BroadcastQueue.java revision 9c165d76010d9f79f5cd71978742a335b6b8d1b4
1/*
2 * Copyright (C) 2012 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17package com.android.server.am;
18
19import java.io.FileDescriptor;
20import java.io.PrintWriter;
21import java.text.SimpleDateFormat;
22import java.util.ArrayList;
23import java.util.Date;
24import java.util.Set;
25
26import android.app.ActivityManager;
27import android.app.AppGlobals;
28import android.app.AppOpsManager;
29import android.app.BroadcastOptions;
30import android.app.PendingIntent;
31import android.content.ComponentName;
32import android.content.IIntentReceiver;
33import android.content.IIntentSender;
34import android.content.Intent;
35import android.content.IntentSender;
36import android.content.pm.ActivityInfo;
37import android.content.pm.PackageManager;
38import android.content.pm.ResolveInfo;
39import android.os.Build;
40import android.os.Bundle;
41import android.os.Handler;
42import android.os.IBinder;
43import android.os.Looper;
44import android.os.Message;
45import android.os.Process;
46import android.os.RemoteException;
47import android.os.SystemClock;
48import android.os.UserHandle;
49import android.util.EventLog;
50import android.util.Slog;
51import android.util.TimeUtils;
52import com.android.server.DeviceIdleController;
53import com.android.server.LocalServices;
54
55import static com.android.server.am.ActivityManagerDebugConfig.*;
56
57/**
58 * BROADCASTS
59 *
60 * We keep two broadcast queues and associated bookkeeping, one for those at
61 * foreground priority, and one for normal (background-priority) broadcasts.
62 */
63public final class BroadcastQueue {
64    private static final String TAG = "BroadcastQueue";
65    private static final String TAG_MU = TAG + POSTFIX_MU;
66    private static final String TAG_BROADCAST = TAG + POSTFIX_BROADCAST;
67
68    static final int MAX_BROADCAST_HISTORY = ActivityManager.isLowRamDeviceStatic() ? 10 : 50;
69    static final int MAX_BROADCAST_SUMMARY_HISTORY
70            = ActivityManager.isLowRamDeviceStatic() ? 25 : 300;
71
72    final ActivityManagerService mService;
73
74    /**
75     * Recognizable moniker for this queue
76     */
77    final String mQueueName;
78
79    /**
80     * Timeout period for this queue's broadcasts
81     */
82    final long mTimeoutPeriod;
83
84    /**
85     * If true, we can delay broadcasts while waiting services to finish in the previous
86     * receiver's process.
87     */
88    final boolean mDelayBehindServices;
89
90    /**
91     * Lists of all active broadcasts that are to be executed immediately
92     * (without waiting for another broadcast to finish).  Currently this only
93     * contains broadcasts to registered receivers, to avoid spinning up
94     * a bunch of processes to execute IntentReceiver components.  Background-
95     * and foreground-priority broadcasts are queued separately.
96     */
97    final ArrayList<BroadcastRecord> mParallelBroadcasts = new ArrayList<>();
98
99    /**
100     * List of all active broadcasts that are to be executed one at a time.
101     * The object at the top of the list is the currently activity broadcasts;
102     * those after it are waiting for the top to finish.  As with parallel
103     * broadcasts, separate background- and foreground-priority queues are
104     * maintained.
105     */
106    final ArrayList<BroadcastRecord> mOrderedBroadcasts = new ArrayList<>();
107
108    /**
109     * Historical data of past broadcasts, for debugging.  This is a ring buffer
110     * whose last element is at mHistoryNext.
111     */
112    final BroadcastRecord[] mBroadcastHistory = new BroadcastRecord[MAX_BROADCAST_HISTORY];
113    int mHistoryNext = 0;
114
115    /**
116     * Summary of historical data of past broadcasts, for debugging.  This is a
117     * ring buffer whose last element is at mSummaryHistoryNext.
118     */
119    final Intent[] mBroadcastSummaryHistory = new Intent[MAX_BROADCAST_SUMMARY_HISTORY];
120    int mSummaryHistoryNext = 0;
121
122    /**
123     * Various milestone timestamps of entries in the mBroadcastSummaryHistory ring
124     * buffer, also tracked via the mSummaryHistoryNext index.  These are all in wall
125     * clock time, not elapsed.
126     */
127    final long[] mSummaryHistoryEnqueueTime = new  long[MAX_BROADCAST_SUMMARY_HISTORY];
128    final long[] mSummaryHistoryDispatchTime = new  long[MAX_BROADCAST_SUMMARY_HISTORY];
129    final long[] mSummaryHistoryFinishTime = new  long[MAX_BROADCAST_SUMMARY_HISTORY];
130
131    /**
132     * Set when we current have a BROADCAST_INTENT_MSG in flight.
133     */
134    boolean mBroadcastsScheduled = false;
135
136    /**
137     * True if we have a pending unexpired BROADCAST_TIMEOUT_MSG posted to our handler.
138     */
139    boolean mPendingBroadcastTimeoutMessage;
140
141    /**
142     * Intent broadcasts that we have tried to start, but are
143     * waiting for the application's process to be created.  We only
144     * need one per scheduling class (instead of a list) because we always
145     * process broadcasts one at a time, so no others can be started while
146     * waiting for this one.
147     */
148    BroadcastRecord mPendingBroadcast = null;
149
150    /**
151     * The receiver index that is pending, to restart the broadcast if needed.
152     */
153    int mPendingBroadcastRecvIndex;
154
155    static final int BROADCAST_INTENT_MSG = ActivityManagerService.FIRST_BROADCAST_QUEUE_MSG;
156    static final int BROADCAST_TIMEOUT_MSG = ActivityManagerService.FIRST_BROADCAST_QUEUE_MSG + 1;
157    static final int SCHEDULE_TEMP_WHITELIST_MSG
158            = ActivityManagerService.FIRST_BROADCAST_QUEUE_MSG + 2;
159
160    final BroadcastHandler mHandler;
161
162    private final class BroadcastHandler extends Handler {
163        public BroadcastHandler(Looper looper) {
164            super(looper, null, true);
165        }
166
167        @Override
168        public void handleMessage(Message msg) {
169            switch (msg.what) {
170                case BROADCAST_INTENT_MSG: {
171                    if (DEBUG_BROADCAST) Slog.v(
172                            TAG_BROADCAST, "Received BROADCAST_INTENT_MSG");
173                    processNextBroadcast(true);
174                } break;
175                case BROADCAST_TIMEOUT_MSG: {
176                    synchronized (mService) {
177                        broadcastTimeoutLocked(true);
178                    }
179                } break;
180                case SCHEDULE_TEMP_WHITELIST_MSG: {
181                    DeviceIdleController.LocalService dic = mService.mLocalDeviceIdleController;
182                    if (dic != null) {
183                        dic.addPowerSaveTempWhitelistAppDirect(UserHandle.getAppId(msg.arg1),
184                                msg.arg2, true, (String)msg.obj);
185                    }
186                } break;
187            }
188        }
189    }
190
191    private final class AppNotResponding implements Runnable {
192        private final ProcessRecord mApp;
193        private final String mAnnotation;
194
195        public AppNotResponding(ProcessRecord app, String annotation) {
196            mApp = app;
197            mAnnotation = annotation;
198        }
199
200        @Override
201        public void run() {
202            mService.appNotResponding(mApp, null, null, false, mAnnotation);
203        }
204    }
205
206    BroadcastQueue(ActivityManagerService service, Handler handler,
207            String name, long timeoutPeriod, boolean allowDelayBehindServices) {
208        mService = service;
209        mHandler = new BroadcastHandler(handler.getLooper());
210        mQueueName = name;
211        mTimeoutPeriod = timeoutPeriod;
212        mDelayBehindServices = allowDelayBehindServices;
213    }
214
215    public boolean isPendingBroadcastProcessLocked(int pid) {
216        return mPendingBroadcast != null && mPendingBroadcast.curApp.pid == pid;
217    }
218
219    public void enqueueParallelBroadcastLocked(BroadcastRecord r) {
220        mParallelBroadcasts.add(r);
221        r.enqueueClockTime = System.currentTimeMillis();
222    }
223
224    public void enqueueOrderedBroadcastLocked(BroadcastRecord r) {
225        mOrderedBroadcasts.add(r);
226        r.enqueueClockTime = System.currentTimeMillis();
227    }
228
229    public final boolean replaceParallelBroadcastLocked(BroadcastRecord r) {
230        for (int i = mParallelBroadcasts.size() - 1; i >= 0; i--) {
231            if (r.intent.filterEquals(mParallelBroadcasts.get(i).intent)) {
232                if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST,
233                        "***** DROPPING PARALLEL ["
234                + mQueueName + "]: " + r.intent);
235                mParallelBroadcasts.set(i, r);
236                return true;
237            }
238        }
239        return false;
240    }
241
242    public final boolean replaceOrderedBroadcastLocked(BroadcastRecord r) {
243        for (int i = mOrderedBroadcasts.size() - 1; i > 0; i--) {
244            if (r.intent.filterEquals(mOrderedBroadcasts.get(i).intent)) {
245                if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST,
246                        "***** DROPPING ORDERED ["
247                        + mQueueName + "]: " + r.intent);
248                mOrderedBroadcasts.set(i, r);
249                return true;
250            }
251        }
252        return false;
253    }
254
255    private final void processCurBroadcastLocked(BroadcastRecord r,
256            ProcessRecord app) throws RemoteException {
257        if (DEBUG_BROADCAST)  Slog.v(TAG_BROADCAST,
258                "Process cur broadcast " + r + " for app " + app);
259        if (app.thread == null) {
260            throw new RemoteException();
261        }
262        r.receiver = app.thread.asBinder();
263        r.curApp = app;
264        app.curReceiver = r;
265        app.forceProcessStateUpTo(ActivityManager.PROCESS_STATE_RECEIVER);
266        mService.updateLruProcessLocked(app, false, null);
267        mService.updateOomAdjLocked();
268
269        // Tell the application to launch this receiver.
270        r.intent.setComponent(r.curComponent);
271
272        boolean started = false;
273        try {
274            if (DEBUG_BROADCAST_LIGHT) Slog.v(TAG_BROADCAST,
275                    "Delivering to component " + r.curComponent
276                    + ": " + r);
277            mService.notifyPackageUse(r.intent.getComponent().getPackageName());
278            app.thread.scheduleReceiver(new Intent(r.intent), r.curReceiver,
279                    mService.compatibilityInfoForPackageLocked(r.curReceiver.applicationInfo),
280                    r.resultCode, r.resultData, r.resultExtras, r.ordered, r.userId,
281                    app.repProcState);
282            if (DEBUG_BROADCAST)  Slog.v(TAG_BROADCAST,
283                    "Process cur broadcast " + r + " DELIVERED for app " + app);
284            started = true;
285        } finally {
286            if (!started) {
287                if (DEBUG_BROADCAST)  Slog.v(TAG_BROADCAST,
288                        "Process cur broadcast " + r + ": NOT STARTED!");
289                r.receiver = null;
290                r.curApp = null;
291                app.curReceiver = null;
292            }
293        }
294    }
295
296    public boolean sendPendingBroadcastsLocked(ProcessRecord app) {
297        boolean didSomething = false;
298        final BroadcastRecord br = mPendingBroadcast;
299        if (br != null && br.curApp.pid == app.pid) {
300            try {
301                mPendingBroadcast = null;
302                processCurBroadcastLocked(br, app);
303                didSomething = true;
304            } catch (Exception e) {
305                Slog.w(TAG, "Exception in new application when starting receiver "
306                        + br.curComponent.flattenToShortString(), e);
307                logBroadcastReceiverDiscardLocked(br);
308                finishReceiverLocked(br, br.resultCode, br.resultData,
309                        br.resultExtras, br.resultAbort, false);
310                scheduleBroadcastsLocked();
311                // We need to reset the state if we failed to start the receiver.
312                br.state = BroadcastRecord.IDLE;
313                throw new RuntimeException(e.getMessage());
314            }
315        }
316        return didSomething;
317    }
318
319    public void skipPendingBroadcastLocked(int pid) {
320        final BroadcastRecord br = mPendingBroadcast;
321        if (br != null && br.curApp.pid == pid) {
322            br.state = BroadcastRecord.IDLE;
323            br.nextReceiver = mPendingBroadcastRecvIndex;
324            mPendingBroadcast = null;
325            scheduleBroadcastsLocked();
326        }
327    }
328
329    public void skipCurrentReceiverLocked(ProcessRecord app) {
330        BroadcastRecord r = null;
331        if (mOrderedBroadcasts.size() > 0) {
332            BroadcastRecord br = mOrderedBroadcasts.get(0);
333            if (br.curApp == app) {
334                r = br;
335            }
336        }
337        if (r == null && mPendingBroadcast != null && mPendingBroadcast.curApp == app) {
338            if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST,
339                    "[" + mQueueName + "] skip & discard pending app " + r);
340            r = mPendingBroadcast;
341        }
342
343        if (r != null) {
344            logBroadcastReceiverDiscardLocked(r);
345            finishReceiverLocked(r, r.resultCode, r.resultData,
346                    r.resultExtras, r.resultAbort, false);
347            scheduleBroadcastsLocked();
348        }
349    }
350
351    public void scheduleBroadcastsLocked() {
352        if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST, "Schedule broadcasts ["
353                + mQueueName + "]: current="
354                + mBroadcastsScheduled);
355
356        if (mBroadcastsScheduled) {
357            return;
358        }
359        mHandler.sendMessage(mHandler.obtainMessage(BROADCAST_INTENT_MSG, this));
360        mBroadcastsScheduled = true;
361    }
362
363    public BroadcastRecord getMatchingOrderedReceiver(IBinder receiver) {
364        if (mOrderedBroadcasts.size() > 0) {
365            final BroadcastRecord r = mOrderedBroadcasts.get(0);
366            if (r != null && r.receiver == receiver) {
367                return r;
368            }
369        }
370        return null;
371    }
372
373    public boolean finishReceiverLocked(BroadcastRecord r, int resultCode,
374            String resultData, Bundle resultExtras, boolean resultAbort, boolean waitForServices) {
375        final int state = r.state;
376        final ActivityInfo receiver = r.curReceiver;
377        r.state = BroadcastRecord.IDLE;
378        if (state == BroadcastRecord.IDLE) {
379            Slog.w(TAG, "finishReceiver [" + mQueueName + "] called but state is IDLE");
380        }
381        r.receiver = null;
382        r.intent.setComponent(null);
383        if (r.curApp != null && r.curApp.curReceiver == r) {
384            r.curApp.curReceiver = null;
385        }
386        if (r.curFilter != null) {
387            r.curFilter.receiverList.curBroadcast = null;
388        }
389        r.curFilter = null;
390        r.curReceiver = null;
391        r.curApp = null;
392        mPendingBroadcast = null;
393
394        r.resultCode = resultCode;
395        r.resultData = resultData;
396        r.resultExtras = resultExtras;
397        if (resultAbort && (r.intent.getFlags()&Intent.FLAG_RECEIVER_NO_ABORT) == 0) {
398            r.resultAbort = resultAbort;
399        } else {
400            r.resultAbort = false;
401        }
402
403        if (waitForServices && r.curComponent != null && r.queue.mDelayBehindServices
404                && r.queue.mOrderedBroadcasts.size() > 0
405                && r.queue.mOrderedBroadcasts.get(0) == r) {
406            ActivityInfo nextReceiver;
407            if (r.nextReceiver < r.receivers.size()) {
408                Object obj = r.receivers.get(r.nextReceiver);
409                nextReceiver = (obj instanceof ActivityInfo) ? (ActivityInfo)obj : null;
410            } else {
411                nextReceiver = null;
412            }
413            // Don't do this if the next receive is in the same process as the current one.
414            if (receiver == null || nextReceiver == null
415                    || receiver.applicationInfo.uid != nextReceiver.applicationInfo.uid
416                    || !receiver.processName.equals(nextReceiver.processName)) {
417                // In this case, we are ready to process the next receiver for the current broadcast,
418                // but are on a queue that would like to wait for services to finish before moving
419                // on.  If there are background services currently starting, then we will go into a
420                // special state where we hold off on continuing this broadcast until they are done.
421                if (mService.mServices.hasBackgroundServices(r.userId)) {
422                    Slog.i(TAG, "Delay finish: " + r.curComponent.flattenToShortString());
423                    r.state = BroadcastRecord.WAITING_SERVICES;
424                    return false;
425                }
426            }
427        }
428
429        r.curComponent = null;
430
431        // We will process the next receiver right now if this is finishing
432        // an app receiver (which is always asynchronous) or after we have
433        // come back from calling a receiver.
434        return state == BroadcastRecord.APP_RECEIVE
435                || state == BroadcastRecord.CALL_DONE_RECEIVE;
436    }
437
438    public void backgroundServicesFinishedLocked(int userId) {
439        if (mOrderedBroadcasts.size() > 0) {
440            BroadcastRecord br = mOrderedBroadcasts.get(0);
441            if (br.userId == userId && br.state == BroadcastRecord.WAITING_SERVICES) {
442                Slog.i(TAG, "Resuming delayed broadcast");
443                br.curComponent = null;
444                br.state = BroadcastRecord.IDLE;
445                processNextBroadcast(false);
446            }
447        }
448    }
449
450    private static void performReceiveLocked(ProcessRecord app, IIntentReceiver receiver,
451            Intent intent, int resultCode, String data, Bundle extras,
452            boolean ordered, boolean sticky, int sendingUser) throws RemoteException {
453        // Send the intent to the receiver asynchronously using one-way binder calls.
454        if (app != null) {
455            if (app.thread != null) {
456                // If we have an app thread, do the call through that so it is
457                // correctly ordered with other one-way calls.
458                app.thread.scheduleRegisteredReceiver(receiver, intent, resultCode,
459                        data, extras, ordered, sticky, sendingUser, app.repProcState);
460            } else {
461                // Application has died. Receiver doesn't exist.
462                throw new RemoteException("app.thread must not be null");
463            }
464        } else {
465            receiver.performReceive(intent, resultCode, data, extras, ordered,
466                    sticky, sendingUser);
467        }
468    }
469
470    private void deliverToRegisteredReceiverLocked(BroadcastRecord r,
471            BroadcastFilter filter, boolean ordered) {
472        boolean skip = false;
473        if (filter.requiredPermission != null) {
474            int perm = mService.checkComponentPermission(filter.requiredPermission,
475                    r.callingPid, r.callingUid, -1, true);
476            if (perm != PackageManager.PERMISSION_GRANTED) {
477                Slog.w(TAG, "Permission Denial: broadcasting "
478                        + r.intent.toString()
479                        + " from " + r.callerPackage + " (pid="
480                        + r.callingPid + ", uid=" + r.callingUid + ")"
481                        + " requires " + filter.requiredPermission
482                        + " due to registered receiver " + filter);
483                skip = true;
484            } else {
485                final int opCode = AppOpsManager.permissionToOpCode(filter.requiredPermission);
486                if (opCode != AppOpsManager.OP_NONE
487                        && mService.mAppOpsService.noteOperation(opCode, r.callingUid,
488                                r.callerPackage) != AppOpsManager.MODE_ALLOWED) {
489                    Slog.w(TAG, "Appop Denial: broadcasting "
490                            + r.intent.toString()
491                            + " from " + r.callerPackage + " (pid="
492                            + r.callingPid + ", uid=" + r.callingUid + ")"
493                            + " requires appop " + AppOpsManager.permissionToOp(
494                                    filter.requiredPermission)
495                            + " due to registered receiver " + filter);
496                    skip = true;
497                }
498            }
499        }
500        if (!skip && r.requiredPermissions != null && r.requiredPermissions.length > 0) {
501            for (int i = 0; i < r.requiredPermissions.length; i++) {
502                String requiredPermission = r.requiredPermissions[i];
503                int perm = mService.checkComponentPermission(requiredPermission,
504                        filter.receiverList.pid, filter.receiverList.uid, -1, true);
505                if (perm != PackageManager.PERMISSION_GRANTED) {
506                    Slog.w(TAG, "Permission Denial: receiving "
507                            + r.intent.toString()
508                            + " to " + filter.receiverList.app
509                            + " (pid=" + filter.receiverList.pid
510                            + ", uid=" + filter.receiverList.uid + ")"
511                            + " requires " + requiredPermission
512                            + " due to sender " + r.callerPackage
513                            + " (uid " + r.callingUid + ")");
514                    skip = true;
515                    break;
516                }
517                int appOp = AppOpsManager.permissionToOpCode(requiredPermission);
518                if (appOp != AppOpsManager.OP_NONE && appOp != r.appOp
519                        && mService.mAppOpsService.noteOperation(appOp,
520                        filter.receiverList.uid, filter.packageName)
521                        != AppOpsManager.MODE_ALLOWED) {
522                    Slog.w(TAG, "Appop Denial: receiving "
523                            + r.intent.toString()
524                            + " to " + filter.receiverList.app
525                            + " (pid=" + filter.receiverList.pid
526                            + ", uid=" + filter.receiverList.uid + ")"
527                            + " requires appop " + AppOpsManager.permissionToOp(
528                            requiredPermission)
529                            + " due to sender " + r.callerPackage
530                            + " (uid " + r.callingUid + ")");
531                    skip = true;
532                    break;
533                }
534            }
535        }
536        if (!skip && (r.requiredPermissions == null || r.requiredPermissions.length == 0)) {
537            int perm = mService.checkComponentPermission(null,
538                    filter.receiverList.pid, filter.receiverList.uid, -1, true);
539            if (perm != PackageManager.PERMISSION_GRANTED) {
540                Slog.w(TAG, "Permission Denial: security check failed when receiving "
541                        + r.intent.toString()
542                        + " to " + filter.receiverList.app
543                        + " (pid=" + filter.receiverList.pid
544                        + ", uid=" + filter.receiverList.uid + ")"
545                        + " due to sender " + r.callerPackage
546                        + " (uid " + r.callingUid + ")");
547                skip = true;
548            }
549        }
550        if (!skip && r.appOp != AppOpsManager.OP_NONE
551                && mService.mAppOpsService.noteOperation(r.appOp,
552                filter.receiverList.uid, filter.packageName)
553                != AppOpsManager.MODE_ALLOWED) {
554            Slog.w(TAG, "Appop Denial: receiving "
555                    + r.intent.toString()
556                    + " to " + filter.receiverList.app
557                    + " (pid=" + filter.receiverList.pid
558                    + ", uid=" + filter.receiverList.uid + ")"
559                    + " requires appop " + AppOpsManager.opToName(r.appOp)
560                    + " due to sender " + r.callerPackage
561                    + " (uid " + r.callingUid + ")");
562            skip = true;
563        }
564        if (!skip) {
565            if (!mService.checkAllowBackgroundLocked(filter.receiverList.uid, filter.packageName,
566                    -1)) {
567                Slog.w(TAG, "Background execution not allowed: receiving "
568                        + r.intent
569                        + " to " + filter.receiverList.app
570                        + " (pid=" + filter.receiverList.pid
571                        + ", uid=" + filter.receiverList.uid + ")");
572                skip = true;
573            }
574        }
575
576        if (!mService.mIntentFirewall.checkBroadcast(r.intent, r.callingUid,
577                r.callingPid, r.resolvedType, filter.receiverList.uid)) {
578            return;
579        }
580
581        if (filter.receiverList.app == null || filter.receiverList.app.crashing) {
582            Slog.w(TAG, "Skipping deliver [" + mQueueName + "] " + r
583                    + " to " + filter.receiverList + ": process crashing");
584            skip = true;
585        }
586
587        if (!skip) {
588            // If permissions need a review before any of the app components can run, we drop
589            // the broadcast and if the calling app is in the foreground and the broadcast is
590            // explicit we launch the review UI passing it a pending intent to send the skipped
591            // broadcast.
592            if (Build.PERMISSIONS_REVIEW_REQUIRED) {
593                if (!requestStartTargetPermissionsReviewIfNeededLocked(r, filter.packageName,
594                        filter.owningUserId)) {
595                    return;
596                }
597            }
598
599            // If this is not being sent as an ordered broadcast, then we
600            // don't want to touch the fields that keep track of the current
601            // state of ordered broadcasts.
602            if (ordered) {
603                r.receiver = filter.receiverList.receiver.asBinder();
604                r.curFilter = filter;
605                filter.receiverList.curBroadcast = r;
606                r.state = BroadcastRecord.CALL_IN_RECEIVE;
607                if (filter.receiverList.app != null) {
608                    // Bump hosting application to no longer be in background
609                    // scheduling class.  Note that we can't do that if there
610                    // isn't an app...  but we can only be in that case for
611                    // things that directly call the IActivityManager API, which
612                    // are already core system stuff so don't matter for this.
613                    r.curApp = filter.receiverList.app;
614                    filter.receiverList.app.curReceiver = r;
615                    mService.updateOomAdjLocked(r.curApp);
616                }
617            }
618            try {
619                if (DEBUG_BROADCAST_LIGHT) Slog.i(TAG_BROADCAST,
620                        "Delivering to " + filter + " : " + r);
621                performReceiveLocked(filter.receiverList.app, filter.receiverList.receiver,
622                        new Intent(r.intent), r.resultCode, r.resultData,
623                        r.resultExtras, r.ordered, r.initialSticky, r.userId);
624                if (ordered) {
625                    r.state = BroadcastRecord.CALL_DONE_RECEIVE;
626                }
627            } catch (RemoteException e) {
628                Slog.w(TAG, "Failure sending broadcast " + r.intent, e);
629                if (ordered) {
630                    r.receiver = null;
631                    r.curFilter = null;
632                    filter.receiverList.curBroadcast = null;
633                    if (filter.receiverList.app != null) {
634                        filter.receiverList.app.curReceiver = null;
635                    }
636                }
637            }
638        }
639    }
640
641    private boolean requestStartTargetPermissionsReviewIfNeededLocked(
642            BroadcastRecord receiverRecord, String receivingPackageName,
643            final int receivingUserId) {
644        if (!mService.getPackageManagerInternalLocked().isPermissionsReviewRequired(
645                receivingPackageName, receivingUserId)) {
646            return true;
647        }
648
649        final boolean callerForeground = receiverRecord.callerApp != null
650                ? receiverRecord.callerApp.setSchedGroup != Process.THREAD_GROUP_BG_NONINTERACTIVE
651                : true;
652
653        // Show a permission review UI only for explicit broadcast from a foreground app
654        if (callerForeground && receiverRecord.intent.getComponent() != null) {
655            IIntentSender target = mService.getIntentSenderLocked(
656                    ActivityManager.INTENT_SENDER_BROADCAST, receiverRecord.callerPackage,
657                    receiverRecord.callingUid, receiverRecord.userId, null, null, 0,
658                    new Intent[]{receiverRecord.intent},
659                    new String[]{receiverRecord.intent.resolveType(mService.mContext
660                            .getContentResolver())},
661                    PendingIntent.FLAG_CANCEL_CURRENT | PendingIntent.FLAG_ONE_SHOT
662                            | PendingIntent.FLAG_IMMUTABLE, null);
663
664            final Intent intent = new Intent(Intent.ACTION_REVIEW_PERMISSIONS);
665            intent.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK
666                    | Intent.FLAG_ACTIVITY_EXCLUDE_FROM_RECENTS);
667            intent.putExtra(Intent.EXTRA_PACKAGE_NAME, receivingPackageName);
668            intent.putExtra(Intent.EXTRA_INTENT, new IntentSender(target));
669
670            if (DEBUG_PERMISSIONS_REVIEW) {
671                Slog.i(TAG, "u" + receivingUserId + " Launching permission review for package "
672                        + receivingPackageName);
673            }
674
675            mHandler.post(new Runnable() {
676                @Override
677                public void run() {
678                    mService.mContext.startActivityAsUser(intent, new UserHandle(receivingUserId));
679                }
680            });
681        } else {
682            Slog.w(TAG, "u" + receivingUserId + " Receiving a broadcast in package"
683                    + receivingPackageName + " requires a permissions review");
684        }
685
686        return false;
687    }
688
689    final void scheduleTempWhitelistLocked(int uid, long duration, BroadcastRecord r) {
690        if (duration > Integer.MAX_VALUE) {
691            duration = Integer.MAX_VALUE;
692        }
693        // XXX ideally we should pause the broadcast until everything behind this is done,
694        // or else we will likely start dispatching the broadcast before we have opened
695        // access to the app (there is a lot of asynchronicity behind this).  It is probably
696        // not that big a deal, however, because the main purpose here is to allow apps
697        // to hold wake locks, and they will be able to acquire their wake lock immediately
698        // it just won't be enabled until we get through this work.
699        StringBuilder b = new StringBuilder();
700        b.append("broadcast:");
701        UserHandle.formatUid(b, r.callingUid);
702        b.append(":");
703        if (r.intent.getAction() != null) {
704            b.append(r.intent.getAction());
705        } else if (r.intent.getComponent() != null) {
706            b.append(r.intent.getComponent().flattenToShortString());
707        } else if (r.intent.getData() != null) {
708            b.append(r.intent.getData());
709        }
710        mHandler.obtainMessage(SCHEDULE_TEMP_WHITELIST_MSG, uid, (int)duration, b.toString())
711                .sendToTarget();
712    }
713
714    final void processNextBroadcast(boolean fromMsg) {
715        synchronized(mService) {
716            BroadcastRecord r;
717
718            if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST, "processNextBroadcast ["
719                    + mQueueName + "]: "
720                    + mParallelBroadcasts.size() + " broadcasts, "
721                    + mOrderedBroadcasts.size() + " ordered broadcasts");
722
723            mService.updateCpuStats();
724
725            if (fromMsg) {
726                mBroadcastsScheduled = false;
727            }
728
729            // First, deliver any non-serialized broadcasts right away.
730            while (mParallelBroadcasts.size() > 0) {
731                r = mParallelBroadcasts.remove(0);
732                r.dispatchTime = SystemClock.uptimeMillis();
733                r.dispatchClockTime = System.currentTimeMillis();
734                final int N = r.receivers.size();
735                if (DEBUG_BROADCAST_LIGHT) Slog.v(TAG_BROADCAST, "Processing parallel broadcast ["
736                        + mQueueName + "] " + r);
737                for (int i=0; i<N; i++) {
738                    Object target = r.receivers.get(i);
739                    if (DEBUG_BROADCAST)  Slog.v(TAG_BROADCAST,
740                            "Delivering non-ordered on [" + mQueueName + "] to registered "
741                            + target + ": " + r);
742                    deliverToRegisteredReceiverLocked(r, (BroadcastFilter)target, false);
743                }
744                addBroadcastToHistoryLocked(r);
745                if (DEBUG_BROADCAST_LIGHT) Slog.v(TAG_BROADCAST, "Done with parallel broadcast ["
746                        + mQueueName + "] " + r);
747            }
748
749            // Now take care of the next serialized one...
750
751            // If we are waiting for a process to come up to handle the next
752            // broadcast, then do nothing at this point.  Just in case, we
753            // check that the process we're waiting for still exists.
754            if (mPendingBroadcast != null) {
755                if (DEBUG_BROADCAST_LIGHT) Slog.v(TAG_BROADCAST,
756                        "processNextBroadcast [" + mQueueName + "]: waiting for "
757                        + mPendingBroadcast.curApp);
758
759                boolean isDead;
760                synchronized (mService.mPidsSelfLocked) {
761                    ProcessRecord proc = mService.mPidsSelfLocked.get(mPendingBroadcast.curApp.pid);
762                    isDead = proc == null || proc.crashing;
763                }
764                if (!isDead) {
765                    // It's still alive, so keep waiting
766                    return;
767                } else {
768                    Slog.w(TAG, "pending app  ["
769                            + mQueueName + "]" + mPendingBroadcast.curApp
770                            + " died before responding to broadcast");
771                    mPendingBroadcast.state = BroadcastRecord.IDLE;
772                    mPendingBroadcast.nextReceiver = mPendingBroadcastRecvIndex;
773                    mPendingBroadcast = null;
774                }
775            }
776
777            boolean looped = false;
778
779            do {
780                if (mOrderedBroadcasts.size() == 0) {
781                    // No more broadcasts pending, so all done!
782                    mService.scheduleAppGcsLocked();
783                    if (looped) {
784                        // If we had finished the last ordered broadcast, then
785                        // make sure all processes have correct oom and sched
786                        // adjustments.
787                        mService.updateOomAdjLocked();
788                    }
789                    return;
790                }
791                r = mOrderedBroadcasts.get(0);
792                boolean forceReceive = false;
793
794                // Ensure that even if something goes awry with the timeout
795                // detection, we catch "hung" broadcasts here, discard them,
796                // and continue to make progress.
797                //
798                // This is only done if the system is ready so that PRE_BOOT_COMPLETED
799                // receivers don't get executed with timeouts. They're intended for
800                // one time heavy lifting after system upgrades and can take
801                // significant amounts of time.
802                int numReceivers = (r.receivers != null) ? r.receivers.size() : 0;
803                if (mService.mProcessesReady && r.dispatchTime > 0) {
804                    long now = SystemClock.uptimeMillis();
805                    if ((numReceivers > 0) &&
806                            (now > r.dispatchTime + (2*mTimeoutPeriod*numReceivers))) {
807                        Slog.w(TAG, "Hung broadcast ["
808                                + mQueueName + "] discarded after timeout failure:"
809                                + " now=" + now
810                                + " dispatchTime=" + r.dispatchTime
811                                + " startTime=" + r.receiverTime
812                                + " intent=" + r.intent
813                                + " numReceivers=" + numReceivers
814                                + " nextReceiver=" + r.nextReceiver
815                                + " state=" + r.state);
816                        broadcastTimeoutLocked(false); // forcibly finish this broadcast
817                        forceReceive = true;
818                        r.state = BroadcastRecord.IDLE;
819                    }
820                }
821
822                if (r.state != BroadcastRecord.IDLE) {
823                    if (DEBUG_BROADCAST) Slog.d(TAG_BROADCAST,
824                            "processNextBroadcast("
825                            + mQueueName + ") called when not idle (state="
826                            + r.state + ")");
827                    return;
828                }
829
830                if (r.receivers == null || r.nextReceiver >= numReceivers
831                        || r.resultAbort || forceReceive) {
832                    // No more receivers for this broadcast!  Send the final
833                    // result if requested...
834                    if (r.resultTo != null) {
835                        try {
836                            if (DEBUG_BROADCAST) Slog.i(TAG_BROADCAST,
837                                    "Finishing broadcast [" + mQueueName + "] "
838                                    + r.intent.getAction() + " app=" + r.callerApp);
839                            performReceiveLocked(r.callerApp, r.resultTo,
840                                new Intent(r.intent), r.resultCode,
841                                r.resultData, r.resultExtras, false, false, r.userId);
842                            // Set this to null so that the reference
843                            // (local and remote) isn't kept in the mBroadcastHistory.
844                            r.resultTo = null;
845                        } catch (RemoteException e) {
846                            r.resultTo = null;
847                            Slog.w(TAG, "Failure ["
848                                    + mQueueName + "] sending broadcast result of "
849                                    + r.intent, e);
850                        }
851                    }
852
853                    if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST, "Cancelling BROADCAST_TIMEOUT_MSG");
854                    cancelBroadcastTimeoutLocked();
855
856                    if (DEBUG_BROADCAST_LIGHT) Slog.v(TAG_BROADCAST,
857                            "Finished with ordered broadcast " + r);
858
859                    // ... and on to the next...
860                    addBroadcastToHistoryLocked(r);
861                    mOrderedBroadcasts.remove(0);
862                    r = null;
863                    looped = true;
864                    continue;
865                }
866            } while (r == null);
867
868            // Get the next receiver...
869            int recIdx = r.nextReceiver++;
870
871            // Keep track of when this receiver started, and make sure there
872            // is a timeout message pending to kill it if need be.
873            r.receiverTime = SystemClock.uptimeMillis();
874            if (recIdx == 0) {
875                r.dispatchTime = r.receiverTime;
876                r.dispatchClockTime = System.currentTimeMillis();
877                if (DEBUG_BROADCAST_LIGHT) Slog.v(TAG_BROADCAST, "Processing ordered broadcast ["
878                        + mQueueName + "] " + r);
879            }
880            if (! mPendingBroadcastTimeoutMessage) {
881                long timeoutTime = r.receiverTime + mTimeoutPeriod;
882                if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST,
883                        "Submitting BROADCAST_TIMEOUT_MSG ["
884                        + mQueueName + "] for " + r + " at " + timeoutTime);
885                setBroadcastTimeoutLocked(timeoutTime);
886            }
887
888            final BroadcastOptions brOptions = r.options;
889            final Object nextReceiver = r.receivers.get(recIdx);
890
891            if (nextReceiver instanceof BroadcastFilter) {
892                // Simple case: this is a registered receiver who gets
893                // a direct call.
894                BroadcastFilter filter = (BroadcastFilter)nextReceiver;
895                if (DEBUG_BROADCAST)  Slog.v(TAG_BROADCAST,
896                        "Delivering ordered ["
897                        + mQueueName + "] to registered "
898                        + filter + ": " + r);
899                deliverToRegisteredReceiverLocked(r, filter, r.ordered);
900                if (r.receiver == null || !r.ordered) {
901                    // The receiver has already finished, so schedule to
902                    // process the next one.
903                    if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST, "Quick finishing ["
904                            + mQueueName + "]: ordered="
905                            + r.ordered + " receiver=" + r.receiver);
906                    r.state = BroadcastRecord.IDLE;
907                    scheduleBroadcastsLocked();
908                } else {
909                    if (brOptions != null && brOptions.getTemporaryAppWhitelistDuration() > 0) {
910                        scheduleTempWhitelistLocked(filter.owningUid,
911                                brOptions.getTemporaryAppWhitelistDuration(), r);
912                    }
913                }
914                return;
915            }
916
917            // Hard case: need to instantiate the receiver, possibly
918            // starting its application process to host it.
919
920            ResolveInfo info =
921                (ResolveInfo)nextReceiver;
922            ComponentName component = new ComponentName(
923                    info.activityInfo.applicationInfo.packageName,
924                    info.activityInfo.name);
925
926            boolean skip = false;
927            int perm = mService.checkComponentPermission(info.activityInfo.permission,
928                    r.callingPid, r.callingUid, info.activityInfo.applicationInfo.uid,
929                    info.activityInfo.exported);
930            if (perm != PackageManager.PERMISSION_GRANTED) {
931                if (!info.activityInfo.exported) {
932                    Slog.w(TAG, "Permission Denial: broadcasting "
933                            + r.intent.toString()
934                            + " from " + r.callerPackage + " (pid=" + r.callingPid
935                            + ", uid=" + r.callingUid + ")"
936                            + " is not exported from uid " + info.activityInfo.applicationInfo.uid
937                            + " due to receiver " + component.flattenToShortString());
938                } else {
939                    Slog.w(TAG, "Permission Denial: broadcasting "
940                            + r.intent.toString()
941                            + " from " + r.callerPackage + " (pid=" + r.callingPid
942                            + ", uid=" + r.callingUid + ")"
943                            + " requires " + info.activityInfo.permission
944                            + " due to receiver " + component.flattenToShortString());
945                }
946                skip = true;
947            } else if (info.activityInfo.permission != null) {
948                final int opCode = AppOpsManager.permissionToOpCode(info.activityInfo.permission);
949                if (opCode != AppOpsManager.OP_NONE
950                        && mService.mAppOpsService.noteOperation(opCode, r.callingUid,
951                                r.callerPackage) != AppOpsManager.MODE_ALLOWED) {
952                    Slog.w(TAG, "Appop Denial: broadcasting "
953                            + r.intent.toString()
954                            + " from " + r.callerPackage + " (pid="
955                            + r.callingPid + ", uid=" + r.callingUid + ")"
956                            + " requires appop " + AppOpsManager.permissionToOp(
957                                    info.activityInfo.permission)
958                            + " due to registered receiver "
959                            + component.flattenToShortString());
960                    skip = true;
961                }
962            }
963            if (!skip && info.activityInfo.applicationInfo.uid != Process.SYSTEM_UID &&
964                r.requiredPermissions != null && r.requiredPermissions.length > 0) {
965                for (int i = 0; i < r.requiredPermissions.length; i++) {
966                    String requiredPermission = r.requiredPermissions[i];
967                    try {
968                        perm = AppGlobals.getPackageManager().
969                                checkPermission(requiredPermission,
970                                        info.activityInfo.applicationInfo.packageName,
971                                        UserHandle
972                                                .getUserId(info.activityInfo.applicationInfo.uid));
973                    } catch (RemoteException e) {
974                        perm = PackageManager.PERMISSION_DENIED;
975                    }
976                    if (perm != PackageManager.PERMISSION_GRANTED) {
977                        Slog.w(TAG, "Permission Denial: receiving "
978                                + r.intent + " to "
979                                + component.flattenToShortString()
980                                + " requires " + requiredPermission
981                                + " due to sender " + r.callerPackage
982                                + " (uid " + r.callingUid + ")");
983                        skip = true;
984                        break;
985                    }
986                    int appOp = AppOpsManager.permissionToOpCode(requiredPermission);
987                    if (appOp != AppOpsManager.OP_NONE && appOp != r.appOp
988                            && mService.mAppOpsService.noteOperation(appOp,
989                            info.activityInfo.applicationInfo.uid, info.activityInfo.packageName)
990                            != AppOpsManager.MODE_ALLOWED) {
991                        Slog.w(TAG, "Appop Denial: receiving "
992                                + r.intent + " to "
993                                + component.flattenToShortString()
994                                + " requires appop " + AppOpsManager.permissionToOp(
995                                requiredPermission)
996                                + " due to sender " + r.callerPackage
997                                + " (uid " + r.callingUid + ")");
998                        skip = true;
999                        break;
1000                    }
1001                }
1002            }
1003            if (!skip && r.appOp != AppOpsManager.OP_NONE
1004                    && mService.mAppOpsService.noteOperation(r.appOp,
1005                    info.activityInfo.applicationInfo.uid, info.activityInfo.packageName)
1006                    != AppOpsManager.MODE_ALLOWED) {
1007                Slog.w(TAG, "Appop Denial: receiving "
1008                        + r.intent + " to "
1009                        + component.flattenToShortString()
1010                        + " requires appop " + AppOpsManager.opToName(r.appOp)
1011                        + " due to sender " + r.callerPackage
1012                        + " (uid " + r.callingUid + ")");
1013                skip = true;
1014            }
1015            if (!skip) {
1016                if (!mService.checkAllowBackgroundLocked(info.activityInfo.applicationInfo.uid,
1017                        info.activityInfo.packageName, -1)) {
1018                    Slog.w(TAG, "Background execution not allowed: receiving "
1019                            + r.intent + " to "
1020                            + component.flattenToShortString());
1021                    skip = true;
1022                }
1023            }
1024            if (!skip) {
1025                skip = !mService.mIntentFirewall.checkBroadcast(r.intent, r.callingUid,
1026                        r.callingPid, r.resolvedType, info.activityInfo.applicationInfo.uid);
1027            }
1028            boolean isSingleton = false;
1029            try {
1030                isSingleton = mService.isSingleton(info.activityInfo.processName,
1031                        info.activityInfo.applicationInfo,
1032                        info.activityInfo.name, info.activityInfo.flags);
1033            } catch (SecurityException e) {
1034                Slog.w(TAG, e.getMessage());
1035                skip = true;
1036            }
1037            if ((info.activityInfo.flags&ActivityInfo.FLAG_SINGLE_USER) != 0) {
1038                if (ActivityManager.checkUidPermission(
1039                        android.Manifest.permission.INTERACT_ACROSS_USERS,
1040                        info.activityInfo.applicationInfo.uid)
1041                                != PackageManager.PERMISSION_GRANTED) {
1042                    Slog.w(TAG, "Permission Denial: Receiver " + component.flattenToShortString()
1043                            + " requests FLAG_SINGLE_USER, but app does not hold "
1044                            + android.Manifest.permission.INTERACT_ACROSS_USERS);
1045                    skip = true;
1046                }
1047            }
1048            if (r.curApp != null && r.curApp.crashing) {
1049                // If the target process is crashing, just skip it.
1050                Slog.w(TAG, "Skipping deliver ordered [" + mQueueName + "] " + r
1051                        + " to " + r.curApp + ": process crashing");
1052                skip = true;
1053            }
1054            if (!skip) {
1055                boolean isAvailable = false;
1056                try {
1057                    isAvailable = AppGlobals.getPackageManager().isPackageAvailable(
1058                            info.activityInfo.packageName,
1059                            UserHandle.getUserId(info.activityInfo.applicationInfo.uid));
1060                } catch (Exception e) {
1061                    // all such failures mean we skip this receiver
1062                    Slog.w(TAG, "Exception getting recipient info for "
1063                            + info.activityInfo.packageName, e);
1064                }
1065                if (!isAvailable) {
1066                    if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST,
1067                            "Skipping delivery to " + info.activityInfo.packageName + " / "
1068                            + info.activityInfo.applicationInfo.uid
1069                            + " : package no longer available");
1070                    skip = true;
1071                }
1072            }
1073
1074            // If permissions need a review before any of the app components can run, we drop
1075            // the broadcast and if the calling app is in the foreground and the broadcast is
1076            // explicit we launch the review UI passing it a pending intent to send the skipped
1077            // broadcast.
1078            if (Build.PERMISSIONS_REVIEW_REQUIRED && !skip) {
1079                if (!requestStartTargetPermissionsReviewIfNeededLocked(r,
1080                        info.activityInfo.packageName, UserHandle.getUserId(
1081                                info.activityInfo.applicationInfo.uid))) {
1082                    skip = true;
1083                }
1084            }
1085
1086            if (skip) {
1087                if (DEBUG_BROADCAST)  Slog.v(TAG_BROADCAST,
1088                        "Skipping delivery of ordered [" + mQueueName + "] "
1089                        + r + " for whatever reason");
1090                r.receiver = null;
1091                r.curFilter = null;
1092                r.state = BroadcastRecord.IDLE;
1093                scheduleBroadcastsLocked();
1094                return;
1095            }
1096
1097            r.state = BroadcastRecord.APP_RECEIVE;
1098            String targetProcess = info.activityInfo.processName;
1099            r.curComponent = component;
1100            final int receiverUid = info.activityInfo.applicationInfo.uid;
1101            // If it's a singleton, it needs to be the same app or a special app
1102            if (r.callingUid != Process.SYSTEM_UID && isSingleton
1103                    && mService.isValidSingletonCall(r.callingUid, receiverUid)) {
1104                info.activityInfo = mService.getActivityInfoForUser(info.activityInfo, 0);
1105            }
1106            r.curReceiver = info.activityInfo;
1107            if (DEBUG_MU && r.callingUid > UserHandle.PER_USER_RANGE) {
1108                Slog.v(TAG_MU, "Updated broadcast record activity info for secondary user, "
1109                        + info.activityInfo + ", callingUid = " + r.callingUid + ", uid = "
1110                        + info.activityInfo.applicationInfo.uid);
1111            }
1112
1113            if (brOptions != null && brOptions.getTemporaryAppWhitelistDuration() > 0) {
1114                scheduleTempWhitelistLocked(receiverUid,
1115                        brOptions.getTemporaryAppWhitelistDuration(), r);
1116            }
1117
1118            // Broadcast is being executed, its package can't be stopped.
1119            try {
1120                AppGlobals.getPackageManager().setPackageStoppedState(
1121                        r.curComponent.getPackageName(), false, UserHandle.getUserId(r.callingUid));
1122            } catch (RemoteException e) {
1123            } catch (IllegalArgumentException e) {
1124                Slog.w(TAG, "Failed trying to unstop package "
1125                        + r.curComponent.getPackageName() + ": " + e);
1126            }
1127
1128            // Is this receiver's application already running?
1129            ProcessRecord app = mService.getProcessRecordLocked(targetProcess,
1130                    info.activityInfo.applicationInfo.uid, false);
1131            if (app != null && app.thread != null) {
1132                try {
1133                    app.addPackage(info.activityInfo.packageName,
1134                            info.activityInfo.applicationInfo.versionCode, mService.mProcessStats);
1135                    processCurBroadcastLocked(r, app);
1136                    return;
1137                } catch (RemoteException e) {
1138                    Slog.w(TAG, "Exception when sending broadcast to "
1139                          + r.curComponent, e);
1140                } catch (RuntimeException e) {
1141                    Slog.wtf(TAG, "Failed sending broadcast to "
1142                            + r.curComponent + " with " + r.intent, e);
1143                    // If some unexpected exception happened, just skip
1144                    // this broadcast.  At this point we are not in the call
1145                    // from a client, so throwing an exception out from here
1146                    // will crash the entire system instead of just whoever
1147                    // sent the broadcast.
1148                    logBroadcastReceiverDiscardLocked(r);
1149                    finishReceiverLocked(r, r.resultCode, r.resultData,
1150                            r.resultExtras, r.resultAbort, false);
1151                    scheduleBroadcastsLocked();
1152                    // We need to reset the state if we failed to start the receiver.
1153                    r.state = BroadcastRecord.IDLE;
1154                    return;
1155                }
1156
1157                // If a dead object exception was thrown -- fall through to
1158                // restart the application.
1159            }
1160
1161            // Not running -- get it started, to be executed when the app comes up.
1162            if (DEBUG_BROADCAST)  Slog.v(TAG_BROADCAST,
1163                    "Need to start app ["
1164                    + mQueueName + "] " + targetProcess + " for broadcast " + r);
1165            if ((r.curApp=mService.startProcessLocked(targetProcess,
1166                    info.activityInfo.applicationInfo, true,
1167                    r.intent.getFlags() | Intent.FLAG_FROM_BACKGROUND,
1168                    "broadcast", r.curComponent,
1169                    (r.intent.getFlags()&Intent.FLAG_RECEIVER_BOOT_UPGRADE) != 0, false, false))
1170                            == null) {
1171                // Ah, this recipient is unavailable.  Finish it if necessary,
1172                // and mark the broadcast record as ready for the next.
1173                Slog.w(TAG, "Unable to launch app "
1174                        + info.activityInfo.applicationInfo.packageName + "/"
1175                        + info.activityInfo.applicationInfo.uid + " for broadcast "
1176                        + r.intent + ": process is bad");
1177                logBroadcastReceiverDiscardLocked(r);
1178                finishReceiverLocked(r, r.resultCode, r.resultData,
1179                        r.resultExtras, r.resultAbort, false);
1180                scheduleBroadcastsLocked();
1181                r.state = BroadcastRecord.IDLE;
1182                return;
1183            }
1184
1185            mPendingBroadcast = r;
1186            mPendingBroadcastRecvIndex = recIdx;
1187        }
1188    }
1189
1190    final void setBroadcastTimeoutLocked(long timeoutTime) {
1191        if (! mPendingBroadcastTimeoutMessage) {
1192            Message msg = mHandler.obtainMessage(BROADCAST_TIMEOUT_MSG, this);
1193            mHandler.sendMessageAtTime(msg, timeoutTime);
1194            mPendingBroadcastTimeoutMessage = true;
1195        }
1196    }
1197
1198    final void cancelBroadcastTimeoutLocked() {
1199        if (mPendingBroadcastTimeoutMessage) {
1200            mHandler.removeMessages(BROADCAST_TIMEOUT_MSG, this);
1201            mPendingBroadcastTimeoutMessage = false;
1202        }
1203    }
1204
1205    final void broadcastTimeoutLocked(boolean fromMsg) {
1206        if (fromMsg) {
1207            mPendingBroadcastTimeoutMessage = false;
1208        }
1209
1210        if (mOrderedBroadcasts.size() == 0) {
1211            return;
1212        }
1213
1214        long now = SystemClock.uptimeMillis();
1215        BroadcastRecord r = mOrderedBroadcasts.get(0);
1216        if (fromMsg) {
1217            if (mService.mDidDexOpt) {
1218                // Delay timeouts until dexopt finishes.
1219                mService.mDidDexOpt = false;
1220                long timeoutTime = SystemClock.uptimeMillis() + mTimeoutPeriod;
1221                setBroadcastTimeoutLocked(timeoutTime);
1222                return;
1223            }
1224            if (!mService.mProcessesReady) {
1225                // Only process broadcast timeouts if the system is ready. That way
1226                // PRE_BOOT_COMPLETED broadcasts can't timeout as they are intended
1227                // to do heavy lifting for system up.
1228                return;
1229            }
1230
1231            long timeoutTime = r.receiverTime + mTimeoutPeriod;
1232            if (timeoutTime > now) {
1233                // We can observe premature timeouts because we do not cancel and reset the
1234                // broadcast timeout message after each receiver finishes.  Instead, we set up
1235                // an initial timeout then kick it down the road a little further as needed
1236                // when it expires.
1237                if (DEBUG_BROADCAST) Slog.v(TAG_BROADCAST,
1238                        "Premature timeout ["
1239                        + mQueueName + "] @ " + now + ": resetting BROADCAST_TIMEOUT_MSG for "
1240                        + timeoutTime);
1241                setBroadcastTimeoutLocked(timeoutTime);
1242                return;
1243            }
1244        }
1245
1246        BroadcastRecord br = mOrderedBroadcasts.get(0);
1247        if (br.state == BroadcastRecord.WAITING_SERVICES) {
1248            // In this case the broadcast had already finished, but we had decided to wait
1249            // for started services to finish as well before going on.  So if we have actually
1250            // waited long enough time timeout the broadcast, let's give up on the whole thing
1251            // and just move on to the next.
1252            Slog.i(TAG, "Waited long enough for: " + (br.curComponent != null
1253                    ? br.curComponent.flattenToShortString() : "(null)"));
1254            br.curComponent = null;
1255            br.state = BroadcastRecord.IDLE;
1256            processNextBroadcast(false);
1257            return;
1258        }
1259
1260        Slog.w(TAG, "Timeout of broadcast " + r + " - receiver=" + r. receiver
1261                + ", started " + (now - r.receiverTime) + "ms ago");
1262        r.receiverTime = now;
1263        r.anrCount++;
1264
1265        // Current receiver has passed its expiration date.
1266        if (r.nextReceiver <= 0) {
1267            Slog.w(TAG, "Timeout on receiver with nextReceiver <= 0");
1268            return;
1269        }
1270
1271        ProcessRecord app = null;
1272        String anrMessage = null;
1273
1274        Object curReceiver = r.receivers.get(r.nextReceiver-1);
1275        Slog.w(TAG, "Receiver during timeout: " + curReceiver);
1276        logBroadcastReceiverDiscardLocked(r);
1277        if (curReceiver instanceof BroadcastFilter) {
1278            BroadcastFilter bf = (BroadcastFilter)curReceiver;
1279            if (bf.receiverList.pid != 0
1280                    && bf.receiverList.pid != ActivityManagerService.MY_PID) {
1281                synchronized (mService.mPidsSelfLocked) {
1282                    app = mService.mPidsSelfLocked.get(
1283                            bf.receiverList.pid);
1284                }
1285            }
1286        } else {
1287            app = r.curApp;
1288        }
1289
1290        if (app != null) {
1291            anrMessage = "Broadcast of " + r.intent.toString();
1292        }
1293
1294        if (mPendingBroadcast == r) {
1295            mPendingBroadcast = null;
1296        }
1297
1298        // Move on to the next receiver.
1299        finishReceiverLocked(r, r.resultCode, r.resultData,
1300                r.resultExtras, r.resultAbort, false);
1301        scheduleBroadcastsLocked();
1302
1303        if (anrMessage != null) {
1304            // Post the ANR to the handler since we do not want to process ANRs while
1305            // potentially holding our lock.
1306            mHandler.post(new AppNotResponding(app, anrMessage));
1307        }
1308    }
1309
1310    private final int ringAdvance(int x, final int increment, final int ringSize) {
1311        x += increment;
1312        if (x < 0) return (ringSize - 1);
1313        else if (x >= ringSize) return 0;
1314        else return x;
1315    }
1316
1317    private final void addBroadcastToHistoryLocked(BroadcastRecord r) {
1318        if (r.callingUid < 0) {
1319            // This was from a registerReceiver() call; ignore it.
1320            return;
1321        }
1322        r.finishTime = SystemClock.uptimeMillis();
1323
1324        mBroadcastHistory[mHistoryNext] = r;
1325        mHistoryNext = ringAdvance(mHistoryNext, 1, MAX_BROADCAST_HISTORY);
1326
1327        mBroadcastSummaryHistory[mSummaryHistoryNext] = r.intent;
1328        mSummaryHistoryEnqueueTime[mSummaryHistoryNext] = r.enqueueClockTime;
1329        mSummaryHistoryDispatchTime[mSummaryHistoryNext] = r.dispatchClockTime;
1330        mSummaryHistoryFinishTime[mSummaryHistoryNext] = System.currentTimeMillis();
1331        mSummaryHistoryNext = ringAdvance(mSummaryHistoryNext, 1, MAX_BROADCAST_SUMMARY_HISTORY);
1332    }
1333
1334    boolean cleanupDisabledPackageReceiversLocked(
1335            String packageName, Set<String> filterByClasses, int userId, boolean doit) {
1336        boolean didSomething = false;
1337        for (int i = mParallelBroadcasts.size() - 1; i >= 0; i--) {
1338            didSomething |= mParallelBroadcasts.get(i).cleanupDisabledPackageReceiversLocked(
1339                    packageName, filterByClasses, userId, doit);
1340            if (!doit && didSomething) {
1341                return true;
1342            }
1343        }
1344
1345        for (int i = mOrderedBroadcasts.size() - 1; i >= 0; i--) {
1346            didSomething |= mOrderedBroadcasts.get(i).cleanupDisabledPackageReceiversLocked(
1347                    packageName, filterByClasses, userId, doit);
1348            if (!doit && didSomething) {
1349                return true;
1350            }
1351        }
1352
1353        return didSomething;
1354    }
1355
1356    final void logBroadcastReceiverDiscardLocked(BroadcastRecord r) {
1357        final int logIndex = r.nextReceiver - 1;
1358        if (logIndex >= 0 && logIndex < r.receivers.size()) {
1359            Object curReceiver = r.receivers.get(logIndex);
1360            if (curReceiver instanceof BroadcastFilter) {
1361                BroadcastFilter bf = (BroadcastFilter) curReceiver;
1362                EventLog.writeEvent(EventLogTags.AM_BROADCAST_DISCARD_FILTER,
1363                        bf.owningUserId, System.identityHashCode(r),
1364                        r.intent.getAction(), logIndex, System.identityHashCode(bf));
1365            } else {
1366                ResolveInfo ri = (ResolveInfo) curReceiver;
1367                EventLog.writeEvent(EventLogTags.AM_BROADCAST_DISCARD_APP,
1368                        UserHandle.getUserId(ri.activityInfo.applicationInfo.uid),
1369                        System.identityHashCode(r), r.intent.getAction(), logIndex, ri.toString());
1370            }
1371        } else {
1372            if (logIndex < 0) Slog.w(TAG,
1373                    "Discarding broadcast before first receiver is invoked: " + r);
1374            EventLog.writeEvent(EventLogTags.AM_BROADCAST_DISCARD_APP,
1375                    -1, System.identityHashCode(r),
1376                    r.intent.getAction(),
1377                    r.nextReceiver,
1378                    "NONE");
1379        }
1380    }
1381
1382    final boolean dumpLocked(FileDescriptor fd, PrintWriter pw, String[] args,
1383            int opti, boolean dumpAll, String dumpPackage, boolean needSep) {
1384        SimpleDateFormat sdf = new SimpleDateFormat("yyyy-MM-dd HH:mm:ss");
1385        if (mParallelBroadcasts.size() > 0 || mOrderedBroadcasts.size() > 0
1386                || mPendingBroadcast != null) {
1387            boolean printed = false;
1388            for (int i = mParallelBroadcasts.size() - 1; i >= 0; i--) {
1389                BroadcastRecord br = mParallelBroadcasts.get(i);
1390                if (dumpPackage != null && !dumpPackage.equals(br.callerPackage)) {
1391                    continue;
1392                }
1393                if (!printed) {
1394                    if (needSep) {
1395                        pw.println();
1396                    }
1397                    needSep = true;
1398                    printed = true;
1399                    pw.println("  Active broadcasts [" + mQueueName + "]:");
1400                }
1401                pw.println("  Active Broadcast " + mQueueName + " #" + i + ":");
1402                br.dump(pw, "    ", sdf);
1403            }
1404            printed = false;
1405            needSep = true;
1406            for (int i = mOrderedBroadcasts.size() - 1; i >= 0; i--) {
1407                BroadcastRecord br = mOrderedBroadcasts.get(i);
1408                if (dumpPackage != null && !dumpPackage.equals(br.callerPackage)) {
1409                    continue;
1410                }
1411                if (!printed) {
1412                    if (needSep) {
1413                        pw.println();
1414                    }
1415                    needSep = true;
1416                    printed = true;
1417                    pw.println("  Active ordered broadcasts [" + mQueueName + "]:");
1418                }
1419                pw.println("  Active Ordered Broadcast " + mQueueName + " #" + i + ":");
1420                mOrderedBroadcasts.get(i).dump(pw, "    ", sdf);
1421            }
1422            if (dumpPackage == null || (mPendingBroadcast != null
1423                    && dumpPackage.equals(mPendingBroadcast.callerPackage))) {
1424                if (needSep) {
1425                    pw.println();
1426                }
1427                pw.println("  Pending broadcast [" + mQueueName + "]:");
1428                if (mPendingBroadcast != null) {
1429                    mPendingBroadcast.dump(pw, "    ", sdf);
1430                } else {
1431                    pw.println("    (null)");
1432                }
1433                needSep = true;
1434            }
1435        }
1436
1437        int i;
1438        boolean printed = false;
1439
1440        i = -1;
1441        int lastIndex = mHistoryNext;
1442        int ringIndex = lastIndex;
1443        do {
1444            // increasing index = more recent entry, and we want to print the most
1445            // recent first and work backwards, so we roll through the ring backwards.
1446            ringIndex = ringAdvance(ringIndex, -1, MAX_BROADCAST_HISTORY);
1447            BroadcastRecord r = mBroadcastHistory[ringIndex];
1448            if (r == null) {
1449                continue;
1450            }
1451
1452            i++; // genuine record of some sort even if we're filtering it out
1453            if (dumpPackage != null && !dumpPackage.equals(r.callerPackage)) {
1454                continue;
1455            }
1456            if (!printed) {
1457                if (needSep) {
1458                    pw.println();
1459                }
1460                needSep = true;
1461                pw.println("  Historical broadcasts [" + mQueueName + "]:");
1462                printed = true;
1463            }
1464            if (dumpAll) {
1465                pw.print("  Historical Broadcast " + mQueueName + " #");
1466                        pw.print(i); pw.println(":");
1467                r.dump(pw, "    ", sdf);
1468            } else {
1469                pw.print("  #"); pw.print(i); pw.print(": "); pw.println(r);
1470                pw.print("    ");
1471                pw.println(r.intent.toShortString(false, true, true, false));
1472                if (r.targetComp != null && r.targetComp != r.intent.getComponent()) {
1473                    pw.print("    targetComp: "); pw.println(r.targetComp.toShortString());
1474                }
1475                Bundle bundle = r.intent.getExtras();
1476                if (bundle != null) {
1477                    pw.print("    extras: "); pw.println(bundle.toString());
1478                }
1479            }
1480        } while (ringIndex != lastIndex);
1481
1482        if (dumpPackage == null) {
1483            lastIndex = ringIndex = mSummaryHistoryNext;
1484            if (dumpAll) {
1485                printed = false;
1486                i = -1;
1487            } else {
1488                // roll over the 'i' full dumps that have already been issued
1489                for (int j = i;
1490                        j > 0 && ringIndex != lastIndex;) {
1491                    ringIndex = ringAdvance(ringIndex, -1, MAX_BROADCAST_SUMMARY_HISTORY);
1492                    BroadcastRecord r = mBroadcastHistory[ringIndex];
1493                    if (r == null) {
1494                        continue;
1495                    }
1496                    j--;
1497                }
1498            }
1499            // done skipping; dump the remainder of the ring. 'i' is still the ordinal within
1500            // the overall broadcast history.
1501            do {
1502                ringIndex = ringAdvance(ringIndex, -1, MAX_BROADCAST_SUMMARY_HISTORY);
1503                Intent intent = mBroadcastSummaryHistory[ringIndex];
1504                if (intent == null) {
1505                    continue;
1506                }
1507                if (!printed) {
1508                    if (needSep) {
1509                        pw.println();
1510                    }
1511                    needSep = true;
1512                    pw.println("  Historical broadcasts summary [" + mQueueName + "]:");
1513                    printed = true;
1514                }
1515                if (!dumpAll && i >= 50) {
1516                    pw.println("  ...");
1517                    break;
1518                }
1519                i++;
1520                pw.print("  #"); pw.print(i); pw.print(": ");
1521                pw.println(intent.toShortString(false, true, true, false));
1522                pw.print("    ");
1523                TimeUtils.formatDuration(mSummaryHistoryDispatchTime[ringIndex]
1524                        - mSummaryHistoryEnqueueTime[ringIndex], pw);
1525                pw.print(" dispatch ");
1526                TimeUtils.formatDuration(mSummaryHistoryFinishTime[ringIndex]
1527                        - mSummaryHistoryDispatchTime[ringIndex], pw);
1528                pw.println(" finish");
1529                pw.print("    enq=");
1530                pw.print(sdf.format(new Date(mSummaryHistoryEnqueueTime[ringIndex])));
1531                pw.print(" disp=");
1532                pw.print(sdf.format(new Date(mSummaryHistoryDispatchTime[ringIndex])));
1533                pw.print(" fin=");
1534                pw.println(sdf.format(new Date(mSummaryHistoryFinishTime[ringIndex])));
1535                Bundle bundle = intent.getExtras();
1536                if (bundle != null) {
1537                    pw.print("    extras: "); pw.println(bundle.toString());
1538                }
1539            } while (ringIndex != lastIndex);
1540        }
1541
1542        return needSep;
1543    }
1544}
1545