SafeInterface.h revision 2537db72f62d53d7c7cab85ccbba2e8d0286a2da
1d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza/* 2d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * Copyright 2016 The Android Open Source Project 3d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * 4d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * Licensed under the Apache License, Version 2.0 (the "License"); 5d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * you may not use this file except in compliance with the License. 6d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * You may obtain a copy of the License at 7d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * 8d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * http://www.apache.org/licenses/LICENSE-2.0 9d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * 10d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * Unless required by applicable law or agreed to in writing, software 11d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * distributed under the License is distributed on an "AS IS" BASIS, 12d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * See the License for the specific language governing permissions and 14d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza * limitations under the License. 15d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza */ 16d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 17d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#pragma once 18d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 19d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#include <binder/IInterface.h> 20d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#include <binder/Parcel.h> 21d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#include <cutils/compiler.h> 22d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 23d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza// Set to 1 to enable CallStacks when logging errors 24d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#define SI_DUMP_CALLSTACKS 0 25d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#if SI_DUMP_CALLSTACKS 26d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#include <utils/CallStack.h> 27d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#endif 28d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 292537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza#include <utils/NativeHandle.h> 302537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza 31d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#include <functional> 32d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#include <type_traits> 33d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 34d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozanamespace android { 35d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozanamespace SafeInterface { 36d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 37d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza// ParcelHandler is responsible for writing/reading various types to/from a Parcel in a generic way 38d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozaclass ParcelHandler { 39d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozapublic: 40d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza explicit ParcelHandler(const char* logTag) : mLogTag(logTag) {} 41d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 42d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Specializations for types with dedicated handling in Parcel 43d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t read(const Parcel& parcel, bool* b) const { 44d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("readBool", [&]() { return parcel.readBool(b); }); 45d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 46d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t write(Parcel* parcel, bool b) const { 47d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("writeBool", [&]() { return parcel->writeBool(b); }); 48d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 4981ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza template <typename E> 5081ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza typename std::enable_if<std::is_enum<E>::value, status_t>::type read(const Parcel& parcel, 5181ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza E* e) const { 5281ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza typename std::underlying_type<E>::type u{}; 5381ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza status_t result = read(parcel, &u); 5481ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza *e = static_cast<E>(u); 5581ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza return result; 5681ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza } 5781ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza template <typename E> 5881ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza typename std::enable_if<std::is_enum<E>::value, status_t>::type write(Parcel* parcel, 5981ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza E e) const { 6081ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza return write(parcel, static_cast<typename std::underlying_type<E>::type>(e)); 6181ea3efb75a6427c946221f95dcf9c388b27a977Dan Stoza } 62d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 63df614ae850b0b277030f94fd32062d45e723f91bDan Stoza typename std::enable_if<std::is_base_of<Flattenable<T>, T>::value, status_t>::type read( 64df614ae850b0b277030f94fd32062d45e723f91bDan Stoza const Parcel& parcel, T* t) const { 65df614ae850b0b277030f94fd32062d45e723f91bDan Stoza return callParcel("read(Flattenable)", [&]() { return parcel.read(*t); }); 66df614ae850b0b277030f94fd32062d45e723f91bDan Stoza } 67df614ae850b0b277030f94fd32062d45e723f91bDan Stoza template <typename T> 68df614ae850b0b277030f94fd32062d45e723f91bDan Stoza typename std::enable_if<std::is_base_of<Flattenable<T>, T>::value, status_t>::type write( 69df614ae850b0b277030f94fd32062d45e723f91bDan Stoza Parcel* parcel, const T& t) const { 70df614ae850b0b277030f94fd32062d45e723f91bDan Stoza return callParcel("write(Flattenable)", [&]() { return parcel->write(t); }); 71df614ae850b0b277030f94fd32062d45e723f91bDan Stoza } 72df614ae850b0b277030f94fd32062d45e723f91bDan Stoza template <typename T> 736dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza typename std::enable_if<std::is_base_of<Flattenable<T>, T>::value, status_t>::type read( 746dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza const Parcel& parcel, sp<T>* t) const { 756dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza *t = new T{}; 766dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza return callParcel("read(sp<Flattenable>)", [&]() { return parcel.read(*(t->get())); }); 776dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza } 786dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza template <typename T> 796dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza typename std::enable_if<std::is_base_of<Flattenable<T>, T>::value, status_t>::type write( 806dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza Parcel* parcel, const sp<T>& t) const { 816dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza return callParcel("write(sp<Flattenable>)", [&]() { return parcel->write(*(t.get())); }); 826dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza } 836dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza template <typename T> 84d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<std::is_base_of<LightFlattenable<T>, T>::value, status_t>::type read( 85d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const Parcel& parcel, T* t) const { 86d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("read(LightFlattenable)", [&]() { return parcel.read(*t); }); 87d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 88d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 89d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<std::is_base_of<LightFlattenable<T>, T>::value, status_t>::type write( 90d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel* parcel, const T& t) const { 91d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("write(LightFlattenable)", [&]() { return parcel->write(t); }); 92d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 932537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza template <typename NH> 942537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza typename std::enable_if<std::is_same<NH, sp<NativeHandle>>::value, status_t>::type read( 952537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza const Parcel& parcel, NH* nh) { 962537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza *nh = NativeHandle::create(parcel.readNativeHandle(), true); 972537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza return NO_ERROR; 982537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza } 992537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza template <typename NH> 1002537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza typename std::enable_if<std::is_same<NH, sp<NativeHandle>>::value, status_t>::type write( 1012537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza Parcel* parcel, const NH& nh) { 1022537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza return callParcel("write(sp<NativeHandle>)", 1032537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza [&]() { return parcel->writeNativeHandle(nh->handle()); }); 1042537db72f62d53d7c7cab85ccbba2e8d0286a2daDan Stoza } 105d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 106d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<std::is_base_of<Parcelable, T>::value, status_t>::type read( 107d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const Parcel& parcel, T* t) const { 108d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("readParcelable", [&]() { return parcel.readParcelable(t); }); 109d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 110d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 111d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<std::is_base_of<Parcelable, T>::value, status_t>::type write( 112d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel* parcel, const T& t) const { 113d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("writeParcelable", [&]() { return parcel->writeParcelable(t); }); 114d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 115d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t read(const Parcel& parcel, String8* str) const { 116d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("readString8", [&]() { return parcel.readString8(str); }); 117d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 118d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t write(Parcel* parcel, const String8& str) const { 119d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("writeString8", [&]() { return parcel->writeString8(str); }); 120d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 121d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 1226dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza typename std::enable_if<std::is_same<IBinder, T>::value, status_t>::type read( 1236dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza const Parcel& parcel, sp<T>* pointer) const { 124d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("readNullableStrongBinder", 125d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza [&]() { return parcel.readNullableStrongBinder(pointer); }); 126d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 127d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 128d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<std::is_same<IBinder, T>::value, status_t>::type write( 129d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel* parcel, const sp<T>& pointer) const { 130d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callParcel("writeStrongBinder", 131d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza [&]() { return parcel->writeStrongBinder(pointer); }); 132d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 133d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 1346dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza typename std::enable_if<std::is_base_of<IInterface, T>::value, status_t>::type read( 1356dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza const Parcel& parcel, sp<T>* pointer) const { 1366dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza return callParcel("readNullableStrongBinder[IInterface]", 1376dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza [&]() { return parcel.readNullableStrongBinder(pointer); }); 1386dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza } 1396dd325b9396c9946ced9d01665152a44167a8fa2Dan Stoza template <typename T> 140d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<std::is_base_of<IInterface, T>::value, status_t>::type write( 141d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel* parcel, const sp<T>& interface) const { 142d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return write(parcel, IInterface::asBinder(interface)); 143d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 144d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 145d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Templates to handle integral types. We use a struct template to require that the called 146d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // function exactly matches the signedness and size of the argument (e.g., the argument isn't 147d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // silently widened). 148d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <bool isSigned, size_t size, typename I> 149d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct HandleInt; 150d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename I> 151d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct HandleInt<true, 4, I> { 152d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static status_t read(const ParcelHandler& handler, const Parcel& parcel, I* i) { 153d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return handler.callParcel("readInt32", [&]() { return parcel.readInt32(i); }); 154d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 155d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static status_t write(const ParcelHandler& handler, Parcel* parcel, I i) { 156d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return handler.callParcel("writeInt32", [&]() { return parcel->writeInt32(i); }); 157d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 158d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 159d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename I> 160d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct HandleInt<false, 4, I> { 161d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static status_t read(const ParcelHandler& handler, const Parcel& parcel, I* i) { 162d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return handler.callParcel("readUint32", [&]() { return parcel.readUint32(i); }); 163d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 164d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static status_t write(const ParcelHandler& handler, Parcel* parcel, I i) { 165d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return handler.callParcel("writeUint32", [&]() { return parcel->writeUint32(i); }); 166d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 167d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 168d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename I> 169662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza struct HandleInt<true, 8, I> { 170662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza static status_t read(const ParcelHandler& handler, const Parcel& parcel, I* i) { 171662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza return handler.callParcel("readInt64", [&]() { return parcel.readInt64(i); }); 172662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza } 173662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza static status_t write(const ParcelHandler& handler, Parcel* parcel, I i) { 174662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza return handler.callParcel("writeInt64", [&]() { return parcel->writeInt64(i); }); 175662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza } 176662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza }; 177662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza template <typename I> 178662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza struct HandleInt<false, 8, I> { 179662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza static status_t read(const ParcelHandler& handler, const Parcel& parcel, I* i) { 180662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza return handler.callParcel("readUint64", [&]() { return parcel.readUint64(i); }); 181662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza } 182662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza static status_t write(const ParcelHandler& handler, Parcel* parcel, I i) { 183662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza return handler.callParcel("writeUint64", [&]() { return parcel->writeUint64(i); }); 184662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza } 185662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza }; 186662a899ed9bb727c1267ec10d24d87a2f0be3355Dan Stoza template <typename I> 187d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<std::is_integral<I>::value, status_t>::type read(const Parcel& parcel, 188d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza I* i) const { 189d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return HandleInt<std::is_signed<I>::value, sizeof(I), I>::read(*this, parcel, i); 190d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 191d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename I> 192d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<std::is_integral<I>::value, status_t>::type write(Parcel* parcel, 193d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza I i) const { 194d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return HandleInt<std::is_signed<I>::value, sizeof(I), I>::write(*this, parcel, i); 195d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 196d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 197d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozaprivate: 198d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const char* const mLogTag; 199d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 200d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Helper to encapsulate error handling while calling the various Parcel methods 201d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Function> 202d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t callParcel(const char* name, Function f) const { 203d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t error = f(); 204d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 205d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza ALOG(LOG_ERROR, mLogTag, "Failed to %s, (%d: %s)", name, error, strerror(-error)); 206d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#if SI_DUMP_CALLSTACKS 207d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza CallStack callStack(mLogTag); 208d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#endif 209d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 210d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 211d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 212d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza}; 213d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 214d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza// Utility struct template which allows us to retrieve the types of the parameters of a member 215d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza// function pointer 216d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozatemplate <typename T> 217d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozastruct ParamExtractor; 218d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozatemplate <typename Class, typename Return, typename... Params> 219d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozastruct ParamExtractor<Return (Class::*)(Params...)> { 220d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using ParamTuple = std::tuple<Params...>; 221d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza}; 222d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozatemplate <typename Class, typename Return, typename... Params> 223d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozastruct ParamExtractor<Return (Class::*)(Params...) const> { 224d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using ParamTuple = std::tuple<Params...>; 225d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza}; 226d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 227d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza} // namespace SafeInterface 228d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 229d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozatemplate <typename Interface> 230d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozaclass SafeBpInterface : public BpInterface<Interface> { 231d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozaprotected: 232d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza SafeBpInterface(const sp<IBinder>& impl, const char* logTag) 233d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza : BpInterface<Interface>(impl), mLogTag(logTag) {} 234d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza ~SafeBpInterface() override = default; 235d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 236d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // callRemote is used to invoke a synchronous procedure call over Binder 237d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Method, typename TagType, typename... Args> 238d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t callRemote(TagType tag, Args&&... args) const { 239d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static_assert(sizeof(TagType) <= sizeof(uint32_t), "Tag must fit inside uint32_t"); 240d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 241d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Verify that the arguments are compatible with the parameters 242d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using ParamTuple = typename SafeInterface::ParamExtractor<Method>::ParamTuple; 243d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static_assert(ArgsMatchParams<std::tuple<Args...>, ParamTuple>::value, 244d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza "Invalid argument type"); 245d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 246d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Write the input arguments to the data Parcel 247d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel data; 248d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza data.writeInterfaceToken(this->getInterfaceDescriptor()); 249d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 250d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t error = writeInputs(&data, std::forward<Args>(args)...); 251d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 252d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged by writeInputs 253d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 254d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 255d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 256d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Send the data Parcel to the remote and retrieve the reply parcel 257d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel reply; 258d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza error = this->remote()->transact(static_cast<uint32_t>(tag), data, &reply); 259d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 260d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza ALOG(LOG_ERROR, mLogTag, "Failed to transact (%d)", error); 261d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#if SI_DUMP_CALLSTACKS 262d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza CallStack callStack(mLogTag); 263d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#endif 264d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 265d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 266d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 267d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Read the outputs from the reply Parcel into the output arguments 268d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza error = readOutputs(reply, std::forward<Args>(args)...); 269d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 270d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged by readOutputs 271d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 272d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 273d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 274d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Retrieve the result code from the reply Parcel 275d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t result = NO_ERROR; 276d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza error = reply.readInt32(&result); 277d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 278d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza ALOG(LOG_ERROR, mLogTag, "Failed to obtain result"); 279d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#if SI_DUMP_CALLSTACKS 280d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza CallStack callStack(mLogTag); 281d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#endif 282d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 283d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 284d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return result; 285d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 286d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 287d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // callRemoteAsync is used to invoke an asynchronous procedure call over Binder 288d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Method, typename TagType, typename... Args> 289d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza void callRemoteAsync(TagType tag, Args&&... args) const { 290d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static_assert(sizeof(TagType) <= sizeof(uint32_t), "Tag must fit inside uint32_t"); 291d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 292d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Verify that the arguments are compatible with the parameters 293d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using ParamTuple = typename SafeInterface::ParamExtractor<Method>::ParamTuple; 294d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static_assert(ArgsMatchParams<std::tuple<Args...>, ParamTuple>::value, 295d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza "Invalid argument type"); 296d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 297d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Write the input arguments to the data Parcel 298d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel data; 299d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza data.writeInterfaceToken(this->getInterfaceDescriptor()); 300d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t error = writeInputs(&data, std::forward<Args>(args)...); 301d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 302d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged by writeInputs 303d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return; 304d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 305d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 306d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // There will be no data in the reply Parcel since the call is one-way 307d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel reply; 308d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza error = this->remote()->transact(static_cast<uint32_t>(tag), data, &reply, 309d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza IBinder::FLAG_ONEWAY); 310d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 311d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza ALOG(LOG_ERROR, mLogTag, "Failed to transact (%d)", error); 312d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#if SI_DUMP_CALLSTACKS 313d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza CallStack callStack(mLogTag); 314d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#endif 315d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 316d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 317d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 318d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozaprivate: 319d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const char* const mLogTag; 320d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 321d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // This struct provides information on whether the decayed types of the elements at Index in the 322d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // tuple types T and U (that is, the types after stripping cv-qualifiers, removing references, 323d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // and a few other less common operations) are the same 324d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <size_t Index, typename T, typename U> 325d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct DecayedElementsMatch { 326d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza private: 327d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using FirstT = typename std::tuple_element<Index, T>::type; 328d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using DecayedT = typename std::decay<FirstT>::type; 329d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using FirstU = typename std::tuple_element<Index, U>::type; 330d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using DecayedU = typename std::decay<FirstU>::type; 331d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 332d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza public: 333d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static constexpr bool value = std::is_same<DecayedT, DecayedU>::value; 334d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 335d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 336d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // When comparing whether the argument types match the parameter types, we first decay them (see 337d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // DecayedElementsMatch) to avoid falsely flagging, say, T&& against T even though they are 338d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // equivalent enough for our purposes 339d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T, typename U> 340d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct ArgsMatchParams {}; 341d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename... Args, typename... Params> 342d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct ArgsMatchParams<std::tuple<Args...>, std::tuple<Params...>> { 343d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static_assert(sizeof...(Args) <= sizeof...(Params), "Too many arguments"); 344d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static_assert(sizeof...(Args) >= sizeof...(Params), "Not enough arguments"); 345d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 346d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza private: 347d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <size_t Index> 348d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static constexpr typename std::enable_if<(Index < sizeof...(Args)), bool>::type 349d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza elementsMatch() { 350d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (!DecayedElementsMatch<Index, std::tuple<Args...>, std::tuple<Params...>>::value) { 351d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return false; 352d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 353d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return elementsMatch<Index + 1>(); 354d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 355d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <size_t Index> 356d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static constexpr typename std::enable_if<(Index >= sizeof...(Args)), bool>::type 357d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza elementsMatch() { 358d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return true; 359d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 360d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 361d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza public: 362d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static constexpr bool value = elementsMatch<0>(); 363d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 364d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 365d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Since we assume that pointer arguments are outputs, we can use this template struct to 366d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // determine whether or not a given argument is fundamentally a pointer type and thus an output 367d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 368d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct IsPointerIfDecayed { 369d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza private: 370d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using Decayed = typename std::decay<T>::type; 371d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 372d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza public: 373d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static constexpr bool value = std::is_pointer<Decayed>::value; 374d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 375d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 376d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 377d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<!IsPointerIfDecayed<T>::value, status_t>::type writeIfInput( 378d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel* data, T&& t) const { 379d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return SafeInterface::ParcelHandler{mLogTag}.write(data, std::forward<T>(t)); 380d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 381d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 382d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<IsPointerIfDecayed<T>::value, status_t>::type writeIfInput( 383d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel* /*data*/, T&& /*t*/) const { 384d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return NO_ERROR; 385d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 386d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 387d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // This method iterates through all of the arguments, writing them to the data Parcel if they 388d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // are an input (i.e., if they are not a pointer type) 389d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T, typename... Remaining> 390d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t writeInputs(Parcel* data, T&& t, Remaining&&... remaining) const { 391d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t error = writeIfInput(data, std::forward<T>(t)); 392d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 393d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged by writeIfInput 394d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 395d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 396d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return writeInputs(data, std::forward<Remaining>(remaining)...); 397d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 398d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static status_t writeInputs(Parcel* /*data*/) { return NO_ERROR; } 399d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 400d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 401d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<IsPointerIfDecayed<T>::value, status_t>::type readIfOutput( 402d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const Parcel& reply, T&& t) const { 403d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return SafeInterface::ParcelHandler{mLogTag}.read(reply, std::forward<T>(t)); 404d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 405d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T> 406d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static typename std::enable_if<!IsPointerIfDecayed<T>::value, status_t>::type readIfOutput( 407d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const Parcel& /*reply*/, T&& /*t*/) { 408d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return NO_ERROR; 409d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 410d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 411d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Similar to writeInputs except that it reads output arguments from the reply Parcel 412d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T, typename... Remaining> 413d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t readOutputs(const Parcel& reply, T&& t, Remaining&&... remaining) const { 414d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t error = readIfOutput(reply, std::forward<T>(t)); 415d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 416d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged by readIfOutput 417d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 418d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 419d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return readOutputs(reply, std::forward<Remaining>(remaining)...); 420d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 421d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static status_t readOutputs(const Parcel& /*data*/) { return NO_ERROR; } 422d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza}; 423d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 424d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozatemplate <typename Interface> 425d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozaclass SafeBnInterface : public BnInterface<Interface> { 426d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozapublic: 427d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza explicit SafeBnInterface(const char* logTag) : mLogTag(logTag) {} 428d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 429d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozaprotected: 430d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Method> 431d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t callLocal(const Parcel& data, Parcel* reply, Method method) { 432d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza CHECK_INTERFACE(this, data, reply); 433d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 434d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Since we need to both pass inputs into the call as well as retrieve outputs, we create a 435d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // "raw" tuple, where the inputs are interleaved with actual, non-pointer versions of the 436d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // outputs. When we ultimately call into the method, we will pass the addresses of the 437d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // output arguments instead of their tuple members directly, but the storage will live in 438d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // the tuple. 439d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using ParamTuple = typename SafeInterface::ParamExtractor<Method>::ParamTuple; 440d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename RawConverter<std::tuple<>, ParamTuple>::type rawArgs{}; 441d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 442d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Read the inputs from the data Parcel into the argument tuple 443d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t error = InputReader<ParamTuple>{mLogTag}.readInputs(data, &rawArgs); 444d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 445d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged by read 446d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 447d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 448d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 449d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Call the local method 450d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t result = MethodCaller<ParamTuple>::call(this, method, &rawArgs); 451d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 452d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Extract the outputs from the argument tuple and write them into the reply Parcel 453d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza error = OutputWriter<ParamTuple>{mLogTag}.writeOutputs(reply, &rawArgs); 454d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 455d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged by write 456d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 457d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 458d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 459d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Return the result code in the reply Parcel 460d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza error = reply->writeInt32(result); 461d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 462d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza ALOG(LOG_ERROR, mLogTag, "Failed to write result"); 463d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#if SI_DUMP_CALLSTACKS 464d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza CallStack callStack(mLogTag); 465d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza#endif 466d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 467d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 468d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return NO_ERROR; 469d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 470d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 471d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Method> 472d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t callLocalAsync(const Parcel& data, Parcel* /*reply*/, Method method) { 473d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // reply is not actually used by CHECK_INTERFACE 474d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza CHECK_INTERFACE(this, data, reply); 475d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 476d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Since we need to both pass inputs into the call as well as retrieve outputs, we create a 477d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // "raw" tuple, where the inputs are interleaved with actual, non-pointer versions of the 478d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // outputs. When we ultimately call into the method, we will pass the addresses of the 479d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // output arguments instead of their tuple members directly, but the storage will live in 480d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // the tuple. 481d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using ParamTuple = typename SafeInterface::ParamExtractor<Method>::ParamTuple; 482d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename RawConverter<std::tuple<>, ParamTuple>::type rawArgs{}; 483d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 484d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Read the inputs from the data Parcel into the argument tuple 485d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t error = InputReader<ParamTuple>{mLogTag}.readInputs(data, &rawArgs); 486d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 487d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged by read 488d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 489d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 490d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 491d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Call the local method 492d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza MethodCaller<ParamTuple>::callVoid(this, method, &rawArgs); 493d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 494d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // After calling, there is nothing more to do since asynchronous calls do not return a value 495d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // to the caller 496d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return NO_ERROR; 497d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 498d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 499d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stozaprivate: 500d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const char* const mLogTag; 501d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 502d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // RemoveFirst strips the first element from a tuple. 503d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // For example, given T = std::tuple<A, B, C>, RemoveFirst<T>::type = std::tuple<B, C> 504d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T, typename... Args> 505d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct RemoveFirst; 506d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename T, typename... Args> 507d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct RemoveFirst<std::tuple<T, Args...>> { 508d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using type = std::tuple<Args...>; 509d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 510d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 511d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // RawConverter strips a tuple down to its fundamental types, discarding both pointers and 512d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // references. This allows us to allocate storage for both input (non-pointer) arguments and 513d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // output (pointer) arguments in one tuple. 514d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // For example, given T = std::tuple<const A&, B*>, RawConverter<T>::type = std::tuple<A, B> 515d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Unconverted, typename... Converted> 516d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct RawConverter; 517d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Unconverted, typename... Converted> 518d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct RawConverter<std::tuple<Converted...>, Unconverted> { 519d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza private: 520d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using ElementType = typename std::tuple_element<0, Unconverted>::type; 521d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using Decayed = typename std::decay<ElementType>::type; 522d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using WithoutPointer = typename std::remove_pointer<Decayed>::type; 523d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 524d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza public: 525d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using type = typename RawConverter<std::tuple<Converted..., WithoutPointer>, 526d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename RemoveFirst<Unconverted>::type>::type; 527d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 528d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename... Converted> 529d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct RawConverter<std::tuple<Converted...>, std::tuple<>> { 530d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using type = std::tuple<Converted...>; 531d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 532d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 533d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // This provides a simple way to determine whether the indexed element of Args... is a pointer 534d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <size_t I, typename... Args> 535d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct ElementIsPointer { 536d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza private: 537d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza using ElementType = typename std::tuple_element<I, std::tuple<Args...>>::type; 538d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 539d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza public: 540d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static constexpr bool value = std::is_pointer<ElementType>::value; 541d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 542d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 543d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // This class iterates over the parameter types, and if a given parameter is an input 544d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // (i.e., is not a pointer), reads the corresponding argument tuple element from the data Parcel 545d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename... Params> 546d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza class InputReader; 547d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename... Params> 548d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza class InputReader<std::tuple<Params...>> { 549d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza public: 550d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza explicit InputReader(const char* logTag) : mLogTag(logTag) {} 551d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 552d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Note that in this case (as opposed to in SafeBpInterface), we iterate using an explicit 553d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // index (starting with 0 here) instead of using recursion and stripping the first element. 554d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // This is because in SafeBpInterface we aren't actually operating on a real tuple, but are 555d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // instead just using a tuple as a convenient container for variadic types, whereas here we 556d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // can't modify the argument tuple without causing unnecessary copies or moves of the data 557d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // contained therein. 558d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename RawTuple> 559d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t readInputs(const Parcel& data, RawTuple* args) { 560d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return dispatchArg<0>(data, args); 561d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 562d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 563d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza private: 564d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const char* const mLogTag; 565d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 566d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <std::size_t I, typename RawTuple> 567d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<!ElementIsPointer<I, Params...>::value, status_t>::type readIfInput( 568d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const Parcel& data, RawTuple* args) { 569d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return SafeInterface::ParcelHandler{mLogTag}.read(data, &std::get<I>(*args)); 570d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 571d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <std::size_t I, typename RawTuple> 572d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<ElementIsPointer<I, Params...>::value, status_t>::type readIfInput( 573d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const Parcel& /*data*/, RawTuple* /*args*/) { 574d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return NO_ERROR; 575d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 576d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 577d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Recursively iterate through the arguments 578d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <std::size_t I, typename RawTuple> 579d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<(I < sizeof...(Params)), status_t>::type dispatchArg( 580d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const Parcel& data, RawTuple* args) { 581d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t error = readIfInput<I>(data, args); 582d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 583d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged in read 584d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 585d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 586d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return dispatchArg<I + 1>(data, args); 587d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 588d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <std::size_t I, typename RawTuple> 589d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<(I >= sizeof...(Params)), status_t>::type dispatchArg( 590d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const Parcel& /*data*/, RawTuple* /*args*/) { 591d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return NO_ERROR; 592d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 593d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 594d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 595d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // getForCall uses the types of the parameters to determine whether a given element of the 596d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // argument tuple is an input, which should be passed directly into the call, or an output, for 597d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // which its address should be passed into the call 598d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <size_t I, typename RawTuple, typename... Params> 599d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static typename std::enable_if< 600d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza ElementIsPointer<I, Params...>::value, 601d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::tuple_element<I, std::tuple<Params...>>::type>::type 602d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza getForCall(RawTuple* args) { 603d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return &std::get<I>(*args); 604d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 605d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <size_t I, typename RawTuple, typename... Params> 606d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static typename std::enable_if< 607d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza !ElementIsPointer<I, Params...>::value, 608d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::tuple_element<I, std::tuple<Params...>>::type>::type& 609d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza getForCall(RawTuple* args) { 610d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return std::get<I>(*args); 611d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 612d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 613d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // This template class uses std::index_sequence and parameter pack expansion to call the given 614d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // method using the elements of the argument tuple (after those arguments are passed through 615d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // getForCall to get addresses instead of values for output arguments) 616d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename... Params> 617d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct MethodCaller; 618d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename... Params> 619d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct MethodCaller<std::tuple<Params...>> { 620d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza public: 621d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // The calls through these to the helper methods are necessary to generate the 622d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // std::index_sequences used to unpack the argument tuple into the method call 623d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Class, typename MemberFunction, typename RawTuple> 624d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static status_t call(Class* instance, MemberFunction function, RawTuple* args) { 625d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return callHelper(instance, function, args, std::index_sequence_for<Params...>{}); 626d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 627d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Class, typename MemberFunction, typename RawTuple> 628d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static void callVoid(Class* instance, MemberFunction function, RawTuple* args) { 629d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza callVoidHelper(instance, function, args, std::index_sequence_for<Params...>{}); 630d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 631d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 632d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza private: 633d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Class, typename MemberFunction, typename RawTuple, std::size_t... I> 634d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static status_t callHelper(Class* instance, MemberFunction function, RawTuple* args, 635d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza std::index_sequence<I...> /*unused*/) { 636d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return (instance->*function)(getForCall<I, RawTuple, Params...>(args)...); 637d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 638d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename Class, typename MemberFunction, typename RawTuple, std::size_t... I> 639d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza static void callVoidHelper(Class* instance, MemberFunction function, RawTuple* args, 640d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza std::index_sequence<I...> /*unused*/) { 641d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza (instance->*function)(getForCall<I, RawTuple, Params...>(args)...); 642d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 643d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 644d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 645d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // This class iterates over the parameter types, and if a given parameter is an output 646d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // (i.e., is a pointer), writes the corresponding argument tuple element into the reply Parcel 647d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename... Params> 648d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct OutputWriter; 649d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename... Params> 650d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza struct OutputWriter<std::tuple<Params...>> { 651d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza public: 652d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza explicit OutputWriter(const char* logTag) : mLogTag(logTag) {} 653d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 654d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // See the note on InputReader::readInputs for why this differs from the arguably simpler 655d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // RemoveFirst approach in SafeBpInterface 656d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <typename RawTuple> 657d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t writeOutputs(Parcel* reply, RawTuple* args) { 658d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return dispatchArg<0>(reply, args); 659d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 660d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 661d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza private: 662d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza const char* const mLogTag; 663d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 664d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <std::size_t I, typename RawTuple> 665d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<ElementIsPointer<I, Params...>::value, status_t>::type 666d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza writeIfOutput(Parcel* reply, RawTuple* args) { 667d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return SafeInterface::ParcelHandler{mLogTag}.write(reply, std::get<I>(*args)); 668d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 669d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <std::size_t I, typename RawTuple> 670d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<!ElementIsPointer<I, Params...>::value, status_t>::type 671d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza writeIfOutput(Parcel* /*reply*/, RawTuple* /*args*/) { 672d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return NO_ERROR; 673d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 674d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 675d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // Recursively iterate through the arguments 676d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <std::size_t I, typename RawTuple> 677d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<(I < sizeof...(Params)), status_t>::type dispatchArg( 678d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel* reply, RawTuple* args) { 679d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza status_t error = writeIfOutput<I>(reply, args); 680d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza if (CC_UNLIKELY(error != NO_ERROR)) { 681d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza // A message will have been logged in read 682d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return error; 683d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 684d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return dispatchArg<I + 1>(reply, args); 685d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 686d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza template <std::size_t I, typename RawTuple> 687d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza typename std::enable_if<(I >= sizeof...(Params)), status_t>::type dispatchArg( 688d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza Parcel* /*reply*/, RawTuple* /*args*/) { 689d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza return NO_ERROR; 690d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza } 691d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza }; 692d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza}; 693d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza 694d630e520de9ff4bc50723a7e8f91b6d9be27db1cDan Stoza} // namespace android 695