Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-07-16 07:53:05 +03:00
Code Issues Packages Projects Releases Wiki Activity
48,548 Commits 26 Branches 186 Tags
9e0b06d2b1d93e3ff29bde6dcbbea1ca02027083
Commit Graph

489 Commits

Author SHA1 Message Date
Island
4af7054b75 Merge branch 'bugfix/fix_ble_security_issue_2025_v6.0' into 'release/v6.0' 
Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd (v6.0)

See merge request espressif/esp-idf!43808
 2025-12-18 10:57:44 +08:00
Island
14c6f73885 Merge branch 'bugfix/fix_reconnect_failed_with_extend_adv_v6.0' into 'release/v6.0' 
fix(ble/bluedroid): Fixed the issue that extend advertising might not restart if the connection fails (v6.0)

See merge request espressif/esp-idf!44252
 2025-12-18 10:50:36 +08:00
Jin Cheng
45aeaf97c4 fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf 2025-12-16 11:37:58 +08:00
Zhi Wei Jian
2c8df059cc fix(ble/bluedroid): Fixed reconnection failed with extend adv 
(cherry picked from commit ec4052c1c7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2025-12-15 21:23:26 +08:00
linruihao
6808cc82b7 change(bt/bluedroid): Change AVRCP version according to feature enabled 
- Version will be set to 1.6 if Cover Art feature enabled
- Otherwise, version will be set to 1.5
 2025-12-12 20:11:08 +08:00
Zhang Hai Peng
5f02ee484e fix(ble/bluedroid): Fix security issues in GATT module 
(cherry picked from commit f502b2aab1)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-03 11:54:33 +08:00
Zhang Hai Peng
4239c6c9c6 fix(ble/bluedroid): Fix security issues in GAP module 
(cherry picked from commit 1ed5a4465d)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-03 11:54:32 +08:00
Zhang Hai Peng
9bb648684c fix(ble/bluedroid): Add length check in prepare write response 
(cherry picked from commit b03ff3cf21)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-03 11:54:31 +08:00
Zhang Hai Peng
a81cca1426 fix(ble/bluedroid): Add boundary check for adv_handle in btm_ble_adv_set_terminated_evt 
(cherry picked from commit d2baf3b0d4)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-03 11:54:31 +08:00
Zhang Hai Peng
d14d47e55d fix(ble/bluedroid): Fix potential out-of-bounds issue 
- add length check in hci_hal_h4_hdl_rx_packet to prevent OOB
- add adv data length check in btm_ble_cache_adv_data
- add indicate data length check in BTA_GATTS_HandleValueIndication
- add report length check in bta_hh_parse_keybd_rpt
- add report length check in BTA_HdSendReport
- add descriptor length check in BTA_HdRegisterApp
- prevent buffer overflow in attribute processing


(cherry picked from commit 71efec78c5)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-02 00:04:34 +08:00
Zhang Hai Peng
8969624e82 fix(ble/bluedroid): Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd 
- Reference: https://source.android.com/docs/security/bulletin/2024-03-01?hl=zh-cn


(cherry picked from commit e1d39f630f)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-02 00:04:34 +08:00
Zhang Hai Peng
05378602ef fix(ble/bluedroid): Fixed missing BLE connect and disconnect events 
(cherry picked from commit 2dcbd64616)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-11-26 00:05:07 +08:00
chenjianhua
fb6617e2f7 fix(ble/bluedroid): Fixed GATT response timeout setting 2025-11-18 11:26:27 +08:00
Island
df80f1d9cb Merge branch 'feat/support_bluedroid_host_pawr_v6.0' into 'release/v6.0' 
feat(ble/bluedroid): Add bluedroid host PAwR and Advertising Coding Selection features (backport for v6.0)

See merge request espressif/esp-idf!43398
 2025-11-17 19:04:11 +08:00
Island
6abb39815a Merge branch 'feat/support_bhost2025_44_v6.0' into 'release/v6.0' 
feat(ble/bluedroid): Add more debug log for bluedroid (v6.0)

See merge request espressif/esp-idf!43367
 2025-11-17 14:52:02 +08:00
zhiweijian
36d0885589 fix(ble/bluedroid): Fixed CTE IQ sample data copy error 2025-11-14 20:49:09 +08:00
zhiweijian
083d6f31a5 fix(ble/bluedroid): Optimize some bluedroid code 2025-11-14 18:02:39 +08:00
zhiweijian
45018553eb fix(ble/bluedroid): Fixed big event status error 2025-11-14 18:02:27 +08:00
zhiweijian
b24239843b feat(ble/bluedroid): support bluedroid host channel sounding feature 2025-11-14 18:02:18 +08:00
zhiweijian
1115165ea0 feat(ble/bluedroid): Supported BLE bluedroid host pawr connection 2025-11-14 18:02:07 +08:00
zhiweijian
389da07964 feat(ble/bluedroid): Support LE Security Levels Characteristic 2025-11-14 18:01:44 +08:00
zhiweijian
580edcf6a8 feat(ble/bluedroid): Add bluedroid host Advertising Coding Selection feature 2025-11-14 18:01:44 +08:00
zhiweijian
fb94631af1 feat(ble/bluedroid): Add bluedroid host PAwR feature 2025-11-14 18:01:44 +08:00
Chen Jian Hua
21a2b068c6 feat(ble/bluedroid): Add more debug log for bluedroid 
(cherry picked from commit 1aeb965607)

Co-authored-by: chenjianhua <chenjianhua@espressif.com>
 2025-11-14 13:33:23 +08:00
liqigan
ed7e22cdc7 fix(bt/bluedroid): Fixed HID memory leak 2025-11-13 17:44:08 +08:00
JinCheng
2f50cb2727 fix(bt/bluedroid): update the COD before enabling inquiry scan 2025-11-11 15:46:47 +08:00
Wang Meng Yang
f95a5f5231 Merge branch 'bugfix/oob_in_avrc_vendor_msg' into 'master' 
fix(bt/bluedroid): fixed potential OOB in AVRCP vendor command composition

Closes BT-4130

See merge request espressif/esp-idf!42410
 2025-10-23 09:52:42 +08:00
Island
160df75e64 Merge branch 'feat/support_get_ble_local_irk' into 'master' 
feat(ble/bluedroid): add API to get local BLE IRK

Closes BLERP-2278

See merge request espressif/esp-idf!42214
 2025-10-21 18:03:09 +08:00
zhanghaipeng
9df828835c fix(ble/bluedroid): fix memory leak during deinit when service table is created but not started 2025-10-17 17:45:35 +08:00
zhanghaipeng
3c68650d7e feat(ble/bluedroid): add API to get local BLE IRK 2025-10-17 17:36:45 +08:00
Wang Meng Yang
d822e9bbbe Merge branch 'bugfix/fix_ble_deinit_crash' into 'master' 
fix(ble/bluedroid): prevent crash when deinit/disable host during scan

Closes BLERP-2266, BLERP-2267, BLERP-2268, BLERP-2270, and BLERP-2274

See merge request espressif/esp-idf!42134
 2025-10-14 18:00:45 +08:00
Jin Cheng
565fa98d0c fix(bt/bluedroid): fixed potential OOB in AVRCP vendor command composition 2025-10-14 11:55:47 +08:00
Wang Meng Yang
3e0545f28b Merge branch 'bugfix/fix_bt_security' into 'master' 
fix(bt/bluedroid): Fix the boundary conditions when checking EIR data

See merge request espressif/esp-idf!42253
 2025-10-10 09:07:49 +08:00
zhanghaipeng
7ce921ed95 fix(ble/bluedroid): Fixed resolve adv data crash if host deinitialized or disabled 2025-09-29 11:57:30 +08:00
Island
33321e59b1 Merge branch 'opt/opt_ble_log' into 'master' 
feat(ble/bluedroid): Added BLE debug LOG for bluedroid

Closes BLERP-2258

See merge request espressif/esp-idf!41567
 2025-09-28 19:18:03 +08:00
yangfeng
743036ad77 fix(bt/bluedroid): Fix the boundary conditions when checking EIR data 2025-09-28 17:50:48 +08:00
JinCheng
5a6193ae14 fix(bluedroid): removed the code relying on compiler-specific extension for FAM in union 2025-09-27 11:28:54 +08:00
zhanghaipeng
45775a3e35 feat(ble/bluedroid): Added BLE debug LOG for bluedroid 2025-09-26 20:10:32 +08:00
JinCheng
075ed218ca fix(bt/bluedroid): fixed potential OOB in Bluedroid 2025-09-25 10:20:10 +08:00
Marius Vikhammer
484d2c5c2f fix(system): fixed issues with unused variable warnings when compiling with NDEBUG 2025-09-19 15:42:07 +08:00
Wang Meng Yang
892ec6a114 Merge branch 'bugfix/fix_bt_security' into 'master' 
fix(bt/bluedroid): Prevent out-of-bounds access and add type check when resolving EIR data

Closes BT-4071

See merge request espressif/esp-idf!41167
 2025-08-19 11:54:10 +08:00
Shen Weilong
61c13ef849 fix(bt): check bd address only for bredr in bluedroid host l2cu_allocate_lcb() 2025-08-18 10:44:22 +08:00
yangfeng
a0fe68ce45 fix(bt/bluedroid): Prevent out-of-bounds access and add type check when resolving EIR data 2025-08-18 09:20:05 +08:00
Island
c6923d2a26 Merge branch 'bugfix/ble_enhanced_security_v2' into 'master' 
fix(ble/bluedroid): Fixed potential out-of-bounds memory access when resolve adv data

Closes BLERP-2149

See merge request espressif/esp-idf!41160
 2025-08-14 17:28:13 +08:00
chenjianhua
437aba1653 fix(ble/bluedroid): Fixed the connection count limit in multi-connection 2025-08-12 11:02:38 +08:00
xuzhekai
2ccae5330e fix(bt/bluedroid): adjust L2CAP round robin msg send strategy 2025-08-12 11:02:38 +08:00
zhanghaipeng
12df54e8d1 fix(ble/bluedroid): Fixed potential out-of-bounds memory access when resolve adv data 2025-08-11 13:08:14 +08:00
zhanghaipeng
b6dc79af47 fix(ble/bluedroid): Fixed fail to disconnect when device record is cleared 2025-07-25 10:30:11 +08:00
zhanghaipeng
ac385530af fix(ble/bluedroid): fix incorrect resolving_list_avail_size update 2025-07-25 10:27:53 +08:00
zhanghaipeng
61606a6f95 fix(ble/bluedroid): ensure resolving list is updated when the oldest device is removed 2025-07-24 21:29:27 +08:00