xref: /aosp_15_r20/frameworks/av/media/utils/ServiceUtilities.cpp (revision ec779b8e0859a360c3d303172224686826e6e0e1)
1*ec779b8eSAndroid Build Coastguard Worker /*
2*ec779b8eSAndroid Build Coastguard Worker  * Copyright (C) 2012 The Android Open Source Project
3*ec779b8eSAndroid Build Coastguard Worker  *
4*ec779b8eSAndroid Build Coastguard Worker  * Licensed under the Apache License, Version 2.0 (the "License");
5*ec779b8eSAndroid Build Coastguard Worker  * you may not use this file except in compliance with the License.
6*ec779b8eSAndroid Build Coastguard Worker  * You may obtain a copy of the License at
7*ec779b8eSAndroid Build Coastguard Worker  *
8*ec779b8eSAndroid Build Coastguard Worker  *      http://www.apache.org/licenses/LICENSE-2.0
9*ec779b8eSAndroid Build Coastguard Worker  *
10*ec779b8eSAndroid Build Coastguard Worker  * Unless required by applicable law or agreed to in writing, software
11*ec779b8eSAndroid Build Coastguard Worker  * distributed under the License is distributed on an "AS IS" BASIS,
12*ec779b8eSAndroid Build Coastguard Worker  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*ec779b8eSAndroid Build Coastguard Worker  * See the License for the specific language governing permissions and
14*ec779b8eSAndroid Build Coastguard Worker  * limitations under the License.
15*ec779b8eSAndroid Build Coastguard Worker  */
16*ec779b8eSAndroid Build Coastguard Worker 
17*ec779b8eSAndroid Build Coastguard Worker //#define LOG_NDEBUG 0
18*ec779b8eSAndroid Build Coastguard Worker #define LOG_TAG "ServiceUtilities"
19*ec779b8eSAndroid Build Coastguard Worker 
20*ec779b8eSAndroid Build Coastguard Worker #include <audio_utils/clock.h>
21*ec779b8eSAndroid Build Coastguard Worker #include <android-base/properties.h>
22*ec779b8eSAndroid Build Coastguard Worker #include <binder/AppOpsManager.h>
23*ec779b8eSAndroid Build Coastguard Worker #include <binder/IPCThreadState.h>
24*ec779b8eSAndroid Build Coastguard Worker #include <binder/IServiceManager.h>
25*ec779b8eSAndroid Build Coastguard Worker #include <binder/PermissionCache.h>
26*ec779b8eSAndroid Build Coastguard Worker #include "mediautils/ServiceUtilities.h"
27*ec779b8eSAndroid Build Coastguard Worker #include <system/audio-hal-enums.h>
28*ec779b8eSAndroid Build Coastguard Worker #include <media/AidlConversion.h>
29*ec779b8eSAndroid Build Coastguard Worker #include <media/AidlConversionUtil.h>
30*ec779b8eSAndroid Build Coastguard Worker #include <android/content/AttributionSourceState.h>
31*ec779b8eSAndroid Build Coastguard Worker 
32*ec779b8eSAndroid Build Coastguard Worker #include <algorithm>
33*ec779b8eSAndroid Build Coastguard Worker #include <iterator>
34*ec779b8eSAndroid Build Coastguard Worker #include <mutex>
35*ec779b8eSAndroid Build Coastguard Worker #include <pwd.h>
36*ec779b8eSAndroid Build Coastguard Worker #include <thread>
37*ec779b8eSAndroid Build Coastguard Worker 
38*ec779b8eSAndroid Build Coastguard Worker /* When performing permission checks we do not use permission cache for
39*ec779b8eSAndroid Build Coastguard Worker  * runtime permissions (protection level dangerous) as they may change at
40*ec779b8eSAndroid Build Coastguard Worker  * runtime. All other permissions (protection level normal and dangerous)
41*ec779b8eSAndroid Build Coastguard Worker  * can be cached as they never change. Of course all permission checked
42*ec779b8eSAndroid Build Coastguard Worker  * here are platform defined.
43*ec779b8eSAndroid Build Coastguard Worker  */
44*ec779b8eSAndroid Build Coastguard Worker 
45*ec779b8eSAndroid Build Coastguard Worker namespace android {
46*ec779b8eSAndroid Build Coastguard Worker 
47*ec779b8eSAndroid Build Coastguard Worker namespace {
48*ec779b8eSAndroid Build Coastguard Worker constexpr auto PERMISSION_GRANTED = permission::PermissionChecker::PERMISSION_GRANTED;
49*ec779b8eSAndroid Build Coastguard Worker constexpr auto PERMISSION_HARD_DENIED = permission::PermissionChecker::PERMISSION_HARD_DENIED;
50*ec779b8eSAndroid Build Coastguard Worker }
51*ec779b8eSAndroid Build Coastguard Worker 
52*ec779b8eSAndroid Build Coastguard Worker using content::AttributionSourceState;
53*ec779b8eSAndroid Build Coastguard Worker 
54*ec779b8eSAndroid Build Coastguard Worker static const String16 sAndroidPermissionRecordAudio("android.permission.RECORD_AUDIO");
55*ec779b8eSAndroid Build Coastguard Worker static const String16 sModifyPhoneState("android.permission.MODIFY_PHONE_STATE");
56*ec779b8eSAndroid Build Coastguard Worker static const String16 sModifyAudioRouting("android.permission.MODIFY_AUDIO_ROUTING");
57*ec779b8eSAndroid Build Coastguard Worker static const String16 sCallAudioInterception("android.permission.CALL_AUDIO_INTERCEPTION");
58*ec779b8eSAndroid Build Coastguard Worker static const String16 sModifyAudioSettingsPrivileged(
59*ec779b8eSAndroid Build Coastguard Worker         "android.permission.MODIFY_AUDIO_SETTINGS_PRIVILEGED");
60*ec779b8eSAndroid Build Coastguard Worker 
resolveCallingPackage(PermissionController & permissionController,const std::optional<String16> opPackageName,uid_t uid)61*ec779b8eSAndroid Build Coastguard Worker static String16 resolveCallingPackage(PermissionController& permissionController,
62*ec779b8eSAndroid Build Coastguard Worker         const std::optional<String16> opPackageName, uid_t uid) {
63*ec779b8eSAndroid Build Coastguard Worker     if (opPackageName.has_value() && opPackageName.value().size() > 0) {
64*ec779b8eSAndroid Build Coastguard Worker         return opPackageName.value();
65*ec779b8eSAndroid Build Coastguard Worker     }
66*ec779b8eSAndroid Build Coastguard Worker     // In some cases the calling code has no access to the package it runs under.
67*ec779b8eSAndroid Build Coastguard Worker     // For example, code using the wilhelm framework's OpenSL-ES APIs. In this
68*ec779b8eSAndroid Build Coastguard Worker     // case we will get the packages for the calling UID and pick the first one
69*ec779b8eSAndroid Build Coastguard Worker     // for attributing the app op. This will work correctly for runtime permissions
70*ec779b8eSAndroid Build Coastguard Worker     // as for legacy apps we will toggle the app op for all packages in the UID.
71*ec779b8eSAndroid Build Coastguard Worker     // The caveat is that the operation may be attributed to the wrong package and
72*ec779b8eSAndroid Build Coastguard Worker     // stats based on app ops may be slightly off.
73*ec779b8eSAndroid Build Coastguard Worker     Vector<String16> packages;
74*ec779b8eSAndroid Build Coastguard Worker     permissionController.getPackagesForUid(uid, packages);
75*ec779b8eSAndroid Build Coastguard Worker     if (packages.isEmpty()) {
76*ec779b8eSAndroid Build Coastguard Worker         ALOGE("No packages for uid %d", uid);
77*ec779b8eSAndroid Build Coastguard Worker         return String16();
78*ec779b8eSAndroid Build Coastguard Worker     }
79*ec779b8eSAndroid Build Coastguard Worker     return packages[0];
80*ec779b8eSAndroid Build Coastguard Worker }
81*ec779b8eSAndroid Build Coastguard Worker 
82*ec779b8eSAndroid Build Coastguard Worker // NOTE/TODO(b/379754682):
83*ec779b8eSAndroid Build Coastguard Worker // AUDIO_SOURCE_VOICE_CALL is handled specially:
84*ec779b8eSAndroid Build Coastguard Worker // CALL includes both uplink and downlink, but we attribute RECORD_OP (only), since
85*ec779b8eSAndroid Build Coastguard Worker // there is not support for noting multiple ops.
getOpForSource(audio_source_t source)86*ec779b8eSAndroid Build Coastguard Worker int32_t getOpForSource(audio_source_t source) {
87*ec779b8eSAndroid Build Coastguard Worker   switch (source) {
88*ec779b8eSAndroid Build Coastguard Worker     // BEGIN output sources
89*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_FM_TUNER:
90*ec779b8eSAndroid Build Coastguard Worker         return AppOpsManager::OP_NONE;
91*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_ECHO_REFERENCE: // fallthrough
92*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_REMOTE_SUBMIX:
93*ec779b8eSAndroid Build Coastguard Worker         // TODO -- valid in all cases?
94*ec779b8eSAndroid Build Coastguard Worker       return AppOpsManager::OP_RECORD_AUDIO_OUTPUT;
95*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_VOICE_DOWNLINK:
96*ec779b8eSAndroid Build Coastguard Worker       return AppOpsManager::OP_RECORD_INCOMING_PHONE_AUDIO;
97*ec779b8eSAndroid Build Coastguard Worker     // END output sources
98*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_HOTWORD:
99*ec779b8eSAndroid Build Coastguard Worker       return AppOpsManager::OP_RECORD_AUDIO_HOTWORD;
100*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_DEFAULT:
101*ec779b8eSAndroid Build Coastguard Worker     default:
102*ec779b8eSAndroid Build Coastguard Worker       return AppOpsManager::OP_RECORD_AUDIO;
103*ec779b8eSAndroid Build Coastguard Worker   }
104*ec779b8eSAndroid Build Coastguard Worker }
105*ec779b8eSAndroid Build Coastguard Worker 
isRecordOpRequired(audio_source_t source)106*ec779b8eSAndroid Build Coastguard Worker bool isRecordOpRequired(audio_source_t source) {
107*ec779b8eSAndroid Build Coastguard Worker   switch (source) {
108*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_FM_TUNER:
109*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_ECHO_REFERENCE: // fallthrough
110*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_REMOTE_SUBMIX:
111*ec779b8eSAndroid Build Coastguard Worker     case AUDIO_SOURCE_VOICE_DOWNLINK:
112*ec779b8eSAndroid Build Coastguard Worker         return false;
113*ec779b8eSAndroid Build Coastguard Worker     default:
114*ec779b8eSAndroid Build Coastguard Worker       return true;
115*ec779b8eSAndroid Build Coastguard Worker   }
116*ec779b8eSAndroid Build Coastguard Worker }
117*ec779b8eSAndroid Build Coastguard Worker 
resolveAttributionSource(const AttributionSourceState & callerAttributionSource,const uint32_t virtualDeviceId)118*ec779b8eSAndroid Build Coastguard Worker std::optional<AttributionSourceState> resolveAttributionSource(
119*ec779b8eSAndroid Build Coastguard Worker         const AttributionSourceState& callerAttributionSource, const uint32_t virtualDeviceId) {
120*ec779b8eSAndroid Build Coastguard Worker     AttributionSourceState nextAttributionSource = callerAttributionSource;
121*ec779b8eSAndroid Build Coastguard Worker 
122*ec779b8eSAndroid Build Coastguard Worker     if (!nextAttributionSource.packageName.has_value()) {
123*ec779b8eSAndroid Build Coastguard Worker         nextAttributionSource = AttributionSourceState(nextAttributionSource);
124*ec779b8eSAndroid Build Coastguard Worker         PermissionController permissionController;
125*ec779b8eSAndroid Build Coastguard Worker         const uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(nextAttributionSource.uid));
126*ec779b8eSAndroid Build Coastguard Worker         nextAttributionSource.packageName = VALUE_OR_FATAL(legacy2aidl_String16_string(
127*ec779b8eSAndroid Build Coastguard Worker                 resolveCallingPackage(permissionController, VALUE_OR_FATAL(
128*ec779b8eSAndroid Build Coastguard Worker                 aidl2legacy_string_view_String16(nextAttributionSource.packageName.value_or(""))),
129*ec779b8eSAndroid Build Coastguard Worker                 uid)));
130*ec779b8eSAndroid Build Coastguard Worker         if (!nextAttributionSource.packageName.has_value()) {
131*ec779b8eSAndroid Build Coastguard Worker             return std::nullopt;
132*ec779b8eSAndroid Build Coastguard Worker         }
133*ec779b8eSAndroid Build Coastguard Worker     }
134*ec779b8eSAndroid Build Coastguard Worker     nextAttributionSource.deviceId = virtualDeviceId;
135*ec779b8eSAndroid Build Coastguard Worker 
136*ec779b8eSAndroid Build Coastguard Worker     AttributionSourceState myAttributionSource;
137*ec779b8eSAndroid Build Coastguard Worker     myAttributionSource.uid = VALUE_OR_FATAL(android::legacy2aidl_uid_t_int32_t(getuid()));
138*ec779b8eSAndroid Build Coastguard Worker     myAttributionSource.pid = VALUE_OR_FATAL(android::legacy2aidl_pid_t_int32_t(getpid()));
139*ec779b8eSAndroid Build Coastguard Worker     // Create a static token for audioserver requests, which identifies the
140*ec779b8eSAndroid Build Coastguard Worker     // audioserver to the app ops system
141*ec779b8eSAndroid Build Coastguard Worker     static sp<BBinder> appOpsToken = sp<BBinder>::make();
142*ec779b8eSAndroid Build Coastguard Worker     myAttributionSource.token = appOpsToken;
143*ec779b8eSAndroid Build Coastguard Worker     myAttributionSource.deviceId = virtualDeviceId;
144*ec779b8eSAndroid Build Coastguard Worker     myAttributionSource.next.push_back(nextAttributionSource);
145*ec779b8eSAndroid Build Coastguard Worker 
146*ec779b8eSAndroid Build Coastguard Worker     return std::optional<AttributionSourceState>{myAttributionSource};
147*ec779b8eSAndroid Build Coastguard Worker }
148*ec779b8eSAndroid Build Coastguard Worker 
149*ec779b8eSAndroid Build Coastguard Worker 
checkRecordingInternal(const AttributionSourceState & attributionSource,const uint32_t virtualDeviceId,const String16 & msg,bool start,audio_source_t source)150*ec779b8eSAndroid Build Coastguard Worker static int checkRecordingInternal(const AttributionSourceState &attributionSource,
151*ec779b8eSAndroid Build Coastguard Worker                                        const uint32_t virtualDeviceId,
152*ec779b8eSAndroid Build Coastguard Worker                                        const String16 &msg, bool start, audio_source_t source) {
153*ec779b8eSAndroid Build Coastguard Worker     // Okay to not track in app ops as audio server or media server is us and if
154*ec779b8eSAndroid Build Coastguard Worker     // device is rooted security model is considered compromised.
155*ec779b8eSAndroid Build Coastguard Worker     // system_server loses its RECORD_AUDIO permission when a secondary
156*ec779b8eSAndroid Build Coastguard Worker     // user is active, but it is a core system service so let it through.
157*ec779b8eSAndroid Build Coastguard Worker     // TODO(b/141210120): UserManager.DISALLOW_RECORD_AUDIO should not affect system user 0
158*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
159*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerOrMediaServerOrSystemServerOrRootUid(uid)) return PERMISSION_GRANTED;
160*ec779b8eSAndroid Build Coastguard Worker 
161*ec779b8eSAndroid Build Coastguard Worker     const int32_t attributedOpCode = getOpForSource(source);
162*ec779b8eSAndroid Build Coastguard Worker     if (isRecordOpRequired(source)) {
163*ec779b8eSAndroid Build Coastguard Worker         // We specify a pid and uid here as mediaserver (aka MediaRecorder or StageFrightRecorder)
164*ec779b8eSAndroid Build Coastguard Worker         // may open a record track on behalf of a client. Note that pid may be a tid.
165*ec779b8eSAndroid Build Coastguard Worker         // IMPORTANT: DON'T USE PermissionCache - RUNTIME PERMISSIONS CHANGE.
166*ec779b8eSAndroid Build Coastguard Worker         std::optional<AttributionSourceState> resolvedAttributionSource =
167*ec779b8eSAndroid Build Coastguard Worker                 resolveAttributionSource(attributionSource, virtualDeviceId);
168*ec779b8eSAndroid Build Coastguard Worker         if (!resolvedAttributionSource.has_value()) {
169*ec779b8eSAndroid Build Coastguard Worker             return PERMISSION_HARD_DENIED;
170*ec779b8eSAndroid Build Coastguard Worker         }
171*ec779b8eSAndroid Build Coastguard Worker 
172*ec779b8eSAndroid Build Coastguard Worker         permission::PermissionChecker permissionChecker;
173*ec779b8eSAndroid Build Coastguard Worker         int permitted;
174*ec779b8eSAndroid Build Coastguard Worker         if (start) {
175*ec779b8eSAndroid Build Coastguard Worker             permitted = permissionChecker.checkPermissionForStartDataDeliveryFromDatasource(
176*ec779b8eSAndroid Build Coastguard Worker                     sAndroidPermissionRecordAudio, resolvedAttributionSource.value(), msg,
177*ec779b8eSAndroid Build Coastguard Worker                     attributedOpCode);
178*ec779b8eSAndroid Build Coastguard Worker         } else {
179*ec779b8eSAndroid Build Coastguard Worker             permitted = permissionChecker.checkPermissionForPreflightFromDatasource(
180*ec779b8eSAndroid Build Coastguard Worker                     sAndroidPermissionRecordAudio, resolvedAttributionSource.value(), msg,
181*ec779b8eSAndroid Build Coastguard Worker                     attributedOpCode);
182*ec779b8eSAndroid Build Coastguard Worker         }
183*ec779b8eSAndroid Build Coastguard Worker 
184*ec779b8eSAndroid Build Coastguard Worker         return permitted;
185*ec779b8eSAndroid Build Coastguard Worker     } else {
186*ec779b8eSAndroid Build Coastguard Worker         if (attributedOpCode == AppOpsManager::OP_NONE) return PERMISSION_GRANTED;  // nothing to do
187*ec779b8eSAndroid Build Coastguard Worker         AppOpsManager ap{};
188*ec779b8eSAndroid Build Coastguard Worker         PermissionController pc{};
189*ec779b8eSAndroid Build Coastguard Worker         return ap.startOpNoThrow(
190*ec779b8eSAndroid Build Coastguard Worker                 attributedOpCode, attributionSource.uid,
191*ec779b8eSAndroid Build Coastguard Worker                 resolveCallingPackage(pc,
192*ec779b8eSAndroid Build Coastguard Worker                                       String16{attributionSource.packageName.value_or("").c_str()},
193*ec779b8eSAndroid Build Coastguard Worker                                       attributionSource.uid),
194*ec779b8eSAndroid Build Coastguard Worker                 false,
195*ec779b8eSAndroid Build Coastguard Worker                 attributionSource.attributionTag.has_value()
196*ec779b8eSAndroid Build Coastguard Worker                         ? String16{attributionSource.attributionTag.value().c_str()}
197*ec779b8eSAndroid Build Coastguard Worker                         : String16{},
198*ec779b8eSAndroid Build Coastguard Worker                 msg);
199*ec779b8eSAndroid Build Coastguard Worker     }
200*ec779b8eSAndroid Build Coastguard Worker }
201*ec779b8eSAndroid Build Coastguard Worker 
202*ec779b8eSAndroid Build Coastguard Worker static constexpr int DEVICE_ID_DEFAULT = 0;
203*ec779b8eSAndroid Build Coastguard Worker 
recordingAllowed(const AttributionSourceState & attributionSource,audio_source_t source)204*ec779b8eSAndroid Build Coastguard Worker bool recordingAllowed(const AttributionSourceState &attributionSource, audio_source_t source) {
205*ec779b8eSAndroid Build Coastguard Worker     return checkRecordingInternal(attributionSource, DEVICE_ID_DEFAULT, String16(), /*start*/ false,
206*ec779b8eSAndroid Build Coastguard Worker                                   source) != PERMISSION_HARD_DENIED;
207*ec779b8eSAndroid Build Coastguard Worker }
208*ec779b8eSAndroid Build Coastguard Worker 
recordingAllowed(const AttributionSourceState & attributionSource,const uint32_t virtualDeviceId,audio_source_t source)209*ec779b8eSAndroid Build Coastguard Worker bool recordingAllowed(const AttributionSourceState &attributionSource,
210*ec779b8eSAndroid Build Coastguard Worker                       const uint32_t virtualDeviceId,
211*ec779b8eSAndroid Build Coastguard Worker                       audio_source_t source) {
212*ec779b8eSAndroid Build Coastguard Worker     return checkRecordingInternal(attributionSource, virtualDeviceId,
213*ec779b8eSAndroid Build Coastguard Worker                                   String16(), /*start*/ false, source) != PERMISSION_HARD_DENIED;
214*ec779b8eSAndroid Build Coastguard Worker }
215*ec779b8eSAndroid Build Coastguard Worker 
startRecording(const AttributionSourceState & attributionSource,const uint32_t virtualDeviceId,const String16 & msg,audio_source_t source)216*ec779b8eSAndroid Build Coastguard Worker int startRecording(const AttributionSourceState& attributionSource,
217*ec779b8eSAndroid Build Coastguard Worker                     const uint32_t virtualDeviceId,
218*ec779b8eSAndroid Build Coastguard Worker                     const String16& msg,
219*ec779b8eSAndroid Build Coastguard Worker                     audio_source_t source) {
220*ec779b8eSAndroid Build Coastguard Worker     return checkRecordingInternal(attributionSource, virtualDeviceId, msg, /*start*/ true,
221*ec779b8eSAndroid Build Coastguard Worker                                   source);
222*ec779b8eSAndroid Build Coastguard Worker }
223*ec779b8eSAndroid Build Coastguard Worker 
finishRecording(const AttributionSourceState & attributionSource,uint32_t virtualDeviceId,audio_source_t source)224*ec779b8eSAndroid Build Coastguard Worker void finishRecording(const AttributionSourceState &attributionSource, uint32_t virtualDeviceId,
225*ec779b8eSAndroid Build Coastguard Worker                      audio_source_t source) {
226*ec779b8eSAndroid Build Coastguard Worker     // Okay to not track in app ops as audio server is us and if
227*ec779b8eSAndroid Build Coastguard Worker     // device is rooted security model is considered compromised.
228*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
229*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerOrMediaServerOrSystemServerOrRootUid(uid)) return;
230*ec779b8eSAndroid Build Coastguard Worker 
231*ec779b8eSAndroid Build Coastguard Worker     const int32_t attributedOpCode = getOpForSource(source);
232*ec779b8eSAndroid Build Coastguard Worker     if (isRecordOpRequired(source)) {
233*ec779b8eSAndroid Build Coastguard Worker         // We specify a pid and uid here as mediaserver (aka MediaRecorder or StageFrightRecorder)
234*ec779b8eSAndroid Build Coastguard Worker         // may open a record track on behalf of a client. Note that pid may be a tid.
235*ec779b8eSAndroid Build Coastguard Worker         // IMPORTANT: DON'T USE PermissionCache - RUNTIME PERMISSIONS CHANGE.
236*ec779b8eSAndroid Build Coastguard Worker         const std::optional<AttributionSourceState> resolvedAttributionSource =
237*ec779b8eSAndroid Build Coastguard Worker                 resolveAttributionSource(attributionSource, virtualDeviceId);
238*ec779b8eSAndroid Build Coastguard Worker         if (!resolvedAttributionSource.has_value()) {
239*ec779b8eSAndroid Build Coastguard Worker             return;
240*ec779b8eSAndroid Build Coastguard Worker         }
241*ec779b8eSAndroid Build Coastguard Worker 
242*ec779b8eSAndroid Build Coastguard Worker         permission::PermissionChecker permissionChecker;
243*ec779b8eSAndroid Build Coastguard Worker         permissionChecker.finishDataDeliveryFromDatasource(attributedOpCode,
244*ec779b8eSAndroid Build Coastguard Worker                 resolvedAttributionSource.value());
245*ec779b8eSAndroid Build Coastguard Worker     } else {
246*ec779b8eSAndroid Build Coastguard Worker         if (attributedOpCode == AppOpsManager::OP_NONE) return;  // nothing to do
247*ec779b8eSAndroid Build Coastguard Worker         AppOpsManager ap{};
248*ec779b8eSAndroid Build Coastguard Worker         PermissionController pc{};
249*ec779b8eSAndroid Build Coastguard Worker         ap.finishOp(attributedOpCode, attributionSource.uid,
250*ec779b8eSAndroid Build Coastguard Worker                     resolveCallingPackage(
251*ec779b8eSAndroid Build Coastguard Worker                             pc, String16{attributionSource.packageName.value_or("").c_str()},
252*ec779b8eSAndroid Build Coastguard Worker                             attributionSource.uid),
253*ec779b8eSAndroid Build Coastguard Worker                     attributionSource.attributionTag.has_value()
254*ec779b8eSAndroid Build Coastguard Worker                             ? String16{attributionSource.attributionTag.value().c_str()}
255*ec779b8eSAndroid Build Coastguard Worker                             : String16{});
256*ec779b8eSAndroid Build Coastguard Worker     }
257*ec779b8eSAndroid Build Coastguard Worker }
258*ec779b8eSAndroid Build Coastguard Worker 
captureAudioOutputAllowed(const AttributionSourceState & attributionSource)259*ec779b8eSAndroid Build Coastguard Worker bool captureAudioOutputAllowed(const AttributionSourceState& attributionSource) {
260*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
261*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerOrRootUid(uid)) return true;
262*ec779b8eSAndroid Build Coastguard Worker     static const String16 sCaptureAudioOutput("android.permission.CAPTURE_AUDIO_OUTPUT");
263*ec779b8eSAndroid Build Coastguard Worker     // Use PermissionChecker, which includes some logic for allowing the isolated
264*ec779b8eSAndroid Build Coastguard Worker     // HotwordDetectionService to hold certain permissions.
265*ec779b8eSAndroid Build Coastguard Worker     permission::PermissionChecker permissionChecker;
266*ec779b8eSAndroid Build Coastguard Worker     bool ok = (permissionChecker.checkPermissionForPreflight(
267*ec779b8eSAndroid Build Coastguard Worker             sCaptureAudioOutput, attributionSource, String16(),
268*ec779b8eSAndroid Build Coastguard Worker             AppOpsManager::OP_NONE) != permission::PermissionChecker::PERMISSION_HARD_DENIED);
269*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGV("Request requires android.permission.CAPTURE_AUDIO_OUTPUT");
270*ec779b8eSAndroid Build Coastguard Worker     return ok;
271*ec779b8eSAndroid Build Coastguard Worker }
272*ec779b8eSAndroid Build Coastguard Worker 
captureMediaOutputAllowed(const AttributionSourceState & attributionSource)273*ec779b8eSAndroid Build Coastguard Worker bool captureMediaOutputAllowed(const AttributionSourceState& attributionSource) {
274*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
275*ec779b8eSAndroid Build Coastguard Worker     pid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
276*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerOrRootUid(uid)) return true;
277*ec779b8eSAndroid Build Coastguard Worker     static const String16 sCaptureMediaOutput("android.permission.CAPTURE_MEDIA_OUTPUT");
278*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sCaptureMediaOutput, pid, uid);
279*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGE("Request requires android.permission.CAPTURE_MEDIA_OUTPUT");
280*ec779b8eSAndroid Build Coastguard Worker     return ok;
281*ec779b8eSAndroid Build Coastguard Worker }
282*ec779b8eSAndroid Build Coastguard Worker 
captureTunerAudioInputAllowed(const AttributionSourceState & attributionSource)283*ec779b8eSAndroid Build Coastguard Worker bool captureTunerAudioInputAllowed(const AttributionSourceState& attributionSource) {
284*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
285*ec779b8eSAndroid Build Coastguard Worker     pid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
286*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerOrRootUid(uid)) return true;
287*ec779b8eSAndroid Build Coastguard Worker     static const String16 sCaptureTunerAudioInput("android.permission.CAPTURE_TUNER_AUDIO_INPUT");
288*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sCaptureTunerAudioInput, pid, uid);
289*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGV("Request requires android.permission.CAPTURE_TUNER_AUDIO_INPUT");
290*ec779b8eSAndroid Build Coastguard Worker     return ok;
291*ec779b8eSAndroid Build Coastguard Worker }
292*ec779b8eSAndroid Build Coastguard Worker 
captureVoiceCommunicationOutputAllowed(const AttributionSourceState & attributionSource)293*ec779b8eSAndroid Build Coastguard Worker bool captureVoiceCommunicationOutputAllowed(const AttributionSourceState& attributionSource) {
294*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
295*ec779b8eSAndroid Build Coastguard Worker     uid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
296*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerOrRootUid(uid)) return true;
297*ec779b8eSAndroid Build Coastguard Worker     static const String16 sCaptureVoiceCommOutput(
298*ec779b8eSAndroid Build Coastguard Worker         "android.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT");
299*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sCaptureVoiceCommOutput, pid, uid);
300*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGE("Request requires android.permission.CAPTURE_VOICE_COMMUNICATION_OUTPUT");
301*ec779b8eSAndroid Build Coastguard Worker     return ok;
302*ec779b8eSAndroid Build Coastguard Worker }
303*ec779b8eSAndroid Build Coastguard Worker 
bypassConcurrentPolicyAllowed(const AttributionSourceState & attributionSource)304*ec779b8eSAndroid Build Coastguard Worker bool bypassConcurrentPolicyAllowed(const AttributionSourceState& attributionSource) {
305*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
306*ec779b8eSAndroid Build Coastguard Worker     uid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
307*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerOrRootUid(uid)) return true;
308*ec779b8eSAndroid Build Coastguard Worker     static const String16 sBypassConcurrentPolicy(
309*ec779b8eSAndroid Build Coastguard Worker             "android.permission.BYPASS_CONCURRENT_RECORD_AUDIO_RESTRICTION ");
310*ec779b8eSAndroid Build Coastguard Worker     // Use PermissionChecker, which includes some logic for allowing the isolated
311*ec779b8eSAndroid Build Coastguard Worker     // HotwordDetectionService to hold certain permissions.
312*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sBypassConcurrentPolicy, pid, uid);
313*ec779b8eSAndroid Build Coastguard Worker     if (!ok) {
314*ec779b8eSAndroid Build Coastguard Worker         ALOGV("Request requires android.permission.BYPASS_CONCURRENT_RECORD_AUDIO_RESTRICTION");
315*ec779b8eSAndroid Build Coastguard Worker     }
316*ec779b8eSAndroid Build Coastguard Worker     return ok;
317*ec779b8eSAndroid Build Coastguard Worker }
318*ec779b8eSAndroid Build Coastguard Worker 
accessUltrasoundAllowed(const AttributionSourceState & attributionSource)319*ec779b8eSAndroid Build Coastguard Worker bool accessUltrasoundAllowed(const AttributionSourceState& attributionSource) {
320*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
321*ec779b8eSAndroid Build Coastguard Worker     uid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
322*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerOrRootUid(uid)) return true;
323*ec779b8eSAndroid Build Coastguard Worker     static const String16 sAccessUltrasound(
324*ec779b8eSAndroid Build Coastguard Worker         "android.permission.ACCESS_ULTRASOUND");
325*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sAccessUltrasound, pid, uid);
326*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGE("Request requires android.permission.ACCESS_ULTRASOUND");
327*ec779b8eSAndroid Build Coastguard Worker     return ok;
328*ec779b8eSAndroid Build Coastguard Worker }
329*ec779b8eSAndroid Build Coastguard Worker 
captureHotwordAllowed(const AttributionSourceState & attributionSource)330*ec779b8eSAndroid Build Coastguard Worker bool captureHotwordAllowed(const AttributionSourceState& attributionSource) {
331*ec779b8eSAndroid Build Coastguard Worker     // CAPTURE_AUDIO_HOTWORD permission implies RECORD_AUDIO permission
332*ec779b8eSAndroid Build Coastguard Worker     bool ok = recordingAllowed(attributionSource);
333*ec779b8eSAndroid Build Coastguard Worker 
334*ec779b8eSAndroid Build Coastguard Worker     if (ok) {
335*ec779b8eSAndroid Build Coastguard Worker         static const String16 sCaptureHotwordAllowed("android.permission.CAPTURE_AUDIO_HOTWORD");
336*ec779b8eSAndroid Build Coastguard Worker         // Use PermissionChecker, which includes some logic for allowing the isolated
337*ec779b8eSAndroid Build Coastguard Worker         // HotwordDetectionService to hold certain permissions.
338*ec779b8eSAndroid Build Coastguard Worker         permission::PermissionChecker permissionChecker;
339*ec779b8eSAndroid Build Coastguard Worker         ok = (permissionChecker.checkPermissionForPreflight(
340*ec779b8eSAndroid Build Coastguard Worker                 sCaptureHotwordAllowed, attributionSource, String16(),
341*ec779b8eSAndroid Build Coastguard Worker                 AppOpsManager::OP_NONE) != permission::PermissionChecker::PERMISSION_HARD_DENIED);
342*ec779b8eSAndroid Build Coastguard Worker     }
343*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGV("android.permission.CAPTURE_AUDIO_HOTWORD");
344*ec779b8eSAndroid Build Coastguard Worker     return ok;
345*ec779b8eSAndroid Build Coastguard Worker }
346*ec779b8eSAndroid Build Coastguard Worker 
settingsAllowed()347*ec779b8eSAndroid Build Coastguard Worker bool settingsAllowed() {
348*ec779b8eSAndroid Build Coastguard Worker     // given this is a permission check, could this be isAudioServerOrRootUid()?
349*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerUid(IPCThreadState::self()->getCallingUid())) return true;
350*ec779b8eSAndroid Build Coastguard Worker     static const String16 sAudioSettings("android.permission.MODIFY_AUDIO_SETTINGS");
351*ec779b8eSAndroid Build Coastguard Worker     // IMPORTANT: Use PermissionCache - not a runtime permission and may not change.
352*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkCallingPermission(sAudioSettings);
353*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGE("Request requires android.permission.MODIFY_AUDIO_SETTINGS");
354*ec779b8eSAndroid Build Coastguard Worker     return ok;
355*ec779b8eSAndroid Build Coastguard Worker }
356*ec779b8eSAndroid Build Coastguard Worker 
modifyAudioRoutingAllowed()357*ec779b8eSAndroid Build Coastguard Worker bool modifyAudioRoutingAllowed() {
358*ec779b8eSAndroid Build Coastguard Worker     return modifyAudioRoutingAllowed(getCallingAttributionSource());
359*ec779b8eSAndroid Build Coastguard Worker }
360*ec779b8eSAndroid Build Coastguard Worker 
modifyAudioRoutingAllowed(const AttributionSourceState & attributionSource)361*ec779b8eSAndroid Build Coastguard Worker bool modifyAudioRoutingAllowed(const AttributionSourceState& attributionSource) {
362*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
363*ec779b8eSAndroid Build Coastguard Worker     pid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
364*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerUid(uid)) return true;
365*ec779b8eSAndroid Build Coastguard Worker     // IMPORTANT: Use PermissionCache - not a runtime permission and may not change.
366*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sModifyAudioRouting, pid, uid);
367*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGE("%s(): android.permission.MODIFY_AUDIO_ROUTING denied for uid %d",
368*ec779b8eSAndroid Build Coastguard Worker         __func__, uid);
369*ec779b8eSAndroid Build Coastguard Worker     return ok;
370*ec779b8eSAndroid Build Coastguard Worker }
371*ec779b8eSAndroid Build Coastguard Worker 
modifyDefaultAudioEffectsAllowed()372*ec779b8eSAndroid Build Coastguard Worker bool modifyDefaultAudioEffectsAllowed() {
373*ec779b8eSAndroid Build Coastguard Worker     return modifyDefaultAudioEffectsAllowed(getCallingAttributionSource());
374*ec779b8eSAndroid Build Coastguard Worker }
375*ec779b8eSAndroid Build Coastguard Worker 
modifyDefaultAudioEffectsAllowed(const AttributionSourceState & attributionSource)376*ec779b8eSAndroid Build Coastguard Worker bool modifyDefaultAudioEffectsAllowed(const AttributionSourceState& attributionSource) {
377*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
378*ec779b8eSAndroid Build Coastguard Worker     pid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
379*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerUid(uid)) return true;
380*ec779b8eSAndroid Build Coastguard Worker 
381*ec779b8eSAndroid Build Coastguard Worker     static const String16 sModifyDefaultAudioEffectsAllowed(
382*ec779b8eSAndroid Build Coastguard Worker             "android.permission.MODIFY_DEFAULT_AUDIO_EFFECTS");
383*ec779b8eSAndroid Build Coastguard Worker     // IMPORTANT: Use PermissionCache - not a runtime permission and may not change.
384*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sModifyDefaultAudioEffectsAllowed, pid, uid);
385*ec779b8eSAndroid Build Coastguard Worker     ALOGE_IF(!ok, "%s(): android.permission.MODIFY_DEFAULT_AUDIO_EFFECTS denied for uid %d",
386*ec779b8eSAndroid Build Coastguard Worker             __func__, uid);
387*ec779b8eSAndroid Build Coastguard Worker     return ok;
388*ec779b8eSAndroid Build Coastguard Worker }
389*ec779b8eSAndroid Build Coastguard Worker 
modifyAudioSettingsPrivilegedAllowed(const AttributionSourceState & attributionSource)390*ec779b8eSAndroid Build Coastguard Worker bool modifyAudioSettingsPrivilegedAllowed(const AttributionSourceState& attributionSource) {
391*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
392*ec779b8eSAndroid Build Coastguard Worker     pid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
393*ec779b8eSAndroid Build Coastguard Worker     if (isAudioServerUid(uid)) return true;
394*ec779b8eSAndroid Build Coastguard Worker     // IMPORTANT: Use PermissionCache - not a runtime permission and may not change.
395*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sModifyAudioSettingsPrivileged, pid, uid);
396*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGE("%s(): android.permission.MODIFY_AUDIO_SETTINGS_PRIVILEGED denied for uid %d",
397*ec779b8eSAndroid Build Coastguard Worker                    __func__, uid);
398*ec779b8eSAndroid Build Coastguard Worker     return ok;
399*ec779b8eSAndroid Build Coastguard Worker }
400*ec779b8eSAndroid Build Coastguard Worker 
dumpAllowed()401*ec779b8eSAndroid Build Coastguard Worker bool dumpAllowed() {
402*ec779b8eSAndroid Build Coastguard Worker     static const String16 sDump("android.permission.DUMP");
403*ec779b8eSAndroid Build Coastguard Worker     // IMPORTANT: Use PermissionCache - not a runtime permission and may not change.
404*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkCallingPermission(sDump);
405*ec779b8eSAndroid Build Coastguard Worker     // convention is for caller to dump an error message to fd instead of logging here
406*ec779b8eSAndroid Build Coastguard Worker     //if (!ok) ALOGE("Request requires android.permission.DUMP");
407*ec779b8eSAndroid Build Coastguard Worker     return ok;
408*ec779b8eSAndroid Build Coastguard Worker }
409*ec779b8eSAndroid Build Coastguard Worker 
modifyPhoneStateAllowed(const AttributionSourceState & attributionSource)410*ec779b8eSAndroid Build Coastguard Worker bool modifyPhoneStateAllowed(const AttributionSourceState& attributionSource) {
411*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
412*ec779b8eSAndroid Build Coastguard Worker     pid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
413*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sModifyPhoneState, pid, uid);
414*ec779b8eSAndroid Build Coastguard Worker     ALOGE_IF(!ok, "Request requires %s", String8(sModifyPhoneState).c_str());
415*ec779b8eSAndroid Build Coastguard Worker     return ok;
416*ec779b8eSAndroid Build Coastguard Worker }
417*ec779b8eSAndroid Build Coastguard Worker 
418*ec779b8eSAndroid Build Coastguard Worker // privileged behavior needed by Dialer, Settings, SetupWizard and CellBroadcastReceiver
bypassInterruptionPolicyAllowed(const AttributionSourceState & attributionSource)419*ec779b8eSAndroid Build Coastguard Worker bool bypassInterruptionPolicyAllowed(const AttributionSourceState& attributionSource) {
420*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
421*ec779b8eSAndroid Build Coastguard Worker     pid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
422*ec779b8eSAndroid Build Coastguard Worker     static const String16 sWriteSecureSettings("android.permission.WRITE_SECURE_SETTINGS");
423*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sModifyPhoneState, pid, uid)
424*ec779b8eSAndroid Build Coastguard Worker         || PermissionCache::checkPermission(sWriteSecureSettings, pid, uid)
425*ec779b8eSAndroid Build Coastguard Worker         || PermissionCache::checkPermission(sModifyAudioRouting, pid, uid);
426*ec779b8eSAndroid Build Coastguard Worker     ALOGE_IF(!ok, "Request requires %s or %s",
427*ec779b8eSAndroid Build Coastguard Worker              String8(sModifyPhoneState).c_str(), String8(sWriteSecureSettings).c_str());
428*ec779b8eSAndroid Build Coastguard Worker     return ok;
429*ec779b8eSAndroid Build Coastguard Worker }
430*ec779b8eSAndroid Build Coastguard Worker 
callAudioInterceptionAllowed(const AttributionSourceState & attributionSource)431*ec779b8eSAndroid Build Coastguard Worker bool callAudioInterceptionAllowed(const AttributionSourceState& attributionSource) {
432*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
433*ec779b8eSAndroid Build Coastguard Worker     pid_t pid = VALUE_OR_FATAL(aidl2legacy_int32_t_pid_t(attributionSource.pid));
434*ec779b8eSAndroid Build Coastguard Worker 
435*ec779b8eSAndroid Build Coastguard Worker     // IMPORTANT: Use PermissionCache - not a runtime permission and may not change.
436*ec779b8eSAndroid Build Coastguard Worker     bool ok = PermissionCache::checkPermission(sCallAudioInterception, pid, uid);
437*ec779b8eSAndroid Build Coastguard Worker     if (!ok) ALOGV("%s(): android.permission.CALL_AUDIO_INTERCEPTION denied for uid %d",
438*ec779b8eSAndroid Build Coastguard Worker         __func__, uid);
439*ec779b8eSAndroid Build Coastguard Worker     return ok;
440*ec779b8eSAndroid Build Coastguard Worker }
441*ec779b8eSAndroid Build Coastguard Worker 
getCallingAttributionSource()442*ec779b8eSAndroid Build Coastguard Worker AttributionSourceState getCallingAttributionSource() {
443*ec779b8eSAndroid Build Coastguard Worker     AttributionSourceState attributionSource = AttributionSourceState();
444*ec779b8eSAndroid Build Coastguard Worker     attributionSource.pid = VALUE_OR_FATAL(legacy2aidl_pid_t_int32_t(
445*ec779b8eSAndroid Build Coastguard Worker             IPCThreadState::self()->getCallingPid()));
446*ec779b8eSAndroid Build Coastguard Worker     attributionSource.uid = VALUE_OR_FATAL(legacy2aidl_uid_t_int32_t(
447*ec779b8eSAndroid Build Coastguard Worker             IPCThreadState::self()->getCallingUid()));
448*ec779b8eSAndroid Build Coastguard Worker     attributionSource.token = sp<BBinder>::make();
449*ec779b8eSAndroid Build Coastguard Worker   return attributionSource;
450*ec779b8eSAndroid Build Coastguard Worker }
451*ec779b8eSAndroid Build Coastguard Worker 
purgePermissionCache()452*ec779b8eSAndroid Build Coastguard Worker void purgePermissionCache() {
453*ec779b8eSAndroid Build Coastguard Worker     PermissionCache::purgeCache();
454*ec779b8eSAndroid Build Coastguard Worker }
455*ec779b8eSAndroid Build Coastguard Worker 
checkIMemory(const sp<IMemory> & iMemory)456*ec779b8eSAndroid Build Coastguard Worker status_t checkIMemory(const sp<IMemory>& iMemory)
457*ec779b8eSAndroid Build Coastguard Worker {
458*ec779b8eSAndroid Build Coastguard Worker     if (iMemory == 0) {
459*ec779b8eSAndroid Build Coastguard Worker         ALOGE("%s check failed: NULL IMemory pointer", __FUNCTION__);
460*ec779b8eSAndroid Build Coastguard Worker         return BAD_VALUE;
461*ec779b8eSAndroid Build Coastguard Worker     }
462*ec779b8eSAndroid Build Coastguard Worker 
463*ec779b8eSAndroid Build Coastguard Worker     sp<IMemoryHeap> heap = iMemory->getMemory();
464*ec779b8eSAndroid Build Coastguard Worker     if (heap == 0) {
465*ec779b8eSAndroid Build Coastguard Worker         ALOGE("%s check failed: NULL heap pointer", __FUNCTION__);
466*ec779b8eSAndroid Build Coastguard Worker         return BAD_VALUE;
467*ec779b8eSAndroid Build Coastguard Worker     }
468*ec779b8eSAndroid Build Coastguard Worker 
469*ec779b8eSAndroid Build Coastguard Worker     off_t size = lseek(heap->getHeapID(), 0, SEEK_END);
470*ec779b8eSAndroid Build Coastguard Worker     lseek(heap->getHeapID(), 0, SEEK_SET);
471*ec779b8eSAndroid Build Coastguard Worker 
472*ec779b8eSAndroid Build Coastguard Worker     if (iMemory->unsecurePointer() == NULL || size < (off_t)iMemory->size()) {
473*ec779b8eSAndroid Build Coastguard Worker         ALOGE("%s check failed: pointer %p size %zu fd size %u",
474*ec779b8eSAndroid Build Coastguard Worker               __FUNCTION__, iMemory->unsecurePointer(), iMemory->size(), (uint32_t)size);
475*ec779b8eSAndroid Build Coastguard Worker         return BAD_VALUE;
476*ec779b8eSAndroid Build Coastguard Worker     }
477*ec779b8eSAndroid Build Coastguard Worker 
478*ec779b8eSAndroid Build Coastguard Worker     return NO_ERROR;
479*ec779b8eSAndroid Build Coastguard Worker }
480*ec779b8eSAndroid Build Coastguard Worker 
481*ec779b8eSAndroid Build Coastguard Worker // TODO(b/285588444), clean this up on main, but soak it for backporting purposes for now
482*ec779b8eSAndroid Build Coastguard Worker namespace {
483*ec779b8eSAndroid Build Coastguard Worker class BluetoothPermissionCache {
484*ec779b8eSAndroid Build Coastguard Worker     static constexpr auto SYSPROP_NAME = "cache_key.system_server.package_info";
485*ec779b8eSAndroid Build Coastguard Worker     const String16 BLUETOOTH_PERM {"android.permission.BLUETOOTH_CONNECT"};
486*ec779b8eSAndroid Build Coastguard Worker     mutable std::mutex mLock;
487*ec779b8eSAndroid Build Coastguard Worker     // Cached property conditionally defined, since only avail on bionic. On host, don't inval cache
488*ec779b8eSAndroid Build Coastguard Worker #if defined(__BIONIC__)
489*ec779b8eSAndroid Build Coastguard Worker     // Unlocked, but only accessed from mListenerThread
490*ec779b8eSAndroid Build Coastguard Worker     base::CachedProperty mCachedProperty;
491*ec779b8eSAndroid Build Coastguard Worker #endif
492*ec779b8eSAndroid Build Coastguard Worker     // This thread is designed to never join/terminate, so no signal is fine
493*ec779b8eSAndroid Build Coastguard Worker     const std::thread mListenerThread;
494*ec779b8eSAndroid Build Coastguard Worker     GUARDED_BY(mLock)
495*ec779b8eSAndroid Build Coastguard Worker     std::string mPropValue;
496*ec779b8eSAndroid Build Coastguard Worker     GUARDED_BY(mLock)
497*ec779b8eSAndroid Build Coastguard Worker     std::unordered_map<uid_t, bool> mCache;
498*ec779b8eSAndroid Build Coastguard Worker     PermissionController mPc{};
499*ec779b8eSAndroid Build Coastguard Worker public:
BluetoothPermissionCache()500*ec779b8eSAndroid Build Coastguard Worker     BluetoothPermissionCache()
501*ec779b8eSAndroid Build Coastguard Worker #if defined(__BIONIC__)
502*ec779b8eSAndroid Build Coastguard Worker             : mCachedProperty{SYSPROP_NAME},
__anon12146c780302() 503*ec779b8eSAndroid Build Coastguard Worker             mListenerThread([this]() mutable {
504*ec779b8eSAndroid Build Coastguard Worker                     while (true) {
505*ec779b8eSAndroid Build Coastguard Worker                         std::string newVal = mCachedProperty.WaitForChange() ?: "";
506*ec779b8eSAndroid Build Coastguard Worker                         std::lock_guard l{mLock};
507*ec779b8eSAndroid Build Coastguard Worker                         if (newVal != mPropValue) {
508*ec779b8eSAndroid Build Coastguard Worker                             ALOGV("Bluetooth permission update");
509*ec779b8eSAndroid Build Coastguard Worker                             mPropValue = newVal;
510*ec779b8eSAndroid Build Coastguard Worker                             mCache.clear();
511*ec779b8eSAndroid Build Coastguard Worker                         }
512*ec779b8eSAndroid Build Coastguard Worker                     }
513*ec779b8eSAndroid Build Coastguard Worker                 })
514*ec779b8eSAndroid Build Coastguard Worker #endif
515*ec779b8eSAndroid Build Coastguard Worker             {}
516*ec779b8eSAndroid Build Coastguard Worker 
checkPermission(uid_t uid,pid_t pid)517*ec779b8eSAndroid Build Coastguard Worker     bool checkPermission(uid_t uid, pid_t pid) {
518*ec779b8eSAndroid Build Coastguard Worker         std::lock_guard l{mLock};
519*ec779b8eSAndroid Build Coastguard Worker         auto it = mCache.find(uid);
520*ec779b8eSAndroid Build Coastguard Worker         if (it == mCache.end()) {
521*ec779b8eSAndroid Build Coastguard Worker             it = mCache.insert({uid, mPc.checkPermission(BLUETOOTH_PERM, pid, uid)}).first;
522*ec779b8eSAndroid Build Coastguard Worker         }
523*ec779b8eSAndroid Build Coastguard Worker         return it->second;
524*ec779b8eSAndroid Build Coastguard Worker     }
525*ec779b8eSAndroid Build Coastguard Worker };
526*ec779b8eSAndroid Build Coastguard Worker 
527*ec779b8eSAndroid Build Coastguard Worker // Don't call this from locks, since it potentially calls up to system server!
528*ec779b8eSAndroid Build Coastguard Worker // Check for non-app UIDs above this method!
checkBluetoothPermission(const AttributionSourceState & attr)529*ec779b8eSAndroid Build Coastguard Worker bool checkBluetoothPermission(const AttributionSourceState& attr) {
530*ec779b8eSAndroid Build Coastguard Worker     [[clang::no_destroy]]  static BluetoothPermissionCache impl{};
531*ec779b8eSAndroid Build Coastguard Worker     return impl.checkPermission(attr.uid, attr.pid);
532*ec779b8eSAndroid Build Coastguard Worker }
533*ec779b8eSAndroid Build Coastguard Worker } // anonymous
534*ec779b8eSAndroid Build Coastguard Worker 
535*ec779b8eSAndroid Build Coastguard Worker /**
536*ec779b8eSAndroid Build Coastguard Worker  * Determines if the MAC address in Bluetooth device descriptors returned by APIs of
537*ec779b8eSAndroid Build Coastguard Worker  * a native audio service (audio flinger, audio policy) must be anonymized.
538*ec779b8eSAndroid Build Coastguard Worker  * MAC addresses returned to system server or apps with BLUETOOTH_CONNECT permission
539*ec779b8eSAndroid Build Coastguard Worker  * are not anonymized.
540*ec779b8eSAndroid Build Coastguard Worker  *
541*ec779b8eSAndroid Build Coastguard Worker  * @param attributionSource The attribution source of the calling app.
542*ec779b8eSAndroid Build Coastguard Worker  * @param caller string identifying the caller for logging.
543*ec779b8eSAndroid Build Coastguard Worker  * @return true if the MAC addresses must be anonymized, false otherwise.
544*ec779b8eSAndroid Build Coastguard Worker  */
mustAnonymizeBluetoothAddressLegacy(const AttributionSourceState & attributionSource,const String16 &)545*ec779b8eSAndroid Build Coastguard Worker bool mustAnonymizeBluetoothAddressLegacy(
546*ec779b8eSAndroid Build Coastguard Worker         const AttributionSourceState& attributionSource, const String16&) {
547*ec779b8eSAndroid Build Coastguard Worker     uid_t uid = VALUE_OR_FATAL(aidl2legacy_int32_t_uid_t(attributionSource.uid));
548*ec779b8eSAndroid Build Coastguard Worker     bool res;
549*ec779b8eSAndroid Build Coastguard Worker     switch(multiuser_get_app_id(uid)) {
550*ec779b8eSAndroid Build Coastguard Worker         case AID_ROOT:
551*ec779b8eSAndroid Build Coastguard Worker         case AID_SYSTEM:
552*ec779b8eSAndroid Build Coastguard Worker         case AID_RADIO:
553*ec779b8eSAndroid Build Coastguard Worker         case AID_BLUETOOTH:
554*ec779b8eSAndroid Build Coastguard Worker         case AID_MEDIA:
555*ec779b8eSAndroid Build Coastguard Worker         case AID_AUDIOSERVER:
556*ec779b8eSAndroid Build Coastguard Worker             // Don't anonymize for privileged clients
557*ec779b8eSAndroid Build Coastguard Worker             res = false;
558*ec779b8eSAndroid Build Coastguard Worker             break;
559*ec779b8eSAndroid Build Coastguard Worker         default:
560*ec779b8eSAndroid Build Coastguard Worker             res = !checkBluetoothPermission(attributionSource);
561*ec779b8eSAndroid Build Coastguard Worker             break;
562*ec779b8eSAndroid Build Coastguard Worker     }
563*ec779b8eSAndroid Build Coastguard Worker     ALOGV("%s uid: %d, result: %d", __func__, uid, res);
564*ec779b8eSAndroid Build Coastguard Worker     return res;
565*ec779b8eSAndroid Build Coastguard Worker }
566*ec779b8eSAndroid Build Coastguard Worker 
567*ec779b8eSAndroid Build Coastguard Worker /**
568*ec779b8eSAndroid Build Coastguard Worker  * Modifies the passed MAC address string in place for consumption by unprivileged clients.
569*ec779b8eSAndroid Build Coastguard Worker  * the string is assumed to have a valid MAC address format.
570*ec779b8eSAndroid Build Coastguard Worker  * the anonymization must be kept in sync with toAnonymizedAddress() in BluetoothUtils.java
571*ec779b8eSAndroid Build Coastguard Worker  *
572*ec779b8eSAndroid Build Coastguard Worker  * @param address input/output the char string contining the MAC address to anonymize.
573*ec779b8eSAndroid Build Coastguard Worker  */
anonymizeBluetoothAddress(char * address)574*ec779b8eSAndroid Build Coastguard Worker void anonymizeBluetoothAddress(char *address) {
575*ec779b8eSAndroid Build Coastguard Worker     if (address == nullptr || strlen(address) != strlen("AA:BB:CC:DD:EE:FF")) {
576*ec779b8eSAndroid Build Coastguard Worker         return;
577*ec779b8eSAndroid Build Coastguard Worker     }
578*ec779b8eSAndroid Build Coastguard Worker     memcpy(address, "XX:XX:XX:XX", strlen("XX:XX:XX:XX"));
579*ec779b8eSAndroid Build Coastguard Worker }
580*ec779b8eSAndroid Build Coastguard Worker 
retrievePackageManager()581*ec779b8eSAndroid Build Coastguard Worker sp<content::pm::IPackageManagerNative> MediaPackageManager::retrievePackageManager() {
582*ec779b8eSAndroid Build Coastguard Worker     const sp<IServiceManager> sm = defaultServiceManager();
583*ec779b8eSAndroid Build Coastguard Worker     if (sm == nullptr) {
584*ec779b8eSAndroid Build Coastguard Worker         ALOGW("%s: failed to retrieve defaultServiceManager", __func__);
585*ec779b8eSAndroid Build Coastguard Worker         return nullptr;
586*ec779b8eSAndroid Build Coastguard Worker     }
587*ec779b8eSAndroid Build Coastguard Worker     sp<IBinder> packageManager = sm->checkService(String16(nativePackageManagerName));
588*ec779b8eSAndroid Build Coastguard Worker     if (packageManager == nullptr) {
589*ec779b8eSAndroid Build Coastguard Worker         ALOGW("%s: failed to retrieve native package manager", __func__);
590*ec779b8eSAndroid Build Coastguard Worker         return nullptr;
591*ec779b8eSAndroid Build Coastguard Worker     }
592*ec779b8eSAndroid Build Coastguard Worker     return interface_cast<content::pm::IPackageManagerNative>(packageManager);
593*ec779b8eSAndroid Build Coastguard Worker }
594*ec779b8eSAndroid Build Coastguard Worker 
doIsAllowed(uid_t uid)595*ec779b8eSAndroid Build Coastguard Worker std::optional<bool> MediaPackageManager::doIsAllowed(uid_t uid) {
596*ec779b8eSAndroid Build Coastguard Worker     if (mPackageManager == nullptr) {
597*ec779b8eSAndroid Build Coastguard Worker         /** Can not fetch package manager at construction it may not yet be registered. */
598*ec779b8eSAndroid Build Coastguard Worker         mPackageManager = retrievePackageManager();
599*ec779b8eSAndroid Build Coastguard Worker         if (mPackageManager == nullptr) {
600*ec779b8eSAndroid Build Coastguard Worker             ALOGW("%s: Playback capture is denied as package manager is not reachable", __func__);
601*ec779b8eSAndroid Build Coastguard Worker             return std::nullopt;
602*ec779b8eSAndroid Build Coastguard Worker         }
603*ec779b8eSAndroid Build Coastguard Worker     }
604*ec779b8eSAndroid Build Coastguard Worker 
605*ec779b8eSAndroid Build Coastguard Worker     // Retrieve package names for the UID and transform to a std::vector<std::string>.
606*ec779b8eSAndroid Build Coastguard Worker     Vector<String16> str16PackageNames;
607*ec779b8eSAndroid Build Coastguard Worker     PermissionController{}.getPackagesForUid(uid, str16PackageNames);
608*ec779b8eSAndroid Build Coastguard Worker     std::vector<std::string> packageNames;
609*ec779b8eSAndroid Build Coastguard Worker     for (const auto& str16PackageName : str16PackageNames) {
610*ec779b8eSAndroid Build Coastguard Worker         packageNames.emplace_back(String8(str16PackageName).c_str());
611*ec779b8eSAndroid Build Coastguard Worker     }
612*ec779b8eSAndroid Build Coastguard Worker     if (packageNames.empty()) {
613*ec779b8eSAndroid Build Coastguard Worker         ALOGW("%s: Playback capture for uid %u is denied as no package name could be retrieved "
614*ec779b8eSAndroid Build Coastguard Worker               "from the package manager.", __func__, uid);
615*ec779b8eSAndroid Build Coastguard Worker         return std::nullopt;
616*ec779b8eSAndroid Build Coastguard Worker     }
617*ec779b8eSAndroid Build Coastguard Worker     std::vector<bool> isAllowed;
618*ec779b8eSAndroid Build Coastguard Worker     auto status = mPackageManager->isAudioPlaybackCaptureAllowed(packageNames, &isAllowed);
619*ec779b8eSAndroid Build Coastguard Worker     if (!status.isOk()) {
620*ec779b8eSAndroid Build Coastguard Worker         ALOGW("%s: Playback capture is denied for uid %u as the manifest property could not be "
621*ec779b8eSAndroid Build Coastguard Worker               "retrieved from the package manager: %s", __func__, uid, status.toString8().c_str());
622*ec779b8eSAndroid Build Coastguard Worker         return std::nullopt;
623*ec779b8eSAndroid Build Coastguard Worker     }
624*ec779b8eSAndroid Build Coastguard Worker     if (packageNames.size() != isAllowed.size()) {
625*ec779b8eSAndroid Build Coastguard Worker         ALOGW("%s: Playback capture is denied for uid %u as the package manager returned incoherent"
626*ec779b8eSAndroid Build Coastguard Worker               " response size: %zu != %zu", __func__, uid, packageNames.size(), isAllowed.size());
627*ec779b8eSAndroid Build Coastguard Worker         return std::nullopt;
628*ec779b8eSAndroid Build Coastguard Worker     }
629*ec779b8eSAndroid Build Coastguard Worker 
630*ec779b8eSAndroid Build Coastguard Worker     // Zip together packageNames and isAllowed for debug logs
631*ec779b8eSAndroid Build Coastguard Worker     Packages& packages = mDebugLog[uid];
632*ec779b8eSAndroid Build Coastguard Worker     packages.resize(packageNames.size()); // Reuse all objects
633*ec779b8eSAndroid Build Coastguard Worker     std::transform(begin(packageNames), end(packageNames), begin(isAllowed),
634*ec779b8eSAndroid Build Coastguard Worker                    begin(packages), [] (auto& name, bool isAllowed) -> Package {
635*ec779b8eSAndroid Build Coastguard Worker                        return {std::move(name), isAllowed};
636*ec779b8eSAndroid Build Coastguard Worker                    });
637*ec779b8eSAndroid Build Coastguard Worker 
638*ec779b8eSAndroid Build Coastguard Worker     // Only allow playback record if all packages in this UID allow it
639*ec779b8eSAndroid Build Coastguard Worker     bool playbackCaptureAllowed = std::all_of(begin(isAllowed), end(isAllowed),
640*ec779b8eSAndroid Build Coastguard Worker                                                   [](bool b) { return b; });
641*ec779b8eSAndroid Build Coastguard Worker 
642*ec779b8eSAndroid Build Coastguard Worker     return playbackCaptureAllowed;
643*ec779b8eSAndroid Build Coastguard Worker }
644*ec779b8eSAndroid Build Coastguard Worker 
dump(int fd,int spaces) const645*ec779b8eSAndroid Build Coastguard Worker void MediaPackageManager::dump(int fd, int spaces) const {
646*ec779b8eSAndroid Build Coastguard Worker     dprintf(fd, "%*sAllow playback capture log:\n", spaces, "");
647*ec779b8eSAndroid Build Coastguard Worker     if (mPackageManager == nullptr) {
648*ec779b8eSAndroid Build Coastguard Worker         dprintf(fd, "%*sNo package manager\n", spaces + 2, "");
649*ec779b8eSAndroid Build Coastguard Worker     }
650*ec779b8eSAndroid Build Coastguard Worker     dprintf(fd, "%*sPackage manager errors: %u\n", spaces + 2, "", mPackageManagerErrors);
651*ec779b8eSAndroid Build Coastguard Worker 
652*ec779b8eSAndroid Build Coastguard Worker     for (const auto& uidCache : mDebugLog) {
653*ec779b8eSAndroid Build Coastguard Worker         for (const auto& package : std::get<Packages>(uidCache)) {
654*ec779b8eSAndroid Build Coastguard Worker             dprintf(fd, "%*s- uid=%5u, allowPlaybackCapture=%s, packageName=%s\n", spaces + 2, "",
655*ec779b8eSAndroid Build Coastguard Worker                     std::get<const uid_t>(uidCache),
656*ec779b8eSAndroid Build Coastguard Worker                     package.playbackCaptureAllowed ? "true " : "false",
657*ec779b8eSAndroid Build Coastguard Worker                     package.name.c_str());
658*ec779b8eSAndroid Build Coastguard Worker         }
659*ec779b8eSAndroid Build Coastguard Worker     }
660*ec779b8eSAndroid Build Coastguard Worker }
661*ec779b8eSAndroid Build Coastguard Worker 
662*ec779b8eSAndroid Build Coastguard Worker namespace mediautils {
663*ec779b8eSAndroid Build Coastguard Worker 
664*ec779b8eSAndroid Build Coastguard Worker // How long we hold info before we re-fetch it (24 hours) if we found it previously.
665*ec779b8eSAndroid Build Coastguard Worker static constexpr nsecs_t INFO_EXPIRATION_NS = 24 * 60 * 60 * NANOS_PER_SECOND;
666*ec779b8eSAndroid Build Coastguard Worker // Maximum info records we retain before clearing everything.
667*ec779b8eSAndroid Build Coastguard Worker static constexpr size_t INFO_CACHE_MAX = 1000;
668*ec779b8eSAndroid Build Coastguard Worker 
669*ec779b8eSAndroid Build Coastguard Worker // The original code is from MediaMetricsService.cpp.
getCachedInfo(uid_t uid)670*ec779b8eSAndroid Build Coastguard Worker std::shared_ptr<const UidInfo::Info> UidInfo::getCachedInfo(uid_t uid)
671*ec779b8eSAndroid Build Coastguard Worker {
672*ec779b8eSAndroid Build Coastguard Worker     std::shared_ptr<const UidInfo::Info> info;
673*ec779b8eSAndroid Build Coastguard Worker 
674*ec779b8eSAndroid Build Coastguard Worker     const nsecs_t now = systemTime(SYSTEM_TIME_REALTIME);
675*ec779b8eSAndroid Build Coastguard Worker     {
676*ec779b8eSAndroid Build Coastguard Worker         std::lock_guard _l(mLock);
677*ec779b8eSAndroid Build Coastguard Worker         auto it = mInfoMap.find(uid);
678*ec779b8eSAndroid Build Coastguard Worker         if (it != mInfoMap.end()) {
679*ec779b8eSAndroid Build Coastguard Worker             info = it->second;
680*ec779b8eSAndroid Build Coastguard Worker             ALOGV("%s: uid %d expiration %lld now %lld",
681*ec779b8eSAndroid Build Coastguard Worker                     __func__, uid, (long long)info->expirationNs, (long long)now);
682*ec779b8eSAndroid Build Coastguard Worker             if (info->expirationNs <= now) {
683*ec779b8eSAndroid Build Coastguard Worker                 // purge the stale entry and fall into re-fetching
684*ec779b8eSAndroid Build Coastguard Worker                 ALOGV("%s: entry for uid %d expired, now %lld",
685*ec779b8eSAndroid Build Coastguard Worker                         __func__, uid, (long long)now);
686*ec779b8eSAndroid Build Coastguard Worker                 mInfoMap.erase(it);
687*ec779b8eSAndroid Build Coastguard Worker                 info.reset();  // force refetch
688*ec779b8eSAndroid Build Coastguard Worker             }
689*ec779b8eSAndroid Build Coastguard Worker         }
690*ec779b8eSAndroid Build Coastguard Worker     }
691*ec779b8eSAndroid Build Coastguard Worker 
692*ec779b8eSAndroid Build Coastguard Worker     // if we did not find it in our map, look it up
693*ec779b8eSAndroid Build Coastguard Worker     if (!info) {
694*ec779b8eSAndroid Build Coastguard Worker         sp<IServiceManager> sm = defaultServiceManager();
695*ec779b8eSAndroid Build Coastguard Worker         sp<content::pm::IPackageManagerNative> package_mgr;
696*ec779b8eSAndroid Build Coastguard Worker         if (sm.get() == nullptr) {
697*ec779b8eSAndroid Build Coastguard Worker             ALOGE("%s: Cannot find service manager", __func__);
698*ec779b8eSAndroid Build Coastguard Worker         } else {
699*ec779b8eSAndroid Build Coastguard Worker             sp<IBinder> binder = sm->getService(String16("package_native"));
700*ec779b8eSAndroid Build Coastguard Worker             if (binder.get() == nullptr) {
701*ec779b8eSAndroid Build Coastguard Worker                 ALOGE("%s: Cannot find package_native", __func__);
702*ec779b8eSAndroid Build Coastguard Worker             } else {
703*ec779b8eSAndroid Build Coastguard Worker                 package_mgr = interface_cast<content::pm::IPackageManagerNative>(binder);
704*ec779b8eSAndroid Build Coastguard Worker             }
705*ec779b8eSAndroid Build Coastguard Worker         }
706*ec779b8eSAndroid Build Coastguard Worker 
707*ec779b8eSAndroid Build Coastguard Worker         // find package name
708*ec779b8eSAndroid Build Coastguard Worker         std::string pkg;
709*ec779b8eSAndroid Build Coastguard Worker         if (package_mgr != nullptr) {
710*ec779b8eSAndroid Build Coastguard Worker             std::vector<std::string> names;
711*ec779b8eSAndroid Build Coastguard Worker             binder::Status status = package_mgr->getNamesForUids({(int)uid}, &names);
712*ec779b8eSAndroid Build Coastguard Worker             if (!status.isOk()) {
713*ec779b8eSAndroid Build Coastguard Worker                 ALOGE("%s: getNamesForUids failed: %s",
714*ec779b8eSAndroid Build Coastguard Worker                         __func__, status.exceptionMessage().c_str());
715*ec779b8eSAndroid Build Coastguard Worker             } else {
716*ec779b8eSAndroid Build Coastguard Worker                 if (!names[0].empty()) {
717*ec779b8eSAndroid Build Coastguard Worker                     pkg = names[0].c_str();
718*ec779b8eSAndroid Build Coastguard Worker                 }
719*ec779b8eSAndroid Build Coastguard Worker             }
720*ec779b8eSAndroid Build Coastguard Worker         }
721*ec779b8eSAndroid Build Coastguard Worker 
722*ec779b8eSAndroid Build Coastguard Worker         if (pkg.empty()) {
723*ec779b8eSAndroid Build Coastguard Worker             struct passwd pw{}, *result;
724*ec779b8eSAndroid Build Coastguard Worker             char buf[8192]; // extra buffer space - should exceed what is
725*ec779b8eSAndroid Build Coastguard Worker                             // required in struct passwd_pw (tested),
726*ec779b8eSAndroid Build Coastguard Worker                             // and even then this is only used in backup
727*ec779b8eSAndroid Build Coastguard Worker                             // when the package manager is unavailable.
728*ec779b8eSAndroid Build Coastguard Worker             if (getpwuid_r(uid, &pw, buf, sizeof(buf), &result) == 0
729*ec779b8eSAndroid Build Coastguard Worker                     && result != nullptr
730*ec779b8eSAndroid Build Coastguard Worker                     && result->pw_name != nullptr) {
731*ec779b8eSAndroid Build Coastguard Worker                 pkg = result->pw_name;
732*ec779b8eSAndroid Build Coastguard Worker             }
733*ec779b8eSAndroid Build Coastguard Worker         }
734*ec779b8eSAndroid Build Coastguard Worker 
735*ec779b8eSAndroid Build Coastguard Worker         // strip any leading "shared:" strings that came back
736*ec779b8eSAndroid Build Coastguard Worker         if (pkg.compare(0, 7, "shared:") == 0) {
737*ec779b8eSAndroid Build Coastguard Worker             pkg.erase(0, 7);
738*ec779b8eSAndroid Build Coastguard Worker         }
739*ec779b8eSAndroid Build Coastguard Worker 
740*ec779b8eSAndroid Build Coastguard Worker         // determine how pkg was installed and the versionCode
741*ec779b8eSAndroid Build Coastguard Worker         std::string installer;
742*ec779b8eSAndroid Build Coastguard Worker         int64_t versionCode = 0;
743*ec779b8eSAndroid Build Coastguard Worker         bool notFound = false;
744*ec779b8eSAndroid Build Coastguard Worker         if (pkg.empty()) {
745*ec779b8eSAndroid Build Coastguard Worker             pkg = std::to_string(uid); // not found
746*ec779b8eSAndroid Build Coastguard Worker             notFound = true;
747*ec779b8eSAndroid Build Coastguard Worker         } else if (strchr(pkg.c_str(), '.') == nullptr) {
748*ec779b8eSAndroid Build Coastguard Worker             // not of form 'com.whatever...'; assume internal
749*ec779b8eSAndroid Build Coastguard Worker             // so we don't need to look it up in package manager.
750*ec779b8eSAndroid Build Coastguard Worker         } else if (strncmp(pkg.c_str(), "android.", 8) == 0) {
751*ec779b8eSAndroid Build Coastguard Worker             // android.* packages are assumed fine
752*ec779b8eSAndroid Build Coastguard Worker         } else if (package_mgr.get() != nullptr) {
753*ec779b8eSAndroid Build Coastguard Worker             String16 pkgName16(pkg.c_str());
754*ec779b8eSAndroid Build Coastguard Worker             binder::Status status = package_mgr->getInstallerForPackage(pkgName16, &installer);
755*ec779b8eSAndroid Build Coastguard Worker             if (!status.isOk()) {
756*ec779b8eSAndroid Build Coastguard Worker                 ALOGE("%s: getInstallerForPackage failed: %s",
757*ec779b8eSAndroid Build Coastguard Worker                         __func__, status.exceptionMessage().c_str());
758*ec779b8eSAndroid Build Coastguard Worker             }
759*ec779b8eSAndroid Build Coastguard Worker 
760*ec779b8eSAndroid Build Coastguard Worker             // skip if we didn't get an installer
761*ec779b8eSAndroid Build Coastguard Worker             if (status.isOk()) {
762*ec779b8eSAndroid Build Coastguard Worker                 status = package_mgr->getVersionCodeForPackage(pkgName16, &versionCode);
763*ec779b8eSAndroid Build Coastguard Worker                 if (!status.isOk()) {
764*ec779b8eSAndroid Build Coastguard Worker                     ALOGE("%s: getVersionCodeForPackage failed: %s",
765*ec779b8eSAndroid Build Coastguard Worker                             __func__, status.exceptionMessage().c_str());
766*ec779b8eSAndroid Build Coastguard Worker                 }
767*ec779b8eSAndroid Build Coastguard Worker             }
768*ec779b8eSAndroid Build Coastguard Worker 
769*ec779b8eSAndroid Build Coastguard Worker             ALOGV("%s: package '%s' installed by '%s' versioncode %lld",
770*ec779b8eSAndroid Build Coastguard Worker                     __func__, pkg.c_str(), installer.c_str(), (long long)versionCode);
771*ec779b8eSAndroid Build Coastguard Worker         }
772*ec779b8eSAndroid Build Coastguard Worker 
773*ec779b8eSAndroid Build Coastguard Worker         // add it to the map, to save a subsequent lookup
774*ec779b8eSAndroid Build Coastguard Worker         std::lock_guard _l(mLock);
775*ec779b8eSAndroid Build Coastguard Worker         // first clear if we have too many cached elements.  This would be rare.
776*ec779b8eSAndroid Build Coastguard Worker         if (mInfoMap.size() >= INFO_CACHE_MAX) mInfoMap.clear();
777*ec779b8eSAndroid Build Coastguard Worker 
778*ec779b8eSAndroid Build Coastguard Worker         info = std::make_shared<const UidInfo::Info>(
779*ec779b8eSAndroid Build Coastguard Worker                 uid,
780*ec779b8eSAndroid Build Coastguard Worker                 std::move(pkg),
781*ec779b8eSAndroid Build Coastguard Worker                 std::move(installer),
782*ec779b8eSAndroid Build Coastguard Worker                 versionCode,
783*ec779b8eSAndroid Build Coastguard Worker                 now + (notFound ? 0 : INFO_EXPIRATION_NS));
784*ec779b8eSAndroid Build Coastguard Worker         ALOGV("%s: adding uid %d package '%s' expirationNs: %lld",
785*ec779b8eSAndroid Build Coastguard Worker                 __func__, uid, info->package.c_str(), (long long)info->expirationNs);
786*ec779b8eSAndroid Build Coastguard Worker         mInfoMap[uid] = info;
787*ec779b8eSAndroid Build Coastguard Worker     }
788*ec779b8eSAndroid Build Coastguard Worker     return info;
789*ec779b8eSAndroid Build Coastguard Worker }
790*ec779b8eSAndroid Build Coastguard Worker 
791*ec779b8eSAndroid Build Coastguard Worker /* static */
getUidInfo()792*ec779b8eSAndroid Build Coastguard Worker UidInfo& UidInfo::getUidInfo() {
793*ec779b8eSAndroid Build Coastguard Worker     [[clang::no_destroy]] static UidInfo uidInfo;
794*ec779b8eSAndroid Build Coastguard Worker     return uidInfo;
795*ec779b8eSAndroid Build Coastguard Worker }
796*ec779b8eSAndroid Build Coastguard Worker 
797*ec779b8eSAndroid Build Coastguard Worker /* static */
getInfo(uid_t uid)798*ec779b8eSAndroid Build Coastguard Worker std::shared_ptr<const UidInfo::Info> UidInfo::getInfo(uid_t uid) {
799*ec779b8eSAndroid Build Coastguard Worker     return UidInfo::getUidInfo().getCachedInfo(uid);
800*ec779b8eSAndroid Build Coastguard Worker }
801*ec779b8eSAndroid Build Coastguard Worker 
802*ec779b8eSAndroid Build Coastguard Worker } // namespace mediautils
803*ec779b8eSAndroid Build Coastguard Worker 
804*ec779b8eSAndroid Build Coastguard Worker } // namespace android
805