Loading include/input/InputWindow.h +3 −1 Original line number Diff line number Diff line Loading @@ -165,6 +165,8 @@ struct InputWindowInfo { int32_t displayId; int32_t portalToDisplayId = ADISPLAY_ID_NONE; InputApplicationInfo applicationInfo; bool replaceTouchableRegionWithCrop; wp<IBinder> touchableRegionCropHandle; void addTouchableRegion(const Rect& region); Loading libs/gui/Android.bp +8 −2 Original line number Diff line number Diff line Loading @@ -91,6 +91,7 @@ cc_library_shared { "BufferQueueConsumer.cpp", "BufferQueueCore.cpp", "BufferQueueProducer.cpp", "BufferQueueThreadState.cpp", "BufferSlot.cpp", "ConsumerBase.cpp", "CpuConsumer.cpp", Loading Loading @@ -128,6 +129,7 @@ cc_library_shared { "libbase", "libsync", "libbinder", "libhwbinder", "libbufferhub", "libbufferhubqueue", // TODO(b/70046255): Remove this once BufferHub is integrated into libgui. "libpdx_default_transport", Loading @@ -143,12 +145,16 @@ cc_library_shared { "libhidltransport", "android.hidl.token@1.0-utils", "android.hardware.graphics.bufferqueue@1.0", "libvndksupport", ], // bufferhub is not used when building libgui for vendors target: { vendor: { cflags: ["-DNO_BUFFERHUB", "-DNO_INPUT"], cflags: [ "-DNO_BUFFERHUB", "-DNO_INPUT", ], exclude_srcs: [ "BufferHubConsumer.cpp", "BufferHubProducer.cpp", Loading @@ -158,7 +164,7 @@ cc_library_shared { "libbufferhub", "libbufferhubqueue", "libpdx_default_transport", "libinput" "libinput", ], }, }, Loading libs/gui/BufferQueueConsumer.cpp +20 −9 Original line number Diff line number Diff line Loading @@ -34,9 +34,10 @@ #include <gui/IConsumerListener.h> #include <gui/IProducerListener.h> #include <binder/IPCThreadState.h> #include <private/gui/BufferQueueThreadState.h> #ifndef __ANDROID_VNDK__ #include <binder/PermissionCache.h> #include <vndksupport/linker.h> #endif #include <system/window.h> Loading Loading @@ -758,19 +759,29 @@ status_t BufferQueueConsumer::dumpState(const String8& prefix, String8* outResul return savedErrno ? -savedErrno : UNKNOWN_ERROR; } const IPCThreadState* ipc = IPCThreadState::self(); const uid_t uid = ipc->getCallingUid(); bool denied = false; const uid_t uid = BufferQueueThreadState::getCallingUid(); #ifndef __ANDROID_VNDK__ // permission check can't be done for vendors as vendors have no access to // the PermissionController const pid_t pid = ipc->getCallingPid(); // the PermissionController. We need to do a runtime check as well, since // the system variant of libgui can be loaded in a vendor process. For eg: // if a HAL uses an llndk library that depends on libgui (libmediandk etc). if (!android_is_in_vendor_process()) { const pid_t pid = BufferQueueThreadState::getCallingPid(); if ((uid != shellUid) && !PermissionCache::checkPermission(String16("android.permission.DUMP"), pid, uid)) { outResult->appendFormat("Permission Denial: can't dump BufferQueueConsumer " "from pid=%d, uid=%d\n", pid, uid); "from pid=%d, uid=%d\n", pid, uid); denied = true; } } #else if (uid != shellUid) { denied = true; } #endif if (denied) { android_errorWriteWithInfoLog(0x534e4554, "27046057", static_cast<int32_t>(uid), nullptr, 0); return PERMISSION_DENIED; Loading libs/gui/BufferQueueProducer.cpp +3 −2 Original line number Diff line number Diff line Loading @@ -35,6 +35,7 @@ #include <gui/GLConsumer.h> #include <gui/IConsumerListener.h> #include <gui/IProducerListener.h> #include <private/gui/BufferQueueThreadState.h> #include <utils/Log.h> #include <utils/Trace.h> Loading Loading @@ -1210,7 +1211,7 @@ status_t BufferQueueProducer::connect(const sp<IProducerListener>& listener, status = BAD_VALUE; break; } mCore->mConnectedPid = IPCThreadState::self()->getCallingPid(); mCore->mConnectedPid = BufferQueueThreadState::getCallingPid(); mCore->mBufferHasBeenQueued = false; mCore->mDequeueBufferCannotBlock = false; if (mDequeueTimeout < 0) { Loading @@ -1233,7 +1234,7 @@ status_t BufferQueueProducer::disconnect(int api, DisconnectMode mode) { Mutex::Autolock lock(mCore->mMutex); if (mode == DisconnectMode::AllLocal) { if (IPCThreadState::self()->getCallingPid() != mCore->mConnectedPid) { if (BufferQueueThreadState::getCallingPid() != mCore->mConnectedPid) { return NO_ERROR; } api = BufferQueueCore::CURRENTLY_CONNECTED_API; Loading services/surfaceflinger/CompositionEngine/tests/FloatRectMatcher.h→libs/gui/BufferQueueThreadState.cpp +38 −0 Original line number Diff line number Diff line Loading @@ -14,35 +14,25 @@ * limitations under the License. */ #pragma once #include <binder/IPCThreadState.h> #include <hwbinder/IPCThreadState.h> #include <private/gui/BufferQueueThreadState.h> #include <unistd.h> #include <string> namespace android { #include <android-base/stringprintf.h> #include <gmock/gmock.h> namespace { using android::base::StringAppendF; using FloatRect = android::FloatRect; void dumpFloatRect(const FloatRect& rect, std::string& result, const char* name) { StringAppendF(&result, "%s (%f %f %f %f) ", name, rect.left, rect.top, rect.right, rect.bottom); uid_t BufferQueueThreadState::getCallingUid() { if (hardware::IPCThreadState::self()->isServingCall()) { return hardware::IPCThreadState::self()->getCallingUid(); } return IPCThreadState::self()->getCallingUid(); } // Checks for a region match MATCHER_P(FloatRectEq, expected, "") { std::string buf; buf.append("FloatRects are not equal\n"); dumpFloatRect(expected, buf, "expected rect"); dumpFloatRect(arg, buf, "actual rect"); *result_listener << buf; const float TOLERANCE = 1e-3f; return (std::fabs(expected.left - arg.left) < TOLERANCE) && (std::fabs(expected.top - arg.top) < TOLERANCE) && (std::fabs(expected.right - arg.right) < TOLERANCE) && (std::fabs(expected.bottom - arg.bottom) < TOLERANCE); pid_t BufferQueueThreadState::getCallingPid() { if (hardware::IPCThreadState::self()->isServingCall()) { return hardware::IPCThreadState::self()->getCallingPid(); } return IPCThreadState::self()->getCallingPid(); } } // namespace } // namespace android Loading
include/input/InputWindow.h +3 −1 Original line number Diff line number Diff line Loading @@ -165,6 +165,8 @@ struct InputWindowInfo { int32_t displayId; int32_t portalToDisplayId = ADISPLAY_ID_NONE; InputApplicationInfo applicationInfo; bool replaceTouchableRegionWithCrop; wp<IBinder> touchableRegionCropHandle; void addTouchableRegion(const Rect& region); Loading
libs/gui/Android.bp +8 −2 Original line number Diff line number Diff line Loading @@ -91,6 +91,7 @@ cc_library_shared { "BufferQueueConsumer.cpp", "BufferQueueCore.cpp", "BufferQueueProducer.cpp", "BufferQueueThreadState.cpp", "BufferSlot.cpp", "ConsumerBase.cpp", "CpuConsumer.cpp", Loading Loading @@ -128,6 +129,7 @@ cc_library_shared { "libbase", "libsync", "libbinder", "libhwbinder", "libbufferhub", "libbufferhubqueue", // TODO(b/70046255): Remove this once BufferHub is integrated into libgui. "libpdx_default_transport", Loading @@ -143,12 +145,16 @@ cc_library_shared { "libhidltransport", "android.hidl.token@1.0-utils", "android.hardware.graphics.bufferqueue@1.0", "libvndksupport", ], // bufferhub is not used when building libgui for vendors target: { vendor: { cflags: ["-DNO_BUFFERHUB", "-DNO_INPUT"], cflags: [ "-DNO_BUFFERHUB", "-DNO_INPUT", ], exclude_srcs: [ "BufferHubConsumer.cpp", "BufferHubProducer.cpp", Loading @@ -158,7 +164,7 @@ cc_library_shared { "libbufferhub", "libbufferhubqueue", "libpdx_default_transport", "libinput" "libinput", ], }, }, Loading
libs/gui/BufferQueueConsumer.cpp +20 −9 Original line number Diff line number Diff line Loading @@ -34,9 +34,10 @@ #include <gui/IConsumerListener.h> #include <gui/IProducerListener.h> #include <binder/IPCThreadState.h> #include <private/gui/BufferQueueThreadState.h> #ifndef __ANDROID_VNDK__ #include <binder/PermissionCache.h> #include <vndksupport/linker.h> #endif #include <system/window.h> Loading Loading @@ -758,19 +759,29 @@ status_t BufferQueueConsumer::dumpState(const String8& prefix, String8* outResul return savedErrno ? -savedErrno : UNKNOWN_ERROR; } const IPCThreadState* ipc = IPCThreadState::self(); const uid_t uid = ipc->getCallingUid(); bool denied = false; const uid_t uid = BufferQueueThreadState::getCallingUid(); #ifndef __ANDROID_VNDK__ // permission check can't be done for vendors as vendors have no access to // the PermissionController const pid_t pid = ipc->getCallingPid(); // the PermissionController. We need to do a runtime check as well, since // the system variant of libgui can be loaded in a vendor process. For eg: // if a HAL uses an llndk library that depends on libgui (libmediandk etc). if (!android_is_in_vendor_process()) { const pid_t pid = BufferQueueThreadState::getCallingPid(); if ((uid != shellUid) && !PermissionCache::checkPermission(String16("android.permission.DUMP"), pid, uid)) { outResult->appendFormat("Permission Denial: can't dump BufferQueueConsumer " "from pid=%d, uid=%d\n", pid, uid); "from pid=%d, uid=%d\n", pid, uid); denied = true; } } #else if (uid != shellUid) { denied = true; } #endif if (denied) { android_errorWriteWithInfoLog(0x534e4554, "27046057", static_cast<int32_t>(uid), nullptr, 0); return PERMISSION_DENIED; Loading
libs/gui/BufferQueueProducer.cpp +3 −2 Original line number Diff line number Diff line Loading @@ -35,6 +35,7 @@ #include <gui/GLConsumer.h> #include <gui/IConsumerListener.h> #include <gui/IProducerListener.h> #include <private/gui/BufferQueueThreadState.h> #include <utils/Log.h> #include <utils/Trace.h> Loading Loading @@ -1210,7 +1211,7 @@ status_t BufferQueueProducer::connect(const sp<IProducerListener>& listener, status = BAD_VALUE; break; } mCore->mConnectedPid = IPCThreadState::self()->getCallingPid(); mCore->mConnectedPid = BufferQueueThreadState::getCallingPid(); mCore->mBufferHasBeenQueued = false; mCore->mDequeueBufferCannotBlock = false; if (mDequeueTimeout < 0) { Loading @@ -1233,7 +1234,7 @@ status_t BufferQueueProducer::disconnect(int api, DisconnectMode mode) { Mutex::Autolock lock(mCore->mMutex); if (mode == DisconnectMode::AllLocal) { if (IPCThreadState::self()->getCallingPid() != mCore->mConnectedPid) { if (BufferQueueThreadState::getCallingPid() != mCore->mConnectedPid) { return NO_ERROR; } api = BufferQueueCore::CURRENTLY_CONNECTED_API; Loading
services/surfaceflinger/CompositionEngine/tests/FloatRectMatcher.h→libs/gui/BufferQueueThreadState.cpp +38 −0 Original line number Diff line number Diff line Loading @@ -14,35 +14,25 @@ * limitations under the License. */ #pragma once #include <binder/IPCThreadState.h> #include <hwbinder/IPCThreadState.h> #include <private/gui/BufferQueueThreadState.h> #include <unistd.h> #include <string> namespace android { #include <android-base/stringprintf.h> #include <gmock/gmock.h> namespace { using android::base::StringAppendF; using FloatRect = android::FloatRect; void dumpFloatRect(const FloatRect& rect, std::string& result, const char* name) { StringAppendF(&result, "%s (%f %f %f %f) ", name, rect.left, rect.top, rect.right, rect.bottom); uid_t BufferQueueThreadState::getCallingUid() { if (hardware::IPCThreadState::self()->isServingCall()) { return hardware::IPCThreadState::self()->getCallingUid(); } return IPCThreadState::self()->getCallingUid(); } // Checks for a region match MATCHER_P(FloatRectEq, expected, "") { std::string buf; buf.append("FloatRects are not equal\n"); dumpFloatRect(expected, buf, "expected rect"); dumpFloatRect(arg, buf, "actual rect"); *result_listener << buf; const float TOLERANCE = 1e-3f; return (std::fabs(expected.left - arg.left) < TOLERANCE) && (std::fabs(expected.top - arg.top) < TOLERANCE) && (std::fabs(expected.right - arg.right) < TOLERANCE) && (std::fabs(expected.bottom - arg.bottom) < TOLERANCE); pid_t BufferQueueThreadState::getCallingPid() { if (hardware::IPCThreadState::self()->isServingCall()) { return hardware::IPCThreadState::self()->getCallingPid(); } return IPCThreadState::self()->getCallingPid(); } } // namespace } // namespace android