clean up patching server

This commit is contained in:
Kavish Devar
2025-01-14 01:23:23 +05:30
parent 122e3d6c42
commit f265184abb
9 changed files with 110 additions and 552 deletions

View File

@@ -0,0 +1,7 @@
# Patcher Server
This is the server side of the patcher. It is responsible for serving the patch files to the clients.
# License
Same as project license. Check [/LICENSE](/LICENSE) for more information.

99
patching-server/server.py Normal file
View File

@@ -0,0 +1,99 @@
from flask import Flask, request, jsonify, send_file
import os
import uuid
import logging
import re
import subprocess
import sys
app = Flask(__name__)
# Configure logging
class LogColors:
HEADER = '\033[95m'
OKBLUE = '\033[94m'
OKCYAN = '\033[96m'
OKGREEN = '\033[92m'
WARNING = '\033[93m'
FAIL = '\033[91m'
ENDC = '\033[0m'
BOLD = '\033[1m'
UNDERLINE = '\033[4m'
class ColoredFormatter(logging.Formatter):
def format(self, record):
log_colors = {
'DEBUG': LogColors.OKCYAN,
'INFO': LogColors.OKGREEN,
'WARNING': LogColors.WARNING,
'ERROR': LogColors.FAIL,
'CRITICAL': LogColors.FAIL + LogColors.BOLD
}
log_color = log_colors.get(record.levelname, LogColors.ENDC)
record.msg = f"{log_color}{record.msg}{LogColors.ENDC}"
return super().format(record)
logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
logger = logging.getLogger()
handler = logger.handlers[0]
handler.setFormatter(ColoredFormatter('%(asctime)s - %(levelname)s - %(message)s'))
def run_command(command):
logging.info(f"Running command: {command}")
result = subprocess.run(command, shell=True, capture_output=True, text=True)
if result.returncode != 0 and "Cannot determine entrypoint" not in result.stderr:
logging.error(f"Command failed: {command}\n{result.stderr}")
sys.exit(1)
logging.info(f"Command output: {result.stdout}")
return result.stdout
def get_symbol_address(file_path, symbol_name):
logging.info(f"Getting address for symbol: {symbol_name}")
output = run_command(f"radare2 -q -e bin.cache=true -c 'is~{symbol_name}' -z {file_path}")
match = re.search(r'0x[0-9a-fA-F]+', output)
if match:
address = match.group(0)
logging.info(f"Found address for {symbol_name}: {address}")
return address
else:
logging.error(f"Symbol {symbol_name} not found in {file_path}")
sys.exit(1)
def patch_address(file_path, address, patch_bytes):
logging.info(f"Patching address {address} with bytes: {patch_bytes}")
run_command(f"radare2 -q -e bin.cache=true -w -c 's {address}; wx {patch_bytes}; wci' {file_path}")
logging.info(f"Successfully patched address {address}")
@app.route('/api', methods=['POST'])
def api():
if 'file' not in request.files:
return jsonify({"error": "No file part"}), 400
file = request.files['file']
if file.filename == '':
return jsonify({"error": "No selected file"}), 400
if not file.filename.endswith('.so'):
return jsonify({"error": "Invalid file type. Only .so files are allowed."}), 400
file_uuid = str(uuid.uuid4())
file_path = os.path.join('uploads', f"{file_uuid}_{file.filename}")
file.save(file_path)
try:
l2c_fcr_chk_chan_modes_address = get_symbol_address(file_path, "l2c_fcr_chk_chan_modes")
patch_address(file_path, l2c_fcr_chk_chan_modes_address, "20008052c0035fd6")
l2cu_send_peer_info_req_address = get_symbol_address(file_path, "l2cu_send_peer_info_req")
patch_address(file_path, l2cu_send_peer_info_req_address, "c0035fd6")
except Exception as e:
logger.error(f"Error patching file: {str(e)}")
return jsonify({"error": f"Error patching file: {str(e)}"}), 500
try:
return send_file(file_path, as_attachment=True, download_name=file.filename)
except Exception as e:
logger.error(f"Error sending file: {str(e)}")
return jsonify({"error": f"Error sending file: {str(e)}"}), 500
if not os.path.exists('uploads'):
os.makedirs('uploads')
if __name__ == '__main__':
app.run(debug=True, host='0.0.0.0', port=8080)

View File

@@ -1,3 +0,0 @@
uploads
*.zip
*.json

View File

@@ -1,19 +0,0 @@
# Root Module Generator
Use it by visiting [https://aln.kavishdevar.me](https://aln.kavishdevar.me)
## Instructions Website
- Open the website
- Upload the file
- Click on the patch button
- Wait for the patch to complete
- Download the module
- Install it in your root manager (e.g. KernelSU, Magisk, APatch, etc.)
## Instructions CLI
- Install `radare2`. Make sure you have it in your PATH. Check by running `radare2 -v`.
- Run `python3 main.py <path-to-file>`. The module will be generated in the same directory as the input file.
# License
Same as project license. Check [/LICENSE](/LICENSE) for more information.

View File

@@ -1,158 +0,0 @@
import logging
import os
import re
import shutil
import subprocess
import sys
import zipfile
# Define color codes for logging
class LogColors:
HEADER = '\033[95m'
OKBLUE = '\033[94m'
OKCYAN = '\033[96m'
OKGREEN = '\033[92m'
WARNING = '\033[93m'
FAIL = '\033[91m'
ENDC = '\033[0m'
BOLD = '\033[1m'
UNDERLINE = '\033[4m'
# Custom logging formatter to include colors
class ColoredFormatter(logging.Formatter):
def format(self, record):
log_colors = {
'DEBUG': LogColors.OKCYAN,
'INFO': LogColors.OKGREEN,
'WARNING': LogColors.WARNING,
'ERROR': LogColors.FAIL,
'CRITICAL': LogColors.FAIL + LogColors.BOLD
}
log_color = log_colors.get(record.levelname, LogColors.ENDC)
record.msg = f"{log_color}{record.msg}{LogColors.ENDC}"
return super().format(record)
def run_command(command):
"""
Runs a shell command and logs the output.
Args:
command (str): The command to run.
Returns:
str: The standard output from the command.
Raises:
SystemExit: If the command fails.
"""
logging.info(f"Running command: {command}")
result = subprocess.run(command, shell=True, capture_output=True, text=True)
if result.returncode != 0 and "Cannot determine entrypoint" not in result.stderr:
logging.error(f"Command failed: {command}\n{result.stderr}")
sys.exit(1)
logging.info(f"Command output: {result.stdout}")
return result.stdout
def get_symbol_address(file_path, symbol_name):
"""
Gets the address of a symbol in a binary file using radare2.
Args:
file_path (str): The path to the binary file.
symbol_name (str): The name of the symbol to find.
Returns:
str: The address of the symbol.
Raises:
SystemExit: If the symbol is not found.
"""
logging.info(f"Getting address for symbol: {symbol_name}")
output = run_command(f"radare2 -q -e bin.cache=true -c 'is~{symbol_name}' -z {file_path}")
match = re.search(r'0x[0-9a-fA-F]+', output)
if match:
address = match.group(0)
logging.info(f"Found address for {symbol_name}: {address}")
return address
else:
logging.error(f"Symbol {symbol_name} not found in {file_path}")
sys.exit(1)
def patch_address(file_path, address, patch_bytes):
"""
Patches a specific address in a binary file with given bytes using radare2.
Args:
file_path (str): The path to the binary file.
address (str): The address to patch.
patch_bytes (str): The bytes to write at the address.
Raises:
SystemExit: If the patching command fails.
"""
logging.info(f"Patching address {address} with bytes: {patch_bytes}")
run_command(f"radare2 -q -e bin.cache=true -w -c 's {address}; wx {patch_bytes}; wci' {file_path}")
logging.info(f"Successfully patched address {address}")
def copy_file_to_src(file_path, library_name):
"""
Copies a file to the 'src/' directory with the specified library name.
Args:
file_path (str): The path to the file to copy.
library_name (str): The name to use for the copied library.
"""
if os.path.exists('btl2capfix.zip'):
os.remove('btl2capfix.zip')
if os.path.exists('src/libbluetooth_jni.so'):
os.remove('src/libbluetooth_jni.so')
if os.path.exists('src/libbluetooth_qti.so'):
os.remove('src/libbluetooth_qti.so')
src_dir = 'src/'
if not os.path.exists(src_dir):
os.makedirs(src_dir)
dest_path = os.path.join(src_dir, library_name)
shutil.copy(file_path, dest_path)
logging.info(f"Copied {file_path} to {dest_path}")
def zip_src_files():
"""
Zips all files in the 'src/' directory into 'btl2capfix.zip' using the shell zip command.
"""
run_command('cd src && zip -y -r ../btl2capfix *')
def main():
"""
Main function to execute the script. It performs the following steps:
1. Copies the input file to the 'src/' directory.
2. Patches specific addresses in the binary file.
4. Zips the files in the 'src/' directory into 'btl2capfix.zip'.
"""
logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
logger = logging.getLogger()
handler = logger.handlers[0]
handler.setFormatter(ColoredFormatter('%(asctime)s - %(levelname)s - %(message)s'))
if len(sys.argv) != 3:
logging.error("Usage: python main.py <file_path> <library_name>")
sys.exit(1)
file_path = sys.argv[1]
library_name = sys.argv[2]
# Patch l2c_fcr_chk_chan_modes
l2c_fcr_chk_chan_modes_address = get_symbol_address(file_path, "l2c_fcr_chk_chan_modes")
patch_address(file_path, l2c_fcr_chk_chan_modes_address, "20008052c0035fd6")
# Patch l2cu_send_peer_info_req
l2cu_send_peer_info_req_address = get_symbol_address(file_path, "l2cu_send_peer_info_req")
patch_address(file_path, l2cu_send_peer_info_req_address, "c0035fd6")
# Copy file to src/
copy_file_to_src(file_path, library_name)
# Zip files under src/
zip_src_files()
if __name__ == "__main__":
main()

View File

@@ -1,361 +0,0 @@
from flask import Flask, request, jsonify, send_file, make_response
import os
import json
import uuid
import time
import threading
import logging
from main import get_symbol_address, patch_address, copy_file_to_src, zip_src_files
app = Flask(__name__)
PATCHED_LIBRARIES = {}
PERMALINK_EXPIRY = 600 # 10 minutes
PATCHES_JSON = 'patches.json'
# Configure logging
class LogColors:
HEADER = '\033[95m'
OKBLUE = '\033[94m'
OKCYAN = '\033[96m'
OKGREEN = '\033[92m'
WARNING = '\033[93m'
FAIL = '\033[91m'
ENDC = '\033[0m'
BOLD = '\033[1m'
UNDERLINE = '\033[4m'
class ColoredFormatter(logging.Formatter):
def format(self, record):
log_colors = {
'DEBUG': LogColors.OKCYAN,
'INFO': LogColors.OKGREEN,
'WARNING': LogColors.WARNING,
'ERROR': LogColors.FAIL,
'CRITICAL': LogColors.FAIL + LogColors.BOLD
}
log_color = log_colors.get(record.levelname, LogColors.ENDC)
record.msg = f"{log_color}{record.msg}{LogColors.ENDC}"
return super().format(record)
logging.basicConfig(level=logging.INFO, format='%(asctime)s - %(levelname)s - %(message)s')
logger = logging.getLogger()
handler = logger.handlers[0]
handler.setFormatter(ColoredFormatter('%(asctime)s - %(levelname)s - %(message)s'))
def save_patch_info(permalink_id, file_path):
# Dummy function to maintain logs
logger.info(f"Patch info saved for permalink_id: {permalink_id}, file_path: {file_path}")
@app.route('/')
def index():
return '''
<!doctype html>
<html lang="en">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Library Patcher</title>
<style>
body {
background-color: #121212;
color: #ffffff;
font-family: Arial, sans-serif;
display: flex;
justify-content: center;
align-items: center;
height: 100vh;
margin: 0;
padding: 5vmax;
box-sizing: border-box;
}
.container {
text-align: center;
background-color: #1e1e1e;
padding: 20px;
border-radius: 10px;
box-shadow: 0 0 10px rgba(0, 0, 0, 0.5);
width: 80%;
max-width: 500px;
}
.file-upload {
width: 100%;
height: 150px;
margin: 10px 0;
padding: 10px;
border-radius: 5px;
border: 2px dashed #555;
background-color: #333;
color: #fff;
box-sizing: border-box;
display: flex;
justify-content: center;
align-items: center;
cursor: pointer;
position: relative;
}
.file-upload input[type="file"] {
width: 100%;
height: 100%;
opacity: 0;
position: absolute;
cursor: pointer;
}
.file-upload-text {
font-size: 16px;
pointer-events: none;
}
.file-upload-text span {
display: block;
margin-top: 10px;
font-size: 14px;
color: #bbb;
}
input[type="submit"] {
width: 100%;
padding: 15px 20px;
border-radius: 5px;
border: none;
background-color: #6200ea;
color: #fff;
cursor: pointer;
transition: background-color 0.3s;
box-sizing: border-box;
display: block;
font-size: 16px;
}
input[type="submit"]:hover {
background-color: #3700b3;
}
.progress {
display: none;
margin-top: 20px;
width: 100%;
background-color: #333;
border-radius: 5px;
overflow: hidden;
}
.progress-bar {
width: 0;
height: 20px;
background-color: #6200ea;
transition: width 0.3s;
}
.progress-text {
margin-top: 10px;
font-size: 14px;
color: #bbb;
}
.download-link {
margin-top: 20px;
display: none;
}
.download-link a {
color: #6200ea;
text-decoration: none;
font-weight: bold;
}
.download-link a:hover {
color: #3700b3;
}
.source-link {
margin-top: 20px;
font-size: 14px;
color: #bbb;
}
.source-link a {
color: #6200ea;
text-decoration: none;
}
.source-link a:hover {
color: #3700b3;
}
</style>
</head>
<body>
<div class="container">
<h1>Upload a library to patch</h1>
<form id="upload-form" enctype="multipart/form-data">
<div class="file-upload">
<input type="file" name="file" onchange="updateFileName(this)">
<span class="file-upload-text">Click to upload a file<span id="file-name"></span></span>
</div>
<label>
<input type="checkbox" name="qti" id="qti-checkbox"> Qualcomm library (qti)
</label>
<input type="submit" value="Patch" id="patch-button">
</form>
<div class="progress" id="progress">
<div class="progress-bar" id="progress-bar"></div>
</div>
<div class="progress-text" id="progress-text"></div>
<div class="download-link" id="download-link">
<a href="#" id="download-url">Download patched file</a>
</div>
<div class="source-link">
Are you curious about what's happening here? <a href="https://github.com/kavishdevar/aln/blob/main/root-module-manual/server.py" target="_blank">Check out the source code</a>
</div>
</div>
<script>
function updateFileName(input) {
const fileName = input.files[0] ? input.files[0].name : "No file selected";
document.getElementById('file-name').textContent = fileName;
}
document.getElementById('upload-form').addEventListener('submit', async function(event) {
event.preventDefault();
const formData = new FormData(this);
const progressBar = document.getElementById('progress-bar');
const progressText = document.getElementById('progress-text');
const progress = document.getElementById('progress');
const patchButton = document.getElementById('patch-button');
patchButton.style.display = 'none';
progress.style.display = 'block';
progressBar.style.width = '0%';
progressText.textContent = 'Uploading...';
const response = await fetch('/patch', {
method: 'POST',
body: formData,
onUploadProgress: function(progressEvent) {
const percentCompleted = Math.round((progressEvent.loaded * 100) / progressEvent.total);
progressBar.style.width = percentCompleted + '%';
}
});
const result = await response.json();
if (result.permalink) {
progressBar.style.width = '100%';
progressText.textContent = 'Patching completed!';
const downloadLink = document.getElementById('download-link');
const downloadUrl = document.getElementById('download-url');
downloadUrl.href = result.permalink;
downloadLink.style.display = 'block';
} else {
progressText.textContent = 'Error: ' + result.error;
patchButton.style.display = 'block';
}
});
</script>
</body>
</html>
'''
@app.route('/patch', methods=['POST'])
def patch():
if 'file' not in request.files:
return jsonify({"error": "No file part"}), 400
file = request.files['file']
if file.filename == '':
return jsonify({"error": "No selected file"}), 400
if not file.filename.endswith('.so'):
return jsonify({"error": "Invalid file type. Only .so files are allowed."}), 400
# Generate a unique file path
file_uuid = str(uuid.uuid4())
file_path = os.path.join('uploads', f"{file_uuid}_{file.filename}")
file.save(file_path)
# Determine the library name based on the checkbox
library_name = "libbluetooth_qti.so" if 'qti' in request.form else "libbluetooth_jni.so"
# Patch the file
try:
l2c_fcr_chk_chan_modes_address = get_symbol_address(file_path, "l2c_fcr_chk_chan_modes")
patch_address(file_path, l2c_fcr_chk_chan_modes_address, "20008052c0035fd6")
l2cu_send_peer_info_req_address = get_symbol_address(file_path, "l2cu_send_peer_info_req")
patch_address(file_path, l2cu_send_peer_info_req_address, "c0035fd6")
except Exception as e:
logger.error(f"Error patching file: {str(e)}")
return jsonify({"error": f"Error patching file: {str(e)}"}), 500
# Create permalink
permalink_id = str(uuid.uuid4())
PATCHED_LIBRARIES[permalink_id] = {
'file_path': file_path,
'library_name': library_name,
'timestamp': time.time()
}
# Save patch info
save_patch_info(permalink_id, file_path)
# Schedule deletion
threading.Timer(PERMALINK_EXPIRY, delete_expired_permalink, args=[permalink_id]).start()
logger.info(f"Permalink {permalink_id} created, will expire in {PERMALINK_EXPIRY} seconds")
return jsonify({'permalink': f'/download/{permalink_id}'})
@app.route('/api', methods=['POST'])
def api():
if 'file' not in request.files:
return jsonify({"error": "No file part"}), 400
file = request.files['file']
if file.filename == '':
return jsonify({"error": "No selected file"}), 400
if not file.filename.endswith('.so'):
return jsonify({"error": "Invalid file type. Only .so files are allowed."}), 400
# Generate a unique file path
file_uuid = str(uuid.uuid4())
file_path = os.path.join('uploads', f"{file_uuid}_{file.filename}")
file.save(file_path)
# Determine the library name based on the request data
data = request.form
library_name = data.get('library_name', 'libbluetooth_jni.so')
# Patch the file
try:
l2c_fcr_chk_chan_modes_address = get_symbol_address(file_path, "l2c_fcr_chk_chan_modes")
patch_address(file_path, l2c_fcr_chk_chan_modes_address, "20008052c0035fd6")
l2cu_send_peer_info_req_address = get_symbol_address(file_path, "l2cu_send_peer_info_req")
patch_address(file_path, l2cu_send_peer_info_req_address, "c0035fd6")
except Exception as e:
logger.error(f"Error patching file: {str(e)}")
return jsonify({"error": f"Error patching file: {str(e)}"}), 500
# Log patch info
permalink_id = str(uuid.uuid4())
save_patch_info(permalink_id, file_path)
# Return the patched file directly
try:
return send_file(file_path, as_attachment=True, download_name=library_name)
except Exception as e:
logger.error(f"Error sending file: {str(e)}")
return jsonify({"error": f"Error sending file: {str(e)}"}), 500
@app.route('/download/<permalink_id>', methods=['GET'])
def download(permalink_id):
if permalink_id not in PATCHED_LIBRARIES:
return "Permalink expired or invalid", 404
file_path = PATCHED_LIBRARIES[permalink_id]['file_path']
library_name = PATCHED_LIBRARIES[permalink_id]['library_name']
if not os.path.exists(file_path):
return "File not found", 404
try:
copy_file_to_src(file_path, library_name)
zip_src_files()
except Exception as e:
logger.error(f"Error preparing download: {str(e)}")
return f"Error preparing download: {str(e)}", 500
resp = make_response(send_file('btl2capfix.zip', as_attachment=True))
resp.headers['Content-Disposition'] = f'attachment; filename=btl2capfix.zip'
return resp
def delete_expired_permalink(permalink_id):
if permalink_id in PATCHED_LIBRARIES:
file_path = PATCHED_LIBRARIES[permalink_id]['file_path']
if os.path.exists(file_path):
os.remove(file_path)
logger.info(f"Deleted file: {file_path}")
del PATCHED_LIBRARIES[permalink_id]
logger.info(f"Permalink {permalink_id} expired and removed from PATCHED_LIBRARIES")
if not os.path.exists('uploads'):
os.makedirs('uploads')
if __name__ == '__main__':
app.run(debug=True, host='0.0.0.0', port=8080)

View File

@@ -1,6 +0,0 @@
id=btl2capfix
name=Bluetooth L2CAP workaround for AirPods
version=v1
versionCode=1
author=kavishdevar
description=Fixes the Bluetooth L2CAP connection issue with AirPods

View File

@@ -1,4 +0,0 @@
#!/system/bin/sh
mount -t overlay overlay -o lowerdir=/apex/com.android.btservices/lib64,upperdir=/data/adb/modules/btl2capfix/apex/com.android.btservices/lib64,workdir=/data/adb/modules/btl2capfix/apex/com.android.btservices/work /apex/com.android.btservices/lib64
mount -t overlay overlay -o lowerdir=/apex/com.android.btservices@352090000/lib64,upperdir=/data/adb/modules/btl2capfix/apex/com.android.btservices@352090000/lib64,workdir=/data/adb/modules/btl2capfix/apex/com.android.btservices@352090000/work /apex/com.android.btservices@352090000/lib64

View File

@@ -125,3 +125,6 @@ else
rm -rf "$TEMP_DIR"
abort "Failed to patch the library."
fi
rm -rf "$TEMP_DIR"
rm -rf "$UNZIP_DIR"