Merge "Check for build-tags before installing sideload OTA" into main

1 files changed, 11 insertions, 0 deletions

diff --git a/install/install.cpp b/install/install.cpp
index a9786cfd..6294a3dc 100644
--- a/install/install.cpp
+++ b/install/install.cpp
@@ -189,6 +189,17 @@ static bool CheckAbSpecificMetadata(const std::map<std::string, std::string>& me
       return false;
     }
   }
+  const auto post_build = get_value(metadata, "post-build");
+  const auto build_fingerprint = android::base::Tokenize(post_build, "/");
+  if (!build_fingerprint.empty()) {
+    const auto& post_build_tag = build_fingerprint.back();
+    const auto build_tag = android::base::GetProperty("ro.build.tags", "");
+    if (build_tag != post_build_tag) {
+      LOG(ERROR) << "Post build-tag " << post_build_tag << " does not match device build tag "
+                 << build_tag;
+      return false;
+    }
+  }
 
   return true;
 }