Aditya Patwardhan
0e1e1e79aa
fix(esp_tee): prevent validation clobbering and deref-before-check
...
TEE secure-service handlers had two bugs letting REE bypass
pointer-region validation:
1. valid_addr = instead of valid_addr &= in AEAD encrypt/decrypt
and DS sign handlers, clobbering prior failed checks.
Impact: REE writes to TEE DRAM via DS signature output, or reads
TEE DRAM via AEAD output.
2. data->rsa_length dereferenced before data is validated in DS sign
and DS start_sign handlers.
Fix: use &= for subsequent checks, add early return after initial
data pointer check in DS handlers.
2026-04-30 10:17:53 +05:30
Xu Si Yu
66b3271129
fix(openthread): always reserve null-terminator space when appending escaped args
2026-04-30 11:05:32 +08:00
Luo Xu
f7d762f15b
feat(ble_mesh): add SOC capability dependency for BLE Mesh config
...
Add depends on SOC_BLE_MESH_SUPPORTED to BLE_MESH Kconfig option
to ensure BLE Mesh is only available on supported SoCs.
(cherry picked from commit e0a7e73b72 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-04-29 21:43:32 +08:00
Xu Si Yu
80515646d6
feat(openthread): align spinel radio caps with RCP CSMA backoff and TX retry support
2026-04-29 20:06:33 +08:00
Xu Si Yu
967d35f39b
fix(openthread): escape CLI arguments and enforce command buffer bounds
2026-04-29 20:06:33 +08:00
Alexey Lapshin
7ca5194959
feat(bootloader): split linker scripts into memory and sections
...
Replaced per-target bootloader.ld.in with bootloader.memory.ld.in and
bootloader.sections.ld.in.
Common code moved to file bootloader.sections.common.ld
Unify ESP32-P4 ECO4- and ECO4+ linker scripts into one shared script
Revision-specific code is selected with CONFIG_ESP32P4_SELECTS_REV_LESS_V3
2026-04-29 18:39:11 +07:00
zwx
b0d0eec303
fix(openthread): fix SPI host-RCP communication loss
...
- 1. H2 SPI slave DMA transaction length insufficient for CMD_RESET
frame
- 2. H2 SPI slave BUSY race at boot causing permanent deadlock
- 3. H2 INT pin spurious NEGEDGE on chip reset
- 4. H2 SPI slave trans_len exceeding buffer size
- 5. S3 host RST flag handling preventing Spinel-layer reset detection
- 6. S3 stale eventfd events after HardwareReset causing WaitResponse
timeout
- 7. ot_br missing coprocessor reset failure callback
2026-04-29 19:38:11 +08:00
Alexey Lapshin
85bb42da29
fix(libc): picolibc: workaround wrong pthread_exit declaration for c++
2026-04-29 18:36:02 +07:00
zwx
316dfa3fea
fix(openthread): make the code more robust
2026-04-29 19:28:14 +08:00
Island
b7ff639b0f
Merge branch 'change/ble_update_lib_20260424_v6.0' into 'release/v6.0'
...
change(ble): [AUTO_MR] 20260424 - Update ESP BLE Controller Lib (6.0)
See merge request espressif/esp-idf!47995
2026-04-29 16:34:09 +08:00
Marius Vikhammer
3113a33b93
Merge branch 'fix/freertos_mutex_not_given_by_owner_v6.0' into 'release/v6.0'
...
fix(freertos): hide obsolete mutex-owner config and harden assert test (v6.0)
See merge request espressif/esp-idf!47593
2026-04-29 13:58:24 +08:00
Zhou Xiao
70505621bf
change(ble_log): update ble log version to 5 for esp ble controller log encoding indication
2026-04-29 12:11:58 +08:00
ShenWeilong
3780c9fd5a
change(ble): [AUTO_MR] Update lib_esp32c6 to 6c6de5d6
2026-04-29 12:11:52 +08:00
ShenWeilong
cf1ccce54d
change(ble): [AUTO_MR] Update lib_esp32c5 to 6c6de5d6
2026-04-29 12:11:39 +08:00
ShenWeilong
9c90e35c1c
change(ble): [AUTO_MR] Update lib_esp32h2 to 6c6de5d6
2026-04-29 12:11:30 +08:00
gaoxu
6e03880b1f
fix(adc): fix ESP32-H2/C5/C61 clock divide error
2026-04-29 11:52:46 +08:00
gaoxu
ffe646cc41
ci(adc): add adc continuous sample frequency test
2026-04-29 11:52:37 +08:00
Marius Vikhammer
430b404637
Merge branch 'fix/issue-18391-psram-default-docs_v6.0' into 'release/v6.0'
...
docs: clarify PSRAM default allocation behavior (v6.0)
See merge request espressif/esp-idf!47053
2026-04-29 11:22:07 +08:00
Island
f91a82a15c
Merge branch 'feat/support_mbedtls_for_ble_hci_example_v6.0' into 'release/v6.0'
...
feat(ble): support mbedtls for ble controller encryption (6.0)
See merge request espressif/esp-idf!46908
2026-04-29 10:40:47 +08:00
Martin Vychodil
9d91cd8452
Merge branch 'fix/python3.14_test_fatfsgen_v6.0' into 'release/v6.0'
...
fix(fatfs): fix operator precedence bug in BootSector.__str__ for Python 3.14 compatibility (v6.0)
See merge request espressif/esp-idf!47544
2026-04-28 23:27:56 +08:00
David Cermak
fd578fd210
fix(lwip): Add pytest to lwip
2026-04-28 17:00:13 +02:00
David Cermak
d70f6a43be
fix(lwip): Add unit test for dhcps opt parsing
2026-04-28 17:00:13 +02:00
David Cermak
fba5f99543
fix(lwip): Fix DHCP servver OOB read issue
2026-04-28 17:00:13 +02:00
surengab
0241a487c2
fix(transport_ws): read full PING payload in one call when propagate_control_frames is set
2026-04-28 12:26:18 +02:00
surengab
8677738454
fix(transport_ws): flush oversized control frame payload before returning error
2026-04-28 12:26:18 +02:00
Zhang Wen Xu
5f464307a7
Merge branch 'feat/radio_spinel_driver_interface_optimization_v6.0' into 'release/v6.0'
...
feat(openthread): optimize radio spinel uart interface (v6.0)
See merge request espressif/esp-idf!47410
2026-04-28 09:26:43 +00:00
Island
8f8afe6c98
Merge branch 'bugfix/fix_ble_pair_fail_v6.0' into 'release/v6.0'
...
fix(bt/bluedroid): fix BLE SMP pairing failure on BLE-only devices when using defalut param (6.0)
See merge request espressif/esp-idf!47401
2026-04-28 17:24:20 +08:00
morris
7a6ab6f1fb
Merge branch 'fix/fix_mmu_dirom_reserve_search_logic_v6.0' into 'release/v6.0'
...
mmu: fixed drom/irom reservation bus cap search logic (v6.0)
See merge request espressif/esp-idf!47389
2026-04-28 16:47:02 +08:00
morris
af360295bb
Merge branch 'bugfix/lp_uart_rx_iomux_pin_not_work_v6.0' into 'release/v6.0'
...
fix(uart): lp uart rx iomux pin was not working as expected (v6.0)
See merge request espressif/esp-idf!47607
2026-04-28 16:46:48 +08:00
morris
f1e632bcf1
Merge branch 'change/isp_hsize_check_v6.0' into 'release/v6.0'
...
isp: hsize check and lut size check (v6.0)
See merge request espressif/esp-idf!46987
2026-04-28 16:46:20 +08:00
morris
04c10be114
Merge branch 'fix/uhci_esp32p4_cache_v6.0' into 'release/v6.0'
...
fix(uhci): fix uhci cache issue on ESP32-P4 (v6.0)
See merge request espressif/esp-idf!47917
2026-04-28 16:44:32 +08:00
morris
2b874adaef
Merge branch 'fix/uhci_test_3_v6.0' into 'release/v6.0'
...
test(uhci): fix false-pass bug in UHCI receive test (v6.0)
See merge request espressif/esp-idf!47662
2026-04-28 16:43:13 +08:00
morris
9bc9ac583c
Merge branch 'fix/fix_spi_lcd_psram_mode_v6.0' into 'release/v6.0'
...
fix(spi_lcd): add a flag to decide whether dma accsess psram (v6.0)
See merge request espressif/esp-idf!47795
2026-04-28 16:42:33 +08:00
morris
5152f19a65
Merge branch 'fix/fix_lcd_cmd_bypassd_unexpectedly_v6.0' into 'release/v6.0'
...
fix(lcd): fix lcd cmd be bypassd unexpectedly (v6.0)
See merge request espressif/esp-idf!47805
2026-04-28 16:42:24 +08:00
morris
88483aeef2
Merge branch 'fix/isp_clk_error_v6.0' into 'release/v6.0'
...
Fix ISP clk source error and hal init error (v6.0)
See merge request espressif/esp-idf!47323
2026-04-28 16:41:23 +08:00
morris
d53e191915
Merge branch 'fix/i2c_fsm_reset_sequence_v6.0' into 'release/v6.0'
...
fix(i2c): reset master before bus clear on chips without HW FSM reset (v6.0)
See merge request espressif/esp-idf!47507
2026-04-28 16:40:53 +08:00
morris
7189c22ef2
Merge branch 'doc/i2c_master_probe_comment_update_v6.0' into 'release/v6.0'
...
docs(i2c): update i2c_master_probe parameter comment (v6.0)
See merge request espressif/esp-idf!47511
2026-04-28 16:40:43 +08:00
Wang Meng Yang
622dcfb864
Merge branch 'bugfix/ai_review_hfp_v6.0' into 'release/v6.0'
...
fix(bt): fix HFP issues reported by AI code review (v6.0)
See merge request espressif/esp-idf!47761
2026-04-28 15:16:13 +08:00
yangfeng
acf9f2bb47
fix(bt): fix A2DP stack component issues reported by AI review
2026-04-28 15:15:35 +08:00
yangfeng
436c5ab14b
fix(bt): fix A2DP bta component issues reported by AI review
2026-04-28 15:15:35 +08:00
yangfeng
bdda22b90b
fix(bt): fix A2DP api and btc component issues reported by AI review
2026-04-28 15:15:35 +08:00
Wang Meng Yang
f93ff3e5f0
Merge branch 'bugfix/btm_sec_free_dev_v6.0' into 'release/v6.0'
...
fix(bt): avoid deleting device record on partial transport cleanup (v6.0)
See merge request espressif/esp-idf!47294
2026-04-28 15:15:08 +08:00
Wang Meng Yang
068145be52
Merge branch 'bugfix/ai_review_avrcp_v6.0' into 'release/v6.0'
...
fix(bt): fix AVRCP component issues reported by AI review (v6.0)
See merge request espressif/esp-idf!47676
2026-04-28 15:14:06 +08:00
Wang Meng Yang
8b82ddcadd
Merge branch 'bugfix/spp_deinit_v6.0' into 'release/v6.0'
...
fix(bt/bluedroid): flushed all the DM PM at the end of SPP deinit (v6.0)
See merge request espressif/esp-idf!47289
2026-04-28 15:11:05 +08:00
Roland Dobai
11bc5423c9
Merge branch 'feat/cmakev2_bootloader_v6.0' into 'release/v6.0'
...
feat(cmakev2): build bootloader using the cmakev2 build system (v6.0)
See merge request espressif/esp-idf!47903
2026-04-28 08:53:53 +02:00
Island
7fc3744abd
Merge branch 'change/ble_update_lib_20260409_v6.0' into 'release/v6.0'
...
change(ble): [AUTO_MR] 20260409 - Update ESP BLE Controller Lib (6.0)
See merge request espressif/esp-idf!47419
2026-04-28 14:25:25 +08:00
Zhou Xiao
30fa84b0b0
fix(ble_log): ensure BLE Log IRAM functions are placed in IRAM on ESP32C2
...
On ESP32C2 with BT_CTRL_RUN_IN_FLASH_ONLY, the bt_default linker scheme
routes .iram1 sections to flash_text, causing BLE_LOG_IRAM_ATTR functions
to end up in flash instead of IRAM. Define a dedicated .ble_log_iram1
section for ESP32C2 and route it to iram0_bt_text unconditionally.
2026-04-28 13:29:15 +08:00
Zhou Xiao
b3dccba3ac
fix(ble_log): improve robustness with atomics, macro hygiene, and IRAM
...
- Use __atomic_fetch_add for stat_mgr counters to prevent lost updates
under concurrent ISR/task access (H1)
- Use __atomic_load_n with ACQUIRE ordering for ref_count spin-loops (L1)
- Remove unnecessary BLE_LOG_IRAM_ATTR from ble_log_rt_task since it
calls flash-resident functions and cannot run during flash ops (L3)
- Add parentheses to BLE_LOG_TRANS_FREE_SPACE and BLE_LOG_MAKE_FRAME_META
macro parameters to prevent operator precedence bugs (M6)
2026-04-28 13:29:15 +08:00
Zhou Xiao
217d9b23f6
fix(ble_log): fix deinit race and concurrent flush deadlock
...
- Reorder deinit: stop RT task before destroying peripheral driver to
prevent sending transports to a NULL dev_handle on dual-core (H2)
- Drain remaining queue items in rt_deinit to clean up transport state
- Add atomic flush_in_progress guard to prevent two concurrent
ble_log_flush() callers from deadlocking on ref_count spin-wait (H5)
2026-04-28 13:29:15 +08:00
Zhou Xiao
9c8090a5d4
fix(ble_log): fix crash and resource issues in peripheral drivers
...
- Handle scheduler-suspended and ISR context in UART redirect path
to prevent xSemaphoreTake crash during light sleep (C1)
- Check uart_driver_install return value before setting inited flag (M1)
- Always clean up SPI device handle in deinit even if acquire_bus fails (M4)
2026-04-28 13:29:15 +08:00