Jin Cheng
493679ca6c
fix(bt/bluedroid): fixed potential OOB read in the reporting handler
...
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-19 11:26:40 +08:00
Jin Cheng
f4e1b5195a
fix(bt/bluedroid): fixed a potential overflow about the media payload offset
...
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-19 11:26:40 +08:00
Jin Cheng
e42060dbf7
fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open
2025-12-19 11:26:40 +08:00
Jin Cheng
b35e414d4b
fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected
2025-12-19 11:26:40 +08:00
Jin Cheng
ab2bbb2535
fix(bt/bluedroid): reject device with same address in legacy paring
2025-12-19 11:26:40 +08:00
Jin Cheng
5cc017942e
fix(bt/bluedroid): ignore AVCT commands that are too long
2025-12-19 11:26:40 +08:00
Jin Cheng
f69f78e44c
fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP
2025-12-19 11:26:40 +08:00
Jin Cheng
1ed0f42500
fix(bt/bluedroid): make sure SDP only start discovery once
2025-12-19 11:26:40 +08:00
Jin Cheng
53efa32ee0
fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write
2025-12-19 11:26:40 +08:00
Jin Cheng
ce34d1a42c
fix(bt/blurdoird): check Classic key before cross-key derivation
2025-12-19 11:26:40 +08:00
Jin Cheng
9899a0ca50
fix(bt/blurdoird): enable bitpool snity checks
2025-12-19 11:26:40 +08:00
Alexey Gerenkov
13cbb306df
Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20251215_v5.2' into 'release/v5.2'
...
feat(tools): update openocd version to v0.12.0-esp32-20251215 (v5.2)
See merge request espressif/esp-idf!44314
2025-12-19 10:50:21 +08:00
Shu Chen
21a895e69a
Merge branch 'fix/fix_an_ot_trel_risk_v5.2' into 'release/v5.2'
...
fix(openthread): fix a potential stack overflow in TREL (v5.2)
See merge request espressif/esp-idf!43935
2025-12-18 13:07:29 +00:00
Alexey Gerenkov
4abe5739b8
Merge branch 'fix/clang_build_error_v5.2' into 'release/v5.2'
...
fix(xtensa): Fix clang assembler errors in STRUCT_AFIELD_A macro (v5.2)
See merge request espressif/esp-idf!44350
2025-12-18 19:37:37 +08:00
morris
386958febe
Merge branch 'feature/usb_device_examples_update_v2.0.0_backport_v5.2' into 'release/v5.2'
...
feature(usb_device): Examples update to esp_tinyusb v2.0.0 (backport to v5.2)
See merge request espressif/esp-idf!42052
2025-12-18 16:04:34 +08:00
Xu Si Yu
15c6ac81c0
fix(openthread): fix a potential stack overflow in TREL
2025-12-18 14:01:55 +08:00
Island
c0e4fa2fc5
Merge branch 'bugfix/fix_bt_4205_v5.2' into 'release/v5.2'
...
Fixed BLE assert lld_con.c 1479 on ESP32-C3 and ESP32-S3(5106725) (v5.2)
See merge request espressif/esp-idf!44325
2025-12-18 11:29:14 +08:00
Island
e483933a71
Merge branch 'bugfix/fix_ble_security_issue_2025_v5.2' into 'release/v5.2'
...
Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd (v5.2)
See merge request espressif/esp-idf!43804
2025-12-18 10:56:18 +08:00
Island
5c44d62187
Merge branch 'bugfix/fix_reconnect_failed_with_extend_adv_v5.2' into 'release/v5.2'
...
fix(ble/bluedroid): Fixed the issue that extend advertising might not restart if the connection fails (v5.2)
See merge request espressif/esp-idf!44248
2025-12-18 10:51:30 +08:00
Wang Meng Yang
dff9653ab0
Merge branch 'bugfix/l2c_fcr_clone_buf_v5.2' into 'release/v5.2'
...
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf
See merge request espressif/esp-idf!44266
2025-12-18 09:50:34 +08:00
Erhan Kurubas
ae715581ee
fix(xtensa): Fix clang assembler errors in STRUCT_AFIELD_A macro
2025-12-17 22:14:32 +01:00
Erhan Kurubas
0c40aa158d
change(freertos): add task count and pointer width to OpenOCD debug table
2025-12-18 00:21:04 +08:00
Erhan Kurubas
a6bd273523
feat(freertos): add list offsets to the openocd_params
2025-12-18 00:21:04 +08:00
Erhan Kurubas
387a5fd36a
feat(tools): update openocd version to v0.12.0-esp32-20251215
2025-12-18 00:21:04 +08:00
Jiang Jiang Jian
87cdd77527
Merge branch 'bugfix/fix_esp32_coex_cache_disable_crash_v5.2' into 'release/v5.2'
...
fix(coex): fix esp32 coex crash issue (e0421fa8)
See merge request espressif/esp-idf!44292
2025-12-17 15:56:14 +08:00
Rahul Tank
6030b71997
Merge branch 'bugfix/fix_compile_tinycrypt_v5.2' into 'release/v5.2'
...
fix(nimble): Add missing header file to fix compilation issue (v5.2)
See merge request espressif/esp-idf!43888
2025-12-17 12:59:40 +05:30
Chen Jian Hua
1e560b77f9
fix(bt): Update bt lib for ESP32-C3 and ESP32-S3(5106725)
...
- Fixed BLE assert lld_con.c 1479
(cherry picked from commit 22641241fa )
Co-authored-by: chenjianhua <chenjianhua@espressif.com >
2025-12-17 12:53:51 +08:00
Wang Meng Yang
268a6f56e2
Merge branch 'bugfix/fix_event_filter_bug_v5.2' into 'release/v5.2'
...
fix(bt/controller): Fixed hci connection request event filter bug (v5.2)
See merge request espressif/esp-idf!43878
2025-12-17 08:00:45 +08:00
Roland Dobai
420bf7fd17
Merge branch 'fix/small-limit-for-kconfserver_v5.2' into 'release/v5.2'
...
fix: allow larger buffer size for commands (especially for idf.py confserver) (v5.2)
See merge request espressif/esp-idf!44302
2025-12-16 18:26:41 +01:00
Jan Beran
4c7bcbaee4
fix: set sufficient buffer limit for idf.py confserver
2025-12-16 10:09:03 +01:00
liuning
37c667329c
fix(coex): fix esp32 coex crash issue (e0421fa8)
2025-12-16 16:02:43 +08:00
Rahul Tank
c88d401c64
fix(nimble): Add missing header file to fix compilation issue
2025-12-16 12:20:14 +05:30
Jin Cheng
644e4ffbfe
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf
2025-12-16 11:42:13 +08:00
Zhi Wei Jian
4bef327784
fix(ble/bluedroid): Fixed reconnection failed with extend adv
...
(cherry picked from commit ec4052c1c7 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2025-12-15 21:23:21 +08:00
Island
3a0ac48b3e
Merge branch 'fix/fix_pawr_crash_errors_v5.2' into 'release/v5.2'
...
Fix/fix pawr crash errors (v5.2)
See merge request espressif/esp-idf!43941
2025-12-15 14:20:53 +08:00
Jiang Jiang Jian
0d4721346e
Merge branch 'bugfix/ftm_memory_corruption_v5.2' into 'release/v5.2'
...
bugfix(wifi): Resolve the memory corruption issue in FTM (backport v5.2)
See merge request espressif/esp-idf!44191
2025-12-14 15:18:15 +08:00
Zhang Hai Peng
cd670b87a5
fix(ble/bluedroid): Add bounds check in ble_ancs example
...
(cherry picked from commit 7e876249df )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2025-12-12 20:54:02 +08:00
Akshat Agrawal
c918380749
bugfix(wifi): Resolve the memory corruption issue in FTM
2025-12-12 15:44:11 +05:30
Island
30254f1b27
Merge branch 'change/ble_update_lib_20251202_v5.2' into 'release/v5.2'
...
change(ble): [AUTO_MR] 20251202 - Update ESP BLE Controller Lib (v5.2)
See merge request espressif/esp-idf!44016
2025-12-12 11:43:29 +08:00
liqigan
a53898da69
fix(bt/controller): Fixed hci connection request event filter bug
2025-12-12 10:52:45 +08:00
Euripedes Rocha
97d7e9903d
Merge branch 'feat/upt_tests_new_runners_v5.2' into 'release/v5.2'
...
feat(ci): updated Ethernet test to align with new runners (v5.2)
See merge request espressif/esp-idf!43768
2025-12-11 16:29:48 +01:00
Alexey Gerenkov
055fb4c79a
Merge branch 'esp32p4_fix_bootloader_flash_read_allow_decrypt_v5.2' into 'release/v5.2'
...
fix(bootloader_flash): always invalidate FLASH_READ_VADDR before read (v5.2)
See merge request espressif/esp-idf!43960
2025-12-11 21:05:23 +08:00
Island
68627d0708
Merge branch 'feat/ble_mesh_lib_log_output_opt_v5.2' into 'release/v5.2'
...
feat(ble_mesh): add ext log initialization functions (v5.2)
See merge request espressif/esp-idf!43753
2025-12-11 14:25:08 +08:00
cjin
d4ed03d0fd
fix(ble): fix pawr set subevent data length error
2025-12-11 14:24:43 +08:00
Jin Chen
25f3012c48
fix(ble): fix hci log malloc failure crash
...
(cherry picked from commit 734031311ad8554b600718bf8add68836121f72b)
Co-authored-by: cjin <jinchen@espressif.com >
2025-12-11 14:12:11 +08:00
Jiang Jiang Jian
b1f5b6d486
Merge branch 'bugfix/ftm_last_dial_tok_v5.2' into 'release/v5.2'
...
bugfix(wifi): Set the dialog token of last FTM resp to Zero (Backport v5.2)
See merge request espressif/esp-idf!43849
2025-12-11 13:53:33 +08:00
Shu Chen
2b350f6d5c
Merge branch 'fix/fix_an_ot_kconfig_error_v5.2' into 'release/v5.2'
...
fix(openthread): fix an error in Kconfig (v5.2)
See merge request espressif/esp-idf!43999
2025-12-11 03:53:54 +00:00
Xu Si Yu
946fe7cff1
fix(openthread): fix an error in Kconfig
2025-12-11 09:53:57 +08:00
Shu Chen
950975a416
Merge branch 'fix/v55_lib_update_v5.2' into 'release/v5.2'
...
fix(openthread): resolve deadlock issues due to switching_lock (v5.2)
See merge request espressif/esp-idf!44086
2025-12-11 01:52:55 +00:00
Samuel Obuch
dd47a2ae61
fix(bootloader_flash): invalidate FLASH_READ_VADDR before read
...
Fixed address to match corresponding mmu_hal_map_region call.
MMU_BLOCK0_VADDR was invalidated by mistake in commit
ea38a2e9a4
2025-12-11 07:52:49 +08:00