blob: 9167076474ffa61ca657aff8cd53d0c82b9162ce [file] [log] [blame]
Narayan Kamath973b4662014-03-31 13:41:26 +01001/*
2 * Copyright (C) 2014 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17package com.android.internal.os;
18
19
Narayan Kamathfbb32f62015-06-12 15:34:35 +010020import android.os.Trace;
Narayan Kamath973b4662014-03-31 13:41:26 +010021import dalvik.system.ZygoteHooks;
Elliott Hughes860c5912014-04-28 19:19:13 -070022import android.system.ErrnoException;
23import android.system.Os;
Narayan Kamath973b4662014-03-31 13:41:26 +010024
Tobias Sargeantb9679dc2016-01-19 16:34:54 +000025import java.lang.reflect.InvocationTargetException;
26import java.lang.reflect.Method;
27
Narayan Kamath973b4662014-03-31 13:41:26 +010028/** @hide */
29public final class Zygote {
30 /*
Nicolas Geoffray81edac42017-09-07 14:13:29 +010031 * Bit values for "runtimeFlags" argument. The definitions are duplicated
Narayan Kamath973b4662014-03-31 13:41:26 +010032 * in the native code.
33 */
34
35 /** enable debugging over JDWP */
Nicolas Geoffray347b1df2016-12-20 14:05:05 +000036 public static final int DEBUG_ENABLE_JDWP = 1;
Narayan Kamath973b4662014-03-31 13:41:26 +010037 /** enable JNI checks */
38 public static final int DEBUG_ENABLE_CHECKJNI = 1 << 1;
39 /** enable Java programming language "assert" statements */
40 public static final int DEBUG_ENABLE_ASSERT = 1 << 2;
Mathieu Chartier7a490282015-03-17 09:51:36 -070041 /** disable the AOT compiler and JIT */
Narayan Kamath973b4662014-03-31 13:41:26 +010042 public static final int DEBUG_ENABLE_SAFEMODE = 1 << 3;
43 /** Enable logging of third-party JNI activity. */
44 public static final int DEBUG_ENABLE_JNI_LOGGING = 1 << 4;
David Srbecky065075e2015-05-28 17:16:09 +010045 /** Force generation of native debugging information. */
Nicolas Geoffray9abbf452015-11-05 11:29:42 +000046 public static final int DEBUG_GENERATE_DEBUG_INFO = 1 << 5;
Tamas Berghammerdf6cb282016-01-29 12:07:00 +000047 /** Always use JIT-ed code. */
48 public static final int DEBUG_ALWAYS_JIT = 1 << 6;
Nicolas Geoffray347b1df2016-12-20 14:05:05 +000049 /** Make the code native debuggable by turning off some optimizations. */
Tamas Berghammerdf6cb282016-01-29 12:07:00 +000050 public static final int DEBUG_NATIVE_DEBUGGABLE = 1 << 7;
Nicolas Geoffray347b1df2016-12-20 14:05:05 +000051 /** Make the code Java debuggable by turning off some optimizations. */
52 public static final int DEBUG_JAVA_DEBUGGABLE = 1 << 8;
Mathieu Chartier7a490282015-03-17 09:51:36 -070053
Nicolas Geoffray1f88ad62017-09-13 14:21:00 +010054 /** Turn off the verifier. */
55 public static final int DISABLE_VERIFIER = 1 << 9;
56 /** Only use oat files located in /system. Otherwise use dex/jar/apk . */
57 public static final int ONLY_USE_SYSTEM_OAT_FILES = 1 << 10;
58
Narayan Kamath973b4662014-03-31 13:41:26 +010059 /** No external storage should be mounted. */
60 public static final int MOUNT_EXTERNAL_NONE = 0;
Jeff Sharkey9527b222015-06-24 15:24:48 -070061 /** Default external storage should be mounted. */
Jeff Sharkey48877892015-03-18 11:27:19 -070062 public static final int MOUNT_EXTERNAL_DEFAULT = 1;
Jeff Sharkey9527b222015-06-24 15:24:48 -070063 /** Read-only external storage should be mounted. */
64 public static final int MOUNT_EXTERNAL_READ = 2;
65 /** Read-write external storage should be mounted. */
66 public static final int MOUNT_EXTERNAL_WRITE = 3;
Narayan Kamath973b4662014-03-31 13:41:26 +010067
68 private static final ZygoteHooks VM_HOOKS = new ZygoteHooks();
69
70 private Zygote() {}
71
Victor Hsiehc8176ef2018-01-08 12:43:00 -080072 /** Called for some security initialization before any fork. */
73 native static void nativeSecurityInit();
74
Narayan Kamath973b4662014-03-31 13:41:26 +010075 /**
76 * Forks a new VM instance. The current VM must have been started
77 * with the -Xzygote flag. <b>NOTE: new instance keeps all
78 * root capabilities. The new process is expected to call capset()</b>.
79 *
80 * @param uid the UNIX uid that the new process should setuid() to after
81 * fork()ing and and before spawning any threads.
82 * @param gid the UNIX gid that the new process should setgid() to after
83 * fork()ing and and before spawning any threads.
84 * @param gids null-ok; a list of UNIX gids that the new process should
85 * setgroups() to after fork and before spawning any threads.
Nicolas Geoffray81edac42017-09-07 14:13:29 +010086 * @param runtimeFlags bit flags that enable ART features.
Narayan Kamath973b4662014-03-31 13:41:26 +010087 * @param rlimits null-ok an array of rlimit tuples, with the second
88 * dimension having a length of 3 and representing
89 * (resource, rlim_cur, rlim_max). These are set via the posix
90 * setrlimit(2) call.
91 * @param seInfo null-ok a string specifying SELinux information for
92 * the new process.
93 * @param niceName null-ok a string specifying the process name.
94 * @param fdsToClose an array of ints, holding one or more POSIX
95 * file descriptor numbers that are to be closed by the child
96 * (and replaced by /dev/null) after forking. An integer value
97 * of -1 in any entry in the array means "ignore this one".
Andreas Gampe8dfa1782017-01-05 12:45:58 -080098 * @param fdsToIgnore null-ok an array of ints, either null or holding
99 * one or more POSIX file descriptor numbers that are to be ignored
100 * in the file descriptor table check.
Andreas Gampeaec67dc2014-09-02 21:23:06 -0700101 * @param instructionSet null-ok the instruction set to use.
jgu212eacd062014-09-10 06:55:07 -0400102 * @param appDataDir null-ok the data directory of the app.
Narayan Kamath973b4662014-03-31 13:41:26 +0100103 *
104 * @return 0 if this is the child, pid of the child
105 * if this is the parent, or -1 on error.
106 */
Nicolas Geoffray81edac42017-09-07 14:13:29 +0100107 public static int forkAndSpecialize(int uid, int gid, int[] gids, int runtimeFlags,
Andreas Gampeaec67dc2014-09-02 21:23:06 -0700108 int[][] rlimits, int mountExternal, String seInfo, String niceName, int[] fdsToClose,
Andreas Gampe8dfa1782017-01-05 12:45:58 -0800109 int[] fdsToIgnore, String instructionSet, String appDataDir) {
Narayan Kamath973b4662014-03-31 13:41:26 +0100110 VM_HOOKS.preFork();
Hiroshi Yamauchi1e3db872017-03-02 13:39:07 -0800111 // Resets nice priority for zygote process.
112 resetNicePriority();
Narayan Kamath973b4662014-03-31 13:41:26 +0100113 int pid = nativeForkAndSpecialize(
Nicolas Geoffray81edac42017-09-07 14:13:29 +0100114 uid, gid, gids, runtimeFlags, rlimits, mountExternal, seInfo, niceName, fdsToClose,
Andreas Gampe8dfa1782017-01-05 12:45:58 -0800115 fdsToIgnore, instructionSet, appDataDir);
Narayan Kamathfbb32f62015-06-12 15:34:35 +0100116 // Enable tracing as soon as possible for the child process.
117 if (pid == 0) {
Nicolas Geoffray1bf40f62017-09-13 12:59:21 +0100118 Trace.setTracingEnabled(true, runtimeFlags);
Narayan Kamathfbb32f62015-06-12 15:34:35 +0100119
120 // Note that this event ends at the end of handleChildProc,
121 Trace.traceBegin(Trace.TRACE_TAG_ACTIVITY_MANAGER, "PostFork");
122 }
Narayan Kamath973b4662014-03-31 13:41:26 +0100123 VM_HOOKS.postForkCommon();
124 return pid;
125 }
126
Nicolas Geoffray81edac42017-09-07 14:13:29 +0100127 native private static int nativeForkAndSpecialize(int uid, int gid, int[] gids,int runtimeFlags,
Andreas Gampeaec67dc2014-09-02 21:23:06 -0700128 int[][] rlimits, int mountExternal, String seInfo, String niceName, int[] fdsToClose,
Andreas Gampe8dfa1782017-01-05 12:45:58 -0800129 int[] fdsToIgnore, String instructionSet, String appDataDir);
Narayan Kamath973b4662014-03-31 13:41:26 +0100130
131 /**
Christopher Ferris76de39e2017-06-20 16:13:40 -0700132 * Called to do any initialization before starting an application.
133 */
134 native static void nativePreApplicationInit();
135
136 /**
Narayan Kamath973b4662014-03-31 13:41:26 +0100137 * Special method to start the system server process. In addition to the
138 * common actions performed in forkAndSpecialize, the pid of the child
139 * process is recorded such that the death of the child process will cause
140 * zygote to exit.
141 *
142 * @param uid the UNIX uid that the new process should setuid() to after
143 * fork()ing and and before spawning any threads.
144 * @param gid the UNIX gid that the new process should setgid() to after
145 * fork()ing and and before spawning any threads.
146 * @param gids null-ok; a list of UNIX gids that the new process should
147 * setgroups() to after fork and before spawning any threads.
Nicolas Geoffray81edac42017-09-07 14:13:29 +0100148 * @param runtimeFlags bit flags that enable ART features.
Narayan Kamath973b4662014-03-31 13:41:26 +0100149 * @param rlimits null-ok an array of rlimit tuples, with the second
150 * dimension having a length of 3 and representing
151 * (resource, rlim_cur, rlim_max). These are set via the posix
152 * setrlimit(2) call.
153 * @param permittedCapabilities argument for setcap()
154 * @param effectiveCapabilities argument for setcap()
155 *
156 * @return 0 if this is the child, pid of the child
157 * if this is the parent, or -1 on error.
158 */
Nicolas Geoffray81edac42017-09-07 14:13:29 +0100159 public static int forkSystemServer(int uid, int gid, int[] gids, int runtimeFlags,
Narayan Kamath973b4662014-03-31 13:41:26 +0100160 int[][] rlimits, long permittedCapabilities, long effectiveCapabilities) {
161 VM_HOOKS.preFork();
Hiroshi Yamauchi1e3db872017-03-02 13:39:07 -0800162 // Resets nice priority for zygote process.
163 resetNicePriority();
Narayan Kamath973b4662014-03-31 13:41:26 +0100164 int pid = nativeForkSystemServer(
Nicolas Geoffray81edac42017-09-07 14:13:29 +0100165 uid, gid, gids, runtimeFlags, rlimits, permittedCapabilities, effectiveCapabilities);
Narayan Kamathfbb32f62015-06-12 15:34:35 +0100166 // Enable tracing as soon as we enter the system_server.
167 if (pid == 0) {
Nicolas Geoffray1bf40f62017-09-13 12:59:21 +0100168 Trace.setTracingEnabled(true, runtimeFlags);
Narayan Kamathfbb32f62015-06-12 15:34:35 +0100169 }
Narayan Kamath973b4662014-03-31 13:41:26 +0100170 VM_HOOKS.postForkCommon();
171 return pid;
172 }
173
Nicolas Geoffray81edac42017-09-07 14:13:29 +0100174 native private static int nativeForkSystemServer(int uid, int gid, int[] gids, int runtimeFlags,
Narayan Kamath973b4662014-03-31 13:41:26 +0100175 int[][] rlimits, long permittedCapabilities, long effectiveCapabilities);
176
doheon1.lee885b7422016-01-20 13:07:27 +0900177 /**
Robert Sesek54e387d2016-12-02 17:27:50 -0500178 * Lets children of the zygote inherit open file descriptors to this path.
179 */
180 native protected static void nativeAllowFileAcrossFork(String path);
181
182 /**
doheon1.lee885b7422016-01-20 13:07:27 +0900183 * Zygote unmount storage space on initializing.
184 * This method is called once.
185 */
186 native protected static void nativeUnmountStorageOnInit();
187
Nicolas Geoffray81edac42017-09-07 14:13:29 +0100188 private static void callPostForkChildHooks(int runtimeFlags, boolean isSystemServer,
Nicolas Geoffray3c43b382015-12-11 15:01:04 +0000189 String instructionSet) {
Nicolas Geoffray81edac42017-09-07 14:13:29 +0100190 VM_HOOKS.postForkChild(runtimeFlags, isSystemServer, instructionSet);
Narayan Kamath973b4662014-03-31 13:41:26 +0100191 }
192
Narayan Kamathb49996d2017-02-06 20:24:08 +0000193 /**
Hiroshi Yamauchi1e3db872017-03-02 13:39:07 -0800194 * Resets the calling thread priority to the default value (Thread.NORM_PRIORITY
195 * or nice value 0). This updates both the priority value in java.lang.Thread and
196 * the nice value (setpriority).
Narayan Kamathb49996d2017-02-06 20:24:08 +0000197 */
Hiroshi Yamauchi1e3db872017-03-02 13:39:07 -0800198 static void resetNicePriority() {
199 Thread.currentThread().setPriority(Thread.NORM_PRIORITY);
200 }
Narayan Kamath973b4662014-03-31 13:41:26 +0100201
202 /**
203 * Executes "/system/bin/sh -c &lt;command&gt;" using the exec() system call.
204 * This method throws a runtime exception if exec() failed, otherwise, this
205 * method never returns.
206 *
207 * @param command The shell command to execute.
208 */
209 public static void execShell(String command) {
210 String[] args = { "/system/bin/sh", "-c", command };
211 try {
Elliott Hughes860c5912014-04-28 19:19:13 -0700212 Os.execv(args[0], args);
Narayan Kamath973b4662014-03-31 13:41:26 +0100213 } catch (ErrnoException e) {
214 throw new RuntimeException(e);
215 }
216 }
217
218 /**
219 * Appends quotes shell arguments to the specified string builder.
220 * The arguments are quoted using single-quotes, escaped if necessary,
221 * prefixed with a space, and appended to the command.
222 *
223 * @param command A string builder for the shell command being constructed.
224 * @param args An array of argument strings to be quoted and appended to the command.
225 * @see #execShell(String)
226 */
227 public static void appendQuotedShellArgs(StringBuilder command, String[] args) {
228 for (String arg : args) {
229 command.append(" '").append(arg.replace("'", "'\\''")).append("'");
230 }
231 }
Narayan Kamath973b4662014-03-31 13:41:26 +0100232}