Files
cdba/cdba-server.c
T
Bjorn Andersson 48efa3096e cdba-server: Provide QDL access control list
The newly introduced support for QDL-based remote flashing of devices is
powerful, but provides an easy way to alter shared boards in unwanted
ways.

Introduce an optional "qdl_access" entry to the device configuration,
which allows to specify a list of entries each one defining a set of
users and their accepted flash targets.

A special target "all" can be used to give e.g. administrators
unrestricted access to the flash.

Signed-off-by: Bjorn Andersson <bjorn.andersson@oss.qualcomm.com>
2026-06-14 22:14:26 +00:00

444 lines
8.8 KiB
C

/*
* Copyright (c) 2016-2018, Linaro Ltd.
* All rights reserved.
*
* SPDX-License-Identifier: BSD-3-Clause
*/
#include <err.h>
#include <errno.h>
#include <fcntl.h>
#include <signal.h>
#include <stdint.h>
#include <stdio.h>
#include <string.h>
#include <sys/wait.h>
#include <unistd.h>
#include <syslog.h>
#include "cdba-server.h"
#include "cdba.h"
#include "circ_buf.h"
#include "device.h"
#include "device_parser.h"
#include "fastboot.h"
#include "list.h"
#include "watch.h"
static const char *username;
struct device *selected_device;
struct edl_file {
struct list_head node;
int fd;
char *filename;
char *target;
};
static struct list_head edl_files = LIST_INIT(edl_files);
static void edl_present(bool present)
{
uint8_t value = present ? 1 : 0;
warnx("edl is %spresent", present? "" : "not ");
cdba_send_buf(MSG_EDL_PRESENT, 1, &value);
}
static void fastboot_opened(struct fastboot *fb, void *data)
{
const uint8_t one = 1;
warnx("fastboot connection opened");
cdba_send_buf(MSG_FASTBOOT_PRESENT, 1, &one);
}
static void fastboot_info(struct fastboot *fb, const void *buf, size_t len)
{
fprintf(stderr, "%s\n", (const char *)buf);
}
static void fastboot_disconnect(void *data)
{
const uint8_t zero = 0;
cdba_send_buf(MSG_FASTBOOT_PRESENT, 1, &zero);
}
static struct fastboot_ops fastboot_ops = {
.opened = fastboot_opened,
.disconnect = fastboot_disconnect,
.info = fastboot_info,
};
static void msg_select_board(const void *param)
{
selected_device = device_open(param, username);
if (!selected_device) {
fprintf(stderr, "failed to open %s\n", (const char *)param);
watch_quit();
} else {
device_edl_open(selected_device, edl_present);
device_fastboot_open(selected_device, &fastboot_ops);
}
cdba_send(MSG_SELECT_BOARD);
}
static void *fastboot_payload;
static size_t fastboot_size;
static void msg_fastboot_download(const void *data, size_t len)
{
size_t new_size = fastboot_size + len;
char *newp;
newp = realloc(fastboot_payload, new_size);
if (!newp)
err(1, "failed too expant fastboot scratch area");
memcpy(newp + fastboot_size, data, len);
fastboot_payload = newp;
fastboot_size = new_size;
if (!len) {
device_boot(selected_device, fastboot_payload, fastboot_size);
cdba_send(MSG_FASTBOOT_DOWNLOAD);
free(fastboot_payload);
fastboot_payload = NULL;
fastboot_size = 0;
}
}
static struct edl_file *current_edl_file;
static void msg_edl_download(const void *data, size_t len)
{
char template[] = "/tmp/cdba.XXXXXX";
struct edl_file *edl;
edl = current_edl_file;
if (!edl) {
edl = calloc(1, sizeof(*edl));
edl->filename = strdup(template);
edl->fd = mkstemp(edl->filename);
if (edl->fd < 0)
err(1, "failed to create temporary file");
list_append(&edl_files, &edl->node);
current_edl_file = edl;
}
write(edl->fd, data, len);
if (len == 0)
close(edl->fd);
}
static void msg_edl_flash(const void *data, size_t len)
{
const char *target = data;
if (!selected_device || !current_edl_file)
return;
if (!len || target[len - 1]) {
fprintf(stderr, "invalid EDL flash target\n");
watch_quit();
return;
}
fprintf(stderr, "edl flash into '%s'\n", target);
if (!device_qdl_access_allowed(selected_device, username, target)) {
fprintf(stderr, "user '%s' is not allowed to flash EDL target '%s' on %s\n",
username, target, selected_device->board);
watch_quit();
return;
}
current_edl_file->target = strdup(target);
current_edl_file = NULL;
}
static void msg_edl_reset(void)
{
struct edl_file *edl;
const char **argv;
size_t args;
size_t arg = 0;
fprintf(stderr, "edl reset\n");
if (!selected_device) {
fprintf(stderr, "no device selected\n");
watch_quit();
return;
}
if (!selected_device->qdl_programmer) {
fprintf(stderr, "no EDL support configured for %s\n", selected_device->name);
watch_quit();
return;
}
list_for_each_entry(edl, &edl_files, node) {
if (!edl->target) {
fprintf(stderr, "EDL image without flash target\n");
watch_quit();
return;
}
}
args = 7 + list_len(&edl_files) * 3 + 1;
argv = calloc(args, sizeof(char *));
argv[arg++] = "qdl";
argv[arg++] = selected_device->qdl_programmer;
if (selected_device->qdl_storage) {
argv[arg++] = "--storage";
argv[arg++] = selected_device->qdl_storage;
}
if (selected_device->qdl_serial) {
argv[arg++] = "--serial";
argv[arg++] = selected_device->qdl_serial;
}
list_for_each_entry(edl, &edl_files, node) {
argv[arg++] = "write";
argv[arg++] = edl->target;
argv[arg++] = edl->filename;
}
argv[arg] = NULL;
if (fork() == 0) {
dup2(STDERR_FILENO, STDOUT_FILENO);
execvp("qdl", (char **)argv);
err(127, "failed to spawn qdl");
}
wait(NULL);
list_for_each_entry(edl, &edl_files, node)
unlink(edl->filename);
}
static void msg_fastboot_continue(void)
{
device_fastboot_continue(selected_device);
cdba_send(MSG_FASTBOOT_CONTINUE);
}
static void msg_key_release(void *data)
{
int key = (int)(uintptr_t)data;
device_key(selected_device, key, false);
}
static void msg_key_press(const void *data, size_t len)
{
const struct key_press *press = data;
if (len != sizeof(*press))
return;
if (press->state == KEY_PRESS_PULSE) {
device_key(selected_device, press->key, true);
watch_timer_add(100, msg_key_release, (void*)(uintptr_t)press->key);
} else {
device_key(selected_device, press->key, !!press->state);
}
}
void cdba_send_buf(int type, size_t len, const void *buf)
{
struct msg msg = {
.type = type,
.len = len
};
write(STDOUT_FILENO, &msg, sizeof(msg));
if (len)
write(STDOUT_FILENO, buf, len);
}
static int handle_stdin(int fd, void *buf)
{
static struct circ_buf recv_buf = { };
struct msg *msg;
struct msg hdr;
uint8_t mode;
size_t n;
int ret;
ret = circ_fill(STDIN_FILENO, &recv_buf);
if (ret < 0 && errno != EAGAIN) {
fprintf(stderr, "read %d\n", ret);
return -1;
}
for (;;) {
n = circ_peak(&recv_buf, &hdr, sizeof(hdr));
if (n != sizeof(hdr))
return 0;
if (CIRC_AVAIL(&recv_buf) < sizeof(*msg) + hdr.len)
return 0;
msg = malloc(sizeof(*msg) + hdr.len);
circ_read(&recv_buf, msg, sizeof(*msg) + hdr.len);
switch (msg->type) {
case MSG_CONSOLE:
device_write(selected_device, msg->data, msg->len);
break;
case MSG_FASTBOOT_PRESENT:
break;
case MSG_SELECT_BOARD:
msg_select_board(msg->data);
break;
case MSG_HARDRESET:
// fprintf(stderr, "hard reset\n");
break;
case MSG_POWER_ON:
if (msg->len == 1)
mode = *(uint8_t *)msg->data;
else
mode = MSG_POWER_ON_FASTBOOT;
if (mode >= MSG_POWER_ON_COUNT) {
fprintf(stderr, "invalid power on mode requested\n");
exit(1);
}
device_power_on(selected_device, mode);
cdba_send(MSG_POWER_ON);
break;
case MSG_POWER_OFF:
device_power_off(selected_device);
cdba_send(MSG_POWER_OFF);
break;
case MSG_FASTBOOT_DOWNLOAD:
msg_fastboot_download(msg->data, msg->len);
break;
case MSG_FASTBOOT_BOOT:
// fprintf(stderr, "fastboot boot\n");
break;
case MSG_STATUS_UPDATE:
device_status_enable(selected_device);
break;
case MSG_VBUS_ON:
device_usb(selected_device, true);
break;
case MSG_VBUS_OFF:
device_usb(selected_device, false);
break;
case MSG_SEND_BREAK:
device_send_break(selected_device);
break;
case MSG_LIST_DEVICES:
device_list_devices(username);
break;
case MSG_BOARD_INFO:
device_info(username, msg->data, msg->len);
break;
case MSG_FASTBOOT_CONTINUE:
msg_fastboot_continue();
break;
case MSG_KEY_PRESS:
msg_key_press(msg->data, msg->len);
break;
case MSG_EDL_DOWNLOAD:
msg_edl_download(msg->data, msg->len);
break;
case MSG_EDL_WRITE:
msg_edl_flash(msg->data, msg->len);
break;
case MSG_EDL_RESET:
msg_edl_reset();
break;
default:
fprintf(stderr, "unk %d len %d\n", msg->type, msg->len);
exit(1);
}
free(msg);
}
return 0;
}
static void sigpipe_handler(int signo)
{
watch_quit();
}
static void atexit_handler(void)
{
syslog(LOG_INFO, "exiting");
}
int main(int argc, char **argv)
{
int flags;
int ret;
signal(SIGPIPE, sigpipe_handler);
fprintf(stderr, "Starting cdba server\n");
username = getenv("CDBA_USER");
if (!username)
username = getenv("USER");
if (!username)
username = "nobody";
openlog("cdba-server", LOG_PID, LOG_DAEMON);
atexit(atexit_handler);
ret = device_parser(".cdba");
if (ret) {
ret = device_parser("/etc/cdba");
if (ret) {
fprintf(stderr, "device parser: unable to open config file\n");
exit(1);
}
}
watch_add_readfd(STDIN_FILENO, handle_stdin, NULL);
flags = fcntl(STDIN_FILENO, F_GETFL, 0);
fcntl(STDIN_FILENO, F_SETFL, flags | O_NONBLOCK);
watch_run();
/* if we got here, stdin/out/err might be not accessible anymore */
ret = open("/dev/null", O_RDWR);
if (ret >= 0) {
close(STDIN_FILENO);
dup2(ret, STDIN_FILENO);
close(STDOUT_FILENO);
dup2(ret, STDOUT_FILENO);
close(STDERR_FILENO);
dup2(ret, STDERR_FILENO);
}
if (selected_device)
device_close(selected_device);
return 0;
}