From: Pauli Virtanen <noreply@github.com>
To: linux-bluetooth@vger.kernel.org
Subject: [bluez/bluez] 217bd7: shared/hfp: Add dial support
Date: Mon, 13 Oct 2025 09:15:34 -0700 [thread overview]
Message-ID: <bluez/bluez/push/refs/heads/master/4be243-b3dd59@github.com> (raw)
Branch: refs/heads/master
Home: https://github.com/bluez/bluez
Commit: 217bd72c128a5b9fcb913d0ea18ac503c7bdc82e
https://github.com/bluez/bluez/commit/217bd72c128a5b9fcb913d0ea18ac503c7bdc82e
Author: Frédéric Danis <frederic.danis@collabora.com>
Date: 2025-10-13 (Mon, 13 Oct 2025)
Changed paths:
M src/shared/hfp.c
M src/shared/hfp.h
Log Message:
-----------
shared/hfp: Add dial support
If no number, NULL or empry string, is passed to hfp_hf_dial() this
will try to call the last dialed phone number using AT+BLDN.
If the phone number starts with '>' and is followed by a number nnn…,
up to 10 digits, it will call the phone number in memory entry nnn….
Else it will performed a voice call to the number provided.
Commit: c285274d17085b63d08fc308a27c81225b2d2dd5
https://github.com/bluez/bluez/commit/c285274d17085b63d08fc308a27c81225b2d2dd5
Author: Frédéric Danis <frederic.danis@collabora.com>
Date: 2025-10-13 (Mon, 13 Oct 2025)
Changed paths:
M unit/test-hfp.c
Log Message:
-----------
unit/test-hfp: Add dial tests for HF
This add the following tests:
- /HFP/HF/OCL/BV-01-C
Initiate a call placed to the last number
- /HFP/HF/OCL/BV-02-C
Handling ERROR response to a call placed to last number
- /HFP/HF/OCM/BV-01-C
Initiate a request to place a call with a memory location
- /HFP/HF/OCM/BV-02-C
Handling ERROR response to a call placed to an empty memory location
- /HFP/HF/OCN/BV-01-C
HF places a call with a phone number
Commit: ff984192b4529d6684173fb098e8bd1901932ea6
https://github.com/bluez/bluez/commit/ff984192b4529d6684173fb098e8bd1901932ea6
Author: Frédéric Danis <frederic.danis@collabora.com>
Date: 2025-10-13 (Mon, 13 Oct 2025)
Changed paths:
M src/shared/hfp.c
M src/shared/hfp.h
Log Message:
-----------
shared/hfp: Add in-band ring tone setting support
Commit: fc3aa8a9fd4d06b127b309cbefd98ace719e3bfa
https://github.com/bluez/bluez/commit/fc3aa8a9fd4d06b127b309cbefd98ace719e3bfa
Author: Frédéric Danis <frederic.danis@collabora.com>
Date: 2025-10-13 (Mon, 13 Oct 2025)
Changed paths:
M unit/test-hfp.c
Log Message:
-----------
unit/test-hfp: Add Answer Incoming Call with In-Band Ring tests for HF
This add the following tests:
- /HFP/HF/ICA/BV-01-C
Verify the incoming call is answered from HF, in-band ring tone.
- /HFP/HF/ICA/BV-02-C
Verify that the AG can change its in-band ring tone setting.
- /HFP/HF/ICA/BV-03-C
Verify that the HF alerts of an incoming call using the local ring
signal regardless of the presence of the in-band ring tone.
- /HFP/HF/ICA/BV-04-C-full
duplicate of /HFP/HF/ICA/BV-04-C test with full SLC setup.
/HFP/HF/ICA/BV-05-C (Verify that the HF alerts an incoming call using
a locally generated alert signal and can answer an incoming call in
the AG when the AG does not use an in-band ring tone as an alert
mechanism for the HF and the IUT allows an Audio Connection to be
present) is similar to /HFP/HF/TCA/BV-02-C/HFP/HF/ICA/BV-04-C-full for
the HF side.
Commit: 78c723b4d568444d95e4a4bbec821b41fdce55ec
https://github.com/bluez/bluez/commit/78c723b4d568444d95e4a4bbec821b41fdce55ec
Author: Frédéric Danis <frederic.danis@collabora.com>
Date: 2025-10-13 (Mon, 13 Oct 2025)
Changed paths:
M unit/test-hfp.c
Log Message:
-----------
unit/test-hfp: Add incoming call prior to connection test
This add the following test:
- /HFP/HF/ICA/BV-07-C
Verify that HF can connect to an AG that is receiving an in-coming
call.
Commit: d01da89d6a1de435ad63560e26d442459086a99c
https://github.com/bluez/bluez/commit/d01da89d6a1de435ad63560e26d442459086a99c
Author: Frédéric Danis <frederic.danis@collabora.com>
Date: 2025-10-13 (Mon, 13 Oct 2025)
Changed paths:
M unit/test-hfp.c
Log Message:
-----------
unit/test-hfp: Add incoming call interrupted test
This add the following test:
- /HFP/HF/CIT/BV-01-C
Verify that HF responds as expected when a normal incoming call
process is interrupted from the remote party.
Commit: 49d69b77fd4f2af99de71992b7ca2366b8e57038
https://github.com/bluez/bluez/commit/49d69b77fd4f2af99de71992b7ca2366b8e57038
Author: Pauli Virtanen <pav@iki.fi>
Date: 2025-10-13 (Mon, 13 Oct 2025)
Changed paths:
M src/shared/bap.c
Log Message:
-----------
shared/bap: check pac cc and metadata length before use
Don't read past buffer end if device provided bogus values for PAC
caps/metadata lengths.
Use iov pull properly, and also check metadata LTV validity.
Commit: b3dd599874550ab4793fb369e7c69ed01b284f5b
https://github.com/bluez/bluez/commit/b3dd599874550ab4793fb369e7c69ed01b284f5b
Author: Pauli Virtanen <pav@iki.fi>
Date: 2025-10-13 (Mon, 13 Oct 2025)
Changed paths:
M src/shared/bap.c
Log Message:
-----------
shared/bap: fix crash when setting initial metadata of a stream
bt_bap_stream_metadata() when stream is IDLE causes IDLE->IDLE
transition and crashes due to UAF. This occurs if SelectProperties
provides a Metadata.
Fix by not updating state if stream is IDLE.
Log:
ERROR: AddressSanitizer: heap-use-after-free
READ of size 8 at 0x7ca9d83ec448 thread T0
#0 0x000000927dce in bt_bap_stream_metadata src/shared/bap.c:6525
#1 0x00000056ae75 in setup_config profiles/audio/bap.c:1790
#2 0x00000056b865 in bap_config_setup profiles/audio/bap.c:1831
0x7ca9d83ec448 is located 8 bytes inside of 160-byte region [0x7ca9d83ec440,0x7ca9d83ec4e0)
freed by thread T0 here:
#0 0x7fc9da2e5beb in free.part.0 (/lib64/libasan.so.8+0xe5beb)
#1 0x0000008e3481 in bap_stream_free src/shared/bap.c:1259
#2 0x0000008e4586 in bt_bap_stream_unref src/shared/bap.c:1342
#3 0x0000008e4b6e in bap_ucast_detach src/shared/bap.c:1366
#4 0x0000008e6b63 in bap_stream_state_changed src/shared/bap.c:1496
#5 0x0000008ec17d in bap_ucast_set_state src/shared/bap.c:1857
#6 0x0000008e75e4 in stream_set_state src/shared/bap.c:1543
#7 0x0000008f268c in stream_metadata src/shared/bap.c:2250
#8 0x0000008f2801 in bap_ucast_metadata src/shared/bap.c:2274
#9 0x000000927d3f in bt_bap_stream_metadata src/shared/bap.c:6523
Compare: https://github.com/bluez/bluez/compare/4be24398f9ef...b3dd59987455
To unsubscribe from these emails, change your notification settings at https://github.com/bluez/bluez/settings/notifications
reply other threads:[~2025-10-13 16:15 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=bluez/bluez/push/refs/heads/master/4be243-b3dd59@github.com \
--to=noreply@github.com \
--cc=linux-bluetooth@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox