| /* |
| * Copyright (C) 2014 The Android Open Source Project |
| * |
| * Licensed under the Apache License, Version 2.0 (the "License"); |
| * you may not use this file except in compliance with the License. |
| * You may obtain a copy of the License at |
| * |
| * http://www.apache.org/licenses/LICENSE-2.0 |
| * |
| * Unless required by applicable law or agreed to in writing, software |
| * distributed under the License is distributed on an "AS IS" BASIS, |
| * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| * See the License for the specific language governing permissions and |
| * limitations under the License. |
| */ |
| |
| package com.android.server; |
| |
| import static android.telephony.SubscriptionManager.INVALID_SIM_SLOT_INDEX; |
| |
| import android.Manifest; |
| import android.app.AppOpsManager; |
| import android.app.PendingIntent; |
| import android.content.ComponentName; |
| import android.content.ContentProvider; |
| import android.content.ContentValues; |
| import android.content.Context; |
| import android.content.Intent; |
| import android.content.ServiceConnection; |
| import android.content.pm.PackageManager; |
| import android.net.Uri; |
| import android.os.Binder; |
| import android.os.Bundle; |
| import android.os.Handler; |
| import android.os.IBinder; |
| import android.os.Message; |
| import android.os.RemoteException; |
| import android.os.SystemClock; |
| import android.os.UserHandle; |
| import android.service.carrier.CarrierMessagingService; |
| import android.telephony.SmsManager; |
| import android.telephony.SubscriptionInfo; |
| import android.telephony.SubscriptionManager; |
| import android.telephony.TelephonyManager; |
| import android.util.Slog; |
| |
| import com.android.internal.telephony.IMms; |
| import com.android.internal.telephony.TelephonyPermissions; |
| import com.android.internal.telephony.util.TelephonyUtils; |
| import com.android.server.uri.NeededUriGrants; |
| import com.android.server.uri.UriGrantsManagerInternal; |
| |
| import java.util.List; |
| |
| /** |
| * This class is a proxy for MmsService APIs. We need this because MmsService runs |
| * in phone process and may crash anytime. This manages a connection to the actual |
| * MmsService and bridges the public SMS/MMS APIs with MmsService implementation. |
| */ |
| public class MmsServiceBroker extends SystemService { |
| private static final String TAG = "MmsServiceBroker"; |
| |
| private static final ComponentName MMS_SERVICE_COMPONENT = |
| new ComponentName("com.android.mms.service", "com.android.mms.service.MmsService"); |
| |
| private static final int MSG_TRY_CONNECTING = 1; |
| |
| private static final Uri FAKE_SMS_SENT_URI = Uri.parse("content://sms/sent/0"); |
| private static final Uri FAKE_MMS_SENT_URI = Uri.parse("content://mms/sent/0"); |
| private static final Uri FAKE_SMS_DRAFT_URI = Uri.parse("content://sms/draft/0"); |
| private static final Uri FAKE_MMS_DRAFT_URI = Uri.parse("content://mms/draft/0"); |
| |
| private static final long SERVICE_CONNECTION_WAIT_TIME_MS = 4 * 1000L; // 4 seconds |
| private static final long RETRY_DELAY_ON_DISCONNECTION_MS = 3 * 1000L; // 3 seconds |
| |
| private Context mContext; |
| // The actual MMS service instance to invoke |
| private volatile IMms mService; |
| |
| // Cached system service instances |
| private volatile AppOpsManager mAppOpsManager = null; |
| private volatile PackageManager mPackageManager = null; |
| private volatile TelephonyManager mTelephonyManager = null; |
| |
| private final Handler mConnectionHandler = new Handler() { |
| @Override |
| public void handleMessage(Message msg) { |
| switch (msg.what) { |
| case MSG_TRY_CONNECTING: |
| tryConnecting(); |
| break; |
| default: |
| Slog.e(TAG, "Unknown message"); |
| } |
| } |
| }; |
| |
| private ServiceConnection mConnection = new ServiceConnection() { |
| @Override |
| public void onServiceConnected(ComponentName name, IBinder service) { |
| Slog.i(TAG, "MmsService connected"); |
| synchronized (MmsServiceBroker.this) { |
| mService = IMms.Stub.asInterface(Binder.allowBlocking(service)); |
| MmsServiceBroker.this.notifyAll(); |
| } |
| } |
| |
| @Override |
| public void onServiceDisconnected(ComponentName name) { |
| Slog.i(TAG, "MmsService unexpectedly disconnected"); |
| synchronized (MmsServiceBroker.this) { |
| mService = null; |
| MmsServiceBroker.this.notifyAll(); |
| } |
| // Retry connecting, but not too eager (with a delay) |
| // since it may come back by itself. |
| mConnectionHandler.sendMessageDelayed( |
| mConnectionHandler.obtainMessage(MSG_TRY_CONNECTING), |
| RETRY_DELAY_ON_DISCONNECTION_MS); |
| } |
| }; |
| |
| // Instance of IMms for returning failure to service API caller, |
| // used when MmsService cannot be connected. |
| private final IMms mServiceStubForFailure = new IMms() { |
| |
| @Override |
| public IBinder asBinder() { |
| return null; |
| } |
| |
| @Override |
| public void sendMessage(int subId, String callingPkg, Uri contentUri, String locationUrl, |
| Bundle configOverrides, PendingIntent sentIntent, long messageId, |
| String attributionTag) throws RemoteException { |
| returnPendingIntentWithError(sentIntent); |
| } |
| |
| @Override |
| public void downloadMessage(int subId, String callingPkg, String locationUrl, |
| Uri contentUri, Bundle configOverrides, PendingIntent downloadedIntent, |
| long messageId, String attributionTag) |
| throws RemoteException { |
| returnPendingIntentWithError(downloadedIntent); |
| } |
| |
| @Override |
| public Uri importTextMessage(String callingPkg, String address, int type, String text, |
| long timestampMillis, boolean seen, boolean read) throws RemoteException { |
| return null; |
| } |
| |
| @Override |
| public Uri importMultimediaMessage(String callingPkg, Uri contentUri, String messageId, |
| long timestampSecs, boolean seen, boolean read) throws RemoteException { |
| return null; |
| } |
| |
| @Override |
| public boolean deleteStoredMessage(String callingPkg, Uri messageUri) |
| throws RemoteException { |
| return false; |
| } |
| |
| @Override |
| public boolean deleteStoredConversation(String callingPkg, long conversationId) |
| throws RemoteException { |
| return false; |
| } |
| |
| @Override |
| public boolean updateStoredMessageStatus(String callingPkg, Uri messageUri, |
| ContentValues statusValues) throws RemoteException { |
| return false; |
| } |
| |
| @Override |
| public boolean archiveStoredConversation(String callingPkg, long conversationId, |
| boolean archived) throws RemoteException { |
| return false; |
| } |
| |
| @Override |
| public Uri addTextMessageDraft(String callingPkg, String address, String text) |
| throws RemoteException { |
| return null; |
| } |
| |
| @Override |
| public Uri addMultimediaMessageDraft(String callingPkg, Uri contentUri) |
| throws RemoteException { |
| return null; |
| } |
| |
| @Override |
| public void sendStoredMessage(int subId, String callingPkg, Uri messageUri, |
| Bundle configOverrides, PendingIntent sentIntent) throws RemoteException { |
| returnPendingIntentWithError(sentIntent); |
| } |
| |
| @Override |
| public void setAutoPersisting(String callingPkg, boolean enabled) throws RemoteException { |
| // Do nothing |
| } |
| |
| @Override |
| public boolean getAutoPersisting() throws RemoteException { |
| return false; |
| } |
| |
| private void returnPendingIntentWithError(PendingIntent pendingIntent) { |
| try { |
| pendingIntent.send(mContext, SmsManager.MMS_ERROR_UNSPECIFIED, null); |
| } catch (PendingIntent.CanceledException e) { |
| Slog.e(TAG, "Failed to return pending intent result", e); |
| } |
| } |
| }; |
| |
| public MmsServiceBroker(Context context) { |
| super(context); |
| mContext = context; |
| mService = null; |
| } |
| |
| @Override |
| public void onStart() { |
| publishBinderService("imms", new BinderService()); |
| } |
| |
| public void systemRunning() { |
| Slog.i(TAG, "Delay connecting to MmsService until an API is called"); |
| } |
| |
| private void tryConnecting() { |
| Slog.i(TAG, "Connecting to MmsService"); |
| synchronized (this) { |
| if (mService != null) { |
| Slog.d(TAG, "Already connected"); |
| return; |
| } |
| final Intent intent = new Intent(); |
| intent.setComponent(MMS_SERVICE_COMPONENT); |
| try { |
| if (!mContext.bindService(intent, mConnection, Context.BIND_AUTO_CREATE)) { |
| Slog.e(TAG, "Failed to bind to MmsService"); |
| } |
| } catch (SecurityException e) { |
| Slog.e(TAG, "Forbidden to bind to MmsService", e); |
| } |
| } |
| } |
| |
| private IMms getOrConnectService() { |
| synchronized (this) { |
| if (mService != null) { |
| return mService; |
| } |
| // Service is not connected. Try blocking connecting. |
| Slog.w(TAG, "MmsService not connected. Try connecting..."); |
| mConnectionHandler.sendMessage( |
| mConnectionHandler.obtainMessage(MSG_TRY_CONNECTING)); |
| final long shouldEnd = |
| SystemClock.elapsedRealtime() + SERVICE_CONNECTION_WAIT_TIME_MS; |
| long waitTime = SERVICE_CONNECTION_WAIT_TIME_MS; |
| while (waitTime > 0) { |
| try { |
| // TODO: consider using Java concurrent construct instead of raw object wait |
| this.wait(waitTime); |
| } catch (InterruptedException e) { |
| Slog.w(TAG, "Connection wait interrupted", e); |
| } |
| if (mService != null) { |
| // Success |
| return mService; |
| } |
| // Calculate remaining waiting time to make sure we wait the full timeout period |
| waitTime = shouldEnd - SystemClock.elapsedRealtime(); |
| } |
| // Timed out. Something's really wrong. |
| Slog.e(TAG, "Can not connect to MmsService (timed out)"); |
| return null; |
| } |
| } |
| |
| /** |
| * Make sure to return a non-empty service instance. Return the connected MmsService |
| * instance, if not connected, try connecting. If fail to connect, return a fake service |
| * instance which returns failure to service caller. |
| * |
| * @return a non-empty service instance, real or fake |
| */ |
| private IMms getServiceGuarded() { |
| final IMms service = getOrConnectService(); |
| if (service != null) { |
| return service; |
| } |
| return mServiceStubForFailure; |
| } |
| |
| private AppOpsManager getAppOpsManager() { |
| if (mAppOpsManager == null) { |
| mAppOpsManager = (AppOpsManager) mContext.getSystemService(Context.APP_OPS_SERVICE); |
| } |
| return mAppOpsManager; |
| } |
| |
| private PackageManager getPackageManager() { |
| if (mPackageManager == null) { |
| mPackageManager = mContext.getPackageManager(); |
| } |
| return mPackageManager; |
| } |
| |
| private TelephonyManager getTelephonyManager() { |
| if (mTelephonyManager == null) { |
| mTelephonyManager = (TelephonyManager) mContext.getSystemService( |
| Context.TELEPHONY_SERVICE); |
| } |
| return mTelephonyManager; |
| } |
| |
| private String getCallingPackageName() { |
| final String[] packages = getPackageManager().getPackagesForUid(Binder.getCallingUid()); |
| if (packages != null && packages.length > 0) { |
| return packages[0]; |
| } |
| return "unknown"; |
| } |
| |
| // Service API calls implementation, proxied to the real MmsService in "com.android.mms.service" |
| private final class BinderService extends IMms.Stub { |
| private static final String PHONE_PACKAGE_NAME = "com.android.phone"; |
| |
| @Override |
| public void sendMessage(int subId, String callingPkg, Uri contentUri, |
| String locationUrl, Bundle configOverrides, PendingIntent sentIntent, |
| long messageId, String attributionTag) |
| throws RemoteException { |
| Slog.d(TAG, "sendMessage() by " + callingPkg); |
| mContext.enforceCallingPermission(Manifest.permission.SEND_SMS, "Send MMS message"); |
| |
| // Check if user is associated with the subscription |
| if (!TelephonyPermissions.checkSubscriptionAssociatedWithUser(mContext, subId, |
| Binder.getCallingUserHandle())) { |
| TelephonyUtils.showSwitchToManagedProfileDialogIfAppropriate(mContext, |
| subId, Binder.getCallingUid(), callingPkg); |
| return; |
| } |
| |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_SEND_SMS, Binder.getCallingUid(), |
| callingPkg, attributionTag, null) != AppOpsManager.MODE_ALLOWED) { |
| Slog.e(TAG, callingPkg + " is not allowed to call sendMessage()"); |
| return; |
| } |
| contentUri = adjustUriForUserAndGrantPermission(contentUri, |
| CarrierMessagingService.SERVICE_INTERFACE, |
| Intent.FLAG_GRANT_READ_URI_PERMISSION, |
| subId); |
| getServiceGuarded().sendMessage(subId, callingPkg, contentUri, locationUrl, |
| configOverrides, sentIntent, messageId, attributionTag); |
| } |
| |
| @Override |
| public void downloadMessage(int subId, String callingPkg, String locationUrl, |
| Uri contentUri, Bundle configOverrides, PendingIntent downloadedIntent, |
| long messageId, String attributionTag) throws RemoteException { |
| Slog.d(TAG, "downloadMessage() by " + callingPkg); |
| mContext.enforceCallingPermission(Manifest.permission.RECEIVE_MMS, |
| "Download MMS message"); |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_RECEIVE_MMS, Binder.getCallingUid(), |
| callingPkg, attributionTag, null) != AppOpsManager.MODE_ALLOWED) { |
| Slog.e(TAG, callingPkg + " is not allowed to call downloadMessage()"); |
| return; |
| } |
| contentUri = adjustUriForUserAndGrantPermission(contentUri, |
| CarrierMessagingService.SERVICE_INTERFACE, |
| Intent.FLAG_GRANT_READ_URI_PERMISSION | Intent.FLAG_GRANT_WRITE_URI_PERMISSION, |
| subId); |
| |
| getServiceGuarded().downloadMessage(subId, callingPkg, locationUrl, contentUri, |
| configOverrides, downloadedIntent, messageId, attributionTag); |
| } |
| |
| @Override |
| public Uri importTextMessage(String callingPkg, String address, int type, String text, |
| long timestampMillis, boolean seen, boolean read) throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_WRITE_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| // Silently fail AppOps failure due to not being the default SMS app |
| // while writing the TelephonyProvider |
| return FAKE_SMS_SENT_URI; |
| } |
| return getServiceGuarded().importTextMessage( |
| callingPkg, address, type, text, timestampMillis, seen, read); |
| } |
| |
| @Override |
| public Uri importMultimediaMessage(String callingPkg, Uri contentUri, |
| String messageId, long timestampSecs, boolean seen, boolean read) |
| throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_WRITE_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| // Silently fail AppOps failure due to not being the default SMS app |
| // while writing the TelephonyProvider |
| return FAKE_MMS_SENT_URI; |
| } |
| return getServiceGuarded().importMultimediaMessage( |
| callingPkg, contentUri, messageId, timestampSecs, seen, read); |
| } |
| |
| @Override |
| public boolean deleteStoredMessage(String callingPkg, Uri messageUri) |
| throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_WRITE_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| return false; |
| } |
| return getServiceGuarded().deleteStoredMessage(callingPkg, messageUri); |
| } |
| |
| @Override |
| public boolean deleteStoredConversation(String callingPkg, long conversationId) |
| throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_WRITE_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| return false; |
| } |
| return getServiceGuarded().deleteStoredConversation(callingPkg, conversationId); |
| } |
| |
| @Override |
| public boolean updateStoredMessageStatus(String callingPkg, Uri messageUri, |
| ContentValues statusValues) throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_WRITE_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| return false; |
| } |
| return getServiceGuarded() |
| .updateStoredMessageStatus(callingPkg, messageUri, statusValues); |
| } |
| |
| @Override |
| public boolean archiveStoredConversation(String callingPkg, long conversationId, |
| boolean archived) throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_WRITE_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| return false; |
| } |
| return getServiceGuarded() |
| .archiveStoredConversation(callingPkg, conversationId, archived); |
| } |
| |
| @Override |
| public Uri addTextMessageDraft(String callingPkg, String address, String text) |
| throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_WRITE_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| // Silently fail AppOps failure due to not being the default SMS app |
| // while writing the TelephonyProvider |
| return FAKE_SMS_DRAFT_URI; |
| } |
| return getServiceGuarded().addTextMessageDraft(callingPkg, address, text); |
| } |
| |
| @Override |
| public Uri addMultimediaMessageDraft(String callingPkg, Uri contentUri) |
| throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_WRITE_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| // Silently fail AppOps failure due to not being the default SMS app |
| // while writing the TelephonyProvider |
| return FAKE_MMS_DRAFT_URI; |
| } |
| return getServiceGuarded().addMultimediaMessageDraft(callingPkg, contentUri); |
| } |
| |
| @Override |
| public void sendStoredMessage(int subId, String callingPkg, Uri messageUri, |
| Bundle configOverrides, PendingIntent sentIntent) throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_SEND_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| return; |
| } |
| getServiceGuarded().sendStoredMessage(subId, callingPkg, messageUri, configOverrides, |
| sentIntent); |
| } |
| |
| @Override |
| public void setAutoPersisting(String callingPkg, boolean enabled) throws RemoteException { |
| if (getAppOpsManager().noteOp(AppOpsManager.OP_WRITE_SMS, Binder.getCallingUid(), |
| callingPkg, null, null) != AppOpsManager.MODE_ALLOWED) { |
| return; |
| } |
| getServiceGuarded().setAutoPersisting(callingPkg, enabled); |
| } |
| |
| @Override |
| public boolean getAutoPersisting() throws RemoteException { |
| return getServiceGuarded().getAutoPersisting(); |
| } |
| |
| /** |
| * Modifies the Uri to contain the caller's userId, if necessary. |
| * Grants the phone package on primary user permission to access the contentUri, |
| * even if the caller is not in the primary user. |
| * |
| * @param contentUri The Uri to adjust |
| * @param action The intent action used to find the associated carrier app |
| * @param permission The permission to add |
| * @return The adjusted Uri containing the calling userId. |
| */ |
| private Uri adjustUriForUserAndGrantPermission(Uri contentUri, String action, |
| int permission, int subId) { |
| final Intent grantIntent = new Intent(); |
| grantIntent.setData(contentUri); |
| grantIntent.setFlags(permission); |
| |
| final int callingUid = Binder.getCallingUid(); |
| final int callingUserId = UserHandle.getCallingUserId(); |
| if (callingUserId != UserHandle.USER_SYSTEM) { |
| contentUri = ContentProvider.maybeAddUserId(contentUri, callingUserId); |
| } |
| |
| final long token = Binder.clearCallingIdentity(); |
| try { |
| final UriGrantsManagerInternal ugm = LocalServices |
| .getService(UriGrantsManagerInternal.class); |
| final NeededUriGrants needed = ugm.checkGrantUriPermissionFromIntent( |
| grantIntent, callingUid, PHONE_PACKAGE_NAME, UserHandle.USER_SYSTEM); |
| ugm.grantUriPermissionUncheckedFromIntent(needed, null); |
| |
| // Grant permission for the carrier app. |
| Intent intent = new Intent(action); |
| TelephonyManager telephonyManager = (TelephonyManager) |
| mContext.getSystemService(Context.TELEPHONY_SERVICE); |
| List<String> carrierPackages = telephonyManager |
| .getCarrierPackageNamesForIntentAndPhone( |
| intent, getPhoneIdFromSubId(subId)); |
| if (carrierPackages != null && carrierPackages.size() == 1) { |
| final NeededUriGrants carrierNeeded = ugm.checkGrantUriPermissionFromIntent( |
| grantIntent, callingUid, carrierPackages.get(0), |
| UserHandle.USER_SYSTEM); |
| ugm.grantUriPermissionUncheckedFromIntent(carrierNeeded, null); |
| } |
| } finally { |
| Binder.restoreCallingIdentity(token); |
| } |
| return contentUri; |
| } |
| } |
| |
| private int getPhoneIdFromSubId(int subId) { |
| SubscriptionManager subManager = (SubscriptionManager) |
| mContext.getSystemService(Context.TELEPHONY_SUBSCRIPTION_SERVICE); |
| if (subManager == null) return INVALID_SIM_SLOT_INDEX; |
| SubscriptionInfo info = subManager.getActiveSubscriptionInfo(subId); |
| if (info == null) return INVALID_SIM_SLOT_INDEX; |
| return info.getSimSlotIndex(); |
| } |
| } |