Bluteooth: Reject SMP bonding if HCI_PAIRABLE is not set
If the remote device tries to initiate bonding with us and we don't have HCI_PAIRABLE set we should just flat out reject the request. This brings SMP in line with how the flag is used for BR/EDR SSP. Signed-off-by: Johan Hedberg <johan.hedberg@intel.com> Signed-off-by: Marcel Holtmann <marcel@holtmann.org>
This commit is contained in:
parent
e8b1202ce6
commit
b3c6410b8c
1 changed files with 9 additions and 0 deletions
|
@ -676,6 +676,7 @@ int smp_user_confirm_reply(struct hci_conn *hcon, u16 mgmt_op, __le32 passkey)
|
||||||
static u8 smp_cmd_pairing_req(struct l2cap_conn *conn, struct sk_buff *skb)
|
static u8 smp_cmd_pairing_req(struct l2cap_conn *conn, struct sk_buff *skb)
|
||||||
{
|
{
|
||||||
struct smp_cmd_pairing rsp, *req = (void *) skb->data;
|
struct smp_cmd_pairing rsp, *req = (void *) skb->data;
|
||||||
|
struct hci_dev *hdev = conn->hcon->hdev;
|
||||||
struct smp_chan *smp;
|
struct smp_chan *smp;
|
||||||
u8 key_size, auth, sec_level;
|
u8 key_size, auth, sec_level;
|
||||||
int ret;
|
int ret;
|
||||||
|
@ -696,6 +697,10 @@ static u8 smp_cmd_pairing_req(struct l2cap_conn *conn, struct sk_buff *skb)
|
||||||
if (!smp)
|
if (!smp)
|
||||||
return SMP_UNSPECIFIED;
|
return SMP_UNSPECIFIED;
|
||||||
|
|
||||||
|
if (!test_bit(HCI_PAIRABLE, &hdev->dev_flags) &&
|
||||||
|
(req->auth_req & SMP_AUTH_BONDING))
|
||||||
|
return SMP_PAIRING_NOTSUPP;
|
||||||
|
|
||||||
smp->preq[0] = SMP_CMD_PAIRING_REQ;
|
smp->preq[0] = SMP_CMD_PAIRING_REQ;
|
||||||
memcpy(&smp->preq[1], req, sizeof(*req));
|
memcpy(&smp->preq[1], req, sizeof(*req));
|
||||||
skb_pull(skb, sizeof(*req));
|
skb_pull(skb, sizeof(*req));
|
||||||
|
@ -911,6 +916,10 @@ static u8 smp_cmd_security_req(struct l2cap_conn *conn, struct sk_buff *skb)
|
||||||
if (test_and_set_bit(HCI_CONN_LE_SMP_PEND, &hcon->flags))
|
if (test_and_set_bit(HCI_CONN_LE_SMP_PEND, &hcon->flags))
|
||||||
return 0;
|
return 0;
|
||||||
|
|
||||||
|
if (!test_bit(HCI_PAIRABLE, &hcon->hdev->dev_flags) &&
|
||||||
|
(rp->auth_req & SMP_AUTH_BONDING))
|
||||||
|
return SMP_PAIRING_NOTSUPP;
|
||||||
|
|
||||||
smp = smp_chan_create(conn);
|
smp = smp_chan_create(conn);
|
||||||
if (!smp)
|
if (!smp)
|
||||||
return SMP_UNSPECIFIED;
|
return SMP_UNSPECIFIED;
|
||||||
|
|
Loading…
Add table
Reference in a new issue