ConnectivityService.java revision 6bc0a2b6f8ca88fcb43a77e9afcbf9a8543e6284
1/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17package com.android.server;
18
19import static android.Manifest.permission.RECEIVE_DATA_ACTIVITY_CHANGE;
20import static android.net.ConnectivityManager.CONNECTIVITY_ACTION;
21import static android.net.ConnectivityManager.NETID_UNSET;
22import static android.net.ConnectivityManager.TYPE_NONE;
23import static android.net.ConnectivityManager.TYPE_VPN;
24import static android.net.ConnectivityManager.getNetworkTypeName;
25import static android.net.ConnectivityManager.isNetworkTypeValid;
26import static android.net.NetworkCapabilities.NET_CAPABILITY_CAPTIVE_PORTAL;
27import static android.net.NetworkCapabilities.NET_CAPABILITY_INTERNET;
28import static android.net.NetworkCapabilities.NET_CAPABILITY_NOT_METERED;
29import static android.net.NetworkCapabilities.NET_CAPABILITY_NOT_RESTRICTED;
30import static android.net.NetworkCapabilities.NET_CAPABILITY_VALIDATED;
31import static android.net.NetworkPolicyManager.RULE_ALLOW_ALL;
32import static android.net.NetworkPolicyManager.RULE_REJECT_ALL;
33import static android.net.NetworkPolicyManager.RULE_REJECT_METERED;
34
35import android.annotation.Nullable;
36import android.app.AlarmManager;
37import android.app.Notification;
38import android.app.NotificationManager;
39import android.app.PendingIntent;
40import android.content.BroadcastReceiver;
41import android.content.ContentResolver;
42import android.content.Context;
43import android.content.Intent;
44import android.content.IntentFilter;
45import android.content.pm.PackageManager;
46import android.content.res.Configuration;
47import android.content.res.Resources;
48import android.database.ContentObserver;
49import android.net.ConnectivityManager;
50import android.net.ConnectivityManager.PacketKeepalive;
51import android.net.IConnectivityManager;
52import android.net.INetworkManagementEventObserver;
53import android.net.INetworkPolicyListener;
54import android.net.INetworkPolicyManager;
55import android.net.INetworkStatsService;
56import android.net.LinkProperties;
57import android.net.LinkProperties.CompareResult;
58import android.net.Network;
59import android.net.NetworkAgent;
60import android.net.NetworkCapabilities;
61import android.net.NetworkConfig;
62import android.net.NetworkInfo;
63import android.net.NetworkInfo.DetailedState;
64import android.net.NetworkMisc;
65import android.net.NetworkQuotaInfo;
66import android.net.NetworkRequest;
67import android.net.NetworkState;
68import android.net.NetworkUtils;
69import android.net.Proxy;
70import android.net.ProxyInfo;
71import android.net.RouteInfo;
72import android.net.UidRange;
73import android.net.Uri;
74import android.os.Binder;
75import android.os.Bundle;
76import android.os.FileUtils;
77import android.os.Handler;
78import android.os.HandlerThread;
79import android.os.IBinder;
80import android.os.INetworkManagementService;
81import android.os.Looper;
82import android.os.Message;
83import android.os.Messenger;
84import android.os.ParcelFileDescriptor;
85import android.os.PowerManager;
86import android.os.Process;
87import android.os.RemoteException;
88import android.os.SystemClock;
89import android.os.SystemProperties;
90import android.os.UserHandle;
91import android.os.UserManager;
92import android.provider.Settings;
93import android.security.Credentials;
94import android.security.KeyStore;
95import android.telephony.TelephonyManager;
96import android.text.TextUtils;
97import android.util.LocalLog;
98import android.util.LocalLog.ReadOnlyLocalLog;
99import android.util.Pair;
100import android.util.Slog;
101import android.util.SparseArray;
102import android.util.SparseBooleanArray;
103import android.util.SparseIntArray;
104import android.util.Xml;
105
106import com.android.internal.R;
107import com.android.internal.annotations.GuardedBy;
108import com.android.internal.annotations.VisibleForTesting;
109import com.android.internal.app.IBatteryStats;
110import com.android.internal.net.LegacyVpnInfo;
111import com.android.internal.net.NetworkStatsFactory;
112import com.android.internal.net.VpnConfig;
113import com.android.internal.net.VpnInfo;
114import com.android.internal.net.VpnProfile;
115import com.android.internal.telephony.DctConstants;
116import com.android.internal.util.AsyncChannel;
117import com.android.internal.util.IndentingPrintWriter;
118import com.android.internal.util.XmlUtils;
119import com.android.server.am.BatteryStatsService;
120import com.android.server.connectivity.DataConnectionStats;
121import com.android.server.connectivity.KeepaliveTracker;
122import com.android.server.connectivity.NetworkDiagnostics;
123import com.android.server.connectivity.Nat464Xlat;
124import com.android.server.connectivity.NetworkAgentInfo;
125import com.android.server.connectivity.NetworkMonitor;
126import com.android.server.connectivity.PacManager;
127import com.android.server.connectivity.PermissionMonitor;
128import com.android.server.connectivity.Tethering;
129import com.android.server.connectivity.Vpn;
130import com.android.server.net.BaseNetworkObserver;
131import com.android.server.net.LockdownVpnTracker;
132import com.google.android.collect.Lists;
133import com.google.android.collect.Sets;
134
135import org.xmlpull.v1.XmlPullParser;
136import org.xmlpull.v1.XmlPullParserException;
137
138import java.io.File;
139import java.io.FileDescriptor;
140import java.io.FileNotFoundException;
141import java.io.FileReader;
142import java.io.IOException;
143import java.io.PrintWriter;
144import java.net.Inet4Address;
145import java.net.InetAddress;
146import java.net.UnknownHostException;
147import java.util.ArrayDeque;
148import java.util.ArrayList;
149import java.util.Arrays;
150import java.util.Collection;
151import java.util.HashMap;
152import java.util.HashSet;
153import java.util.SortedSet;
154import java.util.TreeSet;
155import java.util.Iterator;
156import java.util.List;
157import java.util.Map;
158import java.util.Objects;
159import java.util.concurrent.atomic.AtomicInteger;
160
161/**
162 * @hide
163 */
164public class ConnectivityService extends IConnectivityManager.Stub
165        implements PendingIntent.OnFinished {
166    private static final String TAG = "ConnectivityService";
167
168    private static final boolean DBG = true;
169    private static final boolean VDBG = false;
170
171    private static final boolean LOGD_RULES = false;
172
173    // TODO: create better separation between radio types and network types
174
175    // how long to wait before switching back to a radio's default network
176    private static final int RESTORE_DEFAULT_NETWORK_DELAY = 1 * 60 * 1000;
177    // system property that can override the above value
178    private static final String NETWORK_RESTORE_DELAY_PROP_NAME =
179            "android.telephony.apn-restore";
180
181    // How long to wait before putting up a "This network doesn't have an Internet connection,
182    // connect anyway?" dialog after the user selects a network that doesn't validate.
183    private static final int PROMPT_UNVALIDATED_DELAY_MS = 8 * 1000;
184
185    // How long to delay to removal of a pending intent based request.
186    // See Settings.Secure.CONNECTIVITY_RELEASE_PENDING_INTENT_DELAY_MS
187    private final int mReleasePendingIntentDelayMs;
188
189    private Tethering mTethering;
190
191    private final PermissionMonitor mPermissionMonitor;
192
193    private KeyStore mKeyStore;
194
195    @GuardedBy("mVpns")
196    private final SparseArray<Vpn> mVpns = new SparseArray<Vpn>();
197
198    private boolean mLockdownEnabled;
199    private LockdownVpnTracker mLockdownTracker;
200
201    /** Lock around {@link #mUidRules} and {@link #mMeteredIfaces}. */
202    private Object mRulesLock = new Object();
203    /** Currently active network rules by UID. */
204    private SparseIntArray mUidRules = new SparseIntArray();
205    /** Set of ifaces that are costly. */
206    private HashSet<String> mMeteredIfaces = Sets.newHashSet();
207
208    final private Context mContext;
209    private int mNetworkPreference;
210    // 0 is full bad, 100 is full good
211    private int mDefaultInetConditionPublished = 0;
212
213    private int mNumDnsEntries;
214
215    private boolean mTestMode;
216    private static ConnectivityService sServiceInstance;
217
218    private INetworkManagementService mNetd;
219    private INetworkStatsService mStatsService;
220    private INetworkPolicyManager mPolicyManager;
221
222    private String mCurrentTcpBufferSizes;
223
224    private static final int ENABLED  = 1;
225    private static final int DISABLED = 0;
226
227    private enum ReapUnvalidatedNetworks {
228        // Tear down networks that have no chance (e.g. even if validated) of becoming
229        // the highest scoring network satisfying a NetworkRequest.  This should be passed when
230        // all networks have been rematched against all NetworkRequests.
231        REAP,
232        // Don't reap networks.  This should be passed when some networks have not yet been
233        // rematched against all NetworkRequests.
234        DONT_REAP
235    };
236
237    /**
238     * used internally to change our mobile data enabled flag
239     */
240    private static final int EVENT_CHANGE_MOBILE_DATA_ENABLED = 2;
241
242    /**
243     * used internally to clear a wakelock when transitioning
244     * from one net to another.  Clear happens when we get a new
245     * network - EVENT_EXPIRE_NET_TRANSITION_WAKELOCK happens
246     * after a timeout if no network is found (typically 1 min).
247     */
248    private static final int EVENT_CLEAR_NET_TRANSITION_WAKELOCK = 8;
249
250    /**
251     * used internally to reload global proxy settings
252     */
253    private static final int EVENT_APPLY_GLOBAL_HTTP_PROXY = 9;
254
255    /**
256     * used internally to send a sticky broadcast delayed.
257     */
258    private static final int EVENT_SEND_STICKY_BROADCAST_INTENT = 11;
259
260    /**
261     * PAC manager has received new port.
262     */
263    private static final int EVENT_PROXY_HAS_CHANGED = 16;
264
265    /**
266     * used internally when registering NetworkFactories
267     * obj = NetworkFactoryInfo
268     */
269    private static final int EVENT_REGISTER_NETWORK_FACTORY = 17;
270
271    /**
272     * used internally when registering NetworkAgents
273     * obj = Messenger
274     */
275    private static final int EVENT_REGISTER_NETWORK_AGENT = 18;
276
277    /**
278     * used to add a network request
279     * includes a NetworkRequestInfo
280     */
281    private static final int EVENT_REGISTER_NETWORK_REQUEST = 19;
282
283    /**
284     * indicates a timeout period is over - check if we had a network yet or not
285     * and if not, call the timeout calback (but leave the request live until they
286     * cancel it.
287     * includes a NetworkRequestInfo
288     */
289    private static final int EVENT_TIMEOUT_NETWORK_REQUEST = 20;
290
291    /**
292     * used to add a network listener - no request
293     * includes a NetworkRequestInfo
294     */
295    private static final int EVENT_REGISTER_NETWORK_LISTENER = 21;
296
297    /**
298     * used to remove a network request, either a listener or a real request
299     * arg1 = UID of caller
300     * obj  = NetworkRequest
301     */
302    private static final int EVENT_RELEASE_NETWORK_REQUEST = 22;
303
304    /**
305     * used internally when registering NetworkFactories
306     * obj = Messenger
307     */
308    private static final int EVENT_UNREGISTER_NETWORK_FACTORY = 23;
309
310    /**
311     * used internally to expire a wakelock when transitioning
312     * from one net to another.  Expire happens when we fail to find
313     * a new network (typically after 1 minute) -
314     * EVENT_CLEAR_NET_TRANSITION_WAKELOCK happens if we had found
315     * a replacement network.
316     */
317    private static final int EVENT_EXPIRE_NET_TRANSITION_WAKELOCK = 24;
318
319    /**
320     * Used internally to indicate the system is ready.
321     */
322    private static final int EVENT_SYSTEM_READY = 25;
323
324    /**
325     * used to add a network request with a pending intent
326     * obj = NetworkRequestInfo
327     */
328    private static final int EVENT_REGISTER_NETWORK_REQUEST_WITH_INTENT = 26;
329
330    /**
331     * used to remove a pending intent and its associated network request.
332     * arg1 = UID of caller
333     * obj  = PendingIntent
334     */
335    private static final int EVENT_RELEASE_NETWORK_REQUEST_WITH_INTENT = 27;
336
337    /**
338     * used to specify whether a network should be used even if unvalidated.
339     * arg1 = whether to accept the network if it's unvalidated (1 or 0)
340     * arg2 = whether to remember this choice in the future (1 or 0)
341     * obj  = network
342     */
343    private static final int EVENT_SET_ACCEPT_UNVALIDATED = 28;
344
345    /**
346     * used to ask the user to confirm a connection to an unvalidated network.
347     * obj  = network
348     */
349    private static final int EVENT_PROMPT_UNVALIDATED = 29;
350
351    /**
352     * used internally to (re)configure mobile data always-on settings.
353     */
354    private static final int EVENT_CONFIGURE_MOBILE_DATA_ALWAYS_ON = 30;
355
356    /**
357     * used to add a network listener with a pending intent
358     * obj = NetworkRequestInfo
359     */
360    private static final int EVENT_REGISTER_NETWORK_LISTENER_WITH_INTENT = 31;
361
362    /** Handler thread used for both of the handlers below. */
363    @VisibleForTesting
364    protected final HandlerThread mHandlerThread;
365    /** Handler used for internal events. */
366    final private InternalHandler mHandler;
367    /** Handler used for incoming {@link NetworkStateTracker} events. */
368    final private NetworkStateTrackerHandler mTrackerHandler;
369
370    private boolean mSystemReady;
371    private Intent mInitialBroadcast;
372
373    private PowerManager.WakeLock mNetTransitionWakeLock;
374    private String mNetTransitionWakeLockCausedBy = "";
375    private int mNetTransitionWakeLockSerialNumber;
376    private int mNetTransitionWakeLockTimeout;
377    private final PowerManager.WakeLock mPendingIntentWakeLock;
378
379    private InetAddress mDefaultDns;
380
381    // used in DBG mode to track inet condition reports
382    private static final int INET_CONDITION_LOG_MAX_SIZE = 15;
383    private ArrayList mInetLog;
384
385    // track the current default http proxy - tell the world if we get a new one (real change)
386    private volatile ProxyInfo mDefaultProxy = null;
387    private Object mProxyLock = new Object();
388    private boolean mDefaultProxyDisabled = false;
389
390    // track the global proxy.
391    private ProxyInfo mGlobalProxy = null;
392
393    private PacManager mPacManager = null;
394
395    final private SettingsObserver mSettingsObserver;
396
397    private UserManager mUserManager;
398
399    NetworkConfig[] mNetConfigs;
400    int mNetworksDefined;
401
402    // the set of network types that can only be enabled by system/sig apps
403    List mProtectedNetworks;
404
405    private DataConnectionStats mDataConnectionStats;
406
407    TelephonyManager mTelephonyManager;
408
409    private KeepaliveTracker mKeepaliveTracker;
410
411    // sequence number for Networks; keep in sync with system/netd/NetworkController.cpp
412    private final static int MIN_NET_ID = 100; // some reserved marks
413    private final static int MAX_NET_ID = 65535;
414    private int mNextNetId = MIN_NET_ID;
415
416    // sequence number of NetworkRequests
417    private int mNextNetworkRequestId = 1;
418
419    // NetworkRequest activity String log entries.
420    private static final int MAX_NETWORK_REQUEST_LOGS = 20;
421    private final LocalLog mNetworkRequestInfoLogs = new LocalLog(MAX_NETWORK_REQUEST_LOGS);
422
423    // Array of <Network,ReadOnlyLocalLogs> tracking network validation and results
424    private static final int MAX_VALIDATION_LOGS = 10;
425    private final ArrayDeque<Pair<Network,ReadOnlyLocalLog>> mValidationLogs =
426            new ArrayDeque<Pair<Network,ReadOnlyLocalLog>>(MAX_VALIDATION_LOGS);
427
428    private void addValidationLogs(ReadOnlyLocalLog log, Network network) {
429        synchronized(mValidationLogs) {
430            while (mValidationLogs.size() >= MAX_VALIDATION_LOGS) {
431                mValidationLogs.removeLast();
432            }
433            mValidationLogs.addFirst(new Pair(network, log));
434        }
435    }
436
437    /**
438     * Implements support for the legacy "one network per network type" model.
439     *
440     * We used to have a static array of NetworkStateTrackers, one for each
441     * network type, but that doesn't work any more now that we can have,
442     * for example, more that one wifi network. This class stores all the
443     * NetworkAgentInfo objects that support a given type, but the legacy
444     * API will only see the first one.
445     *
446     * It serves two main purposes:
447     *
448     * 1. Provide information about "the network for a given type" (since this
449     *    API only supports one).
450     * 2. Send legacy connectivity change broadcasts. Broadcasts are sent if
451     *    the first network for a given type changes, or if the default network
452     *    changes.
453     */
454    private class LegacyTypeTracker {
455
456        private static final boolean DBG = true;
457        private static final boolean VDBG = false;
458        private static final String TAG = "CSLegacyTypeTracker";
459
460        /**
461         * Array of lists, one per legacy network type (e.g., TYPE_MOBILE_MMS).
462         * Each list holds references to all NetworkAgentInfos that are used to
463         * satisfy requests for that network type.
464         *
465         * This array is built out at startup such that an unsupported network
466         * doesn't get an ArrayList instance, making this a tristate:
467         * unsupported, supported but not active and active.
468         *
469         * The actual lists are populated when we scan the network types that
470         * are supported on this device.
471         */
472        private ArrayList<NetworkAgentInfo> mTypeLists[];
473
474        public LegacyTypeTracker() {
475            mTypeLists = (ArrayList<NetworkAgentInfo>[])
476                    new ArrayList[ConnectivityManager.MAX_NETWORK_TYPE + 1];
477        }
478
479        public void addSupportedType(int type) {
480            if (mTypeLists[type] != null) {
481                throw new IllegalStateException(
482                        "legacy list for type " + type + "already initialized");
483            }
484            mTypeLists[type] = new ArrayList<NetworkAgentInfo>();
485        }
486
487        public boolean isTypeSupported(int type) {
488            return isNetworkTypeValid(type) && mTypeLists[type] != null;
489        }
490
491        public NetworkAgentInfo getNetworkForType(int type) {
492            if (isTypeSupported(type) && !mTypeLists[type].isEmpty()) {
493                return mTypeLists[type].get(0);
494            } else {
495                return null;
496            }
497        }
498
499        private void maybeLogBroadcast(NetworkAgentInfo nai, DetailedState state, int type,
500                boolean isDefaultNetwork) {
501            if (DBG) {
502                log("Sending " + state +
503                        " broadcast for type " + type + " " + nai.name() +
504                        " isDefaultNetwork=" + isDefaultNetwork);
505            }
506        }
507
508        /** Adds the given network to the specified legacy type list. */
509        public void add(int type, NetworkAgentInfo nai) {
510            if (!isTypeSupported(type)) {
511                return;  // Invalid network type.
512            }
513            if (VDBG) log("Adding agent " + nai + " for legacy network type " + type);
514
515            ArrayList<NetworkAgentInfo> list = mTypeLists[type];
516            if (list.contains(nai)) {
517                return;
518            }
519
520            list.add(nai);
521
522            // Send a broadcast if this is the first network of its type or if it's the default.
523            final boolean isDefaultNetwork = isDefaultNetwork(nai);
524            if (list.size() == 1 || isDefaultNetwork) {
525                maybeLogBroadcast(nai, DetailedState.CONNECTED, type, isDefaultNetwork);
526                sendLegacyNetworkBroadcast(nai, DetailedState.CONNECTED, type);
527            }
528        }
529
530        /** Removes the given network from the specified legacy type list. */
531        public void remove(int type, NetworkAgentInfo nai, boolean wasDefault) {
532            ArrayList<NetworkAgentInfo> list = mTypeLists[type];
533            if (list == null || list.isEmpty()) {
534                return;
535            }
536
537            final boolean wasFirstNetwork = list.get(0).equals(nai);
538
539            if (!list.remove(nai)) {
540                return;
541            }
542
543            final DetailedState state = DetailedState.DISCONNECTED;
544
545            if (wasFirstNetwork || wasDefault) {
546                maybeLogBroadcast(nai, state, type, wasDefault);
547                sendLegacyNetworkBroadcast(nai, state, type);
548            }
549
550            if (!list.isEmpty() && wasFirstNetwork) {
551                if (DBG) log("Other network available for type " + type +
552                              ", sending connected broadcast");
553                final NetworkAgentInfo replacement = list.get(0);
554                maybeLogBroadcast(replacement, state, type, isDefaultNetwork(replacement));
555                sendLegacyNetworkBroadcast(replacement, state, type);
556            }
557        }
558
559        /** Removes the given network from all legacy type lists. */
560        public void remove(NetworkAgentInfo nai, boolean wasDefault) {
561            if (VDBG) log("Removing agent " + nai + " wasDefault=" + wasDefault);
562            for (int type = 0; type < mTypeLists.length; type++) {
563                remove(type, nai, wasDefault);
564            }
565        }
566
567        // send out another legacy broadcast - currently only used for suspend/unsuspend
568        // toggle
569        public void update(NetworkAgentInfo nai) {
570            final boolean isDefault = isDefaultNetwork(nai);
571            final DetailedState state = nai.networkInfo.getDetailedState();
572            for (int type = 0; type < mTypeLists.length; type++) {
573                final ArrayList<NetworkAgentInfo> list = mTypeLists[type];
574                final boolean contains = (list != null && list.contains(nai));
575                final boolean isFirst = (list != null && list.size() > 0 && nai == list.get(0));
576                if (isFirst || (contains && isDefault)) {
577                    maybeLogBroadcast(nai, state, type, isDefault);
578                    sendLegacyNetworkBroadcast(nai, state, type);
579                }
580            }
581        }
582
583        private String naiToString(NetworkAgentInfo nai) {
584            String name = (nai != null) ? nai.name() : "null";
585            String state = (nai.networkInfo != null) ?
586                    nai.networkInfo.getState() + "/" + nai.networkInfo.getDetailedState() :
587                    "???/???";
588            return name + " " + state;
589        }
590
591        public void dump(IndentingPrintWriter pw) {
592            pw.println("mLegacyTypeTracker:");
593            pw.increaseIndent();
594            pw.print("Supported types:");
595            for (int type = 0; type < mTypeLists.length; type++) {
596                if (mTypeLists[type] != null) pw.print(" " + type);
597            }
598            pw.println();
599            pw.println("Current state:");
600            pw.increaseIndent();
601            for (int type = 0; type < mTypeLists.length; type++) {
602                if (mTypeLists[type] == null|| mTypeLists[type].size() == 0) continue;
603                for (NetworkAgentInfo nai : mTypeLists[type]) {
604                    pw.println(type + " " + naiToString(nai));
605                }
606            }
607            pw.decreaseIndent();
608            pw.decreaseIndent();
609            pw.println();
610        }
611
612        // This class needs its own log method because it has a different TAG.
613        private void log(String s) {
614            Slog.d(TAG, s);
615        }
616
617    }
618    private LegacyTypeTracker mLegacyTypeTracker = new LegacyTypeTracker();
619
620    @VisibleForTesting
621    protected HandlerThread createHandlerThread() {
622        return new HandlerThread("ConnectivityServiceThread");
623    }
624
625    public ConnectivityService(Context context, INetworkManagementService netManager,
626            INetworkStatsService statsService, INetworkPolicyManager policyManager) {
627        if (DBG) log("ConnectivityService starting up");
628
629        mDefaultRequest = createInternetRequestForTransport(-1);
630        NetworkRequestInfo defaultNRI = new NetworkRequestInfo(null, mDefaultRequest,
631                new Binder(), NetworkRequestInfo.REQUEST);
632        mNetworkRequests.put(mDefaultRequest, defaultNRI);
633        mNetworkRequestInfoLogs.log("REGISTER " + defaultNRI);
634
635        mDefaultMobileDataRequest = createInternetRequestForTransport(
636                NetworkCapabilities.TRANSPORT_CELLULAR);
637
638        mHandlerThread = createHandlerThread();
639        mHandlerThread.start();
640        mHandler = new InternalHandler(mHandlerThread.getLooper());
641        mTrackerHandler = new NetworkStateTrackerHandler(mHandlerThread.getLooper());
642
643        // setup our unique device name
644        if (TextUtils.isEmpty(SystemProperties.get("net.hostname"))) {
645            String id = Settings.Secure.getString(context.getContentResolver(),
646                    Settings.Secure.ANDROID_ID);
647            if (id != null && id.length() > 0) {
648                String name = new String("android-").concat(id);
649                SystemProperties.set("net.hostname", name);
650            }
651        }
652
653        // read our default dns server ip
654        String dns = Settings.Global.getString(context.getContentResolver(),
655                Settings.Global.DEFAULT_DNS_SERVER);
656        if (dns == null || dns.length() == 0) {
657            dns = context.getResources().getString(
658                    com.android.internal.R.string.config_default_dns_server);
659        }
660        try {
661            mDefaultDns = NetworkUtils.numericToInetAddress(dns);
662        } catch (IllegalArgumentException e) {
663            loge("Error setting defaultDns using " + dns);
664        }
665
666        mReleasePendingIntentDelayMs = Settings.Secure.getInt(context.getContentResolver(),
667                Settings.Secure.CONNECTIVITY_RELEASE_PENDING_INTENT_DELAY_MS, 5_000);
668
669        mContext = checkNotNull(context, "missing Context");
670        mNetd = checkNotNull(netManager, "missing INetworkManagementService");
671        mStatsService = checkNotNull(statsService, "missing INetworkStatsService");
672        mPolicyManager = checkNotNull(policyManager, "missing INetworkPolicyManager");
673        mKeyStore = KeyStore.getInstance();
674        mTelephonyManager = (TelephonyManager) mContext.getSystemService(Context.TELEPHONY_SERVICE);
675
676        try {
677            mPolicyManager.registerListener(mPolicyListener);
678        } catch (RemoteException e) {
679            // ouch, no rules updates means some processes may never get network
680            loge("unable to register INetworkPolicyListener" + e.toString());
681        }
682
683        final PowerManager powerManager = (PowerManager) context.getSystemService(
684                Context.POWER_SERVICE);
685        mNetTransitionWakeLock = powerManager.newWakeLock(PowerManager.PARTIAL_WAKE_LOCK, TAG);
686        mNetTransitionWakeLockTimeout = mContext.getResources().getInteger(
687                com.android.internal.R.integer.config_networkTransitionTimeout);
688        mPendingIntentWakeLock = powerManager.newWakeLock(PowerManager.PARTIAL_WAKE_LOCK, TAG);
689
690        mNetConfigs = new NetworkConfig[ConnectivityManager.MAX_NETWORK_TYPE+1];
691
692        // TODO: What is the "correct" way to do determine if this is a wifi only device?
693        boolean wifiOnly = SystemProperties.getBoolean("ro.radio.noril", false);
694        log("wifiOnly=" + wifiOnly);
695        String[] naStrings = context.getResources().getStringArray(
696                com.android.internal.R.array.networkAttributes);
697        for (String naString : naStrings) {
698            try {
699                NetworkConfig n = new NetworkConfig(naString);
700                if (VDBG) log("naString=" + naString + " config=" + n);
701                if (n.type > ConnectivityManager.MAX_NETWORK_TYPE) {
702                    loge("Error in networkAttributes - ignoring attempt to define type " +
703                            n.type);
704                    continue;
705                }
706                if (wifiOnly && ConnectivityManager.isNetworkTypeMobile(n.type)) {
707                    log("networkAttributes - ignoring mobile as this dev is wifiOnly " +
708                            n.type);
709                    continue;
710                }
711                if (mNetConfigs[n.type] != null) {
712                    loge("Error in networkAttributes - ignoring attempt to redefine type " +
713                            n.type);
714                    continue;
715                }
716                mLegacyTypeTracker.addSupportedType(n.type);
717
718                mNetConfigs[n.type] = n;
719                mNetworksDefined++;
720            } catch(Exception e) {
721                // ignore it - leave the entry null
722            }
723        }
724
725        // Forcibly add TYPE_VPN as a supported type, if it has not already been added via config.
726        if (mNetConfigs[TYPE_VPN] == null) {
727            // mNetConfigs is used only for "restore time", which isn't applicable to VPNs, so we
728            // don't need to add TYPE_VPN to mNetConfigs.
729            mLegacyTypeTracker.addSupportedType(TYPE_VPN);
730            mNetworksDefined++;  // used only in the log() statement below.
731        }
732
733        if (VDBG) log("mNetworksDefined=" + mNetworksDefined);
734
735        mProtectedNetworks = new ArrayList<Integer>();
736        int[] protectedNetworks = context.getResources().getIntArray(
737                com.android.internal.R.array.config_protectedNetworks);
738        for (int p : protectedNetworks) {
739            if ((mNetConfigs[p] != null) && (mProtectedNetworks.contains(p) == false)) {
740                mProtectedNetworks.add(p);
741            } else {
742                if (DBG) loge("Ignoring protectedNetwork " + p);
743            }
744        }
745
746        mTestMode = SystemProperties.get("cm.test.mode").equals("true")
747                && SystemProperties.get("ro.build.type").equals("eng");
748
749        mTethering = new Tethering(mContext, mNetd, statsService, mHandler.getLooper());
750
751        mPermissionMonitor = new PermissionMonitor(mContext, mNetd);
752
753        //set up the listener for user state for creating user VPNs
754        IntentFilter intentFilter = new IntentFilter();
755        intentFilter.addAction(Intent.ACTION_USER_STARTING);
756        intentFilter.addAction(Intent.ACTION_USER_STOPPING);
757        mContext.registerReceiverAsUser(
758                mUserIntentReceiver, UserHandle.ALL, intentFilter, null, null);
759
760        try {
761            mNetd.registerObserver(mTethering);
762            mNetd.registerObserver(mDataActivityObserver);
763        } catch (RemoteException e) {
764            loge("Error registering observer :" + e);
765        }
766
767        if (DBG) {
768            mInetLog = new ArrayList();
769        }
770
771        mSettingsObserver = new SettingsObserver(mContext, mHandler);
772        registerSettingsCallbacks();
773
774        mDataConnectionStats = new DataConnectionStats(mContext);
775        mDataConnectionStats.startMonitoring();
776
777        mPacManager = new PacManager(mContext, mHandler, EVENT_PROXY_HAS_CHANGED);
778
779        mUserManager = (UserManager) context.getSystemService(Context.USER_SERVICE);
780
781        mKeepaliveTracker = new KeepaliveTracker(mHandler);
782    }
783
784    private NetworkRequest createInternetRequestForTransport(int transportType) {
785        NetworkCapabilities netCap = new NetworkCapabilities();
786        netCap.addCapability(NET_CAPABILITY_INTERNET);
787        netCap.addCapability(NET_CAPABILITY_NOT_RESTRICTED);
788        if (transportType > -1) {
789            netCap.addTransportType(transportType);
790        }
791        return new NetworkRequest(netCap, TYPE_NONE, nextNetworkRequestId());
792    }
793
794    private void handleMobileDataAlwaysOn() {
795        final boolean enable = (Settings.Global.getInt(
796                mContext.getContentResolver(), Settings.Global.MOBILE_DATA_ALWAYS_ON, 0) == 1);
797        final boolean isEnabled = (mNetworkRequests.get(mDefaultMobileDataRequest) != null);
798        if (enable == isEnabled) {
799            return;  // Nothing to do.
800        }
801
802        if (enable) {
803            handleRegisterNetworkRequest(new NetworkRequestInfo(
804                    null, mDefaultMobileDataRequest, new Binder(), NetworkRequestInfo.REQUEST));
805        } else {
806            handleReleaseNetworkRequest(mDefaultMobileDataRequest, Process.SYSTEM_UID);
807        }
808    }
809
810    private void registerSettingsCallbacks() {
811        // Watch for global HTTP proxy changes.
812        mSettingsObserver.observe(
813                Settings.Global.getUriFor(Settings.Global.HTTP_PROXY),
814                EVENT_APPLY_GLOBAL_HTTP_PROXY);
815
816        // Watch for whether or not to keep mobile data always on.
817        mSettingsObserver.observe(
818                Settings.Global.getUriFor(Settings.Global.MOBILE_DATA_ALWAYS_ON),
819                EVENT_CONFIGURE_MOBILE_DATA_ALWAYS_ON);
820    }
821
822    private synchronized int nextNetworkRequestId() {
823        return mNextNetworkRequestId++;
824    }
825
826    @VisibleForTesting
827    protected int reserveNetId() {
828        synchronized (mNetworkForNetId) {
829            for (int i = MIN_NET_ID; i <= MAX_NET_ID; i++) {
830                int netId = mNextNetId;
831                if (++mNextNetId > MAX_NET_ID) mNextNetId = MIN_NET_ID;
832                // Make sure NetID unused.  http://b/16815182
833                if (!mNetIdInUse.get(netId)) {
834                    mNetIdInUse.put(netId, true);
835                    return netId;
836                }
837            }
838        }
839        throw new IllegalStateException("No free netIds");
840    }
841
842    private NetworkState getFilteredNetworkState(int networkType, int uid) {
843        NetworkInfo info = null;
844        LinkProperties lp = null;
845        NetworkCapabilities nc = null;
846        Network network = null;
847        String subscriberId = null;
848
849        if (mLegacyTypeTracker.isTypeSupported(networkType)) {
850            NetworkAgentInfo nai = mLegacyTypeTracker.getNetworkForType(networkType);
851            if (nai != null) {
852                synchronized (nai) {
853                    info = new NetworkInfo(nai.networkInfo);
854                    lp = new LinkProperties(nai.linkProperties);
855                    nc = new NetworkCapabilities(nai.networkCapabilities);
856                    // Network objects are outwardly immutable so there is no point to duplicating.
857                    // Duplicating also precludes sharing socket factories and connection pools.
858                    network = nai.network;
859                    subscriberId = (nai.networkMisc != null) ? nai.networkMisc.subscriberId : null;
860                }
861                info.setType(networkType);
862            } else {
863                info = new NetworkInfo(networkType, 0, getNetworkTypeName(networkType), "");
864                info.setDetailedState(NetworkInfo.DetailedState.DISCONNECTED, null, null);
865                info.setIsAvailable(true);
866                lp = new LinkProperties();
867                nc = new NetworkCapabilities();
868                network = null;
869            }
870            info = getFilteredNetworkInfo(info, lp, uid);
871        }
872
873        return new NetworkState(info, lp, nc, network, subscriberId, null);
874    }
875
876    private NetworkAgentInfo getNetworkAgentInfoForNetwork(Network network) {
877        if (network == null) {
878            return null;
879        }
880        synchronized (mNetworkForNetId) {
881            return mNetworkForNetId.get(network.netId);
882        }
883    };
884
885    private Network[] getVpnUnderlyingNetworks(int uid) {
886        if (!mLockdownEnabled) {
887            int user = UserHandle.getUserId(uid);
888            synchronized (mVpns) {
889                Vpn vpn = mVpns.get(user);
890                if (vpn != null && vpn.appliesToUid(uid)) {
891                    return vpn.getUnderlyingNetworks();
892                }
893            }
894        }
895        return null;
896    }
897
898    private NetworkState getUnfilteredActiveNetworkState(int uid) {
899        NetworkInfo info = null;
900        LinkProperties lp = null;
901        NetworkCapabilities nc = null;
902        Network network = null;
903        String subscriberId = null;
904
905        NetworkAgentInfo nai = getDefaultNetwork();
906
907        final Network[] networks = getVpnUnderlyingNetworks(uid);
908        if (networks != null) {
909            // getUnderlyingNetworks() returns:
910            // null => there was no VPN, or the VPN didn't specify anything, so we use the default.
911            // empty array => the VPN explicitly said "no default network".
912            // non-empty array => the VPN specified one or more default networks; we use the
913            //                    first one.
914            if (networks.length > 0) {
915                nai = getNetworkAgentInfoForNetwork(networks[0]);
916            } else {
917                nai = null;
918            }
919        }
920
921        if (nai != null) {
922            synchronized (nai) {
923                info = new NetworkInfo(nai.networkInfo);
924                lp = new LinkProperties(nai.linkProperties);
925                nc = new NetworkCapabilities(nai.networkCapabilities);
926                // Network objects are outwardly immutable so there is no point to duplicating.
927                // Duplicating also precludes sharing socket factories and connection pools.
928                network = nai.network;
929                subscriberId = (nai.networkMisc != null) ? nai.networkMisc.subscriberId : null;
930            }
931        }
932
933        return new NetworkState(info, lp, nc, network, subscriberId, null);
934    }
935
936    /**
937     * Check if UID should be blocked from using the network with the given LinkProperties.
938     */
939    private boolean isNetworkWithLinkPropertiesBlocked(LinkProperties lp, int uid) {
940        final boolean networkCostly;
941        final int uidRules;
942
943        final String iface = (lp == null ? "" : lp.getInterfaceName());
944        synchronized (mRulesLock) {
945            networkCostly = mMeteredIfaces.contains(iface);
946            uidRules = mUidRules.get(uid, RULE_ALLOW_ALL);
947        }
948
949        if ((uidRules & RULE_REJECT_ALL) != 0
950                || (networkCostly && (uidRules & RULE_REJECT_METERED) != 0)) {
951            return true;
952        }
953
954        // no restrictive rules; network is visible
955        return false;
956    }
957
958    /**
959     * Return a filtered {@link NetworkInfo}, potentially marked
960     * {@link DetailedState#BLOCKED} based on
961     * {@link #isNetworkWithLinkPropertiesBlocked}.
962     */
963    private NetworkInfo getFilteredNetworkInfo(NetworkInfo info, LinkProperties lp, int uid) {
964        if (info != null && isNetworkWithLinkPropertiesBlocked(lp, uid)) {
965            // network is blocked; clone and override state
966            info = new NetworkInfo(info);
967            info.setDetailedState(DetailedState.BLOCKED, null, null);
968            if (VDBG) {
969                log("returning Blocked NetworkInfo for ifname=" +
970                        lp.getInterfaceName() + ", uid=" + uid);
971            }
972        }
973        if (info != null && mLockdownTracker != null) {
974            info = mLockdownTracker.augmentNetworkInfo(info);
975            if (VDBG) log("returning Locked NetworkInfo");
976        }
977        return info;
978    }
979
980    /**
981     * Return NetworkInfo for the active (i.e., connected) network interface.
982     * It is assumed that at most one network is active at a time. If more
983     * than one is active, it is indeterminate which will be returned.
984     * @return the info for the active network, or {@code null} if none is
985     * active
986     */
987    @Override
988    public NetworkInfo getActiveNetworkInfo() {
989        enforceAccessPermission();
990        final int uid = Binder.getCallingUid();
991        NetworkState state = getUnfilteredActiveNetworkState(uid);
992        return getFilteredNetworkInfo(state.networkInfo, state.linkProperties, uid);
993    }
994
995    @Override
996    public Network getActiveNetwork() {
997        enforceAccessPermission();
998        final int uid = Binder.getCallingUid();
999        final int user = UserHandle.getUserId(uid);
1000        int vpnNetId = NETID_UNSET;
1001        synchronized (mVpns) {
1002            final Vpn vpn = mVpns.get(user);
1003            if (vpn != null && vpn.appliesToUid(uid)) vpnNetId = vpn.getNetId();
1004        }
1005        NetworkAgentInfo nai;
1006        if (vpnNetId != NETID_UNSET) {
1007            synchronized (mNetworkForNetId) {
1008                nai = mNetworkForNetId.get(vpnNetId);
1009            }
1010            if (nai != null) return nai.network;
1011        }
1012        nai = getDefaultNetwork();
1013        if (nai != null && isNetworkWithLinkPropertiesBlocked(nai.linkProperties, uid)) nai = null;
1014        return nai != null ? nai.network : null;
1015    }
1016
1017    public NetworkInfo getActiveNetworkInfoUnfiltered() {
1018        enforceAccessPermission();
1019        final int uid = Binder.getCallingUid();
1020        NetworkState state = getUnfilteredActiveNetworkState(uid);
1021        return state.networkInfo;
1022    }
1023
1024    @Override
1025    public NetworkInfo getActiveNetworkInfoForUid(int uid) {
1026        enforceConnectivityInternalPermission();
1027        NetworkState state = getUnfilteredActiveNetworkState(uid);
1028        return getFilteredNetworkInfo(state.networkInfo, state.linkProperties, uid);
1029    }
1030
1031    @Override
1032    public NetworkInfo getNetworkInfo(int networkType) {
1033        enforceAccessPermission();
1034        final int uid = Binder.getCallingUid();
1035        if (getVpnUnderlyingNetworks(uid) != null) {
1036            // A VPN is active, so we may need to return one of its underlying networks. This
1037            // information is not available in LegacyTypeTracker, so we have to get it from
1038            // getUnfilteredActiveNetworkState.
1039            NetworkState state = getUnfilteredActiveNetworkState(uid);
1040            if (state.networkInfo != null && state.networkInfo.getType() == networkType) {
1041                return getFilteredNetworkInfo(state.networkInfo, state.linkProperties, uid);
1042            }
1043        }
1044        NetworkState state = getFilteredNetworkState(networkType, uid);
1045        return state.networkInfo;
1046    }
1047
1048    @Override
1049    public NetworkInfo getNetworkInfoForNetwork(Network network) {
1050        enforceAccessPermission();
1051        final int uid = Binder.getCallingUid();
1052        NetworkInfo info = null;
1053        NetworkAgentInfo nai = getNetworkAgentInfoForNetwork(network);
1054        if (nai != null) {
1055            synchronized (nai) {
1056                info = new NetworkInfo(nai.networkInfo);
1057                info = getFilteredNetworkInfo(info, nai.linkProperties, uid);
1058            }
1059        }
1060        return info;
1061    }
1062
1063    @Override
1064    public NetworkInfo[] getAllNetworkInfo() {
1065        enforceAccessPermission();
1066        final ArrayList<NetworkInfo> result = Lists.newArrayList();
1067        for (int networkType = 0; networkType <= ConnectivityManager.MAX_NETWORK_TYPE;
1068                networkType++) {
1069            NetworkInfo info = getNetworkInfo(networkType);
1070            if (info != null) {
1071                result.add(info);
1072            }
1073        }
1074        return result.toArray(new NetworkInfo[result.size()]);
1075    }
1076
1077    @Override
1078    public Network getNetworkForType(int networkType) {
1079        enforceAccessPermission();
1080        final int uid = Binder.getCallingUid();
1081        NetworkState state = getFilteredNetworkState(networkType, uid);
1082        if (!isNetworkWithLinkPropertiesBlocked(state.linkProperties, uid)) {
1083            return state.network;
1084        }
1085        return null;
1086    }
1087
1088    @Override
1089    public Network[] getAllNetworks() {
1090        enforceAccessPermission();
1091        synchronized (mNetworkForNetId) {
1092            final Network[] result = new Network[mNetworkForNetId.size()];
1093            for (int i = 0; i < mNetworkForNetId.size(); i++) {
1094                result[i] = mNetworkForNetId.valueAt(i).network;
1095            }
1096            return result;
1097        }
1098    }
1099
1100    @Override
1101    public NetworkCapabilities[] getDefaultNetworkCapabilitiesForUser(int userId) {
1102        // The basic principle is: if an app's traffic could possibly go over a
1103        // network, without the app doing anything multinetwork-specific,
1104        // (hence, by "default"), then include that network's capabilities in
1105        // the array.
1106        //
1107        // In the normal case, app traffic only goes over the system's default
1108        // network connection, so that's the only network returned.
1109        //
1110        // With a VPN in force, some app traffic may go into the VPN, and thus
1111        // over whatever underlying networks the VPN specifies, while other app
1112        // traffic may go over the system default network (e.g.: a split-tunnel
1113        // VPN, or an app disallowed by the VPN), so the set of networks
1114        // returned includes the VPN's underlying networks and the system
1115        // default.
1116        enforceAccessPermission();
1117
1118        HashMap<Network, NetworkCapabilities> result = new HashMap<Network, NetworkCapabilities>();
1119
1120        NetworkAgentInfo nai = getDefaultNetwork();
1121        NetworkCapabilities nc = getNetworkCapabilitiesInternal(nai);
1122        if (nc != null) {
1123            result.put(nai.network, nc);
1124        }
1125
1126        if (!mLockdownEnabled) {
1127            synchronized (mVpns) {
1128                Vpn vpn = mVpns.get(userId);
1129                if (vpn != null) {
1130                    Network[] networks = vpn.getUnderlyingNetworks();
1131                    if (networks != null) {
1132                        for (Network network : networks) {
1133                            nai = getNetworkAgentInfoForNetwork(network);
1134                            nc = getNetworkCapabilitiesInternal(nai);
1135                            if (nc != null) {
1136                                result.put(network, nc);
1137                            }
1138                        }
1139                    }
1140                }
1141            }
1142        }
1143
1144        NetworkCapabilities[] out = new NetworkCapabilities[result.size()];
1145        out = result.values().toArray(out);
1146        return out;
1147    }
1148
1149    @Override
1150    public boolean isNetworkSupported(int networkType) {
1151        enforceAccessPermission();
1152        return mLegacyTypeTracker.isTypeSupported(networkType);
1153    }
1154
1155    /**
1156     * Return LinkProperties for the active (i.e., connected) default
1157     * network interface.  It is assumed that at most one default network
1158     * is active at a time. If more than one is active, it is indeterminate
1159     * which will be returned.
1160     * @return the ip properties for the active network, or {@code null} if
1161     * none is active
1162     */
1163    @Override
1164    public LinkProperties getActiveLinkProperties() {
1165        enforceAccessPermission();
1166        final int uid = Binder.getCallingUid();
1167        NetworkState state = getUnfilteredActiveNetworkState(uid);
1168        return state.linkProperties;
1169    }
1170
1171    @Override
1172    public LinkProperties getLinkPropertiesForType(int networkType) {
1173        enforceAccessPermission();
1174        NetworkAgentInfo nai = mLegacyTypeTracker.getNetworkForType(networkType);
1175        if (nai != null) {
1176            synchronized (nai) {
1177                return new LinkProperties(nai.linkProperties);
1178            }
1179        }
1180        return null;
1181    }
1182
1183    // TODO - this should be ALL networks
1184    @Override
1185    public LinkProperties getLinkProperties(Network network) {
1186        enforceAccessPermission();
1187        NetworkAgentInfo nai = getNetworkAgentInfoForNetwork(network);
1188        if (nai != null) {
1189            synchronized (nai) {
1190                return new LinkProperties(nai.linkProperties);
1191            }
1192        }
1193        return null;
1194    }
1195
1196    private NetworkCapabilities getNetworkCapabilitiesInternal(NetworkAgentInfo nai) {
1197        if (nai != null) {
1198            synchronized (nai) {
1199                if (nai.networkCapabilities != null) {
1200                    return new NetworkCapabilities(nai.networkCapabilities);
1201                }
1202            }
1203        }
1204        return null;
1205    }
1206
1207    @Override
1208    public NetworkCapabilities getNetworkCapabilities(Network network) {
1209        enforceAccessPermission();
1210        return getNetworkCapabilitiesInternal(getNetworkAgentInfoForNetwork(network));
1211    }
1212
1213    @Override
1214    public NetworkState[] getAllNetworkState() {
1215        // Require internal since we're handing out IMSI details
1216        enforceConnectivityInternalPermission();
1217
1218        final ArrayList<NetworkState> result = Lists.newArrayList();
1219        for (Network network : getAllNetworks()) {
1220            final NetworkAgentInfo nai = getNetworkAgentInfoForNetwork(network);
1221            if (nai != null) {
1222                synchronized (nai) {
1223                    final String subscriberId = (nai.networkMisc != null)
1224                            ? nai.networkMisc.subscriberId : null;
1225                    result.add(new NetworkState(nai.networkInfo, nai.linkProperties,
1226                            nai.networkCapabilities, network, subscriberId, null));
1227                }
1228            }
1229        }
1230        return result.toArray(new NetworkState[result.size()]);
1231    }
1232
1233    @Override
1234    public NetworkQuotaInfo getActiveNetworkQuotaInfo() {
1235        enforceAccessPermission();
1236        final int uid = Binder.getCallingUid();
1237        final long token = Binder.clearCallingIdentity();
1238        try {
1239            final NetworkState state = getUnfilteredActiveNetworkState(uid);
1240            if (state.networkInfo != null) {
1241                try {
1242                    return mPolicyManager.getNetworkQuotaInfo(state);
1243                } catch (RemoteException e) {
1244                }
1245            }
1246            return null;
1247        } finally {
1248            Binder.restoreCallingIdentity(token);
1249        }
1250    }
1251
1252    @Override
1253    public boolean isActiveNetworkMetered() {
1254        enforceAccessPermission();
1255        final int uid = Binder.getCallingUid();
1256        final long token = Binder.clearCallingIdentity();
1257        try {
1258            return isActiveNetworkMeteredUnchecked(uid);
1259        } finally {
1260            Binder.restoreCallingIdentity(token);
1261        }
1262    }
1263
1264    private boolean isActiveNetworkMeteredUnchecked(int uid) {
1265        final NetworkState state = getUnfilteredActiveNetworkState(uid);
1266        if (state.networkInfo != null) {
1267            try {
1268                return mPolicyManager.isNetworkMetered(state);
1269            } catch (RemoteException e) {
1270            }
1271        }
1272        return false;
1273    }
1274
1275    private INetworkManagementEventObserver mDataActivityObserver = new BaseNetworkObserver() {
1276        @Override
1277        public void interfaceClassDataActivityChanged(String label, boolean active, long tsNanos) {
1278            int deviceType = Integer.parseInt(label);
1279            sendDataActivityBroadcast(deviceType, active, tsNanos);
1280        }
1281    };
1282
1283    /**
1284     * Ensure that a network route exists to deliver traffic to the specified
1285     * host via the specified network interface.
1286     * @param networkType the type of the network over which traffic to the
1287     * specified host is to be routed
1288     * @param hostAddress the IP address of the host to which the route is
1289     * desired
1290     * @return {@code true} on success, {@code false} on failure
1291     */
1292    public boolean requestRouteToHostAddress(int networkType, byte[] hostAddress) {
1293        enforceChangePermission();
1294        if (mProtectedNetworks.contains(networkType)) {
1295            enforceConnectivityInternalPermission();
1296        }
1297
1298        InetAddress addr;
1299        try {
1300            addr = InetAddress.getByAddress(hostAddress);
1301        } catch (UnknownHostException e) {
1302            if (DBG) log("requestRouteToHostAddress got " + e.toString());
1303            return false;
1304        }
1305
1306        if (!ConnectivityManager.isNetworkTypeValid(networkType)) {
1307            if (DBG) log("requestRouteToHostAddress on invalid network: " + networkType);
1308            return false;
1309        }
1310
1311        NetworkAgentInfo nai = mLegacyTypeTracker.getNetworkForType(networkType);
1312        if (nai == null) {
1313            if (mLegacyTypeTracker.isTypeSupported(networkType) == false) {
1314                if (DBG) log("requestRouteToHostAddress on unsupported network: " + networkType);
1315            } else {
1316                if (DBG) log("requestRouteToHostAddress on down network: " + networkType);
1317            }
1318            return false;
1319        }
1320
1321        DetailedState netState;
1322        synchronized (nai) {
1323            netState = nai.networkInfo.getDetailedState();
1324        }
1325
1326        if (netState != DetailedState.CONNECTED && netState != DetailedState.CAPTIVE_PORTAL_CHECK) {
1327            if (VDBG) {
1328                log("requestRouteToHostAddress on down network "
1329                        + "(" + networkType + ") - dropped"
1330                        + " netState=" + netState);
1331            }
1332            return false;
1333        }
1334
1335        final int uid = Binder.getCallingUid();
1336        final long token = Binder.clearCallingIdentity();
1337        try {
1338            LinkProperties lp;
1339            int netId;
1340            synchronized (nai) {
1341                lp = nai.linkProperties;
1342                netId = nai.network.netId;
1343            }
1344            boolean ok = addLegacyRouteToHost(lp, addr, netId, uid);
1345            if (DBG) log("requestRouteToHostAddress ok=" + ok);
1346            return ok;
1347        } finally {
1348            Binder.restoreCallingIdentity(token);
1349        }
1350    }
1351
1352    private boolean addLegacyRouteToHost(LinkProperties lp, InetAddress addr, int netId, int uid) {
1353        RouteInfo bestRoute = RouteInfo.selectBestRoute(lp.getAllRoutes(), addr);
1354        if (bestRoute == null) {
1355            bestRoute = RouteInfo.makeHostRoute(addr, lp.getInterfaceName());
1356        } else {
1357            String iface = bestRoute.getInterface();
1358            if (bestRoute.getGateway().equals(addr)) {
1359                // if there is no better route, add the implied hostroute for our gateway
1360                bestRoute = RouteInfo.makeHostRoute(addr, iface);
1361            } else {
1362                // if we will connect to this through another route, add a direct route
1363                // to it's gateway
1364                bestRoute = RouteInfo.makeHostRoute(addr, bestRoute.getGateway(), iface);
1365            }
1366        }
1367        if (DBG) log("Adding " + bestRoute + " for interface " + bestRoute.getInterface());
1368        try {
1369            mNetd.addLegacyRouteForNetId(netId, bestRoute, uid);
1370        } catch (Exception e) {
1371            // never crash - catch them all
1372            if (DBG) loge("Exception trying to add a route: " + e);
1373            return false;
1374        }
1375        return true;
1376    }
1377
1378    private INetworkPolicyListener mPolicyListener = new INetworkPolicyListener.Stub() {
1379        @Override
1380        public void onUidRulesChanged(int uid, int uidRules) {
1381            // caller is NPMS, since we only register with them
1382            if (LOGD_RULES) {
1383                log("onUidRulesChanged(uid=" + uid + ", uidRules=" + uidRules + ")");
1384            }
1385
1386            synchronized (mRulesLock) {
1387                // skip update when we've already applied rules
1388                final int oldRules = mUidRules.get(uid, RULE_ALLOW_ALL);
1389                if (oldRules == uidRules) return;
1390
1391                mUidRules.put(uid, uidRules);
1392            }
1393
1394            // TODO: notify UID when it has requested targeted updates
1395        }
1396
1397        @Override
1398        public void onMeteredIfacesChanged(String[] meteredIfaces) {
1399            // caller is NPMS, since we only register with them
1400            if (LOGD_RULES) {
1401                log("onMeteredIfacesChanged(ifaces=" + Arrays.toString(meteredIfaces) + ")");
1402            }
1403
1404            synchronized (mRulesLock) {
1405                mMeteredIfaces.clear();
1406                for (String iface : meteredIfaces) {
1407                    mMeteredIfaces.add(iface);
1408                }
1409            }
1410        }
1411
1412        @Override
1413        public void onRestrictBackgroundChanged(boolean restrictBackground) {
1414            // caller is NPMS, since we only register with them
1415            if (LOGD_RULES) {
1416                log("onRestrictBackgroundChanged(restrictBackground=" + restrictBackground + ")");
1417            }
1418        }
1419    };
1420
1421    /**
1422     * Require that the caller is either in the same user or has appropriate permission to interact
1423     * across users.
1424     *
1425     * @param userId Target user for whatever operation the current IPC is supposed to perform.
1426     */
1427    private void enforceCrossUserPermission(int userId) {
1428        if (userId == UserHandle.getCallingUserId()) {
1429            // Not a cross-user call.
1430            return;
1431        }
1432        mContext.enforceCallingOrSelfPermission(
1433                android.Manifest.permission.INTERACT_ACROSS_USERS_FULL,
1434                "ConnectivityService");
1435    }
1436
1437    private void enforceInternetPermission() {
1438        mContext.enforceCallingOrSelfPermission(
1439                android.Manifest.permission.INTERNET,
1440                "ConnectivityService");
1441    }
1442
1443    private void enforceAccessPermission() {
1444        mContext.enforceCallingOrSelfPermission(
1445                android.Manifest.permission.ACCESS_NETWORK_STATE,
1446                "ConnectivityService");
1447    }
1448
1449    private void enforceChangePermission() {
1450        int uid = Binder.getCallingUid();
1451        Settings.checkAndNoteChangeNetworkStateOperation(mContext, uid, Settings
1452                .getPackageNameForUid(mContext, uid), true);
1453
1454    }
1455
1456    private void enforceTetherAccessPermission() {
1457        mContext.enforceCallingOrSelfPermission(
1458                android.Manifest.permission.ACCESS_NETWORK_STATE,
1459                "ConnectivityService");
1460    }
1461
1462    private void enforceConnectivityInternalPermission() {
1463        mContext.enforceCallingOrSelfPermission(
1464                android.Manifest.permission.CONNECTIVITY_INTERNAL,
1465                "ConnectivityService");
1466    }
1467
1468    private void enforceKeepalivePermission() {
1469        mContext.enforceCallingOrSelfPermission(KeepaliveTracker.PERMISSION, "ConnectivityService");
1470    }
1471
1472    public void sendConnectedBroadcast(NetworkInfo info) {
1473        enforceConnectivityInternalPermission();
1474        sendGeneralBroadcast(info, CONNECTIVITY_ACTION);
1475    }
1476
1477    private void sendInetConditionBroadcast(NetworkInfo info) {
1478        sendGeneralBroadcast(info, ConnectivityManager.INET_CONDITION_ACTION);
1479    }
1480
1481    private Intent makeGeneralIntent(NetworkInfo info, String bcastType) {
1482        if (mLockdownTracker != null) {
1483            info = mLockdownTracker.augmentNetworkInfo(info);
1484        }
1485
1486        Intent intent = new Intent(bcastType);
1487        intent.putExtra(ConnectivityManager.EXTRA_NETWORK_INFO, new NetworkInfo(info));
1488        intent.putExtra(ConnectivityManager.EXTRA_NETWORK_TYPE, info.getType());
1489        if (info.isFailover()) {
1490            intent.putExtra(ConnectivityManager.EXTRA_IS_FAILOVER, true);
1491            info.setFailover(false);
1492        }
1493        if (info.getReason() != null) {
1494            intent.putExtra(ConnectivityManager.EXTRA_REASON, info.getReason());
1495        }
1496        if (info.getExtraInfo() != null) {
1497            intent.putExtra(ConnectivityManager.EXTRA_EXTRA_INFO,
1498                    info.getExtraInfo());
1499        }
1500        intent.putExtra(ConnectivityManager.EXTRA_INET_CONDITION, mDefaultInetConditionPublished);
1501        return intent;
1502    }
1503
1504    private void sendGeneralBroadcast(NetworkInfo info, String bcastType) {
1505        sendStickyBroadcast(makeGeneralIntent(info, bcastType));
1506    }
1507
1508    private void sendDataActivityBroadcast(int deviceType, boolean active, long tsNanos) {
1509        Intent intent = new Intent(ConnectivityManager.ACTION_DATA_ACTIVITY_CHANGE);
1510        intent.putExtra(ConnectivityManager.EXTRA_DEVICE_TYPE, deviceType);
1511        intent.putExtra(ConnectivityManager.EXTRA_IS_ACTIVE, active);
1512        intent.putExtra(ConnectivityManager.EXTRA_REALTIME_NS, tsNanos);
1513        final long ident = Binder.clearCallingIdentity();
1514        try {
1515            mContext.sendOrderedBroadcastAsUser(intent, UserHandle.ALL,
1516                    RECEIVE_DATA_ACTIVITY_CHANGE, null, null, 0, null, null);
1517        } finally {
1518            Binder.restoreCallingIdentity(ident);
1519        }
1520    }
1521
1522    private void sendStickyBroadcast(Intent intent) {
1523        synchronized(this) {
1524            if (!mSystemReady) {
1525                mInitialBroadcast = new Intent(intent);
1526            }
1527            intent.addFlags(Intent.FLAG_RECEIVER_REGISTERED_ONLY_BEFORE_BOOT);
1528            if (DBG) {
1529                log("sendStickyBroadcast: action=" + intent.getAction());
1530            }
1531
1532            final long ident = Binder.clearCallingIdentity();
1533            if (ConnectivityManager.CONNECTIVITY_ACTION.equals(intent.getAction())) {
1534                final NetworkInfo ni = intent.getParcelableExtra(
1535                        ConnectivityManager.EXTRA_NETWORK_INFO);
1536                if (ni.getType() == ConnectivityManager.TYPE_MOBILE_SUPL) {
1537                    intent.setAction(ConnectivityManager.CONNECTIVITY_ACTION_SUPL);
1538                    intent.addFlags(Intent.FLAG_RECEIVER_REGISTERED_ONLY);
1539                }
1540                final IBatteryStats bs = BatteryStatsService.getService();
1541                try {
1542                    bs.noteConnectivityChanged(intent.getIntExtra(
1543                            ConnectivityManager.EXTRA_NETWORK_TYPE, ConnectivityManager.TYPE_NONE),
1544                            ni != null ? ni.getState().toString() : "?");
1545                } catch (RemoteException e) {
1546                }
1547            }
1548            try {
1549                mContext.sendStickyBroadcastAsUser(intent, UserHandle.ALL);
1550            } finally {
1551                Binder.restoreCallingIdentity(ident);
1552            }
1553        }
1554    }
1555
1556    void systemReady() {
1557        loadGlobalProxy();
1558
1559        synchronized(this) {
1560            mSystemReady = true;
1561            if (mInitialBroadcast != null) {
1562                mContext.sendStickyBroadcastAsUser(mInitialBroadcast, UserHandle.ALL);
1563                mInitialBroadcast = null;
1564            }
1565        }
1566        // load the global proxy at startup
1567        mHandler.sendMessage(mHandler.obtainMessage(EVENT_APPLY_GLOBAL_HTTP_PROXY));
1568
1569        // Try bringing up tracker, but if KeyStore isn't ready yet, wait
1570        // for user to unlock device.
1571        if (!updateLockdownVpn()) {
1572            final IntentFilter filter = new IntentFilter(Intent.ACTION_USER_PRESENT);
1573            mContext.registerReceiver(mUserPresentReceiver, filter);
1574        }
1575
1576        // Configure whether mobile data is always on.
1577        mHandler.sendMessage(mHandler.obtainMessage(EVENT_CONFIGURE_MOBILE_DATA_ALWAYS_ON));
1578
1579        mHandler.sendMessage(mHandler.obtainMessage(EVENT_SYSTEM_READY));
1580
1581        mPermissionMonitor.startMonitoring();
1582    }
1583
1584    private BroadcastReceiver mUserPresentReceiver = new BroadcastReceiver() {
1585        @Override
1586        public void onReceive(Context context, Intent intent) {
1587            // Try creating lockdown tracker, since user present usually means
1588            // unlocked keystore.
1589            if (updateLockdownVpn()) {
1590                mContext.unregisterReceiver(this);
1591            }
1592        }
1593    };
1594
1595    /**
1596     * Setup data activity tracking for the given network.
1597     *
1598     * Every {@code setupDataActivityTracking} should be paired with a
1599     * {@link #removeDataActivityTracking} for cleanup.
1600     */
1601    private void setupDataActivityTracking(NetworkAgentInfo networkAgent) {
1602        final String iface = networkAgent.linkProperties.getInterfaceName();
1603
1604        final int timeout;
1605        int type = ConnectivityManager.TYPE_NONE;
1606
1607        if (networkAgent.networkCapabilities.hasTransport(
1608                NetworkCapabilities.TRANSPORT_CELLULAR)) {
1609            timeout = Settings.Global.getInt(mContext.getContentResolver(),
1610                                             Settings.Global.DATA_ACTIVITY_TIMEOUT_MOBILE,
1611                                             10);
1612            type = ConnectivityManager.TYPE_MOBILE;
1613        } else if (networkAgent.networkCapabilities.hasTransport(
1614                NetworkCapabilities.TRANSPORT_WIFI)) {
1615            timeout = Settings.Global.getInt(mContext.getContentResolver(),
1616                                             Settings.Global.DATA_ACTIVITY_TIMEOUT_WIFI,
1617                                             15);
1618            type = ConnectivityManager.TYPE_WIFI;
1619        } else {
1620            // do not track any other networks
1621            timeout = 0;
1622        }
1623
1624        if (timeout > 0 && iface != null && type != ConnectivityManager.TYPE_NONE) {
1625            try {
1626                mNetd.addIdleTimer(iface, timeout, type);
1627            } catch (Exception e) {
1628                // You shall not crash!
1629                loge("Exception in setupDataActivityTracking " + e);
1630            }
1631        }
1632    }
1633
1634    /**
1635     * Remove data activity tracking when network disconnects.
1636     */
1637    private void removeDataActivityTracking(NetworkAgentInfo networkAgent) {
1638        final String iface = networkAgent.linkProperties.getInterfaceName();
1639        final NetworkCapabilities caps = networkAgent.networkCapabilities;
1640
1641        if (iface != null && (caps.hasTransport(NetworkCapabilities.TRANSPORT_CELLULAR) ||
1642                              caps.hasTransport(NetworkCapabilities.TRANSPORT_WIFI))) {
1643            try {
1644                // the call fails silently if no idletimer setup for this interface
1645                mNetd.removeIdleTimer(iface);
1646            } catch (Exception e) {
1647                loge("Exception in removeDataActivityTracking " + e);
1648            }
1649        }
1650    }
1651
1652    /**
1653     * Reads the network specific MTU size from reources.
1654     * and set it on it's iface.
1655     */
1656    private void updateMtu(LinkProperties newLp, LinkProperties oldLp) {
1657        final String iface = newLp.getInterfaceName();
1658        final int mtu = newLp.getMtu();
1659        if (oldLp != null && newLp.isIdenticalMtu(oldLp)) {
1660            if (VDBG) log("identical MTU - not setting");
1661            return;
1662        }
1663
1664        if (LinkProperties.isValidMtu(mtu, newLp.hasGlobalIPv6Address()) == false) {
1665            loge("Unexpected mtu value: " + mtu + ", " + iface);
1666            return;
1667        }
1668
1669        // Cannot set MTU without interface name
1670        if (TextUtils.isEmpty(iface)) {
1671            loge("Setting MTU size with null iface.");
1672            return;
1673        }
1674
1675        try {
1676            if (DBG) log("Setting MTU size: " + iface + ", " + mtu);
1677            mNetd.setMtu(iface, mtu);
1678        } catch (Exception e) {
1679            Slog.e(TAG, "exception in setMtu()" + e);
1680        }
1681    }
1682
1683    private static final String DEFAULT_TCP_BUFFER_SIZES = "4096,87380,110208,4096,16384,110208";
1684    private static final String DEFAULT_TCP_RWND_KEY = "net.tcp.default_init_rwnd";
1685
1686    // Overridden for testing purposes to avoid writing to SystemProperties.
1687    @VisibleForTesting
1688    protected int getDefaultTcpRwnd() {
1689        return SystemProperties.getInt(DEFAULT_TCP_RWND_KEY, 0);
1690    }
1691
1692    private void updateTcpBufferSizes(NetworkAgentInfo nai) {
1693        if (isDefaultNetwork(nai) == false) {
1694            return;
1695        }
1696
1697        String tcpBufferSizes = nai.linkProperties.getTcpBufferSizes();
1698        String[] values = null;
1699        if (tcpBufferSizes != null) {
1700            values = tcpBufferSizes.split(",");
1701        }
1702
1703        if (values == null || values.length != 6) {
1704            if (DBG) log("Invalid tcpBufferSizes string: " + tcpBufferSizes +", using defaults");
1705            tcpBufferSizes = DEFAULT_TCP_BUFFER_SIZES;
1706            values = tcpBufferSizes.split(",");
1707        }
1708
1709        if (tcpBufferSizes.equals(mCurrentTcpBufferSizes)) return;
1710
1711        try {
1712            if (DBG) Slog.d(TAG, "Setting tx/rx TCP buffers to " + tcpBufferSizes);
1713
1714            final String prefix = "/sys/kernel/ipv4/tcp_";
1715            FileUtils.stringToFile(prefix + "rmem_min", values[0]);
1716            FileUtils.stringToFile(prefix + "rmem_def", values[1]);
1717            FileUtils.stringToFile(prefix + "rmem_max", values[2]);
1718            FileUtils.stringToFile(prefix + "wmem_min", values[3]);
1719            FileUtils.stringToFile(prefix + "wmem_def", values[4]);
1720            FileUtils.stringToFile(prefix + "wmem_max", values[5]);
1721            mCurrentTcpBufferSizes = tcpBufferSizes;
1722        } catch (IOException e) {
1723            loge("Can't set TCP buffer sizes:" + e);
1724        }
1725
1726        Integer rwndValue = Settings.Global.getInt(mContext.getContentResolver(),
1727            Settings.Global.TCP_DEFAULT_INIT_RWND, getDefaultTcpRwnd());
1728        final String sysctlKey = "sys.sysctl.tcp_def_init_rwnd";
1729        if (rwndValue != 0) {
1730            SystemProperties.set(sysctlKey, rwndValue.toString());
1731        }
1732    }
1733
1734    private void flushVmDnsCache() {
1735        /*
1736         * Tell the VMs to toss their DNS caches
1737         */
1738        Intent intent = new Intent(Intent.ACTION_CLEAR_DNS_CACHE);
1739        intent.addFlags(Intent.FLAG_RECEIVER_REPLACE_PENDING);
1740        /*
1741         * Connectivity events can happen before boot has completed ...
1742         */
1743        intent.addFlags(Intent.FLAG_RECEIVER_REGISTERED_ONLY_BEFORE_BOOT);
1744        final long ident = Binder.clearCallingIdentity();
1745        try {
1746            mContext.sendBroadcastAsUser(intent, UserHandle.ALL);
1747        } finally {
1748            Binder.restoreCallingIdentity(ident);
1749        }
1750    }
1751
1752    @Override
1753    public int getRestoreDefaultNetworkDelay(int networkType) {
1754        String restoreDefaultNetworkDelayStr = SystemProperties.get(
1755                NETWORK_RESTORE_DELAY_PROP_NAME);
1756        if(restoreDefaultNetworkDelayStr != null &&
1757                restoreDefaultNetworkDelayStr.length() != 0) {
1758            try {
1759                return Integer.valueOf(restoreDefaultNetworkDelayStr);
1760            } catch (NumberFormatException e) {
1761            }
1762        }
1763        // if the system property isn't set, use the value for the apn type
1764        int ret = RESTORE_DEFAULT_NETWORK_DELAY;
1765
1766        if ((networkType <= ConnectivityManager.MAX_NETWORK_TYPE) &&
1767                (mNetConfigs[networkType] != null)) {
1768            ret = mNetConfigs[networkType].restoreTime;
1769        }
1770        return ret;
1771    }
1772
1773    private boolean argsContain(String[] args, String target) {
1774        for (String arg : args) {
1775            if (arg.equals(target)) return true;
1776        }
1777        return false;
1778    }
1779
1780    @Override
1781    protected void dump(FileDescriptor fd, PrintWriter writer, String[] args) {
1782        final IndentingPrintWriter pw = new IndentingPrintWriter(writer, "  ");
1783        if (mContext.checkCallingOrSelfPermission(
1784                android.Manifest.permission.DUMP)
1785                != PackageManager.PERMISSION_GRANTED) {
1786            pw.println("Permission Denial: can't dump ConnectivityService " +
1787                    "from from pid=" + Binder.getCallingPid() + ", uid=" +
1788                    Binder.getCallingUid());
1789            return;
1790        }
1791
1792        final List<NetworkDiagnostics> netDiags = new ArrayList<NetworkDiagnostics>();
1793        if (argsContain(args, "--diag")) {
1794            final long DIAG_TIME_MS = 5000;
1795            for (NetworkAgentInfo nai : mNetworkAgentInfos.values()) {
1796                // Start gathering diagnostic information.
1797                netDiags.add(new NetworkDiagnostics(
1798                        nai.network,
1799                        new LinkProperties(nai.linkProperties),  // Must be a copy.
1800                        DIAG_TIME_MS));
1801            }
1802
1803            for (NetworkDiagnostics netDiag : netDiags) {
1804                pw.println();
1805                netDiag.waitForMeasurements();
1806                netDiag.dump(pw);
1807            }
1808
1809            return;
1810        }
1811
1812        pw.print("NetworkFactories for:");
1813        for (NetworkFactoryInfo nfi : mNetworkFactoryInfos.values()) {
1814            pw.print(" " + nfi.name);
1815        }
1816        pw.println();
1817        pw.println();
1818
1819        final NetworkAgentInfo defaultNai = getDefaultNetwork();
1820        pw.print("Active default network: ");
1821        if (defaultNai == null) {
1822            pw.println("none");
1823        } else {
1824            pw.println(defaultNai.network.netId);
1825        }
1826        pw.println();
1827
1828        pw.println("Current Networks:");
1829        pw.increaseIndent();
1830        for (NetworkAgentInfo nai : mNetworkAgentInfos.values()) {
1831            pw.println(nai.toString());
1832            pw.increaseIndent();
1833            pw.println("Requests:");
1834            pw.increaseIndent();
1835            for (int i = 0; i < nai.networkRequests.size(); i++) {
1836                pw.println(nai.networkRequests.valueAt(i).toString());
1837            }
1838            pw.decreaseIndent();
1839            pw.println("Lingered:");
1840            pw.increaseIndent();
1841            for (NetworkRequest nr : nai.networkLingered) pw.println(nr.toString());
1842            pw.decreaseIndent();
1843            pw.decreaseIndent();
1844        }
1845        pw.decreaseIndent();
1846        pw.println();
1847
1848        pw.println("Network Requests:");
1849        pw.increaseIndent();
1850        for (NetworkRequestInfo nri : mNetworkRequests.values()) {
1851            pw.println(nri.toString());
1852        }
1853        pw.println();
1854        pw.decreaseIndent();
1855
1856        mLegacyTypeTracker.dump(pw);
1857
1858        synchronized (this) {
1859            pw.print("mNetTransitionWakeLock: currently " +
1860                    (mNetTransitionWakeLock.isHeld() ? "" : "not ") + "held");
1861            if (!TextUtils.isEmpty(mNetTransitionWakeLockCausedBy)) {
1862                pw.println(", last requested for " + mNetTransitionWakeLockCausedBy);
1863            } else {
1864                pw.println(", last requested never");
1865            }
1866        }
1867
1868        pw.println();
1869        mTethering.dump(fd, pw, args);
1870
1871        pw.println();
1872        mKeepaliveTracker.dump(pw);
1873
1874        if (mInetLog != null && mInetLog.size() > 0) {
1875            pw.println();
1876            pw.println("Inet condition reports:");
1877            pw.increaseIndent();
1878            for(int i = 0; i < mInetLog.size(); i++) {
1879                pw.println(mInetLog.get(i));
1880            }
1881            pw.decreaseIndent();
1882        }
1883
1884        if (argsContain(args, "--short") == false) {
1885            pw.println();
1886            synchronized (mValidationLogs) {
1887                pw.println("mValidationLogs (most recent first):");
1888                for (Pair<Network,ReadOnlyLocalLog> p : mValidationLogs) {
1889                    pw.println(p.first);
1890                    pw.increaseIndent();
1891                    p.second.dump(fd, pw, args);
1892                    pw.decreaseIndent();
1893                }
1894            }
1895
1896            pw.println();
1897            pw.println("mNetworkRequestInfoLogs (most recent first):");
1898            pw.increaseIndent();
1899            mNetworkRequestInfoLogs.reverseDump(fd, pw, args);
1900            pw.decreaseIndent();
1901        }
1902    }
1903
1904    private boolean isLiveNetworkAgent(NetworkAgentInfo nai, String msg) {
1905        if (nai.network == null) return false;
1906        final NetworkAgentInfo officialNai = getNetworkAgentInfoForNetwork(nai.network);
1907        if (officialNai != null && officialNai.equals(nai)) return true;
1908        if (officialNai != null || VDBG) {
1909            loge(msg + " - isLiveNetworkAgent found mismatched netId: " + officialNai +
1910                " - " + nai);
1911        }
1912        return false;
1913    }
1914
1915    private boolean isRequest(NetworkRequest request) {
1916        return mNetworkRequests.get(request).isRequest;
1917    }
1918
1919    // must be stateless - things change under us.
1920    private class NetworkStateTrackerHandler extends Handler {
1921        public NetworkStateTrackerHandler(Looper looper) {
1922            super(looper);
1923        }
1924
1925        @Override
1926        public void handleMessage(Message msg) {
1927            NetworkInfo info;
1928            switch (msg.what) {
1929                case AsyncChannel.CMD_CHANNEL_HALF_CONNECTED: {
1930                    handleAsyncChannelHalfConnect(msg);
1931                    break;
1932                }
1933                case AsyncChannel.CMD_CHANNEL_DISCONNECT: {
1934                    NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
1935                    if (nai != null) nai.asyncChannel.disconnect();
1936                    break;
1937                }
1938                case AsyncChannel.CMD_CHANNEL_DISCONNECTED: {
1939                    handleAsyncChannelDisconnected(msg);
1940                    break;
1941                }
1942                case NetworkAgent.EVENT_NETWORK_CAPABILITIES_CHANGED: {
1943                    NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
1944                    if (nai == null) {
1945                        loge("EVENT_NETWORK_CAPABILITIES_CHANGED from unknown NetworkAgent");
1946                    } else {
1947                        final NetworkCapabilities networkCapabilities =
1948                                (NetworkCapabilities)msg.obj;
1949                        if (networkCapabilities.hasCapability(NET_CAPABILITY_CAPTIVE_PORTAL) ||
1950                                networkCapabilities.hasCapability(NET_CAPABILITY_VALIDATED)) {
1951                            Slog.wtf(TAG, "BUG: " + nai + " has CS-managed capability.");
1952                        }
1953                        if (nai.created && !nai.networkCapabilities.equalImmutableCapabilities(
1954                                networkCapabilities)) {
1955                            Slog.wtf(TAG, "BUG: " + nai + " changed immutable capabilities: "
1956                                    + nai.networkCapabilities + " -> " + networkCapabilities);
1957                        }
1958                        updateCapabilities(nai, networkCapabilities);
1959                    }
1960                    break;
1961                }
1962                case NetworkAgent.EVENT_NETWORK_PROPERTIES_CHANGED: {
1963                    NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
1964                    if (nai == null) {
1965                        loge("NetworkAgent not found for EVENT_NETWORK_PROPERTIES_CHANGED");
1966                    } else {
1967                        if (VDBG) {
1968                            log("Update of LinkProperties for " + nai.name() +
1969                                    "; created=" + nai.created);
1970                        }
1971                        LinkProperties oldLp = nai.linkProperties;
1972                        synchronized (nai) {
1973                            nai.linkProperties = (LinkProperties)msg.obj;
1974                        }
1975                        if (nai.created) updateLinkProperties(nai, oldLp);
1976                    }
1977                    break;
1978                }
1979                case NetworkAgent.EVENT_NETWORK_INFO_CHANGED: {
1980                    NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
1981                    if (nai == null) {
1982                        loge("EVENT_NETWORK_INFO_CHANGED from unknown NetworkAgent");
1983                        break;
1984                    }
1985                    info = (NetworkInfo) msg.obj;
1986                    updateNetworkInfo(nai, info);
1987                    break;
1988                }
1989                case NetworkAgent.EVENT_NETWORK_SCORE_CHANGED: {
1990                    NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
1991                    if (nai == null) {
1992                        loge("EVENT_NETWORK_SCORE_CHANGED from unknown NetworkAgent");
1993                        break;
1994                    }
1995                    Integer score = (Integer) msg.obj;
1996                    if (score != null) updateNetworkScore(nai, score.intValue());
1997                    break;
1998                }
1999                case NetworkAgent.EVENT_UID_RANGES_ADDED: {
2000                    NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
2001                    if (nai == null) {
2002                        loge("EVENT_UID_RANGES_ADDED from unknown NetworkAgent");
2003                        break;
2004                    }
2005                    try {
2006                        mNetd.addVpnUidRanges(nai.network.netId, (UidRange[])msg.obj);
2007                    } catch (Exception e) {
2008                        // Never crash!
2009                        loge("Exception in addVpnUidRanges: " + e);
2010                    }
2011                    break;
2012                }
2013                case NetworkAgent.EVENT_UID_RANGES_REMOVED: {
2014                    NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
2015                    if (nai == null) {
2016                        loge("EVENT_UID_RANGES_REMOVED from unknown NetworkAgent");
2017                        break;
2018                    }
2019                    try {
2020                        mNetd.removeVpnUidRanges(nai.network.netId, (UidRange[])msg.obj);
2021                    } catch (Exception e) {
2022                        // Never crash!
2023                        loge("Exception in removeVpnUidRanges: " + e);
2024                    }
2025                    break;
2026                }
2027                case NetworkAgent.EVENT_SET_EXPLICITLY_SELECTED: {
2028                    NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
2029                    if (nai == null) {
2030                        loge("EVENT_SET_EXPLICITLY_SELECTED from unknown NetworkAgent");
2031                        break;
2032                    }
2033                    if (nai.created && !nai.networkMisc.explicitlySelected) {
2034                        loge("ERROR: created network explicitly selected.");
2035                    }
2036                    nai.networkMisc.explicitlySelected = true;
2037                    nai.networkMisc.acceptUnvalidated = (boolean) msg.obj;
2038                    break;
2039                }
2040                case NetworkAgent.EVENT_PACKET_KEEPALIVE: {
2041                    NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
2042                    if (nai == null) {
2043                        loge("EVENT_PACKET_KEEPALIVE from unknown NetworkAgent");
2044                        break;
2045                    }
2046                    mKeepaliveTracker.handleEventPacketKeepalive(nai, msg);
2047                    break;
2048                }
2049                case NetworkMonitor.EVENT_NETWORK_TESTED: {
2050                    NetworkAgentInfo nai = (NetworkAgentInfo)msg.obj;
2051                    if (isLiveNetworkAgent(nai, "EVENT_NETWORK_TESTED")) {
2052                        final boolean valid =
2053                                (msg.arg1 == NetworkMonitor.NETWORK_TEST_RESULT_VALID);
2054                        if (DBG) log(nai.name() + " validation " + (valid ? " passed" : "failed"));
2055                        if (valid != nai.lastValidated) {
2056                            final int oldScore = nai.getCurrentScore();
2057                            nai.lastValidated = valid;
2058                            nai.everValidated |= valid;
2059                            updateCapabilities(nai, nai.networkCapabilities);
2060                            // If score has changed, rebroadcast to NetworkFactories. b/17726566
2061                            if (oldScore != nai.getCurrentScore()) sendUpdatedScoreToFactories(nai);
2062                        }
2063                        updateInetCondition(nai);
2064                        // Let the NetworkAgent know the state of its network
2065                        nai.asyncChannel.sendMessage(
2066                                android.net.NetworkAgent.CMD_REPORT_NETWORK_STATUS,
2067                                (valid ? NetworkAgent.VALID_NETWORK : NetworkAgent.INVALID_NETWORK),
2068                                0, null);
2069                    }
2070                    break;
2071                }
2072                case NetworkMonitor.EVENT_NETWORK_LINGER_COMPLETE: {
2073                    NetworkAgentInfo nai = (NetworkAgentInfo)msg.obj;
2074                    if (isLiveNetworkAgent(nai, "EVENT_NETWORK_LINGER_COMPLETE")) {
2075                        handleLingerComplete(nai);
2076                    }
2077                    break;
2078                }
2079                case NetworkMonitor.EVENT_PROVISIONING_NOTIFICATION: {
2080                    final int netId = msg.arg2;
2081                    final boolean visible = (msg.arg1 != 0);
2082                    final NetworkAgentInfo nai;
2083                    synchronized (mNetworkForNetId) {
2084                        nai = mNetworkForNetId.get(netId);
2085                    }
2086                    // If captive portal status has changed, update capabilities.
2087                    if (nai != null && (visible != nai.lastCaptivePortalDetected)) {
2088                        nai.lastCaptivePortalDetected = visible;
2089                        nai.everCaptivePortalDetected |= visible;
2090                        updateCapabilities(nai, nai.networkCapabilities);
2091                    }
2092                    if (!visible) {
2093                        setProvNotificationVisibleIntent(false, netId, null, 0, null, null, false);
2094                    } else {
2095                        if (nai == null) {
2096                            loge("EVENT_PROVISIONING_NOTIFICATION from unknown NetworkMonitor");
2097                            break;
2098                        }
2099                        setProvNotificationVisibleIntent(true, netId, NotificationType.SIGN_IN,
2100                                nai.networkInfo.getType(), nai.networkInfo.getExtraInfo(),
2101                                (PendingIntent)msg.obj, nai.networkMisc.explicitlySelected);
2102                    }
2103                    break;
2104                }
2105            }
2106        }
2107    }
2108
2109    private void linger(NetworkAgentInfo nai) {
2110        nai.lingering = true;
2111        nai.networkMonitor.sendMessage(NetworkMonitor.CMD_NETWORK_LINGER);
2112        notifyNetworkCallbacks(nai, ConnectivityManager.CALLBACK_LOSING);
2113    }
2114
2115    // Cancel any lingering so the linger timeout doesn't teardown a network.
2116    // This should be called when a network begins satisfying a NetworkRequest.
2117    // Note: depending on what state the NetworkMonitor is in (e.g.,
2118    // if it's awaiting captive portal login, or if validation failed), this
2119    // may trigger a re-evaluation of the network.
2120    private void unlinger(NetworkAgentInfo nai) {
2121        nai.networkLingered.clear();
2122        if (!nai.lingering) return;
2123        nai.lingering = false;
2124        if (VDBG) log("Canceling linger of " + nai.name());
2125        nai.networkMonitor.sendMessage(NetworkMonitor.CMD_NETWORK_CONNECTED);
2126    }
2127
2128    private void handleAsyncChannelHalfConnect(Message msg) {
2129        AsyncChannel ac = (AsyncChannel) msg.obj;
2130        if (mNetworkFactoryInfos.containsKey(msg.replyTo)) {
2131            if (msg.arg1 == AsyncChannel.STATUS_SUCCESSFUL) {
2132                if (VDBG) log("NetworkFactory connected");
2133                // A network factory has connected.  Send it all current NetworkRequests.
2134                for (NetworkRequestInfo nri : mNetworkRequests.values()) {
2135                    if (nri.isRequest == false) continue;
2136                    NetworkAgentInfo nai = mNetworkForRequestId.get(nri.request.requestId);
2137                    ac.sendMessage(android.net.NetworkFactory.CMD_REQUEST_NETWORK,
2138                            (nai != null ? nai.getCurrentScore() : 0), 0, nri.request);
2139                }
2140            } else {
2141                loge("Error connecting NetworkFactory");
2142                mNetworkFactoryInfos.remove(msg.obj);
2143            }
2144        } else if (mNetworkAgentInfos.containsKey(msg.replyTo)) {
2145            if (msg.arg1 == AsyncChannel.STATUS_SUCCESSFUL) {
2146                if (VDBG) log("NetworkAgent connected");
2147                // A network agent has requested a connection.  Establish the connection.
2148                mNetworkAgentInfos.get(msg.replyTo).asyncChannel.
2149                        sendMessage(AsyncChannel.CMD_CHANNEL_FULL_CONNECTION);
2150            } else {
2151                loge("Error connecting NetworkAgent");
2152                NetworkAgentInfo nai = mNetworkAgentInfos.remove(msg.replyTo);
2153                if (nai != null) {
2154                    final boolean wasDefault = isDefaultNetwork(nai);
2155                    synchronized (mNetworkForNetId) {
2156                        mNetworkForNetId.remove(nai.network.netId);
2157                        mNetIdInUse.delete(nai.network.netId);
2158                    }
2159                    // Just in case.
2160                    mLegacyTypeTracker.remove(nai, wasDefault);
2161                }
2162            }
2163        }
2164    }
2165
2166    private void handleAsyncChannelDisconnected(Message msg) {
2167        NetworkAgentInfo nai = mNetworkAgentInfos.get(msg.replyTo);
2168        if (nai != null) {
2169            if (DBG) {
2170                log(nai.name() + " got DISCONNECTED, was satisfying " + nai.networkRequests.size());
2171            }
2172            // A network agent has disconnected.
2173            // TODO - if we move the logic to the network agent (have them disconnect
2174            // because they lost all their requests or because their score isn't good)
2175            // then they would disconnect organically, report their new state and then
2176            // disconnect the channel.
2177            if (nai.networkInfo.isConnected()) {
2178                nai.networkInfo.setDetailedState(NetworkInfo.DetailedState.DISCONNECTED,
2179                        null, null);
2180            }
2181            final boolean wasDefault = isDefaultNetwork(nai);
2182            if (wasDefault) {
2183                mDefaultInetConditionPublished = 0;
2184            }
2185            notifyIfacesChanged();
2186            // TODO - we shouldn't send CALLBACK_LOST to requests that can be satisfied
2187            // by other networks that are already connected. Perhaps that can be done by
2188            // sending all CALLBACK_LOST messages (for requests, not listens) at the end
2189            // of rematchAllNetworksAndRequests
2190            notifyNetworkCallbacks(nai, ConnectivityManager.CALLBACK_LOST);
2191            mKeepaliveTracker.handleStopAllKeepalives(nai,
2192                    ConnectivityManager.PacketKeepalive.ERROR_INVALID_NETWORK);
2193            nai.networkMonitor.sendMessage(NetworkMonitor.CMD_NETWORK_DISCONNECTED);
2194            mNetworkAgentInfos.remove(msg.replyTo);
2195            updateClat(null, nai.linkProperties, nai);
2196            synchronized (mNetworkForNetId) {
2197                // Remove the NetworkAgent, but don't mark the netId as
2198                // available until we've told netd to delete it below.
2199                mNetworkForNetId.remove(nai.network.netId);
2200            }
2201            // Remove all previously satisfied requests.
2202            for (int i = 0; i < nai.networkRequests.size(); i++) {
2203                NetworkRequest request = nai.networkRequests.valueAt(i);
2204                NetworkAgentInfo currentNetwork = mNetworkForRequestId.get(request.requestId);
2205                if (currentNetwork != null && currentNetwork.network.netId == nai.network.netId) {
2206                    mNetworkForRequestId.remove(request.requestId);
2207                    sendUpdatedScoreToFactories(request, 0);
2208                }
2209            }
2210            if (nai.networkRequests.get(mDefaultRequest.requestId) != null) {
2211                removeDataActivityTracking(nai);
2212                notifyLockdownVpn(nai);
2213                requestNetworkTransitionWakelock(nai.name());
2214            }
2215            mLegacyTypeTracker.remove(nai, wasDefault);
2216            rematchAllNetworksAndRequests(null, 0);
2217            if (nai.created) {
2218                // Tell netd to clean up the configuration for this network
2219                // (routing rules, DNS, etc).
2220                // This may be slow as it requires a lot of netd shelling out to ip and
2221                // ip[6]tables to flush routes and remove the incoming packet mark rule, so do it
2222                // after we've rematched networks with requests which should make a potential
2223                // fallback network the default or requested a new network from the
2224                // NetworkFactories, so network traffic isn't interrupted for an unnecessarily
2225                // long time.
2226                try {
2227                    mNetd.removeNetwork(nai.network.netId);
2228                } catch (Exception e) {
2229                    loge("Exception removing network: " + e);
2230                }
2231            }
2232            synchronized (mNetworkForNetId) {
2233                mNetIdInUse.delete(nai.network.netId);
2234            }
2235        } else {
2236            NetworkFactoryInfo nfi = mNetworkFactoryInfos.remove(msg.replyTo);
2237            if (DBG && nfi != null) log("unregisterNetworkFactory for " + nfi.name);
2238        }
2239    }
2240
2241    // If this method proves to be too slow then we can maintain a separate
2242    // pendingIntent => NetworkRequestInfo map.
2243    // This method assumes that every non-null PendingIntent maps to exactly 1 NetworkRequestInfo.
2244    private NetworkRequestInfo findExistingNetworkRequestInfo(PendingIntent pendingIntent) {
2245        Intent intent = pendingIntent.getIntent();
2246        for (Map.Entry<NetworkRequest, NetworkRequestInfo> entry : mNetworkRequests.entrySet()) {
2247            PendingIntent existingPendingIntent = entry.getValue().mPendingIntent;
2248            if (existingPendingIntent != null &&
2249                    existingPendingIntent.getIntent().filterEquals(intent)) {
2250                return entry.getValue();
2251            }
2252        }
2253        return null;
2254    }
2255
2256    private void handleRegisterNetworkRequestWithIntent(Message msg) {
2257        final NetworkRequestInfo nri = (NetworkRequestInfo) (msg.obj);
2258
2259        NetworkRequestInfo existingRequest = findExistingNetworkRequestInfo(nri.mPendingIntent);
2260        if (existingRequest != null) { // remove the existing request.
2261            if (DBG) log("Replacing " + existingRequest.request + " with "
2262                    + nri.request + " because their intents matched.");
2263            handleReleaseNetworkRequest(existingRequest.request, getCallingUid());
2264        }
2265        handleRegisterNetworkRequest(nri);
2266    }
2267
2268    private void handleRegisterNetworkRequest(NetworkRequestInfo nri) {
2269        mNetworkRequests.put(nri.request, nri);
2270        mNetworkRequestInfoLogs.log("REGISTER " + nri);
2271        if (!nri.isRequest) {
2272            for (NetworkAgentInfo network : mNetworkAgentInfos.values()) {
2273                if (nri.request.networkCapabilities.hasSignalStrength() &&
2274                        network.satisfiesImmutableCapabilitiesOf(nri.request)) {
2275                    updateSignalStrengthThresholds(network, "REGISTER", nri.request);
2276                }
2277            }
2278        }
2279        rematchAllNetworksAndRequests(null, 0);
2280        if (nri.isRequest && mNetworkForRequestId.get(nri.request.requestId) == null) {
2281            sendUpdatedScoreToFactories(nri.request, 0);
2282        }
2283    }
2284
2285    private void handleReleaseNetworkRequestWithIntent(PendingIntent pendingIntent,
2286            int callingUid) {
2287        NetworkRequestInfo nri = findExistingNetworkRequestInfo(pendingIntent);
2288        if (nri != null) {
2289            handleReleaseNetworkRequest(nri.request, callingUid);
2290        }
2291    }
2292
2293    // Is nai unneeded by all NetworkRequests (and should be disconnected)?
2294    // This is whether it is satisfying any NetworkRequests or were it to become validated,
2295    // would it have a chance of satisfying any NetworkRequests.
2296    private boolean unneeded(NetworkAgentInfo nai) {
2297        if (!nai.created || nai.isVPN() || nai.lingering) return false;
2298        for (NetworkRequestInfo nri : mNetworkRequests.values()) {
2299            // If this Network is already the highest scoring Network for a request, or if
2300            // there is hope for it to become one if it validated, then it is needed.
2301            if (nri.isRequest && nai.satisfies(nri.request) &&
2302                    (nai.networkRequests.get(nri.request.requestId) != null ||
2303                    // Note that this catches two important cases:
2304                    // 1. Unvalidated cellular will not be reaped when unvalidated WiFi
2305                    //    is currently satisfying the request.  This is desirable when
2306                    //    cellular ends up validating but WiFi does not.
2307                    // 2. Unvalidated WiFi will not be reaped when validated cellular
2308                    //    is currently satisfying the request.  This is desirable when
2309                    //    WiFi ends up validating and out scoring cellular.
2310                    mNetworkForRequestId.get(nri.request.requestId).getCurrentScore() <
2311                            nai.getCurrentScoreAsValidated())) {
2312                return false;
2313            }
2314        }
2315        return true;
2316    }
2317
2318    private void handleReleaseNetworkRequest(NetworkRequest request, int callingUid) {
2319        NetworkRequestInfo nri = mNetworkRequests.get(request);
2320        if (nri != null) {
2321            if (Process.SYSTEM_UID != callingUid && nri.mUid != callingUid) {
2322                if (DBG) log("Attempt to release unowned NetworkRequest " + request);
2323                return;
2324            }
2325            if (DBG) log("releasing NetworkRequest " + request);
2326            nri.unlinkDeathRecipient();
2327            mNetworkRequests.remove(request);
2328            mNetworkRequestInfoLogs.log("RELEASE " + nri);
2329            if (nri.isRequest) {
2330                // Find all networks that are satisfying this request and remove the request
2331                // from their request lists.
2332                // TODO - it's my understanding that for a request there is only a single
2333                // network satisfying it, so this loop is wasteful
2334                boolean wasKept = false;
2335                for (NetworkAgentInfo nai : mNetworkAgentInfos.values()) {
2336                    if (nai.networkRequests.get(nri.request.requestId) != null) {
2337                        nai.networkRequests.remove(nri.request.requestId);
2338                        if (DBG) {
2339                            log(" Removing from current network " + nai.name() +
2340                                    ", leaving " + nai.networkRequests.size() +
2341                                    " requests.");
2342                        }
2343                        if (unneeded(nai)) {
2344                            if (DBG) log("no live requests for " + nai.name() + "; disconnecting");
2345                            teardownUnneededNetwork(nai);
2346                        } else {
2347                            // suspect there should only be one pass through here
2348                            // but if any were kept do the check below
2349                            wasKept |= true;
2350                        }
2351                    }
2352                }
2353
2354                NetworkAgentInfo nai = mNetworkForRequestId.get(nri.request.requestId);
2355                if (nai != null) {
2356                    mNetworkForRequestId.remove(nri.request.requestId);
2357                }
2358                // Maintain the illusion.  When this request arrived, we might have pretended
2359                // that a network connected to serve it, even though the network was already
2360                // connected.  Now that this request has gone away, we might have to pretend
2361                // that the network disconnected.  LegacyTypeTracker will generate that
2362                // phantom disconnect for this type.
2363                if (nri.request.legacyType != TYPE_NONE && nai != null) {
2364                    boolean doRemove = true;
2365                    if (wasKept) {
2366                        // check if any of the remaining requests for this network are for the
2367                        // same legacy type - if so, don't remove the nai
2368                        for (int i = 0; i < nai.networkRequests.size(); i++) {
2369                            NetworkRequest otherRequest = nai.networkRequests.valueAt(i);
2370                            if (otherRequest.legacyType == nri.request.legacyType &&
2371                                    isRequest(otherRequest)) {
2372                                if (DBG) log(" still have other legacy request - leaving");
2373                                doRemove = false;
2374                            }
2375                        }
2376                    }
2377
2378                    if (doRemove) {
2379                        mLegacyTypeTracker.remove(nri.request.legacyType, nai, false);
2380                    }
2381                }
2382
2383                for (NetworkFactoryInfo nfi : mNetworkFactoryInfos.values()) {
2384                    nfi.asyncChannel.sendMessage(android.net.NetworkFactory.CMD_CANCEL_REQUEST,
2385                            nri.request);
2386                }
2387            } else {
2388                // listens don't have a singular affectedNetwork.  Check all networks to see
2389                // if this listen request applies and remove it.
2390                for (NetworkAgentInfo nai : mNetworkAgentInfos.values()) {
2391                    nai.networkRequests.remove(nri.request.requestId);
2392                    if (nri.request.networkCapabilities.hasSignalStrength() &&
2393                            nai.satisfiesImmutableCapabilitiesOf(nri.request)) {
2394                        updateSignalStrengthThresholds(nai, "RELEASE", nri.request);
2395                    }
2396                }
2397            }
2398            callCallbackForRequest(nri, null, ConnectivityManager.CALLBACK_RELEASED);
2399        }
2400    }
2401
2402    public void setAcceptUnvalidated(Network network, boolean accept, boolean always) {
2403        enforceConnectivityInternalPermission();
2404        mHandler.sendMessage(mHandler.obtainMessage(EVENT_SET_ACCEPT_UNVALIDATED,
2405                accept ? 1 : 0, always ? 1: 0, network));
2406    }
2407
2408    private void handleSetAcceptUnvalidated(Network network, boolean accept, boolean always) {
2409        if (DBG) log("handleSetAcceptUnvalidated network=" + network +
2410                " accept=" + accept + " always=" + always);
2411
2412        NetworkAgentInfo nai = getNetworkAgentInfoForNetwork(network);
2413        if (nai == null) {
2414            // Nothing to do.
2415            return;
2416        }
2417
2418        if (nai.everValidated) {
2419            // The network validated while the dialog box was up. Take no action.
2420            return;
2421        }
2422
2423        if (!nai.networkMisc.explicitlySelected) {
2424            Slog.wtf(TAG, "BUG: setAcceptUnvalidated non non-explicitly selected network");
2425        }
2426
2427        if (accept != nai.networkMisc.acceptUnvalidated) {
2428            int oldScore = nai.getCurrentScore();
2429            nai.networkMisc.acceptUnvalidated = accept;
2430            rematchAllNetworksAndRequests(nai, oldScore);
2431            sendUpdatedScoreToFactories(nai);
2432        }
2433
2434        if (always) {
2435            nai.asyncChannel.sendMessage(
2436                    NetworkAgent.CMD_SAVE_ACCEPT_UNVALIDATED, accept ? 1 : 0);
2437        }
2438
2439        if (!accept) {
2440            // Tell the NetworkAgent to not automatically reconnect to the network.
2441            nai.asyncChannel.sendMessage(NetworkAgent.CMD_PREVENT_AUTOMATIC_RECONNECT);
2442            // Teardown the nework.
2443            teardownUnneededNetwork(nai);
2444        }
2445
2446    }
2447
2448    private void scheduleUnvalidatedPrompt(NetworkAgentInfo nai) {
2449        if (DBG) log("scheduleUnvalidatedPrompt " + nai.network);
2450        mHandler.sendMessageDelayed(
2451                mHandler.obtainMessage(EVENT_PROMPT_UNVALIDATED, nai.network),
2452                PROMPT_UNVALIDATED_DELAY_MS);
2453    }
2454
2455    private void handlePromptUnvalidated(Network network) {
2456        if (DBG) log("handlePromptUnvalidated " + network);
2457        NetworkAgentInfo nai = getNetworkAgentInfoForNetwork(network);
2458
2459        // Only prompt if the network is unvalidated and was explicitly selected by the user, and if
2460        // we haven't already been told to switch to it regardless of whether it validated or not.
2461        // Also don't prompt on captive portals because we're already prompting the user to sign in.
2462        if (nai == null || nai.everValidated || nai.everCaptivePortalDetected ||
2463                !nai.networkMisc.explicitlySelected || nai.networkMisc.acceptUnvalidated) {
2464            return;
2465        }
2466
2467        Intent intent = new Intent(ConnectivityManager.ACTION_PROMPT_UNVALIDATED);
2468        intent.setData(Uri.fromParts("netId", Integer.toString(network.netId), null));
2469        intent.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
2470        intent.setClassName("com.android.settings",
2471                "com.android.settings.wifi.WifiNoInternetDialog");
2472
2473        PendingIntent pendingIntent = PendingIntent.getActivityAsUser(
2474                mContext, 0, intent, PendingIntent.FLAG_CANCEL_CURRENT, null, UserHandle.CURRENT);
2475        setProvNotificationVisibleIntent(true, nai.network.netId, NotificationType.NO_INTERNET,
2476                nai.networkInfo.getType(), nai.networkInfo.getExtraInfo(), pendingIntent, true);
2477    }
2478
2479    private class InternalHandler extends Handler {
2480        public InternalHandler(Looper looper) {
2481            super(looper);
2482        }
2483
2484        @Override
2485        public void handleMessage(Message msg) {
2486            switch (msg.what) {
2487                case EVENT_EXPIRE_NET_TRANSITION_WAKELOCK:
2488                case EVENT_CLEAR_NET_TRANSITION_WAKELOCK: {
2489                    String causedBy = null;
2490                    synchronized (ConnectivityService.this) {
2491                        if (msg.arg1 == mNetTransitionWakeLockSerialNumber &&
2492                                mNetTransitionWakeLock.isHeld()) {
2493                            mNetTransitionWakeLock.release();
2494                            causedBy = mNetTransitionWakeLockCausedBy;
2495                        } else {
2496                            break;
2497                        }
2498                    }
2499                    if (msg.what == EVENT_EXPIRE_NET_TRANSITION_WAKELOCK) {
2500                        log("Failed to find a new network - expiring NetTransition Wakelock");
2501                    } else {
2502                        log("NetTransition Wakelock (" + (causedBy == null ? "unknown" : causedBy) +
2503                                " cleared because we found a replacement network");
2504                    }
2505                    break;
2506                }
2507                case EVENT_APPLY_GLOBAL_HTTP_PROXY: {
2508                    handleDeprecatedGlobalHttpProxy();
2509                    break;
2510                }
2511                case EVENT_SEND_STICKY_BROADCAST_INTENT: {
2512                    Intent intent = (Intent)msg.obj;
2513                    sendStickyBroadcast(intent);
2514                    break;
2515                }
2516                case EVENT_PROXY_HAS_CHANGED: {
2517                    handleApplyDefaultProxy((ProxyInfo)msg.obj);
2518                    break;
2519                }
2520                case EVENT_REGISTER_NETWORK_FACTORY: {
2521                    handleRegisterNetworkFactory((NetworkFactoryInfo)msg.obj);
2522                    break;
2523                }
2524                case EVENT_UNREGISTER_NETWORK_FACTORY: {
2525                    handleUnregisterNetworkFactory((Messenger)msg.obj);
2526                    break;
2527                }
2528                case EVENT_REGISTER_NETWORK_AGENT: {
2529                    handleRegisterNetworkAgent((NetworkAgentInfo)msg.obj);
2530                    break;
2531                }
2532                case EVENT_REGISTER_NETWORK_REQUEST:
2533                case EVENT_REGISTER_NETWORK_LISTENER: {
2534                    handleRegisterNetworkRequest((NetworkRequestInfo) msg.obj);
2535                    break;
2536                }
2537                case EVENT_REGISTER_NETWORK_REQUEST_WITH_INTENT:
2538                case EVENT_REGISTER_NETWORK_LISTENER_WITH_INTENT: {
2539                    handleRegisterNetworkRequestWithIntent(msg);
2540                    break;
2541                }
2542                case EVENT_RELEASE_NETWORK_REQUEST_WITH_INTENT: {
2543                    handleReleaseNetworkRequestWithIntent((PendingIntent) msg.obj, msg.arg1);
2544                    break;
2545                }
2546                case EVENT_RELEASE_NETWORK_REQUEST: {
2547                    handleReleaseNetworkRequest((NetworkRequest) msg.obj, msg.arg1);
2548                    break;
2549                }
2550                case EVENT_SET_ACCEPT_UNVALIDATED: {
2551                    handleSetAcceptUnvalidated((Network) msg.obj, msg.arg1 != 0, msg.arg2 != 0);
2552                    break;
2553                }
2554                case EVENT_PROMPT_UNVALIDATED: {
2555                    handlePromptUnvalidated((Network) msg.obj);
2556                    break;
2557                }
2558                case EVENT_CONFIGURE_MOBILE_DATA_ALWAYS_ON: {
2559                    handleMobileDataAlwaysOn();
2560                    break;
2561                }
2562                // Sent by KeepaliveTracker to process an app request on the state machine thread.
2563                case NetworkAgent.CMD_START_PACKET_KEEPALIVE: {
2564                    mKeepaliveTracker.handleStartKeepalive(msg);
2565                    break;
2566                }
2567                // Sent by KeepaliveTracker to process an app request on the state machine thread.
2568                case NetworkAgent.CMD_STOP_PACKET_KEEPALIVE: {
2569                    NetworkAgentInfo nai = getNetworkAgentInfoForNetwork((Network) msg.obj);
2570                    int slot = msg.arg1;
2571                    int reason = msg.arg2;
2572                    mKeepaliveTracker.handleStopKeepalive(nai, slot, reason);
2573                    break;
2574                }
2575                case EVENT_SYSTEM_READY: {
2576                    for (NetworkAgentInfo nai : mNetworkAgentInfos.values()) {
2577                        nai.networkMonitor.systemReady = true;
2578                    }
2579                    break;
2580                }
2581            }
2582        }
2583    }
2584
2585    // javadoc from interface
2586    public int tether(String iface) {
2587        ConnectivityManager.enforceTetherChangePermission(mContext);
2588        if (isTetheringSupported()) {
2589            return mTethering.tether(iface);
2590        } else {
2591            return ConnectivityManager.TETHER_ERROR_UNSUPPORTED;
2592        }
2593    }
2594
2595    // javadoc from interface
2596    public int untether(String iface) {
2597        ConnectivityManager.enforceTetherChangePermission(mContext);
2598
2599        if (isTetheringSupported()) {
2600            return mTethering.untether(iface);
2601        } else {
2602            return ConnectivityManager.TETHER_ERROR_UNSUPPORTED;
2603        }
2604    }
2605
2606    // javadoc from interface
2607    public int getLastTetherError(String iface) {
2608        enforceTetherAccessPermission();
2609
2610        if (isTetheringSupported()) {
2611            return mTethering.getLastTetherError(iface);
2612        } else {
2613            return ConnectivityManager.TETHER_ERROR_UNSUPPORTED;
2614        }
2615    }
2616
2617    // TODO - proper iface API for selection by property, inspection, etc
2618    public String[] getTetherableUsbRegexs() {
2619        enforceTetherAccessPermission();
2620        if (isTetheringSupported()) {
2621            return mTethering.getTetherableUsbRegexs();
2622        } else {
2623            return new String[0];
2624        }
2625    }
2626
2627    public String[] getTetherableWifiRegexs() {
2628        enforceTetherAccessPermission();
2629        if (isTetheringSupported()) {
2630            return mTethering.getTetherableWifiRegexs();
2631        } else {
2632            return new String[0];
2633        }
2634    }
2635
2636    public String[] getTetherableBluetoothRegexs() {
2637        enforceTetherAccessPermission();
2638        if (isTetheringSupported()) {
2639            return mTethering.getTetherableBluetoothRegexs();
2640        } else {
2641            return new String[0];
2642        }
2643    }
2644
2645    public int setUsbTethering(boolean enable) {
2646        ConnectivityManager.enforceTetherChangePermission(mContext);
2647        if (isTetheringSupported()) {
2648            return mTethering.setUsbTethering(enable);
2649        } else {
2650            return ConnectivityManager.TETHER_ERROR_UNSUPPORTED;
2651        }
2652    }
2653
2654    // TODO - move iface listing, queries, etc to new module
2655    // javadoc from interface
2656    public String[] getTetherableIfaces() {
2657        enforceTetherAccessPermission();
2658        return mTethering.getTetherableIfaces();
2659    }
2660
2661    public String[] getTetheredIfaces() {
2662        enforceTetherAccessPermission();
2663        return mTethering.getTetheredIfaces();
2664    }
2665
2666    public String[] getTetheringErroredIfaces() {
2667        enforceTetherAccessPermission();
2668        return mTethering.getErroredIfaces();
2669    }
2670
2671    public String[] getTetheredDhcpRanges() {
2672        enforceConnectivityInternalPermission();
2673        return mTethering.getTetheredDhcpRanges();
2674    }
2675
2676    // if ro.tether.denied = true we default to no tethering
2677    // gservices could set the secure setting to 1 though to enable it on a build where it
2678    // had previously been turned off.
2679    public boolean isTetheringSupported() {
2680        enforceTetherAccessPermission();
2681        int defaultVal = (SystemProperties.get("ro.tether.denied").equals("true") ? 0 : 1);
2682        boolean tetherEnabledInSettings = (Settings.Global.getInt(mContext.getContentResolver(),
2683                Settings.Global.TETHER_SUPPORTED, defaultVal) != 0)
2684                && !mUserManager.hasUserRestriction(UserManager.DISALLOW_CONFIG_TETHERING);
2685        return tetherEnabledInSettings && ((mTethering.getTetherableUsbRegexs().length != 0 ||
2686                mTethering.getTetherableWifiRegexs().length != 0 ||
2687                mTethering.getTetherableBluetoothRegexs().length != 0) &&
2688                mTethering.getUpstreamIfaceTypes().length != 0);
2689    }
2690
2691    // Called when we lose the default network and have no replacement yet.
2692    // This will automatically be cleared after X seconds or a new default network
2693    // becomes CONNECTED, whichever happens first.  The timer is started by the
2694    // first caller and not restarted by subsequent callers.
2695    private void requestNetworkTransitionWakelock(String forWhom) {
2696        int serialNum = 0;
2697        synchronized (this) {
2698            if (mNetTransitionWakeLock.isHeld()) return;
2699            serialNum = ++mNetTransitionWakeLockSerialNumber;
2700            mNetTransitionWakeLock.acquire();
2701            mNetTransitionWakeLockCausedBy = forWhom;
2702        }
2703        mHandler.sendMessageDelayed(mHandler.obtainMessage(
2704                EVENT_EXPIRE_NET_TRANSITION_WAKELOCK, serialNum, 0),
2705                mNetTransitionWakeLockTimeout);
2706        return;
2707    }
2708
2709    // 100 percent is full good, 0 is full bad.
2710    public void reportInetCondition(int networkType, int percentage) {
2711        NetworkAgentInfo nai = mLegacyTypeTracker.getNetworkForType(networkType);
2712        if (nai == null) return;
2713        reportNetworkConnectivity(nai.network, percentage > 50);
2714    }
2715
2716    public void reportNetworkConnectivity(Network network, boolean hasConnectivity) {
2717        enforceAccessPermission();
2718        enforceInternetPermission();
2719
2720        NetworkAgentInfo nai;
2721        if (network == null) {
2722            nai = getDefaultNetwork();
2723        } else {
2724            nai = getNetworkAgentInfoForNetwork(network);
2725        }
2726        if (nai == null || nai.networkInfo.getState() == NetworkInfo.State.DISCONNECTING ||
2727            nai.networkInfo.getState() == NetworkInfo.State.DISCONNECTED) {
2728            return;
2729        }
2730        // Revalidate if the app report does not match our current validated state.
2731        if (hasConnectivity == nai.lastValidated) return;
2732        final int uid = Binder.getCallingUid();
2733        if (DBG) {
2734            log("reportNetworkConnectivity(" + nai.network.netId + ", " + hasConnectivity +
2735                    ") by " + uid);
2736        }
2737        synchronized (nai) {
2738            // Validating an uncreated network could result in a call to rematchNetworkAndRequests()
2739            // which isn't meant to work on uncreated networks.
2740            if (!nai.created) return;
2741
2742            if (isNetworkWithLinkPropertiesBlocked(nai.linkProperties, uid)) return;
2743
2744            nai.networkMonitor.sendMessage(NetworkMonitor.CMD_FORCE_REEVALUATION, uid);
2745        }
2746    }
2747
2748    private ProxyInfo getDefaultProxy() {
2749        // this information is already available as a world read/writable jvm property
2750        // so this API change wouldn't have a benifit.  It also breaks the passing
2751        // of proxy info to all the JVMs.
2752        // enforceAccessPermission();
2753        synchronized (mProxyLock) {
2754            ProxyInfo ret = mGlobalProxy;
2755            if ((ret == null) && !mDefaultProxyDisabled) ret = mDefaultProxy;
2756            return ret;
2757        }
2758    }
2759
2760    public ProxyInfo getProxyForNetwork(Network network) {
2761        if (network == null) return getDefaultProxy();
2762        final ProxyInfo globalProxy = getGlobalProxy();
2763        if (globalProxy != null) return globalProxy;
2764        if (!NetworkUtils.queryUserAccess(Binder.getCallingUid(), network.netId)) return null;
2765        // Don't call getLinkProperties() as it requires ACCESS_NETWORK_STATE permission, which
2766        // caller may not have.
2767        final NetworkAgentInfo nai = getNetworkAgentInfoForNetwork(network);
2768        if (nai == null) return null;
2769        synchronized (nai) {
2770            final ProxyInfo proxyInfo = nai.linkProperties.getHttpProxy();
2771            if (proxyInfo == null) return null;
2772            return new ProxyInfo(proxyInfo);
2773        }
2774    }
2775
2776    // Convert empty ProxyInfo's to null as null-checks are used to determine if proxies are present
2777    // (e.g. if mGlobalProxy==null fall back to network-specific proxy, if network-specific
2778    // proxy is null then there is no proxy in place).
2779    private ProxyInfo canonicalizeProxyInfo(ProxyInfo proxy) {
2780        if (proxy != null && TextUtils.isEmpty(proxy.getHost())
2781                && (proxy.getPacFileUrl() == null || Uri.EMPTY.equals(proxy.getPacFileUrl()))) {
2782            proxy = null;
2783        }
2784        return proxy;
2785    }
2786
2787    // ProxyInfo equality function with a couple modifications over ProxyInfo.equals() to make it
2788    // better for determining if a new proxy broadcast is necessary:
2789    // 1. Canonicalize empty ProxyInfos to null so an empty proxy compares equal to null so as to
2790    //    avoid unnecessary broadcasts.
2791    // 2. Make sure all parts of the ProxyInfo's compare true, including the host when a PAC URL
2792    //    is in place.  This is important so legacy PAC resolver (see com.android.proxyhandler)
2793    //    changes aren't missed.  The legacy PAC resolver pretends to be a simple HTTP proxy but
2794    //    actually uses the PAC to resolve; this results in ProxyInfo's with PAC URL, host and port
2795    //    all set.
2796    private boolean proxyInfoEqual(ProxyInfo a, ProxyInfo b) {
2797        a = canonicalizeProxyInfo(a);
2798        b = canonicalizeProxyInfo(b);
2799        // ProxyInfo.equals() doesn't check hosts when PAC URLs are present, but we need to check
2800        // hosts even when PAC URLs are present to account for the legacy PAC resolver.
2801        return Objects.equals(a, b) && (a == null || Objects.equals(a.getHost(), b.getHost()));
2802    }
2803
2804    public void setGlobalProxy(ProxyInfo proxyProperties) {
2805        enforceConnectivityInternalPermission();
2806
2807        synchronized (mProxyLock) {
2808            if (proxyProperties == mGlobalProxy) return;
2809            if (proxyProperties != null && proxyProperties.equals(mGlobalProxy)) return;
2810            if (mGlobalProxy != null && mGlobalProxy.equals(proxyProperties)) return;
2811
2812            String host = "";
2813            int port = 0;
2814            String exclList = "";
2815            String pacFileUrl = "";
2816            if (proxyProperties != null && (!TextUtils.isEmpty(proxyProperties.getHost()) ||
2817                    !Uri.EMPTY.equals(proxyProperties.getPacFileUrl()))) {
2818                if (!proxyProperties.isValid()) {
2819                    if (DBG)
2820                        log("Invalid proxy properties, ignoring: " + proxyProperties.toString());
2821                    return;
2822                }
2823                mGlobalProxy = new ProxyInfo(proxyProperties);
2824                host = mGlobalProxy.getHost();
2825                port = mGlobalProxy.getPort();
2826                exclList = mGlobalProxy.getExclusionListAsString();
2827                if (!Uri.EMPTY.equals(proxyProperties.getPacFileUrl())) {
2828                    pacFileUrl = proxyProperties.getPacFileUrl().toString();
2829                }
2830            } else {
2831                mGlobalProxy = null;
2832            }
2833            ContentResolver res = mContext.getContentResolver();
2834            final long token = Binder.clearCallingIdentity();
2835            try {
2836                Settings.Global.putString(res, Settings.Global.GLOBAL_HTTP_PROXY_HOST, host);
2837                Settings.Global.putInt(res, Settings.Global.GLOBAL_HTTP_PROXY_PORT, port);
2838                Settings.Global.putString(res, Settings.Global.GLOBAL_HTTP_PROXY_EXCLUSION_LIST,
2839                        exclList);
2840                Settings.Global.putString(res, Settings.Global.GLOBAL_HTTP_PROXY_PAC, pacFileUrl);
2841            } finally {
2842                Binder.restoreCallingIdentity(token);
2843            }
2844
2845            if (mGlobalProxy == null) {
2846                proxyProperties = mDefaultProxy;
2847            }
2848            sendProxyBroadcast(proxyProperties);
2849        }
2850    }
2851
2852    private void loadGlobalProxy() {
2853        ContentResolver res = mContext.getContentResolver();
2854        String host = Settings.Global.getString(res, Settings.Global.GLOBAL_HTTP_PROXY_HOST);
2855        int port = Settings.Global.getInt(res, Settings.Global.GLOBAL_HTTP_PROXY_PORT, 0);
2856        String exclList = Settings.Global.getString(res,
2857                Settings.Global.GLOBAL_HTTP_PROXY_EXCLUSION_LIST);
2858        String pacFileUrl = Settings.Global.getString(res, Settings.Global.GLOBAL_HTTP_PROXY_PAC);
2859        if (!TextUtils.isEmpty(host) || !TextUtils.isEmpty(pacFileUrl)) {
2860            ProxyInfo proxyProperties;
2861            if (!TextUtils.isEmpty(pacFileUrl)) {
2862                proxyProperties = new ProxyInfo(pacFileUrl);
2863            } else {
2864                proxyProperties = new ProxyInfo(host, port, exclList);
2865            }
2866            if (!proxyProperties.isValid()) {
2867                if (DBG) log("Invalid proxy properties, ignoring: " + proxyProperties.toString());
2868                return;
2869            }
2870
2871            synchronized (mProxyLock) {
2872                mGlobalProxy = proxyProperties;
2873            }
2874        }
2875    }
2876
2877    public ProxyInfo getGlobalProxy() {
2878        // this information is already available as a world read/writable jvm property
2879        // so this API change wouldn't have a benifit.  It also breaks the passing
2880        // of proxy info to all the JVMs.
2881        // enforceAccessPermission();
2882        synchronized (mProxyLock) {
2883            return mGlobalProxy;
2884        }
2885    }
2886
2887    private void handleApplyDefaultProxy(ProxyInfo proxy) {
2888        if (proxy != null && TextUtils.isEmpty(proxy.getHost())
2889                && Uri.EMPTY.equals(proxy.getPacFileUrl())) {
2890            proxy = null;
2891        }
2892        synchronized (mProxyLock) {
2893            if (mDefaultProxy != null && mDefaultProxy.equals(proxy)) return;
2894            if (mDefaultProxy == proxy) return; // catches repeated nulls
2895            if (proxy != null &&  !proxy.isValid()) {
2896                if (DBG) log("Invalid proxy properties, ignoring: " + proxy.toString());
2897                return;
2898            }
2899
2900            // This call could be coming from the PacManager, containing the port of the local
2901            // proxy.  If this new proxy matches the global proxy then copy this proxy to the
2902            // global (to get the correct local port), and send a broadcast.
2903            // TODO: Switch PacManager to have its own message to send back rather than
2904            // reusing EVENT_HAS_CHANGED_PROXY and this call to handleApplyDefaultProxy.
2905            if ((mGlobalProxy != null) && (proxy != null)
2906                    && (!Uri.EMPTY.equals(proxy.getPacFileUrl()))
2907                    && proxy.getPacFileUrl().equals(mGlobalProxy.getPacFileUrl())) {
2908                mGlobalProxy = proxy;
2909                sendProxyBroadcast(mGlobalProxy);
2910                return;
2911            }
2912            mDefaultProxy = proxy;
2913
2914            if (mGlobalProxy != null) return;
2915            if (!mDefaultProxyDisabled) {
2916                sendProxyBroadcast(proxy);
2917            }
2918        }
2919    }
2920
2921    // If the proxy has changed from oldLp to newLp, resend proxy broadcast with default proxy.
2922    // This method gets called when any network changes proxy, but the broadcast only ever contains
2923    // the default proxy (even if it hasn't changed).
2924    // TODO: Deprecate the broadcast extras as they aren't necessarily applicable in a multi-network
2925    // world where an app might be bound to a non-default network.
2926    private void updateProxy(LinkProperties newLp, LinkProperties oldLp, NetworkAgentInfo nai) {
2927        ProxyInfo newProxyInfo = newLp == null ? null : newLp.getHttpProxy();
2928        ProxyInfo oldProxyInfo = oldLp == null ? null : oldLp.getHttpProxy();
2929
2930        if (!proxyInfoEqual(newProxyInfo, oldProxyInfo)) {
2931            sendProxyBroadcast(getDefaultProxy());
2932        }
2933    }
2934
2935    private void handleDeprecatedGlobalHttpProxy() {
2936        String proxy = Settings.Global.getString(mContext.getContentResolver(),
2937                Settings.Global.HTTP_PROXY);
2938        if (!TextUtils.isEmpty(proxy)) {
2939            String data[] = proxy.split(":");
2940            if (data.length == 0) {
2941                return;
2942            }
2943
2944            String proxyHost =  data[0];
2945            int proxyPort = 8080;
2946            if (data.length > 1) {
2947                try {
2948                    proxyPort = Integer.parseInt(data[1]);
2949                } catch (NumberFormatException e) {
2950                    return;
2951                }
2952            }
2953            ProxyInfo p = new ProxyInfo(data[0], proxyPort, "");
2954            setGlobalProxy(p);
2955        }
2956    }
2957
2958    private void sendProxyBroadcast(ProxyInfo proxy) {
2959        if (proxy == null) proxy = new ProxyInfo("", 0, "");
2960        if (mPacManager.setCurrentProxyScriptUrl(proxy)) return;
2961        if (DBG) log("sending Proxy Broadcast for " + proxy);
2962        Intent intent = new Intent(Proxy.PROXY_CHANGE_ACTION);
2963        intent.addFlags(Intent.FLAG_RECEIVER_REPLACE_PENDING |
2964            Intent.FLAG_RECEIVER_REGISTERED_ONLY_BEFORE_BOOT);
2965        intent.putExtra(Proxy.EXTRA_PROXY_INFO, proxy);
2966        final long ident = Binder.clearCallingIdentity();
2967        try {
2968            mContext.sendStickyBroadcastAsUser(intent, UserHandle.ALL);
2969        } finally {
2970            Binder.restoreCallingIdentity(ident);
2971        }
2972    }
2973
2974    private static class SettingsObserver extends ContentObserver {
2975        final private HashMap<Uri, Integer> mUriEventMap;
2976        final private Context mContext;
2977        final private Handler mHandler;
2978
2979        SettingsObserver(Context context, Handler handler) {
2980            super(null);
2981            mUriEventMap = new HashMap<Uri, Integer>();
2982            mContext = context;
2983            mHandler = handler;
2984        }
2985
2986        void observe(Uri uri, int what) {
2987            mUriEventMap.put(uri, what);
2988            final ContentResolver resolver = mContext.getContentResolver();
2989            resolver.registerContentObserver(uri, false, this);
2990        }
2991
2992        @Override
2993        public void onChange(boolean selfChange) {
2994            Slog.wtf(TAG, "Should never be reached.");
2995        }
2996
2997        @Override
2998        public void onChange(boolean selfChange, Uri uri) {
2999            final Integer what = mUriEventMap.get(uri);
3000            if (what != null) {
3001                mHandler.obtainMessage(what.intValue()).sendToTarget();
3002            } else {
3003                loge("No matching event to send for URI=" + uri);
3004            }
3005        }
3006    }
3007
3008    private static void log(String s) {
3009        Slog.d(TAG, s);
3010    }
3011
3012    private static void loge(String s) {
3013        Slog.e(TAG, s);
3014    }
3015
3016    private static <T> T checkNotNull(T value, String message) {
3017        if (value == null) {
3018            throw new NullPointerException(message);
3019        }
3020        return value;
3021    }
3022
3023    /**
3024     * Prepare for a VPN application.
3025     * VPN permissions are checked in the {@link Vpn} class. If the caller is not {@code userId},
3026     * {@link android.Manifest.permission.INTERACT_ACROSS_USERS_FULL} permission is required.
3027     *
3028     * @param oldPackage Package name of the application which currently controls VPN, which will
3029     *                   be replaced. If there is no such application, this should should either be
3030     *                   {@code null} or {@link VpnConfig.LEGACY_VPN}.
3031     * @param newPackage Package name of the application which should gain control of VPN, or
3032     *                   {@code null} to disable.
3033     * @param userId User for whom to prepare the new VPN.
3034     *
3035     * @hide
3036     */
3037    @Override
3038    public boolean prepareVpn(@Nullable String oldPackage, @Nullable String newPackage,
3039            int userId) {
3040        enforceCrossUserPermission(userId);
3041        throwIfLockdownEnabled();
3042
3043        synchronized(mVpns) {
3044            Vpn vpn = mVpns.get(userId);
3045            if (vpn != null) {
3046                return vpn.prepare(oldPackage, newPackage);
3047            } else {
3048                return false;
3049            }
3050        }
3051    }
3052
3053    /**
3054     * Set whether the VPN package has the ability to launch VPNs without user intervention.
3055     * This method is used by system-privileged apps.
3056     * VPN permissions are checked in the {@link Vpn} class. If the caller is not {@code userId},
3057     * {@link android.Manifest.permission.INTERACT_ACROSS_USERS_FULL} permission is required.
3058     *
3059     * @param packageName The package for which authorization state should change.
3060     * @param userId User for whom {@code packageName} is installed.
3061     * @param authorized {@code true} if this app should be able to start a VPN connection without
3062     *                   explicit user approval, {@code false} if not.
3063     *
3064     * @hide
3065     */
3066    @Override
3067    public void setVpnPackageAuthorization(String packageName, int userId, boolean authorized) {
3068        enforceCrossUserPermission(userId);
3069
3070        synchronized(mVpns) {
3071            Vpn vpn = mVpns.get(userId);
3072            if (vpn != null) {
3073                vpn.setPackageAuthorization(packageName, authorized);
3074            }
3075        }
3076    }
3077
3078    /**
3079     * Configure a TUN interface and return its file descriptor. Parameters
3080     * are encoded and opaque to this class. This method is used by VpnBuilder
3081     * and not available in ConnectivityManager. Permissions are checked in
3082     * Vpn class.
3083     * @hide
3084     */
3085    @Override
3086    public ParcelFileDescriptor establishVpn(VpnConfig config) {
3087        throwIfLockdownEnabled();
3088        int user = UserHandle.getUserId(Binder.getCallingUid());
3089        synchronized(mVpns) {
3090            return mVpns.get(user).establish(config);
3091        }
3092    }
3093
3094    /**
3095     * Start legacy VPN, controlling native daemons as needed. Creates a
3096     * secondary thread to perform connection work, returning quickly.
3097     */
3098    @Override
3099    public void startLegacyVpn(VpnProfile profile) {
3100        throwIfLockdownEnabled();
3101        final LinkProperties egress = getActiveLinkProperties();
3102        if (egress == null) {
3103            throw new IllegalStateException("Missing active network connection");
3104        }
3105        int user = UserHandle.getUserId(Binder.getCallingUid());
3106        synchronized(mVpns) {
3107            mVpns.get(user).startLegacyVpn(profile, mKeyStore, egress);
3108        }
3109    }
3110
3111    /**
3112     * Return the information of the ongoing legacy VPN. This method is used
3113     * by VpnSettings and not available in ConnectivityManager. Permissions
3114     * are checked in Vpn class.
3115     */
3116    @Override
3117    public LegacyVpnInfo getLegacyVpnInfo(int userId) {
3118        enforceCrossUserPermission(userId);
3119        if (mLockdownEnabled) {
3120            return null;
3121        }
3122
3123        synchronized(mVpns) {
3124            return mVpns.get(userId).getLegacyVpnInfo();
3125        }
3126    }
3127
3128    /**
3129     * Return the information of all ongoing VPNs. This method is used by NetworkStatsService
3130     * and not available in ConnectivityManager.
3131     */
3132    @Override
3133    public VpnInfo[] getAllVpnInfo() {
3134        enforceConnectivityInternalPermission();
3135        if (mLockdownEnabled) {
3136            return new VpnInfo[0];
3137        }
3138
3139        synchronized(mVpns) {
3140            List<VpnInfo> infoList = new ArrayList<>();
3141            for (int i = 0; i < mVpns.size(); i++) {
3142                VpnInfo info = createVpnInfo(mVpns.valueAt(i));
3143                if (info != null) {
3144                    infoList.add(info);
3145                }
3146            }
3147            return infoList.toArray(new VpnInfo[infoList.size()]);
3148        }
3149    }
3150
3151    /**
3152     * @return VPN information for accounting, or null if we can't retrieve all required
3153     *         information, e.g primary underlying iface.
3154     */
3155    @Nullable
3156    private VpnInfo createVpnInfo(Vpn vpn) {
3157        VpnInfo info = vpn.getVpnInfo();
3158        if (info == null) {
3159            return null;
3160        }
3161        Network[] underlyingNetworks = vpn.getUnderlyingNetworks();
3162        // see VpnService.setUnderlyingNetworks()'s javadoc about how to interpret
3163        // the underlyingNetworks list.
3164        if (underlyingNetworks == null) {
3165            NetworkAgentInfo defaultNetwork = getDefaultNetwork();
3166            if (defaultNetwork != null && defaultNetwork.linkProperties != null) {
3167                info.primaryUnderlyingIface = getDefaultNetwork().linkProperties.getInterfaceName();
3168            }
3169        } else if (underlyingNetworks.length > 0) {
3170            LinkProperties linkProperties = getLinkProperties(underlyingNetworks[0]);
3171            if (linkProperties != null) {
3172                info.primaryUnderlyingIface = linkProperties.getInterfaceName();
3173            }
3174        }
3175        return info.primaryUnderlyingIface == null ? null : info;
3176    }
3177
3178    /**
3179     * Returns the information of the ongoing VPN for {@code userId}. This method is used by
3180     * VpnDialogs and not available in ConnectivityManager.
3181     * Permissions are checked in Vpn class.
3182     * @hide
3183     */
3184    @Override
3185    public VpnConfig getVpnConfig(int userId) {
3186        enforceCrossUserPermission(userId);
3187        synchronized(mVpns) {
3188            Vpn vpn = mVpns.get(userId);
3189            if (vpn != null) {
3190                return vpn.getVpnConfig();
3191            } else {
3192                return null;
3193            }
3194        }
3195    }
3196
3197    @Override
3198    public boolean updateLockdownVpn() {
3199        if (Binder.getCallingUid() != Process.SYSTEM_UID) {
3200            Slog.w(TAG, "Lockdown VPN only available to AID_SYSTEM");
3201            return false;
3202        }
3203
3204        // Tear down existing lockdown if profile was removed
3205        mLockdownEnabled = LockdownVpnTracker.isEnabled();
3206        if (mLockdownEnabled) {
3207            if (!mKeyStore.isUnlocked()) {
3208                Slog.w(TAG, "KeyStore locked; unable to create LockdownTracker");
3209                return false;
3210            }
3211
3212            final String profileName = new String(mKeyStore.get(Credentials.LOCKDOWN_VPN));
3213            final VpnProfile profile = VpnProfile.decode(
3214                    profileName, mKeyStore.get(Credentials.VPN + profileName));
3215            int user = UserHandle.getUserId(Binder.getCallingUid());
3216            synchronized(mVpns) {
3217                setLockdownTracker(new LockdownVpnTracker(mContext, mNetd, this, mVpns.get(user),
3218                            profile));
3219            }
3220        } else {
3221            setLockdownTracker(null);
3222        }
3223
3224        return true;
3225    }
3226
3227    /**
3228     * Internally set new {@link LockdownVpnTracker}, shutting down any existing
3229     * {@link LockdownVpnTracker}. Can be {@code null} to disable lockdown.
3230     */
3231    private void setLockdownTracker(LockdownVpnTracker tracker) {
3232        // Shutdown any existing tracker
3233        final LockdownVpnTracker existing = mLockdownTracker;
3234        mLockdownTracker = null;
3235        if (existing != null) {
3236            existing.shutdown();
3237        }
3238
3239        try {
3240            if (tracker != null) {
3241                mNetd.setFirewallEnabled(true);
3242                mNetd.setFirewallInterfaceRule("lo", true);
3243                mLockdownTracker = tracker;
3244                mLockdownTracker.init();
3245            } else {
3246                mNetd.setFirewallEnabled(false);
3247            }
3248        } catch (RemoteException e) {
3249            // ignored; NMS lives inside system_server
3250        }
3251    }
3252
3253    private void throwIfLockdownEnabled() {
3254        if (mLockdownEnabled) {
3255            throw new IllegalStateException("Unavailable in lockdown mode");
3256        }
3257    }
3258
3259    @Override
3260    public int checkMobileProvisioning(int suggestedTimeOutMs) {
3261        // TODO: Remove?  Any reason to trigger a provisioning check?
3262        return -1;
3263    }
3264
3265    private static final String NOTIFICATION_ID = "CaptivePortal.Notification";
3266    private static enum NotificationType { SIGN_IN, NO_INTERNET; };
3267
3268    private void setProvNotificationVisible(boolean visible, int networkType, String action) {
3269        if (DBG) {
3270            log("setProvNotificationVisible: E visible=" + visible + " networkType=" + networkType
3271                + " action=" + action);
3272        }
3273        Intent intent = new Intent(action);
3274        PendingIntent pendingIntent = PendingIntent.getBroadcast(mContext, 0, intent, 0);
3275        // Concatenate the range of types onto the range of NetIDs.
3276        int id = MAX_NET_ID + 1 + (networkType - ConnectivityManager.TYPE_NONE);
3277        setProvNotificationVisibleIntent(visible, id, NotificationType.SIGN_IN,
3278                networkType, null, pendingIntent, false);
3279    }
3280
3281    /**
3282     * Show or hide network provisioning notifications.
3283     *
3284     * We use notifications for two purposes: to notify that a network requires sign in
3285     * (NotificationType.SIGN_IN), or to notify that a network does not have Internet access
3286     * (NotificationType.NO_INTERNET). We display at most one notification per ID, so on a
3287     * particular network we can display the notification type that was most recently requested.
3288     * So for example if a captive portal fails to reply within a few seconds of connecting, we
3289     * might first display NO_INTERNET, and then when the captive portal check completes, display
3290     * SIGN_IN.
3291     *
3292     * @param id an identifier that uniquely identifies this notification.  This must match
3293     *         between show and hide calls.  We use the NetID value but for legacy callers
3294     *         we concatenate the range of types with the range of NetIDs.
3295     */
3296    private void setProvNotificationVisibleIntent(boolean visible, int id,
3297            NotificationType notifyType, int networkType, String extraInfo, PendingIntent intent,
3298            boolean highPriority) {
3299        if (DBG) {
3300            log("setProvNotificationVisibleIntent " + notifyType + " visible=" + visible
3301                    + " networkType=" + getNetworkTypeName(networkType)
3302                    + " extraInfo=" + extraInfo + " highPriority=" + highPriority);
3303        }
3304
3305        Resources r = Resources.getSystem();
3306        NotificationManager notificationManager = (NotificationManager) mContext
3307            .getSystemService(Context.NOTIFICATION_SERVICE);
3308
3309        if (visible) {
3310            CharSequence title;
3311            CharSequence details;
3312            int icon;
3313            if (notifyType == NotificationType.NO_INTERNET &&
3314                    networkType == ConnectivityManager.TYPE_WIFI) {
3315                title = r.getString(R.string.wifi_no_internet, 0);
3316                details = r.getString(R.string.wifi_no_internet_detailed);
3317                icon = R.drawable.stat_notify_wifi_in_range;  // TODO: Need new icon.
3318            } else if (notifyType == NotificationType.SIGN_IN) {
3319                switch (networkType) {
3320                    case ConnectivityManager.TYPE_WIFI:
3321                        title = r.getString(R.string.wifi_available_sign_in, 0);
3322                        details = r.getString(R.string.network_available_sign_in_detailed,
3323                                extraInfo);
3324                        icon = R.drawable.stat_notify_wifi_in_range;
3325                        break;
3326                    case ConnectivityManager.TYPE_MOBILE:
3327                    case ConnectivityManager.TYPE_MOBILE_HIPRI:
3328                        title = r.getString(R.string.network_available_sign_in, 0);
3329                        // TODO: Change this to pull from NetworkInfo once a printable
3330                        // name has been added to it
3331                        details = mTelephonyManager.getNetworkOperatorName();
3332                        icon = R.drawable.stat_notify_rssi_in_range;
3333                        break;
3334                    default:
3335                        title = r.getString(R.string.network_available_sign_in, 0);
3336                        details = r.getString(R.string.network_available_sign_in_detailed,
3337                                extraInfo);
3338                        icon = R.drawable.stat_notify_rssi_in_range;
3339                        break;
3340                }
3341            } else {
3342                Slog.wtf(TAG, "Unknown notification type " + notifyType + "on network type "
3343                        + getNetworkTypeName(networkType));
3344                return;
3345            }
3346
3347            Notification notification = new Notification.Builder(mContext)
3348                    .setWhen(0)
3349                    .setSmallIcon(icon)
3350                    .setAutoCancel(true)
3351                    .setTicker(title)
3352                    .setColor(mContext.getColor(
3353                            com.android.internal.R.color.system_notification_accent_color))
3354                    .setContentTitle(title)
3355                    .setContentText(details)
3356                    .setContentIntent(intent)
3357                    .setLocalOnly(true)
3358                    .setPriority(highPriority ?
3359                            Notification.PRIORITY_HIGH :
3360                            Notification.PRIORITY_DEFAULT)
3361                    .setDefaults(Notification.DEFAULT_ALL)
3362                    .setOnlyAlertOnce(true)
3363                    .build();
3364
3365            try {
3366                notificationManager.notify(NOTIFICATION_ID, id, notification);
3367            } catch (NullPointerException npe) {
3368                loge("setNotificationVisible: visible notificationManager npe=" + npe);
3369                npe.printStackTrace();
3370            }
3371        } else {
3372            try {
3373                notificationManager.cancel(NOTIFICATION_ID, id);
3374            } catch (NullPointerException npe) {
3375                loge("setNotificationVisible: cancel notificationManager npe=" + npe);
3376                npe.printStackTrace();
3377            }
3378        }
3379    }
3380
3381    /** Location to an updatable file listing carrier provisioning urls.
3382     *  An example:
3383     *
3384     * <?xml version="1.0" encoding="utf-8"?>
3385     *  <provisioningUrls>
3386     *   <provisioningUrl mcc="310" mnc="4">http://myserver.com/foo?mdn=%3$s&iccid=%1$s&imei=%2$s</provisioningUrl>
3387     *  </provisioningUrls>
3388     */
3389    private static final String PROVISIONING_URL_PATH =
3390            "/data/misc/radio/provisioning_urls.xml";
3391    private final File mProvisioningUrlFile = new File(PROVISIONING_URL_PATH);
3392
3393    /** XML tag for root element. */
3394    private static final String TAG_PROVISIONING_URLS = "provisioningUrls";
3395    /** XML tag for individual url */
3396    private static final String TAG_PROVISIONING_URL = "provisioningUrl";
3397    /** XML attribute for mcc */
3398    private static final String ATTR_MCC = "mcc";
3399    /** XML attribute for mnc */
3400    private static final String ATTR_MNC = "mnc";
3401
3402    private String getProvisioningUrlBaseFromFile() {
3403        FileReader fileReader = null;
3404        XmlPullParser parser = null;
3405        Configuration config = mContext.getResources().getConfiguration();
3406
3407        try {
3408            fileReader = new FileReader(mProvisioningUrlFile);
3409            parser = Xml.newPullParser();
3410            parser.setInput(fileReader);
3411            XmlUtils.beginDocument(parser, TAG_PROVISIONING_URLS);
3412
3413            while (true) {
3414                XmlUtils.nextElement(parser);
3415
3416                String element = parser.getName();
3417                if (element == null) break;
3418
3419                if (element.equals(TAG_PROVISIONING_URL)) {
3420                    String mcc = parser.getAttributeValue(null, ATTR_MCC);
3421                    try {
3422                        if (mcc != null && Integer.parseInt(mcc) == config.mcc) {
3423                            String mnc = parser.getAttributeValue(null, ATTR_MNC);
3424                            if (mnc != null && Integer.parseInt(mnc) == config.mnc) {
3425                                parser.next();
3426                                if (parser.getEventType() == XmlPullParser.TEXT) {
3427                                    return parser.getText();
3428                                }
3429                            }
3430                        }
3431                    } catch (NumberFormatException e) {
3432                        loge("NumberFormatException in getProvisioningUrlBaseFromFile: " + e);
3433                    }
3434                }
3435            }
3436            return null;
3437        } catch (FileNotFoundException e) {
3438            loge("Carrier Provisioning Urls file not found");
3439        } catch (XmlPullParserException e) {
3440            loge("Xml parser exception reading Carrier Provisioning Urls file: " + e);
3441        } catch (IOException e) {
3442            loge("I/O exception reading Carrier Provisioning Urls file: " + e);
3443        } finally {
3444            if (fileReader != null) {
3445                try {
3446                    fileReader.close();
3447                } catch (IOException e) {}
3448            }
3449        }
3450        return null;
3451    }
3452
3453    @Override
3454    public String getMobileProvisioningUrl() {
3455        enforceConnectivityInternalPermission();
3456        String url = getProvisioningUrlBaseFromFile();
3457        if (TextUtils.isEmpty(url)) {
3458            url = mContext.getResources().getString(R.string.mobile_provisioning_url);
3459            log("getMobileProvisioningUrl: mobile_provisioining_url from resource =" + url);
3460        } else {
3461            log("getMobileProvisioningUrl: mobile_provisioning_url from File =" + url);
3462        }
3463        // populate the iccid, imei and phone number in the provisioning url.
3464        if (!TextUtils.isEmpty(url)) {
3465            String phoneNumber = mTelephonyManager.getLine1Number();
3466            if (TextUtils.isEmpty(phoneNumber)) {
3467                phoneNumber = "0000000000";
3468            }
3469            url = String.format(url,
3470                    mTelephonyManager.getSimSerialNumber() /* ICCID */,
3471                    mTelephonyManager.getDeviceId() /* IMEI */,
3472                    phoneNumber /* Phone numer */);
3473        }
3474
3475        return url;
3476    }
3477
3478    @Override
3479    public void setProvisioningNotificationVisible(boolean visible, int networkType,
3480            String action) {
3481        enforceConnectivityInternalPermission();
3482        final long ident = Binder.clearCallingIdentity();
3483        try {
3484            setProvNotificationVisible(visible, networkType, action);
3485        } finally {
3486            Binder.restoreCallingIdentity(ident);
3487        }
3488    }
3489
3490    @Override
3491    public void setAirplaneMode(boolean enable) {
3492        enforceConnectivityInternalPermission();
3493        final long ident = Binder.clearCallingIdentity();
3494        try {
3495            final ContentResolver cr = mContext.getContentResolver();
3496            Settings.Global.putInt(cr, Settings.Global.AIRPLANE_MODE_ON, enable ? 1 : 0);
3497            Intent intent = new Intent(Intent.ACTION_AIRPLANE_MODE_CHANGED);
3498            intent.putExtra("state", enable);
3499            mContext.sendBroadcastAsUser(intent, UserHandle.ALL);
3500        } finally {
3501            Binder.restoreCallingIdentity(ident);
3502        }
3503    }
3504
3505    private void onUserStart(int userId) {
3506        synchronized(mVpns) {
3507            Vpn userVpn = mVpns.get(userId);
3508            if (userVpn != null) {
3509                loge("Starting user already has a VPN");
3510                return;
3511            }
3512            userVpn = new Vpn(mHandler.getLooper(), mContext, mNetd, userId);
3513            mVpns.put(userId, userVpn);
3514        }
3515    }
3516
3517    private void onUserStop(int userId) {
3518        synchronized(mVpns) {
3519            Vpn userVpn = mVpns.get(userId);
3520            if (userVpn == null) {
3521                loge("Stopping user has no VPN");
3522                return;
3523            }
3524            mVpns.delete(userId);
3525        }
3526    }
3527
3528    private BroadcastReceiver mUserIntentReceiver = new BroadcastReceiver() {
3529        @Override
3530        public void onReceive(Context context, Intent intent) {
3531            final String action = intent.getAction();
3532            final int userId = intent.getIntExtra(Intent.EXTRA_USER_HANDLE, UserHandle.USER_NULL);
3533            if (userId == UserHandle.USER_NULL) return;
3534
3535            if (Intent.ACTION_USER_STARTING.equals(action)) {
3536                onUserStart(userId);
3537            } else if (Intent.ACTION_USER_STOPPING.equals(action)) {
3538                onUserStop(userId);
3539            }
3540        }
3541    };
3542
3543    private final HashMap<Messenger, NetworkFactoryInfo> mNetworkFactoryInfos =
3544            new HashMap<Messenger, NetworkFactoryInfo>();
3545    private final HashMap<NetworkRequest, NetworkRequestInfo> mNetworkRequests =
3546            new HashMap<NetworkRequest, NetworkRequestInfo>();
3547
3548    private static class NetworkFactoryInfo {
3549        public final String name;
3550        public final Messenger messenger;
3551        public final AsyncChannel asyncChannel;
3552
3553        public NetworkFactoryInfo(String name, Messenger messenger, AsyncChannel asyncChannel) {
3554            this.name = name;
3555            this.messenger = messenger;
3556            this.asyncChannel = asyncChannel;
3557        }
3558    }
3559
3560    /**
3561     * Tracks info about the requester.
3562     * Also used to notice when the calling process dies so we can self-expire
3563     */
3564    private class NetworkRequestInfo implements IBinder.DeathRecipient {
3565        static final boolean REQUEST = true;
3566        static final boolean LISTEN = false;
3567
3568        final NetworkRequest request;
3569        final PendingIntent mPendingIntent;
3570        boolean mPendingIntentSent;
3571        private final IBinder mBinder;
3572        final int mPid;
3573        final int mUid;
3574        final Messenger messenger;
3575        final boolean isRequest;
3576
3577        NetworkRequestInfo(NetworkRequest r, PendingIntent pi, boolean isRequest) {
3578            request = r;
3579            mPendingIntent = pi;
3580            messenger = null;
3581            mBinder = null;
3582            mPid = getCallingPid();
3583            mUid = getCallingUid();
3584            this.isRequest = isRequest;
3585        }
3586
3587        NetworkRequestInfo(Messenger m, NetworkRequest r, IBinder binder, boolean isRequest) {
3588            super();
3589            messenger = m;
3590            request = r;
3591            mBinder = binder;
3592            mPid = getCallingPid();
3593            mUid = getCallingUid();
3594            this.isRequest = isRequest;
3595            mPendingIntent = null;
3596
3597            try {
3598                mBinder.linkToDeath(this, 0);
3599            } catch (RemoteException e) {
3600                binderDied();
3601            }
3602        }
3603
3604        void unlinkDeathRecipient() {
3605            if (mBinder != null) {
3606                mBinder.unlinkToDeath(this, 0);
3607            }
3608        }
3609
3610        public void binderDied() {
3611            log("ConnectivityService NetworkRequestInfo binderDied(" +
3612                    request + ", " + mBinder + ")");
3613            releaseNetworkRequest(request);
3614        }
3615
3616        public String toString() {
3617            return (isRequest ? "Request" : "Listen") +
3618                    " from uid/pid:" + mUid + "/" + mPid +
3619                    " for " + request +
3620                    (mPendingIntent == null ? "" : " to trigger " + mPendingIntent);
3621        }
3622    }
3623
3624    private void ensureRequestableCapabilities(NetworkCapabilities networkCapabilities) {
3625        final String badCapability = networkCapabilities.describeFirstNonRequestableCapability();
3626        if (badCapability != null) {
3627            throw new IllegalArgumentException("Cannot request network with " + badCapability);
3628        }
3629    }
3630
3631    private ArrayList<Integer> getSignalStrengthThresholds(NetworkAgentInfo nai) {
3632        final SortedSet<Integer> thresholds = new TreeSet();
3633        synchronized (nai) {
3634            for (NetworkRequestInfo nri : mNetworkRequests.values()) {
3635                if (nri.request.networkCapabilities.hasSignalStrength() &&
3636                        nai.satisfiesImmutableCapabilitiesOf(nri.request)) {
3637                    thresholds.add(nri.request.networkCapabilities.getSignalStrength());
3638                }
3639            }
3640        }
3641        return new ArrayList<Integer>(thresholds);
3642    }
3643
3644    private void updateSignalStrengthThresholds(
3645            NetworkAgentInfo nai, String reason, NetworkRequest request) {
3646        ArrayList<Integer> thresholdsArray = getSignalStrengthThresholds(nai);
3647        Bundle thresholds = new Bundle();
3648        thresholds.putIntegerArrayList("thresholds", thresholdsArray);
3649
3650        // TODO: Switch to VDBG.
3651        if (DBG) {
3652            String detail;
3653            if (request != null && request.networkCapabilities.hasSignalStrength()) {
3654                detail = reason + " " + request.networkCapabilities.getSignalStrength();
3655            } else {
3656                detail = reason;
3657            }
3658            log(String.format("updateSignalStrengthThresholds: %s, sending %s to %s",
3659                    detail, Arrays.toString(thresholdsArray.toArray()), nai.name()));
3660        }
3661
3662        nai.asyncChannel.sendMessage(
3663                android.net.NetworkAgent.CMD_SET_SIGNAL_STRENGTH_THRESHOLDS,
3664                0, 0, thresholds);
3665    }
3666
3667    @Override
3668    public NetworkRequest requestNetwork(NetworkCapabilities networkCapabilities,
3669            Messenger messenger, int timeoutMs, IBinder binder, int legacyType) {
3670        networkCapabilities = new NetworkCapabilities(networkCapabilities);
3671        enforceNetworkRequestPermissions(networkCapabilities);
3672        enforceMeteredApnPolicy(networkCapabilities);
3673        ensureRequestableCapabilities(networkCapabilities);
3674
3675        if (timeoutMs < 0 || timeoutMs > ConnectivityManager.MAX_NETWORK_REQUEST_TIMEOUT_MS) {
3676            throw new IllegalArgumentException("Bad timeout specified");
3677        }
3678
3679        NetworkRequest networkRequest = new NetworkRequest(networkCapabilities, legacyType,
3680                nextNetworkRequestId());
3681        NetworkRequestInfo nri = new NetworkRequestInfo(messenger, networkRequest, binder,
3682                NetworkRequestInfo.REQUEST);
3683        if (DBG) log("requestNetwork for " + nri);
3684
3685        mHandler.sendMessage(mHandler.obtainMessage(EVENT_REGISTER_NETWORK_REQUEST, nri));
3686        if (timeoutMs > 0) {
3687            mHandler.sendMessageDelayed(mHandler.obtainMessage(EVENT_TIMEOUT_NETWORK_REQUEST,
3688                    nri), timeoutMs);
3689        }
3690        return networkRequest;
3691    }
3692
3693    private void enforceNetworkRequestPermissions(NetworkCapabilities networkCapabilities) {
3694        if (networkCapabilities.hasCapability(NET_CAPABILITY_NOT_RESTRICTED) == false) {
3695            enforceConnectivityInternalPermission();
3696        } else {
3697            enforceChangePermission();
3698        }
3699    }
3700
3701    @Override
3702    public boolean requestBandwidthUpdate(Network network) {
3703        enforceAccessPermission();
3704        NetworkAgentInfo nai = null;
3705        if (network == null) {
3706            return false;
3707        }
3708        synchronized (mNetworkForNetId) {
3709            nai = mNetworkForNetId.get(network.netId);
3710        }
3711        if (nai != null) {
3712            nai.asyncChannel.sendMessage(android.net.NetworkAgent.CMD_REQUEST_BANDWIDTH_UPDATE);
3713            return true;
3714        }
3715        return false;
3716    }
3717
3718
3719    private void enforceMeteredApnPolicy(NetworkCapabilities networkCapabilities) {
3720        // if UID is restricted, don't allow them to bring up metered APNs
3721        if (networkCapabilities.hasCapability(NET_CAPABILITY_NOT_METERED) == false) {
3722            final int uidRules;
3723            final int uid = Binder.getCallingUid();
3724            synchronized(mRulesLock) {
3725                uidRules = mUidRules.get(uid, RULE_ALLOW_ALL);
3726            }
3727            if ((uidRules & (RULE_REJECT_METERED | RULE_REJECT_ALL)) != 0) {
3728                // we could silently fail or we can filter the available nets to only give
3729                // them those they have access to.  Chose the more useful
3730                networkCapabilities.addCapability(NET_CAPABILITY_NOT_METERED);
3731            }
3732        }
3733    }
3734
3735    @Override
3736    public NetworkRequest pendingRequestForNetwork(NetworkCapabilities networkCapabilities,
3737            PendingIntent operation) {
3738        checkNotNull(operation, "PendingIntent cannot be null.");
3739        networkCapabilities = new NetworkCapabilities(networkCapabilities);
3740        enforceNetworkRequestPermissions(networkCapabilities);
3741        enforceMeteredApnPolicy(networkCapabilities);
3742        ensureRequestableCapabilities(networkCapabilities);
3743
3744        NetworkRequest networkRequest = new NetworkRequest(networkCapabilities, TYPE_NONE,
3745                nextNetworkRequestId());
3746        NetworkRequestInfo nri = new NetworkRequestInfo(networkRequest, operation,
3747                NetworkRequestInfo.REQUEST);
3748        if (DBG) log("pendingRequest for " + nri);
3749        mHandler.sendMessage(mHandler.obtainMessage(EVENT_REGISTER_NETWORK_REQUEST_WITH_INTENT,
3750                nri));
3751        return networkRequest;
3752    }
3753
3754    private void releasePendingNetworkRequestWithDelay(PendingIntent operation) {
3755        mHandler.sendMessageDelayed(
3756                mHandler.obtainMessage(EVENT_RELEASE_NETWORK_REQUEST_WITH_INTENT,
3757                getCallingUid(), 0, operation), mReleasePendingIntentDelayMs);
3758    }
3759
3760    @Override
3761    public void releasePendingNetworkRequest(PendingIntent operation) {
3762        checkNotNull(operation, "PendingIntent cannot be null.");
3763        mHandler.sendMessage(mHandler.obtainMessage(EVENT_RELEASE_NETWORK_REQUEST_WITH_INTENT,
3764                getCallingUid(), 0, operation));
3765    }
3766
3767    // In order to implement the compatibility measure for pre-M apps that call
3768    // WifiManager.enableNetwork(..., true) without also binding to that network explicitly,
3769    // WifiManager registers a network listen for the purpose of calling setProcessDefaultNetwork.
3770    // This ensures it has permission to do so.
3771    private boolean hasWifiNetworkListenPermission(NetworkCapabilities nc) {
3772        if (nc == null) {
3773            return false;
3774        }
3775        int[] transportTypes = nc.getTransportTypes();
3776        if (transportTypes.length != 1 || transportTypes[0] != NetworkCapabilities.TRANSPORT_WIFI) {
3777            return false;
3778        }
3779        try {
3780            mContext.enforceCallingOrSelfPermission(
3781                    android.Manifest.permission.ACCESS_WIFI_STATE,
3782                    "ConnectivityService");
3783        } catch (SecurityException e) {
3784            return false;
3785        }
3786        return true;
3787    }
3788
3789    @Override
3790    public NetworkRequest listenForNetwork(NetworkCapabilities networkCapabilities,
3791            Messenger messenger, IBinder binder) {
3792        if (!hasWifiNetworkListenPermission(networkCapabilities)) {
3793            enforceAccessPermission();
3794        }
3795
3796        NetworkRequest networkRequest = new NetworkRequest(
3797                new NetworkCapabilities(networkCapabilities), TYPE_NONE, nextNetworkRequestId());
3798        NetworkRequestInfo nri = new NetworkRequestInfo(messenger, networkRequest, binder,
3799                NetworkRequestInfo.LISTEN);
3800        if (DBG) log("listenForNetwork for " + nri);
3801
3802        mHandler.sendMessage(mHandler.obtainMessage(EVENT_REGISTER_NETWORK_LISTENER, nri));
3803        return networkRequest;
3804    }
3805
3806    @Override
3807    public void pendingListenForNetwork(NetworkCapabilities networkCapabilities,
3808            PendingIntent operation) {
3809        checkNotNull(operation, "PendingIntent cannot be null.");
3810        if (!hasWifiNetworkListenPermission(networkCapabilities)) {
3811            enforceAccessPermission();
3812        }
3813
3814        NetworkRequest networkRequest = new NetworkRequest(
3815                new NetworkCapabilities(networkCapabilities), TYPE_NONE, nextNetworkRequestId());
3816        NetworkRequestInfo nri = new NetworkRequestInfo(networkRequest, operation,
3817                NetworkRequestInfo.LISTEN);
3818        if (DBG) log("pendingListenForNetwork for " + nri);
3819
3820        mHandler.sendMessage(mHandler.obtainMessage(EVENT_REGISTER_NETWORK_LISTENER, nri));
3821    }
3822
3823    @Override
3824    public void releaseNetworkRequest(NetworkRequest networkRequest) {
3825        mHandler.sendMessage(mHandler.obtainMessage(EVENT_RELEASE_NETWORK_REQUEST, getCallingUid(),
3826                0, networkRequest));
3827    }
3828
3829    @Override
3830    public void registerNetworkFactory(Messenger messenger, String name) {
3831        enforceConnectivityInternalPermission();
3832        NetworkFactoryInfo nfi = new NetworkFactoryInfo(name, messenger, new AsyncChannel());
3833        mHandler.sendMessage(mHandler.obtainMessage(EVENT_REGISTER_NETWORK_FACTORY, nfi));
3834    }
3835
3836    private void handleRegisterNetworkFactory(NetworkFactoryInfo nfi) {
3837        if (DBG) log("Got NetworkFactory Messenger for " + nfi.name);
3838        mNetworkFactoryInfos.put(nfi.messenger, nfi);
3839        nfi.asyncChannel.connect(mContext, mTrackerHandler, nfi.messenger);
3840    }
3841
3842    @Override
3843    public void unregisterNetworkFactory(Messenger messenger) {
3844        enforceConnectivityInternalPermission();
3845        mHandler.sendMessage(mHandler.obtainMessage(EVENT_UNREGISTER_NETWORK_FACTORY, messenger));
3846    }
3847
3848    private void handleUnregisterNetworkFactory(Messenger messenger) {
3849        NetworkFactoryInfo nfi = mNetworkFactoryInfos.remove(messenger);
3850        if (nfi == null) {
3851            loge("Failed to find Messenger in unregisterNetworkFactory");
3852            return;
3853        }
3854        if (DBG) log("unregisterNetworkFactory for " + nfi.name);
3855    }
3856
3857    /**
3858     * NetworkAgentInfo supporting a request by requestId.
3859     * These have already been vetted (their Capabilities satisfy the request)
3860     * and the are the highest scored network available.
3861     * the are keyed off the Requests requestId.
3862     */
3863    // TODO: Yikes, this is accessed on multiple threads: add synchronization.
3864    private final SparseArray<NetworkAgentInfo> mNetworkForRequestId =
3865            new SparseArray<NetworkAgentInfo>();
3866
3867    // NOTE: Accessed on multiple threads, must be synchronized on itself.
3868    @GuardedBy("mNetworkForNetId")
3869    private final SparseArray<NetworkAgentInfo> mNetworkForNetId =
3870            new SparseArray<NetworkAgentInfo>();
3871    // NOTE: Accessed on multiple threads, synchronized with mNetworkForNetId.
3872    // An entry is first added to mNetIdInUse, prior to mNetworkForNetId, so
3873    // there may not be a strict 1:1 correlation between the two.
3874    @GuardedBy("mNetworkForNetId")
3875    private final SparseBooleanArray mNetIdInUse = new SparseBooleanArray();
3876
3877    // NetworkAgentInfo keyed off its connecting messenger
3878    // TODO - eval if we can reduce the number of lists/hashmaps/sparsearrays
3879    // NOTE: Only should be accessed on ConnectivityServiceThread, except dump().
3880    private final HashMap<Messenger, NetworkAgentInfo> mNetworkAgentInfos =
3881            new HashMap<Messenger, NetworkAgentInfo>();
3882
3883    // Note: if mDefaultRequest is changed, NetworkMonitor needs to be updated.
3884    private final NetworkRequest mDefaultRequest;
3885
3886    // Request used to optionally keep mobile data active even when higher
3887    // priority networks like Wi-Fi are active.
3888    private final NetworkRequest mDefaultMobileDataRequest;
3889
3890    private NetworkAgentInfo getDefaultNetwork() {
3891        return mNetworkForRequestId.get(mDefaultRequest.requestId);
3892    }
3893
3894    private boolean isDefaultNetwork(NetworkAgentInfo nai) {
3895        return nai == getDefaultNetwork();
3896    }
3897
3898    public int registerNetworkAgent(Messenger messenger, NetworkInfo networkInfo,
3899            LinkProperties linkProperties, NetworkCapabilities networkCapabilities,
3900            int currentScore, NetworkMisc networkMisc) {
3901        enforceConnectivityInternalPermission();
3902
3903        // TODO: Instead of passing mDefaultRequest, provide an API to determine whether a Network
3904        // satisfies mDefaultRequest.
3905        final NetworkAgentInfo nai = new NetworkAgentInfo(messenger, new AsyncChannel(),
3906                new Network(reserveNetId()), new NetworkInfo(networkInfo), new LinkProperties(
3907                linkProperties), new NetworkCapabilities(networkCapabilities), currentScore,
3908                mContext, mTrackerHandler, new NetworkMisc(networkMisc), mDefaultRequest, this);
3909        synchronized (this) {
3910            nai.networkMonitor.systemReady = mSystemReady;
3911        }
3912        addValidationLogs(nai.networkMonitor.getValidationLogs(), nai.network);
3913        if (DBG) log("registerNetworkAgent " + nai);
3914        mHandler.sendMessage(mHandler.obtainMessage(EVENT_REGISTER_NETWORK_AGENT, nai));
3915        return nai.network.netId;
3916    }
3917
3918    private void handleRegisterNetworkAgent(NetworkAgentInfo na) {
3919        if (VDBG) log("Got NetworkAgent Messenger");
3920        mNetworkAgentInfos.put(na.messenger, na);
3921        synchronized (mNetworkForNetId) {
3922            mNetworkForNetId.put(na.network.netId, na);
3923        }
3924        na.asyncChannel.connect(mContext, mTrackerHandler, na.messenger);
3925        NetworkInfo networkInfo = na.networkInfo;
3926        na.networkInfo = null;
3927        updateNetworkInfo(na, networkInfo);
3928    }
3929
3930    private void updateLinkProperties(NetworkAgentInfo networkAgent, LinkProperties oldLp) {
3931        LinkProperties newLp = networkAgent.linkProperties;
3932        int netId = networkAgent.network.netId;
3933
3934        // The NetworkAgentInfo does not know whether clatd is running on its network or not. Before
3935        // we do anything else, make sure its LinkProperties are accurate.
3936        if (networkAgent.clatd != null) {
3937            networkAgent.clatd.fixupLinkProperties(oldLp);
3938        }
3939
3940        updateInterfaces(newLp, oldLp, netId);
3941        updateMtu(newLp, oldLp);
3942        // TODO - figure out what to do for clat
3943//        for (LinkProperties lp : newLp.getStackedLinks()) {
3944//            updateMtu(lp, null);
3945//        }
3946        updateTcpBufferSizes(networkAgent);
3947
3948        // TODO: deprecate and remove mDefaultDns when we can do so safely. See http://b/18327075
3949        // In L, we used it only when the network had Internet access but provided no DNS servers.
3950        // For now, just disable it, and if disabling it doesn't break things, remove it.
3951        // final boolean useDefaultDns = networkAgent.networkCapabilities.hasCapability(
3952        //        NET_CAPABILITY_INTERNET);
3953        final boolean useDefaultDns = false;
3954        final boolean flushDns = updateRoutes(newLp, oldLp, netId);
3955        updateDnses(newLp, oldLp, netId, flushDns, useDefaultDns);
3956
3957        updateClat(newLp, oldLp, networkAgent);
3958        if (isDefaultNetwork(networkAgent)) {
3959            handleApplyDefaultProxy(newLp.getHttpProxy());
3960        } else {
3961            updateProxy(newLp, oldLp, networkAgent);
3962        }
3963        // TODO - move this check to cover the whole function
3964        if (!Objects.equals(newLp, oldLp)) {
3965            notifyIfacesChanged();
3966            notifyNetworkCallbacks(networkAgent, ConnectivityManager.CALLBACK_IP_CHANGED);
3967        }
3968
3969        mKeepaliveTracker.handleCheckKeepalivesStillValid(networkAgent);
3970    }
3971
3972    private void updateClat(LinkProperties newLp, LinkProperties oldLp, NetworkAgentInfo nai) {
3973        final boolean wasRunningClat = nai.clatd != null && nai.clatd.isStarted();
3974        final boolean shouldRunClat = Nat464Xlat.requiresClat(nai);
3975
3976        if (!wasRunningClat && shouldRunClat) {
3977            nai.clatd = new Nat464Xlat(mContext, mNetd, mTrackerHandler, nai);
3978            nai.clatd.start();
3979        } else if (wasRunningClat && !shouldRunClat) {
3980            nai.clatd.stop();
3981        }
3982    }
3983
3984    private void updateInterfaces(LinkProperties newLp, LinkProperties oldLp, int netId) {
3985        CompareResult<String> interfaceDiff = new CompareResult<String>();
3986        if (oldLp != null) {
3987            interfaceDiff = oldLp.compareAllInterfaceNames(newLp);
3988        } else if (newLp != null) {
3989            interfaceDiff.added = newLp.getAllInterfaceNames();
3990        }
3991        for (String iface : interfaceDiff.added) {
3992            try {
3993                if (DBG) log("Adding iface " + iface + " to network " + netId);
3994                mNetd.addInterfaceToNetwork(iface, netId);
3995            } catch (Exception e) {
3996                loge("Exception adding interface: " + e);
3997            }
3998        }
3999        for (String iface : interfaceDiff.removed) {
4000            try {
4001                if (DBG) log("Removing iface " + iface + " from network " + netId);
4002                mNetd.removeInterfaceFromNetwork(iface, netId);
4003            } catch (Exception e) {
4004                loge("Exception removing interface: " + e);
4005            }
4006        }
4007    }
4008
4009    /**
4010     * Have netd update routes from oldLp to newLp.
4011     * @return true if routes changed between oldLp and newLp
4012     */
4013    private boolean updateRoutes(LinkProperties newLp, LinkProperties oldLp, int netId) {
4014        CompareResult<RouteInfo> routeDiff = new CompareResult<RouteInfo>();
4015        if (oldLp != null) {
4016            routeDiff = oldLp.compareAllRoutes(newLp);
4017        } else if (newLp != null) {
4018            routeDiff.added = newLp.getAllRoutes();
4019        }
4020
4021        // add routes before removing old in case it helps with continuous connectivity
4022
4023        // do this twice, adding non-nexthop routes first, then routes they are dependent on
4024        for (RouteInfo route : routeDiff.added) {
4025            if (route.hasGateway()) continue;
4026            if (DBG) log("Adding Route [" + route + "] to network " + netId);
4027            try {
4028                mNetd.addRoute(netId, route);
4029            } catch (Exception e) {
4030                if ((route.getDestination().getAddress() instanceof Inet4Address) || VDBG) {
4031                    loge("Exception in addRoute for non-gateway: " + e);
4032                }
4033            }
4034        }
4035        for (RouteInfo route : routeDiff.added) {
4036            if (route.hasGateway() == false) continue;
4037            if (DBG) log("Adding Route [" + route + "] to network " + netId);
4038            try {
4039                mNetd.addRoute(netId, route);
4040            } catch (Exception e) {
4041                if ((route.getGateway() instanceof Inet4Address) || VDBG) {
4042                    loge("Exception in addRoute for gateway: " + e);
4043                }
4044            }
4045        }
4046
4047        for (RouteInfo route : routeDiff.removed) {
4048            if (DBG) log("Removing Route [" + route + "] from network " + netId);
4049            try {
4050                mNetd.removeRoute(netId, route);
4051            } catch (Exception e) {
4052                loge("Exception in removeRoute: " + e);
4053            }
4054        }
4055        return !routeDiff.added.isEmpty() || !routeDiff.removed.isEmpty();
4056    }
4057
4058    private void updateDnses(LinkProperties newLp, LinkProperties oldLp, int netId,
4059                             boolean flush, boolean useDefaultDns) {
4060        if (oldLp == null || (newLp.isIdenticalDnses(oldLp) == false)) {
4061            Collection<InetAddress> dnses = newLp.getDnsServers();
4062            if (dnses.size() == 0 && mDefaultDns != null && useDefaultDns) {
4063                dnses = new ArrayList();
4064                dnses.add(mDefaultDns);
4065                if (DBG) {
4066                    loge("no dns provided for netId " + netId + ", so using defaults");
4067                }
4068            }
4069            if (DBG) log("Setting Dns servers for network " + netId + " to " + dnses);
4070            try {
4071                mNetd.setDnsServersForNetwork(netId, NetworkUtils.makeStrings(dnses),
4072                    newLp.getDomains());
4073            } catch (Exception e) {
4074                loge("Exception in setDnsServersForNetwork: " + e);
4075            }
4076            final NetworkAgentInfo defaultNai = getDefaultNetwork();
4077            if (defaultNai != null && defaultNai.network.netId == netId) {
4078                setDefaultDnsSystemProperties(dnses);
4079            }
4080            flushVmDnsCache();
4081        } else if (flush) {
4082            try {
4083                mNetd.flushNetworkDnsCache(netId);
4084            } catch (Exception e) {
4085                loge("Exception in flushNetworkDnsCache: " + e);
4086            }
4087            flushVmDnsCache();
4088        }
4089    }
4090
4091    private void setDefaultDnsSystemProperties(Collection<InetAddress> dnses) {
4092        int last = 0;
4093        for (InetAddress dns : dnses) {
4094            ++last;
4095            String key = "net.dns" + last;
4096            String value = dns.getHostAddress();
4097            SystemProperties.set(key, value);
4098        }
4099        for (int i = last + 1; i <= mNumDnsEntries; ++i) {
4100            String key = "net.dns" + i;
4101            SystemProperties.set(key, "");
4102        }
4103        mNumDnsEntries = last;
4104    }
4105
4106    /**
4107     * Update the NetworkCapabilities for {@code networkAgent} to {@code networkCapabilities}
4108     * augmented with any stateful capabilities implied from {@code networkAgent}
4109     * (e.g., validated status and captive portal status).
4110     *
4111     * @param nai the network having its capabilities updated.
4112     * @param networkCapabilities the new network capabilities.
4113     */
4114    private void updateCapabilities(NetworkAgentInfo nai, NetworkCapabilities networkCapabilities) {
4115        // Don't modify caller's NetworkCapabilities.
4116        networkCapabilities = new NetworkCapabilities(networkCapabilities);
4117        if (nai.lastValidated) {
4118            networkCapabilities.addCapability(NET_CAPABILITY_VALIDATED);
4119        } else {
4120            networkCapabilities.removeCapability(NET_CAPABILITY_VALIDATED);
4121        }
4122        if (nai.lastCaptivePortalDetected) {
4123            networkCapabilities.addCapability(NET_CAPABILITY_CAPTIVE_PORTAL);
4124        } else {
4125            networkCapabilities.removeCapability(NET_CAPABILITY_CAPTIVE_PORTAL);
4126        }
4127        if (!Objects.equals(nai.networkCapabilities, networkCapabilities)) {
4128            final int oldScore = nai.getCurrentScore();
4129            if (nai.networkCapabilities.hasCapability(NET_CAPABILITY_NOT_RESTRICTED) !=
4130                    networkCapabilities.hasCapability(NET_CAPABILITY_NOT_RESTRICTED)) {
4131                try {
4132                    mNetd.setNetworkPermission(nai.network.netId,
4133                            networkCapabilities.hasCapability(NET_CAPABILITY_NOT_RESTRICTED) ?
4134                                    null : NetworkManagementService.PERMISSION_SYSTEM);
4135                } catch (RemoteException e) {
4136                    loge("Exception in setNetworkPermission: " + e);
4137                }
4138            }
4139            synchronized (nai) {
4140                nai.networkCapabilities = networkCapabilities;
4141            }
4142            rematchAllNetworksAndRequests(nai, oldScore);
4143            notifyNetworkCallbacks(nai, ConnectivityManager.CALLBACK_CAP_CHANGED);
4144        }
4145    }
4146
4147    private void sendUpdatedScoreToFactories(NetworkAgentInfo nai) {
4148        for (int i = 0; i < nai.networkRequests.size(); i++) {
4149            NetworkRequest nr = nai.networkRequests.valueAt(i);
4150            // Don't send listening requests to factories. b/17393458
4151            if (!isRequest(nr)) continue;
4152            sendUpdatedScoreToFactories(nr, nai.getCurrentScore());
4153        }
4154    }
4155
4156    private void sendUpdatedScoreToFactories(NetworkRequest networkRequest, int score) {
4157        if (VDBG) log("sending new Min Network Score(" + score + "): " + networkRequest.toString());
4158        for (NetworkFactoryInfo nfi : mNetworkFactoryInfos.values()) {
4159            nfi.asyncChannel.sendMessage(android.net.NetworkFactory.CMD_REQUEST_NETWORK, score, 0,
4160                    networkRequest);
4161        }
4162    }
4163
4164    private void sendPendingIntentForRequest(NetworkRequestInfo nri, NetworkAgentInfo networkAgent,
4165            int notificationType) {
4166        if (notificationType == ConnectivityManager.CALLBACK_AVAILABLE && !nri.mPendingIntentSent) {
4167            Intent intent = new Intent();
4168            intent.putExtra(ConnectivityManager.EXTRA_NETWORK, networkAgent.network);
4169            intent.putExtra(ConnectivityManager.EXTRA_NETWORK_REQUEST, nri.request);
4170            nri.mPendingIntentSent = true;
4171            sendIntent(nri.mPendingIntent, intent);
4172        }
4173        // else not handled
4174    }
4175
4176    private void sendIntent(PendingIntent pendingIntent, Intent intent) {
4177        mPendingIntentWakeLock.acquire();
4178        try {
4179            if (DBG) log("Sending " + pendingIntent);
4180            pendingIntent.send(mContext, 0, intent, this /* onFinished */, null /* Handler */);
4181        } catch (PendingIntent.CanceledException e) {
4182            if (DBG) log(pendingIntent + " was not sent, it had been canceled.");
4183            mPendingIntentWakeLock.release();
4184            releasePendingNetworkRequest(pendingIntent);
4185        }
4186        // ...otherwise, mPendingIntentWakeLock.release() gets called by onSendFinished()
4187    }
4188
4189    @Override
4190    public void onSendFinished(PendingIntent pendingIntent, Intent intent, int resultCode,
4191            String resultData, Bundle resultExtras) {
4192        if (DBG) log("Finished sending " + pendingIntent);
4193        mPendingIntentWakeLock.release();
4194        // Release with a delay so the receiving client has an opportunity to put in its
4195        // own request.
4196        releasePendingNetworkRequestWithDelay(pendingIntent);
4197    }
4198
4199    private void callCallbackForRequest(NetworkRequestInfo nri,
4200            NetworkAgentInfo networkAgent, int notificationType) {
4201        if (nri.messenger == null) return;  // Default request has no msgr
4202        Bundle bundle = new Bundle();
4203        bundle.putParcelable(NetworkRequest.class.getSimpleName(),
4204                new NetworkRequest(nri.request));
4205        Message msg = Message.obtain();
4206        if (notificationType != ConnectivityManager.CALLBACK_UNAVAIL &&
4207                notificationType != ConnectivityManager.CALLBACK_RELEASED) {
4208            bundle.putParcelable(Network.class.getSimpleName(), networkAgent.network);
4209        }
4210        switch (notificationType) {
4211            case ConnectivityManager.CALLBACK_LOSING: {
4212                msg.arg1 = 30 * 1000; // TODO - read this from NetworkMonitor
4213                break;
4214            }
4215            case ConnectivityManager.CALLBACK_CAP_CHANGED: {
4216                bundle.putParcelable(NetworkCapabilities.class.getSimpleName(),
4217                        new NetworkCapabilities(networkAgent.networkCapabilities));
4218                break;
4219            }
4220            case ConnectivityManager.CALLBACK_IP_CHANGED: {
4221                bundle.putParcelable(LinkProperties.class.getSimpleName(),
4222                        new LinkProperties(networkAgent.linkProperties));
4223                break;
4224            }
4225        }
4226        msg.what = notificationType;
4227        msg.setData(bundle);
4228        try {
4229            if (VDBG) {
4230                log("sending notification " + notifyTypeToName(notificationType) +
4231                        " for " + nri.request);
4232            }
4233            nri.messenger.send(msg);
4234        } catch (RemoteException e) {
4235            // may occur naturally in the race of binder death.
4236            loge("RemoteException caught trying to send a callback msg for " + nri.request);
4237        }
4238    }
4239
4240    private void teardownUnneededNetwork(NetworkAgentInfo nai) {
4241        for (int i = 0; i < nai.networkRequests.size(); i++) {
4242            NetworkRequest nr = nai.networkRequests.valueAt(i);
4243            // Ignore listening requests.
4244            if (!isRequest(nr)) continue;
4245            loge("Dead network still had at least " + nr);
4246            break;
4247        }
4248        nai.asyncChannel.disconnect();
4249    }
4250
4251    private void handleLingerComplete(NetworkAgentInfo oldNetwork) {
4252        if (oldNetwork == null) {
4253            loge("Unknown NetworkAgentInfo in handleLingerComplete");
4254            return;
4255        }
4256        if (DBG) log("handleLingerComplete for " + oldNetwork.name());
4257        teardownUnneededNetwork(oldNetwork);
4258    }
4259
4260    private void makeDefault(NetworkAgentInfo newNetwork) {
4261        if (DBG) log("Switching to new default network: " + newNetwork);
4262        setupDataActivityTracking(newNetwork);
4263        try {
4264            mNetd.setDefaultNetId(newNetwork.network.netId);
4265        } catch (Exception e) {
4266            loge("Exception setting default network :" + e);
4267        }
4268        notifyLockdownVpn(newNetwork);
4269        handleApplyDefaultProxy(newNetwork.linkProperties.getHttpProxy());
4270        updateTcpBufferSizes(newNetwork);
4271        setDefaultDnsSystemProperties(newNetwork.linkProperties.getDnsServers());
4272    }
4273
4274    // Handles a network appearing or improving its score.
4275    //
4276    // - Evaluates all current NetworkRequests that can be
4277    //   satisfied by newNetwork, and reassigns to newNetwork
4278    //   any such requests for which newNetwork is the best.
4279    //
4280    // - Lingers any validated Networks that as a result are no longer
4281    //   needed. A network is needed if it is the best network for
4282    //   one or more NetworkRequests, or if it is a VPN.
4283    //
4284    // - Tears down newNetwork if it just became validated
4285    //   but turns out to be unneeded.
4286    //
4287    // - If reapUnvalidatedNetworks==REAP, tears down unvalidated
4288    //   networks that have no chance (i.e. even if validated)
4289    //   of becoming the highest scoring network.
4290    //
4291    // NOTE: This function only adds NetworkRequests that "newNetwork" could satisfy,
4292    // it does not remove NetworkRequests that other Networks could better satisfy.
4293    // If you need to handle decreases in score, use {@link rematchAllNetworksAndRequests}.
4294    // This function should be used when possible instead of {@code rematchAllNetworksAndRequests}
4295    // as it performs better by a factor of the number of Networks.
4296    //
4297    // @param newNetwork is the network to be matched against NetworkRequests.
4298    // @param reapUnvalidatedNetworks indicates if an additional pass over all networks should be
4299    //               performed to tear down unvalidated networks that have no chance (i.e. even if
4300    //               validated) of becoming the highest scoring network.
4301    private void rematchNetworkAndRequests(NetworkAgentInfo newNetwork,
4302            ReapUnvalidatedNetworks reapUnvalidatedNetworks) {
4303        if (!newNetwork.created) return;
4304        boolean keep = newNetwork.isVPN();
4305        boolean isNewDefault = false;
4306        NetworkAgentInfo oldDefaultNetwork = null;
4307        if (VDBG) log("rematching " + newNetwork.name());
4308        // Find and migrate to this Network any NetworkRequests for
4309        // which this network is now the best.
4310        ArrayList<NetworkAgentInfo> affectedNetworks = new ArrayList<NetworkAgentInfo>();
4311        ArrayList<NetworkRequestInfo> addedRequests = new ArrayList<NetworkRequestInfo>();
4312        if (VDBG) log(" network has: " + newNetwork.networkCapabilities);
4313        for (NetworkRequestInfo nri : mNetworkRequests.values()) {
4314            final NetworkAgentInfo currentNetwork = mNetworkForRequestId.get(nri.request.requestId);
4315            final boolean satisfies = newNetwork.satisfies(nri.request);
4316            if (newNetwork == currentNetwork && satisfies) {
4317                if (VDBG) {
4318                    log("Network " + newNetwork.name() + " was already satisfying" +
4319                            " request " + nri.request.requestId + ". No change.");
4320                }
4321                keep = true;
4322                continue;
4323            }
4324
4325            // check if it satisfies the NetworkCapabilities
4326            if (VDBG) log("  checking if request is satisfied: " + nri.request);
4327            if (satisfies) {
4328                if (!nri.isRequest) {
4329                    // This is not a request, it's a callback listener.
4330                    // Add it to newNetwork regardless of score.
4331                    if (newNetwork.addRequest(nri.request)) addedRequests.add(nri);
4332                    continue;
4333                }
4334
4335                // next check if it's better than any current network we're using for
4336                // this request
4337                if (VDBG) {
4338                    log("currentScore = " +
4339                            (currentNetwork != null ? currentNetwork.getCurrentScore() : 0) +
4340                            ", newScore = " + newNetwork.getCurrentScore());
4341                }
4342                if (currentNetwork == null ||
4343                        currentNetwork.getCurrentScore() < newNetwork.getCurrentScore()) {
4344                    if (DBG) log("rematch for " + newNetwork.name());
4345                    if (currentNetwork != null) {
4346                        if (DBG) log("   accepting network in place of " + currentNetwork.name());
4347                        currentNetwork.networkRequests.remove(nri.request.requestId);
4348                        currentNetwork.networkLingered.add(nri.request);
4349                        affectedNetworks.add(currentNetwork);
4350                    } else {
4351                        if (DBG) log("   accepting network in place of null");
4352                    }
4353                    unlinger(newNetwork);
4354                    mNetworkForRequestId.put(nri.request.requestId, newNetwork);
4355                    if (!newNetwork.addRequest(nri.request)) {
4356                        Slog.wtf(TAG, "BUG: " + newNetwork.name() + " already has " + nri.request);
4357                    }
4358                    addedRequests.add(nri);
4359                    keep = true;
4360                    // Tell NetworkFactories about the new score, so they can stop
4361                    // trying to connect if they know they cannot match it.
4362                    // TODO - this could get expensive if we have alot of requests for this
4363                    // network.  Think about if there is a way to reduce this.  Push
4364                    // netid->request mapping to each factory?
4365                    sendUpdatedScoreToFactories(nri.request, newNetwork.getCurrentScore());
4366                    if (mDefaultRequest.requestId == nri.request.requestId) {
4367                        isNewDefault = true;
4368                        oldDefaultNetwork = currentNetwork;
4369                    }
4370                }
4371            } else if (newNetwork.networkRequests.get(nri.request.requestId) != null) {
4372                // If "newNetwork" is listed as satisfying "nri" but no longer satisfies "nri",
4373                // mark it as no longer satisfying "nri".  Because networks are processed by
4374                // rematchAllNetworkAndRequests() in descending score order, "currentNetwork" will
4375                // match "newNetwork" before this loop will encounter a "currentNetwork" with higher
4376                // score than "newNetwork" and where "currentNetwork" no longer satisfies "nri".
4377                // This means this code doesn't have to handle the case where "currentNetwork" no
4378                // longer satisfies "nri" when "currentNetwork" does not equal "newNetwork".
4379                if (DBG) {
4380                    log("Network " + newNetwork.name() + " stopped satisfying" +
4381                            " request " + nri.request.requestId);
4382                }
4383                newNetwork.networkRequests.remove(nri.request.requestId);
4384                if (currentNetwork == newNetwork) {
4385                    mNetworkForRequestId.remove(nri.request.requestId);
4386                    sendUpdatedScoreToFactories(nri.request, 0);
4387                } else {
4388                    if (nri.isRequest == true) {
4389                        Slog.wtf(TAG, "BUG: Removing request " + nri.request.requestId + " from " +
4390                                newNetwork.name() +
4391                                " without updating mNetworkForRequestId or factories!");
4392                    }
4393                }
4394                // TODO: technically, sending CALLBACK_LOST here is
4395                // incorrect if nri is a request (not a listen) and there
4396                // is a replacement network currently connected that can
4397                // satisfy it. However, the only capability that can both
4398                // a) be requested and b) change is NET_CAPABILITY_TRUSTED,
4399                // so this code is only incorrect for a network that loses
4400                // the TRUSTED capability, which is a rare case.
4401                callCallbackForRequest(nri, newNetwork, ConnectivityManager.CALLBACK_LOST);
4402            }
4403        }
4404        // Linger any networks that are no longer needed.
4405        for (NetworkAgentInfo nai : affectedNetworks) {
4406            if (nai.lingering) {
4407                // Already lingered.  Nothing to do.  This can only happen if "nai" is in
4408                // "affectedNetworks" twice.  The reasoning being that to get added to
4409                // "affectedNetworks", "nai" must have been satisfying a NetworkRequest
4410                // (i.e. not lingered) so it could have only been lingered by this loop.
4411                // unneeded(nai) will be false and we'll call unlinger() below which would
4412                // be bad, so handle it here.
4413            } else if (unneeded(nai)) {
4414                linger(nai);
4415            } else {
4416                // Clear nai.networkLingered we might have added above.
4417                unlinger(nai);
4418            }
4419        }
4420        if (isNewDefault) {
4421            // Notify system services that this network is up.
4422            makeDefault(newNetwork);
4423            synchronized (ConnectivityService.this) {
4424                // have a new default network, release the transition wakelock in
4425                // a second if it's held.  The second pause is to allow apps
4426                // to reconnect over the new network
4427                if (mNetTransitionWakeLock.isHeld()) {
4428                    mHandler.sendMessageDelayed(mHandler.obtainMessage(
4429                            EVENT_CLEAR_NET_TRANSITION_WAKELOCK,
4430                            mNetTransitionWakeLockSerialNumber, 0),
4431                            1000);
4432                }
4433            }
4434        }
4435
4436        // do this after the default net is switched, but
4437        // before LegacyTypeTracker sends legacy broadcasts
4438        for (NetworkRequestInfo nri : addedRequests) notifyNetworkCallback(newNetwork, nri);
4439
4440        if (isNewDefault) {
4441            // Maintain the illusion: since the legacy API only
4442            // understands one network at a time, we must pretend
4443            // that the current default network disconnected before
4444            // the new one connected.
4445            if (oldDefaultNetwork != null) {
4446                mLegacyTypeTracker.remove(oldDefaultNetwork.networkInfo.getType(),
4447                                          oldDefaultNetwork, true);
4448            }
4449            mDefaultInetConditionPublished = newNetwork.lastValidated ? 100 : 0;
4450            mLegacyTypeTracker.add(newNetwork.networkInfo.getType(), newNetwork);
4451            notifyLockdownVpn(newNetwork);
4452        }
4453
4454        if (keep) {
4455            // Notify battery stats service about this network, both the normal
4456            // interface and any stacked links.
4457            // TODO: Avoid redoing this; this must only be done once when a network comes online.
4458            try {
4459                final IBatteryStats bs = BatteryStatsService.getService();
4460                final int type = newNetwork.networkInfo.getType();
4461
4462                final String baseIface = newNetwork.linkProperties.getInterfaceName();
4463                bs.noteNetworkInterfaceType(baseIface, type);
4464                for (LinkProperties stacked : newNetwork.linkProperties.getStackedLinks()) {
4465                    final String stackedIface = stacked.getInterfaceName();
4466                    bs.noteNetworkInterfaceType(stackedIface, type);
4467                    NetworkStatsFactory.noteStackedIface(stackedIface, baseIface);
4468                }
4469            } catch (RemoteException ignored) {
4470            }
4471
4472            // This has to happen after the notifyNetworkCallbacks as that tickles each
4473            // ConnectivityManager instance so that legacy requests correctly bind dns
4474            // requests to this network.  The legacy users are listening for this bcast
4475            // and will generally do a dns request so they can ensureRouteToHost and if
4476            // they do that before the callbacks happen they'll use the default network.
4477            //
4478            // TODO: Is there still a race here? We send the broadcast
4479            // after sending the callback, but if the app can receive the
4480            // broadcast before the callback, it might still break.
4481            //
4482            // This *does* introduce a race where if the user uses the new api
4483            // (notification callbacks) and then uses the old api (getNetworkInfo(type))
4484            // they may get old info.  Reverse this after the old startUsing api is removed.
4485            // This is on top of the multiple intent sequencing referenced in the todo above.
4486            for (int i = 0; i < newNetwork.networkRequests.size(); i++) {
4487                NetworkRequest nr = newNetwork.networkRequests.valueAt(i);
4488                if (nr.legacyType != TYPE_NONE && isRequest(nr)) {
4489                    // legacy type tracker filters out repeat adds
4490                    mLegacyTypeTracker.add(nr.legacyType, newNetwork);
4491                }
4492            }
4493
4494            // A VPN generally won't get added to the legacy tracker in the "for (nri)" loop above,
4495            // because usually there are no NetworkRequests it satisfies (e.g., mDefaultRequest
4496            // wants the NOT_VPN capability, so it will never be satisfied by a VPN). So, add the
4497            // newNetwork to the tracker explicitly (it's a no-op if it has already been added).
4498            if (newNetwork.isVPN()) {
4499                mLegacyTypeTracker.add(TYPE_VPN, newNetwork);
4500            }
4501        }
4502        if (reapUnvalidatedNetworks == ReapUnvalidatedNetworks.REAP) {
4503            for (NetworkAgentInfo nai : mNetworkAgentInfos.values()) {
4504                if (unneeded(nai)) {
4505                    if (DBG) log("Reaping " + nai.name());
4506                    teardownUnneededNetwork(nai);
4507                }
4508            }
4509        }
4510    }
4511
4512    /**
4513     * Attempt to rematch all Networks with NetworkRequests.  This may result in Networks
4514     * being disconnected.
4515     * @param changed If only one Network's score or capabilities have been modified since the last
4516     *         time this function was called, pass this Network in this argument, otherwise pass
4517     *         null.
4518     * @param oldScore If only one Network has been changed but its NetworkCapabilities have not
4519     *         changed, pass in the Network's score (from getCurrentScore()) prior to the change via
4520     *         this argument, otherwise pass {@code changed.getCurrentScore()} or 0 if
4521     *         {@code changed} is {@code null}. This is because NetworkCapabilities influence a
4522     *         network's score.
4523     */
4524    private void rematchAllNetworksAndRequests(NetworkAgentInfo changed, int oldScore) {
4525        // TODO: This may get slow.  The "changed" parameter is provided for future optimization
4526        // to avoid the slowness.  It is not simply enough to process just "changed", for
4527        // example in the case where "changed"'s score decreases and another network should begin
4528        // satifying a NetworkRequest that "changed" currently satisfies.
4529
4530        // Optimization: Only reprocess "changed" if its score improved.  This is safe because it
4531        // can only add more NetworkRequests satisfied by "changed", and this is exactly what
4532        // rematchNetworkAndRequests() handles.
4533        if (changed != null && oldScore < changed.getCurrentScore()) {
4534            rematchNetworkAndRequests(changed, ReapUnvalidatedNetworks.REAP);
4535        } else {
4536            final NetworkAgentInfo[] nais = mNetworkAgentInfos.values().toArray(
4537                    new NetworkAgentInfo[mNetworkAgentInfos.size()]);
4538            // Rematch higher scoring networks first to prevent requests first matching a lower
4539            // scoring network and then a higher scoring network, which could produce multiple
4540            // callbacks and inadvertently unlinger networks.
4541            Arrays.sort(nais);
4542            for (NetworkAgentInfo nai : nais) {
4543                rematchNetworkAndRequests(nai,
4544                        // Only reap the last time through the loop.  Reaping before all rematching
4545                        // is complete could incorrectly teardown a network that hasn't yet been
4546                        // rematched.
4547                        (nai != nais[nais.length-1]) ? ReapUnvalidatedNetworks.DONT_REAP
4548                                : ReapUnvalidatedNetworks.REAP);
4549            }
4550        }
4551    }
4552
4553    private void updateInetCondition(NetworkAgentInfo nai) {
4554        // Don't bother updating until we've graduated to validated at least once.
4555        if (!nai.everValidated) return;
4556        // For now only update icons for default connection.
4557        // TODO: Update WiFi and cellular icons separately. b/17237507
4558        if (!isDefaultNetwork(nai)) return;
4559
4560        int newInetCondition = nai.lastValidated ? 100 : 0;
4561        // Don't repeat publish.
4562        if (newInetCondition == mDefaultInetConditionPublished) return;
4563
4564        mDefaultInetConditionPublished = newInetCondition;
4565        sendInetConditionBroadcast(nai.networkInfo);
4566    }
4567
4568    private void notifyLockdownVpn(NetworkAgentInfo nai) {
4569        if (mLockdownTracker != null) {
4570            if (nai != null && nai.isVPN()) {
4571                mLockdownTracker.onVpnStateChanged(nai.networkInfo);
4572            } else {
4573                mLockdownTracker.onNetworkInfoChanged();
4574            }
4575        }
4576    }
4577
4578    private void updateNetworkInfo(NetworkAgentInfo networkAgent, NetworkInfo newInfo) {
4579        NetworkInfo.State state = newInfo.getState();
4580        NetworkInfo oldInfo = null;
4581        final int oldScore = networkAgent.getCurrentScore();
4582        synchronized (networkAgent) {
4583            oldInfo = networkAgent.networkInfo;
4584            networkAgent.networkInfo = newInfo;
4585        }
4586        notifyLockdownVpn(networkAgent);
4587
4588        if (oldInfo != null && oldInfo.getState() == state) {
4589            if (VDBG) log("ignoring duplicate network state non-change");
4590            return;
4591        }
4592        if (DBG) {
4593            log(networkAgent.name() + " EVENT_NETWORK_INFO_CHANGED, going from " +
4594                    (oldInfo == null ? "null" : oldInfo.getState()) +
4595                    " to " + state);
4596        }
4597
4598        if (state == NetworkInfo.State.CONNECTED && !networkAgent.created) {
4599            try {
4600                // This should never fail.  Specifying an already in use NetID will cause failure.
4601                if (networkAgent.isVPN()) {
4602                    mNetd.createVirtualNetwork(networkAgent.network.netId,
4603                            !networkAgent.linkProperties.getDnsServers().isEmpty(),
4604                            (networkAgent.networkMisc == null ||
4605                                !networkAgent.networkMisc.allowBypass));
4606                } else {
4607                    mNetd.createPhysicalNetwork(networkAgent.network.netId,
4608                            networkAgent.networkCapabilities.hasCapability(
4609                                    NET_CAPABILITY_NOT_RESTRICTED) ?
4610                                    null : NetworkManagementService.PERMISSION_SYSTEM);
4611                }
4612            } catch (Exception e) {
4613                loge("Error creating network " + networkAgent.network.netId + ": "
4614                        + e.getMessage());
4615                return;
4616            }
4617            networkAgent.created = true;
4618            updateLinkProperties(networkAgent, null);
4619            notifyIfacesChanged();
4620
4621            networkAgent.networkMonitor.sendMessage(NetworkMonitor.CMD_NETWORK_CONNECTED);
4622            scheduleUnvalidatedPrompt(networkAgent);
4623
4624            if (networkAgent.isVPN()) {
4625                // Temporarily disable the default proxy (not global).
4626                synchronized (mProxyLock) {
4627                    if (!mDefaultProxyDisabled) {
4628                        mDefaultProxyDisabled = true;
4629                        if (mGlobalProxy == null && mDefaultProxy != null) {
4630                            sendProxyBroadcast(null);
4631                        }
4632                    }
4633                }
4634                // TODO: support proxy per network.
4635            }
4636
4637            // Whether a particular NetworkRequest listen should cause signal strength thresholds to
4638            // be communicated to a particular NetworkAgent depends only on the network's immutable,
4639            // capabilities, so it only needs to be done once on initial connect, not every time the
4640            // network's capabilities change. Note that we do this before rematching the network,
4641            // so we could decide to tear it down immediately afterwards. That's fine though - on
4642            // disconnection NetworkAgents should stop any signal strength monitoring they have been
4643            // doing.
4644            updateSignalStrengthThresholds(networkAgent, "CONNECT", null);
4645
4646            // Consider network even though it is not yet validated.
4647            rematchNetworkAndRequests(networkAgent, ReapUnvalidatedNetworks.REAP);
4648
4649            // This has to happen after matching the requests, because callbacks are just requests.
4650            notifyNetworkCallbacks(networkAgent, ConnectivityManager.CALLBACK_PRECHECK);
4651        } else if (state == NetworkInfo.State.DISCONNECTED) {
4652            networkAgent.asyncChannel.disconnect();
4653            if (networkAgent.isVPN()) {
4654                synchronized (mProxyLock) {
4655                    if (mDefaultProxyDisabled) {
4656                        mDefaultProxyDisabled = false;
4657                        if (mGlobalProxy == null && mDefaultProxy != null) {
4658                            sendProxyBroadcast(mDefaultProxy);
4659                        }
4660                    }
4661                }
4662            }
4663        } else if ((oldInfo != null && oldInfo.getState() == NetworkInfo.State.SUSPENDED) ||
4664                state == NetworkInfo.State.SUSPENDED) {
4665            // going into or coming out of SUSPEND: rescore and notify
4666            if (networkAgent.getCurrentScore() != oldScore) {
4667                rematchAllNetworksAndRequests(networkAgent, oldScore);
4668            }
4669            notifyNetworkCallbacks(networkAgent, (state == NetworkInfo.State.SUSPENDED ?
4670                    ConnectivityManager.CALLBACK_SUSPENDED :
4671                    ConnectivityManager.CALLBACK_RESUMED));
4672            mLegacyTypeTracker.update(networkAgent);
4673        }
4674    }
4675
4676    private void updateNetworkScore(NetworkAgentInfo nai, int score) {
4677        if (DBG) log("updateNetworkScore for " + nai.name() + " to " + score);
4678        if (score < 0) {
4679            loge("updateNetworkScore for " + nai.name() + " got a negative score (" + score +
4680                    ").  Bumping score to min of 0");
4681            score = 0;
4682        }
4683
4684        final int oldScore = nai.getCurrentScore();
4685        nai.setCurrentScore(score);
4686
4687        rematchAllNetworksAndRequests(nai, oldScore);
4688
4689        sendUpdatedScoreToFactories(nai);
4690    }
4691
4692    // notify only this one new request of the current state
4693    protected void notifyNetworkCallback(NetworkAgentInfo nai, NetworkRequestInfo nri) {
4694        int notifyType = ConnectivityManager.CALLBACK_AVAILABLE;
4695        // TODO - read state from monitor to decide what to send.
4696//        if (nai.networkMonitor.isLingering()) {
4697//            notifyType = NetworkCallbacks.LOSING;
4698//        } else if (nai.networkMonitor.isEvaluating()) {
4699//            notifyType = NetworkCallbacks.callCallbackForRequest(request, nai, notifyType);
4700//        }
4701        if (nri.mPendingIntent == null) {
4702            callCallbackForRequest(nri, nai, notifyType);
4703        } else {
4704            sendPendingIntentForRequest(nri, nai, notifyType);
4705        }
4706    }
4707
4708    private void sendLegacyNetworkBroadcast(NetworkAgentInfo nai, DetailedState state, int type) {
4709        // The NetworkInfo we actually send out has no bearing on the real
4710        // state of affairs. For example, if the default connection is mobile,
4711        // and a request for HIPRI has just gone away, we need to pretend that
4712        // HIPRI has just disconnected. So we need to set the type to HIPRI and
4713        // the state to DISCONNECTED, even though the network is of type MOBILE
4714        // and is still connected.
4715        NetworkInfo info = new NetworkInfo(nai.networkInfo);
4716        info.setType(type);
4717        if (state != DetailedState.DISCONNECTED) {
4718            info.setDetailedState(state, null, info.getExtraInfo());
4719            sendConnectedBroadcast(info);
4720        } else {
4721            info.setDetailedState(state, info.getReason(), info.getExtraInfo());
4722            Intent intent = new Intent(ConnectivityManager.CONNECTIVITY_ACTION);
4723            intent.putExtra(ConnectivityManager.EXTRA_NETWORK_INFO, info);
4724            intent.putExtra(ConnectivityManager.EXTRA_NETWORK_TYPE, info.getType());
4725            if (info.isFailover()) {
4726                intent.putExtra(ConnectivityManager.EXTRA_IS_FAILOVER, true);
4727                nai.networkInfo.setFailover(false);
4728            }
4729            if (info.getReason() != null) {
4730                intent.putExtra(ConnectivityManager.EXTRA_REASON, info.getReason());
4731            }
4732            if (info.getExtraInfo() != null) {
4733                intent.putExtra(ConnectivityManager.EXTRA_EXTRA_INFO, info.getExtraInfo());
4734            }
4735            NetworkAgentInfo newDefaultAgent = null;
4736            if (nai.networkRequests.get(mDefaultRequest.requestId) != null) {
4737                newDefaultAgent = getDefaultNetwork();
4738                if (newDefaultAgent != null) {
4739                    intent.putExtra(ConnectivityManager.EXTRA_OTHER_NETWORK_INFO,
4740                            newDefaultAgent.networkInfo);
4741                } else {
4742                    intent.putExtra(ConnectivityManager.EXTRA_NO_CONNECTIVITY, true);
4743                }
4744            }
4745            intent.putExtra(ConnectivityManager.EXTRA_INET_CONDITION,
4746                    mDefaultInetConditionPublished);
4747            sendStickyBroadcast(intent);
4748            if (newDefaultAgent != null) {
4749                sendConnectedBroadcast(newDefaultAgent.networkInfo);
4750            }
4751        }
4752    }
4753
4754    protected void notifyNetworkCallbacks(NetworkAgentInfo networkAgent, int notifyType) {
4755        if (DBG) log("notifyType " + notifyTypeToName(notifyType) + " for " + networkAgent.name());
4756        for (int i = 0; i < networkAgent.networkRequests.size(); i++) {
4757            NetworkRequest nr = networkAgent.networkRequests.valueAt(i);
4758            NetworkRequestInfo nri = mNetworkRequests.get(nr);
4759            if (VDBG) log(" sending notification for " + nr);
4760            if (nri.mPendingIntent == null) {
4761                callCallbackForRequest(nri, networkAgent, notifyType);
4762            } else {
4763                sendPendingIntentForRequest(nri, networkAgent, notifyType);
4764            }
4765        }
4766    }
4767
4768    private String notifyTypeToName(int notifyType) {
4769        switch (notifyType) {
4770            case ConnectivityManager.CALLBACK_PRECHECK:    return "PRECHECK";
4771            case ConnectivityManager.CALLBACK_AVAILABLE:   return "AVAILABLE";
4772            case ConnectivityManager.CALLBACK_LOSING:      return "LOSING";
4773            case ConnectivityManager.CALLBACK_LOST:        return "LOST";
4774            case ConnectivityManager.CALLBACK_UNAVAIL:     return "UNAVAILABLE";
4775            case ConnectivityManager.CALLBACK_CAP_CHANGED: return "CAP_CHANGED";
4776            case ConnectivityManager.CALLBACK_IP_CHANGED:  return "IP_CHANGED";
4777            case ConnectivityManager.CALLBACK_RELEASED:    return "RELEASED";
4778        }
4779        return "UNKNOWN";
4780    }
4781
4782    /**
4783     * Notify other system services that set of active ifaces has changed.
4784     */
4785    private void notifyIfacesChanged() {
4786        try {
4787            mStatsService.forceUpdateIfaces();
4788        } catch (Exception ignored) {
4789        }
4790    }
4791
4792    @Override
4793    public boolean addVpnAddress(String address, int prefixLength) {
4794        throwIfLockdownEnabled();
4795        int user = UserHandle.getUserId(Binder.getCallingUid());
4796        synchronized (mVpns) {
4797            return mVpns.get(user).addAddress(address, prefixLength);
4798        }
4799    }
4800
4801    @Override
4802    public boolean removeVpnAddress(String address, int prefixLength) {
4803        throwIfLockdownEnabled();
4804        int user = UserHandle.getUserId(Binder.getCallingUid());
4805        synchronized (mVpns) {
4806            return mVpns.get(user).removeAddress(address, prefixLength);
4807        }
4808    }
4809
4810    @Override
4811    public boolean setUnderlyingNetworksForVpn(Network[] networks) {
4812        throwIfLockdownEnabled();
4813        int user = UserHandle.getUserId(Binder.getCallingUid());
4814        boolean success;
4815        synchronized (mVpns) {
4816            success = mVpns.get(user).setUnderlyingNetworks(networks);
4817        }
4818        if (success) {
4819            notifyIfacesChanged();
4820        }
4821        return success;
4822    }
4823
4824    @Override
4825    public void startNattKeepalive(Network network, int intervalSeconds, Messenger messenger,
4826            IBinder binder, String srcAddr, int srcPort, String dstAddr) {
4827        enforceKeepalivePermission();
4828        mKeepaliveTracker.startNattKeepalive(
4829                getNetworkAgentInfoForNetwork(network),
4830                intervalSeconds, messenger, binder,
4831                srcAddr, srcPort, dstAddr, ConnectivityManager.PacketKeepalive.NATT_PORT);
4832    }
4833
4834    @Override
4835    public void stopKeepalive(Network network, int slot) {
4836        mHandler.sendMessage(mHandler.obtainMessage(
4837                NetworkAgent.CMD_STOP_PACKET_KEEPALIVE, slot, PacketKeepalive.SUCCESS, network));
4838    }
4839
4840    @Override
4841    public void factoryReset() {
4842        enforceConnectivityInternalPermission();
4843
4844        if (mUserManager.hasUserRestriction(UserManager.DISALLOW_NETWORK_RESET)) {
4845            return;
4846        }
4847
4848        final int userId = UserHandle.getCallingUserId();
4849
4850        // Turn airplane mode off
4851        setAirplaneMode(false);
4852
4853        if (!mUserManager.hasUserRestriction(UserManager.DISALLOW_CONFIG_TETHERING)) {
4854            // Untether
4855            for (String tether : getTetheredIfaces()) {
4856                untether(tether);
4857            }
4858        }
4859
4860        if (!mUserManager.hasUserRestriction(UserManager.DISALLOW_CONFIG_VPN)) {
4861            // Turn VPN off
4862            VpnConfig vpnConfig = getVpnConfig(userId);
4863            if (vpnConfig != null) {
4864                if (vpnConfig.legacy) {
4865                    prepareVpn(VpnConfig.LEGACY_VPN, VpnConfig.LEGACY_VPN, userId);
4866                } else {
4867                    // Prevent this app (packagename = vpnConfig.user) from initiating VPN connections
4868                    // in the future without user intervention.
4869                    setVpnPackageAuthorization(vpnConfig.user, userId, false);
4870
4871                    prepareVpn(vpnConfig.user, VpnConfig.LEGACY_VPN, userId);
4872                }
4873            }
4874        }
4875    }
4876
4877    @VisibleForTesting
4878    public NetworkMonitor createNetworkMonitor(Context context, Handler handler,
4879            NetworkAgentInfo nai, NetworkRequest defaultRequest) {
4880        return new NetworkMonitor(context, handler, nai, defaultRequest);
4881    }
4882
4883}
4884