Merge pull request #95 from Fuzion24/feature/check_for_device_updates

Feature/check for device updates

Author: Fuzion24

app/src/main/java/fuzion24/device/vulnerability/util/DeviceInfo.java

@@ -26,7 +26,6 @@ public class DeviceInfo {
     private final String[] supportedABIS;
 
 
-
     private final String buildID;
 
 
@@ -97,7 +96,6 @@ public static String readKernelVersion() {
         return System.getProperty("os.version");
     }
 
-
     public String getKernelVersion() {
         return kernelVersion;
     }

app/src/main/java/fuzion24/device/vulnerability/util/SharedPreferencesUtils.java

@@ -13,6 +13,8 @@ public class SharedPreferencesUtils {
     private static final String PREFS_LAST_LIST_OF_SCANS = "PREFS_LIST_OF_SCANS";
     private static final String PREFS_FIRST_RUN = "PREFS_FIRST_RUN";
     private static final String PREFS_AUTOMATIC_SHARING_ENABLE = "PREFS_AUTOMATIC_SHARING_ENABLE";
+    private static final String BUILD_FINGERPRINT_HASH   = "BUILD_FINGERPRINT_HASH";
+
 
     private static final String PREFS_NAME = "com.nowsecure.android.vts.PREFERENCE_FILE_KEY";
 
@@ -57,4 +59,16 @@ public static void setTheListOfScansAvailable(Context context, List<String> list
         editor.apply();
     }
 
+    public static void setBuildUpdateFingerPrint(Context context, String fingerprint){
+        SharedPreferences.Editor editor = getPreferences(context).edit();
+
+        editor.putString(BUILD_FINGERPRINT_HASH, fingerprint);
+
+        editor.apply();
+    }
+
+    public static String getBuildUpdateFingerprint(Context context){
+        return getPreferences(context).getString(BUILD_FINGERPRINT_HASH, null);
+    }
+
 }

app/src/main/java/fuzion24/device/vulnerability/vulnerabilities/VulnerabilityOrganizer.java

@@ -4,7 +4,6 @@
 import android.content.Context;
 import android.util.Log;
 
-import java.lang.reflect.Method;
 import java.util.ArrayList;
 import java.util.List;
 
@@ -34,7 +33,7 @@ public class VulnerabilityOrganizer {
 
     //TODO: Maybe add dates to each of these and sort chronologically
     public static List<VulnerabilityTest> getTests(Context ctx){
-        List<VulnerabilityTest> allTests = new ArrayList<VulnerabilityTest>();
+        List<VulnerabilityTest> allTests = new ArrayList<>();
         allTests.add(new ZipBug9950697());
         allTests.add(new ZipBug8219321());
         allTests.add(new ZipBug9695860());
@@ -56,7 +55,7 @@ public static List<VulnerabilityTest> getTests(Context ctx){
         allTests.add(new CVE20151528());
         allTests.add(new CVE_2015_6616());
 
-        List<VulnerabilityTest> filteredTest = new ArrayList<VulnerabilityTest>();
+        List<VulnerabilityTest> filteredTest = new ArrayList<>();
         String cpuArch1 = SystemUtils.propertyGet(ctx, "ro.product.cpu.abi");
         String cpuArch2 = SystemUtils.propertyGet(ctx, "ro.product.cpu.abi2");
 

app/src/main/java/fuzion24/device/vulnerability/vulnerabilities/helper/DeviceUpdateChecker.java

@@ -0,0 +1,57 @@
+package fuzion24.device.vulnerability.vulnerabilities.helper;
+
+import android.content.Context;
+import android.content.SharedPreferences;
+import android.os.Build;
+import android.util.Base64;
+
+import java.io.File;
+import java.security.MessageDigest;
+import java.util.HashSet;
+import java.util.Scanner;
+
+import fuzion24.device.vulnerability.util.SharedPreferencesUtils;
+
+/**
+ * Created by fuzion24 on 12/4/15.
+ */
+public class DeviceUpdateChecker {
+    public static boolean wasDeviceUpdated(Context ctx){
+
+        /*
+            Take a hash of the build.prop and /proc/version
+            If this changes, assume the device has been updated
+        */
+        String buildPropFile = readFile("/system/build.prop");
+        String procVersion   = readFile("/proc/version");
+
+        String fingerprint = hashString(buildPropFile + procVersion);
+        String lastFingerprint = SharedPreferencesUtils.getBuildUpdateFingerprint(ctx);
+        if(fingerprint.equals(lastFingerprint)){
+            return false;
+        } else {
+            SharedPreferencesUtils.setBuildUpdateFingerPrint(ctx, fingerprint);
+            return true;
+        }
+    }
+
+    private static String hashString(String data){
+        try {
+            MessageDigest md = MessageDigest.getInstance("SHA");
+            md.update(data.getBytes());
+            byte[] hash = md.digest();
+            return Base64.encodeToString(hash, Base64.DEFAULT);
+        } catch (Exception e) {
+            return "";
+        }
+    }
+
+    private static String readFile(String filename){
+        try {
+            return new Scanner(new File(filename)).useDelimiter("\\Z").next();
+        }catch(Exception e){
+            return "";
+        }
+    }
+
+}