Ashish Sharma
8554f060cc
fix(http_request): shifts to HTTP/1.1 in example pytest
2026-06-03 11:31:27 +08:00
Ashish Sharma
0d8ff68f8a
fix(esp_crt_bundle): fixes a potential memory leak with cross signed certificates
...
Closes https://github.com/espressif/esp-idf/issues/18512
Closes https://github.com/espressif/esp-idf/issues/18550
2026-06-03 11:31:27 +08:00
Jiang Jiang Jian
ee92b559f0
Merge branch 'fix-fix_ub_in_gpio_wakeup_setting_v6.0' into 'release/v6.0'
...
fix(esp_hw_support): add validation for gpio_pin_mask (v6.0)
See merge request espressif/esp-idf!49106
2026-06-03 10:55:54 +08:00
Jiang Jiang Jian
011fee3374
Merge branch 'fix/tls-session-verify-and-hostname-warn_v6.0' into 'release/v6.0'
...
fix(esp-tls): fix TLS session resumption bypassing CA verification and clarify skip_common_name behavior (v6.0)
See merge request espressif/esp-idf!48929
2026-06-03 10:46:03 +08:00
Jiang Jiang Jian
59032327db
Merge branch 'fix/mbedtls-psa-constant-time-and-zeroization_v6.0' into 'release/v6.0'
...
fix(mbedtls): use constant-time compare for MAC verify and zeroize key material (v6.0)
See merge request espressif/esp-idf!48729
2026-06-02 20:12:59 +08:00
Jiang Jiang Jian
e4cec9653c
Merge branch 'fix/mbedtls-psa-hmac-opaque-abort-null-deref_v6.0' into 'release/v6.0'
...
fix(mbedtls): correct inverted NULL check in esp_hmac_abort_opaque (v6.0)
See merge request espressif/esp-idf!48731
2026-06-02 20:12:37 +08:00
Jiang Jiang Jian
f923b26769
Merge branch 'fix/fix_put_phy_init_bin_into_partiiton_when_embed_v6.0' into 'release/v6.0'
...
fix(phy): fix still put multiple phy init date bin into flash when...(backport v6.0)
See merge request espressif/esp-idf!49148
2026-06-02 20:11:59 +08:00
yinqingzhao
7e4fbdb971
fix(phy): fix still put multiple phy init date bin into flash when CONFIG_ESP_PHY_MULTIPLE_INIT_DATA_BIN_EMBED is enabled
2026-06-02 12:06:17 +08:00
Jiang Jiang Jian
99a0d1e604
Merge branch 'fix/fix_rtc_spinlock_sleep_dead_lock_v6.0' into 'release/v6.0'
...
fix(esp_hw_support): fix possible dead lock in deepsleep process (v6.0)
See merge request espressif/esp-idf!49067
2026-06-02 11:25:23 +08:00
wuzhenghui
7cd6206eeb
fix(esp_hw_support): add validation for gpio_pin_mask
2026-06-01 19:34:46 +08:00
Jiang Jiang Jian
30e5a5d026
Merge branch 'fix/roam_backoff_reschedule_v6.0' into 'release/v6.0'
...
Prevent timeout payload double-free on deinit (v6.0)
See merge request espressif/esp-idf!48629
2026-06-01 17:22:26 +08:00
Jiang Jiang Jian
f2b8de2f7b
Merge branch 'ci/forced_esptool_install_v6.0' into 'release/v6.0'
...
CI: Force the update of esptool to the latest dev release in every job (v6.0)
See merge request espressif/esp-idf!48632
2026-06-01 16:16:09 +08:00
Aditya Patwardhan
f77a7d16ec
fix(mbedtls): use constant-time compare and zeroize key material
...
Replace memcmp with mbedtls_ct_memcmp in PSA MAC verify_finish entries
(CMAC, HMAC-transparent, HMAC-opaque) to prevent timing side-channel
MAC forgery, and unconditionally zeroize the locally-computed MAC on
the stack before return so a later stack-disclosure primitive cannot
recover the valid MAC.
Replace bzero with mbedtls_platform_zeroize in AES context free paths.
2026-05-30 23:15:44 +05:30
Aditya Patwardhan
4fb4dbda90
fix(mbedtls): correct inverted NULL check in esp_hmac_abort_opaque
...
esp_hmac_abort_opaque() had an inverted guard that called
mbedtls_platform_zeroize() on the context only when the context pointer
was NULL, dereferencing NULL and skipping cleanup of valid contexts.
Effect:
* Calling the abort path with a NULL pointer crashes (NULL write)
instead of being a safe no-op.
* The valid (non-NULL) HMAC opaque operation context is never zeroized
on abort, leaving sensitive intermediate HMAC state and key handle
references in operation memory until the buffer is overwritten or
freed.
Fix: invert the check so zeroization runs only when the context pointer
is non-NULL.
2026-05-30 23:15:42 +05:30
wuzhenghui
12af88b3d9
fix(esp_hw_support): fix possible dead lock in deepsleep process
2026-05-29 21:21:36 +08:00
Jiang Jiang Jian
9d24b38a42
Merge branch 'fix/bring_back_ecjpake_config_v6.0' into 'release/v6.0'
...
fix(mbedtls): bring back deprecated config MBEDTLS_ECJPAKE_C (v6.0)
See merge request espressif/esp-idf!48623
2026-05-29 17:27:59 +08:00
Jiang Jiang Jian
6bdbae15c9
Merge branch 'fix/protocomm-close-session-id-mismatch_v6.0' into 'release/v6.0'
...
fix(protocomm): pass current session id when closing existing session (v6.0)
See merge request espressif/esp-idf!48734
2026-05-29 17:26:26 +08:00
Jiang Jiang Jian
43437de360
Merge branch 'bugfix/fix_some_rom_func_ld_issue_v6.0' into 'release/v6.0'
...
fix(wifi): fix som rom func ld issue(Backport v6.0)
See merge request espressif/esp-idf!49006
2026-05-29 11:37:00 +08:00
Jiang Jiang Jian
3747a7025d
Merge branch 'fix/remove_intwdt_config_critical_for_chips_except_esp32_v6.0' into 'release/v6.0'
...
fix(esp_system): remove intwdt config critical area for chips except esp32 (v6.0)
See merge request espressif/esp-idf!48844
2026-05-29 10:27:59 +08:00
Jiang Jiang Jian
97db803782
Merge branch 'bugfix/hfp_reg_data_cb_v6.0' into 'release/v6.0'
...
fix: Remove the check for recv and send being NULL(6.0)
See merge request espressif/esp-idf!48615
2026-05-29 10:27:03 +08:00
Mahavir Jain
b31c2753bc
Merge branch 'fix/fix_psa_ecdsa_driver_missing_checks_v6.0' into 'release/v6.0'
...
fix(mbedtls): fixes missing check before ecdsa verify (v6.0)
See merge request espressif/esp-idf!48947
2026-05-28 21:05:31 +05:30
muhaidong
cb733f5287
fix(wifi): fix som rom func ld issue
2026-05-28 16:10:20 +08:00
Jiang Jiang Jian
292d2cf23d
Merge branch 'fix/mbedtls-threading-impl-kconfig-v6.0' into 'release/v6.0'
...
fix(mbedtls): make threading implementation exclusive (v6.0)
See merge request espressif/esp-idf!48850
2026-05-28 10:48:54 +08:00
Jiang Jiang Jian
aeaff69b61
Merge branch 'bugfix/esp_idf_h4_ci_issues_v6.0' into 'release/v6.0'
...
fix(esp_rom): fix RTC_SLEEP_MODE_REG addr mismatch v6.0
See merge request espressif/esp-idf!48787
2026-05-28 10:34:46 +08:00
Jiang Jiang Jian
3014675c87
Merge branch 'fix/for_cache_after_p4_wb_loss_issue_v6.0' into 'release/v6.0'
...
fix(esp_rom): avoid critical issue in writeback v6.0
See merge request espressif/esp-idf!48746
2026-05-28 10:34:00 +08:00
Island
bac0d603b9
Merge branch 'change/ble_update_lib_20260520_v6.0' into 'release/v6.0'
...
change(ble): [AUTO_MR] 20260520 - Update ESP BLE Controller Lib (6.0)
See merge request espressif/esp-idf!48770
2026-05-27 19:00:28 +08:00
harshal.patil
40de3df854
test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver
2026-05-27 11:38:14 +05:30
Ashish Sharma
9de91ed9e5
fix(mbedtls): fixes missing check before ecdsa verify
2026-05-27 11:38:13 +05:30
Aditya Patwardhan
0004544536
fix(esp-tls): clarify skip_common_name and warn when SNI is disabled
...
The skip_common_name flag was named for the legacy CN field but actually
suppresses the entire mbedtls_ssl_set_hostname() call -- disabling
hostname matching against CN/SAN AND Server Name Indication. Update the
doxygen to describe the real effect, and emit a per-call WARN inside the
SNI-disable branch so debug-only use does not slip into production
unnoticed.
2026-05-26 19:12:27 +05:30
Aditya Patwardhan
15ac4697f3
fix(esp-tls): close CA-verification bypass during session resumption
...
The session-resumption else-if in set_client_config() short-circuited
the CA verification chain when only client_session was supplied. Remove
the branch so session-only configs fall through to the normal error /
skip-verify path; resumption no longer silently disables CA validation.
2026-05-26 19:12:27 +05:30
ShenWeilong
d1930f9d45
fix(ble): won't add -Wno-unterminated-string-initialization for clang
2026-05-26 17:07:46 +08:00
luoxu
3dd06b7abe
fix(bt): Normalize source paths for log compression pattern matching
2026-05-26 13:34:43 +08:00
Roland Dobai
a9df167bf4
ci(gitlab): Use internal Esptool releases in the pipeline
2026-05-25 15:31:52 +02:00
ShenWeilong
d8c912eb4d
change(bt): Separated bt/cmakelist to bt/controller/cmakelist and bt/porting/cmakelist
2026-05-25 21:01:21 +08:00
Jiang Guang Ming
da5f99a518
fix(mbedtls): make threading implementation exclusive
...
Ensure the pthread and alternate threading implementations cannot be enabled at the same time.
2026-05-25 13:52:12 +08:00
wuzhenghui
fcad5f0a1d
fix(esp_system): fix build err if int_wdt is not enabled on esp32
2026-05-25 10:35:34 +08:00
wuzhenghui
e99ea90ee8
fix(esp_system): remove intwdt config critical area for chips except esp32
2026-05-25 10:35:30 +08:00
wanglei
66e2d08ed6
feat(esp_rom): do not patch Cache_WriteBack_All for bootloader build
2026-05-22 11:58:28 +08:00
wanglei
1f559a5558
fix(esp_rom): implement cache writeback related apis in iram
...
avoid critical issues caused by manual cache writeback and conflicting
writes. The issue exist on chips after esp32p4
2026-05-22 10:16:02 +08:00
hebinglin
db3cf7c792
fix(esp_rom): fix RTC_SLEEP_MODE_REG addr mismatch
2026-05-21 15:31:34 +08:00
zhaoweiliang
527c3a0ade
change(ble): [AUTO_MR] Update lib_esp32c6 to 4adb29e0
2026-05-21 10:41:15 +08:00
zhaoweiliang
8782647ac7
change(ble): [AUTO_MR] Update lib_esp32c5 to 4adb29e0
2026-05-21 10:40:18 +08:00
zhaoweiliang
a4066942af
change(ble): [AUTO_MR] Update lib_esp32h2 to 4adb29e0
2026-05-21 10:37:53 +08:00
Aditya Patwardhan
f7399e0069
fix(protocomm): pass current session id when closing existing session
...
sec1_new_session()/sec2_new_session() were calling sec*_close_session()
with the *new* session_id parameter instead of the existing
cur_session->id. The close handler validates `cur_session->id ==
session_id` before performing teardown, so the call always failed with
ESP_ERR_INVALID_STATE.
Effect: when a peer started a new provisioning session while another was
already active, the previous session's PSA keys, AES context, SRP handle
and username buffer were leaked instead of being destroyed. The cleared
session struct was overwritten by the new session, leaking the previous
key handles inside PSA Crypto and (for security2) leaking heap memory
for the username and SRP context.
Fix: pass cur_session->id so the close path actually executes the
teardown (psa_destroy_key/psa_cipher_abort/esp_srp_free/free) before the
new session takes over.
2026-05-20 12:37:18 +05:30
Roland Dobai
8ea6271b77
ci(gitlab): Force the update of esptool to the latest dev release
2026-05-18 10:10:46 +02:00
Kapil Gupta
252bb88a33
fix(roaming): prevent timeout payload double-free on deinit
...
Track timeout user_data before registration, untrack on register failure
2026-05-18 12:56:28 +05:30
yangfeng
001dc26361
fix: Remove the check for recv and send being NULL
2026-05-18 15:13:58 +08:00
Ashish Sharma
7f8dc336a6
fix(mbedtls): bring back deprecated config MBEDTLS_ECJPAKE_C
2026-05-18 14:56:18 +08:00
Jiang Jiang Jian
8f3d8b41c3
Merge branch 'feat/support_esp3261_cert_test_example_v6.0' into 'release/v6.0'
...
feat(phy): support esp32c61 example cert test and antenna(Backport v6.0)
See merge request espressif/esp-idf!48596
2026-05-16 10:27:40 +08:00
Jiang Jiang Jian
f9f299a9fa
Merge branch 'fix/freertos_delete_with_caps_smp_race_v6.0' into 'release/v6.0'
...
fix(freertos): close vTaskDeleteWithCaps cross-core delete race on SMP preview kernel (v6.0)
See merge request espressif/esp-idf!48600
2026-05-16 10:27:26 +08:00