shangke1112

Same as the issus [13664](https://github.com/espressif/esp-idf/issues/13664).

I think it may be using some memory that has already been released and then repeatedly releasing the same address; **p_buf->event = (uint16_t)rand(); p_buf->len = (uint16_t)rand() % 255; p_buf->offset =...

**Guru Meditation Error: Core 0 panic'ed (StoreProhibited). Exception was unhandled.** StoreProhibited means writing a data to an illegal address **(gdb) print block[0] $2 = {prev_phys_block = 0x3ffd7b00, size = 25807,...

I don't think so. For example:  Looking at this above, if the offset is an error value,and if the processing of the receiving function modifies the content of (data+offset),...

According to our evaluation, the crash is made by user's intentional hack(modification) of the inner logic of Bluedroid host stack, the issue won't occur for users who operate Bluetooth module...

@Zakary-D We noticed that you submitted a cve , please update the CVE accordingly (mark CVE as not applicable or simply revoke it, if possible). https://gist.github.com/Zakary-D/30f565c4266c02c62aa9089c363e78e9 Based on the above...

Same as the issus https://github.com/espressif/esp-idf/issues/13664.

According to the log ,It seems that the connection was successful, but there was no data transmission within 5 seconds, causing a connection timeout. I think there may be some...

[libbtdm.tar.gz](https://github.com/espressif/esp-idf/files/11552158/libbtdm.tar.gz) I am sorry ,I can not find the device . Please use this lib for testing ,and send me the log.

According to the last log ,there may be an issue with encryption ,but I am not sure.Please use this lib and try again. [libbtdm3.tar.gz](https://github.com/espressif/esp-idf/files/11611313/libbtdm3.tar.gz)