Zhi Wei Jian 5399361622 fix(ble/bluedroid): Fix double-free, exec write, bounds and HCI param checks ...

- gap_ble: add length/attribute checks in gap_proc_write_req
- gatt_cl: set p_cmd->p_cmd=NULL before memset to avoid double-free;
  pending_cl_req %= GATT_CL_MAX_LCB
- gatt_sr: fix exec write zeroed_attrs and offset/len bounds, OOM cleanup
- gatt_sr_hash: null checks for p_attr->p_next, p_data+=2, len==0 in
  gatts_calculate_datebase_hash, gatts_show_local_database
- gatt_utils: explicit return NULL, indent, idx<GATT_MAX_APPS checks,
  len>GATT_MAX_ATTR_LEN, gatt_cleanup_upon_disc dealloc branch
- hciblecmds: length/handle validation in BLE ext adv/BIG sync HCI commands


(cherry picked from commit 1d31286f1a)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>

2026-03-30 16:45:03 +08:00

..

include

fix(ble/bluedroid): disable rsp timer and ind_ack timer

2026-01-07 17:23:18 +08:00

gap_api.c

…

gap_ble.c

fix(ble/bluedroid): Fix double-free, exec write, bounds and HCI param checks

2026-03-30 16:45:03 +08:00

gap_conn.c

fix(bt): fix l2cap malloc fail in throughput test

2026-01-09 06:02:51 +00:00

gap_utils.c

…