Skip to content
Snippets Groups Projects
util_functions.sh 21.8 KiB
Newer Older
  • Learn to ignore specific revisions
  • 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276 277 278 279 280 281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305 306 307 308 309 310 311 312 313 314 315 316 317 318 319 320 321 322 323 324 325 326 327 328 329 330 331 332 333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349 350 351 352 353 354 355 356 357 358 359 360 361 362 363 364 365 366 367 368 369 370 371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404 405 406 407 408 409 410 411 412 413 414 415 416 417 418 419 420 421 422 423 424 425 426 427 428 429 430 431 432 433 434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460 461 462 463 464 465 466 467 468 469 470 471 472 473 474 475 476 477 478 479 480 481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498 499 500 501 502 503 504 505 506 507 508 509 510 511 512 513 514 515 516 517 518 519 520 521 522 523 524 525 526 527 528 529 530 531 532 533 534 535 536 537 538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556 557 558 559 560 561 562 563 564 565 566 567 568 569 570 571 572 573 574 575 576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597 598 599 600 601 602 603 604 605 606 607 608 609 610 611 612 613 614 615 616 617 618 619 620 621 622 623 624 625 626 627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650 651 652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674 675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800
    ############################################
    # Magisk General Utility Functions
    ############################################
    
    # MAGISK_VER='23.0'
    # MAGISK_VER_CODE=23000
    
    ###################
    # Helper Functions
    ###################
    
    ui_print() {
      if $BOOTMODE; then
        echo "$1"
      else
        echo -e "ui_print $1\nui_print" >> /proc/self/fd/$OUTFD
      fi
    }
    
    toupper() {
      echo "$@" | tr '[:lower:]' '[:upper:]'
    }
    
    grep_cmdline() {
      local REGEX="s/^$1=//p"
      cat /proc/cmdline | tr '[:space:]' '\n' | sed -n "$REGEX" 2>/dev/null
    }
    
    grep_prop() {
      local REGEX="s/^$1=//p"
      shift
      local FILES=$@
      [ -z "$FILES" ] && FILES='/system/build.prop'
      cat $FILES 2>/dev/null | dos2unix | sed -n "$REGEX" | head -n 1
    }
    
    grep_get_prop() {
      local result=$(grep_prop $@)
      if [ -z "$result" ]; then
        # Fallback to getprop
        getprop "$1"
      else
        echo $result
      fi
    }
    
    getvar() {
      local VARNAME=$1
      local VALUE
      local PROPPATH='/data/.magisk /cache/.magisk'
      [ ! -z $MAGISKTMP ] && PROPPATH="$MAGISKTMP/config $PROPPATH"
      VALUE=$(grep_prop $VARNAME $PROPPATH)
      [ ! -z $VALUE ] && eval $VARNAME=\$VALUE
    }
    
    is_mounted() {
      grep -q " $(readlink -f $1) " /proc/mounts 2>/dev/null
      return $?
    }
    
    abort() {
      ui_print "$1"
      $BOOTMODE || recovery_cleanup
      [ ! -z $MODPATH ] && rm -rf $MODPATH
      rm -rf $TMPDIR
      exit 1
    }
    
    resolve_vars() {
      MAGISKBIN=$NVBASE/magisk
      POSTFSDATAD=$NVBASE/post-fs-data.d
      SERVICED=$NVBASE/service.d
    }
    
    print_title() {
      local len line1len line2len pounds
      line1len=$(echo -n $1 | wc -c)
      line2len=$(echo -n $2 | wc -c)
      len=$line2len
      [ $line1len -gt $line2len ] && len=$line1len
      len=$((len + 2))
      pounds=$(printf "%${len}s" | tr ' ' '*')
      ui_print "$pounds"
      ui_print " $1 "
      [ "$2" ] && ui_print " $2 "
      ui_print "$pounds"
    }
    
    ######################
    # Environment Related
    ######################
    
    setup_flashable() {
      ensure_bb
      $BOOTMODE && return
      if [ -z $OUTFD ] || readlink /proc/$$/fd/$OUTFD | grep -q /tmp; then
        # We will have to manually find out OUTFD
        for FD in `ls /proc/$$/fd`; do
          if readlink /proc/$$/fd/$FD | grep -q pipe; then
            if ps | grep -v grep | grep -qE " 3 $FD |status_fd=$FD"; then
              OUTFD=$FD
              break
            fi
          fi
        done
      fi
      recovery_actions
    }
    
    ensure_bb() {
      if set -o | grep -q standalone; then
        # We are definitely in busybox ash
        set -o standalone
        return
      fi
    
      # Find our busybox binary
      local bb
      if [ -f $TMPDIR/busybox ]; then
        bb=$TMPDIR/busybox
      elif [ -f $MAGISKBIN/busybox ]; then
        bb=$MAGISKBIN/busybox
      else
        abort "! Cannot find BusyBox"
      fi
      chmod 755 $bb
    
      # Busybox could be a script, make sure /system/bin/sh exists
      if [ ! -f /system/bin/sh ]; then
        umount -l /system 2>/dev/null
        mkdir -p /system/bin
        ln -s $(command -v sh) /system/bin/sh
      fi
    
      export ASH_STANDALONE=1
    
      # Find our current arguments
      # Run in busybox environment to ensure consistent results
      # /proc/<pid>/cmdline shall be <interpreter> <script> <arguments...>
      local cmds="$($bb sh -c "
      for arg in \$(tr '\0' '\n' < /proc/$$/cmdline); do
        if [ -z \"\$cmds\" ]; then
          # Skip the first argument as we want to change the interpreter
          cmds=\"sh\"
        else
          cmds=\"\$cmds '\$arg'\"
        fi
      done
      echo \$cmds")"
    
      # Re-exec our script
      echo $cmds | $bb xargs $bb
      exit
    }
    
    recovery_actions() {
      # Make sure random won't get blocked
      mount -o bind /dev/urandom /dev/random
      # Unset library paths
      OLD_LD_LIB=$LD_LIBRARY_PATH
      OLD_LD_PRE=$LD_PRELOAD
      OLD_LD_CFG=$LD_CONFIG_FILE
      unset LD_LIBRARY_PATH
      unset LD_PRELOAD
      unset LD_CONFIG_FILE
    }
    
    recovery_cleanup() {
      local DIR
      ui_print "- Unmounting partitions"
      (umount_apex
      if [ ! -d /postinstall/tmp ]; then
        umount -l /system
        umount -l /system_root
      fi
      umount -l /vendor
      umount -l /persist
      umount -l /metadata
      for DIR in /apex /system /system_root; do
        if [ -L "${DIR}_link" ]; then
          rmdir $DIR
          mv -f ${DIR}_link $DIR
        fi
      done
      umount -l /dev/random) 2>/dev/null
      [ -z $OLD_LD_LIB ] || export LD_LIBRARY_PATH=$OLD_LD_LIB
      [ -z $OLD_LD_PRE ] || export LD_PRELOAD=$OLD_LD_PRE
      [ -z $OLD_LD_CFG ] || export LD_CONFIG_FILE=$OLD_LD_CFG
    }
    
    #######################
    # Installation Related
    #######################
    
    # find_block [partname...]
    find_block() {
      local BLOCK DEV DEVICE DEVNAME PARTNAME UEVENT
      for BLOCK in "$@"; do
        DEVICE=`find /dev/block \( -type b -o -type c -o -type l \) -iname $BLOCK | head -n 1` 2>/dev/null
        if [ ! -z $DEVICE ]; then
          readlink -f $DEVICE
          return 0
        fi
      done
      # Fallback by parsing sysfs uevents
      for UEVENT in /sys/dev/block/*/uevent; do
        DEVNAME=`grep_prop DEVNAME $UEVENT`
        PARTNAME=`grep_prop PARTNAME $UEVENT`
        for BLOCK in "$@"; do
          if [ "$(toupper $BLOCK)" = "$(toupper $PARTNAME)" ]; then
            echo /dev/block/$DEVNAME
            return 0
          fi
        done
      done
      # Look just in /dev in case we're dealing with MTD/NAND without /dev/block devices/links
      for DEV in "$@"; do
        DEVICE=`find /dev \( -type b -o -type c -o -type l \) -maxdepth 1 -iname $DEV | head -n 1` 2>/dev/null
        if [ ! -z $DEVICE ]; then
          readlink -f $DEVICE
          return 0
        fi
      done
      return 1
    }
    
    # setup_mntpoint <mountpoint>
    setup_mntpoint() {
      local POINT=$1
      [ -L $POINT ] && mv -f $POINT ${POINT}_link
      if [ ! -d $POINT ]; then
        rm -f $POINT
        mkdir -p $POINT
      fi
    }
    
    # mount_name <partname(s)> <mountpoint> <flag>
    mount_name() {
      local PART=$1
      local POINT=$2
      local FLAG=$3
      setup_mntpoint $POINT
      is_mounted $POINT && return
      # First try mounting with fstab
      mount $FLAG $POINT 2>/dev/null
      if ! is_mounted $POINT; then
        local BLOCK=$(find_block $PART)
        mount $FLAG $BLOCK $POINT || return
      fi
      ui_print "- Mounting $POINT"
    }
    
    # mount_ro_ensure <partname(s)> <mountpoint>
    mount_ro_ensure() {
      # We handle ro partitions only in recovery
      $BOOTMODE && return
      local PART=$1
      local POINT=$2
      mount_name "$PART" $POINT '-o ro'
      is_mounted $POINT || abort "! Cannot mount $POINT"
    }
    
    mount_partitions() {
      # Check A/B slot
      SLOT=`grep_cmdline androidboot.slot_suffix`
      if [ -z $SLOT ]; then
        SLOT=`grep_cmdline androidboot.slot`
        [ -z $SLOT ] || SLOT=_${SLOT}
      fi
      [ -z $SLOT ] || ui_print "- Current boot slot: $SLOT"
    
      # Mount ro partitions
      if is_mounted /system_root; then
        umount /system 2&>/dev/null
        umount /system_root 2&>/dev/null
      fi
      mount_ro_ensure "system$SLOT app$SLOT" /system
      if [ -f /system/init -o -L /system/init ]; then
        SYSTEM_ROOT=true
        setup_mntpoint /system_root
        if ! mount --move /system /system_root; then
          umount /system
          umount -l /system 2>/dev/null
          mount_ro_ensure "system$SLOT app$SLOT" /system_root
        fi
        mount -o bind /system_root/system /system
      else
        SYSTEM_ROOT=false
        grep ' / ' /proc/mounts | grep -qv 'rootfs' || grep -q ' /system_root ' /proc/mounts && SYSTEM_ROOT=true
      fi
      # /vendor is used only on some older devices for recovery AVBv1 signing so is not critical if fails
      [ -L /system/vendor ] && mount_name vendor$SLOT /vendor '-o ro'
      $SYSTEM_ROOT && ui_print "- Device is system-as-root"
    
      # Allow /system/bin commands (dalvikvm) on Android 10+ in recovery
      $BOOTMODE || mount_apex
    }
    
    # loop_setup <ext4_img>, sets LOOPDEV
    loop_setup() {
      unset LOOPDEV
      local LOOP
      local MINORX=1
      [ -e /dev/block/loop1 ] && MINORX=$(stat -Lc '%T' /dev/block/loop1)
      local NUM=0
      while [ $NUM -lt 64 ]; do
        LOOP=/dev/block/loop$NUM
        [ -e $LOOP ] || mknod $LOOP b 7 $((NUM * MINORX))
        if losetup $LOOP "$1" 2>/dev/null; then
          LOOPDEV=$LOOP
          break
        fi
        NUM=$((NUM + 1))
      done
    }
    
    mount_apex() {
      $BOOTMODE || [ ! -d /system/apex ] && return
      local APEX DEST
      setup_mntpoint /apex
      mount -t tmpfs tmpfs /apex -o mode=755
      local PATTERN='s/.*"name":[^"]*"\([^"]*\).*/\1/p'
      for APEX in /system/apex/*; do
        if [ -f $APEX ]; then
          # APEX APKs, extract and loop mount
          unzip -qo $APEX apex_payload.img -d /apex
          DEST=$(unzip -qp $APEX apex_manifest.pb | strings | head -n 1)
          [ -z $DEST ] && DEST=$(unzip -qp $APEX apex_manifest.json | sed -n $PATTERN)
          [ -z $DEST ] && continue
          DEST=/apex/$DEST
          mkdir -p $DEST
          loop_setup /apex/apex_payload.img
          if [ ! -z $LOOPDEV ]; then
            ui_print "- Mounting $DEST"
            mount -t ext4 -o ro,noatime $LOOPDEV $DEST
          fi
          rm -f /apex/apex_payload.img
        elif [ -d $APEX ]; then
          # APEX folders, bind mount directory
          if [ -f $APEX/apex_manifest.json ]; then
            DEST=/apex/$(sed -n $PATTERN $APEX/apex_manifest.json)
          elif [ -f $APEX/apex_manifest.pb ]; then
            DEST=/apex/$(strings $APEX/apex_manifest.pb | head -n 1)
          else
            continue
          fi
          mkdir -p $DEST
          ui_print "- Mounting $DEST"
          mount -o bind $APEX $DEST
        fi
      done
      export ANDROID_RUNTIME_ROOT=/apex/com.android.runtime
      export ANDROID_TZDATA_ROOT=/apex/com.android.tzdata
      export ANDROID_ART_ROOT=/apex/com.android.art
      export ANDROID_I18N_ROOT=/apex/com.android.i18n
      local APEXJARS=$(find /apex -name '*.jar' | sort | tr '\n' ':')
      local FWK=/system/framework
      export BOOTCLASSPATH=${APEXJARS}\
    $FWK/framework.jar:$FWK/ext.jar:$FWK/telephony-common.jar:\
    $FWK/voip-common.jar:$FWK/ims-common.jar:$FWK/telephony-ext.jar
    }
    
    umount_apex() {
      [ -d /apex ] || return
      umount -l /apex
      for loop in /dev/block/loop*; do
        losetup -d $loop 2>/dev/null
      done
      unset ANDROID_RUNTIME_ROOT
      unset ANDROID_TZDATA_ROOT
      unset ANDROID_ART_ROOT
      unset ANDROID_I18N_ROOT
      unset BOOTCLASSPATH
    }
    
    get_flags() {
      # override variables
      getvar KEEPVERITY
      getvar KEEPFORCEENCRYPT
      getvar RECOVERYMODE
      if [ -z $KEEPVERITY ]; then
        if $SYSTEM_ROOT; then
          KEEPVERITY=true
          ui_print "- System-as-root, keep dm/avb-verity"
        else
          KEEPVERITY=false
        fi
      fi
      ISENCRYPTED=false
      grep ' /data ' /proc/mounts | grep -q 'dm-' && ISENCRYPTED=true
      [ "$(getprop ro.crypto.state)" = "encrypted" ] && ISENCRYPTED=true
      if [ -z $KEEPFORCEENCRYPT ]; then
        # No data access means unable to decrypt in recovery
        if $ISENCRYPTED || ! $DATA; then
          KEEPFORCEENCRYPT=true
          ui_print "- Encrypted data, keep forceencrypt"
        else
          KEEPFORCEENCRYPT=false
        fi
      fi
      [ -z $RECOVERYMODE ] && RECOVERYMODE=false
    }
    
    find_boot_image() {
      BOOTIMAGE=
      if $RECOVERYMODE; then
        BOOTIMAGE=`find_block recovery_ramdisk$SLOT recovery$SLOT sos`
      elif [ ! -z $SLOT ]; then
        BOOTIMAGE=`find_block ramdisk$SLOT recovery_ramdisk$SLOT boot$SLOT`
      else
        BOOTIMAGE=`find_block ramdisk recovery_ramdisk kern-a android_boot kernel bootimg boot lnx boot_a`
      fi
      if [ -z $BOOTIMAGE ]; then
        # Lets see what fstabs tells me
        BOOTIMAGE=`grep -v '#' /etc/*fstab* | grep -E '/boot(img)?[^a-zA-Z]' | grep -oE '/dev/[a-zA-Z0-9_./-]*' | head -n 1`
      fi
    }
    
    flash_image() {
      case "$1" in
        *.gz) CMD1="gzip -d < '$1' 2>/dev/null";;
        *)    CMD1="cat '$1'";;
      esac
      if $BOOTSIGNED; then
        CMD2="$BOOTSIGNER -sign"
        ui_print "- Sign image with verity keys"
      else
        CMD2="cat -"
      fi
      if [ -b "$2" ]; then
        local img_sz=$(stat -c '%s' "$1")
        local blk_sz=$(blockdev --getsize64 "$2")
        [ "$img_sz" -gt "$blk_sz" ] && return 1
        blockdev --setrw "$2"
        local blk_ro=$(blockdev --getro "$2")
        [ "$blk_ro" -eq 1 ] && return 2
        eval "$CMD1" | eval "$CMD2" | cat - /dev/zero > "$2" 2>/dev/null
      elif [ -c "$2" ]; then
        flash_eraseall "$2" >&2
        eval "$CMD1" | eval "$CMD2" | nandwrite -p "$2" - >&2
      else
        ui_print "- Not block or char device, storing image"
        eval "$CMD1" | eval "$CMD2" > "$2" 2>/dev/null
      fi
      return 0
    }
    
    # Common installation script for flash_script.sh and addon.d.sh
    install_magisk() {
      cd $MAGISKBIN
    
      if [ ! -c $BOOTIMAGE ]; then
        eval $BOOTSIGNER -verify < $BOOTIMAGE && BOOTSIGNED=true
        $BOOTSIGNED && ui_print "- Boot image is signed with AVB 1.0"
      fi
    
      # Source the boot patcher
      SOURCEDMODE=true
      . ./boot_patch.sh "$BOOTIMAGE"
    
      ui_print "- Flashing new boot image"
      flash_image new-boot.img "$BOOTIMAGE"
      case $? in
        1)
          abort "! Insufficient partition size"
          ;;
        2)
          abort "! $BOOTIMAGE is read only"
          ;;
      esac
    
      ./magiskboot cleanup
      rm -f new-boot.img
    
      run_migrations
    }
    
    sign_chromeos() {
      ui_print "- Signing ChromeOS boot image"
    
      echo > empty
      ./chromeos/futility vbutil_kernel --pack new-boot.img.signed \
      --keyblock ./chromeos/kernel.keyblock --signprivate ./chromeos/kernel_data_key.vbprivk \
      --version 1 --vmlinuz new-boot.img --config empty --arch arm --bootloader empty --flags 0x1
    
      rm -f empty new-boot.img
      mv new-boot.img.signed new-boot.img
    }
    
    remove_system_su() {
      if [ -f /system/bin/su -o -f /system/xbin/su ] && [ ! -f /su/bin/su ]; then
        ui_print "- Removing system installed root"
        blockdev --setrw /dev/block/mapper/system$SLOT 2>/dev/null
        mount -o rw,remount /system
        # SuperSU
        if [ -e /system/bin/.ext/.su ]; then
          mv -f /system/bin/app_process32_original /system/bin/app_process32 2>/dev/null
          mv -f /system/bin/app_process64_original /system/bin/app_process64 2>/dev/null
          mv -f /system/bin/install-recovery_original.sh /system/bin/install-recovery.sh 2>/dev/null
          cd /system/bin
          if [ -e app_process64 ]; then
            ln -sf app_process64 app_process
          elif [ -e app_process32 ]; then
            ln -sf app_process32 app_process
          fi
        fi
        rm -rf /system/.pin /system/bin/.ext /system/etc/.installed_su_daemon /system/etc/.has_su_daemon \
        /system/xbin/daemonsu /system/xbin/su /system/xbin/sugote /system/xbin/sugote-mksh /system/xbin/supolicy \
        /system/bin/app_process_init /system/bin/su /cache/su /system/lib/libsupol.so /system/lib64/libsupol.so \
        /system/su.d /system/etc/install-recovery.sh /system/etc/init.d/99SuperSUDaemon /cache/install-recovery.sh \
        /system/.supersu /cache/.supersu /data/.supersu \
        /system/app/Superuser.apk /system/app/SuperSU /cache/Superuser.apk
      elif [ -f /cache/su.img -o -f /data/su.img -o -d /data/adb/su -o -d /data/su ]; then
        ui_print "- Removing systemless installed root"
        umount -l /su 2>/dev/null
        rm -rf /cache/su.img /data/su.img /data/adb/su /data/adb/suhide /data/su /cache/.supersu /data/.supersu \
        /cache/supersu_install /data/supersu_install
      fi
    }
    
    api_level_arch_detect() {
      API=$(grep_get_prop ro.build.version.sdk)
      ABI=$(grep_get_prop ro.product.cpu.abi | cut -c-3)
      ABI2=$(grep_get_prop ro.product.cpu.abi2 | cut -c-3)
      ABILONG=$(grep_get_prop ro.product.cpu.abi)
    
      ARCH=arm
      ARCH32=arm
      IS64BIT=false
      if [ "$ABI" = "x86" ]; then ARCH=x86; ARCH32=x86; fi;
      if [ "$ABI2" = "x86" ]; then ARCH=x86; ARCH32=x86; fi;
      if [ "$ABILONG" = "arm64-v8a" ]; then ARCH=arm64; ARCH32=arm; IS64BIT=true; fi;
      if [ "$ABILONG" = "x86_64" ]; then ARCH=x64; ARCH32=x86; IS64BIT=true; fi;
    }
    
    check_data() {
      DATA=false
      DATA_DE=false
      if grep ' /data ' /proc/mounts | grep -vq 'tmpfs'; then
        # Test if data is writable
        touch /data/.rw && rm /data/.rw && DATA=true
        # Test if data is decrypted
        $DATA && [ -d /data/adb ] && touch /data/adb/.rw && rm /data/adb/.rw && DATA_DE=true
        $DATA_DE && [ -d /data/adb/magisk ] || mkdir /data/adb/magisk || DATA_DE=false
      fi
      NVBASE=/data
      $DATA || NVBASE=/cache/data_adb
      $DATA_DE && NVBASE=/data/adb
      resolve_vars
    }
    
    find_magisk_apk() {
      local DBAPK
      [ -z $APK ] && APK=/data/adb/magisk.apk
      [ -f $APK ] || APK=/data/magisk/magisk.apk
      [ -f $APK ] || APK=/data/app/com.topjohnwu.magisk*/*.apk
      [ -f $APK ] || APK=/data/app/*/com.topjohnwu.magisk*/*.apk
      if [ ! -f $APK ]; then
        DBAPK=$(magisk --sqlite "SELECT value FROM strings WHERE key='requester'" 2>/dev/null | cut -d= -f2)
        [ -z $DBAPK ] && DBAPK=$(strings /data/adb/magisk.db | grep -oE 'requester..*' | cut -c10-)
        [ -z $DBAPK ] || APK=/data/user_de/*/$DBAPK/dyn/*.apk
        [ -f $APK ] || [ -z $DBAPK ] || APK=/data/app/$DBAPK*/*.apk
        [ -f $APK ] || [ -z $DBAPK ] || APK=/data/app/*/$DBAPK*/*.apk
      fi
      [ -f $APK ] || ui_print "! Unable to detect Magisk app APK for BootSigner"
    }
    
    run_migrations() {
      local LOCSHA1
      local TARGET
      # Legacy app installation
      local BACKUP=/data/adb/magisk/stock_boot*.gz
      if [ -f $BACKUP ]; then
        cp $BACKUP /data
        rm -f $BACKUP
      fi
    
      # Legacy backup
      for gz in /data/stock_boot*.gz; do
        [ -f $gz ] || break
        LOCSHA1=`basename $gz | sed -e 's/stock_boot_//' -e 's/.img.gz//'`
        [ -z $LOCSHA1 ] && break
        mkdir /data/magisk_backup_${LOCSHA1} 2>/dev/null
        mv $gz /data/magisk_backup_${LOCSHA1}/boot.img.gz
      done
    
      # Stock backups
      LOCSHA1=$SHA1
      for name in boot dtb dtbo dtbs; do
        BACKUP=/data/adb/magisk/stock_${name}.img
        [ -f $BACKUP ] || continue
        if [ $name = 'boot' ]; then
          LOCSHA1=`$MAGISKBIN/magiskboot sha1 $BACKUP`
          mkdir /data/magisk_backup_${LOCSHA1} 2>/dev/null
        fi
        TARGET=/data/magisk_backup_${LOCSHA1}/${name}.img
        cp $BACKUP $TARGET
        rm -f $BACKUP
        gzip -9f $TARGET
      done
    }
    
    copy_sepolicy_rules() {
      # Remove all existing rule folders
      rm -rf /data/unencrypted/magisk /cache/magisk /metadata/magisk /persist/magisk /mnt/vendor/persist/magisk
    
      # Find current active RULESDIR
      local RULESDIR
      local active_dir=$(magisk --path)/.magisk/mirror/sepolicy.rules
      if [ -L $active_dir ]; then
        RULESDIR=$(readlink $active_dir)
        [ "${RULESDIR:0:1}" != "/" ] && RULESDIR="$(magisk --path)/.magisk/mirror/$RULESDIR"
      elif [ -d /data/unencrypted ] && ! grep ' /data ' /proc/mounts | grep -qE 'dm-|f2fs'; then
        RULESDIR=/data/unencrypted/magisk
      elif grep -q ' /cache ' /proc/mounts; then
        RULESDIR=/cache/magisk
      elif grep -q ' /metadata ' /proc/mounts; then
        RULESDIR=/metadata/magisk
      elif grep -q ' /persist ' /proc/mounts; then
        RULESDIR=/persist/magisk
      elif grep -q ' /mnt/vendor/persist ' /proc/mounts; then
        RULESDIR=/mnt/vendor/persist/magisk
      else
        return
      fi
    
      # Copy all enabled sepolicy.rule
      for r in /data/adb/modules*/*/sepolicy.rule; do
        [ -f "$r" ] || continue
        local MODDIR=${r%/*}
        [ -f $MODDIR/disable ] && continue
        [ -f $MODDIR/remove ] && continue
        local MODNAME=${MODDIR##*/}
        mkdir -p $RULESDIR/$MODNAME
        cp -f $r $RULESDIR/$MODNAME/sepolicy.rule
      done
    }
    
    #################
    # Module Related
    #################
    
    set_perm() {
      chown $2:$3 $1 || return 1
      chmod $4 $1 || return 1
      CON=$5
      [ -z $CON ] && CON=u:object_r:system_file:s0
      chcon $CON $1 || return 1
    }
    
    set_perm_recursive() {
      find $1 -type d 2>/dev/null | while read dir; do
        set_perm $dir $2 $3 $4 $6
      done
      find $1 -type f -o -type l 2>/dev/null | while read file; do
        set_perm $file $2 $3 $5 $6
      done
    }
    
    mktouch() {
      mkdir -p ${1%/*} 2>/dev/null
      [ -z $2 ] && touch $1 || echo $2 > $1
      chmod 644 $1
    }
    
    request_size_check() {
      reqSizeM=`du -ms "$1" | cut -f1`
    }
    
    request_zip_size_check() {
      reqSizeM=`unzip -l "$1" | tail -n 1 | awk '{ print int(($1 - 1) / 1048576 + 1) }'`
    }
    
    boot_actions() { return; }
    
    # Require ZIPFILE to be set
    is_legacy_script() {
      unzip -l "$ZIPFILE" install.sh | grep -q install.sh
      return $?
    }
    
    # Require OUTFD, ZIPFILE to be set
    install_module() {
      rm -rf $TMPDIR
      mkdir -p $TMPDIR
      cd $TMPDIR
    
      setup_flashable
      mount_partitions
      api_level_arch_detect
    
      # Setup busybox and binaries
      if $BOOTMODE; then
        boot_actions
      else
        recovery_actions
      fi
    
      # Extract prop file
      unzip -o "$ZIPFILE" module.prop -d $TMPDIR >&2
      [ ! -f $TMPDIR/module.prop ] && abort "! Unable to extract zip file!"
    
      local MODDIRNAME=modules
      $BOOTMODE && MODDIRNAME=modules_update
      local MODULEROOT=$NVBASE/$MODDIRNAME
      MODID=`grep_prop id $TMPDIR/module.prop`
      MODNAME=`grep_prop name $TMPDIR/module.prop`
      MODAUTH=`grep_prop author $TMPDIR/module.prop`
      MODPATH=$MODULEROOT/$MODID
    
      # Create mod paths
      rm -rf $MODPATH
      mkdir -p $MODPATH
    
      if is_legacy_script; then
        unzip -oj "$ZIPFILE" module.prop install.sh uninstall.sh 'common/*' -d $TMPDIR >&2
    
        # Load install script
        . $TMPDIR/install.sh
    
        # Callbacks
        print_modname
        on_install
    
        [ -f $TMPDIR/uninstall.sh ] && cp -af $TMPDIR/uninstall.sh $MODPATH/uninstall.sh
        $SKIPMOUNT && touch $MODPATH/skip_mount
        $PROPFILE && cp -af $TMPDIR/system.prop $MODPATH/system.prop
        cp -af $TMPDIR/module.prop $MODPATH/module.prop
        $POSTFSDATA && cp -af $TMPDIR/post-fs-data.sh $MODPATH/post-fs-data.sh
        $LATESTARTSERVICE && cp -af $TMPDIR/service.sh $MODPATH/service.sh
    
        ui_print "- Setting permissions"
        set_permissions
      else
        print_title "$MODNAME" "by $MODAUTH"
        print_title "Powered by Magisk"
    
        unzip -o "$ZIPFILE" customize.sh -d $MODPATH >&2
    
        if ! grep -q '^SKIPUNZIP=1$' $MODPATH/customize.sh 2>/dev/null; then
          ui_print "- Extracting module files"
          unzip -o "$ZIPFILE" -x 'META-INF/*' -d $MODPATH >&2
    
          # Default permissions
          set_perm_recursive $MODPATH 0 0 0755 0644
        fi
    
        # Load customization script
        [ -f $MODPATH/customize.sh ] && . $MODPATH/customize.sh
      fi
    
      # Handle replace folders
      for TARGET in $REPLACE; do
        ui_print "- Replace target: $TARGET"
        mktouch $MODPATH$TARGET/.replace
      done
    
      if $BOOTMODE; then
        # Update info for Magisk app
        mktouch $NVBASE/modules/$MODID/update
        cp -af $MODPATH/module.prop $NVBASE/modules/$MODID/module.prop
      fi
    
      # Copy over custom sepolicy rules
      if [ -f $MODPATH/sepolicy.rule ]; then
        ui_print "- Installing custom sepolicy rules"
        copy_sepolicy_rules
      fi
    
      # Remove stuff that doesn't belong to modules and clean up any empty directories
      rm -rf \
      $MODPATH/system/placeholder $MODPATH/customize.sh \
      $MODPATH/README.md $MODPATH/.git*
      rmdir -p $MODPATH
    
      cd /
      $BOOTMODE || recovery_cleanup
      rm -rf $TMPDIR
    
      ui_print "- Done"
    }
    
    ##########
    # Presets
    ##########
    
    # Detect whether in boot mode
    [ -z $BOOTMODE ] && ps | grep zygote | grep -qv grep && BOOTMODE=true
    [ -z $BOOTMODE ] && ps -A 2>/dev/null | grep zygote | grep -qv grep && BOOTMODE=true
    [ -z $BOOTMODE ] && BOOTMODE=false
    
    NVBASE=/data/adb
    TMPDIR=/dev/tmp
    
    # Bootsigner related stuff
    BOOTSIGNERCLASS=com.topjohnwu.signing.SignBoot
    BOOTSIGNER='/system/bin/dalvikvm -Xnoimage-dex2oat -cp $APK $BOOTSIGNERCLASS'
    BOOTSIGNED=false
    
    resolve_vars