CameraService.cpp revision 9b5a6e9a667f85adeddea787a9f609d9cde84ef4 
1/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#define LOG_TAG "CameraService"
18#define ATRACE_TAG ATRACE_TAG_CAMERA
19//#define LOG_NDEBUG 0
20
21#include <algorithm>
22#include <climits>
23#include <stdio.h>
24#include <cstring>
25#include <ctime>
26#include <string>
27#include <sys/types.h>
28#include <inttypes.h>
29#include <pthread.h>
30
31#include <android/hardware/ICamera.h>
32#include <android/hardware/ICameraClient.h>
33
34#include <binder/AppOpsManager.h>
35#include <binder/IPCThreadState.h>
36#include <binder/IServiceManager.h>
37#include <binder/MemoryBase.h>
38#include <binder/MemoryHeapBase.h>
39#include <binder/ProcessInfoService.h>
40#include <cutils/atomic.h>
41#include <cutils/properties.h>
42#include <gui/Surface.h>
43#include <hardware/hardware.h>
44#include <media/AudioSystem.h>
45#include <media/IMediaHTTPService.h>
46#include <media/mediaplayer.h>
47#include <mediautils/BatteryNotifier.h>
48#include <utils/Errors.h>
49#include <utils/Log.h>
50#include <utils/String16.h>
51#include <utils/Trace.h>
52#include <private/android_filesystem_config.h>
53#include <system/camera_vendor_tags.h>
54#include <system/camera_metadata.h>
55#include <system/camera.h>
56
57#include "CameraService.h"
58#include "api1/CameraClient.h"
59#include "api1/Camera2Client.h"
60#include "api2/CameraDeviceClient.h"
61#include "utils/CameraTraces.h"
62
63namespace {
64    const char* kPermissionServiceName = "permission";
65}; // namespace anonymous
66
67namespace android {
68
69using binder::Status;
70using namespace hardware;
71
72// ----------------------------------------------------------------------------
73// Logging support -- this is for debugging only
74// Use "adb shell dumpsys media.camera -v 1" to change it.
75volatile int32_t gLogLevel = 0;
76
77#define LOG1(...) ALOGD_IF(gLogLevel >= 1, __VA_ARGS__);
78#define LOG2(...) ALOGD_IF(gLogLevel >= 2, __VA_ARGS__);
79
80static void setLogLevel(int level) {
81    android_atomic_write(level, &gLogLevel);
82}
83
84// Convenience methods for constructing binder::Status objects for error returns
85
86#define STATUS_ERROR(errorCode, errorString) \
87    binder::Status::fromServiceSpecificError(errorCode, \
88            String8::format("%s:%d: %s", __FUNCTION__, __LINE__, errorString))
89
90#define STATUS_ERROR_FMT(errorCode, errorString, ...) \
91    binder::Status::fromServiceSpecificError(errorCode, \
92            String8::format("%s:%d: " errorString, __FUNCTION__, __LINE__, \
93                    __VA_ARGS__))
94
95// ----------------------------------------------------------------------------
96
97extern "C" {
98static void camera_device_status_change(
99        const struct camera_module_callbacks* callbacks,
100        int camera_id,
101        int new_status) {
102    sp<CameraService> cs = const_cast<CameraService*>(
103            static_cast<const CameraService*>(callbacks));
104
105    cs->onDeviceStatusChanged(static_cast<camera_device_status_t>(camera_id),
106            static_cast<camera_device_status_t>(new_status));
107}
108
109static void torch_mode_status_change(
110        const struct camera_module_callbacks* callbacks,
111        const char* camera_id,
112        int new_status) {
113    if (!callbacks || !camera_id) {
114        ALOGE("%s invalid parameters. callbacks %p, camera_id %p", __FUNCTION__,
115                callbacks, camera_id);
116    }
117    sp<CameraService> cs = const_cast<CameraService*>(
118                                static_cast<const CameraService*>(callbacks));
119
120    int32_t status;
121    switch (new_status) {
122        case TORCH_MODE_STATUS_NOT_AVAILABLE:
123            status = ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE;
124            break;
125        case TORCH_MODE_STATUS_AVAILABLE_OFF:
126            status = ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF;
127            break;
128        case TORCH_MODE_STATUS_AVAILABLE_ON:
129            status = ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON;
130            break;
131        default:
132            ALOGE("Unknown torch status %d", new_status);
133            return;
134    }
135
136    cs->onTorchStatusChanged(
137        String8(camera_id),
138        status);
139}
140} // extern "C"
141
142// ----------------------------------------------------------------------------
143
144// This is ugly and only safe if we never re-create the CameraService, but
145// should be ok for now.
146static CameraService *gCameraService;
147
148CameraService::CameraService() :
149        mEventLog(DEFAULT_EVENT_LOG_LENGTH),
150        mNumberOfCameras(0), mNumberOfNormalCameras(0),
151        mSoundRef(0), mModule(nullptr) {
152    ALOGI("CameraService started (pid=%d)", getpid());
153    gCameraService = this;
154
155    this->camera_device_status_change = android::camera_device_status_change;
156    this->torch_mode_status_change = android::torch_mode_status_change;
157
158    mServiceLockWrapper = std::make_shared<WaitableMutexWrapper>(&mServiceLock);
159}
160
161void CameraService::onFirstRef()
162{
163    ALOGI("CameraService process starting");
164
165    BnCameraService::onFirstRef();
166
167    // Update battery life tracking if service is restarting
168    BatteryNotifier& notifier(BatteryNotifier::getInstance());
169    notifier.noteResetCamera();
170    notifier.noteResetFlashlight();
171
172    camera_module_t *rawModule;
173    int err = hw_get_module(CAMERA_HARDWARE_MODULE_ID,
174            (const hw_module_t **)&rawModule);
175    if (err < 0) {
176        ALOGE("Could not load camera HAL module: %d (%s)", err, strerror(-err));
177        logServiceError("Could not load camera HAL module", err);
178        return;
179    }
180
181    mModule = new CameraModule(rawModule);
182    err = mModule->init();
183    if (err != OK) {
184        ALOGE("Could not initialize camera HAL module: %d (%s)", err,
185            strerror(-err));
186        logServiceError("Could not initialize camera HAL module", err);
187
188        delete mModule;
189        mModule = nullptr;
190        return;
191    }
192    ALOGI("Loaded \"%s\" camera module", mModule->getModuleName());
193
194    mNumberOfCameras = mModule->getNumberOfCameras();
195    mNumberOfNormalCameras = mNumberOfCameras;
196
197    // Setup vendor tags before we call get_camera_info the first time
198    // because HAL might need to setup static vendor keys in get_camera_info
199    VendorTagDescriptor::clearGlobalVendorTagDescriptor();
200    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_2) {
201        setUpVendorTags();
202    }
203
204    mFlashlight = new CameraFlashlight(*mModule, *this);
205    status_t res = mFlashlight->findFlashUnits();
206    if (res) {
207        // impossible because we haven't open any camera devices.
208        ALOGE("Failed to find flash units.");
209    }
210
211    int latestStrangeCameraId = INT_MAX;
212    for (int i = 0; i < mNumberOfCameras; i++) {
213        String8 cameraId = String8::format("%d", i);
214
215        // Get camera info
216
217        struct camera_info info;
218        bool haveInfo = true;
219        status_t rc = mModule->getCameraInfo(i, &info);
220        if (rc != NO_ERROR) {
221            ALOGE("%s: Received error loading camera info for device %d, cost and"
222                    " conflicting devices fields set to defaults for this device.",
223                    __FUNCTION__, i);
224            haveInfo = false;
225        }
226
227        // Check for backwards-compatibility support
228        if (haveInfo) {
229            if (checkCameraCapabilities(i, info, &latestStrangeCameraId) != OK) {
230                delete mModule;
231                mModule = nullptr;
232                return;
233            }
234        }
235
236        // Defaults to use for cost and conflicting devices
237        int cost = 100;
238        char** conflicting_devices = nullptr;
239        size_t conflicting_devices_length = 0;
240
241        // If using post-2.4 module version, query the cost + conflicting devices from the HAL
242        if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_4 && haveInfo) {
243            cost = info.resource_cost;
244            conflicting_devices = info.conflicting_devices;
245            conflicting_devices_length = info.conflicting_devices_length;
246        }
247
248        std::set<String8> conflicting;
249        for (size_t i = 0; i < conflicting_devices_length; i++) {
250            conflicting.emplace(String8(conflicting_devices[i]));
251        }
252
253        // Initialize state for each camera device
254        {
255            Mutex::Autolock lock(mCameraStatesLock);
256            mCameraStates.emplace(cameraId, std::make_shared<CameraState>(cameraId, cost,
257                    conflicting));
258        }
259
260        if (mFlashlight->hasFlashUnit(cameraId)) {
261            mTorchStatusMap.add(cameraId,
262                    ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF);
263        }
264    }
265
266    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_1) {
267        mModule->setCallbacks(this);
268    }
269
270    CameraService::pingCameraServiceProxy();
271}
272
273sp<ICameraServiceProxy> CameraService::getCameraServiceProxy() {
274    sp<IServiceManager> sm = defaultServiceManager();
275    sp<IBinder> binder = sm->getService(String16("media.camera.proxy"));
276    if (binder == nullptr) {
277        return nullptr;
278    }
279    sp<ICameraServiceProxy> proxyBinder = interface_cast<ICameraServiceProxy>(binder);
280    return proxyBinder;
281}
282
283void CameraService::pingCameraServiceProxy() {
284    sp<ICameraServiceProxy> proxyBinder = getCameraServiceProxy();
285    if (proxyBinder == nullptr) return;
286    proxyBinder->pingForUserUpdate();
287}
288
289CameraService::~CameraService() {
290    if (mModule) {
291        delete mModule;
292        mModule = nullptr;
293    }
294    VendorTagDescriptor::clearGlobalVendorTagDescriptor();
295    gCameraService = nullptr;
296}
297
298void CameraService::onDeviceStatusChanged(camera_device_status_t  cameraId,
299        camera_device_status_t newStatus) {
300    ALOGI("%s: Status changed for cameraId=%d, newStatus=%d", __FUNCTION__,
301          cameraId, newStatus);
302
303    String8 id = String8::format("%d", cameraId);
304    std::shared_ptr<CameraState> state = getCameraState(id);
305
306    if (state == nullptr) {
307        ALOGE("%s: Bad camera ID %d", __FUNCTION__, cameraId);
308        return;
309    }
310
311    int32_t oldStatus = state->getStatus();
312
313    if (oldStatus == static_cast<int32_t>(newStatus)) {
314        ALOGE("%s: State transition to the same status %#x not allowed", __FUNCTION__, newStatus);
315        return;
316    }
317
318    if (newStatus == CAMERA_DEVICE_STATUS_NOT_PRESENT) {
319        logDeviceRemoved(id, String8::format("Device status changed from %d to %d", oldStatus,
320                newStatus));
321        sp<BasicClient> clientToDisconnect;
322        {
323            // Don't do this in updateStatus to avoid deadlock over mServiceLock
324            Mutex::Autolock lock(mServiceLock);
325
326            // Set the device status to NOT_PRESENT, clients will no longer be able to connect
327            // to this device until the status changes
328            updateStatus(ICameraServiceListener::STATUS_NOT_PRESENT, id);
329
330            // Remove cached shim parameters
331            state->setShimParams(CameraParameters());
332
333            // Remove the client from the list of active clients
334            clientToDisconnect = removeClientLocked(id);
335
336            // Notify the client of disconnection
337            clientToDisconnect->notifyError(
338                    hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED,
339                    CaptureResultExtras{});
340        }
341
342        ALOGI("%s: Client for camera ID %s evicted due to device status change from HAL",
343                __FUNCTION__, id.string());
344
345        // Disconnect client
346        if (clientToDisconnect.get() != nullptr) {
347            // Ensure not in binder RPC so client disconnect PID checks work correctly
348            LOG_ALWAYS_FATAL_IF(getCallingPid() != getpid(),
349                    "onDeviceStatusChanged must be called from the camera service process!");
350            clientToDisconnect->disconnect();
351        }
352
353    } else {
354        if (oldStatus == ICameraServiceListener::STATUS_NOT_PRESENT) {
355            logDeviceAdded(id, String8::format("Device status changed from %d to %d", oldStatus,
356                    newStatus));
357        }
358        updateStatus(static_cast<int32_t>(newStatus), id);
359    }
360
361}
362
363void CameraService::onTorchStatusChanged(const String8& cameraId,
364        int32_t newStatus) {
365    Mutex::Autolock al(mTorchStatusMutex);
366    onTorchStatusChangedLocked(cameraId, newStatus);
367}
368
369void CameraService::onTorchStatusChangedLocked(const String8& cameraId,
370        int32_t newStatus) {
371    ALOGI("%s: Torch status changed for cameraId=%s, newStatus=%d",
372            __FUNCTION__, cameraId.string(), newStatus);
373
374    int32_t status;
375    status_t res = getTorchStatusLocked(cameraId, &status);
376    if (res) {
377        ALOGE("%s: cannot get torch status of camera %s: %s (%d)",
378                __FUNCTION__, cameraId.string(), strerror(-res), res);
379        return;
380    }
381    if (status == newStatus) {
382        return;
383    }
384
385    res = setTorchStatusLocked(cameraId, newStatus);
386    if (res) {
387        ALOGE("%s: Failed to set the torch status to %d: %s (%d)", __FUNCTION__,
388                (uint32_t)newStatus, strerror(-res), res);
389        return;
390    }
391
392    {
393        // Update battery life logging for flashlight
394        Mutex::Autolock al(mTorchUidMapMutex);
395        auto iter = mTorchUidMap.find(cameraId);
396        if (iter != mTorchUidMap.end()) {
397            int oldUid = iter->second.second;
398            int newUid = iter->second.first;
399            BatteryNotifier& notifier(BatteryNotifier::getInstance());
400            if (oldUid != newUid) {
401                // If the UID has changed, log the status and update current UID in mTorchUidMap
402                if (status == ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON) {
403                    notifier.noteFlashlightOff(cameraId, oldUid);
404                }
405                if (newStatus == ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON) {
406                    notifier.noteFlashlightOn(cameraId, newUid);
407                }
408                iter->second.second = newUid;
409            } else {
410                // If the UID has not changed, log the status
411                if (newStatus == ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON) {
412                    notifier.noteFlashlightOn(cameraId, oldUid);
413                } else {
414                    notifier.noteFlashlightOff(cameraId, oldUid);
415                }
416            }
417        }
418    }
419
420    {
421        Mutex::Autolock lock(mStatusListenerLock);
422        for (auto& i : mListenerList) {
423            i->onTorchStatusChanged(newStatus, String16{cameraId});
424        }
425    }
426}
427
428Status CameraService::getNumberOfCameras(int32_t type, int32_t* numCameras) {
429    ATRACE_CALL();
430    switch (type) {
431        case CAMERA_TYPE_BACKWARD_COMPATIBLE:
432            *numCameras = mNumberOfNormalCameras;
433            break;
434        case CAMERA_TYPE_ALL:
435            *numCameras = mNumberOfCameras;
436            break;
437        default:
438            ALOGW("%s: Unknown camera type %d",
439                    __FUNCTION__, type);
440            return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
441                    "Unknown camera type %d", type);
442    }
443    return Status::ok();
444}
445
446Status CameraService::getCameraInfo(int cameraId,
447        CameraInfo* cameraInfo) {
448    ATRACE_CALL();
449    if (!mModule) {
450        return STATUS_ERROR(ERROR_DISCONNECTED,
451                "Camera subsystem is not available");
452    }
453
454    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
455        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT,
456                "CameraId is not valid");
457    }
458
459    struct camera_info info;
460    Status rc = filterGetInfoErrorCode(
461        mModule->getCameraInfo(cameraId, &info));
462
463    if (rc.isOk()) {
464        cameraInfo->facing = info.facing;
465        cameraInfo->orientation = info.orientation;
466        // CameraInfo is for android.hardware.Camera which does not
467        // support external camera facing. The closest approximation would be
468        // front camera.
469        if (cameraInfo->orientation == CAMERA_FACING_EXTERNAL) {
470            cameraInfo->orientation = CAMERA_FACING_FRONT;
471        }
472    }
473    return rc;
474}
475
476int CameraService::cameraIdToInt(const String8& cameraId) {
477    errno = 0;
478    size_t pos = 0;
479    int ret = stoi(std::string{cameraId.string()}, &pos);
480    if (errno != 0 || pos != cameraId.size()) {
481        return -1;
482    }
483    return ret;
484}
485
486Status CameraService::generateShimMetadata(int cameraId, /*out*/CameraMetadata* cameraInfo) {
487    ATRACE_CALL();
488
489    Status ret = Status::ok();
490
491    struct CameraInfo info;
492    if (!(ret = getCameraInfo(cameraId, &info)).isOk()) {
493        return ret;
494    }
495
496    CameraMetadata shimInfo;
497    int32_t orientation = static_cast<int32_t>(info.orientation);
498    status_t rc;
499    if ((rc = shimInfo.update(ANDROID_SENSOR_ORIENTATION, &orientation, 1)) != OK) {
500        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
501                "Error updating metadata: %d (%s)", rc, strerror(-rc));
502    }
503
504    uint8_t facing = (info.facing == CAMERA_FACING_FRONT) ?
505            ANDROID_LENS_FACING_FRONT : ANDROID_LENS_FACING_BACK;
506    if ((rc = shimInfo.update(ANDROID_LENS_FACING, &facing, 1)) != OK) {
507        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
508                "Error updating metadata: %d (%s)", rc, strerror(-rc));
509    }
510
511    CameraParameters shimParams;
512    if (!(ret = getLegacyParametersLazy(cameraId, /*out*/&shimParams)).isOk()) {
513        // Error logged by callee
514        return ret;
515    }
516
517    Vector<Size> sizes;
518    Vector<Size> jpegSizes;
519    Vector<int32_t> formats;
520    {
521        shimParams.getSupportedPreviewSizes(/*out*/sizes);
522        shimParams.getSupportedPreviewFormats(/*out*/formats);
523        shimParams.getSupportedPictureSizes(/*out*/jpegSizes);
524    }
525
526    // Always include IMPLEMENTATION_DEFINED
527    formats.add(HAL_PIXEL_FORMAT_IMPLEMENTATION_DEFINED);
528
529    const size_t INTS_PER_CONFIG = 4;
530
531    // Build available stream configurations metadata
532    size_t streamConfigSize = (sizes.size() * formats.size() + jpegSizes.size()) * INTS_PER_CONFIG;
533
534    Vector<int32_t> streamConfigs;
535    streamConfigs.setCapacity(streamConfigSize);
536
537    for (size_t i = 0; i < formats.size(); ++i) {
538        for (size_t j = 0; j < sizes.size(); ++j) {
539            streamConfigs.add(formats[i]);
540            streamConfigs.add(sizes[j].width);
541            streamConfigs.add(sizes[j].height);
542            streamConfigs.add(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS_OUTPUT);
543        }
544    }
545
546    for (size_t i = 0; i < jpegSizes.size(); ++i) {
547        streamConfigs.add(HAL_PIXEL_FORMAT_BLOB);
548        streamConfigs.add(jpegSizes[i].width);
549        streamConfigs.add(jpegSizes[i].height);
550        streamConfigs.add(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS_OUTPUT);
551    }
552
553    if ((rc = shimInfo.update(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS,
554            streamConfigs.array(), streamConfigSize)) != OK) {
555        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
556                "Error updating metadata: %d (%s)", rc, strerror(-rc));
557    }
558
559    int64_t fakeMinFrames[0];
560    // TODO: Fixme, don't fake min frame durations.
561    if ((rc = shimInfo.update(ANDROID_SCALER_AVAILABLE_MIN_FRAME_DURATIONS,
562            fakeMinFrames, 0)) != OK) {
563        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
564                "Error updating metadata: %d (%s)", rc, strerror(-rc));
565    }
566
567    int64_t fakeStalls[0];
568    // TODO: Fixme, don't fake stall durations.
569    if ((rc = shimInfo.update(ANDROID_SCALER_AVAILABLE_STALL_DURATIONS,
570            fakeStalls, 0)) != OK) {
571        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
572                "Error updating metadata: %d (%s)", rc, strerror(-rc));
573    }
574
575    *cameraInfo = shimInfo;
576    return ret;
577}
578
579Status CameraService::getCameraCharacteristics(int cameraId,
580                                                CameraMetadata* cameraInfo) {
581    ATRACE_CALL();
582    if (!cameraInfo) {
583        ALOGE("%s: cameraInfo is NULL", __FUNCTION__);
584        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "cameraInfo is NULL");
585    }
586
587    if (!mModule) {
588        ALOGE("%s: camera hardware module doesn't exist", __FUNCTION__);
589        return STATUS_ERROR(ERROR_DISCONNECTED,
590                "Camera subsystem is not available");;
591    }
592
593    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
594        ALOGE("%s: Invalid camera id: %d", __FUNCTION__, cameraId);
595        return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
596                "Invalid camera id: %d", cameraId);
597    }
598
599    int facing;
600    Status ret;
601    if (mModule->getModuleApiVersion() < CAMERA_MODULE_API_VERSION_2_0 ||
602            getDeviceVersion(cameraId, &facing) < CAMERA_DEVICE_API_VERSION_3_0) {
603        /**
604         * Backwards compatibility mode for old HALs:
605         * - Convert CameraInfo into static CameraMetadata properties.
606         * - Retrieve cached CameraParameters for this camera.  If none exist,
607         *   attempt to open CameraClient and retrieve the CameraParameters.
608         * - Convert cached CameraParameters into static CameraMetadata
609         *   properties.
610         */
611        ALOGI("%s: Switching to HAL1 shim implementation...", __FUNCTION__);
612
613        ret = generateShimMetadata(cameraId, cameraInfo);
614    } else {
615        /**
616         * Normal HAL 2.1+ codepath.
617         */
618        struct camera_info info;
619        ret = filterGetInfoErrorCode(mModule->getCameraInfo(cameraId, &info));
620        if (ret.isOk()) {
621            *cameraInfo = info.static_camera_characteristics;
622        }
623    }
624
625    return ret;
626}
627
628int CameraService::getCallingPid() {
629    return IPCThreadState::self()->getCallingPid();
630}
631
632int CameraService::getCallingUid() {
633    return IPCThreadState::self()->getCallingUid();
634}
635
636String8 CameraService::getFormattedCurrentTime() {
637    time_t now = time(nullptr);
638    char formattedTime[64];
639    strftime(formattedTime, sizeof(formattedTime), "%m-%d %H:%M:%S", localtime(&now));
640    return String8(formattedTime);
641}
642
643int CameraService::getCameraPriorityFromProcState(int procState) {
644    // Find the priority for the camera usage based on the process state.  Higher priority clients
645    // win for evictions.
646    if (procState < 0) {
647        ALOGE("%s: Received invalid process state %d from ActivityManagerService!", __FUNCTION__,
648                procState);
649        return -1;
650    }
651    // Treat sleeping TOP processes the same as regular TOP processes, for
652    // access priority.  This is important for lock-screen camera launch scenarios
653    if (procState == PROCESS_STATE_TOP_SLEEPING) {
654        procState = PROCESS_STATE_TOP;
655    }
656    return INT_MAX - procState;
657}
658
659Status CameraService::getCameraVendorTagDescriptor(
660        /*out*/
661        hardware::camera2::params::VendorTagDescriptor* desc) {
662    ATRACE_CALL();
663    if (!mModule) {
664        ALOGE("%s: camera hardware module doesn't exist", __FUNCTION__);
665        return STATUS_ERROR(ERROR_DISCONNECTED, "Camera subsystem not available");
666    }
667    sp<VendorTagDescriptor> globalDescriptor = VendorTagDescriptor::getGlobalVendorTagDescriptor();
668    if (globalDescriptor != nullptr) {
669        *desc = *(globalDescriptor.get());
670    }
671    return Status::ok();
672}
673
674int CameraService::getDeviceVersion(int cameraId, int* facing) {
675    ATRACE_CALL();
676    struct camera_info info;
677    if (mModule->getCameraInfo(cameraId, &info) != OK) {
678        return -1;
679    }
680
681    int deviceVersion;
682    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0) {
683        deviceVersion = info.device_version;
684    } else {
685        deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
686    }
687
688    if (facing) {
689        *facing = info.facing;
690    }
691
692    return deviceVersion;
693}
694
695Status CameraService::filterGetInfoErrorCode(status_t err) {
696    switch(err) {
697        case NO_ERROR:
698            return Status::ok();
699        case -EINVAL:
700            return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT,
701                    "CameraId is not valid for HAL module");
702        case -ENODEV:
703            return STATUS_ERROR(ERROR_DISCONNECTED,
704                    "Camera device not available");
705        default:
706            return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
707                    "Camera HAL encountered error %d: %s",
708                    err, strerror(-err));
709    }
710}
711
712bool CameraService::setUpVendorTags() {
713    ATRACE_CALL();
714    vendor_tag_ops_t vOps = vendor_tag_ops_t();
715
716    // Check if vendor operations have been implemented
717    if (!mModule->isVendorTagDefined()) {
718        ALOGI("%s: No vendor tags defined for this device.", __FUNCTION__);
719        return false;
720    }
721
722    mModule->getVendorTagOps(&vOps);
723
724    // Ensure all vendor operations are present
725    if (vOps.get_tag_count == NULL || vOps.get_all_tags == NULL ||
726            vOps.get_section_name == NULL || vOps.get_tag_name == NULL ||
727            vOps.get_tag_type == NULL) {
728        ALOGE("%s: Vendor tag operations not fully defined. Ignoring definitions."
729               , __FUNCTION__);
730        return false;
731    }
732
733    // Read all vendor tag definitions into a descriptor
734    sp<VendorTagDescriptor> desc;
735    status_t res;
736    if ((res = VendorTagDescriptor::createDescriptorFromOps(&vOps, /*out*/desc))
737            != OK) {
738        ALOGE("%s: Could not generate descriptor from vendor tag operations,"
739              "received error %s (%d). Camera clients will not be able to use"
740              "vendor tags", __FUNCTION__, strerror(res), res);
741        return false;
742    }
743
744    // Set the global descriptor to use with camera metadata
745    VendorTagDescriptor::setAsGlobalVendorTagDescriptor(desc);
746    return true;
747}
748
749Status CameraService::makeClient(const sp<CameraService>& cameraService,
750        const sp<IInterface>& cameraCb, const String16& packageName, int cameraId,
751        int facing, int clientPid, uid_t clientUid, int servicePid, bool legacyMode,
752        int halVersion, int deviceVersion, apiLevel effectiveApiLevel,
753        /*out*/sp<BasicClient>* client) {
754
755    if (halVersion < 0 || halVersion == deviceVersion) {
756        // Default path: HAL version is unspecified by caller, create CameraClient
757        // based on device version reported by the HAL.
758        switch(deviceVersion) {
759          case CAMERA_DEVICE_API_VERSION_1_0:
760            if (effectiveApiLevel == API_1) {  // Camera1 API route
761                sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get());
762                *client = new CameraClient(cameraService, tmp, packageName, cameraId, facing,
763                        clientPid, clientUid, getpid(), legacyMode);
764            } else { // Camera2 API route
765                ALOGW("Camera using old HAL version: %d", deviceVersion);
766                return STATUS_ERROR_FMT(ERROR_DEPRECATED_HAL,
767                        "Camera device \"%d\" HAL version %d does not support camera2 API",
768                        cameraId, deviceVersion);
769            }
770            break;
771          case CAMERA_DEVICE_API_VERSION_3_0:
772          case CAMERA_DEVICE_API_VERSION_3_1:
773          case CAMERA_DEVICE_API_VERSION_3_2:
774          case CAMERA_DEVICE_API_VERSION_3_3:
775            if (effectiveApiLevel == API_1) { // Camera1 API route
776                sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get());
777                *client = new Camera2Client(cameraService, tmp, packageName, cameraId, facing,
778                        clientPid, clientUid, servicePid, legacyMode);
779            } else { // Camera2 API route
780                sp<hardware::camera2::ICameraDeviceCallbacks> tmp =
781                        static_cast<hardware::camera2::ICameraDeviceCallbacks*>(cameraCb.get());
782                *client = new CameraDeviceClient(cameraService, tmp, packageName, cameraId,
783                        facing, clientPid, clientUid, servicePid);
784            }
785            break;
786          default:
787            // Should not be reachable
788            ALOGE("Unknown camera device HAL version: %d", deviceVersion);
789            return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
790                    "Camera device \"%d\" has unknown HAL version %d",
791                    cameraId, deviceVersion);
792        }
793    } else {
794        // A particular HAL version is requested by caller. Create CameraClient
795        // based on the requested HAL version.
796        if (deviceVersion > CAMERA_DEVICE_API_VERSION_1_0 &&
797            halVersion == CAMERA_DEVICE_API_VERSION_1_0) {
798            // Only support higher HAL version device opened as HAL1.0 device.
799            sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get());
800            *client = new CameraClient(cameraService, tmp, packageName, cameraId, facing,
801                    clientPid, clientUid, servicePid, legacyMode);
802        } else {
803            // Other combinations (e.g. HAL3.x open as HAL2.x) are not supported yet.
804            ALOGE("Invalid camera HAL version %x: HAL %x device can only be"
805                    " opened as HAL %x device", halVersion, deviceVersion,
806                    CAMERA_DEVICE_API_VERSION_1_0);
807            return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
808                    "Camera device \"%d\" (HAL version %d) cannot be opened as HAL version %d",
809                    cameraId, deviceVersion, halVersion);
810        }
811    }
812    return Status::ok();
813}
814
815String8 CameraService::toString(std::set<userid_t> intSet) {
816    String8 s("");
817    bool first = true;
818    for (userid_t i : intSet) {
819        if (first) {
820            s.appendFormat("%d", i);
821            first = false;
822        } else {
823            s.appendFormat(", %d", i);
824        }
825    }
826    return s;
827}
828
829Status CameraService::initializeShimMetadata(int cameraId) {
830    int uid = getCallingUid();
831
832    String16 internalPackageName("cameraserver");
833    String8 id = String8::format("%d", cameraId);
834    Status ret = Status::ok();
835    sp<Client> tmp = nullptr;
836    if (!(ret = connectHelper<ICameraClient,Client>(
837            sp<ICameraClient>{nullptr}, id, static_cast<int>(CAMERA_HAL_API_VERSION_UNSPECIFIED),
838            internalPackageName, uid, USE_CALLING_PID,
839            API_1, /*legacyMode*/ false, /*shimUpdateOnly*/ true,
840            /*out*/ tmp)
841            ).isOk()) {
842        ALOGE("%s: Error initializing shim metadata: %s", __FUNCTION__, ret.toString8().string());
843    }
844    return ret;
845}
846
847Status CameraService::getLegacyParametersLazy(int cameraId,
848        /*out*/
849        CameraParameters* parameters) {
850
851    ALOGV("%s: for cameraId: %d", __FUNCTION__, cameraId);
852
853    Status ret = Status::ok();
854
855    if (parameters == NULL) {
856        ALOGE("%s: parameters must not be null", __FUNCTION__);
857        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Parameters must not be null");
858    }
859
860    String8 id = String8::format("%d", cameraId);
861
862    // Check if we already have parameters
863    {
864        // Scope for service lock
865        Mutex::Autolock lock(mServiceLock);
866        auto cameraState = getCameraState(id);
867        if (cameraState == nullptr) {
868            ALOGE("%s: Invalid camera ID: %s", __FUNCTION__, id.string());
869            return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
870                    "Invalid camera ID: %s", id.string());
871        }
872        CameraParameters p = cameraState->getShimParams();
873        if (!p.isEmpty()) {
874            *parameters = p;
875            return ret;
876        }
877    }
878
879    int64_t token = IPCThreadState::self()->clearCallingIdentity();
880    ret = initializeShimMetadata(cameraId);
881    IPCThreadState::self()->restoreCallingIdentity(token);
882    if (!ret.isOk()) {
883        // Error already logged by callee
884        return ret;
885    }
886
887    // Check for parameters again
888    {
889        // Scope for service lock
890        Mutex::Autolock lock(mServiceLock);
891        auto cameraState = getCameraState(id);
892        if (cameraState == nullptr) {
893            ALOGE("%s: Invalid camera ID: %s", __FUNCTION__, id.string());
894            return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
895                    "Invalid camera ID: %s", id.string());
896        }
897        CameraParameters p = cameraState->getShimParams();
898        if (!p.isEmpty()) {
899            *parameters = p;
900            return ret;
901        }
902    }
903
904    ALOGE("%s: Parameters were not initialized, or were empty.  Device may not be present.",
905            __FUNCTION__);
906    return STATUS_ERROR(ERROR_INVALID_OPERATION, "Unable to initialize legacy parameters");
907}
908
909// Can camera service trust the caller based on the calling UID?
910static bool isTrustedCallingUid(uid_t uid) {
911    switch (uid) {
912        case AID_MEDIA:         // mediaserver
913        case AID_CAMERASERVER: // cameraserver
914            return true;
915        default:
916            return false;
917    }
918}
919
920Status CameraService::validateConnectLocked(const String8& cameraId,
921        const String8& clientName8, /*inout*/int& clientUid, /*inout*/int& clientPid,
922        /*out*/int& originalClientPid) const {
923
924    int callingPid = getCallingPid();
925    int callingUid = getCallingUid();
926
927    // Check if we can trust clientUid
928    if (clientUid == USE_CALLING_UID) {
929        clientUid = callingUid;
930    } else if (!isTrustedCallingUid(callingUid)) {
931        ALOGE("CameraService::connect X (calling PID %d, calling UID %d) rejected "
932                "(don't trust clientUid %d)", callingPid, callingUid, clientUid);
933        return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED,
934                "Untrusted caller (calling PID %d, UID %d) trying to "
935                "forward camera access to camera %s for client %s (PID %d, UID %d)",
936                callingPid, callingUid, cameraId.string(),
937                clientName8.string(), clientUid, clientPid);
938    }
939
940    // Check if we can trust clientPid
941    if (clientPid == USE_CALLING_PID) {
942        clientPid = callingPid;
943    } else if (!isTrustedCallingUid(callingUid)) {
944        ALOGE("CameraService::connect X (calling PID %d, calling UID %d) rejected "
945                "(don't trust clientPid %d)", callingPid, callingUid, clientPid);
946        return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED,
947                "Untrusted caller (calling PID %d, UID %d) trying to "
948                "forward camera access to camera %s for client %s (PID %d, UID %d)",
949                callingPid, callingUid, cameraId.string(),
950                clientName8.string(), clientUid, clientPid);
951    }
952
953    // If it's not calling from cameraserver, check the permission.
954    if (callingPid != getpid() &&
955            !checkPermission(String16("android.permission.CAMERA"), clientPid, clientUid)) {
956        ALOGE("Permission Denial: can't use the camera pid=%d, uid=%d", clientPid, clientUid);
957        return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED,
958                "Caller \"%s\" (PID %d, UID %d) cannot open camera \"%s\" without camera permission",
959                clientName8.string(), clientUid, clientPid, cameraId.string());
960    }
961
962    // Only use passed in clientPid to check permission. Use calling PID as the client PID that's
963    // connected to camera service directly.
964    originalClientPid = clientPid;
965    clientPid = callingPid;
966
967    if (!mModule) {
968        ALOGE("CameraService::connect X (PID %d) rejected (camera HAL module not loaded)",
969                callingPid);
970        return STATUS_ERROR_FMT(ERROR_DISCONNECTED,
971                "No camera HAL module available to open camera device \"%s\"", cameraId.string());
972    }
973
974    if (getCameraState(cameraId) == nullptr) {
975        ALOGE("CameraService::connect X (PID %d) rejected (invalid camera ID %s)", callingPid,
976                cameraId.string());
977        return STATUS_ERROR_FMT(ERROR_DISCONNECTED,
978                "No camera device with ID \"%s\" available", cameraId.string());
979    }
980
981    userid_t clientUserId = multiuser_get_user_id(clientUid);
982
983    // Only allow clients who are being used by the current foreground device user, unless calling
984    // from our own process.
985    if (callingPid != getpid() && (mAllowedUsers.find(clientUserId) == mAllowedUsers.end())) {
986        ALOGE("CameraService::connect X (PID %d) rejected (cannot connect from "
987                "device user %d, currently allowed device users: %s)", callingPid, clientUserId,
988                toString(mAllowedUsers).string());
989        return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED,
990                "Callers from device user %d are not currently allowed to connect to camera \"%s\"",
991                clientUserId, cameraId.string());
992    }
993
994    status_t err = checkIfDeviceIsUsable(cameraId);
995    if (err != NO_ERROR) {
996        switch(err) {
997            case -ENODEV:
998            case -EBUSY:
999                return STATUS_ERROR_FMT(ERROR_DISCONNECTED,
1000                        "No camera device with ID \"%s\" currently available", cameraId.string());
1001            default:
1002                return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
1003                        "Unknown error connecting to ID \"%s\"", cameraId.string());
1004        }
1005    }
1006    return Status::ok();
1007}
1008
1009status_t CameraService::checkIfDeviceIsUsable(const String8& cameraId) const {
1010    auto cameraState = getCameraState(cameraId);
1011    int callingPid = getCallingPid();
1012    if (cameraState == nullptr) {
1013        ALOGE("CameraService::connect X (PID %d) rejected (invalid camera ID %s)", callingPid,
1014                cameraId.string());
1015        return -ENODEV;
1016    }
1017
1018    int32_t currentStatus = cameraState->getStatus();
1019    if (currentStatus == ICameraServiceListener::STATUS_NOT_PRESENT) {
1020        ALOGE("CameraService::connect X (PID %d) rejected (camera %s is not connected)",
1021                callingPid, cameraId.string());
1022        return -ENODEV;
1023    } else if (currentStatus == ICameraServiceListener::STATUS_ENUMERATING) {
1024        ALOGE("CameraService::connect X (PID %d) rejected, (camera %s is initializing)",
1025                callingPid, cameraId.string());
1026        return -EBUSY;
1027    }
1028
1029    return NO_ERROR;
1030}
1031
1032void CameraService::finishConnectLocked(const sp<BasicClient>& client,
1033        const CameraService::DescriptorPtr& desc) {
1034
1035    // Make a descriptor for the incoming client
1036    auto clientDescriptor = CameraService::CameraClientManager::makeClientDescriptor(client, desc);
1037    auto evicted = mActiveClientManager.addAndEvict(clientDescriptor);
1038
1039    logConnected(desc->getKey(), static_cast<int>(desc->getOwnerId()),
1040            String8(client->getPackageName()));
1041
1042    if (evicted.size() > 0) {
1043        // This should never happen - clients should already have been removed in disconnect
1044        for (auto& i : evicted) {
1045            ALOGE("%s: Invalid state: Client for camera %s was not removed in disconnect",
1046                    __FUNCTION__, i->getKey().string());
1047        }
1048
1049        LOG_ALWAYS_FATAL("%s: Invalid state for CameraService, clients not evicted properly",
1050                __FUNCTION__);
1051    }
1052
1053    // And register a death notification for the client callback. Do
1054    // this last to avoid Binder policy where a nested Binder
1055    // transaction might be pre-empted to service the client death
1056    // notification if the client process dies before linkToDeath is
1057    // invoked.
1058    sp<IBinder> remoteCallback = client->getRemote();
1059    if (remoteCallback != nullptr) {
1060        remoteCallback->linkToDeath(this);
1061    }
1062}
1063
1064status_t CameraService::handleEvictionsLocked(const String8& cameraId, int clientPid,
1065        apiLevel effectiveApiLevel, const sp<IBinder>& remoteCallback, const String8& packageName,
1066        /*out*/
1067        sp<BasicClient>* client,
1068        std::shared_ptr<resource_policy::ClientDescriptor<String8, sp<BasicClient>>>* partial) {
1069    ATRACE_CALL();
1070    status_t ret = NO_ERROR;
1071    std::vector<DescriptorPtr> evictedClients;
1072    DescriptorPtr clientDescriptor;
1073    {
1074        if (effectiveApiLevel == API_1) {
1075            // If we are using API1, any existing client for this camera ID with the same remote
1076            // should be returned rather than evicted to allow MediaRecorder to work properly.
1077
1078            auto current = mActiveClientManager.get(cameraId);
1079            if (current != nullptr) {
1080                auto clientSp = current->getValue();
1081                if (clientSp.get() != nullptr) { // should never be needed
1082                    if (!clientSp->canCastToApiClient(effectiveApiLevel)) {
1083                        ALOGW("CameraService connect called from same client, but with a different"
1084                                " API level, evicting prior client...");
1085                    } else if (clientSp->getRemote() == remoteCallback) {
1086                        ALOGI("CameraService::connect X (PID %d) (second call from same"
1087                                " app binder, returning the same client)", clientPid);
1088                        *client = clientSp;
1089                        return NO_ERROR;
1090                    }
1091                }
1092            }
1093        }
1094
1095        // Get current active client PIDs
1096        std::vector<int> ownerPids(mActiveClientManager.getAllOwners());
1097        ownerPids.push_back(clientPid);
1098
1099        // Use the value +PROCESS_STATE_NONEXISTENT, to avoid taking
1100        // address of PROCESS_STATE_NONEXISTENT as a reference argument
1101        // for the vector constructor. PROCESS_STATE_NONEXISTENT does
1102        // not have an out-of-class definition.
1103        std::vector<int> priorities(ownerPids.size(), +PROCESS_STATE_NONEXISTENT);
1104
1105        // Get priorites of all active PIDs
1106        ProcessInfoService::getProcessStatesFromPids(ownerPids.size(), &ownerPids[0],
1107                /*out*/&priorities[0]);
1108
1109        // Update all active clients' priorities
1110        std::map<int,int> pidToPriorityMap;
1111        for (size_t i = 0; i < ownerPids.size() - 1; i++) {
1112            pidToPriorityMap.emplace(ownerPids[i], getCameraPriorityFromProcState(priorities[i]));
1113        }
1114        mActiveClientManager.updatePriorities(pidToPriorityMap);
1115
1116        // Get state for the given cameraId
1117        auto state = getCameraState(cameraId);
1118        if (state == nullptr) {
1119            ALOGE("CameraService::connect X (PID %d) rejected (no camera device with ID %s)",
1120                clientPid, cameraId.string());
1121            // Should never get here because validateConnectLocked should have errored out
1122            return BAD_VALUE;
1123        }
1124
1125        // Make descriptor for incoming client
1126        clientDescriptor = CameraClientManager::makeClientDescriptor(cameraId,
1127                sp<BasicClient>{nullptr}, static_cast<int32_t>(state->getCost()),
1128                state->getConflicting(),
1129                getCameraPriorityFromProcState(priorities[priorities.size() - 1]), clientPid);
1130
1131        // Find clients that would be evicted
1132        auto evicted = mActiveClientManager.wouldEvict(clientDescriptor);
1133
1134        // If the incoming client was 'evicted,' higher priority clients have the camera in the
1135        // background, so we cannot do evictions
1136        if (std::find(evicted.begin(), evicted.end(), clientDescriptor) != evicted.end()) {
1137            ALOGE("CameraService::connect X (PID %d) rejected (existing client(s) with higher"
1138                    " priority).", clientPid);
1139
1140            sp<BasicClient> clientSp = clientDescriptor->getValue();
1141            String8 curTime = getFormattedCurrentTime();
1142            auto incompatibleClients =
1143                    mActiveClientManager.getIncompatibleClients(clientDescriptor);
1144
1145            String8 msg = String8::format("%s : DENIED connect device %s client for package %s "
1146                    "(PID %d, priority %d) due to eviction policy", curTime.string(),
1147                    cameraId.string(), packageName.string(), clientPid,
1148                    getCameraPriorityFromProcState(priorities[priorities.size() - 1]));
1149
1150            for (auto& i : incompatibleClients) {
1151                msg.appendFormat("\n   - Blocked by existing device %s client for package %s"
1152                        "(PID %" PRId32 ", priority %" PRId32 ")", i->getKey().string(),
1153                        String8{i->getValue()->getPackageName()}.string(), i->getOwnerId(),
1154                        i->getPriority());
1155                ALOGE("   Conflicts with: Device %s, client package %s (PID %"
1156                        PRId32 ", priority %" PRId32 ")", i->getKey().string(),
1157                        String8{i->getValue()->getPackageName()}.string(), i->getOwnerId(),
1158                        i->getPriority());
1159            }
1160
1161            // Log the client's attempt
1162            Mutex::Autolock l(mLogLock);
1163            mEventLog.add(msg);
1164
1165            return -EBUSY;
1166        }
1167
1168        for (auto& i : evicted) {
1169            sp<BasicClient> clientSp = i->getValue();
1170            if (clientSp.get() == nullptr) {
1171                ALOGE("%s: Invalid state: Null client in active client list.", __FUNCTION__);
1172
1173                // TODO: Remove this
1174                LOG_ALWAYS_FATAL("%s: Invalid state for CameraService, null client in active list",
1175                        __FUNCTION__);
1176                mActiveClientManager.remove(i);
1177                continue;
1178            }
1179
1180            ALOGE("CameraService::connect evicting conflicting client for camera ID %s",
1181                    i->getKey().string());
1182            evictedClients.push_back(i);
1183
1184            // Log the clients evicted
1185            logEvent(String8::format("EVICT device %s client held by package %s (PID"
1186                    " %" PRId32 ", priority %" PRId32 ")\n   - Evicted by device %s client for"
1187                    " package %s (PID %d, priority %" PRId32 ")",
1188                    i->getKey().string(), String8{clientSp->getPackageName()}.string(),
1189                    i->getOwnerId(), i->getPriority(), cameraId.string(),
1190                    packageName.string(), clientPid,
1191                    getCameraPriorityFromProcState(priorities[priorities.size() - 1])));
1192
1193            // Notify the client of disconnection
1194            clientSp->notifyError(hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED,
1195                    CaptureResultExtras());
1196        }
1197    }
1198
1199    // Do not hold mServiceLock while disconnecting clients, but retain the condition blocking
1200    // other clients from connecting in mServiceLockWrapper if held
1201    mServiceLock.unlock();
1202
1203    // Clear caller identity temporarily so client disconnect PID checks work correctly
1204    int64_t token = IPCThreadState::self()->clearCallingIdentity();
1205
1206    // Destroy evicted clients
1207    for (auto& i : evictedClients) {
1208        // Disconnect is blocking, and should only have returned when HAL has cleaned up
1209        i->getValue()->disconnect(); // Clients will remove themselves from the active client list
1210    }
1211
1212    IPCThreadState::self()->restoreCallingIdentity(token);
1213
1214    for (const auto& i : evictedClients) {
1215        ALOGV("%s: Waiting for disconnect to complete for client for device %s (PID %" PRId32 ")",
1216                __FUNCTION__, i->getKey().string(), i->getOwnerId());
1217        ret = mActiveClientManager.waitUntilRemoved(i, DEFAULT_DISCONNECT_TIMEOUT_NS);
1218        if (ret == TIMED_OUT) {
1219            ALOGE("%s: Timed out waiting for client for device %s to disconnect, "
1220                    "current clients:\n%s", __FUNCTION__, i->getKey().string(),
1221                    mActiveClientManager.toString().string());
1222            return -EBUSY;
1223        }
1224        if (ret != NO_ERROR) {
1225            ALOGE("%s: Received error waiting for client for device %s to disconnect: %s (%d), "
1226                    "current clients:\n%s", __FUNCTION__, i->getKey().string(), strerror(-ret),
1227                    ret, mActiveClientManager.toString().string());
1228            return ret;
1229        }
1230    }
1231
1232    evictedClients.clear();
1233
1234    // Once clients have been disconnected, relock
1235    mServiceLock.lock();
1236
1237    // Check again if the device was unplugged or something while we weren't holding mServiceLock
1238    if ((ret = checkIfDeviceIsUsable(cameraId)) != NO_ERROR) {
1239        return ret;
1240    }
1241
1242    *partial = clientDescriptor;
1243    return NO_ERROR;
1244}
1245
1246Status CameraService::connect(
1247        const sp<ICameraClient>& cameraClient,
1248        int cameraId,
1249        const String16& clientPackageName,
1250        int clientUid,
1251        int clientPid,
1252        /*out*/
1253        sp<ICamera>* device) {
1254
1255    ATRACE_CALL();
1256    Status ret = Status::ok();
1257    String8 id = String8::format("%d", cameraId);
1258    sp<Client> client = nullptr;
1259    ret = connectHelper<ICameraClient,Client>(cameraClient, id,
1260            CAMERA_HAL_API_VERSION_UNSPECIFIED, clientPackageName, clientUid, clientPid, API_1,
1261            /*legacyMode*/ false, /*shimUpdateOnly*/ false,
1262            /*out*/client);
1263
1264    if(!ret.isOk()) {
1265        logRejected(id, getCallingPid(), String8(clientPackageName),
1266                ret.toString8());
1267        return ret;
1268    }
1269
1270    *device = client;
1271    return ret;
1272}
1273
1274Status CameraService::connectLegacy(
1275        const sp<ICameraClient>& cameraClient,
1276        int cameraId, int halVersion,
1277        const String16& clientPackageName,
1278        int clientUid,
1279        /*out*/
1280        sp<ICamera>* device) {
1281
1282    ATRACE_CALL();
1283    String8 id = String8::format("%d", cameraId);
1284    int apiVersion = mModule->getModuleApiVersion();
1285    if (halVersion != CAMERA_HAL_API_VERSION_UNSPECIFIED &&
1286            apiVersion < CAMERA_MODULE_API_VERSION_2_3) {
1287        /*
1288         * Either the HAL version is unspecified in which case this just creates
1289         * a camera client selected by the latest device version, or
1290         * it's a particular version in which case the HAL must supported
1291         * the open_legacy call
1292         */
1293        String8 msg = String8::format("Camera HAL module version %x too old for connectLegacy!",
1294                apiVersion);
1295        ALOGE("%s: %s",
1296                __FUNCTION__, msg.string());
1297        logRejected(id, getCallingPid(), String8(clientPackageName),
1298                msg);
1299        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, msg.string());
1300    }
1301
1302    Status ret = Status::ok();
1303    sp<Client> client = nullptr;
1304    ret = connectHelper<ICameraClient,Client>(cameraClient, id, halVersion,
1305            clientPackageName, clientUid, USE_CALLING_PID, API_1,
1306            /*legacyMode*/ true, /*shimUpdateOnly*/ false,
1307            /*out*/client);
1308
1309    if(!ret.isOk()) {
1310        logRejected(id, getCallingPid(), String8(clientPackageName),
1311                ret.toString8());
1312        return ret;
1313    }
1314
1315    *device = client;
1316    return ret;
1317}
1318
1319Status CameraService::connectDevice(
1320        const sp<hardware::camera2::ICameraDeviceCallbacks>& cameraCb,
1321        int cameraId,
1322        const String16& clientPackageName,
1323        int clientUid,
1324        /*out*/
1325        sp<hardware::camera2::ICameraDeviceUser>* device) {
1326
1327    ATRACE_CALL();
1328    Status ret = Status::ok();
1329    String8 id = String8::format("%d", cameraId);
1330    sp<CameraDeviceClient> client = nullptr;
1331    ret = connectHelper<hardware::camera2::ICameraDeviceCallbacks,CameraDeviceClient>(cameraCb, id,
1332            CAMERA_HAL_API_VERSION_UNSPECIFIED, clientPackageName,
1333            clientUid, USE_CALLING_PID, API_2,
1334            /*legacyMode*/ false, /*shimUpdateOnly*/ false,
1335            /*out*/client);
1336
1337    if(!ret.isOk()) {
1338        logRejected(id, getCallingPid(), String8(clientPackageName),
1339                ret.toString8());
1340        return ret;
1341    }
1342
1343    *device = client;
1344    return ret;
1345}
1346
1347Status CameraService::setTorchMode(const String16& cameraId, bool enabled,
1348        const sp<IBinder>& clientBinder) {
1349
1350    ATRACE_CALL();
1351    if (enabled && clientBinder == nullptr) {
1352        ALOGE("%s: torch client binder is NULL", __FUNCTION__);
1353        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT,
1354                "Torch client Binder is null");
1355    }
1356
1357    String8 id = String8(cameraId.string());
1358    int uid = getCallingUid();
1359
1360    // verify id is valid.
1361    auto state = getCameraState(id);
1362    if (state == nullptr) {
1363        ALOGE("%s: camera id is invalid %s", __FUNCTION__, id.string());
1364        return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
1365                "Camera ID \"%s\" is a not valid camera ID", id.string());
1366    }
1367
1368    int32_t cameraStatus = state->getStatus();
1369    if (cameraStatus != ICameraServiceListener::STATUS_PRESENT &&
1370            cameraStatus != ICameraServiceListener::STATUS_NOT_AVAILABLE) {
1371        ALOGE("%s: camera id is invalid %s", __FUNCTION__, id.string());
1372        return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
1373                "Camera ID \"%s\" is a not valid camera ID", id.string());
1374    }
1375
1376    {
1377        Mutex::Autolock al(mTorchStatusMutex);
1378        int32_t status;
1379        status_t err = getTorchStatusLocked(id, &status);
1380        if (err != OK) {
1381            if (err == NAME_NOT_FOUND) {
1382                return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
1383                        "Camera \"%s\" does not have a flash unit", id.string());
1384            }
1385            ALOGE("%s: getting current torch status failed for camera %s",
1386                    __FUNCTION__, id.string());
1387            return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
1388                    "Error updating torch status for camera \"%s\": %s (%d)", id.string(),
1389                    strerror(-err), err);
1390        }
1391
1392        if (status == ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE) {
1393            if (cameraStatus == ICameraServiceListener::STATUS_NOT_AVAILABLE) {
1394                ALOGE("%s: torch mode of camera %s is not available because "
1395                        "camera is in use", __FUNCTION__, id.string());
1396                return STATUS_ERROR_FMT(ERROR_CAMERA_IN_USE,
1397                        "Torch for camera \"%s\" is not available due to an existing camera user",
1398                        id.string());
1399            } else {
1400                ALOGE("%s: torch mode of camera %s is not available due to "
1401                        "insufficient resources", __FUNCTION__, id.string());
1402                return STATUS_ERROR_FMT(ERROR_MAX_CAMERAS_IN_USE,
1403                        "Torch for camera \"%s\" is not available due to insufficient resources",
1404                        id.string());
1405            }
1406        }
1407    }
1408
1409    {
1410        // Update UID map - this is used in the torch status changed callbacks, so must be done
1411        // before setTorchMode
1412        Mutex::Autolock al(mTorchUidMapMutex);
1413        if (mTorchUidMap.find(id) == mTorchUidMap.end()) {
1414            mTorchUidMap[id].first = uid;
1415            mTorchUidMap[id].second = uid;
1416        } else {
1417            // Set the pending UID
1418            mTorchUidMap[id].first = uid;
1419        }
1420    }
1421
1422    status_t err = mFlashlight->setTorchMode(id, enabled);
1423
1424    if (err != OK) {
1425        int32_t errorCode;
1426        String8 msg;
1427        switch (err) {
1428            case -ENOSYS:
1429                msg = String8::format("Camera \"%s\" has no flashlight",
1430                    id.string());
1431                errorCode = ERROR_ILLEGAL_ARGUMENT;
1432                break;
1433            default:
1434                msg = String8::format(
1435                    "Setting torch mode of camera \"%s\" to %d failed: %s (%d)",
1436                    id.string(), enabled, strerror(-err), err);
1437                errorCode = ERROR_INVALID_OPERATION;
1438        }
1439        ALOGE("%s: %s", __FUNCTION__, msg.string());
1440        return STATUS_ERROR(errorCode, msg.string());
1441    }
1442
1443    {
1444        // update the link to client's death
1445        Mutex::Autolock al(mTorchClientMapMutex);
1446        ssize_t index = mTorchClientMap.indexOfKey(id);
1447        if (enabled) {
1448            if (index == NAME_NOT_FOUND) {
1449                mTorchClientMap.add(id, clientBinder);
1450            } else {
1451                mTorchClientMap.valueAt(index)->unlinkToDeath(this);
1452                mTorchClientMap.replaceValueAt(index, clientBinder);
1453            }
1454            clientBinder->linkToDeath(this);
1455        } else if (index != NAME_NOT_FOUND) {
1456            mTorchClientMap.valueAt(index)->unlinkToDeath(this);
1457        }
1458    }
1459
1460    return Status::ok();
1461}
1462
1463Status CameraService::notifySystemEvent(int32_t eventId,
1464        const std::vector<int32_t>& args) {
1465    ATRACE_CALL();
1466
1467    switch(eventId) {
1468        case ICameraService::EVENT_USER_SWITCHED: {
1469            doUserSwitch(/*newUserIds*/ args);
1470            break;
1471        }
1472        case ICameraService::EVENT_NONE:
1473        default: {
1474            ALOGW("%s: Received invalid system event from system_server: %d", __FUNCTION__,
1475                    eventId);
1476            break;
1477        }
1478    }
1479    return Status::ok();
1480}
1481
1482Status CameraService::addListener(const sp<ICameraServiceListener>& listener) {
1483    ATRACE_CALL();
1484
1485    ALOGV("%s: Add listener %p", __FUNCTION__, listener.get());
1486
1487    if (listener == nullptr) {
1488        ALOGE("%s: Listener must not be null", __FUNCTION__);
1489        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Null listener given to addListener");
1490    }
1491
1492    Mutex::Autolock lock(mServiceLock);
1493
1494    {
1495        Mutex::Autolock lock(mStatusListenerLock);
1496        for (auto& it : mListenerList) {
1497            if (IInterface::asBinder(it) == IInterface::asBinder(listener)) {
1498                ALOGW("%s: Tried to add listener %p which was already subscribed",
1499                      __FUNCTION__, listener.get());
1500                return STATUS_ERROR(ERROR_ALREADY_EXISTS, "Listener already registered");
1501            }
1502        }
1503
1504        mListenerList.push_back(listener);
1505    }
1506
1507
1508    /* Immediately signal current status to this listener only */
1509    {
1510        Mutex::Autolock lock(mCameraStatesLock);
1511        for (auto& i : mCameraStates) {
1512            // TODO: Update binder to use String16 for camera IDs and remove;
1513            int id = cameraIdToInt(i.first);
1514            if (id == -1) continue;
1515
1516            listener->onStatusChanged(i.second->getStatus(), id);
1517        }
1518    }
1519
1520    /* Immediately signal current torch status to this listener only */
1521    {
1522        Mutex::Autolock al(mTorchStatusMutex);
1523        for (size_t i = 0; i < mTorchStatusMap.size(); i++ ) {
1524            String16 id = String16(mTorchStatusMap.keyAt(i).string());
1525            listener->onTorchStatusChanged(mTorchStatusMap.valueAt(i), id);
1526        }
1527    }
1528
1529    return Status::ok();
1530}
1531
1532Status CameraService::removeListener(const sp<ICameraServiceListener>& listener) {
1533    ATRACE_CALL();
1534
1535    ALOGV("%s: Remove listener %p", __FUNCTION__, listener.get());
1536
1537    if (listener == 0) {
1538        ALOGE("%s: Listener must not be null", __FUNCTION__);
1539        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Null listener given to removeListener");
1540    }
1541
1542    Mutex::Autolock lock(mServiceLock);
1543
1544    {
1545        Mutex::Autolock lock(mStatusListenerLock);
1546        for (auto it = mListenerList.begin(); it != mListenerList.end(); it++) {
1547            if (IInterface::asBinder(*it) == IInterface::asBinder(listener)) {
1548                mListenerList.erase(it);
1549                return Status::ok();
1550            }
1551        }
1552    }
1553
1554    ALOGW("%s: Tried to remove a listener %p which was not subscribed",
1555          __FUNCTION__, listener.get());
1556
1557    return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Unregistered listener given to removeListener");
1558}
1559
1560Status CameraService::getLegacyParameters(int cameraId, /*out*/String16* parameters) {
1561
1562    ATRACE_CALL();
1563    ALOGV("%s: for camera ID = %d", __FUNCTION__, cameraId);
1564
1565    if (parameters == NULL) {
1566        ALOGE("%s: parameters must not be null", __FUNCTION__);
1567        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Parameters must not be null");
1568    }
1569
1570    Status ret = Status::ok();
1571
1572    CameraParameters shimParams;
1573    if (!(ret = getLegacyParametersLazy(cameraId, /*out*/&shimParams)).isOk()) {
1574        // Error logged by caller
1575        return ret;
1576    }
1577
1578    String8 shimParamsString8 = shimParams.flatten();
1579    String16 shimParamsString16 = String16(shimParamsString8);
1580
1581    *parameters = shimParamsString16;
1582
1583    return ret;
1584}
1585
1586Status CameraService::supportsCameraApi(int cameraId, int apiVersion, bool *isSupported) {
1587    ATRACE_CALL();
1588
1589    ALOGV("%s: for camera ID = %d", __FUNCTION__, cameraId);
1590
1591    switch (apiVersion) {
1592        case API_VERSION_1:
1593        case API_VERSION_2:
1594            break;
1595        default:
1596            String8 msg = String8::format("Unknown API version %d", apiVersion);
1597            ALOGE("%s: %s", __FUNCTION__, msg.string());
1598            return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, msg.string());
1599    }
1600
1601    int facing = -1;
1602    int deviceVersion = getDeviceVersion(cameraId, &facing);
1603
1604    switch(deviceVersion) {
1605        case CAMERA_DEVICE_API_VERSION_1_0:
1606        case CAMERA_DEVICE_API_VERSION_3_0:
1607        case CAMERA_DEVICE_API_VERSION_3_1:
1608            if (apiVersion == API_VERSION_2) {
1609                ALOGV("%s: Camera id %d uses HAL version %d <3.2, doesn't support api2 without shim",
1610                        __FUNCTION__, cameraId, deviceVersion);
1611                *isSupported = false;
1612            } else { // if (apiVersion == API_VERSION_1) {
1613                ALOGV("%s: Camera id %d uses older HAL before 3.2, but api1 is always supported",
1614                        __FUNCTION__, cameraId);
1615                *isSupported = true;
1616            }
1617            break;
1618        case CAMERA_DEVICE_API_VERSION_3_2:
1619        case CAMERA_DEVICE_API_VERSION_3_3:
1620            ALOGV("%s: Camera id %d uses HAL3.2 or newer, supports api1/api2 directly",
1621                    __FUNCTION__, cameraId);
1622            *isSupported = true;
1623            break;
1624        case -1: {
1625            String8 msg = String8::format("Unknown camera ID %d", cameraId);
1626            ALOGE("%s: %s", __FUNCTION__, msg.string());
1627            return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, msg.string());
1628        }
1629        default: {
1630            String8 msg = String8::format("Unknown device version %d for device %d",
1631                    deviceVersion, cameraId);
1632            ALOGE("%s: %s", __FUNCTION__, msg.string());
1633            return STATUS_ERROR(ERROR_INVALID_OPERATION, msg.string());
1634        }
1635    }
1636
1637    return Status::ok();
1638}
1639
1640void CameraService::removeByClient(const BasicClient* client) {
1641    Mutex::Autolock lock(mServiceLock);
1642    for (auto& i : mActiveClientManager.getAll()) {
1643        auto clientSp = i->getValue();
1644        if (clientSp.get() == client) {
1645            mActiveClientManager.remove(i);
1646        }
1647    }
1648}
1649
1650bool CameraService::evictClientIdByRemote(const wp<IBinder>& remote) {
1651    const int callingPid = getCallingPid();
1652    const int servicePid = getpid();
1653    bool ret = false;
1654    {
1655        // Acquire mServiceLock and prevent other clients from connecting
1656        std::unique_ptr<AutoConditionLock> lock =
1657                AutoConditionLock::waitAndAcquire(mServiceLockWrapper);
1658
1659
1660        std::vector<sp<BasicClient>> evicted;
1661        for (auto& i : mActiveClientManager.getAll()) {
1662            auto clientSp = i->getValue();
1663            if (clientSp.get() == nullptr) {
1664                ALOGE("%s: Dead client still in mActiveClientManager.", __FUNCTION__);
1665                mActiveClientManager.remove(i);
1666                continue;
1667            }
1668            if (remote == clientSp->getRemote() && (callingPid == servicePid ||
1669                    callingPid == clientSp->getClientPid())) {
1670                mActiveClientManager.remove(i);
1671                evicted.push_back(clientSp);
1672
1673                // Notify the client of disconnection
1674                clientSp->notifyError(
1675                        hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED,
1676                        CaptureResultExtras());
1677            }
1678        }
1679
1680        // Do not hold mServiceLock while disconnecting clients, but retain the condition blocking
1681        // other clients from connecting in mServiceLockWrapper if held
1682        mServiceLock.unlock();
1683
1684        // Do not clear caller identity, remote caller should be client proccess
1685
1686        for (auto& i : evicted) {
1687            if (i.get() != nullptr) {
1688                i->disconnect();
1689                ret = true;
1690            }
1691        }
1692
1693        // Reacquire mServiceLock
1694        mServiceLock.lock();
1695
1696    } // lock is destroyed, allow further connect calls
1697
1698    return ret;
1699}
1700
1701
1702/**
1703 * Check camera capabilities, such as support for basic color operation
1704 * Also check that the device HAL version is still in support
1705 */
1706int CameraService::checkCameraCapabilities(int id, camera_info info, int *latestStrangeCameraId) {
1707    // device_version undefined in CAMERA_MODULE_API_VERSION_1_0,
1708    // All CAMERA_MODULE_API_VERSION_1_0 devices are backward-compatible
1709    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0) {
1710        // Verify the device version is in the supported range
1711        switch (info.device_version) {
1712            case CAMERA_DEVICE_API_VERSION_1_0:
1713            case CAMERA_DEVICE_API_VERSION_3_0:
1714            case CAMERA_DEVICE_API_VERSION_3_1:
1715            case CAMERA_DEVICE_API_VERSION_3_2:
1716            case CAMERA_DEVICE_API_VERSION_3_3:
1717                // in support
1718                break;
1719            case CAMERA_DEVICE_API_VERSION_2_0:
1720            case CAMERA_DEVICE_API_VERSION_2_1:
1721                // no longer supported
1722            default:
1723                ALOGE("%s: Device %d has HAL version %x, which is not supported",
1724                        __FUNCTION__, id, info.device_version);
1725                String8 msg = String8::format(
1726                        "Unsupported device HAL version %x for device %d",
1727                        info.device_version, id);
1728                logServiceError(msg.string(), NO_INIT);
1729                return NO_INIT;
1730        }
1731    }
1732
1733    // Assume all devices pre-v3.3 are backward-compatible
1734    bool isBackwardCompatible = true;
1735    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0
1736            && info.device_version >= CAMERA_DEVICE_API_VERSION_3_3) {
1737        isBackwardCompatible = false;
1738        status_t res;
1739        camera_metadata_ro_entry_t caps;
1740        res = find_camera_metadata_ro_entry(
1741            info.static_camera_characteristics,
1742            ANDROID_REQUEST_AVAILABLE_CAPABILITIES,
1743            &caps);
1744        if (res != 0) {
1745            ALOGW("%s: Unable to find camera capabilities for camera device %d",
1746                    __FUNCTION__, id);
1747            caps.count = 0;
1748        }
1749        for (size_t i = 0; i < caps.count; i++) {
1750            if (caps.data.u8[i] ==
1751                    ANDROID_REQUEST_AVAILABLE_CAPABILITIES_BACKWARD_COMPATIBLE) {
1752                isBackwardCompatible = true;
1753                break;
1754            }
1755        }
1756    }
1757
1758    if (!isBackwardCompatible) {
1759        mNumberOfNormalCameras--;
1760        *latestStrangeCameraId = id;
1761    } else {
1762        if (id > *latestStrangeCameraId) {
1763            ALOGE("%s: Normal camera ID %d higher than strange camera ID %d. "
1764                    "This is not allowed due backward-compatibility requirements",
1765                    __FUNCTION__, id, *latestStrangeCameraId);
1766            logServiceError("Invalid order of camera devices", NO_INIT);
1767            mNumberOfCameras = 0;
1768            mNumberOfNormalCameras = 0;
1769            return NO_INIT;
1770        }
1771    }
1772    return OK;
1773}
1774
1775std::shared_ptr<CameraService::CameraState> CameraService::getCameraState(
1776        const String8& cameraId) const {
1777    std::shared_ptr<CameraState> state;
1778    {
1779        Mutex::Autolock lock(mCameraStatesLock);
1780        auto iter = mCameraStates.find(cameraId);
1781        if (iter != mCameraStates.end()) {
1782            state = iter->second;
1783        }
1784    }
1785    return state;
1786}
1787
1788sp<CameraService::BasicClient> CameraService::removeClientLocked(const String8& cameraId) {
1789    // Remove from active clients list
1790    auto clientDescriptorPtr = mActiveClientManager.remove(cameraId);
1791    if (clientDescriptorPtr == nullptr) {
1792        ALOGW("%s: Could not evict client, no client for camera ID %s", __FUNCTION__,
1793                cameraId.string());
1794        return sp<BasicClient>{nullptr};
1795    }
1796
1797    return clientDescriptorPtr->getValue();
1798}
1799
1800void CameraService::doUserSwitch(const std::vector<int32_t>& newUserIds) {
1801    // Acquire mServiceLock and prevent other clients from connecting
1802    std::unique_ptr<AutoConditionLock> lock =
1803            AutoConditionLock::waitAndAcquire(mServiceLockWrapper);
1804
1805    std::set<userid_t> newAllowedUsers;
1806    for (size_t i = 0; i < newUserIds.size(); i++) {
1807        if (newUserIds[i] < 0) {
1808            ALOGE("%s: Bad user ID %d given during user switch, ignoring.",
1809                    __FUNCTION__, newUserIds[i]);
1810            return;
1811        }
1812        newAllowedUsers.insert(static_cast<userid_t>(newUserIds[i]));
1813    }
1814
1815
1816    if (newAllowedUsers == mAllowedUsers) {
1817        ALOGW("%s: Received notification of user switch with no updated user IDs.", __FUNCTION__);
1818        return;
1819    }
1820
1821    logUserSwitch(mAllowedUsers, newAllowedUsers);
1822
1823    mAllowedUsers = std::move(newAllowedUsers);
1824
1825    // Current user has switched, evict all current clients.
1826    std::vector<sp<BasicClient>> evicted;
1827    for (auto& i : mActiveClientManager.getAll()) {
1828        auto clientSp = i->getValue();
1829
1830        if (clientSp.get() == nullptr) {
1831            ALOGE("%s: Dead client still in mActiveClientManager.", __FUNCTION__);
1832            continue;
1833        }
1834
1835        // Don't evict clients that are still allowed.
1836        uid_t clientUid = clientSp->getClientUid();
1837        userid_t clientUserId = multiuser_get_user_id(clientUid);
1838        if (mAllowedUsers.find(clientUserId) != mAllowedUsers.end()) {
1839            continue;
1840        }
1841
1842        evicted.push_back(clientSp);
1843
1844        String8 curTime = getFormattedCurrentTime();
1845
1846        ALOGE("Evicting conflicting client for camera ID %s due to user change",
1847                i->getKey().string());
1848
1849        // Log the clients evicted
1850        logEvent(String8::format("EVICT device %s client held by package %s (PID %"
1851                PRId32 ", priority %" PRId32 ")\n   - Evicted due to user switch.",
1852                i->getKey().string(), String8{clientSp->getPackageName()}.string(),
1853                i->getOwnerId(), i->getPriority()));
1854
1855    }
1856
1857    // Do not hold mServiceLock while disconnecting clients, but retain the condition
1858    // blocking other clients from connecting in mServiceLockWrapper if held.
1859    mServiceLock.unlock();
1860
1861    // Clear caller identity temporarily so client disconnect PID checks work correctly
1862    int64_t token = IPCThreadState::self()->clearCallingIdentity();
1863
1864    for (auto& i : evicted) {
1865        i->disconnect();
1866    }
1867
1868    IPCThreadState::self()->restoreCallingIdentity(token);
1869
1870    // Reacquire mServiceLock
1871    mServiceLock.lock();
1872}
1873
1874void CameraService::logEvent(const char* event) {
1875    String8 curTime = getFormattedCurrentTime();
1876    Mutex::Autolock l(mLogLock);
1877    mEventLog.add(String8::format("%s : %s", curTime.string(), event));
1878}
1879
1880void CameraService::logDisconnected(const char* cameraId, int clientPid,
1881        const char* clientPackage) {
1882    // Log the clients evicted
1883    logEvent(String8::format("DISCONNECT device %s client for package %s (PID %d)", cameraId,
1884            clientPackage, clientPid));
1885}
1886
1887void CameraService::logConnected(const char* cameraId, int clientPid,
1888        const char* clientPackage) {
1889    // Log the clients evicted
1890    logEvent(String8::format("CONNECT device %s client for package %s (PID %d)", cameraId,
1891            clientPackage, clientPid));
1892}
1893
1894void CameraService::logRejected(const char* cameraId, int clientPid,
1895        const char* clientPackage, const char* reason) {
1896    // Log the client rejected
1897    logEvent(String8::format("REJECT device %s client for package %s (PID %d), reason: (%s)",
1898            cameraId, clientPackage, clientPid, reason));
1899}
1900
1901void CameraService::logUserSwitch(const std::set<userid_t>& oldUserIds,
1902        const std::set<userid_t>& newUserIds) {
1903    String8 newUsers = toString(newUserIds);
1904    String8 oldUsers = toString(oldUserIds);
1905    // Log the new and old users
1906    logEvent(String8::format("USER_SWITCH previous allowed users: %s , current allowed users: %s",
1907            oldUsers.string(), newUsers.string()));
1908}
1909
1910void CameraService::logDeviceRemoved(const char* cameraId, const char* reason) {
1911    // Log the device removal
1912    logEvent(String8::format("REMOVE device %s, reason: (%s)", cameraId, reason));
1913}
1914
1915void CameraService::logDeviceAdded(const char* cameraId, const char* reason) {
1916    // Log the device removal
1917    logEvent(String8::format("ADD device %s, reason: (%s)", cameraId, reason));
1918}
1919
1920void CameraService::logClientDied(int clientPid, const char* reason) {
1921    // Log the device removal
1922    logEvent(String8::format("DIED client(s) with PID %d, reason: (%s)", clientPid, reason));
1923}
1924
1925void CameraService::logServiceError(const char* msg, int errorCode) {
1926    String8 curTime = getFormattedCurrentTime();
1927    logEvent(String8::format("SERVICE ERROR: %s : %d (%s)", msg, errorCode, strerror(-errorCode)));
1928}
1929
1930status_t CameraService::onTransact(uint32_t code, const Parcel& data, Parcel* reply,
1931        uint32_t flags) {
1932
1933    const int pid = getCallingPid();
1934    const int selfPid = getpid();
1935
1936    // Permission checks
1937    switch (code) {
1938        case BnCameraService::NOTIFYSYSTEMEVENT: {
1939            if (pid != selfPid) {
1940                // Ensure we're being called by system_server, or similar process with
1941                // permissions to notify the camera service about system events
1942                if (!checkCallingPermission(
1943                        String16("android.permission.CAMERA_SEND_SYSTEM_EVENTS"))) {
1944                    const int uid = getCallingUid();
1945                    ALOGE("Permission Denial: cannot send updates to camera service about system"
1946                            " events from pid=%d, uid=%d", pid, uid);
1947                    return PERMISSION_DENIED;
1948                }
1949            }
1950            break;
1951        }
1952    }
1953
1954    return BnCameraService::onTransact(code, data, reply, flags);
1955}
1956
1957// We share the media players for shutter and recording sound for all clients.
1958// A reference count is kept to determine when we will actually release the
1959// media players.
1960
1961MediaPlayer* CameraService::newMediaPlayer(const char *file) {
1962    MediaPlayer* mp = new MediaPlayer();
1963    if (mp->setDataSource(NULL /* httpService */, file, NULL) == NO_ERROR) {
1964        mp->setAudioStreamType(AUDIO_STREAM_ENFORCED_AUDIBLE);
1965        mp->prepare();
1966    } else {
1967        ALOGE("Failed to load CameraService sounds: %s", file);
1968        return NULL;
1969    }
1970    return mp;
1971}
1972
1973void CameraService::loadSound() {
1974    ATRACE_CALL();
1975
1976    Mutex::Autolock lock(mSoundLock);
1977    LOG1("CameraService::loadSound ref=%d", mSoundRef);
1978    if (mSoundRef++) return;
1979
1980    mSoundPlayer[SOUND_SHUTTER] = newMediaPlayer("/system/media/audio/ui/camera_click.ogg");
1981    mSoundPlayer[SOUND_RECORDING_START] = newMediaPlayer("/system/media/audio/ui/VideoRecord.ogg");
1982    mSoundPlayer[SOUND_RECORDING_STOP] = newMediaPlayer("/system/media/audio/ui/VideoStop.ogg");
1983}
1984
1985void CameraService::releaseSound() {
1986    Mutex::Autolock lock(mSoundLock);
1987    LOG1("CameraService::releaseSound ref=%d", mSoundRef);
1988    if (--mSoundRef) return;
1989
1990    for (int i = 0; i < NUM_SOUNDS; i++) {
1991        if (mSoundPlayer[i] != 0) {
1992            mSoundPlayer[i]->disconnect();
1993            mSoundPlayer[i].clear();
1994        }
1995    }
1996}
1997
1998void CameraService::playSound(sound_kind kind) {
1999    ATRACE_CALL();
2000
2001    LOG1("playSound(%d)", kind);
2002    Mutex::Autolock lock(mSoundLock);
2003    sp<MediaPlayer> player = mSoundPlayer[kind];
2004    if (player != 0) {
2005        player->seekTo(0);
2006        player->start();
2007    }
2008}
2009
2010// ----------------------------------------------------------------------------
2011
2012CameraService::Client::Client(const sp<CameraService>& cameraService,
2013        const sp<ICameraClient>& cameraClient,
2014        const String16& clientPackageName,
2015        int cameraId, int cameraFacing,
2016        int clientPid, uid_t clientUid,
2017        int servicePid) :
2018        CameraService::BasicClient(cameraService,
2019                IInterface::asBinder(cameraClient),
2020                clientPackageName,
2021                cameraId, cameraFacing,
2022                clientPid, clientUid,
2023                servicePid)
2024{
2025    int callingPid = getCallingPid();
2026    LOG1("Client::Client E (pid %d, id %d)", callingPid, cameraId);
2027
2028    mRemoteCallback = cameraClient;
2029
2030    cameraService->loadSound();
2031
2032    LOG1("Client::Client X (pid %d, id %d)", callingPid, cameraId);
2033}
2034
2035// tear down the client
2036CameraService::Client::~Client() {
2037    ALOGV("~Client");
2038    mDestructionStarted = true;
2039
2040    mCameraService->releaseSound();
2041    // unconditionally disconnect. function is idempotent
2042    Client::disconnect();
2043}
2044
2045CameraService::BasicClient::BasicClient(const sp<CameraService>& cameraService,
2046        const sp<IBinder>& remoteCallback,
2047        const String16& clientPackageName,
2048        int cameraId, int cameraFacing,
2049        int clientPid, uid_t clientUid,
2050        int servicePid):
2051        mClientPackageName(clientPackageName), mDisconnected(false)
2052{
2053    mCameraService = cameraService;
2054    mRemoteBinder = remoteCallback;
2055    mCameraId = cameraId;
2056    mCameraFacing = cameraFacing;
2057    mClientPid = clientPid;
2058    mClientUid = clientUid;
2059    mServicePid = servicePid;
2060    mOpsActive = false;
2061    mDestructionStarted = false;
2062
2063    // In some cases the calling code has no access to the package it runs under.
2064    // For example, NDK camera API.
2065    // In this case we will get the packages for the calling UID and pick the first one
2066    // for attributing the app op. This will work correctly for runtime permissions
2067    // as for legacy apps we will toggle the app op for all packages in the UID.
2068    // The caveat is that the operation may be attributed to the wrong package and
2069    // stats based on app ops may be slightly off.
2070    if (mClientPackageName.size() <= 0) {
2071        sp<IServiceManager> sm = defaultServiceManager();
2072        sp<IBinder> binder = sm->getService(String16(kPermissionServiceName));
2073        if (binder == 0) {
2074            ALOGE("Cannot get permission service");
2075            // Leave mClientPackageName unchanged (empty) and the further interaction
2076            // with camera will fail in BasicClient::startCameraOps
2077            return;
2078        }
2079
2080        sp<IPermissionController> permCtrl = interface_cast<IPermissionController>(binder);
2081        Vector<String16> packages;
2082
2083        permCtrl->getPackagesForUid(mClientUid, packages);
2084
2085        if (packages.isEmpty()) {
2086            ALOGE("No packages for calling UID");
2087            // Leave mClientPackageName unchanged (empty) and the further interaction
2088            // with camera will fail in BasicClient::startCameraOps
2089            return;
2090        }
2091        mClientPackageName = packages[0];
2092    }
2093}
2094
2095CameraService::BasicClient::~BasicClient() {
2096    ALOGV("~BasicClient");
2097    mDestructionStarted = true;
2098}
2099
2100binder::Status CameraService::BasicClient::disconnect() {
2101    binder::Status res = Status::ok();
2102    if (mDisconnected) {
2103        return res;
2104    }
2105    mDisconnected = true;
2106
2107    mCameraService->removeByClient(this);
2108    mCameraService->logDisconnected(String8::format("%d", mCameraId), mClientPid,
2109            String8(mClientPackageName));
2110
2111    sp<IBinder> remote = getRemote();
2112    if (remote != nullptr) {
2113        remote->unlinkToDeath(mCameraService);
2114    }
2115
2116    finishCameraOps();
2117    ALOGI("%s: Disconnected client for camera %d for PID %d", __FUNCTION__, mCameraId, mClientPid);
2118
2119    // client shouldn't be able to call into us anymore
2120    mClientPid = 0;
2121
2122    return res;
2123}
2124
2125status_t CameraService::BasicClient::dump(int, const Vector<String16>&) {
2126    // No dumping of clients directly over Binder,
2127    // must go through CameraService::dump
2128    android_errorWriteWithInfoLog(SN_EVENT_LOG_ID, "26265403",
2129            IPCThreadState::self()->getCallingUid(), NULL, 0);
2130    return OK;
2131}
2132
2133String16 CameraService::BasicClient::getPackageName() const {
2134    return mClientPackageName;
2135}
2136
2137
2138int CameraService::BasicClient::getClientPid() const {
2139    return mClientPid;
2140}
2141
2142uid_t CameraService::BasicClient::getClientUid() const {
2143    return mClientUid;
2144}
2145
2146bool CameraService::BasicClient::canCastToApiClient(apiLevel level) const {
2147    // Defaults to API2.
2148    return level == API_2;
2149}
2150
2151status_t CameraService::BasicClient::startCameraOps() {
2152    ATRACE_CALL();
2153
2154    int32_t res;
2155    // Notify app ops that the camera is not available
2156    mOpsCallback = new OpsCallback(this);
2157
2158    {
2159        ALOGV("%s: Start camera ops, package name = %s, client UID = %d",
2160              __FUNCTION__, String8(mClientPackageName).string(), mClientUid);
2161    }
2162
2163    mAppOpsManager.startWatchingMode(AppOpsManager::OP_CAMERA,
2164            mClientPackageName, mOpsCallback);
2165    res = mAppOpsManager.startOp(AppOpsManager::OP_CAMERA,
2166            mClientUid, mClientPackageName);
2167
2168    if (res == AppOpsManager::MODE_ERRORED) {
2169        ALOGI("Camera %d: Access for \"%s\" has been revoked",
2170                mCameraId, String8(mClientPackageName).string());
2171        return PERMISSION_DENIED;
2172    }
2173
2174    if (res == AppOpsManager::MODE_IGNORED) {
2175        ALOGI("Camera %d: Access for \"%s\" has been restricted",
2176                mCameraId, String8(mClientPackageName).string());
2177        // Return the same error as for device policy manager rejection
2178        return -EACCES;
2179    }
2180
2181    mOpsActive = true;
2182
2183    // Transition device availability listeners from PRESENT -> NOT_AVAILABLE
2184    mCameraService->updateStatus(ICameraServiceListener::STATUS_NOT_AVAILABLE,
2185            String8::format("%d", mCameraId));
2186
2187    // Transition device state to OPEN
2188    mCameraService->updateProxyDeviceState(ICameraServiceProxy::CAMERA_STATE_OPEN,
2189            String8::format("%d", mCameraId));
2190
2191    return OK;
2192}
2193
2194status_t CameraService::BasicClient::finishCameraOps() {
2195    ATRACE_CALL();
2196
2197    // Check if startCameraOps succeeded, and if so, finish the camera op
2198    if (mOpsActive) {
2199        // Notify app ops that the camera is available again
2200        mAppOpsManager.finishOp(AppOpsManager::OP_CAMERA, mClientUid,
2201                mClientPackageName);
2202        mOpsActive = false;
2203
2204        std::initializer_list<int32_t> rejected = {ICameraServiceListener::STATUS_NOT_PRESENT,
2205                ICameraServiceListener::STATUS_ENUMERATING};
2206
2207        // Transition to PRESENT if the camera is not in either of the rejected states
2208        mCameraService->updateStatus(ICameraServiceListener::STATUS_PRESENT,
2209                String8::format("%d", mCameraId), rejected);
2210
2211        // Transition device state to CLOSED
2212        mCameraService->updateProxyDeviceState(ICameraServiceProxy::CAMERA_STATE_CLOSED,
2213                String8::format("%d", mCameraId));
2214
2215        // Notify flashlight that a camera device is closed.
2216        mCameraService->mFlashlight->deviceClosed(
2217                String8::format("%d", mCameraId));
2218    }
2219    // Always stop watching, even if no camera op is active
2220    if (mOpsCallback != NULL) {
2221        mAppOpsManager.stopWatchingMode(mOpsCallback);
2222    }
2223    mOpsCallback.clear();
2224
2225    return OK;
2226}
2227
2228void CameraService::BasicClient::opChanged(int32_t op, const String16& packageName) {
2229    ATRACE_CALL();
2230
2231    String8 name(packageName);
2232    String8 myName(mClientPackageName);
2233
2234    if (op != AppOpsManager::OP_CAMERA) {
2235        ALOGW("Unexpected app ops notification received: %d", op);
2236        return;
2237    }
2238
2239    int32_t res;
2240    res = mAppOpsManager.checkOp(AppOpsManager::OP_CAMERA,
2241            mClientUid, mClientPackageName);
2242    ALOGV("checkOp returns: %d, %s ", res,
2243            res == AppOpsManager::MODE_ALLOWED ? "ALLOWED" :
2244            res == AppOpsManager::MODE_IGNORED ? "IGNORED" :
2245            res == AppOpsManager::MODE_ERRORED ? "ERRORED" :
2246            "UNKNOWN");
2247
2248    if (res != AppOpsManager::MODE_ALLOWED) {
2249        ALOGI("Camera %d: Access for \"%s\" revoked", mCameraId,
2250                myName.string());
2251        // Reset the client PID to allow server-initiated disconnect,
2252        // and to prevent further calls by client.
2253        mClientPid = getCallingPid();
2254        CaptureResultExtras resultExtras; // a dummy result (invalid)
2255        notifyError(hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_SERVICE, resultExtras);
2256        disconnect();
2257    }
2258}
2259
2260// ----------------------------------------------------------------------------
2261
2262// Provide client strong pointer for callbacks.
2263sp<CameraService::Client> CameraService::Client::getClientFromCookie(void* user) {
2264    String8 cameraId = String8::format("%d", (int)(intptr_t) user);
2265    auto clientDescriptor = gCameraService->mActiveClientManager.get(cameraId);
2266    if (clientDescriptor != nullptr) {
2267        return sp<Client>{
2268                static_cast<Client*>(clientDescriptor->getValue().get())};
2269    }
2270    return sp<Client>{nullptr};
2271}
2272
2273void CameraService::Client::notifyError(int32_t errorCode,
2274        const CaptureResultExtras& resultExtras) {
2275    (void) errorCode;
2276    (void) resultExtras;
2277    if (mRemoteCallback != NULL) {
2278        mRemoteCallback->notifyCallback(CAMERA_MSG_ERROR, CAMERA_ERROR_RELEASED, 0);
2279    } else {
2280        ALOGE("mRemoteCallback is NULL!!");
2281    }
2282}
2283
2284// NOTE: function is idempotent
2285binder::Status CameraService::Client::disconnect() {
2286    ALOGV("Client::disconnect");
2287    return BasicClient::disconnect();
2288}
2289
2290bool CameraService::Client::canCastToApiClient(apiLevel level) const {
2291    return level == API_1;
2292}
2293
2294CameraService::Client::OpsCallback::OpsCallback(wp<BasicClient> client):
2295        mClient(client) {
2296}
2297
2298void CameraService::Client::OpsCallback::opChanged(int32_t op,
2299        const String16& packageName) {
2300    sp<BasicClient> client = mClient.promote();
2301    if (client != NULL) {
2302        client->opChanged(op, packageName);
2303    }
2304}
2305
2306// ----------------------------------------------------------------------------
2307//                  CameraState
2308// ----------------------------------------------------------------------------
2309
2310CameraService::CameraState::CameraState(const String8& id, int cost,
2311        const std::set<String8>& conflicting) : mId(id),
2312        mStatus(ICameraServiceListener::STATUS_PRESENT), mCost(cost), mConflicting(conflicting) {}
2313
2314CameraService::CameraState::~CameraState() {}
2315
2316int32_t CameraService::CameraState::getStatus() const {
2317    Mutex::Autolock lock(mStatusLock);
2318    return mStatus;
2319}
2320
2321CameraParameters CameraService::CameraState::getShimParams() const {
2322    return mShimParams;
2323}
2324
2325void CameraService::CameraState::setShimParams(const CameraParameters& params) {
2326    mShimParams = params;
2327}
2328
2329int CameraService::CameraState::getCost() const {
2330    return mCost;
2331}
2332
2333std::set<String8> CameraService::CameraState::getConflicting() const {
2334    return mConflicting;
2335}
2336
2337String8 CameraService::CameraState::getId() const {
2338    return mId;
2339}
2340
2341// ----------------------------------------------------------------------------
2342//                  ClientEventListener
2343// ----------------------------------------------------------------------------
2344
2345void CameraService::ClientEventListener::onClientAdded(
2346        const resource_policy::ClientDescriptor<String8,
2347        sp<CameraService::BasicClient>>& descriptor) {
2348    auto basicClient = descriptor.getValue();
2349    if (basicClient.get() != nullptr) {
2350        BatteryNotifier& notifier(BatteryNotifier::getInstance());
2351        notifier.noteStartCamera(descriptor.getKey(),
2352                static_cast<int>(basicClient->getClientUid()));
2353    }
2354}
2355
2356void CameraService::ClientEventListener::onClientRemoved(
2357        const resource_policy::ClientDescriptor<String8,
2358        sp<CameraService::BasicClient>>& descriptor) {
2359    auto basicClient = descriptor.getValue();
2360    if (basicClient.get() != nullptr) {
2361        BatteryNotifier& notifier(BatteryNotifier::getInstance());
2362        notifier.noteStopCamera(descriptor.getKey(),
2363                static_cast<int>(basicClient->getClientUid()));
2364    }
2365}
2366
2367
2368// ----------------------------------------------------------------------------
2369//                  CameraClientManager
2370// ----------------------------------------------------------------------------
2371
2372CameraService::CameraClientManager::CameraClientManager() {
2373    setListener(std::make_shared<ClientEventListener>());
2374}
2375
2376CameraService::CameraClientManager::~CameraClientManager() {}
2377
2378sp<CameraService::BasicClient> CameraService::CameraClientManager::getCameraClient(
2379        const String8& id) const {
2380    auto descriptor = get(id);
2381    if (descriptor == nullptr) {
2382        return sp<BasicClient>{nullptr};
2383    }
2384    return descriptor->getValue();
2385}
2386
2387String8 CameraService::CameraClientManager::toString() const {
2388    auto all = getAll();
2389    String8 ret("[");
2390    bool hasAny = false;
2391    for (auto& i : all) {
2392        hasAny = true;
2393        String8 key = i->getKey();
2394        int32_t cost = i->getCost();
2395        int32_t pid = i->getOwnerId();
2396        int32_t priority = i->getPriority();
2397        auto conflicting = i->getConflicting();
2398        auto clientSp = i->getValue();
2399        String8 packageName;
2400        userid_t clientUserId = 0;
2401        if (clientSp.get() != nullptr) {
2402            packageName = String8{clientSp->getPackageName()};
2403            uid_t clientUid = clientSp->getClientUid();
2404            clientUserId = multiuser_get_user_id(clientUid);
2405        }
2406        ret.appendFormat("\n(Camera ID: %s, Cost: %" PRId32 ", PID: %" PRId32 ", Priority: %"
2407                PRId32 ", ", key.string(), cost, pid, priority);
2408
2409        if (clientSp.get() != nullptr) {
2410            ret.appendFormat("User Id: %d, ", clientUserId);
2411        }
2412        if (packageName.size() != 0) {
2413            ret.appendFormat("Client Package Name: %s", packageName.string());
2414        }
2415
2416        ret.append(", Conflicting Client Devices: {");
2417        for (auto& j : conflicting) {
2418            ret.appendFormat("%s, ", j.string());
2419        }
2420        ret.append("})");
2421    }
2422    if (hasAny) ret.append("\n");
2423    ret.append("]\n");
2424    return ret;
2425}
2426
2427CameraService::DescriptorPtr CameraService::CameraClientManager::makeClientDescriptor(
2428        const String8& key, const sp<BasicClient>& value, int32_t cost,
2429        const std::set<String8>& conflictingKeys, int32_t priority, int32_t ownerId) {
2430
2431    return std::make_shared<resource_policy::ClientDescriptor<String8, sp<BasicClient>>>(
2432            key, value, cost, conflictingKeys, priority, ownerId);
2433}
2434
2435CameraService::DescriptorPtr CameraService::CameraClientManager::makeClientDescriptor(
2436        const sp<BasicClient>& value, const CameraService::DescriptorPtr& partial) {
2437    return makeClientDescriptor(partial->getKey(), value, partial->getCost(),
2438            partial->getConflicting(), partial->getPriority(), partial->getOwnerId());
2439}
2440
2441// ----------------------------------------------------------------------------
2442
2443static const int kDumpLockRetries = 50;
2444static const int kDumpLockSleep = 60000;
2445
2446static bool tryLock(Mutex& mutex)
2447{
2448    bool locked = false;
2449    for (int i = 0; i < kDumpLockRetries; ++i) {
2450        if (mutex.tryLock() == NO_ERROR) {
2451            locked = true;
2452            break;
2453        }
2454        usleep(kDumpLockSleep);
2455    }
2456    return locked;
2457}
2458
2459status_t CameraService::dump(int fd, const Vector<String16>& args) {
2460    ATRACE_CALL();
2461
2462    String8 result("Dump of the Camera Service:\n");
2463    if (checkCallingPermission(String16("android.permission.DUMP")) == false) {
2464        result = result.format("Permission Denial: "
2465                "can't dump CameraService from pid=%d, uid=%d\n",
2466                getCallingPid(),
2467                getCallingUid());
2468        write(fd, result.string(), result.size());
2469    } else {
2470        bool locked = tryLock(mServiceLock);
2471        // failed to lock - CameraService is probably deadlocked
2472        if (!locked) {
2473            result.append("CameraService may be deadlocked\n");
2474            write(fd, result.string(), result.size());
2475        }
2476
2477        bool hasClient = false;
2478        if (!mModule) {
2479            result = String8::format("No camera module available!\n");
2480            write(fd, result.string(), result.size());
2481
2482            // Dump event log for error information
2483            dumpEventLog(fd);
2484
2485            if (locked) mServiceLock.unlock();
2486            return NO_ERROR;
2487        }
2488
2489        result = String8::format("Camera module HAL API version: 0x%x\n", mModule->getHalApiVersion());
2490        result.appendFormat("Camera module API version: 0x%x\n", mModule->getModuleApiVersion());
2491        result.appendFormat("Camera module name: %s\n", mModule->getModuleName());
2492        result.appendFormat("Camera module author: %s\n", mModule->getModuleAuthor());
2493        result.appendFormat("Number of camera devices: %d\n", mNumberOfCameras);
2494        result.appendFormat("Number of normal camera devices: %d\n", mNumberOfNormalCameras);
2495        String8 activeClientString = mActiveClientManager.toString();
2496        result.appendFormat("Active Camera Clients:\n%s", activeClientString.string());
2497        result.appendFormat("Allowed users:\n%s\n", toString(mAllowedUsers).string());
2498
2499        sp<VendorTagDescriptor> desc = VendorTagDescriptor::getGlobalVendorTagDescriptor();
2500        if (desc == NULL) {
2501            result.appendFormat("Vendor tags left unimplemented.\n");
2502        } else {
2503            result.appendFormat("Vendor tag definitions:\n");
2504        }
2505
2506        write(fd, result.string(), result.size());
2507
2508        if (desc != NULL) {
2509            desc->dump(fd, /*verbosity*/2, /*indentation*/4);
2510        }
2511
2512        dumpEventLog(fd);
2513
2514        bool stateLocked = tryLock(mCameraStatesLock);
2515        if (!stateLocked) {
2516            result = String8::format("CameraStates in use, may be deadlocked\n");
2517            write(fd, result.string(), result.size());
2518        }
2519
2520        for (auto& state : mCameraStates) {
2521            String8 cameraId = state.first;
2522            result = String8::format("Camera %s information:\n", cameraId.string());
2523            camera_info info;
2524
2525            // TODO: Change getCameraInfo + HAL to use String cameraIds
2526            status_t rc = mModule->getCameraInfo(cameraIdToInt(cameraId), &info);
2527            if (rc != OK) {
2528                result.appendFormat("  Error reading static information!\n");
2529                write(fd, result.string(), result.size());
2530            } else {
2531                result.appendFormat("  Facing: %s\n",
2532                        info.facing == CAMERA_FACING_BACK ? "BACK" : "FRONT");
2533                result.appendFormat("  Orientation: %d\n", info.orientation);
2534                int deviceVersion;
2535                if (mModule->getModuleApiVersion() < CAMERA_MODULE_API_VERSION_2_0) {
2536                    deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
2537                } else {
2538                    deviceVersion = info.device_version;
2539                }
2540
2541                auto conflicting = state.second->getConflicting();
2542                result.appendFormat("  Resource Cost: %d\n", state.second->getCost());
2543                result.appendFormat("  Conflicting Devices:");
2544                for (auto& id : conflicting) {
2545                    result.appendFormat(" %s", id.string());
2546                }
2547                if (conflicting.size() == 0) {
2548                    result.appendFormat(" NONE");
2549                }
2550                result.appendFormat("\n");
2551
2552                result.appendFormat("  Device version: %#x\n", deviceVersion);
2553                if (deviceVersion >= CAMERA_DEVICE_API_VERSION_3_0) {
2554                    result.appendFormat("  Device static metadata:\n");
2555                    write(fd, result.string(), result.size());
2556                    dump_indented_camera_metadata(info.static_camera_characteristics,
2557                            fd, /*verbosity*/2, /*indentation*/4);
2558                } else {
2559                    write(fd, result.string(), result.size());
2560                }
2561
2562                CameraParameters p = state.second->getShimParams();
2563                if (!p.isEmpty()) {
2564                    result = String8::format("  Camera1 API shim is using parameters:\n        ");
2565                    write(fd, result.string(), result.size());
2566                    p.dump(fd, args);
2567                }
2568            }
2569
2570            auto clientDescriptor = mActiveClientManager.get(cameraId);
2571            if (clientDescriptor == nullptr) {
2572                result = String8::format("  Device %s is closed, no client instance\n",
2573                        cameraId.string());
2574                write(fd, result.string(), result.size());
2575                continue;
2576            }
2577            hasClient = true;
2578            result = String8::format("  Device %s is open. Client instance dump:\n\n",
2579                    cameraId.string());
2580            result.appendFormat("Client priority level: %d\n", clientDescriptor->getPriority());
2581            result.appendFormat("Client PID: %d\n", clientDescriptor->getOwnerId());
2582
2583            auto client = clientDescriptor->getValue();
2584            result.appendFormat("Client package: %s\n",
2585                    String8(client->getPackageName()).string());
2586            write(fd, result.string(), result.size());
2587
2588            client->dumpClient(fd, args);
2589        }
2590
2591        if (stateLocked) mCameraStatesLock.unlock();
2592
2593        if (!hasClient) {
2594            result = String8::format("\nNo active camera clients yet.\n");
2595            write(fd, result.string(), result.size());
2596        }
2597
2598        if (locked) mServiceLock.unlock();
2599
2600        // Dump camera traces if there were any
2601        write(fd, "\n", 1);
2602        camera3::CameraTraces::dump(fd, args);
2603
2604        // change logging level
2605        int n = args.size();
2606        for (int i = 0; i + 1 < n; i++) {
2607            String16 verboseOption("-v");
2608            if (args[i] == verboseOption) {
2609                String8 levelStr(args[i+1]);
2610                int level = atoi(levelStr.string());
2611                result = String8::format("\nSetting log level to %d.\n", level);
2612                setLogLevel(level);
2613                write(fd, result.string(), result.size());
2614            }
2615        }
2616    }
2617    return NO_ERROR;
2618}
2619
2620void CameraService::dumpEventLog(int fd) {
2621    String8 result = String8("\nPrior client events (most recent at top):\n");
2622
2623    Mutex::Autolock l(mLogLock);
2624    for (const auto& msg : mEventLog) {
2625        result.appendFormat("  %s\n", msg.string());
2626    }
2627
2628    if (mEventLog.size() == DEFAULT_EVENT_LOG_LENGTH) {
2629        result.append("  ...\n");
2630    } else if (mEventLog.size() == 0) {
2631        result.append("  [no events yet]\n");
2632    }
2633    result.append("\n");
2634
2635    write(fd, result.string(), result.size());
2636}
2637
2638void CameraService::handleTorchClientBinderDied(const wp<IBinder> &who) {
2639    Mutex::Autolock al(mTorchClientMapMutex);
2640    for (size_t i = 0; i < mTorchClientMap.size(); i++) {
2641        if (mTorchClientMap[i] == who) {
2642            // turn off the torch mode that was turned on by dead client
2643            String8 cameraId = mTorchClientMap.keyAt(i);
2644            status_t res = mFlashlight->setTorchMode(cameraId, false);
2645            if (res) {
2646                ALOGE("%s: torch client died but couldn't turn off torch: "
2647                    "%s (%d)", __FUNCTION__, strerror(-res), res);
2648                return;
2649            }
2650            mTorchClientMap.removeItemsAt(i);
2651            break;
2652        }
2653    }
2654}
2655
2656/*virtual*/void CameraService::binderDied(const wp<IBinder> &who) {
2657
2658    /**
2659      * While tempting to promote the wp<IBinder> into a sp, it's actually not supported by the
2660      * binder driver
2661      */
2662
2663    logClientDied(getCallingPid(), String8("Binder died unexpectedly"));
2664
2665    // check torch client
2666    handleTorchClientBinderDied(who);
2667
2668    // check camera device client
2669    if(!evictClientIdByRemote(who)) {
2670        ALOGV("%s: Java client's binder death already cleaned up (normal case)", __FUNCTION__);
2671        return;
2672    }
2673
2674    ALOGE("%s: Java client's binder died, removing it from the list of active clients",
2675            __FUNCTION__);
2676}
2677
2678void CameraService::updateStatus(int32_t status, const String8& cameraId) {
2679    updateStatus(status, cameraId, {});
2680}
2681
2682void CameraService::updateStatus(int32_t status, const String8& cameraId,
2683        std::initializer_list<int32_t> rejectSourceStates) {
2684    // Do not lock mServiceLock here or can get into a deadlock from
2685    // connect() -> disconnect -> updateStatus
2686
2687    auto state = getCameraState(cameraId);
2688
2689    if (state == nullptr) {
2690        ALOGW("%s: Could not update the status for %s, no such device exists", __FUNCTION__,
2691                cameraId.string());
2692        return;
2693    }
2694
2695    // Update the status for this camera state, then send the onStatusChangedCallbacks to each
2696    // of the listeners with both the mStatusStatus and mStatusListenerLock held
2697    state->updateStatus(status, cameraId, rejectSourceStates, [this]
2698            (const String8& cameraId, int32_t status) {
2699
2700            if (status != ICameraServiceListener::STATUS_ENUMERATING) {
2701                // Update torch status if it has a flash unit.
2702                Mutex::Autolock al(mTorchStatusMutex);
2703                int32_t torchStatus;
2704                if (getTorchStatusLocked(cameraId, &torchStatus) !=
2705                        NAME_NOT_FOUND) {
2706                    int32_t newTorchStatus =
2707                            status == ICameraServiceListener::STATUS_PRESENT ?
2708                            ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF :
2709                            ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE;
2710                    if (torchStatus != newTorchStatus) {
2711                        onTorchStatusChangedLocked(cameraId, newTorchStatus);
2712                    }
2713                }
2714            }
2715
2716            Mutex::Autolock lock(mStatusListenerLock);
2717
2718            for (auto& listener : mListenerList) {
2719                // TODO: Refactor status listeners to use strings for Camera IDs and remove this.
2720                int id = cameraIdToInt(cameraId);
2721                if (id != -1) listener->onStatusChanged(status, id);
2722            }
2723        });
2724}
2725
2726void CameraService::updateProxyDeviceState(ICameraServiceProxy::CameraState newState,
2727        const String8& cameraId) {
2728    sp<ICameraServiceProxy> proxyBinder = getCameraServiceProxy();
2729    if (proxyBinder == nullptr) return;
2730    String16 id(cameraId);
2731    proxyBinder->notifyCameraState(id, newState);
2732}
2733
2734status_t CameraService::getTorchStatusLocked(
2735        const String8& cameraId,
2736        int32_t *status) const {
2737    if (!status) {
2738        return BAD_VALUE;
2739    }
2740    ssize_t index = mTorchStatusMap.indexOfKey(cameraId);
2741    if (index == NAME_NOT_FOUND) {
2742        // invalid camera ID or the camera doesn't have a flash unit
2743        return NAME_NOT_FOUND;
2744    }
2745
2746    *status = mTorchStatusMap.valueAt(index);
2747    return OK;
2748}
2749
2750status_t CameraService::setTorchStatusLocked(const String8& cameraId,
2751        int32_t status) {
2752    ssize_t index = mTorchStatusMap.indexOfKey(cameraId);
2753    if (index == NAME_NOT_FOUND) {
2754        return BAD_VALUE;
2755    }
2756    int32_t& item =
2757            mTorchStatusMap.editValueAt(index);
2758    item = status;
2759
2760    return OK;
2761}
2762
2763}; // namespace android
2764