Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 03:00:34 +03:00
Code Issues Packages Projects Releases Wiki Activity
54,060 Commits 25 Branches 192 Tags
0cd01c19bbeff2ca8e5758e2f439e4e1e240ec9e
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Ashish Sharma aebc7fa691 fix(protocomm): fix response leaks and stale key IDs on error paths 2026-07-15 15:46:58 +08:00
Ashish Sharma 9a99613f1b fix(esp_tee): ensure hal assert is enabled for tee builds 2026-07-13 13:44:56 +08:00
Ashish Sharma 133c1c6f6d fix(esp_tee): enforce MMU-map vaddr validity at the REE->TEE boundary 2026-07-13 13:42:58 +08:00
Ashish Sharma 15d9f9f0bc fix(esp_tee): fixes IV length check for TEE AEAD operations 2026-07-13 13:42:58 +08:00
Ashish Sharma 5ea5256b96 feat(mbedtls): enable cross signed certificate verification support by default 2026-07-06 15:34:51 +08:00
Ashish Sharma f7b8db2f2f feat(espcoredump): migrate to esp sha256 implementation from mbedtls sha256 2026-07-06 11:11:12 +05:30
Ashish Sharma 7d9f061cc1 fix(mbedtls): fixes TLS1.3 server failing with dynamic buffer 2026-07-06 10:38:10 +05:30
Ashish Sharma 7842b5170f fix(esp_tee): fix DS-lock leak, intr-matrix OOB, calloc overflow, attestation leak 2026-07-03 17:20:49 +08:00
Ashish Sharma b065c38286 fix(esp-tls): reject NULL host/url in plain-TCP and async HTTP connect 2026-07-03 17:19:05 +08:00
Ashish Sharma 7462e3c30a fix(mbedtls): validate crypto input lengths (TEE OOB, auth-bypass, overflows) 2026-07-03 17:19:05 +08:00
Ashish Sharma d64409fdb2 fix(esp_https_server): free TLS session on transport_ctx OOM in httpd_ssl_open 2026-07-03 17:19:05 +08:00
Ashish Sharma 440dd3b52a fix(esp_hal_security): clamp tag_len in aes_hal_gcm_read_tag to prevent OOB 2026-07-03 17:19:05 +08:00
Ashish Sharma e09ab205f1 fix(bootloader_support): guard NULL efuse digest slot in secure-boot verify 2026-07-03 17:19:05 +08:00
Ashish Sharma b939d86b8e fix(esp_http_client): fix digest-auth leaks and credential/handle use-after-free 2026-07-03 17:19:05 +08:00
Ashish Sharma e838566c5f fix(esp_http_server): close UAF/double-free, buffer underflows, and OOB read 2026-07-03 17:19:05 +08:00
Ashish Sharma b15caab876 fix(app_update): close OOB read, rollback-guard gap, and length underflow 2026-07-03 17:19:05 +08:00
Ashish Sharma 6d1beb1f23 fix(esp-tls): guard against NULL PSK hint to prevent crash 2026-07-03 11:34:59 +08:00
Ashish Sharma 2cbd0afed8 fix(esp_tee): fixes double panic when ESP-TEE panics 2026-07-02 14:52:53 +08:00
Ashish Sharma 2458c81d7d fix(esp_tee): release SHA held by HMAC after crypto peripheral reset 2026-07-02 14:52:53 +08:00
Ashish Sharma 131e66a071 Merge branch 'contrib/github_pr_18734' into 'master' 
Fix header value truncation detection in httpd_req_get_hdr_value_str (GitHub PR)

Closes IDFGH-17829

See merge request espressif/esp-idf!49833
 2026-07-01 10:56:32 +08:00
Ashish SharmaandClaude Opus 4.8 8c181842f1 feat(esp_http_client): detect oversized headers in tx buffer while sending request 
When CONFIG_ESP_HTTP_CLIENT_STRICT_HEADER_BUFFER is enabled,
esp_http_client_request_send() fails fast when a single request header is
larger than buffer_size_tx, instead of silently emitting a truncated request.

The condition is reported with a dedicated ESP_ERR_HTTP_HEADER_TOO_LONG error
code rather than overloading ESP_ERR_HTTP_WRITE_DATA, so callers can tell a
permanent header-sizing failure apart from a transient write error. errno is
cleared on this path so the async caller (which maps errno == EAGAIN to "retry
later") does not spin retrying a request that can never succeed.

Closes https://github.com/espressif/esp-idf/issues/18639

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-06-25 18:24:42 +08:00
Ashish Sharma bc14daab3e fix(mbedtls): harden port layer to zeroize sensitive material 2026-06-23 11:15:01 +08:00
Ashish Sharma 8190ca035e fix(ws): enforce RFC 6455 §4.2.1 handshake requirements 2026-06-22 14:05:34 +08:00
Ashish Sharma a0fa99bab3 test(http_server): add mock TCP client for black-box WS testing 2026-06-22 14:05:34 +08:00
Ashish Sharma 1b8a365f16 fix(esp_security): harden crypto peripheral error handling 2026-06-19 18:27:22 +08:00
Ashish Sharma 594cc4a5ad test(httpd): cover URL query and header pointer accessors 2026-06-16 18:00:03 +08:00
Ashish Sharma c5dba210fb feat(httpd): add httpd_req_get_hdr_value_str_ptr() to avoid value copy 2026-06-16 17:59:54 +08:00
Ashish Sharma 4fa92fb4bb refactor(httpd): extract shared header field-value lookup helper 2026-06-16 17:59:40 +08:00
Ashish Sharma 9f84a7c3e3 fix(httpd): validate buf_len in httpd_req_get_url_query_str_ptr() 2026-06-16 17:59:26 +08:00
Ashish Sharma e6f5f5ff63 fix(mbedtls/port): add additional hardening for PSA drivers 2026-06-15 16:10:09 +05:30
Ashish Sharma fae2038058 fix(protocomm): null output buffer pointer on crypto failure 2026-06-09 11:48:46 +08:00
Ashish Sharma 4c1422a02a fix(rsa_ds): make RSA-OAEP unpadding constant-time 2026-06-05 13:39:27 +08:00
Ashish Sharma 96f43bb049 fix(rsa_ds): make PKCS#1 v1.5 unpadding constant-time 2026-06-05 13:39:27 +08:00
Ashish Sharma 8cb64703ff fix(esp-tls): fixes DS peripheral use case with tf-psa-crypto 1.1 2026-05-29 11:58:46 +08:00
Ashish Sharma c6e86872d6 feat(esp_http_client_mutual_auth): add mutual TLS example 
Closes https://github.com/espressif/esp-idf/issues/18393
 2026-05-29 11:58:25 +08:00
Ashish Sharma d0401f2f4e docs(esp_http_server): adds doc and migration entry for ws server post handshake cb 
Closes https://github.com/espressif/esp-idf/issues/18539
 2026-05-28 10:39:29 +08:00
Ashish Sharma 3282de557e fix(esp_http_server): take ctrl_sock_semaphore on shutdown and async wake 
httpd_stop() and httpd_req_async_handler_complete() both pushed
messages onto the control mbox via cs_send_to_ctrl_sock() without
reserving a slot in ctrl_sock_semaphore. Once the silent-drop fix
made the semaphore unconditional, the bypass became a real bug:
when the mbox is saturated by pending httpd_queue_work() items the
unguarded sendto() can return ENOBUFS, and even when it succeeds it
leaves the semaphore overstating free slots until the consumer
drains the message — a window during which a concurrent
httpd_queue_work() can take a slot but still find the mbox full.

Acquire the semaphore (portMAX_DELAY) before both sends and give it
back on send failure so the take/give invariant is preserved. The
httpd task is the consumer in both paths, so blocking is bounded
and deadlock-free. Reword the stale "no-op give on full" comment in
httpd_process_ctrl_msg() to reflect that only the recv-error path
relies on the cap behavior now.
 2026-05-26 17:21:24 +08:00
Ashish Sharma c911c781ae fix(esp_http_server): prevent silent message drop in httpd_queue_work 
Closes https://github.com/espressif/esp-idf/issues/18563
 2026-05-26 17:21:23 +08:00
Ashish Sharma d7cf1896b5 fix(mbedtls): fixes missing check before ecdsa verify 2026-05-25 11:51:53 +08:00
Ashish Sharma a4b10f1691 fix(esp_http_client): clear URL credentials and digest auth state on host change 2026-05-22 15:16:12 +08:00
Ashish Sharma 3ba6f4b786 fix(esp_http_client): strip Authorization header on cross-origin redirect 2026-05-22 15:08:14 +08:00
Ashish Sharma 96d8dbd781 docs(vulnerabilities): sync vulnerability list for 5 advisories 2026-05-19 17:42:56 +08:00
Ashish Sharma 881dc4193a fix(mbedtls): bring back deprecated config MBEDTLS_ECJPAKE_C 2026-05-13 14:25:28 +08:00
Ashish Sharma a2ba1bc18c fix(mbedtls): keep psa crypto storage enabled with ITS backend 
Closes https://github.com/espressif/esp-idf/issues/18555
 2026-05-12 17:00:14 +08:00
Ashish Sharma 0e03327f69 fix(esp_crt_bundle): fixes verification with cross signed cert 2026-05-11 17:44:16 +08:00
Ashish Sharma 54915f72ed fix(http_request): shifts to HTTP/1.1 in example pytest 2026-05-11 17:41:45 +08:00
Ashish Sharma 737e97340b fix(esp_crt_bundle): fixes a potential memory leak with cross signed certificates 
Closes https://github.com/espressif/esp-idf/issues/18512
Closes https://github.com/espressif/esp-idf/issues/18550
 2026-05-11 17:41:45 +08:00
Ashish Sharma 0fb8ad002a fix(esp_http_server): fixes websocket recv error handling 
Closes https://github.com/espressif/esp-idf/issues/18483
 2026-05-06 14:26:31 +08:00
Ashish Sharma cd38d68bd1 feat(bootloader_support): remove P192 curve support 2026-04-30 18:04:00 +08:00
Ashish Sharma bd27c398e8 fix(esp_tee): optimise build size by removing unused configs 2026-04-30 18:02:07 +08:00
Ashish Sharma 8c0e41afed fix(wpa_supplicant): replace deprecated APIs and relax dpp test 2026-04-30 18:02:07 +08:00
Ashish Sharma 306639c690 fix(esp-tls): replace deprecated pk_ctx with PSA equivalent 2026-04-30 18:02:06 +08:00
Ashish Sharma 3b3372df18 fix(mbedtls): remove deprecated configs and migrate to PSA 2026-04-30 18:02:06 +08:00
Ashish Sharma 7a1ba8f4ca feat(mbedtls): update to version 4.1.1 2026-04-30 18:02:06 +08:00
Ashish Sharma ad713295a0 fix(https_request): enforce tls version for supported ciphersuite example 2026-04-27 16:07:20 +08:00
Ashish Sharma 5fc46ba652 fix(https_server): fixes failing example build for linux target 2026-04-21 19:54:46 +08:00
Ashish Sharma bcf0acdead fix(mbedtls): remove not required MBEDTLS_TLS_DISABLED config 
Closes https://github.com/espressif/esp-idf/issues/18458
 2026-04-21 17:48:48 +08:00
Ashish Sharma 14731c19f0 fix(esp_srp): reject SRP client public key when A mod N is zero 2026-04-10 17:12:53 +08:00
Ashish Sharma 9fa73b1d89 fix(esp_http_client): fix broken connection reuse 
Closes https://github.com/espressif/esp-idf/issues/18430
 2026-04-10 11:47:45 +08:00
Ashish Sharma f3238ec7d5 feat(esp_tls): extends esp-tls test apps 2026-04-09 14:09:31 +08:00
Ashish Sharma 25c0c9da24 fix(esp_tls): check tls connection finished before read/write operation 2026-04-09 14:09:31 +08:00
Ashish Sharma 9172b31d56 Merge branch 'feat/reenable_rsa_4096_key_perf_test' into 'master' 
fix(mbedtls): reenable RSA 4096 bit key performance test

See merge request espressif/esp-idf!47228
 2026-04-09 10:14:27 +08:00
Ashish Sharma a858f1683d fix(mbedtls): reenable RSA 4096 bit key performance test 2026-04-08 14:54:04 +08:00
Ashish Sharma 3c2f81c6a8 feat(esp_http_server): adds check for crlf in response creation 2026-04-08 10:59:56 +08:00
Ashish Sharma 1ebb75e598 feat(esp_local_ctrl): adds basic test app 2026-04-02 10:38:46 +08:00
Ashish Sharma 544e71e263 fix(esp_local_ctrl): fixes a potential double free 2026-04-02 09:57:23 +08:00
Ashish Sharma a2f4554f10 fix(protocomm): fixes potential issues that can lead to crash during device provisioning 2026-04-01 10:08:00 +08:00
Ashish Sharma 6966661fae Merge branch 'fix/fix_esp32p4_key_mgr_efuse_key_rev_le_3' into 'master' 
fix(esp_hal_security): fixes failing hmac_hal_configure with efuse_key for p4 rev < 3

Closes IDFGH-17405

See merge request espressif/esp-idf!46875
 2026-03-25 10:22:04 +08:00
Ashish Sharma dc7843b954 fix(esp_hal_security): fixes failing hmac_hal_configure with efuse_key for p4 rev < 3 
Closes https://github.com/espressif/esp-idf/issues/18370
 2026-03-24 15:23:23 +05:30
Ashish Sharma 7e2e09c15c feat(esp_http_server): Adds support to bind an interface to server 
Closes https://github.com/espressif/esp-idf/issues/17859
 2026-03-24 17:38:01 +08:00
Ashish Sharma b64c70acda fix: fixes memory leak with subprotocols 2026-03-23 18:37:21 +08:00
Ashish Sharma 9fc0ca13b3 fix: fixes websocket server possible null dereference 2026-03-23 18:37:21 +08:00
Ashish Sharma 2a22a22fd4 Merge branch 'fix/migration_guide_secure_boot_192_curve_deprecation' into 'master' 
fix(secure_boot): marks 192 bit support curve legacy

See merge request espressif/esp-idf!46255
 2026-03-17 15:32:58 +08:00
Ashish Sharma eb3922dd12 fix(mbedtls): fixes incorrect macro checks in PSA SHA driver 
Closes https://github.com/espressif/esp-idf/issues/18354
 2026-03-17 13:18:28 +08:00
Ashish Sharma 26d295ac94 Merge branch 'feat/delete_content_length_header_with_transfer_encoding' into 'master' 
fix(esp_http_client): delete Content-Length header when using Transfer-Encoding

Closes IDFGH-17249

See merge request espressif/esp-idf!46658
 2026-03-17 12:19:03 +08:00
Ashish Sharma 22c384ca9f Merge branch 'docs/add_psa_drivers_guide' into 'master' 
doc: adds RSA DS docs for PSA Migration

Closes IDF-15242

See merge request espressif/esp-idf!45517
 2026-03-17 10:27:02 +08:00
Ashish Sharma d8b02883dc fix(secure_boot): marks 192 bit support curve legacy 2026-03-17 10:25:44 +08:00
Ashish Sharma 795f0466b6 fix(esp_http_client): delete Content-Length header when using Transfer-Encoding 
Closes https://github.com/espressif/esp-idf/issues/18242
 2026-03-16 17:31:07 +08:00
Ashish Sharma 727c638645 Merge branch 'contrib/github_pr_18310' into 'master' 
fix(esp_http_server): Dispatch PONG frames to WebSocket handler (GitHub PR)

Closes IDFGH-17331

See merge request espressif/esp-idf!46375
 2026-03-16 16:45:10 +08:00
Ashish Sharma 5edf434f2e docs: adds RSA DS docs for PSA Migration 2026-03-16 16:38:26 +08:00
Ashish Sharma 4971424986 feat(http_server): adds example to test server pong response 2026-03-13 17:42:10 +08:00
Ashish Sharma abe0d37d94 docs(security): adds data partition verification docs 2026-03-04 10:22:33 +08:00
Ashish Sharma f93575a622 feat(secure_boot): adds api to verify data partition integrity 
Closes https://github.com/espressif/esp-idf/issues/17482
 2026-03-04 10:22:33 +08:00
Ashish Sharma 20a6888b41 feat(esp-tls): adds per ssl context state management 2026-03-03 11:21:56 +08:00
Ashish Sharma f0f8183281 fix: removes deprecated http_crypto sources 2026-03-03 11:16:49 +08:00
Ashish Sharma b5c3e27a38 fix: fixes failing dynamic buffer tests 2026-03-03 11:16:49 +08:00
Ashish Sharma a67686bc55 feat(blufi): update to AES-CTR 2026-03-03 10:16:21 +08:00
Ashish Sharma 4d3e40d7be fix: enable HARDWARE_MPI by default 2026-03-03 10:16:21 +08:00
Ashish Sharma 56d2fd6757 fix(esp_http_server): remove http server unused psa migration 2026-03-02 14:48:41 +08:00
Ashish Sharma 7aa56f8d68 fix(esp_http_server): fix ws server subprotocol match 2026-03-02 14:47:27 +08:00
Ashish Sharma 4bec0bc5c2 fix(bleprph): skip using tls configs for bt examples 2026-03-02 10:48:10 +08:00
Ashish Sharma 5028b6230f feat(http_server): improve websocket server handling 
1. Adds post handshake callback
2. Removes requirement to handle HTTP_GET message in websocket handler

Closes https://github.com/espressif/esp-idf/issues/18215
 2026-02-27 09:59:05 +08:00
Ashish Sharma c9df1df830 Merge branch 'contrib/github_pr_18241' into 'master' 
fix(esp_https_server): SSL context leak when HTTPS server fails to start (GitHub PR)

Closes IDFGH-17248

See merge request espressif/esp-idf!45983
 2026-02-23 17:00:40 +08:00
Ashish Sharma 0b6843f2ed fix(mbedtls): updates crypto performance numbers 2026-02-11 23:35:59 +08:00
Ashish Sharma 8a8c4c175e fix(mbedtls): enable pthread threading by default 2026-02-11 17:59:04 +08:00
Ashish Sharma b3e1c03d97 fix(mbedtls): revert struct member name change esp_rsa_ds_data to esp_ds_data 2026-02-06 17:33:17 +08:00
Ashish Sharma 6f5b078ed6 feat: adds DS Sign capabilities for ESP32S2 2026-02-05 10:12:25 +08:00
Ashish Sharma e06a7dd791 feat: adds new Kconfig variable for DS peripheral 2026-02-05 10:12:25 +08:00
Ashish Sharma 1d185a6548 feat: adds PSA DS driver support 2026-02-05 10:12:25 +08:00
Ashish Sharma 470964ffdd fix: make the PSA compile definitions public 2026-02-03 14:55:44 +08:00