topic Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain in Z Series

Temp Fix Bluetooth Connectivity (File TX, Tether, Stream): Vulnerability found CVE-2017-0781 -0785

NeoBeum — Mon, 27 Mar 2017 03:01:37 GMT

UPDATED: 12OCT2017

I'm sure google will change things again if they haven't already. But if the latest patch 32.4.A.1.54 did not include the Bluetooth Security Patches - there will be another change to the BT API no doubt.

There's a security Vulnerability to do with Bluetooth discovered in Sept. It's probably the junk I ran in to ... anyhoo... I'm busy compiling the new changes for 32.4.A.1.54 on the Z5C for a rebuild of the TWRP Recovery.

Adios.

CVE-2017-0781 to 0785

edit wow... i been out of action for a while... just looking at the last date there...

Spoiler

trolling microsoft by shrinking windows 10 pro, home and education on to 1 dvd and down to 3.9GB and posting screenshots on the MSDN forums hurrrrrr hueheu

Spoiler

trolling microsoft by shrinking windows 10 pro, home and education on to 1 dvd and down to 3.9GB and posting screenshots on the MSDN forums hurrrrrr hueheu

UPDATED: 20JULY2017

Spoiler

one of my devices stored the correct names, the other didn't
the (W)hite device had never been paired to the pc before, while my main Black device had been previously

http://i.imgur.com/xiVkZvu.jpg
http://i.imgur.com/xiVkZvum.jpg

http://i.imgur.com/avyWCNFm.jpg http://i.imgur.com/QnPkCmZm.jpg

one of my devices stored the correct names, the other didn'tthe (W)hite device had never been paired to the pc before, while my main Black device had been previouslyhttp://i.imgur.com/xiVkZvu.jpghttp://i.imgur.com/xiVkZvum.jpghttp://i.imgur.com/avyWCNFm.jpg http://i.imgur.com/QnPkCmZm.jpg

Standard Users having Bluetooth Problems:

Remove All Paired Devices: Done via Bluetooth Settings Menu Page.
Clear Android Bluetooth Data: Done via Apps Menu in Main Settings:
- Settings >> Apps >> Vertical Triple Dot Menu and "Show System"
- Find "Bluetooth Share" and select "Storage"
- "Clear Data" and "Clear Cache"
Turn Off Bluetooth.
Reboot Device with Cache Clear: Done by pressing "Power Button" and "Volume Up" until Device display turns off and device vibrates once.
Turn on device.
Reset Bluetooth Notifications: Done by accessing Bluetooth Share in Apps Menu
- Settings >> Apps >> Vertical Triple Dot Menu and "Show System"
- Go to "Notifications"
- Toggle all settings again, by turning it off and then back to the setting desired
- Ensure "On the lock screen remains as "Show all notification content" & "Interupts in Priority Only" is left on for next test.
Before pairing new devices, launch the Bluetooth App Menu, and turn on Bluetooth.
Wait in the Bluetooth Menu Page, and select the Vertical Triple Dot Menu and select "Show Received Files"
- If the "Show Received Files" page does not appear immediately, do not attempt to load other applications. If you are using a 3rd party "Home" launcher app, temporarily go back to the Sony Default Home App.
- At the "Show Received Files" - if there are any files here, clear all by long press and clear.

IF THERE WAS A DELAY FOR "SHOW RECEIVED FILES", WAIT UNTIL THERE IS NO DELAY WHEN LAUNCHING OR REPEAT STEP 1 TO 8

DO NOT REPEATEDLY SELECT "SHOW RECEIVED FILES" AS THIS WILL CAUSE A BACKLOG OF PAGES TO APPEAR

ONLY ONCE SELECT ONCE, AND WAIT OR REPEAT STEP 1 TO 8
Pair a computer or another device capable of file transfer.
- Ensure pairing code matches & that both devices display a successful pairing.
Use Android Storage to access files: Done via Settings Menu >> Storage
Select a file for transfer with your problem device set to receive the file:
- Use Bluetooth Share via the "Share" Icon from the Storage app.

- Test using a capture taken by the device, but make sure the image file extension is LOWER CASE: <filename>.jpg <filename>.jpeg <filename>.png
- Test using a text file: ensure that extension is not <filename>.TXT but lower case.

A POPUP DIALOG SHOULD APPEAR TO ACCEPT ANY FILE TRANSFER.
IF IT DOES NOT: REPEAT STEP 8
Test transfer with Sending files from the problem device.
If a file transfer encounters a problem, select the notification from the Notification bar, and repeat the process for "Outbound transfer" menu page - (Step 8 Received File Page)

Before Proceeding with Other Bluetooth Connectivity: Ensure that "Outbound Transfer" and "Bluetooth Received" pages are clear.

ACCESSING THESE PAGES SHOULD BE ALMOST INSTANTANEOUS, IF THERE IS A DELAY, THEN REPEAT THE CACHE CLEAR OR WAIT UNTIL THERE IS NO DELAY
Pair audio device.
- Test pairing with music stream.

OPTIONAL:
Test with Bluetooth Tether
Test with Mirror Link, Miracast, or other Bluetooth services (3rd Party Apps)

Root Users Having Bluetooth Problems:

Clear Dalvik and ART Cache. Reboot using Power + Volume Up. Clear Cache in Recovery.
Repeat Process Above

____________

09 June 2017

Found the cause for some of the problems.

Shared Pref in User_De is missing pretty much all the configurations it needs.

____________

05 June 17

Included btopps database corruption examples - view last post

/t5/Xperia-Z5-Z5-Compact-Z5-Premium/Bluetooth-Android-API-Changes-and-Permissions-causing-port/m-p/1228964#M36564

=========================================================

ORIGINAL POST

=========================================================

I've been doing some trawling through my log, as I've finally been able to recreate the Nougat issues on my phone that everyone else seems to have that I didn't.

From what I read ( could have misunderstood) the bluetooth and wireless api have had changes from Google to do with security. The result of this means that older hardware does not send the device sufficient parameters for a handshake or data transfer.

Older written apps will cause the system to check for things that it won't find because of permissions, so it loops causing battery drain.

I blame Google for a large part of this

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

serac01 — Tue, 28 Mar 2017 14:12:21 GMT

I have the same problem since the android update 7.
The battery no longer holds. In the settings the bluetooth consumes 55% of the battery, before updating about 5%.
I did not change anything in my use.

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Thu, 30 Mar 2017 21:15:29 GMT

EDIT: ~~I think the 32.3.A.2.33 update may have fixed the Bluetooth issues... I'm going to flash back to 32.3.A.0.376 and just check, I might extract the APK and check that way too~~

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Sat, 01 Apr 2017 17:32:10 GMT

Nope.... who's stupid idea was it to lock out Bluetooth app File Receive Folder? Sony or Google?

There's not even an easy way to access Outbound and Inbound transfers... zzzzzzzzzzzzzzzzzzzzzzzzzzzz

You only need one bad connection and it starts a chain reaction where RFCOMM starts being stupid.

com.android.bluetooth means a Google Problem right? Not Sony? or both?

To fix things, everyday users need access to: rootfs: /data/user_de/com.android.bluetooth

Which they won't have... because they don't have sufficient privileges.

Cache clearing every error isn't really going to be super effective because it's slow.... and restart is needed.

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Tue, 30 May 2017 22:48:57 GMT

The deeper I get in to the Android Repo and start looking at language I understand, the more I dislike Android... Google still haven't released a fix because it will break security for other subsystems.

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Fri, 02 Jun 2017 04:50:50 GMT

Hello,

~~I think I found the reason why some bluetooth activity is failing,~~

~~Bluetooth share is missing~~

<uses-permission android:name="android.permission.BLUETOOTH_ADMIN" />

~~But, I think there are some other issues regarding Bluetooth LE - because of the package upgrade from Lollipop to Marshmallow to Nougat.~~

~~It has BLUETOOTH_PRIVILEGED, but I can't see it using or calling any functions from it, and I think Bluetooth share tries to access everything directly, which needs Admin.~~

I'm going to post something at the Xperia Github to discuss

Nope, this isn't it, I just found where the permissions are hiding.

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Sat, 03 Jun 2017 14:23:55 GMT

~~I've figured it out - for File Transfer - the Android Bluettoth App doesn't have sufficient permissions to write to the device.~~

~~I'm assuming that these permissions where somehow lost during firmware updates.~~

~~I'm able to reproduce the bug, and either force a fail, or a successful transfer.~~

~~The other apps will have a similar issue regarding Bluetooth connectivity.~~

~~Now that I know what is causing it - I can start looking at where abouts in the code I should be looking.~~

It's more than likely due to a database corruption with during upgrades with Nougat and Marshmallow using Android Runtime, and with Lollipop optimised dexopt
(See first post for temporary solutions)

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Mon, 05 Jun 2017 11:48:15 GMT

I've included some examples of how the database for com.android.bluetooth can become corrupted.

Any users reading this; this is not a Sony fault, but an Android fault, so blame Google.

I don't know who to contact on the Google end of things, but the whole Bluetooth section for Android is a mess.

Because of how they decided to interface bluetooth on our devices, we don't have a proper management for the "App" and what we have available to us, isn't good enough to rectify the problem.

You won't be able to get Bluetooth working unless you override the security and clear the faults yourself, which no general domestic market user should be expected to have knowledge, or even have to.

The last data table for Bluetooth keeps track of the sequence - sqlite_sequence

If the sequence doesn't match the final seuquence of what is in the main data table - this is where problems start happenening. I rectified mine to reflect the last working record, and deleted records 34,35,36.

Because the Android Bluetooth app has those operations in it's queue; 34,35,36, it tries to resolve them.

But, because it has no idea what to do, it just throws errors. The next time it loads up, it says... oh I have jobs, let's do them.. 34,35,36.... wait... **bleep** is this... oh crap... .....

There's no way for any 3rd party app to fix this, because com.android.bluetooth is a System app.

I could probably hack the build environment and push out a quick fix, but that is not an ideal option... because only Root Access users will be able to install the app, but I don't really see anything where Google has any decent changes to how Bluetooth works in their source server.

http://android.googlesource.com/platform/system/bt/

http://android.googlesource.com/platform/packages/apps/Bluetooth/

I don't even know which patches will be applied to the final firmware release for the Z5 family.

But I know that nothing has been done about the total lack of user administration for bluetooth, and that's just not good enough.

Any advice from the Sony team would be appreciated.

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

JAI0073 — Tue, 06 Jun 2017 15:41:42 GMT

after submitting my video, i think i should have posted it here instead to be more accurate anyway.

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Fri, 09 Jun 2017 03:20:35 GMT

@JAI0073 wrote:
after submitting my video, i think i should have posted it here instead to be more accurate anyway.

hi,

yes, currently, there is a very big lag between when bluetooth turns on, and icon display, and when services are actually functional.

you can soft test "show received files".

when that no longer lags in displaying the page fragment for downloaded files, then bluetooth is ready to be used.

NB:____________

I've factory reset my device and I'm currently diagnosing a working bluetooth framework so I can run a comparison when I force a corruption

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Fri, 09 Jun 2017 09:34:30 GMT

Bumpity Bump.

Found the cause for the problems. /data/user_de/0/com.android.bluetooth/shared_pref

is missing bluetooth profile configurations.

Now all I need to do is find where in the framework the code is and submit a patch to Sony or Google

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Mon, 12 Jun 2017 03:48:40 GMT

Bump to add temporary solution for Non-Root and Root Users

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

Jimmy_121 — Tue, 18 Jul 2017 15:33:23 GMT

There is a workaround, but you have to be sure not to turn off your bluetooth on your phone...or you will have to do the procedure again.

First, open smart connect app on your phone. you will find the bluetooth accessory in the list.

keep pressing on it, then remove.

Second, clear all your apps in memory (I use fast reboot app) then close all apps.

Third, open smart connect one more time, press on the plus to add accessory..this will open bluetooth settings...pair your device.

The accessory will work now....hopefully....until you turn off bluetooth....it will be corrupted...again. It works for me..(I use wireless headset pro mw1 and RM-X7bt car accessory).

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Wed, 19 Jul 2017 07:02:24 GMT

this one's not really related but..

in Microsoft we trust

http://i.imgur.com/mMuBPZk.jpg

http://i.imgur.com/gumtZVM.jpg

http://i.imgur.com/afwUuxB.jpg

...and asus... because laptop isnt made for Server 2016...

but at least bluetooth is working..... pfff

now there's another vendor to add to confusion... yay windows

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Thu, 20 Jul 2017 01:49:46 GMT

heres something interesting ...

one of my devices stored the correct names, the other didn't
the (W)hite device had never been paired to the pc before, while my main Black device had been previously

http://i.imgur.com/xiVkZvu.jpg
http://i.imgur.com/xiVkZvum.jpg

http://i.imgur.com/avyWCNFm.jpg http://i.imgur.com/QnPkCmZm.jpg

Re: Bluetooth Android API Changes and Permissions causing port lockout and battery drain

NeoBeum — Thu, 12 Oct 2017 13:01:14 GMT

UPDATED: 12OCT2017

Adios.

CVE-2017-0781 to 0785