From b9046bddf157a6187d3efc5e8bc73f5d5a3ee310 Mon Sep 17 00:00:00 2001
From: Adithya R <gh0strider.2k18.reborn@gmail.com>
Date: Thu, 22 Jun 2023 10:49:31 +0530
Subject: [PATCH] dubai: Disable only N78 5G SA band for front camera

We don't need to disable 5G entirely during front camera usage, because
apparently only N78 band in SA 5G (Jio) is affected. Lower bands, such
as N28, does not break front camera so let's just disable the offending
band via RIL OEM commands when front camera is active.

Reversed the band editing mechanism from stock qcom-moto-telephony-ext.
Inspired by https://github.com/Chris-kona-A12/device_oneplus_sm8250-common/commit/70eebccf64a2cc88c74931343d07589f4b2f515f

Change-Id: I6ccb247a5d1b1521e1828304f5570269d9e3f221
---
 camera/Android.bp                             |   5 +-
 camera/AndroidManifest.xml                    |   1 +
 .../DubaiCameraService.java                   |  58 +++---
 .../dubaicameraservice/QcRilMsgUtils.java     | 168 ++++++++++++++++++
 .../qcrilmsgtunnel/IQcrilMsgTunnel.aidl       |  11 ++
 5 files changed, 215 insertions(+), 28 deletions(-)
 create mode 100644 camera/src/com/arrow/dubaicameraservice/QcRilMsgUtils.java
 create mode 100644 camera/src/com/qualcomm/qcrilmsgtunnel/IQcrilMsgTunnel.aidl

diff --git a/camera/Android.bp b/camera/Android.bp
index 5ea1559..7d55c11 100644
--- a/camera/Android.bp
+++ b/camera/Android.bp
@@ -6,7 +6,10 @@
 
 android_app {
     name: "DubaiCameraService",
-    srcs: ["src/**/*.java"],
+    srcs: [
+        "src/**/*.java",
+        "src/**/*.aidl",
+    ],
     certificate: "platform",
     platform_apis: true,
     privileged: true,
diff --git a/camera/AndroidManifest.xml b/camera/AndroidManifest.xml
index 26526e5..f524ec1 100644
--- a/camera/AndroidManifest.xml
+++ b/camera/AndroidManifest.xml
@@ -10,6 +10,7 @@
     <uses-permission android:name="android.permission.RECEIVE_BOOT_COMPLETED" />
     <uses-permission android:name="android.permission.READ_PRIVILEGED_PHONE_STATE" />
     <uses-permission android:name="android.permission.MODIFY_PHONE_STATE" />
+    <uses-permission android:name="com.qualcomm.permission.USE_QCRIL_MSG_TUNNEL" />
 
     <application
         android:label="DubaiCameraService"
diff --git a/camera/src/com/arrow/dubaicameraservice/DubaiCameraService.java b/camera/src/com/arrow/dubaicameraservice/DubaiCameraService.java
index 195039a..be94862 100644
--- a/camera/src/com/arrow/dubaicameraservice/DubaiCameraService.java
+++ b/camera/src/com/arrow/dubaicameraservice/DubaiCameraService.java
@@ -7,8 +7,6 @@
 package com.arrow.dubaicameraservice;
 
 import static android.telephony.SubscriptionManager.INVALID_SUBSCRIPTION_ID;
-import static android.telephony.TelephonyManager.ALLOWED_NETWORK_TYPES_REASON_CARRIER;
-import static android.telephony.TelephonyManager.NETWORK_TYPE_BITMASK_NR;
 
 import android.app.Service;
 import android.content.BroadcastReceiver;
@@ -25,6 +23,7 @@ import android.telephony.TelephonyCallback;
 import android.telephony.TelephonyManager;
 import android.util.Log;
 
+import java.util.Arrays;
 import java.util.concurrent.Executor;
 
 public class DubaiCameraService extends Service {
@@ -33,13 +32,16 @@ public class DubaiCameraService extends Service {
     private static final String TAG = "DubaiCameraService";
 
     private static final String FRONT_CAMERA_ID = "1";
+    private static final int OFFENDING_NR_SA_BAND = 78;
 
     private CameraManager mCameraManager;
     private SubscriptionManager mSubManager;
     private TelephonyManager mTelephonyManager;
+    private QcRilMsgUtils mQcRilMsgUtils;
 
     private boolean mIsFrontCamInUse = false;
-    private int mSubId = INVALID_SUBSCRIPTION_ID;
+    private int[] mActiveSubIds = new int[0];
+    private int mDefaultDataSubId = INVALID_SUBSCRIPTION_ID;
 
     private final Handler mHandler = new Handler(Looper.getMainLooper());
     private final Executor mExecutor = new HandlerExecutor(mHandler);
@@ -70,7 +72,13 @@ public class DubaiCameraService extends Service {
         @Override
         public void onSubscriptionsChanged() {
             dlog("onSubscriptionsChanged");
-            update5gState();
+            final int[] subs = mSubManager.getActiveSubscriptionIdList();
+            if (!Arrays.equals(subs, mActiveSubIds)) {
+                dlog("active subs changed, was: " + Arrays.toString(mActiveSubIds)
+                        + ", now: " + Arrays.toString(subs));
+                mActiveSubIds = subs;
+                update5gState();
+            }
         }
     };
 
@@ -79,8 +87,10 @@ public class DubaiCameraService extends Service {
         @Override
         public void onActiveDataSubscriptionIdChanged(int subId) {
             dlog("onActiveDataSubscriptionIdChanged subId:" + subId);
-            mSubId = subId;
-            update5gState();
+            if (subId != mDefaultDataSubId) {
+                mDefaultDataSubId = subId;
+                update5gState();
+            }
         }
     };
 
@@ -89,24 +99,26 @@ public class DubaiCameraService extends Service {
     @Override
     public void onCreate() {
         dlog("onCreate");
+        mQcRilMsgUtils = new QcRilMsgUtils(this);
         mCameraManager = getSystemService(CameraManager.class);
         mSubManager = getSystemService(SubscriptionManager.class);
         mTelephonyManager = getSystemService(TelephonyManager.class);
-
-        mCameraManager.registerAvailabilityCallback(mCameraCallback, mHandler);
-        mTelephonyManager.registerTelephonyCallback(mExecutor, mTelephonyCallback);
-        mSubManager.addOnSubscriptionsChangedListener(mExecutor, mSubListener);
     }
 
     @Override
     public int onStartCommand(Intent intent, int flags, int startId) {
         dlog("onStartCommand");
+        mQcRilMsgUtils.bindService();
+        mCameraManager.registerAvailabilityCallback(mCameraCallback, mHandler);
+        mTelephonyManager.registerTelephonyCallback(mExecutor, mTelephonyCallback);
+        mSubManager.addOnSubscriptionsChangedListener(mExecutor, mSubListener);
         return START_STICKY;
     }
 
     @Override
     public void onDestroy() {
         dlog("onDestroy");
+        mQcRilMsgUtils.unbindService();
         mCameraManager.unregisterAvailabilityCallback(mCameraCallback);
         mTelephonyManager.unregisterTelephonyCallback(mTelephonyCallback);
         mSubManager.removeOnSubscriptionsChangedListener(mSubListener);
@@ -124,30 +136,22 @@ public class DubaiCameraService extends Service {
     }
 
     private void update5gState() {
-        if (mSubId == INVALID_SUBSCRIPTION_ID
-                || mSubManager.getActiveSubscriptionIdList().length <= 0) {
+        if (mDefaultDataSubId == INVALID_SUBSCRIPTION_ID
+                || mActiveSubIds.length == 0) {
             dlog("update5gState: Invalid subid or no active subs!");
             return;
         }
-        final TelephonyManager tm = mTelephonyManager.createForSubscriptionId(mSubId);
-        // Arguably we should use ALLOWED_NETWORK_TYPES_REASON_POWER here but that's already
-        // used by battery saver, and we are out of other reasons
-        long allowedNetworkTypes = tm.getAllowedNetworkTypesForReason(
-                ALLOWED_NETWORK_TYPES_REASON_CARRIER);
-        final boolean is5gAllowed = (allowedNetworkTypes & NETWORK_TYPE_BITMASK_NR) != 0;
-        dlog("update5gState mIsFrontCamInUse:" + mIsFrontCamInUse + " is5gAllowed:" + is5gAllowed);
-        if (mIsFrontCamInUse && is5gAllowed) {
-            allowedNetworkTypes &= ~NETWORK_TYPE_BITMASK_NR;
-        } else if (!mIsFrontCamInUse && !is5gAllowed) {
-            allowedNetworkTypes |= NETWORK_TYPE_BITMASK_NR;
+        if (mQcRilMsgUtils.setNrSaBandEnabled(mSubManager.getPhoneId(mDefaultDataSubId),
+                OFFENDING_NR_SA_BAND, !mIsFrontCamInUse)) {
+            Log.i(TAG, (mIsFrontCamInUse ? "Disabled" : "Enabled") + " NR SA band "
+                    + OFFENDING_NR_SA_BAND + " for subId " + mDefaultDataSubId);
         } else {
-            return;
+            Log.e(TAG, "Failed to " + (mIsFrontCamInUse ? "disable" : "enable") + " NR SA band "
+                    + OFFENDING_NR_SA_BAND + " for subId " + mDefaultDataSubId);
         }
-        tm.setAllowedNetworkTypesForReason(ALLOWED_NETWORK_TYPES_REASON_CARRIER,
-                allowedNetworkTypes);
     }
 
-    private static void dlog(String msg) {
+    protected static void dlog(String msg) {
         if (DEBUG) Log.d(TAG, msg);
     }
 }
diff --git a/camera/src/com/arrow/dubaicameraservice/QcRilMsgUtils.java b/camera/src/com/arrow/dubaicameraservice/QcRilMsgUtils.java
new file mode 100644
index 0000000..c61594c
--- /dev/null
+++ b/camera/src/com/arrow/dubaicameraservice/QcRilMsgUtils.java
@@ -0,0 +1,168 @@
+/*
+ * Copyright (C) 2023 ArrowOS
+ * 
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+package com.arrow.dubaicameraservice;
+
+import android.content.ComponentName;
+import android.content.Context;
+import android.content.Intent;
+import android.content.ServiceConnection;
+import android.os.IBinder;
+import android.os.RemoteException;
+import android.util.Log;
+
+import com.qualcomm.qcrilmsgtunnel.IQcrilMsgTunnel;
+
+import java.nio.ByteBuffer;
+import java.nio.ByteOrder;
+
+public class QcRilMsgUtils {
+
+    private static final String TAG = "DubaiCameraService-QcRil";
+
+    private static final String PACKAGE_NAME = "com.qualcomm.qcrilmsgtunnel";
+    private static final String SERVICE_NAME = "com.qualcomm.qcrilmsgtunnel.QcrilMsgTunnelService";
+
+    private static final int OEM_RIL_REQUEST_GET_BAND_PREF = 327723;
+    private static final int OEM_RIL_REQUEST_SET_BAND_PREF = 327724;
+    private static final int BAND_CONFIG_LENGTH = 168;
+    private static final int LTE_CONFIG_LENGTH = 4;
+    private static final int NR_CONFIG_LENGTH = 8;
+
+    private IQcrilMsgTunnel mService;
+    private QcrilMsgTunnelConnection mServiceConnection;
+    private Context mContext;
+
+    public QcRilMsgUtils(Context context) {
+        mContext = context;
+        mServiceConnection = new QcrilMsgTunnelConnection();
+    }
+
+    protected void bindService() {
+        dlog("bindService");
+        if (!mContext.bindService(new Intent().setClassName(PACKAGE_NAME, SERVICE_NAME),
+                mServiceConnection, Context.BIND_AUTO_CREATE)) {
+            Log.e(TAG, "Failed to bind to QcrilMsgTunnelService!");
+        }
+    }
+
+    protected void unbindService() {
+        dlog("unbindService");
+        mContext.unbindService(mServiceConnection);
+        mService = null;
+    }
+
+    /* TODO: split this function */
+    protected boolean setNrSaBandEnabled(int phoneId, int band, boolean enabled) {
+        if (mService == null) {
+            Log.e(TAG, "setNrSaBandEnabled: mService is null!");
+            return false;
+        }
+        dlog("setNrSaBandEnabled: phoneId=" + phoneId + " band=" + band + " enabled=" + enabled);
+
+        // get band config
+        byte[] reqData = new byte[8];
+        ByteBuffer reqBuf = ByteBuffer.wrap(reqData)
+                .order(ByteOrder.BIG_ENDIAN)
+                .putInt(OEM_RIL_REQUEST_GET_BAND_PREF)
+                .putInt(0);
+        byte[] resp = new byte[BAND_CONFIG_LENGTH];
+        try {
+            int ret = mService.sendOemRilRequestRaw(reqData, resp, phoneId);
+            if (ret < 0)
+                throw new Exception();
+        } catch (Exception e) {
+            Log.e(TAG, "sendOemRilRequestRaw failed to get band config!", e);
+            return false;
+        }
+        ByteBuffer buf = ByteBuffer.wrap(resp)
+                .order(ByteOrder.nativeOrder());
+        long nasConfig = buf.getLong();
+        long[] lteConfigs = new long[LTE_CONFIG_LENGTH];
+        for (int i = 0; i < LTE_CONFIG_LENGTH; i++) {
+            lteConfigs[i] = buf.getLong();
+        }
+        long[] nrSaConfigs = new long[NR_CONFIG_LENGTH];
+        for (int i = 0; i < NR_CONFIG_LENGTH; i++) {
+            nrSaConfigs[i] = buf.getLong();
+        }
+        long[] nrNsaConfigs = new long[NR_CONFIG_LENGTH];
+        for (int i = 0; i < NR_CONFIG_LENGTH; i++) {
+            nrSaConfigs[i] = buf.getLong();
+        }
+
+        // modify band config
+        int row = (band - 1) / 64;
+        int col = (band - 1) % 64;
+        if (enabled) {
+            nrSaConfigs[row] |= (1 << col);
+        } else {
+            nrSaConfigs[row] &= ~(1 << col);
+        }
+
+        // set band config
+        byte[] newData = new byte[BAND_CONFIG_LENGTH + 8];
+        ByteBuffer newBuf = ByteBuffer.wrap(newData)
+                .order(ByteOrder.BIG_ENDIAN)
+                .putInt(OEM_RIL_REQUEST_SET_BAND_PREF)
+                .putInt(BAND_CONFIG_LENGTH)
+                .order(ByteOrder.nativeOrder())
+                .putLong(nasConfig);
+        for (int i = 0; i < LTE_CONFIG_LENGTH; i++) {
+            newBuf.putLong(lteConfigs[i]);
+        }
+        for (int i = 0; i < NR_CONFIG_LENGTH; i++) {
+            newBuf.putLong(nrSaConfigs[i]);
+        }
+        for (int i = 0; i < NR_CONFIG_LENGTH; i++) {
+            newBuf.putLong(nrNsaConfigs[i]);
+        }
+        try {
+            int ret = mService.sendOemRilRequestRaw(newData, new byte[1], phoneId);
+            if (ret < 0)
+                throw new Exception();
+        } catch (Exception e) {
+            Log.e(TAG, "sendOemRilRequestRaw failed to set band config!", e);
+            return false;
+        }
+
+        return true;
+    }
+
+    private class QcrilMsgTunnelConnection implements ServiceConnection {
+        @Override
+        public void onServiceConnected(ComponentName name, IBinder service) {
+            mService = IQcrilMsgTunnel.Stub.asInterface(service);
+            if (mService == null) {
+                Log.e(TAG, "Unable to get IQcrilMsgTunnel!");
+                return;
+            }
+            try {
+                service.linkToDeath(new IBinder.DeathRecipient() {
+                    @Override
+                    public void binderDied() {
+                        Log.e(TAG, "QcrilMsgTunnel service died, trying to bind again");
+                        mService = null;
+                        QcRilMsgUtils.this.bindService();
+                    }
+                }, 0);
+            } catch (RemoteException e) {
+                Log.e(TAG, "linkToDeath failed", e);
+            }
+            Log.i(TAG, "QcrilMsgTunnel service connected");
+        }
+
+        @Override
+        public void onServiceDisconnected(ComponentName name) {
+            Log.i(TAG, "QcrilMsgTunnel service disconnected");
+            mService = null;
+        }
+    }
+
+    private static void dlog(String msg) {
+        DubaiCameraService.dlog(msg);
+    }
+}
diff --git a/camera/src/com/qualcomm/qcrilmsgtunnel/IQcrilMsgTunnel.aidl b/camera/src/com/qualcomm/qcrilmsgtunnel/IQcrilMsgTunnel.aidl
new file mode 100644
index 0000000..7cedc3e
--- /dev/null
+++ b/camera/src/com/qualcomm/qcrilmsgtunnel/IQcrilMsgTunnel.aidl
@@ -0,0 +1,11 @@
+package com.qualcomm.qcrilmsgtunnel;
+
+interface IQcrilMsgTunnel {
+
+    /**
+     * Sends a OEM request to the RIL and returns the response back to the
+     * Caller. The returnValue is negative on failure. 0 or length of response on SUCCESS
+     */
+    int sendOemRilRequestRaw(in byte[] request, out byte[] response, in int sub);
+
+}