Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-10-02 11:10:54 +03:00
Code Issues Packages Projects Releases Wiki Activity
48,251 Commits 25 Branches 192 Tags
8a1a4eae3a5d770a2c38c340701f491e45542e4d
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Mahavir Jain 8a1a4eae3a Merge branch 'fix/esp_tee_bbp_v5.5' into 'release/v5.5' 
fix(esp_tee): Harden TEE secure services against REE manipulation (v5.5)

See merge request espressif/esp-idf!49370
 2026-06-11 11:10:53 +05:30
Mahavir Jain 74eedf49c1 Merge branch 'feat/fix_ws_server_httpd_queue_work_silent_drop_v5.5' into 'release/v5.5' 
fix(esp_http_server): prevent silent message drop in httpd_queue_work (v5.5)

See merge request espressif/esp-idf!49354
 2026-06-09 10:37:46 +05:30
Mahavir Jain ffb831422b Merge branch 'fix/mbedtls_build_failure_x509_crt' into 'release/v5.5' 
fix(mbedtls): fixes build failure with clang21

See merge request espressif/esp-idf!49326
 2026-06-09 10:26:45 +05:30
Mahavir Jain e4a7d55558 Merge branch 'contrib/github_pr_18641_v5.5' into 'release/v5.5' 
fix(protocomm): prevent out-of-bounds write in console line buffer (GitHub PR) (v5.5)

See merge request espressif/esp-idf!49344
 2026-06-08 20:20:44 +05:30
Mahavir Jain c2dd042394 Merge branch 'fix/esp_tee_buffer_overflow_v5.5' into 'release/v5.5' 
fix(esp_tee): fix buffer overflow (v5.5)

See merge request espressif/esp-idf!49304
 2026-06-05 18:28:21 +05:30
Mahavir Jain 9017d3576e Merge branch 'fix/tls-session-verify-and-hostname-warn_v5.5' into 'release/v5.5' 
fix(esp-tls): fix TLS session resumption bypassing CA verification and clarify skip_common_name behavior (v5.5)

See merge request espressif/esp-idf!48930
 2026-05-29 09:56:11 +05:30
Mahavir Jain 7b48bb5c40 Merge branch 'fix/protocomm-close-session-id-mismatch_v5.5' into 'release/v5.5' 
fix(protocomm): pass current session id when closing existing session (v5.5)

See merge request espressif/esp-idf!48735
 2026-05-21 10:45:52 +05:30
Mahavir Jain b6a4d8ae7d Merge branch 'bugfix/openthread_exclude_cve_v5.5' into 'release/v5.5' 
fix(openthread): exclude CVE-2026-8369 from the list (v5.5)

See merge request espressif/esp-idf!48725
 2026-05-20 09:26:57 +05:30
Mahavir Jain 6a622d12ef fix(openthread): exclude CVE-2026-8369 from the list 2026-05-20 10:50:08 +08:00
Mahavir Jain 6a32889849 Merge branch 'feature/recovery_bootloader_support_v5.5' into 'release/v5.5' 
feat(bootloader): Support recovery bootloader for ESP32P4 (v5.5)

See merge request espressif/esp-idf!48474
 2026-05-19 12:35:57 +05:30
Mahavir Jain 1313149f5d Merge branch 'feature/add_event_handler_set_function_v5.5' into 'release/v5.5' 
feat(esp_http_client): Add API to support set event handler (v5.5)

See merge request espressif/esp-idf!48425
 2026-05-12 14:59:21 +05:30
Mahavir Jain afcc55d624 Merge branch 'fix/fix_http_request_pytest' into 'release/v5.5' 
fix(http_request): fixes failing pytest

See merge request espressif/esp-idf!48389
 2026-05-11 16:00:18 +05:30
Mahavir Jain 9dfed0064a Merge branch 'feat/extend_pmp_protection_esp32p4_eco5_v5.5' into 'release/v5.5' 
Extend PMP memprot for ESP32-P4 V3 (v5.5)

See merge request espressif/esp-idf!48123
 2026-05-08 14:05:03 +05:30
Mahavir Jain e56c5eb83b Merge branch 'fix/flipped_key_mgr_key_info_flash_position_v5.5' into 'release/v5.5' 
Enable ECC clock while using the Key Manager's ECDH key deployment mode (v5.5)

See merge request espressif/esp-idf!48160
 2026-05-05 14:32:29 +05:30
Mahavir Jain 28da6733a2 Merge branch 'fix/fix_protocomm_sec2_input_validations_v5.5' into 'release/v5.5' 
fix(protocomm): fixes potential issues that can lead to crash during device provisioning (v5.5)

See merge request espressif/esp-idf!47306
 2026-05-04 11:41:01 +05:30
Mahavir Jain d183c3d4a6 Merge branch 'fix/supported_key_mgr_key_types_check_v5.5' into 'release/v5.5' 
fix(esp_security): guard key manager APIs against unsupported chip revs (v5.5)

See merge request espressif/esp-idf!48010
 2026-05-04 10:38:32 +05:30
Mahavir Jain 26184a7177 Merge branch 'fix/esp-tee-validation-clobber-and-deref-before-check_v5.5' into 'release/v5.5' 
fix(esp_tee): prevent validation clobbering and deref-before-check in secure services (v5.5)

See merge request espressif/esp-idf!48122
 2026-04-30 11:45:03 +05:30
Mahavir Jain fdf7964e2a Merge branch 'fix/relax_rsa_operation_performance_numbers' into 'release/v5.5' 
fix(mbedtls): relaxes performance numbers for RSA operations

See merge request espressif/esp-idf!47792
 2026-04-27 19:41:23 +05:30
Mahavir Jain 5ac7edd150 Merge branch 'fix/protocomm-security2-srp-hd-double-free_v5.5' into 'release/v5.5' 
fix(protocomm): null srp_hd after free in sec2 command0 error paths (v5.5)

See merge request espressif/esp-idf!47968
 2026-04-27 16:14:30 +05:30
Mahavir Jain d302230c2f Merge branch 'change/exclude_cve-2025-66442_5.5' into 'release/v5.5' 
change(mbedtls): adds CVE-2025-66442 to exclude list.

See merge request espressif/esp-idf!47422
 2026-04-27 10:37:35 +05:30
Mahavir Jain 99b6d1dfc2 fix(protocomm): null srp_hd after free in sec2 command0 error paths 
handle_session_command0() freed cur_session->srp_hd on every error path
without clearing the pointer. A subsequent sec2_close_session() call
(e.g. on BLE disconnect, or via sec2_new_session evicting the old
session) checks `if (cur_session->srp_hd)` and frees it again,
double-freeing a dangling pointer.
 2026-04-27 10:09:43 +05:30
Mahavir Jain 9f1d548a1c Merge branch 'ci/github-dangerjs-fix-permissions_v5.5' into 'release/v5.5' 
ci(github): fix permissions for GitHub-dangerjs (to content read) (v5.5)

See merge request espressif/esp-idf!47921
 2026-04-27 08:52:03 +05:30
Mahavir Jain 0bed60db48 Merge branch 'fix/fix_esp_local_ctrl_potential_double_free_v5.5' into 'release/v5.5' 
fix(esp_local_ctrl): fixes a potential double free (v5.5)

See merge request espressif/esp-idf!47489
 2026-04-21 10:37:10 +05:30
Mahavir Jain 11dfabfc46 Merge branch 'fix/fix_esp_srp_sec2_auth_bypass_a_mod_n_v5.5' into 'release/v5.5' 
fix(esp_srp): reject SRP client public key when A mod N is zero (v5.5)

See merge request espressif/esp-idf!47704
 2026-04-20 12:01:24 +05:30
Mahavir Jain 4f00125a93 Merge branch 'feat/check_crlf_http_server_response_headers_v5.5' into 'release/v5.5' 
feat(esp_http_server): adds check for crlf in response creation (v5.5)

See merge request espressif/esp-idf!47500
 2026-04-14 15:01:39 +05:30
Mahavir Jain 9136465a6c Merge branch 'fix/esp_tee_srv_tbl_loc_v5.5' into 'release/v5.5' 
change(esp_tee): Move the internal memory secure service call table to IRAM (v5.5)

See merge request espressif/esp-idf!47552
 2026-04-14 11:18:38 +05:30
Mahavir Jain d4ec4d9b51 Merge branch 'fix/esp_tee_bbp_v5.5' into 'release/v5.5' 
fix(esp_tee): Add missing input validation checks for TEE service calls (v5.5)

See merge request espressif/esp-idf!47364
 2026-04-13 15:43:03 +05:30
Mahavir Jain 19731dd91a Merge branch 'fix/enable_key_mgr_clk_for_efuse_key_ops_v5.5' into 'release/v5.5' 
Support newer Key Manager key sources for ESP32-P4 V3 (v5.5)

See merge request espressif/esp-idf!46755
 2026-04-08 11:19:56 +05:30
Mahavir Jain 67688b41ce Merge branch 'feat/update_mbedtls_3_6_6' into 'release/v5.5' 
feat(mbedtls): Update to v3.6.6

See merge request espressif/esp-idf!47207
 2026-04-02 19:09:06 +05:30
Mahavir Jain 6d60691d86 Merge branch 'feat/update_cjson_master' into 'release/v5.5' 
feat(cjson): update to latest master

See merge request espressif/esp-idf!47222
 2026-04-02 19:05:16 +05:30
Mahavir Jain 9928d929c2 Merge branch 'fix/fix_possible_null_dereference_wifi_provisioning' into 'release/v5.5' 
fix(wifi_provisioning): fixes potential null dereference on malformed packet

See merge request espressif/esp-idf!47012
 2026-04-01 18:11:33 +05:30
Mahavir Jain cd41500858 Merge branch 'ci/esp_tee_fixes_v5.5' into 'release/v5.5' 
feat(esp_tee): Feature/fixes backports to `release/v5.5`

See merge request espressif/esp-idf!46468
 2026-04-01 12:14:07 +05:30
Mahavir Jain dc112bb460 Merge branch 'fix/esp32c61_rom_stack_addr_v5.5' into 'release/v5.5' 
fix(soc): Correct the ESP32-C61 ROM stack start address (v5.5)

See merge request espressif/esp-idf!47151
 2026-03-31 10:55:50 +05:30
Mahavir Jain 807d287ae7 Merge branch 'fix/fix_dynamic_buffer_with_tls1_3_v5.5' into 'release/v5.5' 
fix: fixes failing dynamic buffer tests (v5.5)

See merge request espressif/esp-idf!46431
 2026-03-30 18:28:52 +05:30
Mahavir Jain 309f692ecc Merge branch 'bugfix/docs_anti_rollback_v5.5' into 'release/v5.5' 
docs: clarify anti-rollback secure version bits for c2/c5 (v5.5)

See merge request espressif/esp-idf!47124
 2026-03-30 12:42:22 +05:30
Mahavir Jain ff249f532f Merge branch 'bugfix/external_mem_enc_docs_v5.5' into 'release/v5.5' 
docs: update PSRAM and flash encryption docs with per-page and separate key capabilities (v5.5)

See merge request espressif/esp-idf!46956
 2026-03-30 11:46:30 +05:30
Mahavir Jain eb9b06e525 docs: clarify anti-rollback secure version bits for c2/c5 2026-03-30 10:35:02 +05:30
Mahavir Jain d2bcaba7e1 Merge branch 'fix/fix_ws_server_subprotocols_null_dereference_v5.5' into 'release/v5.5' 
fix: fixes websocket server possible null dereference (v5.5)

See merge request espressif/esp-idf!46918
 2026-03-30 10:31:32 +05:30
Mahavir Jain 4740271d8a Merge branch 'feat/delete_content_length_header_with_transfer_encoding_v5.5' into 'release/v5.5' 
fix(esp_http_client): delete Content-Length header when using Transfer-Encoding (v5.5)

See merge request espressif/esp-idf!46684
 2026-03-30 10:24:41 +05:30
Mahavir Jain 4322004453 Merge branch 'contrib/github_pr_18310_v5.5' into 'release/v5.5' 
fix(esp_http_server): Dispatch PONG frames to WebSocket handler (GitHub PR) (v5.5)

See merge request espressif/esp-idf!46656
 2026-03-30 10:24:02 +05:30
Mahavir Jain b527570bf6 Merge branch 'feat/improve_ws_server_handshake_handling_v5.5' into 'release/v5.5' 
feat(http_server): improve websocket server handling (v5.5)

See merge request espressif/esp-idf!46248
 2026-03-30 10:23:21 +05:30
Mahavir Jain c0fb1667de Merge branch 'fix/add_ecdsa_curve_validation_during_secure_boot_v5.5' into 'release/v5.5' 
fix(bootloader_support): added ecdsa curve validation during secure boot (v5.5)

See merge request espressif/esp-idf!46298
 2026-03-30 10:21:33 +05:30
Mahavir Jain 1b9b001f23 docs: update PSRAM and flash encryption docs with per-page and separate key capabilities 2026-03-24 12:54:59 +05:30
Mahavir Jain 53c7697465 Merge branch 'bugfix/esp_local_ctrl_arg_check_v5.5' into 'release/v5.5' 
fix(esp_local_ctrl): validate payload_case matches msg_type in command dispatcher (v5.5)

See merge request espressif/esp-idf!45925
 2026-02-27 09:43:33 +05:30
Mahavir Jain 5669b70094 Merge branch 'fix/support_software_based_ecdsa_verification_on_p4_less_v3' into 'release/v5.5' 
fix(mbedtls): software fallback for ECDSA verification for P4 version < 3.0

See merge request espressif/esp-idf!46014
 2026-02-26 11:21:23 +05:30
Mahavir Jain 09935fda4d Merge branch 'fix/esp_https_ota_header_handling_for_custom_data_v5.5' into 'release/v5.5' 
Issue with complete headers for custom partition OTA (v5.5)

See merge request espressif/esp-idf!45795
 2026-02-25 12:26:09 +05:30
Mahavir Jain 045b323193 Merge branch 'contrib/github_pr_18241_v5.5' into 'release/v5.5' 
fix(esp_https_server): SSL context leak when HTTPS server fails to start (GitHub PR) (v5.5)

See merge request espressif/esp-idf!45989
 2026-02-24 13:35:38 +05:30
Mahavir Jain 72fa8b23b1 Merge branch 'fix/app_update_tests_v5.5' into 'release/v5.5' 
fix(app_update): Fix tests for app_update on ESP32C5 (v5.5)

See merge request espressif/esp-idf!45505
 2026-02-20 15:54:12 +05:30
Mahavir Jain 03c55f3f09 Merge branch 'feat/enable_ecdsa_support_for_esp32p4_eco5_v5.5' into 'release/v5.5' 
feat(esp32p4_eco5): enabled ECDSA peripheral support for ESP32P4 ECO5 (v5.5)

See merge request espressif/esp-idf!45359
 2026-02-18 18:04:59 +05:30
Mahavir Jain bde6e74231 Merge branch 'fix/tee_sec_stg_aes_gcm_iv_reuse_v5.5' into 'release/v5.5' 
fix(esp_tee): Prevent IV reuse in the TEE secure storage AES-GCM service (v5.5)

See merge request espressif/esp-idf!45682
 2026-02-18 18:04:19 +05:30
Mahavir Jain dbc3098182 Merge branch 'contrib/github_pr_17641_v5.5' into 'release/v5.5' 
Allow the https server to request client certs only with OPTIONAL (GitHub PR) (v5.5)

See merge request espressif/esp-idf!45797
 2026-02-18 18:03:52 +05:30
Mahavir Jain f1da2855b1 Merge branch 'fix/add_check_for_range_request_supported_by_server_during_ota_resumption_v5.5' into 'release/v5.5' 
fix(esp_https_ota): added a check if range request is supported during OTA resumption is enabled (v5.5)

See merge request espressif/esp-idf!45819
 2026-02-18 18:02:24 +05:30
Mahavir Jain 28911775eb Merge branch 'fix/esp_https_client_test_v5.5' into 'release/v5.5' 
fix(esp_http_client): Fixed the example pytest (v5.5)

See merge request espressif/esp-idf!45447
 2026-02-18 18:01:55 +05:30
Mahavir Jain ab9e5cc34d docs(protocomm): recommend using security2 scheme for production purpose 2026-02-17 11:47:12 +05:30
Mahavir Jain ae934f038d fix(esp_local_ctrl): validate payload_case matches msg_type in command dispatcher 
The command dispatcher routed handlers based solely on msg_type without
verifying that the protobuf payload_case field matched. A crafted message
with mismatched msg_type and payload_case could cause type confusion,
leading to an out-of-bounds read or NULL pointer dereference.

Add expected_payload_case to the command table and validate it in the
dispatcher before invoking any handler.

Please note that this issue was applicable for authenticated clients
only (with security1/2 scheme) and hence the impact is on lower side.
 2026-02-17 11:47:11 +05:30
Mahavir Jain e628865430 Merge branch 'feat/enable_pseudo_round_support_for_aes_v5.5' into 'release/v5.5' 
feat: enable pesudo round functionality for AES in ESP32P4 ECO5 (v5.5)

See merge request espressif/esp-idf!45175
 2026-01-18 18:19:06 +05:30
Mahavir Jain 79048b8aac Merge branch 'feat/enable_pseudo_round_support_for_xts_aes_esp32p4_eco5_v5.5' into 'release/v5.5' 
feat: added support for pseudo round xts aes in esp32p4 eco5 (v5.5)

See merge request espressif/esp-idf!45172
 2026-01-18 18:17:41 +05:30
Mahavir Jain 5a142e151c Merge branch 'fix/incorrect_sha256_auth_digest_v5.5' into 'release/v5.5' 
fix(esp_http_client): fix incorrect digest calculation for SHA256 auth digest (v5.5)

See merge request espressif/esp-idf!44845
 2026-01-08 09:25:53 +05:30
Mahavir Jain f8fe1ce0ea Merge branch 'fix/secure_boot_verify_app_api_support_ecdsa_p384_v5.5' into 'release/v5.5' 
Application's Secure Boot verify API support ECDSA-P384 (v5.5)

See merge request espressif/esp-idf!44181
 2025-12-29 13:53:00 +05:30
Mahavir Jain 3378c690c4 Merge branch 'feat/add_mbedtls_testcases_for_ecc_p_384_v5.5' into 'release/v5.5' 
feat(mbedtls): add ECC P-384 mbedtls support and test_cases (v5.5)

See merge request espressif/esp-idf!43980
 2025-12-26 09:56:00 +05:30
Mahavir Jain 961abe6a08 Merge branch 'fix/align_ota_written_size_during_ota_resumption_to_last_16_byte_boundry_v5.5' into 'release/v5.5' 
fix(esp_https_ota): align OTA resumption offset to 16-byte boundary (v5.5)

See merge request espressif/esp-idf!44034
 2025-12-26 09:55:39 +05:30
Mahavir Jain b749ca2087 Merge branch 'docs/fix_some_expressions_in_security_guide_v5.5' into 'release/v5.5' 
docs: fix some description in security guide docs (v5.5)

See merge request espressif/esp-idf!43818
 2025-12-26 09:55:07 +05:30
Mahavir Jain 0f474752c7 Merge branch 'fix/fix_bootloader_skip_validate_in_deep_sleep_v5.5' into 'release/v5.5' 
fix(bootloader): fix signature verification skip in deep sleep scenarios (v5.5)

See merge request espressif/esp-idf!43696
 2025-12-26 09:53:51 +05:30
Mahavir Jain 4cd5e63caf Merge branch 'bugfix/protocomm_sec1_validation_v5.5' into 'release/v5.5' 
fix(protocomm): add validation for Security1 client verifier data (v5.5)

See merge request espressif/esp-idf!43779
 2025-12-26 09:53:26 +05:30
Mahavir Jain 9ea85ed080 Merge branch 'feat/add_c5_v102_config_v5.5' into 'release/v5.5' 
hw_support: add new config for c5 v1.2 and c61 v1.1 (v5.5)

See merge request espressif/esp-idf!43615
 2025-12-26 09:51:18 +05:30
Mahavir Jain 9ab736cbd1 fix(spi_flash): limit CPU clock to 160MHz for encrypted flash writes 2025-12-17 03:33:29 +08:00
Mahavir Jain a5601fbf0d fix(protocomm): add validation for Security1 client verifier data 
Add checks to validate client_verify_data pointer and length before
processing in handle_session_command1. Prevents NULL pointer dereference
when client omits verifier data in Session_Command1, which could cause
device crash during provisioning (remote DoS attack).

We would like to thank Pavel Kohout from Aisle Research for reporting
this vulnerability along with a mitigation strategy.
 2025-12-10 14:18:55 +05:30
Mahavir Jain bbcc13be8b fix(esp_http_client): prevent out-of-bounds read in Digest auth 
Fixed vulnerability where malicious HTTP servers could trigger OOB reads
by sending empty or very short algorithm fields in WWW-Authenticate headers.

Changes:
- Replace unsafe memcmp() with strcasecmp() for algorithm comparison
- Add algorithm NULL validation at function entry point
- Fix duplicate md5-sess check, add missing SHA-256 check
 2025-12-01 18:23:29 +05:30
Mahavir Jain ac8b73bda1 fix(bootloader): fix signature verification skip in deep sleep scenario 
For CONFIG_BOOTLOADER_SKIP_VALIDATE_IN_DEEP_SLEEP enabled and exit from
deep sleep case the secure boot signature verification must be skipped
to improve the wakeup performance.

Closes https://github.com/espressif/esp-idf/issues/15590
 2025-11-25 10:11:58 +05:30
Mahavir Jain 3fd00b4d80 fix(esp_system): limit CPU clock to 160MHz in ESP32-C5 for flash encryption 
Encrypted flash write operation sometimes result in random corruption in
certain bytes. Root cause points to sudden current surge due to involvement of
encryption block overwhelming LDO supply. More details will be provided
in the ESP32-C5 SoC Errata document.

This fix limits the CPU clock to 160MHz for flash encryption enabled
case. Failing encrypted flash write tests could successfully pass in
this configuration. Going ahead, a dynamic clock adjustment in flash
driver will be considered to mitigate this issue.
 2025-11-13 13:26:06 +05:30
Mahavir Jain 89d2585a62 fix(lwip): allow task stack from SPIRAM except for ESP32 ECO2 and below 
Closes https://github.com/espressif/esp-idf/issues/17827
 2025-11-13 09:41:52 +05:30
Mahavir Jain 34ff2409dc Merge branch 'fix/disallow_enabling_sb_sha384_when_sb_sha256_is_enabled_p4_v5.5' into 'release/v5.5' 
fix(efuse): Disallow enabling SB using SHA-384 when SB using SHA-256 is enabled (ESP32-P4 ECO5) (v5.5)

See merge request espressif/esp-idf!43263
 2025-11-12 11:22:35 +05:30
Mahavir Jain 6b89f1ed1c Merge branch 'feat/update_mbedtls_3.6.5_v5.5' into 'release/v5.5' 
feat(mbedtls): update to version 3.6.5 (v5.5)

See merge request espressif/esp-idf!43244
 2025-11-12 11:21:46 +05:30
Mahavir Jain d32b70d552 fix(esp_psram): make SPIRAM_USE_MEMMAP available for all targets 
This reverts earlier commit d2858847 and thereby making SPIRAM_USE_MEMMAP
available for all targets.

This config option has no direct usage but just avoids adding the PSRAM
to heap but still keeps it memory mapped.

Closes https://github.com/espressif/esp-idf/issues/17764
 2025-11-05 14:07:22 +05:30
Mahavir Jain 8c3dab6bb1 Merge branch 'feat/esp_tee_mspi_tuning_v5.5' into 'release/v5.5' 
change(esp_tee): Fix TEE SPI flash API issues on ESP32-C5 (v5.5)

See merge request espressif/esp-idf!42907
 2025-10-28 17:43:43 +05:30
Mahavir Jain e054d168c1 Merge branch 'fix/c5_tee_sram_prot_v5.5' into 'release/v5.5' 
fix(esp_tee): Split TEE SRAM as I/DRAM for ESP32-C5 with PMA (v5.5)

See merge request espressif/esp-idf!42680
 2025-10-21 17:25:15 +05:30
Mahavir Jain cfba6ee0fd Merge branch 'bugfix/ota_resumption_saved_size_alignmnet_v5.5' into 'release/v5.5' 
fix: Ensure OTA written size for 16-byte alignment (v5.5)

See merge request espressif/esp-idf!42683
 2025-10-21 07:53:49 +05:30
Mahavir Jain 2175df7d51 Merge branch 'fix/esp_tee_int_wdt_v5.5' into 'release/v5.5' 
fix(esp_tee): Sync M-U interrupt thresholds during service calls from critical sections (v5.5)

See merge request espressif/esp-idf!42720
 2025-10-20 14:43:02 +05:30
Mahavir Jain 1a760a91e5 Merge branch 'feature/add_ecdsa_p384_support_and_testcases_v5.5' into 'release/v5.5' 
feat: add ecdsa-p384 testcases and relative support for ESP32C5 ECO2 (v5.5)

See merge request espressif/esp-idf!41274
 2025-10-17 22:42:26 +05:30
Mahavir Jain 5058b757ee Merge branch 'feature/partial_download_over_single_connection_v5.5' into 'release/v5.5' 
feat(esp_https_ota): Support partial downloading of OTA over single connection (v5.5)

See merge request espressif/esp-idf!42678
 2025-10-17 21:07:47 +05:30
Mahavir Jain 3f3525ee14 Merge branch 'fix/esp_efuse_enable_rom_secure_download_mode_v5.5' into 'release/v5.5' 
fix(efuse): Fix enabling ROM secure download mode (v5.5)

See merge request espressif/esp-idf!42627
 2025-10-17 09:43:38 +05:30
Mahavir Jain ea36c4f609 Merge branch 'feature/esp_tee_c5_v5.5' into 'release/v5.5' 
feat(esp_tee): Initial support for ESP32-C5 and related changes (v5.5)

See merge request espressif/esp-idf!42357
 2025-10-16 09:39:23 +05:30
Mahavir Jain 042f29dd66 Merge branch 'fix/change_write_protection_bit_of_shared_security_efuses_v5.5' into 'release/v5.5' 
Reorder write protection bits of some shared security efuses (v5.5)

See merge request espressif/esp-idf!42033
 2025-10-15 09:38:59 +05:30
Mahavir Jain 4cc95c4a71 Merge branch 'fix/key_mgr_use_default_efuse_key_v5.5' into 'release/v5.5' 
Configure the Key Manager to use XTS-AES efuse key by-default (v5.5)

See merge request espressif/esp-idf!42395
 2025-10-15 09:38:03 +05:30
Mahavir Jain d28a8a0d11 Merge branch 'fix/improve_rng_documentation_v5.5' into 'release/v5.5' 
fix(docs): Improved RNG documentation (v5.5)

See merge request espressif/esp-idf!42573
 2025-10-14 15:07:13 +05:30
Mahavir Jain a61f93b05c Merge branch 'fix/http_async_handler_ci_test_failure_v5.5' into 'release/v5.5' 
fix(http_server): Fix CI test failure async_handler (v5.5)

See merge request espressif/esp-idf!42542
 2025-10-14 11:48:53 +05:30
Mahavir Jain d5161cb2a0 Merge branch 'contrib/github_pr_17652_v5.5' into 'release/v5.5' 
fix(esp_tls_conn_new_sync): Fix `esp_tls_conn_new_sync`'s doc to reflect its implementation (GitHub PR) (v5.5)

See merge request espressif/esp-idf!42329
 2025-10-03 09:41:16 +05:30
Mahavir Jain 2f3eccd25a Merge branch 'fix(esp_tls)/dynamic_buffer_ssl_crash_v5.5' into 'release/v5.5' 
fix(esp_tls): fix potential ssl crash with dynamic buffer (v5.5)

See merge request espressif/esp-idf!42138
 2025-09-28 15:10:37 +05:30
Mahavir Jain da21126583 Merge branch 'fix/cjson_cpe_v5.5' into 'release/v5.5' 
fix(cjson): add CPE with davegamble as vendor (v5.5)

See merge request espressif/esp-idf!42070
 2025-09-26 14:42:57 +05:30
Mahavir Jain 0313a369ea Merge branch 'contrib/github_pr_17470_v5.5' into 'release/v5.5' 
fix(http_server): Corrected initialization value for lru_counter at h… (GitHub PR) (v5.5)

See merge request espressif/esp-idf!42061
 2025-09-24 07:54:12 +05:30
Mahavir Jain 5d6573cf0c Merge branch 'featue/allow_custom_key_purposes_v5.5' into 'release/v5.5' 
feat(efuse): Allow custom key purposes (v5.5)

See merge request espressif/esp-idf!41934
 2025-09-22 12:48:48 +05:30
Mahavir Jain fa08f239c0 Merge branch 'bugfix/encrypt_len_for_sb_update_case_v5.5' into 'release/v5.5' 
fix(bootloader): correct encryption length for secure update without secure boot (v5.5)

See merge request espressif/esp-idf!41923
 2025-09-21 18:37:43 +05:30
Mahavir Jain 8a4f0c597a Merge branch 'fix/handle_error_and_dispatch_event_while_reading_data_from_server_v5.5' into 'release/v5.5' 
feat(esp_http_client): handle error while reading data from server (v5.5)

See merge request espressif/esp-idf!41324
 2025-09-21 18:06:05 +05:30
Mahavir Jain 1970cc7a40 Merge branch 'fix/http_server_async_requests_on_same_socket_blocks_v5.5' into 'release/v5.5' 
Fix async requests on same socket blocking server (v5.5)

See merge request espressif/esp-idf!41997
 2025-09-20 02:44:45 +05:30
Mahavir Jain 4014385d8d Merge branch 'fix/rng_entropy_mixing_with_rtc_timer_v5.5' into 'release/v5.5' 
fix(esp_hw_support): Fixed entropy mixing of RTC timer with RNG (v5.5)

See merge request espressif/esp-idf!41824
 2025-09-19 21:27:19 +05:30
Mahavir Jain 9c257c4f0b test: add test case for secure update with FE case 2025-09-16 10:16:42 +05:30
Mahavir Jain b0713ffe08 fix(bootloader): correct encryption length for secure update without secure boot 
For secure update without secure boot case, the encryption length for
app image must consider signature block length as well. This was
correctly handled for secure boot case but not for secure update without
secure boot.
 2025-09-16 10:16:37 +05:30
Mahavir Jain 847ceb6301 Merge branch 'change/exclude_cve-2025-57052_v5.5' into 'release/v5.5' 
change(cjson): Update to v1.7.19 (v5.5)

See merge request espressif/esp-idf!41837
 2025-09-11 18:12:14 +05:30
Mahavir Jain b966e396d3 Merge branch 'feat/support_authentication_feature_for_ws_v5.5' into 'release/v5.5' 
Added pre handshake callback for websocket (v5.5)

See merge request espressif/esp-idf!41037
 2025-09-02 09:18:29 +05:30
Mahavir Jain d0ffafb71f Merge branch 'feat/add_new_client_state_and_update_state_flow_v5.5' into 'release/v5.5' 
feat(esp_http_client): added new HTTP state HTTP_STATE_CONNECTING and change state flow (v5.5)

See merge request espressif/esp-idf!41276
 2025-09-02 09:14:17 +05:30