SWF File Format Spec v10
SWF File Format Spec v10
SWF File Format Spec v10
Version 10
Copyright © 2006-2008 Adobe Systems Incorporated. All rights reserved. This manual may not be copied, photocopied,
reproduced, translated, or converted to any electronic or machine-readable form in whole or in part without written approval
from Adobe Systems Incorporated. Notwithstanding the foregoing, a person obtaining an electronic version of this manual from
Adobe may print out one copy of this manual provided that no part of this manual may be printed out, reproduced, distributed,
resold, or transmitted for any other purposes, including, without limitation, commercial purposes, such as selling copies of this
documentation or providing paid-for support services.
Trademarks
Adobe, ActionScript, Flash, Flash Media Server, Flash Player, PostScript, and XMP are either registered trademarks or trademarks
of Adobe Systems Incorporated and may be registered in the United States or in other jurisdictions including internationally.
Other product names, logos, designs, titles, words, or phrases mentioned within this publication may be trademarks, service
marks, or trade names of Adobe Systems Incorporated or other entities and may be registered in certain jurisdictions including
internationally. No right or license is granted to any Adobe trademark.
Third-Party Information
This guide contains links to third-party websites that are not under the control of Adobe Systems Incorporated, and Adobe
Systems Incorporated is not responsible for the content on any linked site. If you access a third-party website mentioned in this
guide, then you do so at your own risk. Adobe Systems Incorporated provides these links only as a convenience, and the inclusion
of the link does not imply that Adobe Systems Incorporated endorses or accepts any responsibility for the content on those third-
party sites. No right, license or interest is granted in any third party technology referenced in this guide.
NOTICE: THIS PUBLICATION AND THE INFORMATION HEREIN IS FURNISHED “AS IS”, IS SUBJECT TO
CHANGE WITHOUT NOTICE, AND SHOULD NOT BE CONSTRUED AS A COMMITMENT BY ADOBE
SYSTEMS INCORPORATED. ADOBE SYSTEMS INCORPORATED ASSUMES NO RESPONSIBILITY OR
LIABILITY FOR ANY ERRORS OR INACCURACIES, MAKES NO WARRANTY OF ANY KIND (EXPRESS,
IMPLIED, OR STATUTORY) WITH RESPECT TO THIS PUBLICATION, AND EXPRESSLY DISCLAIMS ANY AND
ALL WARRANTIES OF MERCHANTABILITY, FITNESS FOR PARTICULAR PURPOSES, AND
NONINFRINGEMENT OF THIRD PARTY RIGHTS.
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
What’s new in SWF 10 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
3
Chapter 3: The Display List . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Clipping layers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Using the display list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Display list tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
PlaceObject . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
PlaceObject2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
PlaceObject3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
ClipEventFlags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
RemoveObject. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
RemoveObject2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
ShowFrame . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Chapter 5: Actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
SWF 3 action model. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
SWF 3 actions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
SWF 4 action model. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
The program counter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
SWF 4 actions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Stack operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Arithmetic operators. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Numerical comparison . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Logical operators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
String manipulation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Type conversion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
4 Contents
Control flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Variables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Movie control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .87
Utilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
SWF 5 action model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
SWF 5 actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
ScriptObject actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Type actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .105
Math actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106
Stack operator actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
SWF 6 action model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
SWF 6 actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
SWF 7 action model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
SWF 7 actions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115
SWF 9 action model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122
SWF 10 action model . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .123
Contents 5
DefineBitsJPEG4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
6 Contents
CSMTextSettings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196
DefineFont4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .198
Contents 7
Macro block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238
Block data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .239
Screen Video bitstream format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .239
Block format. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240
Video packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 240
Image block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .242
Screen Video V2 bitstream format . . . . . . . . . . . . . . . . . . . . . . . . . . . . .242
V2 Colorspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .243
V2 Video Packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .243
Image Block V2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245
Image format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 245
Image block diff position . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .246
Image block prime position . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .247
On2 Truemotion VP6 bitstream format . . . . . . . . . . . . . . . . . . . . . . . . .247
VP6 FLV video packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249
VP6 FLV Alpha video packet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249
VP6 SWF video packet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
VP6 SWF Alpha video packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
SWF video tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 250
DefineVideoStream . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 251
VideoFrame . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .252
8 Contents
Introduction
The SWF (pronounced “swiff ”) file format delivers vector graphics, text, video, and sound
over the Internet and is supported by Adobe® Flash® Player software. The SWF file format is
designed to be an efficient delivery format, not a format for exchanging graphics between
graphics editors. It is designed to meet the following goals:
On-screen display—The format is primarily intended for on-screen display and supports
anti-aliasing, fast rendering to a bitmap of any color format, animation, and interactive
buttons.
Extensibility—The format is a tagged format, so it can be evolved with new features while
maintaining backward compatibility with earlier versions of Flash Player.
Network delivery—The format can travel over a network with limited and unpredictable
bandwidth. The files are compressed to be small and support incremental rendering through
streaming. The SWF file format is a binary format and is not human readable like HTML.
The SWF file format uses techniques such as bit-packing and structures with optional fields
to minimize file size.
Simplicity—The format is simple so that Flash Player is small and easily ported. Also, Flash
Player depends upon a limited set of operating system features only.
File independence—The files display with minimal dependence on external resources such
as fonts.
Scalability—The files work well on limited hardware, and can take advantage of better
hardware when it is available. This ability is important because computers have different
monitor resolutions and bit depths.
Speed—The graphics described by SWF files render quickly.
Scriptability—The format includes tags that provide sequences of byte codes to be
interpreted by a stack machine. The byte codes support the ActionScript® language. Flash
Player provides a runtime ActionScript object model that allows interaction with drawing
primitives, servers, and features of Flash Player.
SWF files have the extension .swf and a MIME type of application/x-shockwave-flash.
9
The SWF format has evolved through several versions. Through SWF 5, substantial additions
were made to the SWF tag set. Starting with SWF 6 and later, the SWF format changes less,
as more new features are implemented partly or entirely at the ActionScript level. Starting
with SWF 9, the ActionScript 3.0 language, which employs the new ActionScript Virtual
Machine 2 (AVM2) can be used. Anyone planning to generate SWF file content that uses
newer features should become familiar with the ActionScript object model that Flash Player
exposes. Some references for this information are Programming ActionScript 3.0 (see
www.adobe.com/go/learn_fl_cs4_programmingAS3_en), ActionScript 3.0 Language Reference
(see www.adobe.com/go/learn_flashcs4_langref_en), and the Adobe ActionScript Virtual
Machine 2 Overview (PDF file) at www.adobe.com/go/avm2overview.
Adobe seriously considers all feedback to the SWF file format specification. E-mail any
unclear or potentially erroneous information within the specification to Adobe at
flashformat@adobe.com. All such email submissions shall be subject to the Submitted
Materials guidelines in the Terms of Use at www.adobe.com/misc/copyright.html.
10 Introduction
CHAPTER 1
11
For example:
■ The 32-bit value 0x456e7120 is stored as 20 71 6e 45.
■ The 16-bit value 0xe712 is stored as 12 e7.
All integer types must be byte-aligned. That is, the first bit of an integer value must be stored
in the first bit of a byte in the SWF file.
Signed integers are represented by using traditional 2’s-complement bit patterns. These are the
signed integer representations used on most modern computer platforms. In the 2’s
complement system, negative numbers have 1 as the first bit, and zero and positive numbers
have 0 as the first bit. A negative number, -n, is represented as the bitwise opposite of the
positive-zero number n-1.
Integer Types
Type Comment
SI8 Signed 8-bit integer value
Fixed-point numbers
The SWF file format supports two types of fixed-point numbers: 32-bit and 16-bit.
The 32-bit fixed-point numbers are 16.16. That is, the high 16 bits represent the number
before the decimal point, and the low 16 bits represent the number after the decimal point.
FIXED values are stored like 32-bit integers in the SWF file (using little-endian byte order)
and must be byte aligned.
Fixed-Point Types
Type Comment
FIXED 32-bit 16.16 fixed-point number
Floating-point numbers
SWF 8 and later supports the use of IEEE Standard 754 compatible floating-point types.
Three types of floating-point numbers are supported.
Floating-Point Types
Type Comment
FLOAT16 Half-precision (16-bit) floating-point number
FLOAT16 is identical to the characteristics of FLOAT except for changes to the number of
bits allocated to the exponent and mantissa:
■ 1 bit for the sign
■ 5 bits for the exponent, with an exponent bias of 16
■ 10 bits for the mantissa
Floating-point numbers 13
Encoded integers
SWF 9 and later supports the use of integers encoded with a variable number of bytes. One
type of encoded integer is supported.
Floating-Point Types
Type Comment
EncodedU32 Variable length encoded 32-bit unsigned integer
This is a 32-bit unsigned integer value encoded with a variable number of bytes to save space.
All EncodedU32's are encoded as 1-5 bytes depending on the value (larger values need more
space). The encoding method is if the hi bit in the current byte is set, then the next byte is also
part of the value. Each bit in a byte contributes 7 bits to the value, with the hi bit telling us
whether to use the next byte, or if this is the last byte for the value.
This is the algorithm for parsing an EncodedU32:
int GetEncodedU32(unsigned char*& pos)
{
int result = pos[0];
if (!(result & 0x00000080))
{
pos++;
return result;
}
result = (result & 0x0000007f) | pos[1]<<7;
if (!(result & 0x00004000))
{
pos += 2;
return result;
}
result = (result & 0x00003fff) | pos[2]<<14;
if (!(result & 0x00200000))
{
pos += 3;
return result;
}
result = (result & 0x001fffff) | pos[3]<<21;
if (!(result & 0x10000000))
{
pos += 4;
return result;
}
result = (result & 0x0fffffff) | pos[4]<<28;
pos += 5;
return result;
}
The bit stream begins with a 6-bit value (BV1), followed by a 5-bit value (BV2) that is spread
across Byte1 and Byte2. BV3 is spread across Byte2 and Byte3, while BV4 is wholly contained
within Byte3. Byte 5 contains two bit values: BV7 and BV8. BV9 is followed by a byte-
aligned type (UI16), so the last four bits of Byte 6 are padded with zeros.
Bit Values
Type Comment
SB[nBits] Signed-bit value (nBits is the number of bits used to store the value)
UB[nBits] Unsigned-bit value (nBits is the number of bits used to store the value)
FB[nBits] Signed, fixed-point bit value (nBits is the number of bits used to store the
value)
When an unsigned-bit value is expanded into a larger word size, the leftmost bits are filled
with zeros. When a signed-bit value is expanded into a larger word size, the high bit is copied
to the leftmost bits.
This expansion is called sign extension. For example, the 4-bit unsigned value UB[4] = 1110
would be expanded to a 16-bit value like this: 0000000000001110 = 14. The same value
interpreted as a signed value, SB[4] = 1110 would be expanded to 1111111111111110 = –2.
Signed-bit values are similar but must take account of the sign bit. The signed value of 35 is
represented as SB[7] = 0100011. The extra zero bit is required; otherwise the high bit is sign
extended and the value is interpreted as negative.
Bit values 15
Fixed-point bit values are 32-bit 16.16 signed, fixed-point numbers. That is, the high 16 bits
represent the number before the decimal point, and the low 16 bits represent the number after
the decimal point. A fixed-point bit value is identical to a signed-bit value, but the
interpretation is different. For example, a 19-bit, signed-bit value of 0x30000 is interpreted as
196608 decimal. The 19-bit, fixed-point bit value 0x30000 is interpreted as 3.0. The format
of this value is effectively 3.16 rather than 16.16.
RECT
Field Type Comment
Nbits UB[5] Bits in each rect value field
The Nbits field determines the number of bits used to store the coordinate values Xmin,
Xmax, Ymin, and Ymax. Say the coordinates of the rectangle are as follows:
Xmin = 127 decimal = 1111111 binary
Xmax = 260 decimal = 100000100 binary
Ymin = 15 decimal = 1111 binary
Ymax = 514 decimal = 1000000010 binary
RECT
Field Type and Value Comment
Nbits UB[5] = 01011 Bits required (11)
String values
A string value represents a null-terminated character string. The format for a string value is a
sequential list of bytes terminated by the null character byte.
STRING
Field Type Comment
String UI8[zero or more] Non-null string character data
In SWF 5 or earlier, STRING values are encoded using either ANSI (which is a superset of
ASCII) or shift-JIS (a Japanese encoding). You cannot indicate the encoding that is used;
instead, the decoding choice is made according to the locale in which Flash Player is running.
This means that text content in SWF 5 or earlier can only be encoded in ANSI or shift-JIS,
and the target audience must be known during authoring—otherwise garbled text results.
In SWF 6 or later, STRING values are always encoded by using the Unicode UTF-8 standard.
This is a multibyte encoding; each character is composed of between one and four bytes.
UTF-8 is a superset of ASCII; the byte range 0 to 127 in UTF-8 exactly matches the ASCII
mapping, and all ASCII characters 0 to 127 are represented by just one byte. UTF-8
guarantees that whenever a character other than character 0 (the null character) is encoded by
using more than one byte, none of those bytes are zero. This avoids the appearance of internal
null characters in UTF-8 strings, meaning that it remains safe to treat null bytes as string
terminators, just as for ASCII strings.
String values 17
Language code
A language code identifies a spoken language that applies to text. Language codes are
associated with font specifications in the SWF file format.
NOTE
A language code does not specify a text encoding; it specifies a spoken language.
LANGCODE
Field Type Comment
LanguageCode UI8 Language code (see following)
Flash Player uses language codes to determine line-breaking rules for dynamic text, and to
choose backup fonts when a specified device font is unavailable. Other uses for language codes
may be found in the future.
A language code of zero means no language. This code results in behavior that is dependent on
the locale in which Flash Player is running.
At the time of writing, the following language codes are recognized by Flash Player:
■ 1 = Latin (the western languages covered by Latin-1: English, French, German, and so on)
■ 2 = Japanese
■ 3 = Korean
■ 4 = Simplified Chinese
■ 5 = Traditional Chinese
RGB
Field Type Comment
Red UI8 Red color value
RGBA
Field Type Comment
Red UI8 Red color value
ARGB
Field Type Comment
Alpha UI8 alpha value defining opacity
RECT
Field Type Comment
Nbits UB[5] Bits used for each subsequent
field
MATRIX record
The MATRIX record represents a standard 2x3 transformation matrix of the sort commonly
used in 2D graphics. It is used to describe the scale, rotation, and translation of a graphic
object. The MATRIX record must be byte aligned.
MATRIX
Field Type Comment
HasScale UB[1] Has scale values if equal to 1
NScaleBits If HasScale = 1, UB[5] Bits in each scale value field
The ScaleX, ScaleY, RotateSkew0 and RotateSkew1 fields are stored as 16.16 fixed-point
values. The TranslateX and TranslateY values are stored as signed values in twips.
The MATRIX record is optimized for common cases such as a matrix that performs a
translation only. In this case, the HasScale and HasRotate flags are zero, and the matrix only
contains the TranslateX and TranslateY fields.
The mapping from the MATRIX fields to the 2x3 matrix is as follows:
ScaleX RotateSkew0
RotateSkew1 ScaleY
TranslateX TranslateY
For any coordinates (x, y), the transformed coordinates (x', y') are calculated as follows:
x' = x * ScaleX + y * RotateSkew1 + TranslateX
y' = x * RotateSkew0 + y * ScaleY + TranslateY
The following table describes how the members of the matrix are used for each type of
operation:
MATRIX record 21
Color transform record
The CXFORM record defines a simple transform that can be applied to the color space of a
graphic object. The following are the two types of transform possible:
■ Multiplication transforms
■ Addition transforms
Multiplication transforms multiply the red, green, and blue components by an 8.8 fixed-point
multiplication term. The fixed-point representation of 1.0 is 0x100 or 256 decimal.
For any color (R,G,B), the transformed color (R', G', B') is calculated as follows:
R' = (R * RedMultTerm) / 256
G' = (G * GreenMultTerm) / 256
B' = (B * BlueMultTerm) / 256
Addition transforms add an addition term (positive or negative) to the red, green, and blue
components of the object being displayed. If the result is greater than 255, the result is
clamped to 255. If the result is less than zero, the result is clamped to zero.
For any color (R,G,B), the transformed color (R', G', B') is calculated as follows:
R' = max(0, min(R + RedAddTerm, 255))
G' = max(0, min(G + GreenAddTerm, 255))
B' = max(0, min(B + BlueAddTerm, 255))
CXFORM
Field Type Comment
HasAddTerms UB[1] Has color addition values if equal
to 1
CXFORMWITHALPHA
Field Type Comment
HasAddTerms UB[1] Has color addition values if
equal to 1
Version UI8 Single byte file version (for example, 0x06 for SWF 6)
FrameRate UI16 Frame delay in 8.8 fixed number of frames per second
The header begins with a three-byte signature of either 0x46, 0x57, 0x53 (“FWS”); or 0x43,
0x57, 0x53 (“CWS”). An FWS signature indicates an uncompressed SWF file; CWS
indicates that the entire file after the first 8 bytes (that is, after the FileLength field) was
compressed by using the ZLIB open standard. The data format that the ZLIB library uses is
described by Request for Comments (RFCs) documents 1950 to 1952. CWS file compression
is permitted in SWF 6 or later only.
25
A one-byte version number follows the signature. The version number is not an ASCII
character, but an 8-bit number. For example, for SWF 4, the version byte is 0x04, not the
ASCII character “4” (0x34).
The FileLength field is the total length of the SWF file, including the header. If this is an
uncompressed SWF file (FWS signature), the FileLength field should exactly match the file
size. If this is a compressed SWF file (CWS signature), the FileLength field indicates the total
length of the file after decompression, and thus generally does not match the file size. Having
the uncompressed size available can make the decompression process more efficient.
The FrameSize field defines the width and height of the on-screen display. This field is stored
as a RECT structure, meaning that its size may vary according to the number of bits needed
to encode the coordinates. The FrameSize RECT always has Xmin and Ymin value of 0; the
Xmax and Ymax members define the width and height (see “Using bit values” on page 16).
The FrameRate is the desired playback rate in frames per second. This rate is not guaranteed
if, for example, Flash Player is running on a slow or busy CPU.
The FrameCount is the total number of frames in this SWF file.
FileAttributes
Header Tag Tag Tag End tag
tag ...
SWF File Structure
RECORDHEADER (short)
Field Type Comment
TagCodeAndLength UI16 Upper 10 bits: tag type
Lower 6 bits: tag length
N OT E
The TagCodeAndLength field is a two-byte word, not a bit field of 10 bits followed by a
bit field of 6 bits. The little-endian byte ordering of a SWF file makes these two layouts
different.
The length specified in the TagCodeAndLength field does not include the
RECORDHEADER that starts a tag.
If the tag is 63 bytes or longer, it is stored in a long tag header. The long tag header consists of
a short tag header with a length of 0x3f, followed by a 32-bit length.
RECORDHEADER (long)
Field Type Comment
TagCodeAndLength UI16 Tag type and length of 0x3F
Packed together as in short header
The dictionary
The dictionary is a repository of characters that are defined, and are available for control tags
to use. The process of building and using the dictionary is as follows:
1. The definition tag defines some content, such as a shape, font, bitmap, or sound.
2. The definition tag assigns a unique CharacterId to the content.
3. The content is saved in the dictionary under the CharacterId.
4. A control tag uses the CharacterId to retrieve the content from the dictionary, and performs
some action on the content, such as displaying a shape, or playing a sound.
Every definition tag must specify a unique ID. Duplicate IDs are not allowed. Typically, the
first CharacterId is 1, the second CharacterId is 2, and so on. The number zero (0) is special
and is considered a null character.
Control tags are not the only tags that reference the dictionary. Definition tags can use
characters from the dictionary to define more complex characters. For example, the
DefineButton and DefineSprite tags refer to other characters to define their contents. The
DefineText tag can refer to font characters to select different fonts for the text.
ShowFrame
Render contents of the display*
DefineMorphShape as character 5
Contol tag
StartSound character 2
Definition tag
PlaceObject character 5
Character
Add Morph to display list*
ShowFrame
Render contents of the display*
Summary
A SWF file is made up of a header, followed by a number of tags. The two types of tags are
definition tags and control tags. Definition tags define the objects known as characters,
which are stored in the dictionary. Control tags manipulate characters, and control the flow
of the file.
The older tags, PlaceObject and RemoveObject, are rarely used in SWF 3 and
later versions.
31
The following diagram illustrates the display process. First, three objects are defined: a shape,
a text object, and a sprite. These objects are given character IDs and stored in the dictionary.
Character 1 (the shape) is then placed at depth 1, the bottom of the stack, and will be
obscured by all other characters when the frame is rendered. Character 2 (the text) is placed
twice; once at depth 2, and once at depth 4, the top of the stack. Character 3 (the sprite) is
placed at depth 3.
Definition Dictionary Display List
Top
DefineShape Character ID = 1 Character ID = 2
Character ID = 1 Depth = 4
DefineText Character ID = 3
Character ID = 2
Character ID = 1 Depth = 3
DefineSprite Character ID = 2
Character ID = 3
Character ID = 1 Depth = 2
Character ID = 1
Depth = 1
Bottom
Clipping layers
Flash Player supports a special kind of object in the display list called a clipping layer. A
character placed as a clipping layer is not displayed; rather it clips (or masks) the characters
placed above it. The ClipDepth field in PlaceObject2 specifies the top-most depth that the
clipping layer masks.
Top
Character ID =4 Clipping Layer
Depth = 5
Character ID = 2
Depth = 2
Character ID = 1
Depth = 1
ClipDepth = 4
Bottom
If a character does not change from frame to frame, you do not need to replace the
unchanged character after each frame.
6. Use a RemoveObject2 tag to Remove each character from the display list.
Only the depth value is required to identify the character being removed.
PlaceObject
The PlaceObject tag adds a character to the display list. The CharacterId identifies the
character to be added. The Depth field specifies the stacking order of the character. The
Matrix field species the position, scale, and rotation of the character. If the size of the
PlaceObject tag exceeds the end of the transformation matrix, it is assumed that a
ColorTransform field is appended to the record. The ColorTransform field specifies a color
effect (such as transparency) that is applied to the character. The same character can be added
more than once to the display list with a different depth and transformation matrix.
NOT E
PlaceObject
Field Type Comment
Header RECORDHEADER Tag type = 4
CharacterId UI16 ID of character to place
PlaceObject2
The PlaceObject2 tag extends the functionality of the PlaceObject tag. The PlaceObject2 tag
can both add a character to the display list, and modify the attributes of a character that is
already on the display list. The PlaceObject2 tag changed slightly from SWF 4 to SWF 5. In
SWF 5, clip actions were added.
The tag begins with a group of flags that indicate which fields are present in the tag. The
optional fields are CharacterId, Matrix, ColorTransform, Ratio, ClipDepth, Name, and
ClipActions. The Depth field is the only field that is always required.
The depth value determines the stacking order of the character. Characters with lower depth
values are displayed underneath characters with higher depth values. A depth value of 1 means
the character is displayed at the bottom of the stack. Any given depth can have only one
character. This means a character that is already on the display list can be identified by its
depth alone (that is, a CharacterId is not required).
The PlaceFlagMove and PlaceFlagHasCharacter tags indicate whether a new character is
being added to the display list, or a character already on the display list is being modified. The
meaning of the flags is as follows:
■ PlaceFlagMove = 0 and PlaceFlagHasCharacter = 1
A new character (with ID of CharacterId) is placed on the display list at the specified
depth. Other fields set the attributes of this new character.
■ PlaceFlagMove = 1 and PlaceFlagHasCharacter = 0
The character at the specified depth is modified. Other fields modify the attributes of this
character. Because any given depth can have only one character, no CharacterId is
required.
PlaceObject2
Field Type Comment
Header RECORDHEADER Tag type = 26
PlaceFlagHasClipActions UB[1] SWF 5 and later: has
clip actions (sprite
characters only)
Otherwise: always 0
CLIPACTIONS
Field Type Comment
Reserved UI16 Must be 0
CLIPACTIONRECORD
Field Type Comment
EventFlags CLIPEVENTFLAGS Events to which this handler
applies
PlaceObject3
The PlaceObject3 tag extends the functionality of the PlaceObject2 tag. PlaceObject3 adds
the following new features:
■ The PlaceFlagHasClassName field indicates that a class name will be specified, indicating
the type of object to place. Because we no longer use ImportAssets in ActionScript 3.0,
there needed to be some way to place a Timeline object using a class imported from
another SWF, which does not have a 16-bit character ID in the instantiating SWF.
Supported in Flash Player 9.0.45.0 and later.
Add Layer
Alpha Lighten
Darken Overlay
Difference Multiply
Erase Screen
Hardlight Subtract
Invert
■ A number of bitmap filters can be applied to the display object. Adding filters implies that
the display object will be cached as a bitmap. The following bitmap filters are supported:
PlaceObject3
Field Type Comment
Header RECORDHEADER Tag type = 70
PlaceFlagHasClipActions UB[1] SWF 5 and later: has clip
actions (sprite characters
only)
Otherwise: always 0
FILTERLIST
Field Type Comment
NumberOfFilters UI8 Number of Filters
COLORMATRIXFILTER
Field Type Comment
Matrix FLOAT[20] Color matrix values
Convolution filter
The Convolution filter is a two-dimensional discrete convolution. It is applied on each pixel
of a display object. In the following mathematical representation, F is the input pixel plane, G
is the input matrix, and H is the output pixel plane:
MatrixY – 1 MatrixX – 1
H x y = F x + i – MatrixX ---------------------- y + j – MatrixY ---------------------- + Bias G i j
2 2
j=0 i=0 -----------------------------------------------------------------------------------------------------------------------------------------
Divisor
CONVOLUTIONFILTER
Field Type Comment
MatrixX UI8 Horizontal matrix size
Blur filter
The blur filter is based on a sub-pixel precise median filter (also known as a box filter). The
filter is applied on each of the RGBA color channels.
The general mathematical representation of a simple non-sub-pixel precise median filter is as
follows, and can be easily extended to support sub-pixel precision.
N OT E
This representation assumes that BlurX and BlurY are odd integers in order to get the
same result as Flash Player. The filter window is always centered on a pixel in Flash
Player.
When the number of passes is set to three, it closely approximates a Gaussian Blur filter. A
higher number of passes is possible, but for performance reasons, Adobe does not recommend
it.
BLURFILTER
Field Type Comment
BlurX FIXED Horizontal blur amount
DROPSHADOWFILTER
Field Type Comment
DropShadowColor RGBA Color of the shadow
Glow filter
The Glow filter works in the same way as the Drop Shadow filter, except that it does not have
a distance and angle parameter. Therefore, it can run slightly faster.
GLOWFILTER
Field Type Comment
GlowColor RGBA Color of the shadow
BlurX FIXED Horizontal blur amount
BEVELFILTER
Field Type Comment
ShadowColor RGBA Color of the shadow
GRADIENTGLOWFILTER
Field Type Comment
NumColors UI8 Number of colors in the
gradient
GRADIENTBEVELFILTER
Field Type Comment
NumColors UI8 Number of colors in the
gradient
GradientColors RGBA[NumColors] Gradient colors
ClipEventFlags
The CLIPEVENTFLAGS sequence specifies one or more sprite events to which an event
handler applies. In SWF 5 and earlier, CLIPEVENTFLAGS is 2 bytes; in SWF 6 and later, it
is 4 bytes.
CLIPEVENTFLAGS
Field Type Comment
ClipEventKeyUp UB[1] Key up event
The extra events added in SWF 6 correspond to the button movie clips in the Flash authoring
tool, which are sprites that can be scripted in the same way as buttons (see
BUTTONCONDACTION). The DragOut through Press events correspond to the button
state transition events in button action conditions; the correspondence between them is
shown in the description of Button events (see “Events, state transitions, and actions”
on page 222).
The KeyDown and KeyUp events are not specific to a particular key; handlers for these events
are executed whenever any key on the keyboard (with the possible exception of certain special
keys) transitions to the down state or up state, respectively. To find out what key made the
transition, actions within a handler should call methods of the ActionScript Key object.
The KeyPress event works differently from KeyDown and KeyUp. KeyPress is specific to a
particular key or ASCII character (which is specified in the CLIPACTIONRECORD).
KeyPress events work in an identical way (see BUTTONCONDACTION).
RemoveObject
Field Type Comment
Header RECORDHEADER Tag type = 5
RemoveObject2
The RemoveObject2 tag removes the character at the specified depth from the display list.
The minimum file format version is SWF 3.
RemoveObject2
Field Type Comment
Header RECORDHEADER Tag type = 28
ShowFrame
The ShowFrame tag instructs Flash Player to display the contents of the display list. The file is
paused for the duration of a single frame.
The minimum file format version is SWF 1.
ShowFrame
Field Type Comment
Header RECORDHEADER Tag type = 1
Control Tags 4
Control tags manage some overall aspects of files, frames, and playback in SWF files.
SetBackgroundColor
The SetBackgroundColor tag sets the background color of the display.
The minimum file format version is SWF 1.
SetBackgroundColor
Field Type Comment
Header RECORDHEADER Tag type = 9
FrameLabel
The FrameLabel tag gives the specified Name to the current frame. ActionGoToLabel uses
this name to identify the frame.
The minimum file format version is SWF 3.
FrameLabel
Field Type Comment
Header RECORDHEADER Tag type = 43
53
In SWF files of version 6 or later, an extension to the FrameLabel tag called named anchors is
available. A named anchor is a special kind of frame label that, in addition to labeling a frame
for seeking using ActionGoToLabel, labels the frame for seeking using HTML anchor syntax.
The browser plug-in versions of Adobe Flash Player, in version 6 and later, will inspect the
URL in the browser’s Location bar for an anchor specification (a trailing phrase of the form
#anchorname). If an anchor specification is present in the Location bar, Flash Player will
begin playback starting at the frame that contains a FrameLabel tag that specifies a named
anchor of the same name, if one exists; otherwise playback will begin at Frame 1 as usual. In
addition, when Flash Player arrives at a frame that contains a named anchor, it will add an
anchor specification with the given anchor name to the URL in the browser’s Location bar.
This ensures that when users create a bookmark at such a time, they can later return to the
same point in the SWF file, subject to the granularity at which named anchors are present
within the file.
To create a named anchor, insert one additional non-null byte after the null terminator of the
anchor name. This is valid only for SWF 6 or later.
NamedAnchor
Field Type Comment
Header RECORDHEADER Tag type = 43
Protect
The Protect tag marks a file as not importable for editing in an authoring environment. If the
Protect tag contains no data (tag length = 0), the SWF file cannot be imported. If this tag is
present in the file, any authoring tool should prevent the file from loading for editing.
If the Protect tag does contain data (tag length is not 0), the SWF file can be imported if the
correct password is specified. The data in the tag is a null-terminated string that specifies an
MD5-encrypted password. Specifying a password is only supported in SWF 5 or later.
The MD5 password encryption algorithm used was written by Poul-Henning Kamp and is
freely distributable. It resides in the FreeBSD tree at src/lib/libcrypt/crypt-md5.c. The
EnableDebugger tag also uses MD5 password encryption algorithm.
54 Control Tags
The minimum file format version is SWF 2.
Protect
Field Type Comment
Header RECORDHEADER Tag type = 24
End
The End tag marks the end of a file. This must always be the last tag in a file. The End tag is
also required to end a sprite definition.
The minimum file format version is SWF 1.
End
Field Type Comment
Header RECORDHEADER Tag type = 0
ExportAssets
The ExportAssets tag makes portions of a SWF file available for import by other SWF files
(see “ImportAssets” on page 56). For example, ten SWF files that are all part of the same
website can share an embedded custom font if one file embeds the font and exports the font
character. Each exported character is identified by a string. Any type of character can be
exported.
If the value of the character in ExportAssets was previously exported with a different identifier,
Flash Player associates the tag with the latter identifier. That is, if Flash Player has already read
a given value for Tag1 and the same Tag1 value is read later in the SWF file, the second Name1
value is used.
The minimum file format version is SWF 5.
Export Assets
Field Type Comment
Header RECORDHEADER Tag type = 56
ExportAssets 55
Export Assets
Field Type Comment
...
TagN UI16 Last character ID to export
ImportAssets
The ImportAssets tag imports characters from another SWF file. The importing SWF file
references the exporting SWF file by the URL where it can be found. Imported assets are
added to the dictionary just like characters defined within a SWF file.
The URL of the exporting SWF file can be absolute or relative. If it is relative, it will be
resolved relative to the location of the importing SWF file.
The ImportAssets tag must be earlier in the frame than any later tags that rely on the
imported assets.
The ImportAssets tag was deprecated in SWF 8; Flash Player 8 or later ignores this tag. In
SWF 8 or later, use the ImportAssets2 tag instead.
The minimum file format version is SWF 5, and the maximum file format version is SWF 7.
ImportAssets
Field Type Comment
Header RECORDHEADER Tag type = 57
URL STRING URL where the source
SWF file can be found
Count UI16 Number of assets to import
...
56 Control Tags
ImportAssets
Field Type Comment
TagN UI16 Character ID to use for last
imported character in
importing SWF file
EnableDebugger
The EnableDebugger tag enables debugging. The password in the EnableDebugger tag is
encrypted by using the MD5 algorithm, in the same way as the Protect tag.
The EnableDebugger tag was deprecated in SWF 6; Flash Player 6 or later ignores this tag
because the format of the debugging information required in the ActionScript debugger was
changed in SWF 6. In SWF 6 or later, use the EnableDebugger2 tag instead.
The minimum and maximum file format version is SWF 5.
EnableDebugger
Field Type Comment
Header RECORDHEADER Tag type = 58
EnableDebugger2
The EnableDebugger2 tag enables debugging. The Password field is encrypted by using the
MD5 algorithm, in the same way as the Protect tag.
EnableDebugger2
Field Type Comment
Header RECORDHEADER Tag type = 64
EnableDebugger2 57
ScriptLimits
The ScriptLimits tag includes two fields that can be used to override the default settings for
maximum recursion depth and ActionScript time-out: MaxRecursionDepth and
ScriptTimeoutSeconds.
The MaxRecursionDepth field sets the ActionScript maximum recursion limit. The default
setting is 256 at the time of this writing. This default can be changed to any value greater
than zero (0).
The ScriptTimeoutSeconds field sets the maximum number of seconds the player should
process ActionScript before displaying a dialog box asking if the script should be stopped.
The default value for ScriptTimeoutSeconds varies by platform and is between 15 to 20
seconds. This default value is subject to change.
The minimum file format version is SWF 7.
ScriptLimits
Field Type Comment
Header RECORDHEADER Tag type = 65
SetTabIndex
Flash Player maintains a concept of tab order of the interactive and textual objects displayed.
Tab order is used both for actual tabbing and, in SWF 6 and later, to determine the order in
which objects are exposed to accessibility aids (such as screen readers). The SWF 7
SetTabIndex tag sets the index of an object within the tab order.
If no character is currently placed at the specified depth, this tag is ignored.
You can also use using the ActionScript tabIndex property to establish tab ordering, but this
does not provide a way to set a tab index for a static text object, because the player does not
provide a scripting reflection of static text objects. Fortunately, this is not a problem for the
purpose of tabbing, because static text objects are never actually tab stops. However, this is a
problem for the purpose of accessibility ordering, because static text objects are exposed to
accessibility aids. When generating SWF content that is intended to be accessible and
contains static text objects, the SetTabIndex tag is more useful than the tabIndex property.
58 Control Tags
The minimum file format version is SWF 7.
SetTabIndex
Field Type Comment
Header RECORDHEADER Tag type = 66
Depth UI16 Depth of character
FileAttributes
The FileAttributes tag defines characteristics of the SWF file. This tag is required for SWF 8
and later and must be the first tag in the SWF file. Additionally, the FileAttributes tag can
optionally be included in all SWF file versions.
The HasMetadata flag identifies whether the SWF file contains the Metadata tag. Flash Player
does not care about this bit field or the related tag but it is useful for search engines.
The UseNetwork flag signifies whether Flash Player should grant the SWF file local or
network file access if the SWF file is loaded locally. The default behavior is to allow local SWF
files to interact with local files only, and not with the network. However, by setting the
UseNetwork flag, the local SWF can forfeit its local file system access in exchange for access to
the network. Any version of SWF can use the UseNetwork flag to set the file access for locally
loaded SWF files that are running in Flash Player 8 or later.
FileAttributes 59
The minimum file format version is SWF 8.
FileAttributes
Field Type Comment
Header RECORDHEADER Tag type = 69
Reserved UB[1] Must be 0
The UseDirectBlit and UseGPU flags are relevant only when a SWF file is playing in the
standalone Flash Player. When a SWF file plays in a web browser plug-in, UseDirectBlit
is equivalent to specifying a wmode of “direct” in the tags that embed the SWF inside
the HTML page, while UseGPU is equivalent to a wmode of “gpu”.
ImportAssets2
The ImportAssets2 tag replaces the ImportAssets tag for SWF 8 and later. ImportAssets2
60 Control Tags
currently mirrors the ImportAssets tag’s functionality.
The ImportAssets2 tag imports characters from another SWF file. The importing SWF file
references the exporting SWF file by the URL where it can be found. Imported assets are
added to the dictionary just like characters defined within a SWF file.
The URL of the exporting SWF file can be absolute or relative. If it is relative, it is resolved
relative to the location of the importing SWF file.
The ImportAssets2 tag must be earlier in the frame than any later tags that rely on the
imported assets.
ImportAssets2 61
The minimum file format version is SWF 8.
ImportAssets2
Field Type Comment
Header RECORDHEADER Tag type = 71
URL STRING URL where the source
SWF file can be found
Reserved UI8 Must be 1
...
SymbolClass
The SymbolClass tag creates associations between symbols in the SWF file and
ActionScript 3.0 classes. It is the ActionScript 3.0 equivalent of the ExportAssets tag. If the
character ID is zero, the class is associated with the main timeline of the SWF. This is how the
root class of a SWF is designated. Classes listed in the SymbolClass tag are available for
creation by other SWF files (see StartSound2, DefineEditText (HasFontClass), and
PlaceObject3 (PlaceFlagHasClassName and PlaceFlagHasImage). For example, ten SWF files
that are all part of the same website can share an embedded custom font if one file embeds
and exports the font class.
62 Control Tags
SymbolClass
Field Type Comment
Header RECORDHEADER Tag type = 76
Metadata
The Metadata tag is an optional tag to describe the SWF file to an external process. The tag
embeds XML metadata in the SWF file so that, for example, a search engine can locate this
tag, access a title for the SWF file, and display that title in search results. Flash Player always
ignores the Metadata tag.
If the Metadata tag is included in a SWF file, the FileAttributes tag must also be in the SWF
file with its HasMetadata flag set. Conversely, if the FileAttributes tag has the HasMetadata
flag set, the Metadata tag must be in the SWF file. The Metadata tag can only be in the SWF
file one time.
The format of the metadata is RDF that is compliant with Adobe’s Extensible Metadata
Platform (XMP™) specification. For more information about RDF and XMP, see the
following sources:
■ The RDF Primer at www.w3.org/TR/rdf-primer
■ The RDF Specification at www.w3.org/TR/1999/REC-rdf-syntax-19990222
■ The XMP home page at www.adobe.com/products/xmp
Metadata 63
The following examples show two of many acceptable ways to represent the Metadata string
in the SWF file. The first example provides basic information about the SWF file, the title
and description:
<rdf:RDF xmlns:rdf=’http://www.w3.org/1999/02/22-rdf-syntax-ns#’>
<rdf:Description rdf:about=’’ xmlns:dc=’http://purl.org/dc/1.1’>
<dc:title>Simple Title</dc:title>
<dc:description>Simple Description</dc:description>
</rdf:Description>
</rdf:RDF>
The Metadata string is stored in the SWF file with all unnecessary white space removed.
The minimum file format version is SWF 1.
Metadata
Field Type Comment
Header RECORDHEADER Tag type = 77
64 Control Tags
DefineScalingGrid
The DefineScalingGrid tag introduces the concept of 9-slice scaling, which allows
component-style scaling to be applied to a sprite or button character.
When the DefineScalingGrid tag associates a character with a 9-slice grid, Flash Player
conceptually divides the sprite or button into nine sections with a grid-like overlay. When the
character is scaled, each of the nine areas is scaled independently. To maintain the visual
integrity of the character, corners are not scaled, while the remaining areas of the image are
scaled larger or smaller, as needed.
DefineScalingGrid
Field Type Comment
Header RECORDHEADER Tag type = 78
The Splitter rectangle specifies the center portion of the nine regions of the scaling grid, and
from this rectangle Flash Player derives the 9-slice grid. The width and height of the rectangle
must be at least one twip each (1/20 pixel), or Flash Player ignores the DefineScalingGrid tag.
When a sprite or button with a DefineScalingGrid association is scaled, the nine regions of
the character scale according to the following table:
9-slice scaling does not affect the children of, or any text within, the specified character. These
objects transform normally.
The sprite or button with a DefineScalingGrid association cannot be rotated or skewed, and
doing so disables 9-slice behavior. However, this limitation does not apply to parents or
children of the 9-slice object, and parent rotation or skew is applied to the 9-slice objects in
the normal manner.
DefineScalingGrid 65
Flash Player stretches any fills in the character to fit the shape.
9-slice scaling does not affect the bounds or origin of any object.
If a 9-slice character is scaled below its original size, the five scaling regions are consumed until
they become very small. Once the minimum size is reached, Flash Player reverts to normal,
non-9-slice scaling.
The minimum file format version is SWF 8.
DefineSceneAndFrameLabelData
The DefineSceneAndFrameLabelData tag contains scene and frame label data for a
MovieClip. Scenes are supported for the main timeline only, for all other movie clips a single
scene is exported.
DefineSceneAndFrameLabelData
Field Type Comment
Header RECORDHEADER Tag type = 86
66 Control Tags
CHAPTER 5
Actions 5
Actions are an essential part of an interactive SWF file. Actions allow a file to react to events
such as mouse movements or mouse clicks. The SWF 3 action model and earlier supports a
simple action model. The SWF 4 action model supports a greatly enhanced action model that
includes an expression evaluator, variables, and conditional branching and looping. The
SWF 5 action model adds a JavaScript-style object model, data types, and functions.
67
An action (or list of actions) can be triggered by a button state transition, or by SWF 3
actions. The action is not executed immediately, but is added to a list of actions to be
processed. The list is executed on a ShowFrame tag, or after the button state has changed. An
action can cause other actions to be triggered, in which case, the action is added to the list of
actions to be processed. Actions are processed until the action list is empty.
By default, Timeline actions such as Stop (see ActionStop), Play (see ActionPlay), and
GoToFrame (see ActionGotoFrame) apply to files that contain them. However, the SetTarget
action (see ActionSetTarget), which is called Tell Target in the Adobe Flash user interface, can
be used to send an action command to another file or sprite (see DefineSprite).
SWF 3 actions
The actions in this section are available in SWF 3.
DoAction
DoAction instructs Flash Player to perform a list of actions when the current frame is
complete. The actions are performed when the ShowFrame tag is encountered, regardless of
where in the frame the DoAction tag appears.
Starting with SWF 9, if the ActionScript3 field of the FileAttributes tag is 1, the contents of
the DoAction tag will be ignored.
ACTIONRECORD
An ACTIONRECORD consists of an ACTIONRECORDHEADER followed by a possible
data payload. The ACTIONRECORDHEADER describes the action using an ActionCode.
If the action also carries data, the ActionCode’s high bit will be set which indicates that the
ActionCode is followed by a 16-bit length and a data payload. Note that many actions have
no data payload and only consist of a single byte value.
68 Actions
An ACTIONRECORDHEADER has the following layout:
Field Type Comment
ActionCode UI8 An action code
ActionGotoFrame
ActionGotoFrame instructs Flash Player to go to the specified frame in the current file.
ActionGetURL
ActionGetURL instructs Flash Player to get the URL that UrlString specifies. The URL can
be of any type, including an HTML file, an image or another SWF file. If the file is playing in
a browser, the URL is displayed in the frame that TargetString specifies. The "_level0" and
"_level1" special target names are used to load another SWF file into levels 0 and 1
respectively.
ActionNextFrame
ActionNextFrame instructs Flash Player to go to the next frame in the current file.
ActionPlay
ActionPlay instructs Flash Player to start playing at the current frame.
ActionStop
ActionStop instructs Flash Player to stop playing the file at the current frame.
ActionToggleQuality
ActionToggleQuality toggles the display between high and low quality.
ActionStopSounds
ActionStopSounds instructs Flash Player to stop playing all sounds.
70 Actions
ActionWaitForFrame
ActionWaitForFrame instructs Flash Player to wait until the specified frame; otherwise skips
the specified number of actions.
ActionSetTarget
ActionSetTarget instructs Flash Player to change the context of subsequent actions, so they
apply to a named object (TargetName) rather than the current file.
For example, the SetTarget action can be used to control the Timeline of a sprite object. The
following sequence of actions sends a sprite called "spinner" to the first frame in its
Timeline:
1. SetTarget "spinner"
2. GotoFrame zero
3. SetTarget " " (empty string)
4. End of actions. (Action code = 0)
All actions following SetTarget “spinner” apply to the spinner object until SetTarget “”,
which sets the action context back to the current file. For a complete discussion of target
names see DefineSprite.
ActionGoToLabel
ActionGoToLabel instructs Flash Player to go to the frame associated with the specified label.
You can attach a label to a frame with the FrameLabel tag.
All values on the stack, including numeric values, are stored as strings. In the preceding
example, the numeric values 3 and 1 are pushed onto the stack as the strings "3" and
"1".
72 Actions
SWF 4 actions
The following actions are available in SWF 4:
Variables ActionGetVariable
ActionSetVariable
Utilities ActionGetTime
ActionRandomNumber
ActionTrace
Stack operations
This section lists stack operations.
ActionPush
ActionPush pushes one or more values to the stack.
74 Actions
Field Type Comment
Boolean If Type = 5, UI8 Boolean value
Constant8 If Type = 8, UI8 Constant pool index (for indexes < 256)
(see ActionConstantPool)
Constant16 If Type = 9, UI16 Constant pool index (for indexes >= 256)
(see ActionConstantPool)
ActionPush pushes one or more values onto the stack. The Type field specifies the type of the
value to be pushed.
If Type = 1, the value to be pushed is specified as a 32-bit IEEE single-precision little-endian
floating-point value. PropertyIds are pushed as FLOATs. ActionGetProperty and
ActionSetProperty use PropertyIds to access the properties of named objects.
If Type = 4, the value to be pushed is a register number. Flash Player supports up to 4
registers. With the use of ActionDefineFunction2, up to 256 registers can be used.
In the first field of ActionPush, the length in ACTIONRECORD defines the total number of
Type and value bytes that follow the ACTIONRECORD itself. More than one set of Type
and value fields may follow the first field, depending on the number of bytes that the length
in ACTIONRECORD specifies.
ActionPop
ActionPop pops a value from the stack and discards it.
ActionPop pops a value off the stack and discards the value.
Arithmetic operators
The following sections describe arithmetic operators.
ActionSubtract
ActionSubtract subtracts two numbers and pushes the result back to the stack.
ActionMultiply
ActionMultiply multiplies two numbers and pushes the result back to the stack.
76 Actions
4. Multiplies A times B.
5. Pushes the result, A*B, to the stack.
ActionDivide
ActionDivide divides two numbers and pushes the result back to the stack.
Numerical comparison
ActionEquals
ActionEquals tests two numbers for equality.
ActionLess
ActionLess tests if a number is less than another number
Logical operators
ActionAnd
ActionAnd performs a logical AND of two numbers.
78 Actions
ActionOr
ActionOr performs a logical OR of two numbers.
ActionNot
ActionNot performs a logical NOT of a number.
N OT E
In SWF 5 files, the ActionNot operator converts its argument to a Boolean value, and
pushes a result of type Boolean. In SWF 4 files, the argument and result are numbers.
Result Boolean
ActionStringEquals
ActionStringEquals tests two strings for equality.
ActionStringLength
ActionStringLength computes the length of a string.
ActionStringAdd
ActionStringAdd concatenates two strings.
80 Actions
3. Pushes the concatenation BA to the stack.
ActionStringExtract
ActionStringExtract extracts a substring from a string.
ActionStringLess
ActionStringLess tests to see if a string is less than another string
ActionMBStringLength
ActionMBStringLength computes the length of a string and is multi-byte aware.
ActionMBStringExtract
ActionMBStringExtract extracts a substring from a string and is multi-byte aware.
If either index or count do not evaluate to integers, the result is the empty string.
This is a multi-byte aware version of ActionStringExtract. Index and count are treated as
character indexes, counting double-byte characters as single characters.
Type conversion
ActionToInteger
ActionToInteger converts a value to an integer.
82 Actions
4. Pushes the resulting integer to the stack.
ActionCharToAscii
ActionCharToAscii converts character code to ASCII.
ActionAsciiToChar
ActionAsciiToChar converts a value to an ASCII character code.
ActionMBCharToAscii
ActionMBCharToAscii converts character code to ASCII and is multi-byte aware.
Control flow
ActionJump
ActionJump creates an unconditional branch.
ActionJump adds BranchOffset bytes to the instruction pointer in the execution stream.
The offset is a signed quantity, enabling branches from –32,768 bytes to 32,767 bytes. An
offset of 0 points to the action directly after the ActionJump action.
ActionIf
ActionIf creates a conditional test and branch.
84 Actions
ActionIf does the following:
1. Pops Condition, a number, off the stack.
2. Converts Condition to a Boolean value.
3. Tests if Condition is true.
If Condition is true, BranchOffset bytes are added to the instruction pointer in the
execution stream.
NOT E
When playing a SWF 4 file, Condition is not converted to a Boolean value and is
instead compared to 0, not true.
The offset is a signed quantity, enabling branches from –32768 bytes to 32767 bytes. An
offset of 0 points to the action directly after the ActionIf action.
ActionCall
ActionCall calls a subroutine.
ActionGetVariable
ActionGetVariable gets a variable’s value.
ActionSetVariable
ActionSetVariable sets a variable.
86 Actions
Movie control
ActionGetURL2
ActionGetURL2 gets a URL and is stack based.
ActionGotoFrame2
ActionGotoFrame2 goes to a frame and is stack based.
88 Actions
ActionSetTarget2
ActionSetTarget2 sets the current context and is stack based.
ActionSetTarget2 pops the target off the stack and makes it the current active context.
This action behaves exactly like ActionSetTarget but is stack based to enable the target path to
be the result of expression evaluation.
ActionGetProperty
ActionGetProperty gets a file property.
Property Value
_X 0
_Y 1
_xscale 2
_yscale 3
_currentframe 4
_totalframes 5
_alpha 6
_visible 7
_width 8
_height 9
_target 11
_framesloaded 12
_name 13
_droptarget 14
_url 15
_highquality 16
_focusrect 17
_soundbuftime 18
_quality 19
_xmouse 20
_ymouse 21
ActionSetProperty
ActionSetProperty sets a file property.
ActionCloneSprite
ActionCloneSprite clones a sprite.
90 Actions
1. Pops a depth off the stack.
2. Pops a target off the stack.
3. Pops a source off the stack.
4. Duplicates the movie clip source, giving the new instance the name target, at z-order depth
depth.
ActionRemoveSprite
ActionRemoveSprite removes a clone sprite.
ActionStartDrag
ActionStartDrag starts dragging a movie clip.
ActionWaitForFrame2
ActionWaitForFrame2 waits for a frame to be loaded and is stack based.
Utilities
ActionTrace
ActionTrace sends a debugging output string.
92 Actions
ActionGetTime
ActionGetTime reports the milliseconds since Adobe Flash Player started.
ActionRandomNumber
ActionRandomNumber calculates a random number.
94 Actions
ScriptObject actions
ActionCallFunction
ActionCallFunction executes a function. The function can be an ActionScript built-in
function (such as parseInt), a user-defined ActionScript function, or a native function. For
more information, see ActionNewObject.
ActionCallMethod
ActionCallMethod pushes a method (function) call onto the stack, similar to
ActionNewMethod.
ActionConstantPool
ActionConstantPool creates a new constant pool, and replaces the old constant pool if one
already exists.
96 Actions
ActionDefineFunction
NOTE
...
ActionDefineLocal
ActionDefineLocal defines a local variable and sets its value. If the variable already exists, the
value is set to the newly specified value.
ActionDefineLocal2
ActionDefineLocal2 defines a local variable without setting its value. If the variable already
exists, nothing happens. The initial value of the local variable is undefined.
ActionDelete
ActionDelete deletes a named property from a ScriptObject.
98 Actions
ActionDelete2
ActionDelete2 deletes a named property. Flash Player first looks for the property in the
current scope, and if the property cannot be found, continues to search in the encompassing
scopes.
ActionDelete2 pops the name of the property to delete off the stack.
ActionEnumerate
ActionEnumerate obtains the names of all “slots” in use in an ActionScript object—that is, for
an object obj, all names X that could be retrieved with the syntax obj.X. ActionEnumerate is
used to implement the for..in statement in ActionScript.
N OT E
Certain special slot names are omitted; for a list of these, search for the term DontEnum in
the ECMA-262 standard.
ActionEquals2
ActionEquals2 is similar to ActionEquals, but ActionEquals2 knows about types. The equality
comparison algorithm from ECMA-262 Section 11.9.3 is applied.
ActionGetMember
ActionGetMember retrieves a named property from an object, and pushes the value of the
property onto the stack.
Then, ActionGetMember with object set to obj and name set to foo pushes 3 onto the stack.
If the specified property does not exist, undefined is pushed to the stack.
The object parameter cannot actually be of type Object. If the object parameter is a primitive
type such as number, Boolean, or string, it is converted automatically to a temporary wrapper
object of class Number, Boolean, or String. Thus, methods of wrapper objects can be invoked
on values of primitive types. For example, the following correctly prints 5:
var x = "Hello";
trace (x.length);
In this case, the variable, x, contains the primitive string, "Hello". When x.length is
retrieved, a temporary wrapper object for x is created by using the String type, which has a
length property.
100 Actions
ActionInitArray
ActionInitArray initializes an array in a ScriptObject and is similar to ActionInitObject. The
newly created object is pushed to the stack. The stack is the only existing reference to the
newly created object. A subsequent SetVariable or SetMember action can store the newly
created object in a variable.
ActionInitArray pops elems and then [arg1, arg2, …, argn] off the stack.
ActionInitArray does the following:
1. Gets the number of arguments (or elements) from the stack.
2. If arguments are present, ActionInitArray initializes an array object with the right number
of elements.
3. Initializes the array as a ScriptObject.
4. Sets the object type to Array.
5. Populates the array with initial elements by popping the values off of the stack.
For all of the call actions (ActionCallMethod, ActionNewMethod, ActionNewObject, and
ActionCallFunction) and initialization actions (ActionInitObject and ActionInitArray), the
arguments of the function are pushed onto the stack in reverse order, with the rightmost
argument first and the leftmost argument last. The arguments are subsequently popped off in
order (first to last).
ActionInitObject
ActionInitObject initializes an object and is similar to ActionInitArray. The newly created
object is pushed to the stack. The stack is the only existing reference to the newly created
object. A subsequent SetVariable or SetMember action can store the newly created object in a
variable.
ActionInitObject pops elems off of the stack. Pops [value1, name1, …, valueN, nameN]
off the stack.
ActionNewMethod
ActionNewMethod invokes a constructor function to create a new object. A new object is
constructed and passed to the constructor function as the value of the this keyword.
Arguments can be specified to the constructor function. The return value from the
constructor function is discarded. The newly constructed object is pushed to the stack, similar
to ActionCallMethod and ActionNewObject.
102 Actions
For all of the call actions (ActionCallMethod, ActionNewMethod, ActionNewObject, and
ActionCallFunction) and initialization actions (ActionInitObject and ActionInitArray), the
arguments of the function are pushed onto the stack in reverse order, with the rightmost
argument first and the leftmost argument last. The arguments are subsequently popped off in
order (first to last).
ActionNewObject
ActionNewObject invokes a constructor function. A new object is created and passed to the
constructor function as the this keyword. In addition, arguments can optionally be specified
to the constructor function on the stack. The return value of the constructor function is
discarded. The newly constructed object is pushed to the stack. ActionNewObject is similar
to ActionCallFunction and ActionNewMethod.
ActionSetMember
ActionSetMember sets a property of an object. If the property does not already exist, it is
created. Any existing value in the property is overwritten.
ActionTargetPath
If the object in the stack is of type MovieClip, the object’s target path is pushed on the stack
in dot notation. If the object is not a MovieClip, the result is undefined rather than the
movie clip target path.
ActionWith
Defines a With block of script.
104 Actions
Type actions
ActionToNumber
Converts the object on the top of the stack into a number, and pushes the number back to
the stack.
For the Object type, the ActionScript valueOf() method is invoked to convert the object to
a Number type for ActionToNumber. Conversions between primitive types, such as from
String to Number, are built-in.
ActionToString
ActionToString converts the object on the top of the stack into a String, and pushes the
string back to the stack.
For the Object type, the ActionScript toString() method is invoked to convert the object
to the String type for ActionToString.
Math actions
ActionAdd2
ActionAdd2 is similar to ActionAdd, but performs the addition differently, according to the
data types of the arguments. The addition operator algorithm in ECMA-262 Section 11.6.1 is
used. If string concatenation is applied, the concatenated string is arg2 followed by arg1.
106 Actions
ActionLess2
ActionLess2 calculates whether arg1 is less than arg2 and pushes a Boolean return value to the
stack. This action is similar to ActionLess, but performs the comparison differently according
to the data types of the arguments. The abstract relational comparison algorithm in ECMA-
262 Section 11.8.5 is used.
ActionModulo
ActionModulo calculates x modulo y. If y is 0, then NaN (0x7FC00000) is pushed to the
stack.
ActionBitAnd
ActionBitAnd pops two numbers off of the stack, performs a bitwise AND, and pushes an
S32 number to the stack. The arguments are converted to 32-bit unsigned integers before
performing the bitwise operation. The result is a SIGNED 32-bit integer.
ActionBitLShift
ActionBitLShift pops the shift count arg and then value off of the stack. The value argument
is converted to 32-bit signed integer and only the least significant 5 bits are used as the shift
count. The bits in the value arg are shifted to the left by the shift count. ActionBitLShift
pushes an S32 number to the stack.
ActionBitOr
ActionBitOr pops two numbers off of the stack, performs a bitwise OR, and pushes an S32
number to the stack. The arguments are converted to 32-bit unsigned integers before
performing the bitwise operation. The result is a SIGNED 32-bit integer.
108 Actions
ActionBitRShift
ActionBitRShift pops the shift count from the stack. Pops the value from the stack. The value
argument is converted to a 32-bit signed integer and only the least significant 5 bits are used
as the shift count.
The bits in the arg value are shifted to the right by the shift count. ActionBitRShift pushes an
S32 number to the stack.
ActionBitURShift
ActionBitURShift pops the value and shift count arguments from the stack. The value
argument is converted to 32-bit signed integer and only the least significant 5 bits are used as
the shift count.
The bits in the arg value are shifted to the right by the shift count. ActionBitURShift pushes
a UI32 number to the stack.
ActionDecrement
ActionDecrement pops a value from the stack, converts it to number type, decrements it by 1,
and pushes it back to the stack.
ActionIncrement
ActionIncrement pops a value from the stack, converts it to number type, increments it by 1,
and pushes it back to the stack.
110 Actions
ActionPush (Enhancements)
With SWF 5, eight new types were added to ActionPush. For more on ActionPush, see the
SWF 4 actions.
ActionPushDuplicate
ActionPushDuplicate pushes a duplicate of top of stack (the current return value) to the stack.
ActionReturn
ActionReturn forces the return item to be pushed off the stack and returned. If a return is not
appropriate, the return item is discarded.
ActionStackSwap
ActionStackSwap swaps the top two ScriptAtoms on the stack.
ActionStoreRegister
ActionStoreRegister reads the next object from the stack (without popping it) and stores it in
one of four registers. If ActionDefineFunction2 is used, up to 256 registers are available.
RegisterNumber UI8
SWF 6 actions
The following actions are available in SWF 6:
■ DoInitAction
■ ActionInstanceOf
■ ActionEnumerate2
■ ActionStrictEquals
■ ActionGreater
■ ActionStringGreater
DoInitAction
The DoInitAction tag is similar to the DoAction tag: it defines a series of bytecodes to be
executed. However, the actions defined with DoInitAction are executed earlier than the usual
DoAction actions, and are executed only once.
In some situations, actions must be executed before the ActionScript representation of the first
instance of a particular sprite is created. The most common such action is calling
Object.registerClass to associate an ActionScript class with a sprite. Such a call is generally
found within the #initclip pragma in the ActionScript language. DoInitAction is used to
implement the #initclip pragma.
A DoInitAction tag specifies a particular sprite to which its actions apply. A single frame can
contain multiple DoInitAction tags; their actions are executed in the order in which the tags
appear. However, the SWF file can contain only one DoInitAction tag for any particular
sprite.
The specified actions are executed immediately before the normal actions of the frame in
which the DoInitAction tag appears. This only occurs the first time that this frame is
encountered; playback reaches the same frame again later, actions provided in DoInitAction
are skipped.
112 Actions
Starting with SWF 9, if the ActionScript3 field of the FileAttributes tag is 1, the contents of
the DoInitAction tag will be ignored.
NOT E
Specifying actions at the beginning of a DoAction tag is not the same as specifying them
in a DoInitAction tag. Flash Player takes steps before the first action in a DoAction tag,
most relevantly the creation of ActionScript objects that represent sprites. The actions in
DoInitAction occur before these implicit steps are performed.
ActionInstanceOf
ActionInstanceOf implements the ActionScript instanceof() operator. This is a Boolean
operator that indicates whether the left operand (typically an object) is an instance of the class
represented by a constructor function passed as the right operand.
Additionally, with SWF 7 or later, ActionInstanceOf also supports with interfaces. If the right
operand constructor is a reference to an interface object, and the left operand implements this
interface, ActionInstanceOf accurately reports that the left operand is an instance of the right
operand.
ActionEnumerate2
ActionEnumerate2 is similar to ActionEnumerate, but uses a stack argument of object type
rather than using a string to specify its name.
ActionStrictEquals
ActionStrictEquals is similar to ActionEquals2, but the two arguments must be of the same
type in order to be considered equal. Implements the ‘===’ operator from the ActionScript
language.
ActionGreater
ActionGreater is the exact opposite of ActionLess2. Originally there was no ActionGreater,
because it can be emulated by reversing the order of argument pushing, then performing an
ActionLess followed by an ActionNot. However, this argument reversal resulted in a reversal
of the usual order of evaluation of arguments, which in a few cases led to surprises.
114 Actions
ActionStringGreater
ActionStringGreater is the exact opposite of ActionStringLess. This action code was added for
the same reasons as ActionGreater.
SWF 7 actions
The following actions are available in SWF 7:
■ ActionDefineFunction2
■ ActionExtends
■ ActionCastOp
■ ActionImplementsOp
■ ActionTry
■ ActionThrow
ActionDefineFunction2
ActionDefineFunction2 is similar to ActionDefineFunction, with additional features that can
help speed up the execution of function calls by preventing the creation of unused variables in
the function’s activation object and by enabling the replacement of local variables with a
variable number of registers. With ActionDefineFunction2, a function can allocate its own
private set of up to 256 registers. Parameters or local variables can be replaced with a register,
which is loaded with the value instead of the value being stored in the function’s activation
object. (The activation object is an implicit local scope that contains named arguments and
local variables. For further description of the activation object, see the ECMA-262 standard.)
116 Actions
Field Type Comment
PreloadSuperFlag UB[1] 0 = Don’t preload super into
register
1 = Preload super into
register
The function body following an ActionDefineFunction2 consists of further action codes, just
as for ActionDefineFunction.
Flash Player selects register numbers by first copying each argument into the register specified
in the corresponding REGISTERPARAM record. Next, the preloaded variables are copied
into registers starting at 1, and in the order this, arguments, super, _root, _parent,
and _global, skipping any that are not to be preloaded. (The SWF file must accurately
specify which registers will be used by preloaded variables and ensure that no parameter uses a
register number that falls within this range, or else that parameter is overwritten by a
preloaded variable.)
The value of NumParams should equal the number of parameter registers. The value of
RegisterCount should equal NumParams plus the number of preloaded variables and the
number of local variable registers desired.
For example, if NumParams is 2, RegisterCount is 6, PreloadThisFlag is 1, and
PreloadRootFlag is 1, the REGISTERPARAM records will probably specify registers 3 and 4.
Register 1 will be this, register 2 will be _root, registers 3 and 4 will be the first and second
parameters, and registers 5 and 6 will be for local variables.
118 Actions
ActionExtends
ActionExtends implements the ActionScript extends keyword. ActionExtends creates an
inheritance relationship between two classes, called the subclass and the superclass.
SWF 7 adds ActionExtends to the file format to avoid spurious calls to the superclass
constructor function (which would occur when inheritance was established under
ActionScript 1.0). Consider the following code:
Subclass.prototype = new Superclass();
Before the existence of ActionExtends, this code would result in a spurious call to the
Superclass superconstructor function. Now, ActionExtends is generated by the
ActionScript compiler when the code class A extends B is encountered, to set up the
inheritance relationship between A and B.
ActionCastOp
ActionCastOp implements the ActionScript cast operator, which allows the casting from one
data type to another. ActionCastOp pops an object off the stack and attempts to convert the
object to an instance of the class or to the interface represented by the constructor function.
ActionImplementsOp
ActionImplementsOp implements the ActionScript implements keyword. The
ActionImplementsOp action specifies the interfaces that a class implements, for use by
ActionCastOp. ActionImplementsOp can also specify the interfaces that an interface
implements, as interfaces can extend other interfaces.
120 Actions
ActionTry
ActionTry defines handlers for exceptional conditions, implementing the ActionScript try,
catch, and finally keywords.
The CatchSize and FinallySize fields always exist, whether or not the CatchBlockFlag or
FinallyBlockFlag settings are 1.
N OT E
The try, catch, and finally blocks do not use end tags to mark the end of their respective
blocks. Instead, the length of a block is set by the TrySize, CatchSize, and FinallySize
values.
122 Actions
DoABC
The DoABC tag is similar to the DoAction tag: it defines a series of bytecodes to be executed.
However, the bytecodes contained within the DoABC tag run in the ActionScript 3.0 virtual
machine.
For details on the contents and format of the ABCData field, see the Adobe ActionScript
Virtual Machine 2 (AVM2) Overview at www.adobe.com/go/avm2overview/.
Shapes 6
The SWF shape architecture is designed to be compact, flexible and rendered very quickly to
the screen. It is similar to most vector formats in that shapes are defined by a list of edges
called a path. A path may be closed, where the start and end of the path meet to close the
figure, or open, where the path forms an open-ended stroke. A path may contain a mixture of
straight edges, curved edges, and ‘pen up and move’ commands. The latter allows multiple
disconnected figures to be described by a single shape structure.
A fill style defines the appearance of an area enclosed by a path. Fill styles supported by the
SWF file format include a color, a gradient, or a bitmap image.
A line style defines the appearance of the outline of a path. The line style may be a stroke of
any thickness and color.
Most vector formats allow only one fill and line style per path. The SWF file format extends
this concept by allowing each edge to have its own line and fill style. This can have
unpredictable results when fill styles change in the middle of a path.
The Adobe Flash authoring tool also supports two fill styles per edge, one for each side of the
edge: FillStyle0 and FillStyle1. FillStyle0 should always be used first and then FillStyle1 if the
shape is filled on both sides of the edge.
Shape overview
A shape is composed of the following elements:
CharacterId—A 16-bit value that uniquely identifies this shape as a ‘character’ in the
dictionary. The CharacterId can be referred to in control tags such as PlaceObject. Characters
can be reused and combined with other characters to make more complex shapes.
Bounding box—The rectangle that completely encloses the shape.
Fill style array—A list of all the fill styles used in a shape.
Line style array—A list of all the line styles used in a shape.
125
Shape record array—A list of shape records. Shape records can define straight or curved
edges, style changes, or move the drawing position.
NOT E
Line and fill styles are defined only once and may be used (and reused) by any of the
edges in the shape.
Shape example
The following example appears to be a collection of shapes, but it can be described with a
single DefineShape tag.
The red circle, red square and green rounded-rectangle are closed paths. The curved line is an
open path. The red square consists of all straight edges, the red circle consists of all curved
edges, while the rounded rectangle has curved edges interspersed with straight edges.
There are two fill styles, solid green and solid red, and two line styles, 1-pixel black, and 2-
pixel black. The red circle and red square share the same fill and line styles. The rounded
rectangle and curved line share the same line style.
Here’s how to describe this example with the SWF file format.
126 Shapes
All shape records share a similar structure but can have varied meaning. A shape record can
define straight or curved edge, a style change, or it can move the current drawing position.
Shape structures
Fill styles
The SWF file format supports three basic types of fills for a shape.
Solid fill A simple RGB or RGBA color that fills a portion of a shape. An alpha value of 255
means a completely opaque fill. An alpha value of zero means a completely transparent fill.
Any alpha between 0 and 255 will be partially transparent.
FILLSTYLEARRAY
A fill style array enumerates a number of fill styles. The format of a fill style array is described
in the following table:
FILLSTYLEARRAY
Field Type Comment
FillStyleCount UI8 Count of fill styles.
128 Shapes
FILLSTYLE
The format of a fill style value within the file is described in the following table:
FILLSTYLE
Field Type Comment
FillStyleType UI8 Type of fill style:
0x00 = solid fill
0x10 = linear gradient fill
0x12 = radial gradient fill
0x13 = focal radial gradient fill
(SWF 8 file format and later
only)
0x40 = repeating bitmap fill
0x41 = clipped bitmap fill
0x42 = non-smoothed
repeating bitmap
0x43 = non-smoothed clipped
bitmap
Color If type = 0x00, RGBA (if Shape3); Solid fill color with opacity
RGB (if Shape1 or Shape2) information.
BitmapId If type = 0x40, 0x41, 0x42 or 0x43, ID of bitmap character for fill.
UI16
BitmapMatrix If type = 0x40, 0x41, 0x42 or 0x43, Matrix for bitmap fill.
MATRIX
LINESTYLEARRAY
The format of a line style array is described in the following table:
LINESTYLEARRAY
Field Type Comment
LineStyleCount UI8 Count of line styles.
LINESTYLE
A line style represents a width and color of a line. The format of a line style value within the
file is described in the following table:
LINESTYLE
Field Type Comment
Width UI16 Width of line in twips.
Before the introduction of LINESTYLE2 in SWF 8, all lines in the SWF file format have
rounded joins and round caps. Different join styles and end styles can be simulated with
a very narrow shape that looks identical to the desired stroke.
NOT E
The SWF file format has no native support for dashed or dotted line styles. A dashed line
can be simulated by breaking up the path into a series of short lines.
130 Shapes
LINESTYLE2
LINESTYLE2 builds upon the capabilities of the LINESTYLE record by allowing the use of
new types of joins and caps as well as scaling options and the ability to fill a stroke. In order to
use LINESTYLE2, the shape must be defined with DefineShape4—not DefineShape,
DefineShape2, or DefineShape3.
While the LINESTYLE record permits only rounded joins and round caps, LINESTYLE2
also supports miter and bevel joins, and square caps and no caps. The following diagram
illustrates the complete array of joins and caps:
LINESTYLE2
Field Type Comment
Width UI16 Width of line in twips.
132 Shapes
Shape structures
The SHAPE structure defines a shape without fill style or line style information.
SHAPE
SHAPE is used by the DefineFont tag, to define character glyphs.
SHAPE
Field Type Comment
NumFillBits UB[4] Number of fill index bits.
SHAPEWITHSTYLE
The SHAPEWITHSTYLE structure extends the SHAPE structure by including fill style and
line style information. SHAPEWITHSTYLE is used by the DefineShape tag.
SHAPEWITHSTYLE
Field Type Comment
FillStyles FILLSTYLEARRAY Array of fill styles.
Shape Tag
Fill Styles
Line Styles
Change Fills
Edges
Change Fills
Edges
First, the Fill styles and Line styles are defined. These are defined only once and are referred to
by array index.
The blue area represents the array of Shape records. The first shape record selects a fill from
the fill style array, and moves the drawing position to the start of the shape. This is followed
by a series of edge records that define the shape. The next record changes the fill style, and the
subsequent edge records are filled using this new style.
This tag is a completely autonomous object. The style change records only refer to fill and line
styles that have been defined in this tag.
Shape records
There are four types of shape records:
■ End shape record
■ Style change record
■ Straight edge record
■ Curved edge record
Each individual shape record is byte-aligned within an array of shape records; one shape
record is padded to a byte boundary before the next shape record begins.
134 Shapes
Each shape record begins with a TypeFlag. If the TypeFlag is zero, the shape record is a non-
edge record, and a further five bits of flag information follow.
EndShapeRecord
The end shape record simply indicates the end of the shape record array. It is a non-edge
record with all five flags equal to zero.
ENDSHAPERECORD
Field Type Comment
TypeFlag UB[1] Non-edge record flag.
Always 0.
StyleChangeRecord
The style change record is also a non-edge record. It can be used to do the following:
1. Select a fill or line style for drawing.
2. Move the current drawing position (without drawing).
3. Replace the current fill and line style arrays with a new set of styles.
Because fill and line styles often change at the start of a new path, it is useful to perform more
than one action in a single record. For example, say a DefineShape tag defines a red circle and
a blue square. After the circle is closed, it is necessary to move the drawing position, and
replace the red fill with the blue fill. The style change record can achieve this with a single
shape record.
STYLECHANGERECORD
Field Type Comment
TypeFlag UB[1] Non-edge record flag.
Always 0.
In the first shape record MoveDeltaX and MoveDeltaY are relative to the shape origin.
In subsequent shape records, MoveDeltaX and MoveDeltaY are relative to the current
drawing position.
The style arrays begin at index 1, not index 0. FillStyle = 1 refers to the first style in the fill
style array, FillStyle = 2 refers to the second style in the fill style array, and so on. A fill style
index of zero means the path is not filled, and a line style index of zero means the path has no
stroke. Initially the fill and line style indices are set to zero—no fill or stroke.
136 Shapes
For example, if a shape consists of two overlapping squares, and only FillStyle0 is defined,
Flash Player renders a ‘hole’ where the paths overlap. This area can be filled using FillStyle1.
In this situation, the rule is that for any directed vector, FillStyle0 is the color to the left of the
vector, and FillStyle1 is the color to the right of the vector (as shown in the following
diagram).
N OTE
StraightEdgeRecord
The StraightEdgeRecord stores the edge as an X-Y delta. The delta is added to the current
drawing position, and this becomes the new drawing position. The edge is rendered between
the old and new drawing positions.
Straight edge records support three types of lines:
1. General lines.
2. Horizontal lines.
3. Vertical lines.
General lines store both X and Y deltas, the horizontal and vertical lines store only the X delta
and Y delta respectively.
STRAIGHTEDGERECORD
Field Type Comment
TypeFlag UB[1] This is an edge record.
Always 1.
138 Shapes
CurvedEdgeRecord
The SWF file format differs from most vector file formats by using Quadratic Bezier curves
rather than Cubic Bezier curves. PostScript™ uses Cubic Bezier curves, as do most drawing
applications.The SWF file format uses Quadratic Bezier curves because they can be stored
more compactly, and can be rendered more efficiently.
The following diagram shows a Quadratic Bezier curve and a Cubic Bezier curve.
A Quadratic Bezier curve has 3 points: 2 on-curve anchor points, and 1 off-curve control
point. A Cubic Bezier curve has 4 points: 2 on-curve anchor points, and 2 off-curve control
points.
The curved-edge record stores the edge as two X-Y deltas. The three points that define the
Quadratic Bezier are calculated like this:
1. The first anchor point is the current drawing position.
2. The control point is the current drawing position + ControlDelta.
3. The last anchor point is the current drawing position + ControlDelta + AnchorDelta.
The last anchor point becomes the current drawing position.
CURVEDEDGERECORD
Field Type Comment
TypeFlag UB[1] This is an edge record.
Always 1.
Shape tags
DefineShape
The DefineShape tag defines a shape for later use by control tags such as PlaceObject. The
ShapeId uniquely identifies this shape as ‘character’ in the Dictionary. The ShapeBounds field
is the rectangle that completely encloses the shape. The SHAPEWITHSTYLE structure
includes all the paths, fill styles and line styles that make up the shape.
The minimum file format version is SWF 1.
DefineShape
Field Type Comment
Header RECORDHEADER Tag type = 2.
ShapeId UI16 ID for this character.
140 Shapes
DefineShape2
DefineShape2 extends the capabilities of DefineShape with the ability to support more than
255 styles in the style list and multiple style lists in a single shape.
The minimum file format version is SWF 2.
DefineShape2
Field Type Comment
Header RECORDHEADER Tag type = 22.
DefineShape3
DefineShape3 extends the capabilities of DefineShape2 by extending all of the RGB color
fields to support RGBA with opacity information.
The minimum file format version is SWF 3.
DefineShape3
Field Type Comment
Header RECORDHEADER Tag type = 32.
DefineShape4
DefineShape4 extends the capabilities of DefineShape3 by using a new line style record in the
shape. LINESTYLE2 allows new types of joins and caps as well as scaling options and the
ability to fill a stroke.
Strokes
Edges
Shape bounds
Edge bounds
DefineShape4
Field Type Comment
Header RECORDHEADER Tag type = 83.
ShapeId UI16 ID for this character.
142 Shapes
CHAPTER 7
Gradients 7
Gradients are a special type of shape fill for SWF shapes. They create ramps of colors that
interpolate between two or more fixed colors.
Here is an overview of the SWF gradient model:
■ There are two styles of gradient: Linear and Radial. In addition, with the SWF 8 file
format, a new radial gradient type is added to allow the focal point to be set.
■ Each gradient has its own transformation matrix, and can be transformed independently
of its parent shape.
■ A gradient can have up to eight control points in SWF 7 file format and previous versions,
or up to fifteen control points in SWF 8 and later. Colors are interpolated between the
control points to create the color ramp.
■ Each control point is defined by a ratio and an RGBA color. The ratio determines the
position of the control point in the gradient; the RGBA value determines its color.
Following are some examples of SWF gradients (from left to right):
■ A simple white-to-black linear gradient.
■ A simple white-to-black radial gradient.
■ A “rainbow” gradient consisting of seven control points; red, yellow, green, cyan, blue,
purple, and red.
■ A three-point gradient, where the end points are opaque and the center point is
transparent. The result is a gradient in the alpha-channel that allows the diamond shape in
the background to show through.
143
Gradient transformations
All gradients are defined in a standard space called the gradient square. The gradient square is
centered at (0,0), and extends from (-16384,-16384) to (16384,16384).
Each gradient is mapped from the gradient square to the display surface using a standard
transformation matrix. This matrix is stored in the FILLSTYLE structure.
Example: In the following diagram a linear gradient is mapped onto a circle 4096 units in
diameter, and centered at (2048,2048).
The gradient is scaled to one-eighth of its original size (32768 / 4096 = 8), and translated to
(2048, 2048).
144 Gradients
Gradient structures
The gradient structures are part of the FILLSTYLE structure.
GRADIENT
SWF 8 and later supports up to 15 gradient control points, spread modes and a new
interpolation type.
Note that for the DefineShape, DefineShape2 or DefineShape3 tags, the SpreadMode and
InterpolationMode fields must be 0, and the NumGradients field can not exceed 8.
GRADIENT
Field Type Comment
SpreadMode UB[2] 0 = Pad mode
1 = Reflect mode
2 = Repeat mode
3 = Reserved
FOCALGRADIENT
Field Type Comment
SpreadMode UB[2] 0 = Pad mode
1 = Reflect mode
2 = Repeat mode
3 = Reserved
NumGradients UB[4] 1 to 15
GRADRECORD
The GRADRECORD defines a gradient control point:
GRADRECORD
Field Type Comment
Ratio UI8 Ratio value
146 Gradients
CHAPTER 8
Bitmaps 8
The SWF file format specification supports a variety of bitmap formats. All bitmaps are
compressed to reduce file size. Lossy compression, best for imprecise images such as
photographs, is provided by JPEG bitmaps; lossless compression, best for precise images such
as diagrams, icons, or screen captures, is provided by ZLIB bitmaps. Both types of bitmaps
can optionally contain alpha channel (opacity) information.
The JPEG format, officially defined as ITU T.81 or ISO/IEC 10918-1, is an open standard
developed by the Independent Joint Photographic Experts Group. The JPEG format is not
described in this document. For general information on the JPEG format, see JPEG at
www.jpeg.org/. For a specification of the JPEG format, see the International
Telecommunication Union at www.itu.int/ and search for recommendation T.81. The JPEG
data in SWF files is encoded using the JPEG Interchange Format specified in Annex B. Flash
Player also understands the popular JFIF format, an extension of the JPEG Interchange
Format.
In all cases where arrays of non-JPEG pixel data are stored in bitmap tags, the pixels appear
in row-major order, reading like English text, proceeding left to right within rows and top to
bottom overall.
DefineBits
This tag defines a bitmap character with JPEG compression. It contains only the JPEG
compressed image data (from the Frame Header onward). A separate JPEGTables tag contains
the JPEG encoding data used to encode this image (the Tables/Misc segment).
N OT E
Only one JPEGTables tag is allowed in a SWF file, and thus all bitmaps defined with
DefineBits must share common encoding tables.
The data in this tag begins with the JPEG SOI marker 0xFF, 0xD8 and ends with the EOI
marker 0xFF, 0xD9. Before version 8 of the SWF file format, SWF files could contain an
erroneous header of 0xFF, 0xD9, 0xFF, 0xD8 before the JPEG SOI marker.
147
The minimum file format version for this tag is SWF 1.
DefineBits
Field Type Comment
Header RECORDHEADER (long) Tag type = 6
CharacterID UI16 ID for this character
JPEGTables
This tag defines the JPEG encoding table (the Tables/Misc segment) for all JPEG images
defined using the DefineBits tag. There may only be one JPEGTables tag in a SWF file.
The data in this tag begins with the JPEG SOI marker 0xFF, 0xD8 and ends with the EOI
marker 0xFF, 0xD9. Before version 8 of the SWF file format, SWF files could contain an
erroneous header of 0xFF, 0xD9, 0xFF, 0xD8 before the JPEG SOI marker.
The minimum file format version for this tag is SWF 1.
JPEGTables
Field Type Comment
Header RECORDHEADER Tag type = 8
JPEGData UI8[encoding data size] JPEG encoding table
DefineBitsJPEG2
This tag defines a bitmap character with JPEG compression. It differs from DefineBits in that
it contains both the JPEG encoding table and the JPEG image data. This tag allows multiple
JPEG images with differing encoding tables to be defined within a single SWF file.
The data in this tag begins with the JPEG SOI marker 0xFF, 0xD8 and ends with the EOI
marker 0xFF, 0xD9. Before version 8 of the SWF file format, SWF files could contain an
erroneous header of 0xFF, 0xD9, 0xFF, 0xD8 before the JPEG SOI marker.
In addition to specifying JPEG data, DefineBitsJPEG2 can also contain PNG image data and
non-animated GIF89a image data.
■ If ImageData begins with the eight bytes 0x89 0x50 0x4E 0x47 0x0D 0x0A 0x1A 0x0A, the
ImageData contains PNG data.
148 Bitmaps
■ If ImageData begins with the six bytes 0x47 0x49 0x46 0x38 0x39 0x61, the ImageData
contains GIF89a data.
The minimum file format version for this tag is SWF 2. The minimum file format version for
embedding PNG of GIF89a data is SWF 8.
DefineBitsJPEG2
Field Type Comment
Header RECORDHEADER (long) Tag type = 21
DefineBitsJPEG3
This tag defines a bitmap character with JPEG compression. This tag extends
DefineBitsJPEG2, adding alpha channel (opacity) data. Opacity/transparency information is
not a standard feature in JPEG images, so the alpha channel information is encoded separately
from the JPEG data, and compressed using the ZLIB standard for compression. The data
format used by the ZLIB library is described by Request for Comments (RFCs) documents
1950 to 1952.
The data in this tag begins with the JPEG SOI marker 0xFF, 0xD8 and ends with the EOI
marker 0xFF, 0xD9. Before version 8 of the SWF file format, SWF files could contain an
erroneous header of 0xFF, 0xD9, 0xFF, 0xD8 before the JPEG SOI marker.
In addition to specifying JPEG data, DefineBitsJPEG2 can also contain PNG image data and
non-animated GIF89a image data.
■ If ImageData begins with the eight bytes 0x89 0x50 0x4E 0x47 0x0D 0x0A 0x1A 0x0A, the
ImageData contains PNG data.
■ If ImageData begins with the six bytes 0x47 0x49 0x46 0x38 0x39 0x61, the ImageData
contains GIF89a data.
If ImageData contains PNG or GIF89a data, the optional BitmapAlphaData is not
supported.
DefineBitsJPEG3 149
The minimum file format version for this tag is SWF 3. The minimum file format version for
embedding PNG of GIF89a data is SWF 8.
DefineBitsJPEG3
Field Type Comment
Header RECORDHEADER (long) Tag type = 35.
DefineBitsLossless
Defines a lossless bitmap character that contains RGB bitmap data compressed with ZLIB.
The data format used by the ZLIB library is described by Request for Comments (RFCs)
documents 1950 to 1952.
Two kinds of bitmaps are supported. Colormapped images define a colormap of up to 256
colors, each represented by a 24-bit RGB value, and then use 8-bit pixel values to index into
the colormap. Direct images store actual pixel color values using 15 bits (32,768 colors) or 24
bits (about 17 million colors).
The minimum file format version for this tag is SWF 2.
DefineBitsLossless
Field Type Comment
Header RECORDHEADER (long) Tag type = 20
150 Bitmaps
DefineBitsLossless
Field Type Comment
BitmapFormat UI8 Format of compressed data
3 = 8-bit colormapped image
4 = 15-bit RGB image
5 = 24-bit RGB image
DefineBitsLossless 151
The COLORMAPDATA and BITMAPDATA structures contain image data. These
structures are each compressed as a single block of data. Their layouts before compression
follow.
NOTE
Row widths in the pixel data fields of these structures must be rounded up to the next
32-bit word boundary. For example, an 8-bit image that is 253 pixels wide must be
padded out to 256 bytes per line. To determine the appropriate padding, make sure to
take into account the actual size of the individual pixel structures; 15-bit pixels occupy 2
bytes and 24-bit pixels occupy 4 bytes (see PIX15 and PIX24).
COLORMAPDATA
Field Type Comment
ColorTableRGB RGB[color table size] Defines the mapping from color
indices to RGB values. Number
of RGB values is
BitmapColorTableSize + 1.
BITMAPDATA
Field Type Comment
BitmapPixelData If BitmapFormat = 4, Array of pixel colors. Number of
PIX15[image data size] entries is BitmapWidth *
If BitmapFormat = 5, BitmapHeight, subject to
PIX24[image data size] padding (see note above).
PIX15
Field Type Comment
Pix15Reserved UB[1] Always 0
152 Bitmaps
PIX24
Field Type Comment
Pix24Reserved UI8 Always 0
DefineBitsLossless2
DefineBitsLossless2 extends DefineBitsLossless with support for opacity (alpha values). The
colormap colors in colormapped images are defined using RGBA values, and direct images
store 32-bit ARGB colors for each pixel. The intermediate 15-bit color depth is not available
in DefineBitsLossless2.
The minimum file format version for this tag is SWF 3.
DefineBitsLossless2
Field Type Comment
Header RECORDHEADER (long) Tag type = 36
DefineBitsLossless2 153
The COLORMAPDATA and BITMAPDATA structures contain image data. These
structures are each compressed as a single block of data. Their layouts before compression
follow.
NOTE
ALPHACOLORMAPDATA
Field Type Comment
ColorTableRGB RGBA[color table size] Defines the mapping from color
indices to RGBA values.
Number of RGBA values is
BitmapColorTableSize + 1.
ALPHABITMAPDATA
Field Type Comment
BitmapPixelData ARGB[image data size] Array of pixel colors. Number of
entries is BitmapWidth *
BitmapHeight. The RGB data
must already be multiplied by
the alpha channel value.
DefineBitsJPEG4
This tag defines a bitmap character with JPEG compression. This tag extends
DefineBitsJPEG3, adding a deblocking parameter. While this tag also supports PNG and
GIF89a data, the deblocking filter is not applied to such data.
154 Bitmaps
The minimum file format version for this tag is SWF 10.
DefineBitsJPEG4
Field Type Comment
Header RECORDHEADER (long) Tag type = 90.
CharacterID UI16 ID for this character.
DefineBitsJPEG4 155
156 Bitmaps
CHAPTER 9
Shape Morphing 9
Shape morphing is the metamorphosis of one shape into another over time. The SWF file
format specification supports a flexible morphing model, which allows a number of shape
attributes to vary during the morph. The SWF file format defines only the start and end states
of the morph. Adobe Flash Player is responsible for interpolating between the endpoints and
generating the ‘in-between’ states.
The following shape attributes can be varied during the morph:
■ The position of each edge in the shape.
■ The color and thickness of the outline.
■ The fill color of the shape (if filled with a color).
■ The bitmap transform (if filled with a bitmap).
■ The gradient transform (if filled with a gradient).
■ The color and position of each point in the gradient (if filled with a gradient).
The following restrictions apply to morphing:
■ The start and end shapes must have the same number of edges.
■ The start and end shapes must have the same type of fill (that is, solid, gradient or bitmap).
■ The style change records must be the same for the start and end shapes.
■ If filled with a bitmap, both shapes must be filled with the same bitmap.
■ If filled with a gradient, both gradients must have the same number of color points.
157
The following illustration shows a morph from a blue rectangle to a red quadrilateral over five
frames. The green outlines represent the ‘in-between’ shapes of the morph sequence. Both
shapes have the same number of points, and the same type of fill, namely a solid fill. Besides
changing shape, the shape also gradually changes color from blue to red.
There are two tags involved in defining and playing a morph sequence:
■ DefineMorphShape
■ PlaceObject2
DefineMorphShape defines the start and end states of the morph. A morph object does not
use previously defined shapes; it is considered a special type of shape with only one character
ID. DefineMorphShape contains a list of edges for both the start and end shapes. It also
defines the fill and line styles, as they are at the start and end of the morph sequence.
The PlaceObject 2 tag displays the morph object at some point in time during the morph
sequence. The ratio field controls how far the morph has progressed. A ratio of zero produces
a shape identical to the start condition. A ratio of 65535 produces a shape identical to the end
condition.
DefineMorphShape
Field Type Comment
Header RECORDHEADER Tag type = 46
DefineMorphShape 159
DefineMorphShape
Field Type Comment
StartEdges SHAPE Contains the set of edges and
the style bits that indicate style
changes (for example, MoveTo,
FillStyle, and LineStyle).
Number of edges must equal
the number of edges in
EndEdges.
StartBounds This defines the bounding-box of the shape at the start of the morph.
EndBounds This defines the bounding-box at the end of the morph.
MorphFillStyles This contains an array of interleaved fill styles for the start and end shapes.
The fill style for the start shape is followed by the corresponding fill style for the end shape.
MorphLineStyles This contains an array of interleaved line styles.
StartEdges This array specifies the edges for the start shape, and the style change records
for both shapes. Because the StyleChangeRecords must be the same for the start and end
shapes, they are defined only in the StartEdges array.
EndEdges This array specifies the edges for the end shape, and contains no style change
records. The number of edges specified in StartEdges must equal the number of edges in
EndEdges.
NOT E
It is possible for an edge to change type over the course of a morph sequence. A straight edge
can become a curved edge and vice versa. In this case, think of both edges as curved. A straight
edge can be easily represented as a curve, by placing the off-curve (control) point at the
midpoint of the straight edge, and the on-curve (anchor) point at the end of the straight edge.
The calculation is as follows:
CurveControlDelta.x = StraightDelta.x / 2;
CurveControlDelta.y = StraightDelta.y / 2;
CurveAnchorDelta.x = StraightDelta.x / 2;
CurveAnchorDelta.y = StraightDelta.y / 2;
DefineMorphShape2
Field Type Comment
Header RECORDHEADER Tag type = 84
DefineMorphShape2 161
DefineMorphShape2
Field Type Comment
MorphFillStyles MORPHFILLSTYLEARRAY Fill style information is stored in
the same manner as for a
standard shape; however, each
fill consists of interleaved
information based on a single
style type to accommodate
morphing.
MORPHFILLSTYLEARRAY
A morph fill style array enumerates a number of fill styles.
MORPHFILLSTYLEARRAY
Field Type Comment
FillStyleCount Count = UI8 Count of fill styles.
MORPHFILLSTYLE
A fill style represents how a closed shape is filled in.
MORPHFILLSTYLE
Field Type Comment
FillStyleType UI8 Type of fill style
0x00 = solid fill
0x10 = linear gradient fill
0x12 = radial gradient fill
0x40 = repeating bitmap
0x41 = clipped bitmap fill
0x42 = non-smoothed
repeating bitmap
0x43 = non-smoothed
clipped bitmap
StartBitmapMatrix If type = 0x40, 0x41, 0x42 or 0x43, Matrix for bitmap fill for
MATRIX start shape.
EndBitmapMatrix If type = 0x40, 0x41, 0x42 or 0x43, Matrix for bitmap fill for
MATRIX end shape.
MORPHGRADIENT
The format of gradient information is described in the following table:
MORPHGRADIENT
Field Type Comment
NumGradients UI8 1 to 8.
MORPHGRADRECORD
The gradient record format is described in the following table:
MORPHGRADRECORD
Field Type Comment
StartRatio UI8 Ratio value for start shape.
MORPHLINESTYLEARRAY
The format of a line style array is described in the following table.
MORPHLINESTYLEARRAY
Field Type Comment
LineStyleCount UI8 Count of line styles.
MORPHLINESTYLE
The format of a line style value within the file is described in the following table.
MORPHLINESTYLE
Field Type Comment
StartWidth UI16 Width of line in start shape in
twips.
MORPHLINESTYLE2
Field Type Comment
StartWidth UI16 Width of line in start shape in
twips.
169
Glyph text characters are defined using the DefineFont, DefineFont2, or DefineFont3 tag.
Device text fonts are defined using the DefineFont and DefineFontInfo tags together, or the
DefineFont2 tag. DefineFont2 tags for device text fonts do not need to include any character
glyphs if they will only be used for dynamic text (see next section), although it is a good idea
to include them if there is any doubt about the specified font being available at playback time
on any platform. It is possible to use a given DefineFont or DefineFont2 tag as a glyph font
for certain text blocks, and as a device font for others, as long as both glyphs and character
codes are provided.
Glyph definitions
Glyphs are defined once in a standard coordinate space called the EM square. The same set of
glyphs are used for every point size of a given font. To render a glyph at different point sizes,
Flash Player scales the glyph from EM coordinates to point-size coordinates.
Glyph fonts—without using the advanced text rendering engine —do not include any
hinting information for improving the quality of small font sizes. However, anti-aliasing
dramatically improves the legibility of scaled-down text. Glyph text remains legible down to
about 12 points (viewed at 100%). At 12 points and lower, advanced anti-aliasing is
recommended for readable glyph text. This gives superior text quality at small point sizes and
includes extra font meta-information for improved rendering.
TrueType fonts can be readily converted to SWF glyphs. A simple algorithm can replace the
Quadratic B-splines (used by TrueType fonts) with Quadratic Bezier curves (used by SWF
glyphs).
Example:
To the left is the glyph for the TrueType letter 'b' of Monotype Arial. It is made up of curved
and straight edges. Squares indicate on-curve points, and crosses indicate off-curve points.
The black circle is the reference point for the glyph. The blue outline indicates the bounding
box of the glyph.
SWF glyphs are always defined on an EM square of 1024 by 1024 units. Glyphs from other
sources (such as TrueType fonts) may be defined on a different EM square. To use these
glyphs in SWF file format, they should be scaled to fit an EM square of 1024.
This curve can be represented as two Quadratic Bezier curves by inserting a new point M, at
the midpoint of P1,P2. The result is two Quadratic Bezier curves; P0,P1,M and M,P2,P3.
In the preceding example, the A glyph overlaps the V glyph. In this case, the advance is
narrower than the width of the A glyph.
The CSM parameters are intended to make fonts more readable and not to create
effects. Extreme values of CSM result in rendering artifacts. To apply effects to text, it is
much better to use reasonable CSM values and then apply filters or blend effects.
A DefineFont tag must always come before any DefineText tags that refer to it.
DefineFont DefineText
SHAPE Array: TEXTRECORD
Font tags
DefineFont
The DefineFont tag defines the shape outlines of each glyph used in a particular font. Only
the glyphs that are used by subsequent DefineText tags are actually defined.
DefineFont tags cannot be used for dynamic text. Dynamic text requires the DefineFont2 tag.
The minimum file format version is SWF 1.
DefineFont
Field Type Comment
Header RECORDHEADER Tag type = 10
DefineFontInfo
The DefineFontInfo tag defines a mapping from a glyph font (defined with DefineFont) to a
device font. It provides a font name and style to pass to the playback platform’s text engine,
and a table of character codes that identifies the character represented by each glyph in the
corresponding DefineFont tag, allowing the glyph indices of a DefineText tag to be converted
to character strings.
The presence of a DefineFontInfo tag does not force a glyph font to become a device font; it
merely makes the option available. The actual choice between glyph and device usage is made
according to the value of devicefont (see the introduction) or the value of UseOutlines in a
DefineEditText tag. If a device font is unavailable on a playback platform, Flash Player will
fall back to glyph text.
DefineFontInfo
Field Type Comment
Header RECORDHEADER Tag type = 13.
FontID UI16 Font ID this information is for.
The entries in the CodeTable must be sorted in ascending order by code point, by the value
they provide. The order of the entries in the CodeTable must also match the order of the
glyphs in the DefineFont tag to which this DefineFontInfo tag applies. This places a
requirement on the ordering of glyphs in the corresponding DefineFont tag.
Font name:
Example appearance:
Font name:
Example appearance:
DefineFontInfo2
When generating SWF 6 or later, it is recommended that you use the new DefineFontInfo2
tag rather than DefineFontInfo. DefineFontInfo2 is identical to DefineFontInfo, except that
it adds a field for a language code. If you use the older DefineFontInfo, the language code will
be assumed to be zero, which results in behavior that is dependent on the locale in which
Flash Player is running.
DefineFontInfo2
Field Type Comment
Header RECORDHEADER Tag type = 62.
FontID UI16 Font ID this information is for.
DefineFont2
The DefineFont2 tag extends the functionality of DefineFont. Enhancements include
the following:
■ 32-bit entries in the OffsetTable, for fonts with more than 64K glyphs.
■ Mapping to device fonts, by incorporating all the functionality of DefineFontInfo.
■ Font metrics for improved layout of dynamic glyph text.
DefineFont2 tags are the only font definitions that can be used for dynamic text.
DefineFont2
Field Type Comment
Header RECORDHEADER Tag type = 48.
FontID UI16 ID for this font character.
In SWF 6 or later files, DefineFont2 has the same Unicode requirements as DefineFontInfo.
Similarly to the DefineFontInfo tag, the CodeTable (and thus also the OffsetTable,
GlyphShapeTable, and FontAdvanceTable) must be sorted in code point order.
If a DefineFont2 tag will be used only for dynamic device text, and no glyph-rendering
fallback is desired, set NumGlyphs to zero, and omit all tables having NumGlyphs entries.
This will substantially reduce the size of the DefineFont2 tag. DefineFont2 tags without
glyphs cannot support static text, which uses glyph indices to select characters, and also
cannot support glyph text, which requires glyph shape definitions.
Layout information (ascent, descent, leading, advance table, bounds table, kerning table) is
useful only for dynamic glyph text. This information takes the place of the per-character
placement information that is used in static glyph text. The layout information in the
DefineFont2 tag is fairly standard font-metrics information that can typically be extracted
directly from a standard font definition, such as a TrueType font.
NOT E
DefineFont3
The DefineFont3 tag is introduced along with the DefineFontAlignZones tag in SWF 8. The
DefineFontAlignZones tag is optional but recommended for SWF files using advanced anti-
aliasing, and it modifies the DefineFont3 tag.
The DefineFont3 tag extends the functionality of DefineFont2 by expressing the SHAPE
coordinates in the GlyphShapeTable at 20 times the resolution. All the EMSquare coordinates
are multiplied by 20 at export, allowing fractional resolution to 1/20 of a unit. This allows for
more precisely defined glyphs and results in better visual quality.
The minimum file format version is SWF 8.
DefineFont3
Field Type Comment
Header RECORDHEADER Tag type = 75.
DefineFontAlignZones
The DefineFont3 tag can be modified by a DefineFontAlignZones tag. The advanced text
rendering engine uses alignment zones to establish the borders of a glyph for pixel snapping.
Alignment zones are critical for high-quality display of fonts.
The alignment zone defines a bounding box for strong vertical and horizontal components of
a glyph. The box is described by a left coordinate, thickness, baseline coordinate, and height.
Small thicknesses or heights are often set to 0.
For example, consider the letter I. The letter I has a strong horizontal at its baseline and the
top of the letter. The letter I also has strong verticals that occur at the edges of the stem—not
the short top bar or serif. These strong verticals and horizontals of the center block of the
letter define the alignment zones.
DefineFontAlignZones
Field Type Comment
Header RECORDHEADER Tag type = 73.
FontID UI16 ID of font to use, specified by
DefineFont3.
CSMTableHint UB[2] Font thickness hint. Refers
to the thickness of the typical
stroke used in the font.
0 = thin
1 = medium
2 = thick
Flash Player maintains a
selection of CSM tables for
many fonts. However, if the
font is not found in Flash
Player's internal table, this
hint is used to choose an
appropriate table.
ZONERECORD
Field Type Comment
NumZoneData UI8 Number of ZoneData entries.
Always 2.
Kerning record
A Kerning Record defines the distance between two glyphs in EM square coordinates. Certain
pairs of glyphs appear more aesthetically pleasing if they are moved closer together, or farther
apart. The FontKerningCode1 and FontKerningCode2 fields are the character codes for the
left and right characters. The FontKerningAdjustment field is a signed integer that defines a
value to be added to the advance value of the left character.
KERNINGRECORD
Field Type Comment
FontKerningCode1 If FontFlagsWideCodes, Character code of the left
UI16 character.
Otherwise UI8
FontKerningCode2 If FontFlagsWideCodes, Character code of the right
UI16 character.
Otherwise UI8
DefineFontName
The DefineFontName tag contains the name and copyright information for a font embedded
in the SWF file.
DefineFontName
Field Type Comment
Header RECORDHEADER Tag type = 88
FontID UI16 ID for this font to which this
refers
FontName STRING Name of the font. For fonts
starting as Type 1, this is the
PostScript FullName. For fonts
starting in sfnt formats such as
TrueType and OpenType, this
is name ID 4, platform ID 1,
language ID 0 (Full name, Mac
OS, English).
DefineText
The DefineText tag defines a block of static text. It describes the font, size, color, and exact
position of every character in the text object.
The minimum file format version is SWF 1.
DefineText
Field Type Comment
Header RECORDHEADER Tag type = 11.
The TextBounds field is the rectangle that completely encloses all the characters in this text
block.
The GlyphBits and AdvanceBits fields define the number of bits used for the GlyphIndex and
GlyphAdvance fields, respectively, in each GLYPHENTRY record.
Text records
A TEXTRECORD sets text styles for subsequent characters. It can be used to select a font,
change the text color, change the point size, insert a line break, or set the x and y position of
the next character in the text. The new text styles apply until another TEXTRECORD
changes the styles.
TEXTRECORD
Field Type Comment
TextRecordType UB[1] Always 1.
StyleFlagsReserved UB[3] Always 0.
The FontID field is used to select a previously defined font. This ID uniquely identifies a
DefineFont or DefineFont2 tag from earlier in the SWF file.
The TextHeight field defines the height of the font in twips. For example, a pixel height of 50
is equivalent to a TextHeight of 1000. (50 * 20 = 1000).
The XOffset field defines the offset from the left of the TextBounds rectangle to the reference
point of the glyph (the point within the EM square from which the first curve segment
departs). Typically, the reference point is on the baseline, near the left side of the glyph (see
the example for Glyph text). The XOffset is generally used to create indented text or non-left-
justified text. If there is no XOffset specified, the offset is assumed to be zero.
The YOffset field defines the offset from the top of the TextBounds rectangle to the reference
point of the glyph. The TextYOffset is generally used to insert line breaks, moving the text
position to the start of a new line.
Glyph entry
The GLYPHENTRY structure describes a single character in a line of text. It is composed of
an index into the current font’s glyph table, and an advance value. The advance value is the
horizontal distance between the reference point of this character and the reference point of the
following character.
GLYPHENTRY
Field Type Comment
GlyphIndex UB[GlyphBits] Glyph index into current font.
DefineText2
The DefineText2 tag is almost identical to the DefineText tag. The only difference is that
Type 1 text records contained within a DefineText2 tag use an RGBA value (rather than an
RGB value) to define TextColor. This allows partially or completely transparent characters.
Text defined with DefineText2 is always rendered with glyphs. Device text can never
include transparency.
The minimum file format version is SWF 3.
DefineText2
Field Type Comment
Header RECORDHEADER Tag type = 33.
DefineEditText
The DefineEditText tag defines a dynamic text object, or text field.
A text field is associated with an ActionScript variable name where the contents of the text
field are stored. The SWF file can read and write the contents of the variable, which is always
kept in sync with the text being displayed. If the ReadOnly flag is not set, users may change
the value of a text field interactively.
Fonts used by DefineEditText must be defined using DefineFont2, not DefineFont.
The minimum file format version is SWF 4.
DefineEditText
Field Type Comment
Header RECORDHEADER Tag type = 37.
If the HTML flag is set, the contents of InitialText are interpreted as a limited subset of the
HTML tag language, with a few additions not normally present in HTML. The following
tags are supported:
Tag Description
<p> ... </p> Defines a paragraph. The attribute align may be present, with
value left, right, or center.
<br> Inserts a line break.
<a> ... </a> Defines a hyperlink. The attribute href must be present. The
attribute target is optional, and specifies a window name.
CSMTextSettings
In addition to the advanced text rendering tags discussed earlier in this chapter, the rendering
engine also supports a tag for modifying text fields. The CSMTextSettings tag modifies a
previously streamed DefineText, DefineText2, or DefineEditText tag. The CSMTextSettings
tag turns advanced anti-aliasing on or off for a text field, and can also be used to define quality
and options.
CSMTextSettings
Field Type Comment
Header RECORDHEADER Tag type = 74.
TextID UI16 ID for the DefineText,
DefineText2, or
DefineEditText to which this
tag applies.
Using the font size in the cutoff calculations results in linear scaling of CSM parameters, and
linear scaling tends to be a poor approximation when significant scaling is applied. When a
text field will scale, it is usually better to use the default table or provide your own anti-
aliasing table.
DefineFont4
DefineFont4 supports only the new Flash Text Engine. The storage of font data for embedded
fonts is in CFF format.
The minimum file format version is SWF 10.
DefineFont4
Field Type Comment
Header RECORDHEADER Tag type = 91
Sounds 11
The SWF file format specification defines a small and efficient sound model. SWF supports
several audio coding formats and can store the audio using a range of sample rates in both
stereo and mono. Adobe Flash Player supports rate conversion and multichannel mixing of
these sounds. The number of simultaneous channels supported depends on the CPU
resources available to the Flash Player, but is typically three to eight channels.
There are two types of sounds in SWF file format:
■ Event sounds
■ Streaming sounds
Event sounds are played in response to some event such as a mouse click, or when Flash Player
reaches a certain frame. Event sounds must be defined (downloaded) before they are used.
They can be reused for multiple events if desired. Event sounds may also have a sound “style”
that modifies how the basic sound is played.
Streaming sounds are downloaded and played in tight synchronization with the timeline. In
this mode, sound packets are stored with each frame.
NOTE
The exact sample rates used are as follows. These are standard sample rates based on
CD audio, which is sampled at 44100 Hz. The four sample rates are one-eighth, one-
quarter, one-half, and exactly the 44100 Hz sampling rate.
201
Coding format Audio format number Minimum SWF version
Uncompressed, native-endian 0 1
ADPCM 1 1
MP3 2 4
Uncompressed, little-endian 3 4
Nellymoser 16 kHz 4 10
Nellymoser 8 kHz 5 10
Nellymoser 6 6
Speex 11 10
Event sounds
There are several control tags and records required to play an event sound:
■ The DefineSound tag provides the audio samples that make up an event sound.
■ The SOUNDINFO record defines the styles that are applied to the event sound. Styles
include fade-in, fade-out, synchronization and looping flags, and envelope control.
■ The StartSound tag instructs the Flash Player to begin playing the sound.
■ The StartSound2 tag instructs the Flash Player to begin playing a sound class from
another SWF.
DefineSound
The DefineSound tag defines an event sound. It includes the audio coding format, sampling
rate, size of each sample (8 or 16 bit), a stereo/mono flag, and an array of audio samples. Note
that not all of these parameters will be honored depending on the audio coding format.
The minimum file format version is SWF 1.
Define Sound
Field Type Comment
Header RECORDHEADER Tag type = 14
202 Sounds
Define Sound
Field Type Comment
SoundFormat UB[4] Format of SoundData. See
“Audio coding formats”
on page 201.
The SoundId field uniquely identifies the sound so it can be played by StartSound.
StartSound
StartSound is a control tag that either starts (or stops) playing a sound defined by
DefineSound. The SoundId field identifies which sound is to be played. The SoundInfo field
defines how the sound is played. Stop a sound by setting the SyncStop flag in the
SOUNDINFO record.
The minimum file format version is SWF 1.
StartSound
Field Type Comment
Header RECORDHEADER Tag type = 15.
204 Sounds
StartSound2
StartSound is a control tag that either starts (or stops) playing a sound defined by
DefineSound. The SoundId field identifies which sound is to be played. The SoundInfo field
defines how the sound is played. Stop a sound by setting the SyncStop flag in the
SOUNDINFO record.
The minimum file format version is SWF 9. Supported in Flash Player 9.0.45.0 and later.
StartSound
Field Type Comment
Header RECORDHEADER Tag type = 89.
Sound styles
SOUNDINFO
The SOUNDINFO record modifies how an event sound is played. An event sound is defined
with the DefineSound tag. Sound characteristics that can be modified include:
■ Whether the sound loops (repeats) and how many times it loops.
■ Where sound playback begins and ends.
■ A sound envelope for time-based volume control.
SOUNDINFO
Field Type Comment
Reserved UB[2] Always 0.
SOUNDENVELOPE
The SOUNDENVELOPE structure is defined as follows:
SOUNDENVELOPE
Field Type Comment
Pos44 UI32 Position of envelope point
as a number of 44 kHz
samples. Multiply
accordingly if using a
sampling rate less than 44
kHz.
For mono sounds, set the LeftLevel and RightLevel fields to the same value. If the values
differ, they will be averaged.
206 Sounds
Streaming sound
The SWF file format supports a streaming sound mode where sound data is played and
downloaded in tight synchronization with the timeline. In this mode, sound packets are
stored with each frame.
When streaming sound is present, and the playback CPU is too slow to maintain the desired
SWF frame rate, Flash Player skips frames of animation in order to maintain sound
synchronization and avoid dropping sound samples. (Actions from the skipped frames are
still executed.)
The main timeline of a SWF file can only have a single streaming sound playing at a time, but
each sprite can have its own streaming sound (see Sprites and Movie Clips).
SoundStreamHead
If a timeline contains streaming sound data, there must be a SoundStreamHead or
SoundStreamHead2 tag before the first sound data block (see “SoundStreamBlock”
on page 210). The SoundStreamHead tag defines the data format of the sound data, the
recommended playback format, and the average number of samples per SoundStreamBlock.
The minimum file format version is SWF 1.
SoundStreamHead
Field Type Comment
Header RECORDHEADER Tag type = 18.
208 Sounds
SoundStreamHead2
The SoundStreamHead2 tag is identical to the SoundStreamHead tag, except it allows
different values for StreamSoundCompression and StreamSoundSize (SWF 3 file format).
SoundStreamHead2
Field Type Comment
Header RECORDHEADER Tag type = 45
SoundStreamBlock
The SoundStreamBlock tag defines sound data that is interleaved with frame data so that
sounds can be played as the SWF file is streamed over a network connection. The
SoundStreamBlock tag must be preceded by a SoundStreamHead or SoundStreamHead2 tag.
There may only be one SoundStreamBlock tag per SWF frame.
The minimum file format version is SWF 1.
SoundStreamBlock
Field Type Comment
Header RECORDHEADER (long) Tag type = 19.
210 Sounds
■ If StreamSoundCompression is 6, StreamSoundData contains a NELLYMOSERDATA
record.
MP3STREAMSOUNDDATA
Field Type Comment
SampleCount UI16 Number of samples
represented by this block. Not
affected by mono/stereo
setting; for stereo sounds this
is the number of sample pairs.
The SoundStreamBlock in SWF Frame 1 contains one MP3 frame and has SeekSamples set
to zero. Frame 2 contains two MP3 frames and has SeekSamples set to 919 - 576 = 343.
Frame 3 contains one MP3 frame and has SeekSamples set to 1838 - 1728 = 110.
In continuous playback, Flash Player will string all of the MP3 frames together and play them
at their natural sample rate, reading ahead in the SWF bitstream to build up a buffer of sound
data (this is why it is acceptable to include less than the ideal number of samples in a SWF
frame). After a seek to a particular frame, such as is prompted by an ActionGotoFrame, Flash
Player will skip the number of samples indicated by SeekSamples. For example, after a seek to
Frame 2, it will skip 343 samples of the SoundStreamBlock data from Frame 2, which will
cause sound playback to begin at sample 919, the ideal value.
If the ideal number of MP3 frames per SWF frame is less than one, there will be SWF frames
whose SoundStreamBlocks cannot accommodate any MP3 frames without exceeding the
ideal number of samples. In this case, write a SoundStreamBlock with SampleCount = 0,
SeekSamples = 0, and no MP3 data.
212 Sounds
Some MP3 encoders have an initial latency, generating a number of silent or meaningless
samples before the desired sound data begins. This can help the Flash Player MP3 decoder as
well, providing some ramp-up data before the samples that are needed. In this situation,
determine how many samples the initial latency occupies, and supply that number for
SeekSamples in the first SoundStreamBlock. Flash Player will add this number to the
SeekSamples for any other frame when performing a seek. Latency also affects the decision as
to how many MP3 frames to put into a SoundStreamBlock. Here is a modification of the
above example with a latency of 940 samples:
The SoundStreamBlock in SWF Frame 1 contains three MP3 frames, the maximum that can
be accommodated without exceeding the ideal number of samples after adjusting for latency
(represented by the leftward shift of the MP3 timeline above). The value of SeekSamples in
Frame 1 is special; it represents the latency. Frame 2 contains one MP3 frame and has
SeekSamples set to 919 - (1728 - 940) = 131.
ADPCM compression
ADPCM (Adaptive Differential Pulse Code Modulation) is a family of audio compression
and decompression algorithms. It is a simple but efficient compression scheme that avoids any
licensing or patent issues that arise with more sophisticated sound compression schemes, and
helps to keep player implementations small.
For SWF 4 or later files, MP3 compression is a preferable format (see “MP3 compression”
on page 216). MP3 produces substantially better sound for a given bitrate.
ADPCM uses a modified Differential Pulse Code Modulation (DPCM) sampling technique
where the encoding of a each sample is derived by calculating a “difference” (DPCM) value,
and applying to this a complex formula which includes the previous quantization value. The
result is a compressed code, which can recreate almost the same subjective audio quality.
A common implementation takes 16-bit linear PCM samples and converts them to 4-bit
codes, yielding a compression rate of 4:1. Public domain C code written by Jack Jansen is
available at www.cwi.nl/ftp/audio/adpcm.zip.
ADPCMSOUNDDATA
Field Type Comment
AdpcmCodeSize UB[2] Bits per ADPCM code less 2.
0 = 2 bits/sample The actual size of each code is
1 = 3 bits/sample AdpcmCodeSize + 2.
2 = 4 bits/sample
3 = 5 bits/sample
214 Sounds
ADPCMPACKETs vary in structure depending on whether the sound is mono or stereo.
ADPCMMONOPACKET
Field Type Comment
InitialSample SI16 First sample. Identical to
first sample in
uncompressed sound.
ADPCMSTEREOPACKET
Field Type Comment
InitialSampleLeft SI16 First sample for left
channel. Identical to first
sample in uncompressed
sound.
Be aware that software and hardware MP3 encoders and decoders might have their
own licensing requirements.
MP3SOUNDDATA
Field Type Comment
SeekSamples SI16 Number of samples to skip.
For an explanation of the the SeekSamples field, see “Frame subdivision for streaming sound”
on page 211.
N OT E
216 Sounds
MP3 frame
The MP3FRAME record corresponds exactly to an MPEG audio frame that you would find
in an MP3 music file. The first 32 bits of the frame contain header information, followed by
an array of bytes, which are the encoded audio samples.
MP3FRAME
Field Type Comment
Syncword UB[11] Frame sync.
All bits must be set.
218 Sounds
MP3FRAME
Field Type Comment
ChannelMode UB[2] Dual-channel files are made of
two independent mono
channels. Each one uses
exactly half the bitrate of the
file.
0 = Stereo
1 = Joint stereo (Stereo)
2 = Dual channel
2 = Single channel (Mono)
ModeExtension UB[2]
* The size of the sample data is calculated like this (using integer arithmetic):
Size = (((MpegVersion == MPEG1 ? 144 : 72) * Bitrate) / SamplingRate) +
PaddingBit - 4
For example: The size of the sample data for an MPEG1 frame with a Bitrate of 128000, a
SamplingRate of 44100, and PaddingBit of 1 is:
Size = (144 * 128000) / 44100 + 1 – 4 = 414 bytes
Nellymoser compression
Starting with SWF 6, a compressed sound format called Nellymoser Asao is available. This is a
single-channel (mono) format optimized for low-bitrate transmission of speech. The format
was developed by Nellymoser Inc. at www.nellymoser.com.
A summary of the Nellymoser Asao encoding process is provided here. For full details of the
Asao format, contact Nellymoser.
Speex compression
Starting with SWF 10, a SWF file can store audio samples that have been compressed using
the free, open source Speex voice codec (see speex.org). Speex audio is stored as format 11 in a
DefineSound tag. While Speex supports a range of sample rates, Speex audio encoded in SWF
is always encoded at 16 kHz; the SoundRate field of the DefineSound tag is disregarded. The
SoundType and SoundSize fields are also ingored in the case of Speex. Speex in SWF is always
mono and always decodes to 16-bit audio samples internally.
Speex 1.2 beta 3 is compiled into the Flash Player as of version 10 (10.0.12).
220 Sounds
CHAPTER 12
Buttons 12
Button characters in the SWF file format serve as interactive elements. They can react
programmatically to events that occur. The most common event to handle is a simple click
from the mouse, but more complex events can be trapped as well.
Button states
A button object can be displayed in one of three states: up, over, or down.
The up state is the default appearance of the button. The up state is displayed when the SWF
file starts playing, and whenever the mouse is outside the button. The over state is displayed
when the mouse is moved inside the button. This allows rollover or hover buttons in a SWF
file. The down state is the clicked appearance of the button. It is displayed when the mouse is
clicked inside the button.
A fourth state—the hit state—defines the active area of the button. This is an invisible state
and is never displayed. It defines the area of the button that reacts to mouse clicks. This hit
area is not necessarily rectangular and need not reflect the visible shape of the button.
Each state is made up of a collection of instances of characters from the dictionary. Each such
instance is defined using a Button record, which, within a button definition, acts like a
PlaceObject tag. For the up, over, and down states, these characters are placed on the display
list when the button enters that state. For the hit-area state, these characters define the active
area of the button.
The following is an example of a typical button and its four states. The button is initially blue.
When the mouse is moved over the button, it changes to a purple color. When the mouse is
pressed inside the button, the shading changes to simulate a depressed button. The fourth
state—the hit area—is a simple rectangle. Anything outside this shape is outside the button,
and anything inside this shape is inside the button.
221
The SWF file format has no native support for radio buttons or check boxes. There is no
“checked” (selected) state, and buttons cannot “stick” down after the mouse is released. In
addition, there is no way to group buttons into mutually exclusive choices. However, both of
these behaviors can be simulated by using button actions.
Button tracking
Button tracking refers to how a button behaves as it tracks the movement of the mouse. A
button object can track the mouse in one of two modes, as a push button or as a menu
button.
If a push button is clicked, all mouse movement events are directed to the push button until
the mouse button is released. This is called capturing the mouse. For example, if you click a
push button and drag outside the button (without releasing), the button changes to the over
state, and the pointer remains a pointing hand.
Menu buttons do not capture the mouse. If you click a menu button and drag outside, the
button changes to the up state, and the pointer reverts to an arrow.
OverUpToIdle Roll Out Mouse leaves the hit Button changes from
area while the mouse over to up state.
button is up.
222 Buttons
State Transition Event Description Visual Effect
OverUpToOverDown Press Mouse button is pressed Button changes from
while the mouse is inside over to down state.
the hit area.
Often button actions are performed only on OverDownToOverUp (when the mouse button
is released), but DefineButton2 allows actions to be triggered by any state transition.
A button object can perform any action supported by the SWF 3 actions (see “SWF 3
actions” on page 68).
Button record
A button record defines a character to be displayed in one or more button states. The
ButtonState flags indicate which state (or states) the character belongs to.
A one-to-one relationship does not exist between button records and button states. A single
button record can apply to more than one button state (by setting multiple ButtonState flags),
and multiple button records can be present for any button state.
Each button record also includes a transformation matrix and depth (stacking-order)
information. These apply just as in a PlaceObject tag, except that both pieces of information
are relative to the button character itself.
SWF 8 and later supports the new ButtonHasBlendMode and ButtonHasFilterList fields to
support blend modes and bitmap filters on buttons. Flash Player 7 and earlier ignores these
two fields.
BUTTONRECORD
Field Type Comment
ButtonReserved UB[2] Reserved bits; always 0
224 Buttons
BUTTONRECORD
Field Type Comment
FilterList If within DefineButton2 and List of filters on this button
ButtonHasFilterList = 1,
FILTERLIST
DefineButton
The DefineButton tag defines a button character for later use by control tags such as
PlaceObject.
DefineButton includes an array of Button records that represent the four button shapes: an up
character, a mouse-over character, a down character, and a hit-area character. It is not
necessary to define all four states, but at least one button record must be present. For example,
if the same button record defines both the up and over states, only three button records are
required to describe the button.
More than one button record per state is allowed. If two button records refer to the same state,
both are displayed for that state.
DefineButton also includes an array of ACTIONRECORDs, which are performed when the
button is clicked and released (see “SWF 3 actions” on page 68).
DefineButton
Field Type Comment
Header RECORDHEADER Tag type = 7
ButtonId UI16 ID for this character
DefineButton2
DefineButton2 extends the capabilities of DefineButton by allowing any state transition to
trigger actions.
The minimum file format version is SWF 3:
Starting with SWF 9, if the ActionScript3 field of the FileAttributes tag is 1, there must be no
BUTTONCONDACTION fields in the DefineButton2 tag. ActionOffset must be 0. This
structure is not supported because it is not permitted to mix ActionScript 1/2 and
ActionScript 3.0 code within the same SWF file.
DefineButton2
Field Type Comment
Header RECORDHEADER Tag type = 34
ButtonId UI16 ID for this character
226 Buttons
DefineButton2
Field Type Comment
CharacterEndFlag UI8 Must be 0
Actions BUTTONCONDACTION Actions to execute at particular
[zero or more] button events
BUTTONCONDACTION
Field Type Comment
CondActionSize UI16 Offset in bytes from start of this
field to next
BUTTONCONDACTION, or 0
if last action
CondIdleToOverDown UB[1] Idle to OverDown
For each event handler (each BUTTONCONDACTION), one or more of the Cond bit
fields should be filled in. This specifies when the event handler should be executed.
CondKeyPress specifies a particular key to trap. A CondKeyPress event handler is executed
even if the button that it applies to does not have input focus. For the 32 to 126 ASCII key
codes, the key event that is trapped is composite—it takes into account the effect of the Shift
key. To trap raw key events, corresponding directly to keys on the keyboard (including the
modifier keys themselves), use clip event handlers instead.
DefineButtonCxform
DefineButtonCxform defines the color transform for each shape and text character in a
button. This is not used for DefineButton2, which includes its own CXFORM.
228 Buttons
The minimum file format version is SWF 2.
DefineButtonCxform
Field Type Comment
Header RECORDHEADER Tag type = 23
ButtonId UI16 Button ID for this information
DefineButtonSound
The DefineButtonSound tag defines which sounds (if any) are played on state transitions.
The minimum file format version is SWF 2.
DefineButtonSound
Field Type Comment
Header RECORDHEADER Tag type = 17
231
Sprite names
When a sprite is placed on the display list, it can be given a name with the PlaceObject2 tag.
This name is used to identify the sprite so that the main file (or other sprites) can perform
actions inside the sprite. This is achieved with the SetTarget action (see ActionSetTarget).
For example, say a sprite object is placed in the main file with the name "spinner". The main
file can send this sprite to the first frame in its timeline with the following action sequence:
1. SetTarget "spinner"
2. GotoFrame zero
3. SetTarget "" (empty string)
4. End of actions.
(Action code = 0)
NOT E
All actions following SetTarget “spinner” apply to the spinner object until SetTarget
“”, which sets the action context back to the main file.
The SWF file format supports placing sprites within sprites, which can lead to complex
hierarchies of objects. To handle this complexity, the SWF file format uses a naming
convention similar to that used by file systems to identify sprites.
For example, the following outline shows four sprites defined within the main file:
MainMovie.swf
SpriteA (name: Jack)
SpriteA1 (name: Bert)
SpriteA2 (name: Ernie)
SpriteB (name: Jill)
DefineSprite
Field Type Comment
Header RECORDHEADER Tag type = 39
• ShowFrame • StartSound
• PlaceObject • FrameLabel
• PlaceObject2 • SoundStreamHead
• RemoveObject • SoundStreamHead2
• RemoveObject2 • SoundStreamBlock
DefineSprite 233
234 Sprites and Movie Clips
CHAPTER 14
Video 14
The Adobe Flash Player 6 and later supports video playback. Video can be provided to Flash
Player in the following ways:
■ Embed video within a SWF file by using the SWF video tags.
■ Deliver a video stream over RTMP through the Adobe Flash Media Server, which, as one
option, can obtain the video data from an FLV file format file.
■ Load an FLV file directly into Flash Player by using the NetStream.play ActionScript
method. This method is only available in Flash Player 7 and later. The SWF and FLV file
formats share a common video encoding format.
For complete information about the FLV file format, please refer to the FLV File Format
Specification at www.adobe.com/go/video_file_format.
235
Summary of differences from H.263
The following H.263 features are removed from the Sorenson H.263 video format:
■ GOB (group of blocks) layer
■ Split-screen indicator
■ Document camera indicator
■ Picture freeze release
■ Syntax-based arithmetic coding
■ PB frames
■ Continuous-presence multipoint
■ Overlapped block-motion compensation
The following non-H.263 features are added to the Sorenson H.263 video format:
■ Disposable frames (difference frames with no future dependencies)
■ Arbitrary picture width and height up to 65535 pixels
■ Unrestricted motion vector support is always on
■ A deblocking flag is available to suggest the use of a deblocking filter
To support these differences, the Sorenson H.263 video format uses different headers than
H.263 at both the picture layer and the Macroblock layer. The GOB layer is absent.
Two versions of the Sorenson H.263 video format are defined. In version 0, the block layer is
identical to H.263. In version 1, escape codes in transform coefficients are encoded differently
than in H.263. Version 0 and version 1 have no other differences
Video packet
The video packet is the top-level structural element in a Sorenson H.263 video packet. It
corresponds to the picture layer in H.263 section 5.1. This structure is included within the
VideoFrame tag in the SWF file format, and also within the VIDEODATA structure in the
FLV file format.
H263VIDEOPACKET
Field Type Comment
PictureStartCode UB[17] Similar to H.263 5.1.1
0000 0000 0000 0000 1
Version UB[5] Video format version
Flash Player 6 supports 0 and 1
TemporalReference UB[8] See H.263 5.1.2
236 Video
H263VIDEOPACKET
Field Type Comment
PictureSize UB[3] 000: custom, 1 byte
001: custom, 2 bytes
010: CIF (352x288)
011: QCIF (176x144)
100: SQCIF (128x96)
101: 320x240
110: 160x120
111: reserved
Macro block
The macro block is the next layer down in the video structure. It corresponds to the macro
block layer in H.263 section 5.3.
MACROBLOCK
Field Type Comment
CodedMacroblockFlag UB[1] See H.263 5.3.1
If 1, macro block ends here
238 Video
Block data
Block data is the lowest layer in the video structure. In version 0 of the Sorenson H.263 video
format, this layer follows H.263 section 5.4 exactly.
In version 1 of the Sorenson H.263 video format, escape codes in transform coefficients (see
H.263 section 5.4.2) are encoded differently. When the ESCAPE code 0000 011 appears, the
next bit is a format bit that indicates the subsequent bit layout for LAST, RUN, and LEVEL.
In both cases, one bit is used for LAST and six bits are used for RUN. If the format bit is 0,
seven bits are used for LEVEL; if the format bit is 1, eleven bits are used for LEVEL. The
7-bit and 11-bit LEVEL tables, which replace table 14 in H.263, as the following table shows:
- 0 FORBIDDEN - 0 FORBIDDEN
. . . . . .
Video packet
The video packet is the top-level structural element in a screen video packet. This structure is
included within the VideoFrame tag in the SWF file format, and also within the
VIDEODATA structure in the FLV file format.
240 Video
The data consists of information about the image sub-block dimensions and grid size,
followed by the data for each block.
SCREENVIDEOPACKET
Field Type Comment
BlockWidth UB[4] Pixel width of each block in
the grid. This value is stored
as
(actualWidth / 16) - 1, so
possible block sizes are a
multiple of 16 and not more
than 256.
IMAGEBLOCK
Field Type Comment
DataSize UB[16] Size of the compressed block
Note: UB[16] is not the same data that follows. If this is an
as UI16; no byte swapping interframe, and this block is not
occurs. changed since the last
keyframe, DataSize is 0 and
the Data field is absent.
242 Video
V2 Colorspace
The Screen Video v2 can encode video data using either a 24-bit RGB colorspace, as in v1, or
using a 15/7-bit hybrid colorspace. Using the latter colorspace, an image has a corresponding
128-entry palette. Each pixel in a decoded image is represented by either 1 or 2 bytes.
Generally, a decoder will want to convert a 15/7-bit hybrid colorspace to a 24-bit RGB
colorspace. The process for doing so is:
■ fetch next byte from decoded image
■ if next byte has its high bit set, clear high bit and fetch next byte from decoded image;
form a 15-bit color by placing the low 7 bits of the current byte in bits 14-8 of the color,
and place the 8 bits from the next byte in bits 7-0 of the color; convert the 15-bit RGB
color to 24-bit RGB
■ if next byte has its high bit clear, use the lower 7 bits as an index into the 128-entry palette
and retrieve the corresponding 24-bit RGB color
A v2 video packet is free to define a new palette at any time, which is transmitted as a v1
IMAGEBLOCK. In the absence of a stream-defined palette, the v2 decoder will fall back to a
default palette. For the default palette, see Appendix C, “Screen Video v2 Palette.”
V2 Video Packet
Video Packet v2 is the top-level structural element in a screen video packet for Screen Video
Version 2. This structure is included within the VideoFrame tag in SWF file format, and also
within the VIDEODATA structure in FLV file format.
The data consists of information about the image sub-block dimensions and grid size,
followed by the data for each block.
SCREENV2VIDEOPACKET
Field Type Comment
BlockWidth UB[4] Pixel width of each block in
the grid. This value is stored
as
(actualWidth / 16) - 1, so
possible block sizes are a
multiple of 16 and not more
than 256.
244 Video
Image Block V2
The Image Block v2 structure represents one block in a frame.
IMAGEBLOCKV2
Field Type Comment
DataSize UB[16] Size of the compressed
Note: UB[16] is not the same as block data that follows,
UI16; there is no byte swapping. including the ImageFormat,
ImageBlockHeader and Data
fields. If this is an interframe,
and this block has not
changed since the last
keyframe, DataSize is 0 and
the Data field is absent.
Image format
The IMAGEFORMAT byte describes the color depth and compression of the
IMAGEBLOCKV2 structure.
IMAGEFORMAT
Field Type Comment
Reserved UB[3] Must be 0
IMAGEDIFFPOSITION
Field Type Comment
RowStart UI8 Indicates the first scan line of
the block that contains the
image data.
246 Video
Image block prime position
The image block prime position is included in the IMAGEBLOCKV2 ImageBlockHeader
field if the IMAGEFORMAT structure indicates ZLIB priming is used. This structure
specifies which image is used as the priming source.
IMAGEPRIMEPOSITION
Field Type Comment
Block column Ui8 Indicates the position of the
source block.
This algorithm can be used to convert YUV color space pixel data back to RGB color space:
B = SATURATE(1.164(Y - 16) + 2.018(U - 128))
G = SATURATE(1.164(Y - 16) - 0.813(V - 128) - 0.391(U - 128))
R = SATURATE(1.164(Y - 16) + 1.596(V - 128))
At encode time, the second video stream must contain at least as many key frames as
the first video stream. Each key frame occurring in the first video stream must force a key
frame in the second video stream at encode time so that the combined video stream
stays seekable.
To decode alpha channel video streams, assume that the first video stream returns YUV-
encoded color channels for a screen pixel in the form of three channels named Y1, U1, and
V1. The second video stream returns this data as Y2, U2, and V2. The resulting alpha
premultiplied ARGB pixel values are obtained by using the following algorithm:
B = MIN(Y2,SATURATE(1.164(Y1 - 16) + 2.018(U1 - 128)))
G = MIN(Y2,SATURATE(1.164(Y1 - 16) - 0.813(V1 - 128) - 0.391(U1 - 128)))
R = MIN(Y2,SATURATE(1.164(Y1 - 16) + 1.596(V1 - 128)))
A = Y2
248 Video
VP6 FLV video packet
The VP6 FLV video packet represents a VP6 video frame within an FLV file.
VP6FLVVIDEOPACKET
Field Type Comment
HorizontalAdjustment UB[4] Number of pixels to subtract
from the total width. The
resulting width is used on the
stage, and the rightmost pixels
of the video is cropped.
VP6FLVALPHAVIDEOPACKET
Field Type Comment
HorizontalAdjustment UB[4] Number of pixels to subtract
from the total width. The
resulting width is used on the
stage, and the rightmost pixels
of the video is cropped.
VerticalAdjustment UB[4] Number of pixels to subtract
from the from the total height.
The resulting height is used on
the stage, and the rightmost
pixels of the video is cropped.
OffsetToAlpha UI24 Offset in bytes to the alpha
channel video data
VP6SWFVIDEOPACKET
Field Type Comment
Data UI8[n] Raw VP6 video stream data
VP6SWFALPHAVIDEOPACKET
Field Type Comment
OffsetToAlpha UI24 Offset in bytes to the alpha
channel video data
Data UI8[OffsetToAlpha] Raw VP6 video stream data
representing the color channels
AlphaData UI8[n] Raw VP6 video stream data
representing the alpha channel
250 Video
DefineVideoStream
DefineVideoStream defines a video character that can later be placed on the display list (see
The Display List).
DefineVideoStream
Field Type Comment
Header RECORDHEADER Tag type = 60
VideoFrame
Field Type Comment
Header RECORDHEADER Tag type = 61
252 Video
CHAPTER 15
Binary data 15
Starting with version 9, the SWF file format specification supports the inclusion of arbitrary
blobs of binary data.
DefineBinaryData
The DefineBinaryData tag permits arbitrary binary data to be embedded in a SWF file.
DefineBinaryData is a definition tag, like DefineShape and DefineSprite. It associates a blob
of binary data with a standard SWF 16-bit character ID. The character ID is entered into the
SWF file's character dictionary.
DefineBinaryData is intended to be used in conjunction with the SymbolClass tag. The
SymbolClass tag can be used to associate a DefineBinaryData tag with an AS3 class definition.
The AS3 class must be a subclass of ByteArray. When the class is instantiated, it will be
populated automatically with the contents of the binary data resource.
DefineBinaryData
Field Type Comment
Header RECORDHEADER Tag type = 87
Tag UI16 16-bit character ID
253
254 Binary data
APPENDIX A
A SWF file always begins with a header. It describes the file version, the length of the file in
bytes, the frame size in twips (twentieths of a pixel), frame rate in frames per second, and the
frame count.
The types are defined in Chapter 1, “Basic Data Types,” on page 11
Version UI8 Single byte file version (for example, 0x06 for SWF 6)
FileLength UI32 Length of entire file in bytes
FrameRate UI16 Frame delay in 8.8 fixed number of frames per second
FrameCount UI16 Total number of frames in file
255
The first three bytes are the standard signature for all SWF files. They are the ASCII values of
the characters ‘F’ (or ‘C’), ‘W’, and ‘S’ in that order. The fourth byte indicates the version of
the file.
The next four bytes represent an unsigned 32-bit integer indicating the file size. Here’s where
it starts getting tricky and machine architecture gets involved. The next four bytes are
0x4F000000 so that would imply that the file length is 1325400064 bytes, a very large
number which doesn’t make sense. What we failed to do is swap all the bytes.
In SWF files, bytes are swapped whenever reading words and dwords such that a 32-bit value
B1B2B3B4 is written as B4B3B2B1, and a 16-bit value B1B2 is written as B2B1. Single bytes
are written unchanged since there is no bit-swapping. The reason for this is the differences in
storage and retrieval between the Mac and PC processors.
Reversing the bytes we can read the four bytes correctly and see that file is 79 bytes long.
0x4F000000 ➜ 0x0000004F ➜ 79
The next nine bytes represent a data structure used in the SWF format called a Rectangle.
Here is the file description of a rectangle:
RECT
Field Type Comment
Nbits UB[5] Bits in each rect value field
0111 1000 0000 0000 0000 0101 0101 1111 0000 0000
0000 0000 0000 1111 1010 0000 0000 0000
There are five fields in a rectangle structure: Nbits, Xmin, Xmax, Ymin, Ymax. The unsigned
Nbits field occupies the first five bits of the rectangle and indicates how long the next four
signed fields are.
What if Nbit has a value of sixteen? This is exactly the size of a word so do we read the
following fields as words and swap bytes? No. Fields described by bit size are always read a
byte at a time. No swapping, just read the next n bits in that order.
000000000000000 ‹ 0 = Xmin
010101011111000 ‹ 11000 = Xmax
000000000000000 ‹ 0 = Ymin
For the header, the rectangle is used to store the file dimensions with Xmax corresponding to
the file width and Ymax corresponding to the file height, both in twips. In SWF format, a
twip is a twentieth of a pixel, so if we convert to pixels, we see that our file is 550 x 400.
Now we have looked at all of the fields of the rectangle and evaluated them, but what about
those last seven bits which are all 0s? Those bits are filled with 0s so that the structure aligns to
a byte boundary.
0000000 = padding bits
After the end of any structure, if the structure does not completely fill up its last byte, then
that last byte is filled with 0s to keep the next item byte aligned. So if the next item is a word
or dword, you can read it as such and not worry about being in the middle of a byte. In this
case, only one bit in the last byte is used so the last seven bits are filled with 0s.
Next in the header is the frame rate. It is supposed to be stored as a 16-bit integer, but the first
byte (or last depending on how you look at it) is completely ignored. So the frame rate is
12 fps.
Next is the frame count, which is also a 16-bit integer. So the frame count is 1.
257
Now we are finished with the header. After the header is a series of tagged data blocks. Here is
a description of a tag (this is simplifying somewhat; byte swapping is necessary):
RECORDHEADER (short)
Field Type Comment
TagCodeAndLength UI16 Upper 10 bits: tag type
Lower 6 bits: tag length
RECORDHEADER (long)
Field Type Comment
TagCodeAndLength UI16 Tag type and length of 0x3F
Packed together as in short header
There are two types of tags: the short and long tag header. Regardless of which case you have,
you begin by looking at the first word.
The first 10 bits of the tag are the unsigned tag type. The tag type indicates what type of data
is to follow in the body of the data block to follow. In this case, the value of the tag type is 9,
which corresponds to a SetBackgroundColor block. The last six unsigned bits of the tag
header indicate the length of the data block to follow if it is 62 bytes or less. If the length of
the data block is more than 62 bytes, then this field has all 1s and the length is indicated in
the following dword. For the tag we are looking at, the field does not have all 1s, so it does
indicate the actual length which is 3 bytes.
0000001001 = 9 = SetBackgroundColor000011 = 3 = body length
Since we know that the length of the body is 3 bytes, let’s take a look at it. A
SetBackgroundColor tag only contains the 3-byte RGB color description so we evaluate it as
such. A color is its own 3-byte data type so there is no byte swapping.
0XFFFFFF = white
0000000010 = 2 = DefineShape
111111 = 63 = body length (indicates that the body length value is in the next dword)
DefineShape
Field Type Comment
Header RECORDHEADER Tag type = 2
0111 0000 1111 1011 0100 1001 1001 0111 0000 1101 0000
1100 0111 1101 0101 0000
01110 = 14 = Nbits
259
The following table describes the SHAPEWITHSTYLE structure:
SHAPEWITHSTYLE
Field Type Comment
FillStyles FILLSTYLEARRAY Array of fill styles
LineStyles LINESTYLEARRAY Array of line styles
A fill style array itself has three fields. The first field is an 8-bit integer count which indicates
how many fill styles are in the array. This count works similar to the tag’s length field in that if
it is all 1s, you have to look at the next 16 bits to get the actual length. Here is the file
description:
FILLSTYLEARRAY
Field Type Comment
FillStyleCount UI8 Count of fill styles
In this case, the 8-bit count is equal to 0 so there is nothing to follow it.
0x00 = 0 = FillStyleCount ➜ This is the end of the fill style array because it has no
elements
A line style array is exactly the same as a fill style array except it stores line styles. Here is the
file description:
LINESTYLEARRAY
Field Type Comment
LineStyleCount UI8 Count of line styles
LINESTYLE
Field Type Comment
Width UI16 Width of line in twips
The color in this case is a 24-bit RGB, but if we were doing a DefineShape3, it would be a 32-
bit RGBA where alpha is the opacity of the color.
0x1400 ➜ 0x0014 = 20 = width = 1 pixel
0x000000 = RGB = black
261
Now for the array of shape records. The following four tables describe the four types of shape
records. Here are the file descriptions:
ENDSHAPERECORD
Field Type Comment
TypeFlag UB[1] Non-edge record flag
Always 0
EndOfShape UB[5] End of shape flag
Always 0
STYLECHANGERECORD
Field Type Comment
TypeFlag UB[1] Non-edge record flag
Always 0
263
STRAIGHTEDGERECORD
Field Type Comment
TypeFlag UB[1] This is an edge record.
Always 1.
CURVEDEDGERECORD
Field Type Comment
TypeFlag UB[1] This is an edge record.
Always 1.
0010 0101 1100 1001 1001 0010 0000 1101 0010 0001
1110 1101 0100 1000 1000 0111 0110 0101 0011 0000 0011 1011 0110
1101 1110 0001 1101 1000 1011 0100 0000 0000 0000 0000
265
The next bit indicates if it is a straight or curved edge. It is a 1, which stands for a straight
edge. The next four bits indicate the size of any delta fields which follow. The formula for the
NumBits value is 2 + whatever the value of that 4-bit field. In this case, the value of NumBits
is 13. Following the NumBits field is a 1-bit line flag. This indicates whether the line being
described is a general line or horizontal/vertical line. The value of 0 corresponds to a hor/vert
line, so the next bit is a VertLineFlag field and indicates whether the line is horizontal or
vertical. The value of the bit is 1 which corresponds to a vertical line. The next field for a
vertical line is the signed DeltaY field which is nbits = 13 bits long. The value corresponds to
116 pixels. That is the end of the shape record.
1 = 1 = edge record
1 = 1 = straight edge
1011 = 11 + 2 = 13 = NumBits
0 = 0 = hor/vert line
1 = 1 = vertical line
0100100010000 = 2320 twips = 116 pixels = DeltaY
The next three records are very similar to the last one:
1 = 1 = edge record
1 = 1 = straight edge
1011 = 11 + 2 = 13 = NumBits
0 = 0 = hor/vert line
0 = 0 = horizontal line
1010011000000 = -2880 twips (2’s complement number) = -144 pixels = DeltaX
1 = 1 = edge record
1 = 1 = straight edge
1011 = 11 + 2 = 13 = NumBits
0 = 0 = hor/vert line
1 = 1 = vertical line
1011011110000 = -2320 twips = -116 pixels = DeltaY
1 = 1 = edge record
1 = 1 = straight edge
1011 = 11 + 2 = 13 = NumBits
0 = 0 = hor/vert line
0 = 0 = horizontal line
0101101000000 = 2880 twips = 144 pixels = DeltaX
0000 0110 0000 0001 0000 0000 0000 0001 0000 0000 0000 0000
PlaceObject2
Field Type Comment
Header RECORDHEADER Tag type = 26.
PlaceFlagHasClipActions UB[1] SWF 5 or later: has clip
actions (sprite characters
only).
Otherwise: always 0.
267
PlaceObject2
Field Type Comment
PlaceFlagHasCharacter UB[1] Places a character.
PlaceFlagMove UB[1] Defines a character to be
moved.
Depth UI16 Depth of character.
The first eight bits of the body are all flags indicating what is to follow. A 1 in the sixth bit
indicates that the body has a transform matrix, and the 1 in the seventh bit indicates that the
object to be placed has a character ID.
00000110 ➜ body has a transform matrix and object has a character ID
Following the flags is a 16-bit unsigned integer which indicates the depth of the character. In
this case, the depth is 1, which makes sense since the rectangle is the only object in the file.
Since the object has a character ID, the next field in the body is the unsigned 16-bit ID. Since
the rectangle is the only object in the file, the ID of the rectangle is 1.
MATRIX
Field Type Comment
HasScale UB[1] Has scale values if equal to 1.
NScaleBits If HasScale = 1, UB[5] Bits in each scale value field.
ScaleX If HasScale = 1, FB[NScaleBits] x scale value.
ScaleY If HasScale = 1, FB[NScaleBits] y scale value.
HasRotate UB[1] Has rotate and skew values if equal
to 1.
NRotateBits If HasRotate = 1, UB[5] Bits in each rotate value field.
RotateSkew0 If HasRotate = 1, FB[NRotateBits] First rotate and skew value.
RotateSkew1 If HasRotate = 1, FB[NRotateBits] Second rotate and skew value.
NTranslateBits UB[5] Bits in each translate value field.
TranslateX SB[NTranslateBits] x translate value in twips.
TranslateY SB[NTranslateBits] y translate value in twips.
Since this shape has no transform information, the matrix is empty. All of its flag bits have
values of zero. This is not super efficient but it is valid.
Since we are done with our PlaceObject2, let’s take a look at our next tag.
269
270 SWF Uncovered: A Simple SWF File Dissected
APPENDIX B
1 ShowFrame
2 DefineShape
4 PlaceObject
5 RemoveObject
6 DefineBits
7 DefineButton
8 JPEGTables
9 SetBackgroundColor
10 DefineFont
11 DefineText
12 DoAction
13 DefineFontInfo
14 DefineSound
15 StartSound
17 DefineButtonSound
18 SoundStreamHead
19 SoundStreamBlock
20 DefineBitsLossless
21 DefineBitsJPEG2
22 DefineShape2
271
Tag value Tag name
23 DefineButtonCxform
24 Protect
26 PlaceObject2
28 RemoveObject2
32 DefineShape3
33 DefineText2
34 DefineButton2
35 DefineBitsJPEG3
36 DefineBitsLossless2
37 DefineEditText
39 DefineSprite
43 FrameLabel
45 SoundStreamHead2
46 DefineMorphShape
48 DefineFont2
56 ExportAssets
57 ImportAssets
58 EnableDebugger
59 DoInitAction
60 DefineVideoStream
61 VideoFrame
62 DefineFontInfo2
64 EnableDebugger2
65 ScriptLimits
66 SetTabIndex
69 FileAttributes
70 PlaceObject3
71 ImportAssets2
73 DefineFontAlignZones
74 CSMTextSettings
76 SymbolClass
77 Metadata
78 DefineScalingGrid
82 DoABC
83 DefineShape4
84 DefineMorphShape2
86 DefineSceneAndFrameLabelData
87 DefineBinaryData
88 DefineFontName
89 StartSound2
90 DefineBitsJPEG4
91 DefineFont4
273
274 Reverse index of tag values
APPENDIX C
0x00FF0000,
0x00003300,
0x00006600,
0x00009900,
0x0000CC00,
0x0000FF00,
0x00000033,
0x00000066,
0x00000099,
0x000000CC,
0x000000FF,
0x00333300,
0x00666600,
0x00999900,
0x00CCCC00,
0x00FFFF00,
0x00003333,
0x00006666,
275
0x00009999,
0x0000CCCC,
0x0000FFFF,
0x00330033,
0x00660066,
0x00990099,
0x00CC00CC,
0x00FF00FF,
0x00FFFF33,
0x00FFFF66,
0x00FFFF99,
0x00FFFFCC,
0x00FF33FF,
0x00FF66FF,
0x00FF99FF,
0x00FFCCFF,
0x0033FFFF,
0x0066FFFF,
0x0099FFFF,
0x00CCFFFF,
0x00CCCC33,
0x00CCCC66,
0x00CCCC99,
0x00CCCCFF,
0x00CC33CC,
0x00CC66CC,
0x00CC99CC,
0x00CCFFCC,
0x0033CCCC,
0x0066CCCC,
0x0099CCCC,
0x00FFCCCC,
0x00999933,
0x00999966,
0x009999CC,
0x009999FF,
0x00993399,
0x00996699,
0x0099CC99,
0x0099FF99,
0x00339999,
0x00669999,
0x00CC9999,
0x00FF9999,
0x00666633,
0x00336666,
0x00996666,
0x00CC6666,
0x00FF6666,
0x00333366,
0x00333399,
0x003333CC,
0x003333FF,
0x00336633,
0x00339933,
0x0033CC33,
0x0033FF33,
0x00663333,
0x00993333,
0x00CC3333,
0x00FF3333,
0x00003366,
0x00336600,
0x00660033,
0x00006633,
0x00330066,
0x00663300,
0x00336699,
0x00669933,
0x00993366,
0x00339966,
0x00663399,
0x00996633,
0x006699CC,
0x0099CC66,
0x00CC6699,
0x0066CC99,
0x009966CC,
0x00CC9966,
0x0099CCFF,
0x00CCFF99,
0x00FF99CC,
0x0099FFCC,
0x00CC99FF,
277
0x00FFCC99,
0x00111111,
0x00222222,
0x00444444,
0x00555555,
0x00AAAAAA,
0x00BBBBBB,
0x00DDDDDD,
0x00EEEEEE
};