esp-idf/components/bt/host/bluedroid
Chinmay Chhajed b3d5ed3a03 Bluedroid: Fixes for some vulnerabilities.
This commit fixes 'Impersonation in Passkey entry protocol'
(CVE-2020-26558) and suggests fixes for other vulnerabilites like
'Impersonation in the Pin Pairing Protocol' (CVE-2020-26555) and
'Authentication of the LE Legacy Pairing Protocol'

CVE-2020-26558 can be easily implemented if the peer device can
impersonate our public key. This commit adds a check by comparing our
and received public key and returns failed pairing if keys are same.

This commit also adds comments suggesting to use secure connection when
supported by all devices.
2020-12-25 16:01:47 +05:30
..
api Bluedroid: Fixes for some vulnerabilities. 2020-12-25 16:01:47 +05:30
bta Merge branch 'feature/btdm_support_some_ble_new_features_v4.0' into 'release/v4.0' 2020-12-03 19:04:02 +08:00
btc Fix crash cause by calling a2dp deinit when connected 2020-12-21 10:27:04 +08:00
common/include/common Merge branch 'feature/btdm_support_some_ble_new_features_v4.0' into 'release/v4.0' 2020-12-03 19:04:02 +08:00
device Bluetooth component refactoring 2019-06-30 16:39:00 +08:00
external/sbc components/bt: Fix linking fail with toolchain 8.2.0 2019-08-30 17:56:01 +08:00
hci add congest direct callback and fix malloc failed when multi_connection notify performance test 2020-05-15 16:18:31 +08:00
main Bluetooth component refactoring 2019-06-30 16:39:00 +08:00
stack Bluedroid: Fixes for some vulnerabilities. 2020-12-25 16:01:47 +05:30
Kconfig.in component/bt: Add a macro to control the compilation of blufi. 2020-11-24 10:54:39 +08:00