[FFmpeg-devel] [PATCH v3] avcodec/dovi_rpu: verify RPU data CRC32

[Michael Niedermayer]

On Fri, Oct 27, 2023 at 07:46:31AM -0400, quietvoid wrote:
> 
> On 26/10/2023 17.44, Michael Niedermayer wrote:
> > On Wed, Aug 09, 2023 at 01:46:57PM -0400, quietvoid wrote:
> > > The Dolby Vision RPU contains a CRC32 to validate the payload against.
> > > The implementation is CRC32/MPEG-2.
> > > 
[...]
> > > -    /* FIXME: verify CRC32, requires implementation of AV_CRC_32_MPEG_2 */
> > > +    if (!(err_recognition & AV_EF_CRCCHECK))
> > > +        return 0;
> > > +
> > > +    /* Skip unsupported until CRC32 */
> > > +    skip_bits_long(gb, get_bits_left(gb) - 32);
> > > +
> > > +    rpu_data_crc32 = get_bits_long(gb, 32);
> > > +
> > > +    /* Verify CRC32, buffer excludes the prefix, CRC32 and trailing byte */
> > > +    computed_crc32 = av_bswap32(av_crc(av_crc_get_table(AV_CRC_32_IEEE),
> > > +                                       -1, rpu + 1, actual_rpu_size - 6));
> > > +
> > > +    if (rpu_data_crc32 != computed_crc32) {
> > > +        av_log(s->logctx, AV_LOG_ERROR,
> > > +               "RPU CRC mismatch! Expected %"PRIu32", received %"PRIu32"\n",
> > > +               rpu_data_crc32, computed_crc32);
> > > +
> > > +        if (err_recognition & AV_EF_EXPLODE)
> > > +            goto fail;
> > > +    }
> > (correctly designed) CRCs have the beautifull symmetry that you can merge
> > the crc32 value into the crc computation and then a 0 means no CRC missmatch
> > (there are many other cool properties but this one allows to simplify the code)
> > 
> > This works too: (and is simpler)
> > 
> >      /* Skip unsupported until CRC32 */
> >      skip_bits_long(gb, get_bits_left(gb));
> > 
> >      /* Verify CRC32, buffer excludes the prefix, CRC32 and trailing byte */
> >      computed_crc32 = av_bswap32(av_crc(av_crc_get_table(AV_CRC_32_IEEE),
> >                                         -1, rpu + 1, actual_rpu_size - 2));
> > 
> >      if (computed_crc32) {
> >          av_log(s->logctx, AV_LOG_ERROR, "RPU CRC mismatch! %"PRIX32"\n",
> >                 computed_crc32);
> > 
> >          if (err_recognition & AV_EF_EXPLODE)
> >              goto fail;
> >      }
> 
> Hi Michael. I like the idea and it's a cool property.
> 
> However the then printed CRC on mismatch is not a useful value, so I'm
> unsure if it's better to simplify here.

teh value printed is the syndrome
(https://en.wikipedia.org/wiki/Decoding_methods#Syndrome_decoding)

Its not a useless value.
What is it usefull for? well
take 2 pieces of different and random data
add a correct CRC at the end of each

now both will give a 0 of course on CRC checking
now flip the same bits in both blocks (whichever and howmany you want)
after that very likely the CRC check will not give 0
but it will give the same value for both blocks
the syndrome only depends on the damage not the data, which
is kind of cool.


> I like having the expected CRC logged here.

how do you know that expected CRC ?

i mean if theres a missmatch you _know_ there is some damage but you do
not know how much or where the damage is, the "expected CRC" stored there
can be the damaged and in fact even the only damaged part or maybe
everything is damaged.


the syndrome can be used for correcting an error if you can narrow the
possible errors down enough

but the CRC itself iam not so sure. Maybe one could google it in hopes
to find a undamaged file but for this to work the CRC would need to be
printed on undamaged files and long enough.

thx

[...]
-- 
Michael     GnuPG fingerprint: 9FF2128B147EF6730BADF133611EC787040B0FAB

The worst form of inequality is to try to make unequal things equal.
-- Aristotle
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 195 bytes
Desc: not available
URL: <https://ffmpeg.org/pipermail/ffmpeg-devel/attachments/20231027/ef925bc4/attachment.sig>