Commit Graph
5431 Commits
Author SHA1 Message Date
Island b31538482f Merge branch 'fix/ble_log_compression_add_local_header_file_v5.3' into 'release/v5.3'
feat(ble_log): mirror local compression headers (5.3)

See merge request espressif/esp-idf!50949
2026-08-04 19:48:16 +08:00
Rahul Tank 9febc03831 Merge branch 'bugfix/add_nimble_cve_v5.3' into 'release/v5.3'
fix(nimble): Fixes for various NimBLE CVEs (v5.3)

See merge request espressif/esp-idf!51204
2026-08-04 12:17:23 +05:30
Wang Meng Yang f0407c5a38 Merge branch 'fix/aireview_critical_v5.3' into 'release/v5.3'
fix: Fix some critical bugs in classic bt (v5.3)

See merge request espressif/esp-idf!51292
2026-08-04 14:15:49 +08:00
Wang Meng Yang b723d09933 Merge branch 'fix/bluedroid_aireview_v5.3' into 'release/v5.3'
Fix/bluedroid aireview (v5.3)

See merge request espressif/esp-idf!51297
2026-08-04 14:12:13 +08:00
Luo Xu d6eed489b0 feat(ble_log): mirror local compression headers
(cherry picked from commit ee732a4591)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-08-04 11:57:57 +08:00
Rahul Tank 9a36f17232 fix(nimble): Fixes for various NimBLE CVEs 2026-08-03 23:49:23 +05:30
Island 5a4288e8ff Merge branch 'fix/ble_log_compression_issue_on_windows_v5.3' into 'release/v5.3'
fix(bt): fix BLE log compression build on Windows (5.3)

See merge request espressif/esp-idf!51243
2026-08-03 11:31:23 +08:00
Island b01be03a5a Merge branch 'feat/update_mesh_lib_to_supported_get_lib_ver_v5.3' into 'release/v5.3'
Feat/update mesh lib to supported get lib ver (5.3)

See merge request espressif/esp-idf!51170
2026-08-03 11:30:38 +08:00
Rahul Tank 1f314eff3e fix(nimble): Deliver PAwR peripheral CONNECT via sync callback 2026-07-30 16:35:02 +05:30
hejiaxin 5b5e80c12a fix(bt_stack): Fix some critical bugs in classic_bt stack
related: obex, smp, pbap, sdp, rfcomm, stack_dm

- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
2026-07-30 17:44:37 +08:00
Island 7a1c86344a Merge branch 'change/ble_update_lib_20260717_v5.3' into 'release/v5.3'
change(ble): [AUTO_MR] 20260717 - Update ESP BLE Controller Lib (5.3)

See merge request espressif/esp-idf!50929
2026-07-30 10:08:02 +08:00
Jin Cheng 28b00497ee fix(bt/bluedroid): fixed incorrect eSCO packet type validation under secure connection mode in BlueDroid 2026-07-29 17:30:36 +08:00
hejiaxin 95b9d9c961 fix(bt): Fix some bug in stm_sco.c
- Memory safety
- State machine & logic integrity
- Resource leaks
- Edge cases check
2026-07-29 17:30:36 +08:00
Rahul Tank 2ccfcc7066 fix(nimble): update sbom file with cve details 2026-07-29 12:53:31 +05:30
Island 6e1600f2f9 Merge branch 'feat/add_bt_common_npl_v5.3' into 'release/v5.3'
feat(bt): Add host-agnostic BT OSAL and shared BLE profile task (5.3)

See merge request espressif/esp-idf!51217
2026-07-29 15:00:21 +08:00
Jin Chen eeecd45929 change(ble): [AUTO_MR] Update lib_esp32c6 to 18aafc6f
(cherry picked from commit 624845829a)

Co-authored-by: cjin <jinchen@espressif.com>
2026-07-29 08:42:09 +08:00
Jin Chen 8cdb74f49d change(ble): [AUTO_MR] Update lib_esp32h2 to 18aafc6f
(cherry picked from commit d7b7876c3c)

Co-authored-by: cjin <jinchen@espressif.com>
2026-07-29 08:42:09 +08:00
Wang Meng Yang 9079e1473a Merge branch 'bugfix/ai_review_avrcp_v5.3' into 'release/v5.3'
fix(bt): Fix the critical and high issues related to AVRCP from AI review report (v5.3)

See merge request espressif/esp-idf!50023
2026-07-28 19:59:39 +08:00
Wang Meng Yang d9f2d61539 Merge branch 'bugfix/hid_host_oob_read_v5.3' into 'release/v5.3'
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act (v5.3)

See merge request espressif/esp-idf!50975
2026-07-28 19:52:02 +08:00
Wang Meng Yang e13cc8ef6f Merge branch 'bugfix/bredr_critical_bugs_v5.3' into 'release/v5.3'
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI (v5.3)

See merge request espressif/esp-idf!51081
2026-07-28 19:43:58 +08:00
Luo Xu e2fbba666a fix(bt): fix BLE log compression build on Windows
The BLE log compression feature (CONFIG_BT_LOG_CRITICAL_ONLY ->
BLE_COMPRESSED_LOG_ENABLE) failed to build on Windows while working
correctly on Linux, due to two shell/platform-specific issues in the
compression script.

1. Module/source argument quoting. CMakeLists.txt passes the
   semicolon-separated module and source lists wrapped in single quotes
   ("'${MODULES}'") to protect ';' from POSIX shells, which strip them.
   cmd.exe does not treat single quotes as quoting characters, so on
   Windows the quotes reached the script literally and
   args.module.split(';') produced "'BLE_MESH" / "BLE_HOST'" instead of
   the clean names. These never matched the YAML module keys, every
   module was skipped ("Skipping module ... - config not found"), the
   compressed sources were never generated, and the build failed. Strip
   surrounding quote characters before splitting; this is a no-op on
   Linux/macOS where the shell already removed them.

2. CRLF line endings. With core.autocrlf=true the IDF sources are
   checked out as CRLF on Windows. The generated *_log_index.h macros
   use backslash-newline line-continuation; a backslash followed by
   '\r\n' is not a valid continuation in C, producing floods of syntax
   errors when the header is compiled. Write generated headers with
   newline='' to force LF, and normalize source content to LF right
   after reading so '\r' embedded inside multi-line argument expressions
   is also handled. Byte offsets stay consistent because both tree-sitter
   parsing and tag replacement operate on the normalized content.

Verified by full clean builds of examples/bluetooth/esp_ble_mesh/
vendor_models/vendor_client (esp32c6, bluedroid + mesh) from both
cmd.exe and PowerShell; both produce an identical vendor_client.bin.


(cherry picked from commit aa9b565a6d)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-28 13:43:33 +08:00
luoxu eada85080b feat(ble_mesh): update lib to 79e3fee04e 2026-07-28 12:12:30 +08:00
chenjianhua 67960f06d7 feat(bt): Add host-agnostic BT OSAL and shared BLE profile task
- Add bt_osal: event queues, mutexes, semaphores, callouts, etc.
- Add the shared BLE profile task and event queue
- Bring both up and tear them down in the host init/deinit paths
- Add unit tests for the OSAL and the profile task
2026-07-27 19:52:30 +08:00
Luo Xu ad9f88b13f feat(ble_mesh): supported get lib version
(cherry picked from commit 56f78da32c)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-27 10:03:12 +08:00
Shreeyash Bhakare f2b7aa1db8 fix(nimble): Added security related fixes 2026-07-25 13:48:33 +05:30
Astha Verma 8025ab856c fix(nimble): Restore throughput after switching from LE Coded PHY 2026-07-24 18:08:38 +05:30
Rahul Tank 7ec47c264d Merge branch 'bugfix/red_rem_feat_evt_v5.3' into 'release/v5.3'
Handle Read Remote Supported Feature failure (v5.3)

See merge request espressif/esp-idf!50812
2026-07-24 14:28:47 +05:30
Jiang Jiang Jian 8363d0e4d1 Merge branch 'bugfix/a2dp_sbc_v5.3' into 'release/v5.3'
fix(bt): Fix the pointer sbc_start_frame is not initialized (v5.3)

See merge request espressif/esp-idf!51020
2026-07-24 16:02:04 +08:00
Island 7efbfbb0a1 Merge branch 'fix/ble_hidd_remove_ccc_gating_v5.3' into 'release/v5.3'
fix(esp_hid/bluedroid): remove app-layer CCC gating in HID device (5.3)

See merge request espressif/esp-idf!51004
2026-07-23 19:26:18 +08:00
Wang Meng Yang 9c15348402 Merge branch 'bugfix/low_spp_throughput_v5.3' into 'release/v5.3'
change(bt/bluedroid): increased port low watermark of RFCOMM (v5.3)

See merge request espressif/esp-idf!51087
2026-07-23 16:41:33 +08:00
Luo XuandWang Mengyang 7d95ac9de6 fix(bt): Fixed build error on array-bounds in HFP AG
(cherry picked from commit bbd20cae01)

Co-authored-by: Wang Mengyang <wangmengyang@espressif.com>
2026-07-23 16:17:45 +08:00
Island 8f897fb259 Merge branch 'fix/ble_log_compression_safety_v5.3' into 'release/v5.3'
fix(ble_log): fix unaligned access and buffer safety in log compression (5.3)

See merge request espressif/esp-idf!47928
2026-07-23 14:22:57 +08:00
Jin Cheng ed20c79614 change(bt/bluedroid): increased port low watermark of RFCOMM
When PORT_RX_BUF_LOW_WM is too low, RFCOMM replenishes credits only
after receiving a relatively large number of packets, which may cause
the peer to exhaust its credits and enter a stop-and-wait state.
Increase the low watermark to replenish credits more promptly and
reduce the likelihood of the peer stalling while waiting for additional
credits.
2026-07-23 08:11:29 +08:00
Jin Cheng d70a124dec fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI 2026-07-23 07:53:22 +08:00
yangfeng ff7ce10233 fix(bt): Fix the high issues related to AVRCP from AI review report
- SDP/registration: handle SDP record creation and discovery failures safely
- AVRC stack: fix packet checks, fragment leaks, response build, and compile guards
- BTC AVRCP: fix return codes, connection state, metadata parsing, and memory leaks
- AVCTP: fix event passing, L2CAP conflicts, TX queue leaks, and disconnect handling
- Example: remove TG RN capability setup before initialization
2026-07-22 17:33:27 +08:00
yangfeng 3138799982 fix(bt): Fix the critical issues related to AVRCP from AI review report
- recalculate len_left per attribute in avrc_bld_app_setting_text_rsp
- abort fragmented message reassembly when reassembly buffer alloc fails
2026-07-22 17:32:28 +08:00
Astha Verma 75fd7a08cc fix(nimble): Handle Read Remote Supported Features failure correctly 2026-07-22 12:21:07 +05:30
Zhou Xiao f0be40c78e fix(bt): keep BLE log ISR state in internal RAM
(cherry picked from commit 2fa434eb50)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2026-07-21 19:44:12 +08:00
yangfeng dac2ceaaa5 fix(bt): Fix the pointer sbc_start_frame is not initialized
- Closes https://github.com/espressif/esp-idf/issues/18835
2026-07-21 16:10:31 +08:00
luoxu 97ffb2db24 fix(bt): reorder test imports to satisfy pre-commit 2026-07-21 15:33:27 +08:00
luoxu 55a58720d9 fix(ble_log): use typing.Optional/List for Python 3.9 compatibility 2026-07-21 14:17:49 +08:00
Luo Xu b57260f260 fix(ble_log): fix size_info nibble misalignment for last odd-count arg
(cherry picked from commit f5a927e055)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-21 14:17:49 +08:00
Luo Xu 215e6f5aa0 test(ble): add comprehensive test suite for log compression
(cherry picked from commit 58121d2540)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-21 14:17:49 +08:00
Luo Xu 5be9215c10 fix(ble): replace hardcoded tuple indices with FormatToken NamedTuple
(cherry picked from commit b7760a77e4)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-21 14:17:49 +08:00
Luo Xu 9f0c244082 fix(ble_log): fix unaligned access and buffer safety in log compression
(cherry picked from commit 3f2b6c97f8)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-21 14:17:49 +08:00
Zhang Hai Peng 4128693b65 fix(ble/bluedroid): track ext scan state for rand addr check
Update inq_var.state only after btsnd_hcic_ble_ext_scan_enable succeeds.
Clear BTM_BLE_SCANNING on explicit stop and controller scan timeout.


(cherry picked from commit 23519567e4)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-21 10:53:23 +08:00
Zhang Hai Peng fb335e73cc change(ble/bluedroid): disable host trace logs when BLE Log host is off
Default all Bluedroid layer trace levels to NONE when BLE async log
is enabled without BLE_LOG_HOST_LOG.


(cherry picked from commit 1f8f935e3f)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-21 10:44:05 +08:00
Island 9f583bc39b Merge branch 'feat/ble_log_compression_module_cfg_update_v5.3' into 'release/v5.3'
Feat/ble log compression module cfg update (5.3)

See merge request espressif/esp-idf!49872
2026-07-20 21:40:58 +08:00
Jin Cheng 08881943c9 fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act
Closes SEC-786
2026-07-20 16:40:24 +08:00
Island fa6f2b6133 Merge branch 'bugfix/fix_bluedroid_read_multi_v5.3' into 'release/v5.3'
fix(ble/bluedroid): fix GATT Read Multiple response handling (5.3)

See merge request espressif/esp-idf!50706
2026-07-20 10:37:20 +08:00