#!/bin/bash #DivestOS: A privacy oriented Android distribution #Copyright (c) 2017-2018 Divested Computing Group # #This program is free software: you can redistribute it and/or modify #it under the terms of the GNU General Public License as published by #the Free Software Foundation, either version 3 of the License, or #(at your option) any later version. # #This program is distributed in the hope that it will be useful, #but WITHOUT ANY WARRANTY; without even the implied warranty of #MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #GNU General Public License for more details. # #You should have received a copy of the GNU General Public License #along with this program. If not, see . #Last verified: 2018-04-27 patchAllKernels() { startPatcher "kernel_amazon_hdx-common kernel_asus_fugu kernel_asus_grouper kernel_asus_msm8916 kernel_cyanogen_msm8916 kernel_cyanogen_msm8974 kernel_fairphone_msm8974 kernel_google_dragon kernel_google_marlin kernel_google_msm kernel_huawei_angler kernel_htc_msm8974 kernel_htc_msm8994 kernel_lge_bullhead kernel_lge_g3 kernel_lge_hammerhead kernel_lge_mako kernel_lge_msm8974 kernel_lge_msm8992 kernel_lge_msm8996 kernel_motorola_msm8916 kernel_motorola_msm8974 kernel_motorola_msm8992 kernel_motorola_msm8996 kernel_nextbit_msm8992 kernel_oneplus_msm8974 kernel_samsung_jf kernel_samsung_manta kernel_samsung_msm8974 kernel_samsung_smdk4412 kernel_samsung_tuna kernel_samsung_universal8890 kernel_zte_msm8996"; } export -f patchAllKernels; resetWorkspace() { repo forall -c 'git add -A && git reset --hard' && rm -rf out && repo sync -j20 --force-sync; } export -f resetWorkspace; scanWorkspaceForMalware() { scanQueue="$DOS_BUILD_BASE/abi $DOS_BUILD_BASE/android $DOS_BUILD_BASE/art $DOS_BUILD_BASE/bionic $DOS_BUILD_BASE/bootable $DOS_BUILD_BASE/build $DOS_BUILD_BASE/dalvik $DOS_BUILD_BASE/device $DOS_BUILD_BASE/hardware $DOS_BUILD_BASE/libcore $DOS_BUILD_BASE/libnativehelper $DOS_BUILD_BASE/ndk $DOS_BUILD_BASE/packages $DOS_BUILD_BASE/pdk $DOS_BUILD_BASE/platform_testing $DOS_BUILD_BASE/sdk $DOS_BUILD_BASE/system"; scanQueue=$scanQueue" $DOS_BUILD_BASE/vendor/cm $DOS_BUILD_BASE/vendor/cmsdk"; scanForMalware true "$scanQueue"; } export -f scanWorkspaceForMalware; buildDevice() { brunch "lineage_$1-user" && processRelease $1 true $2; } export -f buildDevice; buildDeviceUserDebug() { brunch "lineage_$1-userdebug" && processRelease $1 true $2; } export -f buildDeviceUserDebug; buildDeviceDebug() { unset SIGNING_KEY_DIR; brunch "lineage_$1-eng"; } export -f buildDeviceDebug; buildAll() { if [ "$DOS_MALWARE_SCAN_ENABLED" = true ]; then scanWorkspaceForMalware; fi; if [ "$DOS_OPTIMIZE_IMAGES" = true ]; then optimizeImagesRecursive "$DOS_BUILD_BASE"; fi; #Select devices are userdebug due to SELinux policy issues buildDevice clark; buildDeviceUserDebug thor; buildDevice grouper; #needs manual patching - one-repo vendor blob patch buildDevice h815; buildDevice herolte; buildDevice himaul; buildDeviceUserDebug i9100; buildDeviceUserDebug i9300; buildDevice i9305; buildDevice maguro; buildDevice manta; buildDevice n5110; buildDevice n7100; #device/samsung/n7100/selinux/device.te:5:ERROR 'duplicate declaration of type/attribute' at token ';': type hpd_device, dev_type; type mfc_device, dev_type; buildDevice osprey; buildDevice toro; buildDevice toroplus; buildDevice Z00T; #The following are all superseded, and should only be enabled if the newer version is broken (not building/booting/etc.) if [ "$DOS_BUILDALL_SUPERSEDED" = true ]; then buildDevice angler; buildDevice axon7; buildDevice bullhead; buildDevice bacon; buildDevice crackling; buildDevice d802; buildDevice d852; buildDevice d855; buildDevice dragon; buildDevice ether; buildDevice flo; buildDevice flounder; buildDevice FP2; buildDevice fugu; buildDevice griffin; buildDevice h850; buildDevice ham; buildDevice hammerhead; buildDevice jfltexx; #broken - drivers/video/msm/mdp.c:401:1: warning: the frame size of 1032 bytes is larger than 1024 bytes [-Wframe-larger-than=] buildDevice kipper; buildDevice klte; buildDevice m8; buildDevice mako; buildDevice marlin; buildDevice sailfish; buildDevice shamu; buildDevice us996; buildDevice us997; buildDevice victara; #needs manual patching - fwb xml: fused: dangling tag fi; } export -f buildAll; patchWorkspace() { if [ "$DOS_MALWARE_SCAN_ENABLED" = true ]; then scanForMalware false "$DOS_PREBUILT_APPS $DOS_BUILD_BASE/build $DOS_BUILD_BASE/device $DOS_BUILD_BASE/vendor/cm"; fi; source build/envsetup.sh; #repopick 192923; #su memory leak fixes repopick -it wl12xx-krack-fw-4; #ti wlan firmware with krack fixes #repopick 212799; #alt: 212827 flac extractor CVE-2017-0592 #repopick 214125; #spellchecker: enable more wordlists repopick -it n_asb_09-2018-qcom; repopick -it bt-sbc-hd-dualchannel-nougat; repopick 201113; #wifi country code fix repopick 242134; #AVRCP off-by-one fix repopick 244387 244388; #loopback fixes repopick -it CVE-2019-2033; repopick 248599; #restrict SET_TIME_ZONE permission repopick 248600 248649; #/proc hardening repopick -it nougat-mr2-security-release-residue; export DOS_GRAPHENE_MALLOC=false; #patches apply, compile fails source "$DOS_SCRIPTS/Patch.sh"; source "$DOS_SCRIPTS/Defaults.sh"; source "$DOS_SCRIPTS/Rebrand.sh"; source "$DOS_SCRIPTS/Theme.sh"; if [ "$DOS_OVERCLOCKS_ENABLED" = true ]; then source "$DOS_SCRIPTS_COMMON/Overclock.sh"; fi; source "$DOS_SCRIPTS_COMMON/Optimize.sh"; source "$DOS_SCRIPTS_COMMON/Deblob.sh"; source "$DOS_SCRIPTS_COMMON/Patch_CVE.sh"; source build/envsetup.sh; #Deblobbing fixes ##setup-makefiles doesn't execute properly for some devices, running it twice seems to fix whatever is wrong cd device/asus/Z00T && ./setup-makefiles.sh && cd "$DOS_BUILD_BASE"; cd device/lge/h850 && ./setup-makefiles.sh && cd "$DOS_BUILD_BASE"; } export -f patchWorkspace; enableDexPreOpt() { cd "$DOS_BUILD_BASE$1"; #Some devices won't compile, or have too small of a /system partition, or Wi-Fi breaks if [ "$1" != "device/amazon/thor" ] && [ "$1" != "device/samsung/i9100" ] && [ "$1" != "device/samsung/maguro" ] && [ "$1" != "device/samsung/toro" ] && [ "$1" != "device/samsung/toroplus" ] && [ "$1" != "device/samsung/tuna" ] && [ "$1" != "device/lge/h850" ] && [ "$1" != "device/lge/mako" ] && [ "$1" != "device/asus/grouper" ]; then if [ -f BoardConfig.mk ]; then echo "WITH_DEXPREOPT := true" >> BoardConfig.mk; echo "WITH_DEXPREOPT_PIC := true" >> BoardConfig.mk; echo "WITH_DEXPREOPT_BOOT_IMG_ONLY := true" >> BoardConfig.mk; echo "Enabled dexpreopt for $1"; fi; fi; cd "$DOS_BUILD_BASE"; } export -f enableDexPreOpt; enableDexPreOptFull() { cd "$DOS_BUILD_BASE$1"; if [ -f BoardConfig.mk ]; then sed -i "s/WITH_DEXPREOPT_BOOT_IMG_ONLY := true/WITH_DEXPREOPT_BOOT_IMG_ONLY := false/" BoardConfig.mk; echo "Enabled full dexpreopt for $1"; fi; cd "$DOS_BUILD_BASE"; } export -f enableDexPreOptFull; enableLowRam() { cd "$DOS_BUILD_BASE$1"; if [ -f lineage.mk ]; then echo '$(call inherit-product, vendor/divested/build/target/product/lowram.mk)' >> lineage.mk; fi; if [ -f BoardConfig.mk ]; then echo 'MALLOC_SVELTE := true' >> BoardConfig.mk; fi; if [ -f BoardConfigCommon.mk ]; then echo 'MALLOC_SVELTE := true' >> BoardConfigCommon.mk; fi; echo "Enabled lowram for $1"; cd "$DOS_BUILD_BASE"; } export -f enableLowRam;