esp-idf/components/bt
Chinmay Chhajed b3d5ed3a03 Bluedroid: Fixes for some vulnerabilities.
This commit fixes 'Impersonation in Passkey entry protocol'
(CVE-2020-26558) and suggests fixes for other vulnerabilites like
'Impersonation in the Pin Pairing Protocol' (CVE-2020-26555) and
'Authentication of the LE Legacy Pairing Protocol'

CVE-2020-26558 can be easily implemented if the peer device can
impersonate our public key. This commit adds a check by comparing our
and received public key and returns failed pairing if keys are same.

This commit also adds comments suggesting to use secure connection when
supported by all devices.
2020-12-25 16:01:47 +05:30
..
common Merge branch 'bugfix/blufi_config_potential_double_free_v4.0' into 'release/v4.0' 2020-12-02 17:03:27 +08:00
controller components/bt: Fix waking up fail while sleeping 2020-12-22 21:28:44 +08:00
esp_ble_mesh ble_mesh: stack: Need uuid when adding device for provisioning 2020-12-15 11:59:11 +00:00
host Bluedroid: Fixes for some vulnerabilities. 2020-12-25 16:01:47 +05:30
include components/bt: Make sleep avaliable in hli(for future use) 2020-12-22 21:23:09 +08:00
test components: use new component registration api 2019-06-21 19:53:29 +08:00
CMakeLists.txt ble_mesh: stack: Move device property to model common part 2020-10-12 10:17:48 +08:00
component.mk ble_mesh: stack: Move device property to model common part 2020-10-12 10:17:48 +08:00
Kconfig Enable PCM config in Host 2020-12-17 20:35:57 +08:00
sdkconfig.rename ble_mesh: stack: Update option of using DRAM/SPIRAM for memory allocation 2020-07-15 09:41:15 +08:00