/* * Copyright (C) 2016 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #define LOG_TAG "AAudioService" //#define LOG_NDEBUG 0 #include #include #include #include #include #include #include #include "binding/AAudioServiceMessage.h" #include "AAudioClientTracker.h" #include "AAudioEndpointManager.h" #include "AAudioService.h" #include "AAudioServiceStreamMMAP.h" #include "AAudioServiceStreamShared.h" #include "binding/IAAudioService.h" using namespace android; using namespace aaudio; #define MAX_STREAMS_PER_PROCESS 8 using android::AAudioService; android::AAudioService::AAudioService() : BnAAudioService() { mAudioClient.clientUid = getuid(); // TODO consider using geteuid() mAudioClient.clientPid = getpid(); mAudioClient.packageName = String16(""); AAudioClientTracker::getInstance().setAAudioService(this); } AAudioService::~AAudioService() { } status_t AAudioService::dump(int fd, const Vector& args) { std::string result; if (!dumpAllowed()) { std::stringstream ss; ss << "Permission Denial: can't dump AAudioService from pid=" << IPCThreadState::self()->getCallingPid() << ", uid=" << IPCThreadState::self()->getCallingUid() << "\n"; result = ss.str(); ALOGW("%s", result.c_str()); } else { result = "------------ AAudio Service ------------\n" + mStreamTracker.dump() + AAudioClientTracker::getInstance().dump() + AAudioEndpointManager::getInstance().dump(); } (void)write(fd, result.c_str(), result.size()); return NO_ERROR; } void AAudioService::registerClient(const sp& client) { pid_t pid = IPCThreadState::self()->getCallingPid(); AAudioClientTracker::getInstance().registerClient(pid, client); } bool AAudioService::isCallerInService() { return mAudioClient.clientPid == IPCThreadState::self()->getCallingPid() && mAudioClient.clientUid == IPCThreadState::self()->getCallingUid(); } aaudio_handle_t AAudioService::openStream(const aaudio::AAudioStreamRequest &request, aaudio::AAudioStreamConfiguration &configurationOutput) { // A lock in is used to order the opening of endpoints when an // EXCLUSIVE endpoint is stolen. We want the order to be: // 1) Thread A opens exclusive MMAP endpoint // 2) Thread B wants to open an exclusive MMAP endpoint so it steals the one from A // under this lock. // 3) Thread B opens a shared MMAP endpoint. // 4) Thread A can then get the lock and also open a shared stream. // Without the lock. Thread A might sneak in and reallocate an exclusive stream // before B can open the shared stream. std::unique_lock lock(mOpenLock); aaudio_result_t result = AAUDIO_OK; sp serviceStream; const AAudioStreamConfiguration &configurationInput = request.getConstantConfiguration(); bool sharingModeMatchRequired = request.isSharingModeMatchRequired(); aaudio_sharing_mode_t sharingMode = configurationInput.getSharingMode(); // Enforce limit on client processes. pid_t pid = request.getProcessId(); if (pid != mAudioClient.clientPid) { int32_t count = AAudioClientTracker::getInstance().getStreamCount(pid); if (count >= MAX_STREAMS_PER_PROCESS) { ALOGE("openStream(): exceeded max streams per process %d >= %d", count, MAX_STREAMS_PER_PROCESS); return AAUDIO_ERROR_UNAVAILABLE; } } if (sharingMode != AAUDIO_SHARING_MODE_EXCLUSIVE && sharingMode != AAUDIO_SHARING_MODE_SHARED) { ALOGE("openStream(): unrecognized sharing mode = %d", sharingMode); return AAUDIO_ERROR_ILLEGAL_ARGUMENT; } if (sharingMode == AAUDIO_SHARING_MODE_EXCLUSIVE && AAudioClientTracker::getInstance().isExclusiveEnabled(request.getProcessId())) { // only trust audioserver for in service indication bool inService = false; if (isCallerInService()) { inService = request.isInService(); } serviceStream = new AAudioServiceStreamMMAP(*this, inService); result = serviceStream->open(request); if (result != AAUDIO_OK) { // Clear it so we can possibly fall back to using a shared stream. ALOGW("openStream(), could not open in EXCLUSIVE mode"); serviceStream.clear(); } } // Try SHARED if SHARED requested or if EXCLUSIVE failed. if (sharingMode == AAUDIO_SHARING_MODE_SHARED) { serviceStream = new AAudioServiceStreamShared(*this); result = serviceStream->open(request); } else if (serviceStream.get() == nullptr && !sharingModeMatchRequired) { aaudio::AAudioStreamRequest modifiedRequest = request; // Overwrite the original EXCLUSIVE mode with SHARED. modifiedRequest.getConfiguration().setSharingMode(AAUDIO_SHARING_MODE_SHARED); serviceStream = new AAudioServiceStreamShared(*this); result = serviceStream->open(modifiedRequest); } if (result != AAUDIO_OK) { serviceStream.clear(); return result; } else { aaudio_handle_t handle = mStreamTracker.addStreamForHandle(serviceStream.get()); serviceStream->setHandle(handle); pid_t pid = request.getProcessId(); AAudioClientTracker::getInstance().registerClientStream(pid, serviceStream); configurationOutput.copyFrom(*serviceStream); // Log open in MediaMetrics after we have the handle because we need the handle to // create the metrics ID. serviceStream->logOpen(handle); ALOGV("%s(): return handle = 0x%08X", __func__, handle); return handle; } } aaudio_result_t AAudioService::closeStream(aaudio_handle_t streamHandle) { // Check permission and ownership first. sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGE("closeStream(0x%0x), illegal stream handle", streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } return closeStream(serviceStream); } aaudio_result_t AAudioService::closeStream(sp serviceStream) { // This is protected by a lock in AAudioClientTracker. // It is safe to unregister the same stream twice. pid_t pid = serviceStream->getOwnerProcessId(); AAudioClientTracker::getInstance().unregisterClientStream(pid, serviceStream); // This is protected by a lock in mStreamTracker. // It is safe to remove the same stream twice. mStreamTracker.removeStreamByHandle(serviceStream->getHandle()); return serviceStream->close(); } sp AAudioService::convertHandleToServiceStream( aaudio_handle_t streamHandle) { sp serviceStream = mStreamTracker.getStreamByHandle( streamHandle); if (serviceStream.get() != nullptr) { // Only allow owner or the aaudio service to access the stream. const uid_t callingUserId = IPCThreadState::self()->getCallingUid(); const uid_t ownerUserId = serviceStream->getOwnerUserId(); bool callerOwnsIt = callingUserId == ownerUserId; bool serverCalling = callingUserId == mAudioClient.clientUid; bool serverOwnsIt = ownerUserId == mAudioClient.clientUid; bool allowed = callerOwnsIt || serverCalling || serverOwnsIt; if (!allowed) { ALOGE("AAudioService: calling uid %d cannot access stream 0x%08X owned by %d", callingUserId, streamHandle, ownerUserId); serviceStream.clear(); } } return serviceStream; } aaudio_result_t AAudioService::getStreamDescription( aaudio_handle_t streamHandle, aaudio::AudioEndpointParcelable &parcelable) { sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGE("getStreamDescription(), illegal stream handle = 0x%0x", streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } return serviceStream->getDescription(parcelable); } aaudio_result_t AAudioService::startStream(aaudio_handle_t streamHandle) { sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGW("%s(), invalid streamHandle = 0x%0x", __func__, streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } return serviceStream->start(); } aaudio_result_t AAudioService::pauseStream(aaudio_handle_t streamHandle) { sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGW("%s(), invalid streamHandle = 0x%0x", __func__, streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } return serviceStream->pause(); } aaudio_result_t AAudioService::stopStream(aaudio_handle_t streamHandle) { sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGW("%s(), invalid streamHandle = 0x%0x", __func__, streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } return serviceStream->stop(); } aaudio_result_t AAudioService::flushStream(aaudio_handle_t streamHandle) { sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGW("%s(), invalid streamHandle = 0x%0x", __func__, streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } return serviceStream->flush(); } aaudio_result_t AAudioService::registerAudioThread(aaudio_handle_t streamHandle, pid_t clientThreadId, int64_t /* periodNanoseconds */) { sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGW("%s(), invalid streamHandle = 0x%0x", __func__, streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } int32_t priority = isCallerInService() ? kRealTimeAudioPriorityService : kRealTimeAudioPriorityClient; return serviceStream->registerAudioThread(clientThreadId, priority); } aaudio_result_t AAudioService::unregisterAudioThread(aaudio_handle_t streamHandle, pid_t clientThreadId) { sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGW("%s(), invalid streamHandle = 0x%0x", __func__, streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } return serviceStream->unregisterAudioThread(clientThreadId); } aaudio_result_t AAudioService::startClient(aaudio_handle_t streamHandle, const android::AudioClient& client, const audio_attributes_t *attr, audio_port_handle_t *clientHandle) { sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGW("%s(), invalid streamHandle = 0x%0x", __func__, streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } return serviceStream->startClient(client, attr, clientHandle); } aaudio_result_t AAudioService::stopClient(aaudio_handle_t streamHandle, audio_port_handle_t portHandle) { sp serviceStream = convertHandleToServiceStream(streamHandle); if (serviceStream.get() == nullptr) { ALOGW("%s(), invalid streamHandle = 0x%0x", __func__, streamHandle); return AAUDIO_ERROR_INVALID_HANDLE; } return serviceStream->stopClient(portHandle); } // This is only called internally when AudioFlinger wants to tear down a stream. // So we do not have to check permissions. aaudio_result_t AAudioService::disconnectStreamByPortHandle(audio_port_handle_t portHandle) { ALOGD("%s(%d) called", __func__, portHandle); sp serviceStream = mStreamTracker.findStreamByPortHandle(portHandle); if (serviceStream.get() == nullptr) { ALOGE("%s(), could not find stream with portHandle = %d", __func__, portHandle); return AAUDIO_ERROR_INVALID_HANDLE; } // This is protected by a lock and will just return if already stopped. aaudio_result_t result = serviceStream->stop(); serviceStream->disconnect(); return result; }