| OLD | NEW |
| (Empty) |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef MOJO_EDK_SYSTEM_RAW_CHANNEL_H_ | |
| 6 #define MOJO_EDK_SYSTEM_RAW_CHANNEL_H_ | |
| 7 | |
| 8 #include <deque> | |
| 9 #include <vector> | |
| 10 | |
| 11 #include "base/macros.h" | |
| 12 #include "base/memory/scoped_ptr.h" | |
| 13 #include "base/memory/weak_ptr.h" | |
| 14 #include "base/synchronization/lock.h" | |
| 15 #include "mojo/edk/embedder/platform_handle_vector.h" | |
| 16 #include "mojo/edk/embedder/scoped_platform_handle.h" | |
| 17 #include "mojo/edk/system/constants.h" | |
| 18 #include "mojo/edk/system/message_in_transit.h" | |
| 19 #include "mojo/edk/system/system_impl_export.h" | |
| 20 | |
| 21 namespace base { | |
| 22 class MessageLoopForIO; | |
| 23 } | |
| 24 | |
| 25 namespace mojo { | |
| 26 namespace system { | |
| 27 | |
| 28 // |RawChannel| is an interface and base class for objects that wrap an OS | |
| 29 // "pipe". It presents the following interface to users: | |
| 30 // - Receives and dispatches messages on an I/O thread (running a | |
| 31 // |MessageLoopForIO|. | |
| 32 // - Provides a thread-safe way of writing messages (|WriteMessage()|); | |
| 33 // writing/queueing messages will not block and is atomic from the point of | |
| 34 // view of the caller. If necessary, messages are queued (to be written on | |
| 35 // the aforementioned thread). | |
| 36 // | |
| 37 // OS-specific implementation subclasses are to be instantiated using the | |
| 38 // |Create()| static factory method. | |
| 39 // | |
| 40 // With the exception of |WriteMessage()|, this class is thread-unsafe (and in | |
| 41 // general its methods should only be used on the I/O thread, i.e., the thread | |
| 42 // on which |Init()| is called). | |
| 43 class MOJO_SYSTEM_IMPL_EXPORT RawChannel { | |
| 44 public: | |
| 45 virtual ~RawChannel(); | |
| 46 | |
| 47 // The |Delegate| is only accessed on the same thread as the message loop | |
| 48 // (passed in on creation). | |
| 49 class MOJO_SYSTEM_IMPL_EXPORT Delegate { | |
| 50 public: | |
| 51 enum Error { | |
| 52 // Failed read due to raw channel shutdown (e.g., on the other side). | |
| 53 ERROR_READ_SHUTDOWN, | |
| 54 // Failed read due to raw channel being broken (e.g., if the other side | |
| 55 // died without shutting down). | |
| 56 ERROR_READ_BROKEN, | |
| 57 // Received a bad message. | |
| 58 ERROR_READ_BAD_MESSAGE, | |
| 59 // Unknown read error. | |
| 60 ERROR_READ_UNKNOWN, | |
| 61 // Generic write error. | |
| 62 ERROR_WRITE | |
| 63 }; | |
| 64 | |
| 65 // Called when a message is read. This may call |Shutdown()| (on the | |
| 66 // |RawChannel|), but must not destroy it. | |
| 67 virtual void OnReadMessage( | |
| 68 const MessageInTransit::View& message_view, | |
| 69 embedder::ScopedPlatformHandleVectorPtr platform_handles) = 0; | |
| 70 | |
| 71 // Called when there's a (fatal) error. This may call the raw channel's | |
| 72 // |Shutdown()|, but must not destroy it. | |
| 73 // | |
| 74 // For each raw channel, there'll be at most one |ERROR_READ_...| and at | |
| 75 // most one |ERROR_WRITE| notification. After |OnError(ERROR_READ_...)|, | |
| 76 // |OnReadMessage()| won't be called again. | |
| 77 virtual void OnError(Error error) = 0; | |
| 78 | |
| 79 protected: | |
| 80 virtual ~Delegate() {} | |
| 81 }; | |
| 82 | |
| 83 // Static factory method. |handle| should be a handle to a | |
| 84 // (platform-appropriate) bidirectional communication channel (e.g., a socket | |
| 85 // on POSIX, a named pipe on Windows). | |
| 86 static scoped_ptr<RawChannel> Create(embedder::ScopedPlatformHandle handle); | |
| 87 | |
| 88 // This must be called (on an I/O thread) before this object is used. Does | |
| 89 // *not* take ownership of |delegate|. Both the I/O thread and |delegate| must | |
| 90 // remain alive until |Shutdown()| is called (unless this fails); |delegate| | |
| 91 // will no longer be used after |Shutdown()|. Returns true on success. On | |
| 92 // failure, |Shutdown()| should *not* be called. | |
| 93 bool Init(Delegate* delegate); | |
| 94 | |
| 95 // This must be called (on the I/O thread) before this object is destroyed. | |
| 96 void Shutdown(); | |
| 97 | |
| 98 // Writes the given message (or schedules it to be written). |message| must | |
| 99 // have no |Dispatcher|s still attached (i.e., | |
| 100 // |SerializeAndCloseDispatchers()| should have been called). This method is | |
| 101 // thread-safe and may be called from any thread. Returns true on success. | |
| 102 bool WriteMessage(scoped_ptr<MessageInTransit> message); | |
| 103 | |
| 104 // Returns true if the write buffer is empty (i.e., all messages written using | |
| 105 // |WriteMessage()| have actually been sent. | |
| 106 // TODO(vtl): We should really also notify our delegate when the write buffer | |
| 107 // becomes empty (or something like that). | |
| 108 bool IsWriteBufferEmpty(); | |
| 109 | |
| 110 // Returns the amount of space needed in the |MessageInTransit|'s | |
| 111 // |TransportData|'s "platform handle table" per platform handle (to be | |
| 112 // attached to a message). (This amount may be zero.) | |
| 113 virtual size_t GetSerializedPlatformHandleSize() const = 0; | |
| 114 | |
| 115 protected: | |
| 116 // Result of I/O operations. | |
| 117 enum IOResult { | |
| 118 IO_SUCCEEDED, | |
| 119 // Failed due to a (probably) clean shutdown (e.g., of the other end). | |
| 120 IO_FAILED_SHUTDOWN, | |
| 121 // Failed due to the connection being broken (e.g., the other end dying). | |
| 122 IO_FAILED_BROKEN, | |
| 123 // Failed due to some other (unexpected) reason. | |
| 124 IO_FAILED_UNKNOWN, | |
| 125 IO_PENDING | |
| 126 }; | |
| 127 | |
| 128 class MOJO_SYSTEM_IMPL_EXPORT ReadBuffer { | |
| 129 public: | |
| 130 ReadBuffer(); | |
| 131 ~ReadBuffer(); | |
| 132 | |
| 133 void GetBuffer(char** addr, size_t* size); | |
| 134 | |
| 135 private: | |
| 136 friend class RawChannel; | |
| 137 | |
| 138 // We store data from |[Schedule]Read()|s in |buffer_|. The start of | |
| 139 // |buffer_| is always aligned with a message boundary (we will copy memory | |
| 140 // to ensure this), but |buffer_| may be larger than the actual number of | |
| 141 // bytes we have. | |
| 142 std::vector<char> buffer_; | |
| 143 size_t num_valid_bytes_; | |
| 144 | |
| 145 DISALLOW_COPY_AND_ASSIGN(ReadBuffer); | |
| 146 }; | |
| 147 | |
| 148 class MOJO_SYSTEM_IMPL_EXPORT WriteBuffer { | |
| 149 public: | |
| 150 struct Buffer { | |
| 151 const char* addr; | |
| 152 size_t size; | |
| 153 }; | |
| 154 | |
| 155 explicit WriteBuffer(size_t serialized_platform_handle_size); | |
| 156 ~WriteBuffer(); | |
| 157 | |
| 158 // Returns true if there are (more) platform handles to be sent (from the | |
| 159 // front of |message_queue_|). | |
| 160 bool HavePlatformHandlesToSend() const; | |
| 161 // Gets platform handles to be sent (from the front of |message_queue_|). | |
| 162 // This should only be called if |HavePlatformHandlesToSend()| returned | |
| 163 // true. There are two components to this: the actual |PlatformHandle|s | |
| 164 // (which should be closed once sent) and any additional serialization | |
| 165 // information (which will be embedded in the message's data; there are | |
| 166 // |GetSerializedPlatformHandleSize()| bytes per handle). Once all platform | |
| 167 // handles have been sent, the message data should be written next (see | |
| 168 // |GetBuffers()|). | |
| 169 void GetPlatformHandlesToSend(size_t* num_platform_handles, | |
| 170 embedder::PlatformHandle** platform_handles, | |
| 171 void** serialization_data); | |
| 172 | |
| 173 // Gets buffers to be written. These buffers will always come from the front | |
| 174 // of |message_queue_|. Once they are completely written, the front | |
| 175 // |MessageInTransit| should be popped (and destroyed); this is done in | |
| 176 // |OnWriteCompletedNoLock()|. | |
| 177 void GetBuffers(std::vector<Buffer>* buffers) const; | |
| 178 | |
| 179 private: | |
| 180 friend class RawChannel; | |
| 181 | |
| 182 const size_t serialized_platform_handle_size_; | |
| 183 | |
| 184 // TODO(vtl): When C++11 is available, switch this to a deque of | |
| 185 // |scoped_ptr|/|unique_ptr|s. | |
| 186 std::deque<MessageInTransit*> message_queue_; | |
| 187 // Platform handles are sent before the message data, but doing so may | |
| 188 // require several passes. |platform_handles_offset_| indicates the position | |
| 189 // in the first message's vector of platform handles to send next. | |
| 190 size_t platform_handles_offset_; | |
| 191 // The first message's data may have been partially sent. |data_offset_| | |
| 192 // indicates the position in the first message's data to start the next | |
| 193 // write. | |
| 194 size_t data_offset_; | |
| 195 | |
| 196 DISALLOW_COPY_AND_ASSIGN(WriteBuffer); | |
| 197 }; | |
| 198 | |
| 199 RawChannel(); | |
| 200 | |
| 201 // |result| must not be |IO_PENDING|. Must be called on the I/O thread WITHOUT | |
| 202 // |write_lock_| held. | |
| 203 void OnReadCompleted(IOResult io_result, size_t bytes_read); | |
| 204 // |result| must not be |IO_PENDING|. Must be called on the I/O thread WITHOUT | |
| 205 // |write_lock_| held. | |
| 206 void OnWriteCompleted(IOResult io_result, | |
| 207 size_t platform_handles_written, | |
| 208 size_t bytes_written); | |
| 209 | |
| 210 base::MessageLoopForIO* message_loop_for_io() { return message_loop_for_io_; } | |
| 211 base::Lock& write_lock() { return write_lock_; } | |
| 212 | |
| 213 // Should only be called on the I/O thread. | |
| 214 ReadBuffer* read_buffer() { return read_buffer_.get(); } | |
| 215 | |
| 216 // Only called under |write_lock_|. | |
| 217 WriteBuffer* write_buffer_no_lock() { | |
| 218 write_lock_.AssertAcquired(); | |
| 219 return write_buffer_.get(); | |
| 220 } | |
| 221 | |
| 222 // Adds |message| to the write message queue. Implementation subclasses may | |
| 223 // override this to add any additional "control" messages needed. This is | |
| 224 // called (on any thread) with |write_lock_| held. | |
| 225 virtual void EnqueueMessageNoLock(scoped_ptr<MessageInTransit> message); | |
| 226 | |
| 227 // Handles any control messages targeted to the |RawChannel| (or | |
| 228 // implementation subclass). Implementation subclasses may override this to | |
| 229 // handle any implementation-specific control messages, but should call | |
| 230 // |RawChannel::OnReadMessageForRawChannel()| for any remaining messages. | |
| 231 // Returns true on success and false on error (e.g., invalid control message). | |
| 232 // This is only called on the I/O thread. | |
| 233 virtual bool OnReadMessageForRawChannel( | |
| 234 const MessageInTransit::View& message_view); | |
| 235 | |
| 236 // Reads into |read_buffer()|. | |
| 237 // This class guarantees that: | |
| 238 // - the area indicated by |GetBuffer()| will stay valid until read completion | |
| 239 // (but please also see the comments for |OnShutdownNoLock()|); | |
| 240 // - a second read is not started if there is a pending read; | |
| 241 // - the method is called on the I/O thread WITHOUT |write_lock_| held. | |
| 242 // | |
| 243 // The implementing subclass must guarantee that: | |
| 244 // - |bytes_read| is untouched unless |Read()| returns |IO_SUCCEEDED|; | |
| 245 // - if the method returns |IO_PENDING|, |OnReadCompleted()| will be called on | |
| 246 // the I/O thread to report the result, unless |Shutdown()| is called. | |
| 247 virtual IOResult Read(size_t* bytes_read) = 0; | |
| 248 // Similar to |Read()|, except that the implementing subclass must also | |
| 249 // guarantee that the method doesn't succeed synchronously, i.e., it only | |
| 250 // returns |IO_FAILED_...| or |IO_PENDING|. | |
| 251 virtual IOResult ScheduleRead() = 0; | |
| 252 | |
| 253 // Called by |OnReadCompleted()| to get the platform handles associated with | |
| 254 // the given platform handle table (from a message). This should only be | |
| 255 // called when |num_platform_handles| is nonzero. Returns null if the | |
| 256 // |num_platform_handles| handles are not available. Only called on the I/O | |
| 257 // thread (without |write_lock_| held). | |
| 258 virtual embedder::ScopedPlatformHandleVectorPtr GetReadPlatformHandles( | |
| 259 size_t num_platform_handles, | |
| 260 const void* platform_handle_table) = 0; | |
| 261 | |
| 262 // Writes contents in |write_buffer_no_lock()|. | |
| 263 // This class guarantees that: | |
| 264 // - the |PlatformHandle|s given by |GetPlatformHandlesToSend()| and the | |
| 265 // buffer(s) given by |GetBuffers()| will remain valid until write | |
| 266 // completion (see also the comments for |OnShutdownNoLock()|); | |
| 267 // - a second write is not started if there is a pending write; | |
| 268 // - the method is called under |write_lock_|. | |
| 269 // | |
| 270 // The implementing subclass must guarantee that: | |
| 271 // - |platform_handles_written| and |bytes_written| are untouched unless | |
| 272 // |WriteNoLock()| returns |IO_SUCCEEDED|; | |
| 273 // - if the method returns |IO_PENDING|, |OnWriteCompleted()| will be called | |
| 274 // on the I/O thread to report the result, unless |Shutdown()| is called. | |
| 275 virtual IOResult WriteNoLock(size_t* platform_handles_written, | |
| 276 size_t* bytes_written) = 0; | |
| 277 // Similar to |WriteNoLock()|, except that the implementing subclass must also | |
| 278 // guarantee that the method doesn't succeed synchronously, i.e., it only | |
| 279 // returns |IO_FAILED_...| or |IO_PENDING|. | |
| 280 virtual IOResult ScheduleWriteNoLock() = 0; | |
| 281 | |
| 282 // Must be called on the I/O thread WITHOUT |write_lock_| held. | |
| 283 virtual bool OnInit() = 0; | |
| 284 // On shutdown, passes the ownership of the buffers to subclasses, which may | |
| 285 // want to preserve them if there are pending read/write. Must be called on | |
| 286 // the I/O thread under |write_lock_|. | |
| 287 virtual void OnShutdownNoLock(scoped_ptr<ReadBuffer> read_buffer, | |
| 288 scoped_ptr<WriteBuffer> write_buffer) = 0; | |
| 289 | |
| 290 private: | |
| 291 // Converts an |IO_FAILED_...| for a read to a |Delegate::Error|. | |
| 292 static Delegate::Error ReadIOResultToError(IOResult io_result); | |
| 293 | |
| 294 // Calls |delegate_->OnError(error)|. Must be called on the I/O thread WITHOUT | |
| 295 // |write_lock_| held. | |
| 296 void CallOnError(Delegate::Error error); | |
| 297 | |
| 298 // If |io_result| is |IO_SUCCESS|, updates the write buffer and schedules a | |
| 299 // write operation to run later if there is more to write. If |io_result| is | |
| 300 // failure or any other error occurs, cancels pending writes and returns | |
| 301 // false. Must be called under |write_lock_| and only if |write_stopped_| is | |
| 302 // false. | |
| 303 bool OnWriteCompletedNoLock(IOResult io_result, | |
| 304 size_t platform_handles_written, | |
| 305 size_t bytes_written); | |
| 306 | |
| 307 // Set in |Init()| and never changed (hence usable on any thread without | |
| 308 // locking): | |
| 309 base::MessageLoopForIO* message_loop_for_io_; | |
| 310 | |
| 311 // Only used on the I/O thread: | |
| 312 Delegate* delegate_; | |
| 313 bool read_stopped_; | |
| 314 scoped_ptr<ReadBuffer> read_buffer_; | |
| 315 | |
| 316 base::Lock write_lock_; // Protects the following members. | |
| 317 bool write_stopped_; | |
| 318 scoped_ptr<WriteBuffer> write_buffer_; | |
| 319 | |
| 320 // This is used for posting tasks from write threads to the I/O thread. It | |
| 321 // must only be accessed under |write_lock_|. The weak pointers it produces | |
| 322 // are only used/invalidated on the I/O thread. | |
| 323 base::WeakPtrFactory<RawChannel> weak_ptr_factory_; | |
| 324 | |
| 325 DISALLOW_COPY_AND_ASSIGN(RawChannel); | |
| 326 }; | |
| 327 | |
| 328 } // namespace system | |
| 329 } // namespace mojo | |
| 330 | |
| 331 #endif // MOJO_EDK_SYSTEM_RAW_CHANNEL_H_ | |
| OLD | NEW |