Commit Graph
5334 Commits
Author SHA1 Message Date
yangfeng f8214fc22d fix(bt/bluedroid): Fix index boundary check and function return in SEP registration
Closes https://github.com/espressif/esp-idf/issues/18041
2025-12-30 15:15:45 +08:00
Zhou Xiao 65cd502b0e change(ble): [AUTO_MR] Update lib_esp32c2 to 9f051857
(cherry picked from commit 7ebf1c8d15)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2025-12-30 13:13:25 +08:00
zhiweijian 87655116dc feat(ble/bluedroid): Move the TinyCrypt and mbedTLS configuration items to the bt common path 2025-12-30 12:12:35 +08:00
zhiweijian 9d88119a4e feat(ble/bluedroid): Supported Bludroid host encryption using TinyCrypt 2025-12-30 12:12:35 +08:00
zhiweijian 94c4336c77 feat(ble/bluedroid): Supported Bludroid host encryption using mbedtls 2025-12-30 12:12:35 +08:00
Zhou Xiao a0cad007a1 feat(ble): supported ble log v2 hci log for Bluedroid host 2025-12-24 17:49:13 +08:00
Zhou Xiao f0d8014c9c feat(ble): supported ble log v2 hci log for NimBLE host 2025-12-24 17:49:08 +08:00
Zhou Xiao f35dd91fcd fix(ble): added null pointer check in ble log ts submodule
(cherry picked from commit 2b9c7471d0)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2025-12-24 17:05:06 +08:00
Zhou Xiao a1cc86f421 fix(ble): added missed ts sync reset
(cherry picked from commit d1d07eb60a)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2025-12-24 17:05:06 +08:00
Zhou Xiao ded5fa0d55 feat(ble): added xor checksum for integrity check performance optimization
(cherry picked from commit c604afa272)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2025-12-24 17:05:05 +08:00
Rahul Tank c6815bdb9a feat(nimble): Add support for static passkey 2025-12-22 21:14:19 +05:30
luoxu 6e34934433 feat(ble_mesh): dfd client/server supported 2025-12-22 21:20:39 +08:00
Jiang Jiang Jian 7950fdde3f Merge branch 'bugfix/sync_security_fix_from_flouride_v6.0' into 'release/v6.0'
fix: synchronized several security-related fixes from Google Fluoride (v6.0)

See merge request espressif/esp-idf!44406
2025-12-22 10:11:38 +08:00
Mahavir Jain 7da79a653c Merge branch 'feature/mbedtls_psa_migration_v6.0' into 'release/v6.0'
feat(mbedtls): PSA Migration to release v6.0

See merge request espressif/esp-idf!43323
2025-12-21 13:52:48 +05:30
Jiang Jiang Jian 9e0b06d2b1 Merge branch 'fix/ble_mesh_proxy_cli_coexists_with_adv_v6.0' into 'release/v6.0'
fix(ble_mesh): Fix start callback timing when GATT and ADV bearers coexist (v6.0)

See merge request espressif/esp-idf!44419
2025-12-21 15:37:34 +08:00
Jiang Jiang Jian 430ddfbb20 Merge branch 'fix/ble_mesh_trans_enh_seg_rpl_v6.0' into 'release/v6.0'
fix(ble_mesh): fixed incorrect rpl behavior in transport enh (v6.0)

See merge request espressif/esp-idf!44389
2025-12-21 15:35:38 +08:00
Ashish Sharma b02538834c fix: resolves MR comments 2025-12-20 23:02:25 +08:00
Luo Xu 0d4000caf0 feat(ble_mesh): fix issues with advtypes
(cherry picked from commit 1c4f6045cf)

Co-authored-by: luoxu <luoxu@espressif.com>
2025-12-19 13:43:29 +08:00
Luo Xu 9ea0f24646 feat(ble_mesh): update ble mesh multi connections config
(cherry picked from commit b63a0c2b78)

Co-authored-by: luoxu <luoxu@espressif.com>
2025-12-19 13:43:29 +08:00
Luo Xu df0150a16f fix(ble_mesh): Fix start callback timing when GATT and ADV bearers coexist
Add BLE_MESH_SEND_START_CB macro to ensure start callback is called
exactly once when both GATT and ADV bearers are used.


(cherry picked from commit 48a84e8299)

Co-authored-by: luoxu <luoxu@espressif.com>
2025-12-19 13:43:29 +08:00
Jin Cheng af327e091d fix(bt/bluedroid): cleaned the code according to the tool cppcheck 2025-12-19 11:17:18 +08:00
Jin Cheng 3bd5258fe4 fix(bt/bluedroid): fixed possible OOB read in smp_br_data_received 2025-12-19 11:17:18 +08:00
Jin Cheng 8c838d90c5 fix(bt/bluedroid): drop connection when atttempting to disable encryption 2025-12-19 11:17:18 +08:00
Jin Cheng 50c4f60ad5 fix(bt/bluedroid): fixed an integer overflow bug in attp_build_read_multi_cmd 2025-12-19 11:17:18 +08:00
Jin Cheng fa22b3cac2 fix(bt/bluedroid): fixed an integer overflow bug in avdt_msg_asmbl 2025-12-19 11:17:18 +08:00
Jin Cheng 72a8251a45 fix(bt/bluedroid): fixed an OOB bug in bta_av_setconfig_rej 2025-12-19 11:17:18 +08:00
Jin Cheng 72b2acf9c5 fix(bt/bluedroid): fixed an OOB bug in btm_read_rssi_complete 2025-12-19 11:17:18 +08:00
Jin Cheng 9c939b8df2 fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete 2025-12-19 11:17:18 +08:00
Jin Cheng 4c5e31394b fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete 2025-12-19 11:17:18 +08:00
Jin Cheng 68865736c4 fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete 2025-12-19 11:17:18 +08:00
Jin Cheng a812ec11ce fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete 2025-12-19 11:17:18 +08:00
Jin Cheng 45dd55dbf6 fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute 2025-12-19 11:17:18 +08:00
Jin Cheng c6bd4d714f fix(bt/bluedroid): report failure when not able to connect to AVRCP 2025-12-19 11:17:18 +08:00
Jin Cheng 947af75cad fix(bt/bluedroid): fixed buffer overflow in BRSF 2025-12-19 11:17:18 +08:00
Jin Cheng d3155a5a4f fix(bt/bluedroid): added negative length check in process_service_search_rsp 2025-12-19 11:17:18 +08:00
Jin Cheng 190d7690f7 fix(bt/bluedroid): fixed OOB read in SDP server continuation length 2025-12-19 11:17:18 +08:00
Jin Cheng c7f1b1a954 fix(bt/bluedroid): added length check when copy AVDTP packet 2025-12-19 11:17:18 +08:00
Jin Cheng e49da3f737 fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET 2025-12-19 11:17:18 +08:00
Jin Cheng 7d333a6324 fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item 2025-12-19 11:17:18 +08:00
Jin Cheng 1f891f31a5 fix(bt/bluedroid): added boundary check when reading SDP attribute response packet 2025-12-19 11:17:18 +08:00
Jin Cheng 3c02ac6b64 fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp 2025-12-19 11:17:18 +08:00
Jin Cheng a6ba548174 fix(bt/bluedroid): fixed potential OOB read in the reporting handler
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-19 11:17:18 +08:00
Jin Cheng ce1677a204 fix(bt/bluedroid): fixed a potential overflow about the media payload offset
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-19 11:17:18 +08:00
Jin Cheng 208eb56736 fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open 2025-12-19 11:17:17 +08:00
Jin Cheng cd0391cc71 fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected 2025-12-19 11:17:17 +08:00
Jin Cheng dea17a9260 fix(bt/bluedroid): reject device with same address in legacy paring 2025-12-19 11:17:17 +08:00
Jin Cheng 5e5646cb3c fix(bt/bluedroid): ignore AVCT commands that are too long 2025-12-19 11:17:17 +08:00
Jin Cheng 63d5970c1d fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP 2025-12-19 11:17:17 +08:00
Jin Cheng 1b1e00ffb1 fix(bt/bluedroid): make sure SDP only start discovery once 2025-12-19 11:17:17 +08:00
Jin Cheng d16ad1789c fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write 2025-12-19 11:17:17 +08:00