /* The type must be B for Boolean, N for number, S for string, O for
  217. * object, or Z for null. For Booleans the data must be either 0 or 1 for
  218. * FALSE or TRUE, respectively. Likewise for Objects the data must be
  219. * 0 or 1 to end or begin an object, respectively. Data items in subobjects
  220. * may be named, by prefixing the type with 'N' and specifying the name
  221. * before the value (ie. NB:myFlag:1). This option may be used multiple times
  222. * to construct arbitrary AMF sequences. */
  223. if (param[0] && param[1] == ':') {
  224. type = param[0];
  225. value = param + 2;
  226. } else if (param[0] == 'N' && param[1] && param[2] == ':') {
  227. type = param[1];
  228. field = param + 3;
  229. value = strchr(field, ':');
  230. if (!value)
  231. goto fail;
  232. *value = '\0';
  233. value++;
  234. if (!field || !value)
  235. goto fail;
  236. ff_amf_write_field_name(p, field);
  237. } else {
  238. goto fail;
  239. }
  240. switch (type) {
  241. case 'B':
  242. ff_amf_write_bool(p, value[0] != '0');
  243. break;
  244. case 'S':
  245. ff_amf_write_string(p, value);
  246. break;
  247. case 'N':
  248. ff_amf_write_number(p, strtod(value, NULL));
  249. break;
  250. case 'Z':
  251. ff_amf_write_null(p);
  252. break;
  253. case 'O':
  254. if (value[0] != '0')
  255. ff_amf_write_object_start(p);
  256. else
  257. ff_amf_write_object_end(p);
  258. break;
  259. default:
  260. goto fail;
  261. break;
  262. }
  263. return 0;
  264. fail:
  265. av_log(s, AV_LOG_ERROR, "Invalid AMF parameter: %s\n", param);
  266. return AVERROR(EINVAL);
  267. }
  268. /**
  269. * Generate 'connect' call and send it to the server.
  270. */
  271. static int gen_connect(URLContext *s, RTMPContext *rt)
  272. {
  273. RTMPPacket pkt;
  274. uint8_t *p;
  275. int ret;
  276. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  277. 0, 4096)) < 0)
  278. return ret;
  279. p = pkt.data;
  280. ff_amf_write_string(&p, "connect");
  281. ff_amf_write_number(&p, ++rt->nb_invokes);
  282. ff_amf_write_object_start(&p);
  283. ff_amf_write_field_name(&p, "app");
  284. ff_amf_write_string2(&p, rt->app, rt->auth_params);
  285. if (!rt->is_input) {
  286. ff_amf_write_field_name(&p, "type");
  287. ff_amf_write_string(&p, "nonprivate");
  288. }
  289. ff_amf_write_field_name(&p, "flashVer");
  290. ff_amf_write_string(&p, rt->flashver);
  291. if (rt->swfurl) {
  292. ff_amf_write_field_name(&p, "swfUrl");
  293. ff_amf_write_string(&p, rt->swfurl);
  294. }
  295. ff_amf_write_field_name(&p, "tcUrl");
  296. ff_amf_write_string2(&p, rt->tcurl, rt->auth_params);
  297. if (rt->is_input) {
  298. ff_amf_write_field_name(&p, "fpad");
  299. ff_amf_write_bool(&p, 0);
  300. ff_amf_write_field_name(&p, "capabilities");
  301. ff_amf_write_number(&p, 15.0);
  302. /* Tell the server we support all the audio codecs except
  303. * SUPPORT_SND_INTEL (0x0008) and SUPPORT_SND_UNUSED (0x0010)
  304. * which are unused in the RTMP protocol implementation. */
  305. ff_amf_write_field_name(&p, "audioCodecs");
  306. ff_amf_write_number(&p, 4071.0);
  307. ff_amf_write_field_name(&p, "videoCodecs");
  308. ff_amf_write_number(&p, 252.0);
  309. ff_amf_write_field_name(&p, "videoFunction");
  310. ff_amf_write_number(&p, 1.0);
  311. if (rt->pageurl) {
  312. ff_amf_write_field_name(&p, "pageUrl");
  313. ff_amf_write_string(&p, rt->pageurl);
  314. }
  315. }
  316. ff_amf_write_object_end(&p);
  317. if (rt->conn) {
  318. char *param = rt->conn;
  319. // Write arbitrary AMF data to the Connect message.
  320. while (param != NULL) {
  321. char *sep;
  322. param += strspn(param, " ");
  323. if (!*param)
  324. break;
  325. sep = strchr(param, ' ');
  326. if (sep)
  327. *sep = '\0';
  328. if ((ret = rtmp_write_amf_data(s, param, &p)) < 0) {
  329. // Invalid AMF parameter.
  330. ff_rtmp_packet_destroy(&pkt);
  331. return ret;
  332. }
  333. if (sep)
  334. param = sep + 1;
  335. else
  336. break;
  337. }
  338. }
  339. pkt.data_size = p - pkt.data;
  340. return rtmp_send_packet(rt, &pkt, 1);
  341. }
  342. static int read_connect(URLContext *s, RTMPContext *rt)
  343. {
  344. RTMPPacket pkt = { 0 };
  345. uint8_t *p;
  346. const uint8_t *cp;
  347. int ret;
  348. char command[64];
  349. int stringlen;
  350. double seqnum;
  351. uint8_t tmpstr[256];
  352. GetByteContext gbc;
  353. if ((ret = ff_rtmp_packet_read(rt->stream, &pkt, rt->in_chunk_size,
  354. rt->prev_pkt[1])) < 0)
  355. return ret;
  356. cp = pkt.data;
  357. bytestream2_init(&gbc, cp, pkt.data_size);
  358. if (ff_amf_read_string(&gbc, command, sizeof(command), &stringlen)) {
  359. av_log(s, AV_LOG_ERROR, "Unable to read command string\n");
  360. ff_rtmp_packet_destroy(&pkt);
  361. return AVERROR_INVALIDDATA;
  362. }
  363. if (strcmp(command, "connect")) {
  364. av_log(s, AV_LOG_ERROR, "Expecting connect, got %s\n", command);
  365. ff_rtmp_packet_destroy(&pkt);
  366. return AVERROR_INVALIDDATA;
  367. }
  368. ret = ff_amf_read_number(&gbc, &seqnum);
  369. if (ret)
  370. av_log(s, AV_LOG_WARNING, "SeqNum not found\n");
  371. /* Here one could parse an AMF Object with data as flashVers and others. */
  372. ret = ff_amf_get_field_value(gbc.buffer,
  373. gbc.buffer + bytestream2_get_bytes_left(&gbc),
  374. "app", tmpstr, sizeof(tmpstr));
  375. if (ret)
  376. av_log(s, AV_LOG_WARNING, "App field not found in connect\n");
  377. if (!ret && strcmp(tmpstr, rt->app))
  378. av_log(s, AV_LOG_WARNING, "App field don't match up: %s <-> %s\n",
  379. tmpstr, rt->app);
  380. ff_rtmp_packet_destroy(&pkt);
  381. // Send Window Acknowledgement Size (as defined in speficication)
  382. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL,
  383. RTMP_PT_SERVER_BW, 0, 4)) < 0)
  384. return ret;
  385. p = pkt.data;
  386. bytestream_put_be32(&p, rt->server_bw);
  387. pkt.data_size = p - pkt.data;
  388. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  389. rt->prev_pkt[1]);
  390. ff_rtmp_packet_destroy(&pkt);
  391. if (ret < 0)
  392. return ret;
  393. // Send Peer Bandwidth
  394. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL,
  395. RTMP_PT_CLIENT_BW, 0, 5)) < 0)
  396. return ret;
  397. p = pkt.data;
  398. bytestream_put_be32(&p, rt->server_bw);
  399. bytestream_put_byte(&p, 2); // dynamic
  400. pkt.data_size = p - pkt.data;
  401. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  402. rt->prev_pkt[1]);
  403. ff_rtmp_packet_destroy(&pkt);
  404. if (ret < 0)
  405. return ret;
  406. // Ping request
  407. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL,
  408. RTMP_PT_PING, 0, 6)) < 0)
  409. return ret;
  410. p = pkt.data;
  411. bytestream_put_be16(&p, 0); // 0 -> Stream Begin
  412. bytestream_put_be32(&p, 0);
  413. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  414. rt->prev_pkt[1]);
  415. ff_rtmp_packet_destroy(&pkt);
  416. if (ret < 0)
  417. return ret;
  418. // Chunk size
  419. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL,
  420. RTMP_PT_CHUNK_SIZE, 0, 4)) < 0)
  421. return ret;
  422. p = pkt.data;
  423. bytestream_put_be32(&p, rt->out_chunk_size);
  424. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  425. rt->prev_pkt[1]);
  426. ff_rtmp_packet_destroy(&pkt);
  427. if (ret < 0)
  428. return ret;
  429. // Send result_ NetConnection.Connect.Success to connect
  430. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL,
  431. RTMP_PT_INVOKE, 0,
  432. RTMP_PKTDATA_DEFAULT_SIZE)) < 0)
  433. return ret;
  434. p = pkt.data;
  435. ff_amf_write_string(&p, "_result");
  436. ff_amf_write_number(&p, seqnum);
  437. ff_amf_write_object_start(&p);
  438. ff_amf_write_field_name(&p, "fmsVer");
  439. ff_amf_write_string(&p, "FMS/3,0,1,123");
  440. ff_amf_write_field_name(&p, "capabilities");
  441. ff_amf_write_number(&p, 31);
  442. ff_amf_write_object_end(&p);
  443. ff_amf_write_object_start(&p);
  444. ff_amf_write_field_name(&p, "level");
  445. ff_amf_write_string(&p, "status");
  446. ff_amf_write_field_name(&p, "code");
  447. ff_amf_write_string(&p, "NetConnection.Connect.Success");
  448. ff_amf_write_field_name(&p, "description");
  449. ff_amf_write_string(&p, "Connection succeeded.");
  450. ff_amf_write_field_name(&p, "objectEncoding");
  451. ff_amf_write_number(&p, 0);
  452. ff_amf_write_object_end(&p);
  453. pkt.data_size = p - pkt.data;
  454. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  455. rt->prev_pkt[1]);
  456. ff_rtmp_packet_destroy(&pkt);
  457. if (ret < 0)
  458. return ret;
  459. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL,
  460. RTMP_PT_INVOKE, 0, 30)) < 0)
  461. return ret;
  462. p = pkt.data;
  463. ff_amf_write_string(&p, "onBWDone");
  464. ff_amf_write_number(&p, 0);
  465. ff_amf_write_null(&p);
  466. ff_amf_write_number(&p, 8192);
  467. pkt.data_size = p - pkt.data;
  468. ret = ff_rtmp_packet_write(rt->stream, &pkt, rt->out_chunk_size,
  469. rt->prev_pkt[1]);
  470. ff_rtmp_packet_destroy(&pkt);
  471. return ret;
  472. }
  473. /**
  474. * Generate 'releaseStream' call and send it to the server. It should make
  475. * the server release some channel for media streams.
  476. */
  477. static int gen_release_stream(URLContext *s, RTMPContext *rt)
  478. {
  479. RTMPPacket pkt;
  480. uint8_t *p;
  481. int ret;
  482. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  483. 0, 29 + strlen(rt->playpath))) < 0)
  484. return ret;
  485. av_log(s, AV_LOG_DEBUG, "Releasing stream...\n");
  486. p = pkt.data;
  487. ff_amf_write_string(&p, "releaseStream");
  488. ff_amf_write_number(&p, ++rt->nb_invokes);
  489. ff_amf_write_null(&p);
  490. ff_amf_write_string(&p, rt->playpath);
  491. return rtmp_send_packet(rt, &pkt, 1);
  492. }
  493. /**
  494. * Generate 'FCPublish' call and send it to the server. It should make
  495. * the server preapare for receiving media streams.
  496. */
  497. static int gen_fcpublish_stream(URLContext *s, RTMPContext *rt)
  498. {
  499. RTMPPacket pkt;
  500. uint8_t *p;
  501. int ret;
  502. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  503. 0, 25 + strlen(rt->playpath))) < 0)
  504. return ret;
  505. av_log(s, AV_LOG_DEBUG, "FCPublish stream...\n");
  506. p = pkt.data;
  507. ff_amf_write_string(&p, "FCPublish");
  508. ff_amf_write_number(&p, ++rt->nb_invokes);
  509. ff_amf_write_null(&p);
  510. ff_amf_write_string(&p, rt->playpath);
  511. return rtmp_send_packet(rt, &pkt, 1);
  512. }
  513. /**
  514. * Generate 'FCUnpublish' call and send it to the server. It should make
  515. * the server destroy stream.
  516. */
  517. static int gen_fcunpublish_stream(URLContext *s, RTMPContext *rt)
  518. {
  519. RTMPPacket pkt;
  520. uint8_t *p;
  521. int ret;
  522. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  523. 0, 27 + strlen(rt->playpath))) < 0)
  524. return ret;
  525. av_log(s, AV_LOG_DEBUG, "UnPublishing stream...\n");
  526. p = pkt.data;
  527. ff_amf_write_string(&p, "FCUnpublish");
  528. ff_amf_write_number(&p, ++rt->nb_invokes);
  529. ff_amf_write_null(&p);
  530. ff_amf_write_string(&p, rt->playpath);
  531. return rtmp_send_packet(rt, &pkt, 0);
  532. }
  533. /**
  534. * Generate 'createStream' call and send it to the server. It should make
  535. * the server allocate some channel for media streams.
  536. */
  537. static int gen_create_stream(URLContext *s, RTMPContext *rt)
  538. {
  539. RTMPPacket pkt;
  540. uint8_t *p;
  541. int ret;
  542. av_log(s, AV_LOG_DEBUG, "Creating stream...\n");
  543. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  544. 0, 25)) < 0)
  545. return ret;
  546. p = pkt.data;
  547. ff_amf_write_string(&p, "createStream");
  548. ff_amf_write_number(&p, ++rt->nb_invokes);
  549. ff_amf_write_null(&p);
  550. return rtmp_send_packet(rt, &pkt, 1);
  551. }
  552. /**
  553. * Generate 'deleteStream' call and send it to the server. It should make
  554. * the server remove some channel for media streams.
  555. */
  556. static int gen_delete_stream(URLContext *s, RTMPContext *rt)
  557. {
  558. RTMPPacket pkt;
  559. uint8_t *p;
  560. int ret;
  561. av_log(s, AV_LOG_DEBUG, "Deleting stream...\n");
  562. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  563. 0, 34)) < 0)
  564. return ret;
  565. p = pkt.data;
  566. ff_amf_write_string(&p, "deleteStream");
  567. ff_amf_write_number(&p, ++rt->nb_invokes);
  568. ff_amf_write_null(&p);
  569. ff_amf_write_number(&p, rt->main_channel_id);
  570. return rtmp_send_packet(rt, &pkt, 0);
  571. }
  572. /**
  573. * Generate client buffer time and send it to the server.
  574. */
  575. static int gen_buffer_time(URLContext *s, RTMPContext *rt)
  576. {
  577. RTMPPacket pkt;
  578. uint8_t *p;
  579. int ret;
  580. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_PING,
  581. 1, 10)) < 0)
  582. return ret;
  583. p = pkt.data;
  584. bytestream_put_be16(&p, 3);
  585. bytestream_put_be32(&p, rt->main_channel_id);
  586. bytestream_put_be32(&p, rt->client_buffer_time);
  587. return rtmp_send_packet(rt, &pkt, 0);
  588. }
  589. /**
  590. * Generate 'play' call and send it to the server, then ping the server
  591. * to start actual playing.
  592. */
  593. static int gen_play(URLContext *s, RTMPContext *rt)
  594. {
  595. RTMPPacket pkt;
  596. uint8_t *p;
  597. int ret;
  598. av_log(s, AV_LOG_DEBUG, "Sending play command for '%s'\n", rt->playpath);
  599. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_VIDEO_CHANNEL, RTMP_PT_INVOKE,
  600. 0, 29 + strlen(rt->playpath))) < 0)
  601. return ret;
  602. pkt.extra = rt->main_channel_id;
  603. p = pkt.data;
  604. ff_amf_write_string(&p, "play");
  605. ff_amf_write_number(&p, ++rt->nb_invokes);
  606. ff_amf_write_null(&p);
  607. ff_amf_write_string(&p, rt->playpath);
  608. ff_amf_write_number(&p, rt->live);
  609. return rtmp_send_packet(rt, &pkt, 1);
  610. }
  611. /**
  612. * Generate 'publish' call and send it to the server.
  613. */
  614. static int gen_publish(URLContext *s, RTMPContext *rt)
  615. {
  616. RTMPPacket pkt;
  617. uint8_t *p;
  618. int ret;
  619. av_log(s, AV_LOG_DEBUG, "Sending publish command for '%s'\n", rt->playpath);
  620. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SOURCE_CHANNEL, RTMP_PT_INVOKE,
  621. 0, 30 + strlen(rt->playpath))) < 0)
  622. return ret;
  623. pkt.extra = rt->main_channel_id;
  624. p = pkt.data;
  625. ff_amf_write_string(&p, "publish");
  626. ff_amf_write_number(&p, ++rt->nb_invokes);
  627. ff_amf_write_null(&p);
  628. ff_amf_write_string(&p, rt->playpath);
  629. ff_amf_write_string(&p, "live");
  630. return rtmp_send_packet(rt, &pkt, 1);
  631. }
  632. /**
  633. * Generate ping reply and send it to the server.
  634. */
  635. static int gen_pong(URLContext *s, RTMPContext *rt, RTMPPacket *ppkt)
  636. {
  637. RTMPPacket pkt;
  638. uint8_t *p;
  639. int ret;
  640. if (ppkt->data_size < 6) {
  641. av_log(s, AV_LOG_ERROR, "Too short ping packet (%d)\n",
  642. ppkt->data_size);
  643. return AVERROR_INVALIDDATA;
  644. }
  645. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_PING,
  646. ppkt->timestamp + 1, 6)) < 0)
  647. return ret;
  648. p = pkt.data;
  649. bytestream_put_be16(&p, 7);
  650. bytestream_put_be32(&p, AV_RB32(ppkt->data+2));
  651. return rtmp_send_packet(rt, &pkt, 0);
  652. }
  653. /**
  654. * Generate SWF verification message and send it to the server.
  655. */
  656. static int gen_swf_verification(URLContext *s, RTMPContext *rt)
  657. {
  658. RTMPPacket pkt;
  659. uint8_t *p;
  660. int ret;
  661. av_log(s, AV_LOG_DEBUG, "Sending SWF verification...\n");
  662. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_PING,
  663. 0, 44)) < 0)
  664. return ret;
  665. p = pkt.data;
  666. bytestream_put_be16(&p, 27);
  667. memcpy(p, rt->swfverification, 42);
  668. return rtmp_send_packet(rt, &pkt, 0);
  669. }
  670. /**
  671. * Generate server bandwidth message and send it to the server.
  672. */
  673. static int gen_server_bw(URLContext *s, RTMPContext *rt)
  674. {
  675. RTMPPacket pkt;
  676. uint8_t *p;
  677. int ret;
  678. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_SERVER_BW,
  679. 0, 4)) < 0)
  680. return ret;
  681. p = pkt.data;
  682. bytestream_put_be32(&p, rt->server_bw);
  683. return rtmp_send_packet(rt, &pkt, 0);
  684. }
  685. /**
  686. * Generate check bandwidth message and send it to the server.
  687. */
  688. static int gen_check_bw(URLContext *s, RTMPContext *rt)
  689. {
  690. RTMPPacket pkt;
  691. uint8_t *p;
  692. int ret;
  693. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  694. 0, 21)) < 0)
  695. return ret;
  696. p = pkt.data;
  697. ff_amf_write_string(&p, "_checkbw");
  698. ff_amf_write_number(&p, ++rt->nb_invokes);
  699. ff_amf_write_null(&p);
  700. return rtmp_send_packet(rt, &pkt, 1);
  701. }
  702. /**
  703. * Generate report on bytes read so far and send it to the server.
  704. */
  705. static int gen_bytes_read(URLContext *s, RTMPContext *rt, uint32_t ts)
  706. {
  707. RTMPPacket pkt;
  708. uint8_t *p;
  709. int ret;
  710. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_NETWORK_CHANNEL, RTMP_PT_BYTES_READ,
  711. ts, 4)) < 0)
  712. return ret;
  713. p = pkt.data;
  714. bytestream_put_be32(&p, rt->bytes_read);
  715. return rtmp_send_packet(rt, &pkt, 0);
  716. }
  717. static int gen_fcsubscribe_stream(URLContext *s, RTMPContext *rt,
  718. const char *subscribe)
  719. {
  720. RTMPPacket pkt;
  721. uint8_t *p;
  722. int ret;
  723. if ((ret = ff_rtmp_packet_create(&pkt, RTMP_SYSTEM_CHANNEL, RTMP_PT_INVOKE,
  724. 0, 27 + strlen(subscribe))) < 0)
  725. return ret;
  726. p = pkt.data;
  727. ff_amf_write_string(&p, "FCSubscribe");
  728. ff_amf_write_number(&p, ++rt->nb_invokes);
  729. ff_amf_write_null(&p);
  730. ff_amf_write_string(&p, subscribe);
  731. return rtmp_send_packet(rt, &pkt, 1);
  732. }
  733. int ff_rtmp_calc_digest(const uint8_t *src, int len, int gap,
  734. const uint8_t *key, int keylen, uint8_t *dst)
  735. {
  736. struct AVSHA *sha;
  737. uint8_t hmac_buf[64+32] = {0};
  738. int i;
  739. sha = av_sha_alloc();
  740. if (!sha)
  741. return AVERROR(ENOMEM);
  742. if (keylen < 64) {
  743. memcpy(hmac_buf, key, keylen);
  744. } else {
  745. av_sha_init(sha, 256);
  746. av_sha_update(sha,key, keylen);
  747. av_sha_final(sha, hmac_buf);
  748. }
  749. for (i = 0; i < 64; i++)
  750. hmac_buf[i] ^= HMAC_IPAD_VAL;
  751. av_sha_init(sha, 256);
  752. av_sha_update(sha, hmac_buf, 64);
  753. if (gap <= 0) {
  754. av_sha_update(sha, src, len);
  755. } else { //skip 32 bytes used for storing digest
  756. av_sha_update(sha, src, gap);
  757. av_sha_update(sha, src + gap + 32, len - gap - 32);
  758. }
  759. av_sha_final(sha, hmac_buf + 64);
  760. for (i = 0; i < 64; i++)
  761. hmac_buf[i] ^= HMAC_IPAD_VAL ^ HMAC_OPAD_VAL; //reuse XORed key for opad
  762. av_sha_init(sha, 256);
  763. av_sha_update(sha, hmac_buf, 64+32);
  764. av_sha_final(sha, dst);
  765. av_free(sha);
  766. return 0;
  767. }
  768. int ff_rtmp_calc_digest_pos(const uint8_t *buf, int off, int mod_val,
  769. int add_val)
  770. {
  771. int i, digest_pos = 0;
  772. for (i = 0; i < 4; i++)
  773. digest_pos += buf[i + off];
  774. digest_pos = digest_pos % mod_val + add_val;
  775. return digest_pos;
  776. }
  777. /**
  778. * Put HMAC-SHA2 digest of packet data (except for the bytes where this digest
  779. * will be stored) into that packet.
  780. *
  781. * @param buf handshake data (1536 bytes)
  782. * @param encrypted use an encrypted connection (RTMPE)
  783. * @return offset to the digest inside input data
  784. */
  785. static int rtmp_handshake_imprint_with_digest(uint8_t *buf, int encrypted)
  786. {
  787. int ret, digest_pos;
  788. if (encrypted)
  789. digest_pos = ff_rtmp_calc_digest_pos(buf, 772, 728, 776);
  790. else
  791. digest_pos = ff_rtmp_calc_digest_pos(buf, 8, 728, 12);
  792. ret = ff_rtmp_calc_digest(buf, RTMP_HANDSHAKE_PACKET_SIZE, digest_pos,
  793. rtmp_player_key, PLAYER_KEY_OPEN_PART_LEN,
  794. buf + digest_pos);
  795. if (ret < 0)
  796. return ret;
  797. return digest_pos;
  798. }
  799. /**
  800. * Verify that the received server response has the expected digest value.
  801. *
  802. * @param buf handshake data received from the server (1536 bytes)
  803. * @param off position to search digest offset from
  804. * @return 0 if digest is valid, digest position otherwise
  805. */
  806. static int rtmp_validate_digest(uint8_t *buf, int off)
  807. {
  808. uint8_t digest[32];
  809. int ret, digest_pos;
  810. digest_pos = ff_rtmp_calc_digest_pos(buf, off, 728, off + 4);
  811. ret = ff_rtmp_calc_digest(buf, RTMP_HANDSHAKE_PACKET_SIZE, digest_pos,
  812. rtmp_server_key, SERVER_KEY_OPEN_PART_LEN,
  813. digest);
  814. if (ret < 0)
  815. return ret;
  816. if (!memcmp(digest, buf + digest_pos, 32))
  817. return digest_pos;
  818. return 0;
  819. }
  820. static int rtmp_calc_swf_verification(URLContext *s, RTMPContext *rt,
  821. uint8_t *buf)
  822. {
  823. uint8_t *p;
  824. int ret;
  825. if (rt->swfhash_len != 32) {
  826. av_log(s, AV_LOG_ERROR,
  827. "Hash of the decompressed SWF file is not 32 bytes long.\n");
  828. return AVERROR(EINVAL);
  829. }
  830. p = &rt->swfverification[0];
  831. bytestream_put_byte(&p, 1);
  832. bytestream_put_byte(&p, 1);
  833. bytestream_put_be32(&p, rt->swfsize);
  834. bytestream_put_be32(&p, rt->swfsize);
  835. if ((ret = ff_rtmp_calc_digest(rt->swfhash, 32, 0, buf, 32, p)) < 0)
  836. return ret;
  837. return 0;
  838. }
  839. #if CONFIG_ZLIB
  840. static int rtmp_uncompress_swfplayer(uint8_t *in_data, int64_t in_size,
  841. uint8_t **out_data, int64_t *out_size)
  842. {
  843. z_stream zs = { 0 };
  844. void *ptr;
  845. int size;
  846. int ret = 0;
  847. zs.avail_in = in_size;
  848. zs.next_in = in_data;
  849. ret = inflateInit(&zs);
  850. if (ret != Z_OK)
  851. return AVERROR_UNKNOWN;
  852. do {
  853. uint8_t tmp_buf[16384];
  854. zs.avail_out = sizeof(tmp_buf);
  855. zs.next_out = tmp_buf;
  856. ret = inflate(&zs, Z_NO_FLUSH);
  857. if (ret != Z_OK && ret != Z_STREAM_END) {
  858. ret = AVERROR_UNKNOWN;
  859. goto fail;
  860. }
  861. size = sizeof(tmp_buf) - zs.avail_out;
  862. if (!(ptr = av_realloc(*out_data, *out_size + size))) {
  863. ret = AVERROR(ENOMEM);
  864. goto fail;
  865. }
  866. *out_data = ptr;
  867. memcpy(*out_data + *out_size, tmp_buf, size);
  868. *out_size += size;
  869. } while (zs.avail_out == 0);
  870. fail:
  871. inflateEnd(&zs);
  872. return ret;
  873. }
  874. #endif
  875. static int rtmp_calc_swfhash(URLContext *s)
  876. {
  877. RTMPContext *rt = s->priv_data;
  878. uint8_t *in_data = NULL, *out_data = NULL, *swfdata;
  879. int64_t in_size, out_size;
  880. URLContext *stream;
  881. char swfhash[32];
  882. int swfsize;
  883. int ret = 0;
  884. /* Get the SWF player file. */
  885. if ((ret = ffurl_open(&stream, rt->swfverify, AVIO_FLAG_READ,
  886. &s->interrupt_callback, NULL)) < 0) {
  887. av_log(s, AV_LOG_ERROR, "Cannot open connection %s.\n", rt->swfverify);
  888. goto fail;
  889. }
  890. if ((in_size = ffurl_seek(stream, 0, AVSEEK_SIZE)) < 0) {
  891. ret = AVERROR(EIO);
  892. goto fail;
  893. }
  894. if (!(in_data = av_malloc(in_size))) {
  895. ret = AVERROR(ENOMEM);
  896. goto fail;
  897. }
  898. if ((ret = ffurl_read_complete(stream, in_data, in_size)) < 0)
  899. goto fail;
  900. if (in_size < 3) {
  901. ret = AVERROR_INVALIDDATA;
  902. goto fail;
  903. }
  904. if (!memcmp(in_data, "CWS", 3)) {
  905. /* Decompress the SWF player file using Zlib. */
  906. if (!(out_data = av_malloc(8))) {
  907. ret = AVERROR(ENOMEM);
  908. goto fail;
  909. }
  910. *in_data = 'F'; // magic stuff
  911. memcpy(out_data, in_data, 8);
  912. out_size = 8;
  913. #if CONFIG_ZLIB
  914. if ((ret = rtmp_uncompress_swfplayer(in_data + 8, in_size - 8,
  915. &out_data, &out_size)) < 0)
  916. goto fail;
  917. #else
  918. av_log(s, AV_LOG_ERROR,
  919. "Zlib is required for decompressing the SWF player file.\n");
  920. ret = AVERROR(EINVAL);
  921. goto fail;
  922. #endif
  923. swfsize = out_size;
  924. swfdata = out_data;
  925. } else {
  926. swfsize = in_size;
  927. swfdata = in_data;
  928. }
  929. /* Compute the SHA256 hash of the SWF player file. */
  930. if ((ret = ff_rtmp_calc_digest(swfdata, swfsize, 0,
  931. "Genuine Adobe Flash Player 001", 30,
  932. swfhash)) < 0)
  933. goto fail;
  934. /* Set SWFVerification parameters. */
  935. av_opt_set_bin(rt, "rtmp_swfhash", swfhash, 32, 0);
  936. rt->swfsize = swfsize;
  937. fail:
  938. av_freep(&in_data);
  939. av_freep(&out_data);
  940. ffurl_close(stream);
  941. return ret;
  942. }
  943. /**
  944. * Perform handshake with the server by means of exchanging pseudorandom data
  945. * signed with HMAC-SHA2 digest.
  946. *
  947. * @return 0 if handshake succeeds, negative value otherwise
  948. */
  949. static int rtmp_handshake(URLContext *s, RTMPContext *rt)
  950. {
  951. AVLFG rnd;
  952. uint8_t tosend [RTMP_HANDSHAKE_PACKET_SIZE+1] = {
  953. 3, // unencrypted data
  954. 0, 0, 0, 0, // client uptime
  955. RTMP_CLIENT_VER1,
  956. RTMP_CLIENT_VER2,
  957. RTMP_CLIENT_VER3,
  958. RTMP_CLIENT_VER4,
  959. };
  960. uint8_t clientdata[RTMP_HANDSHAKE_PACKET_SIZE];
  961. uint8_t serverdata[RTMP_HANDSHAKE_PACKET_SIZE+1];
  962. int i;
  963. int server_pos, client_pos;
  964. uint8_t digest[32], signature[32];
  965. int ret, type = 0;
  966. av_log(s, AV_LOG_DEBUG, "Handshaking...\n");
  967. av_lfg_init(&rnd, 0xDEADC0DE);
  968. // generate handshake packet - 1536 bytes of pseudorandom data
  969. for (i = 9; i <= RTMP_HANDSHAKE_PACKET_SIZE; i++)
  970. tosend[i] = av_lfg_get(&rnd) >> 24;
  971. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  972. /* When the client wants to use RTMPE, we have to change the command
  973. * byte to 0x06 which means to use encrypted data and we have to set
  974. * the flash version to at least 9.0.115.0. */
  975. tosend[0] = 6;
  976. tosend[5] = 128;
  977. tosend[6] = 0;
  978. tosend[7] = 3;
  979. tosend[8] = 2;
  980. /* Initialize the Diffie-Hellmann context and generate the public key
  981. * to send to the server. */
  982. if ((ret = ff_rtmpe_gen_pub_key(rt->stream, tosend + 1)) < 0)
  983. return ret;
  984. }
  985. client_pos = rtmp_handshake_imprint_with_digest(tosend + 1, rt->encrypted);
  986. if (client_pos < 0)
  987. return client_pos;
  988. if ((ret = ffurl_write(rt->stream, tosend,
  989. RTMP_HANDSHAKE_PACKET_SIZE + 1)) < 0) {
  990. av_log(s, AV_LOG_ERROR, "Cannot write RTMP handshake request\n");
  991. return ret;
  992. }
  993. if ((ret = ffurl_read_complete(rt->stream, serverdata,
  994. RTMP_HANDSHAKE_PACKET_SIZE + 1)) < 0) {
  995. av_log(s, AV_LOG_ERROR, "Cannot read RTMP handshake response\n");
  996. return ret;
  997. }
  998. if ((ret = ffurl_read_complete(rt->stream, clientdata,
  999. RTMP_HANDSHAKE_PACKET_SIZE)) < 0) {
  1000. av_log(s, AV_LOG_ERROR, "Cannot read RTMP handshake response\n");
  1001. return ret;
  1002. }
  1003. av_log(s, AV_LOG_DEBUG, "Type answer %d\n", serverdata[0]);
  1004. av_log(s, AV_LOG_DEBUG, "Server version %d.%d.%d.%d\n",
  1005. serverdata[5], serverdata[6], serverdata[7], serverdata[8]);
  1006. if (rt->is_input && serverdata[5] >= 3) {
  1007. server_pos = rtmp_validate_digest(serverdata + 1, 772);
  1008. if (server_pos < 0)
  1009. return server_pos;
  1010. if (!server_pos) {
  1011. type = 1;
  1012. server_pos = rtmp_validate_digest(serverdata + 1, 8);
  1013. if (server_pos < 0)
  1014. return server_pos;
  1015. if (!server_pos) {
  1016. av_log(s, AV_LOG_ERROR, "Server response validating failed\n");
  1017. return AVERROR(EIO);
  1018. }
  1019. }
  1020. /* Generate SWFVerification token (SHA256 HMAC hash of decompressed SWF,
  1021. * key are the last 32 bytes of the server handshake. */
  1022. if (rt->swfsize) {
  1023. if ((ret = rtmp_calc_swf_verification(s, rt, serverdata + 1 +
  1024. RTMP_HANDSHAKE_PACKET_SIZE - 32)) < 0)
  1025. return ret;
  1026. }
  1027. ret = ff_rtmp_calc_digest(tosend + 1 + client_pos, 32, 0,
  1028. rtmp_server_key, sizeof(rtmp_server_key),
  1029. digest);
  1030. if (ret < 0)
  1031. return ret;
  1032. ret = ff_rtmp_calc_digest(clientdata, RTMP_HANDSHAKE_PACKET_SIZE - 32,
  1033. 0, digest, 32, signature);
  1034. if (ret < 0)
  1035. return ret;
  1036. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1037. /* Compute the shared secret key sent by the server and initialize
  1038. * the RC4 encryption. */
  1039. if ((ret = ff_rtmpe_compute_secret_key(rt->stream, serverdata + 1,
  1040. tosend + 1, type)) < 0)
  1041. return ret;
  1042. /* Encrypt the signature received by the server. */
  1043. ff_rtmpe_encrypt_sig(rt->stream, signature, digest, serverdata[0]);
  1044. }
  1045. if (memcmp(signature, clientdata + RTMP_HANDSHAKE_PACKET_SIZE - 32, 32)) {
  1046. av_log(s, AV_LOG_ERROR, "Signature mismatch\n");
  1047. return AVERROR(EIO);
  1048. }
  1049. for (i = 0; i < RTMP_HANDSHAKE_PACKET_SIZE; i++)
  1050. tosend[i] = av_lfg_get(&rnd) >> 24;
  1051. ret = ff_rtmp_calc_digest(serverdata + 1 + server_pos, 32, 0,
  1052. rtmp_player_key, sizeof(rtmp_player_key),
  1053. digest);
  1054. if (ret < 0)
  1055. return ret;
  1056. ret = ff_rtmp_calc_digest(tosend, RTMP_HANDSHAKE_PACKET_SIZE - 32, 0,
  1057. digest, 32,
  1058. tosend + RTMP_HANDSHAKE_PACKET_SIZE - 32);
  1059. if (ret < 0)
  1060. return ret;
  1061. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1062. /* Encrypt the signature to be send to the server. */
  1063. ff_rtmpe_encrypt_sig(rt->stream, tosend +
  1064. RTMP_HANDSHAKE_PACKET_SIZE - 32, digest,
  1065. serverdata[0]);
  1066. }
  1067. // write reply back to the server
  1068. if ((ret = ffurl_write(rt->stream, tosend,
  1069. RTMP_HANDSHAKE_PACKET_SIZE)) < 0)
  1070. return ret;
  1071. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1072. /* Set RC4 keys for encryption and update the keystreams. */
  1073. if ((ret = ff_rtmpe_update_keystream(rt->stream)) < 0)
  1074. return ret;
  1075. }
  1076. } else {
  1077. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1078. /* Compute the shared secret key sent by the server and initialize
  1079. * the RC4 encryption. */
  1080. if ((ret = ff_rtmpe_compute_secret_key(rt->stream, serverdata + 1,
  1081. tosend + 1, 1)) < 0)
  1082. return ret;
  1083. if (serverdata[0] == 9) {
  1084. /* Encrypt the signature received by the server. */
  1085. ff_rtmpe_encrypt_sig(rt->stream, signature, digest,
  1086. serverdata[0]);
  1087. }
  1088. }
  1089. if ((ret = ffurl_write(rt->stream, serverdata + 1,
  1090. RTMP_HANDSHAKE_PACKET_SIZE)) < 0)
  1091. return ret;
  1092. if (rt->encrypted && CONFIG_FFRTMPCRYPT_PROTOCOL) {
  1093. /* Set RC4 keys for encryption and update the keystreams. */
  1094. if ((ret = ff_rtmpe_update_keystream(rt->stream)) < 0)
  1095. return ret;
  1096. }
  1097. }
  1098. return 0;
  1099. }
  1100. static int rtmp_receive_hs_packet(RTMPContext* rt, uint32_t *first_int,
  1101. uint32_t *second_int, char *arraydata,
  1102. int size)
  1103. {
  1104. int inoutsize;
  1105. inoutsize = ffurl_read_complete(rt->stream, arraydata,
  1106. RTMP_HANDSHAKE_PACKET_SIZE);
  1107. if (inoutsize <= 0)
  1108. return AVERROR(EIO);
  1109. if (inoutsize != RTMP_HANDSHAKE_PACKET_SIZE) {
  1110. av_log(rt, AV_LOG_ERROR, "Erroneous Message size %d"
  1111. " not following standard\n", (int)inoutsize);
  1112. return AVERROR(EINVAL);
  1113. }
  1114. *first_int = AV_RB32(arraydata);
  1115. *second_int = AV_RB32(arraydata + 4);
  1116. return 0;
  1117. }
  1118. static int rtmp_send_hs_packet(RTMPContext* rt, uint32_t first_int,
  1119. uint32_t second_int, char *arraydata, int size)
  1120. {
  1121. int inoutsize;
  1122. AV_WB32(arraydata, first_int);
  1123. AV_WB32(arraydata + 4, first_int);
  1124. inoutsize = ffurl_write(rt->stream, arraydata,
  1125. RTMP_HANDSHAKE_PACKET_SIZE);
  1126. if (inoutsize != RTMP_HANDSHAKE_PACKET_SIZE) {
  1127. av_log(rt, AV_LOG_ERROR, "Unable to write answer\n");
  1128. return AVERROR(EIO);
  1129. }
  1130. return 0;
  1131. }
  1132. /**
  1133. * rtmp handshake server side
  1134. */
  1135. static int rtmp_server_handshake(URLContext *s, RTMPContext *rt)
  1136. {
  1137. uint8_t buffer[RTMP_HANDSHAKE_PACKET_SIZE];
  1138. uint32_t hs_epoch;
  1139. uint32_t hs_my_epoch;
  1140. uint8_t hs_c1[RTMP_HANDSHAKE_PACKET_SIZE];
  1141. uint8_t hs_s1[RTMP_HANDSHAKE_PACKET_SIZE];
  1142. uint32_t zeroes;
  1143. uint32_t temp = 0;
  1144. int randomidx = 0;
  1145. int inoutsize = 0;
  1146. int ret;
  1147. inoutsize = ffurl_read_complete(rt->stream, buffer, 1); // Receive C0
  1148. if (inoutsize <= 0) {
  1149. av_log(s, AV_LOG_ERROR, "Unable to read handshake\n");
  1150. return AVERROR(EIO);
  1151. }
  1152. // Check Version
  1153. if (buffer[0] != 3) {
  1154. av_log(s, AV_LOG_ERROR, "RTMP protocol version mismatch\n");
  1155. return AVERROR(EIO);
  1156. }
  1157. if (ffurl_write(rt->stream, buffer, 1) <= 0) { // Send S0
  1158. av_log(s, AV_LOG_ERROR,
  1159. "Unable to write answer - RTMP S0\n");
  1160. return AVERROR(EIO);
  1161. }
  1162. /* Receive C1 */
  1163. ret = rtmp_receive_hs_packet(rt, &hs_epoch, &zeroes, hs_c1,
  1164. RTMP_HANDSHAKE_PACKET_SIZE);
  1165. if (ret) {
  1166. av_log(s, AV_LOG_ERROR, "RTMP Handshake C1 Error\n");
  1167. return ret;
  1168. }
  1169. if (zeroes)
  1170. av_log(s, AV_LOG_WARNING, "Erroneous C1 Message zero != 0\n");
  1171. /* Send S1 */
  1172. /* By now same epoch will be sent */
  1173. hs_my_epoch = hs_epoch;
  1174. /* Generate random */
  1175. for (randomidx = 8; randomidx < (RTMP_HANDSHAKE_PACKET_SIZE);
  1176. randomidx += 4)
  1177. AV_WB32(hs_s1 + randomidx, av_get_random_seed());
  1178. ret = rtmp_send_hs_packet(rt, hs_my_epoch, 0, hs_s1,
  1179. RTMP_HANDSHAKE_PACKET_SIZE);
  1180. if (ret) {
  1181. av_log(s, AV_LOG_ERROR, "RTMP Handshake S1 Error\n");
  1182. return ret;
  1183. }
  1184. /* Send S2 */
  1185. ret = rtmp_send_hs_packet(rt, hs_epoch, 0, hs_c1,
  1186. RTMP_HANDSHAKE_PACKET_SIZE);
  1187. if (ret) {
  1188. av_log(s, AV_LOG_ERROR, "RTMP Handshake S2 Error\n");
  1189. return ret;
  1190. }
  1191. /* Receive C2 */
  1192. ret = rtmp_receive_hs_packet(rt, &temp, &zeroes, buffer,
  1193. RTMP_HANDSHAKE_PACKET_SIZE);
  1194. if (ret) {
  1195. av_log(s, AV_LOG_ERROR, "RTMP Handshake C2 Error\n");
  1196. return ret;
  1197. }
  1198. if (temp != hs_my_epoch)
  1199. av_log(s, AV_LOG_WARNING,
  1200. "Erroneous C2 Message epoch does not match up with C1 epoch\n");
  1201. if (memcmp(buffer + 8, hs_s1 + 8,
  1202. RTMP_HANDSHAKE_PACKET_SIZE - 8))
  1203. av_log(s, AV_LOG_WARNING,
  1204. "Erroneous C2 Message random does not match up\n");
  1205. return 0;
  1206. }
  1207. static int handle_chunk_size(URLContext *s, RTMPPacket *pkt)
  1208. {
  1209. RTMPContext *rt = s->priv_data;
  1210. int ret;
  1211. if (pkt->data_size < 4) {
  1212. av_log(s, AV_LOG_ERROR,
  1213. "Too short chunk size change packet (%d)\n",
  1214. pkt->data_size);
  1215. return AVERROR_INVALIDDATA;
  1216. }
  1217. if (!rt->is_input) {
  1218. /* Send the same chunk size change packet back to the server,
  1219. * setting the outgoing chunk size to the same as the incoming one. */
  1220. if ((ret = ff_rtmp_packet_write(rt->stream, pkt, rt->out_chunk_size,
  1221. rt->prev_pkt[1])) < 0)
  1222. return ret;
  1223. rt->out_chunk_size = AV_RB32(pkt->data);
  1224. }
  1225. rt->in_chunk_size = AV_RB32(pkt->data);
  1226. if (rt->in_chunk_size <= 0) {
  1227. av_log(s, AV_LOG_ERROR, "Incorrect chunk size %d\n",
  1228. rt->in_chunk_size);
  1229. return AVERROR_INVALIDDATA;
  1230. }
  1231. av_log(s, AV_LOG_DEBUG, "New incoming chunk size = %d\n",
  1232. rt->in_chunk_size);
  1233. return 0;
  1234. }
  1235. static int handle_ping(URLContext *s, RTMPPacket *pkt)
  1236. {
  1237. RTMPContext *rt = s->priv_data;
  1238. int t, ret;
  1239. if (pkt->data_size < 2) {
  1240. av_log(s, AV_LOG_ERROR, "Too short ping packet (%d)\n",
  1241. pkt->data_size);
  1242. return AVERROR_INVALIDDATA;
  1243. }
  1244. t = AV_RB16(pkt->data);
  1245. if (t == 6) {
  1246. if ((ret = gen_pong(s, rt, pkt)) < 0)
  1247. return ret;
  1248. } else if (t == 26) {
  1249. if (rt->swfsize) {
  1250. if ((ret = gen_swf_verification(s, rt)) < 0)
  1251. return ret;
  1252. } else {
  1253. av_log(s, AV_LOG_WARNING, "Ignoring SWFVerification request.\n");
  1254. }
  1255. }
  1256. return 0;
  1257. }
  1258. static int handle_client_bw(URLContext *s, RTMPPacket *pkt)
  1259. {
  1260. RTMPContext *rt = s->priv_data;
  1261. if (pkt->data_size < 4) {
  1262. av_log(s, AV_LOG_ERROR,
  1263. "Client bandwidth report packet is less than 4 bytes long (%d)\n",
  1264. pkt->data_size);
  1265. return AVERROR_INVALIDDATA;
  1266. }
  1267. rt->client_report_size = AV_RB32(pkt->data);
  1268. if (rt->client_report_size <= 0) {
  1269. av_log(s, AV_LOG_ERROR, "Incorrect client bandwidth %d\n",
  1270. rt->client_report_size);
  1271. return AVERROR_INVALIDDATA;
  1272. }
  1273. av_log(s, AV_LOG_DEBUG, "Client bandwidth = %d\n", rt->client_report_size);
  1274. rt->client_report_size >>= 1;
  1275. return 0;
  1276. }
  1277. static int handle_server_bw(URLContext *s, RTMPPacket *pkt)
  1278. {
  1279. RTMPContext *rt = s->priv_data;
  1280. if (pkt->data_size < 4) {
  1281. av_log(s, AV_LOG_ERROR,
  1282. "Too short server bandwidth report packet (%d)\n",
  1283. pkt->data_size);
  1284. return AVERROR_INVALIDDATA;
  1285. }
  1286. rt->server_bw = AV_RB32(pkt->data);
  1287. if (rt->server_bw <= 0) {
  1288. av_log(s, AV_LOG_ERROR, "Incorrect server bandwidth %d\n",
  1289. rt->server_bw);
  1290. return AVERROR_INVALIDDATA;
  1291. }
  1292. av_log(s, AV_LOG_DEBUG, "Server bandwidth = %d\n", rt->server_bw);
  1293. return 0;
  1294. }
  1295. static int do_adobe_auth(RTMPContext *rt, const char *user, const char *salt,
  1296. const char *opaque, const char *challenge)
  1297. {
  1298. uint8_t hash[16];
  1299. char hashstr[AV_BASE64_SIZE(sizeof(hash))], challenge2[10];
  1300. struct AVMD5 *md5 = av_md5_alloc();
  1301. if (!md5)
  1302. return AVERROR(ENOMEM);
  1303. snprintf(challenge2, sizeof(challenge2), "%08x", av_get_random_seed());
  1304. av_md5_init(md5);
  1305. av_md5_update(md5, user, strlen(user));
  1306. av_md5_update(md5, salt, strlen(salt));
  1307. av_md5_update(md5, rt->password, strlen(rt->password));
  1308. av_md5_final(md5, hash);
  1309. av_base64_encode(hashstr, sizeof(hashstr), hash,
  1310. sizeof(hash));
  1311. av_md5_init(md5);
  1312. av_md5_update(md5, hashstr, strlen(hashstr));
  1313. if (opaque)
  1314. av_md5_update(md5, opaque, strlen(opaque));
  1315. else if (challenge)
  1316. av_md5_update(md5, challenge, strlen(challenge));
  1317. av_md5_update(md5, challenge2, strlen(challenge2));
  1318. av_md5_final(md5, hash);
  1319. av_base64_encode(hashstr, sizeof(hashstr), hash,
  1320. sizeof(hash));
  1321. snprintf(rt->auth_params, sizeof(rt->auth_params),
  1322. "?authmod=%s&user=%s&challenge=%s&response=%s",
  1323. "adobe", user, challenge2, hashstr);
  1324. if (opaque)
  1325. av_strlcatf(rt->auth_params, sizeof(rt->auth_params),
  1326. "&opaque=%s", opaque);
  1327. av_free(md5);
  1328. return 0;
  1329. }
  1330. static int do_llnw_auth(RTMPContext *rt, const char *user, const char *nonce)
  1331. {
  1332. uint8_t hash[16];
  1333. char hashstr1[33], hashstr2[33];
  1334. const char *realm = "live";
  1335. const char *method = "publish";
  1336. const char *qop = "auth";
  1337. const char *nc = "00000001";
  1338. char cnonce[10];
  1339. struct AVMD5 *md5 = av_md5_alloc();
  1340. if (!md5)
  1341. return AVERROR(ENOMEM);
  1342. snprintf(cnonce, sizeof(cnonce), "%08x", av_get_random_seed());
  1343. av_md5_init(md5);
  1344. av_md5_update(md5, user, strlen(user));
  1345. av_md5_update(md5, ":", 1);
  1346. av_md5_update(md5, realm, strlen(realm));
  1347. av_md5_update(md5, ":", 1);
  1348. av_md5_update(md5, rt->password, strlen(rt->password));
  1349. av_md5_final(md5, hash);
  1350. ff_data_to_hex(hashstr1, hash, 16, 1);
  1351. hashstr1[32] = '\0';
  1352. av_md5_init(md5);
  1353. av_md5_update(md5, method, strlen(method));
  1354. av_md5_update(md5, ":/", 2);
  1355. av_md5_update(md5, rt->app, strlen(rt->app));
  1356. av_md5_final(md5, hash);
  1357. ff_data_to_hex(hashstr2, hash, 16, 1);
  1358. hashstr2[32] = '\0';
  1359. av_md5_init(md5);
  1360. av_md5_update(md5, hashstr1, strlen(hashstr1));
  1361. av_md5_update(md5, ":", 1);
  1362. if (nonce)
  1363. av_md5_update(md5, nonce, strlen(nonce));
  1364. av_md5_update(md5, ":", 1);
  1365. av_md5_update(md5, nc, strlen(nc));
  1366. av_md5_update(md5, ":", 1);
  1367. av_md5_update(md5, cnonce, strlen(cnonce));
  1368. av_md5_update(md5, ":", 1);
  1369. av_md5_update(md5, qop, strlen(qop));
  1370. av_md5_update(md5, ":", 1);
  1371. av_md5_update(md5, hashstr2, strlen(hashstr2));
  1372. av_md5_final(md5, hash);
  1373. ff_data_to_hex(hashstr1, hash, 16, 1);
  1374. snprintf(rt->auth_params, sizeof(rt->auth_params),
  1375. "?authmod=%s&user=%s&nonce=%s&cnonce=%s&nc=%s&response=%s",
  1376. "llnw", user, nonce, cnonce, nc, hashstr1);
  1377. av_free(md5);
  1378. return 0;
  1379. }
  1380. static int handle_connect_error(URLContext *s, const char *desc)
  1381. {
  1382. RTMPContext *rt = s->priv_data;
  1383. char buf[300], *ptr, authmod[15];
  1384. int i = 0, ret = 0;
  1385. const char *user = "", *salt = "", *opaque = NULL,
  1386. *challenge = NULL, *cptr = NULL, *nonce = NULL;
  1387. if (!(cptr = strstr(desc, "authmod=adobe")) &&
  1388. !(cptr = strstr(desc, "authmod=llnw"))) {
  1389. av_log(s, AV_LOG_ERROR,
  1390. "Unknown connect error (unsupported authentication method?)\n");
  1391. return AVERROR_UNKNOWN;
  1392. }
  1393. cptr += strlen("authmod=");
  1394. while (*cptr && *cptr != ' ' && i < sizeof(authmod) - 1)
  1395. authmod[i++] = *cptr++;
  1396. authmod[i] = '\0';
  1397. if (!rt->username[0] || !rt->password[0]) {
  1398. av_log(s, AV_LOG_ERROR, "No credentials set\n");
  1399. return AVERROR_UNKNOWN;
  1400. }
  1401. if (strstr(desc, "?reason=authfailed")) {
  1402. av_log(s, AV_LOG_ERROR, "Incorrect username/password\n");
  1403. return AVERROR_UNKNOWN;
  1404. } else if (strstr(desc, "?reason=nosuchuser")) {
  1405. av_log(s, AV_LOG_ERROR, "Incorrect username\n");
  1406. return AVERROR_UNKNOWN;
  1407. }
  1408. if (rt->auth_tried) {
  1409. av_log(s, AV_LOG_ERROR, "Authentication failed\n");
  1410. return AVERROR_UNKNOWN;
  1411. }
  1412. rt->auth_params[0] = '\0';
  1413. if (strstr(desc, "code=403 need auth")) {
  1414. snprintf(rt->auth_params, sizeof(rt->auth_params),
  1415. "?authmod=%s&user=%s", authmod, rt->username);
  1416. return 0;
  1417. }
  1418. if (!(cptr = strstr(desc, "?reason=needauth"))) {
  1419. av_log(s, AV_LOG_ERROR, "No auth parameters found\n");
  1420. return AVERROR_UNKNOWN;
  1421. }
  1422. av_strlcpy(buf, cptr + 1, sizeof(buf));
  1423. ptr = buf;
  1424. while (ptr) {
  1425. char *next = strchr(ptr, '&');
  1426. char *value = strchr(ptr, '=');
  1427. if (next)
  1428. *next++ = '\0';
  1429. if (value)
  1430. *value++ = '\0';
  1431. if (!strcmp(ptr, "user")) {
  1432. user = value;
  1433. } else if (!strcmp(ptr, "salt")) {
  1434. salt = value;
  1435. } else if (!strcmp(ptr, "opaque")) {
  1436. opaque = value;
  1437. } else if (!strcmp(ptr, "challenge")) {
  1438. challenge = value;
  1439. } else if (!strcmp(ptr, "nonce")) {
  1440. nonce = value;
  1441. }
  1442. ptr = next;
  1443. }
  1444. if (!strcmp(authmod, "adobe")) {
  1445. if ((ret = do_adobe_auth(rt, user, salt, challenge, opaque)) < 0)
  1446. return ret;
  1447. } else {
  1448. if ((ret = do_llnw_auth(rt, user, nonce)) < 0)
  1449. return ret;
  1450. }
  1451. rt->auth_tried = 1;
  1452. return 0;
  1453. }
  1454. static int handle_invoke_error(URLContext *s, RTMPPacket *pkt)
  1455. {
  1456. RTMPContext *rt = s->priv_data;
  1457. const uint8_t *data_end = pkt->data + pkt->data_size;
  1458. char *tracked_method = NULL;
  1459. int level = AV_LOG_ERROR;
  1460. uint8_t tmpstr[256];
  1461. int ret;
  1462. if ((ret = find_tracked_method(s, pkt, 9, &tracked_method)) < 0)
  1463. return ret;
  1464. if (!ff_amf_get_field_value(pkt->data + 9, data_end,
  1465. "description", tmpstr, sizeof(tmpstr))) {
  1466. if (tracked_method && (!strcmp(tracked_method, "_checkbw") ||
  1467. !strcmp(tracked_method, "releaseStream") ||
  1468. !strcmp(tracked_method, "FCSubscribe") ||
  1469. !strcmp(tracked_method, "FCPublish"))) {
  1470. /* Gracefully ignore Adobe-specific historical artifact errors. */
  1471. level = AV_LOG_WARNING;
  1472. ret = 0;
  1473. } else if (tracked_method && !strcmp(tracked_method, "connect")) {
  1474. ret = handle_connect_error(s, tmpstr);
  1475. if (!ret) {
  1476. rt->do_reconnect = 1;
  1477. level = AV_LOG_VERBOSE;
  1478. }
  1479. } else
  1480. ret = AVERROR_UNKNOWN;
  1481. av_log(s, level, "Server error: %s\n", tmpstr);
  1482. }
  1483. av_free(tracked_method);
  1484. return ret;
  1485. }
  1486. static int send_invoke_response(URLContext *s, RTMPPacket *pkt)
  1487. {
  1488. RTMPContext *rt = s->priv_data;
  1489. double seqnum;
  1490. char filename[64];
  1491. char command[64];
  1492. char statusmsg[128];
  1493. int stringlen;
  1494. char *pchar;
  1495. const uint8_t *p = pkt->data;
  1496. uint8_t *pp = NULL;
  1497. RTMPPacket spkt = { 0 };
  1498. GetByteContext gbc;
  1499. int ret;
  1500. bytestream2_init(&gbc, p, pkt->data_size);
  1501. if (ff_amf_read_string(&gbc, command, sizeof(command),
  1502. &stringlen)) {
  1503. av_log(s, AV_LOG_ERROR, "Error in PT_INVOKE\n");
  1504. return AVERROR_INVALIDDATA;
  1505. }
  1506. ret = ff_amf_read_number(&gbc, &seqnum);
  1507. if (ret)
  1508. return ret;
  1509. ret = ff_amf_read_null(&gbc);
  1510. if (ret)
  1511. return ret;
  1512. if (!strcmp(command, "FCPublish") ||
  1513. !strcmp(command, "publish")) {
  1514. ret = ff_amf_read_string(&gbc, filename,
  1515. sizeof(filename), &stringlen);
  1516. // check with url
  1517. if (s->filename) {
  1518. pchar = strrchr(s->filename, '/');
  1519. if (!pchar) {
  1520. av_log(s, AV_LOG_WARNING,
  1521. "Unable to find / in url %s, bad format\n",
  1522. s->filename);
  1523. pchar = s->filename;
  1524. }
  1525. pchar++;
  1526. if (strcmp(pchar, filename))
  1527. av_log(s, AV_LOG_WARNING, "Unexpected stream %s, expecting"
  1528. " %s\n", filename, pchar);
  1529. }
  1530. rt->state = STATE_RECEIVING;
  1531. }
  1532. if (!strcmp(command, "FCPublish")) {
  1533. if ((ret = ff_rtmp_packet_create(&spkt, RTMP_SYSTEM_CHANNEL,
  1534. RTMP_PT_INVOKE, 0,
  1535. RTMP_PKTDATA_DEFAULT_SIZE)) < 0) {
  1536. av_log(s, AV_LOG_ERROR, "Unable to create response packet\n");
  1537. return ret;
  1538. }
  1539. pp = spkt.data;
  1540. ff_amf_write_string(&pp, "onFCPublish");
  1541. } else if (!strcmp(command, "publish")) {
  1542. PutByteContext pbc;
  1543. // Send Stream Begin 1
  1544. if ((ret = ff_rtmp_packet_create(&spkt, RTMP_NETWORK_CHANNEL,
  1545. RTMP_PT_PING, 0, 6)) < 0) {
  1546. av_log(s, AV_LOG_ERROR, "Unable to create response packet\n");
  1547. return ret;
  1548. }
  1549. pp = spkt.data;
  1550. bytestream2_init_writer(&pbc, pp, spkt.data_size);
  1551. bytestream2_put_be16(&pbc, 0); // 0 -> Stream Begin
  1552. bytestream2_put_be32(&pbc, rt->nb_streamid);
  1553. ret = ff_rtmp_packet_write(rt->stream, &spkt, rt->out_chunk_size,
  1554. rt->prev_pkt[1]);
  1555. ff_rtmp_packet_destroy(&spkt);
  1556. if (ret < 0)
  1557. return ret;
  1558. // Send onStatus(NetStream.Publish.Start)
  1559. if ((ret = ff_rtmp_packet_create(&spkt, RTMP_SYSTEM_CHANNEL,
  1560. RTMP_PT_INVOKE, 0,
  1561. RTMP_PKTDATA_DEFAULT_SIZE)) < 0) {
  1562. av_log(s, AV_LOG_ERROR, "Unable to create response packet\n");
  1563. return ret;
  1564. }
  1565. spkt.extra = pkt->extra;
  1566. pp = spkt.data;
  1567. ff_amf_write_string(&pp, "onStatus");
  1568. ff_amf_write_number(&pp, 0);
  1569. ff_amf_write_null(&pp);
  1570. ff_amf_write_object_start(&pp);
  1571. ff_amf_write_field_name(&pp, "level");
  1572. ff_amf_write_string(&pp, "status");
  1573. ff_amf_write_field_name(&pp, "code");
  1574. ff_amf_write_string(&pp, "NetStream.Publish.Start");
  1575. ff_amf_write_field_name(&pp, "description");
  1576. snprintf(statusmsg, sizeof(statusmsg),
  1577. "%s is now published", filename);
  1578. ff_amf_write_string(&pp, statusmsg);
  1579. ff_amf_write_field_name(&pp, "details");
  1580. ff_amf_write_string(&pp, filename);
  1581. ff_amf_write_field_name(&pp, "clientid");
  1582. snprintf(statusmsg, sizeof(statusmsg), "%s", LIBAVFORMAT_IDENT);
  1583. ff_amf_write_string(&pp, statusmsg);
  1584. ff_amf_write_object_end(&pp);
  1585. } else {
  1586. if ((ret = ff_rtmp_packet_create(&spkt, RTMP_SYSTEM_CHANNEL,
  1587. RTMP_PT_INVOKE, 0,
  1588. RTMP_PKTDATA_DEFAULT_SIZE)) < 0) {
  1589. av_log(s, AV_LOG_ERROR, "Unable to create response packet\n");
  1590. return ret;
  1591. }
  1592. pp = spkt.data;
  1593. ff_amf_write_string(&pp, "_result");
  1594. ff_amf_write_number(&pp, seqnum);
  1595. ff_amf_write_null(&pp);
  1596. if (!strcmp(command, "createStream")) {
  1597. rt->nb_streamid++;
  1598. if (rt->nb_streamid == 0 || rt->nb_streamid == 2)
  1599. rt->nb_streamid++; /* Values 0 and 2 are reserved */
  1600. ff_amf_write_number(&pp, rt->nb_streamid);
  1601. /* By now we don't control which streams are removed in
  1602. * deleteStream. There is no stream creation control
  1603. * if a client creates more than 2^32 - 2 streams. */
  1604. }
  1605. }
  1606. spkt.data_size = pp - spkt.data;
  1607. ret = ff_rtmp_packet_write(rt->stream, &spkt, rt->out_chunk_size,
  1608. rt->prev_pkt[1]);
  1609. ff_rtmp_packet_destroy(&spkt);
  1610. return ret;
  1611. }
  1612. static int handle_invoke_result(URLContext *s, RTMPPacket *pkt)
  1613. {
  1614. RTMPContext *rt = s->priv_data;
  1615. char *tracked_method = NULL;
  1616. int ret = 0;
  1617. if ((ret = find_tracked_method(s, pkt, 10, &tracked_method)) < 0)
  1618. return ret;
  1619. if (!tracked_method) {
  1620. /* Ignore this reply when the current method is not tracked. */
  1621. return ret;
  1622. }
  1623. if (!memcmp(tracked_method, "connect", 7)) {
  1624. if (!rt->is_input) {
  1625. if ((ret = gen_release_stream(s, rt)) < 0)
  1626. goto fail;
  1627. if ((ret = gen_fcpublish_stream(s, rt)) < 0)
  1628. goto fail;
  1629. } else {
  1630. if ((ret = gen_server_bw(s, rt)) < 0)
  1631. goto fail;
  1632. }
  1633. if ((ret = gen_create_stream(s, rt)) < 0)
  1634. goto fail;
  1635. if (rt->is_input) {
  1636. /* Send the FCSubscribe command when the name of live
  1637. * stream is defined by the user or if it's a live stream. */
  1638. if (rt->subscribe) {
  1639. if ((ret = gen_fcsubscribe_stream(s, rt, rt->subscribe)) < 0)
  1640. goto fail;
  1641. } else if (rt->live == -1) {
  1642. if ((ret = gen_fcsubscribe_stream(s, rt, rt->playpath)) < 0)
  1643. goto fail;
  1644. }
  1645. }
  1646. } else if (!memcmp(tracked_method, "createStream", 12)) {
  1647. //extract a number from the result
  1648. if (pkt->data[10] || pkt->data[19] != 5 || pkt->data[20]) {
  1649. av_log(s, AV_LOG_WARNING, "Unexpected reply on connect()\n");
  1650. } else {
  1651. rt->main_channel_id = av_int2double(AV_RB64(pkt->data + 21));
  1652. }
  1653. if (!rt->is_input) {
  1654. if ((ret = gen_publish(s, rt)) < 0)
  1655. goto fail;
  1656. } else {
  1657. if ((ret = gen_play(s, rt)) < 0)
  1658. goto fail;
  1659. if ((ret = gen_buffer_time(s, rt)) < 0)
  1660. goto fail;
  1661. }
  1662. }
  1663. fail:
  1664. av_free(tracked_method);
  1665. return ret;
  1666. }
  1667. static int handle_invoke_status(URLContext *s, RTMPPacket *pkt)
  1668. {
  1669. RTMPContext *rt = s->priv_data;
  1670. const uint8_t *data_end = pkt->data + pkt->data_size;
  1671. const uint8_t *ptr = pkt->data + 11;
  1672. uint8_t tmpstr[256];
  1673. int i, t;
  1674. for (i = 0; i < 2; i++) {
  1675. t = ff_amf_tag_size(ptr, data_end);
  1676. if (t < 0)
  1677. return 1;
  1678. ptr += t;
  1679. }
  1680. t = ff_amf_get_field_value(ptr, data_end, "level", tmpstr, sizeof(tmpstr));
  1681. if (!t && !strcmp(tmpstr, "error")) {
  1682. if (!ff_amf_get_field_value(ptr, data_end,
  1683. "description", tmpstr, sizeof(tmpstr)))
  1684. av_log(s, AV_LOG_ERROR, "Server error: %s\n", tmpstr);
  1685. return -1;
  1686. }
  1687. t = ff_amf_get_field_value(ptr, data_end, "code", tmpstr, sizeof(tmpstr));
  1688. if (!t && !strcmp(tmpstr, "NetStream.Play.Start")) rt->state = STATE_PLAYING;
  1689. if (!t && !strcmp(tmpstr, "NetStream.Play.Stop")) rt->state = STATE_STOPPED;
  1690. if (!t && !strcmp(tmpstr, "NetStream.Play.UnpublishNotify")) rt->state = STATE_STOPPED;
  1691. if (!t && !strcmp(tmpstr, "NetStream.Publish.Start")) rt->state = STATE_PUBLISHING;
  1692. return 0;
  1693. }
  1694. static int handle_invoke(URLContext *s, RTMPPacket *pkt)
  1695. {
  1696. RTMPContext *rt = s->priv_data;
  1697. int ret = 0;
  1698. //TODO: check for the messages sent for wrong state?
  1699. if (!memcmp(pkt->data, "\002\000\006_error", 9)) {
  1700. if ((ret = handle_invoke_error(s, pkt)) < 0)
  1701. return ret;
  1702. } else if (!memcmp(pkt->data, "\002\000\007_result", 10)) {
  1703. if ((ret = handle_invoke_result(s, pkt)) < 0)
  1704. return ret;
  1705. } else if (!memcmp(pkt->data, "\002\000\010onStatus", 11)) {
  1706. if ((ret = handle_invoke_status(s, pkt)) < 0)
  1707. return ret;
  1708. } else if (!memcmp(pkt->data, "\002\000\010onBWDone", 11)) {
  1709. if ((ret = gen_check_bw(s, rt)) < 0)
  1710. return ret;
  1711. } else if (!memcmp(pkt->data, "\002\000\015releaseStream", 16) ||
  1712. !memcmp(pkt->data, "\002\000\011FCPublish", 12) ||
  1713. !memcmp(pkt->data, "\002\000\007publish", 10) ||
  1714. !memcmp(pkt->data, "\002\000\010_checkbw", 11) ||
  1715. !memcmp(pkt->data, "\002\000\014createStream", 15)) {
  1716. if (ret = send_invoke_response(s, pkt) < 0)
  1717. return ret;
  1718. }
  1719. return ret;
  1720. }
  1721. static int handle_notify(URLContext *s, RTMPPacket *pkt) {
  1722. RTMPContext *rt = s->priv_data;
  1723. const uint8_t *p = NULL;
  1724. uint8_t *cp = NULL;
  1725. uint8_t commandbuffer[64];
  1726. char statusmsg[128];
  1727. int stringlen;
  1728. GetByteContext gbc;
  1729. PutByteContext pbc;
  1730. uint32_t ts;
  1731. int old_flv_size;
  1732. const uint8_t *datatowrite;
  1733. unsigned datatowritelength;
  1734. p = pkt->data;
  1735. bytestream2_init(&gbc, p, pkt->data_size);
  1736. if (ff_amf_read_string(&gbc, commandbuffer, sizeof(commandbuffer),
  1737. &stringlen))
  1738. return AVERROR_INVALIDDATA;
  1739. if (!strcmp(commandbuffer, "@setDataFrame")) {
  1740. datatowrite = gbc.buffer;
  1741. datatowritelength = bytestream2_get_bytes_left(&gbc);
  1742. if (ff_amf_read_string(&gbc, statusmsg,
  1743. sizeof(statusmsg), &stringlen))
  1744. return AVERROR_INVALIDDATA;
  1745. if (strcmp(statusmsg, "onMetaData")) {
  1746. av_log(s, AV_LOG_INFO, "Expecting onMetadata but got %s\n",
  1747. statusmsg);
  1748. return 0;
  1749. }
  1750. /* Provide ECMAArray to flv */
  1751. ts = pkt->timestamp;
  1752. // generate packet header and put data into buffer for FLV demuxer
  1753. if (rt->flv_off < rt->flv_size) {
  1754. old_flv_size = rt->flv_size;
  1755. rt->flv_size += datatowritelength + 15;
  1756. } else {
  1757. old_flv_size = 0;
  1758. rt->flv_size = datatowritelength + 15;
  1759. rt->flv_off = 0;
  1760. }
  1761. cp = av_realloc(rt->flv_data, rt->flv_size);
  1762. if (!cp)
  1763. return AVERROR(ENOMEM);
  1764. rt->flv_data = cp;
  1765. bytestream2_init_writer(&pbc, cp, rt->flv_size);
  1766. bytestream2_skip_p(&pbc, old_flv_size);
  1767. bytestream2_put_byte(&pbc, pkt->type);
  1768. bytestream2_put_be24(&pbc, datatowritelength);
  1769. bytestream2_put_be24(&pbc, ts);
  1770. bytestream2_put_byte(&pbc, ts >> 24);
  1771. bytestream2_put_be24(&pbc, 0);
  1772. bytestream2_put_buffer(&pbc, datatowrite, datatowritelength);
  1773. bytestream2_put_be32(&pbc, 0);
  1774. }
  1775. return 0;
  1776. }
  1777. /**
  1778. * Parse received packet and possibly perform some action depending on
  1779. * the packet contents.
  1780. * @return 0 for no errors, negative values for serious errors which prevent
  1781. * further communications, positive values for uncritical errors
  1782. */
  1783. static int rtmp_parse_result(URLContext *s, RTMPContext *rt, RTMPPacket *pkt)
  1784. {
  1785. int ret;
  1786. #ifdef DEBUG
  1787. ff_rtmp_packet_dump(s, pkt);
  1788. #endif
  1789. switch (pkt->type) {
  1790. case RTMP_PT_BYTES_READ:
  1791. av_dlog(s, "received bytes read report\n");
  1792. break;
  1793. case RTMP_PT_CHUNK_SIZE:
  1794. if ((ret = handle_chunk_size(s, pkt)) < 0)
  1795. return ret;
  1796. break;
  1797. case RTMP_PT_PING:
  1798. if ((ret = handle_ping(s, pkt)) < 0)
  1799. return ret;
  1800. break;
  1801. case RTMP_PT_CLIENT_BW:
  1802. if ((ret = handle_client_bw(s, pkt)) < 0)
  1803. return ret;
  1804. break;
  1805. case RTMP_PT_SERVER_BW:
  1806. if ((ret = handle_server_bw(s, pkt)) < 0)
  1807. return ret;
  1808. break;
  1809. case RTMP_PT_INVOKE:
  1810. if ((ret = handle_invoke(s, pkt)) < 0)
  1811. return ret;
  1812. break;
  1813. case RTMP_PT_VIDEO:
  1814. case RTMP_PT_AUDIO:
  1815. case RTMP_PT_METADATA:
  1816. case RTMP_PT_NOTIFY:
  1817. /* Audio, Video and Metadata packets are parsed in get_packet() */
  1818. break;
  1819. default:
  1820. av_log(s, AV_LOG_VERBOSE, "Unknown packet type received 0x%02X\n", pkt->type);
  1821. break;
  1822. }
  1823. return 0;
  1824. }
  1825. /**
  1826. * Interact with the server by receiving and sending RTMP packets until
  1827. * there is some significant data (media data or expected status notification).
  1828. *
  1829. * @param s reading context
  1830. * @param for_header non-zero value tells function to work until it
  1831. * gets notification from the server that playing has been started,
  1832. * otherwise function will work until some media data is received (or
  1833. * an error happens)
  1834. * @return 0 for successful operation, negative value in case of error
  1835. */
  1836. static int get_packet(URLContext *s, int for_header)
  1837. {
  1838. RTMPContext *rt = s->priv_data;
  1839. int ret;
  1840. uint8_t *p;
  1841. const uint8_t *next;
  1842. uint32_t data_size;
  1843. uint32_t ts, cts, pts=0;
  1844. if (rt->state == STATE_STOPPED)
  1845. return AVERROR_EOF;
  1846. for (;;) {
  1847. RTMPPacket rpkt = { 0 };
  1848. if ((ret = ff_rtmp_packet_read(rt->stream, &rpkt,
  1849. rt->in_chunk_size, rt->prev_pkt[0])) <= 0) {
  1850. if (ret == 0) {
  1851. return AVERROR(EAGAIN);
  1852. } else {
  1853. return AVERROR(EIO);
  1854. }
  1855. }
  1856. rt->bytes_read += ret;
  1857. if (rt->bytes_read > rt->last_bytes_read + rt->client_report_size) {
  1858. av_log(s, AV_LOG_DEBUG, "Sending bytes read report\n");
  1859. if ((ret = gen_bytes_read(s, rt, rpkt.timestamp + 1)) < 0)
  1860. return ret;
  1861. rt->last_bytes_read = rt->bytes_read;
  1862. }
  1863. ret = rtmp_parse_result(s, rt, &rpkt);
  1864. if (ret < 0) {//serious error in current packet
  1865. ff_rtmp_packet_destroy(&rpkt);
  1866. return ret;
  1867. }
  1868. if (rt->do_reconnect && for_header) {
  1869. ff_rtmp_packet_destroy(&rpkt);
  1870. return 0;
  1871. }
  1872. if (rt->state == STATE_STOPPED) {
  1873. ff_rtmp_packet_destroy(&rpkt);
  1874. return AVERROR_EOF;
  1875. }
  1876. if (for_header && (rt->state == STATE_PLAYING ||
  1877. rt->state == STATE_PUBLISHING ||
  1878. rt->state == STATE_RECEIVING)) {
  1879. ff_rtmp_packet_destroy(&rpkt);
  1880. return 0;
  1881. }
  1882. if (!rpkt.data_size || !rt->is_input) {
  1883. ff_rtmp_packet_destroy(&rpkt);
  1884. continue;
  1885. }
  1886. if (rpkt.type == RTMP_PT_VIDEO || rpkt.type == RTMP_PT_AUDIO ||
  1887. (rpkt.type == RTMP_PT_NOTIFY && !memcmp("\002\000\012onMetaData", rpkt.data, 13))) {
  1888. ts = rpkt.timestamp;
  1889. // generate packet header and put data into buffer for FLV demuxer
  1890. rt->flv_off = 0;
  1891. rt->flv_size = rpkt.data_size + 15;
  1892. rt->flv_data = p = av_realloc(rt->flv_data, rt->flv_size);
  1893. bytestream_put_byte(&p, rpkt.type);
  1894. bytestream_put_be24(&p, rpkt.data_size);
  1895. bytestream_put_be24(&p, ts);
  1896. bytestream_put_byte(&p, ts >> 24);
  1897. bytestream_put_be24(&p, 0);
  1898. bytestream_put_buffer(&p, rpkt.data, rpkt.data_size);
  1899. bytestream_put_be32(&p, 0);
  1900. ff_rtmp_packet_destroy(&rpkt);
  1901. return 0;
  1902. } else if (rpkt.type == RTMP_PT_NOTIFY) {
  1903. ret = handle_notify(s, &rpkt);
  1904. ff_rtmp_packet_destroy(&rpkt);
  1905. if (ret) {
  1906. av_log(s, AV_LOG_ERROR, "Handle notify error\n");
  1907. return ret;
  1908. }
  1909. return 0;
  1910. } else if (rpkt.type == RTMP_PT_METADATA) {
  1911. // we got raw FLV data, make it available for FLV demuxer
  1912. rt->flv_off = 0;
  1913. rt->flv_size = rpkt.data_size;
  1914. rt->flv_data = av_realloc(rt->flv_data, rt->flv_size);
  1915. /* rewrite timestamps */
  1916. next = rpkt.data;
  1917. ts = rpkt.timestamp;
  1918. while (next - rpkt.data < rpkt.data_size - 11) {
  1919. next++;
  1920. data_size = bytestream_get_be24(&next);
  1921. p=next;
  1922. cts = bytestream_get_be24(&next);
  1923. cts |= bytestream_get_byte(&next) << 24;
  1924. if (pts==0)
  1925. pts=cts;
  1926. ts += cts - pts;
  1927. pts = cts;
  1928. bytestream_put_be24(&p, ts);
  1929. bytestream_put_byte(&p, ts >> 24);
  1930. next += data_size + 3 + 4;
  1931. }
  1932. memcpy(rt->flv_data, rpkt.data, rpkt.data_size);
  1933. ff_rtmp_packet_destroy(&rpkt);
  1934. return 0;
  1935. }
  1936. ff_rtmp_packet_destroy(&rpkt);
  1937. }
  1938. }
  1939. static int rtmp_close(URLContext *h)
  1940. {
  1941. RTMPContext *rt = h->priv_data;
  1942. int ret = 0;
  1943. if (!rt->is_input) {
  1944. rt->flv_data = NULL;
  1945. if (rt->out_pkt.data_size)
  1946. ff_rtmp_packet_destroy(&rt->out_pkt);
  1947. if (rt->state > STATE_FCPUBLISH)
  1948. ret = gen_fcunpublish_stream(h, rt);
  1949. }
  1950. if (rt->state > STATE_HANDSHAKED)
  1951. ret = gen_delete_stream(h, rt);
  1952. free_tracked_methods(rt);
  1953. av_freep(&rt->flv_data);
  1954. ffurl_close(rt->stream);
  1955. return ret;
  1956. }
  1957. /**
  1958. * Open RTMP connection and verify that the stream can be played.
  1959. *
  1960. * URL syntax: rtmp://server[:port][/app][/playpath]
  1961. * where 'app' is first one or two directories in the path
  1962. * (e.g. /ondemand/, /flash/live/, etc.)
  1963. * and 'playpath' is a file name (the rest of the path,
  1964. * may be prefixed with "mp4:")
  1965. */
  1966. static int rtmp_open(URLContext *s, const char *uri, int flags)
  1967. {
  1968. RTMPContext *rt = s->priv_data;
  1969. char proto[8], hostname[256], path[1024], auth[100], *fname;
  1970. char *old_app;
  1971. uint8_t buf[2048];
  1972. int port;
  1973. AVDictionary *opts = NULL;
  1974. int ret;
  1975. if (rt->listen_timeout > 0)
  1976. rt->listen = 1;
  1977. rt->is_input = !(flags & AVIO_FLAG_WRITE);
  1978. av_url_split(proto, sizeof(proto), auth, sizeof(auth),
  1979. hostname, sizeof(hostname), &port,
  1980. path, sizeof(path), s->filename);
  1981. if (auth[0]) {
  1982. char *ptr = strchr(auth, ':');
  1983. if (ptr) {
  1984. *ptr = '\0';
  1985. av_strlcpy(rt->username, auth, sizeof(rt->username));
  1986. av_strlcpy(rt->password, ptr + 1, sizeof(rt->password));
  1987. }
  1988. }
  1989. if (rt->listen && strcmp(proto, "rtmp")) {
  1990. av_log(s, AV_LOG_ERROR, "rtmp_listen not available for %s\n",
  1991. proto);
  1992. return AVERROR(EINVAL);
  1993. }
  1994. if (!strcmp(proto, "rtmpt") || !strcmp(proto, "rtmpts")) {
  1995. if (!strcmp(proto, "rtmpts"))
  1996. av_dict_set(&opts, "ffrtmphttp_tls", "1", 1);
  1997. /* open the http tunneling connection */
  1998. ff_url_join(buf, sizeof(buf), "ffrtmphttp", NULL, hostname, port, NULL);
  1999. } else if (!strcmp(proto, "rtmps")) {
  2000. /* open the tls connection */
  2001. if (port < 0)
  2002. port = RTMPS_DEFAULT_PORT;
  2003. ff_url_join(buf, sizeof(buf), "tls", NULL, hostname, port, NULL);
  2004. } else if (!strcmp(proto, "rtmpe") || (!strcmp(proto, "rtmpte"))) {
  2005. if (!strcmp(proto, "rtmpte"))
  2006. av_dict_set(&opts, "ffrtmpcrypt_tunneling", "1", 1);
  2007. /* open the encrypted connection */
  2008. ff_url_join(buf, sizeof(buf), "ffrtmpcrypt", NULL, hostname, port, NULL);
  2009. rt->encrypted = 1;
  2010. } else {
  2011. /* open the tcp connection */
  2012. if (port < 0)
  2013. port = RTMP_DEFAULT_PORT;
  2014. if (rt->listen)
  2015. ff_url_join(buf, sizeof(buf), "tcp", NULL, hostname, port,
  2016. "?listen&listen_timeout=%d",
  2017. rt->listen_timeout * 1000);
  2018. else
  2019. ff_url_join(buf, sizeof(buf), "tcp", NULL, hostname, port, NULL);
  2020. }
  2021. reconnect:
  2022. if ((ret = ffurl_open(&rt->stream, buf, AVIO_FLAG_READ_WRITE,
  2023. &s->interrupt_callback, &opts)) < 0) {
  2024. av_log(s , AV_LOG_ERROR, "Cannot open connection %s\n", buf);
  2025. goto fail;
  2026. }
  2027. if (rt->swfverify) {
  2028. if ((ret = rtmp_calc_swfhash(s)) < 0)
  2029. goto fail;
  2030. }
  2031. rt->state = STATE_START;
  2032. if (!rt->listen && (ret = rtmp_handshake(s, rt)) < 0)
  2033. goto fail;
  2034. if (rt->listen && (ret = rtmp_server_handshake(s, rt)) < 0)
  2035. goto fail;
  2036. rt->out_chunk_size = 128;
  2037. rt->in_chunk_size = 128; // Probably overwritten later
  2038. rt->state = STATE_HANDSHAKED;
  2039. // Keep the application name when it has been defined by the user.
  2040. old_app = rt->app;
  2041. rt->app = av_malloc(APP_MAX_LENGTH);
  2042. if (!rt->app) {
  2043. ret = AVERROR(ENOMEM);
  2044. goto fail;
  2045. }
  2046. //extract "app" part from path
  2047. if (!strncmp(path, "/ondemand/", 10)) {
  2048. fname = path + 10;
  2049. memcpy(rt->app, "ondemand", 9);
  2050. } else {
  2051. char *next = *path ? path + 1 : path;
  2052. char *p = strchr(next, '/');
  2053. if (!p) {
  2054. fname = next;
  2055. rt->app[0] = '\0';
  2056. } else {
  2057. // make sure we do not mismatch a playpath for an application instance
  2058. char *c = strchr(p + 1, ':');
  2059. fname = strchr(p + 1, '/');
  2060. if (!fname || (c && c < fname)) {
  2061. fname = p + 1;
  2062. av_strlcpy(rt->app, path + 1, p - path);
  2063. } else {
  2064. fname++;
  2065. av_strlcpy(rt->app, path + 1, fname - path - 1);
  2066. }
  2067. }
  2068. }
  2069. if (old_app) {
  2070. // The name of application has been defined by the user, override it.
  2071. av_free(rt->app);
  2072. rt->app = old_app;
  2073. }
  2074. if (!rt->playpath) {
  2075. int len = strlen(fname);
  2076. rt->playpath = av_malloc(PLAYPATH_MAX_LENGTH);
  2077. if (!rt->playpath) {
  2078. ret = AVERROR(ENOMEM);
  2079. goto fail;
  2080. }
  2081. if (!strchr(fname, ':') && len >= 4 &&
  2082. (!strcmp(fname + len - 4, ".f4v") ||
  2083. !strcmp(fname + len - 4, ".mp4"))) {
  2084. memcpy(rt->playpath, "mp4:", 5);
  2085. } else if (len >= 4 && !strcmp(fname + len - 4, ".flv")) {
  2086. fname[len - 4] = '\0';
  2087. } else {
  2088. rt->playpath[0] = 0;
  2089. }
  2090. av_strlcat(rt->playpath, fname, PLAYPATH_MAX_LENGTH);
  2091. }
  2092. if (!rt->tcurl) {
  2093. rt->tcurl = av_malloc(TCURL_MAX_LENGTH);
  2094. if (!rt->tcurl) {
  2095. ret = AVERROR(ENOMEM);
  2096. goto fail;
  2097. }
  2098. ff_url_join(rt->tcurl, TCURL_MAX_LENGTH, proto, NULL, hostname,
  2099. port, "/%s", rt->app);
  2100. }
  2101. if (!rt->flashver) {
  2102. rt->flashver = av_malloc(FLASHVER_MAX_LENGTH);
  2103. if (!rt->flashver) {
  2104. ret = AVERROR(ENOMEM);
  2105. goto fail;
  2106. }
  2107. if (rt->is_input) {
  2108. snprintf(rt->flashver, FLASHVER_MAX_LENGTH, "%s %d,%d,%d,%d",
  2109. RTMP_CLIENT_PLATFORM, RTMP_CLIENT_VER1, RTMP_CLIENT_VER2,
  2110. RTMP_CLIENT_VER3, RTMP_CLIENT_VER4);
  2111. } else {
  2112. snprintf(rt->flashver, FLASHVER_MAX_LENGTH,
  2113. "FMLE/3.0 (compatible; %s)", LIBAVFORMAT_IDENT);
  2114. }
  2115. }
  2116. rt->client_report_size = 1048576;
  2117. rt->bytes_read = 0;
  2118. rt->last_bytes_read = 0;
  2119. rt->server_bw = 2500000;
  2120. av_log(s, AV_LOG_DEBUG, "Proto = %s, path = %s, app = %s, fname = %s\n",
  2121. proto, path, rt->app, rt->playpath);
  2122. if (!rt->listen) {
  2123. if ((ret = gen_connect(s, rt)) < 0)
  2124. goto fail;
  2125. } else {
  2126. if (read_connect(s, s->priv_data) < 0)
  2127. goto fail;
  2128. rt->is_input = 1;
  2129. }
  2130. do {
  2131. ret = get_packet(s, 1);
  2132. } while (ret == EAGAIN);
  2133. if (ret < 0)
  2134. goto fail;
  2135. if (rt->do_reconnect) {
  2136. ffurl_close(rt->stream);
  2137. rt->stream = NULL;
  2138. rt->do_reconnect = 0;
  2139. rt->nb_invokes = 0;
  2140. memset(rt->prev_pkt, 0, sizeof(rt->prev_pkt));
  2141. free_tracked_methods(rt);
  2142. goto reconnect;
  2143. }
  2144. if (rt->is_input) {
  2145. // generate FLV header for demuxer
  2146. rt->flv_size = 13;
  2147. rt->flv_data = av_realloc(rt->flv_data, rt->flv_size);
  2148. rt->flv_off = 0;
  2149. memcpy(rt->flv_data, "FLV\1\5\0\0\0\011\0\0\0\0", rt->flv_size);
  2150. } else {
  2151. rt->flv_size = 0;
  2152. rt->flv_data = NULL;
  2153. rt->flv_off = 0;
  2154. rt->skip_bytes = 13;
  2155. }
  2156. s->max_packet_size = rt->stream->max_packet_size;
  2157. s->is_streamed = 1;
  2158. return 0;
  2159. fail:
  2160. av_dict_free(&opts);
  2161. rtmp_close(s);
  2162. return ret;
  2163. }
  2164. static int rtmp_read(URLContext *s, uint8_t *buf, int size)
  2165. {
  2166. RTMPContext *rt = s->priv_data;
  2167. int orig_size = size;
  2168. int ret;
  2169. while (size > 0) {
  2170. int data_left = rt->flv_size - rt->flv_off;
  2171. if (data_left >= size) {
  2172. memcpy(buf, rt->flv_data + rt->flv_off, size);
  2173. rt->flv_off += size;
  2174. return orig_size;
  2175. }
  2176. if (data_left > 0) {
  2177. memcpy(buf, rt->flv_data + rt->flv_off, data_left);
  2178. buf += data_left;
  2179. size -= data_left;
  2180. rt->flv_off = rt->flv_size;
  2181. return data_left;
  2182. }
  2183. if ((ret = get_packet(s, 0)) < 0)
  2184. return ret;
  2185. }
  2186. return orig_size;
  2187. }
  2188. static int rtmp_write(URLContext *s, const uint8_t *buf, int size)
  2189. {
  2190. RTMPContext *rt = s->priv_data;
  2191. int size_temp = size;
  2192. int pktsize, pkttype;
  2193. uint32_t ts;
  2194. const uint8_t *buf_temp = buf;
  2195. uint8_t c;
  2196. int ret;
  2197. do {
  2198. if (rt->skip_bytes) {
  2199. int skip = FFMIN(rt->skip_bytes, size_temp);
  2200. buf_temp += skip;
  2201. size_temp -= skip;
  2202. rt->skip_bytes -= skip;
  2203. continue;
  2204. }
  2205. if (rt->flv_header_bytes < 11) {
  2206. const uint8_t *header = rt->flv_header;
  2207. int copy = FFMIN(11 - rt->flv_header_bytes, size_temp);
  2208. bytestream_get_buffer(&buf_temp, rt->flv_header + rt->flv_header_bytes, copy);
  2209. rt->flv_header_bytes += copy;
  2210. size_temp -= copy;
  2211. if (rt->flv_header_bytes < 11)
  2212. break;
  2213. pkttype = bytestream_get_byte(&header);
  2214. pktsize = bytestream_get_be24(&header);
  2215. ts = bytestream_get_be24(&header);
  2216. ts |= bytestream_get_byte(&header) << 24;
  2217. bytestream_get_be24(&header);
  2218. rt->flv_size = pktsize;
  2219. //force 12bytes header
  2220. if (((pkttype == RTMP_PT_VIDEO || pkttype == RTMP_PT_AUDIO) && ts == 0) ||
  2221. pkttype == RTMP_PT_NOTIFY) {
  2222. if (pkttype == RTMP_PT_NOTIFY)
  2223. pktsize += 16;
  2224. rt->prev_pkt[1][RTMP_SOURCE_CHANNEL].channel_id = 0;
  2225. }
  2226. //this can be a big packet, it's better to send it right here
  2227. if ((ret = ff_rtmp_packet_create(&rt->out_pkt, RTMP_SOURCE_CHANNEL,
  2228. pkttype, ts, pktsize)) < 0)
  2229. return ret;
  2230. rt->out_pkt.extra = rt->main_channel_id;
  2231. rt->flv_data = rt->out_pkt.data;
  2232. if (pkttype == RTMP_PT_NOTIFY)
  2233. ff_amf_write_string(&rt->flv_data, "@setDataFrame");
  2234. }
  2235. if (rt->flv_size - rt->flv_off > size_temp) {
  2236. bytestream_get_buffer(&buf_temp, rt->flv_data + rt->flv_off, size_temp);
  2237. rt->flv_off += size_temp;
  2238. size_temp = 0;
  2239. } else {
  2240. bytestream_get_buffer(&buf_temp, rt->flv_data + rt->flv_off, rt->flv_size - rt->flv_off);
  2241. size_temp -= rt->flv_size - rt->flv_off;
  2242. rt->flv_off += rt->flv_size - rt->flv_off;
  2243. }
  2244. if (rt->flv_off == rt->flv_size) {
  2245. rt->skip_bytes = 4;
  2246. if ((ret = rtmp_send_packet(rt, &rt->out_pkt, 0)) < 0)
  2247. return ret;
  2248. rt->flv_size = 0;
  2249. rt->flv_off = 0;
  2250. rt->flv_header_bytes = 0;
  2251. rt->flv_nb_packets++;
  2252. }
  2253. } while (buf_temp - buf < size);
  2254. if (rt->flv_nb_packets < rt->flush_interval)
  2255. return size;
  2256. rt->flv_nb_packets = 0;
  2257. /* set stream into nonblocking mode */
  2258. rt->stream->flags |= AVIO_FLAG_NONBLOCK;
  2259. /* try to read one byte from the stream */
  2260. ret = ffurl_read(rt->stream, &c, 1);
  2261. /* switch the stream back into blocking mode */
  2262. rt->stream->flags &= ~AVIO_FLAG_NONBLOCK;
  2263. if (ret == AVERROR(EAGAIN)) {
  2264. /* no incoming data to handle */
  2265. return size;
  2266. } else if (ret < 0) {
  2267. return ret;
  2268. } else if (ret == 1) {
  2269. RTMPPacket rpkt = { 0 };
  2270. if ((ret = ff_rtmp_packet_read_internal(rt->stream, &rpkt,
  2271. rt->in_chunk_size,
  2272. rt->prev_pkt[0], c)) <= 0)
  2273. return ret;
  2274. if ((ret = rtmp_parse_result(s, rt, &rpkt)) < 0)
  2275. return ret;
  2276. ff_rtmp_packet_destroy(&rpkt);
  2277. }
  2278. return size;
  2279. }
  2280. #define OFFSET(x) offsetof(RTMPContext, x)
  2281. #define DEC AV_OPT_FLAG_DECODING_PARAM
  2282. #define ENC AV_OPT_FLAG_ENCODING_PARAM
  2283. static const AVOption rtmp_options[] = {
  2284. {"rtmp_app", "Name of application to connect to on the RTMP server", OFFSET(app), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2285. {"rtmp_buffer", "Set buffer time in milliseconds. The default is 3000.", OFFSET(client_buffer_time), AV_OPT_TYPE_INT, {.i64 = 3000}, 0, INT_MAX, DEC|ENC},
  2286. {"rtmp_conn", "Append arbitrary AMF data to the Connect message", OFFSET(conn), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2287. {"rtmp_flashver", "Version of the Flash plugin used to run the SWF player.", OFFSET(flashver), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2288. {"rtmp_flush_interval", "Number of packets flushed in the same request (RTMPT only).", OFFSET(flush_interval), AV_OPT_TYPE_INT, {.i64 = 10}, 0, INT_MAX, ENC},
  2289. {"rtmp_live", "Specify that the media is a live stream.", OFFSET(live), AV_OPT_TYPE_INT, {.i64 = -2}, INT_MIN, INT_MAX, DEC, "rtmp_live"},
  2290. {"any", "both", 0, AV_OPT_TYPE_CONST, {.i64 = -2}, 0, 0, DEC, "rtmp_live"},
  2291. {"live", "live stream", 0, AV_OPT_TYPE_CONST, {.i64 = -1}, 0, 0, DEC, "rtmp_live"},
  2292. {"recorded", "recorded stream", 0, AV_OPT_TYPE_CONST, {.i64 = 0}, 0, 0, DEC, "rtmp_live"},
  2293. {"rtmp_pageurl", "URL of the web page in which the media was embedded. By default no value will be sent.", OFFSET(pageurl), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC},
  2294. {"rtmp_playpath", "Stream identifier to play or to publish", OFFSET(playpath), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2295. {"rtmp_subscribe", "Name of live stream to subscribe to. Defaults to rtmp_playpath.", OFFSET(subscribe), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC},
  2296. {"rtmp_swfhash", "SHA256 hash of the decompressed SWF file (32 bytes).", OFFSET(swfhash), AV_OPT_TYPE_BINARY, .flags = DEC},
  2297. {"rtmp_swfsize", "Size of the decompressed SWF file, required for SWFVerification.", OFFSET(swfsize), AV_OPT_TYPE_INT, {.i64 = 0}, 0, INT_MAX, DEC},
  2298. {"rtmp_swfurl", "URL of the SWF player. By default no value will be sent", OFFSET(swfurl), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2299. {"rtmp_swfverify", "URL to player swf file, compute hash/size automatically.", OFFSET(swfverify), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC},
  2300. {"rtmp_tcurl", "URL of the target stream. Defaults to proto://host[:port]/app.", OFFSET(tcurl), AV_OPT_TYPE_STRING, {.str = NULL }, 0, 0, DEC|ENC},
  2301. {"rtmp_listen", "Listen for incoming rtmp connections", OFFSET(listen), AV_OPT_TYPE_INT, {.i64 = 0}, INT_MIN, INT_MAX, DEC, "rtmp_listen" },
  2302. {"timeout", "Maximum timeout (in seconds) to wait for incoming connections. -1 is infinite. Implies -rtmp_listen 1", OFFSET(listen_timeout), AV_OPT_TYPE_INT, {.i64 = -1}, INT_MIN, INT_MAX, DEC, "rtmp_listen" },
  2303. { NULL },
  2304. };
  2305. #define RTMP_PROTOCOL(flavor) \
  2306. static const AVClass flavor##_class = { \
  2307. .class_name = #flavor, \
  2308. .item_name = av_default_item_name, \
  2309. .option = rtmp_options, \
  2310. .version = LIBAVUTIL_VERSION_INT, \
  2311. }; \
  2312. \
  2313. URLProtocol ff_##flavor##_protocol = { \
  2314. .name = #flavor, \
  2315. .url_open = rtmp_open, \
  2316. .url_read = rtmp_read, \
  2317. .url_write = rtmp_write, \
  2318. .url_close = rtmp_close, \
  2319. .priv_data_size = sizeof(RTMPContext), \
  2320. .flags = URL_PROTOCOL_FLAG_NETWORK, \
  2321. .priv_data_class= &flavor##_class, \
  2322. };
  2323. RTMP_PROTOCOL(rtmp)
  2324. RTMP_PROTOCOL(rtmpe)
  2325. RTMP_PROTOCOL(rtmps)
  2326. RTMP_PROTOCOL(rtmpt)
  2327. RTMP_PROTOCOL(rtmpte)
  2328. RTMP_PROTOCOL(rtmpts)