Commit Graph

35310 Commits

Author SHA1 Message Date
Jin Cheng
75ab59be87 fix(bt/bluedroid): added negative length check in process_service_search_rsp 2025-12-30 16:11:12 +08:00
Jin Cheng
71f54659ef fix(bt/bluedroid): fixed OOB read in SDP server continuation length 2025-12-30 16:11:12 +08:00
Jin Cheng
fa0e1e7f8d fix(bt/bluedroid): added length check when copy AVDTP packet 2025-12-30 16:11:12 +08:00
Jin Cheng
bf33651386 fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET 2025-12-30 16:11:12 +08:00
Jin Cheng
b109d3442d fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item 2025-12-30 16:11:12 +08:00
Jin Cheng
930863a8f4 fix(bt/bluedroid): added boundary check when reading SDP attribute response packet 2025-12-30 16:11:12 +08:00
Jin Cheng
dc8852bb6a fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp 2025-12-30 16:11:12 +08:00
Jin Cheng
88c149ee65 fix(bt/bluedroid): fixed potential OOB read in the reporting handler
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-30 16:11:12 +08:00
Jin Cheng
83b7ddc675 fix(bt/bluedroid): fixed a potential overflow about the media payload offset
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-30 16:11:12 +08:00
Jin Cheng
9eb724a37e fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open 2025-12-30 16:11:12 +08:00
Jin Cheng
a44673dd7f fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected 2025-12-30 16:11:12 +08:00
Jin Cheng
6daeef22c5 fix(bt/bluedroid): reject device with same address in legacy paring 2025-12-30 16:11:12 +08:00
Jin Cheng
3dbada70a4 fix(bt/bluedroid): ignore AVCT commands that are too long 2025-12-30 16:11:12 +08:00
Jin Cheng
de0ad15aa3 fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP 2025-12-30 16:11:12 +08:00
Jin Cheng
0101b834a3 fix(bt/bluedroid): make sure SDP only start discovery once 2025-12-30 16:11:12 +08:00
Jin Cheng
91b233b783 fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write 2025-12-30 16:11:12 +08:00
Jin Cheng
a0a11bc6ab fix(bt/blurdoird): check Classic key before cross-key derivation 2025-12-30 16:11:12 +08:00
Jin Cheng
60df7ff885 fix(bt/blurdoird): enable bitpool snity checks 2025-12-30 16:11:12 +08:00
Jiang Jiang Jian
6ebff33277 Merge branch 'bugfix/modem_rf_flag_clear_failed_esp32c6_v5.1' into 'release/v5.1'
fix: clear modem RF flag before PMU sleep to prevent open rf failed on next wake-up V5.1

See merge request espressif/esp-idf!44651
2025-12-30 15:11:08 +08:00
Jiang Jiang Jian
ac7dabaf5a Merge branch 'bugfix/sae_h2e_nvs_default_v5.1' into 'release/v5.1'
fix(esp_wifi): Set default NVS sae pwe value to SAE_PWE_BOTH for ap and station

See merge request espressif/esp-idf!44650
2025-12-30 12:33:19 +08:00
Island
bc4128db61 Merge branch 'docs/update_6.0_ble_feature_status_v5.1' into 'release/v5.1'
docs(ble): Added BLE 6.0 features support status (v5.1)

See merge request espressif/esp-idf!42185
2025-12-30 11:07:23 +08:00
Jiang Jiang Jian
89fd89af5e Merge branch 'fix/ot_used_wrong_nvs_open_api_v5.1' into 'release/v5.1'
fix(openthread): open nvs from the configured partition (v5.1)

See merge request espressif/esp-idf!44031
2025-12-30 10:37:52 +08:00
Jiang Jiang Jian
4a2973eea6 Merge branch 'change/remove_unused_marco_defines_for_rssi_limit_v5.1' into 'release/v5.1'
change(bt): Mark RSSI threshold-related macros as deprecated(backport v5.1)

See merge request espressif/esp-idf!44517
2025-12-30 10:08:45 +08:00
Shreyas Sheth
1fab1a9306 fix(esp_wifi): Set default NVS sae pwe value to SAE_PWE_BOTH for ap and station 2025-12-29 19:18:16 +05:30
Jiang Jiang Jian
8e542979e4 Merge branch 'bugfix/fix_vendor_ie_and_espnow_issues_v5.1' into 'release/v5.1'
fix vendor ie and espnow issues (v5.1)

See merge request espressif/esp-idf!44635
2025-12-29 21:41:08 +08:00
sibeibei
0666a8df90 fix: clear modem RF flag before PMU sleep to prevent open rf failed on next wake-up 2025-12-29 21:39:15 +08:00
zwx
1f0845e8cb fix(openthread): open nvs from the configured partition 2025-12-29 20:17:35 +08:00
Jiang Jiang Jian
08bd69b3ff Merge branch 'fix/freertos_delete_block_tasks_test_v5.1' into 'release/v5.1'
test(freertos): Added stability fixes to the delete blocked tasks test (v5.1)

See merge request espressif/esp-idf!44489
2025-12-29 20:02:43 +08:00
Jiang Jiang Jian
e00a513409 Merge branch 'fix/add_soc_caps_for_pawr_feat_v5.1' into 'release/v5.1'
fix(ble): add soc caps feat for PAwR (v5.1)

See merge request espressif/esp-idf!44146
2025-12-29 20:02:22 +08:00
Jiang Jiang Jian
21b65cd736 Merge branch 'fix/fix_pawr_crash_errors_v5.1' into 'release/v5.1'
fix(ble): fix hci log malloc failure crash

See merge request espressif/esp-idf!44119
2025-12-29 20:02:04 +08:00
Jiang Jiang Jian
b120dad371 Merge branch 'change/ble_update_lib_20251202_v5.1' into 'release/v5.1'
change(ble): [AUTO_MR] 20251202 - Update ESP BLE Controller Lib (v5.1)

See merge request espressif/esp-idf!44015
2025-12-29 20:01:31 +08:00
Jiang Jiang Jian
1b81a5ee84 Merge branch 'bugfix/iperf_sta_retry_cnt_v5.1' into 'release/v5.1'
fix(wifi): Add max retry count for iperf station command (Backport v5.1)

See merge request espressif/esp-idf!43910
2025-12-29 19:55:56 +08:00
Wei Yuhan
b10d57f970 docs(ble): Added BLE 6.0 features support status 2025-12-29 18:50:07 +08:00
zhangyanjiao
e61566c8e5 fix(wifi): fixed the vendor ie length issue 2025-12-29 15:30:00 +08:00
zhangyanjiao
da76ce2fe2 fix(wifi): fixed the vendor ie issue and espnow issue 2025-12-29 15:29:08 +08:00
Jiang Jiang Jian
fc83f40eb5 Merge branch 'bugfix/l2c_fcr_clone_buf_v5.1' into 'release/v5.1'
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf

See merge request espressif/esp-idf!44267
2025-12-29 10:23:32 +08:00
Jiang Jiang Jian
635e9dc5be Merge branch 'bugfix/invalid_memory_access_supplicant_v5.1' into 'release/v5.1'
fix(esp_wifi): Fix some invalid memory access (v5.1)

See merge request espressif/esp-idf!44359
2025-12-29 10:22:22 +08:00
Jiang Jiang Jian
ce5507d61d Merge branch 'refactor/split_a2dp_sink_v5.1' into 'release/v5.1'
refactor(examples/classic_bt): Split a2dp_sink example(v5.1)

See merge request espressif/esp-idf!44527
2025-12-29 10:21:03 +08:00
yangfeng
a56fac5bba refactor(examples/classic_bt): Add example tests for A2DP and AVRCP examples 2025-12-25 11:15:27 +08:00
yangfeng
e92eeadb2e docs: Add explanations for the A2DP sink stream and AVRCP examples
- Modify the path of A2DP sink example
2025-12-25 11:15:27 +08:00
yangfeng
e78eea1874 refactor: Refactor the example of the coexistence of A2DP sink and GATT service 2025-12-25 11:12:49 +08:00
yangfeng
6a1be1ac90 refactor(examples/classic_bt): Refactor A2DP sink and AVRCP examples
- Add avrcp_ct_metadata example
- Add avrcp_absolute_volume example
- Add the example components about common code for a2dp sink and avrcp
2025-12-25 11:12:19 +08:00
Sudeep Mohanty
ef14b4984e test(freertos): Added stability fixes to the delete blocked tasks test 2025-12-24 08:10:50 +01:00
gongyantao
f59efd7977 change(bt): Mark RSSI threshold-related macros as deprecated 2025-12-24 12:17:44 +08:00
Mahavir Jain
a861dc3480 Merge branch 'bugfix/bug_bounty_ble_issue_v5.1' into 'release/v5.1'
fix(protocomm): Add security checks for buffer overflow and incorrect length handling (v5.1)

See merge request espressif/esp-idf!44383
2025-12-23 15:22:10 +05:30
Kapil Gupta
cad36beb4c fix(esp_wifi): Fix invalid memory accesses in supplicant code 2025-12-22 13:53:03 +08:00
Jiang Jiang Jian
cee385a459 Merge branch 'fix/fix_an_ot_kconfig_error_v5.1' into 'release/v5.1'
fix(openthread): fix an error in Kconfig (v5.1)

See merge request espressif/esp-idf!44000
2025-12-21 15:43:35 +08:00
Rahul Tank
4c3fdcd316 fix(protocomm): Add security checks for buffer overflow and incorrect length handling 2025-12-21 11:54:43 +05:30
Jiang Jiang Jian
44e2e05c23 Merge branch 'bugfix/fix_some_bugs_related_to_ampdu_v5.1' into 'release/v5.1'
Bugfix/fix some bugs related to ampdu v5.1(backport v5.1)

See merge request espressif/esp-idf!44322
2025-12-19 19:13:03 +08:00
Jiang Jiang Jian
c0c18750e5 Merge branch 'ci/fix_wifi_cases_5.1' into 'release/v5.1'
Ci: fix wifi cases 5.1

See merge request espressif/esp-idf!44022
2025-12-19 19:12:35 +08:00