tree fa2a15c2818d19c1412da2d4298fb3cf43b04555
parent d7156cd31d615f81e7b86f16c774e8b80e37907e
author David Zeuthen <zeuthen@google.com> 1548448028 -0500
committer David Zeuthen <zeuthen@google.com> 1548448934 -0500

avbtool: verify_image: Add --follow_chain_partitions option.

This is useful in situations where you don't know (or don't care)
about the key/rollback index used for the chain partition. Here's an
example of it works on an AOSP image:

 $ avbtool verify_image --image vbmeta.img --follow_chain_partitions
 Verifying image vbmeta.img using embedded public key
 vbmeta: Successfully verified SHA256_RSA4096 vbmeta struct in vbmeta.img
 system: Chained but ROLLBACK_SLOT (which is 1) and KEY (which has sha1 cdbb77177f731920bbe0a0f94f84d9038ae0617d) not specified
 --
 Verifying image system.img using embedded public key
 vbmeta: Successfully verified footer and SHA256_RSA2048 vbmeta struct in system.img
 system: Successfully verified sha1 hashtree of system.img for image of 2906116096 bytes
 boot: Successfully verified sha256 hash of boot.img for image of 31236096 bytes
 dtbo: Successfully verified sha256 hash of dtbo.img for image of 1745968 bytes
 product: Successfully verified sha1 hashtree of product.img for image of 309526528 bytes
 vendor: Successfully verified sha1 hashtree of vendor.img for image of 792514560 bytes

This new feature also works with the existing --expected_chain_partitions option:

 $ avbtool extract_public_key --key /path/to/AOSP/external/avb/test/data/testkey_rsa2048.pem --output testkey_rsa2048.avbpubkey

 $ avbtool verify_image --image vbmeta.img --follow_chain_partitions --expected_chain_partition system:1:testkey_rsa2048.avbpubkey
 Verifying image vbmeta.img using embedded public key
 vbmeta: Successfully verified SHA256_RSA4096 vbmeta struct in vbmeta.img
 system: Successfully verified chain partition descriptor matches expected data
 --
 Verifying image system.img using embedded public key
 vbmeta: Successfully verified footer and SHA256_RSA2048 vbmeta struct in system.img
 system: Successfully verified sha1 hashtree of system.img for image of 2906116096 bytes
 boot: Successfully verified sha256 hash of boot.img for image of 31236096 bytes
 dtbo: Successfully verified sha256 hash of dtbo.img for image of 1745968 bytes
 product: Successfully verified sha1 hashtree of product.img for image of 309526528 bytes
 vendor: Successfully verified sha1 hashtree of vendor.img for image of 792514560 bytes

Bug: 122887773
Test: New unit test and all unit tests pass.
Change-Id: If9332005c46e64f536e0ad4d9dbe160745975966