hejiaxin
b2c98e72cd
fix(bt_avrcp): size some AVRC command buffers
2026-09-04 11:51:39 +08:00
Rahul Tank
93f74eb464
Merge branch 'bugfix/fix_nimble_issues_3092026_v6.0' into 'release/v6.0'
...
feat(nimble): Fix few nimble issues 03092026(v6.0)
See merge request espressif/esp-idf!52355
2026-09-04 05:50:01 +05:30
Wang Meng Yang
ff0587bde0
Merge branch 'bugfix/avrcp_version_compatibility_v6.0' into 'release/v6.0'
...
fix(bt): Fix the issue of AVRCP version compatibility (v6.0)
See merge request espressif/esp-idf!52087
2026-09-04 08:13:00 +08:00
Wang Meng Yang
2d5899d022
Merge branch 'fix/bluedroid_aireview_v6.0' into 'release/v6.0'
...
Fix/bluedroid aireview (v6.0)
See merge request espressif/esp-idf!51480
2026-09-04 07:55:43 +08:00
Rahul Tank
938ce4f4d1
fix(nimble): bound PAwR synced connect retries in the example
2026-09-03 21:27:16 +05:30
Astha Verma
c525108495
fix(nimble): Fixed gatt caching crash on disconnect
2026-09-03 21:27:16 +05:30
Rahul Tank
edf77262e7
fix(nimble): Fix unpair_oldest_peer deleting wrong device
...
Sort bond entries by bond_count after in-place updates to maintain correct
eviction order, and log IRK resolving-list failures instead of failing the bond.
2026-09-03 21:27:16 +05:30
Rahul Tank
79a570a953
fix(nimble): Add separate helper functions to register notification/indication
2026-09-03 21:27:16 +05:30
Rahul Tank
f8953541b2
fix(nimble): Add fix to handle service reset during server start
2026-09-03 21:27:16 +05:30
Rahul Tank
dae4696357
fix(nimble): Fix adding device to resolving list when defer connection
2026-09-03 21:27:16 +05:30
Rahul Tank
0bd286209f
fix(nimble): Added change to stop adv before starting new adv
2026-09-03 21:27:16 +05:30
Rahul Tank
c6e702c5c9
fix(nimble): Remove extra free to avoid double free
2026-09-03 21:27:15 +05:30
Rahul Tank
ec228607c8
fix(nimble): Fixes for various NimBLE CVEs
2026-09-03 21:27:15 +05:30
Rahul Tank
7aecabef17
fix(nimble): Deliver PAwR peripheral CONNECT via sync callback
2026-09-03 21:27:15 +05:30
Rahul Tank
d198b8fd91
fix(nimble): update sbom file with cve details
2026-09-03 21:27:15 +05:30
chenjianhua
9bd7168fa1
feat(bt): Add host-agnostic BT OSAL and shared BLE profile task
...
- Add bt_osal: event queues, mutexes, semaphores, callouts, etc.
- Add the shared BLE profile task and event queue
- Bring both up and tear them down in the host init/deinit paths
- Add unit tests for the OSAL and the profile task
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-09-03 21:27:15 +05:30
Shreeyash Bhakare
a2739c9ee1
fix(nimble): Added security related fixes
2026-09-03 21:27:15 +05:30
Jiang Jiang Jian
07d868db77
Merge branch 'feat/bt_in_psram_v6.0' into 'release/v6.0'
...
feat(bluedroid): Add config to place btu and hci task stack in psram (v6.0)
See merge request espressif/esp-idf!51490
2026-09-03 19:51:53 +08:00
Jiang Jiang Jian
13c5832753
Merge branch 'fix/aireview_critical_v6.0' into 'release/v6.0'
...
fix: Fix some critical bugs in classic bt (v6.0)
See merge request espressif/esp-idf!51289
2026-09-03 19:50:40 +08:00
Jiang Jiang Jian
5be7fb669a
Merge branch 'bugfix/l2cap_throughput_degrading_v6.0' into 'release/v6.0'
...
Preserve throughput when switching from LE Coded to 1M/2M PHY (v6.0)
See merge request espressif/esp-idf!50830
2026-09-03 19:48:35 +08:00
Jiang Jiang Jian
3a4bbeb620
Merge branch 'bugfix/strncpy_compilation_issue_v6.0' into 'release/v6.0'
...
fix(bluedroid): Fix the compilation issue of BCM_STRNCPY_S (v6.0)
See merge request espressif/esp-idf!51743
2026-09-03 19:25:46 +08:00
Jiang Jiang Jian
6591c23c08
Merge branch 'bugfix/a2dp_sink_nego_sbc_v6.0' into 'release/v6.0'
...
fix(bt): do not cap AVDTP Discover results by local SEP count (v6.0)
See merge request espressif/esp-idf!51751
2026-09-03 19:25:19 +08:00
yangfeng
4e950184b4
fix(bt): Fix the issue of AVRCP version compatibility
2026-08-26 15:55:43 +08:00
Jan Beran
aa81a64417
fix(kconfig): use 'n' instead of '0'/'false' for bool defaults
...
Bool symbols in nimble, BTDM, and two examples used invalid default
literals. The parser already falls back to 'n'; set that explicitly.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-25 09:43:39 +02:00
yangfeng
02f41c63b7
fix(bt): do not cap AVDTP Discover results by local SEP count
...
- Closes https://github.com/espressif/esp-idf/issues/18848
2026-08-13 19:31:52 +08:00
yangfeng
991ee96741
fix(bluedroid): Fix the compilation issue of BCM_STRNCPY_S
2026-08-13 19:16:03 +08:00
hejiaxin
744c1b0474
feat(bluedroid): Add config to place btu and hci task stack in psram
...
- Also adjust the osi_thread_stop implementation.
2026-08-04 14:55:54 +08:00
Jin Cheng
3361e9363f
fix(bt/bluedroid): fixed incorrect eSCO packet type validation under secure connection mode in BlueDroid
2026-08-04 14:30:20 +08:00
hejiaxin
e9f80c32ef
fix(bt): Fix some bug in stm_sco.c
...
- Memory safety
- State machine & logic integrity
- Resource leaks
- Edge cases check
2026-08-04 14:30:20 +08:00
hejiaxin
7f42eabb08
fix(bt_stack): Fix some critical bugs in classic_bt stack
...
related: obex, smp, pbap, sdp, rfcomm, stack_dm
- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
2026-07-29 17:05:31 +08:00
Astha Verma
d4c0686061
fix(nimble): Restore throughput after switching from LE Coded PHY
2026-07-24 18:03:04 +05:30
Jiang Jiang Jian
a75497a32a
Merge branch 'bugfix/low_spp_throughput_v6.0' into 'release/v6.0'
...
change(bt/bluedroid): increased port low watermark of RFCOMM (v6.0)
See merge request espressif/esp-idf!51084
2026-07-24 20:05:29 +08:00
Rahul Tank
ef049321d0
Merge branch 'bugfix/red_rem_feat_evt_v6.0' into 'release/v6.0'
...
Handle Read Remote Supported Feature failure (v6.0)
See merge request espressif/esp-idf!50809
2026-07-24 14:24:28 +05:30
Jiang Jiang Jian
f01548cfd9
Merge branch 'bugfix/bredr_critical_bugs_v6.0' into 'release/v6.0'
...
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI (v6.0)
See merge request espressif/esp-idf!51077
2026-07-24 16:12:26 +08:00
Island
41687f6c0f
Merge branch 'fix/ble_hidd_remove_ccc_gating_v6.0' into 'release/v6.0'
...
fix(esp_hid/bluedroid): remove app-layer CCC gating in HID device (6.0)
See merge request espressif/esp-idf!51007
2026-07-23 19:25:57 +08:00
Island
ded793522b
Merge branch 'fix/ble_log_compression_add_local_header_file_v6.0' into 'release/v6.0'
...
feat(ble_log): mirror local compression headers (6.0)
See merge request espressif/esp-idf!50952
2026-07-23 14:23:22 +08:00
Jin Cheng
7f6c3cbe9c
change(bt/bluedroid): increased port low watermark of RFCOMM
...
When PORT_RX_BUF_LOW_WM is too low, RFCOMM replenishes credits only
after receiving a relatively large number of packets, which may cause
the peer to exhaust its credits and enter a stop-and-wait state.
Increase the low watermark to replenish credits more promptly and
reduce the likelihood of the peer stalling while waiting for additional
credits.
2026-07-23 08:08:41 +08:00
Jin Cheng
fdcb70e608
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI
2026-07-23 07:42:23 +08:00
Astha Verma
b338ecaead
fix(nimble): Handle Read Remote Supported Features failure correctly
2026-07-22 12:14:58 +05:30
Luo Xu
5ab9a740d8
fix(bt): Fixed build error on array-bounds in HFP AG
...
(cherry picked from commit bbd20cae01 )
Co-authored-by: Wang Mengyang <wangmengyang@espressif.com >
2026-07-21 11:02:55 +08:00
Zhang Hai Peng
824621c324
fix(ble/bluedroid): track ext scan state for rand addr check
...
Update inq_var.state only after btsnd_hcic_ble_ext_scan_enable succeeds.
Clear BTM_BLE_SCANNING on explicit stop and controller scan timeout.
(cherry picked from commit 23519567e4 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-07-21 10:53:26 +08:00
Zhang Hai Peng
11149ca943
change(ble/bluedroid): disable host trace logs when BLE Log host is off
...
Default all Bluedroid layer trace levels to NONE when BLE async log
is enabled without BLE_LOG_HOST_LOG.
(cherry picked from commit 1f8f935e3f )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-07-21 10:44:11 +08:00
Jin Cheng
00f6890dfe
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act
...
Closes SEC-786
2026-07-20 16:35:15 +08:00
Jiang Jiang Jian
a2cd919a64
Merge branch 'bugfix/bug_bounty_av_v6.0' into 'release/v6.0'
...
fix(bt/bluedroid): Fix bug bounty issues about A/V from NVIDIA (v6.0)
See merge request espressif/esp-idf!50477
2026-07-20 13:54:41 +08:00
Wang Meng Yang
bed9759dbb
Merge branch 'bugfix/avrc_ca_attr_id_check_v6.0' into 'release/v6.0'
...
fix(bt): Fix the validation of AVRCP metadata attr_id in handle_rc_attributes_rsp (v6.0)
See merge request espressif/esp-idf!50550
2026-07-19 14:37:06 +08:00
Wang Meng Yang
e3a54f6673
Merge branch 'bugfix/fix_bredr_inq_crash_v6.0' into 'release/v6.0'
...
fix(bt/bluedroid): fix crash during bredr inquiry when zero-addr device is found (v6.0)
See merge request espressif/esp-idf!50854
2026-07-19 12:45:13 +08:00
yangfeng
ca77dffadc
fix(bt): Fix the validation of AVRCP metadata attr_id in handle_rc_attributes_rsp
2026-07-19 10:26:33 +08:00
yangfeng
e472bc3868
fix(bt/bluedroid): Fix unchecked p_ctrl_cback and p_msg_cback in AVRC
...
Closes SEC-1186
2026-07-19 10:21:29 +08:00
yangfeng
a3088cdce1
fix(bt/bluedroid): Fix missing NULL check on p_cfg in AVDT_ReconfigReq
...
Closes SEC-1187
2026-07-19 10:21:29 +08:00
Rahul Tank
04ccb4c955
Merge branch 'bugfix/add_dis_ieee_udi_to_config_v6.0' into 'release/v6.0'
...
fix(nimble): Add option to disable IEEE and UDI Characteristic in DIS (v6.0)
See merge request espressif/esp-idf!50760
2026-07-18 09:31:45 +05:30