3e3cbb7c21
This reverts commit 1b066c8d1d.
Reason for revert: <This CL isn't related to public API which triggered previous revert>
Change-Id: If1fa2a244e5f4ee7f978cda79421172da02220f1
195 lines
8 KiB
C++
195 lines
8 KiB
C++
/*
|
|
* Copyright (C) 2019 The Android Open Source Project
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
//#define LOG_NDEBUG 0
|
|
#define LOG_TAG "android.hardware.cas@1.1-DescramblerImpl"
|
|
|
|
#include <hidlmemory/mapping.h>
|
|
#include <media/cas/DescramblerAPI.h>
|
|
#include <media/hardware/CryptoAPI.h>
|
|
#include <media/stagefright/foundation/AUtils.h>
|
|
#include <utils/Log.h>
|
|
|
|
#include "DescramblerImpl.h"
|
|
#include "SharedLibrary.h"
|
|
#include "TypeConvert.h"
|
|
|
|
namespace android {
|
|
using hidl::memory::V1_0::IMemory;
|
|
|
|
namespace hardware {
|
|
namespace cas {
|
|
namespace V1_1 {
|
|
namespace implementation {
|
|
|
|
#define CHECK_SUBSAMPLE_DEF(type) \
|
|
static_assert(sizeof(SubSample) == sizeof(type::SubSample), "SubSample: size doesn't match"); \
|
|
static_assert(offsetof(SubSample, numBytesOfClearData) == \
|
|
offsetof(type::SubSample, mNumBytesOfClearData), \
|
|
"SubSample: numBytesOfClearData offset doesn't match"); \
|
|
static_assert(offsetof(SubSample, numBytesOfEncryptedData) == \
|
|
offsetof(type::SubSample, mNumBytesOfEncryptedData), \
|
|
"SubSample: numBytesOfEncryptedData offset doesn't match")
|
|
|
|
CHECK_SUBSAMPLE_DEF(DescramblerPlugin);
|
|
CHECK_SUBSAMPLE_DEF(CryptoPlugin);
|
|
|
|
DescramblerImpl::DescramblerImpl(const sp<SharedLibrary>& library, DescramblerPlugin* plugin)
|
|
: mLibrary(library), mPluginHolder(plugin) {
|
|
ALOGV("CTOR: plugin=%p", mPluginHolder.get());
|
|
}
|
|
|
|
DescramblerImpl::~DescramblerImpl() {
|
|
ALOGV("DTOR: plugin=%p", mPluginHolder.get());
|
|
release();
|
|
}
|
|
|
|
Return<Status> DescramblerImpl::setMediaCasSession(const HidlCasSessionId& sessionId) {
|
|
ALOGV("%s: sessionId=%s", __FUNCTION__, sessionIdToString(sessionId).string());
|
|
|
|
std::shared_ptr<DescramblerPlugin> holder = std::atomic_load(&mPluginHolder);
|
|
if (holder.get() == nullptr) {
|
|
return toStatus(INVALID_OPERATION);
|
|
}
|
|
|
|
return toStatus(holder->setMediaCasSession(sessionId));
|
|
}
|
|
|
|
Return<bool> DescramblerImpl::requiresSecureDecoderComponent(const hidl_string& mime) {
|
|
std::shared_ptr<DescramblerPlugin> holder = std::atomic_load(&mPluginHolder);
|
|
if (holder.get() == nullptr) {
|
|
return false;
|
|
}
|
|
|
|
return holder->requiresSecureDecoderComponent(String8(mime.c_str()));
|
|
}
|
|
|
|
static inline bool validateRangeForSize(uint64_t offset, uint64_t length, uint64_t size) {
|
|
return isInRange<uint64_t, uint64_t>(0, size, offset, length);
|
|
}
|
|
|
|
Return<void> DescramblerImpl::descramble(ScramblingControl scramblingControl,
|
|
const hidl_vec<SubSample>& subSamples,
|
|
const SharedBuffer& srcBuffer, uint64_t srcOffset,
|
|
const DestinationBuffer& dstBuffer, uint64_t dstOffset,
|
|
descramble_cb _hidl_cb) {
|
|
ALOGV("%s", __FUNCTION__);
|
|
|
|
// hidl_memory's size is stored in uint64_t, but mapMemory's mmap will map
|
|
// size in size_t. If size is over SIZE_MAX, mapMemory mapMemory could succeed
|
|
// but the mapped memory's actual size will be smaller than the reported size.
|
|
if (srcBuffer.heapBase.size() > SIZE_MAX) {
|
|
ALOGE("Invalid hidl_memory size: %llu", srcBuffer.heapBase.size());
|
|
android_errorWriteLog(0x534e4554, "79376389");
|
|
_hidl_cb(toStatus(BAD_VALUE), 0, NULL);
|
|
return Void();
|
|
}
|
|
|
|
sp<IMemory> srcMem = mapMemory(srcBuffer.heapBase);
|
|
|
|
// Validate if the offset and size in the SharedBuffer is consistent with the
|
|
// mapped ashmem, since the offset and size is controlled by client.
|
|
if (srcMem == NULL) {
|
|
ALOGE("Failed to map src buffer.");
|
|
_hidl_cb(toStatus(BAD_VALUE), 0, NULL);
|
|
return Void();
|
|
}
|
|
if (!validateRangeForSize(srcBuffer.offset, srcBuffer.size, (uint64_t)srcMem->getSize())) {
|
|
ALOGE("Invalid src buffer range: offset %llu, size %llu, srcMem size %llu",
|
|
srcBuffer.offset, srcBuffer.size, (uint64_t)srcMem->getSize());
|
|
android_errorWriteLog(0x534e4554, "67962232");
|
|
_hidl_cb(toStatus(BAD_VALUE), 0, NULL);
|
|
return Void();
|
|
}
|
|
|
|
// use 64-bit here to catch bad subsample size that might be overflowing.
|
|
uint64_t totalBytesInSubSamples = 0;
|
|
for (size_t i = 0; i < subSamples.size(); i++) {
|
|
totalBytesInSubSamples +=
|
|
(uint64_t)subSamples[i].numBytesOfClearData + subSamples[i].numBytesOfEncryptedData;
|
|
}
|
|
// Further validate if the specified srcOffset and requested total subsample size
|
|
// is consistent with the source shared buffer size.
|
|
if (!validateRangeForSize(srcOffset, totalBytesInSubSamples, srcBuffer.size)) {
|
|
ALOGE("Invalid srcOffset and subsample size: "
|
|
"srcOffset %llu, totalBytesInSubSamples %llu, srcBuffer size %llu",
|
|
srcOffset, totalBytesInSubSamples, srcBuffer.size);
|
|
android_errorWriteLog(0x534e4554, "67962232");
|
|
_hidl_cb(toStatus(BAD_VALUE), 0, NULL);
|
|
return Void();
|
|
}
|
|
|
|
void* srcPtr = (uint8_t*)(void*)srcMem->getPointer() + srcBuffer.offset;
|
|
void* dstPtr = NULL;
|
|
if (dstBuffer.type == BufferType::SHARED_MEMORY) {
|
|
// When using shared memory, src buffer is also used as dst,
|
|
// we don't map it again here.
|
|
dstPtr = srcPtr;
|
|
|
|
// In this case the dst and src would be the same buffer, need to validate
|
|
// dstOffset against the buffer size too.
|
|
if (!validateRangeForSize(dstOffset, totalBytesInSubSamples, srcBuffer.size)) {
|
|
ALOGE("Invalid dstOffset and subsample size: "
|
|
"dstOffset %llu, totalBytesInSubSamples %llu, srcBuffer size %llu",
|
|
dstOffset, totalBytesInSubSamples, srcBuffer.size);
|
|
android_errorWriteLog(0x534e4554, "67962232");
|
|
_hidl_cb(toStatus(BAD_VALUE), 0, NULL);
|
|
return Void();
|
|
}
|
|
} else {
|
|
native_handle_t* handle =
|
|
const_cast<native_handle_t*>(dstBuffer.secureMemory.getNativeHandle());
|
|
dstPtr = static_cast<void*>(handle);
|
|
}
|
|
|
|
// Get a local copy of the shared_ptr for the plugin. Note that before
|
|
// calling the HIDL callback, this shared_ptr must be manually reset,
|
|
// since the client side could proceed as soon as the callback is called
|
|
// without waiting for this method to go out of scope.
|
|
std::shared_ptr<DescramblerPlugin> holder = std::atomic_load(&mPluginHolder);
|
|
if (holder.get() == nullptr) {
|
|
_hidl_cb(toStatus(INVALID_OPERATION), 0, NULL);
|
|
return Void();
|
|
}
|
|
|
|
// Casting hidl SubSample to DescramblerPlugin::SubSample, but need
|
|
// to ensure structs are actually idential
|
|
|
|
int32_t result =
|
|
holder->descramble(dstBuffer.type != BufferType::SHARED_MEMORY,
|
|
(DescramblerPlugin::ScramblingControl)scramblingControl,
|
|
subSamples.size(), (DescramblerPlugin::SubSample*)subSamples.data(),
|
|
srcPtr, srcOffset, dstPtr, dstOffset, NULL);
|
|
|
|
holder.reset();
|
|
_hidl_cb(toStatus(result >= 0 ? OK : result), result, NULL);
|
|
return Void();
|
|
}
|
|
|
|
Return<Status> DescramblerImpl::release() {
|
|
ALOGV("%s: plugin=%p", __FUNCTION__, mPluginHolder.get());
|
|
|
|
std::shared_ptr<DescramblerPlugin> holder(nullptr);
|
|
std::atomic_store(&mPluginHolder, holder);
|
|
|
|
return Status::OK;
|
|
}
|
|
|
|
} // namespace implementation
|
|
} // namespace V1_1
|
|
} // namespace cas
|
|
} // namespace hardware
|
|
} // namespace android
|