chiark / gitweb /
fix handling unreadable images in update.extract_apk_icons
[fdroidserver.git] / fdroidserver / update.py
index 0892e810a37e4c32807669429a53a691d33fc7c3..3015e337ca6325813337e1a8c6bb6dd66a7f4178 100644 (file)
@@ -28,22 +28,24 @@ import socket
 import zipfile
 import hashlib
 import pickle
-from datetime import datetime, timedelta
+import time
+from datetime import datetime
 from argparse import ArgumentParser
 
 import collections
 from binascii import hexlify
 
-from PIL import Image
+from PIL import Image, PngImagePlugin
 import logging
 
+from . import _
 from . import common
 from . import index
 from . import metadata
 from .common import SdkToolsPopen
 from .exception import BuildException, FDroidException
 
-METADATA_VERSION = 18
+METADATA_VERSION = 19
 
 # less than the valid range of versionCode, i.e. Java's Integer.MIN_VALUE
 UNSET_VERSION_CODE = -0x100000000
@@ -82,6 +84,8 @@ GRAPHIC_NAMES = ('featureGraphic', 'icon', 'promoGraphic', 'tvBanner')
 SCREENSHOT_DIRS = ('phoneScreenshots', 'sevenInchScreenshots',
                    'tenInchScreenshots', 'tvScreenshots', 'wearScreenshots')
 
+BLANK_PNG_INFO = PngImagePlugin.PngInfo()
+
 
 def dpi_to_px(density):
     return (int(density) * 48) / 160
@@ -130,13 +134,13 @@ def update_wiki(apps, sortedids, apks):
         if app.Disabled:
             wikidata += '{{Disabled|' + app.Disabled + '}}\n'
         if app.AntiFeatures:
-            for af in app.AntiFeatures:
+            for af in sorted(app.AntiFeatures):
                 wikidata += '{{AntiFeature|' + af + '}}\n'
         if app.RequiresRoot:
             requiresroot = 'Yes'
         else:
             requiresroot = 'No'
-        wikidata += '{{App|id=%s|name=%s|added=%s|lastupdated=%s|source=%s|tracker=%s|web=%s|changelog=%s|donate=%s|flattr=%s|bitcoin=%s|litecoin=%s|license=%s|root=%s|author=%s|email=%s}}\n' % (
+        wikidata += '{{App|id=%s|name=%s|added=%s|lastupdated=%s|source=%s|tracker=%s|web=%s|changelog=%s|donate=%s|flattr=%s|liberapay=%s|bitcoin=%s|litecoin=%s|license=%s|root=%s|author=%s|email=%s}}\n' % (
             appid,
             app.Name,
             app.added.strftime('%Y-%m-%d') if app.added else '',
@@ -147,6 +151,7 @@ def update_wiki(apps, sortedids, apks):
             app.Changelog,
             app.Donate,
             app.FlattrID,
+            app.LiberapayID,
             app.Bitcoin,
             app.Litecoin,
             app.License,
@@ -368,10 +373,11 @@ def resize_icon(iconpath, density):
             im.thumbnail((size, size), Image.ANTIALIAS)
             logging.debug("%s was too large at %s - new size is %s" % (
                 iconpath, oldsize, im.size))
-            im.save(iconpath, "PNG")
+            im.save(iconpath, "PNG", optimize=True,
+                    pnginfo=BLANK_PNG_INFO, icc_profile=None)
 
     except Exception as e:
-        logging.error("Failed resizing {0} - {1}".format(iconpath, e))
+        logging.error(_("Failed resizing {path}: {error}".format(path=iconpath, error=e)))
 
     finally:
         if fp:
@@ -405,10 +411,10 @@ def getsig(apkpath):
         certs = [n for n in apk.namelist() if common.CERT_PATH_REGEX.match(n)]
 
         if len(certs) < 1:
-            logging.error("Found no signing certificates on %s" % apkpath)
+            logging.error(_("No signing certificates found in {path}").format(path=apkpath))
             return None
         if len(certs) > 1:
-            logging.error("Found multiple signing certificates on %s" % apkpath)
+            logging.error(_("Found multiple signing certificates in {path}").format(path=apkpath))
             return None
 
         cert = apk.read(certs[0])
@@ -493,14 +499,25 @@ def has_known_vulnerability(filename):
 
     Checks whether there are more than one classes.dex or AndroidManifest.xml
     files, which is invalid and an essential part of the "Master Key" attack.
-
     http://www.saurik.com/id/17
+
+    Janus is similar to Master Key but is perhaps easier to scan for.
+    https://www.guardsquare.com/en/blog/new-android-vulnerability-allows-attackers-modify-apps-without-affecting-their-signatures
     """
 
+    found_vuln = False
+
     # statically load this pattern
     if not hasattr(has_known_vulnerability, "pattern"):
         has_known_vulnerability.pattern = re.compile(b'.*OpenSSL ([01][0-9a-z.-]+)')
 
+    with open(filename.encode(), 'rb') as fp:
+        first4 = fp.read(4)
+    if first4 != b'\x50\x4b\x03\x04':
+        raise FDroidException(_('{path} has bad file signature "{pattern}", possible Janus exploit!')
+                              .format(path=filename, pattern=first4.decode().replace('\n', ' ')) + '\n'
+                              + 'https://www.guardsquare.com/en/blog/new-android-vulnerability-allows-attackers-modify-apps-without-affecting-their-signatures')
+
     files_in_apk = set()
     with zipfile.ZipFile(filename) as zf:
         for name in zf.namelist():
@@ -516,17 +533,20 @@ def has_known_vulnerability(filename):
                         if (version.startswith('1.0.1') and len(version) > 5 and version[5] >= 'r') \
                            or (version.startswith('1.0.2') and len(version) > 5 and version[5] >= 'f') \
                            or re.match(r'[1-9]\.[1-9]\.[0-9].*', version):
-                            logging.debug('"%s" contains recent %s (%s)', filename, name, version)
+                            logging.debug(_('"{path}" contains recent {name} ({version})')
+                                          .format(path=filename, name=name, version=version))
                         else:
-                            logging.warning('"%s" contains outdated %s (%s)', filename, name, version)
-                            return True
+                            logging.warning(_('"{path}" contains outdated {name} ({version})')
+                                            .format(path=filename, name=name, version=version))
+                            found_vuln = True
                         break
             elif name == 'AndroidManifest.xml' or name == 'classes.dex' or name.endswith('.so'):
                 if name in files_in_apk:
-                    return True
+                    logging.warning(_('{apkfilename} has multiple {name} files, looks like Master Key exploit!')
+                                    .format(apkfilename=filename, name=name))
+                    found_vuln = True
                 files_in_apk.add(name)
-
-    return False
+    return found_vuln
 
 
 def insert_obbs(repodir, apps, apks):
@@ -546,9 +566,9 @@ def insert_obbs(repodir, apps, apks):
     """
 
     def obbWarnDelete(f, msg):
-        logging.warning(msg + f)
+        logging.warning(msg + ' ' + f)
         if options.delete_unknown:
-            logging.error("Deleting unknown file: " + f)
+            logging.error(_("Deleting unknown file: {path}").format(path=f))
             os.remove(f)
 
     obbs = []
@@ -559,24 +579,25 @@ def insert_obbs(repodir, apps, apks):
         # obbfile looks like: [main|patch].<expansion-version>.<package-name>.obb
         chunks = obbfile.split('.')
         if chunks[0] != 'main' and chunks[0] != 'patch':
-            obbWarnDelete(f, 'OBB filename must start with "main." or "patch.": ')
+            obbWarnDelete(f, _('OBB filename must start with "main." or "patch.":'))
             continue
         if not re.match(r'^-?[0-9]+$', chunks[1]):
-            obbWarnDelete('The OBB version code must come after "' + chunks[0] + '.": ')
+            obbWarnDelete(f, _('The OBB version code must come after "{name}.":')
+                          .format(name=chunks[0]))
             continue
         versionCode = int(chunks[1])
         packagename = ".".join(chunks[2:-1])
 
         highestVersionCode = java_Integer_MIN_VALUE
         if packagename not in currentPackageNames:
-            obbWarnDelete(f, "OBB's packagename does not match a supported APK: ")
+            obbWarnDelete(f, _("OBB's packagename does not match a supported APK:"))
             continue
         for apk in apks:
             if packagename == apk['packageName'] and apk['versionCode'] > highestVersionCode:
                 highestVersionCode = apk['versionCode']
         if versionCode > highestVersionCode:
-            obbWarnDelete(f, 'OBB file has newer versionCode(' + str(versionCode)
-                          + ') than any APK: ')
+            obbWarnDelete(f, _('OBB file has newer versionCode({integer}) than any APK:')
+                          .format(integer=str(versionCode)))
             continue
         obbsha256 = sha256sum(f)
         obbs.append((packagename, versionCode, obbfile, obbsha256))
@@ -654,6 +675,35 @@ def _set_author_entry(app, key, f):
             app[key] = text
 
 
+def _strip_and_copy_image(inpath, outpath):
+    """Remove any metadata from image and copy it to new path
+
+    Sadly, image metadata like EXIF can be used to exploit devices.
+    It is not used at all in the F-Droid ecosystem, so its much safer
+    just to remove it entirely.
+
+    """
+
+    extension = common.get_extension(inpath)[1]
+    if os.path.isdir(outpath):
+        outpath = os.path.join(outpath, os.path.basename(inpath))
+    if extension == 'png':
+        with open(inpath, 'rb') as fp:
+            in_image = Image.open(fp)
+            in_image.save(outpath, "PNG", optimize=True,
+                          pnginfo=BLANK_PNG_INFO, icc_profile=None)
+    elif extension == 'jpg' or extension == 'jpeg':
+        with open(inpath, 'rb') as fp:
+            in_image = Image.open(fp)
+            data = list(in_image.getdata())
+            out_image = Image.new(in_image.mode, in_image.size)
+        out_image.putdata(data)
+        out_image.save(outpath, "JPEG", optimize=True)
+    else:
+        raise FDroidException(_('Unsupported file type "{extension}" for repo graphic')
+                              .format(extension=extension))
+
+
 def copy_triple_t_store_metadata(apps):
     """Include store metadata from the app's source repo
 
@@ -715,17 +765,18 @@ def copy_triple_t_store_metadata(apps):
 
                     base, extension = common.get_extension(f)
                     dirname = os.path.basename(root)
-                    if dirname in GRAPHIC_NAMES and extension in ALLOWED_EXTENSIONS:
+                    if extension in ALLOWED_EXTENSIONS \
+                       and (dirname in GRAPHIC_NAMES or dirname in SCREENSHOT_DIRS):
                         if segments[-2] == 'listing':
                             locale = segments[-3]
                         else:
                             locale = segments[-2]
-                        destdir = os.path.join('repo', packageName, locale)
+                        destdir = os.path.join('repo', packageName, locale, dirname)
                         os.makedirs(destdir, mode=0o755, exist_ok=True)
                         sourcefile = os.path.join(root, f)
-                        destfile = os.path.join(destdir, dirname + '.' + extension)
+                        destfile = os.path.join(destdir, os.path.basename(f))
                         logging.debug('copying ' + sourcefile + ' ' + destfile)
-                        shutil.copy(sourcefile, destfile)
+                        _strip_and_copy_image(sourcefile, destfile)
 
 
 def insert_localized_app_metadata(apps):
@@ -766,7 +817,8 @@ def insert_localized_app_metadata(apps):
 
     """
 
-    sourcedirs = glob.glob(os.path.join('build', '[A-Za-z]*', 'fastlane', 'metadata', 'android', '[a-z][a-z]*'))
+    sourcedirs = glob.glob(os.path.join('build', '[A-Za-z]*', 'src', '[A-Za-z]*', 'fastlane', 'metadata', 'android', '[a-z][a-z]*'))
+    sourcedirs += glob.glob(os.path.join('build', '[A-Za-z]*', 'fastlane', 'metadata', 'android', '[a-z][a-z]*'))
     sourcedirs += glob.glob(os.path.join('build', '[A-Za-z]*', 'metadata', '[a-z][a-z]*'))
     sourcedirs += glob.glob(os.path.join('metadata', '[A-Za-z]*', '[a-z][a-z]*'))
 
@@ -781,6 +833,17 @@ def insert_localized_app_metadata(apps):
                 continue
             locale = segments[-1]
             destdir = os.path.join('repo', packageName, locale)
+
+            # flavours specified in build receipt
+            build_flavours = ""
+            if apps[packageName] and 'builds' in apps[packageName] and len(apps[packageName].builds) > 0\
+                    and 'gradle' in apps[packageName].builds[-1]:
+                build_flavours = apps[packageName].builds[-1].gradle
+
+            if len(segments) >= 5 and segments[4] == "fastlane" and segments[3] not in build_flavours:
+                logging.debug("ignoring due to wrong flavour")
+                continue
+
             for f in files:
                 if f in ('description.txt', 'full_description.txt'):
                     _set_localized_text_entry(apps[packageName], locale, 'description',
@@ -811,16 +874,19 @@ def insert_localized_app_metadata(apps):
                 if base in GRAPHIC_NAMES and extension in ALLOWED_EXTENSIONS:
                     os.makedirs(destdir, mode=0o755, exist_ok=True)
                     logging.debug('copying ' + os.path.join(root, f) + ' ' + destdir)
-                    shutil.copy(os.path.join(root, f), destdir)
+                    _strip_and_copy_image(os.path.join(root, f), destdir)
             for d in dirs:
                 if d in SCREENSHOT_DIRS:
+                    if locale == 'images':
+                        locale = segments[-2]
+                        destdir = os.path.join('repo', packageName, locale)
                     for f in glob.glob(os.path.join(root, d, '*.*')):
-                        _, extension = common.get_extension(f)
+                        _ignored, extension = common.get_extension(f)
                         if extension in ALLOWED_EXTENSIONS:
                             screenshotdestdir = os.path.join(destdir, d)
                             os.makedirs(screenshotdestdir, mode=0o755, exist_ok=True)
                             logging.debug('copying ' + f + ' ' + screenshotdestdir)
-                            shutil.copy(f, screenshotdestdir)
+                            _strip_and_copy_image(f, screenshotdestdir)
 
     repofiles = sorted(glob.glob(os.path.join('repo', '[A-Za-z]*', '[a-z][a-z][A-Z-.@]*')))
     for d in repofiles:
@@ -837,24 +903,24 @@ def insert_localized_app_metadata(apps):
             base, extension = common.get_extension(filename)
 
             if packageName not in apps:
-                logging.warning('Found "%s" graphic without metadata for app "%s"!'
-                                % (filename, packageName))
+                logging.warning(_('Found "{path}" graphic without metadata for app "{name}"!')
+                                .format(path=filename, name=packageName))
                 continue
             graphics = _get_localized_dict(apps[packageName], locale)
 
             if extension not in ALLOWED_EXTENSIONS:
-                logging.warning('Only PNG and JPEG are supported for graphics, found: ' + f)
+                logging.warning(_('Only PNG and JPEG are supported for graphics, found: {path}').format(path=f))
             elif base in GRAPHIC_NAMES:
                 # there can only be zero or one of these per locale
                 graphics[base] = filename
             elif screenshotdir in SCREENSHOT_DIRS:
                 # there can any number of these per locale
-                logging.debug('adding to ' + screenshotdir + ': ' + f)
+                logging.debug(_('adding to {name}: {path}').format(name=screenshotdir, path=f))
                 if screenshotdir not in graphics:
                     graphics[screenshotdir] = []
                 graphics[screenshotdir].append(filename)
             else:
-                logging.warning('Unsupported graphics file found: ' + f)
+                logging.warning(_('Unsupported graphics file found: {path}').format(path=f))
 
 
 def scan_repo_files(apkcache, repodir, knownapks, use_date_from_file=False):
@@ -877,13 +943,15 @@ def scan_repo_files(apkcache, repodir, knownapks, use_date_from_file=False):
         filename = os.path.join(repodir, name)
         name_utf8 = name.decode('utf-8')
         if filename.endswith(b'_src.tar.gz'):
-            logging.debug('skipping source tarball: ' + filename.decode('utf-8'))
+            logging.debug(_('skipping source tarball: {path}')
+                          .format(path=filename.decode('utf-8')))
             continue
         if not common.is_repo_file(filename):
             continue
         stat = os.stat(filename)
         if stat.st_size == 0:
-            raise FDroidException(filename + ' is zero size!')
+            raise FDroidException(_('{path} is zero size!')
+                                  .format(path=filename))
 
         shasum = sha256sum(filename)
         usecache = False
@@ -897,13 +965,15 @@ def scan_repo_files(apkcache, repodir, knownapks, use_date_from_file=False):
                 else:
                     repo_file['added'] = datetime(*a[:6])
             if repo_file.get('hash') == shasum:
-                logging.debug("Reading " + name_utf8 + " from cache")
+                logging.debug(_("Reading {apkfilename} from cache")
+                              .format(apkfilename=name_utf8))
                 usecache = True
             else:
-                logging.debug("Ignoring stale cache data for " + name)
+                logging.debug(_("Ignoring stale cache data for {apkfilename}")
+                              .format(apkfilename=name_utf8))
 
         if not usecache:
-            logging.debug("Processing " + name_utf8)
+            logging.debug(_("Processing {apkfilename}").format(apkfilename=name_utf8))
             repo_file = collections.OrderedDict()
             repo_file['name'] = os.path.splitext(name_utf8)[0]
             # TODO rename apkname globally to something more generic
@@ -929,7 +999,7 @@ def scan_repo_files(apkcache, repodir, knownapks, use_date_from_file=False):
 
         if use_date_from_file:
             timestamp = stat.st_ctime
-            default_date_param = datetime.fromtimestamp(timestamp).utctimetuple()
+            default_date_param = time.gmtime(time.mktime(datetime.fromtimestamp(timestamp).timetuple()))
         else:
             default_date_param = None
 
@@ -970,11 +1040,15 @@ def scan_apk(apk_file):
     else:
         scan_apk_androguard(apk, apk_file)
 
-    # Get the signature
+    # Get the signature, or rather the signing key fingerprints
     logging.debug('Getting signature of {0}'.format(os.path.basename(apk_file)))
     apk['sig'] = getsig(apk_file)
     if not apk['sig']:
         raise BuildException("Failed to get apk signature")
+    apk['signer'] = common.apk_signer_fingerprint(os.path.join(os.getcwd(),
+                                                               apk_file))
+    if not apk.get('signer'):
+        raise BuildException("Failed to get apk signing key fingerprint")
 
     # Get size of the APK
     apk['size'] = os.path.getsize(apk_file)
@@ -995,13 +1069,13 @@ def scan_apk_aapt(apk, apkfile):
     if p.returncode != 0:
         if options.delete_unknown:
             if os.path.exists(apkfile):
-                logging.error("Failed to get apk information, deleting " + apkfile)
+                logging.error(_("Failed to get apk information, deleting {path}").format(path=apkfile))
                 os.remove(apkfile)
             else:
                 logging.error("Could not find {0} to remove it".format(apkfile))
         else:
-            logging.error("Failed to get apk information, skipping " + apkfile)
-        raise BuildException("Invalid APK")
+            logging.error(_("Failed to get apk information, skipping {path}").format(path=apkfile))
+        raise BuildException(_("Invalid APK"))
     for line in p.output.splitlines():
         if line.startswith("package:"):
             try:
@@ -1094,18 +1168,21 @@ def scan_apk_androguard(apk, apkfile):
         else:
             if options.delete_unknown:
                 if os.path.exists(apkfile):
-                    logging.error("Failed to get apk information, deleting " + apkfile)
+                    logging.error(_("Failed to get apk information, deleting {path}")
+                                  .format(path=apkfile))
                     os.remove(apkfile)
                 else:
-                    logging.error("Could not find {0} to remove it".format(apkfile))
+                    logging.error(_("Could not find {path} to remove it")
+                                  .format(path=apkfile))
             else:
-                logging.error("Failed to get apk information, skipping " + apkfile)
-            raise BuildException("Invaild APK")
+                logging.error(_("Failed to get apk information, skipping {path}")
+                              .format(path=apkfile))
+            raise BuildException(_("Invalid APK"))
     except ImportError:
         raise FDroidException("androguard library is not installed and aapt not present")
     except FileNotFoundError:
-        logging.error("Could not open apk file for analysis")
-        raise BuildException("Invalid APK")
+        logging.error(_("Could not open apk file for analysis"))
+        raise BuildException(_("Invalid APK"))
 
     apk['packageName'] = apkobject.get_package()
     apk['versionCode'] = int(apkobject.get_androidversion_code())
@@ -1196,16 +1273,6 @@ def process_apk(apkcache, apkfilename, repodir, knownapks, use_date_from_apk=Fal
      apk is the scanned apk information, and cachechanged is True if the apkcache got changed.
     """
 
-    if ' ' in apkfilename:
-        if options.rename_apks:
-            newfilename = apkfilename.replace(' ', '_')
-            os.rename(os.path.join(repodir, apkfilename),
-                      os.path.join(repodir, newfilename))
-            apkfilename = newfilename
-        else:
-            logging.critical("Spaces in filenames are not allowed.")
-            return True, None, False
-
     apk = {}
     apkfile = os.path.join(repodir, apkfilename)
 
@@ -1214,18 +1281,21 @@ def process_apk(apkcache, apkfilename, repodir, knownapks, use_date_from_apk=Fal
     if apkfilename in apkcache:
         apk = apkcache[apkfilename]
         if apk.get('hash') == sha256sum(apkfile):
-            logging.debug("Reading " + apkfilename + " from cache")
+            logging.debug(_("Reading {apkfilename} from cache")
+                          .format(apkfilename=apkfilename))
             usecache = True
         else:
-            logging.debug("Ignoring stale cache data for " + apkfilename)
+            logging.debug(_("Ignoring stale cache data for {apkfilename}")
+                          .format(apkfilename=apkfilename))
 
     if not usecache:
-        logging.debug("Processing " + apkfilename)
+        logging.debug(_("Processing {apkfilename}").format(apkfilename=apkfilename))
 
         try:
             apk = scan_apk(apkfile)
         except BuildException:
-            logging.warning('Skipping "%s" with invalid signature!', apkfilename)
+            logging.warning(_("Skipping '{apkfilename}' with invalid signature!")
+                            .format(apkfilename=apkfilename))
             return True, None, False
 
         # Check for debuggable apks...
@@ -1274,30 +1344,24 @@ def process_apk(apkcache, apkfilename, repodir, knownapks, use_date_from_apk=Fal
 
         if skipapk:
             if archive_bad_sig:
-                logging.warning('Archiving "' + apkfilename + '" with invalid signature!')
+                logging.warning(_('Archiving {apkfilename} with invalid signature!')
+                                .format(apkfilename=apkfilename))
                 move_apk_between_sections(repodir, 'archive', apk)
             else:
-                logging.warning('Skipping "' + apkfilename + '" with invalid signature!')
+                logging.warning(_('Skipping {apkfilename} with invalid signature!')
+                                .format(apkfilename=apkfilename))
             return True, None, False
 
         apkzip = zipfile.ZipFile(apkfile, 'r')
 
-        # if an APK has files newer than the system time, suggest updating
-        # the system clock.  This is useful for offline systems, used for
-        # signing, which do not have another source of clock sync info. It
-        # has to be more than 24 hours newer because ZIP/APK files do not
-        # store timezone info
         manifest = apkzip.getinfo('AndroidManifest.xml')
-        if manifest.date_time[1] == 0:  # month can't be zero
-            logging.debug('AndroidManifest.xml has no date')
-        else:
-            dt_obj = datetime(*manifest.date_time)
-            checkdt = dt_obj - timedelta(1)
-            if datetime.today() < checkdt:
-                logging.warning('System clock is older than manifest in: '
-                                + apkfilename
-                                + '\nSet clock to that time using:\n'
-                                + 'sudo date -s "' + str(dt_obj) + '"')
+        # 1980-0-0 means zeroed out, any other invalid date should trigger a warning
+        if (1980, 0, 0) != manifest.date_time[0:3]:
+            try:
+                common.check_system_clock(datetime(*manifest.date_time), apkfilename)
+            except ValueError as e:
+                logging.warning(_("{apkfilename}'s AndroidManifest.xml has a bad date: ")
+                                .format(apkfilename=apkfile) + str(e))
 
         # extract icons from APK zip file
         iconfilename = "%s.%s.png" % (apk['packageName'], apk['versionCode'])
@@ -1411,6 +1475,7 @@ def extract_apk_icons(icon_filename, apk, apkzip, repo_dir):
         icon_path = os.path.join(get_icon_dir(repo_dir, '0'), icon_filename)
         with open(icon_path, 'wb') as f:
             f.write(get_icon_bytes(apkzip, icon_src))
+        im = None
         try:
             im = Image.open(icon_path)
             dpi = px_to_dpi(im.size[0])
@@ -1424,7 +1489,11 @@ def extract_apk_icons(icon_filename, apk, apkzip, repo_dir):
                     empty_densities.remove(density)
                     break
         except Exception as e:
-            logging.warning("Failed reading {0} - {1}".format(icon_path, e))
+            logging.warning(_("Failed reading {path}: {error}")
+                            .format(path=icon_path, error=e))
+        finally:
+            if im:
+                im.close()
 
     if apk['icons']:
         apk['icon'] = icon_filename
@@ -1461,7 +1530,8 @@ def fill_missing_icon_densities(empty_densities, icon_filename, apk, repo_dir):
             size = dpi_to_px(density)
 
             im.thumbnail((size, size), Image.ANTIALIAS)
-            im.save(icon_path, "PNG")
+            im.save(icon_path, "PNG", optimize=True,
+                    pnginfo=BLANK_PNG_INFO, icc_profile=None)
             empty_densities.remove(density)
         except Exception as e:
             logging.warning("Invalid image file at %s: %s", last_icon_path, e)
@@ -1563,8 +1633,8 @@ def archive_old_apks(apps, apks, archapks, repodir, archivedir, defaultkeepversi
         else:
             keepversions = defaultkeepversions
 
-        logging.debug("Checking archiving for {0} - apks:{1}, keepversions:{2}, archapks:{3}"
-                      .format(appid, len(apks), keepversions, len(archapks)))
+        logging.debug(_("Checking archiving for {appid} - apks:{integer}, keepversions:{keep}, archapks:{arch}")
+                      .format(appid=appid, integer=len(apks), keep=keepversions, arch=len(archapks)))
 
         current_app_apks = filter_apk_list_sorted(apks)
         if len(current_app_apks) > keepversions:
@@ -1609,7 +1679,7 @@ def move_apk_between_sections(from_dir, to_dir, apk):
     for density in all_screen_densities:
         from_icon_dir = get_icon_dir(from_dir, density)
         to_icon_dir = get_icon_dir(to_dir, density)
-        if density not in apk['icons']:
+        if density not in apk.get('icons', []):
             continue
         _move_file(from_icon_dir, to_icon_dir, apk['icons'][density], True)
     if 'srcname' in apk:
@@ -1625,7 +1695,7 @@ def add_apks_to_per_app_repos(repodir, apks):
         apks_per_app[apk['packageName']] = apk
 
         if not os.path.exists(apk['per_app_icons']):
-            logging.info('Adding new repo for only ' + apk['packageName'])
+            logging.info(_('Adding new repo for only {name}').format(name=apk['packageName']))
             os.makedirs(apk['per_app_icons'])
 
         apkpath = os.path.join(repodir, apk['apkName'])
@@ -1638,6 +1708,55 @@ def add_apks_to_per_app_repos(repodir, apks):
             shutil.copy(apkascpath, apk['per_app_repo'])
 
 
+def create_metadata_from_template(apk):
+    '''create a new metadata file using internal or external template
+
+    Generate warnings for apk's with no metadata (or create skeleton
+    metadata files, if requested on the command line).  Though the
+    template file is YAML, this uses neither pyyaml nor ruamel.yaml
+    since those impose things on the metadata file made from the
+    template: field sort order, empty field value, formatting, etc.
+    '''
+
+    import yaml
+    if os.path.exists('template.yml'):
+        with open('template.yml') as f:
+            metatxt = f.read()
+        if 'name' in apk and apk['name'] != '':
+            metatxt = re.sub(r'''^(((Auto)?Name|Summary):)[ '"\.]*$''',
+                             r'\1 ' + apk['name'],
+                             metatxt,
+                             flags=re.IGNORECASE | re.MULTILINE)
+        else:
+            logging.warning(_('{appid} does not have a name! Using package name instead.')
+                            .format(appid=apk['packageName']))
+            metatxt = re.sub(r'^(((Auto)?Name|Summary):).*$',
+                             r'\1 ' + apk['packageName'],
+                             metatxt,
+                             flags=re.IGNORECASE | re.MULTILINE)
+        with open(os.path.join('metadata', apk['packageName'] + '.yml'), 'w') as f:
+            f.write(metatxt)
+    else:
+        app = dict()
+        app['Categories'] = [os.path.basename(os.getcwd())]
+        # include some blanks as part of the template
+        app['AuthorName'] = ''
+        app['Summary'] = ''
+        app['WebSite'] = ''
+        app['IssueTracker'] = ''
+        app['SourceCode'] = ''
+        app['CurrentVersionCode'] = 2147483647  # Java's Integer.MAX_VALUE
+        if 'name' in apk and apk['name'] != '':
+            app['Name'] = apk['name']
+        else:
+            logging.warning(_('{appid} does not have a name! Using package name instead.')
+                            .format(appid=apk['packageName']))
+            app['Name'] = apk['packageName']
+        with open(os.path.join('metadata', apk['packageName'] + '.yml'), 'w') as f:
+            yaml.dump(app, f, default_flow_style=False)
+    logging.info(_("Generated skeleton metadata for {appid}").format(appid=apk['packageName']))
+
+
 config = None
 options = None
 
@@ -1650,34 +1769,34 @@ def main():
     parser = ArgumentParser()
     common.setup_global_opts(parser)
     parser.add_argument("--create-key", action="store_true", default=False,
-                        help="Create a repo signing key in a keystore")
+                        help=_("Add a repo signing key to an unsigned repo"))
     parser.add_argument("-c", "--create-metadata", action="store_true", default=False,
-                        help="Create skeleton metadata files that are missing")
+                        help=_("Add skeleton metadata files for APKs that are missing them"))
     parser.add_argument("--delete-unknown", action="store_true", default=False,
-                        help="Delete APKs and/or OBBs without metadata from the repo")
+                        help=_("Delete APKs and/or OBBs without metadata from the repo"))
     parser.add_argument("-b", "--buildreport", action="store_true", default=False,
-                        help="Report on build data status")
+                        help=_("Report on build data status"))
     parser.add_argument("-i", "--interactive", default=False, action="store_true",
-                        help="Interactively ask about things that need updating.")
+                        help=_("Interactively ask about things that need updating."))
     parser.add_argument("-I", "--icons", action="store_true", default=False,
-                        help="Resize all the icons exceeding the max pixel size and exit")
+                        help=_("Resize all the icons exceeding the max pixel size and exit"))
     parser.add_argument("-e", "--editor", default="/etc/alternatives/editor",
-                        help="Specify editor to use in interactive mode. Default " +
-                        "is /etc/alternatives/editor")
+                        help=_("Specify editor to use in interactive mode. Default " +
+                               "is {path}").format(path='/etc/alternatives/editor'))
     parser.add_argument("-w", "--wiki", default=False, action="store_true",
-                        help="Update the wiki")
+                        help=_("Update the wiki"))
     parser.add_argument("--pretty", action="store_true", default=False,
-                        help="Produce human-readable index.xml")
+                        help=_("Produce human-readable XML/JSON for index files"))
     parser.add_argument("--clean", action="store_true", default=False,
-                        help="Clean update - don't uses caches, reprocess all apks")
+                        help=_("Clean update - don't uses caches, reprocess all APKs"))
     parser.add_argument("--nosign", action="store_true", default=False,
-                        help="When configured for signed indexes, create only unsigned indexes at this stage")
+                        help=_("When configured for signed indexes, create only unsigned indexes at this stage"))
     parser.add_argument("--use-date-from-apk", action="store_true", default=False,
-                        help="Use date from apk instead of current time for newly added apks")
+                        help=_("Use date from APK instead of current time for newly added APKs"))
     parser.add_argument("--rename-apks", action="store_true", default=False,
-                        help="Rename APK files that do not match package.name_123.apk")
+                        help=_("Rename APK files that do not match package.name_123.apk"))
     parser.add_argument("--allow-disabled-algorithms", action="store_true", default=False,
-                        help="Include APKs that are signed with disabled algorithms like MD5")
+                        help=_("Include APKs that are signed with disabled algorithms like MD5"))
     metadata.add_metadata_arguments(parser)
     options = parser.parse_args()
     metadata.warnings_action = options.W
@@ -1685,7 +1804,7 @@ def main():
     config = common.read_config(options)
 
     if not ('jarsigner' in config and 'keytool' in config):
-        raise FDroidException('Java JDK not found! Install in standard location or set java_paths!')
+        raise FDroidException(_('Java JDK not found! Install in standard location or set java_paths!'))
 
     repodirs = ['repo']
     if config['archive_older'] != 0:
@@ -1704,13 +1823,14 @@ def main():
     for k in ['repo_icon', 'archive_icon']:
         if k in config:
             if not os.path.exists(config[k]):
-                logging.critical(k + ' "' + config[k] + '" does not exist! Correct it in config.py.')
+                logging.critical(_('{name} "{path}" does not exist! Correct it in config.py.')
+                                 .format(name=k, path=config[k]))
                 sys.exit(1)
 
     # if the user asks to create a keystore, do it now, reusing whatever it can
     if options.create_key:
         if os.path.exists(config['keystore']):
-            logging.critical("Cowardily refusing to overwrite existing signing key setup!")
+            logging.critical(_("Cowardily refusing to overwrite existing signing key setup!"))
             logging.critical("\t'" + config['keystore'] + "'")
             sys.exit(1)
 
@@ -1757,55 +1877,24 @@ def main():
                                            options.use_date_from_apk)
     cachechanged = cachechanged or fcachechanged
     apks += files
-    # Generate warnings for apk's with no metadata (or create skeleton
-    # metadata files, if requested on the command line)
-    newmetadata = False
     for apk in apks:
         if apk['packageName'] not in apps:
             if options.create_metadata:
-                import yaml
-                with open(os.path.join('metadata', apk['packageName'] + '.yml'), 'w') as f:
-                    # this should use metadata.App() and
-                    # metadata.write_yaml(), but since ruamel.yaml
-                    # 0.13 is not widely distributed yet, and it's
-                    # special tricks are not really needed here, this
-                    # uses the plain YAML lib
-                    if os.path.exists('template.yml'):
-                        with open('template.yml') as fp:
-                            app = yaml.load(fp)
-                    else:
-                        app = dict()
-                        app['Categories'] = [os.path.basename(os.getcwd())]
-                        # include some blanks as part of the template
-                        app['AuthorName'] = ''
-                        app['Summary'] = ''
-                        app['WebSite'] = ''
-                        app['IssueTracker'] = ''
-                        app['SourceCode'] = ''
-                        app['CurrentVersionCode'] = 2147483647  # Java's Integer.MAX_VALUE
-                    if 'name' in apk and apk['name'] != '':
-                        app['Name'] = apk['name']
-                    else:
-                        logging.warning(apk['packageName'] + ' does not have a name! Using package name instead.')
-                        app['Name'] = apk['packageName']
-                    yaml.dump(app, f, default_flow_style=False)
-                    logging.info("Generated skeleton metadata for " + apk['packageName'])
-                    newmetadata = True
+                create_metadata_from_template(apk)
+                apps = metadata.read_metadata()
             else:
-                msg = apk['apkName'] + " (" + apk['packageName'] + ") has no metadata!"
+                msg = _("{apkfilename} ({appid}) has no metadata!") \
+                    .format(apkfilename=apk['apkName'], appid=apk['packageName'])
                 if options.delete_unknown:
-                    logging.warn(msg + "\n\tdeleting: repo/" + apk['apkName'])
+                    logging.warn(msg + '\n\t' + _("deleting: repo/{apkfilename}")
+                                 .format(apkfilename=apk['apkName']))
                     rmf = os.path.join(repodirs[0], apk['apkName'])
                     if not os.path.exists(rmf):
-                        logging.error("Could not find {0} to remove it".format(rmf))
+                        logging.error(_("Could not find {path} to remove it").format(path=rmf))
                     else:
                         os.remove(rmf)
                 else:
-                    logging.warn(msg + "\n\tUse `fdroid update -c` to create it.")
-
-    # update the metadata with the newly created ones included
-    if newmetadata:
-        apps = metadata.read_metadata()
+                    logging.warn(msg + '\n\t' + _("Use `fdroid update -c` to create it."))
 
     copy_triple_t_store_metadata(apps)
     insert_obbs(repodirs[0], apps, apks)
@@ -1839,7 +1928,7 @@ def main():
             if os.path.isdir(repodir):
                 index.make(appdict, [appid], apks, repodir, False)
             else:
-                logging.info('Skipping index generation for ' + appid)
+                logging.info(_('Skipping index generation for {appid}').format(appid=appid))
         return
 
     if len(repodirs) > 1:
@@ -1885,7 +1974,7 @@ def main():
     if options.wiki:
         update_wiki(apps, sortedids, apks + archapks)
 
-    logging.info("Finished.")
+    logging.info(_("Finished"))
 
 
 if __name__ == "__main__":