diff options
-rw-r--r-- | net/bluetooth/smp.c | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/net/bluetooth/smp.c b/net/bluetooth/smp.c index bf3568c46847..8339d6b0f2b8 100644 --- a/net/bluetooth/smp.c +++ b/net/bluetooth/smp.c | |||
@@ -876,9 +876,12 @@ bool smp_sufficient_security(struct hci_conn *hcon, u8 sec_level) | |||
876 | /* If we're encrypted with an STK always claim insufficient | 876 | /* If we're encrypted with an STK always claim insufficient |
877 | * security. This way we allow the connection to be re-encrypted | 877 | * security. This way we allow the connection to be re-encrypted |
878 | * with an LTK, even if the LTK provides the same level of | 878 | * with an LTK, even if the LTK provides the same level of |
879 | * security. | 879 | * security. Only exception is if we don't have an LTK (e.g. |
880 | * because of key distribution bits). | ||
880 | */ | 881 | */ |
881 | if (test_bit(HCI_CONN_STK_ENCRYPT, &hcon->flags)) | 882 | if (test_bit(HCI_CONN_STK_ENCRYPT, &hcon->flags) && |
883 | hci_find_ltk_by_addr(hcon->hdev, &hcon->dst, hcon->dst_type, | ||
884 | hcon->out)) | ||
882 | return false; | 885 | return false; |
883 | 886 | ||
884 | if (hcon->sec_level >= sec_level) | 887 | if (hcon->sec_level >= sec_level) |