Initial Commit

s4e-icons/tools/s4e_verify.py

@@ -0,0 +1,175 @@
+# -*- coding: utf-8 -*-
+"""S4 图标表盘交付物的独立校验（不信任构建脚本的账本）。
+
+从 dist/S5Icons.face 里把 Lua 源码抠出来 -> 解析 UIIMG / PAYTBL 两张表 ->
+每一条都拿去和 **固件镜像**（inputs/target 原厂 + .work/s4_from_s5 改后）以及
+ui_images/ 目录逐字节比对；另外单独验证 voice_aivs 那条的字节就是
+assets/override/voice_aivs.png 按槽位格式重编码的结果。
+
+用法：  python tools/s4e_verify.py
+"""
+import os, re, sys, json, hashlib
+sys.stdout.reconfigure(encoding='utf-8', errors='replace')
+sys.path.insert(0, os.path.dirname(os.path.abspath(__file__)))
+from romfs import Romfs
+from lvgl_bin import decode_lvgl_bin
+import iconpack as ip
+from PIL import Image, ImageFilter
+
+from paths import PROJ, INPUTS, WORK, DIST
+
+FACE = os.path.join(DIST, 'S5Icons.face')
+STOCK = os.path.join(INPUTS, 'target', 'vela_app.bin')
+PATCHED = os.path.join(WORK, 's4_from_s5', 'vela_app_s5icons.bin')
+MANIFEST = os.path.join(WORK, 's4_from_s5', 'manifest.json')
+WID = '362150101'
+
+fails = []
+
+
+def ck(cond, msg):
+    print(('  OK   ' if cond else '  FAIL ') + msg)
+    if not cond:
+        fails.append(msg)
+
+
+face = open(FACE, 'rb').read()
+_end = face.find(b'return ui\n')
+if _end < 0:
+    raise SystemExit('face 里找不到 Lua 结尾')
+_start = face.rfind(b'--[[', 0, _end)
+lua = face[_start:_end + len(b'return ui\n')]
+if not lua.startswith(b'--[[--') or b'local UIIMG = {' not in lua:
+    raise SystemExit('Lua 提取失败：%r ... %r' % (lua[:24], lua[-24:]))
+txt = lua.decode('utf-8')
+
+print('== 头部 ==')
+ck(face[0:4] == b'\x5a\xa5\x34\x12', 'magic 5a a5 34 12')
+ck(face[40:50] == (WID + '\x00').encode(), 'id = %r' % face[40:50])
+ck(face[5] == 0, 'b5 = %d（固件自带表盘也是 0）' % face[5])
+ck(face.count(lua) == 1, 'Lua 源码原样出现 %d 次（%d B）' % (face.count(lua), len(lua)))
+print('  文件 %d B' % len(face))
+
+print('== UI 图片 ==')
+ui = re.findall(r'\{(\d+),(\d+),"([a-z_]+)"\}', txt)
+files = {f[:-4]: open(os.path.join(PROJ, 'ui_images', f), 'rb').read()
+         for f in os.listdir(os.path.join(PROJ, 'ui_images')) if f.endswith('.bin')}
+ck(len(ui) == len(files), 'UIIMG %d 条（ui_images 里 %d 个）' % (len(ui), len(files)))
+for o, l, n in ui:
+    o, l = int(o), int(l)
+    ck(n in files and face[o:o + l] == files[n],
+       '%-12s @0x%06x len=%-6d 与 ui_images/%s.bin 一致' % (n, o, l, n))
+
+print('== 负载表结构 ==')
+_pay_at = txt.index('pay = {')
+_rb_at = txt.index('rb = {', _pay_at)
+pay = [(int(a), int(b), int(c)) for a, b, c in re.findall(r'\{(\d+),(\d+),(\d+)\}', txt[_pay_at:_rb_at])]
+rb = [(int(a), int(b), int(c)) for a, b, c in re.findall(r'\{(\d+),(\d+),(\d+)\}', txt[_rb_at:])]
+exp = json.load(open(MANIFEST, encoding='utf-8'))['records']          # 计划替换的 81 条
+pj = json.load(open(os.path.join(PROJ, 'payload.json'), encoding='utf-8'))
+emit = pj['records']                                                 # 实际下发的（含 canary）
+dropped = pj['dropped_identical']
+ck(len(emit) - 1 == len(exp) - len(dropped),
+   '下发 %d 条 = 计划 %d 条 - 与源逐字节相同的 %d 条 %s + canary'
+   % (len(emit), len(exp), len(dropped), dropped))
+ck(len(pay) == len(rb) == len(emit), 'pay %d 条 / rb %d 条（payload.json %d 条）'
+   % (len(pay), len(rb), len(emit)))
+ck(len(pay) > 0 and len(pay) == len(rb), '两张表条数相同')
+
+print('== 逐条字节比对（负载 vs 改后镜像、回滚 vs 原厂镜像）==')
+stock = open(STOCK, 'rb').read()
+patched = open(PATCHED, 'rb').read()
+ck(len(stock) == len(patched) and stock[:8] == b'-rom1fs-', '两个整分区镜像等长且是 ROMFS')
+bad, misalign, manifest_bad = 0, 0, 0
+for i, ((po, pt, pl), (ro, rt, rl)) in enumerate(zip(pay, rb)):
+    if not (po and ro) or (pt, pl) != (rt, rl):
+        manifest_bad += 1
+        continue
+    if pt % 4 or pt + pl > len(stock):      # RLE 素材的长度可以是任意值，只有偏移必须对齐
+        misalign += 1
+    if (face[po:po + pl] != patched[pt:pt + pl] or len(face[po:po + pl]) != pl
+            or face[ro:ro + pl] != stock[pt:pt + pl] or len(face[ro:ro + pl]) != pl):
+        bad += 1
+        print('  FAIL #%d %s off=0x%x len=%d'
+              % (i, emit[i]['name'] if i < len(emit) else '?', pt, pl))
+ck(bad == 0, '%d 条：负载 == 改后镜像，回滚 == 原厂镜像' % len(pay))
+ck(misalign == 0, '全部 4 对齐且不越界')
+ck(manifest_bad == 0, 'pay/rb 的目标偏移与长度一一对应')
+names_in_lua = [e['name'] for e in emit]
+plan_only = [r['name'] for r in exp if r['name'] not in dropped]
+ck(names_in_lua[1:] == plan_only, '下发名单（去掉 canary）== 计划名单（去掉 %s）' % dropped)
+
+print('== 负载名单 ==')
+names = [r['name'] for r in exp]
+ck('voice_aivs' in names, 'voice_aivs 在负载里')
+ck(sorted(names) == sorted(set(names)), '没有重名记录')
+
+print('== voice_aivs 的字节 == 用户 PNG 重编码 ==')
+rec = next(r for r in exp if r['name'] == 'voice_aivs')
+r = Romfs(STOCK)
+sheet = {p: i for p, i in r.entries() if p == 'voice/aivs/launcher.bin'}
+ino = sheet['voice/aivs/launcher.bin']
+ck(ino.data_off == rec['offset'] and ino.size == rec['length'],
+   'manifest 偏移/长度 == ROMFS inode（0x%08x / %d）' % (ino.data_off, ino.size))
+h, stock_img = decode_lvgl_bin(r.read(ino))
+
+
+def ink_bbox(img, thr=16):
+    a = img.convert('RGBA').getchannel('A'); w, hh = a.size; px = a.load()
+    x0, y0, x1, y1 = w, hh, -1, -1
+    for y in range(hh):
+        for x in range(w):
+            if px[x, y] > thr:
+                x0 = min(x0, x); y0 = min(y0, y); x1 = max(x1, x); y1 = max(y1, y)
+    return None if x1 < 0 else (x0, y0, x1, y1)
+
+
+sp = os.path.join(PROJ, 'assets', 'override', 'voice_aivs.png')
+src = Image.open(sp).convert('RGBA')
+sb = ink_bbox(stock_img)
+target = max(sb[2] - sb[0] + 1, sb[3] - sb[1] + 1)
+nb = ink_bbox(src)
+art = src.crop((nb[0], nb[1], nb[2] + 1, nb[3] + 1)).resize((target, target), Image.LANCZOS)
+cv = Image.new('RGBA', (h['w'], h['h']), (0, 0, 0, 0))
+cv.paste(art, ((h['w'] - target) // 2, (h['h'] - target) // 2))
+want = ip.encode(cv, h['cf'], h['w'], h['h'], h['flags'])
+ck(len(want) == ino.size, '按槽位格式重编码 %d B == 槽位 %d B' % (len(want), ino.size))
+got = [(o, t, l) for (o, t, l) in pay if t == rec['offset']]
+ck(bool(got) and face[got[0][0]:got[0][0] + rec['length']] == want,
+   '交付物里 voice_aivs 的负载字节 == 用户 PNG 重编码结果')
+ck(patched[ino.data_off:ino.data_off + ino.size] == want, '改后整分区镜像里也是同一份字节')
+ck(stock[ino.data_off:ino.data_off + ino.size] != want, '与 S4 原厂字节确实不同')
+ck(os.path.basename(sp) == 'voice_aivs.png' and
+   hashlib.sha256(open(sp, 'rb').read()).hexdigest()[:16] == '362166b54ac03f2b',
+   'override 源图 sha256 362166b54ac03f2b（= 用户给的 smallai.png）')
+
+print('== ROMFS 结构未被破坏 ==')
+a = [(p, i.off, i.next, i.spec, i.size, i.cksum) for p, i in Romfs(STOCK).entries()]
+b = [(p, i.off, i.next, i.spec, i.size, i.cksum) for p, i in Romfs(PATCHED).entries()]
+ck(a == b, 'inode 表逐位不变（%d 条）' % len(a))
+ck(Romfs(STOCK).sb_size == Romfs(PATCHED).sb_size and
+   Romfs(STOCK).sb_cksum == Romfs(PATCHED).sb_cksum, 'superblock 不变')
+r2 = Romfs(PATCHED)
+i1 = {p: i for p, i in Romfs(STOCK).entries()}
+i2 = {p: i for p, i in r2.entries()}
+changed = sorted(p for p in i1 if Romfs(STOCK).read(i1[p]) != r2.read(i2[p]))
+ck(len(changed) == len(pay) - 1, '真正变化的文件 %d 个（负载 %d 条，其中 canary 是分区头）'
+   % (len(changed), len(pay)))
+
+print('== 负载/回滚文件在 .face 里连续存放 ==')
+pfiles = [(f, open(os.path.join(PROJ, 'payload', f), 'rb').read())
+          for f in sorted(os.listdir(os.path.join(PROJ, 'payload'))) if f.endswith('.bin')]
+rbfiles = [(f, open(os.path.join(PROJ, 'payload_rollback', f), 'rb').read())
+           for f in sorted(os.listdir(os.path.join(PROJ, 'payload_rollback'))) if f.endswith('.bin')]
+ck(len(pfiles) == len(pay), 'payload/ 里 %d 个文件 == %d 条' % (len(pfiles), len(pay)))
+hit_pay = sum(1 for (o, t, l) in pay if any(face[o:o + l] == d for _, d in pfiles))
+hit_rb = sum(1 for (o, t, l) in rb if any(face[o:o + l] == d for _, d in rbfiles))
+ck(hit_pay == len(pay), '每条负载都能在 payload/ 里找到同名同字节的文件（%d/%d）' % (hit_pay, len(pay)))
+ck(hit_rb == len(rb), '每条回滚都能在 payload_rollback/ 里找到（%d/%d）' % (hit_rb, len(rb)))
+
+print()
+if fails:
+    print('!! %d 项未通过' % len(fails))
+    sys.exit(1)
+print('全部通过 —— %s (%d B, sha256 %s)' % (os.path.basename(FACE), len(face),
+                                        hashlib.sha256(face).hexdigest()[:16]))