wuzhenghui
6be25041e0
change(esp_hw_support): optimize sleep_phy retention static RAM cost
2026-09-04 18:00:47 +08:00
wuzhenghui
64f8bdd2e1
change(esp_hw_support): optimize retention driver RAM cost
2026-09-04 18:00:35 +08:00
YoungsunLi
344bc35912
fix(esp_lcd): yield from SPI ISR when color trans done callback wakes a task
...
The return value of on_color_trans_done ("whether a high priority task
has been waken up by this function", see esp_lcd_types.h) was discarded
by the SPI backend. A task unblocked from inside the callback (e.g. via
xSemaphoreGiveFromISR) therefore did not get scheduled until the next
FreeRTOS tick, adding up to 10 ms of latency per color transfer with the
default CONFIG_FREERTOS_HZ=100. The i80 backend already honors the
contract (need_yield -> portYIELD_FROM_ISR); do the same here.
2026-09-04 17:49:55 +08:00
Jiang Jiang Jian
59512efe9c
Merge branch 'fix/use_conflict_cb_for_regi2c_when_regdma_rf_is_used_v6.1' into 'release/v6.1'
...
feat(sleep): applied regi2c conflict process at regdma rf (6.1)
See merge request espressif/esp-idf!52411
2026-09-04 17:17:09 +08:00
morris
7fa9d43d31
Merge branch 'feat/add_timeout_return_for_dsi_panel_v6.1' into 'release/v6.1'
...
feat(dsi): add timeout check for lp cmd rx (v6.1)
See merge request espressif/esp-idf!52310
2026-09-04 17:05:34 +08:00
Jiang Jiang Jian
d053d8201a
Merge branch 'fix/sae_pwe_ecc_fail_v6.1' into 'release/v6.1'
...
fix(wpa_supplicant): Assign correct return value for SAE y-construction failure (v6.1)
See merge request espressif/esp-idf!52356
2026-09-04 16:58:05 +08:00
Jiang Jiang Jian
e274c801cd
Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260831_v6.1' into 'release/v6.1'
...
feat(tools): update openocd version to v0.12.0-esp32-20260831 (v6.1)
See merge request espressif/esp-idf!52391
2026-09-04 16:48:07 +08:00
Liu Linyan
390a851de5
fix(ble_iso): Avoid posting CIS events in critical section
2026-09-04 16:41:51 +08:00
Mahavir Jain
19e1a190fa
Merge branch 'feat/enable_cross_signed_cert_suppport_default_v6.1' into 'release/v6.1'
...
feat(mbedtls): enable cross signed certificate verification support by default (v6.1)
See merge request espressif/esp-idf!50534
2026-09-04 13:32:49 +05:30
Jiang Jiang Jian
76838eb605
Merge branch 'fix/mbedtls_gcm_multipart_and_ecp_pubkey_v6.1' into 'release/v6.1'
...
Fix/mbedTLS port layer security fixes (394, 1214, 1206) (v6.1)
See merge request espressif/esp-idf!52194
2026-09-04 16:00:34 +08:00
Jiang Jiang Jian
ae27de122a
Merge branch 'contrib/github_pr_18922_v6.1' into 'release/v6.1'
...
fix(esp_https_server): restore use_secure_element initializer in HTTPD_SSL_CONFIG_DEFAULT() (GitHub PR) (v6.1)
See merge request espressif/esp-idf!52206
2026-09-04 16:00:02 +08:00
Island
5fd4804661
Merge branch 'idf/ble_audio_dynamic_svc_v6.1' into 'release/v6.1'
...
feat(ble_audio): Backport BLE ISO & BLE Audio MRs to release/v6.1
See merge request espressif/esp-idf!52238
2026-09-04 15:59:13 +08:00
Jiang Jiang Jian
6d6facef39
Merge branch 'stub_bins_for_more_targets_v6.1' into 'release/v6.1'
...
Increase OCD stub memory reservation from 8K to 12K and extend this feature to more targets (v6.1)
See merge request espressif/esp-idf!51534
2026-09-04 15:55:25 +08:00
ShenWeilong
92f608fc58
fix(ble): fixed porting_btdm compilation issue for esp32-s31/h4
2026-09-04 15:52:17 +08:00
Jiang Jiang Jian
eb0faad47b
Merge branch 'fix/httpd-content-length-truncation_v6.1' into 'release/v6.1'
...
fix(esp_http_server): reject Content-Length above UINT32_MAX (backport v6.1)
See merge request espressif/esp-idf!50492
2026-09-04 15:46:31 +08:00
Jiang Jiang Jian
7b6e1a4ef6
Merge branch 'feat/support_esp32s31_clock_tree_management_v6.1' into 'release/v6.1'
...
feat: support esp32s31 clock tree management (v6.1)
See merge request espressif/esp-idf!51205
2026-09-04 15:45:46 +08:00
Jiang Jiang Jian
258388a851
Merge branch 'backport/52143-to-release-v6.1' into 'release/v6.1'
...
fix(wifi): fix wifi wakeup failed from modem state v6.1
See merge request espressif/esp-idf!52385
2026-09-04 15:45:18 +08:00
Jiang Jiang Jian
837f886710
Merge branch 'bugfix/dpp_stray_auth_confirm_v6.1' into 'release/v6.1'
...
fix(esp_wifi): Harden dpp Auth confirm and drop mismatched auth confirms
See merge request espressif/esp-idf!52311
2026-09-04 15:43:58 +08:00
Wang Meng Yang
ec6c7bea5c
Merge branch 'bugfix/delete_unused_avrcp_rcb_v6.1' into 'release/v6.1'
...
fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails (v6.1)
See merge request espressif/esp-idf!52412
2026-09-04 15:29:42 +08:00
morris
9679b0bc35
Merge branch 'bugfix/uart_extra_current_consumption_in_sleep_v6.1' into 'release/v6.1'
...
fix(uart): reduce current consumption in sleep mode (v6.1)
See merge request espressif/esp-idf!52344
2026-09-04 14:18:40 +08:00
Mahavir Jain
156d8938f1
Merge branch 'fix/crt-bundle-unaligned-reads_v6.1' into 'release/v6.1'
...
fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access (v6.1)
See merge request espressif/esp-idf!51723
2026-09-04 11:00:13 +05:30
Mahavir Jain
027c75bb0a
Merge branch 'fix/aes_op_zero_buf_check_v6.1' into 'release/v6.1'
...
fix(mbedtls/aes): reject an all-zero AES block output in the encrypt direction (v6.1)
See merge request espressif/esp-idf!52196
2026-09-04 10:48:08 +05:30
Laukik Hase
dedf93a5e5
fix(esp_tee): Fix AEAD output buffer slicing in the tee_basic example
2026-09-04 10:20:32 +05:30
Laukik Hase
4dd7ac7d73
change(esp_tee): Limit the TEE secure storage AEAD operation input buffer length
2026-09-04 10:20:21 +05:30
Laukik Hase
f8d0bae631
feat(esp_tee): Disable the MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS option for TEE build
2026-09-04 10:20:21 +05:30
Laukik Hase
4057fcda2d
fix(esp_tee): Snapshot input arguments in TEE memory before secure service execution
2026-09-04 10:20:21 +05:30
Laukik Hase
02bf7ea021
change(esp_tee): Force non-deterministic ECDSA signing for TEE secure storage keys
2026-09-04 10:20:20 +05:30
Laukik Hase
bc6b8f7fa5
feat(esp_tee): Use CTR-DRBG for assisting random number generation in TEE
...
- For ESP-TEE, fault-assert in `esp_random()` if the RNG is held in a
freeze state
2026-09-04 10:20:20 +05:30
Laukik Hase
79751671ce
feat(hal): Add LL-API to check whether RNG is enabled
...
- Also add RNG LL-APIs for ESP32-C61
2026-09-04 10:20:20 +05:30
Laukik Hase
f26c18bd5b
fix(esp_tee): Reject re-entrant secure service calls from the REE
2026-09-04 10:20:19 +05:30
Sajia
1b60eab541
refactor(wifi): Improve owe scan time and refactor code
2026-09-04 12:04:43 +08:00
tarun.kumar
4c5df8be98
fix(wifi) : Add scan only parser to show AP full compatibility
2026-09-04 12:04:04 +08:00
tarun.kumar
04f2001014
fix(wifi) : Add validation check in roc and tx_req api's, update doc
2026-09-04 12:03:49 +08:00
tarun.kumar
f30c83058f
fix(wifi) : Made changes to scan and doing it group decreasing scan time and increasing throughput
2026-09-04 12:03:38 +08:00
Mahavir Jain
1612b25e70
fix(build): word-align the length symbol of embedded data files
...
The generated assembly emitted <name>_length immediately after the raw
payload bytes, so the 32-bit word landed misaligned whenever the data
size was not a multiple of 4. Consumers declare it as a 32-bit object
(e.g. `extern const size_t <name>_length` in the ULP firmware loaders),
so the compiler emits an alignment-assuming word load, which is a
misaligned flash read prone to spurious load faults on chips with
SOC_CPU_MISALIGNED_ACCESS_ON_PMP_MISMATCH_ISSUE (ESP32-C6/H2/H21).
2026-09-04 11:51:56 +08:00
Mahavir Jain
e44c357a02
fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access
...
The offset table and the per-cert length fields of the certificate
bundle were read through uint16_t*/uint32_t* casts, which compile to
halfword/word loads at addresses with no alignment guarantee: bundles
supplied via esp_crt_bundle_set() can start anywhere, and cert entries
are byte-packed, so their 16-bit fields land at arbitrary offsets.
On chips with SOC_CPU_MISALIGNED_ACCESS_ON_PMP_MISMATCH_ISSUE (DIG-694:
ESP32-C6/H2/H21) a misaligned load from memory-mapped flash can take a
spurious "Load access fault" when it sits within two instructions of an
access to a differently-permissioned region, observed as a crash in
esp_crt_check_bundle()/CA callback during TLS handshakes with a bundle
that happened to be placed at an odd address.
2026-09-04 11:51:56 +08:00
Akshat Agrawal
c74d81ab51
fix(wpa_supplicant): Assign correct return value for SAE y-construction failure
2026-09-04 11:44:40 +08:00
Jiang Jiang Jian
9c8d416346
Merge branch 'fix/update_trng_workflow_for_esp32s31_v6.1' into 'release/v6.1'
...
fix(rng): fix esp_random failed beacuse do not enable RNG clock(v6.1)
See merge request espressif/esp-idf!52317
2026-09-04 11:42:23 +08:00
morris
131a7974ac
Merge branch 'feat/atomic-internal_v6.1' into 'release/v6.1'
...
fix(driver): allocate driver objects containing atomic variables from internal SRAM (v6.1)
See merge request espressif/esp-idf!52340
2026-09-04 11:16:08 +08:00
Shu Chen
7462e1d2e3
Merge branch 'fix/fix_openthread_netif_glue_deinit_issue_v6.1' into 'release/v6.1'
...
fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup (v6.1)
See merge request espressif/esp-idf!52397
2026-09-04 03:08:09 +00:00
Zhi Wei Jian
5eb72d5eab
feat(ble/bluedroid): reject LE re-pairing that weakens an existing bond
...
Add smp_repairing_is_allowed() behind BT_BLE_SMP_HARDENED_REPAIRING so a
peer cannot replace an existing bond with one that has less MITM
protection, no Secure Connections, or a shorter key. Compare a preceding
Security Request against the pairing command AuthReq, not the
association-model result, and always allow first pairing.
A refusal keeps the stored bond. Pairing-failure erase is split by link
role: default is erase as Central and keep as Peripheral.
Closes BLERP (NDSS 2026) V3, V4 and V6.
(cherry picked from commit 88ea45be73 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-09-04 11:04:00 +08:00
Zhi Wei Jian
5ed6b8dc0c
fix(ble/bluedroid): harden LE bond handling across encryption
...
Keep the existing bond until the new pairing is encrypted, and on encryption
failure drop the link instead of clearing keys. Recovering from a peer that
really deleted the bond is opt-in through BT_BLE_SMP_UNBOND_ON_KEY_MISSING.
Closes BLERP (NDSS 2026) V5, and stops an unauthenticated Pairing Request
from dropping the stored keys (V2 exploitation).
(cherry picked from commit f864615d7d )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-09-04 11:03:59 +08:00
Island
6955bf97cb
Merge branch 'change/ble_update_lib_20260901_v6.1' into 'release/v6.1'
...
change(ble): [AUTO_MR] 20260901 - Update ESP BLE Controller Lib (6.1)
See merge request espressif/esp-idf!52285
2026-09-04 10:53:29 +08:00
cjin
df470e9dee
feat(sleep): applied regi2c conflict process at regdma rf
2026-09-04 10:51:55 +08:00
cjin
aebcc6842d
fix(phy): add fe dependency when enable rf with regdma
2026-09-04 10:51:14 +08:00
cjin
c2a1465dc2
fix(sleep): fix reject trigger when wifi is enabled
2026-09-04 10:51:14 +08:00
zhuanghang
55b00bb1e4
feat(802.15.4): enable switch rf with regdma for 15.4
2026-09-04 10:51:04 +08:00
cjin
275e34f318
fix(phy): added fe set freq reset to rf retention list
2026-09-04 10:27:25 +08:00
cjin
40dbcb9ea6
feat(phy): support retention module for phy FE retgisters
2026-09-04 10:27:25 +08:00
cjin
3c875310d1
feat(modem): add phy retention related api
2026-09-04 10:27:25 +08:00