anchao commented on code in PR #20686:
URL: https://github.com/apache/nuttx/pull/20686#discussion_r4389637228


##########
libs/zblue/CMakeLists.txt:
##########
@@ -0,0 +1,40 @@
+# 
##############################################################################
+# libs/zblue/CMakeLists.txt

Review Comment:
   @acassis @casaroli @xiaoxiang781216 
   
   One more point about userspace Bluetooth stacks: Android's move from BlueZ 
to    
   Bluedroid was not simply because "userspace is safer". A major reason was 
also   
   the licensing/runtime model around BlueZ (GPLv2 userspace components, D-Bus, 
    
   glibc/Linux userspace assumptions), which was not a good fit for Android's   
    
   platform goals.                                                              
    
                                                                                
    
   So I do not think "Bluetooth in userspace" should automatically be treated 
as    
   the only safe architecture. Security issues can be fixed by hardening,       
    
   reviewing, fuzzing, and testing the stack. That requires continuous effort 
from  
   the community, but I do not think we should reject the architecture from the 
    
   beginning only because Bluetooth has a large attack surface.                 
    
   



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to