CameraService.cpp revision 1e74e241f5a4e0e763e27c888561405d013c9ca0
1/* 2 * Copyright (C) 2008 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17#define LOG_TAG "CameraService" 18#define ATRACE_TAG ATRACE_TAG_CAMERA 19//#define LOG_NDEBUG 0 20 21#include <algorithm> 22#include <climits> 23#include <stdio.h> 24#include <cstring> 25#include <ctime> 26#include <string> 27#include <sys/types.h> 28#include <inttypes.h> 29#include <pthread.h> 30 31#include <android/hardware/ICamera.h> 32#include <android/hardware/ICameraClient.h> 33 34#include <binder/AppOpsManager.h> 35#include <binder/IPCThreadState.h> 36#include <binder/IServiceManager.h> 37#include <binder/MemoryBase.h> 38#include <binder/MemoryHeapBase.h> 39#include <binder/ProcessInfoService.h> 40#include <cutils/atomic.h> 41#include <cutils/properties.h> 42#include <gui/Surface.h> 43#include <hardware/hardware.h> 44#include <media/AudioSystem.h> 45#include <media/IMediaHTTPService.h> 46#include <media/mediaplayer.h> 47#include <mediautils/BatteryNotifier.h> 48#include <utils/Errors.h> 49#include <utils/Log.h> 50#include <utils/String16.h> 51#include <utils/Trace.h> 52#include <private/android_filesystem_config.h> 53#include <system/camera_vendor_tags.h> 54#include <system/camera_metadata.h> 55#include <system/camera.h> 56 57#include "CameraService.h" 58#include "api1/CameraClient.h" 59#include "api1/Camera2Client.h" 60#include "api2/CameraDeviceClient.h" 61#include "utils/CameraTraces.h" 62 63namespace { 64 const char* kPermissionServiceName = "permission"; 65}; // namespace anonymous 66 67namespace android { 68 69using binder::Status; 70using namespace hardware; 71 72// ---------------------------------------------------------------------------- 73// Logging support -- this is for debugging only 74// Use "adb shell dumpsys media.camera -v 1" to change it. 75volatile int32_t gLogLevel = 0; 76 77#define LOG1(...) ALOGD_IF(gLogLevel >= 1, __VA_ARGS__); 78#define LOG2(...) ALOGD_IF(gLogLevel >= 2, __VA_ARGS__); 79 80static void setLogLevel(int level) { 81 android_atomic_write(level, &gLogLevel); 82} 83 84// Convenience methods for constructing binder::Status objects for error returns 85 86#define STATUS_ERROR(errorCode, errorString) \ 87 binder::Status::fromServiceSpecificError(errorCode, \ 88 String8::format("%s:%d: %s", __FUNCTION__, __LINE__, errorString)) 89 90#define STATUS_ERROR_FMT(errorCode, errorString, ...) \ 91 binder::Status::fromServiceSpecificError(errorCode, \ 92 String8::format("%s:%d: " errorString, __FUNCTION__, __LINE__, \ 93 __VA_ARGS__)) 94 95// ---------------------------------------------------------------------------- 96 97extern "C" { 98static void camera_device_status_change( 99 const struct camera_module_callbacks* callbacks, 100 int camera_id, 101 int new_status) { 102 sp<CameraService> cs = const_cast<CameraService*>( 103 static_cast<const CameraService*>(callbacks)); 104 105 cs->onDeviceStatusChanged(static_cast<camera_device_status_t>(camera_id), 106 static_cast<camera_device_status_t>(new_status)); 107} 108 109static void torch_mode_status_change( 110 const struct camera_module_callbacks* callbacks, 111 const char* camera_id, 112 int new_status) { 113 if (!callbacks || !camera_id) { 114 ALOGE("%s invalid parameters. callbacks %p, camera_id %p", __FUNCTION__, 115 callbacks, camera_id); 116 } 117 sp<CameraService> cs = const_cast<CameraService*>( 118 static_cast<const CameraService*>(callbacks)); 119 120 int32_t status; 121 switch (new_status) { 122 case TORCH_MODE_STATUS_NOT_AVAILABLE: 123 status = ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE; 124 break; 125 case TORCH_MODE_STATUS_AVAILABLE_OFF: 126 status = ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF; 127 break; 128 case TORCH_MODE_STATUS_AVAILABLE_ON: 129 status = ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON; 130 break; 131 default: 132 ALOGE("Unknown torch status %d", new_status); 133 return; 134 } 135 136 cs->onTorchStatusChanged( 137 String8(camera_id), 138 status); 139} 140} // extern "C" 141 142// ---------------------------------------------------------------------------- 143 144// This is ugly and only safe if we never re-create the CameraService, but 145// should be ok for now. 146static CameraService *gCameraService; 147 148CameraService::CameraService() : 149 mEventLog(DEFAULT_EVENT_LOG_LENGTH), 150 mNumberOfCameras(0), mNumberOfNormalCameras(0), 151 mSoundRef(0), mModule(nullptr) { 152 ALOGI("CameraService started (pid=%d)", getpid()); 153 gCameraService = this; 154 155 this->camera_device_status_change = android::camera_device_status_change; 156 this->torch_mode_status_change = android::torch_mode_status_change; 157 158 mServiceLockWrapper = std::make_shared<WaitableMutexWrapper>(&mServiceLock); 159} 160 161void CameraService::onFirstRef() 162{ 163 ALOGI("CameraService process starting"); 164 165 BnCameraService::onFirstRef(); 166 167 // Update battery life tracking if service is restarting 168 BatteryNotifier& notifier(BatteryNotifier::getInstance()); 169 notifier.noteResetCamera(); 170 notifier.noteResetFlashlight(); 171 172 camera_module_t *rawModule; 173 int err = hw_get_module(CAMERA_HARDWARE_MODULE_ID, 174 (const hw_module_t **)&rawModule); 175 if (err < 0) { 176 ALOGE("Could not load camera HAL module: %d (%s)", err, strerror(-err)); 177 logServiceError("Could not load camera HAL module", err); 178 return; 179 } 180 181 mModule = new CameraModule(rawModule); 182 err = mModule->init(); 183 if (err != OK) { 184 ALOGE("Could not initialize camera HAL module: %d (%s)", err, 185 strerror(-err)); 186 logServiceError("Could not initialize camera HAL module", err); 187 188 delete mModule; 189 mModule = nullptr; 190 return; 191 } 192 ALOGI("Loaded \"%s\" camera module", mModule->getModuleName()); 193 194 mNumberOfCameras = mModule->getNumberOfCameras(); 195 mNumberOfNormalCameras = mNumberOfCameras; 196 197 // Setup vendor tags before we call get_camera_info the first time 198 // because HAL might need to setup static vendor keys in get_camera_info 199 VendorTagDescriptor::clearGlobalVendorTagDescriptor(); 200 if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_2) { 201 setUpVendorTags(); 202 } 203 204 mFlashlight = new CameraFlashlight(*mModule, *this); 205 status_t res = mFlashlight->findFlashUnits(); 206 if (res) { 207 // impossible because we haven't open any camera devices. 208 ALOGE("Failed to find flash units."); 209 } 210 211 int latestStrangeCameraId = INT_MAX; 212 for (int i = 0; i < mNumberOfCameras; i++) { 213 String8 cameraId = String8::format("%d", i); 214 215 // Get camera info 216 217 struct camera_info info; 218 bool haveInfo = true; 219 status_t rc = mModule->getCameraInfo(i, &info); 220 if (rc != NO_ERROR) { 221 ALOGE("%s: Received error loading camera info for device %d, cost and" 222 " conflicting devices fields set to defaults for this device.", 223 __FUNCTION__, i); 224 haveInfo = false; 225 } 226 227 // Check for backwards-compatibility support 228 if (haveInfo) { 229 if (checkCameraCapabilities(i, info, &latestStrangeCameraId) != OK) { 230 delete mModule; 231 mModule = nullptr; 232 return; 233 } 234 } 235 236 // Defaults to use for cost and conflicting devices 237 int cost = 100; 238 char** conflicting_devices = nullptr; 239 size_t conflicting_devices_length = 0; 240 241 // If using post-2.4 module version, query the cost + conflicting devices from the HAL 242 if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_4 && haveInfo) { 243 cost = info.resource_cost; 244 conflicting_devices = info.conflicting_devices; 245 conflicting_devices_length = info.conflicting_devices_length; 246 } 247 248 std::set<String8> conflicting; 249 for (size_t i = 0; i < conflicting_devices_length; i++) { 250 conflicting.emplace(String8(conflicting_devices[i])); 251 } 252 253 // Initialize state for each camera device 254 { 255 Mutex::Autolock lock(mCameraStatesLock); 256 mCameraStates.emplace(cameraId, std::make_shared<CameraState>(cameraId, cost, 257 conflicting)); 258 } 259 260 if (mFlashlight->hasFlashUnit(cameraId)) { 261 mTorchStatusMap.add(cameraId, 262 ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF); 263 } 264 } 265 266 if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_1) { 267 mModule->setCallbacks(this); 268 } 269 270 CameraService::pingCameraServiceProxy(); 271} 272 273sp<ICameraServiceProxy> CameraService::getCameraServiceProxy() { 274 sp<IServiceManager> sm = defaultServiceManager(); 275 sp<IBinder> binder = sm->getService(String16("media.camera.proxy")); 276 if (binder == nullptr) { 277 return nullptr; 278 } 279 sp<ICameraServiceProxy> proxyBinder = interface_cast<ICameraServiceProxy>(binder); 280 return proxyBinder; 281} 282 283void CameraService::pingCameraServiceProxy() { 284 sp<ICameraServiceProxy> proxyBinder = getCameraServiceProxy(); 285 if (proxyBinder == nullptr) return; 286 proxyBinder->pingForUserUpdate(); 287} 288 289CameraService::~CameraService() { 290 if (mModule) { 291 delete mModule; 292 mModule = nullptr; 293 } 294 VendorTagDescriptor::clearGlobalVendorTagDescriptor(); 295 gCameraService = nullptr; 296} 297 298void CameraService::onDeviceStatusChanged(camera_device_status_t cameraId, 299 camera_device_status_t newStatus) { 300 ALOGI("%s: Status changed for cameraId=%d, newStatus=%d", __FUNCTION__, 301 cameraId, newStatus); 302 303 String8 id = String8::format("%d", cameraId); 304 std::shared_ptr<CameraState> state = getCameraState(id); 305 306 if (state == nullptr) { 307 ALOGE("%s: Bad camera ID %d", __FUNCTION__, cameraId); 308 return; 309 } 310 311 int32_t oldStatus = state->getStatus(); 312 313 if (oldStatus == static_cast<int32_t>(newStatus)) { 314 ALOGE("%s: State transition to the same status %#x not allowed", __FUNCTION__, newStatus); 315 return; 316 } 317 318 if (newStatus == CAMERA_DEVICE_STATUS_NOT_PRESENT) { 319 logDeviceRemoved(id, String8::format("Device status changed from %d to %d", oldStatus, 320 newStatus)); 321 sp<BasicClient> clientToDisconnect; 322 { 323 // Don't do this in updateStatus to avoid deadlock over mServiceLock 324 Mutex::Autolock lock(mServiceLock); 325 326 // Set the device status to NOT_PRESENT, clients will no longer be able to connect 327 // to this device until the status changes 328 updateStatus(ICameraServiceListener::STATUS_NOT_PRESENT, id); 329 330 // Remove cached shim parameters 331 state->setShimParams(CameraParameters()); 332 333 // Remove the client from the list of active clients 334 clientToDisconnect = removeClientLocked(id); 335 336 // Notify the client of disconnection 337 clientToDisconnect->notifyError( 338 hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED, 339 CaptureResultExtras{}); 340 } 341 342 ALOGI("%s: Client for camera ID %s evicted due to device status change from HAL", 343 __FUNCTION__, id.string()); 344 345 // Disconnect client 346 if (clientToDisconnect.get() != nullptr) { 347 // Ensure not in binder RPC so client disconnect PID checks work correctly 348 LOG_ALWAYS_FATAL_IF(getCallingPid() != getpid(), 349 "onDeviceStatusChanged must be called from the camera service process!"); 350 clientToDisconnect->disconnect(); 351 } 352 353 } else { 354 if (oldStatus == ICameraServiceListener::STATUS_NOT_PRESENT) { 355 logDeviceAdded(id, String8::format("Device status changed from %d to %d", oldStatus, 356 newStatus)); 357 } 358 updateStatus(static_cast<int32_t>(newStatus), id); 359 } 360 361} 362 363void CameraService::onTorchStatusChanged(const String8& cameraId, 364 int32_t newStatus) { 365 Mutex::Autolock al(mTorchStatusMutex); 366 onTorchStatusChangedLocked(cameraId, newStatus); 367} 368 369void CameraService::onTorchStatusChangedLocked(const String8& cameraId, 370 int32_t newStatus) { 371 ALOGI("%s: Torch status changed for cameraId=%s, newStatus=%d", 372 __FUNCTION__, cameraId.string(), newStatus); 373 374 int32_t status; 375 status_t res = getTorchStatusLocked(cameraId, &status); 376 if (res) { 377 ALOGE("%s: cannot get torch status of camera %s: %s (%d)", 378 __FUNCTION__, cameraId.string(), strerror(-res), res); 379 return; 380 } 381 if (status == newStatus) { 382 return; 383 } 384 385 res = setTorchStatusLocked(cameraId, newStatus); 386 if (res) { 387 ALOGE("%s: Failed to set the torch status to %d: %s (%d)", __FUNCTION__, 388 (uint32_t)newStatus, strerror(-res), res); 389 return; 390 } 391 392 { 393 // Update battery life logging for flashlight 394 Mutex::Autolock al(mTorchUidMapMutex); 395 auto iter = mTorchUidMap.find(cameraId); 396 if (iter != mTorchUidMap.end()) { 397 int oldUid = iter->second.second; 398 int newUid = iter->second.first; 399 BatteryNotifier& notifier(BatteryNotifier::getInstance()); 400 if (oldUid != newUid) { 401 // If the UID has changed, log the status and update current UID in mTorchUidMap 402 if (status == ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON) { 403 notifier.noteFlashlightOff(cameraId, oldUid); 404 } 405 if (newStatus == ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON) { 406 notifier.noteFlashlightOn(cameraId, newUid); 407 } 408 iter->second.second = newUid; 409 } else { 410 // If the UID has not changed, log the status 411 if (newStatus == ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON) { 412 notifier.noteFlashlightOn(cameraId, oldUid); 413 } else { 414 notifier.noteFlashlightOff(cameraId, oldUid); 415 } 416 } 417 } 418 } 419 420 { 421 Mutex::Autolock lock(mStatusListenerLock); 422 for (auto& i : mListenerList) { 423 i->onTorchStatusChanged(newStatus, String16{cameraId}); 424 } 425 } 426} 427 428Status CameraService::getNumberOfCameras(int32_t type, int32_t* numCameras) { 429 ATRACE_CALL(); 430 switch (type) { 431 case CAMERA_TYPE_BACKWARD_COMPATIBLE: 432 *numCameras = mNumberOfNormalCameras; 433 break; 434 case CAMERA_TYPE_ALL: 435 *numCameras = mNumberOfCameras; 436 break; 437 default: 438 ALOGW("%s: Unknown camera type %d", 439 __FUNCTION__, type); 440 return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT, 441 "Unknown camera type %d", type); 442 } 443 return Status::ok(); 444} 445 446Status CameraService::getCameraInfo(int cameraId, 447 CameraInfo* cameraInfo) { 448 ATRACE_CALL(); 449 if (!mModule) { 450 return STATUS_ERROR(ERROR_DISCONNECTED, 451 "Camera subsystem is not available"); 452 } 453 454 if (cameraId < 0 || cameraId >= mNumberOfCameras) { 455 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, 456 "CameraId is not valid"); 457 } 458 459 struct camera_info info; 460 Status rc = filterGetInfoErrorCode( 461 mModule->getCameraInfo(cameraId, &info)); 462 463 if (rc.isOk()) { 464 cameraInfo->facing = info.facing; 465 cameraInfo->orientation = info.orientation; 466 } 467 return rc; 468} 469 470int CameraService::cameraIdToInt(const String8& cameraId) { 471 errno = 0; 472 size_t pos = 0; 473 int ret = stoi(std::string{cameraId.string()}, &pos); 474 if (errno != 0 || pos != cameraId.size()) { 475 return -1; 476 } 477 return ret; 478} 479 480Status CameraService::generateShimMetadata(int cameraId, /*out*/CameraMetadata* cameraInfo) { 481 ATRACE_CALL(); 482 483 Status ret = Status::ok(); 484 485 struct CameraInfo info; 486 if (!(ret = getCameraInfo(cameraId, &info)).isOk()) { 487 return ret; 488 } 489 490 CameraMetadata shimInfo; 491 int32_t orientation = static_cast<int32_t>(info.orientation); 492 status_t rc; 493 if ((rc = shimInfo.update(ANDROID_SENSOR_ORIENTATION, &orientation, 1)) != OK) { 494 return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION, 495 "Error updating metadata: %d (%s)", rc, strerror(-rc)); 496 } 497 498 uint8_t facing = (info.facing == CAMERA_FACING_FRONT) ? 499 ANDROID_LENS_FACING_FRONT : ANDROID_LENS_FACING_BACK; 500 if ((rc = shimInfo.update(ANDROID_LENS_FACING, &facing, 1)) != OK) { 501 return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION, 502 "Error updating metadata: %d (%s)", rc, strerror(-rc)); 503 } 504 505 CameraParameters shimParams; 506 if (!(ret = getLegacyParametersLazy(cameraId, /*out*/&shimParams)).isOk()) { 507 // Error logged by callee 508 return ret; 509 } 510 511 Vector<Size> sizes; 512 Vector<Size> jpegSizes; 513 Vector<int32_t> formats; 514 { 515 shimParams.getSupportedPreviewSizes(/*out*/sizes); 516 shimParams.getSupportedPreviewFormats(/*out*/formats); 517 shimParams.getSupportedPictureSizes(/*out*/jpegSizes); 518 } 519 520 // Always include IMPLEMENTATION_DEFINED 521 formats.add(HAL_PIXEL_FORMAT_IMPLEMENTATION_DEFINED); 522 523 const size_t INTS_PER_CONFIG = 4; 524 525 // Build available stream configurations metadata 526 size_t streamConfigSize = (sizes.size() * formats.size() + jpegSizes.size()) * INTS_PER_CONFIG; 527 528 Vector<int32_t> streamConfigs; 529 streamConfigs.setCapacity(streamConfigSize); 530 531 for (size_t i = 0; i < formats.size(); ++i) { 532 for (size_t j = 0; j < sizes.size(); ++j) { 533 streamConfigs.add(formats[i]); 534 streamConfigs.add(sizes[j].width); 535 streamConfigs.add(sizes[j].height); 536 streamConfigs.add(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS_OUTPUT); 537 } 538 } 539 540 for (size_t i = 0; i < jpegSizes.size(); ++i) { 541 streamConfigs.add(HAL_PIXEL_FORMAT_BLOB); 542 streamConfigs.add(jpegSizes[i].width); 543 streamConfigs.add(jpegSizes[i].height); 544 streamConfigs.add(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS_OUTPUT); 545 } 546 547 if ((rc = shimInfo.update(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS, 548 streamConfigs.array(), streamConfigSize)) != OK) { 549 return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION, 550 "Error updating metadata: %d (%s)", rc, strerror(-rc)); 551 } 552 553 int64_t fakeMinFrames[0]; 554 // TODO: Fixme, don't fake min frame durations. 555 if ((rc = shimInfo.update(ANDROID_SCALER_AVAILABLE_MIN_FRAME_DURATIONS, 556 fakeMinFrames, 0)) != OK) { 557 return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION, 558 "Error updating metadata: %d (%s)", rc, strerror(-rc)); 559 } 560 561 int64_t fakeStalls[0]; 562 // TODO: Fixme, don't fake stall durations. 563 if ((rc = shimInfo.update(ANDROID_SCALER_AVAILABLE_STALL_DURATIONS, 564 fakeStalls, 0)) != OK) { 565 return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION, 566 "Error updating metadata: %d (%s)", rc, strerror(-rc)); 567 } 568 569 *cameraInfo = shimInfo; 570 return ret; 571} 572 573Status CameraService::getCameraCharacteristics(int cameraId, 574 CameraMetadata* cameraInfo) { 575 ATRACE_CALL(); 576 if (!cameraInfo) { 577 ALOGE("%s: cameraInfo is NULL", __FUNCTION__); 578 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "cameraInfo is NULL"); 579 } 580 581 if (!mModule) { 582 ALOGE("%s: camera hardware module doesn't exist", __FUNCTION__); 583 return STATUS_ERROR(ERROR_DISCONNECTED, 584 "Camera subsystem is not available");; 585 } 586 587 if (cameraId < 0 || cameraId >= mNumberOfCameras) { 588 ALOGE("%s: Invalid camera id: %d", __FUNCTION__, cameraId); 589 return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT, 590 "Invalid camera id: %d", cameraId); 591 } 592 593 int facing; 594 Status ret; 595 if (mModule->getModuleApiVersion() < CAMERA_MODULE_API_VERSION_2_0 || 596 getDeviceVersion(cameraId, &facing) < CAMERA_DEVICE_API_VERSION_3_0) { 597 /** 598 * Backwards compatibility mode for old HALs: 599 * - Convert CameraInfo into static CameraMetadata properties. 600 * - Retrieve cached CameraParameters for this camera. If none exist, 601 * attempt to open CameraClient and retrieve the CameraParameters. 602 * - Convert cached CameraParameters into static CameraMetadata 603 * properties. 604 */ 605 ALOGI("%s: Switching to HAL1 shim implementation...", __FUNCTION__); 606 607 ret = generateShimMetadata(cameraId, cameraInfo); 608 } else { 609 /** 610 * Normal HAL 2.1+ codepath. 611 */ 612 struct camera_info info; 613 ret = filterGetInfoErrorCode(mModule->getCameraInfo(cameraId, &info)); 614 if (ret.isOk()) { 615 *cameraInfo = info.static_camera_characteristics; 616 } 617 } 618 619 return ret; 620} 621 622int CameraService::getCallingPid() { 623 return IPCThreadState::self()->getCallingPid(); 624} 625 626int CameraService::getCallingUid() { 627 return IPCThreadState::self()->getCallingUid(); 628} 629 630String8 CameraService::getFormattedCurrentTime() { 631 time_t now = time(nullptr); 632 char formattedTime[64]; 633 strftime(formattedTime, sizeof(formattedTime), "%m-%d %H:%M:%S", localtime(&now)); 634 return String8(formattedTime); 635} 636 637int CameraService::getCameraPriorityFromProcState(int procState) { 638 // Find the priority for the camera usage based on the process state. Higher priority clients 639 // win for evictions. 640 if (procState < 0) { 641 ALOGE("%s: Received invalid process state %d from ActivityManagerService!", __FUNCTION__, 642 procState); 643 return -1; 644 } 645 // Treat sleeping TOP processes the same as regular TOP processes, for 646 // access priority. This is important for lock-screen camera launch scenarios 647 if (procState == PROCESS_STATE_TOP_SLEEPING) { 648 procState = PROCESS_STATE_TOP; 649 } 650 return INT_MAX - procState; 651} 652 653Status CameraService::getCameraVendorTagDescriptor( 654 /*out*/ 655 hardware::camera2::params::VendorTagDescriptor* desc) { 656 ATRACE_CALL(); 657 if (!mModule) { 658 ALOGE("%s: camera hardware module doesn't exist", __FUNCTION__); 659 return STATUS_ERROR(ERROR_DISCONNECTED, "Camera subsystem not available"); 660 } 661 sp<VendorTagDescriptor> globalDescriptor = VendorTagDescriptor::getGlobalVendorTagDescriptor(); 662 if (globalDescriptor != nullptr) { 663 *desc = *(globalDescriptor.get()); 664 } 665 return Status::ok(); 666} 667 668int CameraService::getDeviceVersion(int cameraId, int* facing) { 669 ATRACE_CALL(); 670 struct camera_info info; 671 if (mModule->getCameraInfo(cameraId, &info) != OK) { 672 return -1; 673 } 674 675 int deviceVersion; 676 if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0) { 677 deviceVersion = info.device_version; 678 } else { 679 deviceVersion = CAMERA_DEVICE_API_VERSION_1_0; 680 } 681 682 if (facing) { 683 *facing = info.facing; 684 } 685 686 return deviceVersion; 687} 688 689Status CameraService::filterGetInfoErrorCode(status_t err) { 690 switch(err) { 691 case NO_ERROR: 692 return Status::ok(); 693 case -EINVAL: 694 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, 695 "CameraId is not valid for HAL module"); 696 case -ENODEV: 697 return STATUS_ERROR(ERROR_DISCONNECTED, 698 "Camera device not available"); 699 default: 700 return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION, 701 "Camera HAL encountered error %d: %s", 702 err, strerror(-err)); 703 } 704} 705 706bool CameraService::setUpVendorTags() { 707 ATRACE_CALL(); 708 vendor_tag_ops_t vOps = vendor_tag_ops_t(); 709 710 // Check if vendor operations have been implemented 711 if (!mModule->isVendorTagDefined()) { 712 ALOGI("%s: No vendor tags defined for this device.", __FUNCTION__); 713 return false; 714 } 715 716 mModule->getVendorTagOps(&vOps); 717 718 // Ensure all vendor operations are present 719 if (vOps.get_tag_count == NULL || vOps.get_all_tags == NULL || 720 vOps.get_section_name == NULL || vOps.get_tag_name == NULL || 721 vOps.get_tag_type == NULL) { 722 ALOGE("%s: Vendor tag operations not fully defined. Ignoring definitions." 723 , __FUNCTION__); 724 return false; 725 } 726 727 // Read all vendor tag definitions into a descriptor 728 sp<VendorTagDescriptor> desc; 729 status_t res; 730 if ((res = VendorTagDescriptor::createDescriptorFromOps(&vOps, /*out*/desc)) 731 != OK) { 732 ALOGE("%s: Could not generate descriptor from vendor tag operations," 733 "received error %s (%d). Camera clients will not be able to use" 734 "vendor tags", __FUNCTION__, strerror(res), res); 735 return false; 736 } 737 738 // Set the global descriptor to use with camera metadata 739 VendorTagDescriptor::setAsGlobalVendorTagDescriptor(desc); 740 return true; 741} 742 743Status CameraService::makeClient(const sp<CameraService>& cameraService, 744 const sp<IInterface>& cameraCb, const String16& packageName, int cameraId, 745 int facing, int clientPid, uid_t clientUid, int servicePid, bool legacyMode, 746 int halVersion, int deviceVersion, apiLevel effectiveApiLevel, 747 /*out*/sp<BasicClient>* client) { 748 749 if (halVersion < 0 || halVersion == deviceVersion) { 750 // Default path: HAL version is unspecified by caller, create CameraClient 751 // based on device version reported by the HAL. 752 switch(deviceVersion) { 753 case CAMERA_DEVICE_API_VERSION_1_0: 754 if (effectiveApiLevel == API_1) { // Camera1 API route 755 sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get()); 756 *client = new CameraClient(cameraService, tmp, packageName, cameraId, facing, 757 clientPid, clientUid, getpid(), legacyMode); 758 } else { // Camera2 API route 759 ALOGW("Camera using old HAL version: %d", deviceVersion); 760 return STATUS_ERROR_FMT(ERROR_DEPRECATED_HAL, 761 "Camera device \"%d\" HAL version %d does not support camera2 API", 762 cameraId, deviceVersion); 763 } 764 break; 765 case CAMERA_DEVICE_API_VERSION_3_0: 766 case CAMERA_DEVICE_API_VERSION_3_1: 767 case CAMERA_DEVICE_API_VERSION_3_2: 768 case CAMERA_DEVICE_API_VERSION_3_3: 769 if (effectiveApiLevel == API_1) { // Camera1 API route 770 sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get()); 771 *client = new Camera2Client(cameraService, tmp, packageName, cameraId, facing, 772 clientPid, clientUid, servicePid, legacyMode); 773 } else { // Camera2 API route 774 sp<hardware::camera2::ICameraDeviceCallbacks> tmp = 775 static_cast<hardware::camera2::ICameraDeviceCallbacks*>(cameraCb.get()); 776 *client = new CameraDeviceClient(cameraService, tmp, packageName, cameraId, 777 facing, clientPid, clientUid, servicePid); 778 } 779 break; 780 default: 781 // Should not be reachable 782 ALOGE("Unknown camera device HAL version: %d", deviceVersion); 783 return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION, 784 "Camera device \"%d\" has unknown HAL version %d", 785 cameraId, deviceVersion); 786 } 787 } else { 788 // A particular HAL version is requested by caller. Create CameraClient 789 // based on the requested HAL version. 790 if (deviceVersion > CAMERA_DEVICE_API_VERSION_1_0 && 791 halVersion == CAMERA_DEVICE_API_VERSION_1_0) { 792 // Only support higher HAL version device opened as HAL1.0 device. 793 sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get()); 794 *client = new CameraClient(cameraService, tmp, packageName, cameraId, facing, 795 clientPid, clientUid, servicePid, legacyMode); 796 } else { 797 // Other combinations (e.g. HAL3.x open as HAL2.x) are not supported yet. 798 ALOGE("Invalid camera HAL version %x: HAL %x device can only be" 799 " opened as HAL %x device", halVersion, deviceVersion, 800 CAMERA_DEVICE_API_VERSION_1_0); 801 return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT, 802 "Camera device \"%d\" (HAL version %d) cannot be opened as HAL version %d", 803 cameraId, deviceVersion, halVersion); 804 } 805 } 806 return Status::ok(); 807} 808 809String8 CameraService::toString(std::set<userid_t> intSet) { 810 String8 s(""); 811 bool first = true; 812 for (userid_t i : intSet) { 813 if (first) { 814 s.appendFormat("%d", i); 815 first = false; 816 } else { 817 s.appendFormat(", %d", i); 818 } 819 } 820 return s; 821} 822 823Status CameraService::initializeShimMetadata(int cameraId) { 824 int uid = getCallingUid(); 825 826 String16 internalPackageName("cameraserver"); 827 String8 id = String8::format("%d", cameraId); 828 Status ret = Status::ok(); 829 sp<Client> tmp = nullptr; 830 if (!(ret = connectHelper<ICameraClient,Client>( 831 sp<ICameraClient>{nullptr}, id, static_cast<int>(CAMERA_HAL_API_VERSION_UNSPECIFIED), 832 internalPackageName, uid, USE_CALLING_PID, 833 API_1, /*legacyMode*/ false, /*shimUpdateOnly*/ true, 834 /*out*/ tmp) 835 ).isOk()) { 836 ALOGE("%s: Error initializing shim metadata: %s", __FUNCTION__, ret.toString8().string()); 837 } 838 return ret; 839} 840 841Status CameraService::getLegacyParametersLazy(int cameraId, 842 /*out*/ 843 CameraParameters* parameters) { 844 845 ALOGV("%s: for cameraId: %d", __FUNCTION__, cameraId); 846 847 Status ret = Status::ok(); 848 849 if (parameters == NULL) { 850 ALOGE("%s: parameters must not be null", __FUNCTION__); 851 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Parameters must not be null"); 852 } 853 854 String8 id = String8::format("%d", cameraId); 855 856 // Check if we already have parameters 857 { 858 // Scope for service lock 859 Mutex::Autolock lock(mServiceLock); 860 auto cameraState = getCameraState(id); 861 if (cameraState == nullptr) { 862 ALOGE("%s: Invalid camera ID: %s", __FUNCTION__, id.string()); 863 return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT, 864 "Invalid camera ID: %s", id.string()); 865 } 866 CameraParameters p = cameraState->getShimParams(); 867 if (!p.isEmpty()) { 868 *parameters = p; 869 return ret; 870 } 871 } 872 873 int64_t token = IPCThreadState::self()->clearCallingIdentity(); 874 ret = initializeShimMetadata(cameraId); 875 IPCThreadState::self()->restoreCallingIdentity(token); 876 if (!ret.isOk()) { 877 // Error already logged by callee 878 return ret; 879 } 880 881 // Check for parameters again 882 { 883 // Scope for service lock 884 Mutex::Autolock lock(mServiceLock); 885 auto cameraState = getCameraState(id); 886 if (cameraState == nullptr) { 887 ALOGE("%s: Invalid camera ID: %s", __FUNCTION__, id.string()); 888 return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT, 889 "Invalid camera ID: %s", id.string()); 890 } 891 CameraParameters p = cameraState->getShimParams(); 892 if (!p.isEmpty()) { 893 *parameters = p; 894 return ret; 895 } 896 } 897 898 ALOGE("%s: Parameters were not initialized, or were empty. Device may not be present.", 899 __FUNCTION__); 900 return STATUS_ERROR(ERROR_INVALID_OPERATION, "Unable to initialize legacy parameters"); 901} 902 903// Can camera service trust the caller based on the calling UID? 904static bool isTrustedCallingUid(uid_t uid) { 905 switch (uid) { 906 case AID_MEDIA: // mediaserver 907 case AID_CAMERASERVER: // cameraserver 908 return true; 909 default: 910 return false; 911 } 912} 913 914Status CameraService::validateConnectLocked(const String8& cameraId, 915 const String8& clientName8, /*inout*/int& clientUid, /*inout*/int& clientPid) const { 916 917 int callingPid = getCallingPid(); 918 int callingUid = getCallingUid(); 919 920 // Check if we can trust clientUid 921 if (clientUid == USE_CALLING_UID) { 922 clientUid = callingUid; 923 } else if (!isTrustedCallingUid(callingUid)) { 924 ALOGE("CameraService::connect X (calling PID %d, calling UID %d) rejected " 925 "(don't trust clientUid %d)", callingPid, callingUid, clientUid); 926 return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED, 927 "Untrusted caller (calling PID %d, UID %d) trying to " 928 "forward camera access to camera %s for client %s (PID %d, UID %d)", 929 callingPid, callingUid, cameraId.string(), 930 clientName8.string(), clientUid, clientPid); 931 } 932 933 // Check if we can trust clientPid 934 if (clientPid == USE_CALLING_PID) { 935 clientPid = callingPid; 936 } else if (!isTrustedCallingUid(callingUid)) { 937 ALOGE("CameraService::connect X (calling PID %d, calling UID %d) rejected " 938 "(don't trust clientPid %d)", callingPid, callingUid, clientPid); 939 return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED, 940 "Untrusted caller (calling PID %d, UID %d) trying to " 941 "forward camera access to camera %s for client %s (PID %d, UID %d)", 942 callingPid, callingUid, cameraId.string(), 943 clientName8.string(), clientUid, clientPid); 944 } 945 946 // If it's not calling from cameraserver, check the permission. 947 if (callingPid != getpid() && 948 !checkPermission(String16("android.permission.CAMERA"), clientPid, clientUid)) { 949 ALOGE("Permission Denial: can't use the camera pid=%d, uid=%d", clientPid, clientUid); 950 return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED, 951 "Caller \"%s\" (PID %d, UID %d) cannot open camera \"%s\" without camera permission", 952 clientName8.string(), clientUid, clientPid, cameraId.string()); 953 } 954 955 // Only use passed in clientPid to check permission. Use calling PID as the client PID that's 956 // connected to camera service directly. 957 clientPid = callingPid; 958 959 if (!mModule) { 960 ALOGE("CameraService::connect X (PID %d) rejected (camera HAL module not loaded)", 961 callingPid); 962 return STATUS_ERROR_FMT(ERROR_DISCONNECTED, 963 "No camera HAL module available to open camera device \"%s\"", cameraId.string()); 964 } 965 966 if (getCameraState(cameraId) == nullptr) { 967 ALOGE("CameraService::connect X (PID %d) rejected (invalid camera ID %s)", callingPid, 968 cameraId.string()); 969 return STATUS_ERROR_FMT(ERROR_DISCONNECTED, 970 "No camera device with ID \"%s\" available", cameraId.string()); 971 } 972 973 userid_t clientUserId = multiuser_get_user_id(clientUid); 974 975 // Only allow clients who are being used by the current foreground device user, unless calling 976 // from our own process. 977 if (callingPid != getpid() && (mAllowedUsers.find(clientUserId) == mAllowedUsers.end())) { 978 ALOGE("CameraService::connect X (PID %d) rejected (cannot connect from " 979 "device user %d, currently allowed device users: %s)", callingPid, clientUserId, 980 toString(mAllowedUsers).string()); 981 return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED, 982 "Callers from device user %d are not currently allowed to connect to camera \"%s\"", 983 clientUserId, cameraId.string()); 984 } 985 986 status_t err = checkIfDeviceIsUsable(cameraId); 987 if (err != NO_ERROR) { 988 switch(err) { 989 case -ENODEV: 990 case -EBUSY: 991 return STATUS_ERROR_FMT(ERROR_DISCONNECTED, 992 "No camera device with ID \"%s\" currently available", cameraId.string()); 993 default: 994 return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION, 995 "Unknown error connecting to ID \"%s\"", cameraId.string()); 996 } 997 } 998 return Status::ok(); 999} 1000 1001status_t CameraService::checkIfDeviceIsUsable(const String8& cameraId) const { 1002 auto cameraState = getCameraState(cameraId); 1003 int callingPid = getCallingPid(); 1004 if (cameraState == nullptr) { 1005 ALOGE("CameraService::connect X (PID %d) rejected (invalid camera ID %s)", callingPid, 1006 cameraId.string()); 1007 return -ENODEV; 1008 } 1009 1010 int32_t currentStatus = cameraState->getStatus(); 1011 if (currentStatus == ICameraServiceListener::STATUS_NOT_PRESENT) { 1012 ALOGE("CameraService::connect X (PID %d) rejected (camera %s is not connected)", 1013 callingPid, cameraId.string()); 1014 return -ENODEV; 1015 } else if (currentStatus == ICameraServiceListener::STATUS_ENUMERATING) { 1016 ALOGE("CameraService::connect X (PID %d) rejected, (camera %s is initializing)", 1017 callingPid, cameraId.string()); 1018 return -EBUSY; 1019 } 1020 1021 return NO_ERROR; 1022} 1023 1024void CameraService::finishConnectLocked(const sp<BasicClient>& client, 1025 const CameraService::DescriptorPtr& desc) { 1026 1027 // Make a descriptor for the incoming client 1028 auto clientDescriptor = CameraService::CameraClientManager::makeClientDescriptor(client, desc); 1029 auto evicted = mActiveClientManager.addAndEvict(clientDescriptor); 1030 1031 logConnected(desc->getKey(), static_cast<int>(desc->getOwnerId()), 1032 String8(client->getPackageName())); 1033 1034 if (evicted.size() > 0) { 1035 // This should never happen - clients should already have been removed in disconnect 1036 for (auto& i : evicted) { 1037 ALOGE("%s: Invalid state: Client for camera %s was not removed in disconnect", 1038 __FUNCTION__, i->getKey().string()); 1039 } 1040 1041 LOG_ALWAYS_FATAL("%s: Invalid state for CameraService, clients not evicted properly", 1042 __FUNCTION__); 1043 } 1044 1045 // And register a death notification for the client callback. Do 1046 // this last to avoid Binder policy where a nested Binder 1047 // transaction might be pre-empted to service the client death 1048 // notification if the client process dies before linkToDeath is 1049 // invoked. 1050 sp<IBinder> remoteCallback = client->getRemote(); 1051 if (remoteCallback != nullptr) { 1052 remoteCallback->linkToDeath(this); 1053 } 1054} 1055 1056status_t CameraService::handleEvictionsLocked(const String8& cameraId, int clientPid, 1057 apiLevel effectiveApiLevel, const sp<IBinder>& remoteCallback, const String8& packageName, 1058 /*out*/ 1059 sp<BasicClient>* client, 1060 std::shared_ptr<resource_policy::ClientDescriptor<String8, sp<BasicClient>>>* partial) { 1061 ATRACE_CALL(); 1062 status_t ret = NO_ERROR; 1063 std::vector<DescriptorPtr> evictedClients; 1064 DescriptorPtr clientDescriptor; 1065 { 1066 if (effectiveApiLevel == API_1) { 1067 // If we are using API1, any existing client for this camera ID with the same remote 1068 // should be returned rather than evicted to allow MediaRecorder to work properly. 1069 1070 auto current = mActiveClientManager.get(cameraId); 1071 if (current != nullptr) { 1072 auto clientSp = current->getValue(); 1073 if (clientSp.get() != nullptr) { // should never be needed 1074 if (!clientSp->canCastToApiClient(effectiveApiLevel)) { 1075 ALOGW("CameraService connect called from same client, but with a different" 1076 " API level, evicting prior client..."); 1077 } else if (clientSp->getRemote() == remoteCallback) { 1078 ALOGI("CameraService::connect X (PID %d) (second call from same" 1079 " app binder, returning the same client)", clientPid); 1080 *client = clientSp; 1081 return NO_ERROR; 1082 } 1083 } 1084 } 1085 } 1086 1087 // Get current active client PIDs 1088 std::vector<int> ownerPids(mActiveClientManager.getAllOwners()); 1089 ownerPids.push_back(clientPid); 1090 1091 // Use the value +PROCESS_STATE_NONEXISTENT, to avoid taking 1092 // address of PROCESS_STATE_NONEXISTENT as a reference argument 1093 // for the vector constructor. PROCESS_STATE_NONEXISTENT does 1094 // not have an out-of-class definition. 1095 std::vector<int> priorities(ownerPids.size(), +PROCESS_STATE_NONEXISTENT); 1096 1097 // Get priorites of all active PIDs 1098 ProcessInfoService::getProcessStatesFromPids(ownerPids.size(), &ownerPids[0], 1099 /*out*/&priorities[0]); 1100 1101 // Update all active clients' priorities 1102 std::map<int,int> pidToPriorityMap; 1103 for (size_t i = 0; i < ownerPids.size() - 1; i++) { 1104 pidToPriorityMap.emplace(ownerPids[i], getCameraPriorityFromProcState(priorities[i])); 1105 } 1106 mActiveClientManager.updatePriorities(pidToPriorityMap); 1107 1108 // Get state for the given cameraId 1109 auto state = getCameraState(cameraId); 1110 if (state == nullptr) { 1111 ALOGE("CameraService::connect X (PID %d) rejected (no camera device with ID %s)", 1112 clientPid, cameraId.string()); 1113 // Should never get here because validateConnectLocked should have errored out 1114 return BAD_VALUE; 1115 } 1116 1117 // Make descriptor for incoming client 1118 clientDescriptor = CameraClientManager::makeClientDescriptor(cameraId, 1119 sp<BasicClient>{nullptr}, static_cast<int32_t>(state->getCost()), 1120 state->getConflicting(), 1121 getCameraPriorityFromProcState(priorities[priorities.size() - 1]), clientPid); 1122 1123 // Find clients that would be evicted 1124 auto evicted = mActiveClientManager.wouldEvict(clientDescriptor); 1125 1126 // If the incoming client was 'evicted,' higher priority clients have the camera in the 1127 // background, so we cannot do evictions 1128 if (std::find(evicted.begin(), evicted.end(), clientDescriptor) != evicted.end()) { 1129 ALOGE("CameraService::connect X (PID %d) rejected (existing client(s) with higher" 1130 " priority).", clientPid); 1131 1132 sp<BasicClient> clientSp = clientDescriptor->getValue(); 1133 String8 curTime = getFormattedCurrentTime(); 1134 auto incompatibleClients = 1135 mActiveClientManager.getIncompatibleClients(clientDescriptor); 1136 1137 String8 msg = String8::format("%s : DENIED connect device %s client for package %s " 1138 "(PID %d, priority %d) due to eviction policy", curTime.string(), 1139 cameraId.string(), packageName.string(), clientPid, 1140 getCameraPriorityFromProcState(priorities[priorities.size() - 1])); 1141 1142 for (auto& i : incompatibleClients) { 1143 msg.appendFormat("\n - Blocked by existing device %s client for package %s" 1144 "(PID %" PRId32 ", priority %" PRId32 ")", i->getKey().string(), 1145 String8{i->getValue()->getPackageName()}.string(), i->getOwnerId(), 1146 i->getPriority()); 1147 ALOGE(" Conflicts with: Device %s, client package %s (PID %" 1148 PRId32 ", priority %" PRId32 ")", i->getKey().string(), 1149 String8{i->getValue()->getPackageName()}.string(), i->getOwnerId(), 1150 i->getPriority()); 1151 } 1152 1153 // Log the client's attempt 1154 Mutex::Autolock l(mLogLock); 1155 mEventLog.add(msg); 1156 1157 return -EBUSY; 1158 } 1159 1160 for (auto& i : evicted) { 1161 sp<BasicClient> clientSp = i->getValue(); 1162 if (clientSp.get() == nullptr) { 1163 ALOGE("%s: Invalid state: Null client in active client list.", __FUNCTION__); 1164 1165 // TODO: Remove this 1166 LOG_ALWAYS_FATAL("%s: Invalid state for CameraService, null client in active list", 1167 __FUNCTION__); 1168 mActiveClientManager.remove(i); 1169 continue; 1170 } 1171 1172 ALOGE("CameraService::connect evicting conflicting client for camera ID %s", 1173 i->getKey().string()); 1174 evictedClients.push_back(i); 1175 1176 // Log the clients evicted 1177 logEvent(String8::format("EVICT device %s client held by package %s (PID" 1178 " %" PRId32 ", priority %" PRId32 ")\n - Evicted by device %s client for" 1179 " package %s (PID %d, priority %" PRId32 ")", 1180 i->getKey().string(), String8{clientSp->getPackageName()}.string(), 1181 i->getOwnerId(), i->getPriority(), cameraId.string(), 1182 packageName.string(), clientPid, 1183 getCameraPriorityFromProcState(priorities[priorities.size() - 1]))); 1184 1185 // Notify the client of disconnection 1186 clientSp->notifyError(hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED, 1187 CaptureResultExtras()); 1188 } 1189 } 1190 1191 // Do not hold mServiceLock while disconnecting clients, but retain the condition blocking 1192 // other clients from connecting in mServiceLockWrapper if held 1193 mServiceLock.unlock(); 1194 1195 // Clear caller identity temporarily so client disconnect PID checks work correctly 1196 int64_t token = IPCThreadState::self()->clearCallingIdentity(); 1197 1198 // Destroy evicted clients 1199 for (auto& i : evictedClients) { 1200 // Disconnect is blocking, and should only have returned when HAL has cleaned up 1201 i->getValue()->disconnect(); // Clients will remove themselves from the active client list 1202 } 1203 1204 IPCThreadState::self()->restoreCallingIdentity(token); 1205 1206 for (const auto& i : evictedClients) { 1207 ALOGV("%s: Waiting for disconnect to complete for client for device %s (PID %" PRId32 ")", 1208 __FUNCTION__, i->getKey().string(), i->getOwnerId()); 1209 ret = mActiveClientManager.waitUntilRemoved(i, DEFAULT_DISCONNECT_TIMEOUT_NS); 1210 if (ret == TIMED_OUT) { 1211 ALOGE("%s: Timed out waiting for client for device %s to disconnect, " 1212 "current clients:\n%s", __FUNCTION__, i->getKey().string(), 1213 mActiveClientManager.toString().string()); 1214 return -EBUSY; 1215 } 1216 if (ret != NO_ERROR) { 1217 ALOGE("%s: Received error waiting for client for device %s to disconnect: %s (%d), " 1218 "current clients:\n%s", __FUNCTION__, i->getKey().string(), strerror(-ret), 1219 ret, mActiveClientManager.toString().string()); 1220 return ret; 1221 } 1222 } 1223 1224 evictedClients.clear(); 1225 1226 // Once clients have been disconnected, relock 1227 mServiceLock.lock(); 1228 1229 // Check again if the device was unplugged or something while we weren't holding mServiceLock 1230 if ((ret = checkIfDeviceIsUsable(cameraId)) != NO_ERROR) { 1231 return ret; 1232 } 1233 1234 *partial = clientDescriptor; 1235 return NO_ERROR; 1236} 1237 1238Status CameraService::connect( 1239 const sp<ICameraClient>& cameraClient, 1240 int cameraId, 1241 const String16& clientPackageName, 1242 int clientUid, 1243 int clientPid, 1244 /*out*/ 1245 sp<ICamera>* device) { 1246 1247 ATRACE_CALL(); 1248 Status ret = Status::ok(); 1249 String8 id = String8::format("%d", cameraId); 1250 sp<Client> client = nullptr; 1251 ret = connectHelper<ICameraClient,Client>(cameraClient, id, 1252 CAMERA_HAL_API_VERSION_UNSPECIFIED, clientPackageName, clientUid, clientPid, API_1, 1253 /*legacyMode*/ false, /*shimUpdateOnly*/ false, 1254 /*out*/client); 1255 1256 if(!ret.isOk()) { 1257 logRejected(id, getCallingPid(), String8(clientPackageName), 1258 ret.toString8()); 1259 return ret; 1260 } 1261 1262 *device = client; 1263 return ret; 1264} 1265 1266Status CameraService::connectLegacy( 1267 const sp<ICameraClient>& cameraClient, 1268 int cameraId, int halVersion, 1269 const String16& clientPackageName, 1270 int clientUid, 1271 /*out*/ 1272 sp<ICamera>* device) { 1273 1274 ATRACE_CALL(); 1275 String8 id = String8::format("%d", cameraId); 1276 int apiVersion = mModule->getModuleApiVersion(); 1277 if (halVersion != CAMERA_HAL_API_VERSION_UNSPECIFIED && 1278 apiVersion < CAMERA_MODULE_API_VERSION_2_3) { 1279 /* 1280 * Either the HAL version is unspecified in which case this just creates 1281 * a camera client selected by the latest device version, or 1282 * it's a particular version in which case the HAL must supported 1283 * the open_legacy call 1284 */ 1285 String8 msg = String8::format("Camera HAL module version %x too old for connectLegacy!", 1286 apiVersion); 1287 ALOGE("%s: %s", 1288 __FUNCTION__, msg.string()); 1289 logRejected(id, getCallingPid(), String8(clientPackageName), 1290 msg); 1291 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, msg.string()); 1292 } 1293 1294 Status ret = Status::ok(); 1295 sp<Client> client = nullptr; 1296 ret = connectHelper<ICameraClient,Client>(cameraClient, id, halVersion, 1297 clientPackageName, clientUid, USE_CALLING_PID, API_1, 1298 /*legacyMode*/ true, /*shimUpdateOnly*/ false, 1299 /*out*/client); 1300 1301 if(!ret.isOk()) { 1302 logRejected(id, getCallingPid(), String8(clientPackageName), 1303 ret.toString8()); 1304 return ret; 1305 } 1306 1307 *device = client; 1308 return ret; 1309} 1310 1311Status CameraService::connectDevice( 1312 const sp<hardware::camera2::ICameraDeviceCallbacks>& cameraCb, 1313 int cameraId, 1314 const String16& clientPackageName, 1315 int clientUid, 1316 /*out*/ 1317 sp<hardware::camera2::ICameraDeviceUser>* device) { 1318 1319 ATRACE_CALL(); 1320 Status ret = Status::ok(); 1321 String8 id = String8::format("%d", cameraId); 1322 sp<CameraDeviceClient> client = nullptr; 1323 ret = connectHelper<hardware::camera2::ICameraDeviceCallbacks,CameraDeviceClient>(cameraCb, id, 1324 CAMERA_HAL_API_VERSION_UNSPECIFIED, clientPackageName, 1325 clientUid, USE_CALLING_PID, API_2, 1326 /*legacyMode*/ false, /*shimUpdateOnly*/ false, 1327 /*out*/client); 1328 1329 if(!ret.isOk()) { 1330 logRejected(id, getCallingPid(), String8(clientPackageName), 1331 ret.toString8()); 1332 return ret; 1333 } 1334 1335 *device = client; 1336 return ret; 1337} 1338 1339Status CameraService::setTorchMode(const String16& cameraId, bool enabled, 1340 const sp<IBinder>& clientBinder) { 1341 1342 ATRACE_CALL(); 1343 if (enabled && clientBinder == nullptr) { 1344 ALOGE("%s: torch client binder is NULL", __FUNCTION__); 1345 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, 1346 "Torch client Binder is null"); 1347 } 1348 1349 String8 id = String8(cameraId.string()); 1350 int uid = getCallingUid(); 1351 1352 // verify id is valid. 1353 auto state = getCameraState(id); 1354 if (state == nullptr) { 1355 ALOGE("%s: camera id is invalid %s", __FUNCTION__, id.string()); 1356 return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT, 1357 "Camera ID \"%s\" is a not valid camera ID", id.string()); 1358 } 1359 1360 int32_t cameraStatus = state->getStatus(); 1361 if (cameraStatus != ICameraServiceListener::STATUS_PRESENT && 1362 cameraStatus != ICameraServiceListener::STATUS_NOT_AVAILABLE) { 1363 ALOGE("%s: camera id is invalid %s", __FUNCTION__, id.string()); 1364 return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT, 1365 "Camera ID \"%s\" is a not valid camera ID", id.string()); 1366 } 1367 1368 { 1369 Mutex::Autolock al(mTorchStatusMutex); 1370 int32_t status; 1371 status_t err = getTorchStatusLocked(id, &status); 1372 if (err != OK) { 1373 if (err == NAME_NOT_FOUND) { 1374 return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT, 1375 "Camera \"%s\" does not have a flash unit", id.string()); 1376 } 1377 ALOGE("%s: getting current torch status failed for camera %s", 1378 __FUNCTION__, id.string()); 1379 return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION, 1380 "Error updating torch status for camera \"%s\": %s (%d)", id.string(), 1381 strerror(-err), err); 1382 } 1383 1384 if (status == ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE) { 1385 if (cameraStatus == ICameraServiceListener::STATUS_NOT_AVAILABLE) { 1386 ALOGE("%s: torch mode of camera %s is not available because " 1387 "camera is in use", __FUNCTION__, id.string()); 1388 return STATUS_ERROR_FMT(ERROR_CAMERA_IN_USE, 1389 "Torch for camera \"%s\" is not available due to an existing camera user", 1390 id.string()); 1391 } else { 1392 ALOGE("%s: torch mode of camera %s is not available due to " 1393 "insufficient resources", __FUNCTION__, id.string()); 1394 return STATUS_ERROR_FMT(ERROR_MAX_CAMERAS_IN_USE, 1395 "Torch for camera \"%s\" is not available due to insufficient resources", 1396 id.string()); 1397 } 1398 } 1399 } 1400 1401 { 1402 // Update UID map - this is used in the torch status changed callbacks, so must be done 1403 // before setTorchMode 1404 Mutex::Autolock al(mTorchUidMapMutex); 1405 if (mTorchUidMap.find(id) == mTorchUidMap.end()) { 1406 mTorchUidMap[id].first = uid; 1407 mTorchUidMap[id].second = uid; 1408 } else { 1409 // Set the pending UID 1410 mTorchUidMap[id].first = uid; 1411 } 1412 } 1413 1414 status_t err = mFlashlight->setTorchMode(id, enabled); 1415 1416 if (err != OK) { 1417 int32_t errorCode; 1418 String8 msg; 1419 switch (err) { 1420 case -ENOSYS: 1421 msg = String8::format("Camera \"%s\" has no flashlight", 1422 id.string()); 1423 errorCode = ERROR_ILLEGAL_ARGUMENT; 1424 break; 1425 default: 1426 msg = String8::format( 1427 "Setting torch mode of camera \"%s\" to %d failed: %s (%d)", 1428 id.string(), enabled, strerror(-err), err); 1429 errorCode = ERROR_INVALID_OPERATION; 1430 } 1431 ALOGE("%s: %s", __FUNCTION__, msg.string()); 1432 return STATUS_ERROR(errorCode, msg.string()); 1433 } 1434 1435 { 1436 // update the link to client's death 1437 Mutex::Autolock al(mTorchClientMapMutex); 1438 ssize_t index = mTorchClientMap.indexOfKey(id); 1439 if (enabled) { 1440 if (index == NAME_NOT_FOUND) { 1441 mTorchClientMap.add(id, clientBinder); 1442 } else { 1443 mTorchClientMap.valueAt(index)->unlinkToDeath(this); 1444 mTorchClientMap.replaceValueAt(index, clientBinder); 1445 } 1446 clientBinder->linkToDeath(this); 1447 } else if (index != NAME_NOT_FOUND) { 1448 mTorchClientMap.valueAt(index)->unlinkToDeath(this); 1449 } 1450 } 1451 1452 return Status::ok(); 1453} 1454 1455Status CameraService::notifySystemEvent(int32_t eventId, 1456 const std::vector<int32_t>& args) { 1457 ATRACE_CALL(); 1458 1459 switch(eventId) { 1460 case ICameraService::EVENT_USER_SWITCHED: { 1461 doUserSwitch(/*newUserIds*/ args); 1462 break; 1463 } 1464 case ICameraService::EVENT_NONE: 1465 default: { 1466 ALOGW("%s: Received invalid system event from system_server: %d", __FUNCTION__, 1467 eventId); 1468 break; 1469 } 1470 } 1471 return Status::ok(); 1472} 1473 1474Status CameraService::addListener(const sp<ICameraServiceListener>& listener) { 1475 ATRACE_CALL(); 1476 1477 ALOGV("%s: Add listener %p", __FUNCTION__, listener.get()); 1478 1479 if (listener == nullptr) { 1480 ALOGE("%s: Listener must not be null", __FUNCTION__); 1481 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Null listener given to addListener"); 1482 } 1483 1484 Mutex::Autolock lock(mServiceLock); 1485 1486 { 1487 Mutex::Autolock lock(mStatusListenerLock); 1488 for (auto& it : mListenerList) { 1489 if (IInterface::asBinder(it) == IInterface::asBinder(listener)) { 1490 ALOGW("%s: Tried to add listener %p which was already subscribed", 1491 __FUNCTION__, listener.get()); 1492 return STATUS_ERROR(ERROR_ALREADY_EXISTS, "Listener already registered"); 1493 } 1494 } 1495 1496 mListenerList.push_back(listener); 1497 } 1498 1499 1500 /* Immediately signal current status to this listener only */ 1501 { 1502 Mutex::Autolock lock(mCameraStatesLock); 1503 for (auto& i : mCameraStates) { 1504 // TODO: Update binder to use String16 for camera IDs and remove; 1505 int id = cameraIdToInt(i.first); 1506 if (id == -1) continue; 1507 1508 listener->onStatusChanged(i.second->getStatus(), id); 1509 } 1510 } 1511 1512 /* Immediately signal current torch status to this listener only */ 1513 { 1514 Mutex::Autolock al(mTorchStatusMutex); 1515 for (size_t i = 0; i < mTorchStatusMap.size(); i++ ) { 1516 String16 id = String16(mTorchStatusMap.keyAt(i).string()); 1517 listener->onTorchStatusChanged(mTorchStatusMap.valueAt(i), id); 1518 } 1519 } 1520 1521 return Status::ok(); 1522} 1523 1524Status CameraService::removeListener(const sp<ICameraServiceListener>& listener) { 1525 ATRACE_CALL(); 1526 1527 ALOGV("%s: Remove listener %p", __FUNCTION__, listener.get()); 1528 1529 if (listener == 0) { 1530 ALOGE("%s: Listener must not be null", __FUNCTION__); 1531 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Null listener given to removeListener"); 1532 } 1533 1534 Mutex::Autolock lock(mServiceLock); 1535 1536 { 1537 Mutex::Autolock lock(mStatusListenerLock); 1538 for (auto it = mListenerList.begin(); it != mListenerList.end(); it++) { 1539 if (IInterface::asBinder(*it) == IInterface::asBinder(listener)) { 1540 mListenerList.erase(it); 1541 return Status::ok(); 1542 } 1543 } 1544 } 1545 1546 ALOGW("%s: Tried to remove a listener %p which was not subscribed", 1547 __FUNCTION__, listener.get()); 1548 1549 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Unregistered listener given to removeListener"); 1550} 1551 1552Status CameraService::getLegacyParameters(int cameraId, /*out*/String16* parameters) { 1553 1554 ATRACE_CALL(); 1555 ALOGV("%s: for camera ID = %d", __FUNCTION__, cameraId); 1556 1557 if (parameters == NULL) { 1558 ALOGE("%s: parameters must not be null", __FUNCTION__); 1559 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Parameters must not be null"); 1560 } 1561 1562 Status ret = Status::ok(); 1563 1564 CameraParameters shimParams; 1565 if (!(ret = getLegacyParametersLazy(cameraId, /*out*/&shimParams)).isOk()) { 1566 // Error logged by caller 1567 return ret; 1568 } 1569 1570 String8 shimParamsString8 = shimParams.flatten(); 1571 String16 shimParamsString16 = String16(shimParamsString8); 1572 1573 *parameters = shimParamsString16; 1574 1575 return ret; 1576} 1577 1578Status CameraService::supportsCameraApi(int cameraId, int apiVersion, bool *isSupported) { 1579 ATRACE_CALL(); 1580 1581 ALOGV("%s: for camera ID = %d", __FUNCTION__, cameraId); 1582 1583 switch (apiVersion) { 1584 case API_VERSION_1: 1585 case API_VERSION_2: 1586 break; 1587 default: 1588 String8 msg = String8::format("Unknown API version %d", apiVersion); 1589 ALOGE("%s: %s", __FUNCTION__, msg.string()); 1590 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, msg.string()); 1591 } 1592 1593 int facing = -1; 1594 int deviceVersion = getDeviceVersion(cameraId, &facing); 1595 1596 switch(deviceVersion) { 1597 case CAMERA_DEVICE_API_VERSION_1_0: 1598 case CAMERA_DEVICE_API_VERSION_3_0: 1599 case CAMERA_DEVICE_API_VERSION_3_1: 1600 if (apiVersion == API_VERSION_2) { 1601 ALOGV("%s: Camera id %d uses HAL version %d <3.2, doesn't support api2 without shim", 1602 __FUNCTION__, cameraId, deviceVersion); 1603 *isSupported = false; 1604 } else { // if (apiVersion == API_VERSION_1) { 1605 ALOGV("%s: Camera id %d uses older HAL before 3.2, but api1 is always supported", 1606 __FUNCTION__, cameraId); 1607 *isSupported = true; 1608 } 1609 break; 1610 case CAMERA_DEVICE_API_VERSION_3_2: 1611 case CAMERA_DEVICE_API_VERSION_3_3: 1612 ALOGV("%s: Camera id %d uses HAL3.2 or newer, supports api1/api2 directly", 1613 __FUNCTION__, cameraId); 1614 *isSupported = true; 1615 break; 1616 case -1: { 1617 String8 msg = String8::format("Unknown camera ID %d", cameraId); 1618 ALOGE("%s: %s", __FUNCTION__, msg.string()); 1619 return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, msg.string()); 1620 } 1621 default: { 1622 String8 msg = String8::format("Unknown device version %d for device %d", 1623 deviceVersion, cameraId); 1624 ALOGE("%s: %s", __FUNCTION__, msg.string()); 1625 return STATUS_ERROR(ERROR_INVALID_OPERATION, msg.string()); 1626 } 1627 } 1628 1629 return Status::ok(); 1630} 1631 1632void CameraService::removeByClient(const BasicClient* client) { 1633 Mutex::Autolock lock(mServiceLock); 1634 for (auto& i : mActiveClientManager.getAll()) { 1635 auto clientSp = i->getValue(); 1636 if (clientSp.get() == client) { 1637 mActiveClientManager.remove(i); 1638 } 1639 } 1640} 1641 1642bool CameraService::evictClientIdByRemote(const wp<IBinder>& remote) { 1643 const int callingPid = getCallingPid(); 1644 const int servicePid = getpid(); 1645 bool ret = false; 1646 { 1647 // Acquire mServiceLock and prevent other clients from connecting 1648 std::unique_ptr<AutoConditionLock> lock = 1649 AutoConditionLock::waitAndAcquire(mServiceLockWrapper); 1650 1651 1652 std::vector<sp<BasicClient>> evicted; 1653 for (auto& i : mActiveClientManager.getAll()) { 1654 auto clientSp = i->getValue(); 1655 if (clientSp.get() == nullptr) { 1656 ALOGE("%s: Dead client still in mActiveClientManager.", __FUNCTION__); 1657 mActiveClientManager.remove(i); 1658 continue; 1659 } 1660 if (remote == clientSp->getRemote() && (callingPid == servicePid || 1661 callingPid == clientSp->getClientPid())) { 1662 mActiveClientManager.remove(i); 1663 evicted.push_back(clientSp); 1664 1665 // Notify the client of disconnection 1666 clientSp->notifyError( 1667 hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED, 1668 CaptureResultExtras()); 1669 } 1670 } 1671 1672 // Do not hold mServiceLock while disconnecting clients, but retain the condition blocking 1673 // other clients from connecting in mServiceLockWrapper if held 1674 mServiceLock.unlock(); 1675 1676 // Do not clear caller identity, remote caller should be client proccess 1677 1678 for (auto& i : evicted) { 1679 if (i.get() != nullptr) { 1680 i->disconnect(); 1681 ret = true; 1682 } 1683 } 1684 1685 // Reacquire mServiceLock 1686 mServiceLock.lock(); 1687 1688 } // lock is destroyed, allow further connect calls 1689 1690 return ret; 1691} 1692 1693 1694/** 1695 * Check camera capabilities, such as support for basic color operation 1696 * Also check that the device HAL version is still in support 1697 */ 1698int CameraService::checkCameraCapabilities(int id, camera_info info, int *latestStrangeCameraId) { 1699 // device_version undefined in CAMERA_MODULE_API_VERSION_1_0, 1700 // All CAMERA_MODULE_API_VERSION_1_0 devices are backward-compatible 1701 if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0) { 1702 // Verify the device version is in the supported range 1703 switch (info.device_version) { 1704 case CAMERA_DEVICE_API_VERSION_1_0: 1705 case CAMERA_DEVICE_API_VERSION_3_0: 1706 case CAMERA_DEVICE_API_VERSION_3_1: 1707 case CAMERA_DEVICE_API_VERSION_3_2: 1708 case CAMERA_DEVICE_API_VERSION_3_3: 1709 // in support 1710 break; 1711 case CAMERA_DEVICE_API_VERSION_2_0: 1712 case CAMERA_DEVICE_API_VERSION_2_1: 1713 // no longer supported 1714 default: 1715 ALOGE("%s: Device %d has HAL version %x, which is not supported", 1716 __FUNCTION__, id, info.device_version); 1717 String8 msg = String8::format( 1718 "Unsupported device HAL version %x for device %d", 1719 info.device_version, id); 1720 logServiceError(msg.string(), NO_INIT); 1721 return NO_INIT; 1722 } 1723 } 1724 1725 // Assume all devices pre-v3.3 are backward-compatible 1726 bool isBackwardCompatible = true; 1727 if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0 1728 && info.device_version >= CAMERA_DEVICE_API_VERSION_3_3) { 1729 isBackwardCompatible = false; 1730 status_t res; 1731 camera_metadata_ro_entry_t caps; 1732 res = find_camera_metadata_ro_entry( 1733 info.static_camera_characteristics, 1734 ANDROID_REQUEST_AVAILABLE_CAPABILITIES, 1735 &caps); 1736 if (res != 0) { 1737 ALOGW("%s: Unable to find camera capabilities for camera device %d", 1738 __FUNCTION__, id); 1739 caps.count = 0; 1740 } 1741 for (size_t i = 0; i < caps.count; i++) { 1742 if (caps.data.u8[i] == 1743 ANDROID_REQUEST_AVAILABLE_CAPABILITIES_BACKWARD_COMPATIBLE) { 1744 isBackwardCompatible = true; 1745 break; 1746 } 1747 } 1748 } 1749 1750 if (!isBackwardCompatible) { 1751 mNumberOfNormalCameras--; 1752 *latestStrangeCameraId = id; 1753 } else { 1754 if (id > *latestStrangeCameraId) { 1755 ALOGE("%s: Normal camera ID %d higher than strange camera ID %d. " 1756 "This is not allowed due backward-compatibility requirements", 1757 __FUNCTION__, id, *latestStrangeCameraId); 1758 logServiceError("Invalid order of camera devices", NO_INIT); 1759 mNumberOfCameras = 0; 1760 mNumberOfNormalCameras = 0; 1761 return NO_INIT; 1762 } 1763 } 1764 return OK; 1765} 1766 1767std::shared_ptr<CameraService::CameraState> CameraService::getCameraState( 1768 const String8& cameraId) const { 1769 std::shared_ptr<CameraState> state; 1770 { 1771 Mutex::Autolock lock(mCameraStatesLock); 1772 auto iter = mCameraStates.find(cameraId); 1773 if (iter != mCameraStates.end()) { 1774 state = iter->second; 1775 } 1776 } 1777 return state; 1778} 1779 1780sp<CameraService::BasicClient> CameraService::removeClientLocked(const String8& cameraId) { 1781 // Remove from active clients list 1782 auto clientDescriptorPtr = mActiveClientManager.remove(cameraId); 1783 if (clientDescriptorPtr == nullptr) { 1784 ALOGW("%s: Could not evict client, no client for camera ID %s", __FUNCTION__, 1785 cameraId.string()); 1786 return sp<BasicClient>{nullptr}; 1787 } 1788 1789 return clientDescriptorPtr->getValue(); 1790} 1791 1792void CameraService::doUserSwitch(const std::vector<int32_t>& newUserIds) { 1793 // Acquire mServiceLock and prevent other clients from connecting 1794 std::unique_ptr<AutoConditionLock> lock = 1795 AutoConditionLock::waitAndAcquire(mServiceLockWrapper); 1796 1797 std::set<userid_t> newAllowedUsers; 1798 for (size_t i = 0; i < newUserIds.size(); i++) { 1799 if (newUserIds[i] < 0) { 1800 ALOGE("%s: Bad user ID %d given during user switch, ignoring.", 1801 __FUNCTION__, newUserIds[i]); 1802 return; 1803 } 1804 newAllowedUsers.insert(static_cast<userid_t>(newUserIds[i])); 1805 } 1806 1807 1808 if (newAllowedUsers == mAllowedUsers) { 1809 ALOGW("%s: Received notification of user switch with no updated user IDs.", __FUNCTION__); 1810 return; 1811 } 1812 1813 logUserSwitch(mAllowedUsers, newAllowedUsers); 1814 1815 mAllowedUsers = std::move(newAllowedUsers); 1816 1817 // Current user has switched, evict all current clients. 1818 std::vector<sp<BasicClient>> evicted; 1819 for (auto& i : mActiveClientManager.getAll()) { 1820 auto clientSp = i->getValue(); 1821 1822 if (clientSp.get() == nullptr) { 1823 ALOGE("%s: Dead client still in mActiveClientManager.", __FUNCTION__); 1824 continue; 1825 } 1826 1827 // Don't evict clients that are still allowed. 1828 uid_t clientUid = clientSp->getClientUid(); 1829 userid_t clientUserId = multiuser_get_user_id(clientUid); 1830 if (mAllowedUsers.find(clientUserId) != mAllowedUsers.end()) { 1831 continue; 1832 } 1833 1834 evicted.push_back(clientSp); 1835 1836 String8 curTime = getFormattedCurrentTime(); 1837 1838 ALOGE("Evicting conflicting client for camera ID %s due to user change", 1839 i->getKey().string()); 1840 1841 // Log the clients evicted 1842 logEvent(String8::format("EVICT device %s client held by package %s (PID %" 1843 PRId32 ", priority %" PRId32 ")\n - Evicted due to user switch.", 1844 i->getKey().string(), String8{clientSp->getPackageName()}.string(), 1845 i->getOwnerId(), i->getPriority())); 1846 1847 } 1848 1849 // Do not hold mServiceLock while disconnecting clients, but retain the condition 1850 // blocking other clients from connecting in mServiceLockWrapper if held. 1851 mServiceLock.unlock(); 1852 1853 // Clear caller identity temporarily so client disconnect PID checks work correctly 1854 int64_t token = IPCThreadState::self()->clearCallingIdentity(); 1855 1856 for (auto& i : evicted) { 1857 i->disconnect(); 1858 } 1859 1860 IPCThreadState::self()->restoreCallingIdentity(token); 1861 1862 // Reacquire mServiceLock 1863 mServiceLock.lock(); 1864} 1865 1866void CameraService::logEvent(const char* event) { 1867 String8 curTime = getFormattedCurrentTime(); 1868 Mutex::Autolock l(mLogLock); 1869 mEventLog.add(String8::format("%s : %s", curTime.string(), event)); 1870} 1871 1872void CameraService::logDisconnected(const char* cameraId, int clientPid, 1873 const char* clientPackage) { 1874 // Log the clients evicted 1875 logEvent(String8::format("DISCONNECT device %s client for package %s (PID %d)", cameraId, 1876 clientPackage, clientPid)); 1877} 1878 1879void CameraService::logConnected(const char* cameraId, int clientPid, 1880 const char* clientPackage) { 1881 // Log the clients evicted 1882 logEvent(String8::format("CONNECT device %s client for package %s (PID %d)", cameraId, 1883 clientPackage, clientPid)); 1884} 1885 1886void CameraService::logRejected(const char* cameraId, int clientPid, 1887 const char* clientPackage, const char* reason) { 1888 // Log the client rejected 1889 logEvent(String8::format("REJECT device %s client for package %s (PID %d), reason: (%s)", 1890 cameraId, clientPackage, clientPid, reason)); 1891} 1892 1893void CameraService::logUserSwitch(const std::set<userid_t>& oldUserIds, 1894 const std::set<userid_t>& newUserIds) { 1895 String8 newUsers = toString(newUserIds); 1896 String8 oldUsers = toString(oldUserIds); 1897 // Log the new and old users 1898 logEvent(String8::format("USER_SWITCH previous allowed users: %s , current allowed users: %s", 1899 oldUsers.string(), newUsers.string())); 1900} 1901 1902void CameraService::logDeviceRemoved(const char* cameraId, const char* reason) { 1903 // Log the device removal 1904 logEvent(String8::format("REMOVE device %s, reason: (%s)", cameraId, reason)); 1905} 1906 1907void CameraService::logDeviceAdded(const char* cameraId, const char* reason) { 1908 // Log the device removal 1909 logEvent(String8::format("ADD device %s, reason: (%s)", cameraId, reason)); 1910} 1911 1912void CameraService::logClientDied(int clientPid, const char* reason) { 1913 // Log the device removal 1914 logEvent(String8::format("DIED client(s) with PID %d, reason: (%s)", clientPid, reason)); 1915} 1916 1917void CameraService::logServiceError(const char* msg, int errorCode) { 1918 String8 curTime = getFormattedCurrentTime(); 1919 logEvent(String8::format("SERVICE ERROR: %s : %d (%s)", msg, errorCode, strerror(-errorCode))); 1920} 1921 1922status_t CameraService::onTransact(uint32_t code, const Parcel& data, Parcel* reply, 1923 uint32_t flags) { 1924 1925 const int pid = getCallingPid(); 1926 const int selfPid = getpid(); 1927 1928 // Permission checks 1929 switch (code) { 1930 case BnCameraService::NOTIFYSYSTEMEVENT: { 1931 if (pid != selfPid) { 1932 // Ensure we're being called by system_server, or similar process with 1933 // permissions to notify the camera service about system events 1934 if (!checkCallingPermission( 1935 String16("android.permission.CAMERA_SEND_SYSTEM_EVENTS"))) { 1936 const int uid = getCallingUid(); 1937 ALOGE("Permission Denial: cannot send updates to camera service about system" 1938 " events from pid=%d, uid=%d", pid, uid); 1939 return PERMISSION_DENIED; 1940 } 1941 } 1942 break; 1943 } 1944 } 1945 1946 return BnCameraService::onTransact(code, data, reply, flags); 1947} 1948 1949// We share the media players for shutter and recording sound for all clients. 1950// A reference count is kept to determine when we will actually release the 1951// media players. 1952 1953MediaPlayer* CameraService::newMediaPlayer(const char *file) { 1954 MediaPlayer* mp = new MediaPlayer(); 1955 if (mp->setDataSource(NULL /* httpService */, file, NULL) == NO_ERROR) { 1956 mp->setAudioStreamType(AUDIO_STREAM_ENFORCED_AUDIBLE); 1957 mp->prepare(); 1958 } else { 1959 ALOGE("Failed to load CameraService sounds: %s", file); 1960 return NULL; 1961 } 1962 return mp; 1963} 1964 1965void CameraService::loadSound() { 1966 ATRACE_CALL(); 1967 1968 Mutex::Autolock lock(mSoundLock); 1969 LOG1("CameraService::loadSound ref=%d", mSoundRef); 1970 if (mSoundRef++) return; 1971 1972 mSoundPlayer[SOUND_SHUTTER] = newMediaPlayer("/system/media/audio/ui/camera_click.ogg"); 1973 mSoundPlayer[SOUND_RECORDING_START] = newMediaPlayer("/system/media/audio/ui/VideoRecord.ogg"); 1974 mSoundPlayer[SOUND_RECORDING_STOP] = newMediaPlayer("/system/media/audio/ui/VideoStop.ogg"); 1975} 1976 1977void CameraService::releaseSound() { 1978 Mutex::Autolock lock(mSoundLock); 1979 LOG1("CameraService::releaseSound ref=%d", mSoundRef); 1980 if (--mSoundRef) return; 1981 1982 for (int i = 0; i < NUM_SOUNDS; i++) { 1983 if (mSoundPlayer[i] != 0) { 1984 mSoundPlayer[i]->disconnect(); 1985 mSoundPlayer[i].clear(); 1986 } 1987 } 1988} 1989 1990void CameraService::playSound(sound_kind kind) { 1991 ATRACE_CALL(); 1992 1993 LOG1("playSound(%d)", kind); 1994 Mutex::Autolock lock(mSoundLock); 1995 sp<MediaPlayer> player = mSoundPlayer[kind]; 1996 if (player != 0) { 1997 player->seekTo(0); 1998 player->start(); 1999 } 2000} 2001 2002// ---------------------------------------------------------------------------- 2003 2004CameraService::Client::Client(const sp<CameraService>& cameraService, 2005 const sp<ICameraClient>& cameraClient, 2006 const String16& clientPackageName, 2007 int cameraId, int cameraFacing, 2008 int clientPid, uid_t clientUid, 2009 int servicePid) : 2010 CameraService::BasicClient(cameraService, 2011 IInterface::asBinder(cameraClient), 2012 clientPackageName, 2013 cameraId, cameraFacing, 2014 clientPid, clientUid, 2015 servicePid) 2016{ 2017 int callingPid = getCallingPid(); 2018 LOG1("Client::Client E (pid %d, id %d)", callingPid, cameraId); 2019 2020 mRemoteCallback = cameraClient; 2021 2022 cameraService->loadSound(); 2023 2024 LOG1("Client::Client X (pid %d, id %d)", callingPid, cameraId); 2025} 2026 2027// tear down the client 2028CameraService::Client::~Client() { 2029 ALOGV("~Client"); 2030 mDestructionStarted = true; 2031 2032 mCameraService->releaseSound(); 2033 // unconditionally disconnect. function is idempotent 2034 Client::disconnect(); 2035} 2036 2037CameraService::BasicClient::BasicClient(const sp<CameraService>& cameraService, 2038 const sp<IBinder>& remoteCallback, 2039 const String16& clientPackageName, 2040 int cameraId, int cameraFacing, 2041 int clientPid, uid_t clientUid, 2042 int servicePid): 2043 mClientPackageName(clientPackageName), mDisconnected(false) 2044{ 2045 mCameraService = cameraService; 2046 mRemoteBinder = remoteCallback; 2047 mCameraId = cameraId; 2048 mCameraFacing = cameraFacing; 2049 mClientPid = clientPid; 2050 mClientUid = clientUid; 2051 mServicePid = servicePid; 2052 mOpsActive = false; 2053 mDestructionStarted = false; 2054 2055 // In some cases the calling code has no access to the package it runs under. 2056 // For example, NDK camera API. 2057 // In this case we will get the packages for the calling UID and pick the first one 2058 // for attributing the app op. This will work correctly for runtime permissions 2059 // as for legacy apps we will toggle the app op for all packages in the UID. 2060 // The caveat is that the operation may be attributed to the wrong package and 2061 // stats based on app ops may be slightly off. 2062 if (mClientPackageName.size() <= 0) { 2063 sp<IServiceManager> sm = defaultServiceManager(); 2064 sp<IBinder> binder = sm->getService(String16(kPermissionServiceName)); 2065 if (binder == 0) { 2066 ALOGE("Cannot get permission service"); 2067 // Leave mClientPackageName unchanged (empty) and the further interaction 2068 // with camera will fail in BasicClient::startCameraOps 2069 return; 2070 } 2071 2072 sp<IPermissionController> permCtrl = interface_cast<IPermissionController>(binder); 2073 Vector<String16> packages; 2074 2075 permCtrl->getPackagesForUid(mClientUid, packages); 2076 2077 if (packages.isEmpty()) { 2078 ALOGE("No packages for calling UID"); 2079 // Leave mClientPackageName unchanged (empty) and the further interaction 2080 // with camera will fail in BasicClient::startCameraOps 2081 return; 2082 } 2083 mClientPackageName = packages[0]; 2084 } 2085} 2086 2087CameraService::BasicClient::~BasicClient() { 2088 ALOGV("~BasicClient"); 2089 mDestructionStarted = true; 2090} 2091 2092binder::Status CameraService::BasicClient::disconnect() { 2093 binder::Status res = Status::ok(); 2094 if (mDisconnected) { 2095 return res; 2096 } 2097 mDisconnected = true; 2098 2099 mCameraService->removeByClient(this); 2100 mCameraService->logDisconnected(String8::format("%d", mCameraId), mClientPid, 2101 String8(mClientPackageName)); 2102 2103 sp<IBinder> remote = getRemote(); 2104 if (remote != nullptr) { 2105 remote->unlinkToDeath(mCameraService); 2106 } 2107 2108 finishCameraOps(); 2109 ALOGI("%s: Disconnected client for camera %d for PID %d", __FUNCTION__, mCameraId, mClientPid); 2110 2111 // client shouldn't be able to call into us anymore 2112 mClientPid = 0; 2113 2114 return res; 2115} 2116 2117status_t CameraService::BasicClient::dump(int, const Vector<String16>&) { 2118 // No dumping of clients directly over Binder, 2119 // must go through CameraService::dump 2120 android_errorWriteWithInfoLog(SN_EVENT_LOG_ID, "26265403", 2121 IPCThreadState::self()->getCallingUid(), NULL, 0); 2122 return OK; 2123} 2124 2125String16 CameraService::BasicClient::getPackageName() const { 2126 return mClientPackageName; 2127} 2128 2129 2130int CameraService::BasicClient::getClientPid() const { 2131 return mClientPid; 2132} 2133 2134uid_t CameraService::BasicClient::getClientUid() const { 2135 return mClientUid; 2136} 2137 2138bool CameraService::BasicClient::canCastToApiClient(apiLevel level) const { 2139 // Defaults to API2. 2140 return level == API_2; 2141} 2142 2143status_t CameraService::BasicClient::startCameraOps() { 2144 ATRACE_CALL(); 2145 2146 int32_t res; 2147 // Notify app ops that the camera is not available 2148 mOpsCallback = new OpsCallback(this); 2149 2150 { 2151 ALOGV("%s: Start camera ops, package name = %s, client UID = %d", 2152 __FUNCTION__, String8(mClientPackageName).string(), mClientUid); 2153 } 2154 2155 mAppOpsManager.startWatchingMode(AppOpsManager::OP_CAMERA, 2156 mClientPackageName, mOpsCallback); 2157 res = mAppOpsManager.startOp(AppOpsManager::OP_CAMERA, 2158 mClientUid, mClientPackageName); 2159 2160 if (res == AppOpsManager::MODE_ERRORED) { 2161 ALOGI("Camera %d: Access for \"%s\" has been revoked", 2162 mCameraId, String8(mClientPackageName).string()); 2163 return PERMISSION_DENIED; 2164 } 2165 2166 if (res == AppOpsManager::MODE_IGNORED) { 2167 ALOGI("Camera %d: Access for \"%s\" has been restricted", 2168 mCameraId, String8(mClientPackageName).string()); 2169 // Return the same error as for device policy manager rejection 2170 return -EACCES; 2171 } 2172 2173 mOpsActive = true; 2174 2175 // Transition device availability listeners from PRESENT -> NOT_AVAILABLE 2176 mCameraService->updateStatus(ICameraServiceListener::STATUS_NOT_AVAILABLE, 2177 String8::format("%d", mCameraId)); 2178 2179 // Transition device state to OPEN 2180 mCameraService->updateProxyDeviceState(ICameraServiceProxy::CAMERA_STATE_OPEN, 2181 String8::format("%d", mCameraId)); 2182 2183 return OK; 2184} 2185 2186status_t CameraService::BasicClient::finishCameraOps() { 2187 ATRACE_CALL(); 2188 2189 // Check if startCameraOps succeeded, and if so, finish the camera op 2190 if (mOpsActive) { 2191 // Notify app ops that the camera is available again 2192 mAppOpsManager.finishOp(AppOpsManager::OP_CAMERA, mClientUid, 2193 mClientPackageName); 2194 mOpsActive = false; 2195 2196 std::initializer_list<int32_t> rejected = {ICameraServiceListener::STATUS_NOT_PRESENT, 2197 ICameraServiceListener::STATUS_ENUMERATING}; 2198 2199 // Transition to PRESENT if the camera is not in either of the rejected states 2200 mCameraService->updateStatus(ICameraServiceListener::STATUS_PRESENT, 2201 String8::format("%d", mCameraId), rejected); 2202 2203 // Transition device state to CLOSED 2204 mCameraService->updateProxyDeviceState(ICameraServiceProxy::CAMERA_STATE_CLOSED, 2205 String8::format("%d", mCameraId)); 2206 2207 // Notify flashlight that a camera device is closed. 2208 mCameraService->mFlashlight->deviceClosed( 2209 String8::format("%d", mCameraId)); 2210 } 2211 // Always stop watching, even if no camera op is active 2212 if (mOpsCallback != NULL) { 2213 mAppOpsManager.stopWatchingMode(mOpsCallback); 2214 } 2215 mOpsCallback.clear(); 2216 2217 return OK; 2218} 2219 2220void CameraService::BasicClient::opChanged(int32_t op, const String16& packageName) { 2221 ATRACE_CALL(); 2222 2223 String8 name(packageName); 2224 String8 myName(mClientPackageName); 2225 2226 if (op != AppOpsManager::OP_CAMERA) { 2227 ALOGW("Unexpected app ops notification received: %d", op); 2228 return; 2229 } 2230 2231 int32_t res; 2232 res = mAppOpsManager.checkOp(AppOpsManager::OP_CAMERA, 2233 mClientUid, mClientPackageName); 2234 ALOGV("checkOp returns: %d, %s ", res, 2235 res == AppOpsManager::MODE_ALLOWED ? "ALLOWED" : 2236 res == AppOpsManager::MODE_IGNORED ? "IGNORED" : 2237 res == AppOpsManager::MODE_ERRORED ? "ERRORED" : 2238 "UNKNOWN"); 2239 2240 if (res != AppOpsManager::MODE_ALLOWED) { 2241 ALOGI("Camera %d: Access for \"%s\" revoked", mCameraId, 2242 myName.string()); 2243 // Reset the client PID to allow server-initiated disconnect, 2244 // and to prevent further calls by client. 2245 mClientPid = getCallingPid(); 2246 CaptureResultExtras resultExtras; // a dummy result (invalid) 2247 notifyError(hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_SERVICE, resultExtras); 2248 disconnect(); 2249 } 2250} 2251 2252// ---------------------------------------------------------------------------- 2253 2254// Provide client strong pointer for callbacks. 2255sp<CameraService::Client> CameraService::Client::getClientFromCookie(void* user) { 2256 String8 cameraId = String8::format("%d", (int)(intptr_t) user); 2257 auto clientDescriptor = gCameraService->mActiveClientManager.get(cameraId); 2258 if (clientDescriptor != nullptr) { 2259 return sp<Client>{ 2260 static_cast<Client*>(clientDescriptor->getValue().get())}; 2261 } 2262 return sp<Client>{nullptr}; 2263} 2264 2265void CameraService::Client::notifyError(int32_t errorCode, 2266 const CaptureResultExtras& resultExtras) { 2267 (void) errorCode; 2268 (void) resultExtras; 2269 if (mRemoteCallback != NULL) { 2270 mRemoteCallback->notifyCallback(CAMERA_MSG_ERROR, CAMERA_ERROR_RELEASED, 0); 2271 } else { 2272 ALOGE("mRemoteCallback is NULL!!"); 2273 } 2274} 2275 2276// NOTE: function is idempotent 2277binder::Status CameraService::Client::disconnect() { 2278 ALOGV("Client::disconnect"); 2279 return BasicClient::disconnect(); 2280} 2281 2282bool CameraService::Client::canCastToApiClient(apiLevel level) const { 2283 return level == API_1; 2284} 2285 2286CameraService::Client::OpsCallback::OpsCallback(wp<BasicClient> client): 2287 mClient(client) { 2288} 2289 2290void CameraService::Client::OpsCallback::opChanged(int32_t op, 2291 const String16& packageName) { 2292 sp<BasicClient> client = mClient.promote(); 2293 if (client != NULL) { 2294 client->opChanged(op, packageName); 2295 } 2296} 2297 2298// ---------------------------------------------------------------------------- 2299// CameraState 2300// ---------------------------------------------------------------------------- 2301 2302CameraService::CameraState::CameraState(const String8& id, int cost, 2303 const std::set<String8>& conflicting) : mId(id), 2304 mStatus(ICameraServiceListener::STATUS_PRESENT), mCost(cost), mConflicting(conflicting) {} 2305 2306CameraService::CameraState::~CameraState() {} 2307 2308int32_t CameraService::CameraState::getStatus() const { 2309 Mutex::Autolock lock(mStatusLock); 2310 return mStatus; 2311} 2312 2313CameraParameters CameraService::CameraState::getShimParams() const { 2314 return mShimParams; 2315} 2316 2317void CameraService::CameraState::setShimParams(const CameraParameters& params) { 2318 mShimParams = params; 2319} 2320 2321int CameraService::CameraState::getCost() const { 2322 return mCost; 2323} 2324 2325std::set<String8> CameraService::CameraState::getConflicting() const { 2326 return mConflicting; 2327} 2328 2329String8 CameraService::CameraState::getId() const { 2330 return mId; 2331} 2332 2333// ---------------------------------------------------------------------------- 2334// ClientEventListener 2335// ---------------------------------------------------------------------------- 2336 2337void CameraService::ClientEventListener::onClientAdded( 2338 const resource_policy::ClientDescriptor<String8, 2339 sp<CameraService::BasicClient>>& descriptor) { 2340 auto basicClient = descriptor.getValue(); 2341 if (basicClient.get() != nullptr) { 2342 BatteryNotifier& notifier(BatteryNotifier::getInstance()); 2343 notifier.noteStartCamera(descriptor.getKey(), 2344 static_cast<int>(basicClient->getClientUid())); 2345 } 2346} 2347 2348void CameraService::ClientEventListener::onClientRemoved( 2349 const resource_policy::ClientDescriptor<String8, 2350 sp<CameraService::BasicClient>>& descriptor) { 2351 auto basicClient = descriptor.getValue(); 2352 if (basicClient.get() != nullptr) { 2353 BatteryNotifier& notifier(BatteryNotifier::getInstance()); 2354 notifier.noteStopCamera(descriptor.getKey(), 2355 static_cast<int>(basicClient->getClientUid())); 2356 } 2357} 2358 2359 2360// ---------------------------------------------------------------------------- 2361// CameraClientManager 2362// ---------------------------------------------------------------------------- 2363 2364CameraService::CameraClientManager::CameraClientManager() { 2365 setListener(std::make_shared<ClientEventListener>()); 2366} 2367 2368CameraService::CameraClientManager::~CameraClientManager() {} 2369 2370sp<CameraService::BasicClient> CameraService::CameraClientManager::getCameraClient( 2371 const String8& id) const { 2372 auto descriptor = get(id); 2373 if (descriptor == nullptr) { 2374 return sp<BasicClient>{nullptr}; 2375 } 2376 return descriptor->getValue(); 2377} 2378 2379String8 CameraService::CameraClientManager::toString() const { 2380 auto all = getAll(); 2381 String8 ret("["); 2382 bool hasAny = false; 2383 for (auto& i : all) { 2384 hasAny = true; 2385 String8 key = i->getKey(); 2386 int32_t cost = i->getCost(); 2387 int32_t pid = i->getOwnerId(); 2388 int32_t priority = i->getPriority(); 2389 auto conflicting = i->getConflicting(); 2390 auto clientSp = i->getValue(); 2391 String8 packageName; 2392 userid_t clientUserId = 0; 2393 if (clientSp.get() != nullptr) { 2394 packageName = String8{clientSp->getPackageName()}; 2395 uid_t clientUid = clientSp->getClientUid(); 2396 clientUserId = multiuser_get_user_id(clientUid); 2397 } 2398 ret.appendFormat("\n(Camera ID: %s, Cost: %" PRId32 ", PID: %" PRId32 ", Priority: %" 2399 PRId32 ", ", key.string(), cost, pid, priority); 2400 2401 if (clientSp.get() != nullptr) { 2402 ret.appendFormat("User Id: %d, ", clientUserId); 2403 } 2404 if (packageName.size() != 0) { 2405 ret.appendFormat("Client Package Name: %s", packageName.string()); 2406 } 2407 2408 ret.append(", Conflicting Client Devices: {"); 2409 for (auto& j : conflicting) { 2410 ret.appendFormat("%s, ", j.string()); 2411 } 2412 ret.append("})"); 2413 } 2414 if (hasAny) ret.append("\n"); 2415 ret.append("]\n"); 2416 return ret; 2417} 2418 2419CameraService::DescriptorPtr CameraService::CameraClientManager::makeClientDescriptor( 2420 const String8& key, const sp<BasicClient>& value, int32_t cost, 2421 const std::set<String8>& conflictingKeys, int32_t priority, int32_t ownerId) { 2422 2423 return std::make_shared<resource_policy::ClientDescriptor<String8, sp<BasicClient>>>( 2424 key, value, cost, conflictingKeys, priority, ownerId); 2425} 2426 2427CameraService::DescriptorPtr CameraService::CameraClientManager::makeClientDescriptor( 2428 const sp<BasicClient>& value, const CameraService::DescriptorPtr& partial) { 2429 return makeClientDescriptor(partial->getKey(), value, partial->getCost(), 2430 partial->getConflicting(), partial->getPriority(), partial->getOwnerId()); 2431} 2432 2433// ---------------------------------------------------------------------------- 2434 2435static const int kDumpLockRetries = 50; 2436static const int kDumpLockSleep = 60000; 2437 2438static bool tryLock(Mutex& mutex) 2439{ 2440 bool locked = false; 2441 for (int i = 0; i < kDumpLockRetries; ++i) { 2442 if (mutex.tryLock() == NO_ERROR) { 2443 locked = true; 2444 break; 2445 } 2446 usleep(kDumpLockSleep); 2447 } 2448 return locked; 2449} 2450 2451status_t CameraService::dump(int fd, const Vector<String16>& args) { 2452 ATRACE_CALL(); 2453 2454 String8 result("Dump of the Camera Service:\n"); 2455 if (checkCallingPermission(String16("android.permission.DUMP")) == false) { 2456 result = result.format("Permission Denial: " 2457 "can't dump CameraService from pid=%d, uid=%d\n", 2458 getCallingPid(), 2459 getCallingUid()); 2460 write(fd, result.string(), result.size()); 2461 } else { 2462 bool locked = tryLock(mServiceLock); 2463 // failed to lock - CameraService is probably deadlocked 2464 if (!locked) { 2465 result.append("CameraService may be deadlocked\n"); 2466 write(fd, result.string(), result.size()); 2467 } 2468 2469 bool hasClient = false; 2470 if (!mModule) { 2471 result = String8::format("No camera module available!\n"); 2472 write(fd, result.string(), result.size()); 2473 2474 // Dump event log for error information 2475 dumpEventLog(fd); 2476 2477 if (locked) mServiceLock.unlock(); 2478 return NO_ERROR; 2479 } 2480 2481 result = String8::format("Camera module HAL API version: 0x%x\n", mModule->getHalApiVersion()); 2482 result.appendFormat("Camera module API version: 0x%x\n", mModule->getModuleApiVersion()); 2483 result.appendFormat("Camera module name: %s\n", mModule->getModuleName()); 2484 result.appendFormat("Camera module author: %s\n", mModule->getModuleAuthor()); 2485 result.appendFormat("Number of camera devices: %d\n", mNumberOfCameras); 2486 result.appendFormat("Number of normal camera devices: %d\n", mNumberOfNormalCameras); 2487 String8 activeClientString = mActiveClientManager.toString(); 2488 result.appendFormat("Active Camera Clients:\n%s", activeClientString.string()); 2489 result.appendFormat("Allowed users:\n%s\n", toString(mAllowedUsers).string()); 2490 2491 sp<VendorTagDescriptor> desc = VendorTagDescriptor::getGlobalVendorTagDescriptor(); 2492 if (desc == NULL) { 2493 result.appendFormat("Vendor tags left unimplemented.\n"); 2494 } else { 2495 result.appendFormat("Vendor tag definitions:\n"); 2496 } 2497 2498 write(fd, result.string(), result.size()); 2499 2500 if (desc != NULL) { 2501 desc->dump(fd, /*verbosity*/2, /*indentation*/4); 2502 } 2503 2504 dumpEventLog(fd); 2505 2506 bool stateLocked = tryLock(mCameraStatesLock); 2507 if (!stateLocked) { 2508 result = String8::format("CameraStates in use, may be deadlocked\n"); 2509 write(fd, result.string(), result.size()); 2510 } 2511 2512 for (auto& state : mCameraStates) { 2513 String8 cameraId = state.first; 2514 result = String8::format("Camera %s information:\n", cameraId.string()); 2515 camera_info info; 2516 2517 // TODO: Change getCameraInfo + HAL to use String cameraIds 2518 status_t rc = mModule->getCameraInfo(cameraIdToInt(cameraId), &info); 2519 if (rc != OK) { 2520 result.appendFormat(" Error reading static information!\n"); 2521 write(fd, result.string(), result.size()); 2522 } else { 2523 result.appendFormat(" Facing: %s\n", 2524 info.facing == CAMERA_FACING_BACK ? "BACK" : "FRONT"); 2525 result.appendFormat(" Orientation: %d\n", info.orientation); 2526 int deviceVersion; 2527 if (mModule->getModuleApiVersion() < CAMERA_MODULE_API_VERSION_2_0) { 2528 deviceVersion = CAMERA_DEVICE_API_VERSION_1_0; 2529 } else { 2530 deviceVersion = info.device_version; 2531 } 2532 2533 auto conflicting = state.second->getConflicting(); 2534 result.appendFormat(" Resource Cost: %d\n", state.second->getCost()); 2535 result.appendFormat(" Conflicting Devices:"); 2536 for (auto& id : conflicting) { 2537 result.appendFormat(" %s", id.string()); 2538 } 2539 if (conflicting.size() == 0) { 2540 result.appendFormat(" NONE"); 2541 } 2542 result.appendFormat("\n"); 2543 2544 result.appendFormat(" Device version: %#x\n", deviceVersion); 2545 if (deviceVersion >= CAMERA_DEVICE_API_VERSION_3_0) { 2546 result.appendFormat(" Device static metadata:\n"); 2547 write(fd, result.string(), result.size()); 2548 dump_indented_camera_metadata(info.static_camera_characteristics, 2549 fd, /*verbosity*/2, /*indentation*/4); 2550 } else { 2551 write(fd, result.string(), result.size()); 2552 } 2553 2554 CameraParameters p = state.second->getShimParams(); 2555 if (!p.isEmpty()) { 2556 result = String8::format(" Camera1 API shim is using parameters:\n "); 2557 write(fd, result.string(), result.size()); 2558 p.dump(fd, args); 2559 } 2560 } 2561 2562 auto clientDescriptor = mActiveClientManager.get(cameraId); 2563 if (clientDescriptor == nullptr) { 2564 result = String8::format(" Device %s is closed, no client instance\n", 2565 cameraId.string()); 2566 write(fd, result.string(), result.size()); 2567 continue; 2568 } 2569 hasClient = true; 2570 result = String8::format(" Device %s is open. Client instance dump:\n\n", 2571 cameraId.string()); 2572 result.appendFormat("Client priority level: %d\n", clientDescriptor->getPriority()); 2573 result.appendFormat("Client PID: %d\n", clientDescriptor->getOwnerId()); 2574 2575 auto client = clientDescriptor->getValue(); 2576 result.appendFormat("Client package: %s\n", 2577 String8(client->getPackageName()).string()); 2578 write(fd, result.string(), result.size()); 2579 2580 client->dumpClient(fd, args); 2581 } 2582 2583 if (stateLocked) mCameraStatesLock.unlock(); 2584 2585 if (!hasClient) { 2586 result = String8::format("\nNo active camera clients yet.\n"); 2587 write(fd, result.string(), result.size()); 2588 } 2589 2590 if (locked) mServiceLock.unlock(); 2591 2592 // Dump camera traces if there were any 2593 write(fd, "\n", 1); 2594 camera3::CameraTraces::dump(fd, args); 2595 2596 // change logging level 2597 int n = args.size(); 2598 for (int i = 0; i + 1 < n; i++) { 2599 String16 verboseOption("-v"); 2600 if (args[i] == verboseOption) { 2601 String8 levelStr(args[i+1]); 2602 int level = atoi(levelStr.string()); 2603 result = String8::format("\nSetting log level to %d.\n", level); 2604 setLogLevel(level); 2605 write(fd, result.string(), result.size()); 2606 } 2607 } 2608 } 2609 return NO_ERROR; 2610} 2611 2612void CameraService::dumpEventLog(int fd) { 2613 String8 result = String8("\nPrior client events (most recent at top):\n"); 2614 2615 Mutex::Autolock l(mLogLock); 2616 for (const auto& msg : mEventLog) { 2617 result.appendFormat(" %s\n", msg.string()); 2618 } 2619 2620 if (mEventLog.size() == DEFAULT_EVENT_LOG_LENGTH) { 2621 result.append(" ...\n"); 2622 } else if (mEventLog.size() == 0) { 2623 result.append(" [no events yet]\n"); 2624 } 2625 result.append("\n"); 2626 2627 write(fd, result.string(), result.size()); 2628} 2629 2630void CameraService::handleTorchClientBinderDied(const wp<IBinder> &who) { 2631 Mutex::Autolock al(mTorchClientMapMutex); 2632 for (size_t i = 0; i < mTorchClientMap.size(); i++) { 2633 if (mTorchClientMap[i] == who) { 2634 // turn off the torch mode that was turned on by dead client 2635 String8 cameraId = mTorchClientMap.keyAt(i); 2636 status_t res = mFlashlight->setTorchMode(cameraId, false); 2637 if (res) { 2638 ALOGE("%s: torch client died but couldn't turn off torch: " 2639 "%s (%d)", __FUNCTION__, strerror(-res), res); 2640 return; 2641 } 2642 mTorchClientMap.removeItemsAt(i); 2643 break; 2644 } 2645 } 2646} 2647 2648/*virtual*/void CameraService::binderDied(const wp<IBinder> &who) { 2649 2650 /** 2651 * While tempting to promote the wp<IBinder> into a sp, it's actually not supported by the 2652 * binder driver 2653 */ 2654 2655 logClientDied(getCallingPid(), String8("Binder died unexpectedly")); 2656 2657 // check torch client 2658 handleTorchClientBinderDied(who); 2659 2660 // check camera device client 2661 if(!evictClientIdByRemote(who)) { 2662 ALOGV("%s: Java client's binder death already cleaned up (normal case)", __FUNCTION__); 2663 return; 2664 } 2665 2666 ALOGE("%s: Java client's binder died, removing it from the list of active clients", 2667 __FUNCTION__); 2668} 2669 2670void CameraService::updateStatus(int32_t status, const String8& cameraId) { 2671 updateStatus(status, cameraId, {}); 2672} 2673 2674void CameraService::updateStatus(int32_t status, const String8& cameraId, 2675 std::initializer_list<int32_t> rejectSourceStates) { 2676 // Do not lock mServiceLock here or can get into a deadlock from 2677 // connect() -> disconnect -> updateStatus 2678 2679 auto state = getCameraState(cameraId); 2680 2681 if (state == nullptr) { 2682 ALOGW("%s: Could not update the status for %s, no such device exists", __FUNCTION__, 2683 cameraId.string()); 2684 return; 2685 } 2686 2687 // Update the status for this camera state, then send the onStatusChangedCallbacks to each 2688 // of the listeners with both the mStatusStatus and mStatusListenerLock held 2689 state->updateStatus(status, cameraId, rejectSourceStates, [this] 2690 (const String8& cameraId, int32_t status) { 2691 2692 if (status != ICameraServiceListener::STATUS_ENUMERATING) { 2693 // Update torch status if it has a flash unit. 2694 Mutex::Autolock al(mTorchStatusMutex); 2695 int32_t torchStatus; 2696 if (getTorchStatusLocked(cameraId, &torchStatus) != 2697 NAME_NOT_FOUND) { 2698 int32_t newTorchStatus = 2699 status == ICameraServiceListener::STATUS_PRESENT ? 2700 ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF : 2701 ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE; 2702 if (torchStatus != newTorchStatus) { 2703 onTorchStatusChangedLocked(cameraId, newTorchStatus); 2704 } 2705 } 2706 } 2707 2708 Mutex::Autolock lock(mStatusListenerLock); 2709 2710 for (auto& listener : mListenerList) { 2711 // TODO: Refactor status listeners to use strings for Camera IDs and remove this. 2712 int id = cameraIdToInt(cameraId); 2713 if (id != -1) listener->onStatusChanged(status, id); 2714 } 2715 }); 2716} 2717 2718void CameraService::updateProxyDeviceState(ICameraServiceProxy::CameraState newState, 2719 const String8& cameraId) { 2720 sp<ICameraServiceProxy> proxyBinder = getCameraServiceProxy(); 2721 if (proxyBinder == nullptr) return; 2722 String16 id(cameraId); 2723 proxyBinder->notifyCameraState(id, newState); 2724} 2725 2726status_t CameraService::getTorchStatusLocked( 2727 const String8& cameraId, 2728 int32_t *status) const { 2729 if (!status) { 2730 return BAD_VALUE; 2731 } 2732 ssize_t index = mTorchStatusMap.indexOfKey(cameraId); 2733 if (index == NAME_NOT_FOUND) { 2734 // invalid camera ID or the camera doesn't have a flash unit 2735 return NAME_NOT_FOUND; 2736 } 2737 2738 *status = mTorchStatusMap.valueAt(index); 2739 return OK; 2740} 2741 2742status_t CameraService::setTorchStatusLocked(const String8& cameraId, 2743 int32_t status) { 2744 ssize_t index = mTorchStatusMap.indexOfKey(cameraId); 2745 if (index == NAME_NOT_FOUND) { 2746 return BAD_VALUE; 2747 } 2748 int32_t& item = 2749 mTorchStatusMap.editValueAt(index); 2750 item = status; 2751 2752 return OK; 2753} 2754 2755}; // namespace android 2756