Jiang Jiang Jian
63bfea2eb1
Merge branch 'fix/use_unilock_for_sleep_process_v5.2' into 'release/v5.2'
...
fix(esp_hw_support): use same lock for lightsleep/deepsleep process (v5.2)
See merge request espressif/esp-idf!49844
2026-06-23 10:57:11 +08:00
Mahavir Jain
b50a0fd029
Merge branch 'fix/disable_secure_boot_v2_ecdsa_v5.2' into 'release/v5.2'
...
Fix/disable secure boot v2 ecdsa (v5.2)
See merge request espressif/esp-idf!49475
2026-06-22 21:26:33 +05:30
Island
b376d3c11d
Merge branch 'fix/ble_mesh_bug_report_v2_v5.2' into 'release/v5.2'
...
fix(ble_mesh): Miscellaneous bugfixes according to our internal bug report (v2)
See merge request espressif/esp-idf!49320
2026-06-22 22:29:40 +08:00
Rahul Tank
d5848c3a43
Merge branch 'feat/throughput_l2cap_coc_v5.2' into 'release/v5.2'
...
Added l2cap_coc example for throughput (v5.2)
See merge request espressif/esp-idf!49743
2026-06-22 19:47:01 +05:30
Mahavir Jain
d945534a1a
Merge branch 'fix/ecdsa_ecc_hw_input_validation_v5.2' into 'release/v5.2'
...
Validate ECDSA signature range and harden ECC memory power-down (v5.2)
See merge request espressif/esp-idf!49446
2026-06-22 18:24:33 +05:30
Jiang Jiang Jian
7b6a7d0659
Merge branch 'fix/scan_authmode_fixes_v5.2_part2' into 'release/v5.2'
...
fix(wifi): backport scan and NAN timer fixes (Backport v5.2: Part 2)
See merge request espressif/esp-idf!49585
2026-06-22 19:32:44 +08:00
Astha Verma
e08b2eefa6
fix(nimble): Added l2cap_coc throughput examples
2026-06-22 11:49:55 +05:30
wuzhenghui
119f25b8e6
fix(esp_hw_support): use same lock for lightsleep/deepsleep process
2026-06-22 11:51:21 +08:00
Island
75a5c91e7a
Merge branch 'feat/ble-smp-multi-adv-static-random-address_v5.2' into 'release/v5.2'
...
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses (5.2)
See merge request espressif/esp-idf!49785
2026-06-22 10:35:20 +08:00
Aditya Patwardhan
7022ce26c1
change(secure_boot): mark ECDSA based Secure Boot V2 as insecure on affected SoCs
...
ECDSA based Secure Boot V2 is not functional for certain input vectors on
ESP32-C5/C61/H2/P4 and on the preview targets ESP32-H4/H21. RSA based Secure
Boot V2 is the recommended scheme where the SoC supports it. This issue will be
fixed in a future hardware ECO revision; more details will be shared through the
hardware errata document.
A new hidden Kconfig option SECURE_BOOT_V2_ECDSA_INSECURE marks the affected
mass-production SoCs (ESP32-C5/C61/H2/P4). On these SoCs, when hardware Secure
Boot V2 is enabled, the ECDSA (V2) signing scheme is no longer offered by
default; it must be turned on explicitly via SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
under "Allow potentially insecure options" (CONFIG_SECURE_BOOT_INSECURE). App
signing without hardware Secure Boot is not affected. Note that ESP32-C61 has no
RSA based Secure Boot V2, so it has no Secure Boot scheme enabled by default.
The preview targets ESP32-H4 and ESP32-H21 mark ECDSA Secure Boot V2 as not
supported in their SoC capabilities instead of using the option above. As
ESP32-H4 has no other Secure Boot V2 scheme, Secure Boot is disabled entirely on
it; ESP32-H21 retains RSA based Secure Boot V2.
The security documentation keeps the ECDSA Secure Boot V2 content visible and
adds a warning describing the limitation (including that ECDSA Secure Boot V2 on
ESP32-C61 is not recommended for production). CI apps that exercise ECDSA Secure
Boot V2 on the affected SoCs set CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
accordingly.
2026-06-19 15:24:54 +05:30
Rahul Tank
08d9fe6262
Merge branch 'bugfix/fix_log_performance_v5.2' into 'release/v5.2'
...
fix(nimble): Guard ble_hs_log_mbuf/flat_buf against non-DEBUG log level (v5.2)
See merge request espressif/esp-idf!49732
2026-06-18 21:39:23 +05:30
harshal.patil
81f43c0ffb
fix(esp_common/esp_fault): make ESP_FAULT_ASSERT survive optimization
...
ESP_FAULT_ASSERT(C) was silently deleted by the optimizer when C is a cached
flag/status already proven by a preceding `if (!C) return/goto`: the compiler
folds C to a constant and drops all three checks, removing the fault-injection
protection with no warning.
2026-06-18 21:13:50 +05:30
Zhang Hai Peng
b35182d6f2
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses
...
(cherry picked from commit 7986e2faa8 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-06-18 10:24:45 +08:00
Rahul Tank
d045ed9bb4
fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level
2026-06-16 16:36:52 +05:30
Konstantin Kondrashov
6ea717e163
fix(efuse): erase virtual blocks before burn in damaged-reading test
...
Some chip may have BLOCK3 in use so we need to erase it before test.
2026-06-16 12:49:43 +03:00
harshal.patil
c19a35990f
fix(secure_boot): range-check ECDSA r,s in bootloader before ROM verify
2026-06-16 15:17:49 +05:30
harshal.patil
6d25d74aa6
fix(esp_common): Add esp_fault_internal.h for use by G0 components
...
In release/v5.x, esp_fault.h resides in the esp_hw_support (G1)
component, so the G0 components (hal, esp_rom) must not depend on it.
Copy its contents to esp_common as esp_fault_internal.h, keep
esp_fault.h as a compatibility wrapper around it, and switch the hal
and esp_rom ECDSA/ECC code to the internal header.
2026-06-16 15:17:49 +05:30
harshal.patil
b55865f1a2
ci(mbedtls): Add out-of-bounds test for the ECDSA hardware driver
2026-06-16 15:17:49 +05:30
harshal.patil
13a12d441d
fix(esp_rom): Patch ets_ecdsa_verify() to include signature bounds check
2026-06-16 15:17:49 +05:30
harshal.patil and Ashish Sharma
046a3bb908
fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down
...
Co-Authored-By: Ashish Sharma <ashish.sharma@espressif.com >
2026-06-16 15:17:49 +05:30
Mahavir Jain
52611afb24
Merge branch 'fix/mbedtls_build_failure_x509_crt_v5.2' into 'release/v5.2'
...
fix(mbedtls): fixes build failure with clang21 (v5.2)
See merge request espressif/esp-idf!49418
2026-06-16 14:02:32 +05:30
Wang Meng Yang
8f58679ce4
Merge branch 'bugfix/bbp_isses_v5.2' into 'release/v5.2'
...
Bugfix/bbp isses v5.2
See merge request espressif/esp-idf!49628
2026-06-15 20:38:45 +08:00
Island
2ec1d4883d
Merge branch 'fix/gattc-multi-app-notif-warning_v5.2' into 'release/v5.2'
...
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if (5.2)
See merge request espressif/esp-idf!49513
2026-06-15 15:08:08 +08:00
Island
a3684e583c
Merge branch 'bugfix/fix_bluedroid_ai_review_bugs_20260427_v5.2' into 'release/v5.2'
...
Bugfix/fix bluedroid ai review bugs 20260427 (5.2)
See merge request espressif/esp-idf!49537
2026-06-15 11:04:08 +08:00
Jin Cheng
de369a5cfc
fix(bt/bluedroid): added buffer length check for HID Device data indication
2026-06-12 18:47:38 +08:00
Jin Cheng
f2b3536279
fix(bt/bluedroid): added validation for all SMP BR opcode lengths in smp_br_data_received
2026-06-12 18:47:38 +08:00
Jin Cheng
929c3e42ec
fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode
2026-06-12 18:47:38 +08:00
Jin Cheng
a4e6fa2f42
fix(bt/bluedroid): added buffer length check for HID host data indication
2026-06-12 18:47:38 +08:00
Jin Cheng
c2610255a5
fix(bt/bluedroid): added buffer length check for L2CAP related functions
2026-06-12 18:47:38 +08:00
Rahul Tank
3121f8951a
fix(nimble): Deinit NimBLE stop event in host task
2026-06-11 20:06:32 +05:30
Rahul Tank
b34815c397
Merge branch 'fix/add_remaining_vars_to_heap_v5.2' into 'release/v5.2'
...
fix(nimble): Change remaining vars from Static to Dynamic (v5.2)
See merge request espressif/esp-idf!49283
2026-06-11 17:37:13 +05:30
Sarvesh Bodakhe
f3081828b4
fix(wifi): backport scan and NAN timer fixes to v5.2
...
- Fix SAE mixed mode classification for AP with FT-PSK AKM
- Use RSN IE key_mgmt instead of merged bitfied for WPA+RSN SAE check
- Enforce MFPR, RSN-only proto and no-TKIP for WPA3-192-bit Enterprise
- Stop NAN timers from re-arming after nan_stop
2026-06-11 15:19:28 +05:30
Zhi Wei Jian
f5984ba6ea
fix(bt): fix BTC task and BLE mesh bluedroid adapter
...
(cherry picked from commit 678fb93245 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:38 +08:00
Zhi Wei Jian
975e6e8e4c
fix(ble/bluedroid): fix HCI command and BTU robustness
...
(cherry picked from commit c9d13aaf64 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:37 +08:00
Zhi Wei Jian
91042dc0a3
fix(ble/bluedroid): fix CTE and ISO API validation
...
(cherry picked from commit 0c3c894b7d )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:37 +08:00
Zhi Wei Jian
f6da83a024
fix(ble/bluedroid): fix GATT server lifecycle and callbacks
...
(cherry picked from commit 54a1e31916 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:36 +08:00
Zhi Wei Jian
b9eaab2dce
fix(ble/bluedroid): fix GATT client API parameter validation
...
(cherry picked from commit 653477c3e9 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:36 +08:00
Zhi Wei Jian
99a9a87fa3
fix(ble/bluedroid): fix GATT client cache and service discovery
...
(cherry picked from commit b3ff15ed31 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:35 +08:00
Zhi Wei Jian
b73af73f4d
fix(ble/bluedroid): fix GAP BLE API parameter validation
...
(cherry picked from commit e3311c81c4 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:35 +08:00
Zhi Wei Jian
40a01827cd
fix(ble/bluedroid): fix BLE bonding key storage validation
...
(cherry picked from commit 62cdd4ac38 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:34 +08:00
Zhang Hai Peng
c90d9506a2
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if
...
GATT stack broadcasts notifications to every client app, so unregistered
gatt_if instances were flooding logs even when another app had registered
the handle. Only warn when no client app registered for the handle.
(cherry picked from commit c18c8dc5e7 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-06-10 15:24:31 +08:00
Rahul Tank
3c1326b00d
Merge branch 'bugfix/ai_fixes_common_components_v5.2' into 'release/v5.2'
...
fix(nimble): Review fixes common components( v5.2)
See merge request espressif/esp-idf!49432
2026-06-10 12:18:01 +05:30
morris
644f790c5c
Merge branch 'fix/spi_buslock_multi_dev_acq_release_issue_v5.2' into 'release/v5.2'
...
fix(esp_hw_support): fixed spi buslock multi dev acq/release logic issue (v5.2)
See merge request espressif/esp-idf!49178
2026-06-10 10:10:45 +08:00
Rahul Tank
e54499f554
fix(nimble): Address review fixes for tinycrypt / and blufi code
2026-06-09 15:19:02 +05:30
Ashish Sharma
8ad759efb7
fix(mbedtls): fixes build failure with clang21
...
Closes https://github.com/espressif/esp-idf/issues/18456
2026-06-09 14:04:39 +08:00
Mahavir Jain
52595a136f
Merge branch 'fix/tls-session-verify-and-hostname-warn_v5.2' into 'release/v5.2'
...
fix(esp-tls): fix TLS session resumption bypassing CA verification and clarify skip_common_name behavior (v5.2)
See merge request espressif/esp-idf!48933
2026-06-09 10:38:08 +05:30
Sumeet Singh
27af425ea9
fix(nimble): Change remaining vars from Static to Dynamic (v5.2)
2026-06-09 00:58:54 +05:30
Mahavir Jain
62e1e37d9c
Merge branch 'contrib/github_pr_18641_v5.2' into 'release/v5.2'
...
fix(protocomm): prevent out-of-bounds write in console line buffer (GitHub PR) (v5.2)
See merge request espressif/esp-idf!49347
2026-06-08 19:53:30 +05:30
Jiang Jiang Jian
96761d509e
Merge branch 'bugfix/acl_conn_state_error_v5.2' into 'release/v5.2'
...
fix: Fix missing handling for HCI_ERR_CONNECTION_EXISTS (v5.2)
See merge request espressif/esp-idf!49317
2026-06-08 11:33:34 +08:00
Rahul Tank
c84d53d757
Merge branch 'bugfix/fix_clang_compilation_issue_v5.2' into 'release/v5.2'
...
fix(nimble): Fix for clang compilation issues (v5.2)
See merge request espressif/esp-idf!49310
2026-06-06 09:31:09 +05:30