Do Not Unprovision Baked-In DRM Certs

Merge from Widevine repo of http://go/wvgerrit/49820

Devices with baked-in DRM certs cannot be reprovisioned. As such, we
must protect them against being unprovisioned. Currently, our unit
tests break such devices by attempting to unprovision them. This patch
adds code to block the Unprovision() call on these devices.

Bug: 69264798
Test: CE CDM Unit Tests
Test: tested as part of http://go/ag/4674759
Change-Id: I49322dcb2d3d5c7953e870eb91a9e0b978d4dabe

libwvdrmengine/include/WVErrors.h

@@ -269,10 +269,11 @@ enum {
   kNotAnEntitlementSession = ERROR_DRM_VENDOR_MIN + 278,
   kLoadEntitledContentKeysError = ERROR_DRM_VENDOR_MIN + 279,
   kGetProvisioningError = ERROR_DRM_VENDOR_MIN + 280,
+  kDeviceCannotReprovision = ERROR_DRM_VENDOR_MIN + 281,
 
   // This should always follow the last error code.
   // The offset value should be updated each time a new error code is added.
-  kErrorWVDrmMaxErrorUsed = ERROR_DRM_VENDOR_MIN + 280,
+  kErrorWVDrmMaxErrorUsed = ERROR_DRM_VENDOR_MIN + 281,
 
   // Used by crypto test mode
   kErrorTestMode = ERROR_DRM_VENDOR_MAX,

libwvdrmengine/include/mapErrors-inl.h

@@ -520,7 +520,8 @@ static android::status_t mapCdmResponseType(wvcdm::CdmResponseType res) {
       return kLoadEntitledContentKeysError;
     case wvcdm::GET_PROVISIONING_METHOD_ERROR:
       return kGetProvisioningError;
-
+    case wvcdm::DEVICE_CANNOT_REPROVISION:
+      return kDeviceCannotReprovision;
   }
 
   // Return here instead of as a default case so that the compiler will warn