Commit Graph
54296 Commits
Author SHA1 Message Date
Mahavir Jain e44c357a02 fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access
The offset table and the per-cert length fields of the certificate
bundle were read through uint16_t*/uint32_t* casts, which compile to
halfword/word loads at addresses with no alignment guarantee: bundles
supplied via esp_crt_bundle_set() can start anywhere, and cert entries
are byte-packed, so their 16-bit fields land at arbitrary offsets.

On chips with SOC_CPU_MISALIGNED_ACCESS_ON_PMP_MISMATCH_ISSUE (DIG-694:
ESP32-C6/H2/H21) a misaligned load from memory-mapped flash can take a
spurious "Load access fault" when it sits within two instructions of an
access to a differently-permissioned region, observed as a crash in
esp_crt_check_bundle()/CA callback during TLS handshakes with a bundle
that happened to be placed at an odd address.
2026-09-04 11:51:56 +08:00
Akshat Agrawal c74d81ab51 fix(wpa_supplicant): Assign correct return value for SAE y-construction failure 2026-09-04 11:44:40 +08:00
Jiang Jiang Jian 9c8d416346 Merge branch 'fix/update_trng_workflow_for_esp32s31_v6.1' into 'release/v6.1'
fix(rng): fix esp_random failed beacuse do not enable RNG clock(v6.1)

See merge request espressif/esp-idf!52317
2026-09-04 11:42:23 +08:00
morris 131a7974ac Merge branch 'feat/atomic-internal_v6.1' into 'release/v6.1'
fix(driver): allocate driver objects containing atomic variables from internal SRAM (v6.1)

See merge request espressif/esp-idf!52340
2026-09-04 11:16:08 +08:00
Shu Chen 7462e1d2e3 Merge branch 'fix/fix_openthread_netif_glue_deinit_issue_v6.1' into 'release/v6.1'
fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup (v6.1)

See merge request espressif/esp-idf!52397
2026-09-04 03:08:09 +00:00
Zhi Wei Jian 5eb72d5eab feat(ble/bluedroid): reject LE re-pairing that weakens an existing bond
Add smp_repairing_is_allowed() behind BT_BLE_SMP_HARDENED_REPAIRING so a
peer cannot replace an existing bond with one that has less MITM
protection, no Secure Connections, or a shorter key. Compare a preceding
Security Request against the pairing command AuthReq, not the
association-model result, and always allow first pairing.

A refusal keeps the stored bond. Pairing-failure erase is split by link
role: default is erase as Central and keep as Peripheral.

Closes BLERP (NDSS 2026) V3, V4 and V6.


(cherry picked from commit 88ea45be73)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-09-04 11:04:00 +08:00
Zhi Wei Jian 5ed6b8dc0c fix(ble/bluedroid): harden LE bond handling across encryption
Keep the existing bond until the new pairing is encrypted, and on encryption
failure drop the link instead of clearing keys. Recovering from a peer that
really deleted the bond is opt-in through BT_BLE_SMP_UNBOND_ON_KEY_MISSING.

Closes BLERP (NDSS 2026) V5, and stops an unauthenticated Pairing Request
from dropping the stored keys (V2 exploitation).


(cherry picked from commit f864615d7d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-09-04 11:03:59 +08:00
Island 6955bf97cb Merge branch 'change/ble_update_lib_20260901_v6.1' into 'release/v6.1'
change(ble): [AUTO_MR] 20260901 - Update ESP BLE Controller Lib (6.1)

See merge request espressif/esp-idf!52285
2026-09-04 10:53:29 +08:00
cjin df470e9dee feat(sleep): applied regi2c conflict process at regdma rf 2026-09-04 10:51:55 +08:00
cjin aebcc6842d fix(phy): add fe dependency when enable rf with regdma 2026-09-04 10:51:14 +08:00
cjin c2a1465dc2 fix(sleep): fix reject trigger when wifi is enabled 2026-09-04 10:51:14 +08:00
zhuanghang 55b00bb1e4 feat(802.15.4): enable switch rf with regdma for 15.4 2026-09-04 10:51:04 +08:00
cjin 275e34f318 fix(phy): added fe set freq reset to rf retention list 2026-09-04 10:27:25 +08:00
cjin 40dbcb9ea6 feat(phy): support retention module for phy FE retgisters 2026-09-04 10:27:25 +08:00
cjin 3c875310d1 feat(modem): add phy retention related api 2026-09-04 10:27:25 +08:00
cjin a79519d844 feat(phy): add skip list to sleep phy link context and fix deinit crash 2026-09-04 10:27:25 +08:00
cjin 506e3b30ed feat(sleep): add config SOC_PM_SUPPORT_REGDMA_TRIGGERED_PHY 2026-09-04 10:27:25 +08:00
cjin 77003bcf0c feat(sleep_modem): allow multi modem to enable rf with regdma 2026-09-04 10:27:25 +08:00
cjin 0780acf55e feat(modem): rename the sleep modem functions 2026-09-04 10:27:25 +08:00
cjin ee6cda2551 feat(phy): added skip method for phy retention list 2026-09-04 10:27:25 +08:00
cjin 639ae612ed feat(phy): rename sleep modem state to sleep phy 2026-09-04 10:27:25 +08:00
Island a03feffce8 Merge branch 'idf/ble_mesh_iv_recover_v6.1' into 'release/v6.1'
feat(ble_mesh): Enable IV Index recovery by default (6.1)

See merge request espressif/esp-idf!51973
2026-09-04 10:25:57 +08:00
Matteo Sandrin e8db799e9f fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails 2026-09-04 10:07:47 +08:00
Shu Chen e87eb3bd62 Merge branch 'feat/support_multipan_feature_host_20260813_v6.1' into 'release/v6.1'
feat(openthread): add support for the multipan feature on host devices (v6.1)

See merge request espressif/esp-idf!52373
2026-09-04 02:07:20 +00:00
morris 69889c4097 Merge branch 'refactor/dac_examples_v6.1' into 'release/v6.1'
refactor(dac): remove adc read back in dac example, prepare for s31 (v6.1)

See merge request espressif/esp-idf!52330
2026-09-04 09:53:18 +08:00
morris 50f822e709 Merge branch 'fix/ci_h4_enable_spi_test_backport' into 'release/v6.1'
fix(driver_twai): fix potential crash when node_delete from high priority task (v6.1)

See merge request espressif/esp-idf!51987
2026-09-04 09:52:12 +08:00
Liu Linyan ed16327b81 feat(ble_audio): Add CAP Handover (U2B & B2U) example 2026-09-04 09:26:24 +08:00
Liu Linyan 130e4a07bb fix(ble_audio): Fix wrong registration when multiple tbs instances exist 2026-09-04 09:26:24 +08:00
Liu Linyan ae452a0ce9 feat(ble_audio): Support BLE ISO & BLE Audio deinitialization 2026-09-04 09:26:24 +08:00
Liu Linyan 1aa418d673 fix(ble_audio): Miscellaneous fixes for running coordinated set 2026-09-04 09:26:24 +08:00
Liu Linyan cd0572bbb6 feat(ble_audio): Miscellaneous update for ISO & Audio examples 2026-09-04 09:26:24 +08:00
Liu Linyan 89ea6e2b08 fix(ble_audio): Recover ISO HCI cmd from a dropped hciT wakeup 2026-09-04 09:26:24 +08:00
Liu Linyan cd61beac51 fix(ble_audio): Fix CCCD not found during GATTC auto discovery 2026-09-04 09:26:24 +08:00
Liu Linyan d4133e9751 fix(ble_audio): Miscellaneous fixes for ISO & LE Audio (stage 2) 2026-09-04 09:26:24 +08:00
Liu Linyan 30fd193df0 feat(ble_audio): Add specific libs for BLE Audio log compression 2026-09-04 09:26:24 +08:00
Liu Linyan cf73b0c616 feat(ble_audio): BLE Audio PSRAM support 2026-09-04 09:26:24 +08:00
Marius Vikhammer 84a2ae4e5e Merge branch 'backport-50410-to-release/v6.1' into 'release/v6.1'
fix(pthread,ulp): harden TLS key lookup and ULP bss_size validation (v6.1)

See merge request espressif/esp-idf!50956
2026-09-04 09:13:46 +08:00
Wang Meng Yang 90c98ef8bb Merge branch 'bugfix/fix_osi_event_bug_v6.1' into 'release/v6.1'
Bugfix/fix osi event bug[backport v6.1]

See merge request espressif/esp-idf!52322
2026-09-04 08:32:08 +08:00
Wang Meng Yang 530c113ccf Merge branch 'fix/bt_memory_v6.1' into 'release/v6.1'
fix(bt_memory): Reduce memory usage in transfer (v6.1)

See merge request espressif/esp-idf!52275
2026-09-04 07:49:41 +08:00
Roland Dobai cbd9a2fc26 Merge branch 'fix/kconfig_test_format_v6.1' into 'release/v6.1'
fix: KConfig test output format (v6.1)

See merge request espressif/esp-idf!52366
2026-09-04 00:32:35 +02:00
David Čermák 07ff438bfd Merge branch 'fix/sec-1129-l2tap-close-rollback_v6.1' into 'release/v6.1'
fix(esp_netif): roll back l2tap_close on semaphore/task create failure (SEC-1129) (v6.1)

See merge request espressif/esp-idf!51397
2026-09-04 02:51:10 +08:00
Daniel Paul 587ae6f770 fix: KConfig test output format 2026-09-04 00:46:51 +08:00
David Čermák 3cad927db6 Merge branch 'fix/ieee802_3_reset_time_v6.1' into 'release/v6.1'
fix(esp_eth): fixed Ethernet PHY HW reset timing in common PHY code (v6.1)

See merge request espressif/esp-idf!51710
2026-09-03 23:25:25 +08:00
Rahul Tank 629db27293 Merge branch 'bugfix/fix_stale_conn_cccd_v6.1' into 'release/v6.1'
fix(nimble): fix crash on disconnect due to stale per-connection CCCD pool (v6.1)

See merge request espressif/esp-idf!51950
2026-09-03 19:04:06 +05:30
David Čermák c2a72754f4 Merge branch 'fix/sec-1137-br-glue-double-free_v6.1' into 'release/v6.1'
fix(esp_netif): harden br_glue instance-handler cleanup against double-free (SEC-1137) (v6.1)

See merge request espressif/esp-idf!50642
2026-09-03 21:11:51 +08:00
Jiang Jiang Jian 598fb82bd5 Merge branch 'feat/support_pawr_connect_evt_v6.1' into 'release/v6.1'
feat(ble/bluedroid): Support PAWR connection event (6.1)

See merge request espressif/esp-idf!51443
2026-09-03 20:41:30 +08:00
Jiang Jiang Jian a4bbf950c8 Merge branch 'feat/enable_zcmp_for_c5_c61_v6.1' into 'release/v6.1'
feat(soc): esp32c5, esp32c61: enable zc extensions (v6.1)

See merge request espressif/esp-idf!51525
2026-09-03 20:41:23 +08:00
Martin Vychodil 089ccceb01 Merge branch 'fix/idf-16024-nvs-api-docs_v6.1' into 'release/v6.1'
docs(nvs_flash): correct public API docs for error codes and space use (v6.1)

See merge request espressif/esp-idf!52331
2026-09-03 20:26:15 +08:00
Roland Dobai 175777a002 Merge branch 'fix/windows_tests_v6.1' into 'release/v6.1'
ci(tools): Fix Windows pytest_build_system idf_copy gitlinks and log_cli hang (v6.1)

See merge request espressif/esp-idf!52332
2026-09-03 14:07:31 +02:00
Xu Si Yu a1657350a9 fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup 2026-09-03 20:03:46 +08:00