Commit Graph

37927 Commits

Author SHA1 Message Date
Jin Cheng
493679ca6c fix(bt/bluedroid): fixed potential OOB read in the reporting handler
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2025-12-19 11:26:40 +08:00
Jin Cheng
f4e1b5195a fix(bt/bluedroid): fixed a potential overflow about the media payload offset
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2025-12-19 11:26:40 +08:00
Jin Cheng
e42060dbf7 fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open 2025-12-19 11:26:40 +08:00
Jin Cheng
b35e414d4b fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected 2025-12-19 11:26:40 +08:00
Jin Cheng
ab2bbb2535 fix(bt/bluedroid): reject device with same address in legacy paring 2025-12-19 11:26:40 +08:00
Jin Cheng
5cc017942e fix(bt/bluedroid): ignore AVCT commands that are too long 2025-12-19 11:26:40 +08:00
Jin Cheng
f69f78e44c fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP 2025-12-19 11:26:40 +08:00
Jin Cheng
1ed0f42500 fix(bt/bluedroid): make sure SDP only start discovery once 2025-12-19 11:26:40 +08:00
Jin Cheng
53efa32ee0 fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write 2025-12-19 11:26:40 +08:00
Jin Cheng
ce34d1a42c fix(bt/blurdoird): check Classic key before cross-key derivation 2025-12-19 11:26:40 +08:00
Jin Cheng
9899a0ca50 fix(bt/blurdoird): enable bitpool snity checks 2025-12-19 11:26:40 +08:00
Alexey Gerenkov
13cbb306df Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20251215_v5.2' into 'release/v5.2'
feat(tools): update openocd version to v0.12.0-esp32-20251215 (v5.2)

See merge request espressif/esp-idf!44314
2025-12-19 10:50:21 +08:00
Shu Chen
21a895e69a Merge branch 'fix/fix_an_ot_trel_risk_v5.2' into 'release/v5.2'
fix(openthread): fix a potential stack overflow in TREL (v5.2)

See merge request espressif/esp-idf!43935
2025-12-18 13:07:29 +00:00
Alexey Gerenkov
4abe5739b8 Merge branch 'fix/clang_build_error_v5.2' into 'release/v5.2'
fix(xtensa): Fix clang assembler errors in STRUCT_AFIELD_A macro (v5.2)

See merge request espressif/esp-idf!44350
2025-12-18 19:37:37 +08:00
morris
386958febe Merge branch 'feature/usb_device_examples_update_v2.0.0_backport_v5.2' into 'release/v5.2'
feature(usb_device): Examples update to esp_tinyusb v2.0.0 (backport to v5.2)

See merge request espressif/esp-idf!42052
2025-12-18 16:04:34 +08:00
Xu Si Yu
15c6ac81c0 fix(openthread): fix a potential stack overflow in TREL 2025-12-18 14:01:55 +08:00
Island
c0e4fa2fc5 Merge branch 'bugfix/fix_bt_4205_v5.2' into 'release/v5.2'
Fixed BLE assert lld_con.c 1479 on ESP32-C3 and ESP32-S3(5106725) (v5.2)

See merge request espressif/esp-idf!44325
2025-12-18 11:29:14 +08:00
Island
e483933a71 Merge branch 'bugfix/fix_ble_security_issue_2025_v5.2' into 'release/v5.2'
Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd (v5.2)

See merge request espressif/esp-idf!43804
2025-12-18 10:56:18 +08:00
Island
5c44d62187 Merge branch 'bugfix/fix_reconnect_failed_with_extend_adv_v5.2' into 'release/v5.2'
fix(ble/bluedroid): Fixed the issue that extend advertising might not restart if the connection fails (v5.2)

See merge request espressif/esp-idf!44248
2025-12-18 10:51:30 +08:00
Wang Meng Yang
dff9653ab0 Merge branch 'bugfix/l2c_fcr_clone_buf_v5.2' into 'release/v5.2'
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf

See merge request espressif/esp-idf!44266
2025-12-18 09:50:34 +08:00
Erhan Kurubas
ae715581ee fix(xtensa): Fix clang assembler errors in STRUCT_AFIELD_A macro 2025-12-17 22:14:32 +01:00
Erhan Kurubas
0c40aa158d change(freertos): add task count and pointer width to OpenOCD debug table 2025-12-18 00:21:04 +08:00
Erhan Kurubas
a6bd273523 feat(freertos): add list offsets to the openocd_params 2025-12-18 00:21:04 +08:00
Erhan Kurubas
387a5fd36a feat(tools): update openocd version to v0.12.0-esp32-20251215 2025-12-18 00:21:04 +08:00
Jiang Jiang Jian
87cdd77527 Merge branch 'bugfix/fix_esp32_coex_cache_disable_crash_v5.2' into 'release/v5.2'
fix(coex): fix esp32 coex crash issue (e0421fa8)

See merge request espressif/esp-idf!44292
2025-12-17 15:56:14 +08:00
Rahul Tank
6030b71997 Merge branch 'bugfix/fix_compile_tinycrypt_v5.2' into 'release/v5.2'
fix(nimble): Add missing header file to fix compilation issue (v5.2)

See merge request espressif/esp-idf!43888
2025-12-17 12:59:40 +05:30
Chen Jian Hua
1e560b77f9 fix(bt): Update bt lib for ESP32-C3 and ESP32-S3(5106725)
- Fixed BLE assert lld_con.c 1479


(cherry picked from commit 22641241fa)

Co-authored-by: chenjianhua <chenjianhua@espressif.com>
2025-12-17 12:53:51 +08:00
Wang Meng Yang
268a6f56e2 Merge branch 'bugfix/fix_event_filter_bug_v5.2' into 'release/v5.2'
fix(bt/controller): Fixed hci connection request event filter bug (v5.2)

See merge request espressif/esp-idf!43878
2025-12-17 08:00:45 +08:00
Roland Dobai
420bf7fd17 Merge branch 'fix/small-limit-for-kconfserver_v5.2' into 'release/v5.2'
fix: allow larger buffer size for commands (especially for idf.py confserver) (v5.2)

See merge request espressif/esp-idf!44302
2025-12-16 18:26:41 +01:00
Jan Beran
4c7bcbaee4 fix: set sufficient buffer limit for idf.py confserver 2025-12-16 10:09:03 +01:00
liuning
37c667329c fix(coex): fix esp32 coex crash issue (e0421fa8) 2025-12-16 16:02:43 +08:00
Rahul Tank
c88d401c64 fix(nimble): Add missing header file to fix compilation issue 2025-12-16 12:20:14 +05:30
Jin Cheng
644e4ffbfe fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf 2025-12-16 11:42:13 +08:00
Zhi Wei Jian
4bef327784 fix(ble/bluedroid): Fixed reconnection failed with extend adv
(cherry picked from commit ec4052c1c7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2025-12-15 21:23:21 +08:00
Island
3a0ac48b3e Merge branch 'fix/fix_pawr_crash_errors_v5.2' into 'release/v5.2'
Fix/fix pawr crash errors (v5.2)

See merge request espressif/esp-idf!43941
2025-12-15 14:20:53 +08:00
Jiang Jiang Jian
0d4721346e Merge branch 'bugfix/ftm_memory_corruption_v5.2' into 'release/v5.2'
bugfix(wifi): Resolve the memory corruption issue in FTM (backport v5.2)

See merge request espressif/esp-idf!44191
2025-12-14 15:18:15 +08:00
Zhang Hai Peng
cd670b87a5 fix(ble/bluedroid): Add bounds check in ble_ancs example
(cherry picked from commit 7e876249df)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2025-12-12 20:54:02 +08:00
Akshat Agrawal
c918380749 bugfix(wifi): Resolve the memory corruption issue in FTM 2025-12-12 15:44:11 +05:30
Island
30254f1b27 Merge branch 'change/ble_update_lib_20251202_v5.2' into 'release/v5.2'
change(ble): [AUTO_MR] 20251202 - Update ESP BLE Controller Lib (v5.2)

See merge request espressif/esp-idf!44016
2025-12-12 11:43:29 +08:00
liqigan
a53898da69 fix(bt/controller): Fixed hci connection request event filter bug 2025-12-12 10:52:45 +08:00
Euripedes Rocha
97d7e9903d Merge branch 'feat/upt_tests_new_runners_v5.2' into 'release/v5.2'
feat(ci): updated Ethernet test to align with new runners (v5.2)

See merge request espressif/esp-idf!43768
2025-12-11 16:29:48 +01:00
Alexey Gerenkov
055fb4c79a Merge branch 'esp32p4_fix_bootloader_flash_read_allow_decrypt_v5.2' into 'release/v5.2'
fix(bootloader_flash): always invalidate FLASH_READ_VADDR before read (v5.2)

See merge request espressif/esp-idf!43960
2025-12-11 21:05:23 +08:00
Island
68627d0708 Merge branch 'feat/ble_mesh_lib_log_output_opt_v5.2' into 'release/v5.2'
feat(ble_mesh): add ext log initialization functions (v5.2)

See merge request espressif/esp-idf!43753
2025-12-11 14:25:08 +08:00
cjin
d4ed03d0fd fix(ble): fix pawr set subevent data length error 2025-12-11 14:24:43 +08:00
Jin Chen
25f3012c48 fix(ble): fix hci log malloc failure crash
(cherry picked from commit 734031311ad8554b600718bf8add68836121f72b)

Co-authored-by: cjin <jinchen@espressif.com>
2025-12-11 14:12:11 +08:00
Jiang Jiang Jian
b1f5b6d486 Merge branch 'bugfix/ftm_last_dial_tok_v5.2' into 'release/v5.2'
bugfix(wifi): Set the dialog token of last FTM resp to Zero (Backport v5.2)

See merge request espressif/esp-idf!43849
2025-12-11 13:53:33 +08:00
Shu Chen
2b350f6d5c Merge branch 'fix/fix_an_ot_kconfig_error_v5.2' into 'release/v5.2'
fix(openthread): fix an error in Kconfig (v5.2)

See merge request espressif/esp-idf!43999
2025-12-11 03:53:54 +00:00
Xu Si Yu
946fe7cff1 fix(openthread): fix an error in Kconfig 2025-12-11 09:53:57 +08:00
Shu Chen
950975a416 Merge branch 'fix/v55_lib_update_v5.2' into 'release/v5.2'
fix(openthread): resolve deadlock issues due to switching_lock (v5.2)

See merge request espressif/esp-idf!44086
2025-12-11 01:52:55 +00:00
Samuel Obuch
dd47a2ae61 fix(bootloader_flash): invalidate FLASH_READ_VADDR before read
Fixed address to match corresponding mmu_hal_map_region call.
MMU_BLOCK0_VADDR was invalidated by mistake in commit
ea38a2e9a4
2025-12-11 07:52:49 +08:00