morris
4196c7ae5c
fix(jpeg): release platform mutex on semaphore/pm-lock allocation failure
...
jpeg_acquire_codec_handle acquires s_jpeg_platform.mutex at entry
but two ESP_RETURN_ON_* macros (semaphore-create and PM-lock-create
failure) return without releasing it. Replace with ESP_GOTO_ON_*
that jumps to a cleanup label which frees partial resources, NULLs
the codec pointer, and releases the mutex.
2026-07-23 15:09:55 +08:00
morris
80aa3978b3
fix(i2c): release platform mutex on intr/pm_lock delete failure
...
ESP_RETURN_ON_ERROR inside the s_i2c_platform.mutex critical section
returns without releasing the mutex, permanently blocking all I2C
bus operations. Replace with ESP_GOTO_ON_ERROR that jumps to a
cleanup label releasing the mutex before return.
2026-07-23 15:09:55 +08:00
morris
42882b7078
fix(csi): move csi_fsm init before resource allocation to fix err-path leak
...
CSI_FSM_INIT is 1, but the controller struct is zero-allocated.
Any failure before the former csi_fsm assignment (near the end of
esp_cam_new_csi_ctlr) jumped to err: which called s_del_csi_ctlr.
That function bailed out immediately because csi_fsm == 0, leaking
the claimed slot, queue, bridge, DMA channel, PM lock, and backup
buffer. Move csi_fsm = CSI_FSM_INIT right after a successful claim
so the err: path properly tears down all allocated resources.
2026-07-23 11:18:42 +08:00
morris
8bb93702ab
fix(adc): add missing input validation for channel and ret_handle
...
- adc_cali_curve_fitting: validate config->chan in check_valid() to
prevent OOB access into s_adc_cali_chan_compens compensation table
- adc_filter: make s_adc_filter_free idempotent on !UNIT_BINDED SoCs
to prevent double-free on repeated adc_del_continuous_iir_filter
- adc_cali_line_fitting(esp32): fix config && config typo to
config && ret_handle, preventing NULL-pointer dereference
2026-07-23 11:18:42 +08:00
Island
47bd7785b9
Merge branch 'feat/support_bluedroid_le_coc_and_eatt_v5.5' into 'release/v5.5'
...
feat(ble/bluedroid): Support bluedroid LE COC and EATT features (5.5)
See merge request espressif/esp-idf!50714
2026-07-23 10:06:52 +08:00
Jiang Jiang Jian
a5045d6952
Merge branch 'bugfix/add_en_rst_in_pvt_func_for_p4_backport_v5.5' into 'release/v5.5'
...
fix(pvt): add en reset in pvt func for p4 on release v5.5
See merge request espressif/esp-idf!50876
2026-07-22 20:54:59 +08:00
Wang Meng Yang
b1ae399d1e
Merge branch 'bugfix/hid_host_oob_read_v5.5' into 'release/v5.5'
...
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act (v5.5)
See merge request espressif/esp-idf!50973
2026-07-22 14:10:16 +08:00
Island
fc53fce746
Merge branch 'fix/ble-log-store-access-fault_v5.5' into 'release/v5.5'
...
fix: Ensure BLE Log Global Variables in Internal RAM (5.5)
See merge request espressif/esp-idf!51035
2026-07-22 14:02:43 +08:00
Zhou Xiao
2d91fe9b77
fix(bt): keep BLE log ISR state in internal RAM
...
(cherry picked from commit 2fa434eb50 )
Co-authored-by: Zhou Xiao <zhouxiao@espressif.com >
2026-07-21 19:44:16 +08:00
Ashish Sharma
73fb4ce272
fix(mbedtls): revert to non constant time rsa key gen
2026-07-21 16:07:31 +08:00
Marius Vikhammer
6813d2d2fe
Merge branch 'backport-50410-to-release/v5.5' into 'release/v5.5'
...
fix(pthread,ulp): harden TLS key lookup and ULP bss_size validation (v5.5)
See merge request espressif/esp-idf!50954
2026-07-21 15:17:33 +08:00
Rahul Tank
316f3e17b2
Merge branch 'bugfix/nimble_issues_17072026_v5.5' into 'release/v5.5'
...
fix(nimble): Fix few nimble issues 17072026 (v5.5)
See merge request espressif/esp-idf!50922
2026-07-21 10:24:38 +05:30
Jiang Jiang Jian
4dcc2d33f9
Merge branch 'fix/cleanup_after_failed_nvs_set_blob_v5.5' into 'release/v5.5'
...
Fixed cleanup after nvs_set_blob failed on ESP_ERR_NVS_NOT_ENOUGH_SPACE (v5.5)
See merge request espressif/esp-idf!50744
2026-07-21 12:07:59 +08:00
Jiang Jiang Jian
941cac3d10
Merge branch 'fix/console-security-findings_v5.5' into 'release/v5.5'
...
fix(console): Fix security code review findings (v5.5)
See merge request espressif/esp-idf!50688
2026-07-21 12:07:29 +08:00
Jiang Jiang Jian
6c0d186b98
Merge branch 'fix/sec-1137-br-glue-double-free_v5.5' into 'release/v5.5'
...
fix(esp_netif): harden br_glue instance-handler cleanup against double-free (SEC-1137) (v5.5)
See merge request espressif/esp-idf!50644
2026-07-21 12:07:18 +08:00
Jiang Jiang Jian
a2e9abc655
Merge branch 'fix/fatfs_vulnerabilities_v5.5' into 'release/v5.5'
...
fix(fatfs): harden against runZero 2026 FatFs bugs (v5.5)
See merge request espressif/esp-idf!50426
2026-07-21 12:06:44 +08:00
Jiang Jiang Jian
707e1e21b2
Merge branch 'fix/vfs_fatfs_test_stale_partition_v5.5' into 'release/v5.5'
...
test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes (v5.5)
See merge request espressif/esp-idf!50402
2026-07-21 12:06:41 +08:00
Jiang Jiang Jian
b18de5cf0c
Merge branch 'fix/w5500_rx_buffer_corruption_recovery' into 'release/v5.5'
...
fix(esp_eth): recover W5500 RX path on corrupted frame length
See merge request espressif/esp-idf!50220
2026-07-21 12:06:17 +08:00
Jiang Jiang Jian
1acff98167
Merge branch 'bugfix/idfci-8839-remove-orphan-test-configs_v5.5' into 'release/v5.5'
...
fix(fatfs): re-enable fatfs and vfs psram/ccomp CI tests (v5.5)
See merge request espressif/esp-idf!50186
2026-07-21 12:05:42 +08:00
Jiang Jiang Jian
de3ba799d2
Merge branch 'fix/fatfs_instance_init_v5.5' into 'release/v5.5'
...
Fix: various FATFS/VFS fixes (v5.5)
See merge request espressif/esp-idf!50102
2026-07-21 12:05:12 +08:00
Jiang Jiang Jian
68bcab565a
Merge branch 'test/vfs_fix_register_check_v5.5' into 'release/v5.5'
...
test(vfs): Test changes regarding VFS register incorrect check fix and fix VFS host test not being run at all (v5.5)
See merge request espressif/esp-idf!49947
2026-07-21 12:04:44 +08:00
Island
4b00e6588a
Merge branch 'fix/ble_mesh_disable_adv_pkt_discard_log_v5.5' into 'release/v5.5'
...
fix(ble_mesh): Disable warning logging when advertising packets are discarded (5.5)
See merge request espressif/esp-idf!50166
2026-07-21 11:36:00 +08:00
Island
80ffb68adf
Merge branch 'fix/ble_mesh_fixed_issues_v5.5' into 'release/v5.5'
...
Resolve reported BLE mesh stack issues (5.5)
See merge request espressif/esp-idf!50406
2026-07-21 11:35:48 +08:00
Jiang Jiang Jian
063b065058
Merge branch 'fix/lwip_sec_high_v5.5' into 'release/v5.5'
...
fix(lwip): high severity lwip fixes (v5.5)
See merge request espressif/esp-idf!50594
2026-07-21 11:32:27 +08:00
Jiang Jiang Jian
962e623035
Merge branch 'feat/mbedtls_update_3.6.7' into 'release/v5.5'
...
feat(mbedtls): update to version 3.6.7
See merge request espressif/esp-idf!50621
2026-07-21 11:32:17 +08:00
Island
279340ddf0
Merge branch 'change/ble_update_lib_20260610_v5.5' into 'release/v5.5'
...
change(ble): [AUTO_MR] 20260610 - Update ESP BLE Controller Lib (5.5)
See merge request espressif/esp-idf!50225
2026-07-21 11:22:34 +08:00
Island
8d17df6429
Merge branch 'fix/ble-log-64-bit-io-setup-support_v5.5' into 'release/v5.5'
...
fix(ble_log): use BIT64 over BIT to support 64-bit IO setup (5.5)
See merge request espressif/esp-idf!50330
2026-07-21 11:22:30 +08:00
Zhang Wen Xu
4e95c36be4
Merge branch 'fix/reverse-extended-address-byte-order-in-esp-radio-spiel_v5.5' into 'release/v5.5'
...
fix(openthread): add APIs to clear a single src match short and extended entry in esp radio spinel (v5.5)
See merge request espressif/esp-idf!50454
2026-07-21 02:48:06 +00:00
morris
e04875807d
Merge branch 'fix/esp_psram_init_fix_v5.5' into 'release/v5.5'
...
fix(esp_psram): repeated call to init should return invalid state error (v5.5)
See merge request espressif/esp-idf!50275
2026-07-21 10:37:42 +08:00
morris
8186da07ae
Merge branch 'contrib/github_pr_18724_v5.5' into 'release/v5.5'
...
fix(heap_task_info): Fix incorrect current_usage subtraction on realloc() (GitHub PR) (v5.5)
See merge request espressif/esp-idf!50278
2026-07-21 10:36:48 +08:00
morris
c1aaff06b7
Merge branch 'bugfix/sdmmc-ddr-response-buffer-leak_v5.5' into 'release/v5.5'
...
fix(sdmmc): free DMA response buffer on DDR mode switch failure (v5.5)
See merge request espressif/esp-idf!50887
2026-07-21 10:35:45 +08:00
morris
4dff71cbdb
Merge branch 'fix/sdmmc_cmd_err_switch_case_handling_v5.5' into 'release/v5.5'
...
fix(sdmmc): sdmmc_cmd.c fixed error handling in certain if and switch statements (v5.5)
See merge request espressif/esp-idf!50684
2026-07-21 10:34:59 +08:00
Zhi Wei Jian
7ab919a76e
feat(ble/bluedroid): Support bluedroid dual identity
...
(cherry picked from commit 2358786647 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:32:11 +08:00
morris
30ecb1dead
Merge branch 'feat/update_pmu_pau_reg_description_v5.5' into 'release/v5.5'
...
feat(soc): update esp32c61 PMU & PAU reg header descriptions (v5.5)
See merge request espressif/esp-idf!50433
2026-07-21 10:29:29 +08:00
Zhi Wei Jian
11a1a33e26
fix(ble/bluedroid): use BOOLEAN for BLE HCI command builders
...
(cherry picked from commit abbf001120 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:28:30 +08:00
Zhi Wei Jian
f4650eb7c0
fix(ble/bluedroid): clean up LE CoC connect on CCB alloc failure
...
(cherry picked from commit 4fd1ebb4a9 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:28:23 +08:00
Zhi Wei Jian
e97d59c545
docs(ble/bluedroid): note ISO BIG HCI alloc failure not checked
...
(cherry picked from commit 34b59d30ae )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:28:15 +08:00
Zhi Wei Jian
932da59cb4
fix(ble/bluedroid): fix direct-connect cleanup and adv bounds
...
(cherry picked from commit 82e71c1767 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:28:07 +08:00
Zhi Wei Jian
f006758550
fix(ble/bluedroid): validate BLE confirm/OOB and sec-check device
...
(cherry picked from commit 93ab11d564 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:28:00 +08:00
Zhi Wei Jian
0314335eb6
fix(ble/bluedroid): validate SMP pair-fail reason and OOB device
...
(cherry picked from commit 98efe02385 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:27:52 +08:00
Zhi Wei Jian
91b305b663
fix(ble/bluedroid): route ATT indication-conf timeout separately
...
(cherry picked from commit 6c3267ee84 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:27:44 +08:00
Zhi Wei Jian
111c68776d
fix(ble/bluedroid): validate ATT PDU sizes
...
(cherry picked from commit bb00b9817d )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:27:33 +08:00
Zhi Wei Jian
8eb01128f8
fix(ble/bluedroid): re-lookup GATT TCB after enc-complete callback
...
(cherry picked from commit 37562af0ea )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:27:25 +08:00
Zhi Wei Jian
30a8c37942
fix(ble/bluedroid): fix GATT long read and Service Changed CCC
...
(cherry picked from commit 4ce692ac0c )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:27:17 +08:00
Zhi Wei Jian
e35311d351
fix(ble/bluedroid): validate GATT client discovery handles
...
(cherry picked from commit ac35ae6f2d )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:27:05 +08:00
Zhi Wei Jian
7c850b6031
fix(ble/bluedroid): cap Read By Type length and free failed service decl
...
(cherry picked from commit 27ff0cf8c7 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:26:56 +08:00
Zhi Wei Jian
ff3f650a10
fix(ble/bluedroid): guard GATT database hash and serialization
...
(cherry picked from commit 995c1508e8 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:26:44 +08:00
Zhi Wei Jian
6db42b6334
fix(ble/bluedroid): fix GATT server busy errors and sr_cmd handling
...
(cherry picked from commit f86739b03d )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:26:35 +08:00
Zhi Wei Jian
4779dec633
fix(ble/bluedroid): fix GATT teardown and service-change flow
...
(cherry picked from commit 0645ba469d )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:26:27 +08:00
Zhi Wei Jian
b1b015187f
fix(ble/bluedroid): fix GATT service lifecycle leaks
...
(cherry picked from commit ac93d94958 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-21 10:26:19 +08:00