Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 1 | // Copyright (c) 2010 The Chromium OS Authors. All rights reserved. |
| 2 | // Use of this source code is governed by a BSD-style license that can be |
| 3 | // found in the LICENSE file. |
| 4 | |
| 5 | #ifndef CHROMEOS_PLATFORM_UPDATE_ENGINE_DELTA_PERFORMER_H__ |
| 6 | #define CHROMEOS_PLATFORM_UPDATE_ENGINE_DELTA_PERFORMER_H__ |
| 7 | |
| 8 | #include <inttypes.h> |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 9 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 10 | #include <vector> |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 11 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 12 | #include <google/protobuf/repeated_field.h> |
Andrew de los Reyes | 353777c | 2010-10-08 10:34:30 -0700 | [diff] [blame] | 13 | #include <gtest/gtest_prod.h> // for FRIEND_TEST |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 14 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 15 | #include "update_engine/file_writer.h" |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 16 | #include "update_engine/omaha_hash_calculator.h" |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 17 | #include "update_engine/update_metadata.pb.h" |
| 18 | |
| 19 | namespace chromeos_update_engine { |
| 20 | |
Darin Petkov | 73058b4 | 2010-10-06 16:32:19 -0700 | [diff] [blame] | 21 | class PrefsInterface; |
| 22 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 23 | // This class performs the actions in a delta update synchronously. The delta |
| 24 | // update itself should be passed in in chunks as it is received. |
| 25 | |
| 26 | class DeltaPerformer : public FileWriter { |
| 27 | public: |
Darin Petkov | 73058b4 | 2010-10-06 16:32:19 -0700 | [diff] [blame] | 28 | DeltaPerformer(PrefsInterface* prefs) |
| 29 | : prefs_(prefs), |
| 30 | fd_(-1), |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 31 | kernel_fd_(-1), |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 32 | manifest_valid_(false), |
Darin Petkov | 437adc4 | 2010-10-07 13:12:24 -0700 | [diff] [blame] | 33 | manifest_metadata_size_(0), |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 34 | next_operation_num_(0), |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 35 | buffer_offset_(0), |
Darin Petkov | 0406e40 | 2010-10-06 21:33:11 -0700 | [diff] [blame] | 36 | last_updated_buffer_offset_(kuint64max), |
Darin Petkov | 3aefa86 | 2010-12-07 14:45:00 -0800 | [diff] [blame] | 37 | block_size_(0) {} |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 38 | |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 39 | // Opens the kernel. Should be called before or after Open(), but before |
| 40 | // Write(). The kernel file will be close()d when Close() is called. |
| 41 | bool OpenKernel(const char* kernel_path); |
| 42 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 43 | // flags and mode ignored. Once Close()d, a DeltaPerformer can't be |
| 44 | // Open()ed again. |
| 45 | int Open(const char* path, int flags, mode_t mode); |
| 46 | |
| 47 | // Wrapper around write. Returns bytes written on success or |
| 48 | // -errno on error. |
Andrew de los Reyes | 0cca421 | 2010-04-29 14:00:58 -0700 | [diff] [blame] | 49 | ssize_t Write(const void* bytes, size_t count); |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 50 | |
| 51 | // Wrapper around close. Returns 0 on success or -errno on error. |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 52 | // Closes both 'path' given to Open() and the kernel path. |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 53 | int Close(); |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 54 | |
| 55 | // Verifies the downloaded payload against the signed hash included in the |
Darin Petkov | 437adc4 | 2010-10-07 13:12:24 -0700 | [diff] [blame] | 56 | // payload as well as against the update check hash and size and returns true |
| 57 | // on success, false on failure. This method should be called after closing |
| 58 | // the stream. Note this method skips the signed hash check if the public key |
| 59 | // is unavailable; it returns false if the public key is available but the |
| 60 | // delta payload doesn't include a signature. If |public_key_path| is an empty |
| 61 | // string, uses the default public key path. |
| 62 | bool VerifyPayload(const std::string& public_key_path, |
| 63 | const std::string& update_check_response_hash, |
| 64 | const uint64_t update_check_response_size); |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 65 | |
Darin Petkov | 3aefa86 | 2010-12-07 14:45:00 -0800 | [diff] [blame] | 66 | // Reads from the update manifest the expected sizes and hashes of the target |
| 67 | // kernel and rootfs partitions. These values can be used for applied update |
| 68 | // hash verification. This method must be called after the update manifest has |
| 69 | // been parsed (e.g., after closing the stream). Returns true on success, and |
| 70 | // false on failure (e.g., when the values are not present in the update |
| 71 | // manifest). |
| 72 | bool GetNewPartitionInfo(uint64_t* kernel_size, |
| 73 | std::vector<char>* kernel_hash, |
| 74 | uint64_t* rootfs_size, |
| 75 | std::vector<char>* rootfs_hash); |
Darin Petkov | 2dd0109 | 2010-10-08 15:43:05 -0700 | [diff] [blame] | 76 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 77 | // Converts an ordered collection of Extent objects which contain data of |
| 78 | // length full_length to a comma-separated string. For each Extent, the |
| 79 | // string will have the start offset and then the length in bytes. |
| 80 | // The length value of the last extent in the string may be short, since |
| 81 | // the full length of all extents in the string is capped to full_length. |
| 82 | // Also, an extent starting at kSparseHole, appears as -1 in the string. |
| 83 | // For example, if the Extents are {1, 1}, {4, 2}, {kSparseHole, 1}, |
| 84 | // {0, 1}, block_size is 4096, and full_length is 5 * block_size - 13, |
| 85 | // the resulting string will be: "4096:4096,16384:8192,-1:4096,0:4083" |
| 86 | static bool ExtentsToBsdiffPositionsString( |
| 87 | const google::protobuf::RepeatedPtrField<Extent>& extents, |
| 88 | uint64_t block_size, |
| 89 | uint64_t full_length, |
| 90 | std::string* positions_string); |
| 91 | |
Darin Petkov | 0406e40 | 2010-10-06 21:33:11 -0700 | [diff] [blame] | 92 | // Returns true if a previous update attempt can be continued based on the |
| 93 | // persistent preferences and the new update check response hash. |
| 94 | static bool CanResumeUpdate(PrefsInterface* prefs, |
| 95 | std::string update_check_response_hash); |
| 96 | |
| 97 | // Resets the persistent update progress state to indicate that an update |
Darin Petkov | 9b23057 | 2010-10-08 10:20:09 -0700 | [diff] [blame] | 98 | // can't be resumed. Performs a quick update-in-progress reset if |quick| is |
| 99 | // true, otherwise resets all progress-related update state. Returns true on |
| 100 | // success, false otherwise. |
| 101 | static bool ResetUpdateProgress(PrefsInterface* prefs, bool quick); |
Darin Petkov | 0406e40 | 2010-10-06 21:33:11 -0700 | [diff] [blame] | 102 | |
Darin Petkov | 3aefa86 | 2010-12-07 14:45:00 -0800 | [diff] [blame] | 103 | void set_current_kernel_hash(const std::vector<char>& hash) { |
Darin Petkov | 698d041 | 2010-10-13 10:59:44 -0700 | [diff] [blame] | 104 | current_kernel_hash_ = hash; |
| 105 | } |
| 106 | |
Darin Petkov | 3aefa86 | 2010-12-07 14:45:00 -0800 | [diff] [blame] | 107 | void set_current_rootfs_hash(const std::vector<char>& hash) { |
Darin Petkov | 698d041 | 2010-10-13 10:59:44 -0700 | [diff] [blame] | 108 | current_rootfs_hash_ = hash; |
| 109 | } |
| 110 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 111 | private: |
Andrew de los Reyes | 353777c | 2010-10-08 10:34:30 -0700 | [diff] [blame] | 112 | friend class DeltaPerformerTest; |
| 113 | FRIEND_TEST(DeltaPerformerTest, IsIdempotentOperationTest); |
| 114 | |
| 115 | static bool IsIdempotentOperation( |
| 116 | const DeltaArchiveManifest_InstallOperation& op); |
| 117 | |
Darin Petkov | 698d041 | 2010-10-13 10:59:44 -0700 | [diff] [blame] | 118 | // Verifies that the expected source partition hashes (if present) match the |
| 119 | // hashes for the current partitions. Returns true if there're no expected |
| 120 | // hashes in the payload (e.g., if it's a new-style full update) or if the |
| 121 | // hashes match; returns false otherwise. |
| 122 | bool VerifySourcePartitions(); |
| 123 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 124 | // Returns true if enough of the delta file has been passed via Write() |
| 125 | // to be able to perform a given install operation. |
| 126 | bool CanPerformInstallOperation( |
| 127 | const DeltaArchiveManifest_InstallOperation& operation); |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 128 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 129 | // Returns true on success. |
| 130 | bool PerformInstallOperation( |
| 131 | const DeltaArchiveManifest_InstallOperation& operation); |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 132 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 133 | // These perform a specific type of operation and return true on success. |
| 134 | bool PerformReplaceOperation( |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 135 | const DeltaArchiveManifest_InstallOperation& operation, |
| 136 | bool is_kernel_partition); |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 137 | bool PerformMoveOperation( |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 138 | const DeltaArchiveManifest_InstallOperation& operation, |
| 139 | bool is_kernel_partition); |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 140 | bool PerformBsdiffOperation( |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 141 | const DeltaArchiveManifest_InstallOperation& operation, |
| 142 | bool is_kernel_partition); |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 143 | |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 144 | // Returns true if the payload signature message has been extracted from |
| 145 | // |operation|, false otherwise. |
| 146 | bool ExtractSignatureMessage( |
| 147 | const DeltaArchiveManifest_InstallOperation& operation); |
| 148 | |
Darin Petkov | 437adc4 | 2010-10-07 13:12:24 -0700 | [diff] [blame] | 149 | // Updates the hash calculator with |count| bytes at the head of |buffer_| and |
| 150 | // then discards them. |
| 151 | void DiscardBufferHeadBytes(size_t count); |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 152 | |
Darin Petkov | 0406e40 | 2010-10-06 21:33:11 -0700 | [diff] [blame] | 153 | // Checkpoints the update progress into persistent storage to allow this |
| 154 | // update attempt to be resumed after reboot. |
Darin Petkov | 73058b4 | 2010-10-06 16:32:19 -0700 | [diff] [blame] | 155 | bool CheckpointUpdateProgress(); |
| 156 | |
Darin Petkov | 9b23057 | 2010-10-08 10:20:09 -0700 | [diff] [blame] | 157 | // Primes the required update state. Returns true if the update state was |
| 158 | // successfully initialized to a saved resume state or if the update is a new |
| 159 | // update. Returns false otherwise. |
| 160 | bool PrimeUpdateState(); |
| 161 | |
Darin Petkov | 73058b4 | 2010-10-06 16:32:19 -0700 | [diff] [blame] | 162 | // Update Engine preference store. |
| 163 | PrefsInterface* prefs_; |
| 164 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 165 | // File descriptor of open device. |
| 166 | int fd_; |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 167 | |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 168 | // File descriptor of the kernel device |
| 169 | int kernel_fd_; |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 170 | |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 171 | std::string path_; // Path that fd_ refers to. |
| 172 | std::string kernel_path_; // Path that kernel_fd_ refers to. |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 173 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 174 | DeltaArchiveManifest manifest_; |
| 175 | bool manifest_valid_; |
Darin Petkov | 437adc4 | 2010-10-07 13:12:24 -0700 | [diff] [blame] | 176 | uint64_t manifest_metadata_size_; |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 177 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 178 | // Index of the next operation to perform in the manifest. |
Andrew de los Reyes | f4c7ef1 | 2010-04-30 10:37:00 -0700 | [diff] [blame] | 179 | int next_operation_num_; |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 180 | |
| 181 | // buffer_ is a window of the data that's been downloaded. At first, |
| 182 | // it contains the beginning of the download, but after the protobuf |
| 183 | // has been downloaded and parsed, it contains a sliding window of |
| 184 | // data blobs. |
| 185 | std::vector<char> buffer_; |
| 186 | // Offset of buffer_ in the binary blobs section of the update. |
| 187 | uint64_t buffer_offset_; |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 188 | |
Darin Petkov | 0406e40 | 2010-10-06 21:33:11 -0700 | [diff] [blame] | 189 | // Last |buffer_offset_| value updated as part of the progress update. |
| 190 | uint64_t last_updated_buffer_offset_; |
| 191 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 192 | // The block size (parsed from the manifest). |
| 193 | uint32_t block_size_; |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 194 | |
Darin Petkov | 437adc4 | 2010-10-07 13:12:24 -0700 | [diff] [blame] | 195 | // Calculates the payload hash. |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 196 | OmahaHashCalculator hash_calculator_; |
| 197 | |
Darin Petkov | 437adc4 | 2010-10-07 13:12:24 -0700 | [diff] [blame] | 198 | // Saves the signed hash context. |
| 199 | std::string signed_hash_context_; |
| 200 | |
Darin Petkov | d7061ab | 2010-10-06 14:37:09 -0700 | [diff] [blame] | 201 | // Signatures message blob extracted directly from the payload. |
| 202 | std::vector<char> signatures_message_data_; |
| 203 | |
Darin Petkov | 698d041 | 2010-10-13 10:59:44 -0700 | [diff] [blame] | 204 | // Hashes for the current partitions to be used for source partition |
| 205 | // verification. |
Darin Petkov | 3aefa86 | 2010-12-07 14:45:00 -0800 | [diff] [blame] | 206 | std::vector<char> current_kernel_hash_; |
| 207 | std::vector<char> current_rootfs_hash_; |
Darin Petkov | 698d041 | 2010-10-13 10:59:44 -0700 | [diff] [blame] | 208 | |
Andrew de los Reyes | 09e56d6 | 2010-04-23 13:45:53 -0700 | [diff] [blame] | 209 | DISALLOW_COPY_AND_ASSIGN(DeltaPerformer); |
| 210 | }; |
| 211 | |
| 212 | } // namespace chromeos_update_engine |
| 213 | |
| 214 | #endif // CHROMEOS_PLATFORM_UPDATE_ENGINE_DELTA_PERFORMER_H__ |