Commit Graph
34346 Commits
Author SHA1 Message Date
Jin Cheng 5d58539407 fix(bt/bluedroid): fixed OOB read dring mSBC sync word check 2026-09-14 12:04:18 +08:00
Jiang Jiang Jian 23d23f3f41 Merge branch 'bugfix/fix_example_power_save_build_fail_issue_v5.5' into 'release/v5.5'
fix(esp_timer): preserve timer_process_alarm symbol for ldgen(Backport v5.5)

See merge request espressif/esp-idf!52741
2026-09-14 11:08:48 +08:00
Jiang Jiang Jian 1e7ba70413 Merge branch 'bugfix/wpa_supplicant_upstream_security_issues_v5.5' into 'release/v5.5'
esp_wifi: Port security issues from upstream supplicant (v5.5)

See merge request espressif/esp-idf!52676
2026-09-14 11:07:50 +08:00
Jiang Jiang Jian be1c214237 Merge branch 'change/ble_update_lib_20260904_v5.5' into 'release/v5.5'
change(ble): [AUTO_MR] 20260904 - Update ESP BLE Controller Lib (5.5)

See merge request espressif/esp-idf!52438
2026-09-14 10:32:00 +08:00
Marius Vikhammer 7a2d687f53 Merge branch 'fix/esp_task_stack_is_sane_cache_disabled_spm_check_v5.5' into 'release/v5.5'
fix(spi_flash): recognize SPM-resident stacks as cache-disable-safe (v5.5)

See merge request espressif/esp-idf!52739
2026-09-14 09:57:09 +08:00
Jiang Jiang Jian b4711bcff7 Merge branch 'feat/support-phy-grant-protect_v5.5' into 'release/v5.5'
feat(coex): support phy grant protect (v5.5)

See merge request espressif/esp-idf!52559
2026-09-14 09:46:53 +08:00
Wang Meng Yang 72ea868c67 Merge branch 'fix/bt_hfp_v5.5' into 'release/v5.5'
fix(bt_hfp): Fix some bugs in hfp (v5.5)

See merge request espressif/esp-idf!52751
2026-09-14 08:04:06 +08:00
Rahul Tank 042e88e6bf Merge branch 'bugfix/nimble_gattc_write_long_zero_len_v5.5' into 'release/v5.5'
fix(nimble): Send Prepare Write Request before Execute Write in write long with zero-length data (v5.5)

See merge request espressif/esp-idf!49768
2026-09-13 11:44:54 +05:30
Jiang Jiang Jian 02c6ca331f Merge branch 'fix/supplicant_checks_v5.5' into 'release/v5.5'
Fixed OOB read on short FT auth and RRM action frames(v5.5)

See merge request espressif/esp-idf!52710
2026-09-11 20:21:47 +08:00
morris ba899c9781 Merge branch 'fix/adc-sample-freq-kconfig-v5.5' into 'release/v5.5'
fix(soc): correct ESP32 ADC sample frequency thresholds

See merge request espressif/esp-idf!51786
2026-09-11 17:58:18 +08:00
Shreeyash Bhakare c07b5cb9d4 fix(nimble): Send Prepare Write Request before Execute Write with zero-length data 2026-09-11 14:58:59 +05:30
hejiaxin 189b9bbd2d fix(bt_hfp): Fix some bugs in hfp
- Fix hfp callback data length
- Fix the solution of unknown AT command
2026-09-11 17:25:56 +08:00
Rahul Tank a7121aef2c Merge branch 'bugfix/nimble_issues_08092026_v5.5' into 'release/v5.5'
fix few nimble issues 08092026(v5.5)

See merge request espressif/esp-idf!52603
2026-09-11 14:38:57 +05:30
zhaoweiliang f37458da02 change(ble): [AUTO_MR] Update lib_esp32c5 to acd9a26e 2026-09-11 16:26:04 +08:00
zhaoweiliang 2f25a9fb5d change(ble): [AUTO_MR] Update lib_esp32h2 to acd9a26e 2026-09-11 16:25:44 +08:00
zhaoweiliang 068dadca31 change(ble): [AUTO_MR] Update lib_esp32c6 to acd9a26e 2026-09-11 16:24:54 +08:00
muhaidong 8fc16bc28f fix(esp_timer): preserve timer_process_alarm symbol for ldgen 2026-09-11 16:05:30 +08:00
Guillaume Souchere d400947773 fix(spi_flash): Check for SPM memory in esp_task_stack_is_sane_cache_disabled 2026-09-11 09:49:28 +02:00
Xu Si Yu f14deb95a0 feat(coex): support phy grant protect 2026-09-11 14:41:01 +08:00
Richard Allen 08064bc03b TLS: Avoid discarded-qualifiers
Just a build issue fix depending on GCC5+ configuration, fixes:

assignment discards 'const' qualifier from pointer target type [-Werror=discarded-qualifiers]
return discards 'const' qualifier from pointer target type [-Werror=discarded-qualifiers]

Signed-off-by: Richard Allen <richard@bryghtlabs.com>
2026-09-11 14:24:58 +08:00
Jimi Chen 9de31f008c SAE: Fix crash due to NULL pointer dereference in H2E parsing
In H2E (Hash-to-Element) mode, sae_parse_commit() parses the optional
Anti-Clogging Token Container by calling sae_parse_token_container().

However, callers of sae_parse_commit() that do not require retrieving
the anti-clogging token (such as PASN initiator/responder and SME auth)
pass NULL for the token and token_len output arguments.

If the peer sends a Commit frame containing a valid Anti-Clogging
Token Container element, sae_parse_token_container() unconditionally
sets *token and *token_len, resulting in a NULL pointer dereference
(SIGSEGV) and crashing wpa_supplicant.

Fix this by adding NULL checks before writing to token and token_len.
Update the debug log to print the token directly using 'pos'.

Fixes: 5e32fb0170f4 ("SAE: Use Anti-Clogging Token Container element with H2E")
Signed-off-by: Amarnath Hullur Subramanyam <amarnathhs@google.com>
2026-09-11 14:24:58 +08:00
Jouni Malinen 9c825298fc Require network_ctx and AKMP match for accepting PMKSA entry
When wpa_supplicant was processing EAPOL-Key msg 1/4 with a PMKID
indicated by the AP/Authenticator, a PMKSA for the same AA was accepted
without enforcing matching network_ctx (i.e., same network configuration
block) and AKMP. This could allow misbehaving APs to make wpa_supplicant
use an unacceptable PMKSA entry that was generated for a different
network for AKMP under certain conditions. This could result in showing
a connection to an incorrect network when an attacker has credentials to
one network in wpa_supplicant configuration, but not to another network.

Fix this by accepting the PMKID to set the PMKSA for an association only
if the PMKSA with the same PMKID is for the same network and was
generated using the same AKMP.

Signed-off-by: Jouni Malinen <jouni.malinen@oss.qualcomm.com>
2026-09-11 14:24:58 +08:00
Aditi 03b3e0217c feat(wpa_supplicant): Match SPA when searching PMKSA cache
Store the supplicant address (SPA) in PMKSA cache entries and match
it when looking up the PMKSA cache.

(partially picked from commit 18cbdbf2b1)
2026-09-11 14:24:58 +08:00
tarun.kumar f9aee5422d fix(wifi) : Fixed OOB read on short FT auth and RRM action frames 2026-09-11 14:23:40 +08:00
Jiang Jiang Jian d8b677db7e Merge branch 'bugfix/fix_softap_return_home_channel_failed_v5.5' into 'release/v5.5'
fix(scan): prioritize if1_conn check for home channel return logic and fix(wifi): fix wifi scan and wps connect issue v5.5

See merge request espressif/esp-idf!52674
2026-09-11 14:04:53 +08:00
Jiang Jiang Jian 538027f317 Merge branch 'riscv_panic_bp_fix_v5.5' into 'release/v5.5'
fix(esp_system/panic): ensure breakpoint set from panic handler gets hit afterwards (v5.5)

See merge request espressif/esp-idf!51829
2026-09-11 13:59:52 +08:00
Jiang Jiang Jian 7e04f11475 Merge branch 'feature/esp_timer_is_active_when_cb_is_running_v5.5' into 'release/v5.5'
feat(esp_timer): Adds blocking stop API (v5.5)

See merge request espressif/esp-idf!52241
2026-09-11 13:58:12 +08:00
Jiang Jiang Jian a3c9d8da81 Merge branch 'fix/dualcore_branch_predictor_cache_race_v5.5' into 'release/v5.5'
fix(spi_flash): disable branch prediction on the parked core during flash ops (v5.5)

See merge request espressif/esp-idf!52201
2026-09-11 12:16:45 +08:00
Jiang Jiang Jian dd1f19b654 Merge branch 'fix/esp-timer-restart-expiry-race_v5.5' into 'release/v5.5'
fix(esp_timer): prevent restart expiry race (v5.5)

See merge request espressif/esp-idf!51806
2026-09-11 12:14:42 +08:00
Jiang Jiang Jian a44050483b Merge branch 'fix/spi_buslock_unregister_issue_v5.5' into 'release/v5.5'
fix(hw_support): spi buslock fix unregister dev api issue (v5.5)

See merge request espressif/esp-idf!51473
2026-09-11 12:14:33 +08:00
Shu Chen daa6f6a7e5 Merge branch 'fix/openthread-udp-host-interface_v5.5' into 'release/v5.5'
fix(openthread): preserve host interface on UDP receive (v5.5)

See merge request espressif/esp-idf!52691
2026-09-11 03:41:18 +00:00
sibeibei 1381a2510a ci(wpa_supplicant): use large partition table for supplicant test app 2026-09-10 20:43:07 +08:00
Rahul Tank ecd654c861 Merge branch 'bugfix/hardware_error_assert_v5.5' into 'release/v5.5'
fix(nimble): Add hardware error event handling as normal event (v5.5)

See merge request espressif/esp-idf!52554
2026-09-10 17:12:24 +05:30
Jiang Jiang Jian 45d111a6aa Merge branch 'backport/h264_regdma_retention_v5.5' into 'release/v5.5'
feat(esp32p4): add H264 REGDMA link and sleep retention module (v5.5)

See merge request espressif/esp-idf!52666
2026-09-10 17:36:48 +08:00
zwx 9396199a22 fix(openthread): preserve host interface on UDP receive 2026-09-10 16:44:46 +08:00
Jiang Jiang Jian fc488e14d4 Merge branch 'fix/brownout_restore_after_deepsleep_reject_v5.5' into 'release/v5.5'
fix(esp_hw_support): restore brownout after deep sleep rejection on ESP32-S2 (v5.5)

See merge request espressif/esp-idf!52646
2026-09-10 15:55:10 +08:00
Jiang Jiang Jian e8669c03e7 Merge branch 'fix-ieee802154-teardown-order_v5.5' into 'release/v5.5'
ieee802154: Fix teardown order (v5.5)

See merge request espressif/esp-idf!52662
2026-09-10 15:53:59 +08:00
morris d126d086d0 Merge branch 'fix/mcpwm_cap_prescale_v5.5' into 'release/v5.5'
fix(mcpwm): correct the wrong capture prescale (v5.5)

See merge request espressif/esp-idf!52506
2026-09-10 14:46:53 +08:00
sibeibei d537815bb0 fix(scan): prioritize if1_conn check for home channel return logic 2026-09-10 12:25:05 +08:00
Jiang Jiang Jian f402ab1c18 Merge branch 'fix/fix_issues_when_support_multiple_phy_init_data_v5.5' into 'release/v5.5'
Fix/fix issues when support multiple phy init data v5.5(backport v5.5)

See merge request espressif/esp-idf!52586
2026-09-10 11:26:09 +08:00
Jiang Jiang Jian 28cef9e926 Merge branch 'fix/lp_core_rc_fast_delay_freq_v5.5' into 'release/v5.5'
fix(ulp): hardcode LP core RC_FAST frequency per target (v5.5)

See merge request espressif/esp-idf!52672
2026-09-10 11:07:43 +08:00
Jiang Jiang Jian 175a1a582f Merge branch 'fix/esp32-ble-dtm-txbuf-leak_v5.5' into 'release/v5.5'
Fix DTM TX buffer leak in the BLE controller that could cause memory exhaustion and Interrupt WDT timeout during or after DTM TX tests. (5.5)

See merge request espressif/esp-idf!52614
2026-09-10 11:03:54 +08:00
Jiang Jiang Jian 593476dfb9 Merge branch 'contrib/github_pr_18818_v5.5' into 'release/v5.5'
fix(esp_http_client): fix parser wedge and dead error-classification branches on read timeout (GitHub PR) (v5.5)

See merge request espressif/esp-idf!52619
2026-09-10 11:00:57 +08:00
Jiang Jiang Jian ca1b526f67 Merge branch 'feat/opt_prefer_bond_device_when_evicting_overflow_bonds_v5.5' into 'release/v5.5'
fix(bt/bluedroid): prefer disconnected peers when evicting overflow bonds (5.5)

See merge request espressif/esp-idf!52609
2026-09-10 11:00:18 +08:00
Jiang Jiang Jian f23060d30c Merge branch 'bugfix/spp_deinit_fail_v5.5' into 'release/v5.5'
fix(bt/bluedroid): fixed JV disable event has no handler in Bluedroid (v5.5)

See merge request espressif/esp-idf!52595
2026-09-10 10:57:42 +08:00
Jiang Jiang Jian 1f1ed91bf7 Merge branch 'fix/ecdsa_hmac_ds_locking_v5.5' into 'release/v5.5'
fix(esp_security): Stop ECDSA and Key Manager resets from corrupting concurrent crypto (v5.5)

See merge request espressif/esp-idf!52579
2026-09-10 10:56:28 +08:00
Jiang Jiang Jian 8c7be0ba6e Merge branch 'feat/support_fixed_ampdu_rate_v5.5' into 'release/v5.5'
feat/support fixed ampdu rate v5.5(backport v5.5)

See merge request espressif/esp-idf!52535
2026-09-10 10:54:40 +08:00
Jiang Jiang Jian 14f7f76572 Merge branch 'fix/resolve_issues_reported_via_bbp_v5.5' into 'release/v5.5'
fix(openthread): fix null pointer deref, uninitialized struct, and unbounded strcpy in spinel/RCP code (v5.5)

See merge request espressif/esp-idf!51375
2026-09-10 10:52:24 +08:00
Jiang Jiang Jian a276ed9440 Merge branch 'feat/ble_smp_repairing_hardening_v5.5' into 'release/v5.5'
feat(ble/bluedroid): add Kconfig options for BLE re-pairing hardening (5.5)

See merge request espressif/esp-idf!52420
2026-09-10 10:51:24 +08:00
Jiang Jiang Jian ec6877d459 Merge branch 'fix/fxied_wrong_h2_ble_lib_issue_v5.5' into 'release/v5.5'
fix(ble): Check if there are illegal library files in controller lib path (5.5)

See merge request espressif/esp-idf!52190
2026-09-10 10:47:04 +08:00