Commit Graph
1939 Commits
Author SHA1 Message Date
Jiang Jiang Jian 4f7226bb6e Merge branch 'bugfix/fix_nimble_issue_2608' into 'release/v5.2'
fix(nimble): Fix few nimble issues 2608 (v5.2)

See merge request espressif/esp-idf!52110
2026-08-28 19:36:24 +08:00
Jiang Jiang Jian 56cf33255e Merge branch 'bugfix/fix_bluedroid_gatt_discover_downstream_stall_v5.2' into 'release/v5.2'
fix(ble/bluedroid): allow osi_event re-post during POSTING window (5.2)

See merge request espressif/esp-idf!52040
2026-08-27 20:27:51 +08:00
Rahul Tank a01916d093 fix(nimble): Fix ECC HW byte-order and dropped SOC_ESP_NIMBLE_CONTROLLER 2026-08-26 15:51:28 +05:30
Rahul Tank 97963f57ee fix(nimble): bound PAwR synced connect retries in the example 2026-08-26 15:49:36 +05:30
Rahul Tank 75428d48e6 fix(nimble): Added change to stop adv before starting new adv 2026-08-26 15:49:31 +05:30
Zhang Hai Peng df0fe25bda fix(ble/bluedroid): allow osi_event re-post during POSTING window
Do not reject osi_thread_post_event() when only POSTING is set.
QUEUED already prevents double-queueing; rejecting POSTING caused
HCI downstream lost wakeup. Add generic osi_event and hci downstream
diagnostics for post failures.


(cherry picked from commit 011138ffd9)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-08-25 19:55:06 +08:00
Zhang Hai Peng dfd8d39c0a docs(bt): clarify Bluedroid GATT signed write API comments
Correct misleading CHAR_PROP_BIT_AUTH wording and document CSRK-based
signed write usage for server permissions and client write APIs.


(cherry picked from commit 8d230c7650)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-08-25 19:55:05 +08:00
yangfeng 3ac7132d4c fix(bt): do not cap AVDTP Discover results by local SEP count
- Closes https://github.com/espressif/esp-idf/issues/18848
2026-08-13 19:32:43 +08:00
Jiang Jiang Jian 7b7cd05583 Merge branch 'bugfix/a2dp_api_init_check_v5.2' into 'release/v5.2'
fix(bt): Fix compatibility with A2DP API legacy usage methods (v5.2)

See merge request espressif/esp-idf!51335
2026-08-11 13:58:00 +08:00
Jiang Jiang Jian 50e59f90f4 Merge branch 'feat/bt_in_psram_v5.2' into 'release/v5.2'
feat(bluedroid): Add config to place btu and hci task stack in psram (v5.2)

See merge request espressif/esp-idf!51495
2026-08-10 16:22:38 +08:00
Rahul Tank ce22ec9d47 Merge branch 'bugfix/add_nimble_cve_v5.2' into 'release/v5.2'
fix(nimble): Fixes for various NimBLE CVEs (v5.2)

See merge request espressif/esp-idf!51206
2026-08-10 07:05:49 +05:30
yangfeng cd93bd63b9 fix(bt): Fix compatibility with A2DP API legacy usage methods
- Modify the timing of API calls in the A2DP example
- Closes https://github.com/espressif/esp-idf/issues/18786
2026-08-07 08:04:07 +08:00
hejiaxin 94c8d6e9b6 feat(bluedroid): Add config to place btu and hci task stack in psram
- Also adjust the osi_thread_stop implementation.
2026-08-06 11:54:39 +08:00
Jiang Jiang Jian 7427b84306 Merge branch 'feat/support_pawr_connect_evt_v5.2' into 'release/v5.2'
feat(ble/bluedroid): Support PAWR connection event (5.2)

See merge request espressif/esp-idf!51438
2026-08-06 11:24:34 +08:00
Wang Meng Yang 5ce46f2764 Merge branch 'change/refactor_hidh_datapath_v5.2' into 'release/v5.2'
Change/refactor hidh datapath[backport v5.2]

See merge request espressif/esp-idf!51283
2026-08-05 14:23:43 +08:00
Island f030f5f862 Merge branch 'fix/ble_log_compression_add_local_header_file_v5.2' into 'release/v5.2'
feat(ble_log): mirror local compression headers (5.2)

See merge request espressif/esp-idf!50948
2026-08-04 19:48:20 +08:00
Wang Meng Yang 1377dac554 Merge branch 'fix/aireview_critical_v5.2' into 'release/v5.2'
fix: Fix some critical bugs in classic bt (v5.2)

See merge request espressif/esp-idf!51293
2026-08-04 14:15:22 +08:00
Rahul Tank d39a411e53 fix(nimble): Fixes for various NimBLE CVEs 2026-08-03 15:42:51 +05:30
Zhi Wei Jian 4cd9273018 fix(ble/bluedroid): Build LE event mask from host feature macros
(cherry picked from commit 68dff5d798)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-08-03 15:25:36 +08:00
Zhi Wei Jian d17b62dbee feat(ble/bluedroid): Support PAWR connection event
(cherry picked from commit 7da7fa42ac)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-08-03 15:25:35 +08:00
Rahul Tank 940c834103 Merge branch 'bugfix/fix_pawr_conn_event_v5.2' into 'release/v5.2'
fix(nimble):  Deliver PAwR peripheral CONNECT via sync callback (v5.2)

See merge request espressif/esp-idf!51257
2026-07-30 20:45:50 +05:30
hejiaxin 556e7cdad5 fix(bt_stack): Fix some critical bugs in classic_bt stack
related: obex, smp, pbap, sdp, rfcomm, stack_dm

- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
2026-07-30 17:30:53 +08:00
Jin Cheng 18a99d2eb7 fix(bt/bluedroid): fixed incorrect eSCO packet type validation under secure connection mode in BlueDroid 2026-07-29 17:30:41 +08:00
hejiaxin 5434deb81d fix(bt): Fix some bug in stm_sco.c
- Memory safety
- State machine & logic integrity
- Resource leaks
- Edge cases check
2026-07-29 17:30:41 +08:00
liqigan f81ab9974a fix(bt/bluedroid): Fixed HID host reconnection bug and enabled load HID devices
Closes https://github.com/espressif/esp-idf/issues/18335
2026-07-29 11:22:58 +08:00
liqigan 214e280b67 change(bt/bluedroid): Refactored HCI ACL datapath 2026-07-29 11:12:54 +08:00
liqigan cfbb43a4fc change(bt/bluedroid): Refactored HID host datapath 2026-07-29 11:12:45 +08:00
Wang Meng Yang 1db291682a Merge branch 'bugfix/bredr_critical_bugs_v5.2' into 'release/v5.2'
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI (v5.2)

See merge request espressif/esp-idf!51082
2026-07-28 19:43:38 +08:00
Rahul Tank 5aa51e4b9c fix(nimble): Deliver PAwR peripheral CONNECT via sync callback 2026-07-28 12:59:42 +05:30
Shreeyash Bhakare 609cb58a9b fix(nimble): Added security related fixes 2026-07-25 13:54:50 +05:30
Astha Verma 936d7c117c fix(nimble): Restore throughput after switching from LE Coded PHY 2026-07-24 18:13:33 +05:30
Rahul Tank 0ff25a3b51 Merge branch 'bugfix/red_rem_feat_evt_v5.2' into 'release/v5.2'
Handle Read Remote Supported Feature failure (v5.2)

See merge request espressif/esp-idf!50813
2026-07-24 14:34:33 +05:30
Island f36ae6c755 Merge branch 'fix/ble_hidd_remove_ccc_gating_v5.2' into 'release/v5.2'
fix(esp_hid/bluedroid): remove app-layer CCC gating in HID device (5.2)

See merge request espressif/esp-idf!51003
2026-07-23 19:26:23 +08:00
Luo XuandWang Mengyang 30a9fae8c8 fix(bt): Fixed build error on array-bounds in HFP AG
(cherry picked from commit bbd20cae01)

Co-authored-by: Wang Mengyang <wangmengyang@espressif.com>
2026-07-23 16:15:57 +08:00
Jin Cheng 30bf70a980 change(bt/bluedroid): increased port low watermark of RFCOMM
When PORT_RX_BUF_LOW_WM is too low, RFCOMM replenishes credits only
after receiving a relatively large number of packets, which may cause
the peer to exhaust its credits and enter a stop-and-wait state.
Increase the low watermark to replenish credits more promptly and
reduce the likelihood of the peer stalling while waiting for additional
credits.
2026-07-23 08:12:10 +08:00
Jin Cheng 72edcd18ea fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI 2026-07-23 07:56:42 +08:00
Wang Meng Yang efed7bd6af Merge branch 'bugfix/hid_host_oob_read_v5.2' into 'release/v5.2'
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act (v5.2)

See merge request espressif/esp-idf!50976
2026-07-22 17:58:45 +08:00
Astha Verma c481185c04 fix(nimble): Handle Read Remote Supported Features failure correctly 2026-07-22 12:27:45 +05:30
yangfeng 895ca78695 fix(bt): Fix the pointer sbc_start_frame is not initialized
- Closes https://github.com/espressif/esp-idf/issues/18835
2026-07-21 16:10:40 +08:00
Zhang Hai Peng 75a7071292 fix(ble/bluedroid): track ext scan state for rand addr check
Update inq_var.state only after btsnd_hcic_ble_ext_scan_enable succeeds.
Clear BTM_BLE_SCANNING on explicit stop and controller scan timeout.


(cherry picked from commit 23519567e4)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-21 10:53:21 +08:00
Zhang Hai Peng 77c6595e97 change(ble/bluedroid): disable host trace logs when BLE Log host is off
Default all Bluedroid layer trace levels to NONE when BLE async log
is enabled without BLE_LOG_HOST_LOG.


(cherry picked from commit 1f8f935e3f)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-21 10:44:04 +08:00
Jin Cheng 940a38a6d7 fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act
Closes SEC-786
2026-07-20 16:42:59 +08:00
yangfeng d1ed5d3e84 fix(bt): Fix the high issues related to AVRCP from AI review report
- SDP/registration: handle SDP record creation and discovery failures safely
- AVRC stack: fix packet checks, fragment leaks, response build, and compile guards
- BTC AVRCP: fix return codes, connection state, metadata parsing, and memory leaks
- AVCTP: fix event passing, L2CAP conflicts, TX queue leaks, and disconnect handling
- Example: remove TG RN capability setup before initialization
2026-07-20 09:56:54 +08:00
yangfeng 85a3cebb7a fix(bt): Fix the critical issues related to AVRCP from AI review report
- recalculate len_left per attribute in avrc_bld_app_setting_text_rsp
- abort fragmented message reassembly when reassembly buffer alloc fails
2026-07-20 09:48:39 +08:00
yangfeng 3568ec1c45 fix(bt/bluedroid): Fix unchecked p_ctrl_cback and p_msg_cback in AVRC
Closes SEC-1186
2026-07-19 12:43:59 +08:00
yangfeng b78a508f66 fix(bt/bluedroid): Fix missing NULL check on p_cfg in AVDT_ReconfigReq
Closes SEC-1187
2026-07-19 12:43:59 +08:00
Wang Meng Yang a2e4d90451 Merge branch 'bugfix/fix_bredr_inq_crash_v5.2' into 'release/v5.2'
fix(bt/bluedroid): fix crash during bredr inquiry when zero-addr device is found (v5.2)

See merge request espressif/esp-idf!50858
2026-07-19 10:06:57 +08:00
Rahul Tank c0c517ae4f Merge branch 'bugfix/add_dis_ieee_udi_to_config_v5.2' into 'release/v5.2'
fix(nimble): Add option to disable IEEE and UDI Characteristic in DIS (v5.2)

See merge request espressif/esp-idf!50764
2026-07-18 09:31:29 +05:30
Wang Meng Yang ecd2bf1002 Merge branch 'bugfix/smp_sec_flags_v5.2' into 'release/v5.2'
fix(bt/bluedroid): fixed several security issues from NVIDIA (v5.2)

See merge request espressif/esp-idf!50570
2026-07-17 20:02:52 +08:00
linruihao 76943b3b04 fix(bt/bluedroid): fix crash during bredr inquiry when zero-addr device is found 2026-07-17 10:39:42 +08:00