Display Driver Enhancement (after credential rework)

[marcelrru]

What are the changes?

• Created a new folder for development work of the display driver. included a readme.md file for the dev folder
• Cleaned the code structure by components/modules of the code into different header files. This is done to make the code more readable and make development easier by assigning different functionalities to its respective header file.
• Code comments enhancements in the header files outlining its functions/procedures use case and its related parameters, making development easier.
• WiFi implementation is included, which will allow wireless data transfers which is an important function of the device, connection is working and stable.
• Clock functionality development is included, which will allow users to see time data and integrate other analysis with time data which is essential for a health-centric wearable. There are some inaccuracies which will be looked into, however there is no build error. The inaccuracies is noted and will be looked into.

Who worked on the changes?

• Marcel

TODOs

• Rename files to lowercase

[github-actions]

🔒 Security Scan Results

🔒 Security Scan Results
=========================

Bandit Scan Results:
-------------------
Run started:2025-05-13 04:05:17.121291

Test results:
>> Issue: [B113:request_without_timeout] Call to requests without timeout
   Severity: Medium   Confidence: Low
   CWE: CWE-400 (https://cwe.mitre.org/data/definitions/400.html)
   More Info: https://bandit.readthedocs.io/en/1.8.3/plugins/b113_request_without_timeout.html
   Location: ./data_science/voice_assistant/generate_response.py:19:10
18	def get_request(query):
19	    req = requests.get(f'https://www.google.com/search?q={query}')
20	

--------------------------------------------------
>> Issue: [B404:blacklist] Consider possible security implications associated with the subprocess module.
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.3/blacklists/blacklist_imports.html#b404-import-subprocess
   Location: ./data_science/voice_assistant/text_to_speech.py:5:0
4	import os
5	import subprocess
6	# Function to generate a response using our NLP model

--------------------------------------------------
>> Issue: [B607:start_process_with_partial_path] Starting a process with a partial executable path
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.3/plugins/b607_start_process_with_partial_path.html
   Location: ./data_science/voice_assistant/text_to_speech.py:15:4
14	    time.sleep(2)
15	    subprocess.run(['say', response], check=True)
16	

--------------------------------------------------
>> Issue: [B603:subprocess_without_shell_equals_true] subprocess call - check for execution of untrusted input.
   Severity: Low   Confidence: High
   CWE: CWE-78 (https://cwe.mitre.org/data/definitions/78.html)
   More Info: https://bandit.readthedocs.io/en/1.8.3/plugins/b603_subprocess_without_shell_equals_true.html
   Location: ./data_science/voice_assistant/text_to_speech.py:15:4
14	    time.sleep(2)
15	    subprocess.run(['say', response], check=True)
16	

--------------------------------------------------

Code scanned:
	Total lines of code: 991
	Total lines skipped (#nosec): 0
	Total potential issues skipped due to specifically being disabled (e.g., #nosec BXXX): 0

Run metrics:
	Total issues (by severity):
		Undefined: 0
		Low: 3
		Medium: 1
		High: 0
	Total issues (by confidence):
		Undefined: 0
		Low: 1
		Medium: 0
		High: 3
Files skipped (0):

✅ No critical security issues detected.

The code has passed all critical security checks.

[Mouse933]

Hi, please see my comment regarding the WIFI credentials. This should be changed as it could leave to credentials being exposed in plaintext.

[Mouse933]

The way the WIFI credentials are setup here may lead to possible data breaches or unauthorised access to networks. While it is a placeholder and needs to be replaced by a user, it could possibly lead to someone having their information exposed once they add their credentials in.