Tianjie Xu 54ea136fde Add a checker for signature boundary in verifier ...

The 'signature_start' variable marks the location of the signature
from the end of a zip archive. And a boundary check is missing where
'signature_start' should be within the EOCD comment field. This causes
problems when sideloading a malicious package. Also add a corresponding
test.

Bug: 31914369
Test: Verification fails correctly when sideloading recovery_test.zip on
angler.

Change-Id: I6ea96bf04dac5d8d4d6719e678d504f957b4d5c1
(cherry-picked from f69e6a9475)

2016-12-16 16:24:09 -08:00

applypatch

Use more aggressive sync writing to applypatch.

2014-10-29 13:00:21 -07:00

edify

clean up some warnings when building recovery

2014-02-13 15:34:18 -08:00

etc

Bump up max_map_count value.

2015-02-25 22:47:26 +00:00

fonts

more font improvements and cleanup

2013-03-07 13:34:24 -08:00

minadbd

refactor fuse sideloading code

2014-07-10 10:55:07 -07:00

minui

minui: avoid random screen frame at startup

2014-06-12 11:06:52 -07:00

minzip

Fix integer overflows in recovery procedure.

2016-02-22 17:42:02 -08:00

mtdutils

remove pixelflinger from recovery

2014-03-11 14:40:04 -07:00

res-hdpi/images

restore holo UI in recovery

2014-06-06 09:01:57 -07:00

res-mdpi/images

restore holo UI in recovery

2014-06-06 09:01:57 -07:00

res-xhdpi/images

restore holo UI in recovery

2014-06-06 09:01:57 -07:00

res-xxhdpi/images

restore holo UI in recovery

2014-06-06 09:01:57 -07:00

res-xxxhdpi/images

restore holo UI in recovery

2014-06-06 09:01:57 -07:00

testdata

Add support for ECDSA signatures

2013-10-10 14:19:19 -07:00

tests

Add support for ECDSA signatures

2013-10-10 14:19:19 -07:00

tools

Recovery 64-bit compile issues

2014-03-14 13:51:39 -07:00

uncrypt

create block map for all update packages on /data

2014-09-05 08:22:12 -07:00

updater

Log mount/unmount errors to UI

2014-10-24 14:14:41 -07:00

adb_install.cpp

refactor fuse sideloading code

2014-07-10 10:55:07 -07:00

adb_install.h

support "sideload over ADB" mode

2012-01-10 10:18:17 -08:00

Android.mk

do sdcard sideloading through the fuse filesystem

2014-07-10 10:58:35 -07:00

asn1_decoder.cpp

Add support for ECDSA signatures

2013-10-10 14:19:19 -07:00

asn1_decoder.h

Add support for ECDSA signatures

2013-10-10 14:19:19 -07:00

bootloader.cpp

Move to using the new unified fstab in recovery.

2013-02-19 17:37:22 -08:00

bootloader.h

add the functions for multi-stage packages to updater

2013-11-26 15:46:57 -08:00

CleanSpec.mk

recovery: minui: add adf backend

2014-04-25 15:47:34 -07:00

common.h

recovery: turn on text display for install errors in debug builds

2013-05-16 10:47:02 -07:00

default_device.cpp

Make /cache/recovery/last_log available in recovery

2014-10-22 21:43:08 -07:00

device.h

Make /cache/recovery/last_log available in recovery

2014-10-22 21:43:08 -07:00

fuse_sdcard_provider.c

do sdcard sideloading through the fuse filesystem

2014-07-10 10:58:35 -07:00

fuse_sdcard_provider.h

do sdcard sideloading through the fuse filesystem

2014-07-10 10:58:35 -07:00

fuse_sideload.c

refactor fuse sideloading code

2014-07-10 10:55:07 -07:00

fuse_sideload.h

refactor fuse sideloading code

2014-07-10 10:55:07 -07:00

install.cpp

sideload without holding the whole package in RAM

2014-07-02 12:16:36 -07:00

install.h

sideload without holding the whole package in RAM

2014-07-02 12:16:36 -07:00

interlace-frames.py

update tools for making recovery images

2014-03-11 14:29:50 -07:00

NOTICE

Automated import from //branches/master/...@140824,140824

2009-03-24 18:36:42 -07:00

recovery.cpp

Make /cache/recovery/last_log available in recovery

2014-10-22 21:43:08 -07:00

roots.cpp

Erase PST partition if its marked to be erased.

2014-08-06 09:58:55 -07:00

roots.h

Erase PST partition if its marked to be erased.

2014-08-06 09:58:55 -07:00

screen_ui.cpp

restore holo UI in recovery

2014-06-06 09:01:57 -07:00

screen_ui.h

restore holo UI in recovery

2014-06-06 09:01:57 -07:00

ui.cpp

am 54a61179: am cfd4b286: Merge "recovery: initialize keys press tracking status"

2014-06-06 16:00:20 +00:00

ui.h

disable async reboot during package installation

2014-05-23 08:52:31 -07:00

verifier_test.cpp

do verification and extraction on memory, not files

2014-01-16 13:29:28 -08:00

verifier_test.sh

Add support for ECDSA signatures

2013-10-10 14:19:19 -07:00

verifier.cpp

Add a checker for signature boundary in verifier

2016-12-16 16:24:09 -08:00

verifier.h

do verification and extraction on memory, not files

2014-01-16 13:29:28 -08:00

Description

No description provided

102 MiB

Languages

C++ 50.2%

C 43.6%

Makefile 1.9%

Java 1.8%

Roff 1%

Other 1.4%