yangfeng
f8214fc22d
fix(bt/bluedroid): Fix index boundary check and function return in SEP registration
...
Closes https://github.com/espressif/esp-idf/issues/18041
2025-12-30 15:15:45 +08:00
Zhou Xiao
65cd502b0e
change(ble): [AUTO_MR] Update lib_esp32c2 to 9f051857
...
(cherry picked from commit 7ebf1c8d15 )
Co-authored-by: Zhou Xiao <zhouxiao@espressif.com >
2025-12-30 13:13:25 +08:00
zhiweijian
87655116dc
feat(ble/bluedroid): Move the TinyCrypt and mbedTLS configuration items to the bt common path
2025-12-30 12:12:35 +08:00
zhiweijian
9d88119a4e
feat(ble/bluedroid): Supported Bludroid host encryption using TinyCrypt
2025-12-30 12:12:35 +08:00
zhiweijian
94c4336c77
feat(ble/bluedroid): Supported Bludroid host encryption using mbedtls
2025-12-30 12:12:35 +08:00
Zhou Xiao
a0cad007a1
feat(ble): supported ble log v2 hci log for Bluedroid host
2025-12-24 17:49:13 +08:00
Zhou Xiao
f0d8014c9c
feat(ble): supported ble log v2 hci log for NimBLE host
2025-12-24 17:49:08 +08:00
Zhou Xiao
f35dd91fcd
fix(ble): added null pointer check in ble log ts submodule
...
(cherry picked from commit 2b9c7471d0 )
Co-authored-by: Zhou Xiao <zhouxiao@espressif.com >
2025-12-24 17:05:06 +08:00
Zhou Xiao
a1cc86f421
fix(ble): added missed ts sync reset
...
(cherry picked from commit d1d07eb60a )
Co-authored-by: Zhou Xiao <zhouxiao@espressif.com >
2025-12-24 17:05:06 +08:00
Zhou Xiao
ded5fa0d55
feat(ble): added xor checksum for integrity check performance optimization
...
(cherry picked from commit c604afa272 )
Co-authored-by: Zhou Xiao <zhouxiao@espressif.com >
2025-12-24 17:05:05 +08:00
Rahul Tank
c6815bdb9a
feat(nimble): Add support for static passkey
2025-12-22 21:14:19 +05:30
luoxu
6e34934433
feat(ble_mesh): dfd client/server supported
2025-12-22 21:20:39 +08:00
Jiang Jiang Jian
7950fdde3f
Merge branch 'bugfix/sync_security_fix_from_flouride_v6.0' into 'release/v6.0'
...
fix: synchronized several security-related fixes from Google Fluoride (v6.0)
See merge request espressif/esp-idf!44406
2025-12-22 10:11:38 +08:00
Mahavir Jain
7da79a653c
Merge branch 'feature/mbedtls_psa_migration_v6.0' into 'release/v6.0'
...
feat(mbedtls): PSA Migration to release v6.0
See merge request espressif/esp-idf!43323
2025-12-21 13:52:48 +05:30
Jiang Jiang Jian
9e0b06d2b1
Merge branch 'fix/ble_mesh_proxy_cli_coexists_with_adv_v6.0' into 'release/v6.0'
...
fix(ble_mesh): Fix start callback timing when GATT and ADV bearers coexist (v6.0)
See merge request espressif/esp-idf!44419
2025-12-21 15:37:34 +08:00
Jiang Jiang Jian
430ddfbb20
Merge branch 'fix/ble_mesh_trans_enh_seg_rpl_v6.0' into 'release/v6.0'
...
fix(ble_mesh): fixed incorrect rpl behavior in transport enh (v6.0)
See merge request espressif/esp-idf!44389
2025-12-21 15:35:38 +08:00
Ashish Sharma
b02538834c
fix: resolves MR comments
2025-12-20 23:02:25 +08:00
Luo Xu
0d4000caf0
feat(ble_mesh): fix issues with advtypes
...
(cherry picked from commit 1c4f6045cf )
Co-authored-by: luoxu <luoxu@espressif.com >
2025-12-19 13:43:29 +08:00
Luo Xu
9ea0f24646
feat(ble_mesh): update ble mesh multi connections config
...
(cherry picked from commit b63a0c2b78 )
Co-authored-by: luoxu <luoxu@espressif.com >
2025-12-19 13:43:29 +08:00
Luo Xu
df0150a16f
fix(ble_mesh): Fix start callback timing when GATT and ADV bearers coexist
...
Add BLE_MESH_SEND_START_CB macro to ensure start callback is called
exactly once when both GATT and ADV bearers are used.
(cherry picked from commit 48a84e8299 )
Co-authored-by: luoxu <luoxu@espressif.com >
2025-12-19 13:43:29 +08:00
Jin Cheng
af327e091d
fix(bt/bluedroid): cleaned the code according to the tool cppcheck
2025-12-19 11:17:18 +08:00
Jin Cheng
3bd5258fe4
fix(bt/bluedroid): fixed possible OOB read in smp_br_data_received
2025-12-19 11:17:18 +08:00
Jin Cheng
8c838d90c5
fix(bt/bluedroid): drop connection when atttempting to disable encryption
2025-12-19 11:17:18 +08:00
Jin Cheng
50c4f60ad5
fix(bt/bluedroid): fixed an integer overflow bug in attp_build_read_multi_cmd
2025-12-19 11:17:18 +08:00
Jin Cheng
fa22b3cac2
fix(bt/bluedroid): fixed an integer overflow bug in avdt_msg_asmbl
2025-12-19 11:17:18 +08:00
Jin Cheng
72a8251a45
fix(bt/bluedroid): fixed an OOB bug in bta_av_setconfig_rej
2025-12-19 11:17:18 +08:00
Jin Cheng
72b2acf9c5
fix(bt/bluedroid): fixed an OOB bug in btm_read_rssi_complete
2025-12-19 11:17:18 +08:00
Jin Cheng
9c939b8df2
fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete
2025-12-19 11:17:18 +08:00
Jin Cheng
4c5e31394b
fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete
2025-12-19 11:17:18 +08:00
Jin Cheng
68865736c4
fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete
2025-12-19 11:17:18 +08:00
Jin Cheng
a812ec11ce
fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete
2025-12-19 11:17:18 +08:00
Jin Cheng
45dd55dbf6
fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute
2025-12-19 11:17:18 +08:00
Jin Cheng
c6bd4d714f
fix(bt/bluedroid): report failure when not able to connect to AVRCP
2025-12-19 11:17:18 +08:00
Jin Cheng
947af75cad
fix(bt/bluedroid): fixed buffer overflow in BRSF
2025-12-19 11:17:18 +08:00
Jin Cheng
d3155a5a4f
fix(bt/bluedroid): added negative length check in process_service_search_rsp
2025-12-19 11:17:18 +08:00
Jin Cheng
190d7690f7
fix(bt/bluedroid): fixed OOB read in SDP server continuation length
2025-12-19 11:17:18 +08:00
Jin Cheng
c7f1b1a954
fix(bt/bluedroid): added length check when copy AVDTP packet
2025-12-19 11:17:18 +08:00
Jin Cheng
e49da3f737
fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET
2025-12-19 11:17:18 +08:00
Jin Cheng
7d333a6324
fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item
2025-12-19 11:17:18 +08:00
Jin Cheng
1f891f31a5
fix(bt/bluedroid): added boundary check when reading SDP attribute response packet
2025-12-19 11:17:18 +08:00
Jin Cheng
3c02ac6b64
fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp
2025-12-19 11:17:18 +08:00
Jin Cheng
a6ba548174
fix(bt/bluedroid): fixed potential OOB read in the reporting handler
...
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-19 11:17:18 +08:00
Jin Cheng
ce1677a204
fix(bt/bluedroid): fixed a potential overflow about the media payload offset
...
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-19 11:17:18 +08:00
Jin Cheng
208eb56736
fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open
2025-12-19 11:17:17 +08:00
Jin Cheng
cd0391cc71
fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected
2025-12-19 11:17:17 +08:00
Jin Cheng
dea17a9260
fix(bt/bluedroid): reject device with same address in legacy paring
2025-12-19 11:17:17 +08:00
Jin Cheng
5e5646cb3c
fix(bt/bluedroid): ignore AVCT commands that are too long
2025-12-19 11:17:17 +08:00
Jin Cheng
63d5970c1d
fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP
2025-12-19 11:17:17 +08:00
Jin Cheng
1b1e00ffb1
fix(bt/bluedroid): make sure SDP only start discovery once
2025-12-19 11:17:17 +08:00
Jin Cheng
d16ad1789c
fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write
2025-12-19 11:17:17 +08:00