Check for build-tags before installing sideload OTA

Only allow test-key OTA to be installed on test-key devices,
and only allow release-key OTA to be installed on release-key devices.

Test: sideload recovery OTA
Bug: 314013134
Change-Id: I6609923929247ab498d3a315637765ae2d1370b0
This commit is contained in:
Kelvin Zhang 2024-03-18 10:24:10 -07:00
parent 5aee6aca72
commit e366fe9f01

View file

@ -189,6 +189,17 @@ static bool CheckAbSpecificMetadata(const std::map<std::string, std::string>& me
return false; return false;
} }
} }
const auto post_build = get_value(metadata, "post-build");
const auto build_fingerprint = android::base::Tokenize(post_build, "/");
if (!build_fingerprint.empty()) {
const auto& post_build_tag = build_fingerprint.back();
const auto build_tag = android::base::GetProperty("ro.build.tags", "");
if (build_tag != post_build_tag) {
LOG(ERROR) << "Post build-tag " << post_build_tag << " does not match device build tag "
<< build_tag;
return false;
}
}
return true; return true;
} }