1 //
2 // Copyright (C) 2011 The Android Open Source Project
3 //
4 // Licensed under the Apache License, Version 2.0 (the "License");
5 // you may not use this file except in compliance with the License.
6 // You may obtain a copy of the License at
7 //
8 //      http://www.apache.org/licenses/LICENSE-2.0
9 //
10 // Unless required by applicable law or agreed to in writing, software
11 // distributed under the License is distributed on an "AS IS" BASIS,
12 // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13 // See the License for the specific language governing permissions and
14 // limitations under the License.
15 //
16 
17 #include "update_engine/payload_consumer/download_action.h"
18 
19 #include <errno.h>
20 
21 #include <algorithm>
22 #include <string>
23 
24 #include <base/files/file_path.h>
25 #include <base/metrics/statistics_recorder.h>
26 #include <base/strings/stringprintf.h>
27 
28 #include "update_engine/common/action_pipe.h"
29 #include "update_engine/common/boot_control_interface.h"
30 #include "update_engine/common/error_code_utils.h"
31 #include "update_engine/common/multi_range_http_fetcher.h"
32 #include "update_engine/common/utils.h"
33 #include "update_engine/omaha_request_params.h"
34 #include "update_engine/p2p_manager.h"
35 #include "update_engine/payload_state_interface.h"
36 
37 using base::FilePath;
38 using std::string;
39 
40 namespace chromeos_update_engine {
41 
DownloadAction(PrefsInterface * prefs,BootControlInterface * boot_control,HardwareInterface * hardware,SystemState * system_state,HttpFetcher * http_fetcher,bool interactive)42 DownloadAction::DownloadAction(PrefsInterface* prefs,
43                                BootControlInterface* boot_control,
44                                HardwareInterface* hardware,
45                                SystemState* system_state,
46                                HttpFetcher* http_fetcher,
47                                bool interactive)
48     : prefs_(prefs),
49       boot_control_(boot_control),
50       hardware_(hardware),
51       system_state_(system_state),
52       http_fetcher_(new MultiRangeHttpFetcher(http_fetcher)),
53       interactive_(interactive),
54       writer_(nullptr),
55       code_(ErrorCode::kSuccess),
56       delegate_(nullptr),
57       p2p_sharing_fd_(-1),
58       p2p_visible_(true) {}
59 
~DownloadAction()60 DownloadAction::~DownloadAction() {}
61 
CloseP2PSharingFd(bool delete_p2p_file)62 void DownloadAction::CloseP2PSharingFd(bool delete_p2p_file) {
63   if (p2p_sharing_fd_ != -1) {
64     if (close(p2p_sharing_fd_) != 0) {
65       PLOG(ERROR) << "Error closing p2p sharing fd";
66     }
67     p2p_sharing_fd_ = -1;
68   }
69 
70   if (delete_p2p_file) {
71     FilePath path = system_state_->p2p_manager()->FileGetPath(p2p_file_id_);
72     if (unlink(path.value().c_str()) != 0) {
73       PLOG(ERROR) << "Error deleting p2p file " << path.value();
74     } else {
75       LOG(INFO) << "Deleted p2p file " << path.value();
76     }
77   }
78 
79   // Don't use p2p from this point onwards.
80   p2p_file_id_.clear();
81 }
82 
SetupP2PSharingFd()83 bool DownloadAction::SetupP2PSharingFd() {
84   P2PManager* p2p_manager = system_state_->p2p_manager();
85 
86   if (!p2p_manager->FileShare(p2p_file_id_, payload_->size)) {
87     LOG(ERROR) << "Unable to share file via p2p";
88     CloseP2PSharingFd(true);  // delete p2p file
89     return false;
90   }
91 
92   // File has already been created (and allocated, xattrs been
93   // populated etc.) by FileShare() so just open it for writing.
94   FilePath path = p2p_manager->FileGetPath(p2p_file_id_);
95   p2p_sharing_fd_ = open(path.value().c_str(), O_WRONLY);
96   if (p2p_sharing_fd_ == -1) {
97     PLOG(ERROR) << "Error opening file " << path.value();
98     CloseP2PSharingFd(true);  // Delete p2p file.
99     return false;
100   }
101 
102   // Ensure file to share is world-readable, otherwise
103   // p2p-server and p2p-http-server can't access it.
104   //
105   // (Q: Why doesn't the file have mode 0644 already? A: Because
106   // the process-wide umask is set to 0700 in main.cc.)
107   if (fchmod(p2p_sharing_fd_, 0644) != 0) {
108     PLOG(ERROR) << "Error setting mode 0644 on " << path.value();
109     CloseP2PSharingFd(true);  // Delete p2p file.
110     return false;
111   }
112 
113   // All good.
114   LOG(INFO) << "Writing payload contents to " << path.value();
115   p2p_manager->FileGetVisible(p2p_file_id_, &p2p_visible_);
116   return true;
117 }
118 
WriteToP2PFile(const void * data,size_t length,off_t file_offset)119 void DownloadAction::WriteToP2PFile(const void* data,
120                                     size_t length,
121                                     off_t file_offset) {
122   if (p2p_sharing_fd_ == -1) {
123     if (!SetupP2PSharingFd())
124       return;
125   }
126 
127   // Check that the file is at least |file_offset| bytes long - if
128   // it's not something is wrong and we must immediately delete the
129   // file to avoid propagating this problem to other peers.
130   //
131   // How can this happen? It could be that we're resuming an update
132   // after a system crash... in this case, it could be that
133   //
134   //  1. the p2p file didn't get properly synced to stable storage; or
135   //  2. the file was deleted at bootup (it's in /var/cache after all); or
136   //  3. other reasons
137   off_t p2p_size = utils::FileSize(p2p_sharing_fd_);
138   if (p2p_size < 0) {
139     PLOG(ERROR) << "Error getting file status for p2p file";
140     CloseP2PSharingFd(true);  // Delete p2p file.
141     return;
142   }
143   if (p2p_size < file_offset) {
144     LOG(ERROR) << "Wanting to write to file offset " << file_offset
145                << " but existing p2p file is only " << p2p_size << " bytes.";
146     CloseP2PSharingFd(true);  // Delete p2p file.
147     return;
148   }
149 
150   off_t cur_file_offset = lseek(p2p_sharing_fd_, file_offset, SEEK_SET);
151   if (cur_file_offset != static_cast<off_t>(file_offset)) {
152     PLOG(ERROR) << "Error seeking to position " << file_offset
153                 << " in p2p file";
154     CloseP2PSharingFd(true);  // Delete p2p file.
155   } else {
156     // OK, seeking worked, now write the data
157     ssize_t bytes_written = write(p2p_sharing_fd_, data, length);
158     if (bytes_written != static_cast<ssize_t>(length)) {
159       PLOG(ERROR) << "Error writing " << length << " bytes at file offset "
160                   << file_offset << " in p2p file";
161       CloseP2PSharingFd(true);  // Delete p2p file.
162     }
163   }
164 }
165 
PerformAction()166 void DownloadAction::PerformAction() {
167   http_fetcher_->set_delegate(this);
168 
169   // Get the InstallPlan and read it
170   CHECK(HasInputObject());
171   install_plan_ = GetInputObject();
172   install_plan_.Dump();
173 
174   bytes_received_ = 0;
175   bytes_received_previous_payloads_ = 0;
176   bytes_total_ = 0;
177   for (const auto& payload : install_plan_.payloads)
178     bytes_total_ += payload.size;
179 
180   if (install_plan_.is_resume) {
181     int64_t payload_index = 0;
182     if (prefs_->GetInt64(kPrefsUpdateStatePayloadIndex, &payload_index) &&
183         static_cast<size_t>(payload_index) < install_plan_.payloads.size()) {
184       // Save the index for the resume payload before downloading any previous
185       // payload, otherwise it will be overwritten.
186       resume_payload_index_ = payload_index;
187       for (int i = 0; i < payload_index; i++)
188         install_plan_.payloads[i].already_applied = true;
189     }
190   }
191   // TODO(senj): check that install plan has at least one payload.
192   if (!payload_)
193     payload_ = &install_plan_.payloads[0];
194 
195   LOG(INFO) << "Marking new slot as unbootable";
196   if (!boot_control_->MarkSlotUnbootable(install_plan_.target_slot)) {
197     LOG(WARNING) << "Unable to mark new slot "
198                  << BootControlInterface::SlotName(install_plan_.target_slot)
199                  << ". Proceeding with the update anyway.";
200   }
201 
202   StartDownloading();
203 }
204 
LoadCachedManifest(int64_t manifest_size)205 bool DownloadAction::LoadCachedManifest(int64_t manifest_size) {
206   std::string cached_manifest_bytes;
207   if (!prefs_->GetString(kPrefsManifestBytes, &cached_manifest_bytes) ||
208       cached_manifest_bytes.size() <= 0) {
209     LOG(INFO) << "Cached Manifest data not found";
210     return false;
211   }
212   if (static_cast<int64_t>(cached_manifest_bytes.size()) != manifest_size) {
213     LOG(WARNING) << "Cached metadata has unexpected size: "
214                  << cached_manifest_bytes.size() << " vs. " << manifest_size;
215     return false;
216   }
217 
218   ErrorCode error;
219   const bool success =
220       delta_performer_->Write(
221           cached_manifest_bytes.data(), cached_manifest_bytes.size(), &error) &&
222       delta_performer_->IsManifestValid();
223   if (success) {
224     LOG(INFO) << "Successfully parsed cached manifest";
225   } else {
226     // If parsing of cached data failed, fall back to fetch them using HTTP
227     LOG(WARNING) << "Cached manifest data fails to load, error code:"
228                  << static_cast<int>(error) << "," << error;
229   }
230   return success;
231 }
232 
StartDownloading()233 void DownloadAction::StartDownloading() {
234   download_active_ = true;
235   http_fetcher_->ClearRanges();
236 
237   if (writer_ && writer_ != delta_performer_.get()) {
238     LOG(INFO) << "Using writer for test.";
239   } else {
240     delta_performer_.reset(new DeltaPerformer(prefs_,
241                                               boot_control_,
242                                               hardware_,
243                                               delegate_,
244                                               &install_plan_,
245                                               payload_,
246                                               interactive_));
247     writer_ = delta_performer_.get();
248   }
249 
250   if (install_plan_.is_resume &&
251       payload_ == &install_plan_.payloads[resume_payload_index_]) {
252     // Resuming an update so parse the cached manifest first
253     int64_t manifest_metadata_size = 0;
254     int64_t manifest_signature_size = 0;
255     prefs_->GetInt64(kPrefsManifestMetadataSize, &manifest_metadata_size);
256     prefs_->GetInt64(kPrefsManifestSignatureSize, &manifest_signature_size);
257 
258     // TODO(zhangkelvin) Add unittest for success and fallback route
259     if (!LoadCachedManifest(manifest_metadata_size + manifest_signature_size)) {
260       if (delta_performer_) {
261         // Create a new DeltaPerformer to reset all its state
262         delta_performer_ = std::make_unique<DeltaPerformer>(prefs_,
263                                                             boot_control_,
264                                                             hardware_,
265                                                             delegate_,
266                                                             &install_plan_,
267                                                             payload_,
268                                                             interactive_);
269         writer_ = delta_performer_.get();
270       }
271       http_fetcher_->AddRange(base_offset_,
272                               manifest_metadata_size + manifest_signature_size);
273     }
274 
275     // If there're remaining unprocessed data blobs, fetch them. Be careful not
276     // to request data beyond the end of the payload to avoid 416 HTTP response
277     // error codes.
278     int64_t next_data_offset = 0;
279     prefs_->GetInt64(kPrefsUpdateStateNextDataOffset, &next_data_offset);
280     uint64_t resume_offset =
281         manifest_metadata_size + manifest_signature_size + next_data_offset;
282     if (!payload_->size) {
283       http_fetcher_->AddRange(base_offset_ + resume_offset);
284     } else if (resume_offset < payload_->size) {
285       http_fetcher_->AddRange(base_offset_ + resume_offset,
286                               payload_->size - resume_offset);
287     }
288   } else {
289     if (payload_->size) {
290       http_fetcher_->AddRange(base_offset_, payload_->size);
291     } else {
292       // If no payload size is passed we assume we read until the end of the
293       // stream.
294       http_fetcher_->AddRange(base_offset_);
295     }
296   }
297 
298   if (system_state_ != nullptr) {
299     const PayloadStateInterface* payload_state = system_state_->payload_state();
300     string file_id = utils::CalculateP2PFileId(payload_->hash, payload_->size);
301     if (payload_state->GetUsingP2PForSharing()) {
302       // If we're sharing the update, store the file_id to convey
303       // that we should write to the file.
304       p2p_file_id_ = file_id;
305       LOG(INFO) << "p2p file id: " << p2p_file_id_;
306     } else {
307       // Even if we're not sharing the update, it could be that
308       // there's a partial file from a previous attempt with the same
309       // hash. If this is the case, we NEED to clean it up otherwise
310       // we're essentially timing out other peers downloading from us
311       // (since we're never going to complete the file).
312       FilePath path = system_state_->p2p_manager()->FileGetPath(file_id);
313       if (!path.empty()) {
314         if (unlink(path.value().c_str()) != 0) {
315           PLOG(ERROR) << "Error deleting p2p file " << path.value();
316         } else {
317           LOG(INFO) << "Deleting partial p2p file " << path.value()
318                     << " since we're not using p2p to share.";
319         }
320       }
321     }
322 
323     // Tweak timeouts on the HTTP fetcher if we're downloading from a
324     // local peer.
325     if (payload_state->GetUsingP2PForDownloading() &&
326         payload_state->GetP2PUrl() == install_plan_.download_url) {
327       LOG(INFO) << "Tweaking HTTP fetcher since we're downloading via p2p";
328       http_fetcher_->set_low_speed_limit(kDownloadP2PLowSpeedLimitBps,
329                                          kDownloadP2PLowSpeedTimeSeconds);
330       http_fetcher_->set_max_retry_count(kDownloadP2PMaxRetryCount);
331       http_fetcher_->set_connect_timeout(kDownloadP2PConnectTimeoutSeconds);
332     }
333   }
334 
335   http_fetcher_->BeginTransfer(install_plan_.download_url);
336 }
337 
SuspendAction()338 void DownloadAction::SuspendAction() {
339   http_fetcher_->Pause();
340 }
341 
ResumeAction()342 void DownloadAction::ResumeAction() {
343   http_fetcher_->Unpause();
344 }
345 
TerminateProcessing()346 void DownloadAction::TerminateProcessing() {
347   if (writer_) {
348     writer_->Close();
349     writer_ = nullptr;
350   }
351   download_active_ = false;
352   CloseP2PSharingFd(false);  // Keep p2p file.
353   // Terminates the transfer. The action is terminated, if necessary, when the
354   // TransferTerminated callback is received.
355   http_fetcher_->TerminateTransfer();
356 }
357 
SeekToOffset(off_t offset)358 void DownloadAction::SeekToOffset(off_t offset) {
359   bytes_received_ = offset;
360 }
361 
ReceivedBytes(HttpFetcher * fetcher,const void * bytes,size_t length)362 bool DownloadAction::ReceivedBytes(HttpFetcher* fetcher,
363                                    const void* bytes,
364                                    size_t length) {
365   // Note that bytes_received_ is the current offset.
366   if (!p2p_file_id_.empty()) {
367     WriteToP2PFile(bytes, length, bytes_received_);
368   }
369 
370   bytes_received_ += length;
371   uint64_t bytes_downloaded_total =
372       bytes_received_previous_payloads_ + bytes_received_;
373   if (delegate_ && download_active_) {
374     delegate_->BytesReceived(length, bytes_downloaded_total, bytes_total_);
375   }
376   if (writer_ && !writer_->Write(bytes, length, &code_)) {
377     if (code_ != ErrorCode::kSuccess) {
378       LOG(ERROR) << "Error " << utils::ErrorCodeToString(code_) << " (" << code_
379                  << ") in DeltaPerformer's Write method when "
380                  << "processing the received payload -- Terminating processing";
381     }
382     // Delete p2p file, if applicable.
383     if (!p2p_file_id_.empty())
384       CloseP2PSharingFd(true);
385     // Don't tell the action processor that the action is complete until we get
386     // the TransferTerminated callback. Otherwise, this and the HTTP fetcher
387     // objects may get destroyed before all callbacks are complete.
388     TerminateProcessing();
389     return false;
390   }
391 
392   // Call p2p_manager_->FileMakeVisible() when we've successfully
393   // verified the manifest!
394   if (!p2p_visible_ && system_state_ && delta_performer_.get() &&
395       delta_performer_->IsManifestValid()) {
396     LOG(INFO) << "Manifest has been validated. Making p2p file visible.";
397     system_state_->p2p_manager()->FileMakeVisible(p2p_file_id_);
398     p2p_visible_ = true;
399   }
400   return true;
401 }
402 
TransferComplete(HttpFetcher * fetcher,bool successful)403 void DownloadAction::TransferComplete(HttpFetcher* fetcher, bool successful) {
404   if (writer_) {
405     LOG_IF(WARNING, writer_->Close() != 0) << "Error closing the writer.";
406     if (delta_performer_.get() == writer_) {
407       // no delta_performer_ in tests, so leave the test writer in place
408       writer_ = nullptr;
409     }
410   }
411   download_active_ = false;
412   ErrorCode code =
413       successful ? ErrorCode::kSuccess : ErrorCode::kDownloadTransferError;
414   if (code == ErrorCode::kSuccess) {
415     if (delta_performer_ && !payload_->already_applied)
416       code = delta_performer_->VerifyPayload(payload_->hash, payload_->size);
417     if (code == ErrorCode::kSuccess) {
418       if (payload_ < &install_plan_.payloads.back() &&
419           system_state_->payload_state()->NextPayload()) {
420         LOG(INFO) << "Incrementing to next payload";
421         // No need to reset if this payload was already applied.
422         if (delta_performer_ && !payload_->already_applied)
423           DeltaPerformer::ResetUpdateProgress(prefs_, false);
424         // Start downloading next payload.
425         bytes_received_previous_payloads_ += payload_->size;
426         payload_++;
427         install_plan_.download_url =
428             system_state_->payload_state()->GetCurrentUrl();
429         StartDownloading();
430         return;
431       }
432 
433       // All payloads have been applied and verified.
434       if (delegate_)
435         delegate_->DownloadComplete();
436 
437       // Log UpdateEngine.DownloadAction.* histograms to help diagnose
438       // long-blocking operations.
439       std::string histogram_output;
440       base::StatisticsRecorder::WriteGraph("UpdateEngine.DownloadAction.",
441                                            &histogram_output);
442       LOG(INFO) << histogram_output;
443     } else {
444       LOG(ERROR) << "Download of " << install_plan_.download_url
445                  << " failed due to payload verification error.";
446       // Delete p2p file, if applicable.
447       if (!p2p_file_id_.empty())
448         CloseP2PSharingFd(true);
449     }
450   }
451 
452   // Write the path to the output pipe if we're successful.
453   if (code == ErrorCode::kSuccess && HasOutputPipe())
454     SetOutputObject(install_plan_);
455   processor_->ActionComplete(this, code);
456 }
457 
TransferTerminated(HttpFetcher * fetcher)458 void DownloadAction::TransferTerminated(HttpFetcher* fetcher) {
459   if (code_ != ErrorCode::kSuccess) {
460     processor_->ActionComplete(this, code_);
461   } else if (payload_->already_applied) {
462     LOG(INFO) << "TransferTerminated with ErrorCode::kSuccess when the current "
463                  "payload has already applied, treating as TransferComplete.";
464     TransferComplete(fetcher, true);
465   }
466 }
467 
468 }  // namespace chromeos_update_engine
469