ApkInstaller.java

package cn.reactnative.modules.update;

import android.Manifest;
import android.app.PendingIntent;
import android.content.Context;
import android.content.Intent;
import android.content.pm.PackageInfo;
import android.content.pm.PackageInstaller;
import android.content.pm.PackageManager;
import android.net.Uri;
import android.os.Build;
import android.os.Process;
import android.provider.Settings;
import android.util.Log;
import com.facebook.react.bridge.Promise;
import com.facebook.react.bridge.ReactApplicationContext;
import java.io.File;
import java.io.FileInputStream;
import java.io.OutputStream;
import java.util.concurrent.ConcurrentHashMap;

final class ApkInstaller {
    private static final String SESSION_ID_EXTRA =
        Texts.INSTALLER_SESSION_EXTRA;
    private static final ConcurrentHashMap<Integer, Promise> pendingPromises =
        new ConcurrentHashMap<Integer, Promise>();

    private ApkInstaller() {
    }

    /**
     * Everything in here runs inside the module call, where a thrown exception
     * would take the whole app down instead of rejecting the promise. A missing
     * REQUEST_INSTALL_PACKAGES declaration must surface as a rejection the JS
     * layer can report — never as a crash — so no failure is allowed to escape.
     */
    static boolean ensureInstallPermission(
        ReactApplicationContext reactContext,
        Promise promise
    ) {
        try {
            return checkInstallPermission(reactContext, promise);
        } catch (Throwable error) {
            promise.reject(
                ErrorCodes.APK_INSTALL_PERMISSION_REQUIRED,
                "Unable to verify the install-packages permission",
                error
            );
            return false;
        }
    }

    private static boolean checkInstallPermission(
        ReactApplicationContext reactContext,
        Promise promise
    ) {
        if (Build.VERSION.SDK_INT < Build.VERSION_CODES.O) {
            return true;
        }

        PackageManager packageManager = reactContext.getPackageManager();
        // canRequestPackageInstalls() itself throws SecurityException when the
        // permission is not declared, so the manifest check has to come first.
        if (!declaresInstallPermission(reactContext, packageManager)) {
            promise.reject(
                ErrorCodes.APK_INSTALL_PERMISSION_REQUIRED,
                "Declare android.permission.REQUEST_INSTALL_PACKAGES in AndroidManifest.xml"
            );
            return false;
        }

        try {
            if (packageManager.canRequestPackageInstalls()) {
                return true;
            }

            Intent settingsIntent = new Intent(
                Settings.ACTION_MANAGE_UNKNOWN_APP_SOURCES,
                Uri.parse("package:" + reactContext.getPackageName())
            );
            settingsIntent.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
            reactContext.startActivity(settingsIntent);
            promise.reject(
                ErrorCodes.APK_INSTALL_PERMISSION_REQUIRED,
                "Allow this app to install unknown apps in system settings, then retry"
            );
        } catch (Throwable error) {
            promise.reject(
                ErrorCodes.APK_INSTALL_PERMISSION_REQUIRED,
                "Unable to open the unknown app sources settings",
                error
            );
        }
        return false;
    }

    private static boolean declaresInstallPermission(
        Context context,
        PackageManager packageManager
    ) {
        try {
            PackageInfo packageInfo = packageManager.getPackageInfo(
                context.getPackageName(),
                PackageManager.GET_PERMISSIONS
            );
            String[] requestedPermissions = packageInfo.requestedPermissions;
            if (requestedPermissions == null) {
                return false;
            }
            for (String permission : requestedPermissions) {
                if (Manifest.permission.REQUEST_INSTALL_PACKAGES.equals(permission)) {
                    return true;
                }
            }
        } catch (Throwable error) {
            // A package manager that cannot answer is treated as "not declared":
            // the caller rejects with a code the app can act on.
            Log.e(Texts.LOG_TAG, "Unable to inspect requested permissions", error);
        }
        return false;
    }

    /**
     * Stages the downloaded APK in a PackageInstaller session and commits it;
     * the status receiver settles the promise. The APK file is deleted once
     * the session has the bytes or the attempt failed, so a leftover can
     * never be installed by a later call (CODE_AUDIT 2.6).
     */
    static void install(
        ReactApplicationContext reactContext,
        File apkFile,
        String sourceUrl,
        Promise promise
    ) {
        // TODO(CODE_AUDIT 2.6): verify a server-provided sha256 of the APK
        // before staging it. The `hash` JS passes to downloadAndInstallApk is
        // the progress-event key ("downloadingApk"), not a digest, so there
        // is nothing to check against yet; until the server sends one, the
        // https-only rule in UpdateModule is the integrity boundary.
        PackageInstaller packageInstaller = null;
        int sessionId = -1;
        boolean committed = false;
        try {
            if (!apkFile.isFile() || apkFile.length() <= 0) {
                promise.reject(ErrorCodes.APK_INSTALL_FAILED, "Downloaded APK is empty or missing");
                return;
            }

            packageInstaller = reactContext.getPackageManager().getPackageInstaller();
            PackageInstaller.SessionParams sessionParams = new PackageInstaller.SessionParams(
                PackageInstaller.SessionParams.MODE_FULL_INSTALL
            );
            sessionParams.setAppPackageName(reactContext.getPackageName());
            sessionParams.setSize(apkFile.length());
            if (sourceUrl != null && !sourceUrl.isEmpty()) {
                sessionParams.setOriginatingUri(Uri.parse(sourceUrl));
            }
            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.N) {
                sessionParams.setOriginatingUid(Process.myUid());
            }
            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.O) {
                sessionParams.setInstallReason(PackageManager.INSTALL_REASON_USER);
            }
            if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.S) {
                sessionParams.setRequireUserAction(
                    PackageInstaller.SessionParams.USER_ACTION_REQUIRED
                );
            }

            sessionId = packageInstaller.createSession(sessionParams);
            try (PackageInstaller.Session session = packageInstaller.openSession(sessionId)) {
                // The write stream has to be closed before commit(): the system
                // refuses to seal a session with open file transfers
                // ("SecurityException: Files still open"), on every Android version.
                try (
                    FileInputStream input = new FileInputStream(apkFile);
                    OutputStream output = session.openWrite("base.apk", 0, apkFile.length())
                ) {
                    UpdateFileUtils.copy(input, output);
                    session.fsync(output);
                }

                Intent statusIntent = new Intent(
                    reactContext,
                    PackageInstallerStatusReceiver.class
                );
                statusIntent.putExtra(SESSION_ID_EXTRA, sessionId);
                int pendingIntentFlags = PendingIntent.FLAG_UPDATE_CURRENT;
                if (Build.VERSION.SDK_INT >= Build.VERSION_CODES.S) {
                    pendingIntentFlags |= PendingIntent.FLAG_MUTABLE;
                }
                PendingIntent statusPendingIntent = PendingIntent.getBroadcast(
                    reactContext,
                    sessionId,
                    statusIntent,
                    pendingIntentFlags
                );
                pendingPromises.put(sessionId, promise);
                session.commit(statusPendingIntent.getIntentSender());
                committed = true;
            }
        } catch (Throwable error) {
            if (committed) {
                // The session is already in the system's hands (only session
                // close failed): the status receiver owns the promise now, so
                // settling here would be a second, contradictory outcome.
                Log.w(Texts.LOG_TAG, "Install session reported an error after commit", error);
                return;
            }
            if (sessionId != -1) {
                pendingPromises.remove(sessionId);
                if (packageInstaller != null) {
                    try {
                        packageInstaller.abandonSession(sessionId);
                    } catch (Throwable abandonError) {
                        Log.w(Texts.LOG_TAG, "Unable to abandon failed install session", abandonError);
                    }
                }
            }
            promise.reject(ErrorCodes.APK_INSTALL_FAILED, "Unable to stage APK installation", error);
        } finally {
            if (apkFile.exists() && !apkFile.delete()) {
                Log.w(Texts.LOG_TAG, "Unable to delete staged APK " + apkFile);
            }
        }
    }

    static void handleStatus(Context context, Intent intent) {
        int sessionId = intent.getIntExtra(SESSION_ID_EXTRA, -1);
        int status = intent.getIntExtra(
            PackageInstaller.EXTRA_STATUS,
            PackageInstaller.STATUS_FAILURE
        );

        if (status == PackageInstaller.STATUS_PENDING_USER_ACTION) {
            Intent confirmationIntent = intent.getParcelableExtra(Intent.EXTRA_INTENT);
            if (confirmationIntent == null) {
                rejectPending(sessionId, "System installer did not provide a confirmation screen");
                return;
            }
            try {
                confirmationIntent.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
                context.startActivity(confirmationIntent);
                resolvePending(sessionId);
            } catch (Throwable error) {
                rejectPending(sessionId, "Unable to open the system install confirmation", error);
            }
            return;
        }

        if (status == PackageInstaller.STATUS_SUCCESS) {
            resolvePending(sessionId);
            return;
        }

        String statusMessage = intent.getStringExtra(PackageInstaller.EXTRA_STATUS_MESSAGE);
        rejectPending(
            sessionId,
            statusMessage == null ? "Package installation failed" : statusMessage
        );
    }

    private static void resolvePending(int sessionId) {
        Promise promise = pendingPromises.remove(sessionId);
        if (promise != null) {
            promise.resolve(null);
        }
    }

    private static void rejectPending(int sessionId, String message) {
        rejectPending(sessionId, message, null);
    }

    private static void rejectPending(int sessionId, String message, Throwable error) {
        Promise promise = pendingPromises.remove(sessionId);
        if (promise != null) {
            if (error == null) {
                promise.reject(ErrorCodes.APK_INSTALL_FAILED, message);
            } else {
                promise.reject(ErrorCodes.APK_INSTALL_FAILED, message, error);
            }
        } else {
            Log.e(Texts.LOG_TAG, message, error);
        }
    }
}