commit 25f693688c9a3dc0e4118465fd700f5e11eebb7e
author Alan Stokes <alanstokes@google.com> Mon Mar 06 16:51:54 2023 +0000
committer Alan Stokes <alanstokes@google.com> Wed Mar 08 09:31:16 2023 +0000
tree a80426d7546049a1d3dae8875e6024abeb34bba9
parent 787c7b0aecc96c4644fdfc721cab121d17ba0429

Improve APK signature handling

There are two changes here:

- The maxSdk property of a signature is inclusive not exclusive
  (https://source.android.com/docs/security/features/apksigning/v3),
  so our mapping to a Rust Range was wrong.

- We hard-wired the platform SDK as 31; but really we should use the
  version of the platform we're running on.

I thought the APK Verify library shouldn't really be reading
properties, so instead I changed the function signatures to accept the
current SDK version as a parameter. That does mean duplicating the
code to read it in virtualization manager & microdroid manager, but I
can live with that for now.

Bug: 271500509
Bug: 190343842
Test: atest MicrodroidTests
Test: run a VM from an APK signed with minSdk = 33
Change-Id: I7ec7a201d05a6545847eb9b264abe642de883e0b