Jiang Jiang Jian
52198d19a2
Merge branch 'docs/ulp_fsm_instruction_v6.0' into 'release/v6.0'
...
docs(ulp): clarify ULP FSM instruction cycle timing (v6.0)
See merge request espressif/esp-idf!50367
2026-07-09 12:34:46 +08:00
Jiang Jiang Jian
fdb33a4ce7
Merge branch 'fix/lp_periph_init_fail_with_cpp_v6.0' into 'release/v6.0'
...
fix(ulp): make LP peripheral default config macros C++ compatible (v6.0)
See merge request espressif/esp-idf!50211
2026-07-09 12:34:03 +08:00
Jiang Jiang Jian
20792c5ada
Merge branch 'feat/seperate_ot_citest_tags_v6.0' into 'release/v6.0'
...
ci: seperate openthread test cases (v6.0)
See merge request espressif/esp-idf!50170
2026-07-09 12:33:14 +08:00
Jiang Jiang Jian
4193c391f2
Merge branch 'fix/lp_core_noreset_under_debug_option_v6.0' into 'release/v6.0'
...
fix(lp_core): fix build for CONFIG_ULP_NORESET_UNDER_DEBUG=n (v6.0)
See merge request espressif/esp-idf!49868
2026-07-09 12:31:38 +08:00
Chen Jichang
73075097b1
change(ahb_dma): update c61 eco3 header files
2026-07-09 12:31:21 +08:00
Jiang Jiang Jian
f579370571
Merge branch 'fix/reduce_acl_event_gaps_v6.0' into 'release/v6.0'
...
feat(ble): updated libble to 71d180a4 for esp32h4 and esp32s31 (6.0)
See merge request espressif/esp-idf!49592
2026-07-09 12:30:26 +08:00
Alexey Lapshin
aa14636a88
fix(libc): picolibc: disable C11 annex K in compatibility mode
2026-07-09 12:28:17 +08:00
Xu Si Yu
1a53acb870
fix(openthread): disable software retx security in spinel-only config
2026-07-09 11:30:45 +08:00
Ashish Sharma
9e8dc6cc7b
test(httpd): cover URL query and header pointer accessors
2026-07-09 11:20:33 +08:00
Ashish Sharma
4341446b17
feat(httpd): add httpd_req_get_hdr_value_str_ptr() to avoid value copy
2026-07-09 11:20:33 +08:00
Ashish Sharma
1208d1c3b8
refactor(httpd): extract shared header field-value lookup helper
2026-07-09 11:20:33 +08:00
Ashish Sharma
60ce04db6d
fix(httpd): validate buf_len in httpd_req_get_url_query_str_ptr()
2026-07-09 11:20:33 +08:00
0xFEEDC0DE64
629e6767fa
feat(httpd): avoid useless string copy by introducing httpd_req_get_url_query_str_ptr()
2026-07-09 11:20:33 +08:00
morris
30df02cb6a
Merge branch 'fix/dac_continuous_flag' into 'release/v6.0'
...
fix(dac): dac_continuous set is_cyclic flag in async mode
See merge request espressif/esp-idf!50490
2026-07-09 11:11:44 +08:00
Song Ruo Jing
9db6c73022
fix(dma2d): fix non-usable DMA2D_CSC_TX_SCRAMBLE option
2026-07-08 23:15:57 +08:00
Song Ruo Jing and Cursor
3294481ac4
fix(dma2d): fix race with dma2d_force_end and ISR
...
free_up_channels can only be called once for a started transaction.
Double free will undesirely stop the next picked 2D-DMA transaction on the same channel.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 23:15:56 +08:00
Xu Si Yu
30a2d5c25d
feat(openthread): update thread-lib for upstream b678a4f6
...
* esp-openthread: thread_zigbee/esp-openthread@47428f1e8
* openthread: espressif/openthread@b678a4f63
* esp-idf: espressif/esp-idf@c629a359b
2026-07-08 13:01:42 +00:00
Mahavir Jain
cf06294ca9
Merge branch 'fix/esp_http_client_header_buffer_too_small_v6.0' into 'release/v6.0'
...
feat(esp_http_client): detect oversized headers in tx buffer at send site (v6.0)
See merge request espressif/esp-idf!50314
2026-07-08 18:25:12 +05:30
Mahavir Jain
65aeed5c00
Merge branch 'fix/tls1_3_dynamic_buffer_server_crash_v6.0' into 'release/v6.0'
...
fix(mbedtls): fixes TLS1.3 server failing with dynamic buffer (v6.0)
See merge request espressif/esp-idf!50387
2026-07-08 18:23:37 +05:30
Mahavir Jain
77fd953aba
Merge branch 'fix/harden_mbedtls_port_layer_v6.0' into 'release/v6.0'
...
fix(mbedtls): harden port layer to zeroize sensitive material (v6.0)
See merge request espressif/esp-idf!50316
2026-07-08 18:22:31 +05:30
Xu Si Yu
c629a359b7
feat(openthread): update openthread submodule
2026-07-08 20:38:44 +08:00
Xu Si Yu
ebc79defd7
fix(openthread): fix TREL peer discovery by selecting IPv6 from mDNS address list
2026-07-08 20:38:44 +08:00
Song Ruo Jing
4fbbc16ac6
fix(dma2d): add a dequeue mechanism for dma2d driver
...
JPEG driver should be able to either dequeue a pending transaction from
a 2D-DMA pool or force end a processing transaction.
2026-07-08 20:11:08 +08:00
Euripedes Rocha
9369102192
Merge branch 'fix/mqtt_remove_leftovers_v6.0' into 'release/v6.0'
...
fix(mqtt): Remove mqtt leftovers from IDF
See merge request espressif/esp-idf!49552
2026-07-08 11:03:15 +02:00
Rahul Tank
519ff91e23
Merge branch 'bugfix/ai_reviewer_nimble_1.6_v6.0' into 'release/v6.0'
...
fix(nimble): Fixes for AI reported issues (v6.0)
See merge request espressif/esp-idf!50014
2026-07-08 13:57:25 +05:30
Hu Rui
45d04d1239
fix(dac): dac_continuous set is_cyclic flag in async mode
2026-07-08 15:47:07 +08:00
yangfeng
41897b6239
fix(bt/example): Add print the device name to verify if it matches in HID example
2026-07-08 15:28:06 +08:00
Erhan Kurubas
737f1f3a38
test(espcoredump): run test_tcb_corrupted with custom stack
2026-07-08 08:47:26 +02:00
Erhan Kurubas
4182ddebbd
fix(esp_coredump): count only written tasks against MAX_TASKS_NUM limit
2026-07-08 08:44:29 +02:00
Erhan Kurubas
b89a1b517d
fix(esp_coredump): fix unused-but-set-variable warnings
2026-07-08 08:44:10 +02:00
Jiang Jiang Jian
ecb9d864d5
Merge branch 'feat/update_pmu_pau_reg_description_v6.0' into 'release/v6.0'
...
feat(soc): update esp32c61 PMU & PAU reg header descriptions (v6.0)
See merge request espressif/esp-idf!50432
2026-07-08 14:33:53 +08:00
Jiang Jiang Jian
2a15269b80
Merge branch 'bugfix/fix_some_wifi_bugs_260706_v6.0' into 'release/v6.0'
...
fix(wifi): fix some wifi bugs 260706 v6.0(Backport v6.0)
See merge request espressif/esp-idf!50396
2026-07-08 14:26:57 +08:00
Ondrej Kosta
6eb451f40f
feat(esp_eth): update test_apps to use Ethernet test component
...
Move test logic into the eth_test_app managed component and slim down
the test_apps main target and pytest suite accordingly.
2026-07-08 08:01:45 +02:00
Ondrej Kosta
9e3ec66892
feat(ci): support downloading extra app artifacts in pytest
...
Add app_extra S3 artifact type, extend idf-ci download plumbing, and
expose a download_app_extra pytest fixture for managed_components deps.
2026-07-08 08:01:45 +02:00
Euripedes Rocha
97abdf4e3b
Merge branch 'contrib/github_pr_18642_v6.0' into 'release/v6.0'
...
fix(eth): use stored base_increment when computing PTP addend (GitHub PR) (v6.0)
See merge request espressif/esp-idf!49104
2026-07-08 07:59:47 +02:00
Wang Meng Yang
b1f7a5b8b8
Merge branch 'bugfix/sdp_null_access_v6.0' into 'release/v6.0'
...
fix(bt/bluedroid): fixed SDP deinit race with pending callbacks (v6.0)
See merge request espressif/esp-idf!48895
2026-07-08 12:42:23 +08:00
Zhang Wen Xu
0890c0fde4
Merge branch 'fix/reverse-extended-address-byte-order-in-esp-radio-spiel_v6.0' into 'release/v6.0'
...
fix(openthread): add APIs to clear a single src match short and extended entry in esp radio spinel (v6.0)
See merge request espressif/esp-idf!50453
2026-07-08 02:35:10 +00:00
Tomáš Rohlínek
d4fdaae0dd
fix(storage/fatfs): fix FAT32 mount integer overflow (CVE-2026-6682)
...
The initial CVE-2026-6682 fix hardened the exFAT mount path, but the CVE
as reported by runZero is a FAT32 defect in mount_volume() and is
reachable in the default configuration (exFAT and 64-bit LBA disabled).
This corrects the fix.
Root cause: `fasize *= fs->n_fats` is a DWORD multiply with no overflow
guard. A crafted BPB_FATSz32 such as 0x80000001 with NumFATs=2 wraps
`fasize` to 0x00000002. The wrapped (too-small) FAT size places
`fs->database` inside the FAT region, so a forged directory entry yields
an attacker-controlled `finfo.fsize`; a caller using it as a read length
overflows its buffer with attacker-controlled bytes (CVSS 7.6).
Fix: reject per-FAT and reserved+FAT+root system-area sizes that overflow
DWORD before they are used to derive the data-area base. The exFAT
cluster-heap/bitmap 64-bit promotions are retained as defense-in-depth
and relabeled (they are not CVE-2026-6682). SBOM reason updated.
2026-07-07 16:36:32 +02:00
Rahul Tank
38f4edb16e
fix(nimble): Fixes for AI reported issues
2026-07-07 16:18:32 +05:30
Ashish Sharma
92cefa205a
feat(esp_http_client): detect oversized headers in tx buffer while sending request
2026-07-07 18:18:26 +08:00
Xu Si Yu
c61e7ab345
feat(openthread): add APIs to clear a single src match short and extended entry in esp radio spinel
2026-07-07 17:39:42 +08:00
muhaidong
0ed8d91726
fix(wifi): update auth mode threshold doc
2026-07-07 16:00:39 +08:00
muhaidong
eda0d8dde1
fix(wifi): update wifi scan threshold doc
2026-07-07 16:00:00 +08:00
muhaidong
dbc974cbd8
fix(wifi): fix some wifi bugs 260706 v6.0
...
1. support weak func for wifi lmac assert
2. post disconnect event after disassociation tx callback
3. update auth mode threshold doc3. update auth mode threshold doc3.
update auth mode threshold doc
2026-07-07 15:59:18 +08:00
morris
db3825c799
Merge branch 'fix/spi_buslock_multi_dev_acq_release_issue_v6.0' into 'release/v6.0'
...
fix(esp_hw_support): fixed spi buslock multi dev acq/release logic issue (v6.0)
See merge request espressif/esp-idf!49168
2026-07-07 14:53:55 +08:00
morris
2c62bd65b0
Merge branch 'backport/spi_slave_independent_tx_rx_length_v6.0' into 'release/v6.0'
...
feat(driver_spi): slave driver support config different tx/rx length (v6.0)
See merge request espressif/esp-idf!49964
2026-07-07 14:50:44 +08:00
Scramble Tools and Ondrej Kosta
e0becb9e43
fix(esp_eth): use stored base_increment when computing PTP addend
...
The addend in `emac_hal_ptp_start()` was derived from the floating-point
`config->ptp_req_accuracy_ns` instead of the integer `base_increment`
register that actually drives the sub-second update. The cast to
`uint8_t` loses the fractional part, so the un-corrected addend leaves
the PTP clock running off-rate.
Example: with a 40 MHz XTAL and the default `req_accuracy_ns = 40`,
`base_increment` rounds 85.899 up to 86, leaving the clock +1170 ppm
fast — well outside the IEEE 802.1AS neighborRateRatio limit (~±200
ppm), so strict-1AS bridges refuse asCapable.
Compute the addend from the stored `base_increment` for both rollover
modes: `addend = 2^32 * clk_period_ns / increment_ns`.
Measured on ESP32-P4: neighborRateRatio drops from +1147.5 ppm to
+4.2 ppm, and asCapable is granted.
Co-authored-by: Ondrej Kosta <panzer412@gmail.com >
2026-07-07 08:37:04 +02:00
muhaidong
7afed49b3f
fix(wifi): support weak func for wifi lmac assert
2026-07-07 14:07:47 +08:00
muhaidong
dd8653bbeb
fix(coex): remove unsupported external coex soc caps
2026-07-07 14:07:47 +08:00
morris
b3b9ebb516
Merge branch 'bugfix/i2c_set_but_not_used_variable_v6.0' into 'release/v6.0'
...
fix(i2c): remove unused but set variables (v6.0)
See merge request espressif/esp-idf!50371
2026-07-07 13:13:07 +08:00