Tianjie Xu f616da1726 DO NOT MERGE: Add a checker for signature boundary in verifier ...

The 'signature_start' variable marks the location of the signature
from the end of a zip archive. And a boundary check is missing where
'signature_start' should be within the EOCD comment field. This causes
problems when sideloading a malicious package. Also add a corresponding
test.

Bug: 31914369
Test: Verification fails correctly when sideloading recovery_test.zip on
angler.

Change-Id: I6ea96bf04dac5d8d4d6719e678d504f957b4d5c1
(cherry-picked from f69e6a9475)
(cherry picked from commit 54ea136fde)

2016-12-19 16:46:44 -08:00

applypatch

fix unnecessarily slow writing of EMMC partitions

2013-12-19 15:16:57 -08:00

edify

recovery: move log output to stdout

2013-07-09 12:50:24 -07:00

etc

fix secure adb in recovery

2013-09-11 13:24:32 -07:00

fonts

more font improvements and cleanup

2013-03-07 13:34:24 -08:00

minadbd

minadbd: remove unnecessary header files.

2013-03-01 09:16:26 -08:00

minelf

remove retouching code from updater

2012-02-28 12:30:13 -08:00

minui

DO NOT MERGE Use updated libpng API

2016-05-17 20:28:54 +00:00

minzip

Revert "Update OTA installer to understand SELinux filesystem labels"

2013-09-09 10:47:14 -07:00

mtdutils

recovery: move log output to stdout

2013-07-09 12:50:24 -07:00

res/images

add the functions for multi-stage packages to updater

2013-11-26 15:46:57 -08:00

testdata

verifier: update to support certificates using SHA-256

2013-04-10 11:32:17 -07:00

tools

Fixed unused param warnings for check-lost+found

2012-08-21 16:03:46 -04:00

updater

Don't abort on read_file if the file is missing.

2013-12-13 17:13:11 -08:00

adb_install.cpp

support "sideload over ADB" mode

2012-01-10 10:18:17 -08:00

adb_install.h

support "sideload over ADB" mode

2012-01-10 10:18:17 -08:00

Android.mk

Track usage of Vector / SortedVector from libutils DO NOT MERGE

2015-09-09 10:42:10 +00:00

bootloader.cpp

Move to using the new unified fstab in recovery.

2013-02-19 17:37:22 -08:00

bootloader.h

add the functions for multi-stage packages to updater

2013-11-26 15:46:57 -08:00

CleanSpec.mk

Add a CleanSpec for bootable/recovery

2013-02-22 11:29:02 +00:00

common.h

recovery: turn on text display for install errors in debug builds

2013-05-16 10:47:02 -07:00

default_device.cpp

support "sideload over ADB" mode

2012-01-10 10:18:17 -08:00

device.h

support "sideload over ADB" mode

2012-01-10 10:18:17 -08:00

install.cpp

recovery: install packages in a known mount environment

2013-08-21 13:44:35 -07:00

install.h

add simple text to recovery UI

2012-08-22 17:26:40 -07:00

make-overlay.py

change the default recovery assets to be in holograph style

2011-03-02 10:38:02 -08:00

NOTICE

Automated import from //branches/master/...@140824,140824

2009-03-24 18:36:42 -07:00

recovery.cpp

add the functions for multi-stage packages to updater

2013-11-26 15:46:57 -08:00

roots.cpp

recovery: install packages in a known mount environment

2013-08-21 13:44:35 -07:00

roots.h

recovery: install packages in a known mount environment

2013-08-21 13:44:35 -07:00

screen_ui.cpp

add the functions for multi-stage packages to updater

2013-11-26 15:46:57 -08:00

screen_ui.h

add the functions for multi-stage packages to updater

2013-11-26 15:46:57 -08:00

ui.cpp

notify about pending long press

2013-07-31 11:35:12 -07:00

ui.h

add the functions for multi-stage packages to updater

2013-11-26 15:46:57 -08:00

verifier_test.cpp

recovery: turn on text display for install errors in debug builds

2013-05-16 10:47:02 -07:00

verifier_test.sh

verifier: update to support certificates using SHA-256

2013-04-10 11:32:17 -07:00

verifier.cpp

DO NOT MERGE: Add a checker for signature boundary in verifier

2016-12-19 16:46:44 -08:00

verifier.h

verifier: update to support certificates using SHA-256

2013-04-10 11:32:17 -07:00

S

Description

No description provided

102 MiB

Languages

C++ 50.2%

C 43.6%

Makefile 1.9%

Java 1.8%

Roff 1%

Other 1.4%