diff options
| author | Tianjie Xu <xunchang@google.com> | 2019-10-30 11:59:45 -0700 |
|---|---|---|
| committer | doc HD <doc.divxm@gmail.com> | 2020-03-31 23:21:04 +0300 |
| commit | 2976ab2b5af70abcb6993b1a8f3421e49352f4e7 (patch) | |
| tree | 0760640a9298a1f75376d856eb5c2cdd2c559fcd /common/hardware_interface.h | |
| parent | fb237888b7b99304fae05917f69074c1b9a0ac93 (diff) | |
Allow skipping timestamp check in certain debug conditionsq10.0
As proposed in go/ota-downgrade, the android auto team wants to install
a full OTA with the older timestamp. We will only allow it on devices
with userdebug build, and has the property "ro.ota.allow_downgrade"
set. Data wipe is almost inevitable due to the probability of security
patch level and database rollback.
Test: set the property and install a full payload with older timestamp.
Change-Id: I897bbb19bfec820340f791abf3c6d8138995fa90
Diffstat (limited to 'common/hardware_interface.h')
| -rw-r--r-- | common/hardware_interface.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/common/hardware_interface.h b/common/hardware_interface.h index 01405881..4a64c3e8 100644 --- a/common/hardware_interface.h +++ b/common/hardware_interface.h @@ -122,6 +122,10 @@ class HardwareInterface { // Returns the timestamp of the current OS build. virtual int64_t GetBuildTimestamp() const = 0; + // Returns true if the current OS build allows installing the payload with an + // older timestamp. + virtual bool AllowDowngrade() const = 0; + // Returns whether the first active ping was sent to Omaha at some point, and // that the value is persisted across recovery (and powerwash) once set with // |SetFirstActiveOmahaPingSent()|. |