Island
701f2e4f79
Merge branch 'feat/ble_log_xor_checksum_v5.2' into 'release/v5.2'
...
feat(ble): added xor checksum for integrity check performance optimization (v5.2)
See merge request espressif/esp-idf!44537
2025-12-26 10:38:45 +08:00
Marius Vikhammer
36a582e64b
Merge branch 'fix/freertos_delete_block_tasks_test_v5.2' into 'release/v5.2'
...
test(freertos): Added stability fixes to the delete blocked tasks test (v5.2)
See merge request espressif/esp-idf!44488
2025-12-26 09:45:20 +08:00
Zhou Xiao
4373d80135
feat(ble): supported ble log v2 hci log for Bluedroid host
2025-12-24 17:47:41 +08:00
Zhou Xiao
88dd3a1f54
feat(ble): supported ble log v2 hci log for NimBLE host
2025-12-24 17:47:36 +08:00
Zhou Xiao
efd558d730
fix(ble): added null pointer check in ble log ts submodule
...
(cherry picked from commit 2b9c7471d0zhouxiao@espressif.com >
2025-12-24 17:04:57 +08:00
Zhou Xiao
a1893faf34
fix(ble): added missed ts sync reset
...
(cherry picked from commit d1d07eb60azhouxiao@espressif.com >
2025-12-24 17:04:57 +08:00
Zhou Xiao
c4adead289
feat(ble): added xor checksum for integrity check performance optimization
...
(cherry picked from commit c604afa272zhouxiao@espressif.com >
2025-12-24 17:04:57 +08:00
Sudeep Mohanty
cad61831fe
fix(freertos): Added stability fixes to the delete blocked tasks test
2025-12-24 08:09:14 +01:00
Rahul Tank
77f7c72023
Merge branch 'fix/gatt_caching_clean_api_malloc_error_v5.2' into 'release/v5.2'
...
fix(nimble): Modify GATT data storage structure in NVS during caching (v5.2)
See merge request espressif/esp-idf!42579
2025-12-24 12:30:57 +05:30
Zhang Wen Xu
645c08e4e9
Merge branch 'feat/rcp_spinel_logs_v5.2' into 'release/v5.2'
...
feat(openthread): support RCP console debug via spinel (v5.2)
See merge request espressif/esp-idf!44159
2025-12-24 02:29:45 +00:00
Astha Verma
29c3cb55a9
fix(nimble): Modify GATT data storage structure in NVS during gatt caching
2025-12-23 21:26:31 +05:30
Rahul Tank
d34913cbfb
Merge branch 'feat/add_static_passkey_v5.2' into 'release/v5.2'
...
feat(nimble): Add support for static passkey (v5.2)
See merge request espressif/esp-idf!44445
2025-12-23 21:12:00 +05:30
Rahul Tank
104cada97f
Merge branch 'bugfix/bug_bounty_ble_issue_v5.2' into 'release/v5.2'
...
fix(protocomm): Add security checks for buffer overflow and incorrect length handling (v5.2)
See merge request espressif/esp-idf!44299
2025-12-23 15:52:59 +05:30
Sudeep Mohanty
31bb85c315
test(freertos): Added stability fixes to the delete blocked tasks test
2025-12-23 09:48:36 +01:00
Rahul Tank
05aafb604d
feat(nimble): Add support for static passkey
2025-12-22 21:19:18 +05:30
Island
6c4bc967b7
Merge branch 'fix/ble_mesh_trans_enh_seg_rpl_v5.2' into 'release/v5.2'
...
fix(ble_mesh): fixed incorrect rpl behavior in transport enh (v5.2)
See merge request espressif/esp-idf!44385
2025-12-22 14:29:25 +08:00
Jiang Jiang Jian
a1ecfdde7d
Merge branch 'fix/fix_esp32s2_phy_issue_v52' into 'release/v5.2'
...
fix(phy): fix esp32s2 phy lib issue v52
See merge request espressif/esp-idf!44404
2025-12-22 10:14:19 +08:00
Jiang Jiang Jian
7c4e9d1e35
Merge branch 'bugfix/sync_security_fix_from_flouride_v5.2' into 'release/v5.2'
...
fix: synchronized several security-related fixes from Google Fluoride (v5.2)
See merge request espressif/esp-idf!44412
2025-12-21 15:56:07 +08:00
Island
d4f87c72bf
Merge branch 'fix/ble_log_v2_dual_core_iwt_v5.2' into 'release/v5.2'
...
fix(ble): added missed spin lock initialization (v5.2)
See merge request espressif/esp-idf!44378
2025-12-19 15:10:43 +08:00
Jin Cheng
14c8ddfdd4
fix(bt/bluedroid): cleaned the code according to the tool cppcheck
2025-12-19 11:27:26 +08:00
Jin Cheng
6fa6b6b374
fix(bt/bluedroid): fixed possible OOB read in smp_br_data_received
2025-12-19 11:27:26 +08:00
Jin Cheng
239fdbd174
fix(bt/bluedroid): drop connection when atttempting to disable encryption
2025-12-19 11:27:26 +08:00
Jin Cheng
3ff24f1e44
fix(bt/bluedroid): fixed an integer overflow bug in attp_build_read_multi_cmd
2025-12-19 11:27:26 +08:00
Jin Cheng
bcb3cd8840
fix(bt/bluedroid): fixed an integer overflow bug in avdt_msg_asmbl
2025-12-19 11:27:26 +08:00
Jin Cheng
92f8b37455
fix(bt/bluedroid): fixed an OOB bug in bta_av_setconfig_rej
2025-12-19 11:27:26 +08:00
Jin Cheng
0b645745e7
fix(bt/bluedroid): fixed an OOB bug in btm_read_rssi_complete
2025-12-19 11:27:26 +08:00
Jin Cheng
5f96dc4851
fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete
2025-12-19 11:27:26 +08:00
Jin Cheng
97a4a56df2
fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete
2025-12-19 11:27:26 +08:00
Jin Cheng
d6cf63f8ac
fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete
2025-12-19 11:27:26 +08:00
Jin Cheng
70d5bb6d8c
fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete
2025-12-19 11:27:26 +08:00
Jin Cheng
55e53f77f4
fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute
2025-12-19 11:27:26 +08:00
Jin Cheng
5b00921930
fix(bt/bluedroid): report failure when not able to connect to AVRCP
2025-12-19 11:27:24 +08:00
Jin Cheng
70a6d681c1
fix(bt/bluedroid): fixed buffer overflow in BRSF
2025-12-19 11:26:40 +08:00
Jin Cheng
db843a5942
fix(bt/bluedroid): added negative length check in process_service_search_rsp
2025-12-19 11:26:40 +08:00
Jin Cheng
d3c1f9f97c
fix(bt/bluedroid): fixed OOB read in SDP server continuation length
2025-12-19 11:26:40 +08:00
Jin Cheng
290b23de3f
fix(bt/bluedroid): added length check when copy AVDTP packet
2025-12-19 11:26:40 +08:00
Jin Cheng
7537add653
fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET
2025-12-19 11:26:40 +08:00
Jin Cheng
e0a937a262
fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item
2025-12-19 11:26:40 +08:00
Jin Cheng
b5777a790e
fix(bt/bluedroid): added boundary check when reading SDP attribute response packet
2025-12-19 11:26:40 +08:00
Jin Cheng
6c14d52eb1
fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp
2025-12-19 11:26:40 +08:00
Jin Cheng
493679ca6c
fix(bt/bluedroid): fixed potential OOB read in the reporting handler
...
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-19 11:26:40 +08:00
Jin Cheng
f4e1b5195a
fix(bt/bluedroid): fixed a potential overflow about the media payload offset
...
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-19 11:26:40 +08:00
Jin Cheng
e42060dbf7
fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open
2025-12-19 11:26:40 +08:00
Jin Cheng
b35e414d4b
fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected
2025-12-19 11:26:40 +08:00
Jin Cheng
ab2bbb2535
fix(bt/bluedroid): reject device with same address in legacy paring
2025-12-19 11:26:40 +08:00
Jin Cheng
5cc017942e
fix(bt/bluedroid): ignore AVCT commands that are too long
2025-12-19 11:26:40 +08:00
Jin Cheng
f69f78e44c
fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP
2025-12-19 11:26:40 +08:00
Jin Cheng
1ed0f42500
fix(bt/bluedroid): make sure SDP only start discovery once
2025-12-19 11:26:40 +08:00
Jin Cheng
53efa32ee0
fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write
2025-12-19 11:26:40 +08:00
Jin Cheng
ce34d1a42c
fix(bt/blurdoird): check Classic key before cross-key derivation
2025-12-19 11:26:40 +08:00
