Reuse old idsig iff merkle tree root hash matches

apk_digest does not include the full apk file. Specifically it excludes
the signature block itself (which includes certificates). Therefore
reusing older idsig(with older merkle tree) for an apk could fail merkle
tree based integrity checks. Use merkle tree root hash match instead to
keep the optimization.

Test: Builds
Bug: 448320292
FLAG: EXEMPT BUGFIX
Cherrypick-From: https://googleplex-android-review.googlesource.com/q/commit:dfcd4a2a39cec0de8f30a0f0402b3318ece34c4c
Merged-In: Iaa69278e90df90ad4a7c003b14dc9f622c9df965
Change-Id: Iaa69278e90df90ad4a7c003b14dc9f622c9df965
2 files changed
tree: 6c9d4d8a767def72900b72fa14f9c2e0bb34294e
  1. android/
  2. build/
  3. docs/
  4. guest/
  5. libs/
  6. microfuchsia/
  7. tests/
  8. .clang-format
  9. .gitignore
  10. Android.bp
  11. dice_for_avf_guest.cddl
  12. NOTICE
  13. OWNERS
  14. PREUPLOAD.cfg
  15. README.md
  16. rustfmt.toml
  17. TEST_MAPPING
README.md

Android Virtualization Framework (AVF)

Android Virtualization Framework (AVF) provides secure and private execution environments for executing code. AVF is ideal for security-oriented use cases that require stronger isolation assurances over those offered by Android’s app sandbox.

Visit our public doc site to learn more about what AVF is, what it is for, and how it is structured. This repository contains source code for userspace components of AVF.

If you want a quick start, see the getting started guideline and follow the steps there.

For in-depth explanations about individual topics and components, visit the following links.

AVF components:

AVF APIs:

How-Tos: