1#!/usr/bin/env python 2 3# 4# Copyright (C) 2016 The Android Open Source Project 5# 6# Permission is hereby granted, free of charge, to any person 7# obtaining a copy of this software and associated documentation 8# files (the "Software"), to deal in the Software without 9# restriction, including without limitation the rights to use, copy, 10# modify, merge, publish, distribute, sublicense, and/or sell copies 11# of the Software, and to permit persons to whom the Software is 12# furnished to do so, subject to the following conditions: 13# 14# The above copyright notice and this permission notice shall be 15# included in all copies or substantial portions of the Software. 16# 17# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, 18# EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF 19# MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND 20# NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS 21# BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN 22# ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN 23# CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE 24# SOFTWARE. 25# 26 27# This shell-script checks the symbols in libavb.a and fails 28# if a reference not starting with avb_ is referenced. It's intended 29# to catch mistakes where the standard C library is inadvertently 30# used. 31 32import subprocess 33import sys 34import errno 35import os 36 37def rsa_signer(argv): 38 if len(argv) != 3: 39 sys.stderr.write("Wrong number of arguments: {} <alg> <pub key>\n".format(argv[0])) 40 return errno.EINVAL 41 42 data = sys.stdin.read() 43 if len(data) == 0: 44 sys.stderr.write("There is not input data\n") 45 return errno.EINVAL 46 47 if os.environ.get('SIGNING_HELPER_GENERATE_WRONG_SIGNATURE'): 48 # We're only called with this algorithm which signature size is 256. 49 assert sys.argv[1] == 'SHA256_RSA2048' 50 sys.stdout.write('X'*256) 51 return 0 52 53 if 'SIGNING_HELPER_TEST' not in os.environ or os.environ['SIGNING_HELPER_TEST'] == "": 54 sys.stderr.write("env SIGNING_HELPER_TEST is not set or empty\n") 55 return errno.EINVAL 56 57 test_file_name = os.environ['SIGNING_HELPER_TEST'] 58 if os.path.isfile(test_file_name) and not os.access(test_file_name, os.W_OK): 59 sys.stderr.write("no permission to write into {} file\n".format(test_file_name)) 60 return errno.EACCESS 61 62 p = subprocess.Popen( 63 ['openssl', 'rsautl', '-sign', '-inkey', argv[2], '-raw'], 64 stdin=subprocess.PIPE) 65 66 p.communicate(data) 67 retcode = p.wait() 68 if retcode != 0: 69 return retcode 70 71 with open(test_file_name, "w") as f: 72 f.write("DONE") 73 74 return 0 75 76if __name__ == '__main__': 77 sys.exit(rsa_signer(sys.argv)) 78