Commit Graph
34853 Commits
Author SHA1 Message Date
Aditya Patwardhan 0e1e1e79aa fix(esp_tee): prevent validation clobbering and deref-before-check
TEE secure-service handlers had two bugs letting REE bypass
pointer-region validation:

1. valid_addr = instead of valid_addr &= in AEAD encrypt/decrypt
   and DS sign handlers, clobbering prior failed checks.
   Impact: REE writes to TEE DRAM via DS signature output, or reads
   TEE DRAM via AEAD output.

2. data->rsa_length dereferenced before data is validated in DS sign
   and DS start_sign handlers.

Fix: use &= for subsequent checks, add early return after initial
data pointer check in DS handlers.
2026-04-30 10:17:53 +05:30
Xu Si Yu 66b3271129 fix(openthread): always reserve null-terminator space when appending escaped args 2026-04-30 11:05:32 +08:00
Luo Xu f7d762f15b feat(ble_mesh): add SOC capability dependency for BLE Mesh config
Add depends on SOC_BLE_MESH_SUPPORTED to BLE_MESH Kconfig option
to ensure BLE Mesh is only available on supported SoCs.


(cherry picked from commit e0a7e73b72)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-04-29 21:43:32 +08:00
Xu Si Yu 80515646d6 feat(openthread): align spinel radio caps with RCP CSMA backoff and TX retry support 2026-04-29 20:06:33 +08:00
Xu Si Yu 967d35f39b fix(openthread): escape CLI arguments and enforce command buffer bounds 2026-04-29 20:06:33 +08:00
Alexey Lapshin 7ca5194959 feat(bootloader): split linker scripts into memory and sections
Replaced per-target bootloader.ld.in with bootloader.memory.ld.in and
bootloader.sections.ld.in.

Common code moved to file bootloader.sections.common.ld

Unify ESP32-P4 ECO4- and ECO4+ linker scripts into one shared script
Revision-specific code is selected with CONFIG_ESP32P4_SELECTS_REV_LESS_V3
2026-04-29 18:39:11 +07:00
zwx b0d0eec303 fix(openthread): fix SPI host-RCP communication loss
- 1. H2 SPI slave DMA transaction length insufficient for CMD_RESET
  frame
- 2. H2 SPI slave BUSY race at boot causing permanent deadlock
- 3. H2 INT pin spurious NEGEDGE on chip reset
- 4. H2 SPI slave trans_len exceeding buffer size
- 5. S3 host RST flag handling preventing Spinel-layer reset detection
- 6. S3 stale eventfd events after HardwareReset causing WaitResponse
  timeout
- 7. ot_br missing coprocessor reset failure callback
2026-04-29 19:38:11 +08:00
Alexey Lapshin 85bb42da29 fix(libc): picolibc: workaround wrong pthread_exit declaration for c++ 2026-04-29 18:36:02 +07:00
zwx 316dfa3fea fix(openthread): make the code more robust 2026-04-29 19:28:14 +08:00
Island b7ff639b0f Merge branch 'change/ble_update_lib_20260424_v6.0' into 'release/v6.0'
change(ble): [AUTO_MR] 20260424 - Update ESP BLE Controller Lib (6.0)

See merge request espressif/esp-idf!47995
2026-04-29 16:34:09 +08:00
Marius Vikhammer 3113a33b93 Merge branch 'fix/freertos_mutex_not_given_by_owner_v6.0' into 'release/v6.0'
fix(freertos): hide obsolete mutex-owner config and harden assert test (v6.0)

See merge request espressif/esp-idf!47593
2026-04-29 13:58:24 +08:00
Zhou Xiao 70505621bf change(ble_log): update ble log version to 5 for esp ble controller log encoding indication 2026-04-29 12:11:58 +08:00
ShenWeilong 3780c9fd5a change(ble): [AUTO_MR] Update lib_esp32c6 to 6c6de5d6 2026-04-29 12:11:52 +08:00
ShenWeilong cf1ccce54d change(ble): [AUTO_MR] Update lib_esp32c5 to 6c6de5d6 2026-04-29 12:11:39 +08:00
ShenWeilong 9c90e35c1c change(ble): [AUTO_MR] Update lib_esp32h2 to 6c6de5d6 2026-04-29 12:11:30 +08:00
gaoxu 6e03880b1f fix(adc): fix ESP32-H2/C5/C61 clock divide error 2026-04-29 11:52:46 +08:00
gaoxu ffe646cc41 ci(adc): add adc continuous sample frequency test 2026-04-29 11:52:37 +08:00
Marius Vikhammer 430b404637 Merge branch 'fix/issue-18391-psram-default-docs_v6.0' into 'release/v6.0'
docs: clarify PSRAM default allocation behavior (v6.0)

See merge request espressif/esp-idf!47053
2026-04-29 11:22:07 +08:00
Island f91a82a15c Merge branch 'feat/support_mbedtls_for_ble_hci_example_v6.0' into 'release/v6.0'
feat(ble): support mbedtls for ble controller encryption (6.0)

See merge request espressif/esp-idf!46908
2026-04-29 10:40:47 +08:00
Martin Vychodil 9d91cd8452 Merge branch 'fix/python3.14_test_fatfsgen_v6.0' into 'release/v6.0'
fix(fatfs): fix operator precedence bug in BootSector.__str__ for Python 3.14 compatibility (v6.0)

See merge request espressif/esp-idf!47544
2026-04-28 23:27:56 +08:00
David Cermak fd578fd210 fix(lwip): Add pytest to lwip 2026-04-28 17:00:13 +02:00
David Cermak d70f6a43be fix(lwip): Add unit test for dhcps opt parsing 2026-04-28 17:00:13 +02:00
David Cermak fba5f99543 fix(lwip): Fix DHCP servver OOB read issue 2026-04-28 17:00:13 +02:00
surengab 0241a487c2 fix(transport_ws): read full PING payload in one call when propagate_control_frames is set 2026-04-28 12:26:18 +02:00
surengab 8677738454 fix(transport_ws): flush oversized control frame payload before returning error 2026-04-28 12:26:18 +02:00
Zhang Wen Xu 5f464307a7 Merge branch 'feat/radio_spinel_driver_interface_optimization_v6.0' into 'release/v6.0'
feat(openthread): optimize radio spinel uart interface (v6.0)

See merge request espressif/esp-idf!47410
2026-04-28 09:26:43 +00:00
Island 8f8afe6c98 Merge branch 'bugfix/fix_ble_pair_fail_v6.0' into 'release/v6.0'
fix(bt/bluedroid): fix BLE SMP pairing failure on BLE-only devices when using defalut param (6.0)

See merge request espressif/esp-idf!47401
2026-04-28 17:24:20 +08:00
morris 7a6ab6f1fb Merge branch 'fix/fix_mmu_dirom_reserve_search_logic_v6.0' into 'release/v6.0'
mmu: fixed drom/irom reservation bus cap search logic (v6.0)

See merge request espressif/esp-idf!47389
2026-04-28 16:47:02 +08:00
morris af360295bb Merge branch 'bugfix/lp_uart_rx_iomux_pin_not_work_v6.0' into 'release/v6.0'
fix(uart): lp uart rx iomux pin was not working as expected (v6.0)

See merge request espressif/esp-idf!47607
2026-04-28 16:46:48 +08:00
morris f1e632bcf1 Merge branch 'change/isp_hsize_check_v6.0' into 'release/v6.0'
isp: hsize check and lut size check (v6.0)

See merge request espressif/esp-idf!46987
2026-04-28 16:46:20 +08:00
morris 04c10be114 Merge branch 'fix/uhci_esp32p4_cache_v6.0' into 'release/v6.0'
fix(uhci): fix uhci cache issue on ESP32-P4 (v6.0)

See merge request espressif/esp-idf!47917
2026-04-28 16:44:32 +08:00
morris 2b874adaef Merge branch 'fix/uhci_test_3_v6.0' into 'release/v6.0'
test(uhci): fix false-pass bug in UHCI receive test (v6.0)

See merge request espressif/esp-idf!47662
2026-04-28 16:43:13 +08:00
morris 9bc9ac583c Merge branch 'fix/fix_spi_lcd_psram_mode_v6.0' into 'release/v6.0'
fix(spi_lcd): add a flag to decide whether dma accsess psram (v6.0)

See merge request espressif/esp-idf!47795
2026-04-28 16:42:33 +08:00
morris 5152f19a65 Merge branch 'fix/fix_lcd_cmd_bypassd_unexpectedly_v6.0' into 'release/v6.0'
fix(lcd): fix lcd cmd be bypassd unexpectedly (v6.0)

See merge request espressif/esp-idf!47805
2026-04-28 16:42:24 +08:00
morris 88483aeef2 Merge branch 'fix/isp_clk_error_v6.0' into 'release/v6.0'
Fix ISP clk source error and hal init error (v6.0)

See merge request espressif/esp-idf!47323
2026-04-28 16:41:23 +08:00
morris d53e191915 Merge branch 'fix/i2c_fsm_reset_sequence_v6.0' into 'release/v6.0'
fix(i2c): reset master before bus clear on chips without HW FSM reset (v6.0)

See merge request espressif/esp-idf!47507
2026-04-28 16:40:53 +08:00
morris 7189c22ef2 Merge branch 'doc/i2c_master_probe_comment_update_v6.0' into 'release/v6.0'
docs(i2c): update i2c_master_probe parameter comment (v6.0)

See merge request espressif/esp-idf!47511
2026-04-28 16:40:43 +08:00
Wang Meng Yang 622dcfb864 Merge branch 'bugfix/ai_review_hfp_v6.0' into 'release/v6.0'
fix(bt): fix HFP issues reported by AI code review (v6.0)

See merge request espressif/esp-idf!47761
2026-04-28 15:16:13 +08:00
yangfeng acf9f2bb47 fix(bt): fix A2DP stack component issues reported by AI review 2026-04-28 15:15:35 +08:00
yangfeng 436c5ab14b fix(bt): fix A2DP bta component issues reported by AI review 2026-04-28 15:15:35 +08:00
yangfeng bdda22b90b fix(bt): fix A2DP api and btc component issues reported by AI review 2026-04-28 15:15:35 +08:00
Wang Meng Yang f93ff3e5f0 Merge branch 'bugfix/btm_sec_free_dev_v6.0' into 'release/v6.0'
fix(bt): avoid deleting device record on partial transport cleanup (v6.0)

See merge request espressif/esp-idf!47294
2026-04-28 15:15:08 +08:00
Wang Meng Yang 068145be52 Merge branch 'bugfix/ai_review_avrcp_v6.0' into 'release/v6.0'
fix(bt): fix AVRCP component issues reported by AI review (v6.0)

See merge request espressif/esp-idf!47676
2026-04-28 15:14:06 +08:00
Wang Meng Yang 8b82ddcadd Merge branch 'bugfix/spp_deinit_v6.0' into 'release/v6.0'
fix(bt/bluedroid): flushed all the DM PM at the end of SPP deinit (v6.0)

See merge request espressif/esp-idf!47289
2026-04-28 15:11:05 +08:00
Roland Dobai 11bc5423c9 Merge branch 'feat/cmakev2_bootloader_v6.0' into 'release/v6.0'
feat(cmakev2): build bootloader using the cmakev2 build system (v6.0)

See merge request espressif/esp-idf!47903
2026-04-28 08:53:53 +02:00
Island 7fc3744abd Merge branch 'change/ble_update_lib_20260409_v6.0' into 'release/v6.0'
change(ble): [AUTO_MR] 20260409 - Update ESP BLE Controller Lib (6.0)

See merge request espressif/esp-idf!47419
2026-04-28 14:25:25 +08:00
Zhou Xiao 30fa84b0b0 fix(ble_log): ensure BLE Log IRAM functions are placed in IRAM on ESP32C2
On ESP32C2 with BT_CTRL_RUN_IN_FLASH_ONLY, the bt_default linker scheme
routes .iram1 sections to flash_text, causing BLE_LOG_IRAM_ATTR functions
to end up in flash instead of IRAM. Define a dedicated .ble_log_iram1
section for ESP32C2 and route it to iram0_bt_text unconditionally.
2026-04-28 13:29:15 +08:00
Zhou Xiao b3dccba3ac fix(ble_log): improve robustness with atomics, macro hygiene, and IRAM
- Use __atomic_fetch_add for stat_mgr counters to prevent lost updates
  under concurrent ISR/task access (H1)
- Use __atomic_load_n with ACQUIRE ordering for ref_count spin-loops (L1)
- Remove unnecessary BLE_LOG_IRAM_ATTR from ble_log_rt_task since it
  calls flash-resident functions and cannot run during flash ops (L3)
- Add parentheses to BLE_LOG_TRANS_FREE_SPACE and BLE_LOG_MAKE_FRAME_META
  macro parameters to prevent operator precedence bugs (M6)
2026-04-28 13:29:15 +08:00
Zhou Xiao 217d9b23f6 fix(ble_log): fix deinit race and concurrent flush deadlock
- Reorder deinit: stop RT task before destroying peripheral driver to
  prevent sending transports to a NULL dev_handle on dual-core (H2)
- Drain remaining queue items in rt_deinit to clean up transport state
- Add atomic flush_in_progress guard to prevent two concurrent
  ble_log_flush() callers from deadlocking on ref_count spin-wait (H5)
2026-04-28 13:29:15 +08:00
Zhou Xiao 9c8090a5d4 fix(ble_log): fix crash and resource issues in peripheral drivers
- Handle scheduler-suspended and ISR context in UART redirect path
  to prevent xSemaphoreTake crash during light sleep (C1)
- Check uart_driver_install return value before setting inited flag (M1)
- Always clean up SPI device handle in deinit even if acquire_bus fails (M4)
2026-04-28 13:29:15 +08:00