Island
da5ff0c78c
Merge branch 'fix/add_soc_caps_for_pawr_feat_v5.5' into 'release/v5.5'
...
fix(ble): add soc caps feat for PAwR (v5.5)
See merge request espressif/esp-idf!44150
2025-12-26 14:21:25 +08:00
Wang Meng Yang
ec191d2851
Merge branch 'feat/add_param_indicate_create_spp_records_v5.5' into 'release/v5.5'
...
feat(bt): Add an SPP API parameter to indicate whether to create the SPP record(v5.5)
See merge request espressif/esp-idf!43583
2025-12-26 10:34:35 +08:00
Wang Meng Yang
e0c12adc79
Merge branch 'bugfix/a2dp_deinit_crash_v5.5' into 'release/v5.5'
...
fix(bt): fixed crash caused by deinit during A2DP connection initiation(v5.5)
See merge request espressif/esp-idf!43791
2025-12-26 10:34:08 +08:00
Wang Meng Yang
8c47552a4c
Merge branch 'change/bt_bluedroid_avrcp_version_v5.5' into 'release/v5.5'
...
change(bt/bluedroid): Change AVRCP version according to feature enabled (v5.5)
See merge request espressif/esp-idf!44200
2025-12-26 10:32:43 +08:00
Wang Meng Yang
1e9f63183b
Merge branch 'bugfix/l2c_fcr_clone_buf_v5.5' into 'release/v5.5'
...
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf
See merge request espressif/esp-idf!44263
2025-12-26 10:32:04 +08:00
Wang Meng Yang
0e194e6499
Merge branch 'bugfix/a2dp_reg_sep_v5.5' into 'release/v5.5'
...
fix(bt/bluedroid): Fix the status judgment of the A2DP source registration SEP (v5.5)
See merge request espressif/esp-idf!43881
2025-12-26 10:28:58 +08:00
Island
8789584388
Merge branch 'bugfix/bug_ble_max_device_record_v5.5' into 'release/v5.5'
...
fix(ble/bluedroid): Fixed BLE incorrect device record count issue (v5.5)
See merge request espressif/esp-idf!43597
2025-12-18 14:29:52 +08:00
Island
a63ae743b1
Merge branch 'bugfix/fix_reconnect_failed_with_extend_adv_v5.5' into 'release/v5.5'
...
fix(ble/bluedroid): Fixed the issue that extend advertising might not restart if the connection fails (v5.5)
See merge request espressif/esp-idf!44251
2025-12-18 14:26:44 +08:00
Island
5cf7ec68bc
Merge branch 'bugfix/fix_ble_security_issue_2025_v5.5' into 'release/v5.5'
...
Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd (v5.5)
See merge request espressif/esp-idf!43807
2025-12-18 14:25:15 +08:00
Island
51493f9445
Merge branch 'bugfix/fix_reattempt_sync_estab_v5.5' into 'release/v5.5'
...
fix(nimble): Add change to cancel sync in case of reattempt (v5.5)
See merge request espressif/esp-idf!43949
2025-12-18 14:21:18 +08:00
zhanghaipeng
c4cc87501b
fix(ble/bledroid): fix codespell issues in bluedroid code
2025-12-17 17:10:58 +08:00
Jin Cheng
b70e8ae903
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf
2025-12-16 11:38:55 +08:00
Zhi Wei Jian
5452adbcb9
fix(ble/bluedroid): Fixed reconnection failed with extend adv
...
(cherry picked from commit ec4052c1c7 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2025-12-15 21:23:25 +08:00
linruihao
d569b7df6b
change(bt/bluedroid): Change AVRCP version according to feature enabled
...
- Version will be set to 1.6 if Cover Art feature enabled
- Otherwise, version will be set to 1.5
2025-12-12 20:11:15 +08:00
Jin Chen
b0b2130475
fix(ble): add soc caps config for pawr feat on ESP32C6
...
(cherry picked from commit 4e4b863299 )
Co-authored-by: cjin <jinchen@espressif.com >
2025-12-11 16:23:07 +08:00
Zhang Hai Peng
d28b874e35
fix(ble/bluedroid): Fix security issues in GATT module
...
(cherry picked from commit f502b2aab1 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-03 11:54:24 +08:00
Zhang Hai Peng
ef96110b4d
fix(ble/bluedroid): Fix security issues in HCI module
...
(cherry picked from commit b163685c06 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-03 11:54:23 +08:00
Zhang Hai Peng
7c7f30aa09
fix(ble/bluedroid): Fix security issues in GAP module
...
(cherry picked from commit 1ed5a4465d )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-03 11:54:22 +08:00
Zhang Hai Peng
569854b55a
fix(ble/bluedroid): Add length check in prepare write response
...
(cherry picked from commit b03ff3cf21 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-03 11:54:22 +08:00
Zhang Hai Peng
1936ba80d7
fix(ble/bluedroid): Add boundary check for adv_handle in btm_ble_adv_set_terminated_evt
...
(cherry picked from commit d2baf3b0d4 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-03 11:54:21 +08:00
Zhang Hai Peng
1ab91f0b5f
fix(ble/bluedroid): Add NULL checks in GATT APIs
...
(cherry picked from commit a6730c7da6 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-03 11:54:20 +08:00
Zhang Hai Peng
8960e3ef50
fix(ble/bluedroid): Add NULL checks in esp_gap_ble_api
...
(cherry picked from commit b71c51564a )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-03 11:54:19 +08:00
Zhang Hai Peng
8ef83c2367
fix(ble/bluedroid): Add NULL check in esp_ble_gap_add_device_to_resolving_list
...
(cherry picked from commit 4b44d8e814 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-03 11:54:19 +08:00
Rahul Tank
71c8c34318
fix(nimble): Add change to cancel sync in case of reattempt
2025-12-03 09:24:02 +05:30
xiongweichao
ddd23f7740
fix(bt): fixed crash caused by deinit during A2DP connection initiation
...
- Only clean up when idle
2025-12-02 06:14:28 +00:00
Zhang Hai Peng
316c5a589a
fix(ble/bluedroid): Fix potential out-of-bounds issue
...
- add length check in hci_hal_h4_hdl_rx_packet to prevent OOB
- add adv data length check in btm_ble_cache_adv_data
- add indicate data length check in BTA_GATTS_HandleValueIndication
- add report length check in bta_hh_parse_keybd_rpt
- add report length check in BTA_HdSendReport
- add descriptor length check in BTA_HdRegisterApp
- prevent buffer overflow in attribute processing
(cherry picked from commit 71efec78c5 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-02 00:04:40 +08:00
Zhang Hai Peng
1d22e44e51
fix(ble/bluedroid): Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd
...
- Reference: https://source.android.com/docs/security/bulletin/2024-03-01?hl=zh-cn
(cherry picked from commit e1d39f630f )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-02 00:04:40 +08:00
Zhang Hai Peng
e3f03bb165
fix(ble/bluedroid): Fix potential CVE-2020-0022 in reassemble_and_dispatch
...
- Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-0022
(cherry picked from commit 1f7fd91b5a )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-02 00:04:40 +08:00
yangfeng
46c10bb9f9
fix(bt/bluedroid): Fix the status judgment of the A2DP source registration SEP
2025-12-01 14:21:42 +08:00
Jin Cheng
9889edd799
fix(bt/blurdoird): fixed an OOB write in bta_dm_sdp_result
2025-11-27 23:04:36 +08:00
Rahul Tank
61d2d0e8c6
fix(nimble): Add a check for psync before processing
2025-11-25 10:20:50 +05:30
chenjianhua
18b82d2959
feat(ble/nimble): support runtime allocation for mempool
2025-11-25 10:20:38 +05:30
Rahul Tank
07a9d40a75
fix(nimble): Address compilation issues in nimble examples
2025-11-25 10:20:30 +05:30
Zhang Hai Peng
131322d502
fix(ble/bluedroid): Fixed missing BLE connect and disconnect events
...
(cherry picked from commit 2dcbd64616 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-11-21 21:53:24 +08:00
Zhang Hai Peng
a3ff4beeb3
fix(ble/bluedroid): Fixed BLE incorrect device record count issue
...
(cherry picked from commit 9bfd9c5340 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-11-21 17:53:22 +08:00
xiongweichao
54513a220a
feat(bt): Adds an SPP API parameter to indicate whether to create SPP record
2025-11-21 15:55:35 +08:00
liqigan
38ea9357b8
fix(bt/bluedroid): Fixed HID memory leak
2025-11-13 17:44:14 +08:00
JinCheng
79ae28fbb7
fix(bt/bluedroid): update the COD before enabling inquiry scan
2025-11-11 16:17:30 +08:00
Jin Cheng
b9ba1e29b6
fix(bt/bluedroid): fixed potential OOB in AVRCP vendor command composition
2025-10-28 10:17:04 +08:00
Rahul Tank
dfccdf1aea
Merge branch 'feat/read_all_local_remote_sup_feat_v5.5' into 'release/v5.5'
...
feat(nimble): Add support for read all local / remote supported features HCI cmd (v5.5)
See merge request espressif/esp-idf!42871
2025-10-27 21:23:43 +05:30
Rahul Tank
4e29c55f94
feat(nimble): Add support for HCI commands / events
...
1. Read all local supported feature
2. Read remote supported feature
3. Advertising monitor.
2025-10-23 09:53:22 +05:30
Zhang Hai Peng
8487639a87
feat(ble/bluedroid): add API to get local BLE IRK
...
(cherry picked from commit 3c68650d7e )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-10-21 17:53:20 +08:00
Zhang Hai Peng
fc1d5a8f9a
fix(ble/bluedroid): fix memory leak during deinit when service table is created but not started
...
(cherry picked from commit ddd12f2498282e147044d1fe532a51aeb18875f9)
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-10-17 16:45:50 +08:00
Island
d4a52b13f2
Merge branch 'bugfix/fix_ble_deinit_crash_v5.5' into 'release/v5.5'
...
fix(ble/bluedroid): prevent crash when deinit/disable host during scan (v5.5)
See merge request espressif/esp-idf!42600
2025-10-16 19:45:54 +08:00
Shreeyash
944e2527d1
fix(nimble): fix array overflow caused by invalid connection handle indexing
2025-10-15 15:59:41 +05:30
Zhang Hai Peng
cd793de75a
fix(ble/bluedroid): prevent crash when deinit/disable host during scan
...
Crash occurs if the BLE host is deinitialized or disabled while scanning is still active.
This usage is not recommended.
(cherry picked from commit ca2c78f53e )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-10-14 21:53:52 +08:00
Zhang Hai Peng
181cd0bee9
fix(ble/bluedroid): Fixed resolve adv data crash if host deinitialized or disabled
...
(cherry picked from commit 7ce921ed95 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-10-14 21:53:50 +08:00
Rahul Tank
126b8f8789
fix(nimble): Added CS service support
2025-10-14 16:41:02 +05:30
Rahul Tank
5652984db9
feat(nimble): Base support for Channel sounding HCI command and events
2025-10-14 12:14:19 +05:30
Rahul Tank
38917f3435
Merge branch 'bugfix/use_nimble_mem_apis_v5.5' into 'release/v5.5'
...
fix(nimble): Use nimble platform mem malloc / free APIs (v5.5)
See merge request espressif/esp-idf!42287
2025-10-14 11:50:34 +05:30