1998865680
feat(nimble): Support for getting the local IRK and Identity Address (v5.4)
2026-01-02 11:18:02 +05:30
ee9a372941
Merge branch 'feat/support_bluedroid_host_pawr_v5.4' into 'release/v5.4'
...
feat(ble/bluedroid): Add bluedroid host PAwR and Advertising Coding Selection features (backport v5.4)
See merge request espressif/esp-idf!44660
2025-12-31 11:40:57 +08:00
876a32678e
Merge branch 'bugfix/rebased_mem_optimization_v5.4' into 'release/v5.4'
...
fix(nimble): Memory optimization + dynamic memory support (v5.4)
See merge request espressif/esp-idf!44232
2025-12-30 11:51:00 +05:30
3faa799eef
fix(ble/bluedroid): Fixed CTE IQ sample data copy error
2025-12-30 11:29:22 +08:00
9bf0a8984f
fix(ble/bluedroid): Optimize some bluedroid code
2025-12-30 11:29:12 +08:00
5dbfb083fc
fix(ble/bluedroid): Fixed big event status error
2025-12-30 11:29:01 +08:00
ba96bb2c1d
feat(ble/bluedroid): support bluedroid host channel sounding feature
2025-12-30 11:28:50 +08:00
37c75157dc
feat(ble/bluedroid): Supported BLE bluedroid host pawr connection
2025-12-30 11:28:15 +08:00
fff1b9cf31
feat(ble/bluedroid): Support LE Security Levels Characteristic
2025-12-30 10:23:58 +08:00
570e8c2731
feat(ble/bluedroid): Add bluedroid host Advertising Coding Selection feature
2025-12-30 10:23:48 +08:00
a52993a7eb
feat(ble/bluedroid): Add bluedroid host PAwR feature
2025-12-30 10:23:37 +08:00
005d9222cf
fix(nimble): Memory optimization + dynamic memory support
2025-12-24 16:49:34 +05:30
9e14df1c75
feat(ble): supported ble log v2 hci log for Bluedroid host
2025-12-24 17:48:43 +08:00
dc0453d192
feat(ble): supported ble log v2 hci log for NimBLE host
2025-12-24 17:48:31 +08:00
84abf868d1
Merge branch 'fix/gatt_caching_clean_api_malloc_error_v5.4' into 'release/v5.4'
...
fix(nimble): Modify GATT data storage structure in NVS during caching (v5.4)
See merge request espressif/esp-idf!42577
2025-12-24 13:01:13 +05:30
2f648afdde
Merge branch 'change/bt_bluedroid_avrcp_version_v5.4' into 'release/v5.4'
...
change(bt/bluedroid): Change AVRCP version according to feature enabled (v5.4)
See merge request espressif/esp-idf!44201
2025-12-24 14:12:15 +08:00
4bcdbb90c5
fix(nimble): Modify GATT data storage structure in NVS during gatt caching
2025-12-23 21:24:30 +05:30
9e157e314a
feat(nimble): Add support for static passkey
2025-12-22 21:16:35 +05:30
e745ce4473
Merge branch 'bugfix/sync_security_fix_from_flouride_v5.4' into 'release/v5.4'
...
fix: synchronized several security-related fixes from Google Fluoride (v5.4)
See merge request espressif/esp-idf!44408
2025-12-22 11:23:22 +08:00
0fb6be8d87
fix(bt/bluedroid): cleaned the code according to the tool cppcheck
2025-12-19 17:02:01 +08:00
caf1c72daf
fix(bt/bluedroid): fixed possible OOB read in smp_br_data_received
2025-12-19 17:01:59 +08:00
4e708d2ef2
fix(bt/bluedroid): drop connection when atttempting to disable encryption
2025-12-19 17:01:56 +08:00
8f6e0b5a37
fix(bt/bluedroid): fixed an integer overflow bug in attp_build_read_multi_cmd
2025-12-19 17:01:54 +08:00
fe6cf47013
fix(bt/bluedroid): fixed an integer overflow bug in avdt_msg_asmbl
2025-12-19 17:01:52 +08:00
351d21ccf0
fix(bt/bluedroid): fixed an OOB bug in bta_av_setconfig_rej
2025-12-19 17:01:47 +08:00
63bc003841
Merge branch 'feature/extend_h2_conon_num_to_70_v5.4' into 'release/v5.4'
...
change(ble): Updated the maximum number of concurrent connections to 70 on ESP32-H2 (v5.4)
See merge request espressif/esp-idf!43834
2025-12-19 14:31:56 +08:00
cec99a9f9a
fix(bt/bluedroid): fixed an OOB bug in btm_read_rssi_complete
2025-12-19 11:20:20 +08:00
97e382b1b0
fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete
2025-12-19 11:20:20 +08:00
558e02999b
fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete
2025-12-19 11:20:20 +08:00
4a5656b964
fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete
2025-12-19 11:20:20 +08:00
89dbbc6f37
fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete
2025-12-19 11:20:20 +08:00
6d393a43ba
fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute
2025-12-19 11:20:20 +08:00
dc8db250f7
fix(bt/bluedroid): report failure when not able to connect to AVRCP
2025-12-19 11:20:20 +08:00
cca774644e
fix(bt/bluedroid): fixed buffer overflow in BRSF
2025-12-19 11:20:20 +08:00
83a2690415
fix(bt/bluedroid): added negative length check in process_service_search_rsp
2025-12-19 11:20:20 +08:00
611d1236af
fix(bt/bluedroid): fixed OOB read in SDP server continuation length
2025-12-19 11:20:20 +08:00
4d3b4c1d35
fix(bt/bluedroid): added length check when copy AVDTP packet
2025-12-19 11:20:20 +08:00
90049aa7f6
fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET
2025-12-19 11:20:20 +08:00
081aa31e62
fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item
2025-12-19 11:20:20 +08:00
b59d0541a9
fix(bt/bluedroid): added boundary check when reading SDP attribute response packet
2025-12-19 11:20:20 +08:00
866130578f
fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp
2025-12-19 11:20:15 +08:00
d6e6b14236
fix(bt/bluedroid): fixed potential OOB read in the reporting handler
...
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-19 11:19:23 +08:00
5bc344f900
fix(bt/bluedroid): fixed a potential overflow about the media payload offset
...
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-19 11:19:23 +08:00
3619e43002
fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open
2025-12-19 11:19:23 +08:00
f7058fa32e
fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected
2025-12-19 11:19:23 +08:00
0028cb326a
fix(bt/bluedroid): reject device with same address in legacy paring
2025-12-19 11:19:23 +08:00
073965fd31
fix(bt/bluedroid): ignore AVCT commands that are too long
2025-12-19 11:19:23 +08:00
648f0396b8
fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP
2025-12-19 11:19:23 +08:00
0b8f1f0b0c
fix(bt/bluedroid): make sure SDP only start discovery once
2025-12-19 11:19:23 +08:00
44b566ab5e
fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write
2025-12-19 11:19:23 +08:00
Sumeet Singh
Island
Rahul Tank
zhiweijian
Zhou Xiao
Wang Meng Yang
Astha Verma
Jin Cheng