At the address 0x48615c I've got jump, so the memory at the address (_v16 + 220) & 255) equals 0, which is wrong. This way we never reach the _LMssp_Send_LMP_DH_Key_Check() routine.
I would need to trace this on Ubuntu 12.10 where is the pairing successful.
I could nop-out the jump at the address 0x48615c and reach the _LMssp_Send_LMP_DH_Key_Check(), but the comparison is done in the _LMssp_Send_LMP_DH_Key_Check(), so the patch of rtbt was so far without pairing.
At the address 0x48615c I've got jump, so the memory at the address (_v16 + 220) & 255) equals 0, which is wrong. This way we never reach the _LMssp_ Send_LMP_ DH_Key_ Check() routine.
I would need to trace this on Ubuntu 12.10 where is the pairing successful.
I could nop-out the jump at the address 0x48615c and reach the _LMssp_ Send_LMP_ DH_Key_ Check() , but the comparison is done in the _LMssp_ Send_LMP_ DH_Key_ Check() , so the patch of rtbt was so far without pairing.