Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1143d458 authored by Brian Gix's avatar Brian Gix Committed by Gustavo Padovan
Browse files

Bluetooth: Add HCI User Passkey Req Evt handling 



Some MITM scenarios require handling of the User Passkey Request event,
by querying the user, and passing the response back.

Signed-off-by: default avatarBrian Gix <bgix@codeaurora.org>
Signed-off-by: default avatarGustavo F. Padovan <padovan@profusion.mobi>
parent 604086b7

net/bluetooth/hci_event.c

+58 −0
Original line number Diff line number Diff line
@@ -931,6 +931,37 @@ static void hci_cc_user_confirm_neg_reply(struct hci_dev *hdev, 
	hci_dev_unlock(hdev);

}



static void hci_cc_user_passkey_reply(struct hci_dev *hdev, struct sk_buff *skb)

{

	struct hci_rp_user_confirm_reply *rp = (void *) skb->data;



	BT_DBG("%s status 0x%x", hdev->name, rp->status);



	hci_dev_lock(hdev);



	if (test_bit(HCI_MGMT, &hdev->flags))

		mgmt_user_passkey_reply_complete(hdev, &rp->bdaddr,

								rp->status);



	hci_dev_unlock(hdev);

}



static void hci_cc_user_passkey_neg_reply(struct hci_dev *hdev,

							struct sk_buff *skb)

{

	struct hci_rp_user_confirm_reply *rp = (void *) skb->data;



	BT_DBG("%s status 0x%x", hdev->name, rp->status);



	hci_dev_lock(hdev);



	if (test_bit(HCI_MGMT, &hdev->flags))

		mgmt_user_passkey_neg_reply_complete(hdev, &rp->bdaddr,

								rp->status);



	hci_dev_unlock(hdev);

}



static void hci_cc_read_local_oob_data_reply(struct hci_dev *hdev,

							struct sk_buff *skb)

{
@@ -2015,6 +2046,14 @@ static inline void hci_cmd_complete_evt(struct hci_dev *hdev, struct sk_buff *sk 
		hci_cc_user_confirm_neg_reply(hdev, skb);

		break;



	case HCI_OP_USER_PASSKEY_REPLY:

		hci_cc_user_passkey_reply(hdev, skb);

		break;



	case HCI_OP_USER_PASSKEY_NEG_REPLY:

		hci_cc_user_passkey_neg_reply(hdev, skb);

		break;



	case HCI_OP_LE_SET_SCAN_ENABLE:

		hci_cc_le_set_scan_enable(hdev, skb);

		break;
@@ -2774,6 +2813,21 @@ unlock: 
	hci_dev_unlock(hdev);

}



static inline void hci_user_passkey_request_evt(struct hci_dev *hdev,

							struct sk_buff *skb)

{

	struct hci_ev_user_passkey_req *ev = (void *) skb->data;



	BT_DBG("%s", hdev->name);



	hci_dev_lock(hdev);



	if (test_bit(HCI_MGMT, &hdev->flags))

		mgmt_user_passkey_request(hdev, &ev->bdaddr);



	hci_dev_unlock(hdev);

}



static inline void hci_simple_pair_complete_evt(struct hci_dev *hdev, struct sk_buff *skb)

{

	struct hci_ev_simple_pair_complete *ev = (void *) skb->data;
@@ -3113,6 +3167,10 @@ void hci_event_packet(struct hci_dev *hdev, struct sk_buff *skb) 
		hci_user_confirm_request_evt(hdev, skb);

		break;



	case HCI_EV_USER_PASSKEY_REQUEST:

		hci_user_passkey_request_evt(hdev, skb);

		break;



	case HCI_EV_SIMPLE_PAIR_COMPLETE:

		hci_simple_pair_complete_evt(hdev, skb);

		break;