Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 1 | /* |
| 2 | * Copyright (C) 2014 The Android Open Source Project |
| 3 | * |
| 4 | * Licensed under the Apache License, Version 2.0 (the "License"); |
| 5 | * you may not use this file except in compliance with the License. |
| 6 | * You may obtain a copy of the License at |
| 7 | * |
| 8 | * http://www.apache.org/licenses/LICENSE-2.0 |
| 9 | * |
| 10 | * Unless required by applicable law or agreed to in writing, software |
| 11 | * distributed under the License is distributed on an "AS IS" BASIS, |
| 12 | * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 13 | * See the License for the specific language governing permissions and |
| 14 | * limitations under the License. |
| 15 | */ |
| 16 | |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 17 | package com.android.server; |
| 18 | |
| 19 | import android.Manifest; |
Guang Zhu | 514c580 | 2014-09-12 15:14:00 -0700 | [diff] [blame] | 20 | import android.app.ActivityManager; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 21 | import android.content.Context; |
| 22 | import android.content.pm.PackageManager; |
| 23 | import android.os.Binder; |
| 24 | import android.os.IBinder; |
| 25 | import android.os.RemoteException; |
| 26 | import android.os.SystemProperties; |
Andres Morales | 6429f31 | 2014-08-04 16:35:15 -0700 | [diff] [blame] | 27 | import android.os.UserHandle; |
Xiaohui Chen | f066078 | 2015-09-02 14:25:19 -0700 | [diff] [blame] | 28 | import android.os.UserManager; |
Steven Ng | dc20ba6 | 2016-04-26 18:19:04 +0100 | [diff] [blame] | 29 | import android.provider.Settings; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 30 | import android.service.persistentdata.IPersistentDataBlockService; |
Andres Morales | 74e9b18 | 2016-02-22 12:33:33 -0800 | [diff] [blame] | 31 | import android.service.persistentdata.PersistentDataBlockManager; |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 32 | import android.util.Slog; |
Guang Zhu | 514c580 | 2014-09-12 15:14:00 -0700 | [diff] [blame] | 33 | |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 34 | import com.android.internal.R; |
Guang Zhu | 514c580 | 2014-09-12 15:14:00 -0700 | [diff] [blame] | 35 | |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 36 | import libcore.io.IoUtils; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 37 | |
| 38 | import java.io.DataInputStream; |
| 39 | import java.io.DataOutputStream; |
| 40 | import java.io.File; |
| 41 | import java.io.FileInputStream; |
| 42 | import java.io.FileNotFoundException; |
| 43 | import java.io.FileOutputStream; |
| 44 | import java.io.IOException; |
| 45 | import java.nio.ByteBuffer; |
| 46 | import java.nio.channels.FileChannel; |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 47 | import java.security.MessageDigest; |
| 48 | import java.security.NoSuchAlgorithmException; |
| 49 | import java.util.Arrays; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 50 | |
| 51 | /** |
| 52 | * Service for reading and writing blocks to a persistent partition. |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 53 | * This data will live across factory resets not initiated via the Settings UI. |
| 54 | * When a device is factory reset through Settings this data is wiped. |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 55 | * |
| 56 | * Allows writing one block at a time. Namely, each time |
| 57 | * {@link android.service.persistentdata.IPersistentDataBlockService}.write(byte[] data) |
| 58 | * is called, it will overwite the data that was previously written on the block. |
| 59 | * |
| 60 | * Clients can query the size of the currently written block via |
| 61 | * {@link android.service.persistentdata.IPersistentDataBlockService}.getTotalDataSize(). |
| 62 | * |
| 63 | * Clients can any number of bytes from the currently written block up to its total size by invoking |
| 64 | * {@link android.service.persistentdata.IPersistentDataBlockService}.read(byte[] data) |
| 65 | */ |
| 66 | public class PersistentDataBlockService extends SystemService { |
| 67 | private static final String TAG = PersistentDataBlockService.class.getSimpleName(); |
| 68 | |
| 69 | private static final String PERSISTENT_DATA_BLOCK_PROP = "ro.frp.pst"; |
| 70 | private static final int HEADER_SIZE = 8; |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 71 | // Magic number to mark block device as adhering to the format consumed by this service |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 72 | private static final int PARTITION_TYPE_MARKER = 0x19901873; |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 73 | // Limit to 100k as blocks larger than this might cause strain on Binder. |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 74 | private static final int MAX_DATA_BLOCK_SIZE = 1024 * 100; |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 75 | public static final int DIGEST_SIZE_BYTES = 32; |
Andres Morales | 5ca4cc5 | 2015-03-19 16:37:54 -0700 | [diff] [blame] | 76 | private static final String OEM_UNLOCK_PROP = "sys.oem_unlock_allowed"; |
Andres Morales | 74e9b18 | 2016-02-22 12:33:33 -0800 | [diff] [blame] | 77 | private static final String FLASH_LOCK_PROP = "ro.boot.flash.locked"; |
| 78 | private static final String FLASH_LOCK_LOCKED = "1"; |
| 79 | private static final String FLASH_LOCK_UNLOCKED = "0"; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 80 | |
| 81 | private final Context mContext; |
| 82 | private final String mDataBlockFile; |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 83 | private final Object mLock = new Object(); |
Andres Morales | 6429f31 | 2014-08-04 16:35:15 -0700 | [diff] [blame] | 84 | |
Andres Morales | a31c23d | 2014-10-30 15:31:31 -0700 | [diff] [blame] | 85 | private int mAllowedUid = -1; |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 86 | private long mBlockDeviceSize; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 87 | |
| 88 | public PersistentDataBlockService(Context context) { |
| 89 | super(context); |
| 90 | mContext = context; |
| 91 | mDataBlockFile = SystemProperties.get(PERSISTENT_DATA_BLOCK_PROP); |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 92 | mBlockDeviceSize = -1; // Load lazily |
Xiaohui Chen | f066078 | 2015-09-02 14:25:19 -0700 | [diff] [blame] | 93 | mAllowedUid = getAllowedUid(UserHandle.USER_SYSTEM); |
Andres Morales | 6429f31 | 2014-08-04 16:35:15 -0700 | [diff] [blame] | 94 | } |
| 95 | |
Andres Morales | a31c23d | 2014-10-30 15:31:31 -0700 | [diff] [blame] | 96 | private int getAllowedUid(int userHandle) { |
Andres Morales | 6429f31 | 2014-08-04 16:35:15 -0700 | [diff] [blame] | 97 | String allowedPackage = mContext.getResources() |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 98 | .getString(R.string.config_persistentDataPackageName); |
| 99 | PackageManager pm = mContext.getPackageManager(); |
| 100 | int allowedUid = -1; |
| 101 | try { |
Jeff Sharkey | c5967e9 | 2016-01-07 18:50:29 -0700 | [diff] [blame] | 102 | allowedUid = pm.getPackageUidAsUser(allowedPackage, |
| 103 | PackageManager.MATCH_SYSTEM_ONLY, userHandle); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 104 | } catch (PackageManager.NameNotFoundException e) { |
| 105 | // not expected |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 106 | Slog.e(TAG, "not able to find package " + allowedPackage, e); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 107 | } |
Andres Morales | a31c23d | 2014-10-30 15:31:31 -0700 | [diff] [blame] | 108 | return allowedUid; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 109 | } |
| 110 | |
| 111 | @Override |
| 112 | public void onStart() { |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 113 | enforceChecksumValidity(); |
Andres Morales | 1ce7d17 | 2015-01-07 14:24:57 -0800 | [diff] [blame] | 114 | formatIfOemUnlockEnabled(); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 115 | publishBinderService(Context.PERSISTENT_DATA_BLOCK_SERVICE, mService); |
| 116 | } |
| 117 | |
Andres Morales | 1ce7d17 | 2015-01-07 14:24:57 -0800 | [diff] [blame] | 118 | private void formatIfOemUnlockEnabled() { |
Andres Morales | 5ca4cc5 | 2015-03-19 16:37:54 -0700 | [diff] [blame] | 119 | boolean enabled = doGetOemUnlockEnabled(); |
| 120 | if (enabled) { |
Andres Morales | 1ce7d17 | 2015-01-07 14:24:57 -0800 | [diff] [blame] | 121 | synchronized (mLock) { |
Andres Morales | c8f952c | 2015-03-19 08:34:55 -0700 | [diff] [blame] | 122 | formatPartitionLocked(true); |
Andres Morales | 1ce7d17 | 2015-01-07 14:24:57 -0800 | [diff] [blame] | 123 | } |
| 124 | } |
Andres Morales | 5ca4cc5 | 2015-03-19 16:37:54 -0700 | [diff] [blame] | 125 | |
| 126 | SystemProperties.set(OEM_UNLOCK_PROP, enabled ? "1" : "0"); |
Andres Morales | 1ce7d17 | 2015-01-07 14:24:57 -0800 | [diff] [blame] | 127 | } |
| 128 | |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 129 | private void enforceOemUnlockPermission() { |
| 130 | mContext.enforceCallingOrSelfPermission( |
| 131 | Manifest.permission.OEM_UNLOCK_STATE, |
| 132 | "Can't access OEM unlock state"); |
| 133 | } |
| 134 | |
| 135 | private void enforceUid(int callingUid) { |
Andres Morales | a31c23d | 2014-10-30 15:31:31 -0700 | [diff] [blame] | 136 | if (callingUid != mAllowedUid) { |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 137 | throw new SecurityException("uid " + callingUid + " not allowed to access PST"); |
| 138 | } |
| 139 | } |
| 140 | |
Xiaohui Chen | f066078 | 2015-09-02 14:25:19 -0700 | [diff] [blame] | 141 | private void enforceIsAdmin() { |
| 142 | final int userId = UserHandle.getCallingUserId(); |
| 143 | final boolean isAdmin = UserManager.get(mContext).isUserAdmin(userId); |
| 144 | if (!isAdmin) { |
| 145 | throw new SecurityException( |
| 146 | "Only the Admin user is allowed to change OEM unlock state"); |
Andres Morales | a31c23d | 2014-10-30 15:31:31 -0700 | [diff] [blame] | 147 | } |
| 148 | } |
Mahaver Chopra | 830e32c | 2016-05-17 18:53:09 +0100 | [diff] [blame^] | 149 | |
| 150 | private void enforceFactoryResetAllowed() { |
| 151 | final boolean isOemUnlockRestricted = UserManager.get(mContext) |
| 152 | .hasUserRestriction(UserManager.DISALLOW_FACTORY_RESET); |
| 153 | if (isOemUnlockRestricted) { |
| 154 | throw new SecurityException("OEM unlock is disallowed by DISALLOW_FACTORY_RESET"); |
| 155 | } |
| 156 | } |
| 157 | |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 158 | private int getTotalDataSizeLocked(DataInputStream inputStream) throws IOException { |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 159 | // skip over checksum |
| 160 | inputStream.skipBytes(DIGEST_SIZE_BYTES); |
| 161 | |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 162 | int totalDataSize; |
| 163 | int blockId = inputStream.readInt(); |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 164 | if (blockId == PARTITION_TYPE_MARKER) { |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 165 | totalDataSize = inputStream.readInt(); |
| 166 | } else { |
| 167 | totalDataSize = 0; |
| 168 | } |
| 169 | return totalDataSize; |
| 170 | } |
| 171 | |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 172 | private long getBlockDeviceSize() { |
| 173 | synchronized (mLock) { |
| 174 | if (mBlockDeviceSize == -1) { |
| 175 | mBlockDeviceSize = nativeGetBlockDeviceSize(mDataBlockFile); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 176 | } |
| 177 | } |
| 178 | |
| 179 | return mBlockDeviceSize; |
| 180 | } |
| 181 | |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 182 | private boolean enforceChecksumValidity() { |
| 183 | byte[] storedDigest = new byte[DIGEST_SIZE_BYTES]; |
| 184 | |
| 185 | synchronized (mLock) { |
| 186 | byte[] digest = computeDigestLocked(storedDigest); |
| 187 | if (digest == null || !Arrays.equals(storedDigest, digest)) { |
| 188 | Slog.i(TAG, "Formatting FRP partition..."); |
Andres Morales | c8f952c | 2015-03-19 08:34:55 -0700 | [diff] [blame] | 189 | formatPartitionLocked(false); |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 190 | return false; |
| 191 | } |
| 192 | } |
| 193 | |
| 194 | return true; |
| 195 | } |
| 196 | |
| 197 | private boolean computeAndWriteDigestLocked() { |
| 198 | byte[] digest = computeDigestLocked(null); |
| 199 | if (digest != null) { |
| 200 | DataOutputStream outputStream; |
| 201 | try { |
| 202 | outputStream = new DataOutputStream( |
| 203 | new FileOutputStream(new File(mDataBlockFile))); |
| 204 | } catch (FileNotFoundException e) { |
| 205 | Slog.e(TAG, "partition not available?", e); |
| 206 | return false; |
| 207 | } |
| 208 | |
| 209 | try { |
| 210 | outputStream.write(digest, 0, DIGEST_SIZE_BYTES); |
| 211 | outputStream.flush(); |
| 212 | } catch (IOException e) { |
| 213 | Slog.e(TAG, "failed to write block checksum", e); |
| 214 | return false; |
| 215 | } finally { |
| 216 | IoUtils.closeQuietly(outputStream); |
| 217 | } |
| 218 | return true; |
| 219 | } else { |
| 220 | return false; |
| 221 | } |
| 222 | } |
| 223 | |
| 224 | private byte[] computeDigestLocked(byte[] storedDigest) { |
| 225 | DataInputStream inputStream; |
| 226 | try { |
| 227 | inputStream = new DataInputStream(new FileInputStream(new File(mDataBlockFile))); |
| 228 | } catch (FileNotFoundException e) { |
| 229 | Slog.e(TAG, "partition not available?", e); |
| 230 | return null; |
| 231 | } |
| 232 | |
| 233 | MessageDigest md; |
| 234 | try { |
| 235 | md = MessageDigest.getInstance("SHA-256"); |
| 236 | } catch (NoSuchAlgorithmException e) { |
| 237 | // won't ever happen -- every implementation is required to support SHA-256 |
| 238 | Slog.e(TAG, "SHA-256 not supported?", e); |
| 239 | IoUtils.closeQuietly(inputStream); |
| 240 | return null; |
| 241 | } |
| 242 | |
| 243 | try { |
| 244 | if (storedDigest != null && storedDigest.length == DIGEST_SIZE_BYTES) { |
| 245 | inputStream.read(storedDigest); |
| 246 | } else { |
| 247 | inputStream.skipBytes(DIGEST_SIZE_BYTES); |
| 248 | } |
| 249 | |
| 250 | int read; |
| 251 | byte[] data = new byte[1024]; |
| 252 | md.update(data, 0, DIGEST_SIZE_BYTES); // include 0 checksum in digest |
| 253 | while ((read = inputStream.read(data)) != -1) { |
| 254 | md.update(data, 0, read); |
| 255 | } |
| 256 | } catch (IOException e) { |
| 257 | Slog.e(TAG, "failed to read partition", e); |
| 258 | return null; |
| 259 | } finally { |
| 260 | IoUtils.closeQuietly(inputStream); |
| 261 | } |
| 262 | |
| 263 | return md.digest(); |
| 264 | } |
| 265 | |
Andres Morales | c8f952c | 2015-03-19 08:34:55 -0700 | [diff] [blame] | 266 | private void formatPartitionLocked(boolean setOemUnlockEnabled) { |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 267 | DataOutputStream outputStream; |
| 268 | try { |
| 269 | outputStream = new DataOutputStream(new FileOutputStream(new File(mDataBlockFile))); |
| 270 | } catch (FileNotFoundException e) { |
| 271 | Slog.e(TAG, "partition not available?", e); |
| 272 | return; |
| 273 | } |
| 274 | |
| 275 | byte[] data = new byte[DIGEST_SIZE_BYTES]; |
| 276 | try { |
| 277 | outputStream.write(data, 0, DIGEST_SIZE_BYTES); |
| 278 | outputStream.writeInt(PARTITION_TYPE_MARKER); |
| 279 | outputStream.writeInt(0); // data size |
| 280 | outputStream.flush(); |
| 281 | } catch (IOException e) { |
| 282 | Slog.e(TAG, "failed to format block", e); |
| 283 | return; |
| 284 | } finally { |
| 285 | IoUtils.closeQuietly(outputStream); |
| 286 | } |
| 287 | |
Andres Morales | c8f952c | 2015-03-19 08:34:55 -0700 | [diff] [blame] | 288 | doSetOemUnlockEnabledLocked(setOemUnlockEnabled); |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 289 | computeAndWriteDigestLocked(); |
| 290 | } |
| 291 | |
| 292 | private void doSetOemUnlockEnabledLocked(boolean enabled) { |
| 293 | FileOutputStream outputStream; |
| 294 | try { |
| 295 | outputStream = new FileOutputStream(new File(mDataBlockFile)); |
| 296 | } catch (FileNotFoundException e) { |
| 297 | Slog.e(TAG, "partition not available", e); |
| 298 | return; |
| 299 | } |
| 300 | |
| 301 | try { |
| 302 | FileChannel channel = outputStream.getChannel(); |
| 303 | |
| 304 | channel.position(getBlockDeviceSize() - 1); |
| 305 | |
| 306 | ByteBuffer data = ByteBuffer.allocate(1); |
| 307 | data.put(enabled ? (byte) 1 : (byte) 0); |
| 308 | data.flip(); |
| 309 | channel.write(data); |
| 310 | outputStream.flush(); |
| 311 | } catch (IOException e) { |
| 312 | Slog.e(TAG, "unable to access persistent partition", e); |
| 313 | return; |
| 314 | } finally { |
Andres Morales | 5ca4cc5 | 2015-03-19 16:37:54 -0700 | [diff] [blame] | 315 | SystemProperties.set(OEM_UNLOCK_PROP, enabled ? "1" : "0"); |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 316 | IoUtils.closeQuietly(outputStream); |
| 317 | } |
| 318 | } |
| 319 | |
Andres Morales | 1ce7d17 | 2015-01-07 14:24:57 -0800 | [diff] [blame] | 320 | private boolean doGetOemUnlockEnabled() { |
| 321 | DataInputStream inputStream; |
| 322 | try { |
| 323 | inputStream = new DataInputStream(new FileInputStream(new File(mDataBlockFile))); |
| 324 | } catch (FileNotFoundException e) { |
| 325 | Slog.e(TAG, "partition not available"); |
| 326 | return false; |
| 327 | } |
| 328 | |
| 329 | try { |
| 330 | synchronized (mLock) { |
| 331 | inputStream.skip(getBlockDeviceSize() - 1); |
| 332 | return inputStream.readByte() != 0; |
| 333 | } |
| 334 | } catch (IOException e) { |
| 335 | Slog.e(TAG, "unable to access persistent partition", e); |
| 336 | return false; |
| 337 | } finally { |
| 338 | IoUtils.closeQuietly(inputStream); |
| 339 | } |
| 340 | } |
| 341 | |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 342 | private native long nativeGetBlockDeviceSize(String path); |
| 343 | private native int nativeWipe(String path); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 344 | |
| 345 | private final IBinder mService = new IPersistentDataBlockService.Stub() { |
| 346 | @Override |
| 347 | public int write(byte[] data) throws RemoteException { |
| 348 | enforceUid(Binder.getCallingUid()); |
| 349 | |
| 350 | // Need to ensure we don't write over the last byte |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 351 | long maxBlockSize = getBlockDeviceSize() - HEADER_SIZE - 1; |
| 352 | if (data.length > maxBlockSize) { |
| 353 | // partition is ~500k so shouldn't be a problem to downcast |
| 354 | return (int) -maxBlockSize; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 355 | } |
| 356 | |
| 357 | DataOutputStream outputStream; |
| 358 | try { |
| 359 | outputStream = new DataOutputStream(new FileOutputStream(new File(mDataBlockFile))); |
| 360 | } catch (FileNotFoundException e) { |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 361 | Slog.e(TAG, "partition not available?", e); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 362 | return -1; |
| 363 | } |
| 364 | |
| 365 | ByteBuffer headerAndData = ByteBuffer.allocate(data.length + HEADER_SIZE); |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 366 | headerAndData.putInt(PARTITION_TYPE_MARKER); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 367 | headerAndData.putInt(data.length); |
| 368 | headerAndData.put(data); |
| 369 | |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 370 | synchronized (mLock) { |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 371 | try { |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 372 | byte[] checksum = new byte[DIGEST_SIZE_BYTES]; |
| 373 | outputStream.write(checksum, 0, DIGEST_SIZE_BYTES); |
| 374 | outputStream.write(headerAndData.array()); |
| 375 | outputStream.flush(); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 376 | } catch (IOException e) { |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 377 | Slog.e(TAG, "failed writing to the persistent data block", e); |
| 378 | return -1; |
| 379 | } finally { |
| 380 | IoUtils.closeQuietly(outputStream); |
| 381 | } |
| 382 | |
| 383 | if (computeAndWriteDigestLocked()) { |
| 384 | return data.length; |
| 385 | } else { |
| 386 | return -1; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 387 | } |
| 388 | } |
| 389 | } |
| 390 | |
| 391 | @Override |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 392 | public byte[] read() { |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 393 | enforceUid(Binder.getCallingUid()); |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 394 | if (!enforceChecksumValidity()) { |
| 395 | return new byte[0]; |
| 396 | } |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 397 | |
| 398 | DataInputStream inputStream; |
| 399 | try { |
| 400 | inputStream = new DataInputStream(new FileInputStream(new File(mDataBlockFile))); |
| 401 | } catch (FileNotFoundException e) { |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 402 | Slog.e(TAG, "partition not available?", e); |
| 403 | return null; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 404 | } |
| 405 | |
| 406 | try { |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 407 | synchronized (mLock) { |
| 408 | int totalDataSize = getTotalDataSizeLocked(inputStream); |
| 409 | |
| 410 | if (totalDataSize == 0) { |
| 411 | return new byte[0]; |
| 412 | } |
| 413 | |
| 414 | byte[] data = new byte[totalDataSize]; |
| 415 | int read = inputStream.read(data, 0, totalDataSize); |
| 416 | if (read < totalDataSize) { |
| 417 | // something went wrong, not returning potentially corrupt data |
| 418 | Slog.e(TAG, "failed to read entire data block. bytes read: " + |
| 419 | read + "/" + totalDataSize); |
| 420 | return null; |
| 421 | } |
| 422 | return data; |
| 423 | } |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 424 | } catch (IOException e) { |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 425 | Slog.e(TAG, "failed to read data", e); |
| 426 | return null; |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 427 | } finally { |
| 428 | try { |
| 429 | inputStream.close(); |
| 430 | } catch (IOException e) { |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 431 | Slog.e(TAG, "failed to close OutputStream"); |
| 432 | } |
| 433 | } |
| 434 | } |
| 435 | |
| 436 | @Override |
| 437 | public void wipe() { |
| 438 | enforceOemUnlockPermission(); |
| 439 | |
| 440 | synchronized (mLock) { |
| 441 | int ret = nativeWipe(mDataBlockFile); |
| 442 | |
| 443 | if (ret < 0) { |
| 444 | Slog.e(TAG, "failed to wipe persistent partition"); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 445 | } |
| 446 | } |
| 447 | } |
| 448 | |
| 449 | @Override |
Steven Ng | dc20ba6 | 2016-04-26 18:19:04 +0100 | [diff] [blame] | 450 | public void setOemUnlockEnabled(boolean enabled) throws SecurityException { |
Guang Zhu | 514c580 | 2014-09-12 15:14:00 -0700 | [diff] [blame] | 451 | // do not allow monkey to flip the flag |
| 452 | if (ActivityManager.isUserAMonkey()) { |
| 453 | return; |
| 454 | } |
Steven Ng | bfe1b04 | 2016-05-16 11:20:57 +0100 | [diff] [blame] | 455 | |
| 456 | enforceOemUnlockPermission(); |
| 457 | enforceIsAdmin(); |
| 458 | |
Steven Ng | dc20ba6 | 2016-04-26 18:19:04 +0100 | [diff] [blame] | 459 | // Do not allow oem unlock modification if it has been disallowed. |
| 460 | if (Settings.Global.getInt(getContext().getContentResolver(), |
| 461 | Settings.Global.OEM_UNLOCK_DISALLOWED, 0) == 1) { |
| 462 | throw new SecurityException("OEM unlock has been disallowed."); |
| 463 | } |
Mahaver Chopra | 830e32c | 2016-05-17 18:53:09 +0100 | [diff] [blame^] | 464 | if (enabled) { |
| 465 | enforceFactoryResetAllowed(); |
| 466 | } |
Andres Morales | 2830130 | 2014-11-12 07:56:46 -0800 | [diff] [blame] | 467 | synchronized (mLock) { |
| 468 | doSetOemUnlockEnabledLocked(enabled); |
| 469 | computeAndWriteDigestLocked(); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 470 | } |
| 471 | } |
| 472 | |
| 473 | @Override |
| 474 | public boolean getOemUnlockEnabled() { |
| 475 | enforceOemUnlockPermission(); |
Andres Morales | 1ce7d17 | 2015-01-07 14:24:57 -0800 | [diff] [blame] | 476 | return doGetOemUnlockEnabled(); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 477 | } |
| 478 | |
| 479 | @Override |
Andres Morales | 74e9b18 | 2016-02-22 12:33:33 -0800 | [diff] [blame] | 480 | public int getFlashLockState() { |
| 481 | enforceOemUnlockPermission(); |
| 482 | String locked = SystemProperties.get(FLASH_LOCK_PROP); |
| 483 | switch (locked) { |
| 484 | case FLASH_LOCK_LOCKED: |
| 485 | return PersistentDataBlockManager.FLASH_LOCK_LOCKED; |
| 486 | case FLASH_LOCK_UNLOCKED: |
| 487 | return PersistentDataBlockManager.FLASH_LOCK_UNLOCKED; |
| 488 | default: |
| 489 | return PersistentDataBlockManager.FLASH_LOCK_UNKNOWN; |
| 490 | } |
| 491 | } |
| 492 | |
| 493 | @Override |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 494 | public int getDataBlockSize() { |
Craig Lafayette | 66445a6 | 2015-03-27 09:01:43 -0400 | [diff] [blame] | 495 | enforcePersistentDataBlockAccess(); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 496 | |
| 497 | DataInputStream inputStream; |
| 498 | try { |
| 499 | inputStream = new DataInputStream(new FileInputStream(new File(mDataBlockFile))); |
| 500 | } catch (FileNotFoundException e) { |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 501 | Slog.e(TAG, "partition not available"); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 502 | return 0; |
| 503 | } |
| 504 | |
| 505 | try { |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 506 | synchronized (mLock) { |
| 507 | return getTotalDataSizeLocked(inputStream); |
| 508 | } |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 509 | } catch (IOException e) { |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 510 | Slog.e(TAG, "error reading data block size"); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 511 | return 0; |
| 512 | } finally { |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 513 | IoUtils.closeQuietly(inputStream); |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 514 | } |
| 515 | } |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 516 | |
Craig Lafayette | 66445a6 | 2015-03-27 09:01:43 -0400 | [diff] [blame] | 517 | private void enforcePersistentDataBlockAccess() { |
| 518 | if (mContext.checkCallingPermission(Manifest.permission.ACCESS_PDB_STATE) |
| 519 | != PackageManager.PERMISSION_GRANTED) { |
| 520 | enforceUid(Binder.getCallingUid()); |
| 521 | } |
| 522 | } |
| 523 | |
Andres Morales | 963295e | 2014-07-10 15:40:24 -0700 | [diff] [blame] | 524 | @Override |
| 525 | public long getMaximumDataBlockSize() { |
| 526 | long actualSize = getBlockDeviceSize() - HEADER_SIZE - 1; |
| 527 | return actualSize <= MAX_DATA_BLOCK_SIZE ? actualSize : MAX_DATA_BLOCK_SIZE; |
| 528 | } |
Andres Morales | 68d4acd | 2014-07-01 19:40:41 -0700 | [diff] [blame] | 529 | }; |
| 530 | } |