blob: 06b8e3120d22dfb0cd7f3ded0cceb644ccd16959 [file] [log] [blame]
Doug Zongker512536a2010-02-17 16:11:44 -08001/*
2 * Copyright (C) 2008 The Android Open Source Project
3 *
4 * Licensed under the Apache License, Version 2.0 (the "License");
5 * you may not use this file except in compliance with the License.
6 * You may obtain a copy of the License at
7 *
8 * http://www.apache.org/licenses/LICENSE-2.0
9 *
10 * Unless required by applicable law or agreed to in writing, software
11 * distributed under the License is distributed on an "AS IS" BASIS,
12 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 * See the License for the specific language governing permissions and
14 * limitations under the License.
15 */
16
Tao Bao8fce75a2016-11-10 12:33:41 -080017#include "applypatch/applypatch.h"
18
Doug Zongker512536a2010-02-17 16:11:44 -080019#include <errno.h>
Tao Baoba9a42a2015-06-23 23:23:33 -070020#include <fcntl.h>
Doug Zongker512536a2010-02-17 16:11:44 -080021#include <libgen.h>
22#include <stdio.h>
23#include <stdlib.h>
24#include <string.h>
25#include <sys/stat.h>
26#include <sys/statfs.h>
27#include <sys/types.h>
Doug Zongker512536a2010-02-17 16:11:44 -080028#include <unistd.h>
29
Yabin Cuid483c202016-02-03 17:08:52 -080030#include <memory>
31#include <string>
Tao Bao8fce75a2016-11-10 12:33:41 -080032#include <utility>
33#include <vector>
Yabin Cuid483c202016-02-03 17:08:52 -080034
Tao Bao40e144d2017-03-15 01:10:58 -070035#include <android-base/logging.h>
Tao Bao8fce75a2016-11-10 12:33:41 -080036#include <android-base/parseint.h>
Elliott Hughes4b166f02015-12-04 15:30:20 -080037#include <android-base/strings.h>
Tao Bao8fce75a2016-11-10 12:33:41 -080038#include <openssl/sha.h>
Tao Baoaca8e892015-07-17 11:47:44 -070039
Doug Zongkerc4351c72010-02-22 14:46:32 -080040#include "edify/expr.h"
Jed Estep39c1b5e2015-12-15 16:04:53 -080041#include "ota_io.h"
Tao Baoe6aa3322015-08-05 15:20:27 -070042#include "print_sha1.h"
Doug Zongker512536a2010-02-17 16:11:44 -080043
Tao Bao8fce75a2016-11-10 12:33:41 -080044static int LoadPartitionContents(const std::string& filename, FileContents* file);
Tao Baof7eb7602017-03-27 15:12:48 -070045static size_t FileSink(const unsigned char* data, size_t len, void* token);
Tao Bao40e144d2017-03-15 01:10:58 -070046static int GenerateTarget(const FileContents& source_file, const std::unique_ptr<Value>& patch,
47 const std::string& target_filename,
48 const uint8_t target_sha1[SHA_DIGEST_LENGTH], const Value* bonus_data);
Doug Zongker512536a2010-02-17 16:11:44 -080049
Tao Bao8fce75a2016-11-10 12:33:41 -080050// Read a file into memory; store the file contents and associated metadata in *file.
Hristo Bojinovdb314d62010-08-02 10:29:49 -070051// Return 0 on success.
Doug Zongkera1bc1482014-02-13 15:18:19 -080052int LoadFileContents(const char* filename, FileContents* file) {
Tao Bao8fce75a2016-11-10 12:33:41 -080053 // A special 'filename' beginning with "EMMC:" means to load the contents of a partition.
54 if (strncmp(filename, "EMMC:", 5) == 0) {
55 return LoadPartitionContents(filename, file);
56 }
Doug Zongker512536a2010-02-17 16:11:44 -080057
Tao Bao8fce75a2016-11-10 12:33:41 -080058 if (stat(filename, &file->st) == -1) {
59 printf("failed to stat \"%s\": %s\n", filename, strerror(errno));
60 return -1;
61 }
Doug Zongkerc4351c72010-02-22 14:46:32 -080062
Tao Bao8fce75a2016-11-10 12:33:41 -080063 std::vector<unsigned char> data(file->st.st_size);
Tao Bao358c2ec2016-11-28 11:48:43 -080064 unique_file f(ota_fopen(filename, "rb"));
Tao Bao8fce75a2016-11-10 12:33:41 -080065 if (!f) {
66 printf("failed to open \"%s\": %s\n", filename, strerror(errno));
67 return -1;
68 }
Doug Zongkerc4351c72010-02-22 14:46:32 -080069
Tao Bao8fce75a2016-11-10 12:33:41 -080070 size_t bytes_read = ota_fread(data.data(), 1, data.size(), f.get());
71 if (bytes_read != data.size()) {
72 printf("short read of \"%s\" (%zu bytes of %zu)\n", filename, bytes_read, data.size());
73 return -1;
74 }
75 file->data = std::move(data);
76 SHA1(file->data.data(), file->data.size(), file->sha1);
77 return 0;
Doug Zongker512536a2010-02-17 16:11:44 -080078}
79
Elliott Hughes63a31922016-06-09 17:41:22 -070080// Load the contents of an EMMC partition into the provided
Doug Zongker512536a2010-02-17 16:11:44 -080081// FileContents. filename should be a string of the form
Elliott Hughes63a31922016-06-09 17:41:22 -070082// "EMMC:<partition_device>:...". The smallest size_n bytes for
Doug Zongkerf291d852010-07-07 13:55:25 -070083// which that prefix of the partition contents has the corresponding
84// sha1 hash will be loaded. It is acceptable for a size value to be
85// repeated with different sha1s. Will return 0 on success.
Doug Zongker512536a2010-02-17 16:11:44 -080086//
87// This complexity is needed because if an OTA installation is
88// interrupted, the partition might contain either the source or the
89// target data, which might be of different lengths. We need to know
Doug Zongkerf291d852010-07-07 13:55:25 -070090// the length in order to read from a partition (there is no
91// "end-of-file" marker), so the caller must specify the possible
92// lengths and the hash of the data, and we'll do the load expecting
93// to find one of those hashes.
Tao Bao8fce75a2016-11-10 12:33:41 -080094static int LoadPartitionContents(const std::string& filename, FileContents* file) {
95 std::vector<std::string> pieces = android::base::Split(filename, ":");
96 if (pieces.size() < 4 || pieces.size() % 2 != 0 || pieces[0] != "EMMC") {
97 printf("LoadPartitionContents called with bad filename \"%s\"\n", filename.c_str());
98 return -1;
99 }
100
101 size_t pair_count = (pieces.size() - 2) / 2; // # of (size, sha1) pairs in filename
102 std::vector<std::pair<size_t, std::string>> pairs;
103 for (size_t i = 0; i < pair_count; ++i) {
104 size_t size;
105 if (!android::base::ParseUint(pieces[i * 2 + 2], &size) || size == 0) {
106 printf("LoadPartitionContents called with bad size \"%s\"\n", pieces[i * 2 + 2].c_str());
107 return -1;
108 }
109 pairs.push_back({ size, pieces[i * 2 + 3] });
110 }
111
112 // Sort the pairs array so that they are in order of increasing size.
113 std::sort(pairs.begin(), pairs.end());
114
115 const char* partition = pieces[1].c_str();
Tao Bao358c2ec2016-11-28 11:48:43 -0800116 unique_file dev(ota_fopen(partition, "rb"));
Tao Bao8fce75a2016-11-10 12:33:41 -0800117 if (!dev) {
118 printf("failed to open emmc partition \"%s\": %s\n", partition, strerror(errno));
119 return -1;
120 }
121
122 SHA_CTX sha_ctx;
123 SHA1_Init(&sha_ctx);
124
125 // Allocate enough memory to hold the largest size.
126 std::vector<unsigned char> buffer(pairs[pair_count - 1].first);
127 unsigned char* buffer_ptr = buffer.data();
128 size_t buffer_size = 0; // # bytes read so far
129 bool found = false;
130
131 for (const auto& pair : pairs) {
132 size_t current_size = pair.first;
133 const std::string& current_sha1 = pair.second;
134
135 // Read enough additional bytes to get us up to the next size. (Again,
136 // we're trying the possibilities in order of increasing size).
137 size_t next = current_size - buffer_size;
138 if (next > 0) {
139 size_t read = ota_fread(buffer_ptr, 1, next, dev.get());
140 if (next != read) {
141 printf("short read (%zu bytes of %zu) for partition \"%s\"\n", read, next, partition);
Tao Baoaca8e892015-07-17 11:47:44 -0700142 return -1;
Tao Bao8fce75a2016-11-10 12:33:41 -0800143 }
144 SHA1_Update(&sha_ctx, buffer_ptr, read);
145 buffer_size += read;
146 buffer_ptr += read;
Tao Baoaca8e892015-07-17 11:47:44 -0700147 }
Doug Zongkerf291d852010-07-07 13:55:25 -0700148
Tao Bao8fce75a2016-11-10 12:33:41 -0800149 // Duplicate the SHA context and finalize the duplicate so we can
150 // check it against this pair's expected hash.
151 SHA_CTX temp_ctx;
152 memcpy(&temp_ctx, &sha_ctx, sizeof(SHA_CTX));
153 uint8_t sha_so_far[SHA_DIGEST_LENGTH];
154 SHA1_Final(sha_so_far, &temp_ctx);
Doug Zongker512536a2010-02-17 16:11:44 -0800155
Sen Jiangc48cb5e2016-02-04 16:23:21 +0800156 uint8_t parsed_sha[SHA_DIGEST_LENGTH];
Tao Bao8fce75a2016-11-10 12:33:41 -0800157 if (ParseSha1(current_sha1.c_str(), parsed_sha) != 0) {
158 printf("failed to parse SHA-1 %s in %s\n", current_sha1.c_str(), filename.c_str());
159 return -1;
Doug Zongkerc4351c72010-02-22 14:46:32 -0800160 }
161
Tao Bao8fce75a2016-11-10 12:33:41 -0800162 if (memcmp(sha_so_far, parsed_sha, SHA_DIGEST_LENGTH) == 0) {
163 // We have a match. Stop reading the partition; we'll return the data we've read so far.
164 printf("partition read matched size %zu SHA-1 %s\n", current_size, current_sha1.c_str());
165 found = true;
166 break;
Doug Zongker512536a2010-02-17 16:11:44 -0800167 }
Tao Bao8fce75a2016-11-10 12:33:41 -0800168 }
Doug Zongker512536a2010-02-17 16:11:44 -0800169
Tao Bao8fce75a2016-11-10 12:33:41 -0800170 if (!found) {
171 // Ran off the end of the list of (size, sha1) pairs without finding a match.
172 printf("contents of partition \"%s\" didn't match %s\n", partition, filename.c_str());
173 return -1;
174 }
Doug Zongker512536a2010-02-17 16:11:44 -0800175
Tao Bao8fce75a2016-11-10 12:33:41 -0800176 SHA1_Final(file->sha1, &sha_ctx);
Doug Zongker512536a2010-02-17 16:11:44 -0800177
Tao Bao8fce75a2016-11-10 12:33:41 -0800178 buffer.resize(buffer_size);
179 file->data = std::move(buffer);
180 // Fake some stat() info.
181 file->st.st_mode = 0644;
182 file->st.st_uid = 0;
183 file->st.st_gid = 0;
184
185 return 0;
Doug Zongker512536a2010-02-17 16:11:44 -0800186}
187
Doug Zongker512536a2010-02-17 16:11:44 -0800188// Save the contents of the given FileContents object under the given
189// filename. Return 0 on success.
Doug Zongker1c43c972012-02-28 11:07:09 -0800190int SaveFileContents(const char* filename, const FileContents* file) {
Tao Bao6e02ea92016-11-17 11:24:07 -0800191 unique_fd fd(ota_open(filename, O_WRONLY | O_CREAT | O_TRUNC | O_SYNC, S_IRUSR | S_IWUSR));
192 if (fd == -1) {
193 printf("failed to open \"%s\" for write: %s\n", filename, strerror(errno));
194 return -1;
195 }
Doug Zongker512536a2010-02-17 16:11:44 -0800196
Tao Baof7eb7602017-03-27 15:12:48 -0700197 size_t bytes_written = FileSink(file->data.data(), file->data.size(), &fd);
198 if (bytes_written != file->data.size()) {
Tao Bao6e02ea92016-11-17 11:24:07 -0800199 printf("short write of \"%s\" (%zd bytes of %zu): %s\n", filename, bytes_written,
200 file->data.size(), strerror(errno));
201 return -1;
202 }
203 if (ota_fsync(fd) != 0) {
204 printf("fsync of \"%s\" failed: %s\n", filename, strerror(errno));
205 return -1;
206 }
Tao Bao3dc14cb2016-11-22 11:37:13 -0800207 if (ota_close(fd) != 0) {
Tao Bao6e02ea92016-11-17 11:24:07 -0800208 printf("close of \"%s\" failed: %s\n", filename, strerror(errno));
209 return -1;
210 }
Doug Zongker512536a2010-02-17 16:11:44 -0800211
Tao Bao6e02ea92016-11-17 11:24:07 -0800212 if (chmod(filename, file->st.st_mode) != 0) {
213 printf("chmod of \"%s\" failed: %s\n", filename, strerror(errno));
214 return -1;
215 }
216 if (chown(filename, file->st.st_uid, file->st.st_gid) != 0) {
217 printf("chown of \"%s\" failed: %s\n", filename, strerror(errno));
218 return -1;
219 }
Doug Zongker512536a2010-02-17 16:11:44 -0800220
Tao Bao6e02ea92016-11-17 11:24:07 -0800221 return 0;
Doug Zongker512536a2010-02-17 16:11:44 -0800222}
223
Doug Zongkerf291d852010-07-07 13:55:25 -0700224// Write a memory buffer to 'target' partition, a string of the form
Elliott Hughes63a31922016-06-09 17:41:22 -0700225// "EMMC:<partition_device>[:...]". The target name
Tao Bao1ce7a2a2015-07-24 15:29:12 -0700226// might contain multiple colons, but WriteToPartition() only uses the first
227// two and ignores the rest. Return 0 on success.
Tao Bao6e02ea92016-11-17 11:24:07 -0800228int WriteToPartition(const unsigned char* data, size_t len, const std::string& target) {
229 std::vector<std::string> pieces = android::base::Split(target, ":");
Tao Bao8fce75a2016-11-10 12:33:41 -0800230 if (pieces.size() < 2 || pieces[0] != "EMMC") {
Tao Bao6e02ea92016-11-17 11:24:07 -0800231 printf("WriteToPartition called with bad target (%s)\n", target.c_str());
Tao Bao8fce75a2016-11-10 12:33:41 -0800232 return -1;
233 }
234
235 const char* partition = pieces[1].c_str();
Tao Bao6e02ea92016-11-17 11:24:07 -0800236 unique_fd fd(ota_open(partition, O_RDWR));
237 if (fd == -1) {
Tao Bao8fce75a2016-11-10 12:33:41 -0800238 printf("failed to open %s: %s\n", partition, strerror(errno));
239 return -1;
240 }
241
Tao Bao6e02ea92016-11-17 11:24:07 -0800242 size_t start = 0;
243 bool success = false;
Tao Bao8fce75a2016-11-10 12:33:41 -0800244 for (size_t attempt = 0; attempt < 2; ++attempt) {
245 if (TEMP_FAILURE_RETRY(lseek(fd, start, SEEK_SET)) == -1) {
246 printf("failed seek on %s: %s\n", partition, strerror(errno));
247 return -1;
248 }
249 while (start < len) {
250 size_t to_write = len - start;
251 if (to_write > 1 << 20) to_write = 1 << 20;
252
253 ssize_t written = TEMP_FAILURE_RETRY(ota_write(fd, data + start, to_write));
254 if (written == -1) {
255 printf("failed write writing to %s: %s\n", partition, strerror(errno));
Tao Baoaca8e892015-07-17 11:47:44 -0700256 return -1;
Tao Bao8fce75a2016-11-10 12:33:41 -0800257 }
258 start += written;
Tao Baoaca8e892015-07-17 11:47:44 -0700259 }
Doug Zongkerf291d852010-07-07 13:55:25 -0700260
Tao Bao8fce75a2016-11-10 12:33:41 -0800261 if (ota_fsync(fd) != 0) {
Tao Bao6e02ea92016-11-17 11:24:07 -0800262 printf("failed to sync to %s: %s\n", partition, strerror(errno));
Tao Bao8fce75a2016-11-10 12:33:41 -0800263 return -1;
Doug Zongkerf291d852010-07-07 13:55:25 -0700264 }
Tao Bao3dc14cb2016-11-22 11:37:13 -0800265 if (ota_close(fd) != 0) {
Tao Bao6e02ea92016-11-17 11:24:07 -0800266 printf("failed to close %s: %s\n", partition, strerror(errno));
Tao Bao8fce75a2016-11-10 12:33:41 -0800267 return -1;
Elliott Hughes63a31922016-06-09 17:41:22 -0700268 }
Tao Bao8fce75a2016-11-10 12:33:41 -0800269
Tao Bao6e02ea92016-11-17 11:24:07 -0800270 fd.reset(ota_open(partition, O_RDONLY));
271 if (fd == -1) {
272 printf("failed to reopen %s for verify: %s\n", partition, strerror(errno));
Tao Bao8fce75a2016-11-10 12:33:41 -0800273 return -1;
274 }
275
276 // Drop caches so our subsequent verification read won't just be reading the cache.
Elliott Hughes63a31922016-06-09 17:41:22 -0700277 sync();
Tao Bao6e02ea92016-11-17 11:24:07 -0800278 unique_fd dc(ota_open("/proc/sys/vm/drop_caches", O_WRONLY));
Tao Bao8fce75a2016-11-10 12:33:41 -0800279 if (TEMP_FAILURE_RETRY(ota_write(dc, "3\n", 2)) == -1) {
280 printf("write to /proc/sys/vm/drop_caches failed: %s\n", strerror(errno));
281 } else {
282 printf(" caches dropped\n");
283 }
Tao Bao3dc14cb2016-11-22 11:37:13 -0800284 ota_close(dc);
Tao Bao8fce75a2016-11-10 12:33:41 -0800285 sleep(1);
Elliott Hughes63a31922016-06-09 17:41:22 -0700286
Tao Bao6e02ea92016-11-17 11:24:07 -0800287 // Verify.
Tao Bao8fce75a2016-11-10 12:33:41 -0800288 if (TEMP_FAILURE_RETRY(lseek(fd, 0, SEEK_SET)) == -1) {
289 printf("failed to seek back to beginning of %s: %s\n", partition, strerror(errno));
290 return -1;
291 }
292
293 unsigned char buffer[4096];
294 start = len;
295 for (size_t p = 0; p < len; p += sizeof(buffer)) {
296 size_t to_read = len - p;
297 if (to_read > sizeof(buffer)) {
298 to_read = sizeof(buffer);
299 }
300
301 size_t so_far = 0;
302 while (so_far < to_read) {
303 ssize_t read_count = TEMP_FAILURE_RETRY(ota_read(fd, buffer + so_far, to_read - so_far));
304 if (read_count == -1) {
305 printf("verify read error %s at %zu: %s\n", partition, p, strerror(errno));
306 return -1;
307 } else if (read_count == 0) {
308 printf("verify read reached unexpected EOF, %s at %zu\n", partition, p);
309 return -1;
310 }
311 if (static_cast<size_t>(read_count) < to_read) {
Tao Bao6e02ea92016-11-17 11:24:07 -0800312 printf("short verify read %s at %zu: %zd %zu\n", partition, p, read_count, to_read);
Tao Bao8fce75a2016-11-10 12:33:41 -0800313 }
314 so_far += read_count;
315 }
316
317 if (memcmp(buffer, data + p, to_read) != 0) {
318 printf("verification failed starting at %zu\n", p);
319 start = p;
320 break;
321 }
322 }
323
324 if (start == len) {
325 printf("verification read succeeded (attempt %zu)\n", attempt + 1);
326 success = true;
327 break;
328 }
katao9a6f5202016-12-19 11:22:30 +0800329
330 if (ota_close(fd) != 0) {
331 printf("failed to close %s: %s\n", partition, strerror(errno));
332 return -1;
333 }
334
335 fd.reset(ota_open(partition, O_RDWR));
336 if (fd == -1) {
337 printf("failed to reopen %s for retry write && verify: %s\n", partition, strerror(errno));
338 return -1;
339 }
Tao Bao8fce75a2016-11-10 12:33:41 -0800340 }
341
342 if (!success) {
343 printf("failed to verify after all attempts\n");
344 return -1;
345 }
346
Tao Bao3dc14cb2016-11-22 11:37:13 -0800347 if (ota_close(fd) == -1) {
Tao Bao6e02ea92016-11-17 11:24:07 -0800348 printf("error closing %s: %s\n", partition, strerror(errno));
Tao Bao8fce75a2016-11-10 12:33:41 -0800349 return -1;
350 }
351 sync();
352
353 return 0;
Doug Zongker512536a2010-02-17 16:11:44 -0800354}
355
Doug Zongker512536a2010-02-17 16:11:44 -0800356// Take a string 'str' of 40 hex digits and parse it into the 20
357// byte array 'digest'. 'str' may contain only the digest or be of
358// the form "<digest>:<anything>". Return 0 on success, -1 on any
359// error.
360int ParseSha1(const char* str, uint8_t* digest) {
Doug Zongkerc4351c72010-02-22 14:46:32 -0800361 const char* ps = str;
362 uint8_t* pd = digest;
Sen Jiangc48cb5e2016-02-04 16:23:21 +0800363 for (int i = 0; i < SHA_DIGEST_LENGTH * 2; ++i, ++ps) {
Doug Zongkerc4351c72010-02-22 14:46:32 -0800364 int digit;
365 if (*ps >= '0' && *ps <= '9') {
366 digit = *ps - '0';
367 } else if (*ps >= 'a' && *ps <= 'f') {
368 digit = *ps - 'a' + 10;
369 } else if (*ps >= 'A' && *ps <= 'F') {
370 digit = *ps - 'A' + 10;
371 } else {
372 return -1;
373 }
374 if (i % 2 == 0) {
375 *pd = digit << 4;
376 } else {
377 *pd |= digit;
378 ++pd;
379 }
Doug Zongker512536a2010-02-17 16:11:44 -0800380 }
Doug Zongkerc4351c72010-02-22 14:46:32 -0800381 if (*ps != '\0') return -1;
382 return 0;
Doug Zongker512536a2010-02-17 16:11:44 -0800383}
384
Doug Zongkerc4351c72010-02-22 14:46:32 -0800385// Search an array of sha1 strings for one matching the given sha1.
386// Return the index of the match on success, or -1 if no match is
387// found.
Tao Baoc8e79342016-12-28 10:11:22 -0800388static int FindMatchingPatch(uint8_t* sha1, const std::vector<std::string>& patch_sha1_str) {
Tao Bao8fce75a2016-11-10 12:33:41 -0800389 for (size_t i = 0; i < patch_sha1_str.size(); ++i) {
390 uint8_t patch_sha1[SHA_DIGEST_LENGTH];
391 if (ParseSha1(patch_sha1_str[i].c_str(), patch_sha1) == 0 &&
392 memcmp(patch_sha1, sha1, SHA_DIGEST_LENGTH) == 0) {
393 return i;
Doug Zongker512536a2010-02-17 16:11:44 -0800394 }
Tao Bao8fce75a2016-11-10 12:33:41 -0800395 }
396 return -1;
Doug Zongker512536a2010-02-17 16:11:44 -0800397}
398
399// Returns 0 if the contents of the file (argv[2]) or the cached file
400// match any of the sha1's on the command line (argv[3:]). Returns
401// nonzero otherwise.
Tianjie Xuaced5d92016-10-12 10:55:04 -0700402int applypatch_check(const char* filename, const std::vector<std::string>& patch_sha1_str) {
Tao Bao8fce75a2016-11-10 12:33:41 -0800403 FileContents file;
Doug Zongker512536a2010-02-17 16:11:44 -0800404
Tao Bao8fce75a2016-11-10 12:33:41 -0800405 // It's okay to specify no sha1s; the check will pass if the
406 // LoadFileContents is successful. (Useful for reading
407 // partitions, where the filename encodes the sha1s; no need to
408 // check them twice.)
409 if (LoadFileContents(filename, &file) != 0 ||
410 (!patch_sha1_str.empty() && FindMatchingPatch(file.sha1, patch_sha1_str) < 0)) {
411 printf("file \"%s\" doesn't have any of expected sha1 sums; checking cache\n", filename);
Doug Zongker512536a2010-02-17 16:11:44 -0800412
Tao Bao8fce75a2016-11-10 12:33:41 -0800413 // If the source file is missing or corrupted, it might be because
414 // we were killed in the middle of patching it. A copy of it
415 // should have been made in CACHE_TEMP_SOURCE. If that file
416 // exists and matches the sha1 we're looking for, the check still
417 // passes.
418 if (LoadFileContents(CACHE_TEMP_SOURCE, &file) != 0) {
419 printf("failed to load cache file\n");
420 return 1;
Doug Zongkerc4351c72010-02-22 14:46:32 -0800421 }
Tao Bao8fce75a2016-11-10 12:33:41 -0800422
423 if (FindMatchingPatch(file.sha1, patch_sha1_str) < 0) {
424 printf("cache bits don't match any sha1 for \"%s\"\n", filename);
425 return 1;
426 }
427 }
428 return 0;
Doug Zongker512536a2010-02-17 16:11:44 -0800429}
430
431int ShowLicenses() {
Doug Zongkerc4351c72010-02-22 14:46:32 -0800432 ShowBSDiffLicense();
433 return 0;
Doug Zongker512536a2010-02-17 16:11:44 -0800434}
435
Tao Baof7eb7602017-03-27 15:12:48 -0700436static size_t FileSink(const unsigned char* data, size_t len, void* token) {
437 int fd = *static_cast<int*>(token);
438 size_t done = 0;
439 while (done < len) {
440 ssize_t wrote = TEMP_FAILURE_RETRY(ota_write(fd, data + done, len - done));
441 if (wrote == -1) {
442 printf("error writing %zd bytes: %s\n", (len - done), strerror(errno));
443 return done;
Doug Zongker512536a2010-02-17 16:11:44 -0800444 }
Tao Baof7eb7602017-03-27 15:12:48 -0700445 done += wrote;
446 }
447 return done;
Doug Zongker512536a2010-02-17 16:11:44 -0800448}
449
Tao Baof7eb7602017-03-27 15:12:48 -0700450size_t MemorySink(const unsigned char* data, size_t len, void* token) {
451 std::string* s = static_cast<std::string*>(token);
452 s->append(reinterpret_cast<const char*>(data), len);
453 return len;
Doug Zongker512536a2010-02-17 16:11:44 -0800454}
455
456// Return the amount of free space (in bytes) on the filesystem
457// containing filename. filename must exist. Return -1 on error.
458size_t FreeSpaceForFile(const char* filename) {
Doug Zongkerc4351c72010-02-22 14:46:32 -0800459 struct statfs sf;
460 if (statfs(filename, &sf) != 0) {
461 printf("failed to statfs %s: %s\n", filename, strerror(errno));
462 return -1;
463 }
caozhiyuan3b497762015-05-19 17:21:00 +0800464 return sf.f_bsize * sf.f_bavail;
Doug Zongker512536a2010-02-17 16:11:44 -0800465}
466
Doug Zongkerc4351c72010-02-22 14:46:32 -0800467int CacheSizeCheck(size_t bytes) {
468 if (MakeFreeSpaceOnCache(bytes) < 0) {
Chih-Hung Hsieh54a27472016-04-18 11:30:55 -0700469 printf("unable to make %zu bytes available on /cache\n", bytes);
Doug Zongkerc4351c72010-02-22 14:46:32 -0800470 return 1;
471 } else {
472 return 0;
473 }
474}
475
Tao Bao40e144d2017-03-15 01:10:58 -0700476// This function applies binary patches to EMMC target files in a way that is safe (the original
477// file is not touched until we have the desired replacement for it) and idempotent (it's okay to
478// run this program multiple times).
Doug Zongker512536a2010-02-17 16:11:44 -0800479//
Tao Bao40e144d2017-03-15 01:10:58 -0700480// - If the SHA-1 hash of <target_filename> is <target_sha1_string>, does nothing and exits
481// successfully.
Doug Zongker512536a2010-02-17 16:11:44 -0800482//
Tao Bao40e144d2017-03-15 01:10:58 -0700483// - Otherwise, if the SHA-1 hash of <source_filename> is one of the entries in <patch_sha1_str>,
484// the corresponding patch from <patch_data> (which must be a VAL_BLOB) is applied to produce a
485// new file (the type of patch is automatically detected from the blob data). If that new file
486// has SHA-1 hash <target_sha1_str>, moves it to replace <target_filename>, and exits
487// successfully. Note that if <source_filename> and <target_filename> are not the same,
488// <source_filename> is NOT deleted on success. <target_filename> may be the string "-" to mean
489// "the same as <source_filename>".
Doug Zongker512536a2010-02-17 16:11:44 -0800490//
Tao Bao40e144d2017-03-15 01:10:58 -0700491// - Otherwise, or if any error is encountered, exits with non-zero status.
Doug Zongker512536a2010-02-17 16:11:44 -0800492//
Tao Bao40e144d2017-03-15 01:10:58 -0700493// <source_filename> must refer to an EMMC partition to read the source data. See the comments for
494// the LoadPartitionContents() function above for the format of such a filename. <target_size> has
495// become obsolete since we have dropped the support for patching non-EMMC targets (EMMC targets
496// have the size embedded in the filename).
497int applypatch(const char* source_filename, const char* target_filename,
498 const char* target_sha1_str, size_t target_size __unused,
Tianjie Xuaced5d92016-10-12 10:55:04 -0700499 const std::vector<std::string>& patch_sha1_str,
Tao Bao40e144d2017-03-15 01:10:58 -0700500 const std::vector<std::unique_ptr<Value>>& patch_data, const Value* bonus_data) {
501 printf("patch %s: ", source_filename);
Doug Zongker512536a2010-02-17 16:11:44 -0800502
Tao Bao40e144d2017-03-15 01:10:58 -0700503 if (target_filename[0] == '-' && target_filename[1] == '\0') {
504 target_filename = source_filename;
505 }
506
507 if (strncmp(target_filename, "EMMC:", 5) != 0) {
508 printf("Supporting patching EMMC targets only.\n");
509 return 1;
510 }
511
512 uint8_t target_sha1[SHA_DIGEST_LENGTH];
513 if (ParseSha1(target_sha1_str, target_sha1) != 0) {
514 printf("failed to parse tgt-sha1 \"%s\"\n", target_sha1_str);
515 return 1;
516 }
517
518 // We try to load the target file into the source_file object.
519 FileContents source_file;
520 if (LoadFileContents(target_filename, &source_file) == 0) {
521 if (memcmp(source_file.sha1, target_sha1, SHA_DIGEST_LENGTH) == 0) {
522 // The early-exit case: the patch was already applied, this file has the desired hash, nothing
523 // for us to do.
524 printf("already %s\n", short_sha1(target_sha1).c_str());
525 return 0;
Doug Zongker512536a2010-02-17 16:11:44 -0800526 }
Tao Bao40e144d2017-03-15 01:10:58 -0700527 }
Doug Zongker512536a2010-02-17 16:11:44 -0800528
Tao Bao40e144d2017-03-15 01:10:58 -0700529 if (source_file.data.empty() ||
530 (target_filename != source_filename && strcmp(target_filename, source_filename) != 0)) {
531 // Need to load the source file: either we failed to load the target file, or we did but it's
532 // different from the expected.
533 source_file.data.clear();
534 LoadFileContents(source_filename, &source_file);
535 }
536
537 if (!source_file.data.empty()) {
538 int to_use = FindMatchingPatch(source_file.sha1, patch_sha1_str);
539 if (to_use != -1) {
540 return GenerateTarget(source_file, patch_data[to_use], target_filename, target_sha1,
541 bonus_data);
Doug Zongkerc4351c72010-02-22 14:46:32 -0800542 }
Tao Bao40e144d2017-03-15 01:10:58 -0700543 }
Doug Zongker512536a2010-02-17 16:11:44 -0800544
Tao Bao40e144d2017-03-15 01:10:58 -0700545 printf("source file is bad; trying copy\n");
Doug Zongker512536a2010-02-17 16:11:44 -0800546
Tao Bao40e144d2017-03-15 01:10:58 -0700547 FileContents copy_file;
548 if (LoadFileContents(CACHE_TEMP_SOURCE, &copy_file) < 0) {
549 printf("failed to read copy file\n");
550 return 1;
551 }
Doug Zongker512536a2010-02-17 16:11:44 -0800552
Tao Bao40e144d2017-03-15 01:10:58 -0700553 int to_use = FindMatchingPatch(copy_file.sha1, patch_sha1_str);
554 if (to_use == -1) {
555 printf("copy file doesn't match source SHA-1s either\n");
556 return 1;
557 }
Doug Zongkerc4351c72010-02-22 14:46:32 -0800558
Tao Bao40e144d2017-03-15 01:10:58 -0700559 return GenerateTarget(copy_file, patch_data[to_use], target_filename, target_sha1, bonus_data);
Doug Zongker1c43c972012-02-28 11:07:09 -0800560}
561
Tao Baoabba55b2015-07-17 18:11:12 -0700562/*
563 * This function flashes a given image to the target partition. It verifies
564 * the target cheksum first, and will return if target has the desired hash.
565 * It checks the checksum of the given source image before flashing, and
566 * verifies the target partition afterwards. The function is idempotent.
567 * Returns zero on success.
568 */
569int applypatch_flash(const char* source_filename, const char* target_filename,
570 const char* target_sha1_str, size_t target_size) {
Tao Bao6e02ea92016-11-17 11:24:07 -0800571 printf("flash %s: ", target_filename);
Tao Baoabba55b2015-07-17 18:11:12 -0700572
Tao Bao6e02ea92016-11-17 11:24:07 -0800573 uint8_t target_sha1[SHA_DIGEST_LENGTH];
574 if (ParseSha1(target_sha1_str, target_sha1) != 0) {
575 printf("failed to parse tgt-sha1 \"%s\"\n", target_sha1_str);
576 return 1;
577 }
Tao Baoabba55b2015-07-17 18:11:12 -0700578
Tao Bao6e02ea92016-11-17 11:24:07 -0800579 std::string target_str(target_filename);
580 std::vector<std::string> pieces = android::base::Split(target_str, ":");
581 if (pieces.size() != 2 || pieces[0] != "EMMC") {
582 printf("invalid target name \"%s\"", target_filename);
583 return 1;
584 }
Tao Baoabba55b2015-07-17 18:11:12 -0700585
Tao Bao6e02ea92016-11-17 11:24:07 -0800586 // Load the target into the source_file object to see if already applied.
587 pieces.push_back(std::to_string(target_size));
588 pieces.push_back(target_sha1_str);
589 std::string fullname = android::base::Join(pieces, ':');
590 FileContents source_file;
591 if (LoadPartitionContents(fullname, &source_file) == 0 &&
592 memcmp(source_file.sha1, target_sha1, SHA_DIGEST_LENGTH) == 0) {
593 // The early-exit case: the image was already applied, this partition
594 // has the desired hash, nothing for us to do.
595 printf("already %s\n", short_sha1(target_sha1).c_str());
Tao Baoabba55b2015-07-17 18:11:12 -0700596 return 0;
Tao Bao6e02ea92016-11-17 11:24:07 -0800597 }
598
599 if (LoadFileContents(source_filename, &source_file) == 0) {
600 if (memcmp(source_file.sha1, target_sha1, SHA_DIGEST_LENGTH) != 0) {
601 // The source doesn't have desired checksum.
602 printf("source \"%s\" doesn't have expected sha1 sum\n", source_filename);
603 printf("expected: %s, found: %s\n", short_sha1(target_sha1).c_str(),
604 short_sha1(source_file.sha1).c_str());
605 return 1;
606 }
607 }
608
609 if (WriteToPartition(source_file.data.data(), target_size, target_filename) != 0) {
610 printf("write of copied data to %s failed\n", target_filename);
611 return 1;
612 }
613 return 0;
Tao Baoabba55b2015-07-17 18:11:12 -0700614}
615
Tao Bao40e144d2017-03-15 01:10:58 -0700616static int GenerateTarget(const FileContents& source_file, const std::unique_ptr<Value>& patch,
617 const std::string& target_filename,
618 const uint8_t target_sha1[SHA_DIGEST_LENGTH], const Value* bonus_data) {
Tao Bao6e02ea92016-11-17 11:24:07 -0800619 if (patch->type != VAL_BLOB) {
620 printf("patch is not a blob\n");
621 return 1;
622 }
Yabin Cuid483c202016-02-03 17:08:52 -0800623
Tao Bao6e02ea92016-11-17 11:24:07 -0800624 const char* header = &patch->data[0];
625 size_t header_bytes_read = patch->data.size();
626 bool use_bsdiff = false;
627 if (header_bytes_read >= 8 && memcmp(header, "BSDIFF40", 8) == 0) {
628 use_bsdiff = true;
629 } else if (header_bytes_read >= 8 && memcmp(header, "IMGDIFF2", 8) == 0) {
630 use_bsdiff = false;
631 } else {
632 printf("Unknown patch file format\n");
633 return 1;
634 }
Doug Zongker512536a2010-02-17 16:11:44 -0800635
Tao Bao40e144d2017-03-15 01:10:58 -0700636 CHECK(android::base::StartsWith(target_filename, "EMMC:"));
Doug Zongkerc4351c72010-02-22 14:46:32 -0800637
Tao Bao40e144d2017-03-15 01:10:58 -0700638 // We still write the original source to cache, in case the partition write is interrupted.
639 if (MakeFreeSpaceOnCache(source_file.data.size()) < 0) {
640 printf("not enough free space on /cache\n");
641 return 1;
642 }
643 if (SaveFileContents(CACHE_TEMP_SOURCE, &source_file) < 0) {
644 printf("failed to back up source file\n");
645 return 1;
646 }
647
648 // We store the decoded output in memory.
649 SinkFn sink = MemorySink;
Tao Bao6e02ea92016-11-17 11:24:07 -0800650 std::string memory_sink_str; // Don't need to reserve space.
Tao Bao40e144d2017-03-15 01:10:58 -0700651 void* token = &memory_sink_str;
Doug Zongkerc4351c72010-02-22 14:46:32 -0800652
Tao Bao40e144d2017-03-15 01:10:58 -0700653 SHA_CTX ctx;
654 SHA1_Init(&ctx);
Tao Bao6e02ea92016-11-17 11:24:07 -0800655
Tao Bao40e144d2017-03-15 01:10:58 -0700656 int result;
657 if (use_bsdiff) {
658 result = ApplyBSDiffPatch(source_file.data.data(), source_file.data.size(), patch.get(), 0,
659 sink, token, &ctx);
660 } else {
661 result = ApplyImagePatch(source_file.data.data(), source_file.data.size(), patch.get(), sink,
662 token, &ctx, bonus_data);
663 }
Tao Bao6e02ea92016-11-17 11:24:07 -0800664
Tao Bao40e144d2017-03-15 01:10:58 -0700665 if (result != 0) {
666 printf("applying patch failed\n");
667 return 1;
668 }
Tao Bao6e02ea92016-11-17 11:24:07 -0800669
670 uint8_t current_target_sha1[SHA_DIGEST_LENGTH];
671 SHA1_Final(current_target_sha1, &ctx);
672 if (memcmp(current_target_sha1, target_sha1, SHA_DIGEST_LENGTH) != 0) {
673 printf("patch did not produce expected sha1\n");
674 return 1;
675 } else {
676 printf("now %s\n", short_sha1(target_sha1).c_str());
677 }
678
Tao Bao40e144d2017-03-15 01:10:58 -0700679 // Write back the temp file to the partition.
680 if (WriteToPartition(reinterpret_cast<const unsigned char*>(memory_sink_str.c_str()),
681 memory_sink_str.size(), target_filename) != 0) {
682 printf("write of patched data to %s failed\n", target_filename.c_str());
683 return 1;
Tao Bao6e02ea92016-11-17 11:24:07 -0800684 }
685
Tao Bao40e144d2017-03-15 01:10:58 -0700686 // Delete the backup copy of the source.
687 unlink(CACHE_TEMP_SOURCE);
Tao Bao6e02ea92016-11-17 11:24:07 -0800688
689 // Success!
690 return 0;
Doug Zongker512536a2010-02-17 16:11:44 -0800691}