![]() The return value of read_verity_metadata is propagated to caller
even if the verity metadata is invalid, provided that it can be
read from the device. This results in devices with invalid verity
metadata signatures to be mounted normally, which is not desirable.
This change fixes the bug by changing the return value in case of
verification failure to FS_MGR_SETUP_VERITY_FAIL.
Bug: 15984840
Bug: 18120110
Change-Id: Ic29f37a23cb417c2538d60fb05de9dd310d50f4a
(cherry picked from commit
|
||
---|---|---|
adb | ||
adf | ||
cpio | ||
debuggerd | ||
fastboot | ||
fastbootd | ||
fs_mgr | ||
gpttool | ||
healthd | ||
include | ||
init | ||
libbacktrace | ||
libcutils | ||
libdiskconfig | ||
libion | ||
liblog | ||
libmemtrack | ||
libmincrypt | ||
libnativebridge | ||
libnetutils | ||
libpixelflinger | ||
libprocessgroup | ||
libsparse | ||
libsuspend | ||
libsync | ||
libsysutils | ||
libusbhost | ||
libutils | ||
libziparchive | ||
libzipfile | ||
lmkd | ||
logcat | ||
logd | ||
logwrapper | ||
mkbootimg | ||
netcfg | ||
reboot | ||
rootdir | ||
run-as | ||
sdcard | ||
toolbox | ||
.gitignore | ||
Android.mk | ||
CleanSpec.mk | ||
MODULE_LICENSE_APACHE2 | ||
NOTICE | ||
README | ||
ThirdPartyProject.prop |
README
The system/ directory is intended for pieces of the world that are the core of the embedded linux platform at the heart of Android. These essential bits are required for basic booting, operation, and debugging. They should not depend on libraries outside of system/... (some of them do currently -- they need to be updated or changed) and they should not be required for the simulator build. The license for all these pieces should be clean (Apache2, BSD, or MIT). Currently system/bluetooth/... and system/extra/... have some pieces with GPL/LGPL licensed code. Assorted Issues: - pppd depends on libutils for logging - pppd depends on libcrypt/libcrypto - init, linker, debuggerd, toolbox, usbd depend on libcutils - should probably rename bionic to libc