Jiang Jiang Jian
4f7226bb6e
Merge branch 'bugfix/fix_nimble_issue_2608' into 'release/v5.2'
...
fix(nimble): Fix few nimble issues 2608 (v5.2)
See merge request espressif/esp-idf!52110
2026-08-28 19:36:24 +08:00
Jiang Jiang Jian
56cf33255e
Merge branch 'bugfix/fix_bluedroid_gatt_discover_downstream_stall_v5.2' into 'release/v5.2'
...
fix(ble/bluedroid): allow osi_event re-post during POSTING window (5.2)
See merge request espressif/esp-idf!52040
2026-08-27 20:27:51 +08:00
Rahul Tank
a01916d093
fix(nimble): Fix ECC HW byte-order and dropped SOC_ESP_NIMBLE_CONTROLLER
2026-08-26 15:51:28 +05:30
Rahul Tank
97963f57ee
fix(nimble): bound PAwR synced connect retries in the example
2026-08-26 15:49:36 +05:30
Rahul Tank
75428d48e6
fix(nimble): Added change to stop adv before starting new adv
2026-08-26 15:49:31 +05:30
Zhang Hai Peng
df0fe25bda
fix(ble/bluedroid): allow osi_event re-post during POSTING window
...
Do not reject osi_thread_post_event() when only POSTING is set.
QUEUED already prevents double-queueing; rejecting POSTING caused
HCI downstream lost wakeup. Add generic osi_event and hci downstream
diagnostics for post failures.
(cherry picked from commit 011138ffd9 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-08-25 19:55:06 +08:00
Zhang Hai Peng
dfd8d39c0a
docs(bt): clarify Bluedroid GATT signed write API comments
...
Correct misleading CHAR_PROP_BIT_AUTH wording and document CSRK-based
signed write usage for server permissions and client write APIs.
(cherry picked from commit 8d230c7650 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-08-25 19:55:05 +08:00
yangfeng
3ac7132d4c
fix(bt): do not cap AVDTP Discover results by local SEP count
...
- Closes https://github.com/espressif/esp-idf/issues/18848
2026-08-13 19:32:43 +08:00
Jiang Jiang Jian
7b7cd05583
Merge branch 'bugfix/a2dp_api_init_check_v5.2' into 'release/v5.2'
...
fix(bt): Fix compatibility with A2DP API legacy usage methods (v5.2)
See merge request espressif/esp-idf!51335
2026-08-11 13:58:00 +08:00
Jiang Jiang Jian
50e59f90f4
Merge branch 'feat/bt_in_psram_v5.2' into 'release/v5.2'
...
feat(bluedroid): Add config to place btu and hci task stack in psram (v5.2)
See merge request espressif/esp-idf!51495
2026-08-10 16:22:38 +08:00
Rahul Tank
ce22ec9d47
Merge branch 'bugfix/add_nimble_cve_v5.2' into 'release/v5.2'
...
fix(nimble): Fixes for various NimBLE CVEs (v5.2)
See merge request espressif/esp-idf!51206
2026-08-10 07:05:49 +05:30
yangfeng
cd93bd63b9
fix(bt): Fix compatibility with A2DP API legacy usage methods
...
- Modify the timing of API calls in the A2DP example
- Closes https://github.com/espressif/esp-idf/issues/18786
2026-08-07 08:04:07 +08:00
hejiaxin
94c8d6e9b6
feat(bluedroid): Add config to place btu and hci task stack in psram
...
- Also adjust the osi_thread_stop implementation.
2026-08-06 11:54:39 +08:00
Jiang Jiang Jian
7427b84306
Merge branch 'feat/support_pawr_connect_evt_v5.2' into 'release/v5.2'
...
feat(ble/bluedroid): Support PAWR connection event (5.2)
See merge request espressif/esp-idf!51438
2026-08-06 11:24:34 +08:00
Wang Meng Yang
5ce46f2764
Merge branch 'change/refactor_hidh_datapath_v5.2' into 'release/v5.2'
...
Change/refactor hidh datapath[backport v5.2]
See merge request espressif/esp-idf!51283
2026-08-05 14:23:43 +08:00
Island
f030f5f862
Merge branch 'fix/ble_log_compression_add_local_header_file_v5.2' into 'release/v5.2'
...
feat(ble_log): mirror local compression headers (5.2)
See merge request espressif/esp-idf!50948
2026-08-04 19:48:20 +08:00
Wang Meng Yang
1377dac554
Merge branch 'fix/aireview_critical_v5.2' into 'release/v5.2'
...
fix: Fix some critical bugs in classic bt (v5.2)
See merge request espressif/esp-idf!51293
2026-08-04 14:15:22 +08:00
Rahul Tank
d39a411e53
fix(nimble): Fixes for various NimBLE CVEs
2026-08-03 15:42:51 +05:30
Zhi Wei Jian
4cd9273018
fix(ble/bluedroid): Build LE event mask from host feature macros
...
(cherry picked from commit 68dff5d798 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-08-03 15:25:36 +08:00
Zhi Wei Jian
d17b62dbee
feat(ble/bluedroid): Support PAWR connection event
...
(cherry picked from commit 7da7fa42ac )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-08-03 15:25:35 +08:00
Rahul Tank
940c834103
Merge branch 'bugfix/fix_pawr_conn_event_v5.2' into 'release/v5.2'
...
fix(nimble): Deliver PAwR peripheral CONNECT via sync callback (v5.2)
See merge request espressif/esp-idf!51257
2026-07-30 20:45:50 +05:30
hejiaxin
556e7cdad5
fix(bt_stack): Fix some critical bugs in classic_bt stack
...
related: obex, smp, pbap, sdp, rfcomm, stack_dm
- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
2026-07-30 17:30:53 +08:00
Jin Cheng
18a99d2eb7
fix(bt/bluedroid): fixed incorrect eSCO packet type validation under secure connection mode in BlueDroid
2026-07-29 17:30:41 +08:00
hejiaxin
5434deb81d
fix(bt): Fix some bug in stm_sco.c
...
- Memory safety
- State machine & logic integrity
- Resource leaks
- Edge cases check
2026-07-29 17:30:41 +08:00
liqigan
f81ab9974a
fix(bt/bluedroid): Fixed HID host reconnection bug and enabled load HID devices
...
Closes https://github.com/espressif/esp-idf/issues/18335
2026-07-29 11:22:58 +08:00
liqigan
214e280b67
change(bt/bluedroid): Refactored HCI ACL datapath
2026-07-29 11:12:54 +08:00
liqigan
cfbb43a4fc
change(bt/bluedroid): Refactored HID host datapath
2026-07-29 11:12:45 +08:00
Wang Meng Yang
1db291682a
Merge branch 'bugfix/bredr_critical_bugs_v5.2' into 'release/v5.2'
...
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI (v5.2)
See merge request espressif/esp-idf!51082
2026-07-28 19:43:38 +08:00
Rahul Tank
5aa51e4b9c
fix(nimble): Deliver PAwR peripheral CONNECT via sync callback
2026-07-28 12:59:42 +05:30
Shreeyash Bhakare
609cb58a9b
fix(nimble): Added security related fixes
2026-07-25 13:54:50 +05:30
Astha Verma
936d7c117c
fix(nimble): Restore throughput after switching from LE Coded PHY
2026-07-24 18:13:33 +05:30
Rahul Tank
0ff25a3b51
Merge branch 'bugfix/red_rem_feat_evt_v5.2' into 'release/v5.2'
...
Handle Read Remote Supported Feature failure (v5.2)
See merge request espressif/esp-idf!50813
2026-07-24 14:34:33 +05:30
Island
f36ae6c755
Merge branch 'fix/ble_hidd_remove_ccc_gating_v5.2' into 'release/v5.2'
...
fix(esp_hid/bluedroid): remove app-layer CCC gating in HID device (5.2)
See merge request espressif/esp-idf!51003
2026-07-23 19:26:23 +08:00
Luo Xu and Wang Mengyang
30a9fae8c8
fix(bt): Fixed build error on array-bounds in HFP AG
...
(cherry picked from commit bbd20cae01 )
Co-authored-by: Wang Mengyang <wangmengyang@espressif.com >
2026-07-23 16:15:57 +08:00
Jin Cheng
30bf70a980
change(bt/bluedroid): increased port low watermark of RFCOMM
...
When PORT_RX_BUF_LOW_WM is too low, RFCOMM replenishes credits only
after receiving a relatively large number of packets, which may cause
the peer to exhaust its credits and enter a stop-and-wait state.
Increase the low watermark to replenish credits more promptly and
reduce the likelihood of the peer stalling while waiting for additional
credits.
2026-07-23 08:12:10 +08:00
Jin Cheng
72edcd18ea
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI
2026-07-23 07:56:42 +08:00
Wang Meng Yang
efed7bd6af
Merge branch 'bugfix/hid_host_oob_read_v5.2' into 'release/v5.2'
...
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act (v5.2)
See merge request espressif/esp-idf!50976
2026-07-22 17:58:45 +08:00
Astha Verma
c481185c04
fix(nimble): Handle Read Remote Supported Features failure correctly
2026-07-22 12:27:45 +05:30
yangfeng
895ca78695
fix(bt): Fix the pointer sbc_start_frame is not initialized
...
- Closes https://github.com/espressif/esp-idf/issues/18835
2026-07-21 16:10:40 +08:00
Zhang Hai Peng
75a7071292
fix(ble/bluedroid): track ext scan state for rand addr check
...
Update inq_var.state only after btsnd_hcic_ble_ext_scan_enable succeeds.
Clear BTM_BLE_SCANNING on explicit stop and controller scan timeout.
(cherry picked from commit 23519567e4 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-07-21 10:53:21 +08:00
Zhang Hai Peng
77c6595e97
change(ble/bluedroid): disable host trace logs when BLE Log host is off
...
Default all Bluedroid layer trace levels to NONE when BLE async log
is enabled without BLE_LOG_HOST_LOG.
(cherry picked from commit 1f8f935e3f )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-07-21 10:44:04 +08:00
Jin Cheng
940a38a6d7
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act
...
Closes SEC-786
2026-07-20 16:42:59 +08:00
yangfeng
d1ed5d3e84
fix(bt): Fix the high issues related to AVRCP from AI review report
...
- SDP/registration: handle SDP record creation and discovery failures safely
- AVRC stack: fix packet checks, fragment leaks, response build, and compile guards
- BTC AVRCP: fix return codes, connection state, metadata parsing, and memory leaks
- AVCTP: fix event passing, L2CAP conflicts, TX queue leaks, and disconnect handling
- Example: remove TG RN capability setup before initialization
2026-07-20 09:56:54 +08:00
yangfeng
85a3cebb7a
fix(bt): Fix the critical issues related to AVRCP from AI review report
...
- recalculate len_left per attribute in avrc_bld_app_setting_text_rsp
- abort fragmented message reassembly when reassembly buffer alloc fails
2026-07-20 09:48:39 +08:00
yangfeng
3568ec1c45
fix(bt/bluedroid): Fix unchecked p_ctrl_cback and p_msg_cback in AVRC
...
Closes SEC-1186
2026-07-19 12:43:59 +08:00
yangfeng
b78a508f66
fix(bt/bluedroid): Fix missing NULL check on p_cfg in AVDT_ReconfigReq
...
Closes SEC-1187
2026-07-19 12:43:59 +08:00
Wang Meng Yang
a2e4d90451
Merge branch 'bugfix/fix_bredr_inq_crash_v5.2' into 'release/v5.2'
...
fix(bt/bluedroid): fix crash during bredr inquiry when zero-addr device is found (v5.2)
See merge request espressif/esp-idf!50858
2026-07-19 10:06:57 +08:00
Rahul Tank
c0c517ae4f
Merge branch 'bugfix/add_dis_ieee_udi_to_config_v5.2' into 'release/v5.2'
...
fix(nimble): Add option to disable IEEE and UDI Characteristic in DIS (v5.2)
See merge request espressif/esp-idf!50764
2026-07-18 09:31:29 +05:30
Wang Meng Yang
ecd2bf1002
Merge branch 'bugfix/smp_sec_flags_v5.2' into 'release/v5.2'
...
fix(bt/bluedroid): fixed several security issues from NVIDIA (v5.2)
See merge request espressif/esp-idf!50570
2026-07-17 20:02:52 +08:00
linruihao
76943b3b04
fix(bt/bluedroid): fix crash during bredr inquiry when zero-addr device is found
2026-07-17 10:39:42 +08:00