Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity
45,635 Commits 25 Branches 192 Tags
773ddfcba192f61ccecc97a6933743d093be9561
Commit Graph

45635 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
yi chen
773ddfcba1 fix(esp_partition): prevent size_t overflow bypassing bounds checks on linux target 
esp_partition_write/read/erase_range/mmap in partition_linux.c (the
`linux` target backend used by --preview set-target linux / host_test)
validated the requested range with `offset + size > partition->size`.
When `size` is close to SIZE_MAX, this addition wraps around size_t and
can evaluate to a small value, so the check passes even though the
request is far out of bounds. A caller passing e.g.
esp_partition_write(partition, 1, src, SIZE_MAX) sails through both
bounds checks and reaches the byte-copy loop with new_size == SIZE_MAX,
causing out-of-bounds reads/writes far past both the caller's buffer
and the mmap'd emulated-flash file.

Replace all four instances with the overflow-safe form already used by
the other esp_partition backends (partition_target.c,
partition_bootloader.c, partition_tee.c):
`size > partition->size - offset`, which is safe because the preceding
check already guarantees offset <= partition->size.

Signed-off-by: yi chen <94xhn1@gmail.com>
 2026-07-17 12:49:16 +02:00
Rahul Tank
fbd0210bf1 Merge branch 'bugfix/add_extra_prints_v5.4' into 'release/v5.4' 
fix(nimble): Remove SOC_ESP_NIMBLE_CONTROLLER from unnecessary locations (v5.4)

See merge request espressif/esp-idf!50097
 2026-07-17 10:42:35 +05:30
Rahul Tank
82ae7e7f76 fix(nimble): Fix ECC HW byte-order and dropped SOC_ESP_NIMBLE_CONTROLLER 2026-07-16 16:39:52 +05:30
Euripedes Rocha
8b7f8045a6 Merge branch 'fix/lwip_sec_high_v5.4' into 'release/v5.4' 
fix(lwip): high severity lwip fixes (v5.4)

See merge request espressif/esp-idf!50595
 2026-07-15 15:31:35 +02:00
Martin Vychodil
dd7e09705a Merge branch 'fix/cleanup_after_failed_nvs_set_blob_v5.4' into 'release/v5.4' 
Fixed cleanup after nvs_set_blob failed on ESP_ERR_NVS_NOT_ENOUGH_SPACE (v5.4)

See merge request espressif/esp-idf!50745
 2026-07-15 18:39:36 +08:00
Marius Vikhammer
e1634cde52 Merge branch 'fix/esp32p4_panic_gdbstub_v5.4' into 'release/v5.4' 
fix(gdbstub): remove unsupported options in qSupported packet (v5.4)

See merge request espressif/esp-idf!50209
 2026-07-15 17:49:49 +08:00
Island
a1f767668c Merge branch 'bugfix/fix_bluedroid_read_multi_v5.4' into 'release/v5.4' 
fix(ble/bluedroid): fix GATT Read Multiple response handling (5.4)

See merge request espressif/esp-idf!50707
 2026-07-15 15:38:55 +08:00
Island
025b2f0984 Merge branch 'feat/support_bluedroid_le_coc_and_eatt_v5.4' into 'release/v5.4' 
feat(ble/bluedroid): Support bluedroid LE COC and EATT features (5.4)

See merge request espressif/esp-idf!50713
 2026-07-15 14:02:53 +08:00
morris
8f81763614 Merge branch 'bugfix/uart_sw_flow_ctrl_xoff_char_v5.4' into 'release/v5.4' 
fix(uart): fix uart sw flow ctrl XOFF char write to wrong reg on ESP32C6 (v5.4)

See merge request espressif/esp-idf!50526
 2026-07-15 12:21:08 +08:00
morris
5e55d7ad54 Merge branch 'bugfix/dma2d_dequeue_mechanism_v5.4' into 'release/v5.4' 
fix(dma2d): add a dequeue mechanism for dma2d driver (v5.4)

See merge request espressif/esp-idf!50516
 2026-07-15 12:01:58 +08:00
morris
d0ffa270cf Merge branch 'fix/fix_i2c_olde_example_hang_v5.4' into 'release/v5.4' 
fix(i2c_oled): fix example hang when i2c transaction fails (v5.4)

See merge request espressif/esp-idf!50383
 2026-07-15 11:53:16 +08:00
morris
2b8f6d4c84 Merge branch 'docs/i2s_ws_setting_v5.4' into 'release/v5.4' 
docs(i2s): clarify WS width setting for standard mode (v5.4)

See merge request espressif/esp-idf!50668
 2026-07-15 11:52:41 +08:00
radek.tandler
53d31fbd74 fix(nvs_flash): fixed cleanup after nvs_set_blob failed on ESP_ERR_NVS_NOT_ENOUGH_SPACE 
- fixed identification of blob parts to be cleaned by using right starting chunk index
  - improved localisation of blobs for cases where some of pages get reclaimed
  - created host test cases covering the edge cases above
 2026-07-14 17:34:11 +02:00
David Cermak
882843dbf8 fix(lwip): tcp/ooseq: do not accept empty fin seg (+ other fixes) 
* Update submodule: git log --oneline fd432e4e..c6f2f878
  - test(lwip): add DHCP MTU validation unit test (espressif/esp-lwip@c6f2f878e)
  - ppp: fix potential oob read in VJ decompression (espressif/esp-lwip@2ff439e61)
  - ip6-frag: Fix incorrect memcpy size to the actual struct (espressif/esp-lwip@91ad363ba)
  - tcp/ooseq: do not accept empty fin seg (espressif/esp-lwip@fe4fb18c1)
  - Address review comments (espressif/esp-lwip@9d2d80412)
  - nd6: add static neighbor cache entry support (espressif/esp-lwip@a05a5cf3b)
  - dns: add addr_cnt to DNS resolution to fix multi-IP buffer overflow (espressif/esp-lwip@6233a1561)
  - ci: Add jira sync github workflows (espressif/esp-lwip@a4e2409d0)
  - feat(lwip): migrate to to PSA API interface (espressif/esp-lwip@20f8b0739)
  - test: Fix multiple defs of util vars (espressif/esp-lwip@e9b8482e7)
  - ci: Add support for building tests/apps with both gcc and clang (espressif/esp-lwip@2a14051bf)
  - try to fix unit test compiling with clang (espressif/esp-lwip@6933a63cb)
  - apps/snmp: Remove @retval tags on void methods (espressif/esp-lwip@b6209dcf8)
  - snmp: Mention struct field removal in UPGRADING (espressif/esp-lwip@6659cf1f2)
  - snmp: remove unused prev field from snmp_varbind (espressif/esp-lwip@f32188001)
  - snmp: remove handling of varbind->prev because it is never used (espressif/esp-lwip@46660d5cf)
  - snmp: fix dangling pointer in snmp_traps (espressif/esp-lwip@0e3e97f8d)
 2026-07-14 09:25:40 +02:00
Zhi Wei Jian
85c1aee8fb feat(ble/bluedroid): Add bluedroid dual identify server example 
(cherry picked from commit 1de0d2fef7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 14:57:33 +08:00
Zhi Wei Jian
0532d07a86 feat(ble/bluedroid): Support bluedroid dual identity 
(cherry picked from commit 2358786647)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 14:22:39 +08:00
Rahul Tank
3f99c8cbf2 Merge branch 'bugfix/fix_bond_store_overflow_v5.4' into 'release/v5.4' 
fix(nimble): Fix bond-store overflow when IRK is enabled (v5.4)

See merge request espressif/esp-idf!50626
 2026-07-14 11:17:57 +05:30
Zhi Wei Jian
7a80e9b127 fix(ble/bluedroid): use BOOLEAN for BLE HCI command builders 
(cherry picked from commit abbf001120)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:10 +08:00
Zhi Wei Jian
00960a5dac fix(ble/bluedroid): clean up LE CoC connect on CCB alloc failure 
(cherry picked from commit 4fd1ebb4a9)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:09 +08:00
Zhi Wei Jian
3deee8d3e2 docs(ble/bluedroid): note ISO BIG HCI alloc failure not checked 
(cherry picked from commit 34b59d30ae)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:08 +08:00
Zhi Wei Jian
e2735b1bb5 fix(ble/bluedroid): fix direct-connect cleanup and adv bounds 
(cherry picked from commit 82e71c1767)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:08 +08:00
Zhi Wei Jian
1330f558e1 fix(ble/bluedroid): validate BLE confirm/OOB and sec-check device 
(cherry picked from commit 93ab11d564)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:07 +08:00
Zhi Wei Jian
fab68dc82f fix(ble/bluedroid): validate SMP pair-fail reason and OOB device 
(cherry picked from commit 98efe02385)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:07 +08:00
Zhi Wei Jian
d2f755b735 fix(ble/bluedroid): route ATT indication-conf timeout separately 
(cherry picked from commit 6c3267ee84)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:07 +08:00
Zhi Wei Jian
12b6beff43 fix(ble/bluedroid): validate ATT PDU sizes 
(cherry picked from commit bb00b9817d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:06 +08:00
Zhi Wei Jian
7637a46169 fix(ble/bluedroid): re-lookup GATT TCB after enc-complete callback 
(cherry picked from commit 37562af0ea)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:06 +08:00
Zhi Wei Jian
b7fde3a96c fix(ble/bluedroid): fix GATT long read and Service Changed CCC 
(cherry picked from commit 4ce692ac0c)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:05 +08:00
Zhi Wei Jian
0b515686dd fix(ble/bluedroid): validate GATT client discovery handles 
(cherry picked from commit ac35ae6f2d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:05 +08:00
Zhi Wei Jian
b0e64dbbd5 fix(ble/bluedroid): cap Read By Type length and free failed service decl 
(cherry picked from commit 27ff0cf8c7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:05 +08:00
Zhi Wei Jian
af043ccffa fix(ble/bluedroid): guard GATT database hash and serialization 
(cherry picked from commit 995c1508e8)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:04 +08:00
Zhi Wei Jian
c48e5a30e9 fix(ble/bluedroid): fix GATT server busy errors and sr_cmd handling 
(cherry picked from commit f86739b03d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:04 +08:00
Zhi Wei Jian
e7f6bf115e fix(ble/bluedroid): fix GATT teardown and service-change flow 
(cherry picked from commit 0645ba469d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:04 +08:00
Zhi Wei Jian
a9c2816caf fix(ble/bluedroid): fix GATT service lifecycle leaks 
(cherry picked from commit ac93d94958)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:04:03 +08:00
Zhi Wei Jian
de2578d083 fix(ble/bluedroid): add GATT resource-cleanup helpers 
(cherry picked from commit b83327f3ca)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 12:03:58 +08:00
Zhang Hai Peng
a90c400f43 docs(ble/bluedroid): fix markdown formatting in example docs 
(cherry picked from commit dba450de6b)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2026-07-14 12:03:36 +08:00
Zhi Wei Jian
95bd892dba feat(ble/bluedroid): Support bluedroid LE COC and EATT features 
(cherry picked from commit 83f0831c53)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2026-07-14 11:56:02 +08:00
Zhang Hai Peng
f84d0bb8eb fix(ble/bluedroid): downgrade numeric comparison log to warning 
(cherry picked from commit 72a49ed53b)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2026-07-14 10:37:09 +08:00
Zhang Hai Peng
a817312106 fix(ble/bluedroid): preserve ext adv state when set params fails 
Only update extend_adv_cb after HCI Set Extended Advertising
Parameters succeeds, so a failed update does not corrupt cached
legacy_pdu and related fields used by adv data validation.


(cherry picked from commit 31bd80fee8)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2026-07-14 10:37:08 +08:00
Zhang Hai Peng
8b7b4e73f5 fix(ble/bluedroid): reject invalid ATT error code 0x00 on client 
Map received error reason 0x00 to GATT_UNKNOWN_ERROR so the client
does not report GATT_SUCCESS with zero-length data on malformed errors.


(cherry picked from commit 1b6f9380f4)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2026-07-14 10:36:13 +08:00
Zhang Hai Peng
bb2610b445 fix(ble/bluedroid): use sr_cmd status for GATT server error rsp 
When sending an ATT error response after a failed server operation,
use p_tcb->sr_cmd.status instead of the last app callback status so
invalid error code 0x00 is not sent to the peer.


(cherry picked from commit 4c0488d92a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2026-07-14 10:36:12 +08:00
Zhang Hai Peng
b56947d28e fix(ble/bluedroid): match read-multiple-var responses by handle 
(cherry picked from commit 979c7dc567)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2026-07-14 10:36:11 +08:00
Zhang Hai Peng
21159c5826 fix(ble/bluedroid): match read-multiple responses by handle 
Read Multiple may mix stack auto-responses with app async responses,
so multi_rsp_q order can differ from the request handle order. Look up
each response by handle (with occurrence for duplicates) instead of
walking the queue by index, and treat opcode-only buffers as empty.


(cherry picked from commit f91a41510c)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2026-07-14 10:36:10 +08:00
Island
58361a6b08 Merge branch 'ble-log-console-migration-notice_v5.4' into 'release/v5.4' 
Ble log console repository migration (5.4)

See merge request espressif/esp-idf!50605
 2026-07-14 10:20:34 +08:00
Island
785419057e Merge branch 'fix/ble_mesh_fixed_issues_v5.4' into 'release/v5.4' 
Resolve reported BLE mesh stack issues (5.4)

See merge request espressif/esp-idf!50405
 2026-07-14 10:16:47 +08:00
Euripedes Rocha
34f1b78b42 Merge branch 'fix/sec-347-hostname-null-check_v5.4' into 'release/v5.4' 
fix(esp_netif): reject NULL hostname in esp_netif_set_hostname_api (SEC_347) (v5.4)

See merge request espressif/esp-idf!50592
 2026-07-13 15:43:56 +02:00
Chen Chen
02cb5729de docs(i2s): add note for ws setting under DEFAULT config 
Closes https://github.com/espressif/esp-idf/issues/18744
 2026-07-13 15:23:36 +08:00
Chen Jichang
9325e3d267 fix(i2c_oled): fix example hang when i2c transaction fails 
Closes https://github.com/espressif/esp-idf/issues/18713
 2026-07-10 17:56:05 +08:00
Rahul Tank
0f6119a107 fix(nimble): Fix bond-store overflow when IRK is enabled 2026-07-10 13:29:18 +05:30
guozifan
b8bd171c9e remove(ble): migrate BLE Log Console out of ESP-IDF 2026-07-10 15:42:20 +08:00
Jiang Jiang Jian
be916bf9e7 Merge branch 'bugfix/drop_broadcast_frag_frame_v5.4' into 'release/v5.4' 
fix(esp_wifi): Drop broadcast fragmented frames (v5.4)

See merge request espressif/esp-idf!50461
 2026-07-10 12:31:01 +08:00