mirror of
https://github.com/tildearrow/furnace.git
synced 2024-11-05 20:35:06 +00:00
841 lines
37 KiB
C
841 lines
37 KiB
C
|
/*
|
||
|
* puff.c
|
||
|
* Copyright (C) 2002-2013 Mark Adler
|
||
|
* For conditions of distribution and use, see copyright notice in puff.h
|
||
|
* version 2.3, 21 Jan 2013
|
||
|
*
|
||
|
* puff.c is a simple inflate written to be an unambiguous way to specify the
|
||
|
* deflate format. It is not written for speed but rather simplicity. As a
|
||
|
* side benefit, this code might actually be useful when small code is more
|
||
|
* important than speed, such as bootstrap applications. For typical deflate
|
||
|
* data, zlib's inflate() is about four times as fast as puff(). zlib's
|
||
|
* inflate compiles to around 20K on my machine, whereas puff.c compiles to
|
||
|
* around 4K on my machine (a PowerPC using GNU cc). If the faster decode()
|
||
|
* function here is used, then puff() is only twice as slow as zlib's
|
||
|
* inflate().
|
||
|
*
|
||
|
* All dynamically allocated memory comes from the stack. The stack required
|
||
|
* is less than 2K bytes. This code is compatible with 16-bit int's and
|
||
|
* assumes that long's are at least 32 bits. puff.c uses the short data type,
|
||
|
* assumed to be 16 bits, for arrays in order to conserve memory. The code
|
||
|
* works whether integers are stored big endian or little endian.
|
||
|
*
|
||
|
* In the comments below are "Format notes" that describe the inflate process
|
||
|
* and document some of the less obvious aspects of the format. This source
|
||
|
* code is meant to supplement RFC 1951, which formally describes the deflate
|
||
|
* format:
|
||
|
*
|
||
|
* http://www.zlib.org/rfc-deflate.html
|
||
|
*/
|
||
|
|
||
|
/*
|
||
|
* Change history:
|
||
|
*
|
||
|
* 1.0 10 Feb 2002 - First version
|
||
|
* 1.1 17 Feb 2002 - Clarifications of some comments and notes
|
||
|
* - Update puff() dest and source pointers on negative
|
||
|
* errors to facilitate debugging deflators
|
||
|
* - Remove longest from struct huffman -- not needed
|
||
|
* - Simplify offs[] index in construct()
|
||
|
* - Add input size and checking, using longjmp() to
|
||
|
* maintain easy readability
|
||
|
* - Use short data type for large arrays
|
||
|
* - Use pointers instead of long to specify source and
|
||
|
* destination sizes to avoid arbitrary 4 GB limits
|
||
|
* 1.2 17 Mar 2002 - Add faster version of decode(), doubles speed (!),
|
||
|
* but leave simple version for readabilty
|
||
|
* - Make sure invalid distances detected if pointers
|
||
|
* are 16 bits
|
||
|
* - Fix fixed codes table error
|
||
|
* - Provide a scanning mode for determining size of
|
||
|
* uncompressed data
|
||
|
* 1.3 20 Mar 2002 - Go back to lengths for puff() parameters [Gailly]
|
||
|
* - Add a puff.h file for the interface
|
||
|
* - Add braces in puff() for else do [Gailly]
|
||
|
* - Use indexes instead of pointers for readability
|
||
|
* 1.4 31 Mar 2002 - Simplify construct() code set check
|
||
|
* - Fix some comments
|
||
|
* - Add FIXLCODES #define
|
||
|
* 1.5 6 Apr 2002 - Minor comment fixes
|
||
|
* 1.6 7 Aug 2002 - Minor format changes
|
||
|
* 1.7 3 Mar 2003 - Added test code for distribution
|
||
|
* - Added zlib-like license
|
||
|
* 1.8 9 Jan 2004 - Added some comments on no distance codes case
|
||
|
* 1.9 21 Feb 2008 - Fix bug on 16-bit integer architectures [Pohland]
|
||
|
* - Catch missing end-of-block symbol error
|
||
|
* 2.0 25 Jul 2008 - Add #define to permit distance too far back
|
||
|
* - Add option in TEST code for puff to write the data
|
||
|
* - Add option in TEST code to skip input bytes
|
||
|
* - Allow TEST code to read from piped stdin
|
||
|
* 2.1 4 Apr 2010 - Avoid variable initialization for happier compilers
|
||
|
* - Avoid unsigned comparisons for even happier compilers
|
||
|
* 2.2 25 Apr 2010 - Fix bug in variable initializations [Oberhumer]
|
||
|
* - Add const where appropriate [Oberhumer]
|
||
|
* - Split if's and ?'s for coverage testing
|
||
|
* - Break out test code to separate file
|
||
|
* - Move NIL to puff.h
|
||
|
* - Allow incomplete code only if single code length is 1
|
||
|
* - Add full code coverage test to Makefile
|
||
|
* 2.3 21 Jan 2013 - Check for invalid code length codes in dynamic blocks
|
||
|
*/
|
||
|
|
||
|
#include <setjmp.h> /* for setjmp(), longjmp(), and jmp_buf */
|
||
|
#include "puff.h" /* prototype for puff() */
|
||
|
|
||
|
#define local static /* for local function definitions */
|
||
|
|
||
|
/*
|
||
|
* Maximums for allocations and loops. It is not useful to change these --
|
||
|
* they are fixed by the deflate format.
|
||
|
*/
|
||
|
#define MAXBITS 15 /* maximum bits in a code */
|
||
|
#define MAXLCODES 286 /* maximum number of literal/length codes */
|
||
|
#define MAXDCODES 30 /* maximum number of distance codes */
|
||
|
#define MAXCODES (MAXLCODES+MAXDCODES) /* maximum codes lengths to read */
|
||
|
#define FIXLCODES 288 /* number of fixed literal/length codes */
|
||
|
|
||
|
/* input and output state */
|
||
|
struct state {
|
||
|
/* output state */
|
||
|
unsigned char *out; /* output buffer */
|
||
|
unsigned long outlen; /* available space at out */
|
||
|
unsigned long outcnt; /* bytes written to out so far */
|
||
|
|
||
|
/* input state */
|
||
|
const unsigned char *in; /* input buffer */
|
||
|
unsigned long inlen; /* available input at in */
|
||
|
unsigned long incnt; /* bytes read so far */
|
||
|
int bitbuf; /* bit buffer */
|
||
|
int bitcnt; /* number of bits in bit buffer */
|
||
|
|
||
|
/* input limit error return state for bits() and decode() */
|
||
|
jmp_buf env;
|
||
|
};
|
||
|
|
||
|
/*
|
||
|
* Return need bits from the input stream. This always leaves less than
|
||
|
* eight bits in the buffer. bits() works properly for need == 0.
|
||
|
*
|
||
|
* Format notes:
|
||
|
*
|
||
|
* - Bits are stored in bytes from the least significant bit to the most
|
||
|
* significant bit. Therefore bits are dropped from the bottom of the bit
|
||
|
* buffer, using shift right, and new bytes are appended to the top of the
|
||
|
* bit buffer, using shift left.
|
||
|
*/
|
||
|
local int bits(struct state *s, int need)
|
||
|
{
|
||
|
long val; /* bit accumulator (can use up to 20 bits) */
|
||
|
|
||
|
/* load at least need bits into val */
|
||
|
val = s->bitbuf;
|
||
|
while (s->bitcnt < need) {
|
||
|
if (s->incnt == s->inlen)
|
||
|
longjmp(s->env, 1); /* out of input */
|
||
|
val |= (long)(s->in[s->incnt++]) << s->bitcnt; /* load eight bits */
|
||
|
s->bitcnt += 8;
|
||
|
}
|
||
|
|
||
|
/* drop need bits and update buffer, always zero to seven bits left */
|
||
|
s->bitbuf = (int)(val >> need);
|
||
|
s->bitcnt -= need;
|
||
|
|
||
|
/* return need bits, zeroing the bits above that */
|
||
|
return (int)(val & ((1L << need) - 1));
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* Process a stored block.
|
||
|
*
|
||
|
* Format notes:
|
||
|
*
|
||
|
* - After the two-bit stored block type (00), the stored block length and
|
||
|
* stored bytes are byte-aligned for fast copying. Therefore any leftover
|
||
|
* bits in the byte that has the last bit of the type, as many as seven, are
|
||
|
* discarded. The value of the discarded bits are not defined and should not
|
||
|
* be checked against any expectation.
|
||
|
*
|
||
|
* - The second inverted copy of the stored block length does not have to be
|
||
|
* checked, but it's probably a good idea to do so anyway.
|
||
|
*
|
||
|
* - A stored block can have zero length. This is sometimes used to byte-align
|
||
|
* subsets of the compressed data for random access or partial recovery.
|
||
|
*/
|
||
|
local int stored(struct state *s)
|
||
|
{
|
||
|
unsigned len; /* length of stored block */
|
||
|
|
||
|
/* discard leftover bits from current byte (assumes s->bitcnt < 8) */
|
||
|
s->bitbuf = 0;
|
||
|
s->bitcnt = 0;
|
||
|
|
||
|
/* get length and check against its one's complement */
|
||
|
if (s->incnt + 4 > s->inlen)
|
||
|
return 2; /* not enough input */
|
||
|
len = s->in[s->incnt++];
|
||
|
len |= s->in[s->incnt++] << 8;
|
||
|
if (s->in[s->incnt++] != (~len & 0xff) ||
|
||
|
s->in[s->incnt++] != ((~len >> 8) & 0xff))
|
||
|
return -2; /* didn't match complement! */
|
||
|
|
||
|
/* copy len bytes from in to out */
|
||
|
if (s->incnt + len > s->inlen)
|
||
|
return 2; /* not enough input */
|
||
|
if (s->out != NIL) {
|
||
|
if (s->outcnt + len > s->outlen)
|
||
|
return 1; /* not enough output space */
|
||
|
while (len--)
|
||
|
s->out[s->outcnt++] = s->in[s->incnt++];
|
||
|
}
|
||
|
else { /* just scanning */
|
||
|
s->outcnt += len;
|
||
|
s->incnt += len;
|
||
|
}
|
||
|
|
||
|
/* done with a valid stored block */
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* Huffman code decoding tables. count[1..MAXBITS] is the number of symbols of
|
||
|
* each length, which for a canonical code are stepped through in order.
|
||
|
* symbol[] are the symbol values in canonical order, where the number of
|
||
|
* entries is the sum of the counts in count[]. The decoding process can be
|
||
|
* seen in the function decode() below.
|
||
|
*/
|
||
|
struct huffman {
|
||
|
short *count; /* number of symbols of each length */
|
||
|
short *symbol; /* canonically ordered symbols */
|
||
|
};
|
||
|
|
||
|
/*
|
||
|
* Decode a code from the stream s using huffman table h. Return the symbol or
|
||
|
* a negative value if there is an error. If all of the lengths are zero, i.e.
|
||
|
* an empty code, or if the code is incomplete and an invalid code is received,
|
||
|
* then -10 is returned after reading MAXBITS bits.
|
||
|
*
|
||
|
* Format notes:
|
||
|
*
|
||
|
* - The codes as stored in the compressed data are bit-reversed relative to
|
||
|
* a simple integer ordering of codes of the same lengths. Hence below the
|
||
|
* bits are pulled from the compressed data one at a time and used to
|
||
|
* build the code value reversed from what is in the stream in order to
|
||
|
* permit simple integer comparisons for decoding. A table-based decoding
|
||
|
* scheme (as used in zlib) does not need to do this reversal.
|
||
|
*
|
||
|
* - The first code for the shortest length is all zeros. Subsequent codes of
|
||
|
* the same length are simply integer increments of the previous code. When
|
||
|
* moving up a length, a zero bit is appended to the code. For a complete
|
||
|
* code, the last code of the longest length will be all ones.
|
||
|
*
|
||
|
* - Incomplete codes are handled by this decoder, since they are permitted
|
||
|
* in the deflate format. See the format notes for fixed() and dynamic().
|
||
|
*/
|
||
|
#ifdef SLOW
|
||
|
local int decode(struct state *s, const struct huffman *h)
|
||
|
{
|
||
|
int len; /* current number of bits in code */
|
||
|
int code; /* len bits being decoded */
|
||
|
int first; /* first code of length len */
|
||
|
int count; /* number of codes of length len */
|
||
|
int index; /* index of first code of length len in symbol table */
|
||
|
|
||
|
code = first = index = 0;
|
||
|
for (len = 1; len <= MAXBITS; len++) {
|
||
|
code |= bits(s, 1); /* get next bit */
|
||
|
count = h->count[len];
|
||
|
if (code - count < first) /* if length len, return symbol */
|
||
|
return h->symbol[index + (code - first)];
|
||
|
index += count; /* else update for next length */
|
||
|
first += count;
|
||
|
first <<= 1;
|
||
|
code <<= 1;
|
||
|
}
|
||
|
return -10; /* ran out of codes */
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* A faster version of decode() for real applications of this code. It's not
|
||
|
* as readable, but it makes puff() twice as fast. And it only makes the code
|
||
|
* a few percent larger.
|
||
|
*/
|
||
|
#else /* !SLOW */
|
||
|
local int decode(struct state *s, const struct huffman *h)
|
||
|
{
|
||
|
int len; /* current number of bits in code */
|
||
|
int code; /* len bits being decoded */
|
||
|
int first; /* first code of length len */
|
||
|
int count; /* number of codes of length len */
|
||
|
int index; /* index of first code of length len in symbol table */
|
||
|
int bitbuf; /* bits from stream */
|
||
|
int left; /* bits left in next or left to process */
|
||
|
short *next; /* next number of codes */
|
||
|
|
||
|
bitbuf = s->bitbuf;
|
||
|
left = s->bitcnt;
|
||
|
code = first = index = 0;
|
||
|
len = 1;
|
||
|
next = h->count + 1;
|
||
|
while (1) {
|
||
|
while (left--) {
|
||
|
code |= bitbuf & 1;
|
||
|
bitbuf >>= 1;
|
||
|
count = *next++;
|
||
|
if (code - count < first) { /* if length len, return symbol */
|
||
|
s->bitbuf = bitbuf;
|
||
|
s->bitcnt = (s->bitcnt - len) & 7;
|
||
|
return h->symbol[index + (code - first)];
|
||
|
}
|
||
|
index += count; /* else update for next length */
|
||
|
first += count;
|
||
|
first <<= 1;
|
||
|
code <<= 1;
|
||
|
len++;
|
||
|
}
|
||
|
left = (MAXBITS+1) - len;
|
||
|
if (left == 0)
|
||
|
break;
|
||
|
if (s->incnt == s->inlen)
|
||
|
longjmp(s->env, 1); /* out of input */
|
||
|
bitbuf = s->in[s->incnt++];
|
||
|
if (left > 8)
|
||
|
left = 8;
|
||
|
}
|
||
|
return -10; /* ran out of codes */
|
||
|
}
|
||
|
#endif /* SLOW */
|
||
|
|
||
|
/*
|
||
|
* Given the list of code lengths length[0..n-1] representing a canonical
|
||
|
* Huffman code for n symbols, construct the tables required to decode those
|
||
|
* codes. Those tables are the number of codes of each length, and the symbols
|
||
|
* sorted by length, retaining their original order within each length. The
|
||
|
* return value is zero for a complete code set, negative for an over-
|
||
|
* subscribed code set, and positive for an incomplete code set. The tables
|
||
|
* can be used if the return value is zero or positive, but they cannot be used
|
||
|
* if the return value is negative. If the return value is zero, it is not
|
||
|
* possible for decode() using that table to return an error--any stream of
|
||
|
* enough bits will resolve to a symbol. If the return value is positive, then
|
||
|
* it is possible for decode() using that table to return an error for received
|
||
|
* codes past the end of the incomplete lengths.
|
||
|
*
|
||
|
* Not used by decode(), but used for error checking, h->count[0] is the number
|
||
|
* of the n symbols not in the code. So n - h->count[0] is the number of
|
||
|
* codes. This is useful for checking for incomplete codes that have more than
|
||
|
* one symbol, which is an error in a dynamic block.
|
||
|
*
|
||
|
* Assumption: for all i in 0..n-1, 0 <= length[i] <= MAXBITS
|
||
|
* This is assured by the construction of the length arrays in dynamic() and
|
||
|
* fixed() and is not verified by construct().
|
||
|
*
|
||
|
* Format notes:
|
||
|
*
|
||
|
* - Permitted and expected examples of incomplete codes are one of the fixed
|
||
|
* codes and any code with a single symbol which in deflate is coded as one
|
||
|
* bit instead of zero bits. See the format notes for fixed() and dynamic().
|
||
|
*
|
||
|
* - Within a given code length, the symbols are kept in ascending order for
|
||
|
* the code bits definition.
|
||
|
*/
|
||
|
local int construct(struct huffman *h, const short *length, int n)
|
||
|
{
|
||
|
int symbol; /* current symbol when stepping through length[] */
|
||
|
int len; /* current length when stepping through h->count[] */
|
||
|
int left; /* number of possible codes left of current length */
|
||
|
short offs[MAXBITS+1]; /* offsets in symbol table for each length */
|
||
|
|
||
|
/* count number of codes of each length */
|
||
|
for (len = 0; len <= MAXBITS; len++)
|
||
|
h->count[len] = 0;
|
||
|
for (symbol = 0; symbol < n; symbol++)
|
||
|
(h->count[length[symbol]])++; /* assumes lengths are within bounds */
|
||
|
if (h->count[0] == n) /* no codes! */
|
||
|
return 0; /* complete, but decode() will fail */
|
||
|
|
||
|
/* check for an over-subscribed or incomplete set of lengths */
|
||
|
left = 1; /* one possible code of zero length */
|
||
|
for (len = 1; len <= MAXBITS; len++) {
|
||
|
left <<= 1; /* one more bit, double codes left */
|
||
|
left -= h->count[len]; /* deduct count from possible codes */
|
||
|
if (left < 0)
|
||
|
return left; /* over-subscribed--return negative */
|
||
|
} /* left > 0 means incomplete */
|
||
|
|
||
|
/* generate offsets into symbol table for each length for sorting */
|
||
|
offs[1] = 0;
|
||
|
for (len = 1; len < MAXBITS; len++)
|
||
|
offs[len + 1] = offs[len] + h->count[len];
|
||
|
|
||
|
/*
|
||
|
* put symbols in table sorted by length, by symbol order within each
|
||
|
* length
|
||
|
*/
|
||
|
for (symbol = 0; symbol < n; symbol++)
|
||
|
if (length[symbol] != 0)
|
||
|
h->symbol[offs[length[symbol]]++] = symbol;
|
||
|
|
||
|
/* return zero for complete set, positive for incomplete set */
|
||
|
return left;
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* Decode literal/length and distance codes until an end-of-block code.
|
||
|
*
|
||
|
* Format notes:
|
||
|
*
|
||
|
* - Compressed data that is after the block type if fixed or after the code
|
||
|
* description if dynamic is a combination of literals and length/distance
|
||
|
* pairs terminated by and end-of-block code. Literals are simply Huffman
|
||
|
* coded bytes. A length/distance pair is a coded length followed by a
|
||
|
* coded distance to represent a string that occurs earlier in the
|
||
|
* uncompressed data that occurs again at the current location.
|
||
|
*
|
||
|
* - Literals, lengths, and the end-of-block code are combined into a single
|
||
|
* code of up to 286 symbols. They are 256 literals (0..255), 29 length
|
||
|
* symbols (257..285), and the end-of-block symbol (256).
|
||
|
*
|
||
|
* - There are 256 possible lengths (3..258), and so 29 symbols are not enough
|
||
|
* to represent all of those. Lengths 3..10 and 258 are in fact represented
|
||
|
* by just a length symbol. Lengths 11..257 are represented as a symbol and
|
||
|
* some number of extra bits that are added as an integer to the base length
|
||
|
* of the length symbol. The number of extra bits is determined by the base
|
||
|
* length symbol. These are in the static arrays below, lens[] for the base
|
||
|
* lengths and lext[] for the corresponding number of extra bits.
|
||
|
*
|
||
|
* - The reason that 258 gets its own symbol is that the longest length is used
|
||
|
* often in highly redundant files. Note that 258 can also be coded as the
|
||
|
* base value 227 plus the maximum extra value of 31. While a good deflate
|
||
|
* should never do this, it is not an error, and should be decoded properly.
|
||
|
*
|
||
|
* - If a length is decoded, including its extra bits if any, then it is
|
||
|
* followed a distance code. There are up to 30 distance symbols. Again
|
||
|
* there are many more possible distances (1..32768), so extra bits are added
|
||
|
* to a base value represented by the symbol. The distances 1..4 get their
|
||
|
* own symbol, but the rest require extra bits. The base distances and
|
||
|
* corresponding number of extra bits are below in the static arrays dist[]
|
||
|
* and dext[].
|
||
|
*
|
||
|
* - Literal bytes are simply written to the output. A length/distance pair is
|
||
|
* an instruction to copy previously uncompressed bytes to the output. The
|
||
|
* copy is from distance bytes back in the output stream, copying for length
|
||
|
* bytes.
|
||
|
*
|
||
|
* - Distances pointing before the beginning of the output data are not
|
||
|
* permitted.
|
||
|
*
|
||
|
* - Overlapped copies, where the length is greater than the distance, are
|
||
|
* allowed and common. For example, a distance of one and a length of 258
|
||
|
* simply copies the last byte 258 times. A distance of four and a length of
|
||
|
* twelve copies the last four bytes three times. A simple forward copy
|
||
|
* ignoring whether the length is greater than the distance or not implements
|
||
|
* this correctly. You should not use memcpy() since its behavior is not
|
||
|
* defined for overlapped arrays. You should not use memmove() or bcopy()
|
||
|
* since though their behavior -is- defined for overlapping arrays, it is
|
||
|
* defined to do the wrong thing in this case.
|
||
|
*/
|
||
|
local int codes(struct state *s,
|
||
|
const struct huffman *lencode,
|
||
|
const struct huffman *distcode)
|
||
|
{
|
||
|
int symbol; /* decoded symbol */
|
||
|
int len; /* length for copy */
|
||
|
unsigned dist; /* distance for copy */
|
||
|
static const short lens[29] = { /* Size base for length codes 257..285 */
|
||
|
3, 4, 5, 6, 7, 8, 9, 10, 11, 13, 15, 17, 19, 23, 27, 31,
|
||
|
35, 43, 51, 59, 67, 83, 99, 115, 131, 163, 195, 227, 258};
|
||
|
static const short lext[29] = { /* Extra bits for length codes 257..285 */
|
||
|
0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2, 2,
|
||
|
3, 3, 3, 3, 4, 4, 4, 4, 5, 5, 5, 5, 0};
|
||
|
static const short dists[30] = { /* Offset base for distance codes 0..29 */
|
||
|
1, 2, 3, 4, 5, 7, 9, 13, 17, 25, 33, 49, 65, 97, 129, 193,
|
||
|
257, 385, 513, 769, 1025, 1537, 2049, 3073, 4097, 6145,
|
||
|
8193, 12289, 16385, 24577};
|
||
|
static const short dext[30] = { /* Extra bits for distance codes 0..29 */
|
||
|
0, 0, 0, 0, 1, 1, 2, 2, 3, 3, 4, 4, 5, 5, 6, 6,
|
||
|
7, 7, 8, 8, 9, 9, 10, 10, 11, 11,
|
||
|
12, 12, 13, 13};
|
||
|
|
||
|
/* decode literals and length/distance pairs */
|
||
|
do {
|
||
|
symbol = decode(s, lencode);
|
||
|
if (symbol < 0)
|
||
|
return symbol; /* invalid symbol */
|
||
|
if (symbol < 256) { /* literal: symbol is the byte */
|
||
|
/* write out the literal */
|
||
|
if (s->out != NIL) {
|
||
|
if (s->outcnt == s->outlen)
|
||
|
return 1;
|
||
|
s->out[s->outcnt] = symbol;
|
||
|
}
|
||
|
s->outcnt++;
|
||
|
}
|
||
|
else if (symbol > 256) { /* length */
|
||
|
/* get and compute length */
|
||
|
symbol -= 257;
|
||
|
if (symbol >= 29)
|
||
|
return -10; /* invalid fixed code */
|
||
|
len = lens[symbol] + bits(s, lext[symbol]);
|
||
|
|
||
|
/* get and check distance */
|
||
|
symbol = decode(s, distcode);
|
||
|
if (symbol < 0)
|
||
|
return symbol; /* invalid symbol */
|
||
|
dist = dists[symbol] + bits(s, dext[symbol]);
|
||
|
#ifndef INFLATE_ALLOW_INVALID_DISTANCE_TOOFAR_ARRR
|
||
|
if (dist > s->outcnt)
|
||
|
return -11; /* distance too far back */
|
||
|
#endif
|
||
|
|
||
|
/* copy length bytes from distance bytes back */
|
||
|
if (s->out != NIL) {
|
||
|
if (s->outcnt + len > s->outlen)
|
||
|
return 1;
|
||
|
while (len--) {
|
||
|
s->out[s->outcnt] =
|
||
|
#ifdef INFLATE_ALLOW_INVALID_DISTANCE_TOOFAR_ARRR
|
||
|
dist > s->outcnt ?
|
||
|
0 :
|
||
|
#endif
|
||
|
s->out[s->outcnt - dist];
|
||
|
s->outcnt++;
|
||
|
}
|
||
|
}
|
||
|
else
|
||
|
s->outcnt += len;
|
||
|
}
|
||
|
} while (symbol != 256); /* end of block symbol */
|
||
|
|
||
|
/* done with a valid fixed or dynamic block */
|
||
|
return 0;
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* Process a fixed codes block.
|
||
|
*
|
||
|
* Format notes:
|
||
|
*
|
||
|
* - This block type can be useful for compressing small amounts of data for
|
||
|
* which the size of the code descriptions in a dynamic block exceeds the
|
||
|
* benefit of custom codes for that block. For fixed codes, no bits are
|
||
|
* spent on code descriptions. Instead the code lengths for literal/length
|
||
|
* codes and distance codes are fixed. The specific lengths for each symbol
|
||
|
* can be seen in the "for" loops below.
|
||
|
*
|
||
|
* - The literal/length code is complete, but has two symbols that are invalid
|
||
|
* and should result in an error if received. This cannot be implemented
|
||
|
* simply as an incomplete code since those two symbols are in the "middle"
|
||
|
* of the code. They are eight bits long and the longest literal/length\
|
||
|
* code is nine bits. Therefore the code must be constructed with those
|
||
|
* symbols, and the invalid symbols must be detected after decoding.
|
||
|
*
|
||
|
* - The fixed distance codes also have two invalid symbols that should result
|
||
|
* in an error if received. Since all of the distance codes are the same
|
||
|
* length, this can be implemented as an incomplete code. Then the invalid
|
||
|
* codes are detected while decoding.
|
||
|
*/
|
||
|
local int fixed(struct state *s)
|
||
|
{
|
||
|
static int virgin = 1;
|
||
|
static short lencnt[MAXBITS+1], lensym[FIXLCODES];
|
||
|
static short distcnt[MAXBITS+1], distsym[MAXDCODES];
|
||
|
static struct huffman lencode, distcode;
|
||
|
|
||
|
/* build fixed huffman tables if first call (may not be thread safe) */
|
||
|
if (virgin) {
|
||
|
int symbol;
|
||
|
short lengths[FIXLCODES];
|
||
|
|
||
|
/* construct lencode and distcode */
|
||
|
lencode.count = lencnt;
|
||
|
lencode.symbol = lensym;
|
||
|
distcode.count = distcnt;
|
||
|
distcode.symbol = distsym;
|
||
|
|
||
|
/* literal/length table */
|
||
|
for (symbol = 0; symbol < 144; symbol++)
|
||
|
lengths[symbol] = 8;
|
||
|
for (; symbol < 256; symbol++)
|
||
|
lengths[symbol] = 9;
|
||
|
for (; symbol < 280; symbol++)
|
||
|
lengths[symbol] = 7;
|
||
|
for (; symbol < FIXLCODES; symbol++)
|
||
|
lengths[symbol] = 8;
|
||
|
construct(&lencode, lengths, FIXLCODES);
|
||
|
|
||
|
/* distance table */
|
||
|
for (symbol = 0; symbol < MAXDCODES; symbol++)
|
||
|
lengths[symbol] = 5;
|
||
|
construct(&distcode, lengths, MAXDCODES);
|
||
|
|
||
|
/* do this just once */
|
||
|
virgin = 0;
|
||
|
}
|
||
|
|
||
|
/* decode data until end-of-block code */
|
||
|
return codes(s, &lencode, &distcode);
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* Process a dynamic codes block.
|
||
|
*
|
||
|
* Format notes:
|
||
|
*
|
||
|
* - A dynamic block starts with a description of the literal/length and
|
||
|
* distance codes for that block. New dynamic blocks allow the compressor to
|
||
|
* rapidly adapt to changing data with new codes optimized for that data.
|
||
|
*
|
||
|
* - The codes used by the deflate format are "canonical", which means that
|
||
|
* the actual bits of the codes are generated in an unambiguous way simply
|
||
|
* from the number of bits in each code. Therefore the code descriptions
|
||
|
* are simply a list of code lengths for each symbol.
|
||
|
*
|
||
|
* - The code lengths are stored in order for the symbols, so lengths are
|
||
|
* provided for each of the literal/length symbols, and for each of the
|
||
|
* distance symbols.
|
||
|
*
|
||
|
* - If a symbol is not used in the block, this is represented by a zero as
|
||
|
* as the code length. This does not mean a zero-length code, but rather
|
||
|
* that no code should be created for this symbol. There is no way in the
|
||
|
* deflate format to represent a zero-length code.
|
||
|
*
|
||
|
* - The maximum number of bits in a code is 15, so the possible lengths for
|
||
|
* any code are 1..15.
|
||
|
*
|
||
|
* - The fact that a length of zero is not permitted for a code has an
|
||
|
* interesting consequence. Normally if only one symbol is used for a given
|
||
|
* code, then in fact that code could be represented with zero bits. However
|
||
|
* in deflate, that code has to be at least one bit. So for example, if
|
||
|
* only a single distance base symbol appears in a block, then it will be
|
||
|
* represented by a single code of length one, in particular one 0 bit. This
|
||
|
* is an incomplete code, since if a 1 bit is received, it has no meaning,
|
||
|
* and should result in an error. So incomplete distance codes of one symbol
|
||
|
* should be permitted, and the receipt of invalid codes should be handled.
|
||
|
*
|
||
|
* - It is also possible to have a single literal/length code, but that code
|
||
|
* must be the end-of-block code, since every dynamic block has one. This
|
||
|
* is not the most efficient way to create an empty block (an empty fixed
|
||
|
* block is fewer bits), but it is allowed by the format. So incomplete
|
||
|
* literal/length codes of one symbol should also be permitted.
|
||
|
*
|
||
|
* - If there are only literal codes and no lengths, then there are no distance
|
||
|
* codes. This is represented by one distance code with zero bits.
|
||
|
*
|
||
|
* - The list of up to 286 length/literal lengths and up to 30 distance lengths
|
||
|
* are themselves compressed using Huffman codes and run-length encoding. In
|
||
|
* the list of code lengths, a 0 symbol means no code, a 1..15 symbol means
|
||
|
* that length, and the symbols 16, 17, and 18 are run-length instructions.
|
||
|
* Each of 16, 17, and 18 are follwed by extra bits to define the length of
|
||
|
* the run. 16 copies the last length 3 to 6 times. 17 represents 3 to 10
|
||
|
* zero lengths, and 18 represents 11 to 138 zero lengths. Unused symbols
|
||
|
* are common, hence the special coding for zero lengths.
|
||
|
*
|
||
|
* - The symbols for 0..18 are Huffman coded, and so that code must be
|
||
|
* described first. This is simply a sequence of up to 19 three-bit values
|
||
|
* representing no code (0) or the code length for that symbol (1..7).
|
||
|
*
|
||
|
* - A dynamic block starts with three fixed-size counts from which is computed
|
||
|
* the number of literal/length code lengths, the number of distance code
|
||
|
* lengths, and the number of code length code lengths (ok, you come up with
|
||
|
* a better name!) in the code descriptions. For the literal/length and
|
||
|
* distance codes, lengths after those provided are considered zero, i.e. no
|
||
|
* code. The code length code lengths are received in a permuted order (see
|
||
|
* the order[] array below) to make a short code length code length list more
|
||
|
* likely. As it turns out, very short and very long codes are less likely
|
||
|
* to be seen in a dynamic code description, hence what may appear initially
|
||
|
* to be a peculiar ordering.
|
||
|
*
|
||
|
* - Given the number of literal/length code lengths (nlen) and distance code
|
||
|
* lengths (ndist), then they are treated as one long list of nlen + ndist
|
||
|
* code lengths. Therefore run-length coding can and often does cross the
|
||
|
* boundary between the two sets of lengths.
|
||
|
*
|
||
|
* - So to summarize, the code description at the start of a dynamic block is
|
||
|
* three counts for the number of code lengths for the literal/length codes,
|
||
|
* the distance codes, and the code length codes. This is followed by the
|
||
|
* code length code lengths, three bits each. This is used to construct the
|
||
|
* code length code which is used to read the remainder of the lengths. Then
|
||
|
* the literal/length code lengths and distance lengths are read as a single
|
||
|
* set of lengths using the code length codes. Codes are constructed from
|
||
|
* the resulting two sets of lengths, and then finally you can start
|
||
|
* decoding actual compressed data in the block.
|
||
|
*
|
||
|
* - For reference, a "typical" size for the code description in a dynamic
|
||
|
* block is around 80 bytes.
|
||
|
*/
|
||
|
local int dynamic(struct state *s)
|
||
|
{
|
||
|
int nlen, ndist, ncode; /* number of lengths in descriptor */
|
||
|
int index; /* index of lengths[] */
|
||
|
int err; /* construct() return value */
|
||
|
short lengths[MAXCODES]; /* descriptor code lengths */
|
||
|
short lencnt[MAXBITS+1], lensym[MAXLCODES]; /* lencode memory */
|
||
|
short distcnt[MAXBITS+1], distsym[MAXDCODES]; /* distcode memory */
|
||
|
struct huffman lencode, distcode; /* length and distance codes */
|
||
|
static const short order[19] = /* permutation of code length codes */
|
||
|
{16, 17, 18, 0, 8, 7, 9, 6, 10, 5, 11, 4, 12, 3, 13, 2, 14, 1, 15};
|
||
|
|
||
|
/* construct lencode and distcode */
|
||
|
lencode.count = lencnt;
|
||
|
lencode.symbol = lensym;
|
||
|
distcode.count = distcnt;
|
||
|
distcode.symbol = distsym;
|
||
|
|
||
|
/* get number of lengths in each table, check lengths */
|
||
|
nlen = bits(s, 5) + 257;
|
||
|
ndist = bits(s, 5) + 1;
|
||
|
ncode = bits(s, 4) + 4;
|
||
|
if (nlen > MAXLCODES || ndist > MAXDCODES)
|
||
|
return -3; /* bad counts */
|
||
|
|
||
|
/* read code length code lengths (really), missing lengths are zero */
|
||
|
for (index = 0; index < ncode; index++)
|
||
|
lengths[order[index]] = bits(s, 3);
|
||
|
for (; index < 19; index++)
|
||
|
lengths[order[index]] = 0;
|
||
|
|
||
|
/* build huffman table for code lengths codes (use lencode temporarily) */
|
||
|
err = construct(&lencode, lengths, 19);
|
||
|
if (err != 0) /* require complete code set here */
|
||
|
return -4;
|
||
|
|
||
|
/* read length/literal and distance code length tables */
|
||
|
index = 0;
|
||
|
while (index < nlen + ndist) {
|
||
|
int symbol; /* decoded value */
|
||
|
int len; /* last length to repeat */
|
||
|
|
||
|
symbol = decode(s, &lencode);
|
||
|
if (symbol < 0)
|
||
|
return symbol; /* invalid symbol */
|
||
|
if (symbol < 16) /* length in 0..15 */
|
||
|
lengths[index++] = symbol;
|
||
|
else { /* repeat instruction */
|
||
|
len = 0; /* assume repeating zeros */
|
||
|
if (symbol == 16) { /* repeat last length 3..6 times */
|
||
|
if (index == 0)
|
||
|
return -5; /* no last length! */
|
||
|
len = lengths[index - 1]; /* last length */
|
||
|
symbol = 3 + bits(s, 2);
|
||
|
}
|
||
|
else if (symbol == 17) /* repeat zero 3..10 times */
|
||
|
symbol = 3 + bits(s, 3);
|
||
|
else /* == 18, repeat zero 11..138 times */
|
||
|
symbol = 11 + bits(s, 7);
|
||
|
if (index + symbol > nlen + ndist)
|
||
|
return -6; /* too many lengths! */
|
||
|
while (symbol--) /* repeat last or zero symbol times */
|
||
|
lengths[index++] = len;
|
||
|
}
|
||
|
}
|
||
|
|
||
|
/* check for end-of-block code -- there better be one! */
|
||
|
if (lengths[256] == 0)
|
||
|
return -9;
|
||
|
|
||
|
/* build huffman table for literal/length codes */
|
||
|
err = construct(&lencode, lengths, nlen);
|
||
|
if (err && (err < 0 || nlen != lencode.count[0] + lencode.count[1]))
|
||
|
return -7; /* incomplete code ok only for single length 1 code */
|
||
|
|
||
|
/* build huffman table for distance codes */
|
||
|
err = construct(&distcode, lengths + nlen, ndist);
|
||
|
if (err && (err < 0 || ndist != distcode.count[0] + distcode.count[1]))
|
||
|
return -8; /* incomplete code ok only for single length 1 code */
|
||
|
|
||
|
/* decode data until end-of-block code */
|
||
|
return codes(s, &lencode, &distcode);
|
||
|
}
|
||
|
|
||
|
/*
|
||
|
* Inflate source to dest. On return, destlen and sourcelen are updated to the
|
||
|
* size of the uncompressed data and the size of the deflate data respectively.
|
||
|
* On success, the return value of puff() is zero. If there is an error in the
|
||
|
* source data, i.e. it is not in the deflate format, then a negative value is
|
||
|
* returned. If there is not enough input available or there is not enough
|
||
|
* output space, then a positive error is returned. In that case, destlen and
|
||
|
* sourcelen are not updated to facilitate retrying from the beginning with the
|
||
|
* provision of more input data or more output space. In the case of invalid
|
||
|
* inflate data (a negative error), the dest and source pointers are updated to
|
||
|
* facilitate the debugging of deflators.
|
||
|
*
|
||
|
* puff() also has a mode to determine the size of the uncompressed output with
|
||
|
* no output written. For this dest must be (unsigned char *)0. In this case,
|
||
|
* the input value of *destlen is ignored, and on return *destlen is set to the
|
||
|
* size of the uncompressed output.
|
||
|
*
|
||
|
* The return codes are:
|
||
|
*
|
||
|
* 2: available inflate data did not terminate
|
||
|
* 1: output space exhausted before completing inflate
|
||
|
* 0: successful inflate
|
||
|
* -1: invalid block type (type == 3)
|
||
|
* -2: stored block length did not match one's complement
|
||
|
* -3: dynamic block code description: too many length or distance codes
|
||
|
* -4: dynamic block code description: code lengths codes incomplete
|
||
|
* -5: dynamic block code description: repeat lengths with no first length
|
||
|
* -6: dynamic block code description: repeat more than specified lengths
|
||
|
* -7: dynamic block code description: invalid literal/length code lengths
|
||
|
* -8: dynamic block code description: invalid distance code lengths
|
||
|
* -9: dynamic block code description: missing end-of-block code
|
||
|
* -10: invalid literal/length or distance code in fixed or dynamic block
|
||
|
* -11: distance is too far back in fixed or dynamic block
|
||
|
*
|
||
|
* Format notes:
|
||
|
*
|
||
|
* - Three bits are read for each block to determine the kind of block and
|
||
|
* whether or not it is the last block. Then the block is decoded and the
|
||
|
* process repeated if it was not the last block.
|
||
|
*
|
||
|
* - The leftover bits in the last byte of the deflate data after the last
|
||
|
* block (if it was a fixed or dynamic block) are undefined and have no
|
||
|
* expected values to check.
|
||
|
*/
|
||
|
int puff(unsigned char *dest, /* pointer to destination pointer */
|
||
|
unsigned long *destlen, /* amount of output space */
|
||
|
const unsigned char *source, /* pointer to source data pointer */
|
||
|
unsigned long *sourcelen) /* amount of input available */
|
||
|
{
|
||
|
struct state s; /* input/output state */
|
||
|
int last, type; /* block information */
|
||
|
int err; /* return value */
|
||
|
|
||
|
/* initialize output state */
|
||
|
s.out = dest;
|
||
|
s.outlen = *destlen; /* ignored if dest is NIL */
|
||
|
s.outcnt = 0;
|
||
|
|
||
|
/* initialize input state */
|
||
|
s.in = source;
|
||
|
s.inlen = *sourcelen;
|
||
|
s.incnt = 0;
|
||
|
s.bitbuf = 0;
|
||
|
s.bitcnt = 0;
|
||
|
|
||
|
/* return if bits() or decode() tries to read past available input */
|
||
|
if (setjmp(s.env) != 0) /* if came back here via longjmp() */
|
||
|
err = 2; /* then skip do-loop, return error */
|
||
|
else {
|
||
|
/* process blocks until last block or error */
|
||
|
do {
|
||
|
last = bits(&s, 1); /* one if last block */
|
||
|
type = bits(&s, 2); /* block type 0..3 */
|
||
|
err = type == 0 ?
|
||
|
stored(&s) :
|
||
|
(type == 1 ?
|
||
|
fixed(&s) :
|
||
|
(type == 2 ?
|
||
|
dynamic(&s) :
|
||
|
-1)); /* type == 3, invalid */
|
||
|
if (err != 0)
|
||
|
break; /* return with error */
|
||
|
} while (!last);
|
||
|
}
|
||
|
|
||
|
/* update the lengths and return */
|
||
|
if (err <= 0) {
|
||
|
*destlen = s.outcnt;
|
||
|
*sourcelen = s.incnt;
|
||
|
}
|
||
|
return err;
|
||
|
}
|