Commit Graph

53316 Commits

Author SHA1 Message Date
Jiang Jiang Jian
301caa6d45 Merge branch 'docs/ulp_fsm_instruction_v6.1' into 'release/v6.1'
docs(ulp): clarify ULP FSM instruction cycle timing (v6.1)

See merge request espressif/esp-idf!50365
2026-07-16 10:48:39 +08:00
Jiang Jiang Jian
e813155ec4 Merge branch 'feature/dma2d_ppa_sleep_retention_support_v6.1' into 'release/v6.1'
feat(ppa): add sleep retention support for DMA2D and PPA (v6.1)

See merge request espressif/esp-idf!50342
2026-07-16 10:48:27 +08:00
Jiang Jiang Jian
479ff2c98b Merge branch 'change/change_regdma_malloc_caps_v6.1' into 'release/v6.1'
change(esp_hw_support): change regdma malloc caps to allow getting memory in the DMA pool (v6.1)

See merge request espressif/esp-idf!50257
2026-07-16 10:44:21 +08:00
Jiang Jiang Jian
3e573b992b Merge branch 'fix/fix_async_color_convert_csc_v6.1' into 'release/v6.1'
fix(dma2d): fix async color convert csc check (v6.1)

See merge request espressif/esp-idf!50238
2026-07-16 10:43:55 +08:00
Jiang Jiang Jian
68137eca5d Merge branch 'fix/fix_ble_rtc_register_issue_after_reset_v6.1' into 'release/v6.1'
fix(ble): fix ble rtc reset issues on esp32-h4 and esp32-s31 (6.1)

See merge request espressif/esp-idf!50204
2026-07-16 10:43:26 +08:00
Jiang Jiang Jian
7a0db8d0aa Merge branch 'fix/ble_mesh_disable_adv_pkt_discard_log_v6.1' into 'release/v6.1'
fix(ble_mesh): Disable warning logging when advertising packets are discarded (6.1)

See merge request espressif/esp-idf!50168
2026-07-16 10:42:18 +08:00
Jiang Jiang Jian
590dab22f9 Merge branch 'fix/fix_rgb_frame_buffer_alignment_v6.1' into 'release/v6.1'
fix(gdma): fix buffer alignment when psram ecc enabled (v6.1)

See merge request espressif/esp-idf!49996
2026-07-16 10:40:18 +08:00
Jiang Jiang Jian
b259c51ee3 Merge branch 'change/update_c61_gdma_header_v6.1' into 'release/v6.1'
change(ahb_dma): update c61 eco3 header files (v6.1)

See merge request espressif/esp-idf!49835
2026-07-16 10:38:55 +08:00
Mahavir Jain
1918bb2b10 Merge branch 'bugfix/memory-safety-and-validation_v6.1' into 'release/v6.1'
fix(security): findings from project Vanessa (v6.1)

See merge request espressif/esp-idf!50390
2026-07-15 21:52:48 +05:30
Aditya Patwardhan
39a219331c Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260703_v6.1' into 'release/v6.1'
feat(tools): update openocd version to v0.12.0-esp32-20260703 (v6.1)

See merge request espressif/esp-idf!50502
2026-07-15 12:26:55 +05:30
Samuel Obuch
88f7f94bc9 feat(tools): update openocd version to v0.12.0-esp32-20260703 2026-07-13 09:53:58 +02:00
Ashish Sharma
8d8068aee3 fix(esp_tee): fix DS-lock leak, intr-matrix OOB, calloc overflow, attestation leak 2026-07-13 14:40:44 +08:00
Ashish Sharma
2a63a05a85 fix(esp-tls): reject NULL host/url in plain-TCP and async HTTP connect 2026-07-13 14:40:44 +08:00
Ashish Sharma
e4304fab76 fix(mbedtls): validate crypto input lengths (TEE OOB, auth-bypass, overflows) 2026-07-13 14:40:44 +08:00
Ashish Sharma
e382f878cc fix(esp_https_server): free TLS session on transport_ctx OOM in httpd_ssl_open 2026-07-13 14:40:44 +08:00
Ashish Sharma
35227e41e9 fix(esp_hal_security): clamp tag_len in aes_hal_gcm_read_tag to prevent OOB 2026-07-13 14:40:44 +08:00
Ashish Sharma
bcfb0407f9 fix(bootloader_support): guard NULL efuse digest slot in secure-boot verify 2026-07-13 14:40:44 +08:00
Ashish Sharma
ef4ecd0591 fix(esp_http_client): fix digest-auth leaks and credential/handle use-after-free 2026-07-13 14:40:44 +08:00
Ashish Sharma
b589180b8b fix(esp_http_server): close UAF/double-free, buffer underflows, and OOB read 2026-07-13 14:40:44 +08:00
Ashish Sharma
9843bcc8dc fix(app_update): close OOB read, rollback-guard gap, and length underflow 2026-07-13 14:40:44 +08:00
Mahavir Jain
41582e1777 Merge branch 'ci/fix_esp_tee_cli_app_build_v6.1' into 'release/v6.1'
ci(esp_tee): Fix `tee_cli_app` build failure due to heap size overflow (v6.1)

See merge request espressif/esp-idf!50613
2026-07-10 11:56:40 +05:30
wuzhenghui
b388afd2f3 fix(esp_hw_support): update memory pointer checks for SPM support 2026-07-10 14:19:47 +08:00
Laukik Hase
87a5664883 ci(esp_tee): Fix tee_cli_app build failure due to heap size overflow
- Also fix the `unused variable` warning while builing the PSA
  AES tests with `tee_test_fw` app
2026-07-10 10:30:02 +05:30
Mahavir Jain
33217d154f Merge branch 'fix/esp_http_client_header_buffer_too_small_v6.1' into 'release/v6.1'
feat(esp_http_client): detect oversized headers in tx buffer at send site (v6.1)

See merge request espressif/esp-idf!50313
2026-07-10 09:41:40 +05:30
Mahavir Jain
5288101bdc Merge branch 'fix/harden_esp_security_v6.1' into 'release/v6.1'
fix(esp_security): harden crypto peripheral error handling (v6.1)

See merge request espressif/esp-idf!50324
2026-07-10 09:39:59 +05:30
Mahavir Jain
f0fbd9d9fa Merge branch 'fix/tls1_3_dynamic_buffer_server_crash_v6.1' into 'release/v6.1'
fix(mbedtls): fixes TLS1.3 server failing with dynamic buffer (v6.1)

See merge request espressif/esp-idf!50386
2026-07-10 09:38:26 +05:30
wuzhenghui
38421b8db7 change(heap): reserve DMA pool with low priority MALLOC_CAP_DEFAULT caps 2026-07-09 17:30:46 +08:00
Mahavir Jain
6fa5704eda Merge branch 'feat/enable_aes_gcm_support_for_esp32s31_v6.1' into 'release/v6.1'
feat: enable AES GCM support for ESP32-S31 (v6.1)

See merge request espressif/esp-idf!50399
2026-07-09 12:29:16 +05:30
Mahavir Jain
9a567fbb87 Merge branch 'feat/update_documentation_and_cleanup_for_esp32h4_v6.1' into 'release/v6.1'
Feat/update documentation and cleanup for esp32h4 (v6.1)

See merge request espressif/esp-idf!50398
2026-07-09 12:02:43 +05:30
Mahavir Jain
eda926af1c Merge branch 'fix/fix_esp_tee_failing_deterministic_ecdsa_sign_v6.1' into 'release/v6.1'
fix(esp_tee): release SHA held by HMAC after crypto peripheral reset (v6.1)

See merge request espressif/esp-idf!50317
2026-07-09 11:52:38 +05:30
Mahavir Jain
ab92370b33 Merge branch 'fix/revert_redundant_rom_pmp_18769_v6.1' into 'release/v6.1'
revert(esp_hw_support): Re-add separate D-ROM PMP entry on C6/H2 (v6.1)

See merge request espressif/esp-idf!50359
2026-07-09 11:52:14 +05:30
Ashish Sharma
1041b69131 feat(esp_http_client): detect oversized headers in tx buffer while sending request 2026-07-07 18:22:08 +08:00
nilesh.kale
c9e90831b8 feat: enable AES GCM support for ESP32-S31 2026-07-06 15:08:38 +05:30
nilesh.kale
7cb0e4c70a feat: added call to aquire clock source for H4 and H21 AES crypto 2026-07-06 15:08:02 +05:30
nilesh.kale
6cf7191e1d feat: update docs for ESP32H4 security chapters 2026-07-06 15:08:02 +05:30
Chen Jichang
8b427bd676 fix(dma2d): fix async color convert csc check 2026-07-06 17:00:54 +08:00
Jiang Jiang Jian
76f1151d72 Merge branch 'fix/ble-log-64-bit-io-setup-support_v6.1' into 'release/v6.1'
fix(ble_log): use BIT64 over BIT to support 64-bit IO setup (6.1)

See merge request espressif/esp-idf!50332
2026-07-06 15:51:27 +08:00
Jiang Jiang Jian
264bc73875 Merge branch 'bugfix/fix_ble_chan_compilation_issue_v6.1' into 'release/v6.1'
fix(nimble): Fix ble_chan_sound_reflector compilation issue (v6.1)

See merge request espressif/esp-idf!50363
2026-07-06 15:51:18 +08:00
Ashish Sharma
8ca83a0fa9 fix(mbedtls): fixes TLS1.3 server failing with dynamic buffer 2026-07-06 15:18:23 +08:00
Marius Vikhammer
65f107e14b docs(ulp): clarify ULP FSM instruction cycle timing
Closes https://github.com/espressif/esp-idf/issues/4088
2026-07-06 11:03:26 +08:00
Chen Jichang
1b9d03fd10 change(ahb_dma): update c61 eco3 header files 2026-07-06 10:29:16 +08:00
Chen Jichang
5b50ec248d fix(gdma): fix buffer alignment when psram ecc enabled
Closes https://github.com/espressif/esp-idf/issues/18739
2026-07-06 10:28:28 +08:00
Rahul Tank
e44969a390 fix(nimble): Fix ble_chan_sound_reflector compilation issue 2026-07-06 07:52:43 +05:30
Jiang Jiang Jian
169aded5b1 Merge branch 'fix/backport_nan_fixes_v6.1' into 'release/v6.1'
Backport NAN features and a few fixes to v6.1 (Backport v6.1)

See merge request espressif/esp-idf!50349
2026-07-04 01:03:16 +08:00
Nachiket Kukade
02da1d5807 feat(lwip): Add IPv6 static neighbor cache entry support
Add esp_netif_add_static_neighbor() and esp_netif_remove_static_neighbor(),
gated by CONFIG_LWIP_ND6_SUPPORT_STATIC_ENTRIES. These API's let callers
install/remove permanent IPv6->MAC mappings that bypass Neighbor Discovery
(no NS/NA). The calls run in the TCP/IP context and wrap the underlying lwIP
nd6_add_static_neighbor()/nd6_remove_static_neighbor() functions.
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
1b59e8a526 refactor(wifi): astyle-format wifi_netif.c
The ternary continuation in esp_wifi_netif_set_static_neighbor() was not
astyle-formatted; re-indent it so the pre-commit astyle hook passes in CI.
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
24b2c12490 refactor(nan): drop '##' debug marker from key hexdump tags
The six key-material hexdumps (ND-IGTK/BIGTK/TK/GTK and the peer IGTK/BIGTK)
kept a leftover '##' dev-grep marker on their tag string. Drop it; the
descriptive labels stay and the dumps remain at ESP_LOG_DEBUG.
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
b13c9880cc change(wifi): sync NAN/netif wifi headers + rebuilt libs [d3da506]
- injected esp_wifi_netif.h: add esp_wifi_netif_get_ip6_linklocal_from_mac()
  and esp_wifi_netif_set_static_neighbor() (static ND6 IPv6-pin API).
- esp_wifi_types_generic.h (public + injected): rename the NCS-GTK cipher
  suites CCM_128 -> CCMP_128 / GCM_256 -> GCMP_256 to match Wi-Fi Aware v4.0
  (Table 121, section 9.5.21.1); refresh NAN group-protection docs. Enum
  values (5/6), struct layout and on-air behaviour are unchanged.
- nan_security.c: use the renamed macros and update the advertise log.
- esp_wifi/lib: bump to the rebuilt blobs carrying the renamed MD5-checked
  header (han2 d3da506).
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
8a1ff4f9ff fix(nan): restrict GTK Key ID to 1/2 and ignore cleartext group KDEs
- Tighten the own GTK Key ID guard from ">3" (which admitted 0 and 3) to
  the spec range 1..2 (Wi-Fi Aware v4.0 §7.1.3.2).
- When the Encrypted-Key-Data bit is clear, ignore the Key Data instead of
  parsing KDEs from the clear: group KDEs are only ever carried KEK-wrapped
  (§7.1.3.5; 802.11-2020 §12.7.2). Also store the peer IPN/BIPN from the
  IGTK/BIGTK KDEs for the BIP RX replay-counter seed.
2026-07-04 00:05:20 +08:00
Sarvesh Bodakhe
7f287f6288 fix(nan): seed peer BIP RX replay counter from the KDE IPN/BIPN
The peer IGTK/BIGTK were installed with an all-zero seq, so the blob's BIP
RX replay counter started at 0 instead of the peer's advertised value. Store
the 6-octet IPN/BIPN from the IGTK/BIGTK KDE (the octets after the 2-byte
Key ID, per 802.11 Fig 12-42/12-47) into the NDL and pass them as the
install seq. The parser side of this lands with the group-KDE guards.
2026-07-04 00:05:20 +08:00