/* * Copyright (C) 2010 The Android Open Source Project * Copyright (C) 2012-2016, The Linux Foundation. All rights reserved. * * Not a Contribution, Apache license notifications and license are * retained for attribution purposes only. * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #include #include #include #include #include #include #define QSERVICE_DEBUG 0 using namespace android; using namespace qClient; // --------------------------------------------------------------------------- namespace qService { class BpQService : public BpInterface { public: BpQService(const sp& impl) : BpInterface(impl) {} virtual void connect(const sp& client) { ALOGD_IF(QSERVICE_DEBUG, "%s: connect HWC client", __FUNCTION__); Parcel data, reply; data.writeInterfaceToken(IQService::getInterfaceDescriptor()); data.writeStrongBinder(IInterface::asBinder(client)); remote()->transact(CONNECT_HWC_CLIENT, data, &reply); } virtual void connect(const sp& client) { ALOGD_IF(QSERVICE_DEBUG, "%s: connect HDMI client", __FUNCTION__); Parcel data, reply; data.writeInterfaceToken(IQService::getInterfaceDescriptor()); data.writeStrongBinder(IInterface::asBinder(client)); remote()->transact(CONNECT_HDMI_CLIENT, data, &reply); } virtual android::status_t dispatch(uint32_t command, const Parcel* inParcel, Parcel* outParcel) { ALOGD_IF(QSERVICE_DEBUG, "%s: dispatch in:%p", __FUNCTION__, inParcel); status_t err = (status_t) android::FAILED_TRANSACTION; Parcel data; Parcel *reply = outParcel; data.writeInterfaceToken(IQService::getInterfaceDescriptor()); if (inParcel && inParcel->dataSize() > 0) data.appendFrom(inParcel, 0, inParcel->dataSize()); err = remote()->transact(command, data, reply); return err; } }; IMPLEMENT_META_INTERFACE(QService, "android.display.IQService"); // ---------------------------------------------------------------------- status_t BnQService::onTransact( uint32_t code, const Parcel& data, Parcel* reply, uint32_t flags) { ALOGD_IF(QSERVICE_DEBUG, "%s: code: %d", __FUNCTION__, code); // IPC should be from certain processes only IPCThreadState* ipc = IPCThreadState::self(); const int callerPid = ipc->getCallingPid(); const int callerUid = ipc->getCallingUid(); const bool permission = (callerUid == AID_MEDIA || callerUid == AID_GRAPHICS || callerUid == AID_ROOT || callerUid == AID_CAMERASERVER || callerUid == AID_AUDIO || callerUid == AID_SYSTEM || callerUid == AID_MEDIA_CODEC); if (code == CONNECT_HWC_CLIENT) { CHECK_INTERFACE(IQService, data, reply); if(callerUid != AID_GRAPHICS) { ALOGE("display.qservice CONNECT_HWC_CLIENT access denied: pid=%d uid=%d", callerPid, callerUid); return PERMISSION_DENIED; } sp client = interface_cast(data.readStrongBinder()); connect(client); return NO_ERROR; } else if(code == CONNECT_HDMI_CLIENT) { CHECK_INTERFACE(IQService, data, reply); if(callerUid != AID_SYSTEM && callerUid != AID_ROOT) { ALOGE("display.qservice CONNECT_HDMI_CLIENT access denied: pid=%d uid=%d", callerPid, callerUid); return PERMISSION_DENIED; } sp client = interface_cast(data.readStrongBinder()); connect(client); return NO_ERROR; } else if (code > COMMAND_LIST_START && code < COMMAND_LIST_END) { if(!permission) { ALOGE("display.qservice access denied: command=%d pid=%d uid=%d", code, callerPid, callerUid); return PERMISSION_DENIED; } CHECK_INTERFACE(IQService, data, reply); dispatch(code, &data, reply); return NO_ERROR; } else { return BBinder::onTransact(code, data, reply, flags); } } }; // namespace qService