Log firmware revision check to Sentry on mobile

suite-native/app/src/hooks/useGlobalHooks.tsx

@@ -1,4 +1,8 @@
-import { useDetectDeviceError, useHandleDeviceConnection } from '@suite-native/device';
+import {
+    useDetectDeviceError,
+    useHandleDeviceConnection,
+    useReportDeviceCompromised,
+} from '@suite-native/device';
 import { useConnectPopupNavigation } from '@suite-native/module-connect-popup';
 
 import { useCoinEnablingInitialCheck } from './useCoinEnablingInitialCheck';
@@ -14,4 +18,5 @@ export const useGlobalHooks = () => {
 
     useHandleDeviceConnection();
     useDetectDeviceError();
+    useReportDeviceCompromised();
 };

suite-native/device/package.json

@@ -15,6 +15,7 @@
         "@reduxjs/toolkit": "1.9.5",
         "@sentry/react-native": "6.5.0",
         "@suite-common/redux-utils": "workspace:*",
+        "@suite-common/suite-utils": "workspace:*",
         "@suite-common/wallet-core": "workspace:*",
         "@suite-common/wallet-utils": "workspace:*",
         "@suite-native/alerts": "workspace:*",
@@ -29,6 +30,7 @@
         "@suite-native/navigation": "workspace:*",
         "@suite-native/settings": "workspace:*",
         "@trezor/connect": "workspace:*",
+        "@trezor/device-utils": "workspace:*",
         "@trezor/styles": "workspace:*",
         "lottie-react-native": "^7.1.0",
         "react": "18.2.0",

suite-native/device/src/hooks/useReportDeviceCompromised.ts

@@ -0,0 +1,38 @@
+import { useSelector } from 'react-redux';
+import { useEffect, useMemo } from 'react';
+
+import * as Sentry from '@sentry/react-native';
+
+import { getFirmwareVersion } from '@trezor/device-utils';
+import { selectSelectedDevice } from '@suite-common/wallet-core';
+
+import { selectFirmwareRevisionCheckError } from '../selectors';
+
+const reportCheckFail = (checkType: 'Firmware revision', contextData: any) => {
+    Sentry.captureException(`${checkType} check failed! ${JSON.stringify(contextData)}`);
+};
+
+const useCommonData = () => {
+    const device = useSelector(selectSelectedDevice);
+    const model = device?.features?.internal_model;
+    const revision = device?.features?.revision;
+    const version = getFirmwareVersion(device);
+    const vendor = device?.features?.fw_vendor;
+
+    return useMemo(
+        () => ({ model, revision, version, vendor }),
+        [model, revision, version, vendor],
+    );
+};
+
+export const useReportDeviceCompromised = () => {
+    const commonData = useCommonData();
+
+    const revisionCheckError = useSelector(selectFirmwareRevisionCheckError);
+
+    useEffect(() => {
+        if (revisionCheckError !== null) {
+            reportCheckFail('Firmware revision', { ...commonData, revisionCheckError });
+        }
+    }, [commonData, revisionCheckError]);
+};

suite-native/device/src/index.ts

@@ -3,6 +3,7 @@ export * from './middlewares/buttonRequestMiddleware';
 export * from './hooks/useHandleDeviceConnection';
 export * from './hooks/useDetectDeviceError';
 export * from './hooks/useReportDeviceConnectToAnalytics';
+export * from './hooks/useReportDeviceCompromised';
 export * from './components/ConnectDeviceAnimation';
 export * from './components/ConfirmOnTrezorImage';
 export * from './components/ConnectorImage';

suite-native/device/src/selectors.ts

@@ -21,6 +21,7 @@ import {
     selectIsDiscoveredDeviceAccountless,
     selectIsUnacquiredDevice,
 } from '@suite-common/wallet-core';
+import { isDeviceAcquired } from '@suite-common/suite-utils';
 import { getTotalFiatBalance } from '@suite-common/wallet-utils';
 import { selectFiatCurrencyCode, SettingsSliceRootState } from '@suite-native/settings';
 
@@ -106,3 +107,17 @@ export const selectHasNoDeviceWithEmptyPassphrase = createMemoizedSelector(
     [selectDeviceInstances],
     deviceInstances => A.isEmpty(deviceInstances.filter(d => d.useEmptyPassphrase)),
 );
+
+/**
+ * Get firmware revision check error, or null if check was successful / skipped.
+ */
+export const selectFirmwareRevisionCheckError = (state: DeviceRootState) => {
+    const device = selectSelectedDevice(state);
+    if (!isDeviceAcquired(device) || !device.authenticityChecks) return null;
+    const checkResult = device.authenticityChecks.firmwareRevision;
+
+    // null means not performed, then don't consider it failed
+    if (!checkResult || checkResult.success) return null;
+
+    return checkResult.error;
+};

suite-native/device/tsconfig.json

@@ -5,6 +5,9 @@
         {
             "path": "../../suite-common/redux-utils"
         },
+        {
+            "path": "../../suite-common/suite-utils"
+        },
         {
             "path": "../../suite-common/wallet-core"
         },
@@ -23,6 +26,7 @@
         { "path": "../navigation" },
         { "path": "../settings" },
         { "path": "../../packages/connect" },
+        { "path": "../../packages/device-utils" },
         { "path": "../../packages/styles" }
     ],
     "include": [".", "**/*.json"]

yarn.lock

@@ -10274,6 +10274,7 @@ __metadata:
     "@reduxjs/toolkit": "npm:1.9.5"
     "@sentry/react-native": "npm:6.5.0"
     "@suite-common/redux-utils": "workspace:*"
+    "@suite-common/suite-utils": "workspace:*"
     "@suite-common/wallet-core": "workspace:*"
     "@suite-common/wallet-utils": "workspace:*"
     "@suite-native/alerts": "workspace:*"
@@ -10288,6 +10289,7 @@ __metadata:
     "@suite-native/navigation": "workspace:*"
     "@suite-native/settings": "workspace:*"
     "@trezor/connect": "workspace:*"
+    "@trezor/device-utils": "workspace:*"
     "@trezor/styles": "workspace:*"
     lottie-react-native: "npm:^7.1.0"
     react: "npm:18.2.0"