Commit 455c2ff0 authored by Marcel Holtmann's avatar Marcel Holtmann Committed by Johan Hedberg

Bluetooth: Fix BR/EDR out-of-band pairing with only initiator data

When only the pairing initiator is providing out-of-band data, then
the receiver side was ignoring the data. For some reason the code was
checking if the initiator has received out-of-band data and only then
also provide the required inidication that the acceptor actually has
the needed data available.

For BR/EDR out-of-band pairing it is enough if one side has received
out-of-band data. There are no extra checks needed here to make this
work smoothly. The only thing that is needed is to tell the controller
if data is present (and if it is P-192 or P-256 or both) and then let
the controller actually figure out the rest.

This means the check for outgoing connection or if the initiator has
indicated data are completely pointless and are in fact actually
causing harm. The check in question is this one:

   if (conn->out || test_bit(HCI_CONN_REMOTE_OOB, &conn->flags)) {

After just taking the conditional check out and always executing the
code for determining the type of out-of-band data, the pairing works
flawlessly and prodcudes authenticated link keys.

The patch itself looks more complicated due to the reformatting of the
indentation, but it essentially just a two-line change.
Signed-off-by: default avatarMarcel Holtmann <marcel@holtmann.org>
Signed-off-by: default avatarJohan Hedberg <johan.hedberg@intel.com>
parent 4f0f155c
...@@ -3889,41 +3889,37 @@ static u8 bredr_oob_data_present(struct hci_conn *conn) ...@@ -3889,41 +3889,37 @@ static u8 bredr_oob_data_present(struct hci_conn *conn)
if (!data) if (!data)
return 0x00; return 0x00;
if (conn->out || test_bit(HCI_CONN_REMOTE_OOB, &conn->flags)) { if (bredr_sc_enabled(hdev)) {
if (bredr_sc_enabled(hdev)) { /* When Secure Connections is enabled, then just
/* When Secure Connections is enabled, then just * return the present value stored with the OOB
* return the present value stored with the OOB * data. The stored value contains the right present
* data. The stored value contains the right present * information. However it can only be trusted when
* information. However it can only be trusted when * not in Secure Connection Only mode.
* not in Secure Connection Only mode. */
*/ if (!hci_dev_test_flag(hdev, HCI_SC_ONLY))
if (!hci_dev_test_flag(hdev, HCI_SC_ONLY)) return data->present;
return data->present;
/* When Secure Connections Only mode is enabled, then
* the P-256 values are required. If they are not
* available, then do not declare that OOB data is
* present.
*/
if (!memcmp(data->rand256, ZERO_KEY, 16) ||
!memcmp(data->hash256, ZERO_KEY, 16))
return 0x00;
return 0x02;
}
/* When Secure Connections is not enabled or actually /* When Secure Connections Only mode is enabled, then
* not supported by the hardware, then check that if * the P-256 values are required. If they are not
* P-192 data values are present. * available, then do not declare that OOB data is
* present.
*/ */
if (!memcmp(data->rand192, ZERO_KEY, 16) || if (!memcmp(data->rand256, ZERO_KEY, 16) ||
!memcmp(data->hash192, ZERO_KEY, 16)) !memcmp(data->hash256, ZERO_KEY, 16))
return 0x00; return 0x00;
return 0x01; return 0x02;
} }
return 0x00; /* When Secure Connections is not enabled or actually
* not supported by the hardware, then check that if
* P-192 data values are present.
*/
if (!memcmp(data->rand192, ZERO_KEY, 16) ||
!memcmp(data->hash192, ZERO_KEY, 16))
return 0x00;
return 0x01;
} }
static void hci_io_capa_request_evt(struct hci_dev *hdev, struct sk_buff *skb) static void hci_io_capa_request_evt(struct hci_dev *hdev, struct sk_buff *skb)
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment