Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity
49,038 Commits 25 Branches 192 Tags
3d56f3113300b4e4f944f9ec15aa55391e7ffd00
Commit Graph

34152 Commits

Author SHA1 Message Date
hejiaxin
3d56f31133 fix(bt_avrcp): size some AVRC command buffers 2026-09-01 11:24:02 +08:00
hejiaxin
49c18b3aaf fix(bt_l2cap): size L2CAP ERTM S-frame & RX SDU buffer 2026-09-01 11:24:02 +08:00
hejiaxin
5e8f5c85fb fix(bt_sdp): size SDP TX buffers 2026-09-01 11:24:02 +08:00
hejiaxin
6bfe3c70e3 fix(bt_rfcomm): size RFCOMM TX buffers by peer MTU 2026-09-01 11:23:59 +08:00
hejiaxin
3e9012b5e3 fix(bt_hid): size HID TX buffers to report length 2026-09-01 11:21:41 +08:00
morris
210ac40082 Merge branch 'fix/jpeg_enc_header_oob_v5.5' into 'release/v5.5' 
fix(jpeg): validate encoder buffer sizes before header/DMA access (backport v5.5)

See merge request espressif/esp-idf!52123
 2026-08-31 11:11:01 +08:00
Mahavir Jain
fd0b33dfda Merge branch 'bugfix/memory-safety-and-validation_v5.5' into 'release/v5.5' 
fix(security): findings from project Vanessa (v5.5)

See merge request espressif/esp-idf!50411
 2026-08-28 17:17:10 +05:30
Jiang Jiang Jian
d90d34f89a Merge branch 'bugfix/nan_vulnerabilities_v5.5' into 'release/v5.5' 
fix(nan): Fix bug bounty reported and discovered vulnerabilities in NAN Rx (Backport v5.5)

See merge request espressif/esp-idf!51300
 2026-08-28 18:00:40 +08:00
morris
9c01eb00e3 Merge branch 'fix/isp_error_when_rgb888_input_v5.5' into 'release/v5.5' 
fix(isp): initialize Color defaults for RGB DMA output (v5.5)

See merge request espressif/esp-idf!51648
 2026-08-28 17:38:52 +08:00
Marius Vikhammer
af64bbd9e2 Merge branch 'bugfix/heap_task_tracking_isr_safe_v5.5' into 'release/v5.5' 
fix(heap): use critical section for task tracking locks (v5.5)

See merge request espressif/esp-idf!52010
 2026-08-28 15:56:38 +08:00
Wang Meng Yang
b5b7c57da3 Merge branch 'fix/aireview_obex_v5.5' into 'release/v5.5' 
fix(bt_obex): fix some bugs in bluedroid obex (v5.5)

See merge request espressif/esp-idf!52006
 2026-08-28 08:42:46 +08:00
Mahavir Jain
c13bec45b1 Merge branch 'fix/esp32s2_aes_dma_psram_partial_block_hang_v5.5' into 'release/v5.5' 
Avoid ESP32-S2 Crypto DMA stall on PSRAM output with partial blocks (v5.5)

See merge request espressif/esp-idf!51876
 2026-08-27 12:05:36 +05:30
C.S.M
ceb7443c4d fix(jpeg): validate encoder buffer sizes before header/DMA access 
Bound JPEG header emission by outbuf capacity and reject undersized
input buffers before programming TX DMA to avoid heap corruption and
out-of-bounds DMA reads.

(cherry picked from commit a7ac00b812)
 2026-08-27 13:51:22 +08:00
Marius Vikhammer
d16bdf622b Merge branch 'bugfix/c5_mac_ext_byte_order_v5.5' into 'release/v5.5' 
fix(efuse): correct MAC_EXT byte order on ESP32-C5 and ESP32-H21 (v5.5)

See merge request espressif/esp-idf!52033
 2026-08-27 11:08:16 +08:00
Island
19839f076d Merge branch 'change/ble_update_lib_20260824_v5.5' into 'release/v5.5' 
change(ble): [AUTO_MR] 20260824 - Update ESP BLE Controller Lib (5.5)

See merge request espressif/esp-idf!52019
 2026-08-26 22:00:50 +08:00
Rahul Tank
01cc6a6580 Merge branch 'bugfix/fix_pawr_conn_issues_v5.5' into 'release/v5.5' 
fix(nimble): bound PAwR synced connect retries in the example (v5.5)

See merge request espressif/esp-idf!52026
 2026-08-25 16:08:24 +05:30
Akshat Agrawal
77b57d35cf fix(nan): Fix bug bounty reported and discovered vulnerabilities in NAN Rx 2026-08-25 14:31:49 +05:30
Meet Patel
60b843b7ea fix(efuse): correct MAC_EXT byte order on ESP32-C5 and ESP32-H21 
A single 16-bit MAC_EXT field was read little-endian, reversing FF:FE
used for IEEE 802.15.4 EUI 64 extension.

Closes https://github.com/espressif/esp-idf/issues/18955
 2026-08-25 13:51:32 +05:30
Jiang Jiang Jian
d72f03f0ca Merge branch 'bugfix/a2dp_sink_nego_sbc_v5.5' into 'release/v5.5' 
fix(bt): do not cap AVDTP Discover results by local SEP count (v5.5)

See merge request espressif/esp-idf!51752
 2026-08-25 16:11:26 +08:00
Zhao Wei Liang
173daa4bbc change(ble): [AUTO_MR] Update lib_esp32c6 to cdaefea1 
(cherry picked from commit d2210c2c26)

Co-authored-by: zhaoweiliang <zhaoweiliang@espressif.com>
 2026-08-25 14:05:19 +08:00
Zhao Wei Liang
ba5f877e69 change(ble): [AUTO_MR] Update lib_esp32c5 to cdaefea1 
(cherry picked from commit 85d8971199)

Co-authored-by: zhaoweiliang <zhaoweiliang@espressif.com>
 2026-08-25 14:05:18 +08:00
Zhao Wei Liang
110239b3a3 change(ble): [AUTO_MR] Update lib_esp32h2 to cdaefea1 
(cherry picked from commit b3ba8cad9a)

Co-authored-by: zhaoweiliang <zhaoweiliang@espressif.com>
 2026-08-25 14:05:17 +08:00
Ashish Sharma
2312716f8c fix(esp_http_client): return an error when append_string realloc fails 2026-08-25 14:00:19 +08:00
Ashish Sharma
25f5e205cd fix(mbedtls): bound *iv_off in DMA esp_aes_crypt_ofb to prevent OOB read 2026-08-25 13:35:50 +08:00
Ashish Sharma
4751d66bd0 fix(esp_tee): guard calloc overflow and attestation leak 2026-08-25 13:35:50 +08:00
Ashish Sharma
7ca54ff43a fix(mbedtls): validate crypto input lengths (TEE OOB, auth-bypass, overflows) 2026-08-25 13:35:50 +08:00
Rahul Tank
348cd3dba8 fix(nimble): bound PAwR synced connect retries in the example 2026-08-25 10:57:57 +05:30
Meet Patel
0ffb79d381 fix(heap): use critical section for task tracking locks 2026-08-25 10:39:40 +05:30
Jiang Jiang Jian
9f97b30fff Merge branch 'backport/backport_dialog_token_ds_parameter_and_max_bw_nego_changes_v5.5' into 'release/v5.5' 
feat(wifi): support max bandwidth negotiation(backport v5.5)

See merge request espressif/esp-idf!51943
 2026-08-25 12:52:53 +08:00
hejiaxin
d05af8d2e7 fix(bt_obex): fix some bugs in bluedroid obex 
- fix goepc wait state switch
- fix psm unbind's mismatch
- fix some resources leak
- fix goep connection's incorrect ternimation when congesting
- Add some NULL ptr check
 2026-08-25 12:02:51 +08:00
Ashish Sharma
cd516819ae fix(esp_http_client): fix digest-auth leaks and credential/handle use-after-free 2026-08-25 12:02:05 +08:00
Ashish Sharma
370cbcaff9 fix(esp_http_server): close UAF/double-free and query/cookie buffer underflows 2026-08-25 12:02:05 +08:00
Ashish Sharma
7c2e4b2a58 fix(app_update): close partition-table OOB read and rollback-guard gap 2026-08-25 12:02:05 +08:00
Ashish Sharma
7bf19e2f0e fix(esp-tls): reject NULL host/url in plain-TCP and async HTTP connect 2026-08-25 12:02:05 +08:00
Ashish Sharma
ef8e915258 fix(esp_https_server): free TLS session on transport_ctx OOM in httpd_ssl_open 2026-08-25 12:02:05 +08:00
Ashish Sharma
1fc6094b14 fix(hal): clamp tag_len in aes_hal_gcm_read_tag to prevent OOB 2026-08-25 12:02:05 +08:00
Ashish Sharma
899aeadd7c fix(bootloader_support): guard NULL efuse digest slot in secure-boot verify 2026-08-25 12:02:05 +08:00
Jiang Jiang Jian
980973a1bc Merge branch 'bugfix/strncpy_compilation_issue_v5.5' into 'release/v5.5' 
fix(bluedroid): Fix the compilation issue of BCM_STRNCPY_S (v5.5)

See merge request espressif/esp-idf!51744
 2026-08-25 11:46:43 +08:00
harshal.patil
dd99e05dd1 test(mbedtls): add partial-block PSRAM coverage for AES 
Extend the CTR test data length to 6433 bytes so the trailing partial
block is exercised with external RAM buffers (which stalls the ESP32-S2
Crypto DMA on an unfixed driver).
 2026-08-25 08:54:20 +05:30
harshal.patil
c4075d6124 fix(mbedtls/aes): fix ESP32-S2 Crypto DMA stall on PSRAM output with partial blocks 
The ESP32-S2 Crypto DMA in-channel stalls silently when a receive
descriptor list transitions from external to internal RAM. The AES
driver hits this when a PSRAM-output operation has a trailing partial
block, as the internal stream descriptor is linked after the external
RAM data descriptors.

- esp_aes_process_dma(): process the block-aligned part and the partial
  block as two separate DMA operations, keeping each descriptor list
  uniform
- crypto_dma_ll_reset(): also reset the in-channel (per the TRM receive
  reset sequence), otherwise stale state from a preceding external-RAM
  operation corrupts the next operation's output

The GCM DMA path is unaffected; it never operates on PSRAM buffers.
 2026-08-25 08:54:19 +05:30
Jiang Jiang Jian
8b876ea446 Merge branch 'feat/c5_eco4_newlib_support_v5.5' into 'release/v5.5' 
change(esp_libc): use C5 ECO4 ROM newlib functions (v5.5)

See merge request espressif/esp-idf!51904
 2026-08-25 10:57:55 +08:00
Jiang Jiang Jian
ef92d00a91 Merge branch 'feat/optimize_bootloader_size_v5.5' into 'release/v5.5' 
change(bootloader): optimize bootloader size (v5.5)

See merge request espressif/esp-idf!51598
 2026-08-25 10:54:54 +08:00
Jiang Jiang Jian
e9a60a52e3 Merge branch 'fix/fix_esp_mbedtls_read_return_code_v5.5' into 'release/v5.5' 
fix(esp-tls): correct return codes and harden TLS 1.3 ticket handling (v5.5)

See merge request espressif/esp-idf!51865
 2026-08-25 10:54:11 +08:00
Jiang Jiang Jian
bb3f9b29b9 Merge branch 'contrib/github_pr_18815_v5.5' into 'release/v5.5' 
Fix minor issues in sd (GitHub PR) (v5.5)

See merge request espressif/esp-idf!51437
 2026-08-25 10:53:13 +08:00
Jiang Jiang Jian
60115cf982 Merge branch 'fix/crt-bundle-unaligned-reads_v5.5' into 'release/v5.5' 
fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access (v5.5)

See merge request espressif/esp-idf!51725
 2026-08-25 10:52:21 +08:00
Jiang Jiang Jian
5f5f86c0eb Merge branch 'fix/heap_trace_stack_corruption_v5.5' into 'release/v5.5' 
fix(heap): avoid stack smash when heap tracing stack depth is 0 (v5.5)

See merge request espressif/esp-idf!51522
 2026-08-25 10:51:18 +08:00
Jiang Jiang Jian
b97e58f89e Merge branch 'bugfix/nvs-deinit-open-handle-leak_v5.5' into 'release/v5.5' 
fix(nvs_flash): delete leftover handles on partition deinit (v5.5)

See merge request espressif/esp-idf!51358
 2026-08-25 10:50:23 +08:00
Jiang Jiang Jian
8bc2c28cab Merge branch 'fix/esp-event-security-fixes_v5.5' into 'release/v5.5' 
fix(esp_event): multiple security and stability fixes (v5.5)

See merge request espressif/esp-idf!51049
 2026-08-25 10:47:44 +08:00
Jiang Jiang Jian
1597d07086 Merge branch 'contrib/github_pr_18829_v5.5' into 'release/v5.5' 
fix(spiffs): fix off-by-one in spiffsgen.py obj name length check (GitHub PR) (v5.5)

See merge request espressif/esp-idf!50916
 2026-08-25 10:45:11 +08:00
Rahul Tank
5161857730 Merge branch 'bugfix/gatt_cach_disconn_v5.5' into 'release/v5.5' 
fix(nimble): gatt caching crash on disconnect (v5.5)

See merge request espressif/esp-idf!51965
 2026-08-24 21:38:00 +05:30