The DA14585 and DA14531-00 do not include the complete ‘SMP Timeout after Security Request’ fix.
ID: LPCBARESDK-1066
Status: Open
First reported: 6.0.22.1401
Fixed in: TBD
Description
When the peer fails to respond to a Security Request from the DA14585 and DA14531-00, the stack correctly notifies the host with the Pairing Timeout reason (0xE5). However, the invalidation of the SMP bearer is missing afterward. Consequently, the chip may respond to and accept new incoming bonding requests, which should have been ignored. This behavior deviates from the specification.
Workaround
This is a ROM issue. This problem only can appear on DA14585/586. This issue has been fixed in DA14531-01 and DA14535 For more details about the DA14531-01 and DA14535 device you can refer to the UM-B-117 and UM-B-165. You can also Contact your Renesas representative for further support.