android分析之Binder 02

public final class ServiceManager {
    private static final String TAG = "ServiceManager";

    private static IServiceManager sServiceManager;//IserviceManager是一个接口，定义了通用（公共）方法。
    private static HashMap<String, IBinder> sCache = new HashMap<String, IBinder>();//缓存，其值是IBinder

...

    public static IBinder getService(String name) {
        try {
            IBinder service = sCache.get(name);//先从缓存中查找
            if (service != null) {
                return service;
            } else {
                return getIServiceManager().getService(name);//生成新的IBinder
            }
        } catch (RemoteException e) {
            Log.e(TAG, "error in getService", e);
        }
        return null;
    }
...

    private static IServiceManager getIServiceManager() {
        if (sServiceManager != null) {
            return sServiceManager;
        }

        // Find the service manager
        sServiceManager = ServiceManagerNative.asInterface(BinderInternal.getContextObject());//找到IServiceManager对象，并返回
        return sServiceManager;
    }

...

    /**
     * Return the global "context object" of the system.  This is usually
     * an implementation of IServiceManager, which you can use to find
     * other services.
     */
    public static final native IBinder getContextObject();//BinderInternale:调用native函数，返回IBinder对象

...

    static public IServiceManager asInterface(IBinder obj)//传入的就是上面的那个IBinder对象，记住这是Java对象
    {
        if (obj == null) {
            return null;
        }
        IServiceManager in =
            (IServiceManager)obj.queryLocalInterface(descriptor);//从IBinder对象里查找，并转换为IServiceManager对象
        if (in != null) {
            return in;
        }
        
        return new ServiceManagerProxy(obj);//如果找不到，则使用传入的IBinder对象生成一个ServiceManagePorxy对象
    }

    public ServiceManagerProxy(IBinder remote) {
        mRemote = remote;//mRemote是IBinder类型，这里将传入的IBinder对象保存在mRemote
    }

    public IBinder getService(String name) throws RemoteException {
        Parcel data = Parcel.obtain();
        Parcel reply = Parcel.obtain();
        data.writeInterfaceToken(IServiceManager.descriptor);
        data.writeString(name);
        mRemote.transact(GET_SERVICE_TRANSACTION, data, reply, 0);//最后使用IBinder的transact来传送数据
        IBinder binder = reply.readStrongBinder();
        reply.recycle();
        data.recycle();
        return binder;
    }

static jobject android_os_BinderInternal_getContextObject(JNIEnv* env, jobject clazz)
{
    sp<IBinder> b = ProcessState::self()->getContextObject(NULL);//走到这里：b为一个BpBinder
    return javaObjectForIBinder(env, b);//返回一个Java层的BinderProxy

    public native boolean transact(int code, Parcel data, Parcel reply,
            int flags) throws RemoteException;
...
static jboolean android_os_BinderProxy_transact(JNIEnv* env, jobject obj,
        jint code, jobject dataObj, jobject replyObj, jint flags) // throws RemoteException
{
    if (dataObj == NULL) {
        jniThrowNullPointerException(env, NULL);
        return JNI_FALSE;
    }

    Parcel* data = parcelForJavaObject(env, dataObj);
    if (data == NULL) {
        return JNI_FALSE;
    }
    Parcel* reply = parcelForJavaObject(env, replyObj);
    if (reply == NULL && replyObj != NULL) {
        return JNI_FALSE;
    }

    IBinder* target = (IBinder*)//将BinderProxy转换为BpBinder
        env->GetIntField(obj, gBinderProxyOffsets.mObject);
...
　　status_t err = target->transact(code, *data, reply, flags);//调用BpBinder来与更下层通信
...