yinqingzhao
00c35bfa01
fix(wifi): fix dialog token of addba request may equal to zero
2026-08-11 13:15:18 +08:00
Rahul Tank
0f6a4e390d
fix(nimble): Remove extra free to avoid double free
2026-08-10 19:28:35 +05:30
sibeibei
7892f94670
fix(pm): fix chip cant sleep when disconnecting at probe process&fix scan and connect issue
2026-08-07 16:52:41 +08:00
Jiang Jiang Jian
5a131ff952
Merge branch 'bugfix/fix_disconnect_failure_issue_v5.3' into 'release/v5.3'
...
fix(wifi): fix disconnect failure issue(Backport v5.3)
See merge request espressif/esp-idf!51585
2026-08-07 14:24:01 +08:00
morris
1262778780
Merge branch 'fix/i2s_tdm_5slot_clock_test_v5.3' into 'release/v5.3'
...
fix(hal): prevent overflow in fractional clock division (v5.3)
See merge request espressif/esp-idf!51433
2026-08-07 10:02:06 +08:00
muhaidong
e47e91ac04
fix(wifi): fix disconnect failure issue
2026-08-06 17:19:13 +08:00
zhangyanjiao
ce29f9e905
fix(wifi): added start check when calling smartconfig stop
2026-08-06 15:20:56 +08:00
Jiang Jiang Jian
ab13a0c11b
Merge branch 'fix/fix_i2s_i80_color_size_check_v5.3' into 'release/v5.3'
...
fix(lcd): add color size check for i80 and boundary check for rgb (v5.3)
See merge request espressif/esp-idf!50967
2026-08-06 13:44:37 +08:00
Jiang Jiang Jian
0d680a77f4
Merge branch 'bugfix/dpp_backport_v5.3' into 'release/v5.3'
...
fix(esp_wifi): Backport dpp and other fixes
See merge request espressif/esp-idf!51412
2026-08-06 13:38:31 +08:00
Jiang Jiang Jian
6b0ebad36a
Merge branch 'feat/ot_rx_sensitivity_v5.3' into 'release/v5.3'
...
feat(openthread): use the actual receive sensitivity for link quality evaluation (v5.3)
See merge request espressif/esp-idf!51484
2026-08-06 11:27:48 +08:00
Shreyas Sheth
fda4fa2eba
fix(esp_wifi): Backport dpp and other fixes
...
1) Fix crash while connecting to dpp akm
2) Fix phy ref cnt for power management for offchannel_tx
3) Introduced a variable to indicate dpp ap for scan results
4) Introduced WIFI_AUTH_UNKNOWN for ap with misconfigured security parameter
2026-08-05 19:51:07 +05:30
zwx
875efd3dba
fix(ieee802154): skip receive_at when rx window already expired
2026-08-05 06:59:25 +00:00
Jiang Jiang Jian
42bca686cb
Merge branch 'feat/support_pawr_connect_evt_v5.3' into 'release/v5.3'
...
feat(ble/bluedroid): Support PAWR connection event (5.3)
See merge request espressif/esp-idf!51439
2026-08-05 12:31:57 +08:00
Jiang Jiang Jian
37d29951af
Merge branch 'fix/ble_mesh_added_gatt_err_rsp_v5.3' into 'release/v5.3'
...
fix(ble_mesh): align GATTS read/write response handling with ATT (5.3)
See merge request espressif/esp-idf!51460
2026-08-05 12:31:23 +08:00
Jiang Jiang Jian
bffa546626
Merge branch 'feat/bt_in_psram_v5.3' into 'release/v5.3'
...
feat(bluedroid): Add config to place btu and hci task stack in psram (v5.3)
See merge request espressif/esp-idf!51494
2026-08-05 12:30:48 +08:00
Jiang Jiang Jian
dab06cfd82
Merge branch 'fix/resolve_issues_reported_via_bbp_v5.3' into 'release/v5.3'
...
fix(openthread): fix null pointer deref, uninitialized struct, and unbounded strcpy in spinel/RCP code (v5.3)
See merge request espressif/esp-idf!51372
2026-08-05 12:27:24 +08:00
Jiang Jiang Jian
2bb1b8da01
Merge branch 'backport/lp_spi_fix_inline_v5.3' into 'release/v5.3'
...
fix(ulp/lp_spi): fix stale data in driver (v5.3)
See merge request espressif/esp-idf!51313
2026-08-05 12:25:54 +08:00
Jiang Jiang Jian
cd40df27b5
Merge branch 'contrib/github_pr_18829_v5.3' into 'release/v5.3'
...
fix(spiffs): fix off-by-one in spiffsgen.py obj name length check (GitHub PR) (v5.3)
See merge request espressif/esp-idf!50918
2026-08-05 12:24:40 +08:00
Jiang Jiang Jian
b6663b0048
Merge branch 'contrib/github_pr_18822_v5.3' into 'release/v5.3'
...
fix(esp_partition): prevent size_t overflow bypassing bounds checks on linux target (GitHub PR) (v5.3)
See merge request espressif/esp-idf!50911
2026-08-05 12:24:11 +08:00
Jiang Jiang Jian
d8625e533b
Merge branch 'test/idf-additions-coverage_v5.3' into 'release/v5.3'
...
test(freertos): expand IDF additions test coverage (v5.3)
See merge request espressif/esp-idf!50823
2026-08-05 12:23:47 +08:00
Jiang Jiang Jian
af856ce88a
Merge branch 'contrib/github_pr_18817_v5.3' into 'release/v5.3'
...
fix(wear_levelling): guard WL_Flash::write()/read() against size==0 underflow (GitHub PR) (v5.3)
See merge request espressif/esp-idf!50734
2026-08-05 12:23:17 +08:00
Jiang Jiang Jian
67c0585a7e
Merge branch 'contrib/github_pr_18823_v5.3' into 'release/v5.3'
...
fix(vfs): use MAX_FDS instead of VFS_MAX_COUNT when clearing fd table on unregister (GitHub PR) (v5.3)
See merge request espressif/esp-idf!50701
2026-08-05 12:22:09 +08:00
Jiang Jiang Jian
1c1ec601f4
Merge branch 'fix/fatfs_vulnerabilities_v5.3' into 'release/v5.3'
...
fix(fatfs): harden against runZero 2026 FatFs bugs (v5.3)
See merge request espressif/esp-idf!50428
2026-08-05 12:21:47 +08:00
Jiang Jiang Jian
979bdfd2a9
Merge branch 'bugfix/nan_vulnerabilities_v5.3' into 'release/v5.3'
...
fix(nan): Fix bug bounty reported and discovered vulnerabilities in NAN Rx (Backport v5.3)
See merge request espressif/esp-idf!51395
2026-08-05 10:49:24 +08:00
Jiang Jiang Jian
045dd779fd
Merge branch 'fix/rtc_retain_mem_sb_fast_wakeup_ptr_v5.3' into 'release/v5.3'
...
fix(bootloader_support): fix RTC retain mem offset for secure boot fast wakeup (v5.3)
See merge request espressif/esp-idf!51270
2026-08-04 20:21:45 +08:00
Island
b31538482f
Merge branch 'fix/ble_log_compression_add_local_header_file_v5.3' into 'release/v5.3'
...
feat(ble_log): mirror local compression headers (5.3)
See merge request espressif/esp-idf!50949
2026-08-04 19:48:16 +08:00
Euripedes Rocha Filho
5bed70f8d4
fix(esp_netif): harden NULL and OOM handling in netif APIs
...
Use a temporary pointer for br_glue port-list realloc so a failure does
not clobber the existing array. Reject NULL mac in esp_netif_set_mac and
validate config->base in esp_netif_new_api before use.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-04 08:56:45 +02:00
hejiaxin
91c3b74df1
feat(bluedroid): Add config to place btu and hci task stack in psram
...
- Also adjust the osi_thread_stop implementation.
2026-08-04 14:56:14 +08:00
Rahul Tank
9febc03831
Merge branch 'bugfix/add_nimble_cve_v5.3' into 'release/v5.3'
...
fix(nimble): Fixes for various NimBLE CVEs (v5.3)
See merge request espressif/esp-idf!51204
2026-08-04 12:17:23 +05:30
Shu Chen
9c859ab6ab
feat(openthread): use the actual receive sensitivity for link quality evaluation
2026-08-04 14:40:51 +08:00
Wang Meng Yang
f0407c5a38
Merge branch 'fix/aireview_critical_v5.3' into 'release/v5.3'
...
fix: Fix some critical bugs in classic bt (v5.3)
See merge request espressif/esp-idf!51292
2026-08-04 14:15:49 +08:00
Wang Meng Yang
b723d09933
Merge branch 'fix/bluedroid_aireview_v5.3' into 'release/v5.3'
...
Fix/bluedroid aireview (v5.3)
See merge request espressif/esp-idf!51297
2026-08-04 14:12:13 +08:00
Luo Xu
d6eed489b0
feat(ble_log): mirror local compression headers
...
(cherry picked from commit ee732a4591 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-08-04 11:57:57 +08:00
Rahul Tank
9a36f17232
fix(nimble): Fixes for various NimBLE CVEs
2026-08-03 23:49:23 +05:30
Euripedes Rocha Filho
f5607d1737
fix(esp_netif): Avoid socket to stay in closing state in l2tap closing
2026-08-03 16:18:11 +02:00
Luo Xu
2d378a5563
fix(ble_mesh): align GATTS read/write response handling with ATT
...
bt_mesh_bta_gatts_cb did not always answer ATT Read/Write Requests:
- READ: on a callback error it only logged a warning and sent nothing; a
0-byte read (Read Blob at an offset equal to the value length) also sent
nothing, although it is a successful empty read.
- WRITE: on a callback error it sent nothing, and a partial/zero write was
treated as success.
- Both: when the handle was not found or the attribute had no read/write
callback, the request was silently dropped.
An ATT Request must always be answered:
- READ: len >= 0 is success -> Read Response (a 0-byte read yields an empty
value); len < 0 -> ATT Error Response carrying the callback's error code
(-len, since BLE_MESH_GATT_ERR(x) == -x). The copy length is clamped to
the source buffer size as a defensive bound. If the handle is unknown or
the attribute has no read callback, respond with INVALID_HANDLE /
READ_NOT_PERMITTED.
- WRITE: when need_rsp is set, always reply. len == write length -> Write
Response; otherwise (negative ATT error, partial write, or 0) -> ATT
Error Response (the negative code, or UNLIKELY for partial/0). If the
handle is unknown or the attribute has no write callback, respond with
INVALID_HANDLE / WRITE_NOT_PERMITTED. Write Without Response still sends
no response.
A non-success status passed to BTA_GATTS_SendRsp is turned into an ATT
Error Response by the GATT layer (gatt_sr_process_app_rsp ->
gatt_send_error_rsp).
(cherry picked from commit ed1f4de3a3 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-08-03 21:43:35 +08:00
Zhi Wei Jian
7eae05b8d9
fix(ble/bluedroid): Build LE event mask from host feature macros
...
(cherry picked from commit 68dff5d798 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-08-03 15:25:43 +08:00
Zhi Wei Jian
5b0f43d724
feat(ble/bluedroid): Support PAWR connection event
...
(cherry picked from commit 7da7fa42ac )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-08-03 15:25:43 +08:00
Chen Chen
86f1c6428e
fix(hal): prevent overflow in fractional clock division
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-08-03 15:16:40 +08:00
Island
5a4288e8ff
Merge branch 'fix/ble_log_compression_issue_on_windows_v5.3' into 'release/v5.3'
...
fix(bt): fix BLE log compression build on Windows (5.3)
See merge request espressif/esp-idf!51243
2026-08-03 11:31:23 +08:00
Island
b01be03a5a
Merge branch 'feat/update_mesh_lib_to_supported_get_lib_ver_v5.3' into 'release/v5.3'
...
Feat/update mesh lib to supported get lib ver (5.3)
See merge request espressif/esp-idf!51170
2026-08-03 11:30:38 +08:00
Martin Vychodil
e0f8e5fcce
Merge branch 'bugfix/idfci-12815-12072-timeout_v5.3' into 'release/v5.3'
...
fix(storage): mark storage pytest apps flaky in CI (v5.3)
See merge request espressif/esp-idf!51339
2026-08-02 16:40:32 +08:00
sonika.rathi
ada0e3e116
fix(storage): mark storage pytest apps flaky in CI
2026-07-31 08:57:28 +02:00
Akshat Agrawal
720ccfdc7e
fix(nan): Fix bug bounty reported and discovered vulnerabilities in NAN Rx
2026-07-31 12:07:12 +05:30
harshal.patil
639e80169d
refactor(esp_system): deduplicate ROM fast wake RTC digest reservation
...
The digest length and the condition that reserves it at the end of RTC RAM were
duplicated in seven places. Hold the reservation in a hidden Kconfig value that
is zero when the feature does not apply, so every consumer subtracts it
unconditionally, and derive ESP_SECURE_BOOT_DIGEST_LEN from it.
2026-07-31 11:23:26 +08:00
Rahul Tank
1f314eff3e
fix(nimble): Deliver PAwR peripheral CONNECT via sync callback
2026-07-30 16:35:02 +05:30
zwx
4c9be53120
fix(openthread): fix null pointer deref, uninitialized struct, and unbounded strcpy in spinel/RCP code
2026-07-30 18:59:31 +08:00
hejiaxin
5b5e80c12a
fix(bt_stack): Fix some critical bugs in classic_bt stack
...
related: obex, smp, pbap, sdp, rfcomm, stack_dm
- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
2026-07-30 17:44:37 +08:00
Jiang Jiang Jian
df8ad67949
Merge branch 'bugfix/fix_espnow_data_rate_error_v5.3' into 'release/v5.3'
...
fix(wifi): fixed espnow data rate overridden by stale rate control (v5.3)
See merge request espressif/esp-idf!51305
2026-07-30 11:52:57 +08:00
Chen Jichang
e0f791598b
fix(lcd): add color size check for i80 and boundary check for rgb
2026-07-30 11:42:33 +08:00