Mahavir Jain
e44c357a02
fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access
...
The offset table and the per-cert length fields of the certificate
bundle were read through uint16_t*/uint32_t* casts, which compile to
halfword/word loads at addresses with no alignment guarantee: bundles
supplied via esp_crt_bundle_set() can start anywhere, and cert entries
are byte-packed, so their 16-bit fields land at arbitrary offsets.
On chips with SOC_CPU_MISALIGNED_ACCESS_ON_PMP_MISMATCH_ISSUE (DIG-694:
ESP32-C6/H2/H21) a misaligned load from memory-mapped flash can take a
spurious "Load access fault" when it sits within two instructions of an
access to a differently-permissioned region, observed as a crash in
esp_crt_check_bundle()/CA callback during TLS handshakes with a bundle
that happened to be placed at an odd address.
2026-09-04 11:51:56 +08:00
Akshat Agrawal
c74d81ab51
fix(wpa_supplicant): Assign correct return value for SAE y-construction failure
2026-09-04 11:44:40 +08:00
Jiang Jiang Jian
9c8d416346
Merge branch 'fix/update_trng_workflow_for_esp32s31_v6.1' into 'release/v6.1'
...
fix(rng): fix esp_random failed beacuse do not enable RNG clock(v6.1)
See merge request espressif/esp-idf!52317
2026-09-04 11:42:23 +08:00
morris
131a7974ac
Merge branch 'feat/atomic-internal_v6.1' into 'release/v6.1'
...
fix(driver): allocate driver objects containing atomic variables from internal SRAM (v6.1)
See merge request espressif/esp-idf!52340
2026-09-04 11:16:08 +08:00
Shu Chen
7462e1d2e3
Merge branch 'fix/fix_openthread_netif_glue_deinit_issue_v6.1' into 'release/v6.1'
...
fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup (v6.1)
See merge request espressif/esp-idf!52397
2026-09-04 03:08:09 +00:00
Zhi Wei Jian
5eb72d5eab
feat(ble/bluedroid): reject LE re-pairing that weakens an existing bond
...
Add smp_repairing_is_allowed() behind BT_BLE_SMP_HARDENED_REPAIRING so a
peer cannot replace an existing bond with one that has less MITM
protection, no Secure Connections, or a shorter key. Compare a preceding
Security Request against the pairing command AuthReq, not the
association-model result, and always allow first pairing.
A refusal keeps the stored bond. Pairing-failure erase is split by link
role: default is erase as Central and keep as Peripheral.
Closes BLERP (NDSS 2026) V3, V4 and V6.
(cherry picked from commit 88ea45be73 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-09-04 11:04:00 +08:00
Zhi Wei Jian
5ed6b8dc0c
fix(ble/bluedroid): harden LE bond handling across encryption
...
Keep the existing bond until the new pairing is encrypted, and on encryption
failure drop the link instead of clearing keys. Recovering from a peer that
really deleted the bond is opt-in through BT_BLE_SMP_UNBOND_ON_KEY_MISSING.
Closes BLERP (NDSS 2026) V5, and stops an unauthenticated Pairing Request
from dropping the stored keys (V2 exploitation).
(cherry picked from commit f864615d7d )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-09-04 11:03:59 +08:00
Island
6955bf97cb
Merge branch 'change/ble_update_lib_20260901_v6.1' into 'release/v6.1'
...
change(ble): [AUTO_MR] 20260901 - Update ESP BLE Controller Lib (6.1)
See merge request espressif/esp-idf!52285
2026-09-04 10:53:29 +08:00
cjin
df470e9dee
feat(sleep): applied regi2c conflict process at regdma rf
2026-09-04 10:51:55 +08:00
cjin
aebcc6842d
fix(phy): add fe dependency when enable rf with regdma
2026-09-04 10:51:14 +08:00
cjin
c2a1465dc2
fix(sleep): fix reject trigger when wifi is enabled
2026-09-04 10:51:14 +08:00
zhuanghang
55b00bb1e4
feat(802.15.4): enable switch rf with regdma for 15.4
2026-09-04 10:51:04 +08:00
cjin
275e34f318
fix(phy): added fe set freq reset to rf retention list
2026-09-04 10:27:25 +08:00
cjin
40dbcb9ea6
feat(phy): support retention module for phy FE retgisters
2026-09-04 10:27:25 +08:00
cjin
3c875310d1
feat(modem): add phy retention related api
2026-09-04 10:27:25 +08:00
cjin
a79519d844
feat(phy): add skip list to sleep phy link context and fix deinit crash
2026-09-04 10:27:25 +08:00
cjin
506e3b30ed
feat(sleep): add config SOC_PM_SUPPORT_REGDMA_TRIGGERED_PHY
2026-09-04 10:27:25 +08:00
cjin
77003bcf0c
feat(sleep_modem): allow multi modem to enable rf with regdma
2026-09-04 10:27:25 +08:00
cjin
0780acf55e
feat(modem): rename the sleep modem functions
2026-09-04 10:27:25 +08:00
cjin
ee6cda2551
feat(phy): added skip method for phy retention list
2026-09-04 10:27:25 +08:00
cjin
639ae612ed
feat(phy): rename sleep modem state to sleep phy
2026-09-04 10:27:25 +08:00
Island
a03feffce8
Merge branch 'idf/ble_mesh_iv_recover_v6.1' into 'release/v6.1'
...
feat(ble_mesh): Enable IV Index recovery by default (6.1)
See merge request espressif/esp-idf!51973
2026-09-04 10:25:57 +08:00
Matteo Sandrin
e8db799e9f
fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails
2026-09-04 10:07:47 +08:00
Shu Chen
e87eb3bd62
Merge branch 'feat/support_multipan_feature_host_20260813_v6.1' into 'release/v6.1'
...
feat(openthread): add support for the multipan feature on host devices (v6.1)
See merge request espressif/esp-idf!52373
2026-09-04 02:07:20 +00:00
morris
69889c4097
Merge branch 'refactor/dac_examples_v6.1' into 'release/v6.1'
...
refactor(dac): remove adc read back in dac example, prepare for s31 (v6.1)
See merge request espressif/esp-idf!52330
2026-09-04 09:53:18 +08:00
morris
50f822e709
Merge branch 'fix/ci_h4_enable_spi_test_backport' into 'release/v6.1'
...
fix(driver_twai): fix potential crash when node_delete from high priority task (v6.1)
See merge request espressif/esp-idf!51987
2026-09-04 09:52:12 +08:00
Liu Linyan
ed16327b81
feat(ble_audio): Add CAP Handover (U2B & B2U) example
2026-09-04 09:26:24 +08:00
Liu Linyan
130e4a07bb
fix(ble_audio): Fix wrong registration when multiple tbs instances exist
2026-09-04 09:26:24 +08:00
Liu Linyan
ae452a0ce9
feat(ble_audio): Support BLE ISO & BLE Audio deinitialization
2026-09-04 09:26:24 +08:00
Liu Linyan
1aa418d673
fix(ble_audio): Miscellaneous fixes for running coordinated set
2026-09-04 09:26:24 +08:00
Liu Linyan
cd0572bbb6
feat(ble_audio): Miscellaneous update for ISO & Audio examples
2026-09-04 09:26:24 +08:00
Liu Linyan
89ea6e2b08
fix(ble_audio): Recover ISO HCI cmd from a dropped hciT wakeup
2026-09-04 09:26:24 +08:00
Liu Linyan
cd61beac51
fix(ble_audio): Fix CCCD not found during GATTC auto discovery
2026-09-04 09:26:24 +08:00
Liu Linyan
d4133e9751
fix(ble_audio): Miscellaneous fixes for ISO & LE Audio (stage 2)
2026-09-04 09:26:24 +08:00
Liu Linyan
30fd193df0
feat(ble_audio): Add specific libs for BLE Audio log compression
2026-09-04 09:26:24 +08:00
Liu Linyan
cf73b0c616
feat(ble_audio): BLE Audio PSRAM support
2026-09-04 09:26:24 +08:00
Marius Vikhammer
84a2ae4e5e
Merge branch 'backport-50410-to-release/v6.1' into 'release/v6.1'
...
fix(pthread,ulp): harden TLS key lookup and ULP bss_size validation (v6.1)
See merge request espressif/esp-idf!50956
2026-09-04 09:13:46 +08:00
Wang Meng Yang
90c98ef8bb
Merge branch 'bugfix/fix_osi_event_bug_v6.1' into 'release/v6.1'
...
Bugfix/fix osi event bug[backport v6.1]
See merge request espressif/esp-idf!52322
2026-09-04 08:32:08 +08:00
Wang Meng Yang
530c113ccf
Merge branch 'fix/bt_memory_v6.1' into 'release/v6.1'
...
fix(bt_memory): Reduce memory usage in transfer (v6.1)
See merge request espressif/esp-idf!52275
2026-09-04 07:49:41 +08:00
Roland Dobai
cbd9a2fc26
Merge branch 'fix/kconfig_test_format_v6.1' into 'release/v6.1'
...
fix: KConfig test output format (v6.1)
See merge request espressif/esp-idf!52366
2026-09-04 00:32:35 +02:00
David Čermák
07ff438bfd
Merge branch 'fix/sec-1129-l2tap-close-rollback_v6.1' into 'release/v6.1'
...
fix(esp_netif): roll back l2tap_close on semaphore/task create failure (SEC-1129) (v6.1)
See merge request espressif/esp-idf!51397
2026-09-04 02:51:10 +08:00
Daniel Paul
587ae6f770
fix: KConfig test output format
2026-09-04 00:46:51 +08:00
David Čermák
3cad927db6
Merge branch 'fix/ieee802_3_reset_time_v6.1' into 'release/v6.1'
...
fix(esp_eth): fixed Ethernet PHY HW reset timing in common PHY code (v6.1)
See merge request espressif/esp-idf!51710
2026-09-03 23:25:25 +08:00
Rahul Tank
629db27293
Merge branch 'bugfix/fix_stale_conn_cccd_v6.1' into 'release/v6.1'
...
fix(nimble): fix crash on disconnect due to stale per-connection CCCD pool (v6.1)
See merge request espressif/esp-idf!51950
2026-09-03 19:04:06 +05:30
David Čermák
c2a72754f4
Merge branch 'fix/sec-1137-br-glue-double-free_v6.1' into 'release/v6.1'
...
fix(esp_netif): harden br_glue instance-handler cleanup against double-free (SEC-1137) (v6.1)
See merge request espressif/esp-idf!50642
2026-09-03 21:11:51 +08:00
Jiang Jiang Jian
598fb82bd5
Merge branch 'feat/support_pawr_connect_evt_v6.1' into 'release/v6.1'
...
feat(ble/bluedroid): Support PAWR connection event (6.1)
See merge request espressif/esp-idf!51443
2026-09-03 20:41:30 +08:00
Jiang Jiang Jian
a4bbf950c8
Merge branch 'feat/enable_zcmp_for_c5_c61_v6.1' into 'release/v6.1'
...
feat(soc): esp32c5, esp32c61: enable zc extensions (v6.1)
See merge request espressif/esp-idf!51525
2026-09-03 20:41:23 +08:00
Martin Vychodil
089ccceb01
Merge branch 'fix/idf-16024-nvs-api-docs_v6.1' into 'release/v6.1'
...
docs(nvs_flash): correct public API docs for error codes and space use (v6.1)
See merge request espressif/esp-idf!52331
2026-09-03 20:26:15 +08:00
Roland Dobai
175777a002
Merge branch 'fix/windows_tests_v6.1' into 'release/v6.1'
...
ci(tools): Fix Windows pytest_build_system idf_copy gitlinks and log_cli hang (v6.1)
See merge request espressif/esp-idf!52332
2026-09-03 14:07:31 +02:00
Xu Si Yu
a1657350a9
fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup
2026-09-03 20:03:46 +08:00