Commit Graph
36039 Commits
Author SHA1 Message Date
morris 5383352582 Merge branch 'bugfix/uart_extra_current_consumption_in_sleep_v6.0' into 'release/v6.0'
fix(uart): reduce current consumption in sleep mode (v6.0)

See merge request espressif/esp-idf!52347
2026-09-08 15:07:26 +08:00
morris 7f7f6cccbf Merge branch 'feat/isp_dpc_support_v6.0' into 'release/v6.0'
feat(isp): support isp dpc dead pixel correction (v6.0)

See merge request espressif/esp-idf!51470
2026-09-08 15:06:44 +08:00
morris 7dc4ca8c87 Merge branch 'change/remove_lcd_restart_for_p4_s31_v6.0' into 'release/v6.0'
remove(lcd): remove restart support for p4 and s31 (v6.0)

See merge request espressif/esp-idf!51352
2026-09-08 14:55:40 +08:00
morris c5a48f7808 Merge branch 'fix/fix_rmt_loop_tx_trigger_done_event_v6.0' into 'release/v6.0'
fix(rmt): clear stale TX done status before new transaction (v6.0)

See merge request espressif/esp-idf!51653
2026-09-08 14:54:48 +08:00
morris 9ee2fcd543 Merge branch 'feat/add_timeout_return_for_dsi_panel_v6.0' into 'release/v6.0'
feat(dsi): add timeout check for lp cmd rx (v6.0)

See merge request espressif/esp-idf!52313
2026-09-08 14:44:11 +08:00
morris 5aa18f1104 Merge branch 'fix/spi_flash_keep_program_erase_in_iram_v6.0' into 'release/v6.0'
fix(spi_flash): keep program and erase paths in IRAM (v6.0)

See merge request espressif/esp-idf!51892
2026-09-08 14:43:07 +08:00
morris 50642bc839 Merge branch 'feat/move_flash_120_out_from_experimental_v6.0' into 'release/v6.0'
feat(flash): p4 flash 120MHz is no longer experimental feature (v6.0)

See merge request espressif/esp-idf!51699
2026-09-08 14:41:26 +08:00
morris a45957cce0 Merge branch 'contrib/github_pr_19038_v6.0' into 'release/v6.0'
fix(esp_lcd): yield from SPI ISR when color trans done callback wakes a task (GitHub PR) (v6.0)

See merge request espressif/esp-idf!52454
2026-09-08 11:20:03 +08:00
Jiang Jiang Jian 3702e3446d Merge branch 'bugfix/qos_not_reported_v6.0' into 'release/v6.0'
fix(bt/controller): update ESP32 libbtdm_app.a to fix missing QoS_Setup_Cmpl event (v6.0)

See merge request espressif/esp-idf!52491
2026-09-08 10:36:17 +08:00
Shu Chen 58fa356e79 Merge branch 'feat/support_multipan_feature_host_20260813_v6.0' into 'release/v6.0'
feat(openthread): add support for the multipan feature on host devices (v6.0)

See merge request espressif/esp-idf!52380
2026-09-08 02:28:23 +00:00
Island 4dd996365c Merge branch 'fix/fix_ble_retention_dependency_order_v6.0' into 'release/v6.0'
fix(ble): fix ble retention dependency order (6.0)

See merge request espressif/esp-idf!52465
2026-09-08 10:25:13 +08:00
cjin bed7b04631 fix(ble): fix ble retention dependency order 2026-09-07 20:20:03 +08:00
Xu Si Yu d3af5f1cfb feat(openthread): support multipan feature for host device 2026-09-07 20:17:12 +08:00
Rahul Tank 0ac84fe172 Merge branch 'bugfix/fix_ble_pair_attack_v6.0' into 'release/v6.0'
fix(nimble): Fix for BLERP attack (v6.0)

See merge request espressif/esp-idf!52351
2026-09-07 17:34:09 +05:30
Sarvesh Bodakhe ecab81cf41 test(wifi): wait for the idle task after esp_wifi_deinit in Wi-Fi UTs
The Wi-Fi task deletes itself when esp_wifi_deinit() is called, and FreeRTOS
only reclaims its TCB and stack from the idle task afterwards. Test apps that
read the heap right after deinit therefore see that memory as still allocated
and report a leak, most visibly as the eloop unit tests failing on ESP32.

Wait for the idle task at every point where a test deinitialises Wi-Fi
before a leak check, replacing the single-tick delays that only matched what
esp_wifi_deinit() already waits for internally.

(cherry picked from commit bff264775a)
2026-09-07 15:46:12 +05:30
Rahul Tank 454b29f257 fix(nimble): Fix for BLERP attack 2026-09-07 12:29:32 +05:30
Rahul Tank 6c8da6754b Merge branch 'bugfix/fix_null_proc_dereference_v6.0' into 'release/v6.0'
fix(nimble): Avoid NULL proc dereference in GATT client procedures (v6.0)

See merge request espressif/esp-idf!52218
2026-09-07 11:01:34 +05:30
Laukik Hase ab5b29e52c Merge branch 'fix/tee_reentrant_svc_and_non_det_sign_v6.0' into 'release/v6.0'
feat(esp_tee): Backports to v6.0

See merge request espressif/esp-idf!52290
2026-09-07 10:10:44 +05:30
Jin Cheng d05b70bde0 fix(bt/controller): update ESP32 libbtdm_app.a to fix missing QoS_Setup_Cmpl event 2026-09-07 12:21:57 +08:00
Mahavir Jain 62d03c7761 Merge branch 'fix/hmac-ds-reset-corrupts-concurrent-mpi_v6.0' into 'release/v6.0'
fix(esp_security): don't reset DS peripheral in esp_hmac_calculate (v6.0)

See merge request espressif/esp-idf!52200
2026-09-07 08:04:00 +05:30
Mahavir Jain ad299bbd82 Merge branch 'contrib/github_pr_18922_v6.0' into 'release/v6.0'
fix(esp_https_server): restore use_secure_element initializer in HTTPD_SSL_CONFIG_DEFAULT() (GitHub PR) (v6.0)

See merge request espressif/esp-idf!52207
2026-09-06 20:37:52 +05:30
Ashish Sharma 7cf8c1fe05 fix(esp_security): don't reset DS peripheral in esp_hmac_calculate
esp_hmac_calculate() enabled and reset the Digital Signature (DS)
peripheral, but HMAC has no dependency on DS (the dependency runs the
other way: a DS operation uses HMAC/SHA).

The DS peripheral drives the RSA (MPI) accelerator internally, so pulsing
the DS reset also resets the RSA datapath. This coupling exists on every
target that has the DS peripheral: the MPI reset routine itself clears the
DS reset "otherwise RSA is held in reset".

esp_hmac_calculate() holds only the HMAC and SHA/AES locks, not the MPI
lock, so it can corrupt a concurrent RSA/MPI operation. On multi-core
targets (e.g. ESP32-P4, ESP32-S31, ESP32-S3) an HMAC on one core resets an
RSA op running on another core; on single-core targets (e.g. ESP32-C5) the
same corruption happens when an HMAC preempts an in-flight RSA op. The
result is a wrong RSA result or a crash in the computation.

Remove the DS peripheral enable/reset from the HMAC path. SHA, which HMAC
depends on, is enabled independently, so the HMAC output is unchanged.
This also drops a few redundant register writes.
2026-09-06 20:14:29 +05:30
Mahavir Jain 307018d1ab Merge branch 'fix/esp_http_server-ws-frame-header-strictness_v6.0' into 'release/v6.0'
Fix(esp http server): ws frame header strictness (v6.0)

See merge request espressif/esp-idf!51857
2026-09-06 20:12:59 +05:30
Rahul Tank abd362c657 fix(nimble): Avoid NULL proc dereference in GATT client procedures 2026-09-06 09:44:45 +05:30
Wang Meng Yang 8d9613b259 Merge branch 'bugfix/delete_unused_avrcp_rcb_v6.0' into 'release/v6.0'
fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails (v6.0)

See merge request espressif/esp-idf!52413
2026-09-06 12:08:39 +08:00
Wang Meng Yang b1f6f992d2 Merge branch 'bugfix/qos_div_zero_v6.0' into 'release/v6.0'
fix(bt): update ESP32 libbtdm_app.a to fix several issues (v6.0)

See merge request espressif/esp-idf!52053
2026-09-06 11:32:52 +08:00
Wang Meng Yang 70d938445d Merge branch 'fix/aireview_pbap_v6.0' into 'release/v6.0'
fix(bt_pbap): Fix some bugs in bluedroid PBAP (v6.0)

See merge request espressif/esp-idf!51728
2026-09-06 11:26:03 +08:00
Wang Meng Yang d5f9b93781 Merge branch 'change/refactor_hidh_datapath_v6.0' into 'release/v6.0'
Change/refactor hidh datapath[backport v6.0]

See merge request espressif/esp-idf!51279
2026-09-06 11:24:27 +08:00
Wang Meng Yang a9ad41e428 Merge branch 'bugfix/a2dp_api_init_check_v6.0' into 'release/v6.0'
fix(bt): Fix compatibility with A2DP API legacy usage methods (v6.0)

See merge request espressif/esp-idf!51328
2026-09-06 11:20:08 +08:00
Wang Meng Yang 06a411f81a Merge branch 'fix/aireview_obex_v6.0' into 'release/v6.0'
fix(bt_obex): fix some bugs in bluedroid obex (v6.0)

See merge request espressif/esp-idf!52005
2026-09-06 11:18:52 +08:00
Wang Meng Yang 2cf3ad6d31 Merge branch 'fix/bt_memory_v6.0' into 'release/v6.0'
fix(bt_memory): Reduce memory usage in transfer (v6.0)

See merge request espressif/esp-idf!52276
2026-09-06 11:16:58 +08:00
Song Ruo Jing da21a60e82 fix(uart): reduce current consumption in sleep mode 2026-09-04 21:27:16 +08:00
Jiang Jiang Jian 3c5eaa6669 Merge branch 'fix/sae_pwe_ecc_fail_v6.0' into 'release/v6.0'
fix(wpa_supplicant): Assign correct return value for SAE y-construction failure (v6.0)

See merge request espressif/esp-idf!52357
2026-09-04 20:13:27 +08:00
Jiang Jiang Jian 89820050b7 Merge branch 'fix/roam_fixes_v6.0' into 'release/v6.0'
Require RSSI gain before low-RSSI roam and added reason codes(v6.0)

See merge request espressif/esp-idf!52247
2026-09-04 19:38:18 +08:00
Island 6eb40db09d Merge branch 'feat/adapt_uhci_code_260824_v6.0' into 'release/v6.0'
refactor(hci): switch HCI UART DMA transport to UHCI driver APIs (6.0)

See merge request espressif/esp-idf!52160
2026-09-04 17:58:17 +08:00
morris 31ceb68a04 Merge branch 'fix/jpeg_enc_header_oob_v6.0' into 'release/v6.0'
fix(jpeg): validate encoder buffer sizes before header/DMA access (backport v6.0)

See merge request espressif/esp-idf!52122
2026-09-04 17:57:34 +08:00
morris 17dabceecf Merge branch 'fix/dualcore_branch_predictor_cache_race_v6.0' into 'release/v6.0'
fix(spi_flash): disable branch prediction on the parked core during flash ops (v6.0)

See merge request espressif/esp-idf!52202
2026-09-04 17:57:09 +08:00
morris c2638a5689 Merge branch 'fix/i2s_tdm_5slot_clock_test_v6.0' into 'release/v6.0'
fix(hal): prevent overflow in fractional clock division (v6.0)

See merge request espressif/esp-idf!51430
2026-09-04 17:56:03 +08:00
YoungsunLi c4e8f1e709 fix(esp_lcd): yield from SPI ISR when color trans done callback wakes a task
The return value of on_color_trans_done ("whether a high priority task
has been waken up by this function", see esp_lcd_types.h) was discarded
by the SPI backend. A task unblocked from inside the callback (e.g. via
xSemaphoreGiveFromISR) therefore did not get scheduled until the next
FreeRTOS tick, adding up to 10 ms of latency per color transfer with the
default CONFIG_FREERTOS_HZ=100. The i80 backend already honors the
contract (need_yield -> portYIELD_FROM_ISR); do the same here.
2026-09-04 17:50:07 +08:00
Alexey Gerenkov 2007a7c8db Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260831_v6.0' into 'release/v6.0'
feat(tools): update openocd version to v0.12.0-esp32-20260831 (v6.0)

See merge request espressif/esp-idf!52392
2026-09-04 17:32:14 +08:00
Alexey Gerenkov 3d678a280b Merge branch 'add_trace_doc_section_v6.0' into 'release/v6.0'
docs(esp_trace): restructure tracing docs with esp_trace as master (v6.0)

See merge request espressif/esp-idf!52265
2026-09-04 17:22:14 +08:00
morris e214cf1b20 Merge branch 'feat/atomic-internal_v6.0' into 'release/v6.0'
fix(driver): allocate driver objects containing atomic variables from internal SRAM (v6.0)

See merge request espressif/esp-idf!52341
2026-09-04 17:18:55 +08:00
Rahul Tank c0b30a11db Merge branch 'bugfix/fix_stale_conn_cccd_v6.0' into 'release/v6.0'
fix(nimble): fix crash on disconnect due to stale per-connection CCCD pool (v6.0)

See merge request espressif/esp-idf!51951
2026-09-04 14:42:22 +05:30
Fu Hanxi 14297ada26 Merge branch 'ci/apply-common-scripts-v6.0' into 'release/v6.0'
ci: apply common-scripts refactor (v6.0)

See merge request espressif/esp-idf!50991
2026-09-04 09:33:06 +02:00
Mahavir Jain 068fb15c0f Merge branch 'fix/crt-bundle-unaligned-reads_v6.0' into 'release/v6.0'
fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access (v6.0)

See merge request espressif/esp-idf!51724
2026-09-04 12:31:11 +05:30
Rahul Tank a64ac3a8f6 fix(nimble): fix crash on disconnect due to stale per-connection CCCD pool 2026-09-04 12:17:48 +05:30
Mahavir Jain ec3877cf6c fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access
The offset table and the per-cert length fields of the certificate
bundle were read through uint16_t*/uint32_t* casts, which compile to
halfword/word loads at addresses with no alignment guarantee: bundles
supplied via esp_crt_bundle_set() can start anywhere, and cert entries
are byte-packed, so their 16-bit fields land at arbitrary offsets.

On chips with SOC_CPU_MISALIGNED_ACCESS_ON_PMP_MISMATCH_ISSUE (DIG-694:
ESP32-C6/H2/H21) a misaligned load from memory-mapped flash can take a
spurious "Load access fault" when it sits within two instructions of an
access to a differently-permissioned region, observed as a crash in
esp_crt_check_bundle()/CA callback during TLS handshakes with a bundle
that happened to be placed at an odd address.
2026-09-04 11:06:54 +05:30
Laukik Hase c7f74fd751 change(esp_tee): Limit the TEE secure storage AEAD operation input buffer length 2026-09-04 10:23:25 +05:30
Laukik Hase a4d6b802a7 feat(esp_tee): Disable the MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS option for TEE build 2026-09-04 10:23:25 +05:30
Laukik Hase e5c3063dee fix(esp_tee): Snapshot input arguments in TEE memory before secure service execution
- Also fix the `tee_cli_app` build failure due to TEE heap size overflow
2026-09-04 10:23:25 +05:30