Commit Graph

29378 Commits

Author SHA1 Message Date
wanckl
3dfe2bdecc fix(ci): twai test close board to fixed ci jobs pullotion 2026-06-23 16:07:04 +08:00
igor.udot
3350c3207d ci: twai runner setup 2026-06-23 16:06:51 +08:00
Mahavir Jain
7e04a1b9c8 Merge branch 'fix/disable_secure_boot_v2_ecdsa_v5.3' into 'release/v5.3'
Fix/disable secure boot v2 ecdsa (v5.3)

See merge request espressif/esp-idf!49474
2026-06-23 11:10:38 +05:30
morris
3a1859ece7 Merge branch 'bugfix/sdio_slave_buffer_size_limit_v5.3' into 'release/v5.3'
fix(sdio_slave): align buffer size checks with descriptor limits (v5.3)

See merge request espressif/esp-idf!49902
2026-06-23 11:45:29 +08:00
Jiang Jiang Jian
8cf2c2c738 Merge branch 'fix-malloc_pm_lock_in_internal_mem_v5.3' into 'release/v5.3'
fix(esp_pm): malloc pm_lock in internal mem (v5.3)

See merge request espressif/esp-idf!49686
2026-06-23 11:00:45 +08:00
Jiang Jiang Jian
6d8d1373c1 Merge branch 'bugfix/ag_unknown_codec_vv5.3' into 'release/v5.3'
fix(bt): skip unknown codecs when parsing AT+BAC(v5.3)

See merge request espressif/esp-idf!49842
2026-06-23 11:00:37 +08:00
Jiang Jiang Jian
ed196c301f Merge branch 'fix/use_unilock_for_sleep_process_v5.3' into 'release/v5.3'
fix(esp_hw_support): use same lock for lightsleep/deepsleep process (v5.3)

See merge request espressif/esp-idf!49845
2026-06-23 11:00:20 +08:00
Jiang Jiang Jian
1ce987ae2e Merge branch 'bugfix/supp_pmk_cache_v5.3' into 'release/v5.3'
fix(wifi): Fix skipping usage of supp pmk caching for some cases

See merge request espressif/esp-idf!49883
2026-06-23 10:53:31 +08:00
morris
b26d612698 fix(sdio_slave): align buffer size checks with descriptor limits
Define per-target SDIO slave descriptor buffer limits in the LL layer and validate queued send buffers against the 4-byte aligned effective maximum. Update the public docs to describe the chip-dependent limit instead of hardcoding 4092 bytes.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-22 23:24:39 +08:00
Island
b732ab02a4 Merge branch 'fix/ble_mesh_bug_report_v2_v5.3' into 'release/v5.3'
fix(ble_mesh): Miscellaneous bugfixes according to our internal bug report (v2)

See merge request espressif/esp-idf!49319
2026-06-22 22:29:36 +08:00
Rahul Tank
157e672392 Merge branch 'feat/throughput_l2cap_coc_v5.3' into 'release/v5.3'
Added l2cap_coc example for throughput (v5.3)

See merge request espressif/esp-idf!49742
2026-06-22 19:41:27 +05:30
Shreyas Sheth
b52eb91c26 fix(wifi): Fix skipping usage of supp pmk caching for some cases 2026-06-22 15:41:05 +05:30
harshal.patil
dc5be9b26d fix(esp_common/esp_fault): make ESP_FAULT_ASSERT survive optimization
ESP_FAULT_ASSERT(C) was silently deleted by the optimizer when C is a cached
flag/status already proven by a preceding `if (!C) return/goto`: the compiler
folds C to a constant and drops all three checks, removing the fault-injection
protection with no warning.
2026-06-22 11:38:55 +05:30
harshal.patil
2d24b4cbca fix(secure_boot): range-check ECDSA r,s in bootloader before ROM verify 2026-06-22 11:38:55 +05:30
harshal.patil
3587b50883 fix(esp_common): Add esp_fault_internal.h for use by G0 components
In release/v5.x, esp_fault.h resides in the esp_hw_support (G1)
component, so the G0 components (hal, esp_rom) must not depend on it.
Copy its contents to esp_common as esp_fault_internal.h, keep
esp_fault.h as a compatibility wrapper around it, and switch the hal
and esp_rom ECDSA/ECC code to the internal header.
2026-06-22 11:38:55 +05:30
harshal.patil
4b3c4e2fd9 test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver 2026-06-22 11:38:55 +05:30
harshal.patil
7640ef0a13 fix(esp_rom): Patch ets_ecdsa_verify() to include signature bounds check 2026-06-22 11:38:55 +05:30
harshal.patil
85055fabff fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down
Co-Authored-By: Ashish Sharma <ashish.sharma@espressif.com>
2026-06-22 11:38:55 +05:30
wuzhenghui
08d98dbc59 fix(esp_hw_support): use same lock for lightsleep/deepsleep process 2026-06-22 11:30:05 +08:00
xiongweichao
69b56b0315 fix(bt): skip unknown codecs when parsing AT+BAC
Peers may report custom or non-standard codec UUIDs in AT+BAC alongside
CVSD/mSBC. Returning BTA_AG_CODEC_NONE on the first unknown entry
discarded already-parsed standard codecs. Log unknown UUIDs and continue
parsing so negotiated capabilities still reflect supported codecs.
2026-06-22 11:13:48 +08:00
Island
ab6b359a24 Merge branch 'feat/ble-smp-multi-adv-static-random-address_v5.3' into 'release/v5.3'
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses (5.3)

See merge request espressif/esp-idf!49786
2026-06-22 10:35:23 +08:00
Aditya Patwardhan
37c7960e32 change(secure_boot): mark ECDSA based Secure Boot V2 as insecure on affected SoCs
ECDSA based Secure Boot V2 is not functional for certain input vectors on
ESP32-C5/C61/H2/P4 and on the preview targets ESP32-H4/H21. RSA based Secure
Boot V2 is the recommended scheme where the SoC supports it. This issue will be
fixed in a future hardware ECO revision; more details will be shared through the
hardware errata document.

A new hidden Kconfig option SECURE_BOOT_V2_ECDSA_INSECURE marks the affected
mass-production SoCs (ESP32-C5/C61/H2/P4). On these SoCs, when hardware Secure
Boot V2 is enabled, the ECDSA (V2) signing scheme is no longer offered by
default; it must be turned on explicitly via SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
under "Allow potentially insecure options" (CONFIG_SECURE_BOOT_INSECURE). App
signing without hardware Secure Boot is not affected. Note that ESP32-C61 has no
RSA based Secure Boot V2, so it has no Secure Boot scheme enabled by default.

The preview targets ESP32-H4 and ESP32-H21 mark ECDSA Secure Boot V2 as not
supported in their SoC capabilities instead of using the option above. As
ESP32-H4 has no other Secure Boot V2 scheme, Secure Boot is disabled entirely on
it; ESP32-H21 retains RSA based Secure Boot V2.

The security documentation keeps the ECDSA Secure Boot V2 content visible and
adds a warning describing the limitation (including that ECDSA Secure Boot V2 on
ESP32-C61 is not recommended for production). CI apps that exercise ECDSA Secure
Boot V2 on the affected SoCs set CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
accordingly.
2026-06-19 15:24:59 +05:30
Astha Verma
9f10ed8f94 fix(nimble): Added l2cap_coc throughput examples 2026-06-19 12:26:18 +05:30
Rahul Tank
1f75b37d7f Merge branch 'bugfix/fix_log_performance_v5.3' into 'release/v5.3'
fix(nimble): Guard ble_hs_log_mbuf/flat_buf against non-DEBUG log level (v5.3)

See merge request espressif/esp-idf!49731
2026-06-18 21:39:50 +05:30
Wang Meng Yang
5728b5362b Merge branch 'bugfix/bbp_isses_v5.3' into 'release/v5.3'
Bugfix/bbp isses v5.3

See merge request espressif/esp-idf!49627
2026-06-18 14:48:22 +08:00
Zhang Hai Peng
e0e3448f44 feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses
(cherry picked from commit 7986e2faa8)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-06-18 10:24:47 +08:00
Marius Vikhammer
8b9ea01634 Merge branch 'fix/efuse_damaged_reading_virtual_blocks_v5.3' into 'release/v5.3'
fix(efuse): erase virtual blocks before burn in damaged-reading test (v5.3)

See merge request espressif/esp-idf!49722
2026-06-17 18:21:17 +08:00
morris
e87ffcd14e Merge branch 'feat/lcd_i2c_use_configurable_timeout_v5.3' into 'release/v5.3'
feat(lcd): add configurable timeout for lcd i2c panel (v5.3)

See merge request espressif/esp-idf!48673
2026-06-17 10:53:16 +08:00
morris
62da65a3c7 Merge branch 'doc/i2s_esp32_mclk_restriction_v5.3' into 'release/v5.3'
docs(i2s): add note for the restriction of MCLK on esp32 (v5.3)

See merge request espressif/esp-idf!48574
2026-06-17 10:51:50 +08:00
Jin Cheng
1a941a77a0 fix(bt/bluedroid): added buffer length check for HID Device data indication 2026-06-17 07:27:25 +08:00
Jin Cheng
756cb96277 fix(bt/bluedroid): added validation for all SMP BR opcode lengths in smp_br_data_received 2026-06-17 07:27:25 +08:00
Jin Cheng
a5626bfc54 fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode 2026-06-17 07:27:25 +08:00
Jin Cheng
5a5968c8e9 fix(bt/bluedroid): added buffer length check for HID host data indication 2026-06-17 07:27:25 +08:00
Jin Cheng
8de265dc44 fix(bt/bluedroid): added buffer length check for L2CAP related functions 2026-06-17 07:27:25 +08:00
Jiang Jiang Jian
7a27688622 Merge branch 'bugfix/scan_issue_wpa3_enterprise_v5.3' into 'release/v5.3'
fix(wifi): scan security validation and NAN timer fixes (Backport v5.3)

See merge request espressif/esp-idf!49528
2026-06-16 21:08:46 +08:00
Rahul Tank
f882932204 fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level 2026-06-16 16:30:57 +05:30
wuzhenghui
60f4050a4b fix(esp_pm): malloc pm_lock in internal mem 2026-06-16 17:56:52 +08:00
Konstantin Kondrashov
1cbe85a666 fix(efuse): erase virtual blocks before burn in damaged-reading test
Some chip may have BLOCK3 in use so we need to erase it before test.
2026-06-16 12:49:08 +03:00
Mahavir Jain
a4a5c0af59 Merge branch 'fix/mbedtls_build_failure_x509_crt_v5.3' into 'release/v5.3'
fix(mbedtls): fixes build failure with clang21 (v5.3)

See merge request espressif/esp-idf!49417
2026-06-16 13:36:38 +05:30
Rahul Tank
972f6ac5a3 fix(protocomm): harden nimble transport size handling 2026-06-15 16:00:56 +05:30
Island
0bb375b34e Merge branch 'fix/gattc-multi-app-notif-warning_v5.3' into 'release/v5.3'
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if (5.3)

See merge request espressif/esp-idf!49514
2026-06-15 15:08:12 +08:00
Ashish Sharma
b0fc1922c5 fix(mbedtls): fixes build failure with clang21
Closes https://github.com/espressif/esp-idf/issues/18456
2026-06-15 12:03:12 +08:00
Island
4d1d5705cd Merge branch 'bugfix/fix_bluedroid_ai_review_bugs_20260427_v5.3' into 'release/v5.3'
Bugfix/fix bluedroid ai review bugs 20260427 (5.3)

See merge request espressif/esp-idf!49538
2026-06-15 11:04:06 +08:00
Rahul Tank
8c22cfe1af Merge branch 'fix/add_remaining_vars_to_heap_v5.3' into 'release/v5.3'
fix(nimble): Change remaining vars from Static to Dynamic (v5.3)

See merge request espressif/esp-idf!49282
2026-06-11 17:30:33 +05:30
Sumeet Singh
9c2ef25d89 fix(nimble): Change remaining vars from Static to Dynamic (v5.3) 2026-06-11 13:38:05 +05:30
C.S.M
303c01305a fix(jpeg_decoder): Add some strict check to avoid bad picture attack 2026-06-11 11:52:30 +08:00
Rahul Tank
3f142abeb9 Merge branch 'bugfix/bt4371_crash_v5.3' into 'release/v5.3'
fix(nimble): Deinit NimBLE stop event in host task (v5.3)

See merge request espressif/esp-idf!49300
2026-06-10 20:32:07 +05:30
Zhi Wei Jian
9d61eddc3a fix(bt): fix BTC task and BLE mesh bluedroid adapter
(cherry picked from commit 678fb93245)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:44 +08:00
Zhi Wei Jian
dd7de53bb5 fix(ble/bluedroid): fix HCI command and BTU robustness
(cherry picked from commit c9d13aaf64)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:43 +08:00
Zhi Wei Jian
a6fc9cb62c fix(ble/bluedroid): fix CTE and ISO API validation
(cherry picked from commit 0c3c894b7d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:43 +08:00