yangfeng
b3aa863759
docs: Add explanations for the A2DP sink stream and AVRCP examples
...
- Modify the path of A2DP sink example
2025-12-25 10:54:32 +08:00
yangfeng
fb7fc40fec
refactor(examples/classic_bt): Add AVRCP cover art example with LCD display
2025-12-25 10:54:32 +08:00
yangfeng
38a2e9dbd0
refactor(examples/classic_bt): Add common code for AVRCP cover art example
2025-12-25 10:54:32 +08:00
yangfeng
291369475e
refactor: Refactor the example of the coexistence of A2DP sink and GATT service
2025-12-25 10:54:32 +08:00
yangfeng
ed563043c8
refactor(examples/classic_bt): Refactor A2DP sink and AVRCP examples
...
- Add avrcp_ct_metadata example
- Add avrcp_absolute_volume example
- Add the example components about common code for a2dp sink and avrcp
2025-12-25 10:54:21 +08:00
Rahul Tank
84abf868d1
Merge branch 'fix/gatt_caching_clean_api_malloc_error_v5.4' into 'release/v5.4'
...
fix(nimble): Modify GATT data storage structure in NVS during caching (v5.4)
See merge request espressif/esp-idf!42577
2025-12-24 13:01:13 +05:30
Wang Meng Yang
2f648afdde
Merge branch 'change/bt_bluedroid_avrcp_version_v5.4' into 'release/v5.4'
...
change(bt/bluedroid): Change AVRCP version according to feature enabled (v5.4)
See merge request espressif/esp-idf!44201
2025-12-24 14:12:15 +08:00
morris
7f02503298
Merge branch 'fix/improve_spi_docs_v5.4' into 'release/v5.4'
...
fix(driver_spi): docs currect gpio config performs (v5.4)
See merge request espressif/esp-idf!44483
2025-12-24 11:15:04 +08:00
Zhang Wen Xu
cd08d85ba6
Merge branch 'feat/rcp_spinel_logs_v5.4' into 'release/v5.4'
...
feat(openthread): support RCP console debug via spinel (v5.4)
See merge request espressif/esp-idf!44157
2025-12-24 02:30:12 +00:00
Rahul Tank
e313ab4487
Merge branch 'bugfix/bug_bounty_ble_issue_v5.4' into 'release/v5.4'
...
fix(protocomm): Add security checks for buffer overflow and incorrect length handling (v5.4)
See merge request espressif/esp-idf!44297
2025-12-23 22:56:15 +05:30
Astha Verma
4bcdbb90c5
fix(nimble): Modify GATT data storage structure in NVS during gatt caching
2025-12-23 21:24:30 +05:30
Rahul Tank
a3c136a075
Merge branch 'feat/add_static_passkey_v5.4' into 'release/v5.4'
...
feat(nimble): Add support for static passkey (v5.4)
See merge request espressif/esp-idf!44443
2025-12-23 21:08:08 +05:30
Rahul Tank
894c28afe3
fix(protocomm): Add security checks for buffer overflow and incorrect length handling
2025-12-23 18:22:34 +08:00
wanckl
da44a900dd
fix(driver_spi): docs currect gpio config performs
2025-12-23 16:41:06 +08:00
Rahul Tank
9e157e314a
feat(nimble): Add support for static passkey
2025-12-22 21:16:35 +05:30
Island
acfd7827b5
Merge branch 'fix/ble_mesh_trans_enh_seg_rpl_v5.4' into 'release/v5.4'
...
fix(ble_mesh): fixed incorrect rpl behavior in transport enh (v5.4)
See merge request espressif/esp-idf!44387
2025-12-22 14:30:19 +08:00
Wang Meng Yang
e745ce4473
Merge branch 'bugfix/sync_security_fix_from_flouride_v5.4' into 'release/v5.4'
...
fix: synchronized several security-related fixes from Google Fluoride (v5.4)
See merge request espressif/esp-idf!44408
2025-12-22 11:23:22 +08:00
Jin Cheng
0fb6be8d87
fix(bt/bluedroid): cleaned the code according to the tool cppcheck
2025-12-19 17:02:01 +08:00
Jin Cheng
caf1c72daf
fix(bt/bluedroid): fixed possible OOB read in smp_br_data_received
2025-12-19 17:01:59 +08:00
Jin Cheng
4e708d2ef2
fix(bt/bluedroid): drop connection when atttempting to disable encryption
2025-12-19 17:01:56 +08:00
Jin Cheng
8f6e0b5a37
fix(bt/bluedroid): fixed an integer overflow bug in attp_build_read_multi_cmd
2025-12-19 17:01:54 +08:00
Jin Cheng
fe6cf47013
fix(bt/bluedroid): fixed an integer overflow bug in avdt_msg_asmbl
2025-12-19 17:01:52 +08:00
Jin Cheng
351d21ccf0
fix(bt/bluedroid): fixed an OOB bug in bta_av_setconfig_rej
2025-12-19 17:01:47 +08:00
Island
40137177ac
Merge branch 'fix/ble_log_v2_dual_core_iwt_v5.4' into 'release/v5.4'
...
fix(ble): added missed spin lock initialization (v5.4)
See merge request espressif/esp-idf!44380
2025-12-19 15:10:51 +08:00
Island
084aca1af1
Merge branch 'feat/ble_mesh_dfu_supported_v5.4' into 'release/v5.4'
...
Feat/ble mesh dfu supported v5.4
See merge request espressif/esp-idf!44129
2025-12-19 14:39:35 +08:00
Island
63bc003841
Merge branch 'feature/extend_h2_conon_num_to_70_v5.4' into 'release/v5.4'
...
change(ble): Updated the maximum number of concurrent connections to 70 on ESP32-H2 (v5.4)
See merge request espressif/esp-idf!43834
2025-12-19 14:31:56 +08:00
Jin Cheng
cec99a9f9a
fix(bt/bluedroid): fixed an OOB bug in btm_read_rssi_complete
2025-12-19 11:20:20 +08:00
Jin Cheng
97e382b1b0
fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete
2025-12-19 11:20:20 +08:00
Jin Cheng
558e02999b
fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete
2025-12-19 11:20:20 +08:00
Jin Cheng
4a5656b964
fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete
2025-12-19 11:20:20 +08:00
Jin Cheng
89dbbc6f37
fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete
2025-12-19 11:20:20 +08:00
Jin Cheng
6d393a43ba
fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute
2025-12-19 11:20:20 +08:00
Jin Cheng
dc8db250f7
fix(bt/bluedroid): report failure when not able to connect to AVRCP
2025-12-19 11:20:20 +08:00
Jin Cheng
cca774644e
fix(bt/bluedroid): fixed buffer overflow in BRSF
2025-12-19 11:20:20 +08:00
Jin Cheng
83a2690415
fix(bt/bluedroid): added negative length check in process_service_search_rsp
2025-12-19 11:20:20 +08:00
Jin Cheng
611d1236af
fix(bt/bluedroid): fixed OOB read in SDP server continuation length
2025-12-19 11:20:20 +08:00
Jin Cheng
4d3b4c1d35
fix(bt/bluedroid): added length check when copy AVDTP packet
2025-12-19 11:20:20 +08:00
Jin Cheng
90049aa7f6
fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET
2025-12-19 11:20:20 +08:00
Jin Cheng
081aa31e62
fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item
2025-12-19 11:20:20 +08:00
Jin Cheng
b59d0541a9
fix(bt/bluedroid): added boundary check when reading SDP attribute response packet
2025-12-19 11:20:20 +08:00
Jin Cheng
866130578f
fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp
2025-12-19 11:20:15 +08:00
Jin Cheng
d6e6b14236
fix(bt/bluedroid): fixed potential OOB read in the reporting handler
...
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-19 11:19:23 +08:00
Jin Cheng
5bc344f900
fix(bt/bluedroid): fixed a potential overflow about the media payload offset
...
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-19 11:19:23 +08:00
Jin Cheng
3619e43002
fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open
2025-12-19 11:19:23 +08:00
Jin Cheng
f7058fa32e
fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected
2025-12-19 11:19:23 +08:00
Jin Cheng
0028cb326a
fix(bt/bluedroid): reject device with same address in legacy paring
2025-12-19 11:19:23 +08:00
Jin Cheng
073965fd31
fix(bt/bluedroid): ignore AVCT commands that are too long
2025-12-19 11:19:23 +08:00
Jin Cheng
648f0396b8
fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP
2025-12-19 11:19:23 +08:00
Jin Cheng
0b8f1f0b0c
fix(bt/bluedroid): make sure SDP only start discovery once
2025-12-19 11:19:23 +08:00
Jin Cheng
44b566ab5e
fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write
2025-12-19 11:19:23 +08:00
