android telephony 原理解析与开发指南_Android逆向pdf

<manifest xmlns:android="http://schemas.android.com/apk/res/android" 
xmlns:androidprv="http://schemas.android.com/apk/prv/res/android" 
package="com.android.phone" 
coreApp="true" 
android:sharedUserId="android.uid.phone" 
android:sharedUserLabel="@string/phoneAppLabel" >

<application android:name="PhoneApp" 
//在系统启动之时，ActivityManagerService的systemReady() 会加载所有persistent为true的应用 
android:persistent="true" 
android:label="@string/phoneAppLabel" 
android:icon="@mipmap/ic_launcher_phone" 
android:allowBackup="false" 
android:supportsRtl="true" 
android:usesCleartextTraffic="true">

    public static void makeDefaultPhone(Context context) {
        ......
        //创建DefaultPhoneNotifier对象。
        sPhoneNotifier = new DefaultPhoneNotifier();

       //根据待机模式计算出要创建Phone对象的数量
        int numPhones = TelephonyManager.getDefault().getPhoneCount();
        //创建networkMode、PhoneProxy、RIL的数组，用于存储对应的对象
        int[] networkModes = new int[numPhones];
        //Android 6.0
        //sProxyPhones = new PhoneProxy[numPhones];
      //Android N中没有了PhoneProxy，所以通过getDefaultPhone()得到的就是Phone实例
     sPhones = new Phone[numPhones]; sCommandsInterfaces = new RIL[numPhones];  for (int i = 0; i < numPhones; i++) {
            // reads the system properties and makes commandsinterface // Get preferred network type.
           networkModes[i] = RILConstants.PREFERRED_NETWORK_MODE;
            Rlog.i(LOG_TAG, "Network Mode set to " + Integer.toString(networkModes[i]));
            //创建RIL，此时的i对应的是PhoneID。
          sCommandsInterfaces[i] = new RIL(context, networkModes[i], cdmaSubscription, i);
        }
        ......
        for (int i = 0; i < numPhones; i++) {
              Phone phone = null;
              //根据不用的类型，创建不同的Phone对象
              int phoneType = TelephonyManager.getPhoneType(networkModes[i]);
              if (phoneType == PhoneConstants.PHONE_TYPE_GSM) {
                  phone = new GsmCdmaPhone(context,
                          sCommandsInterfaces[i], sPhoneNotifier, i,
                          PhoneConstants.PHONE_TYPE_GSM,
                     //Android N中新增TelephonyComponentFactory类，主要用来 //初始化CallTracker、ServiceStateTracker、DcTracker等对象
                          TelephonyComponentFactory.getInstance());
             } else if (phoneType == PhoneConstants.PHONE_TYPE_CDMA) {
                 phone = new GsmCdmaPhone(context,
                          sCommandsInterfaces[i], sPhoneNotifier, i,
                          PhoneConstants.PHONE_TYPE_CDMA_LTE,
                          TelephonyComponentFactory.getInstance());
             }
             Rlog.i(LOG_TAG, "Creating Phone with type = " + phoneType + " sub = " + i);

            sPhones[i] = phone;
        } 
        .....
        // Start monitoring after defaults have been made. // Default phone must be ready before ImsPhone is created // because ImsService might need it when it is being opened.
        for (int i = 0; i < numPhones; i++) {
         //开始监听ImsService，如果ImsService已启动，进而执行创建ImsPhone对象
            sPhones[i].startMonitoringImsService();
        }
    }

    public void onCreate() {
        if (mCM == null) {
            // Initialize the telephony framework //先创建Phone实例
            PhoneFactory.makeDefaultPhones(this);
            mCM = CallManager.getInstance();
            for (Phone phone : PhoneFactory.getPhones()) {
              //把新创建的Phone实例传递进来
                mCM.registerPhone(phone);
            }
        }
    }

 // list of registered phones, which are PhoneBase objs
    private final ArrayList<Phone> mPhones;

    public boolean registerPhone(Phone phone) {
        Phone basePhone = getPhoneBase(phone);

        if (basePhone != null && !mPhones.contains(basePhone)) {

            if (DBG) {
                Rlog.d(LOG_TAG, "registerPhone(" +
                        phone.getPhoneName() + " " + phone + ")");
            }
            if (mPhones.isEmpty()) {
                mDefaultPhone = basePhone;
            }
            //管理Phone实例
            mPhones.add(basePhone);
            mRingingCalls.add(basePhone.getRingingCall());
            mBackgroundCalls.add(basePhone.getBackgroundCall());
            mForegroundCalls.add(basePhone.getForegroundCall());
         //为Phone实例注册监听事件
            registerForPhoneStates(basePhone);
            return true;
        }
        return false;
    }
    private void registerForPhoneStates(Phone phone) {
        ......
        phone.registerForDisconnect(handler, EVENT_DISCONNECT,mRegistrantidentifier);
        phone.registerForIncomingRing(handler, EVENT_INCOMING_RING,mRegistrantidentifier);
        ......
    }

      sPhoneNotifier = new DefaultPhoneNotifier();
      sCommandsInterfaces[i] = new RIL(context, networkModes[i],
                            cdmaSubscription, i);

      phone = new GsmCdmaPhone(context,
              sCommandsInterfaces[i], sPhoneNotifier, i,
              PhoneConstants.PHONE_TYPE_GSM,
              TelephonyComponentFactory.getInstance());

public interface PhoneNotifier {

    public void notifyPhoneState(Phone sender);
    public void notifyServiceState(Phone sender);
    ...
}