CameraService.cpp revision e67f6da3673a6596a1058598c6cd4a9ed9cfdf15 
1/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 *      http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#define LOG_TAG "CameraService"
18#define ATRACE_TAG ATRACE_TAG_CAMERA
19//#define LOG_NDEBUG 0
20
21#include <algorithm>
22#include <climits>
23#include <stdio.h>
24#include <cstring>
25#include <ctime>
26#include <string>
27#include <sys/types.h>
28#include <inttypes.h>
29#include <pthread.h>
30
31#include <android/hardware/ICamera.h>
32#include <android/hardware/ICameraClient.h>
33
34#include <android-base/macros.h>
35#include <binder/AppOpsManager.h>
36#include <binder/IPCThreadState.h>
37#include <binder/IServiceManager.h>
38#include <binder/MemoryBase.h>
39#include <binder/MemoryHeapBase.h>
40#include <binder/ProcessInfoService.h>
41#include <cutils/atomic.h>
42#include <cutils/properties.h>
43#include <gui/Surface.h>
44#include <hardware/hardware.h>
45#include <memunreachable/memunreachable.h>
46#include <media/AudioSystem.h>
47#include <media/IMediaHTTPService.h>
48#include <media/mediaplayer.h>
49#include <mediautils/BatteryNotifier.h>
50#include <utils/Errors.h>
51#include <utils/Log.h>
52#include <utils/String16.h>
53#include <utils/Trace.h>
54#include <private/android_filesystem_config.h>
55#include <system/camera_vendor_tags.h>
56#include <system/camera_metadata.h>
57#include <system/camera.h>
58
59#include "CameraService.h"
60#include "api1/CameraClient.h"
61#include "api1/Camera2Client.h"
62#include "api2/CameraDeviceClient.h"
63#include "utils/CameraTraces.h"
64
65namespace {
66    const char* kPermissionServiceName = "permission";
67}; // namespace anonymous
68
69namespace android {
70
71using binder::Status;
72using namespace hardware;
73
74// ----------------------------------------------------------------------------
75// Logging support -- this is for debugging only
76// Use "adb shell dumpsys media.camera -v 1" to change it.
77volatile int32_t gLogLevel = 0;
78
79#define LOG1(...) ALOGD_IF(gLogLevel >= 1, __VA_ARGS__);
80#define LOG2(...) ALOGD_IF(gLogLevel >= 2, __VA_ARGS__);
81
82static void setLogLevel(int level) {
83    android_atomic_write(level, &gLogLevel);
84}
85
86// Convenience methods for constructing binder::Status objects for error returns
87
88#define STATUS_ERROR(errorCode, errorString) \
89    binder::Status::fromServiceSpecificError(errorCode, \
90            String8::format("%s:%d: %s", __FUNCTION__, __LINE__, errorString))
91
92#define STATUS_ERROR_FMT(errorCode, errorString, ...) \
93    binder::Status::fromServiceSpecificError(errorCode, \
94            String8::format("%s:%d: " errorString, __FUNCTION__, __LINE__, \
95                    __VA_ARGS__))
96
97// ----------------------------------------------------------------------------
98
99extern "C" {
100static void camera_device_status_change(
101        const struct camera_module_callbacks* callbacks,
102        int camera_id,
103        int new_status) {
104    sp<CameraService> cs = const_cast<CameraService*>(
105            static_cast<const CameraService*>(callbacks));
106
107    cs->onDeviceStatusChanged(camera_id,
108            static_cast<camera_device_status_t>(new_status));
109}
110
111static void torch_mode_status_change(
112        const struct camera_module_callbacks* callbacks,
113        const char* camera_id,
114        int new_status) {
115    if (!callbacks || !camera_id) {
116        ALOGE("%s invalid parameters. callbacks %p, camera_id %p", __FUNCTION__,
117                callbacks, camera_id);
118    }
119    sp<CameraService> cs = const_cast<CameraService*>(
120                                static_cast<const CameraService*>(callbacks));
121
122    int32_t status;
123    switch (new_status) {
124        case TORCH_MODE_STATUS_NOT_AVAILABLE:
125            status = ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE;
126            break;
127        case TORCH_MODE_STATUS_AVAILABLE_OFF:
128            status = ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF;
129            break;
130        case TORCH_MODE_STATUS_AVAILABLE_ON:
131            status = ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON;
132            break;
133        default:
134            ALOGE("Unknown torch status %d", new_status);
135            return;
136    }
137
138    cs->onTorchStatusChanged(
139        String8(camera_id),
140        status);
141}
142} // extern "C"
143
144// ----------------------------------------------------------------------------
145
146// This is ugly and only safe if we never re-create the CameraService, but
147// should be ok for now.
148static CameraService *gCameraService;
149
150CameraService::CameraService() :
151        mEventLog(DEFAULT_EVENT_LOG_LENGTH),
152        mNumberOfCameras(0), mNumberOfNormalCameras(0),
153        mSoundRef(0), mModule(nullptr) {
154    ALOGI("CameraService started (pid=%d)", getpid());
155    gCameraService = this;
156
157    this->camera_device_status_change = android::camera_device_status_change;
158    this->torch_mode_status_change = android::torch_mode_status_change;
159
160    mServiceLockWrapper = std::make_shared<WaitableMutexWrapper>(&mServiceLock);
161}
162
163void CameraService::onFirstRef()
164{
165    ALOGI("CameraService process starting");
166
167    BnCameraService::onFirstRef();
168
169    // Update battery life tracking if service is restarting
170    BatteryNotifier& notifier(BatteryNotifier::getInstance());
171    notifier.noteResetCamera();
172    notifier.noteResetFlashlight();
173
174    camera_module_t *rawModule;
175    int err = hw_get_module(CAMERA_HARDWARE_MODULE_ID,
176            (const hw_module_t **)&rawModule);
177    if (err < 0) {
178        ALOGE("Could not load camera HAL module: %d (%s)", err, strerror(-err));
179        logServiceError("Could not load camera HAL module", err);
180        return;
181    }
182
183    mModule = new CameraModule(rawModule);
184    err = mModule->init();
185    if (err != OK) {
186        ALOGE("Could not initialize camera HAL module: %d (%s)", err,
187            strerror(-err));
188        logServiceError("Could not initialize camera HAL module", err);
189
190        delete mModule;
191        mModule = nullptr;
192        return;
193    }
194    ALOGI("Loaded \"%s\" camera module", mModule->getModuleName());
195
196    mNumberOfCameras = mModule->getNumberOfCameras();
197    mNumberOfNormalCameras = mNumberOfCameras;
198
199    // Setup vendor tags before we call get_camera_info the first time
200    // because HAL might need to setup static vendor keys in get_camera_info
201    VendorTagDescriptor::clearGlobalVendorTagDescriptor();
202    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_2) {
203        setUpVendorTags();
204    }
205
206    mFlashlight = new CameraFlashlight(*mModule, *this);
207    status_t res = mFlashlight->findFlashUnits();
208    if (res) {
209        // impossible because we haven't open any camera devices.
210        ALOGE("Failed to find flash units.");
211    }
212
213    int latestStrangeCameraId = INT_MAX;
214    for (int i = 0; i < mNumberOfCameras; i++) {
215        String8 cameraId = String8::format("%d", i);
216
217        // Get camera info
218
219        struct camera_info info;
220        bool haveInfo = true;
221        status_t rc = mModule->getCameraInfo(i, &info);
222        if (rc != NO_ERROR) {
223            ALOGE("%s: Received error loading camera info for device %d, cost and"
224                    " conflicting devices fields set to defaults for this device.",
225                    __FUNCTION__, i);
226            haveInfo = false;
227        }
228
229        // Check for backwards-compatibility support
230        if (haveInfo) {
231            if (checkCameraCapabilities(i, info, &latestStrangeCameraId) != OK) {
232                delete mModule;
233                mModule = nullptr;
234                return;
235            }
236        }
237
238        // Defaults to use for cost and conflicting devices
239        int cost = 100;
240        char** conflicting_devices = nullptr;
241        size_t conflicting_devices_length = 0;
242
243        // If using post-2.4 module version, query the cost + conflicting devices from the HAL
244        if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_4 && haveInfo) {
245            cost = info.resource_cost;
246            conflicting_devices = info.conflicting_devices;
247            conflicting_devices_length = info.conflicting_devices_length;
248        }
249
250        std::set<String8> conflicting;
251        for (size_t i = 0; i < conflicting_devices_length; i++) {
252            conflicting.emplace(String8(conflicting_devices[i]));
253        }
254
255        // Initialize state for each camera device
256        {
257            Mutex::Autolock lock(mCameraStatesLock);
258            mCameraStates.emplace(cameraId, std::make_shared<CameraState>(cameraId, cost,
259                    conflicting));
260        }
261
262        if (mFlashlight->hasFlashUnit(cameraId)) {
263            mTorchStatusMap.add(cameraId,
264                    ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF);
265        }
266    }
267
268    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_1) {
269        mModule->setCallbacks(this);
270    }
271
272    CameraService::pingCameraServiceProxy();
273}
274
275sp<ICameraServiceProxy> CameraService::getCameraServiceProxy() {
276    sp<ICameraServiceProxy> proxyBinder = nullptr;
277#ifndef __BRILLO__
278    sp<IServiceManager> sm = defaultServiceManager();
279    sp<IBinder> binder = sm->getService(String16("media.camera.proxy"));
280    if (binder != nullptr) {
281        proxyBinder = interface_cast<ICameraServiceProxy>(binder);
282    }
283#endif
284    return proxyBinder;
285}
286
287void CameraService::pingCameraServiceProxy() {
288    sp<ICameraServiceProxy> proxyBinder = getCameraServiceProxy();
289    if (proxyBinder == nullptr) return;
290    proxyBinder->pingForUserUpdate();
291}
292
293CameraService::~CameraService() {
294    if (mModule) {
295        delete mModule;
296        mModule = nullptr;
297    }
298    VendorTagDescriptor::clearGlobalVendorTagDescriptor();
299    gCameraService = nullptr;
300}
301
302void CameraService::onDeviceStatusChanged(int  cameraId,
303        camera_device_status_t newStatus) {
304    ALOGI("%s: Status changed for cameraId=%d, newStatus=%d", __FUNCTION__,
305          cameraId, newStatus);
306
307    String8 id = String8::format("%d", cameraId);
308    std::shared_ptr<CameraState> state = getCameraState(id);
309
310    if (state == nullptr) {
311        ALOGE("%s: Bad camera ID %d", __FUNCTION__, cameraId);
312        return;
313    }
314
315    int32_t oldStatus = state->getStatus();
316
317    if (oldStatus == static_cast<int32_t>(newStatus)) {
318        ALOGE("%s: State transition to the same status %#x not allowed", __FUNCTION__, newStatus);
319        return;
320    }
321
322    if (newStatus == CAMERA_DEVICE_STATUS_NOT_PRESENT) {
323        logDeviceRemoved(id, String8::format("Device status changed from %d to %d", oldStatus,
324                newStatus));
325        sp<BasicClient> clientToDisconnect;
326        {
327            // Don't do this in updateStatus to avoid deadlock over mServiceLock
328            Mutex::Autolock lock(mServiceLock);
329
330            // Set the device status to NOT_PRESENT, clients will no longer be able to connect
331            // to this device until the status changes
332            updateStatus(ICameraServiceListener::STATUS_NOT_PRESENT, id);
333
334            // Remove cached shim parameters
335            state->setShimParams(CameraParameters());
336
337            // Remove the client from the list of active clients
338            clientToDisconnect = removeClientLocked(id);
339
340            // Notify the client of disconnection
341            clientToDisconnect->notifyError(
342                    hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED,
343                    CaptureResultExtras{});
344        }
345
346        ALOGI("%s: Client for camera ID %s evicted due to device status change from HAL",
347                __FUNCTION__, id.string());
348
349        // Disconnect client
350        if (clientToDisconnect.get() != nullptr) {
351            // Ensure not in binder RPC so client disconnect PID checks work correctly
352            LOG_ALWAYS_FATAL_IF(getCallingPid() != getpid(),
353                    "onDeviceStatusChanged must be called from the camera service process!");
354            clientToDisconnect->disconnect();
355        }
356
357    } else {
358        if (oldStatus == ICameraServiceListener::STATUS_NOT_PRESENT) {
359            logDeviceAdded(id, String8::format("Device status changed from %d to %d", oldStatus,
360                    newStatus));
361        }
362        updateStatus(static_cast<int32_t>(newStatus), id);
363    }
364
365}
366
367void CameraService::onTorchStatusChanged(const String8& cameraId,
368        int32_t newStatus) {
369    Mutex::Autolock al(mTorchStatusMutex);
370    onTorchStatusChangedLocked(cameraId, newStatus);
371}
372
373void CameraService::onTorchStatusChangedLocked(const String8& cameraId,
374        int32_t newStatus) {
375    ALOGI("%s: Torch status changed for cameraId=%s, newStatus=%d",
376            __FUNCTION__, cameraId.string(), newStatus);
377
378    int32_t status;
379    status_t res = getTorchStatusLocked(cameraId, &status);
380    if (res) {
381        ALOGE("%s: cannot get torch status of camera %s: %s (%d)",
382                __FUNCTION__, cameraId.string(), strerror(-res), res);
383        return;
384    }
385    if (status == newStatus) {
386        return;
387    }
388
389    res = setTorchStatusLocked(cameraId, newStatus);
390    if (res) {
391        ALOGE("%s: Failed to set the torch status to %d: %s (%d)", __FUNCTION__,
392                (uint32_t)newStatus, strerror(-res), res);
393        return;
394    }
395
396    {
397        // Update battery life logging for flashlight
398        Mutex::Autolock al(mTorchUidMapMutex);
399        auto iter = mTorchUidMap.find(cameraId);
400        if (iter != mTorchUidMap.end()) {
401            int oldUid = iter->second.second;
402            int newUid = iter->second.first;
403            BatteryNotifier& notifier(BatteryNotifier::getInstance());
404            if (oldUid != newUid) {
405                // If the UID has changed, log the status and update current UID in mTorchUidMap
406                if (status == ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON) {
407                    notifier.noteFlashlightOff(cameraId, oldUid);
408                }
409                if (newStatus == ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON) {
410                    notifier.noteFlashlightOn(cameraId, newUid);
411                }
412                iter->second.second = newUid;
413            } else {
414                // If the UID has not changed, log the status
415                if (newStatus == ICameraServiceListener::TORCH_STATUS_AVAILABLE_ON) {
416                    notifier.noteFlashlightOn(cameraId, oldUid);
417                } else {
418                    notifier.noteFlashlightOff(cameraId, oldUid);
419                }
420            }
421        }
422    }
423
424    {
425        Mutex::Autolock lock(mStatusListenerLock);
426        for (auto& i : mListenerList) {
427            i->onTorchStatusChanged(newStatus, String16{cameraId});
428        }
429    }
430}
431
432Status CameraService::getNumberOfCameras(int32_t type, int32_t* numCameras) {
433    ATRACE_CALL();
434    switch (type) {
435        case CAMERA_TYPE_BACKWARD_COMPATIBLE:
436            *numCameras = mNumberOfNormalCameras;
437            break;
438        case CAMERA_TYPE_ALL:
439            *numCameras = mNumberOfCameras;
440            break;
441        default:
442            ALOGW("%s: Unknown camera type %d",
443                    __FUNCTION__, type);
444            return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
445                    "Unknown camera type %d", type);
446    }
447    return Status::ok();
448}
449
450Status CameraService::getCameraInfo(int cameraId,
451        CameraInfo* cameraInfo) {
452    ATRACE_CALL();
453    if (!mModule) {
454        return STATUS_ERROR(ERROR_DISCONNECTED,
455                "Camera subsystem is not available");
456    }
457
458    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
459        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT,
460                "CameraId is not valid");
461    }
462
463    struct camera_info info;
464    Status rc = filterGetInfoErrorCode(
465        mModule->getCameraInfo(cameraId, &info));
466
467    if (rc.isOk()) {
468        cameraInfo->facing = info.facing;
469        cameraInfo->orientation = info.orientation;
470        // CameraInfo is for android.hardware.Camera which does not
471        // support external camera facing. The closest approximation would be
472        // front camera.
473        if (cameraInfo->facing == CAMERA_FACING_EXTERNAL) {
474            cameraInfo->facing = CAMERA_FACING_FRONT;
475        }
476    }
477    return rc;
478}
479
480int CameraService::cameraIdToInt(const String8& cameraId) {
481    errno = 0;
482    size_t pos = 0;
483    int ret = stoi(std::string{cameraId.string()}, &pos);
484    if (errno != 0 || pos != cameraId.size()) {
485        return -1;
486    }
487    return ret;
488}
489
490Status CameraService::generateShimMetadata(int cameraId, /*out*/CameraMetadata* cameraInfo) {
491    ATRACE_CALL();
492
493    Status ret = Status::ok();
494
495    struct CameraInfo info;
496    if (!(ret = getCameraInfo(cameraId, &info)).isOk()) {
497        return ret;
498    }
499
500    CameraMetadata shimInfo;
501    int32_t orientation = static_cast<int32_t>(info.orientation);
502    status_t rc;
503    if ((rc = shimInfo.update(ANDROID_SENSOR_ORIENTATION, &orientation, 1)) != OK) {
504        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
505                "Error updating metadata: %d (%s)", rc, strerror(-rc));
506    }
507
508    uint8_t facing = (info.facing == CAMERA_FACING_FRONT) ?
509            ANDROID_LENS_FACING_FRONT : ANDROID_LENS_FACING_BACK;
510    if ((rc = shimInfo.update(ANDROID_LENS_FACING, &facing, 1)) != OK) {
511        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
512                "Error updating metadata: %d (%s)", rc, strerror(-rc));
513    }
514
515    CameraParameters shimParams;
516    if (!(ret = getLegacyParametersLazy(cameraId, /*out*/&shimParams)).isOk()) {
517        // Error logged by callee
518        return ret;
519    }
520
521    Vector<Size> sizes;
522    Vector<Size> jpegSizes;
523    Vector<int32_t> formats;
524    {
525        shimParams.getSupportedPreviewSizes(/*out*/sizes);
526        shimParams.getSupportedPreviewFormats(/*out*/formats);
527        shimParams.getSupportedPictureSizes(/*out*/jpegSizes);
528    }
529
530    // Always include IMPLEMENTATION_DEFINED
531    formats.add(HAL_PIXEL_FORMAT_IMPLEMENTATION_DEFINED);
532
533    const size_t INTS_PER_CONFIG = 4;
534
535    // Build available stream configurations metadata
536    size_t streamConfigSize = (sizes.size() * formats.size() + jpegSizes.size()) * INTS_PER_CONFIG;
537
538    Vector<int32_t> streamConfigs;
539    streamConfigs.setCapacity(streamConfigSize);
540
541    for (size_t i = 0; i < formats.size(); ++i) {
542        for (size_t j = 0; j < sizes.size(); ++j) {
543            streamConfigs.add(formats[i]);
544            streamConfigs.add(sizes[j].width);
545            streamConfigs.add(sizes[j].height);
546            streamConfigs.add(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS_OUTPUT);
547        }
548    }
549
550    for (size_t i = 0; i < jpegSizes.size(); ++i) {
551        streamConfigs.add(HAL_PIXEL_FORMAT_BLOB);
552        streamConfigs.add(jpegSizes[i].width);
553        streamConfigs.add(jpegSizes[i].height);
554        streamConfigs.add(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS_OUTPUT);
555    }
556
557    if ((rc = shimInfo.update(ANDROID_SCALER_AVAILABLE_STREAM_CONFIGURATIONS,
558            streamConfigs.array(), streamConfigSize)) != OK) {
559        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
560                "Error updating metadata: %d (%s)", rc, strerror(-rc));
561    }
562
563    int64_t fakeMinFrames[0];
564    // TODO: Fixme, don't fake min frame durations.
565    if ((rc = shimInfo.update(ANDROID_SCALER_AVAILABLE_MIN_FRAME_DURATIONS,
566            fakeMinFrames, 0)) != OK) {
567        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
568                "Error updating metadata: %d (%s)", rc, strerror(-rc));
569    }
570
571    int64_t fakeStalls[0];
572    // TODO: Fixme, don't fake stall durations.
573    if ((rc = shimInfo.update(ANDROID_SCALER_AVAILABLE_STALL_DURATIONS,
574            fakeStalls, 0)) != OK) {
575        return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
576                "Error updating metadata: %d (%s)", rc, strerror(-rc));
577    }
578
579    *cameraInfo = shimInfo;
580    return ret;
581}
582
583Status CameraService::getCameraCharacteristics(int cameraId,
584                                                CameraMetadata* cameraInfo) {
585    ATRACE_CALL();
586    if (!cameraInfo) {
587        ALOGE("%s: cameraInfo is NULL", __FUNCTION__);
588        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "cameraInfo is NULL");
589    }
590
591    if (!mModule) {
592        ALOGE("%s: camera hardware module doesn't exist", __FUNCTION__);
593        return STATUS_ERROR(ERROR_DISCONNECTED,
594                "Camera subsystem is not available");;
595    }
596
597    if (cameraId < 0 || cameraId >= mNumberOfCameras) {
598        ALOGE("%s: Invalid camera id: %d", __FUNCTION__, cameraId);
599        return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
600                "Invalid camera id: %d", cameraId);
601    }
602
603    int facing;
604    Status ret;
605    if (mModule->getModuleApiVersion() < CAMERA_MODULE_API_VERSION_2_0 ||
606            getDeviceVersion(cameraId, &facing) < CAMERA_DEVICE_API_VERSION_3_0) {
607        /**
608         * Backwards compatibility mode for old HALs:
609         * - Convert CameraInfo into static CameraMetadata properties.
610         * - Retrieve cached CameraParameters for this camera.  If none exist,
611         *   attempt to open CameraClient and retrieve the CameraParameters.
612         * - Convert cached CameraParameters into static CameraMetadata
613         *   properties.
614         */
615        ALOGI("%s: Switching to HAL1 shim implementation...", __FUNCTION__);
616
617        ret = generateShimMetadata(cameraId, cameraInfo);
618    } else {
619        /**
620         * Normal HAL 2.1+ codepath.
621         */
622        struct camera_info info;
623        ret = filterGetInfoErrorCode(mModule->getCameraInfo(cameraId, &info));
624        if (ret.isOk()) {
625            *cameraInfo = info.static_camera_characteristics;
626        }
627    }
628
629    return ret;
630}
631
632int CameraService::getCallingPid() {
633    return IPCThreadState::self()->getCallingPid();
634}
635
636int CameraService::getCallingUid() {
637    return IPCThreadState::self()->getCallingUid();
638}
639
640String8 CameraService::getFormattedCurrentTime() {
641    time_t now = time(nullptr);
642    char formattedTime[64];
643    strftime(formattedTime, sizeof(formattedTime), "%m-%d %H:%M:%S", localtime(&now));
644    return String8(formattedTime);
645}
646
647int CameraService::getCameraPriorityFromProcState(int procState) {
648    // Find the priority for the camera usage based on the process state.  Higher priority clients
649    // win for evictions.
650    if (procState < 0) {
651        ALOGE("%s: Received invalid process state %d from ActivityManagerService!", __FUNCTION__,
652                procState);
653        return -1;
654    }
655    // Treat sleeping TOP processes the same as regular TOP processes, for
656    // access priority.  This is important for lock-screen camera launch scenarios
657    if (procState == PROCESS_STATE_TOP_SLEEPING) {
658        procState = PROCESS_STATE_TOP;
659    }
660    return INT_MAX - procState;
661}
662
663Status CameraService::getCameraVendorTagDescriptor(
664        /*out*/
665        hardware::camera2::params::VendorTagDescriptor* desc) {
666    ATRACE_CALL();
667    if (!mModule) {
668        ALOGE("%s: camera hardware module doesn't exist", __FUNCTION__);
669        return STATUS_ERROR(ERROR_DISCONNECTED, "Camera subsystem not available");
670    }
671    sp<VendorTagDescriptor> globalDescriptor = VendorTagDescriptor::getGlobalVendorTagDescriptor();
672    if (globalDescriptor != nullptr) {
673        *desc = *(globalDescriptor.get());
674    }
675    return Status::ok();
676}
677
678int CameraService::getDeviceVersion(int cameraId, int* facing) {
679    ATRACE_CALL();
680    struct camera_info info;
681    if (mModule->getCameraInfo(cameraId, &info) != OK) {
682        return -1;
683    }
684
685    int deviceVersion;
686    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0) {
687        deviceVersion = info.device_version;
688    } else {
689        deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
690    }
691
692    if (facing) {
693        *facing = info.facing;
694    }
695
696    return deviceVersion;
697}
698
699Status CameraService::filterGetInfoErrorCode(status_t err) {
700    switch(err) {
701        case NO_ERROR:
702            return Status::ok();
703        case -EINVAL:
704            return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT,
705                    "CameraId is not valid for HAL module");
706        case -ENODEV:
707            return STATUS_ERROR(ERROR_DISCONNECTED,
708                    "Camera device not available");
709        default:
710            return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
711                    "Camera HAL encountered error %d: %s",
712                    err, strerror(-err));
713    }
714}
715
716bool CameraService::setUpVendorTags() {
717    ATRACE_CALL();
718    vendor_tag_ops_t vOps = vendor_tag_ops_t();
719
720    // Check if vendor operations have been implemented
721    if (!mModule->isVendorTagDefined()) {
722        ALOGI("%s: No vendor tags defined for this device.", __FUNCTION__);
723        return false;
724    }
725
726    mModule->getVendorTagOps(&vOps);
727
728    // Ensure all vendor operations are present
729    if (vOps.get_tag_count == NULL || vOps.get_all_tags == NULL ||
730            vOps.get_section_name == NULL || vOps.get_tag_name == NULL ||
731            vOps.get_tag_type == NULL) {
732        ALOGE("%s: Vendor tag operations not fully defined. Ignoring definitions."
733               , __FUNCTION__);
734        return false;
735    }
736
737    // Read all vendor tag definitions into a descriptor
738    sp<VendorTagDescriptor> desc;
739    status_t res;
740    if ((res = VendorTagDescriptor::createDescriptorFromOps(&vOps, /*out*/desc))
741            != OK) {
742        ALOGE("%s: Could not generate descriptor from vendor tag operations,"
743              "received error %s (%d). Camera clients will not be able to use"
744              "vendor tags", __FUNCTION__, strerror(res), res);
745        return false;
746    }
747
748    // Set the global descriptor to use with camera metadata
749    VendorTagDescriptor::setAsGlobalVendorTagDescriptor(desc);
750    return true;
751}
752
753Status CameraService::makeClient(const sp<CameraService>& cameraService,
754        const sp<IInterface>& cameraCb, const String16& packageName, int cameraId,
755        int facing, int clientPid, uid_t clientUid, int servicePid, bool legacyMode,
756        int halVersion, int deviceVersion, apiLevel effectiveApiLevel,
757        /*out*/sp<BasicClient>* client) {
758
759    if (halVersion < 0 || halVersion == deviceVersion) {
760        // Default path: HAL version is unspecified by caller, create CameraClient
761        // based on device version reported by the HAL.
762        switch(deviceVersion) {
763          case CAMERA_DEVICE_API_VERSION_1_0:
764            if (effectiveApiLevel == API_1) {  // Camera1 API route
765                sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get());
766                *client = new CameraClient(cameraService, tmp, packageName, cameraId, facing,
767                        clientPid, clientUid, getpid(), legacyMode);
768            } else { // Camera2 API route
769                ALOGW("Camera using old HAL version: %d", deviceVersion);
770                return STATUS_ERROR_FMT(ERROR_DEPRECATED_HAL,
771                        "Camera device \"%d\" HAL version %d does not support camera2 API",
772                        cameraId, deviceVersion);
773            }
774            break;
775          case CAMERA_DEVICE_API_VERSION_3_0:
776          case CAMERA_DEVICE_API_VERSION_3_1:
777          case CAMERA_DEVICE_API_VERSION_3_2:
778          case CAMERA_DEVICE_API_VERSION_3_3:
779          case CAMERA_DEVICE_API_VERSION_3_4:
780            if (effectiveApiLevel == API_1) { // Camera1 API route
781                sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get());
782                *client = new Camera2Client(cameraService, tmp, packageName, cameraId, facing,
783                        clientPid, clientUid, servicePid, legacyMode);
784            } else { // Camera2 API route
785                sp<hardware::camera2::ICameraDeviceCallbacks> tmp =
786                        static_cast<hardware::camera2::ICameraDeviceCallbacks*>(cameraCb.get());
787                *client = new CameraDeviceClient(cameraService, tmp, packageName, cameraId,
788                        facing, clientPid, clientUid, servicePid);
789            }
790            break;
791          default:
792            // Should not be reachable
793            ALOGE("Unknown camera device HAL version: %d", deviceVersion);
794            return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
795                    "Camera device \"%d\" has unknown HAL version %d",
796                    cameraId, deviceVersion);
797        }
798    } else {
799        // A particular HAL version is requested by caller. Create CameraClient
800        // based on the requested HAL version.
801        if (deviceVersion > CAMERA_DEVICE_API_VERSION_1_0 &&
802            halVersion == CAMERA_DEVICE_API_VERSION_1_0) {
803            // Only support higher HAL version device opened as HAL1.0 device.
804            sp<ICameraClient> tmp = static_cast<ICameraClient*>(cameraCb.get());
805            *client = new CameraClient(cameraService, tmp, packageName, cameraId, facing,
806                    clientPid, clientUid, servicePid, legacyMode);
807        } else {
808            // Other combinations (e.g. HAL3.x open as HAL2.x) are not supported yet.
809            ALOGE("Invalid camera HAL version %x: HAL %x device can only be"
810                    " opened as HAL %x device", halVersion, deviceVersion,
811                    CAMERA_DEVICE_API_VERSION_1_0);
812            return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
813                    "Camera device \"%d\" (HAL version %d) cannot be opened as HAL version %d",
814                    cameraId, deviceVersion, halVersion);
815        }
816    }
817    return Status::ok();
818}
819
820String8 CameraService::toString(std::set<userid_t> intSet) {
821    String8 s("");
822    bool first = true;
823    for (userid_t i : intSet) {
824        if (first) {
825            s.appendFormat("%d", i);
826            first = false;
827        } else {
828            s.appendFormat(", %d", i);
829        }
830    }
831    return s;
832}
833
834Status CameraService::initializeShimMetadata(int cameraId) {
835    int uid = getCallingUid();
836
837    String16 internalPackageName("cameraserver");
838    String8 id = String8::format("%d", cameraId);
839    Status ret = Status::ok();
840    sp<Client> tmp = nullptr;
841    if (!(ret = connectHelper<ICameraClient,Client>(
842            sp<ICameraClient>{nullptr}, id, static_cast<int>(CAMERA_HAL_API_VERSION_UNSPECIFIED),
843            internalPackageName, uid, USE_CALLING_PID,
844            API_1, /*legacyMode*/ false, /*shimUpdateOnly*/ true,
845            /*out*/ tmp)
846            ).isOk()) {
847        ALOGE("%s: Error initializing shim metadata: %s", __FUNCTION__, ret.toString8().string());
848    }
849    return ret;
850}
851
852Status CameraService::getLegacyParametersLazy(int cameraId,
853        /*out*/
854        CameraParameters* parameters) {
855
856    ALOGV("%s: for cameraId: %d", __FUNCTION__, cameraId);
857
858    Status ret = Status::ok();
859
860    if (parameters == NULL) {
861        ALOGE("%s: parameters must not be null", __FUNCTION__);
862        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Parameters must not be null");
863    }
864
865    String8 id = String8::format("%d", cameraId);
866
867    // Check if we already have parameters
868    {
869        // Scope for service lock
870        Mutex::Autolock lock(mServiceLock);
871        auto cameraState = getCameraState(id);
872        if (cameraState == nullptr) {
873            ALOGE("%s: Invalid camera ID: %s", __FUNCTION__, id.string());
874            return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
875                    "Invalid camera ID: %s", id.string());
876        }
877        CameraParameters p = cameraState->getShimParams();
878        if (!p.isEmpty()) {
879            *parameters = p;
880            return ret;
881        }
882    }
883
884    int64_t token = IPCThreadState::self()->clearCallingIdentity();
885    ret = initializeShimMetadata(cameraId);
886    IPCThreadState::self()->restoreCallingIdentity(token);
887    if (!ret.isOk()) {
888        // Error already logged by callee
889        return ret;
890    }
891
892    // Check for parameters again
893    {
894        // Scope for service lock
895        Mutex::Autolock lock(mServiceLock);
896        auto cameraState = getCameraState(id);
897        if (cameraState == nullptr) {
898            ALOGE("%s: Invalid camera ID: %s", __FUNCTION__, id.string());
899            return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
900                    "Invalid camera ID: %s", id.string());
901        }
902        CameraParameters p = cameraState->getShimParams();
903        if (!p.isEmpty()) {
904            *parameters = p;
905            return ret;
906        }
907    }
908
909    ALOGE("%s: Parameters were not initialized, or were empty.  Device may not be present.",
910            __FUNCTION__);
911    return STATUS_ERROR(ERROR_INVALID_OPERATION, "Unable to initialize legacy parameters");
912}
913
914// Can camera service trust the caller based on the calling UID?
915static bool isTrustedCallingUid(uid_t uid) {
916    switch (uid) {
917        case AID_MEDIA:        // mediaserver
918        case AID_CAMERASERVER: // cameraserver
919        case AID_RADIO:        // telephony
920            return true;
921        default:
922            return false;
923    }
924}
925
926Status CameraService::validateConnectLocked(const String8& cameraId,
927        const String8& clientName8, /*inout*/int& clientUid, /*inout*/int& clientPid,
928        /*out*/int& originalClientPid) const {
929
930#ifdef __BRILLO__
931    UNUSED(clientName8);
932    UNUSED(clientUid);
933    UNUSED(clientPid);
934    UNUSED(originalClientPid);
935#else
936    Status allowed = validateClientPermissionsLocked(cameraId, clientName8, clientUid, clientPid,
937            originalClientPid);
938    if (!allowed.isOk()) {
939        return allowed;
940    }
941#endif  // __BRILLO__
942
943    int callingPid = getCallingPid();
944
945    if (!mModule) {
946        ALOGE("CameraService::connect X (PID %d) rejected (camera HAL module not loaded)",
947                callingPid);
948        return STATUS_ERROR_FMT(ERROR_DISCONNECTED,
949                "No camera HAL module available to open camera device \"%s\"", cameraId.string());
950    }
951
952    if (getCameraState(cameraId) == nullptr) {
953        ALOGE("CameraService::connect X (PID %d) rejected (invalid camera ID %s)", callingPid,
954                cameraId.string());
955        return STATUS_ERROR_FMT(ERROR_DISCONNECTED,
956                "No camera device with ID \"%s\" available", cameraId.string());
957    }
958
959    status_t err = checkIfDeviceIsUsable(cameraId);
960    if (err != NO_ERROR) {
961        switch(err) {
962            case -ENODEV:
963            case -EBUSY:
964                return STATUS_ERROR_FMT(ERROR_DISCONNECTED,
965                        "No camera device with ID \"%s\" currently available", cameraId.string());
966            default:
967                return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
968                        "Unknown error connecting to ID \"%s\"", cameraId.string());
969        }
970    }
971    return Status::ok();
972}
973
974Status CameraService::validateClientPermissionsLocked(const String8& cameraId,
975        const String8& clientName8, int& clientUid, int& clientPid,
976        /*out*/int& originalClientPid) const {
977    int callingPid = getCallingPid();
978    int callingUid = getCallingUid();
979
980    // Check if we can trust clientUid
981    if (clientUid == USE_CALLING_UID) {
982        clientUid = callingUid;
983    } else if (!isTrustedCallingUid(callingUid)) {
984        ALOGE("CameraService::connect X (calling PID %d, calling UID %d) rejected "
985                "(don't trust clientUid %d)", callingPid, callingUid, clientUid);
986        return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED,
987                "Untrusted caller (calling PID %d, UID %d) trying to "
988                "forward camera access to camera %s for client %s (PID %d, UID %d)",
989                callingPid, callingUid, cameraId.string(),
990                clientName8.string(), clientUid, clientPid);
991    }
992
993    // Check if we can trust clientPid
994    if (clientPid == USE_CALLING_PID) {
995        clientPid = callingPid;
996    } else if (!isTrustedCallingUid(callingUid)) {
997        ALOGE("CameraService::connect X (calling PID %d, calling UID %d) rejected "
998                "(don't trust clientPid %d)", callingPid, callingUid, clientPid);
999        return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED,
1000                "Untrusted caller (calling PID %d, UID %d) trying to "
1001                "forward camera access to camera %s for client %s (PID %d, UID %d)",
1002                callingPid, callingUid, cameraId.string(),
1003                clientName8.string(), clientUid, clientPid);
1004    }
1005
1006    // If it's not calling from cameraserver, check the permission.
1007    if (callingPid != getpid() &&
1008            !checkPermission(String16("android.permission.CAMERA"), clientPid, clientUid)) {
1009        ALOGE("Permission Denial: can't use the camera pid=%d, uid=%d", clientPid, clientUid);
1010        return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED,
1011                "Caller \"%s\" (PID %d, UID %d) cannot open camera \"%s\" without camera permission",
1012                clientName8.string(), clientUid, clientPid, cameraId.string());
1013    }
1014
1015    // Only use passed in clientPid to check permission. Use calling PID as the client PID that's
1016    // connected to camera service directly.
1017    originalClientPid = clientPid;
1018    clientPid = callingPid;
1019
1020    userid_t clientUserId = multiuser_get_user_id(clientUid);
1021
1022    // Only allow clients who are being used by the current foreground device user, unless calling
1023    // from our own process.
1024    if (callingPid != getpid() && (mAllowedUsers.find(clientUserId) == mAllowedUsers.end())) {
1025        ALOGE("CameraService::connect X (PID %d) rejected (cannot connect from "
1026                "device user %d, currently allowed device users: %s)", callingPid, clientUserId,
1027                toString(mAllowedUsers).string());
1028        return STATUS_ERROR_FMT(ERROR_PERMISSION_DENIED,
1029                "Callers from device user %d are not currently allowed to connect to camera \"%s\"",
1030                clientUserId, cameraId.string());
1031    }
1032
1033    return Status::ok();
1034}
1035
1036status_t CameraService::checkIfDeviceIsUsable(const String8& cameraId) const {
1037    auto cameraState = getCameraState(cameraId);
1038    int callingPid = getCallingPid();
1039    if (cameraState == nullptr) {
1040        ALOGE("CameraService::connect X (PID %d) rejected (invalid camera ID %s)", callingPid,
1041                cameraId.string());
1042        return -ENODEV;
1043    }
1044
1045    int32_t currentStatus = cameraState->getStatus();
1046    if (currentStatus == ICameraServiceListener::STATUS_NOT_PRESENT) {
1047        ALOGE("CameraService::connect X (PID %d) rejected (camera %s is not connected)",
1048                callingPid, cameraId.string());
1049        return -ENODEV;
1050    } else if (currentStatus == ICameraServiceListener::STATUS_ENUMERATING) {
1051        ALOGE("CameraService::connect X (PID %d) rejected, (camera %s is initializing)",
1052                callingPid, cameraId.string());
1053        return -EBUSY;
1054    }
1055
1056    return NO_ERROR;
1057}
1058
1059void CameraService::finishConnectLocked(const sp<BasicClient>& client,
1060        const CameraService::DescriptorPtr& desc) {
1061
1062    // Make a descriptor for the incoming client
1063    auto clientDescriptor = CameraService::CameraClientManager::makeClientDescriptor(client, desc);
1064    auto evicted = mActiveClientManager.addAndEvict(clientDescriptor);
1065
1066    logConnected(desc->getKey(), static_cast<int>(desc->getOwnerId()),
1067            String8(client->getPackageName()));
1068
1069    if (evicted.size() > 0) {
1070        // This should never happen - clients should already have been removed in disconnect
1071        for (auto& i : evicted) {
1072            ALOGE("%s: Invalid state: Client for camera %s was not removed in disconnect",
1073                    __FUNCTION__, i->getKey().string());
1074        }
1075
1076        LOG_ALWAYS_FATAL("%s: Invalid state for CameraService, clients not evicted properly",
1077                __FUNCTION__);
1078    }
1079
1080    // And register a death notification for the client callback. Do
1081    // this last to avoid Binder policy where a nested Binder
1082    // transaction might be pre-empted to service the client death
1083    // notification if the client process dies before linkToDeath is
1084    // invoked.
1085    sp<IBinder> remoteCallback = client->getRemote();
1086    if (remoteCallback != nullptr) {
1087        remoteCallback->linkToDeath(this);
1088    }
1089}
1090
1091status_t CameraService::handleEvictionsLocked(const String8& cameraId, int clientPid,
1092        apiLevel effectiveApiLevel, const sp<IBinder>& remoteCallback, const String8& packageName,
1093        /*out*/
1094        sp<BasicClient>* client,
1095        std::shared_ptr<resource_policy::ClientDescriptor<String8, sp<BasicClient>>>* partial) {
1096    ATRACE_CALL();
1097    status_t ret = NO_ERROR;
1098    std::vector<DescriptorPtr> evictedClients;
1099    DescriptorPtr clientDescriptor;
1100    {
1101        if (effectiveApiLevel == API_1) {
1102            // If we are using API1, any existing client for this camera ID with the same remote
1103            // should be returned rather than evicted to allow MediaRecorder to work properly.
1104
1105            auto current = mActiveClientManager.get(cameraId);
1106            if (current != nullptr) {
1107                auto clientSp = current->getValue();
1108                if (clientSp.get() != nullptr) { // should never be needed
1109                    if (!clientSp->canCastToApiClient(effectiveApiLevel)) {
1110                        ALOGW("CameraService connect called from same client, but with a different"
1111                                " API level, evicting prior client...");
1112                    } else if (clientSp->getRemote() == remoteCallback) {
1113                        ALOGI("CameraService::connect X (PID %d) (second call from same"
1114                                " app binder, returning the same client)", clientPid);
1115                        *client = clientSp;
1116                        return NO_ERROR;
1117                    }
1118                }
1119            }
1120        }
1121
1122        // Get current active client PIDs
1123        std::vector<int> ownerPids(mActiveClientManager.getAllOwners());
1124        ownerPids.push_back(clientPid);
1125
1126        // Use the value +PROCESS_STATE_NONEXISTENT, to avoid taking
1127        // address of PROCESS_STATE_NONEXISTENT as a reference argument
1128        // for the vector constructor. PROCESS_STATE_NONEXISTENT does
1129        // not have an out-of-class definition.
1130        std::vector<int> priorities(ownerPids.size(), +PROCESS_STATE_NONEXISTENT);
1131
1132        // Get priorites of all active PIDs
1133        ProcessInfoService::getProcessStatesFromPids(ownerPids.size(), &ownerPids[0],
1134                /*out*/&priorities[0]);
1135
1136        // Update all active clients' priorities
1137        std::map<int,int> pidToPriorityMap;
1138        for (size_t i = 0; i < ownerPids.size() - 1; i++) {
1139            pidToPriorityMap.emplace(ownerPids[i], getCameraPriorityFromProcState(priorities[i]));
1140        }
1141        mActiveClientManager.updatePriorities(pidToPriorityMap);
1142
1143        // Get state for the given cameraId
1144        auto state = getCameraState(cameraId);
1145        if (state == nullptr) {
1146            ALOGE("CameraService::connect X (PID %d) rejected (no camera device with ID %s)",
1147                clientPid, cameraId.string());
1148            // Should never get here because validateConnectLocked should have errored out
1149            return BAD_VALUE;
1150        }
1151
1152        // Make descriptor for incoming client
1153        clientDescriptor = CameraClientManager::makeClientDescriptor(cameraId,
1154                sp<BasicClient>{nullptr}, static_cast<int32_t>(state->getCost()),
1155                state->getConflicting(),
1156                getCameraPriorityFromProcState(priorities[priorities.size() - 1]), clientPid);
1157
1158        // Find clients that would be evicted
1159        auto evicted = mActiveClientManager.wouldEvict(clientDescriptor);
1160
1161        // If the incoming client was 'evicted,' higher priority clients have the camera in the
1162        // background, so we cannot do evictions
1163        if (std::find(evicted.begin(), evicted.end(), clientDescriptor) != evicted.end()) {
1164            ALOGE("CameraService::connect X (PID %d) rejected (existing client(s) with higher"
1165                    " priority).", clientPid);
1166
1167            sp<BasicClient> clientSp = clientDescriptor->getValue();
1168            String8 curTime = getFormattedCurrentTime();
1169            auto incompatibleClients =
1170                    mActiveClientManager.getIncompatibleClients(clientDescriptor);
1171
1172            String8 msg = String8::format("%s : DENIED connect device %s client for package %s "
1173                    "(PID %d, priority %d) due to eviction policy", curTime.string(),
1174                    cameraId.string(), packageName.string(), clientPid,
1175                    getCameraPriorityFromProcState(priorities[priorities.size() - 1]));
1176
1177            for (auto& i : incompatibleClients) {
1178                msg.appendFormat("\n   - Blocked by existing device %s client for package %s"
1179                        "(PID %" PRId32 ", priority %" PRId32 ")", i->getKey().string(),
1180                        String8{i->getValue()->getPackageName()}.string(), i->getOwnerId(),
1181                        i->getPriority());
1182                ALOGE("   Conflicts with: Device %s, client package %s (PID %"
1183                        PRId32 ", priority %" PRId32 ")", i->getKey().string(),
1184                        String8{i->getValue()->getPackageName()}.string(), i->getOwnerId(),
1185                        i->getPriority());
1186            }
1187
1188            // Log the client's attempt
1189            Mutex::Autolock l(mLogLock);
1190            mEventLog.add(msg);
1191
1192            return -EBUSY;
1193        }
1194
1195        for (auto& i : evicted) {
1196            sp<BasicClient> clientSp = i->getValue();
1197            if (clientSp.get() == nullptr) {
1198                ALOGE("%s: Invalid state: Null client in active client list.", __FUNCTION__);
1199
1200                // TODO: Remove this
1201                LOG_ALWAYS_FATAL("%s: Invalid state for CameraService, null client in active list",
1202                        __FUNCTION__);
1203                mActiveClientManager.remove(i);
1204                continue;
1205            }
1206
1207            ALOGE("CameraService::connect evicting conflicting client for camera ID %s",
1208                    i->getKey().string());
1209            evictedClients.push_back(i);
1210
1211            // Log the clients evicted
1212            logEvent(String8::format("EVICT device %s client held by package %s (PID"
1213                    " %" PRId32 ", priority %" PRId32 ")\n   - Evicted by device %s client for"
1214                    " package %s (PID %d, priority %" PRId32 ")",
1215                    i->getKey().string(), String8{clientSp->getPackageName()}.string(),
1216                    i->getOwnerId(), i->getPriority(), cameraId.string(),
1217                    packageName.string(), clientPid,
1218                    getCameraPriorityFromProcState(priorities[priorities.size() - 1])));
1219
1220            // Notify the client of disconnection
1221            clientSp->notifyError(hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED,
1222                    CaptureResultExtras());
1223        }
1224    }
1225
1226    // Do not hold mServiceLock while disconnecting clients, but retain the condition blocking
1227    // other clients from connecting in mServiceLockWrapper if held
1228    mServiceLock.unlock();
1229
1230    // Clear caller identity temporarily so client disconnect PID checks work correctly
1231    int64_t token = IPCThreadState::self()->clearCallingIdentity();
1232
1233    // Destroy evicted clients
1234    for (auto& i : evictedClients) {
1235        // Disconnect is blocking, and should only have returned when HAL has cleaned up
1236        i->getValue()->disconnect(); // Clients will remove themselves from the active client list
1237    }
1238
1239    IPCThreadState::self()->restoreCallingIdentity(token);
1240
1241    for (const auto& i : evictedClients) {
1242        ALOGV("%s: Waiting for disconnect to complete for client for device %s (PID %" PRId32 ")",
1243                __FUNCTION__, i->getKey().string(), i->getOwnerId());
1244        ret = mActiveClientManager.waitUntilRemoved(i, DEFAULT_DISCONNECT_TIMEOUT_NS);
1245        if (ret == TIMED_OUT) {
1246            ALOGE("%s: Timed out waiting for client for device %s to disconnect, "
1247                    "current clients:\n%s", __FUNCTION__, i->getKey().string(),
1248                    mActiveClientManager.toString().string());
1249            return -EBUSY;
1250        }
1251        if (ret != NO_ERROR) {
1252            ALOGE("%s: Received error waiting for client for device %s to disconnect: %s (%d), "
1253                    "current clients:\n%s", __FUNCTION__, i->getKey().string(), strerror(-ret),
1254                    ret, mActiveClientManager.toString().string());
1255            return ret;
1256        }
1257    }
1258
1259    evictedClients.clear();
1260
1261    // Once clients have been disconnected, relock
1262    mServiceLock.lock();
1263
1264    // Check again if the device was unplugged or something while we weren't holding mServiceLock
1265    if ((ret = checkIfDeviceIsUsable(cameraId)) != NO_ERROR) {
1266        return ret;
1267    }
1268
1269    *partial = clientDescriptor;
1270    return NO_ERROR;
1271}
1272
1273Status CameraService::connect(
1274        const sp<ICameraClient>& cameraClient,
1275        int cameraId,
1276        const String16& clientPackageName,
1277        int clientUid,
1278        int clientPid,
1279        /*out*/
1280        sp<ICamera>* device) {
1281
1282    ATRACE_CALL();
1283    Status ret = Status::ok();
1284    String8 id = String8::format("%d", cameraId);
1285    sp<Client> client = nullptr;
1286    ret = connectHelper<ICameraClient,Client>(cameraClient, id,
1287            CAMERA_HAL_API_VERSION_UNSPECIFIED, clientPackageName, clientUid, clientPid, API_1,
1288            /*legacyMode*/ false, /*shimUpdateOnly*/ false,
1289            /*out*/client);
1290
1291    if(!ret.isOk()) {
1292        logRejected(id, getCallingPid(), String8(clientPackageName),
1293                ret.toString8());
1294        return ret;
1295    }
1296
1297    *device = client;
1298    return ret;
1299}
1300
1301Status CameraService::connectLegacy(
1302        const sp<ICameraClient>& cameraClient,
1303        int cameraId, int halVersion,
1304        const String16& clientPackageName,
1305        int clientUid,
1306        /*out*/
1307        sp<ICamera>* device) {
1308
1309    ATRACE_CALL();
1310    String8 id = String8::format("%d", cameraId);
1311    int apiVersion = mModule->getModuleApiVersion();
1312    if (halVersion != CAMERA_HAL_API_VERSION_UNSPECIFIED &&
1313            apiVersion < CAMERA_MODULE_API_VERSION_2_3) {
1314        /*
1315         * Either the HAL version is unspecified in which case this just creates
1316         * a camera client selected by the latest device version, or
1317         * it's a particular version in which case the HAL must supported
1318         * the open_legacy call
1319         */
1320        String8 msg = String8::format("Camera HAL module version %x too old for connectLegacy!",
1321                apiVersion);
1322        ALOGE("%s: %s",
1323                __FUNCTION__, msg.string());
1324        logRejected(id, getCallingPid(), String8(clientPackageName),
1325                msg);
1326        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, msg.string());
1327    }
1328
1329    Status ret = Status::ok();
1330    sp<Client> client = nullptr;
1331    ret = connectHelper<ICameraClient,Client>(cameraClient, id, halVersion,
1332            clientPackageName, clientUid, USE_CALLING_PID, API_1,
1333            /*legacyMode*/ true, /*shimUpdateOnly*/ false,
1334            /*out*/client);
1335
1336    if(!ret.isOk()) {
1337        logRejected(id, getCallingPid(), String8(clientPackageName),
1338                ret.toString8());
1339        return ret;
1340    }
1341
1342    *device = client;
1343    return ret;
1344}
1345
1346Status CameraService::connectDevice(
1347        const sp<hardware::camera2::ICameraDeviceCallbacks>& cameraCb,
1348        int cameraId,
1349        const String16& clientPackageName,
1350        int clientUid,
1351        /*out*/
1352        sp<hardware::camera2::ICameraDeviceUser>* device) {
1353
1354    ATRACE_CALL();
1355    Status ret = Status::ok();
1356    String8 id = String8::format("%d", cameraId);
1357    sp<CameraDeviceClient> client = nullptr;
1358    ret = connectHelper<hardware::camera2::ICameraDeviceCallbacks,CameraDeviceClient>(cameraCb, id,
1359            CAMERA_HAL_API_VERSION_UNSPECIFIED, clientPackageName,
1360            clientUid, USE_CALLING_PID, API_2,
1361            /*legacyMode*/ false, /*shimUpdateOnly*/ false,
1362            /*out*/client);
1363
1364    if(!ret.isOk()) {
1365        logRejected(id, getCallingPid(), String8(clientPackageName),
1366                ret.toString8());
1367        return ret;
1368    }
1369
1370    *device = client;
1371    return ret;
1372}
1373
1374Status CameraService::setTorchMode(const String16& cameraId, bool enabled,
1375        const sp<IBinder>& clientBinder) {
1376
1377    ATRACE_CALL();
1378    if (enabled && clientBinder == nullptr) {
1379        ALOGE("%s: torch client binder is NULL", __FUNCTION__);
1380        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT,
1381                "Torch client Binder is null");
1382    }
1383
1384    String8 id = String8(cameraId.string());
1385    int uid = getCallingUid();
1386
1387    // verify id is valid.
1388    auto state = getCameraState(id);
1389    if (state == nullptr) {
1390        ALOGE("%s: camera id is invalid %s", __FUNCTION__, id.string());
1391        return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
1392                "Camera ID \"%s\" is a not valid camera ID", id.string());
1393    }
1394
1395    int32_t cameraStatus = state->getStatus();
1396    if (cameraStatus != ICameraServiceListener::STATUS_PRESENT &&
1397            cameraStatus != ICameraServiceListener::STATUS_NOT_AVAILABLE) {
1398        ALOGE("%s: camera id is invalid %s", __FUNCTION__, id.string());
1399        return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
1400                "Camera ID \"%s\" is a not valid camera ID", id.string());
1401    }
1402
1403    {
1404        Mutex::Autolock al(mTorchStatusMutex);
1405        int32_t status;
1406        status_t err = getTorchStatusLocked(id, &status);
1407        if (err != OK) {
1408            if (err == NAME_NOT_FOUND) {
1409                return STATUS_ERROR_FMT(ERROR_ILLEGAL_ARGUMENT,
1410                        "Camera \"%s\" does not have a flash unit", id.string());
1411            }
1412            ALOGE("%s: getting current torch status failed for camera %s",
1413                    __FUNCTION__, id.string());
1414            return STATUS_ERROR_FMT(ERROR_INVALID_OPERATION,
1415                    "Error updating torch status for camera \"%s\": %s (%d)", id.string(),
1416                    strerror(-err), err);
1417        }
1418
1419        if (status == ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE) {
1420            if (cameraStatus == ICameraServiceListener::STATUS_NOT_AVAILABLE) {
1421                ALOGE("%s: torch mode of camera %s is not available because "
1422                        "camera is in use", __FUNCTION__, id.string());
1423                return STATUS_ERROR_FMT(ERROR_CAMERA_IN_USE,
1424                        "Torch for camera \"%s\" is not available due to an existing camera user",
1425                        id.string());
1426            } else {
1427                ALOGE("%s: torch mode of camera %s is not available due to "
1428                        "insufficient resources", __FUNCTION__, id.string());
1429                return STATUS_ERROR_FMT(ERROR_MAX_CAMERAS_IN_USE,
1430                        "Torch for camera \"%s\" is not available due to insufficient resources",
1431                        id.string());
1432            }
1433        }
1434    }
1435
1436    {
1437        // Update UID map - this is used in the torch status changed callbacks, so must be done
1438        // before setTorchMode
1439        Mutex::Autolock al(mTorchUidMapMutex);
1440        if (mTorchUidMap.find(id) == mTorchUidMap.end()) {
1441            mTorchUidMap[id].first = uid;
1442            mTorchUidMap[id].second = uid;
1443        } else {
1444            // Set the pending UID
1445            mTorchUidMap[id].first = uid;
1446        }
1447    }
1448
1449    status_t err = mFlashlight->setTorchMode(id, enabled);
1450
1451    if (err != OK) {
1452        int32_t errorCode;
1453        String8 msg;
1454        switch (err) {
1455            case -ENOSYS:
1456                msg = String8::format("Camera \"%s\" has no flashlight",
1457                    id.string());
1458                errorCode = ERROR_ILLEGAL_ARGUMENT;
1459                break;
1460            default:
1461                msg = String8::format(
1462                    "Setting torch mode of camera \"%s\" to %d failed: %s (%d)",
1463                    id.string(), enabled, strerror(-err), err);
1464                errorCode = ERROR_INVALID_OPERATION;
1465        }
1466        ALOGE("%s: %s", __FUNCTION__, msg.string());
1467        return STATUS_ERROR(errorCode, msg.string());
1468    }
1469
1470    {
1471        // update the link to client's death
1472        Mutex::Autolock al(mTorchClientMapMutex);
1473        ssize_t index = mTorchClientMap.indexOfKey(id);
1474        if (enabled) {
1475            if (index == NAME_NOT_FOUND) {
1476                mTorchClientMap.add(id, clientBinder);
1477            } else {
1478                mTorchClientMap.valueAt(index)->unlinkToDeath(this);
1479                mTorchClientMap.replaceValueAt(index, clientBinder);
1480            }
1481            clientBinder->linkToDeath(this);
1482        } else if (index != NAME_NOT_FOUND) {
1483            mTorchClientMap.valueAt(index)->unlinkToDeath(this);
1484        }
1485    }
1486
1487    return Status::ok();
1488}
1489
1490Status CameraService::notifySystemEvent(int32_t eventId,
1491        const std::vector<int32_t>& args) {
1492    ATRACE_CALL();
1493
1494    switch(eventId) {
1495        case ICameraService::EVENT_USER_SWITCHED: {
1496            doUserSwitch(/*newUserIds*/ args);
1497            break;
1498        }
1499        case ICameraService::EVENT_NONE:
1500        default: {
1501            ALOGW("%s: Received invalid system event from system_server: %d", __FUNCTION__,
1502                    eventId);
1503            break;
1504        }
1505    }
1506    return Status::ok();
1507}
1508
1509Status CameraService::addListener(const sp<ICameraServiceListener>& listener) {
1510    ATRACE_CALL();
1511
1512    ALOGV("%s: Add listener %p", __FUNCTION__, listener.get());
1513
1514    if (listener == nullptr) {
1515        ALOGE("%s: Listener must not be null", __FUNCTION__);
1516        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Null listener given to addListener");
1517    }
1518
1519    Mutex::Autolock lock(mServiceLock);
1520
1521    {
1522        Mutex::Autolock lock(mStatusListenerLock);
1523        for (auto& it : mListenerList) {
1524            if (IInterface::asBinder(it) == IInterface::asBinder(listener)) {
1525                ALOGW("%s: Tried to add listener %p which was already subscribed",
1526                      __FUNCTION__, listener.get());
1527                return STATUS_ERROR(ERROR_ALREADY_EXISTS, "Listener already registered");
1528            }
1529        }
1530
1531        mListenerList.push_back(listener);
1532    }
1533
1534
1535    /* Immediately signal current status to this listener only */
1536    {
1537        Mutex::Autolock lock(mCameraStatesLock);
1538        for (auto& i : mCameraStates) {
1539            // TODO: Update binder to use String16 for camera IDs and remove;
1540            int id = cameraIdToInt(i.first);
1541            if (id == -1) continue;
1542
1543            listener->onStatusChanged(i.second->getStatus(), id);
1544        }
1545    }
1546
1547    /* Immediately signal current torch status to this listener only */
1548    {
1549        Mutex::Autolock al(mTorchStatusMutex);
1550        for (size_t i = 0; i < mTorchStatusMap.size(); i++ ) {
1551            String16 id = String16(mTorchStatusMap.keyAt(i).string());
1552            listener->onTorchStatusChanged(mTorchStatusMap.valueAt(i), id);
1553        }
1554    }
1555
1556    return Status::ok();
1557}
1558
1559Status CameraService::removeListener(const sp<ICameraServiceListener>& listener) {
1560    ATRACE_CALL();
1561
1562    ALOGV("%s: Remove listener %p", __FUNCTION__, listener.get());
1563
1564    if (listener == 0) {
1565        ALOGE("%s: Listener must not be null", __FUNCTION__);
1566        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Null listener given to removeListener");
1567    }
1568
1569    Mutex::Autolock lock(mServiceLock);
1570
1571    {
1572        Mutex::Autolock lock(mStatusListenerLock);
1573        for (auto it = mListenerList.begin(); it != mListenerList.end(); it++) {
1574            if (IInterface::asBinder(*it) == IInterface::asBinder(listener)) {
1575                mListenerList.erase(it);
1576                return Status::ok();
1577            }
1578        }
1579    }
1580
1581    ALOGW("%s: Tried to remove a listener %p which was not subscribed",
1582          __FUNCTION__, listener.get());
1583
1584    return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Unregistered listener given to removeListener");
1585}
1586
1587Status CameraService::getLegacyParameters(int cameraId, /*out*/String16* parameters) {
1588
1589    ATRACE_CALL();
1590    ALOGV("%s: for camera ID = %d", __FUNCTION__, cameraId);
1591
1592    if (parameters == NULL) {
1593        ALOGE("%s: parameters must not be null", __FUNCTION__);
1594        return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, "Parameters must not be null");
1595    }
1596
1597    Status ret = Status::ok();
1598
1599    CameraParameters shimParams;
1600    if (!(ret = getLegacyParametersLazy(cameraId, /*out*/&shimParams)).isOk()) {
1601        // Error logged by caller
1602        return ret;
1603    }
1604
1605    String8 shimParamsString8 = shimParams.flatten();
1606    String16 shimParamsString16 = String16(shimParamsString8);
1607
1608    *parameters = shimParamsString16;
1609
1610    return ret;
1611}
1612
1613Status CameraService::supportsCameraApi(int cameraId, int apiVersion, bool *isSupported) {
1614    ATRACE_CALL();
1615
1616    ALOGV("%s: for camera ID = %d", __FUNCTION__, cameraId);
1617
1618    switch (apiVersion) {
1619        case API_VERSION_1:
1620        case API_VERSION_2:
1621            break;
1622        default:
1623            String8 msg = String8::format("Unknown API version %d", apiVersion);
1624            ALOGE("%s: %s", __FUNCTION__, msg.string());
1625            return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, msg.string());
1626    }
1627
1628    int facing = -1;
1629    int deviceVersion = getDeviceVersion(cameraId, &facing);
1630
1631    switch(deviceVersion) {
1632        case CAMERA_DEVICE_API_VERSION_1_0:
1633        case CAMERA_DEVICE_API_VERSION_3_0:
1634        case CAMERA_DEVICE_API_VERSION_3_1:
1635            if (apiVersion == API_VERSION_2) {
1636                ALOGV("%s: Camera id %d uses HAL version %d <3.2, doesn't support api2 without shim",
1637                        __FUNCTION__, cameraId, deviceVersion);
1638                *isSupported = false;
1639            } else { // if (apiVersion == API_VERSION_1) {
1640                ALOGV("%s: Camera id %d uses older HAL before 3.2, but api1 is always supported",
1641                        __FUNCTION__, cameraId);
1642                *isSupported = true;
1643            }
1644            break;
1645        case CAMERA_DEVICE_API_VERSION_3_2:
1646        case CAMERA_DEVICE_API_VERSION_3_3:
1647        case CAMERA_DEVICE_API_VERSION_3_4:
1648            ALOGV("%s: Camera id %d uses HAL3.2 or newer, supports api1/api2 directly",
1649                    __FUNCTION__, cameraId);
1650            *isSupported = true;
1651            break;
1652        case -1: {
1653            String8 msg = String8::format("Unknown camera ID %d", cameraId);
1654            ALOGE("%s: %s", __FUNCTION__, msg.string());
1655            return STATUS_ERROR(ERROR_ILLEGAL_ARGUMENT, msg.string());
1656        }
1657        default: {
1658            String8 msg = String8::format("Unknown device version %d for device %d",
1659                    deviceVersion, cameraId);
1660            ALOGE("%s: %s", __FUNCTION__, msg.string());
1661            return STATUS_ERROR(ERROR_INVALID_OPERATION, msg.string());
1662        }
1663    }
1664
1665    return Status::ok();
1666}
1667
1668void CameraService::removeByClient(const BasicClient* client) {
1669    Mutex::Autolock lock(mServiceLock);
1670    for (auto& i : mActiveClientManager.getAll()) {
1671        auto clientSp = i->getValue();
1672        if (clientSp.get() == client) {
1673            mActiveClientManager.remove(i);
1674        }
1675    }
1676}
1677
1678bool CameraService::evictClientIdByRemote(const wp<IBinder>& remote) {
1679    const int callingPid = getCallingPid();
1680    const int servicePid = getpid();
1681    bool ret = false;
1682    {
1683        // Acquire mServiceLock and prevent other clients from connecting
1684        std::unique_ptr<AutoConditionLock> lock =
1685                AutoConditionLock::waitAndAcquire(mServiceLockWrapper);
1686
1687
1688        std::vector<sp<BasicClient>> evicted;
1689        for (auto& i : mActiveClientManager.getAll()) {
1690            auto clientSp = i->getValue();
1691            if (clientSp.get() == nullptr) {
1692                ALOGE("%s: Dead client still in mActiveClientManager.", __FUNCTION__);
1693                mActiveClientManager.remove(i);
1694                continue;
1695            }
1696            if (remote == clientSp->getRemote() && (callingPid == servicePid ||
1697                    callingPid == clientSp->getClientPid())) {
1698                mActiveClientManager.remove(i);
1699                evicted.push_back(clientSp);
1700
1701                // Notify the client of disconnection
1702                clientSp->notifyError(
1703                        hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_DISCONNECTED,
1704                        CaptureResultExtras());
1705            }
1706        }
1707
1708        // Do not hold mServiceLock while disconnecting clients, but retain the condition blocking
1709        // other clients from connecting in mServiceLockWrapper if held
1710        mServiceLock.unlock();
1711
1712        // Do not clear caller identity, remote caller should be client proccess
1713
1714        for (auto& i : evicted) {
1715            if (i.get() != nullptr) {
1716                i->disconnect();
1717                ret = true;
1718            }
1719        }
1720
1721        // Reacquire mServiceLock
1722        mServiceLock.lock();
1723
1724    } // lock is destroyed, allow further connect calls
1725
1726    return ret;
1727}
1728
1729
1730/**
1731 * Check camera capabilities, such as support for basic color operation
1732 * Also check that the device HAL version is still in support
1733 */
1734int CameraService::checkCameraCapabilities(int id, camera_info info, int *latestStrangeCameraId) {
1735    // device_version undefined in CAMERA_MODULE_API_VERSION_1_0,
1736    // All CAMERA_MODULE_API_VERSION_1_0 devices are backward-compatible
1737    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0) {
1738        // Verify the device version is in the supported range
1739        switch (info.device_version) {
1740            case CAMERA_DEVICE_API_VERSION_1_0:
1741            case CAMERA_DEVICE_API_VERSION_3_0:
1742            case CAMERA_DEVICE_API_VERSION_3_1:
1743            case CAMERA_DEVICE_API_VERSION_3_2:
1744            case CAMERA_DEVICE_API_VERSION_3_3:
1745            case CAMERA_DEVICE_API_VERSION_3_4:
1746                // in support
1747                break;
1748            case CAMERA_DEVICE_API_VERSION_2_0:
1749            case CAMERA_DEVICE_API_VERSION_2_1:
1750                // no longer supported
1751            default:
1752                ALOGE("%s: Device %d has HAL version %x, which is not supported",
1753                        __FUNCTION__, id, info.device_version);
1754                String8 msg = String8::format(
1755                        "Unsupported device HAL version %x for device %d",
1756                        info.device_version, id);
1757                logServiceError(msg.string(), NO_INIT);
1758                return NO_INIT;
1759        }
1760    }
1761
1762    // Assume all devices pre-v3.3 are backward-compatible
1763    bool isBackwardCompatible = true;
1764    if (mModule->getModuleApiVersion() >= CAMERA_MODULE_API_VERSION_2_0
1765            && info.device_version >= CAMERA_DEVICE_API_VERSION_3_3) {
1766        isBackwardCompatible = false;
1767        status_t res;
1768        camera_metadata_ro_entry_t caps;
1769        res = find_camera_metadata_ro_entry(
1770            info.static_camera_characteristics,
1771            ANDROID_REQUEST_AVAILABLE_CAPABILITIES,
1772            &caps);
1773        if (res != 0) {
1774            ALOGW("%s: Unable to find camera capabilities for camera device %d",
1775                    __FUNCTION__, id);
1776            caps.count = 0;
1777        }
1778        for (size_t i = 0; i < caps.count; i++) {
1779            if (caps.data.u8[i] ==
1780                    ANDROID_REQUEST_AVAILABLE_CAPABILITIES_BACKWARD_COMPATIBLE) {
1781                isBackwardCompatible = true;
1782                break;
1783            }
1784        }
1785    }
1786
1787    if (!isBackwardCompatible) {
1788        mNumberOfNormalCameras--;
1789        *latestStrangeCameraId = id;
1790    } else {
1791        if (id > *latestStrangeCameraId) {
1792            ALOGE("%s: Normal camera ID %d higher than strange camera ID %d. "
1793                    "This is not allowed due backward-compatibility requirements",
1794                    __FUNCTION__, id, *latestStrangeCameraId);
1795            logServiceError("Invalid order of camera devices", NO_INIT);
1796            mNumberOfCameras = 0;
1797            mNumberOfNormalCameras = 0;
1798            return NO_INIT;
1799        }
1800    }
1801    return OK;
1802}
1803
1804std::shared_ptr<CameraService::CameraState> CameraService::getCameraState(
1805        const String8& cameraId) const {
1806    std::shared_ptr<CameraState> state;
1807    {
1808        Mutex::Autolock lock(mCameraStatesLock);
1809        auto iter = mCameraStates.find(cameraId);
1810        if (iter != mCameraStates.end()) {
1811            state = iter->second;
1812        }
1813    }
1814    return state;
1815}
1816
1817sp<CameraService::BasicClient> CameraService::removeClientLocked(const String8& cameraId) {
1818    // Remove from active clients list
1819    auto clientDescriptorPtr = mActiveClientManager.remove(cameraId);
1820    if (clientDescriptorPtr == nullptr) {
1821        ALOGW("%s: Could not evict client, no client for camera ID %s", __FUNCTION__,
1822                cameraId.string());
1823        return sp<BasicClient>{nullptr};
1824    }
1825
1826    return clientDescriptorPtr->getValue();
1827}
1828
1829void CameraService::doUserSwitch(const std::vector<int32_t>& newUserIds) {
1830    // Acquire mServiceLock and prevent other clients from connecting
1831    std::unique_ptr<AutoConditionLock> lock =
1832            AutoConditionLock::waitAndAcquire(mServiceLockWrapper);
1833
1834    std::set<userid_t> newAllowedUsers;
1835    for (size_t i = 0; i < newUserIds.size(); i++) {
1836        if (newUserIds[i] < 0) {
1837            ALOGE("%s: Bad user ID %d given during user switch, ignoring.",
1838                    __FUNCTION__, newUserIds[i]);
1839            return;
1840        }
1841        newAllowedUsers.insert(static_cast<userid_t>(newUserIds[i]));
1842    }
1843
1844
1845    if (newAllowedUsers == mAllowedUsers) {
1846        ALOGW("%s: Received notification of user switch with no updated user IDs.", __FUNCTION__);
1847        return;
1848    }
1849
1850    logUserSwitch(mAllowedUsers, newAllowedUsers);
1851
1852    mAllowedUsers = std::move(newAllowedUsers);
1853
1854    // Current user has switched, evict all current clients.
1855    std::vector<sp<BasicClient>> evicted;
1856    for (auto& i : mActiveClientManager.getAll()) {
1857        auto clientSp = i->getValue();
1858
1859        if (clientSp.get() == nullptr) {
1860            ALOGE("%s: Dead client still in mActiveClientManager.", __FUNCTION__);
1861            continue;
1862        }
1863
1864        // Don't evict clients that are still allowed.
1865        uid_t clientUid = clientSp->getClientUid();
1866        userid_t clientUserId = multiuser_get_user_id(clientUid);
1867        if (mAllowedUsers.find(clientUserId) != mAllowedUsers.end()) {
1868            continue;
1869        }
1870
1871        evicted.push_back(clientSp);
1872
1873        String8 curTime = getFormattedCurrentTime();
1874
1875        ALOGE("Evicting conflicting client for camera ID %s due to user change",
1876                i->getKey().string());
1877
1878        // Log the clients evicted
1879        logEvent(String8::format("EVICT device %s client held by package %s (PID %"
1880                PRId32 ", priority %" PRId32 ")\n   - Evicted due to user switch.",
1881                i->getKey().string(), String8{clientSp->getPackageName()}.string(),
1882                i->getOwnerId(), i->getPriority()));
1883
1884    }
1885
1886    // Do not hold mServiceLock while disconnecting clients, but retain the condition
1887    // blocking other clients from connecting in mServiceLockWrapper if held.
1888    mServiceLock.unlock();
1889
1890    // Clear caller identity temporarily so client disconnect PID checks work correctly
1891    int64_t token = IPCThreadState::self()->clearCallingIdentity();
1892
1893    for (auto& i : evicted) {
1894        i->disconnect();
1895    }
1896
1897    IPCThreadState::self()->restoreCallingIdentity(token);
1898
1899    // Reacquire mServiceLock
1900    mServiceLock.lock();
1901}
1902
1903void CameraService::logEvent(const char* event) {
1904    String8 curTime = getFormattedCurrentTime();
1905    Mutex::Autolock l(mLogLock);
1906    mEventLog.add(String8::format("%s : %s", curTime.string(), event));
1907}
1908
1909void CameraService::logDisconnected(const char* cameraId, int clientPid,
1910        const char* clientPackage) {
1911    // Log the clients evicted
1912    logEvent(String8::format("DISCONNECT device %s client for package %s (PID %d)", cameraId,
1913            clientPackage, clientPid));
1914}
1915
1916void CameraService::logConnected(const char* cameraId, int clientPid,
1917        const char* clientPackage) {
1918    // Log the clients evicted
1919    logEvent(String8::format("CONNECT device %s client for package %s (PID %d)", cameraId,
1920            clientPackage, clientPid));
1921}
1922
1923void CameraService::logRejected(const char* cameraId, int clientPid,
1924        const char* clientPackage, const char* reason) {
1925    // Log the client rejected
1926    logEvent(String8::format("REJECT device %s client for package %s (PID %d), reason: (%s)",
1927            cameraId, clientPackage, clientPid, reason));
1928}
1929
1930void CameraService::logUserSwitch(const std::set<userid_t>& oldUserIds,
1931        const std::set<userid_t>& newUserIds) {
1932    String8 newUsers = toString(newUserIds);
1933    String8 oldUsers = toString(oldUserIds);
1934    // Log the new and old users
1935    logEvent(String8::format("USER_SWITCH previous allowed users: %s , current allowed users: %s",
1936            oldUsers.string(), newUsers.string()));
1937}
1938
1939void CameraService::logDeviceRemoved(const char* cameraId, const char* reason) {
1940    // Log the device removal
1941    logEvent(String8::format("REMOVE device %s, reason: (%s)", cameraId, reason));
1942}
1943
1944void CameraService::logDeviceAdded(const char* cameraId, const char* reason) {
1945    // Log the device removal
1946    logEvent(String8::format("ADD device %s, reason: (%s)", cameraId, reason));
1947}
1948
1949void CameraService::logClientDied(int clientPid, const char* reason) {
1950    // Log the device removal
1951    logEvent(String8::format("DIED client(s) with PID %d, reason: (%s)", clientPid, reason));
1952}
1953
1954void CameraService::logServiceError(const char* msg, int errorCode) {
1955    String8 curTime = getFormattedCurrentTime();
1956    logEvent(String8::format("SERVICE ERROR: %s : %d (%s)", msg, errorCode, strerror(-errorCode)));
1957}
1958
1959status_t CameraService::onTransact(uint32_t code, const Parcel& data, Parcel* reply,
1960        uint32_t flags) {
1961
1962    const int pid = getCallingPid();
1963    const int selfPid = getpid();
1964
1965    // Permission checks
1966    switch (code) {
1967        case BnCameraService::NOTIFYSYSTEMEVENT: {
1968            if (pid != selfPid) {
1969                // Ensure we're being called by system_server, or similar process with
1970                // permissions to notify the camera service about system events
1971                if (!checkCallingPermission(
1972                        String16("android.permission.CAMERA_SEND_SYSTEM_EVENTS"))) {
1973                    const int uid = getCallingUid();
1974                    ALOGE("Permission Denial: cannot send updates to camera service about system"
1975                            " events from pid=%d, uid=%d", pid, uid);
1976                    return PERMISSION_DENIED;
1977                }
1978            }
1979            break;
1980        }
1981    }
1982
1983    return BnCameraService::onTransact(code, data, reply, flags);
1984}
1985
1986// We share the media players for shutter and recording sound for all clients.
1987// A reference count is kept to determine when we will actually release the
1988// media players.
1989
1990MediaPlayer* CameraService::newMediaPlayer(const char *file) {
1991    MediaPlayer* mp = new MediaPlayer();
1992    if (mp->setDataSource(NULL /* httpService */, file, NULL) == NO_ERROR) {
1993        mp->setAudioStreamType(AUDIO_STREAM_ENFORCED_AUDIBLE);
1994        mp->prepare();
1995    } else {
1996        ALOGE("Failed to load CameraService sounds: %s", file);
1997        return NULL;
1998    }
1999    return mp;
2000}
2001
2002void CameraService::loadSound() {
2003    ATRACE_CALL();
2004
2005    Mutex::Autolock lock(mSoundLock);
2006    LOG1("CameraService::loadSound ref=%d", mSoundRef);
2007    if (mSoundRef++) return;
2008
2009    mSoundPlayer[SOUND_SHUTTER] = newMediaPlayer("/system/media/audio/ui/camera_click.ogg");
2010    mSoundPlayer[SOUND_RECORDING_START] = newMediaPlayer("/system/media/audio/ui/VideoRecord.ogg");
2011    mSoundPlayer[SOUND_RECORDING_STOP] = newMediaPlayer("/system/media/audio/ui/VideoStop.ogg");
2012}
2013
2014void CameraService::releaseSound() {
2015    Mutex::Autolock lock(mSoundLock);
2016    LOG1("CameraService::releaseSound ref=%d", mSoundRef);
2017    if (--mSoundRef) return;
2018
2019    for (int i = 0; i < NUM_SOUNDS; i++) {
2020        if (mSoundPlayer[i] != 0) {
2021            mSoundPlayer[i]->disconnect();
2022            mSoundPlayer[i].clear();
2023        }
2024    }
2025}
2026
2027void CameraService::playSound(sound_kind kind) {
2028    ATRACE_CALL();
2029
2030    LOG1("playSound(%d)", kind);
2031    Mutex::Autolock lock(mSoundLock);
2032    sp<MediaPlayer> player = mSoundPlayer[kind];
2033    if (player != 0) {
2034        player->seekTo(0);
2035        player->start();
2036    }
2037}
2038
2039// ----------------------------------------------------------------------------
2040
2041CameraService::Client::Client(const sp<CameraService>& cameraService,
2042        const sp<ICameraClient>& cameraClient,
2043        const String16& clientPackageName,
2044        int cameraId, int cameraFacing,
2045        int clientPid, uid_t clientUid,
2046        int servicePid) :
2047        CameraService::BasicClient(cameraService,
2048                IInterface::asBinder(cameraClient),
2049                clientPackageName,
2050                cameraId, cameraFacing,
2051                clientPid, clientUid,
2052                servicePid)
2053{
2054    int callingPid = getCallingPid();
2055    LOG1("Client::Client E (pid %d, id %d)", callingPid, cameraId);
2056
2057    mRemoteCallback = cameraClient;
2058
2059    cameraService->loadSound();
2060
2061    LOG1("Client::Client X (pid %d, id %d)", callingPid, cameraId);
2062}
2063
2064// tear down the client
2065CameraService::Client::~Client() {
2066    ALOGV("~Client");
2067    mDestructionStarted = true;
2068
2069    mCameraService->releaseSound();
2070    // unconditionally disconnect. function is idempotent
2071    Client::disconnect();
2072}
2073
2074CameraService::BasicClient::BasicClient(const sp<CameraService>& cameraService,
2075        const sp<IBinder>& remoteCallback,
2076        const String16& clientPackageName,
2077        int cameraId, int cameraFacing,
2078        int clientPid, uid_t clientUid,
2079        int servicePid):
2080        mClientPackageName(clientPackageName), mDisconnected(false)
2081{
2082    mCameraService = cameraService;
2083    mRemoteBinder = remoteCallback;
2084    mCameraId = cameraId;
2085    mCameraFacing = cameraFacing;
2086    mClientPid = clientPid;
2087    mClientUid = clientUid;
2088    mServicePid = servicePid;
2089    mOpsActive = false;
2090    mDestructionStarted = false;
2091
2092    // In some cases the calling code has no access to the package it runs under.
2093    // For example, NDK camera API.
2094    // In this case we will get the packages for the calling UID and pick the first one
2095    // for attributing the app op. This will work correctly for runtime permissions
2096    // as for legacy apps we will toggle the app op for all packages in the UID.
2097    // The caveat is that the operation may be attributed to the wrong package and
2098    // stats based on app ops may be slightly off.
2099    if (mClientPackageName.size() <= 0) {
2100        sp<IServiceManager> sm = defaultServiceManager();
2101        sp<IBinder> binder = sm->getService(String16(kPermissionServiceName));
2102        if (binder == 0) {
2103            ALOGE("Cannot get permission service");
2104            // Leave mClientPackageName unchanged (empty) and the further interaction
2105            // with camera will fail in BasicClient::startCameraOps
2106            return;
2107        }
2108
2109        sp<IPermissionController> permCtrl = interface_cast<IPermissionController>(binder);
2110        Vector<String16> packages;
2111
2112        permCtrl->getPackagesForUid(mClientUid, packages);
2113
2114        if (packages.isEmpty()) {
2115            ALOGE("No packages for calling UID");
2116            // Leave mClientPackageName unchanged (empty) and the further interaction
2117            // with camera will fail in BasicClient::startCameraOps
2118            return;
2119        }
2120        mClientPackageName = packages[0];
2121    }
2122}
2123
2124CameraService::BasicClient::~BasicClient() {
2125    ALOGV("~BasicClient");
2126    mDestructionStarted = true;
2127}
2128
2129binder::Status CameraService::BasicClient::disconnect() {
2130    binder::Status res = Status::ok();
2131    if (mDisconnected) {
2132        return res;
2133    }
2134    mDisconnected = true;
2135
2136    mCameraService->removeByClient(this);
2137    mCameraService->logDisconnected(String8::format("%d", mCameraId), mClientPid,
2138            String8(mClientPackageName));
2139
2140    sp<IBinder> remote = getRemote();
2141    if (remote != nullptr) {
2142        remote->unlinkToDeath(mCameraService);
2143    }
2144
2145    finishCameraOps();
2146    // Notify flashlight that a camera device is closed.
2147    mCameraService->mFlashlight->deviceClosed(String8::format("%d", mCameraId));
2148    ALOGI("%s: Disconnected client for camera %d for PID %d", __FUNCTION__, mCameraId, mClientPid);
2149
2150    // client shouldn't be able to call into us anymore
2151    mClientPid = 0;
2152
2153    return res;
2154}
2155
2156status_t CameraService::BasicClient::dump(int, const Vector<String16>&) {
2157    // No dumping of clients directly over Binder,
2158    // must go through CameraService::dump
2159    android_errorWriteWithInfoLog(SN_EVENT_LOG_ID, "26265403",
2160            IPCThreadState::self()->getCallingUid(), NULL, 0);
2161    return OK;
2162}
2163
2164String16 CameraService::BasicClient::getPackageName() const {
2165    return mClientPackageName;
2166}
2167
2168
2169int CameraService::BasicClient::getClientPid() const {
2170    return mClientPid;
2171}
2172
2173uid_t CameraService::BasicClient::getClientUid() const {
2174    return mClientUid;
2175}
2176
2177bool CameraService::BasicClient::canCastToApiClient(apiLevel level) const {
2178    // Defaults to API2.
2179    return level == API_2;
2180}
2181
2182status_t CameraService::BasicClient::startCameraOps() {
2183    ATRACE_CALL();
2184
2185    int32_t res;
2186    // Notify app ops that the camera is not available
2187    mOpsCallback = new OpsCallback(this);
2188
2189    {
2190        ALOGV("%s: Start camera ops, package name = %s, client UID = %d",
2191              __FUNCTION__, String8(mClientPackageName).string(), mClientUid);
2192    }
2193
2194    mAppOpsManager.startWatchingMode(AppOpsManager::OP_CAMERA,
2195            mClientPackageName, mOpsCallback);
2196    res = mAppOpsManager.startOp(AppOpsManager::OP_CAMERA,
2197            mClientUid, mClientPackageName);
2198
2199    if (res == AppOpsManager::MODE_ERRORED) {
2200        ALOGI("Camera %d: Access for \"%s\" has been revoked",
2201                mCameraId, String8(mClientPackageName).string());
2202        return PERMISSION_DENIED;
2203    }
2204
2205    if (res == AppOpsManager::MODE_IGNORED) {
2206        ALOGI("Camera %d: Access for \"%s\" has been restricted",
2207                mCameraId, String8(mClientPackageName).string());
2208        // Return the same error as for device policy manager rejection
2209        return -EACCES;
2210    }
2211
2212    mOpsActive = true;
2213
2214    // Transition device availability listeners from PRESENT -> NOT_AVAILABLE
2215    mCameraService->updateStatus(ICameraServiceListener::STATUS_NOT_AVAILABLE,
2216            String8::format("%d", mCameraId));
2217
2218    // Transition device state to OPEN
2219    mCameraService->updateProxyDeviceState(ICameraServiceProxy::CAMERA_STATE_OPEN,
2220            String8::format("%d", mCameraId));
2221
2222    return OK;
2223}
2224
2225status_t CameraService::BasicClient::finishCameraOps() {
2226    ATRACE_CALL();
2227
2228    // Check if startCameraOps succeeded, and if so, finish the camera op
2229    if (mOpsActive) {
2230        // Notify app ops that the camera is available again
2231        mAppOpsManager.finishOp(AppOpsManager::OP_CAMERA, mClientUid,
2232                mClientPackageName);
2233        mOpsActive = false;
2234
2235        std::initializer_list<int32_t> rejected = {ICameraServiceListener::STATUS_NOT_PRESENT,
2236                ICameraServiceListener::STATUS_ENUMERATING};
2237
2238        // Transition to PRESENT if the camera is not in either of the rejected states
2239        mCameraService->updateStatus(ICameraServiceListener::STATUS_PRESENT,
2240                String8::format("%d", mCameraId), rejected);
2241
2242        // Transition device state to CLOSED
2243        mCameraService->updateProxyDeviceState(ICameraServiceProxy::CAMERA_STATE_CLOSED,
2244                String8::format("%d", mCameraId));
2245    }
2246    // Always stop watching, even if no camera op is active
2247    if (mOpsCallback != NULL) {
2248        mAppOpsManager.stopWatchingMode(mOpsCallback);
2249    }
2250    mOpsCallback.clear();
2251
2252    return OK;
2253}
2254
2255void CameraService::BasicClient::opChanged(int32_t op, const String16& packageName) {
2256    ATRACE_CALL();
2257
2258    String8 name(packageName);
2259    String8 myName(mClientPackageName);
2260
2261    if (op != AppOpsManager::OP_CAMERA) {
2262        ALOGW("Unexpected app ops notification received: %d", op);
2263        return;
2264    }
2265
2266    int32_t res;
2267    res = mAppOpsManager.checkOp(AppOpsManager::OP_CAMERA,
2268            mClientUid, mClientPackageName);
2269    ALOGV("checkOp returns: %d, %s ", res,
2270            res == AppOpsManager::MODE_ALLOWED ? "ALLOWED" :
2271            res == AppOpsManager::MODE_IGNORED ? "IGNORED" :
2272            res == AppOpsManager::MODE_ERRORED ? "ERRORED" :
2273            "UNKNOWN");
2274
2275    if (res != AppOpsManager::MODE_ALLOWED) {
2276        ALOGI("Camera %d: Access for \"%s\" revoked", mCameraId,
2277                myName.string());
2278        // Reset the client PID to allow server-initiated disconnect,
2279        // and to prevent further calls by client.
2280        mClientPid = getCallingPid();
2281        CaptureResultExtras resultExtras; // a dummy result (invalid)
2282        notifyError(hardware::camera2::ICameraDeviceCallbacks::ERROR_CAMERA_SERVICE, resultExtras);
2283        disconnect();
2284    }
2285}
2286
2287// ----------------------------------------------------------------------------
2288
2289// Provide client strong pointer for callbacks.
2290sp<CameraService::Client> CameraService::Client::getClientFromCookie(void* user) {
2291    String8 cameraId = String8::format("%d", (int)(intptr_t) user);
2292    auto clientDescriptor = gCameraService->mActiveClientManager.get(cameraId);
2293    if (clientDescriptor != nullptr) {
2294        return sp<Client>{
2295                static_cast<Client*>(clientDescriptor->getValue().get())};
2296    }
2297    return sp<Client>{nullptr};
2298}
2299
2300void CameraService::Client::notifyError(int32_t errorCode,
2301        const CaptureResultExtras& resultExtras) {
2302    (void) errorCode;
2303    (void) resultExtras;
2304    if (mRemoteCallback != NULL) {
2305        mRemoteCallback->notifyCallback(CAMERA_MSG_ERROR, CAMERA_ERROR_RELEASED, 0);
2306    } else {
2307        ALOGE("mRemoteCallback is NULL!!");
2308    }
2309}
2310
2311// NOTE: function is idempotent
2312binder::Status CameraService::Client::disconnect() {
2313    ALOGV("Client::disconnect");
2314    return BasicClient::disconnect();
2315}
2316
2317bool CameraService::Client::canCastToApiClient(apiLevel level) const {
2318    return level == API_1;
2319}
2320
2321CameraService::Client::OpsCallback::OpsCallback(wp<BasicClient> client):
2322        mClient(client) {
2323}
2324
2325void CameraService::Client::OpsCallback::opChanged(int32_t op,
2326        const String16& packageName) {
2327    sp<BasicClient> client = mClient.promote();
2328    if (client != NULL) {
2329        client->opChanged(op, packageName);
2330    }
2331}
2332
2333// ----------------------------------------------------------------------------
2334//                  CameraState
2335// ----------------------------------------------------------------------------
2336
2337CameraService::CameraState::CameraState(const String8& id, int cost,
2338        const std::set<String8>& conflicting) : mId(id),
2339        mStatus(ICameraServiceListener::STATUS_PRESENT), mCost(cost), mConflicting(conflicting) {}
2340
2341CameraService::CameraState::~CameraState() {}
2342
2343int32_t CameraService::CameraState::getStatus() const {
2344    Mutex::Autolock lock(mStatusLock);
2345    return mStatus;
2346}
2347
2348CameraParameters CameraService::CameraState::getShimParams() const {
2349    return mShimParams;
2350}
2351
2352void CameraService::CameraState::setShimParams(const CameraParameters& params) {
2353    mShimParams = params;
2354}
2355
2356int CameraService::CameraState::getCost() const {
2357    return mCost;
2358}
2359
2360std::set<String8> CameraService::CameraState::getConflicting() const {
2361    return mConflicting;
2362}
2363
2364String8 CameraService::CameraState::getId() const {
2365    return mId;
2366}
2367
2368// ----------------------------------------------------------------------------
2369//                  ClientEventListener
2370// ----------------------------------------------------------------------------
2371
2372void CameraService::ClientEventListener::onClientAdded(
2373        const resource_policy::ClientDescriptor<String8,
2374        sp<CameraService::BasicClient>>& descriptor) {
2375    const auto& basicClient = descriptor.getValue();
2376    if (basicClient.get() != nullptr) {
2377        BatteryNotifier& notifier(BatteryNotifier::getInstance());
2378        notifier.noteStartCamera(descriptor.getKey(),
2379                static_cast<int>(basicClient->getClientUid()));
2380    }
2381}
2382
2383void CameraService::ClientEventListener::onClientRemoved(
2384        const resource_policy::ClientDescriptor<String8,
2385        sp<CameraService::BasicClient>>& descriptor) {
2386    const auto& basicClient = descriptor.getValue();
2387    if (basicClient.get() != nullptr) {
2388        BatteryNotifier& notifier(BatteryNotifier::getInstance());
2389        notifier.noteStopCamera(descriptor.getKey(),
2390                static_cast<int>(basicClient->getClientUid()));
2391    }
2392}
2393
2394
2395// ----------------------------------------------------------------------------
2396//                  CameraClientManager
2397// ----------------------------------------------------------------------------
2398
2399CameraService::CameraClientManager::CameraClientManager() {
2400    setListener(std::make_shared<ClientEventListener>());
2401}
2402
2403CameraService::CameraClientManager::~CameraClientManager() {}
2404
2405sp<CameraService::BasicClient> CameraService::CameraClientManager::getCameraClient(
2406        const String8& id) const {
2407    auto descriptor = get(id);
2408    if (descriptor == nullptr) {
2409        return sp<BasicClient>{nullptr};
2410    }
2411    return descriptor->getValue();
2412}
2413
2414String8 CameraService::CameraClientManager::toString() const {
2415    auto all = getAll();
2416    String8 ret("[");
2417    bool hasAny = false;
2418    for (auto& i : all) {
2419        hasAny = true;
2420        String8 key = i->getKey();
2421        int32_t cost = i->getCost();
2422        int32_t pid = i->getOwnerId();
2423        int32_t priority = i->getPriority();
2424        auto conflicting = i->getConflicting();
2425        auto clientSp = i->getValue();
2426        String8 packageName;
2427        userid_t clientUserId = 0;
2428        if (clientSp.get() != nullptr) {
2429            packageName = String8{clientSp->getPackageName()};
2430            uid_t clientUid = clientSp->getClientUid();
2431            clientUserId = multiuser_get_user_id(clientUid);
2432        }
2433        ret.appendFormat("\n(Camera ID: %s, Cost: %" PRId32 ", PID: %" PRId32 ", Priority: %"
2434                PRId32 ", ", key.string(), cost, pid, priority);
2435
2436        if (clientSp.get() != nullptr) {
2437            ret.appendFormat("User Id: %d, ", clientUserId);
2438        }
2439        if (packageName.size() != 0) {
2440            ret.appendFormat("Client Package Name: %s", packageName.string());
2441        }
2442
2443        ret.append(", Conflicting Client Devices: {");
2444        for (auto& j : conflicting) {
2445            ret.appendFormat("%s, ", j.string());
2446        }
2447        ret.append("})");
2448    }
2449    if (hasAny) ret.append("\n");
2450    ret.append("]\n");
2451    return ret;
2452}
2453
2454CameraService::DescriptorPtr CameraService::CameraClientManager::makeClientDescriptor(
2455        const String8& key, const sp<BasicClient>& value, int32_t cost,
2456        const std::set<String8>& conflictingKeys, int32_t priority, int32_t ownerId) {
2457
2458    return std::make_shared<resource_policy::ClientDescriptor<String8, sp<BasicClient>>>(
2459            key, value, cost, conflictingKeys, priority, ownerId);
2460}
2461
2462CameraService::DescriptorPtr CameraService::CameraClientManager::makeClientDescriptor(
2463        const sp<BasicClient>& value, const CameraService::DescriptorPtr& partial) {
2464    return makeClientDescriptor(partial->getKey(), value, partial->getCost(),
2465            partial->getConflicting(), partial->getPriority(), partial->getOwnerId());
2466}
2467
2468// ----------------------------------------------------------------------------
2469
2470static const int kDumpLockRetries = 50;
2471static const int kDumpLockSleep = 60000;
2472
2473static bool tryLock(Mutex& mutex)
2474{
2475    bool locked = false;
2476    for (int i = 0; i < kDumpLockRetries; ++i) {
2477        if (mutex.tryLock() == NO_ERROR) {
2478            locked = true;
2479            break;
2480        }
2481        usleep(kDumpLockSleep);
2482    }
2483    return locked;
2484}
2485
2486status_t CameraService::dump(int fd, const Vector<String16>& args) {
2487    ATRACE_CALL();
2488
2489    String8 result("Dump of the Camera Service:\n");
2490    if (checkCallingPermission(String16("android.permission.DUMP")) == false) {
2491        result = result.format("Permission Denial: "
2492                "can't dump CameraService from pid=%d, uid=%d\n",
2493                getCallingPid(),
2494                getCallingUid());
2495        write(fd, result.string(), result.size());
2496    } else {
2497        bool locked = tryLock(mServiceLock);
2498        // failed to lock - CameraService is probably deadlocked
2499        if (!locked) {
2500            result.append("CameraService may be deadlocked\n");
2501            write(fd, result.string(), result.size());
2502        }
2503
2504        bool hasClient = false;
2505        if (!mModule) {
2506            result = String8::format("No camera module available!\n");
2507            write(fd, result.string(), result.size());
2508
2509            // Dump event log for error information
2510            dumpEventLog(fd);
2511
2512            if (locked) mServiceLock.unlock();
2513            return NO_ERROR;
2514        }
2515
2516        result = String8::format("Camera module HAL API version: 0x%x\n", mModule->getHalApiVersion());
2517        result.appendFormat("Camera module API version: 0x%x\n", mModule->getModuleApiVersion());
2518        result.appendFormat("Camera module name: %s\n", mModule->getModuleName());
2519        result.appendFormat("Camera module author: %s\n", mModule->getModuleAuthor());
2520        result.appendFormat("Number of camera devices: %d\n", mNumberOfCameras);
2521        result.appendFormat("Number of normal camera devices: %d\n", mNumberOfNormalCameras);
2522        String8 activeClientString = mActiveClientManager.toString();
2523        result.appendFormat("Active Camera Clients:\n%s", activeClientString.string());
2524        result.appendFormat("Allowed users:\n%s\n", toString(mAllowedUsers).string());
2525
2526        sp<VendorTagDescriptor> desc = VendorTagDescriptor::getGlobalVendorTagDescriptor();
2527        if (desc == NULL) {
2528            result.appendFormat("Vendor tags left unimplemented.\n");
2529        } else {
2530            result.appendFormat("Vendor tag definitions:\n");
2531        }
2532
2533        write(fd, result.string(), result.size());
2534
2535        if (desc != NULL) {
2536            desc->dump(fd, /*verbosity*/2, /*indentation*/4);
2537        }
2538
2539        dumpEventLog(fd);
2540
2541        bool stateLocked = tryLock(mCameraStatesLock);
2542        if (!stateLocked) {
2543            result = String8::format("CameraStates in use, may be deadlocked\n");
2544            write(fd, result.string(), result.size());
2545        }
2546
2547        for (auto& state : mCameraStates) {
2548            String8 cameraId = state.first;
2549            result = String8::format("Camera %s information:\n", cameraId.string());
2550            camera_info info;
2551
2552            // TODO: Change getCameraInfo + HAL to use String cameraIds
2553            status_t rc = mModule->getCameraInfo(cameraIdToInt(cameraId), &info);
2554            if (rc != OK) {
2555                result.appendFormat("  Error reading static information!\n");
2556                write(fd, result.string(), result.size());
2557            } else {
2558                result.appendFormat("  Facing: %s\n",
2559                        info.facing == CAMERA_FACING_BACK ? "BACK" :
2560                                info.facing == CAMERA_FACING_FRONT ? "FRONT" : "EXTERNAL");
2561                result.appendFormat("  Orientation: %d\n", info.orientation);
2562                int deviceVersion;
2563                if (mModule->getModuleApiVersion() < CAMERA_MODULE_API_VERSION_2_0) {
2564                    deviceVersion = CAMERA_DEVICE_API_VERSION_1_0;
2565                } else {
2566                    deviceVersion = info.device_version;
2567                }
2568
2569                auto conflicting = state.second->getConflicting();
2570                result.appendFormat("  Resource Cost: %d\n", state.second->getCost());
2571                result.appendFormat("  Conflicting Devices:");
2572                for (auto& id : conflicting) {
2573                    result.appendFormat(" %s", id.string());
2574                }
2575                if (conflicting.size() == 0) {
2576                    result.appendFormat(" NONE");
2577                }
2578                result.appendFormat("\n");
2579
2580                result.appendFormat("  Device version: %#x\n", deviceVersion);
2581                if (deviceVersion >= CAMERA_DEVICE_API_VERSION_3_0) {
2582                    result.appendFormat("  Device static metadata:\n");
2583                    write(fd, result.string(), result.size());
2584                    dump_indented_camera_metadata(info.static_camera_characteristics,
2585                            fd, /*verbosity*/2, /*indentation*/4);
2586                } else {
2587                    write(fd, result.string(), result.size());
2588                }
2589
2590                CameraParameters p = state.second->getShimParams();
2591                if (!p.isEmpty()) {
2592                    result = String8::format("  Camera1 API shim is using parameters:\n        ");
2593                    write(fd, result.string(), result.size());
2594                    p.dump(fd, args);
2595                }
2596            }
2597
2598            auto clientDescriptor = mActiveClientManager.get(cameraId);
2599            if (clientDescriptor == nullptr) {
2600                result = String8::format("  Device %s is closed, no client instance\n",
2601                        cameraId.string());
2602                write(fd, result.string(), result.size());
2603                continue;
2604            }
2605            hasClient = true;
2606            result = String8::format("  Device %s is open. Client instance dump:\n\n",
2607                    cameraId.string());
2608            result.appendFormat("Client priority level: %d\n", clientDescriptor->getPriority());
2609            result.appendFormat("Client PID: %d\n", clientDescriptor->getOwnerId());
2610
2611            auto client = clientDescriptor->getValue();
2612            result.appendFormat("Client package: %s\n",
2613                    String8(client->getPackageName()).string());
2614            write(fd, result.string(), result.size());
2615
2616            client->dumpClient(fd, args);
2617        }
2618
2619        if (stateLocked) mCameraStatesLock.unlock();
2620
2621        if (!hasClient) {
2622            result = String8::format("\nNo active camera clients yet.\n");
2623            write(fd, result.string(), result.size());
2624        }
2625
2626        if (locked) mServiceLock.unlock();
2627
2628        // Dump camera traces if there were any
2629        write(fd, "\n", 1);
2630        camera3::CameraTraces::dump(fd, args);
2631
2632        // Process dump arguments, if any
2633        int n = args.size();
2634        String16 verboseOption("-v");
2635        String16 unreachableOption("--unreachable");
2636        for (int i = 0; i < n; i++) {
2637            if (args[i] == verboseOption) {
2638                // change logging level
2639                if (i + 1 >= n) continue;
2640                String8 levelStr(args[i+1]);
2641                int level = atoi(levelStr.string());
2642                result = String8::format("\nSetting log level to %d.\n", level);
2643                setLogLevel(level);
2644                write(fd, result.string(), result.size());
2645            } else if (args[i] == unreachableOption) {
2646                // Dump memory analysis
2647                // TODO - should limit be an argument parameter?
2648                UnreachableMemoryInfo info;
2649                bool success = GetUnreachableMemory(info, /*limit*/ 10000);
2650                if (!success) {
2651                    dprintf(fd, "\nUnable to dump unreachable memory. "
2652                            "Try disabling SELinux enforcement.\n");
2653                } else {
2654                    dprintf(fd, "\nDumping unreachable memory:\n");
2655                    std::string s = info.ToString(/*log_contents*/ true);
2656                    write(fd, s.c_str(), s.size());
2657                }
2658            }
2659        }
2660    }
2661    return NO_ERROR;
2662}
2663
2664void CameraService::dumpEventLog(int fd) {
2665    String8 result = String8("\nPrior client events (most recent at top):\n");
2666
2667    Mutex::Autolock l(mLogLock);
2668    for (const auto& msg : mEventLog) {
2669        result.appendFormat("  %s\n", msg.string());
2670    }
2671
2672    if (mEventLog.size() == DEFAULT_EVENT_LOG_LENGTH) {
2673        result.append("  ...\n");
2674    } else if (mEventLog.size() == 0) {
2675        result.append("  [no events yet]\n");
2676    }
2677    result.append("\n");
2678
2679    write(fd, result.string(), result.size());
2680}
2681
2682void CameraService::handleTorchClientBinderDied(const wp<IBinder> &who) {
2683    Mutex::Autolock al(mTorchClientMapMutex);
2684    for (size_t i = 0; i < mTorchClientMap.size(); i++) {
2685        if (mTorchClientMap[i] == who) {
2686            // turn off the torch mode that was turned on by dead client
2687            String8 cameraId = mTorchClientMap.keyAt(i);
2688            status_t res = mFlashlight->setTorchMode(cameraId, false);
2689            if (res) {
2690                ALOGE("%s: torch client died but couldn't turn off torch: "
2691                    "%s (%d)", __FUNCTION__, strerror(-res), res);
2692                return;
2693            }
2694            mTorchClientMap.removeItemsAt(i);
2695            break;
2696        }
2697    }
2698}
2699
2700/*virtual*/void CameraService::binderDied(const wp<IBinder> &who) {
2701
2702    /**
2703      * While tempting to promote the wp<IBinder> into a sp, it's actually not supported by the
2704      * binder driver
2705      */
2706
2707    logClientDied(getCallingPid(), String8("Binder died unexpectedly"));
2708
2709    // check torch client
2710    handleTorchClientBinderDied(who);
2711
2712    // check camera device client
2713    if(!evictClientIdByRemote(who)) {
2714        ALOGV("%s: Java client's binder death already cleaned up (normal case)", __FUNCTION__);
2715        return;
2716    }
2717
2718    ALOGE("%s: Java client's binder died, removing it from the list of active clients",
2719            __FUNCTION__);
2720}
2721
2722void CameraService::updateStatus(int32_t status, const String8& cameraId) {
2723    updateStatus(status, cameraId, {});
2724}
2725
2726void CameraService::updateStatus(int32_t status, const String8& cameraId,
2727        std::initializer_list<int32_t> rejectSourceStates) {
2728    // Do not lock mServiceLock here or can get into a deadlock from
2729    // connect() -> disconnect -> updateStatus
2730
2731    auto state = getCameraState(cameraId);
2732
2733    if (state == nullptr) {
2734        ALOGW("%s: Could not update the status for %s, no such device exists", __FUNCTION__,
2735                cameraId.string());
2736        return;
2737    }
2738
2739    // Update the status for this camera state, then send the onStatusChangedCallbacks to each
2740    // of the listeners with both the mStatusStatus and mStatusListenerLock held
2741    state->updateStatus(status, cameraId, rejectSourceStates, [this]
2742            (const String8& cameraId, int32_t status) {
2743
2744            if (status != ICameraServiceListener::STATUS_ENUMERATING) {
2745                // Update torch status if it has a flash unit.
2746                Mutex::Autolock al(mTorchStatusMutex);
2747                int32_t torchStatus;
2748                if (getTorchStatusLocked(cameraId, &torchStatus) !=
2749                        NAME_NOT_FOUND) {
2750                    int32_t newTorchStatus =
2751                            status == ICameraServiceListener::STATUS_PRESENT ?
2752                            ICameraServiceListener::TORCH_STATUS_AVAILABLE_OFF :
2753                            ICameraServiceListener::TORCH_STATUS_NOT_AVAILABLE;
2754                    if (torchStatus != newTorchStatus) {
2755                        onTorchStatusChangedLocked(cameraId, newTorchStatus);
2756                    }
2757                }
2758            }
2759
2760            Mutex::Autolock lock(mStatusListenerLock);
2761
2762            for (auto& listener : mListenerList) {
2763                // TODO: Refactor status listeners to use strings for Camera IDs and remove this.
2764                int id = cameraIdToInt(cameraId);
2765                if (id != -1) listener->onStatusChanged(status, id);
2766            }
2767        });
2768}
2769
2770void CameraService::updateProxyDeviceState(ICameraServiceProxy::CameraState newState,
2771        const String8& cameraId) {
2772    sp<ICameraServiceProxy> proxyBinder = getCameraServiceProxy();
2773    if (proxyBinder == nullptr) return;
2774    String16 id(cameraId);
2775    proxyBinder->notifyCameraState(id, newState);
2776}
2777
2778status_t CameraService::getTorchStatusLocked(
2779        const String8& cameraId,
2780        int32_t *status) const {
2781    if (!status) {
2782        return BAD_VALUE;
2783    }
2784    ssize_t index = mTorchStatusMap.indexOfKey(cameraId);
2785    if (index == NAME_NOT_FOUND) {
2786        // invalid camera ID or the camera doesn't have a flash unit
2787        return NAME_NOT_FOUND;
2788    }
2789
2790    *status = mTorchStatusMap.valueAt(index);
2791    return OK;
2792}
2793
2794status_t CameraService::setTorchStatusLocked(const String8& cameraId,
2795        int32_t status) {
2796    ssize_t index = mTorchStatusMap.indexOfKey(cameraId);
2797    if (index == NAME_NOT_FOUND) {
2798        return BAD_VALUE;
2799    }
2800    int32_t& item =
2801            mTorchStatusMap.editValueAt(index);
2802    item = status;
2803
2804    return OK;
2805}
2806
2807}; // namespace android
2808