Wang Meng Yang
d0a96988f2
Merge branch 'bugfix/ai_review_avrcp' into 'master'
...
fix(bt): Fix the critical and high issues related to AVRCP from AI review report
See merge request espressif/esp-idf!49375
2026-06-24 21:25:54 +08:00
Wang Meng Yang
3be1a334c0
Merge branch 'bugfix/ai_review_hfp' into 'master'
...
fix(bt): Fix the critical issues related to HFP from AI review report
See merge request espressif/esp-idf!49400
2026-06-24 20:54:46 +08:00
yangfeng
169a29defc
fix(bt): Fix the high issues related to AVRCP from AI review report
...
- SDP/registration: handle SDP record creation and discovery failures safely
- AVRC stack: fix packet checks, fragment leaks, response build, and compile guards
- BTC AVRCP: fix return codes, connection state, metadata parsing, and memory leaks
- AVCTP: fix event passing, L2CAP conflicts, TX queue leaks, and disconnect handling
- Example: remove TG RN capability setup before initialization
2026-06-24 11:20:09 +08:00
yangfeng
3210f4eea5
fix(bt): Fix the critical issues related to AVRCP from AI review report
...
- recalculate len_left per attribute in avrc_bld_app_setting_text_rsp
- abort fragmented message reassembly when reassembly buffer alloc fails
2026-06-24 11:20:09 +08:00
Island
005dd1ba8c
Merge branch 'feat/spi_log_qa_frame_check' into 'master'
...
feat(ble_log): add FINAL_STAT session-end frame and flush hook before controller restart
See merge request espressif/esp-idf!49433
2026-06-24 10:46:43 +08:00
yangfeng
0211122300
fix(bt): Fix the critical issues related to HFP from AI review report
...
HFP AG:
- Fix mSBC EV3 second-packet payload length calculation to prevent OOB read and infinite loop
- Add init/deinit guards in HF AG helper functions to avoid NULL deref
- Return bt_status_t from btc_hf_ag_audio_data_send to avoid silent buffer leak on SLC failure
- Break SCO CI data loop when SCO is not open to prevent CPU starvation
- Guard BTM_FreeSCN(0) and reset SCN after free in bta_ag_del_records
- Use OI_UINT32 for mSBC decode frame length to avoid stack corruption
- Bound AT Dial command string copy to BTA_AG_AT_MAX_LEN
HFP Client:
- Check osi_calloc result before use when reassembling split mSBC frames
- Use OI_UINT32 for mSBC decode frame length to avoid stack corruption
- Free SDP db, collision/AT timers and queued AT cmds before scb reset on disable
- Fix mSBC EV3 second-packet payload length calculation (same as AG)
- Reject pcm_resample input smaller than overlap window (96 bytes) on filtered path
- Break SCO CI data loop when SCO is not open to prevent CPU starvation
- Guard BTM_FreeSCN(0) and reset SCN after free in bta_hf_client_del_record
2026-06-23 19:36:16 +08:00
guozifan
a81322a2ce
feat(ble_log): Add frame check support for restart flow
2026-06-23 16:19:30 +08:00
Rahul Tank
7d33607e26
Merge branch 'feat/throughput_l2cap_coc' into 'master'
...
Added l2cap_coc example for throughput
Closes BLERP-2890
See merge request espressif/esp-idf!47284
2026-06-22 18:07:07 +05:30
Island
bf08ef8b50
Merge branch 'feat/ble_log_compression_module_cfg_update' into 'master'
...
Feat/ble log compression module cfg update
See merge request espressif/esp-idf!48467
2026-06-22 14:15:26 +08:00
Astha Verma
5f58bb5e5e
fix(nimble): Added l2cap_coc throughput examples
2026-06-19 11:48:18 +05:30
Rahul Tank
dd43cc3b7b
Merge branch 'bugfix/fix_log_performance' into 'master'
...
fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level
See merge request espressif/esp-idf!49653
2026-06-18 21:39:15 +05:30
Wang Meng Yang
63e9bfc9b8
Merge branch 'bugfix/ag_unknown_codec' into 'master'
...
fix(bt): skip unknown codecs when parsing AT+BAC
Closes BT-4384
See merge request espressif/esp-idf!49244
2026-06-18 17:22:03 +08:00
Jiang Jiang Jian
5a1adbfb1c
Merge branch 'change/ble_update_lib_20260612' into 'master'
...
change(ble): [AUTO_MR] 20260612 - Update ESP BLE Controller Lib
Closes BLERP-2888
See merge request espressif/esp-idf!49605
2026-06-18 17:20:25 +08:00
luoxu
c0286b25fa
feat(ble): reorganize log compression Kconfig and add ISO
...
Move sub-Kconfig files into categorized directories (profile/mesh/,
host/, iso/audio/) and create the missing ISO/Audio compression
Kconfig with COMPRESSION + PRESERVE pairs for all 4 log levels,
matching the existing cmake tag definitions.
2026-06-18 15:28:10 +08:00
luoxu
8d4f1cb608
fix(ble): fix Bluedroid log compression for newly added modules
2026-06-18 15:28:10 +08:00
luoxu
d88b964c8d
feat(ble): split log compression Kconfig into separate mesh and host files
2026-06-18 15:28:10 +08:00
Wang Meng Yang
371f92bf8a
Merge branch 'bugfix/bbp_517' into 'master'
...
fix(bt/bluedroid): fixed possible OOB read in btc_a2dp_sink_handle_inc_media
Closes BT-4398
See merge request espressif/esp-idf!49673
2026-06-18 15:14:47 +08:00
Wang Meng Yang
3963be89f4
Merge branch 'bugfix/bbp_515' into 'master'
...
fix(bt/bluedroid): fixed possible OOB read/write in process_l2cap_cmd
Closes BT-4397
See merge request espressif/esp-idf!49672
2026-06-18 14:39:05 +08:00
Liu Linyan
40efed2a7b
fix(ble_audio): Fix mcc read may enter BUSY state while multiple notifications are received
2026-06-17 09:51:19 +08:00
Rahul Tank
490d918891
fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level
2026-06-16 20:16:50 +08:00
Wang Meng Yang
bfb7c81fc1
Merge branch 'bugfix/esp32_ctrl_issues' into 'master'
...
fix(bt/controller): fixed several BR/EDR controller bugs found by WVT regression tests on ESP32
See merge request espressif/esp-idf!49621
2026-06-16 16:47:28 +08:00
Island
57b3b1777a
Merge branch 'feat/ble-smp-multi-adv-static-random-address' into 'master'
...
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses
Closes BLERP-2698
See merge request espressif/esp-idf!49011
2026-06-16 15:24:26 +08:00
Jin Cheng
6cb20db4df
fix(bt/bluedroid): fixed possible OOB write in btc_a2dp_sink_handle_inc_media
2026-06-15 20:26:48 +08:00
Jin Cheng
bd60b1c267
fix(bt/bluedroid): fixed possible OOB read/write in process_l2cap_cmd
2026-06-15 20:26:15 +08:00
Jin Cheng
676fd45ec9
fix(bt/controller): fixed several BR/EDR controller bugs found by WVT regression tests on ESP32
2026-06-15 15:26:09 +08:00
zhanghaipeng
7986e2faa8
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses
2026-06-15 14:41:51 +08:00
Wang Meng Yang
8160f8d5f5
Merge branch 'bugfix/bbp_481' into 'master'
...
fix(bt/bluedroid): added buffer length check for OBEX APIs
Closes BT-4367
See merge request espressif/esp-idf!49437
2026-06-12 18:30:32 +08:00
Jin Cheng
6979093544
fix(bt/bluedroid): added buffer length check for HID Device data indication
2026-06-12 12:18:02 +08:00
Zhou Xiao
897f3b2af1
change(ble): [AUTO_MR] Update lib_esp32c2 to 750d4902
2026-06-12 12:00:54 +08:00
Island
033b46ea2c
Merge branch 'change/ble_update_lib_20260610' into 'master'
...
change(ble): [AUTO_MR] 20260610 - Update ESP BLE Controller Lib
Closes BLERP-2881
See merge request espressif/esp-idf!49522
2026-06-12 11:55:47 +08:00
liqigan
65b1ef250c
change(bt): Used esp_log as the print function for bredr controller
2026-06-12 07:48:27 +08:00
Jin Cheng
0970c5accb
fix(bt/controller): fixed several BR/EDR controller bugs found by WVT regression tests on ESP32-S31
2026-06-12 07:48:27 +08:00
Shen Wei Long
4288cd3334
Merge branch 'fix/reduce_acl_event_gaps' into 'master'
...
feat(ble): updated libble to 71d180a4 for esp32h4 and esp32s31
Closes BLERP-2870, BLERP-2871, and BT-4377
See merge request espressif/esp-idf!49290
2026-06-11 13:16:56 +00:00
Rahul Tank
678cc62dac
Merge branch 'fix/add_remaining_vars_to_heap' into 'master'
...
fix(nimble): Change remaining vars from Static to Dynamic
See merge request espressif/esp-idf!48334
2026-06-11 17:30:05 +05:30
Wang Meng Yang
9a3bfb907c
Merge branch 'bugfix/bbp_499' into 'master'
...
fix(bt/bluedroid): added validation for all SMP BR opcode lengths in smp_br_data_received
Closes BT-4389
See merge request espressif/esp-idf!49429
2026-06-11 12:36:20 +08:00
Wang Meng Yang
388ea06692
Merge branch 'bugfix/bbp_478' into 'master'
...
fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode
Closes BT-4387
See merge request espressif/esp-idf!49434
2026-06-11 12:34:43 +08:00
Wang Meng Yang
82c640784f
Merge branch 'bugfix/bbp_479' into 'master'
...
fix(bt/bluedroid): added buffer length check for HID host data indication
Closes BT-4366
See merge request espressif/esp-idf!49435
2026-06-11 10:01:12 +08:00
Wang Meng Yang
04f7908b12
Merge branch 'bugfix/bbp_482' into 'master'
...
fix(bt/bluedroid): added buffer length check for L2CAP related functions
Closes BT-4368
See merge request espressif/esp-idf!49438
2026-06-11 08:08:54 +08:00
ShenWeilong
bb4eeb8edc
fix(bt): fixed the npl callout stop issue
2026-06-10 19:36:28 +08:00
ShenWeilong
df148c4adb
feat(ble): updated libble to 71d180a4 for esp32h4 and esp32s31
2026-06-10 19:36:28 +08:00
Sumeet Singh
bcfd6633be
fix(nimble): Change remaining vars from Static to Dynamic
2026-06-10 16:24:07 +05:30
Rahul Tank
2782615ed9
Merge branch 'bugfix/bt4371_crash' into 'master'
...
fix(nimble): Deinit NimBLE stop event in host task
See merge request espressif/esp-idf!49263
2026-06-10 16:17:26 +05:30
Zhou Xiao
226a0483b1
change(ble): [AUTO_MR] Update lib_esp32c6 to a6519790
2026-06-10 16:46:35 +08:00
Zhou Xiao
a43358587c
change(ble): [AUTO_MR] Update lib_esp32c5 to a6519790
2026-06-10 16:46:35 +08:00
Zhou Xiao
8a744e8e93
change(ble): [AUTO_MR] Update lib_esp32h2 to a6519790
2026-06-10 16:46:35 +08:00
Island
909f059277
Merge branch 'fix/gattc-multi-app-notif-warning' into 'master'
...
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if
Closes WIFIBUG-1822
See merge request espressif/esp-idf!49389
2026-06-10 11:58:01 +08:00
Island
e40c3c4882
Merge branch 'fix/gattc_prep_write_preserve_att_error_status' into 'master'
...
fix(ble/bluedroid): preserve ATT error on prepare write completion
Closes BLERP-2866
See merge request espressif/esp-idf!49264
2026-06-10 11:57:58 +08:00
Jin Cheng
149743a8d5
fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode
2026-06-10 08:43:42 +08:00
Rahul Tank
f2a12351e1
fix(nimble): Deinit NimBLE stop event in host task
2026-06-09 16:30:24 +05:30
Jin Cheng
c8cd8f4f30
fix(bt/bluedroid): added buffer length check for L2CAP related functions
2026-06-09 17:57:46 +08:00