CameraService.cpp revision 7b82efe7a376c882f8f938e1c41b8311a8cdda4a
1/*
2**
3** Copyright (C) 2008, The Android Open Source Project
4**
5** Licensed under the Apache License, Version 2.0 (the "License");
6** you may not use this file except in compliance with the License.
7** You may obtain a copy of the License at
8**
9**     http://www.apache.org/licenses/LICENSE-2.0
10**
11** Unless required by applicable law or agreed to in writing, software
12** distributed under the License is distributed on an "AS IS" BASIS,
13** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14** See the License for the specific language governing permissions and
15** limitations under the License.
16*/
17
18#define LOG_TAG "CameraService"
19//#define LOG_NDEBUG 0
20
21#include <stdio.h>
22#include <sys/types.h>
23#include <pthread.h>
24
25#include <binder/AppOpsManager.h>
26#include <binder/IPCThreadState.h>
27#include <binder/IServiceManager.h>
28#include <binder/MemoryBase.h>
29#include <binder/MemoryHeapBase.h>
30#include <cutils/atomic.h>
31#include <cutils/properties.h>
32#include <gui/Surface.h>
33#include <hardware/hardware.h>
34#include <media/AudioSystem.h>
35#include <media/mediaplayer.h>
36#include <utils/Errors.h>
37#include <utils/Log.h>
38#include <utils/String16.h>
39
40#include "CameraService.h"
41#include "api1/CameraClient.h"
42#include "api1/Camera2Client.h"
43#include "api_pro/ProCamera2Client.h"
44#include "api2/CameraDeviceClient.h"
45#include "CameraDeviceFactory.h"
46
47namespace android {
48
49// ----------------------------------------------------------------------------
50// Logging support -- this is for debugging only
51// Use "adb shell dumpsys media.camera -v 1" to change it.
52volatile int32_t gLogLevel = 0;
53
54#define LOG1(...) ALOGD_IF(gLogLevel >= 1, __VA_ARGS__);
55#define LOG2(...) ALOGD_IF(gLogLevel >= 2, __VA_ARGS__);
56
57static void setLogLevel(int level) {
58    android_atomic_write(level, &gLogLevel);
59}
60
61// ----------------------------------------------------------------------------
62
63static int getCallingPid() {
64    return IPCThreadState::self()->getCallingPid();
65}
66
67static int getCallingUid() {
68    return IPCThreadState::self()->getCallingUid();
69}
70
71extern "C" {
72static void camera_device_status_change(
73        const struct camera_module_callbacks* callbacks,
74        int camera_id,
75        int new_status) {
76    sp<CameraService> cs = const_cast<CameraService*>(
77                                static_cast<const CameraService*>(callbacks));
78
79    cs->onDeviceStatusChanged(
80        camera_id,
81        new_status);
82}
83} // extern "C"
84
85// ----------------------------------------------------------------------------
86
87// This is ugly and only safe if we never re-create the CameraService, but
88// should be ok for now.
89static CameraService *gCameraService;
90
91CameraService::CameraService()
92    :mSoundRef(0), mModule(0)
93{
94    ALOGI("CameraService started (pid=%d)", getpid());
95    gCameraService = this;
96
97    for (size_t i = 0; i < MAX_CAMERAS; ++i) {
98        mStatusList[i] = ICameraServiceListener::STATUS_PRESENT;
99    }
100
101    this->camera_device_status_change = android::camera_device_status_change;
102}
103
104void CameraService::onFirstRef()
105{
106    LOG1("CameraService::onFirstRef");
107
108    BnCameraService::onFirstRef();
109
110    if (hw_get_module(CAMERA_HARDWARE_MODULE_ID,
111                (const hw_module_t **)&mModule) < 0) {
112        ALOGE("Could not load camera HAL module");
113        mNumberOfCameras = 0;
114    }
115    else {
116        ALOGI("Loaded \"%s\" camera module", mModule->common.name);
117        mNumberOfCameras = mModule->get_number_of_cameras();
118        if (mNumberOfCameras > MAX_CAMERAS) {
119            ALOGE("Number of cameras(%d) > MAX_CAMERAS(%d).",
120                    mNumberOfCameras, MAX_CAMERAS);
121            mNumberOfCameras = MAX_CAMERAS;
122        }
123        for (int i = 0; i < mNumberOfCameras; i++) {
124            setCameraFree(i);
125        }
126
127        if (mModule->common.module_api_version >=
128                CAMERA_MODULE_API_VERSION_2_1) {
129            mModule->set_callbacks(this);
130        }
131
132        CameraDeviceFactory::registerService(this);
133    }
134}
135
136CameraService::~CameraService() {
137    for (int i = 0; i < mNumberOfCameras; i++) {
138        if (mBusy[i]) {
139            ALOGE("camera %d is still in use in destructor!", i);
140        }
141    }
142
143    gCameraService = NULL;
144}
145
146void CameraService::onDeviceStatusChanged(int cameraId,
147                                          int newStatus)
148{
149    ALOGI("%s: Status changed for cameraId=%d, newStatus=%d", __FUNCTION__,
150          cameraId, newStatus);
151
152    if (cameraId < 0 || cameraId >= MAX_CAMERAS) {
153        ALOGE("%s: Bad camera ID %d", __FUNCTION__, cameraId);
154        return;
155    }
156
157    if ((int)getStatus(cameraId) == newStatus) {
158        ALOGE("%s: State transition to the same status 0x%x not allowed",
159              __FUNCTION__, (uint32_t)newStatus);
160        return;
161    }
162
163    /* don't do this in updateStatus
164       since it is also called from connect and we could get into a deadlock */
165    if (newStatus == CAMERA_DEVICE_STATUS_NOT_PRESENT) {
166        Vector<sp<BasicClient> > clientsToDisconnect;
167        {
168           Mutex::Autolock al(mServiceLock);
169
170           /* Find all clients that we need to disconnect */
171           sp<BasicClient> client = mClient[cameraId].promote();
172           if (client.get() != NULL) {
173               clientsToDisconnect.push_back(client);
174           }
175
176           int i = cameraId;
177           for (size_t j = 0; j < mProClientList[i].size(); ++j) {
178               sp<ProClient> cl = mProClientList[i][j].promote();
179               if (cl != NULL) {
180                   clientsToDisconnect.push_back(cl);
181               }
182           }
183        }
184
185        /* now disconnect them. don't hold the lock
186           or we can get into a deadlock */
187
188        for (size_t i = 0; i < clientsToDisconnect.size(); ++i) {
189            sp<BasicClient> client = clientsToDisconnect[i];
190
191            client->disconnect();
192            /**
193             * The remote app will no longer be able to call methods on the
194             * client since the client PID will be reset to 0
195             */
196        }
197
198        ALOGV("%s: After unplug, disconnected %d clients",
199              __FUNCTION__, clientsToDisconnect.size());
200    }
201
202    updateStatus(
203            static_cast<ICameraServiceListener::Status>(newStatus), cameraId);
204
205}
206
207int32_t CameraService::getNumberOfCameras() {
208    return mNumberOfCameras;
209}
210
211status_t CameraService::getCameraInfo(int cameraId,
212                                      struct CameraInfo* cameraInfo) {
213    if (!mModule) {
214        return NO_INIT;
215    }
216
217    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
218        return BAD_VALUE;
219    }
220
221    struct camera_info info;
222    status_t rc = mModule->get_camera_info(cameraId, &info);
223    cameraInfo->facing = info.facing;
224    cameraInfo->orientation = info.orientation;
225    return rc;
226}
227
228int CameraService::getDeviceVersion(int cameraId, int* facing) {
229    struct camera_info info;
230    if (mModule->get_camera_info(cameraId, &info) != OK) {
231        return -1;
232    }
233
234    int deviceVersion;
235    if (mModule->common.module_api_version >= CAMERA_MODULE_API_VERSION_2_0) {
236        deviceVersion = info.device_version;
237    } else {
238        deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
239    }
240
241    if (facing) {
242        *facing = info.facing;
243    }
244
245    return deviceVersion;
246}
247
248bool CameraService::isValidCameraId(int cameraId) {
249    int facing;
250    int deviceVersion = getDeviceVersion(cameraId, &facing);
251
252    switch(deviceVersion) {
253      case CAMERA_DEVICE_API_VERSION_1_0:
254      case CAMERA_DEVICE_API_VERSION_2_0:
255      case CAMERA_DEVICE_API_VERSION_2_1:
256      case CAMERA_DEVICE_API_VERSION_3_0:
257        return true;
258      default:
259        return false;
260    }
261
262    return false;
263}
264
265bool CameraService::validateConnect(int cameraId,
266                                    /*inout*/
267                                    int& clientUid) const {
268
269    int callingPid = getCallingPid();
270
271    if (clientUid == USE_CALLING_UID) {
272        clientUid = getCallingUid();
273    } else {
274        // We only trust our own process to forward client UIDs
275        if (callingPid != getpid()) {
276            ALOGE("CameraService::connect X (pid %d) rejected (don't trust clientUid)",
277                    callingPid);
278            return false;
279        }
280    }
281
282    if (!mModule) {
283        ALOGE("Camera HAL module not loaded");
284        return false;
285    }
286
287    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
288        ALOGE("CameraService::connect X (pid %d) rejected (invalid cameraId %d).",
289            callingPid, cameraId);
290        return false;
291    }
292
293    char value[PROPERTY_VALUE_MAX];
294    property_get("sys.secpolicy.camera.disabled", value, "0");
295    if (strcmp(value, "1") == 0) {
296        // Camera is disabled by DevicePolicyManager.
297        ALOGI("Camera is disabled. connect X (pid %d) rejected", callingPid);
298        return false;
299    }
300
301    ICameraServiceListener::Status currentStatus = getStatus(cameraId);
302    if (currentStatus == ICameraServiceListener::STATUS_NOT_PRESENT) {
303        ALOGI("Camera is not plugged in,"
304               " connect X (pid %d) rejected", callingPid);
305        return false;
306    } else if (currentStatus == ICameraServiceListener::STATUS_ENUMERATING) {
307        ALOGI("Camera is enumerating,"
308               " connect X (pid %d) rejected", callingPid);
309        return false;
310    }
311    // Else don't check for STATUS_NOT_AVAILABLE.
312    //  -- It's done implicitly in canConnectUnsafe /w the mBusy array
313
314    return true;
315}
316
317bool CameraService::canConnectUnsafe(int cameraId,
318                                     const String16& clientPackageName,
319                                     const sp<IBinder>& remoteCallback,
320                                     sp<BasicClient> &client) {
321    String8 clientName8(clientPackageName);
322    int callingPid = getCallingPid();
323
324    if (mClient[cameraId] != 0) {
325        client = mClient[cameraId].promote();
326        if (client != 0) {
327            if (remoteCallback == client->getRemote()) {
328                LOG1("CameraService::connect X (pid %d) (the same client)",
329                     callingPid);
330                return true;
331            } else {
332                // TODOSC: need to support 1 regular client,
333                // multiple shared clients here
334                ALOGW("CameraService::connect X (pid %d) rejected"
335                      " (existing client).", callingPid);
336                return false;
337            }
338        }
339        mClient[cameraId].clear();
340    }
341
342    /*
343    mBusy is set to false as the last step of the Client destructor,
344    after which it is guaranteed that the Client destructor has finished (
345    including any inherited destructors)
346
347    We only need this for a Client subclasses since we don't allow
348    multiple Clents to be opened concurrently, but multiple BasicClient
349    would be fine
350    */
351    if (mBusy[cameraId]) {
352        ALOGW("CameraService::connect X (pid %d, \"%s\") rejected"
353                " (camera %d is still busy).", callingPid,
354                clientName8.string(), cameraId);
355        return false;
356    }
357
358    return true;
359}
360
361sp<ICamera> CameraService::connect(
362        const sp<ICameraClient>& cameraClient,
363        int cameraId,
364        const String16& clientPackageName,
365        int clientUid) {
366
367    String8 clientName8(clientPackageName);
368    int callingPid = getCallingPid();
369
370    LOG1("CameraService::connect E (pid %d \"%s\", id %d)", callingPid,
371            clientName8.string(), cameraId);
372
373    if (!validateConnect(cameraId, /*inout*/clientUid)) {
374        return NULL;
375    }
376
377
378    sp<Client> client;
379    {
380        Mutex::Autolock lock(mServiceLock);
381        sp<BasicClient> clientTmp;
382        if (!canConnectUnsafe(cameraId, clientPackageName,
383                              cameraClient->asBinder(),
384                              /*out*/clientTmp)) {
385            return NULL;
386        } else if (client.get() != NULL) {
387            return static_cast<Client*>(clientTmp.get());
388        }
389
390        int facing = -1;
391        int deviceVersion = getDeviceVersion(cameraId, &facing);
392
393        // If there are other non-exclusive users of the camera,
394        //  this will tear them down before we can reuse the camera
395        if (isValidCameraId(cameraId)) {
396            // transition from PRESENT -> NOT_AVAILABLE
397            updateStatus(ICameraServiceListener::STATUS_NOT_AVAILABLE,
398                         cameraId);
399        }
400
401        switch(deviceVersion) {
402          case CAMERA_DEVICE_API_VERSION_1_0:
403            client = new CameraClient(this, cameraClient,
404                    clientPackageName, cameraId,
405                    facing, callingPid, clientUid, getpid());
406            break;
407          case CAMERA_DEVICE_API_VERSION_2_0:
408          case CAMERA_DEVICE_API_VERSION_2_1:
409          case CAMERA_DEVICE_API_VERSION_3_0:
410            client = new Camera2Client(this, cameraClient,
411                    clientPackageName, cameraId,
412                    facing, callingPid, clientUid, getpid(),
413                    deviceVersion);
414            break;
415          case -1:
416            ALOGE("Invalid camera id %d", cameraId);
417            return NULL;
418          default:
419            ALOGE("Unknown camera device HAL version: %d", deviceVersion);
420            return NULL;
421        }
422
423        if (!connectFinishUnsafe(client,
424                                 client->getRemote())) {
425            // this is probably not recoverable.. maybe the client can try again
426            // OK: we can only get here if we were originally in PRESENT state
427            updateStatus(ICameraServiceListener::STATUS_PRESENT, cameraId);
428
429            return NULL;
430        }
431
432        mClient[cameraId] = client;
433        LOG1("CameraService::connect X (id %d, this pid is %d)", cameraId,
434             getpid());
435    }
436    // important: release the mutex here so the client can call back
437    //    into the service from its destructor (can be at the end of the call)
438
439    return client;
440}
441
442bool CameraService::connectFinishUnsafe(const sp<BasicClient>& client,
443                                        const sp<IBinder>& remoteCallback) {
444    if (client->initialize(mModule) != OK) {
445        return false;
446    }
447
448    remoteCallback->linkToDeath(this);
449
450    return true;
451}
452
453sp<IProCameraUser> CameraService::connect(
454                                        const sp<IProCameraCallbacks>& cameraCb,
455                                        int cameraId,
456                                        const String16& clientPackageName,
457                                        int clientUid)
458{
459    String8 clientName8(clientPackageName);
460    int callingPid = getCallingPid();
461
462    LOG1("CameraService::connectPro E (pid %d \"%s\", id %d)", callingPid,
463            clientName8.string(), cameraId);
464
465    if (!validateConnect(cameraId, /*inout*/clientUid)) {
466        return NULL;
467    }
468
469    sp<ProClient> client;
470    {
471        Mutex::Autolock lock(mServiceLock);
472        {
473            sp<BasicClient> client;
474            if (!canConnectUnsafe(cameraId, clientPackageName,
475                                  cameraCb->asBinder(),
476                                  /*out*/client)) {
477                return NULL;
478            }
479        }
480
481        int facing = -1;
482        int deviceVersion = getDeviceVersion(cameraId, &facing);
483
484        switch(deviceVersion) {
485          case CAMERA_DEVICE_API_VERSION_1_0:
486            ALOGE("Camera id %d uses HALv1, doesn't support ProCamera",
487                  cameraId);
488            return NULL;
489            break;
490          case CAMERA_DEVICE_API_VERSION_2_0:
491          case CAMERA_DEVICE_API_VERSION_2_1:
492          case CAMERA_DEVICE_API_VERSION_3_0:
493            client = new ProCamera2Client(this, cameraCb, String16(),
494                    cameraId, facing, callingPid, USE_CALLING_UID, getpid());
495            break;
496          case -1:
497            ALOGE("Invalid camera id %d", cameraId);
498            return NULL;
499          default:
500            ALOGE("Unknown camera device HAL version: %d", deviceVersion);
501            return NULL;
502        }
503
504        if (!connectFinishUnsafe(client, client->getRemote())) {
505            return NULL;
506        }
507
508        mProClientList[cameraId].push(client);
509
510        LOG1("CameraService::connectPro X (id %d, this pid is %d)", cameraId,
511                getpid());
512    }
513    // important: release the mutex here so the client can call back
514    //    into the service from its destructor (can be at the end of the call)
515
516    return client;
517}
518
519sp<ICameraDeviceUser> CameraService::connect(
520        const sp<ICameraDeviceCallbacks>& cameraCb,
521        int cameraId,
522        const String16& clientPackageName,
523        int clientUid)
524{
525    // TODO: this function needs to return status_t
526    // so that we have an error code when things go wrong and the client is NULL
527
528    String8 clientName8(clientPackageName);
529    int callingPid = getCallingPid();
530
531    LOG1("CameraService::connectDevice E (pid %d \"%s\", id %d)", callingPid,
532            clientName8.string(), cameraId);
533
534    if (!validateConnect(cameraId, /*inout*/clientUid)) {
535        return NULL;
536    }
537
538    sp<CameraDeviceClient> client;
539    {
540        Mutex::Autolock lock(mServiceLock);
541        {
542            sp<BasicClient> client;
543            if (!canConnectUnsafe(cameraId, clientPackageName,
544                                  cameraCb->asBinder(),
545                                  /*out*/client)) {
546                return NULL;
547            }
548        }
549
550        int facing = -1;
551        int deviceVersion = getDeviceVersion(cameraId, &facing);
552
553        // If there are other non-exclusive users of the camera,
554        //  this will tear them down before we can reuse the camera
555        if (isValidCameraId(cameraId)) {
556            // transition from PRESENT -> NOT_AVAILABLE
557            updateStatus(ICameraServiceListener::STATUS_NOT_AVAILABLE,
558                         cameraId);
559        }
560
561        switch(deviceVersion) {
562          case CAMERA_DEVICE_API_VERSION_1_0:
563            ALOGE("Camera id %d uses old HAL, doesn't support CameraDevice",
564                  cameraId);
565            return NULL;
566            break;
567           // TODO: don't allow 2.0  Only allow 2.1 and higher
568          case CAMERA_DEVICE_API_VERSION_2_0:
569          case CAMERA_DEVICE_API_VERSION_2_1:
570          case CAMERA_DEVICE_API_VERSION_3_0:
571            client = new CameraDeviceClient(this, cameraCb, String16(),
572                    cameraId, facing, callingPid, USE_CALLING_UID, getpid());
573            break;
574          case -1:
575            ALOGE("Invalid camera id %d", cameraId);
576            return NULL;
577          default:
578            ALOGE("Unknown camera device HAL version: %d", deviceVersion);
579            return NULL;
580        }
581
582        if (!connectFinishUnsafe(client, client->getRemote())) {
583            // this is probably not recoverable.. maybe the client can try again
584            // OK: we can only get here if we were originally in PRESENT state
585            updateStatus(ICameraServiceListener::STATUS_PRESENT, cameraId);
586            return NULL;
587        }
588
589        LOG1("CameraService::connectDevice X (id %d, this pid is %d)", cameraId,
590                getpid());
591
592        mClient[cameraId] = client;
593    }
594    // important: release the mutex here so the client can call back
595    //    into the service from its destructor (can be at the end of the call)
596
597    return client;
598}
599
600
601status_t CameraService::addListener(
602                                const sp<ICameraServiceListener>& listener) {
603    ALOGV("%s: Add listener %p", __FUNCTION__, listener.get());
604
605    Mutex::Autolock lock(mServiceLock);
606
607    Vector<sp<ICameraServiceListener> >::iterator it, end;
608    for (it = mListenerList.begin(); it != mListenerList.end(); ++it) {
609        if ((*it)->asBinder() == listener->asBinder()) {
610            ALOGW("%s: Tried to add listener %p which was already subscribed",
611                  __FUNCTION__, listener.get());
612            return ALREADY_EXISTS;
613        }
614    }
615
616    mListenerList.push_back(listener);
617
618    /* Immediately signal current status to this listener only */
619    {
620        Mutex::Autolock m(mStatusMutex) ;
621        int numCams = getNumberOfCameras();
622        for (int i = 0; i < numCams; ++i) {
623            listener->onStatusChanged(mStatusList[i], i);
624        }
625    }
626
627    return OK;
628}
629status_t CameraService::removeListener(
630                                const sp<ICameraServiceListener>& listener) {
631    ALOGV("%s: Remove listener %p", __FUNCTION__, listener.get());
632
633    Mutex::Autolock lock(mServiceLock);
634
635    Vector<sp<ICameraServiceListener> >::iterator it;
636    for (it = mListenerList.begin(); it != mListenerList.end(); ++it) {
637        if ((*it)->asBinder() == listener->asBinder()) {
638            mListenerList.erase(it);
639            return OK;
640        }
641    }
642
643    ALOGW("%s: Tried to remove a listener %p which was not subscribed",
644          __FUNCTION__, listener.get());
645
646    return BAD_VALUE;
647}
648
649void CameraService::removeClientByRemote(const wp<IBinder>& remoteBinder) {
650    int callingPid = getCallingPid();
651    LOG1("CameraService::removeClientByRemote E (pid %d)", callingPid);
652
653    // Declare this before the lock to make absolutely sure the
654    // destructor won't be called with the lock held.
655    Mutex::Autolock lock(mServiceLock);
656
657    int outIndex;
658    sp<BasicClient> client = findClientUnsafe(remoteBinder, outIndex);
659
660    if (client != 0) {
661        // Found our camera, clear and leave.
662        LOG1("removeClient: clear camera %d", outIndex);
663        mClient[outIndex].clear();
664
665        client->getRemote()->unlinkToDeath(this);
666    } else {
667
668        sp<ProClient> clientPro = findProClientUnsafe(remoteBinder);
669
670        if (clientPro != NULL) {
671            // Found our camera, clear and leave.
672            LOG1("removeClient: clear pro %p", clientPro.get());
673
674            clientPro->getRemoteCallback()->asBinder()->unlinkToDeath(this);
675        }
676    }
677
678    LOG1("CameraService::removeClientByRemote X (pid %d)", callingPid);
679}
680
681sp<CameraService::ProClient> CameraService::findProClientUnsafe(
682                        const wp<IBinder>& cameraCallbacksRemote)
683{
684    sp<ProClient> clientPro;
685
686    for (int i = 0; i < mNumberOfCameras; ++i) {
687        Vector<size_t> removeIdx;
688
689        for (size_t j = 0; j < mProClientList[i].size(); ++j) {
690            wp<ProClient> cl = mProClientList[i][j];
691
692            sp<ProClient> clStrong = cl.promote();
693            if (clStrong != NULL && clStrong->getRemote() == cameraCallbacksRemote) {
694                clientPro = clStrong;
695                break;
696            } else if (clStrong == NULL) {
697                // mark to clean up dead ptr
698                removeIdx.push(j);
699            }
700        }
701
702        // remove stale ptrs (in reverse so the indices dont change)
703        for (ssize_t j = (ssize_t)removeIdx.size() - 1; j >= 0; --j) {
704            mProClientList[i].removeAt(removeIdx[j]);
705        }
706
707    }
708
709    return clientPro;
710}
711
712sp<CameraService::BasicClient> CameraService::findClientUnsafe(
713                        const wp<IBinder>& cameraClient, int& outIndex) {
714    sp<BasicClient> client;
715
716    for (int i = 0; i < mNumberOfCameras; i++) {
717
718        // This happens when we have already disconnected (or this is
719        // just another unused camera).
720        if (mClient[i] == 0) continue;
721
722        // Promote mClient. It can fail if we are called from this path:
723        // Client::~Client() -> disconnect() -> removeClientByRemote().
724        client = mClient[i].promote();
725
726        // Clean up stale client entry
727        if (client == NULL) {
728            mClient[i].clear();
729            continue;
730        }
731
732        if (cameraClient == client->getRemote()) {
733            // Found our camera
734            outIndex = i;
735            return client;
736        }
737    }
738
739    outIndex = -1;
740    return NULL;
741}
742
743CameraService::BasicClient* CameraService::getClientByIdUnsafe(int cameraId) {
744    if (cameraId < 0 || cameraId >= mNumberOfCameras) return NULL;
745    return mClient[cameraId].unsafe_get();
746}
747
748Mutex* CameraService::getClientLockById(int cameraId) {
749    if (cameraId < 0 || cameraId >= mNumberOfCameras) return NULL;
750    return &mClientLock[cameraId];
751}
752
753sp<CameraService::BasicClient> CameraService::getClientByRemote(
754                                const wp<IBinder>& cameraClient) {
755
756    // Declare this before the lock to make absolutely sure the
757    // destructor won't be called with the lock held.
758    sp<BasicClient> client;
759
760    Mutex::Autolock lock(mServiceLock);
761
762    int outIndex;
763    client = findClientUnsafe(cameraClient, outIndex);
764
765    return client;
766}
767
768status_t CameraService::onTransact(
769    uint32_t code, const Parcel& data, Parcel* reply, uint32_t flags) {
770    // Permission checks
771    switch (code) {
772        case BnCameraService::CONNECT:
773        case BnCameraService::CONNECT_PRO:
774            const int pid = getCallingPid();
775            const int self_pid = getpid();
776            if (pid != self_pid) {
777                // we're called from a different process, do the real check
778                if (!checkCallingPermission(
779                        String16("android.permission.CAMERA"))) {
780                    const int uid = getCallingUid();
781                    ALOGE("Permission Denial: "
782                         "can't use the camera pid=%d, uid=%d", pid, uid);
783                    return PERMISSION_DENIED;
784                }
785            }
786            break;
787    }
788
789    return BnCameraService::onTransact(code, data, reply, flags);
790}
791
792// The reason we need this busy bit is a new CameraService::connect() request
793// may come in while the previous Client's destructor has not been run or is
794// still running. If the last strong reference of the previous Client is gone
795// but the destructor has not been finished, we should not allow the new Client
796// to be created because we need to wait for the previous Client to tear down
797// the hardware first.
798void CameraService::setCameraBusy(int cameraId) {
799    android_atomic_write(1, &mBusy[cameraId]);
800
801    ALOGV("setCameraBusy cameraId=%d", cameraId);
802}
803
804void CameraService::setCameraFree(int cameraId) {
805    android_atomic_write(0, &mBusy[cameraId]);
806
807    ALOGV("setCameraFree cameraId=%d", cameraId);
808}
809
810// We share the media players for shutter and recording sound for all clients.
811// A reference count is kept to determine when we will actually release the
812// media players.
813
814MediaPlayer* CameraService::newMediaPlayer(const char *file) {
815    MediaPlayer* mp = new MediaPlayer();
816    if (mp->setDataSource(file, NULL) == NO_ERROR) {
817        mp->setAudioStreamType(AUDIO_STREAM_ENFORCED_AUDIBLE);
818        mp->prepare();
819    } else {
820        ALOGE("Failed to load CameraService sounds: %s", file);
821        return NULL;
822    }
823    return mp;
824}
825
826void CameraService::loadSound() {
827    Mutex::Autolock lock(mSoundLock);
828    LOG1("CameraService::loadSound ref=%d", mSoundRef);
829    if (mSoundRef++) return;
830
831    mSoundPlayer[SOUND_SHUTTER] = newMediaPlayer("/system/media/audio/ui/camera_click.ogg");
832    mSoundPlayer[SOUND_RECORDING] = newMediaPlayer("/system/media/audio/ui/VideoRecord.ogg");
833}
834
835void CameraService::releaseSound() {
836    Mutex::Autolock lock(mSoundLock);
837    LOG1("CameraService::releaseSound ref=%d", mSoundRef);
838    if (--mSoundRef) return;
839
840    for (int i = 0; i < NUM_SOUNDS; i++) {
841        if (mSoundPlayer[i] != 0) {
842            mSoundPlayer[i]->disconnect();
843            mSoundPlayer[i].clear();
844        }
845    }
846}
847
848void CameraService::playSound(sound_kind kind) {
849    LOG1("playSound(%d)", kind);
850    Mutex::Autolock lock(mSoundLock);
851    sp<MediaPlayer> player = mSoundPlayer[kind];
852    if (player != 0) {
853        player->seekTo(0);
854        player->start();
855    }
856}
857
858// ----------------------------------------------------------------------------
859
860CameraService::Client::Client(const sp<CameraService>& cameraService,
861        const sp<ICameraClient>& cameraClient,
862        const String16& clientPackageName,
863        int cameraId, int cameraFacing,
864        int clientPid, uid_t clientUid,
865        int servicePid) :
866        CameraService::BasicClient(cameraService, cameraClient->asBinder(),
867                clientPackageName,
868                cameraId, cameraFacing,
869                clientPid, clientUid,
870                servicePid)
871{
872    int callingPid = getCallingPid();
873    LOG1("Client::Client E (pid %d, id %d)", callingPid, cameraId);
874
875    mRemoteCallback = cameraClient;
876
877    cameraService->setCameraBusy(cameraId);
878    cameraService->loadSound();
879
880    LOG1("Client::Client X (pid %d, id %d)", callingPid, cameraId);
881}
882
883// tear down the client
884CameraService::Client::~Client() {
885    ALOGV("~Client");
886    mDestructionStarted = true;
887
888    mCameraService->releaseSound();
889    // unconditionally disconnect. function is idempotent
890    Client::disconnect();
891}
892
893CameraService::BasicClient::BasicClient(const sp<CameraService>& cameraService,
894        const sp<IBinder>& remoteCallback,
895        const String16& clientPackageName,
896        int cameraId, int cameraFacing,
897        int clientPid, uid_t clientUid,
898        int servicePid):
899        mClientPackageName(clientPackageName)
900{
901    mCameraService = cameraService;
902    mRemoteBinder = remoteCallback;
903    mCameraId = cameraId;
904    mCameraFacing = cameraFacing;
905    mClientPid = clientPid;
906    mClientUid = clientUid;
907    mServicePid = servicePid;
908    mOpsActive = false;
909    mDestructionStarted = false;
910}
911
912CameraService::BasicClient::~BasicClient() {
913    ALOGV("~BasicClient");
914    mDestructionStarted = true;
915}
916
917void CameraService::BasicClient::disconnect() {
918    ALOGV("BasicClient::disconnect");
919    mCameraService->removeClientByRemote(mRemoteBinder);
920    // client shouldn't be able to call into us anymore
921    mClientPid = 0;
922}
923
924status_t CameraService::BasicClient::startCameraOps() {
925    int32_t res;
926
927    mOpsCallback = new OpsCallback(this);
928
929    {
930        ALOGV("%s: Start camera ops, package name = %s, client UID = %d",
931              __FUNCTION__, String8(mClientPackageName).string(), mClientUid);
932    }
933
934    mAppOpsManager.startWatchingMode(AppOpsManager::OP_CAMERA,
935            mClientPackageName, mOpsCallback);
936    res = mAppOpsManager.startOp(AppOpsManager::OP_CAMERA,
937            mClientUid, mClientPackageName);
938
939    if (res != AppOpsManager::MODE_ALLOWED) {
940        ALOGI("Camera %d: Access for \"%s\" has been revoked",
941                mCameraId, String8(mClientPackageName).string());
942        return PERMISSION_DENIED;
943    }
944    mOpsActive = true;
945    return OK;
946}
947
948status_t CameraService::BasicClient::finishCameraOps() {
949    if (mOpsActive) {
950        mAppOpsManager.finishOp(AppOpsManager::OP_CAMERA, mClientUid,
951                mClientPackageName);
952        mOpsActive = false;
953    }
954    mAppOpsManager.stopWatchingMode(mOpsCallback);
955    mOpsCallback.clear();
956
957    return OK;
958}
959
960void CameraService::BasicClient::opChanged(int32_t op, const String16& packageName) {
961    String8 name(packageName);
962    String8 myName(mClientPackageName);
963
964    if (op != AppOpsManager::OP_CAMERA) {
965        ALOGW("Unexpected app ops notification received: %d", op);
966        return;
967    }
968
969    int32_t res;
970    res = mAppOpsManager.checkOp(AppOpsManager::OP_CAMERA,
971            mClientUid, mClientPackageName);
972    ALOGV("checkOp returns: %d, %s ", res,
973            res == AppOpsManager::MODE_ALLOWED ? "ALLOWED" :
974            res == AppOpsManager::MODE_IGNORED ? "IGNORED" :
975            res == AppOpsManager::MODE_ERRORED ? "ERRORED" :
976            "UNKNOWN");
977
978    if (res != AppOpsManager::MODE_ALLOWED) {
979        ALOGI("Camera %d: Access for \"%s\" revoked", mCameraId,
980                myName.string());
981        // Reset the client PID to allow server-initiated disconnect,
982        // and to prevent further calls by client.
983        mClientPid = getCallingPid();
984        notifyError();
985        disconnect();
986    }
987}
988
989// ----------------------------------------------------------------------------
990
991Mutex* CameraService::Client::getClientLockFromCookie(void* user) {
992    return gCameraService->getClientLockById((int) user);
993}
994
995// Provide client pointer for callbacks. Client lock returned from getClientLockFromCookie should
996// be acquired for this to be safe
997CameraService::Client* CameraService::Client::getClientFromCookie(void* user) {
998    BasicClient *basicClient = gCameraService->getClientByIdUnsafe((int) user);
999    // OK: only CameraClient calls this, and they already cast anyway.
1000    Client* client = static_cast<Client*>(basicClient);
1001
1002    // This could happen if the Client is in the process of shutting down (the
1003    // last strong reference is gone, but the destructor hasn't finished
1004    // stopping the hardware).
1005    if (client == NULL) return NULL;
1006
1007    // destruction already started, so should not be accessed
1008    if (client->mDestructionStarted) return NULL;
1009
1010    return client;
1011}
1012
1013void CameraService::Client::notifyError() {
1014    mRemoteCallback->notifyCallback(CAMERA_MSG_ERROR, CAMERA_ERROR_RELEASED, 0);
1015}
1016
1017// NOTE: function is idempotent
1018void CameraService::Client::disconnect() {
1019    ALOGV("Client::disconnect");
1020    BasicClient::disconnect();
1021    mCameraService->setCameraFree(mCameraId);
1022
1023    StatusVector rejectSourceStates;
1024    rejectSourceStates.push_back(ICameraServiceListener::STATUS_NOT_PRESENT);
1025    rejectSourceStates.push_back(ICameraServiceListener::STATUS_ENUMERATING);
1026
1027    // Transition to PRESENT if the camera is not in either of above 2 states
1028    mCameraService->updateStatus(ICameraServiceListener::STATUS_PRESENT,
1029                                 mCameraId,
1030                                 &rejectSourceStates);
1031}
1032
1033CameraService::Client::OpsCallback::OpsCallback(wp<BasicClient> client):
1034        mClient(client) {
1035}
1036
1037void CameraService::Client::OpsCallback::opChanged(int32_t op,
1038        const String16& packageName) {
1039    sp<BasicClient> client = mClient.promote();
1040    if (client != NULL) {
1041        client->opChanged(op, packageName);
1042    }
1043}
1044
1045// ----------------------------------------------------------------------------
1046//                  IProCamera
1047// ----------------------------------------------------------------------------
1048
1049CameraService::ProClient::ProClient(const sp<CameraService>& cameraService,
1050        const sp<IProCameraCallbacks>& remoteCallback,
1051        const String16& clientPackageName,
1052        int cameraId,
1053        int cameraFacing,
1054        int clientPid,
1055        uid_t clientUid,
1056        int servicePid)
1057        : CameraService::BasicClient(cameraService, remoteCallback->asBinder(),
1058                clientPackageName, cameraId, cameraFacing,
1059                clientPid,  clientUid, servicePid)
1060{
1061    mRemoteCallback = remoteCallback;
1062}
1063
1064CameraService::ProClient::~ProClient() {
1065}
1066
1067void CameraService::ProClient::notifyError() {
1068    mRemoteCallback->notifyCallback(CAMERA_MSG_ERROR, CAMERA_ERROR_RELEASED, 0);
1069}
1070
1071// ----------------------------------------------------------------------------
1072
1073static const int kDumpLockRetries = 50;
1074static const int kDumpLockSleep = 60000;
1075
1076static bool tryLock(Mutex& mutex)
1077{
1078    bool locked = false;
1079    for (int i = 0; i < kDumpLockRetries; ++i) {
1080        if (mutex.tryLock() == NO_ERROR) {
1081            locked = true;
1082            break;
1083        }
1084        usleep(kDumpLockSleep);
1085    }
1086    return locked;
1087}
1088
1089status_t CameraService::dump(int fd, const Vector<String16>& args) {
1090    String8 result;
1091    if (checkCallingPermission(String16("android.permission.DUMP")) == false) {
1092        result.appendFormat("Permission Denial: "
1093                "can't dump CameraService from pid=%d, uid=%d\n",
1094                getCallingPid(),
1095                getCallingUid());
1096        write(fd, result.string(), result.size());
1097    } else {
1098        bool locked = tryLock(mServiceLock);
1099        // failed to lock - CameraService is probably deadlocked
1100        if (!locked) {
1101            result.append("CameraService may be deadlocked\n");
1102            write(fd, result.string(), result.size());
1103        }
1104
1105        bool hasClient = false;
1106        if (!mModule) {
1107            result = String8::format("No camera module available!\n");
1108            write(fd, result.string(), result.size());
1109            return NO_ERROR;
1110        }
1111
1112        result = String8::format("Camera module HAL API version: 0x%x\n",
1113                mModule->common.hal_api_version);
1114        result.appendFormat("Camera module API version: 0x%x\n",
1115                mModule->common.module_api_version);
1116        result.appendFormat("Camera module name: %s\n",
1117                mModule->common.name);
1118        result.appendFormat("Camera module author: %s\n",
1119                mModule->common.author);
1120        result.appendFormat("Number of camera devices: %d\n\n", mNumberOfCameras);
1121        write(fd, result.string(), result.size());
1122        for (int i = 0; i < mNumberOfCameras; i++) {
1123            result = String8::format("Camera %d static information:\n", i);
1124            camera_info info;
1125
1126            status_t rc = mModule->get_camera_info(i, &info);
1127            if (rc != OK) {
1128                result.appendFormat("  Error reading static information!\n");
1129                write(fd, result.string(), result.size());
1130            } else {
1131                result.appendFormat("  Facing: %s\n",
1132                        info.facing == CAMERA_FACING_BACK ? "BACK" : "FRONT");
1133                result.appendFormat("  Orientation: %d\n", info.orientation);
1134                int deviceVersion;
1135                if (mModule->common.module_api_version <
1136                        CAMERA_MODULE_API_VERSION_2_0) {
1137                    deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
1138                } else {
1139                    deviceVersion = info.device_version;
1140                }
1141                result.appendFormat("  Device version: 0x%x\n", deviceVersion);
1142                if (deviceVersion >= CAMERA_DEVICE_API_VERSION_2_0) {
1143                    result.appendFormat("  Device static metadata:\n");
1144                    write(fd, result.string(), result.size());
1145                    dump_indented_camera_metadata(info.static_camera_characteristics,
1146                            fd, 2, 4);
1147                } else {
1148                    write(fd, result.string(), result.size());
1149                }
1150            }
1151
1152            sp<BasicClient> client = mClient[i].promote();
1153            if (client == 0) {
1154                result = String8::format("  Device is closed, no client instance\n");
1155                write(fd, result.string(), result.size());
1156                continue;
1157            }
1158            hasClient = true;
1159            result = String8::format("  Device is open. Client instance dump:\n");
1160            write(fd, result.string(), result.size());
1161            client->dump(fd, args);
1162        }
1163        if (!hasClient) {
1164            result = String8::format("\nNo active camera clients yet.\n");
1165            write(fd, result.string(), result.size());
1166        }
1167
1168        if (locked) mServiceLock.unlock();
1169
1170        // change logging level
1171        int n = args.size();
1172        for (int i = 0; i + 1 < n; i++) {
1173            String16 verboseOption("-v");
1174            if (args[i] == verboseOption) {
1175                String8 levelStr(args[i+1]);
1176                int level = atoi(levelStr.string());
1177                result = String8::format("\nSetting log level to %d.\n", level);
1178                setLogLevel(level);
1179                write(fd, result.string(), result.size());
1180            }
1181        }
1182
1183    }
1184    return NO_ERROR;
1185}
1186
1187/*virtual*/void CameraService::binderDied(
1188    const wp<IBinder> &who) {
1189
1190    /**
1191      * While tempting to promote the wp<IBinder> into a sp,
1192      * it's actually not supported by the binder driver
1193      */
1194
1195    ALOGV("java clients' binder died");
1196
1197    sp<BasicClient> cameraClient = getClientByRemote(who);
1198
1199    if (cameraClient == 0) {
1200        ALOGV("java clients' binder death already cleaned up (normal case)");
1201        return;
1202    }
1203
1204    ALOGW("Disconnecting camera client %p since the binder for it "
1205          "died (this pid %d)", cameraClient.get(), getCallingPid());
1206
1207    cameraClient->disconnect();
1208
1209}
1210
1211void CameraService::updateStatus(ICameraServiceListener::Status status,
1212                                 int32_t cameraId,
1213                                 const StatusVector *rejectSourceStates) {
1214    // do not lock mServiceLock here or can get into a deadlock from
1215    //  connect() -> ProClient::disconnect -> updateStatus
1216    Mutex::Autolock lock(mStatusMutex);
1217
1218    ICameraServiceListener::Status oldStatus = mStatusList[cameraId];
1219
1220    mStatusList[cameraId] = status;
1221
1222    if (oldStatus != status) {
1223        ALOGV("%s: Status has changed for camera ID %d from 0x%x to 0x%x",
1224              __FUNCTION__, cameraId, (uint32_t)oldStatus, (uint32_t)status);
1225
1226        if (oldStatus == ICameraServiceListener::STATUS_NOT_PRESENT &&
1227            (status != ICameraServiceListener::STATUS_PRESENT &&
1228             status != ICameraServiceListener::STATUS_ENUMERATING)) {
1229
1230            ALOGW("%s: From NOT_PRESENT can only transition into PRESENT"
1231                  " or ENUMERATING", __FUNCTION__);
1232            mStatusList[cameraId] = oldStatus;
1233            return;
1234        }
1235
1236        if (rejectSourceStates != NULL) {
1237            const StatusVector &rejectList = *rejectSourceStates;
1238            StatusVector::const_iterator it = rejectList.begin();
1239
1240            /**
1241             * Sometimes we want to conditionally do a transition.
1242             * For example if a client disconnects, we want to go to PRESENT
1243             * only if we weren't already in NOT_PRESENT or ENUMERATING.
1244             */
1245            for (; it != rejectList.end(); ++it) {
1246                if (oldStatus == *it) {
1247                    ALOGV("%s: Rejecting status transition for Camera ID %d, "
1248                          " since the source state was was in one of the bad "
1249                          " states.", __FUNCTION__, cameraId);
1250                    mStatusList[cameraId] = oldStatus;
1251                    return;
1252                }
1253            }
1254        }
1255
1256        /**
1257          * ProClients lose their exclusive lock.
1258          * - Done before the CameraClient can initialize the HAL device,
1259          *   since we want to be able to close it before they get to initialize
1260          */
1261        if (status == ICameraServiceListener::STATUS_NOT_AVAILABLE) {
1262            Vector<wp<ProClient> > proClients(mProClientList[cameraId]);
1263            Vector<wp<ProClient> >::const_iterator it;
1264
1265            for (it = proClients.begin(); it != proClients.end(); ++it) {
1266                sp<ProClient> proCl = it->promote();
1267                if (proCl.get() != NULL) {
1268                    proCl->onExclusiveLockStolen();
1269                }
1270            }
1271        }
1272
1273        Vector<sp<ICameraServiceListener> >::const_iterator it;
1274        for (it = mListenerList.begin(); it != mListenerList.end(); ++it) {
1275            (*it)->onStatusChanged(status, cameraId);
1276        }
1277    }
1278}
1279
1280ICameraServiceListener::Status CameraService::getStatus(int cameraId) const {
1281    if (cameraId < 0 || cameraId >= MAX_CAMERAS) {
1282        ALOGE("%s: Invalid camera ID %d", __FUNCTION__, cameraId);
1283        return ICameraServiceListener::STATUS_UNKNOWN;
1284    }
1285
1286    Mutex::Autolock al(mStatusMutex);
1287    return mStatusList[cameraId];
1288}
1289
1290}; // namespace android
1291