BLE Mesh When IV Update Procedure

[LingaoM]

According to the specification, IV update procedure only be initiated by any node is a member of the primary network, but it is not checked in the code.

zephyr/subsys/bluetooth/mesh/net.c

Lines 728 to 782 in 9336e3e

	int bt_mesh_net_resend(struct bt_mesh_subnet *sub, struct net_buf *buf,
	bool new_key, const struct bt_mesh_send_cb *cb,
	void *cb_data)
	{
	const u8_t *enc, *priv;
	u32_t seq;
	int err;
	BT_DBG("net_idx 0x%04x new_key %u len %u", sub->net_idx, new_key,
	buf->len);
	enc = sub->keys[new_key].enc;
	priv = sub->keys[new_key].privacy;
	err = bt_mesh_net_obfuscate(buf->data, BT_MESH_NET_IVI_TX, priv);
	if (err) {
	BT_ERR("deobfuscate failed (err %d)", err);
	return err;
	}
	err = bt_mesh_net_decrypt(enc, &buf->b, BT_MESH_NET_IVI_TX, false);
	if (err) {
	BT_ERR("decrypt failed (err %d)", err);
	return err;
	}
	/* Update with a new sequence number */
	seq = bt_mesh_next_seq();
	buf->data[2] = seq >> 16;
	buf->data[3] = seq >> 8;
	buf->data[4] = seq;
	err = bt_mesh_net_encrypt(enc, &buf->b, BT_MESH_NET_IVI_TX, false);
	if (err) {
	BT_ERR("encrypt failed (err %d)", err);
	return err;
	}
	err = bt_mesh_net_obfuscate(buf->data, BT_MESH_NET_IVI_TX, priv);
	if (err) {
	BT_ERR("obfuscate failed (err %d)", err);
	return err;
	}
	bt_mesh_adv_send(buf, cb, cb_data);
	if (!atomic_test_bit(bt_mesh.flags, BT_MESH_IVU_IN_PROGRESS) &&
	bt_mesh.seq > IV_UPDATE_SEQ_LIMIT) {
	bt_mesh_beacon_ivu_initiator(true);
	bt_mesh_net_iv_update(bt_mesh.iv_index + 1, true);
	bt_mesh_net_sec_update(NULL);
	}
	return 0;
	}

zephyr/subsys/bluetooth/mesh/beacon.c

Lines 374 to 382 in 9336e3e

	void bt_mesh_beacon_ivu_initiator(bool enable)
	{
	atomic_set_bit_to(bt_mesh.flags, BT_MESH_IVU_INITIATOR, enable);
	if (enable) {
	k_work_submit(&beacon_timer.work);
	} else if (bt_mesh_beacon_get() == BT_MESH_BEACON_DISABLED) {
	k_delayed_work_cancel(&beacon_timer);
	}