• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright (C) 2007 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #define  TRACE_TAG   TRACE_ADB
18 
19 #include <stdio.h>
20 #include <stdlib.h>
21 #include <ctype.h>
22 #include <stdarg.h>
23 #include <errno.h>
24 #include <string.h>
25 #include <time.h>
26 #include <sys/time.h>
27 
28 #include "sysdeps.h"
29 #include "adb.h"
30 
31 #if !ADB_HOST
32 #include <private/android_filesystem_config.h>
33 #include <linux/capability.h>
34 #include <linux/prctl.h>
35 #else
36 #include "usb_vendors.h"
37 #endif
38 
39 #if ADB_TRACE
40 ADB_MUTEX_DEFINE( D_lock );
41 #endif
42 
43 int HOST = 0;
44 
45 static const char *adb_device_banner = "device";
46 
fatal(const char * fmt,...)47 void fatal(const char *fmt, ...)
48 {
49     va_list ap;
50     va_start(ap, fmt);
51     fprintf(stderr, "error: ");
52     vfprintf(stderr, fmt, ap);
53     fprintf(stderr, "\n");
54     va_end(ap);
55     exit(-1);
56 }
57 
fatal_errno(const char * fmt,...)58 void fatal_errno(const char *fmt, ...)
59 {
60     va_list ap;
61     va_start(ap, fmt);
62     fprintf(stderr, "error: %s: ", strerror(errno));
63     vfprintf(stderr, fmt, ap);
64     fprintf(stderr, "\n");
65     va_end(ap);
66     exit(-1);
67 }
68 
69 int   adb_trace_mask;
70 
71 /* read a comma/space/colum/semi-column separated list of tags
72  * from the ADB_TRACE environment variable and build the trace
73  * mask from it. note that '1' and 'all' are special cases to
74  * enable all tracing
75  */
adb_trace_init(void)76 void  adb_trace_init(void)
77 {
78     const char*  p = getenv("ADB_TRACE");
79     const char*  q;
80 
81     static const struct {
82         const char*  tag;
83         int           flag;
84     } tags[] = {
85         { "1", 0 },
86         { "all", 0 },
87         { "adb", TRACE_ADB },
88         { "sockets", TRACE_SOCKETS },
89         { "packets", TRACE_PACKETS },
90         { "rwx", TRACE_RWX },
91         { "usb", TRACE_USB },
92         { "sync", TRACE_SYNC },
93         { "sysdeps", TRACE_SYSDEPS },
94         { "transport", TRACE_TRANSPORT },
95         { "jdwp", TRACE_JDWP },
96         { "services", TRACE_SERVICES },
97         { NULL, 0 }
98     };
99 
100     if (p == NULL)
101             return;
102 
103     /* use a comma/column/semi-colum/space separated list */
104     while (*p) {
105         int  len, tagn;
106 
107         q = strpbrk(p, " ,:;");
108         if (q == NULL) {
109             q = p + strlen(p);
110         }
111         len = q - p;
112 
113         for (tagn = 0; tags[tagn].tag != NULL; tagn++)
114         {
115             int  taglen = strlen(tags[tagn].tag);
116 
117             if (len == taglen && !memcmp(tags[tagn].tag, p, len) )
118             {
119                 int  flag = tags[tagn].flag;
120                 if (flag == 0) {
121                     adb_trace_mask = ~0;
122                     return;
123                 }
124                 adb_trace_mask |= (1 << flag);
125                 break;
126             }
127         }
128         p = q;
129         if (*p)
130             p++;
131     }
132 }
133 
134 
get_apacket(void)135 apacket *get_apacket(void)
136 {
137     apacket *p = malloc(sizeof(apacket));
138     if(p == 0) fatal("failed to allocate an apacket");
139     memset(p, 0, sizeof(apacket) - MAX_PAYLOAD);
140     return p;
141 }
142 
put_apacket(apacket * p)143 void put_apacket(apacket *p)
144 {
145     free(p);
146 }
147 
handle_online(void)148 void handle_online(void)
149 {
150     D("adb: online\n");
151 }
152 
handle_offline(atransport * t)153 void handle_offline(atransport *t)
154 {
155     D("adb: offline\n");
156     //Close the associated usb
157     run_transport_disconnects(t);
158 }
159 
160 #if TRACE_PACKETS
161 #define DUMPMAX 32
print_packet(const char * label,apacket * p)162 void print_packet(const char *label, apacket *p)
163 {
164     char *tag;
165     char *x;
166     unsigned count;
167 
168     switch(p->msg.command){
169     case A_SYNC: tag = "SYNC"; break;
170     case A_CNXN: tag = "CNXN" ; break;
171     case A_OPEN: tag = "OPEN"; break;
172     case A_OKAY: tag = "OKAY"; break;
173     case A_CLSE: tag = "CLSE"; break;
174     case A_WRTE: tag = "WRTE"; break;
175     default: tag = "????"; break;
176     }
177 
178     fprintf(stderr, "%s: %s %08x %08x %04x \"",
179             label, tag, p->msg.arg0, p->msg.arg1, p->msg.data_length);
180     count = p->msg.data_length;
181     x = (char*) p->data;
182     if(count > DUMPMAX) {
183         count = DUMPMAX;
184         tag = "\n";
185     } else {
186         tag = "\"\n";
187     }
188     while(count-- > 0){
189         if((*x >= ' ') && (*x < 127)) {
190             fputc(*x, stderr);
191         } else {
192             fputc('.', stderr);
193         }
194         x++;
195     }
196     fprintf(stderr, tag);
197 }
198 #endif
199 
send_ready(unsigned local,unsigned remote,atransport * t)200 static void send_ready(unsigned local, unsigned remote, atransport *t)
201 {
202     D("Calling send_ready \n");
203     apacket *p = get_apacket();
204     p->msg.command = A_OKAY;
205     p->msg.arg0 = local;
206     p->msg.arg1 = remote;
207     send_packet(p, t);
208 }
209 
send_close(unsigned local,unsigned remote,atransport * t)210 static void send_close(unsigned local, unsigned remote, atransport *t)
211 {
212     D("Calling send_close \n");
213     apacket *p = get_apacket();
214     p->msg.command = A_CLSE;
215     p->msg.arg0 = local;
216     p->msg.arg1 = remote;
217     send_packet(p, t);
218 }
219 
send_connect(atransport * t)220 static void send_connect(atransport *t)
221 {
222     D("Calling send_connect \n");
223     apacket *cp = get_apacket();
224     cp->msg.command = A_CNXN;
225     cp->msg.arg0 = A_VERSION;
226     cp->msg.arg1 = MAX_PAYLOAD;
227     snprintf((char*) cp->data, sizeof cp->data, "%s::",
228             HOST ? "host" : adb_device_banner);
229     cp->msg.data_length = strlen((char*) cp->data) + 1;
230     send_packet(cp, t);
231 #if ADB_HOST
232         /* XXX why sleep here? */
233     // allow the device some time to respond to the connect message
234     adb_sleep_ms(1000);
235 #endif
236 }
237 
connection_state_name(atransport * t)238 static char *connection_state_name(atransport *t)
239 {
240     if (t == NULL) {
241         return "unknown";
242     }
243 
244     switch(t->connection_state) {
245     case CS_BOOTLOADER:
246         return "bootloader";
247     case CS_DEVICE:
248         return "device";
249     case CS_OFFLINE:
250         return "offline";
251     default:
252         return "unknown";
253     }
254 }
255 
parse_banner(char * banner,atransport * t)256 void parse_banner(char *banner, atransport *t)
257 {
258     char *type, *product, *end;
259 
260     D("parse_banner: %s\n", banner);
261     type = banner;
262     product = strchr(type, ':');
263     if(product) {
264         *product++ = 0;
265     } else {
266         product = "";
267     }
268 
269         /* remove trailing ':' */
270     end = strchr(product, ':');
271     if(end) *end = 0;
272 
273         /* save product name in device structure */
274     if (t->product == NULL) {
275         t->product = strdup(product);
276     } else if (strcmp(product, t->product) != 0) {
277         free(t->product);
278         t->product = strdup(product);
279     }
280 
281     if(!strcmp(type, "bootloader")){
282         D("setting connection_state to CS_BOOTLOADER\n");
283         t->connection_state = CS_BOOTLOADER;
284         update_transports();
285         return;
286     }
287 
288     if(!strcmp(type, "device")) {
289         D("setting connection_state to CS_DEVICE\n");
290         t->connection_state = CS_DEVICE;
291         update_transports();
292         return;
293     }
294 
295     if(!strcmp(type, "recovery")) {
296         D("setting connection_state to CS_RECOVERY\n");
297         t->connection_state = CS_RECOVERY;
298         update_transports();
299         return;
300     }
301 
302     t->connection_state = CS_HOST;
303 }
304 
handle_packet(apacket * p,atransport * t)305 void handle_packet(apacket *p, atransport *t)
306 {
307     asocket *s;
308 
309     D("handle_packet() %c%c%c%c\n", ((char*) (&(p->msg.command)))[0],
310             ((char*) (&(p->msg.command)))[1],
311             ((char*) (&(p->msg.command)))[2],
312             ((char*) (&(p->msg.command)))[3]);
313     print_packet("recv", p);
314 
315     switch(p->msg.command){
316     case A_SYNC:
317         if(p->msg.arg0){
318             send_packet(p, t);
319             if(HOST) send_connect(t);
320         } else {
321             t->connection_state = CS_OFFLINE;
322             handle_offline(t);
323             send_packet(p, t);
324         }
325         return;
326 
327     case A_CNXN: /* CONNECT(version, maxdata, "system-id-string") */
328             /* XXX verify version, etc */
329         if(t->connection_state != CS_OFFLINE) {
330             t->connection_state = CS_OFFLINE;
331             handle_offline(t);
332         }
333         parse_banner((char*) p->data, t);
334         handle_online();
335         if(!HOST) send_connect(t);
336         break;
337 
338     case A_OPEN: /* OPEN(local-id, 0, "destination") */
339         if(t->connection_state != CS_OFFLINE) {
340             char *name = (char*) p->data;
341             name[p->msg.data_length > 0 ? p->msg.data_length - 1 : 0] = 0;
342             s = create_local_service_socket(name);
343             if(s == 0) {
344                 send_close(0, p->msg.arg0, t);
345             } else {
346                 s->peer = create_remote_socket(p->msg.arg0, t);
347                 s->peer->peer = s;
348                 send_ready(s->id, s->peer->id, t);
349                 s->ready(s);
350             }
351         }
352         break;
353 
354     case A_OKAY: /* READY(local-id, remote-id, "") */
355         if(t->connection_state != CS_OFFLINE) {
356             if((s = find_local_socket(p->msg.arg1))) {
357                 if(s->peer == 0) {
358                     s->peer = create_remote_socket(p->msg.arg0, t);
359                     s->peer->peer = s;
360                 }
361                 s->ready(s);
362             }
363         }
364         break;
365 
366     case A_CLSE: /* CLOSE(local-id, remote-id, "") */
367         if(t->connection_state != CS_OFFLINE) {
368             if((s = find_local_socket(p->msg.arg1))) {
369                 s->close(s);
370             }
371         }
372         break;
373 
374     case A_WRTE:
375         if(t->connection_state != CS_OFFLINE) {
376             if((s = find_local_socket(p->msg.arg1))) {
377                 unsigned rid = p->msg.arg0;
378                 p->len = p->msg.data_length;
379 
380                 if(s->enqueue(s, p) == 0) {
381                     D("Enqueue the socket\n");
382                     send_ready(s->id, rid, t);
383                 }
384                 return;
385             }
386         }
387         break;
388 
389     default:
390         printf("handle_packet: what is %08x?!\n", p->msg.command);
391     }
392 
393     put_apacket(p);
394 }
395 
396 alistener listener_list = {
397     .next = &listener_list,
398     .prev = &listener_list,
399 };
400 
ss_listener_event_func(int _fd,unsigned ev,void * _l)401 static void ss_listener_event_func(int _fd, unsigned ev, void *_l)
402 {
403     asocket *s;
404 
405     if(ev & FDE_READ) {
406         struct sockaddr addr;
407         socklen_t alen;
408         int fd;
409 
410         alen = sizeof(addr);
411         fd = adb_socket_accept(_fd, &addr, &alen);
412         if(fd < 0) return;
413 
414         adb_socket_setbufsize(fd, CHUNK_SIZE);
415 
416         s = create_local_socket(fd);
417         if(s) {
418             connect_to_smartsocket(s);
419             return;
420         }
421 
422         adb_close(fd);
423     }
424 }
425 
listener_event_func(int _fd,unsigned ev,void * _l)426 static void listener_event_func(int _fd, unsigned ev, void *_l)
427 {
428     alistener *l = _l;
429     asocket *s;
430 
431     if(ev & FDE_READ) {
432         struct sockaddr addr;
433         socklen_t alen;
434         int fd;
435 
436         alen = sizeof(addr);
437         fd = adb_socket_accept(_fd, &addr, &alen);
438         if(fd < 0) return;
439 
440         s = create_local_socket(fd);
441         if(s) {
442             s->transport = l->transport;
443             connect_to_remote(s, l->connect_to);
444             return;
445         }
446 
447         adb_close(fd);
448     }
449 }
450 
free_listener(alistener * l)451 static void  free_listener(alistener*  l)
452 {
453     if (l->next) {
454         l->next->prev = l->prev;
455         l->prev->next = l->next;
456         l->next = l->prev = l;
457     }
458 
459     // closes the corresponding fd
460     fdevent_remove(&l->fde);
461 
462     if (l->local_name)
463         free((char*)l->local_name);
464 
465     if (l->connect_to)
466         free((char*)l->connect_to);
467 
468     if (l->transport) {
469         remove_transport_disconnect(l->transport, &l->disconnect);
470     }
471     free(l);
472 }
473 
listener_disconnect(void * _l,atransport * t)474 static void listener_disconnect(void*  _l, atransport*  t)
475 {
476     alistener*  l = _l;
477 
478     free_listener(l);
479 }
480 
local_name_to_fd(const char * name)481 int local_name_to_fd(const char *name)
482 {
483     int port;
484 
485     if(!strncmp("tcp:", name, 4)){
486         int  ret;
487         port = atoi(name + 4);
488         ret = socket_loopback_server(port, SOCK_STREAM);
489         return ret;
490     }
491 #ifndef HAVE_WIN32_IPC  /* no Unix-domain sockets on Win32 */
492     // It's non-sensical to support the "reserved" space on the adb host side
493     if(!strncmp(name, "local:", 6)) {
494         return socket_local_server(name + 6,
495                 ANDROID_SOCKET_NAMESPACE_ABSTRACT, SOCK_STREAM);
496     } else if(!strncmp(name, "localabstract:", 14)) {
497         return socket_local_server(name + 14,
498                 ANDROID_SOCKET_NAMESPACE_ABSTRACT, SOCK_STREAM);
499     } else if(!strncmp(name, "localfilesystem:", 16)) {
500         return socket_local_server(name + 16,
501                 ANDROID_SOCKET_NAMESPACE_FILESYSTEM, SOCK_STREAM);
502     }
503 
504 #endif
505     printf("unknown local portname '%s'\n", name);
506     return -1;
507 }
508 
remove_listener(const char * local_name,const char * connect_to,atransport * transport)509 static int remove_listener(const char *local_name, const char *connect_to, atransport* transport)
510 {
511     alistener *l;
512 
513     for (l = listener_list.next; l != &listener_list; l = l->next) {
514         if (!strcmp(local_name, l->local_name) &&
515             !strcmp(connect_to, l->connect_to) &&
516             l->transport && l->transport == transport) {
517 
518             listener_disconnect(l, transport);
519             return 0;
520         }
521     }
522 
523     return -1;
524 }
525 
install_listener(const char * local_name,const char * connect_to,atransport * transport)526 static int install_listener(const char *local_name, const char *connect_to, atransport* transport)
527 {
528     alistener *l;
529 
530     //printf("install_listener('%s','%s')\n", local_name, connect_to);
531 
532     for(l = listener_list.next; l != &listener_list; l = l->next){
533         if(strcmp(local_name, l->local_name) == 0) {
534             char *cto;
535 
536                 /* can't repurpose a smartsocket */
537             if(l->connect_to[0] == '*') {
538                 return -1;
539             }
540 
541             cto = strdup(connect_to);
542             if(cto == 0) {
543                 return -1;
544             }
545 
546             //printf("rebinding '%s' to '%s'\n", local_name, connect_to);
547             free((void*) l->connect_to);
548             l->connect_to = cto;
549             if (l->transport != transport) {
550                 remove_transport_disconnect(l->transport, &l->disconnect);
551                 l->transport = transport;
552                 add_transport_disconnect(l->transport, &l->disconnect);
553             }
554             return 0;
555         }
556     }
557 
558     if((l = calloc(1, sizeof(alistener))) == 0) goto nomem;
559     if((l->local_name = strdup(local_name)) == 0) goto nomem;
560     if((l->connect_to = strdup(connect_to)) == 0) goto nomem;
561 
562 
563     l->fd = local_name_to_fd(local_name);
564     if(l->fd < 0) {
565         free((void*) l->local_name);
566         free((void*) l->connect_to);
567         free(l);
568         printf("cannot bind '%s'\n", local_name);
569         return -2;
570     }
571 
572     close_on_exec(l->fd);
573     if(!strcmp(l->connect_to, "*smartsocket*")) {
574         fdevent_install(&l->fde, l->fd, ss_listener_event_func, l);
575     } else {
576         fdevent_install(&l->fde, l->fd, listener_event_func, l);
577     }
578     fdevent_set(&l->fde, FDE_READ);
579 
580     l->next = &listener_list;
581     l->prev = listener_list.prev;
582     l->next->prev = l;
583     l->prev->next = l;
584     l->transport = transport;
585 
586     if (transport) {
587         l->disconnect.opaque = l;
588         l->disconnect.func   = listener_disconnect;
589         add_transport_disconnect(transport, &l->disconnect);
590     }
591     return 0;
592 
593 nomem:
594     fatal("cannot allocate listener");
595     return 0;
596 }
597 
598 #ifdef HAVE_WIN32_PROC
ctrlc_handler(DWORD type)599 static BOOL WINAPI ctrlc_handler(DWORD type)
600 {
601     exit(STATUS_CONTROL_C_EXIT);
602     return TRUE;
603 }
604 #endif
605 
adb_cleanup(void)606 static void adb_cleanup(void)
607 {
608     usb_cleanup();
609 }
610 
start_logging(void)611 void start_logging(void)
612 {
613 #ifdef HAVE_WIN32_PROC
614     char    temp[ MAX_PATH ];
615     FILE*   fnul;
616     FILE*   flog;
617 
618     GetTempPath( sizeof(temp) - 8, temp );
619     strcat( temp, "adb.log" );
620 
621     /* Win32 specific redirections */
622     fnul = fopen( "NUL", "rt" );
623     if (fnul != NULL)
624         stdin[0] = fnul[0];
625 
626     flog = fopen( temp, "at" );
627     if (flog == NULL)
628         flog = fnul;
629 
630     setvbuf( flog, NULL, _IONBF, 0 );
631 
632     stdout[0] = flog[0];
633     stderr[0] = flog[0];
634     fprintf(stderr,"--- adb starting (pid %d) ---\n", getpid());
635 #else
636     int fd;
637 
638     fd = unix_open("/dev/null", O_RDONLY);
639     dup2(fd, 0);
640     adb_close(fd);
641 
642     fd = unix_open("/tmp/adb.log", O_WRONLY | O_CREAT | O_APPEND, 0640);
643     if(fd < 0) {
644         fd = unix_open("/dev/null", O_WRONLY);
645     }
646     dup2(fd, 1);
647     dup2(fd, 2);
648     adb_close(fd);
649     fprintf(stderr,"--- adb starting (pid %d) ---\n", getpid());
650 #endif
651 }
652 
653 #if !ADB_HOST
start_device_log(void)654 void start_device_log(void)
655 {
656     int fd;
657     char    path[PATH_MAX];
658     struct tm now;
659     time_t t;
660     char value[PROPERTY_VALUE_MAX];
661 
662     // read the trace mask from persistent property persist.adb.trace_mask
663     // give up if the property is not set or cannot be parsed
664     property_get("persist.adb.trace_mask", value, "");
665     if (sscanf(value, "%x", &adb_trace_mask) != 1)
666         return;
667 
668     adb_mkdir("/data/adb", 0775);
669     tzset();
670     time(&t);
671     localtime_r(&t, &now);
672     strftime(path, sizeof(path),
673                 "/data/adb/adb-%Y-%m-%d-%H-%M-%S.txt",
674                 &now);
675     fd = unix_open(path, O_WRONLY | O_CREAT | O_TRUNC, 0640);
676     if (fd < 0)
677         return;
678 
679     // redirect stdout and stderr to the log file
680     dup2(fd, 1);
681     dup2(fd, 2);
682     fprintf(stderr,"--- adb starting (pid %d) ---\n", getpid());
683     adb_close(fd);
684 
685     fd = unix_open("/dev/null", O_RDONLY);
686     dup2(fd, 0);
687     adb_close(fd);
688 }
689 #endif
690 
691 #if ADB_HOST
launch_server(int server_port)692 int launch_server(int server_port)
693 {
694 #ifdef HAVE_WIN32_PROC
695     /* we need to start the server in the background                    */
696     /* we create a PIPE that will be used to wait for the server's "OK" */
697     /* message since the pipe handles must be inheritable, we use a     */
698     /* security attribute                                               */
699     HANDLE                pipe_read, pipe_write;
700     SECURITY_ATTRIBUTES   sa;
701     STARTUPINFO           startup;
702     PROCESS_INFORMATION   pinfo;
703     char                  program_path[ MAX_PATH ];
704     int                   ret;
705 
706     sa.nLength = sizeof(sa);
707     sa.lpSecurityDescriptor = NULL;
708     sa.bInheritHandle = TRUE;
709 
710     /* create pipe, and ensure its read handle isn't inheritable */
711     ret = CreatePipe( &pipe_read, &pipe_write, &sa, 0 );
712     if (!ret) {
713         fprintf(stderr, "CreatePipe() failure, error %ld\n", GetLastError() );
714         return -1;
715     }
716 
717     SetHandleInformation( pipe_read, HANDLE_FLAG_INHERIT, 0 );
718 
719     ZeroMemory( &startup, sizeof(startup) );
720     startup.cb = sizeof(startup);
721     startup.hStdInput  = GetStdHandle( STD_INPUT_HANDLE );
722     startup.hStdOutput = pipe_write;
723     startup.hStdError  = GetStdHandle( STD_ERROR_HANDLE );
724     startup.dwFlags    = STARTF_USESTDHANDLES;
725 
726     ZeroMemory( &pinfo, sizeof(pinfo) );
727 
728     /* get path of current program */
729     GetModuleFileName( NULL, program_path, sizeof(program_path) );
730 
731     ret = CreateProcess(
732             program_path,                              /* program path  */
733             "adb fork-server server",
734                                     /* the fork-server argument will set the
735                                        debug = 2 in the child           */
736             NULL,                   /* process handle is not inheritable */
737             NULL,                    /* thread handle is not inheritable */
738             TRUE,                          /* yes, inherit some handles */
739             DETACHED_PROCESS, /* the new process doesn't have a console */
740             NULL,                     /* use parent's environment block */
741             NULL,                    /* use parent's starting directory */
742             &startup,                 /* startup info, i.e. std handles */
743             &pinfo );
744 
745     CloseHandle( pipe_write );
746 
747     if (!ret) {
748         fprintf(stderr, "CreateProcess failure, error %ld\n", GetLastError() );
749         CloseHandle( pipe_read );
750         return -1;
751     }
752 
753     CloseHandle( pinfo.hProcess );
754     CloseHandle( pinfo.hThread );
755 
756     /* wait for the "OK\n" message */
757     {
758         char  temp[3];
759         DWORD  count;
760 
761         ret = ReadFile( pipe_read, temp, 3, &count, NULL );
762         CloseHandle( pipe_read );
763         if ( !ret ) {
764             fprintf(stderr, "could not read ok from ADB Server, error = %ld\n", GetLastError() );
765             return -1;
766         }
767         if (count != 3 || temp[0] != 'O' || temp[1] != 'K' || temp[2] != '\n') {
768             fprintf(stderr, "ADB server didn't ACK\n" );
769             return -1;
770         }
771     }
772 #elif defined(HAVE_FORKEXEC)
773     char    path[PATH_MAX];
774     int     fd[2];
775 
776     // set up a pipe so the child can tell us when it is ready.
777     // fd[0] will be parent's end, and fd[1] will get mapped to stderr in the child.
778     if (pipe(fd)) {
779         fprintf(stderr, "pipe failed in launch_server, errno: %d\n", errno);
780         return -1;
781     }
782     get_my_path(path, PATH_MAX);
783     pid_t pid = fork();
784     if(pid < 0) return -1;
785 
786     if (pid == 0) {
787         // child side of the fork
788 
789         // redirect stderr to the pipe
790         // we use stderr instead of stdout due to stdout's buffering behavior.
791         adb_close(fd[0]);
792         dup2(fd[1], STDERR_FILENO);
793         adb_close(fd[1]);
794 
795         // child process
796         int result = execl(path, "adb", "fork-server", "server", NULL);
797         // this should not return
798         fprintf(stderr, "OOPS! execl returned %d, errno: %d\n", result, errno);
799     } else  {
800         // parent side of the fork
801 
802         char  temp[3];
803 
804         temp[0] = 'A'; temp[1] = 'B'; temp[2] = 'C';
805         // wait for the "OK\n" message
806         adb_close(fd[1]);
807         int ret = adb_read(fd[0], temp, 3);
808         int saved_errno = errno;
809         adb_close(fd[0]);
810         if (ret < 0) {
811             fprintf(stderr, "could not read ok from ADB Server, errno = %d\n", saved_errno);
812             return -1;
813         }
814         if (ret != 3 || temp[0] != 'O' || temp[1] != 'K' || temp[2] != '\n') {
815             fprintf(stderr, "ADB server didn't ACK\n" );
816             return -1;
817         }
818 
819         setsid();
820     }
821 #else
822 #error "cannot implement background server start on this platform"
823 #endif
824     return 0;
825 }
826 #endif
827 
828 /* Constructs a local name of form tcp:port.
829  * target_str points to the target string, it's content will be overwritten.
830  * target_size is the capacity of the target string.
831  * server_port is the port number to use for the local name.
832  */
build_local_name(char * target_str,size_t target_size,int server_port)833 void build_local_name(char* target_str, size_t target_size, int server_port)
834 {
835   snprintf(target_str, target_size, "tcp:%d", server_port);
836 }
837 
adb_main(int is_daemon,int server_port)838 int adb_main(int is_daemon, int server_port)
839 {
840 #if !ADB_HOST
841     int secure = 0;
842     int port;
843     char value[PROPERTY_VALUE_MAX];
844 #endif
845 
846     atexit(adb_cleanup);
847 #ifdef HAVE_WIN32_PROC
848     SetConsoleCtrlHandler( ctrlc_handler, TRUE );
849 #elif defined(HAVE_FORKEXEC)
850     // No SIGCHLD. Let the service subproc handle its children.
851     signal(SIGPIPE, SIG_IGN);
852 #endif
853 
854     init_transport_registration();
855 
856 
857 #if ADB_HOST
858     HOST = 1;
859     usb_vendors_init();
860     usb_init();
861     local_init(DEFAULT_ADB_LOCAL_TRANSPORT_PORT);
862 
863     char local_name[30];
864     build_local_name(local_name, sizeof(local_name), server_port);
865     if(install_listener(local_name, "*smartsocket*", NULL)) {
866         exit(1);
867     }
868 #else
869     /* run adbd in secure mode if ro.secure is set and
870     ** we are not in the emulator
871     */
872     property_get("ro.kernel.qemu", value, "");
873     if (strcmp(value, "1") != 0) {
874         property_get("ro.secure", value, "1");
875         if (strcmp(value, "1") == 0) {
876             // don't run as root if ro.secure is set...
877             secure = 1;
878 
879             // ... except we allow running as root in userdebug builds if the
880             // service.adb.root property has been set by the "adb root" command
881             property_get("ro.debuggable", value, "");
882             if (strcmp(value, "1") == 0) {
883                 property_get("service.adb.root", value, "");
884                 if (strcmp(value, "1") == 0) {
885                     secure = 0;
886                 }
887             }
888         }
889     }
890 
891     /* don't listen on a port (default 5037) if running in secure mode */
892     /* don't run as root if we are running in secure mode */
893     if (secure) {
894         struct __user_cap_header_struct header;
895         struct __user_cap_data_struct cap;
896 
897         if (prctl(PR_SET_KEEPCAPS, 1, 0, 0, 0) != 0) {
898             exit(1);
899         }
900 
901         /* add extra groups:
902         ** AID_ADB to access the USB driver
903         ** AID_LOG to read system logs (adb logcat)
904         ** AID_INPUT to diagnose input issues (getevent)
905         ** AID_INET to diagnose network issues (netcfg, ping)
906         ** AID_GRAPHICS to access the frame buffer
907         ** AID_NET_BT and AID_NET_BT_ADMIN to diagnose bluetooth (hcidump)
908         ** AID_SDCARD_RW to allow writing to the SD card
909         ** AID_MOUNT to allow unmounting the SD card before rebooting
910         */
911         gid_t groups[] = { AID_ADB, AID_LOG, AID_INPUT, AID_INET, AID_GRAPHICS,
912                            AID_NET_BT, AID_NET_BT_ADMIN, AID_SDCARD_RW, AID_MOUNT };
913         if (setgroups(sizeof(groups)/sizeof(groups[0]), groups) != 0) {
914             exit(1);
915         }
916 
917         /* then switch user and group to "shell" */
918         if (setgid(AID_SHELL) != 0) {
919             exit(1);
920         }
921         if (setuid(AID_SHELL) != 0) {
922             exit(1);
923         }
924 
925         /* set CAP_SYS_BOOT capability, so "adb reboot" will succeed */
926         header.version = _LINUX_CAPABILITY_VERSION;
927         header.pid = 0;
928         cap.effective = cap.permitted = (1 << CAP_SYS_BOOT);
929         cap.inheritable = 0;
930         capset(&header, &cap);
931 
932         D("Local port disabled\n");
933     } else {
934         char local_name[30];
935         build_local_name(local_name, sizeof(local_name), server_port);
936         if(install_listener(local_name, "*smartsocket*", NULL)) {
937             exit(1);
938         }
939     }
940 
941         /* for the device, start the usb transport if the
942         ** android usb device exists and the "service.adb.tcp.port" and
943         ** "persist.adb.tcp.port" properties are not set.
944         ** Otherwise start the network transport.
945         */
946     property_get("service.adb.tcp.port", value, "");
947     if (!value[0])
948         property_get("persist.adb.tcp.port", value, "");
949     if (sscanf(value, "%d", &port) == 1 && port > 0) {
950         // listen on TCP port specified by service.adb.tcp.port property
951         local_init(port);
952     } else if (access("/dev/android_adb", F_OK) == 0) {
953         // listen on USB
954         usb_init();
955     } else {
956         // listen on default port
957         local_init(DEFAULT_ADB_LOCAL_TRANSPORT_PORT);
958     }
959     D("adb_main(): pre init_jdwp()\n");
960     init_jdwp();
961     D("adb_main(): post init_jdwp()\n");
962 #endif
963 
964     if (is_daemon)
965     {
966         // inform our parent that we are up and running.
967 #ifdef HAVE_WIN32_PROC
968         DWORD  count;
969         WriteFile( GetStdHandle( STD_OUTPUT_HANDLE ), "OK\n", 3, &count, NULL );
970 #elif defined(HAVE_FORKEXEC)
971         fprintf(stderr, "OK\n");
972 #endif
973         start_logging();
974     }
975     D("Event loop starting\n");
976 
977     fdevent_loop();
978 
979     usb_cleanup();
980 
981     return 0;
982 }
983 
984 #if ADB_HOST
connect_device(char * host,char * buffer,int buffer_size)985 void connect_device(char* host, char* buffer, int buffer_size)
986 {
987     int port, fd;
988     char* portstr = strchr(host, ':');
989     char hostbuf[100];
990     char serial[100];
991 
992     strncpy(hostbuf, host, sizeof(hostbuf) - 1);
993     if (portstr) {
994         if (portstr - host >= sizeof(hostbuf)) {
995             snprintf(buffer, buffer_size, "bad host name %s", host);
996             return;
997         }
998         // zero terminate the host at the point we found the colon
999         hostbuf[portstr - host] = 0;
1000         if (sscanf(portstr + 1, "%d", &port) == 0) {
1001             snprintf(buffer, buffer_size, "bad port number %s", portstr);
1002             return;
1003         }
1004     } else {
1005         port = DEFAULT_ADB_LOCAL_TRANSPORT_PORT;
1006     }
1007 
1008     snprintf(serial, sizeof(serial), "%s:%d", hostbuf, port);
1009     if (find_transport(serial)) {
1010         snprintf(buffer, buffer_size, "already connected to %s", serial);
1011         return;
1012     }
1013 
1014     fd = socket_network_client(hostbuf, port, SOCK_STREAM);
1015     if (fd < 0) {
1016         snprintf(buffer, buffer_size, "unable to connect to %s:%d", host, port);
1017         return;
1018     }
1019 
1020     D("client: connected on remote on fd %d\n", fd);
1021     close_on_exec(fd);
1022     disable_tcp_nagle(fd);
1023     register_socket_transport(fd, serial, port, 0);
1024     snprintf(buffer, buffer_size, "connected to %s", serial);
1025 }
1026 
connect_emulator(char * port_spec,char * buffer,int buffer_size)1027 void connect_emulator(char* port_spec, char* buffer, int buffer_size)
1028 {
1029     char* port_separator = strchr(port_spec, ',');
1030     if (!port_separator) {
1031         snprintf(buffer, buffer_size,
1032                 "unable to parse '%s' as <console port>,<adb port>",
1033                 port_spec);
1034         return;
1035     }
1036 
1037     // Zero-terminate console port and make port_separator point to 2nd port.
1038     *port_separator++ = 0;
1039     int console_port = strtol(port_spec, NULL, 0);
1040     int adb_port = strtol(port_separator, NULL, 0);
1041     if (!(console_port > 0 && adb_port > 0)) {
1042         *(port_separator - 1) = ',';
1043         snprintf(buffer, buffer_size,
1044                 "Invalid port numbers: Expected positive numbers, got '%s'",
1045                 port_spec);
1046         return;
1047     }
1048 
1049     /* Check if the emulator is already known.
1050      * Note: There's a small but harmless race condition here: An emulator not
1051      * present just yet could be registered by another invocation right
1052      * after doing this check here. However, local_connect protects
1053      * against double-registration too. From here, a better error message
1054      * can be produced. In the case of the race condition, the very specific
1055      * error message won't be shown, but the data doesn't get corrupted. */
1056     atransport* known_emulator = find_emulator_transport_by_adb_port(adb_port);
1057     if (known_emulator != NULL) {
1058         snprintf(buffer, buffer_size,
1059                 "Emulator on port %d already registered.", adb_port);
1060         return;
1061     }
1062 
1063     /* Check if more emulators can be registered. Similar unproblematic
1064      * race condition as above. */
1065     int candidate_slot = get_available_local_transport_index();
1066     if (candidate_slot < 0) {
1067         snprintf(buffer, buffer_size, "Cannot accept more emulators.");
1068         return;
1069     }
1070 
1071     /* Preconditions met, try to connect to the emulator. */
1072     if (!local_connect_arbitrary_ports(console_port, adb_port)) {
1073         snprintf(buffer, buffer_size,
1074                 "Connected to emulator on ports %d,%d", console_port, adb_port);
1075     } else {
1076         snprintf(buffer, buffer_size,
1077                 "Could not connect to emulator on ports %d,%d",
1078                 console_port, adb_port);
1079     }
1080 }
1081 #endif
1082 
handle_host_request(char * service,transport_type ttype,char * serial,int reply_fd,asocket * s)1083 int handle_host_request(char *service, transport_type ttype, char* serial, int reply_fd, asocket *s)
1084 {
1085     atransport *transport = NULL;
1086     char buf[4096];
1087 
1088     if(!strcmp(service, "kill")) {
1089         fprintf(stderr,"adb server killed by remote request\n");
1090         fflush(stdout);
1091         adb_write(reply_fd, "OKAY", 4);
1092         usb_cleanup();
1093         exit(0);
1094     }
1095 
1096 #if ADB_HOST
1097     // "transport:" is used for switching transport with a specified serial number
1098     // "transport-usb:" is used for switching transport to the only USB transport
1099     // "transport-local:" is used for switching transport to the only local transport
1100     // "transport-any:" is used for switching transport to the only transport
1101     if (!strncmp(service, "transport", strlen("transport"))) {
1102         char* error_string = "unknown failure";
1103         transport_type type = kTransportAny;
1104 
1105         if (!strncmp(service, "transport-usb", strlen("transport-usb"))) {
1106             type = kTransportUsb;
1107         } else if (!strncmp(service, "transport-local", strlen("transport-local"))) {
1108             type = kTransportLocal;
1109         } else if (!strncmp(service, "transport-any", strlen("transport-any"))) {
1110             type = kTransportAny;
1111         } else if (!strncmp(service, "transport:", strlen("transport:"))) {
1112             service += strlen("transport:");
1113             serial = service;
1114         }
1115 
1116         transport = acquire_one_transport(CS_ANY, type, serial, &error_string);
1117 
1118         if (transport) {
1119             s->transport = transport;
1120             adb_write(reply_fd, "OKAY", 4);
1121         } else {
1122             sendfailmsg(reply_fd, error_string);
1123         }
1124         return 1;
1125     }
1126 
1127     // return a list of all connected devices
1128     if (!strcmp(service, "devices")) {
1129         char buffer[4096];
1130         memset(buf, 0, sizeof(buf));
1131         memset(buffer, 0, sizeof(buffer));
1132         D("Getting device list \n");
1133         list_transports(buffer, sizeof(buffer));
1134         snprintf(buf, sizeof(buf), "OKAY%04x%s",(unsigned)strlen(buffer),buffer);
1135         D("Wrote device list \n");
1136         writex(reply_fd, buf, strlen(buf));
1137         return 0;
1138     }
1139 
1140     // add a new TCP transport, device or emulator
1141     if (!strncmp(service, "connect:", 8)) {
1142         char buffer[4096];
1143         char* host = service + 8;
1144         if (!strncmp(host, "emu:", 4)) {
1145             connect_emulator(host + 4, buffer, sizeof(buffer));
1146         } else {
1147             connect_device(host, buffer, sizeof(buffer));
1148         }
1149         // Send response for emulator and device
1150         snprintf(buf, sizeof(buf), "OKAY%04x%s",(unsigned)strlen(buffer), buffer);
1151         writex(reply_fd, buf, strlen(buf));
1152         return 0;
1153     }
1154 
1155     // remove TCP transport
1156     if (!strncmp(service, "disconnect:", 11)) {
1157         char buffer[4096];
1158         memset(buffer, 0, sizeof(buffer));
1159         char* serial = service + 11;
1160         if (serial[0] == 0) {
1161             // disconnect from all TCP devices
1162             unregister_all_tcp_transports();
1163         } else {
1164             char hostbuf[100];
1165             // assume port 5555 if no port is specified
1166             if (!strchr(serial, ':')) {
1167                 snprintf(hostbuf, sizeof(hostbuf) - 1, "%s:5555", serial);
1168                 serial = hostbuf;
1169             }
1170             atransport *t = find_transport(serial);
1171 
1172             if (t) {
1173                 unregister_transport(t);
1174             } else {
1175                 snprintf(buffer, sizeof(buffer), "No such device %s", serial);
1176             }
1177         }
1178 
1179         snprintf(buf, sizeof(buf), "OKAY%04x%s",(unsigned)strlen(buffer), buffer);
1180         writex(reply_fd, buf, strlen(buf));
1181         return 0;
1182     }
1183 
1184     // returns our value for ADB_SERVER_VERSION
1185     if (!strcmp(service, "version")) {
1186         char version[12];
1187         snprintf(version, sizeof version, "%04x", ADB_SERVER_VERSION);
1188         snprintf(buf, sizeof buf, "OKAY%04x%s", (unsigned)strlen(version), version);
1189         writex(reply_fd, buf, strlen(buf));
1190         return 0;
1191     }
1192 
1193     if(!strncmp(service,"get-serialno",strlen("get-serialno"))) {
1194         char *out = "unknown";
1195          transport = acquire_one_transport(CS_ANY, ttype, serial, NULL);
1196        if (transport && transport->serial) {
1197             out = transport->serial;
1198         }
1199         snprintf(buf, sizeof buf, "OKAY%04x%s",(unsigned)strlen(out),out);
1200         writex(reply_fd, buf, strlen(buf));
1201         return 0;
1202     }
1203     // indicates a new emulator instance has started
1204     if (!strncmp(service,"emulator:",9)) {
1205         int  port = atoi(service+9);
1206         local_connect(port);
1207         /* we don't even need to send a reply */
1208         return 0;
1209     }
1210 #endif // ADB_HOST
1211 
1212     if(!strncmp(service,"forward:",8) || !strncmp(service,"killforward:",12)) {
1213         char *local, *remote, *err;
1214         int r;
1215         atransport *transport;
1216 
1217         int createForward = strncmp(service,"kill",4);
1218 
1219         local = service + (createForward ? 8 : 12);
1220         remote = strchr(local,';');
1221         if(remote == 0) {
1222             sendfailmsg(reply_fd, "malformed forward spec");
1223             return 0;
1224         }
1225 
1226         *remote++ = 0;
1227         if((local[0] == 0) || (remote[0] == 0) || (remote[0] == '*')){
1228             sendfailmsg(reply_fd, "malformed forward spec");
1229             return 0;
1230         }
1231 
1232         transport = acquire_one_transport(CS_ANY, ttype, serial, &err);
1233         if (!transport) {
1234             sendfailmsg(reply_fd, err);
1235             return 0;
1236         }
1237 
1238         if (createForward) {
1239             r = install_listener(local, remote, transport);
1240         } else {
1241             r = remove_listener(local, remote, transport);
1242         }
1243         if(r == 0) {
1244                 /* 1st OKAY is connect, 2nd OKAY is status */
1245             writex(reply_fd, "OKAYOKAY", 8);
1246             return 0;
1247         }
1248 
1249         if (createForward) {
1250             sendfailmsg(reply_fd, (r == -1) ? "cannot rebind smartsocket" : "cannot bind socket");
1251         } else {
1252             sendfailmsg(reply_fd, "cannot remove listener");
1253         }
1254         return 0;
1255     }
1256 
1257     if(!strncmp(service,"get-state",strlen("get-state"))) {
1258         transport = acquire_one_transport(CS_ANY, ttype, serial, NULL);
1259         char *state = connection_state_name(transport);
1260         snprintf(buf, sizeof buf, "OKAY%04x%s",(unsigned)strlen(state),state);
1261         writex(reply_fd, buf, strlen(buf));
1262         return 0;
1263     }
1264     return -1;
1265 }
1266 
1267 #if !ADB_HOST
1268 int recovery_mode = 0;
1269 #endif
1270 
main(int argc,char ** argv)1271 int main(int argc, char **argv)
1272 {
1273 #if ADB_HOST
1274     adb_sysdeps_init();
1275     adb_trace_init();
1276     D("Handling commandline()\n");
1277     return adb_commandline(argc - 1, argv + 1);
1278 #else
1279     if((argc > 1) && (!strcmp(argv[1],"recovery"))) {
1280         adb_device_banner = "recovery";
1281         recovery_mode = 1;
1282     }
1283 
1284     start_device_log();
1285     D("Handling main()\n");
1286     return adb_main(0, DEFAULT_ADB_PORT);
1287 #endif
1288 }
1289