Commit Graph
5837 Commits
Author SHA1 Message Date
Wang Meng Yang d0a96988f2 Merge branch 'bugfix/ai_review_avrcp' into 'master'
fix(bt): Fix the critical and high issues related to AVRCP from AI review report

See merge request espressif/esp-idf!49375
2026-06-24 21:25:54 +08:00
Wang Meng Yang 3be1a334c0 Merge branch 'bugfix/ai_review_hfp' into 'master'
fix(bt): Fix the critical issues related to HFP from AI review report

See merge request espressif/esp-idf!49400
2026-06-24 20:54:46 +08:00
yangfeng 169a29defc fix(bt): Fix the high issues related to AVRCP from AI review report
- SDP/registration: handle SDP record creation and discovery failures safely
- AVRC stack: fix packet checks, fragment leaks, response build, and compile guards
- BTC AVRCP: fix return codes, connection state, metadata parsing, and memory leaks
- AVCTP: fix event passing, L2CAP conflicts, TX queue leaks, and disconnect handling
- Example: remove TG RN capability setup before initialization
2026-06-24 11:20:09 +08:00
yangfeng 3210f4eea5 fix(bt): Fix the critical issues related to AVRCP from AI review report
- recalculate len_left per attribute in avrc_bld_app_setting_text_rsp
- abort fragmented message reassembly when reassembly buffer alloc fails
2026-06-24 11:20:09 +08:00
Island 005dd1ba8c Merge branch 'feat/spi_log_qa_frame_check' into 'master'
feat(ble_log): add FINAL_STAT session-end frame and flush hook before controller restart

See merge request espressif/esp-idf!49433
2026-06-24 10:46:43 +08:00
yangfeng 0211122300 fix(bt): Fix the critical issues related to HFP from AI review report
HFP AG:
- Fix mSBC EV3 second-packet payload length calculation to prevent OOB read and infinite loop
- Add init/deinit guards in HF AG helper functions to avoid NULL deref
- Return bt_status_t from btc_hf_ag_audio_data_send to avoid silent buffer leak on SLC failure
- Break SCO CI data loop when SCO is not open to prevent CPU starvation
- Guard BTM_FreeSCN(0) and reset SCN after free in bta_ag_del_records
- Use OI_UINT32 for mSBC decode frame length to avoid stack corruption
- Bound AT Dial command string copy to BTA_AG_AT_MAX_LEN
HFP Client:
- Check osi_calloc result before use when reassembling split mSBC frames
- Use OI_UINT32 for mSBC decode frame length to avoid stack corruption
- Free SDP db, collision/AT timers and queued AT cmds before scb reset on disable
- Fix mSBC EV3 second-packet payload length calculation (same as AG)
- Reject pcm_resample input smaller than overlap window (96 bytes) on filtered path
- Break SCO CI data loop when SCO is not open to prevent CPU starvation
- Guard BTM_FreeSCN(0) and reset SCN after free in bta_hf_client_del_record
2026-06-23 19:36:16 +08:00
guozifan a81322a2ce feat(ble_log): Add frame check support for restart flow 2026-06-23 16:19:30 +08:00
Rahul Tank 7d33607e26 Merge branch 'feat/throughput_l2cap_coc' into 'master'
Added l2cap_coc example for throughput

Closes BLERP-2890

See merge request espressif/esp-idf!47284
2026-06-22 18:07:07 +05:30
Island bf08ef8b50 Merge branch 'feat/ble_log_compression_module_cfg_update' into 'master'
Feat/ble log compression module cfg update

See merge request espressif/esp-idf!48467
2026-06-22 14:15:26 +08:00
Astha Verma 5f58bb5e5e fix(nimble): Added l2cap_coc throughput examples 2026-06-19 11:48:18 +05:30
Rahul Tank dd43cc3b7b Merge branch 'bugfix/fix_log_performance' into 'master'
fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level

See merge request espressif/esp-idf!49653
2026-06-18 21:39:15 +05:30
Wang Meng Yang 63e9bfc9b8 Merge branch 'bugfix/ag_unknown_codec' into 'master'
fix(bt): skip unknown codecs when parsing AT+BAC

Closes BT-4384

See merge request espressif/esp-idf!49244
2026-06-18 17:22:03 +08:00
Jiang Jiang Jian 5a1adbfb1c Merge branch 'change/ble_update_lib_20260612' into 'master'
change(ble): [AUTO_MR] 20260612 - Update ESP BLE Controller Lib

Closes BLERP-2888

See merge request espressif/esp-idf!49605
2026-06-18 17:20:25 +08:00
luoxu c0286b25fa feat(ble): reorganize log compression Kconfig and add ISO
Move sub-Kconfig files into categorized directories (profile/mesh/,
host/, iso/audio/) and create the missing ISO/Audio compression
Kconfig with COMPRESSION + PRESERVE pairs for all 4 log levels,
matching the existing cmake tag definitions.
2026-06-18 15:28:10 +08:00
luoxu 8d4f1cb608 fix(ble): fix Bluedroid log compression for newly added modules 2026-06-18 15:28:10 +08:00
luoxu d88b964c8d feat(ble): split log compression Kconfig into separate mesh and host files 2026-06-18 15:28:10 +08:00
Wang Meng Yang 371f92bf8a Merge branch 'bugfix/bbp_517' into 'master'
fix(bt/bluedroid): fixed possible OOB read in btc_a2dp_sink_handle_inc_media

Closes BT-4398

See merge request espressif/esp-idf!49673
2026-06-18 15:14:47 +08:00
Wang Meng Yang 3963be89f4 Merge branch 'bugfix/bbp_515' into 'master'
fix(bt/bluedroid): fixed possible OOB read/write in process_l2cap_cmd

Closes BT-4397

See merge request espressif/esp-idf!49672
2026-06-18 14:39:05 +08:00
Liu Linyan 40efed2a7b fix(ble_audio): Fix mcc read may enter BUSY state while multiple notifications are received 2026-06-17 09:51:19 +08:00
Rahul Tank 490d918891 fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level 2026-06-16 20:16:50 +08:00
Wang Meng Yang bfb7c81fc1 Merge branch 'bugfix/esp32_ctrl_issues' into 'master'
fix(bt/controller): fixed several BR/EDR controller bugs found by WVT regression tests on ESP32

See merge request espressif/esp-idf!49621
2026-06-16 16:47:28 +08:00
Island 57b3b1777a Merge branch 'feat/ble-smp-multi-adv-static-random-address' into 'master'
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses

Closes BLERP-2698

See merge request espressif/esp-idf!49011
2026-06-16 15:24:26 +08:00
Jin Cheng 6cb20db4df fix(bt/bluedroid): fixed possible OOB write in btc_a2dp_sink_handle_inc_media 2026-06-15 20:26:48 +08:00
Jin Cheng bd60b1c267 fix(bt/bluedroid): fixed possible OOB read/write in process_l2cap_cmd 2026-06-15 20:26:15 +08:00
Jin Cheng 676fd45ec9 fix(bt/controller): fixed several BR/EDR controller bugs found by WVT regression tests on ESP32 2026-06-15 15:26:09 +08:00
zhanghaipeng 7986e2faa8 feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses 2026-06-15 14:41:51 +08:00
Wang Meng Yang 8160f8d5f5 Merge branch 'bugfix/bbp_481' into 'master'
fix(bt/bluedroid): added buffer length check for OBEX APIs

Closes BT-4367

See merge request espressif/esp-idf!49437
2026-06-12 18:30:32 +08:00
Jin Cheng 6979093544 fix(bt/bluedroid): added buffer length check for HID Device data indication 2026-06-12 12:18:02 +08:00
Zhou Xiao 897f3b2af1 change(ble): [AUTO_MR] Update lib_esp32c2 to 750d4902 2026-06-12 12:00:54 +08:00
Island 033b46ea2c Merge branch 'change/ble_update_lib_20260610' into 'master'
change(ble): [AUTO_MR] 20260610 - Update ESP BLE Controller Lib

Closes BLERP-2881

See merge request espressif/esp-idf!49522
2026-06-12 11:55:47 +08:00
liqigan 65b1ef250c change(bt): Used esp_log as the print function for bredr controller 2026-06-12 07:48:27 +08:00
Jin Cheng 0970c5accb fix(bt/controller): fixed several BR/EDR controller bugs found by WVT regression tests on ESP32-S31 2026-06-12 07:48:27 +08:00
Shen Wei Long 4288cd3334 Merge branch 'fix/reduce_acl_event_gaps' into 'master'
feat(ble): updated libble to 71d180a4 for esp32h4 and esp32s31

Closes BLERP-2870, BLERP-2871, and BT-4377

See merge request espressif/esp-idf!49290
2026-06-11 13:16:56 +00:00
Rahul Tank 678cc62dac Merge branch 'fix/add_remaining_vars_to_heap' into 'master'
fix(nimble): Change remaining vars from Static to Dynamic

See merge request espressif/esp-idf!48334
2026-06-11 17:30:05 +05:30
Wang Meng Yang 9a3bfb907c Merge branch 'bugfix/bbp_499' into 'master'
fix(bt/bluedroid): added validation for all SMP BR opcode lengths in smp_br_data_received

Closes BT-4389

See merge request espressif/esp-idf!49429
2026-06-11 12:36:20 +08:00
Wang Meng Yang 388ea06692 Merge branch 'bugfix/bbp_478' into 'master'
fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode

Closes BT-4387

See merge request espressif/esp-idf!49434
2026-06-11 12:34:43 +08:00
Wang Meng Yang 82c640784f Merge branch 'bugfix/bbp_479' into 'master'
fix(bt/bluedroid): added buffer length check for HID host data indication

Closes BT-4366

See merge request espressif/esp-idf!49435
2026-06-11 10:01:12 +08:00
Wang Meng Yang 04f7908b12 Merge branch 'bugfix/bbp_482' into 'master'
fix(bt/bluedroid): added buffer length check for L2CAP related functions

Closes BT-4368

See merge request espressif/esp-idf!49438
2026-06-11 08:08:54 +08:00
ShenWeilong bb4eeb8edc fix(bt): fixed the npl callout stop issue 2026-06-10 19:36:28 +08:00
ShenWeilong df148c4adb feat(ble): updated libble to 71d180a4 for esp32h4 and esp32s31 2026-06-10 19:36:28 +08:00
Sumeet Singh bcfd6633be fix(nimble): Change remaining vars from Static to Dynamic 2026-06-10 16:24:07 +05:30
Rahul Tank 2782615ed9 Merge branch 'bugfix/bt4371_crash' into 'master'
fix(nimble): Deinit NimBLE stop event in host task

See merge request espressif/esp-idf!49263
2026-06-10 16:17:26 +05:30
Zhou Xiao 226a0483b1 change(ble): [AUTO_MR] Update lib_esp32c6 to a6519790 2026-06-10 16:46:35 +08:00
Zhou Xiao a43358587c change(ble): [AUTO_MR] Update lib_esp32c5 to a6519790 2026-06-10 16:46:35 +08:00
Zhou Xiao 8a744e8e93 change(ble): [AUTO_MR] Update lib_esp32h2 to a6519790 2026-06-10 16:46:35 +08:00
Island 909f059277 Merge branch 'fix/gattc-multi-app-notif-warning' into 'master'
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if

Closes WIFIBUG-1822

See merge request espressif/esp-idf!49389
2026-06-10 11:58:01 +08:00
Island e40c3c4882 Merge branch 'fix/gattc_prep_write_preserve_att_error_status' into 'master'
fix(ble/bluedroid): preserve ATT error on prepare write completion

Closes BLERP-2866

See merge request espressif/esp-idf!49264
2026-06-10 11:57:58 +08:00
Jin Cheng 149743a8d5 fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode 2026-06-10 08:43:42 +08:00
Rahul Tank f2a12351e1 fix(nimble): Deinit NimBLE stop event in host task 2026-06-09 16:30:24 +05:30
Jin Cheng c8cd8f4f30 fix(bt/bluedroid): added buffer length check for L2CAP related functions 2026-06-09 17:57:46 +08:00