Commit Graph

2134 Commits

Author SHA1 Message Date
hejiaxin
b2c98e72cd fix(bt_avrcp): size some AVRC command buffers 2026-09-04 11:51:39 +08:00
Rahul Tank
93f74eb464 Merge branch 'bugfix/fix_nimble_issues_3092026_v6.0' into 'release/v6.0'
feat(nimble): Fix few nimble issues 03092026(v6.0)

See merge request espressif/esp-idf!52355
2026-09-04 05:50:01 +05:30
Wang Meng Yang
ff0587bde0 Merge branch 'bugfix/avrcp_version_compatibility_v6.0' into 'release/v6.0'
fix(bt): Fix the issue of AVRCP version compatibility (v6.0)

See merge request espressif/esp-idf!52087
2026-09-04 08:13:00 +08:00
Wang Meng Yang
2d5899d022 Merge branch 'fix/bluedroid_aireview_v6.0' into 'release/v6.0'
Fix/bluedroid aireview (v6.0)

See merge request espressif/esp-idf!51480
2026-09-04 07:55:43 +08:00
Rahul Tank
938ce4f4d1 fix(nimble): bound PAwR synced connect retries in the example 2026-09-03 21:27:16 +05:30
Astha Verma
c525108495 fix(nimble): Fixed gatt caching crash on disconnect 2026-09-03 21:27:16 +05:30
Rahul Tank
edf77262e7 fix(nimble): Fix unpair_oldest_peer deleting wrong device
Sort bond entries by bond_count after in-place updates to maintain correct
eviction order, and log IRK resolving-list failures instead of failing the bond.
2026-09-03 21:27:16 +05:30
Rahul Tank
79a570a953 fix(nimble): Add separate helper functions to register notification/indication 2026-09-03 21:27:16 +05:30
Rahul Tank
f8953541b2 fix(nimble): Add fix to handle service reset during server start 2026-09-03 21:27:16 +05:30
Rahul Tank
dae4696357 fix(nimble): Fix adding device to resolving list when defer connection 2026-09-03 21:27:16 +05:30
Rahul Tank
0bd286209f fix(nimble): Added change to stop adv before starting new adv 2026-09-03 21:27:16 +05:30
Rahul Tank
c6e702c5c9 fix(nimble): Remove extra free to avoid double free 2026-09-03 21:27:15 +05:30
Rahul Tank
ec228607c8 fix(nimble): Fixes for various NimBLE CVEs 2026-09-03 21:27:15 +05:30
Rahul Tank
7aecabef17 fix(nimble): Deliver PAwR peripheral CONNECT via sync callback 2026-09-03 21:27:15 +05:30
Rahul Tank
d198b8fd91 fix(nimble): update sbom file with cve details 2026-09-03 21:27:15 +05:30
chenjianhua
9bd7168fa1 feat(bt): Add host-agnostic BT OSAL and shared BLE profile task
- Add bt_osal: event queues, mutexes, semaphores, callouts, etc.
- Add the shared BLE profile task and event queue
- Bring both up and tear them down in the host init/deinit paths
- Add unit tests for the OSAL and the profile task

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-09-03 21:27:15 +05:30
Shreeyash Bhakare
a2739c9ee1 fix(nimble): Added security related fixes 2026-09-03 21:27:15 +05:30
Jiang Jiang Jian
07d868db77 Merge branch 'feat/bt_in_psram_v6.0' into 'release/v6.0'
feat(bluedroid): Add config to place btu and hci task stack in psram (v6.0)

See merge request espressif/esp-idf!51490
2026-09-03 19:51:53 +08:00
Jiang Jiang Jian
13c5832753 Merge branch 'fix/aireview_critical_v6.0' into 'release/v6.0'
fix: Fix some critical bugs in classic bt (v6.0)

See merge request espressif/esp-idf!51289
2026-09-03 19:50:40 +08:00
Jiang Jiang Jian
5be7fb669a Merge branch 'bugfix/l2cap_throughput_degrading_v6.0' into 'release/v6.0'
Preserve throughput when switching from LE Coded to 1M/2M PHY (v6.0)

See merge request espressif/esp-idf!50830
2026-09-03 19:48:35 +08:00
Jiang Jiang Jian
3a4bbeb620 Merge branch 'bugfix/strncpy_compilation_issue_v6.0' into 'release/v6.0'
fix(bluedroid): Fix the compilation issue of BCM_STRNCPY_S (v6.0)

See merge request espressif/esp-idf!51743
2026-09-03 19:25:46 +08:00
Jiang Jiang Jian
6591c23c08 Merge branch 'bugfix/a2dp_sink_nego_sbc_v6.0' into 'release/v6.0'
fix(bt): do not cap AVDTP Discover results by local SEP count (v6.0)

See merge request espressif/esp-idf!51751
2026-09-03 19:25:19 +08:00
yangfeng
4e950184b4 fix(bt): Fix the issue of AVRCP version compatibility 2026-08-26 15:55:43 +08:00
Jan Beran
aa81a64417 fix(kconfig): use 'n' instead of '0'/'false' for bool defaults
Bool symbols in nimble, BTDM, and two examples used invalid default
literals. The parser already falls back to 'n'; set that explicitly.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-25 09:43:39 +02:00
yangfeng
02f41c63b7 fix(bt): do not cap AVDTP Discover results by local SEP count
- Closes https://github.com/espressif/esp-idf/issues/18848
2026-08-13 19:31:52 +08:00
yangfeng
991ee96741 fix(bluedroid): Fix the compilation issue of BCM_STRNCPY_S 2026-08-13 19:16:03 +08:00
hejiaxin
744c1b0474 feat(bluedroid): Add config to place btu and hci task stack in psram
- Also adjust the osi_thread_stop implementation.
2026-08-04 14:55:54 +08:00
Jin Cheng
3361e9363f fix(bt/bluedroid): fixed incorrect eSCO packet type validation under secure connection mode in BlueDroid 2026-08-04 14:30:20 +08:00
hejiaxin
e9f80c32ef fix(bt): Fix some bug in stm_sco.c
- Memory safety
- State machine & logic integrity
- Resource leaks
- Edge cases check
2026-08-04 14:30:20 +08:00
hejiaxin
7f42eabb08 fix(bt_stack): Fix some critical bugs in classic_bt stack
related: obex, smp, pbap, sdp, rfcomm, stack_dm

- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
2026-07-29 17:05:31 +08:00
Astha Verma
d4c0686061 fix(nimble): Restore throughput after switching from LE Coded PHY 2026-07-24 18:03:04 +05:30
Jiang Jiang Jian
a75497a32a Merge branch 'bugfix/low_spp_throughput_v6.0' into 'release/v6.0'
change(bt/bluedroid): increased port low watermark of RFCOMM (v6.0)

See merge request espressif/esp-idf!51084
2026-07-24 20:05:29 +08:00
Rahul Tank
ef049321d0 Merge branch 'bugfix/red_rem_feat_evt_v6.0' into 'release/v6.0'
Handle Read Remote Supported Feature failure (v6.0)

See merge request espressif/esp-idf!50809
2026-07-24 14:24:28 +05:30
Jiang Jiang Jian
f01548cfd9 Merge branch 'bugfix/bredr_critical_bugs_v6.0' into 'release/v6.0'
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI (v6.0)

See merge request espressif/esp-idf!51077
2026-07-24 16:12:26 +08:00
Island
41687f6c0f Merge branch 'fix/ble_hidd_remove_ccc_gating_v6.0' into 'release/v6.0'
fix(esp_hid/bluedroid): remove app-layer CCC gating in HID device (6.0)

See merge request espressif/esp-idf!51007
2026-07-23 19:25:57 +08:00
Island
ded793522b Merge branch 'fix/ble_log_compression_add_local_header_file_v6.0' into 'release/v6.0'
feat(ble_log): mirror local compression headers (6.0)

See merge request espressif/esp-idf!50952
2026-07-23 14:23:22 +08:00
Jin Cheng
7f6c3cbe9c change(bt/bluedroid): increased port low watermark of RFCOMM
When PORT_RX_BUF_LOW_WM is too low, RFCOMM replenishes credits only
after receiving a relatively large number of packets, which may cause
the peer to exhaust its credits and enter a stop-and-wait state.
Increase the low watermark to replenish credits more promptly and
reduce the likelihood of the peer stalling while waiting for additional
credits.
2026-07-23 08:08:41 +08:00
Jin Cheng
fdcb70e608 fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI 2026-07-23 07:42:23 +08:00
Astha Verma
b338ecaead fix(nimble): Handle Read Remote Supported Features failure correctly 2026-07-22 12:14:58 +05:30
Luo Xu
5ab9a740d8 fix(bt): Fixed build error on array-bounds in HFP AG
(cherry picked from commit bbd20cae01)

Co-authored-by: Wang Mengyang <wangmengyang@espressif.com>
2026-07-21 11:02:55 +08:00
Zhang Hai Peng
824621c324 fix(ble/bluedroid): track ext scan state for rand addr check
Update inq_var.state only after btsnd_hcic_ble_ext_scan_enable succeeds.
Clear BTM_BLE_SCANNING on explicit stop and controller scan timeout.


(cherry picked from commit 23519567e4)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-21 10:53:26 +08:00
Zhang Hai Peng
11149ca943 change(ble/bluedroid): disable host trace logs when BLE Log host is off
Default all Bluedroid layer trace levels to NONE when BLE async log
is enabled without BLE_LOG_HOST_LOG.


(cherry picked from commit 1f8f935e3f)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-21 10:44:11 +08:00
Jin Cheng
00f6890dfe fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act
Closes SEC-786
2026-07-20 16:35:15 +08:00
Jiang Jiang Jian
a2cd919a64 Merge branch 'bugfix/bug_bounty_av_v6.0' into 'release/v6.0'
fix(bt/bluedroid): Fix bug bounty issues about A/V from NVIDIA (v6.0)

See merge request espressif/esp-idf!50477
2026-07-20 13:54:41 +08:00
Wang Meng Yang
bed9759dbb Merge branch 'bugfix/avrc_ca_attr_id_check_v6.0' into 'release/v6.0'
fix(bt): Fix the validation of AVRCP metadata attr_id in handle_rc_attributes_rsp (v6.0)

See merge request espressif/esp-idf!50550
2026-07-19 14:37:06 +08:00
Wang Meng Yang
e3a54f6673 Merge branch 'bugfix/fix_bredr_inq_crash_v6.0' into 'release/v6.0'
fix(bt/bluedroid): fix crash during bredr inquiry when zero-addr device is found (v6.0)

See merge request espressif/esp-idf!50854
2026-07-19 12:45:13 +08:00
yangfeng
ca77dffadc fix(bt): Fix the validation of AVRCP metadata attr_id in handle_rc_attributes_rsp 2026-07-19 10:26:33 +08:00
yangfeng
e472bc3868 fix(bt/bluedroid): Fix unchecked p_ctrl_cback and p_msg_cback in AVRC
Closes SEC-1186
2026-07-19 10:21:29 +08:00
yangfeng
a3088cdce1 fix(bt/bluedroid): Fix missing NULL check on p_cfg in AVDT_ReconfigReq
Closes SEC-1187
2026-07-19 10:21:29 +08:00
Rahul Tank
04ccb4c955 Merge branch 'bugfix/add_dis_ieee_udi_to_config_v6.0' into 'release/v6.0'
fix(nimble): Add option to disable IEEE and UDI Characteristic in DIS (v6.0)

See merge request espressif/esp-idf!50760
2026-07-18 09:31:45 +05:30