[bluez/bluez] 73ae3f: shared/gatt-db: fix crash on bad attribute index i...

[bluez/bluez] 73ae3f: shared/gatt-db: fix crash on bad attribute index i...

[Luiz Augusto von Dentz]

  Branch: refs/heads/master
  Home:   https://github.com/bluez/bluez
  Commit: 73ae3fb93d271c1a3536a7a280b911808dc5c9c4
      https://github.com/bluez/bluez/commit/73ae3fb93d271c1a3536a7a280b911808dc5c9c4
  Author: Pauli Virtanen <pav@iki.fi>
  Date:   2025-04-21 (Mon, 21 Apr 2025)

  Changed paths:
    M src/shared/gatt-db.c

  Log Message:
  -----------
  shared/gatt-db: fix crash on bad attribute index in get_char_data

Fix AddressSanitizer: heap-buffer-overflow when index == 0.


  Commit: 578a6fd688b0b90b59ed15aca13d2ae87e91b0a6
      https://github.com/bluez/bluez/commit/578a6fd688b0b90b59ed15aca13d2ae87e91b0a6
  Author: Pauli Virtanen <pav@iki.fi>
  Date:   2025-04-21 (Mon, 21 Apr 2025)

  Changed paths:
    M src/shared/bap.c

  Log Message:
  -----------
  shared/bap: fix crash when removing PAC

When PAC is removed, streams need to go through RELEASING flow, which in
some cases is not immediate. Access to stream->lpac is UAF during this
time, e.g. in profiles/audio/bap.c:bap_find_setup_by_stream

Allow stream->lpac == NULL. This should occur only if stream is
RELEASING.

When releasing streams due to removed PAC, do RELEASING->IDLE as we
can't cache config then.


  Commit: d5ef57305b7943201e7856a8a4470985781e5100
      https://github.com/bluez/bluez/commit/d5ef57305b7943201e7856a8a4470985781e5100
  Author: Pauli Virtanen <pav@iki.fi>
  Date:   2025-04-21 (Mon, 21 Apr 2025)

  Changed paths:
    M profiles/audio/bap.c

  Log Message:
  -----------
  bap: don't track streams without setup except for ucast server

data->streams is is used for determining which streams can connect to
listening socket. This stream list is specific to ucast server.

Rename the variable to data->server_streams, and only put ucast server
streams there.

Fixes data->streams accumulating dead stream pointers.


  Commit: 99deeea86f156d4ab89a3f1edc35f6d1c51d56b6
      https://github.com/bluez/bluez/commit/99deeea86f156d4ab89a3f1edc35f6d1c51d56b6
  Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
  Date:   2025-04-21 (Mon, 21 Apr 2025)

  Changed paths:
    M monitor/packet.c

  Log Message:
  -----------
  btmon: Decode Broadcast Name

This adds support for decoding Broadcast Name:

> HCI Event: LE Meta Event (0x3e) plen 57
      LE Extended Advertising Report (0x0d)
        Num reports: 1
        Entry 0
          Event type: 0x0000
            Props: 0x0000
            Data status: Complete
          Address type: Random (0x01)
          Address: XX:XX:XX:XX:XX:XX (Non-Resolvable)
          Primary PHY: LE 1M
          Secondary PHY: LE 2M
          SID: 0x02
          TX power: 127 dBm
          RSSI: -67 dBm (0xbd)
          Periodic advertising interval: 180.00 msec (0x0090)
          Direct address type: Public (0x00)
          Direct address: 00:00:00:00:00:00 (OUI 00-00-00)
          Data length: 0x1f
        06 16 52 18 2f 92 f3 05 16 56 18 04 00 11 30 4c  ..R./....V....0L
        75 69 7a 27 73 20 53 32 33 20 55 6c 74 72 61     uiz's S23 Ultra
        Service Data: Broadcast Audio Announcement (0x1852)
        Broadcast ID: 15962671 (0xf3922f)
        Service Data: Public Broadcast Announcement (0x1856)
          Data[2]: 0400
        Broadcast Name: Luiz's S23 Ultra


  Commit: e4c1d03ef73c442b3d2414669ed96500cc3227d7
      https://github.com/bluez/bluez/commit/e4c1d03ef73c442b3d2414669ed96500cc3227d7
  Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
  Date:   2025-04-21 (Mon, 21 Apr 2025)

  Changed paths:
    M src/eir.c
    M src/eir.h

  Log Message:
  -----------
  eir: Use Broadcast Name as Device.Name

This makes use of Broadcast Name advertising data field as device name
so it can be identified by upper layer.


  Commit: 3616d514faddcbeb5c222d881007af5903796a29
      https://github.com/bluez/bluez/commit/3616d514faddcbeb5c222d881007af5903796a29
  Author: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>
  Date:   2025-04-22 (Tue, 22 Apr 2025)

  Changed paths:
    A .github/workflows/ci.yml

  Log Message:
  -----------
  workflows: Add CI action

This adds CI action which was previously under BlueZTestBot.


Compare: https://github.com/bluez/bluez/compare/e3c5f6050a8b...3616d514fadd

To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications