blob: b3430cfeaa68524ea005475c30642b9661deb6e6 [file] [log] [blame]
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001/*
2 * Copyright (C) 2007 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
Doug Zongkerb2ee9202009-06-04 10:24:53 -070017#include <ctype.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080018#include <errno.h>
19#include <fcntl.h>
20#include <limits.h>
Elliott Hughes26dbad22015-01-28 12:09:05 -080021#include <string.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080022#include <sys/stat.h>
Doug Zongkerb2ee9202009-06-04 10:24:53 -070023#include <sys/wait.h>
24#include <unistd.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080025
Elliott Hughes8febafa2016-04-13 16:39:56 -070026#include <chrono>
Alex Deymo4344d632016-08-03 21:03:53 -070027#include <limits>
28#include <map>
Tianjie Xudd874b12016-05-13 12:13:15 -070029#include <string>
Tao Bao71e3e092016-02-02 14:02:27 -080030#include <vector>
31
Tianjie Xub0ddae52016-06-08 14:30:04 -070032#include <android-base/parseint.h>
Tianjie Xu16255832016-04-30 11:49:59 -070033#include <android-base/stringprintf.h>
34#include <android-base/strings.h>
Alex Deymo4344d632016-08-03 21:03:53 -070035#include <cutils/properties.h>
Tianjie Xu16255832016-04-30 11:49:59 -070036
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080037#include "common.h"
Tianjie Xu16255832016-04-30 11:49:59 -070038#include "error_code.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080039#include "install.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080040#include "minui/minui.h"
41#include "minzip/SysUtil.h"
42#include "minzip/Zip.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080043#include "roots.h"
Doug Zongker10e418d2011-10-28 10:33:05 -070044#include "ui.h"
Mattias Nissler452df6d2016-04-04 16:17:01 +020045#include "verifier.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080046
Doug Zongker74406302011-10-28 15:13:10 -070047extern RecoveryUI* ui;
48
Doug Zongkerb2ee9202009-06-04 10:24:53 -070049#define ASSUMED_UPDATE_BINARY_NAME "META-INF/com/google/android/update-binary"
Alex Deymo4344d632016-08-03 21:03:53 -070050static constexpr const char* AB_OTA_PAYLOAD_PROPERTIES = "payload_properties.txt";
51static constexpr const char* AB_OTA_PAYLOAD = "payload.bin";
Doug Zongkerd1b19b92009-04-01 15:48:46 -070052#define PUBLIC_KEYS_FILE "/res/keys"
Tianjie Xub0ddae52016-06-08 14:30:04 -070053static constexpr const char* METADATA_PATH = "META-INF/com/android/metadata";
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080054
Doug Zongker74406302011-10-28 15:13:10 -070055// Default allocation of progress bar segments to operations
56static const int VERIFICATION_PROGRESS_TIME = 60;
57static const float VERIFICATION_PROGRESS_FRACTION = 0.25;
58static const float DEFAULT_FILES_PROGRESS_FRACTION = 0.4;
59static const float DEFAULT_IMAGE_PROGRESS_FRACTION = 0.1;
60
Tianjie Xub0ddae52016-06-08 14:30:04 -070061// This function parses and returns the build.version.incremental
62static int parse_build_number(std::string str) {
63 size_t pos = str.find("=");
64 if (pos != std::string::npos) {
65 std::string num_string = android::base::Trim(str.substr(pos+1));
66 int build_number;
67 if (android::base::ParseInt(num_string.c_str(), &build_number, 0)) {
68 return build_number;
69 }
70 }
71
72 LOGE("Failed to parse build number in %s.\n", str.c_str());
73 return -1;
74}
75
Yabin Cui6faf0262016-06-09 14:09:39 -070076bool read_metadata_from_package(ZipArchive* zip, std::string* meta_data) {
Tianjie Xub0ddae52016-06-08 14:30:04 -070077 const ZipEntry* meta_entry = mzFindZipEntry(zip, METADATA_PATH);
78 if (meta_entry == nullptr) {
79 LOGE("Failed to find %s in update package.\n", METADATA_PATH);
Yabin Cui6faf0262016-06-09 14:09:39 -070080 return false;
Tianjie Xub0ddae52016-06-08 14:30:04 -070081 }
82
Yabin Cui6faf0262016-06-09 14:09:39 -070083 meta_data->resize(meta_entry->uncompLen, '\0');
84 if (!mzReadZipEntry(zip, meta_entry, &(*meta_data)[0], meta_entry->uncompLen)) {
Tianjie Xub0ddae52016-06-08 14:30:04 -070085 LOGE("Failed to read metadata in update package.\n");
Yabin Cui6faf0262016-06-09 14:09:39 -070086 return false;
87 }
88 return true;
89}
90
91// Read the build.version.incremental of src/tgt from the metadata and log it to last_install.
92static void read_source_target_build(ZipArchive* zip, std::vector<std::string>& log_buffer) {
93 std::string meta_data;
94 if (!read_metadata_from_package(zip, &meta_data)) {
Tianjie Xub0ddae52016-06-08 14:30:04 -070095 return;
96 }
Tianjie Xub0ddae52016-06-08 14:30:04 -070097 // Examples of the pre-build and post-build strings in metadata:
98 // pre-build-incremental=2943039
99 // post-build-incremental=2951741
100 std::vector<std::string> lines = android::base::Split(meta_data, "\n");
101 for (const std::string& line : lines) {
102 std::string str = android::base::Trim(line);
103 if (android::base::StartsWith(str, "pre-build-incremental")){
104 int source_build = parse_build_number(str);
105 if (source_build != -1) {
106 log_buffer.push_back(android::base::StringPrintf("source_build: %d",
107 source_build));
108 }
109 } else if (android::base::StartsWith(str, "post-build-incremental")) {
110 int target_build = parse_build_number(str);
111 if (target_build != -1) {
112 log_buffer.push_back(android::base::StringPrintf("target_build: %d",
113 target_build));
114 }
115 }
116 }
117}
118
Alex Deymo4344d632016-08-03 21:03:53 -0700119// Extract the update binary from the open zip archive |zip| located at |path|
120// and store into |cmd| the command line that should be called. The |status_fd|
121// is the file descriptor the child process should use to report back the
122// progress of the update.
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700123static int
Alex Deymo4344d632016-08-03 21:03:53 -0700124update_binary_command(const char* path, ZipArchive* zip, int retry_count,
125 int status_fd, std::vector<std::string>* cmd);
Tianjie Xub0ddae52016-06-08 14:30:04 -0700126
Alex Deymo4344d632016-08-03 21:03:53 -0700127#ifdef AB_OTA_UPDATER
128
129// Parses the metadata of the OTA package in |zip| and checks whether we are
130// allowed to accept this A/B package. Downgrading is not allowed unless
131// explicitly enabled in the package and only for incremental packages.
132static int check_newer_ab_build(ZipArchive* zip)
133{
134 std::string metadata_str;
135 if (!read_metadata_from_package(zip, &metadata_str)) {
136 return INSTALL_CORRUPT;
137 }
138 std::map<std::string, std::string> metadata;
139 for (const std::string& line : android::base::Split(metadata_str, "\n")) {
140 size_t eq = line.find('=');
141 if (eq != std::string::npos) {
142 metadata[line.substr(0, eq)] = line.substr(eq + 1);
143 }
144 }
145 char value[PROPERTY_VALUE_MAX];
146
147 property_get("ro.product.device", value, "");
148 const std::string& pkg_device = metadata["pre-device"];
149 if (pkg_device != value || pkg_device.empty()) {
150 LOGE("Package is for product %s but expected %s\n",
151 pkg_device.c_str(), value);
152 return INSTALL_ERROR;
153 }
154
155 // We allow the package to not have any serialno, but if it has a non-empty
156 // value it should match.
157 property_get("ro.serialno", value, "");
158 const std::string& pkg_serial_no = metadata["serialno"];
159 if (!pkg_serial_no.empty() && pkg_serial_no != value) {
160 LOGE("Package is for serial %s\n", pkg_serial_no.c_str());
161 return INSTALL_ERROR;
162 }
163
164 if (metadata["ota-type"] != "AB") {
165 LOGE("Package is not A/B\n");
166 return INSTALL_ERROR;
167 }
168
169 // Incremental updates should match the current build.
170 property_get("ro.build.version.incremental", value, "");
171 const std::string& pkg_pre_build = metadata["pre-build-incremental"];
172 if (!pkg_pre_build.empty() && pkg_pre_build != value) {
173 LOGE("Package is for source build %s but expected %s\n",
174 pkg_pre_build.c_str(), value);
175 return INSTALL_ERROR;
176 }
177 property_get("ro.build.fingerprint", value, "");
178 const std::string& pkg_pre_build_fingerprint = metadata["pre-build"];
179 if (!pkg_pre_build_fingerprint.empty() &&
180 pkg_pre_build_fingerprint != value) {
181 LOGE("Package is for source build %s but expected %s\n",
182 pkg_pre_build_fingerprint.c_str(), value);
183 return INSTALL_ERROR;
184 }
185
186 // Check for downgrade version.
187 int64_t build_timestampt = property_get_int64(
188 "ro.build.date.utc", std::numeric_limits<int64_t>::max());
189 int64_t pkg_post_timespampt = 0;
190 // We allow to full update to the same version we are running, in case there
191 // is a problem with the current copy of that version.
192 if (metadata["post-timestamp"].empty() ||
193 !android::base::ParseInt(metadata["post-timestamp"].c_str(),
194 &pkg_post_timespampt) ||
195 pkg_post_timespampt < build_timestampt) {
196 if (metadata["ota-downgrade"] != "yes") {
197 LOGE("Update package is older than the current build, expected a "
198 "build newer than timestamp %" PRIu64 " but package has "
199 "timestamp %" PRIu64 " and downgrade not allowed.\n",
200 build_timestampt, pkg_post_timespampt);
201 return INSTALL_ERROR;
202 }
203 if (pkg_pre_build_fingerprint.empty()) {
204 LOGE("Downgrade package must have a pre-build version set, not "
205 "allowed.\n");
206 return INSTALL_ERROR;
207 }
208 }
209
210 return 0;
211}
212
213static int
214update_binary_command(const char* path, ZipArchive* zip, int retry_count,
215 int status_fd, std::vector<std::string>* cmd)
216{
217 int ret = check_newer_ab_build(zip);
218 if (ret) {
219 return ret;
220 }
221
222 // For A/B updates we extract the payload properties to a buffer and obtain
223 // the RAW payload offset in the zip file.
224 const ZipEntry* properties_entry =
225 mzFindZipEntry(zip, AB_OTA_PAYLOAD_PROPERTIES);
226 if (!properties_entry) {
227 LOGE("Can't find %s\n", AB_OTA_PAYLOAD_PROPERTIES);
228 return INSTALL_CORRUPT;
229 }
230 std::vector<unsigned char> payload_properties(
231 mzGetZipEntryUncompLen(properties_entry));
232 if (!mzExtractZipEntryToBuffer(zip, properties_entry,
233 payload_properties.data())) {
234 LOGE("Can't extract %s\n", AB_OTA_PAYLOAD_PROPERTIES);
235 return INSTALL_CORRUPT;
236 }
237
238 const ZipEntry* payload_entry = mzFindZipEntry(zip, AB_OTA_PAYLOAD);
239 if (!payload_entry) {
240 LOGE("Can't find %s\n", AB_OTA_PAYLOAD);
241 return INSTALL_CORRUPT;
242 }
243 long payload_offset = mzGetZipEntryOffset(payload_entry);
244 *cmd = {
245 "/sbin/update_engine_sideload",
246 android::base::StringPrintf("--payload=file://%s", path),
247 android::base::StringPrintf("--offset=%ld", payload_offset),
248 "--headers=" + std::string(payload_properties.begin(),
249 payload_properties.end()),
250 android::base::StringPrintf("--status_fd=%d", status_fd),
251 };
252 return 0;
253}
254
255#else // !AB_OTA_UPDATER
256
257static int
258update_binary_command(const char* path, ZipArchive* zip, int retry_count,
259 int status_fd, std::vector<std::string>* cmd)
260{
261 // On traditional updates we extract the update binary from the package.
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700262 const ZipEntry* binary_entry =
263 mzFindZipEntry(zip, ASSUMED_UPDATE_BINARY_NAME);
264 if (binary_entry == NULL) {
265 return INSTALL_CORRUPT;
266 }
267
Doug Zongker10e418d2011-10-28 10:33:05 -0700268 const char* binary = "/tmp/update_binary";
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700269 unlink(binary);
270 int fd = creat(binary, 0755);
271 if (fd < 0) {
272 LOGE("Can't make %s\n", binary);
Doug Zongkerd0181b82011-10-19 10:51:12 -0700273 return INSTALL_ERROR;
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700274 }
275 bool ok = mzExtractZipEntryToFile(zip, binary_entry, fd);
276 close(fd);
277
278 if (!ok) {
279 LOGE("Can't copy %s\n", ASSUMED_UPDATE_BINARY_NAME);
Doug Zongkerd0181b82011-10-19 10:51:12 -0700280 return INSTALL_ERROR;
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700281 }
282
Alex Deymo4344d632016-08-03 21:03:53 -0700283 *cmd = {
284 binary,
285 EXPAND(RECOVERY_API_VERSION), // defined in Android.mk
286 std::to_string(status_fd),
287 path,
288 };
289 if (retry_count > 0)
290 cmd->push_back("retry");
291 return 0;
292}
293#endif // !AB_OTA_UPDATER
294
295// If the package contains an update binary, extract it and run it.
296static int
297try_update_binary(const char* path, ZipArchive* zip, bool* wipe_cache,
298 std::vector<std::string>& log_buffer, int retry_count)
299{
300 read_source_target_build(zip, log_buffer);
301
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700302 int pipefd[2];
303 pipe(pipefd);
304
Alex Deymo4344d632016-08-03 21:03:53 -0700305 std::vector<std::string> args;
306 int ret = update_binary_command(path, zip, retry_count, pipefd[1], &args);
307 mzCloseZipArchive(zip);
308 if (ret) {
309 close(pipefd[0]);
310 close(pipefd[1]);
311 return ret;
312 }
313
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700314 // When executing the update binary contained in the package, the
315 // arguments passed are:
316 //
Doug Zongkerfb2e3af2009-06-17 17:29:40 -0700317 // - the version number for this interface
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700318 //
319 // - an fd to which the program can write in order to update the
320 // progress bar. The program can write single-line commands:
321 //
322 // progress <frac> <secs>
Doug Zongkerfbf3c102009-06-24 09:36:20 -0700323 // fill up the next <frac> part of of the progress bar
324 // over <secs> seconds. If <secs> is zero, use
325 // set_progress commands to manually control the
Tao Baob07e1f32015-04-10 16:14:52 -0700326 // progress of this segment of the bar.
Doug Zongkerfbf3c102009-06-24 09:36:20 -0700327 //
328 // set_progress <frac>
329 // <frac> should be between 0.0 and 1.0; sets the
330 // progress bar within the segment defined by the most
331 // recent progress command.
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700332 //
333 // firmware <"hboot"|"radio"> <filename>
334 // arrange to install the contents of <filename> in the
Doug Zongkere08991e2010-02-02 13:09:52 -0800335 // given partition on reboot.
336 //
337 // (API v2: <filename> may start with "PACKAGE:" to
338 // indicate taking a file from the OTA package.)
339 //
340 // (API v3: this command no longer exists.)
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700341 //
Doug Zongkerd9c9d102009-06-12 12:24:39 -0700342 // ui_print <string>
343 // display <string> on the screen.
344 //
Tao Baob07e1f32015-04-10 16:14:52 -0700345 // wipe_cache
346 // a wipe of cache will be performed following a successful
347 // installation.
348 //
349 // clear_display
350 // turn off the text display.
351 //
352 // enable_reboot
353 // packages can explicitly request that they want the user
354 // to be able to reboot during installation (useful for
355 // debugging packages that don't exit).
356 //
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700357 // - the name of the package zip file.
358 //
Tianjie Xu7ce287d2016-05-31 09:29:49 -0700359 // - an optional argument "retry" if this update is a retry of a failed
360 // update attempt.
361 //
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700362
Alex Deymo4344d632016-08-03 21:03:53 -0700363 // Convert the vector to a NULL-terminated char* array suitable for execv.
364 const char* chr_args[args.size() + 1];
365 chr_args[args.size()] = NULL;
366 for (size_t i = 0; i < args.size(); i++) {
367 chr_args[i] = args[i].c_str();
368 }
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700369
370 pid_t pid = fork();
371 if (pid == 0) {
Alistair Strachan027429a2013-07-17 10:41:49 -0700372 umask(022);
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700373 close(pipefd[0]);
Alex Deymo4344d632016-08-03 21:03:53 -0700374 execv(chr_args[0], const_cast<char**>(chr_args));
375 fprintf(stdout, "E:Can't run %s (%s)\n", chr_args[0], strerror(errno));
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700376 _exit(-1);
377 }
378 close(pipefd[1]);
379
Tao Bao145d8612015-03-25 15:51:15 -0700380 *wipe_cache = false;
Tianjie Xu3c62b672016-02-05 18:25:58 -0800381 bool retry_update = false;
Doug Zongkerd0181b82011-10-19 10:51:12 -0700382
Doug Zongker64893cc2009-07-14 16:31:56 -0700383 char buffer[1024];
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700384 FILE* from_child = fdopen(pipefd[0], "r");
385 while (fgets(buffer, sizeof(buffer), from_child) != NULL) {
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700386 char* command = strtok(buffer, " \n");
387 if (command == NULL) {
388 continue;
389 } else if (strcmp(command, "progress") == 0) {
390 char* fraction_s = strtok(NULL, " \n");
391 char* seconds_s = strtok(NULL, " \n");
392
393 float fraction = strtof(fraction_s, NULL);
394 int seconds = strtol(seconds_s, NULL, 10);
395
Doug Zongker74406302011-10-28 15:13:10 -0700396 ui->ShowProgress(fraction * (1-VERIFICATION_PROGRESS_FRACTION), seconds);
Doug Zongkerfbf3c102009-06-24 09:36:20 -0700397 } else if (strcmp(command, "set_progress") == 0) {
398 char* fraction_s = strtok(NULL, " \n");
399 float fraction = strtof(fraction_s, NULL);
Doug Zongker74406302011-10-28 15:13:10 -0700400 ui->SetProgress(fraction);
Doug Zongkerd9c9d102009-06-12 12:24:39 -0700401 } else if (strcmp(command, "ui_print") == 0) {
402 char* str = strtok(NULL, "\n");
403 if (str) {
Tao Baob6918c72015-05-19 17:02:16 -0700404 ui->PrintOnScreenOnly("%s", str);
Doug Zongkerd9c9d102009-06-12 12:24:39 -0700405 } else {
Tao Baob6918c72015-05-19 17:02:16 -0700406 ui->PrintOnScreenOnly("\n");
Doug Zongkerd9c9d102009-06-12 12:24:39 -0700407 }
Doug Zongkerfafc85b2013-07-09 12:29:45 -0700408 fflush(stdout);
Doug Zongkerd0181b82011-10-19 10:51:12 -0700409 } else if (strcmp(command, "wipe_cache") == 0) {
Tao Bao145d8612015-03-25 15:51:15 -0700410 *wipe_cache = true;
Doug Zongkere5d5ac72012-04-12 11:01:22 -0700411 } else if (strcmp(command, "clear_display") == 0) {
412 ui->SetBackground(RecoveryUI::NONE);
Doug Zongkerc704e062014-05-23 08:40:35 -0700413 } else if (strcmp(command, "enable_reboot") == 0) {
414 // packages can explicitly request that they want the user
415 // to be able to reboot during installation (useful for
416 // debugging packages that don't exit).
417 ui->SetEnableReboot(true);
Tianjie Xu3c62b672016-02-05 18:25:58 -0800418 } else if (strcmp(command, "retry_update") == 0) {
419 retry_update = true;
Tianjie Xudd874b12016-05-13 12:13:15 -0700420 } else if (strcmp(command, "log") == 0) {
421 // Save the logging request from updater and write to
422 // last_install later.
423 log_buffer.push_back(std::string(strtok(NULL, "\n")));
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700424 } else {
425 LOGE("unknown command [%s]\n", command);
426 }
427 }
428 fclose(from_child);
429
430 int status;
431 waitpid(pid, &status, 0);
Tianjie Xu3c62b672016-02-05 18:25:58 -0800432 if (retry_update) {
433 return INSTALL_RETRY;
434 }
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700435 if (!WIFEXITED(status) || WEXITSTATUS(status) != 0) {
Doug Zongker9931f7f2009-06-10 14:11:53 -0700436 LOGE("Error in %s\n(Status %d)\n", path, WEXITSTATUS(status));
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700437 return INSTALL_ERROR;
438 }
439
Doug Zongkere08991e2010-02-02 13:09:52 -0800440 return INSTALL_SUCCESS;
Doug Zongkerb2ee9202009-06-04 10:24:53 -0700441}
442
Doug Zongker469243e2011-04-12 09:28:10 -0700443static int
Tianjie Xudd874b12016-05-13 12:13:15 -0700444really_install_package(const char *path, bool* wipe_cache, bool needs_mount,
Tianjie Xu7ce287d2016-05-31 09:29:49 -0700445 std::vector<std::string>& log_buffer, int retry_count)
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800446{
Doug Zongker02ec6b82012-08-22 17:26:40 -0700447 ui->SetBackground(RecoveryUI::INSTALLING_UPDATE);
Doug Zongker74406302011-10-28 15:13:10 -0700448 ui->Print("Finding update package...\n");
Doug Zongker239ac6a2013-08-20 16:03:25 -0700449 // Give verification half the progress bar...
450 ui->SetProgressType(RecoveryUI::DETERMINATE);
451 ui->ShowProgress(VERIFICATION_PROGRESS_FRACTION, VERIFICATION_PROGRESS_TIME);
Doug Zongkercc8cd3f2010-09-20 12:16:13 -0700452 LOGI("Update location: %s\n", path);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800453
Doug Zongker99916f02014-01-13 14:16:58 -0800454 // Map the update package into memory.
455 ui->Print("Opening update package...\n");
456
Doug Zongker075ad802014-06-26 15:35:51 -0700457 if (path && needs_mount) {
Doug Zongker99916f02014-01-13 14:16:58 -0800458 if (path[0] == '@') {
459 ensure_path_mounted(path+1);
460 } else {
461 ensure_path_mounted(path);
462 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800463 }
464
Doug Zongker99916f02014-01-13 14:16:58 -0800465 MemMapping map;
466 if (sysMapFile(path, &map) != 0) {
467 LOGE("failed to map file\n");
468 return INSTALL_CORRUPT;
469 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800470
Elliott Hughes8febafa2016-04-13 16:39:56 -0700471 // Verify package.
Yabin Cui6faf0262016-06-09 14:09:39 -0700472 if (!verify_package(map.addr, map.length)) {
Tianjie Xu16255832016-04-30 11:49:59 -0700473 log_buffer.push_back(android::base::StringPrintf("error: %d", kZipVerificationFailure));
Doug Zongker99916f02014-01-13 14:16:58 -0800474 sysReleaseMap(&map);
Doug Zongker60151a22009-08-12 18:30:03 -0700475 return INSTALL_CORRUPT;
476 }
477
Elliott Hughes8febafa2016-04-13 16:39:56 -0700478 // Try to open the package.
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800479 ZipArchive zip;
Yabin Cui6faf0262016-06-09 14:09:39 -0700480 int err = mzOpenZipArchive(map.addr, map.length, &zip);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800481 if (err != 0) {
482 LOGE("Can't open %s\n(%s)\n", path, err != -1 ? strerror(err) : "bad");
Tianjie Xu16255832016-04-30 11:49:59 -0700483 log_buffer.push_back(android::base::StringPrintf("error: %d", kZipOpenFailure));
484
Doug Zongker99916f02014-01-13 14:16:58 -0800485 sysReleaseMap(&map);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800486 return INSTALL_CORRUPT;
487 }
488
Elliott Hughes8febafa2016-04-13 16:39:56 -0700489 // Verify and install the contents of the package.
Doug Zongker74406302011-10-28 15:13:10 -0700490 ui->Print("Installing update...\n");
Tianjie Xu7ce287d2016-05-31 09:29:49 -0700491 if (retry_count > 0) {
492 ui->Print("Retry attempt: %d\n", retry_count);
493 }
Doug Zongkerc704e062014-05-23 08:40:35 -0700494 ui->SetEnableReboot(false);
Tianjie Xu7ce287d2016-05-31 09:29:49 -0700495 int result = try_update_binary(path, &zip, wipe_cache, log_buffer, retry_count);
Doug Zongkerc704e062014-05-23 08:40:35 -0700496 ui->SetEnableReboot(true);
Doug Zongker075ad802014-06-26 15:35:51 -0700497 ui->Print("\n");
Doug Zongker99916f02014-01-13 14:16:58 -0800498
499 sysReleaseMap(&map);
500
501 return result;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800502}
Doug Zongker469243e2011-04-12 09:28:10 -0700503
504int
Tao Bao145d8612015-03-25 15:51:15 -0700505install_package(const char* path, bool* wipe_cache, const char* install_file,
Tianjie Xu16255832016-04-30 11:49:59 -0700506 bool needs_mount, int retry_count)
Doug Zongker469243e2011-04-12 09:28:10 -0700507{
Tao Bao682c34b2015-04-07 17:16:35 -0700508 modified_flash = true;
Tianjie Xudd874b12016-05-13 12:13:15 -0700509 auto start = std::chrono::system_clock::now();
Tao Bao682c34b2015-04-07 17:16:35 -0700510
Doug Zongkerd0181b82011-10-19 10:51:12 -0700511 FILE* install_log = fopen_path(install_file, "w");
Doug Zongker469243e2011-04-12 09:28:10 -0700512 if (install_log) {
513 fputs(path, install_log);
514 fputc('\n', install_log);
515 } else {
516 LOGE("failed to open last_install: %s\n", strerror(errno));
517 }
Doug Zongker239ac6a2013-08-20 16:03:25 -0700518 int result;
Tianjie Xudd874b12016-05-13 12:13:15 -0700519 std::vector<std::string> log_buffer;
Doug Zongker239ac6a2013-08-20 16:03:25 -0700520 if (setup_install_mounts() != 0) {
521 LOGE("failed to set up expected mounts for install; aborting\n");
522 result = INSTALL_ERROR;
523 } else {
Tianjie Xu7ce287d2016-05-31 09:29:49 -0700524 result = really_install_package(path, wipe_cache, needs_mount, log_buffer, retry_count);
Doug Zongker239ac6a2013-08-20 16:03:25 -0700525 }
Tianjie Xu16255832016-04-30 11:49:59 -0700526 if (install_log != nullptr) {
Doug Zongker469243e2011-04-12 09:28:10 -0700527 fputc(result == INSTALL_SUCCESS ? '1' : '0', install_log);
528 fputc('\n', install_log);
Tianjie Xudd874b12016-05-13 12:13:15 -0700529 std::chrono::duration<double> duration = std::chrono::system_clock::now() - start;
530 int count = static_cast<int>(duration.count());
531 // Report the time spent to apply OTA update in seconds.
532 fprintf(install_log, "time_total: %d\n", count);
Tianjie Xu16255832016-04-30 11:49:59 -0700533 fprintf(install_log, "retry: %d\n", retry_count);
Tianjie Xudd874b12016-05-13 12:13:15 -0700534
535 for (const auto& s : log_buffer) {
536 fprintf(install_log, "%s\n", s.c_str());
537 }
538
Doug Zongker469243e2011-04-12 09:28:10 -0700539 fclose(install_log);
Doug Zongker469243e2011-04-12 09:28:10 -0700540 }
541 return result;
542}
Yabin Cui6faf0262016-06-09 14:09:39 -0700543
544bool verify_package(const unsigned char* package_data, size_t package_size) {
545 std::vector<Certificate> loadedKeys;
546 if (!load_keys(PUBLIC_KEYS_FILE, loadedKeys)) {
547 LOGE("Failed to load keys\n");
548 return false;
549 }
550 LOGI("%zu key(s) loaded from %s\n", loadedKeys.size(), PUBLIC_KEYS_FILE);
551
552 // Verify package.
553 ui->Print("Verifying update package...\n");
554 auto t0 = std::chrono::system_clock::now();
555 int err = verify_file(const_cast<unsigned char*>(package_data), package_size, loadedKeys);
556 std::chrono::duration<double> duration = std::chrono::system_clock::now() - t0;
557 ui->Print("Update package verification took %.1f s (result %d).\n", duration.count(), err);
558 if (err != VERIFY_SUCCESS) {
559 LOGE("Signature verification failed\n");
560 LOGE("error: %d\n", kZipVerificationFailure);
561 return false;
562 }
563 return true;
564}