Jiang Jiang Jian
301caa6d45
Merge branch 'docs/ulp_fsm_instruction_v6.1' into 'release/v6.1'
...
docs(ulp): clarify ULP FSM instruction cycle timing (v6.1)
See merge request espressif/esp-idf!50365
2026-07-16 10:48:39 +08:00
Jiang Jiang Jian
e813155ec4
Merge branch 'feature/dma2d_ppa_sleep_retention_support_v6.1' into 'release/v6.1'
...
feat(ppa): add sleep retention support for DMA2D and PPA (v6.1)
See merge request espressif/esp-idf!50342
2026-07-16 10:48:27 +08:00
Jiang Jiang Jian
479ff2c98b
Merge branch 'change/change_regdma_malloc_caps_v6.1' into 'release/v6.1'
...
change(esp_hw_support): change regdma malloc caps to allow getting memory in the DMA pool (v6.1)
See merge request espressif/esp-idf!50257
2026-07-16 10:44:21 +08:00
Jiang Jiang Jian
3e573b992b
Merge branch 'fix/fix_async_color_convert_csc_v6.1' into 'release/v6.1'
...
fix(dma2d): fix async color convert csc check (v6.1)
See merge request espressif/esp-idf!50238
2026-07-16 10:43:55 +08:00
Jiang Jiang Jian
68137eca5d
Merge branch 'fix/fix_ble_rtc_register_issue_after_reset_v6.1' into 'release/v6.1'
...
fix(ble): fix ble rtc reset issues on esp32-h4 and esp32-s31 (6.1)
See merge request espressif/esp-idf!50204
2026-07-16 10:43:26 +08:00
Jiang Jiang Jian
7a0db8d0aa
Merge branch 'fix/ble_mesh_disable_adv_pkt_discard_log_v6.1' into 'release/v6.1'
...
fix(ble_mesh): Disable warning logging when advertising packets are discarded (6.1)
See merge request espressif/esp-idf!50168
2026-07-16 10:42:18 +08:00
Jiang Jiang Jian
590dab22f9
Merge branch 'fix/fix_rgb_frame_buffer_alignment_v6.1' into 'release/v6.1'
...
fix(gdma): fix buffer alignment when psram ecc enabled (v6.1)
See merge request espressif/esp-idf!49996
2026-07-16 10:40:18 +08:00
Jiang Jiang Jian
b259c51ee3
Merge branch 'change/update_c61_gdma_header_v6.1' into 'release/v6.1'
...
change(ahb_dma): update c61 eco3 header files (v6.1)
See merge request espressif/esp-idf!49835
2026-07-16 10:38:55 +08:00
Mahavir Jain
1918bb2b10
Merge branch 'bugfix/memory-safety-and-validation_v6.1' into 'release/v6.1'
...
fix(security): findings from project Vanessa (v6.1)
See merge request espressif/esp-idf!50390
2026-07-15 21:52:48 +05:30
Aditya Patwardhan
39a219331c
Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260703_v6.1' into 'release/v6.1'
...
feat(tools): update openocd version to v0.12.0-esp32-20260703 (v6.1)
See merge request espressif/esp-idf!50502
2026-07-15 12:26:55 +05:30
Samuel Obuch
88f7f94bc9
feat(tools): update openocd version to v0.12.0-esp32-20260703
2026-07-13 09:53:58 +02:00
Ashish Sharma
8d8068aee3
fix(esp_tee): fix DS-lock leak, intr-matrix OOB, calloc overflow, attestation leak
2026-07-13 14:40:44 +08:00
Ashish Sharma
2a63a05a85
fix(esp-tls): reject NULL host/url in plain-TCP and async HTTP connect
2026-07-13 14:40:44 +08:00
Ashish Sharma
e4304fab76
fix(mbedtls): validate crypto input lengths (TEE OOB, auth-bypass, overflows)
2026-07-13 14:40:44 +08:00
Ashish Sharma
e382f878cc
fix(esp_https_server): free TLS session on transport_ctx OOM in httpd_ssl_open
2026-07-13 14:40:44 +08:00
Ashish Sharma
35227e41e9
fix(esp_hal_security): clamp tag_len in aes_hal_gcm_read_tag to prevent OOB
2026-07-13 14:40:44 +08:00
Ashish Sharma
bcfb0407f9
fix(bootloader_support): guard NULL efuse digest slot in secure-boot verify
2026-07-13 14:40:44 +08:00
Ashish Sharma
ef4ecd0591
fix(esp_http_client): fix digest-auth leaks and credential/handle use-after-free
2026-07-13 14:40:44 +08:00
Ashish Sharma
b589180b8b
fix(esp_http_server): close UAF/double-free, buffer underflows, and OOB read
2026-07-13 14:40:44 +08:00
Ashish Sharma
9843bcc8dc
fix(app_update): close OOB read, rollback-guard gap, and length underflow
2026-07-13 14:40:44 +08:00
Mahavir Jain
41582e1777
Merge branch 'ci/fix_esp_tee_cli_app_build_v6.1' into 'release/v6.1'
...
ci(esp_tee): Fix `tee_cli_app` build failure due to heap size overflow (v6.1)
See merge request espressif/esp-idf!50613
2026-07-10 11:56:40 +05:30
wuzhenghui
b388afd2f3
fix(esp_hw_support): update memory pointer checks for SPM support
2026-07-10 14:19:47 +08:00
Laukik Hase
87a5664883
ci(esp_tee): Fix tee_cli_app build failure due to heap size overflow
...
- Also fix the `unused variable` warning while builing the PSA
AES tests with `tee_test_fw` app
2026-07-10 10:30:02 +05:30
Mahavir Jain
33217d154f
Merge branch 'fix/esp_http_client_header_buffer_too_small_v6.1' into 'release/v6.1'
...
feat(esp_http_client): detect oversized headers in tx buffer at send site (v6.1)
See merge request espressif/esp-idf!50313
2026-07-10 09:41:40 +05:30
Mahavir Jain
5288101bdc
Merge branch 'fix/harden_esp_security_v6.1' into 'release/v6.1'
...
fix(esp_security): harden crypto peripheral error handling (v6.1)
See merge request espressif/esp-idf!50324
2026-07-10 09:39:59 +05:30
Mahavir Jain
f0fbd9d9fa
Merge branch 'fix/tls1_3_dynamic_buffer_server_crash_v6.1' into 'release/v6.1'
...
fix(mbedtls): fixes TLS1.3 server failing with dynamic buffer (v6.1)
See merge request espressif/esp-idf!50386
2026-07-10 09:38:26 +05:30
wuzhenghui
38421b8db7
change(heap): reserve DMA pool with low priority MALLOC_CAP_DEFAULT caps
2026-07-09 17:30:46 +08:00
Mahavir Jain
6fa5704eda
Merge branch 'feat/enable_aes_gcm_support_for_esp32s31_v6.1' into 'release/v6.1'
...
feat: enable AES GCM support for ESP32-S31 (v6.1)
See merge request espressif/esp-idf!50399
2026-07-09 12:29:16 +05:30
Mahavir Jain
9a567fbb87
Merge branch 'feat/update_documentation_and_cleanup_for_esp32h4_v6.1' into 'release/v6.1'
...
Feat/update documentation and cleanup for esp32h4 (v6.1)
See merge request espressif/esp-idf!50398
2026-07-09 12:02:43 +05:30
Mahavir Jain
eda926af1c
Merge branch 'fix/fix_esp_tee_failing_deterministic_ecdsa_sign_v6.1' into 'release/v6.1'
...
fix(esp_tee): release SHA held by HMAC after crypto peripheral reset (v6.1)
See merge request espressif/esp-idf!50317
2026-07-09 11:52:38 +05:30
Mahavir Jain
ab92370b33
Merge branch 'fix/revert_redundant_rom_pmp_18769_v6.1' into 'release/v6.1'
...
revert(esp_hw_support): Re-add separate D-ROM PMP entry on C6/H2 (v6.1)
See merge request espressif/esp-idf!50359
2026-07-09 11:52:14 +05:30
Ashish Sharma
1041b69131
feat(esp_http_client): detect oversized headers in tx buffer while sending request
2026-07-07 18:22:08 +08:00
nilesh.kale
c9e90831b8
feat: enable AES GCM support for ESP32-S31
2026-07-06 15:08:38 +05:30
nilesh.kale
7cb0e4c70a
feat: added call to aquire clock source for H4 and H21 AES crypto
2026-07-06 15:08:02 +05:30
nilesh.kale
6cf7191e1d
feat: update docs for ESP32H4 security chapters
2026-07-06 15:08:02 +05:30
Chen Jichang
8b427bd676
fix(dma2d): fix async color convert csc check
2026-07-06 17:00:54 +08:00
Jiang Jiang Jian
76f1151d72
Merge branch 'fix/ble-log-64-bit-io-setup-support_v6.1' into 'release/v6.1'
...
fix(ble_log): use BIT64 over BIT to support 64-bit IO setup (6.1)
See merge request espressif/esp-idf!50332
2026-07-06 15:51:27 +08:00
Jiang Jiang Jian
264bc73875
Merge branch 'bugfix/fix_ble_chan_compilation_issue_v6.1' into 'release/v6.1'
...
fix(nimble): Fix ble_chan_sound_reflector compilation issue (v6.1)
See merge request espressif/esp-idf!50363
2026-07-06 15:51:18 +08:00
Ashish Sharma
8ca83a0fa9
fix(mbedtls): fixes TLS1.3 server failing with dynamic buffer
2026-07-06 15:18:23 +08:00
Marius Vikhammer
65f107e14b
docs(ulp): clarify ULP FSM instruction cycle timing
...
Closes https://github.com/espressif/esp-idf/issues/4088
2026-07-06 11:03:26 +08:00
Chen Jichang
1b9d03fd10
change(ahb_dma): update c61 eco3 header files
2026-07-06 10:29:16 +08:00
Chen Jichang
5b50ec248d
fix(gdma): fix buffer alignment when psram ecc enabled
...
Closes https://github.com/espressif/esp-idf/issues/18739
2026-07-06 10:28:28 +08:00
Rahul Tank
e44969a390
fix(nimble): Fix ble_chan_sound_reflector compilation issue
2026-07-06 07:52:43 +05:30
Jiang Jiang Jian
169aded5b1
Merge branch 'fix/backport_nan_fixes_v6.1' into 'release/v6.1'
...
Backport NAN features and a few fixes to v6.1 (Backport v6.1)
See merge request espressif/esp-idf!50349
2026-07-04 01:03:16 +08:00
Nachiket Kukade
02da1d5807
feat(lwip): Add IPv6 static neighbor cache entry support
...
Add esp_netif_add_static_neighbor() and esp_netif_remove_static_neighbor(),
gated by CONFIG_LWIP_ND6_SUPPORT_STATIC_ENTRIES. These API's let callers
install/remove permanent IPv6->MAC mappings that bypass Neighbor Discovery
(no NS/NA). The calls run in the TCP/IP context and wrap the underlying lwIP
nd6_add_static_neighbor()/nd6_remove_static_neighbor() functions.
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
1b59e8a526
refactor(wifi): astyle-format wifi_netif.c
...
The ternary continuation in esp_wifi_netif_set_static_neighbor() was not
astyle-formatted; re-indent it so the pre-commit astyle hook passes in CI.
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
24b2c12490
refactor(nan): drop '##' debug marker from key hexdump tags
...
The six key-material hexdumps (ND-IGTK/BIGTK/TK/GTK and the peer IGTK/BIGTK)
kept a leftover '##' dev-grep marker on their tag string. Drop it; the
descriptive labels stay and the dumps remain at ESP_LOG_DEBUG.
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
b13c9880cc
change(wifi): sync NAN/netif wifi headers + rebuilt libs [d3da506]
...
- injected esp_wifi_netif.h: add esp_wifi_netif_get_ip6_linklocal_from_mac()
and esp_wifi_netif_set_static_neighbor() (static ND6 IPv6-pin API).
- esp_wifi_types_generic.h (public + injected): rename the NCS-GTK cipher
suites CCM_128 -> CCMP_128 / GCM_256 -> GCMP_256 to match Wi-Fi Aware v4.0
(Table 121, section 9.5.21.1); refresh NAN group-protection docs. Enum
values (5/6), struct layout and on-air behaviour are unchanged.
- nan_security.c: use the renamed macros and update the advertise log.
- esp_wifi/lib: bump to the rebuilt blobs carrying the renamed MD5-checked
header (han2 d3da506).
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
8a1ff4f9ff
fix(nan): restrict GTK Key ID to 1/2 and ignore cleartext group KDEs
...
- Tighten the own GTK Key ID guard from ">3" (which admitted 0 and 3) to
the spec range 1..2 (Wi-Fi Aware v4.0 §7.1.3.2).
- When the Encrypted-Key-Data bit is clear, ignore the Key Data instead of
parsing KDEs from the clear: group KDEs are only ever carried KEK-wrapped
(§7.1.3.5; 802.11-2020 §12.7.2). Also store the peer IPN/BIPN from the
IGTK/BIGTK KDEs for the BIP RX replay-counter seed.
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
7f287f6288
fix(nan): seed peer BIP RX replay counter from the KDE IPN/BIPN
...
The peer IGTK/BIGTK were installed with an all-zero seq, so the blob's BIP
RX replay counter started at 0 instead of the peer's advertised value. Store
the 6-octet IPN/BIPN from the IGTK/BIGTK KDE (the octets after the 2-byte
Key ID, per 802.11 Fig 12-42/12-47) into the NDL and pass them as the
install seq. The parser side of this lands with the group-KDE guards.
2026-07-04 00:05:20 +08:00