Home | History | Annotate | Download | only in component
      1 /*
      2  * Copyright (C) 2016 The Android Open Source Project
      3  *
      4  * Licensed under the Apache License, Version 2.0 (the "License");
      5  * you may not use this file except in compliance with the License.
      6  * You may obtain a copy of the License at
      7  *
      8  *      http://www.apache.org/licenses/LICENSE-2.0
      9  *
     10  * Unless required by applicable law or agreed to in writing, software
     11  * distributed under the License is distributed on an "AS IS" BASIS,
     12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     13  * See the License for the specific language governing permissions and
     14  * limitations under the License.
     15  */
     16 
     17 #include <arpa/inet.h>
     18 #include <sys/socket.h>
     19 #include <sys/types.h>
     20 #include <sys/un.h>
     21 #include <unistd.h>
     22 
     23 #include <algorithm>
     24 #include <string>
     25 
     26 #include <android-base/file.h>
     27 #include <android-base/logging.h>
     28 #include <android-base/properties.h>
     29 #include <android-base/unique_fd.h>
     30 #include <bootloader_message/bootloader_message.h>
     31 #include <gtest/gtest.h>
     32 
     33 using namespace std::string_literals;
     34 
     35 static const std::string UNCRYPT_SOCKET = "/dev/socket/uncrypt";
     36 static const std::string INIT_SVC_SETUP_BCB = "init.svc.setup-bcb";
     37 static const std::string INIT_SVC_CLEAR_BCB = "init.svc.clear-bcb";
     38 static const std::string INIT_SVC_UNCRYPT = "init.svc.uncrypt";
     39 static constexpr int SOCKET_CONNECTION_MAX_RETRY = 30;
     40 
     41 static void StopService() {
     42   ASSERT_TRUE(android::base::SetProperty("ctl.stop", "setup-bcb"));
     43   ASSERT_TRUE(android::base::SetProperty("ctl.stop", "clear-bcb"));
     44   ASSERT_TRUE(android::base::SetProperty("ctl.stop", "uncrypt"));
     45 
     46   bool success = false;
     47   for (int retry = 0; retry < SOCKET_CONNECTION_MAX_RETRY; retry++) {
     48     std::string setup_bcb = android::base::GetProperty(INIT_SVC_SETUP_BCB, "");
     49     std::string clear_bcb = android::base::GetProperty(INIT_SVC_CLEAR_BCB, "");
     50     std::string uncrypt = android::base::GetProperty(INIT_SVC_UNCRYPT, "");
     51     GTEST_LOG_(INFO) << "setup-bcb: [" << setup_bcb << "] clear-bcb: [" << clear_bcb
     52                      << "] uncrypt: [" << uncrypt << "]";
     53     if (setup_bcb != "running" && clear_bcb != "running" && uncrypt != "running") {
     54       success = true;
     55       break;
     56     }
     57     sleep(1);
     58   }
     59 
     60   ASSERT_TRUE(success) << "uncrypt service is not available.";
     61 }
     62 
     63 class UncryptTest : public ::testing::Test {
     64  protected:
     65   UncryptTest() : has_misc(true) {}
     66 
     67   void SetUp() override {
     68     std::string err;
     69     has_misc = !get_bootloader_message_blk_device(&err).empty();
     70   }
     71 
     72   void TearDown() override {
     73     // Clear the BCB.
     74     if (has_misc) {
     75       std::string err;
     76       ASSERT_TRUE(clear_bootloader_message(&err)) << "Failed to clear BCB: " << err;
     77     }
     78   }
     79 
     80   void SetupOrClearBcb(bool isSetup, const std::string& message,
     81                        const std::string& message_in_bcb) const {
     82     // Restart the setup-bcb service.
     83     StopService();
     84     ASSERT_TRUE(android::base::SetProperty("ctl.start", isSetup ? "setup-bcb" : "clear-bcb"));
     85 
     86     // Test tends to be flaky if proceeding immediately ("Transport endpoint is not connected").
     87     sleep(1);
     88 
     89     sockaddr_un un = {};
     90     un.sun_family = AF_UNIX;
     91     strlcpy(un.sun_path, UNCRYPT_SOCKET.c_str(), sizeof(un.sun_path));
     92 
     93     int sockfd = socket(AF_UNIX, SOCK_STREAM | SOCK_CLOEXEC, 0);
     94     ASSERT_NE(-1, sockfd);
     95 
     96     // Connect to the uncrypt socket.
     97     bool success = false;
     98     for (int retry = 0; retry < SOCKET_CONNECTION_MAX_RETRY; retry++) {
     99       if (connect(sockfd, reinterpret_cast<sockaddr*>(&un), sizeof(sockaddr_un)) != 0) {
    100         success = true;
    101         break;
    102       }
    103       sleep(1);
    104     }
    105     ASSERT_TRUE(success);
    106 
    107     if (isSetup) {
    108       // Send out the BCB message.
    109       int length = static_cast<int>(message.size());
    110       int length_out = htonl(length);
    111       ASSERT_TRUE(android::base::WriteFully(sockfd, &length_out, sizeof(int)))
    112           << "Failed to write length: " << strerror(errno);
    113       ASSERT_TRUE(android::base::WriteFully(sockfd, message.data(), length))
    114           << "Failed to write message: " << strerror(errno);
    115     }
    116 
    117     // Check the status code from uncrypt.
    118     int status;
    119     ASSERT_TRUE(android::base::ReadFully(sockfd, &status, sizeof(int)));
    120     ASSERT_EQ(100U, ntohl(status));
    121 
    122     // Ack having received the status code.
    123     int code = 0;
    124     ASSERT_TRUE(android::base::WriteFully(sockfd, &code, sizeof(int)));
    125 
    126     ASSERT_EQ(0, close(sockfd));
    127 
    128     ASSERT_TRUE(android::base::SetProperty("ctl.stop", isSetup ? "setup-bcb" : "clear-bcb"));
    129 
    130     // Verify the message by reading from BCB directly.
    131     bootloader_message boot;
    132     std::string err;
    133     ASSERT_TRUE(read_bootloader_message(&boot, &err)) << "Failed to read BCB: " << err;
    134 
    135     if (isSetup) {
    136       ASSERT_EQ("boot-recovery", std::string(boot.command));
    137       ASSERT_EQ(message_in_bcb, std::string(boot.recovery));
    138 
    139       // The rest of the boot.recovery message should be zero'd out.
    140       ASSERT_LE(message_in_bcb.size(), sizeof(boot.recovery));
    141       size_t left = sizeof(boot.recovery) - message_in_bcb.size();
    142       ASSERT_EQ(std::string(left, '\0'), std::string(&boot.recovery[message_in_bcb.size()], left));
    143 
    144       // Clear the BCB.
    145       ASSERT_TRUE(clear_bootloader_message(&err)) << "Failed to clear BCB: " << err;
    146     } else {
    147       // All the bytes should be cleared.
    148       ASSERT_EQ(std::string(sizeof(boot), '\0'),
    149                 std::string(reinterpret_cast<const char*>(&boot), sizeof(boot)));
    150     }
    151   }
    152 
    153   void VerifyBootloaderMessage(const std::string& expected) {
    154     std::string err;
    155     bootloader_message boot;
    156     ASSERT_TRUE(read_bootloader_message(&boot, &err)) << "Failed to read BCB: " << err;
    157 
    158     // Check that we have all the expected bytes.
    159     ASSERT_EQ(expected, std::string(reinterpret_cast<const char*>(&boot), sizeof(boot)));
    160   }
    161 
    162   bool has_misc;
    163 };
    164 
    165 TEST_F(UncryptTest, setup_bcb) {
    166   if (!has_misc) {
    167     GTEST_LOG_(INFO) << "Test skipped due to no /misc partition found on the device.";
    168     return;
    169   }
    170 
    171   std::string random_data;
    172   random_data.reserve(sizeof(bootloader_message));
    173   generate_n(back_inserter(random_data), sizeof(bootloader_message), []() { return rand() % 128; });
    174 
    175   bootloader_message boot;
    176   memcpy(&boot, random_data.c_str(), random_data.size());
    177 
    178   std::string err;
    179   ASSERT_TRUE(write_bootloader_message(boot, &err)) << "Failed to write BCB: " << err;
    180   VerifyBootloaderMessage(random_data);
    181 
    182   ASSERT_TRUE(clear_bootloader_message(&err)) << "Failed to clear BCB: " << err;
    183   VerifyBootloaderMessage(std::string(sizeof(bootloader_message), '\0'));
    184 
    185   std::string message = "--update_message=abc value";
    186   std::string message_in_bcb = "recovery\n--update_message=abc value\n";
    187   SetupOrClearBcb(true, message, message_in_bcb);
    188 
    189   SetupOrClearBcb(false, "", "");
    190 
    191   TemporaryFile wipe_package;
    192   ASSERT_TRUE(android::base::WriteStringToFile(std::string(345, 'a'), wipe_package.path));
    193 
    194   // It's expected to store a wipe package in /misc, with the package size passed to recovery.
    195   message = "--wipe_ab\n--wipe_package="s + wipe_package.path + "\n--reason=wipePackage"s;
    196   message_in_bcb = "recovery\n--wipe_ab\n--wipe_package_size=345\n--reason=wipePackage\n";
    197   SetupOrClearBcb(true, message, message_in_bcb);
    198 }
    199