Commit Graph
1664 Commits
Author SHA1 Message Date
Island da5ff0c78c Merge branch 'fix/add_soc_caps_for_pawr_feat_v5.5' into 'release/v5.5'
fix(ble): add soc caps feat for PAwR (v5.5)

See merge request espressif/esp-idf!44150
2025-12-26 14:21:25 +08:00
Wang Meng Yang ec191d2851 Merge branch 'feat/add_param_indicate_create_spp_records_v5.5' into 'release/v5.5'
feat(bt): Add an SPP API parameter to indicate whether to create the SPP record(v5.5)

See merge request espressif/esp-idf!43583
2025-12-26 10:34:35 +08:00
Wang Meng Yang e0c12adc79 Merge branch 'bugfix/a2dp_deinit_crash_v5.5' into 'release/v5.5'
fix(bt): fixed crash caused by deinit during A2DP connection initiation(v5.5)

See merge request espressif/esp-idf!43791
2025-12-26 10:34:08 +08:00
Wang Meng Yang 8c47552a4c Merge branch 'change/bt_bluedroid_avrcp_version_v5.5' into 'release/v5.5'
change(bt/bluedroid): Change AVRCP version according to feature enabled (v5.5)

See merge request espressif/esp-idf!44200
2025-12-26 10:32:43 +08:00
Wang Meng Yang 1e9f63183b Merge branch 'bugfix/l2c_fcr_clone_buf_v5.5' into 'release/v5.5'
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf

See merge request espressif/esp-idf!44263
2025-12-26 10:32:04 +08:00
Wang Meng Yang 0e194e6499 Merge branch 'bugfix/a2dp_reg_sep_v5.5' into 'release/v5.5'
fix(bt/bluedroid): Fix the status judgment of the A2DP source registration SEP (v5.5)

See merge request espressif/esp-idf!43881
2025-12-26 10:28:58 +08:00
Island 8789584388 Merge branch 'bugfix/bug_ble_max_device_record_v5.5' into 'release/v5.5'
fix(ble/bluedroid): Fixed BLE incorrect device record count issue (v5.5)

See merge request espressif/esp-idf!43597
2025-12-18 14:29:52 +08:00
Island a63ae743b1 Merge branch 'bugfix/fix_reconnect_failed_with_extend_adv_v5.5' into 'release/v5.5'
fix(ble/bluedroid): Fixed the issue that extend advertising might not restart if the connection fails (v5.5)

See merge request espressif/esp-idf!44251
2025-12-18 14:26:44 +08:00
Island 5cf7ec68bc Merge branch 'bugfix/fix_ble_security_issue_2025_v5.5' into 'release/v5.5'
Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd (v5.5)

See merge request espressif/esp-idf!43807
2025-12-18 14:25:15 +08:00
Island 51493f9445 Merge branch 'bugfix/fix_reattempt_sync_estab_v5.5' into 'release/v5.5'
fix(nimble): Add change to cancel sync in case of reattempt (v5.5)

See merge request espressif/esp-idf!43949
2025-12-18 14:21:18 +08:00
zhanghaipeng c4cc87501b fix(ble/bledroid): fix codespell issues in bluedroid code 2025-12-17 17:10:58 +08:00
Jin Cheng b70e8ae903 fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf 2025-12-16 11:38:55 +08:00
Zhi Wei Jian 5452adbcb9 fix(ble/bluedroid): Fixed reconnection failed with extend adv
(cherry picked from commit ec4052c1c7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2025-12-15 21:23:25 +08:00
linruihao d569b7df6b change(bt/bluedroid): Change AVRCP version according to feature enabled
- Version will be set to 1.6 if Cover Art feature enabled
- Otherwise, version will be set to 1.5
2025-12-12 20:11:15 +08:00
Jin Chen b0b2130475 fix(ble): add soc caps config for pawr feat on ESP32C6
(cherry picked from commit 4e4b863299)

Co-authored-by: cjin <jinchen@espressif.com>
2025-12-11 16:23:07 +08:00
Zhang Hai Peng d28b874e35 fix(ble/bluedroid): Fix security issues in GATT module
(cherry picked from commit f502b2aab1)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:24 +08:00
Zhang Hai Peng ef96110b4d fix(ble/bluedroid): Fix security issues in HCI module
(cherry picked from commit b163685c06)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:23 +08:00
Zhang Hai Peng 7c7f30aa09 fix(ble/bluedroid): Fix security issues in GAP module
(cherry picked from commit 1ed5a4465d)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:22 +08:00
Zhang Hai Peng 569854b55a fix(ble/bluedroid): Add length check in prepare write response
(cherry picked from commit b03ff3cf21)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:22 +08:00
Zhang Hai Peng 1936ba80d7 fix(ble/bluedroid): Add boundary check for adv_handle in btm_ble_adv_set_terminated_evt
(cherry picked from commit d2baf3b0d4)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:21 +08:00
Zhang Hai Peng 1ab91f0b5f fix(ble/bluedroid): Add NULL checks in GATT APIs
(cherry picked from commit a6730c7da6)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:20 +08:00
Zhang Hai Peng 8960e3ef50 fix(ble/bluedroid): Add NULL checks in esp_gap_ble_api
(cherry picked from commit b71c51564a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:19 +08:00
Zhang Hai Peng 8ef83c2367 fix(ble/bluedroid): Add NULL check in esp_ble_gap_add_device_to_resolving_list
(cherry picked from commit 4b44d8e814)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:19 +08:00
Rahul Tank 71c8c34318 fix(nimble): Add change to cancel sync in case of reattempt 2025-12-03 09:24:02 +05:30
xiongweichao ddd23f7740 fix(bt): fixed crash caused by deinit during A2DP connection initiation
- Only clean up when idle
2025-12-02 06:14:28 +00:00
Zhang Hai Peng 316c5a589a fix(ble/bluedroid): Fix potential out-of-bounds issue
- add length check in hci_hal_h4_hdl_rx_packet to prevent OOB
- add adv data length check in btm_ble_cache_adv_data
- add indicate data length check in BTA_GATTS_HandleValueIndication
- add report length check in bta_hh_parse_keybd_rpt
- add report length check in BTA_HdSendReport
- add descriptor length check in BTA_HdRegisterApp
- prevent buffer overflow in attribute processing


(cherry picked from commit 71efec78c5)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-02 00:04:40 +08:00
Zhang Hai Peng 1d22e44e51 fix(ble/bluedroid): Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd
- Reference: https://source.android.com/docs/security/bulletin/2024-03-01?hl=zh-cn


(cherry picked from commit e1d39f630f)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-02 00:04:40 +08:00
Zhang Hai Peng e3f03bb165 fix(ble/bluedroid): Fix potential CVE-2020-0022 in reassemble_and_dispatch
- Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-0022


(cherry picked from commit 1f7fd91b5a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-02 00:04:40 +08:00
yangfeng 46c10bb9f9 fix(bt/bluedroid): Fix the status judgment of the A2DP source registration SEP 2025-12-01 14:21:42 +08:00
Jin Cheng 9889edd799 fix(bt/blurdoird): fixed an OOB write in bta_dm_sdp_result 2025-11-27 23:04:36 +08:00
Rahul Tank 61d2d0e8c6 fix(nimble): Add a check for psync before processing 2025-11-25 10:20:50 +05:30
chenjianhua 18b82d2959 feat(ble/nimble): support runtime allocation for mempool 2025-11-25 10:20:38 +05:30
Rahul Tank 07a9d40a75 fix(nimble): Address compilation issues in nimble examples 2025-11-25 10:20:30 +05:30
Zhang Hai Peng 131322d502 fix(ble/bluedroid): Fixed missing BLE connect and disconnect events
(cherry picked from commit 2dcbd64616)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-11-21 21:53:24 +08:00
Zhang Hai Peng a3ff4beeb3 fix(ble/bluedroid): Fixed BLE incorrect device record count issue
(cherry picked from commit 9bfd9c5340)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-11-21 17:53:22 +08:00
xiongweichao 54513a220a feat(bt): Adds an SPP API parameter to indicate whether to create SPP record 2025-11-21 15:55:35 +08:00
liqigan 38ea9357b8 fix(bt/bluedroid): Fixed HID memory leak 2025-11-13 17:44:14 +08:00
JinCheng 79ae28fbb7 fix(bt/bluedroid): update the COD before enabling inquiry scan 2025-11-11 16:17:30 +08:00
Jin Cheng b9ba1e29b6 fix(bt/bluedroid): fixed potential OOB in AVRCP vendor command composition 2025-10-28 10:17:04 +08:00
Rahul Tank dfccdf1aea Merge branch 'feat/read_all_local_remote_sup_feat_v5.5' into 'release/v5.5'
feat(nimble): Add support for read all local / remote supported features HCI cmd (v5.5)

See merge request espressif/esp-idf!42871
2025-10-27 21:23:43 +05:30
Rahul Tank 4e29c55f94 feat(nimble): Add support for HCI commands / events
1. Read all local supported feature
      2. Read remote supported feature
      3. Advertising monitor.
2025-10-23 09:53:22 +05:30
Zhang Hai Peng 8487639a87 feat(ble/bluedroid): add API to get local BLE IRK
(cherry picked from commit 3c68650d7e)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-10-21 17:53:20 +08:00
Zhang Hai Peng fc1d5a8f9a fix(ble/bluedroid): fix memory leak during deinit when service table is created but not started
(cherry picked from commit ddd12f2498282e147044d1fe532a51aeb18875f9)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-10-17 16:45:50 +08:00
Island d4a52b13f2 Merge branch 'bugfix/fix_ble_deinit_crash_v5.5' into 'release/v5.5'
fix(ble/bluedroid): prevent crash when deinit/disable host during scan (v5.5)

See merge request espressif/esp-idf!42600
2025-10-16 19:45:54 +08:00
Shreeyash 944e2527d1 fix(nimble): fix array overflow caused by invalid connection handle indexing 2025-10-15 15:59:41 +05:30
Zhang Hai Peng cd793de75a fix(ble/bluedroid): prevent crash when deinit/disable host during scan
Crash occurs if the BLE host is deinitialized or disabled while scanning is still active.
This usage is not recommended.


(cherry picked from commit ca2c78f53e)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-10-14 21:53:52 +08:00
Zhang Hai Peng 181cd0bee9 fix(ble/bluedroid): Fixed resolve adv data crash if host deinitialized or disabled
(cherry picked from commit 7ce921ed95)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-10-14 21:53:50 +08:00
Rahul Tank 126b8f8789 fix(nimble): Added CS service support 2025-10-14 16:41:02 +05:30
Rahul Tank 5652984db9 feat(nimble): Base support for Channel sounding HCI command and events 2025-10-14 12:14:19 +05:30
Rahul Tank 38917f3435 Merge branch 'bugfix/use_nimble_mem_apis_v5.5' into 'release/v5.5'
fix(nimble): Use nimble platform mem malloc / free APIs (v5.5)

See merge request espressif/esp-idf!42287
2025-10-14 11:50:34 +05:30