diff options
author | Kelvin Zhang <zhangkelvin@google.com> | 2021-05-14 23:15:50 +0200 |
---|---|---|
committer | Kelvin Zhang <zhangkelvin@google.com> | 2021-05-19 22:58:02 +0200 |
commit | e63122520489f969280db2725fabd580def4f97c (patch) | |
tree | 9d371e32a721ab29ec0e1c860a46a1ea1dcf7b92 /install/install.cpp | |
parent | Import translations. DO NOT MERGE ANYWHERE (diff) | |
download | android_bootable_recovery-e63122520489f969280db2725fabd580def4f97c.tar android_bootable_recovery-e63122520489f969280db2725fabd580def4f97c.tar.gz android_bootable_recovery-e63122520489f969280db2725fabd580def4f97c.tar.bz2 android_bootable_recovery-e63122520489f969280db2725fabd580def4f97c.tar.lz android_bootable_recovery-e63122520489f969280db2725fabd580def4f97c.tar.xz android_bootable_recovery-e63122520489f969280db2725fabd580def4f97c.tar.zst android_bootable_recovery-e63122520489f969280db2725fabd580def4f97c.zip |
Diffstat (limited to '')
-rw-r--r-- | install/install.cpp | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/install/install.cpp b/install/install.cpp index 1b220cb39..6e74f80ab 100644 --- a/install/install.cpp +++ b/install/install.cpp @@ -47,6 +47,7 @@ #include <android-base/unique_fd.h> #include "install/package.h" +#include "install/spl_check.h" #include "install/verifier.h" #include "install/wipe_data.h" #include "otautil/error_code.h" @@ -348,6 +349,12 @@ static InstallResult TryUpdateBinary(Package* package, bool* wipe_cache, android::base::GetBoolProperty("ro.virtual_ab.allow_non_ab", false); bool device_only_supports_ab = device_supports_ab && !ab_device_supports_nonab; + const auto current_spl = android::base::GetProperty("ro.build.version.security_patch", ""); + if (ViolatesSPLDowngrade(zip, current_spl)) { + LOG(ERROR) << "Denying OTA because it's SPL downgrade"; + return INSTALL_ERROR; + } + if (package_is_ab) { CHECK(package->GetType() == PackageType::kFile); } |