Commit Graph
29490 Commits
Author SHA1 Message Date
Euripedes Rocha 7a911c980d Merge branch 'fix/w5500_rx_buffer_corruption_recovery_v5.3' into 'release/v5.3'
fix(esp_eth): recover W5500 RX path on corrupted frame length (v5.3)

See merge request espressif/esp-idf!50649
2026-07-14 14:34:00 +02:00
Rahul Tank 43280d9be8 Merge branch 'bugfix/fix_bond_store_overflow_v5.3' into 'release/v5.3'
fix(nimble): Fix bond-store overflow when IRK is enabled (v5.3)

See merge request espressif/esp-idf!50627
2026-07-14 11:17:48 +05:30
Island 9c65614fa5 Merge branch 'fix/ble_mesh_fixed_issues_v5.3' into 'release/v5.3'
Resolve reported BLE mesh stack issues (5.3)

See merge request espressif/esp-idf!50404
2026-07-14 10:16:53 +08:00
Guilherme Ferreira 724897ecc2 fix(esp_eth): recover W5500 RX path on corrupted frame length
Reject an implausible SPI-read frame-length header and drain the
socket RX buffer to resync Sn_RX_RD, instead of looping forever on
the unrecoverable descriptor and starving the system.
2026-07-10 23:06:13 +00:00
Euripedes Rocha b6234bb6fc Merge branch 'fix/sec-347-hostname-null-check_v5.3' into 'release/v5.3'
fix(esp_netif): reject NULL hostname in esp_netif_set_hostname_api (SEC_347) (v5.3)

See merge request espressif/esp-idf!50593
2026-07-10 14:14:51 +02:00
Rahul Tank dd42e3ced3 fix(nimble): Fix bond-store overflow when IRK is enabled 2026-07-10 13:31:39 +05:30
morris e11c30437a Merge branch 'fix/uhci_rx_fsm_v5.3' into 'release/v5.3'
fix(uhci): rx fsm race condition (v5.3)

See merge request espressif/esp-idf!50581
2026-07-10 11:22:38 +08:00
Jiang Jiang Jian f6bad005cf Merge branch 'change/change_regdma_malloc_caps_v5.3' into 'release/v5.3'
change(esp_hw_support): change regdma malloc caps to allow getting memory in the DMA pool (v5.3)

See merge request espressif/esp-idf!50261
2026-07-10 10:28:44 +08:00
Euripedes Rocha Filho 5e65088205 fix(esp_netif): reject NULL hostname in esp_netif_set_hostname_api
esp_netif_set_hostname_api() dereferenced hostname via strlen() without
checking it for NULL first, causing a NULL pointer dereference.
2026-07-09 16:08:17 +02:00
Hu Rui 9bcf04ab89 fix(uhci): rx fsm race condition
Closes https://github.com/espressif/esp-idf/issues/18746
2026-07-09 19:06:08 +08:00
Zhang Wen Xu b6860b2db5 Merge branch 'feat/update_openthread_submodule_and_br_lib_20260624_v5.3' into 'release/v5.3'
feat(openthread): update openthread submodule (v5.3)

See merge request espressif/esp-idf!50521
2026-07-09 10:16:54 +00:00
wuzhenghui 82712313ea change(heap): reserve DMA pool with low priority MALLOC_CAP_DEFAULT caps 2026-07-09 17:37:14 +08:00
Hu Rui 730120e90b fix(dac): dac_continuous set is_cyclic flag in async mode 2026-07-09 11:21:08 +08:00
Xu Si Yu 779a53a262 feat(openthread): update thread-lib for upstream b678a4f6
* esp-openthread: thread_zigbee/esp-openthread@47428f1e8
* openthread: espressif/openthread@b678a4f63
* esp-idf: espressif/esp-idf@3871860a4
2026-07-08 12:54:27 +00:00
Xu Si Yu 3871860a45 feat(openthread): update openthread submodule 2026-07-08 20:40:55 +08:00
Xu Si Yu 79df489b73 fix(openthread): fix TREL peer discovery by selecting IPv6 from mDNS address list 2026-07-08 20:40:55 +08:00
Rahul Tank 0b3400b620 Merge branch 'bugfix/ai_reviewer_nimble_1.6_v5.3' into 'release/v5.3'
fix(nimble): Fixes for AI reported issues (v5.3)

See merge request espressif/esp-idf!50017
2026-07-08 13:59:36 +05:30
Jiang Jiang Jian 3a1db20dce Merge branch 'bugfix/drop_broadcast_frag_frame_v5.3' into 'release/v5.3'
fix(esp_wifi): Drop broadcast fragmented frames (v5.3)

See merge request espressif/esp-idf!50463
2026-07-08 14:11:12 +08:00
Rahul Tank 86297605f9 fix(nimble): Fixes for AI reported issues 2026-07-07 16:34:25 +05:30
Kapil Gupta f538412383 fix(esp_wifi): Drop broadcast fragmented frames 2026-07-07 15:14:33 +05:30
Xu Si Yu 9c5f62906d feat(openthread): add APIs to clear a single src match short and extended entry in esp radio spinel 2026-07-07 17:40:03 +08:00
Marius Vikhammer 7a79a3f242 Merge branch 'fix/vfs_fatfs_test_stale_partition_v5.3' into 'release/v5.3'
test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes (v5.3)

See merge request espressif/esp-idf!50435
2026-07-07 14:43:37 +08:00
Martin VychodilandCursor 6d2d0c7056 test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes
Reformat the test partition before each mount so those tests always start from
a known-empty filesystem.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 16:59:52 +02:00
muhaidong 78d1eb235d fix(wifi): fix some wifi bugs 260706 v5.3
1. support weak func for wifi lmac assert
2. post disconnect event after disassociation tx callback
2026-07-06 19:32:24 +08:00
muhaidong bf225a618c fix(wifi): support weak func for wifi lmac assert 2026-07-06 19:28:49 +08:00
muhaidong 65822e1c82 fix(coex): remove unsupported external coex soc caps 2026-07-06 19:28:27 +08:00
Luo Xu 865c1143b7 fix(ble_mesh): re-check scan dev-found cb before scan-rsp invocation
(cherry picked from commit 9a3a767824)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:51 +08:00
Luo Xu b11bd0c0eb fix(ble_mesh): comment out logs containing sensitive keys
(cherry picked from commit 781d6b2314)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:50 +08:00
Luo Xu 5ef184d780 fix(ble_mesh): validate PB-ADV start segment length
(cherry picked from commit 912ec8dc62)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:50 +08:00
Luo Xu 4721dba6ca fix(ble_mesh): Reset reassembly buffer at start of each transaction
The reassembly buffer must be reset to its origin at the beginning of every
transaction. prov_msg_recv() pulls the PDU type byte (advancing buf->data by
one) and nothing restores it between transactions. Without this reset,
buf->data drifts forward by one byte per received PDU, causing the segment-0
memcpy to write past the end of the statically allocated rx buffer
(PROV_RX_BUF_SIZE), and the XACT_SEG_DATA() offsets used for continuation
segments to be skewed by the accumulated drift.


(cherry picked from commit 2c4acaa2aa)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:49 +08:00
Luo Xu 4255fbaf84 fix(ble_mesh): fix DFD client message parsing and encoding bugs
Fix multiple wire-format and robustness issues in the DFD client
(dfd_cli.c):

- handle_capabilities: read oob_retrieval_supported as u8 instead of
  le32. The server encodes a single byte; le32 over-consumed 3 bytes
  of the URL scheme list and could over-read the buffer.
- handle_upload_status: extract upload_progress from bits 0-6 (& 0x7F)
  and upload_type from bit 7 (>> 7), matching the server encoding
  (progress | BIT(7)). The previous >>1 / &0x01 returned wrong values,
  mis-classified in-band vs OOB, and falsely rejected valid OOB
  messages with high progress.
- handle_dfd_status: correct the transfer-mode byte layout to
  trans_mode bits 0-1, update_policy bit 2, RFU bits 3-7 (previously
  read bits 6-7 / 5), and fix the RFU mask to 0xF8. Now matches the
  struct bitfield definition and the DFD server.
- handle_dfd_status: report status+phase and return early when
  buf->len == 0 (IDLE phase) instead of pulling 10 absent bytes.
- bt_mesh_dfd_cli_distribution_start: encode trans_mode/update_policy
  into bits 0-2 so the server decodes them correctly.
- handle_receiver_list: validate buf->len >= entries_cnt * 5 before
  the loop, and handle entries_cnt == 0 without relying on calloc(0).
- handle_receiver_status: pass the status value (not the whole union)
  to the %d log format, fixing undefined behavior.
- dfd_client_recv_status: drop the dead BLE_MESH_DFD_OP_CAPABILITIES_GET
  case (a client-send opcode) from the receive switch.
- bt_mesh_dfd_cli_receivers_add: widen msg_length to uint32_t to avoid
  uint16_t overflow that bypassed the PDU size guard; add a NULL check
  for the receivers array.
- bt_mesh_dfd_cli_distribution_upload_oob_start: return -EINVAL
  instead of -1 for consistency with the rest of the file.


(cherry picked from commit 43137475e1)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:49 +08:00
Luo Xu d17cc4d0ce fix(ble_mesh): added max dfd srv count limit
(cherry picked from commit 781218cb62)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:43 +08:00
Luo Xu ed236b7b0d fix(ble_mesh): reject invalid chunk size
(cherry picked from commit 35cd10fbdf)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:43 +08:00
Luo Xu 98875dc920 fix(ble_mesh): fixed invalid disconnect handler wrote
(cherry picked from commit 52cfff707f)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:42 +08:00
Luo Xu 9aef1fc224 fix(ble_mesh): fixed BLE-Mesh NimBLE extended-adv reassembly buffer overflow on COMPLETE fragment
(cherry picked from commit 1b22467f63)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:42 +08:00
Luo Xu f9da09de61 fix(ble_mesh): fixed BLE-Mesh GATTS read-callback error
(cherry picked from commit 00adfb3cbc)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:41 +08:00
Jiang Jiang Jian 698b47d8fd Merge branch 'fix/ble_mesh_disable_adv_pkt_discard_log_v5.3' into 'release/v5.3'
fix(ble_mesh): Disable warning logging when advertising packets are discarded (5.3)

See merge request espressif/esp-idf!50164
2026-07-06 15:13:29 +08:00
Island 4292cd472c Merge branch 'fix/ble-log-64-bit-io-setup-support_v5.3' into 'release/v5.3'
fix(ble_log): use BIT64 over BIT to support 64-bit IO setup (5.3)

See merge request espressif/esp-idf!50328
2026-07-06 12:23:17 +08:00
Wang Meng Yang 2f00d765d6 Merge branch 'bugfix/bbp_issues_v5.3' into 'release/v5.3'
Bugfix/bbp issues v5.3

See merge request espressif/esp-idf!50192
2026-07-06 11:56:03 +08:00
Wang Meng Yang 91abdc6674 Merge branch 'bugfix/ai_review_btu_common_v5.3' into 'release/v5.3'
fix: Fix the critical issues of btu and bt_common from AI review report (v5.3)

See merge request espressif/esp-idf!50125
2026-07-06 10:48:27 +08:00
Song Ruo Jing 9516083cb1 feat(ppa): add sleep retention support for DMA2D and PPA 2026-07-03 20:36:32 +08:00
Rahul Tank 69d6deb7e6 Merge branch 'bugfix/queue_att_cmd_v5.3' into 'release/v5.3'
feat(nimble): Defer all ATT commands until connection event is sent to GAP layer (v5.3)

See merge request espressif/esp-idf!48180
2026-07-03 16:07:05 +05:30
Jiang Jiang Jian 0716e14bc6 Merge branch 'backport/backport_some_wifi_changes_260701_v5.3' into 'release/v5.3'
backport/backport_some_wifi_changes_260701_v5.3(backport v5.3)

See merge request espressif/esp-idf!50250
2026-07-03 14:08:52 +08:00
Rahul Tank 9b92b5a02b fix(nimble): Defer Events / ATT related information from stack
Defer Events/ ATT related GAP events from stack until connection
 event is sent to GAP layer
2026-07-03 11:21:08 +05:30
Zhou Xiao c9de85f36a fix(ble_log): use BIT64 over BIT to support 64-bit IO setup
(cherry picked from commit a2876d304e)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2026-07-03 12:04:53 +08:00
morris 4e044c7c5c Merge branch 'fix/jpeg_over_size_v5.3' into 'release/v5.3'
fix(jpeg): Fix the jpeg size might exceed the buffer size (backport v5.3)

See merge request espressif/esp-idf!50031
2026-07-03 11:12:39 +08:00
yinqingzhao c6663ccecd fix(wifi): comment out functions from ld files 2026-07-01 19:35:40 +08:00
yinqingzhao 6fde86c528 fix(wifi): optimizations of csa procedure and keep alive mechanism 2026-07-01 17:21:37 +08:00
yinqingzhao ac7d6034a0 fix(wifi): fix scheduling issue when tasks have the same priority as the Wi-Fi task 2026-07-01 12:28:35 +08:00
yinqingzhao d690d0b2d3 fix(phy): fix still put multiple phy init date bin into flash when CONFIG_ESP_PHY_MULTIPLE_INIT_DATA_BIN_EMBED is enabled 2026-07-01 12:27:11 +08:00