blob: a3c4053c11474690ee6fc76276dd1e8b99035ca0 [file] [log] [blame]
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001/*
2 * Copyright (C) 2007 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
17#include <ctype.h>
Doug Zongker7c3ae452013-05-14 11:03:02 -070018#include <dirent.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080019#include <errno.h>
20#include <fcntl.h>
21#include <getopt.h>
Tao Bao862a4c12016-06-02 11:16:50 -070022#include <inttypes.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080023#include <limits.h>
Tao Bao862a4c12016-06-02 11:16:50 -070024#include <linux/fs.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080025#include <linux/input.h>
Doug Zongker7c3ae452013-05-14 11:03:02 -070026#include <stdarg.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080027#include <stdio.h>
28#include <stdlib.h>
29#include <string.h>
Patrick Tjincd055ee2014-12-09 11:26:40 -080030#include <sys/klog.h>
Doug Zongker23ceeea2010-07-08 17:27:55 -070031#include <sys/stat.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080032#include <sys/types.h>
Tao Baocdcf28f2016-01-13 15:05:20 -080033#include <sys/wait.h>
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080034#include <time.h>
35#include <unistd.h>
36
Tao Bao04ca4262015-09-10 15:32:24 -070037#include <chrono>
Tao Bao862a4c12016-06-02 11:16:50 -070038#include <string>
39#include <vector>
Tao Bao04ca4262015-09-10 15:32:24 -070040
Tao Bao75238632015-05-27 14:46:17 -070041#include <adb.h>
Mark Salyzyna4f701a2016-03-09 14:58:16 -080042#include <android/log.h> /* Android Log Priority Tags */
Elliott Hughes4b166f02015-12-04 15:30:20 -080043#include <android-base/file.h>
Tianjie Xu3c62b672016-02-05 18:25:58 -080044#include <android-base/parseint.h>
Elliott Hughes4b166f02015-12-04 15:30:20 -080045#include <android-base/stringprintf.h>
Tao Bao862a4c12016-06-02 11:16:50 -070046#include <android-base/strings.h>
47#include <android-base/unique_fd.h>
Tao Bao75238632015-05-27 14:46:17 -070048#include <cutils/android_reboot.h>
49#include <cutils/properties.h>
Elliott Hughes4bbd5bf2016-04-01 18:24:39 -070050#include <healthd/BatteryMonitor.h>
Mark Salyzyna4f701a2016-03-09 14:58:16 -080051#include <log/logger.h> /* Android Log packet format */
52#include <private/android_logger.h> /* private pmsg functions */
Elliott Hughes4bbd5bf2016-04-01 18:24:39 -070053#include <selinux/label.h>
54#include <selinux/selinux.h>
Yabin Cui99281df2016-02-17 12:21:52 -080055
Tao Bao75238632015-05-27 14:46:17 -070056#include "adb_install.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080057#include "bootloader.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080058#include "common.h"
Tao Bao75238632015-05-27 14:46:17 -070059#include "device.h"
Tianjie Xu16255832016-04-30 11:49:59 -070060#include "error_code.h"
Tao Bao75238632015-05-27 14:46:17 -070061#include "fuse_sdcard_provider.h"
62#include "fuse_sideload.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080063#include "install.h"
64#include "minui/minui.h"
65#include "minzip/DirUtil.h"
66#include "roots.h"
Doug Zongker28ce47c2011-10-28 10:33:05 -070067#include "ui.h"
Doug Zongker211aebc2011-10-28 15:13:10 -070068#include "screen_ui.h"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080069
Stephen Smalley779701d2012-02-09 14:13:23 -050070struct selabel_handle *sehandle;
71
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080072static const struct option OPTIONS[] = {
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080073 { "update_package", required_argument, NULL, 'u' },
Tianjie Xu3c62b672016-02-05 18:25:58 -080074 { "retry_count", required_argument, NULL, 'n' },
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080075 { "wipe_data", no_argument, NULL, 'w' },
76 { "wipe_cache", no_argument, NULL, 'c' },
Doug Zongker4bc98062010-09-03 11:00:13 -070077 { "show_text", no_argument, NULL, 't' },
Tao Baoc679f932015-03-30 09:43:49 -070078 { "sideload", no_argument, NULL, 's' },
79 { "sideload_auto_reboot", no_argument, NULL, 'a' },
Doug Zongkere5d5ac72012-04-12 11:01:22 -070080 { "just_exit", no_argument, NULL, 'x' },
Doug Zongker02ec6b82012-08-22 17:26:40 -070081 { "locale", required_argument, NULL, 'l' },
Doug Zongkerc87bab12013-11-25 13:53:25 -080082 { "stages", required_argument, NULL, 'g' },
Doug Zongkerb1d12632014-03-18 10:32:12 -070083 { "shutdown_after", no_argument, NULL, 'p' },
Jeff Sharkeya6e13ae2014-09-24 11:46:17 -070084 { "reason", required_argument, NULL, 'r' },
Tianjie Xu35926c42016-04-28 18:06:26 -070085 { "security", no_argument, NULL, 'e'},
Tao Bao862a4c12016-06-02 11:16:50 -070086 { "brick", no_argument, NULL, 0 },
Doug Zongker988500b2009-10-06 14:41:38 -070087 { NULL, 0, NULL, 0 },
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -080088};
89
Doug Zongker6d0d7ac2013-07-09 13:34:55 -070090static const char *CACHE_LOG_DIR = "/cache/recovery";
Doug Zongkerd4208f92010-09-20 12:16:13 -070091static const char *COMMAND_FILE = "/cache/recovery/command";
Doug Zongkerd4208f92010-09-20 12:16:13 -070092static const char *LOG_FILE = "/cache/recovery/log";
Doug Zongkerd0181b82011-10-19 10:51:12 -070093static const char *LAST_INSTALL_FILE = "/cache/recovery/last_install";
Doug Zongker8b240cc2012-08-29 15:19:29 -070094static const char *LOCALE_FILE = "/cache/recovery/last_locale";
Paul Lawrence661f8a62016-02-25 12:42:19 -080095static const char *CONVERT_FBE_DIR = "/tmp/convert_fbe";
96static const char *CONVERT_FBE_FILE = "/tmp/convert_fbe/convert_fbe";
Michael Ward9d2629c2011-06-23 22:14:24 -070097static const char *CACHE_ROOT = "/cache";
Paul Lawrenced0db3372015-11-05 13:38:40 -080098static const char *DATA_ROOT = "/data";
Doug Zongkerd4208f92010-09-20 12:16:13 -070099static const char *SDCARD_ROOT = "/sdcard";
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800100static const char *TEMPORARY_LOG_FILE = "/tmp/recovery.log";
Doug Zongkerd0181b82011-10-19 10:51:12 -0700101static const char *TEMPORARY_INSTALL_FILE = "/tmp/last_install";
Tao Baof0124322015-04-11 02:04:11 +0000102static const char *LAST_KMSG_FILE = "/cache/recovery/last_kmsg";
Tao Baobef39712015-05-04 18:50:27 -0700103static const char *LAST_LOG_FILE = "/cache/recovery/last_log";
104static const int KEEP_LOG_COUNT = 10;
Tianjie Xuc37c5c32016-06-23 16:52:17 -0700105// We will try to apply the update package 5 times at most in case of an I/O error.
106static const int EIO_RETRY_COUNT = 4;
Yabin Cui99281df2016-02-17 12:21:52 -0800107static const int BATTERY_READ_TIMEOUT_IN_SEC = 10;
108// GmsCore enters recovery mode to install package when having enough battery
109// percentage. Normally, the threshold is 40% without charger and 20% with charger.
110// So we should check battery with a slightly lower limitation.
111static const int BATTERY_OK_PERCENTAGE = 20;
112static const int BATTERY_WITH_CHARGER_OK_PERCENTAGE = 15;
Tao Bao862a4c12016-06-02 11:16:50 -0700113constexpr const char* RECOVERY_BRICK = "/etc/recovery.brick";
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700114
Doug Zongker211aebc2011-10-28 15:13:10 -0700115RecoveryUI* ui = NULL;
Elliott Hughes498cda62016-04-14 16:49:04 -0700116static const char* locale = "en_US";
Doug Zongkerc87bab12013-11-25 13:53:25 -0800117char* stage = NULL;
Jeff Sharkeya6e13ae2014-09-24 11:46:17 -0700118char* reason = NULL;
Tao Bao682c34b2015-04-07 17:16:35 -0700119bool modified_flash = false;
Tao Bao26112e52016-02-25 12:29:40 -0800120static bool has_cache = false;
Doug Zongker211aebc2011-10-28 15:13:10 -0700121
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800122/*
123 * The recovery tool communicates with the main system through /cache files.
124 * /cache/recovery/command - INPUT - command line for tool, one arg per line
125 * /cache/recovery/log - OUTPUT - combined log file from recovery run(s)
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800126 *
127 * The arguments which may be supplied in the recovery.command file:
Doug Zongkerd4208f92010-09-20 12:16:13 -0700128 * --update_package=path - verify install an OTA package file
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800129 * --wipe_data - erase user data (and cache), then reboot
130 * --wipe_cache - wipe cache (but not user data), then reboot
Oscar Montemayor05231562009-11-30 08:40:57 -0800131 * --set_encrypted_filesystem=on|off - enables / diasables encrypted fs
Doug Zongkere5d5ac72012-04-12 11:01:22 -0700132 * --just_exit - do nothing; exit and reboot
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800133 *
134 * After completing, we remove /cache/recovery/command and reboot.
135 * Arguments may also be supplied in the bootloader control block (BCB).
136 * These important scenarios must be safely restartable at any point:
137 *
138 * FACTORY RESET
139 * 1. user selects "factory reset"
140 * 2. main system writes "--wipe_data" to /cache/recovery/command
141 * 3. main system reboots into recovery
142 * 4. get_args() writes BCB with "boot-recovery" and "--wipe_data"
143 * -- after this, rebooting will restart the erase --
Doug Zongkerd4208f92010-09-20 12:16:13 -0700144 * 5. erase_volume() reformats /data
145 * 6. erase_volume() reformats /cache
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800146 * 7. finish_recovery() erases BCB
147 * -- after this, rebooting will restart the main system --
148 * 8. main() calls reboot() to boot main system
149 *
150 * OTA INSTALL
151 * 1. main system downloads OTA package to /cache/some-filename.zip
Doug Zongker9b125b02010-09-22 12:01:37 -0700152 * 2. main system writes "--update_package=/cache/some-filename.zip"
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800153 * 3. main system reboots into recovery
154 * 4. get_args() writes BCB with "boot-recovery" and "--update_package=..."
155 * -- after this, rebooting will attempt to reinstall the update --
156 * 5. install_package() attempts to install the update
157 * NOTE: the package install must itself be restartable from any point
158 * 6. finish_recovery() erases BCB
159 * -- after this, rebooting will (try to) restart the main system --
160 * 7. ** if install failed **
161 * 7a. prompt_and_wait() shows an error icon and waits for the user
162 * 7b; the user reboots (pulling the battery, etc) into the main system
163 * 8. main() calls maybe_install_firmware_update()
164 * ** if the update contained radio/hboot firmware **:
165 * 8a. m_i_f_u() writes BCB with "boot-recovery" and "--wipe_cache"
166 * -- after this, rebooting will reformat cache & restart main system --
167 * 8b. m_i_f_u() writes firmware image into raw cache partition
168 * 8c. m_i_f_u() writes BCB with "update-radio/hboot" and "--wipe_cache"
169 * -- after this, rebooting will attempt to reinstall firmware --
170 * 8d. bootloader tries to flash firmware
171 * 8e. bootloader writes BCB with "boot-recovery" (keeping "--wipe_cache")
172 * -- after this, rebooting will reformat cache & restart main system --
Doug Zongkerd4208f92010-09-20 12:16:13 -0700173 * 8f. erase_volume() reformats /cache
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800174 * 8g. finish_recovery() erases BCB
175 * -- after this, rebooting will (try to) restart the main system --
176 * 9. main() calls reboot() to boot main system
177 */
178
179static const int MAX_ARG_LENGTH = 4096;
180static const int MAX_ARGS = 100;
181
Doug Zongkerd4208f92010-09-20 12:16:13 -0700182// open a given path, mounting partitions as necessary
Tao Bao04ca4262015-09-10 15:32:24 -0700183FILE* fopen_path(const char *path, const char *mode) {
Doug Zongkerd4208f92010-09-20 12:16:13 -0700184 if (ensure_path_mounted(path) != 0) {
185 LOGE("Can't mount %s\n", path);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800186 return NULL;
187 }
188
189 // When writing, try to create the containing directory, if necessary.
190 // Use generous permissions, the system (init.rc) will reset them.
Stephen Smalley779701d2012-02-09 14:13:23 -0500191 if (strchr("wa", mode[0])) dirCreateHierarchy(path, 0777, NULL, 1, sehandle);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800192
193 FILE *fp = fopen(path, mode);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800194 return fp;
195}
196
Tao Bao04ca4262015-09-10 15:32:24 -0700197// close a file, log an error if the error indicator is set
198static void check_and_fclose(FILE *fp, const char *name) {
199 fflush(fp);
200 if (ferror(fp)) LOGE("Error in %s\n(%s)\n", name, strerror(errno));
201 fclose(fp);
202}
203
Elliott Hughesf14af802015-02-10 14:46:14 -0800204bool is_ro_debuggable() {
205 char value[PROPERTY_VALUE_MAX+1];
206 return (property_get("ro.debuggable", value, NULL) == 1 && value[0] == '1');
207}
208
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700209static void redirect_stdio(const char* filename) {
Tao Bao04ca4262015-09-10 15:32:24 -0700210 int pipefd[2];
211 if (pipe(pipefd) == -1) {
212 LOGE("pipe failed: %s\n", strerror(errno));
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700213
Tao Bao04ca4262015-09-10 15:32:24 -0700214 // Fall back to traditional logging mode without timestamps.
215 // If these fail, there's not really anywhere to complain...
216 freopen(filename, "a", stdout); setbuf(stdout, NULL);
217 freopen(filename, "a", stderr); setbuf(stderr, NULL);
218
219 return;
220 }
221
222 pid_t pid = fork();
223 if (pid == -1) {
224 LOGE("fork failed: %s\n", strerror(errno));
225
226 // Fall back to traditional logging mode without timestamps.
227 // If these fail, there's not really anywhere to complain...
228 freopen(filename, "a", stdout); setbuf(stdout, NULL);
229 freopen(filename, "a", stderr); setbuf(stderr, NULL);
230
231 return;
232 }
233
234 if (pid == 0) {
235 /// Close the unused write end.
236 close(pipefd[1]);
237
238 auto start = std::chrono::steady_clock::now();
239
240 // Child logger to actually write to the log file.
241 FILE* log_fp = fopen(filename, "a");
242 if (log_fp == nullptr) {
243 LOGE("fopen \"%s\" failed: %s\n", filename, strerror(errno));
244 close(pipefd[0]);
245 _exit(1);
246 }
247
248 FILE* pipe_fp = fdopen(pipefd[0], "r");
249 if (pipe_fp == nullptr) {
250 LOGE("fdopen failed: %s\n", strerror(errno));
251 check_and_fclose(log_fp, filename);
252 close(pipefd[0]);
253 _exit(1);
254 }
255
256 char* line = nullptr;
257 size_t len = 0;
258 while (getline(&line, &len, pipe_fp) != -1) {
259 auto now = std::chrono::steady_clock::now();
260 double duration = std::chrono::duration_cast<std::chrono::duration<double>>(
261 now - start).count();
262 if (line[0] == '\n') {
263 fprintf(log_fp, "[%12.6lf]\n", duration);
264 } else {
265 fprintf(log_fp, "[%12.6lf] %s", duration, line);
266 }
267 fflush(log_fp);
268 }
269
270 LOGE("getline failed: %s\n", strerror(errno));
271
272 free(line);
273 check_and_fclose(log_fp, filename);
274 close(pipefd[0]);
275 _exit(1);
276 } else {
277 // Redirect stdout/stderr to the logger process.
278 // Close the unused read end.
279 close(pipefd[0]);
280
281 setbuf(stdout, nullptr);
282 setbuf(stderr, nullptr);
283
284 if (dup2(pipefd[1], STDOUT_FILENO) == -1) {
285 LOGE("dup2 stdout failed: %s\n", strerror(errno));
286 }
287 if (dup2(pipefd[1], STDERR_FILENO) == -1) {
288 LOGE("dup2 stderr failed: %s\n", strerror(errno));
289 }
290
291 close(pipefd[1]);
292 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800293}
294
295// command line args come from, in decreasing precedence:
296// - the actual command line
297// - the bootloader control block (one per line, after "recovery")
298// - the contents of COMMAND_FILE (one per line)
299static void
300get_args(int *argc, char ***argv) {
301 struct bootloader_message boot;
302 memset(&boot, 0, sizeof(boot));
303 get_bootloader_message(&boot); // this may fail, leaving a zeroed structure
Doug Zongkerc87bab12013-11-25 13:53:25 -0800304 stage = strndup(boot.stage, sizeof(boot.stage));
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800305
306 if (boot.command[0] != 0 && boot.command[0] != 255) {
Mark Salyzynf3bb31c2014-03-14 09:39:48 -0700307 LOGI("Boot command: %.*s\n", (int)sizeof(boot.command), boot.command);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800308 }
309
310 if (boot.status[0] != 0 && boot.status[0] != 255) {
Mark Salyzynf3bb31c2014-03-14 09:39:48 -0700311 LOGI("Boot status: %.*s\n", (int)sizeof(boot.status), boot.status);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800312 }
313
314 // --- if arguments weren't supplied, look in the bootloader control block
315 if (*argc <= 1) {
316 boot.recovery[sizeof(boot.recovery) - 1] = '\0'; // Ensure termination
317 const char *arg = strtok(boot.recovery, "\n");
318 if (arg != NULL && !strcmp(arg, "recovery")) {
319 *argv = (char **) malloc(sizeof(char *) * MAX_ARGS);
320 (*argv)[0] = strdup(arg);
321 for (*argc = 1; *argc < MAX_ARGS; ++*argc) {
322 if ((arg = strtok(NULL, "\n")) == NULL) break;
323 (*argv)[*argc] = strdup(arg);
324 }
325 LOGI("Got arguments from boot message\n");
326 } else if (boot.recovery[0] != 0 && boot.recovery[0] != 255) {
327 LOGE("Bad boot message\n\"%.20s\"\n", boot.recovery);
328 }
329 }
330
Tao Bao26112e52016-02-25 12:29:40 -0800331 // --- if that doesn't work, try the command file (if we have /cache).
332 if (*argc <= 1 && has_cache) {
Doug Zongkerd4208f92010-09-20 12:16:13 -0700333 FILE *fp = fopen_path(COMMAND_FILE, "r");
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800334 if (fp != NULL) {
Jin Feng93ffa752013-06-04 17:46:24 +0800335 char *token;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800336 char *argv0 = (*argv)[0];
337 *argv = (char **) malloc(sizeof(char *) * MAX_ARGS);
338 (*argv)[0] = argv0; // use the same program name
339
340 char buf[MAX_ARG_LENGTH];
341 for (*argc = 1; *argc < MAX_ARGS; ++*argc) {
342 if (!fgets(buf, sizeof(buf), fp)) break;
Jin Feng93ffa752013-06-04 17:46:24 +0800343 token = strtok(buf, "\r\n");
344 if (token != NULL) {
345 (*argv)[*argc] = strdup(token); // Strip newline.
346 } else {
347 --*argc;
348 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800349 }
350
351 check_and_fclose(fp, COMMAND_FILE);
352 LOGI("Got arguments from %s\n", COMMAND_FILE);
353 }
354 }
355
356 // --> write the arguments we have back into the bootloader control block
357 // always boot into recovery after this (until finish_recovery() is called)
358 strlcpy(boot.command, "boot-recovery", sizeof(boot.command));
359 strlcpy(boot.recovery, "recovery\n", sizeof(boot.recovery));
360 int i;
361 for (i = 1; i < *argc; ++i) {
362 strlcat(boot.recovery, (*argv)[i], sizeof(boot.recovery));
363 strlcat(boot.recovery, "\n", sizeof(boot.recovery));
364 }
365 set_bootloader_message(&boot);
366}
367
Doug Zongker34c98df2009-08-18 12:05:45 -0700368static void
Oscar Montemayor05231562009-11-30 08:40:57 -0800369set_sdcard_update_bootloader_message() {
Doug Zongker34c98df2009-08-18 12:05:45 -0700370 struct bootloader_message boot;
371 memset(&boot, 0, sizeof(boot));
372 strlcpy(boot.command, "boot-recovery", sizeof(boot.command));
373 strlcpy(boot.recovery, "recovery\n", sizeof(boot.recovery));
374 set_bootloader_message(&boot);
375}
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800376
Tao Baobef39712015-05-04 18:50:27 -0700377// Read from kernel log into buffer and write out to file.
378static void save_kernel_log(const char* destination) {
379 int klog_buf_len = klogctl(KLOG_SIZE_BUFFER, 0, 0);
Patrick Tjincd055ee2014-12-09 11:26:40 -0800380 if (klog_buf_len <= 0) {
Tao Baobef39712015-05-04 18:50:27 -0700381 LOGE("Error getting klog size: %s\n", strerror(errno));
Patrick Tjincd055ee2014-12-09 11:26:40 -0800382 return;
383 }
384
Tao Baobef39712015-05-04 18:50:27 -0700385 std::string buffer(klog_buf_len, 0);
386 int n = klogctl(KLOG_READ_ALL, &buffer[0], klog_buf_len);
387 if (n == -1) {
388 LOGE("Error in reading klog: %s\n", strerror(errno));
Patrick Tjincd055ee2014-12-09 11:26:40 -0800389 return;
390 }
Tao Baobef39712015-05-04 18:50:27 -0700391 buffer.resize(n);
392 android::base::WriteStringToFile(buffer, destination);
Patrick Tjincd055ee2014-12-09 11:26:40 -0800393}
394
Mark Salyzyna4f701a2016-03-09 14:58:16 -0800395// write content to the current pmsg session.
396static ssize_t __pmsg_write(const char *filename, const char *buf, size_t len) {
397 return __android_log_pmsg_file_write(LOG_ID_SYSTEM, ANDROID_LOG_INFO,
398 filename, buf, len);
399}
400
401static void copy_log_file_to_pmsg(const char* source, const char* destination) {
402 std::string content;
403 android::base::ReadFileToString(source, &content);
404 __pmsg_write(destination, content.c_str(), content.length());
405}
406
Tao Baof0124322015-04-11 02:04:11 +0000407// How much of the temp log we have copied to the copy in cache.
Chih-Hung Hsieh54a27472016-04-18 11:30:55 -0700408static off_t tmplog_offset = 0;
Tao Baof0124322015-04-11 02:04:11 +0000409
Tao Baobef39712015-05-04 18:50:27 -0700410static void copy_log_file(const char* source, const char* destination, bool append) {
411 FILE* dest_fp = fopen_path(destination, append ? "a" : "w");
412 if (dest_fp == nullptr) {
Doug Zongker2c3539e2010-09-29 13:21:30 -0700413 LOGE("Can't open %s\n", destination);
414 } else {
Tao Baobef39712015-05-04 18:50:27 -0700415 FILE* source_fp = fopen(source, "r");
416 if (source_fp != nullptr) {
Tao Baof0124322015-04-11 02:04:11 +0000417 if (append) {
Chih-Hung Hsieh54a27472016-04-18 11:30:55 -0700418 fseeko(source_fp, tmplog_offset, SEEK_SET); // Since last write
Doug Zongker2c3539e2010-09-29 13:21:30 -0700419 }
420 char buf[4096];
Tao Baobef39712015-05-04 18:50:27 -0700421 size_t bytes;
422 while ((bytes = fread(buf, 1, sizeof(buf), source_fp)) != 0) {
423 fwrite(buf, 1, bytes, dest_fp);
Doug Zongker2c3539e2010-09-29 13:21:30 -0700424 }
Tao Baobef39712015-05-04 18:50:27 -0700425 if (append) {
Chih-Hung Hsieh54a27472016-04-18 11:30:55 -0700426 tmplog_offset = ftello(source_fp);
Tao Baobef39712015-05-04 18:50:27 -0700427 }
428 check_and_fclose(source_fp, source);
Doug Zongker2c3539e2010-09-29 13:21:30 -0700429 }
Tao Baobef39712015-05-04 18:50:27 -0700430 check_and_fclose(dest_fp, destination);
Doug Zongker2c3539e2010-09-29 13:21:30 -0700431 }
432}
433
Tao Baobef39712015-05-04 18:50:27 -0700434// Rename last_log -> last_log.1 -> last_log.2 -> ... -> last_log.$max.
435// Similarly rename last_kmsg -> last_kmsg.1 -> ... -> last_kmsg.$max.
436// Overwrite any existing last_log.$max and last_kmsg.$max.
437static void rotate_logs(int max) {
Tao Bao682c34b2015-04-07 17:16:35 -0700438 // Logs should only be rotated once.
439 static bool rotated = false;
440 if (rotated) {
441 return;
442 }
443 rotated = true;
444 ensure_path_mounted(LAST_LOG_FILE);
Tao Baobef39712015-05-04 18:50:27 -0700445 ensure_path_mounted(LAST_KMSG_FILE);
Tao Bao682c34b2015-04-07 17:16:35 -0700446
Tao Bao682c34b2015-04-07 17:16:35 -0700447 for (int i = max-1; i >= 0; --i) {
Tao Bao80e46e02015-06-03 10:49:29 -0700448 std::string old_log = android::base::StringPrintf("%s", LAST_LOG_FILE);
449 if (i > 0) {
450 old_log += "." + std::to_string(i);
451 }
Tao Baobef39712015-05-04 18:50:27 -0700452 std::string new_log = android::base::StringPrintf("%s.%d", LAST_LOG_FILE, i+1);
453 // Ignore errors if old_log doesn't exist.
454 rename(old_log.c_str(), new_log.c_str());
455
Tao Bao80e46e02015-06-03 10:49:29 -0700456 std::string old_kmsg = android::base::StringPrintf("%s", LAST_KMSG_FILE);
457 if (i > 0) {
458 old_kmsg += "." + std::to_string(i);
459 }
Tao Baobef39712015-05-04 18:50:27 -0700460 std::string new_kmsg = android::base::StringPrintf("%s.%d", LAST_KMSG_FILE, i+1);
461 rename(old_kmsg.c_str(), new_kmsg.c_str());
Doug Zongkerda1ebae2013-05-16 11:23:48 -0700462 }
463}
Doug Zongker2c3539e2010-09-29 13:21:30 -0700464
Tao Bao682c34b2015-04-07 17:16:35 -0700465static void copy_logs() {
466 // We only rotate and record the log of the current session if there are
467 // actual attempts to modify the flash, such as wipes, installs from BCB
468 // or menu selections. This is to avoid unnecessary rotation (and
469 // possible deletion) of log files, if it does not do anything loggable.
470 if (!modified_flash) {
471 return;
472 }
473
Mark Salyzyna4f701a2016-03-09 14:58:16 -0800474 // Always write to pmsg, this allows the OTA logs to be caught in logcat -L
475 copy_log_file_to_pmsg(TEMPORARY_LOG_FILE, LAST_LOG_FILE);
476 copy_log_file_to_pmsg(TEMPORARY_INSTALL_FILE, LAST_INSTALL_FILE);
477
478 // We can do nothing for now if there's no /cache partition.
479 if (!has_cache) {
480 return;
481 }
482
Tao Baobef39712015-05-04 18:50:27 -0700483 rotate_logs(KEEP_LOG_COUNT);
Tao Bao682c34b2015-04-07 17:16:35 -0700484
Doug Zongkerf24fd7e2013-07-02 11:43:25 -0700485 // Copy logs to cache so the system can find out what happened.
Tao Baof0124322015-04-11 02:04:11 +0000486 copy_log_file(TEMPORARY_LOG_FILE, LOG_FILE, true);
487 copy_log_file(TEMPORARY_LOG_FILE, LAST_LOG_FILE, false);
488 copy_log_file(TEMPORARY_INSTALL_FILE, LAST_INSTALL_FILE, false);
489 save_kernel_log(LAST_KMSG_FILE);
Doug Zongkerf24fd7e2013-07-02 11:43:25 -0700490 chmod(LOG_FILE, 0600);
491 chown(LOG_FILE, 1000, 1000); // system user
Tao Baof0124322015-04-11 02:04:11 +0000492 chmod(LAST_KMSG_FILE, 0600);
493 chown(LAST_KMSG_FILE, 1000, 1000); // system user
Doug Zongkerf24fd7e2013-07-02 11:43:25 -0700494 chmod(LAST_LOG_FILE, 0640);
495 chmod(LAST_INSTALL_FILE, 0644);
496 sync();
497}
498
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800499// clear the recovery command and prepare to boot a (hopefully working) system,
Tianjie Xuc14d95d2016-03-24 11:50:34 -0700500// copy our log file to cache as well (for the system to read). This function is
501// idempotent: call it as many times as you like.
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800502static void
Tianjie Xuc14d95d2016-03-24 11:50:34 -0700503finish_recovery() {
Doug Zongker4f33e552012-08-23 13:16:12 -0700504 // Save the locale to cache, so if recovery is next started up
505 // without a --locale argument (eg, directly from the bootloader)
506 // it will use the last-known locale.
Mark Salyzyna4f701a2016-03-09 14:58:16 -0800507 if (locale != NULL) {
508 size_t len = strlen(locale);
509 __pmsg_write(LOCALE_FILE, locale, len);
510 if (has_cache) {
511 LOGI("Saving locale \"%s\"\n", locale);
512 FILE* fp = fopen_path(LOCALE_FILE, "w");
513 fwrite(locale, 1, len, fp);
514 fflush(fp);
515 fsync(fileno(fp));
516 check_and_fclose(fp, LOCALE_FILE);
517 }
Doug Zongker4f33e552012-08-23 13:16:12 -0700518 }
519
Doug Zongkerf24fd7e2013-07-02 11:43:25 -0700520 copy_logs();
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800521
Doug Zongkere5d5ac72012-04-12 11:01:22 -0700522 // Reset to normal system boot so recovery won't cycle indefinitely.
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800523 struct bootloader_message boot;
524 memset(&boot, 0, sizeof(boot));
525 set_bootloader_message(&boot);
526
527 // Remove the command file, so recovery won't repeat indefinitely.
Tao Bao26112e52016-02-25 12:29:40 -0800528 if (has_cache) {
529 if (ensure_path_mounted(COMMAND_FILE) != 0 || (unlink(COMMAND_FILE) && errno != ENOENT)) {
530 LOGW("Can't unlink %s\n", COMMAND_FILE);
531 }
532 ensure_path_unmounted(CACHE_ROOT);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800533 }
534
535 sync(); // For good measure.
536}
537
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700538typedef struct _saved_log_file {
539 char* name;
540 struct stat st;
541 unsigned char* data;
542 struct _saved_log_file* next;
543} saved_log_file;
544
Elliott Hughes945548e2015-06-05 17:59:56 -0700545static bool erase_volume(const char* volume) {
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700546 bool is_cache = (strcmp(volume, CACHE_ROOT) == 0);
Paul Lawrenced0db3372015-11-05 13:38:40 -0800547 bool is_data = (strcmp(volume, DATA_ROOT) == 0);
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700548
Doug Zongker02ec6b82012-08-22 17:26:40 -0700549 ui->SetBackground(RecoveryUI::ERASING);
Doug Zongker211aebc2011-10-28 15:13:10 -0700550 ui->SetProgressType(RecoveryUI::INDETERMINATE);
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700551
552 saved_log_file* head = NULL;
553
554 if (is_cache) {
Tao Baobef39712015-05-04 18:50:27 -0700555 // If we're reformatting /cache, we load any past logs
556 // (i.e. "/cache/recovery/last_*") and the current log
557 // ("/cache/recovery/log") into memory, so we can restore them after
558 // the reformat.
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700559
560 ensure_path_mounted(volume);
561
562 DIR* d;
563 struct dirent* de;
564 d = opendir(CACHE_LOG_DIR);
565 if (d) {
566 char path[PATH_MAX];
567 strcpy(path, CACHE_LOG_DIR);
568 strcat(path, "/");
569 int path_len = strlen(path);
570 while ((de = readdir(d)) != NULL) {
Tao Baobef39712015-05-04 18:50:27 -0700571 if (strncmp(de->d_name, "last_", 5) == 0 || strcmp(de->d_name, "log") == 0) {
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700572 saved_log_file* p = (saved_log_file*) malloc(sizeof(saved_log_file));
573 strcpy(path+path_len, de->d_name);
574 p->name = strdup(path);
575 if (stat(path, &(p->st)) == 0) {
576 // truncate files to 512kb
577 if (p->st.st_size > (1 << 19)) {
578 p->st.st_size = 1 << 19;
579 }
580 p->data = (unsigned char*) malloc(p->st.st_size);
581 FILE* f = fopen(path, "rb");
582 fread(p->data, 1, p->st.st_size, f);
583 fclose(f);
584 p->next = head;
585 head = p;
586 } else {
587 free(p);
588 }
589 }
590 }
591 closedir(d);
592 } else {
593 if (errno != ENOENT) {
594 printf("opendir failed: %s\n", strerror(errno));
595 }
596 }
597 }
598
Doug Zongker211aebc2011-10-28 15:13:10 -0700599 ui->Print("Formatting %s...\n", volume);
Doug Zongker2c3539e2010-09-29 13:21:30 -0700600
Doug Zongkerd0181b82011-10-19 10:51:12 -0700601 ensure_path_unmounted(volume);
Paul Lawrenced0db3372015-11-05 13:38:40 -0800602
603 int result;
604
605 if (is_data && reason && strcmp(reason, "convert_fbe") == 0) {
606 // Create convert_fbe breadcrumb file to signal to init
607 // to convert to file based encryption, not full disk encryption
Paul Lawrence661f8a62016-02-25 12:42:19 -0800608 if (mkdir(CONVERT_FBE_DIR, 0700) != 0) {
609 ui->Print("Failed to make convert_fbe dir %s\n", strerror(errno));
610 return true;
611 }
Paul Lawrenced0db3372015-11-05 13:38:40 -0800612 FILE* f = fopen(CONVERT_FBE_FILE, "wb");
613 if (!f) {
Paul Lawrence661f8a62016-02-25 12:42:19 -0800614 ui->Print("Failed to convert to file encryption %s\n", strerror(errno));
Paul Lawrenced0db3372015-11-05 13:38:40 -0800615 return true;
616 }
617 fclose(f);
618 result = format_volume(volume, CONVERT_FBE_DIR);
619 remove(CONVERT_FBE_FILE);
620 rmdir(CONVERT_FBE_DIR);
621 } else {
622 result = format_volume(volume);
623 }
Doug Zongkerd0181b82011-10-19 10:51:12 -0700624
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700625 if (is_cache) {
626 while (head) {
627 FILE* f = fopen_path(head->name, "wb");
628 if (f) {
629 fwrite(head->data, 1, head->st.st_size, f);
630 fclose(f);
631 chmod(head->name, head->st.st_mode);
632 chown(head->name, head->st.st_uid, head->st.st_gid);
633 }
634 free(head->name);
635 free(head->data);
636 saved_log_file* temp = head->next;
637 free(head);
638 head = temp;
639 }
640
Tao Baof0124322015-04-11 02:04:11 +0000641 // Any part of the log we'd copied to cache is now gone.
642 // Reset the pointer so we copy from the beginning of the temp
643 // log.
644 tmplog_offset = 0;
Doug Zongker6d0d7ac2013-07-09 13:34:55 -0700645 copy_logs();
Doug Zongker2c3539e2010-09-29 13:21:30 -0700646 }
647
Elliott Hughes945548e2015-06-05 17:59:56 -0700648 return (result == 0);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800649}
650
Doug Zongkerf93d8162009-09-22 15:16:02 -0700651static int
Doug Zongker28ce47c2011-10-28 10:33:05 -0700652get_menu_selection(const char* const * headers, const char* const * items,
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700653 int menu_only, int initial_selection, Device* device) {
Doug Zongkerf93d8162009-09-22 15:16:02 -0700654 // throw away keys pressed previously, so user doesn't
655 // accidentally trigger menu items.
Doug Zongker211aebc2011-10-28 15:13:10 -0700656 ui->FlushKeys();
Doug Zongkerf93d8162009-09-22 15:16:02 -0700657
Doug Zongker211aebc2011-10-28 15:13:10 -0700658 ui->StartMenu(headers, items, initial_selection);
Doug Zongker8674a722010-09-15 11:08:23 -0700659 int selected = initial_selection;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800660 int chosen_item = -1;
661
Doug Zongkerf93d8162009-09-22 15:16:02 -0700662 while (chosen_item < 0) {
Doug Zongker211aebc2011-10-28 15:13:10 -0700663 int key = ui->WaitKey();
664 int visible = ui->IsTextVisible();
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800665
Doug Zongker5cae4452011-01-25 13:15:30 -0800666 if (key == -1) { // ui_wait_key() timed out
Doug Zongker211aebc2011-10-28 15:13:10 -0700667 if (ui->WasTextEverVisible()) {
Doug Zongker5cae4452011-01-25 13:15:30 -0800668 continue;
669 } else {
670 LOGI("timed out waiting for key input; rebooting.\n");
Doug Zongker211aebc2011-10-28 15:13:10 -0700671 ui->EndMenu();
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700672 return 0; // XXX fixme
Doug Zongker5cae4452011-01-25 13:15:30 -0800673 }
674 }
675
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700676 int action = device->HandleMenuKey(key, visible);
Doug Zongkerddd6a282009-06-09 12:22:33 -0700677
678 if (action < 0) {
679 switch (action) {
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700680 case Device::kHighlightUp:
Elliott Hughes642aaa72015-04-10 12:47:46 -0700681 selected = ui->SelectMenu(--selected);
Doug Zongkerddd6a282009-06-09 12:22:33 -0700682 break;
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700683 case Device::kHighlightDown:
Elliott Hughes642aaa72015-04-10 12:47:46 -0700684 selected = ui->SelectMenu(++selected);
Doug Zongkerddd6a282009-06-09 12:22:33 -0700685 break;
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700686 case Device::kInvokeItem:
Doug Zongkerddd6a282009-06-09 12:22:33 -0700687 chosen_item = selected;
688 break;
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700689 case Device::kNoAction:
Doug Zongkerddd6a282009-06-09 12:22:33 -0700690 break;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800691 }
Doug Zongkerf93d8162009-09-22 15:16:02 -0700692 } else if (!menu_only) {
Doug Zongkerddd6a282009-06-09 12:22:33 -0700693 chosen_item = action;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800694 }
Doug Zongkerf93d8162009-09-22 15:16:02 -0700695 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800696
Doug Zongker211aebc2011-10-28 15:13:10 -0700697 ui->EndMenu();
Doug Zongkerf93d8162009-09-22 15:16:02 -0700698 return chosen_item;
699}
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800700
Doug Zongker8674a722010-09-15 11:08:23 -0700701static int compare_string(const void* a, const void* b) {
702 return strcmp(*(const char**)a, *(const char**)b);
703}
704
Doug Zongker93950222014-07-08 14:10:23 -0700705// Returns a malloc'd path, or NULL.
Elliott Hughes30694c92015-03-25 15:16:51 -0700706static char* browse_directory(const char* path, Device* device) {
Michael Ward9d2629c2011-06-23 22:14:24 -0700707 ensure_path_mounted(path);
Doug Zongkerc18eeb82010-09-21 16:49:26 -0700708
Elliott Hughes30694c92015-03-25 15:16:51 -0700709 DIR* d = opendir(path);
Doug Zongker8674a722010-09-15 11:08:23 -0700710 if (d == NULL) {
711 LOGE("error opening %s: %s\n", path, strerror(errno));
Doug Zongker93950222014-07-08 14:10:23 -0700712 return NULL;
Doug Zongker8674a722010-09-15 11:08:23 -0700713 }
714
Doug Zongker8674a722010-09-15 11:08:23 -0700715 int d_size = 0;
716 int d_alloc = 10;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700717 char** dirs = (char**)malloc(d_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700718 int z_size = 1;
719 int z_alloc = 10;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700720 char** zips = (char**)malloc(z_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700721 zips[0] = strdup("../");
722
Elliott Hughes30694c92015-03-25 15:16:51 -0700723 struct dirent* de;
Doug Zongker8674a722010-09-15 11:08:23 -0700724 while ((de = readdir(d)) != NULL) {
725 int name_len = strlen(de->d_name);
726
727 if (de->d_type == DT_DIR) {
728 // skip "." and ".." entries
729 if (name_len == 1 && de->d_name[0] == '.') continue;
730 if (name_len == 2 && de->d_name[0] == '.' &&
731 de->d_name[1] == '.') continue;
732
733 if (d_size >= d_alloc) {
734 d_alloc *= 2;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700735 dirs = (char**)realloc(dirs, d_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700736 }
Doug Zongker28ce47c2011-10-28 10:33:05 -0700737 dirs[d_size] = (char*)malloc(name_len + 2);
Doug Zongker8674a722010-09-15 11:08:23 -0700738 strcpy(dirs[d_size], de->d_name);
739 dirs[d_size][name_len] = '/';
740 dirs[d_size][name_len+1] = '\0';
741 ++d_size;
742 } else if (de->d_type == DT_REG &&
743 name_len >= 4 &&
744 strncasecmp(de->d_name + (name_len-4), ".zip", 4) == 0) {
745 if (z_size >= z_alloc) {
746 z_alloc *= 2;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700747 zips = (char**)realloc(zips, z_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700748 }
749 zips[z_size++] = strdup(de->d_name);
750 }
751 }
752 closedir(d);
753
754 qsort(dirs, d_size, sizeof(char*), compare_string);
755 qsort(zips, z_size, sizeof(char*), compare_string);
756
757 // append dirs to the zips list
758 if (d_size + z_size + 1 > z_alloc) {
759 z_alloc = d_size + z_size + 1;
Doug Zongker28ce47c2011-10-28 10:33:05 -0700760 zips = (char**)realloc(zips, z_alloc * sizeof(char*));
Doug Zongker8674a722010-09-15 11:08:23 -0700761 }
762 memcpy(zips + z_size, dirs, d_size * sizeof(char*));
763 free(dirs);
764 z_size += d_size;
765 zips[z_size] = NULL;
766
Elliott Hughes8fd86d72015-04-13 14:36:02 -0700767 const char* headers[] = { "Choose a package to install:", path, NULL };
Elliott Hughes30694c92015-03-25 15:16:51 -0700768
Doug Zongker93950222014-07-08 14:10:23 -0700769 char* result;
Doug Zongker8674a722010-09-15 11:08:23 -0700770 int chosen_item = 0;
Doug Zongker93950222014-07-08 14:10:23 -0700771 while (true) {
Doug Zongkerdaefc1d2011-10-31 09:34:15 -0700772 chosen_item = get_menu_selection(headers, zips, 1, chosen_item, device);
Doug Zongker8674a722010-09-15 11:08:23 -0700773
774 char* item = zips[chosen_item];
775 int item_len = strlen(item);
776 if (chosen_item == 0) { // item 0 is always "../"
Michael Ward9d2629c2011-06-23 22:14:24 -0700777 // go up but continue browsing (if the caller is update_directory)
Doug Zongker93950222014-07-08 14:10:23 -0700778 result = NULL;
Doug Zongker8674a722010-09-15 11:08:23 -0700779 break;
780 }
Doug Zongker93950222014-07-08 14:10:23 -0700781
782 char new_path[PATH_MAX];
783 strlcpy(new_path, path, PATH_MAX);
784 strlcat(new_path, "/", PATH_MAX);
785 strlcat(new_path, item, PATH_MAX);
786
787 if (item[item_len-1] == '/') {
788 // recurse down into a subdirectory
789 new_path[strlen(new_path)-1] = '\0'; // truncate the trailing '/'
790 result = browse_directory(new_path, device);
791 if (result) break;
792 } else {
793 // selected a zip file: return the malloc'd path to the caller.
794 result = strdup(new_path);
795 break;
796 }
797 }
Doug Zongker8674a722010-09-15 11:08:23 -0700798
Elliott Hughes30694c92015-03-25 15:16:51 -0700799 for (int i = 0; i < z_size; ++i) free(zips[i]);
Doug Zongker8674a722010-09-15 11:08:23 -0700800 free(zips);
Doug Zongker8674a722010-09-15 11:08:23 -0700801
802 return result;
803}
804
Elliott Hughes30694c92015-03-25 15:16:51 -0700805static bool yes_no(Device* device, const char* question1, const char* question2) {
Elliott Hughes8fd86d72015-04-13 14:36:02 -0700806 const char* headers[] = { question1, question2, NULL };
Elliott Hughes30694c92015-03-25 15:16:51 -0700807 const char* items[] = { " No", " Yes", NULL };
Doug Zongkerddd6a282009-06-09 12:22:33 -0700808
Elliott Hughes30694c92015-03-25 15:16:51 -0700809 int chosen_item = get_menu_selection(headers, items, 1, 0, device);
810 return (chosen_item == 1);
811}
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -0800812
Tao Baoe39a9bc2015-03-31 12:19:05 -0700813// Return true on success.
814static bool wipe_data(int should_confirm, Device* device) {
815 if (should_confirm && !yes_no(device, "Wipe all user data?", " THIS CAN NOT BE UNDONE!")) {
816 return false;
Doug Zongkerf93d8162009-09-22 15:16:02 -0700817 }
Doug Zongker1066d2c2009-04-01 13:57:40 -0700818
Tao Bao682c34b2015-04-07 17:16:35 -0700819 modified_flash = true;
820
Doug Zongker211aebc2011-10-28 15:13:10 -0700821 ui->Print("\n-- Wiping data...\n");
Elliott Hughes945548e2015-06-05 17:59:56 -0700822 bool success =
823 device->PreWipeData() &&
824 erase_volume("/data") &&
Tao Bao26112e52016-02-25 12:29:40 -0800825 (has_cache ? erase_volume("/cache") : true) &&
Elliott Hughes945548e2015-06-05 17:59:56 -0700826 device->PostWipeData();
827 ui->Print("Data wipe %s.\n", success ? "complete" : "failed");
828 return success;
Doug Zongkerf93d8162009-09-22 15:16:02 -0700829}
830
Tao Baoe39a9bc2015-03-31 12:19:05 -0700831// Return true on success.
832static bool wipe_cache(bool should_confirm, Device* device) {
Tao Bao26112e52016-02-25 12:29:40 -0800833 if (!has_cache) {
834 ui->Print("No /cache partition found.\n");
835 return false;
836 }
837
Elliott Hughes30694c92015-03-25 15:16:51 -0700838 if (should_confirm && !yes_no(device, "Wipe cache?", " THIS CAN NOT BE UNDONE!")) {
Tao Baoe39a9bc2015-03-31 12:19:05 -0700839 return false;
Elliott Hughes30694c92015-03-25 15:16:51 -0700840 }
841
Tao Bao682c34b2015-04-07 17:16:35 -0700842 modified_flash = true;
843
Elliott Hughes30694c92015-03-25 15:16:51 -0700844 ui->Print("\n-- Wiping cache...\n");
Elliott Hughes945548e2015-06-05 17:59:56 -0700845 bool success = erase_volume("/cache");
846 ui->Print("Cache wipe %s.\n", success ? "complete" : "failed");
847 return success;
Elliott Hughes30694c92015-03-25 15:16:51 -0700848}
849
Tao Bao862a4c12016-06-02 11:16:50 -0700850// Secure-wipe a given partition. It uses BLKSECDISCARD, if supported.
851// Otherwise, it goes with BLKDISCARD (if device supports BLKDISCARDZEROES) or
852// BLKZEROOUT.
853static bool secure_wipe_partition(const std::string& partition) {
854 android::base::unique_fd fd(TEMP_FAILURE_RETRY(open(partition.c_str(), O_WRONLY)));
855 if (fd == -1) {
856 LOGE("failed to open \"%s\": %s\n", partition.c_str(), strerror(errno));
857 return false;
858 }
859
860 uint64_t range[2] = {0, 0};
861 if (ioctl(fd, BLKGETSIZE64, &range[1]) == -1 || range[1] == 0) {
862 LOGE("failed to get partition size: %s\n", strerror(errno));
863 return false;
864 }
865 printf("Secure-wiping \"%s\" from %" PRIu64 " to %" PRIu64 ".\n",
866 partition.c_str(), range[0], range[1]);
867
868 printf("Trying BLKSECDISCARD...\t");
869 if (ioctl(fd, BLKSECDISCARD, &range) == -1) {
870 printf("failed: %s\n", strerror(errno));
871
872 // Use BLKDISCARD if it zeroes out blocks, otherwise use BLKZEROOUT.
873 unsigned int zeroes;
874 if (ioctl(fd, BLKDISCARDZEROES, &zeroes) == 0 && zeroes != 0) {
875 printf("Trying BLKDISCARD...\t");
876 if (ioctl(fd, BLKDISCARD, &range) == -1) {
877 printf("failed: %s\n", strerror(errno));
878 return false;
879 }
880 } else {
881 printf("Trying BLKZEROOUT...\t");
882 if (ioctl(fd, BLKZEROOUT, &range) == -1) {
883 printf("failed: %s\n", strerror(errno));
884 return false;
885 }
886 }
887 }
888
889 printf("done\n");
890 return true;
891}
892
893// Brick the current device, with a secure wipe of all the partitions in
894// RECOVERY_BRICK.
895static bool brick_device() {
896 ui->SetBackground(RecoveryUI::ERASING);
897 ui->SetProgressType(RecoveryUI::INDETERMINATE);
898
899 std::string partition_list;
900 if (!android::base::ReadFileToString(RECOVERY_BRICK, &partition_list)) {
901 LOGE("failed to read \"%s\".\n", RECOVERY_BRICK);
902 return false;
903 }
904
905 std::vector<std::string> lines = android::base::Split(partition_list, "\n");
906 for (const std::string& line : lines) {
907 std::string partition = android::base::Trim(line);
908 // Ignore '#' comment or empty lines.
909 if (android::base::StartsWith(partition, "#") || partition.empty()) {
910 continue;
911 }
912
913 // Proceed anyway even if it fails to wipe some partition.
914 secure_wipe_partition(partition);
915 }
916 return true;
917}
918
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700919static void choose_recovery_file(Device* device) {
Tao Bao26112e52016-02-25 12:29:40 -0800920 if (!has_cache) {
921 ui->Print("No /cache partition found.\n");
922 return;
923 }
924
Elliott Hughesc0491632015-05-06 12:40:05 -0700925 // "Back" + KEEP_LOG_COUNT * 2 + terminating nullptr entry
926 char* entries[1 + KEEP_LOG_COUNT * 2 + 1];
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700927 memset(entries, 0, sizeof(entries));
928
Tao Baobef39712015-05-04 18:50:27 -0700929 unsigned int n = 0;
Patrick Tjincd055ee2014-12-09 11:26:40 -0800930
Patrick Tjincd055ee2014-12-09 11:26:40 -0800931 // Add LAST_LOG_FILE + LAST_LOG_FILE.x
Tao Baobef39712015-05-04 18:50:27 -0700932 // Add LAST_KMSG_FILE + LAST_KMSG_FILE.x
933 for (int i = 0; i < KEEP_LOG_COUNT; i++) {
934 char* log_file;
Tao Bao80e46e02015-06-03 10:49:29 -0700935 int ret;
936 ret = (i == 0) ? asprintf(&log_file, "%s", LAST_LOG_FILE) :
937 asprintf(&log_file, "%s.%d", LAST_LOG_FILE, i);
938 if (ret == -1) {
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700939 // memory allocation failure - return early. Should never happen.
940 return;
941 }
Tao Baobef39712015-05-04 18:50:27 -0700942 if ((ensure_path_mounted(log_file) != 0) || (access(log_file, R_OK) == -1)) {
943 free(log_file);
944 } else {
945 entries[n++] = log_file;
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700946 }
Tao Baobef39712015-05-04 18:50:27 -0700947
948 char* kmsg_file;
Tao Bao80e46e02015-06-03 10:49:29 -0700949 ret = (i == 0) ? asprintf(&kmsg_file, "%s", LAST_KMSG_FILE) :
950 asprintf(&kmsg_file, "%s.%d", LAST_KMSG_FILE, i);
951 if (ret == -1) {
Tao Baobef39712015-05-04 18:50:27 -0700952 // memory allocation failure - return early. Should never happen.
953 return;
954 }
955 if ((ensure_path_mounted(kmsg_file) != 0) || (access(kmsg_file, R_OK) == -1)) {
956 free(kmsg_file);
957 } else {
958 entries[n++] = kmsg_file;
959 }
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700960 }
961
Elliott Hughesc0491632015-05-06 12:40:05 -0700962 entries[n++] = strdup("Back");
963
Tao Baobef39712015-05-04 18:50:27 -0700964 const char* headers[] = { "Select file to view", nullptr };
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700965
Elliott Hughes8de52072015-04-08 20:06:50 -0700966 while (true) {
Elliott Hughes30694c92015-03-25 15:16:51 -0700967 int chosen_item = get_menu_selection(headers, entries, 1, 0, device);
Elliott Hughesc0491632015-05-06 12:40:05 -0700968 if (strcmp(entries[chosen_item], "Back") == 0) break;
Elliott Hughes8de52072015-04-08 20:06:50 -0700969
Elliott Hughes8de52072015-04-08 20:06:50 -0700970 ui->ShowFile(entries[chosen_item]);
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700971 }
972
Tao Baobef39712015-05-04 18:50:27 -0700973 for (size_t i = 0; i < (sizeof(entries) / sizeof(*entries)); i++) {
Nick Kralevicha9ad0322014-10-22 18:38:48 -0700974 free(entries[i]);
975 }
976}
977
Elliott Hughes498cda62016-04-14 16:49:04 -0700978static void run_graphics_test(Device* device) {
979 // Switch to graphics screen.
980 ui->ShowText(false);
981
982 ui->SetProgressType(RecoveryUI::INDETERMINATE);
983 ui->SetBackground(RecoveryUI::INSTALLING_UPDATE);
984 sleep(1);
985
986 ui->SetBackground(RecoveryUI::ERROR);
987 sleep(1);
988
989 ui->SetBackground(RecoveryUI::NO_COMMAND);
990 sleep(1);
991
992 ui->SetBackground(RecoveryUI::ERASING);
993 sleep(1);
994
995 ui->SetBackground(RecoveryUI::INSTALLING_UPDATE);
996
997 ui->SetProgressType(RecoveryUI::DETERMINATE);
998 ui->ShowProgress(1.0, 10.0);
999 float fraction = 0.0;
1000 for (size_t i = 0; i < 100; ++i) {
1001 fraction += .01;
1002 ui->SetProgress(fraction);
1003 usleep(100000);
1004 }
1005
1006 ui->ShowText(true);
1007}
1008
Tao Baocdcf28f2016-01-13 15:05:20 -08001009// How long (in seconds) we wait for the fuse-provided package file to
1010// appear, before timing out.
1011#define SDCARD_INSTALL_TIMEOUT 10
1012
Tao Bao145d8612015-03-25 15:51:15 -07001013static int apply_from_sdcard(Device* device, bool* wipe_cache) {
Tao Bao682c34b2015-04-07 17:16:35 -07001014 modified_flash = true;
1015
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001016 if (ensure_path_mounted(SDCARD_ROOT) != 0) {
1017 ui->Print("\n-- Couldn't mount %s.\n", SDCARD_ROOT);
1018 return INSTALL_ERROR;
1019 }
1020
1021 char* path = browse_directory(SDCARD_ROOT, device);
1022 if (path == NULL) {
Elliott Hughes018ed312015-04-08 16:51:36 -07001023 ui->Print("\n-- No package file selected.\n");
caozhiyuanb4effb92015-06-10 16:46:38 +08001024 ensure_path_unmounted(SDCARD_ROOT);
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001025 return INSTALL_ERROR;
1026 }
1027
1028 ui->Print("\n-- Install %s ...\n", path);
1029 set_sdcard_update_bootloader_message();
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001030
Tao Baocdcf28f2016-01-13 15:05:20 -08001031 // We used to use fuse in a thread as opposed to a process. Since accessing
1032 // through fuse involves going from kernel to userspace to kernel, it leads
1033 // to deadlock when a page fault occurs. (Bug: 26313124)
1034 pid_t child;
1035 if ((child = fork()) == 0) {
1036 bool status = start_sdcard_fuse(path);
1037
1038 _exit(status ? EXIT_SUCCESS : EXIT_FAILURE);
1039 }
1040
1041 // FUSE_SIDELOAD_HOST_PATHNAME will start to exist once the fuse in child
1042 // process is ready.
1043 int result = INSTALL_ERROR;
1044 int status;
1045 bool waited = false;
1046 for (int i = 0; i < SDCARD_INSTALL_TIMEOUT; ++i) {
1047 if (waitpid(child, &status, WNOHANG) == -1) {
1048 result = INSTALL_ERROR;
1049 waited = true;
1050 break;
1051 }
1052
1053 struct stat sb;
1054 if (stat(FUSE_SIDELOAD_HOST_PATHNAME, &sb) == -1) {
1055 if (errno == ENOENT && i < SDCARD_INSTALL_TIMEOUT-1) {
1056 sleep(1);
1057 continue;
1058 } else {
1059 LOGE("Timed out waiting for the fuse-provided package.\n");
1060 result = INSTALL_ERROR;
1061 kill(child, SIGKILL);
1062 break;
1063 }
1064 }
1065
1066 result = install_package(FUSE_SIDELOAD_HOST_PATHNAME, wipe_cache,
Tianjie Xu16255832016-04-30 11:49:59 -07001067 TEMPORARY_INSTALL_FILE, false, 0/*retry_count*/);
Tao Baocdcf28f2016-01-13 15:05:20 -08001068 break;
1069 }
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001070
Tao Baocdcf28f2016-01-13 15:05:20 -08001071 if (!waited) {
1072 // Calling stat() on this magic filename signals the fuse
1073 // filesystem to shut down.
1074 struct stat sb;
1075 stat(FUSE_SIDELOAD_HOST_EXIT_PATHNAME, &sb);
1076
1077 waitpid(child, &status, 0);
1078 }
1079
1080 if (!WIFEXITED(status) || WEXITSTATUS(status) != 0) {
1081 LOGE("Error exit from the fuse process: %d\n", WEXITSTATUS(status));
1082 }
1083
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001084 ensure_path_unmounted(SDCARD_ROOT);
Tao Baocdcf28f2016-01-13 15:05:20 -08001085 return result;
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001086}
1087
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001088// Return REBOOT, SHUTDOWN, or REBOOT_BOOTLOADER. Returning NO_ACTION
1089// means to take the default, which is to reboot or shutdown depending
1090// on if the --shutdown_after flag was passed to recovery.
1091static Device::BuiltinAction
Doug Zongker6c8553d2012-09-24 10:40:47 -07001092prompt_and_wait(Device* device, int status) {
Doug Zongkerf93d8162009-09-22 15:16:02 -07001093 for (;;) {
Tianjie Xuc14d95d2016-03-24 11:50:34 -07001094 finish_recovery();
Doug Zongker6c8553d2012-09-24 10:40:47 -07001095 switch (status) {
1096 case INSTALL_SUCCESS:
1097 case INSTALL_NONE:
1098 ui->SetBackground(RecoveryUI::NO_COMMAND);
1099 break;
1100
1101 case INSTALL_ERROR:
1102 case INSTALL_CORRUPT:
1103 ui->SetBackground(RecoveryUI::ERROR);
1104 break;
1105 }
Doug Zongker211aebc2011-10-28 15:13:10 -07001106 ui->SetProgressType(RecoveryUI::EMPTY);
Doug Zongkerf93d8162009-09-22 15:16:02 -07001107
Elliott Hughes8fd86d72015-04-13 14:36:02 -07001108 int chosen_item = get_menu_selection(nullptr, device->GetMenuItems(), 0, 0, device);
Doug Zongkerf93d8162009-09-22 15:16:02 -07001109
1110 // device-specific code may take some action here. It may
1111 // return one of the core actions handled in the switch
1112 // statement below.
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001113 Device::BuiltinAction chosen_action = device->InvokeMenuItem(chosen_item);
Doug Zongkerf93d8162009-09-22 15:16:02 -07001114
Elliott Hughes30694c92015-03-25 15:16:51 -07001115 bool should_wipe_cache = false;
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001116 switch (chosen_action) {
1117 case Device::NO_ACTION:
1118 break;
1119
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001120 case Device::REBOOT:
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001121 case Device::SHUTDOWN:
1122 case Device::REBOOT_BOOTLOADER:
1123 return chosen_action;
Doug Zongkerf93d8162009-09-22 15:16:02 -07001124
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001125 case Device::WIPE_DATA:
1126 wipe_data(ui->IsTextVisible(), device);
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001127 if (!ui->IsTextVisible()) return Device::NO_ACTION;
Doug Zongkerf93d8162009-09-22 15:16:02 -07001128 break;
1129
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001130 case Device::WIPE_CACHE:
Elliott Hughes30694c92015-03-25 15:16:51 -07001131 wipe_cache(ui->IsTextVisible(), device);
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001132 if (!ui->IsTextVisible()) return Device::NO_ACTION;
Doug Zongkerf93d8162009-09-22 15:16:02 -07001133 break;
1134
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001135 case Device::APPLY_ADB_SIDELOAD:
Elliott Hughesec283402015-04-10 10:01:53 -07001136 case Device::APPLY_SDCARD:
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001137 {
1138 bool adb = (chosen_action == Device::APPLY_ADB_SIDELOAD);
1139 if (adb) {
Elliott Hughes30694c92015-03-25 15:16:51 -07001140 status = apply_from_adb(ui, &should_wipe_cache, TEMPORARY_INSTALL_FILE);
Doug Zongkerd0181b82011-10-19 10:51:12 -07001141 } else {
Elliott Hughes30694c92015-03-25 15:16:51 -07001142 status = apply_from_sdcard(device, &should_wipe_cache);
Doug Zongkerd0181b82011-10-19 10:51:12 -07001143 }
Doug Zongker945fc682014-07-10 10:50:39 -07001144
Elliott Hughes30694c92015-03-25 15:16:51 -07001145 if (status == INSTALL_SUCCESS && should_wipe_cache) {
Tao Baoe39a9bc2015-03-31 12:19:05 -07001146 if (!wipe_cache(false, device)) {
1147 status = INSTALL_ERROR;
1148 }
Christian Poetzsch4ec58a42015-02-19 10:42:39 +00001149 }
1150
Tao Baoc679f932015-03-30 09:43:49 -07001151 if (status != INSTALL_SUCCESS) {
1152 ui->SetBackground(RecoveryUI::ERROR);
1153 ui->Print("Installation aborted.\n");
1154 copy_logs();
1155 } else if (!ui->IsTextVisible()) {
1156 return Device::NO_ACTION; // reboot if logs aren't visible
1157 } else {
1158 ui->Print("\nInstall from %s complete.\n", adb ? "ADB" : "SD card");
Doug Zongker8674a722010-09-15 11:08:23 -07001159 }
Doug Zongkerf93d8162009-09-22 15:16:02 -07001160 }
1161 break;
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001162
Elliott Hughesec283402015-04-10 10:01:53 -07001163 case Device::VIEW_RECOVERY_LOGS:
1164 choose_recovery_file(device);
Michael Ward9d2629c2011-06-23 22:14:24 -07001165 break;
Doug Zongker9270a202012-01-09 15:16:13 -08001166
Elliott Hughes498cda62016-04-14 16:49:04 -07001167 case Device::RUN_GRAPHICS_TEST:
1168 run_graphics_test(device);
1169 break;
1170
Elliott Hughesec283402015-04-10 10:01:53 -07001171 case Device::MOUNT_SYSTEM:
Tao Baoabb8f772015-07-30 14:43:27 -07001172 char system_root_image[PROPERTY_VALUE_MAX];
1173 property_get("ro.build.system_root_image", system_root_image, "");
1174
1175 // For a system image built with the root directory (i.e.
1176 // system_root_image == "true"), we mount it to /system_root, and symlink /system
1177 // to /system_root/system to make adb shell work (the symlink is created through
1178 // the build system).
1179 // Bug: 22855115
1180 if (strcmp(system_root_image, "true") == 0) {
1181 if (ensure_path_mounted_at("/", "/system_root") != -1) {
1182 ui->Print("Mounted /system.\n");
1183 }
1184 } else {
1185 if (ensure_path_mounted("/system") != -1) {
1186 ui->Print("Mounted /system.\n");
1187 }
Elliott Hughesec283402015-04-10 10:01:53 -07001188 }
Tao Baoabb8f772015-07-30 14:43:27 -07001189
Nick Kralevicha9ad0322014-10-22 18:38:48 -07001190 break;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001191 }
1192 }
1193}
1194
1195static void
Oscar Montemayor05231562009-11-30 08:40:57 -08001196print_property(const char *key, const char *name, void *cookie) {
Doug Zongker56c51052010-07-01 09:18:44 -07001197 printf("%s=%s\n", key, name);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001198}
1199
Doug Zongker02ec6b82012-08-22 17:26:40 -07001200static void
1201load_locale_from_cache() {
1202 FILE* fp = fopen_path(LOCALE_FILE, "r");
1203 char buffer[80];
1204 if (fp != NULL) {
1205 fgets(buffer, sizeof(buffer), fp);
1206 int j = 0;
Doug Zongker5fa8c232012-09-18 12:37:02 -07001207 unsigned int i;
Doug Zongker02ec6b82012-08-22 17:26:40 -07001208 for (i = 0; i < sizeof(buffer) && buffer[i]; ++i) {
1209 if (!isspace(buffer[i])) {
1210 buffer[j++] = buffer[i];
1211 }
1212 }
1213 buffer[j] = 0;
1214 locale = strdup(buffer);
Devin Kim6016d082012-10-08 09:47:37 -07001215 check_and_fclose(fp, LOCALE_FILE);
Doug Zongker02ec6b82012-08-22 17:26:40 -07001216 }
1217}
1218
Doug Zongker7c3ae452013-05-14 11:03:02 -07001219static RecoveryUI* gCurrentUI = NULL;
1220
1221void
1222ui_print(const char* format, ...) {
1223 char buffer[256];
1224
1225 va_list ap;
1226 va_start(ap, format);
1227 vsnprintf(buffer, sizeof(buffer), format, ap);
1228 va_end(ap);
1229
1230 if (gCurrentUI != NULL) {
1231 gCurrentUI->Print("%s", buffer);
1232 } else {
1233 fputs(buffer, stdout);
1234 }
1235}
1236
Yabin Cui99281df2016-02-17 12:21:52 -08001237static bool is_battery_ok() {
1238 struct healthd_config healthd_config = {
1239 .batteryStatusPath = android::String8(android::String8::kEmptyString),
1240 .batteryHealthPath = android::String8(android::String8::kEmptyString),
1241 .batteryPresentPath = android::String8(android::String8::kEmptyString),
1242 .batteryCapacityPath = android::String8(android::String8::kEmptyString),
1243 .batteryVoltagePath = android::String8(android::String8::kEmptyString),
1244 .batteryTemperaturePath = android::String8(android::String8::kEmptyString),
1245 .batteryTechnologyPath = android::String8(android::String8::kEmptyString),
1246 .batteryCurrentNowPath = android::String8(android::String8::kEmptyString),
1247 .batteryCurrentAvgPath = android::String8(android::String8::kEmptyString),
1248 .batteryChargeCounterPath = android::String8(android::String8::kEmptyString),
1249 .batteryFullChargePath = android::String8(android::String8::kEmptyString),
1250 .batteryCycleCountPath = android::String8(android::String8::kEmptyString),
1251 .energyCounter = NULL,
1252 .boot_min_cap = 0,
1253 .screen_on = NULL
1254 };
1255 healthd_board_init(&healthd_config);
1256
1257 android::BatteryMonitor monitor;
1258 monitor.init(&healthd_config);
1259
1260 int wait_second = 0;
1261 while (true) {
1262 int charge_status = monitor.getChargeStatus();
1263 // Treat unknown status as charged.
1264 bool charged = (charge_status != android::BATTERY_STATUS_DISCHARGING &&
1265 charge_status != android::BATTERY_STATUS_NOT_CHARGING);
1266 android::BatteryProperty capacity;
1267 android::status_t status = monitor.getProperty(android::BATTERY_PROP_CAPACITY, &capacity);
1268 ui_print("charge_status %d, charged %d, status %d, capacity %lld\n", charge_status,
1269 charged, status, capacity.valueInt64);
1270 // At startup, the battery drivers in devices like N5X/N6P take some time to load
1271 // the battery profile. Before the load finishes, it reports value 50 as a fake
1272 // capacity. BATTERY_READ_TIMEOUT_IN_SEC is set that the battery drivers are expected
1273 // to finish loading the battery profile earlier than 10 seconds after kernel startup.
1274 if (status == 0 && capacity.valueInt64 == 50) {
1275 if (wait_second < BATTERY_READ_TIMEOUT_IN_SEC) {
1276 sleep(1);
1277 wait_second++;
1278 continue;
1279 }
1280 }
1281 // If we can't read battery percentage, it may be a device without battery. In this
1282 // situation, use 100 as a fake battery percentage.
1283 if (status != 0) {
1284 capacity.valueInt64 = 100;
1285 }
1286 return (charged && capacity.valueInt64 >= BATTERY_WITH_CHARGER_OK_PERCENTAGE) ||
1287 (!charged && capacity.valueInt64 >= BATTERY_OK_PERCENTAGE);
1288 }
1289}
1290
Tianjie Xu3c62b672016-02-05 18:25:58 -08001291static void set_retry_bootloader_message(int retry_count, int argc, char** argv) {
1292 struct bootloader_message boot {};
1293 strlcpy(boot.command, "boot-recovery", sizeof(boot.command));
1294 strlcpy(boot.recovery, "recovery\n", sizeof(boot.recovery));
1295
1296 for (int i = 1; i < argc; ++i) {
1297 if (strstr(argv[i], "retry_count") == nullptr) {
1298 strlcat(boot.recovery, argv[i], sizeof(boot.recovery));
1299 strlcat(boot.recovery, "\n", sizeof(boot.recovery));
1300 }
1301 }
1302
1303 // Initialize counter to 1 if it's not in BCB, otherwise increment it by 1.
1304 if (retry_count == 0) {
1305 strlcat(boot.recovery, "--retry_count=1\n", sizeof(boot.recovery));
1306 } else {
1307 char buffer[20];
1308 snprintf(buffer, sizeof(buffer), "--retry_count=%d\n", retry_count+1);
1309 strlcat(boot.recovery, buffer, sizeof(boot.recovery));
1310 }
1311 set_bootloader_message(&boot);
1312}
1313
Mark Salyzyna4f701a2016-03-09 14:58:16 -08001314static ssize_t logbasename(
1315 log_id_t /* logId */,
1316 char /* prio */,
1317 const char *filename,
1318 const char * /* buf */, size_t len,
1319 void *arg) {
1320 if (strstr(LAST_KMSG_FILE, filename) ||
1321 strstr(LAST_LOG_FILE, filename)) {
1322 bool *doRotate = reinterpret_cast<bool *>(arg);
1323 *doRotate = true;
1324 }
1325 return len;
1326}
1327
1328static ssize_t logrotate(
1329 log_id_t logId,
1330 char prio,
1331 const char *filename,
1332 const char *buf, size_t len,
1333 void *arg) {
1334 bool *doRotate = reinterpret_cast<bool *>(arg);
1335 if (!*doRotate) {
1336 return __android_log_pmsg_file_write(logId, prio, filename, buf, len);
1337 }
1338
1339 std::string name(filename);
Chih-Hung Hsieh23abfd32016-07-27 10:19:47 -07001340 size_t dot = name.find_last_of('.');
Mark Salyzyna4f701a2016-03-09 14:58:16 -08001341 std::string sub = name.substr(0, dot);
1342
1343 if (!strstr(LAST_KMSG_FILE, sub.c_str()) &&
1344 !strstr(LAST_LOG_FILE, sub.c_str())) {
1345 return __android_log_pmsg_file_write(logId, prio, filename, buf, len);
1346 }
1347
1348 // filename rotation
1349 if (dot == std::string::npos) {
1350 name += ".1";
1351 } else {
1352 std::string number = name.substr(dot + 1);
1353 if (!isdigit(number.data()[0])) {
1354 name += ".1";
1355 } else {
Chih-Hung Hsieh54a27472016-04-18 11:30:55 -07001356 auto i = std::stoull(number);
Mark Salyzyna4f701a2016-03-09 14:58:16 -08001357 name = sub + "." + std::to_string(i + 1);
1358 }
1359 }
1360
1361 return __android_log_pmsg_file_write(logId, prio, name.c_str(), buf, len);
1362}
1363
Yabin Cui99281df2016-02-17 12:21:52 -08001364int main(int argc, char **argv) {
Mark Salyzyna4f701a2016-03-09 14:58:16 -08001365 // Take last pmsg contents and rewrite it to the current pmsg session.
1366 static const char filter[] = "recovery/";
1367 // Do we need to rotate?
1368 bool doRotate = false;
1369 __android_log_pmsg_file_read(
1370 LOG_ID_SYSTEM, ANDROID_LOG_INFO, filter,
1371 logbasename, &doRotate);
1372 // Take action to refresh pmsg contents
1373 __android_log_pmsg_file_read(
1374 LOG_ID_SYSTEM, ANDROID_LOG_INFO, filter,
1375 logrotate, &doRotate);
1376
Doug Zongker9270a202012-01-09 15:16:13 -08001377 // If this binary is started with the single argument "--adbd",
1378 // instead of being the normal recovery binary, it turns into kind
1379 // of a stripped-down version of adbd that only supports the
1380 // 'sideload' command. Note this must be a real argument, not
1381 // anything in the command file or bootloader control block; the
1382 // only way recovery should be run with this argument is when it
1383 // starts a copy of itself from the apply_from_adb() function.
1384 if (argc == 2 && strcmp(argv[1], "--adbd") == 0) {
Elliott Hughes9f4fdb32015-11-20 13:03:24 -08001385 adb_server_main(0, DEFAULT_ADB_PORT, -1);
Doug Zongker9270a202012-01-09 15:16:13 -08001386 return 0;
1387 }
1388
Tao Bao04ca4262015-09-10 15:32:24 -07001389 time_t start = time(NULL);
1390
1391 // redirect_stdio should be called only in non-sideload mode. Otherwise
1392 // we may have two logger instances with different timestamps.
1393 redirect_stdio(TEMPORARY_LOG_FILE);
1394
Doug Zongker19a8e242014-01-21 09:25:41 -08001395 printf("Starting recovery (pid %d) on %s", getpid(), ctime(&start));
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001396
Doug Zongkerd4208f92010-09-20 12:16:13 -07001397 load_volume_table();
Tao Bao26112e52016-02-25 12:29:40 -08001398 has_cache = volume_for_path(CACHE_ROOT) != nullptr;
1399
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001400 get_args(&argc, &argv);
1401
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001402 const char *update_package = NULL;
Tao Baoe39a9bc2015-03-31 12:19:05 -07001403 bool should_wipe_data = false;
Tao Baoc679f932015-03-30 09:43:49 -07001404 bool should_wipe_cache = false;
Tao Bao862a4c12016-06-02 11:16:50 -07001405 bool should_brick = false;
Tao Bao145d8612015-03-25 15:51:15 -07001406 bool show_text = false;
Tao Baoc679f932015-03-30 09:43:49 -07001407 bool sideload = false;
1408 bool sideload_auto_reboot = false;
Doug Zongkere5d5ac72012-04-12 11:01:22 -07001409 bool just_exit = false;
Doug Zongkerb1d12632014-03-18 10:32:12 -07001410 bool shutdown_after = false;
Tianjie Xu3c62b672016-02-05 18:25:58 -08001411 int retry_count = 0;
Tianjie Xu35926c42016-04-28 18:06:26 -07001412 bool security_update = false;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001413
1414 int arg;
Tao Bao862a4c12016-06-02 11:16:50 -07001415 int option_index;
1416 while ((arg = getopt_long(argc, argv, "", OPTIONS, &option_index)) != -1) {
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001417 switch (arg) {
Tianjie Xu3c62b672016-02-05 18:25:58 -08001418 case 'n': android::base::ParseInt(optarg, &retry_count, 0); break;
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001419 case 'u': update_package = optarg; break;
Tao Baoe39a9bc2015-03-31 12:19:05 -07001420 case 'w': should_wipe_data = true; break;
Tao Baoc679f932015-03-30 09:43:49 -07001421 case 'c': should_wipe_cache = true; break;
Tao Bao145d8612015-03-25 15:51:15 -07001422 case 't': show_text = true; break;
Tao Baoc679f932015-03-30 09:43:49 -07001423 case 's': sideload = true; break;
1424 case 'a': sideload = true; sideload_auto_reboot = true; break;
Doug Zongkere5d5ac72012-04-12 11:01:22 -07001425 case 'x': just_exit = true; break;
Doug Zongker02ec6b82012-08-22 17:26:40 -07001426 case 'l': locale = optarg; break;
Doug Zongkerc87bab12013-11-25 13:53:25 -08001427 case 'g': {
1428 if (stage == NULL || *stage == '\0') {
1429 char buffer[20] = "1/";
1430 strncat(buffer, optarg, sizeof(buffer)-3);
1431 stage = strdup(buffer);
1432 }
1433 break;
1434 }
Doug Zongkerb1d12632014-03-18 10:32:12 -07001435 case 'p': shutdown_after = true; break;
Jeff Sharkeya6e13ae2014-09-24 11:46:17 -07001436 case 'r': reason = optarg; break;
Tianjie Xu35926c42016-04-28 18:06:26 -07001437 case 'e': security_update = true; break;
Tao Bao862a4c12016-06-02 11:16:50 -07001438 case 0: {
1439 if (strcmp(OPTIONS[option_index].name, "brick") == 0) {
1440 should_brick = true;
1441 break;
1442 }
1443 break;
1444 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001445 case '?':
1446 LOGE("Invalid command argument\n");
1447 continue;
1448 }
1449 }
1450
Tao Bao26112e52016-02-25 12:29:40 -08001451 if (locale == nullptr && has_cache) {
Doug Zongker02ec6b82012-08-22 17:26:40 -07001452 load_locale_from_cache();
1453 }
1454 printf("locale is [%s]\n", locale);
Doug Zongker0d32f252014-02-13 15:07:56 -08001455 printf("stage is [%s]\n", stage);
Jeff Sharkeya6e13ae2014-09-24 11:46:17 -07001456 printf("reason is [%s]\n", reason);
Doug Zongker02ec6b82012-08-22 17:26:40 -07001457
1458 Device* device = make_device();
1459 ui = device->GetUI();
Doug Zongker7c3ae452013-05-14 11:03:02 -07001460 gCurrentUI = ui;
Doug Zongker02ec6b82012-08-22 17:26:40 -07001461
Doug Zongker5fa8c232012-09-18 12:37:02 -07001462 ui->SetLocale(locale);
Doug Zongker02ec6b82012-08-22 17:26:40 -07001463 ui->Init();
Tianjie Xu35926c42016-04-28 18:06:26 -07001464 // Set background string to "installing security update" for security update,
1465 // otherwise set it to "installing system update".
1466 ui->SetSystemUpdateText(security_update);
Doug Zongkerc87bab12013-11-25 13:53:25 -08001467
1468 int st_cur, st_max;
1469 if (stage != NULL && sscanf(stage, "%d/%d", &st_cur, &st_max) == 2) {
1470 ui->SetStage(st_cur, st_max);
1471 }
1472
Doug Zongker02ec6b82012-08-22 17:26:40 -07001473 ui->SetBackground(RecoveryUI::NONE);
1474 if (show_text) ui->ShowText(true);
1475
Stephen Smalley779701d2012-02-09 14:13:23 -05001476 struct selinux_opt seopts[] = {
1477 { SELABEL_OPT_PATH, "/file_contexts" }
1478 };
1479
1480 sehandle = selabel_open(SELABEL_CTX_FILE, seopts, 1);
1481
1482 if (!sehandle) {
Doug Zongkerfafc85b2013-07-09 12:29:45 -07001483 ui->Print("Warning: No file_contexts\n");
Stephen Smalley779701d2012-02-09 14:13:23 -05001484 }
Stephen Smalley779701d2012-02-09 14:13:23 -05001485
Doug Zongkerdaefc1d2011-10-31 09:34:15 -07001486 device->StartRecovery();
Doug Zongkerefa1bab2010-02-01 15:59:12 -08001487
Doug Zongker56c51052010-07-01 09:18:44 -07001488 printf("Command:");
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001489 for (arg = 0; arg < argc; arg++) {
Doug Zongker56c51052010-07-01 09:18:44 -07001490 printf(" \"%s\"", argv[arg]);
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001491 }
Doug Zongker9b125b02010-09-22 12:01:37 -07001492 printf("\n");
1493
1494 if (update_package) {
1495 // For backwards compatibility on the cache partition only, if
1496 // we're given an old 'root' path "CACHE:foo", change it to
1497 // "/cache/foo".
1498 if (strncmp(update_package, "CACHE:", 6) == 0) {
1499 int len = strlen(update_package) + 10;
Doug Zongker28ce47c2011-10-28 10:33:05 -07001500 char* modified_path = (char*)malloc(len);
Jeremy Compostella1b7d9b72015-07-29 17:17:03 +02001501 if (modified_path) {
1502 strlcpy(modified_path, "/cache/", len);
1503 strlcat(modified_path, update_package+6, len);
1504 printf("(replacing path \"%s\" with \"%s\")\n",
1505 update_package, modified_path);
1506 update_package = modified_path;
1507 }
1508 else
1509 printf("modified_path allocation failed\n");
Doug Zongker9b125b02010-09-22 12:01:37 -07001510 }
1511 }
1512 printf("\n");
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001513
1514 property_list(print_property, NULL);
Doug Zongker56c51052010-07-01 09:18:44 -07001515 printf("\n");
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001516
Elliott Hughesbb78d622015-04-09 20:51:08 -07001517 ui->Print("Supported API: %d\n", RECOVERY_API_VERSION);
1518
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001519 int status = INSTALL_SUCCESS;
1520
Doug Zongker540d57f2011-01-18 13:36:58 -08001521 if (update_package != NULL) {
Tao Bao56870012016-04-29 15:37:05 -07001522 // It's not entirely true that we will modify the flash. But we want
1523 // to log the update attempt since update_package is non-NULL.
1524 modified_flash = true;
1525
Yabin Cui99281df2016-02-17 12:21:52 -08001526 if (!is_battery_ok()) {
1527 ui->Print("battery capacity is not enough for installing package, needed is %d%%\n",
1528 BATTERY_OK_PERCENTAGE);
Tianjie Xu16255832016-04-30 11:49:59 -07001529 // Log the error code to last_install when installation skips due to
1530 // low battery.
1531 FILE* install_log = fopen_path(LAST_INSTALL_FILE, "w");
1532 if (install_log != nullptr) {
1533 fprintf(install_log, "%s\n", update_package);
1534 fprintf(install_log, "0\n");
1535 fprintf(install_log, "error: %d\n", kLowBattery);
1536 fclose(install_log);
1537 } else {
1538 LOGE("failed to open last_install: %s\n", strerror(errno));
1539 }
Yabin Cui99281df2016-02-17 12:21:52 -08001540 status = INSTALL_SKIPPED;
1541 } else {
1542 status = install_package(update_package, &should_wipe_cache,
Tianjie Xu16255832016-04-30 11:49:59 -07001543 TEMPORARY_INSTALL_FILE, true, retry_count);
Yabin Cui99281df2016-02-17 12:21:52 -08001544 if (status == INSTALL_SUCCESS && should_wipe_cache) {
1545 wipe_cache(false, device);
1546 }
1547 if (status != INSTALL_SUCCESS) {
1548 ui->Print("Installation aborted.\n");
Tianjie Xu3c62b672016-02-05 18:25:58 -08001549 // When I/O error happens, reboot and retry installation EIO_RETRY_COUNT
1550 // times before we abandon this OTA update.
1551 if (status == INSTALL_RETRY && retry_count < EIO_RETRY_COUNT) {
1552 copy_logs();
1553 set_retry_bootloader_message(retry_count, argc, argv);
1554 // Print retry count on screen.
1555 ui->Print("Retry attempt %d\n", retry_count);
Doug Zongker7c3ae452013-05-14 11:03:02 -07001556
Tianjie Xu3c62b672016-02-05 18:25:58 -08001557 // Reboot and retry the update
1558 int ret = property_set(ANDROID_RB_PROPERTY, "reboot,recovery");
1559 if (ret < 0) {
1560 ui->Print("Reboot failed\n");
1561 } else {
1562 while (true) {
1563 pause();
1564 }
1565 }
1566 }
Yabin Cui99281df2016-02-17 12:21:52 -08001567 // If this is an eng or userdebug build, then automatically
1568 // turn the text display on if the script fails so the error
1569 // message is visible.
1570 if (is_ro_debuggable()) {
1571 ui->ShowText(true);
1572 }
Doug Zongker7c3ae452013-05-14 11:03:02 -07001573 }
1574 }
Tao Baoe39a9bc2015-03-31 12:19:05 -07001575 } else if (should_wipe_data) {
1576 if (!wipe_data(false, device)) {
1577 status = INSTALL_ERROR;
1578 }
Tao Baoc679f932015-03-30 09:43:49 -07001579 } else if (should_wipe_cache) {
Tao Baoe39a9bc2015-03-31 12:19:05 -07001580 if (!wipe_cache(false, device)) {
1581 status = INSTALL_ERROR;
1582 }
Tao Bao862a4c12016-06-02 11:16:50 -07001583 } else if (should_brick) {
1584 if (!brick_device()) {
1585 status = INSTALL_ERROR;
1586 }
Tao Baoc679f932015-03-30 09:43:49 -07001587 } else if (sideload) {
1588 // 'adb reboot sideload' acts the same as user presses key combinations
1589 // to enter the sideload mode. When 'sideload-auto-reboot' is used, text
1590 // display will NOT be turned on by default. And it will reboot after
1591 // sideload finishes even if there are errors. Unless one turns on the
1592 // text display during the installation. This is to enable automated
1593 // testing.
1594 if (!sideload_auto_reboot) {
1595 ui->ShowText(true);
1596 }
1597 status = apply_from_adb(ui, &should_wipe_cache, TEMPORARY_INSTALL_FILE);
1598 if (status == INSTALL_SUCCESS && should_wipe_cache) {
Tao Baoe39a9bc2015-03-31 12:19:05 -07001599 if (!wipe_cache(false, device)) {
1600 status = INSTALL_ERROR;
1601 }
Tao Baoc679f932015-03-30 09:43:49 -07001602 }
1603 ui->Print("\nInstall from ADB complete (status: %d).\n", status);
1604 if (sideload_auto_reboot) {
1605 ui->Print("Rebooting automatically.\n");
1606 }
Doug Zongkere5d5ac72012-04-12 11:01:22 -07001607 } else if (!just_exit) {
Doug Zongker02ec6b82012-08-22 17:26:40 -07001608 status = INSTALL_NONE; // No command specified
1609 ui->SetBackground(RecoveryUI::NO_COMMAND);
Tao Bao785d22c2015-05-04 09:34:29 -07001610
1611 // http://b/17489952
1612 // If this is an eng or userdebug build, automatically turn on the
1613 // text display if no command is specified.
1614 if (is_ro_debuggable()) {
1615 ui->ShowText(true);
1616 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001617 }
1618
Tao Baoc679f932015-03-30 09:43:49 -07001619 if (!sideload_auto_reboot && (status == INSTALL_ERROR || status == INSTALL_CORRUPT)) {
Doug Zongkerf24fd7e2013-07-02 11:43:25 -07001620 copy_logs();
Doug Zongker02ec6b82012-08-22 17:26:40 -07001621 ui->SetBackground(RecoveryUI::ERROR);
1622 }
Tao Baoc679f932015-03-30 09:43:49 -07001623
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001624 Device::BuiltinAction after = shutdown_after ? Device::SHUTDOWN : Device::REBOOT;
Yabin Cui99281df2016-02-17 12:21:52 -08001625 if ((status != INSTALL_SUCCESS && status != INSTALL_SKIPPED && !sideload_auto_reboot) ||
1626 ui->IsTextVisible()) {
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001627 Device::BuiltinAction temp = prompt_and_wait(device, status);
Tao Baoc679f932015-03-30 09:43:49 -07001628 if (temp != Device::NO_ACTION) {
1629 after = temp;
1630 }
Doug Zongker8674a722010-09-15 11:08:23 -07001631 }
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001632
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001633 // Save logs and clean up before rebooting or shutting down.
Tianjie Xuc14d95d2016-03-24 11:50:34 -07001634 finish_recovery();
Doug Zongker8d9d3d52014-04-01 13:20:23 -07001635
1636 switch (after) {
1637 case Device::SHUTDOWN:
1638 ui->Print("Shutting down...\n");
1639 property_set(ANDROID_RB_PROPERTY, "shutdown,");
1640 break;
1641
1642 case Device::REBOOT_BOOTLOADER:
1643 ui->Print("Rebooting to bootloader...\n");
1644 property_set(ANDROID_RB_PROPERTY, "reboot,bootloader");
1645 break;
1646
1647 default:
1648 ui->Print("Rebooting...\n");
1649 property_set(ANDROID_RB_PROPERTY, "reboot,");
1650 break;
Doug Zongkerb1d12632014-03-18 10:32:12 -07001651 }
Tao Bao75238632015-05-27 14:46:17 -07001652 while (true) {
1653 pause();
1654 }
1655 // Should be unreachable.
The Android Open Source Projectc24a8e62009-03-03 19:28:42 -08001656 return EXIT_SUCCESS;
1657}