GitLab

We now have separate methods for key creation/destruction and
unlocking/locking.  Key unlocking can pass through an opaque token,
but it's left empty for now.

Extend user storage setup to also create system_ce and user_de
paths.  Bring over some path generation logic from installd.

Use strong type checking on user arguments.

Bug: 22358539
Change-Id: I00ba15c7b10dd682640b3f082feade4fb7cbbb5d

am: 03b10c26

* commit '03b10c26':
  system/vold: check return value of PKCS5_PBKDF2_HMAC_SHA1.

am: cd6d8e3f

* commit 'cd6d8e3f':
  system/vold: check return value of PKCS5_PBKDF2_HMAC_SHA1.

am: 0a7e668e

* commit '0a7e668e':
  system/vold: check return value of PKCS5_PBKDF2_HMAC_SHA1.

The function PKCS5_PBKDF2_HMAC_SHA1 can fail for a number of reasons and
thus its return value should be checked and handled.

Change-Id: I0f0d8f74b58940a34df16b88434a085760822075

This set of changes adds the screen that offers this conversion,
and the plumbing so the option is only available on suitable
devices.

It does not implement the conversion mechanism.

Change-Id: I801199c37b03436045d40bf8840a8746daf94d27

am: ec34abe0

* commit 'ec34abe0':

am: abcf4c6f

* commit 'abcf4c6f':

am: 8185d3d8

* commit '8185d3d8':
  Fix ioctl parameter

am: 5cd32f73

* commit '5cd32f73':
  Fix ioctl parameter

am: 0eaad8ce

* commit '0eaad8ce':
  Fix ioctl parameter

Change-Id: I922c8ae77056db81bc5152346299a07a34c527d2

am: aebfa6e7

* commit 'aebfa6e7':
  Promote free bytes calculation to 64 bits

am: 2403b4d0

* commit '2403b4d0':
  Promote free bytes calculation to 64 bits

am: 71ac649c

* commit '71ac649c':
  Kill apps using storage through bind mounts.

am: 89f74fbf

* commit '89f74fbf':
  Kill apps using storage through bind mounts.

The expression otherwise overflows for large devices.
It's fsblkcnt_t -> unsigned long, which is 32 bit on ARMv7.

Bug: 25162062
Change-Id: I46c5e00558b7dbd6abd50fae4727396079044df2

When unmounting an emulated volume, look for apps with open files
using the final published volume path.

Without this change, we were only looking at the internal paths
used for runtime permissions, which apps never use directly.  This
meant we'd always fail to unmount the volume if apps didn't respect
the EJECTING broadcast, and volume migration would end up wedged
until the device rebooted.

Bug: 24863778
Change-Id: Ibda484e66ab95744c304c344b226caa5b10b7e2e

am: 6ae8604c

* commit '6ae8604c':
  Don't show UI on default encryption

Merge of https://googleplex-android-review.git.corp.google.com/#/c/764976

Bug: 22989588
Change-Id: I3a6b01ee80446e0955e2039f88a627d37ee6caef

am: 0130fc6c

* commit '0130fc6c':
  Promote free bytes calculation to 64 bits

am: d3c7060b

* commit 'd3c7060b':
  Promote free bytes calculation to 64 bits

am: 7d17af08

* commit '7d17af08':
  Promote free bytes calculation to 64 bits

am: 01a856d5

* commit '01a856d5':
  Don't show UI on default encryption

am: 2309f76d

* commit '2309f76d':
  Don't show UI on default encryption

* commit 'f6852593':
  Clean up any/all stale partition tables.

* commit 'cb42a40a':
  Clean up any/all stale partition tables.

The expression otherwise overflows for large devices.
It's fsblkcnt_t -> unsigned long, which is 32 bit on ARMv7.

Change-Id: I46c5e00558b7dbd6abd50fae4727396079044df2

* commit 'f0500a08':
  Error correction: Add libfec dependencies for vold

* commit '0331d4ae':
  Error correction: Add libfec dependencies for vold

* commit '685dfdd3':
  Error correction: Add libfec dependencies for vold

* commit '44710f0f':
  vold: Retry opening block device on failure when starting encryption

* commit '82fd804f':
  vold: Retry opening block device on failure when starting encryption