diff options
| author | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2023-10-05 23:59:59 +0300 |
|---|---|---|
| committer | Luiz Augusto von Dentz <luiz.von.dentz@intel.com> | 2023-10-14 06:00:25 +0300 |
| commit | b541260615f601ae1b5d6d0cc54e790de706303b (patch) | |
| tree | 9d92fd16e9079d287f166de53e96023cc9f7f499 /scripts/gdb/linux/proc.py | |
| parent | c7f59461f5a78994613afc112cdd73688aef9076 (diff) | |
| download | linux-b541260615f601ae1b5d6d0cc54e790de706303b.tar.xz | |
Bluetooth: hci_event: Fix using memcmp when comparing keys
memcmp is not consider safe to use with cryptographic secrets:
'Do not use memcmp() to compare security critical data, such as
cryptographic secrets, because the required CPU time depends on the
number of equal bytes.'
While usage of memcmp for ZERO_KEY may not be considered a security
critical data, it can lead to more usage of memcmp with pairing keys
which could introduce more security problems.
Fixes: 455c2ff0a558 ("Bluetooth: Fix BR/EDR out-of-band pairing with only initiator data")
Fixes: 33155c4aae52 ("Bluetooth: hci_event: Ignore NULL link key")
Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
Diffstat (limited to 'scripts/gdb/linux/proc.py')
0 files changed, 0 insertions, 0 deletions