| /* |
| * Copyright (C) 2012 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| package com.android.server.webkit; |
| |
| import android.content.BroadcastReceiver; |
| import android.content.Context; |
| import android.content.Intent; |
| import android.content.IntentFilter; |
| import android.content.pm.PackageInfo; |
| import android.content.pm.PackageManager; |
| import android.os.Binder; |
| import android.os.PatternMatcher; |
| import android.os.Process; |
| import android.os.ResultReceiver; |
| import android.os.ShellCallback; |
| import android.os.UserHandle; |
| import android.util.Slog; |
| import android.webkit.IWebViewUpdateService; |
| import android.webkit.WebViewProviderInfo; |
| import android.webkit.WebViewProviderResponse; |
| |
| import com.android.internal.util.DumpUtils; |
| import com.android.server.SystemService; |
| |
| import java.io.FileDescriptor; |
| import java.io.PrintWriter; |
| import java.util.Arrays; |
| |
| /** |
| * Private service to wait for the updatable WebView to be ready for use. |
| * @hide |
| */ |
| public class WebViewUpdateService extends SystemService { |
| |
| private static final String TAG = "WebViewUpdateService"; |
| |
| private BroadcastReceiver mWebViewUpdatedReceiver; |
| private WebViewUpdateServiceImpl mImpl; |
| |
| static final int PACKAGE_CHANGED = 0; |
| static final int PACKAGE_ADDED = 1; |
| static final int PACKAGE_ADDED_REPLACED = 2; |
| static final int PACKAGE_REMOVED = 3; |
| |
| public WebViewUpdateService(Context context) { |
| super(context); |
| mImpl = new WebViewUpdateServiceImpl(context, SystemImpl.getInstance()); |
| } |
| |
| @Override |
| public void onStart() { |
| mWebViewUpdatedReceiver = new BroadcastReceiver() { |
| @Override |
| public void onReceive(Context context, Intent intent) { |
| int userId = intent.getIntExtra(Intent.EXTRA_USER_HANDLE, UserHandle.USER_NULL); |
| switch (intent.getAction()) { |
| case Intent.ACTION_PACKAGE_REMOVED: |
| // When a package is replaced we will receive two intents, one |
| // representing the removal of the old package and one representing the |
| // addition of the new package. |
| // In the case where we receive an intent to remove the old version of |
| // the package that is being replaced we early-out here so that we don't |
| // run the update-logic twice. |
| if (intent.getExtras().getBoolean(Intent.EXTRA_REPLACING)) return; |
| mImpl.packageStateChanged(packageNameFromIntent(intent), |
| PACKAGE_REMOVED, userId); |
| break; |
| case Intent.ACTION_PACKAGE_CHANGED: |
| // Ensure that we only heed PACKAGE_CHANGED intents if they change an |
| // entire package, not just a component |
| if (entirePackageChanged(intent)) { |
| mImpl.packageStateChanged(packageNameFromIntent(intent), |
| PACKAGE_CHANGED, userId); |
| } |
| break; |
| case Intent.ACTION_PACKAGE_ADDED: |
| mImpl.packageStateChanged(packageNameFromIntent(intent), |
| (intent.getExtras().getBoolean(Intent.EXTRA_REPLACING) |
| ? PACKAGE_ADDED_REPLACED : PACKAGE_ADDED), userId); |
| break; |
| case Intent.ACTION_USER_ADDED: |
| mImpl.handleNewUser(userId); |
| break; |
| case Intent.ACTION_USER_REMOVED: |
| mImpl.handleUserRemoved(userId); |
| break; |
| } |
| } |
| }; |
| IntentFilter filter = new IntentFilter(); |
| filter.addAction(Intent.ACTION_PACKAGE_ADDED); |
| filter.addAction(Intent.ACTION_PACKAGE_REMOVED); |
| filter.addAction(Intent.ACTION_PACKAGE_CHANGED); |
| filter.addDataScheme("package"); |
| // Make sure we only receive intents for WebView packages from our config file. |
| for (WebViewProviderInfo provider : mImpl.getWebViewPackages()) { |
| filter.addDataSchemeSpecificPart(provider.packageName, PatternMatcher.PATTERN_LITERAL); |
| } |
| |
| getContext().registerReceiverAsUser(mWebViewUpdatedReceiver, UserHandle.ALL, filter, |
| null /* broadcast permission */, null /* handler */); |
| |
| IntentFilter userAddedFilter = new IntentFilter(); |
| userAddedFilter.addAction(Intent.ACTION_USER_ADDED); |
| userAddedFilter.addAction(Intent.ACTION_USER_REMOVED); |
| getContext().registerReceiverAsUser(mWebViewUpdatedReceiver, UserHandle.ALL, |
| userAddedFilter, null /* broadcast permission */, null /* handler */); |
| |
| publishBinderService("webviewupdate", new BinderService(), true /*allowIsolated*/); |
| } |
| |
| public void prepareWebViewInSystemServer() { |
| mImpl.prepareWebViewInSystemServer(); |
| } |
| |
| private static String packageNameFromIntent(Intent intent) { |
| return intent.getDataString().substring("package:".length()); |
| } |
| |
| /** |
| * Returns whether the entire package from an ACTION_PACKAGE_CHANGED intent was changed (rather |
| * than just one of its components). |
| * @hide |
| */ |
| public static boolean entirePackageChanged(Intent intent) { |
| String[] componentList = |
| intent.getStringArrayExtra(Intent.EXTRA_CHANGED_COMPONENT_NAME_LIST); |
| return Arrays.asList(componentList).contains( |
| intent.getDataString().substring("package:".length())); |
| } |
| |
| private class BinderService extends IWebViewUpdateService.Stub { |
| |
| @Override |
| public void onShellCommand(FileDescriptor in, FileDescriptor out, |
| FileDescriptor err, String[] args, ShellCallback callback, |
| ResultReceiver resultReceiver) { |
| (new WebViewUpdateServiceShellCommand(this)).exec( |
| this, in, out, err, args, callback, resultReceiver); |
| } |
| |
| |
| /** |
| * The shared relro process calls this to notify us that it's done trying to create a relro |
| * file. This method gets called even if the relro creation has failed or the process |
| * crashed. |
| */ |
| @Override // Binder call |
| public void notifyRelroCreationCompleted() { |
| // Verify that the caller is either the shared relro process (nominal case) or the |
| // system server (only in the case the relro process crashes and we get here via the |
| // crashHandler). |
| if (Binder.getCallingUid() != Process.SHARED_RELRO_UID && |
| Binder.getCallingUid() != Process.SYSTEM_UID) { |
| return; |
| } |
| |
| long callingId = Binder.clearCallingIdentity(); |
| try { |
| WebViewUpdateService.this.mImpl.notifyRelroCreationCompleted(); |
| } finally { |
| Binder.restoreCallingIdentity(callingId); |
| } |
| } |
| |
| /** |
| * WebViewFactory calls this to block WebView loading until the relro file is created. |
| * Returns the WebView provider for which we create relro files. |
| */ |
| @Override // Binder call |
| public WebViewProviderResponse waitForAndGetProvider() { |
| // The WebViewUpdateService depends on the prepareWebViewInSystemServer call, which |
| // happens later (during the PHASE_ACTIVITY_MANAGER_READY) in SystemServer.java. If |
| // another service there tries to bring up a WebView in the between, the wait below |
| // would deadlock without the check below. |
| if (Binder.getCallingPid() == Process.myPid()) { |
| throw new IllegalStateException("Cannot create a WebView from the SystemServer"); |
| } |
| |
| return WebViewUpdateService.this.mImpl.waitForAndGetProvider(); |
| } |
| |
| /** |
| * This is called from DeveloperSettings when the user changes WebView provider. |
| */ |
| @Override // Binder call |
| public String changeProviderAndSetting(String newProvider) { |
| if (getContext().checkCallingPermission( |
| android.Manifest.permission.WRITE_SECURE_SETTINGS) |
| != PackageManager.PERMISSION_GRANTED) { |
| String msg = "Permission Denial: changeProviderAndSetting() from pid=" |
| + Binder.getCallingPid() |
| + ", uid=" + Binder.getCallingUid() |
| + " requires " + android.Manifest.permission.WRITE_SECURE_SETTINGS; |
| Slog.w(TAG, msg); |
| throw new SecurityException(msg); |
| } |
| |
| long callingId = Binder.clearCallingIdentity(); |
| try { |
| return WebViewUpdateService.this.mImpl.changeProviderAndSetting( |
| newProvider); |
| } finally { |
| Binder.restoreCallingIdentity(callingId); |
| } |
| } |
| |
| @Override // Binder call |
| public WebViewProviderInfo[] getValidWebViewPackages() { |
| return WebViewUpdateService.this.mImpl.getValidWebViewPackages(); |
| } |
| |
| @Override // Binder call |
| public WebViewProviderInfo[] getAllWebViewPackages() { |
| return WebViewUpdateService.this.mImpl.getWebViewPackages(); |
| } |
| |
| @Override // Binder call |
| public String getCurrentWebViewPackageName() { |
| PackageInfo pi = WebViewUpdateService.this.mImpl.getCurrentWebViewPackage(); |
| return pi == null ? null : pi.packageName; |
| } |
| |
| @Override // Binder call |
| public PackageInfo getCurrentWebViewPackage() { |
| return WebViewUpdateService.this.mImpl.getCurrentWebViewPackage(); |
| } |
| |
| @Override // Binder call |
| public boolean isFallbackPackage(String packageName) { |
| return WebViewUpdateService.this.mImpl.isFallbackPackage(packageName); |
| } |
| |
| @Override // Binder call |
| public void enableFallbackLogic(boolean enable) { |
| if (getContext().checkCallingPermission( |
| android.Manifest.permission.WRITE_SECURE_SETTINGS) |
| != PackageManager.PERMISSION_GRANTED) { |
| String msg = "Permission Denial: enableFallbackLogic() from pid=" |
| + Binder.getCallingPid() |
| + ", uid=" + Binder.getCallingUid() |
| + " requires " + android.Manifest.permission.WRITE_SECURE_SETTINGS; |
| Slog.w(TAG, msg); |
| throw new SecurityException(msg); |
| } |
| |
| long callingId = Binder.clearCallingIdentity(); |
| try { |
| WebViewUpdateService.this.mImpl.enableFallbackLogic(enable); |
| } finally { |
| Binder.restoreCallingIdentity(callingId); |
| } |
| } |
| |
| @Override // Binder call |
| public boolean isMultiProcessEnabled() { |
| return WebViewUpdateService.this.mImpl.isMultiProcessEnabled(); |
| } |
| |
| @Override // Binder call |
| public void enableMultiProcess(boolean enable) { |
| if (getContext().checkCallingPermission( |
| android.Manifest.permission.WRITE_SECURE_SETTINGS) |
| != PackageManager.PERMISSION_GRANTED) { |
| String msg = "Permission Denial: enableMultiProcess() from pid=" |
| + Binder.getCallingPid() |
| + ", uid=" + Binder.getCallingUid() |
| + " requires " + android.Manifest.permission.WRITE_SECURE_SETTINGS; |
| Slog.w(TAG, msg); |
| throw new SecurityException(msg); |
| } |
| |
| long callingId = Binder.clearCallingIdentity(); |
| try { |
| WebViewUpdateService.this.mImpl.enableMultiProcess(enable); |
| } finally { |
| Binder.restoreCallingIdentity(callingId); |
| } |
| } |
| |
| @Override |
| protected void dump(FileDescriptor fd, PrintWriter pw, String[] args) { |
| if (!DumpUtils.checkDumpPermission(getContext(), TAG, pw)) return; |
| WebViewUpdateService.this.mImpl.dumpState(pw); |
| } |
| } |
| } |