use crate::consts::{MAGISK_FULL_VER, MAIN_CONFIG}; use crate::db::Sqlite3; use crate::ffi::{get_magisk_tmp, RequestCode}; use crate::get_prop; use crate::logging::{magisk_logging, start_log_daemon}; use base::libc::{O_CLOEXEC, O_RDONLY}; use base::{ cstr, info, libc, open_fd, BufReadExt, Directory, FsPath, FsPathBuf, ReadExt, ResultExt, Utf8CStr, Utf8CStrBuf, Utf8CStrBufArr, Utf8CStrBufRef, WalkResult, }; use bytemuck::bytes_of; use std::fs::File; use std::io; use std::io::{BufReader, Read, Write}; use std::sync::{Mutex, OnceLock}; // Global magiskd singleton pub static MAGISKD: OnceLock = OnceLock::new(); #[repr(u32)] enum BootState { PostFsDataDone = (1 << 0), LateStartDone = (1 << 1), BootComplete = (1 << 2), SafeMode = (1 << 3), } #[derive(Default)] #[repr(transparent)] struct BootStateFlags(u32); impl BootStateFlags { fn contains(&self, stage: BootState) -> bool { (self.0 & stage as u32) != 0 } fn set(&mut self, stage: BootState) { self.0 |= stage as u32; } } #[derive(Default)] pub struct MagiskD { pub sql_connection: Mutex>, boot_stage_lock: Mutex, sdk_int: i32, pub is_emulator: bool, is_recovery: bool, } impl MagiskD { pub fn is_recovery(&self) -> bool { self.is_recovery } pub fn sdk_int(&self) -> i32 { self.sdk_int } pub fn boot_stage_handler(&self, client: i32, code: i32) { // Make sure boot stage execution is always serialized let mut state = self.boot_stage_lock.lock().unwrap(); let code = RequestCode { repr: code }; match code { RequestCode::POST_FS_DATA => { if check_data() && !state.contains(BootState::PostFsDataDone) { if self.post_fs_data() { state.set(BootState::SafeMode); } state.set(BootState::PostFsDataDone); } unsafe { libc::close(client) }; } RequestCode::LATE_START => { unsafe { libc::close(client) }; if state.contains(BootState::PostFsDataDone) && !state.contains(BootState::SafeMode) { self.late_start(); state.set(BootState::LateStartDone); } } RequestCode::BOOT_COMPLETE => { unsafe { libc::close(client) }; if state.contains(BootState::PostFsDataDone) { state.set(BootState::BootComplete); self.boot_complete() } } _ => { unsafe { libc::close(client) }; } } } } pub fn daemon_entry() { start_log_daemon(); magisk_logging(); info!("Magisk {} daemon started", MAGISK_FULL_VER); let is_emulator = get_prop(cstr!("ro.kernel.qemu"), false) == "1" || get_prop(cstr!("ro.boot.qemu"), false) == "1" || get_prop(cstr!("ro.product.device"), false).contains("vsoc"); // Load config status let mut buf = Utf8CStrBufArr::<64>::new(); let path = FsPathBuf::new(&mut buf) .join(get_magisk_tmp()) .join(MAIN_CONFIG); let mut is_recovery = false; if let Ok(file) = path.open(O_RDONLY | O_CLOEXEC) { let mut file = BufReader::new(file); file.foreach_props(|key, val| { if key == "RECOVERYMODE" { is_recovery = val == "true"; return false; } true }); } let mut sdk_int = -1; if let Ok(file) = FsPath::from(cstr!("/system/build.prop")).open(O_RDONLY | O_CLOEXEC) { let mut file = BufReader::new(file); file.foreach_props(|key, val| { if key == "ro.build.version.sdk" { sdk_int = val.parse::().unwrap_or(-1); return false; } true }); } if sdk_int < 0 { // In case some devices do not store this info in build.prop, fallback to getprop sdk_int = get_prop(cstr!("ro.build.version.sdk"), false) .parse::() .unwrap_or(-1); } info!("* Device API level: {}", sdk_int); let magiskd = MagiskD { sdk_int, is_emulator, is_recovery, ..Default::default() }; MAGISKD.set(magiskd).ok(); } fn check_data() -> bool { if let Ok(fd) = open_fd!(cstr!("/proc/mounts"), O_RDONLY | O_CLOEXEC) { let file = File::from(fd); let mut mnt = false; BufReader::new(file).foreach_lines(|line| { if line.contains(" /data ") && !line.contains("tmpfs") { mnt = true; return false; } true }); if !mnt { return false; } let crypto = get_prop(cstr!("ro.crypto.state"), false); return if !crypto.is_empty() { if crypto != "encrypted" { // Unencrypted, we can directly access data true } else { // Encrypted, check whether vold is started !get_prop(cstr!("init.svc.vold"), false).is_empty() } } else { // ro.crypto.state is not set, assume it's unencrypted true }; } false } pub fn get_magiskd() -> &'static MagiskD { unsafe { MAGISKD.get().unwrap_unchecked() } } pub fn find_apk_path(pkg: &Utf8CStr, data: &mut [u8]) -> usize { use WalkResult::*; fn inner(pkg: &Utf8CStr, buf: &mut dyn Utf8CStrBuf) -> io::Result { Directory::open(cstr!("/data/app"))?.pre_order_walk(|e| { if !e.is_dir() { return Ok(Skip); } let d_name = e.d_name().to_bytes(); if d_name.starts_with(pkg.as_bytes()) && d_name[pkg.len()] == b'-' { // Found the APK path, we can abort now e.path(buf)?; return Ok(Abort); } if d_name.starts_with(b"~~") { return Ok(Continue); } Ok(Skip) })?; if !buf.is_empty() { buf.push_str("/base.apk"); } Ok(buf.len()) } inner(pkg, &mut Utf8CStrBufRef::from(data)) .log() .unwrap_or(0) } pub trait IpcRead { fn ipc_read_int(&mut self) -> io::Result; fn ipc_read_string(&mut self) -> io::Result; } impl IpcRead for T { fn ipc_read_int(&mut self) -> io::Result { let mut val: i32 = 0; self.read_pod(&mut val)?; Ok(val) } fn ipc_read_string(&mut self) -> io::Result { let len = self.ipc_read_int()?; let mut val = "".to_string(); self.take(len as u64).read_to_string(&mut val)?; Ok(val) } } pub trait IpcWrite { fn ipc_write_int(&mut self, val: i32) -> io::Result<()>; fn ipc_write_string(&mut self, val: &str) -> io::Result<()>; } impl IpcWrite for T { fn ipc_write_int(&mut self, val: i32) -> io::Result<()> { self.write_all(bytes_of(&val)) } fn ipc_write_string(&mut self, val: &str) -> io::Result<()> { self.ipc_write_int(val.len() as i32)?; self.write_all(val.as_bytes()) } }