CameraService.cpp revision 98e24724fb77445d4d015a5fec4ecbd5b49abc9b
1/*
2**
3** Copyright (C) 2008, The Android Open Source Project
4**
5** Licensed under the Apache License, Version 2.0 (the "License");
6** you may not use this file except in compliance with the License.
7** You may obtain a copy of the License at
8**
9**     http://www.apache.org/licenses/LICENSE-2.0
10**
11** Unless required by applicable law or agreed to in writing, software
12** distributed under the License is distributed on an "AS IS" BASIS,
13** WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14** See the License for the specific language governing permissions and
15** limitations under the License.
16*/
17
18#define LOG_TAG "CameraService"
19//#define LOG_NDEBUG 0
20
21#include <stdio.h>
22#include <sys/types.h>
23#include <pthread.h>
24
25#include <binder/AppOpsManager.h>
26#include <binder/IPCThreadState.h>
27#include <binder/IServiceManager.h>
28#include <binder/MemoryBase.h>
29#include <binder/MemoryHeapBase.h>
30#include <cutils/atomic.h>
31#include <cutils/properties.h>
32#include <gui/Surface.h>
33#include <hardware/hardware.h>
34#include <media/AudioSystem.h>
35#include <media/mediaplayer.h>
36#include <utils/Errors.h>
37#include <utils/Log.h>
38#include <utils/String16.h>
39
40#include "CameraService.h"
41#include "CameraClient.h"
42#include "Camera2Client.h"
43#include "ProCamera2Client.h"
44#include "photography/CameraDeviceClient.h"
45#include "CameraDeviceFactory.h"
46
47namespace android {
48
49// ----------------------------------------------------------------------------
50// Logging support -- this is for debugging only
51// Use "adb shell dumpsys media.camera -v 1" to change it.
52volatile int32_t gLogLevel = 0;
53
54#define LOG1(...) ALOGD_IF(gLogLevel >= 1, __VA_ARGS__);
55#define LOG2(...) ALOGD_IF(gLogLevel >= 2, __VA_ARGS__);
56
57static void setLogLevel(int level) {
58    android_atomic_write(level, &gLogLevel);
59}
60
61// ----------------------------------------------------------------------------
62
63static int getCallingPid() {
64    return IPCThreadState::self()->getCallingPid();
65}
66
67static int getCallingUid() {
68    return IPCThreadState::self()->getCallingUid();
69}
70
71extern "C" {
72static void camera_device_status_change(
73        const struct camera_module_callbacks* callbacks,
74        int camera_id,
75        int new_status) {
76    sp<CameraService> cs = const_cast<CameraService*>(
77                                static_cast<const CameraService*>(callbacks));
78
79    cs->onDeviceStatusChanged(
80        camera_id,
81        new_status);
82}
83} // extern "C"
84
85// ----------------------------------------------------------------------------
86
87// This is ugly and only safe if we never re-create the CameraService, but
88// should be ok for now.
89static CameraService *gCameraService;
90
91CameraService::CameraService()
92    :mSoundRef(0), mModule(0)
93{
94    ALOGI("CameraService started (pid=%d)", getpid());
95    gCameraService = this;
96
97    for (size_t i = 0; i < MAX_CAMERAS; ++i) {
98        mStatusList[i] = ICameraServiceListener::STATUS_PRESENT;
99    }
100
101    this->camera_device_status_change = android::camera_device_status_change;
102}
103
104void CameraService::onFirstRef()
105{
106    LOG1("CameraService::onFirstRef");
107
108    BnCameraService::onFirstRef();
109
110    if (hw_get_module(CAMERA_HARDWARE_MODULE_ID,
111                (const hw_module_t **)&mModule) < 0) {
112        ALOGE("Could not load camera HAL module");
113        mNumberOfCameras = 0;
114    }
115    else {
116        ALOGI("Loaded \"%s\" camera module", mModule->common.name);
117        mNumberOfCameras = mModule->get_number_of_cameras();
118        if (mNumberOfCameras > MAX_CAMERAS) {
119            ALOGE("Number of cameras(%d) > MAX_CAMERAS(%d).",
120                    mNumberOfCameras, MAX_CAMERAS);
121            mNumberOfCameras = MAX_CAMERAS;
122        }
123        for (int i = 0; i < mNumberOfCameras; i++) {
124            setCameraFree(i);
125        }
126
127        if (mModule->common.module_api_version >=
128                CAMERA_MODULE_API_VERSION_2_1) {
129            mModule->set_callbacks(this);
130        }
131
132        CameraDeviceFactory::registerService(this);
133    }
134}
135
136CameraService::~CameraService() {
137    for (int i = 0; i < mNumberOfCameras; i++) {
138        if (mBusy[i]) {
139            ALOGE("camera %d is still in use in destructor!", i);
140        }
141    }
142
143    gCameraService = NULL;
144}
145
146void CameraService::onDeviceStatusChanged(int cameraId,
147                                          int newStatus)
148{
149    ALOGI("%s: Status changed for cameraId=%d, newStatus=%d", __FUNCTION__,
150          cameraId, newStatus);
151
152    if (cameraId < 0 || cameraId >= MAX_CAMERAS) {
153        ALOGE("%s: Bad camera ID %d", __FUNCTION__, cameraId);
154        return;
155    }
156
157    if ((int)getStatus(cameraId) == newStatus) {
158        ALOGE("%s: State transition to the same status 0x%x not allowed",
159              __FUNCTION__, (uint32_t)newStatus);
160        return;
161    }
162
163    /* don't do this in updateStatus
164       since it is also called from connect and we could get into a deadlock */
165    if (newStatus == CAMERA_DEVICE_STATUS_NOT_PRESENT) {
166        Vector<sp<BasicClient> > clientsToDisconnect;
167        {
168           Mutex::Autolock al(mServiceLock);
169
170           /* Find all clients that we need to disconnect */
171           sp<BasicClient> client = mClient[cameraId].promote();
172           if (client.get() != NULL) {
173               clientsToDisconnect.push_back(client);
174           }
175
176           int i = cameraId;
177           for (size_t j = 0; j < mProClientList[i].size(); ++j) {
178               sp<ProClient> cl = mProClientList[i][j].promote();
179               if (cl != NULL) {
180                   clientsToDisconnect.push_back(cl);
181               }
182           }
183        }
184
185        /* now disconnect them. don't hold the lock
186           or we can get into a deadlock */
187
188        for (size_t i = 0; i < clientsToDisconnect.size(); ++i) {
189            sp<BasicClient> client = clientsToDisconnect[i];
190
191            client->disconnect();
192            /**
193             * The remote app will no longer be able to call methods on the
194             * client since the client PID will be reset to 0
195             */
196        }
197
198        ALOGV("%s: After unplug, disconnected %d clients",
199              __FUNCTION__, clientsToDisconnect.size());
200    }
201
202    updateStatus(
203            static_cast<ICameraServiceListener::Status>(newStatus), cameraId);
204
205}
206
207int32_t CameraService::getNumberOfCameras() {
208    return mNumberOfCameras;
209}
210
211status_t CameraService::getCameraInfo(int cameraId,
212                                      struct CameraInfo* cameraInfo) {
213    if (!mModule) {
214        return NO_INIT;
215    }
216
217    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
218        return BAD_VALUE;
219    }
220
221    struct camera_info info;
222    status_t rc = mModule->get_camera_info(cameraId, &info);
223    cameraInfo->facing = info.facing;
224    cameraInfo->orientation = info.orientation;
225    return rc;
226}
227
228int CameraService::getDeviceVersion(int cameraId, int* facing) {
229    struct camera_info info;
230    if (mModule->get_camera_info(cameraId, &info) != OK) {
231        return -1;
232    }
233
234    int deviceVersion;
235    if (mModule->common.module_api_version >= CAMERA_MODULE_API_VERSION_2_0) {
236        deviceVersion = info.device_version;
237    } else {
238        deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
239    }
240
241    if (facing) {
242        *facing = info.facing;
243    }
244
245    return deviceVersion;
246}
247
248bool CameraService::isValidCameraId(int cameraId) {
249    int facing;
250    int deviceVersion = getDeviceVersion(cameraId, &facing);
251
252    switch(deviceVersion) {
253      case CAMERA_DEVICE_API_VERSION_1_0:
254      case CAMERA_DEVICE_API_VERSION_2_0:
255      case CAMERA_DEVICE_API_VERSION_2_1:
256      case CAMERA_DEVICE_API_VERSION_3_0:
257        return true;
258      default:
259        return false;
260    }
261
262    return false;
263}
264
265bool CameraService::validateConnect(int cameraId,
266                                    /*inout*/
267                                    int& clientUid) const {
268
269    int callingPid = getCallingPid();
270
271    if (clientUid == USE_CALLING_UID) {
272        clientUid = getCallingUid();
273    } else {
274        // We only trust our own process to forward client UIDs
275        if (callingPid != getpid()) {
276            ALOGE("CameraService::connect X (pid %d) rejected (don't trust clientUid)",
277                    callingPid);
278            return false;
279        }
280    }
281
282    if (!mModule) {
283        ALOGE("Camera HAL module not loaded");
284        return false;
285    }
286
287    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
288        ALOGE("CameraService::connect X (pid %d) rejected (invalid cameraId %d).",
289            callingPid, cameraId);
290        return false;
291    }
292
293    char value[PROPERTY_VALUE_MAX];
294    property_get("sys.secpolicy.camera.disabled", value, "0");
295    if (strcmp(value, "1") == 0) {
296        // Camera is disabled by DevicePolicyManager.
297        ALOGI("Camera is disabled. connect X (pid %d) rejected", callingPid);
298        return false;
299    }
300
301    ICameraServiceListener::Status currentStatus = getStatus(cameraId);
302    if (currentStatus == ICameraServiceListener::STATUS_NOT_PRESENT) {
303        ALOGI("Camera is not plugged in,"
304               " connect X (pid %d) rejected", callingPid);
305        return false;
306    } else if (currentStatus == ICameraServiceListener::STATUS_ENUMERATING) {
307        ALOGI("Camera is enumerating,"
308               " connect X (pid %d) rejected", callingPid);
309        return false;
310    }
311    // Else don't check for STATUS_NOT_AVAILABLE.
312    //  -- It's done implicitly in canConnectUnsafe /w the mBusy array
313
314    return true;
315}
316
317bool CameraService::canConnectUnsafe(int cameraId,
318                                     const String16& clientPackageName,
319                                     const sp<IBinder>& remoteCallback,
320                                     sp<BasicClient> &client) {
321    String8 clientName8(clientPackageName);
322    int callingPid = getCallingPid();
323
324    if (mClient[cameraId] != 0) {
325        client = mClient[cameraId].promote();
326        if (client != 0) {
327            if (remoteCallback == client->getRemote()) {
328                LOG1("CameraService::connect X (pid %d) (the same client)",
329                     callingPid);
330                return true;
331            } else {
332                // TODOSC: need to support 1 regular client,
333                // multiple shared clients here
334                ALOGW("CameraService::connect X (pid %d) rejected"
335                      " (existing client).", callingPid);
336                return false;
337            }
338        }
339        mClient[cameraId].clear();
340    }
341
342    /*
343    mBusy is set to false as the last step of the Client destructor,
344    after which it is guaranteed that the Client destructor has finished (
345    including any inherited destructors)
346
347    We only need this for a Client subclasses since we don't allow
348    multiple Clents to be opened concurrently, but multiple BasicClient
349    would be fine
350    */
351    if (mBusy[cameraId]) {
352        ALOGW("CameraService::connect X (pid %d, \"%s\") rejected"
353                " (camera %d is still busy).", callingPid,
354                clientName8.string(), cameraId);
355        return false;
356    }
357
358    return true;
359}
360
361sp<ICamera> CameraService::connect(
362        const sp<ICameraClient>& cameraClient,
363        int cameraId,
364        const String16& clientPackageName,
365        int clientUid) {
366
367    String8 clientName8(clientPackageName);
368    int callingPid = getCallingPid();
369
370    LOG1("CameraService::connect E (pid %d \"%s\", id %d)", callingPid,
371            clientName8.string(), cameraId);
372
373    if (!validateConnect(cameraId, /*inout*/clientUid)) {
374        return NULL;
375    }
376
377
378    sp<Client> client;
379    {
380        Mutex::Autolock lock(mServiceLock);
381        sp<BasicClient> clientTmp;
382        if (!canConnectUnsafe(cameraId, clientPackageName,
383                              cameraClient->asBinder(),
384                              /*out*/clientTmp)) {
385            return NULL;
386        } else if (client.get() != NULL) {
387            return static_cast<Client*>(clientTmp.get());
388        }
389
390        int facing = -1;
391        int deviceVersion = getDeviceVersion(cameraId, &facing);
392
393        // If there are other non-exclusive users of the camera,
394        //  this will tear them down before we can reuse the camera
395        if (isValidCameraId(cameraId)) {
396            // transition from PRESENT -> NOT_AVAILABLE
397            updateStatus(ICameraServiceListener::STATUS_NOT_AVAILABLE,
398                         cameraId);
399        }
400
401        switch(deviceVersion) {
402          case CAMERA_DEVICE_API_VERSION_1_0:
403            client = new CameraClient(this, cameraClient,
404                    clientPackageName, cameraId,
405                    facing, callingPid, clientUid, getpid());
406            break;
407          case CAMERA_DEVICE_API_VERSION_2_0:
408          case CAMERA_DEVICE_API_VERSION_2_1:
409          case CAMERA_DEVICE_API_VERSION_3_0:
410            client = new Camera2Client(this, cameraClient,
411                    clientPackageName, cameraId,
412                    facing, callingPid, clientUid, getpid(),
413                    deviceVersion);
414            break;
415          case -1:
416            ALOGE("Invalid camera id %d", cameraId);
417            return NULL;
418          default:
419            ALOGE("Unknown camera device HAL version: %d", deviceVersion);
420            return NULL;
421        }
422
423        if (!connectFinishUnsafe(client,
424                                 client->getRemote())) {
425            // this is probably not recoverable.. maybe the client can try again
426            // OK: we can only get here if we were originally in PRESENT state
427            updateStatus(ICameraServiceListener::STATUS_PRESENT, cameraId);
428
429            return NULL;
430        }
431
432        mClient[cameraId] = client;
433        LOG1("CameraService::connect X (id %d, this pid is %d)", cameraId,
434             getpid());
435    }
436    // important: release the mutex here so the client can call back
437    //    into the service from its destructor (can be at the end of the call)
438
439    return client;
440}
441
442bool CameraService::connectFinishUnsafe(const sp<BasicClient>& client,
443                                        const sp<IBinder>& remoteCallback) {
444    if (client->initialize(mModule) != OK) {
445        return false;
446    }
447
448    remoteCallback->linkToDeath(this);
449
450    return true;
451}
452
453sp<IProCameraUser> CameraService::connect(
454                                        const sp<IProCameraCallbacks>& cameraCb,
455                                        int cameraId,
456                                        const String16& clientPackageName,
457                                        int clientUid)
458{
459    String8 clientName8(clientPackageName);
460    int callingPid = getCallingPid();
461
462    LOG1("CameraService::connectPro E (pid %d \"%s\", id %d)", callingPid,
463            clientName8.string(), cameraId);
464
465    if (!validateConnect(cameraId, /*inout*/clientUid)) {
466        return NULL;
467    }
468
469    sp<ProClient> client;
470    {
471        Mutex::Autolock lock(mServiceLock);
472        {
473            sp<BasicClient> client;
474            if (!canConnectUnsafe(cameraId, clientPackageName,
475                                  cameraCb->asBinder(),
476                                  /*out*/client)) {
477                return NULL;
478            }
479        }
480
481        int facing = -1;
482        int deviceVersion = getDeviceVersion(cameraId, &facing);
483
484        switch(deviceVersion) {
485          case CAMERA_DEVICE_API_VERSION_1_0:
486            ALOGE("Camera id %d uses HALv1, doesn't support ProCamera",
487                  cameraId);
488            return NULL;
489            break;
490          case CAMERA_DEVICE_API_VERSION_2_0:
491          case CAMERA_DEVICE_API_VERSION_2_1:
492            client = new ProCamera2Client(this, cameraCb, String16(),
493                    cameraId, facing, callingPid, USE_CALLING_UID, getpid());
494            break;
495          case -1:
496            ALOGE("Invalid camera id %d", cameraId);
497            return NULL;
498          default:
499            ALOGE("Unknown camera device HAL version: %d", deviceVersion);
500            return NULL;
501        }
502
503        if (!connectFinishUnsafe(client, client->getRemote())) {
504            return NULL;
505        }
506
507        mProClientList[cameraId].push(client);
508
509        LOG1("CameraService::connectPro X (id %d, this pid is %d)", cameraId,
510                getpid());
511    }
512    // important: release the mutex here so the client can call back
513    //    into the service from its destructor (can be at the end of the call)
514
515    return client;
516}
517
518sp<ICameraDeviceUser> CameraService::connect(
519        const sp<ICameraDeviceCallbacks>& cameraCb,
520        int cameraId,
521        const String16& clientPackageName,
522        int clientUid)
523{
524    // TODO: this function needs to return status_t
525    // so that we have an error code when things go wrong and the client is NULL
526
527    String8 clientName8(clientPackageName);
528    int callingPid = getCallingPid();
529
530    LOG1("CameraService::connectDevice E (pid %d \"%s\", id %d)", callingPid,
531            clientName8.string(), cameraId);
532
533    if (!validateConnect(cameraId, /*inout*/clientUid)) {
534        return NULL;
535    }
536
537    sp<CameraDeviceClient> client;
538    {
539        Mutex::Autolock lock(mServiceLock);
540        {
541            sp<BasicClient> client;
542            if (!canConnectUnsafe(cameraId, clientPackageName,
543                                  cameraCb->asBinder(),
544                                  /*out*/client)) {
545                return NULL;
546            }
547        }
548
549        int facing = -1;
550        int deviceVersion = getDeviceVersion(cameraId, &facing);
551
552        // If there are other non-exclusive users of the camera,
553        //  this will tear them down before we can reuse the camera
554        if (isValidCameraId(cameraId)) {
555            // transition from PRESENT -> NOT_AVAILABLE
556            updateStatus(ICameraServiceListener::STATUS_NOT_AVAILABLE,
557                         cameraId);
558        }
559
560        switch(deviceVersion) {
561          case CAMERA_DEVICE_API_VERSION_1_0:
562            ALOGE("Camera id %d uses old HAL, doesn't support CameraDevice",
563                  cameraId);
564            return NULL;
565            break;
566           // TODO: don't allow 2.0  Only allow 2.1 and higher
567          case CAMERA_DEVICE_API_VERSION_2_0:
568          case CAMERA_DEVICE_API_VERSION_2_1:
569          case CAMERA_DEVICE_API_VERSION_3_0:
570            client = new CameraDeviceClient(this, cameraCb, String16(),
571                    cameraId, facing, callingPid, USE_CALLING_UID, getpid());
572            break;
573          case -1:
574            ALOGE("Invalid camera id %d", cameraId);
575            return NULL;
576          default:
577            ALOGE("Unknown camera device HAL version: %d", deviceVersion);
578            return NULL;
579        }
580
581        if (!connectFinishUnsafe(client, client->getRemote())) {
582            // this is probably not recoverable.. maybe the client can try again
583            // OK: we can only get here if we were originally in PRESENT state
584            updateStatus(ICameraServiceListener::STATUS_PRESENT, cameraId);
585            return NULL;
586        }
587
588        LOG1("CameraService::connectDevice X (id %d, this pid is %d)", cameraId,
589                getpid());
590
591        mClient[cameraId] = client;
592    }
593    // important: release the mutex here so the client can call back
594    //    into the service from its destructor (can be at the end of the call)
595
596    return client;
597}
598
599
600status_t CameraService::addListener(
601                                const sp<ICameraServiceListener>& listener) {
602    ALOGV("%s: Add listener %p", __FUNCTION__, listener.get());
603
604    Mutex::Autolock lock(mServiceLock);
605
606    Vector<sp<ICameraServiceListener> >::iterator it, end;
607    for (it = mListenerList.begin(); it != mListenerList.end(); ++it) {
608        if ((*it)->asBinder() == listener->asBinder()) {
609            ALOGW("%s: Tried to add listener %p which was already subscribed",
610                  __FUNCTION__, listener.get());
611            return ALREADY_EXISTS;
612        }
613    }
614
615    mListenerList.push_back(listener);
616
617    /* Immediately signal current status to this listener only */
618    {
619        Mutex::Autolock m(mStatusMutex) ;
620        int numCams = getNumberOfCameras();
621        for (int i = 0; i < numCams; ++i) {
622            listener->onStatusChanged(mStatusList[i], i);
623        }
624    }
625
626    return OK;
627}
628status_t CameraService::removeListener(
629                                const sp<ICameraServiceListener>& listener) {
630    ALOGV("%s: Remove listener %p", __FUNCTION__, listener.get());
631
632    Mutex::Autolock lock(mServiceLock);
633
634    Vector<sp<ICameraServiceListener> >::iterator it;
635    for (it = mListenerList.begin(); it != mListenerList.end(); ++it) {
636        if ((*it)->asBinder() == listener->asBinder()) {
637            mListenerList.erase(it);
638            return OK;
639        }
640    }
641
642    ALOGW("%s: Tried to remove a listener %p which was not subscribed",
643          __FUNCTION__, listener.get());
644
645    return BAD_VALUE;
646}
647
648void CameraService::removeClientByRemote(const wp<IBinder>& remoteBinder) {
649    int callingPid = getCallingPid();
650    LOG1("CameraService::removeClientByRemote E (pid %d)", callingPid);
651
652    // Declare this before the lock to make absolutely sure the
653    // destructor won't be called with the lock held.
654    Mutex::Autolock lock(mServiceLock);
655
656    int outIndex;
657    sp<BasicClient> client = findClientUnsafe(remoteBinder, outIndex);
658
659    if (client != 0) {
660        // Found our camera, clear and leave.
661        LOG1("removeClient: clear camera %d", outIndex);
662        mClient[outIndex].clear();
663
664        client->getRemote()->unlinkToDeath(this);
665    } else {
666
667        sp<ProClient> clientPro = findProClientUnsafe(remoteBinder);
668
669        if (clientPro != NULL) {
670            // Found our camera, clear and leave.
671            LOG1("removeClient: clear pro %p", clientPro.get());
672
673            clientPro->getRemoteCallback()->asBinder()->unlinkToDeath(this);
674        }
675    }
676
677    LOG1("CameraService::removeClientByRemote X (pid %d)", callingPid);
678}
679
680sp<CameraService::ProClient> CameraService::findProClientUnsafe(
681                        const wp<IBinder>& cameraCallbacksRemote)
682{
683    sp<ProClient> clientPro;
684
685    for (int i = 0; i < mNumberOfCameras; ++i) {
686        Vector<size_t> removeIdx;
687
688        for (size_t j = 0; j < mProClientList[i].size(); ++j) {
689            wp<ProClient> cl = mProClientList[i][j];
690
691            sp<ProClient> clStrong = cl.promote();
692            if (clStrong != NULL && clStrong->getRemote() == cameraCallbacksRemote) {
693                clientPro = clStrong;
694                break;
695            } else if (clStrong == NULL) {
696                // mark to clean up dead ptr
697                removeIdx.push(j);
698            }
699        }
700
701        // remove stale ptrs (in reverse so the indices dont change)
702        for (ssize_t j = (ssize_t)removeIdx.size() - 1; j >= 0; --j) {
703            mProClientList[i].removeAt(removeIdx[j]);
704        }
705
706    }
707
708    return clientPro;
709}
710
711sp<CameraService::BasicClient> CameraService::findClientUnsafe(
712                        const wp<IBinder>& cameraClient, int& outIndex) {
713    sp<BasicClient> client;
714
715    for (int i = 0; i < mNumberOfCameras; i++) {
716
717        // This happens when we have already disconnected (or this is
718        // just another unused camera).
719        if (mClient[i] == 0) continue;
720
721        // Promote mClient. It can fail if we are called from this path:
722        // Client::~Client() -> disconnect() -> removeClientByRemote().
723        client = mClient[i].promote();
724
725        // Clean up stale client entry
726        if (client == NULL) {
727            mClient[i].clear();
728            continue;
729        }
730
731        if (cameraClient == client->getRemote()) {
732            // Found our camera
733            outIndex = i;
734            return client;
735        }
736    }
737
738    outIndex = -1;
739    return NULL;
740}
741
742CameraService::BasicClient* CameraService::getClientByIdUnsafe(int cameraId) {
743    if (cameraId < 0 || cameraId >= mNumberOfCameras) return NULL;
744    return mClient[cameraId].unsafe_get();
745}
746
747Mutex* CameraService::getClientLockById(int cameraId) {
748    if (cameraId < 0 || cameraId >= mNumberOfCameras) return NULL;
749    return &mClientLock[cameraId];
750}
751
752sp<CameraService::BasicClient> CameraService::getClientByRemote(
753                                const wp<IBinder>& cameraClient) {
754
755    // Declare this before the lock to make absolutely sure the
756    // destructor won't be called with the lock held.
757    sp<BasicClient> client;
758
759    Mutex::Autolock lock(mServiceLock);
760
761    int outIndex;
762    client = findClientUnsafe(cameraClient, outIndex);
763
764    return client;
765}
766
767status_t CameraService::onTransact(
768    uint32_t code, const Parcel& data, Parcel* reply, uint32_t flags) {
769    // Permission checks
770    switch (code) {
771        case BnCameraService::CONNECT:
772        case BnCameraService::CONNECT_PRO:
773            const int pid = getCallingPid();
774            const int self_pid = getpid();
775            if (pid != self_pid) {
776                // we're called from a different process, do the real check
777                if (!checkCallingPermission(
778                        String16("android.permission.CAMERA"))) {
779                    const int uid = getCallingUid();
780                    ALOGE("Permission Denial: "
781                         "can't use the camera pid=%d, uid=%d", pid, uid);
782                    return PERMISSION_DENIED;
783                }
784            }
785            break;
786    }
787
788    return BnCameraService::onTransact(code, data, reply, flags);
789}
790
791// The reason we need this busy bit is a new CameraService::connect() request
792// may come in while the previous Client's destructor has not been run or is
793// still running. If the last strong reference of the previous Client is gone
794// but the destructor has not been finished, we should not allow the new Client
795// to be created because we need to wait for the previous Client to tear down
796// the hardware first.
797void CameraService::setCameraBusy(int cameraId) {
798    android_atomic_write(1, &mBusy[cameraId]);
799
800    ALOGV("setCameraBusy cameraId=%d", cameraId);
801}
802
803void CameraService::setCameraFree(int cameraId) {
804    android_atomic_write(0, &mBusy[cameraId]);
805
806    ALOGV("setCameraFree cameraId=%d", cameraId);
807}
808
809// We share the media players for shutter and recording sound for all clients.
810// A reference count is kept to determine when we will actually release the
811// media players.
812
813MediaPlayer* CameraService::newMediaPlayer(const char *file) {
814    MediaPlayer* mp = new MediaPlayer();
815    if (mp->setDataSource(file, NULL) == NO_ERROR) {
816        mp->setAudioStreamType(AUDIO_STREAM_ENFORCED_AUDIBLE);
817        mp->prepare();
818    } else {
819        ALOGE("Failed to load CameraService sounds: %s", file);
820        return NULL;
821    }
822    return mp;
823}
824
825void CameraService::loadSound() {
826    Mutex::Autolock lock(mSoundLock);
827    LOG1("CameraService::loadSound ref=%d", mSoundRef);
828    if (mSoundRef++) return;
829
830    mSoundPlayer[SOUND_SHUTTER] = newMediaPlayer("/system/media/audio/ui/camera_click.ogg");
831    mSoundPlayer[SOUND_RECORDING] = newMediaPlayer("/system/media/audio/ui/VideoRecord.ogg");
832}
833
834void CameraService::releaseSound() {
835    Mutex::Autolock lock(mSoundLock);
836    LOG1("CameraService::releaseSound ref=%d", mSoundRef);
837    if (--mSoundRef) return;
838
839    for (int i = 0; i < NUM_SOUNDS; i++) {
840        if (mSoundPlayer[i] != 0) {
841            mSoundPlayer[i]->disconnect();
842            mSoundPlayer[i].clear();
843        }
844    }
845}
846
847void CameraService::playSound(sound_kind kind) {
848    LOG1("playSound(%d)", kind);
849    Mutex::Autolock lock(mSoundLock);
850    sp<MediaPlayer> player = mSoundPlayer[kind];
851    if (player != 0) {
852        player->seekTo(0);
853        player->start();
854    }
855}
856
857// ----------------------------------------------------------------------------
858
859CameraService::Client::Client(const sp<CameraService>& cameraService,
860        const sp<ICameraClient>& cameraClient,
861        const String16& clientPackageName,
862        int cameraId, int cameraFacing,
863        int clientPid, uid_t clientUid,
864        int servicePid) :
865        CameraService::BasicClient(cameraService, cameraClient->asBinder(),
866                clientPackageName,
867                cameraId, cameraFacing,
868                clientPid, clientUid,
869                servicePid)
870{
871    int callingPid = getCallingPid();
872    LOG1("Client::Client E (pid %d, id %d)", callingPid, cameraId);
873
874    mRemoteCallback = cameraClient;
875
876    cameraService->setCameraBusy(cameraId);
877    cameraService->loadSound();
878
879    LOG1("Client::Client X (pid %d, id %d)", callingPid, cameraId);
880}
881
882// tear down the client
883CameraService::Client::~Client() {
884    ALOGV("~Client");
885    mDestructionStarted = true;
886
887    mCameraService->releaseSound();
888    // unconditionally disconnect. function is idempotent
889    Client::disconnect();
890}
891
892CameraService::BasicClient::BasicClient(const sp<CameraService>& cameraService,
893        const sp<IBinder>& remoteCallback,
894        const String16& clientPackageName,
895        int cameraId, int cameraFacing,
896        int clientPid, uid_t clientUid,
897        int servicePid):
898        mClientPackageName(clientPackageName)
899{
900    mCameraService = cameraService;
901    mRemoteBinder = remoteCallback;
902    mCameraId = cameraId;
903    mCameraFacing = cameraFacing;
904    mClientPid = clientPid;
905    mClientUid = clientUid;
906    mServicePid = servicePid;
907    mOpsActive = false;
908    mDestructionStarted = false;
909}
910
911CameraService::BasicClient::~BasicClient() {
912    ALOGV("~BasicClient");
913    mDestructionStarted = true;
914}
915
916void CameraService::BasicClient::disconnect() {
917    ALOGV("BasicClient::disconnect");
918    mCameraService->removeClientByRemote(mRemoteBinder);
919    // client shouldn't be able to call into us anymore
920    mClientPid = 0;
921}
922
923status_t CameraService::BasicClient::startCameraOps() {
924    int32_t res;
925
926    mOpsCallback = new OpsCallback(this);
927
928    {
929        ALOGV("%s: Start camera ops, package name = %s, client UID = %d",
930              __FUNCTION__, String8(mClientPackageName).string(), mClientUid);
931    }
932
933    mAppOpsManager.startWatchingMode(AppOpsManager::OP_CAMERA,
934            mClientPackageName, mOpsCallback);
935    res = mAppOpsManager.startOp(AppOpsManager::OP_CAMERA,
936            mClientUid, mClientPackageName);
937
938    if (res != AppOpsManager::MODE_ALLOWED) {
939        ALOGI("Camera %d: Access for \"%s\" has been revoked",
940                mCameraId, String8(mClientPackageName).string());
941        return PERMISSION_DENIED;
942    }
943    mOpsActive = true;
944    return OK;
945}
946
947status_t CameraService::BasicClient::finishCameraOps() {
948    if (mOpsActive) {
949        mAppOpsManager.finishOp(AppOpsManager::OP_CAMERA, mClientUid,
950                mClientPackageName);
951        mOpsActive = false;
952    }
953    mAppOpsManager.stopWatchingMode(mOpsCallback);
954    mOpsCallback.clear();
955
956    return OK;
957}
958
959void CameraService::BasicClient::opChanged(int32_t op, const String16& packageName) {
960    String8 name(packageName);
961    String8 myName(mClientPackageName);
962
963    if (op != AppOpsManager::OP_CAMERA) {
964        ALOGW("Unexpected app ops notification received: %d", op);
965        return;
966    }
967
968    int32_t res;
969    res = mAppOpsManager.checkOp(AppOpsManager::OP_CAMERA,
970            mClientUid, mClientPackageName);
971    ALOGV("checkOp returns: %d, %s ", res,
972            res == AppOpsManager::MODE_ALLOWED ? "ALLOWED" :
973            res == AppOpsManager::MODE_IGNORED ? "IGNORED" :
974            res == AppOpsManager::MODE_ERRORED ? "ERRORED" :
975            "UNKNOWN");
976
977    if (res != AppOpsManager::MODE_ALLOWED) {
978        ALOGI("Camera %d: Access for \"%s\" revoked", mCameraId,
979                myName.string());
980        // Reset the client PID to allow server-initiated disconnect,
981        // and to prevent further calls by client.
982        mClientPid = getCallingPid();
983        notifyError();
984        disconnect();
985    }
986}
987
988// ----------------------------------------------------------------------------
989
990Mutex* CameraService::Client::getClientLockFromCookie(void* user) {
991    return gCameraService->getClientLockById((int) user);
992}
993
994// Provide client pointer for callbacks. Client lock returned from getClientLockFromCookie should
995// be acquired for this to be safe
996CameraService::Client* CameraService::Client::getClientFromCookie(void* user) {
997    BasicClient *basicClient = gCameraService->getClientByIdUnsafe((int) user);
998    // OK: only CameraClient calls this, and they already cast anyway.
999    Client* client = static_cast<Client*>(basicClient);
1000
1001    // This could happen if the Client is in the process of shutting down (the
1002    // last strong reference is gone, but the destructor hasn't finished
1003    // stopping the hardware).
1004    if (client == NULL) return NULL;
1005
1006    // destruction already started, so should not be accessed
1007    if (client->mDestructionStarted) return NULL;
1008
1009    return client;
1010}
1011
1012void CameraService::Client::notifyError() {
1013    mRemoteCallback->notifyCallback(CAMERA_MSG_ERROR, CAMERA_ERROR_RELEASED, 0);
1014}
1015
1016// NOTE: function is idempotent
1017void CameraService::Client::disconnect() {
1018    ALOGV("Client::disconnect");
1019    BasicClient::disconnect();
1020    mCameraService->setCameraFree(mCameraId);
1021
1022    StatusVector rejectSourceStates;
1023    rejectSourceStates.push_back(ICameraServiceListener::STATUS_NOT_PRESENT);
1024    rejectSourceStates.push_back(ICameraServiceListener::STATUS_ENUMERATING);
1025
1026    // Transition to PRESENT if the camera is not in either of above 2 states
1027    mCameraService->updateStatus(ICameraServiceListener::STATUS_PRESENT,
1028                                 mCameraId,
1029                                 &rejectSourceStates);
1030}
1031
1032CameraService::Client::OpsCallback::OpsCallback(wp<BasicClient> client):
1033        mClient(client) {
1034}
1035
1036void CameraService::Client::OpsCallback::opChanged(int32_t op,
1037        const String16& packageName) {
1038    sp<BasicClient> client = mClient.promote();
1039    if (client != NULL) {
1040        client->opChanged(op, packageName);
1041    }
1042}
1043
1044// ----------------------------------------------------------------------------
1045//                  IProCamera
1046// ----------------------------------------------------------------------------
1047
1048CameraService::ProClient::ProClient(const sp<CameraService>& cameraService,
1049        const sp<IProCameraCallbacks>& remoteCallback,
1050        const String16& clientPackageName,
1051        int cameraId,
1052        int cameraFacing,
1053        int clientPid,
1054        uid_t clientUid,
1055        int servicePid)
1056        : CameraService::BasicClient(cameraService, remoteCallback->asBinder(),
1057                clientPackageName, cameraId, cameraFacing,
1058                clientPid,  clientUid, servicePid)
1059{
1060    mRemoteCallback = remoteCallback;
1061}
1062
1063CameraService::ProClient::~ProClient() {
1064}
1065
1066void CameraService::ProClient::notifyError() {
1067    mRemoteCallback->notifyCallback(CAMERA_MSG_ERROR, CAMERA_ERROR_RELEASED, 0);
1068}
1069
1070// ----------------------------------------------------------------------------
1071
1072static const int kDumpLockRetries = 50;
1073static const int kDumpLockSleep = 60000;
1074
1075static bool tryLock(Mutex& mutex)
1076{
1077    bool locked = false;
1078    for (int i = 0; i < kDumpLockRetries; ++i) {
1079        if (mutex.tryLock() == NO_ERROR) {
1080            locked = true;
1081            break;
1082        }
1083        usleep(kDumpLockSleep);
1084    }
1085    return locked;
1086}
1087
1088status_t CameraService::dump(int fd, const Vector<String16>& args) {
1089    String8 result;
1090    if (checkCallingPermission(String16("android.permission.DUMP")) == false) {
1091        result.appendFormat("Permission Denial: "
1092                "can't dump CameraService from pid=%d, uid=%d\n",
1093                getCallingPid(),
1094                getCallingUid());
1095        write(fd, result.string(), result.size());
1096    } else {
1097        bool locked = tryLock(mServiceLock);
1098        // failed to lock - CameraService is probably deadlocked
1099        if (!locked) {
1100            result.append("CameraService may be deadlocked\n");
1101            write(fd, result.string(), result.size());
1102        }
1103
1104        bool hasClient = false;
1105        if (!mModule) {
1106            result = String8::format("No camera module available!\n");
1107            write(fd, result.string(), result.size());
1108            return NO_ERROR;
1109        }
1110
1111        result = String8::format("Camera module HAL API version: 0x%x\n",
1112                mModule->common.hal_api_version);
1113        result.appendFormat("Camera module API version: 0x%x\n",
1114                mModule->common.module_api_version);
1115        result.appendFormat("Camera module name: %s\n",
1116                mModule->common.name);
1117        result.appendFormat("Camera module author: %s\n",
1118                mModule->common.author);
1119        result.appendFormat("Number of camera devices: %d\n\n", mNumberOfCameras);
1120        write(fd, result.string(), result.size());
1121        for (int i = 0; i < mNumberOfCameras; i++) {
1122            result = String8::format("Camera %d static information:\n", i);
1123            camera_info info;
1124
1125            status_t rc = mModule->get_camera_info(i, &info);
1126            if (rc != OK) {
1127                result.appendFormat("  Error reading static information!\n");
1128                write(fd, result.string(), result.size());
1129            } else {
1130                result.appendFormat("  Facing: %s\n",
1131                        info.facing == CAMERA_FACING_BACK ? "BACK" : "FRONT");
1132                result.appendFormat("  Orientation: %d\n", info.orientation);
1133                int deviceVersion;
1134                if (mModule->common.module_api_version <
1135                        CAMERA_MODULE_API_VERSION_2_0) {
1136                    deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
1137                } else {
1138                    deviceVersion = info.device_version;
1139                }
1140                result.appendFormat("  Device version: 0x%x\n", deviceVersion);
1141                if (deviceVersion >= CAMERA_DEVICE_API_VERSION_2_0) {
1142                    result.appendFormat("  Device static metadata:\n");
1143                    write(fd, result.string(), result.size());
1144                    dump_indented_camera_metadata(info.static_camera_characteristics,
1145                            fd, 2, 4);
1146                } else {
1147                    write(fd, result.string(), result.size());
1148                }
1149            }
1150
1151            sp<BasicClient> client = mClient[i].promote();
1152            if (client == 0) {
1153                result = String8::format("  Device is closed, no client instance\n");
1154                write(fd, result.string(), result.size());
1155                continue;
1156            }
1157            hasClient = true;
1158            result = String8::format("  Device is open. Client instance dump:\n");
1159            write(fd, result.string(), result.size());
1160            client->dump(fd, args);
1161        }
1162        if (!hasClient) {
1163            result = String8::format("\nNo active camera clients yet.\n");
1164            write(fd, result.string(), result.size());
1165        }
1166
1167        if (locked) mServiceLock.unlock();
1168
1169        // change logging level
1170        int n = args.size();
1171        for (int i = 0; i + 1 < n; i++) {
1172            String16 verboseOption("-v");
1173            if (args[i] == verboseOption) {
1174                String8 levelStr(args[i+1]);
1175                int level = atoi(levelStr.string());
1176                result = String8::format("\nSetting log level to %d.\n", level);
1177                setLogLevel(level);
1178                write(fd, result.string(), result.size());
1179            }
1180        }
1181
1182    }
1183    return NO_ERROR;
1184}
1185
1186/*virtual*/void CameraService::binderDied(
1187    const wp<IBinder> &who) {
1188
1189    /**
1190      * While tempting to promote the wp<IBinder> into a sp,
1191      * it's actually not supported by the binder driver
1192      */
1193
1194    ALOGV("java clients' binder died");
1195
1196    sp<BasicClient> cameraClient = getClientByRemote(who);
1197
1198    if (cameraClient == 0) {
1199        ALOGV("java clients' binder death already cleaned up (normal case)");
1200        return;
1201    }
1202
1203    ALOGW("Disconnecting camera client %p since the binder for it "
1204          "died (this pid %d)", cameraClient.get(), getCallingPid());
1205
1206    cameraClient->disconnect();
1207
1208}
1209
1210void CameraService::updateStatus(ICameraServiceListener::Status status,
1211                                 int32_t cameraId,
1212                                 const StatusVector *rejectSourceStates) {
1213    // do not lock mServiceLock here or can get into a deadlock from
1214    //  connect() -> ProClient::disconnect -> updateStatus
1215    Mutex::Autolock lock(mStatusMutex);
1216
1217    ICameraServiceListener::Status oldStatus = mStatusList[cameraId];
1218
1219    mStatusList[cameraId] = status;
1220
1221    if (oldStatus != status) {
1222        ALOGV("%s: Status has changed for camera ID %d from 0x%x to 0x%x",
1223              __FUNCTION__, cameraId, (uint32_t)oldStatus, (uint32_t)status);
1224
1225        if (oldStatus == ICameraServiceListener::STATUS_NOT_PRESENT &&
1226            (status != ICameraServiceListener::STATUS_PRESENT &&
1227             status != ICameraServiceListener::STATUS_ENUMERATING)) {
1228
1229            ALOGW("%s: From NOT_PRESENT can only transition into PRESENT"
1230                  " or ENUMERATING", __FUNCTION__);
1231            mStatusList[cameraId] = oldStatus;
1232            return;
1233        }
1234
1235        if (rejectSourceStates != NULL) {
1236            const StatusVector &rejectList = *rejectSourceStates;
1237            StatusVector::const_iterator it = rejectList.begin();
1238
1239            /**
1240             * Sometimes we want to conditionally do a transition.
1241             * For example if a client disconnects, we want to go to PRESENT
1242             * only if we weren't already in NOT_PRESENT or ENUMERATING.
1243             */
1244            for (; it != rejectList.end(); ++it) {
1245                if (oldStatus == *it) {
1246                    ALOGV("%s: Rejecting status transition for Camera ID %d, "
1247                          " since the source state was was in one of the bad "
1248                          " states.", __FUNCTION__, cameraId);
1249                    mStatusList[cameraId] = oldStatus;
1250                    return;
1251                }
1252            }
1253        }
1254
1255        /**
1256          * ProClients lose their exclusive lock.
1257          * - Done before the CameraClient can initialize the HAL device,
1258          *   since we want to be able to close it before they get to initialize
1259          */
1260        if (status == ICameraServiceListener::STATUS_NOT_AVAILABLE) {
1261            Vector<wp<ProClient> > proClients(mProClientList[cameraId]);
1262            Vector<wp<ProClient> >::const_iterator it;
1263
1264            for (it = proClients.begin(); it != proClients.end(); ++it) {
1265                sp<ProClient> proCl = it->promote();
1266                if (proCl.get() != NULL) {
1267                    proCl->onExclusiveLockStolen();
1268                }
1269            }
1270        }
1271
1272        Vector<sp<ICameraServiceListener> >::const_iterator it;
1273        for (it = mListenerList.begin(); it != mListenerList.end(); ++it) {
1274            (*it)->onStatusChanged(status, cameraId);
1275        }
1276    }
1277}
1278
1279ICameraServiceListener::Status CameraService::getStatus(int cameraId) const {
1280    if (cameraId < 0 || cameraId >= MAX_CAMERAS) {
1281        ALOGE("%s: Invalid camera ID %d", __FUNCTION__, cameraId);
1282        return ICameraServiceListener::STATUS_UNKNOWN;
1283    }
1284
1285    Mutex::Autolock al(mStatusMutex);
1286    return mStatusList[cameraId];
1287}
1288
1289}; // namespace android
1290