1*d57664e9SAndroid Build Coastguard Worker /*
2*d57664e9SAndroid Build Coastguard Worker * Copyright (C) 2019 The Android Open Source Project
3*d57664e9SAndroid Build Coastguard Worker *
4*d57664e9SAndroid Build Coastguard Worker * Licensed under the Apache License, Version 2.0 (the "License");
5*d57664e9SAndroid Build Coastguard Worker * you may not use this file except in compliance with the License.
6*d57664e9SAndroid Build Coastguard Worker * You may obtain a copy of the License at
7*d57664e9SAndroid Build Coastguard Worker *
8*d57664e9SAndroid Build Coastguard Worker * http://www.apache.org/licenses/LICENSE-2.0
9*d57664e9SAndroid Build Coastguard Worker *
10*d57664e9SAndroid Build Coastguard Worker * Unless required by applicable law or agreed to in writing, software
11*d57664e9SAndroid Build Coastguard Worker * distributed under the License is distributed on an "AS IS" BASIS,
12*d57664e9SAndroid Build Coastguard Worker * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13*d57664e9SAndroid Build Coastguard Worker * See the License for the specific language governing permissions and
14*d57664e9SAndroid Build Coastguard Worker * limitations under the License.
15*d57664e9SAndroid Build Coastguard Worker */
16*d57664e9SAndroid Build Coastguard Worker
17*d57664e9SAndroid Build Coastguard Worker #include "idmap2/ResourceMapping.h"
18*d57664e9SAndroid Build Coastguard Worker
19*d57664e9SAndroid Build Coastguard Worker #include <map>
20*d57664e9SAndroid Build Coastguard Worker #include <memory>
21*d57664e9SAndroid Build Coastguard Worker #include <set>
22*d57664e9SAndroid Build Coastguard Worker #include <string>
23*d57664e9SAndroid Build Coastguard Worker #include <utility>
24*d57664e9SAndroid Build Coastguard Worker #include <vector>
25*d57664e9SAndroid Build Coastguard Worker
26*d57664e9SAndroid Build Coastguard Worker #include "android-base/stringprintf.h"
27*d57664e9SAndroid Build Coastguard Worker #include "androidfw/ResourceTypes.h"
28*d57664e9SAndroid Build Coastguard Worker #include "idmap2/PolicyUtils.h"
29*d57664e9SAndroid Build Coastguard Worker #include "idmap2/ResourceUtils.h"
30*d57664e9SAndroid Build Coastguard Worker
31*d57664e9SAndroid Build Coastguard Worker using android::base::StringPrintf;
32*d57664e9SAndroid Build Coastguard Worker using android::idmap2::utils::BitmaskToPolicies;
33*d57664e9SAndroid Build Coastguard Worker using PolicyBitmask = android::ResTable_overlayable_policy_header::PolicyBitmask;
34*d57664e9SAndroid Build Coastguard Worker using PolicyFlags = android::ResTable_overlayable_policy_header::PolicyFlags;
35*d57664e9SAndroid Build Coastguard Worker
36*d57664e9SAndroid Build Coastguard Worker namespace android::idmap2 {
37*d57664e9SAndroid Build Coastguard Worker
38*d57664e9SAndroid Build Coastguard Worker namespace {
ConcatPolicies(const std::vector<std::string> & policies)39*d57664e9SAndroid Build Coastguard Worker std::string ConcatPolicies(const std::vector<std::string>& policies) {
40*d57664e9SAndroid Build Coastguard Worker std::string message;
41*d57664e9SAndroid Build Coastguard Worker for (const std::string& policy : policies) {
42*d57664e9SAndroid Build Coastguard Worker if (!message.empty()) {
43*d57664e9SAndroid Build Coastguard Worker message.append("|");
44*d57664e9SAndroid Build Coastguard Worker }
45*d57664e9SAndroid Build Coastguard Worker message.append(policy);
46*d57664e9SAndroid Build Coastguard Worker }
47*d57664e9SAndroid Build Coastguard Worker
48*d57664e9SAndroid Build Coastguard Worker return message;
49*d57664e9SAndroid Build Coastguard Worker }
50*d57664e9SAndroid Build Coastguard Worker
CheckOverlayable(const TargetResourceContainer & target,const OverlayManifestInfo & overlay_info,const PolicyBitmask & fulfilled_policies,const ResourceId & target_resource)51*d57664e9SAndroid Build Coastguard Worker Result<Unit> CheckOverlayable(const TargetResourceContainer& target,
52*d57664e9SAndroid Build Coastguard Worker const OverlayManifestInfo& overlay_info,
53*d57664e9SAndroid Build Coastguard Worker const PolicyBitmask& fulfilled_policies,
54*d57664e9SAndroid Build Coastguard Worker const ResourceId& target_resource) {
55*d57664e9SAndroid Build Coastguard Worker constexpr const PolicyBitmask kDefaultPolicies =
56*d57664e9SAndroid Build Coastguard Worker PolicyFlags::ODM_PARTITION | PolicyFlags::OEM_PARTITION | PolicyFlags::SYSTEM_PARTITION |
57*d57664e9SAndroid Build Coastguard Worker PolicyFlags::VENDOR_PARTITION | PolicyFlags::PRODUCT_PARTITION | PolicyFlags::SIGNATURE |
58*d57664e9SAndroid Build Coastguard Worker PolicyFlags::CONFIG_SIGNATURE;
59*d57664e9SAndroid Build Coastguard Worker
60*d57664e9SAndroid Build Coastguard Worker // If the resource does not have an overlayable definition, allow the resource to be overlaid if
61*d57664e9SAndroid Build Coastguard Worker // the overlay is preinstalled, signed with the same signature as the target or signed with the
62*d57664e9SAndroid Build Coastguard Worker // same signature as reference package defined in SystemConfig under 'overlay-config-signature'
63*d57664e9SAndroid Build Coastguard Worker // tag.
64*d57664e9SAndroid Build Coastguard Worker const Result<bool> defines_overlayable = target.DefinesOverlayable();
65*d57664e9SAndroid Build Coastguard Worker if (!defines_overlayable) {
66*d57664e9SAndroid Build Coastguard Worker return Error(defines_overlayable.GetError(), "unable to retrieve overlayable info");
67*d57664e9SAndroid Build Coastguard Worker }
68*d57664e9SAndroid Build Coastguard Worker
69*d57664e9SAndroid Build Coastguard Worker if (!*defines_overlayable) {
70*d57664e9SAndroid Build Coastguard Worker return (kDefaultPolicies & fulfilled_policies) != 0
71*d57664e9SAndroid Build Coastguard Worker ? Result<Unit>({})
72*d57664e9SAndroid Build Coastguard Worker : Error(
73*d57664e9SAndroid Build Coastguard Worker "overlay must be preinstalled, signed with the same signature as the target,"
74*d57664e9SAndroid Build Coastguard Worker " or signed with the same signature as the package referenced through"
75*d57664e9SAndroid Build Coastguard Worker " <overlay-config-signature>.");
76*d57664e9SAndroid Build Coastguard Worker }
77*d57664e9SAndroid Build Coastguard Worker
78*d57664e9SAndroid Build Coastguard Worker const auto overlayable_info = target.GetOverlayableInfo(target_resource);
79*d57664e9SAndroid Build Coastguard Worker if (!overlayable_info) {
80*d57664e9SAndroid Build Coastguard Worker return overlayable_info.GetError();
81*d57664e9SAndroid Build Coastguard Worker }
82*d57664e9SAndroid Build Coastguard Worker
83*d57664e9SAndroid Build Coastguard Worker if (*overlayable_info == nullptr) {
84*d57664e9SAndroid Build Coastguard Worker // Do not allow non-overlayable resources to be overlaid.
85*d57664e9SAndroid Build Coastguard Worker return Error("target resource has no overlayable declaration");
86*d57664e9SAndroid Build Coastguard Worker }
87*d57664e9SAndroid Build Coastguard Worker
88*d57664e9SAndroid Build Coastguard Worker if (overlay_info.target_name != (*overlayable_info)->name) {
89*d57664e9SAndroid Build Coastguard Worker // If the overlay supplies a target overlayable name, the resource must belong to the
90*d57664e9SAndroid Build Coastguard Worker // overlayable defined with the specified name to be overlaid.
91*d57664e9SAndroid Build Coastguard Worker return Error(R"(<overlay> android:targetName "%s" does not match overlayable name "%s")",
92*d57664e9SAndroid Build Coastguard Worker overlay_info.target_name.c_str(), (*overlayable_info)->name.data());
93*d57664e9SAndroid Build Coastguard Worker }
94*d57664e9SAndroid Build Coastguard Worker
95*d57664e9SAndroid Build Coastguard Worker // Enforce policy restrictions if the resource is declared as overlayable.
96*d57664e9SAndroid Build Coastguard Worker if (((*overlayable_info)->policy_flags & fulfilled_policies) == 0) {
97*d57664e9SAndroid Build Coastguard Worker return Error(R"(overlay with policies "%s" does not fulfill any overlayable policies "%s")",
98*d57664e9SAndroid Build Coastguard Worker ConcatPolicies(BitmaskToPolicies(fulfilled_policies)).c_str(),
99*d57664e9SAndroid Build Coastguard Worker ConcatPolicies(BitmaskToPolicies((*overlayable_info)->policy_flags)).c_str());
100*d57664e9SAndroid Build Coastguard Worker }
101*d57664e9SAndroid Build Coastguard Worker
102*d57664e9SAndroid Build Coastguard Worker return Result<Unit>({});
103*d57664e9SAndroid Build Coastguard Worker }
104*d57664e9SAndroid Build Coastguard Worker
GetDebugResourceName(const ResourceContainer & container,ResourceId resid)105*d57664e9SAndroid Build Coastguard Worker std::string GetDebugResourceName(const ResourceContainer& container, ResourceId resid) {
106*d57664e9SAndroid Build Coastguard Worker auto name = container.GetResourceName(resid);
107*d57664e9SAndroid Build Coastguard Worker if (name) {
108*d57664e9SAndroid Build Coastguard Worker return *name;
109*d57664e9SAndroid Build Coastguard Worker }
110*d57664e9SAndroid Build Coastguard Worker return StringPrintf("0x%08x", resid);
111*d57664e9SAndroid Build Coastguard Worker }
112*d57664e9SAndroid Build Coastguard Worker } // namespace
113*d57664e9SAndroid Build Coastguard Worker
FromContainers(const TargetResourceContainer & target,const OverlayResourceContainer & overlay,const OverlayManifestInfo & overlay_info,const PolicyBitmask & fulfilled_policies,bool enforce_overlayable,LogInfo & log_info)114*d57664e9SAndroid Build Coastguard Worker Result<ResourceMapping> ResourceMapping::FromContainers(const TargetResourceContainer& target,
115*d57664e9SAndroid Build Coastguard Worker const OverlayResourceContainer& overlay,
116*d57664e9SAndroid Build Coastguard Worker const OverlayManifestInfo& overlay_info,
117*d57664e9SAndroid Build Coastguard Worker const PolicyBitmask& fulfilled_policies,
118*d57664e9SAndroid Build Coastguard Worker bool enforce_overlayable,
119*d57664e9SAndroid Build Coastguard Worker LogInfo& log_info) {
120*d57664e9SAndroid Build Coastguard Worker auto overlay_data = overlay.GetOverlayData(overlay_info);
121*d57664e9SAndroid Build Coastguard Worker if (!overlay_data) {
122*d57664e9SAndroid Build Coastguard Worker return overlay_data.GetError();
123*d57664e9SAndroid Build Coastguard Worker }
124*d57664e9SAndroid Build Coastguard Worker
125*d57664e9SAndroid Build Coastguard Worker ResourceMapping mapping;
126*d57664e9SAndroid Build Coastguard Worker for (const auto& overlay_pair : overlay_data->pairs) {
127*d57664e9SAndroid Build Coastguard Worker const auto target_resid = target.GetResourceId(overlay_pair.resource_name);
128*d57664e9SAndroid Build Coastguard Worker if (!target_resid) {
129*d57664e9SAndroid Build Coastguard Worker log_info.Warning(LogMessage() << target_resid.GetErrorMessage());
130*d57664e9SAndroid Build Coastguard Worker continue;
131*d57664e9SAndroid Build Coastguard Worker }
132*d57664e9SAndroid Build Coastguard Worker
133*d57664e9SAndroid Build Coastguard Worker if (enforce_overlayable) {
134*d57664e9SAndroid Build Coastguard Worker // Filter out resources the overlay is not allowed to override.
135*d57664e9SAndroid Build Coastguard Worker auto overlayable = CheckOverlayable(target, overlay_info, fulfilled_policies, *target_resid);
136*d57664e9SAndroid Build Coastguard Worker if (!overlayable) {
137*d57664e9SAndroid Build Coastguard Worker log_info.Warning(LogMessage() << "overlay '" << overlay.GetPath()
138*d57664e9SAndroid Build Coastguard Worker << "' is not allowed to overlay resource '"
139*d57664e9SAndroid Build Coastguard Worker << GetDebugResourceName(target, *target_resid)
140*d57664e9SAndroid Build Coastguard Worker << "' in target: " << overlayable.GetErrorMessage());
141*d57664e9SAndroid Build Coastguard Worker continue;
142*d57664e9SAndroid Build Coastguard Worker }
143*d57664e9SAndroid Build Coastguard Worker }
144*d57664e9SAndroid Build Coastguard Worker
145*d57664e9SAndroid Build Coastguard Worker if (auto result = mapping.AddMapping(*target_resid, overlay_pair.value); !result) {
146*d57664e9SAndroid Build Coastguard Worker return Error(result.GetError(), "failed to add mapping for '%s'",
147*d57664e9SAndroid Build Coastguard Worker GetDebugResourceName(target, *target_resid).c_str());
148*d57664e9SAndroid Build Coastguard Worker }
149*d57664e9SAndroid Build Coastguard Worker }
150*d57664e9SAndroid Build Coastguard Worker
151*d57664e9SAndroid Build Coastguard Worker auto& string_pool_data = overlay_data->string_pool_data;
152*d57664e9SAndroid Build Coastguard Worker if (string_pool_data.has_value()) {
153*d57664e9SAndroid Build Coastguard Worker mapping.string_pool_offset_ = string_pool_data->string_pool_offset;
154*d57664e9SAndroid Build Coastguard Worker mapping.string_pool_data_ = std::move(string_pool_data->data);
155*d57664e9SAndroid Build Coastguard Worker mapping.string_pool_data_length_ = string_pool_data->data_length;
156*d57664e9SAndroid Build Coastguard Worker }
157*d57664e9SAndroid Build Coastguard Worker
158*d57664e9SAndroid Build Coastguard Worker return std::move(mapping);
159*d57664e9SAndroid Build Coastguard Worker }
160*d57664e9SAndroid Build Coastguard Worker
AddMapping(ResourceId target_resource,const std::variant<OverlayData::ResourceIdValue,TargetValueWithConfig> & value)161*d57664e9SAndroid Build Coastguard Worker Result<Unit> ResourceMapping::AddMapping(
162*d57664e9SAndroid Build Coastguard Worker ResourceId target_resource,
163*d57664e9SAndroid Build Coastguard Worker const std::variant<OverlayData::ResourceIdValue, TargetValueWithConfig>& value) {
164*d57664e9SAndroid Build Coastguard Worker // TODO(141485591): Ensure that the overlay type is compatible with the target type. If the
165*d57664e9SAndroid Build Coastguard Worker // runtime types are not compatible, it could cause runtime crashes when the resource is resolved.
166*d57664e9SAndroid Build Coastguard Worker
167*d57664e9SAndroid Build Coastguard Worker if (auto overlay_resource = std::get_if<OverlayData::ResourceIdValue>(&value)) {
168*d57664e9SAndroid Build Coastguard Worker if (target_map_.find(target_resource) != target_map_.end()) {
169*d57664e9SAndroid Build Coastguard Worker return Error(R"(target resource id "0x%08x" mapped to multiple values)", target_resource);
170*d57664e9SAndroid Build Coastguard Worker }
171*d57664e9SAndroid Build Coastguard Worker target_map_.insert(std::make_pair(target_resource, overlay_resource->overlay_id));
172*d57664e9SAndroid Build Coastguard Worker if (overlay_resource->rewrite_id) {
173*d57664e9SAndroid Build Coastguard Worker // An overlay resource can override multiple target resources at once. Rewrite the overlay
174*d57664e9SAndroid Build Coastguard Worker // resource as the first target resource it overrides.
175*d57664e9SAndroid Build Coastguard Worker overlay_map_.insert(std::make_pair(overlay_resource->overlay_id, target_resource));
176*d57664e9SAndroid Build Coastguard Worker }
177*d57664e9SAndroid Build Coastguard Worker } else {
178*d57664e9SAndroid Build Coastguard Worker auto[iter, inserted] = target_map_.try_emplace(target_resource, ConfigMap());
179*d57664e9SAndroid Build Coastguard Worker auto& resource_value = iter->second;
180*d57664e9SAndroid Build Coastguard Worker if (!inserted && std::holds_alternative<ResourceId>(resource_value)) {
181*d57664e9SAndroid Build Coastguard Worker return Error(R"(target resource id "0x%08x" mapped to multiple values)", target_resource);
182*d57664e9SAndroid Build Coastguard Worker }
183*d57664e9SAndroid Build Coastguard Worker auto& config_map = std::get<ConfigMap>(resource_value);
184*d57664e9SAndroid Build Coastguard Worker const auto& config_value = std::get<TargetValueWithConfig>(value);
185*d57664e9SAndroid Build Coastguard Worker if (config_map.find(config_value.config) != config_map.end()) {
186*d57664e9SAndroid Build Coastguard Worker return Error(R"(target resource id "0x%08x" mapped to multiple values with the same config)",
187*d57664e9SAndroid Build Coastguard Worker target_resource);
188*d57664e9SAndroid Build Coastguard Worker }
189*d57664e9SAndroid Build Coastguard Worker config_map.insert(config_value.to_pair());
190*d57664e9SAndroid Build Coastguard Worker }
191*d57664e9SAndroid Build Coastguard Worker
192*d57664e9SAndroid Build Coastguard Worker return Unit{};
193*d57664e9SAndroid Build Coastguard Worker }
194*d57664e9SAndroid Build Coastguard Worker
195*d57664e9SAndroid Build Coastguard Worker } // namespace android::idmap2
196