blob: d611369ed143e1ab2e45828d25ab50cf8f0ebe8a [file] [log] [blame]
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001/*
2 * Copyright (C) 2007 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#include <ctype.h>
Doug Zongker7c3ae452013-05-14 11:03:02 -070018#include <dirent.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080019#include <errno.h>
20#include <fcntl.h>
21#include <getopt.h>
Tao Bao862a4c12016-06-02 11:16:50 -070022#include <inttypes.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080023#include <limits.h>
Tao Bao862a4c12016-06-02 11:16:50 -070024#include <linux/fs.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080025#include <linux/input.h>
Doug Zongker7c3ae452013-05-14 11:03:02 -070026#include <stdarg.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080027#include <stdio.h>
28#include <stdlib.h>
29#include <string.h>
Patrick Tjincd055ee2014-12-09 11:26:40 -080030#include <sys/klog.h>
Doug Zongker23ceeea2010-07-08 17:27:55 -070031#include <sys/stat.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080032#include <sys/types.h>
Tao Baocdcf28f2016-01-13 15:05:20 -080033#include <sys/wait.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080034#include <time.h>
35#include <unistd.h>
36
Tao Bao04ca4262015-09-10 15:32:24 -070037#include <chrono>
Tao Bao862a4c12016-06-02 11:16:50 -070038#include <string>
39#include <vector>
Tao Bao04ca4262015-09-10 15:32:24 -070040
Tao Bao75238632015-05-27 14:46:17 -070041#include <adb.h>
Mark Salyzyna4f701a2016-03-09 14:58:16 -080042#include <android/log.h> /* Android Log Priority Tags */
Elliott Hughes4b166f02015-12-04 15:30:20 -080043#include <android-base/file.h>
Tianjie Xu3c62b672016-02-05 18:25:58 -080044#include <android-base/parseint.h>
Elliott Hughes4b166f02015-12-04 15:30:20 -080045#include <android-base/stringprintf.h>
Tao Bao862a4c12016-06-02 11:16:50 -070046#include <android-base/strings.h>
47#include <android-base/unique_fd.h>
Tao Bao75238632015-05-27 14:46:17 -070048#include <cutils/android_reboot.h>
49#include <cutils/properties.h>
Elliott Hughes4bbd5bf2016-04-01 18:24:39 -070050#include <healthd/BatteryMonitor.h>
Mark Salyzyna4f701a2016-03-09 14:58:16 -080051#include <log/logger.h> /* Android Log packet format */
52#include <private/android_logger.h> /* private pmsg functions */
Elliott Hughes4bbd5bf2016-04-01 18:24:39 -070053#include <selinux/label.h>
54#include <selinux/selinux.h>
Yabin Cui99281df2016-02-17 12:21:52 -080055
Tao Bao75238632015-05-27 14:46:17 -070056#include "adb_install.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080057#include "bootloader.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080058#include "common.h"
Tao Bao75238632015-05-27 14:46:17 -070059#include "device.h"
Tianjie Xu16255832016-04-30 11:49:59 -070060#include "error_code.h"
Tao Bao75238632015-05-27 14:46:17 -070061#include "fuse_sdcard_provider.h"
62#include "fuse_sideload.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080063#include "install.h"
64#include "minui/minui.h"
65#include "minzip/DirUtil.h"
66#include "roots.h"
Doug Zongker28ce47c2011-10-28 10:33:05 -070067#include "ui.h"
Doug Zongker211aebc2011-10-28 15:13:10 -070068#include "screen_ui.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080069
Stephen Smalley779701d2012-02-09 14:13:23 -050070struct selabel_handle *sehandle;
71
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080072static const struct option OPTIONS[] = {
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080073 { "update_package", required_argument, NULL, 'u' },
Tianjie Xu3c62b672016-02-05 18:25:58 -080074 { "retry_count", required_argument, NULL, 'n' },
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080075 { "wipe_data", no_argument, NULL, 'w' },
76 { "wipe_cache", no_argument, NULL, 'c' },
Doug Zongker4bc98062010-09-03 11:00:13 -070077 { "show_text", no_argument, NULL, 't' },
Tao Baoc679f932015-03-30 09:43:49 -070078 { "sideload", no_argument, NULL, 's' },
79 { "sideload_auto_reboot", no_argument, NULL, 'a' },
Doug Zongkere5d5ac72012-04-12 11:01:22 -070080 { "just_exit", no_argument, NULL, 'x' },
Doug Zongker02ec6b82012-08-22 17:26:40 -070081 { "locale", required_argument, NULL, 'l' },
Doug Zongkerc87bab12013-11-25 13:53:25 -080082 { "stages", required_argument, NULL, 'g' },
Doug Zongkerb1d12632014-03-18 10:32:12 -070083 { "shutdown_after", no_argument, NULL, 'p' },
Jeff Sharkeya6e13ae2014-09-24 11:46:17 -070084 { "reason", required_argument, NULL, 'r' },
Tianjie Xu35926c42016-04-28 18:06:26 -070085 { "security", no_argument, NULL, 'e'},
Tao Bao108ab212016-06-10 10:13:32 -070086 { "wipe_ab", no_argument, NULL, 0 },
Doug Zongker988500b2009-10-06 14:41:38 -070087 { NULL, 0, NULL, 0 },
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080088};
89
Doug Zongker6d0d7ac2013-07-09 13:34:55 -070090static const char *CACHE_LOG_DIR = "/cache/recovery";
Doug Zongkerd4208f92010-09-20 12:16:13 -070091static const char *COMMAND_FILE = "/cache/recovery/command";
Doug Zongkerd4208f92010-09-20 12:16:13 -070092static const char *LOG_FILE = "/cache/recovery/log";
Doug Zongkerd0181b82011-10-19 10:51:12 -070093static const char *LAST_INSTALL_FILE = "/cache/recovery/last_install";
Doug Zongker8b240cc2012-08-29 15:19:29 -070094static const char *LOCALE_FILE = "/cache/recovery/last_locale";
Paul Lawrence661f8a62016-02-25 12:42:19 -080095static const char *CONVERT_FBE_DIR = "/tmp/convert_fbe";
96static const char *CONVERT_FBE_FILE = "/tmp/convert_fbe/convert_fbe";
Michael Ward9d2629c2011-06-23 22:14:24 -070097static const char *CACHE_ROOT = "/cache";
Paul Lawrenced0db3372015-11-05 13:38:40 -080098static const char *DATA_ROOT = "/data";
Doug Zongkerd4208f92010-09-20 12:16:13 -070099static const char *SDCARD_ROOT = "/sdcard";
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800100static const char *TEMPORARY_LOG_FILE = "/tmp/recovery.log";
Doug Zongkerd0181b82011-10-19 10:51:12 -0700101static const char *TEMPORARY_INSTALL_FILE = "/tmp/last_install";
Tao Baof0124322015-04-11 02:04:11 +0000102static const char *LAST_KMSG_FILE = "/cache/recovery/last_kmsg";
Tao Baobef39712015-05-04 18:50:27 -0700103static const char *LAST_LOG_FILE = "/cache/recovery/last_log";
104static const int KEEP_LOG_COUNT = 10;
Tianjie Xu3c62b672016-02-05 18:25:58 -0800105static const int EIO_RETRY_COUNT = 2;
Yabin Cui99281df2016-02-17 12:21:52 -0800106static const int BATTERY_READ_TIMEOUT_IN_SEC = 10;
107// GmsCore enters recovery mode to install package when having enough battery
108// percentage. Normally, the threshold is 40% without charger and 20% with charger.
109// So we should check battery with a slightly lower limitation.
110static const int BATTERY_OK_PERCENTAGE = 20;
111static const int BATTERY_WITH_CHARGER_OK_PERCENTAGE = 15;
Tao Bao108ab212016-06-10 10:13:32 -0700112constexpr const char* RECOVERY_WIPE = "/etc/recovery.wipe";
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700113
Doug Zongker211aebc2011-10-28 15:13:10 -0700114RecoveryUI* ui = NULL;
Elliott Hughes498cda62016-04-14 16:49:04 -0700115static const char* locale = "en_US";
Doug Zongkerc87bab12013-11-25 13:53:25 -0800116char* stage = NULL;
Jeff Sharkeya6e13ae2014-09-24 11:46:17 -0700117char* reason = NULL;
Tao Bao682c34b2015-04-07 17:16:35 -0700118bool modified_flash = false;
Tao Bao26112e52016-02-25 12:29:40 -0800119static bool has_cache = false;
Doug Zongker211aebc2011-10-28 15:13:10 -0700120
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800121/*
122 * The recovery tool communicates with the main system through /cache files.
123 * /cache/recovery/command - INPUT - command line for tool, one arg per line
124 * /cache/recovery/log - OUTPUT - combined log file from recovery run(s)
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800125 *
126 * The arguments which may be supplied in the recovery.command file:
Doug Zongkerd4208f92010-09-20 12:16:13 -0700127 * --update_package=path - verify install an OTA package file
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800128 * --wipe_data - erase user data (and cache), then reboot
129 * --wipe_cache - wipe cache (but not user data), then reboot
Oscar Montemayor05231562009-11-30 08:40:57 -0800130 * --set_encrypted_filesystem=on|off - enables / diasables encrypted fs
Doug Zongkere5d5ac72012-04-12 11:01:22 -0700131 * --just_exit - do nothing; exit and reboot
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800132 *
133 * After completing, we remove /cache/recovery/command and reboot.
134 * Arguments may also be supplied in the bootloader control block (BCB).
135 * These important scenarios must be safely restartable at any point:
136 *
137 * FACTORY RESET
138 * 1. user selects "factory reset"
139 * 2. main system writes "--wipe_data" to /cache/recovery/command
140 * 3. main system reboots into recovery
141 * 4. get_args() writes BCB with "boot-recovery" and "--wipe_data"
142 * -- after this, rebooting will restart the erase --
Doug Zongkerd4208f92010-09-20 12:16:13 -0700143 * 5. erase_volume() reformats /data
144 * 6. erase_volume() reformats /cache
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800145 * 7. finish_recovery() erases BCB
146 * -- after this, rebooting will restart the main system --
147 * 8. main() calls reboot() to boot main system
148 *
149 * OTA INSTALL
150 * 1. main system downloads OTA package to /cache/some-filename.zip
Doug Zongker9b125b02010-09-22 12:01:37 -0700151 * 2. main system writes "--update_package=/cache/some-filename.zip"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800152 * 3. main system reboots into recovery
153 * 4. get_args() writes BCB with "boot-recovery" and "--update_package=..."
154 * -- after this, rebooting will attempt to reinstall the update --
155 * 5. install_package() attempts to install the update
156 * NOTE: the package install must itself be restartable from any point
157 * 6. finish_recovery() erases BCB
158 * -- after this, rebooting will (try to) restart the main system --
159 * 7. ** if install failed **
160 * 7a. prompt_and_wait() shows an error icon and waits for the user
161 * 7b; the user reboots (pulling the battery, etc) into the main system
162 * 8. main() calls maybe_install_firmware_update()
163 * ** if the update contained radio/hboot firmware **:
164 * 8a. m_i_f_u() writes BCB with "boot-recovery" and "--wipe_cache"
165 * -- after this, rebooting will reformat cache & restart main system --
166 * 8b. m_i_f_u() writes firmware image into raw cache partition
167 * 8c. m_i_f_u() writes BCB with "update-radio/hboot" and "--wipe_cache"
168 * -- after this, rebooting will attempt to reinstall firmware --
169 * 8d. bootloader tries to flash firmware
170 * 8e. bootloader writes BCB with "boot-recovery" (keeping "--wipe_cache")
171 * -- after this, rebooting will reformat cache & restart main system --
Doug Zongkerd4208f92010-09-20 12:16:13 -0700172 * 8f. erase_volume() reformats /cache
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800173 * 8g. finish_recovery() erases BCB
174 * -- after this, rebooting will (try to) restart the main system --
175 * 9. main() calls reboot() to boot main system
176 */
177
178static const int MAX_ARG_LENGTH = 4096;
179static const int MAX_ARGS = 100;
180
Doug Zongkerd4208f92010-09-20 12:16:13 -0700181// open a given path, mounting partitions as necessary
Tao Bao04ca4262015-09-10 15:32:24 -0700182FILE* fopen_path(const char *path, const char *mode) {
Doug Zongkerd4208f92010-09-20 12:16:13 -0700183 if (ensure_path_mounted(path) != 0) {
184 LOGE("Can't mount %s\n", path);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800185 return NULL;
186 }
187
188 // When writing, try to create the containing directory, if necessary.
189 // Use generous permissions, the system (init.rc) will reset them.
Stephen Smalley779701d2012-02-09 14:13:23 -0500190 if (strchr("wa", mode[0])) dirCreateHierarchy(path, 0777, NULL, 1, sehandle);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800191
192 FILE *fp = fopen(path, mode);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800193 return fp;
194}
195
Tao Bao04ca4262015-09-10 15:32:24 -0700196// close a file, log an error if the error indicator is set
197static void check_and_fclose(FILE *fp, const char *name) {
198 fflush(fp);
199 if (ferror(fp)) LOGE("Error in %s\n(%s)\n", name, strerror(errno));
200 fclose(fp);
201}
202
Elliott Hughesf14af802015-02-10 14:46:14 -0800203bool is_ro_debuggable() {
204 char value[PROPERTY_VALUE_MAX+1];
205 return (property_get("ro.debuggable", value, NULL) == 1 && value[0] == '1');
206}
207
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700208static void redirect_stdio(const char* filename) {
Tao Bao04ca4262015-09-10 15:32:24 -0700209 int pipefd[2];
210 if (pipe(pipefd) == -1) {
211 LOGE("pipe failed: %s\n", strerror(errno));
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700212
Tao Bao04ca4262015-09-10 15:32:24 -0700213 // Fall back to traditional logging mode without timestamps.
214 // If these fail, there's not really anywhere to complain...
215 freopen(filename, "a", stdout); setbuf(stdout, NULL);
216 freopen(filename, "a", stderr); setbuf(stderr, NULL);
217
218 return;
219 }
220
221 pid_t pid = fork();
222 if (pid == -1) {
223 LOGE("fork failed: %s\n", strerror(errno));
224
225 // Fall back to traditional logging mode without timestamps.
226 // If these fail, there's not really anywhere to complain...
227 freopen(filename, "a", stdout); setbuf(stdout, NULL);
228 freopen(filename, "a", stderr); setbuf(stderr, NULL);
229
230 return;
231 }
232
233 if (pid == 0) {
234 /// Close the unused write end.
235 close(pipefd[1]);
236
237 auto start = std::chrono::steady_clock::now();
238
239 // Child logger to actually write to the log file.
240 FILE* log_fp = fopen(filename, "a");
241 if (log_fp == nullptr) {
242 LOGE("fopen \"%s\" failed: %s\n", filename, strerror(errno));
243 close(pipefd[0]);
244 _exit(1);
245 }
246
247 FILE* pipe_fp = fdopen(pipefd[0], "r");
248 if (pipe_fp == nullptr) {
249 LOGE("fdopen failed: %s\n", strerror(errno));
250 check_and_fclose(log_fp, filename);
251 close(pipefd[0]);
252 _exit(1);
253 }
254
255 char* line = nullptr;
256 size_t len = 0;
257 while (getline(&line, &len, pipe_fp) != -1) {
258 auto now = std::chrono::steady_clock::now();
259 double duration = std::chrono::duration_cast<std::chrono::duration<double>>(
260 now - start).count();
261 if (line[0] == '\n') {
262 fprintf(log_fp, "[%12.6lf]\n", duration);
263 } else {
264 fprintf(log_fp, "[%12.6lf] %s", duration, line);
265 }
266 fflush(log_fp);
267 }
268
269 LOGE("getline failed: %s\n", strerror(errno));
270
271 free(line);
272 check_and_fclose(log_fp, filename);
273 close(pipefd[0]);
274 _exit(1);
275 } else {
276 // Redirect stdout/stderr to the logger process.
277 // Close the unused read end.
278 close(pipefd[0]);
279
280 setbuf(stdout, nullptr);
281 setbuf(stderr, nullptr);
282
283 if (dup2(pipefd[1], STDOUT_FILENO) == -1) {
284 LOGE("dup2 stdout failed: %s\n", strerror(errno));
285 }
286 if (dup2(pipefd[1], STDERR_FILENO) == -1) {
287 LOGE("dup2 stderr failed: %s\n", strerror(errno));
288 }
289
290 close(pipefd[1]);
291 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800292}
293
294// command line args come from, in decreasing precedence:
295// - the actual command line
296// - the bootloader control block (one per line, after "recovery")
297// - the contents of COMMAND_FILE (one per line)
298static void
299get_args(int *argc, char ***argv) {
300 struct bootloader_message boot;
301 memset(&boot, 0, sizeof(boot));
302 get_bootloader_message(&boot); // this may fail, leaving a zeroed structure
Doug Zongkerc87bab12013-11-25 13:53:25 -0800303 stage = strndup(boot.stage, sizeof(boot.stage));
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800304
305 if (boot.command[0] != 0 && boot.command[0] != 255) {
Mark Salyzynf3bb31c2014-03-14 09:39:48 -0700306 LOGI("Boot command: %.*s\n", (int)sizeof(boot.command), boot.command);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800307 }
308
309 if (boot.status[0] != 0 && boot.status[0] != 255) {
Mark Salyzynf3bb31c2014-03-14 09:39:48 -0700310 LOGI("Boot status: %.*s\n", (int)sizeof(boot.status), boot.status);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800311 }
312
313 // --- if arguments weren't supplied, look in the bootloader control block
314 if (*argc <= 1) {
315 boot.recovery[sizeof(boot.recovery) - 1] = '\0'; // Ensure termination
316 const char *arg = strtok(boot.recovery, "\n");
317 if (arg != NULL && !strcmp(arg, "recovery")) {
318 *argv = (char **) malloc(sizeof(char *) * MAX_ARGS);
319 (*argv)[0] = strdup(arg);
320 for (*argc = 1; *argc < MAX_ARGS; ++*argc) {
321 if ((arg = strtok(NULL, "\n")) == NULL) break;
322 (*argv)[*argc] = strdup(arg);
323 }
324 LOGI("Got arguments from boot message\n");
325 } else if (boot.recovery[0] != 0 && boot.recovery[0] != 255) {
326 LOGE("Bad boot message\n\"%.20s\"\n", boot.recovery);
327 }
328 }
329
Tao Bao26112e52016-02-25 12:29:40 -0800330 // --- if that doesn't work, try the command file (if we have /cache).
331 if (*argc <= 1 && has_cache) {
Doug Zongkerd4208f92010-09-20 12:16:13 -0700332 FILE *fp = fopen_path(COMMAND_FILE, "r");
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800333 if (fp != NULL) {
Jin Feng93ffa752013-06-04 17:46:24 +0800334 char *token;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800335 char *argv0 = (*argv)[0];
336 *argv = (char **) malloc(sizeof(char *) * MAX_ARGS);
337 (*argv)[0] = argv0; // use the same program name
338
339 char buf[MAX_ARG_LENGTH];
340 for (*argc = 1; *argc < MAX_ARGS; ++*argc) {
341 if (!fgets(buf, sizeof(buf), fp)) break;
Jin Feng93ffa752013-06-04 17:46:24 +0800342 token = strtok(buf, "\r\n");
343 if (token != NULL) {
344 (*argv)[*argc] = strdup(token); // Strip newline.
345 } else {
346 --*argc;
347 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800348 }
349
350 check_and_fclose(fp, COMMAND_FILE);
351 LOGI("Got arguments from %s\n", COMMAND_FILE);
352 }
353 }
354
355 // --> write the arguments we have back into the bootloader control block
356 // always boot into recovery after this (until finish_recovery() is called)
357 strlcpy(boot.command, "boot-recovery", sizeof(boot.command));
358 strlcpy(boot.recovery, "recovery\n", sizeof(boot.recovery));
359 int i;
360 for (i = 1; i < *argc; ++i) {
361 strlcat(boot.recovery, (*argv)[i], sizeof(boot.recovery));
362 strlcat(boot.recovery, "\n", sizeof(boot.recovery));
363 }
364 set_bootloader_message(&boot);
365}
366
Doug Zongker34c98df2009-08-18 12:05:45 -0700367static void
Oscar Montemayor05231562009-11-30 08:40:57 -0800368set_sdcard_update_bootloader_message() {
Doug Zongker34c98df2009-08-18 12:05:45 -0700369 struct bootloader_message boot;
370 memset(&boot, 0, sizeof(boot));
371 strlcpy(boot.command, "boot-recovery", sizeof(boot.command));
372 strlcpy(boot.recovery, "recovery\n", sizeof(boot.recovery));
373 set_bootloader_message(&boot);
374}
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800375
Tao Baobef39712015-05-04 18:50:27 -0700376// Read from kernel log into buffer and write out to file.
377static void save_kernel_log(const char* destination) {
378 int klog_buf_len = klogctl(KLOG_SIZE_BUFFER, 0, 0);
Patrick Tjincd055ee2014-12-09 11:26:40 -0800379 if (klog_buf_len <= 0) {
Tao Baobef39712015-05-04 18:50:27 -0700380 LOGE("Error getting klog size: %s\n", strerror(errno));
Patrick Tjincd055ee2014-12-09 11:26:40 -0800381 return;
382 }
383
Tao Baobef39712015-05-04 18:50:27 -0700384 std::string buffer(klog_buf_len, 0);
385 int n = klogctl(KLOG_READ_ALL, &buffer[0], klog_buf_len);
386 if (n == -1) {
387 LOGE("Error in reading klog: %s\n", strerror(errno));
Patrick Tjincd055ee2014-12-09 11:26:40 -0800388 return;
389 }
Tao Baobef39712015-05-04 18:50:27 -0700390 buffer.resize(n);
391 android::base::WriteStringToFile(buffer, destination);
Patrick Tjincd055ee2014-12-09 11:26:40 -0800392}
393
Mark Salyzyna4f701a2016-03-09 14:58:16 -0800394// write content to the current pmsg session.
395static ssize_t __pmsg_write(const char *filename, const char *buf, size_t len) {
396 return __android_log_pmsg_file_write(LOG_ID_SYSTEM, ANDROID_LOG_INFO,
397 filename, buf, len);
398}
399
400static void copy_log_file_to_pmsg(const char* source, const char* destination) {
401 std::string content;
402 android::base::ReadFileToString(source, &content);
403 __pmsg_write(destination, content.c_str(), content.length());
404}
405
Tao Baof0124322015-04-11 02:04:11 +0000406// How much of the temp log we have copied to the copy in cache.
Chih-Hung Hsieh54a27472016-04-18 11:30:55 -0700407static off_t tmplog_offset = 0;
Tao Baof0124322015-04-11 02:04:11 +0000408
Tao Baobef39712015-05-04 18:50:27 -0700409static void copy_log_file(const char* source, const char* destination, bool append) {
410 FILE* dest_fp = fopen_path(destination, append ? "a" : "w");
411 if (dest_fp == nullptr) {
Doug Zongker2c3539e2010-09-29 13:21:30 -0700412 LOGE("Can't open %s\n", destination);
413 } else {
Tao Baobef39712015-05-04 18:50:27 -0700414 FILE* source_fp = fopen(source, "r");
415 if (source_fp != nullptr) {
Tao Baof0124322015-04-11 02:04:11 +0000416 if (append) {
Chih-Hung Hsieh54a27472016-04-18 11:30:55 -0700417 fseeko(source_fp, tmplog_offset, SEEK_SET); // Since last write
Doug Zongker2c3539e2010-09-29 13:21:30 -0700418 }
419 char buf[4096];
Tao Baobef39712015-05-04 18:50:27 -0700420 size_t bytes;
421 while ((bytes = fread(buf, 1, sizeof(buf), source_fp)) != 0) {
422 fwrite(buf, 1, bytes, dest_fp);
Doug Zongker2c3539e2010-09-29 13:21:30 -0700423 }
Tao Baobef39712015-05-04 18:50:27 -0700424 if (append) {
Chih-Hung Hsieh54a27472016-04-18 11:30:55 -0700425 tmplog_offset = ftello(source_fp);
Tao Baobef39712015-05-04 18:50:27 -0700426 }
427 check_and_fclose(source_fp, source);
Doug Zongker2c3539e2010-09-29 13:21:30 -0700428 }
Tao Baobef39712015-05-04 18:50:27 -0700429 check_and_fclose(dest_fp, destination);
Doug Zongker2c3539e2010-09-29 13:21:30 -0700430 }
431}
432
Tao Baobef39712015-05-04 18:50:27 -0700433// Rename last_log -> last_log.1 -> last_log.2 -> ... -> last_log.$max.
434// Similarly rename last_kmsg -> last_kmsg.1 -> ... -> last_kmsg.$max.
435// Overwrite any existing last_log.$max and last_kmsg.$max.
436static void rotate_logs(int max) {
Tao Bao682c34b2015-04-07 17:16:35 -0700437 // Logs should only be rotated once.
438 static bool rotated = false;
439 if (rotated) {
440 return;
441 }
442 rotated = true;
443 ensure_path_mounted(LAST_LOG_FILE);
Tao Baobef39712015-05-04 18:50:27 -0700444 ensure_path_mounted(LAST_KMSG_FILE);
Tao Bao682c34b2015-04-07 17:16:35 -0700445
Tao Bao682c34b2015-04-07 17:16:35 -0700446 for (int i = max-1; i >= 0; --i) {
Tao Bao80e46e02015-06-03 10:49:29 -0700447 std::string old_log = android::base::StringPrintf("%s", LAST_LOG_FILE);
448 if (i > 0) {
449 old_log += "." + std::to_string(i);
450 }
Tao Baobef39712015-05-04 18:50:27 -0700451 std::string new_log = android::base::StringPrintf("%s.%d", LAST_LOG_FILE, i+1);
452 // Ignore errors if old_log doesn't exist.
453 rename(old_log.c_str(), new_log.c_str());
454
Tao Bao80e46e02015-06-03 10:49:29 -0700455 std::string old_kmsg = android::base::StringPrintf("%s", LAST_KMSG_FILE);
456 if (i > 0) {
457 old_kmsg += "." + std::to_string(i);
458 }
Tao Baobef39712015-05-04 18:50:27 -0700459 std::string new_kmsg = android::base::StringPrintf("%s.%d", LAST_KMSG_FILE, i+1);
460 rename(old_kmsg.c_str(), new_kmsg.c_str());
Doug Zongkerda1ebae2013-05-16 11:23:48 -0700461 }
462}
Doug Zongker2c3539e2010-09-29 13:21:30 -0700463
Tao Bao682c34b2015-04-07 17:16:35 -0700464static void copy_logs() {
465 // We only rotate and record the log of the current session if there are
466 // actual attempts to modify the flash, such as wipes, installs from BCB
467 // or menu selections. This is to avoid unnecessary rotation (and
468 // possible deletion) of log files, if it does not do anything loggable.
469 if (!modified_flash) {
470 return;
471 }
472
Mark Salyzyna4f701a2016-03-09 14:58:16 -0800473 // Always write to pmsg, this allows the OTA logs to be caught in logcat -L
474 copy_log_file_to_pmsg(TEMPORARY_LOG_FILE, LAST_LOG_FILE);
475 copy_log_file_to_pmsg(TEMPORARY_INSTALL_FILE, LAST_INSTALL_FILE);
476
477 // We can do nothing for now if there's no /cache partition.
478 if (!has_cache) {
479 return;
480 }
481
Tao Baobef39712015-05-04 18:50:27 -0700482 rotate_logs(KEEP_LOG_COUNT);
Tao Bao682c34b2015-04-07 17:16:35 -0700483
Doug Zongkerf24fd7e2013-07-02 11:43:25 -0700484 // Copy logs to cache so the system can find out what happened.
Tao Baof0124322015-04-11 02:04:11 +0000485 copy_log_file(TEMPORARY_LOG_FILE, LOG_FILE, true);
486 copy_log_file(TEMPORARY_LOG_FILE, LAST_LOG_FILE, false);
487 copy_log_file(TEMPORARY_INSTALL_FILE, LAST_INSTALL_FILE, false);
488 save_kernel_log(LAST_KMSG_FILE);
Doug Zongkerf24fd7e2013-07-02 11:43:25 -0700489 chmod(LOG_FILE, 0600);
490 chown(LOG_FILE, 1000, 1000); // system user
Tao Baof0124322015-04-11 02:04:11 +0000491 chmod(LAST_KMSG_FILE, 0600);
492 chown(LAST_KMSG_FILE, 1000, 1000); // system user
Doug Zongkerf24fd7e2013-07-02 11:43:25 -0700493 chmod(LAST_LOG_FILE, 0640);
494 chmod(LAST_INSTALL_FILE, 0644);
495 sync();
496}
497
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800498// clear the recovery command and prepare to boot a (hopefully working) system,
Tianjie Xuc14d95d2016-03-24 11:50:34 -0700499// copy our log file to cache as well (for the system to read). This function is
500// idempotent: call it as many times as you like.
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800501static void
Tianjie Xuc14d95d2016-03-24 11:50:34 -0700502finish_recovery() {
Doug Zongker4f33e552012-08-23 13:16:12 -0700503 // Save the locale to cache, so if recovery is next started up
504 // without a --locale argument (eg, directly from the bootloader)
505 // it will use the last-known locale.
Mark Salyzyna4f701a2016-03-09 14:58:16 -0800506 if (locale != NULL) {
507 size_t len = strlen(locale);
508 __pmsg_write(LOCALE_FILE, locale, len);
509 if (has_cache) {
510 LOGI("Saving locale \"%s\"\n", locale);
511 FILE* fp = fopen_path(LOCALE_FILE, "w");
512 fwrite(locale, 1, len, fp);
513 fflush(fp);
514 fsync(fileno(fp));
515 check_and_fclose(fp, LOCALE_FILE);
516 }
Doug Zongker4f33e552012-08-23 13:16:12 -0700517 }
518
Doug Zongkerf24fd7e2013-07-02 11:43:25 -0700519 copy_logs();
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800520
Doug Zongkere5d5ac72012-04-12 11:01:22 -0700521 // Reset to normal system boot so recovery won't cycle indefinitely.
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800522 struct bootloader_message boot;
523 memset(&boot, 0, sizeof(boot));
524 set_bootloader_message(&boot);
525
526 // Remove the command file, so recovery won't repeat indefinitely.
Tao Bao26112e52016-02-25 12:29:40 -0800527 if (has_cache) {
528 if (ensure_path_mounted(COMMAND_FILE) != 0 || (unlink(COMMAND_FILE) && errno != ENOENT)) {
529 LOGW("Can't unlink %s\n", COMMAND_FILE);
530 }
531 ensure_path_unmounted(CACHE_ROOT);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800532 }
533
534 sync(); // For good measure.
535}
536
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700537typedef struct _saved_log_file {
538 char* name;
539 struct stat st;
540 unsigned char* data;
541 struct _saved_log_file* next;
542} saved_log_file;
543
Elliott Hughes945548e2015-06-05 17:59:56 -0700544static bool erase_volume(const char* volume) {
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700545 bool is_cache = (strcmp(volume, CACHE_ROOT) == 0);
Paul Lawrenced0db3372015-11-05 13:38:40 -0800546 bool is_data = (strcmp(volume, DATA_ROOT) == 0);
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700547
Doug Zongker02ec6b82012-08-22 17:26:40 -0700548 ui->SetBackground(RecoveryUI::ERASING);
Doug Zongker211aebc2011-10-28 15:13:10 -0700549 ui->SetProgressType(RecoveryUI::INDETERMINATE);
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700550
551 saved_log_file* head = NULL;
552
553 if (is_cache) {
Tao Baobef39712015-05-04 18:50:27 -0700554 // If we're reformatting /cache, we load any past logs
555 // (i.e. "/cache/recovery/last_*") and the current log
556 // ("/cache/recovery/log") into memory, so we can restore them after
557 // the reformat.
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700558
559 ensure_path_mounted(volume);
560
561 DIR* d;
562 struct dirent* de;
563 d = opendir(CACHE_LOG_DIR);
564 if (d) {
565 char path[PATH_MAX];
566 strcpy(path, CACHE_LOG_DIR);
567 strcat(path, "/");
568 int path_len = strlen(path);
569 while ((de = readdir(d)) != NULL) {
Tao Baobef39712015-05-04 18:50:27 -0700570 if (strncmp(de->d_name, "last_", 5) == 0 || strcmp(de->d_name, "log") == 0) {
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700571 saved_log_file* p = (saved_log_file*) malloc(sizeof(saved_log_file));
572 strcpy(path+path_len, de->d_name);
573 p->name = strdup(path);
574 if (stat(path, &(p->st)) == 0) {
575 // truncate files to 512kb
576 if (p->st.st_size > (1 << 19)) {
577 p->st.st_size = 1 << 19;
578 }
579 p->data = (unsigned char*) malloc(p->st.st_size);
580 FILE* f = fopen(path, "rb");
581 fread(p->data, 1, p->st.st_size, f);
582 fclose(f);
583 p->next = head;
584 head = p;
585 } else {
586 free(p);
587 }
588 }
589 }
590 closedir(d);
591 } else {
592 if (errno != ENOENT) {
593 printf("opendir failed: %s\n", strerror(errno));
594 }
595 }
596 }
597
Doug Zongker211aebc2011-10-28 15:13:10 -0700598 ui->Print("Formatting %s...\n", volume);
Doug Zongker2c3539e2010-09-29 13:21:30 -0700599
Doug Zongkerd0181b82011-10-19 10:51:12 -0700600 ensure_path_unmounted(volume);
Paul Lawrenced0db3372015-11-05 13:38:40 -0800601
602 int result;
603
604 if (is_data && reason && strcmp(reason, "convert_fbe") == 0) {
605 // Create convert_fbe breadcrumb file to signal to init
606 // to convert to file based encryption, not full disk encryption
Paul Lawrence661f8a62016-02-25 12:42:19 -0800607 if (mkdir(CONVERT_FBE_DIR, 0700) != 0) {
608 ui->Print("Failed to make convert_fbe dir %s\n", strerror(errno));
609 return true;
610 }
Paul Lawrenced0db3372015-11-05 13:38:40 -0800611 FILE* f = fopen(CONVERT_FBE_FILE, "wb");
612 if (!f) {
Paul Lawrence661f8a62016-02-25 12:42:19 -0800613 ui->Print("Failed to convert to file encryption %s\n", strerror(errno));
Paul Lawrenced0db3372015-11-05 13:38:40 -0800614 return true;
615 }
616 fclose(f);
617 result = format_volume(volume, CONVERT_FBE_DIR);
618 remove(CONVERT_FBE_FILE);
619 rmdir(CONVERT_FBE_DIR);
620 } else {
621 result = format_volume(volume);
622 }
Doug Zongkerd0181b82011-10-19 10:51:12 -0700623
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700624 if (is_cache) {
625 while (head) {
626 FILE* f = fopen_path(head->name, "wb");
627 if (f) {
628 fwrite(head->data, 1, head->st.st_size, f);
629 fclose(f);
630 chmod(head->name, head->st.st_mode);
631 chown(head->name, head->st.st_uid, head->st.st_gid);
632 }
633 free(head->name);
634 free(head->data);
635 saved_log_file* temp = head->next;
636 free(head);
637 head = temp;
638 }
639
Tao Baof0124322015-04-11 02:04:11 +0000640 // Any part of the log we'd copied to cache is now gone.
641 // Reset the pointer so we copy from the beginning of the temp
642 // log.
643 tmplog_offset = 0;
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700644 copy_logs();
Doug Zongker2c3539e2010-09-29 13:21:30 -0700645 }
646
Elliott Hughes945548e2015-06-05 17:59:56 -0700647 return (result == 0);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800648}
649
Doug Zongkerf93d8162009-09-22 15:16:02 -0700650static int
Doug Zongker28ce47c2011-10-28 10:33:05 -0700651get_menu_selection(const char* const * headers, const char* const * items,
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700652 int menu_only, int initial_selection, Device* device) {
Doug Zongkerf93d8162009-09-22 15:16:02 -0700653 // throw away keys pressed previously, so user doesn't
654 // accidentally trigger menu items.
Doug Zongker211aebc2011-10-28 15:13:10 -0700655 ui->FlushKeys();
Doug Zongkerf93d8162009-09-22 15:16:02 -0700656
Doug Zongker211aebc2011-10-28 15:13:10 -0700657 ui->StartMenu(headers, items, initial_selection);
Doug Zongker8674a722010-09-15 11:08:23 -0700658 int selected = initial_selection;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800659 int chosen_item = -1;
660
Doug Zongkerf93d8162009-09-22 15:16:02 -0700661 while (chosen_item < 0) {
Doug Zongker211aebc2011-10-28 15:13:10 -0700662 int key = ui->WaitKey();
663 int visible = ui->IsTextVisible();
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800664
Doug Zongker5cae4452011-01-25 13:15:30 -0800665 if (key == -1) { // ui_wait_key() timed out
Doug Zongker211aebc2011-10-28 15:13:10 -0700666 if (ui->WasTextEverVisible()) {
Doug Zongker5cae4452011-01-25 13:15:30 -0800667 continue;
668 } else {
669 LOGI("timed out waiting for key input; rebooting.\n");
Doug Zongker211aebc2011-10-28 15:13:10 -0700670 ui->EndMenu();
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700671 return 0; // XXX fixme
Doug Zongker5cae4452011-01-25 13:15:30 -0800672 }
673 }
674
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700675 int action = device->HandleMenuKey(key, visible);
Doug Zongkerddd6a282009-06-09 12:22:33 -0700676
677 if (action < 0) {
678 switch (action) {
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700679 case Device::kHighlightUp:
Elliott Hughes642aaa72015-04-10 12:47:46 -0700680 selected = ui->SelectMenu(--selected);
Doug Zongkerddd6a282009-06-09 12:22:33 -0700681 break;
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700682 case Device::kHighlightDown:
Elliott Hughes642aaa72015-04-10 12:47:46 -0700683 selected = ui->SelectMenu(++selected);
Doug Zongkerddd6a282009-06-09 12:22:33 -0700684 break;
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700685 case Device::kInvokeItem:
Doug Zongkerddd6a282009-06-09 12:22:33 -0700686 chosen_item = selected;
687 break;
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700688 case Device::kNoAction:
Doug Zongkerddd6a282009-06-09 12:22:33 -0700689 break;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800690 }
Doug Zongkerf93d8162009-09-22 15:16:02 -0700691 } else if (!menu_only) {
Doug Zongkerddd6a282009-06-09 12:22:33 -0700692 chosen_item = action;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800693 }
Doug Zongkerf93d8162009-09-22 15:16:02 -0700694 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800695
Doug Zongker211aebc2011-10-28 15:13:10 -0700696 ui->EndMenu();
Doug Zongkerf93d8162009-09-22 15:16:02 -0700697 return chosen_item;
698}
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800699
Doug Zongker8674a722010-09-15 11:08:23 -0700700static int compare_string(const void* a, const void* b) {
701 return strcmp(*(const char**)a, *(const char**)b);
702}
703
Doug Zongker93950222014-07-08 14:10:23 -0700704// Returns a malloc'd path, or NULL.
Elliott Hughes30694c92015-03-25 15:16:51 -0700705static char* browse_directory(const char* path, Device* device) {
Michael Ward9d2629c2011-06-23 22:14:24 -0700706 ensure_path_mounted(path);
Doug Zongkerc18eeb82010-09-21 16:49:26 -0700707
Elliott Hughes30694c92015-03-25 15:16:51 -0700708 DIR* d = opendir(path);
Doug Zongker8674a722010-09-15 11:08:23 -0700709 if (d == NULL) {
710 LOGE("error opening %s: %s\n", path, strerror(errno));
Doug Zongker93950222014-07-08 14:10:23 -0700711 return NULL;
Doug Zongker8674a722010-09-15 11:08:23 -0700712 }
713
Doug Zongker8674a722010-09-15 11:08:23 -0700714 int d_size = 0;
715 int d_alloc = 10;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700716 char** dirs = (char**)malloc(d_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700717 int z_size = 1;
718 int z_alloc = 10;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700719 char** zips = (char**)malloc(z_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700720 zips[0] = strdup("../");
721
Elliott Hughes30694c92015-03-25 15:16:51 -0700722 struct dirent* de;
Doug Zongker8674a722010-09-15 11:08:23 -0700723 while ((de = readdir(d)) != NULL) {
724 int name_len = strlen(de->d_name);
725
726 if (de->d_type == DT_DIR) {
727 // skip "." and ".." entries
728 if (name_len == 1 && de->d_name[0] == '.') continue;
729 if (name_len == 2 && de->d_name[0] == '.' &&
730 de->d_name[1] == '.') continue;
731
732 if (d_size >= d_alloc) {
733 d_alloc *= 2;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700734 dirs = (char**)realloc(dirs, d_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700735 }
Doug Zongker28ce47c2011-10-28 10:33:05 -0700736 dirs[d_size] = (char*)malloc(name_len + 2);
Doug Zongker8674a722010-09-15 11:08:23 -0700737 strcpy(dirs[d_size], de->d_name);
738 dirs[d_size][name_len] = '/';
739 dirs[d_size][name_len+1] = '\0';
740 ++d_size;
741 } else if (de->d_type == DT_REG &&
742 name_len >= 4 &&
743 strncasecmp(de->d_name + (name_len-4), ".zip", 4) == 0) {
744 if (z_size >= z_alloc) {
745 z_alloc *= 2;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700746 zips = (char**)realloc(zips, z_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700747 }
748 zips[z_size++] = strdup(de->d_name);
749 }
750 }
751 closedir(d);
752
753 qsort(dirs, d_size, sizeof(char*), compare_string);
754 qsort(zips, z_size, sizeof(char*), compare_string);
755
756 // append dirs to the zips list
757 if (d_size + z_size + 1 > z_alloc) {
758 z_alloc = d_size + z_size + 1;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700759 zips = (char**)realloc(zips, z_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700760 }
761 memcpy(zips + z_size, dirs, d_size * sizeof(char*));
762 free(dirs);
763 z_size += d_size;
764 zips[z_size] = NULL;
765
Elliott Hughes8fd86d72015-04-13 14:36:02 -0700766 const char* headers[] = { "Choose a package to install:", path, NULL };
Elliott Hughes30694c92015-03-25 15:16:51 -0700767
Doug Zongker93950222014-07-08 14:10:23 -0700768 char* result;
Doug Zongker8674a722010-09-15 11:08:23 -0700769 int chosen_item = 0;
Doug Zongker93950222014-07-08 14:10:23 -0700770 while (true) {
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700771 chosen_item = get_menu_selection(headers, zips, 1, chosen_item, device);
Doug Zongker8674a722010-09-15 11:08:23 -0700772
773 char* item = zips[chosen_item];
774 int item_len = strlen(item);
775 if (chosen_item == 0) { // item 0 is always "../"
Michael Ward9d2629c2011-06-23 22:14:24 -0700776 // go up but continue browsing (if the caller is update_directory)
Doug Zongker93950222014-07-08 14:10:23 -0700777 result = NULL;
Doug Zongker8674a722010-09-15 11:08:23 -0700778 break;
779 }
Doug Zongker93950222014-07-08 14:10:23 -0700780
781 char new_path[PATH_MAX];
782 strlcpy(new_path, path, PATH_MAX);
783 strlcat(new_path, "/", PATH_MAX);
784 strlcat(new_path, item, PATH_MAX);
785
786 if (item[item_len-1] == '/') {
787 // recurse down into a subdirectory
788 new_path[strlen(new_path)-1] = '\0'; // truncate the trailing '/'
789 result = browse_directory(new_path, device);
790 if (result) break;
791 } else {
792 // selected a zip file: return the malloc'd path to the caller.
793 result = strdup(new_path);
794 break;
795 }
796 }
Doug Zongker8674a722010-09-15 11:08:23 -0700797
Elliott Hughes30694c92015-03-25 15:16:51 -0700798 for (int i = 0; i < z_size; ++i) free(zips[i]);
Doug Zongker8674a722010-09-15 11:08:23 -0700799 free(zips);
Doug Zongker8674a722010-09-15 11:08:23 -0700800
801 return result;
802}
803
Elliott Hughes30694c92015-03-25 15:16:51 -0700804static bool yes_no(Device* device, const char* question1, const char* question2) {
Elliott Hughes8fd86d72015-04-13 14:36:02 -0700805 const char* headers[] = { question1, question2, NULL };
Elliott Hughes30694c92015-03-25 15:16:51 -0700806 const char* items[] = { " No", " Yes", NULL };
Doug Zongkerddd6a282009-06-09 12:22:33 -0700807
Elliott Hughes30694c92015-03-25 15:16:51 -0700808 int chosen_item = get_menu_selection(headers, items, 1, 0, device);
809 return (chosen_item == 1);
810}
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800811
Tao Baoe39a9bc2015-03-31 12:19:05 -0700812// Return true on success.
813static bool wipe_data(int should_confirm, Device* device) {
814 if (should_confirm && !yes_no(device, "Wipe all user data?", " THIS CAN NOT BE UNDONE!")) {
815 return false;
Doug Zongkerf93d8162009-09-22 15:16:02 -0700816 }
Doug Zongker1066d2c2009-04-01 13:57:40 -0700817
Tao Bao682c34b2015-04-07 17:16:35 -0700818 modified_flash = true;
819
Doug Zongker211aebc2011-10-28 15:13:10 -0700820 ui->Print("\n-- Wiping data...\n");
Elliott Hughes945548e2015-06-05 17:59:56 -0700821 bool success =
822 device->PreWipeData() &&
823 erase_volume("/data") &&
Tao Bao26112e52016-02-25 12:29:40 -0800824 (has_cache ? erase_volume("/cache") : true) &&
Elliott Hughes945548e2015-06-05 17:59:56 -0700825 device->PostWipeData();
826 ui->Print("Data wipe %s.\n", success ? "complete" : "failed");
827 return success;
Doug Zongkerf93d8162009-09-22 15:16:02 -0700828}
829
Tao Baoe39a9bc2015-03-31 12:19:05 -0700830// Return true on success.
831static bool wipe_cache(bool should_confirm, Device* device) {
Tao Bao26112e52016-02-25 12:29:40 -0800832 if (!has_cache) {
833 ui->Print("No /cache partition found.\n");
834 return false;
835 }
836
Elliott Hughes30694c92015-03-25 15:16:51 -0700837 if (should_confirm && !yes_no(device, "Wipe cache?", " THIS CAN NOT BE UNDONE!")) {
Tao Baoe39a9bc2015-03-31 12:19:05 -0700838 return false;
Elliott Hughes30694c92015-03-25 15:16:51 -0700839 }
840
Tao Bao682c34b2015-04-07 17:16:35 -0700841 modified_flash = true;
842
Elliott Hughes30694c92015-03-25 15:16:51 -0700843 ui->Print("\n-- Wiping cache...\n");
Elliott Hughes945548e2015-06-05 17:59:56 -0700844 bool success = erase_volume("/cache");
845 ui->Print("Cache wipe %s.\n", success ? "complete" : "failed");
846 return success;
Elliott Hughes30694c92015-03-25 15:16:51 -0700847}
848
Tao Bao862a4c12016-06-02 11:16:50 -0700849// Secure-wipe a given partition. It uses BLKSECDISCARD, if supported.
850// Otherwise, it goes with BLKDISCARD (if device supports BLKDISCARDZEROES) or
851// BLKZEROOUT.
852static bool secure_wipe_partition(const std::string& partition) {
853 android::base::unique_fd fd(TEMP_FAILURE_RETRY(open(partition.c_str(), O_WRONLY)));
854 if (fd == -1) {
855 LOGE("failed to open \"%s\": %s\n", partition.c_str(), strerror(errno));
856 return false;
857 }
858
859 uint64_t range[2] = {0, 0};
860 if (ioctl(fd, BLKGETSIZE64, &range[1]) == -1 || range[1] == 0) {
861 LOGE("failed to get partition size: %s\n", strerror(errno));
862 return false;
863 }
864 printf("Secure-wiping \"%s\" from %" PRIu64 " to %" PRIu64 ".\n",
865 partition.c_str(), range[0], range[1]);
866
867 printf("Trying BLKSECDISCARD...\t");
868 if (ioctl(fd, BLKSECDISCARD, &range) == -1) {
869 printf("failed: %s\n", strerror(errno));
870
871 // Use BLKDISCARD if it zeroes out blocks, otherwise use BLKZEROOUT.
872 unsigned int zeroes;
873 if (ioctl(fd, BLKDISCARDZEROES, &zeroes) == 0 && zeroes != 0) {
874 printf("Trying BLKDISCARD...\t");
875 if (ioctl(fd, BLKDISCARD, &range) == -1) {
876 printf("failed: %s\n", strerror(errno));
877 return false;
878 }
879 } else {
880 printf("Trying BLKZEROOUT...\t");
881 if (ioctl(fd, BLKZEROOUT, &range) == -1) {
882 printf("failed: %s\n", strerror(errno));
883 return false;
884 }
885 }
886 }
887
888 printf("done\n");
889 return true;
890}
891
Tao Bao108ab212016-06-10 10:13:32 -0700892// Wipe the current A/B device, with a secure wipe of all the partitions in
893// RECOVERY_WIPE.
894static bool wipe_ab_device() {
Tao Bao862a4c12016-06-02 11:16:50 -0700895 ui->SetBackground(RecoveryUI::ERASING);
896 ui->SetProgressType(RecoveryUI::INDETERMINATE);
897
898 std::string partition_list;
Tao Bao108ab212016-06-10 10:13:32 -0700899 if (!android::base::ReadFileToString(RECOVERY_WIPE, &partition_list)) {
900 LOGE("failed to read \"%s\".\n", RECOVERY_WIPE);
Tao Bao862a4c12016-06-02 11:16:50 -0700901 return false;
902 }
903
904 std::vector<std::string> lines = android::base::Split(partition_list, "\n");
905 for (const std::string& line : lines) {
906 std::string partition = android::base::Trim(line);
907 // Ignore '#' comment or empty lines.
908 if (android::base::StartsWith(partition, "#") || partition.empty()) {
909 continue;
910 }
911
912 // Proceed anyway even if it fails to wipe some partition.
913 secure_wipe_partition(partition);
914 }
915 return true;
916}
917
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700918static void choose_recovery_file(Device* device) {
Tao Bao26112e52016-02-25 12:29:40 -0800919 if (!has_cache) {
920 ui->Print("No /cache partition found.\n");
921 return;
922 }
923
Elliott Hughesc0491632015-05-06 12:40:05 -0700924 // "Back" + KEEP_LOG_COUNT * 2 + terminating nullptr entry
925 char* entries[1 + KEEP_LOG_COUNT * 2 + 1];
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700926 memset(entries, 0, sizeof(entries));
927
Tao Baobef39712015-05-04 18:50:27 -0700928 unsigned int n = 0;
Patrick Tjincd055ee2014-12-09 11:26:40 -0800929
Patrick Tjincd055ee2014-12-09 11:26:40 -0800930 // Add LAST_LOG_FILE + LAST_LOG_FILE.x
Tao Baobef39712015-05-04 18:50:27 -0700931 // Add LAST_KMSG_FILE + LAST_KMSG_FILE.x
932 for (int i = 0; i < KEEP_LOG_COUNT; i++) {
933 char* log_file;
Tao Bao80e46e02015-06-03 10:49:29 -0700934 int ret;
935 ret = (i == 0) ? asprintf(&log_file, "%s", LAST_LOG_FILE) :
936 asprintf(&log_file, "%s.%d", LAST_LOG_FILE, i);
937 if (ret == -1) {
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700938 // memory allocation failure - return early. Should never happen.
939 return;
940 }
Tao Baobef39712015-05-04 18:50:27 -0700941 if ((ensure_path_mounted(log_file) != 0) || (access(log_file, R_OK) == -1)) {
942 free(log_file);
943 } else {
944 entries[n++] = log_file;
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700945 }
Tao Baobef39712015-05-04 18:50:27 -0700946
947 char* kmsg_file;
Tao Bao80e46e02015-06-03 10:49:29 -0700948 ret = (i == 0) ? asprintf(&kmsg_file, "%s", LAST_KMSG_FILE) :
949 asprintf(&kmsg_file, "%s.%d", LAST_KMSG_FILE, i);
950 if (ret == -1) {
Tao Baobef39712015-05-04 18:50:27 -0700951 // memory allocation failure - return early. Should never happen.
952 return;
953 }
954 if ((ensure_path_mounted(kmsg_file) != 0) || (access(kmsg_file, R_OK) == -1)) {
955 free(kmsg_file);
956 } else {
957 entries[n++] = kmsg_file;
958 }
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700959 }
960
Elliott Hughesc0491632015-05-06 12:40:05 -0700961 entries[n++] = strdup("Back");
962
Tao Baobef39712015-05-04 18:50:27 -0700963 const char* headers[] = { "Select file to view", nullptr };
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700964
Elliott Hughes8de52072015-04-08 20:06:50 -0700965 while (true) {
Elliott Hughes30694c92015-03-25 15:16:51 -0700966 int chosen_item = get_menu_selection(headers, entries, 1, 0, device);
Elliott Hughesc0491632015-05-06 12:40:05 -0700967 if (strcmp(entries[chosen_item], "Back") == 0) break;
Elliott Hughes8de52072015-04-08 20:06:50 -0700968
Elliott Hughes8de52072015-04-08 20:06:50 -0700969 ui->ShowFile(entries[chosen_item]);
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700970 }
971
Tao Baobef39712015-05-04 18:50:27 -0700972 for (size_t i = 0; i < (sizeof(entries) / sizeof(*entries)); i++) {
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700973 free(entries[i]);
974 }
975}
976
Elliott Hughes498cda62016-04-14 16:49:04 -0700977static void run_graphics_test(Device* device) {
978 // Switch to graphics screen.
979 ui->ShowText(false);
980
981 ui->SetProgressType(RecoveryUI::INDETERMINATE);
982 ui->SetBackground(RecoveryUI::INSTALLING_UPDATE);
983 sleep(1);
984
985 ui->SetBackground(RecoveryUI::ERROR);
986 sleep(1);
987
988 ui->SetBackground(RecoveryUI::NO_COMMAND);
989 sleep(1);
990
991 ui->SetBackground(RecoveryUI::ERASING);
992 sleep(1);
993
994 ui->SetBackground(RecoveryUI::INSTALLING_UPDATE);
995
996 ui->SetProgressType(RecoveryUI::DETERMINATE);
997 ui->ShowProgress(1.0, 10.0);
998 float fraction = 0.0;
999 for (size_t i = 0; i < 100; ++i) {
1000 fraction += .01;
1001 ui->SetProgress(fraction);
1002 usleep(100000);
1003 }
1004
1005 ui->ShowText(true);
1006}
1007
Tao Baocdcf28f2016-01-13 15:05:20 -08001008// How long (in seconds) we wait for the fuse-provided package file to
1009// appear, before timing out.
1010#define SDCARD_INSTALL_TIMEOUT 10
1011
Tao Bao145d8612015-03-25 15:51:15 -07001012static int apply_from_sdcard(Device* device, bool* wipe_cache) {
Tao Bao682c34b2015-04-07 17:16:35 -07001013 modified_flash = true;
1014
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001015 if (ensure_path_mounted(SDCARD_ROOT) != 0) {
1016 ui->Print("\n-- Couldn't mount %s.\n", SDCARD_ROOT);
1017 return INSTALL_ERROR;
1018 }
1019
1020 char* path = browse_directory(SDCARD_ROOT, device);
1021 if (path == NULL) {
Elliott Hughes018ed312015-04-08 16:51:36 -07001022 ui->Print("\n-- No package file selected.\n");
caozhiyuanb4effb92015-06-10 16:46:38 +08001023 ensure_path_unmounted(SDCARD_ROOT);
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001024 return INSTALL_ERROR;
1025 }
1026
1027 ui->Print("\n-- Install %s ...\n", path);
1028 set_sdcard_update_bootloader_message();
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001029
Tao Baocdcf28f2016-01-13 15:05:20 -08001030 // We used to use fuse in a thread as opposed to a process. Since accessing
1031 // through fuse involves going from kernel to userspace to kernel, it leads
1032 // to deadlock when a page fault occurs. (Bug: 26313124)
1033 pid_t child;
1034 if ((child = fork()) == 0) {
1035 bool status = start_sdcard_fuse(path);
1036
1037 _exit(status ? EXIT_SUCCESS : EXIT_FAILURE);
1038 }
1039
1040 // FUSE_SIDELOAD_HOST_PATHNAME will start to exist once the fuse in child
1041 // process is ready.
1042 int result = INSTALL_ERROR;
1043 int status;
1044 bool waited = false;
1045 for (int i = 0; i < SDCARD_INSTALL_TIMEOUT; ++i) {
1046 if (waitpid(child, &status, WNOHANG) == -1) {
1047 result = INSTALL_ERROR;
1048 waited = true;
1049 break;
1050 }
1051
1052 struct stat sb;
1053 if (stat(FUSE_SIDELOAD_HOST_PATHNAME, &sb) == -1) {
1054 if (errno == ENOENT && i < SDCARD_INSTALL_TIMEOUT-1) {
1055 sleep(1);
1056 continue;
1057 } else {
1058 LOGE("Timed out waiting for the fuse-provided package.\n");
1059 result = INSTALL_ERROR;
1060 kill(child, SIGKILL);
1061 break;
1062 }
1063 }
1064
1065 result = install_package(FUSE_SIDELOAD_HOST_PATHNAME, wipe_cache,
Tianjie Xu16255832016-04-30 11:49:59 -07001066 TEMPORARY_INSTALL_FILE, false, 0/*retry_count*/);
Tao Baocdcf28f2016-01-13 15:05:20 -08001067 break;
1068 }
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001069
Tao Baocdcf28f2016-01-13 15:05:20 -08001070 if (!waited) {
1071 // Calling stat() on this magic filename signals the fuse
1072 // filesystem to shut down.
1073 struct stat sb;
1074 stat(FUSE_SIDELOAD_HOST_EXIT_PATHNAME, &sb);
1075
1076 waitpid(child, &status, 0);
1077 }
1078
1079 if (!WIFEXITED(status) || WEXITSTATUS(status) != 0) {
1080 LOGE("Error exit from the fuse process: %d\n", WEXITSTATUS(status));
1081 }
1082
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001083 ensure_path_unmounted(SDCARD_ROOT);
Tao Baocdcf28f2016-01-13 15:05:20 -08001084 return result;
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001085}
1086
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001087// Return REBOOT, SHUTDOWN, or REBOOT_BOOTLOADER. Returning NO_ACTION
1088// means to take the default, which is to reboot or shutdown depending
1089// on if the --shutdown_after flag was passed to recovery.
1090static Device::BuiltinAction
Doug Zongker6c8553d2012-09-24 10:40:47 -07001091prompt_and_wait(Device* device, int status) {
Doug Zongkerf93d8162009-09-22 15:16:02 -07001092 for (;;) {
Tianjie Xuc14d95d2016-03-24 11:50:34 -07001093 finish_recovery();
Doug Zongker6c8553d2012-09-24 10:40:47 -07001094 switch (status) {
1095 case INSTALL_SUCCESS:
1096 case INSTALL_NONE:
1097 ui->SetBackground(RecoveryUI::NO_COMMAND);
1098 break;
1099
1100 case INSTALL_ERROR:
1101 case INSTALL_CORRUPT:
1102 ui->SetBackground(RecoveryUI::ERROR);
1103 break;
1104 }
Doug Zongker211aebc2011-10-28 15:13:10 -07001105 ui->SetProgressType(RecoveryUI::EMPTY);
Doug Zongkerf93d8162009-09-22 15:16:02 -07001106
Elliott Hughes8fd86d72015-04-13 14:36:02 -07001107 int chosen_item = get_menu_selection(nullptr, device->GetMenuItems(), 0, 0, device);
Doug Zongkerf93d8162009-09-22 15:16:02 -07001108
1109 // device-specific code may take some action here. It may
1110 // return one of the core actions handled in the switch
1111 // statement below.
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001112 Device::BuiltinAction chosen_action = device->InvokeMenuItem(chosen_item);
Doug Zongkerf93d8162009-09-22 15:16:02 -07001113
Elliott Hughes30694c92015-03-25 15:16:51 -07001114 bool should_wipe_cache = false;
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001115 switch (chosen_action) {
1116 case Device::NO_ACTION:
1117 break;
1118
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001119 case Device::REBOOT:
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001120 case Device::SHUTDOWN:
1121 case Device::REBOOT_BOOTLOADER:
1122 return chosen_action;
Doug Zongkerf93d8162009-09-22 15:16:02 -07001123
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001124 case Device::WIPE_DATA:
1125 wipe_data(ui->IsTextVisible(), device);
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001126 if (!ui->IsTextVisible()) return Device::NO_ACTION;
Doug Zongkerf93d8162009-09-22 15:16:02 -07001127 break;
1128
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001129 case Device::WIPE_CACHE:
Elliott Hughes30694c92015-03-25 15:16:51 -07001130 wipe_cache(ui->IsTextVisible(), device);
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001131 if (!ui->IsTextVisible()) return Device::NO_ACTION;
Doug Zongkerf93d8162009-09-22 15:16:02 -07001132 break;
1133
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001134 case Device::APPLY_ADB_SIDELOAD:
Elliott Hughesec283402015-04-10 10:01:53 -07001135 case Device::APPLY_SDCARD:
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001136 {
1137 bool adb = (chosen_action == Device::APPLY_ADB_SIDELOAD);
1138 if (adb) {
Elliott Hughes30694c92015-03-25 15:16:51 -07001139 status = apply_from_adb(ui, &should_wipe_cache, TEMPORARY_INSTALL_FILE);
Doug Zongkerd0181b82011-10-19 10:51:12 -07001140 } else {
Elliott Hughes30694c92015-03-25 15:16:51 -07001141 status = apply_from_sdcard(device, &should_wipe_cache);
Doug Zongkerd0181b82011-10-19 10:51:12 -07001142 }
Doug Zongker945fc682014-07-10 10:50:39 -07001143
Elliott Hughes30694c92015-03-25 15:16:51 -07001144 if (status == INSTALL_SUCCESS && should_wipe_cache) {
Tao Baoe39a9bc2015-03-31 12:19:05 -07001145 if (!wipe_cache(false, device)) {
1146 status = INSTALL_ERROR;
1147 }
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001148 }
1149
Tao Baoc679f932015-03-30 09:43:49 -07001150 if (status != INSTALL_SUCCESS) {
1151 ui->SetBackground(RecoveryUI::ERROR);
1152 ui->Print("Installation aborted.\n");
1153 copy_logs();
1154 } else if (!ui->IsTextVisible()) {
1155 return Device::NO_ACTION; // reboot if logs aren't visible
1156 } else {
1157 ui->Print("\nInstall from %s complete.\n", adb ? "ADB" : "SD card");
Doug Zongker8674a722010-09-15 11:08:23 -07001158 }
Doug Zongkerf93d8162009-09-22 15:16:02 -07001159 }
1160 break;
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001161
Elliott Hughesec283402015-04-10 10:01:53 -07001162 case Device::VIEW_RECOVERY_LOGS:
1163 choose_recovery_file(device);
Michael Ward9d2629c2011-06-23 22:14:24 -07001164 break;
Doug Zongker9270a202012-01-09 15:16:13 -08001165
Elliott Hughes498cda62016-04-14 16:49:04 -07001166 case Device::RUN_GRAPHICS_TEST:
1167 run_graphics_test(device);
1168 break;
1169
Elliott Hughesec283402015-04-10 10:01:53 -07001170 case Device::MOUNT_SYSTEM:
Tao Baoabb8f772015-07-30 14:43:27 -07001171 char system_root_image[PROPERTY_VALUE_MAX];
1172 property_get("ro.build.system_root_image", system_root_image, "");
1173
1174 // For a system image built with the root directory (i.e.
1175 // system_root_image == "true"), we mount it to /system_root, and symlink /system
1176 // to /system_root/system to make adb shell work (the symlink is created through
1177 // the build system).
1178 // Bug: 22855115
1179 if (strcmp(system_root_image, "true") == 0) {
1180 if (ensure_path_mounted_at("/", "/system_root") != -1) {
1181 ui->Print("Mounted /system.\n");
1182 }
1183 } else {
1184 if (ensure_path_mounted("/system") != -1) {
1185 ui->Print("Mounted /system.\n");
1186 }
Elliott Hughesec283402015-04-10 10:01:53 -07001187 }
Tao Baoabb8f772015-07-30 14:43:27 -07001188
Nick Kralevicha9ad0322014-10-22 18:38:48 -07001189 break;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001190 }
1191 }
1192}
1193
1194static void
Oscar Montemayor05231562009-11-30 08:40:57 -08001195print_property(const char *key, const char *name, void *cookie) {
Doug Zongker56c51052010-07-01 09:18:44 -07001196 printf("%s=%s\n", key, name);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001197}
1198
Doug Zongker02ec6b82012-08-22 17:26:40 -07001199static void
1200load_locale_from_cache() {
1201 FILE* fp = fopen_path(LOCALE_FILE, "r");
1202 char buffer[80];
1203 if (fp != NULL) {
1204 fgets(buffer, sizeof(buffer), fp);
1205 int j = 0;
Doug Zongker5fa8c232012-09-18 12:37:02 -07001206 unsigned int i;
Doug Zongker02ec6b82012-08-22 17:26:40 -07001207 for (i = 0; i < sizeof(buffer) && buffer[i]; ++i) {
1208 if (!isspace(buffer[i])) {
1209 buffer[j++] = buffer[i];
1210 }
1211 }
1212 buffer[j] = 0;
1213 locale = strdup(buffer);
Devin Kim6016d082012-10-08 09:47:37 -07001214 check_and_fclose(fp, LOCALE_FILE);
Doug Zongker02ec6b82012-08-22 17:26:40 -07001215 }
1216}
1217
Doug Zongker7c3ae452013-05-14 11:03:02 -07001218static RecoveryUI* gCurrentUI = NULL;
1219
1220void
1221ui_print(const char* format, ...) {
1222 char buffer[256];
1223
1224 va_list ap;
1225 va_start(ap, format);
1226 vsnprintf(buffer, sizeof(buffer), format, ap);
1227 va_end(ap);
1228
1229 if (gCurrentUI != NULL) {
1230 gCurrentUI->Print("%s", buffer);
1231 } else {
1232 fputs(buffer, stdout);
1233 }
1234}
1235
Yabin Cui99281df2016-02-17 12:21:52 -08001236static bool is_battery_ok() {
1237 struct healthd_config healthd_config = {
1238 .batteryStatusPath = android::String8(android::String8::kEmptyString),
1239 .batteryHealthPath = android::String8(android::String8::kEmptyString),
1240 .batteryPresentPath = android::String8(android::String8::kEmptyString),
1241 .batteryCapacityPath = android::String8(android::String8::kEmptyString),
1242 .batteryVoltagePath = android::String8(android::String8::kEmptyString),
1243 .batteryTemperaturePath = android::String8(android::String8::kEmptyString),
1244 .batteryTechnologyPath = android::String8(android::String8::kEmptyString),
1245 .batteryCurrentNowPath = android::String8(android::String8::kEmptyString),
1246 .batteryCurrentAvgPath = android::String8(android::String8::kEmptyString),
1247 .batteryChargeCounterPath = android::String8(android::String8::kEmptyString),
1248 .batteryFullChargePath = android::String8(android::String8::kEmptyString),
1249 .batteryCycleCountPath = android::String8(android::String8::kEmptyString),
1250 .energyCounter = NULL,
1251 .boot_min_cap = 0,
1252 .screen_on = NULL
1253 };
1254 healthd_board_init(&healthd_config);
1255
1256 android::BatteryMonitor monitor;
1257 monitor.init(&healthd_config);
1258
1259 int wait_second = 0;
1260 while (true) {
1261 int charge_status = monitor.getChargeStatus();
1262 // Treat unknown status as charged.
1263 bool charged = (charge_status != android::BATTERY_STATUS_DISCHARGING &&
1264 charge_status != android::BATTERY_STATUS_NOT_CHARGING);
1265 android::BatteryProperty capacity;
1266 android::status_t status = monitor.getProperty(android::BATTERY_PROP_CAPACITY, &capacity);
1267 ui_print("charge_status %d, charged %d, status %d, capacity %lld\n", charge_status,
1268 charged, status, capacity.valueInt64);
1269 // At startup, the battery drivers in devices like N5X/N6P take some time to load
1270 // the battery profile. Before the load finishes, it reports value 50 as a fake
1271 // capacity. BATTERY_READ_TIMEOUT_IN_SEC is set that the battery drivers are expected
1272 // to finish loading the battery profile earlier than 10 seconds after kernel startup.
1273 if (status == 0 && capacity.valueInt64 == 50) {
1274 if (wait_second < BATTERY_READ_TIMEOUT_IN_SEC) {
1275 sleep(1);
1276 wait_second++;
1277 continue;
1278 }
1279 }
1280 // If we can't read battery percentage, it may be a device without battery. In this
1281 // situation, use 100 as a fake battery percentage.
1282 if (status != 0) {
1283 capacity.valueInt64 = 100;
1284 }
1285 return (charged && capacity.valueInt64 >= BATTERY_WITH_CHARGER_OK_PERCENTAGE) ||
1286 (!charged && capacity.valueInt64 >= BATTERY_OK_PERCENTAGE);
1287 }
1288}
1289
Tianjie Xu3c62b672016-02-05 18:25:58 -08001290static void set_retry_bootloader_message(int retry_count, int argc, char** argv) {
1291 struct bootloader_message boot {};
1292 strlcpy(boot.command, "boot-recovery", sizeof(boot.command));
1293 strlcpy(boot.recovery, "recovery\n", sizeof(boot.recovery));
1294
1295 for (int i = 1; i < argc; ++i) {
1296 if (strstr(argv[i], "retry_count") == nullptr) {
1297 strlcat(boot.recovery, argv[i], sizeof(boot.recovery));
1298 strlcat(boot.recovery, "\n", sizeof(boot.recovery));
1299 }
1300 }
1301
1302 // Initialize counter to 1 if it's not in BCB, otherwise increment it by 1.
1303 if (retry_count == 0) {
1304 strlcat(boot.recovery, "--retry_count=1\n", sizeof(boot.recovery));
1305 } else {
1306 char buffer[20];
1307 snprintf(buffer, sizeof(buffer), "--retry_count=%d\n", retry_count+1);
1308 strlcat(boot.recovery, buffer, sizeof(boot.recovery));
1309 }
1310 set_bootloader_message(&boot);
1311}
1312
Mark Salyzyna4f701a2016-03-09 14:58:16 -08001313static ssize_t logbasename(
1314 log_id_t /* logId */,
1315 char /* prio */,
1316 const char *filename,
1317 const char * /* buf */, size_t len,
1318 void *arg) {
1319 if (strstr(LAST_KMSG_FILE, filename) ||
1320 strstr(LAST_LOG_FILE, filename)) {
1321 bool *doRotate = reinterpret_cast<bool *>(arg);
1322 *doRotate = true;
1323 }
1324 return len;
1325}
1326
1327static ssize_t logrotate(
1328 log_id_t logId,
1329 char prio,
1330 const char *filename,
1331 const char *buf, size_t len,
1332 void *arg) {
1333 bool *doRotate = reinterpret_cast<bool *>(arg);
1334 if (!*doRotate) {
1335 return __android_log_pmsg_file_write(logId, prio, filename, buf, len);
1336 }
1337
1338 std::string name(filename);
1339 size_t dot = name.find_last_of(".");
1340 std::string sub = name.substr(0, dot);
1341
1342 if (!strstr(LAST_KMSG_FILE, sub.c_str()) &&
1343 !strstr(LAST_LOG_FILE, sub.c_str())) {
1344 return __android_log_pmsg_file_write(logId, prio, filename, buf, len);
1345 }
1346
1347 // filename rotation
1348 if (dot == std::string::npos) {
1349 name += ".1";
1350 } else {
1351 std::string number = name.substr(dot + 1);
1352 if (!isdigit(number.data()[0])) {
1353 name += ".1";
1354 } else {
Chih-Hung Hsieh54a27472016-04-18 11:30:55 -07001355 auto i = std::stoull(number);
Mark Salyzyna4f701a2016-03-09 14:58:16 -08001356 name = sub + "." + std::to_string(i + 1);
1357 }
1358 }
1359
1360 return __android_log_pmsg_file_write(logId, prio, name.c_str(), buf, len);
1361}
1362
Yabin Cui99281df2016-02-17 12:21:52 -08001363int main(int argc, char **argv) {
Mark Salyzyna4f701a2016-03-09 14:58:16 -08001364 // Take last pmsg contents and rewrite it to the current pmsg session.
1365 static const char filter[] = "recovery/";
1366 // Do we need to rotate?
1367 bool doRotate = false;
1368 __android_log_pmsg_file_read(
1369 LOG_ID_SYSTEM, ANDROID_LOG_INFO, filter,
1370 logbasename, &doRotate);
1371 // Take action to refresh pmsg contents
1372 __android_log_pmsg_file_read(
1373 LOG_ID_SYSTEM, ANDROID_LOG_INFO, filter,
1374 logrotate, &doRotate);
1375
Doug Zongker9270a202012-01-09 15:16:13 -08001376 // If this binary is started with the single argument "--adbd",
1377 // instead of being the normal recovery binary, it turns into kind
1378 // of a stripped-down version of adbd that only supports the
1379 // 'sideload' command. Note this must be a real argument, not
1380 // anything in the command file or bootloader control block; the
1381 // only way recovery should be run with this argument is when it
1382 // starts a copy of itself from the apply_from_adb() function.
1383 if (argc == 2 && strcmp(argv[1], "--adbd") == 0) {
Elliott Hughes9f4fdb32015-11-20 13:03:24 -08001384 adb_server_main(0, DEFAULT_ADB_PORT, -1);
Doug Zongker9270a202012-01-09 15:16:13 -08001385 return 0;
1386 }
1387
Tao Bao04ca4262015-09-10 15:32:24 -07001388 time_t start = time(NULL);
1389
1390 // redirect_stdio should be called only in non-sideload mode. Otherwise
1391 // we may have two logger instances with different timestamps.
1392 redirect_stdio(TEMPORARY_LOG_FILE);
1393
Doug Zongker19a8e242014-01-21 09:25:41 -08001394 printf("Starting recovery (pid %d) on %s", getpid(), ctime(&start));
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001395
Doug Zongkerd4208f92010-09-20 12:16:13 -07001396 load_volume_table();
Tao Bao26112e52016-02-25 12:29:40 -08001397 has_cache = volume_for_path(CACHE_ROOT) != nullptr;
1398
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001399 get_args(&argc, &argv);
1400
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001401 const char *update_package = NULL;
Tao Baoe39a9bc2015-03-31 12:19:05 -07001402 bool should_wipe_data = false;
Tao Baoc679f932015-03-30 09:43:49 -07001403 bool should_wipe_cache = false;
Tao Bao108ab212016-06-10 10:13:32 -07001404 bool should_wipe_ab = false;
Tao Bao145d8612015-03-25 15:51:15 -07001405 bool show_text = false;
Tao Baoc679f932015-03-30 09:43:49 -07001406 bool sideload = false;
1407 bool sideload_auto_reboot = false;
Doug Zongkere5d5ac72012-04-12 11:01:22 -07001408 bool just_exit = false;
Doug Zongkerb1d12632014-03-18 10:32:12 -07001409 bool shutdown_after = false;
Tianjie Xu3c62b672016-02-05 18:25:58 -08001410 int retry_count = 0;
Tianjie Xu35926c42016-04-28 18:06:26 -07001411 bool security_update = false;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001412
1413 int arg;
Tao Bao862a4c12016-06-02 11:16:50 -07001414 int option_index;
1415 while ((arg = getopt_long(argc, argv, "", OPTIONS, &option_index)) != -1) {
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001416 switch (arg) {
Tianjie Xu3c62b672016-02-05 18:25:58 -08001417 case 'n': android::base::ParseInt(optarg, &retry_count, 0); break;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001418 case 'u': update_package = optarg; break;
Tao Baoe39a9bc2015-03-31 12:19:05 -07001419 case 'w': should_wipe_data = true; break;
Tao Baoc679f932015-03-30 09:43:49 -07001420 case 'c': should_wipe_cache = true; break;
Tao Bao145d8612015-03-25 15:51:15 -07001421 case 't': show_text = true; break;
Tao Baoc679f932015-03-30 09:43:49 -07001422 case 's': sideload = true; break;
1423 case 'a': sideload = true; sideload_auto_reboot = true; break;
Doug Zongkere5d5ac72012-04-12 11:01:22 -07001424 case 'x': just_exit = true; break;
Doug Zongker02ec6b82012-08-22 17:26:40 -07001425 case 'l': locale = optarg; break;
Doug Zongkerc87bab12013-11-25 13:53:25 -08001426 case 'g': {
1427 if (stage == NULL || *stage == '\0') {
1428 char buffer[20] = "1/";
1429 strncat(buffer, optarg, sizeof(buffer)-3);
1430 stage = strdup(buffer);
1431 }
1432 break;
1433 }
Doug Zongkerb1d12632014-03-18 10:32:12 -07001434 case 'p': shutdown_after = true; break;
Jeff Sharkeya6e13ae2014-09-24 11:46:17 -07001435 case 'r': reason = optarg; break;
Tianjie Xu35926c42016-04-28 18:06:26 -07001436 case 'e': security_update = true; break;
Tao Bao862a4c12016-06-02 11:16:50 -07001437 case 0: {
Tao Bao108ab212016-06-10 10:13:32 -07001438 if (strcmp(OPTIONS[option_index].name, "wipe_ab") == 0) {
1439 should_wipe_ab = true;
Tao Bao862a4c12016-06-02 11:16:50 -07001440 break;
1441 }
1442 break;
1443 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001444 case '?':
1445 LOGE("Invalid command argument\n");
1446 continue;
1447 }
1448 }
1449
Tao Bao26112e52016-02-25 12:29:40 -08001450 if (locale == nullptr && has_cache) {
Doug Zongker02ec6b82012-08-22 17:26:40 -07001451 load_locale_from_cache();
1452 }
1453 printf("locale is [%s]\n", locale);
Doug Zongker0d32f252014-02-13 15:07:56 -08001454 printf("stage is [%s]\n", stage);
Jeff Sharkeya6e13ae2014-09-24 11:46:17 -07001455 printf("reason is [%s]\n", reason);
Doug Zongker02ec6b82012-08-22 17:26:40 -07001456
1457 Device* device = make_device();
1458 ui = device->GetUI();
Doug Zongker7c3ae452013-05-14 11:03:02 -07001459 gCurrentUI = ui;
Doug Zongker02ec6b82012-08-22 17:26:40 -07001460
Doug Zongker5fa8c232012-09-18 12:37:02 -07001461 ui->SetLocale(locale);
Doug Zongker02ec6b82012-08-22 17:26:40 -07001462 ui->Init();
Tianjie Xu35926c42016-04-28 18:06:26 -07001463 // Set background string to "installing security update" for security update,
1464 // otherwise set it to "installing system update".
1465 ui->SetSystemUpdateText(security_update);
Doug Zongkerc87bab12013-11-25 13:53:25 -08001466
1467 int st_cur, st_max;
1468 if (stage != NULL && sscanf(stage, "%d/%d", &st_cur, &st_max) == 2) {
1469 ui->SetStage(st_cur, st_max);
1470 }
1471
Doug Zongker02ec6b82012-08-22 17:26:40 -07001472 ui->SetBackground(RecoveryUI::NONE);
1473 if (show_text) ui->ShowText(true);
1474
Stephen Smalley779701d2012-02-09 14:13:23 -05001475 struct selinux_opt seopts[] = {
1476 { SELABEL_OPT_PATH, "/file_contexts" }
1477 };
1478
1479 sehandle = selabel_open(SELABEL_CTX_FILE, seopts, 1);
1480
1481 if (!sehandle) {
Doug Zongkerfafc85b2013-07-09 12:29:45 -07001482 ui->Print("Warning: No file_contexts\n");
Stephen Smalley779701d2012-02-09 14:13:23 -05001483 }
Stephen Smalley779701d2012-02-09 14:13:23 -05001484
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001485 device->StartRecovery();
Doug Zongkerefa1bab2010-02-01 15:59:12 -08001486
Doug Zongker56c51052010-07-01 09:18:44 -07001487 printf("Command:");
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001488 for (arg = 0; arg < argc; arg++) {
Doug Zongker56c51052010-07-01 09:18:44 -07001489 printf(" \"%s\"", argv[arg]);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001490 }
Doug Zongker9b125b02010-09-22 12:01:37 -07001491 printf("\n");
1492
1493 if (update_package) {
1494 // For backwards compatibility on the cache partition only, if
1495 // we're given an old 'root' path "CACHE:foo", change it to
1496 // "/cache/foo".
1497 if (strncmp(update_package, "CACHE:", 6) == 0) {
1498 int len = strlen(update_package) + 10;
Doug Zongker28ce47c2011-10-28 10:33:05 -07001499 char* modified_path = (char*)malloc(len);
Jeremy Compostella1b7d9b72015-07-29 17:17:03 +02001500 if (modified_path) {
1501 strlcpy(modified_path, "/cache/", len);
1502 strlcat(modified_path, update_package+6, len);
1503 printf("(replacing path \"%s\" with \"%s\")\n",
1504 update_package, modified_path);
1505 update_package = modified_path;
1506 }
1507 else
1508 printf("modified_path allocation failed\n");
Doug Zongker9b125b02010-09-22 12:01:37 -07001509 }
1510 }
1511 printf("\n");
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001512
1513 property_list(print_property, NULL);
Doug Zongker56c51052010-07-01 09:18:44 -07001514 printf("\n");
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001515
Elliott Hughesbb78d622015-04-09 20:51:08 -07001516 ui->Print("Supported API: %d\n", RECOVERY_API_VERSION);
1517
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001518 int status = INSTALL_SUCCESS;
1519
Doug Zongker540d57f2011-01-18 13:36:58 -08001520 if (update_package != NULL) {
Tao Bao56870012016-04-29 15:37:05 -07001521 // It's not entirely true that we will modify the flash. But we want
1522 // to log the update attempt since update_package is non-NULL.
1523 modified_flash = true;
1524
Yabin Cui99281df2016-02-17 12:21:52 -08001525 if (!is_battery_ok()) {
1526 ui->Print("battery capacity is not enough for installing package, needed is %d%%\n",
1527 BATTERY_OK_PERCENTAGE);
Tianjie Xu16255832016-04-30 11:49:59 -07001528 // Log the error code to last_install when installation skips due to
1529 // low battery.
1530 FILE* install_log = fopen_path(LAST_INSTALL_FILE, "w");
1531 if (install_log != nullptr) {
1532 fprintf(install_log, "%s\n", update_package);
1533 fprintf(install_log, "0\n");
1534 fprintf(install_log, "error: %d\n", kLowBattery);
1535 fclose(install_log);
1536 } else {
1537 LOGE("failed to open last_install: %s\n", strerror(errno));
1538 }
Yabin Cui99281df2016-02-17 12:21:52 -08001539 status = INSTALL_SKIPPED;
1540 } else {
1541 status = install_package(update_package, &should_wipe_cache,
Tianjie Xu16255832016-04-30 11:49:59 -07001542 TEMPORARY_INSTALL_FILE, true, retry_count);
Yabin Cui99281df2016-02-17 12:21:52 -08001543 if (status == INSTALL_SUCCESS && should_wipe_cache) {
1544 wipe_cache(false, device);
1545 }
1546 if (status != INSTALL_SUCCESS) {
1547 ui->Print("Installation aborted.\n");
Tianjie Xu3c62b672016-02-05 18:25:58 -08001548 // When I/O error happens, reboot and retry installation EIO_RETRY_COUNT
1549 // times before we abandon this OTA update.
1550 if (status == INSTALL_RETRY && retry_count < EIO_RETRY_COUNT) {
1551 copy_logs();
1552 set_retry_bootloader_message(retry_count, argc, argv);
1553 // Print retry count on screen.
1554 ui->Print("Retry attempt %d\n", retry_count);
Doug Zongker7c3ae452013-05-14 11:03:02 -07001555
Tianjie Xu3c62b672016-02-05 18:25:58 -08001556 // Reboot and retry the update
1557 int ret = property_set(ANDROID_RB_PROPERTY, "reboot,recovery");
1558 if (ret < 0) {
1559 ui->Print("Reboot failed\n");
1560 } else {
1561 while (true) {
1562 pause();
1563 }
1564 }
1565 }
Yabin Cui99281df2016-02-17 12:21:52 -08001566 // If this is an eng or userdebug build, then automatically
1567 // turn the text display on if the script fails so the error
1568 // message is visible.
1569 if (is_ro_debuggable()) {
1570 ui->ShowText(true);
1571 }
Doug Zongker7c3ae452013-05-14 11:03:02 -07001572 }
1573 }
Tao Baoe39a9bc2015-03-31 12:19:05 -07001574 } else if (should_wipe_data) {
1575 if (!wipe_data(false, device)) {
1576 status = INSTALL_ERROR;
1577 }
Tao Baoc679f932015-03-30 09:43:49 -07001578 } else if (should_wipe_cache) {
Tao Baoe39a9bc2015-03-31 12:19:05 -07001579 if (!wipe_cache(false, device)) {
1580 status = INSTALL_ERROR;
1581 }
Tao Bao108ab212016-06-10 10:13:32 -07001582 } else if (should_wipe_ab) {
1583 if (!wipe_ab_device()) {
Tao Bao862a4c12016-06-02 11:16:50 -07001584 status = INSTALL_ERROR;
1585 }
Tao Baoc679f932015-03-30 09:43:49 -07001586 } else if (sideload) {
1587 // 'adb reboot sideload' acts the same as user presses key combinations
1588 // to enter the sideload mode. When 'sideload-auto-reboot' is used, text
1589 // display will NOT be turned on by default. And it will reboot after
1590 // sideload finishes even if there are errors. Unless one turns on the
1591 // text display during the installation. This is to enable automated
1592 // testing.
1593 if (!sideload_auto_reboot) {
1594 ui->ShowText(true);
1595 }
1596 status = apply_from_adb(ui, &should_wipe_cache, TEMPORARY_INSTALL_FILE);
1597 if (status == INSTALL_SUCCESS && should_wipe_cache) {
Tao Baoe39a9bc2015-03-31 12:19:05 -07001598 if (!wipe_cache(false, device)) {
1599 status = INSTALL_ERROR;
1600 }
Tao Baoc679f932015-03-30 09:43:49 -07001601 }
1602 ui->Print("\nInstall from ADB complete (status: %d).\n", status);
1603 if (sideload_auto_reboot) {
1604 ui->Print("Rebooting automatically.\n");
1605 }
Doug Zongkere5d5ac72012-04-12 11:01:22 -07001606 } else if (!just_exit) {
Doug Zongker02ec6b82012-08-22 17:26:40 -07001607 status = INSTALL_NONE; // No command specified
1608 ui->SetBackground(RecoveryUI::NO_COMMAND);
Tao Bao785d22c2015-05-04 09:34:29 -07001609
1610 // http://b/17489952
1611 // If this is an eng or userdebug build, automatically turn on the
1612 // text display if no command is specified.
1613 if (is_ro_debuggable()) {
1614 ui->ShowText(true);
1615 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001616 }
1617
Tao Baoc679f932015-03-30 09:43:49 -07001618 if (!sideload_auto_reboot && (status == INSTALL_ERROR || status == INSTALL_CORRUPT)) {
Doug Zongkerf24fd7e2013-07-02 11:43:25 -07001619 copy_logs();
Doug Zongker02ec6b82012-08-22 17:26:40 -07001620 ui->SetBackground(RecoveryUI::ERROR);
1621 }
Tao Baoc679f932015-03-30 09:43:49 -07001622
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001623 Device::BuiltinAction after = shutdown_after ? Device::SHUTDOWN : Device::REBOOT;
Yabin Cui99281df2016-02-17 12:21:52 -08001624 if ((status != INSTALL_SUCCESS && status != INSTALL_SKIPPED && !sideload_auto_reboot) ||
1625 ui->IsTextVisible()) {
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001626 Device::BuiltinAction temp = prompt_and_wait(device, status);
Tao Baoc679f932015-03-30 09:43:49 -07001627 if (temp != Device::NO_ACTION) {
1628 after = temp;
1629 }
Doug Zongker8674a722010-09-15 11:08:23 -07001630 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001631
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001632 // Save logs and clean up before rebooting or shutting down.
Tianjie Xuc14d95d2016-03-24 11:50:34 -07001633 finish_recovery();
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001634
1635 switch (after) {
1636 case Device::SHUTDOWN:
1637 ui->Print("Shutting down...\n");
1638 property_set(ANDROID_RB_PROPERTY, "shutdown,");
1639 break;
1640
1641 case Device::REBOOT_BOOTLOADER:
1642 ui->Print("Rebooting to bootloader...\n");
1643 property_set(ANDROID_RB_PROPERTY, "reboot,bootloader");
1644 break;
1645
1646 default:
1647 ui->Print("Rebooting...\n");
1648 property_set(ANDROID_RB_PROPERTY, "reboot,");
1649 break;
Doug Zongkerb1d12632014-03-18 10:32:12 -07001650 }
Tao Bao75238632015-05-27 14:46:17 -07001651 while (true) {
1652 pause();
1653 }
1654 // Should be unreachable.
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001655 return EXIT_SUCCESS;
1656}