Call fscrypt_destroy_volume_keys() under mCryptLock am: 7862729266

Original change: https://android-review.googlesource.com/c/platform/system/vold/+/2777077

Change-Id: I8cccab648454b7d7b3a3ec1946d3ff56f2e53fa1
Signed-off-by: Automerger Merge Worker <android-build-automerger-merge-worker@system.gserviceaccount.com>
This commit is contained in:
Eric Biggers 2023-10-06 20:39:01 +00:00 committed by Automerger Merge Worker
commit 82b0c1e67f
4 changed files with 20 additions and 13 deletions

View file

@ -1137,7 +1137,10 @@ static bool destroy_volume_keys(const std::string& directory_path, const std::st
return res;
}
// Destroys all CE and DE keys for an adoptable storage volume that is permanently going away.
// Requires VolumeManager::mCryptLock.
bool fscrypt_destroy_volume_keys(const std::string& volume_uuid) {
if (!IsFbeEnabled()) return true;
bool res = true;
LOG(DEBUG) << "fscrypt_destroy_volume_keys for volume " << escape_empty(volume_uuid);
auto secdiscardable_path = volume_secdiscardable_path(volume_uuid);

View file

@ -256,9 +256,19 @@ binder::Status VoldNativeService::forgetPartition(const std::string& partGuid,
ENFORCE_SYSTEM_OR_ROOT;
CHECK_ARGUMENT_HEX(partGuid);
CHECK_ARGUMENT_HEX(fsUuid);
ACQUIRE_LOCK;
bool success = true;
return translate(VolumeManager::Instance()->forgetPartition(partGuid, fsUuid));
{
ACQUIRE_LOCK;
success &= VolumeManager::Instance()->forgetPartition(partGuid, fsUuid);
}
{
ACQUIRE_CRYPT_LOCK;
success &= fscrypt_destroy_volume_keys(fsUuid);
}
return translateBool(success);
}
binder::Status VoldNativeService::mount(

View file

@ -349,25 +349,19 @@ void VolumeManager::listVolumes(android::vold::VolumeBase::Type type,
}
}
int VolumeManager::forgetPartition(const std::string& partGuid, const std::string& fsUuid) {
bool VolumeManager::forgetPartition(const std::string& partGuid, const std::string& fsUuid) {
std::string normalizedGuid;
if (android::vold::NormalizeHex(partGuid, normalizedGuid)) {
LOG(WARNING) << "Invalid GUID " << partGuid;
return -1;
return false;
}
bool success = true;
std::string keyPath = android::vold::BuildKeyPath(normalizedGuid);
if (unlink(keyPath.c_str()) != 0) {
LOG(ERROR) << "Failed to unlink " << keyPath;
success = false;
return false;
}
if (IsFbeEnabled()) {
if (!fscrypt_destroy_volume_keys(fsUuid)) {
success = false;
}
}
return success ? 0 : -1;
return true;
}
void VolumeManager::destroyEmulatedVolumesForUser(userid_t userId) {

View file

@ -106,7 +106,7 @@ class VolumeManager {
userid_t getSharedStorageUser(userid_t userId);
int forgetPartition(const std::string& partGuid, const std::string& fsUuid);
bool forgetPartition(const std::string& partGuid, const std::string& fsUuid);
int onUserAdded(userid_t userId, int userSerialNumber, userid_t cloneParentUserId);
int onUserRemoved(userid_t userId);