Detect shareduid between different partitions
Find shareduid usage between the partitions(system, vendor, product). Here is sample output { "android.uid.system": { "product": [ "Settings.apk" ], "system": [ "framework-res.apk", "FusedLocation.apk", "Telecom.apk", "InputDevices.apk", "SettingsProvider.apk", "WallpaperBackup.apk", "KeyChain.apk" ] } } Bug: 123664116 Test: m -j out/target/product/$(get_build_var TARGET_DEVICE)/shareduid_violation_modules.txt Change-Id: If2a75bf66b369cd3fad1744d08b6bfbfc624979c
This commit is contained in:
parent
664b72abfe
commit
ef26afdc27
2 changed files with 98 additions and 0 deletions
32
core/tasks/find-shareduid-violation.mk
Normal file
32
core/tasks/find-shareduid-violation.mk
Normal file
|
@ -0,0 +1,32 @@
|
|||
#
|
||||
# Copyright (C) 2019 The Android Open Source Project
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
|
||||
shareduid_violation_modules_filename := $(PRODUCT_OUT)/shareduid_violation_modules.json
|
||||
|
||||
find_shareduid_script := $(BUILD_SYSTEM)/tasks/find-shareduid-violation.py
|
||||
|
||||
$(shareduid_violation_modules_filename): $(INSTALLED_SYSTEMIMAGE_TARGET) \
|
||||
$(INSTALLED_RAMDISK_TARGET) \
|
||||
$(INSTALLED_BOOTIMAGE_TARGET) \
|
||||
$(INSTALLED_USERDATAIMAGE_TARGET) \
|
||||
$(INSTALLED_VENDORIMAGE_TARGET) \
|
||||
$(INSTALLED_PRODUCTIMAGE_TARGET) \
|
||||
$(INSTALLED_PRODUCT_SERVICESIMAGE_TARGET)
|
||||
|
||||
$(shareduid_violation_modules_filename): $(find_shareduid_script)
|
||||
$(shareduid_violation_modules_filename): $(AAPT2)
|
||||
$(find_shareduid_script) $(PRODUCT_OUT) $(AAPT2) > $@
|
||||
$(call dist-for-goals,droidcore,$(shareduid_violation_modules_filename))
|
66
core/tasks/find-shareduid-violation.py
Executable file
66
core/tasks/find-shareduid-violation.py
Executable file
|
@ -0,0 +1,66 @@
|
|||
#!/usr/bin/env python3
|
||||
#
|
||||
# Copyright (C) 2019 The Android Open Source Project
|
||||
#
|
||||
# Licensed under the Apache License, Version 2.0 (the "License");
|
||||
# you may not use this file except in compliance with the License.
|
||||
# You may obtain a copy of the License at
|
||||
#
|
||||
# http://www.apache.org/licenses/LICENSE-2.0
|
||||
#
|
||||
# Unless required by applicable law or agreed to in writing, software
|
||||
# distributed under the License is distributed on an "AS IS" BASIS,
|
||||
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
||||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
#
|
||||
import os
|
||||
import subprocess
|
||||
from glob import glob
|
||||
from collections import defaultdict
|
||||
import sys
|
||||
import json
|
||||
|
||||
if len(sys.argv) < 3:
|
||||
product_out = os.environ["PRODUCT_OUT"]
|
||||
aapt = "aapt2"
|
||||
else:
|
||||
product_out = sys.argv[1]
|
||||
aapt = sys.argv[2]
|
||||
|
||||
def make_aapt_cmd(file):
|
||||
cmds = [aapt + ' dump ' + file + ' --file AndroidManifest.xml',
|
||||
aapt + ' dump xmltree ' + file + ' --file AndroidManifest.xml']
|
||||
return " || ".join(cmds)
|
||||
|
||||
def extract_shared_uid(file):
|
||||
manifest = subprocess.check_output(make_aapt_cmd(file), shell=True).decode().split('\n')
|
||||
for l in manifest:
|
||||
if "sharedUserId" in l:
|
||||
return l.split('"')[-2]
|
||||
return None
|
||||
|
||||
|
||||
partitions = ["system", "vendor", "product"]
|
||||
|
||||
shareduid_app_dict = defaultdict(list)
|
||||
|
||||
for p in partitions:
|
||||
for f in glob(os.path.join(product_out, p, "*", "*", "*.apk")):
|
||||
apk_file = os.path.basename(f)
|
||||
shared_uid = extract_shared_uid(f)
|
||||
|
||||
if shared_uid is None:
|
||||
continue
|
||||
shareduid_app_dict[shared_uid].append((p, apk_file))
|
||||
|
||||
|
||||
output = defaultdict(lambda: defaultdict(list))
|
||||
|
||||
for uid, app_infos in shareduid_app_dict.items():
|
||||
partitions = {p for p, _ in app_infos}
|
||||
if len(partitions) > 1:
|
||||
for part in partitions:
|
||||
output[uid][part].extend([a for p, a in app_infos if p == part])
|
||||
|
||||
print(json.dumps(output, indent=2, sort_keys=True))
|
Loading…
Reference in a new issue