fix(core): allow pairing new BLE devices
What changed, and why it matters
This commit removes placeholder/mock Bluetooth device names from the Trezor hardware wallet's on-device menu and makes the 'currently connected' indicator reflect the real Bluetooth state. It is a cleanup of fake test data, not a security fix in the usual sense, though leaving mock data in production could mislead users about which devices are paired.
No immediate security action required. Treat as a normal bugfix/cleanup commit. Reviewers may want to confirm that the real paired-device list is populated elsewhere and that no other mock data remains in production paths.
Security signals we found
Removal of hard-coded mock/test data from production UI code
Use of live BLE connection state (ble.is_connected()) for UI indicator
Evidence from the diff
The diff edits core/src/apps/homescreen/device_menu.py. It replaces a hard-coded list of four mock BLE paired devices with a single entry (‘Trezor Suite’) and changes connected_idx from a hard-coded 1 to 0 if ble.is_connected() else None. This makes the homescreen device menu use live Bluetooth connection status instead of static demo data. There is no cryptographic, authentication, or access-control change visible in the patch.
Changed components
core/src/apps/homescreen/device_menu.pyInspect captured patch +2 / −7
diff --git a/core/src/apps/homescreen/device_menu.py b/core/src/apps/homescreen/device_menu.py
index 79e6f04d7..aa74f42a7 100644
--- a/core/src/apps/homescreen/device_menu.py
+++ b/core/src/apps/homescreen/device_menu.py
@@ -16,13 +16,8 @@ async def handle_device_menu() -> None:
haptic_configurable = is_initialized and utils.USE_HAPTIC
failed_backup = is_initialized and storage_device.unfinished_backup()
# MOCK DATA
- paired_devices = [
- "Trezor Suite",
- "2nd device iiiiiiiiiiiii",
- "3rd Device iiiiiiiiiiiiii",
- "4th Device forcedmultiline",
- ]
- connected_idx = 1
+ paired_devices = ["Trezor Suite"]
+ connected_idx = 0 if ble.is_connected() else None
bluetooth_version = "2.3.1.1"
# ###
firmware_version = ".".join(map(str, utils.VERSION))
Why this scored 18/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.