1 /* 2 * Copyright (C) 2014 The Android Open Source Project 3 * 4 * Licensed under the Apache License, Version 2.0 (the "License"); 5 * you may not use this file except in compliance with the License. 6 * You may obtain a copy of the License at 7 * 8 * http://www.apache.org/licenses/LICENSE-2.0 9 * 10 * Unless required by applicable law or agreed to in writing, software 11 * distributed under the License is distributed on an "AS IS" BASIS, 12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 13 * See the License for the specific language governing permissions and 14 * limitations under the License. 15 */ 16 17 package com.android.internal.os; 18 19 20 import android.os.Trace; 21 import dalvik.system.ZygoteHooks; 22 import android.system.ErrnoException; 23 import android.system.Os; 24 25 import java.lang.reflect.InvocationTargetException; 26 import java.lang.reflect.Method; 27 28 /** @hide */ 29 public final class Zygote { 30 /* 31 * Bit values for "debugFlags" argument. The definitions are duplicated 32 * in the native code. 33 */ 34 35 /** enable debugging over JDWP */ 36 public static final int DEBUG_ENABLE_JDWP = 1; 37 /** enable JNI checks */ 38 public static final int DEBUG_ENABLE_CHECKJNI = 1 << 1; 39 /** enable Java programming language "assert" statements */ 40 public static final int DEBUG_ENABLE_ASSERT = 1 << 2; 41 /** disable the AOT compiler and JIT */ 42 public static final int DEBUG_ENABLE_SAFEMODE = 1 << 3; 43 /** Enable logging of third-party JNI activity. */ 44 public static final int DEBUG_ENABLE_JNI_LOGGING = 1 << 4; 45 /** Force generation of native debugging information. */ 46 public static final int DEBUG_GENERATE_DEBUG_INFO = 1 << 5; 47 /** Always use JIT-ed code. */ 48 public static final int DEBUG_ALWAYS_JIT = 1 << 6; 49 /** Make the code native debuggable by turning off some optimizations. */ 50 public static final int DEBUG_NATIVE_DEBUGGABLE = 1 << 7; 51 /** Make the code Java debuggable by turning off some optimizations. */ 52 public static final int DEBUG_JAVA_DEBUGGABLE = 1 << 8; 53 54 /** No external storage should be mounted. */ 55 public static final int MOUNT_EXTERNAL_NONE = 0; 56 /** Default external storage should be mounted. */ 57 public static final int MOUNT_EXTERNAL_DEFAULT = 1; 58 /** Read-only external storage should be mounted. */ 59 public static final int MOUNT_EXTERNAL_READ = 2; 60 /** Read-write external storage should be mounted. */ 61 public static final int MOUNT_EXTERNAL_WRITE = 3; 62 63 private static final ZygoteHooks VM_HOOKS = new ZygoteHooks(); 64 Zygote()65 private Zygote() {} 66 67 /** 68 * Forks a new VM instance. The current VM must have been started 69 * with the -Xzygote flag. <b>NOTE: new instance keeps all 70 * root capabilities. The new process is expected to call capset()</b>. 71 * 72 * @param uid the UNIX uid that the new process should setuid() to after 73 * fork()ing and and before spawning any threads. 74 * @param gid the UNIX gid that the new process should setgid() to after 75 * fork()ing and and before spawning any threads. 76 * @param gids null-ok; a list of UNIX gids that the new process should 77 * setgroups() to after fork and before spawning any threads. 78 * @param debugFlags bit flags that enable debugging features. 79 * @param rlimits null-ok an array of rlimit tuples, with the second 80 * dimension having a length of 3 and representing 81 * (resource, rlim_cur, rlim_max). These are set via the posix 82 * setrlimit(2) call. 83 * @param seInfo null-ok a string specifying SELinux information for 84 * the new process. 85 * @param niceName null-ok a string specifying the process name. 86 * @param fdsToClose an array of ints, holding one or more POSIX 87 * file descriptor numbers that are to be closed by the child 88 * (and replaced by /dev/null) after forking. An integer value 89 * of -1 in any entry in the array means "ignore this one". 90 * @param fdsToIgnore null-ok an array of ints, either null or holding 91 * one or more POSIX file descriptor numbers that are to be ignored 92 * in the file descriptor table check. 93 * @param instructionSet null-ok the instruction set to use. 94 * @param appDataDir null-ok the data directory of the app. 95 * 96 * @return 0 if this is the child, pid of the child 97 * if this is the parent, or -1 on error. 98 */ forkAndSpecialize(int uid, int gid, int[] gids, int debugFlags, int[][] rlimits, int mountExternal, String seInfo, String niceName, int[] fdsToClose, int[] fdsToIgnore, String instructionSet, String appDataDir)99 public static int forkAndSpecialize(int uid, int gid, int[] gids, int debugFlags, 100 int[][] rlimits, int mountExternal, String seInfo, String niceName, int[] fdsToClose, 101 int[] fdsToIgnore, String instructionSet, String appDataDir) { 102 VM_HOOKS.preFork(); 103 // Resets nice priority for zygote process. 104 resetNicePriority(); 105 int pid = nativeForkAndSpecialize( 106 uid, gid, gids, debugFlags, rlimits, mountExternal, seInfo, niceName, fdsToClose, 107 fdsToIgnore, instructionSet, appDataDir); 108 // Enable tracing as soon as possible for the child process. 109 if (pid == 0) { 110 Trace.setTracingEnabled(true); 111 112 // Note that this event ends at the end of handleChildProc, 113 Trace.traceBegin(Trace.TRACE_TAG_ACTIVITY_MANAGER, "PostFork"); 114 } 115 VM_HOOKS.postForkCommon(); 116 return pid; 117 } 118 nativeForkAndSpecialize(int uid, int gid, int[] gids,int debugFlags, int[][] rlimits, int mountExternal, String seInfo, String niceName, int[] fdsToClose, int[] fdsToIgnore, String instructionSet, String appDataDir)119 native private static int nativeForkAndSpecialize(int uid, int gid, int[] gids,int debugFlags, 120 int[][] rlimits, int mountExternal, String seInfo, String niceName, int[] fdsToClose, 121 int[] fdsToIgnore, String instructionSet, String appDataDir); 122 123 /** 124 * Special method to start the system server process. In addition to the 125 * common actions performed in forkAndSpecialize, the pid of the child 126 * process is recorded such that the death of the child process will cause 127 * zygote to exit. 128 * 129 * @param uid the UNIX uid that the new process should setuid() to after 130 * fork()ing and and before spawning any threads. 131 * @param gid the UNIX gid that the new process should setgid() to after 132 * fork()ing and and before spawning any threads. 133 * @param gids null-ok; a list of UNIX gids that the new process should 134 * setgroups() to after fork and before spawning any threads. 135 * @param debugFlags bit flags that enable debugging features. 136 * @param rlimits null-ok an array of rlimit tuples, with the second 137 * dimension having a length of 3 and representing 138 * (resource, rlim_cur, rlim_max). These are set via the posix 139 * setrlimit(2) call. 140 * @param permittedCapabilities argument for setcap() 141 * @param effectiveCapabilities argument for setcap() 142 * 143 * @return 0 if this is the child, pid of the child 144 * if this is the parent, or -1 on error. 145 */ forkSystemServer(int uid, int gid, int[] gids, int debugFlags, int[][] rlimits, long permittedCapabilities, long effectiveCapabilities)146 public static int forkSystemServer(int uid, int gid, int[] gids, int debugFlags, 147 int[][] rlimits, long permittedCapabilities, long effectiveCapabilities) { 148 VM_HOOKS.preFork(); 149 // Resets nice priority for zygote process. 150 resetNicePriority(); 151 int pid = nativeForkSystemServer( 152 uid, gid, gids, debugFlags, rlimits, permittedCapabilities, effectiveCapabilities); 153 // Enable tracing as soon as we enter the system_server. 154 if (pid == 0) { 155 Trace.setTracingEnabled(true); 156 } 157 VM_HOOKS.postForkCommon(); 158 return pid; 159 } 160 nativeForkSystemServer(int uid, int gid, int[] gids, int debugFlags, int[][] rlimits, long permittedCapabilities, long effectiveCapabilities)161 native private static int nativeForkSystemServer(int uid, int gid, int[] gids, int debugFlags, 162 int[][] rlimits, long permittedCapabilities, long effectiveCapabilities); 163 164 /** 165 * Lets children of the zygote inherit open file descriptors to this path. 166 */ nativeAllowFileAcrossFork(String path)167 native protected static void nativeAllowFileAcrossFork(String path); 168 169 /** 170 * Zygote unmount storage space on initializing. 171 * This method is called once. 172 */ nativeUnmountStorageOnInit()173 native protected static void nativeUnmountStorageOnInit(); 174 callPostForkChildHooks(int debugFlags, boolean isSystemServer, String instructionSet)175 private static void callPostForkChildHooks(int debugFlags, boolean isSystemServer, 176 String instructionSet) { 177 VM_HOOKS.postForkChild(debugFlags, isSystemServer, instructionSet); 178 } 179 180 /** 181 * Resets the calling thread priority to the default value (Thread.NORM_PRIORITY 182 * or nice value 0). This updates both the priority value in java.lang.Thread and 183 * the nice value (setpriority). 184 */ resetNicePriority()185 static void resetNicePriority() { 186 Thread.currentThread().setPriority(Thread.NORM_PRIORITY); 187 } 188 189 /** 190 * Executes "/system/bin/sh -c <command>" using the exec() system call. 191 * This method throws a runtime exception if exec() failed, otherwise, this 192 * method never returns. 193 * 194 * @param command The shell command to execute. 195 */ execShell(String command)196 public static void execShell(String command) { 197 String[] args = { "/system/bin/sh", "-c", command }; 198 try { 199 Os.execv(args[0], args); 200 } catch (ErrnoException e) { 201 throw new RuntimeException(e); 202 } 203 } 204 205 /** 206 * Appends quotes shell arguments to the specified string builder. 207 * The arguments are quoted using single-quotes, escaped if necessary, 208 * prefixed with a space, and appended to the command. 209 * 210 * @param command A string builder for the shell command being constructed. 211 * @param args An array of argument strings to be quoted and appended to the command. 212 * @see #execShell(String) 213 */ appendQuotedShellArgs(StringBuilder command, String[] args)214 public static void appendQuotedShellArgs(StringBuilder command, String[] args) { 215 for (String arg : args) { 216 command.append(" '").append(arg.replace("'", "'\\''")).append("'"); 217 } 218 } 219 220 /** 221 * Helper exception class which holds a method and arguments and 222 * can call them. This is used as part of a trampoline to get rid of 223 * the initial process setup stack frames. 224 */ 225 public static class MethodAndArgsCaller extends Exception 226 implements Runnable { 227 /** method to call */ 228 private final Method mMethod; 229 230 /** argument array */ 231 private final String[] mArgs; 232 MethodAndArgsCaller(Method method, String[] args)233 public MethodAndArgsCaller(Method method, String[] args) { 234 mMethod = method; 235 mArgs = args; 236 } 237 run()238 public void run() { 239 try { 240 mMethod.invoke(null, new Object[] { mArgs }); 241 } catch (IllegalAccessException ex) { 242 throw new RuntimeException(ex); 243 } catch (InvocationTargetException ex) { 244 Throwable cause = ex.getCause(); 245 if (cause instanceof RuntimeException) { 246 throw (RuntimeException) cause; 247 } else if (cause instanceof Error) { 248 throw (Error) cause; 249 } 250 throw new RuntimeException(ex); 251 } 252 } 253 } 254 } 255