Merge ~dirksu/bluez:noble into ~bluetooth/bluez:noble

[Dirk Su]

Add upstream patches to improve audio profiles compatibility

https://bugs.launchpad.net/ubuntu/+source/bluez/+bug/2122382

[Daniel van Vugt (vanvugt)]

review: Approve

diff --git a/debian/changelog b/debian/changelog
index 9ce0896..7dbb1bd 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,12 @@
+bluez (5.72-0ubuntu5.5) noble; urgency=medium
+
+  * Improve audio profiles compatibility (LP: #2122382)
+    d/patches: audio-upgrade-versions-to-latest-possible-to-qualify.patch
+    d/patches: cleanup-endpoints-when-devices-been-removed.patch
+    d/patches: profiles-avdtp-Fix-reply-for-bad-media-transport-for.patch
+
+ -- Dirk Su <[e-mail]>  Wed, 10 Sep 2025 10:48:36 +0800
+
 bluez (5.72-0ubuntu5.4) noble; urgency=medium
 
   [ Andreas Glinserer ]
diff --git a/debian/patches/audio-upgrade-versions-to-latest-possible-to-qualify.patch b/debian/patches/audio-upgrade-versions-to-latest-possible-to-qualify.patch
new file mode 100644
index 0000000..723d411
--- /dev/null
+++ b/debian/patches/audio-upgrade-versions-to-latest-possible-to-qualify.patch
@@ -0,0 +1,92 @@
+From 47c90fbea826499ca5df110746f0d1ce443e9ef1 Mon Sep 17 00:00:00 2001
+From: Raghavender Reddy Bujala <[e-mail]>
+Date: Wed, 12 Feb 2025 14:35:53 +0530
+Subject: [PATCH] audio: upgrade versions to latest possible to qualify
+
+Most of the existing profile versions are withdrawn
+to make PTS successfull, need to upgrade the version
+for audio profiles and there are no mandatory feature
+changes between these versions are seen.
+
+Version changes
+A2DP from 1.3 to 1.4
+HFP from 1.7 to 1.8
+AVRCP TG from 1.5 to 1.6
+AVCTP from 1.3 to 1.4
+
+Bug-Ubuntu: https://bugs.launchpad.net/bugs/2122382
+---
+ profiles/audio/a2dp.c  | 2 +-
+ profiles/audio/avrcp.c | 6 +++---
+ src/profile.c          | 4 ++--
+ 3 files changed, 6 insertions(+), 6 deletions(-)
+
+diff --git a/profiles/audio/a2dp.c b/profiles/audio/a2dp.c
+index b43161a..d8885eb 100644
+--- a/profiles/audio/a2dp.c
++++ b/profiles/audio/a2dp.c
+@@ -1581,7 +1581,7 @@ static sdp_record_t *a2dp_record(uint8_t type)
+ 	sdp_record_t *record;
+ 	sdp_data_t *psm, *version, *features;
+ 	uint16_t lp = AVDTP_UUID;
+-	uint16_t a2dp_ver = 0x0103, avdtp_ver = 0x0103, feat = 0x000f;
++	uint16_t a2dp_ver = 0x0104, avdtp_ver = 0x0103, feat = 0x000f;
+ 
+ 	record = sdp_record_alloc();
+ 	if (!record)
+diff --git a/profiles/audio/avrcp.c b/profiles/audio/avrcp.c
+index dda9a30..def175f 100644
+--- a/profiles/audio/avrcp.c
++++ b/profiles/audio/avrcp.c
+@@ -131,7 +131,7 @@
+ 
+ #define AVRCP_BROWSING_TIMEOUT		1
+ #define AVRCP_CT_VERSION		0x0106
+-#define AVRCP_TG_VERSION		0x0105
++#define AVRCP_TG_VERSION		0x0106
+ 
+ #define AVRCP_SCOPE_MEDIA_PLAYER_LIST			0x00
+ #define AVRCP_SCOPE_MEDIA_PLAYER_VFS			0x01
+@@ -406,7 +406,7 @@ static sdp_record_t *avrcp_ct_record(bool browsing)
+ 	sdp_record_t *record;
+ 	sdp_data_t *psm[2], *version, *features;
+ 	uint16_t lp = AVCTP_CONTROL_PSM;
+-	uint16_t avctp_ver = 0x0103;
++	uint16_t avctp_ver = 0x0104;
+ 	uint16_t feat = ( AVRCP_FEATURE_CATEGORY_1 |
+ 						AVRCP_FEATURE_CATEGORY_2 |
+ 						AVRCP_FEATURE_CATEGORY_3 |
+@@ -482,7 +482,7 @@ static sdp_record_t *avrcp_tg_record(bool browsing)
+ 	sdp_record_t *record;
+ 	sdp_data_t *psm_control, *version, *features;
+ 	uint16_t lp = AVCTP_CONTROL_PSM;
+-	uint16_t avctp_ver = 0x0103;
++	uint16_t avctp_ver = 0x0104;
+ 	uint16_t feat = ( AVRCP_FEATURE_CATEGORY_1 |
+ 					AVRCP_FEATURE_CATEGORY_2 |
+ 					AVRCP_FEATURE_CATEGORY_3 |
+diff --git a/src/profile.c b/src/profile.c
+index ea188f3..af03dbb 100644
+--- a/src/profile.c
++++ b/src/profile.c
+@@ -2069,7 +2069,7 @@ static struct default_settings {
+ 		.authorize	= true,
+ 		.auto_connect	= true,
+ 		.get_record	= get_hfp_hf_record,
+-		.version	= 0x0107,
++		.version	= 0x0108,
+ 	}, {
+ 		.uuid		= HSP_HS_UUID,
+ 		.name		= "Headset unit",
+@@ -2089,7 +2089,7 @@ static struct default_settings {
+ 		.authorize	= true,
+ 		.auto_connect	= true,
+ 		.get_record	= get_hfp_ag_record,
+-		.version	= 0x0107,
++		.version	= 0x0108,
+ 		/* HFP 1.7.2: By default features bitfield is 0b001001 */
+ 		.features	= 0x09,
+ 	}, {
+-- 
+2.43.0
+
diff --git a/debian/patches/cleanup-endpoints-when-devices-been-removed.patch b/debian/patches/cleanup-endpoints-when-devices-been-removed.patch
new file mode 100644
index 0000000..00400a7
--- /dev/null
+++ b/debian/patches/cleanup-endpoints-when-devices-been-removed.patch
@@ -0,0 +1,18 @@
+Description: Cleanup endpoints when device been removed
+ This patch merge two upstream commit
+ https://github.com/bluez/bluez/commit/ea3f4047e452b081e34d017cce316aba9d623301
+ https://github.com/bluez/bluez/commit/78aabd896dbe3e23faaebbc97b8ecd711b2502fc
+Bug-Ubuntu: https://bugs.launchpad.net/bugs/2122382
+---
+Index: bluez-5.72/src/device.c
+===================================================================
+--- bluez-5.72.orig/src/device.c	2025-09-16 16:02:14.000000000 +0800
++++ bluez-5.72/src/device.c	2025-09-16 16:03:12.615527575 +0800
+@@ -4645,6 +4645,7 @@
+ 	}
+ 	g_key_file_remove_group(key_file, "ServiceRecords", NULL);
+ 	g_key_file_remove_group(key_file, "Attributes", NULL);
++	g_key_file_remove_group(key_file, "Endpoints", NULL);
+
+ 	data = g_key_file_to_data(key_file, &length, NULL);
+ 	if (length > 0) {
diff --git a/debian/patches/profiles-avdtp-Fix-reply-for-bad-media-transport-for.patch b/debian/patches/profiles-avdtp-Fix-reply-for-bad-media-transport-for.patch
new file mode 100644
index 0000000..6a5f48f
--- /dev/null
+++ b/debian/patches/profiles-avdtp-Fix-reply-for-bad-media-transport-for.patch
@@ -0,0 +1,110 @@
+From f2120e3ded0656c8eda3d8058ee35654aba3fd09 Mon Sep 17 00:00:00 2001
+From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20Danis?= <[e-mail]>
+Date: Wed, 26 Mar 2025 10:07:11 +0100
+Subject: [PATCH] profiles/avdtp: Fix reply for bad media transport format
+
+Currently the avdtp_setconf_cmd() fails to check the capability length
+of the Media Transport Service Category, which should be 0, because
+caps_to_list() doesn't add it to the list of services as it should
+be bigger than packet boundary.
+
+This commit adds an &err parameter to caps_to_list() and set the error
+to AVDTP_BAD_MEDIA_TRANSPORT_FORMAT if Media Transport capability as
+invalid length.
+
+This is required for passing AVDTP/SNK/ACP/TRA/BTR/BI-01-C PTS test
+case:
+To verify that the IUT (ACP) is able to issue a set configuration
+reject response to the INT if the format of the media transport is
+incorrect.
+
+Bug-Ubuntu: https://bugs.launchpad.net/bugs/2122382
+---
+ profiles/audio/avdtp.c | 35 ++++++++++++++++++++---------------
+ 1 file changed, 20 insertions(+), 15 deletions(-)
+
+diff --git a/profiles/audio/avdtp.c b/profiles/audio/avdtp.c
+index 80fbe847e..dd8458f20 100644
+--- a/profiles/audio/avdtp.c
++++ b/profiles/audio/avdtp.c
+@@ -1312,7 +1312,8 @@ struct avdtp_remote_sep *avdtp_find_remote_sep(struct avdtp *session,
+ 
+ static GSList *caps_to_list(uint8_t *data, size_t size,
+ 				struct avdtp_service_capability **codec,
+-				gboolean *delay_reporting)
++				gboolean *delay_reporting,
++				uint8_t *err)
+ {
+ 	struct avdtp_service_capability *cap;
+ 	GSList *caps;
+@@ -1328,6 +1329,17 @@ static GSList *caps_to_list(uint8_t *data, size_t size,
+ 
+ 		cap = (struct avdtp_service_capability *)data;
+ 
++		/* Verify that the Media Transport capability's length = 0.
++		 * Reject otherwise
++		 */
++		if (cap->category == AVDTP_MEDIA_TRANSPORT &&
++					cap->length != 0) {
++			error("Invalid media transport in getcap resp");
++			if (err)
++				*err = AVDTP_BAD_MEDIA_TRANSPORT_FORMAT;
++			break;
++		}
++
+ 		if (sizeof(*cap) + cap->length > size) {
+ 			error("Invalid capability data in getcap resp");
+ 			break;
+@@ -1494,9 +1506,8 @@ static gboolean avdtp_setconf_cmd(struct avdtp *session, uint8_t transaction,
+ 	struct conf_rej rej;
+ 	struct avdtp_local_sep *sep;
+ 	struct avdtp_stream *stream;
+-	uint8_t err, category = 0x00;
++	uint8_t err = 0, category = 0x00;
+ 	struct btd_service *service;
+-	GSList *l;
+ 
+ 	if (size < sizeof(struct setconf_req)) {
+ 		error("Too short getcap request");
+@@ -1552,7 +1563,10 @@ static gboolean avdtp_setconf_cmd(struct avdtp *session, uint8_t transaction,
+ 	stream->caps = caps_to_list(req->caps,
+ 					size - sizeof(struct setconf_req),
+ 					&stream->codec,
+-					&stream->delay_reporting);
++					&stream->delay_reporting,
++					&err);
++	if (err)
++		goto failed_stream;
+ 
+ 	if (!stream->caps || !stream->codec) {
+ 		err = AVDTP_UNSUPPORTED_CONFIGURATION;
+@@ -1560,16 +1574,6 @@ static gboolean avdtp_setconf_cmd(struct avdtp *session, uint8_t transaction,
+ 		goto failed_stream;
+ 	}
+ 
+-	/* Verify that the Media Transport capability's length = 0. Reject otherwise */
+-	for (l = stream->caps; l != NULL; l = g_slist_next(l)) {
+-		struct avdtp_service_capability *cap = l->data;
+-
+-		if (cap->category == AVDTP_MEDIA_TRANSPORT && cap->length != 0) {
+-			err = AVDTP_BAD_MEDIA_TRANSPORT_FORMAT;
+-			goto failed_stream;
+-		}
+-	}
+-
+ 	if (stream->delay_reporting && session->version < 0x0103)
+ 		session->version = 0x0103;
+ 
+@@ -2827,7 +2831,8 @@ static gboolean avdtp_get_capabilities_resp(struct avdtp *session,
+ 	}
+ 
+ 	sep->caps = caps_to_list(resp->caps, size - sizeof(struct getcap_resp),
+-					&sep->codec, &sep->delay_reporting);
++					&sep->codec, &sep->delay_reporting,
++					NULL);
+ 
+ 	return TRUE;
+ }
+-- 
+2.43.0
+
diff --git a/debian/patches/series b/debian/patches/series
index 94c8b4c..176b343 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -26,3 +26,6 @@ raspi-cypress-305-bdaddr.patch
 git-reconnect-fix.patch
 reconnect-hsp-on-a2dp-reconnect.patch
 device-Fix-Pair-method-not-setting-auto_connect.patch
+profiles-avdtp-Fix-reply-for-bad-media-transport-for.patch
+cleanup-endpoints-when-devices-been-removed.patch
+audio-upgrade-versions-to-latest-possible-to-qualify.patch