/* * Copyright (C) 2016 The Android Open Source Project * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include #include #include #include #define LOG_TAG "keymaster" #include #ifndef KEYMASTER_UNIT_TEST_BUILD #include #else #define PROPERTY_VALUE_MAX 80 /* Value doesn't matter */ void property_get(const char* /* prop_name */, char* /* prop */, const char* /* default */) {} #endif #include namespace keymaster { namespace { constexpr char kPlatformVersionProp[] = "ro.build.version.release"; constexpr char kPlatformVersionRegex[] = "^([0-9]{1,2})(\\.([0-9]{1,2}))?(\\.([0-9]{1,2}))?"; constexpr size_t kMajorVersionMatch = 1; constexpr size_t kMinorVersionMatch = 3; constexpr size_t kSubminorVersionMatch = 5; constexpr size_t kPlatformVersionMatchCount = kSubminorVersionMatch + 1; constexpr char kPlatformPatchlevelProp[] = "ro.build.version.security_patch"; constexpr char kPlatformPatchlevelRegex[] = "^([0-9]{4})-([0-9]{2})-[0-9]{2}$"; constexpr size_t kYearMatch = 1; constexpr size_t kMonthMatch = 2; constexpr size_t kPlatformPatchlevelMatchCount = kMonthMatch + 1; uint32_t match_to_uint32(const char* expression, const regmatch_t& match) { if (match.rm_so == -1) return 0; size_t len = match.rm_eo - match.rm_so; std::string s(expression + match.rm_so, len); return std::stoul(s); } } // anonymous namespace keymaster_error_t ConfigureDevice(keymaster2_device_t* dev, uint32_t os_version, uint32_t os_patchlevel) { AuthorizationSet config_params(AuthorizationSetBuilder() .Authorization(keymaster::TAG_OS_VERSION, os_version) .Authorization(keymaster::TAG_OS_PATCHLEVEL, os_patchlevel)); return dev->configure(dev, &config_params); } keymaster_error_t ConfigureDevice(keymaster2_device_t* dev) { char version_str[PROPERTY_VALUE_MAX]; property_get(kPlatformVersionProp, version_str, "" /* default */); uint32_t version = GetOsVersion(version_str); char patchlevel_str[PROPERTY_VALUE_MAX]; property_get(kPlatformPatchlevelProp, patchlevel_str, "" /* default */); uint32_t patchlevel = GetOsPatchlevel(patchlevel_str); return ConfigureDevice(dev, version, patchlevel); } uint32_t GetOsVersion(const char* version_str) { regex_t regex; if (regcomp(®ex, kPlatformVersionRegex, REG_EXTENDED)) { ALOGE("Failed to compile version regex! (%s)", kPlatformVersionRegex); return 0; } regmatch_t matches[kPlatformVersionMatchCount]; if (regexec(®ex, version_str, kPlatformVersionMatchCount, matches, 0 /* flags */)) { ALOGI("Platform version string does not match expected format. Using version 0."); return 0; } uint32_t major = match_to_uint32(version_str, matches[kMajorVersionMatch]); uint32_t minor = match_to_uint32(version_str, matches[kMinorVersionMatch]); uint32_t subminor = match_to_uint32(version_str, matches[kSubminorVersionMatch]); return (major * 100 + minor) * 100 + subminor; } uint32_t GetOsPatchlevel(const char* patchlevel_str) { regex_t regex; if (regcomp(®ex, kPlatformPatchlevelRegex, REG_EXTENDED) != 0) { ALOGE("Failed to compile platform patchlevel regex! (%s)", kPlatformPatchlevelRegex); return 0; } regmatch_t matches[kPlatformPatchlevelMatchCount]; if (regexec(®ex, patchlevel_str, kPlatformPatchlevelMatchCount, matches, 0 /* flags */)) { ALOGI("Platform patchlevel string does not match expected format. Using patchlevel 0"); return 0; } uint32_t year = match_to_uint32(patchlevel_str, matches[kYearMatch]); uint32_t month = match_to_uint32(patchlevel_str, matches[kMonthMatch]); if (month < 1 || month > 12) { ALOGE("Invalid patch month %d", month); return 0; } return year * 100 + month; } } // namespace keymaster