Commit Graph

54381 Commits

Author SHA1 Message Date
wuzhenghui
6be25041e0 change(esp_hw_support): optimize sleep_phy retention static RAM cost 2026-09-04 18:00:47 +08:00
wuzhenghui
64f8bdd2e1 change(esp_hw_support): optimize retention driver RAM cost 2026-09-04 18:00:35 +08:00
YoungsunLi
344bc35912 fix(esp_lcd): yield from SPI ISR when color trans done callback wakes a task
The return value of on_color_trans_done ("whether a high priority task
has been waken up by this function", see esp_lcd_types.h) was discarded
by the SPI backend. A task unblocked from inside the callback (e.g. via
xSemaphoreGiveFromISR) therefore did not get scheduled until the next
FreeRTOS tick, adding up to 10 ms of latency per color transfer with the
default CONFIG_FREERTOS_HZ=100. The i80 backend already honors the
contract (need_yield -> portYIELD_FROM_ISR); do the same here.
2026-09-04 17:49:55 +08:00
Jiang Jiang Jian
59512efe9c Merge branch 'fix/use_conflict_cb_for_regi2c_when_regdma_rf_is_used_v6.1' into 'release/v6.1'
feat(sleep): applied regi2c conflict process at regdma rf (6.1)

See merge request espressif/esp-idf!52411
2026-09-04 17:17:09 +08:00
morris
7fa9d43d31 Merge branch 'feat/add_timeout_return_for_dsi_panel_v6.1' into 'release/v6.1'
feat(dsi): add timeout check for lp cmd rx (v6.1)

See merge request espressif/esp-idf!52310
2026-09-04 17:05:34 +08:00
Jiang Jiang Jian
d053d8201a Merge branch 'fix/sae_pwe_ecc_fail_v6.1' into 'release/v6.1'
fix(wpa_supplicant): Assign correct return value for SAE y-construction failure (v6.1)

See merge request espressif/esp-idf!52356
2026-09-04 16:58:05 +08:00
Jiang Jiang Jian
e274c801cd Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260831_v6.1' into 'release/v6.1'
feat(tools): update openocd version to v0.12.0-esp32-20260831 (v6.1)

See merge request espressif/esp-idf!52391
2026-09-04 16:48:07 +08:00
Liu Linyan
390a851de5 fix(ble_iso): Avoid posting CIS events in critical section 2026-09-04 16:41:51 +08:00
Mahavir Jain
19e1a190fa Merge branch 'feat/enable_cross_signed_cert_suppport_default_v6.1' into 'release/v6.1'
feat(mbedtls): enable cross signed certificate verification support by default (v6.1)

See merge request espressif/esp-idf!50534
2026-09-04 13:32:49 +05:30
Jiang Jiang Jian
76838eb605 Merge branch 'fix/mbedtls_gcm_multipart_and_ecp_pubkey_v6.1' into 'release/v6.1'
Fix/mbedTLS port layer security fixes (394, 1214, 1206) (v6.1)

See merge request espressif/esp-idf!52194
2026-09-04 16:00:34 +08:00
Jiang Jiang Jian
ae27de122a Merge branch 'contrib/github_pr_18922_v6.1' into 'release/v6.1'
fix(esp_https_server): restore use_secure_element initializer in HTTPD_SSL_CONFIG_DEFAULT() (GitHub PR) (v6.1)

See merge request espressif/esp-idf!52206
2026-09-04 16:00:02 +08:00
Island
5fd4804661 Merge branch 'idf/ble_audio_dynamic_svc_v6.1' into 'release/v6.1'
feat(ble_audio): Backport BLE ISO & BLE Audio MRs to release/v6.1

See merge request espressif/esp-idf!52238
2026-09-04 15:59:13 +08:00
Jiang Jiang Jian
6d6facef39 Merge branch 'stub_bins_for_more_targets_v6.1' into 'release/v6.1'
Increase OCD stub memory reservation from 8K to 12K and extend this feature to more targets (v6.1)

See merge request espressif/esp-idf!51534
2026-09-04 15:55:25 +08:00
ShenWeilong
92f608fc58 fix(ble): fixed porting_btdm compilation issue for esp32-s31/h4 2026-09-04 15:52:17 +08:00
Jiang Jiang Jian
eb0faad47b Merge branch 'fix/httpd-content-length-truncation_v6.1' into 'release/v6.1'
fix(esp_http_server): reject Content-Length above UINT32_MAX (backport v6.1)

See merge request espressif/esp-idf!50492
2026-09-04 15:46:31 +08:00
Jiang Jiang Jian
7b6e1a4ef6 Merge branch 'feat/support_esp32s31_clock_tree_management_v6.1' into 'release/v6.1'
feat: support esp32s31 clock tree management (v6.1)

See merge request espressif/esp-idf!51205
2026-09-04 15:45:46 +08:00
Jiang Jiang Jian
258388a851 Merge branch 'backport/52143-to-release-v6.1' into 'release/v6.1'
fix(wifi): fix wifi wakeup failed from modem state v6.1

See merge request espressif/esp-idf!52385
2026-09-04 15:45:18 +08:00
Jiang Jiang Jian
837f886710 Merge branch 'bugfix/dpp_stray_auth_confirm_v6.1' into 'release/v6.1'
fix(esp_wifi): Harden dpp Auth confirm and drop mismatched auth confirms

See merge request espressif/esp-idf!52311
2026-09-04 15:43:58 +08:00
Wang Meng Yang
ec6c7bea5c Merge branch 'bugfix/delete_unused_avrcp_rcb_v6.1' into 'release/v6.1'
fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails (v6.1)

See merge request espressif/esp-idf!52412
2026-09-04 15:29:42 +08:00
morris
9679b0bc35 Merge branch 'bugfix/uart_extra_current_consumption_in_sleep_v6.1' into 'release/v6.1'
fix(uart): reduce current consumption in sleep mode (v6.1)

See merge request espressif/esp-idf!52344
2026-09-04 14:18:40 +08:00
Mahavir Jain
156d8938f1 Merge branch 'fix/crt-bundle-unaligned-reads_v6.1' into 'release/v6.1'
fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access (v6.1)

See merge request espressif/esp-idf!51723
2026-09-04 11:00:13 +05:30
Mahavir Jain
027c75bb0a Merge branch 'fix/aes_op_zero_buf_check_v6.1' into 'release/v6.1'
fix(mbedtls/aes): reject an all-zero AES block output in the encrypt direction (v6.1)

See merge request espressif/esp-idf!52196
2026-09-04 10:48:08 +05:30
Laukik Hase
dedf93a5e5 fix(esp_tee): Fix AEAD output buffer slicing in the tee_basic example 2026-09-04 10:20:32 +05:30
Laukik Hase
4dd7ac7d73 change(esp_tee): Limit the TEE secure storage AEAD operation input buffer length 2026-09-04 10:20:21 +05:30
Laukik Hase
f8d0bae631 feat(esp_tee): Disable the MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS option for TEE build 2026-09-04 10:20:21 +05:30
Laukik Hase
4057fcda2d fix(esp_tee): Snapshot input arguments in TEE memory before secure service execution 2026-09-04 10:20:21 +05:30
Laukik Hase
02bf7ea021 change(esp_tee): Force non-deterministic ECDSA signing for TEE secure storage keys 2026-09-04 10:20:20 +05:30
Laukik Hase
bc6b8f7fa5 feat(esp_tee): Use CTR-DRBG for assisting random number generation in TEE
- For ESP-TEE, fault-assert in `esp_random()` if the RNG is held in a
  freeze state
2026-09-04 10:20:20 +05:30
Laukik Hase
79751671ce feat(hal): Add LL-API to check whether RNG is enabled
- Also add RNG LL-APIs for ESP32-C61
2026-09-04 10:20:20 +05:30
Laukik Hase
f26c18bd5b fix(esp_tee): Reject re-entrant secure service calls from the REE 2026-09-04 10:20:19 +05:30
Sajia
1b60eab541 refactor(wifi): Improve owe scan time and refactor code 2026-09-04 12:04:43 +08:00
tarun.kumar
4c5df8be98 fix(wifi) : Add scan only parser to show AP full compatibility 2026-09-04 12:04:04 +08:00
tarun.kumar
04f2001014 fix(wifi) : Add validation check in roc and tx_req api's, update doc 2026-09-04 12:03:49 +08:00
tarun.kumar
f30c83058f fix(wifi) : Made changes to scan and doing it group decreasing scan time and increasing throughput 2026-09-04 12:03:38 +08:00
Mahavir Jain
1612b25e70 fix(build): word-align the length symbol of embedded data files
The generated assembly emitted <name>_length immediately after the raw
payload bytes, so the 32-bit word landed misaligned whenever the data
size was not a multiple of 4. Consumers declare it as a 32-bit object
(e.g. `extern const size_t <name>_length` in the ULP firmware loaders),
so the compiler emits an alignment-assuming word load, which is a
misaligned flash read prone to spurious load faults on chips with
SOC_CPU_MISALIGNED_ACCESS_ON_PMP_MISMATCH_ISSUE (ESP32-C6/H2/H21).
2026-09-04 11:51:56 +08:00
Mahavir Jain
e44c357a02 fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access
The offset table and the per-cert length fields of the certificate
bundle were read through uint16_t*/uint32_t* casts, which compile to
halfword/word loads at addresses with no alignment guarantee: bundles
supplied via esp_crt_bundle_set() can start anywhere, and cert entries
are byte-packed, so their 16-bit fields land at arbitrary offsets.

On chips with SOC_CPU_MISALIGNED_ACCESS_ON_PMP_MISMATCH_ISSUE (DIG-694:
ESP32-C6/H2/H21) a misaligned load from memory-mapped flash can take a
spurious "Load access fault" when it sits within two instructions of an
access to a differently-permissioned region, observed as a crash in
esp_crt_check_bundle()/CA callback during TLS handshakes with a bundle
that happened to be placed at an odd address.
2026-09-04 11:51:56 +08:00
Akshat Agrawal
c74d81ab51 fix(wpa_supplicant): Assign correct return value for SAE y-construction failure 2026-09-04 11:44:40 +08:00
Jiang Jiang Jian
9c8d416346 Merge branch 'fix/update_trng_workflow_for_esp32s31_v6.1' into 'release/v6.1'
fix(rng): fix esp_random failed beacuse do not enable RNG clock(v6.1)

See merge request espressif/esp-idf!52317
2026-09-04 11:42:23 +08:00
morris
131a7974ac Merge branch 'feat/atomic-internal_v6.1' into 'release/v6.1'
fix(driver): allocate driver objects containing atomic variables from internal SRAM (v6.1)

See merge request espressif/esp-idf!52340
2026-09-04 11:16:08 +08:00
Shu Chen
7462e1d2e3 Merge branch 'fix/fix_openthread_netif_glue_deinit_issue_v6.1' into 'release/v6.1'
fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup (v6.1)

See merge request espressif/esp-idf!52397
2026-09-04 03:08:09 +00:00
Zhi Wei Jian
5eb72d5eab feat(ble/bluedroid): reject LE re-pairing that weakens an existing bond
Add smp_repairing_is_allowed() behind BT_BLE_SMP_HARDENED_REPAIRING so a
peer cannot replace an existing bond with one that has less MITM
protection, no Secure Connections, or a shorter key. Compare a preceding
Security Request against the pairing command AuthReq, not the
association-model result, and always allow first pairing.

A refusal keeps the stored bond. Pairing-failure erase is split by link
role: default is erase as Central and keep as Peripheral.

Closes BLERP (NDSS 2026) V3, V4 and V6.


(cherry picked from commit 88ea45be73)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-09-04 11:04:00 +08:00
Zhi Wei Jian
5ed6b8dc0c fix(ble/bluedroid): harden LE bond handling across encryption
Keep the existing bond until the new pairing is encrypted, and on encryption
failure drop the link instead of clearing keys. Recovering from a peer that
really deleted the bond is opt-in through BT_BLE_SMP_UNBOND_ON_KEY_MISSING.

Closes BLERP (NDSS 2026) V5, and stops an unauthenticated Pairing Request
from dropping the stored keys (V2 exploitation).


(cherry picked from commit f864615d7d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-09-04 11:03:59 +08:00
Island
6955bf97cb Merge branch 'change/ble_update_lib_20260901_v6.1' into 'release/v6.1'
change(ble): [AUTO_MR] 20260901 - Update ESP BLE Controller Lib (6.1)

See merge request espressif/esp-idf!52285
2026-09-04 10:53:29 +08:00
cjin
df470e9dee feat(sleep): applied regi2c conflict process at regdma rf 2026-09-04 10:51:55 +08:00
cjin
aebcc6842d fix(phy): add fe dependency when enable rf with regdma 2026-09-04 10:51:14 +08:00
cjin
c2a1465dc2 fix(sleep): fix reject trigger when wifi is enabled 2026-09-04 10:51:14 +08:00
zhuanghang
55b00bb1e4 feat(802.15.4): enable switch rf with regdma for 15.4 2026-09-04 10:51:04 +08:00
cjin
275e34f318 fix(phy): added fe set freq reset to rf retention list 2026-09-04 10:27:25 +08:00
cjin
40dbcb9ea6 feat(phy): support retention module for phy FE retgisters 2026-09-04 10:27:25 +08:00
cjin
3c875310d1 feat(modem): add phy retention related api 2026-09-04 10:27:25 +08:00