1 /*
2 * Copyright (C) 2005 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17 #define LOG_TAG "BpBinder"
18 //#define LOG_NDEBUG 0
19
20 #include <binder/BpBinder.h>
21
22 #include <binder/IPCThreadState.h>
23 #include <utils/Log.h>
24
25 #include <stdio.h>
26
27 //#undef ALOGV
28 //#define ALOGV(...) fprintf(stderr, __VA_ARGS__)
29
30 namespace android {
31
32 // ---------------------------------------------------------------------------
33
ObjectManager()34 BpBinder::ObjectManager::ObjectManager()
35 {
36 }
37
~ObjectManager()38 BpBinder::ObjectManager::~ObjectManager()
39 {
40 kill();
41 }
42
attach(const void * objectID,void * object,void * cleanupCookie,IBinder::object_cleanup_func func)43 void BpBinder::ObjectManager::attach(
44 const void* objectID, void* object, void* cleanupCookie,
45 IBinder::object_cleanup_func func)
46 {
47 entry_t e;
48 e.object = object;
49 e.cleanupCookie = cleanupCookie;
50 e.func = func;
51
52 if (mObjects.indexOfKey(objectID) >= 0) {
53 ALOGE("Trying to attach object ID %p to binder ObjectManager %p with object %p, but object ID already in use",
54 objectID, this, object);
55 return;
56 }
57
58 mObjects.add(objectID, e);
59 }
60
find(const void * objectID) const61 void* BpBinder::ObjectManager::find(const void* objectID) const
62 {
63 const ssize_t i = mObjects.indexOfKey(objectID);
64 if (i < 0) return NULL;
65 return mObjects.valueAt(i).object;
66 }
67
detach(const void * objectID)68 void BpBinder::ObjectManager::detach(const void* objectID)
69 {
70 mObjects.removeItem(objectID);
71 }
72
kill()73 void BpBinder::ObjectManager::kill()
74 {
75 const size_t N = mObjects.size();
76 ALOGV("Killing %d objects in manager %p", N, this);
77 for (size_t i=0; i<N; i++) {
78 const entry_t& e = mObjects.valueAt(i);
79 if (e.func != NULL) {
80 e.func(mObjects.keyAt(i), e.object, e.cleanupCookie);
81 }
82 }
83
84 mObjects.clear();
85 }
86
87 // ---------------------------------------------------------------------------
88
BpBinder(int32_t handle)89 BpBinder::BpBinder(int32_t handle)
90 : mHandle(handle)
91 , mAlive(1)
92 , mObitsSent(0)
93 , mObituaries(NULL)
94 {
95 ALOGV("Creating BpBinder %p handle %d\n", this, mHandle);
96
97 extendObjectLifetime(OBJECT_LIFETIME_WEAK);
98 IPCThreadState::self()->incWeakHandle(handle);
99 }
100
isDescriptorCached() const101 bool BpBinder::isDescriptorCached() const {
102 Mutex::Autolock _l(mLock);
103 return mDescriptorCache.size() ? true : false;
104 }
105
getInterfaceDescriptor() const106 const String16& BpBinder::getInterfaceDescriptor() const
107 {
108 if (isDescriptorCached() == false) {
109 Parcel send, reply;
110 // do the IPC without a lock held.
111 status_t err = const_cast<BpBinder*>(this)->transact(
112 INTERFACE_TRANSACTION, send, &reply);
113 if (err == NO_ERROR) {
114 String16 res(reply.readString16());
115 Mutex::Autolock _l(mLock);
116 // mDescriptorCache could have been assigned while the lock was
117 // released.
118 if (mDescriptorCache.size() == 0)
119 mDescriptorCache = res;
120 }
121 }
122
123 // we're returning a reference to a non-static object here. Usually this
124 // is not something smart to do, however, with binder objects it is
125 // (usually) safe because they are reference-counted.
126
127 return mDescriptorCache;
128 }
129
isBinderAlive() const130 bool BpBinder::isBinderAlive() const
131 {
132 return mAlive != 0;
133 }
134
pingBinder()135 status_t BpBinder::pingBinder()
136 {
137 Parcel send;
138 Parcel reply;
139 status_t err = transact(PING_TRANSACTION, send, &reply);
140 if (err != NO_ERROR) return err;
141 if (reply.dataSize() < sizeof(status_t)) return NOT_ENOUGH_DATA;
142 return (status_t)reply.readInt32();
143 }
144
dump(int fd,const Vector<String16> & args)145 status_t BpBinder::dump(int fd, const Vector<String16>& args)
146 {
147 Parcel send;
148 Parcel reply;
149 send.writeFileDescriptor(fd);
150 const size_t numArgs = args.size();
151 send.writeInt32(numArgs);
152 for (size_t i = 0; i < numArgs; i++) {
153 send.writeString16(args[i]);
154 }
155 status_t err = transact(DUMP_TRANSACTION, send, &reply);
156 return err;
157 }
158
transact(uint32_t code,const Parcel & data,Parcel * reply,uint32_t flags)159 status_t BpBinder::transact(
160 uint32_t code, const Parcel& data, Parcel* reply, uint32_t flags)
161 {
162 // Once a binder has died, it will never come back to life.
163 if (mAlive) {
164 status_t status = IPCThreadState::self()->transact(
165 mHandle, code, data, reply, flags);
166 if (status == DEAD_OBJECT) mAlive = 0;
167 return status;
168 }
169
170 return DEAD_OBJECT;
171 }
172
linkToDeath(const sp<DeathRecipient> & recipient,void * cookie,uint32_t flags)173 status_t BpBinder::linkToDeath(
174 const sp<DeathRecipient>& recipient, void* cookie, uint32_t flags)
175 {
176 Obituary ob;
177 ob.recipient = recipient;
178 ob.cookie = cookie;
179 ob.flags = flags;
180
181 LOG_ALWAYS_FATAL_IF(recipient == NULL,
182 "linkToDeath(): recipient must be non-NULL");
183
184 {
185 AutoMutex _l(mLock);
186
187 if (!mObitsSent) {
188 if (!mObituaries) {
189 mObituaries = new Vector<Obituary>;
190 if (!mObituaries) {
191 return NO_MEMORY;
192 }
193 ALOGV("Requesting death notification: %p handle %d\n", this, mHandle);
194 getWeakRefs()->incWeak(this);
195 IPCThreadState* self = IPCThreadState::self();
196 self->requestDeathNotification(mHandle, this);
197 self->flushCommands();
198 }
199 ssize_t res = mObituaries->add(ob);
200 return res >= (ssize_t)NO_ERROR ? (status_t)NO_ERROR : res;
201 }
202 }
203
204 return DEAD_OBJECT;
205 }
206
unlinkToDeath(const wp<DeathRecipient> & recipient,void * cookie,uint32_t flags,wp<DeathRecipient> * outRecipient)207 status_t BpBinder::unlinkToDeath(
208 const wp<DeathRecipient>& recipient, void* cookie, uint32_t flags,
209 wp<DeathRecipient>* outRecipient)
210 {
211 AutoMutex _l(mLock);
212
213 if (mObitsSent) {
214 return DEAD_OBJECT;
215 }
216
217 const size_t N = mObituaries ? mObituaries->size() : 0;
218 for (size_t i=0; i<N; i++) {
219 const Obituary& obit = mObituaries->itemAt(i);
220 if ((obit.recipient == recipient
221 || (recipient == NULL && obit.cookie == cookie))
222 && obit.flags == flags) {
223 const uint32_t allFlags = obit.flags|flags;
224 if (outRecipient != NULL) {
225 *outRecipient = mObituaries->itemAt(i).recipient;
226 }
227 mObituaries->removeAt(i);
228 if (mObituaries->size() == 0) {
229 ALOGV("Clearing death notification: %p handle %d\n", this, mHandle);
230 IPCThreadState* self = IPCThreadState::self();
231 self->clearDeathNotification(mHandle, this);
232 self->flushCommands();
233 delete mObituaries;
234 mObituaries = NULL;
235 }
236 return NO_ERROR;
237 }
238 }
239
240 return NAME_NOT_FOUND;
241 }
242
sendObituary()243 void BpBinder::sendObituary()
244 {
245 ALOGV("Sending obituary for proxy %p handle %d, mObitsSent=%s\n",
246 this, mHandle, mObitsSent ? "true" : "false");
247
248 mAlive = 0;
249 if (mObitsSent) return;
250
251 mLock.lock();
252 Vector<Obituary>* obits = mObituaries;
253 if(obits != NULL) {
254 ALOGV("Clearing sent death notification: %p handle %d\n", this, mHandle);
255 IPCThreadState* self = IPCThreadState::self();
256 self->clearDeathNotification(mHandle, this);
257 self->flushCommands();
258 mObituaries = NULL;
259 }
260 mObitsSent = 1;
261 mLock.unlock();
262
263 ALOGV("Reporting death of proxy %p for %d recipients\n",
264 this, obits ? obits->size() : 0);
265
266 if (obits != NULL) {
267 const size_t N = obits->size();
268 for (size_t i=0; i<N; i++) {
269 reportOneDeath(obits->itemAt(i));
270 }
271
272 delete obits;
273 }
274 }
275
reportOneDeath(const Obituary & obit)276 void BpBinder::reportOneDeath(const Obituary& obit)
277 {
278 sp<DeathRecipient> recipient = obit.recipient.promote();
279 ALOGV("Reporting death to recipient: %p\n", recipient.get());
280 if (recipient == NULL) return;
281
282 recipient->binderDied(this);
283 }
284
285
attachObject(const void * objectID,void * object,void * cleanupCookie,object_cleanup_func func)286 void BpBinder::attachObject(
287 const void* objectID, void* object, void* cleanupCookie,
288 object_cleanup_func func)
289 {
290 AutoMutex _l(mLock);
291 ALOGV("Attaching object %p to binder %p (manager=%p)", object, this, &mObjects);
292 mObjects.attach(objectID, object, cleanupCookie, func);
293 }
294
findObject(const void * objectID) const295 void* BpBinder::findObject(const void* objectID) const
296 {
297 AutoMutex _l(mLock);
298 return mObjects.find(objectID);
299 }
300
detachObject(const void * objectID)301 void BpBinder::detachObject(const void* objectID)
302 {
303 AutoMutex _l(mLock);
304 mObjects.detach(objectID);
305 }
306
remoteBinder()307 BpBinder* BpBinder::remoteBinder()
308 {
309 return this;
310 }
311
~BpBinder()312 BpBinder::~BpBinder()
313 {
314 ALOGV("Destroying BpBinder %p handle %d\n", this, mHandle);
315
316 IPCThreadState* ipc = IPCThreadState::self();
317
318 mLock.lock();
319 Vector<Obituary>* obits = mObituaries;
320 if(obits != NULL) {
321 if (ipc) ipc->clearDeathNotification(mHandle, this);
322 mObituaries = NULL;
323 }
324 mLock.unlock();
325
326 if (obits != NULL) {
327 // XXX Should we tell any remaining DeathRecipient
328 // objects that the last strong ref has gone away, so they
329 // are no longer linked?
330 delete obits;
331 }
332
333 if (ipc) {
334 ipc->expungeHandle(mHandle, this);
335 ipc->decWeakHandle(mHandle);
336 }
337 }
338
onFirstRef()339 void BpBinder::onFirstRef()
340 {
341 ALOGV("onFirstRef BpBinder %p handle %d\n", this, mHandle);
342 IPCThreadState* ipc = IPCThreadState::self();
343 if (ipc) ipc->incStrongHandle(mHandle);
344 }
345
onLastStrongRef(const void * id)346 void BpBinder::onLastStrongRef(const void* id)
347 {
348 ALOGV("onLastStrongRef BpBinder %p handle %d\n", this, mHandle);
349 IF_ALOGV() {
350 printRefs();
351 }
352 IPCThreadState* ipc = IPCThreadState::self();
353 if (ipc) ipc->decStrongHandle(mHandle);
354 }
355
onIncStrongAttempted(uint32_t flags,const void * id)356 bool BpBinder::onIncStrongAttempted(uint32_t flags, const void* id)
357 {
358 ALOGV("onIncStrongAttempted BpBinder %p handle %d\n", this, mHandle);
359 IPCThreadState* ipc = IPCThreadState::self();
360 return ipc ? ipc->attemptIncStrongHandle(mHandle) == NO_ERROR : false;
361 }
362
363 // ---------------------------------------------------------------------------
364
365 }; // namespace android
366