CameraService.cpp revision 022f0cb0c6f135edde4ebe84859c685933ee895e 
1/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#define LOG_TAG "CameraService"
18//#define LOG_NDEBUG 0
19
20#include <algorithm>
21#include <climits>
22#include <stdio.h>
23#include <cstring>
24#include <ctime>
25#include <string>
26#include <sys/types.h>
27#include <inttypes.h>
28#include <pthread.h>
29
30#include <binder/AppOpsManager.h>
31#include <binder/IPCThreadState.h>
32#include <binder/IServiceManager.h>
33#include <binder/MemoryBase.h>
34#include <binder/MemoryHeapBase.h>
35#include <binder/ProcessInfoService.h>
36#include <cutils/atomic.h>
37#include <cutils/properties.h>
38#include <gui/Surface.h>
39#include <hardware/hardware.h>
40#include <media/AudioSystem.h>
41#include <media/IMediaHTTPService.h>
42#include <media/mediaplayer.h>
43#include <utils/Errors.h>
44#include <utils/Log.h>
45#include <utils/String16.h>
46#include <utils/Trace.h>
47#include <system/camera_vendor_tags.h>
48#include <system/camera_metadata.h>
49#include <system/camera.h>
50
51#include "CameraService.h"
52#include "api1/CameraClient.h"
53#include "api1/Camera2Client.h"
54#include "api2/CameraDeviceClient.h"
55#include "utils/CameraTraces.h"
56#include "CameraDeviceFactory.h"
57
58namespace android {
59
60// ----------------------------------------------------------------------------
61// Logging support -- this is for debugging only
62// Use "adb shell dumpsys media.camera -v 1" to change it.
63volatile int32_t gLogLevel = 0;
64
65#define LOG1(...) ALOGD_IF(gLogLevel >= 1, __VA_ARGS__);
66#define LOG2(...) ALOGD_IF(gLogLevel >= 2, __VA_ARGS__);
67
68static void setLogLevel(int level) {
69    android_atomic_write(level, &gLogLevel);
70}
71
72// ----------------------------------------------------------------------------
73
74extern "C" {
75static void camera_device_status_change(
76        const struct camera_module_callbacks* callbacks,
77        int camera_id,
78        int new_status) {
79    sp<CameraService> cs = const_cast<CameraService*>(
80            static_cast<const CameraService*>(callbacks));
81
82    cs->onDeviceStatusChanged(static_cast<camera_device_status_t>(camera_id),
83            static_cast<camera_device_status_t>(new_status));
84}
85
86static void torch_mode_status_change(
87        const struct camera_module_callbacks* callbacks,
88        const char* camera_id,
89        int new_status) {
90    if (!callbacks || !camera_id) {
91        ALOGE("%s invalid parameters. callbacks %p, camera_id %p", __FUNCTION__,
92                callbacks, camera_id);
93    }
94    sp<CameraService> cs = const_cast<CameraService*>(
95                                static_cast<const CameraService*>(callbacks));
96
97    ICameraServiceListener::TorchStatus status;
98    switch (new_status) {
99        case TORCH_MODE_STATUS_NOT_AVAILABLE:
100            status = ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE;
101            break;
102        case TORCH_MODE_STATUS_AVAILABLE_OFF:
103            status = ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF;
104            break;
105        case TORCH_MODE_STATUS_AVAILABLE_ON:
106            status = ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON;
107            break;
108        default:
109            ALOGE("Unknown torch status %d", new_status);
110            return;
111    }
112
113    cs->onTorchStatusChanged(
114        String8(camera_id),
115        status);
116}
117} // extern "C"
118
119// ----------------------------------------------------------------------------
120
121// This is ugly and only safe if we never re-create the CameraService, but
122// should be ok for now.
123static CameraService *gCameraService;
124
125CameraService::CameraService() : mEventLog(DEFAULT_EVENT_LOG_LENGTH), mAllowedUsers(),
126        mSoundRef(0), mModule(0), mFlashlight(0) {
127    ALOGI("CameraService started (pid=%d)", getpid());
128    gCameraService = this;
129
130    this->camera_device_status_change = android::camera_device_status_change;
131    this->torch_mode_status_change = android::torch_mode_status_change;
132
133    mServiceLockWrapper = std::make_shared<WaitableMutexWrapper>(&mServiceLock);
134}
135
136void CameraService::onFirstRef()
137{
138    ALOGI("CameraService process starting");
139
140    BnCameraService::onFirstRef();
141
142    camera_module_t *rawModule;
143    int err = hw_get_module(CAMERA_HARDWARE_MODULE_ID,
144            (const hw_module_t **)&rawModule);
145    if (err < 0) {
146        ALOGE("Could not load camera HAL module: %d (%s)", err, strerror(-err));
147        logServiceError("Could not load camera HAL module", err);
148        mNumberOfCameras = 0;
149        return;
150    }
151
152    mModule = new CameraModule(rawModule);
153    ALOGI("Loaded \"%s\" camera module", mModule->getModuleName());
154    err = mModule->init();
155    if (err != OK) {
156        ALOGE("Could not initialize camera HAL module: %d (%s)", err,
157            strerror(-err));
158        logServiceError("Could not initialize camera HAL module", err);
159
160        mNumberOfCameras = 0;
161        delete mModule;
162        mModule = nullptr;
163        return;
164    }
165
166    mNumberOfCameras = mModule->getNumberOfCameras();
167
168    mFlashlight = new CameraFlashlight(*mModule, *this);
169    status_t res = mFlashlight->findFlashUnits();
170    if (res) {
171        // impossible because we haven't open any camera devices.
172        ALOGE("Failed to find flash units.");
173    }
174
175    for (int i = 0; i < mNumberOfCameras; i++) {
176        String8 cameraId = String8::format("%d", i);
177
178        // Defaults to use for cost and conflicting devices
179        int cost = 100;
180        char** conflicting_devices = nullptr;
181        size_t conflicting_devices_length = 0;
182
183        // If using post-2.4 module version, query the cost + conflicting devices from the HAL
184        if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_4) {
185            struct camera_info info;
186            status_t rc = mModule->getCameraInfo(i, &info);
187            if (rc == NO_ERROR) {
188                cost = info.resource_cost;
189                conflicting_devices = info.conflicting_devices;
190                conflicting_devices_length = info.conflicting_devices_length;
191            } else {
192                ALOGE("%s: Received error loading camera info for device %d, cost and"
193                        " conflicting devices fields set to defaults for this device.",
194                        __FUNCTION__, i);
195            }
196        }
197
198        std::set<String8> conflicting;
199        for (size_t i = 0; i < conflicting_devices_length; i++) {
200            conflicting.emplace(String8(conflicting_devices[i]));
201        }
202
203        // Initialize state for each camera device
204        {
205            Mutex::Autolock lock(mCameraStatesLock);
206            mCameraStates.emplace(cameraId, std::make_shared<CameraState>(cameraId, cost,
207                    conflicting));
208        }
209
210        if (mFlashlight->hasFlashUnit(cameraId)) {
211            mTorchStatusMap.add(cameraId,
212                    ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF);
213        }
214    }
215
216    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_1) {
217        mModule->setCallbacks(this);
218    }
219
220    VendorTagDescriptor::clearGlobalVendorTagDescriptor();
221
222    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_2) {
223        setUpVendorTags();
224    }
225
226    CameraDeviceFactory::registerService(this);
227}
228
229CameraService::~CameraService() {
230    if (mModule) {
231        delete mModule;
232        mModule = nullptr;
233    }
234    VendorTagDescriptor::clearGlobalVendorTagDescriptor();
235    gCameraService = nullptr;
236}
237
238void CameraService::onDeviceStatusChanged(camera_device_status_t  cameraId,
239        camera_device_status_t newStatus) {
240    ALOGI("%s: Status changed for cameraId=%d, newStatus=%d", __FUNCTION__,
241          cameraId, newStatus);
242
243    String8 id = String8::format("%d", cameraId);
244    std::shared_ptr<CameraState> state = getCameraState(id);
245
246    if (state == nullptr) {
247        ALOGE("%s: Bad camera ID %d", __FUNCTION__, cameraId);
248        return;
249    }
250
251    ICameraServiceListener::Status oldStatus = state->getStatus();
252
253    if (oldStatus == static_cast<ICameraServiceListener::Status>(newStatus)) {
254        ALOGE("%s: State transition to the same status %#x not allowed", __FUNCTION__, newStatus);
255        return;
256    }
257
258    if (newStatus == CAMERA_DEVICE_STATUS_NOT_PRESENT) {
259        logDeviceRemoved(id, String8::format("Device status changed from %d to %d", oldStatus,
260                newStatus));
261        sp<BasicClient> clientToDisconnect;
262        {
263            // Don't do this in updateStatus to avoid deadlock over mServiceLock
264            Mutex::Autolock lock(mServiceLock);
265
266            // Set the device status to NOT_PRESENT, clients will no longer be able to connect
267            // to this device until the status changes
268            updateStatus(ICameraServiceListener::STATUS_NOT_PRESENT, id);
269
270            // Remove cached shim parameters
271            state->setShimParams(CameraParameters());
272
273            // Remove the client from the list of active clients
274            clientToDisconnect = removeClientLocked(id);
275
276            // Notify the client of disconnection
277            clientToDisconnect->notifyError(ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED,
278                    CaptureResultExtras{});
279        }
280
281        ALOGI("%s: Client for camera ID %s evicted due to device status change from HAL",
282                __FUNCTION__, id.string());
283
284        // Disconnect client
285        if (clientToDisconnect.get() != nullptr) {
286            // Ensure not in binder RPC so client disconnect PID checks work correctly
287            LOG_ALWAYS_FATAL_IF(getCallingPid() != getpid(),
288                    "onDeviceStatusChanged must be called from the camera service process!");
289            clientToDisconnect->disconnect();
290        }
291
292    } else {
293        if (oldStatus == ICameraServiceListener::Status::STATUS_NOT_PRESENT) {
294            logDeviceAdded(id, String8::format("Device status changed from %d to %d", oldStatus,
295                    newStatus));
296        }
297        updateStatus(static_cast<ICameraServiceListener::Status>(newStatus), id);
298    }
299
300}
301
302void CameraService::onTorchStatusChanged(const String8& cameraId,
303        ICameraServiceListener::TorchStatus newStatus) {
304    Mutex::Autolock al(mTorchStatusMutex);
305    onTorchStatusChangedLocked(cameraId, newStatus);
306}
307
308void CameraService::onTorchStatusChangedLocked(const String8& cameraId,
309        ICameraServiceListener::TorchStatus newStatus) {
310    ALOGI("%s: Torch status changed for cameraId=%s, newStatus=%d",
311            __FUNCTION__, cameraId.string(), newStatus);
312
313    ICameraServiceListener::TorchStatus status;
314    status_t res = getTorchStatusLocked(cameraId, &status);
315    if (res) {
316        ALOGE("%s: cannot get torch status of camera %s: %s (%d)",
317                __FUNCTION__, cameraId.string(), strerror(-res), res);
318        return;
319    }
320    if (status == newStatus) {
321        return;
322    }
323
324    res = setTorchStatusLocked(cameraId, newStatus);
325    if (res) {
326        ALOGE("%s: Failed to set the torch status", __FUNCTION__,
327                (uint32_t)newStatus);
328        return;
329    }
330
331    {
332        Mutex::Autolock lock(mStatusListenerLock);
333        for (auto& i : mListenerList) {
334            i->onTorchStatusChanged(newStatus, String16{cameraId});
335        }
336    }
337}
338
339
340int32_t CameraService::getNumberOfCameras() {
341    return mNumberOfCameras;
342}
343
344status_t CameraService::getCameraInfo(int cameraId,
345                                      struct CameraInfo* cameraInfo) {
346    if (!mModule) {
347        return -ENODEV;
348    }
349
350    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
351        return BAD_VALUE;
352    }
353
354    struct camera_info info;
355    status_t rc = filterGetInfoErrorCode(
356        mModule->getCameraInfo(cameraId, &info));
357    cameraInfo->facing = info.facing;
358    cameraInfo->orientation = info.orientation;
359    return rc;
360}
361
362int CameraService::cameraIdToInt(const String8& cameraId) {
363    errno = 0;
364    size_t pos = 0;
365    int ret = stoi(std::string{cameraId.string()}, &pos);
366    if (errno != 0 || pos != cameraId.size()) {
367        return -1;
368    }
369    return ret;
370}
371
372status_t CameraService::generateShimMetadata(int cameraId, /*out*/CameraMetadata* cameraInfo) {
373    status_t ret = OK;
374    struct CameraInfo info;
375    if ((ret = getCameraInfo(cameraId, &info)) != OK) {
376        return ret;
377    }
378
379    CameraMetadata shimInfo;
380    int32_t orientation = static_cast<int32_t>(info.orientation);
381    if ((ret = shimInfo.update(ANDROID_SENSOR_ORIENTATION, &orientation, 1)) != OK) {
382        return ret;
383    }
384
385    uint8_t facing = (info.facing == CAMERA_FACING_FRONT) ?
386            ANDROID_LENS_FACING_FRONT : ANDROID_LENS_FACING_BACK;
387    if ((ret = shimInfo.update(ANDROID_LENS_FACING, &facing, 1)) != OK) {
388        return ret;
389    }
390
391    CameraParameters shimParams;
392    if ((ret = getLegacyParametersLazy(cameraId, /*out*/&shimParams)) != OK) {
393        // Error logged by callee
394        return ret;
395    }
396
397    Vector<Size> sizes;
398    Vector<Size> jpegSizes;
399    Vector<int32_t> formats;
400    const char* supportedPreviewFormats;
401    {
402        shimParams.getSupportedPreviewSizes(/*out*/sizes);
403        shimParams.getSupportedPreviewFormats(/*out*/formats);
404        shimParams.getSupportedPictureSizes(/*out*/jpegSizes);
405    }
406
407    // Always include IMPLEMENTATION_DEFINED
408    formats.add(HAL_PIXEL_FORMAT_IMPLEMENTATION_DEFINED);
409
410    const size_t INTS_PER_CONFIG = 4;
411
412    // Build available stream configurations metadata
413    size_t streamConfigSize = (sizes.size() * formats.size() + jpegSizes.size()) * INTS_PER_CONFIG;
414
415    Vector<int32_t> streamConfigs;
416    streamConfigs.setCapacity(streamConfigSize);
417
418    for (size_t i = 0; i < formats.size(); ++i) {
419        for (size_t j = 0; j < sizes.size(); ++j) {
420            streamConfigs.add(formats[i]);
421            streamConfigs.add(sizes[j].width);
422            streamConfigs.add(sizes[j].height);
423            streamConfigs.add(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS_OUTPUT);
424        }
425    }
426
427    for (size_t i = 0; i < jpegSizes.size(); ++i) {
428        streamConfigs.add(HAL_PIXEL_FORMAT_BLOB);
429        streamConfigs.add(jpegSizes[i].width);
430        streamConfigs.add(jpegSizes[i].height);
431        streamConfigs.add(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS_OUTPUT);
432    }
433
434    if ((ret = shimInfo.update(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS,
435            streamConfigs.array(), streamConfigSize)) != OK) {
436        return ret;
437    }
438
439    int64_t fakeMinFrames[0];
440    // TODO: Fixme, don't fake min frame durations.
441    if ((ret = shimInfo.update(ANDROID_SCALER_AVAILABLE_MIN_FRAME_DURATIONS,
442            fakeMinFrames, 0)) != OK) {
443        return ret;
444    }
445
446    int64_t fakeStalls[0];
447    // TODO: Fixme, don't fake stall durations.
448    if ((ret = shimInfo.update(ANDROID_SCALER_AVAILABLE_STALL_DURATIONS,
449            fakeStalls, 0)) != OK) {
450        return ret;
451    }
452
453    *cameraInfo = shimInfo;
454    return OK;
455}
456
457status_t CameraService::getCameraCharacteristics(int cameraId,
458                                                CameraMetadata* cameraInfo) {
459    if (!cameraInfo) {
460        ALOGE("%s: cameraInfo is NULL", __FUNCTION__);
461        return BAD_VALUE;
462    }
463
464    if (!mModule) {
465        ALOGE("%s: camera hardware module doesn't exist", __FUNCTION__);
466        return -ENODEV;
467    }
468
469    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
470        ALOGE("%s: Invalid camera id: %d", __FUNCTION__, cameraId);
471        return BAD_VALUE;
472    }
473
474    int facing;
475    status_t ret = OK;
476    if (mModule->getModuleApiVersion() < CAMERA_MODULE_API_VERSION_2_0 ||
477            getDeviceVersion(cameraId, &facing) <= CAMERA_DEVICE_API_VERSION_2_1 ) {
478        /**
479         * Backwards compatibility mode for old HALs:
480         * - Convert CameraInfo into static CameraMetadata properties.
481         * - Retrieve cached CameraParameters for this camera.  If none exist,
482         *   attempt to open CameraClient and retrieve the CameraParameters.
483         * - Convert cached CameraParameters into static CameraMetadata
484         *   properties.
485         */
486        ALOGI("%s: Switching to HAL1 shim implementation...", __FUNCTION__);
487
488        if ((ret = generateShimMetadata(cameraId, cameraInfo)) != OK) {
489            return ret;
490        }
491
492    } else {
493        /**
494         * Normal HAL 2.1+ codepath.
495         */
496        struct camera_info info;
497        ret = filterGetInfoErrorCode(mModule->getCameraInfo(cameraId, &info));
498        *cameraInfo = info.static_camera_characteristics;
499    }
500
501    return ret;
502}
503
504int CameraService::getCallingPid() {
505    return IPCThreadState::self()->getCallingPid();
506}
507
508int CameraService::getCallingUid() {
509    return IPCThreadState::self()->getCallingUid();
510}
511
512String8 CameraService::getFormattedCurrentTime() {
513    time_t now = time(nullptr);
514    char formattedTime[64];
515    strftime(formattedTime, sizeof(formattedTime), "%m-%d %H:%M:%S", localtime(&now));
516    return String8(formattedTime);
517}
518
519int CameraService::getCameraPriorityFromProcState(int procState) {
520    // Find the priority for the camera usage based on the process state.  Higher priority clients
521    // win for evictions.
522    if (procState < 0) {
523        ALOGE("%s: Received invalid process state %d from ActivityManagerService!", __FUNCTION__,
524                procState);
525        return -1;
526    }
527    return INT_MAX - procState;
528}
529
530status_t CameraService::getCameraVendorTagDescriptor(/*out*/sp<VendorTagDescriptor>& desc) {
531    if (!mModule) {
532        ALOGE("%s: camera hardware module doesn't exist", __FUNCTION__);
533        return -ENODEV;
534    }
535
536    desc = VendorTagDescriptor::getGlobalVendorTagDescriptor();
537    return OK;
538}
539
540int CameraService::getDeviceVersion(int cameraId, int* facing) {
541    struct camera_info info;
542    if (mModule->getCameraInfo(cameraId, &info) != OK) {
543        return -1;
544    }
545
546    int deviceVersion;
547    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0) {
548        deviceVersion = info.device_version;
549    } else {
550        deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
551    }
552
553    if (facing) {
554        *facing = info.facing;
555    }
556
557    return deviceVersion;
558}
559
560status_t CameraService::filterGetInfoErrorCode(status_t err) {
561    switch(err) {
562        case NO_ERROR:
563        case -EINVAL:
564            return err;
565        default:
566            break;
567    }
568    return -ENODEV;
569}
570
571bool CameraService::setUpVendorTags() {
572    vendor_tag_ops_t vOps = vendor_tag_ops_t();
573
574    // Check if vendor operations have been implemented
575    if (!mModule->isVendorTagDefined()) {
576        ALOGI("%s: No vendor tags defined for this device.", __FUNCTION__);
577        return false;
578    }
579
580    ATRACE_BEGIN("camera3->get_metadata_vendor_tag_ops");
581    mModule->getVendorTagOps(&vOps);
582    ATRACE_END();
583
584    // Ensure all vendor operations are present
585    if (vOps.get_tag_count == NULL || vOps.get_all_tags == NULL ||
586            vOps.get_section_name == NULL || vOps.get_tag_name == NULL ||
587            vOps.get_tag_type == NULL) {
588        ALOGE("%s: Vendor tag operations not fully defined. Ignoring definitions."
589               , __FUNCTION__);
590        return false;
591    }
592
593    // Read all vendor tag definitions into a descriptor
594    sp<VendorTagDescriptor> desc;
595    status_t res;
596    if ((res = VendorTagDescriptor::createDescriptorFromOps(&vOps, /*out*/desc))
597            != OK) {
598        ALOGE("%s: Could not generate descriptor from vendor tag operations,"
599              "received error %s (%d). Camera clients will not be able to use"
600              "vendor tags", __FUNCTION__, strerror(res), res);
601        return false;
602    }
603
604    // Set the global descriptor to use with camera metadata
605    VendorTagDescriptor::setAsGlobalVendorTagDescriptor(desc);
606    return true;
607}
608
609status_t CameraService::makeClient(const sp<CameraService>& cameraService,
610        const sp<IInterface>& cameraCb, const String16& packageName, const String8& cameraId,
611        int facing, int clientPid, uid_t clientUid, int servicePid, bool legacyMode,
612        int halVersion, int deviceVersion, apiLevel effectiveApiLevel,
613        /*out*/sp<BasicClient>* client) {
614
615    // TODO: Update CameraClients + HAL interface to use strings for Camera IDs
616    int id = cameraIdToInt(cameraId);
617    if (id == -1) {
618        ALOGE("%s: Invalid camera ID %s, cannot convert to integer.", __FUNCTION__,
619                cameraId.string());
620        return BAD_VALUE;
621    }
622
623    if (halVersion < 0 || halVersion == deviceVersion) {
624        // Default path: HAL version is unspecified by caller, create CameraClient
625        // based on device version reported by the HAL.
626        switch(deviceVersion) {
627          case CAMERA_DEVICE_API_VERSION_1_0:
628            if (effectiveApiLevel == API_1) {  // Camera1 API route
629                sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get());
630                *client = new CameraClient(cameraService, tmp, packageName, id, facing,
631                        clientPid, clientUid, getpid(), legacyMode);
632            } else { // Camera2 API route
633                ALOGW("Camera using old HAL version: %d", deviceVersion);
634                return -EOPNOTSUPP;
635            }
636            break;
637          case CAMERA_DEVICE_API_VERSION_2_0:
638          case CAMERA_DEVICE_API_VERSION_2_1:
639          case CAMERA_DEVICE_API_VERSION_3_0:
640          case CAMERA_DEVICE_API_VERSION_3_1:
641          case CAMERA_DEVICE_API_VERSION_3_2:
642          case CAMERA_DEVICE_API_VERSION_3_3:
643            if (effectiveApiLevel == API_1) { // Camera1 API route
644                sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get());
645                *client = new Camera2Client(cameraService, tmp, packageName, id, facing,
646                        clientPid, clientUid, servicePid, legacyMode);
647            } else { // Camera2 API route
648                sp<ICameraDeviceCallbacks> tmp =
649                        static_cast<ICameraDeviceCallbacks*>(cameraCb.get());
650                *client = new CameraDeviceClient(cameraService, tmp, packageName, id,
651                        facing, clientPid, clientUid, servicePid);
652            }
653            break;
654          default:
655            // Should not be reachable
656            ALOGE("Unknown camera device HAL version: %d", deviceVersion);
657            return INVALID_OPERATION;
658        }
659    } else {
660        // A particular HAL version is requested by caller. Create CameraClient
661        // based on the requested HAL version.
662        if (deviceVersion > CAMERA_DEVICE_API_VERSION_1_0 &&
663            halVersion == CAMERA_DEVICE_API_VERSION_1_0) {
664            // Only support higher HAL version device opened as HAL1.0 device.
665            sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get());
666            *client = new CameraClient(cameraService, tmp, packageName, id, facing,
667                    clientPid, clientUid, servicePid, legacyMode);
668        } else {
669            // Other combinations (e.g. HAL3.x open as HAL2.x) are not supported yet.
670            ALOGE("Invalid camera HAL version %x: HAL %x device can only be"
671                    " opened as HAL %x device", halVersion, deviceVersion,
672                    CAMERA_DEVICE_API_VERSION_1_0);
673            return INVALID_OPERATION;
674        }
675    }
676    return NO_ERROR;
677}
678
679String8 CameraService::toString(std::set<userid_t> intSet) {
680    String8 s("");
681    bool first = true;
682    for (userid_t i : intSet) {
683        if (first) {
684            s.appendFormat("%d", i);
685            first = false;
686        } else {
687            s.appendFormat(", %d", i);
688        }
689    }
690    return s;
691}
692
693status_t CameraService::initializeShimMetadata(int cameraId) {
694    int uid = getCallingUid();
695
696    String16 internalPackageName("media");
697    String8 id = String8::format("%d", cameraId);
698    status_t ret = NO_ERROR;
699    sp<Client> tmp = nullptr;
700    if ((ret = connectHelper<ICameraClient,Client>(sp<ICameraClient>{nullptr}, id,
701            static_cast<int>(CAMERA_HAL_API_VERSION_UNSPECIFIED), internalPackageName, uid, API_1,
702            false, true, tmp)) != NO_ERROR) {
703        ALOGE("%s: Error %d (%s) initializing shim metadata.", __FUNCTION__, ret, strerror(ret));
704        return ret;
705    }
706    return NO_ERROR;
707}
708
709status_t CameraService::getLegacyParametersLazy(int cameraId,
710        /*out*/
711        CameraParameters* parameters) {
712
713    ALOGV("%s: for cameraId: %d", __FUNCTION__, cameraId);
714
715    status_t ret = 0;
716
717    if (parameters == NULL) {
718        ALOGE("%s: parameters must not be null", __FUNCTION__);
719        return BAD_VALUE;
720    }
721
722    String8 id = String8::format("%d", cameraId);
723
724    // Check if we already have parameters
725    {
726        // Scope for service lock
727        Mutex::Autolock lock(mServiceLock);
728        auto cameraState = getCameraState(id);
729        if (cameraState == nullptr) {
730            ALOGE("%s: Invalid camera ID: %s", __FUNCTION__, id.string());
731            return BAD_VALUE;
732        }
733        CameraParameters p = cameraState->getShimParams();
734        if (!p.isEmpty()) {
735            *parameters = p;
736            return NO_ERROR;
737        }
738    }
739
740    int64_t token = IPCThreadState::self()->clearCallingIdentity();
741    ret = initializeShimMetadata(cameraId);
742    IPCThreadState::self()->restoreCallingIdentity(token);
743    if (ret != NO_ERROR) {
744        // Error already logged by callee
745        return ret;
746    }
747
748    // Check for parameters again
749    {
750        // Scope for service lock
751        Mutex::Autolock lock(mServiceLock);
752        auto cameraState = getCameraState(id);
753        if (cameraState == nullptr) {
754            ALOGE("%s: Invalid camera ID: %s", __FUNCTION__, id.string());
755            return BAD_VALUE;
756        }
757        CameraParameters p = cameraState->getShimParams();
758        if (!p.isEmpty()) {
759            *parameters = p;
760            return NO_ERROR;
761        }
762    }
763
764    ALOGE("%s: Parameters were not initialized, or were empty.  Device may not be present.",
765            __FUNCTION__);
766    return INVALID_OPERATION;
767}
768
769status_t CameraService::validateConnectLocked(const String8& cameraId, /*inout*/int& clientUid)
770        const {
771
772    int callingPid = getCallingPid();
773
774    if (clientUid == USE_CALLING_UID) {
775        clientUid = getCallingUid();
776    } else {
777        // We only trust our own process to forward client UIDs
778        if (callingPid != getpid()) {
779            ALOGE("CameraService::connect X (PID %d) rejected (don't trust clientUid %d)",
780                    callingPid, clientUid);
781            return PERMISSION_DENIED;
782        }
783    }
784
785    if (!mModule) {
786        ALOGE("CameraService::connect X (PID %d) rejected (camera HAL module not loaded)",
787                callingPid);
788        return -ENODEV;
789    }
790
791    if (getCameraState(cameraId) == nullptr) {
792        ALOGE("CameraService::connect X (PID %d) rejected (invalid camera ID %s)", callingPid,
793                cameraId.string());
794        return -ENODEV;
795    }
796
797    // Check device policy for this camera
798    char value[PROPERTY_VALUE_MAX];
799    char key[PROPERTY_KEY_MAX];
800    userid_t clientUserId = multiuser_get_user_id(clientUid);
801    snprintf(key, PROPERTY_KEY_MAX, "sys.secpolicy.camera.off_%d", clientUserId);
802    property_get(key, value, "0");
803    if (strcmp(value, "1") == 0) {
804        // Camera is disabled by DevicePolicyManager.
805        ALOGE("CameraService::connect X (PID %d) rejected (camera %s is disabled by device "
806                "policy)", callingPid, cameraId.string());
807        return -EACCES;
808    }
809
810    // Only allow clients who are being used by the current foreground device user, unless calling
811    // from our own process.
812    if (callingPid != getpid() && (mAllowedUsers.find(clientUserId) == mAllowedUsers.end())) {
813        ALOGE("CameraService::connect X (PID %d) rejected (cannot connect from "
814                "device user %d, currently allowed device users: %s)", callingPid, clientUserId,
815                toString(mAllowedUsers).string());
816        return PERMISSION_DENIED;
817    }
818
819    return checkIfDeviceIsUsable(cameraId);
820}
821
822status_t CameraService::checkIfDeviceIsUsable(const String8& cameraId) const {
823    auto cameraState = getCameraState(cameraId);
824    int callingPid = getCallingPid();
825    if (cameraState == nullptr) {
826        ALOGE("CameraService::connect X (PID %d) rejected (invalid camera ID %s)", callingPid,
827                cameraId.string());
828        return -ENODEV;
829    }
830
831    ICameraServiceListener::Status currentStatus = cameraState->getStatus();
832    if (currentStatus == ICameraServiceListener::STATUS_NOT_PRESENT) {
833        ALOGE("CameraService::connect X (PID %d) rejected (camera %s is not connected)",
834                callingPid, cameraId.string());
835        return -ENODEV;
836    } else if (currentStatus == ICameraServiceListener::STATUS_ENUMERATING) {
837        ALOGE("CameraService::connect X (PID %d) rejected, (camera %s is initializing)",
838                callingPid, cameraId.string());
839        return -EBUSY;
840    }
841
842    return NO_ERROR;
843}
844
845void CameraService::finishConnectLocked(const sp<BasicClient>& client,
846        const CameraService::DescriptorPtr& desc) {
847
848    // Make a descriptor for the incoming client
849    auto clientDescriptor = CameraService::CameraClientManager::makeClientDescriptor(client, desc);
850    auto evicted = mActiveClientManager.addAndEvict(clientDescriptor);
851
852    logConnected(desc->getKey(), static_cast<int>(desc->getOwnerId()),
853            String8(client->getPackageName()));
854
855    if (evicted.size() > 0) {
856        // This should never happen - clients should already have been removed in disconnect
857        for (auto& i : evicted) {
858            ALOGE("%s: Invalid state: Client for camera %s was not removed in disconnect",
859                    __FUNCTION__, i->getKey().string());
860        }
861
862        LOG_ALWAYS_FATAL("%s: Invalid state for CameraService, clients not evicted properly",
863                __FUNCTION__);
864    }
865}
866
867status_t CameraService::handleEvictionsLocked(const String8& cameraId, int clientPid,
868        apiLevel effectiveApiLevel, const sp<IBinder>& remoteCallback, const String8& packageName,
869        /*out*/
870        sp<BasicClient>* client,
871        std::shared_ptr<resource_policy::ClientDescriptor<String8, sp<BasicClient>>>* partial) {
872
873    status_t ret = NO_ERROR;
874    std::vector<DescriptorPtr> evictedClients;
875    DescriptorPtr clientDescriptor;
876    {
877        if (effectiveApiLevel == API_1) {
878            // If we are using API1, any existing client for this camera ID with the same remote
879            // should be returned rather than evicted to allow MediaRecorder to work properly.
880
881            auto current = mActiveClientManager.get(cameraId);
882            if (current != nullptr) {
883                auto clientSp = current->getValue();
884                if (clientSp.get() != nullptr) { // should never be needed
885                    if (!clientSp->canCastToApiClient(effectiveApiLevel)) {
886                        ALOGW("CameraService connect called from same client, but with a different"
887                                " API level, evicting prior client...");
888                    } else if (clientSp->getRemote() == remoteCallback) {
889                        ALOGI("CameraService::connect X (PID %d) (second call from same"
890                                " app binder, returning the same client)", clientPid);
891                        *client = clientSp;
892                        return NO_ERROR;
893                    }
894                }
895            }
896        }
897
898        // Return error if the device was unplugged or removed by the HAL for some reason
899        if ((ret = checkIfDeviceIsUsable(cameraId)) != NO_ERROR) {
900            return ret;
901        }
902
903        // Get current active client PIDs
904        std::vector<int> ownerPids(mActiveClientManager.getAllOwners());
905        ownerPids.push_back(clientPid);
906
907        // Use the value +PROCESS_STATE_NONEXISTENT, to avoid taking
908        // address of PROCESS_STATE_NONEXISTENT as a reference argument
909        // for the vector constructor. PROCESS_STATE_NONEXISTENT does
910        // not have an out-of-class definition.
911        std::vector<int> priorities(ownerPids.size(), +PROCESS_STATE_NONEXISTENT);
912
913        // Get priorites of all active PIDs
914        ProcessInfoService::getProcessStatesFromPids(ownerPids.size(), &ownerPids[0],
915                /*out*/&priorities[0]);
916
917        // Update all active clients' priorities
918        std::map<int,int> pidToPriorityMap;
919        for (size_t i = 0; i < ownerPids.size() - 1; i++) {
920            pidToPriorityMap.emplace(ownerPids[i], getCameraPriorityFromProcState(priorities[i]));
921        }
922        mActiveClientManager.updatePriorities(pidToPriorityMap);
923
924        // Get state for the given cameraId
925        auto state = getCameraState(cameraId);
926        if (state == nullptr) {
927            ALOGE("CameraService::connect X (PID %d) rejected (no camera device with ID %s)",
928                clientPid, cameraId.string());
929            return BAD_VALUE;
930        }
931
932        // Make descriptor for incoming client
933        clientDescriptor = CameraClientManager::makeClientDescriptor(cameraId,
934                sp<BasicClient>{nullptr}, static_cast<int32_t>(state->getCost()),
935                state->getConflicting(),
936                getCameraPriorityFromProcState(priorities[priorities.size() - 1]), clientPid);
937
938        // Find clients that would be evicted
939        auto evicted = mActiveClientManager.wouldEvict(clientDescriptor);
940
941        // If the incoming client was 'evicted,' higher priority clients have the camera in the
942        // background, so we cannot do evictions
943        if (std::find(evicted.begin(), evicted.end(), clientDescriptor) != evicted.end()) {
944            ALOGE("CameraService::connect X (PID %d) rejected (existing client(s) with higher"
945                    " priority).", clientPid);
946
947            sp<BasicClient> clientSp = clientDescriptor->getValue();
948            String8 curTime = getFormattedCurrentTime();
949            auto incompatibleClients =
950                    mActiveClientManager.getIncompatibleClients(clientDescriptor);
951
952            String8 msg = String8::format("%s : DENIED connect device %s client for package %s "
953                    "(PID %d, priority %d) due to eviction policy", curTime.string(),
954                    cameraId.string(), packageName.string(), clientPid,
955                    getCameraPriorityFromProcState(priorities[priorities.size() - 1]));
956
957            for (auto& i : incompatibleClients) {
958                msg.appendFormat("\n   - Blocked by existing device %s client for package %s"
959                        "(PID %" PRId32 ", priority %" PRId32 ")", i->getKey().string(),
960                        String8{i->getValue()->getPackageName()}.string(), i->getOwnerId(),
961                        i->getPriority());
962                ALOGE("   Conflicts with: Device %s, client package %s (PID %"
963                        PRId32 ", priority %" PRId32 ")", i->getKey().string(),
964                        String8{i->getValue()->getPackageName()}.string(), i->getOwnerId(),
965                        i->getPriority());
966            }
967
968            // Log the client's attempt
969            Mutex::Autolock l(mLogLock);
970            mEventLog.add(msg);
971
972            return -EBUSY;
973        }
974
975        for (auto& i : evicted) {
976            sp<BasicClient> clientSp = i->getValue();
977            if (clientSp.get() == nullptr) {
978                ALOGE("%s: Invalid state: Null client in active client list.", __FUNCTION__);
979
980                // TODO: Remove this
981                LOG_ALWAYS_FATAL("%s: Invalid state for CameraService, null client in active list",
982                        __FUNCTION__);
983                mActiveClientManager.remove(i);
984                continue;
985            }
986
987            ALOGE("CameraService::connect evicting conflicting client for camera ID %s",
988                    i->getKey().string());
989            evictedClients.push_back(i);
990
991            // Log the clients evicted
992            logEvent(String8::format("EVICT device %s client held by package %s (PID"
993                    " %" PRId32 ", priority %" PRId32 ")\n   - Evicted by device %s client for"
994                    " package %s (PID %d, priority %" PRId32 ")",
995                    i->getKey().string(), String8{clientSp->getPackageName()}.string(),
996                    i->getOwnerId(), i->getPriority(), cameraId.string(),
997                    packageName.string(), clientPid,
998                    getCameraPriorityFromProcState(priorities[priorities.size() - 1])));
999
1000            // Notify the client of disconnection
1001            clientSp->notifyError(ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED,
1002                    CaptureResultExtras());
1003        }
1004    }
1005
1006    // Do not hold mServiceLock while disconnecting clients, but retain the condition blocking
1007    // other clients from connecting in mServiceLockWrapper if held
1008    mServiceLock.unlock();
1009
1010    // Clear caller identity temporarily so client disconnect PID checks work correctly
1011    int64_t token = IPCThreadState::self()->clearCallingIdentity();
1012
1013    // Destroy evicted clients
1014    for (auto& i : evictedClients) {
1015        // Disconnect is blocking, and should only have returned when HAL has cleaned up
1016        i->getValue()->disconnect(); // Clients will remove themselves from the active client list
1017    }
1018
1019    IPCThreadState::self()->restoreCallingIdentity(token);
1020
1021    for (const auto& i : evictedClients) {
1022        ALOGV("%s: Waiting for disconnect to complete for client for device %s (PID %" PRId32 ")",
1023                __FUNCTION__, i->getKey().string(), i->getOwnerId());
1024        ret = mActiveClientManager.waitUntilRemoved(i, DEFAULT_DISCONNECT_TIMEOUT_NS);
1025        if (ret == TIMED_OUT) {
1026            ALOGE("%s: Timed out waiting for client for device %s to disconnect, "
1027                    "current clients:\n%s", __FUNCTION__, i->getKey().string(),
1028                    mActiveClientManager.toString().string());
1029            return -EBUSY;
1030        }
1031        if (ret != NO_ERROR) {
1032            ALOGE("%s: Received error waiting for client for device %s to disconnect: %s (%d), "
1033                    "current clients:\n%s", __FUNCTION__, i->getKey().string(), strerror(-ret),
1034                    ret, mActiveClientManager.toString().string());
1035            return ret;
1036        }
1037    }
1038
1039    evictedClients.clear();
1040
1041    // Once clients have been disconnected, relock
1042    mServiceLock.lock();
1043
1044    // Check again if the device was unplugged or something while we weren't holding mServiceLock
1045    if ((ret = checkIfDeviceIsUsable(cameraId)) != NO_ERROR) {
1046        return ret;
1047    }
1048
1049    *partial = clientDescriptor;
1050    return NO_ERROR;
1051}
1052
1053status_t CameraService::connect(
1054        const sp<ICameraClient>& cameraClient,
1055        int cameraId,
1056        const String16& clientPackageName,
1057        int clientUid,
1058        /*out*/
1059        sp<ICamera>& device) {
1060
1061    status_t ret = NO_ERROR;
1062    String8 id = String8::format("%d", cameraId);
1063    sp<Client> client = nullptr;
1064    ret = connectHelper<ICameraClient,Client>(cameraClient, id, CAMERA_HAL_API_VERSION_UNSPECIFIED,
1065            clientPackageName, clientUid, API_1, false, false, /*out*/client);
1066
1067    if(ret != NO_ERROR) {
1068        logRejected(id, getCallingPid(), String8(clientPackageName),
1069                String8::format("%s (%d)", strerror(-ret), ret));
1070        return ret;
1071    }
1072
1073    device = client;
1074    return NO_ERROR;
1075}
1076
1077status_t CameraService::connectLegacy(
1078        const sp<ICameraClient>& cameraClient,
1079        int cameraId, int halVersion,
1080        const String16& clientPackageName,
1081        int clientUid,
1082        /*out*/
1083        sp<ICamera>& device) {
1084
1085    String8 id = String8::format("%d", cameraId);
1086    int apiVersion = mModule->getModuleApiVersion();
1087    if (halVersion != CAMERA_HAL_API_VERSION_UNSPECIFIED &&
1088            apiVersion < CAMERA_MODULE_API_VERSION_2_3) {
1089        /*
1090         * Either the HAL version is unspecified in which case this just creates
1091         * a camera client selected by the latest device version, or
1092         * it's a particular version in which case the HAL must supported
1093         * the open_legacy call
1094         */
1095        ALOGE("%s: camera HAL module version %x doesn't support connecting to legacy HAL devices!",
1096                __FUNCTION__, apiVersion);
1097        logRejected(id, getCallingPid(), String8(clientPackageName),
1098                String8("HAL module version doesn't support legacy HAL connections"));
1099        return INVALID_OPERATION;
1100    }
1101
1102    status_t ret = NO_ERROR;
1103    sp<Client> client = nullptr;
1104    ret = connectHelper<ICameraClient,Client>(cameraClient, id, halVersion, clientPackageName,
1105            clientUid, API_1, true, false, /*out*/client);
1106
1107    if(ret != NO_ERROR) {
1108        logRejected(id, getCallingPid(), String8(clientPackageName),
1109                String8::format("%s (%d)", strerror(-ret), ret));
1110        return ret;
1111    }
1112
1113    device = client;
1114    return NO_ERROR;
1115}
1116
1117status_t CameraService::connectDevice(
1118        const sp<ICameraDeviceCallbacks>& cameraCb,
1119        int cameraId,
1120        const String16& clientPackageName,
1121        int clientUid,
1122        /*out*/
1123        sp<ICameraDeviceUser>& device) {
1124
1125    status_t ret = NO_ERROR;
1126    String8 id = String8::format("%d", cameraId);
1127    sp<CameraDeviceClient> client = nullptr;
1128    ret = connectHelper<ICameraDeviceCallbacks,CameraDeviceClient>(cameraCb, id,
1129            CAMERA_HAL_API_VERSION_UNSPECIFIED, clientPackageName, clientUid, API_2, false, false,
1130            /*out*/client);
1131
1132    if(ret != NO_ERROR) {
1133        logRejected(id, getCallingPid(), String8(clientPackageName),
1134                String8::format("%s (%d)", strerror(-ret), ret));
1135        return ret;
1136    }
1137
1138    device = client;
1139    return NO_ERROR;
1140}
1141
1142status_t CameraService::setTorchMode(const String16& cameraId, bool enabled,
1143        const sp<IBinder>& clientBinder) {
1144    if (enabled && clientBinder == NULL) {
1145        ALOGE("%s: torch client binder is NULL", __FUNCTION__);
1146        return -EINVAL;
1147    }
1148
1149    String8 id = String8(cameraId.string());
1150
1151    // verify id is valid.
1152    auto state = getCameraState(id);
1153    if (state == nullptr) {
1154        ALOGE("%s: camera id is invalid %s", __FUNCTION__, id.string());
1155        return -EINVAL;
1156    }
1157
1158    ICameraServiceListener::Status cameraStatus = state->getStatus();
1159    if (cameraStatus != ICameraServiceListener::STATUS_PRESENT &&
1160            cameraStatus != ICameraServiceListener::STATUS_NOT_AVAILABLE) {
1161        ALOGE("%s: camera id is invalid %s", __FUNCTION__, id.string());
1162        return -EINVAL;
1163    }
1164
1165    {
1166        Mutex::Autolock al(mTorchStatusMutex);
1167        ICameraServiceListener::TorchStatus status;
1168        status_t res = getTorchStatusLocked(id, &status);
1169        if (res) {
1170            ALOGE("%s: getting current torch status failed for camera %s",
1171                    __FUNCTION__, id.string());
1172            return -EINVAL;
1173        }
1174
1175        if (status == ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE) {
1176            if (cameraStatus == ICameraServiceListener::STATUS_NOT_AVAILABLE) {
1177                ALOGE("%s: torch mode of camera %s is not available because "
1178                        "camera is in use", __FUNCTION__, id.string());
1179                return -EBUSY;
1180            } else {
1181                ALOGE("%s: torch mode of camera %s is not available due to "
1182                        "insufficient resources", __FUNCTION__, id.string());
1183                return -EUSERS;
1184            }
1185        }
1186    }
1187
1188    status_t res = mFlashlight->setTorchMode(id, enabled);
1189    if (res) {
1190        ALOGE("%s: setting torch mode of camera %s to %d failed. %s (%d)",
1191                __FUNCTION__, id.string(), enabled, strerror(-res), res);
1192        return res;
1193    }
1194
1195    {
1196        // update the link to client's death
1197        Mutex::Autolock al(mTorchClientMapMutex);
1198        ssize_t index = mTorchClientMap.indexOfKey(id);
1199        if (enabled) {
1200            if (index == NAME_NOT_FOUND) {
1201                mTorchClientMap.add(id, clientBinder);
1202            } else {
1203                const sp<IBinder> oldBinder = mTorchClientMap.valueAt(index);
1204                oldBinder->unlinkToDeath(this);
1205
1206                mTorchClientMap.replaceValueAt(index, clientBinder);
1207            }
1208            clientBinder->linkToDeath(this);
1209        } else if (index != NAME_NOT_FOUND) {
1210            sp<IBinder> oldBinder = mTorchClientMap.valueAt(index);
1211            oldBinder->unlinkToDeath(this);
1212        }
1213    }
1214
1215    return OK;
1216}
1217
1218void CameraService::notifySystemEvent(int32_t eventId, const int32_t* args, size_t length) {
1219    switch(eventId) {
1220        case ICameraService::USER_SWITCHED: {
1221            doUserSwitch(/*newUserIds*/args, /*length*/length);
1222            break;
1223        }
1224        case ICameraService::NO_EVENT:
1225        default: {
1226            ALOGW("%s: Received invalid system event from system_server: %d", __FUNCTION__,
1227                    eventId);
1228            break;
1229        }
1230    }
1231}
1232
1233status_t CameraService::addListener(
1234                                const sp<ICameraServiceListener>& listener) {
1235    ALOGV("%s: Add listener %p", __FUNCTION__, listener.get());
1236
1237    if (listener == 0) {
1238        ALOGE("%s: Listener must not be null", __FUNCTION__);
1239        return BAD_VALUE;
1240    }
1241
1242    Mutex::Autolock lock(mServiceLock);
1243
1244    {
1245        Mutex::Autolock lock(mStatusListenerLock);
1246        for (auto& it : mListenerList) {
1247            if (IInterface::asBinder(it) == IInterface::asBinder(listener)) {
1248                ALOGW("%s: Tried to add listener %p which was already subscribed",
1249                      __FUNCTION__, listener.get());
1250                return ALREADY_EXISTS;
1251            }
1252        }
1253
1254        mListenerList.push_back(listener);
1255    }
1256
1257
1258    /* Immediately signal current status to this listener only */
1259    {
1260        Mutex::Autolock lock(mCameraStatesLock);
1261        for (auto& i : mCameraStates) {
1262            // TODO: Update binder to use String16 for camera IDs and remove;
1263            int id = cameraIdToInt(i.first);
1264            if (id == -1) continue;
1265
1266            listener->onStatusChanged(i.second->getStatus(), id);
1267        }
1268    }
1269
1270    /* Immediately signal current torch status to this listener only */
1271    {
1272        Mutex::Autolock al(mTorchStatusMutex);
1273        for (size_t i = 0; i < mTorchStatusMap.size(); i++ ) {
1274            String16 id = String16(mTorchStatusMap.keyAt(i).string());
1275            listener->onTorchStatusChanged(mTorchStatusMap.valueAt(i), id);
1276        }
1277    }
1278
1279    return OK;
1280}
1281
1282status_t CameraService::removeListener(const sp<ICameraServiceListener>& listener) {
1283    ALOGV("%s: Remove listener %p", __FUNCTION__, listener.get());
1284
1285    if (listener == 0) {
1286        ALOGE("%s: Listener must not be null", __FUNCTION__);
1287        return BAD_VALUE;
1288    }
1289
1290    Mutex::Autolock lock(mServiceLock);
1291
1292    {
1293        Mutex::Autolock lock(mStatusListenerLock);
1294        for (auto it = mListenerList.begin(); it != mListenerList.end(); it++) {
1295            if (IInterface::asBinder(*it) == IInterface::asBinder(listener)) {
1296                mListenerList.erase(it);
1297                return OK;
1298            }
1299        }
1300    }
1301
1302    ALOGW("%s: Tried to remove a listener %p which was not subscribed",
1303          __FUNCTION__, listener.get());
1304
1305    return BAD_VALUE;
1306}
1307
1308status_t CameraService::getLegacyParameters(int cameraId, /*out*/String16* parameters) {
1309    ALOGV("%s: for camera ID = %d", __FUNCTION__, cameraId);
1310
1311    if (parameters == NULL) {
1312        ALOGE("%s: parameters must not be null", __FUNCTION__);
1313        return BAD_VALUE;
1314    }
1315
1316    status_t ret = 0;
1317
1318    CameraParameters shimParams;
1319    if ((ret = getLegacyParametersLazy(cameraId, /*out*/&shimParams)) != OK) {
1320        // Error logged by caller
1321        return ret;
1322    }
1323
1324    String8 shimParamsString8 = shimParams.flatten();
1325    String16 shimParamsString16 = String16(shimParamsString8);
1326
1327    *parameters = shimParamsString16;
1328
1329    return OK;
1330}
1331
1332status_t CameraService::supportsCameraApi(int cameraId, int apiVersion) {
1333    ALOGV("%s: for camera ID = %d", __FUNCTION__, cameraId);
1334
1335    switch (apiVersion) {
1336        case API_VERSION_1:
1337        case API_VERSION_2:
1338            break;
1339        default:
1340            ALOGE("%s: Bad API version %d", __FUNCTION__, apiVersion);
1341            return BAD_VALUE;
1342    }
1343
1344    int facing = -1;
1345    int deviceVersion = getDeviceVersion(cameraId, &facing);
1346
1347    switch(deviceVersion) {
1348      case CAMERA_DEVICE_API_VERSION_1_0:
1349      case CAMERA_DEVICE_API_VERSION_2_0:
1350      case CAMERA_DEVICE_API_VERSION_2_1:
1351      case CAMERA_DEVICE_API_VERSION_3_0:
1352      case CAMERA_DEVICE_API_VERSION_3_1:
1353        if (apiVersion == API_VERSION_2) {
1354            ALOGV("%s: Camera id %d uses HAL prior to HAL3.2, doesn't support api2 without shim",
1355                    __FUNCTION__, cameraId);
1356            return -EOPNOTSUPP;
1357        } else { // if (apiVersion == API_VERSION_1) {
1358            ALOGV("%s: Camera id %d uses older HAL before 3.2, but api1 is always supported",
1359                    __FUNCTION__, cameraId);
1360            return OK;
1361        }
1362      case CAMERA_DEVICE_API_VERSION_3_2:
1363      case CAMERA_DEVICE_API_VERSION_3_3:
1364        ALOGV("%s: Camera id %d uses HAL3.2 or newer, supports api1/api2 directly",
1365                __FUNCTION__, cameraId);
1366        return OK;
1367      case -1:
1368        ALOGE("%s: Invalid camera id %d", __FUNCTION__, cameraId);
1369        return BAD_VALUE;
1370      default:
1371        ALOGE("%s: Unknown camera device HAL version: %d", __FUNCTION__, deviceVersion);
1372        return INVALID_OPERATION;
1373    }
1374
1375    return OK;
1376}
1377
1378void CameraService::removeByClient(const BasicClient* client) {
1379    Mutex::Autolock lock(mServiceLock);
1380    for (auto& i : mActiveClientManager.getAll()) {
1381        auto clientSp = i->getValue();
1382        if (clientSp.get() == client) {
1383            mActiveClientManager.remove(i);
1384        }
1385    }
1386}
1387
1388bool CameraService::evictClientIdByRemote(const wp<IBinder>& remote) {
1389    const int callingPid = getCallingPid();
1390    const int servicePid = getpid();
1391    bool ret = false;
1392    {
1393        // Acquire mServiceLock and prevent other clients from connecting
1394        std::unique_ptr<AutoConditionLock> lock =
1395                AutoConditionLock::waitAndAcquire(mServiceLockWrapper);
1396
1397
1398        std::vector<sp<BasicClient>> evicted;
1399        for (auto& i : mActiveClientManager.getAll()) {
1400            auto clientSp = i->getValue();
1401            if (clientSp.get() == nullptr) {
1402                ALOGE("%s: Dead client still in mActiveClientManager.", __FUNCTION__);
1403                mActiveClientManager.remove(i);
1404                continue;
1405            }
1406            if (remote == clientSp->getRemote() && (callingPid == servicePid ||
1407                    callingPid == clientSp->getClientPid())) {
1408                mActiveClientManager.remove(i);
1409                evicted.push_back(clientSp);
1410
1411                // Notify the client of disconnection
1412                clientSp->notifyError(ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED,
1413                        CaptureResultExtras());
1414            }
1415        }
1416
1417        // Do not hold mServiceLock while disconnecting clients, but retain the condition blocking
1418        // other clients from connecting in mServiceLockWrapper if held
1419        mServiceLock.unlock();
1420
1421        // Do not clear caller identity, remote caller should be client proccess
1422
1423        for (auto& i : evicted) {
1424            if (i.get() != nullptr) {
1425                i->disconnect();
1426                ret = true;
1427            }
1428        }
1429
1430        // Reacquire mServiceLock
1431        mServiceLock.lock();
1432
1433    } // lock is destroyed, allow further connect calls
1434
1435    return ret;
1436}
1437
1438
1439std::shared_ptr<CameraService::CameraState> CameraService::getCameraState(
1440        const String8& cameraId) const {
1441    std::shared_ptr<CameraState> state;
1442    {
1443        Mutex::Autolock lock(mCameraStatesLock);
1444        auto iter = mCameraStates.find(cameraId);
1445        if (iter != mCameraStates.end()) {
1446            state = iter->second;
1447        }
1448    }
1449    return state;
1450}
1451
1452sp<CameraService::BasicClient> CameraService::removeClientLocked(const String8& cameraId) {
1453    // Remove from active clients list
1454    auto clientDescriptorPtr = mActiveClientManager.remove(cameraId);
1455    if (clientDescriptorPtr == nullptr) {
1456        ALOGW("%s: Could not evict client, no client for camera ID %s", __FUNCTION__,
1457                cameraId.string());
1458        return sp<BasicClient>{nullptr};
1459    }
1460
1461    return clientDescriptorPtr->getValue();
1462}
1463
1464void CameraService::doUserSwitch(const int32_t* newUserId, size_t length) {
1465    // Acquire mServiceLock and prevent other clients from connecting
1466    std::unique_ptr<AutoConditionLock> lock =
1467            AutoConditionLock::waitAndAcquire(mServiceLockWrapper);
1468
1469    std::set<userid_t> newAllowedUsers;
1470    for (size_t i = 0; i < length; i++) {
1471        if (newUserId[i] < 0) {
1472            ALOGE("%s: Bad user ID %d given during user switch, ignoring.",
1473                    __FUNCTION__, newUserId[i]);
1474            return;
1475        }
1476        newAllowedUsers.insert(static_cast<userid_t>(newUserId[i]));
1477    }
1478
1479
1480    if (newAllowedUsers == mAllowedUsers) {
1481        ALOGW("%s: Received notification of user switch with no updated user IDs.", __FUNCTION__);
1482        return;
1483    }
1484
1485    logUserSwitch(mAllowedUsers, newAllowedUsers);
1486
1487    mAllowedUsers = std::move(newAllowedUsers);
1488
1489    // Current user has switched, evict all current clients.
1490    std::vector<sp<BasicClient>> evicted;
1491    for (auto& i : mActiveClientManager.getAll()) {
1492        auto clientSp = i->getValue();
1493
1494        if (clientSp.get() == nullptr) {
1495            ALOGE("%s: Dead client still in mActiveClientManager.", __FUNCTION__);
1496            continue;
1497        }
1498
1499        // Don't evict clients that are still allowed.
1500        uid_t clientUid = clientSp->getClientUid();
1501        userid_t clientUserId = multiuser_get_user_id(clientUid);
1502        if (mAllowedUsers.find(clientUserId) != mAllowedUsers.end()) {
1503            continue;
1504        }
1505
1506        evicted.push_back(clientSp);
1507
1508        String8 curTime = getFormattedCurrentTime();
1509
1510        ALOGE("Evicting conflicting client for camera ID %s due to user change",
1511                i->getKey().string());
1512
1513        // Log the clients evicted
1514        logEvent(String8::format("EVICT device %s client held by package %s (PID %"
1515                PRId32 ", priority %" PRId32 ")\n   - Evicted due to user switch.",
1516                i->getKey().string(), String8{clientSp->getPackageName()}.string(),
1517                i->getOwnerId(), i->getPriority()));
1518
1519    }
1520
1521    // Do not hold mServiceLock while disconnecting clients, but retain the condition
1522    // blocking other clients from connecting in mServiceLockWrapper if held.
1523    mServiceLock.unlock();
1524
1525    // Clear caller identity temporarily so client disconnect PID checks work correctly
1526    int64_t token = IPCThreadState::self()->clearCallingIdentity();
1527
1528    for (auto& i : evicted) {
1529        i->disconnect();
1530    }
1531
1532    IPCThreadState::self()->restoreCallingIdentity(token);
1533
1534    // Reacquire mServiceLock
1535    mServiceLock.lock();
1536}
1537
1538void CameraService::logEvent(const char* event) {
1539    String8 curTime = getFormattedCurrentTime();
1540    Mutex::Autolock l(mLogLock);
1541    mEventLog.add(String8::format("%s : %s", curTime.string(), event));
1542}
1543
1544void CameraService::logDisconnected(const char* cameraId, int clientPid,
1545        const char* clientPackage) {
1546    // Log the clients evicted
1547    logEvent(String8::format("DISCONNECT device %s client for package %s (PID %d)", cameraId,
1548            clientPackage, clientPid));
1549}
1550
1551void CameraService::logConnected(const char* cameraId, int clientPid,
1552        const char* clientPackage) {
1553    // Log the clients evicted
1554    logEvent(String8::format("CONNECT device %s client for package %s (PID %d)", cameraId,
1555            clientPackage, clientPid));
1556}
1557
1558void CameraService::logRejected(const char* cameraId, int clientPid,
1559        const char* clientPackage, const char* reason) {
1560    // Log the client rejected
1561    logEvent(String8::format("REJECT device %s client for package %s (PID %d), reason: (%s)",
1562            cameraId, clientPackage, clientPid, reason));
1563}
1564
1565void CameraService::logUserSwitch(const std::set<userid_t>& oldUserIds,
1566        const std::set<userid_t>& newUserIds) {
1567    String8 newUsers = toString(newUserIds);
1568    String8 oldUsers = toString(oldUserIds);
1569    // Log the new and old users
1570    logEvent(String8::format("USER_SWITCH previous allowed users: %s , current allowed users: %s",
1571            oldUsers.string(), newUsers.string()));
1572}
1573
1574void CameraService::logDeviceRemoved(const char* cameraId, const char* reason) {
1575    // Log the device removal
1576    logEvent(String8::format("REMOVE device %s, reason: (%s)", cameraId, reason));
1577}
1578
1579void CameraService::logDeviceAdded(const char* cameraId, const char* reason) {
1580    // Log the device removal
1581    logEvent(String8::format("ADD device %s, reason: (%s)", cameraId, reason));
1582}
1583
1584void CameraService::logClientDied(int clientPid, const char* reason) {
1585    // Log the device removal
1586    logEvent(String8::format("DIED client(s) with PID %d, reason: (%s)", clientPid, reason));
1587}
1588
1589void CameraService::logServiceError(const char* msg, int errorCode) {
1590    String8 curTime = getFormattedCurrentTime();
1591    logEvent(String8::format("SERVICE ERROR: %s : %d (%s)", msg, errorCode, strerror(errorCode)));
1592}
1593
1594status_t CameraService::onTransact(uint32_t code, const Parcel& data, Parcel* reply,
1595        uint32_t flags) {
1596
1597    const int pid = getCallingPid();
1598    const int selfPid = getpid();
1599
1600    // Permission checks
1601    switch (code) {
1602        case BnCameraService::CONNECT:
1603        case BnCameraService::CONNECT_DEVICE:
1604        case BnCameraService::CONNECT_LEGACY: {
1605            if (pid != selfPid) {
1606                // we're called from a different process, do the real check
1607                if (!checkCallingPermission(
1608                        String16("android.permission.CAMERA"))) {
1609                    const int uid = getCallingUid();
1610                    ALOGE("Permission Denial: "
1611                         "can't use the camera pid=%d, uid=%d", pid, uid);
1612                    return PERMISSION_DENIED;
1613                }
1614            }
1615            break;
1616        }
1617        case BnCameraService::NOTIFY_SYSTEM_EVENT: {
1618            if (pid != selfPid) {
1619                // Ensure we're being called by system_server, or similar process with
1620                // permissions to notify the camera service about system events
1621                if (!checkCallingPermission(
1622                        String16("android.permission.CAMERA_SEND_SYSTEM_EVENTS"))) {
1623                    const int uid = getCallingUid();
1624                    ALOGE("Permission Denial: cannot send updates to camera service about system"
1625                            " events from pid=%d, uid=%d", pid, uid);
1626                    return PERMISSION_DENIED;
1627                }
1628            }
1629            break;
1630        }
1631    }
1632
1633    return BnCameraService::onTransact(code, data, reply, flags);
1634}
1635
1636// We share the media players for shutter and recording sound for all clients.
1637// A reference count is kept to determine when we will actually release the
1638// media players.
1639
1640MediaPlayer* CameraService::newMediaPlayer(const char *file) {
1641    MediaPlayer* mp = new MediaPlayer();
1642    if (mp->setDataSource(NULL /* httpService */, file, NULL) == NO_ERROR) {
1643        mp->setAudioStreamType(AUDIO_STREAM_ENFORCED_AUDIBLE);
1644        mp->prepare();
1645    } else {
1646        ALOGE("Failed to load CameraService sounds: %s", file);
1647        return NULL;
1648    }
1649    return mp;
1650}
1651
1652void CameraService::loadSound() {
1653    Mutex::Autolock lock(mSoundLock);
1654    LOG1("CameraService::loadSound ref=%d", mSoundRef);
1655    if (mSoundRef++) return;
1656
1657    mSoundPlayer[SOUND_SHUTTER] = newMediaPlayer("/system/media/audio/ui/camera_click.ogg");
1658    mSoundPlayer[SOUND_RECORDING] = newMediaPlayer("/system/media/audio/ui/VideoRecord.ogg");
1659}
1660
1661void CameraService::releaseSound() {
1662    Mutex::Autolock lock(mSoundLock);
1663    LOG1("CameraService::releaseSound ref=%d", mSoundRef);
1664    if (--mSoundRef) return;
1665
1666    for (int i = 0; i < NUM_SOUNDS; i++) {
1667        if (mSoundPlayer[i] != 0) {
1668            mSoundPlayer[i]->disconnect();
1669            mSoundPlayer[i].clear();
1670        }
1671    }
1672}
1673
1674void CameraService::playSound(sound_kind kind) {
1675    LOG1("playSound(%d)", kind);
1676    Mutex::Autolock lock(mSoundLock);
1677    sp<MediaPlayer> player = mSoundPlayer[kind];
1678    if (player != 0) {
1679        player->seekTo(0);
1680        player->start();
1681    }
1682}
1683
1684// ----------------------------------------------------------------------------
1685
1686CameraService::Client::Client(const sp<CameraService>& cameraService,
1687        const sp<ICameraClient>& cameraClient,
1688        const String16& clientPackageName,
1689        int cameraId, int cameraFacing,
1690        int clientPid, uid_t clientUid,
1691        int servicePid) :
1692        CameraService::BasicClient(cameraService,
1693                IInterface::asBinder(cameraClient),
1694                clientPackageName,
1695                cameraId, cameraFacing,
1696                clientPid, clientUid,
1697                servicePid)
1698{
1699    int callingPid = getCallingPid();
1700    LOG1("Client::Client E (pid %d, id %d)", callingPid, cameraId);
1701
1702    mRemoteCallback = cameraClient;
1703
1704    cameraService->loadSound();
1705
1706    LOG1("Client::Client X (pid %d, id %d)", callingPid, cameraId);
1707}
1708
1709// tear down the client
1710CameraService::Client::~Client() {
1711    ALOGV("~Client");
1712    mDestructionStarted = true;
1713
1714    mCameraService->releaseSound();
1715    // unconditionally disconnect. function is idempotent
1716    Client::disconnect();
1717}
1718
1719CameraService::BasicClient::BasicClient(const sp<CameraService>& cameraService,
1720        const sp<IBinder>& remoteCallback,
1721        const String16& clientPackageName,
1722        int cameraId, int cameraFacing,
1723        int clientPid, uid_t clientUid,
1724        int servicePid):
1725        mClientPackageName(clientPackageName), mDisconnected(false)
1726{
1727    mCameraService = cameraService;
1728    mRemoteBinder = remoteCallback;
1729    mCameraId = cameraId;
1730    mCameraFacing = cameraFacing;
1731    mClientPid = clientPid;
1732    mClientUid = clientUid;
1733    mServicePid = servicePid;
1734    mOpsActive = false;
1735    mDestructionStarted = false;
1736}
1737
1738CameraService::BasicClient::~BasicClient() {
1739    ALOGV("~BasicClient");
1740    mDestructionStarted = true;
1741}
1742
1743void CameraService::BasicClient::disconnect() {
1744    if (mDisconnected) {
1745        ALOGE("%s: Disconnect called on already disconnected client for device %d", __FUNCTION__,
1746                mCameraId);
1747        return;
1748    }
1749    mDisconnected = true;;
1750
1751    mCameraService->removeByClient(this);
1752    mCameraService->logDisconnected(String8::format("%d", mCameraId), mClientPid,
1753            String8(mClientPackageName));
1754
1755    sp<IBinder> remote = getRemote();
1756    if (remote != nullptr) {
1757        remote->unlinkToDeath(mCameraService);
1758    }
1759
1760    finishCameraOps();
1761    ALOGI("%s: Disconnected client for camera %d for PID %d", __FUNCTION__, mCameraId, mClientPid);
1762
1763    // client shouldn't be able to call into us anymore
1764    mClientPid = 0;
1765}
1766
1767String16 CameraService::BasicClient::getPackageName() const {
1768    return mClientPackageName;
1769}
1770
1771
1772int CameraService::BasicClient::getClientPid() const {
1773    return mClientPid;
1774}
1775
1776uid_t CameraService::BasicClient::getClientUid() const {
1777    return mClientUid;
1778}
1779
1780bool CameraService::BasicClient::canCastToApiClient(apiLevel level) const {
1781    // Defaults to API2.
1782    return level == API_2;
1783}
1784
1785status_t CameraService::BasicClient::startCameraOps() {
1786    int32_t res;
1787    // Notify app ops that the camera is not available
1788    mOpsCallback = new OpsCallback(this);
1789
1790    {
1791        ALOGV("%s: Start camera ops, package name = %s, client UID = %d",
1792              __FUNCTION__, String8(mClientPackageName).string(), mClientUid);
1793    }
1794
1795    mAppOpsManager.startWatchingMode(AppOpsManager::OP_CAMERA,
1796            mClientPackageName, mOpsCallback);
1797    res = mAppOpsManager.startOp(AppOpsManager::OP_CAMERA,
1798            mClientUid, mClientPackageName);
1799
1800    if (res == AppOpsManager::MODE_ERRORED) {
1801        ALOGI("Camera %d: Access for \"%s\" has been revoked",
1802                mCameraId, String8(mClientPackageName).string());
1803        return PERMISSION_DENIED;
1804    }
1805
1806    if (res == AppOpsManager::MODE_IGNORED) {
1807        ALOGI("Camera %d: Access for \"%s\" has been restricted",
1808                mCameraId, String8(mClientPackageName).string());
1809        return INVALID_OPERATION;
1810    }
1811
1812    mOpsActive = true;
1813
1814    // Transition device availability listeners from PRESENT -> NOT_AVAILABLE
1815    mCameraService->updateStatus(ICameraServiceListener::STATUS_NOT_AVAILABLE,
1816            String8::format("%d", mCameraId));
1817
1818    return OK;
1819}
1820
1821status_t CameraService::BasicClient::finishCameraOps() {
1822    // Check if startCameraOps succeeded, and if so, finish the camera op
1823    if (mOpsActive) {
1824        // Notify app ops that the camera is available again
1825        mAppOpsManager.finishOp(AppOpsManager::OP_CAMERA, mClientUid,
1826                mClientPackageName);
1827        mOpsActive = false;
1828
1829        auto rejected = {ICameraServiceListener::STATUS_NOT_PRESENT,
1830                ICameraServiceListener::STATUS_ENUMERATING};
1831
1832        // Transition to PRESENT if the camera is not in either of the rejected states
1833        mCameraService->updateStatus(ICameraServiceListener::STATUS_PRESENT,
1834                String8::format("%d", mCameraId), rejected);
1835
1836        // Notify flashlight that a camera device is closed.
1837        mCameraService->mFlashlight->deviceClosed(
1838                String8::format("%d", mCameraId));
1839    }
1840    // Always stop watching, even if no camera op is active
1841    if (mOpsCallback != NULL) {
1842        mAppOpsManager.stopWatchingMode(mOpsCallback);
1843    }
1844    mOpsCallback.clear();
1845
1846    return OK;
1847}
1848
1849void CameraService::BasicClient::opChanged(int32_t op, const String16& packageName) {
1850    String8 name(packageName);
1851    String8 myName(mClientPackageName);
1852
1853    if (op != AppOpsManager::OP_CAMERA) {
1854        ALOGW("Unexpected app ops notification received: %d", op);
1855        return;
1856    }
1857
1858    int32_t res;
1859    res = mAppOpsManager.checkOp(AppOpsManager::OP_CAMERA,
1860            mClientUid, mClientPackageName);
1861    ALOGV("checkOp returns: %d, %s ", res,
1862            res == AppOpsManager::MODE_ALLOWED ? "ALLOWED" :
1863            res == AppOpsManager::MODE_IGNORED ? "IGNORED" :
1864            res == AppOpsManager::MODE_ERRORED ? "ERRORED" :
1865            "UNKNOWN");
1866
1867    if (res != AppOpsManager::MODE_ALLOWED) {
1868        ALOGI("Camera %d: Access for \"%s\" revoked", mCameraId,
1869                myName.string());
1870        // Reset the client PID to allow server-initiated disconnect,
1871        // and to prevent further calls by client.
1872        mClientPid = getCallingPid();
1873        CaptureResultExtras resultExtras; // a dummy result (invalid)
1874        notifyError(ICameraDeviceCallbacks::ERROR_CAMERA_SERVICE, resultExtras);
1875        disconnect();
1876    }
1877}
1878
1879// ----------------------------------------------------------------------------
1880
1881// Provide client strong pointer for callbacks.
1882sp<CameraService::Client> CameraService::Client::getClientFromCookie(void* user) {
1883    String8 cameraId = String8::format("%d", (int)(intptr_t) user);
1884    auto clientDescriptor = gCameraService->mActiveClientManager.get(cameraId);
1885    if (clientDescriptor != nullptr) {
1886        return sp<Client>{
1887                static_cast<Client*>(clientDescriptor->getValue().get())};
1888    }
1889    return sp<Client>{nullptr};
1890}
1891
1892void CameraService::Client::notifyError(ICameraDeviceCallbacks::CameraErrorCode errorCode,
1893        const CaptureResultExtras& resultExtras) {
1894    mRemoteCallback->notifyCallback(CAMERA_MSG_ERROR, CAMERA_ERROR_RELEASED, 0);
1895}
1896
1897// NOTE: function is idempotent
1898void CameraService::Client::disconnect() {
1899    ALOGV("Client::disconnect");
1900    BasicClient::disconnect();
1901}
1902
1903bool CameraService::Client::canCastToApiClient(apiLevel level) const {
1904    return level == API_1;
1905}
1906
1907CameraService::Client::OpsCallback::OpsCallback(wp<BasicClient> client):
1908        mClient(client) {
1909}
1910
1911void CameraService::Client::OpsCallback::opChanged(int32_t op,
1912        const String16& packageName) {
1913    sp<BasicClient> client = mClient.promote();
1914    if (client != NULL) {
1915        client->opChanged(op, packageName);
1916    }
1917}
1918
1919// ----------------------------------------------------------------------------
1920//                  CameraState
1921// ----------------------------------------------------------------------------
1922
1923CameraService::CameraState::CameraState(const String8& id, int cost,
1924        const std::set<String8>& conflicting) : mId(id),
1925        mStatus(ICameraServiceListener::STATUS_PRESENT), mCost(cost), mConflicting(conflicting) {}
1926
1927CameraService::CameraState::~CameraState() {}
1928
1929ICameraServiceListener::Status CameraService::CameraState::getStatus() const {
1930    Mutex::Autolock lock(mStatusLock);
1931    return mStatus;
1932}
1933
1934CameraParameters CameraService::CameraState::getShimParams() const {
1935    return mShimParams;
1936}
1937
1938void CameraService::CameraState::setShimParams(const CameraParameters& params) {
1939    mShimParams = params;
1940}
1941
1942int CameraService::CameraState::getCost() const {
1943    return mCost;
1944}
1945
1946std::set<String8> CameraService::CameraState::getConflicting() const {
1947    return mConflicting;
1948}
1949
1950String8 CameraService::CameraState::getId() const {
1951    return mId;
1952}
1953
1954// ----------------------------------------------------------------------------
1955//                  CameraClientManager
1956// ----------------------------------------------------------------------------
1957
1958CameraService::CameraClientManager::~CameraClientManager() {}
1959
1960sp<CameraService::BasicClient> CameraService::CameraClientManager::getCameraClient(
1961        const String8& id) const {
1962    auto descriptor = get(id);
1963    if (descriptor == nullptr) {
1964        return sp<BasicClient>{nullptr};
1965    }
1966    return descriptor->getValue();
1967}
1968
1969String8 CameraService::CameraClientManager::toString() const {
1970    auto all = getAll();
1971    String8 ret("[");
1972    bool hasAny = false;
1973    for (auto& i : all) {
1974        hasAny = true;
1975        String8 key = i->getKey();
1976        int32_t cost = i->getCost();
1977        int32_t pid = i->getOwnerId();
1978        int32_t priority = i->getPriority();
1979        auto conflicting = i->getConflicting();
1980        auto clientSp = i->getValue();
1981        String8 packageName;
1982        userid_t clientUserId = 0;
1983        if (clientSp.get() != nullptr) {
1984            packageName = String8{clientSp->getPackageName()};
1985            uid_t clientUid = clientSp->getClientUid();
1986            clientUserId = multiuser_get_user_id(clientUid);
1987        }
1988        ret.appendFormat("\n(Camera ID: %s, Cost: %" PRId32 ", PID: %" PRId32 ", Priority: %"
1989                PRId32 ", ", key.string(), cost, pid, priority);
1990
1991        if (clientSp.get() != nullptr) {
1992            ret.appendFormat("User Id: %d, ", clientUserId);
1993        }
1994        if (packageName.size() != 0) {
1995            ret.appendFormat("Client Package Name: %s", packageName.string());
1996        }
1997
1998        ret.append(", Conflicting Client Devices: {");
1999        for (auto& j : conflicting) {
2000            ret.appendFormat("%s, ", j.string());
2001        }
2002        ret.append("})");
2003    }
2004    if (hasAny) ret.append("\n");
2005    ret.append("]\n");
2006    return ret;
2007}
2008
2009CameraService::DescriptorPtr CameraService::CameraClientManager::makeClientDescriptor(
2010        const String8& key, const sp<BasicClient>& value, int32_t cost,
2011        const std::set<String8>& conflictingKeys, int32_t priority, int32_t ownerId) {
2012
2013    return std::make_shared<resource_policy::ClientDescriptor<String8, sp<BasicClient>>>(
2014            key, value, cost, conflictingKeys, priority, ownerId);
2015}
2016
2017CameraService::DescriptorPtr CameraService::CameraClientManager::makeClientDescriptor(
2018        const sp<BasicClient>& value, const CameraService::DescriptorPtr& partial) {
2019    return makeClientDescriptor(partial->getKey(), value, partial->getCost(),
2020            partial->getConflicting(), partial->getPriority(), partial->getOwnerId());
2021}
2022
2023// ----------------------------------------------------------------------------
2024
2025static const int kDumpLockRetries = 50;
2026static const int kDumpLockSleep = 60000;
2027
2028static bool tryLock(Mutex& mutex)
2029{
2030    bool locked = false;
2031    for (int i = 0; i < kDumpLockRetries; ++i) {
2032        if (mutex.tryLock() == NO_ERROR) {
2033            locked = true;
2034            break;
2035        }
2036        usleep(kDumpLockSleep);
2037    }
2038    return locked;
2039}
2040
2041status_t CameraService::dump(int fd, const Vector<String16>& args) {
2042    String8 result("Dump of the Camera Service:\n");
2043    if (checkCallingPermission(String16("android.permission.DUMP")) == false) {
2044        result.appendFormat("Permission Denial: "
2045                "can't dump CameraService from pid=%d, uid=%d\n",
2046                getCallingPid(),
2047                getCallingUid());
2048        write(fd, result.string(), result.size());
2049    } else {
2050        bool locked = tryLock(mServiceLock);
2051        // failed to lock - CameraService is probably deadlocked
2052        if (!locked) {
2053            result.append("CameraService may be deadlocked\n");
2054            write(fd, result.string(), result.size());
2055        }
2056
2057        bool hasClient = false;
2058        if (!mModule) {
2059            result = String8::format("No camera module available!\n");
2060            write(fd, result.string(), result.size());
2061
2062            // Dump event log for error information
2063            dumpEventLog(fd);
2064
2065            if (locked) mServiceLock.unlock();
2066            return NO_ERROR;
2067        }
2068
2069        result = String8::format("Camera module HAL API version: 0x%x\n", mModule->getHalApiVersion());
2070        result.appendFormat("Camera module API version: 0x%x\n", mModule->getModuleApiVersion());
2071        result.appendFormat("Camera module name: %s\n", mModule->getModuleName());
2072        result.appendFormat("Camera module author: %s\n", mModule->getModuleAuthor());
2073        result.appendFormat("Number of camera devices: %d\n", mNumberOfCameras);
2074        String8 activeClientString = mActiveClientManager.toString();
2075        result.appendFormat("Active Camera Clients:\n%s", activeClientString.string());
2076        result.appendFormat("Allowed users:\n%s\n", toString(mAllowedUsers).string());
2077
2078        sp<VendorTagDescriptor> desc = VendorTagDescriptor::getGlobalVendorTagDescriptor();
2079        if (desc == NULL) {
2080            result.appendFormat("Vendor tags left unimplemented.\n");
2081        } else {
2082            result.appendFormat("Vendor tag definitions:\n");
2083        }
2084
2085        write(fd, result.string(), result.size());
2086
2087        if (desc != NULL) {
2088            desc->dump(fd, /*verbosity*/2, /*indentation*/4);
2089        }
2090
2091        dumpEventLog(fd);
2092
2093        bool stateLocked = tryLock(mCameraStatesLock);
2094        if (!stateLocked) {
2095            result = String8::format("CameraStates in use, may be deadlocked\n");
2096            write(fd, result.string(), result.size());
2097        }
2098
2099        for (auto& state : mCameraStates) {
2100            String8 cameraId = state.first;
2101            result = String8::format("Camera %s information:\n", cameraId.string());
2102            camera_info info;
2103
2104            // TODO: Change getCameraInfo + HAL to use String cameraIds
2105            status_t rc = mModule->getCameraInfo(cameraIdToInt(cameraId), &info);
2106            if (rc != OK) {
2107                result.appendFormat("  Error reading static information!\n");
2108                write(fd, result.string(), result.size());
2109            } else {
2110                result.appendFormat("  Facing: %s\n",
2111                        info.facing == CAMERA_FACING_BACK ? "BACK" : "FRONT");
2112                result.appendFormat("  Orientation: %d\n", info.orientation);
2113                int deviceVersion;
2114                if (mModule->getModuleApiVersion() < CAMERA_MODULE_API_VERSION_2_0) {
2115                    deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
2116                } else {
2117                    deviceVersion = info.device_version;
2118                }
2119
2120                auto conflicting = state.second->getConflicting();
2121                result.appendFormat("  Resource Cost: %d\n", state.second->getCost());
2122                result.appendFormat("  Conflicting Devices:");
2123                for (auto& id : conflicting) {
2124                    result.appendFormat(" %s", cameraId.string());
2125                }
2126                if (conflicting.size() == 0) {
2127                    result.appendFormat(" NONE");
2128                }
2129                result.appendFormat("\n");
2130
2131                result.appendFormat("  Device version: %#x\n", deviceVersion);
2132                if (deviceVersion >= CAMERA_DEVICE_API_VERSION_2_0) {
2133                    result.appendFormat("  Device static metadata:\n");
2134                    write(fd, result.string(), result.size());
2135                    dump_indented_camera_metadata(info.static_camera_characteristics,
2136                            fd, /*verbosity*/2, /*indentation*/4);
2137                } else {
2138                    write(fd, result.string(), result.size());
2139                }
2140
2141                CameraParameters p = state.second->getShimParams();
2142                if (!p.isEmpty()) {
2143                    result = String8::format("  Camera1 API shim is using parameters:\n        ");
2144                    write(fd, result.string(), result.size());
2145                    p.dump(fd, args);
2146                }
2147            }
2148
2149            auto clientDescriptor = mActiveClientManager.get(cameraId);
2150            if (clientDescriptor == nullptr) {
2151                result = String8::format("  Device %s is closed, no client instance\n",
2152                        cameraId.string());
2153                write(fd, result.string(), result.size());
2154                continue;
2155            }
2156            hasClient = true;
2157            result = String8::format("  Device %s is open. Client instance dump:\n\n",
2158                    cameraId.string());
2159            result.appendFormat("Client priority level: %d\n", clientDescriptor->getPriority());
2160            result.appendFormat("Client PID: %d\n", clientDescriptor->getOwnerId());
2161
2162            auto client = clientDescriptor->getValue();
2163            result.appendFormat("Client package: %s\n",
2164                    String8(client->getPackageName()).string());
2165            write(fd, result.string(), result.size());
2166
2167            client->dump(fd, args);
2168        }
2169
2170        if (stateLocked) mCameraStatesLock.unlock();
2171
2172        if (!hasClient) {
2173            result = String8::format("\nNo active camera clients yet.\n");
2174            write(fd, result.string(), result.size());
2175        }
2176
2177        if (locked) mServiceLock.unlock();
2178
2179        // Dump camera traces if there were any
2180        write(fd, "\n", 1);
2181        camera3::CameraTraces::dump(fd, args);
2182
2183        // change logging level
2184        int n = args.size();
2185        for (int i = 0; i + 1 < n; i++) {
2186            String16 verboseOption("-v");
2187            if (args[i] == verboseOption) {
2188                String8 levelStr(args[i+1]);
2189                int level = atoi(levelStr.string());
2190                result = String8::format("\nSetting log level to %d.\n", level);
2191                setLogLevel(level);
2192                write(fd, result.string(), result.size());
2193            }
2194        }
2195    }
2196    return NO_ERROR;
2197}
2198
2199void CameraService::dumpEventLog(int fd) {
2200    String8 result = String8("\nPrior client events (most recent at top):\n");
2201
2202    Mutex::Autolock l(mLogLock);
2203    for (const auto& msg : mEventLog) {
2204        result.appendFormat("  %s\n", msg.string());
2205    }
2206
2207    if (mEventLog.size() == DEFAULT_EVENT_LOG_LENGTH) {
2208        result.append("  ...\n");
2209    } else if (mEventLog.size() == 0) {
2210        result.append("  [no events yet]\n");
2211    }
2212    result.append("\n");
2213
2214    write(fd, result.string(), result.size());
2215}
2216
2217void CameraService::handleTorchClientBinderDied(const wp<IBinder> &who) {
2218    Mutex::Autolock al(mTorchClientMapMutex);
2219    for (size_t i = 0; i < mTorchClientMap.size(); i++) {
2220        if (mTorchClientMap[i] == who) {
2221            // turn off the torch mode that was turned on by dead client
2222            String8 cameraId = mTorchClientMap.keyAt(i);
2223            status_t res = mFlashlight->setTorchMode(cameraId, false);
2224            if (res) {
2225                ALOGE("%s: torch client died but couldn't turn off torch: "
2226                    "%s (%d)", __FUNCTION__, strerror(-res), res);
2227                return;
2228            }
2229            mTorchClientMap.removeItemsAt(i);
2230            break;
2231        }
2232    }
2233}
2234
2235/*virtual*/void CameraService::binderDied(const wp<IBinder> &who) {
2236
2237    /**
2238      * While tempting to promote the wp<IBinder> into a sp, it's actually not supported by the
2239      * binder driver
2240      */
2241
2242    logClientDied(getCallingPid(), String8("Binder died unexpectedly"));
2243
2244    // check torch client
2245    handleTorchClientBinderDied(who);
2246
2247    // check camera device client
2248    if(!evictClientIdByRemote(who)) {
2249        ALOGV("%s: Java client's binder death already cleaned up (normal case)", __FUNCTION__);
2250        return;
2251    }
2252
2253    ALOGE("%s: Java client's binder died, removing it from the list of active clients",
2254            __FUNCTION__);
2255}
2256
2257void CameraService::updateStatus(ICameraServiceListener::Status status, const String8& cameraId) {
2258    updateStatus(status, cameraId, {});
2259}
2260
2261void CameraService::updateStatus(ICameraServiceListener::Status status, const String8& cameraId,
2262        std::initializer_list<ICameraServiceListener::Status> rejectSourceStates) {
2263    // Do not lock mServiceLock here or can get into a deadlock from
2264    // connect() -> disconnect -> updateStatus
2265
2266    auto state = getCameraState(cameraId);
2267
2268    if (state == nullptr) {
2269        ALOGW("%s: Could not update the status for %s, no such device exists", __FUNCTION__,
2270                cameraId.string());
2271        return;
2272    }
2273
2274    // Update the status for this camera state, then send the onStatusChangedCallbacks to each
2275    // of the listeners with both the mStatusStatus and mStatusListenerLock held
2276    state->updateStatus(status, cameraId, rejectSourceStates, [this]
2277            (const String8& cameraId, ICameraServiceListener::Status status) {
2278
2279            if (status != ICameraServiceListener::STATUS_ENUMERATING) {
2280                // Update torch status if it has a flash unit.
2281                Mutex::Autolock al(mTorchStatusMutex);
2282                ICameraServiceListener::TorchStatus torchStatus;
2283                if (getTorchStatusLocked(cameraId, &torchStatus) !=
2284                        NAME_NOT_FOUND) {
2285                    ICameraServiceListener::TorchStatus newTorchStatus =
2286                            status == ICameraServiceListener::STATUS_PRESENT ?
2287                            ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF :
2288                            ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE;
2289                    if (torchStatus != newTorchStatus) {
2290                        onTorchStatusChangedLocked(cameraId, newTorchStatus);
2291                    }
2292                }
2293            }
2294
2295            Mutex::Autolock lock(mStatusListenerLock);
2296
2297            for (auto& listener : mListenerList) {
2298                // TODO: Refactor status listeners to use strings for Camera IDs and remove this.
2299                int id = cameraIdToInt(cameraId);
2300                if (id != -1) listener->onStatusChanged(status, id);
2301            }
2302        });
2303}
2304
2305status_t CameraService::getTorchStatusLocked(
2306        const String8& cameraId,
2307        ICameraServiceListener::TorchStatus *status) const {
2308    if (!status) {
2309        return BAD_VALUE;
2310    }
2311    ssize_t index = mTorchStatusMap.indexOfKey(cameraId);
2312    if (index == NAME_NOT_FOUND) {
2313        // invalid camera ID or the camera doesn't have a flash unit
2314        return NAME_NOT_FOUND;
2315    }
2316
2317    *status = mTorchStatusMap.valueAt(index);
2318    return OK;
2319}
2320
2321status_t CameraService::setTorchStatusLocked(const String8& cameraId,
2322        ICameraServiceListener::TorchStatus status) {
2323    ssize_t index = mTorchStatusMap.indexOfKey(cameraId);
2324    if (index == NAME_NOT_FOUND) {
2325        return BAD_VALUE;
2326    }
2327    ICameraServiceListener::TorchStatus& item =
2328            mTorchStatusMap.editValueAt(index);
2329    item = status;
2330
2331    return OK;
2332}
2333
2334}; // namespace android
2335