Commit Graph

29616 Commits

Author SHA1 Message Date
hejiaxin
5b5e80c12a fix(bt_stack): Fix some critical bugs in classic_bt stack
related: obex, smp, pbap, sdp, rfcomm, stack_dm

- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
2026-07-30 17:44:37 +08:00
Alexey Gerenkov
dd77984ee6 Merge branch 'fix/cxx-tls-destructors_v5.3' into 'release/v5.3'
fix(cxx): fix TLS classes destructor call (v5.3)

See merge request espressif/esp-idf!34209
2026-07-29 16:17:58 +08:00
Jiang Jiang Jian
be0801377d Merge branch 'bugfix/clear_ifx_tx_queue_v5.3' into 'release/v5.3'
bugfix(wifi): Clear Sta TX queue to prevent key 2 send failure (Backport v5.3)

See merge request espressif/esp-idf!50901
2026-07-29 15:16:35 +08:00
Island
6e1600f2f9 Merge branch 'feat/add_bt_common_npl_v5.3' into 'release/v5.3'
feat(bt): Add host-agnostic BT OSAL and shared BLE profile task (5.3)

See merge request espressif/esp-idf!51217
2026-07-29 15:00:21 +08:00
akshat
a791b31867 bugfix(wifi): Clear Sta TX queue to prevent key 2 send failure
Also, Ensure correct return values for key 2 and key 4.
2026-07-29 10:45:06 +05:30
Jiang Jiang Jian
ffd6fbd9fc Merge branch 'bugfix/fix_some_coex_bugs_260727_v5.3' into 'release/v5.3'
fix(coex): move 15.4 register configuration to 15.4 init(Backport v5.3)

See merge request espressif/esp-idf!51178
2026-07-29 10:23:34 +08:00
Jiang Jiang Jian
06ec4430d0 Merge branch 'bugfix/roaming_app_issues_v5.3' into 'release/v5.3'
Fixed some issues in roaming app found using static analysis(v5.3)

See merge request espressif/esp-idf!49937
2026-07-29 10:17:57 +08:00
Jiang Jiang Jian
74622529fd Merge branch 'fix/fix_iram_sleep_process_access_cache_v5.3' into 'release/v5.3'
fix(esp_hw_support): fix get_act_hp/lp_dbias accessed ext mem (v5.3)

See merge request espressif/esp-idf!51212
2026-07-29 10:15:42 +08:00
Wang Meng Yang
9079e1473a Merge branch 'bugfix/ai_review_avrcp_v5.3' into 'release/v5.3'
fix(bt): Fix the critical and high issues related to AVRCP from AI review report (v5.3)

See merge request espressif/esp-idf!50023
2026-07-28 19:59:39 +08:00
Wang Meng Yang
d9f2d61539 Merge branch 'bugfix/hid_host_oob_read_v5.3' into 'release/v5.3'
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act (v5.3)

See merge request espressif/esp-idf!50975
2026-07-28 19:52:02 +08:00
Wang Meng Yang
e13cc8ef6f Merge branch 'bugfix/bredr_critical_bugs_v5.3' into 'release/v5.3'
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI (v5.3)

See merge request espressif/esp-idf!51081
2026-07-28 19:43:58 +08:00
Hu Rui
194de3ab4b fix(uhci): rx fsm race condition and buffer size check
Closes https://github.com/espressif/esp-idf/issues/18819
Closes https://github.com/espressif/esp-idf/issues/18820
2026-07-28 14:56:43 +08:00
chenjianhua
67960f06d7 feat(bt): Add host-agnostic BT OSAL and shared BLE profile task
- Add bt_osal: event queues, mutexes, semaphores, callouts, etc.
- Add the shared BLE profile task and event queue
- Bring both up and tear them down in the host init/deinit paths
- Add unit tests for the OSAL and the profile task
2026-07-27 19:52:30 +08:00
Li Shuai
38c2c69378 change(esp_hw_support): optimize get hp/lp dbias implementation iram or flash usage 2026-07-27 19:14:08 +08:00
Alexey Lapshin
390a496942 fix(cxx): fix TLS classes destructor call
Closes https://github.com/espressif/esp-idf/issues/14360
2026-07-27 15:16:36 +07:00
Xu Si Yu
b762a6f5d0 fix(coex): move 15.4 register configuration to 15.4 init
1. move 15.4 register configuration to 15.4 init
2. fix coex status get issue
2026-07-27 11:41:56 +08:00
morris
25039385e2 Merge branch 'backport/spi_flash_fixes_v5.3' into 'release/v5.3'
fix(spi_flash): backport aes-xts error-path & mxic fixes (v5.3)

See merge request espressif/esp-idf!51138
2026-07-27 10:36:36 +08:00
Shreeyash Bhakare
f2b7aa1db8 fix(nimble): Added security related fixes 2026-07-25 13:48:33 +05:30
Astha Verma
8025ab856c fix(nimble): Restore throughput after switching from LE Coded PHY 2026-07-24 18:08:38 +05:30
Shu Chen
dae526045b Merge branch 'feat/update_phylib_on_s31_c6_for_track_v5.3' into 'release/v5.3'
feat(phy): update phy lib for esp32s31 & esp32c6 for track (v5.3)

See merge request espressif/esp-idf!50794
2026-07-24 11:05:06 +00:00
Rahul Tank
7ec47c264d Merge branch 'bugfix/red_rem_feat_evt_v5.3' into 'release/v5.3'
Handle Read Remote Supported Feature failure (v5.3)

See merge request espressif/esp-idf!50812
2026-07-24 14:28:47 +05:30
Jiang Jiang Jian
8363d0e4d1 Merge branch 'bugfix/a2dp_sbc_v5.3' into 'release/v5.3'
fix(bt): Fix the pointer sbc_start_frame is not initialized (v5.3)

See merge request espressif/esp-idf!51020
2026-07-24 16:02:04 +08:00
C.S.M
c7dd46e84b fix(spi_flash): Fix spi_flash leaks release aes-xts in error path
(cherry picked from commit 305c5869ee)
2026-07-24 15:00:50 +08:00
Shengyu Qu
352d18b48e fix(spi_flash): add #if check for s_mxic_set_required_regs()
Currently, s_mxic_set_required_regs() lacks checking for
CONFIG_SPI_FLASH_SUPPORT_MXIC_OPI_CHIP. And this causes a defined but not
used warning when MXIC flash driver is disabled in project config. So add
a #if check for this to supress warning.

Signed-off-by: Shengyu Qu <wiagn@4d2.org>
(cherry picked from commit 062c948c18)
2026-07-24 15:00:50 +08:00
zwx
5b13be2889 feat(openthread): use ieee802154 event callback list instead of weak overrides 2026-07-24 14:23:55 +08:00
Island
7efbfbb0a1 Merge branch 'fix/ble_hidd_remove_ccc_gating_v5.3' into 'release/v5.3'
fix(esp_hid/bluedroid): remove app-layer CCC gating in HID device (5.3)

See merge request espressif/esp-idf!51004
2026-07-23 19:26:18 +08:00
Wang Meng Yang
9c15348402 Merge branch 'bugfix/low_spp_throughput_v5.3' into 'release/v5.3'
change(bt/bluedroid): increased port low watermark of RFCOMM (v5.3)

See merge request espressif/esp-idf!51087
2026-07-23 16:41:33 +08:00
morris
9727ba62c3 Merge branch 'bugfix/ana_cmpr_macro_v5.3' into 'release/v5.3'
fix(ana_cmpr): Fix swapped POS/NEG cross interrupt masks on ESP32-C5/P4 (v5.3)

See merge request espressif/esp-idf!50802
2026-07-23 14:56:22 +08:00
Island
8f897fb259 Merge branch 'fix/ble_log_compression_safety_v5.3' into 'release/v5.3'
fix(ble_log): fix unaligned access and buffer safety in log compression (5.3)

See merge request espressif/esp-idf!47928
2026-07-23 14:22:57 +08:00
Jin Cheng
ed20c79614 change(bt/bluedroid): increased port low watermark of RFCOMM
When PORT_RX_BUF_LOW_WM is too low, RFCOMM replenishes credits only
after receiving a relatively large number of packets, which may cause
the peer to exhaust its credits and enter a stop-and-wait state.
Increase the low watermark to replenish credits more promptly and
reduce the likelihood of the peer stalling while waiting for additional
credits.
2026-07-23 08:11:29 +08:00
Jin Cheng
d70a124dec fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI 2026-07-23 07:53:22 +08:00
Jack
f69b8bde01 fix(phy): removed all librfate logic from cmake 2026-07-22 20:06:39 +08:00
zhuanghang
0476dfa707 feat(phy): update phy lib for esp32s31 & esp32c6 for track 2026-07-22 20:06:24 +08:00
yangfeng
ff7ce10233 fix(bt): Fix the high issues related to AVRCP from AI review report
- SDP/registration: handle SDP record creation and discovery failures safely
- AVRC stack: fix packet checks, fragment leaks, response build, and compile guards
- BTC AVRCP: fix return codes, connection state, metadata parsing, and memory leaks
- AVCTP: fix event passing, L2CAP conflicts, TX queue leaks, and disconnect handling
- Example: remove TG RN capability setup before initialization
2026-07-22 17:33:27 +08:00
yangfeng
3138799982 fix(bt): Fix the critical issues related to AVRCP from AI review report
- recalculate len_left per attribute in avrc_bld_app_setting_text_rsp
- abort fragmented message reassembly when reassembly buffer alloc fails
2026-07-22 17:32:28 +08:00
Astha Verma
75fd7a08cc fix(nimble): Handle Read Remote Supported Features failure correctly 2026-07-22 12:21:07 +05:30
Island
e171d8c754 Merge branch 'fix/ble-log-store-access-fault_v5.3' into 'release/v5.3'
fix: Ensure BLE Log Global Variables in Internal RAM (5.3)

See merge request espressif/esp-idf!51033
2026-07-22 14:02:54 +08:00
Tiago Medicci
e9e6a3dcf0 test(ana_cmpr): Add edge-specific interrupt direction test case
Add a Unity test case that arms only ANA_CMPR_CROSS_POS (resp. only
ANA_CMPR_CROSS_NEG) on a unit and asserts that a real transition of
the matching direction fires the callback exactly once, while a
transition of the opposite (never-armed) direction does not fire at
all.

This closes a gap in the existing test_apps: none of the current
cases isolate cross direction, so a swapped POS/NEG interrupt mask in
the LL layer (fixed in the previous commit) previously went
undetected.

On the scan-based comparator IP (ESP32-H4/S31), a crossing is only
sampled/latched when a scan is explicitly triggered, so the new test
case also triggers a scan after each level change on that IP, plus
one extra priming scan right after enabling the unit so the internal
compare state starts in sync with the already-set initial GPIO level.

Signed-off-by: Tiago Medicci <tiago.medicci@espressif.com>
2026-07-22 12:11:17 +08:00
Tiago Medicci
5cc17ee75a fix(ana_cmpr): Fix swapped POS/NEG cross interrupt masks on ESP32-P4 2026-07-22 12:11:17 +08:00
Mahavir Jain
c14fc50a34 Merge branch 'feat/mbedtls_update_3.6.7_v5.3' into 'release/v5.3'
feat(mbedtls): update to version 3.6.7 (v5.3)

See merge request espressif/esp-idf!50659
2026-07-22 09:00:54 +05:30
Zhou Xiao
f0be40c78e fix(bt): keep BLE log ISR state in internal RAM
(cherry picked from commit 2fa434eb50)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2026-07-21 19:44:12 +08:00
Euripedes Rocha
7ec3fe8a2c Merge branch 'fix/sec-1137-br-glue-double-free_v5.3' into 'release/v5.3'
fix(esp_netif): harden br_glue instance-handler cleanup against double-free (SEC-1137) (v5.3)

See merge request espressif/esp-idf!50646
2026-07-21 10:42:25 +02:00
yangfeng
dac2ceaaa5 fix(bt): Fix the pointer sbc_start_frame is not initialized
- Closes https://github.com/espressif/esp-idf/issues/18835
2026-07-21 16:10:31 +08:00
Ashish Sharma
25b55da173 feat(mbedtls): add option to choose constant-time prime generation 2026-07-21 16:00:42 +08:00
Ashish Sharma
e6fa7d627e feat(mbedtls): update to version 3.6.7 2026-07-21 15:49:22 +08:00
luoxu
97ffb2db24 fix(bt): reorder test imports to satisfy pre-commit 2026-07-21 15:33:27 +08:00
luoxu
55a58720d9 fix(ble_log): use typing.Optional/List for Python 3.9 compatibility 2026-07-21 14:17:49 +08:00
Luo Xu
b57260f260 fix(ble_log): fix size_info nibble misalignment for last odd-count arg
(cherry picked from commit f5a927e055)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-21 14:17:49 +08:00
Luo Xu
215e6f5aa0 test(ble): add comprehensive test suite for log compression
(cherry picked from commit 58121d2540)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-21 14:17:49 +08:00
Luo Xu
5be9215c10 fix(ble): replace hardcoded tuple indices with FormatToken NamedTuple
(cherry picked from commit b7760a77e4)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-21 14:17:49 +08:00