• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  * Copyright (C) 2016 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License
15  */
16 
17 package com.android.server.am;
18 
19 import com.android.internal.app.ProcessMap;
20 import com.android.internal.logging.MetricsLogger;
21 import com.android.internal.logging.MetricsProto;
22 import com.android.internal.os.ProcessCpuTracker;
23 import com.android.server.Watchdog;
24 
25 import android.app.Activity;
26 import android.app.ActivityManager;
27 import android.app.ActivityOptions;
28 import android.app.ActivityThread;
29 import android.app.AppOpsManager;
30 import android.app.ApplicationErrorReport;
31 import android.app.Dialog;
32 import android.content.ActivityNotFoundException;
33 import android.content.Context;
34 import android.content.Intent;
35 import android.content.pm.ApplicationInfo;
36 import android.content.pm.IPackageDataObserver;
37 import android.content.pm.PackageManager;
38 import android.os.Binder;
39 import android.os.Bundle;
40 import android.os.Message;
41 import android.os.Process;
42 import android.os.RemoteException;
43 import android.os.SystemClock;
44 import android.os.SystemProperties;
45 import android.os.UserHandle;
46 import android.provider.Settings;
47 import android.util.ArrayMap;
48 import android.util.ArraySet;
49 import android.util.EventLog;
50 import android.util.Log;
51 import android.util.Slog;
52 import android.util.SparseArray;
53 import android.util.TimeUtils;
54 
55 import java.io.File;
56 import java.io.FileDescriptor;
57 import java.io.PrintWriter;
58 import java.util.ArrayList;
59 import java.util.Collections;
60 import java.util.HashMap;
61 import java.util.Set;
62 import java.util.concurrent.Semaphore;
63 
64 import static com.android.server.Watchdog.NATIVE_STACKS_OF_INTEREST;
65 import static com.android.server.am.ActivityManagerDebugConfig.DEBUG_ANR;
66 import static com.android.server.am.ActivityManagerDebugConfig.TAG_AM;
67 import static com.android.server.am.ActivityManagerDebugConfig.TAG_WITH_CLASS_NAME;
68 import static com.android.server.am.ActivityManagerService.MY_PID;
69 import static com.android.server.am.ActivityManagerService.SYSTEM_DEBUGGABLE;
70 
71 /**
72  * Controls error conditions in applications.
73  */
74 class AppErrors {
75 
76     private static final String TAG = TAG_WITH_CLASS_NAME ? "AppErrors" : TAG_AM;
77 
78     private final ActivityManagerService mService;
79     private final Context mContext;
80 
81     private ArraySet<String> mAppsNotReportingCrashes;
82 
83     /**
84      * The last time that various processes have crashed since they were last explicitly started.
85      */
86     private final ProcessMap<Long> mProcessCrashTimes = new ProcessMap<>();
87 
88     /**
89      * The last time that various processes have crashed (not reset even when explicitly started).
90      */
91     private final ProcessMap<Long> mProcessCrashTimesPersistent = new ProcessMap<>();
92 
93     /**
94      * Set of applications that we consider to be bad, and will reject
95      * incoming broadcasts from (which the user has no control over).
96      * Processes are added to this set when they have crashed twice within
97      * a minimum amount of time; they are removed from it when they are
98      * later restarted (hopefully due to some user action).  The value is the
99      * time it was added to the list.
100      */
101     private final ProcessMap<BadProcessInfo> mBadProcesses = new ProcessMap<>();
102 
103 
AppErrors(Context context, ActivityManagerService service)104     AppErrors(Context context, ActivityManagerService service) {
105         mService = service;
106         mContext = context;
107     }
108 
dumpLocked(FileDescriptor fd, PrintWriter pw, boolean needSep, String dumpPackage)109     boolean dumpLocked(FileDescriptor fd, PrintWriter pw, boolean needSep,
110             String dumpPackage) {
111         if (!mProcessCrashTimes.getMap().isEmpty()) {
112             boolean printed = false;
113             final long now = SystemClock.uptimeMillis();
114             final ArrayMap<String, SparseArray<Long>> pmap = mProcessCrashTimes.getMap();
115             final int processCount = pmap.size();
116             for (int ip = 0; ip < processCount; ip++) {
117                 final String pname = pmap.keyAt(ip);
118                 final SparseArray<Long> uids = pmap.valueAt(ip);
119                 final int uidCount = uids.size();
120                 for (int i = 0; i < uidCount; i++) {
121                     final int puid = uids.keyAt(i);
122                     final ProcessRecord r = mService.mProcessNames.get(pname, puid);
123                     if (dumpPackage != null && (r == null
124                             || !r.pkgList.containsKey(dumpPackage))) {
125                         continue;
126                     }
127                     if (!printed) {
128                         if (needSep) pw.println();
129                         needSep = true;
130                         pw.println("  Time since processes crashed:");
131                         printed = true;
132                     }
133                     pw.print("    Process "); pw.print(pname);
134                     pw.print(" uid "); pw.print(puid);
135                     pw.print(": last crashed ");
136                     TimeUtils.formatDuration(now-uids.valueAt(i), pw);
137                     pw.println(" ago");
138                 }
139             }
140         }
141 
142         if (!mBadProcesses.getMap().isEmpty()) {
143             boolean printed = false;
144             final ArrayMap<String, SparseArray<BadProcessInfo>> pmap = mBadProcesses.getMap();
145             final int processCount = pmap.size();
146             for (int ip = 0; ip < processCount; ip++) {
147                 final String pname = pmap.keyAt(ip);
148                 final SparseArray<BadProcessInfo> uids = pmap.valueAt(ip);
149                 final int uidCount = uids.size();
150                 for (int i = 0; i < uidCount; i++) {
151                     final int puid = uids.keyAt(i);
152                     final ProcessRecord r = mService.mProcessNames.get(pname, puid);
153                     if (dumpPackage != null && (r == null
154                             || !r.pkgList.containsKey(dumpPackage))) {
155                         continue;
156                     }
157                     if (!printed) {
158                         if (needSep) pw.println();
159                         needSep = true;
160                         pw.println("  Bad processes:");
161                         printed = true;
162                     }
163                     final BadProcessInfo info = uids.valueAt(i);
164                     pw.print("    Bad process "); pw.print(pname);
165                     pw.print(" uid "); pw.print(puid);
166                     pw.print(": crashed at time "); pw.println(info.time);
167                     if (info.shortMsg != null) {
168                         pw.print("      Short msg: "); pw.println(info.shortMsg);
169                     }
170                     if (info.longMsg != null) {
171                         pw.print("      Long msg: "); pw.println(info.longMsg);
172                     }
173                     if (info.stack != null) {
174                         pw.println("      Stack:");
175                         int lastPos = 0;
176                         for (int pos = 0; pos < info.stack.length(); pos++) {
177                             if (info.stack.charAt(pos) == '\n') {
178                                 pw.print("        ");
179                                 pw.write(info.stack, lastPos, pos-lastPos);
180                                 pw.println();
181                                 lastPos = pos+1;
182                             }
183                         }
184                         if (lastPos < info.stack.length()) {
185                             pw.print("        ");
186                             pw.write(info.stack, lastPos, info.stack.length()-lastPos);
187                             pw.println();
188                         }
189                     }
190                 }
191             }
192         }
193         return needSep;
194     }
195 
isBadProcessLocked(ApplicationInfo info)196     boolean isBadProcessLocked(ApplicationInfo info) {
197         return mBadProcesses.get(info.processName, info.uid) != null;
198     }
199 
clearBadProcessLocked(ApplicationInfo info)200     void clearBadProcessLocked(ApplicationInfo info) {
201         mBadProcesses.remove(info.processName, info.uid);
202     }
203 
resetProcessCrashTimeLocked(ApplicationInfo info)204     void resetProcessCrashTimeLocked(ApplicationInfo info) {
205         mProcessCrashTimes.remove(info.processName, info.uid);
206     }
207 
resetProcessCrashTimeLocked(boolean resetEntireUser, int appId, int userId)208     void resetProcessCrashTimeLocked(boolean resetEntireUser, int appId, int userId) {
209         final ArrayMap<String, SparseArray<Long>> pmap = mProcessCrashTimes.getMap();
210         for (int ip = pmap.size() - 1; ip >= 0; ip--) {
211             SparseArray<Long> ba = pmap.valueAt(ip);
212             for (int i = ba.size() - 1; i >= 0; i--) {
213                 boolean remove = false;
214                 final int entUid = ba.keyAt(i);
215                 if (!resetEntireUser) {
216                     if (userId == UserHandle.USER_ALL) {
217                         if (UserHandle.getAppId(entUid) == appId) {
218                             remove = true;
219                         }
220                     } else {
221                         if (entUid == UserHandle.getUid(userId, appId)) {
222                             remove = true;
223                         }
224                     }
225                 } else if (UserHandle.getUserId(entUid) == userId) {
226                     remove = true;
227                 }
228                 if (remove) {
229                     ba.removeAt(i);
230                 }
231             }
232             if (ba.size() == 0) {
233                 pmap.removeAt(ip);
234             }
235         }
236     }
237 
loadAppsNotReportingCrashesFromConfigLocked(String appsNotReportingCrashesConfig)238     void loadAppsNotReportingCrashesFromConfigLocked(String appsNotReportingCrashesConfig) {
239         if (appsNotReportingCrashesConfig != null) {
240             final String[] split = appsNotReportingCrashesConfig.split(",");
241             if (split.length > 0) {
242                 mAppsNotReportingCrashes = new ArraySet<>();
243                 Collections.addAll(mAppsNotReportingCrashes, split);
244             }
245         }
246     }
247 
killAppAtUserRequestLocked(ProcessRecord app, Dialog fromDialog)248     void killAppAtUserRequestLocked(ProcessRecord app, Dialog fromDialog) {
249         app.crashing = false;
250         app.crashingReport = null;
251         app.notResponding = false;
252         app.notRespondingReport = null;
253         if (app.anrDialog == fromDialog) {
254             app.anrDialog = null;
255         }
256         if (app.waitDialog == fromDialog) {
257             app.waitDialog = null;
258         }
259         if (app.pid > 0 && app.pid != MY_PID) {
260             handleAppCrashLocked(app, "user-terminated" /*reason*/,
261                     null /*shortMsg*/, null /*longMsg*/, null /*stackTrace*/, null /*data*/);
262             app.kill("user request after error", true);
263         }
264     }
265 
scheduleAppCrashLocked(int uid, int initialPid, String packageName, String message)266     void scheduleAppCrashLocked(int uid, int initialPid, String packageName,
267             String message) {
268         ProcessRecord proc = null;
269 
270         // Figure out which process to kill.  We don't trust that initialPid
271         // still has any relation to current pids, so must scan through the
272         // list.
273 
274         synchronized (mService.mPidsSelfLocked) {
275             for (int i=0; i<mService.mPidsSelfLocked.size(); i++) {
276                 ProcessRecord p = mService.mPidsSelfLocked.valueAt(i);
277                 if (p.uid != uid) {
278                     continue;
279                 }
280                 if (p.pid == initialPid) {
281                     proc = p;
282                     break;
283                 }
284                 if (p.pkgList.containsKey(packageName)) {
285                     proc = p;
286                 }
287             }
288         }
289 
290         if (proc == null) {
291             Slog.w(TAG, "crashApplication: nothing for uid=" + uid
292                     + " initialPid=" + initialPid
293                     + " packageName=" + packageName);
294             return;
295         }
296 
297         proc.scheduleCrash(message);
298     }
299 
300     /**
301      * Bring up the "unexpected error" dialog box for a crashing app.
302      * Deal with edge cases (intercepts from instrumented applications,
303      * ActivityController, error intent receivers, that sort of thing).
304      * @param r the application crashing
305      * @param crashInfo describing the failure
306      */
crashApplication(ProcessRecord r, ApplicationErrorReport.CrashInfo crashInfo)307     void crashApplication(ProcessRecord r, ApplicationErrorReport.CrashInfo crashInfo) {
308         final long origId = Binder.clearCallingIdentity();
309         try {
310             crashApplicationInner(r, crashInfo);
311         } finally {
312             Binder.restoreCallingIdentity(origId);
313         }
314     }
315 
crashApplicationInner(ProcessRecord r, ApplicationErrorReport.CrashInfo crashInfo)316     void crashApplicationInner(ProcessRecord r, ApplicationErrorReport.CrashInfo crashInfo) {
317         long timeMillis = System.currentTimeMillis();
318         String shortMsg = crashInfo.exceptionClassName;
319         String longMsg = crashInfo.exceptionMessage;
320         String stackTrace = crashInfo.stackTrace;
321         if (shortMsg != null && longMsg != null) {
322             longMsg = shortMsg + ": " + longMsg;
323         } else if (shortMsg != null) {
324             longMsg = shortMsg;
325         }
326 
327         AppErrorResult result = new AppErrorResult();
328         TaskRecord task;
329         synchronized (mService) {
330             /**
331              * If crash is handled by instance of {@link android.app.IActivityController},
332              * finish now and don't show the app error dialog.
333              */
334             if (handleAppCrashInActivityController(r, crashInfo, shortMsg, longMsg, stackTrace,
335                     timeMillis)) {
336                 return;
337             }
338 
339             /**
340              * If this process was running instrumentation, finish now - it will be handled in
341              * {@link ActivityManagerService#handleAppDiedLocked}.
342              */
343             if (r != null && r.instrumentationClass != null) {
344                 return;
345             }
346 
347             // Log crash in battery stats.
348             if (r != null) {
349                 mService.mBatteryStatsService.noteProcessCrash(r.processName, r.uid);
350             }
351 
352             AppErrorDialog.Data data = new AppErrorDialog.Data();
353             data.result = result;
354             data.proc = r;
355 
356             // If we can't identify the process or it's already exceeded its crash quota,
357             // quit right away without showing a crash dialog.
358             if (r == null || !makeAppCrashingLocked(r, shortMsg, longMsg, stackTrace, data)) {
359                 return;
360             }
361 
362             Message msg = Message.obtain();
363             msg.what = ActivityManagerService.SHOW_ERROR_UI_MSG;
364 
365             task = data.task;
366             msg.obj = data;
367             mService.mUiHandler.sendMessage(msg);
368         }
369 
370         int res = result.get();
371 
372         Intent appErrorIntent = null;
373         MetricsLogger.action(mContext, MetricsProto.MetricsEvent.ACTION_APP_CRASH, res);
374         if (res == AppErrorDialog.TIMEOUT || res == AppErrorDialog.CANCEL) {
375             res = AppErrorDialog.FORCE_QUIT;
376         }
377         synchronized (mService) {
378             if (res == AppErrorDialog.MUTE) {
379                 stopReportingCrashesLocked(r);
380             }
381             if (res == AppErrorDialog.RESTART) {
382                 mService.removeProcessLocked(r, false, true, "crash");
383                 if (task != null) {
384                     try {
385                         mService.startActivityFromRecents(task.taskId,
386                                 ActivityOptions.makeBasic().toBundle());
387                     } catch (IllegalArgumentException e) {
388                         // Hmm, that didn't work, app might have crashed before creating a
389                         // recents entry. Let's see if we have a safe-to-restart intent.
390                         final Set<String> cats = task.intent.getCategories();
391                         if (cats != null && cats.contains(Intent.CATEGORY_LAUNCHER)) {
392                             mService.startActivityInPackage(task.mCallingUid,
393                                     task.mCallingPackage, task.intent,
394                                     null, null, null, 0, 0,
395                                     ActivityOptions.makeBasic().toBundle(),
396                                     task.userId, null, null);
397                         }
398                     }
399                 }
400             }
401             if (res == AppErrorDialog.FORCE_QUIT) {
402                 long orig = Binder.clearCallingIdentity();
403                 try {
404                     // Kill it with fire!
405                     mService.mStackSupervisor.handleAppCrashLocked(r);
406                     if (!r.persistent) {
407                         mService.removeProcessLocked(r, false, false, "crash");
408                         mService.mStackSupervisor.resumeFocusedStackTopActivityLocked();
409                     }
410                 } finally {
411                     Binder.restoreCallingIdentity(orig);
412                 }
413             }
414             if (res == AppErrorDialog.FORCE_QUIT_AND_REPORT) {
415                 appErrorIntent = createAppErrorIntentLocked(r, timeMillis, crashInfo);
416             }
417             if (r != null && !r.isolated && res != AppErrorDialog.RESTART) {
418                 // XXX Can't keep track of crash time for isolated processes,
419                 // since they don't have a persistent identity.
420                 mProcessCrashTimes.put(r.info.processName, r.uid,
421                         SystemClock.uptimeMillis());
422             }
423         }
424 
425         if (appErrorIntent != null) {
426             try {
427                 mContext.startActivityAsUser(appErrorIntent, new UserHandle(r.userId));
428             } catch (ActivityNotFoundException e) {
429                 Slog.w(TAG, "bug report receiver dissappeared", e);
430             }
431         }
432     }
433 
handleAppCrashInActivityController(ProcessRecord r, ApplicationErrorReport.CrashInfo crashInfo, String shortMsg, String longMsg, String stackTrace, long timeMillis)434     private boolean handleAppCrashInActivityController(ProcessRecord r,
435                                                        ApplicationErrorReport.CrashInfo crashInfo,
436                                                        String shortMsg, String longMsg,
437                                                        String stackTrace, long timeMillis) {
438         if (mService.mController == null) {
439             return false;
440         }
441 
442         try {
443             String name = r != null ? r.processName : null;
444             int pid = r != null ? r.pid : Binder.getCallingPid();
445             int uid = r != null ? r.info.uid : Binder.getCallingUid();
446             if (!mService.mController.appCrashed(name, pid,
447                     shortMsg, longMsg, timeMillis, crashInfo.stackTrace)) {
448                 if ("1".equals(SystemProperties.get(SYSTEM_DEBUGGABLE, "0"))
449                         && "Native crash".equals(crashInfo.exceptionClassName)) {
450                     Slog.w(TAG, "Skip killing native crashed app " + name
451                             + "(" + pid + ") during testing");
452                 } else {
453                     Slog.w(TAG, "Force-killing crashed app " + name
454                             + " at watcher's request");
455                     if (r != null) {
456                         if (!makeAppCrashingLocked(r, shortMsg, longMsg, stackTrace, null))
457                         {
458                             r.kill("crash", true);
459                         }
460                     } else {
461                         // Huh.
462                         Process.killProcess(pid);
463                         ActivityManagerService.killProcessGroup(uid, pid);
464                     }
465                 }
466                 return true;
467             }
468         } catch (RemoteException e) {
469             mService.mController = null;
470             Watchdog.getInstance().setActivityController(null);
471         }
472         return false;
473     }
474 
makeAppCrashingLocked(ProcessRecord app, String shortMsg, String longMsg, String stackTrace, AppErrorDialog.Data data)475     private boolean makeAppCrashingLocked(ProcessRecord app,
476             String shortMsg, String longMsg, String stackTrace, AppErrorDialog.Data data) {
477         app.crashing = true;
478         app.crashingReport = generateProcessError(app,
479                 ActivityManager.ProcessErrorStateInfo.CRASHED, null, shortMsg, longMsg, stackTrace);
480         startAppProblemLocked(app);
481         app.stopFreezingAllLocked();
482         return handleAppCrashLocked(app, "force-crash" /*reason*/, shortMsg, longMsg, stackTrace,
483                 data);
484     }
485 
startAppProblemLocked(ProcessRecord app)486     void startAppProblemLocked(ProcessRecord app) {
487         // If this app is not running under the current user, then we
488         // can't give it a report button because that would require
489         // launching the report UI under a different user.
490         app.errorReportReceiver = null;
491 
492         for (int userId : mService.mUserController.getCurrentProfileIdsLocked()) {
493             if (app.userId == userId) {
494                 app.errorReportReceiver = ApplicationErrorReport.getErrorReportReceiver(
495                         mContext, app.info.packageName, app.info.flags);
496             }
497         }
498         mService.skipCurrentReceiverLocked(app);
499     }
500 
501     /**
502      * Generate a process error record, suitable for attachment to a ProcessRecord.
503      *
504      * @param app The ProcessRecord in which the error occurred.
505      * @param condition Crashing, Application Not Responding, etc.  Values are defined in
506      *                      ActivityManager.AppErrorStateInfo
507      * @param activity The activity associated with the crash, if known.
508      * @param shortMsg Short message describing the crash.
509      * @param longMsg Long message describing the crash.
510      * @param stackTrace Full crash stack trace, may be null.
511      *
512      * @return Returns a fully-formed AppErrorStateInfo record.
513      */
generateProcessError(ProcessRecord app, int condition, String activity, String shortMsg, String longMsg, String stackTrace)514     private ActivityManager.ProcessErrorStateInfo generateProcessError(ProcessRecord app,
515             int condition, String activity, String shortMsg, String longMsg, String stackTrace) {
516         ActivityManager.ProcessErrorStateInfo report = new ActivityManager.ProcessErrorStateInfo();
517 
518         report.condition = condition;
519         report.processName = app.processName;
520         report.pid = app.pid;
521         report.uid = app.info.uid;
522         report.tag = activity;
523         report.shortMsg = shortMsg;
524         report.longMsg = longMsg;
525         report.stackTrace = stackTrace;
526 
527         return report;
528     }
529 
createAppErrorIntentLocked(ProcessRecord r, long timeMillis, ApplicationErrorReport.CrashInfo crashInfo)530     Intent createAppErrorIntentLocked(ProcessRecord r,
531             long timeMillis, ApplicationErrorReport.CrashInfo crashInfo) {
532         ApplicationErrorReport report = createAppErrorReportLocked(r, timeMillis, crashInfo);
533         if (report == null) {
534             return null;
535         }
536         Intent result = new Intent(Intent.ACTION_APP_ERROR);
537         result.setComponent(r.errorReportReceiver);
538         result.putExtra(Intent.EXTRA_BUG_REPORT, report);
539         result.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
540         return result;
541     }
542 
createAppErrorReportLocked(ProcessRecord r, long timeMillis, ApplicationErrorReport.CrashInfo crashInfo)543     private ApplicationErrorReport createAppErrorReportLocked(ProcessRecord r,
544             long timeMillis, ApplicationErrorReport.CrashInfo crashInfo) {
545         if (r.errorReportReceiver == null) {
546             return null;
547         }
548 
549         if (!r.crashing && !r.notResponding && !r.forceCrashReport) {
550             return null;
551         }
552 
553         ApplicationErrorReport report = new ApplicationErrorReport();
554         report.packageName = r.info.packageName;
555         report.installerPackageName = r.errorReportReceiver.getPackageName();
556         report.processName = r.processName;
557         report.time = timeMillis;
558         report.systemApp = (r.info.flags & ApplicationInfo.FLAG_SYSTEM) != 0;
559 
560         if (r.crashing || r.forceCrashReport) {
561             report.type = ApplicationErrorReport.TYPE_CRASH;
562             report.crashInfo = crashInfo;
563         } else if (r.notResponding) {
564             report.type = ApplicationErrorReport.TYPE_ANR;
565             report.anrInfo = new ApplicationErrorReport.AnrInfo();
566 
567             report.anrInfo.activity = r.notRespondingReport.tag;
568             report.anrInfo.cause = r.notRespondingReport.shortMsg;
569             report.anrInfo.info = r.notRespondingReport.longMsg;
570         }
571 
572         return report;
573     }
574 
handleAppCrashLocked(ProcessRecord app, String reason, String shortMsg, String longMsg, String stackTrace, AppErrorDialog.Data data)575     boolean handleAppCrashLocked(ProcessRecord app, String reason,
576             String shortMsg, String longMsg, String stackTrace, AppErrorDialog.Data data) {
577         long now = SystemClock.uptimeMillis();
578 
579         Long crashTime;
580         Long crashTimePersistent;
581         if (!app.isolated) {
582             crashTime = mProcessCrashTimes.get(app.info.processName, app.uid);
583             crashTimePersistent = mProcessCrashTimesPersistent.get(app.info.processName, app.uid);
584         } else {
585             crashTime = crashTimePersistent = null;
586         }
587         if (crashTime != null && now < crashTime+ProcessList.MIN_CRASH_INTERVAL) {
588             // This process loses!
589             Slog.w(TAG, "Process " + app.info.processName
590                     + " has crashed too many times: killing!");
591             EventLog.writeEvent(EventLogTags.AM_PROCESS_CRASHED_TOO_MUCH,
592                     app.userId, app.info.processName, app.uid);
593             mService.mStackSupervisor.handleAppCrashLocked(app);
594             if (!app.persistent) {
595                 // We don't want to start this process again until the user
596                 // explicitly does so...  but for persistent process, we really
597                 // need to keep it running.  If a persistent process is actually
598                 // repeatedly crashing, then badness for everyone.
599                 EventLog.writeEvent(EventLogTags.AM_PROC_BAD, app.userId, app.uid,
600                         app.info.processName);
601                 if (!app.isolated) {
602                     // XXX We don't have a way to mark isolated processes
603                     // as bad, since they don't have a peristent identity.
604                     mBadProcesses.put(app.info.processName, app.uid,
605                             new BadProcessInfo(now, shortMsg, longMsg, stackTrace));
606                     mProcessCrashTimes.remove(app.info.processName, app.uid);
607                 }
608                 app.bad = true;
609                 app.removed = true;
610                 // Don't let services in this process be restarted and potentially
611                 // annoy the user repeatedly.  Unless it is persistent, since those
612                 // processes run critical code.
613                 mService.removeProcessLocked(app, false, false, "crash");
614                 mService.mStackSupervisor.resumeFocusedStackTopActivityLocked();
615                 return false;
616             }
617             mService.mStackSupervisor.resumeFocusedStackTopActivityLocked();
618         } else {
619             TaskRecord affectedTask =
620                     mService.mStackSupervisor.finishTopRunningActivityLocked(app, reason);
621             if (data != null) {
622                 data.task = affectedTask;
623             }
624             if (data != null && crashTimePersistent != null
625                     && now < crashTimePersistent + ProcessList.MIN_CRASH_INTERVAL) {
626                 data.repeating = true;
627             }
628         }
629 
630         boolean procIsBoundForeground =
631                 (app.curProcState == ActivityManager.PROCESS_STATE_BOUND_FOREGROUND_SERVICE);
632         // Bump up the crash count of any services currently running in the proc.
633         for (int i=app.services.size()-1; i>=0; i--) {
634             // Any services running in the application need to be placed
635             // back in the pending list.
636             ServiceRecord sr = app.services.valueAt(i);
637             sr.crashCount++;
638 
639             // Allow restarting for started or bound foreground services that are crashing the
640             // first time. This includes wallpapers.
641             if ((data != null) && (sr.crashCount <= 1)
642                     && (sr.isForeground || procIsBoundForeground)) {
643                 data.isRestartableForService = true;
644             }
645         }
646 
647         // If the crashing process is what we consider to be the "home process" and it has been
648         // replaced by a third-party app, clear the package preferred activities from packages
649         // with a home activity running in the process to prevent a repeatedly crashing app
650         // from blocking the user to manually clear the list.
651         final ArrayList<ActivityRecord> activities = app.activities;
652         if (app == mService.mHomeProcess && activities.size() > 0
653                 && (mService.mHomeProcess.info.flags & ApplicationInfo.FLAG_SYSTEM) == 0) {
654             for (int activityNdx = activities.size() - 1; activityNdx >= 0; --activityNdx) {
655                 final ActivityRecord r = activities.get(activityNdx);
656                 if (r.isHomeActivity()) {
657                     Log.i(TAG, "Clearing package preferred activities from " + r.packageName);
658                     try {
659                         ActivityThread.getPackageManager()
660                                 .clearPackagePreferredActivities(r.packageName);
661                     } catch (RemoteException c) {
662                         // pm is in same process, this will never happen.
663                     }
664                 }
665             }
666         }
667 
668         if (!app.isolated) {
669             // XXX Can't keep track of crash times for isolated processes,
670             // because they don't have a perisistent identity.
671             mProcessCrashTimes.put(app.info.processName, app.uid, now);
672             mProcessCrashTimesPersistent.put(app.info.processName, app.uid, now);
673         }
674 
675         if (app.crashHandler != null) mService.mHandler.post(app.crashHandler);
676         return true;
677     }
678 
handleShowAppErrorUi(Message msg)679     void handleShowAppErrorUi(Message msg) {
680         AppErrorDialog.Data data = (AppErrorDialog.Data) msg.obj;
681         boolean showBackground = Settings.Secure.getInt(mContext.getContentResolver(),
682                 Settings.Secure.ANR_SHOW_BACKGROUND, 0) != 0;
683         synchronized (mService) {
684             ProcessRecord proc = data.proc;
685             AppErrorResult res = data.result;
686             if (proc != null && proc.crashDialog != null) {
687                 Slog.e(TAG, "App already has crash dialog: " + proc);
688                 if (res != null) {
689                     res.set(AppErrorDialog.ALREADY_SHOWING);
690                 }
691                 return;
692             }
693             boolean isBackground = (UserHandle.getAppId(proc.uid)
694                     >= Process.FIRST_APPLICATION_UID
695                     && proc.pid != MY_PID);
696             for (int userId : mService.mUserController.getCurrentProfileIdsLocked()) {
697                 isBackground &= (proc.userId != userId);
698             }
699             if (isBackground && !showBackground) {
700                 Slog.w(TAG, "Skipping crash dialog of " + proc + ": background");
701                 if (res != null) {
702                     res.set(AppErrorDialog.BACKGROUND_USER);
703                 }
704                 return;
705             }
706             final boolean crashSilenced = mAppsNotReportingCrashes != null &&
707                     mAppsNotReportingCrashes.contains(proc.info.packageName);
708             if (mService.canShowErrorDialogs() && !crashSilenced) {
709                 proc.crashDialog = new AppErrorDialog(mContext, mService, data);
710             } else {
711                 // The device is asleep, so just pretend that the user
712                 // saw a crash dialog and hit "force quit".
713                 if (res != null) {
714                     res.set(AppErrorDialog.CANT_SHOW);
715                 }
716             }
717         }
718         // If we've created a crash dialog, show it without the lock held
719         if(data.proc.crashDialog != null) {
720             data.proc.crashDialog.show();
721         }
722     }
723 
stopReportingCrashesLocked(ProcessRecord proc)724     void stopReportingCrashesLocked(ProcessRecord proc) {
725         if (mAppsNotReportingCrashes == null) {
726             mAppsNotReportingCrashes = new ArraySet<>();
727         }
728         mAppsNotReportingCrashes.add(proc.info.packageName);
729     }
730 
appNotResponding(ProcessRecord app, ActivityRecord activity, ActivityRecord parent, boolean aboveSystem, final String annotation)731     final void appNotResponding(ProcessRecord app, ActivityRecord activity,
732             ActivityRecord parent, boolean aboveSystem, final String annotation) {
733         ArrayList<Integer> firstPids = new ArrayList<Integer>(5);
734         SparseArray<Boolean> lastPids = new SparseArray<Boolean>(20);
735 
736         if (mService.mController != null) {
737             try {
738                 // 0 == continue, -1 = kill process immediately
739                 int res = mService.mController.appEarlyNotResponding(
740                         app.processName, app.pid, annotation);
741                 if (res < 0 && app.pid != MY_PID) {
742                     app.kill("anr", true);
743                 }
744             } catch (RemoteException e) {
745                 mService.mController = null;
746                 Watchdog.getInstance().setActivityController(null);
747             }
748         }
749 
750         long anrTime = SystemClock.uptimeMillis();
751         if (ActivityManagerService.MONITOR_CPU_USAGE) {
752             mService.updateCpuStatsNow();
753         }
754 
755         // Unless configured otherwise, swallow ANRs in background processes & kill the process.
756         boolean showBackground = Settings.Secure.getInt(mContext.getContentResolver(),
757                 Settings.Secure.ANR_SHOW_BACKGROUND, 0) != 0;
758 
759         boolean isSilentANR;
760 
761         synchronized (mService) {
762             // PowerManager.reboot() can block for a long time, so ignore ANRs while shutting down.
763             if (mService.mShuttingDown) {
764                 Slog.i(TAG, "During shutdown skipping ANR: " + app + " " + annotation);
765                 return;
766             } else if (app.notResponding) {
767                 Slog.i(TAG, "Skipping duplicate ANR: " + app + " " + annotation);
768                 return;
769             } else if (app.crashing) {
770                 Slog.i(TAG, "Crashing app skipping ANR: " + app + " " + annotation);
771                 return;
772             }
773 
774             // In case we come through here for the same app before completing
775             // this one, mark as anring now so we will bail out.
776             app.notResponding = true;
777 
778             // Log the ANR to the event log.
779             EventLog.writeEvent(EventLogTags.AM_ANR, app.userId, app.pid,
780                     app.processName, app.info.flags, annotation);
781 
782             // Dump thread traces as quickly as we can, starting with "interesting" processes.
783             firstPids.add(app.pid);
784 
785             // Don't dump other PIDs if it's a background ANR
786             isSilentANR = !showBackground && !app.isInterestingToUserLocked() && app.pid != MY_PID;
787             if (!isSilentANR) {
788                 int parentPid = app.pid;
789                 if (parent != null && parent.app != null && parent.app.pid > 0) {
790                     parentPid = parent.app.pid;
791                 }
792                 if (parentPid != app.pid) firstPids.add(parentPid);
793 
794                 if (MY_PID != app.pid && MY_PID != parentPid) firstPids.add(MY_PID);
795 
796                 for (int i = mService.mLruProcesses.size() - 1; i >= 0; i--) {
797                     ProcessRecord r = mService.mLruProcesses.get(i);
798                     if (r != null && r.thread != null) {
799                         int pid = r.pid;
800                         if (pid > 0 && pid != app.pid && pid != parentPid && pid != MY_PID) {
801                             if (r.persistent) {
802                                 firstPids.add(pid);
803                                 if (DEBUG_ANR) Slog.i(TAG, "Adding persistent proc: " + r);
804                             } else {
805                                 lastPids.put(pid, Boolean.TRUE);
806                                 if (DEBUG_ANR) Slog.i(TAG, "Adding ANR proc: " + r);
807                             }
808                         }
809                     }
810                 }
811             }
812         }
813 
814         // Log the ANR to the main log.
815         StringBuilder info = new StringBuilder();
816         info.setLength(0);
817         info.append("ANR in ").append(app.processName);
818         if (activity != null && activity.shortComponentName != null) {
819             info.append(" (").append(activity.shortComponentName).append(")");
820         }
821         info.append("\n");
822         info.append("PID: ").append(app.pid).append("\n");
823         if (annotation != null) {
824             info.append("Reason: ").append(annotation).append("\n");
825         }
826         if (parent != null && parent != activity) {
827             info.append("Parent: ").append(parent.shortComponentName).append("\n");
828         }
829 
830         ProcessCpuTracker processCpuTracker = new ProcessCpuTracker(true);
831 
832         String[] nativeProcs = NATIVE_STACKS_OF_INTEREST;
833         // don't dump native PIDs for background ANRs
834         File tracesFile = null;
835         if (isSilentANR) {
836             tracesFile = mService.dumpStackTraces(true, firstPids, null, lastPids,
837                 null);
838         } else {
839             tracesFile = mService.dumpStackTraces(true, firstPids, processCpuTracker, lastPids,
840                 nativeProcs);
841         }
842 
843         String cpuInfo = null;
844         if (ActivityManagerService.MONITOR_CPU_USAGE) {
845             mService.updateCpuStatsNow();
846             synchronized (mService.mProcessCpuTracker) {
847                 cpuInfo = mService.mProcessCpuTracker.printCurrentState(anrTime);
848             }
849             info.append(processCpuTracker.printCurrentLoad());
850             info.append(cpuInfo);
851         }
852 
853         info.append(processCpuTracker.printCurrentState(anrTime));
854 
855         Slog.e(TAG, info.toString());
856         if (tracesFile == null) {
857             // There is no trace file, so dump (only) the alleged culprit's threads to the log
858             Process.sendSignal(app.pid, Process.SIGNAL_QUIT);
859         }
860 
861         mService.addErrorToDropBox("anr", app, app.processName, activity, parent, annotation,
862                 cpuInfo, tracesFile, null);
863 
864         if (mService.mController != null) {
865             try {
866                 // 0 == show dialog, 1 = keep waiting, -1 = kill process immediately
867                 int res = mService.mController.appNotResponding(
868                         app.processName, app.pid, info.toString());
869                 if (res != 0) {
870                     if (res < 0 && app.pid != MY_PID) {
871                         app.kill("anr", true);
872                     } else {
873                         synchronized (mService) {
874                             mService.mServices.scheduleServiceTimeoutLocked(app);
875                         }
876                     }
877                     return;
878                 }
879             } catch (RemoteException e) {
880                 mService.mController = null;
881                 Watchdog.getInstance().setActivityController(null);
882             }
883         }
884 
885         synchronized (mService) {
886             mService.mBatteryStatsService.noteProcessAnr(app.processName, app.uid);
887 
888             if (isSilentANR) {
889                 app.kill("bg anr", true);
890                 return;
891             }
892 
893             // Set the app's notResponding state, and look up the errorReportReceiver
894             makeAppNotRespondingLocked(app,
895                     activity != null ? activity.shortComponentName : null,
896                     annotation != null ? "ANR " + annotation : "ANR",
897                     info.toString());
898 
899             // Bring up the infamous App Not Responding dialog
900             Message msg = Message.obtain();
901             HashMap<String, Object> map = new HashMap<String, Object>();
902             msg.what = ActivityManagerService.SHOW_NOT_RESPONDING_UI_MSG;
903             msg.obj = map;
904             msg.arg1 = aboveSystem ? 1 : 0;
905             map.put("app", app);
906             if (activity != null) {
907                 map.put("activity", activity);
908             }
909 
910             mService.mUiHandler.sendMessage(msg);
911         }
912     }
913 
makeAppNotRespondingLocked(ProcessRecord app, String activity, String shortMsg, String longMsg)914     private void makeAppNotRespondingLocked(ProcessRecord app,
915             String activity, String shortMsg, String longMsg) {
916         app.notResponding = true;
917         app.notRespondingReport = generateProcessError(app,
918                 ActivityManager.ProcessErrorStateInfo.NOT_RESPONDING,
919                 activity, shortMsg, longMsg, null);
920         startAppProblemLocked(app);
921         app.stopFreezingAllLocked();
922     }
923 
handleShowAnrUi(Message msg)924     void handleShowAnrUi(Message msg) {
925         Dialog d = null;
926         synchronized (mService) {
927             HashMap<String, Object> data = (HashMap<String, Object>) msg.obj;
928             ProcessRecord proc = (ProcessRecord)data.get("app");
929             if (proc != null && proc.anrDialog != null) {
930                 Slog.e(TAG, "App already has anr dialog: " + proc);
931                 MetricsLogger.action(mContext, MetricsProto.MetricsEvent.ACTION_APP_ANR,
932                         AppNotRespondingDialog.ALREADY_SHOWING);
933                 return;
934             }
935 
936             Intent intent = new Intent("android.intent.action.ANR");
937             if (!mService.mProcessesReady) {
938                 intent.addFlags(Intent.FLAG_RECEIVER_REGISTERED_ONLY
939                         | Intent.FLAG_RECEIVER_FOREGROUND);
940             }
941             mService.broadcastIntentLocked(null, null, intent,
942                     null, null, 0, null, null, null, AppOpsManager.OP_NONE,
943                     null, false, false, MY_PID, Process.SYSTEM_UID, 0 /* TODO: Verify */);
944 
945             if (mService.canShowErrorDialogs()) {
946                 d = new AppNotRespondingDialog(mService,
947                         mContext, proc, (ActivityRecord)data.get("activity"),
948                         msg.arg1 != 0);
949                 proc.anrDialog = d;
950             } else {
951                 MetricsLogger.action(mContext, MetricsProto.MetricsEvent.ACTION_APP_ANR,
952                         AppNotRespondingDialog.CANT_SHOW);
953                 // Just kill the app if there is no dialog to be shown.
954                 mService.killAppAtUsersRequest(proc, null);
955             }
956         }
957         // If we've created a crash dialog, show it without the lock held
958         if (d != null) {
959             d.show();
960         }
961     }
962 
963     /**
964      * Information about a process that is currently marked as bad.
965      */
966     static final class BadProcessInfo {
BadProcessInfo(long time, String shortMsg, String longMsg, String stack)967         BadProcessInfo(long time, String shortMsg, String longMsg, String stack) {
968             this.time = time;
969             this.shortMsg = shortMsg;
970             this.longMsg = longMsg;
971             this.stack = stack;
972         }
973 
974         final long time;
975         final String shortMsg;
976         final String longMsg;
977         final String stack;
978     }
979 
980 }
981