The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2005 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
| 17 | #define LOG_TAG "BpBinder" |
| 18 | //#define LOG_NDEBUG 0 |
| 19 | |
Mathias Agopian | c5b2c0b | 2009-05-19 19:08:10 -0700 | [diff] [blame] | 20 | #include <binder/BpBinder.h> |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 21 | |
Mathias Agopian | c5b2c0b | 2009-05-19 19:08:10 -0700 | [diff] [blame] | 22 | #include <binder/IPCThreadState.h> |
Dianne Hackborn | 23eb1e2 | 2015-10-07 17:35:27 -0700 | [diff] [blame] | 23 | #include <binder/IResultReceiver.h> |
Steven Moreland | 6e5a775 | 2019-08-05 20:30:14 -0700 | [diff] [blame] | 24 | #include <binder/Stability.h> |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 25 | #include <cutils/compiler.h> |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 26 | #include <utils/Log.h> |
| 27 | |
| 28 | #include <stdio.h> |
| 29 | |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 30 | //#undef ALOGV |
| 31 | //#define ALOGV(...) fprintf(stderr, __VA_ARGS__) |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 32 | |
| 33 | namespace android { |
| 34 | |
| 35 | // --------------------------------------------------------------------------- |
| 36 | |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 37 | Mutex BpBinder::sTrackingLock; |
| 38 | std::unordered_map<int32_t,uint32_t> BpBinder::sTrackingMap; |
| 39 | int BpBinder::sNumTrackedUids = 0; |
| 40 | std::atomic_bool BpBinder::sCountByUidEnabled(false); |
| 41 | binder_proxy_limit_callback BpBinder::sLimitCallback; |
| 42 | bool BpBinder::sBinderProxyThrottleCreate = false; |
| 43 | |
| 44 | // Arbitrarily high value that probably distinguishes a bad behaving app |
| 45 | uint32_t BpBinder::sBinderProxyCountHighWatermark = 2500; |
| 46 | // Another arbitrary value a binder count needs to drop below before another callback will be called |
| 47 | uint32_t BpBinder::sBinderProxyCountLowWatermark = 2000; |
| 48 | |
| 49 | enum { |
Michael Wachenschwanz | 74d967a | 2018-05-15 15:03:57 -0700 | [diff] [blame] | 50 | LIMIT_REACHED_MASK = 0x80000000, // A flag denoting that the limit has been reached |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 51 | COUNTING_VALUE_MASK = 0x7FFFFFFF, // A mask of the remaining bits for the count value |
| 52 | }; |
| 53 | |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 54 | BpBinder::ObjectManager::ObjectManager() |
| 55 | { |
| 56 | } |
| 57 | |
| 58 | BpBinder::ObjectManager::~ObjectManager() |
| 59 | { |
| 60 | kill(); |
| 61 | } |
| 62 | |
| 63 | void BpBinder::ObjectManager::attach( |
| 64 | const void* objectID, void* object, void* cleanupCookie, |
| 65 | IBinder::object_cleanup_func func) |
| 66 | { |
| 67 | entry_t e; |
| 68 | e.object = object; |
| 69 | e.cleanupCookie = cleanupCookie; |
| 70 | e.func = func; |
| 71 | |
| 72 | if (mObjects.indexOfKey(objectID) >= 0) { |
Steve Block | e6f43dd | 2012-01-06 19:20:56 +0000 | [diff] [blame] | 73 | ALOGE("Trying to attach object ID %p to binder ObjectManager %p with object %p, but object ID already in use", |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 74 | objectID, this, object); |
| 75 | return; |
| 76 | } |
| 77 | |
| 78 | mObjects.add(objectID, e); |
| 79 | } |
| 80 | |
| 81 | void* BpBinder::ObjectManager::find(const void* objectID) const |
| 82 | { |
| 83 | const ssize_t i = mObjects.indexOfKey(objectID); |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 84 | if (i < 0) return nullptr; |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 85 | return mObjects.valueAt(i).object; |
| 86 | } |
| 87 | |
| 88 | void BpBinder::ObjectManager::detach(const void* objectID) |
| 89 | { |
| 90 | mObjects.removeItem(objectID); |
| 91 | } |
| 92 | |
| 93 | void BpBinder::ObjectManager::kill() |
| 94 | { |
| 95 | const size_t N = mObjects.size(); |
Mark Salyzyn | d4ecccf | 2014-05-30 16:35:57 -0700 | [diff] [blame] | 96 | ALOGV("Killing %zu objects in manager %p", N, this); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 97 | for (size_t i=0; i<N; i++) { |
| 98 | const entry_t& e = mObjects.valueAt(i); |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 99 | if (e.func != nullptr) { |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 100 | e.func(mObjects.keyAt(i), e.object, e.cleanupCookie); |
| 101 | } |
| 102 | } |
| 103 | |
| 104 | mObjects.clear(); |
| 105 | } |
| 106 | |
| 107 | // --------------------------------------------------------------------------- |
| 108 | |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 109 | |
| 110 | BpBinder* BpBinder::create(int32_t handle) { |
| 111 | int32_t trackedUid = -1; |
| 112 | if (sCountByUidEnabled) { |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 113 | trackedUid = IPCThreadState::self()->getCallingUid(); |
| 114 | AutoMutex _l(sTrackingLock); |
Michael Wachenschwanz | 74d967a | 2018-05-15 15:03:57 -0700 | [diff] [blame] | 115 | uint32_t trackedValue = sTrackingMap[trackedUid]; |
| 116 | if (CC_UNLIKELY(trackedValue & LIMIT_REACHED_MASK)) { |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 117 | if (sBinderProxyThrottleCreate) { |
Michael Wachenschwanz | 74d967a | 2018-05-15 15:03:57 -0700 | [diff] [blame] | 118 | return nullptr; |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 119 | } |
| 120 | } else { |
Michael Wachenschwanz | 74d967a | 2018-05-15 15:03:57 -0700 | [diff] [blame] | 121 | if ((trackedValue & COUNTING_VALUE_MASK) >= sBinderProxyCountHighWatermark) { |
| 122 | ALOGE("Too many binder proxy objects sent to uid %d from uid %d (%d proxies held)", |
| 123 | getuid(), trackedUid, trackedValue); |
| 124 | sTrackingMap[trackedUid] |= LIMIT_REACHED_MASK; |
| 125 | if (sLimitCallback) sLimitCallback(trackedUid); |
| 126 | if (sBinderProxyThrottleCreate) { |
| 127 | ALOGI("Throttling binder proxy creates from uid %d in uid %d until binder proxy" |
| 128 | " count drops below %d", |
| 129 | trackedUid, getuid(), sBinderProxyCountLowWatermark); |
| 130 | return nullptr; |
| 131 | } |
| 132 | } |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 133 | } |
Michael Wachenschwanz | 74d967a | 2018-05-15 15:03:57 -0700 | [diff] [blame] | 134 | sTrackingMap[trackedUid]++; |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 135 | } |
Michael Wachenschwanz | 74d967a | 2018-05-15 15:03:57 -0700 | [diff] [blame] | 136 | return new BpBinder(handle, trackedUid); |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 137 | } |
| 138 | |
| 139 | BpBinder::BpBinder(int32_t handle, int32_t trackedUid) |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 140 | : mHandle(handle) |
Steven Moreland | a7fb018 | 2020-02-26 16:02:08 -0800 | [diff] [blame] | 141 | , mStability(0) |
Steven Moreland | 06074d8 | 2020-03-05 23:16:51 +0000 | [diff] [blame] | 142 | , mAlive(1) |
| 143 | , mObitsSent(0) |
Steven Moreland | 76c0aa4 | 2020-02-26 16:22:58 -0800 | [diff] [blame] | 144 | , mObituaries(nullptr) |
Steven Moreland | 06074d8 | 2020-03-05 23:16:51 +0000 | [diff] [blame] | 145 | , mTrackedUid(trackedUid) |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 146 | { |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 147 | ALOGV("Creating BpBinder %p handle %d\n", this, mHandle); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 148 | |
| 149 | extendObjectLifetime(OBJECT_LIFETIME_WEAK); |
Martijn Coenen | 7c170bb | 2018-05-04 17:28:55 -0700 | [diff] [blame] | 150 | IPCThreadState::self()->incWeakHandle(handle, this); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 151 | } |
| 152 | |
Steven Moreland | 85180c0 | 2019-07-16 14:24:20 -0700 | [diff] [blame] | 153 | int32_t BpBinder::handle() const { |
| 154 | return mHandle; |
| 155 | } |
| 156 | |
Mathias Agopian | 83c0446 | 2009-05-22 19:00:22 -0700 | [diff] [blame] | 157 | bool BpBinder::isDescriptorCached() const { |
| 158 | Mutex::Autolock _l(mLock); |
| 159 | return mDescriptorCache.size() ? true : false; |
| 160 | } |
| 161 | |
| 162 | const String16& BpBinder::getInterfaceDescriptor() const |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 163 | { |
Mathias Agopian | 83c0446 | 2009-05-22 19:00:22 -0700 | [diff] [blame] | 164 | if (isDescriptorCached() == false) { |
| 165 | Parcel send, reply; |
| 166 | // do the IPC without a lock held. |
| 167 | status_t err = const_cast<BpBinder*>(this)->transact( |
| 168 | INTERFACE_TRANSACTION, send, &reply); |
| 169 | if (err == NO_ERROR) { |
| 170 | String16 res(reply.readString16()); |
| 171 | Mutex::Autolock _l(mLock); |
| 172 | // mDescriptorCache could have been assigned while the lock was |
| 173 | // released. |
| 174 | if (mDescriptorCache.size() == 0) |
| 175 | mDescriptorCache = res; |
| 176 | } |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 177 | } |
Mark Salyzyn | d4ecccf | 2014-05-30 16:35:57 -0700 | [diff] [blame] | 178 | |
Mathias Agopian | 83c0446 | 2009-05-22 19:00:22 -0700 | [diff] [blame] | 179 | // we're returning a reference to a non-static object here. Usually this |
Mark Salyzyn | d4ecccf | 2014-05-30 16:35:57 -0700 | [diff] [blame] | 180 | // is not something smart to do, however, with binder objects it is |
Mathias Agopian | 83c0446 | 2009-05-22 19:00:22 -0700 | [diff] [blame] | 181 | // (usually) safe because they are reference-counted. |
Mark Salyzyn | d4ecccf | 2014-05-30 16:35:57 -0700 | [diff] [blame] | 182 | |
Mathias Agopian | 83c0446 | 2009-05-22 19:00:22 -0700 | [diff] [blame] | 183 | return mDescriptorCache; |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 184 | } |
| 185 | |
| 186 | bool BpBinder::isBinderAlive() const |
| 187 | { |
Steven Moreland | 06074d8 | 2020-03-05 23:16:51 +0000 | [diff] [blame] | 188 | return mAlive != 0; |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 189 | } |
| 190 | |
| 191 | status_t BpBinder::pingBinder() |
| 192 | { |
| 193 | Parcel send; |
| 194 | Parcel reply; |
Steven Moreland | 6e69d65 | 2019-07-10 14:17:55 -0700 | [diff] [blame] | 195 | return transact(PING_TRANSACTION, send, &reply); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 196 | } |
| 197 | |
| 198 | status_t BpBinder::dump(int fd, const Vector<String16>& args) |
| 199 | { |
| 200 | Parcel send; |
| 201 | Parcel reply; |
| 202 | send.writeFileDescriptor(fd); |
| 203 | const size_t numArgs = args.size(); |
| 204 | send.writeInt32(numArgs); |
| 205 | for (size_t i = 0; i < numArgs; i++) { |
| 206 | send.writeString16(args[i]); |
| 207 | } |
| 208 | status_t err = transact(DUMP_TRANSACTION, send, &reply); |
| 209 | return err; |
| 210 | } |
| 211 | |
Jiyong Park | b86c866 | 2018-10-29 23:01:57 +0900 | [diff] [blame] | 212 | // NOLINTNEXTLINE(google-default-arguments) |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 213 | status_t BpBinder::transact( |
| 214 | uint32_t code, const Parcel& data, Parcel* reply, uint32_t flags) |
| 215 | { |
| 216 | // Once a binder has died, it will never come back to life. |
| 217 | if (mAlive) { |
Steven Moreland | 46b5fea | 2019-10-15 11:22:18 -0700 | [diff] [blame] | 218 | bool privateVendor = flags & FLAG_PRIVATE_VENDOR; |
| 219 | // don't send userspace flags to the kernel |
| 220 | flags = flags & ~FLAG_PRIVATE_VENDOR; |
| 221 | |
Steven Moreland | 6e5a775 | 2019-08-05 20:30:14 -0700 | [diff] [blame] | 222 | // user transactions require a given stability level |
| 223 | if (code >= FIRST_CALL_TRANSACTION && code <= LAST_CALL_TRANSACTION) { |
| 224 | using android::internal::Stability; |
| 225 | |
| 226 | auto stability = Stability::get(this); |
Steven Moreland | 2f2c4e0 | 2020-07-28 18:11:21 +0000 | [diff] [blame] | 227 | auto required = privateVendor ? Stability::VENDOR : Stability::getLocalStability(); |
Steven Moreland | 6e5a775 | 2019-08-05 20:30:14 -0700 | [diff] [blame] | 228 | |
Steven Moreland | 46b5fea | 2019-10-15 11:22:18 -0700 | [diff] [blame] | 229 | if (CC_UNLIKELY(!Stability::check(stability, required))) { |
Steven Moreland | 86a17f8 | 2019-09-10 10:18:00 -0700 | [diff] [blame] | 230 | ALOGE("Cannot do a user transaction on a %s binder in a %s context.", |
| 231 | Stability::stabilityString(stability).c_str(), |
Steven Moreland | 46b5fea | 2019-10-15 11:22:18 -0700 | [diff] [blame] | 232 | Stability::stabilityString(required).c_str()); |
Steven Moreland | 6e5a775 | 2019-08-05 20:30:14 -0700 | [diff] [blame] | 233 | return BAD_TYPE; |
| 234 | } |
| 235 | } |
| 236 | |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 237 | status_t status = IPCThreadState::self()->transact( |
| 238 | mHandle, code, data, reply, flags); |
Steven Moreland | 06074d8 | 2020-03-05 23:16:51 +0000 | [diff] [blame] | 239 | if (status == DEAD_OBJECT) mAlive = 0; |
Steven Moreland | a86a356 | 2019-08-01 23:28:34 +0000 | [diff] [blame] | 240 | |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 241 | return status; |
| 242 | } |
| 243 | |
| 244 | return DEAD_OBJECT; |
| 245 | } |
| 246 | |
Jiyong Park | b86c866 | 2018-10-29 23:01:57 +0900 | [diff] [blame] | 247 | // NOLINTNEXTLINE(google-default-arguments) |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 248 | status_t BpBinder::linkToDeath( |
| 249 | const sp<DeathRecipient>& recipient, void* cookie, uint32_t flags) |
| 250 | { |
| 251 | Obituary ob; |
| 252 | ob.recipient = recipient; |
| 253 | ob.cookie = cookie; |
| 254 | ob.flags = flags; |
| 255 | |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 256 | LOG_ALWAYS_FATAL_IF(recipient == nullptr, |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 257 | "linkToDeath(): recipient must be non-NULL"); |
| 258 | |
| 259 | { |
| 260 | AutoMutex _l(mLock); |
| 261 | |
| 262 | if (!mObitsSent) { |
| 263 | if (!mObituaries) { |
| 264 | mObituaries = new Vector<Obituary>; |
| 265 | if (!mObituaries) { |
| 266 | return NO_MEMORY; |
| 267 | } |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 268 | ALOGV("Requesting death notification: %p handle %d\n", this, mHandle); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 269 | getWeakRefs()->incWeak(this); |
| 270 | IPCThreadState* self = IPCThreadState::self(); |
| 271 | self->requestDeathNotification(mHandle, this); |
| 272 | self->flushCommands(); |
| 273 | } |
| 274 | ssize_t res = mObituaries->add(ob); |
| 275 | return res >= (ssize_t)NO_ERROR ? (status_t)NO_ERROR : res; |
| 276 | } |
| 277 | } |
| 278 | |
| 279 | return DEAD_OBJECT; |
| 280 | } |
| 281 | |
Jiyong Park | b86c866 | 2018-10-29 23:01:57 +0900 | [diff] [blame] | 282 | // NOLINTNEXTLINE(google-default-arguments) |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 283 | status_t BpBinder::unlinkToDeath( |
| 284 | const wp<DeathRecipient>& recipient, void* cookie, uint32_t flags, |
| 285 | wp<DeathRecipient>* outRecipient) |
| 286 | { |
| 287 | AutoMutex _l(mLock); |
| 288 | |
| 289 | if (mObitsSent) { |
| 290 | return DEAD_OBJECT; |
| 291 | } |
| 292 | |
| 293 | const size_t N = mObituaries ? mObituaries->size() : 0; |
| 294 | for (size_t i=0; i<N; i++) { |
| 295 | const Obituary& obit = mObituaries->itemAt(i); |
| 296 | if ((obit.recipient == recipient |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 297 | || (recipient == nullptr && obit.cookie == cookie)) |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 298 | && obit.flags == flags) { |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 299 | if (outRecipient != nullptr) { |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 300 | *outRecipient = mObituaries->itemAt(i).recipient; |
| 301 | } |
| 302 | mObituaries->removeAt(i); |
| 303 | if (mObituaries->size() == 0) { |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 304 | ALOGV("Clearing death notification: %p handle %d\n", this, mHandle); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 305 | IPCThreadState* self = IPCThreadState::self(); |
| 306 | self->clearDeathNotification(mHandle, this); |
| 307 | self->flushCommands(); |
| 308 | delete mObituaries; |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 309 | mObituaries = nullptr; |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 310 | } |
| 311 | return NO_ERROR; |
| 312 | } |
| 313 | } |
| 314 | |
| 315 | return NAME_NOT_FOUND; |
| 316 | } |
| 317 | |
| 318 | void BpBinder::sendObituary() |
| 319 | { |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 320 | ALOGV("Sending obituary for proxy %p handle %d, mObitsSent=%s\n", |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 321 | this, mHandle, mObitsSent ? "true" : "false"); |
| 322 | |
Steven Moreland | 06074d8 | 2020-03-05 23:16:51 +0000 | [diff] [blame] | 323 | mAlive = 0; |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 324 | if (mObitsSent) return; |
| 325 | |
| 326 | mLock.lock(); |
| 327 | Vector<Obituary>* obits = mObituaries; |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 328 | if(obits != nullptr) { |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 329 | ALOGV("Clearing sent death notification: %p handle %d\n", this, mHandle); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 330 | IPCThreadState* self = IPCThreadState::self(); |
| 331 | self->clearDeathNotification(mHandle, this); |
| 332 | self->flushCommands(); |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 333 | mObituaries = nullptr; |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 334 | } |
Steven Moreland | 06074d8 | 2020-03-05 23:16:51 +0000 | [diff] [blame] | 335 | mObitsSent = 1; |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 336 | mLock.unlock(); |
| 337 | |
Mark Salyzyn | d4ecccf | 2014-05-30 16:35:57 -0700 | [diff] [blame] | 338 | ALOGV("Reporting death of proxy %p for %zu recipients\n", |
| 339 | this, obits ? obits->size() : 0U); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 340 | |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 341 | if (obits != nullptr) { |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 342 | const size_t N = obits->size(); |
| 343 | for (size_t i=0; i<N; i++) { |
| 344 | reportOneDeath(obits->itemAt(i)); |
| 345 | } |
| 346 | |
| 347 | delete obits; |
| 348 | } |
| 349 | } |
| 350 | |
| 351 | void BpBinder::reportOneDeath(const Obituary& obit) |
| 352 | { |
| 353 | sp<DeathRecipient> recipient = obit.recipient.promote(); |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 354 | ALOGV("Reporting death to recipient: %p\n", recipient.get()); |
Yi Kong | fdd8da9 | 2018-06-07 17:52:27 -0700 | [diff] [blame] | 355 | if (recipient == nullptr) return; |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 356 | |
| 357 | recipient->binderDied(this); |
| 358 | } |
| 359 | |
| 360 | |
| 361 | void BpBinder::attachObject( |
| 362 | const void* objectID, void* object, void* cleanupCookie, |
| 363 | object_cleanup_func func) |
| 364 | { |
| 365 | AutoMutex _l(mLock); |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 366 | ALOGV("Attaching object %p to binder %p (manager=%p)", object, this, &mObjects); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 367 | mObjects.attach(objectID, object, cleanupCookie, func); |
| 368 | } |
| 369 | |
| 370 | void* BpBinder::findObject(const void* objectID) const |
| 371 | { |
| 372 | AutoMutex _l(mLock); |
| 373 | return mObjects.find(objectID); |
| 374 | } |
| 375 | |
| 376 | void BpBinder::detachObject(const void* objectID) |
| 377 | { |
| 378 | AutoMutex _l(mLock); |
| 379 | mObjects.detach(objectID); |
| 380 | } |
| 381 | |
| 382 | BpBinder* BpBinder::remoteBinder() |
| 383 | { |
| 384 | return this; |
| 385 | } |
| 386 | |
| 387 | BpBinder::~BpBinder() |
| 388 | { |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 389 | ALOGV("Destroying BpBinder %p handle %d\n", this, mHandle); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 390 | |
| 391 | IPCThreadState* ipc = IPCThreadState::self(); |
| 392 | |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 393 | if (mTrackedUid >= 0) { |
| 394 | AutoMutex _l(sTrackingLock); |
Michael Wachenschwanz | 74d967a | 2018-05-15 15:03:57 -0700 | [diff] [blame] | 395 | uint32_t trackedValue = sTrackingMap[mTrackedUid]; |
| 396 | if (CC_UNLIKELY((trackedValue & COUNTING_VALUE_MASK) == 0)) { |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 397 | ALOGE("Unexpected Binder Proxy tracking decrement in %p handle %d\n", this, mHandle); |
| 398 | } else { |
| 399 | if (CC_UNLIKELY( |
Michael Wachenschwanz | 74d967a | 2018-05-15 15:03:57 -0700 | [diff] [blame] | 400 | (trackedValue & LIMIT_REACHED_MASK) && |
| 401 | ((trackedValue & COUNTING_VALUE_MASK) <= sBinderProxyCountLowWatermark) |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 402 | )) { |
Michael Wachenschwanz | 74d967a | 2018-05-15 15:03:57 -0700 | [diff] [blame] | 403 | ALOGI("Limit reached bit reset for uid %d (fewer than %d proxies from uid %d held)", |
| 404 | getuid(), mTrackedUid, sBinderProxyCountLowWatermark); |
| 405 | sTrackingMap[mTrackedUid] &= ~LIMIT_REACHED_MASK; |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 406 | } |
| 407 | if (--sTrackingMap[mTrackedUid] == 0) { |
| 408 | sTrackingMap.erase(mTrackedUid); |
| 409 | } |
| 410 | } |
| 411 | } |
| 412 | |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 413 | if (ipc) { |
| 414 | ipc->expungeHandle(mHandle, this); |
| 415 | ipc->decWeakHandle(mHandle); |
| 416 | } |
| 417 | } |
| 418 | |
| 419 | void BpBinder::onFirstRef() |
| 420 | { |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 421 | ALOGV("onFirstRef BpBinder %p handle %d\n", this, mHandle); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 422 | IPCThreadState* ipc = IPCThreadState::self(); |
Martijn Coenen | 7c170bb | 2018-05-04 17:28:55 -0700 | [diff] [blame] | 423 | if (ipc) ipc->incStrongHandle(mHandle, this); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 424 | } |
| 425 | |
Colin Cross | 6f4f3ab | 2014-02-05 17:42:44 -0800 | [diff] [blame] | 426 | void BpBinder::onLastStrongRef(const void* /*id*/) |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 427 | { |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 428 | ALOGV("onLastStrongRef BpBinder %p handle %d\n", this, mHandle); |
| 429 | IF_ALOGV() { |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 430 | printRefs(); |
| 431 | } |
| 432 | IPCThreadState* ipc = IPCThreadState::self(); |
| 433 | if (ipc) ipc->decStrongHandle(mHandle); |
Steven Moreland | 80d2393 | 2019-06-07 12:43:27 -0700 | [diff] [blame] | 434 | |
| 435 | mLock.lock(); |
| 436 | Vector<Obituary>* obits = mObituaries; |
| 437 | if(obits != nullptr) { |
| 438 | if (!obits->isEmpty()) { |
Steven Moreland | 70fcb4e | 2019-12-13 17:28:58 -0800 | [diff] [blame] | 439 | ALOGI("onLastStrongRef automatically unlinking death recipients: %s", |
| 440 | mDescriptorCache.size() ? String8(mDescriptorCache).c_str() : "<uncached descriptor>"); |
Steven Moreland | 80d2393 | 2019-06-07 12:43:27 -0700 | [diff] [blame] | 441 | } |
| 442 | |
| 443 | if (ipc) ipc->clearDeathNotification(mHandle, this); |
| 444 | mObituaries = nullptr; |
| 445 | } |
| 446 | mLock.unlock(); |
| 447 | |
| 448 | if (obits != nullptr) { |
| 449 | // XXX Should we tell any remaining DeathRecipient |
| 450 | // objects that the last strong ref has gone away, so they |
| 451 | // are no longer linked? |
| 452 | delete obits; |
| 453 | } |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 454 | } |
| 455 | |
Colin Cross | 6f4f3ab | 2014-02-05 17:42:44 -0800 | [diff] [blame] | 456 | bool BpBinder::onIncStrongAttempted(uint32_t /*flags*/, const void* /*id*/) |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 457 | { |
Steve Block | 6807e59 | 2011-10-20 11:56:00 +0100 | [diff] [blame] | 458 | ALOGV("onIncStrongAttempted BpBinder %p handle %d\n", this, mHandle); |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 459 | IPCThreadState* ipc = IPCThreadState::self(); |
| 460 | return ipc ? ipc->attemptIncStrongHandle(mHandle) == NO_ERROR : false; |
| 461 | } |
| 462 | |
Michael Wachenschwanz | d296d0c | 2017-08-15 00:57:14 -0700 | [diff] [blame] | 463 | uint32_t BpBinder::getBinderProxyCount(uint32_t uid) |
| 464 | { |
| 465 | AutoMutex _l(sTrackingLock); |
| 466 | auto it = sTrackingMap.find(uid); |
| 467 | if (it != sTrackingMap.end()) { |
| 468 | return it->second & COUNTING_VALUE_MASK; |
| 469 | } |
| 470 | return 0; |
| 471 | } |
| 472 | |
| 473 | void BpBinder::getCountByUid(Vector<uint32_t>& uids, Vector<uint32_t>& counts) |
| 474 | { |
| 475 | AutoMutex _l(sTrackingLock); |
| 476 | uids.setCapacity(sTrackingMap.size()); |
| 477 | counts.setCapacity(sTrackingMap.size()); |
| 478 | for (const auto& it : sTrackingMap) { |
| 479 | uids.push_back(it.first); |
| 480 | counts.push_back(it.second & COUNTING_VALUE_MASK); |
| 481 | } |
| 482 | } |
| 483 | |
| 484 | void BpBinder::enableCountByUid() { sCountByUidEnabled.store(true); } |
| 485 | void BpBinder::disableCountByUid() { sCountByUidEnabled.store(false); } |
| 486 | void BpBinder::setCountByUidEnabled(bool enable) { sCountByUidEnabled.store(enable); } |
| 487 | |
| 488 | void BpBinder::setLimitCallback(binder_proxy_limit_callback cb) { |
| 489 | AutoMutex _l(sTrackingLock); |
| 490 | sLimitCallback = cb; |
| 491 | } |
| 492 | |
| 493 | void BpBinder::setBinderProxyCountWatermarks(int high, int low) { |
| 494 | AutoMutex _l(sTrackingLock); |
| 495 | sBinderProxyCountHighWatermark = high; |
| 496 | sBinderProxyCountLowWatermark = low; |
| 497 | } |
| 498 | |
The Android Open Source Project | edbf3b6 | 2009-03-03 19:31:44 -0800 | [diff] [blame] | 499 | // --------------------------------------------------------------------------- |
| 500 | |
Steven Moreland | 61ff849 | 2019-09-26 16:05:45 -0700 | [diff] [blame] | 501 | } // namespace android |