Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity
49,272 Commits 25 Branches 192 Tags
a9dc945ec0076c4f1e988f37645f8b300376ced0
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Zhi Wei Jian aaa7312c26 feat(ble/bluedroid): reject LE re-pairing that weakens an existing bond 
Add smp_repairing_is_allowed() behind BT_BLE_SMP_HARDENED_REPAIRING so a
peer cannot replace an existing bond with one that has less MITM
protection, no Secure Connections, or a shorter key. Compare a preceding
Security Request against the pairing command AuthReq, not the
association-model result, and always allow first pairing.

A refusal keeps the stored bond. Pairing-failure erase is split by link
role: default is erase as Central and keep as Peripheral.

Closes BLERP (NDSS 2026) V3, V4 and V6.


(cherry picked from commit 88ea45be73)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-09-07 19:45:54 +08:00
Zhi Wei Jian 93f8ae845b fix(ble/bluedroid): harden LE bond handling across encryption 
Keep the existing bond until the new pairing is encrypted, and on encryption
failure drop the link instead of clearing keys. Recovering from a peer that
really deleted the bond is opt-in through BT_BLE_SMP_UNBOND_ON_KEY_MISSING.

Closes BLERP (NDSS 2026) V5, and stops an unauthenticated Pairing Request
from dropping the stored keys (V2 exploitation).


(cherry picked from commit f864615d7d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-09-07 19:45:54 +08:00
Zhi Wei Jian ecf32535bc fix(ble/bluedroid): Build LE event mask from host feature macros 
(cherry picked from commit 68dff5d798)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-08-03 15:25:54 +08:00
Zhi Wei Jian 49cddfd411 feat(ble/bluedroid): Support PAWR connection event 
(cherry picked from commit 7da7fa42ac)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-08-03 15:25:53 +08:00
Zhi Wei Jian dd442dd6a1 feat(ble/bluedroid): Add bluedroid dual identify server example 
(cherry picked from commit 1de0d2fef7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 11:23:27 +08:00
Zhi Wei Jian 7ab919a76e feat(ble/bluedroid): Support bluedroid dual identity 
(cherry picked from commit 2358786647)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:32:11 +08:00
Zhi Wei Jian 11a1a33e26 fix(ble/bluedroid): use BOOLEAN for BLE HCI command builders 
(cherry picked from commit abbf001120)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:28:30 +08:00
Zhi Wei Jian f4650eb7c0 fix(ble/bluedroid): clean up LE CoC connect on CCB alloc failure 
(cherry picked from commit 4fd1ebb4a9)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:28:23 +08:00
Zhi Wei Jian e97d59c545 docs(ble/bluedroid): note ISO BIG HCI alloc failure not checked 
(cherry picked from commit 34b59d30ae)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:28:15 +08:00
Zhi Wei Jian 932da59cb4 fix(ble/bluedroid): fix direct-connect cleanup and adv bounds 
(cherry picked from commit 82e71c1767)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:28:07 +08:00
Zhi Wei Jian f006758550 fix(ble/bluedroid): validate BLE confirm/OOB and sec-check device 
(cherry picked from commit 93ab11d564)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:28:00 +08:00
Zhi Wei Jian 0314335eb6 fix(ble/bluedroid): validate SMP pair-fail reason and OOB device 
(cherry picked from commit 98efe02385)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:27:52 +08:00
Zhi Wei Jian 91b305b663 fix(ble/bluedroid): route ATT indication-conf timeout separately 
(cherry picked from commit 6c3267ee84)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:27:44 +08:00
Zhi Wei Jian 111c68776d fix(ble/bluedroid): validate ATT PDU sizes 
(cherry picked from commit bb00b9817d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:27:33 +08:00
Zhi Wei Jian 8eb01128f8 fix(ble/bluedroid): re-lookup GATT TCB after enc-complete callback 
(cherry picked from commit 37562af0ea)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:27:25 +08:00
Zhi Wei Jian 30a8c37942 fix(ble/bluedroid): fix GATT long read and Service Changed CCC 
(cherry picked from commit 4ce692ac0c)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:27:17 +08:00
Zhi Wei Jian e35311d351 fix(ble/bluedroid): validate GATT client discovery handles 
(cherry picked from commit ac35ae6f2d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:27:05 +08:00
Zhi Wei Jian 7c850b6031 fix(ble/bluedroid): cap Read By Type length and free failed service decl 
(cherry picked from commit 27ff0cf8c7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:26:56 +08:00
Zhi Wei Jian ff3f650a10 fix(ble/bluedroid): guard GATT database hash and serialization 
(cherry picked from commit 995c1508e8)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:26:44 +08:00
Zhi Wei Jian 6db42b6334 fix(ble/bluedroid): fix GATT server busy errors and sr_cmd handling 
(cherry picked from commit f86739b03d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:26:35 +08:00
Zhi Wei Jian 4779dec633 fix(ble/bluedroid): fix GATT teardown and service-change flow 
(cherry picked from commit 0645ba469d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:26:27 +08:00
Zhi Wei Jian b1b015187f fix(ble/bluedroid): fix GATT service lifecycle leaks 
(cherry picked from commit ac93d94958)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:26:19 +08:00
Zhi Wei Jian 0eccb599fe fix(ble/bluedroid): add GATT resource-cleanup helpers 
(cherry picked from commit b83327f3ca)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:26:11 +08:00
Zhi Wei Jian c055e45c8f feat(ble/bluedroid): Support bluedroid LE COC and EATT features 
(cherry picked from commit 83f0831c53)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-21 10:25:58 +08:00
Zhi Wei Jian b02a682ff5 feat(ble/bluedroid): add CS Security Requirements host support (Core 6.3) 
(cherry picked from commit 919622c01c)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-26 09:08:26 +08:00
Zhi Wei Jian c7fc14a076 feat(ble/bluedroid): add LE UTP host support (Core 6.2) 
(cherry picked from commit 3844e24207)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-26 09:08:26 +08:00
Zhi Wei JianandCursor 28c67947f4 feat(ble/bluedroid): add Shorter Connection Intervals host support (Core 6.2) 
Co-authored-by: Cursor <cursoragent@cursor.com>


(cherry picked from commit 2a8a96d650)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-26 09:08:25 +08:00
Zhi Wei Jian acfed7c42d feat(ble/bluedroid): add LL Extended Feature Set host support (Core 6.0) 
(cherry picked from commit d568f2f151)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-26 09:08:25 +08:00
Zhi Wei JianandCursor 05c7547e6c feat(ble/bluedroid): add Frame Space Update host support (Core 6.0) 
Co-authored-by: Cursor <cursoragent@cursor.com>


(cherry picked from commit 5372ce03a3)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-26 09:08:24 +08:00
Zhi Wei Jian f251492943 feat(ble/bluedroid): add DBAF host support (Core 6.0) 
(cherry picked from commit e20d3f0197)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-26 09:08:24 +08:00
Zhi Wei Jian db38d22eae feat(bt/ble_uart): Support ble uart more interfaces 
- Added tagged event API (ble_uart_evt_t / on_event)
- Added bond management APIs
- Supported custom adv_data / scan_rsp_data
- Validate device_name length synchronously
- Added ble_uart_close_async() and EVT_CLOSED
- Added granular security config (security struct)
- Supported Passkey Entry and Numeric Comparison


(cherry picked from commit f1d9c994d2)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-26 09:07:58 +08:00
zhiweijian 40628eacb3 fix(examples): improve bluedroid BLE example error handling 
Check GAP/GATT event status, fix prepare-write buffer lifecycle, and
align example code with updated Bluedroid API behavior.
 2026-06-11 21:10:43 +08:00
zhiweijian b36812444f refactor(examples): disable unused BT options in bluedroid BLE examples 
Add sdkconfig.defaults to turn off unused Bluedroid host features per
example role (GATT client/server, SMP, legacy adv, etc.).
 2026-06-11 21:05:16 +08:00
Zhi Wei Jian 0564668e0d fix(bt): fix BTC task and BLE mesh bluedroid adapter 
(cherry picked from commit 678fb93245)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-10 19:53:55 +08:00
Zhi Wei Jian fd0f594745 fix(ble/bluedroid): fix HCI command and BTU robustness 
(cherry picked from commit c9d13aaf64)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-10 19:53:55 +08:00
Zhi Wei Jian 5dfbc11ebb fix(ble/bluedroid): fix CTE and ISO API validation 
(cherry picked from commit 0c3c894b7d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-10 19:53:54 +08:00
Zhi Wei Jian 268e85d6a9 fix(ble/bluedroid): fix GATT server lifecycle and callbacks 
(cherry picked from commit 54a1e31916)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-10 19:53:54 +08:00
Zhi Wei Jian 08b948bffb fix(ble/bluedroid): fix GATT client API parameter validation 
(cherry picked from commit 653477c3e9)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-10 19:53:53 +08:00
Zhi Wei Jian 2c86c41d48 fix(ble/bluedroid): fix GATT client cache and service discovery 
(cherry picked from commit b3ff15ed31)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-10 19:53:53 +08:00
Zhi Wei Jian 6c6c698524 fix(ble/bluedroid): fix GAP BLE API parameter validation 
(cherry picked from commit e3311c81c4)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-10 19:53:52 +08:00
Zhi Wei Jian d623f36c63 fix(ble/bluedroid): fix BLE bonding key storage validation 
(cherry picked from commit 62cdd4ac38)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-06-10 19:53:52 +08:00
zhiweijian dde37923f7 fix(ble/bluedroid): note LE Coded PHY impact on Wi-Fi coexistence in bluedroid GAP/GATT APIs 2026-05-28 10:31:00 +08:00
zhiweijian 05aa5814db fix(ble): Fixed AI review bugs in bt common 2026-05-12 11:47:40 +08:00
zhiweijian 3f923aabb7 feat(bt): add shared ble_uart component and update ble_uart_service/docs 2026-05-12 11:09:44 +08:00
Zhi Wei Jian 7a7893d006 feat(ble): Support nimble uart service 
(cherry picked from commit 9de3eea3de)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-04-28 10:44:06 +08:00
Zhi Wei Jian dfd6fcf1cc fix(ble/bluedroid): Fixed privacy callback triggering multiple times 
(cherry picked from commit 5272b7e75b)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-04-03 14:02:44 +08:00
zhiweijian ca11cdde36 fix(ble/bluedroid): Fixed bluedrodi CI build error 2026-03-31 14:31:15 +08:00
zhiweijian 096d6da454 fix(bt/bluedroid): Fixed AddCharacteristic failed when attr_len is zero for AUTO_RSP 2026-03-31 14:30:52 +08:00
zhiweijian 17092c305f fix(ble/bluedroid): Fixed build error due to rebase conflict 2026-03-31 14:30:52 +08:00
zhiweijian 77ad056934 disable some parameters check in CTE APIs 2026-03-31 14:30:51 +08:00
zhiweijian 325aa02181 fix(ble/bluedroid): optimize bluedroid host and fix GAP, memory, status and BTM API issues 
- return HCI_ERR_MEMORY_FULL on cmd buffer alloc failure
- remove legacy adv/scan semaphores and mutex
- Use the same legacy gap callback instead of each independent legacy gap event callback
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian e3195c2a4d fix(ble/bluedroid): Null/range checks, crypto cleanup and API consistency 
- smp_api.h/smp_int.h: SMP_OPCODE_ARRAY_SIZE and SecureConnectionOobDataReply
  declaration alignment
- p_256_ecc_pp/p_256_multprecision: bounds and overflow fixes in ECC/multiprecision
- smp_act: init le_key; p_dev_rec null check in smp_key_distribution;
  smp_compute_dhkey failure notify in smp_both_have_public_keys
- smp_api: early state/cb_evt check in SMP_SecureConnectionOobDataReply
- smp_cmac: input/length validation in cmac_aes_k_calculate and
  aes_cipher_msg_auth_code
- smp_keys: smp_gen_p2_4_confirm return and smp_calculate_comfirm_cont;
  smp_process_private_key/smp_compute_dhkey cleanup and peer_pub_be clear
- smp_l2c: fix callback param types with L2CAP
- smp_main: event/state bounds in smp_sm_event; smp_get_event_name default string
- smp_utils: cmd_code<SMP_OPCODE_ARRAY_SIZE and smp_cmd_build_act check;
  smp_mask_enc_key/smp_command_has_invalid_parameters bounds

(cherry picked from commit 50747e4f63)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian 17c9db641b fix(ble/bluedroid): BLE credit, reject when p_rcb NULL, timeout and leak fixes 
- l2c_int: align struct/constant types with l2c_ble/l2c_main
- l2c_api: null/state checks in L2CA_SendFixedChnlData
- l2c_ble: reject when p_rcb==NULL, add L2CAP_CMD_BLE_FLOW_CTRL_CREDIT;
  l2cble_init_direct_conn int64_t timeout and link_timeout==0 fix
- l2c_link: null/state checks and cleanup in hci_disc_comp/timeout/send_to_lower
- l2c_main: free p_msg on FCR non-Basic and COC branches; fix LE credit handling;
  process_l2cap_cmd bounds
- l2c_utils: credit/queue cleanup and null checks in l2cu_disconnect_chnl


(cherry picked from commit 16d523e9bf)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian 1dee91c79c fix(ble/bluedroid): Fix double-free, exec write, bounds and HCI param checks 
- gap_ble: add length/attribute checks in gap_proc_write_req
- gatt_cl: set p_cmd->p_cmd=NULL before memset to avoid double-free;
  pending_cl_req %= GATT_CL_MAX_LCB
- gatt_sr: fix exec write zeroed_attrs and offset/len bounds, OOM cleanup
- gatt_sr_hash: null checks for p_attr->p_next, p_data+=2, len==0 in
  gatts_calculate_datebase_hash, gatts_show_local_database
- gatt_utils: explicit return NULL, indent, idx<GATT_MAX_APPS checks,
  len>GATT_MAX_ATTR_LEN, gatt_cleanup_upon_disc dealloc branch
- hciblecmds: length/handle validation in BLE ext adv/BIG sync HCI commands


(cherry picked from commit 1d31286f1a)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian 6330a9845e fix(ble/bluedroid): Event length checks and timer/alarm error handling 
- btu_hcif: validate p_msg->len and hci_evt_len in process_event; pass evt_len to
  sub-handlers; fix cs_subevt num_steps_reported==0 malloc; bounds in
  command_complete and role_change_evt
- btu_task: handle osi_alarm_new/hash_map_set failure in btu_start_timer,
  btu_start_quick_timer, btu_start_timer_oneshot


(cherry picked from commit 537661fb2e)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian b5da52989c fix(ble/bluedroid): BLE GAP/ACL/ISO/SCO null checks, evt_len and resource handling 
- btm_acl: malloc/list_append failure handling, remove/memset order in btm_acl_removed
- btm_ble: remove incorrect sec_flags in SMP_OOB/NC/SC_OOB fall-through
- btm_ble_5_gap: btm_ble_hci_status_to_str unreachable return,
  BTM_BleSetExtendedAdvParams/BleStartExtAdv leak and bounds
- btm_ble_addr: fix indent in btm_find_dev_by_identity_addr
- btm_ble_gap: null check p_service_data, pass evt_len to btm_ble_process_adv_pkt,
  bounds in process_adv_pkt
- btm_ble_iso: align param types with declaration
- btm_ble_privacy: handle BTM_BLE_IRK_LIST_INVALID_INDEX in update_resolving_list,
  comment fixes
- btm_devctl: fix btm_vsc_complete param order/type
- btm_sco: add evt_len to btm_sco_process_num_completed_pkts for bounds check
- btm_ble_int.h/btm_int.h: add evt_len to process_adv_pkt and
  process_num_completed_pkts declarations


(cherry picked from commit 65b2cb2728)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian c9e82f2396 fix(ble/bluedroid): Add length/pointer checks and fix error paths 
- hci_hal_h4: validate packet length and pointers in hci_packet_complete,
  hdl_rx_adv_rpt, callbacks
- hci_layer: align hci_start_up error path and return; validate packet len in
  filter_incoming_event
- hci_packet_factory: ensure BT_HDR length/offset initialized in make_command_no_params
- packet_fragmenter: validate length before fragment_and_dispatch


(cherry picked from commit 778dd2ab5e)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian e4749f88f5 fix(ble/bluedroid): Align config, controller indent and init error paths 
- bt_target: remove/align obsolete macros with Kconfig
- device/controller: fix start_up() Secure Connections indent,
  get_ble_resolving_list_max_size return type
- controller.h: align type/interface declarations with implementation
- bte_init: remove unused/redundant code
- bte_main: return -1 on osi_init failure, null check in bte_main_hci_send


(cherry picked from commit b83647f5ea)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian 39f311c8af fix(ble/bluedroid): Fix init failure handling, storage/config and GATT leaks 
- btc_main: handle bte_main_boot_entry failure with cleanup and future_ready(FUTURE_FAIL)
- btc_ble_storage: fix key/length validation in _btc_storage_get_ble_bonding_key
- btc_config: align return/error contract with callers
- btc_dm: use safe BTA_SERVICE_ID_TO_SERVICE_MASK, fix sec_cb_handler type
- btc_gatt_util: fix btc_to_bta_response/set_read_value length and bounds
- btc_gatts: future_free on early return, max_nb_attr uint16_t, fail cleanup,
  handle bounds
- btc_ble_cte/btc_iso_ble: fix callback type/param consistency with BTA


(cherry picked from commit 6f5d9e3440)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian da3ba0371d fix(ble/bluedroid): Add null/range checks and fix resource handling in BTA layer 
- bta_dm_int: fix BTA_SERVICE_ID_TO_SERVICE_MASK undefined behavior (1<<id when id>=32)
- bta_gattc_main: add event bounds check before state table lookup
- bta_gattc_utils: null checks for remote_bda/p_rcb, fix list_free in clcb_dealloc,
  bta_to_btif_uuid fixes
- bta_gatts_act: fix formatting/indent in send_service_change_indication
- bta_gatts_api: validate attr_val/len, add error logs on alloc failure
- bta_sys_main: null/range checks in sm_execute, alarm/hash_map error handling in
  bta_alarm_cb


(cherry picked from commit f4cec2ac4e)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian 19faf29144 fix(ble/bluedroid): fix bugs in BLE 5.0 bluedroid examples 
- Fix callback function usage and parameter errors
- Fix spelling: BROCASTER to BROADCASTER in examples
- Update examples to match API changes



(cherry picked from commit 8f4dd7824e)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian 7d55664935 fix(ble/bluedroid): fix ISO HCI layer and update Kconfig 
- Fix ISO HCI functions and remove unused code
- Fix spelling: BROCASTER to BROADCASTER in Kconfig and headers
- Update common config headers for consistency



(cherry picked from commit 611eef480a)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian 4997f1a789 fix(ble/bluedroid): fix L2CAP, SMP and HCI command issues 
- Fix active_count check in l2cu_ble_plcb_active_count
- Restore previous state if connection command fails
- Fix HCI cmd buffer size off-by-one errors
- Fix connect handle length errors
- Fix channel sounding event status handling
- Fix SMP param_len check in smp_rand_back
- Fix spelling: BROCASTER to BROADCASTER in definitions



(cherry picked from commit e118d053b3)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian 34dd906ddd fix(ble/bluedroid): fix GAP, advertising and security issues in BTM layer 
- Fix adv state restore and reset if start/stop failed
- Fix periodic adv v2 event without PAWR feature enabled
- Fix periodic adv sync establish skip handling
- Fix resolving list max_size validation
- Fix RPA addr_type update after host-side resolution
- Fix pairing_state reset if p_dev_rec alloc failed
- Fix ISO cis_cnt limit and ext adv parameter check
- Try to delete smp keys even if not in device list



(cherry picked from commit e0ccc644a8)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian 8f972e76ac fix(ble/bluedroid): fix GATT protocol and database operation issues 
- Fix GATTC read by type length error and rsp pdu format check
- Fix p_cur_handle update in gatts_db_read_attr_value_by_type
- Fix len calculation error in calculate_database_info_size
- Replace gatt_find_the_connected_bda with p_tcb_list iteration
- Send cmd reject if cid is invalid
- Fix param_len check in smp_rand_back
- Remove duplicate uuid compare functions



(cherry picked from commit 6242e0244c)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:24 +08:00
Zhi Wei Jian d3217033ab fix(ble/bluedroid): fix parameter handling and deep copy in BTC layer 
- Fix CS and CTE callback deep copy errors in btc_gap_ble
- Fix incorrect parameter check in btc_gattc_prepare_write_char_descr
- Fix conn_handle length error and malloc failure handling
- Fix memcpy error and reset params if malloc failed
- Fix spelling: BROCASTER to BROADCASTER
- Delete unused ISO functions in btc_iso_ble



(cherry picked from commit 1fea299dc9)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:23 +08:00
Zhi Wei Jian b84ef21aa2 fix(ble/bluedroid): fix state management and security issues in BTA DM layer 
- Fix out-of-bounds read and peer_device cleanup in bta_dm_acl_change
- Fix adv state restore and BTM status usage in bta_dm_ble_advstop
- Fix remove security device failed due to invalid transport
- Rename tBTA_DM_API_BLE_OBSERVE to tBTA_DM_API_BLE_ADVACTION
- Remove unused btm_sec_find_bonded_dev()



(cherry picked from commit c7931bedf5)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:23 +08:00
Zhi Wei Jian 131f55f91f fix(ble/bluedroid): fix memory safety and state issues in BTA GATT layer 
- Fix use-after-free and double-free in bta_gattc_update_include_service
- Fix heap buffer overflow in GATT database operations
- Fix GATTC cache load attr length check and NVS handle leak
- Fix parameter validation in bta_gattc_uuid_compare
- Ensure all CLCBs are cleaned up on deregister
- Remove unused bta_gattc_open_error
- Unify GATT db count/fill by declaration handle range
- Fix return status in gatts_set_attribute_value



(cherry picked from commit d4f3517da4)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:23 +08:00
Zhi Wei Jian ac6ed1d4e2 fix(ble/bluedroid): fix parameter validation and cleanup in ISO and CTE APIs 
- Add parameter validation in esp_ble_iso_api and esp_ble_cte_api
- Delete unused ISO functions and incorrect parameter checks
- Add host status check in esp_ble_iso_get_callback()
- Fix CTE parameter handling when enable value is 0



(cherry picked from commit 562cd2eae5)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:23 +08:00
Zhi Wei Jian 89c419d055 fix(ble/bluedroid): fix parameter validation and initialization in BLE APIs 
- Add parameter validation in esp_gap_ble_api, esp_gattc_api, esp_gatts_api
- Initialize API args to prevent undefined behavior
- Add host status checks in API functions
- Fix memory leak if bluedroid init failed



(cherry picked from commit d439a3fcce)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-31 14:29:23 +08:00
zhiweijian 3867fa77e2 change(ble/bluedroid): Disable the built-in Bluedroid cryptographic implementation 2026-03-31 00:06:10 +08:00
Zhi Wei Jian 49871dce61 feat(ble/bluedroid): Allow add vendor descriptor by service table create API 
(cherry picked from commit 8207bd11e7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-26 17:24:00 +08:00
Zhi Wei Jian effb30cff0 feat(ble/bluedroid): support adv monitor feature 
(cherry picked from commit 1566a50929)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-26 17:23:46 +08:00
Zhi Wei Jian 9e6558e842 fix(bluedroid): printf EXAMPLE_CI_ID, PIPELINE_ID and CHIP_ID 
(cherry picked from commit 7bb1018948)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-23 17:23:45 +08:00
Zhi Wei Jian 360d404191 fix(ble/bluedroid): Fixed Incorrect use of event parameters in gattc_gatts_coex 
(cherry picked from commit b218e02b49)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-23 17:23:44 +08:00
Zhi Wei Jian 469b8366f2 feat(ble/bluedroid): Added cancel open function for bluedroid 
(cherry picked from commit a3c09afd85)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-23 17:23:27 +08:00
Zhi Wei Jian 911eb1ce20 fix(ble/bluedroid): Fixed read or write failed if SMP is disabled 
(cherry picked from commit 124f275bdf839b855e6af0cfb9d197f11c9a766c)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-03-03 22:02:00 +08:00
zhiweijian 4828cc370b fix(ble/bluedroid): Change blufi sdkconfig 2026-02-09 00:05:04 +08:00
zhiweijian 2f9c222388 fix(ble/bluedroid): Change 5.0 event status 2026-02-09 00:05:04 +08:00
zhiweijian 55dc7765af fix(ble/bluedroid): Unify BTM byte alignment 2026-02-09 00:05:04 +08:00
zhiweijian be341ff584 feat(ble/bluedroid): Add new bluedroid host examples 2026-02-09 00:05:04 +08:00
zhiweijian 67ea80c78a fix(ble/bluedroid): Fixed smp unit test failed if mbedTLS or TinyCrypt is enabled 2026-01-20 14:07:42 +08:00
Zhi Wei Jian e5619686eb fix(ble/bluedroid): Fixed bluedroid host get white list size error 
(cherry picked from commit f4dfd42725)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:35 +08:00
Zhi Wei Jian cbf4640668 fix(ble/bluedroid): Fixed bt buuld error 
fix(ble/bluedroid): disable power management if bt is disabled


(cherry picked from commit 6f27074c1e)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:34 +08:00
Zhi Wei Jian 8e361fc5bb fix(ble/bluedroid): disable some member in tBTA_SYS_CB 
(cherry picked from commit 280385acf4)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:33 +08:00
Zhi Wei Jian 04f4602a6a fix(ble/bluedroid): optimize bluedroid host code 
(cherry picked from commit 3b18da2bde)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:33 +08:00
Zhi Wei Jian 016cd78b30 fix(ble/bluedroid): Add BLE_TOPOLOGY_CHECK 
(cherry picked from commit 728c4c8a10)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:33 +08:00
Zhi Wei Jian e10bb32d8b fix(ble/bluedroid): Fixed build error if scan is disabled 
(cherry picked from commit dd10e3220b)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:32 +08:00
Zhi Wei Jian bd1c995c65 fix(ble/bluedroid): disable bluedroid background connection 
(cherry picked from commit 1f5fa1e72b)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:32 +08:00
Zhi Wei Jian 27f9a8a3c9 fix(ble/bluedroid): change tGATT_BG_CONN_DEV to GATT_BG_CONN_DEV 
(cherry picked from commit ac7812ef8d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:31 +08:00
Zhi Wei Jian a0b1b26efd fix(ble/bluedroid): disable exception list if scan is not enabled 
(cherry picked from commit ec6809611a)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:31 +08:00
Zhi Wei Jian fb6c56d180 fix(ble/bluedroid): disable vendor hci function 
(cherry picked from commit 715184fa36)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:31 +08:00
Zhi Wei Jian fcb4030e57 fix(ble/bluedroid): Delete btm_ble_send_extended_scan_params 
(cherry picked from commit 1174ad41a5)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:30 +08:00
Zhi Wei Jian 8bf14a7c86 fix(ble/bluedroid): change bluedroid scan callback name 
(cherry picked from commit b9440efbe9)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:30 +08:00
Zhi Wei Jian 1f297b4a3a fix(bluedroid): delete bluedroid gatt_listen 
(cherry picked from commit db17c7cea3)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:30 +08:00
Zhi Wei Jian edabdeecfc fix(ble/bluedroid): Delete observe and inquiry 
(cherry picked from commit 34448a7455)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:29 +08:00
Zhi Wei Jian dd898594b1 fix(ble/bluedroid): delete bluedroid unused code 
(cherry picked from commit 5145b366f7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:29 +08:00
Zhi Wei Jian 57f330727a fix(ble/bluedroid): Delete batch_scan related code 
(cherry picked from commit a784adef00)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:29 +08:00
Zhi Wei Jian 4965bc14ee fix(ble/bluedroid): Delete BLE_HOST_SETUP_STORAGE_EN 
(cherry picked from commit 08740df988)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:28 +08:00
Zhi Wei Jian 70b0e41a06 fix(ble/bluedroid): Delete BLE_HOST_READ_TX_POWER_EN 
(cherry picked from commit 1c0c48b814)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-01-07 17:24:28 +08:00