关于Android的解析，有很多优质内容，看了后记录一下阅读笔记，也是一种有意义的事情，
今天就看看“那个写代码的”这位大佬关于广播的梳理，
https://blog.csdn.net/a572423926/category_11509429.html
https://blog.csdn.net/a572423926/article/details/121760258
广播的原理很清晰，类似一种观察者模式，控制中心把广播发送给注册者（观察者），但是android中的实现细节较多。
这里通过一个am命令发送受保护的广播，查看抛出的异常，看相关堆栈。
am broadcast -n com.example.test/.AppInstallReceiver -a android.intent.action.SCREEN_ON
am broadcast -n com.example.test/.AppInstallReceiver -a android.intent.action.SCREEN_ON
Broadcasting: Intent { act=android.intent.action.SCREEN_ON flg=0x400000 cmp=com.example.test/.AppInstallReceiver }
Exception occurred while executing 'broadcast':
java.lang.SecurityException: Permission Denial: not allowed to send broadcast android.intent.action.SCREEN_ON from pid=18179, uid=2000
at com.android.server.am.ActivityManagerService.broadcastIntentLocked(ActivityManagerService.java:14369)
at com.android.server.am.ActivityManagerService.broadcastIntentLocked(ActivityManagerService.java:14206)
at com.android.server.am.ActivityManagerService.broadcastIntentWithFeature(ActivityManagerService.java:15092)
at com.android.server.am.ActivityManagerShellCommand.runSendBroadcast(ActivityManagerShellCommand.java:806)
at com.android.server.am.ActivityManagerShellCommand.onCommand(ActivityManagerShellCommand.java:221)
at com.android.modules.utils.BasicShellCommandHandler.exec(BasicShellCommandHandler.java:97)
at android.os.ShellCommand.exec(ShellCommand.java:38)
at com.android.server.am.ActivityManagerService.onShellCommand(ActivityManagerService.java:9776)
at android.os.Binder.shellCommand(Binder.java:1055)
at android.os.Binder.onTransact(Binder.java:883)
at android.app.IActivityManager$Stub.onTransact(IActivityManager.java:4845)
at com.android.server.am.ActivityManagerService.onTransact(ActivityManagerService.java:2833)
at android.os.Binder.execTransactInternal(Binder.java:1291)
at android.os.Binder.execTransact(Binder.java:1250)
调用到ActivityManagerService.broadcastIntentLockedapp中发送广播后，会调用到ActivityManagerService.broadcastIntentLocked
在PMS中查询，有哪些接收者
这里可以把ResolveInfo打印出来进行查看接收者是否被筛选出来了，具体分析可查看原文。
然后，进行分发，
会调用到BroadcastQueue.java 的processNextBroadcast，有些广播接收不到，就是在这里面进行了屏蔽。
processNextBroadcast的代码设计不好，
对于并行广播，搞了个循环来一下子处理完成。
“processNextBroadcast 每次被调用，只能分发给 mOrderedBroadcasts 中一个广播的其中一个 Receiver，如果静态注册的应用未启动，还需要等待应用启动后再进行处理。”
/frameworks/base/services/core/java/com/android/server/am/BroadcastQueue.java
final void processNextBroadcast(boolean fromMsg) {
synchronized(mService) {
BroadcastRecord r;
......
// 这里的do-while只会从mOrderedBroadcasts中取出第一个BroadcastRecord进行后续的处理！
do {
......
r = mOrderedBroadcasts.get(0);
......
} while (r == null);
......
final Object nextReceiver = r.receivers.get(recIdx); // 取出一个Receiver
// 对动态注册receiver的处理，这里是分发有序广播
if (nextReceiver instanceof BroadcastFilter) {
......
// 通过deliverToRegisteredReceiverLocked调用ActivityThread.scheduleRegisteredReceiver处理广播
deliverToRegisteredReceiverLocked(r, filter, r.ordered, recIdx);
......
}
// 开始对静态注册receiver的处理！！！
ResolveInfo info = (ResolveInfo)nextReceiver;
......
// 如果应用已经启动，则直接分发广播给该应用，并返回
if (app != null && app.thread != null && !app.killed) {
try {
app.addPackage(info.activityInfo.packageName,
info.activityInfo.applicationInfo.versionCode, mService.mProcessStats);
// 通过processCurBroadcastLocked -> ActivityThread.scheduleReceiver -> receiver.onReceive处理当前广播
processCurBroadcastLocked(r, app);
return;
} catch (RemoteException e) {
Slog.w(TAG, "Exception when sending broadcast to "
+ r.curComponent, e);
} catch (RuntimeException e) {
Slog.wtf(TAG, "Failed sending broadcast to "
+ r.curComponent + " with " + r.intent, e);
......
return;
}
}
......
// 如果应用未启动，则在这里启动应用进程，广播将在AMS启动完成后被调用处理
if ((r.curApp=mService.startProcessLocked(targetProcess,
info.activityInfo.applicationInfo, true,
r.intent.getFlags() | Intent.FLAG_FROM_BACKGROUND,
"broadcast", r.curComponent,
(r.intent.getFlags()&Intent.FLAG_RECEIVER_BOOT_UPGRADE) != 0, false, false))
== null) {
Slog.w(TAG, "Unable to launch app "
+ info.activityInfo.applicationInfo.packageName + "/"
+ info.activityInfo.applicationInfo.uid + " for broadcast "
+ r.intent + ": process is bad");
......
return;
}
// 将BroadcastRecord赋值为mPendingBroadcast，等待应用启动完成后处理
mPendingBroadcast = r;
mPendingBroadcastRecvIndex = recIdx;
}
}
这里面
通过 deliverToRegisteredReceiverLocked 调用到 ActivityThread.scheduleRegisteredReceiver，处理动态注册的 receiver；通过 processCurBroadcastLocked，调用到 ActivityThread.scheduleReceiver，处理静态注册的 receiver
这样，就传送给app端了。
参考资料：https://blog.csdn.net/a572423926/article/details/121760258
————————————————
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
原文链接：https://blog.csdn.net/a572423926/article/details/121760258
