2014-08-17 23:08:47 +00:00
|
|
|
This file intends to give a big picture overview of how mpv is structured.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2013-12-17 02:35:43 +00:00
|
|
|
player/*.c:
|
2013-10-30 21:35:48 +00:00
|
|
|
Essentially makes up the player applications, including the main() function
|
|
|
|
and the playback loop.
|
|
|
|
|
|
|
|
Generally, it accesses all other subsystems, initializes them, and pushes
|
|
|
|
data between them during playback.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
|
|
|
The structure is as follows (as of commit e13c05366557cb):
|
|
|
|
* main():
|
|
|
|
* basic initializations (e.g. init_libav() and more)
|
|
|
|
* pre-parse command line (verbosity level, config file locations)
|
|
|
|
* load config files (parse_cfgfiles())
|
|
|
|
* parse command line, add files from the command line to playlist
|
|
|
|
(m_config_parse_mp_command_line())
|
|
|
|
* check help options etc. (call handle_help_options()), possibly exit
|
2019-12-28 09:09:28 +00:00
|
|
|
* call mp_play_files() function that works down the playlist:
|
2012-08-26 00:17:11 +00:00
|
|
|
* run idle loop (idle_loop()), until there are files in the
|
2014-07-09 00:14:23 +00:00
|
|
|
playlist or an exit command was given (only if --idle it set)
|
2012-08-26 00:17:11 +00:00
|
|
|
* actually load and play a file in play_current_file():
|
|
|
|
* run all the dozens of functions to load the file and
|
|
|
|
initialize playback
|
|
|
|
* run a small loop that does normal playback, until the file is
|
2014-07-09 00:14:23 +00:00
|
|
|
done or a command terminates playback
|
2012-08-26 00:17:11 +00:00
|
|
|
(on each iteration, run_playloop() is called, which is rather
|
|
|
|
big and complicated - it decodes some audio and video on
|
|
|
|
each frame, waits for input, etc.)
|
|
|
|
* uninitialize playback
|
|
|
|
* determine next entry on the playlist to play
|
|
|
|
* loop, or exit if no next file or quit is requested
|
|
|
|
(see enum stop_play_reason)
|
2019-12-28 09:09:28 +00:00
|
|
|
* call mp_destroy()
|
2014-08-17 23:08:47 +00:00
|
|
|
* run_playloop():
|
|
|
|
* calls fill_audio_out_buffers()
|
|
|
|
This checks whether new audio needs to be decoded, and pushes it
|
|
|
|
to the AO.
|
|
|
|
* calls write_video()
|
|
|
|
Decode new video, and push it to the VO.
|
|
|
|
* determines whether playback of the current file has ended
|
|
|
|
* determines when to start playback after seeks
|
|
|
|
* and calls a whole lot of other stuff
|
|
|
|
(Really, this function does everything.)
|
2012-08-26 00:17:11 +00:00
|
|
|
|
|
|
|
Things worth saying about the playback core:
|
2014-08-17 23:08:47 +00:00
|
|
|
- most state is in MPContext (core.h), which is not available to the
|
2019-12-28 09:09:28 +00:00
|
|
|
subsystems (and should not be made available)
|
2014-08-17 23:08:47 +00:00
|
|
|
- the currently played tracks are in mpctx->current_tracks, and decoder
|
2019-12-28 09:09:28 +00:00
|
|
|
state in track.dec/d_sub
|
2012-08-26 00:17:11 +00:00
|
|
|
- the other subsystems rarely call back into the frontend, and the frontend
|
|
|
|
polls them instead (probably a good thing)
|
2014-08-17 23:08:47 +00:00
|
|
|
- one exceptions are wakeup callbacks, which notify a "higher" component
|
|
|
|
of a changed situation in a subsystem
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2013-10-30 21:35:48 +00:00
|
|
|
I like to call the player/*.c files the "frontend".
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2017-06-29 15:28:04 +00:00
|
|
|
ta.h & ta.c:
|
|
|
|
Hierarchical memory manager inspired by talloc from Samba. It's like a
|
|
|
|
malloc() with more features. Most importantly, each talloc allocation can
|
|
|
|
have a parent, and if the parent is free'd, all children will be free'd as
|
|
|
|
well. The parent is an arbitrary talloc allocation. It's either set by the
|
|
|
|
allocation call by passing a talloc parent, usually as first argument to the
|
|
|
|
allocation function. It can also be set or reset later by other calls (at
|
|
|
|
least talloc_steal()). A talloc allocation that is used as parent is often
|
|
|
|
called a talloc context.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
|
|
|
One very useful feature of talloc is fast tracking of memory leaks. ("Fast"
|
2015-05-02 17:03:28 +00:00
|
|
|
as in it doesn't require valgrind.) You can enable it by setting the
|
2012-10-11 00:04:08 +00:00
|
|
|
MPV_LEAK_REPORT environment variable to "1":
|
|
|
|
export MPV_LEAK_REPORT=1
|
2019-11-07 23:43:46 +00:00
|
|
|
Or permanently by building with --enable-ta-leak-report.
|
2012-08-26 00:17:11 +00:00
|
|
|
This will list all unfree'd allocations on exit.
|
|
|
|
|
|
|
|
Documentation can be found here:
|
|
|
|
http://git.samba.org/?p=samba.git;a=blob;f=lib/talloc/talloc.h;hb=HEAD
|
|
|
|
|
2017-06-29 15:28:04 +00:00
|
|
|
For some reason, we're still using API-compatible wrappers instead of TA
|
|
|
|
directly. The talloc wrapper has only a subset of the functionality, and
|
|
|
|
in particular the wrappers abort() on memory allocation failure.
|
|
|
|
|
2013-07-12 23:15:36 +00:00
|
|
|
Note: unlike tcmalloc, jemalloc, etc., talloc() is not actually a malloc
|
|
|
|
replacement. It works on top of system malloc and provides additional
|
|
|
|
features that are supposed to make memory management easier.
|
|
|
|
|
2013-12-17 02:35:43 +00:00
|
|
|
player/command.c:
|
2014-07-09 00:14:23 +00:00
|
|
|
This contains the implementation for client API commands and properties.
|
2013-10-30 21:35:48 +00:00
|
|
|
Properties are essentially dynamic variables changed by certain commands.
|
|
|
|
This is basically responsible for all user commands, like initiating
|
|
|
|
seeking, switching tracks, etc. It calls into other player/*.c files,
|
|
|
|
where most of the work is done, but also calls other parts of mpv.
|
|
|
|
|
2013-12-17 02:35:43 +00:00
|
|
|
player/core.h:
|
2013-10-30 21:35:48 +00:00
|
|
|
Data structures and function prototypes for most of player/*.c. They are
|
|
|
|
usually not accessed by other parts of mpv for the sake of modularization.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2014-07-09 00:14:23 +00:00
|
|
|
player/client.c:
|
|
|
|
This implements the client API (libmpv/client.h). For the most part, this
|
|
|
|
just calls into other parts of the player. This also manages a ringbuffer
|
|
|
|
of events from player to clients.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2013-12-17 02:35:43 +00:00
|
|
|
options/options.h, options/options.c
|
2013-10-30 21:35:48 +00:00
|
|
|
options.h contains the global option struct MPOpts. The option declarations
|
|
|
|
(option names, types, and MPOpts offsets for the option parser) are in
|
|
|
|
options.c. Most default values for options and MPOpts are in
|
|
|
|
mp_default_opts at the end of options.c.
|
|
|
|
|
2019-12-28 09:09:28 +00:00
|
|
|
MPOpts is unfortunately quite monolithic, but is being incrementally broken
|
|
|
|
up into sub-structs. Many components have their own sub-option structs
|
|
|
|
separate from MPOpts. New options should be bound to the component that uses
|
|
|
|
them. Add a new option table/struct if needed.
|
|
|
|
|
|
|
|
The global MPOpts still contains the sub-structs as fields, which serves to
|
|
|
|
link them to the option parser. For example, an entry like this may be
|
|
|
|
typical:
|
|
|
|
|
options: change option macros and all option declarations
Change all OPT_* macros such that they don't define the entire m_option
initializer, and instead expand only to a part of it, which sets certain
fields. This requires changing almost every option declaration, because
they all use these macros. A declaration now always starts with
{"name", ...
followed by designated initializers only (possibly wrapped in macros).
The OPT_* macros now initialize the .offset and .type fields only,
sometimes also .priv and others.
I think this change makes the option macros less tricky. The old code
had to stuff everything into macro arguments (and attempted to allow
setting arbitrary fields by letting the user pass designated
initializers in the vararg parts). Some of this was made messy due to
C99 and C11 not allowing 0-sized varargs with ',' removal. It's also
possible that this change is pointless, other than cosmetic preferences.
Not too happy about some things. For example, the OPT_CHOICE()
indentation I applied looks a bit ugly.
Much of this change was done with regex search&replace, but some places
required manual editing. In particular, code in "obscure" areas (which I
didn't include in compilation) might be broken now.
In wayland_common.c the author of some option declarations confused the
flags parameter with the default value (though the default value was
also properly set below). I fixed this with this change.
2020-03-14 20:28:01 +00:00
|
|
|
{"", OPT_SUBSTRUCT(demux_opts, demux_conf)},
|
2019-12-28 09:09:28 +00:00
|
|
|
|
|
|
|
This directs the option access code to include all options in demux_conf
|
|
|
|
into the global option list, with no prefix (""), and as part of the
|
|
|
|
MPOpts.demux_opts field. The MPOpts.demux_opts field is actually not
|
|
|
|
accessed anywhere, and instead demux.c does this:
|
|
|
|
|
|
|
|
struct m_config_cache *opts_cache =
|
|
|
|
m_config_cache_alloc(demuxer, global, &demux_conf);
|
|
|
|
struct demux_opts *opts = opts_cache->opts;
|
|
|
|
|
|
|
|
... to get a copy of its options.
|
|
|
|
|
|
|
|
See m_config.h (below) how to access options.
|
2013-10-30 21:35:48 +00:00
|
|
|
|
|
|
|
The actual option parser is spread over m_option.c, m_config.c, and
|
2017-06-29 15:28:04 +00:00
|
|
|
parse_commandline.c, and uses the option table in options.c.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2019-12-28 09:09:28 +00:00
|
|
|
options/m_config.h & m_config.c:
|
|
|
|
Code for querying and managing options. This (unfortunately) contains both
|
|
|
|
declarations for the "legacy-ish" global m_config struct, and ways to access
|
|
|
|
options in a threads-safe way anywhere, like m_config_cache_alloc().
|
|
|
|
|
|
|
|
m_config_cache_alloc() lets anyone read, observe, and write options in any
|
|
|
|
thread. The only state it needs is struct mpv_global, which is an opaque
|
|
|
|
type that can be passed "down" the component hierarchy. For safety reasons,
|
|
|
|
you should not pass down any pointers to option structs (like MPOpts), but
|
|
|
|
instead pass down mpv_global, and use m_config_cache_alloc() (or similar)
|
|
|
|
to get a synchronized copy of the options.
|
|
|
|
|
2013-12-17 02:35:43 +00:00
|
|
|
input/input.c:
|
2016-06-25 18:07:38 +00:00
|
|
|
This translates keyboard input coming from VOs and other sources (such
|
2014-07-09 00:14:23 +00:00
|
|
|
as remote control devices like Apple IR or client API commands) to the
|
2012-08-26 00:17:11 +00:00
|
|
|
key bindings listed in the user's (or the builtin) input.conf and turns
|
|
|
|
them into items of type struct mp_cmd. These commands are queued, and read
|
2013-10-30 21:35:48 +00:00
|
|
|
by playloop.c. They get pushed with run_command() to command.c.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2014-07-09 00:14:23 +00:00
|
|
|
Note that keyboard input and commands used by the client API are the same.
|
|
|
|
The client API only uses the command parser though, and has its own queue
|
|
|
|
of input commands somewhere else.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2013-12-17 02:35:43 +00:00
|
|
|
common/msg.h:
|
2014-08-17 23:08:47 +00:00
|
|
|
All terminal output must go through mp_msg().
|
2012-08-26 00:17:11 +00:00
|
|
|
|
|
|
|
stream/*:
|
|
|
|
File input is implemented here. stream.h/.c provides a simple stream based
|
2013-07-12 23:15:36 +00:00
|
|
|
interface (like reading a number of bytes at a given offset). mpv can
|
2012-08-26 00:17:11 +00:00
|
|
|
also play from http streams and such, which is implemented here.
|
|
|
|
|
2013-07-12 23:15:36 +00:00
|
|
|
E.g. if mpv sees "http://something" on the command line, it will pick
|
|
|
|
stream_lavf.c based on the prefix, and pass the rest of the filename to it.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
|
|
|
Some stream inputs are quite special: stream_dvd.c turns DVDs into mpeg
|
|
|
|
streams (DVDs are actually a bunch of vob files etc. on a filesystem),
|
|
|
|
stream_tv.c provides TV input including channel switching.
|
|
|
|
|
|
|
|
Some stream inputs are just there to invoke special demuxers, like
|
|
|
|
stream_mf.c. (Basically to make the prefix "mf://" do something special.)
|
|
|
|
|
2012-11-09 00:06:43 +00:00
|
|
|
demux/:
|
2012-08-26 00:17:11 +00:00
|
|
|
Demuxers split data streams into audio/video/sub streams, which in turn
|
2013-07-12 23:15:36 +00:00
|
|
|
are split in packets. Packets (see demux_packet.h) are mostly byte chunks
|
|
|
|
tagged with a playback time (PTS). These packets are passed to the decoders.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
|
|
|
Most demuxers have been removed from this fork, and the only important and
|
|
|
|
"actual" demuxers left are demux_mkv.c and demux_lavf.c (uses libavformat).
|
2017-06-29 15:28:04 +00:00
|
|
|
There are some pseudo demuxers like demux_cue.c.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2013-07-12 23:15:36 +00:00
|
|
|
The main interface is in demux.h. The stream headers are in stheader.h.
|
|
|
|
There is a stream header for each audio/video/sub stream, and each of them
|
|
|
|
holds codec information about the stream and other information.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2019-10-02 17:20:51 +00:00
|
|
|
demux.c is a bit big, the main reason being that it contains the demuxer
|
|
|
|
cache, which is implemented as a list of packets. The cache is complex
|
|
|
|
because it support seeking, multiple ranges, prefetching, and so on.
|
|
|
|
|
2012-11-09 00:06:43 +00:00
|
|
|
video/:
|
2013-07-12 23:15:36 +00:00
|
|
|
This contains several things related to audio/video decoding, as well as
|
2012-08-26 00:17:11 +00:00
|
|
|
video filters.
|
|
|
|
|
2013-07-12 23:15:36 +00:00
|
|
|
mp_image.h and img_format.h define how mpv stores decoded video frames
|
2012-08-26 00:17:11 +00:00
|
|
|
internally.
|
|
|
|
|
2012-11-09 00:06:43 +00:00
|
|
|
video/decode/:
|
2017-06-29 15:28:04 +00:00
|
|
|
vd_*.c are video decoders. (There's only vd_lavc.c left.) dec_video.c
|
|
|
|
handles most of connecting the frontend with the actual decoder.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2012-11-09 00:06:43 +00:00
|
|
|
video/filter/:
|
2012-08-26 00:17:11 +00:00
|
|
|
vf_*.c and vf.c form the video filter chain. They are fed by the video
|
|
|
|
decoder, and output the filtered images to the VOs though vf_vo.c. By
|
2013-07-12 23:15:36 +00:00
|
|
|
default, no video filters (except vf_vo) are used. vf_scale is automatically
|
|
|
|
inserted if the video output can't handle the video format used by the
|
|
|
|
decoder.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2012-11-09 00:06:43 +00:00
|
|
|
video/out/:
|
2012-08-26 00:17:11 +00:00
|
|
|
Video output. They also create GUI windows and handle user input. In most
|
|
|
|
cases, the windowing code is shared among VOs, like x11_common.c for X11 and
|
|
|
|
w32_common.c for Windows. The VOs stand between frontend and windowing code.
|
2018-01-20 15:10:42 +00:00
|
|
|
vo_gpu can pick a windowing system at runtime, e.g. the same binary can
|
2012-08-26 00:17:11 +00:00
|
|
|
provide both X11 and Cocoa support on OSX.
|
|
|
|
|
2017-06-29 15:28:04 +00:00
|
|
|
VOs can be reconfigured at runtime. A vo_reconfig() call can change the video
|
2012-08-26 00:17:11 +00:00
|
|
|
resolution and format, without destroying the window.
|
|
|
|
|
2018-01-20 15:10:42 +00:00
|
|
|
vo_gpu should be taken as reference.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2012-11-09 00:06:43 +00:00
|
|
|
audio/:
|
2013-07-12 23:15:36 +00:00
|
|
|
format.h/format.c define the uncompressed audio formats. (As well as some
|
|
|
|
compressed formats used for spdif.)
|
2012-11-09 00:06:43 +00:00
|
|
|
|
|
|
|
audio/decode/:
|
2017-06-29 15:28:04 +00:00
|
|
|
ad_*.c and dec_audio.c handle audio decoding. ad_lavc.c is the
|
2013-07-12 23:15:36 +00:00
|
|
|
decoder using ffmpeg. ad_spdif.c is not really a decoder, but is used for
|
|
|
|
compressed audio passthrough.
|
2012-11-09 00:06:43 +00:00
|
|
|
|
|
|
|
audio/filter/:
|
2013-07-12 23:15:36 +00:00
|
|
|
Audio filter chain. af_lavrresample is inserted if any form of conversion
|
2017-06-29 15:28:04 +00:00
|
|
|
between audio formats is needed.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2012-11-09 00:06:43 +00:00
|
|
|
audio/out/:
|
|
|
|
Audio outputs.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2014-08-17 23:08:47 +00:00
|
|
|
Unlike VOs, AOs can't be reconfigured on a format change. On audio format
|
|
|
|
changes, the AO will simply be closed and re-opened.
|
|
|
|
|
|
|
|
There are wrappers to support for two types of audio APIs: push.c and
|
|
|
|
pull.c. ao.c calls into one of these. They contain generic code to deal
|
|
|
|
with the data flow these APIs impose.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
2013-07-12 23:15:36 +00:00
|
|
|
Note that mpv synchronizes the video to the audio. That's the reason
|
2012-08-26 00:17:11 +00:00
|
|
|
why buggy audio drivers can have a bad influence on playback quality.
|
|
|
|
|
|
|
|
sub/:
|
2013-06-24 22:32:38 +00:00
|
|
|
Contains subtitle and OSD rendering.
|
2013-06-04 22:28:15 +00:00
|
|
|
|
2014-07-09 00:14:23 +00:00
|
|
|
osd.c/.h is actually the OSD code. It queries dec_sub.c to retrieve
|
2013-06-04 22:28:15 +00:00
|
|
|
decoded/rendered subtitles. osd_libass.c is the actual implementation of
|
|
|
|
the OSD text renderer (which uses libass, and takes care of all the tricky
|
|
|
|
fontconfig/freetype API usage and text layouting).
|
|
|
|
|
2014-08-17 23:08:47 +00:00
|
|
|
The VOs call osd.c to render OSD and subtitle (via e.g. osd_draw()). osd.c
|
|
|
|
in turn asks dec_sub.c for subtitle overlay bitmaps, which relays the
|
|
|
|
request to one of the sd_*.c subtitle decoders/renderers.
|
|
|
|
|
|
|
|
Subtitle loading is in demux/. The MPlayer subreader.c is mostly gone - parts
|
|
|
|
of it survive in demux_subreader.c. It's used as last fallback, or to handle
|
|
|
|
some text subtitle types on Libav. It should go away eventually. Normally,
|
|
|
|
subtitles are loaded via demux_lavf.c.
|
2013-06-24 22:32:38 +00:00
|
|
|
|
|
|
|
The subtitles are passed to dec_sub.c and the subtitle decoders in sd_*.c
|
|
|
|
as they are demuxed. All text subtitles are rendered by sd_ass.c. If text
|
2017-06-29 15:28:04 +00:00
|
|
|
subtitles are not in the ASS format, the libavcodec subtitle converters are
|
|
|
|
used (lavc_conv.c).
|
2013-06-24 22:32:38 +00:00
|
|
|
|
|
|
|
Text subtitles can be preloaded, in which case they are read fully as soon
|
2017-06-29 15:28:04 +00:00
|
|
|
as the subtitle is selected. In this case, they are effectively stored in
|
|
|
|
sd_ass.c's internal state.
|
2012-08-26 00:17:11 +00:00
|
|
|
|
|
|
|
etc/:
|
core: redo how codecs are mapped, remove codecs.conf
Use codec names instead of FourCCs to identify codecs. Rewrite how
codecs are selected and initialized. Now each decoder exports a list
of decoders (and the codec it supports) via add_decoders(). The order
matters, and the first decoder for a given decoder is preferred over
the other decoders. E.g. all ad_mpg123 decoders are preferred over
ad_lavc, because it comes first in the mpcodecs_ad_drivers array.
Likewise, decoders within ad_lavc that are enumerated first by
libavcodec (using av_codec_next()) are preferred. (This is actually
critical to select h264 software decoding by default instead of vdpau.
libavcodec and ffmpeg/avconv use the same method to select decoders by
default, so we hope this is sane.)
The codec names follow libavcodec's codec names as defined by
AVCodecDescriptor.name (see libavcodec/codec_desc.c). Some decoders
have names different from the canonical codec name. The AVCodecDescriptor
API is relatively new, so we need a compatibility layer for older
libavcodec versions for codec names that are referenced internally,
and which are different from the decoder name. (Add a configure check
for that, because checking versions is getting way too messy.)
demux/codec_tags.c is generated from the former codecs.conf (minus
"special" decoders like vdpau, and excluding the mappings that are the
same as the mappings libavformat's exported RIFF tables). It contains
all the mappings from FourCCs to codec name. This is needed for
demux_mkv, demux_mpg, demux_avi and demux_asf. demux_lavf will set the
codec as determined by libavformat, while the other demuxers have to do
this on their own, using the mp_set_audio/video_codec_from_tag()
functions. Note that the sh_audio/video->format members don't uniquely
identify the codec anymore, and sh->codec takes over this role.
Replace the --ac/--vc/--afm/--vfm with new --vd/--ad options, which
provide cover the functionality of the removed switched.
Note: there's no CODECS_FLAG_FLIP flag anymore. This means some obscure
container/video combinations (e.g. the sample Film_200_zygo_pro.mov)
are played flipped. ffplay/avplay doesn't handle this properly either,
so we don't care and blame ffmeg/libav instead.
2013-02-09 14:15:19 +00:00
|
|
|
The file input.conf is actually integrated into the mpv binary by the
|
|
|
|
build system. It contains the default keybindings.
|
2019-12-27 16:09:47 +00:00
|
|
|
|
|
|
|
Best practices and Concepts within mpv
|
|
|
|
======================================
|
|
|
|
|
|
|
|
General contribution etc.
|
|
|
|
-------------------------
|
|
|
|
|
2019-12-28 09:09:28 +00:00
|
|
|
See: DOCS/contribute.md
|
2019-12-27 16:09:47 +00:00
|
|
|
|
|
|
|
Error checking
|
|
|
|
--------------
|
|
|
|
|
|
|
|
If an error is relevant, it should be handled. If it's interesting, log the
|
|
|
|
error. However, mpv often keeps errors silent and reports failures somewhat
|
|
|
|
coarsely by propagating them upwards the caller chain. This is OK, as long as
|
|
|
|
the errors are not very interesting, or would require a developer to debug it
|
|
|
|
anyway (in which case using a debugger would be more convenient, and the
|
|
|
|
developer would need to add temporary debug printfs to get extremely detailed
|
|
|
|
information which would not be appropriate during normal operation).
|
|
|
|
|
|
|
|
Basically, keep a balance on error reporting. But always check them, unless you
|
|
|
|
have a good argument not to.
|
|
|
|
|
|
|
|
Memory allocation errors (OOM) are a special class of errors. Normally such
|
|
|
|
allocation failures are not handled "properly". Instead, abort() is called.
|
|
|
|
(New code should use MP_HANDLE_OOM() for this.) This is done out of laziness and
|
|
|
|
for convenience, and due to the fact that MPlayer/mplayer2 never handled it
|
|
|
|
correctly. (MPlayer varied between handling it correctly, trying to do so but
|
|
|
|
failing, and just not caring, while mplayer2 started using abort() for it.)
|
|
|
|
|
|
|
|
This is justifiable in a number of ways. Error handling paths are notoriously
|
|
|
|
untested and buggy, so merely having them won't make your program more reliable.
|
|
|
|
Having these error handling paths also complicates non-error code, due to the
|
|
|
|
need to roll back state at any point after a memory allocation.
|
|
|
|
|
|
|
|
Take any larger body of code, that is supposed to handle OOM, and test whether
|
|
|
|
the error paths actually work, for example by overriding malloc with a version
|
|
|
|
that randomly fails. You will find bugs quickly, and often they will be very
|
|
|
|
annoying to fix (if you can even reproduce them).
|
|
|
|
|
|
|
|
In addition, a clear indication that something went wrong may be missing. On
|
|
|
|
error your program may exhibit "degraded" behavior by design. Consider a video
|
|
|
|
encoder dropping frames somewhere in the middle of a video due to temporary
|
|
|
|
allocation failures, instead of just exiting with an errors. In other cases, it
|
|
|
|
may open conceptual security holes. Failing fast may be better.
|
|
|
|
|
|
|
|
mpv uses GPU APIs, which may be break on allocation errors (because driver
|
|
|
|
authors will have the same issues as described here), or don't even have a real
|
|
|
|
concept for dealing with OOM (OpenGL).
|
|
|
|
|
|
|
|
libmpv is often used by GUIs, which I predict always break if OOM happens.
|
|
|
|
|
|
|
|
Last but not least, OSes like Linux use "overcommit", which basically means that
|
|
|
|
your program may crash any time OOM happens, even if it doesn't use malloc() at
|
|
|
|
all!
|
|
|
|
|
|
|
|
But still, don't just assume malloc() always succeeds. Use MP_HANDLE_OOM(). The
|
|
|
|
ta* APIs do this for you. The reason for this is that dereferencing a NULL
|
|
|
|
pointer can have security relevant consequences if large offsets are involved.
|
|
|
|
Also, a clear error message is better than a random segfault.
|
|
|
|
|
|
|
|
Some big memory allocations are checked anyway. For example, all code must
|
|
|
|
assume that allocating video frames or packets can fail. (The above example
|
|
|
|
of dropping video frames during encoding is entirely possible in mpv.)
|
|
|
|
|
|
|
|
Undefined behavior
|
|
|
|
------------------
|
|
|
|
|
|
|
|
Undefined behavior (UB) is a concept in the C language. C is famous for being a
|
|
|
|
language that makes it almost impossible to write working code, because
|
|
|
|
undefined behavior is so easily triggered, compilers will happily abuse it to
|
|
|
|
generate "faster" code, debugging tools will shout at you, and sometimes it
|
|
|
|
even means your code doesn't work.
|
|
|
|
|
|
|
|
There is a lot of literature on this topic. Read it.
|
|
|
|
|
|
|
|
(In C's defense, UB exists in other languages too, but since they're not used
|
|
|
|
for low level infrastructure, and/or these languages are at times not rigorously
|
|
|
|
defined, simply nobody cares. However, the C standard committee is still guilty
|
|
|
|
for not addressing this. I'll admit that I can't even tell from the standard's
|
|
|
|
gibberish whether some specific behavior is UB or not. It's written like tax
|
|
|
|
law.)
|
|
|
|
|
|
|
|
In mpv, we generally try to avoid undefined behavior. For one, we want portable
|
|
|
|
and reliable operation. But more importantly, we want clean output from
|
|
|
|
debugging tools, in order to find real bugs more quickly and effectively.
|
|
|
|
|
|
|
|
Avoid the "works in practice" argument. Once debugging tools come into play, or
|
|
|
|
simply when "in practice" stops being true, this will all get back to you in a
|
|
|
|
bad way.
|
|
|
|
|
|
|
|
Global state, library safety
|
|
|
|
----------------------------
|
|
|
|
|
|
|
|
Mutable global state is when code uses global variables that are not read-only.
|
|
|
|
This must be avoided in mpv. Always use context structs that the caller of
|
|
|
|
your code needs to allocate, and whose pointers are passed to your functions.
|
|
|
|
|
|
|
|
Library safety means that your code (or library) can be used by a library
|
|
|
|
without causing conflicts with other library users in the same process. To any
|
|
|
|
piece of code, a "safe" library's API can simply be used, without having to
|
|
|
|
worry about other API users that may be around somewhere.
|
|
|
|
|
|
|
|
Libraries are often not library safe, because they they use global mutable state
|
|
|
|
or other "global" resources. Typical examples include use of signals, simple
|
|
|
|
global variables (like hsearch() in libc), or internal caches not protected by
|
|
|
|
locks.
|
|
|
|
|
|
|
|
A surprisingly high number of libraries are not library safe because they need
|
|
|
|
global initialization. Typically they provide an API function, which
|
|
|
|
"initializes" the library, and which must be called before calling any other
|
|
|
|
API functions. Often, you are to provide global configuration parameters, which
|
|
|
|
can change the behavior of the library. If two libraries A and B use library C,
|
|
|
|
but A and B initialize C with different parameters, something "bad" may happen.
|
|
|
|
In addition, these global initialization functions are often not thread-safe. So
|
|
|
|
if A and B try to initialize C at the same time (from different threads and
|
|
|
|
without knowing about each other), it may cause undefined behavior. (libcurl is
|
|
|
|
a good example of both of these issues. FFmpeg and some TLS libraries used to be
|
|
|
|
affected, but improved.)
|
|
|
|
|
|
|
|
This is so bad because library A and B from the previous example most likely
|
|
|
|
have no way to cooperate, because they're from different authors and have no
|
|
|
|
business knowing each others. They'd need a library D, which wraps library C
|
|
|
|
in a safe way. Unfortunately, typically something worse happens: libraries get
|
|
|
|
"infected" by the unsafeness of its sub-libraries, and export a global init API
|
|
|
|
just to initialize the sub-libraries. In the previous example, libraries A and B
|
|
|
|
would export global init APIs just to init library C, even though the rest of
|
|
|
|
A/B are clean and library safe. (Again, libcurl is an example of this, if you
|
|
|
|
subtract other historic anti-features.)
|
|
|
|
|
|
|
|
The main problem with library safety is that its lack propagates to all
|
|
|
|
libraries using the library.
|
|
|
|
|
|
|
|
We require libmpv to be library safe. This is not really possible, because some
|
|
|
|
libraries are not library safe (FFmpeg, Xlib, partially ALSA). However, for
|
|
|
|
ideological reasons, there is no global init API, and best effort is made to try
|
|
|
|
to avoid problems.
|
|
|
|
|
|
|
|
libmpv has some features that are not library safe, but which are disabled by
|
|
|
|
default (such as terminal usage aka stdout, or JSON IPC blocking SIGPIPE for
|
|
|
|
internal convenience).
|
|
|
|
|
|
|
|
A notable, very disgustingly library unsafe behavior of libmpv is calling
|
|
|
|
abort() on some memory allocation failure. See error checking section.
|
|
|
|
|
|
|
|
Logging
|
|
|
|
-------
|
|
|
|
|
|
|
|
All logging and terminal output in mpv goes through the functions and macros
|
|
|
|
provided in common/msg.h. This is in part for library safety, and in part to
|
|
|
|
make sure users can silence all output, or to redirect the output elsewhere,
|
|
|
|
like a log file or the internal console.lua script.
|
|
|
|
|
|
|
|
Locking
|
|
|
|
-------
|
|
|
|
|
|
|
|
See generally available literature. In mpv, we use pthread for this.
|
|
|
|
|
|
|
|
Always keep locking clean. Don't skip locking just because it will work "in
|
|
|
|
practice". (See undefined behavior section.) If your use case is simple, you may
|
2019-12-28 09:09:28 +00:00
|
|
|
use C11 atomics (osdep/atomic.h for partial C99 support), but most likely you
|
2019-12-27 16:09:47 +00:00
|
|
|
will only hurt yourself and others.
|
|
|
|
|
|
|
|
Always make clear which fields in a struct are protected by which lock. If a
|
|
|
|
field is immutable, or simply not thread-safe (e.g. state for a single worker
|
|
|
|
thread), document it as well.
|
|
|
|
|
|
|
|
Internal mpv APIs are assumed to be not thread-safe by default. If they have
|
|
|
|
special guarantees (such as being usable by more than one thread at a time),
|
|
|
|
these should be explicitly documented.
|
|
|
|
|
|
|
|
All internal mpv APIs must be free of global state. Even if a component is not
|
|
|
|
thread-safe, multiple threads can use _different_ instances of it without any
|
|
|
|
locking.
|
|
|
|
|
2019-12-28 09:09:28 +00:00
|
|
|
On a side note, recursive locks may seem convenient at first, but introduce
|
2019-12-27 16:09:47 +00:00
|
|
|
additional problems with condition variables and locking hierarchies. They
|
|
|
|
should be avoided.
|
|
|
|
|
|
|
|
Locking hierarchy
|
|
|
|
-----------------
|
|
|
|
|
|
|
|
A simple way to avoid deadlocks with classic locking is to define a locking
|
|
|
|
hierarchy or lock order. If all threads acquire locks in the same order, no
|
|
|
|
deadlocks will happen.
|
|
|
|
|
|
|
|
For example, a "leaf" lock is a lock that is below all other locks in the
|
|
|
|
hierarchy. You can acquire it any time, as long as you don't acquire other
|
|
|
|
locks while holding it.
|
|
|
|
|
|
|
|
Unfortunately, C has no way to declare or check the lock order, so you should at
|
|
|
|
least document it.
|
|
|
|
|
|
|
|
In addition, try to avoid exposing locks to the outside. Making the declaration
|
|
|
|
of a lock private to a specific .c file (and _not_ exporting accessors or
|
2019-12-28 09:09:28 +00:00
|
|
|
lock/unlock functions that manipulate the lock) is a good idea. Your component's
|
|
|
|
API may acquire internal locks, but should release them when returning. Keeping
|
|
|
|
the entire locking in a single file makes it easy to check it.
|
2019-12-27 16:09:47 +00:00
|
|
|
|
|
|
|
Avoiding callback hell
|
|
|
|
----------------------
|
|
|
|
|
|
|
|
mpv code is separated in components, like the "frontend" (i.e. MPContext mpctx),
|
|
|
|
VOs, AOs, demuxers, and more. The frontend usually calls "down" the usage
|
|
|
|
hierarchy: mpctx almost on top, then things like vo/ao, and utility code on the
|
|
|
|
very bottom.
|
|
|
|
|
|
|
|
"Callback hell" is when when components call both up and down the hierarchy,
|
|
|
|
which for example leads to accidentally recursion, reentrancy problems, or
|
|
|
|
locking nightmares. This is avoided by (mostly) calling only down the hierarchy.
|
|
|
|
Basically the call graph forms a DAG. The other direction is handled by event
|
|
|
|
queues, wakeup callbacks, and similar mechanisms.
|
|
|
|
|
|
|
|
Typically, a component provides an API, and does not know anything about its
|
|
|
|
user. The API user (component higher in the hierarchy) polls the state of the
|
|
|
|
lower component when needed.
|
|
|
|
|
|
|
|
This also enforces some level of modularization, and with some luck the locking
|
|
|
|
hierarchy. (Basically, locks of lower components automatically become leaf
|
|
|
|
locks.) Another positive effect is simpler memory management.
|
|
|
|
|
|
|
|
(Also see e.g.: http://250bpm.com/blog:24)
|
|
|
|
|
|
|
|
Wakeup callbacks
|
|
|
|
----------------
|
|
|
|
|
|
|
|
This is a common concept in mpv. Even the public API uses it. It's used when an
|
|
|
|
API has internal threads (or otherwise triggers asynchronous events), but the
|
|
|
|
component call hierarchy needs to be kept. The wakeup callback is the only
|
|
|
|
exception to the call hierarchy, and always calls up.
|
|
|
|
|
2019-12-28 09:09:28 +00:00
|
|
|
For example, vo spawns a thread that the API user (the mpv frontend) does not
|
|
|
|
need to know about. vo simply provides a single-threaded API (or that looks like
|
|
|
|
one). This API needs a way to notify the API user of new events. But the vo
|
|
|
|
event producer is on the vo thread - it can't simply invoke a callback back into
|
|
|
|
the API user, because then the API user has to deal with locking, despite not
|
|
|
|
using threads. In addition, this will probably cause problems like mentioned in
|
|
|
|
the "callback hell" section, especially lock order issues.
|
2019-12-27 16:09:47 +00:00
|
|
|
|
|
|
|
The solution is the wakeup callback. It merely unblocks the API user from
|
|
|
|
waiting, and the API user then uses the normal vo API to examine whether or
|
|
|
|
which state changed. As a concept, it documents what a wakeup callback is
|
|
|
|
allowed to do and what not, to avoid the aforementioned problems.
|
|
|
|
|
|
|
|
Generally, you are not allowed to call any API from the wakeup callback. You
|
|
|
|
just do whatever is needed to unblock your thread. For example, if it's waiting
|
|
|
|
on a mutex/condition variable, acquire the mutex, set a change flag, signal
|
|
|
|
the condition variable, unlock, return. (This mutex must not be held when
|
|
|
|
calling the API. It must be a leaf lock.)
|
|
|
|
|
|
|
|
Restricting the wakeup callback like this sidesteps any reentrancy issues and
|
|
|
|
other complexities. The API implementation can simply hold internal (and
|
|
|
|
non-recursive) locks while invoking the wakeup callback.
|
|
|
|
|
|
|
|
The API user still needs to deal with locking (probably), but there's only the
|
|
|
|
need to implement a single "receiver", that can handle the entire API of the
|
|
|
|
used component. (Or multiple APIs - MPContext for example has only 1 wakeup
|
|
|
|
callback that handles all AOs, VOs, input, demuxers, and more. It simple re-runs
|
|
|
|
the playloop.)
|
|
|
|
|
|
|
|
You could get something more advanced by turning this into a message queue. The
|
|
|
|
API would append a message to the queue, and the API user can read it. But then
|
|
|
|
you still need a way to "wakeup" the API user (unless you force the API user
|
|
|
|
to block on your API, which will make things inconvenient for the API user). You
|
|
|
|
also need to worry about what happens if the message queue overruns (you either
|
|
|
|
lose messages or have unbounded memory usage). In the mpv public API, the
|
|
|
|
distinction between message queue and wakeup callback is sort of blurry, because
|
|
|
|
it does provide a message queue, but an additional wakeup callback, so API
|
|
|
|
users are not required to call mpv_wait_event() with a high timeout.
|
|
|
|
|
|
|
|
mpv itself prefers using wakeup callbacks over a generic event queue, because
|
|
|
|
most times an event queue is not needed (or complicates things), and it is
|
|
|
|
better to do it manually.
|
|
|
|
|
|
|
|
(You could still abstract the API user side of wakeup callback handling, and
|
|
|
|
avoid reimplementing it all the time. Although mp_dispatch_queue already
|
|
|
|
provides mechanisms for this.)
|
|
|
|
|
|
|
|
Condition variables
|
|
|
|
-------------------
|
|
|
|
|
|
|
|
They're used whenever a thread needs to wait for something, without nonsense
|
|
|
|
like sleep calls or busy waiting. mpv uses the standard pthread API for this.
|
|
|
|
There's a lot of literature on it. Read it.
|
|
|
|
|
|
|
|
For initial understanding, it may be helpful to know that condition variables
|
|
|
|
are not variables that signal a condition. pthread_cond_t does not have any
|
|
|
|
state per-se. Maybe pthread_cond_t would better be named pthread_interrupt_t,
|
|
|
|
because its sole purpose is to interrupt a thread waiting via pthread_cond_wait()
|
|
|
|
(or similar). The "something" in "waiting for something" can be called
|
|
|
|
predicate (to avoid confusing it with "condition"). Consult literature for the
|
|
|
|
proper terms.
|
|
|
|
|
2019-12-28 09:09:28 +00:00
|
|
|
The very short version is...
|
2019-12-27 16:09:47 +00:00
|
|
|
|
2019-12-28 09:09:28 +00:00
|
|
|
Shared declarations:
|
2019-12-27 16:09:47 +00:00
|
|
|
|
|
|
|
pthread_mutex_t lock;
|
|
|
|
pthread_cond_t cond_var;
|
|
|
|
struct something state_var; // protected by lock, changes signaled by cond_var
|
|
|
|
|
2019-12-28 09:09:28 +00:00
|
|
|
Waiter thread:
|
2019-12-27 16:09:47 +00:00
|
|
|
|
|
|
|
pthread_mutex_lock(&lock);
|
|
|
|
|
|
|
|
// Wait for a change in state_var. We want to wait until predicate_fulfilled()
|
|
|
|
// returns true.
|
|
|
|
// Must be a loop for 2 reasons:
|
|
|
|
// 1. cond_var may be associated with other conditions too
|
|
|
|
// 2. pthread_cond_wait() can have sporadic wakeups
|
|
|
|
while (!predicate_fulfilled(&state_var)) {
|
|
|
|
// This unlocks, waits for cond_var to be signaled, and then locks again.
|
|
|
|
// The _whole_ point of cond_var is that unlocking and waiting for the
|
|
|
|
// signal happens atomically.
|
|
|
|
pthread_cond_wait(&cond_var, &lock);
|
|
|
|
}
|
|
|
|
|
|
|
|
// Here you may react to the state change. The state cannot change
|
|
|
|
// asynchronously as long as you still hold the lock (and didn't release
|
|
|
|
// and reacquire it).
|
|
|
|
// ...
|
|
|
|
|
|
|
|
pthread_mutex_unlock(&lock);
|
|
|
|
|
2019-12-28 09:09:28 +00:00
|
|
|
Signaler thread:
|
2019-12-27 16:09:47 +00:00
|
|
|
|
|
|
|
pthread_mutex_lock(&lock);
|
|
|
|
|
|
|
|
// Something changed. Update the shared variable with the new state.
|
|
|
|
update_state(&state_var);
|
|
|
|
|
|
|
|
// Notify that something changed. This will wake up the waiter thread if
|
|
|
|
// it's blocked in pthread_cond_wait(). If not, nothing happens.
|
|
|
|
pthread_cond_broadcast(&cond_var);
|
|
|
|
|
|
|
|
// Fun fact: good implementations wake up the waiter only when the lock is
|
|
|
|
// released, to reduce kernel scheduling overhead.
|
|
|
|
pthread_mutex_unlock(&lock);
|
|
|
|
|
|
|
|
Some basic rules:
|
|
|
|
1. Always access your state under proper locking
|
|
|
|
2. Always check your predicate before every call to pthread_cond_wait()
|
|
|
|
(And don't call pthread_cond_wait() if the predicate is fulfilled.)
|
|
|
|
3. Always call pthread_cond_wait() in a loop
|
|
|
|
(And only if your predicate failed without releasing the lock..)
|
|
|
|
4. Always call pthread_cond_broadcast()/_signal() inside of its associated
|
|
|
|
lock
|
|
|
|
|
|
|
|
mpv sometimes violates rule 3, and leaves "retrying" (i.e. looping) to the
|
|
|
|
caller.
|
|
|
|
|
|
|
|
Common pitfalls:
|
|
|
|
- Thinking that pthread_cond_t is some kind of semaphore, or holds any
|
|
|
|
application state or the user predicate (it _only_ wakes up threads
|
|
|
|
that are at the same time blocking on pthread_cond_wait() and friends,
|
|
|
|
nothing else)
|
|
|
|
- Changing the predicate, but not updating all pthread_cond_broadcast()/
|
|
|
|
_signal() calls correctly
|
|
|
|
- Forgetting that pthread_cond_wait() unlocks the lock (other threads can
|
|
|
|
and must acquire the lock)
|
|
|
|
- Holding multiple nested locks while trying to wait (=> deadlock, violates
|
|
|
|
the lock order anyway)
|
|
|
|
- Waiting for a predicate correctly, but unlocking/relocking before acting
|
|
|
|
on it (unlocking allows arbitrary state changes)
|
|
|
|
- Confusing which lock/condition var. is used to manage a bit of state
|
|
|
|
|
|
|
|
Generally available literature probably has better examples and explanations.
|
|
|
|
|
|
|
|
Using condition variables the proper way is generally preferred over using more
|
2019-12-28 09:09:28 +00:00
|
|
|
messy variants of them. (Just saying because on win32, "SetEvent" exists, and
|
|
|
|
it's inferior to condition variables. Try to avoid the win32 primitives, even if
|
2019-12-27 16:09:47 +00:00
|
|
|
you're dealing with Windows-only code.)
|
2019-12-28 09:09:28 +00:00
|
|
|
|
|
|
|
Threads
|
|
|
|
-------
|
|
|
|
|
|
|
|
Threading should be conservatively used. Normally, mpv code pretends to be
|
|
|
|
single-threaded, and provides thread-unsafe APIs. Threads are used coarsely,
|
|
|
|
and if you can avoid messing with threads, you should. For example, VOs and AOs
|
|
|
|
do not need to deal with threads normally, even though they run on separate
|
|
|
|
threads. The glue code "isolates" them from any threading issues.
|