Commit Graph
29387 Commits
Author SHA1 Message Date
Zhi Wei Jian 22840d0259 feat(ble/bluedroid): add LL Extended Feature Set host support (Core 6.0)
(cherry picked from commit d568f2f151)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-26 09:08:15 +08:00
Zhi Wei JianandCursor 03f7c04406 feat(ble/bluedroid): add Frame Space Update host support (Core 6.0)
Co-authored-by: Cursor <cursoragent@cursor.com>


(cherry picked from commit 5372ce03a3)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-26 09:08:15 +08:00
Zhi Wei Jian 1d5d127881 feat(ble/bluedroid): add DBAF host support (Core 6.0)
(cherry picked from commit e20d3f0197)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-26 09:08:14 +08:00
Euripedes Rocha Filho c98139f38d change(mqtt): Update submodule to e3ab40c
* Update submodule: git log --oneline cac1552e..e3ab40c8

Detailed description of the changes:
* MR: Backport v5x
  - See merge request espressif/esp-mqtt!314
  - fix(mqtt5): Sanitize propery len/types to harden mqtt5-msg (espressif/esp-mqtt@ccded7e)
  - fix(mqtt5): Fix UB in variable len processing (espressif/esp-mqtt@c3f1ede)
* MR: ci: Simplify gitlab ci for v5.x backport branch
  - See merge request espressif/esp-mqtt!317
  - ci: Simplify gitlab ci for v5.x backport branch (espressif/esp-mqtt@d28a5c8)
2026-06-24 15:11:13 +02:00
Island 7a86eb2966 Merge branch 'feat/spi_log_qa_frame_check_v5.3' into 'release/v5.3'
feat(ble_log): add FINAL_STAT session-end frame and flush hook before controller restart (5.3)

See merge request espressif/esp-idf!49955
2026-06-24 19:51:12 +08:00
Xu Si Yu 54a63358cb fix(openthread): replace all malloc calls with calloc to avoid hidden uninitialized memory issues 2026-06-24 16:15:33 +08:00
Guo Zifan 0a2e3d0b0c feat(ble_log): Add frame check support for restart flow
(cherry picked from commit a81322a2ce)

Co-authored-by: guozifan <guozifan@espressif.com>
2026-06-24 11:25:24 +08:00
Island 0ebc9b6e69 Merge branch 'change/ble_update_lib_20260612_v5.3' into 'release/v5.3'
change(ble): [AUTO_MR] 20260612 - Update ESP BLE Controller Lib (5.3)

See merge request espressif/esp-idf!49607
2026-06-24 10:45:22 +08:00
wanckl 3dfe2bdecc fix(ci): twai test close board to fixed ci jobs pullotion 2026-06-23 16:07:04 +08:00
igor.udot 3350c3207d ci: twai runner setup 2026-06-23 16:06:51 +08:00
Mahavir Jain 7e04a1b9c8 Merge branch 'fix/disable_secure_boot_v2_ecdsa_v5.3' into 'release/v5.3'
Fix/disable secure boot v2 ecdsa (v5.3)

See merge request espressif/esp-idf!49474
2026-06-23 11:10:38 +05:30
morris 3a1859ece7 Merge branch 'bugfix/sdio_slave_buffer_size_limit_v5.3' into 'release/v5.3'
fix(sdio_slave): align buffer size checks with descriptor limits (v5.3)

See merge request espressif/esp-idf!49902
2026-06-23 11:45:29 +08:00
Jiang Jiang Jian 8cf2c2c738 Merge branch 'fix-malloc_pm_lock_in_internal_mem_v5.3' into 'release/v5.3'
fix(esp_pm): malloc pm_lock in internal mem (v5.3)

See merge request espressif/esp-idf!49686
2026-06-23 11:00:45 +08:00
Jiang Jiang Jian 6d8d1373c1 Merge branch 'bugfix/ag_unknown_codec_vv5.3' into 'release/v5.3'
fix(bt): skip unknown codecs when parsing AT+BAC(v5.3)

See merge request espressif/esp-idf!49842
2026-06-23 11:00:37 +08:00
Jiang Jiang Jian ed196c301f Merge branch 'fix/use_unilock_for_sleep_process_v5.3' into 'release/v5.3'
fix(esp_hw_support): use same lock for lightsleep/deepsleep process (v5.3)

See merge request espressif/esp-idf!49845
2026-06-23 11:00:20 +08:00
Jiang Jiang Jian 1ce987ae2e Merge branch 'bugfix/supp_pmk_cache_v5.3' into 'release/v5.3'
fix(wifi): Fix skipping usage of supp pmk caching for some cases

See merge request espressif/esp-idf!49883
2026-06-23 10:53:31 +08:00
morrisandCursor b26d612698 fix(sdio_slave): align buffer size checks with descriptor limits
Define per-target SDIO slave descriptor buffer limits in the LL layer and validate queued send buffers against the 4-byte aligned effective maximum. Update the public docs to describe the chip-dependent limit instead of hardcoding 4092 bytes.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-22 23:24:39 +08:00
Island b732ab02a4 Merge branch 'fix/ble_mesh_bug_report_v2_v5.3' into 'release/v5.3'
fix(ble_mesh): Miscellaneous bugfixes according to our internal bug report (v2)

See merge request espressif/esp-idf!49319
2026-06-22 22:29:36 +08:00
Rahul Tank 157e672392 Merge branch 'feat/throughput_l2cap_coc_v5.3' into 'release/v5.3'
Added l2cap_coc example for throughput (v5.3)

See merge request espressif/esp-idf!49742
2026-06-22 19:41:27 +05:30
Shreyas Sheth b52eb91c26 fix(wifi): Fix skipping usage of supp pmk caching for some cases 2026-06-22 15:41:05 +05:30
harshal.patil dc5be9b26d fix(esp_common/esp_fault): make ESP_FAULT_ASSERT survive optimization
ESP_FAULT_ASSERT(C) was silently deleted by the optimizer when C is a cached
flag/status already proven by a preceding `if (!C) return/goto`: the compiler
folds C to a constant and drops all three checks, removing the fault-injection
protection with no warning.
2026-06-22 11:38:55 +05:30
harshal.patil 2d24b4cbca fix(secure_boot): range-check ECDSA r,s in bootloader before ROM verify 2026-06-22 11:38:55 +05:30
harshal.patil 3587b50883 fix(esp_common): Add esp_fault_internal.h for use by G0 components
In release/v5.x, esp_fault.h resides in the esp_hw_support (G1)
component, so the G0 components (hal, esp_rom) must not depend on it.
Copy its contents to esp_common as esp_fault_internal.h, keep
esp_fault.h as a compatibility wrapper around it, and switch the hal
and esp_rom ECDSA/ECC code to the internal header.
2026-06-22 11:38:55 +05:30
harshal.patil 4b3c4e2fd9 test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver 2026-06-22 11:38:55 +05:30
harshal.patil 7640ef0a13 fix(esp_rom): Patch ets_ecdsa_verify() to include signature bounds check 2026-06-22 11:38:55 +05:30
harshal.patilandAshish Sharma 85055fabff fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down
Co-Authored-By: Ashish Sharma <ashish.sharma@espressif.com>
2026-06-22 11:38:55 +05:30
wuzhenghui 08d98dbc59 fix(esp_hw_support): use same lock for lightsleep/deepsleep process 2026-06-22 11:30:05 +08:00
xiongweichao 69b56b0315 fix(bt): skip unknown codecs when parsing AT+BAC
Peers may report custom or non-standard codec UUIDs in AT+BAC alongside
CVSD/mSBC. Returning BTA_AG_CODEC_NONE on the first unknown entry
discarded already-parsed standard codecs. Log unknown UUIDs and continue
parsing so negotiated capabilities still reflect supported codecs.
2026-06-22 11:13:48 +08:00
Island ab6b359a24 Merge branch 'feat/ble-smp-multi-adv-static-random-address_v5.3' into 'release/v5.3'
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses (5.3)

See merge request espressif/esp-idf!49786
2026-06-22 10:35:23 +08:00
Aditya Patwardhan 37c7960e32 change(secure_boot): mark ECDSA based Secure Boot V2 as insecure on affected SoCs
ECDSA based Secure Boot V2 is not functional for certain input vectors on
ESP32-C5/C61/H2/P4 and on the preview targets ESP32-H4/H21. RSA based Secure
Boot V2 is the recommended scheme where the SoC supports it. This issue will be
fixed in a future hardware ECO revision; more details will be shared through the
hardware errata document.

A new hidden Kconfig option SECURE_BOOT_V2_ECDSA_INSECURE marks the affected
mass-production SoCs (ESP32-C5/C61/H2/P4). On these SoCs, when hardware Secure
Boot V2 is enabled, the ECDSA (V2) signing scheme is no longer offered by
default; it must be turned on explicitly via SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
under "Allow potentially insecure options" (CONFIG_SECURE_BOOT_INSECURE). App
signing without hardware Secure Boot is not affected. Note that ESP32-C61 has no
RSA based Secure Boot V2, so it has no Secure Boot scheme enabled by default.

The preview targets ESP32-H4 and ESP32-H21 mark ECDSA Secure Boot V2 as not
supported in their SoC capabilities instead of using the option above. As
ESP32-H4 has no other Secure Boot V2 scheme, Secure Boot is disabled entirely on
it; ESP32-H21 retains RSA based Secure Boot V2.

The security documentation keeps the ECDSA Secure Boot V2 content visible and
adds a warning describing the limitation (including that ECDSA Secure Boot V2 on
ESP32-C61 is not recommended for production). CI apps that exercise ECDSA Secure
Boot V2 on the affected SoCs set CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
accordingly.
2026-06-19 15:24:59 +05:30
Astha Verma 9f10ed8f94 fix(nimble): Added l2cap_coc throughput examples 2026-06-19 12:26:18 +05:30
Rahul Tank 1f75b37d7f Merge branch 'bugfix/fix_log_performance_v5.3' into 'release/v5.3'
fix(nimble): Guard ble_hs_log_mbuf/flat_buf against non-DEBUG log level (v5.3)

See merge request espressif/esp-idf!49731
2026-06-18 21:39:50 +05:30
Wang Meng Yang 5728b5362b Merge branch 'bugfix/bbp_isses_v5.3' into 'release/v5.3'
Bugfix/bbp isses v5.3

See merge request espressif/esp-idf!49627
2026-06-18 14:48:22 +08:00
Zhang Hai Peng e0e3448f44 feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses
(cherry picked from commit 7986e2faa8)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-06-18 10:24:47 +08:00
Marius Vikhammer 8b9ea01634 Merge branch 'fix/efuse_damaged_reading_virtual_blocks_v5.3' into 'release/v5.3'
fix(efuse): erase virtual blocks before burn in damaged-reading test (v5.3)

See merge request espressif/esp-idf!49722
2026-06-17 18:21:17 +08:00
morris e87ffcd14e Merge branch 'feat/lcd_i2c_use_configurable_timeout_v5.3' into 'release/v5.3'
feat(lcd): add configurable timeout for lcd i2c panel (v5.3)

See merge request espressif/esp-idf!48673
2026-06-17 10:53:16 +08:00
morris 62da65a3c7 Merge branch 'doc/i2s_esp32_mclk_restriction_v5.3' into 'release/v5.3'
docs(i2s): add note for the restriction of MCLK on esp32 (v5.3)

See merge request espressif/esp-idf!48574
2026-06-17 10:51:50 +08:00
Jin Cheng 1a941a77a0 fix(bt/bluedroid): added buffer length check for HID Device data indication 2026-06-17 07:27:25 +08:00
Jin Cheng 756cb96277 fix(bt/bluedroid): added validation for all SMP BR opcode lengths in smp_br_data_received 2026-06-17 07:27:25 +08:00
Jin Cheng a5626bfc54 fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode 2026-06-17 07:27:25 +08:00
Jin Cheng 5a5968c8e9 fix(bt/bluedroid): added buffer length check for HID host data indication 2026-06-17 07:27:25 +08:00
Jin Cheng 8de265dc44 fix(bt/bluedroid): added buffer length check for L2CAP related functions 2026-06-17 07:27:25 +08:00
Jiang Jiang Jian 7a27688622 Merge branch 'bugfix/scan_issue_wpa3_enterprise_v5.3' into 'release/v5.3'
fix(wifi): scan security validation and NAN timer fixes (Backport v5.3)

See merge request espressif/esp-idf!49528
2026-06-16 21:08:46 +08:00
Rahul Tank f882932204 fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level 2026-06-16 16:30:57 +05:30
wuzhenghui 60f4050a4b fix(esp_pm): malloc pm_lock in internal mem 2026-06-16 17:56:52 +08:00
Konstantin Kondrashov 1cbe85a666 fix(efuse): erase virtual blocks before burn in damaged-reading test
Some chip may have BLOCK3 in use so we need to erase it before test.
2026-06-16 12:49:08 +03:00
Mahavir Jain a4a5c0af59 Merge branch 'fix/mbedtls_build_failure_x509_crt_v5.3' into 'release/v5.3'
fix(mbedtls): fixes build failure with clang21 (v5.3)

See merge request espressif/esp-idf!49417
2026-06-16 13:36:38 +05:30
Rahul Tank 972f6ac5a3 fix(protocomm): harden nimble transport size handling 2026-06-15 16:00:56 +05:30
Island 0bb375b34e Merge branch 'fix/gattc-multi-app-notif-warning_v5.3' into 'release/v5.3'
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if (5.3)

See merge request espressif/esp-idf!49514
2026-06-15 15:08:12 +08:00
Ashish Sharma b0fc1922c5 fix(mbedtls): fixes build failure with clang21
Closes https://github.com/espressif/esp-idf/issues/18456
2026-06-15 12:03:12 +08:00