Commit Graph

42887 Commits

Author SHA1 Message Date
yinqingzhao
00c35bfa01 fix(wifi): fix dialog token of addba request may equal to zero 2026-08-11 13:15:18 +08:00
Rahul Tank
701b739f90 Merge branch 'bugfix/fix_iso_double_free_v5.3' into 'release/v5.3'
fix(nimble): Remove extra free to avoid double free (v5.3)

See merge request espressif/esp-idf!51453
2026-08-11 10:14:18 +05:30
Rahul Tank
0f6a4e390d fix(nimble): Remove extra free to avoid double free 2026-08-10 19:28:35 +05:30
Jiang Jiang Jian
8374e89332 Merge branch 'bugfix/fix_wifi_bugs_v5.3_0807' into 'release/v5.3'
fix(pm): fix chip cant sleep when disconnecting at probe process&fix scan and connect issue V5.3

See merge request espressif/esp-idf!51621
2026-08-10 11:52:22 +08:00
sibeibei
7892f94670 fix(pm): fix chip cant sleep when disconnecting at probe process&fix scan and connect issue 2026-08-07 16:52:41 +08:00
Jiang Jiang Jian
5a131ff952 Merge branch 'bugfix/fix_disconnect_failure_issue_v5.3' into 'release/v5.3'
fix(wifi): fix disconnect failure issue(Backport v5.3)

See merge request espressif/esp-idf!51585
2026-08-07 14:24:01 +08:00
morris
1262778780 Merge branch 'fix/i2s_tdm_5slot_clock_test_v5.3' into 'release/v5.3'
fix(hal): prevent overflow in fractional clock division (v5.3)

See merge request espressif/esp-idf!51433
2026-08-07 10:02:06 +08:00
muhaidong
e47e91ac04 fix(wifi): fix disconnect failure issue 2026-08-06 17:19:13 +08:00
Jiang Jiang Jian
da8bc0afb5 Merge branch 'bugfix/fix_smartconfig_stop_assert_issue_v5.3' into 'release/v5.3'
fix(wifi): added start check when calling smartconfig stop (v5.3)

See merge request espressif/esp-idf!51558
2026-08-06 16:29:36 +08:00
zhangyanjiao
ce29f9e905 fix(wifi): added start check when calling smartconfig stop 2026-08-06 15:20:56 +08:00
Jiang Jiang Jian
ab13a0c11b Merge branch 'fix/fix_i2s_i80_color_size_check_v5.3' into 'release/v5.3'
fix(lcd): add color size check for i80 and boundary check for rgb (v5.3)

See merge request espressif/esp-idf!50967
2026-08-06 13:44:37 +08:00
Jiang Jiang Jian
0d680a77f4 Merge branch 'bugfix/dpp_backport_v5.3' into 'release/v5.3'
fix(esp_wifi): Backport dpp and other fixes

See merge request espressif/esp-idf!51412
2026-08-06 13:38:31 +08:00
Jiang Jiang Jian
94ce294b91 Merge branch 'opt/hfp_audio_quality_v5.3' into 'release/v5.3'
change(bt/bluedroid): optimized the HFP example workflow to improve audio quality (v5.3)

See merge request espressif/esp-idf!51552
2026-08-06 11:31:54 +08:00
Jiang Jiang Jian
6b0ebad36a Merge branch 'feat/ot_rx_sensitivity_v5.3' into 'release/v5.3'
feat(openthread): use the actual receive sensitivity for link quality evaluation (v5.3)

See merge request espressif/esp-idf!51484
2026-08-06 11:27:48 +08:00
Jiang Jiang Jian
75dd4f27b7 Merge branch 'fix/154_mac_receive_at_v5.3' into 'release/v5.3'
fix(ieee802154): skip receive_at when rx window already expired (v5.3)

See merge request espressif/esp-idf!51368
2026-08-06 11:22:41 +08:00
Shreyas Sheth
fda4fa2eba fix(esp_wifi): Backport dpp and other fixes
1) Fix crash while connecting to dpp akm
2) Fix phy ref cnt for power management for offchannel_tx
3) Introduced a variable to indicate dpp ap for scan results
4) Introduced WIFI_AUTH_UNKNOWN for ap with misconfigured security parameter
2026-08-05 19:51:07 +05:30
Jin Cheng
97b10b7096 change(bt/bluedroid): optimized the HFP example workflow to improve audio quality
Disabled inquiry scan and page scan after SCO connection establishment
to reduce over-the-air bandwidth usage and improve audio quality by
prevent scan activities from interrupting SCO traffic.
2026-08-05 18:02:43 +08:00
zwx
875efd3dba fix(ieee802154): skip receive_at when rx window already expired 2026-08-05 06:59:25 +00:00
Jiang Jiang Jian
42bca686cb Merge branch 'feat/support_pawr_connect_evt_v5.3' into 'release/v5.3'
feat(ble/bluedroid): Support PAWR connection event (5.3)

See merge request espressif/esp-idf!51439
2026-08-05 12:31:57 +08:00
Jiang Jiang Jian
37d29951af Merge branch 'fix/ble_mesh_added_gatt_err_rsp_v5.3' into 'release/v5.3'
fix(ble_mesh): align GATTS read/write response handling with ATT (5.3)

See merge request espressif/esp-idf!51460
2026-08-05 12:31:23 +08:00
Jiang Jiang Jian
bffa546626 Merge branch 'feat/bt_in_psram_v5.3' into 'release/v5.3'
feat(bluedroid): Add config to place btu and hci task stack in psram (v5.3)

See merge request espressif/esp-idf!51494
2026-08-05 12:30:48 +08:00
Jiang Jiang Jian
dab06cfd82 Merge branch 'fix/resolve_issues_reported_via_bbp_v5.3' into 'release/v5.3'
fix(openthread): fix null pointer deref, uninitialized struct, and unbounded strcpy in spinel/RCP code (v5.3)

See merge request espressif/esp-idf!51372
2026-08-05 12:27:24 +08:00
Jiang Jiang Jian
2bb1b8da01 Merge branch 'backport/lp_spi_fix_inline_v5.3' into 'release/v5.3'
fix(ulp/lp_spi): fix stale data in driver (v5.3)

See merge request espressif/esp-idf!51313
2026-08-05 12:25:54 +08:00
Jiang Jiang Jian
cd40df27b5 Merge branch 'contrib/github_pr_18829_v5.3' into 'release/v5.3'
fix(spiffs): fix off-by-one in spiffsgen.py obj name length check (GitHub PR) (v5.3)

See merge request espressif/esp-idf!50918
2026-08-05 12:24:40 +08:00
Jiang Jiang Jian
b6663b0048 Merge branch 'contrib/github_pr_18822_v5.3' into 'release/v5.3'
fix(esp_partition): prevent size_t overflow bypassing bounds checks on linux target (GitHub PR) (v5.3)

See merge request espressif/esp-idf!50911
2026-08-05 12:24:11 +08:00
Jiang Jiang Jian
d8625e533b Merge branch 'test/idf-additions-coverage_v5.3' into 'release/v5.3'
test(freertos): expand IDF additions test coverage (v5.3)

See merge request espressif/esp-idf!50823
2026-08-05 12:23:47 +08:00
Jiang Jiang Jian
af856ce88a Merge branch 'contrib/github_pr_18817_v5.3' into 'release/v5.3'
fix(wear_levelling): guard WL_Flash::write()/read() against size==0 underflow (GitHub PR) (v5.3)

See merge request espressif/esp-idf!50734
2026-08-05 12:23:17 +08:00
Jiang Jiang Jian
67c0585a7e Merge branch 'contrib/github_pr_18823_v5.3' into 'release/v5.3'
fix(vfs): use MAX_FDS instead of VFS_MAX_COUNT when clearing fd table on unregister (GitHub PR) (v5.3)

See merge request espressif/esp-idf!50701
2026-08-05 12:22:09 +08:00
Jiang Jiang Jian
1c1ec601f4 Merge branch 'fix/fatfs_vulnerabilities_v5.3' into 'release/v5.3'
fix(fatfs): harden against runZero 2026 FatFs bugs (v5.3)

See merge request espressif/esp-idf!50428
2026-08-05 12:21:47 +08:00
Jiang Jiang Jian
979bdfd2a9 Merge branch 'bugfix/nan_vulnerabilities_v5.3' into 'release/v5.3'
fix(nan): Fix bug bounty reported and discovered vulnerabilities in NAN Rx (Backport v5.3)

See merge request espressif/esp-idf!51395
2026-08-05 10:49:24 +08:00
Jiang Jiang Jian
045dd779fd Merge branch 'fix/rtc_retain_mem_sb_fast_wakeup_ptr_v5.3' into 'release/v5.3'
fix(bootloader_support): fix RTC retain mem offset for secure boot fast wakeup (v5.3)

See merge request espressif/esp-idf!51270
2026-08-04 20:21:45 +08:00
Island
b31538482f Merge branch 'fix/ble_log_compression_add_local_header_file_v5.3' into 'release/v5.3'
feat(ble_log): mirror local compression headers (5.3)

See merge request espressif/esp-idf!50949
2026-08-04 19:48:16 +08:00
Euripedes Rocha
aa2db50878 Merge branch 'fix/esp_netif-oom-null-checks-v5.5_v5.3' into 'release/v5.3'
fix(esp_netif): harden NULL and OOM handling in netif APIs (SEC-1189, SEC-1190) (v5.3)

See merge request espressif/esp-idf!50785
2026-08-04 12:34:24 +02:00
Euripedes Rocha Filho
5bed70f8d4 fix(esp_netif): harden NULL and OOM handling in netif APIs
Use a temporary pointer for br_glue port-list realloc so a failure does
not clobber the existing array. Reject NULL mac in esp_netif_set_mac and
validate config->base in esp_netif_new_api before use.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-04 08:56:45 +02:00
hejiaxin
91c3b74df1 feat(bluedroid): Add config to place btu and hci task stack in psram
- Also adjust the osi_thread_stop implementation.
2026-08-04 14:56:14 +08:00
Rahul Tank
9febc03831 Merge branch 'bugfix/add_nimble_cve_v5.3' into 'release/v5.3'
fix(nimble): Fixes for various NimBLE CVEs (v5.3)

See merge request espressif/esp-idf!51204
2026-08-04 12:17:23 +05:30
Shu Chen
9c859ab6ab feat(openthread): use the actual receive sensitivity for link quality evaluation 2026-08-04 14:40:51 +08:00
Wang Meng Yang
f0407c5a38 Merge branch 'fix/aireview_critical_v5.3' into 'release/v5.3'
fix: Fix some critical bugs in classic bt (v5.3)

See merge request espressif/esp-idf!51292
2026-08-04 14:15:49 +08:00
Wang Meng Yang
b723d09933 Merge branch 'fix/bluedroid_aireview_v5.3' into 'release/v5.3'
Fix/bluedroid aireview (v5.3)

See merge request espressif/esp-idf!51297
2026-08-04 14:12:13 +08:00
Euripedes Rocha
978e82ed9d Merge branch 'fix/sec-1129-l2tap-close-rollback_v5.3' into 'release/v5.3'
fix(esp_netif): roll back l2tap_close on semaphore/task create failure (SEC-1129) (v5.3)

See merge request espressif/esp-idf!51402
2026-08-04 07:00:21 +02:00
Luo Xu
d6eed489b0 feat(ble_log): mirror local compression headers
(cherry picked from commit ee732a4591)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-08-04 11:57:57 +08:00
Rahul Tank
9a36f17232 fix(nimble): Fixes for various NimBLE CVEs 2026-08-03 23:49:23 +05:30
Euripedes Rocha Filho
f5607d1737 fix(esp_netif): Avoid socket to stay in closing state in l2tap closing 2026-08-03 16:18:11 +02:00
Luo Xu
2d378a5563 fix(ble_mesh): align GATTS read/write response handling with ATT
bt_mesh_bta_gatts_cb did not always answer ATT Read/Write Requests:
- READ: on a callback error it only logged a warning and sent nothing; a
  0-byte read (Read Blob at an offset equal to the value length) also sent
  nothing, although it is a successful empty read.
- WRITE: on a callback error it sent nothing, and a partial/zero write was
  treated as success.
- Both: when the handle was not found or the attribute had no read/write
  callback, the request was silently dropped.

An ATT Request must always be answered:

- READ: len >= 0 is success -> Read Response (a 0-byte read yields an empty
  value); len < 0 -> ATT Error Response carrying the callback's error code
  (-len, since BLE_MESH_GATT_ERR(x) == -x). The copy length is clamped to
  the source buffer size as a defensive bound. If the handle is unknown or
  the attribute has no read callback, respond with INVALID_HANDLE /
  READ_NOT_PERMITTED.
- WRITE: when need_rsp is set, always reply. len == write length -> Write
  Response; otherwise (negative ATT error, partial write, or 0) -> ATT
  Error Response (the negative code, or UNLIKELY for partial/0). If the
  handle is unknown or the attribute has no write callback, respond with
  INVALID_HANDLE / WRITE_NOT_PERMITTED. Write Without Response still sends
  no response.

A non-success status passed to BTA_GATTS_SendRsp is turned into an ATT
Error Response by the GATT layer (gatt_sr_process_app_rsp ->
gatt_send_error_rsp).


(cherry picked from commit ed1f4de3a3)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-08-03 21:43:35 +08:00
Zhi Wei Jian
7eae05b8d9 fix(ble/bluedroid): Build LE event mask from host feature macros
(cherry picked from commit 68dff5d798)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-08-03 15:25:43 +08:00
Zhi Wei Jian
5b0f43d724 feat(ble/bluedroid): Support PAWR connection event
(cherry picked from commit 7da7fa42ac)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-08-03 15:25:43 +08:00
Chen Chen
86f1c6428e fix(hal): prevent overflow in fractional clock division
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-03 15:16:40 +08:00
Island
5a4288e8ff Merge branch 'fix/ble_log_compression_issue_on_windows_v5.3' into 'release/v5.3'
fix(bt): fix BLE log compression build on Windows (5.3)

See merge request espressif/esp-idf!51243
2026-08-03 11:31:23 +08:00
Island
b01be03a5a Merge branch 'feat/update_mesh_lib_to_supported_get_lib_ver_v5.3' into 'release/v5.3'
Feat/update mesh lib to supported get lib ver (5.3)

See merge request espressif/esp-idf!51170
2026-08-03 11:30:38 +08:00
Martin Vychodil
e0f8e5fcce Merge branch 'bugfix/idfci-12815-12072-timeout_v5.3' into 'release/v5.3'
fix(storage): mark storage pytest apps flaky in CI (v5.3)

See merge request espressif/esp-idf!51339
2026-08-02 16:40:32 +08:00