Commit Graph

472 Commits

Author SHA1 Message Date
Wang Meng Yang 8c47552a4c Merge branch 'change/bt_bluedroid_avrcp_version_v5.5' into 'release/v5.5'
change(bt/bluedroid): Change AVRCP version according to feature enabled (v5.5)

See merge request espressif/esp-idf!44200
2025-12-26 10:32:43 +08:00
Wang Meng Yang 1e9f63183b Merge branch 'bugfix/l2c_fcr_clone_buf_v5.5' into 'release/v5.5'
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf

See merge request espressif/esp-idf!44263
2025-12-26 10:32:04 +08:00
Island 8789584388 Merge branch 'bugfix/bug_ble_max_device_record_v5.5' into 'release/v5.5'
fix(ble/bluedroid): Fixed BLE incorrect device record count issue (v5.5)

See merge request espressif/esp-idf!43597
2025-12-18 14:29:52 +08:00
Island a63ae743b1 Merge branch 'bugfix/fix_reconnect_failed_with_extend_adv_v5.5' into 'release/v5.5'
fix(ble/bluedroid): Fixed the issue that extend advertising might not restart if the connection fails (v5.5)

See merge request espressif/esp-idf!44251
2025-12-18 14:26:44 +08:00
zhanghaipeng c4cc87501b fix(ble/bledroid): fix codespell issues in bluedroid code 2025-12-17 17:10:58 +08:00
Jin Cheng b70e8ae903 fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf 2025-12-16 11:38:55 +08:00
Zhi Wei Jian 5452adbcb9 fix(ble/bluedroid): Fixed reconnection failed with extend adv
(cherry picked from commit ec4052c1c7125ab1bc4223bc507e6e778d37728c)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2025-12-15 21:23:25 +08:00
linruihao d569b7df6b change(bt/bluedroid): Change AVRCP version according to feature enabled
- Version will be set to 1.6 if Cover Art feature enabled
- Otherwise, version will be set to 1.5
2025-12-12 20:11:15 +08:00
Zhang Hai Peng d28b874e35 fix(ble/bluedroid): Fix security issues in GATT module
(cherry picked from commit f502b2aab1cfd0002f66e5978771ecbd9c1113ed)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:24 +08:00
Zhang Hai Peng 7c7f30aa09 fix(ble/bluedroid): Fix security issues in GAP module
(cherry picked from commit 1ed5a4465dbb0f6a36e0514ad1b2162616d356ca)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:22 +08:00
Zhang Hai Peng 569854b55a fix(ble/bluedroid): Add length check in prepare write response
(cherry picked from commit b03ff3cf218c3974b798a700cf1ede95641fe7af)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:22 +08:00
Zhang Hai Peng 1936ba80d7 fix(ble/bluedroid): Add boundary check for adv_handle in btm_ble_adv_set_terminated_evt
(cherry picked from commit d2baf3b0d4b8695abec90fa3fc1d46ce1bdab47b)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-03 11:54:21 +08:00
Zhang Hai Peng 316c5a589a fix(ble/bluedroid): Fix potential out-of-bounds issue
- add length check in hci_hal_h4_hdl_rx_packet to prevent OOB
- add adv data length check in btm_ble_cache_adv_data
- add indicate data length check in BTA_GATTS_HandleValueIndication
- add report length check in bta_hh_parse_keybd_rpt
- add report length check in BTA_HdSendReport
- add descriptor length check in BTA_HdRegisterApp
- prevent buffer overflow in attribute processing


(cherry picked from commit 71efec78c59ccc3894012797ff6354435e8ed7b9)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-02 00:04:40 +08:00
Zhang Hai Peng 1d22e44e51 fix(ble/bluedroid): Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd
- Reference: https://source.android.com/docs/security/bulletin/2024-03-01?hl=zh-cn


(cherry picked from commit e1d39f630f7a5a8a3390429c42cd53329c4d0bb3)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-02 00:04:40 +08:00
Zhang Hai Peng 131322d502 fix(ble/bluedroid): Fixed missing BLE connect and disconnect events
(cherry picked from commit 2dcbd64616a27668e6f2f7083681452b36091b24)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-11-21 21:53:24 +08:00
liqigan 38ea9357b8 fix(bt/bluedroid): Fixed HID memory leak 2025-11-13 17:44:14 +08:00
JinCheng 79ae28fbb7 fix(bt/bluedroid): update the COD before enabling inquiry scan 2025-11-11 16:17:30 +08:00
Jin Cheng b9ba1e29b6 fix(bt/bluedroid): fixed potential OOB in AVRCP vendor command composition 2025-10-28 10:17:04 +08:00
Zhang Hai Peng 8487639a87 feat(ble/bluedroid): add API to get local BLE IRK
(cherry picked from commit 3c68650d7e0853ad8880db1608c35007c8edf1af)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-10-21 17:53:20 +08:00
Zhang Hai Peng fc1d5a8f9a fix(ble/bluedroid): fix memory leak during deinit when service table is created but not started
(cherry picked from commit ddd12f2498282e147044d1fe532a51aeb18875f9)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-10-17 16:45:50 +08:00
Zhang Hai Peng 181cd0bee9 fix(ble/bluedroid): Fixed resolve adv data crash if host deinitialized or disabled
(cherry picked from commit 7ce921ed95b85ec94b6b2f3542548aa589d77bf8)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-10-14 21:53:50 +08:00
yangfeng 1f4e41d2ac fix(bt/bluedroid): Fix the boundary conditions when checking EIR data 2025-10-13 11:43:50 +08:00
JinCheng c3efac4608 fix(bluedroid): removed the code relying on compiler-specific extension for FAM in union 2025-09-27 11:31:05 +08:00
JinCheng 999710fccf fix(bt/bluedroid): fixed potential OOB in Bluedroid 2025-09-26 17:28:55 +08:00
Island 56bef4d352 Merge branch 'bugfix/ble_enhanced_security_v2_v5.5' into 'release/v5.5'
fix(ble/bluedroid): Fixed potential out-of-bounds memory access when resolve adv data (v5.5)

See merge request espressif/esp-idf!41307
2025-09-22 10:27:27 +08:00
Island ba4300c226 Merge branch 'feat/support_cble50y24_108_v5.5' into 'release/v5.5'
Support multi-connection optimization and examples on Bluedroid (v5.5)

See merge request espressif/esp-idf!41200
2025-09-04 12:02:33 +08:00
Wang Meng Yang eef2fef386 Merge branch 'bugfix/check_bd_addr_only_for_bredr_v5.5' into 'release/v5.5'
fix(bt): check bd address only for bredr in bluedroid host l2cu_allocate_lcb() (v5.5)

See merge request espressif/esp-idf!41361
2025-09-02 14:07:39 +08:00
yangfeng 1cd73de8d9 fix(bt/bluedroid): Prevent out-of-bounds access and add type check when resolving EIR data 2025-08-20 14:30:46 +08:00
Shen Wei Long 320041a560 fix(bt): check bd address only for bredr in bluedroid host l2cu_allocate_lcb()
(cherry picked from commit 61c13ef8495537923dc179952d94e80cf4ae6902)

Co-authored-by: Shen Weilong <shenweilong@espressif.com>
2025-08-18 13:23:33 +00:00
Zhang Hai Peng 91ef2747b6 fix(ble/bluedroid): Fixed potential out-of-bounds memory access when resolve adv data
(cherry picked from commit 12df54e8d16486fcba8263b8f2b9b8d3a8992703)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-08-15 14:54:07 +08:00
Chen Jian Hua df8533a46e fix(ble/bluedroid): Fixed the connection count limit in multi-connection
(cherry picked from commit 437aba16538befa48ae0136d6944bf8e36b13500)

Co-authored-by: chenjianhua <chenjianhua@espressif.com>
2025-08-12 21:34:07 +08:00
Chen Jian Hua 4eee831831 fix(bt/bluedroid): adjust L2CAP round robin msg send strategy
(cherry picked from commit 2ccae5330e4ce172d92aadd00427ee3f6e7f8bc7)

Co-authored-by: xuzhekai <xuzhekai@espressif.com>
2025-08-12 21:34:04 +08:00
Zhang Hai Peng 5cf3be2eae fix(ble/bluedroid): Fixed fail to disconnect when device record is cleared
(cherry picked from commit b6dc79af47f7a1fbed0e1193666a5470871344bb)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-07-25 21:54:16 +08:00
Zhang Hai Peng e95dfc2964 fix(ble/bluedroid): fix incorrect resolving_list_avail_size update
(cherry picked from commit ac385530af62db2933fae3d5aa0bba41fa476f0c)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-07-25 21:54:14 +08:00
Zhang Hai Peng 24ea9693ce fix(ble/bluedroid): ensure resolving list is updated when the oldest device is removed
(cherry picked from commit 61606a6f95da8e291fe6d55ea8b336467626e69b)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-07-25 21:54:11 +08:00
Zhang Hai Peng 7c757b7f45 fix(ble/bluedroid): Fix issue causing BTM_GetSecurityFlags failed
(cherry picked from commit 48235c7b2501066646468b335a4aff72b5d08b3e)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-07-25 21:54:09 +08:00
Jiang Jiang Jian 7b1cbb89e0 Merge branch 'bugfix/fix_blecibr25_119_v5.5' into 'release/v5.5'
fix(ble/bluedroid): Fixed extended adv restart failure during reconnection (v5.5)

See merge request espressif/esp-idf!39778
2025-06-17 14:34:03 +08:00
Jiang Jiang Jian 624175fc01 Merge branch 'bugfix/fix_ble_smp_fail_0x82_v5.5' into 'release/v5.5'
Bugfix/fix ble smp fail 0x82 (v5.5)

See merge request espressif/esp-idf!39663
2025-06-17 14:08:19 +08:00
Jiang Jiang Jian 9a74093e98 Merge branch 'bugfix/fix_ble_crash_when_check_send_pkts_v5.5' into 'release/v5.5'
fix(ble/bluedroid): Fixed null pointer assert in l2c_link_check_send_pkts (v5.5)

See merge request espressif/esp-idf!39599
2025-06-17 14:05:04 +08:00
Jiang Jiang Jian 0ea73a9273 Merge branch 'fix/incorrect_setting_of_sco_packet_type_mask_v5.5' into 'release/v5.5'
fix(bt): fixed incorrect mask was used to exclude sco packets (backport v5.5)

See merge request espressif/esp-idf!39499
2025-06-17 14:02:09 +08:00
chenjianhua e22c523b55 feat(ble/bluedroid): Support anonymous address type for white list 2025-06-13 10:31:52 +08:00
chenjianhua 7c2734dc02 feat(ble/bluedroid): Add config for BLE vendor hci command and event 2025-06-13 10:31:52 +08:00
chenjianhua 9e7325a3d6 feat(ble/bluedroid): Support BLE vendor event reporting with params 2025-06-13 10:31:52 +08:00
Chen Jian Hua 29ba5469ef fix(ble/bluedroid): Fixed extended adv restart failure during reconnection
(cherry picked from commit 63921808132204bb5d40644c6d19d70afd1cd8e8)

Co-authored-by: chenjianhua <chenjianhua@espressif.com>
2025-06-13 10:31:52 +08:00
Zhang Hai Peng f19263a97c fix(ble/bluedroid): Fixed BLE SMP state machine inconsistency on disconnection
(cherry picked from commit 99121258d40bb2940555dd1014b9f66ceb4d98ca)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-06-04 17:13:49 +08:00
Zhang Hai Peng 30859ceaff fix(ble/bluedroid): Fixed null pointer assert in l2c_link_check_send_pkts
(cherry picked from commit 815057301208c2e6c07af58633bd94526096610a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-06-03 12:13:42 +08:00
gongyantao fddf34d7b0 fix(bt): fixed incorrect mask was used to exclude sco packets 2025-05-29 09:55:35 +08:00
Zhang Hai Peng d7216d221b fix(ble/bluedroid): Fixed clear BLE device recored
(cherry picked from commit 21391a45fd4252c41818451da5cbe81338c633b5)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-05-27 15:14:02 +08:00
Zhang Hai Peng 80c5fd1836 fix(ble/bluedroid): Fixed issue with deleting link key when classic Bluetooth is not used
(cherry picked from commit 7c16bce827002efa68c80860e018841133cb4c08)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-05-27 15:13:59 +08:00
Zhang Hai Peng 70f19793f8 fix(ble/bluedroid): Change maximum length of attribute value to 517
(cherry picked from commit df8c1f7a96a42010349171819ba984916b997db2)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-05-13 16:14:25 +08:00