11af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker/* 21af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Copyright (C) 2010 The Android Open Source Project 31af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 41af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Licensed under the Apache License, Version 2.0 (the "License"); 51af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * you may not use this file except in compliance with the License. 61af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * You may obtain a copy of the License at 71af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 81af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * http://www.apache.org/licenses/LICENSE-2.0 91af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 101af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Unless required by applicable law or agreed to in writing, software 111af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * distributed under the License is distributed on an "AS IS" BASIS, 121af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 131af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * See the License for the specific language governing permissions and 141af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * limitations under the License. 151af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 161af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 171af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerpackage android.os; 181af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 194ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parksimport android.content.BroadcastReceiver; 204ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parksimport android.content.Context; 214ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parksimport android.content.Intent; 224ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parksimport android.util.Log; 234ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks 241af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.io.ByteArrayInputStream; 251af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.io.File; 261af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.io.FileNotFoundException; 271af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.io.FileWriter; 281af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.io.IOException; 29e2d58e95a09590a63f1c597bb808b925bcab9a69Doug Zongkerimport java.io.InputStream; 301af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.io.RandomAccessFile; 311af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.security.GeneralSecurityException; 321af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.security.PublicKey; 331af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.security.Signature; 341af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.security.SignatureException; 351af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.security.cert.Certificate; 361af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.security.cert.CertificateFactory; 371af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.security.cert.X509Certificate; 381af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.util.Collection; 391af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.util.Enumeration; 401af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.util.HashSet; 411af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.util.Iterator; 421af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.util.List; 43e33b4007ee56e843d5e99cfb92627425a551058dDoug Zongkerimport java.util.Locale; 441af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.util.zip.ZipEntry; 451af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport java.util.zip.ZipFile; 461af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 471af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport org.apache.harmony.security.asn1.BerInputStream; 481af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport org.apache.harmony.security.pkcs7.ContentInfo; 491af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport org.apache.harmony.security.pkcs7.SignedData; 501af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport org.apache.harmony.security.pkcs7.SignerInfo; 511af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerimport org.apache.harmony.security.provider.cert.X509CertImpl; 521af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 531af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker/** 541af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * RecoverySystem contains methods for interacting with the Android 551af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * recovery system (the separate partition that can be used to install 561af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * system updates, wipe user data, etc.) 571af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 581af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongkerpublic class RecoverySystem { 591af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker private static final String TAG = "RecoverySystem"; 601af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 611af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** 621af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Default location of zip file containing public keys (X509 631af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * certs) authorized to sign OTA updates. 641af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 651af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker private static final File DEFAULT_KEYSTORE = 661af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker new File("/system/etc/security/otacerts.zip"); 671af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 681af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** Send progress to listeners no more often than this (in ms). */ 691af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker private static final long PUBLISH_PROGRESS_INTERVAL_MS = 500; 701af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 711af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** Used to communicate with recovery. See bootable/recovery/recovery.c. */ 721af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker private static File RECOVERY_DIR = new File("/cache/recovery"); 731af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker private static File COMMAND_FILE = new File(RECOVERY_DIR, "command"); 741af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker private static File LOG_FILE = new File(RECOVERY_DIR, "log"); 753d5040f8d474713a1e148b0d64f16bb0435d6388Doug Zongker private static String LAST_PREFIX = "last_"; 761af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 771af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // Length limits for reading files. 78c95142d4a0ab7bebb899167da17c70c3196abbe4Dan Egnor private static int LOG_FILE_MAX_LENGTH = 64 * 1024; 791af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 801af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** 811af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Interface definition for a callback to be invoked regularly as 821af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * verification proceeds. 831af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 841af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker public interface ProgressListener { 851af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** 861af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Called periodically as the verification progresses. 871af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 881af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @param progress the approximate percentage of the 891af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * verification that has been completed, ranging from 0 901af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * to 100 (inclusive). 911af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 921af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker public void onProgress(int progress); 931af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 941af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 951af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** @return the set of certs that can be used to sign an OTA package. */ 961af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker private static HashSet<Certificate> getTrustedCerts(File keystore) 971af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throws IOException, GeneralSecurityException { 981af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker HashSet<Certificate> trusted = new HashSet<Certificate>(); 991af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (keystore == null) { 1001af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker keystore = DEFAULT_KEYSTORE; 1011af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 1021af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker ZipFile zip = new ZipFile(keystore); 1031af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker try { 1041af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker CertificateFactory cf = CertificateFactory.getInstance("X.509"); 1051af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker Enumeration<? extends ZipEntry> entries = zip.entries(); 1061af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker while (entries.hasMoreElements()) { 1071af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker ZipEntry entry = entries.nextElement(); 108e2d58e95a09590a63f1c597bb808b925bcab9a69Doug Zongker InputStream is = zip.getInputStream(entry); 109e2d58e95a09590a63f1c597bb808b925bcab9a69Doug Zongker try { 110e2d58e95a09590a63f1c597bb808b925bcab9a69Doug Zongker trusted.add(cf.generateCertificate(is)); 111e2d58e95a09590a63f1c597bb808b925bcab9a69Doug Zongker } finally { 112e2d58e95a09590a63f1c597bb808b925bcab9a69Doug Zongker is.close(); 113e2d58e95a09590a63f1c597bb808b925bcab9a69Doug Zongker } 1141af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 1151af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } finally { 1161af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker zip.close(); 1171af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 1181af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker return trusted; 1191af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 1201af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1211af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** 1221af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Verify the cryptographic signature of a system update package 1231af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * before installing it. Note that the package is also verified 1241af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * separately by the installer once the device is rebooted into 1251af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * the recovery system. This function will return only if the 1261af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * package was successfully verified; otherwise it will throw an 1271af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * exception. 1281af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 1291af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Verification of a package can take significant time, so this 130cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker * function should not be called from a UI thread. Interrupting 131cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker * the thread while this function is in progress will result in a 132cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker * SecurityException being thrown (and the thread's interrupt flag 133cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker * will be cleared). 1341af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 1351af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @param packageFile the package to be verified 1361af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @param listener an object to receive periodic progress 1371af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * updates as verification proceeds. May be null. 1381af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @param deviceCertsZipFile the zip file of certificates whose 1391af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * public keys we will accept. Verification succeeds if the 1401af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * package is signed by the private key corresponding to any 1411af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * public key in this file. May be null to use the system default 1421af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * file (currently "/system/etc/security/otacerts.zip"). 1431af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 1441af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @throws IOException if there were any errors reading the 1451af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * package or certs files. 1461af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @throws GeneralSecurityException if verification failed 1471af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 1481af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker public static void verifyPackage(File packageFile, 1491af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker ProgressListener listener, 1501af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker File deviceCertsZipFile) 1511af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throws IOException, GeneralSecurityException { 1521af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker long fileLen = packageFile.length(); 1531af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1541af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker RandomAccessFile raf = new RandomAccessFile(packageFile, "r"); 1551af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker try { 1561af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker int lastPercent = 0; 1571af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker long lastPublishTime = System.currentTimeMillis(); 1581af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (listener != null) { 1591af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker listener.onProgress(lastPercent); 1601af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 1611af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1621af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker raf.seek(fileLen - 6); 1631af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker byte[] footer = new byte[6]; 1641af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker raf.readFully(footer); 1651af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1661af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (footer[2] != (byte)0xff || footer[3] != (byte)0xff) { 1671af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new SignatureException("no signature in file (no footer)"); 1681af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 1691af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1701af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker int commentSize = (footer[4] & 0xff) | ((footer[5] & 0xff) << 8); 1711af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker int signatureStart = (footer[0] & 0xff) | ((footer[1] & 0xff) << 8); 1721af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1731af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker byte[] eocd = new byte[commentSize + 22]; 1741af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker raf.seek(fileLen - (commentSize + 22)); 1751af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker raf.readFully(eocd); 1761af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1771af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // Check that we have found the start of the 1781af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // end-of-central-directory record. 1791af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (eocd[0] != (byte)0x50 || eocd[1] != (byte)0x4b || 1801af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker eocd[2] != (byte)0x05 || eocd[3] != (byte)0x06) { 1811af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new SignatureException("no signature in file (bad footer)"); 1821af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 1831af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1841af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker for (int i = 4; i < eocd.length-3; ++i) { 1851af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (eocd[i ] == (byte)0x50 && eocd[i+1] == (byte)0x4b && 1861af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker eocd[i+2] == (byte)0x05 && eocd[i+3] == (byte)0x06) { 1871af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new SignatureException("EOCD marker found after start of EOCD"); 1881af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 1891af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 1901af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1911af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // The following code is largely copied from 1921af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // JarUtils.verifySignature(). We could just *call* that 1931af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // method here if that function didn't read the entire 1941af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // input (ie, the whole OTA package) into memory just to 1951af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // compute its message digest. 1961af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 1971af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker BerInputStream bis = new BerInputStream( 1981af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker new ByteArrayInputStream(eocd, commentSize+22-signatureStart, signatureStart)); 1991af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker ContentInfo info = (ContentInfo)ContentInfo.ASN1.decode(bis); 2001af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker SignedData signedData = info.getSignedData(); 2011af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (signedData == null) { 2021af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new IOException("signedData is null"); 2031af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2041af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker Collection encCerts = signedData.getCertificates(); 2051af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (encCerts.isEmpty()) { 2061af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new IOException("encCerts is empty"); 2071af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2081af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // Take the first certificate from the signature (packages 2091af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // should contain only one). 2101af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker Iterator it = encCerts.iterator(); 2111af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker X509Certificate cert = null; 2121af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (it.hasNext()) { 2131af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker cert = new X509CertImpl((org.apache.harmony.security.x509.Certificate)it.next()); 2141af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } else { 2151af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new SignatureException("signature contains no certificates"); 2161af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2171af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 2181af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker List sigInfos = signedData.getSignerInfos(); 2191af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker SignerInfo sigInfo; 2201af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (!sigInfos.isEmpty()) { 2211af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker sigInfo = (SignerInfo)sigInfos.get(0); 2221af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } else { 2231af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new IOException("no signer infos!"); 2241af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2251af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 2261af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // Check that the public key of the certificate contained 2271af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // in the package equals one of our trusted public keys. 2281af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 2291af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker HashSet<Certificate> trusted = getTrustedCerts( 2301af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker deviceCertsZipFile == null ? DEFAULT_KEYSTORE : deviceCertsZipFile); 2311af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 2321af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker PublicKey signatureKey = cert.getPublicKey(); 2331af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker boolean verified = false; 2341af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker for (Certificate c : trusted) { 2351af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (c.getPublicKey().equals(signatureKey)) { 2361af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker verified = true; 2371af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker break; 2381af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2391af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2401af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (!verified) { 2411af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new SignatureException("signature doesn't match any trusted key"); 2421af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2431af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 2441af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // The signature cert matches a trusted key. Now verify that 2451af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // the digest in the cert matches the actual file data. 2461af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 247c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // The verifier in recovery only handles SHA1withRSA and 248c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // SHA256withRSA signatures. SignApk chooses which to use 249c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // based on the signature algorithm of the cert: 250c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // 251c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // "SHA256withRSA" cert -> "SHA256withRSA" signature 252c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // "SHA1withRSA" cert -> "SHA1withRSA" signature 253c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // "MD5withRSA" cert -> "SHA1withRSA" signature (for backwards compatibility) 254c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // any other cert -> SignApk fails 255c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // 256c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // Here we ignore whatever the cert says, and instead use 257c9a9ffc5264c2c9405b7b98e1e993279e10f994fDoug Zongker // whatever algorithm is used by the signature. 2581af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 25966e40c36b3145f4d2f3ddd547bd66f27b12f6324Jesse Wilson String da = sigInfo.getDigestAlgorithm(); 2601af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker String dea = sigInfo.getDigestEncryptionAlgorithm(); 2611af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker String alg = null; 2621af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (da == null || dea == null) { 2631af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // fall back to the cert algorithm if the sig one 2641af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // doesn't look right. 2651af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker alg = cert.getSigAlgName(); 2661af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } else { 2671af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker alg = da + "with" + dea; 2681af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2691af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker Signature sig = Signature.getInstance(alg); 2701af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker sig.initVerify(cert); 2711af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 2721af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // The signature covers all of the OTA package except the 2731af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // archive comment and its 2-byte length. 2741af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker long toRead = fileLen - commentSize - 2; 2751af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker long soFar = 0; 2761af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker raf.seek(0); 2771af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker byte[] buffer = new byte[4096]; 278cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker boolean interrupted = false; 2791af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker while (soFar < toRead) { 280cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker interrupted = Thread.interrupted(); 281cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker if (interrupted) break; 2821af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker int size = buffer.length; 2831af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (soFar + size > toRead) { 2841af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker size = (int)(toRead - soFar); 2851af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2861af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker int read = raf.read(buffer, 0, size); 2871af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker sig.update(buffer, 0, read); 2881af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker soFar += read; 2891af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 2901af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (listener != null) { 2911af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker long now = System.currentTimeMillis(); 2921af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker int p = (int)(soFar * 100 / toRead); 2931af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (p > lastPercent && 2941af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker now - lastPublishTime > PUBLISH_PROGRESS_INTERVAL_MS) { 2951af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker lastPercent = p; 2961af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker lastPublishTime = now; 2971af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker listener.onProgress(lastPercent); 2981af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 2991af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3001af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3011af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (listener != null) { 3021af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker listener.onProgress(100); 3031af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3041af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 305cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker if (interrupted) { 306cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker throw new SignatureException("verification was interrupted"); 307cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker } 308cb95657326add53f81cd2f8a0ae0a1a0527ae799Doug Zongker 3091af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (!sig.verify(sigInfo.getEncryptedDigest())) { 3101af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new SignatureException("signature digest verification failed"); 3111af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3121af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } finally { 3131af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker raf.close(); 3141af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3151af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3161af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 3171af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** 3181af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Reboots the device in order to install the given update 3191af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * package. 32064010e835057d4b85e2d90cf75cc562f3b5eb552Jeff Brown * Requires the {@link android.Manifest.permission#REBOOT} permission. 3211af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 3221af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @param context the Context to use 3234baf641e7d96375eba3f9a3aff5400b9e3d28cd6Doug Zongker * @param packageFile the update package to install. Must be on 3244baf641e7d96375eba3f9a3aff5400b9e3d28cd6Doug Zongker * a partition mountable by recovery. (The set of partitions 3254baf641e7d96375eba3f9a3aff5400b9e3d28cd6Doug Zongker * known to recovery may vary from device to device. Generally, 3264baf641e7d96375eba3f9a3aff5400b9e3d28cd6Doug Zongker * /cache and /data are safe.) 3271af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 3281af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @throws IOException if writing the recovery command file 3291af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * fails, or if the reboot itself fails. 3301af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 3311af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker public static void installPackage(Context context, File packageFile) 3321af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throws IOException { 3331af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker String filename = packageFile.getCanonicalPath(); 3341af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker Log.w(TAG, "!!! REBOOTING TO INSTALL " + filename + " !!!"); 335e33b4007ee56e843d5e99cfb92627425a551058dDoug Zongker String arg = "--update_package=" + filename + 336e33b4007ee56e843d5e99cfb92627425a551058dDoug Zongker "\n--locale=" + Locale.getDefault().toString(); 3371af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker bootCommand(context, arg); 3381af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3391af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 3401af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** 3411af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Reboots the device and wipes the user data partition. This is 3421af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * sometimes called a "factory reset", which is something of a 3431af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * misnomer because the system partition is not restored to its 3441af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * factory state. 34564010e835057d4b85e2d90cf75cc562f3b5eb552Jeff Brown * Requires the {@link android.Manifest.permission#REBOOT} permission. 3461af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 3471af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @param context the Context to use 3481af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 3491af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @throws IOException if writing the recovery command file 3501af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * fails, or if the reboot itself fails. 3511af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 3524ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks public static void rebootWipeUserData(Context context) throws IOException { 3534ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks final ConditionVariable condition = new ConditionVariable(); 3544ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks 3554ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks Intent intent = new Intent("android.intent.action.MASTER_CLEAR_NOTIFICATION"); 3565ac72a29593ab9a20337a2225df52bdf4754be02Dianne Hackborn context.sendOrderedBroadcastAsUser(intent, UserHandle.OWNER, 3575ac72a29593ab9a20337a2225df52bdf4754be02Dianne Hackborn android.Manifest.permission.MASTER_CLEAR, 3584ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks new BroadcastReceiver() { 3594ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks @Override 3604ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks public void onReceive(Context context, Intent intent) { 3614ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks condition.open(); 3624ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks } 3634ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks }, null, 0, null, null); 3644ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks 3654ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks // Block until the ordered broadcast has completed. 3664ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks condition.block(); 3674ca74dc4c2e0c68803e777cf47ed8e01b8e8444eJason parks 368e33b4007ee56e843d5e99cfb92627425a551058dDoug Zongker bootCommand(context, "--wipe_data\n--locale=" + Locale.getDefault().toString()); 3691af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3701af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 3711af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** 37233651201375d3670672964503994c410b8eeed7bDoug Zongker * Reboot into the recovery system to wipe the /cache partition. 3731af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @throws IOException if something goes wrong. 3741af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 37533651201375d3670672964503994c410b8eeed7bDoug Zongker public static void rebootWipeCache(Context context) throws IOException { 376e33b4007ee56e843d5e99cfb92627425a551058dDoug Zongker bootCommand(context, "--wipe_cache\n--locale=" + Locale.getDefault().toString()); 3771af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3781af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 3791af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** 3801af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Reboot into the recovery system with the supplied argument. 3811af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @param arg to pass to the recovery utility. 3821af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @throws IOException if something goes wrong. 3831af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 3841af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker private static void bootCommand(Context context, String arg) throws IOException { 3851af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker RECOVERY_DIR.mkdirs(); // In case we need it 3861af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker COMMAND_FILE.delete(); // In case it's not writable 3871af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker LOG_FILE.delete(); 3881af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 3891af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker FileWriter command = new FileWriter(COMMAND_FILE); 3901af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker try { 3911af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker command.write(arg); 3921af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker command.write("\n"); 3931af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } finally { 3941af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker command.close(); 3951af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 3961af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 3971af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // Having written the command file, go ahead and reboot 3981af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker PowerManager pm = (PowerManager) context.getSystemService(Context.POWER_SERVICE); 3991af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker pm.reboot("recovery"); 4001af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 4011af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker throw new IOException("Reboot failed (no permissions?)"); 4021af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 4031af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 4041af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker /** 4051af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * Called after booting to process and remove recovery-related files. 4061af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @return the log file from recovery, or null if none was found. 4071af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * 4081af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker * @hide 4091af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker */ 4101af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker public static String handleAftermath() { 4111af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker // Record the tail of the LOG_FILE 4121af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker String log = null; 4131af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker try { 4141af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker log = FileUtils.readTextFile(LOG_FILE, -LOG_FILE_MAX_LENGTH, "...\n"); 4151af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } catch (FileNotFoundException e) { 4161af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker Log.i(TAG, "No recovery log file"); 4171af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } catch (IOException e) { 4181af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker Log.e(TAG, "Error reading recovery log", e); 4191af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 4201af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 4213d5040f8d474713a1e148b0d64f16bb0435d6388Doug Zongker // Delete everything in RECOVERY_DIR except those beginning 4223d5040f8d474713a1e148b0d64f16bb0435d6388Doug Zongker // with LAST_PREFIX 4231af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker String[] names = RECOVERY_DIR.list(); 4241af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker for (int i = 0; names != null && i < names.length; i++) { 4253d5040f8d474713a1e148b0d64f16bb0435d6388Doug Zongker if (names[i].startsWith(LAST_PREFIX)) continue; 4261af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker File f = new File(RECOVERY_DIR, names[i]); 4271af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker if (!f.delete()) { 4281af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker Log.e(TAG, "Can't delete: " + f); 4291af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } else { 4301af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker Log.i(TAG, "Deleted: " + f); 4311af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 4321af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 4331af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 4341af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker return log; 4351af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker } 4361af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker 4371af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker private void RecoverySystem() { } // Do not instantiate 4381af33d0ddc2f50ade146e4d48e2feb6f1d553427Doug Zongker} 439