| OLD | NEW |
| (Empty) |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "mojo/edk/system/raw_channel.h" | |
| 6 | |
| 7 #include <errno.h> | |
| 8 #include <sys/uio.h> | |
| 9 #include <unistd.h> | |
| 10 | |
| 11 #include <algorithm> | |
| 12 #include <deque> | |
| 13 | |
| 14 #include "base/bind.h" | |
| 15 #include "base/location.h" | |
| 16 #include "base/logging.h" | |
| 17 #include "base/macros.h" | |
| 18 #include "base/memory/scoped_ptr.h" | |
| 19 #include "base/memory/weak_ptr.h" | |
| 20 #include "base/message_loop/message_loop.h" | |
| 21 #include "base/synchronization/lock.h" | |
| 22 #include "mojo/edk/embedder/platform_channel_utils_posix.h" | |
| 23 #include "mojo/edk/embedder/platform_handle.h" | |
| 24 #include "mojo/edk/embedder/platform_handle_vector.h" | |
| 25 #include "mojo/edk/system/transport_data.h" | |
| 26 | |
| 27 namespace mojo { | |
| 28 namespace system { | |
| 29 | |
| 30 namespace { | |
| 31 | |
| 32 class RawChannelPosix : public RawChannel, | |
| 33 public base::MessageLoopForIO::Watcher { | |
| 34 public: | |
| 35 explicit RawChannelPosix(embedder::ScopedPlatformHandle handle); | |
| 36 ~RawChannelPosix() override; | |
| 37 | |
| 38 // |RawChannel| public methods: | |
| 39 size_t GetSerializedPlatformHandleSize() const override; | |
| 40 | |
| 41 private: | |
| 42 // |RawChannel| protected methods: | |
| 43 // Actually override this so that we can send multiple messages with (only) | |
| 44 // FDs if necessary. | |
| 45 void EnqueueMessageNoLock(scoped_ptr<MessageInTransit> message) override; | |
| 46 // Override this to handle those extra FD-only messages. | |
| 47 bool OnReadMessageForRawChannel( | |
| 48 const MessageInTransit::View& message_view) override; | |
| 49 IOResult Read(size_t* bytes_read) override; | |
| 50 IOResult ScheduleRead() override; | |
| 51 embedder::ScopedPlatformHandleVectorPtr GetReadPlatformHandles( | |
| 52 size_t num_platform_handles, | |
| 53 const void* platform_handle_table) override; | |
| 54 IOResult WriteNoLock(size_t* platform_handles_written, | |
| 55 size_t* bytes_written) override; | |
| 56 IOResult ScheduleWriteNoLock() override; | |
| 57 void OnInit() override; | |
| 58 void OnShutdownNoLock(scoped_ptr<ReadBuffer> read_buffer, | |
| 59 scoped_ptr<WriteBuffer> write_buffer) override; | |
| 60 | |
| 61 // |base::MessageLoopForIO::Watcher| implementation: | |
| 62 void OnFileCanReadWithoutBlocking(int fd) override; | |
| 63 void OnFileCanWriteWithoutBlocking(int fd) override; | |
| 64 | |
| 65 // Implements most of |Read()| (except for a bit of clean-up): | |
| 66 IOResult ReadImpl(size_t* bytes_read); | |
| 67 | |
| 68 // Watches for |fd_| to become writable. Must be called on the I/O thread. | |
| 69 void WaitToWrite(); | |
| 70 | |
| 71 embedder::ScopedPlatformHandle fd_; | |
| 72 | |
| 73 // The following members are only used on the I/O thread: | |
| 74 scoped_ptr<base::MessageLoopForIO::FileDescriptorWatcher> read_watcher_; | |
| 75 scoped_ptr<base::MessageLoopForIO::FileDescriptorWatcher> write_watcher_; | |
| 76 | |
| 77 bool pending_read_; | |
| 78 | |
| 79 std::deque<embedder::PlatformHandle> read_platform_handles_; | |
| 80 | |
| 81 // The following members are used on multiple threads and protected by | |
| 82 // |write_lock()|: | |
| 83 bool pending_write_; | |
| 84 | |
| 85 // This is used for posting tasks from write threads to the I/O thread. It | |
| 86 // must only be accessed under |write_lock_|. The weak pointers it produces | |
| 87 // are only used/invalidated on the I/O thread. | |
| 88 base::WeakPtrFactory<RawChannelPosix> weak_ptr_factory_; | |
| 89 | |
| 90 DISALLOW_COPY_AND_ASSIGN(RawChannelPosix); | |
| 91 }; | |
| 92 | |
| 93 RawChannelPosix::RawChannelPosix(embedder::ScopedPlatformHandle handle) | |
| 94 : fd_(handle.Pass()), | |
| 95 pending_read_(false), | |
| 96 pending_write_(false), | |
| 97 weak_ptr_factory_(this) { | |
| 98 DCHECK(fd_.is_valid()); | |
| 99 } | |
| 100 | |
| 101 RawChannelPosix::~RawChannelPosix() { | |
| 102 DCHECK(!pending_read_); | |
| 103 DCHECK(!pending_write_); | |
| 104 | |
| 105 // No need to take the |write_lock()| here -- if there are still weak pointers | |
| 106 // outstanding, then we're hosed anyway (since we wouldn't be able to | |
| 107 // invalidate them cleanly, since we might not be on the I/O thread). | |
| 108 DCHECK(!weak_ptr_factory_.HasWeakPtrs()); | |
| 109 | |
| 110 // These must have been shut down/destroyed on the I/O thread. | |
| 111 DCHECK(!read_watcher_); | |
| 112 DCHECK(!write_watcher_); | |
| 113 | |
| 114 embedder::CloseAllPlatformHandles(&read_platform_handles_); | |
| 115 } | |
| 116 | |
| 117 size_t RawChannelPosix::GetSerializedPlatformHandleSize() const { | |
| 118 // We don't actually need any space on POSIX (since we just send FDs). | |
| 119 return 0; | |
| 120 } | |
| 121 | |
| 122 void RawChannelPosix::EnqueueMessageNoLock( | |
| 123 scoped_ptr<MessageInTransit> message) { | |
| 124 if (message->transport_data()) { | |
| 125 embedder::PlatformHandleVector* const platform_handles = | |
| 126 message->transport_data()->platform_handles(); | |
| 127 if (platform_handles && | |
| 128 platform_handles->size() > embedder::kPlatformChannelMaxNumHandles) { | |
| 129 // We can't attach all the FDs to a single message, so we have to "split" | |
| 130 // the message. Send as many control messages as needed first with FDs | |
| 131 // attached (and no data). | |
| 132 size_t i = 0; | |
| 133 for (; platform_handles->size() - i > | |
| 134 embedder::kPlatformChannelMaxNumHandles; | |
| 135 i += embedder::kPlatformChannelMaxNumHandles) { | |
| 136 scoped_ptr<MessageInTransit> fd_message(new MessageInTransit( | |
| 137 MessageInTransit::kTypeRawChannel, | |
| 138 MessageInTransit::kSubtypeRawChannelPosixExtraPlatformHandles, 0, | |
| 139 nullptr)); | |
| 140 embedder::ScopedPlatformHandleVectorPtr fds( | |
| 141 new embedder::PlatformHandleVector( | |
| 142 platform_handles->begin() + i, | |
| 143 platform_handles->begin() + i + | |
| 144 embedder::kPlatformChannelMaxNumHandles)); | |
| 145 fd_message->SetTransportData( | |
| 146 make_scoped_ptr(new TransportData(fds.Pass()))); | |
| 147 RawChannel::EnqueueMessageNoLock(fd_message.Pass()); | |
| 148 } | |
| 149 | |
| 150 // Remove the handles that we "moved" into the other messages. | |
| 151 platform_handles->erase(platform_handles->begin(), | |
| 152 platform_handles->begin() + i); | |
| 153 } | |
| 154 } | |
| 155 | |
| 156 RawChannel::EnqueueMessageNoLock(message.Pass()); | |
| 157 } | |
| 158 | |
| 159 bool RawChannelPosix::OnReadMessageForRawChannel( | |
| 160 const MessageInTransit::View& message_view) { | |
| 161 DCHECK_EQ(message_view.type(), MessageInTransit::kTypeRawChannel); | |
| 162 | |
| 163 if (message_view.subtype() == | |
| 164 MessageInTransit::kSubtypeRawChannelPosixExtraPlatformHandles) { | |
| 165 // We don't need to do anything. |RawChannel| won't extract the platform | |
| 166 // handles, and they'll be accumulated in |Read()|. | |
| 167 return true; | |
| 168 } | |
| 169 | |
| 170 return RawChannel::OnReadMessageForRawChannel(message_view); | |
| 171 } | |
| 172 | |
| 173 RawChannel::IOResult RawChannelPosix::Read(size_t* bytes_read) { | |
| 174 DCHECK_EQ(base::MessageLoop::current(), message_loop_for_io()); | |
| 175 DCHECK(!pending_read_); | |
| 176 | |
| 177 IOResult rv = ReadImpl(bytes_read); | |
| 178 if (rv != IO_SUCCEEDED && rv != IO_PENDING) { | |
| 179 // Make sure that |OnFileCanReadWithoutBlocking()| won't be called again. | |
| 180 read_watcher_.reset(); | |
| 181 } | |
| 182 return rv; | |
| 183 } | |
| 184 | |
| 185 RawChannel::IOResult RawChannelPosix::ScheduleRead() { | |
| 186 DCHECK_EQ(base::MessageLoop::current(), message_loop_for_io()); | |
| 187 DCHECK(!pending_read_); | |
| 188 | |
| 189 pending_read_ = true; | |
| 190 | |
| 191 return IO_PENDING; | |
| 192 } | |
| 193 | |
| 194 embedder::ScopedPlatformHandleVectorPtr RawChannelPosix::GetReadPlatformHandles( | |
| 195 size_t num_platform_handles, | |
| 196 const void* /*platform_handle_table*/) { | |
| 197 DCHECK_GT(num_platform_handles, 0u); | |
| 198 | |
| 199 if (read_platform_handles_.size() < num_platform_handles) { | |
| 200 embedder::CloseAllPlatformHandles(&read_platform_handles_); | |
| 201 read_platform_handles_.clear(); | |
| 202 return embedder::ScopedPlatformHandleVectorPtr(); | |
| 203 } | |
| 204 | |
| 205 embedder::ScopedPlatformHandleVectorPtr rv( | |
| 206 new embedder::PlatformHandleVector(num_platform_handles)); | |
| 207 rv->assign(read_platform_handles_.begin(), | |
| 208 read_platform_handles_.begin() + num_platform_handles); | |
| 209 read_platform_handles_.erase( | |
| 210 read_platform_handles_.begin(), | |
| 211 read_platform_handles_.begin() + num_platform_handles); | |
| 212 return rv.Pass(); | |
| 213 } | |
| 214 | |
| 215 RawChannel::IOResult RawChannelPosix::WriteNoLock( | |
| 216 size_t* platform_handles_written, | |
| 217 size_t* bytes_written) { | |
| 218 write_lock().AssertAcquired(); | |
| 219 | |
| 220 DCHECK(!pending_write_); | |
| 221 | |
| 222 size_t num_platform_handles = 0; | |
| 223 ssize_t write_result; | |
| 224 if (write_buffer_no_lock()->HavePlatformHandlesToSend()) { | |
| 225 embedder::PlatformHandle* platform_handles; | |
| 226 void* serialization_data; // Actually unused. | |
| 227 write_buffer_no_lock()->GetPlatformHandlesToSend( | |
| 228 &num_platform_handles, &platform_handles, &serialization_data); | |
| 229 DCHECK_GT(num_platform_handles, 0u); | |
| 230 DCHECK_LE(num_platform_handles, embedder::kPlatformChannelMaxNumHandles); | |
| 231 DCHECK(platform_handles); | |
| 232 | |
| 233 // TODO(vtl): Reduce code duplication. (This is duplicated from below.) | |
| 234 std::vector<WriteBuffer::Buffer> buffers; | |
| 235 write_buffer_no_lock()->GetBuffers(&buffers); | |
| 236 DCHECK(!buffers.empty()); | |
| 237 const size_t kMaxBufferCount = 10; | |
| 238 iovec iov[kMaxBufferCount]; | |
| 239 size_t buffer_count = std::min(buffers.size(), kMaxBufferCount); | |
| 240 for (size_t i = 0; i < buffer_count; ++i) { | |
| 241 iov[i].iov_base = const_cast<char*>(buffers[i].addr); | |
| 242 iov[i].iov_len = buffers[i].size; | |
| 243 } | |
| 244 | |
| 245 write_result = embedder::PlatformChannelSendmsgWithHandles( | |
| 246 fd_.get(), iov, buffer_count, platform_handles, num_platform_handles); | |
| 247 for (size_t i = 0; i < num_platform_handles; i++) | |
| 248 platform_handles[i].CloseIfNecessary(); | |
| 249 } else { | |
| 250 std::vector<WriteBuffer::Buffer> buffers; | |
| 251 write_buffer_no_lock()->GetBuffers(&buffers); | |
| 252 DCHECK(!buffers.empty()); | |
| 253 | |
| 254 if (buffers.size() == 1) { | |
| 255 write_result = embedder::PlatformChannelWrite(fd_.get(), buffers[0].addr, | |
| 256 buffers[0].size); | |
| 257 } else { | |
| 258 const size_t kMaxBufferCount = 10; | |
| 259 iovec iov[kMaxBufferCount]; | |
| 260 size_t buffer_count = std::min(buffers.size(), kMaxBufferCount); | |
| 261 for (size_t i = 0; i < buffer_count; ++i) { | |
| 262 iov[i].iov_base = const_cast<char*>(buffers[i].addr); | |
| 263 iov[i].iov_len = buffers[i].size; | |
| 264 } | |
| 265 | |
| 266 write_result = | |
| 267 embedder::PlatformChannelWritev(fd_.get(), iov, buffer_count); | |
| 268 } | |
| 269 } | |
| 270 | |
| 271 if (write_result >= 0) { | |
| 272 *platform_handles_written = num_platform_handles; | |
| 273 *bytes_written = static_cast<size_t>(write_result); | |
| 274 return IO_SUCCEEDED; | |
| 275 } | |
| 276 | |
| 277 if (errno == EPIPE) | |
| 278 return IO_FAILED_SHUTDOWN; | |
| 279 | |
| 280 if (errno != EAGAIN && errno != EWOULDBLOCK) { | |
| 281 PLOG(WARNING) << "sendmsg/write/writev"; | |
| 282 return IO_FAILED_UNKNOWN; | |
| 283 } | |
| 284 | |
| 285 return ScheduleWriteNoLock(); | |
| 286 } | |
| 287 | |
| 288 RawChannel::IOResult RawChannelPosix::ScheduleWriteNoLock() { | |
| 289 write_lock().AssertAcquired(); | |
| 290 | |
| 291 DCHECK(!pending_write_); | |
| 292 | |
| 293 // Set up to wait for the FD to become writable. | |
| 294 // If we're not on the I/O thread, we have to post a task to do this. | |
| 295 if (base::MessageLoop::current() != message_loop_for_io()) { | |
| 296 message_loop_for_io()->PostTask(FROM_HERE, | |
| 297 base::Bind(&RawChannelPosix::WaitToWrite, | |
| 298 weak_ptr_factory_.GetWeakPtr())); | |
| 299 pending_write_ = true; | |
| 300 return IO_PENDING; | |
| 301 } | |
| 302 | |
| 303 if (message_loop_for_io()->WatchFileDescriptor( | |
| 304 fd_.get().fd, false, base::MessageLoopForIO::WATCH_WRITE, | |
| 305 write_watcher_.get(), this)) { | |
| 306 pending_write_ = true; | |
| 307 return IO_PENDING; | |
| 308 } | |
| 309 | |
| 310 return IO_FAILED_UNKNOWN; | |
| 311 } | |
| 312 | |
| 313 void RawChannelPosix::OnInit() { | |
| 314 DCHECK_EQ(base::MessageLoop::current(), message_loop_for_io()); | |
| 315 | |
| 316 DCHECK(!read_watcher_); | |
| 317 read_watcher_.reset(new base::MessageLoopForIO::FileDescriptorWatcher()); | |
| 318 DCHECK(!write_watcher_); | |
| 319 write_watcher_.reset(new base::MessageLoopForIO::FileDescriptorWatcher()); | |
| 320 | |
| 321 // I don't know how this can fail (unless |fd_| is bad, in which case it's a | |
| 322 // bug in our code). I also don't know if |WatchFileDescriptor()| actually | |
| 323 // fails cleanly. | |
| 324 CHECK(message_loop_for_io()->WatchFileDescriptor( | |
| 325 fd_.get().fd, true, base::MessageLoopForIO::WATCH_READ, | |
| 326 read_watcher_.get(), this)); | |
| 327 } | |
| 328 | |
| 329 void RawChannelPosix::OnShutdownNoLock( | |
| 330 scoped_ptr<ReadBuffer> /*read_buffer*/, | |
| 331 scoped_ptr<WriteBuffer> /*write_buffer*/) { | |
| 332 DCHECK_EQ(base::MessageLoop::current(), message_loop_for_io()); | |
| 333 write_lock().AssertAcquired(); | |
| 334 | |
| 335 read_watcher_.reset(); // This will stop watching (if necessary). | |
| 336 write_watcher_.reset(); // This will stop watching (if necessary). | |
| 337 | |
| 338 pending_read_ = false; | |
| 339 pending_write_ = false; | |
| 340 | |
| 341 DCHECK(fd_.is_valid()); | |
| 342 fd_.reset(); | |
| 343 | |
| 344 weak_ptr_factory_.InvalidateWeakPtrs(); | |
| 345 } | |
| 346 | |
| 347 void RawChannelPosix::OnFileCanReadWithoutBlocking(int fd) { | |
| 348 DCHECK_EQ(fd, fd_.get().fd); | |
| 349 DCHECK_EQ(base::MessageLoop::current(), message_loop_for_io()); | |
| 350 | |
| 351 if (!pending_read_) { | |
| 352 NOTREACHED(); | |
| 353 return; | |
| 354 } | |
| 355 | |
| 356 pending_read_ = false; | |
| 357 size_t bytes_read = 0; | |
| 358 IOResult io_result = Read(&bytes_read); | |
| 359 if (io_result != IO_PENDING) | |
| 360 OnReadCompleted(io_result, bytes_read); | |
| 361 | |
| 362 // On failure, |read_watcher_| must have been reset; on success, | |
| 363 // we assume that |OnReadCompleted()| always schedules another read. | |
| 364 // Otherwise, we could end up spinning -- getting | |
| 365 // |OnFileCanReadWithoutBlocking()| again and again but not doing any actual | |
| 366 // read. | |
| 367 // TODO(yzshen): An alternative is to stop watching if RawChannel doesn't | |
| 368 // schedule a new read. But that code won't be reached under the current | |
| 369 // RawChannel implementation. | |
| 370 DCHECK(!read_watcher_ || pending_read_); | |
| 371 } | |
| 372 | |
| 373 void RawChannelPosix::OnFileCanWriteWithoutBlocking(int fd) { | |
| 374 DCHECK_EQ(fd, fd_.get().fd); | |
| 375 DCHECK_EQ(base::MessageLoop::current(), message_loop_for_io()); | |
| 376 | |
| 377 IOResult io_result; | |
| 378 size_t platform_handles_written = 0; | |
| 379 size_t bytes_written = 0; | |
| 380 { | |
| 381 base::AutoLock locker(write_lock()); | |
| 382 | |
| 383 DCHECK(pending_write_); | |
| 384 | |
| 385 pending_write_ = false; | |
| 386 io_result = WriteNoLock(&platform_handles_written, &bytes_written); | |
| 387 } | |
| 388 | |
| 389 if (io_result != IO_PENDING) | |
| 390 OnWriteCompleted(io_result, platform_handles_written, bytes_written); | |
| 391 } | |
| 392 | |
| 393 RawChannel::IOResult RawChannelPosix::ReadImpl(size_t* bytes_read) { | |
| 394 char* buffer = nullptr; | |
| 395 size_t bytes_to_read = 0; | |
| 396 read_buffer()->GetBuffer(&buffer, &bytes_to_read); | |
| 397 | |
| 398 size_t old_num_platform_handles = read_platform_handles_.size(); | |
| 399 ssize_t read_result = embedder::PlatformChannelRecvmsg( | |
| 400 fd_.get(), buffer, bytes_to_read, &read_platform_handles_); | |
| 401 if (read_platform_handles_.size() > old_num_platform_handles) { | |
| 402 DCHECK_LE(read_platform_handles_.size() - old_num_platform_handles, | |
| 403 embedder::kPlatformChannelMaxNumHandles); | |
| 404 | |
| 405 // We should never accumulate more than |TransportData::kMaxPlatformHandles | |
| 406 // + embedder::kPlatformChannelMaxNumHandles| handles. (The latter part is | |
| 407 // possible because we could have accumulated all the handles for a message, | |
| 408 // then received the message data plus the first set of handles for the next | |
| 409 // message in the subsequent |recvmsg()|.) | |
| 410 if (read_platform_handles_.size() > | |
| 411 (TransportData::GetMaxPlatformHandles() + | |
| 412 embedder::kPlatformChannelMaxNumHandles)) { | |
| 413 LOG(ERROR) << "Received too many platform handles"; | |
| 414 embedder::CloseAllPlatformHandles(&read_platform_handles_); | |
| 415 read_platform_handles_.clear(); | |
| 416 return IO_FAILED_UNKNOWN; | |
| 417 } | |
| 418 } | |
| 419 | |
| 420 if (read_result > 0) { | |
| 421 *bytes_read = static_cast<size_t>(read_result); | |
| 422 return IO_SUCCEEDED; | |
| 423 } | |
| 424 | |
| 425 // |read_result == 0| means "end of file". | |
| 426 if (read_result == 0) | |
| 427 return IO_FAILED_SHUTDOWN; | |
| 428 | |
| 429 if (errno == EAGAIN || errno == EWOULDBLOCK) | |
| 430 return ScheduleRead(); | |
| 431 | |
| 432 if (errno == ECONNRESET) | |
| 433 return IO_FAILED_BROKEN; | |
| 434 | |
| 435 PLOG(WARNING) << "recvmsg"; | |
| 436 return IO_FAILED_UNKNOWN; | |
| 437 } | |
| 438 | |
| 439 void RawChannelPosix::WaitToWrite() { | |
| 440 DCHECK_EQ(base::MessageLoop::current(), message_loop_for_io()); | |
| 441 | |
| 442 DCHECK(write_watcher_); | |
| 443 | |
| 444 if (!message_loop_for_io()->WatchFileDescriptor( | |
| 445 fd_.get().fd, false, base::MessageLoopForIO::WATCH_WRITE, | |
| 446 write_watcher_.get(), this)) { | |
| 447 { | |
| 448 base::AutoLock locker(write_lock()); | |
| 449 | |
| 450 DCHECK(pending_write_); | |
| 451 pending_write_ = false; | |
| 452 } | |
| 453 OnWriteCompleted(IO_FAILED_UNKNOWN, 0, 0); | |
| 454 } | |
| 455 } | |
| 456 | |
| 457 } // namespace | |
| 458 | |
| 459 // ----------------------------------------------------------------------------- | |
| 460 | |
| 461 // Static factory method declared in raw_channel.h. | |
| 462 // static | |
| 463 scoped_ptr<RawChannel> RawChannel::Create( | |
| 464 embedder::ScopedPlatformHandle handle) { | |
| 465 return make_scoped_ptr(new RawChannelPosix(handle.Pass())); | |
| 466 } | |
| 467 | |
| 468 } // namespace system | |
| 469 } // namespace mojo | |
| OLD | NEW |