Add kernel configs / version to verified_assembled_vendor_manifest.xml
so that the kernel of the incoming package can be checked against
the framework. Previously, the running kernel was used instead.
Bug: 111125947
Test: test_extract_kernel
Test: manual OTA on Pixel 3 from build:
Android P (kernel version 4.9.96)
to ToT build:
device kernel version = (manually modified) framework requirement = latest,
PRODUCT_OTA_ENFORCE_VINTF_KERNEL_REQUIREMENTS = true
Change-Id: Id524a58e94bdb6bba348ca461c9d33614ce451a9
gugelfrei-debug
Yifan Hong
6 years ago
parent
68e2dc2086
commit
770ab053b0
@ -0,0 +1,196 @@
|
||||
#!/usr/bin/env python
|
||||
#
|
||||
# Copyright (C) 2018 The Android Open Source Project
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
"""
|
||||
A tool to extract kernel information from a kernel image.
|
||||
"""
|
||||
|
||||
import argparse
|
||||
import subprocess
|
||||
import sys
|
||||
import re
|
||||
|
||||
CONFIG_PREFIX = b'IKCFG_ST'
|
||||
GZIP_HEADER = b'\037\213\010'
|
||||
COMPRESSION_ALGO = (
|
||||
(["gzip", "-d"], GZIP_HEADER),
|
||||
(["xz", "-d"], b'\3757zXZ\000'),
|
||||
(["bzip2", "-d"], b'BZh'),
|
||||
(["lz4", "-d", "-l"], b'\002\041\114\030'),
|
||||
|
||||
# These are not supported in the build system yet.
|
||||
# (["unlzma"], b'\135\0\0\0'),
|
||||
# (["lzop", "-d"], b'\211\114\132'),
|
||||
)
|
||||
|
||||
# "Linux version " UTS_RELEASE " (" LINUX_COMPILE_BY "@"
|
||||
# LINUX_COMPILE_HOST ") (" LINUX_COMPILER ") " UTS_VERSION "\n";
|
||||
LINUX_BANNER_PREFIX = b'Linux version '
|
||||
LINUX_BANNER_REGEX = LINUX_BANNER_PREFIX + \
|
||||
r'([0-9]+[.][0-9]+[.][0-9]+).* \(.*@.*\) \(.*\) .*\n'
|
||||
|
||||
|
||||
def get_version(input_bytes, start_idx):
|
||||
null_idx = input_bytes.find('\x00', start_idx)
|
||||
if null_idx < 0:
|
||||
return None
|
||||
linux_banner = input_bytes[start_idx:null_idx].decode()
|
||||
mo = re.match(LINUX_BANNER_REGEX, linux_banner)
|
||||
if mo:
|
||||
return mo.group(1)
|
||||
return None
|
||||
|
||||
|
||||
def dump_version(input_bytes):
|
||||
idx = 0
|
||||
while True:
|
||||
idx = input_bytes.find(LINUX_BANNER_PREFIX, idx)
|
||||
if idx < 0:
|
||||
return None
|
||||
|
||||
version = get_version(input_bytes, idx)
|
||||
if version:
|
||||
return version
|
||||
|
||||
idx += len(LINUX_BANNER_PREFIX)
|
||||
|
||||
|
||||
def dump_configs(input_bytes):
|
||||
"""
|
||||
Dump kernel configuration from input_bytes. This can be done when
|
||||
CONFIG_IKCONFIG is enabled, which is a requirement on Treble devices.
|
||||
|
||||
The kernel configuration is archived in GZip format right after the magic
|
||||
string 'IKCFG_ST' in the built kernel.
|
||||
"""
|
||||
|
||||
# Search for magic string + GZip header
|
||||
idx = input_bytes.find(CONFIG_PREFIX + GZIP_HEADER)
|
||||
if idx < 0:
|
||||
return None
|
||||
|
||||
# Seek to the start of the archive
|
||||
idx += len(CONFIG_PREFIX)
|
||||
|
||||
sp = subprocess.Popen(["gzip", "-d", "-c"], stdin=subprocess.PIPE,
|
||||
stdout=subprocess.PIPE, stderr=subprocess.PIPE)
|
||||
o, _ = sp.communicate(input=input_bytes[idx:])
|
||||
if sp.returncode == 1: # error
|
||||
return None
|
||||
|
||||
# success or trailing garbage warning
|
||||
assert sp.returncode in (0, 2), sp.returncode
|
||||
|
||||
return o
|
||||
|
||||
|
||||
def try_decompress(cmd, search_bytes, input_bytes):
|
||||
idx = input_bytes.find(search_bytes)
|
||||
if idx < 0:
|
||||
return None
|
||||
|
||||
idx = 0
|
||||
sp = subprocess.Popen(cmd, stdin=subprocess.PIPE, stdout=subprocess.PIPE,
|
||||
stderr=subprocess.PIPE)
|
||||
o, _ = sp.communicate(input=input_bytes[idx:])
|
||||
# ignore errors
|
||||
return o
|
||||
|
||||
|
||||
def decompress_dump(func, input_bytes):
|
||||
"""
|
||||
Run func(input_bytes) first; and if that fails (returns value evaluates to
|
||||
False), then try different decompression algorithm before running func.
|
||||
"""
|
||||
o = func(input_bytes)
|
||||
if o:
|
||||
return o
|
||||
for cmd, search_bytes in COMPRESSION_ALGO:
|
||||
decompressed = try_decompress(cmd, search_bytes, input_bytes)
|
||||
if decompressed:
|
||||
o = func(decompressed)
|
||||
if o:
|
||||
return o
|
||||
# Force decompress the whole file even if header doesn't match
|
||||
decompressed = try_decompress(cmd, b"", input_bytes)
|
||||
if decompressed:
|
||||
o = func(decompressed)
|
||||
if o:
|
||||
return o
|
||||
|
||||
def main():
|
||||
parser = argparse.ArgumentParser(
|
||||
formatter_class=argparse.RawTextHelpFormatter,
|
||||
description=__doc__ +
|
||||
"\nThese algorithms are tried when decompressing the image:\n " +
|
||||
" ".join(tup[0][0] for tup in COMPRESSION_ALGO))
|
||||
parser.add_argument('--input',
|
||||
help='Input kernel image. If not specified, use stdin',
|
||||
metavar='FILE',
|
||||
type=argparse.FileType('rb'),
|
||||
default=sys.stdin)
|
||||
parser.add_argument('--output-configs',
|
||||
help='If specified, write configs. Use stdout if no file '
|
||||
'is specified.',
|
||||
metavar='FILE',
|
||||
nargs='?',
|
||||
type=argparse.FileType('wb'),
|
||||
const=sys.stdout)
|
||||
parser.add_argument('--output-version',
|
||||
help='If specified, write version. Use stdout if no file '
|
||||
'is specified.',
|
||||
metavar='FILE',
|
||||
nargs='?',
|
||||
type=argparse.FileType('wb'),
|
||||
const=sys.stdout)
|
||||
parser.add_argument('--tools',
|
||||
help='Decompression tools to use. If not specified, PATH '
|
||||
'is searched.',
|
||||
metavar='ALGORITHM:EXECUTABLE',
|
||||
nargs='*')
|
||||
args = parser.parse_args()
|
||||
|
||||
tools = {pair[0]: pair[1]
|
||||
for pair in (token.split(':') for token in args.tools or [])}
|
||||
for cmd, _ in COMPRESSION_ALGO:
|
||||
if cmd[0] in tools:
|
||||
cmd[0] = tools[cmd[0]]
|
||||
|
||||
input_bytes = args.input.read()
|
||||
|
||||
ret = 0
|
||||
if args.output_configs is not None:
|
||||
o = decompress_dump(dump_configs, input_bytes)
|
||||
if o:
|
||||
args.output_configs.write(o)
|
||||
else:
|
||||
sys.stderr.write(
|
||||
"Cannot extract kernel configs in {}".format(args.input.name))
|
||||
ret = 1
|
||||
if args.output_version is not None:
|
||||
o = decompress_dump(dump_version, input_bytes)
|
||||
if o:
|
||||
args.output_version.write(o)
|
||||
else:
|
||||
sys.stderr.write(
|
||||
"Cannot extract kernel versions in {}".format(args.input.name))
|
||||
ret = 1
|
||||
|
||||
return ret
|
||||
|
||||
|
||||
if __name__ == '__main__':
|
||||
exit(main())
|
||||
@ -0,0 +1,30 @@
|
||||
#!/usr/bin/env python
|
||||
#
|
||||
# Copyright (C) 2018 The Android Open Source Project
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
import unittest
|
||||
from extract_kernel import get_version, dump_version
|
||||
|
||||
class ExtractKernelTest(unittest.TestCase):
|
||||
def test_extract_version(self):
|
||||
self.assertEqual("4.9.100", get_version(
|
||||
b'Linux version 4.9.100-a123 (a@a) (a) a\n\x00', 0))
|
||||
self.assertEqual("4.9.123", get_version(
|
||||
b'Linux version 4.9.123 (@) () \n\x00', 0))
|
||||
|
||||
def test_dump_self(self):
|
||||
self.assertEqual("4.9.1", dump_version(
|
||||
b"trash\x00Linux version 4.8.8\x00trash\x00"
|
||||
"other trash Linux version 4.9.1-g3 (2@s) (2) a\n\x00"))
|
||||
Loading…
Reference in new issue