Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-08-18 06:35:35 +03:00
Code Issues Packages Projects Releases Wiki Activity
35,219 Commits 25 Branches 187 Tags
7e53fe2b4c1e35b6315fd4e08a0f5afd38d82ea9
Commit Graph

24241 Commits

Author SHA1 Message Date
Zhang Hai Peng
7e53fe2b4c fix(ble/bluedroid): Add boundary check for adv_handle in btm_ble_adv_set_terminated_evt 
(cherry picked from commit d2baf3b0d4)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
0d7ed9e048 fix(ble/bluedroid): Add NULL checks in GATT APIs 
(cherry picked from commit a6730c7da6)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
677e3c1284 fix(ble/bluedroid): Add NULL checks in esp_gap_ble_api 
(cherry picked from commit b71c51564a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
3e5810b5f4 fix(ble/bluedroid): Add NULL check in esp_ble_gap_add_device_to_resolving_list 
(cherry picked from commit 4b44d8e814)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
4f0e60fe0b fix(ble/bluedroid): Fix potential out-of-bounds issue 
- add length check in hci_hal_h4_hdl_rx_packet to prevent OOB
- add adv data length check in btm_ble_cache_adv_data
- add indicate data length check in BTA_GATTS_HandleValueIndication
- add report length check in bta_hh_parse_keybd_rpt
- add report length check in BTA_HdSendReport
- add descriptor length check in BTA_HdRegisterApp
- prevent buffer overflow in attribute processing


(cherry picked from commit 71efec78c5)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
4bda17200f fix(ble/bluedroid): Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd 
- Reference: https://source.android.com/docs/security/bulletin/2024-03-01?hl=zh-cn


(cherry picked from commit e1d39f630f)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
754a18a2b0 fix(ble/bluedroid): Fix potential CVE-2020-0022 in reassemble_and_dispatch 
- Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-0022


(cherry picked from commit 1f7fd91b5a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Sarvesh Bodakhe
c7ba439230 fix(wifi): fix memory corruption by avoiding unncessary encryption of Mgmt frames 
When wpa_supplicant sends an authentication response for an already
connection station (with keys installed after a successful 4-way
handshake), the Mgmt packet was encrypted unconditionaly based on
'bss->pmf_enable'. This lead to memory corruption since extra space for
the encryption header was assumed even when it was not there.

Fix this by verifying that the packet is actually a robust management
frame before enabling the encryption.
 2025-12-15 09:58:47 +05:30
Akshat Agrawal
669df500c3 bugfix(wifi): Resolve the memory corruption issue in FTM 2025-12-12 15:52:54 +05:30
Jiang Jiang Jian
c4b992a0fa Merge branch 'fix/fix_clear_reason_status_issue' into 'release/v5.1' 
fix(wifi): fix not clear disconnect reason status issue

See merge request espressif/esp-idf!44164
 2025-12-12 17:19:10 +08:00
Jiang Jiang Jian
63c78a51e1 Merge branch 'fix/correct_adc_periph_num_on_c2_v5.1' into 'release/v5.1' 
fix(adc): fix ESP32-C2/P4 wrong adc periph num (v5.1)

See merge request espressif/esp-idf!41540
 2025-12-12 10:21:35 +08:00
Jiang Jiang Jian
dd754fc2a4 Merge branch 'bugfix/fix_event_filter_bug_v5.1' into 'release/v5.1' 
fix(bt/controller): Fixed hci connection request event filter bug (v5.1)

See merge request espressif/esp-idf!43879
 2025-12-12 10:17:51 +08:00
Jiang Jiang Jian
43b1fa99d7 Merge branch 'feature/extend_h2_conon_num_to_70_v5.1' into 'release/v5.1' 
change(ble): Updated the maximum number of concurrent connections to 70 on ESP32-H2 (v5.1)

See merge request espressif/esp-idf!43831
 2025-12-12 10:17:06 +08:00
Jiang Jiang Jian
d7793f860f Merge branch 'fix/fix_an_ot_trel_risk_v5.1' into 'release/v5.1' 
fix(openthread): fix a potential stack overflow in TREL (v5.1)

See merge request espressif/esp-idf!43936
 2025-12-12 10:15:22 +08:00
Jiang Jiang Jian
a2448622ff Merge branch 'fix/v55_lib_update_v5.1' into 'release/v5.1' 
fix(openthread): resolve deadlock issues due to switching_lock (v5.1)

See merge request espressif/esp-idf!44085
 2025-12-12 10:13:14 +08:00
wangtao@espressif.com
1914c32c3e fix(wifi): fix not clear disconnect reason status issue 2025-12-11 19:42:13 +08:00
Jiang Jiang Jian
d45df0ca52 Merge branch 'bugfix/wifibug-1615' into 'release/v5.1' 
fix(mac):fix unnecessary event posting when sta disconnect

See merge request espressif/esp-idf!44109
 2025-12-11 18:45:37 +08:00
Island
03ae7637c0 Merge branch 'bugfix/fix_reattempt_sync_estab_v5.1' into 'release/v5.1' 
fix(nimble): Add change to cancel sync in case of reattempt (v5.1)

See merge request espressif/esp-idf!43953
 2025-12-11 14:26:14 +08:00
morris
4606518aec Merge branch 'fix/esp32_adc_continuous_loss_sample_v5.1' into 'release/v5.1' 
Fix/esp32 adc continuous loss sample (v5.1)

See merge request espressif/esp-idf!42833
 2025-12-11 11:27:17 +08:00
morris
009ed2fd85 Merge branch 'bugfix/fix_i2s_auto_port_issue_v5.1' into 'release/v5.1' 
fix(i2s): fix the auto port failure when use simplex on ESP32 (v5.1)

See merge request espressif/esp-idf!43823
 2025-12-11 11:25:06 +08:00
Junchi Chen
5da68217d0 fix(mac):fix unnecessary event posting when sta disconnect 2025-12-10 17:37:12 +08:00
Mahavir Jain
7463bd8787 Merge branch 'bugfix/protocomm_sec1_validation_v5.1' into 'release/v5.1' 
fix(protocomm): add validation for Security1 client verifier data (v5.1)

See merge request espressif/esp-idf!43783
 2025-12-10 14:16:24 +05:30
Rahul Tank
d7ee0303f8 fix(nimble): Add change to cancel sync in case of reattempt 2025-12-10 12:53:53 +08:00
Tan Yan Quan
94b7c9d0c2 fix(openthread): resolve deadlock issues due to switching_lock 
* esp-openthread: thread_zigbee/esp-openthread@4a650cc2f
* openthread: espressif/openthread@36b14d3ef
* esp-idf: espressif/esp-idf@ccadda98e
 2025-12-09 09:39:35 +00:00
Xu Si Yu
c321488e0b fix(openthread): fix a potential stack overflow in TREL 2025-12-03 10:36:42 +08:00
muhaidong
ca312e6a51 fix(wifi): fix wifilib issue introduced by mr43704 2025-12-02 19:37:08 +08:00
liqigan
27741bb4f4 fix(bt/controller): Fixed hci connection request event filter bug 2025-12-01 13:46:39 +08:00
Jiang Jiang Jian
cb5e4b9708 Merge branch 'fix/cpu_reset_dma_v5.1' into 'release/v5.1' 
dma: fixed issue that DMA are not reset when CPU reset (v5.1)

See merge request espressif/esp-idf!42853
 2025-11-29 12:29:11 +08:00
Jiang Jiang Jian
48397642c3 Merge branch 'bugfix/a2dp_deinit_crash_v5.1' into 'release/v5.1' 
fix(bt): fixed crash caused by deinit during A2DP connection initiation(v5.1)

See merge request espressif/esp-idf!43786
 2025-11-29 12:28:53 +08:00
Jiang Jiang Jian
37f1adb63c Merge branch 'fix/ieee802154_energy_detect_result_v5.1' into 'release/v5.1' 
fix(802.15.4): fixed energy detection result (v5.1)

See merge request espressif/esp-idf!43529
 2025-11-29 11:03:02 +08:00
Shen Wei Long
73c37b5c8c change(ble): Updated the maximum number of concurrent connections to 70 on ESP32-H2 
(cherry picked from commit cd33f13521)

Co-authored-by: ShenWeilong <shenweilong@espressif.com>
 2025-11-28 09:06:08 +00:00
laokaiyao
2137cbad63 fix(i2s): fix the auto port failure when use simplex on ESP32 2025-11-28 14:50:18 +08:00
Akshat Agrawal
6c91b9c3a4 bugfix(wifi): Set the dialog token of last FTM resp to zero 
- Perform FTM in disconnected state
- Resolve memory corruption by avoiding integer underflow
- Return to home channel as soon as FTM is completed
 2025-11-28 11:01:33 +05:30
Jiang Jiang Jian
470a32467a Merge branch 'bugfix/fix_some_wifi_bugs_251125_v5.1' into 'release/v5.1' 
fix(wifi): fix some wifi bugs 251125(Backport v5.1)

See merge request espressif/esp-idf!43704
 2025-11-28 13:10:33 +08:00
Xiao Xufeng
93c2572978 dma: fixed issue that DMA are not reset when CPU reset 
When DMA keep writing the memory, some data may be corrupted after reset. For example, the stack of bootloader may be overwritten and failed to boot until a higher scope of reset (Core).
 2025-11-28 10:56:55 +08:00
gaoxu
22fb4ebf5c fix(adc): fix wrong adc periph num on C2/P4 2025-11-28 10:54:57 +08:00
Island
15f8397dfe Merge branch 'bugfix/fix_ble_scan_enable_timeout_v5.1' into 'release/v5.1' 
Fixed scan HCI command timeout issue on ESP32 (v5.1)

See merge request espressif/esp-idf!43686
 2025-11-28 10:18:25 +08:00
Island
5618f715df Merge branch 'bugfix/bug_ble_max_device_record_v5.1' into 'release/v5.1' 
fix(ble/bluedroid): Fixed BLE incorrect device record count issue (v5.1)

See merge request espressif/esp-idf!43593
 2025-11-27 18:25:27 +08:00
xiongweichao
c743c261f7 fix(bt): fixed crash caused by deinit during A2DP connection initiation 
- Only clean up when idle
 2025-11-27 14:09:19 +08:00
Rahul Tank
87f22a49bc Merge branch 'bugfix/check_psync_status_v5.1' into 'release/v5.1' 
fix(nimble): Add a check for psync before processing (v5.1)

See merge request espressif/esp-idf!43636
 2025-11-27 10:49:07 +05:30
morris
e7117c7a57 Merge branch 'bugfix/uart_related_backports_v5.1' into 'release/v5.1' 
fix(uart): some related uart backports (v5.1)

See merge request espressif/esp-idf!43656
 2025-11-27 12:50:06 +08:00
Mahavir Jain
58afea5701 fix(protocomm): add validation for Security1 client verifier data 
Add checks to validate client_verify_data pointer and length before
processing in handle_session_command1. Prevents NULL pointer dereference
when client omits verifier data in Session_Command1, which could cause
device crash during provisioning (remote DoS attack).

We would like to thank Pavel Kohout from Aisle Research for reporting
this vulnerability along with a mitigation strategy.
 2025-11-27 10:15:13 +05:30
muhaidong
1b2f163290 fix(wifi): fix some wifi bugs 251125 
1. fix ptk key memory leak issue
2. fix tkip fragment issue
3. force MAC tx end by set tx frame ACK bit for ESP32
 2025-11-27 11:12:31 +08:00
yinqingzhao
d940cfb25b fix(wifi): fix some wifi bugs related to csi, twt and bss max idle 2025-11-26 18:14:28 +08:00
gaoxu
3086f8df50 fix(adc): fix ESP32 ADC continuous loss sample times 2025-11-26 18:10:00 +08:00
Island
53f1ef016e Merge branch 'feat/support_bhost2025_44_v5.1' into 'release/v5.1' 
feat(ble/bluedroid): Add more debug log for bluedroid (v5.1)

See merge request espressif/esp-idf!43362
 2025-11-26 18:02:52 +08:00
Rahul Tank
5ffc3bdbfa fix(nimble): Add a check for psync before processing 2025-11-26 15:06:33 +05:30
Shu Chen
79b1f6b762 Merge branch 'fix/remove_the_duplicate_macro_definition_v5.1' into 'release/v5.1' 
fix(openthread): remove the duplicate macro definition (v5.1)

See merge request espressif/esp-idf!43712
 2025-11-26 03:59:44 +00:00
Song Ruo Jing
2f499b074d fix(uart): fix some uart port generate a RX BRK_DET intr on reset issue 
Issue saw on S3 UART2 port
 2025-11-26 11:53:11 +08:00
Song Ruo Jing
968776c20d fix(uart): correct uart_get_tx_buffer_free_size calculation 
Modified a bit on the TX ring buffer push size logic

 Closes https://github.com/espressif/esp-idf/issues/15859
 2025-11-26 11:53:04 +08:00