4.7.1. primary_color_count
primary_color_count
is defined as:¶
1 + ( chroma_planes ? 2 : 0 ) + ( extra_plane ? 1 : 0 )¶
Internet-Draft | FFV1 | August 2020 |
Niedermayer, et al. | Expires 22 February 2021 | [Page] |
This document defines FFV1, a lossless intra-frame video encoding format. FFV1 is designed to efficiently compress video data in a variety of pixel formats. Compared to uncompressed video, FFV1 offers storage compression, frame fixity, and self-description, which makes FFV1 useful as a preservation or intermediate video format.¶
This Internet-Draft is submitted in full conformance with the provisions of BCP 78 and BCP 79.¶
Internet-Drafts are working documents of the Internet Engineering Task Force (IETF). Note that other groups may also distribute working documents as Internet-Drafts. The list of current Internet-Drafts is at https://datatracker.ietf.org/drafts/current/.¶
Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress."¶
This Internet-Draft will expire on 22 February 2021.¶
Copyright (c) 2020 IETF Trust and the persons identified as the document authors. All rights reserved.¶
This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (https://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.¶
This document describes FFV1, a lossless video encoding format. The design of FFV1 considers the storage of image characteristics, data fixity, and the optimized use of encoding time and storage requirements. FFV1 is designed to support a wide range of lossless video applications such as long-term audiovisual preservation, scientific imaging, screen recording, and other video encoding scenarios that seek to avoid the generational loss of lossy video encodings.¶
This document defines version 0, 1 and 3 of FFV1. The distinctions of the versions are provided throughout the document, but in summary:¶
Version 0 of FFV1 was the original implementation of FFV1 and has been in non-experimental use since April 14, 2006 [FFV1_V0].¶
Version 1 of FFV1 adds support of more video bit depths and has been in use since April 24, 2009 [FFV1_V1].¶
Version 2 of FFV1 only existed in experimental form and is not described by this document, but is available as a LyX file at https://github.com/FFmpeg/FFV1/blob/8ad772b6d61c3dd8b0171979a2cd9f11924d5532/ffv1.lyx.¶
Version 3 of FFV1 adds several features such as increased description of the characteristics of the encoding images and embedded CRC data to support fixity verification of the encoding. Version 3 has been in non-experimental use since August 17, 2013 [FFV1_V3].¶
This document assumes familiarity with mathematical and coding concepts such as Range coding [range-coding] and YCbCr color spaces [YCbCr].¶
This specification describes the valid bitstream and how to decode such valid bitstream. Bitstreams not conforming to this specification or how they are handled is outside this specification. A decoder could reject every invalid bitstream or attempt to perform error concealment or re-download or use a redundant copy of the invalid part or any other action it deems appropriate.¶
The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in BCP 14 [RFC2119] [RFC8174] when, and only when, they appear in all capitals, as shown here.¶
Container
: Format that encapsulates Frames
(see Section 4.4) and (when required) a Configuration Record
into a bitstream.¶
Sample
: The smallest addressable representation of a color component or a luma component in a Frame
. Examples of Sample
are Luma (Y), Blue-difference Chroma (Cb), Red-difference Chroma (Cr), Transparency, Red, Green, and Blue.¶
Plane
: A discrete component of a static image comprised of Samples
that represent a specific quantification of Samples
of that image.¶
Pixel
: The smallest addressable representation of a color in a Frame
. It is composed of one or more Samples
.¶
ESC
: An ESCape symbol to indicate that the symbol to be stored is too large for normal storage and that an alternate storage method is used.¶
MSB
: Most Significant Bit, the bit that can cause the largest change in magnitude of the symbol.¶
VLC
: Variable Length Code, a code that maps source symbols to a variable number of bits.¶
RGB
: A reference to the method of storing the value of a Pixel
by using three numeric values that represent Red, Green, and Blue.¶
YCbCr
: A reference to the method of storing the value of a Pixel
by using three numeric values that represent the luma of the Pixel
(Y) and the chroma of the Pixel
(Cb and Cr). YCbCr word is used for historical reasons and currently references any color space relying on 1 luma Sample
and 2 chroma Samples
, e.g. YCbCr, YCgCo or ICtCp. The exact meaning of the three numeric values is unspecified.¶
The FFV1 bitstream is described in this document using pseudo-code. Note that the pseudo-code is used for clarity in order to illustrate the structure of FFV1 and not intended to specify any particular implementation. The pseudo-code used is based upon the C programming language [ISO.9899.1990] and uses its if/else
, while
and for
keywords as well as functions defined within this document.¶
In some instances, pseudo-code is presented in a two-column format such as shown in Figure 1. In this form the type
column provides a symbol as defined in Table 4 that defines the storage of the data referenced in that same line of pseudo-code.¶
Note: the operators and the order of precedence are the same as used in the C programming language [ISO.9899.2018], with the exception of >>
(removal of implementation defined behavior) and ^
(power instead of XOR) operators which are re-defined within this section.¶
a + b
means a plus b.¶
a - b
means a minus b.¶
-a
means negation of a.¶
a * b
means a multiplied by b.¶
a / b
means a divided by b.¶
a ^ b
means a raised to the b-th power.¶
a & b
means bit-wise "and" of a and b.¶
a | b
means bit-wise "or" of a and b.¶
a >> b
means arithmetic right shift of two's complement integer representation of a by b binary digits. This is equivalent to dividing a by 2, b times, with rounding toward negative infinity.¶
a << b
means arithmetic left shift of two's complement integer representation of a by b binary digits.¶
a = b
means a is assigned b.¶
a++
is equivalent to a is assigned a + 1.¶
a--
is equivalent to a is assigned a - 1.¶
a += b
is equivalent to a is assigned a + b.¶
a -= b
is equivalent to a is assigned a - b.¶
a *= b
is equivalent to a is assigned a * b.¶
a > b
means a is greater than b.¶
a >= b
means a is greater than or equal to b.¶
a < b
means a is less than b.¶
a <= b
means a is less than or equal b.¶
a == b
means a is equal to b.¶
a != b
means a is not equal to b.¶
a && b
means Boolean logical "and" of a and b.¶
a || b
means Boolean logical "or" of a and b.¶
!a
means Boolean logical "not" of a.¶
a ? b : c
if a is true, then b, otherwise c.¶
floor(a)
means the largest integer less than or equal to a.¶
ceil(a)
means the smallest integer greater than or equal to a.¶
sign(a)
extracts the sign of a number, i.e. if a < 0 then -1, else if a > 0 then 1, else 0.¶
abs(a)
means the absolute value of a, i.e. abs(a)
= sign(a) * a
.¶
log2(a)
means the base-two logarithm of a.¶
min(a,b)
means the smallest of two values a and b.¶
max(a,b)
means the largest of two values a and b.¶
median(a,b,c)
means the numerical middle value in a data set of a, b, and c, i.e. a+b+c-min(a,b,c)-max(a,b,c).¶
A <== B
means B implies A.¶
A <==> B
means A <== B , B <== A.¶
ab means the b-th value of a sequence of a¶
ab,c means the 'b,c'-th value of a sequence of a¶
When order of precedence is not indicated explicitly by use of parentheses, operations are evaluated in the following order (from top to bottom, operations of same precedence being evaluated from left to right). This order of operations is based on the order of operations used in Standard C.¶
a++, a-- !a, -a a ^ b a * b, a / b, a % b a + b, a - b a << b, a >> b a < b, a <= b, a > b, a >= b a == b, a != b a & b a | b a && b a || b a ? b : c a = b, a += b, a -= b, a *= b¶
NumBytes
is a non-negative integer that expresses the size in 8-bit octets of a particular FFV1 Configuration Record
or Frame
. FFV1 relies on its Container
to store the NumBytes
values; see Section 4.3.3.¶
remaining_bits_in_bitstream( )
means the count of remaining bits after the pointer in that Configuration Record
or Frame
. It is computed from the NumBytes
value multiplied by 8 minus the count of bits of that Configuration Record
or Frame
already read by the bitstream parser.¶
remaining_symbols_in_syntax( )
is true as long as the RangeCoder has not consumed all the given input bytes.¶
byte_aligned( )
is true if remaining_bits_in_bitstream( NumBytes )
is a multiple of 8, otherwise false.¶
For each Slice
(as described in Section 4.5) of a Frame
, the Planes
, Lines
, and Samples
are coded in an order determined by the Color Space
(see Section 3.7). Each Sample
is predicted by the median predictor as described in Section 3.3 from other Samples
within the same Plane
and the difference is stored using the method described in Section 3.8.¶
A border is assumed for each coded Slice
for the purpose of the median predictor and context according to the following rules:¶
Samples
to the left of the coded slice is assumed as identical to the Samples
of the leftmost column of the coded slice shifted down by one row. The value of the topmost Sample
of the column of Samples
to the left of the coded slice is assumed to be 0
¶
Samples
to the right of the coded slice is assumed as identical to the Samples
of the rightmost column of the coded slice¶
Samples
to the left of the coded slice and two rows of Samples
above the coded slice are assumed to be 0
¶
Figure 2 depicts a slice of 9 Samples
a,b,c,d,e,f,g,h,i
in a 3x3 arrangement along with its assumed border.¶
Relative to any Sample
X
, six other relatively positioned Samples
from the coded Samples
and presumed border are identified according to the labels used in Figure 3. The labels for these relatively positioned Samples
are used within the median predictor and context.¶
The labels for these relative Samples
are made of the first letters of the words Top, Left and Right.¶
The prediction for any Sample
value at position X
may be computed based upon the relative neighboring values of l
, t
, and tl
via this equation:¶
median(l, t, l + t - tl)¶
Note, this prediction template is also used in [ISO.14495-1.1999] and [HuffYUV].¶
Exception for the median predictor:
if colorspace_type == 0 && bits_per_raw_sample == 16 && ( coder_type == 1 || coder_type == 2 )
, the following median predictor MUST be used:¶
median(left16s, top16s, left16s + top16s - diag16s)¶
where:¶
left16s = l >= 32768 ? ( l - 65536 ) : l top16s = t >= 32768 ? ( t - 65536 ) : t diag16s = tl >= 32768 ? ( tl - 65536 ) : tl¶
Background: a two's complement signed 16-bit signed integer was used for storing Sample
values in all known implementations of FFV1 bitstream. So in some circumstances, the most significant bit was wrongly interpreted (used as a sign bit instead of the 16th bit of an unsigned integer). Note that when the issue was discovered, the only configuration of all known implementations being impacted is 16-bit YCbCr with no Pixel transformation with Range Coder coder, as other potentially impacted configurations (e.g. 15/16-bit JPEG2000-RCT with Range Coder coder, or 16-bit content with Golomb Rice coder) were implemented nowhere [ISO.15444-1.2016]. In the meanwhile, 16-bit JPEG2000-RCT with Range Coder coder was implemented without this issue in one implementation and validated by one conformance checker. It is expected (to be confirmed) to remove this exception for the median predictor in the next version of the FFV1 bitstream.¶
The FFV1 bitstream contains one or more Quantization Table Sets. Each Quantization Table Set contains exactly 5 Quantization Tables with each Quantization Table corresponding to one of the five Quantized Sample Differences. For each Quantization Table, both the number of quantization steps and their distribution are stored in the FFV1 bitstream; each Quantization Table has exactly 256 entries, and the 8 least significant bits of the Quantized Sample Difference are used as index:¶
In this formula, i
is the Quantization Table Set index, j
is the Quantized Table index, k
the Quantized Sample Difference.¶
Relative to any Sample
X
, the Quantized Sample Differences L-l
, l-tl
, tl-t
, T-t
, and t-tr
are used as context:¶
If context >= 0
then context
is used and the difference between the Sample
and its predicted value is encoded as is, else -context
is used and the difference between the Sample
and its predicted value is encoded with a flipped sign.¶
For each Plane
of each slice, a Quantization Table Set is selected from an index:¶
Plane
, quant_table_set_index[ 0 ]
index is used¶
Planes
, quant_table_set_index[ 1 ]
index is used¶
Plane
, quant_table_set_index[ (version <= 3 || chroma_planes) ? 2 : 1 ]
index is used¶
Background: in first implementations of FFV1 bitstream, the index for Cb and Cr Planes
was stored even if it is not used (chroma_planes set to 0), this index is kept for version
<= 3 in order to keep compatibility with FFV1 bitstreams in the wild.¶
FFV1 supports several color spaces. The count of allowed coded planes and the meaning of the extra Plane
are determined by the selected color space.¶
The FFV1 bitstream interleaves data in an order determined by the color space. In YCbCr for each Plane
, each Line
is coded from top to bottom and for each Line
, each Sample
is coded from left to right. In JPEG2000-RCT for each Line
from top to bottom, each Plane
is coded and for each Plane
, each Sample
is encoded from left to right.¶
This color space allows 1 to 4 Planes
.¶
The Cb and Cr Planes
are optional, but if used then MUST be used together. Omitting the Cb and Cr Planes
codes the frames in grayscale without color data.¶
An optional transparency Plane
can be used to code transparency data.¶
An FFV1 Frame
using YCbCr MUST use one of the following arrangements:¶
The Y Plane
MUST be coded first. If the Cb and Cr Planes
are used then they MUST be coded after the Y Plane
. If a transparency Plane
is used, then it MUST be coded last.¶
This color space allows 3 or 4 Planes
.¶
An optional transparency Plane
can be used to code transparency data.¶
JPEG2000-RCT is a Reversible Color Transform that codes RGB (red, green, blue) Planes
losslessly in a modified YCbCr color space [ISO.15444-1.2016]. Reversible Pixel transformations between YCbCr and RGB use the following formulae.¶
Exception for the JPEG2000-RCT conversion: if bits_per_raw_sample
is between 9 and 15 inclusive and extra_plane
is 0, the following formulae for reversible conversions between YCbCr and RGB MUST be used instead of the ones above:¶
Background: At the time of this writing, in all known implementations of FFV1 bitstream, when bits_per_raw_sample
was between 9 and 15 inclusive and extra_plane
is 0, GBR Planes
were used as BGR Planes
during both encoding and decoding. In the meanwhile, 16-bit JPEG2000-RCT was implemented without this issue in one implementation and validated by one conformance checker. Methods to address this exception for the transform are under consideration for the next version of the FFV1 bitstream.¶
Cb and Cr are positively offset by 1 << bits_per_raw_sample
after the conversion from RGB to the modified YCbCr and are negatively offseted by the same value before the conversion from the modified YCbCr to RGB, in order to have only non-negative values after the conversion.¶
When FFV1 uses the JPEG2000-RCT, the horizontal Lines
are interleaved to improve caching efficiency since it is most likely that the JPEG2000-RCT will immediately be converted to RGB during decoding. The interleaved coding order is also Y, then Cb, then Cr, and then if used transparency.¶
As an example, a Frame
that is two Pixels
wide and two Pixels
high, could comprise the following structure:¶
+------------------------+------------------------+ | Pixel(1,1) | Pixel(2,1) | | Y(1,1) Cb(1,1) Cr(1,1) | Y(2,1) Cb(2,1) Cr(2,1) | +------------------------+------------------------+ | Pixel(1,2) | Pixel(2,2) | | Y(1,2) Cb(1,2) Cr(1,2) | Y(2,2) Cb(2,2) Cr(2,2) | +------------------------+------------------------+¶
In JPEG2000-RCT, the coding order would be left to right and then top to bottom, with values interleaved by Lines
and stored in this order:¶
Y(1,1) Y(2,1) Cb(1,1) Cb(2,1) Cr(1,1) Cr(2,1) Y(1,2) Y(2,2) Cb(1,2) Cb(2,2) Cr(1,2) Cr(2,2)¶
Instead of coding the n+1 bits of the Sample Difference with Huffman or Range coding (or n+2 bits, in the case of JPEG2000-RCT), only the n (or n+1, in the case of JPEG2000-RCT) least significant bits are used, since this is sufficient to recover the original Sample
. In the equation below, the term "bits" represents bits_per_raw_sample + 1
for JPEG2000-RCT or bits_per_raw_sample
otherwise:¶
Early experimental versions of FFV1 used the CABAC Arithmetic coder from H.264 as defined in [ISO.14496-10.2014] but due to the uncertain patent/royalty situation, as well as its slightly worse performance, CABAC was replaced by a Range coder based on an algorithm defined by G. Nigel and N. Martin in 1979 [range-coding].¶
To encode binary digits efficiently a Range coder is used. Ci is the i-th Context. Bi is the i-th byte of the bytestream. bi is the i-th Range coded binary value, S0, i is the i-th initial state. The length of the bytestream encoding n binary symbols is jn bytes.¶
The range coder can be used in three modes.¶
In Open mode
when decoding, every symbol the reader attempts to read is available. In this mode arbitrary data can have been appended without affecting the range coder output. This mode is not used in FFV1.¶
In Closed mode
the length in bytes of the bytestream is provided to the range decoder. Bytes beyond the length are read as 0 by the range decoder. This is generally one byte shorter than the open mode.¶
In Sentinel mode
the exact length in bytes is not known and thus the range decoder MAY read into the data that follows the range coded bytestream by one byte. In Sentinel mode
, the end of the range coded bytestream is a binary symbol with state 129, which value SHALL be discarded. After reading this symbol, the range decoder will have read one byte beyond the end of the range coded bytestream. This way the byte position of the end can be determined. Bytestreams written in Sentinel mode
can be read in Closed mode
if the length can be determined, in this case the last (sentinel) symbol will be read non-corrupted and be of value 0.¶
Above describes the range decoding. Encoding is defined as any process which produces a decodable bytestream.¶
There are three places where range coder termination is needed in FFV1.
First is in the Configuration Record
, in this case the size of the range coded bytestream is known and handled as Closed mode
.
Second is the switch from the Slice Header
which is range coded to Golomb coded slices as Sentinel mode
.
Third is the end of range coded Slices which need to terminate before the CRC at their end. This can be handled as Sentinel mode
or as Closed mode
if the CRC position has been determined.¶
To encode scalar integers, it would be possible to encode each bit separately and use the past bits as context. However that would mean 255 contexts per 8-bit symbol that is not only a waste of memory but also requires more past data to reach a reasonably good estimate of the probabilities. Alternatively assuming a Laplacian distribution and only dealing with its variance and mean (as in Huffman coding) would also be possible, however, for maximum flexibility and simplicity, the chosen method uses a single symbol to encode if a number is 0, and if not, encodes the number using its exponent, mantissa and sign. The exact contexts used are best described by Figure 16.¶
get_symbol
is used for the read out of sample_difference
indicated in Figure 8.¶
get_rac
returns a boolean, computed from the bytestream as described in Section 3.8.1.1.¶
At keyframes all Range coder state variables are set to their initial state.¶
0, 0, 0, 0, 0, 0, 0, 0, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68, 69, 70, 71, 72, 73, 74, 75, 75, 76, 77, 78, 79, 80, 81, 82, 83, 84, 85, 86, 87, 88, 89, 90, 91, 92, 93, 94, 94, 95, 96, 97, 98, 99,100,101,102,103, 104,105,106,107,108,109,110,111,112,113,114,114,115,116,117,118, 119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,133, 134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149, 150,151,152,152,153,154,155,156,157,158,159,160,161,162,163,164, 165,166,167,168,169,170,171,171,172,173,174,175,176,177,178,179, 180,181,182,183,184,185,186,187,188,189,190,190,191,192,194,194, 195,196,197,198,199,200,201,202,202,204,205,206,207,208,209,209, 210,211,212,213,215,215,216,217,218,219,220,220,222,223,224,225, 226,227,227,229,229,230,231,232,234,234,235,236,237,238,239,240, 241,242,243,244,245,246,247,248,248, 0, 0, 0, 0, 0, 0, 0,¶
The alternative state transition table has been built using iterative minimization of frame sizes and generally performs better than the default. To use it, the coder_type
(see Section 4.2.3) MUST be set to 2 and the difference to the default MUST be stored in the Parameters
, see Section 4.2. The reference implementation of FFV1 in FFmpeg uses Figure 19 by default at the time of this writing when Range coding is used.¶
The end of the bitstream of the Frame
is filled with 0-bits until that the bitstream contains a multiple of 8 bits.¶
This coding mode uses Golomb Rice codes. The VLC is split into two parts. The prefix stores the most significant bits and the suffix stores the k least significant bits or stores the whole number in the ESC case.¶
bits | value |
---|---|
1 | 0 |
01 | 1 |
... | ... |
0000 0000 01 | 9 |
0000 0000 001 | 10 |
0000 0000 0001 | 11 |
0000 0000 0000 | ESC |
non ESC | the k least significant bits MSB first |
ESC | the value - 11, in MSB first order |
ESC
MUST NOT be used if the value can be coded as non ESC
.¶
k | bits | value |
---|---|---|
0 |
1
|
0 |
0 |
001
|
2 |
2 |
1 00
|
0 |
2 |
1 10
|
2 |
2 |
01 01
|
5 |
any |
000000000000 10000000
|
139 |
Run mode is entered when the context is 0 and left as soon as a non-0 difference is found. The level is identical to the predicted one. The run and the first different level are coded.¶
The run value is encoded in two parts. The prefix part stores the more significant part of the run as well as adjusting the run_index
that determines the number of bits in the less significant part of the run. The second part of the value stores the less significant part of the run as it is. The run_index
is reset for each Plane
and slice to 0.¶
log2_run[41] = { 0, 0, 0, 0, 1, 1, 1, 1, 2, 2, 2, 2, 3, 3, 3, 3, 4, 4, 5, 5, 6, 6, 7, 7, 8, 9,10,11,12,13,14,15, 16,17,18,19,20,21,22,23, 24, }; if (run_count == 0 && run_mode == 1) { if (get_bits(1)) { run_count = 1 << log2_run[run_index]; if (x + run_count <= w) { run_index++; } } else { if (log2_run[run_index]) { run_count = get_bits(log2_run[run_index]); } else { run_count = 0; } if (run_index) { run_index--; } run_mode = 2; } }¶
The log2_run
array is also used within [ISO.14495-1.1999].¶
sign_extend
is the function of increasing the number of bits of an input binary number in twos complement signed number representation while preserving the input number's sign (positive/negative) and value, in order to fit in the output bit width. It MAY be computed with:¶
sign_extend(input_number, input_bits) { negative_bias = 1 << (input_bits - 1); bits_mask = negative_bias - 1; output_number = input_number & bits_mask; // Remove negative bit is_negative = input_number & negative_bias; // Test negative bit if (is_negative) output_number -= negative_bias; return output_number }¶
Each difference is coded with the per context mean prediction removed and a per context value for k.¶
get_vlc_symbol(state) { i = state->count; k = 0; while (i < state->error_sum) { k++; i += i; } v = get_sr_golomb(k); if (2 * state->drift < -state->count) { v = -1 - v; } ret = sign_extend(v + state->bias, bits); state->error_sum += abs(v); state->drift += v; if (state->count == 128) { state->count >>= 1; state->drift >>= 1; state->error_sum >>= 1; } state->count++; if (state->drift <= -state->count) { state->bias = max(state->bias - 1, -128); state->drift = max(state->drift + state->count, -state->count + 1); } else if (state->drift > 0) { state->bias = min(state->bias + 1, 127); state->drift = min(state->drift - state->count, 0); } return ret; }¶
Level coding is identical to the normal difference coding with the exception that the 0 value is removed as it cannot occur:¶
diff = get_vlc_symbol(context_state); if (diff >= 0) { diff++; }¶
Note, this is different from JPEG-LS, which doesn't use prediction in run mode and uses a different encoding and context model for the last difference. On a small set of test Samples
the use of prediction slightly improved the compression rate.¶
At keyframes all coder state variables are set to their initial state.¶
drift = 0; error_sum = 4; bias = 0; count = 1;¶
An FFV1 bitstream is composed of a series of one or more Frames
and (when required) a Configuration Record
.¶
Within the following sub-sections, pseudo-code is used to explain the structure of each FFV1 bitstream component, as described in Section 2.2.1. Table 4 lists symbols used to annotate that pseudo-code in order to define the storage of the data referenced in that line of pseudo-code.¶
Symbol | Definition |
---|---|
u(n) | unsigned big endian integer using n bits |
sg | Golomb Rice coded signed scalar symbol coded with the method described in Section 3.8.2 |
br | Range coded Boolean (1-bit) symbol with the method described in Section 3.8.1.1 |
ur | Range coded unsigned scalar symbol coded with the method described in Section 3.8.1.2 |
sr | Range coded signed scalar symbol coded with the method described in Section 3.8.1.2 |
sd | Sample difference coded with the method described in Section 3.8 |
The following MUST be provided by external means during initialization of the decoder:¶
frame_pixel_width
is defined as Frame
width in Pixels
.¶
frame_pixel_height
is defined as Frame
height in Pixels
.¶
Default values at the decoder initialization phase:¶
ConfigurationRecordIsPresent
is set to 0.¶
The Quantization Table Sets are stored by storing the number of equal entries -1 of the first half of the table (represented as len - 1
in the pseudo-code below) using the method described in Section 3.8.1.2. The second half doesn't need to be stored as it is identical to the first with flipped sign. scale
and len_count[ i ][ j ]
are temporary values used for the computing of context_count[ i ]
and are not used outside Quantization Table Set pseudo-code.¶
Example:¶
Table: 0 0 1 1 1 1 2 2 -2 -2 -2 -1 -1 -1 -1 0¶
Stored values: 1, 3, 1¶
QuantizationTableSet
has its own initial states, all set to 128.¶
pseudo-code | type --------------------------------------------------------------|----- QuantizationTableSet( i ) { | scale = 1 | for (j = 0; j < MAX_CONTEXT_INPUTS; j++) { | QuantizationTable( i, j, scale ) | scale *= 2 * len_count[ i ][ j ] - 1 | } | context_count[ i ] = ceil( scale / 2 ) | } |¶
MAX_CONTEXT_INPUTS
is 5.¶
pseudo-code | type --------------------------------------------------------------|----- QuantizationTable(i, j, scale) { | v = 0 | for (k = 0; k < 128;) { | len - 1 | ur for (n = 0; n < len; n++) { | quant_tables[ i ][ j ][ k ] = scale * v | k++ | } | v++ | } | for (k = 1; k < 128; k++) { | quant_tables[ i ][ j ][ 256 - k ] = \ | -quant_tables[ i ][ j ][ k ] | } | quant_tables[ i ][ j ][ 128 ] = \ | -quant_tables[ i ][ j ][ 127 ] | len_count[ i ][ j ] = v | } |¶
quant_tables[ i ][ j ][ k ]
indicates the quantification table value of the Quantized Sample Difference k
of the Quantization Table j
of the Set Quantization Table Set i
.¶
context_count[ i ]
indicates the count of contexts for Quantization Table Set i
. context_count[ i ]
MUST be less than or equal to 32768.¶
The Parameters
section contains significant characteristics about the decoding configuration used for all instances of Frame
(in FFV1 version 0 and 1) or the whole FFV1 bitstream (other versions), including the stream version, color configuration, and quantization tables. Figure 22 describes the contents of the bitstream.¶
Parameters
has its own initial states, all set to 128.¶
CONTEXT_SIZE is 32.¶
version
specifies the version of the FFV1 bitstream.¶
Each version is incompatible with other versions: decoders SHOULD reject FFV1 bitstreams due to an unknown version.¶
Decoders SHOULD reject FFV1 bitstreams with version <= 1 && ConfigurationRecordIsPresent == 1.¶
Decoders SHOULD reject FFV1 bitstreams with version >= 3 && ConfigurationRecordIsPresent == 0.¶
value | version |
---|---|
0 | FFV1 version 0 |
1 | FFV1 version 1 |
2 | reserved* |
3 | FFV1 version 3 |
Other | reserved for future use |
* Version 2 was experimental and this document does not describe it.¶
micro_version
specifies the micro-version of the FFV1 bitstream.¶
After a version is considered stable (a micro-version value is assigned to be the first stable variant of a specific version), each new micro-version after this first stable variant is compatible with the previous micro-version: decoders SHOULD NOT reject FFV1 bitstreams due to an unknown micro-version equal or above the micro-version considered as stable.¶
Meaning of micro_version
for version
3:¶
value | micro_version |
---|---|
0...3 | reserved* |
4 | first stable variant |
Other | reserved for future use |
* development versions may be incompatible with the stable variants.¶
coder_type
specifies the coder used.¶
value | coder used |
---|---|
0 | Golomb Rice |
1 | Range Coder with default state transition table |
2 | Range Coder with custom state transition table |
Other | reserved for future use |
Restrictions:¶
If coder_type
is 0, then bits_per_raw_sample
SHOULD NOT be > 8.¶
Background: At the time of this writing, there is no known implementation of FFV1 bitstream supporting Golomb Rice algorithm with bits_per_raw_sample
greater than 8, and Range Coder is prefered.¶
state_transition_delta
specifies the Range coder custom state transition table.¶
If state_transition_delta
is not present in the FFV1 bitstream, all Range coder custom state transition table elements are assumed to be 0.¶
colorspace_type
specifies the color space encoded, the pixel transformation used by the encoder, the extra plane content, as well as interleave method.¶
value | color space encoded | pixel transformation | extra plane content | interleave method |
---|---|---|---|---|
0 | YCbCr | None | Transparency |
Plane then Line
|
1 | RGB | JPEG2000-RCT | Transparency |
Line then Plane
|
Other | reserved for future use | reserved for future use | reserved for future use | reserved for future use |
FFV1 bitstreams with colorspace_type
== 1 && (chroma_planes
!= 1 || log2_h_chroma_subsample
!= 0 || log2_v_chroma_subsample
!= 0) are not part of this specification.¶
chroma_planes
indicates if chroma (color) Planes
are present.¶
value | presence |
---|---|
0 | chroma Planes are not present |
1 | chroma Planes are present |
bits_per_raw_sample
indicates the number of bits for each Sample
. Inferred to be 8 if not present.¶
value | bits for each sample |
---|---|
0 | reserved* |
Other | the actual bits for each Sample
|
* Encoders MUST NOT store bits_per_raw_sample
= 0.
Decoders SHOULD accept and interpret bits_per_raw_sample
= 0 as 8.¶
log2_h_chroma_subsample
indicates the subsample factor, stored in powers to which the number 2 must be raised, between luma and chroma width (chroma_width = 2 ^ -log2_h_chroma_subsample * luma_width
).¶
log2_v_chroma_subsample
indicates the subsample factor, stored in powers to which the number 2 must be raised, between luma and chroma height (chroma_height = 2 ^ -log2_v_chroma_subsample * luma_height
).¶
extra_plane
indicates if an extra Plane
is present.¶
value | presence |
---|---|
0 | extra Plane is not present |
1 | extra Plane is present |
num_h_slices
indicates the number of horizontal elements of the slice raster.¶
Inferred to be 1 if not present.¶
num_v_slices
indicates the number of vertical elements of the slice raster.¶
Inferred to be 1 if not present.¶
quant_table_set_count
indicates the number of Quantization Table Sets. quant_table_set_count
MUST be less than or equal to 8.¶
Inferred to be 1 if not present.¶
MUST NOT be 0.¶
states_coded
indicates if the respective Quantization Table Set has the initial states coded.¶
Inferred to be 0 if not present.¶
value | initial states |
---|---|
0 | initial states are not present and are assumed to be all 128 |
1 | initial states are present |
initial_state_delta[ i ][ j ][ k ]
indicates the initial Range coder state, it is encoded using k
as context index and¶
In the case of a FFV1 bitstream with version >= 3
, a Configuration Record
is stored in the underlying Container
as described in Section 4.3.3. It contains the Parameters
used for all instances of Frame
. The size of the Configuration Record
, NumBytes
, is supplied by the underlying Container
.¶
pseudo-code | type -----------------------------------------------------------|----- ConfigurationRecord( NumBytes ) { | ConfigurationRecordIsPresent = 1 | Parameters( ) | while (remaining_symbols_in_syntax(NumBytes - 4)) { | reserved_for_future_use | br/ur/sr } | configuration_record_crc_parity | u(32) } |¶
reserved_for_future_use
has semantics that are reserved for future use.¶
Encoders conforming to this version of this specification SHALL NOT write this value.¶
Decoders conforming to this version of this specification SHALL ignore its value.¶
configuration_record_crc_parity
32 bits that are chosen so that the Configuration Record
as a whole has a CRC remainder of 0.¶
This is equivalent to storing the CRC remainder in the 32-bit parity.¶
The CRC generator polynomial used is described in Section 4.9.3.¶
This Configuration Record
can be placed in any file format supporting Configuration Records
, fitting as much as possible with how the file format uses to store Configuration Records
. The Configuration Record
storage place and NumBytes
are currently defined and supported by this version of this specification for the following formats:¶
The Configuration Record
extends the stream format chunk ("AVI ", "hdlr", "strl", "strf") with the ConfigurationRecord bitstream.¶
See [AVI] for more information about chunks.¶
NumBytes
is defined as the size, in bytes, of the strf chunk indicated in the chunk header minus the size of the stream format structure.¶
The Configuration Record
extends the sample description box ("moov", "trak", "mdia", "minf", "stbl", "stsd") with a "glbl" box that contains the ConfigurationRecord bitstream. See [ISO.14496-12.2015] for more information about boxes.¶
NumBytes
is defined as the size, in bytes, of the "glbl" box indicated in the box header minus the size of the box header.¶
The codec_specific_data
element (in stream_header
packet) contains the ConfigurationRecord bitstream. See [NUT] for more information about elements.¶
NumBytes
is defined as the size, in bytes, of the codec_specific_data
element as indicated in the "length" field of codec_specific_data
.¶
FFV1 SHOULD use V_FFV1
as the Matroska Codec ID
. For FFV1 versions 2 or less, the Matroska CodecPrivate
Element SHOULD NOT be used. For FFV1 versions 3 or greater, the Matroska CodecPrivate
Element MUST contain the FFV1 Configuration Record
structure and no other data. See [Matroska] for more information about elements.¶
NumBytes
is defined as the Element Data Size
of the CodecPrivate
Element.¶
A Frame
is an encoded representation of a complete static image. The whole Frame
is provided by the underlaying container.¶
A Frame
consists of the keyframe
field, Parameters
(if version
<= 1), and a sequence of independent slices. The pseudo-code below describes the contents of a Frame
.¶
keyframe
field has its own initial state, set to 128.¶
pseudo-code | type --------------------------------------------------------------|----- Frame( NumBytes ) { | keyframe | br if (keyframe && !ConfigurationRecordIsPresent { | Parameters( ) | } | while (remaining_bits_in_bitstream( NumBytes )) { | Slice( ) | } | } |¶
Architecture overview of slices in a Frame
:¶
first slice header |
first slice content |
first slice footer |
--------------------------------------------------------------- |
second slice header |
second slice content |
second slice footer |
--------------------------------------------------------------- |
... |
--------------------------------------------------------------- |
last slice header |
last slice content |
last slice footer |
A Slice
is an independent spatial sub-section of a Frame
that is encoded separately from another region of the same Frame
. The use of more than one Slice
per Frame
can be useful for taking advantage of the opportunities of multithreaded encoding and decoding.¶
A Slice
consists of a Slice Header
(when relevant), a Slice Content
, and a Slice Footer
(when relevant). The pseudo-code below describes the contents of a Slice
.¶
pseudo-code | type --------------------------------------------------------------|----- Slice( ) { | if (version >= 3) { | SliceHeader( ) | } | SliceContent( ) | if (coder_type == 0) { | while (!byte_aligned()) { | padding | u(1) } | } | if (version <= 1) { | while (remaining_bits_in_bitstream( NumBytes ) != 0) {| reserved | u(1) } | } | if (version >= 3) { | SliceFooter( ) | } | } |¶
padding
specifies a bit without any significance and used only for byte alignment.
MUST be 0.¶
reserved
specifies a bit without any significance in this revision of the specification and may have a significance in a later revision of this specification.¶
Encoders SHOULD NOT fill these bits.¶
Decoders SHOULD ignore these bits.¶
A Slice Header
provides information about the decoding configuration of the Slice
, such as its spatial position, size, and aspect ratio. The pseudo-code below describes the contents of the Slice Header
.¶
Slice Header
has its own initial states, all set to 128.¶
pseudo-code | type --------------------------------------------------------------|----- SliceHeader( ) { | slice_x | ur slice_y | ur slice_width - 1 | ur slice_height - 1 | ur for (i = 0; i < quant_table_set_index_count; i++) { | quant_table_set_index[ i ] | ur } | picture_structure | ur sar_num | ur sar_den | ur } |¶
slice_x
indicates the x position on the slice raster formed by numhslices.¶
Inferred to be 0 if not present.¶
slice_y
indicates the y position on the slice raster formed by numvslices.¶
Inferred to be 0 if not present.¶
slice_width
indicates the width on the slice raster formed by numhslices.¶
Inferred to be 1 if not present.¶
slice_height
indicates the height on the slice raster formed by numvslices.¶
Inferred to be 1 if not present.¶
quant_table_set_index_count
is defined as:¶
1 + ( ( chroma_planes || version <= 3 ) ? 1 : 0 ) + ( extra_plane ? 1 : 0 )¶
quant_table_set_index
indicates the Quantization Table Set index to select the Quantization Table Set and the initial states for the Slice Content
.¶
Inferred to be 0 if not present.¶
picture_structure
specifies the temporal and spatial relationship of each Line
of the Frame
.¶
Inferred to be 0 if not present.¶
value | picture structure used |
---|---|
0 | unknown |
1 | top field first |
2 | bottom field first |
3 | progressive |
Other | reserved for future use |
sar_num
specifies the Sample
aspect ratio numerator.¶
Inferred to be 0 if not present.¶
A value of 0 means that aspect ratio is unknown.¶
Encoders MUST write 0 if Sample
aspect ratio is unknown.¶
If sar_den
is 0, decoders SHOULD ignore the encoded value and consider that sar_num
is 0.¶
sar_den
specifies the Sample
aspect ratio denominator.¶
Inferred to be 0 if not present.¶
A value of 0 means that aspect ratio is unknown.¶
Encoders MUST write 0 if Sample
aspect ratio is unknown.¶
If sar_num
is 0, decoders SHOULD ignore the encoded value and consider that sar_den
is 0.¶
A Slice Content
contains all Line
elements part of the Slice
.¶
Depending on the configuration, Line
elements are ordered by Plane
then by row (YCbCr) or by row then by Plane
(RGB).¶
pseudo-code | type --------------------------------------------------------------|----- SliceContent( ) { | if (colorspace_type == 0) { | for (p = 0; p < primary_color_count; p++) { | for (y = 0; y < plane_pixel_height[ p ]; y++) { | Line( p, y ) | } | } | } else if (colorspace_type == 1) { | for (y = 0; y < slice_pixel_height; y++) { | for (p = 0; p < primary_color_count; p++) { | Line( p, y ) | } | } | } | } |¶
primary_color_count
is defined as:¶
1 + ( chroma_planes ? 2 : 0 ) + ( extra_plane ? 1 : 0 )¶
plane_pixel_height[ p ]
is the height in Pixels
of Plane
p of the Slice
. It is defined as:¶
chroma_planes == 1 && (p == 1 || p == 2) ? ceil(slice_pixel_height / (1 << log2_v_chroma_subsample)) : slice_pixel_height¶
slice_pixel_height
is the height in pixels of the slice. It is defined as:¶
floor( ( slice_y + slice_height ) * slice_pixel_height / num_v_slices ) - slice_pixel_y.¶
slice_pixel_y
is the slice vertical position in pixels. It is defined as:¶
floor( slice_y * frame_pixel_height / num_v_slices )¶
A Line
is a list of the sample differences (relative to the predictor) of primary color components. The pseudo-code below describes the contents of the Line
.¶
pseudo-code | type --------------------------------------------------------------|----- Line( p, y ) { | if (colorspace_type == 0) { | for (x = 0; x < plane_pixel_width[ p ]; x++) { | sample_difference[ p ][ y ][ x ] | sd } | } else if (colorspace_type == 1) { | for (x = 0; x < slice_pixel_width; x++) { | sample_difference[ p ][ y ][ x ] | sd } | } | } |¶
plane_pixel_width[ p ]
is the width in Pixels
of Plane
p of the Slice
. It is defined as:¶
chroma\_planes == 1 && (p == 1 || p == 2) ? ceil( slice_pixel_width / (1 << log2_h_chroma_subsample) ) : slice_pixel_width.¶
slice_pixel_width
is the width in Pixels
of the slice. It is defined as:¶
floor( ( slice_x + slice_width ) * slice_pixel_width / num_h_slices ) - slice_pixel_x¶
slice_pixel_x
is the slice horizontal position in Pixels
. It is defined as:¶
floor( slice_x * frame_pixel_width / num_h_slices )¶
sample_difference[ p ][ y ][ x ]
is the sample difference for Sample
at Plane
p
, y position y
, and x position x
. The Sample
value is computed based on median predictor and context described in Section 3.2.¶
To ensure that fast multithreaded decoding is possible, starting with version 3 and if frame_pixel_width * frame_pixel_height
is more than 101376, slice_width * slice_height
MUST be less or equal to num_h_slices * num_v_slices / 4
.
Note: 101376 is the frame size in Pixels
of a 352x288 frame also known as CIF ("Common Intermediate Format") frame size format.¶
For each Frame
, each position in the slice raster MUST be filled by one and only one slice of the Frame
(no missing slice position, no slice overlapping).¶
For each Frame
with keyframe
value of 0, each slice MUST have the same value of slice_x
, slice_y
, slice_width
, slice_height
as a slice in the previous Frame
.¶
Like any other codec, (such as [RFC6716]), FFV1 should not be used with insecure ciphers or cipher-modes that are vulnerable to known plaintext attacks. Some of the header bits as well as the padding are easily predictable.¶
Implementations of the FFV1 codec need to take appropriate security considerations into account, as outlined in [RFC4732]. It is extremely important for the decoder to be robust against malicious payloads. Malicious payloads must not cause the decoder to overrun its allocated memory or to take an excessive amount of resources to decode. The same applies to the encoder, even though problems in encoders are typically rarer. Malicious video streams must not cause the encoder to misbehave because this would allow an attacker to attack transcoding gateways. A frequent security problem in image and video codecs is also to not check for integer overflows, for example to allocate frame_pixel_width * frame_pixel_height
in Pixel
count computations without considering that the multiplication result may have overflowed the arithmetic types range.
The range coder could, if implemented naively, read one byte over the end. The implementation must ensure that no read outside allocated and initialized memory occurs.¶
None of the content carried in FFV1 is intended to be executable.¶
The reference implementation [REFIMPL] contains no known buffer overflow or cases where a specially crafted packet or video segment could cause a significant increase in CPU load.¶
The reference implementation [REFIMPL] was validated in the following conditions:¶
In all of the conditions above, the decoder and encoder was run inside the [VALGRIND] memory debugger as well as clangs address sanitizer [Address-Sanitizer], which track reads and writes to invalid memory regions as well as the use of uninitialized memory. There were no errors reported on any of the tested conditions.¶
This registration is done using the template defined in [RFC6838] and following [RFC4855].¶
Type name: video¶
Subtype name: FFV1¶
Required parameters: None.¶
Optional parameters: These parameters are used to signal the capabilities of a receiver implementation. These parameters MUST NOT be used for any other purpose.¶
version
: The version
of the FFV1 encoding as defined by Section 4.2.1.¶
micro_version
: The micro_version
of the FFV1 encoding as defined by Section 4.2.2.¶
coder_type
: The coder_type
of the FFV1 encoding as defined by Section 4.2.3.¶
colorspace_type
: The colorspace_type
of the FFV1 encoding as defined by Section 4.2.5.¶
bits_per_raw_sample
: The bits_per_raw_sample
of the FFV1 encoding as defined by Section 4.2.7.¶
max_slices
: The value of max_slices
is an integer indicating the maximum count of slices with a frames of the FFV1 encoding.¶
Encoding considerations: This media type is defined for encapsulation in several audiovisual container formats and contains binary data; see Section 4.3.3. This media type is framed binary data; see Section 4.8 of [RFC6838].¶
Security considerations: See Section 6 of this document.¶
Interoperability considerations: None.¶
Published specification: RFC XXXX.¶
[RFC Editor: Upon publication as an RFC, please replace "XXXX" with the number assigned to this document and remove this note.]¶
Applications which use this media type: Any application that requires the transport of lossless video can use this media type. Some examples are, but not limited to screen recording, scientific imaging, and digital video preservation.¶
Fragment identifier considerations: N/A.¶
Additional information: None.¶
Person & email address to contact for further information: Michael Niedermayer michael@niedermayer.cc¶
Intended usage: COMMON¶
Restrictions on usage: None.¶
Author: Dave Rice dave@dericed.com¶
Change controller: IETF cellar working group delegated from the IESG.¶
The IANA is requested to register the following values:¶
See https://github.com/FFmpeg/FFV1/commits/master¶
[RFC Editor: Please remove this Changelog section prior to publication.]¶
This appendix is informative.¶
The FFV1 bitstream is parsable in two ways: in sequential order as described in this document or with the pre-analysis of the footer of each slice. Each slice footer contains a slice_size
field so the boundary of each slice is computable without having to parse the slice content. That allows multi-threading as well as independence of slice content (a bitstream error in a slice header or slice content has no impact on the decoding of the other slices).¶
After having checked keyframe
field, a decoder SHOULD parse slice_size
fields, from slice_size
of the last slice at the end of the Frame
up to slice_size
of the first slice at the beginning of the Frame
, before parsing slices, in order to have slices boundaries. A decoder MAY fallback on sequential order e.g. in case of a corrupted Frame
(frame size unknown, slice_size
of slices not coherent...) or if there is no possibility of seeking into the stream.¶
This appendix is informative.¶
Some bitstreams were found with 40 extra bits corresponding to error_status
and slice_crc_parity
in the reserved
bits of Slice()
. Any revision of this specification SHOULD care about avoiding to add 40 bits of content after SliceContent
if version
== 0 or version
== 1. Else a decoder conforming to the revised specification could not distinguish between a revised bitstream and such buggy bitstream in the wild.¶