弹出SD卡导致的重启问题分析

2018-10-10

 

在Android8.0上，安装SD卡，设置为内部存储，然后把安装的应用move到SD卡上，打开应用，然后在setting里弹出（reject）SD卡，会发生重启。

log

01-01 21:04:55.321858 1050 1081 D PackageManager: Unloaded packages [ApplicationInfo{7df5ec0 com.tencent.mm} ]

 01-01 21:04:55.322845 1050 1067 I ActivityManager: Force stopping com.tencent.mm appid=10179 user=-1: unloadPrivatePackagesInner

 01-01 21:04:55.322844 1050 1068 W Looper : Dispatch took 299ms on android.ui, h=Handler (com.android.server.am.ActivityManagerService$UiHandler) {a45381f} cb=null msg=30

 01-01 21:04:55.323047 1050 1067 I ActivityManager: Killing 9970:com.tencent.mm:push/u0a179 (adj 500): stop com.tencent.mm

 01-01 21:04:55.324681 1050 1067 W ActivityManager: Scheduling restart of crashed service com.tencent.mm/.booter.CoreService in 1000ms

 01-01 21:04:55.328698 1050 1067 I ActivityManager: Killing 9891:com.tencent.mm/u0a179 (adj 700): stop com.tencent.mm

 01-01 21:04:55.329688 448 452 E ProcessKiller: Process system_server (1050) has open file /mnt/expand/fe412b2c-f199-4b78-984e-e33272b9181e/app/com.tencent.mm-44r-mWZ0V21gx7ExIq1UGA==/base.apk

 01-01 21:04:55.329822 448 452 W ProcessKiller: Sending Interrupt to process 1050

 01-01 21:04:55.475353 448 452 E ProcessKiller: Process com.android.nfc (2032) has open file /mnt/expand/fe412b2c-f199-4b78-984e-e33272b9181e/app/com.tencent.mm-44r-mWZ0V21gx7ExIq1UGA==/base.apk

 01-01 21:04:55.475409 448 452 W ProcessKiller: Sending Interrupt to process 2032

 01-01 21:04:55.535982 448 452 E ProcessKiller: Process com.android.launcher3 (2137) has open file /mnt/expand/fe412b2c-f199-4b78-984e-e33272b9181e/app/com.tencent.mm-44r-mWZ0V21gx7ExIq1UGA==/base.apk

 01-01 21:04:55.536086 448 452 W ProcessKiller: Sending Interrupt to process 2137

 

在KillProcessesUsingPath里加sleep，临时解决重启问题

 

status_t KillProcessesUsingPath(const std::string& path) {

    const char* cpath = path.c_str();

SLOGD("====vold KillProcessesUsingPath called, path=%s", cpath);

if (cpath != NULL && strstr(cpath, "/mnt/expand") != NULL)

{

SLOGD("====sleep ");

sleep(3);

}

    if (Process::killProcessesWithOpenFiles(cpath, SIGINT) == 0) {

        return OK;

    }

    sleep(5);

 

 

01-01 16:41:20.982   435   439 D VoldCmdListener: volume unmount private:179,130

01-01 16:41:20.982   435   439 D Vold2   : ====vold KillProcessesUsingPath called

 

 

01-01 16:41:20.992  1037  1071 D PackageManager: deletePackageLI: com.tencent.mm user null

01-01 16:41:20.992  1037  1071 D PackageManager: Removing non-system package: com.tencent.mm

01-01 16:41:20.992  1037  1071 D PackageManager: removePackageDataLI: PackageSetting{bf4cb1 com.tencent.mm/10108}

 

01-01 16:41:21.143  1037  1057 D ActivityManager: ===713, forceStopPackageLocked called

01-01 16:41:21.143  1037  1057 I ActivityManager: Force stopping com.tencent.mm appid=10108 user=-1: unloadPrivatePackagesInner

01-01 16:41:21.143  1037  1057 I ActivityManager: Killing 7828:com.tencent.mm:push/u0a108 (adj 500): stop com.tencent.mm

 

 

01-01 16:41:21.714  1037  1045 W asset   : ===713 Destroying SharedZip 0x79814ff260 /mnt/expand/819873b5-dbc1-4ad2-8448-c4213d998b8a/app/com.tencent.mm-nF1YCsQ45suvWQdwOu_8GQ==/base.apk

01-01 16:41:21.714  1037  1045 W asset   : ===713 Closed '/mnt/expand/819873b5-dbc1-4ad2-8448-c4213d998b8a/app/com.tencent.mm-nF1YCsQ45suvWQdwOu_8GQ==/base.apk'

 

 

01-01 16:41:25.983   435   439 I ProcessKiller: killProcessesWithOpenFiles ++, path=/mnt/expand/819873b5-dbc1-4ad2-8448-c4213d998b8a, signal=2

01-01 16:41:26.884   435   439 E ProcessKiller: Process com.android.nfc (7490) has open file /mnt/expand/819873b5-dbc1-4ad2-8448-c4213d998b8a/app/com.tencent.mm-nF1YCsQ45suvWQdwOu_8GQ==/base.apk

01-01 16:41:26.884   435   439 W ProcessKiller: Sending Interrupt to process 7490

01-01 16:41:26.897   435   439 I ProcessKiller: killProcessesWithOpenFiles --, path=/mnt/expand/819873b5-dbc1-4ad2-8448-c4213d998b8a, signal=2

 

reject的处理

/packages/apps/Settings/src/com/android/settings/deviceinfo/PrivateVolumeUnmount.java

 

64    private final OnClickListener mConfirmListener = new OnClickListener() {

65        @Override

66        public void onClick(View v) {

67            new UnmountTask(getActivity(), mVolume).execute();

68            getActivity().finish();

69        }

70    };

 

 

frameworks/base$ vi ./services/core/java/com/android/server/StorageManagerService.java

unmount(

1777    public void unmount(String volId) {

1778        enforcePermission(android.Manifest.permission.MOUNT_UNMOUNT_FILESYSTEMS);

1779        waitForReady();

1780

1781        final VolumeInfo vol = findVolumeByIdOrThrow(volId);

1782

1783        // TODO: expand PMS to know about multiple volumes

1784        if (vol.isPrimaryPhysical()) {

1785            final long ident = Binder.clearCallingIdentity();

1786            try {

1787                synchronized (mUnmountLock) {

1788                    mUnmountSignal = new CountDownLatch(1);

1789                    mPms.updateExternalMediaStatus(false, true);

1790                    waitForLatch(mUnmountSignal, "mUnmountSignal");

1791                    mUnmountSignal = null;

1792                }

1793            } finally {

1794                Binder.restoreCallingIdentity(ident);

1795            }

1796        }

1797

1798        try {

1799            mConnector.execute("volume", "unmount", vol.id);

1800        } catch (NativeDaemonConnectorException e) {

1801            throw e.rethrowAsParcelableException();

1802        }

1803    }

 

 

frameworks/base$ vi ./services/core/java/com/android/server/pm/PackageManagerService.java

 

处理流程有问题，

进行了unmount操作后，vold会执行KillProcessesUsingPath进行kill操作

然后

01-01 12:10:44.910  1037  1201 D VoldConnector: RCV <- {651 private:179,130 5}

01-01 12:10:44.910  1037  1062 D StorageManagerService: VOLUME_STATE_CHANGED

01-01 12:10:44.911  1037  1201 D VoldConnector: RCV <- {651 emulated:179,130 5}

vold向StorageManagerService发送信号，调用起PMS的unloadPrivatePackagesInner方法，进行卸载清理操作

 

这个执行顺序有问题，PMS的卸载操作还没有完成，KillProcessesUsingPath会把system_server进程kill掉，导致了重启

 

可以在unmount操作里执行

               mPms.updateExternalMediaStatus(false, true);

 

后再调用      mConnector.execute("volume", "unmount", vol.id);