diff options
| author | Sami Tolvanen <samitolvanen@google.com> | 2014-11-07 10:20:02 -0800 |
|---|---|---|
| committer | Iliyan Malchev <malchev@google.com> | 2014-11-13 15:43:08 -0800 |
| commit | 72f0d92c722447e0c87cfe765516a7352db3d51a (patch) | |
| tree | f2e584aa196a335f39bff21c01f99c29cefc0e16 /include/utils | |
| parent | 9573a13bbc015c555adff1e4e0fbef2a18963111 (diff) | |
| download | system_core-72f0d92c722447e0c87cfe765516a7352db3d51a.zip system_core-72f0d92c722447e0c87cfe765516a7352db3d51a.tar.gz system_core-72f0d92c722447e0c87cfe765516a7352db3d51a.tar.bz2 | |
DO NOT MERGE: Do not mount devices with invalid verity metadata
The return value of read_verity_metadata is propagated to caller
even if the verity metadata is invalid, provided that it can be
read from the device. This results in devices with invalid verity
metadata signatures to be mounted normally, which is not desirable.
This change fixes the bug by changing the return value in case of
verification failure to FS_MGR_SETUP_VERITY_FAIL.
Bug: 15984840
Bug: 18120110
Change-Id: Ic29f37a23cb417c2538d60fb05de9dd310d50f4a
(cherry picked from commit c95e9da39660f278ace4b14d688dc6818d1a38bf)
Diffstat (limited to 'include/utils')
0 files changed, 0 insertions, 0 deletions