| b5c6b1ed |
audio/avdtp: Fix suspending only the first SEID
AVDTP_Suspend can contain several Stream Endpoing IDs to be suspended. |
Luiz Augusto von Dentz |
10 years ago |
2 files, +2, -3 |
| 0d2a9a83 |
tools: Add identifier for Qualcomm Atheros UART devices |
Marcel Holtmann |
10 years ago |
2 files, +2, -0 |
| a44c89df |
doc/pts: Add OPP PTS 6.2 results for Linux
This patch adds test case list and results for OPP profile
tested against Linux-kernel-4.1 (Ubuntu 14.04). |
Gowtham Anandha Babu |
10 years ago |
4 files, +336, -0 |
| b46e6a6a |
src/profile: Add GoepL2CapPsm in SDP record
As per the MAP & PBAP v1.2 SDP table, it should contain the GoepL2CapPsm
in its SDP record. This patch adds the same.
The below test cases verifies the presence of GoepL2CapPsm attribute is
in SDP record.
TC_PSE_CON_BV_02_C - PASS
TC_MSE_CON_BV_02_C - PASS |
Gowtham Anandha Babu |
10 years ago |
1 file, +31, -7 |
| c26aabc5 |
Release 5.33 |
Marcel Holtmann |
10 years ago |
2 files, +7, -1 |
| a67403b3 |
build: Update library version |
Marcel Holtmann |
10 years ago |
1 file, +1, -1 |
| 8b3b2fd9 |
lib: Update company identifiers |
Marcel Holtmann |
10 years ago |
1 file, +50, -0 |
| cb65b949 |
emulator: Add support for ACL data transfer for servers |
Abhirup Ghosh |
10 years ago |
1 file, +7, -0 |
| 1a4d4515 |
tools/rctest: Fix file descriptor leak
Closed the file before returning from do_send function. |
Anchit Narang |
10 years ago |
1 file, +1, -0 |
| 3d751121 |
tools/rctest: Fixed memory leak
Removed dynamic allocation of filename and savefile by strdup.
Instead filename and savefile are directly pointing to the argv element. |
Anchit Narang |
10 years ago |
1 file, +4, -4 |
| e4f0c558 |
Makefile.tools: Move btmgmt to common READLINE section |
Johan Hedberg |
10 years ago |
1 file, +5, -8 |
| 789be3cb |
Fix build with experimental enabled but no readline.
btmgmt requires readline. Protect it under if READLINE. |
Alexis Ballier |
10 years ago |
1 file, +4, -1 |
| f47fd9c8 |
tools/hciconfig:Fixed Memory Leak
Freed memory allocated to structure hci_dev_list_req to avoid memory leak |
Anchit Narang |
10 years ago |
1 file, +3, -0 |
| 95f254e6 |
tools/l2test:Fixed memory leak
Removed dynamic allocation of filename by strdup.
Instead filename is directly pointing to the argv element.
Closed the file before returning from do_send function. |
Anchit Narang |
10 years ago |
1 file, +4, -2 |
| f17d3a2c |
audio/avrcp: Add support for GetTotalNumberOfItems
Added support for AVRCP GetTotalNumberOfItems command to get
total num of items in a folder(with a given scope) prior calling
GetFolderItems to retrieve the content of the folder.
On response, emit PropertyChanged for "NumberOfItems" property on
MediaPlayer1 interface.
HCI Trace:
Channel: 66 len 17 ctrl 0x070c [PSM 27 mode 3] {chan 2}
I-frame: Unsegmented TxSeq 6 ReqSeq 7
AVCTP Browsing: Response: type 0x00 label 6 PID 0x110e
AVRCP: GetTotalNumOfItems: len 0x0007
Status: 0x04 (Success)
UIDCounter: 0x3330 (13104)
Number of Items: 0x0001 (1) |
Bharat Panda |
10 years ago |
3 files, +110, -3 |
| 6b2e4d8b |
core/device: Fix not emitting Paired property
Even if bt_gatt_client fails to discover services it should still call
device_svc_resolved so the Paired propery is updated if pending and the
device is properly stored, and at the end it still calls
browse_request_complete to free up the resources. |
Luiz Augusto von Dentz |
10 years ago |
1 file, +1, -7 |
| 3479664a |
shared/gatt-client: Fix error when no service could be found
In case the remote device has no services available ready callback would
be called with success set to false but in fact it has succeeded it just
did not find anything. |
Luiz Augusto von Dentz |
10 years ago |
1 file, +5, -0 |
| 5c9dc418 |
tools/bneptest: Fix not NULL terminating parsed string
This patch prevents the possible not NULL terminating problem.
ifr_name's array size is IFNAMSIZ. So If bridge has IFNAMSIZ size,
the name string will be not NULL terminating. |
DoHyun Pyun |
10 years ago |
1 file, +1, -1 |
| a5e8a0f2 |
android/pan: Fix not NULL terminating parsed string
This patch prevents the possible not NULL terminating problem.
ifr_name's array size is IFNAMSIZ. So If BNEP_BRIDGE has IFNAMSIZ size,
the name string will be not NULL terminating. |
DoHyun Pyun |
10 years ago |
1 file, +1, -1 |
| 951a43cf |
android/client: Fix memory leak while using realloc()
While reallocating space to store additional "remote device set" using
realloc, if realloc() fails, the original block is left untouched but
reference to that block is lost as NULL is assigned to remote_devices.
The original block needs to be freed before return. |
Atul Rai |
10 years ago |
1 file, +9, -0 |
| 2c4ce67d |
tools/sdptool: Remove unnecessary typecasts
Fixed unnecessary typecasts of malloc return values. |
Atul Rai |
10 years ago |
1 file, +5, -5 |
| 178092f9 |
tools/sdptool: Fix NULL pointer dereference
This patch fixes NULL pointer dereferences in case malloc fails
and returns NULL. |
Atul Rai |
10 years ago |
1 file, +21, -1 |
| 0bd5677f |
android/hal-bluetooth: Fix NULL ptr dereference
Add NULL check on malloc return to fix NULL pointer dereference
in case malloc fails. |
Atul Rai |
10 years ago |
1 file, +6, -0 |
| 360ecd96 |
android/client: Handle failure from malloc() request
In case malloc() request fails, just print error message
and return. Dereferencing reg.mdep_cfg in case of failure
can lead to crash. |
Anupam Roy |
10 years ago |
1 file, +4, -0 |
| 581edd08 |
audio/avrcp: Handle Available Players Changed
Add support to handle AVRCP_EVENT_AVAILABLE_PLAYERS_CHANGED
notification.
- Register notification for "Available Players Changed"
- Send interim and final responses on change in available players.
< ACL data: handle 70 flags 0x00 dlen 18
L2CAP(d): cid 0x0041 len 14 [psm 23]
AVCTP Control: Response : pt 0x00 transaction 13 pid 0x110e
AV/C: Changed: address 0x48 opcode 0x00
Subunit: Panel
Opcode: Vendor Dependent
Company ID: 0x001958
AVRCP: RegisterNotification: pt Single len 0x0001
EventID: 0x0a (EVENT_AVAILABLE_PLAYERS_CHANGED) |
Bharat Panda |
10 years ago |
1 file, +14, -0 |
| 31ada803 |
monitor: Add support for GetTotalNumOfItems
Support for AVRCP Get Total NUmber Of Items added to btmon.
Channel: 66 len 17 ctrl 0x060c [PSM 27 mode 3] {chan 2}
I-frame: Unsegmented TxSeq 6 ReqSeq 6
AVCTP Browsing: Command: type 0x00 label 6 PID 0x110e
AVRCP: GetTotalNumOfItems: len 0x000b
Scope: 0x01 (Media Player Virtual Filesystem)
Channel: 66 len 17 ctrl 0x070c [PSM 27 mode 3] {chan 2}
I-frame: Unsegmented TxSeq 6 ReqSeq 7
AVCTP Browsing: Response: type 0x00 label 6 PID 0x110e
AVRCP: GetTotalNumOfItems: len 0x0007
Status: 0x04 (Success)
UIDCounter: 0x332e (13102)
Number of Items: 0x0001 (1) |
Bharat Panda |
10 years ago |
1 file, +54, -0 |
| 779c9cc8 |
tools/l2test: Fix potential double close
If the test gets an error after close the socket, the socket sk
will be closed again. This patch prevents the double close case. |
DoHyun Pyun |
10 years ago |
1 file, +1, -1 |
| a0fd2e44 |
tools/obex-client-tool.c: Fix memory leak in obex-client-tool
GOptionContext object should be freed in case socket connection
fails and program execution is terminated.
==12968== HEAP SUMMARY:
==12968== in use at exit: 2,895 bytes in 14 blocks
==12968== total heap usage: 23 allocs, 9 frees, 36,669 bytes allocated
==12968==
==12968== 624 (88 direct, 536 indirect) bytes in 1 blocks are definitely lost in loss record 13 of 14
==12968== at 0x4C2CC70: calloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so)
==12968== by 0x4E85668: g_malloc0 (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0)
==12968== by 0x4E89D22: g_option_context_new (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.4002.0)
==12968== by 0x402BAB: main (obex-client-tool.c:428)
==12968==
==12968== LEAK SUMMARY:
==12968== definitely lost: 88 bytes in 1 blocks
==12968== indirectly lost: 536 bytes in 2 blocks
==12968== possibly lost: 0 bytes in 0 blocks
==12968== still reachable: 2,271 bytes in 11 blocks
==12968== suppressed: 0 bytes in 0 blocks |
Anupam Roy |
10 years ago |
1 file, +4, -1 |
| 5eaaa14b |
android/tester-main.c:Fixed Memory leak
This patch fixes memory leak issues in various functions
by allocating memory to structure step only after intial
checks are performed as control was returning from these
checks without freeing memory allocated to it. |
Anchit Narang |
10 years ago |
1 file, +27, -9 |
| cc3975c2 |
tools/mgmt-tester: Add RPA Remove Device test case
This test verify if kernel correctly responds with error to
Remove Device command with Resolvable Private Address. |
Jakub Pawlowski |
10 years ago |
1 file, +16, -0 |
| c5ca05a3 |
tools/mgmt-tester: Add RPA Add Device test case
This test verify if kernel correctly responds with error to
Add Device command with Resolvable Private Address. |
Jakub Pawlowski |
10 years ago |
1 file, +21, -0 |
| b16ae734 |
tools: Add testing utility for Eddystone beacons |
Marcel Holtmann |
10 years ago |
3 files, +325, -1 |
| 6339cced |
obexd: Fix possible crash while processing pending request
session_process_queue needs to be able to access the request .func in
case an error happen and it later calls pending_request_free so .process
shall not attempt to free the request otherwise it will cause crashes:
Invalid read of size 8
at 0x4349D2: session_process_queue (session.c:857)
by 0x434AC5: setpath_complete.isra.1 (session.c:1026)
by 0x434B29: setpath_cb (session.c:1077)
by 0x416448: handle_response (gobex.c:1128)
by 0x41739D: incoming_data (gobex.c:1402)
by 0x59747FA: g_main_context_dispatch (in /usr/lib64/libglib-2.0.so.0.4200.2)
by 0x5974B97: ??? (in /usr/lib64/libglib-2.0.so.0.4200.2)
by 0x5974EC1: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.4200.2)
by 0x40E23F: main (main.c:322)
Address 0x66e3d30 is 32 bytes inside a block of size 56 free'd
at 0x4C2ACE9: free (in /usr/lib64/valgrind/vgpreload_memcheck-amd64-linux.so)
by 0x597A50E: g_free (in /usr/lib64/libglib-2.0.so.0.4200.2)
by 0x4345F5: pending_request_free (session.c:193)
by 0x4348DF: session_process_setpath (session.c:1131)
by 0x4349C9: session_process_queue (session.c:854)
by 0x434AC5: setpath_complete.isra.1 (session.c:1026)
by 0x434B29: setpath_cb (session.c:1077)
by 0x416448: handle_response (gobex.c:1128)
by 0x41739D: incoming_data (gobex.c:1402)
by 0x59747FA: g_main_context_dispatch (in /usr/lib64/libglib-2.0.so.0.4200.2)
by 0x5974B97: ??? (in /usr/lib64/libglib-2.0.so.0.4200.2)
by 0x5974EC1: g_main_loop_run (in /usr/lib64/libglib-2.0.so.0.4200.2) |
Luiz Augusto von Dentz |
10 years ago |
1 file, +5, -25 |
| 8a5538ea |
Audio/Media: Fix incorrect value dereference
parameter value passed to the config_cb is a pointer to the
gbooloean. dereferencing the value rather than address leads
to mismatch in handling the return value.
avdtp.c:avdtp_parse_cmd() Received SET_CONFIGURATION_CMD
a2dp.c:endpoint_setconf_ind() Source 0xb7d49ef8: Set_Configuration_Ind
a2dp.c:setup_ref() 0xb7d53b98: ref=2
media.c:media_adapter_get_player()
media.c:media_set_sink_callback()
media.c:media_endpoint_async_call() Calling SetConfiguration: name = :1.37 path = /MediaEndpoint/A2DPSource
*#0 0xb6cea184 in __libc_free (mem=0xbead3ae4) at malloc.c:3736
*#1 0xb6e33468 in g_free () from /usr/lib/libglib-2.0.so.0
*#2 0xb6f25db0 in auto_config (data=0xb7d53b98) at profiles/audio/a2dp.c:430
*#3 0xb6f2ad76 in config_cb (endpoint=<value optimized out>,
* ret=<value optimized out>, size=<value optimized out>,
* user_data=<value optimized out>) at profiles/audio/media.c:707
*#4 0xb6f2cc4a in endpoint_reply (call=<value optimized out>,
* user_data=0xb7d516b0) at profiles/audio/media.c:357
*#5 0xb6ddce96 in _dbus_pending_call_complete (pending=0xb7d53bc8)
* at dbus-pending-call.c:216
*#6 0xb6dcfe82 in complete_pending_call_and_unlock (connection=0xb7d44b40,
* pending=0xb7d53bc8, message=<value optimized out>)
* at dbus-connection.c:2331 |
Rakesh M K |
10 years ago |
1 file, +2, -1 |
| 3357e2d3 |
shared/gatt-client: Fix discovery
The discovery shall not be interrupted in case Exchange MTU is not
supported, instead we shall continue using the default MTU as stated by
the spec:
BLUETOOTH SPECIFICATION Version 4.2 [Vol 3, Part G] page 546:
"If the Error Response is sent by the server with the Error Code set
to Request Not Supported , the Attribute Opcode is not supported and
the default MTU shall be used." |
Luiz Augusto von Dentz |
10 years ago |
1 file, +10, -0 |
| 838abde2 |
emulator: Add support for scanning on different channels |
Marcel Holtmann |
10 years ago |
2 files, +19, -2 |
| 81596d12 |
emulator: Add support for scan window and scan interval handling |
Marcel Holtmann |
10 years ago |
1 file, +72, -1 |
| 8a4b1bd1 |
emulator: Add support for using advertising delay values |
Marcel Holtmann |
10 years ago |
1 file, +15, -3 |
| 33b447da |
audio: Fix possible crash when removing device
Currently it is not possible to cancel avdtp_discover procedure leading
to crashe if the device is removed while avdtp_discover is pending since
its callback is still reachable. |
Luiz Augusto von Dentz |
10 years ago |
5 files, +74, -4 |
| 9693a366 |
doc/test-runner: Mention useful locking kernel config options |
Johan Hedberg |
10 years ago |
1 file, +13, -0 |
| 66a85a31 |
gobex: Minor coding style (whitespace) fix |
Johan Hedberg |
10 years ago |
1 file, +0, -1 |
| 7c8ac04d |
core: gatt-database: Remove unnecessary typecast |
Johan Hedberg |
10 years ago |
1 file, +1, -1 |
| f7138dd7 |
core: gatt-database: Fix potential memory leak |
Johan Hedberg |
10 years ago |
1 file, +3, -1 |
| 4cd67264 |
client: Fix potential array overflow |
Johan Hedberg |
10 years ago |
1 file, +2, -2 |
| 7ae2fb58 |
Release 5.32 |
Marcel Holtmann |
10 years ago |
2 files, +9, -1 |
| 8e154962 |
build: Update library version |
Marcel Holtmann |
10 years ago |
1 file, +1, -1 |
| 0fae1f0d |
lib: Update company identifiers |
Marcel Holtmann |
10 years ago |
1 file, +44, -0 |
| 39b9e120 |
core/profiles: Fix not handling disconnections properly
If a profiles disconnects while in connecting state but ext_connect has
already been called the state is never updated since ext_io_disconnected
always calls btd_service_disconnecting_complete. |
Luiz Augusto von Dentz |
10 years ago |
1 file, +7, -2 |
| c73c1002 |
core/advertising: Fix using wrong instance id
The instance id shall be limited to the number of instance the kernel
support, and since this will probably be quite small the ids should be
reused once the client unregistered. |
Luiz Augusto von Dentz |
10 years ago |
1 file, +7, -5 |
| ac1e243a |
core: Fix accepting connections while disconnecting
If the device is being disconnected locally any profile connection shall
be rejected since the ACL link will be dropped. |
Luiz Augusto von Dentz |
10 years ago |
3 files, +11, -0 |