Commit Graph
33951 Commits
Author SHA1 Message Date
Alexey Lapshin 7cba243f39 fix(heap): avoid stack smash when heap tracing stack depth is 0
On RISC-V without frame pointers, STACK_DEPTH defaults to 0, so
alloced_by[] is empty. Writing callers[0] still ran and overwrote the
caller's cm.push saved ra, causing an illegal-instruction fault after
the first traced malloc (e.g. with HEAP_TRACING on ESP32-S31).
2026-08-04 17:47:12 +07:00
Rahul Tank 53bde34029 Merge branch 'bugfix/add_nimble_cve_v5.5' into 'release/v5.5'
fix(nimble): Fixes for various NimBLE CVEs (v5.5)

See merge request espressif/esp-idf!51202
2026-08-04 12:11:34 +05:30
Wang Meng Yang 89a63e35b8 Merge branch 'fix/aireview_critical_v5.5' into 'release/v5.5'
fix: Fix some critical bugs in classic bt (v5.5)

See merge request espressif/esp-idf!51290
2026-08-04 14:16:54 +08:00
Rahul Tank 9ffcc9821e fix(nimble): Fixes for various NimBLE CVEs 2026-08-03 23:45:23 +05:30
Island c41feceb86 Merge branch 'fix/ble_log_compression_issue_on_windows_v5.5' into 'release/v5.5'
fix(bt): fix BLE log compression build on Windows (5.5)

See merge request espressif/esp-idf!51245
2026-08-03 11:31:41 +08:00
Island 4e5966a7f0 Merge branch 'feat/update_mesh_lib_to_supported_get_lib_ver_v5.5' into 'release/v5.5'
Feat/update mesh lib to supported get lib ver (5.5)

See merge request espressif/esp-idf!51172
2026-08-03 11:30:16 +08:00
Martin Vychodil ae16d322a4 Merge branch 'bugfix/idfci-12815-12072-timeout_v5.5' into 'release/v5.5'
fix(storage): mark storage pytest apps flaky in CI (v5.5)

See merge request espressif/esp-idf!51337
2026-08-02 16:39:27 +08:00
Alexey Gerenkov c3dbba967d Merge branch 'fix/esp32p4_panic_gdbstub_v5.5' into 'release/v5.5'
fix(gdbstub): remove unsupported options in qSupported packet

See merge request espressif/esp-idf!50208
2026-07-31 21:23:30 +08:00
Euripedes Rocha Filho 0dc7c2f853 fix(esp_netif): Avoid socket to stay in closing state in l2tap closing 2026-07-31 09:26:32 +02:00
sonika.rathi 310502e340 fix(storage): mark storage pytest apps flaky in CI 2026-07-31 08:54:24 +02:00
Island 3844dee2e7 Merge branch 'fix/fix_some_ble_sleep_issues_v5.5' into 'release/v5.5'
Fix/fix some ble sleep issues (5.5)

See merge request espressif/esp-idf!51318
2026-07-31 11:09:57 +08:00
Rahul Tank 55cca8b8b4 fix(nimble): Deliver PAwR peripheral CONNECT via sync callback 2026-07-30 16:33:07 +05:30
Euripedes Rocha FilhoandCursor 9e52922932 fix(esp_netif): harden NULL and OOM handling in netif APIs
Use a temporary pointer for br_glue port-list realloc so a failure does
not clobber the existing array. Reject NULL mac in esp_netif_set_mac and
validate config->base in esp_netif_new_api before use.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-30 08:55:13 +02:00
Euripedes Rocha a1325b694d Merge branch 'fix/sec-347-hostname-null-check_v5.5' into 'release/v5.5'
fix(esp_netif): reject NULL hostname in esp_netif_set_hostname_api (SEC_347) (v5.5)

See merge request espressif/esp-idf!50589
2026-07-30 08:36:50 +02:00
Wang Meng Yang fa27fd0a52 Merge branch 'fix/bluedroid_aireview_v5.5' into 'release/v5.5'
Fix/bluedroid aireview (v5.5)

See merge request espressif/esp-idf!51295
2026-07-30 14:28:55 +08:00
Jiang Jiang Jian f1bf7346e4 Merge branch 'bugfix/fix_espnow_data_rate_error_v5.5' into 'release/v5.5'
fix(wifi): fixed espnow data rate overridden by stale rate control (v5.5)

See merge request espressif/esp-idf!51258
2026-07-30 12:04:26 +08:00
cjin 2fca2f8b49 fix(bt): fix deselect slow clk missing on ESP32-C5 2026-07-30 10:39:30 +08:00
Island bc9e3b168e Merge branch 'change/ble_update_lib_20260717_v5.5' into 'release/v5.5'
change(ble): [AUTO_MR] 20260717 - Update ESP BLE Controller Lib (5.5)

See merge request espressif/esp-idf!50931
2026-07-30 10:08:05 +08:00
Euripedes Rocha Filho 352f4997fa fix(esp_netif): reject NULL hostname in esp_netif_set_hostname_api
esp_netif_set_hostname_api() dereferenced hostname via strlen() without
checking it for NULL first, causing a NULL pointer dereference.
2026-07-29 16:00:37 +02:00
Marius Vikhammer ddfd2934ef test(ulp): check LP core apps avoid soft-float helpers
Inspect generated LP core ELF files so accidental floating-point helper linkage is caught in CI.
2026-07-29 14:47:48 +02:00
Marius VikhammerandCursor 37a4390c64 fix(ulp): use RC_FAST approximation for LP core fallback
Use the shared SoC RC_FAST approximation when the target has no RTC_FAST source option.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-29 14:47:48 +02:00
Marius VikhammerandCursor 25b9025d93 fix(ulp): use SoC RC_FAST frequency for LP core delay
Use the target RC_FAST approximation for LP core delay conversion.
This prevents ESP32-S31 from under-delaying when running from RC_FAST.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-29 14:47:48 +02:00
Jiang Jiang Jian a7633c1bee Merge branch 'bugfix/supplicant_crypto_code_correction_v5.5' into 'release/v5.5'
fix(wpa_supplicant): Correct some functions in crypto porting layer (v5.5)

See merge request espressif/esp-idf!50879
2026-07-29 19:53:13 +08:00
Rahul Tank 480a354c9a Merge branch 'feat/sbom_changes_v5.5' into 'release/v5.5'
fix(nimble): update sbom file with cve details (v5.5)

See merge request espressif/esp-idf!51182
2026-07-29 15:03:46 +05:30
zhangyanjiao 1a23549f28 fix(wifi): fixed espnow data rate overridden by stale rate control 2026-07-29 17:31:47 +08:00
Jin Cheng 6e4bd4152d fix(bt/bluedroid): fixed incorrect eSCO packet type validation under secure connection mode in BlueDroid 2026-07-29 17:30:25 +08:00
hejiaxin 60289a9c60 fix(bt): Fix some bug in stm_sco.c
- Memory safety
- State machine & logic integrity
- Resource leaks
- Edge cases check
2026-07-29 17:30:25 +08:00
hejiaxin 18c6d51e46 fix(bt_stack): Fix some critical bugs in classic_bt stack
related: obex, smp, pbap, sdp, rfcomm, stack_dm

- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
2026-07-29 17:05:35 +08:00
Jiang Jiang Jian db33ff497f Merge branch 'bugfix/clear_ifx_tx_queue_v5.5' into 'release/v5.5'
bugfix(wifi): Clear Sta TX queue to prevent key 2 send failure (Backport v5.5)

See merge request espressif/esp-idf!50896
2026-07-29 15:37:21 +08:00
Rahul Tank 80e8f463c3 fix(nimble): update sbom file with cve details 2026-07-29 12:50:20 +05:30
Island c96d10b850 Merge branch 'feat/add_bt_common_npl_v5.5' into 'release/v5.5'
feat(bt): Add host-agnostic BT OSAL and shared BLE profile task (5.5)

See merge request espressif/esp-idf!51218
2026-07-29 15:00:28 +08:00
akshat 0b577e15f8 bugfix(wifi): Clear Sta TX queue to prevent key 2 send failure
Also, Ensure correct return values for key 2 and key 4.
2026-07-29 10:38:20 +08:00
cjin 57d2a46509 change(ble): [AUTO_MR] Update lib_esp32c6 to 18aafc6f 2026-07-29 08:36:20 +08:00
cjin 4d0df8eef3 change(ble): [AUTO_MR] Update lib_esp32c5 to 18aafc6f 2026-07-29 08:36:20 +08:00
cjin 3bf8c8d7d5 change(ble): [AUTO_MR] Update lib_esp32h2 to 18aafc6f 2026-07-29 08:36:20 +08:00
morris 1a1a5aa651 Merge branch 'isp_dma_one_frame_v5.5' into 'release/v5.5'
feat(isp): support isp dma input and add example (v5.5)

See merge request espressif/esp-idf!50756
2026-07-28 17:17:58 +08:00
morris fc407c55e8 Merge branch 'fix/uhci_rx_size_check_v5.5' into 'release/v5.5'
fix(uhci): rx fsm race condition and buffer size check (v5.5)

See merge request espressif/esp-idf!51230
2026-07-28 16:33:07 +08:00
morris e9f878e3aa refactor(isp): read DMA input directly from flash
Avoid the PSRAM copy for unencrypted flash
2026-07-28 14:37:45 +08:00
gaoxuandCursor 2a02c7e55c feat(isp): support isp dma input and add example
Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-28 14:37:45 +08:00
Luo Xu 2921dd77b9 fix(bt): fix BLE log compression build on Windows
The BLE log compression feature (CONFIG_BT_LOG_CRITICAL_ONLY ->
BLE_COMPRESSED_LOG_ENABLE) failed to build on Windows while working
correctly on Linux, due to two shell/platform-specific issues in the
compression script.

1. Module/source argument quoting. CMakeLists.txt passes the
   semicolon-separated module and source lists wrapped in single quotes
   ("'${MODULES}'") to protect ';' from POSIX shells, which strip them.
   cmd.exe does not treat single quotes as quoting characters, so on
   Windows the quotes reached the script literally and
   args.module.split(';') produced "'BLE_MESH" / "BLE_HOST'" instead of
   the clean names. These never matched the YAML module keys, every
   module was skipped ("Skipping module ... - config not found"), the
   compressed sources were never generated, and the build failed. Strip
   surrounding quote characters before splitting; this is a no-op on
   Linux/macOS where the shell already removed them.

2. CRLF line endings. With core.autocrlf=true the IDF sources are
   checked out as CRLF on Windows. The generated *_log_index.h macros
   use backslash-newline line-continuation; a backslash followed by
   '\r\n' is not a valid continuation in C, producing floods of syntax
   errors when the header is compiled. Write generated headers with
   newline='' to force LF, and normalize source content to LF right
   after reading so '\r' embedded inside multi-line argument expressions
   is also handled. Byte offsets stay consistent because both tree-sitter
   parsing and tag replacement operate on the normalized content.

Verified by full clean builds of examples/bluetooth/esp_ble_mesh/
vendor_models/vendor_client (esp32c6, bluedroid + mesh) from both
cmd.exe and PowerShell; both produce an identical vendor_client.bin.


(cherry picked from commit aa9b565a6d)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-28 13:43:38 +08:00
luoxu 0d0df66dfc feat(ble_mesh): update lib to 79e3fee04e 2026-07-28 12:07:09 +08:00
Hu Rui 1bb727c66e fix(uhci): rx fsm race condition and buffer size check
Closes https://github.com/espressif/esp-idf/issues/18819
Closes https://github.com/espressif/esp-idf/issues/18820
2026-07-28 11:29:05 +08:00
chenjianhua 4460584d07 feat(bt): Add host-agnostic BT OSAL and shared BLE profile task
- Add bt_osal: event queues, mutexes, semaphores, callouts, etc.
- Add the shared BLE profile task and event queue
- Bring both up and tear them down in the host init/deinit paths
- Add unit tests for the OSAL and the profile task
2026-07-27 19:29:56 +08:00
Fu Hanxi d359f42f6d ci: apply idf-ci 1.x
(cherry picked from commit 21d772a24da646bfb672418cf056199cad9b17e4)
2026-07-27 10:52:35 +02:00
Euripedes Rocha 6a46ffa617 Merge branch 'feat/eth_test_component_v5.5' into 'release/v5.5'
feat(esp_eth): updated test_apps to use Ethernet test component (v5.5)

See merge request espressif/esp-idf!49660
2026-07-27 10:35:47 +02:00
morris df6e7f407d Merge branch 'bugfix/ppa_buffer_oob_v5.5' into 'release/v5.5'
fix(ppa): add checks for input to avoid any OOB access (v5.5)

See merge request espressif/esp-idf!51140
2026-07-27 10:35:49 +08:00
morris 346a22b5ce Merge branch 'backport/spi_flash_fixes_v5.5' into 'release/v5.5'
fix(spi_flash): backport aes-xts error-path & mxic fixes (v5.5)

See merge request espressif/esp-idf!51136
2026-07-27 10:35:17 +08:00
Luo Xu 1974089f9f feat(ble_mesh): supported get lib version
(cherry picked from commit 56f78da32c)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-27 10:03:16 +08:00
Mahavir Jain 6204c6dfff Merge branch 'fix/esp32p4_secure_boot_sig_block_v5.5' into 'release/v5.5'
fix(esp32p4): secure boot (ECDSA-P384) and flash encryption eFuse fixes (v5.5)

See merge request espressif/esp-idf!50900
2026-07-26 16:21:57 +05:30
Shreeyash Bhakare 87f48471c5 fix(nimble): Added security related fixes 2026-07-25 08:56:22 +05:30