You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

505 lines
15KB

  1. /*
  2. * Sony OpenMG (OMA) demuxer
  3. *
  4. * Copyright (c) 2008, 2013 Maxim Poliakovski
  5. * 2008 Benjamin Larsson
  6. * 2011 David Goldwich
  7. *
  8. * This file is part of Libav.
  9. *
  10. * Libav is free software; you can redistribute it and/or
  11. * modify it under the terms of the GNU Lesser General Public
  12. * License as published by the Free Software Foundation; either
  13. * version 2.1 of the License, or (at your option) any later version.
  14. *
  15. * Libav is distributed in the hope that it will be useful,
  16. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
  18. * Lesser General Public License for more details.
  19. *
  20. * You should have received a copy of the GNU Lesser General Public
  21. * License along with Libav; if not, write to the Free Software
  22. * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
  23. */
  24. /**
  25. * @file
  26. * This is a demuxer for Sony OpenMG Music files
  27. *
  28. * Known file extensions: ".oma", "aa3"
  29. * The format of such files consists of three parts:
  30. * - "ea3" header carrying overall info and metadata. Except for starting with
  31. * "ea" instead of "ID", it's an ID3v2 header.
  32. * - "EA3" header is a Sony-specific header containing information about
  33. * the OpenMG file: codec type (usually ATRAC, can also be MP3 or WMA),
  34. * codec specific info (packet size, sample rate, channels and so on)
  35. * and DRM related info (file encryption, content id).
  36. * - Sound data organized in packets follow the EA3 header
  37. * (can be encrypted using the Sony DRM!).
  38. *
  39. * Supported decoders: ATRAC3, ATRAC3+, MP3, LPCM
  40. */
  41. #include "libavutil/channel_layout.h"
  42. #include "avformat.h"
  43. #include "internal.h"
  44. #include "libavutil/intreadwrite.h"
  45. #include "libavutil/des.h"
  46. #include "oma.h"
  47. #include "pcm.h"
  48. #include "id3v2.h"
  49. static const uint64_t leaf_table[] = {
  50. 0xd79e8283acea4620, 0x7a9762f445afd0d8,
  51. 0x354d60a60b8c79f1, 0x584e1cde00b07aee,
  52. 0x1573cd93da7df623, 0x47f98d79620dd535
  53. };
  54. typedef struct OMAContext {
  55. uint64_t content_start;
  56. int encrypted;
  57. uint16_t k_size;
  58. uint16_t e_size;
  59. uint16_t i_size;
  60. uint16_t s_size;
  61. uint32_t rid;
  62. uint8_t r_val[24];
  63. uint8_t n_val[24];
  64. uint8_t m_val[8];
  65. uint8_t s_val[8];
  66. uint8_t sm_val[8];
  67. uint8_t e_val[8];
  68. uint8_t iv[8];
  69. struct AVDES av_des;
  70. } OMAContext;
  71. static void hex_log(AVFormatContext *s, int level,
  72. const char *name, const uint8_t *value, int len)
  73. {
  74. char buf[33];
  75. len = FFMIN(len, 16);
  76. if (av_log_get_level() < level)
  77. return;
  78. ff_data_to_hex(buf, value, len, 1);
  79. buf[len << 1] = '\0';
  80. av_log(s, level, "%s: %s\n", name, buf);
  81. }
  82. static int kset(AVFormatContext *s, const uint8_t *r_val, const uint8_t *n_val,
  83. int len)
  84. {
  85. OMAContext *oc = s->priv_data;
  86. if (!r_val && !n_val)
  87. return -1;
  88. len = FFMIN(len, 16);
  89. /* use first 64 bits in the third round again */
  90. if (r_val) {
  91. if (r_val != oc->r_val) {
  92. memset(oc->r_val, 0, 24);
  93. memcpy(oc->r_val, r_val, len);
  94. }
  95. memcpy(&oc->r_val[16], r_val, 8);
  96. }
  97. if (n_val) {
  98. if (n_val != oc->n_val) {
  99. memset(oc->n_val, 0, 24);
  100. memcpy(oc->n_val, n_val, len);
  101. }
  102. memcpy(&oc->n_val[16], n_val, 8);
  103. }
  104. return 0;
  105. }
  106. #define OMA_RPROBE_M_VAL 48 + 1
  107. static int rprobe(AVFormatContext *s, uint8_t *enc_header, unsigned size,
  108. const uint8_t *r_val)
  109. {
  110. OMAContext *oc = s->priv_data;
  111. unsigned int pos;
  112. struct AVDES av_des;
  113. if (!enc_header || !r_val ||
  114. size < OMA_ENC_HEADER_SIZE + oc->k_size + oc->e_size + oc->i_size ||
  115. size < OMA_RPROBE_M_VAL)
  116. return -1;
  117. /* m_val */
  118. av_des_init(&av_des, r_val, 192, 1);
  119. av_des_crypt(&av_des, oc->m_val, &enc_header[48], 1, NULL, 1);
  120. /* s_val */
  121. av_des_init(&av_des, oc->m_val, 64, 0);
  122. av_des_crypt(&av_des, oc->s_val, NULL, 1, NULL, 0);
  123. /* sm_val */
  124. pos = OMA_ENC_HEADER_SIZE + oc->k_size + oc->e_size;
  125. av_des_init(&av_des, oc->s_val, 64, 0);
  126. av_des_mac(&av_des, oc->sm_val, &enc_header[pos], (oc->i_size >> 3));
  127. pos += oc->i_size;
  128. return memcmp(&enc_header[pos], oc->sm_val, 8) ? -1 : 0;
  129. }
  130. static int nprobe(AVFormatContext *s, uint8_t *enc_header, unsigned size,
  131. const uint8_t *n_val)
  132. {
  133. OMAContext *oc = s->priv_data;
  134. uint64_t pos;
  135. uint32_t taglen, datalen;
  136. struct AVDES av_des;
  137. if (!enc_header || !n_val ||
  138. size < OMA_ENC_HEADER_SIZE + oc->k_size + 4)
  139. return -1;
  140. pos = OMA_ENC_HEADER_SIZE + oc->k_size;
  141. if (!memcmp(&enc_header[pos], "EKB ", 4))
  142. pos += 32;
  143. if (size < pos + 44)
  144. return -1;
  145. if (AV_RB32(&enc_header[pos]) != oc->rid)
  146. av_log(s, AV_LOG_DEBUG, "Mismatching RID\n");
  147. taglen = AV_RB32(&enc_header[pos + 32]);
  148. datalen = AV_RB32(&enc_header[pos + 36]) >> 4;
  149. pos += 44;
  150. if (size - pos < taglen)
  151. return -1;
  152. pos += taglen;
  153. if (datalen << 4 > size - pos)
  154. return -1;
  155. av_des_init(&av_des, n_val, 192, 1);
  156. while (datalen-- > 0) {
  157. av_des_crypt(&av_des, oc->r_val, &enc_header[pos], 2, NULL, 1);
  158. kset(s, oc->r_val, NULL, 16);
  159. if (!rprobe(s, enc_header, size, oc->r_val))
  160. return 0;
  161. pos += 16;
  162. }
  163. return -1;
  164. }
  165. static int decrypt_init(AVFormatContext *s, ID3v2ExtraMeta *em, uint8_t *header)
  166. {
  167. OMAContext *oc = s->priv_data;
  168. ID3v2ExtraMetaGEOB *geob = NULL;
  169. uint8_t *gdata;
  170. oc->encrypted = 1;
  171. av_log(s, AV_LOG_INFO, "File is encrypted\n");
  172. /* find GEOB metadata */
  173. while (em) {
  174. if (!strcmp(em->tag, "GEOB") &&
  175. (geob = em->data) &&
  176. (!strcmp(geob->description, "OMG_LSI") ||
  177. !strcmp(geob->description, "OMG_BKLSI"))) {
  178. break;
  179. }
  180. em = em->next;
  181. }
  182. if (!em) {
  183. av_log(s, AV_LOG_ERROR, "No encryption header found\n");
  184. return AVERROR_INVALIDDATA;
  185. }
  186. if (geob->datasize < 64) {
  187. av_log(s, AV_LOG_ERROR,
  188. "Invalid GEOB data size: %u\n", geob->datasize);
  189. return AVERROR_INVALIDDATA;
  190. }
  191. gdata = geob->data;
  192. if (AV_RB16(gdata) != 1)
  193. av_log(s, AV_LOG_WARNING, "Unknown version in encryption header\n");
  194. oc->k_size = AV_RB16(&gdata[2]);
  195. oc->e_size = AV_RB16(&gdata[4]);
  196. oc->i_size = AV_RB16(&gdata[6]);
  197. oc->s_size = AV_RB16(&gdata[8]);
  198. if (memcmp(&gdata[OMA_ENC_HEADER_SIZE], "KEYRING ", 12)) {
  199. av_log(s, AV_LOG_ERROR, "Invalid encryption header\n");
  200. return AVERROR_INVALIDDATA;
  201. }
  202. if (OMA_ENC_HEADER_SIZE + oc->k_size + oc->e_size + oc->i_size + 8 > geob->datasize ||
  203. OMA_ENC_HEADER_SIZE + 48 > geob->datasize) {
  204. av_log(s, AV_LOG_ERROR, "Too little GEOB data\n");
  205. return AVERROR_INVALIDDATA;
  206. }
  207. oc->rid = AV_RB32(&gdata[OMA_ENC_HEADER_SIZE + 28]);
  208. av_log(s, AV_LOG_DEBUG, "RID: %.8x\n", oc->rid);
  209. memcpy(oc->iv, &header[0x58], 8);
  210. hex_log(s, AV_LOG_DEBUG, "IV", oc->iv, 8);
  211. hex_log(s, AV_LOG_DEBUG, "CBC-MAC",
  212. &gdata[OMA_ENC_HEADER_SIZE + oc->k_size + oc->e_size + oc->i_size],
  213. 8);
  214. if (s->keylen > 0) {
  215. kset(s, s->key, s->key, s->keylen);
  216. }
  217. if (!memcmp(oc->r_val, (const uint8_t[8]){0}, 8) ||
  218. rprobe(s, gdata, geob->datasize, oc->r_val) < 0 &&
  219. nprobe(s, gdata, geob->datasize, oc->n_val) < 0) {
  220. int i;
  221. for (i = 0; i < FF_ARRAY_ELEMS(leaf_table); i += 2) {
  222. uint8_t buf[16];
  223. AV_WL64(buf, leaf_table[i]);
  224. AV_WL64(&buf[8], leaf_table[i + 1]);
  225. kset(s, buf, buf, 16);
  226. if (!rprobe(s, gdata, geob->datasize, oc->r_val) ||
  227. !nprobe(s, gdata, geob->datasize, oc->n_val))
  228. break;
  229. }
  230. if (i >= FF_ARRAY_ELEMS(leaf_table)) {
  231. av_log(s, AV_LOG_ERROR, "Invalid key\n");
  232. return AVERROR_INVALIDDATA;
  233. }
  234. }
  235. /* e_val */
  236. av_des_init(&oc->av_des, oc->m_val, 64, 0);
  237. av_des_crypt(&oc->av_des, oc->e_val,
  238. &gdata[OMA_ENC_HEADER_SIZE + 40], 1, NULL, 0);
  239. hex_log(s, AV_LOG_DEBUG, "EK", oc->e_val, 8);
  240. /* init e_val */
  241. av_des_init(&oc->av_des, oc->e_val, 64, 1);
  242. return 0;
  243. }
  244. static int oma_read_header(AVFormatContext *s)
  245. {
  246. int ret, framesize, jsflag, samplerate;
  247. uint32_t codec_params, channel_id;
  248. int16_t eid;
  249. uint8_t buf[EA3_HEADER_SIZE];
  250. uint8_t *edata;
  251. AVStream *st;
  252. ID3v2ExtraMeta *extra_meta = NULL;
  253. OMAContext *oc = s->priv_data;
  254. ff_id3v2_read(s, ID3v2_EA3_MAGIC, &extra_meta);
  255. ret = avio_read(s->pb, buf, EA3_HEADER_SIZE);
  256. if (ret < EA3_HEADER_SIZE)
  257. return -1;
  258. if (memcmp(buf, ((const uint8_t[]){'E', 'A', '3'}), 3) ||
  259. buf[4] != 0 || buf[5] != EA3_HEADER_SIZE) {
  260. av_log(s, AV_LOG_ERROR, "Couldn't find the EA3 header !\n");
  261. return AVERROR_INVALIDDATA;
  262. }
  263. oc->content_start = avio_tell(s->pb);
  264. /* encrypted file */
  265. eid = AV_RB16(&buf[6]);
  266. if (eid != -1 && eid != -128 && decrypt_init(s, extra_meta, buf) < 0) {
  267. ff_id3v2_free_extra_meta(&extra_meta);
  268. return -1;
  269. }
  270. ff_id3v2_free_extra_meta(&extra_meta);
  271. codec_params = AV_RB24(&buf[33]);
  272. st = avformat_new_stream(s, NULL);
  273. if (!st)
  274. return AVERROR(ENOMEM);
  275. st->start_time = 0;
  276. st->codec->codec_type = AVMEDIA_TYPE_AUDIO;
  277. st->codec->codec_tag = buf[32];
  278. st->codec->codec_id = ff_codec_get_id(ff_oma_codec_tags,
  279. st->codec->codec_tag);
  280. switch (buf[32]) {
  281. case OMA_CODECID_ATRAC3:
  282. samplerate = ff_oma_srate_tab[(codec_params >> 13) & 7] * 100;
  283. if (!samplerate) {
  284. av_log(s, AV_LOG_ERROR, "Unsupported sample rate\n");
  285. return AVERROR_INVALIDDATA;
  286. }
  287. if (samplerate != 44100)
  288. avpriv_request_sample(s, "Sample rate %d", samplerate);
  289. framesize = (codec_params & 0x3FF) * 8;
  290. /* get stereo coding mode, 1 for joint-stereo */
  291. jsflag = (codec_params >> 17) & 1;
  292. st->codec->channels = 2;
  293. st->codec->channel_layout = AV_CH_LAYOUT_STEREO;
  294. st->codec->sample_rate = samplerate;
  295. st->codec->bit_rate = st->codec->sample_rate * framesize * 8 / 1024;
  296. /* fake the ATRAC3 extradata
  297. * (wav format, makes stream copy to wav work) */
  298. st->codec->extradata_size = 14;
  299. edata = av_mallocz(14 + FF_INPUT_BUFFER_PADDING_SIZE);
  300. if (!edata)
  301. return AVERROR(ENOMEM);
  302. st->codec->extradata = edata;
  303. AV_WL16(&edata[0], 1); // always 1
  304. AV_WL32(&edata[2], samplerate); // samples rate
  305. AV_WL16(&edata[6], jsflag); // coding mode
  306. AV_WL16(&edata[8], jsflag); // coding mode
  307. AV_WL16(&edata[10], 1); // always 1
  308. // AV_WL16(&edata[12], 0); // always 0
  309. avpriv_set_pts_info(st, 64, 1, st->codec->sample_rate);
  310. break;
  311. case OMA_CODECID_ATRAC3P:
  312. channel_id = (codec_params >> 10) & 7;
  313. if (!channel_id) {
  314. av_log(s, AV_LOG_ERROR,
  315. "Invalid ATRAC-X channel id: %d\n", channel_id);
  316. return AVERROR_INVALIDDATA;
  317. }
  318. st->codec->channel_layout = ff_oma_chid_to_native_layout[channel_id - 1];
  319. st->codec->channels = ff_oma_chid_to_num_channels[channel_id - 1];
  320. framesize = ((codec_params & 0x3FF) * 8) + 8;
  321. samplerate = ff_oma_srate_tab[(codec_params >> 13) & 7] * 100;
  322. if (!samplerate) {
  323. av_log(s, AV_LOG_ERROR, "Unsupported sample rate\n");
  324. return AVERROR_INVALIDDATA;
  325. }
  326. st->codec->sample_rate = samplerate;
  327. st->codec->bit_rate = samplerate * framesize * 8 / 2048;
  328. avpriv_set_pts_info(st, 64, 1, samplerate);
  329. break;
  330. case OMA_CODECID_MP3:
  331. st->need_parsing = AVSTREAM_PARSE_FULL;
  332. framesize = 1024;
  333. break;
  334. case OMA_CODECID_LPCM:
  335. /* PCM 44.1 kHz 16 bit stereo big-endian */
  336. st->codec->channels = 2;
  337. st->codec->channel_layout = AV_CH_LAYOUT_STEREO;
  338. st->codec->sample_rate = 44100;
  339. framesize = 1024;
  340. /* bit rate = sample rate x PCM block align (= 4) x 8 */
  341. st->codec->bit_rate = st->codec->sample_rate * 32;
  342. st->codec->bits_per_coded_sample =
  343. av_get_bits_per_sample(st->codec->codec_id);
  344. avpriv_set_pts_info(st, 64, 1, st->codec->sample_rate);
  345. break;
  346. default:
  347. av_log(s, AV_LOG_ERROR, "Unsupported codec %d!\n", buf[32]);
  348. return AVERROR(ENOSYS);
  349. }
  350. st->codec->block_align = framesize;
  351. return 0;
  352. }
  353. static int oma_read_packet(AVFormatContext *s, AVPacket *pkt)
  354. {
  355. OMAContext *oc = s->priv_data;
  356. int packet_size = s->streams[0]->codec->block_align;
  357. int ret = av_get_packet(s->pb, pkt, packet_size);
  358. if (ret < packet_size)
  359. pkt->flags |= AV_PKT_FLAG_CORRUPT;
  360. if (ret < 0)
  361. return ret;
  362. if (!ret)
  363. return AVERROR_EOF;
  364. pkt->stream_index = 0;
  365. if (oc->encrypted) {
  366. /* previous unencrypted block saved in IV for
  367. * the next packet (CBC mode) */
  368. if (ret == packet_size)
  369. av_des_crypt(&oc->av_des, pkt->data, pkt->data,
  370. (packet_size >> 3), oc->iv, 1);
  371. else
  372. memset(oc->iv, 0, 8);
  373. }
  374. return ret;
  375. }
  376. static int oma_read_probe(AVProbeData *p)
  377. {
  378. const uint8_t *buf = p->buf;
  379. unsigned tag_len = 0;
  380. if (p->buf_size >= ID3v2_HEADER_SIZE && ff_id3v2_match(buf, ID3v2_EA3_MAGIC))
  381. tag_len = ff_id3v2_tag_len(buf);
  382. /* This check cannot overflow as tag_len has at most 28 bits */
  383. if (p->buf_size < tag_len + 5)
  384. /* EA3 header comes late, might be outside of the probe buffer */
  385. return tag_len ? AVPROBE_SCORE_EXTENSION : 0;
  386. buf += tag_len;
  387. if (!memcmp(buf, "EA3", 3) && !buf[4] && buf[5] == EA3_HEADER_SIZE)
  388. return AVPROBE_SCORE_MAX;
  389. else
  390. return 0;
  391. }
  392. static int oma_read_seek(struct AVFormatContext *s,
  393. int stream_index, int64_t timestamp, int flags)
  394. {
  395. OMAContext *oc = s->priv_data;
  396. int err = ff_pcm_read_seek(s, stream_index, timestamp, flags);
  397. if (!oc->encrypted)
  398. return err;
  399. /* readjust IV for CBC */
  400. if (err || avio_tell(s->pb) < oc->content_start)
  401. goto wipe;
  402. if ((err = avio_seek(s->pb, -8, SEEK_CUR)) < 0)
  403. goto wipe;
  404. if ((err = avio_read(s->pb, oc->iv, 8)) < 8) {
  405. if (err >= 0)
  406. err = AVERROR_EOF;
  407. goto wipe;
  408. }
  409. return 0;
  410. wipe:
  411. memset(oc->iv, 0, 8);
  412. return err;
  413. }
  414. AVInputFormat ff_oma_demuxer = {
  415. .name = "oma",
  416. .long_name = NULL_IF_CONFIG_SMALL("Sony OpenMG audio"),
  417. .priv_data_size = sizeof(OMAContext),
  418. .read_probe = oma_read_probe,
  419. .read_header = oma_read_header,
  420. .read_packet = oma_read_packet,
  421. .read_seek = oma_read_seek,
  422. .flags = AVFMT_GENERIC_INDEX,
  423. .extensions = "oma,omg,aa3",
  424. .codec_tag = (const AVCodecTag* const []){ff_oma_codec_tags, 0},
  425. };