android oem解锁,Android平台OEM解锁分析

一般安卓fastboot刷机需要unlock device，也叫unlock bootloader，我想多半和lock/unlock在bootloader中实现有关，ok，下面就来看下相关代码，参考高通平台P LK。

device_info中记录了是否解锁，有两个：is_unlocked, is_unlock_critical:static device_info device = {DEVICE_MAGIC,0,0,0,0,{0},{0},{0},1,{0},0,{0}};struct device_info

{

unsigned char magic[DEVICE_MAGIC_SIZE];

bool is_unlocked; //tj: here

bool is_tampered;

bool is_unlock_critical; //tj: here

bool charger_screen_enabled;

char display_panel[MAX_PANEL_ID_LEN];

char bootloader_version[MAX_VERSION_LEN];

char radio_version[MAX_VERSION_LEN];

bool verity_mode; // 1 = enforcing, 0 = logging

...

};enum unlock_type {

UNLOCK = 0,

UNLOCK_CRITICAL,

};

刷机代码有提到区别：ifeq ($(BOARD_AVB_ENABLE),true)

VERIFIED_BOOT_2 := VERIFIED_BOOT_2=1

else

VERIFIED_BOOT_2 := VERIFIED_BOOT_2=0

endifvoid cmd_flash_mmc(const char *arg, void *data, unsigned sz)

{

...

#if VERIFIED_BOOT || VERIFIED_BOOT_2

if (target_build_variant_user())

{

/* if device is locked:

* common partition will not allow to be flashed

* critical partition will allow to flash image.

*/

if(!device.is_unlocked && !critical_flash_allowed(arg)) {

fastboot_fail("Partition flashing is not allowed");

return;

}

/* if device critical is locked:

* common partition will allow to be flashed

* critical partition will not allow to flash image.

*/

if (VB_M <= target_get_vb_version() &&

!device.is_unlock_critical &&

critical_flash_allowed(arg)) {

fastboot_fail("Critical partition flashing is not allowed");

return;

}

}

#endif

看下critical_flash_allowed:static const char *critical_flash_allowed_ptn[] = {

"aboot",

"rpm",

"tz",

"sbl",

"sdi",

"sbl1",

"xbl",

"hyp",

"pmic",

"bootloader",

"devinfo",

"partition"};

static bool critical_flash_allowed(const char * entry)

{

uint32_t i = 0;

if (entry == NULL)

return false;

for (i = 0; i < ARRAY_SIZE(critical_flash_allowed_ptn); i++) {

if(!strcmp(entry, critical_flash_allowed_ptn[i]))

return true;

}

return false;

}

userdebug刷机不care这个unlock。