def c_epilog_from_params(self):
"""(str) Based on the arguments provided, return the extended epilog
message.
"""
args = self.parsed_args
help_obj = SecImageCore()
epilog = ''
if args.chipset == self._LIST_TAG:
# Compile a list of available chipsets
epilog += '\n' + 'Chipsets available: ' + '\n'
for idx, chipset in enumerate(help_obj.available_chipsets):
epilog += str(idx + 1) + '. ' + chipset + '\n'
if (args.sign_id == self._LIST_TAG and args.chipset != self._LIST_TAG
and args.config_path != self._LIST_TAG):
if args.chipset:
# Compile a list of available sign ids for a chipset
help_obj.chipset = args.chipset
epilog += '\n' + 'Sign-ids available for chipset "' + args.chipset + '": ' + '\n'
for idx, sign_id in enumerate(help_obj.available_sign_ids):
epilog += str(idx + 1) + '. ' + sign_id + '\n'
elif args.config_path:
# Compile a list of available sign ids for a config file
help_obj.config_path = args.config_path
epilog += '\n' + 'Sign-ids available for config_path "' + args.config_path + '": ' + '\n'
for idx, sign_id in enumerate(help_obj.available_sign_ids):
epilog += str(idx + 1) + '. ' + sign_id + '\n'
return epilog
def main(args):
"""Parses the command line arguments, performs any basic operations based on
the parsed arguments and starts processing using the isc module.
"""
# Log to file
log_to_file(args.output_dir)
# Print the tool's launch command
logger.debug('\n\n SecImage launched as: "' + ' '.join(sys.argv) +
'"\n')
# Initialize SecImageCore
isc = SecImageCore(debug=args.debug)
# Configure image signer
if args.image_file or (
args.meta_build
and not SecImageCore.meta_supports_sign_id(args.meta_build)):
if args.chipset:
isc.chipset = args.chipset
elif args.config_path:
isc.config_path = args.config_path
# Set the input
if args.image_file:
isc.set_image_path(args.image_file, args.sign_id)
elif args.meta_build:
isc.set_meta_build_path(args.meta_build,
[] if args.sign_id is None else [args.sign_id])
# Set the output
if args.mini_build:
isc.mini_build_path = args.mini_build
elif args.output_dir:
isc.output_dir = args.output_dir
# Process the images
isc.process(verify_setup=args.verify_inputs,
integrity_check=args.integrity_check,
sign=args.sign,
encrypt=args.encrypt,
decrypt=args.decrypt,
val_image=args.validate,
val_integrity_check=args.validate,
val_sign=args.validate,
val_encrypt=args.validate)
# Print the summary
print_summary(args, isc.image_info_list)
return isc.image_info_list
def c_epilog_from_params(self):
"""(str) Based on the arguments provided, return the extended epilog
message.
"""
args = self.parsed_args
help_obj = SecImageCore()
epilog = ''
# Extended Feature 1
if args.chipset == self._LIST_TAG:
# Compile a list of available chipsets
epilog += '\n' + 'Chipsets available: ' + '\n'
for idx, chipset in enumerate(help_obj.available_chipsets):
epilog += str(idx + 1) + '. ' + chipset + '\n'
# Extended Features 2 & 3
elif (args.sign_id == self._LIST_TAG and args.chipset != self._LIST_TAG
and args.config_path != self._LIST_TAG):
# Extended Feature 2
if args.chipset:
# Compile a list of available sign ids for a chipset
help_obj.chipset = args.chipset
epilog += '\n' + 'Sign-ids available for chipset "' + args.chipset + '": ' + '\n'
for idx, sign_id in enumerate(help_obj.available_sign_ids):
epilog += str(idx + 1) + '. ' + sign_id + '\n'
# Extended Feature 3
elif args.config_path:
# Compile a list of available sign ids for a config file
help_obj.config_path = args.config_path
epilog += '\n' + 'Sign-ids available for config_path "' + args.config_path + '": ' + '\n'
for idx, sign_id in enumerate(help_obj.available_sign_ids):
epilog += str(idx + 1) + '. ' + sign_id + '\n'
# Extended Feature 4
elif args.overrides:
cert_configs = '\n - ' + '\n - '.join([
'qc_presigned',
'default',
'mrc_sha256cert',
'sha1_certs',
'sha1_mrc_certs',
'mrc_certs_manual',
'rot_presigned_certs',
])
# This should always contain all the available options
order = [
('selected_signer', ''),
('selected_encryptor', ''),
('selected_cert_config', cert_configs),
('cass_capability', ''),
('', ''),
('msm_part', ''),
('oem_id', ''),
('model_id', ''),
('debug', ''),
('sw_id', ''),
('', ''),
('key_size', ''),
('exponent', ''),
('', ''),
('app_id', ''),
('crash_dump', ''),
('rot_en', ''),
('', ''),
('num_root_certs', '[1-16]'),
('mrc_index', '[0-15]'),
('', ''),
('max_cert_size', ''),
('num_certs_in_certchain', ''),
('', ''),
('soc_hw_version', ''),
('in_use_soc_hw_version', ''),
('use_serial_number_in_signing', ''),
('', ''),
('testsig_serialnum', ''),
('hash_pageseg_as_segment', ''),
]
properties = self.overrides.get_properties()
# Remove attributes excluded from order list
del properties['mask_soc_hw_version']
# Check all options are correct
for tag in properties.keys():
if not tag in [t for t, m in order]:
raise RuntimeError(
tag + ' is not provided in user interface order.')
for tag, msg in order:
if tag and not tag in properties.keys():
raise RuntimeError(tag +
' is extra in user interface order.')
# Update the epilog
epilog += ('Supported Parameters: ' + '\n\n')
# Available options
idx = 1
for tag, msg in order:
if tag:
override = properties[tag]
# Start of the option string
start = (
'%2d' % idx
) + '. ' + self.override_prefix + tag + ' (' + override.type_str + ')'
# Help message
msg = ' : ' + msg if msg else ''
# Choices
choices = override.choices
if () in choices:
choices.remove(())
choices_string = ' : ' + str(choices) if choices else ''
if len(start + choices_string) > 80:
choices_string = ' :\n - ' + '\n - '.join(
choices)
# Put all together
epilog += start + msg + choices_string + '\n'
idx += 1
else:
epilog += '\n'
return epilog
def c_epilog_from_params(self):
"""(str) Based on the arguments provided, return the extended epilog
message.
"""
args = self.parsed_args
help_obj = SecImageCore()
epilog = ''
# Extended Feature 1
if args.chipset == self._LIST_TAG:
# Compile a list of available chipsets
epilog += '\n' + 'Chipsets available: ' + '\n'
for idx, chipset in enumerate(help_obj.available_chipsets):
epilog += str(idx + 1) + '. ' + chipset + '\n'
# Extended Features 2 & 3
elif (args.sign_id == self._LIST_TAG and args.chipset != self._LIST_TAG
and args.config_path != self._LIST_TAG):
# Extended Feature 2
if args.chipset:
# Compile a list of available sign ids for a chipset
help_obj.chipset = args.chipset
epilog += '\n' + 'Sign-ids available for chipset "' + args.chipset + '": ' + '\n'
for idx, sign_id in enumerate(help_obj.available_sign_ids):
epilog += str(idx + 1) + '. ' + sign_id + '\n'
# Extended Feature 3
elif args.config_path:
# Compile a list of available sign ids for a config file
help_obj.config_path = args.config_path
epilog += '\n' + 'Sign-ids available for config_path "' + args.config_path + '": ' + '\n'
for idx, sign_id in enumerate(help_obj.available_sign_ids):
epilog += str(idx + 1) + '. ' + sign_id + '\n'
# Extended Feature 4
elif args.overrides:
cert_configs = '\n - ' + '\n - '.join([
'qti_presigned_certs',
'default',
'mrc_presigned_certs',
'sha1_certs',
'sha1_mrc_certs',
'mrc_certs_manual',
'rot_presigned_certs',
])
# This should always contain all the available options
order = [
('selected_signer', ''),
('selected_encryptor', ''),
('selected_cert_config', cert_configs),
('cass_capability', ''),
('hash_algorithm', ''),
('segment_hash_algorithm', ''),
('cass_attest_cert', ''),
('', ''),
('msm_part', ''),
('oem_id', ''),
('model_id', ''),
('debug', ''),
('sw_id', ''),
('anti_rollback_version', ''),
('', ''),
('key_size', ''),
('exponent', ''),
('', ''),
('dsa_type', ''),
('ecdsa_curve', ''),
('', ''),
('app_id', ''),
('crash_dump', ''),
('rot_en', ''),
('', ''),
('num_root_certs', ''),
('max_num_root_certs', ''),
('mrc_index', ''),
('', ''),
('max_cert_size', ''),
('num_certs_in_certchain', ''),
('', ''),
('soc_hw_version', ''),
('soc_vers', "ex \"0x0001 0x0002 0x0003\""),
('in_use_soc_hw_version', ''),
('use_serial_number_in_signing', ''),
('serial_number', ''),
('multi_serial_numbers',
"ex \"0x01234567 0x12345678 0x23456789\""),
('oem_id_independent', ''),
('', ''),
('testsig_serialnum', ''),
('hash_pageseg_as_segment', ''),
('hmac', ''),
('rsa_padding', ''),
('', ''),
('secboot_version', ''),
('qti_sign', ''),
('oem_sign', ''),
('', ''),
('UIE_key', ''),
('UIE_capability', ''),
('UIE_root_key_type', ''),
('uie_key_switch_enable', ''),
('', ''),
('revocation_enablement', ''),
('activation_enablement', ''),
('root_revoke_activate_enable', ''),
('', ''),
('multi_image_segment_addr', ''),
('', ''),
('client_id', ''),
('lib_id', ''),
('', ''),
('image_entry', ''),
]
properties = self.overrides.get_properties()
# Remove attributes excluded from order list
del properties['mask_soc_hw_version']
# Check all options are correct
for tag in properties.keys():
if not tag in [t for t, m in order]:
raise RuntimeError(
tag + ' is not provided in user interface order.')
for tag, msg in order:
if tag and not tag in properties.keys():
raise RuntimeError(tag +
' is extra in user interface order.')
# Update the epilog
epilog += ('Supported Parameters: ' + '\n\n')
# Available options
idx = 1
for tag, msg in order:
if tag:
override = properties[tag]
# Start of the option string
from sectools.common.utils.datautils import data_detail
start = (
'%2d' %
idx) + '. ' + self.override_prefix + tag + ' (' + (
override.type_str if
tag != MULTI_SERIAL_NUMBERS_TAG else data_detail.
_data_type_str[data_detail.DataType.String]) + ')'
# Help message
msg = ' : ' + msg if msg else ''
# Choices
choices = override.choices
if () in choices:
choices.remove(())
choices_string = ' : ' + str(choices) if choices else ''
if len(start + choices_string) > 80:
choices_string = ' :\n - ' + '\n - '.join(
choices)
# Put all together
epilog += start + msg + choices_string + '\n'
idx += 1
else:
epilog += '\n'
epilog += ('\n\nSpecial Parameters: ' + '\n\n')
for tag, override in self.spec_overrides.get_properties().items():
#Start of the option string
epilog += (
'%2d' % idx
) + '. ' + self.spec_override_prefix + tag + ' (' + override.type_str + ')\n'
idx += 1
return epilog