插入卡後的初始化流程：

插卡 --〉modem sms 初始化 --〉讀卡里的SMSC--〉AP 下AT來查詢SMSC --〉AP 下AT傳送SMS --〉modem 返回SMS 傳送的結果

基本流程：

簡訊始發和短訊息的終結是兩個完全獨立的過程

簡訊傳送AP程式碼流程：

簡訊傳送的modem日誌：

(UE->NW)CP-DATA[包含SMS的文字內容；包含RP-DATA]     

(UE<-NW)CP-ACK [簡單響應收到上一個CP-DATA；不包含RP]

(UE<-NW)CP-DATA[如果簡訊有什麼異常或網路拒絕等異常cause會攜帶在裡面；包含RP-ACK或者是RP-ERROR，響應上面的RP-DATA]

(UE->NW)CP-ACK [簡單響應NW收到了上一個CP-DATA；不包含RP]

AP詳細程式碼流程：

@RIL.java
case RIL_UNSOL_RESPONSE_NEW_SMS: {
        if (RILJ_LOGD) unsljLog(response);

        mEventLog.writeRilNewSms(response);

        // FIXME this should move up a layer
        String a[] = new String[2];

        a[1] = (String)ret;

        SmsMessage sms;

        sms = SmsMessage.newFromCMT(a);
        if (mGsmSmsRegistrant != null) {
            mGsmSmsRegistrant
                .notifyRegistrant(new AsyncResult(null, sms, null));
        }
    break;
    }
 

@BaseCommands.java
@Override
  public void setOnNewGsmSms(Handler h, int what, Object obj) {
      mGsmSmsRegistrant = new Registrant (h, what, obj);
}

@GsmInboundSmsHandler.java
  private GsmInboundSmsHandler(Context context, SmsStorageMonitor storageMonitor,
          Phone phone) {
      super("GsmInboundSmsHandler", context, storageMonitor, phone,
              GsmCellBroadcastHandler.makeGsmCellBroadcastHandler(context, phone));
      phone.mCi.setOnNewGsmSms(getHandler(), EVENT_NEW_SMS, null);
      mDataDownloadHandler = new UsimDataDownloadHandler(phone.mCi);
  }
 

@GsmSMSDispatcher.java
public GsmSMSDispatcher(Phone phone, SmsUsageMonitor usageMonitor,
       ImsSMSDispatcher imsSMSDispatcher,
          GsmInboundSmsHandler gsmInboundSmsHandler) {
                super(phone, usageMonitor, imsSMSDispatcher);
                mCi.setOnSmsStatus(this, EVENT_NEW_SMS_STATUS_REPORT, null);
                mGsmInboundSmsHandler = gsmInboundSmsHandler;
                mUiccController = UiccController.getInstance();
                mUiccController.registerForIccChanged(this, EVENT_ICC_CHANGED, null);
                Rlog.d(TAG, "GsmSMSDispatcher created");
}

@InboundSmsHandler.java
        private class IdleState extends State {
                public boolean processMessage(Message msg) {
            log("IdleState.processMessage:" + msg.what);
            if (DBG) log("Idle state processing message type " + msg.what);
            switch (msg.what) {
                case EVENT_NEW_SMS:
                    deferMessage(msg);
                    transitionTo(mDeliveringState);
                    return HANDLED;
                                       
        private class DeliveringState extends State {
                @Override
        public boolean processMessage(Message msg) {
            log("DeliveringState.processMessage:" + msg.what);
            switch (msg.what) {
                case EVENT_NEW_SMS:
                    // handle new SMS from RIL
                    handleNewSms((AsyncResult) msg.obj);
                    sendMessage(EVENT_RETURN_TO_IDLE);
                    return HANDLED;
                                       
        private void handleNewSms(AsyncResult ar) {
           SmsMessage sms = (SmsMessage) ar.result;
           result = dispatchMessage(sms.mWrappedSmsMessage);
                  
                  
        private int dispatchMessage(SmsMessageBase smsb) {
                dispatchMessageRadioSpecific

@GsmInboundSmsHandler.java
        protected int dispatchMessageRadioSpecific(SmsMessageBase smsb) {
                 dispatchNormalMessage(smsb);

@InboundSmsHandler.java
        protected int dispatchNormalMessage(SmsMessageBase sms) {
                //獲取簡訊的PDU包，然後把pdu包放在一個tracker例項
                 tracker = TelephonyComponentFactory.getInstance().makeInboundSmsTracker(sms.getPdu(),
                   sms.getTimestampMillis(), destPort, is3gpp2(),
                   sms.getDisplayOriginatingAddress(), concatRef.refNumber, concatRef.seqNumber,
                   concatRef.msgCount, false, sms.getMessageBody());
                       
                return addTrackerToRawTableAndSendMessage(tracker,
                        tracker.getDestPort() == -1 /* de-dup if text message */);

                       
        protected int addTrackerToRawTableAndSendMessage(InboundSmsTracker tracker, boolean deDup) {
           switch(addTrackerToRawTable(tracker, deDup)) {
               case Intents.RESULT_SMS_HANDLED:
                   sendMessage(EVENT_BROADCAST_SMS, tracker);
                   return Intents.RESULT_SMS_HANDLED;

               case Intents.RESULT_SMS_DUPLICATED:
                   return Intents.RESULT_SMS_HANDLED;

               case Intents.RESULT_SMS_GENERIC_ERROR:
               default:
               return Intents.RESULT_SMS_GENERIC_ERROR;
           }
        }
       
         private int addTrackerToRawTable(InboundSmsTracker tracker, boolean deDup) {
                //把訊息新增到資料庫中


        private class DeliveringState extends State {  //處理EVENT_BROADCAST_SMS事件
           case EVENT_BROADCAST_SMS:
               // if any broadcasts were sent, transition to waiting state
               InboundSmsTracker inboundSmsTracker = (InboundSmsTracker) msg.obj;
               if (processMessagePart(inboundSmsTracker)) {
                   transitionTo(mWaitingState);
               } else {
               // if event is sent from SmsBroadcastUndelivered.broadcastSms(), and
               //processMessagePart() returns false, the state machine will be stuck in
               // DeliveringState until next message is received. Send message to
               // transition to idle to avoid that so that wakelock can be released
               log("No broadcast sent on processing EVENT_BROADCAST_SMS in Delivering " +
                       "state. Return to Idle state");
               sendMessage(EVENT_RETURN_TO_IDLE);
           }
           return HANDLED;

        private boolean processMessagePart(InboundSmsTracker tracker) {  //把track解析出PDU包
                //單條簡訊
                if (messageCount == 1) {
                                // single-part message
                                pdus = new byte[][]{tracker.getPdu()};
                } else { //多條簡訊
                        ......
                }
                //建立廣播接收者
                SmsBroadcastReceiver resultReceiver = new SmsBroadcastReceiver(tracker);
                //彩信的情況
                if (destPort == SmsHeader.PORT_WAP_PUSH) {
                }
                dispatchSmsDeliveryIntent(pdus, tracker.getFormat(), destPort, resultReceiver);

        private void dispatchSmsDeliveryIntent(byte[][] pdus, String format, int destPort,
                BroadcastReceiver resultReceiver) {
                //說明Framework完成對SMS的解析並要求傳送廣播給上層APP
                log("Delivering SMS to: " + componentName.getPackageName() +
                    " " + componentName.getClassName());
                //定義接收的action
                intent.setAction(Intents.DATA_SMS_RECEIVED_ACTION);
                dispatchIntent(intent, android.Manifest.permission.RECEIVE_SMS,
                                        AppOpsManager.OP_RECEIVE_SMS, options, resultReceiver, UserHandle.SYSTEM);
                                       
                                       
        public void dispatchIntent(Intent intent, String permission, int appOp,
                Bundle opts, BroadcastReceiver resultReceiver, UserHandle user) {
                //把pdu通過intent廣播出去，後續只要定義接收器，action是DATA_SMS_RECEIVED_ACTION就可以了
                mContext.sendOrderedBroadcastAsUser(intent, targetUser, permission, appOp, opts,
                                                        users[i] == UserHandle.USER_SYSTEM ? resultReceiver : null,
                                                        getHandler(), Activity.RESULT_OK, null, null);