/* * Copyright (C) 2016 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #define LOG_TAG "keymaster" #include #include #include namespace keymaster { namespace { constexpr char kPlatformVersionProp[] = "ro.build.version.release"; constexpr char kPlatformVersionRegex[] = "^([0-9]{1,2})(\\.([0-9]{1,2}))?(\\.([0-9]{1,2}))?"; constexpr size_t kMajorVersionMatch = 1; constexpr size_t kMinorVersionMatch = 3; constexpr size_t kSubminorVersionMatch = 5; constexpr size_t kPlatformVersionMatchCount = kSubminorVersionMatch + 1; constexpr char kPlatformPatchlevelProp[] = "ro.build.version.security_patch"; constexpr char kVendorPatchlevelProp[] = "ro.vendor.build.security_patch"; constexpr char kPatchlevelRegex[] = "^([0-9]{4})-([0-9]{2})-([0-9]{2})$"; constexpr size_t kYearMatch = 1; constexpr size_t kMonthMatch = 2; constexpr size_t kDayMatch = 3; constexpr size_t kPatchlevelMatchCount = kDayMatch + 1; uint32_t match_to_uint32(const char* expression, const regmatch_t& match) { if (match.rm_so == -1) return 0; size_t len = match.rm_eo - match.rm_so; std::string s(expression + match.rm_so, len); return std::stoul(s); } std::string wait_and_get_property(const char* prop) { std::string prop_value; #ifndef KEYMASTER_UNIT_TEST_BUILD while (!android::base::WaitForPropertyCreation(prop)) { SLOGE("waited 15s for %s, still waiting...", prop); } prop_value = android::base::GetProperty(prop, "" /* default */); #endif return prop_value; } enum class PatchlevelOutput { kYearMonthDay, kYearMonth }; uint32_t GetPatchlevel(const char* patchlevel_str, PatchlevelOutput detail) { regex_t regex; if (regcomp(®ex, kPatchlevelRegex, REG_EXTENDED) != 0) { ALOGE("Failed to compile platform patchlevel regex! (%s)", kPatchlevelRegex); return 0; } regmatch_t matches[kPatchlevelMatchCount]; int not_match = regexec(®ex, patchlevel_str, kPatchlevelMatchCount, matches, 0 /* flags */); regfree(®ex); if (not_match) { ALOGI(" patchlevel string does not match expected format. Using patchlevel 0"); return 0; } uint32_t year = match_to_uint32(patchlevel_str, matches[kYearMatch]); uint32_t month = match_to_uint32(patchlevel_str, matches[kMonthMatch]); if (month < 1 || month > 12) { ALOGE("Invalid patch month %d", month); return 0; } switch (detail) { case PatchlevelOutput::kYearMonthDay: { uint32_t day = match_to_uint32(patchlevel_str, matches[kDayMatch]); if (day < 1 || day > 31) { ALOGE("Invalid patch day %d", day); return 0; } return year * 10000 + month * 100 + day; } case PatchlevelOutput::kYearMonth: return year * 100 + month; } return 0; } } // anonymous namespace keymaster_error_t ConfigureDevice(keymaster2_device_t* dev, uint32_t os_version, uint32_t os_patchlevel) { AuthorizationSet config_params(AuthorizationSetBuilder() .Authorization(keymaster::TAG_OS_VERSION, os_version) .Authorization(keymaster::TAG_OS_PATCHLEVEL, os_patchlevel)); return dev->configure(dev, &config_params); } keymaster_error_t ConfigureDevice(keymaster2_device_t* dev) { return ConfigureDevice(dev, GetOsVersion(), GetOsPatchlevel()); } uint32_t GetOsVersion(const char* version_str) { regex_t regex; if (regcomp(®ex, kPlatformVersionRegex, REG_EXTENDED)) { ALOGE("Failed to compile version regex! (%s)", kPlatformVersionRegex); return 0; } regmatch_t matches[kPlatformVersionMatchCount]; int not_match = regexec(®ex, version_str, kPlatformVersionMatchCount, matches, 0 /* flags */); regfree(®ex); if (not_match) { ALOGI("Platform version string \"%s\" does not match expected format. Using version 0.", version_str); return 0; } uint32_t major = match_to_uint32(version_str, matches[kMajorVersionMatch]); uint32_t minor = match_to_uint32(version_str, matches[kMinorVersionMatch]); uint32_t subminor = match_to_uint32(version_str, matches[kSubminorVersionMatch]); return (major * 100 + minor) * 100 + subminor; } uint32_t GetOsVersion() { std::string version = wait_and_get_property(kPlatformVersionProp); return GetOsVersion(version.c_str()); } uint32_t GetOsPatchlevel(const char* patchlevel_str) { return GetPatchlevel(patchlevel_str, PatchlevelOutput::kYearMonth); } uint32_t GetOsPatchlevel() { std::string patchlevel = wait_and_get_property(kPlatformPatchlevelProp); return GetOsPatchlevel(patchlevel.c_str()); } uint32_t GetVendorPatchlevel() { std::string patchlevel = wait_and_get_property(kVendorPatchlevelProp); return GetPatchlevel(patchlevel.c_str(), PatchlevelOutput::kYearMonthDay); } } // namespace keymaster