• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright (C) 2005 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #define LOG_TAG "ProcessState"
18 
19 #include <cutils/process_name.h>
20 
21 #include <binder/ProcessState.h>
22 
23 #include <utils/Atomic.h>
24 #include <binder/BpBinder.h>
25 #include <binder/IPCThreadState.h>
26 #include <utils/Log.h>
27 #include <utils/String8.h>
28 #include <binder/IServiceManager.h>
29 #include <utils/String8.h>
30 #include <utils/threads.h>
31 
32 #include <private/binder/binder_module.h>
33 #include <private/binder/Static.h>
34 
35 #include <errno.h>
36 #include <fcntl.h>
37 #include <stdio.h>
38 #include <stdlib.h>
39 #include <unistd.h>
40 #include <sys/ioctl.h>
41 #include <sys/mman.h>
42 #include <sys/stat.h>
43 
44 #define BINDER_VM_SIZE ((1*1024*1024) - (4096 *2))
45 
46 
47 // ---------------------------------------------------------------------------
48 
49 namespace android {
50 
51 // Global variables
52 int                 mArgC;
53 const char* const*  mArgV;
54 int                 mArgLen;
55 
56 class PoolThread : public Thread
57 {
58 public:
PoolThread(bool isMain)59     PoolThread(bool isMain)
60         : mIsMain(isMain)
61     {
62     }
63 
64 protected:
threadLoop()65     virtual bool threadLoop()
66     {
67         IPCThreadState::self()->joinThreadPool(mIsMain);
68         return false;
69     }
70 
71     const bool mIsMain;
72 };
73 
self()74 sp<ProcessState> ProcessState::self()
75 {
76     Mutex::Autolock _l(gProcessMutex);
77     if (gProcess != NULL) {
78         return gProcess;
79     }
80     gProcess = new ProcessState;
81     return gProcess;
82 }
83 
setContextObject(const sp<IBinder> & object)84 void ProcessState::setContextObject(const sp<IBinder>& object)
85 {
86     setContextObject(object, String16("default"));
87 }
88 
getContextObject(const sp<IBinder> & caller)89 sp<IBinder> ProcessState::getContextObject(const sp<IBinder>& caller)
90 {
91     return getStrongProxyForHandle(0);
92 }
93 
setContextObject(const sp<IBinder> & object,const String16 & name)94 void ProcessState::setContextObject(const sp<IBinder>& object, const String16& name)
95 {
96     AutoMutex _l(mLock);
97     mContexts.add(name, object);
98 }
99 
getContextObject(const String16 & name,const sp<IBinder> & caller)100 sp<IBinder> ProcessState::getContextObject(const String16& name, const sp<IBinder>& caller)
101 {
102     mLock.lock();
103     sp<IBinder> object(
104         mContexts.indexOfKey(name) >= 0 ? mContexts.valueFor(name) : NULL);
105     mLock.unlock();
106 
107     //printf("Getting context object %s for %p\n", String8(name).string(), caller.get());
108 
109     if (object != NULL) return object;
110 
111     // Don't attempt to retrieve contexts if we manage them
112     if (mManagesContexts) {
113         ALOGE("getContextObject(%s) failed, but we manage the contexts!\n",
114             String8(name).string());
115         return NULL;
116     }
117 
118     IPCThreadState* ipc = IPCThreadState::self();
119     {
120         Parcel data, reply;
121         // no interface token on this magic transaction
122         data.writeString16(name);
123         data.writeStrongBinder(caller);
124         status_t result = ipc->transact(0 /*magic*/, 0, data, &reply, 0);
125         if (result == NO_ERROR) {
126             object = reply.readStrongBinder();
127         }
128     }
129 
130     ipc->flushCommands();
131 
132     if (object != NULL) setContextObject(object, name);
133     return object;
134 }
135 
startThreadPool()136 void ProcessState::startThreadPool()
137 {
138     AutoMutex _l(mLock);
139     if (!mThreadPoolStarted) {
140         mThreadPoolStarted = true;
141         spawnPooledThread(true);
142     }
143 }
144 
isContextManager(void) const145 bool ProcessState::isContextManager(void) const
146 {
147     return mManagesContexts;
148 }
149 
becomeContextManager(context_check_func checkFunc,void * userData)150 bool ProcessState::becomeContextManager(context_check_func checkFunc, void* userData)
151 {
152     if (!mManagesContexts) {
153         AutoMutex _l(mLock);
154         mBinderContextCheckFunc = checkFunc;
155         mBinderContextUserData = userData;
156 
157         int dummy = 0;
158         status_t result = ioctl(mDriverFD, BINDER_SET_CONTEXT_MGR, &dummy);
159         if (result == 0) {
160             mManagesContexts = true;
161         } else if (result == -1) {
162             mBinderContextCheckFunc = NULL;
163             mBinderContextUserData = NULL;
164             ALOGE("Binder ioctl to become context manager failed: %s\n", strerror(errno));
165         }
166     }
167     return mManagesContexts;
168 }
169 
lookupHandleLocked(int32_t handle)170 ProcessState::handle_entry* ProcessState::lookupHandleLocked(int32_t handle)
171 {
172     const size_t N=mHandleToObject.size();
173     if (N <= (size_t)handle) {
174         handle_entry e;
175         e.binder = NULL;
176         e.refs = NULL;
177         status_t err = mHandleToObject.insertAt(e, N, handle+1-N);
178         if (err < NO_ERROR) return NULL;
179     }
180     return &mHandleToObject.editItemAt(handle);
181 }
182 
getStrongProxyForHandle(int32_t handle)183 sp<IBinder> ProcessState::getStrongProxyForHandle(int32_t handle)
184 {
185     sp<IBinder> result;
186 
187     AutoMutex _l(mLock);
188 
189     handle_entry* e = lookupHandleLocked(handle);
190 
191     if (e != NULL) {
192         // We need to create a new BpBinder if there isn't currently one, OR we
193         // are unable to acquire a weak reference on this current one.  See comment
194         // in getWeakProxyForHandle() for more info about this.
195         IBinder* b = e->binder;
196         if (b == NULL || !e->refs->attemptIncWeak(this)) {
197             if (handle == 0) {
198                 // Special case for context manager...
199                 // The context manager is the only object for which we create
200                 // a BpBinder proxy without already holding a reference.
201                 // Perform a dummy transaction to ensure the context manager
202                 // is registered before we create the first local reference
203                 // to it (which will occur when creating the BpBinder).
204                 // If a local reference is created for the BpBinder when the
205                 // context manager is not present, the driver will fail to
206                 // provide a reference to the context manager, but the
207                 // driver API does not return status.
208                 //
209                 // Note that this is not race-free if the context manager
210                 // dies while this code runs.
211                 //
212                 // TODO: add a driver API to wait for context manager, or
213                 // stop special casing handle 0 for context manager and add
214                 // a driver API to get a handle to the context manager with
215                 // proper reference counting.
216 
217                 Parcel data;
218                 status_t status = IPCThreadState::self()->transact(
219                         0, IBinder::PING_TRANSACTION, data, NULL, 0);
220                 if (status == DEAD_OBJECT)
221                    return NULL;
222             }
223 
224             b = new BpBinder(handle);
225             e->binder = b;
226             if (b) e->refs = b->getWeakRefs();
227             result = b;
228         } else {
229             // This little bit of nastyness is to allow us to add a primary
230             // reference to the remote proxy when this team doesn't have one
231             // but another team is sending the handle to us.
232             result.force_set(b);
233             e->refs->decWeak(this);
234         }
235     }
236 
237     return result;
238 }
239 
getWeakProxyForHandle(int32_t handle)240 wp<IBinder> ProcessState::getWeakProxyForHandle(int32_t handle)
241 {
242     wp<IBinder> result;
243 
244     AutoMutex _l(mLock);
245 
246     handle_entry* e = lookupHandleLocked(handle);
247 
248     if (e != NULL) {
249         // We need to create a new BpBinder if there isn't currently one, OR we
250         // are unable to acquire a weak reference on this current one.  The
251         // attemptIncWeak() is safe because we know the BpBinder destructor will always
252         // call expungeHandle(), which acquires the same lock we are holding now.
253         // We need to do this because there is a race condition between someone
254         // releasing a reference on this BpBinder, and a new reference on its handle
255         // arriving from the driver.
256         IBinder* b = e->binder;
257         if (b == NULL || !e->refs->attemptIncWeak(this)) {
258             b = new BpBinder(handle);
259             result = b;
260             e->binder = b;
261             if (b) e->refs = b->getWeakRefs();
262         } else {
263             result = b;
264             e->refs->decWeak(this);
265         }
266     }
267 
268     return result;
269 }
270 
expungeHandle(int32_t handle,IBinder * binder)271 void ProcessState::expungeHandle(int32_t handle, IBinder* binder)
272 {
273     AutoMutex _l(mLock);
274 
275     handle_entry* e = lookupHandleLocked(handle);
276 
277     // This handle may have already been replaced with a new BpBinder
278     // (if someone failed the AttemptIncWeak() above); we don't want
279     // to overwrite it.
280     if (e && e->binder == binder) e->binder = NULL;
281 }
282 
setArgs(int argc,const char * const argv[])283 void ProcessState::setArgs(int argc, const char* const argv[])
284 {
285     mArgC = argc;
286     mArgV = (const char **)argv;
287 
288     mArgLen = 0;
289     for (int i=0; i<argc; i++) {
290         mArgLen += strlen(argv[i]) + 1;
291     }
292     mArgLen--;
293 }
294 
getArgC() const295 int ProcessState::getArgC() const
296 {
297     return mArgC;
298 }
299 
getArgV() const300 const char* const* ProcessState::getArgV() const
301 {
302     return mArgV;
303 }
304 
setArgV0(const char * txt)305 void ProcessState::setArgV0(const char* txt)
306 {
307     if (mArgV != NULL) {
308         strncpy((char*)mArgV[0], txt, mArgLen);
309         set_process_name(txt);
310     }
311 }
312 
makeBinderThreadName()313 String8 ProcessState::makeBinderThreadName() {
314     int32_t s = android_atomic_add(1, &mThreadPoolSeq);
315     String8 name;
316     name.appendFormat("Binder_%X", s);
317     return name;
318 }
319 
spawnPooledThread(bool isMain)320 void ProcessState::spawnPooledThread(bool isMain)
321 {
322     if (mThreadPoolStarted) {
323         String8 name = makeBinderThreadName();
324         ALOGV("Spawning new pooled thread, name=%s\n", name.string());
325         sp<Thread> t = new PoolThread(isMain);
326         t->run(name.string());
327     }
328 }
329 
setThreadPoolMaxThreadCount(size_t maxThreads)330 status_t ProcessState::setThreadPoolMaxThreadCount(size_t maxThreads) {
331     status_t result = NO_ERROR;
332     if (ioctl(mDriverFD, BINDER_SET_MAX_THREADS, &maxThreads) == -1) {
333         result = -errno;
334         ALOGE("Binder ioctl to set max threads failed: %s", strerror(-result));
335     }
336     return result;
337 }
338 
giveThreadPoolName()339 void ProcessState::giveThreadPoolName() {
340     androidSetThreadName( makeBinderThreadName().string() );
341 }
342 
open_driver()343 static int open_driver()
344 {
345     int fd = open("/dev/binder", O_RDWR);
346     if (fd >= 0) {
347         fcntl(fd, F_SETFD, FD_CLOEXEC);
348         int vers;
349         status_t result = ioctl(fd, BINDER_VERSION, &vers);
350         if (result == -1) {
351             ALOGE("Binder ioctl to obtain version failed: %s", strerror(errno));
352             close(fd);
353             fd = -1;
354         }
355         if (result != 0 || vers != BINDER_CURRENT_PROTOCOL_VERSION) {
356             ALOGE("Binder driver protocol does not match user space protocol!");
357             close(fd);
358             fd = -1;
359         }
360         size_t maxThreads = 15;
361         result = ioctl(fd, BINDER_SET_MAX_THREADS, &maxThreads);
362         if (result == -1) {
363             ALOGE("Binder ioctl to set max threads failed: %s", strerror(errno));
364         }
365     } else {
366         ALOGW("Opening '/dev/binder' failed: %s\n", strerror(errno));
367     }
368     return fd;
369 }
370 
ProcessState()371 ProcessState::ProcessState()
372     : mDriverFD(open_driver())
373     , mVMStart(MAP_FAILED)
374     , mManagesContexts(false)
375     , mBinderContextCheckFunc(NULL)
376     , mBinderContextUserData(NULL)
377     , mThreadPoolStarted(false)
378     , mThreadPoolSeq(1)
379 {
380     if (mDriverFD >= 0) {
381         // XXX Ideally, there should be a specific define for whether we
382         // have mmap (or whether we could possibly have the kernel module
383         // availabla).
384 #if !defined(HAVE_WIN32_IPC)
385         // mmap the binder, providing a chunk of virtual address space to receive transactions.
386         mVMStart = mmap(0, BINDER_VM_SIZE, PROT_READ, MAP_PRIVATE | MAP_NORESERVE, mDriverFD, 0);
387         if (mVMStart == MAP_FAILED) {
388             // *sigh*
389             ALOGE("Using /dev/binder failed: unable to mmap transaction memory.\n");
390             close(mDriverFD);
391             mDriverFD = -1;
392         }
393 #else
394         mDriverFD = -1;
395 #endif
396     }
397 
398     LOG_ALWAYS_FATAL_IF(mDriverFD < 0, "Binder driver could not be opened.  Terminating.");
399 }
400 
~ProcessState()401 ProcessState::~ProcessState()
402 {
403 }
404 
405 }; // namespace android
406