Commit Graph
26840 Commits
Author SHA1 Message Date
Jiang Jiang Jian 63bfea2eb1 Merge branch 'fix/use_unilock_for_sleep_process_v5.2' into 'release/v5.2'
fix(esp_hw_support): use same lock for lightsleep/deepsleep process (v5.2)

See merge request espressif/esp-idf!49844
2026-06-23 10:57:11 +08:00
Mahavir Jain b50a0fd029 Merge branch 'fix/disable_secure_boot_v2_ecdsa_v5.2' into 'release/v5.2'
Fix/disable secure boot v2 ecdsa (v5.2)

See merge request espressif/esp-idf!49475
2026-06-22 21:26:33 +05:30
Island b376d3c11d Merge branch 'fix/ble_mesh_bug_report_v2_v5.2' into 'release/v5.2'
fix(ble_mesh): Miscellaneous bugfixes according to our internal bug report (v2)

See merge request espressif/esp-idf!49320
2026-06-22 22:29:40 +08:00
Rahul Tank d5848c3a43 Merge branch 'feat/throughput_l2cap_coc_v5.2' into 'release/v5.2'
Added l2cap_coc example for throughput (v5.2)

See merge request espressif/esp-idf!49743
2026-06-22 19:47:01 +05:30
Mahavir Jain d945534a1a Merge branch 'fix/ecdsa_ecc_hw_input_validation_v5.2' into 'release/v5.2'
Validate ECDSA signature range and harden ECC memory power-down (v5.2)

See merge request espressif/esp-idf!49446
2026-06-22 18:24:33 +05:30
Jiang Jiang Jian 7b6a7d0659 Merge branch 'fix/scan_authmode_fixes_v5.2_part2' into 'release/v5.2'
fix(wifi): backport scan and NAN timer fixes (Backport v5.2: Part 2)

See merge request espressif/esp-idf!49585
2026-06-22 19:32:44 +08:00
Astha Verma e08b2eefa6 fix(nimble): Added l2cap_coc throughput examples 2026-06-22 11:49:55 +05:30
wuzhenghui 119f25b8e6 fix(esp_hw_support): use same lock for lightsleep/deepsleep process 2026-06-22 11:51:21 +08:00
Island 75a5c91e7a Merge branch 'feat/ble-smp-multi-adv-static-random-address_v5.2' into 'release/v5.2'
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses (5.2)

See merge request espressif/esp-idf!49785
2026-06-22 10:35:20 +08:00
Aditya Patwardhan 7022ce26c1 change(secure_boot): mark ECDSA based Secure Boot V2 as insecure on affected SoCs
ECDSA based Secure Boot V2 is not functional for certain input vectors on
ESP32-C5/C61/H2/P4 and on the preview targets ESP32-H4/H21. RSA based Secure
Boot V2 is the recommended scheme where the SoC supports it. This issue will be
fixed in a future hardware ECO revision; more details will be shared through the
hardware errata document.

A new hidden Kconfig option SECURE_BOOT_V2_ECDSA_INSECURE marks the affected
mass-production SoCs (ESP32-C5/C61/H2/P4). On these SoCs, when hardware Secure
Boot V2 is enabled, the ECDSA (V2) signing scheme is no longer offered by
default; it must be turned on explicitly via SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
under "Allow potentially insecure options" (CONFIG_SECURE_BOOT_INSECURE). App
signing without hardware Secure Boot is not affected. Note that ESP32-C61 has no
RSA based Secure Boot V2, so it has no Secure Boot scheme enabled by default.

The preview targets ESP32-H4 and ESP32-H21 mark ECDSA Secure Boot V2 as not
supported in their SoC capabilities instead of using the option above. As
ESP32-H4 has no other Secure Boot V2 scheme, Secure Boot is disabled entirely on
it; ESP32-H21 retains RSA based Secure Boot V2.

The security documentation keeps the ECDSA Secure Boot V2 content visible and
adds a warning describing the limitation (including that ECDSA Secure Boot V2 on
ESP32-C61 is not recommended for production). CI apps that exercise ECDSA Secure
Boot V2 on the affected SoCs set CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
accordingly.
2026-06-19 15:24:54 +05:30
Rahul Tank 08d9fe6262 Merge branch 'bugfix/fix_log_performance_v5.2' into 'release/v5.2'
fix(nimble): Guard ble_hs_log_mbuf/flat_buf against non-DEBUG log level (v5.2)

See merge request espressif/esp-idf!49732
2026-06-18 21:39:23 +05:30
harshal.patil 81f43c0ffb fix(esp_common/esp_fault): make ESP_FAULT_ASSERT survive optimization
ESP_FAULT_ASSERT(C) was silently deleted by the optimizer when C is a cached
flag/status already proven by a preceding `if (!C) return/goto`: the compiler
folds C to a constant and drops all three checks, removing the fault-injection
protection with no warning.
2026-06-18 21:13:50 +05:30
Zhang Hai Peng b35182d6f2 feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses
(cherry picked from commit 7986e2faa8)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-06-18 10:24:45 +08:00
Rahul Tank d045ed9bb4 fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level 2026-06-16 16:36:52 +05:30
Konstantin Kondrashov 6ea717e163 fix(efuse): erase virtual blocks before burn in damaged-reading test
Some chip may have BLOCK3 in use so we need to erase it before test.
2026-06-16 12:49:43 +03:00
harshal.patil c19a35990f fix(secure_boot): range-check ECDSA r,s in bootloader before ROM verify 2026-06-16 15:17:49 +05:30
harshal.patil 6d25d74aa6 fix(esp_common): Add esp_fault_internal.h for use by G0 components
In release/v5.x, esp_fault.h resides in the esp_hw_support (G1)
component, so the G0 components (hal, esp_rom) must not depend on it.
Copy its contents to esp_common as esp_fault_internal.h, keep
esp_fault.h as a compatibility wrapper around it, and switch the hal
and esp_rom ECDSA/ECC code to the internal header.
2026-06-16 15:17:49 +05:30
harshal.patil b55865f1a2 ci(mbedtls): Add out-of-bounds test for the ECDSA hardware driver 2026-06-16 15:17:49 +05:30
harshal.patil 13a12d441d fix(esp_rom): Patch ets_ecdsa_verify() to include signature bounds check 2026-06-16 15:17:49 +05:30
harshal.patilandAshish Sharma 046a3bb908 fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down
Co-Authored-By: Ashish Sharma <ashish.sharma@espressif.com>
2026-06-16 15:17:49 +05:30
Mahavir Jain 52611afb24 Merge branch 'fix/mbedtls_build_failure_x509_crt_v5.2' into 'release/v5.2'
fix(mbedtls): fixes build failure with clang21 (v5.2)

See merge request espressif/esp-idf!49418
2026-06-16 14:02:32 +05:30
Wang Meng Yang 8f58679ce4 Merge branch 'bugfix/bbp_isses_v5.2' into 'release/v5.2'
Bugfix/bbp isses v5.2

See merge request espressif/esp-idf!49628
2026-06-15 20:38:45 +08:00
Island 2ec1d4883d Merge branch 'fix/gattc-multi-app-notif-warning_v5.2' into 'release/v5.2'
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if (5.2)

See merge request espressif/esp-idf!49513
2026-06-15 15:08:08 +08:00
Island a3684e583c Merge branch 'bugfix/fix_bluedroid_ai_review_bugs_20260427_v5.2' into 'release/v5.2'
Bugfix/fix bluedroid ai review bugs 20260427 (5.2)

See merge request espressif/esp-idf!49537
2026-06-15 11:04:08 +08:00
Jin Cheng de369a5cfc fix(bt/bluedroid): added buffer length check for HID Device data indication 2026-06-12 18:47:38 +08:00
Jin Cheng f2b3536279 fix(bt/bluedroid): added validation for all SMP BR opcode lengths in smp_br_data_received 2026-06-12 18:47:38 +08:00
Jin Cheng 929c3e42ec fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode 2026-06-12 18:47:38 +08:00
Jin Cheng a4e6fa2f42 fix(bt/bluedroid): added buffer length check for HID host data indication 2026-06-12 18:47:38 +08:00
Jin Cheng c2610255a5 fix(bt/bluedroid): added buffer length check for L2CAP related functions 2026-06-12 18:47:38 +08:00
Rahul Tank 3121f8951a fix(nimble): Deinit NimBLE stop event in host task 2026-06-11 20:06:32 +05:30
Rahul Tank b34815c397 Merge branch 'fix/add_remaining_vars_to_heap_v5.2' into 'release/v5.2'
fix(nimble): Change remaining vars from Static to Dynamic (v5.2)

See merge request espressif/esp-idf!49283
2026-06-11 17:37:13 +05:30
Sarvesh Bodakhe f3081828b4 fix(wifi): backport scan and NAN timer fixes to v5.2
- Fix SAE mixed mode classification for AP with FT-PSK AKM
- Use RSN IE key_mgmt instead of merged bitfied for WPA+RSN SAE check
- Enforce MFPR, RSN-only proto and no-TKIP for WPA3-192-bit Enterprise
- Stop NAN timers from re-arming after nan_stop
2026-06-11 15:19:28 +05:30
Zhi Wei Jian f5984ba6ea fix(bt): fix BTC task and BLE mesh bluedroid adapter
(cherry picked from commit 678fb93245)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:38 +08:00
Zhi Wei Jian 975e6e8e4c fix(ble/bluedroid): fix HCI command and BTU robustness
(cherry picked from commit c9d13aaf64)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:37 +08:00
Zhi Wei Jian 91042dc0a3 fix(ble/bluedroid): fix CTE and ISO API validation
(cherry picked from commit 0c3c894b7d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:37 +08:00
Zhi Wei Jian f6da83a024 fix(ble/bluedroid): fix GATT server lifecycle and callbacks
(cherry picked from commit 54a1e31916)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:36 +08:00
Zhi Wei Jian b9eaab2dce fix(ble/bluedroid): fix GATT client API parameter validation
(cherry picked from commit 653477c3e9)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:36 +08:00
Zhi Wei Jian 99a9a87fa3 fix(ble/bluedroid): fix GATT client cache and service discovery
(cherry picked from commit b3ff15ed31)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:35 +08:00
Zhi Wei Jian b73af73f4d fix(ble/bluedroid): fix GAP BLE API parameter validation
(cherry picked from commit e3311c81c4)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:35 +08:00
Zhi Wei Jian 40a01827cd fix(ble/bluedroid): fix BLE bonding key storage validation
(cherry picked from commit 62cdd4ac38)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:34 +08:00
Zhang Hai Peng c90d9506a2 fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if
GATT stack broadcasts notifications to every client app, so unregistered
gatt_if instances were flooding logs even when another app had registered
the handle. Only warn when no client app registered for the handle.


(cherry picked from commit c18c8dc5e7)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-06-10 15:24:31 +08:00
Rahul Tank 3c1326b00d Merge branch 'bugfix/ai_fixes_common_components_v5.2' into 'release/v5.2'
fix(nimble): Review fixes common components( v5.2)

See merge request espressif/esp-idf!49432
2026-06-10 12:18:01 +05:30
morris 644f790c5c Merge branch 'fix/spi_buslock_multi_dev_acq_release_issue_v5.2' into 'release/v5.2'
fix(esp_hw_support): fixed spi buslock multi dev acq/release logic issue (v5.2)

See merge request espressif/esp-idf!49178
2026-06-10 10:10:45 +08:00
Rahul Tank e54499f554 fix(nimble): Address review fixes for tinycrypt / and blufi code 2026-06-09 15:19:02 +05:30
Ashish Sharma 8ad759efb7 fix(mbedtls): fixes build failure with clang21
Closes https://github.com/espressif/esp-idf/issues/18456
2026-06-09 14:04:39 +08:00
Mahavir Jain 52595a136f Merge branch 'fix/tls-session-verify-and-hostname-warn_v5.2' into 'release/v5.2'
fix(esp-tls): fix TLS session resumption bypassing CA verification and clarify skip_common_name behavior (v5.2)

See merge request espressif/esp-idf!48933
2026-06-09 10:38:08 +05:30
Sumeet Singh 27af425ea9 fix(nimble): Change remaining vars from Static to Dynamic (v5.2) 2026-06-09 00:58:54 +05:30
Mahavir Jain 62e1e37d9c Merge branch 'contrib/github_pr_18641_v5.2' into 'release/v5.2'
fix(protocomm): prevent out-of-bounds write in console line buffer (GitHub PR) (v5.2)

See merge request espressif/esp-idf!49347
2026-06-08 19:53:30 +05:30
Jiang Jiang Jian 96761d509e Merge branch 'bugfix/acl_conn_state_error_v5.2' into 'release/v5.2'
fix: Fix missing handling for HCI_ERR_CONNECTION_EXISTS (v5.2)

See merge request espressif/esp-idf!49317
2026-06-08 11:33:34 +08:00
Rahul Tank c84d53d757 Merge branch 'bugfix/fix_clang_compilation_issue_v5.2' into 'release/v5.2'
fix(nimble): Fix for clang compilation issues (v5.2)

See merge request espressif/esp-idf!49310
2026-06-06 09:31:09 +05:30