IOMX.cpp revision 51f59b41eae9c4f493ebfd0972cee951895bdf19
1/* 2 * Copyright (c) 2009 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17//#define LOG_NDEBUG 0 18#define LOG_TAG "IOMX" 19#include <utils/Log.h> 20 21#include <sys/mman.h> 22 23#include <binder/IMemory.h> 24#include <binder/Parcel.h> 25#include <media/IOMX.h> 26#include <media/stagefright/foundation/ADebug.h> 27 28namespace android { 29 30enum { 31 CONNECT = IBinder::FIRST_CALL_TRANSACTION, 32 LIVES_LOCALLY, 33 LIST_NODES, 34 ALLOCATE_NODE, 35 FREE_NODE, 36 SEND_COMMAND, 37 GET_PARAMETER, 38 SET_PARAMETER, 39 GET_CONFIG, 40 SET_CONFIG, 41 GET_STATE, 42 ENABLE_GRAPHIC_BUFFERS, 43 USE_BUFFER, 44 USE_GRAPHIC_BUFFER, 45 CREATE_INPUT_SURFACE, 46 SIGNAL_END_OF_INPUT_STREAM, 47 STORE_META_DATA_IN_BUFFERS, 48 PREPARE_FOR_ADAPTIVE_PLAYBACK, 49 ALLOC_BUFFER, 50 ALLOC_BUFFER_WITH_BACKUP, 51 FREE_BUFFER, 52 FILL_BUFFER, 53 EMPTY_BUFFER, 54 GET_EXTENSION_INDEX, 55 OBSERVER_ON_MSG, 56 GET_GRAPHIC_BUFFER_USAGE, 57 SET_INTERNAL_OPTION, 58 UPDATE_GRAPHIC_BUFFER_IN_META, 59}; 60 61class BpOMX : public BpInterface<IOMX> { 62public: 63 BpOMX(const sp<IBinder> &impl) 64 : BpInterface<IOMX>(impl) { 65 } 66 67 virtual bool livesLocally(node_id node, pid_t pid) { 68 Parcel data, reply; 69 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 70 data.writeIntPtr((intptr_t)node); 71 data.writeInt32(pid); 72 remote()->transact(LIVES_LOCALLY, data, &reply); 73 74 return reply.readInt32() != 0; 75 } 76 77 virtual status_t listNodes(List<ComponentInfo> *list) { 78 list->clear(); 79 80 Parcel data, reply; 81 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 82 remote()->transact(LIST_NODES, data, &reply); 83 84 int32_t n = reply.readInt32(); 85 for (int32_t i = 0; i < n; ++i) { 86 list->push_back(ComponentInfo()); 87 ComponentInfo &info = *--list->end(); 88 89 info.mName = reply.readString8(); 90 int32_t numRoles = reply.readInt32(); 91 for (int32_t j = 0; j < numRoles; ++j) { 92 info.mRoles.push_back(reply.readString8()); 93 } 94 } 95 96 return OK; 97 } 98 99 virtual status_t allocateNode( 100 const char *name, const sp<IOMXObserver> &observer, node_id *node) { 101 Parcel data, reply; 102 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 103 data.writeCString(name); 104 data.writeStrongBinder(observer->asBinder()); 105 remote()->transact(ALLOCATE_NODE, data, &reply); 106 107 status_t err = reply.readInt32(); 108 if (err == OK) { 109 *node = (void*)reply.readIntPtr(); 110 } else { 111 *node = 0; 112 } 113 114 return err; 115 } 116 117 virtual status_t freeNode(node_id node) { 118 Parcel data, reply; 119 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 120 data.writeIntPtr((intptr_t)node); 121 remote()->transact(FREE_NODE, data, &reply); 122 123 return reply.readInt32(); 124 } 125 126 virtual status_t sendCommand( 127 node_id node, OMX_COMMANDTYPE cmd, OMX_S32 param) { 128 Parcel data, reply; 129 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 130 data.writeIntPtr((intptr_t)node); 131 data.writeInt32(cmd); 132 data.writeInt32(param); 133 remote()->transact(SEND_COMMAND, data, &reply); 134 135 return reply.readInt32(); 136 } 137 138 virtual status_t getParameter( 139 node_id node, OMX_INDEXTYPE index, 140 void *params, size_t size) { 141 Parcel data, reply; 142 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 143 data.writeIntPtr((intptr_t)node); 144 data.writeInt32(index); 145 data.writeInt32(size); 146 data.write(params, size); 147 remote()->transact(GET_PARAMETER, data, &reply); 148 149 status_t err = reply.readInt32(); 150 if (err != OK) { 151 return err; 152 } 153 154 reply.read(params, size); 155 156 return OK; 157 } 158 159 virtual status_t setParameter( 160 node_id node, OMX_INDEXTYPE index, 161 const void *params, size_t size) { 162 Parcel data, reply; 163 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 164 data.writeIntPtr((intptr_t)node); 165 data.writeInt32(index); 166 data.writeInt32(size); 167 data.write(params, size); 168 remote()->transact(SET_PARAMETER, data, &reply); 169 170 return reply.readInt32(); 171 } 172 173 virtual status_t getConfig( 174 node_id node, OMX_INDEXTYPE index, 175 void *params, size_t size) { 176 Parcel data, reply; 177 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 178 data.writeIntPtr((intptr_t)node); 179 data.writeInt32(index); 180 data.writeInt32(size); 181 data.write(params, size); 182 remote()->transact(GET_CONFIG, data, &reply); 183 184 status_t err = reply.readInt32(); 185 if (err != OK) { 186 return err; 187 } 188 189 reply.read(params, size); 190 191 return OK; 192 } 193 194 virtual status_t setConfig( 195 node_id node, OMX_INDEXTYPE index, 196 const void *params, size_t size) { 197 Parcel data, reply; 198 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 199 data.writeIntPtr((intptr_t)node); 200 data.writeInt32(index); 201 data.writeInt32(size); 202 data.write(params, size); 203 remote()->transact(SET_CONFIG, data, &reply); 204 205 return reply.readInt32(); 206 } 207 208 virtual status_t getState( 209 node_id node, OMX_STATETYPE* state) { 210 Parcel data, reply; 211 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 212 data.writeIntPtr((intptr_t)node); 213 remote()->transact(GET_STATE, data, &reply); 214 215 *state = static_cast<OMX_STATETYPE>(reply.readInt32()); 216 return reply.readInt32(); 217 } 218 219 virtual status_t enableGraphicBuffers( 220 node_id node, OMX_U32 port_index, OMX_BOOL enable) { 221 Parcel data, reply; 222 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 223 data.writeIntPtr((intptr_t)node); 224 data.writeInt32(port_index); 225 data.writeInt32((uint32_t)enable); 226 remote()->transact(ENABLE_GRAPHIC_BUFFERS, data, &reply); 227 228 status_t err = reply.readInt32(); 229 return err; 230 } 231 232 virtual status_t getGraphicBufferUsage( 233 node_id node, OMX_U32 port_index, OMX_U32* usage) { 234 Parcel data, reply; 235 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 236 data.writeIntPtr((intptr_t)node); 237 data.writeInt32(port_index); 238 remote()->transact(GET_GRAPHIC_BUFFER_USAGE, data, &reply); 239 240 status_t err = reply.readInt32(); 241 *usage = reply.readInt32(); 242 return err; 243 } 244 245 virtual status_t useBuffer( 246 node_id node, OMX_U32 port_index, const sp<IMemory> ¶ms, 247 buffer_id *buffer) { 248 Parcel data, reply; 249 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 250 data.writeIntPtr((intptr_t)node); 251 data.writeInt32(port_index); 252 data.writeStrongBinder(params->asBinder()); 253 remote()->transact(USE_BUFFER, data, &reply); 254 255 status_t err = reply.readInt32(); 256 if (err != OK) { 257 *buffer = 0; 258 259 return err; 260 } 261 262 *buffer = (void*)reply.readIntPtr(); 263 264 return err; 265 } 266 267 268 virtual status_t useGraphicBuffer( 269 node_id node, OMX_U32 port_index, 270 const sp<GraphicBuffer> &graphicBuffer, buffer_id *buffer) { 271 Parcel data, reply; 272 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 273 data.writeIntPtr((intptr_t)node); 274 data.writeInt32(port_index); 275 data.write(*graphicBuffer); 276 remote()->transact(USE_GRAPHIC_BUFFER, data, &reply); 277 278 status_t err = reply.readInt32(); 279 if (err != OK) { 280 *buffer = 0; 281 282 return err; 283 } 284 285 *buffer = (void*)reply.readIntPtr(); 286 287 return err; 288 } 289 290 virtual status_t updateGraphicBufferInMeta( 291 node_id node, OMX_U32 port_index, 292 const sp<GraphicBuffer> &graphicBuffer, buffer_id buffer) { 293 Parcel data, reply; 294 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 295 data.writeIntPtr((intptr_t)node); 296 data.writeInt32(port_index); 297 data.write(*graphicBuffer); 298 data.writeIntPtr((intptr_t)buffer); 299 remote()->transact(UPDATE_GRAPHIC_BUFFER_IN_META, data, &reply); 300 301 status_t err = reply.readInt32(); 302 return err; 303 } 304 305 virtual status_t createInputSurface( 306 node_id node, OMX_U32 port_index, 307 sp<IGraphicBufferProducer> *bufferProducer) { 308 Parcel data, reply; 309 status_t err; 310 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 311 data.writeIntPtr((intptr_t)node); 312 data.writeInt32(port_index); 313 err = remote()->transact(CREATE_INPUT_SURFACE, data, &reply); 314 if (err != OK) { 315 ALOGW("binder transaction failed: %d", err); 316 return err; 317 } 318 319 err = reply.readInt32(); 320 if (err != OK) { 321 return err; 322 } 323 324 *bufferProducer = IGraphicBufferProducer::asInterface( 325 reply.readStrongBinder()); 326 327 return err; 328 } 329 330 virtual status_t signalEndOfInputStream(node_id node) { 331 Parcel data, reply; 332 status_t err; 333 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 334 data.writeIntPtr((intptr_t)node); 335 err = remote()->transact(SIGNAL_END_OF_INPUT_STREAM, data, &reply); 336 if (err != OK) { 337 ALOGW("binder transaction failed: %d", err); 338 return err; 339 } 340 341 return reply.readInt32(); 342 } 343 344 virtual status_t storeMetaDataInBuffers( 345 node_id node, OMX_U32 port_index, OMX_BOOL enable) { 346 Parcel data, reply; 347 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 348 data.writeIntPtr((intptr_t)node); 349 data.writeInt32(port_index); 350 data.writeInt32((uint32_t)enable); 351 remote()->transact(STORE_META_DATA_IN_BUFFERS, data, &reply); 352 353 status_t err = reply.readInt32(); 354 return err; 355 } 356 357 virtual status_t prepareForAdaptivePlayback( 358 node_id node, OMX_U32 port_index, OMX_BOOL enable, 359 OMX_U32 max_width, OMX_U32 max_height) { 360 Parcel data, reply; 361 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 362 data.writeIntPtr((intptr_t)node); 363 data.writeInt32(port_index); 364 data.writeInt32((int32_t)enable); 365 data.writeInt32(max_width); 366 data.writeInt32(max_height); 367 remote()->transact(PREPARE_FOR_ADAPTIVE_PLAYBACK, data, &reply); 368 369 status_t err = reply.readInt32(); 370 return err; 371 } 372 373 virtual status_t allocateBuffer( 374 node_id node, OMX_U32 port_index, size_t size, 375 buffer_id *buffer, void **buffer_data) { 376 Parcel data, reply; 377 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 378 data.writeIntPtr((intptr_t)node); 379 data.writeInt32(port_index); 380 data.writeInt32(size); 381 remote()->transact(ALLOC_BUFFER, data, &reply); 382 383 status_t err = reply.readInt32(); 384 if (err != OK) { 385 *buffer = 0; 386 387 return err; 388 } 389 390 *buffer = (void *)reply.readIntPtr(); 391 *buffer_data = (void *)reply.readIntPtr(); 392 393 return err; 394 } 395 396 virtual status_t allocateBufferWithBackup( 397 node_id node, OMX_U32 port_index, const sp<IMemory> ¶ms, 398 buffer_id *buffer) { 399 Parcel data, reply; 400 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 401 data.writeIntPtr((intptr_t)node); 402 data.writeInt32(port_index); 403 data.writeStrongBinder(params->asBinder()); 404 remote()->transact(ALLOC_BUFFER_WITH_BACKUP, data, &reply); 405 406 status_t err = reply.readInt32(); 407 if (err != OK) { 408 *buffer = 0; 409 410 return err; 411 } 412 413 *buffer = (void*)reply.readIntPtr(); 414 415 return err; 416 } 417 418 virtual status_t freeBuffer( 419 node_id node, OMX_U32 port_index, buffer_id buffer) { 420 Parcel data, reply; 421 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 422 data.writeIntPtr((intptr_t)node); 423 data.writeInt32(port_index); 424 data.writeIntPtr((intptr_t)buffer); 425 remote()->transact(FREE_BUFFER, data, &reply); 426 427 return reply.readInt32(); 428 } 429 430 virtual status_t fillBuffer(node_id node, buffer_id buffer) { 431 Parcel data, reply; 432 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 433 data.writeIntPtr((intptr_t)node); 434 data.writeIntPtr((intptr_t)buffer); 435 remote()->transact(FILL_BUFFER, data, &reply); 436 437 return reply.readInt32(); 438 } 439 440 virtual status_t emptyBuffer( 441 node_id node, 442 buffer_id buffer, 443 OMX_U32 range_offset, OMX_U32 range_length, 444 OMX_U32 flags, OMX_TICKS timestamp) { 445 Parcel data, reply; 446 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 447 data.writeIntPtr((intptr_t)node); 448 data.writeIntPtr((intptr_t)buffer); 449 data.writeInt32(range_offset); 450 data.writeInt32(range_length); 451 data.writeInt32(flags); 452 data.writeInt64(timestamp); 453 remote()->transact(EMPTY_BUFFER, data, &reply); 454 455 return reply.readInt32(); 456 } 457 458 virtual status_t getExtensionIndex( 459 node_id node, 460 const char *parameter_name, 461 OMX_INDEXTYPE *index) { 462 Parcel data, reply; 463 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 464 data.writeIntPtr((intptr_t)node); 465 data.writeCString(parameter_name); 466 467 remote()->transact(GET_EXTENSION_INDEX, data, &reply); 468 469 status_t err = reply.readInt32(); 470 if (err == OK) { 471 *index = static_cast<OMX_INDEXTYPE>(reply.readInt32()); 472 } else { 473 *index = OMX_IndexComponentStartUnused; 474 } 475 476 return err; 477 } 478 479 virtual status_t setInternalOption( 480 node_id node, 481 OMX_U32 port_index, 482 InternalOptionType type, 483 const void *optionData, 484 size_t size) { 485 Parcel data, reply; 486 data.writeInterfaceToken(IOMX::getInterfaceDescriptor()); 487 data.writeIntPtr((intptr_t)node); 488 data.writeInt32(port_index); 489 data.writeInt32(size); 490 data.write(optionData, size); 491 data.writeInt32(type); 492 remote()->transact(SET_INTERNAL_OPTION, data, &reply); 493 494 return reply.readInt32(); 495 } 496}; 497 498IMPLEMENT_META_INTERFACE(OMX, "android.hardware.IOMX"); 499 500//////////////////////////////////////////////////////////////////////////////// 501 502#define CHECK_OMX_INTERFACE(interface, data, reply) \ 503 do { if (!data.enforceInterface(interface::getInterfaceDescriptor())) { \ 504 ALOGW("Call incorrectly routed to " #interface); \ 505 return PERMISSION_DENIED; \ 506 } } while (0) 507 508status_t BnOMX::onTransact( 509 uint32_t code, const Parcel &data, Parcel *reply, uint32_t flags) { 510 switch (code) { 511 case LIVES_LOCALLY: 512 { 513 CHECK_OMX_INTERFACE(IOMX, data, reply); 514 node_id node = (void *)data.readIntPtr(); 515 pid_t pid = (pid_t)data.readInt32(); 516 reply->writeInt32(livesLocally(node, pid)); 517 518 return OK; 519 } 520 521 case LIST_NODES: 522 { 523 CHECK_OMX_INTERFACE(IOMX, data, reply); 524 525 List<ComponentInfo> list; 526 listNodes(&list); 527 528 reply->writeInt32(list.size()); 529 for (List<ComponentInfo>::iterator it = list.begin(); 530 it != list.end(); ++it) { 531 ComponentInfo &cur = *it; 532 533 reply->writeString8(cur.mName); 534 reply->writeInt32(cur.mRoles.size()); 535 for (List<String8>::iterator role_it = cur.mRoles.begin(); 536 role_it != cur.mRoles.end(); ++role_it) { 537 reply->writeString8(*role_it); 538 } 539 } 540 541 return NO_ERROR; 542 } 543 544 case ALLOCATE_NODE: 545 { 546 CHECK_OMX_INTERFACE(IOMX, data, reply); 547 548 const char *name = data.readCString(); 549 550 sp<IOMXObserver> observer = 551 interface_cast<IOMXObserver>(data.readStrongBinder()); 552 553 node_id node; 554 555 status_t err = allocateNode(name, observer, &node); 556 reply->writeInt32(err); 557 if (err == OK) { 558 reply->writeIntPtr((intptr_t)node); 559 } 560 561 return NO_ERROR; 562 } 563 564 case FREE_NODE: 565 { 566 CHECK_OMX_INTERFACE(IOMX, data, reply); 567 568 node_id node = (void*)data.readIntPtr(); 569 570 reply->writeInt32(freeNode(node)); 571 572 return NO_ERROR; 573 } 574 575 case SEND_COMMAND: 576 { 577 CHECK_OMX_INTERFACE(IOMX, data, reply); 578 579 node_id node = (void*)data.readIntPtr(); 580 581 OMX_COMMANDTYPE cmd = 582 static_cast<OMX_COMMANDTYPE>(data.readInt32()); 583 584 OMX_S32 param = data.readInt32(); 585 reply->writeInt32(sendCommand(node, cmd, param)); 586 587 return NO_ERROR; 588 } 589 590 case GET_PARAMETER: 591 case SET_PARAMETER: 592 case GET_CONFIG: 593 case SET_CONFIG: 594 case SET_INTERNAL_OPTION: 595 { 596 CHECK_OMX_INTERFACE(IOMX, data, reply); 597 598 node_id node = (void*)data.readIntPtr(); 599 OMX_INDEXTYPE index = static_cast<OMX_INDEXTYPE>(data.readInt32()); 600 601 size_t size = data.readInt32(); 602 603 status_t err = NOT_ENOUGH_DATA; 604 void *params = NULL; 605 size_t pageSize = 0; 606 size_t allocSize = 0; 607 if (code != SET_INTERNAL_OPTION && size < 8) { 608 // we expect the structure to contain at least the size and 609 // version, 8 bytes total 610 ALOGE("b/27207275 (%zu)", size); 611 android_errorWriteLog(0x534e4554, "27207275"); 612 } else { 613 err = NO_MEMORY; 614 pageSize = (size_t) sysconf(_SC_PAGE_SIZE); 615 if (size > SIZE_MAX - (pageSize * 2)) { 616 ALOGE("requested param size too big"); 617 } else { 618 allocSize = (size + pageSize * 2) & ~(pageSize - 1); 619 params = mmap(NULL, allocSize, PROT_READ | PROT_WRITE, 620 MAP_PRIVATE | MAP_ANONYMOUS, -1 /* fd */, 0 /* offset */); 621 } 622 if (params != MAP_FAILED) { 623 err = data.read(params, size); 624 if (err != OK) { 625 android_errorWriteLog(0x534e4554, "26914474"); 626 } else { 627 err = NOT_ENOUGH_DATA; 628 OMX_U32 declaredSize = *(OMX_U32*)params; 629 if (code != SET_INTERNAL_OPTION && declaredSize > size) { 630 // the buffer says it's bigger than it actually is 631 ALOGE("b/27207275 (%u/%zu)", declaredSize, size); 632 android_errorWriteLog(0x534e4554, "27207275"); 633 } else { 634 // mark the last page as inaccessible, to avoid exploitation 635 // of codecs that access past the end of the allocation because 636 // they didn't check the size 637 mprotect((char*)params + allocSize - pageSize, pageSize, PROT_NONE); 638 switch (code) { 639 case GET_PARAMETER: 640 err = getParameter(node, index, params, size); 641 break; 642 case SET_PARAMETER: 643 err = setParameter(node, index, params, size); 644 break; 645 case GET_CONFIG: 646 err = getConfig(node, index, params, size); 647 break; 648 case SET_CONFIG: 649 err = setConfig(node, index, params, size); 650 break; 651 case SET_INTERNAL_OPTION: 652 { 653 InternalOptionType type = 654 (InternalOptionType)data.readInt32(); 655 656 err = setInternalOption(node, index, type, params, size); 657 break; 658 } 659 660 default: 661 TRESPASS(); 662 } 663 } 664 } 665 } else { 666 ALOGE("couldn't map: %s", strerror(errno)); 667 } 668 } 669 670 reply->writeInt32(err); 671 672 if ((code == GET_PARAMETER || code == GET_CONFIG) && err == OK) { 673 reply->write(params, size); 674 } 675 676 if (params) { 677 munmap(params, allocSize); 678 } 679 params = NULL; 680 681 return NO_ERROR; 682 } 683 684 case GET_STATE: 685 { 686 CHECK_OMX_INTERFACE(IOMX, data, reply); 687 688 node_id node = (void*)data.readIntPtr(); 689 OMX_STATETYPE state = OMX_StateInvalid; 690 691 status_t err = getState(node, &state); 692 reply->writeInt32(state); 693 reply->writeInt32(err); 694 695 return NO_ERROR; 696 } 697 698 case ENABLE_GRAPHIC_BUFFERS: 699 { 700 CHECK_OMX_INTERFACE(IOMX, data, reply); 701 702 node_id node = (void*)data.readIntPtr(); 703 OMX_U32 port_index = data.readInt32(); 704 OMX_BOOL enable = (OMX_BOOL)data.readInt32(); 705 706 status_t err = enableGraphicBuffers(node, port_index, enable); 707 reply->writeInt32(err); 708 709 return NO_ERROR; 710 } 711 712 case GET_GRAPHIC_BUFFER_USAGE: 713 { 714 CHECK_OMX_INTERFACE(IOMX, data, reply); 715 716 node_id node = (void*)data.readIntPtr(); 717 OMX_U32 port_index = data.readInt32(); 718 719 OMX_U32 usage = 0; 720 status_t err = getGraphicBufferUsage(node, port_index, &usage); 721 reply->writeInt32(err); 722 reply->writeInt32(usage); 723 724 return NO_ERROR; 725 } 726 727 case USE_BUFFER: 728 { 729 CHECK_OMX_INTERFACE(IOMX, data, reply); 730 731 node_id node = (void*)data.readIntPtr(); 732 OMX_U32 port_index = data.readInt32(); 733 sp<IMemory> params = 734 interface_cast<IMemory>(data.readStrongBinder()); 735 736 buffer_id buffer; 737 status_t err = useBuffer(node, port_index, params, &buffer); 738 reply->writeInt32(err); 739 740 if (err == OK) { 741 reply->writeIntPtr((intptr_t)buffer); 742 } 743 744 return NO_ERROR; 745 } 746 747 case USE_GRAPHIC_BUFFER: 748 { 749 CHECK_OMX_INTERFACE(IOMX, data, reply); 750 751 node_id node = (void*)data.readIntPtr(); 752 OMX_U32 port_index = data.readInt32(); 753 sp<GraphicBuffer> graphicBuffer = new GraphicBuffer(); 754 data.read(*graphicBuffer); 755 756 buffer_id buffer; 757 status_t err = useGraphicBuffer( 758 node, port_index, graphicBuffer, &buffer); 759 reply->writeInt32(err); 760 761 if (err == OK) { 762 reply->writeIntPtr((intptr_t)buffer); 763 } 764 765 return NO_ERROR; 766 } 767 768 case UPDATE_GRAPHIC_BUFFER_IN_META: 769 { 770 CHECK_OMX_INTERFACE(IOMX, data, reply); 771 772 node_id node = (void*)data.readIntPtr(); 773 OMX_U32 port_index = data.readInt32(); 774 sp<GraphicBuffer> graphicBuffer = new GraphicBuffer(); 775 data.read(*graphicBuffer); 776 buffer_id buffer = (void*)data.readIntPtr(); 777 778 status_t err = updateGraphicBufferInMeta( 779 node, port_index, graphicBuffer, buffer); 780 reply->writeInt32(err); 781 782 return NO_ERROR; 783 } 784 785 case CREATE_INPUT_SURFACE: 786 { 787 CHECK_OMX_INTERFACE(IOMX, data, reply); 788 789 node_id node = (void*)data.readIntPtr(); 790 OMX_U32 port_index = data.readInt32(); 791 792 sp<IGraphicBufferProducer> bufferProducer; 793 status_t err = createInputSurface(node, port_index, 794 &bufferProducer); 795 796 reply->writeInt32(err); 797 798 if (err == OK) { 799 reply->writeStrongBinder(bufferProducer->asBinder()); 800 } 801 802 return NO_ERROR; 803 } 804 805 case SIGNAL_END_OF_INPUT_STREAM: 806 { 807 CHECK_OMX_INTERFACE(IOMX, data, reply); 808 809 node_id node = (void*)data.readIntPtr(); 810 811 status_t err = signalEndOfInputStream(node); 812 reply->writeInt32(err); 813 814 return NO_ERROR; 815 } 816 817 case STORE_META_DATA_IN_BUFFERS: 818 { 819 CHECK_OMX_INTERFACE(IOMX, data, reply); 820 821 node_id node = (void*)data.readIntPtr(); 822 OMX_U32 port_index = data.readInt32(); 823 OMX_BOOL enable = (OMX_BOOL)data.readInt32(); 824 825 status_t err = storeMetaDataInBuffers(node, port_index, enable); 826 reply->writeInt32(err); 827 828 return NO_ERROR; 829 } 830 831 case PREPARE_FOR_ADAPTIVE_PLAYBACK: 832 { 833 CHECK_OMX_INTERFACE(IOMX, data, reply); 834 835 node_id node = (void*)data.readIntPtr(); 836 OMX_U32 port_index = data.readInt32(); 837 OMX_BOOL enable = (OMX_BOOL)data.readInt32(); 838 OMX_U32 max_width = data.readInt32(); 839 OMX_U32 max_height = data.readInt32(); 840 841 status_t err = prepareForAdaptivePlayback( 842 node, port_index, enable, max_width, max_height); 843 reply->writeInt32(err); 844 845 return NO_ERROR; 846 } 847 848 case ALLOC_BUFFER: 849 { 850 CHECK_OMX_INTERFACE(IOMX, data, reply); 851 852 node_id node = (void*)data.readIntPtr(); 853 OMX_U32 port_index = data.readInt32(); 854 if (!isSecure(node) || port_index != 0 /* kPortIndexInput */) { 855 ALOGE("b/24310423"); 856 reply->writeInt32(INVALID_OPERATION); 857 return NO_ERROR; 858 } 859 860 size_t size = data.readInt32(); 861 862 buffer_id buffer; 863 void *buffer_data; 864 status_t err = allocateBuffer( 865 node, port_index, size, &buffer, &buffer_data); 866 reply->writeInt32(err); 867 868 if (err == OK) { 869 reply->writeIntPtr((intptr_t)buffer); 870 reply->writeIntPtr((intptr_t)buffer_data); 871 } 872 873 return NO_ERROR; 874 } 875 876 case ALLOC_BUFFER_WITH_BACKUP: 877 { 878 CHECK_OMX_INTERFACE(IOMX, data, reply); 879 880 node_id node = (void*)data.readIntPtr(); 881 OMX_U32 port_index = data.readInt32(); 882 sp<IMemory> params = 883 interface_cast<IMemory>(data.readStrongBinder()); 884 885 buffer_id buffer; 886 status_t err = allocateBufferWithBackup( 887 node, port_index, params, &buffer); 888 889 reply->writeInt32(err); 890 891 if (err == OK) { 892 reply->writeIntPtr((intptr_t)buffer); 893 } 894 895 return NO_ERROR; 896 } 897 898 case FREE_BUFFER: 899 { 900 CHECK_OMX_INTERFACE(IOMX, data, reply); 901 902 node_id node = (void*)data.readIntPtr(); 903 OMX_U32 port_index = data.readInt32(); 904 buffer_id buffer = (void*)data.readIntPtr(); 905 reply->writeInt32(freeBuffer(node, port_index, buffer)); 906 907 return NO_ERROR; 908 } 909 910 case FILL_BUFFER: 911 { 912 CHECK_OMX_INTERFACE(IOMX, data, reply); 913 914 node_id node = (void*)data.readIntPtr(); 915 buffer_id buffer = (void*)data.readIntPtr(); 916 reply->writeInt32(fillBuffer(node, buffer)); 917 918 return NO_ERROR; 919 } 920 921 case EMPTY_BUFFER: 922 { 923 CHECK_OMX_INTERFACE(IOMX, data, reply); 924 925 node_id node = (void*)data.readIntPtr(); 926 buffer_id buffer = (void*)data.readIntPtr(); 927 OMX_U32 range_offset = data.readInt32(); 928 OMX_U32 range_length = data.readInt32(); 929 OMX_U32 flags = data.readInt32(); 930 OMX_TICKS timestamp = data.readInt64(); 931 932 reply->writeInt32( 933 emptyBuffer( 934 node, buffer, range_offset, range_length, 935 flags, timestamp)); 936 937 return NO_ERROR; 938 } 939 940 case GET_EXTENSION_INDEX: 941 { 942 CHECK_OMX_INTERFACE(IOMX, data, reply); 943 944 node_id node = (void*)data.readIntPtr(); 945 const char *parameter_name = data.readCString(); 946 947 OMX_INDEXTYPE index; 948 status_t err = getExtensionIndex(node, parameter_name, &index); 949 950 reply->writeInt32(err); 951 952 if (err == OK) { 953 reply->writeInt32(index); 954 } 955 956 return OK; 957 } 958 959 default: 960 return BBinder::onTransact(code, data, reply, flags); 961 } 962} 963 964//////////////////////////////////////////////////////////////////////////////// 965 966class BpOMXObserver : public BpInterface<IOMXObserver> { 967public: 968 BpOMXObserver(const sp<IBinder> &impl) 969 : BpInterface<IOMXObserver>(impl) { 970 } 971 972 virtual void onMessage(const omx_message &msg) { 973 Parcel data, reply; 974 data.writeInterfaceToken(IOMXObserver::getInterfaceDescriptor()); 975 data.write(&msg, sizeof(msg)); 976 977 remote()->transact(OBSERVER_ON_MSG, data, &reply, IBinder::FLAG_ONEWAY); 978 } 979}; 980 981IMPLEMENT_META_INTERFACE(OMXObserver, "android.hardware.IOMXObserver"); 982 983status_t BnOMXObserver::onTransact( 984 uint32_t code, const Parcel &data, Parcel *reply, uint32_t flags) { 985 switch (code) { 986 case OBSERVER_ON_MSG: 987 { 988 CHECK_OMX_INTERFACE(IOMXObserver, data, reply); 989 990 omx_message msg; 991 data.read(&msg, sizeof(msg)); 992 993 // XXX Could use readInplace maybe? 994 onMessage(msg); 995 996 return NO_ERROR; 997 } 998 999 default: 1000 return BBinder::onTransact(code, data, reply, flags); 1001 } 1002} 1003 1004} // namespace android 1005