Commit Graph

50737 Commits

Author SHA1 Message Date
Ashish Sharma
8554f060cc fix(http_request): shifts to HTTP/1.1 in example pytest 2026-06-03 11:31:27 +08:00
Ashish Sharma
0d8ff68f8a fix(esp_crt_bundle): fixes a potential memory leak with cross signed certificates
Closes https://github.com/espressif/esp-idf/issues/18512
Closes https://github.com/espressif/esp-idf/issues/18550
2026-06-03 11:31:27 +08:00
Jiang Jiang Jian
ee92b559f0 Merge branch 'fix-fix_ub_in_gpio_wakeup_setting_v6.0' into 'release/v6.0'
fix(esp_hw_support): add validation for gpio_pin_mask (v6.0)

See merge request espressif/esp-idf!49106
2026-06-03 10:55:54 +08:00
Jiang Jiang Jian
011fee3374 Merge branch 'fix/tls-session-verify-and-hostname-warn_v6.0' into 'release/v6.0'
fix(esp-tls): fix TLS session resumption bypassing CA verification and clarify skip_common_name behavior (v6.0)

See merge request espressif/esp-idf!48929
2026-06-03 10:46:03 +08:00
Jiang Jiang Jian
59032327db Merge branch 'fix/mbedtls-psa-constant-time-and-zeroization_v6.0' into 'release/v6.0'
fix(mbedtls): use constant-time compare for MAC verify and zeroize key material (v6.0)

See merge request espressif/esp-idf!48729
2026-06-02 20:12:59 +08:00
Jiang Jiang Jian
e4cec9653c Merge branch 'fix/mbedtls-psa-hmac-opaque-abort-null-deref_v6.0' into 'release/v6.0'
fix(mbedtls): correct inverted NULL check in esp_hmac_abort_opaque (v6.0)

See merge request espressif/esp-idf!48731
2026-06-02 20:12:37 +08:00
Jiang Jiang Jian
f923b26769 Merge branch 'fix/fix_put_phy_init_bin_into_partiiton_when_embed_v6.0' into 'release/v6.0'
fix(phy): fix still put multiple phy init date bin into flash when...(backport v6.0)

See merge request espressif/esp-idf!49148
2026-06-02 20:11:59 +08:00
yinqingzhao
7e4fbdb971 fix(phy): fix still put multiple phy init date bin into flash when CONFIG_ESP_PHY_MULTIPLE_INIT_DATA_BIN_EMBED is enabled 2026-06-02 12:06:17 +08:00
Jiang Jiang Jian
99a0d1e604 Merge branch 'fix/fix_rtc_spinlock_sleep_dead_lock_v6.0' into 'release/v6.0'
fix(esp_hw_support): fix possible dead lock in deepsleep process (v6.0)

See merge request espressif/esp-idf!49067
2026-06-02 11:25:23 +08:00
wuzhenghui
7cd6206eeb fix(esp_hw_support): add validation for gpio_pin_mask 2026-06-01 19:34:46 +08:00
Jiang Jiang Jian
30e5a5d026 Merge branch 'fix/roam_backoff_reschedule_v6.0' into 'release/v6.0'
Prevent timeout payload double-free on deinit (v6.0)

See merge request espressif/esp-idf!48629
2026-06-01 17:22:26 +08:00
Jiang Jiang Jian
f2b8de2f7b Merge branch 'ci/forced_esptool_install_v6.0' into 'release/v6.0'
CI: Force the update of esptool to the latest dev release in every job (v6.0)

See merge request espressif/esp-idf!48632
2026-06-01 16:16:09 +08:00
Aditya Patwardhan
f77a7d16ec fix(mbedtls): use constant-time compare and zeroize key material
Replace memcmp with mbedtls_ct_memcmp in PSA MAC verify_finish entries
(CMAC, HMAC-transparent, HMAC-opaque) to prevent timing side-channel
MAC forgery, and unconditionally zeroize the locally-computed MAC on
the stack before return so a later stack-disclosure primitive cannot
recover the valid MAC.

Replace bzero with mbedtls_platform_zeroize in AES context free paths.
2026-05-30 23:15:44 +05:30
Aditya Patwardhan
4fb4dbda90 fix(mbedtls): correct inverted NULL check in esp_hmac_abort_opaque
esp_hmac_abort_opaque() had an inverted guard that called
mbedtls_platform_zeroize() on the context only when the context pointer
was NULL, dereferencing NULL and skipping cleanup of valid contexts.

Effect:
* Calling the abort path with a NULL pointer crashes (NULL write)
  instead of being a safe no-op.
* The valid (non-NULL) HMAC opaque operation context is never zeroized
  on abort, leaving sensitive intermediate HMAC state and key handle
  references in operation memory until the buffer is overwritten or
  freed.

Fix: invert the check so zeroization runs only when the context pointer
is non-NULL.
2026-05-30 23:15:42 +05:30
wuzhenghui
12af88b3d9 fix(esp_hw_support): fix possible dead lock in deepsleep process 2026-05-29 21:21:36 +08:00
Jiang Jiang Jian
9d24b38a42 Merge branch 'fix/bring_back_ecjpake_config_v6.0' into 'release/v6.0'
fix(mbedtls): bring back deprecated config MBEDTLS_ECJPAKE_C (v6.0)

See merge request espressif/esp-idf!48623
2026-05-29 17:27:59 +08:00
Jiang Jiang Jian
6bdbae15c9 Merge branch 'fix/protocomm-close-session-id-mismatch_v6.0' into 'release/v6.0'
fix(protocomm): pass current session id when closing existing session (v6.0)

See merge request espressif/esp-idf!48734
2026-05-29 17:26:26 +08:00
Jiang Jiang Jian
43437de360 Merge branch 'bugfix/fix_some_rom_func_ld_issue_v6.0' into 'release/v6.0'
fix(wifi): fix som rom func ld issue(Backport v6.0)

See merge request espressif/esp-idf!49006
2026-05-29 11:37:00 +08:00
Jiang Jiang Jian
3747a7025d Merge branch 'fix/remove_intwdt_config_critical_for_chips_except_esp32_v6.0' into 'release/v6.0'
fix(esp_system): remove intwdt config critical area for chips except esp32 (v6.0)

See merge request espressif/esp-idf!48844
2026-05-29 10:27:59 +08:00
Jiang Jiang Jian
97db803782 Merge branch 'bugfix/hfp_reg_data_cb_v6.0' into 'release/v6.0'
fix: Remove the check for recv and send being NULL(6.0)

See merge request espressif/esp-idf!48615
2026-05-29 10:27:03 +08:00
Mahavir Jain
b31c2753bc Merge branch 'fix/fix_psa_ecdsa_driver_missing_checks_v6.0' into 'release/v6.0'
fix(mbedtls): fixes missing check before ecdsa verify (v6.0)

See merge request espressif/esp-idf!48947
2026-05-28 21:05:31 +05:30
muhaidong
cb733f5287 fix(wifi): fix som rom func ld issue 2026-05-28 16:10:20 +08:00
Jiang Jiang Jian
292d2cf23d Merge branch 'fix/mbedtls-threading-impl-kconfig-v6.0' into 'release/v6.0'
fix(mbedtls): make threading implementation exclusive (v6.0)

See merge request espressif/esp-idf!48850
2026-05-28 10:48:54 +08:00
Jiang Jiang Jian
aeaff69b61 Merge branch 'bugfix/esp_idf_h4_ci_issues_v6.0' into 'release/v6.0'
fix(esp_rom): fix RTC_SLEEP_MODE_REG addr mismatch v6.0

See merge request espressif/esp-idf!48787
2026-05-28 10:34:46 +08:00
Jiang Jiang Jian
3014675c87 Merge branch 'fix/for_cache_after_p4_wb_loss_issue_v6.0' into 'release/v6.0'
fix(esp_rom): avoid critical issue in writeback v6.0

See merge request espressif/esp-idf!48746
2026-05-28 10:34:00 +08:00
Island
bac0d603b9 Merge branch 'change/ble_update_lib_20260520_v6.0' into 'release/v6.0'
change(ble): [AUTO_MR] 20260520 - Update ESP BLE Controller Lib (6.0)

See merge request espressif/esp-idf!48770
2026-05-27 19:00:28 +08:00
harshal.patil
40de3df854 test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver 2026-05-27 11:38:14 +05:30
Ashish Sharma
9de91ed9e5 fix(mbedtls): fixes missing check before ecdsa verify 2026-05-27 11:38:13 +05:30
Aditya Patwardhan
0004544536 fix(esp-tls): clarify skip_common_name and warn when SNI is disabled
The skip_common_name flag was named for the legacy CN field but actually
suppresses the entire mbedtls_ssl_set_hostname() call -- disabling
hostname matching against CN/SAN AND Server Name Indication. Update the
doxygen to describe the real effect, and emit a per-call WARN inside the
SNI-disable branch so debug-only use does not slip into production
unnoticed.
2026-05-26 19:12:27 +05:30
Aditya Patwardhan
15ac4697f3 fix(esp-tls): close CA-verification bypass during session resumption
The session-resumption else-if in set_client_config() short-circuited
the CA verification chain when only client_session was supplied. Remove
the branch so session-only configs fall through to the normal error /
skip-verify path; resumption no longer silently disables CA validation.
2026-05-26 19:12:27 +05:30
ShenWeilong
d1930f9d45 fix(ble): won't add -Wno-unterminated-string-initialization for clang 2026-05-26 17:07:46 +08:00
luoxu
3dd06b7abe fix(bt): Normalize source paths for log compression pattern matching 2026-05-26 13:34:43 +08:00
Roland Dobai
a9df167bf4 ci(gitlab): Use internal Esptool releases in the pipeline 2026-05-25 15:31:52 +02:00
ShenWeilong
d8c912eb4d change(bt): Separated bt/cmakelist to bt/controller/cmakelist and bt/porting/cmakelist 2026-05-25 21:01:21 +08:00
Jiang Guang Ming
da5f99a518 fix(mbedtls): make threading implementation exclusive
Ensure the pthread and alternate threading implementations cannot be enabled at the same time.
2026-05-25 13:52:12 +08:00
wuzhenghui
fcad5f0a1d fix(esp_system): fix build err if int_wdt is not enabled on esp32 2026-05-25 10:35:34 +08:00
wuzhenghui
e99ea90ee8 fix(esp_system): remove intwdt config critical area for chips except esp32 2026-05-25 10:35:30 +08:00
wanglei
66e2d08ed6 feat(esp_rom): do not patch Cache_WriteBack_All for bootloader build 2026-05-22 11:58:28 +08:00
wanglei
1f559a5558 fix(esp_rom): implement cache writeback related apis in iram
avoid critical issues caused by manual cache writeback and conflicting
writes. The issue exist on chips after esp32p4
2026-05-22 10:16:02 +08:00
hebinglin
db3cf7c792 fix(esp_rom): fix RTC_SLEEP_MODE_REG addr mismatch 2026-05-21 15:31:34 +08:00
zhaoweiliang
527c3a0ade change(ble): [AUTO_MR] Update lib_esp32c6 to 4adb29e0 2026-05-21 10:41:15 +08:00
zhaoweiliang
8782647ac7 change(ble): [AUTO_MR] Update lib_esp32c5 to 4adb29e0 2026-05-21 10:40:18 +08:00
zhaoweiliang
a4066942af change(ble): [AUTO_MR] Update lib_esp32h2 to 4adb29e0 2026-05-21 10:37:53 +08:00
Aditya Patwardhan
f7399e0069 fix(protocomm): pass current session id when closing existing session
sec1_new_session()/sec2_new_session() were calling sec*_close_session()
with the *new* session_id parameter instead of the existing
cur_session->id. The close handler validates `cur_session->id ==
session_id` before performing teardown, so the call always failed with
ESP_ERR_INVALID_STATE.

Effect: when a peer started a new provisioning session while another was
already active, the previous session's PSA keys, AES context, SRP handle
and username buffer were leaked instead of being destroyed. The cleared
session struct was overwritten by the new session, leaking the previous
key handles inside PSA Crypto and (for security2) leaking heap memory
for the username and SRP context.

Fix: pass cur_session->id so the close path actually executes the
teardown (psa_destroy_key/psa_cipher_abort/esp_srp_free/free) before the
new session takes over.
2026-05-20 12:37:18 +05:30
Roland Dobai
8ea6271b77 ci(gitlab): Force the update of esptool to the latest dev release 2026-05-18 10:10:46 +02:00
Kapil Gupta
252bb88a33 fix(roaming): prevent timeout payload double-free on deinit
Track timeout user_data before registration, untrack on register failure
2026-05-18 12:56:28 +05:30
yangfeng
001dc26361 fix: Remove the check for recv and send being NULL 2026-05-18 15:13:58 +08:00
Ashish Sharma
7f8dc336a6 fix(mbedtls): bring back deprecated config MBEDTLS_ECJPAKE_C 2026-05-18 14:56:18 +08:00
Jiang Jiang Jian
8f3d8b41c3 Merge branch 'feat/support_esp3261_cert_test_example_v6.0' into 'release/v6.0'
feat(phy): support esp32c61 example cert test and antenna(Backport v6.0)

See merge request espressif/esp-idf!48596
2026-05-16 10:27:40 +08:00
Jiang Jiang Jian
f9f299a9fa Merge branch 'fix/freertos_delete_with_caps_smp_race_v6.0' into 'release/v6.0'
fix(freertos): close vTaskDeleteWithCaps cross-core delete race on SMP preview kernel (v6.0)

See merge request espressif/esp-idf!48600
2026-05-16 10:27:26 +08:00