Luiz Augusto von DentzandGreg Kroah-Hartman a23c49a5ea Bluetooth: SMP: Fix assumption of Central always being Initiator ...

[ Upstream commit 28cd47f751 ]

SMP initiator role shall be considered the one that initiates the
pairing procedure with SMP_CMD_PAIRING_REQ:

BLUETOOTH CORE SPECIFICATION Version 5.3 | Vol 3, Part H
page 1557:

Figure 2.1: LE pairing phases

Note that by sending SMP_CMD_SECURITY_REQ it doesn't change the role to
be Initiator.

Link: https://github.com/bluez/bluez/issues/567
Fixes: b28b494366 ("Bluetooth: Add strict checks for allowed SMP PDUs")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-08-29 17:30:43 +02:00

..

bnep

Bluetooth: bnep: Fix out-of-bound access

2024-08-29 17:30:38 +02:00

cmtp

…

hidp

…

rfcomm

Bluetooth: RFCOMM: Fix not validating setsockopt user input

2024-08-29 17:30:22 +02:00

6lowpan.c

…

a2mp.c

…

a2mp.h

…

af_bluetooth.c

Bluetooth: Consolidate code around sk_alloc into a helper function

2024-06-12 11:03:20 +02:00

amp.c

…

amp.h

…

aosp.c

…

aosp.h

…

ecdh_helper.c

…

ecdh_helper.h

…

eir.c

Bluetooth: Fix eir name length

2024-03-26 18:20:42 -04:00

eir.h

…

hci_codec.c

…

hci_codec.h

…

hci_conn.c

Bluetooth: hci_conn: Check non NULL function before calling for HFP offload

2024-08-29 17:30:34 +02:00

hci_core.c

Bluetooth: hci_core: Fix LE quote calculation

2024-08-29 17:30:42 +02:00

hci_debugfs.c

Bluetooth: Fix TOCTOU in HCI debugfs implementation

2024-04-10 16:28:24 +02:00

hci_debugfs.h

…

hci_event.c

Bluetooth: hci_event: set the conn encrypted before conn establishes

2024-04-10 16:28:24 +02:00

hci_request.c

Bluetooth: Fix memory leak in hci_req_sync_complete()

2024-04-17 11:18:22 +02:00

hci_request.h

Bluetooth: Delete unused hci_req_prepare_suspend() declaration

2023-10-10 22:00:40 +02:00

hci_sock.c

Bluetooth: Consolidate code around sk_alloc into a helper function

2024-06-12 11:03:20 +02:00

hci_sync.c

Bluetooth: hci_sync: avoid dup filtering when passive scanning with adv monitor

2024-08-14 13:52:44 +02:00

hci_sysfs.c

Bluetooth: Fix double free in hci_conn_cleanup

2023-11-28 17:06:56 +00:00

iso.c

Bluetooth: Consolidate code around sk_alloc into a helper function

2024-06-12 11:03:20 +02:00

Kconfig

…

l2cap_core.c

Bluetooth: l2cap: always unlock channel in l2cap_conless_channel()

2024-08-14 13:52:44 +02:00

l2cap_sock.c

Bluetooth: L2CAP: Fix deadlock

2024-07-25 09:49:20 +02:00

leds.c

…

leds.h

…

lib.c

…

Makefile

…

mgmt_config.c

…

mgmt_config.h

…

mgmt_util.c

…

mgmt_util.h

…

mgmt.c

Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor

2024-05-02 16:29:25 +02:00

msft.c

Bluetooth: msft: fix slab-use-after-free in msft_do_close()

2024-05-17 11:56:11 +02:00

msft.h

Bluetooth: msft: fix slab-use-after-free in msft_do_close()

2024-05-17 11:56:11 +02:00

sco.c

Bluetooth: Consolidate code around sk_alloc into a helper function

2024-06-12 11:03:20 +02:00

selftest.c

…

selftest.h

…

smp.c

Bluetooth: SMP: Fix assumption of Central always being Initiator

2024-08-29 17:30:43 +02:00

smp.h

…