Merge "Optionally have ConnectivityService kill sockets for frozen apps"
This commit is contained in:
@@ -30,6 +30,8 @@ import static android.Manifest.permission.NETWORK_SETTINGS;
|
||||
import static android.Manifest.permission.NETWORK_SETUP_WIZARD;
|
||||
import static android.Manifest.permission.NETWORK_STACK;
|
||||
import static android.Manifest.permission.PACKET_KEEPALIVE_OFFLOAD;
|
||||
import static android.app.ActivityManager.UidFrozenStateChangedCallback.UID_FROZEN_STATE_FROZEN;
|
||||
import static android.app.ActivityManager.UidFrozenStateChangedCallback.UID_FROZEN_STATE_UNFROZEN;
|
||||
import static android.app.PendingIntent.FLAG_IMMUTABLE;
|
||||
import static android.content.Intent.ACTION_PACKAGE_ADDED;
|
||||
import static android.content.Intent.ACTION_PACKAGE_REMOVED;
|
||||
@@ -148,6 +150,7 @@ import static android.net.resolv.aidl.IDnsResolverUnsolicitedEventListener.VALID
|
||||
import static android.os.Process.INVALID_UID;
|
||||
import static android.system.OsConstants.IPPROTO_TCP;
|
||||
|
||||
import static com.android.server.ConnectivityService.KEY_DESTROY_FROZEN_SOCKETS_VERSION;
|
||||
import static com.android.server.ConnectivityService.MAX_NETWORK_REQUESTS_PER_SYSTEM_UID;
|
||||
import static com.android.server.ConnectivityService.PREFERENCE_ORDER_MOBILE_DATA_PREFERERRED;
|
||||
import static com.android.server.ConnectivityService.PREFERENCE_ORDER_OEM;
|
||||
@@ -224,6 +227,8 @@ import static java.util.Arrays.asList;
|
||||
import android.Manifest;
|
||||
import android.annotation.NonNull;
|
||||
import android.annotation.Nullable;
|
||||
import android.app.ActivityManager;
|
||||
import android.app.ActivityManager.UidFrozenStateChangedCallback;
|
||||
import android.app.AlarmManager;
|
||||
import android.app.AppOpsManager;
|
||||
import android.app.BroadcastOptions;
|
||||
@@ -609,6 +614,7 @@ public class ConnectivityServiceTest {
|
||||
@Mock CarrierPrivilegeAuthenticator mCarrierPrivilegeAuthenticator;
|
||||
@Mock TetheringManager mTetheringManager;
|
||||
@Mock BroadcastOptionsShim mBroadcastOptionsShim;
|
||||
@Mock ActivityManager mActivityManager;
|
||||
|
||||
// BatteryStatsManager is final and cannot be mocked with regular mockito, so just mock the
|
||||
// underlying binder calls.
|
||||
@@ -732,6 +738,7 @@ public class ConnectivityServiceTest {
|
||||
if (Context.BATTERY_STATS_SERVICE.equals(name)) return mBatteryStatsManager;
|
||||
if (Context.PAC_PROXY_SERVICE.equals(name)) return mPacProxyManager;
|
||||
if (Context.TETHERING_SERVICE.equals(name)) return mTetheringManager;
|
||||
if (Context.ACTIVITY_SERVICE.equals(name)) return mActivityManager;
|
||||
return super.getSystemService(name);
|
||||
}
|
||||
|
||||
@@ -2081,6 +2088,8 @@ public class ConnectivityServiceTest {
|
||||
switch (name) {
|
||||
case ConnectivityFlags.NO_REMATCH_ALL_REQUESTS_ON_REGISTER:
|
||||
return true;
|
||||
case KEY_DESTROY_FROZEN_SOCKETS_VERSION:
|
||||
return true;
|
||||
default:
|
||||
return super.isFeatureEnabled(context, name);
|
||||
}
|
||||
@@ -17833,4 +17842,35 @@ public class ConnectivityServiceTest {
|
||||
verify(mMockNetd, never()).wakeupAddInterface(eq(ethernetIface), anyString(), anyInt(),
|
||||
anyInt());
|
||||
}
|
||||
|
||||
private static final int TEST_FROZEN_UID = 1000;
|
||||
private static final int TEST_UNFROZEN_UID = 2000;
|
||||
|
||||
/**
|
||||
* Send a UidFrozenStateChanged message to ConnectivityService. Verify that only the frozen UID
|
||||
* gets passed to socketDestroy().
|
||||
*/
|
||||
@Test
|
||||
@IgnoreUpTo(Build.VERSION_CODES.TIRAMISU)
|
||||
public void testFrozenUidSocketDestroy() throws Exception {
|
||||
ArgumentCaptor<UidFrozenStateChangedCallback> callbackArg =
|
||||
ArgumentCaptor.forClass(UidFrozenStateChangedCallback.class);
|
||||
|
||||
verify(mActivityManager).registerUidFrozenStateChangedCallback(any(),
|
||||
callbackArg.capture());
|
||||
|
||||
final int[] uids = {TEST_FROZEN_UID, TEST_UNFROZEN_UID};
|
||||
final int[] frozenStates = {UID_FROZEN_STATE_FROZEN, UID_FROZEN_STATE_UNFROZEN};
|
||||
|
||||
callbackArg.getValue().onUidFrozenStateChanged(uids, frozenStates);
|
||||
|
||||
waitForIdle();
|
||||
|
||||
final Set<Integer> exemptUids = new ArraySet();
|
||||
final UidRange frozenUidRange = new UidRange(TEST_FROZEN_UID, TEST_FROZEN_UID);
|
||||
final Set<UidRange> ranges = Collections.singleton(frozenUidRange);
|
||||
|
||||
verify(mDeps).destroyLiveTcpSockets(eq(UidRange.toIntRanges(ranges)),
|
||||
eq(exemptUids));
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user