Digi
/
meta-digi
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

meta-digi: firmware-qualcomm: add Bluetooth Vulnerability CVE-2019-9506 resolution 

This commit adds Bluetooth Vulnerability CVE-2019-9506
resolution to the firmware file.

CVE-2019-9506 is a Bluetooth key negotiation vulnerability.

Signed-off-by: Mike Engel <Mike.Engel@digi.com>

https://onedigi.atlassian.net/browse/DEL-7134
This commit is contained in:
Mike Engel 2022-08-01 17:01:14 +02:00
parent 29b008b790
commit 9b0f79c02f
2 changed files with 8 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
meta-digi-arm/recipes-bsp/firmware-qualcomm/firmware-qualcomm.bb
View File

@ -69,6 +69,7 @@ SRC_URI = " \
${FW_QUALCOMM_BT} \ ${FW_QUALCOMM_BT} \
${FW_QUALCOMM_WIFI} \ ${FW_QUALCOMM_WIFI} \
${@oe.utils.vartrue('QUALCOMM_FW_CCX_TAGS', '${FW_QUALCOMM_CCX}', '', d)} \ ${@oe.utils.vartrue('QUALCOMM_FW_CCX_TAGS', '${FW_QUALCOMM_CCX}', '', d)} \
file://nvm-tag33.bin \
" "
S = "${WORKDIR}" S = "${WORKDIR}"
@ -128,6 +129,13 @@ do_install() {
# Enable Internal Clock in the bluetooth firmware # Enable Internal Clock in the bluetooth firmware
awk 'BEGIN{printf "%c%c", 0x01, 0x00}' | dd of="${D}${base_libdir}/firmware/qca/nvm_tlv_3.2.bin" bs=1 seek=93 count=2 conv=notrunc,fsync awk 'BEGIN{printf "%c%c", 0x01, 0x00}' | dd of="${D}${base_libdir}/firmware/qca/nvm_tlv_3.2.bin" bs=1 seek=93 count=2 conv=notrunc,fsync
fi fi
# Insert TAG33 for CVE-2019-9506 and update file length
cat nvm-tag33.bin >> "${D}${base_libdir}/firmware/qca/nvm_tlv_3.2.bin"
# Calculate the new firmware file size
length="$(expr $(stat -L -c %s ${D}${base_libdir}/firmware/qca/nvm_tlv_3.2.bin) - 4)"
/bin/echo -ne "\x$(printf '%02x' $(expr $length % 256))" | dd of=${D}${base_libdir}/firmware/qca/nvm_tlv_3.2.bin bs=1 seek=1 count=1 conv=notrunc,fsync
/bin/echo -ne "\x$(printf '%02x' $(expr $length / 256))" | dd of=${D}${base_libdir}/firmware/qca/nvm_tlv_3.2.bin bs=1 seek=2 count=1 conv=notrunc,fsync
} }
QCA_MODEL ?= "qca6564" QCA_MODEL ?= "qca6564"

BIN
meta-digi-arm/recipes-bsp/firmware-qualcomm/firmware-qualcomm/nvm-tag33.bin Normal file
View File

Binary file not shown.