Adding upstream version 124.0.1.upstream/124.0.1

Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>

1 files changed, 638 insertions, 0 deletions

diff --git a/dom/media/ogg/OggCodecState.h b/dom/media/ogg/OggCodecState.h
new file mode 100644
index 0000000000..4133fd0507
--- /dev/null
+++ b/dom/media/ogg/OggCodecState.h
@@ -0,0 +1,638 @@
+/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
+/* vim:set ts=2 sw=2 sts=2 et cindent: */
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+#include "Intervals.h"
+#if !defined(OggCodecState_h_)
+#  define OggCodecState_h_
+
+#  include <ogg/ogg.h>
+// For MOZ_SAMPLE_TYPE_*
+#  include "FlacFrameParser.h"
+#  include "OggRLBoxTypes.h"
+#  include "VideoUtils.h"
+#  include <nsDeque.h>
+#  include <nsTArray.h>
+#  include <nsClassHashtable.h>
+
+#  include <theora/theoradec.h>
+#  include <vorbis/codec.h>
+
+// Uncomment the following to validate that we're predicting the number
+// of Vorbis samples in each packet correctly.
+#  define VALIDATE_VORBIS_SAMPLE_CALCULATION
+#  ifdef VALIDATE_VORBIS_SAMPLE_CALCULATION
+#    include <map>
+#  endif
+
+struct OpusMSDecoder;
+
+namespace mozilla {
+
+inline constexpr char RLBOX_SAFE_DEBUG_ASSERTION[] =
+    "Tainted data is being inspected only for debugging purposes. This is not "
+    "a condition that is critical for safety of the renderer.";
+
+inline constexpr char RLBOX_OGG_STATE_ASSERT_REASON[] =
+    "Tainted data is being inspected only to check the internal state of "
+    "libogg structures. This is not a condition that is critical for safety of "
+    "the renderer.";
+
+inline constexpr char RLBOX_OGG_PAGE_SERIAL_REASON[] =
+    "We are checking the serial of the page. If libogg is operating correctly, "
+    "we check serial numbers to make sure the Firefox renderer is correctly "
+    "passing streams to the correct source. If libogg has been corrupted, it "
+    "could return an incorrect serial, however this would mean that an OGG "
+    "file has intentionally corrupted data across multiple logical streams. "
+    "This however cannot compromise memory safety of the renderer.";
+
+class OpusParser;
+
+struct OggPacketDeletePolicy {
+  void operator()(ogg_packet* aPacket) const {
+    delete[] aPacket->packet;
+    delete aPacket;
+  }
+};
+
+using OggPacketPtr = UniquePtr<ogg_packet, OggPacketDeletePolicy>;
+
+// Deallocates a packet, used in OggPacketQueue below.
+class OggPacketDeallocator : public nsDequeFunctor<ogg_packet> {
+  virtual void operator()(ogg_packet* aPacket) override {
+    OggPacketDeletePolicy()(aPacket);
+  }
+};
+
+// A queue of ogg_packets. When we read a page, we extract the page's packets
+// and buffer them in the owning stream's OggCodecState. This is because
+// if we're skipping up to the next keyframe in very large frame sized videos,
+// there may be several megabytes of data between keyframes, and the
+// ogg_stream_state would end up resizing its buffer every time we added a
+// new 4KB page to the bitstream, which kills performance on Windows. This
+// also gives us the option to timestamp packets rather than decoded
+// frames/samples, reducing the amount of frames/samples we must decode to
+// determine start-time at a particular offset, and gives us finer control
+// over memory usage.
+class OggPacketQueue : private nsDeque<ogg_packet> {
+ public:
+  OggPacketQueue() : nsDeque(new OggPacketDeallocator()) {}
+  ~OggPacketQueue() { Erase(); }
+  bool IsEmpty() { return nsDeque<ogg_packet>::GetSize() == 0; }
+  void Append(OggPacketPtr aPacket);
+  OggPacketPtr PopFront() {
+    return OggPacketPtr(nsDeque<ogg_packet>::PopFront());
+  }
+  ogg_packet* PeekFront() { return nsDeque<ogg_packet>::PeekFront(); }
+  OggPacketPtr Pop() { return OggPacketPtr(nsDeque<ogg_packet>::Pop()); }
+  ogg_packet* operator[](size_t aIndex) const {
+    return nsDeque<ogg_packet>::ObjectAt(aIndex);
+  }
+  size_t Length() const { return nsDeque<ogg_packet>::GetSize(); }
+  void PushFront(OggPacketPtr aPacket) {
+    nsDeque<ogg_packet>::PushFront(aPacket.release());
+  }
+  void Erase() { nsDeque<ogg_packet>::Erase(); }
+};
+
+// Encapsulates the data required for decoding an ogg bitstream and for
+// converting granulepos to timestamps.
+class OggCodecState {
+ public:
+  using MetadataTags = mozilla::MetadataTags;
+  // Ogg types we know about
+  enum CodecType {
+    TYPE_VORBIS = 0,
+    TYPE_THEORA,
+    TYPE_OPUS,
+    TYPE_SKELETON,
+    TYPE_FLAC,
+    TYPE_UNKNOWN
+  };
+
+  virtual ~OggCodecState();
+
+  // Factory for creating nsCodecStates. Use instead of constructor.
+  // aPage should be a beginning-of-stream page.
+  static UniquePtr<OggCodecState> Create(rlbox_sandbox_ogg* aSandbox,
+                                         tainted_opaque_ogg<ogg_page*> aPage,
+                                         uint32_t aSerial);
+
+  virtual CodecType GetType() { return TYPE_UNKNOWN; }
+
+  // Reads a header packet. Returns false if an error was encountered
+  // while reading header packets. Callers should check DoneReadingHeaders()
+  // to determine if the last header has been read.
+  // This function takes ownership of the packet and is responsible for
+  // releasing it or queuing it for later processing.
+  virtual bool DecodeHeader(OggPacketPtr aPacket) {
+    return (mDoneReadingHeaders = true);
+  }
+
+  // Build a hash table with tag metadata parsed from the stream.
+  virtual UniquePtr<MetadataTags> GetTags() { return nullptr; }
+
+  using TimeUnit = media::TimeUnit;
+
+  // Returns the end time that a granulepos represents.
+  virtual TimeUnit Time(int64_t aGranulepos) { return TimeUnit::Invalid(); }
+
+  // Returns the start time that a granulepos represents.
+  virtual TimeUnit StartTime(int64_t aGranulepos) {
+    return TimeUnit::Invalid();
+  }
+
+  // Returns the duration of the given packet, if it can be determined.
+  virtual TimeUnit PacketDuration(ogg_packet* aPacket) {
+    return TimeUnit::Invalid();
+  }
+
+  // Returns the start time of the given packet, if it can be determined.
+  virtual TimeUnit PacketStartTime(ogg_packet* aPacket) {
+    if (aPacket->granulepos < 0) {
+      return TimeUnit::Invalid();
+    }
+    TimeUnit endTime = Time(aPacket->granulepos);
+    TimeUnit duration = PacketDuration(aPacket);
+    // When looping, it's possible to find header packets there because the
+    // demuxing restarts from the beginning of the stream. Just skip and retry
+    // with the next packet.
+    if (!duration.IsValid()) {
+      return TimeUnit::Invalid();
+    }
+    if (duration > endTime) {
+      // Audio preskip may eat a whole packet or more.
+      return TimeUnit::Zero();
+    }
+    return endTime - duration;
+  }
+
+  // Initializes the codec state.
+  virtual bool Init() { return true; }
+
+  // Returns true when this bitstream has finished reading all its
+  // header packets.
+  bool DoneReadingHeaders() { return mDoneReadingHeaders; }
+
+  // Deactivates the bitstream. Only the primary video and audio bitstreams
+  // should be active.
+  void Deactivate() {
+    mActive = false;
+    mDoneReadingHeaders = true;
+    Reset();
+  }
+
+  // Resets decoding state.
+  virtual nsresult Reset();
+
+  // Returns true if the OggCodecState thinks this packet is a header
+  // packet. Note this does not verify the validity of the header packet,
+  // it just guarantees that the packet is marked as a header packet (i.e.
+  // it is definintely not a data packet). Do not use this to identify
+  // streams, use it to filter header packets from data packets while
+  // decoding.
+  virtual bool IsHeader(ogg_packet* aPacket) { return false; }
+
+  // Returns true if the OggCodecState thinks this packet represents a
+  // keyframe, from which decoding can restart safely.
+  virtual bool IsKeyframe(ogg_packet* aPacket) { return true; }
+
+  // Returns true if there is a packet available for dequeueing in the stream.
+  bool IsPacketReady();
+
+  // Returns the next raw packet in the stream, or nullptr if there are no more
+  // packets buffered in the packet queue. More packets can be buffered by
+  // inserting one or more pages into the stream by calling PageIn().
+  // The packet will have a valid granulepos.
+  OggPacketPtr PacketOut();
+
+  // Returns the next raw packet in the stream, or nullptr if there are no more
+  // packets buffered in the packet queue, without consuming it.
+  // The packet will have a valid granulepos.
+  ogg_packet* PacketPeek();
+
+  // Moves all raw packets from aOther to the front of the current packet queue.
+  void PushFront(OggPacketQueue&& aOther);
+
+  // Returns the next packet in the stream as a MediaRawData, or nullptr
+  // if there are no more packets buffered in the packet queue. More packets
+  // can be buffered by inserting one or more pages into the stream by calling
+  // PageIn(). The packet will have a valid granulepos.
+  virtual already_AddRefed<MediaRawData> PacketOutAsMediaRawData();
+
+  // Extracts all packets from the page, and inserts them into the packet
+  // queue. They can be extracted by calling PacketOut(). Packets from an
+  // inactive stream are not buffered, i.e. this call has no effect for
+  // inactive streams. Multiple pages may need to be inserted before
+  // PacketOut() starts to return packets, as granulepos may need to be
+  // captured.
+  virtual nsresult PageIn(tainted_opaque_ogg<ogg_page*> aPage);
+
+  // Returns the maximum number of microseconds which a keyframe can be offset
+  // from any given interframe.b
+  virtual TimeUnit MaxKeyframeOffset() { return TimeUnit::Zero(); }
+  // Public access for mTheoraInfo.keyframe_granule_shift
+  virtual int32_t KeyFrameGranuleJobs() { return 0; }
+
+  // Number of packets read.
+  uint64_t mPacketCount;
+
+  // Serial number of the bitstream.
+  uint32_t mSerial;
+
+  // Ogg specific state.
+  tainted_opaque_ogg<ogg_stream_state*> mState;
+
+  // Queue of as yet undecoded packets. Packets are guaranteed to have
+  // a valid granulepos.
+  OggPacketQueue mPackets;
+
+  // Is the bitstream active; whether we're decoding and playing this bitstream.
+  bool mActive;
+
+  // True when all headers packets have been read.
+  bool mDoneReadingHeaders;
+
+  // All invocations of libogg functionality from the demuxer is sandboxed using
+  // wasm library sandboxes on supported platforms. This is the sandbox
+  // instance.
+  rlbox_sandbox_ogg* mSandbox;
+
+  virtual const TrackInfo* GetInfo() const {
+    MOZ_RELEASE_ASSERT(false, "Can't be called directly");
+    return nullptr;
+  }
+
+  // Validation utility for vorbis-style tag names.
+  static bool IsValidVorbisTagName(nsCString& aName);
+
+  // Utility method to parse and add a vorbis-style comment
+  // to a metadata hash table. Most Ogg-encapsulated codecs
+  // use the vorbis comment format for metadata.
+  static bool AddVorbisComment(UniquePtr<MetadataTags>& aTags,
+                               const char* aComment, uint32_t aLength);
+
+ protected:
+  // Constructs a new OggCodecState. aActive denotes whether the stream is
+  // active. For streams of unsupported or unknown types, aActive should be
+  // false.
+  OggCodecState(rlbox_sandbox_ogg* aSandbox,
+                tainted_opaque_ogg<ogg_page*> aBosPage, uint32_t aSerial,
+                bool aActive);
+
+  // Deallocates all packets stored in mUnstamped, and clears the array.
+  void ClearUnstamped();
+
+  // Extracts packets out of mState until a data packet with a non -1
+  // granulepos is encountered, or no more packets are readable. Header
+  // packets are pushed into the packet queue immediately, and data packets
+  // are buffered in mUnstamped. Once a non -1 granulepos packet is read
+  // the granulepos of the packets in mUnstamped can be inferred, and they
+  // can be pushed over to mPackets. Used by PageIn() implementations in
+  // subclasses.
+  nsresult PacketOutUntilGranulepos(bool& aFoundGranulepos);
+
+  // Temporary buffer in which to store packets while we're reading packets
+  // in order to capture granulepos.
+  nsTArray<OggPacketPtr> mUnstamped;
+
+  bool SetCodecSpecificConfig(MediaByteBuffer* aBuffer,
+                              OggPacketQueue& aHeaders);
+
+ private:
+  bool InternalInit();
+};
+
+class VorbisState : public OggCodecState {
+ public:
+  explicit VorbisState(rlbox_sandbox_ogg* aSandbox,
+                       tainted_opaque_ogg<ogg_page*> aBosPage,
+                       uint32_t aSerial);
+  virtual ~VorbisState();
+
+  CodecType GetType() override { return TYPE_VORBIS; }
+  bool DecodeHeader(OggPacketPtr aPacket) override;
+  TimeUnit Time(int64_t aGranulepos) override;
+  TimeUnit PacketDuration(ogg_packet* aPacket) override;
+  bool Init() override;
+  nsresult Reset() override;
+  bool IsHeader(ogg_packet* aPacket) override;
+  nsresult PageIn(tainted_opaque_ogg<ogg_page*> aPage) override;
+  const TrackInfo* GetInfo() const override { return &mInfo; }
+
+  // Return a hash table with tag metadata.
+  UniquePtr<MetadataTags> GetTags() override;
+
+ private:
+  AudioInfo mInfo;
+  vorbis_info mVorbisInfo = {};
+  vorbis_comment mComment = {};
+  vorbis_dsp_state mDsp = {};
+  vorbis_block mBlock = {};
+  OggPacketQueue mHeaders;
+
+  // Returns the end time that a granulepos represents.
+  static TimeUnit Time(vorbis_info* aInfo, int64_t aGranulePos);
+
+  // Reconstructs the granulepos of Vorbis packets stored in the mUnstamped
+  // array.
+  void ReconstructVorbisGranulepos();
+
+  // The "block size" of the previously decoded Vorbis packet, or 0 if we've
+  // not yet decoded anything. This is used to calculate the number of samples
+  // in a Vorbis packet, since each Vorbis packet depends on the previous
+  // packet while being decoded.
+  long mPrevVorbisBlockSize;
+
+  // Granulepos (end sample) of the last decoded Vorbis packet. This is used
+  // to calculate the Vorbis granulepos when we don't find a granulepos to
+  // back-propagate from.
+  int64_t mGranulepos;
+
+#  ifdef VALIDATE_VORBIS_SAMPLE_CALCULATION
+  // When validating that we've correctly predicted Vorbis packets' number
+  // of samples, we store each packet's predicted number of samples in this
+  // map, and verify we decode the predicted number of samples.
+  std::map<ogg_packet*, long> mVorbisPacketSamples;
+#  endif
+
+  // Records that aPacket is predicted to have aSamples samples.
+  // This function has no effect if VALIDATE_VORBIS_SAMPLE_CALCULATION
+  // is not defined.
+  void RecordVorbisPacketSamples(ogg_packet* aPacket, long aSamples);
+
+  // Verifies that aPacket has had its number of samples predicted.
+  // This function has no effect if VALIDATE_VORBIS_SAMPLE_CALCULATION
+  // is not defined.
+  void AssertHasRecordedPacketSamples(ogg_packet* aPacket);
+
+ public:
+  // Asserts that the number of samples predicted for aPacket is aSamples.
+  // This function has no effect if VALIDATE_VORBIS_SAMPLE_CALCULATION
+  // is not defined.
+  void ValidateVorbisPacketSamples(ogg_packet* aPacket, long aSamples);
+};
+
+// Returns 1 if the Theora info struct is decoding a media of Theora
+// version (maj,min,sub) or later, otherwise returns 0.
+int TheoraVersion(th_info* info, unsigned char maj, unsigned char min,
+                  unsigned char sub);
+
+class TheoraState : public OggCodecState {
+ public:
+  explicit TheoraState(rlbox_sandbox_ogg* aSandbox,
+                       tainted_opaque_ogg<ogg_page*> aBosPage,
+                       uint32_t aSerial);
+  virtual ~TheoraState();
+
+  CodecType GetType() override { return TYPE_THEORA; }
+  bool DecodeHeader(OggPacketPtr aPacket) override;
+  TimeUnit Time(int64_t aGranulepos) override;
+  TimeUnit StartTime(int64_t aGranulepos) override;
+  TimeUnit PacketDuration(ogg_packet* aPacket) override;
+  bool Init() override;
+  nsresult Reset() override;
+  bool IsHeader(ogg_packet* aPacket) override;
+  bool IsKeyframe(ogg_packet* aPacket) override;
+  nsresult PageIn(tainted_opaque_ogg<ogg_page*> aPage) override;
+  const TrackInfo* GetInfo() const override { return &mInfo; }
+  TimeUnit MaxKeyframeOffset() override;
+  int32_t KeyFrameGranuleJobs() override {
+    return mTheoraInfo.keyframe_granule_shift;
+  }
+
+ private:
+  // Returns the end time that a granulepos represents.
+  static TimeUnit Time(th_info* aInfo, int64_t aGranulePos);
+
+  th_info mTheoraInfo = {};
+  th_comment mComment = {};
+  th_setup_info* mSetup;
+  th_dec_ctx* mCtx;
+
+  VideoInfo mInfo;
+  OggPacketQueue mHeaders;
+
+  // Reconstructs the granulepos of Theora packets stored in the
+  // mUnstamped array. mUnstamped must be filled with consecutive packets from
+  // the stream, with the last packet having a known granulepos. Using this
+  // known granulepos, and the known frame numbers, we recover the granulepos
+  // of all frames in the array. This enables us to determine their timestamps.
+  void ReconstructTheoraGranulepos();
+};
+
+class OpusState : public OggCodecState {
+ public:
+  explicit OpusState(rlbox_sandbox_ogg* aSandbox,
+                     tainted_opaque_ogg<ogg_page*> aBosPage, uint32_t aSerial);
+  virtual ~OpusState();
+
+  CodecType GetType() override { return TYPE_OPUS; }
+  bool DecodeHeader(OggPacketPtr aPacket) override;
+  TimeUnit Time(int64_t aGranulepos) override;
+  TimeUnit PacketDuration(ogg_packet* aPacket) override;
+  bool Init() override;
+  nsresult Reset() override;
+  nsresult Reset(bool aStart);
+  bool IsHeader(ogg_packet* aPacket) override;
+  nsresult PageIn(tainted_opaque_ogg<ogg_page*> aPage) override;
+  already_AddRefed<MediaRawData> PacketOutAsMediaRawData() override;
+  const TrackInfo* GetInfo() const override { return &mInfo; }
+
+  // Returns the end time that a granulepos represents.
+  static TimeUnit Time(int aPreSkip, int64_t aGranulepos);
+
+  // Construct and return a table of tags from the metadata header.
+  UniquePtr<MetadataTags> GetTags() override;
+
+ private:
+  UniquePtr<OpusParser> mParser;
+  OpusMSDecoder* mDecoder;
+
+  // Granule position (end sample) of the last decoded Opus packet. This is
+  // used to calculate the amount we should trim from the last packet.
+  int64_t mPrevPacketGranulepos;
+
+  // Reconstructs the granulepos of Opus packets stored in the
+  // mUnstamped array. mUnstamped must be filled with consecutive packets from
+  // the stream, with the last packet having a known granulepos. Using this
+  // known granulepos, and the known frame numbers, we recover the granulepos
+  // of all frames in the array. This enables us to determine their timestamps.
+  bool ReconstructOpusGranulepos();
+
+  // Granule position (end sample) of the last decoded Opus page. This is
+  // used to calculate the Opus per-packet granule positions on the last page,
+  // where we may need to trim some samples from the end.
+  int64_t mPrevPageGranulepos;
+  AudioInfo mInfo;
+  OggPacketQueue mHeaders;
+};
+
+// Constructs a 32bit version number out of two 16 bit major,minor
+// version numbers.
+#  define SKELETON_VERSION(major, minor) (((major) << 16) | (minor))
+
+enum EMsgHeaderType {
+  eContentType,
+  eRole,
+  eName,
+  eLanguage,
+  eTitle,
+  eDisplayHint,
+  eAltitude,
+  eTrackOrder,
+  eTrackDependencies
+};
+
+struct FieldPatternType {
+  const char* mPatternToRecognize;
+  EMsgHeaderType mMsgHeaderType;
+};
+
+// Stores the message information for different logical bitstream.
+struct MessageField {
+  nsClassHashtable<nsUint32HashKey, nsCString> mValuesStore;
+};
+
+class SkeletonState : public OggCodecState {
+ public:
+  explicit SkeletonState(rlbox_sandbox_ogg* aSandbox,
+                         tainted_opaque_ogg<ogg_page*> aBosPage,
+                         uint32_t aSerial);
+  ~SkeletonState();
+
+  nsClassHashtable<nsUint32HashKey, MessageField> mMsgFieldStore;
+
+  CodecType GetType() override { return TYPE_SKELETON; }
+  bool DecodeHeader(OggPacketPtr aPacket) override;
+  TimeUnit Time(int64_t aGranulepos) override { return TimeUnit::Invalid(); }
+  bool IsHeader(ogg_packet* aPacket) override { return true; }
+
+  // Return true if the given time (in milliseconds) is within
+  // the presentation time defined in the skeleton track.
+  bool IsPresentable(int64_t aTime) { return aTime >= mPresentationTime; }
+
+  // Stores the offset of the page on which a keyframe starts,
+  // and its presentation time.
+  class nsKeyPoint {
+   public:
+    nsKeyPoint() : mOffset(INT64_MAX), mTime(TimeUnit::Invalid()) {}
+
+    nsKeyPoint(int64_t aOffset, TimeUnit aTime)
+        : mOffset(aOffset), mTime(aTime) {}
+
+    // Offset from start of segment/link-in-the-chain in bytes.
+    int64_t mOffset;
+
+    // Presentation time
+    TimeUnit mTime;
+
+    bool IsNull() { return mOffset == INT64_MAX && !mTime.IsValid(); }
+  };
+
+  // Stores a keyframe's byte-offset, presentation time and the serialno
+  // of the stream it belongs to.
+  class nsSeekTarget {
+   public:
+    nsSeekTarget() : mSerial(0) {}
+    nsKeyPoint mKeyPoint;
+    uint32_t mSerial;
+    bool IsNull() { return mKeyPoint.IsNull() && mSerial == 0; }
+  };
+
+  // Determines from the seek index the keyframe which you must seek back to
+  // in order to get all keyframes required to render all streams with
+  // serialnos in aTracks, at time aTarget.
+  nsresult IndexedSeekTarget(const TimeUnit& aTarget,
+                             nsTArray<uint32_t>& aTracks,
+                             nsSeekTarget& aResult);
+
+  bool HasIndex() const { return mIndex.Count() > 0; }
+
+  // Returns the duration of the active tracks in the media, if we have
+  // an index. aTracks must be filled with the serialnos of the active tracks.
+  // The duration is calculated as the greatest end time of all active tracks,
+  // minus the smalled start time of all the active tracks.
+  nsresult GetDuration(const nsTArray<uint32_t>& aTracks, TimeUnit& aDuration);
+
+ private:
+  // Decodes an index packet. Returns false on failure.
+  bool DecodeIndex(ogg_packet* aPacket);
+  // Decodes an fisbone packet. Returns false on failure.
+  bool DecodeFisbone(ogg_packet* aPacket);
+
+  // Gets the keypoint you must seek to in order to get the keyframe required
+  // to render the stream at time aTarget on stream with serial aSerialno.
+  nsresult IndexedSeekTargetForTrack(uint32_t aSerialno,
+                                     const TimeUnit& aTarget,
+                                     nsKeyPoint& aResult);
+
+  // Version of the decoded skeleton track, as per the SKELETON_VERSION macro.
+  uint32_t mVersion;
+
+  // Presentation time of the resource in milliseconds
+  int64_t mPresentationTime;
+
+  // Length of the resource in bytes.
+  int64_t mLength;
+
+  // Stores the keyframe index and duration information for a particular
+  // stream.
+  class nsKeyFrameIndex {
+   public:
+    nsKeyFrameIndex(const TimeUnit& aStartTime, const TimeUnit& aEndTime)
+        : mStartTime(aStartTime), mEndTime(aEndTime) {
+      MOZ_COUNT_CTOR(nsKeyFrameIndex);
+    }
+
+    MOZ_COUNTED_DTOR(nsKeyFrameIndex)
+
+    void Add(int64_t aOffset, const TimeUnit& aTime) {
+      mKeyPoints.AppendElement(nsKeyPoint(aOffset, aTime));
+    }
+
+    const nsKeyPoint& Get(uint32_t aIndex) const { return mKeyPoints[aIndex]; }
+
+    uint32_t Length() const { return mKeyPoints.Length(); }
+
+    // Presentation time of the first sample in this stream in usecs.
+    const TimeUnit mStartTime;
+
+    // End time of the last sample in this stream in usecs.
+    const TimeUnit mEndTime;
+
+   private:
+    nsTArray<nsKeyPoint> mKeyPoints;
+  };
+
+  // Maps Ogg serialnos to the index-keypoint list.
+  nsClassHashtable<nsUint32HashKey, nsKeyFrameIndex> mIndex;
+};
+
+class FlacState : public OggCodecState {
+ public:
+  explicit FlacState(rlbox_sandbox_ogg* aSandbox,
+                     tainted_opaque_ogg<ogg_page*> aBosPage, uint32_t aSerial);
+
+  CodecType GetType() override { return TYPE_FLAC; }
+  bool DecodeHeader(OggPacketPtr aPacket) override;
+  TimeUnit Time(int64_t aGranulepos) override;
+  TimeUnit PacketDuration(ogg_packet* aPacket) override;
+  bool IsHeader(ogg_packet* aPacket) override;
+  nsresult PageIn(tainted_opaque_ogg<ogg_page*> aPage) override;
+
+  // Return a hash table with tag metadata.
+  UniquePtr<MetadataTags> GetTags() override;
+
+  const TrackInfo* GetInfo() const override;
+
+ private:
+  bool ReconstructFlacGranulepos(void);
+
+  FlacFrameParser mParser;
+};
+
+}  // namespace mozilla
+
+#endif