This is a test commit #2
Closed
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Signed-off-by: Leandro Pereira <leandro.pereira@intel.com>
zephyr-github
pushed a commit
that referenced
this pull request
Apr 20, 2017
Add Bluetooth 5.0 LE Channel Selection Algorithm #2 feature Jira: ZEP-2033 Change-id: Ic1155b4399882b89cab33cac78b08b7b39ff6f9d Signed-off-by: Vinayak Chettimada <vinayak.kariappa.chettimada@nordicsemi.no>
zephyr-github
pushed a commit
that referenced
this pull request
Apr 20, 2017
- newlib related fixes for the AT parser - Channel Selection Algorithm #2 support (Bluetooth 5.0 feature) - Better tracking of outgoing data (with callback support) - Various smaller cleanups & fixes ---------------------------------------------------------------- Carles Cufi (3): Bluetooth: HCI: Add Bluetooth 5.0 LE commands and events Bluetooth: HCI: Naming consistency tweaks Bluetooth: Use event masks instead of bits in controller and host Johan Hedberg (8): Bluetooth: hci_raw: Fix ECC support Bluetooth: Add support for tracking transmitted packets Bluetooth: ATT: Enforce flow for incoming requests & indications Bluetooth: SMP: Track when last key distribution PDU has been sent Bluetooth: Introduce a timeout for synchronous HCI command sending Bluetooth: ATT: Fix bogus CONTAINER_OF() usage Bluetooth: Introduce flow control for outgoing ATT packets Bluetooth: ATT: Start response timer only after actual transmission Kumar Gala (3): Bluetooth: AT: use explicit unsigned char to avoid array subscript error Bluetooth: AT: Fix building with newlib Bluetooth: AT: Unit: Fixup include search path Luiz Augusto von Dentz (4): Bluetooth: ipsp: Add TX pools for TCP Bluetooth: L2CAP: Try to allocate segment from the original pool net: buf: Add net_buf_reset Bluetooth: L2CAP: Reuse request buffer to respond Vinayak Chettimada (5): Bluetooth: controller: Rename channel/chnl to chan Bluetooth: HCI: Add Bluetooth 5.0 FeatureSet field's bit mapping Bluetooth: Fix missing LE conn param req bit in set LE evt mask Bluetooth: controller: Support BT 5.0 feature set bit fields Bluetooth: controller: Channel Selection Algorithm #2 include/bluetooth/hci.h | 495 +++++++++++++++-- include/bluetooth/l2cap.h | 2 +- include/net/buf.h | 9 + samples/bluetooth/ipsp/src/main.c | 15 + subsys/bluetooth/controller/Kconfig | 7 + subsys/bluetooth/controller/hal/nrf5/radio.c | 4 +- subsys/bluetooth/controller/hal/radio.h | 2 +- subsys/bluetooth/controller/hci/hci.c | 95 ++-- subsys/bluetooth/controller/ll_sw/ctrl.c | 622 ++++++++++++++++------ subsys/bluetooth/controller/ll_sw/ctrl.h | 71 ++- subsys/bluetooth/controller/ll_sw/ctrl_internal.h | 25 +- subsys/bluetooth/controller/ll_sw/ll.c | 24 +- subsys/bluetooth/controller/ll_sw/pdu.h | 12 +- subsys/bluetooth/host/Kconfig | 31 ++ subsys/bluetooth/host/at.c | 2 +- subsys/bluetooth/host/at.h | 2 +- subsys/bluetooth/host/att.c | 230 ++++++-- subsys/bluetooth/host/conn.c | 111 +++- subsys/bluetooth/host/conn_internal.h | 23 +- subsys/bluetooth/host/hci_core.c | 163 +++--- subsys/bluetooth/host/hci_core.h | 3 +- subsys/bluetooth/host/hci_ecc.c | 2 +- subsys/bluetooth/host/hci_raw.c | 4 + subsys/bluetooth/host/hfp_hf.c | 2 + subsys/bluetooth/host/l2cap.c | 79 ++- subsys/bluetooth/host/l2cap_internal.h | 12 +- subsys/bluetooth/host/sdp.c | 2 + subsys/bluetooth/host/smp.c | 117 +++- subsys/net/buf.c | 12 +- tests/bluetooth/init/prj_controller_4_0.conf | 1 + tests/unit/bluetooth/at/src/Makefile | 2 +- tests/unit/bluetooth/at/src/main.c | 2 +- 32 files changed, 1695 insertions(+), 488 deletions(-) Change-Id: I17f9e49e1347a38bc78be3bdcaa596e41d83da56 Signed-off-by: Johan Hedberg <johan.hedberg@intel.com>
zephyr-github
pushed a commit
that referenced
this pull request
Apr 22, 2017
Put the reason code in r0 and make a SVC #2 call, which will be propagated to _fatal_error_handler as an exception. The _is_in_isr() implementation had to be tweaked a bit. User-generated SVC exception no longer just used for irq_offload(); just because we are in it does not mean we are in interrupt context. Instead, have the irq_offload code set and clear the offload_routine global; it will be non-NULL only if it's in use. Upcoming changes to support memory protection (which will require system calls) will need this too. We free up some small amount of ROM deleting _default_esf struct as it's no longer needed. Issue: ZEP-843 Change-Id: Ie82bd708575934cffe41e64f5c128c8704ca4e48 Signed-off-by: Andrew Boie <andrew.p.boie@intel.com>
nashif
referenced
this pull request
in nashif/zephyr
Aug 25, 2017
WIP: improve sanitycheck and add more SoCs and samples
This was referenced Sep 11, 2017
Merged
This was referenced Sep 23, 2017
Closed
swkim101
added a commit
to swkim101/zephyr
that referenced
this pull request
Oct 24, 2024
hci_packet_complete(buf, buf_size) should check whether buf_size is
enough.
For instance, hci_packet_complete can receive buf with buf_size 1,
leading to the buffer overflow in cmd->param_len, which is buf[3].
This can happen when rx_thread() receives two frames in 512 bytes
and the first frame size is 511. Then, rx_thread() will call
hci_packet_complete() with 1.
==5==ERROR: AddressSanitizer: global-buffer-overflow on address
0x000000ad81c2 at pc 0x0000005279b3 bp 0x7fffe74f5b70 sp 0x7fffe74f5b68
READ of size 2 at 0x000000ad81c2 thread T6
#0 0x5279b2 (/root/zephyr.exe+0x5279b2)
zephyrproject-rtos#1 0x4d697d (/root/zephyr.exe+0x4d697d)
zephyrproject-rtos#2 0x7ffff60e5daa (/lib/x86_64-linux-gnu/libc.so.6+0x89daa)
(BuildId: 2e01923fea4ad9f7fa50fe24e0f3385a45a6cd1c)
0x000000ad81c2 is located 2 bytes to the right of global variable
'rx_thread.frame' defined in 'zephyr/drivers/bluetooth/hci/userchan.c'
(0xad7fc0) of size 512
SUMMARY: AddressSanitizer: global-buffer-overflow
(/root/zephyr.exe+0x5279b2)
Thread T6 created by T2 here:
#0 0x48c17c (/root/zephyr.exe+0x48c17c)
zephyrproject-rtos#1 0x530192 (/root/zephyr.exe+0x530192)
zephyrproject-rtos#2 0x4dcc22 (/root/zephyr.exe+0x4dcc22)
Thread T2 created by T1 here:
#0 0x48c17c (/root/zephyr.exe+0x48c17c)
zephyrproject-rtos#1 0x530192 (/root/zephyr.exe+0x530192)
zephyrproject-rtos#2 0x4dcc22 (/root/zephyr.exe+0x4dcc22)
Thread T1 created by T0 here:
#0 0x48c17c (/root/zephyr.exe+0x48c17c)
zephyrproject-rtos#1 0x52f36c (/root/zephyr.exe+0x52f36c)
zephyrproject-rtos#2 0x5371dc (/root/zephyr.exe+0x5371dc)
zephyrproject-rtos#3 0x5312a6 (/root/zephyr.exe+0x5312a6)
zephyrproject-rtos#4 0x52ed7b (/root/zephyr.exe+0x52ed7b)
zephyrproject-rtos#5 0x52eddd (/root/zephyr.exe+0x52eddd)
zephyrproject-rtos#6 0x7ffff6083c89 (/lib/x86_64-linux-gnu/libc.so.6+0x27c89)
(BuildId: 2e01923fea4ad9f7fa50fe24e0f3385a45a6cd1c)
==5==ABORTING
Signed-off-by: Sungwoo Kim <iam@sung-woo.kim>
aescolar
pushed a commit
that referenced
this pull request
Oct 25, 2024
hci_packet_complete(buf, buf_size) should check whether buf_size is
enough.
For instance, hci_packet_complete can receive buf with buf_size 1,
leading to the buffer overflow in cmd->param_len, which is buf[3].
This can happen when rx_thread() receives two frames in 512 bytes
and the first frame size is 511. Then, rx_thread() will call
hci_packet_complete() with 1.
==5==ERROR: AddressSanitizer: global-buffer-overflow on address
0x000000ad81c2 at pc 0x0000005279b3 bp 0x7fffe74f5b70 sp 0x7fffe74f5b68
READ of size 2 at 0x000000ad81c2 thread T6
#0 0x5279b2 (/root/zephyr.exe+0x5279b2)
#1 0x4d697d (/root/zephyr.exe+0x4d697d)
#2 0x7ffff60e5daa (/lib/x86_64-linux-gnu/libc.so.6+0x89daa)
(BuildId: 2e01923fea4ad9f7fa50fe24e0f3385a45a6cd1c)
0x000000ad81c2 is located 2 bytes to the right of global variable
'rx_thread.frame' defined in 'zephyr/drivers/bluetooth/hci/userchan.c'
(0xad7fc0) of size 512
SUMMARY: AddressSanitizer: global-buffer-overflow
(/root/zephyr.exe+0x5279b2)
Thread T6 created by T2 here:
#0 0x48c17c (/root/zephyr.exe+0x48c17c)
#1 0x530192 (/root/zephyr.exe+0x530192)
#2 0x4dcc22 (/root/zephyr.exe+0x4dcc22)
Thread T2 created by T1 here:
#0 0x48c17c (/root/zephyr.exe+0x48c17c)
#1 0x530192 (/root/zephyr.exe+0x530192)
#2 0x4dcc22 (/root/zephyr.exe+0x4dcc22)
Thread T1 created by T0 here:
#0 0x48c17c (/root/zephyr.exe+0x48c17c)
#1 0x52f36c (/root/zephyr.exe+0x52f36c)
#2 0x5371dc (/root/zephyr.exe+0x5371dc)
#3 0x5312a6 (/root/zephyr.exe+0x5312a6)
#4 0x52ed7b (/root/zephyr.exe+0x52ed7b)
#5 0x52eddd (/root/zephyr.exe+0x52eddd)
#6 0x7ffff6083c89 (/lib/x86_64-linux-gnu/libc.so.6+0x27c89)
(BuildId: 2e01923fea4ad9f7fa50fe24e0f3385a45a6cd1c)
==5==ABORTING
Signed-off-by: Sungwoo Kim <iam@sung-woo.kim>
ndrs-pst
added a commit
to DDC-NDRS/zephyr_rtos
that referenced
this pull request
Jan 20, 2025
DBG_PIN9: usbd_ep_ctrl_enqueue zephyrproject-rtos#1 DBG_PIN10: usbd_ep_ctrl_enqueue zephyrproject-rtos#2 DBG_PIN11: usbd_ctrl_feed_dout(dev, 0); DBG_PIN12: reserved
mariopaja
added a commit
to mariopaja/zephyr
that referenced
this pull request
Feb 16, 2025
…hub_actions/actions-deps-b92b1e3817 ci: github: bump the actions-deps group with 2 updates
ArteryTek
added a commit
to Maxjta/zephyr
that referenced
this pull request
Mar 11, 2025
driver: add AT32F405 pinctrl and usart driver
1 task
1 task
avolmat-st
pushed a commit
to avolmat-st/zephyr
that referenced
this pull request
Jun 18, 2025
Add possibility to perform crop and compose (downscale) on pixel pipes (endpoint zephyrproject-rtos#1 and endpoint zephyrproject-rtos#2). Rework the code in order to move the downscale control from the set_fmt into the set_selection (compose). Signed-off-by: Alain Volmat <alain.volmat@foss.st.com>
avolmat-st
pushed a commit
to avolmat-st/zephyr
that referenced
this pull request
Jun 19, 2025
Add possibility to perform crop and compose (downscale) on pixel pipes (endpoint zephyrproject-rtos#1 and endpoint zephyrproject-rtos#2). Rework the code in order to move the downscale control from the set_fmt into the set_selection (compose). Signed-off-by: Alain Volmat <alain.volmat@foss.st.com>
avolmat-st
pushed a commit
to avolmat-st/zephyr
that referenced
this pull request
Jun 20, 2025
Add possibility to perform crop on all pipes and compose (downscale) on pixel pipes (endpoint zephyrproject-rtos#1 and endpoint zephyrproject-rtos#2). Rework the code in order to move the downscale control from the set_fmt into the set_selection (compose). Signed-off-by: Alain Volmat <alain.volmat@foss.st.com>
avolmat-st
pushed a commit
to avolmat-st/zephyr
that referenced
this pull request
Jun 20, 2025
Add possibility to perform crop on all pipes and compose (downscale) on pixel pipes (endpoint zephyrproject-rtos#1 and endpoint zephyrproject-rtos#2). Rework the code in order to move the downscale control from the set_fmt into the set_selection (compose). Signed-off-by: Alain Volmat <alain.volmat@foss.st.com>
avolmat-st
pushed a commit
to avolmat-st/zephyr
that referenced
this pull request
Jun 20, 2025
Add possibility to perform crop on all pipes and compose (downscale) on pixel pipes (endpoint zephyrproject-rtos#1 and endpoint zephyrproject-rtos#2). Rework the code in order to move the downscale control from the set_fmt into the set_selection (compose). Signed-off-by: Alain Volmat <alain.volmat@foss.st.com>
avolmat-st
pushed a commit
to avolmat-st/zephyr
that referenced
this pull request
Jun 23, 2025
Add possibility to perform crop on all pipes and compose (downscale) on pixel pipes (endpoint zephyrproject-rtos#1 and endpoint zephyrproject-rtos#2). Rework the code in order to move the downscale control from the set_fmt into the set_selection (compose). Signed-off-by: Alain Volmat <alain.volmat@foss.st.com>
duynguyenxa
pushed a commit
to renesas/zephyr
that referenced
this pull request
Jun 26, 2025
Add possibility to perform crop on all pipes and compose (downscale) on pixel pipes (endpoint #1 and endpoint zephyrproject-rtos#2). Rework the code in order to move the downscale control from the set_fmt into the set_selection (compose). Signed-off-by: Alain Volmat <alain.volmat@foss.st.com>
1 task
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Signed-off-by: Leandro Pereira leandro.pereira@intel.com