Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 03:00:34 +03:00
Code Issues Packages Projects Releases Wiki Activity
44,140 Commits 25 Branches 192 Tags
88b6c3ea009def4eace98963eec4a9b2bebb0154
Commit Graph
30330 Commits
Author SHA1 Message Date
Tan Yan Quan b1f0a0cb78 feat(openthread): update OT upstream to a12ff0d0f 2025-12-24 16:33:00 +08:00
Rahul Tank 84abf868d1 Merge branch 'fix/gatt_caching_clean_api_malloc_error_v5.4' into 'release/v5.4' 
fix(nimble): Modify GATT data storage structure in NVS during caching (v5.4)

See merge request espressif/esp-idf!42577
 2025-12-24 13:01:13 +05:30
Sudeep Mohanty ce8b1c5a9d fix(freertos): Added stability fixes to tick hook test 2025-12-24 08:15:21 +01:00
Wang Meng Yang 2f648afdde Merge branch 'change/bt_bluedroid_avrcp_version_v5.4' into 'release/v5.4' 
change(bt/bluedroid): Change AVRCP version according to feature enabled (v5.4)

See merge request espressif/esp-idf!44201
 2025-12-24 14:12:15 +08:00
Zhang Wen Xu cd08d85ba6 Merge branch 'feat/rcp_spinel_logs_v5.4' into 'release/v5.4' 
feat(openthread): support RCP console debug via spinel (v5.4)

See merge request espressif/esp-idf!44157
 2025-12-24 02:30:12 +00:00
Rahul Tank e313ab4487 Merge branch 'bugfix/bug_bounty_ble_issue_v5.4' into 'release/v5.4' 
fix(protocomm): Add security checks for buffer overflow and incorrect length handling (v5.4)

See merge request espressif/esp-idf!44297
 2025-12-23 22:56:15 +05:30
Astha Verma 4bcdbb90c5 fix(nimble): Modify GATT data storage structure in NVS during gatt caching 2025-12-23 21:24:30 +05:30
Rahul Tank 894c28afe3 fix(protocomm): Add security checks for buffer overflow and incorrect length handling 2025-12-23 18:22:34 +08:00
Sudeep Mohanty 8dfab8cb9b test(freertos): Added stability fixes to the delete blocked tasks test 2025-12-23 09:45:11 +01:00
Sudeep Mohanty 20ec56e6e4 test(freertos): Fix race condition in suspend-resume tests 
This commit fixes a race condition in suspend-resume tests where in
a test task could escape deletion and result in a memory leak after test
completion.
 2025-12-23 09:39:34 +01:00
Rahul Tank 9e157e314a feat(nimble): Add support for static passkey 2025-12-22 21:16:35 +05:30
Island acfd7827b5 Merge branch 'fix/ble_mesh_trans_enh_seg_rpl_v5.4' into 'release/v5.4' 
fix(ble_mesh): fixed incorrect rpl behavior in transport enh (v5.4)

See merge request espressif/esp-idf!44387
 2025-12-22 14:30:19 +08:00
Wang Meng Yang e745ce4473 Merge branch 'bugfix/sync_security_fix_from_flouride_v5.4' into 'release/v5.4' 
fix: synchronized several security-related fixes from Google Fluoride (v5.4)

See merge request espressif/esp-idf!44408
 2025-12-22 11:23:22 +08:00
Jin Cheng 0fb6be8d87 fix(bt/bluedroid): cleaned the code according to the tool cppcheck 2025-12-19 17:02:01 +08:00
Jin Cheng caf1c72daf fix(bt/bluedroid): fixed possible OOB read in smp_br_data_received 2025-12-19 17:01:59 +08:00
Jin Cheng 4e708d2ef2 fix(bt/bluedroid): drop connection when atttempting to disable encryption 2025-12-19 17:01:56 +08:00
Jin Cheng 8f6e0b5a37 fix(bt/bluedroid): fixed an integer overflow bug in attp_build_read_multi_cmd 2025-12-19 17:01:54 +08:00
Jin Cheng fe6cf47013 fix(bt/bluedroid): fixed an integer overflow bug in avdt_msg_asmbl 2025-12-19 17:01:52 +08:00
Jin Cheng 351d21ccf0 fix(bt/bluedroid): fixed an OOB bug in bta_av_setconfig_rej 2025-12-19 17:01:47 +08:00
Island 40137177ac Merge branch 'fix/ble_log_v2_dual_core_iwt_v5.4' into 'release/v5.4' 
fix(ble): added missed spin lock initialization (v5.4)

See merge request espressif/esp-idf!44380
 2025-12-19 15:10:51 +08:00
Island 084aca1af1 Merge branch 'feat/ble_mesh_dfu_supported_v5.4' into 'release/v5.4' 
Feat/ble mesh dfu supported v5.4

See merge request espressif/esp-idf!44129
 2025-12-19 14:39:35 +08:00
Island 63bc003841 Merge branch 'feature/extend_h2_conon_num_to_70_v5.4' into 'release/v5.4' 
change(ble): Updated the maximum number of concurrent connections to 70 on ESP32-H2 (v5.4)

See merge request espressif/esp-idf!43834
 2025-12-19 14:31:56 +08:00
Jin Cheng cec99a9f9a fix(bt/bluedroid): fixed an OOB bug in btm_read_rssi_complete 2025-12-19 11:20:20 +08:00
Jin Cheng 97e382b1b0 fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete 2025-12-19 11:20:20 +08:00
Jin Cheng 558e02999b fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete 2025-12-19 11:20:20 +08:00
Jin Cheng 4a5656b964 fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete 2025-12-19 11:20:20 +08:00
Jin Cheng 89dbbc6f37 fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete 2025-12-19 11:20:20 +08:00
Jin Cheng 6d393a43ba fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute 2025-12-19 11:20:20 +08:00
Jin Cheng dc8db250f7 fix(bt/bluedroid): report failure when not able to connect to AVRCP 2025-12-19 11:20:20 +08:00
Jin Cheng cca774644e fix(bt/bluedroid): fixed buffer overflow in BRSF 2025-12-19 11:20:20 +08:00
Jin Cheng 83a2690415 fix(bt/bluedroid): added negative length check in process_service_search_rsp 2025-12-19 11:20:20 +08:00
Jin Cheng 611d1236af fix(bt/bluedroid): fixed OOB read in SDP server continuation length 2025-12-19 11:20:20 +08:00
Jin Cheng 4d3b4c1d35 fix(bt/bluedroid): added length check when copy AVDTP packet 2025-12-19 11:20:20 +08:00
Jin Cheng 90049aa7f6 fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET 2025-12-19 11:20:20 +08:00
Jin Cheng 081aa31e62 fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item 2025-12-19 11:20:20 +08:00
Jin Cheng b59d0541a9 fix(bt/bluedroid): added boundary check when reading SDP attribute response packet 2025-12-19 11:20:20 +08:00
Jin Cheng 866130578f fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp 2025-12-19 11:20:15 +08:00
Jin Cheng d6e6b14236 fix(bt/bluedroid): fixed potential OOB read in the reporting handler 
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
 2025-12-19 11:19:23 +08:00
Jin Cheng 5bc344f900 fix(bt/bluedroid): fixed a potential overflow about the media payload offset 
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
 2025-12-19 11:19:23 +08:00
Jin Cheng 3619e43002 fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open 2025-12-19 11:19:23 +08:00
Jin Cheng f7058fa32e fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected 2025-12-19 11:19:23 +08:00
Jin Cheng 0028cb326a fix(bt/bluedroid): reject device with same address in legacy paring 2025-12-19 11:19:23 +08:00
Jin Cheng 073965fd31 fix(bt/bluedroid): ignore AVCT commands that are too long 2025-12-19 11:19:23 +08:00
Jin Cheng 648f0396b8 fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP 2025-12-19 11:19:23 +08:00
Jin Cheng 0b8f1f0b0c fix(bt/bluedroid): make sure SDP only start discovery once 2025-12-19 11:19:23 +08:00
Jin Cheng 44b566ab5e fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write 2025-12-19 11:19:23 +08:00
Jin Cheng bcdca970d4 fix(bt/blurdoird): check Classic key before cross-key derivation 2025-12-19 11:19:23 +08:00
Jin Cheng 8e354a7541 fix(bt/blurdoird): enable bitpool snity checks 2025-12-19 11:19:23 +08:00
Alexey Gerenkov ef0a445665 Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20251215_v5.4' into 'release/v5.4' 
feat(tools): update openocd version to v0.12.0-esp32-20251215 (v5.4)

See merge request espressif/esp-idf!44312
 2025-12-19 11:06:11 +08:00
Luo Xu 9592fcf3e2 fix(ble_mesh): fixed incorrect rpl behavior in transport enh 
(cherry picked from commit 29a722296f)

Co-authored-by: luoxu <luoxu@espressif.com>
 2025-12-18 17:43:14 +08:00