esp-idf/components/bt/host/bluedroid/stack
Chinmay Chhajed 235628355f Bluedroid: Fixes for some vulnerabilities.
This commit fixes 'Impersonation in Passkey entry protocol'
(CVE-2020-26558) and suggests fixes for other vulnerabilites like
'Impersonation in the Pin Pairing Protocol' (CVE-2020-26555) and
'Authentication of the LE Legacy Pairing Protocol'

CVE-2020-26558 can be easily implemented if the peer device can
impersonate our public key. This commit adds a check by comparing our
and received public key and returns failed pairing if keys are same.

This commit also adds comments suggesting to use secure connection when
supported by all devices.
2020-12-25 16:01:11 +05:30
..
a2dp Bluetooth component refactoring 2019-06-30 16:39:00 +08:00
avct Bluetooth component refactoring 2019-06-30 16:39:00 +08:00
avdt Remove (x2) variable in BCM_STRNCPY_S and BCM_STRCPY_S when performance optimization enabled 2020-03-12 16:20:58 +08:00
avrc Bluetooth component refactoring 2019-06-30 16:39:00 +08:00
btm component/bt: support BLE Read Attribute value by UUID 2020-12-03 15:19:44 +08:00
btu replace list and ringbuffer with fixed queue 2020-11-06 03:38:52 +00:00
gap Bluetooth component refactoring 2019-06-30 16:39:00 +08:00
gatt component/bt: support BLE Application Layer Encryption key size check 2020-12-03 15:19:27 +08:00
hcic components/bt: Add API and EVT for BLE set channels(BLE) 2019-10-25 11:39:35 +08:00
include/stack component/bt: refactor ble random address setting 2020-12-03 15:19:35 +08:00
l2cap components/bt: Fixed the problem of early release of pointer(p_ccb) in funcion 2020-12-18 11:32:31 +08:00
rfcomm move flow control to btc layer 2020-11-06 03:38:52 +00:00
sdp Add some debug log for bt: 2020-09-04 14:40:19 +08:00
smp Bluedroid: Fixes for some vulnerabilities. 2020-12-25 16:01:11 +05:30