Commit Graph

35317 Commits

Author SHA1 Message Date
Jin Cheng 3ab391c7ae fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete 2025-12-30 16:11:13 +08:00
Jin Cheng 3e299a98ec fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete 2025-12-30 16:11:13 +08:00
Jin Cheng 89464b8a0f fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete 2025-12-30 16:11:13 +08:00
Jin Cheng 3e6a58c3d4 fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete 2025-12-30 16:11:13 +08:00
Jin Cheng 1ff7ffcaf8 fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute 2025-12-30 16:11:13 +08:00
Jin Cheng 8db0476935 fix(bt/bluedroid): report failure when not able to connect to AVRCP 2025-12-30 16:11:13 +08:00
Jin Cheng c721860460 fix(bt/bluedroid): fixed buffer overflow in BRSF 2025-12-30 16:11:12 +08:00
Jin Cheng 75ab59be87 fix(bt/bluedroid): added negative length check in process_service_search_rsp 2025-12-30 16:11:12 +08:00
Jin Cheng 71f54659ef fix(bt/bluedroid): fixed OOB read in SDP server continuation length 2025-12-30 16:11:12 +08:00
Jin Cheng fa0e1e7f8d fix(bt/bluedroid): added length check when copy AVDTP packet 2025-12-30 16:11:12 +08:00
Jin Cheng bf33651386 fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET 2025-12-30 16:11:12 +08:00
Jin Cheng b109d3442d fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item 2025-12-30 16:11:12 +08:00
Jin Cheng 930863a8f4 fix(bt/bluedroid): added boundary check when reading SDP attribute response packet 2025-12-30 16:11:12 +08:00
Jin Cheng dc8852bb6a fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp 2025-12-30 16:11:12 +08:00
Jin Cheng 88c149ee65 fix(bt/bluedroid): fixed potential OOB read in the reporting handler
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-30 16:11:12 +08:00
Jin Cheng 83b7ddc675 fix(bt/bluedroid): fixed a potential overflow about the media payload offset
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-30 16:11:12 +08:00
Jin Cheng 9eb724a37e fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open 2025-12-30 16:11:12 +08:00
Jin Cheng a44673dd7f fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected 2025-12-30 16:11:12 +08:00
Jin Cheng 6daeef22c5 fix(bt/bluedroid): reject device with same address in legacy paring 2025-12-30 16:11:12 +08:00
Jin Cheng 3dbada70a4 fix(bt/bluedroid): ignore AVCT commands that are too long 2025-12-30 16:11:12 +08:00
Jin Cheng de0ad15aa3 fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP 2025-12-30 16:11:12 +08:00
Jin Cheng 0101b834a3 fix(bt/bluedroid): make sure SDP only start discovery once 2025-12-30 16:11:12 +08:00
Jin Cheng 91b233b783 fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write 2025-12-30 16:11:12 +08:00
Jin Cheng a0a11bc6ab fix(bt/blurdoird): check Classic key before cross-key derivation 2025-12-30 16:11:12 +08:00
Jin Cheng 60df7ff885 fix(bt/blurdoird): enable bitpool snity checks 2025-12-30 16:11:12 +08:00
Jiang Jiang Jian 6ebff33277 Merge branch 'bugfix/modem_rf_flag_clear_failed_esp32c6_v5.1' into 'release/v5.1'
fix: clear modem RF flag before PMU sleep to prevent open rf failed on next wake-up V5.1

See merge request espressif/esp-idf!44651
2025-12-30 15:11:08 +08:00
Jiang Jiang Jian ac7dabaf5a Merge branch 'bugfix/sae_h2e_nvs_default_v5.1' into 'release/v5.1'
fix(esp_wifi): Set default NVS sae pwe value to SAE_PWE_BOTH for ap and station

See merge request espressif/esp-idf!44650
2025-12-30 12:33:19 +08:00
Island bc4128db61 Merge branch 'docs/update_6.0_ble_feature_status_v5.1' into 'release/v5.1'
docs(ble): Added BLE 6.0 features support status (v5.1)

See merge request espressif/esp-idf!42185
2025-12-30 11:07:23 +08:00
Jiang Jiang Jian 89fd89af5e Merge branch 'fix/ot_used_wrong_nvs_open_api_v5.1' into 'release/v5.1'
fix(openthread): open nvs from the configured partition (v5.1)

See merge request espressif/esp-idf!44031
2025-12-30 10:37:52 +08:00
Jiang Jiang Jian 4a2973eea6 Merge branch 'change/remove_unused_marco_defines_for_rssi_limit_v5.1' into 'release/v5.1'
change(bt): Mark RSSI threshold-related macros as deprecated(backport v5.1)

See merge request espressif/esp-idf!44517
2025-12-30 10:08:45 +08:00
Shreyas Sheth 1fab1a9306 fix(esp_wifi): Set default NVS sae pwe value to SAE_PWE_BOTH for ap and station 2025-12-29 19:18:16 +05:30
Jiang Jiang Jian 8e542979e4 Merge branch 'bugfix/fix_vendor_ie_and_espnow_issues_v5.1' into 'release/v5.1'
fix vendor ie and espnow issues (v5.1)

See merge request espressif/esp-idf!44635
2025-12-29 21:41:08 +08:00
sibeibei 0666a8df90 fix: clear modem RF flag before PMU sleep to prevent open rf failed on next wake-up 2025-12-29 21:39:15 +08:00
zwx 1f0845e8cb fix(openthread): open nvs from the configured partition 2025-12-29 20:17:35 +08:00
Jiang Jiang Jian 08bd69b3ff Merge branch 'fix/freertos_delete_block_tasks_test_v5.1' into 'release/v5.1'
test(freertos): Added stability fixes to the delete blocked tasks test (v5.1)

See merge request espressif/esp-idf!44489
2025-12-29 20:02:43 +08:00
Jiang Jiang Jian e00a513409 Merge branch 'fix/add_soc_caps_for_pawr_feat_v5.1' into 'release/v5.1'
fix(ble): add soc caps feat for PAwR (v5.1)

See merge request espressif/esp-idf!44146
2025-12-29 20:02:22 +08:00
Jiang Jiang Jian 21b65cd736 Merge branch 'fix/fix_pawr_crash_errors_v5.1' into 'release/v5.1'
fix(ble): fix hci log malloc failure crash

See merge request espressif/esp-idf!44119
2025-12-29 20:02:04 +08:00
Jiang Jiang Jian b120dad371 Merge branch 'change/ble_update_lib_20251202_v5.1' into 'release/v5.1'
change(ble): [AUTO_MR] 20251202 - Update ESP BLE Controller Lib (v5.1)

See merge request espressif/esp-idf!44015
2025-12-29 20:01:31 +08:00
Jiang Jiang Jian 1b81a5ee84 Merge branch 'bugfix/iperf_sta_retry_cnt_v5.1' into 'release/v5.1'
fix(wifi): Add max retry count for iperf station command (Backport v5.1)

See merge request espressif/esp-idf!43910
2025-12-29 19:55:56 +08:00
Wei Yuhan b10d57f970 docs(ble): Added BLE 6.0 features support status 2025-12-29 18:50:07 +08:00
zhangyanjiao e61566c8e5 fix(wifi): fixed the vendor ie length issue 2025-12-29 15:30:00 +08:00
zhangyanjiao da76ce2fe2 fix(wifi): fixed the vendor ie issue and espnow issue 2025-12-29 15:29:08 +08:00
Jiang Jiang Jian fc83f40eb5 Merge branch 'bugfix/l2c_fcr_clone_buf_v5.1' into 'release/v5.1'
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf

See merge request espressif/esp-idf!44267
2025-12-29 10:23:32 +08:00
Jiang Jiang Jian 635e9dc5be Merge branch 'bugfix/invalid_memory_access_supplicant_v5.1' into 'release/v5.1'
fix(esp_wifi): Fix some invalid memory access (v5.1)

See merge request espressif/esp-idf!44359
2025-12-29 10:22:22 +08:00
Jiang Jiang Jian ce5507d61d Merge branch 'refactor/split_a2dp_sink_v5.1' into 'release/v5.1'
refactor(examples/classic_bt): Split a2dp_sink example(v5.1)

See merge request espressif/esp-idf!44527
2025-12-29 10:21:03 +08:00
yangfeng a56fac5bba refactor(examples/classic_bt): Add example tests for A2DP and AVRCP examples 2025-12-25 11:15:27 +08:00
yangfeng e92eeadb2e docs: Add explanations for the A2DP sink stream and AVRCP examples
- Modify the path of A2DP sink example
2025-12-25 11:15:27 +08:00
yangfeng e78eea1874 refactor: Refactor the example of the coexistence of A2DP sink and GATT service 2025-12-25 11:12:49 +08:00
yangfeng 6a1be1ac90 refactor(examples/classic_bt): Refactor A2DP sink and AVRCP examples
- Add avrcp_ct_metadata example
- Add avrcp_absolute_volume example
- Add the example components about common code for a2dp sink and avrcp
2025-12-25 11:12:19 +08:00
Sudeep Mohanty ef14b4984e test(freertos): Added stability fixes to the delete blocked tasks test 2025-12-24 08:10:50 +01:00