然后又来到TelephonyManagerCompat的handleSecretCode方法

• packages/apps/Dialer/java/com/android/dialer/compat/telephony/TelephonyManagerCompat.java

public static void handleSecretCode(Context context, String secretCode) {// Must use system service on O+ to avoid using broadcasts, which are not allowed on O+.if (BuildCompat.isAtLeastO()) {if (!TelecomUtil.isDefaultDialer(context)) {LogUtil.e("TelephonyManagerCompat.handleSecretCode","not default dialer, cannot send special code");return;}context.getSystemService(TelephonyManager.class).sendDialerSpecialCode(secretCode);} else {// System service call is not supported pre-O, so must use a broadcast for N-.Intent intent =new Intent(SECRET_CODE_ACTION, Uri.parse("android_secret_code://" + secretCode));context.sendBroadcast(intent);}}

这里会判断版本和是否是默认的通话应用，如果是低于O版本直接发送广播，如果是高于O版本，判断是否是默认通话应用，是的话走到TelephonyManager中。

• frameworks/base/telephony/java/android/telephony/TelephonyManager.java

 public void sendDialerSpecialCode(String inputCode) {try {final ITelephony telephony = getITelephony();if (telephony == null) {if (!isSystemProcess()) {throw new RuntimeException("Telephony service unavailable");}return;}telephony.sendDialerSpecialCode(mContext.getOpPackageName(), inputCode);} catch (RemoteException ex) {// This could happen if binder process crashes.if (!isSystemProcess()) {ex.rethrowAsRuntimeException();}}}

PhoneInterfaceManager继承ITelephony.Stub

• packages/services/Telephony/src/com/android/phone/PhoneInterfaceManager.java

 @Overridepublic void sendDialerSpecialCode(String callingPackage, String inputCode) {final Phone defaultPhone = getDefaultPhone();mAppOps.checkPackage(Binder.getCallingUid(), callingPackage);TelecomManager tm = defaultPhone.getContext().getSystemService(TelecomManager.class);String defaultDialer = tm.getDefaultDialerPackage();if (!TextUtils.equals(callingPackage, defaultDialer)) {TelephonyPermissions.enforceCallingOrSelfCarrierPrivilege(mApp,getDefaultSubscription(), "sendDialerSpecialCode");}final long identity = Binder.clearCallingIdentity();try {defaultPhone.sendDialerSpecialCode(inputCode);} finally {Binder.restoreCallingIdentity(identity);}}

• frameworks/opt/telephony/src/java/com/android/internal/telephony/Phone.java

public void sendDialerSpecialCode(String code) {if (!TextUtils.isEmpty(code)) {final BroadcastOptions options = BroadcastOptions.makeBasic();options.setBackgroundActivityStartsAllowed(true);Intent intent = new Intent(TelephonyIntents.SECRET_CODE_ACTION,Uri.parse("android_secret_code://" + code));intent.addFlags(Intent.FLAG_RECEIVER_FOREGROUND);mContext.sendBroadcast(intent, null, options.toBundle());// {@link TelephonyManager.ACTION_SECRET_CODE} will replace {@link// TelephonyIntents#SECRET_CODE_ACTION} in the next Android version. Before// that both of these two actions will be broadcast.Intent secrectCodeIntent = new Intent(TelephonyManager.ACTION_SECRET_CODE,Uri.parse("android_secret_code://" + code));secrectCodeIntent.addFlags(Intent.FLAG_RECEIVER_FOREGROUND);mContext.sendBroadcast(secrectCodeIntent, null, options.toBundle());}}

走到Phone.java中，最终还是发送暗码广播。

接收示例：

• vendor/mediatek/proprietary/packages/apps/EngineerMode/AndroidManifest.xml

• vendor/mediatek/proprietary/packages/apps/EngineerMode/src/com/mediatek/engineermode/EngineerModeReceiver.java

public final class EngineerModeReceiver extends BroadcastReceiver {private static final String TAG = "EngineerModeReceiver";private static final String SECRET_CODE_ACTION= "android.provider.Telephony.SECRET_CODE";// process *#*#3646633#*#*private final Uri mEmUri = Uri.parse("android_secret_code://3646633");// process *#*#9527686#*#* mtklogprivate final Uri mMtklogUri1 = Uri.parse("android_secret_code://9527686");@Overridepublic void onReceive(Context context, Intent intent) {if (intent.getAction() == null) {Elog.e(TAG, "Null action");return;}if (intent.getAction().equals(SECRET_CODE_ACTION)) {Uri uri = intent.getData();Elog.i(TAG, "Receive secret code intent and uri is " + uri);if (uri.equals(mEmUri)) {Intent intentEm = new Intent(context, EngineerMode.class);intentEm.setFlags(Intent.FLAG_ACTIVITY_NEW_TASK);context.startActivity(intentEm);} else if(uri.equals(mMtklogUri1)) {String packageName = "com.debug.loggerui";String className = "com.debug.loggerui.MainActivity";Intent intentEm = new Intent(Intent.ACTION_MAIN);intentEm.setFlags(Intent.FLAG_ACTIVITY_NEW_TASK);ComponentName cn = new ComponentName(packageName, className);intentEm.setComponent(cn);context.startActivity(intentEm);}}}
}