2 * Copyright (C) 2007 The Android Open Source Project
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
8 * http://www.apache.org/licenses/LICENSE-2.0
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
17 // tag as surfaceflinger
18 #define LOG_TAG "SurfaceFlinger"
22 #include <sys/types.h>
24 #include <binder/Parcel.h>
25 #include <binder/IMemory.h>
26 #include <binder/IPCThreadState.h>
27 #include <binder/IServiceManager.h>
32 #include <surfaceflinger/ISurface.h>
33 #include <surfaceflinger/ISurfaceComposerClient.h>
34 #include <private/surfaceflinger/LayerState.h>
36 // ---------------------------------------------------------------------------
38 /* ideally AID_GRAPHICS would be in a semi-public header
39 * or there would be a way to map a user/group name to its id
42 #define AID_GRAPHICS 1003
45 #define LIKELY( exp ) (__builtin_expect( (exp) != 0, true ))
46 #define UNLIKELY( exp ) (__builtin_expect( (exp) != 0, false ))
48 // ---------------------------------------------------------------------------
53 GET_CBLK = IBinder::FIRST_CALL_TRANSACTION,
60 class BpSurfaceComposerClient : public BpInterface<ISurfaceComposerClient>
63 BpSurfaceComposerClient(const sp<IBinder>& impl)
64 : BpInterface<ISurfaceComposerClient>(impl)
68 virtual sp<IMemoryHeap> getControlBlock() const
71 data.writeInterfaceToken(ISurfaceComposerClient::getInterfaceDescriptor());
72 remote()->transact(GET_CBLK, data, &reply);
73 return interface_cast<IMemoryHeap>(reply.readStrongBinder());
76 virtual ssize_t getTokenForSurface(const sp<ISurface>& sur) const
79 data.writeInterfaceToken(ISurfaceComposerClient::getInterfaceDescriptor());
80 data.writeStrongBinder(sur->asBinder());
81 remote()->transact(GET_TOKEN, data, &reply);
82 return reply.readInt32();
85 virtual sp<ISurface> createSurface( surface_data_t* params,
95 data.writeInterfaceToken(ISurfaceComposerClient::getInterfaceDescriptor());
97 data.writeString8(name);
98 data.writeInt32(display);
101 data.writeInt32(format);
102 data.writeInt32(flags);
103 remote()->transact(CREATE_SURFACE, data, &reply);
104 params->readFromParcel(reply);
105 return interface_cast<ISurface>(reply.readStrongBinder());
108 virtual status_t destroySurface(SurfaceID sid)
111 data.writeInterfaceToken(ISurfaceComposerClient::getInterfaceDescriptor());
112 data.writeInt32(sid);
113 remote()->transact(DESTROY_SURFACE, data, &reply);
114 return reply.readInt32();
117 virtual status_t setState(int32_t count, const layer_state_t* states)
120 data.writeInterfaceToken(ISurfaceComposerClient::getInterfaceDescriptor());
121 data.writeInt32(count);
122 for (int i=0 ; i<count ; i++)
123 states[i].write(data);
124 remote()->transact(SET_STATE, data, &reply);
125 return reply.readInt32();
129 IMPLEMENT_META_INTERFACE(SurfaceComposerClient, "android.ui.ISurfaceComposerClient");
131 // ----------------------------------------------------------------------
133 status_t BnSurfaceComposerClient::onTransact(
134 uint32_t code, const Parcel& data, Parcel* reply, uint32_t flags)
136 // codes that don't require permission check
140 CHECK_INTERFACE(ISurfaceComposerClient, data, reply);
141 sp<IMemoryHeap> ctl(getControlBlock());
142 reply->writeStrongBinder(ctl->asBinder());
146 CHECK_INTERFACE(ISurfaceComposerClient, data, reply);
147 sp<ISurface> sur = interface_cast<ISurface>(data.readStrongBinder());
148 ssize_t token = getTokenForSurface(sur);
149 reply->writeInt32(token);
154 // these must be checked
156 IPCThreadState* ipc = IPCThreadState::self();
157 const int pid = ipc->getCallingPid();
158 const int uid = ipc->getCallingUid();
159 const int self_pid = getpid();
160 if (UNLIKELY(pid != self_pid && uid != AID_GRAPHICS)) {
161 // we're called from a different process, do the real check
162 if (!checkCallingPermission(
163 String16("android.permission.ACCESS_SURFACE_FLINGER")))
165 LOGE("Permission Denial: "
166 "can't openGlobalTransaction pid=%d, uid=%d", pid, uid);
167 return PERMISSION_DENIED;
172 case CREATE_SURFACE: {
173 CHECK_INTERFACE(ISurfaceComposerClient, data, reply);
174 surface_data_t params;
175 int32_t pid = data.readInt32();
176 String8 name = data.readString8();
177 DisplayID display = data.readInt32();
178 uint32_t w = data.readInt32();
179 uint32_t h = data.readInt32();
180 PixelFormat format = data.readInt32();
181 uint32_t flags = data.readInt32();
182 sp<ISurface> s = createSurface(¶ms, pid, name, display, w, h,
184 params.writeToParcel(reply);
185 reply->writeStrongBinder(s->asBinder());
188 case DESTROY_SURFACE: {
189 CHECK_INTERFACE(ISurfaceComposerClient, data, reply);
190 reply->writeInt32( destroySurface( data.readInt32() ) );
194 CHECK_INTERFACE(ISurfaceComposerClient, data, reply);
195 int32_t count = data.readInt32();
196 layer_state_t* states = new layer_state_t[count];
197 for (int i=0 ; i<count ; i++)
198 states[i].read(data);
199 status_t err = setState(count, states);
201 reply->writeInt32(err);
205 return BBinder::onTransact(code, data, reply, flags);
209 // ----------------------------------------------------------------------
211 status_t ISurfaceComposerClient::surface_data_t::readFromParcel(const Parcel& parcel)
213 token = parcel.readInt32();
214 identity = parcel.readInt32();
215 width = parcel.readInt32();
216 height = parcel.readInt32();
217 format = parcel.readInt32();
221 status_t ISurfaceComposerClient::surface_data_t::writeToParcel(Parcel* parcel) const
223 parcel->writeInt32(token);
224 parcel->writeInt32(identity);
225 parcel->writeInt32(width);
226 parcel->writeInt32(height);
227 parcel->writeInt32(format);
231 }; // namespace android