Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-08-18 06:35:35 +03:00
Code Issues Packages Projects Releases Wiki Activity
44,036 Commits 25 Branches 187 Tags
89dbbc6f375b90a5ca4daa687f7d4ed2f6267dbe
Commit Graph

44036 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jin Cheng
89dbbc6f37 fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete 2025-12-19 11:20:20 +08:00
Jin Cheng
6d393a43ba fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute 2025-12-19 11:20:20 +08:00
Jin Cheng
dc8db250f7 fix(bt/bluedroid): report failure when not able to connect to AVRCP 2025-12-19 11:20:20 +08:00
Jin Cheng
cca774644e fix(bt/bluedroid): fixed buffer overflow in BRSF 2025-12-19 11:20:20 +08:00
Jin Cheng
83a2690415 fix(bt/bluedroid): added negative length check in process_service_search_rsp 2025-12-19 11:20:20 +08:00
Jin Cheng
611d1236af fix(bt/bluedroid): fixed OOB read in SDP server continuation length 2025-12-19 11:20:20 +08:00
Jin Cheng
4d3b4c1d35 fix(bt/bluedroid): added length check when copy AVDTP packet 2025-12-19 11:20:20 +08:00
Jin Cheng
90049aa7f6 fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET 2025-12-19 11:20:20 +08:00
Jin Cheng
081aa31e62 fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item 2025-12-19 11:20:20 +08:00
Jin Cheng
b59d0541a9 fix(bt/bluedroid): added boundary check when reading SDP attribute response packet 2025-12-19 11:20:20 +08:00
Jin Cheng
866130578f fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp 2025-12-19 11:20:15 +08:00
Jin Cheng
d6e6b14236 fix(bt/bluedroid): fixed potential OOB read in the reporting handler 
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
 2025-12-19 11:19:23 +08:00
Jin Cheng
5bc344f900 fix(bt/bluedroid): fixed a potential overflow about the media payload offset 
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
 2025-12-19 11:19:23 +08:00
Jin Cheng
3619e43002 fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open 2025-12-19 11:19:23 +08:00
Jin Cheng
f7058fa32e fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected 2025-12-19 11:19:23 +08:00
Jin Cheng
0028cb326a fix(bt/bluedroid): reject device with same address in legacy paring 2025-12-19 11:19:23 +08:00
Jin Cheng
073965fd31 fix(bt/bluedroid): ignore AVCT commands that are too long 2025-12-19 11:19:23 +08:00
Jin Cheng
648f0396b8 fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP 2025-12-19 11:19:23 +08:00
Jin Cheng
0b8f1f0b0c fix(bt/bluedroid): make sure SDP only start discovery once 2025-12-19 11:19:23 +08:00
Jin Cheng
44b566ab5e fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write 2025-12-19 11:19:23 +08:00
Jin Cheng
bcdca970d4 fix(bt/blurdoird): check Classic key before cross-key derivation 2025-12-19 11:19:23 +08:00
Jin Cheng
8e354a7541 fix(bt/blurdoird): enable bitpool snity checks 2025-12-19 11:19:23 +08:00
Alexey Gerenkov
ef0a445665 Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20251215_v5.4' into 'release/v5.4' 
feat(tools): update openocd version to v0.12.0-esp32-20251215 (v5.4)

See merge request espressif/esp-idf!44312
 2025-12-19 11:06:11 +08:00
Alexey Gerenkov
f4b9bbbd91 Merge branch 'fix/int_wdt_double_exception_v5.4' into 'release/v5.4' 
fix(espcoredump): prevent double exception during int_wdt panic with custom stack (v5.4)

See merge request espressif/esp-idf!44175
 2025-12-18 17:16:07 +08:00
morris
e6cad886e8 Merge branch 'feature/usb_device_examples_update_v2.0.0_backport_v5.4' into 'release/v5.4' 
feature(usb_device): Examples update to esp_tinyusb v2.0.0 (backport to v5.4)

See merge request espressif/esp-idf!42050
 2025-12-18 16:04:19 +08:00
Shu Chen
c649df16d3 Merge branch 'fix/fix_an_ot_trel_risk_v5.4' into 'release/v5.4' 
fix(openthread): fix a potential stack overflow in TREL (v5.4)

See merge request espressif/esp-idf!43933
 2025-12-18 06:02:41 +00:00
morris
04ad31d6a1 Merge branch 'fix/jpeg_com_marker_check_v5.4' into 'release/v5.4' 
feat(jpeg_decoder): Add decode to yuv420 since esp32p4 version3 (backport v5.4)

See merge request espressif/esp-idf!44277
 2025-12-18 13:20:41 +08:00
Island
fb68633d78 Merge branch 'bugfix/fix_bt_4205_v5.4' into 'release/v5.4' 
Fixed BLE assert lld_con.c 1479 on ESP32-C3 and ESP32-S3(5106725) (v5.4)

See merge request espressif/esp-idf!44327
 2025-12-18 11:30:55 +08:00
Island
c678100216 Merge branch 'bugfix/fix_ble_security_issue_2025_v5.4' into 'release/v5.4' 
Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd (v5.4)

See merge request espressif/esp-idf!43806
 2025-12-18 10:55:49 +08:00
Island
fafa8211cc Merge branch 'bugfix/fix_reconnect_failed_with_extend_adv_v5.4' into 'release/v5.4' 
fix(ble/bluedroid): Fixed the issue that extend advertising might not restart if the connection fails (v5.4)

See merge request espressif/esp-idf!44250
 2025-12-18 10:51:23 +08:00
Jiang Jiang Jian
c7ad05630e Merge branch 'bugfix/fix_esp32_coex_cache_disable_crash_v5.4' into 'release/v5.4' 
fix(coex): fix esp32 coex crash issue v5.4

See merge request espressif/esp-idf!44289
 2025-12-18 10:22:39 +08:00
Martin Vychodil
6506466976 Merge branch 'feat/sdspi_option_to_disable_waiting_for_miso_poll_busy_v5.4' into 'release/v5.4' 
feat(sdspi): Add an option to modify the waiting time for MISO before sending next command (v5.4)

See merge request espressif/esp-idf!42446
 2025-12-18 00:29:05 +08:00
Erhan Kurubas
118b424dd1 change(freertos): add task count and pointer width to OpenOCD debug table 2025-12-18 00:20:14 +08:00
Erhan Kurubas
5e4529d8c5 feat(freertos): add list offsets to the openocd_params 2025-12-18 00:20:14 +08:00
Erhan Kurubas
dacae0dc5a feat(tools): update openocd version to v0.12.0-esp32-20251215 2025-12-18 00:20:14 +08:00
Rahul Tank
86c8597589 Merge branch 'bugfix/fix_compile_tinycrypt_v5.4' into 'release/v5.4' 
fix(nimble): Add missing header file to fix compilation issue (v5.4)

See merge request espressif/esp-idf!43886
 2025-12-17 12:33:18 +05:30
C.S.M
99867bb03d fix(jpeg): Fix jpeg color space check 2025-12-17 14:30:56 +08:00
Aditya Patwardhan
b035de5a99 Merge branch 'bugfix/protocomm_sec1_validation_v5.4' into 'release/v5.4' 
fix(protocomm): add validation for Security1 client verifier data (v5.4)

See merge request espressif/esp-idf!43780
 2025-12-17 11:23:23 +05:30
Chen Jian Hua
617f91cc0b fix(bt): Update bt lib for ESP32-C3 and ESP32-S3(5106725) 
- Fixed BLE assert lld_con.c 1479


(cherry picked from commit 22641241fa)

Co-authored-by: chenjianhua <chenjianhua@espressif.com>
 2025-12-17 12:53:54 +08:00
Wang Meng Yang
aab4f43acb Merge branch 'bugfix/l2c_fcr_clone_buf_v5.4' into 'release/v5.4' 
fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf

See merge request espressif/esp-idf!44264
 2025-12-17 11:16:55 +08:00
Adam Múdry
4a0db18ff1 feat(sdspi): Add an option to modify wait time for MISO before sending next command 
Closes https://github.com/espressif/esp-idf/issues/16909
 2025-12-16 15:43:52 +01:00
Mahavir Jain
bf7fc0b0fb Merge branch 'bugfix/http_digest_arg_validation_v5.4' into 'release/v5.4' 
fix(esp_http_client): prevent out-of-bounds read in Digest auth (v5.4)

See merge request espressif/esp-idf!43902
 2025-12-16 17:35:43 +05:30
Aditya Patwardhan
b39fb9f1d7 Merge branch 'fix/fix_bootloader_skip_validate_in_deep_sleep_v5.4' into 'release/v5.4' 
fix(bootloader): fix signature verification skip in deep sleep scenarios (v5.4)

See merge request espressif/esp-idf!43697
 2025-12-16 17:35:15 +05:30
morris
62a59ef232 Merge branch 'fix/i2c_timeout_range_check_v5.4' into 'release/v5.4' 
fix(i2c_master): Add i2c master timeout range check (v5.4)

See merge request espressif/esp-idf!44078
 2025-12-16 18:09:17 +08:00
liuning
5156d96234 fix(coex): fix esp32 coex crash issue (7260f71) 2025-12-16 16:05:35 +08:00
Rahul Tank
951a19762b fix(nimble): Add missing header file to fix compilation issue 2025-12-16 12:17:19 +05:30
C.S.M
50a1c4edba feat(jpeg_decoder): Add decode to yuv420 since esp32p4 version3 2025-12-16 14:25:17 +08:00
C.S.M
666219d4e2 fix(jpeg): Fix check in com marker 2025-12-16 14:24:41 +08:00
Jin Cheng
57a0937abd fix(bt/bluedroid): fixed possible access to NULL in l2c_fcr_clone_buf 2025-12-16 11:39:21 +08:00
Zhi Wei Jian
23caa76a40 fix(ble/bluedroid): Fixed reconnection failed with extend adv 
(cherry picked from commit ec4052c1c7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
 2025-12-15 21:23:24 +08:00