InputDispatcher.cpp revision 0952c30ac279d5f4cdc032fcbafa372213aa6d86
1/*
2 * Copyright (C) 2010 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#define LOG_TAG "InputDispatcher"
18
19//#define LOG_NDEBUG 0
20
21// Log detailed debug messages about each inbound event notification to the dispatcher.
22#define DEBUG_INBOUND_EVENT_DETAILS 0
23
24// Log detailed debug messages about each outbound event processed by the dispatcher.
25#define DEBUG_OUTBOUND_EVENT_DETAILS 0
26
27// Log debug messages about the dispatch cycle.
28#define DEBUG_DISPATCH_CYCLE 0
29
30// Log debug messages about registrations.
31#define DEBUG_REGISTRATION 0
32
33// Log debug messages about input event injection.
34#define DEBUG_INJECTION 0
35
36// Log debug messages about input focus tracking.
37#define DEBUG_FOCUS 0
38
39// Log debug messages about the app switch latency optimization.
40#define DEBUG_APP_SWITCH 0
41
42// Log debug messages about hover events.
43#define DEBUG_HOVER 0
44
45#include "InputDispatcher.h"
46
47#include <cutils/log.h>
48#include <ui/PowerManager.h>
49
50#include <stddef.h>
51#include <unistd.h>
52#include <errno.h>
53#include <limits.h>
54
55#define INDENT "  "
56#define INDENT2 "    "
57
58namespace android {
59
60// Default input dispatching timeout if there is no focused application or paused window
61// from which to determine an appropriate dispatching timeout.
62const nsecs_t DEFAULT_INPUT_DISPATCHING_TIMEOUT = 5000 * 1000000LL; // 5 sec
63
64// Amount of time to allow for all pending events to be processed when an app switch
65// key is on the way.  This is used to preempt input dispatch and drop input events
66// when an application takes too long to respond and the user has pressed an app switch key.
67const nsecs_t APP_SWITCH_TIMEOUT = 500 * 1000000LL; // 0.5sec
68
69// Amount of time to allow for an event to be dispatched (measured since its eventTime)
70// before considering it stale and dropping it.
71const nsecs_t STALE_EVENT_TIMEOUT = 10000 * 1000000LL; // 10sec
72
73// Amount of time to allow touch events to be streamed out to a connection before requiring
74// that the first event be finished.  This value extends the ANR timeout by the specified
75// amount.  For example, if streaming is allowed to get ahead by one second relative to the
76// queue of waiting unfinished events, then ANRs will similarly be delayed by one second.
77const nsecs_t STREAM_AHEAD_EVENT_TIMEOUT = 500 * 1000000LL; // 0.5sec
78
79
80static inline nsecs_t now() {
81    return systemTime(SYSTEM_TIME_MONOTONIC);
82}
83
84static inline const char* toString(bool value) {
85    return value ? "true" : "false";
86}
87
88static inline int32_t getMotionEventActionPointerIndex(int32_t action) {
89    return (action & AMOTION_EVENT_ACTION_POINTER_INDEX_MASK)
90            >> AMOTION_EVENT_ACTION_POINTER_INDEX_SHIFT;
91}
92
93static bool isValidKeyAction(int32_t action) {
94    switch (action) {
95    case AKEY_EVENT_ACTION_DOWN:
96    case AKEY_EVENT_ACTION_UP:
97        return true;
98    default:
99        return false;
100    }
101}
102
103static bool validateKeyEvent(int32_t action) {
104    if (! isValidKeyAction(action)) {
105        ALOGE("Key event has invalid action code 0x%x", action);
106        return false;
107    }
108    return true;
109}
110
111static bool isValidMotionAction(int32_t action, size_t pointerCount) {
112    switch (action & AMOTION_EVENT_ACTION_MASK) {
113    case AMOTION_EVENT_ACTION_DOWN:
114    case AMOTION_EVENT_ACTION_UP:
115    case AMOTION_EVENT_ACTION_CANCEL:
116    case AMOTION_EVENT_ACTION_MOVE:
117    case AMOTION_EVENT_ACTION_OUTSIDE:
118    case AMOTION_EVENT_ACTION_HOVER_ENTER:
119    case AMOTION_EVENT_ACTION_HOVER_MOVE:
120    case AMOTION_EVENT_ACTION_HOVER_EXIT:
121    case AMOTION_EVENT_ACTION_SCROLL:
122        return true;
123    case AMOTION_EVENT_ACTION_POINTER_DOWN:
124    case AMOTION_EVENT_ACTION_POINTER_UP: {
125        int32_t index = getMotionEventActionPointerIndex(action);
126        return index >= 0 && size_t(index) < pointerCount;
127    }
128    default:
129        return false;
130    }
131}
132
133static bool validateMotionEvent(int32_t action, size_t pointerCount,
134        const PointerProperties* pointerProperties) {
135    if (! isValidMotionAction(action, pointerCount)) {
136        ALOGE("Motion event has invalid action code 0x%x", action);
137        return false;
138    }
139    if (pointerCount < 1 || pointerCount > MAX_POINTERS) {
140        ALOGE("Motion event has invalid pointer count %d; value must be between 1 and %d.",
141                pointerCount, MAX_POINTERS);
142        return false;
143    }
144    BitSet32 pointerIdBits;
145    for (size_t i = 0; i < pointerCount; i++) {
146        int32_t id = pointerProperties[i].id;
147        if (id < 0 || id > MAX_POINTER_ID) {
148            ALOGE("Motion event has invalid pointer id %d; value must be between 0 and %d",
149                    id, MAX_POINTER_ID);
150            return false;
151        }
152        if (pointerIdBits.hasBit(id)) {
153            ALOGE("Motion event has duplicate pointer id %d", id);
154            return false;
155        }
156        pointerIdBits.markBit(id);
157    }
158    return true;
159}
160
161static void dumpRegion(String8& dump, const SkRegion& region) {
162    if (region.isEmpty()) {
163        dump.append("<empty>");
164        return;
165    }
166
167    bool first = true;
168    for (SkRegion::Iterator it(region); !it.done(); it.next()) {
169        if (first) {
170            first = false;
171        } else {
172            dump.append("|");
173        }
174        const SkIRect& rect = it.rect();
175        dump.appendFormat("[%d,%d][%d,%d]", rect.fLeft, rect.fTop, rect.fRight, rect.fBottom);
176    }
177}
178
179
180// --- InputDispatcher ---
181
182InputDispatcher::InputDispatcher(const sp<InputDispatcherPolicyInterface>& policy) :
183    mPolicy(policy),
184    mPendingEvent(NULL), mAppSwitchSawKeyDown(false), mAppSwitchDueTime(LONG_LONG_MAX),
185    mNextUnblockedEvent(NULL),
186    mDispatchEnabled(true), mDispatchFrozen(false), mInputFilterEnabled(false),
187    mInputTargetWaitCause(INPUT_TARGET_WAIT_CAUSE_NONE) {
188    mLooper = new Looper(false);
189
190    mKeyRepeatState.lastKeyEntry = NULL;
191
192    policy->getDispatcherConfiguration(&mConfig);
193}
194
195InputDispatcher::~InputDispatcher() {
196    { // acquire lock
197        AutoMutex _l(mLock);
198
199        resetKeyRepeatLocked();
200        releasePendingEventLocked();
201        drainInboundQueueLocked();
202    }
203
204    while (mConnectionsByFd.size() != 0) {
205        unregisterInputChannel(mConnectionsByFd.valueAt(0)->inputChannel);
206    }
207}
208
209void InputDispatcher::dispatchOnce() {
210    nsecs_t nextWakeupTime = LONG_LONG_MAX;
211    { // acquire lock
212        AutoMutex _l(mLock);
213        mDispatcherIsAliveCondition.broadcast();
214
215        dispatchOnceInnerLocked(&nextWakeupTime);
216
217        if (runCommandsLockedInterruptible()) {
218            nextWakeupTime = LONG_LONG_MIN;  // force next poll to wake up immediately
219        }
220    } // release lock
221
222    // Wait for callback or timeout or wake.  (make sure we round up, not down)
223    nsecs_t currentTime = now();
224    int timeoutMillis = toMillisecondTimeoutDelay(currentTime, nextWakeupTime);
225    mLooper->pollOnce(timeoutMillis);
226}
227
228void InputDispatcher::dispatchOnceInnerLocked(nsecs_t* nextWakeupTime) {
229    nsecs_t currentTime = now();
230
231    // Reset the key repeat timer whenever we disallow key events, even if the next event
232    // is not a key.  This is to ensure that we abort a key repeat if the device is just coming
233    // out of sleep.
234    if (!mPolicy->isKeyRepeatEnabled()) {
235        resetKeyRepeatLocked();
236    }
237
238    // If dispatching is frozen, do not process timeouts or try to deliver any new events.
239    if (mDispatchFrozen) {
240#if DEBUG_FOCUS
241        ALOGD("Dispatch frozen.  Waiting some more.");
242#endif
243        return;
244    }
245
246    // Optimize latency of app switches.
247    // Essentially we start a short timeout when an app switch key (HOME / ENDCALL) has
248    // been pressed.  When it expires, we preempt dispatch and drop all other pending events.
249    bool isAppSwitchDue = mAppSwitchDueTime <= currentTime;
250    if (mAppSwitchDueTime < *nextWakeupTime) {
251        *nextWakeupTime = mAppSwitchDueTime;
252    }
253
254    // Ready to start a new event.
255    // If we don't already have a pending event, go grab one.
256    if (! mPendingEvent) {
257        if (mInboundQueue.isEmpty()) {
258            if (isAppSwitchDue) {
259                // The inbound queue is empty so the app switch key we were waiting
260                // for will never arrive.  Stop waiting for it.
261                resetPendingAppSwitchLocked(false);
262                isAppSwitchDue = false;
263            }
264
265            // Synthesize a key repeat if appropriate.
266            if (mKeyRepeatState.lastKeyEntry) {
267                if (currentTime >= mKeyRepeatState.nextRepeatTime) {
268                    mPendingEvent = synthesizeKeyRepeatLocked(currentTime);
269                } else {
270                    if (mKeyRepeatState.nextRepeatTime < *nextWakeupTime) {
271                        *nextWakeupTime = mKeyRepeatState.nextRepeatTime;
272                    }
273                }
274            }
275
276            // Nothing to do if there is no pending event.
277            if (!mPendingEvent) {
278                return;
279            }
280        } else {
281            // Inbound queue has at least one entry.
282            mPendingEvent = mInboundQueue.dequeueAtHead();
283        }
284
285        // Poke user activity for this event.
286        if (mPendingEvent->policyFlags & POLICY_FLAG_PASS_TO_USER) {
287            pokeUserActivityLocked(mPendingEvent);
288        }
289
290        // Get ready to dispatch the event.
291        resetANRTimeoutsLocked();
292    }
293
294    // Now we have an event to dispatch.
295    // All events are eventually dequeued and processed this way, even if we intend to drop them.
296    ALOG_ASSERT(mPendingEvent != NULL);
297    bool done = false;
298    DropReason dropReason = DROP_REASON_NOT_DROPPED;
299    if (!(mPendingEvent->policyFlags & POLICY_FLAG_PASS_TO_USER)) {
300        dropReason = DROP_REASON_POLICY;
301    } else if (!mDispatchEnabled) {
302        dropReason = DROP_REASON_DISABLED;
303    }
304
305    if (mNextUnblockedEvent == mPendingEvent) {
306        mNextUnblockedEvent = NULL;
307    }
308
309    switch (mPendingEvent->type) {
310    case EventEntry::TYPE_CONFIGURATION_CHANGED: {
311        ConfigurationChangedEntry* typedEntry =
312                static_cast<ConfigurationChangedEntry*>(mPendingEvent);
313        done = dispatchConfigurationChangedLocked(currentTime, typedEntry);
314        dropReason = DROP_REASON_NOT_DROPPED; // configuration changes are never dropped
315        break;
316    }
317
318    case EventEntry::TYPE_DEVICE_RESET: {
319        DeviceResetEntry* typedEntry =
320                static_cast<DeviceResetEntry*>(mPendingEvent);
321        done = dispatchDeviceResetLocked(currentTime, typedEntry);
322        dropReason = DROP_REASON_NOT_DROPPED; // device resets are never dropped
323        break;
324    }
325
326    case EventEntry::TYPE_KEY: {
327        KeyEntry* typedEntry = static_cast<KeyEntry*>(mPendingEvent);
328        if (isAppSwitchDue) {
329            if (isAppSwitchKeyEventLocked(typedEntry)) {
330                resetPendingAppSwitchLocked(true);
331                isAppSwitchDue = false;
332            } else if (dropReason == DROP_REASON_NOT_DROPPED) {
333                dropReason = DROP_REASON_APP_SWITCH;
334            }
335        }
336        if (dropReason == DROP_REASON_NOT_DROPPED
337                && isStaleEventLocked(currentTime, typedEntry)) {
338            dropReason = DROP_REASON_STALE;
339        }
340        if (dropReason == DROP_REASON_NOT_DROPPED && mNextUnblockedEvent) {
341            dropReason = DROP_REASON_BLOCKED;
342        }
343        done = dispatchKeyLocked(currentTime, typedEntry, &dropReason, nextWakeupTime);
344        break;
345    }
346
347    case EventEntry::TYPE_MOTION: {
348        MotionEntry* typedEntry = static_cast<MotionEntry*>(mPendingEvent);
349        if (dropReason == DROP_REASON_NOT_DROPPED && isAppSwitchDue) {
350            dropReason = DROP_REASON_APP_SWITCH;
351        }
352        if (dropReason == DROP_REASON_NOT_DROPPED
353                && isStaleEventLocked(currentTime, typedEntry)) {
354            dropReason = DROP_REASON_STALE;
355        }
356        if (dropReason == DROP_REASON_NOT_DROPPED && mNextUnblockedEvent) {
357            dropReason = DROP_REASON_BLOCKED;
358        }
359        done = dispatchMotionLocked(currentTime, typedEntry,
360                &dropReason, nextWakeupTime);
361        break;
362    }
363
364    default:
365        ALOG_ASSERT(false);
366        break;
367    }
368
369    if (done) {
370        if (dropReason != DROP_REASON_NOT_DROPPED) {
371            dropInboundEventLocked(mPendingEvent, dropReason);
372        }
373
374        releasePendingEventLocked();
375        *nextWakeupTime = LONG_LONG_MIN;  // force next poll to wake up immediately
376    }
377}
378
379bool InputDispatcher::enqueueInboundEventLocked(EventEntry* entry) {
380    bool needWake = mInboundQueue.isEmpty();
381    mInboundQueue.enqueueAtTail(entry);
382
383    switch (entry->type) {
384    case EventEntry::TYPE_KEY: {
385        // Optimize app switch latency.
386        // If the application takes too long to catch up then we drop all events preceding
387        // the app switch key.
388        KeyEntry* keyEntry = static_cast<KeyEntry*>(entry);
389        if (isAppSwitchKeyEventLocked(keyEntry)) {
390            if (keyEntry->action == AKEY_EVENT_ACTION_DOWN) {
391                mAppSwitchSawKeyDown = true;
392            } else if (keyEntry->action == AKEY_EVENT_ACTION_UP) {
393                if (mAppSwitchSawKeyDown) {
394#if DEBUG_APP_SWITCH
395                    ALOGD("App switch is pending!");
396#endif
397                    mAppSwitchDueTime = keyEntry->eventTime + APP_SWITCH_TIMEOUT;
398                    mAppSwitchSawKeyDown = false;
399                    needWake = true;
400                }
401            }
402        }
403        break;
404    }
405
406    case EventEntry::TYPE_MOTION: {
407        // Optimize case where the current application is unresponsive and the user
408        // decides to touch a window in a different application.
409        // If the application takes too long to catch up then we drop all events preceding
410        // the touch into the other window.
411        MotionEntry* motionEntry = static_cast<MotionEntry*>(entry);
412        if (motionEntry->action == AMOTION_EVENT_ACTION_DOWN
413                && (motionEntry->source & AINPUT_SOURCE_CLASS_POINTER)
414                && mInputTargetWaitCause == INPUT_TARGET_WAIT_CAUSE_APPLICATION_NOT_READY
415                && mInputTargetWaitApplicationHandle != NULL) {
416            int32_t x = int32_t(motionEntry->pointerCoords[0].
417                    getAxisValue(AMOTION_EVENT_AXIS_X));
418            int32_t y = int32_t(motionEntry->pointerCoords[0].
419                    getAxisValue(AMOTION_EVENT_AXIS_Y));
420            sp<InputWindowHandle> touchedWindowHandle = findTouchedWindowAtLocked(x, y);
421            if (touchedWindowHandle != NULL
422                    && touchedWindowHandle->inputApplicationHandle
423                            != mInputTargetWaitApplicationHandle) {
424                // User touched a different application than the one we are waiting on.
425                // Flag the event, and start pruning the input queue.
426                mNextUnblockedEvent = motionEntry;
427                needWake = true;
428            }
429        }
430        break;
431    }
432    }
433
434    return needWake;
435}
436
437sp<InputWindowHandle> InputDispatcher::findTouchedWindowAtLocked(int32_t x, int32_t y) {
438    // Traverse windows from front to back to find touched window.
439    size_t numWindows = mWindowHandles.size();
440    for (size_t i = 0; i < numWindows; i++) {
441        sp<InputWindowHandle> windowHandle = mWindowHandles.itemAt(i);
442        const InputWindowInfo* windowInfo = windowHandle->getInfo();
443        int32_t flags = windowInfo->layoutParamsFlags;
444
445        if (windowInfo->visible) {
446            if (!(flags & InputWindowInfo::FLAG_NOT_TOUCHABLE)) {
447                bool isTouchModal = (flags & (InputWindowInfo::FLAG_NOT_FOCUSABLE
448                        | InputWindowInfo::FLAG_NOT_TOUCH_MODAL)) == 0;
449                if (isTouchModal || windowInfo->touchableRegionContainsPoint(x, y)) {
450                    // Found window.
451                    return windowHandle;
452                }
453            }
454        }
455
456        if (flags & InputWindowInfo::FLAG_SYSTEM_ERROR) {
457            // Error window is on top but not visible, so touch is dropped.
458            return NULL;
459        }
460    }
461    return NULL;
462}
463
464void InputDispatcher::dropInboundEventLocked(EventEntry* entry, DropReason dropReason) {
465    const char* reason;
466    switch (dropReason) {
467    case DROP_REASON_POLICY:
468#if DEBUG_INBOUND_EVENT_DETAILS
469        ALOGD("Dropped event because policy consumed it.");
470#endif
471        reason = "inbound event was dropped because the policy consumed it";
472        break;
473    case DROP_REASON_DISABLED:
474        ALOGI("Dropped event because input dispatch is disabled.");
475        reason = "inbound event was dropped because input dispatch is disabled";
476        break;
477    case DROP_REASON_APP_SWITCH:
478        ALOGI("Dropped event because of pending overdue app switch.");
479        reason = "inbound event was dropped because of pending overdue app switch";
480        break;
481    case DROP_REASON_BLOCKED:
482        ALOGI("Dropped event because the current application is not responding and the user "
483                "has started interacting with a different application.");
484        reason = "inbound event was dropped because the current application is not responding "
485                "and the user has started interacting with a different application";
486        break;
487    case DROP_REASON_STALE:
488        ALOGI("Dropped event because it is stale.");
489        reason = "inbound event was dropped because it is stale";
490        break;
491    default:
492        ALOG_ASSERT(false);
493        return;
494    }
495
496    switch (entry->type) {
497    case EventEntry::TYPE_KEY: {
498        CancelationOptions options(CancelationOptions::CANCEL_NON_POINTER_EVENTS, reason);
499        synthesizeCancelationEventsForAllConnectionsLocked(options);
500        break;
501    }
502    case EventEntry::TYPE_MOTION: {
503        MotionEntry* motionEntry = static_cast<MotionEntry*>(entry);
504        if (motionEntry->source & AINPUT_SOURCE_CLASS_POINTER) {
505            CancelationOptions options(CancelationOptions::CANCEL_POINTER_EVENTS, reason);
506            synthesizeCancelationEventsForAllConnectionsLocked(options);
507        } else {
508            CancelationOptions options(CancelationOptions::CANCEL_NON_POINTER_EVENTS, reason);
509            synthesizeCancelationEventsForAllConnectionsLocked(options);
510        }
511        break;
512    }
513    }
514}
515
516bool InputDispatcher::isAppSwitchKeyCode(int32_t keyCode) {
517    return keyCode == AKEYCODE_HOME || keyCode == AKEYCODE_ENDCALL;
518}
519
520bool InputDispatcher::isAppSwitchKeyEventLocked(KeyEntry* keyEntry) {
521    return ! (keyEntry->flags & AKEY_EVENT_FLAG_CANCELED)
522            && isAppSwitchKeyCode(keyEntry->keyCode)
523            && (keyEntry->policyFlags & POLICY_FLAG_TRUSTED)
524            && (keyEntry->policyFlags & POLICY_FLAG_PASS_TO_USER);
525}
526
527bool InputDispatcher::isAppSwitchPendingLocked() {
528    return mAppSwitchDueTime != LONG_LONG_MAX;
529}
530
531void InputDispatcher::resetPendingAppSwitchLocked(bool handled) {
532    mAppSwitchDueTime = LONG_LONG_MAX;
533
534#if DEBUG_APP_SWITCH
535    if (handled) {
536        ALOGD("App switch has arrived.");
537    } else {
538        ALOGD("App switch was abandoned.");
539    }
540#endif
541}
542
543bool InputDispatcher::isStaleEventLocked(nsecs_t currentTime, EventEntry* entry) {
544    return currentTime - entry->eventTime >= STALE_EVENT_TIMEOUT;
545}
546
547bool InputDispatcher::runCommandsLockedInterruptible() {
548    if (mCommandQueue.isEmpty()) {
549        return false;
550    }
551
552    do {
553        CommandEntry* commandEntry = mCommandQueue.dequeueAtHead();
554
555        Command command = commandEntry->command;
556        (this->*command)(commandEntry); // commands are implicitly 'LockedInterruptible'
557
558        commandEntry->connection.clear();
559        delete commandEntry;
560    } while (! mCommandQueue.isEmpty());
561    return true;
562}
563
564InputDispatcher::CommandEntry* InputDispatcher::postCommandLocked(Command command) {
565    CommandEntry* commandEntry = new CommandEntry(command);
566    mCommandQueue.enqueueAtTail(commandEntry);
567    return commandEntry;
568}
569
570void InputDispatcher::drainInboundQueueLocked() {
571    while (! mInboundQueue.isEmpty()) {
572        EventEntry* entry = mInboundQueue.dequeueAtHead();
573        releaseInboundEventLocked(entry);
574    }
575}
576
577void InputDispatcher::releasePendingEventLocked() {
578    if (mPendingEvent) {
579        resetANRTimeoutsLocked();
580        releaseInboundEventLocked(mPendingEvent);
581        mPendingEvent = NULL;
582    }
583}
584
585void InputDispatcher::releaseInboundEventLocked(EventEntry* entry) {
586    InjectionState* injectionState = entry->injectionState;
587    if (injectionState && injectionState->injectionResult == INPUT_EVENT_INJECTION_PENDING) {
588#if DEBUG_DISPATCH_CYCLE
589        ALOGD("Injected inbound event was dropped.");
590#endif
591        setInjectionResultLocked(entry, INPUT_EVENT_INJECTION_FAILED);
592    }
593    if (entry == mNextUnblockedEvent) {
594        mNextUnblockedEvent = NULL;
595    }
596    entry->release();
597}
598
599void InputDispatcher::resetKeyRepeatLocked() {
600    if (mKeyRepeatState.lastKeyEntry) {
601        mKeyRepeatState.lastKeyEntry->release();
602        mKeyRepeatState.lastKeyEntry = NULL;
603    }
604}
605
606InputDispatcher::KeyEntry* InputDispatcher::synthesizeKeyRepeatLocked(nsecs_t currentTime) {
607    KeyEntry* entry = mKeyRepeatState.lastKeyEntry;
608
609    // Reuse the repeated key entry if it is otherwise unreferenced.
610    uint32_t policyFlags = (entry->policyFlags & POLICY_FLAG_RAW_MASK)
611            | POLICY_FLAG_PASS_TO_USER | POLICY_FLAG_TRUSTED;
612    if (entry->refCount == 1) {
613        entry->recycle();
614        entry->eventTime = currentTime;
615        entry->policyFlags = policyFlags;
616        entry->repeatCount += 1;
617    } else {
618        KeyEntry* newEntry = new KeyEntry(currentTime,
619                entry->deviceId, entry->source, policyFlags,
620                entry->action, entry->flags, entry->keyCode, entry->scanCode,
621                entry->metaState, entry->repeatCount + 1, entry->downTime);
622
623        mKeyRepeatState.lastKeyEntry = newEntry;
624        entry->release();
625
626        entry = newEntry;
627    }
628    entry->syntheticRepeat = true;
629
630    // Increment reference count since we keep a reference to the event in
631    // mKeyRepeatState.lastKeyEntry in addition to the one we return.
632    entry->refCount += 1;
633
634    mKeyRepeatState.nextRepeatTime = currentTime + mConfig.keyRepeatDelay;
635    return entry;
636}
637
638bool InputDispatcher::dispatchConfigurationChangedLocked(
639        nsecs_t currentTime, ConfigurationChangedEntry* entry) {
640#if DEBUG_OUTBOUND_EVENT_DETAILS
641    ALOGD("dispatchConfigurationChanged - eventTime=%lld", entry->eventTime);
642#endif
643
644    // Reset key repeating in case a keyboard device was added or removed or something.
645    resetKeyRepeatLocked();
646
647    // Enqueue a command to run outside the lock to tell the policy that the configuration changed.
648    CommandEntry* commandEntry = postCommandLocked(
649            & InputDispatcher::doNotifyConfigurationChangedInterruptible);
650    commandEntry->eventTime = entry->eventTime;
651    return true;
652}
653
654bool InputDispatcher::dispatchDeviceResetLocked(
655        nsecs_t currentTime, DeviceResetEntry* entry) {
656#if DEBUG_OUTBOUND_EVENT_DETAILS
657    ALOGD("dispatchDeviceReset - eventTime=%lld, deviceId=%d", entry->eventTime, entry->deviceId);
658#endif
659
660    CancelationOptions options(CancelationOptions::CANCEL_ALL_EVENTS,
661            "device was reset");
662    options.deviceId = entry->deviceId;
663    synthesizeCancelationEventsForAllConnectionsLocked(options);
664    return true;
665}
666
667bool InputDispatcher::dispatchKeyLocked(nsecs_t currentTime, KeyEntry* entry,
668        DropReason* dropReason, nsecs_t* nextWakeupTime) {
669    // Preprocessing.
670    if (! entry->dispatchInProgress) {
671        if (entry->repeatCount == 0
672                && entry->action == AKEY_EVENT_ACTION_DOWN
673                && (entry->policyFlags & POLICY_FLAG_TRUSTED)
674                && (!(entry->policyFlags & POLICY_FLAG_DISABLE_KEY_REPEAT))) {
675            if (mKeyRepeatState.lastKeyEntry
676                    && mKeyRepeatState.lastKeyEntry->keyCode == entry->keyCode) {
677                // We have seen two identical key downs in a row which indicates that the device
678                // driver is automatically generating key repeats itself.  We take note of the
679                // repeat here, but we disable our own next key repeat timer since it is clear that
680                // we will not need to synthesize key repeats ourselves.
681                entry->repeatCount = mKeyRepeatState.lastKeyEntry->repeatCount + 1;
682                resetKeyRepeatLocked();
683                mKeyRepeatState.nextRepeatTime = LONG_LONG_MAX; // don't generate repeats ourselves
684            } else {
685                // Not a repeat.  Save key down state in case we do see a repeat later.
686                resetKeyRepeatLocked();
687                mKeyRepeatState.nextRepeatTime = entry->eventTime + mConfig.keyRepeatTimeout;
688            }
689            mKeyRepeatState.lastKeyEntry = entry;
690            entry->refCount += 1;
691        } else if (! entry->syntheticRepeat) {
692            resetKeyRepeatLocked();
693        }
694
695        if (entry->repeatCount == 1) {
696            entry->flags |= AKEY_EVENT_FLAG_LONG_PRESS;
697        } else {
698            entry->flags &= ~AKEY_EVENT_FLAG_LONG_PRESS;
699        }
700
701        entry->dispatchInProgress = true;
702
703        logOutboundKeyDetailsLocked("dispatchKey - ", entry);
704    }
705
706    // Handle case where the policy asked us to try again later last time.
707    if (entry->interceptKeyResult == KeyEntry::INTERCEPT_KEY_RESULT_TRY_AGAIN_LATER) {
708        if (currentTime < entry->interceptKeyWakeupTime) {
709            if (entry->interceptKeyWakeupTime < *nextWakeupTime) {
710                *nextWakeupTime = entry->interceptKeyWakeupTime;
711            }
712            return false; // wait until next wakeup
713        }
714        entry->interceptKeyResult = KeyEntry::INTERCEPT_KEY_RESULT_UNKNOWN;
715        entry->interceptKeyWakeupTime = 0;
716    }
717
718    // Give the policy a chance to intercept the key.
719    if (entry->interceptKeyResult == KeyEntry::INTERCEPT_KEY_RESULT_UNKNOWN) {
720        if (entry->policyFlags & POLICY_FLAG_PASS_TO_USER) {
721            CommandEntry* commandEntry = postCommandLocked(
722                    & InputDispatcher::doInterceptKeyBeforeDispatchingLockedInterruptible);
723            if (mFocusedWindowHandle != NULL) {
724                commandEntry->inputWindowHandle = mFocusedWindowHandle;
725            }
726            commandEntry->keyEntry = entry;
727            entry->refCount += 1;
728            return false; // wait for the command to run
729        } else {
730            entry->interceptKeyResult = KeyEntry::INTERCEPT_KEY_RESULT_CONTINUE;
731        }
732    } else if (entry->interceptKeyResult == KeyEntry::INTERCEPT_KEY_RESULT_SKIP) {
733        if (*dropReason == DROP_REASON_NOT_DROPPED) {
734            *dropReason = DROP_REASON_POLICY;
735        }
736    }
737
738    // Clean up if dropping the event.
739    if (*dropReason != DROP_REASON_NOT_DROPPED) {
740        setInjectionResultLocked(entry, *dropReason == DROP_REASON_POLICY
741                ? INPUT_EVENT_INJECTION_SUCCEEDED : INPUT_EVENT_INJECTION_FAILED);
742        return true;
743    }
744
745    // Identify targets.
746    Vector<InputTarget> inputTargets;
747    int32_t injectionResult = findFocusedWindowTargetsLocked(currentTime,
748            entry, inputTargets, nextWakeupTime);
749    if (injectionResult == INPUT_EVENT_INJECTION_PENDING) {
750        return false;
751    }
752
753    setInjectionResultLocked(entry, injectionResult);
754    if (injectionResult != INPUT_EVENT_INJECTION_SUCCEEDED) {
755        return true;
756    }
757
758    addMonitoringTargetsLocked(inputTargets);
759
760    // Dispatch the key.
761    dispatchEventLocked(currentTime, entry, inputTargets);
762    return true;
763}
764
765void InputDispatcher::logOutboundKeyDetailsLocked(const char* prefix, const KeyEntry* entry) {
766#if DEBUG_OUTBOUND_EVENT_DETAILS
767    ALOGD("%seventTime=%lld, deviceId=%d, source=0x%x, policyFlags=0x%x, "
768            "action=0x%x, flags=0x%x, keyCode=0x%x, scanCode=0x%x, metaState=0x%x, "
769            "repeatCount=%d, downTime=%lld",
770            prefix,
771            entry->eventTime, entry->deviceId, entry->source, entry->policyFlags,
772            entry->action, entry->flags, entry->keyCode, entry->scanCode, entry->metaState,
773            entry->repeatCount, entry->downTime);
774#endif
775}
776
777bool InputDispatcher::dispatchMotionLocked(
778        nsecs_t currentTime, MotionEntry* entry, DropReason* dropReason, nsecs_t* nextWakeupTime) {
779    // Preprocessing.
780    if (! entry->dispatchInProgress) {
781        entry->dispatchInProgress = true;
782
783        logOutboundMotionDetailsLocked("dispatchMotion - ", entry);
784    }
785
786    // Clean up if dropping the event.
787    if (*dropReason != DROP_REASON_NOT_DROPPED) {
788        setInjectionResultLocked(entry, *dropReason == DROP_REASON_POLICY
789                ? INPUT_EVENT_INJECTION_SUCCEEDED : INPUT_EVENT_INJECTION_FAILED);
790        return true;
791    }
792
793    bool isPointerEvent = entry->source & AINPUT_SOURCE_CLASS_POINTER;
794
795    // Identify targets.
796    Vector<InputTarget> inputTargets;
797
798    bool conflictingPointerActions = false;
799    int32_t injectionResult;
800    if (isPointerEvent) {
801        // Pointer event.  (eg. touchscreen)
802        injectionResult = findTouchedWindowTargetsLocked(currentTime,
803                entry, inputTargets, nextWakeupTime, &conflictingPointerActions);
804    } else {
805        // Non touch event.  (eg. trackball)
806        injectionResult = findFocusedWindowTargetsLocked(currentTime,
807                entry, inputTargets, nextWakeupTime);
808    }
809    if (injectionResult == INPUT_EVENT_INJECTION_PENDING) {
810        return false;
811    }
812
813    setInjectionResultLocked(entry, injectionResult);
814    if (injectionResult != INPUT_EVENT_INJECTION_SUCCEEDED) {
815        return true;
816    }
817
818    addMonitoringTargetsLocked(inputTargets);
819
820    // Dispatch the motion.
821    if (conflictingPointerActions) {
822        CancelationOptions options(CancelationOptions::CANCEL_POINTER_EVENTS,
823                "conflicting pointer actions");
824        synthesizeCancelationEventsForAllConnectionsLocked(options);
825    }
826    dispatchEventLocked(currentTime, entry, inputTargets);
827    return true;
828}
829
830
831void InputDispatcher::logOutboundMotionDetailsLocked(const char* prefix, const MotionEntry* entry) {
832#if DEBUG_OUTBOUND_EVENT_DETAILS
833    ALOGD("%seventTime=%lld, deviceId=%d, source=0x%x, policyFlags=0x%x, "
834            "action=0x%x, flags=0x%x, "
835            "metaState=0x%x, buttonState=0x%x, "
836            "edgeFlags=0x%x, xPrecision=%f, yPrecision=%f, downTime=%lld",
837            prefix,
838            entry->eventTime, entry->deviceId, entry->source, entry->policyFlags,
839            entry->action, entry->flags,
840            entry->metaState, entry->buttonState,
841            entry->edgeFlags, entry->xPrecision, entry->yPrecision,
842            entry->downTime);
843
844    for (uint32_t i = 0; i < entry->pointerCount; i++) {
845        ALOGD("  Pointer %d: id=%d, toolType=%d, "
846                "x=%f, y=%f, pressure=%f, size=%f, "
847                "touchMajor=%f, touchMinor=%f, toolMajor=%f, toolMinor=%f, "
848                "orientation=%f",
849                i, entry->pointerProperties[i].id,
850                entry->pointerProperties[i].toolType,
851                entry->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_X),
852                entry->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_Y),
853                entry->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_PRESSURE),
854                entry->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_SIZE),
855                entry->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_TOUCH_MAJOR),
856                entry->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_TOUCH_MINOR),
857                entry->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_TOOL_MAJOR),
858                entry->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_TOOL_MINOR),
859                entry->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_ORIENTATION));
860    }
861#endif
862}
863
864void InputDispatcher::dispatchEventLocked(nsecs_t currentTime,
865        EventEntry* eventEntry, const Vector<InputTarget>& inputTargets) {
866#if DEBUG_DISPATCH_CYCLE
867    ALOGD("dispatchEventToCurrentInputTargets");
868#endif
869
870    ALOG_ASSERT(eventEntry->dispatchInProgress); // should already have been set to true
871
872    pokeUserActivityLocked(eventEntry);
873
874    for (size_t i = 0; i < inputTargets.size(); i++) {
875        const InputTarget& inputTarget = inputTargets.itemAt(i);
876
877        ssize_t connectionIndex = getConnectionIndexLocked(inputTarget.inputChannel);
878        if (connectionIndex >= 0) {
879            sp<Connection> connection = mConnectionsByFd.valueAt(connectionIndex);
880            prepareDispatchCycleLocked(currentTime, connection, eventEntry, &inputTarget);
881        } else {
882#if DEBUG_FOCUS
883            ALOGD("Dropping event delivery to target with channel '%s' because it "
884                    "is no longer registered with the input dispatcher.",
885                    inputTarget.inputChannel->getName().string());
886#endif
887        }
888    }
889}
890
891int32_t InputDispatcher::handleTargetsNotReadyLocked(nsecs_t currentTime,
892        const EventEntry* entry,
893        const sp<InputApplicationHandle>& applicationHandle,
894        const sp<InputWindowHandle>& windowHandle,
895        nsecs_t* nextWakeupTime) {
896    if (applicationHandle == NULL && windowHandle == NULL) {
897        if (mInputTargetWaitCause != INPUT_TARGET_WAIT_CAUSE_SYSTEM_NOT_READY) {
898#if DEBUG_FOCUS
899            ALOGD("Waiting for system to become ready for input.");
900#endif
901            mInputTargetWaitCause = INPUT_TARGET_WAIT_CAUSE_SYSTEM_NOT_READY;
902            mInputTargetWaitStartTime = currentTime;
903            mInputTargetWaitTimeoutTime = LONG_LONG_MAX;
904            mInputTargetWaitTimeoutExpired = false;
905            mInputTargetWaitApplicationHandle.clear();
906        }
907    } else {
908        if (mInputTargetWaitCause != INPUT_TARGET_WAIT_CAUSE_APPLICATION_NOT_READY) {
909#if DEBUG_FOCUS
910            ALOGD("Waiting for application to become ready for input: %s",
911                    getApplicationWindowLabelLocked(applicationHandle, windowHandle).string());
912#endif
913            nsecs_t timeout;
914            if (windowHandle != NULL) {
915                timeout = windowHandle->getDispatchingTimeout(DEFAULT_INPUT_DISPATCHING_TIMEOUT);
916            } else if (applicationHandle != NULL) {
917                timeout = applicationHandle->getDispatchingTimeout(
918                        DEFAULT_INPUT_DISPATCHING_TIMEOUT);
919            } else {
920                timeout = DEFAULT_INPUT_DISPATCHING_TIMEOUT;
921            }
922
923            mInputTargetWaitCause = INPUT_TARGET_WAIT_CAUSE_APPLICATION_NOT_READY;
924            mInputTargetWaitStartTime = currentTime;
925            mInputTargetWaitTimeoutTime = currentTime + timeout;
926            mInputTargetWaitTimeoutExpired = false;
927            mInputTargetWaitApplicationHandle.clear();
928
929            if (windowHandle != NULL) {
930                mInputTargetWaitApplicationHandle = windowHandle->inputApplicationHandle;
931            }
932            if (mInputTargetWaitApplicationHandle == NULL && applicationHandle != NULL) {
933                mInputTargetWaitApplicationHandle = applicationHandle;
934            }
935        }
936    }
937
938    if (mInputTargetWaitTimeoutExpired) {
939        return INPUT_EVENT_INJECTION_TIMED_OUT;
940    }
941
942    if (currentTime >= mInputTargetWaitTimeoutTime) {
943        onANRLocked(currentTime, applicationHandle, windowHandle,
944                entry->eventTime, mInputTargetWaitStartTime);
945
946        // Force poll loop to wake up immediately on next iteration once we get the
947        // ANR response back from the policy.
948        *nextWakeupTime = LONG_LONG_MIN;
949        return INPUT_EVENT_INJECTION_PENDING;
950    } else {
951        // Force poll loop to wake up when timeout is due.
952        if (mInputTargetWaitTimeoutTime < *nextWakeupTime) {
953            *nextWakeupTime = mInputTargetWaitTimeoutTime;
954        }
955        return INPUT_EVENT_INJECTION_PENDING;
956    }
957}
958
959void InputDispatcher::resumeAfterTargetsNotReadyTimeoutLocked(nsecs_t newTimeout,
960        const sp<InputChannel>& inputChannel) {
961    if (newTimeout > 0) {
962        // Extend the timeout.
963        mInputTargetWaitTimeoutTime = now() + newTimeout;
964    } else {
965        // Give up.
966        mInputTargetWaitTimeoutExpired = true;
967
968        // Release the touch targets.
969        mTouchState.reset();
970
971        // Input state will not be realistic.  Mark it out of sync.
972        if (inputChannel.get()) {
973            ssize_t connectionIndex = getConnectionIndexLocked(inputChannel);
974            if (connectionIndex >= 0) {
975                sp<Connection> connection = mConnectionsByFd.valueAt(connectionIndex);
976                if (connection->status == Connection::STATUS_NORMAL) {
977                    CancelationOptions options(CancelationOptions::CANCEL_ALL_EVENTS,
978                            "application not responding");
979                    synthesizeCancelationEventsForConnectionLocked(connection, options);
980                }
981            }
982        }
983    }
984}
985
986nsecs_t InputDispatcher::getTimeSpentWaitingForApplicationLocked(
987        nsecs_t currentTime) {
988    if (mInputTargetWaitCause == INPUT_TARGET_WAIT_CAUSE_APPLICATION_NOT_READY) {
989        return currentTime - mInputTargetWaitStartTime;
990    }
991    return 0;
992}
993
994void InputDispatcher::resetANRTimeoutsLocked() {
995#if DEBUG_FOCUS
996        ALOGD("Resetting ANR timeouts.");
997#endif
998
999    // Reset input target wait timeout.
1000    mInputTargetWaitCause = INPUT_TARGET_WAIT_CAUSE_NONE;
1001    mInputTargetWaitApplicationHandle.clear();
1002}
1003
1004int32_t InputDispatcher::findFocusedWindowTargetsLocked(nsecs_t currentTime,
1005        const EventEntry* entry, Vector<InputTarget>& inputTargets, nsecs_t* nextWakeupTime) {
1006    int32_t injectionResult;
1007
1008    // If there is no currently focused window and no focused application
1009    // then drop the event.
1010    if (mFocusedWindowHandle == NULL) {
1011        if (mFocusedApplicationHandle != NULL) {
1012#if DEBUG_FOCUS
1013            ALOGD("Waiting because there is no focused window but there is a "
1014                    "focused application that may eventually add a window: %s.",
1015                    getApplicationWindowLabelLocked(mFocusedApplicationHandle, NULL).string());
1016#endif
1017            injectionResult = handleTargetsNotReadyLocked(currentTime, entry,
1018                    mFocusedApplicationHandle, NULL, nextWakeupTime);
1019            goto Unresponsive;
1020        }
1021
1022        ALOGI("Dropping event because there is no focused window or focused application.");
1023        injectionResult = INPUT_EVENT_INJECTION_FAILED;
1024        goto Failed;
1025    }
1026
1027    // Check permissions.
1028    if (! checkInjectionPermission(mFocusedWindowHandle, entry->injectionState)) {
1029        injectionResult = INPUT_EVENT_INJECTION_PERMISSION_DENIED;
1030        goto Failed;
1031    }
1032
1033    // If the currently focused window is paused then keep waiting.
1034    if (mFocusedWindowHandle->getInfo()->paused) {
1035#if DEBUG_FOCUS
1036        ALOGD("Waiting because focused window is paused.");
1037#endif
1038        injectionResult = handleTargetsNotReadyLocked(currentTime, entry,
1039                mFocusedApplicationHandle, mFocusedWindowHandle, nextWakeupTime);
1040        goto Unresponsive;
1041    }
1042
1043    // If the currently focused window is still working on previous events then keep waiting.
1044    if (!isWindowReadyForMoreInputLocked(currentTime, mFocusedWindowHandle, entry)) {
1045#if DEBUG_FOCUS
1046        ALOGD("Waiting because focused window still processing previous input.");
1047#endif
1048        injectionResult = handleTargetsNotReadyLocked(currentTime, entry,
1049                mFocusedApplicationHandle, mFocusedWindowHandle, nextWakeupTime);
1050        goto Unresponsive;
1051    }
1052
1053    // Success!  Output targets.
1054    injectionResult = INPUT_EVENT_INJECTION_SUCCEEDED;
1055    addWindowTargetLocked(mFocusedWindowHandle,
1056            InputTarget::FLAG_FOREGROUND | InputTarget::FLAG_DISPATCH_AS_IS, BitSet32(0),
1057            inputTargets);
1058
1059    // Done.
1060Failed:
1061Unresponsive:
1062    nsecs_t timeSpentWaitingForApplication = getTimeSpentWaitingForApplicationLocked(currentTime);
1063    updateDispatchStatisticsLocked(currentTime, entry,
1064            injectionResult, timeSpentWaitingForApplication);
1065#if DEBUG_FOCUS
1066    ALOGD("findFocusedWindow finished: injectionResult=%d, "
1067            "timeSpendWaitingForApplication=%0.1fms",
1068            injectionResult, timeSpentWaitingForApplication / 1000000.0);
1069#endif
1070    return injectionResult;
1071}
1072
1073int32_t InputDispatcher::findTouchedWindowTargetsLocked(nsecs_t currentTime,
1074        const MotionEntry* entry, Vector<InputTarget>& inputTargets, nsecs_t* nextWakeupTime,
1075        bool* outConflictingPointerActions) {
1076    enum InjectionPermission {
1077        INJECTION_PERMISSION_UNKNOWN,
1078        INJECTION_PERMISSION_GRANTED,
1079        INJECTION_PERMISSION_DENIED
1080    };
1081
1082    nsecs_t startTime = now();
1083
1084    // For security reasons, we defer updating the touch state until we are sure that
1085    // event injection will be allowed.
1086    //
1087    // FIXME In the original code, screenWasOff could never be set to true.
1088    //       The reason is that the POLICY_FLAG_WOKE_HERE
1089    //       and POLICY_FLAG_BRIGHT_HERE flags were set only when preprocessing raw
1090    //       EV_KEY, EV_REL and EV_ABS events.  As it happens, the touch event was
1091    //       actually enqueued using the policyFlags that appeared in the final EV_SYN
1092    //       events upon which no preprocessing took place.  So policyFlags was always 0.
1093    //       In the new native input dispatcher we're a bit more careful about event
1094    //       preprocessing so the touches we receive can actually have non-zero policyFlags.
1095    //       Unfortunately we obtain undesirable behavior.
1096    //
1097    //       Here's what happens:
1098    //
1099    //       When the device dims in anticipation of going to sleep, touches
1100    //       in windows which have FLAG_TOUCHABLE_WHEN_WAKING cause
1101    //       the device to brighten and reset the user activity timer.
1102    //       Touches on other windows (such as the launcher window)
1103    //       are dropped.  Then after a moment, the device goes to sleep.  Oops.
1104    //
1105    //       Also notice how screenWasOff was being initialized using POLICY_FLAG_BRIGHT_HERE
1106    //       instead of POLICY_FLAG_WOKE_HERE...
1107    //
1108    bool screenWasOff = false; // original policy: policyFlags & POLICY_FLAG_BRIGHT_HERE;
1109
1110    int32_t action = entry->action;
1111    int32_t maskedAction = action & AMOTION_EVENT_ACTION_MASK;
1112
1113    // Update the touch state as needed based on the properties of the touch event.
1114    int32_t injectionResult = INPUT_EVENT_INJECTION_PENDING;
1115    InjectionPermission injectionPermission = INJECTION_PERMISSION_UNKNOWN;
1116    sp<InputWindowHandle> newHoverWindowHandle;
1117
1118    bool isSplit = mTouchState.split;
1119    bool switchedDevice = mTouchState.deviceId >= 0
1120            && (mTouchState.deviceId != entry->deviceId
1121                    || mTouchState.source != entry->source);
1122    bool isHoverAction = (maskedAction == AMOTION_EVENT_ACTION_HOVER_MOVE
1123            || maskedAction == AMOTION_EVENT_ACTION_HOVER_ENTER
1124            || maskedAction == AMOTION_EVENT_ACTION_HOVER_EXIT);
1125    bool newGesture = (maskedAction == AMOTION_EVENT_ACTION_DOWN
1126            || maskedAction == AMOTION_EVENT_ACTION_SCROLL
1127            || isHoverAction);
1128    bool wrongDevice = false;
1129    if (newGesture) {
1130        bool down = maskedAction == AMOTION_EVENT_ACTION_DOWN;
1131        if (switchedDevice && mTouchState.down && !down) {
1132#if DEBUG_FOCUS
1133            ALOGD("Dropping event because a pointer for a different device is already down.");
1134#endif
1135            mTempTouchState.copyFrom(mTouchState);
1136            injectionResult = INPUT_EVENT_INJECTION_FAILED;
1137            switchedDevice = false;
1138            wrongDevice = true;
1139            goto Failed;
1140        }
1141        mTempTouchState.reset();
1142        mTempTouchState.down = down;
1143        mTempTouchState.deviceId = entry->deviceId;
1144        mTempTouchState.source = entry->source;
1145        isSplit = false;
1146    } else {
1147        mTempTouchState.copyFrom(mTouchState);
1148    }
1149
1150    if (newGesture || (isSplit && maskedAction == AMOTION_EVENT_ACTION_POINTER_DOWN)) {
1151        /* Case 1: New splittable pointer going down, or need target for hover or scroll. */
1152
1153        int32_t pointerIndex = getMotionEventActionPointerIndex(action);
1154        int32_t x = int32_t(entry->pointerCoords[pointerIndex].
1155                getAxisValue(AMOTION_EVENT_AXIS_X));
1156        int32_t y = int32_t(entry->pointerCoords[pointerIndex].
1157                getAxisValue(AMOTION_EVENT_AXIS_Y));
1158        sp<InputWindowHandle> newTouchedWindowHandle;
1159        sp<InputWindowHandle> topErrorWindowHandle;
1160        bool isTouchModal = false;
1161
1162        // Traverse windows from front to back to find touched window and outside targets.
1163        size_t numWindows = mWindowHandles.size();
1164        for (size_t i = 0; i < numWindows; i++) {
1165            sp<InputWindowHandle> windowHandle = mWindowHandles.itemAt(i);
1166            const InputWindowInfo* windowInfo = windowHandle->getInfo();
1167            int32_t flags = windowInfo->layoutParamsFlags;
1168
1169            if (flags & InputWindowInfo::FLAG_SYSTEM_ERROR) {
1170                if (topErrorWindowHandle == NULL) {
1171                    topErrorWindowHandle = windowHandle;
1172                }
1173            }
1174
1175            if (windowInfo->visible) {
1176                if (! (flags & InputWindowInfo::FLAG_NOT_TOUCHABLE)) {
1177                    isTouchModal = (flags & (InputWindowInfo::FLAG_NOT_FOCUSABLE
1178                            | InputWindowInfo::FLAG_NOT_TOUCH_MODAL)) == 0;
1179                    if (isTouchModal || windowInfo->touchableRegionContainsPoint(x, y)) {
1180                        if (! screenWasOff
1181                                || (flags & InputWindowInfo::FLAG_TOUCHABLE_WHEN_WAKING)) {
1182                            newTouchedWindowHandle = windowHandle;
1183                        }
1184                        break; // found touched window, exit window loop
1185                    }
1186                }
1187
1188                if (maskedAction == AMOTION_EVENT_ACTION_DOWN
1189                        && (flags & InputWindowInfo::FLAG_WATCH_OUTSIDE_TOUCH)) {
1190                    int32_t outsideTargetFlags = InputTarget::FLAG_DISPATCH_AS_OUTSIDE;
1191                    if (isWindowObscuredAtPointLocked(windowHandle, x, y)) {
1192                        outsideTargetFlags |= InputTarget::FLAG_WINDOW_IS_OBSCURED;
1193                    }
1194
1195                    mTempTouchState.addOrUpdateWindow(
1196                            windowHandle, outsideTargetFlags, BitSet32(0));
1197                }
1198            }
1199        }
1200
1201        // If there is an error window but it is not taking focus (typically because
1202        // it is invisible) then wait for it.  Any other focused window may in
1203        // fact be in ANR state.
1204        if (topErrorWindowHandle != NULL && newTouchedWindowHandle != topErrorWindowHandle) {
1205#if DEBUG_FOCUS
1206            ALOGD("Waiting because system error window is pending.");
1207#endif
1208            injectionResult = handleTargetsNotReadyLocked(currentTime, entry,
1209                    NULL, NULL, nextWakeupTime);
1210            injectionPermission = INJECTION_PERMISSION_UNKNOWN;
1211            goto Unresponsive;
1212        }
1213
1214        // Figure out whether splitting will be allowed for this window.
1215        if (newTouchedWindowHandle != NULL
1216                && newTouchedWindowHandle->getInfo()->supportsSplitTouch()) {
1217            // New window supports splitting.
1218            isSplit = true;
1219        } else if (isSplit) {
1220            // New window does not support splitting but we have already split events.
1221            // Assign the pointer to the first foreground window we find.
1222            // (May be NULL which is why we put this code block before the next check.)
1223            newTouchedWindowHandle = mTempTouchState.getFirstForegroundWindowHandle();
1224        }
1225
1226        // If we did not find a touched window then fail.
1227        if (newTouchedWindowHandle == NULL) {
1228            if (mFocusedApplicationHandle != NULL) {
1229#if DEBUG_FOCUS
1230                ALOGD("Waiting because there is no touched window but there is a "
1231                        "focused application that may eventually add a new window: %s.",
1232                        getApplicationWindowLabelLocked(mFocusedApplicationHandle, NULL).string());
1233#endif
1234                injectionResult = handleTargetsNotReadyLocked(currentTime, entry,
1235                        mFocusedApplicationHandle, NULL, nextWakeupTime);
1236                goto Unresponsive;
1237            }
1238
1239            ALOGI("Dropping event because there is no touched window or focused application.");
1240            injectionResult = INPUT_EVENT_INJECTION_FAILED;
1241            goto Failed;
1242        }
1243
1244        // Set target flags.
1245        int32_t targetFlags = InputTarget::FLAG_FOREGROUND | InputTarget::FLAG_DISPATCH_AS_IS;
1246        if (isSplit) {
1247            targetFlags |= InputTarget::FLAG_SPLIT;
1248        }
1249        if (isWindowObscuredAtPointLocked(newTouchedWindowHandle, x, y)) {
1250            targetFlags |= InputTarget::FLAG_WINDOW_IS_OBSCURED;
1251        }
1252
1253        // Update hover state.
1254        if (isHoverAction) {
1255            newHoverWindowHandle = newTouchedWindowHandle;
1256        } else if (maskedAction == AMOTION_EVENT_ACTION_SCROLL) {
1257            newHoverWindowHandle = mLastHoverWindowHandle;
1258        }
1259
1260        // Update the temporary touch state.
1261        BitSet32 pointerIds;
1262        if (isSplit) {
1263            uint32_t pointerId = entry->pointerProperties[pointerIndex].id;
1264            pointerIds.markBit(pointerId);
1265        }
1266        mTempTouchState.addOrUpdateWindow(newTouchedWindowHandle, targetFlags, pointerIds);
1267    } else {
1268        /* Case 2: Pointer move, up, cancel or non-splittable pointer down. */
1269
1270        // If the pointer is not currently down, then ignore the event.
1271        if (! mTempTouchState.down) {
1272#if DEBUG_FOCUS
1273            ALOGD("Dropping event because the pointer is not down or we previously "
1274                    "dropped the pointer down event.");
1275#endif
1276            injectionResult = INPUT_EVENT_INJECTION_FAILED;
1277            goto Failed;
1278        }
1279
1280        // Check whether touches should slip outside of the current foreground window.
1281        if (maskedAction == AMOTION_EVENT_ACTION_MOVE
1282                && entry->pointerCount == 1
1283                && mTempTouchState.isSlippery()) {
1284            int32_t x = int32_t(entry->pointerCoords[0].getAxisValue(AMOTION_EVENT_AXIS_X));
1285            int32_t y = int32_t(entry->pointerCoords[0].getAxisValue(AMOTION_EVENT_AXIS_Y));
1286
1287            sp<InputWindowHandle> oldTouchedWindowHandle =
1288                    mTempTouchState.getFirstForegroundWindowHandle();
1289            sp<InputWindowHandle> newTouchedWindowHandle = findTouchedWindowAtLocked(x, y);
1290            if (oldTouchedWindowHandle != newTouchedWindowHandle
1291                    && newTouchedWindowHandle != NULL) {
1292#if DEBUG_FOCUS
1293                ALOGD("Touch is slipping out of window %s into window %s.",
1294                        oldTouchedWindowHandle->getName().string(),
1295                        newTouchedWindowHandle->getName().string());
1296#endif
1297                // Make a slippery exit from the old window.
1298                mTempTouchState.addOrUpdateWindow(oldTouchedWindowHandle,
1299                        InputTarget::FLAG_DISPATCH_AS_SLIPPERY_EXIT, BitSet32(0));
1300
1301                // Make a slippery entrance into the new window.
1302                if (newTouchedWindowHandle->getInfo()->supportsSplitTouch()) {
1303                    isSplit = true;
1304                }
1305
1306                int32_t targetFlags = InputTarget::FLAG_FOREGROUND
1307                        | InputTarget::FLAG_DISPATCH_AS_SLIPPERY_ENTER;
1308                if (isSplit) {
1309                    targetFlags |= InputTarget::FLAG_SPLIT;
1310                }
1311                if (isWindowObscuredAtPointLocked(newTouchedWindowHandle, x, y)) {
1312                    targetFlags |= InputTarget::FLAG_WINDOW_IS_OBSCURED;
1313                }
1314
1315                BitSet32 pointerIds;
1316                if (isSplit) {
1317                    pointerIds.markBit(entry->pointerProperties[0].id);
1318                }
1319                mTempTouchState.addOrUpdateWindow(newTouchedWindowHandle, targetFlags, pointerIds);
1320            }
1321        }
1322    }
1323
1324    if (newHoverWindowHandle != mLastHoverWindowHandle) {
1325        // Let the previous window know that the hover sequence is over.
1326        if (mLastHoverWindowHandle != NULL) {
1327#if DEBUG_HOVER
1328            ALOGD("Sending hover exit event to window %s.",
1329                    mLastHoverWindowHandle->getName().string());
1330#endif
1331            mTempTouchState.addOrUpdateWindow(mLastHoverWindowHandle,
1332                    InputTarget::FLAG_DISPATCH_AS_HOVER_EXIT, BitSet32(0));
1333        }
1334
1335        // Let the new window know that the hover sequence is starting.
1336        if (newHoverWindowHandle != NULL) {
1337#if DEBUG_HOVER
1338            ALOGD("Sending hover enter event to window %s.",
1339                    newHoverWindowHandle->getName().string());
1340#endif
1341            mTempTouchState.addOrUpdateWindow(newHoverWindowHandle,
1342                    InputTarget::FLAG_DISPATCH_AS_HOVER_ENTER, BitSet32(0));
1343        }
1344    }
1345
1346    // Check permission to inject into all touched foreground windows and ensure there
1347    // is at least one touched foreground window.
1348    {
1349        bool haveForegroundWindow = false;
1350        for (size_t i = 0; i < mTempTouchState.windows.size(); i++) {
1351            const TouchedWindow& touchedWindow = mTempTouchState.windows[i];
1352            if (touchedWindow.targetFlags & InputTarget::FLAG_FOREGROUND) {
1353                haveForegroundWindow = true;
1354                if (! checkInjectionPermission(touchedWindow.windowHandle,
1355                        entry->injectionState)) {
1356                    injectionResult = INPUT_EVENT_INJECTION_PERMISSION_DENIED;
1357                    injectionPermission = INJECTION_PERMISSION_DENIED;
1358                    goto Failed;
1359                }
1360            }
1361        }
1362        if (! haveForegroundWindow) {
1363#if DEBUG_FOCUS
1364            ALOGD("Dropping event because there is no touched foreground window to receive it.");
1365#endif
1366            injectionResult = INPUT_EVENT_INJECTION_FAILED;
1367            goto Failed;
1368        }
1369
1370        // Permission granted to injection into all touched foreground windows.
1371        injectionPermission = INJECTION_PERMISSION_GRANTED;
1372    }
1373
1374    // Check whether windows listening for outside touches are owned by the same UID. If it is
1375    // set the policy flag that we will not reveal coordinate information to this window.
1376    if (maskedAction == AMOTION_EVENT_ACTION_DOWN) {
1377        sp<InputWindowHandle> foregroundWindowHandle =
1378                mTempTouchState.getFirstForegroundWindowHandle();
1379        const int32_t foregroundWindowUid = foregroundWindowHandle->getInfo()->ownerUid;
1380        for (size_t i = 0; i < mTempTouchState.windows.size(); i++) {
1381            const TouchedWindow& touchedWindow = mTempTouchState.windows[i];
1382            if (touchedWindow.targetFlags & InputTarget::FLAG_DISPATCH_AS_OUTSIDE) {
1383                sp<InputWindowHandle> inputWindowHandle = touchedWindow.windowHandle;
1384                if (inputWindowHandle->getInfo()->ownerUid != foregroundWindowUid) {
1385                    mTempTouchState.addOrUpdateWindow(inputWindowHandle,
1386                            InputTarget::FLAG_ZERO_COORDS, BitSet32(0));
1387                }
1388            }
1389        }
1390    }
1391
1392    // Ensure all touched foreground windows are ready for new input.
1393    for (size_t i = 0; i < mTempTouchState.windows.size(); i++) {
1394        const TouchedWindow& touchedWindow = mTempTouchState.windows[i];
1395        if (touchedWindow.targetFlags & InputTarget::FLAG_FOREGROUND) {
1396            // If the touched window is paused then keep waiting.
1397            if (touchedWindow.windowHandle->getInfo()->paused) {
1398#if DEBUG_FOCUS
1399                ALOGD("Waiting because touched window is paused.");
1400#endif
1401                injectionResult = handleTargetsNotReadyLocked(currentTime, entry,
1402                        NULL, touchedWindow.windowHandle, nextWakeupTime);
1403                goto Unresponsive;
1404            }
1405
1406            // If the touched window is still working on previous events then keep waiting.
1407            if (!isWindowReadyForMoreInputLocked(currentTime, touchedWindow.windowHandle, entry)) {
1408#if DEBUG_FOCUS
1409                ALOGD("Waiting because touched window still processing previous input.");
1410#endif
1411                injectionResult = handleTargetsNotReadyLocked(currentTime, entry,
1412                        NULL, touchedWindow.windowHandle, nextWakeupTime);
1413                goto Unresponsive;
1414            }
1415        }
1416    }
1417
1418    // If this is the first pointer going down and the touched window has a wallpaper
1419    // then also add the touched wallpaper windows so they are locked in for the duration
1420    // of the touch gesture.
1421    // We do not collect wallpapers during HOVER_MOVE or SCROLL because the wallpaper
1422    // engine only supports touch events.  We would need to add a mechanism similar
1423    // to View.onGenericMotionEvent to enable wallpapers to handle these events.
1424    if (maskedAction == AMOTION_EVENT_ACTION_DOWN) {
1425        sp<InputWindowHandle> foregroundWindowHandle =
1426                mTempTouchState.getFirstForegroundWindowHandle();
1427        if (foregroundWindowHandle->getInfo()->hasWallpaper) {
1428            for (size_t i = 0; i < mWindowHandles.size(); i++) {
1429                sp<InputWindowHandle> windowHandle = mWindowHandles.itemAt(i);
1430                if (windowHandle->getInfo()->layoutParamsType
1431                        == InputWindowInfo::TYPE_WALLPAPER) {
1432                    mTempTouchState.addOrUpdateWindow(windowHandle,
1433                            InputTarget::FLAG_WINDOW_IS_OBSCURED
1434                                    | InputTarget::FLAG_DISPATCH_AS_IS,
1435                            BitSet32(0));
1436                }
1437            }
1438        }
1439    }
1440
1441    // Success!  Output targets.
1442    injectionResult = INPUT_EVENT_INJECTION_SUCCEEDED;
1443
1444    for (size_t i = 0; i < mTempTouchState.windows.size(); i++) {
1445        const TouchedWindow& touchedWindow = mTempTouchState.windows.itemAt(i);
1446        addWindowTargetLocked(touchedWindow.windowHandle, touchedWindow.targetFlags,
1447                touchedWindow.pointerIds, inputTargets);
1448    }
1449
1450    // Drop the outside or hover touch windows since we will not care about them
1451    // in the next iteration.
1452    mTempTouchState.filterNonAsIsTouchWindows();
1453
1454Failed:
1455    // Check injection permission once and for all.
1456    if (injectionPermission == INJECTION_PERMISSION_UNKNOWN) {
1457        if (checkInjectionPermission(NULL, entry->injectionState)) {
1458            injectionPermission = INJECTION_PERMISSION_GRANTED;
1459        } else {
1460            injectionPermission = INJECTION_PERMISSION_DENIED;
1461        }
1462    }
1463
1464    // Update final pieces of touch state if the injector had permission.
1465    if (injectionPermission == INJECTION_PERMISSION_GRANTED) {
1466        if (!wrongDevice) {
1467            if (switchedDevice) {
1468#if DEBUG_FOCUS
1469                ALOGD("Conflicting pointer actions: Switched to a different device.");
1470#endif
1471                *outConflictingPointerActions = true;
1472            }
1473
1474            if (isHoverAction) {
1475                // Started hovering, therefore no longer down.
1476                if (mTouchState.down) {
1477#if DEBUG_FOCUS
1478                    ALOGD("Conflicting pointer actions: Hover received while pointer was down.");
1479#endif
1480                    *outConflictingPointerActions = true;
1481                }
1482                mTouchState.reset();
1483                if (maskedAction == AMOTION_EVENT_ACTION_HOVER_ENTER
1484                        || maskedAction == AMOTION_EVENT_ACTION_HOVER_MOVE) {
1485                    mTouchState.deviceId = entry->deviceId;
1486                    mTouchState.source = entry->source;
1487                }
1488            } else if (maskedAction == AMOTION_EVENT_ACTION_UP
1489                    || maskedAction == AMOTION_EVENT_ACTION_CANCEL) {
1490                // All pointers up or canceled.
1491                mTouchState.reset();
1492            } else if (maskedAction == AMOTION_EVENT_ACTION_DOWN) {
1493                // First pointer went down.
1494                if (mTouchState.down) {
1495#if DEBUG_FOCUS
1496                    ALOGD("Conflicting pointer actions: Down received while already down.");
1497#endif
1498                    *outConflictingPointerActions = true;
1499                }
1500                mTouchState.copyFrom(mTempTouchState);
1501            } else if (maskedAction == AMOTION_EVENT_ACTION_POINTER_UP) {
1502                // One pointer went up.
1503                if (isSplit) {
1504                    int32_t pointerIndex = getMotionEventActionPointerIndex(action);
1505                    uint32_t pointerId = entry->pointerProperties[pointerIndex].id;
1506
1507                    for (size_t i = 0; i < mTempTouchState.windows.size(); ) {
1508                        TouchedWindow& touchedWindow = mTempTouchState.windows.editItemAt(i);
1509                        if (touchedWindow.targetFlags & InputTarget::FLAG_SPLIT) {
1510                            touchedWindow.pointerIds.clearBit(pointerId);
1511                            if (touchedWindow.pointerIds.isEmpty()) {
1512                                mTempTouchState.windows.removeAt(i);
1513                                continue;
1514                            }
1515                        }
1516                        i += 1;
1517                    }
1518                }
1519                mTouchState.copyFrom(mTempTouchState);
1520            } else if (maskedAction == AMOTION_EVENT_ACTION_SCROLL) {
1521                // Discard temporary touch state since it was only valid for this action.
1522            } else {
1523                // Save changes to touch state as-is for all other actions.
1524                mTouchState.copyFrom(mTempTouchState);
1525            }
1526
1527            // Update hover state.
1528            mLastHoverWindowHandle = newHoverWindowHandle;
1529        }
1530    } else {
1531#if DEBUG_FOCUS
1532        ALOGD("Not updating touch focus because injection was denied.");
1533#endif
1534    }
1535
1536Unresponsive:
1537    // Reset temporary touch state to ensure we release unnecessary references to input channels.
1538    mTempTouchState.reset();
1539
1540    nsecs_t timeSpentWaitingForApplication = getTimeSpentWaitingForApplicationLocked(currentTime);
1541    updateDispatchStatisticsLocked(currentTime, entry,
1542            injectionResult, timeSpentWaitingForApplication);
1543#if DEBUG_FOCUS
1544    ALOGD("findTouchedWindow finished: injectionResult=%d, injectionPermission=%d, "
1545            "timeSpentWaitingForApplication=%0.1fms",
1546            injectionResult, injectionPermission, timeSpentWaitingForApplication / 1000000.0);
1547#endif
1548    return injectionResult;
1549}
1550
1551void InputDispatcher::addWindowTargetLocked(const sp<InputWindowHandle>& windowHandle,
1552        int32_t targetFlags, BitSet32 pointerIds, Vector<InputTarget>& inputTargets) {
1553    inputTargets.push();
1554
1555    const InputWindowInfo* windowInfo = windowHandle->getInfo();
1556    InputTarget& target = inputTargets.editTop();
1557    target.inputChannel = windowInfo->inputChannel;
1558    target.flags = targetFlags;
1559    target.xOffset = - windowInfo->frameLeft;
1560    target.yOffset = - windowInfo->frameTop;
1561    target.scaleFactor = windowInfo->scaleFactor;
1562    target.pointerIds = pointerIds;
1563}
1564
1565void InputDispatcher::addMonitoringTargetsLocked(Vector<InputTarget>& inputTargets) {
1566    for (size_t i = 0; i < mMonitoringChannels.size(); i++) {
1567        inputTargets.push();
1568
1569        InputTarget& target = inputTargets.editTop();
1570        target.inputChannel = mMonitoringChannels[i];
1571        target.flags = InputTarget::FLAG_DISPATCH_AS_IS;
1572        target.xOffset = 0;
1573        target.yOffset = 0;
1574        target.pointerIds.clear();
1575        target.scaleFactor = 1.0f;
1576    }
1577}
1578
1579bool InputDispatcher::checkInjectionPermission(const sp<InputWindowHandle>& windowHandle,
1580        const InjectionState* injectionState) {
1581    if (injectionState
1582            && (windowHandle == NULL
1583                    || windowHandle->getInfo()->ownerUid != injectionState->injectorUid)
1584            && !hasInjectionPermission(injectionState->injectorPid, injectionState->injectorUid)) {
1585        if (windowHandle != NULL) {
1586            ALOGW("Permission denied: injecting event from pid %d uid %d to window %s "
1587                    "owned by uid %d",
1588                    injectionState->injectorPid, injectionState->injectorUid,
1589                    windowHandle->getName().string(),
1590                    windowHandle->getInfo()->ownerUid);
1591        } else {
1592            ALOGW("Permission denied: injecting event from pid %d uid %d",
1593                    injectionState->injectorPid, injectionState->injectorUid);
1594        }
1595        return false;
1596    }
1597    return true;
1598}
1599
1600bool InputDispatcher::isWindowObscuredAtPointLocked(
1601        const sp<InputWindowHandle>& windowHandle, int32_t x, int32_t y) const {
1602    size_t numWindows = mWindowHandles.size();
1603    for (size_t i = 0; i < numWindows; i++) {
1604        sp<InputWindowHandle> otherHandle = mWindowHandles.itemAt(i);
1605        if (otherHandle == windowHandle) {
1606            break;
1607        }
1608
1609        const InputWindowInfo* otherInfo = otherHandle->getInfo();
1610        if (otherInfo->visible && ! otherInfo->isTrustedOverlay()
1611                && otherInfo->frameContainsPoint(x, y)) {
1612            return true;
1613        }
1614    }
1615    return false;
1616}
1617
1618bool InputDispatcher::isWindowReadyForMoreInputLocked(nsecs_t currentTime,
1619        const sp<InputWindowHandle>& windowHandle, const EventEntry* eventEntry) {
1620    ssize_t connectionIndex = getConnectionIndexLocked(windowHandle->getInputChannel());
1621    if (connectionIndex >= 0) {
1622        sp<Connection> connection = mConnectionsByFd.valueAt(connectionIndex);
1623        if (connection->inputPublisherBlocked) {
1624            return false;
1625        }
1626        if (eventEntry->type == EventEntry::TYPE_KEY) {
1627            // If the event is a key event, then we must wait for all previous events to
1628            // complete before delivering it because previous events may have the
1629            // side-effect of transferring focus to a different window and we want to
1630            // ensure that the following keys are sent to the new window.
1631            //
1632            // Suppose the user touches a button in a window then immediately presses "A".
1633            // If the button causes a pop-up window to appear then we want to ensure that
1634            // the "A" key is delivered to the new pop-up window.  This is because users
1635            // often anticipate pending UI changes when typing on a keyboard.
1636            // To obtain this behavior, we must serialize key events with respect to all
1637            // prior input events.
1638            return connection->outboundQueue.isEmpty()
1639                    && connection->waitQueue.isEmpty();
1640        }
1641        // Touch events can always be sent to a window immediately because the user intended
1642        // to touch whatever was visible at the time.  Even if focus changes or a new
1643        // window appears moments later, the touch event was meant to be delivered to
1644        // whatever window happened to be on screen at the time.
1645        //
1646        // Generic motion events, such as trackball or joystick events are a little trickier.
1647        // Like key events, generic motion events are delivered to the focused window.
1648        // Unlike key events, generic motion events don't tend to transfer focus to other
1649        // windows and it is not important for them to be serialized.  So we prefer to deliver
1650        // generic motion events as soon as possible to improve efficiency and reduce lag
1651        // through batching.
1652        //
1653        // The one case where we pause input event delivery is when the wait queue is piling
1654        // up with lots of events because the application is not responding.
1655        // This condition ensures that ANRs are detected reliably.
1656        if (!connection->waitQueue.isEmpty()
1657                && currentTime >= connection->waitQueue.head->eventEntry->eventTime
1658                        + STREAM_AHEAD_EVENT_TIMEOUT) {
1659            return false;
1660        }
1661    }
1662    return true;
1663}
1664
1665String8 InputDispatcher::getApplicationWindowLabelLocked(
1666        const sp<InputApplicationHandle>& applicationHandle,
1667        const sp<InputWindowHandle>& windowHandle) {
1668    if (applicationHandle != NULL) {
1669        if (windowHandle != NULL) {
1670            String8 label(applicationHandle->getName());
1671            label.append(" - ");
1672            label.append(windowHandle->getName());
1673            return label;
1674        } else {
1675            return applicationHandle->getName();
1676        }
1677    } else if (windowHandle != NULL) {
1678        return windowHandle->getName();
1679    } else {
1680        return String8("<unknown application or window>");
1681    }
1682}
1683
1684void InputDispatcher::pokeUserActivityLocked(const EventEntry* eventEntry) {
1685    int32_t eventType = POWER_MANAGER_OTHER_EVENT;
1686    switch (eventEntry->type) {
1687    case EventEntry::TYPE_MOTION: {
1688        const MotionEntry* motionEntry = static_cast<const MotionEntry*>(eventEntry);
1689        if (motionEntry->action == AMOTION_EVENT_ACTION_CANCEL) {
1690            return;
1691        }
1692
1693        if (MotionEvent::isTouchEvent(motionEntry->source, motionEntry->action)) {
1694            eventType = POWER_MANAGER_TOUCH_EVENT;
1695        }
1696        break;
1697    }
1698    case EventEntry::TYPE_KEY: {
1699        const KeyEntry* keyEntry = static_cast<const KeyEntry*>(eventEntry);
1700        if (keyEntry->flags & AKEY_EVENT_FLAG_CANCELED) {
1701            return;
1702        }
1703        eventType = POWER_MANAGER_BUTTON_EVENT;
1704        break;
1705    }
1706    }
1707
1708    CommandEntry* commandEntry = postCommandLocked(
1709            & InputDispatcher::doPokeUserActivityLockedInterruptible);
1710    commandEntry->eventTime = eventEntry->eventTime;
1711    commandEntry->userActivityEventType = eventType;
1712}
1713
1714void InputDispatcher::prepareDispatchCycleLocked(nsecs_t currentTime,
1715        const sp<Connection>& connection, EventEntry* eventEntry, const InputTarget* inputTarget) {
1716#if DEBUG_DISPATCH_CYCLE
1717    ALOGD("channel '%s' ~ prepareDispatchCycle - flags=0x%08x, "
1718            "xOffset=%f, yOffset=%f, scaleFactor=%f, "
1719            "pointerIds=0x%x",
1720            connection->getInputChannelName(), inputTarget->flags,
1721            inputTarget->xOffset, inputTarget->yOffset,
1722            inputTarget->scaleFactor, inputTarget->pointerIds.value);
1723#endif
1724
1725    // Skip this event if the connection status is not normal.
1726    // We don't want to enqueue additional outbound events if the connection is broken.
1727    if (connection->status != Connection::STATUS_NORMAL) {
1728#if DEBUG_DISPATCH_CYCLE
1729        ALOGD("channel '%s' ~ Dropping event because the channel status is %s",
1730                connection->getInputChannelName(), connection->getStatusLabel());
1731#endif
1732        return;
1733    }
1734
1735    // Split a motion event if needed.
1736    if (inputTarget->flags & InputTarget::FLAG_SPLIT) {
1737        ALOG_ASSERT(eventEntry->type == EventEntry::TYPE_MOTION);
1738
1739        MotionEntry* originalMotionEntry = static_cast<MotionEntry*>(eventEntry);
1740        if (inputTarget->pointerIds.count() != originalMotionEntry->pointerCount) {
1741            MotionEntry* splitMotionEntry = splitMotionEvent(
1742                    originalMotionEntry, inputTarget->pointerIds);
1743            if (!splitMotionEntry) {
1744                return; // split event was dropped
1745            }
1746#if DEBUG_FOCUS
1747            ALOGD("channel '%s' ~ Split motion event.",
1748                    connection->getInputChannelName());
1749            logOutboundMotionDetailsLocked("  ", splitMotionEntry);
1750#endif
1751            enqueueDispatchEntriesLocked(currentTime, connection,
1752                    splitMotionEntry, inputTarget);
1753            splitMotionEntry->release();
1754            return;
1755        }
1756    }
1757
1758    // Not splitting.  Enqueue dispatch entries for the event as is.
1759    enqueueDispatchEntriesLocked(currentTime, connection, eventEntry, inputTarget);
1760}
1761
1762void InputDispatcher::enqueueDispatchEntriesLocked(nsecs_t currentTime,
1763        const sp<Connection>& connection, EventEntry* eventEntry, const InputTarget* inputTarget) {
1764    bool wasEmpty = connection->outboundQueue.isEmpty();
1765
1766    // Enqueue dispatch entries for the requested modes.
1767    enqueueDispatchEntryLocked(connection, eventEntry, inputTarget,
1768            InputTarget::FLAG_DISPATCH_AS_HOVER_EXIT);
1769    enqueueDispatchEntryLocked(connection, eventEntry, inputTarget,
1770            InputTarget::FLAG_DISPATCH_AS_OUTSIDE);
1771    enqueueDispatchEntryLocked(connection, eventEntry, inputTarget,
1772            InputTarget::FLAG_DISPATCH_AS_HOVER_ENTER);
1773    enqueueDispatchEntryLocked(connection, eventEntry, inputTarget,
1774            InputTarget::FLAG_DISPATCH_AS_IS);
1775    enqueueDispatchEntryLocked(connection, eventEntry, inputTarget,
1776            InputTarget::FLAG_DISPATCH_AS_SLIPPERY_EXIT);
1777    enqueueDispatchEntryLocked(connection, eventEntry, inputTarget,
1778            InputTarget::FLAG_DISPATCH_AS_SLIPPERY_ENTER);
1779
1780    // If the outbound queue was previously empty, start the dispatch cycle going.
1781    if (wasEmpty && !connection->outboundQueue.isEmpty()) {
1782        startDispatchCycleLocked(currentTime, connection);
1783    }
1784}
1785
1786void InputDispatcher::enqueueDispatchEntryLocked(
1787        const sp<Connection>& connection, EventEntry* eventEntry, const InputTarget* inputTarget,
1788        int32_t dispatchMode) {
1789    int32_t inputTargetFlags = inputTarget->flags;
1790    if (!(inputTargetFlags & dispatchMode)) {
1791        return;
1792    }
1793    inputTargetFlags = (inputTargetFlags & ~InputTarget::FLAG_DISPATCH_MASK) | dispatchMode;
1794
1795    // This is a new event.
1796    // Enqueue a new dispatch entry onto the outbound queue for this connection.
1797    DispatchEntry* dispatchEntry = new DispatchEntry(eventEntry, // increments ref
1798            inputTargetFlags, inputTarget->xOffset, inputTarget->yOffset,
1799            inputTarget->scaleFactor);
1800
1801    // Apply target flags and update the connection's input state.
1802    switch (eventEntry->type) {
1803    case EventEntry::TYPE_KEY: {
1804        KeyEntry* keyEntry = static_cast<KeyEntry*>(eventEntry);
1805        dispatchEntry->resolvedAction = keyEntry->action;
1806        dispatchEntry->resolvedFlags = keyEntry->flags;
1807
1808        if (!connection->inputState.trackKey(keyEntry,
1809                dispatchEntry->resolvedAction, dispatchEntry->resolvedFlags)) {
1810#if DEBUG_DISPATCH_CYCLE
1811            ALOGD("channel '%s' ~ enqueueDispatchEntryLocked: skipping inconsistent key event",
1812                    connection->getInputChannelName());
1813#endif
1814            delete dispatchEntry;
1815            return; // skip the inconsistent event
1816        }
1817        break;
1818    }
1819
1820    case EventEntry::TYPE_MOTION: {
1821        MotionEntry* motionEntry = static_cast<MotionEntry*>(eventEntry);
1822        if (dispatchMode & InputTarget::FLAG_DISPATCH_AS_OUTSIDE) {
1823            dispatchEntry->resolvedAction = AMOTION_EVENT_ACTION_OUTSIDE;
1824        } else if (dispatchMode & InputTarget::FLAG_DISPATCH_AS_HOVER_EXIT) {
1825            dispatchEntry->resolvedAction = AMOTION_EVENT_ACTION_HOVER_EXIT;
1826        } else if (dispatchMode & InputTarget::FLAG_DISPATCH_AS_HOVER_ENTER) {
1827            dispatchEntry->resolvedAction = AMOTION_EVENT_ACTION_HOVER_ENTER;
1828        } else if (dispatchMode & InputTarget::FLAG_DISPATCH_AS_SLIPPERY_EXIT) {
1829            dispatchEntry->resolvedAction = AMOTION_EVENT_ACTION_CANCEL;
1830        } else if (dispatchMode & InputTarget::FLAG_DISPATCH_AS_SLIPPERY_ENTER) {
1831            dispatchEntry->resolvedAction = AMOTION_EVENT_ACTION_DOWN;
1832        } else {
1833            dispatchEntry->resolvedAction = motionEntry->action;
1834        }
1835        if (dispatchEntry->resolvedAction == AMOTION_EVENT_ACTION_HOVER_MOVE
1836                && !connection->inputState.isHovering(
1837                        motionEntry->deviceId, motionEntry->source)) {
1838#if DEBUG_DISPATCH_CYCLE
1839        ALOGD("channel '%s' ~ enqueueDispatchEntryLocked: filling in missing hover enter event",
1840                connection->getInputChannelName());
1841#endif
1842            dispatchEntry->resolvedAction = AMOTION_EVENT_ACTION_HOVER_ENTER;
1843        }
1844
1845        dispatchEntry->resolvedFlags = motionEntry->flags;
1846        if (dispatchEntry->targetFlags & InputTarget::FLAG_WINDOW_IS_OBSCURED) {
1847            dispatchEntry->resolvedFlags |= AMOTION_EVENT_FLAG_WINDOW_IS_OBSCURED;
1848        }
1849
1850        if (!connection->inputState.trackMotion(motionEntry,
1851                dispatchEntry->resolvedAction, dispatchEntry->resolvedFlags)) {
1852#if DEBUG_DISPATCH_CYCLE
1853            ALOGD("channel '%s' ~ enqueueDispatchEntryLocked: skipping inconsistent motion event",
1854                    connection->getInputChannelName());
1855#endif
1856            delete dispatchEntry;
1857            return; // skip the inconsistent event
1858        }
1859        break;
1860    }
1861    }
1862
1863    // Remember that we are waiting for this dispatch to complete.
1864    if (dispatchEntry->hasForegroundTarget()) {
1865        incrementPendingForegroundDispatchesLocked(eventEntry);
1866    }
1867
1868    // Enqueue the dispatch entry.
1869    connection->outboundQueue.enqueueAtTail(dispatchEntry);
1870}
1871
1872void InputDispatcher::startDispatchCycleLocked(nsecs_t currentTime,
1873        const sp<Connection>& connection) {
1874#if DEBUG_DISPATCH_CYCLE
1875    ALOGD("channel '%s' ~ startDispatchCycle",
1876            connection->getInputChannelName());
1877#endif
1878
1879    while (connection->status == Connection::STATUS_NORMAL
1880            && !connection->outboundQueue.isEmpty()) {
1881        DispatchEntry* dispatchEntry = connection->outboundQueue.head;
1882
1883        // Publish the event.
1884        status_t status;
1885        EventEntry* eventEntry = dispatchEntry->eventEntry;
1886        switch (eventEntry->type) {
1887        case EventEntry::TYPE_KEY: {
1888            KeyEntry* keyEntry = static_cast<KeyEntry*>(eventEntry);
1889
1890            // Publish the key event.
1891            status = connection->inputPublisher.publishKeyEvent(dispatchEntry->seq,
1892                    keyEntry->deviceId, keyEntry->source,
1893                    dispatchEntry->resolvedAction, dispatchEntry->resolvedFlags,
1894                    keyEntry->keyCode, keyEntry->scanCode,
1895                    keyEntry->metaState, keyEntry->repeatCount, keyEntry->downTime,
1896                    keyEntry->eventTime);
1897            break;
1898        }
1899
1900        case EventEntry::TYPE_MOTION: {
1901            MotionEntry* motionEntry = static_cast<MotionEntry*>(eventEntry);
1902
1903            PointerCoords scaledCoords[MAX_POINTERS];
1904            const PointerCoords* usingCoords = motionEntry->pointerCoords;
1905
1906            // Set the X and Y offset depending on the input source.
1907            float xOffset, yOffset, scaleFactor;
1908            if ((motionEntry->source & AINPUT_SOURCE_CLASS_POINTER)
1909                    && !(dispatchEntry->targetFlags & InputTarget::FLAG_ZERO_COORDS)) {
1910                scaleFactor = dispatchEntry->scaleFactor;
1911                xOffset = dispatchEntry->xOffset * scaleFactor;
1912                yOffset = dispatchEntry->yOffset * scaleFactor;
1913                if (scaleFactor != 1.0f) {
1914                    for (size_t i = 0; i < motionEntry->pointerCount; i++) {
1915                        scaledCoords[i] = motionEntry->pointerCoords[i];
1916                        scaledCoords[i].scale(scaleFactor);
1917                    }
1918                    usingCoords = scaledCoords;
1919                }
1920            } else {
1921                xOffset = 0.0f;
1922                yOffset = 0.0f;
1923                scaleFactor = 1.0f;
1924
1925                // We don't want the dispatch target to know.
1926                if (dispatchEntry->targetFlags & InputTarget::FLAG_ZERO_COORDS) {
1927                    for (size_t i = 0; i < motionEntry->pointerCount; i++) {
1928                        scaledCoords[i].clear();
1929                    }
1930                    usingCoords = scaledCoords;
1931                }
1932            }
1933
1934            // Publish the motion event.
1935            status = connection->inputPublisher.publishMotionEvent(dispatchEntry->seq,
1936                    motionEntry->deviceId, motionEntry->source,
1937                    dispatchEntry->resolvedAction, dispatchEntry->resolvedFlags,
1938                    motionEntry->edgeFlags, motionEntry->metaState, motionEntry->buttonState,
1939                    xOffset, yOffset,
1940                    motionEntry->xPrecision, motionEntry->yPrecision,
1941                    motionEntry->downTime, motionEntry->eventTime,
1942                    motionEntry->pointerCount, motionEntry->pointerProperties,
1943                    usingCoords);
1944            break;
1945        }
1946
1947        default:
1948            ALOG_ASSERT(false);
1949            return;
1950        }
1951
1952        // Check the result.
1953        if (status) {
1954            if (status == WOULD_BLOCK) {
1955                if (connection->waitQueue.isEmpty()) {
1956                    ALOGE("channel '%s' ~ Could not publish event because the pipe is full. "
1957                            "This is unexpected because the wait queue is empty, so the pipe "
1958                            "should be empty and we shouldn't have any problems writing an "
1959                            "event to it, status=%d", connection->getInputChannelName(), status);
1960                    abortBrokenDispatchCycleLocked(currentTime, connection, true /*notify*/);
1961                } else {
1962                    // Pipe is full and we are waiting for the app to finish process some events
1963                    // before sending more events to it.
1964#if DEBUG_DISPATCH_CYCLE
1965                    ALOGD("channel '%s' ~ Could not publish event because the pipe is full, "
1966                            "waiting for the application to catch up",
1967                            connection->getInputChannelName());
1968#endif
1969                    connection->inputPublisherBlocked = true;
1970                }
1971            } else {
1972                ALOGE("channel '%s' ~ Could not publish event due to an unexpected error, "
1973                        "status=%d", connection->getInputChannelName(), status);
1974                abortBrokenDispatchCycleLocked(currentTime, connection, true /*notify*/);
1975            }
1976            return;
1977        }
1978
1979        // Re-enqueue the event on the wait queue.
1980        connection->outboundQueue.dequeue(dispatchEntry);
1981        connection->waitQueue.enqueueAtTail(dispatchEntry);
1982    }
1983}
1984
1985void InputDispatcher::finishDispatchCycleLocked(nsecs_t currentTime,
1986        const sp<Connection>& connection, uint32_t seq, bool handled) {
1987#if DEBUG_DISPATCH_CYCLE
1988    ALOGD("channel '%s' ~ finishDispatchCycle - seq=%u, handled=%s",
1989            connection->getInputChannelName(), seq, toString(handled));
1990#endif
1991
1992    connection->inputPublisherBlocked = false;
1993
1994    if (connection->status == Connection::STATUS_BROKEN
1995            || connection->status == Connection::STATUS_ZOMBIE) {
1996        return;
1997    }
1998
1999    // Notify other system components and prepare to start the next dispatch cycle.
2000    onDispatchCycleFinishedLocked(currentTime, connection, seq, handled);
2001}
2002
2003void InputDispatcher::abortBrokenDispatchCycleLocked(nsecs_t currentTime,
2004        const sp<Connection>& connection, bool notify) {
2005#if DEBUG_DISPATCH_CYCLE
2006    ALOGD("channel '%s' ~ abortBrokenDispatchCycle - notify=%s",
2007            connection->getInputChannelName(), toString(notify));
2008#endif
2009
2010    // Clear the dispatch queues.
2011    drainDispatchQueueLocked(&connection->outboundQueue);
2012    drainDispatchQueueLocked(&connection->waitQueue);
2013
2014    // The connection appears to be unrecoverably broken.
2015    // Ignore already broken or zombie connections.
2016    if (connection->status == Connection::STATUS_NORMAL) {
2017        connection->status = Connection::STATUS_BROKEN;
2018
2019        if (notify) {
2020            // Notify other system components.
2021            onDispatchCycleBrokenLocked(currentTime, connection);
2022        }
2023    }
2024}
2025
2026void InputDispatcher::drainDispatchQueueLocked(Queue<DispatchEntry>* queue) {
2027    while (!queue->isEmpty()) {
2028        DispatchEntry* dispatchEntry = queue->dequeueAtHead();
2029        releaseDispatchEntryLocked(dispatchEntry);
2030    }
2031}
2032
2033void InputDispatcher::releaseDispatchEntryLocked(DispatchEntry* dispatchEntry) {
2034    if (dispatchEntry->hasForegroundTarget()) {
2035        decrementPendingForegroundDispatchesLocked(dispatchEntry->eventEntry);
2036    }
2037    delete dispatchEntry;
2038}
2039
2040int InputDispatcher::handleReceiveCallback(int fd, int events, void* data) {
2041    InputDispatcher* d = static_cast<InputDispatcher*>(data);
2042
2043    { // acquire lock
2044        AutoMutex _l(d->mLock);
2045
2046        ssize_t connectionIndex = d->mConnectionsByFd.indexOfKey(fd);
2047        if (connectionIndex < 0) {
2048            ALOGE("Received spurious receive callback for unknown input channel.  "
2049                    "fd=%d, events=0x%x", fd, events);
2050            return 0; // remove the callback
2051        }
2052
2053        bool notify;
2054        sp<Connection> connection = d->mConnectionsByFd.valueAt(connectionIndex);
2055        if (!(events & (ALOOPER_EVENT_ERROR | ALOOPER_EVENT_HANGUP))) {
2056            if (!(events & ALOOPER_EVENT_INPUT)) {
2057                ALOGW("channel '%s' ~ Received spurious callback for unhandled poll event.  "
2058                        "events=0x%x", connection->getInputChannelName(), events);
2059                return 1;
2060            }
2061
2062            nsecs_t currentTime = now();
2063            bool gotOne = false;
2064            status_t status;
2065            for (;;) {
2066                uint32_t seq;
2067                bool handled;
2068                status = connection->inputPublisher.receiveFinishedSignal(&seq, &handled);
2069                if (status) {
2070                    break;
2071                }
2072                d->finishDispatchCycleLocked(currentTime, connection, seq, handled);
2073                gotOne = true;
2074            }
2075            if (gotOne) {
2076                d->runCommandsLockedInterruptible();
2077                if (status == WOULD_BLOCK) {
2078                    return 1;
2079                }
2080            }
2081
2082            notify = status != DEAD_OBJECT || !connection->monitor;
2083            if (notify) {
2084                ALOGE("channel '%s' ~ Failed to receive finished signal.  status=%d",
2085                        connection->getInputChannelName(), status);
2086            }
2087        } else {
2088            // Monitor channels are never explicitly unregistered.
2089            // We do it automatically when the remote endpoint is closed so don't warn
2090            // about them.
2091            notify = !connection->monitor;
2092            if (notify) {
2093                ALOGW("channel '%s' ~ Consumer closed input channel or an error occurred.  "
2094                        "events=0x%x", connection->getInputChannelName(), events);
2095            }
2096        }
2097
2098        // Unregister the channel.
2099        d->unregisterInputChannelLocked(connection->inputChannel, notify);
2100        return 0; // remove the callback
2101    } // release lock
2102}
2103
2104void InputDispatcher::synthesizeCancelationEventsForAllConnectionsLocked(
2105        const CancelationOptions& options) {
2106    for (size_t i = 0; i < mConnectionsByFd.size(); i++) {
2107        synthesizeCancelationEventsForConnectionLocked(
2108                mConnectionsByFd.valueAt(i), options);
2109    }
2110}
2111
2112void InputDispatcher::synthesizeCancelationEventsForInputChannelLocked(
2113        const sp<InputChannel>& channel, const CancelationOptions& options) {
2114    ssize_t index = getConnectionIndexLocked(channel);
2115    if (index >= 0) {
2116        synthesizeCancelationEventsForConnectionLocked(
2117                mConnectionsByFd.valueAt(index), options);
2118    }
2119}
2120
2121void InputDispatcher::synthesizeCancelationEventsForConnectionLocked(
2122        const sp<Connection>& connection, const CancelationOptions& options) {
2123    if (connection->status == Connection::STATUS_BROKEN) {
2124        return;
2125    }
2126
2127    nsecs_t currentTime = now();
2128
2129    Vector<EventEntry*> cancelationEvents;
2130    connection->inputState.synthesizeCancelationEvents(currentTime,
2131            cancelationEvents, options);
2132
2133    if (!cancelationEvents.isEmpty()) {
2134#if DEBUG_OUTBOUND_EVENT_DETAILS
2135        ALOGD("channel '%s' ~ Synthesized %d cancelation events to bring channel back in sync "
2136                "with reality: %s, mode=%d.",
2137                connection->getInputChannelName(), cancelationEvents.size(),
2138                options.reason, options.mode);
2139#endif
2140        for (size_t i = 0; i < cancelationEvents.size(); i++) {
2141            EventEntry* cancelationEventEntry = cancelationEvents.itemAt(i);
2142            switch (cancelationEventEntry->type) {
2143            case EventEntry::TYPE_KEY:
2144                logOutboundKeyDetailsLocked("cancel - ",
2145                        static_cast<KeyEntry*>(cancelationEventEntry));
2146                break;
2147            case EventEntry::TYPE_MOTION:
2148                logOutboundMotionDetailsLocked("cancel - ",
2149                        static_cast<MotionEntry*>(cancelationEventEntry));
2150                break;
2151            }
2152
2153            InputTarget target;
2154            sp<InputWindowHandle> windowHandle = getWindowHandleLocked(connection->inputChannel);
2155            if (windowHandle != NULL) {
2156                const InputWindowInfo* windowInfo = windowHandle->getInfo();
2157                target.xOffset = -windowInfo->frameLeft;
2158                target.yOffset = -windowInfo->frameTop;
2159                target.scaleFactor = windowInfo->scaleFactor;
2160            } else {
2161                target.xOffset = 0;
2162                target.yOffset = 0;
2163                target.scaleFactor = 1.0f;
2164            }
2165            target.inputChannel = connection->inputChannel;
2166            target.flags = InputTarget::FLAG_DISPATCH_AS_IS;
2167
2168            enqueueDispatchEntryLocked(connection, cancelationEventEntry, // increments ref
2169                    &target, InputTarget::FLAG_DISPATCH_AS_IS);
2170
2171            cancelationEventEntry->release();
2172        }
2173
2174        startDispatchCycleLocked(currentTime, connection);
2175    }
2176}
2177
2178InputDispatcher::MotionEntry*
2179InputDispatcher::splitMotionEvent(const MotionEntry* originalMotionEntry, BitSet32 pointerIds) {
2180    ALOG_ASSERT(pointerIds.value != 0);
2181
2182    uint32_t splitPointerIndexMap[MAX_POINTERS];
2183    PointerProperties splitPointerProperties[MAX_POINTERS];
2184    PointerCoords splitPointerCoords[MAX_POINTERS];
2185
2186    uint32_t originalPointerCount = originalMotionEntry->pointerCount;
2187    uint32_t splitPointerCount = 0;
2188
2189    for (uint32_t originalPointerIndex = 0; originalPointerIndex < originalPointerCount;
2190            originalPointerIndex++) {
2191        const PointerProperties& pointerProperties =
2192                originalMotionEntry->pointerProperties[originalPointerIndex];
2193        uint32_t pointerId = uint32_t(pointerProperties.id);
2194        if (pointerIds.hasBit(pointerId)) {
2195            splitPointerIndexMap[splitPointerCount] = originalPointerIndex;
2196            splitPointerProperties[splitPointerCount].copyFrom(pointerProperties);
2197            splitPointerCoords[splitPointerCount].copyFrom(
2198                    originalMotionEntry->pointerCoords[originalPointerIndex]);
2199            splitPointerCount += 1;
2200        }
2201    }
2202
2203    if (splitPointerCount != pointerIds.count()) {
2204        // This is bad.  We are missing some of the pointers that we expected to deliver.
2205        // Most likely this indicates that we received an ACTION_MOVE events that has
2206        // different pointer ids than we expected based on the previous ACTION_DOWN
2207        // or ACTION_POINTER_DOWN events that caused us to decide to split the pointers
2208        // in this way.
2209        ALOGW("Dropping split motion event because the pointer count is %d but "
2210                "we expected there to be %d pointers.  This probably means we received "
2211                "a broken sequence of pointer ids from the input device.",
2212                splitPointerCount, pointerIds.count());
2213        return NULL;
2214    }
2215
2216    int32_t action = originalMotionEntry->action;
2217    int32_t maskedAction = action & AMOTION_EVENT_ACTION_MASK;
2218    if (maskedAction == AMOTION_EVENT_ACTION_POINTER_DOWN
2219            || maskedAction == AMOTION_EVENT_ACTION_POINTER_UP) {
2220        int32_t originalPointerIndex = getMotionEventActionPointerIndex(action);
2221        const PointerProperties& pointerProperties =
2222                originalMotionEntry->pointerProperties[originalPointerIndex];
2223        uint32_t pointerId = uint32_t(pointerProperties.id);
2224        if (pointerIds.hasBit(pointerId)) {
2225            if (pointerIds.count() == 1) {
2226                // The first/last pointer went down/up.
2227                action = maskedAction == AMOTION_EVENT_ACTION_POINTER_DOWN
2228                        ? AMOTION_EVENT_ACTION_DOWN : AMOTION_EVENT_ACTION_UP;
2229            } else {
2230                // A secondary pointer went down/up.
2231                uint32_t splitPointerIndex = 0;
2232                while (pointerId != uint32_t(splitPointerProperties[splitPointerIndex].id)) {
2233                    splitPointerIndex += 1;
2234                }
2235                action = maskedAction | (splitPointerIndex
2236                        << AMOTION_EVENT_ACTION_POINTER_INDEX_SHIFT);
2237            }
2238        } else {
2239            // An unrelated pointer changed.
2240            action = AMOTION_EVENT_ACTION_MOVE;
2241        }
2242    }
2243
2244    MotionEntry* splitMotionEntry = new MotionEntry(
2245            originalMotionEntry->eventTime,
2246            originalMotionEntry->deviceId,
2247            originalMotionEntry->source,
2248            originalMotionEntry->policyFlags,
2249            action,
2250            originalMotionEntry->flags,
2251            originalMotionEntry->metaState,
2252            originalMotionEntry->buttonState,
2253            originalMotionEntry->edgeFlags,
2254            originalMotionEntry->xPrecision,
2255            originalMotionEntry->yPrecision,
2256            originalMotionEntry->downTime,
2257            splitPointerCount, splitPointerProperties, splitPointerCoords);
2258
2259    if (originalMotionEntry->injectionState) {
2260        splitMotionEntry->injectionState = originalMotionEntry->injectionState;
2261        splitMotionEntry->injectionState->refCount += 1;
2262    }
2263
2264    return splitMotionEntry;
2265}
2266
2267void InputDispatcher::notifyConfigurationChanged(const NotifyConfigurationChangedArgs* args) {
2268#if DEBUG_INBOUND_EVENT_DETAILS
2269    ALOGD("notifyConfigurationChanged - eventTime=%lld", args->eventTime);
2270#endif
2271
2272    bool needWake;
2273    { // acquire lock
2274        AutoMutex _l(mLock);
2275
2276        ConfigurationChangedEntry* newEntry = new ConfigurationChangedEntry(args->eventTime);
2277        needWake = enqueueInboundEventLocked(newEntry);
2278    } // release lock
2279
2280    if (needWake) {
2281        mLooper->wake();
2282    }
2283}
2284
2285void InputDispatcher::notifyKey(const NotifyKeyArgs* args) {
2286#if DEBUG_INBOUND_EVENT_DETAILS
2287    ALOGD("notifyKey - eventTime=%lld, deviceId=%d, source=0x%x, policyFlags=0x%x, action=0x%x, "
2288            "flags=0x%x, keyCode=0x%x, scanCode=0x%x, metaState=0x%x, downTime=%lld",
2289            args->eventTime, args->deviceId, args->source, args->policyFlags,
2290            args->action, args->flags, args->keyCode, args->scanCode,
2291            args->metaState, args->downTime);
2292#endif
2293    if (!validateKeyEvent(args->action)) {
2294        return;
2295    }
2296
2297    uint32_t policyFlags = args->policyFlags;
2298    int32_t flags = args->flags;
2299    int32_t metaState = args->metaState;
2300    if ((policyFlags & POLICY_FLAG_VIRTUAL) || (flags & AKEY_EVENT_FLAG_VIRTUAL_HARD_KEY)) {
2301        policyFlags |= POLICY_FLAG_VIRTUAL;
2302        flags |= AKEY_EVENT_FLAG_VIRTUAL_HARD_KEY;
2303    }
2304    if (policyFlags & POLICY_FLAG_ALT) {
2305        metaState |= AMETA_ALT_ON | AMETA_ALT_LEFT_ON;
2306    }
2307    if (policyFlags & POLICY_FLAG_ALT_GR) {
2308        metaState |= AMETA_ALT_ON | AMETA_ALT_RIGHT_ON;
2309    }
2310    if (policyFlags & POLICY_FLAG_SHIFT) {
2311        metaState |= AMETA_SHIFT_ON | AMETA_SHIFT_LEFT_ON;
2312    }
2313    if (policyFlags & POLICY_FLAG_CAPS_LOCK) {
2314        metaState |= AMETA_CAPS_LOCK_ON;
2315    }
2316    if (policyFlags & POLICY_FLAG_FUNCTION) {
2317        metaState |= AMETA_FUNCTION_ON;
2318    }
2319
2320    policyFlags |= POLICY_FLAG_TRUSTED;
2321
2322    KeyEvent event;
2323    event.initialize(args->deviceId, args->source, args->action,
2324            flags, args->keyCode, args->scanCode, metaState, 0,
2325            args->downTime, args->eventTime);
2326
2327    mPolicy->interceptKeyBeforeQueueing(&event, /*byref*/ policyFlags);
2328
2329    if (policyFlags & POLICY_FLAG_WOKE_HERE) {
2330        flags |= AKEY_EVENT_FLAG_WOKE_HERE;
2331    }
2332
2333    bool needWake;
2334    { // acquire lock
2335        mLock.lock();
2336
2337        if (mInputFilterEnabled) {
2338            mLock.unlock();
2339
2340            policyFlags |= POLICY_FLAG_FILTERED;
2341            if (!mPolicy->filterInputEvent(&event, policyFlags)) {
2342                return; // event was consumed by the filter
2343            }
2344
2345            mLock.lock();
2346        }
2347
2348        int32_t repeatCount = 0;
2349        KeyEntry* newEntry = new KeyEntry(args->eventTime,
2350                args->deviceId, args->source, policyFlags,
2351                args->action, flags, args->keyCode, args->scanCode,
2352                metaState, repeatCount, args->downTime);
2353
2354        needWake = enqueueInboundEventLocked(newEntry);
2355        mLock.unlock();
2356    } // release lock
2357
2358    if (needWake) {
2359        mLooper->wake();
2360    }
2361}
2362
2363void InputDispatcher::notifyMotion(const NotifyMotionArgs* args) {
2364#if DEBUG_INBOUND_EVENT_DETAILS
2365    ALOGD("notifyMotion - eventTime=%lld, deviceId=%d, source=0x%x, policyFlags=0x%x, "
2366            "action=0x%x, flags=0x%x, metaState=0x%x, buttonState=0x%x, edgeFlags=0x%x, "
2367            "xPrecision=%f, yPrecision=%f, downTime=%lld",
2368            args->eventTime, args->deviceId, args->source, args->policyFlags,
2369            args->action, args->flags, args->metaState, args->buttonState,
2370            args->edgeFlags, args->xPrecision, args->yPrecision, args->downTime);
2371    for (uint32_t i = 0; i < args->pointerCount; i++) {
2372        ALOGD("  Pointer %d: id=%d, toolType=%d, "
2373                "x=%f, y=%f, pressure=%f, size=%f, "
2374                "touchMajor=%f, touchMinor=%f, toolMajor=%f, toolMinor=%f, "
2375                "orientation=%f",
2376                i, args->pointerProperties[i].id,
2377                args->pointerProperties[i].toolType,
2378                args->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_X),
2379                args->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_Y),
2380                args->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_PRESSURE),
2381                args->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_SIZE),
2382                args->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_TOUCH_MAJOR),
2383                args->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_TOUCH_MINOR),
2384                args->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_TOOL_MAJOR),
2385                args->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_TOOL_MINOR),
2386                args->pointerCoords[i].getAxisValue(AMOTION_EVENT_AXIS_ORIENTATION));
2387    }
2388#endif
2389    if (!validateMotionEvent(args->action, args->pointerCount, args->pointerProperties)) {
2390        return;
2391    }
2392
2393    uint32_t policyFlags = args->policyFlags;
2394    policyFlags |= POLICY_FLAG_TRUSTED;
2395    mPolicy->interceptMotionBeforeQueueing(args->eventTime, /*byref*/ policyFlags);
2396
2397    bool needWake;
2398    { // acquire lock
2399        mLock.lock();
2400
2401        if (mInputFilterEnabled) {
2402            mLock.unlock();
2403
2404            MotionEvent event;
2405            event.initialize(args->deviceId, args->source, args->action, args->flags,
2406                    args->edgeFlags, args->metaState, args->buttonState, 0, 0,
2407                    args->xPrecision, args->yPrecision,
2408                    args->downTime, args->eventTime,
2409                    args->pointerCount, args->pointerProperties, args->pointerCoords);
2410
2411            policyFlags |= POLICY_FLAG_FILTERED;
2412            if (!mPolicy->filterInputEvent(&event, policyFlags)) {
2413                return; // event was consumed by the filter
2414            }
2415
2416            mLock.lock();
2417        }
2418
2419        // Just enqueue a new motion event.
2420        MotionEntry* newEntry = new MotionEntry(args->eventTime,
2421                args->deviceId, args->source, policyFlags,
2422                args->action, args->flags, args->metaState, args->buttonState,
2423                args->edgeFlags, args->xPrecision, args->yPrecision, args->downTime,
2424                args->pointerCount, args->pointerProperties, args->pointerCoords);
2425
2426        needWake = enqueueInboundEventLocked(newEntry);
2427        mLock.unlock();
2428    } // release lock
2429
2430    if (needWake) {
2431        mLooper->wake();
2432    }
2433}
2434
2435void InputDispatcher::notifySwitch(const NotifySwitchArgs* args) {
2436#if DEBUG_INBOUND_EVENT_DETAILS
2437    ALOGD("notifySwitch - eventTime=%lld, policyFlags=0x%x, switchCode=%d, switchValue=%d",
2438            args->eventTime, args->policyFlags,
2439            args->switchCode, args->switchValue);
2440#endif
2441
2442    uint32_t policyFlags = args->policyFlags;
2443    policyFlags |= POLICY_FLAG_TRUSTED;
2444    mPolicy->notifySwitch(args->eventTime,
2445            args->switchCode, args->switchValue, policyFlags);
2446}
2447
2448void InputDispatcher::notifyDeviceReset(const NotifyDeviceResetArgs* args) {
2449#if DEBUG_INBOUND_EVENT_DETAILS
2450    ALOGD("notifyDeviceReset - eventTime=%lld, deviceId=%d",
2451            args->eventTime, args->deviceId);
2452#endif
2453
2454    bool needWake;
2455    { // acquire lock
2456        AutoMutex _l(mLock);
2457
2458        DeviceResetEntry* newEntry = new DeviceResetEntry(args->eventTime, args->deviceId);
2459        needWake = enqueueInboundEventLocked(newEntry);
2460    } // release lock
2461
2462    if (needWake) {
2463        mLooper->wake();
2464    }
2465}
2466
2467int32_t InputDispatcher::injectInputEvent(const InputEvent* event,
2468        int32_t injectorPid, int32_t injectorUid, int32_t syncMode, int32_t timeoutMillis,
2469        uint32_t policyFlags) {
2470#if DEBUG_INBOUND_EVENT_DETAILS
2471    ALOGD("injectInputEvent - eventType=%d, injectorPid=%d, injectorUid=%d, "
2472            "syncMode=%d, timeoutMillis=%d, policyFlags=0x%08x",
2473            event->getType(), injectorPid, injectorUid, syncMode, timeoutMillis, policyFlags);
2474#endif
2475
2476    nsecs_t endTime = now() + milliseconds_to_nanoseconds(timeoutMillis);
2477
2478    policyFlags |= POLICY_FLAG_INJECTED;
2479    if (hasInjectionPermission(injectorPid, injectorUid)) {
2480        policyFlags |= POLICY_FLAG_TRUSTED;
2481    }
2482
2483    EventEntry* firstInjectedEntry;
2484    EventEntry* lastInjectedEntry;
2485    switch (event->getType()) {
2486    case AINPUT_EVENT_TYPE_KEY: {
2487        const KeyEvent* keyEvent = static_cast<const KeyEvent*>(event);
2488        int32_t action = keyEvent->getAction();
2489        if (! validateKeyEvent(action)) {
2490            return INPUT_EVENT_INJECTION_FAILED;
2491        }
2492
2493        int32_t flags = keyEvent->getFlags();
2494        if (flags & AKEY_EVENT_FLAG_VIRTUAL_HARD_KEY) {
2495            policyFlags |= POLICY_FLAG_VIRTUAL;
2496        }
2497
2498        if (!(policyFlags & POLICY_FLAG_FILTERED)) {
2499            mPolicy->interceptKeyBeforeQueueing(keyEvent, /*byref*/ policyFlags);
2500        }
2501
2502        if (policyFlags & POLICY_FLAG_WOKE_HERE) {
2503            flags |= AKEY_EVENT_FLAG_WOKE_HERE;
2504        }
2505
2506        mLock.lock();
2507        firstInjectedEntry = new KeyEntry(keyEvent->getEventTime(),
2508                keyEvent->getDeviceId(), keyEvent->getSource(),
2509                policyFlags, action, flags,
2510                keyEvent->getKeyCode(), keyEvent->getScanCode(), keyEvent->getMetaState(),
2511                keyEvent->getRepeatCount(), keyEvent->getDownTime());
2512        lastInjectedEntry = firstInjectedEntry;
2513        break;
2514    }
2515
2516    case AINPUT_EVENT_TYPE_MOTION: {
2517        const MotionEvent* motionEvent = static_cast<const MotionEvent*>(event);
2518        int32_t action = motionEvent->getAction();
2519        size_t pointerCount = motionEvent->getPointerCount();
2520        const PointerProperties* pointerProperties = motionEvent->getPointerProperties();
2521        if (! validateMotionEvent(action, pointerCount, pointerProperties)) {
2522            return INPUT_EVENT_INJECTION_FAILED;
2523        }
2524
2525        if (!(policyFlags & POLICY_FLAG_FILTERED)) {
2526            nsecs_t eventTime = motionEvent->getEventTime();
2527            mPolicy->interceptMotionBeforeQueueing(eventTime, /*byref*/ policyFlags);
2528        }
2529
2530        mLock.lock();
2531        const nsecs_t* sampleEventTimes = motionEvent->getSampleEventTimes();
2532        const PointerCoords* samplePointerCoords = motionEvent->getSamplePointerCoords();
2533        firstInjectedEntry = new MotionEntry(*sampleEventTimes,
2534                motionEvent->getDeviceId(), motionEvent->getSource(), policyFlags,
2535                action, motionEvent->getFlags(),
2536                motionEvent->getMetaState(), motionEvent->getButtonState(),
2537                motionEvent->getEdgeFlags(),
2538                motionEvent->getXPrecision(), motionEvent->getYPrecision(),
2539                motionEvent->getDownTime(), uint32_t(pointerCount),
2540                pointerProperties, samplePointerCoords);
2541        lastInjectedEntry = firstInjectedEntry;
2542        for (size_t i = motionEvent->getHistorySize(); i > 0; i--) {
2543            sampleEventTimes += 1;
2544            samplePointerCoords += pointerCount;
2545            MotionEntry* nextInjectedEntry = new MotionEntry(*sampleEventTimes,
2546                    motionEvent->getDeviceId(), motionEvent->getSource(), policyFlags,
2547                    action, motionEvent->getFlags(),
2548                    motionEvent->getMetaState(), motionEvent->getButtonState(),
2549                    motionEvent->getEdgeFlags(),
2550                    motionEvent->getXPrecision(), motionEvent->getYPrecision(),
2551                    motionEvent->getDownTime(), uint32_t(pointerCount),
2552                    pointerProperties, samplePointerCoords);
2553            lastInjectedEntry->next = nextInjectedEntry;
2554            lastInjectedEntry = nextInjectedEntry;
2555        }
2556        break;
2557    }
2558
2559    default:
2560        ALOGW("Cannot inject event of type %d", event->getType());
2561        return INPUT_EVENT_INJECTION_FAILED;
2562    }
2563
2564    InjectionState* injectionState = new InjectionState(injectorPid, injectorUid);
2565    if (syncMode == INPUT_EVENT_INJECTION_SYNC_NONE) {
2566        injectionState->injectionIsAsync = true;
2567    }
2568
2569    injectionState->refCount += 1;
2570    lastInjectedEntry->injectionState = injectionState;
2571
2572    bool needWake = false;
2573    for (EventEntry* entry = firstInjectedEntry; entry != NULL; ) {
2574        EventEntry* nextEntry = entry->next;
2575        needWake |= enqueueInboundEventLocked(entry);
2576        entry = nextEntry;
2577    }
2578
2579    mLock.unlock();
2580
2581    if (needWake) {
2582        mLooper->wake();
2583    }
2584
2585    int32_t injectionResult;
2586    { // acquire lock
2587        AutoMutex _l(mLock);
2588
2589        if (syncMode == INPUT_EVENT_INJECTION_SYNC_NONE) {
2590            injectionResult = INPUT_EVENT_INJECTION_SUCCEEDED;
2591        } else {
2592            for (;;) {
2593                injectionResult = injectionState->injectionResult;
2594                if (injectionResult != INPUT_EVENT_INJECTION_PENDING) {
2595                    break;
2596                }
2597
2598                nsecs_t remainingTimeout = endTime - now();
2599                if (remainingTimeout <= 0) {
2600#if DEBUG_INJECTION
2601                    ALOGD("injectInputEvent - Timed out waiting for injection result "
2602                            "to become available.");
2603#endif
2604                    injectionResult = INPUT_EVENT_INJECTION_TIMED_OUT;
2605                    break;
2606                }
2607
2608                mInjectionResultAvailableCondition.waitRelative(mLock, remainingTimeout);
2609            }
2610
2611            if (injectionResult == INPUT_EVENT_INJECTION_SUCCEEDED
2612                    && syncMode == INPUT_EVENT_INJECTION_SYNC_WAIT_FOR_FINISHED) {
2613                while (injectionState->pendingForegroundDispatches != 0) {
2614#if DEBUG_INJECTION
2615                    ALOGD("injectInputEvent - Waiting for %d pending foreground dispatches.",
2616                            injectionState->pendingForegroundDispatches);
2617#endif
2618                    nsecs_t remainingTimeout = endTime - now();
2619                    if (remainingTimeout <= 0) {
2620#if DEBUG_INJECTION
2621                    ALOGD("injectInputEvent - Timed out waiting for pending foreground "
2622                            "dispatches to finish.");
2623#endif
2624                        injectionResult = INPUT_EVENT_INJECTION_TIMED_OUT;
2625                        break;
2626                    }
2627
2628                    mInjectionSyncFinishedCondition.waitRelative(mLock, remainingTimeout);
2629                }
2630            }
2631        }
2632
2633        injectionState->release();
2634    } // release lock
2635
2636#if DEBUG_INJECTION
2637    ALOGD("injectInputEvent - Finished with result %d.  "
2638            "injectorPid=%d, injectorUid=%d",
2639            injectionResult, injectorPid, injectorUid);
2640#endif
2641
2642    return injectionResult;
2643}
2644
2645bool InputDispatcher::hasInjectionPermission(int32_t injectorPid, int32_t injectorUid) {
2646    return injectorUid == 0
2647            || mPolicy->checkInjectEventsPermissionNonReentrant(injectorPid, injectorUid);
2648}
2649
2650void InputDispatcher::setInjectionResultLocked(EventEntry* entry, int32_t injectionResult) {
2651    InjectionState* injectionState = entry->injectionState;
2652    if (injectionState) {
2653#if DEBUG_INJECTION
2654        ALOGD("Setting input event injection result to %d.  "
2655                "injectorPid=%d, injectorUid=%d",
2656                 injectionResult, injectionState->injectorPid, injectionState->injectorUid);
2657#endif
2658
2659        if (injectionState->injectionIsAsync
2660                && !(entry->policyFlags & POLICY_FLAG_FILTERED)) {
2661            // Log the outcome since the injector did not wait for the injection result.
2662            switch (injectionResult) {
2663            case INPUT_EVENT_INJECTION_SUCCEEDED:
2664                ALOGV("Asynchronous input event injection succeeded.");
2665                break;
2666            case INPUT_EVENT_INJECTION_FAILED:
2667                ALOGW("Asynchronous input event injection failed.");
2668                break;
2669            case INPUT_EVENT_INJECTION_PERMISSION_DENIED:
2670                ALOGW("Asynchronous input event injection permission denied.");
2671                break;
2672            case INPUT_EVENT_INJECTION_TIMED_OUT:
2673                ALOGW("Asynchronous input event injection timed out.");
2674                break;
2675            }
2676        }
2677
2678        injectionState->injectionResult = injectionResult;
2679        mInjectionResultAvailableCondition.broadcast();
2680    }
2681}
2682
2683void InputDispatcher::incrementPendingForegroundDispatchesLocked(EventEntry* entry) {
2684    InjectionState* injectionState = entry->injectionState;
2685    if (injectionState) {
2686        injectionState->pendingForegroundDispatches += 1;
2687    }
2688}
2689
2690void InputDispatcher::decrementPendingForegroundDispatchesLocked(EventEntry* entry) {
2691    InjectionState* injectionState = entry->injectionState;
2692    if (injectionState) {
2693        injectionState->pendingForegroundDispatches -= 1;
2694
2695        if (injectionState->pendingForegroundDispatches == 0) {
2696            mInjectionSyncFinishedCondition.broadcast();
2697        }
2698    }
2699}
2700
2701sp<InputWindowHandle> InputDispatcher::getWindowHandleLocked(
2702        const sp<InputChannel>& inputChannel) const {
2703    size_t numWindows = mWindowHandles.size();
2704    for (size_t i = 0; i < numWindows; i++) {
2705        const sp<InputWindowHandle>& windowHandle = mWindowHandles.itemAt(i);
2706        if (windowHandle->getInputChannel() == inputChannel) {
2707            return windowHandle;
2708        }
2709    }
2710    return NULL;
2711}
2712
2713bool InputDispatcher::hasWindowHandleLocked(
2714        const sp<InputWindowHandle>& windowHandle) const {
2715    size_t numWindows = mWindowHandles.size();
2716    for (size_t i = 0; i < numWindows; i++) {
2717        if (mWindowHandles.itemAt(i) == windowHandle) {
2718            return true;
2719        }
2720    }
2721    return false;
2722}
2723
2724void InputDispatcher::setInputWindows(const Vector<sp<InputWindowHandle> >& inputWindowHandles) {
2725#if DEBUG_FOCUS
2726    ALOGD("setInputWindows");
2727#endif
2728    { // acquire lock
2729        AutoMutex _l(mLock);
2730
2731        Vector<sp<InputWindowHandle> > oldWindowHandles = mWindowHandles;
2732        mWindowHandles = inputWindowHandles;
2733
2734        sp<InputWindowHandle> newFocusedWindowHandle;
2735        bool foundHoveredWindow = false;
2736        for (size_t i = 0; i < mWindowHandles.size(); i++) {
2737            const sp<InputWindowHandle>& windowHandle = mWindowHandles.itemAt(i);
2738            if (!windowHandle->updateInfo() || windowHandle->getInputChannel() == NULL) {
2739                mWindowHandles.removeAt(i--);
2740                continue;
2741            }
2742            if (windowHandle->getInfo()->hasFocus) {
2743                newFocusedWindowHandle = windowHandle;
2744            }
2745            if (windowHandle == mLastHoverWindowHandle) {
2746                foundHoveredWindow = true;
2747            }
2748        }
2749
2750        if (!foundHoveredWindow) {
2751            mLastHoverWindowHandle = NULL;
2752        }
2753
2754        if (mFocusedWindowHandle != newFocusedWindowHandle) {
2755            if (mFocusedWindowHandle != NULL) {
2756#if DEBUG_FOCUS
2757                ALOGD("Focus left window: %s",
2758                        mFocusedWindowHandle->getName().string());
2759#endif
2760                sp<InputChannel> focusedInputChannel = mFocusedWindowHandle->getInputChannel();
2761                if (focusedInputChannel != NULL) {
2762                    CancelationOptions options(CancelationOptions::CANCEL_NON_POINTER_EVENTS,
2763                            "focus left window");
2764                    synthesizeCancelationEventsForInputChannelLocked(
2765                            focusedInputChannel, options);
2766                }
2767            }
2768            if (newFocusedWindowHandle != NULL) {
2769#if DEBUG_FOCUS
2770                ALOGD("Focus entered window: %s",
2771                        newFocusedWindowHandle->getName().string());
2772#endif
2773            }
2774            mFocusedWindowHandle = newFocusedWindowHandle;
2775        }
2776
2777        for (size_t i = 0; i < mTouchState.windows.size(); i++) {
2778            TouchedWindow& touchedWindow = mTouchState.windows.editItemAt(i);
2779            if (!hasWindowHandleLocked(touchedWindow.windowHandle)) {
2780#if DEBUG_FOCUS
2781                ALOGD("Touched window was removed: %s",
2782                        touchedWindow.windowHandle->getName().string());
2783#endif
2784                sp<InputChannel> touchedInputChannel =
2785                        touchedWindow.windowHandle->getInputChannel();
2786                if (touchedInputChannel != NULL) {
2787                    CancelationOptions options(CancelationOptions::CANCEL_POINTER_EVENTS,
2788                            "touched window was removed");
2789                    synthesizeCancelationEventsForInputChannelLocked(
2790                            touchedInputChannel, options);
2791                }
2792                mTouchState.windows.removeAt(i--);
2793            }
2794        }
2795
2796        // Release information for windows that are no longer present.
2797        // This ensures that unused input channels are released promptly.
2798        // Otherwise, they might stick around until the window handle is destroyed
2799        // which might not happen until the next GC.
2800        for (size_t i = 0; i < oldWindowHandles.size(); i++) {
2801            const sp<InputWindowHandle>& oldWindowHandle = oldWindowHandles.itemAt(i);
2802            if (!hasWindowHandleLocked(oldWindowHandle)) {
2803#if DEBUG_FOCUS
2804                ALOGD("Window went away: %s", oldWindowHandle->getName().string());
2805#endif
2806                oldWindowHandle->releaseInfo();
2807            }
2808        }
2809    } // release lock
2810
2811    // Wake up poll loop since it may need to make new input dispatching choices.
2812    mLooper->wake();
2813}
2814
2815void InputDispatcher::setFocusedApplication(
2816        const sp<InputApplicationHandle>& inputApplicationHandle) {
2817#if DEBUG_FOCUS
2818    ALOGD("setFocusedApplication");
2819#endif
2820    { // acquire lock
2821        AutoMutex _l(mLock);
2822
2823        if (inputApplicationHandle != NULL && inputApplicationHandle->updateInfo()) {
2824            if (mFocusedApplicationHandle != inputApplicationHandle) {
2825                if (mFocusedApplicationHandle != NULL) {
2826                    resetANRTimeoutsLocked();
2827                    mFocusedApplicationHandle->releaseInfo();
2828                }
2829                mFocusedApplicationHandle = inputApplicationHandle;
2830            }
2831        } else if (mFocusedApplicationHandle != NULL) {
2832            resetANRTimeoutsLocked();
2833            mFocusedApplicationHandle->releaseInfo();
2834            mFocusedApplicationHandle.clear();
2835        }
2836
2837#if DEBUG_FOCUS
2838        //logDispatchStateLocked();
2839#endif
2840    } // release lock
2841
2842    // Wake up poll loop since it may need to make new input dispatching choices.
2843    mLooper->wake();
2844}
2845
2846void InputDispatcher::setInputDispatchMode(bool enabled, bool frozen) {
2847#if DEBUG_FOCUS
2848    ALOGD("setInputDispatchMode: enabled=%d, frozen=%d", enabled, frozen);
2849#endif
2850
2851    bool changed;
2852    { // acquire lock
2853        AutoMutex _l(mLock);
2854
2855        if (mDispatchEnabled != enabled || mDispatchFrozen != frozen) {
2856            if (mDispatchFrozen && !frozen) {
2857                resetANRTimeoutsLocked();
2858            }
2859
2860            if (mDispatchEnabled && !enabled) {
2861                resetAndDropEverythingLocked("dispatcher is being disabled");
2862            }
2863
2864            mDispatchEnabled = enabled;
2865            mDispatchFrozen = frozen;
2866            changed = true;
2867        } else {
2868            changed = false;
2869        }
2870
2871#if DEBUG_FOCUS
2872        //logDispatchStateLocked();
2873#endif
2874    } // release lock
2875
2876    if (changed) {
2877        // Wake up poll loop since it may need to make new input dispatching choices.
2878        mLooper->wake();
2879    }
2880}
2881
2882void InputDispatcher::setInputFilterEnabled(bool enabled) {
2883#if DEBUG_FOCUS
2884    ALOGD("setInputFilterEnabled: enabled=%d", enabled);
2885#endif
2886
2887    { // acquire lock
2888        AutoMutex _l(mLock);
2889
2890        if (mInputFilterEnabled == enabled) {
2891            return;
2892        }
2893
2894        mInputFilterEnabled = enabled;
2895        resetAndDropEverythingLocked("input filter is being enabled or disabled");
2896    } // release lock
2897
2898    // Wake up poll loop since there might be work to do to drop everything.
2899    mLooper->wake();
2900}
2901
2902bool InputDispatcher::transferTouchFocus(const sp<InputChannel>& fromChannel,
2903        const sp<InputChannel>& toChannel) {
2904#if DEBUG_FOCUS
2905    ALOGD("transferTouchFocus: fromChannel=%s, toChannel=%s",
2906            fromChannel->getName().string(), toChannel->getName().string());
2907#endif
2908    { // acquire lock
2909        AutoMutex _l(mLock);
2910
2911        sp<InputWindowHandle> fromWindowHandle = getWindowHandleLocked(fromChannel);
2912        sp<InputWindowHandle> toWindowHandle = getWindowHandleLocked(toChannel);
2913        if (fromWindowHandle == NULL || toWindowHandle == NULL) {
2914#if DEBUG_FOCUS
2915            ALOGD("Cannot transfer focus because from or to window not found.");
2916#endif
2917            return false;
2918        }
2919        if (fromWindowHandle == toWindowHandle) {
2920#if DEBUG_FOCUS
2921            ALOGD("Trivial transfer to same window.");
2922#endif
2923            return true;
2924        }
2925
2926        bool found = false;
2927        for (size_t i = 0; i < mTouchState.windows.size(); i++) {
2928            const TouchedWindow& touchedWindow = mTouchState.windows[i];
2929            if (touchedWindow.windowHandle == fromWindowHandle) {
2930                int32_t oldTargetFlags = touchedWindow.targetFlags;
2931                BitSet32 pointerIds = touchedWindow.pointerIds;
2932
2933                mTouchState.windows.removeAt(i);
2934
2935                int32_t newTargetFlags = oldTargetFlags
2936                        & (InputTarget::FLAG_FOREGROUND
2937                                | InputTarget::FLAG_SPLIT | InputTarget::FLAG_DISPATCH_AS_IS);
2938                mTouchState.addOrUpdateWindow(toWindowHandle, newTargetFlags, pointerIds);
2939
2940                found = true;
2941                break;
2942            }
2943        }
2944
2945        if (! found) {
2946#if DEBUG_FOCUS
2947            ALOGD("Focus transfer failed because from window did not have focus.");
2948#endif
2949            return false;
2950        }
2951
2952        ssize_t fromConnectionIndex = getConnectionIndexLocked(fromChannel);
2953        ssize_t toConnectionIndex = getConnectionIndexLocked(toChannel);
2954        if (fromConnectionIndex >= 0 && toConnectionIndex >= 0) {
2955            sp<Connection> fromConnection = mConnectionsByFd.valueAt(fromConnectionIndex);
2956            sp<Connection> toConnection = mConnectionsByFd.valueAt(toConnectionIndex);
2957
2958            fromConnection->inputState.copyPointerStateTo(toConnection->inputState);
2959            CancelationOptions options(CancelationOptions::CANCEL_POINTER_EVENTS,
2960                    "transferring touch focus from this window to another window");
2961            synthesizeCancelationEventsForConnectionLocked(fromConnection, options);
2962        }
2963
2964#if DEBUG_FOCUS
2965        logDispatchStateLocked();
2966#endif
2967    } // release lock
2968
2969    // Wake up poll loop since it may need to make new input dispatching choices.
2970    mLooper->wake();
2971    return true;
2972}
2973
2974void InputDispatcher::resetAndDropEverythingLocked(const char* reason) {
2975#if DEBUG_FOCUS
2976    ALOGD("Resetting and dropping all events (%s).", reason);
2977#endif
2978
2979    CancelationOptions options(CancelationOptions::CANCEL_ALL_EVENTS, reason);
2980    synthesizeCancelationEventsForAllConnectionsLocked(options);
2981
2982    resetKeyRepeatLocked();
2983    releasePendingEventLocked();
2984    drainInboundQueueLocked();
2985    resetANRTimeoutsLocked();
2986
2987    mTouchState.reset();
2988    mLastHoverWindowHandle.clear();
2989}
2990
2991void InputDispatcher::logDispatchStateLocked() {
2992    String8 dump;
2993    dumpDispatchStateLocked(dump);
2994
2995    char* text = dump.lockBuffer(dump.size());
2996    char* start = text;
2997    while (*start != '\0') {
2998        char* end = strchr(start, '\n');
2999        if (*end == '\n') {
3000            *(end++) = '\0';
3001        }
3002        ALOGD("%s", start);
3003        start = end;
3004    }
3005}
3006
3007void InputDispatcher::dumpDispatchStateLocked(String8& dump) {
3008    dump.appendFormat(INDENT "DispatchEnabled: %d\n", mDispatchEnabled);
3009    dump.appendFormat(INDENT "DispatchFrozen: %d\n", mDispatchFrozen);
3010
3011    if (mFocusedApplicationHandle != NULL) {
3012        dump.appendFormat(INDENT "FocusedApplication: name='%s', dispatchingTimeout=%0.3fms\n",
3013                mFocusedApplicationHandle->getName().string(),
3014                mFocusedApplicationHandle->getDispatchingTimeout(
3015                        DEFAULT_INPUT_DISPATCHING_TIMEOUT) / 1000000.0);
3016    } else {
3017        dump.append(INDENT "FocusedApplication: <null>\n");
3018    }
3019    dump.appendFormat(INDENT "FocusedWindow: name='%s'\n",
3020            mFocusedWindowHandle != NULL ? mFocusedWindowHandle->getName().string() : "<null>");
3021
3022    dump.appendFormat(INDENT "TouchDown: %s\n", toString(mTouchState.down));
3023    dump.appendFormat(INDENT "TouchSplit: %s\n", toString(mTouchState.split));
3024    dump.appendFormat(INDENT "TouchDeviceId: %d\n", mTouchState.deviceId);
3025    dump.appendFormat(INDENT "TouchSource: 0x%08x\n", mTouchState.source);
3026    if (!mTouchState.windows.isEmpty()) {
3027        dump.append(INDENT "TouchedWindows:\n");
3028        for (size_t i = 0; i < mTouchState.windows.size(); i++) {
3029            const TouchedWindow& touchedWindow = mTouchState.windows[i];
3030            dump.appendFormat(INDENT2 "%d: name='%s', pointerIds=0x%0x, targetFlags=0x%x\n",
3031                    i, touchedWindow.windowHandle->getName().string(),
3032                    touchedWindow.pointerIds.value,
3033                    touchedWindow.targetFlags);
3034        }
3035    } else {
3036        dump.append(INDENT "TouchedWindows: <none>\n");
3037    }
3038
3039    if (!mWindowHandles.isEmpty()) {
3040        dump.append(INDENT "Windows:\n");
3041        for (size_t i = 0; i < mWindowHandles.size(); i++) {
3042            const sp<InputWindowHandle>& windowHandle = mWindowHandles.itemAt(i);
3043            const InputWindowInfo* windowInfo = windowHandle->getInfo();
3044
3045            dump.appendFormat(INDENT2 "%d: name='%s', paused=%s, hasFocus=%s, hasWallpaper=%s, "
3046                    "visible=%s, canReceiveKeys=%s, flags=0x%08x, type=0x%08x, layer=%d, "
3047                    "frame=[%d,%d][%d,%d], scale=%f, "
3048                    "touchableRegion=",
3049                    i, windowInfo->name.string(),
3050                    toString(windowInfo->paused),
3051                    toString(windowInfo->hasFocus),
3052                    toString(windowInfo->hasWallpaper),
3053                    toString(windowInfo->visible),
3054                    toString(windowInfo->canReceiveKeys),
3055                    windowInfo->layoutParamsFlags, windowInfo->layoutParamsType,
3056                    windowInfo->layer,
3057                    windowInfo->frameLeft, windowInfo->frameTop,
3058                    windowInfo->frameRight, windowInfo->frameBottom,
3059                    windowInfo->scaleFactor);
3060            dumpRegion(dump, windowInfo->touchableRegion);
3061            dump.appendFormat(", inputFeatures=0x%08x", windowInfo->inputFeatures);
3062            dump.appendFormat(", ownerPid=%d, ownerUid=%d, dispatchingTimeout=%0.3fms\n",
3063                    windowInfo->ownerPid, windowInfo->ownerUid,
3064                    windowInfo->dispatchingTimeout / 1000000.0);
3065        }
3066    } else {
3067        dump.append(INDENT "Windows: <none>\n");
3068    }
3069
3070    if (!mMonitoringChannels.isEmpty()) {
3071        dump.append(INDENT "MonitoringChannels:\n");
3072        for (size_t i = 0; i < mMonitoringChannels.size(); i++) {
3073            const sp<InputChannel>& channel = mMonitoringChannels[i];
3074            dump.appendFormat(INDENT2 "%d: '%s'\n", i, channel->getName().string());
3075        }
3076    } else {
3077        dump.append(INDENT "MonitoringChannels: <none>\n");
3078    }
3079
3080    dump.appendFormat(INDENT "InboundQueue: length=%u\n", mInboundQueue.count());
3081
3082    if (isAppSwitchPendingLocked()) {
3083        dump.appendFormat(INDENT "AppSwitch: pending, due in %01.1fms\n",
3084                (mAppSwitchDueTime - now()) / 1000000.0);
3085    } else {
3086        dump.append(INDENT "AppSwitch: not pending\n");
3087    }
3088}
3089
3090status_t InputDispatcher::registerInputChannel(const sp<InputChannel>& inputChannel,
3091        const sp<InputWindowHandle>& inputWindowHandle, bool monitor) {
3092#if DEBUG_REGISTRATION
3093    ALOGD("channel '%s' ~ registerInputChannel - monitor=%s", inputChannel->getName().string(),
3094            toString(monitor));
3095#endif
3096
3097    { // acquire lock
3098        AutoMutex _l(mLock);
3099
3100        if (getConnectionIndexLocked(inputChannel) >= 0) {
3101            ALOGW("Attempted to register already registered input channel '%s'",
3102                    inputChannel->getName().string());
3103            return BAD_VALUE;
3104        }
3105
3106        sp<Connection> connection = new Connection(inputChannel, inputWindowHandle, monitor);
3107
3108        int32_t fd = inputChannel->getFd();
3109        mConnectionsByFd.add(fd, connection);
3110
3111        if (monitor) {
3112            mMonitoringChannels.push(inputChannel);
3113        }
3114
3115        mLooper->addFd(fd, 0, ALOOPER_EVENT_INPUT, handleReceiveCallback, this);
3116
3117        runCommandsLockedInterruptible();
3118    } // release lock
3119    return OK;
3120}
3121
3122status_t InputDispatcher::unregisterInputChannel(const sp<InputChannel>& inputChannel) {
3123#if DEBUG_REGISTRATION
3124    ALOGD("channel '%s' ~ unregisterInputChannel", inputChannel->getName().string());
3125#endif
3126
3127    { // acquire lock
3128        AutoMutex _l(mLock);
3129
3130        status_t status = unregisterInputChannelLocked(inputChannel, false /*notify*/);
3131        if (status) {
3132            return status;
3133        }
3134    } // release lock
3135
3136    // Wake the poll loop because removing the connection may have changed the current
3137    // synchronization state.
3138    mLooper->wake();
3139    return OK;
3140}
3141
3142status_t InputDispatcher::unregisterInputChannelLocked(const sp<InputChannel>& inputChannel,
3143        bool notify) {
3144    ssize_t connectionIndex = getConnectionIndexLocked(inputChannel);
3145    if (connectionIndex < 0) {
3146        ALOGW("Attempted to unregister already unregistered input channel '%s'",
3147                inputChannel->getName().string());
3148        return BAD_VALUE;
3149    }
3150
3151    sp<Connection> connection = mConnectionsByFd.valueAt(connectionIndex);
3152    mConnectionsByFd.removeItemsAt(connectionIndex);
3153
3154    if (connection->monitor) {
3155        removeMonitorChannelLocked(inputChannel);
3156    }
3157
3158    mLooper->removeFd(inputChannel->getFd());
3159
3160    nsecs_t currentTime = now();
3161    abortBrokenDispatchCycleLocked(currentTime, connection, notify);
3162
3163    runCommandsLockedInterruptible();
3164
3165    connection->status = Connection::STATUS_ZOMBIE;
3166    return OK;
3167}
3168
3169void InputDispatcher::removeMonitorChannelLocked(const sp<InputChannel>& inputChannel) {
3170    for (size_t i = 0; i < mMonitoringChannels.size(); i++) {
3171         if (mMonitoringChannels[i] == inputChannel) {
3172             mMonitoringChannels.removeAt(i);
3173             break;
3174         }
3175    }
3176}
3177
3178ssize_t InputDispatcher::getConnectionIndexLocked(const sp<InputChannel>& inputChannel) {
3179    ssize_t connectionIndex = mConnectionsByFd.indexOfKey(inputChannel->getFd());
3180    if (connectionIndex >= 0) {
3181        sp<Connection> connection = mConnectionsByFd.valueAt(connectionIndex);
3182        if (connection->inputChannel.get() == inputChannel.get()) {
3183            return connectionIndex;
3184        }
3185    }
3186
3187    return -1;
3188}
3189
3190void InputDispatcher::onDispatchCycleFinishedLocked(
3191        nsecs_t currentTime, const sp<Connection>& connection, uint32_t seq, bool handled) {
3192    CommandEntry* commandEntry = postCommandLocked(
3193            & InputDispatcher::doDispatchCycleFinishedLockedInterruptible);
3194    commandEntry->connection = connection;
3195    commandEntry->seq = seq;
3196    commandEntry->handled = handled;
3197}
3198
3199void InputDispatcher::onDispatchCycleBrokenLocked(
3200        nsecs_t currentTime, const sp<Connection>& connection) {
3201    ALOGE("channel '%s' ~ Channel is unrecoverably broken and will be disposed!",
3202            connection->getInputChannelName());
3203
3204    CommandEntry* commandEntry = postCommandLocked(
3205            & InputDispatcher::doNotifyInputChannelBrokenLockedInterruptible);
3206    commandEntry->connection = connection;
3207}
3208
3209void InputDispatcher::onANRLocked(
3210        nsecs_t currentTime, const sp<InputApplicationHandle>& applicationHandle,
3211        const sp<InputWindowHandle>& windowHandle,
3212        nsecs_t eventTime, nsecs_t waitStartTime) {
3213    ALOGI("Application is not responding: %s.  "
3214            "%01.1fms since event, %01.1fms since wait started",
3215            getApplicationWindowLabelLocked(applicationHandle, windowHandle).string(),
3216            (currentTime - eventTime) / 1000000.0,
3217            (currentTime - waitStartTime) / 1000000.0);
3218
3219    CommandEntry* commandEntry = postCommandLocked(
3220            & InputDispatcher::doNotifyANRLockedInterruptible);
3221    commandEntry->inputApplicationHandle = applicationHandle;
3222    commandEntry->inputWindowHandle = windowHandle;
3223}
3224
3225void InputDispatcher::doNotifyConfigurationChangedInterruptible(
3226        CommandEntry* commandEntry) {
3227    mLock.unlock();
3228
3229    mPolicy->notifyConfigurationChanged(commandEntry->eventTime);
3230
3231    mLock.lock();
3232}
3233
3234void InputDispatcher::doNotifyInputChannelBrokenLockedInterruptible(
3235        CommandEntry* commandEntry) {
3236    sp<Connection> connection = commandEntry->connection;
3237
3238    if (connection->status != Connection::STATUS_ZOMBIE) {
3239        mLock.unlock();
3240
3241        mPolicy->notifyInputChannelBroken(connection->inputWindowHandle);
3242
3243        mLock.lock();
3244    }
3245}
3246
3247void InputDispatcher::doNotifyANRLockedInterruptible(
3248        CommandEntry* commandEntry) {
3249    mLock.unlock();
3250
3251    nsecs_t newTimeout = mPolicy->notifyANR(
3252            commandEntry->inputApplicationHandle, commandEntry->inputWindowHandle);
3253
3254    mLock.lock();
3255
3256    resumeAfterTargetsNotReadyTimeoutLocked(newTimeout,
3257            commandEntry->inputWindowHandle != NULL
3258                    ? commandEntry->inputWindowHandle->getInputChannel() : NULL);
3259}
3260
3261void InputDispatcher::doInterceptKeyBeforeDispatchingLockedInterruptible(
3262        CommandEntry* commandEntry) {
3263    KeyEntry* entry = commandEntry->keyEntry;
3264
3265    KeyEvent event;
3266    initializeKeyEvent(&event, entry);
3267
3268    mLock.unlock();
3269
3270    nsecs_t delay = mPolicy->interceptKeyBeforeDispatching(commandEntry->inputWindowHandle,
3271            &event, entry->policyFlags);
3272
3273    mLock.lock();
3274
3275    if (delay < 0) {
3276        entry->interceptKeyResult = KeyEntry::INTERCEPT_KEY_RESULT_SKIP;
3277    } else if (!delay) {
3278        entry->interceptKeyResult = KeyEntry::INTERCEPT_KEY_RESULT_CONTINUE;
3279    } else {
3280        entry->interceptKeyResult = KeyEntry::INTERCEPT_KEY_RESULT_TRY_AGAIN_LATER;
3281        entry->interceptKeyWakeupTime = now() + delay;
3282    }
3283    entry->release();
3284}
3285
3286void InputDispatcher::doDispatchCycleFinishedLockedInterruptible(
3287        CommandEntry* commandEntry) {
3288    sp<Connection> connection = commandEntry->connection;
3289    uint32_t seq = commandEntry->seq;
3290    bool handled = commandEntry->handled;
3291
3292    // Handle post-event policy actions.
3293    DispatchEntry* dispatchEntry = connection->findWaitQueueEntry(seq);
3294    if (dispatchEntry) {
3295        bool restartEvent;
3296        if (dispatchEntry->eventEntry->type == EventEntry::TYPE_KEY) {
3297            KeyEntry* keyEntry = static_cast<KeyEntry*>(dispatchEntry->eventEntry);
3298            restartEvent = afterKeyEventLockedInterruptible(connection,
3299                    dispatchEntry, keyEntry, handled);
3300        } else if (dispatchEntry->eventEntry->type == EventEntry::TYPE_MOTION) {
3301            MotionEntry* motionEntry = static_cast<MotionEntry*>(dispatchEntry->eventEntry);
3302            restartEvent = afterMotionEventLockedInterruptible(connection,
3303                    dispatchEntry, motionEntry, handled);
3304        } else {
3305            restartEvent = false;
3306        }
3307
3308        // Dequeue the event and start the next cycle.
3309        // Note that because the lock might have been released, it is possible that the
3310        // contents of the wait queue to have been drained, so we need to double-check
3311        // a few things.
3312        if (dispatchEntry == connection->findWaitQueueEntry(seq)) {
3313            connection->waitQueue.dequeue(dispatchEntry);
3314            if (restartEvent && connection->status == Connection::STATUS_NORMAL) {
3315                connection->outboundQueue.enqueueAtHead(dispatchEntry);
3316            } else {
3317                releaseDispatchEntryLocked(dispatchEntry);
3318            }
3319        }
3320
3321        // Start the next dispatch cycle for this connection.
3322        startDispatchCycleLocked(now(), connection);
3323    }
3324}
3325
3326bool InputDispatcher::afterKeyEventLockedInterruptible(const sp<Connection>& connection,
3327        DispatchEntry* dispatchEntry, KeyEntry* keyEntry, bool handled) {
3328    if (!(keyEntry->flags & AKEY_EVENT_FLAG_FALLBACK)) {
3329        // Get the fallback key state.
3330        // Clear it out after dispatching the UP.
3331        int32_t originalKeyCode = keyEntry->keyCode;
3332        int32_t fallbackKeyCode = connection->inputState.getFallbackKey(originalKeyCode);
3333        if (keyEntry->action == AKEY_EVENT_ACTION_UP) {
3334            connection->inputState.removeFallbackKey(originalKeyCode);
3335        }
3336
3337        if (handled || !dispatchEntry->hasForegroundTarget()) {
3338            // If the application handles the original key for which we previously
3339            // generated a fallback or if the window is not a foreground window,
3340            // then cancel the associated fallback key, if any.
3341            if (fallbackKeyCode != -1) {
3342                if (fallbackKeyCode != AKEYCODE_UNKNOWN) {
3343                    CancelationOptions options(CancelationOptions::CANCEL_FALLBACK_EVENTS,
3344                            "application handled the original non-fallback key "
3345                            "or is no longer a foreground target, "
3346                            "canceling previously dispatched fallback key");
3347                    options.keyCode = fallbackKeyCode;
3348                    synthesizeCancelationEventsForConnectionLocked(connection, options);
3349                }
3350                connection->inputState.removeFallbackKey(originalKeyCode);
3351            }
3352        } else {
3353            // If the application did not handle a non-fallback key, first check
3354            // that we are in a good state to perform unhandled key event processing
3355            // Then ask the policy what to do with it.
3356            bool initialDown = keyEntry->action == AKEY_EVENT_ACTION_DOWN
3357                    && keyEntry->repeatCount == 0;
3358            if (fallbackKeyCode == -1 && !initialDown) {
3359#if DEBUG_OUTBOUND_EVENT_DETAILS
3360                ALOGD("Unhandled key event: Skipping unhandled key event processing "
3361                        "since this is not an initial down.  "
3362                        "keyCode=%d, action=%d, repeatCount=%d",
3363                        originalKeyCode, keyEntry->action, keyEntry->repeatCount);
3364#endif
3365                return false;
3366            }
3367
3368            // Dispatch the unhandled key to the policy.
3369#if DEBUG_OUTBOUND_EVENT_DETAILS
3370            ALOGD("Unhandled key event: Asking policy to perform fallback action.  "
3371                    "keyCode=%d, action=%d, repeatCount=%d",
3372                    keyEntry->keyCode, keyEntry->action, keyEntry->repeatCount);
3373#endif
3374            KeyEvent event;
3375            initializeKeyEvent(&event, keyEntry);
3376
3377            mLock.unlock();
3378
3379            bool fallback = mPolicy->dispatchUnhandledKey(connection->inputWindowHandle,
3380                    &event, keyEntry->policyFlags, &event);
3381
3382            mLock.lock();
3383
3384            if (connection->status != Connection::STATUS_NORMAL) {
3385                connection->inputState.removeFallbackKey(originalKeyCode);
3386                return false;
3387            }
3388
3389            // Latch the fallback keycode for this key on an initial down.
3390            // The fallback keycode cannot change at any other point in the lifecycle.
3391            if (initialDown) {
3392                if (fallback) {
3393                    fallbackKeyCode = event.getKeyCode();
3394                } else {
3395                    fallbackKeyCode = AKEYCODE_UNKNOWN;
3396                }
3397                connection->inputState.setFallbackKey(originalKeyCode, fallbackKeyCode);
3398            }
3399
3400            ALOG_ASSERT(fallbackKeyCode != -1);
3401
3402            // Cancel the fallback key if the policy decides not to send it anymore.
3403            // We will continue to dispatch the key to the policy but we will no
3404            // longer dispatch a fallback key to the application.
3405            if (fallbackKeyCode != AKEYCODE_UNKNOWN
3406                    && (!fallback || fallbackKeyCode != event.getKeyCode())) {
3407#if DEBUG_OUTBOUND_EVENT_DETAILS
3408                if (fallback) {
3409                    ALOGD("Unhandled key event: Policy requested to send key %d"
3410                            "as a fallback for %d, but on the DOWN it had requested "
3411                            "to send %d instead.  Fallback canceled.",
3412                            event.getKeyCode(), originalKeyCode, fallbackKeyCode);
3413                } else {
3414                    ALOGD("Unhandled key event: Policy did not request fallback for %d,"
3415                            "but on the DOWN it had requested to send %d.  "
3416                            "Fallback canceled.",
3417                            originalKeyCode, fallbackKeyCode);
3418                }
3419#endif
3420
3421                CancelationOptions options(CancelationOptions::CANCEL_FALLBACK_EVENTS,
3422                        "canceling fallback, policy no longer desires it");
3423                options.keyCode = fallbackKeyCode;
3424                synthesizeCancelationEventsForConnectionLocked(connection, options);
3425
3426                fallback = false;
3427                fallbackKeyCode = AKEYCODE_UNKNOWN;
3428                if (keyEntry->action != AKEY_EVENT_ACTION_UP) {
3429                    connection->inputState.setFallbackKey(originalKeyCode,
3430                            fallbackKeyCode);
3431                }
3432            }
3433
3434#if DEBUG_OUTBOUND_EVENT_DETAILS
3435            {
3436                String8 msg;
3437                const KeyedVector<int32_t, int32_t>& fallbackKeys =
3438                        connection->inputState.getFallbackKeys();
3439                for (size_t i = 0; i < fallbackKeys.size(); i++) {
3440                    msg.appendFormat(", %d->%d", fallbackKeys.keyAt(i),
3441                            fallbackKeys.valueAt(i));
3442                }
3443                ALOGD("Unhandled key event: %d currently tracked fallback keys%s.",
3444                        fallbackKeys.size(), msg.string());
3445            }
3446#endif
3447
3448            if (fallback) {
3449                // Restart the dispatch cycle using the fallback key.
3450                keyEntry->eventTime = event.getEventTime();
3451                keyEntry->deviceId = event.getDeviceId();
3452                keyEntry->source = event.getSource();
3453                keyEntry->flags = event.getFlags() | AKEY_EVENT_FLAG_FALLBACK;
3454                keyEntry->keyCode = fallbackKeyCode;
3455                keyEntry->scanCode = event.getScanCode();
3456                keyEntry->metaState = event.getMetaState();
3457                keyEntry->repeatCount = event.getRepeatCount();
3458                keyEntry->downTime = event.getDownTime();
3459                keyEntry->syntheticRepeat = false;
3460
3461#if DEBUG_OUTBOUND_EVENT_DETAILS
3462                ALOGD("Unhandled key event: Dispatching fallback key.  "
3463                        "originalKeyCode=%d, fallbackKeyCode=%d, fallbackMetaState=%08x",
3464                        originalKeyCode, fallbackKeyCode, keyEntry->metaState);
3465#endif
3466                return true; // restart the event
3467            } else {
3468#if DEBUG_OUTBOUND_EVENT_DETAILS
3469                ALOGD("Unhandled key event: No fallback key.");
3470#endif
3471            }
3472        }
3473    }
3474    return false;
3475}
3476
3477bool InputDispatcher::afterMotionEventLockedInterruptible(const sp<Connection>& connection,
3478        DispatchEntry* dispatchEntry, MotionEntry* motionEntry, bool handled) {
3479    return false;
3480}
3481
3482void InputDispatcher::doPokeUserActivityLockedInterruptible(CommandEntry* commandEntry) {
3483    mLock.unlock();
3484
3485    mPolicy->pokeUserActivity(commandEntry->eventTime, commandEntry->userActivityEventType);
3486
3487    mLock.lock();
3488}
3489
3490void InputDispatcher::initializeKeyEvent(KeyEvent* event, const KeyEntry* entry) {
3491    event->initialize(entry->deviceId, entry->source, entry->action, entry->flags,
3492            entry->keyCode, entry->scanCode, entry->metaState, entry->repeatCount,
3493            entry->downTime, entry->eventTime);
3494}
3495
3496void InputDispatcher::updateDispatchStatisticsLocked(nsecs_t currentTime, const EventEntry* entry,
3497        int32_t injectionResult, nsecs_t timeSpentWaitingForApplication) {
3498    // TODO Write some statistics about how long we spend waiting.
3499}
3500
3501void InputDispatcher::dump(String8& dump) {
3502    AutoMutex _l(mLock);
3503
3504    dump.append("Input Dispatcher State:\n");
3505    dumpDispatchStateLocked(dump);
3506
3507    dump.append(INDENT "Configuration:\n");
3508    dump.appendFormat(INDENT2 "KeyRepeatDelay: %0.1fms\n", mConfig.keyRepeatDelay * 0.000001f);
3509    dump.appendFormat(INDENT2 "KeyRepeatTimeout: %0.1fms\n", mConfig.keyRepeatTimeout * 0.000001f);
3510}
3511
3512void InputDispatcher::monitor() {
3513    // Acquire and release the lock to ensure that the dispatcher has not deadlocked.
3514    mLock.lock();
3515    mLooper->wake();
3516    mDispatcherIsAliveCondition.wait(mLock);
3517    mLock.unlock();
3518}
3519
3520
3521// --- InputDispatcher::Queue ---
3522
3523template <typename T>
3524uint32_t InputDispatcher::Queue<T>::count() const {
3525    uint32_t result = 0;
3526    for (const T* entry = head; entry; entry = entry->next) {
3527        result += 1;
3528    }
3529    return result;
3530}
3531
3532
3533// --- InputDispatcher::InjectionState ---
3534
3535InputDispatcher::InjectionState::InjectionState(int32_t injectorPid, int32_t injectorUid) :
3536        refCount(1),
3537        injectorPid(injectorPid), injectorUid(injectorUid),
3538        injectionResult(INPUT_EVENT_INJECTION_PENDING), injectionIsAsync(false),
3539        pendingForegroundDispatches(0) {
3540}
3541
3542InputDispatcher::InjectionState::~InjectionState() {
3543}
3544
3545void InputDispatcher::InjectionState::release() {
3546    refCount -= 1;
3547    if (refCount == 0) {
3548        delete this;
3549    } else {
3550        ALOG_ASSERT(refCount > 0);
3551    }
3552}
3553
3554
3555// --- InputDispatcher::EventEntry ---
3556
3557InputDispatcher::EventEntry::EventEntry(int32_t type, nsecs_t eventTime, uint32_t policyFlags) :
3558        refCount(1), type(type), eventTime(eventTime), policyFlags(policyFlags),
3559        injectionState(NULL), dispatchInProgress(false) {
3560}
3561
3562InputDispatcher::EventEntry::~EventEntry() {
3563    releaseInjectionState();
3564}
3565
3566void InputDispatcher::EventEntry::release() {
3567    refCount -= 1;
3568    if (refCount == 0) {
3569        delete this;
3570    } else {
3571        ALOG_ASSERT(refCount > 0);
3572    }
3573}
3574
3575void InputDispatcher::EventEntry::releaseInjectionState() {
3576    if (injectionState) {
3577        injectionState->release();
3578        injectionState = NULL;
3579    }
3580}
3581
3582
3583// --- InputDispatcher::ConfigurationChangedEntry ---
3584
3585InputDispatcher::ConfigurationChangedEntry::ConfigurationChangedEntry(nsecs_t eventTime) :
3586        EventEntry(TYPE_CONFIGURATION_CHANGED, eventTime, 0) {
3587}
3588
3589InputDispatcher::ConfigurationChangedEntry::~ConfigurationChangedEntry() {
3590}
3591
3592
3593// --- InputDispatcher::DeviceResetEntry ---
3594
3595InputDispatcher::DeviceResetEntry::DeviceResetEntry(nsecs_t eventTime, int32_t deviceId) :
3596        EventEntry(TYPE_DEVICE_RESET, eventTime, 0),
3597        deviceId(deviceId) {
3598}
3599
3600InputDispatcher::DeviceResetEntry::~DeviceResetEntry() {
3601}
3602
3603
3604// --- InputDispatcher::KeyEntry ---
3605
3606InputDispatcher::KeyEntry::KeyEntry(nsecs_t eventTime,
3607        int32_t deviceId, uint32_t source, uint32_t policyFlags, int32_t action,
3608        int32_t flags, int32_t keyCode, int32_t scanCode, int32_t metaState,
3609        int32_t repeatCount, nsecs_t downTime) :
3610        EventEntry(TYPE_KEY, eventTime, policyFlags),
3611        deviceId(deviceId), source(source), action(action), flags(flags),
3612        keyCode(keyCode), scanCode(scanCode), metaState(metaState),
3613        repeatCount(repeatCount), downTime(downTime),
3614        syntheticRepeat(false), interceptKeyResult(KeyEntry::INTERCEPT_KEY_RESULT_UNKNOWN),
3615        interceptKeyWakeupTime(0) {
3616}
3617
3618InputDispatcher::KeyEntry::~KeyEntry() {
3619}
3620
3621void InputDispatcher::KeyEntry::recycle() {
3622    releaseInjectionState();
3623
3624    dispatchInProgress = false;
3625    syntheticRepeat = false;
3626    interceptKeyResult = KeyEntry::INTERCEPT_KEY_RESULT_UNKNOWN;
3627    interceptKeyWakeupTime = 0;
3628}
3629
3630
3631// --- InputDispatcher::MotionEntry ---
3632
3633InputDispatcher::MotionEntry::MotionEntry(nsecs_t eventTime,
3634        int32_t deviceId, uint32_t source, uint32_t policyFlags, int32_t action, int32_t flags,
3635        int32_t metaState, int32_t buttonState,
3636        int32_t edgeFlags, float xPrecision, float yPrecision,
3637        nsecs_t downTime, uint32_t pointerCount,
3638        const PointerProperties* pointerProperties, const PointerCoords* pointerCoords) :
3639        EventEntry(TYPE_MOTION, eventTime, policyFlags),
3640        eventTime(eventTime),
3641        deviceId(deviceId), source(source), action(action), flags(flags),
3642        metaState(metaState), buttonState(buttonState), edgeFlags(edgeFlags),
3643        xPrecision(xPrecision), yPrecision(yPrecision),
3644        downTime(downTime), pointerCount(pointerCount) {
3645    for (uint32_t i = 0; i < pointerCount; i++) {
3646        this->pointerProperties[i].copyFrom(pointerProperties[i]);
3647        this->pointerCoords[i].copyFrom(pointerCoords[i]);
3648    }
3649}
3650
3651InputDispatcher::MotionEntry::~MotionEntry() {
3652}
3653
3654
3655// --- InputDispatcher::DispatchEntry ---
3656
3657volatile int32_t InputDispatcher::DispatchEntry::sNextSeqAtomic;
3658
3659InputDispatcher::DispatchEntry::DispatchEntry(EventEntry* eventEntry,
3660        int32_t targetFlags, float xOffset, float yOffset, float scaleFactor) :
3661        seq(nextSeq()),
3662        eventEntry(eventEntry), targetFlags(targetFlags),
3663        xOffset(xOffset), yOffset(yOffset), scaleFactor(scaleFactor),
3664        resolvedAction(0), resolvedFlags(0) {
3665    eventEntry->refCount += 1;
3666}
3667
3668InputDispatcher::DispatchEntry::~DispatchEntry() {
3669    eventEntry->release();
3670}
3671
3672uint32_t InputDispatcher::DispatchEntry::nextSeq() {
3673    // Sequence number 0 is reserved and will never be returned.
3674    uint32_t seq;
3675    do {
3676        seq = android_atomic_inc(&sNextSeqAtomic);
3677    } while (!seq);
3678    return seq;
3679}
3680
3681
3682// --- InputDispatcher::InputState ---
3683
3684InputDispatcher::InputState::InputState() {
3685}
3686
3687InputDispatcher::InputState::~InputState() {
3688}
3689
3690bool InputDispatcher::InputState::isNeutral() const {
3691    return mKeyMementos.isEmpty() && mMotionMementos.isEmpty();
3692}
3693
3694bool InputDispatcher::InputState::isHovering(int32_t deviceId, uint32_t source) const {
3695    for (size_t i = 0; i < mMotionMementos.size(); i++) {
3696        const MotionMemento& memento = mMotionMementos.itemAt(i);
3697        if (memento.deviceId == deviceId
3698                && memento.source == source
3699                && memento.hovering) {
3700            return true;
3701        }
3702    }
3703    return false;
3704}
3705
3706bool InputDispatcher::InputState::trackKey(const KeyEntry* entry,
3707        int32_t action, int32_t flags) {
3708    switch (action) {
3709    case AKEY_EVENT_ACTION_UP: {
3710        if (entry->flags & AKEY_EVENT_FLAG_FALLBACK) {
3711            for (size_t i = 0; i < mFallbackKeys.size(); ) {
3712                if (mFallbackKeys.valueAt(i) == entry->keyCode) {
3713                    mFallbackKeys.removeItemsAt(i);
3714                } else {
3715                    i += 1;
3716                }
3717            }
3718        }
3719        ssize_t index = findKeyMemento(entry);
3720        if (index >= 0) {
3721            mKeyMementos.removeAt(index);
3722            return true;
3723        }
3724        /* FIXME: We can't just drop the key up event because that prevents creating
3725         * popup windows that are automatically shown when a key is held and then
3726         * dismissed when the key is released.  The problem is that the popup will
3727         * not have received the original key down, so the key up will be considered
3728         * to be inconsistent with its observed state.  We could perhaps handle this
3729         * by synthesizing a key down but that will cause other problems.
3730         *
3731         * So for now, allow inconsistent key up events to be dispatched.
3732         *
3733#if DEBUG_OUTBOUND_EVENT_DETAILS
3734        ALOGD("Dropping inconsistent key up event: deviceId=%d, source=%08x, "
3735                "keyCode=%d, scanCode=%d",
3736                entry->deviceId, entry->source, entry->keyCode, entry->scanCode);
3737#endif
3738        return false;
3739        */
3740        return true;
3741    }
3742
3743    case AKEY_EVENT_ACTION_DOWN: {
3744        ssize_t index = findKeyMemento(entry);
3745        if (index >= 0) {
3746            mKeyMementos.removeAt(index);
3747        }
3748        addKeyMemento(entry, flags);
3749        return true;
3750    }
3751
3752    default:
3753        return true;
3754    }
3755}
3756
3757bool InputDispatcher::InputState::trackMotion(const MotionEntry* entry,
3758        int32_t action, int32_t flags) {
3759    int32_t actionMasked = action & AMOTION_EVENT_ACTION_MASK;
3760    switch (actionMasked) {
3761    case AMOTION_EVENT_ACTION_UP:
3762    case AMOTION_EVENT_ACTION_CANCEL: {
3763        ssize_t index = findMotionMemento(entry, false /*hovering*/);
3764        if (index >= 0) {
3765            mMotionMementos.removeAt(index);
3766            return true;
3767        }
3768#if DEBUG_OUTBOUND_EVENT_DETAILS
3769        ALOGD("Dropping inconsistent motion up or cancel event: deviceId=%d, source=%08x, "
3770                "actionMasked=%d",
3771                entry->deviceId, entry->source, actionMasked);
3772#endif
3773        return false;
3774    }
3775
3776    case AMOTION_EVENT_ACTION_DOWN: {
3777        ssize_t index = findMotionMemento(entry, false /*hovering*/);
3778        if (index >= 0) {
3779            mMotionMementos.removeAt(index);
3780        }
3781        addMotionMemento(entry, flags, false /*hovering*/);
3782        return true;
3783    }
3784
3785    case AMOTION_EVENT_ACTION_POINTER_UP:
3786    case AMOTION_EVENT_ACTION_POINTER_DOWN:
3787    case AMOTION_EVENT_ACTION_MOVE: {
3788        ssize_t index = findMotionMemento(entry, false /*hovering*/);
3789        if (index >= 0) {
3790            MotionMemento& memento = mMotionMementos.editItemAt(index);
3791            memento.setPointers(entry);
3792            return true;
3793        }
3794        if (actionMasked == AMOTION_EVENT_ACTION_MOVE
3795                && (entry->source & (AINPUT_SOURCE_CLASS_JOYSTICK
3796                        | AINPUT_SOURCE_CLASS_NAVIGATION))) {
3797            // Joysticks and trackballs can send MOVE events without corresponding DOWN or UP.
3798            return true;
3799        }
3800#if DEBUG_OUTBOUND_EVENT_DETAILS
3801        ALOGD("Dropping inconsistent motion pointer up/down or move event: "
3802                "deviceId=%d, source=%08x, actionMasked=%d",
3803                entry->deviceId, entry->source, actionMasked);
3804#endif
3805        return false;
3806    }
3807
3808    case AMOTION_EVENT_ACTION_HOVER_EXIT: {
3809        ssize_t index = findMotionMemento(entry, true /*hovering*/);
3810        if (index >= 0) {
3811            mMotionMementos.removeAt(index);
3812            return true;
3813        }
3814#if DEBUG_OUTBOUND_EVENT_DETAILS
3815        ALOGD("Dropping inconsistent motion hover exit event: deviceId=%d, source=%08x",
3816                entry->deviceId, entry->source);
3817#endif
3818        return false;
3819    }
3820
3821    case AMOTION_EVENT_ACTION_HOVER_ENTER:
3822    case AMOTION_EVENT_ACTION_HOVER_MOVE: {
3823        ssize_t index = findMotionMemento(entry, true /*hovering*/);
3824        if (index >= 0) {
3825            mMotionMementos.removeAt(index);
3826        }
3827        addMotionMemento(entry, flags, true /*hovering*/);
3828        return true;
3829    }
3830
3831    default:
3832        return true;
3833    }
3834}
3835
3836ssize_t InputDispatcher::InputState::findKeyMemento(const KeyEntry* entry) const {
3837    for (size_t i = 0; i < mKeyMementos.size(); i++) {
3838        const KeyMemento& memento = mKeyMementos.itemAt(i);
3839        if (memento.deviceId == entry->deviceId
3840                && memento.source == entry->source
3841                && memento.keyCode == entry->keyCode
3842                && memento.scanCode == entry->scanCode) {
3843            return i;
3844        }
3845    }
3846    return -1;
3847}
3848
3849ssize_t InputDispatcher::InputState::findMotionMemento(const MotionEntry* entry,
3850        bool hovering) const {
3851    for (size_t i = 0; i < mMotionMementos.size(); i++) {
3852        const MotionMemento& memento = mMotionMementos.itemAt(i);
3853        if (memento.deviceId == entry->deviceId
3854                && memento.source == entry->source
3855                && memento.hovering == hovering) {
3856            return i;
3857        }
3858    }
3859    return -1;
3860}
3861
3862void InputDispatcher::InputState::addKeyMemento(const KeyEntry* entry, int32_t flags) {
3863    mKeyMementos.push();
3864    KeyMemento& memento = mKeyMementos.editTop();
3865    memento.deviceId = entry->deviceId;
3866    memento.source = entry->source;
3867    memento.keyCode = entry->keyCode;
3868    memento.scanCode = entry->scanCode;
3869    memento.flags = flags;
3870    memento.downTime = entry->downTime;
3871}
3872
3873void InputDispatcher::InputState::addMotionMemento(const MotionEntry* entry,
3874        int32_t flags, bool hovering) {
3875    mMotionMementos.push();
3876    MotionMemento& memento = mMotionMementos.editTop();
3877    memento.deviceId = entry->deviceId;
3878    memento.source = entry->source;
3879    memento.flags = flags;
3880    memento.xPrecision = entry->xPrecision;
3881    memento.yPrecision = entry->yPrecision;
3882    memento.downTime = entry->downTime;
3883    memento.setPointers(entry);
3884    memento.hovering = hovering;
3885}
3886
3887void InputDispatcher::InputState::MotionMemento::setPointers(const MotionEntry* entry) {
3888    pointerCount = entry->pointerCount;
3889    for (uint32_t i = 0; i < entry->pointerCount; i++) {
3890        pointerProperties[i].copyFrom(entry->pointerProperties[i]);
3891        pointerCoords[i].copyFrom(entry->pointerCoords[i]);
3892    }
3893}
3894
3895void InputDispatcher::InputState::synthesizeCancelationEvents(nsecs_t currentTime,
3896        Vector<EventEntry*>& outEvents, const CancelationOptions& options) {
3897    for (size_t i = 0; i < mKeyMementos.size(); i++) {
3898        const KeyMemento& memento = mKeyMementos.itemAt(i);
3899        if (shouldCancelKey(memento, options)) {
3900            outEvents.push(new KeyEntry(currentTime,
3901                    memento.deviceId, memento.source, 0,
3902                    AKEY_EVENT_ACTION_UP, memento.flags | AKEY_EVENT_FLAG_CANCELED,
3903                    memento.keyCode, memento.scanCode, 0, 0, memento.downTime));
3904        }
3905    }
3906
3907    for (size_t i = 0; i < mMotionMementos.size(); i++) {
3908        const MotionMemento& memento = mMotionMementos.itemAt(i);
3909        if (shouldCancelMotion(memento, options)) {
3910            outEvents.push(new MotionEntry(currentTime,
3911                    memento.deviceId, memento.source, 0,
3912                    memento.hovering
3913                            ? AMOTION_EVENT_ACTION_HOVER_EXIT
3914                            : AMOTION_EVENT_ACTION_CANCEL,
3915                    memento.flags, 0, 0, 0,
3916                    memento.xPrecision, memento.yPrecision, memento.downTime,
3917                    memento.pointerCount, memento.pointerProperties, memento.pointerCoords));
3918        }
3919    }
3920}
3921
3922void InputDispatcher::InputState::clear() {
3923    mKeyMementos.clear();
3924    mMotionMementos.clear();
3925    mFallbackKeys.clear();
3926}
3927
3928void InputDispatcher::InputState::copyPointerStateTo(InputState& other) const {
3929    for (size_t i = 0; i < mMotionMementos.size(); i++) {
3930        const MotionMemento& memento = mMotionMementos.itemAt(i);
3931        if (memento.source & AINPUT_SOURCE_CLASS_POINTER) {
3932            for (size_t j = 0; j < other.mMotionMementos.size(); ) {
3933                const MotionMemento& otherMemento = other.mMotionMementos.itemAt(j);
3934                if (memento.deviceId == otherMemento.deviceId
3935                        && memento.source == otherMemento.source) {
3936                    other.mMotionMementos.removeAt(j);
3937                } else {
3938                    j += 1;
3939                }
3940            }
3941            other.mMotionMementos.push(memento);
3942        }
3943    }
3944}
3945
3946int32_t InputDispatcher::InputState::getFallbackKey(int32_t originalKeyCode) {
3947    ssize_t index = mFallbackKeys.indexOfKey(originalKeyCode);
3948    return index >= 0 ? mFallbackKeys.valueAt(index) : -1;
3949}
3950
3951void InputDispatcher::InputState::setFallbackKey(int32_t originalKeyCode,
3952        int32_t fallbackKeyCode) {
3953    ssize_t index = mFallbackKeys.indexOfKey(originalKeyCode);
3954    if (index >= 0) {
3955        mFallbackKeys.replaceValueAt(index, fallbackKeyCode);
3956    } else {
3957        mFallbackKeys.add(originalKeyCode, fallbackKeyCode);
3958    }
3959}
3960
3961void InputDispatcher::InputState::removeFallbackKey(int32_t originalKeyCode) {
3962    mFallbackKeys.removeItem(originalKeyCode);
3963}
3964
3965bool InputDispatcher::InputState::shouldCancelKey(const KeyMemento& memento,
3966        const CancelationOptions& options) {
3967    if (options.keyCode != -1 && memento.keyCode != options.keyCode) {
3968        return false;
3969    }
3970
3971    if (options.deviceId != -1 && memento.deviceId != options.deviceId) {
3972        return false;
3973    }
3974
3975    switch (options.mode) {
3976    case CancelationOptions::CANCEL_ALL_EVENTS:
3977    case CancelationOptions::CANCEL_NON_POINTER_EVENTS:
3978        return true;
3979    case CancelationOptions::CANCEL_FALLBACK_EVENTS:
3980        return memento.flags & AKEY_EVENT_FLAG_FALLBACK;
3981    default:
3982        return false;
3983    }
3984}
3985
3986bool InputDispatcher::InputState::shouldCancelMotion(const MotionMemento& memento,
3987        const CancelationOptions& options) {
3988    if (options.deviceId != -1 && memento.deviceId != options.deviceId) {
3989        return false;
3990    }
3991
3992    switch (options.mode) {
3993    case CancelationOptions::CANCEL_ALL_EVENTS:
3994        return true;
3995    case CancelationOptions::CANCEL_POINTER_EVENTS:
3996        return memento.source & AINPUT_SOURCE_CLASS_POINTER;
3997    case CancelationOptions::CANCEL_NON_POINTER_EVENTS:
3998        return !(memento.source & AINPUT_SOURCE_CLASS_POINTER);
3999    default:
4000        return false;
4001    }
4002}
4003
4004
4005// --- InputDispatcher::Connection ---
4006
4007InputDispatcher::Connection::Connection(const sp<InputChannel>& inputChannel,
4008        const sp<InputWindowHandle>& inputWindowHandle, bool monitor) :
4009        status(STATUS_NORMAL), inputChannel(inputChannel), inputWindowHandle(inputWindowHandle),
4010        monitor(monitor),
4011        inputPublisher(inputChannel), inputPublisherBlocked(false) {
4012}
4013
4014InputDispatcher::Connection::~Connection() {
4015}
4016
4017const char* InputDispatcher::Connection::getStatusLabel() const {
4018    switch (status) {
4019    case STATUS_NORMAL:
4020        return "NORMAL";
4021
4022    case STATUS_BROKEN:
4023        return "BROKEN";
4024
4025    case STATUS_ZOMBIE:
4026        return "ZOMBIE";
4027
4028    default:
4029        return "UNKNOWN";
4030    }
4031}
4032
4033InputDispatcher::DispatchEntry* InputDispatcher::Connection::findWaitQueueEntry(uint32_t seq) {
4034    for (DispatchEntry* entry = waitQueue.head; entry != NULL; entry = entry->next) {
4035        if (entry->seq == seq) {
4036            return entry;
4037        }
4038    }
4039    return NULL;
4040}
4041
4042
4043// --- InputDispatcher::CommandEntry ---
4044
4045InputDispatcher::CommandEntry::CommandEntry(Command command) :
4046    command(command), eventTime(0), keyEntry(NULL), userActivityEventType(0),
4047    seq(0), handled(false) {
4048}
4049
4050InputDispatcher::CommandEntry::~CommandEntry() {
4051}
4052
4053
4054// --- InputDispatcher::TouchState ---
4055
4056InputDispatcher::TouchState::TouchState() :
4057    down(false), split(false), deviceId(-1), source(0) {
4058}
4059
4060InputDispatcher::TouchState::~TouchState() {
4061}
4062
4063void InputDispatcher::TouchState::reset() {
4064    down = false;
4065    split = false;
4066    deviceId = -1;
4067    source = 0;
4068    windows.clear();
4069}
4070
4071void InputDispatcher::TouchState::copyFrom(const TouchState& other) {
4072    down = other.down;
4073    split = other.split;
4074    deviceId = other.deviceId;
4075    source = other.source;
4076    windows = other.windows;
4077}
4078
4079void InputDispatcher::TouchState::addOrUpdateWindow(const sp<InputWindowHandle>& windowHandle,
4080        int32_t targetFlags, BitSet32 pointerIds) {
4081    if (targetFlags & InputTarget::FLAG_SPLIT) {
4082        split = true;
4083    }
4084
4085    for (size_t i = 0; i < windows.size(); i++) {
4086        TouchedWindow& touchedWindow = windows.editItemAt(i);
4087        if (touchedWindow.windowHandle == windowHandle) {
4088            touchedWindow.targetFlags |= targetFlags;
4089            if (targetFlags & InputTarget::FLAG_DISPATCH_AS_SLIPPERY_EXIT) {
4090                touchedWindow.targetFlags &= ~InputTarget::FLAG_DISPATCH_AS_IS;
4091            }
4092            touchedWindow.pointerIds.value |= pointerIds.value;
4093            return;
4094        }
4095    }
4096
4097    windows.push();
4098
4099    TouchedWindow& touchedWindow = windows.editTop();
4100    touchedWindow.windowHandle = windowHandle;
4101    touchedWindow.targetFlags = targetFlags;
4102    touchedWindow.pointerIds = pointerIds;
4103}
4104
4105void InputDispatcher::TouchState::filterNonAsIsTouchWindows() {
4106    for (size_t i = 0 ; i < windows.size(); ) {
4107        TouchedWindow& window = windows.editItemAt(i);
4108        if (window.targetFlags & (InputTarget::FLAG_DISPATCH_AS_IS
4109                | InputTarget::FLAG_DISPATCH_AS_SLIPPERY_ENTER)) {
4110            window.targetFlags &= ~InputTarget::FLAG_DISPATCH_MASK;
4111            window.targetFlags |= InputTarget::FLAG_DISPATCH_AS_IS;
4112            i += 1;
4113        } else {
4114            windows.removeAt(i);
4115        }
4116    }
4117}
4118
4119sp<InputWindowHandle> InputDispatcher::TouchState::getFirstForegroundWindowHandle() const {
4120    for (size_t i = 0; i < windows.size(); i++) {
4121        const TouchedWindow& window = windows.itemAt(i);
4122        if (window.targetFlags & InputTarget::FLAG_FOREGROUND) {
4123            return window.windowHandle;
4124        }
4125    }
4126    return NULL;
4127}
4128
4129bool InputDispatcher::TouchState::isSlippery() const {
4130    // Must have exactly one foreground window.
4131    bool haveSlipperyForegroundWindow = false;
4132    for (size_t i = 0; i < windows.size(); i++) {
4133        const TouchedWindow& window = windows.itemAt(i);
4134        if (window.targetFlags & InputTarget::FLAG_FOREGROUND) {
4135            if (haveSlipperyForegroundWindow
4136                    || !(window.windowHandle->getInfo()->layoutParamsFlags
4137                            & InputWindowInfo::FLAG_SLIPPERY)) {
4138                return false;
4139            }
4140            haveSlipperyForegroundWindow = true;
4141        }
4142    }
4143    return haveSlipperyForegroundWindow;
4144}
4145
4146
4147// --- InputDispatcherThread ---
4148
4149InputDispatcherThread::InputDispatcherThread(const sp<InputDispatcherInterface>& dispatcher) :
4150        Thread(/*canCallJava*/ true), mDispatcher(dispatcher) {
4151}
4152
4153InputDispatcherThread::~InputDispatcherThread() {
4154}
4155
4156bool InputDispatcherThread::threadLoop() {
4157    mDispatcher->dispatchOnce();
4158    return true;
4159}
4160
4161} // namespace android
4162