• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright (C) 2007 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #include <stdio.h>
18 #include <stdlib.h>
19 #include <unistd.h>
20 #include <string.h>
21 #include <errno.h>
22 
23 #include "sysdeps.h"
24 
25 #define   TRACE_TAG  TRACE_TRANSPORT
26 #include "adb.h"
27 
28 static void transport_unref(atransport *t);
29 
30 static atransport transport_list = {
31     .next = &transport_list,
32     .prev = &transport_list,
33 };
34 
35 ADB_MUTEX_DEFINE( transport_lock );
36 
37 #if ADB_TRACE
38 #define MAX_DUMP_HEX_LEN 16
dump_hex(const unsigned char * ptr,size_t len)39 static void  dump_hex( const unsigned char*  ptr, size_t  len )
40 {
41     int  nn, len2 = len;
42     // Build a string instead of logging each character.
43     // MAX chars in 2 digit hex, one space, MAX chars, one '\0'.
44     char buffer[MAX_DUMP_HEX_LEN *2 + 1 + MAX_DUMP_HEX_LEN + 1 ], *pb = buffer;
45 
46     if (len2 > MAX_DUMP_HEX_LEN) len2 = MAX_DUMP_HEX_LEN;
47 
48     for (nn = 0; nn < len2; nn++) {
49         sprintf(pb, "%02x", ptr[nn]);
50         pb += 2;
51     }
52     sprintf(pb++, " ");
53 
54     for (nn = 0; nn < len2; nn++) {
55         int  c = ptr[nn];
56         if (c < 32 || c > 127)
57             c = '.';
58         *pb++ =  c;
59     }
60     *pb++ = '\0';
61     DR("%s\n", buffer);
62 }
63 #endif
64 
65 void
kick_transport(atransport * t)66 kick_transport(atransport*  t)
67 {
68     if (t && !t->kicked)
69     {
70         int  kicked;
71 
72         adb_mutex_lock(&transport_lock);
73         kicked = t->kicked;
74         if (!kicked)
75             t->kicked = 1;
76         adb_mutex_unlock(&transport_lock);
77 
78         if (!kicked)
79             t->kick(t);
80     }
81 }
82 
83 void
run_transport_disconnects(atransport * t)84 run_transport_disconnects(atransport*  t)
85 {
86     adisconnect*  dis = t->disconnects.next;
87 
88     D("%s: run_transport_disconnects\n", t->serial);
89     while (dis != &t->disconnects) {
90         adisconnect*  next = dis->next;
91         dis->func( dis->opaque, t );
92         dis = next;
93     }
94 }
95 
96 #if ADB_TRACE
97 static void
dump_packet(const char * name,const char * func,apacket * p)98 dump_packet(const char* name, const char* func, apacket* p)
99 {
100     unsigned  command = p->msg.command;
101     int       len     = p->msg.data_length;
102     char      cmd[9];
103     char      arg0[12], arg1[12];
104     int       n;
105 
106     for (n = 0; n < 4; n++) {
107         int  b = (command >> (n*8)) & 255;
108         if (b < 32 || b >= 127)
109             break;
110         cmd[n] = (char)b;
111     }
112     if (n == 4) {
113         cmd[4] = 0;
114     } else {
115         /* There is some non-ASCII name in the command, so dump
116             * the hexadecimal value instead */
117         snprintf(cmd, sizeof cmd, "%08x", command);
118     }
119 
120     if (p->msg.arg0 < 256U)
121         snprintf(arg0, sizeof arg0, "%d", p->msg.arg0);
122     else
123         snprintf(arg0, sizeof arg0, "0x%x", p->msg.arg0);
124 
125     if (p->msg.arg1 < 256U)
126         snprintf(arg1, sizeof arg1, "%d", p->msg.arg1);
127     else
128         snprintf(arg1, sizeof arg1, "0x%x", p->msg.arg1);
129 
130     D("%s: %s: [%s] arg0=%s arg1=%s (len=%d) ",
131         name, func, cmd, arg0, arg1, len);
132     dump_hex(p->data, len);
133 }
134 #endif /* ADB_TRACE */
135 
136 static int
read_packet(int fd,const char * name,apacket ** ppacket)137 read_packet(int  fd, const char* name, apacket** ppacket)
138 {
139     char *p = (char*)ppacket;  /* really read a packet address */
140     int   r;
141     int   len = sizeof(*ppacket);
142     char  buff[8];
143     if (!name) {
144         snprintf(buff, sizeof buff, "fd=%d", fd);
145         name = buff;
146     }
147     while(len > 0) {
148         r = adb_read(fd, p, len);
149         if(r > 0) {
150             len -= r;
151             p   += r;
152         } else {
153             D("%s: read_packet (fd=%d), error ret=%d errno=%d: %s\n", name, fd, r, errno, strerror(errno));
154             if((r < 0) && (errno == EINTR)) continue;
155             return -1;
156         }
157     }
158 
159 #if ADB_TRACE
160     if (ADB_TRACING) {
161         dump_packet(name, "from remote", *ppacket);
162     }
163 #endif
164     return 0;
165 }
166 
167 static int
write_packet(int fd,const char * name,apacket ** ppacket)168 write_packet(int  fd, const char* name, apacket** ppacket)
169 {
170     char *p = (char*) ppacket;  /* we really write the packet address */
171     int r, len = sizeof(ppacket);
172     char buff[8];
173     if (!name) {
174         snprintf(buff, sizeof buff, "fd=%d", fd);
175         name = buff;
176     }
177 
178 #if ADB_TRACE
179     if (ADB_TRACING) {
180         dump_packet(name, "to remote", *ppacket);
181     }
182 #endif
183     len = sizeof(ppacket);
184     while(len > 0) {
185         r = adb_write(fd, p, len);
186         if(r > 0) {
187             len -= r;
188             p += r;
189         } else {
190             D("%s: write_packet (fd=%d) error ret=%d errno=%d: %s\n", name, fd, r, errno, strerror(errno));
191             if((r < 0) && (errno == EINTR)) continue;
192             return -1;
193         }
194     }
195     return 0;
196 }
197 
transport_socket_events(int fd,unsigned events,void * _t)198 static void transport_socket_events(int fd, unsigned events, void *_t)
199 {
200     atransport *t = _t;
201     D("transport_socket_events(fd=%d, events=%04x,...)\n", fd, events);
202     if(events & FDE_READ){
203         apacket *p = 0;
204         if(read_packet(fd, t->serial, &p)){
205             D("%s: failed to read packet from transport socket on fd %d\n", t->serial, fd);
206         } else {
207             handle_packet(p, (atransport *) _t);
208         }
209     }
210 }
211 
send_packet(apacket * p,atransport * t)212 void send_packet(apacket *p, atransport *t)
213 {
214     unsigned char *x;
215     unsigned sum;
216     unsigned count;
217 
218     p->msg.magic = p->msg.command ^ 0xffffffff;
219 
220     count = p->msg.data_length;
221     x = (unsigned char *) p->data;
222     sum = 0;
223     while(count-- > 0){
224         sum += *x++;
225     }
226     p->msg.data_check = sum;
227 
228     print_packet("send", p);
229 
230     if (t == NULL) {
231         D("Transport is null \n");
232         // Zap errno because print_packet() and other stuff have errno effect.
233         errno = 0;
234         fatal_errno("Transport is null");
235     }
236 
237     if(write_packet(t->transport_socket, t->serial, &p)){
238         fatal_errno("cannot enqueue packet on transport socket");
239     }
240 }
241 
242 /* The transport is opened by transport_register_func before
243 ** the input and output threads are started.
244 **
245 ** The output thread issues a SYNC(1, token) message to let
246 ** the input thread know to start things up.  In the event
247 ** of transport IO failure, the output thread will post a
248 ** SYNC(0,0) message to ensure shutdown.
249 **
250 ** The transport will not actually be closed until both
251 ** threads exit, but the input thread will kick the transport
252 ** on its way out to disconnect the underlying device.
253 */
254 
output_thread(void * _t)255 static void *output_thread(void *_t)
256 {
257     atransport *t = _t;
258     apacket *p;
259 
260     D("%s: starting transport output thread on fd %d, SYNC online (%d)\n",
261        t->serial, t->fd, t->sync_token + 1);
262     p = get_apacket();
263     p->msg.command = A_SYNC;
264     p->msg.arg0 = 1;
265     p->msg.arg1 = ++(t->sync_token);
266     p->msg.magic = A_SYNC ^ 0xffffffff;
267     if(write_packet(t->fd, t->serial, &p)) {
268         put_apacket(p);
269         D("%s: failed to write SYNC packet\n", t->serial);
270         goto oops;
271     }
272 
273     D("%s: data pump started\n", t->serial);
274     for(;;) {
275         p = get_apacket();
276 
277         if(t->read_from_remote(p, t) == 0){
278             D("%s: received remote packet, sending to transport\n",
279               t->serial);
280             if(write_packet(t->fd, t->serial, &p)){
281                 put_apacket(p);
282                 D("%s: failed to write apacket to transport\n", t->serial);
283                 goto oops;
284             }
285         } else {
286             D("%s: remote read failed for transport\n", t->serial);
287             put_apacket(p);
288             break;
289         }
290     }
291 
292     D("%s: SYNC offline for transport\n", t->serial);
293     p = get_apacket();
294     p->msg.command = A_SYNC;
295     p->msg.arg0 = 0;
296     p->msg.arg1 = 0;
297     p->msg.magic = A_SYNC ^ 0xffffffff;
298     if(write_packet(t->fd, t->serial, &p)) {
299         put_apacket(p);
300         D("%s: failed to write SYNC apacket to transport", t->serial);
301     }
302 
303 oops:
304     D("%s: transport output thread is exiting\n", t->serial);
305     kick_transport(t);
306     transport_unref(t);
307     return 0;
308 }
309 
input_thread(void * _t)310 static void *input_thread(void *_t)
311 {
312     atransport *t = _t;
313     apacket *p;
314     int active = 0;
315 
316     D("%s: starting transport input thread, reading from fd %d\n",
317        t->serial, t->fd);
318 
319     for(;;){
320         if(read_packet(t->fd, t->serial, &p)) {
321             D("%s: failed to read apacket from transport on fd %d\n",
322                t->serial, t->fd );
323             break;
324         }
325         if(p->msg.command == A_SYNC){
326             if(p->msg.arg0 == 0) {
327                 D("%s: transport SYNC offline\n", t->serial);
328                 put_apacket(p);
329                 break;
330             } else {
331                 if(p->msg.arg1 == t->sync_token) {
332                     D("%s: transport SYNC online\n", t->serial);
333                     active = 1;
334                 } else {
335                     D("%s: transport ignoring SYNC %d != %d\n",
336                       t->serial, p->msg.arg1, t->sync_token);
337                 }
338             }
339         } else {
340             if(active) {
341                 D("%s: transport got packet, sending to remote\n", t->serial);
342                 t->write_to_remote(p, t);
343             } else {
344                 D("%s: transport ignoring packet while offline\n", t->serial);
345             }
346         }
347 
348         put_apacket(p);
349     }
350 
351     // this is necessary to avoid a race condition that occured when a transport closes
352     // while a client socket is still active.
353     close_all_sockets(t);
354 
355     D("%s: transport input thread is exiting, fd %d\n", t->serial, t->fd);
356     kick_transport(t);
357     transport_unref(t);
358     return 0;
359 }
360 
361 
362 static int transport_registration_send = -1;
363 static int transport_registration_recv = -1;
364 static fdevent transport_registration_fde;
365 
366 
367 #if ADB_HOST
list_transports_msg(char * buffer,size_t bufferlen)368 static int list_transports_msg(char*  buffer, size_t  bufferlen)
369 {
370     char  head[5];
371     int   len;
372 
373     len = list_transports(buffer+4, bufferlen-4);
374     snprintf(head, sizeof(head), "%04x", len);
375     memcpy(buffer, head, 4);
376     len += 4;
377     return len;
378 }
379 
380 /* this adds support required by the 'track-devices' service.
381  * this is used to send the content of "list_transport" to any
382  * number of client connections that want it through a single
383  * live TCP connection
384  */
385 typedef struct device_tracker  device_tracker;
386 struct device_tracker {
387     asocket          socket;
388     int              update_needed;
389     device_tracker*  next;
390 };
391 
392 /* linked list of all device trackers */
393 static device_tracker*   device_tracker_list;
394 
395 static void
device_tracker_remove(device_tracker * tracker)396 device_tracker_remove( device_tracker*  tracker )
397 {
398     device_tracker**  pnode = &device_tracker_list;
399     device_tracker*   node  = *pnode;
400 
401     adb_mutex_lock( &transport_lock );
402     while (node) {
403         if (node == tracker) {
404             *pnode = node->next;
405             break;
406         }
407         pnode = &node->next;
408         node  = *pnode;
409     }
410     adb_mutex_unlock( &transport_lock );
411 }
412 
413 static void
device_tracker_close(asocket * socket)414 device_tracker_close( asocket*  socket )
415 {
416     device_tracker*  tracker = (device_tracker*) socket;
417     asocket*         peer    = socket->peer;
418 
419     D( "device tracker %p removed\n", tracker);
420     if (peer) {
421         peer->peer = NULL;
422         peer->close(peer);
423     }
424     device_tracker_remove(tracker);
425     free(tracker);
426 }
427 
428 static int
device_tracker_enqueue(asocket * socket,apacket * p)429 device_tracker_enqueue( asocket*  socket, apacket*  p )
430 {
431     /* you can't read from a device tracker, close immediately */
432     put_apacket(p);
433     device_tracker_close(socket);
434     return -1;
435 }
436 
437 static int
device_tracker_send(device_tracker * tracker,const char * buffer,int len)438 device_tracker_send( device_tracker*  tracker,
439                      const char*      buffer,
440                      int              len )
441 {
442     apacket*  p = get_apacket();
443     asocket*  peer = tracker->socket.peer;
444 
445     memcpy(p->data, buffer, len);
446     p->len = len;
447     return peer->enqueue( peer, p );
448 }
449 
450 
451 static void
device_tracker_ready(asocket * socket)452 device_tracker_ready( asocket*  socket )
453 {
454     device_tracker*  tracker = (device_tracker*) socket;
455 
456     /* we want to send the device list when the tracker connects
457     * for the first time, even if no update occured */
458     if (tracker->update_needed > 0) {
459         char  buffer[1024];
460         int   len;
461 
462         tracker->update_needed = 0;
463 
464         len = list_transports_msg(buffer, sizeof(buffer));
465         device_tracker_send(tracker, buffer, len);
466     }
467 }
468 
469 
470 asocket*
create_device_tracker(void)471 create_device_tracker(void)
472 {
473     device_tracker*  tracker = calloc(1,sizeof(*tracker));
474 
475     if(tracker == 0) fatal("cannot allocate device tracker");
476 
477     D( "device tracker %p created\n", tracker);
478 
479     tracker->socket.enqueue = device_tracker_enqueue;
480     tracker->socket.ready   = device_tracker_ready;
481     tracker->socket.close   = device_tracker_close;
482     tracker->update_needed  = 1;
483 
484     tracker->next       = device_tracker_list;
485     device_tracker_list = tracker;
486 
487     return &tracker->socket;
488 }
489 
490 
491 /* call this function each time the transport list has changed */
update_transports(void)492 void  update_transports(void)
493 {
494     char             buffer[1024];
495     int              len;
496     device_tracker*  tracker;
497 
498     len = list_transports_msg(buffer, sizeof(buffer));
499 
500     tracker = device_tracker_list;
501     while (tracker != NULL) {
502         device_tracker*  next = tracker->next;
503         /* note: this may destroy the tracker if the connection is closed */
504         device_tracker_send(tracker, buffer, len);
505         tracker = next;
506     }
507 }
508 #else
update_transports(void)509 void  update_transports(void)
510 {
511     // nothing to do on the device side
512 }
513 #endif // ADB_HOST
514 
515 typedef struct tmsg tmsg;
516 struct tmsg
517 {
518     atransport *transport;
519     int         action;
520 };
521 
522 static int
transport_read_action(int fd,struct tmsg * m)523 transport_read_action(int  fd, struct tmsg*  m)
524 {
525     char *p   = (char*)m;
526     int   len = sizeof(*m);
527     int   r;
528 
529     while(len > 0) {
530         r = adb_read(fd, p, len);
531         if(r > 0) {
532             len -= r;
533             p   += r;
534         } else {
535             if((r < 0) && (errno == EINTR)) continue;
536             D("transport_read_action: on fd %d, error %d: %s\n",
537               fd, errno, strerror(errno));
538             return -1;
539         }
540     }
541     return 0;
542 }
543 
544 static int
transport_write_action(int fd,struct tmsg * m)545 transport_write_action(int  fd, struct tmsg*  m)
546 {
547     char *p   = (char*)m;
548     int   len = sizeof(*m);
549     int   r;
550 
551     while(len > 0) {
552         r = adb_write(fd, p, len);
553         if(r > 0) {
554             len -= r;
555             p   += r;
556         } else {
557             if((r < 0) && (errno == EINTR)) continue;
558             D("transport_write_action: on fd %d, error %d: %s\n",
559               fd, errno, strerror(errno));
560             return -1;
561         }
562     }
563     return 0;
564 }
565 
transport_registration_func(int _fd,unsigned ev,void * data)566 static void transport_registration_func(int _fd, unsigned ev, void *data)
567 {
568     tmsg m;
569     adb_thread_t output_thread_ptr;
570     adb_thread_t input_thread_ptr;
571     int s[2];
572     atransport *t;
573 
574     if(!(ev & FDE_READ)) {
575         return;
576     }
577 
578     if(transport_read_action(_fd, &m)) {
579         fatal_errno("cannot read transport registration socket");
580     }
581 
582     t = m.transport;
583 
584     if(m.action == 0){
585         D("transport: %s removing and free'ing %d\n", t->serial, t->transport_socket);
586 
587             /* IMPORTANT: the remove closes one half of the
588             ** socket pair.  The close closes the other half.
589             */
590         fdevent_remove(&(t->transport_fde));
591         adb_close(t->fd);
592 
593         adb_mutex_lock(&transport_lock);
594         t->next->prev = t->prev;
595         t->prev->next = t->next;
596         adb_mutex_unlock(&transport_lock);
597 
598         run_transport_disconnects(t);
599 
600         if (t->product)
601             free(t->product);
602         if (t->serial)
603             free(t->serial);
604 
605         memset(t,0xee,sizeof(atransport));
606         free(t);
607 
608         update_transports();
609         return;
610     }
611 
612     /* don't create transport threads for inaccessible devices */
613     if (t->connection_state != CS_NOPERM) {
614         /* initial references are the two threads */
615         t->ref_count = 2;
616 
617         if(adb_socketpair(s)) {
618             fatal_errno("cannot open transport socketpair");
619         }
620 
621         D("transport: %s (%d,%d) starting\n", t->serial, s[0], s[1]);
622 
623         t->transport_socket = s[0];
624         t->fd = s[1];
625 
626         fdevent_install(&(t->transport_fde),
627                         t->transport_socket,
628                         transport_socket_events,
629                         t);
630 
631         fdevent_set(&(t->transport_fde), FDE_READ);
632 
633         if(adb_thread_create(&input_thread_ptr, input_thread, t)){
634             fatal_errno("cannot create input thread");
635         }
636 
637         if(adb_thread_create(&output_thread_ptr, output_thread, t)){
638             fatal_errno("cannot create output thread");
639         }
640     }
641 
642         /* put us on the master device list */
643     adb_mutex_lock(&transport_lock);
644     t->next = &transport_list;
645     t->prev = transport_list.prev;
646     t->next->prev = t;
647     t->prev->next = t;
648     adb_mutex_unlock(&transport_lock);
649 
650     t->disconnects.next = t->disconnects.prev = &t->disconnects;
651 
652     update_transports();
653 }
654 
init_transport_registration(void)655 void init_transport_registration(void)
656 {
657     int s[2];
658 
659     if(adb_socketpair(s)){
660         fatal_errno("cannot open transport registration socketpair");
661     }
662 
663     transport_registration_send = s[0];
664     transport_registration_recv = s[1];
665 
666     fdevent_install(&transport_registration_fde,
667                     transport_registration_recv,
668                     transport_registration_func,
669                     0);
670 
671     fdevent_set(&transport_registration_fde, FDE_READ);
672 }
673 
674 /* the fdevent select pump is single threaded */
register_transport(atransport * transport)675 static void register_transport(atransport *transport)
676 {
677     tmsg m;
678     m.transport = transport;
679     m.action = 1;
680     D("transport: %s registered\n", transport->serial);
681     if(transport_write_action(transport_registration_send, &m)) {
682         fatal_errno("cannot write transport registration socket\n");
683     }
684 }
685 
remove_transport(atransport * transport)686 static void remove_transport(atransport *transport)
687 {
688     tmsg m;
689     m.transport = transport;
690     m.action = 0;
691     D("transport: %s removed\n", transport->serial);
692     if(transport_write_action(transport_registration_send, &m)) {
693         fatal_errno("cannot write transport registration socket\n");
694     }
695 }
696 
697 
transport_unref_locked(atransport * t)698 static void transport_unref_locked(atransport *t)
699 {
700     t->ref_count--;
701     if (t->ref_count == 0) {
702         D("transport: %s unref (kicking and closing)\n", t->serial);
703         if (!t->kicked) {
704             t->kicked = 1;
705             t->kick(t);
706         }
707         t->close(t);
708         remove_transport(t);
709     } else {
710         D("transport: %s unref (count=%d)\n", t->serial, t->ref_count);
711     }
712 }
713 
transport_unref(atransport * t)714 static void transport_unref(atransport *t)
715 {
716     if (t) {
717         adb_mutex_lock(&transport_lock);
718         transport_unref_locked(t);
719         adb_mutex_unlock(&transport_lock);
720     }
721 }
722 
add_transport_disconnect(atransport * t,adisconnect * dis)723 void add_transport_disconnect(atransport*  t, adisconnect*  dis)
724 {
725     adb_mutex_lock(&transport_lock);
726     dis->next       = &t->disconnects;
727     dis->prev       = dis->next->prev;
728     dis->prev->next = dis;
729     dis->next->prev = dis;
730     adb_mutex_unlock(&transport_lock);
731 }
732 
remove_transport_disconnect(atransport * t,adisconnect * dis)733 void remove_transport_disconnect(atransport*  t, adisconnect*  dis)
734 {
735     dis->prev->next = dis->next;
736     dis->next->prev = dis->prev;
737     dis->next = dis->prev = dis;
738 }
739 
740 
acquire_one_transport(int state,transport_type ttype,const char * serial,char ** error_out)741 atransport *acquire_one_transport(int state, transport_type ttype, const char* serial, char** error_out)
742 {
743     atransport *t;
744     atransport *result = NULL;
745     int ambiguous = 0;
746 
747 retry:
748     if (error_out)
749         *error_out = "device not found";
750 
751     adb_mutex_lock(&transport_lock);
752     for (t = transport_list.next; t != &transport_list; t = t->next) {
753         if (t->connection_state == CS_NOPERM) {
754         if (error_out)
755             *error_out = "insufficient permissions for device";
756             continue;
757         }
758 
759         /* check for matching serial number */
760         if (serial) {
761             if (t->serial && !strcmp(serial, t->serial)) {
762                 result = t;
763                 break;
764             }
765         } else {
766             if (ttype == kTransportUsb && t->type == kTransportUsb) {
767                 if (result) {
768                     if (error_out)
769                         *error_out = "more than one device";
770                     ambiguous = 1;
771                     result = NULL;
772                     break;
773                 }
774                 result = t;
775             } else if (ttype == kTransportLocal && t->type == kTransportLocal) {
776                 if (result) {
777                     if (error_out)
778                         *error_out = "more than one emulator";
779                     ambiguous = 1;
780                     result = NULL;
781                     break;
782                 }
783                 result = t;
784             } else if (ttype == kTransportAny) {
785                 if (result) {
786                     if (error_out)
787                         *error_out = "more than one device and emulator";
788                     ambiguous = 1;
789                     result = NULL;
790                     break;
791                 }
792                 result = t;
793             }
794         }
795     }
796     adb_mutex_unlock(&transport_lock);
797 
798     if (result) {
799          /* offline devices are ignored -- they are either being born or dying */
800         if (result && result->connection_state == CS_OFFLINE) {
801             if (error_out)
802                 *error_out = "device offline";
803             result = NULL;
804         }
805          /* check for required connection state */
806         if (result && state != CS_ANY && result->connection_state != state) {
807             if (error_out)
808                 *error_out = "invalid device state";
809             result = NULL;
810         }
811     }
812 
813     if (result) {
814         /* found one that we can take */
815         if (error_out)
816             *error_out = NULL;
817     } else if (state != CS_ANY && (serial || !ambiguous)) {
818         adb_sleep_ms(1000);
819         goto retry;
820     }
821 
822     return result;
823 }
824 
825 #if ADB_HOST
statename(atransport * t)826 static const char *statename(atransport *t)
827 {
828     switch(t->connection_state){
829     case CS_OFFLINE: return "offline";
830     case CS_BOOTLOADER: return "bootloader";
831     case CS_DEVICE: return "device";
832     case CS_HOST: return "host";
833     case CS_RECOVERY: return "recovery";
834     case CS_NOPERM: return "no permissions";
835     default: return "unknown";
836     }
837 }
838 
list_transports(char * buf,size_t bufsize)839 int list_transports(char *buf, size_t  bufsize)
840 {
841     char*       p   = buf;
842     char*       end = buf + bufsize;
843     int         len;
844     atransport *t;
845 
846         /* XXX OVERRUN PROBLEMS XXX */
847     adb_mutex_lock(&transport_lock);
848     for(t = transport_list.next; t != &transport_list; t = t->next) {
849         const char* serial = t->serial;
850         if (!serial || !serial[0])
851             serial = "????????????";
852         len = snprintf(p, end - p, "%s\t%s\n", serial, statename(t));
853 
854         if (p + len >= end) {
855             /* discard last line if buffer is too short */
856             break;
857         }
858         p += len;
859     }
860     p[0] = 0;
861     adb_mutex_unlock(&transport_lock);
862     return p - buf;
863 }
864 
865 
866 /* hack for osx */
close_usb_devices()867 void close_usb_devices()
868 {
869     atransport *t;
870 
871     adb_mutex_lock(&transport_lock);
872     for(t = transport_list.next; t != &transport_list; t = t->next) {
873         if ( !t->kicked ) {
874             t->kicked = 1;
875             t->kick(t);
876         }
877     }
878     adb_mutex_unlock(&transport_lock);
879 }
880 #endif // ADB_HOST
881 
register_socket_transport(int s,const char * serial,int port,int local)882 void register_socket_transport(int s, const char *serial, int port, int local)
883 {
884     atransport *t = calloc(1, sizeof(atransport));
885     char buff[32];
886 
887     if (!serial) {
888         snprintf(buff, sizeof buff, "T-%p", t);
889         serial = buff;
890     }
891     D("transport: %s init'ing for socket %d, on port %d\n", serial, s, port);
892     if ( init_socket_transport(t, s, port, local) < 0 ) {
893         adb_close(s);
894         free(t);
895         return;
896     }
897     if(serial) {
898         t->serial = strdup(serial);
899     }
900     register_transport(t);
901 }
902 
903 #if ADB_HOST
find_transport(const char * serial)904 atransport *find_transport(const char *serial)
905 {
906     atransport *t;
907 
908     adb_mutex_lock(&transport_lock);
909     for(t = transport_list.next; t != &transport_list; t = t->next) {
910         if (t->serial && !strcmp(serial, t->serial)) {
911             break;
912         }
913      }
914     adb_mutex_unlock(&transport_lock);
915 
916     if (t != &transport_list)
917         return t;
918     else
919         return 0;
920 }
921 
unregister_transport(atransport * t)922 void unregister_transport(atransport *t)
923 {
924     adb_mutex_lock(&transport_lock);
925     t->next->prev = t->prev;
926     t->prev->next = t->next;
927     adb_mutex_unlock(&transport_lock);
928 
929     kick_transport(t);
930     transport_unref(t);
931 }
932 
933 // unregisters all non-emulator TCP transports
unregister_all_tcp_transports()934 void unregister_all_tcp_transports()
935 {
936     atransport *t, *next;
937     adb_mutex_lock(&transport_lock);
938     for (t = transport_list.next; t != &transport_list; t = next) {
939         next = t->next;
940         if (t->type == kTransportLocal && t->adb_port == 0) {
941             t->next->prev = t->prev;
942             t->prev->next = next;
943             // we cannot call kick_transport when holding transport_lock
944             if (!t->kicked)
945             {
946                 t->kicked = 1;
947                 t->kick(t);
948             }
949             transport_unref_locked(t);
950         }
951      }
952 
953     adb_mutex_unlock(&transport_lock);
954 }
955 
956 #endif
957 
register_usb_transport(usb_handle * usb,const char * serial,unsigned writeable)958 void register_usb_transport(usb_handle *usb, const char *serial, unsigned writeable)
959 {
960     atransport *t = calloc(1, sizeof(atransport));
961     D("transport: %p init'ing for usb_handle %p (sn='%s')\n", t, usb,
962       serial ? serial : "");
963     init_usb_transport(t, usb, (writeable ? CS_OFFLINE : CS_NOPERM));
964     if(serial) {
965         t->serial = strdup(serial);
966     }
967     register_transport(t);
968 }
969 
970 /* this should only be used for transports with connection_state == CS_NOPERM */
unregister_usb_transport(usb_handle * usb)971 void unregister_usb_transport(usb_handle *usb)
972 {
973     atransport *t;
974     adb_mutex_lock(&transport_lock);
975     for(t = transport_list.next; t != &transport_list; t = t->next) {
976         if (t->usb == usb && t->connection_state == CS_NOPERM) {
977             t->next->prev = t->prev;
978             t->prev->next = t->next;
979             break;
980         }
981      }
982     adb_mutex_unlock(&transport_lock);
983 }
984 
985 #undef TRACE_TAG
986 #define TRACE_TAG  TRACE_RWX
987 
readx(int fd,void * ptr,size_t len)988 int readx(int fd, void *ptr, size_t len)
989 {
990     char *p = ptr;
991     int r;
992 #if ADB_TRACE
993     int  len0 = len;
994 #endif
995     D("readx: fd=%d wanted=%d\n", fd, (int)len);
996     while(len > 0) {
997         r = adb_read(fd, p, len);
998         if(r > 0) {
999             len -= r;
1000             p += r;
1001         } else {
1002             if (r < 0) {
1003                 D("readx: fd=%d error %d: %s\n", fd, errno, strerror(errno));
1004                 if (errno == EINTR)
1005                     continue;
1006             } else {
1007                 D("readx: fd=%d disconnected\n", fd);
1008             }
1009             return -1;
1010         }
1011     }
1012 
1013 #if ADB_TRACE
1014     D("readx: fd=%d wanted=%d got=%d\n", fd, len0, len0 - len);
1015     dump_hex( ptr, len0 );
1016 #endif
1017     return 0;
1018 }
1019 
writex(int fd,const void * ptr,size_t len)1020 int writex(int fd, const void *ptr, size_t len)
1021 {
1022     char *p = (char*) ptr;
1023     int r;
1024 
1025 #if ADB_TRACE
1026     D("writex: fd=%d len=%d: ", fd, (int)len);
1027     dump_hex( ptr, len );
1028 #endif
1029     while(len > 0) {
1030         r = adb_write(fd, p, len);
1031         if(r > 0) {
1032             len -= r;
1033             p += r;
1034         } else {
1035             if (r < 0) {
1036                 D("writex: fd=%d error %d: %s\n", fd, errno, strerror(errno));
1037                 if (errno == EINTR)
1038                     continue;
1039             } else {
1040                 D("writex: fd=%d disconnected\n", fd);
1041             }
1042             return -1;
1043         }
1044     }
1045     return 0;
1046 }
1047 
check_header(apacket * p)1048 int check_header(apacket *p)
1049 {
1050     if(p->msg.magic != (p->msg.command ^ 0xffffffff)) {
1051         D("check_header(): invalid magic\n");
1052         return -1;
1053     }
1054 
1055     if(p->msg.data_length > MAX_PAYLOAD) {
1056         D("check_header(): %d > MAX_PAYLOAD\n", p->msg.data_length);
1057         return -1;
1058     }
1059 
1060     return 0;
1061 }
1062 
check_data(apacket * p)1063 int check_data(apacket *p)
1064 {
1065     unsigned count, sum;
1066     unsigned char *x;
1067 
1068     count = p->msg.data_length;
1069     x = p->data;
1070     sum = 0;
1071     while(count-- > 0) {
1072         sum += *x++;
1073     }
1074 
1075     if(sum != p->msg.data_check) {
1076         return -1;
1077     } else {
1078         return 0;
1079     }
1080 }
1081