Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-27 16:56:43 +03:00
Code Issues Packages Projects Releases Wiki Activity
51,611 Commits 25 Branches 192 Tags
7f42eabb08b999d453372085d4e5b910be7c1f61
Commit Graph
35811 Commits
Author SHA1 Message Date
hejiaxin 7f42eabb08 fix(bt_stack): Fix some critical bugs in classic_bt stack 
related: obex, smp, pbap, sdp, rfcomm, stack_dm

- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
 2026-07-29 17:05:31 +08:00
Jiang Jiang Jian 52ffcbf270 Merge branch 'bugfix/nan_vulnerabilities_v6.0' into 'release/v6.0' 
fix(nan): Fix bug bounty reported and discovered vulnerabilities in NAN Rx (Backport v6.0)

See merge request espressif/esp-idf!50741
 2026-07-24 23:59:19 +08:00
Jiang Jiang Jian a1f5d9387e Merge branch 'bugfix/ppa_buffer_oob_v6.0' into 'release/v6.0' 
fix(ppa): add checks for input to avoid any OOB access (v6.0)

See merge request espressif/esp-idf!51139
 2026-07-24 20:45:15 +08:00
Jiang Jiang Jian 3a09c553ce Merge branch 'backport-50410-to-release/v6.0' into 'release/v6.0' 
fix(pthread,ulp): harden TLS key lookup and ULP bss_size validation (v6.0)

See merge request espressif/esp-idf!50955
 2026-07-24 20:43:06 +08:00
Jiang Jiang Jian df41628e69 Merge branch 'backport/spi_flash_fixes_v6.0' into 'release/v6.0' 
fix(spi_flash): backport aes-xts error-path & mxic fixes (v6.0)

See merge request espressif/esp-idf!51135
 2026-07-24 20:09:15 +08:00
Jiang Jiang Jian fa8e43eb72 Merge branch 'fix/bootloader_log_format_drom_vaddr_v6.0' into 'release/v6.0' 
fix(bootloader): use correct format specifier for MMU_LL_END_DROM_ENTRY_VADDR (v6.0)

See merge request espressif/esp-idf!51056
 2026-07-24 20:07:42 +08:00
Jiang Jiang Jian a75497a32a Merge branch 'bugfix/low_spp_throughput_v6.0' into 'release/v6.0' 
change(bt/bluedroid): increased port low watermark of RFCOMM (v6.0)

See merge request espressif/esp-idf!51084
 2026-07-24 20:05:29 +08:00
Jiang Jiang Jian 8ec24bebab Merge branch 'fix/lp_core_gpio_wakeup_v6.0' into 'release/v6.0' 
fix(ulp): wake pin wakes ESP32-P4 from deep sleep on P4 (v6.0)

See merge request espressif/esp-idf!50994
 2026-07-24 20:04:47 +08:00
Akshat Agrawal eb0065b603 fix(nan): Fix bug bounty reported and discovered vulnerabilities in NAN Rx 2026-07-24 17:18:51 +05:30
Mahavir Jain c9fc9d6103 Merge branch 'fix/esp_image_format_v6.0' into 'release/v6.0' 
fix(esp_image_format): Fix some memory-safety issues (v6.0)

See merge request espressif/esp-idf!50180
 2026-07-24 17:16:22 +05:30
Shu Chen 99b87ca81f Merge branch 'support/ot_register_154_event_cb_v6.0' into 'release/v6.0' 
feat(openthread): use ieee802154 event callback list instead of weak overrides (v6.0)

See merge request espressif/esp-idf!51127
 2026-07-24 09:00:56 +00:00
Rahul Tank ef049321d0 Merge branch 'bugfix/red_rem_feat_evt_v6.0' into 'release/v6.0' 
Handle Read Remote Supported Feature failure (v6.0)

See merge request espressif/esp-idf!50809
 2026-07-24 14:24:28 +05:30
morris aff0fb071a Merge branch 'feature/isp-flash-dma-input_v6.0' into 'release/v6.0' 
feat(isp): add aligned flash DMA input example (v6.0)

See merge request espressif/esp-idf!51120
 2026-07-24 16:48:11 +08:00
Jiang Jiang Jian f01548cfd9 Merge branch 'bugfix/bredr_critical_bugs_v6.0' into 'release/v6.0' 
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI (v6.0)

See merge request espressif/esp-idf!51077
 2026-07-24 16:12:26 +08:00
Jiang Jiang Jian c8ca95a26d Merge branch 'contrib/github_pr_18822_v6.0' into 'release/v6.0' 
fix(esp_partition): prevent size_t overflow bypassing bounds checks on linux target (GitHub PR) (v6.0)

See merge request espressif/esp-idf!50908
 2026-07-24 15:52:04 +08:00
Jiang Jiang Jian cf14f78c69 Merge branch 'contrib/github_pr_18829_v6.0' into 'release/v6.0' 
fix(spiffs): fix off-by-one in spiffsgen.py obj name length check (GitHub PR) (v6.0)

See merge request espressif/esp-idf!50915
 2026-07-24 15:51:08 +08:00
Jiang Jiang Jian 47b089bf3d Merge branch 'fix/ringbuf_max_item_size_v6.0' into 'release/v6.0' 
fix(esp_ringbuf): harden ringbuf creation sizes checks (v6.0)

See merge request espressif/esp-idf!51000
 2026-07-24 15:44:03 +08:00
Meet Patel eadae0b093 fix(ulp): validate bss_size before zeroing ULP BSS region 
Crafted ULP binaries could specify a bss_size larger than the reserved
memory, causing memset to zero past the ULP region boundary.
 2026-07-24 15:41:16 +08:00
Meet Patel 5dad0f4564 fix(pthread): avoid use-after-free when looking up TLS keys 
Concurrent pthread_key_delete could free a key entry after find_key
released the lock but before callers read or invoked its destructor.
 2026-07-24 15:41:16 +08:00
Jiang Jiang Jian ecd976e96b Merge branch 'fix/esp-event-security-fixes_v6.0' into 'release/v6.0' 
fix(esp_event): multiple security and stability fixes (v6.0)

See merge request espressif/esp-idf!51048
 2026-07-24 15:34:43 +08:00
Jiang Jiang Jian 2ea77af383 Merge branch 'fix/esp32p4_secure_boot_sig_block_v6.0' into 'release/v6.0' 
fix(esp32p4): secure boot (ECDSA-P384) and flash encryption eFuse fixes (v6.0)

See merge request espressif/esp-idf!50899
 2026-07-24 15:29:26 +08:00
Jiang Jiang Jian 1f6ccc0f2f Merge branch 'bugfix/vfs_fat_readdir_stat_cache_v6.0' into 'release/v6.0' 
fix(fatfs): move readdir-stat cache to per-DIR stream (v6.0)

See merge request espressif/esp-idf!50904
 2026-07-24 15:24:50 +08:00
Song Ruo Jing ba8e1b1d18 fix(ppa): add checks for input to avoid any OOB access 2026-07-24 15:10:21 +08:00
C.S.M f1a734ca8d fix(spi_flash): Fix spi_flash leaks release aes-xts in error path 
(cherry picked from commit 305c5869ee)
 2026-07-24 14:52:17 +08:00
Shengyu Qu 7727fa14f4 fix(spi_flash): add #if check for s_mxic_set_required_regs() 
Currently, s_mxic_set_required_regs() lacks checking for
CONFIG_SPI_FLASH_SUPPORT_MXIC_OPI_CHIP. And this causes a defined but not
used warning when MXIC flash driver is disabled in project config. So add
a #if check for this to supress warning.

Signed-off-by: Shengyu Qu <wiagn@4d2.org>
(cherry picked from commit 062c948c18)
 2026-07-24 14:52:17 +08:00
zwx 10e94cc5ed feat(openthread): use ieee802154 event callback list instead of weak overrides 2026-07-24 14:23:40 +08:00
Shu Chen 73c2fe34db Merge branch 'feat/update_phylib_on_s31_c6_for_track_v6.0' into 'release/v6.0' 
feat(phy): update phy lib for esp32s31 & esp32c6 for track (v6.0)

See merge request espressif/esp-idf!50791
 2026-07-24 06:04:22 +00:00
morris 91a87cfb36 refactor(isp): read DMA input directly from flash 
Avoid the PSRAM copy for unencrypted flash
 2026-07-24 11:48:42 +08:00
Martin Vychodil 4a2bad6367 Merge branch 'fix/sdmmc_bdl_casting_v6.0' into 'release/v6.0' 
fix(sdmmc): BDL calculate sectors cast fix + Add a better handling of devices accessing PSRAM through DMA (v6.0)

See merge request espressif/esp-idf!51044
 2026-07-23 20:51:14 +08:00
Island 41687f6c0f Merge branch 'fix/ble_hidd_remove_ccc_gating_v6.0' into 'release/v6.0' 
fix(esp_hid/bluedroid): remove app-layer CCC gating in HID device (6.0)

See merge request espressif/esp-idf!51007
 2026-07-23 19:25:57 +08:00
Jiang Jiang Jian f44059890c Merge branch 'feature/upgrade-esp-rom-elfs_v6.0' into 'release/v6.0' 
feat(tools): tools: update esp-rom-elf to version 20260528 (v6.0)

See merge request espressif/esp-idf!50847
 2026-07-23 18:20:13 +08:00
Jiang Jiang Jian ca90535011 Merge branch 'bugfix/clear_ifx_tx_queue_v6.0' into 'release/v6.0' 
bugfix(wifi): Clear Sta TX queue to prevent key 2 send failure (Backport v6.0)

See merge request espressif/esp-idf!50895
 2026-07-23 16:05:19 +08:00
Mahavir Jain 2741444b16 Merge branch 'feat/mbedtls_update_4.1.1_v6.0' into 'release/v6.0' 
Feat/mbedtls update 4.1.1 (v6.0)

See merge request espressif/esp-idf!50979
 2026-07-23 13:17:21 +05:30
Island ded793522b Merge branch 'fix/ble_log_compression_add_local_header_file_v6.0' into 'release/v6.0' 
feat(ble_log): mirror local compression headers (6.0)

See merge request espressif/esp-idf!50952
 2026-07-23 14:23:22 +08:00
Ashish Sharma 2552d48f27 fix(mbedtls): revert to non constant time rsa key gen 2026-07-23 13:38:24 +08:00
Ashish Sharma 57ff98ca13 test(mbedtls): add PSA RSA key generation test 
The test only runs with MBEDTLS_CONSTANT_TIME_PRIME_GEN disabled:
with the constant-time prime generation that is now the default,
RSA-2048 key generation takes over a minute on most targets (~86 s on
ESP32-S3), exceeding the test timeout and starving the task watchdog.
 2026-07-23 13:38:24 +08:00
Ashish Sharma 73712ff5fd feat(mbedtls): add option to choose constant-time prime generation 
mbedtls 4.1.1 made the small-factor test in prime generation
constant-time (a CT GCD against the product of primes up to 997, run
for every prime candidate). This makes RSA key generation roughly ten
times slower on ESP chips and starves the idle task since the software
GCD never yields, tripping the task watchdog.

Add MBEDTLS_CONSTANT_TIME_PRIME_GEN under the new "Security hardening"
menu, default y so the upstream constant-time behavior ships as the
secure default. When disabled, esp_config.h defines
MBEDTLS_MPI_PRIME_SIEVE_VARIABLE_TIME and mbedtls uses the pre-3.6.7
variable-time trial division, restoring key generation performance on
devices where no untrusted co-resident code could time key generation.
 2026-07-23 13:38:24 +08:00
Ashish Sharma 8ad5504eb1 feat(mbedtls): update to version 4.1.1 2026-07-23 13:38:24 +08:00
Jin Cheng 7f6c3cbe9c change(bt/bluedroid): increased port low watermark of RFCOMM 
When PORT_RX_BUF_LOW_WM is too low, RFCOMM replenishes credits only
after receiving a relatively large number of packets, which may cause
the peer to exhaust its credits and enter a stop-and-wait state.
Increase the low watermark to replenish credits more promptly and
reduce the likelihood of the peer stalling while waiting for additional
credits.
 2026-07-23 08:08:41 +08:00
Jin Cheng fdcb70e608 fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI 2026-07-23 07:42:23 +08:00
akshat e7013f62f0 bugfix(wifi): Clear Sta TX queue to prevent key 2 send failure 
Also, Ensure correct return values for key 2 and key 4.
 2026-07-22 18:10:00 +05:30
Jiang Jiang Jian 2f5eb98d54 Merge branch 'bugfix/fix_offchan_tx_fail_when_spiram_enabled_v6.0' into 'release/v6.0' 
fix(wifi): fixed the offchan tx fail when SPIRAM_TRY_ALLOCATE_WIFI_LWIP enabled (v6.0)

See merge request espressif/esp-idf!51010
 2026-07-22 16:31:26 +08:00
Jiang Jiang Jian 1396dc9aaa Merge branch 'bugfix/supplicant_crypto_code_correction_v6.0' into 'release/v6.0' 
fix(wpa_supplicant): Correct some functions in crypto porting layer (v6.0)

See merge request espressif/esp-idf!50874
 2026-07-22 16:26:33 +08:00
Astha Verma b338ecaead fix(nimble): Handle Read Remote Supported Features failure correctly 2026-07-22 12:14:58 +05:30
Konstantin Kondrashov 62aa8a8393 fix(bootloader): use correct format specifier for MMU_LL_END_DROM_ENTRY_VADDR 
MMU_LL_END_DROM_ENTRY_VADDR is an int-typed constant on several targets,
so logging it with PRIx32 (uint32_t) triggered -Werror=format=. Use the
plain %x specifier which matches the int type.

Closes https://github.com/espressif/esp-idf/issues/18857
 2026-07-22 09:32:51 +03:00
Wang Meng Yang 3ff120c0c7 Merge branch 'bugfix/hid_host_oob_read_v6.0' into 'release/v6.0' 
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act (v6.0)

See merge request espressif/esp-idf!50972
 2026-07-22 14:10:05 +08:00
nilesh.kale 0a3fe51c69 fix(bootloader_support): enable XTS-AES pseudo rounds for ESP32-P4 
Burn XTS_DPA_PSEUDO_LEVEL efuse on P4 (rev >= 3.0) as done for other targets.
 2026-07-22 14:07:03 +08:00
nilesh.kale 783348ad44 fix(bootloader_support): set SECURE_BOOT_SHA384_EN eFuse on ESP32-P4 
Set SECURE_BOOT_SHA384_EN when enabling ECDSA-P384 Secure Boot V2 on
ESP32-P4, as done on C5/H4/S31, so that ROM verifies the bootloader
using the SHA-384 scheme. The eFuse exists only on the rev >= v3.0
eFuse table, so the Kconfig option is gated on rev >= v3.0.
 2026-07-22 14:07:03 +08:00
nilesh.kale a3ce319a87 fix(esp_rom): correct ESP32-P4 secure boot signature block layout 2026-07-22 14:07:03 +08:00
Island aaaadb64be Merge branch 'fix/ble-log-store-access-fault_v6.0' into 'release/v6.0' 
fix: Ensure BLE Log Global Variables in Internal RAM (6.0)

See merge request espressif/esp-idf!51036
 2026-07-22 14:02:37 +08:00