837a0d0fb2
Add native Parcel methods analogous to the Java versions.
Currently, these don't do much, but upcoming StrictMode work changes
the RPC calling conventions in some cases, so it's important that
everybody uses these consistently, rather than having a lot of code
trying to parse RPC responses out of Parcels themselves.
As a summary, the current convention that Java Binder services use is
to prepend the reply Parcel with an int32 signaling the exception
status:
0: no exception
-1: Security exception
-2: Bad Parcelable
-3: ...
-4: ...
-5: ...
... followed by Parceled String if the exception code is non-zero.
With an upcoming change, it'll be the case that a response Parcel can,
non-exceptionally return rich data in the header, and also return data
to the caller. The important thing to note in this new case is that
the first int32 in the reply parcel *will not be zero*, so anybody
manually checking for it with reply.readInt32() will get false
negative failures.
Short summary: If you're calling into a Java service and manually
checking the exception status with reply.readInt32(), change it to
reply.readExceptionCode().
Change-Id: I23f9a0e53a8cfbbd9759242cfde16723641afe04
79 lines
2.5 KiB
C++
79 lines
2.5 KiB
C++
/*
|
|
* Copyright (C) 2005 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#define LOG_TAG "PermissionController"
|
|
|
|
#include <binder/IPermissionController.h>
|
|
|
|
#include <utils/Debug.h>
|
|
#include <utils/Log.h>
|
|
#include <binder/Parcel.h>
|
|
#include <utils/String8.h>
|
|
|
|
#include <private/binder/Static.h>
|
|
|
|
namespace android {
|
|
|
|
// ----------------------------------------------------------------------
|
|
|
|
class BpPermissionController : public BpInterface<IPermissionController>
|
|
{
|
|
public:
|
|
BpPermissionController(const sp<IBinder>& impl)
|
|
: BpInterface<IPermissionController>(impl)
|
|
{
|
|
}
|
|
|
|
virtual bool checkPermission(const String16& permission, int32_t pid, int32_t uid)
|
|
{
|
|
Parcel data, reply;
|
|
data.writeInterfaceToken(IPermissionController::getInterfaceDescriptor());
|
|
data.writeString16(permission);
|
|
data.writeInt32(pid);
|
|
data.writeInt32(uid);
|
|
remote()->transact(CHECK_PERMISSION_TRANSACTION, data, &reply);
|
|
// fail on exception
|
|
if (reply.readExceptionCode() != 0) return 0;
|
|
return reply.readInt32() != 0;
|
|
}
|
|
};
|
|
|
|
IMPLEMENT_META_INTERFACE(PermissionController, "android.os.IPermissionController");
|
|
|
|
// ----------------------------------------------------------------------
|
|
|
|
status_t BnPermissionController::onTransact(
|
|
uint32_t code, const Parcel& data, Parcel* reply, uint32_t flags)
|
|
{
|
|
//printf("PermissionController received: "); data.print();
|
|
switch(code) {
|
|
case CHECK_PERMISSION_TRANSACTION: {
|
|
CHECK_INTERFACE(IPermissionController, data, reply);
|
|
String16 permission = data.readString16();
|
|
int32_t pid = data.readInt32();
|
|
int32_t uid = data.readInt32();
|
|
bool res = checkPermission(permission, pid, uid);
|
|
reply->writeNoException();
|
|
reply->writeInt32(res ? 1 : 0);
|
|
return NO_ERROR;
|
|
} break;
|
|
default:
|
|
return BBinder::onTransact(code, data, reply, flags);
|
|
}
|
|
}
|
|
|
|
}; // namespace android
|