Commit Graph
50743 Commits
Author SHA1 Message Date
Jiang Jiang Jian 948a5277ef Merge branch 'fix/fix_mbedtls_fs_io_psa_storage_v6.0' into 'release/v6.0'
fix(mbedtls): keep psa crypto storage enabled with ITS backend (v6.0)

See merge request espressif/esp-idf!48622
2026-06-03 16:44:19 +08:00
Jiang Jiang Jian 45bbf6d506 Merge branch 'bugfix/fix_ble_coded_phy_rx_bug_v6.0' into 'release/v6.0'
fix(coex): fix ble coded phy rx issue when aborted by coex (v6.0)

See merge request espressif/esp-idf!48982
2026-06-03 16:39:10 +08:00
Jiang Jiang Jian c207f867ac Merge branch 'bugfix/ft_igtk_installation_v6.0' into 'release/v6.0'
fix(esp_wifi): Correct igtk key installation in ft-psk mode (v6.0)

See merge request espressif/esp-idf!49209
2026-06-03 14:08:03 +08:00
Kapil Gupta e862096a56 fix(esp_wifi): Correct igtk key installation in ft 2026-06-03 08:53:46 +05:30
Jiang Jiang Jian ee92b559f0 Merge branch 'fix-fix_ub_in_gpio_wakeup_setting_v6.0' into 'release/v6.0'
fix(esp_hw_support): add validation for gpio_pin_mask (v6.0)

See merge request espressif/esp-idf!49106
2026-06-03 10:55:54 +08:00
Jiang Jiang Jian 011fee3374 Merge branch 'fix/tls-session-verify-and-hostname-warn_v6.0' into 'release/v6.0'
fix(esp-tls): fix TLS session resumption bypassing CA verification and clarify skip_common_name behavior (v6.0)

See merge request espressif/esp-idf!48929
2026-06-03 10:46:03 +08:00
Jiang Jiang Jian 59032327db Merge branch 'fix/mbedtls-psa-constant-time-and-zeroization_v6.0' into 'release/v6.0'
fix(mbedtls): use constant-time compare for MAC verify and zeroize key material (v6.0)

See merge request espressif/esp-idf!48729
2026-06-02 20:12:59 +08:00
Jiang Jiang Jian e4cec9653c Merge branch 'fix/mbedtls-psa-hmac-opaque-abort-null-deref_v6.0' into 'release/v6.0'
fix(mbedtls): correct inverted NULL check in esp_hmac_abort_opaque (v6.0)

See merge request espressif/esp-idf!48731
2026-06-02 20:12:37 +08:00
Jiang Jiang Jian f923b26769 Merge branch 'fix/fix_put_phy_init_bin_into_partiiton_when_embed_v6.0' into 'release/v6.0'
fix(phy): fix still put multiple phy init date bin into flash when...(backport v6.0)

See merge request espressif/esp-idf!49148
2026-06-02 20:11:59 +08:00
yinqingzhao 7e4fbdb971 fix(phy): fix still put multiple phy init date bin into flash when CONFIG_ESP_PHY_MULTIPLE_INIT_DATA_BIN_EMBED is enabled 2026-06-02 12:06:17 +08:00
Jiang Jiang Jian 99a0d1e604 Merge branch 'fix/fix_rtc_spinlock_sleep_dead_lock_v6.0' into 'release/v6.0'
fix(esp_hw_support): fix possible dead lock in deepsleep process (v6.0)

See merge request espressif/esp-idf!49067
2026-06-02 11:25:23 +08:00
wuzhenghui 7cd6206eeb fix(esp_hw_support): add validation for gpio_pin_mask 2026-06-01 19:34:46 +08:00
Jiang Jiang Jian 30e5a5d026 Merge branch 'fix/roam_backoff_reschedule_v6.0' into 'release/v6.0'
Prevent timeout payload double-free on deinit (v6.0)

See merge request espressif/esp-idf!48629
2026-06-01 17:22:26 +08:00
Jiang Jiang Jian f2b8de2f7b Merge branch 'ci/forced_esptool_install_v6.0' into 'release/v6.0'
CI: Force the update of esptool to the latest dev release in every job (v6.0)

See merge request espressif/esp-idf!48632
2026-06-01 16:16:09 +08:00
Aditya Patwardhan f77a7d16ec fix(mbedtls): use constant-time compare and zeroize key material
Replace memcmp with mbedtls_ct_memcmp in PSA MAC verify_finish entries
(CMAC, HMAC-transparent, HMAC-opaque) to prevent timing side-channel
MAC forgery, and unconditionally zeroize the locally-computed MAC on
the stack before return so a later stack-disclosure primitive cannot
recover the valid MAC.

Replace bzero with mbedtls_platform_zeroize in AES context free paths.
2026-05-30 23:15:44 +05:30
Aditya Patwardhan 4fb4dbda90 fix(mbedtls): correct inverted NULL check in esp_hmac_abort_opaque
esp_hmac_abort_opaque() had an inverted guard that called
mbedtls_platform_zeroize() on the context only when the context pointer
was NULL, dereferencing NULL and skipping cleanup of valid contexts.

Effect:
* Calling the abort path with a NULL pointer crashes (NULL write)
  instead of being a safe no-op.
* The valid (non-NULL) HMAC opaque operation context is never zeroized
  on abort, leaving sensitive intermediate HMAC state and key handle
  references in operation memory until the buffer is overwritten or
  freed.

Fix: invert the check so zeroization runs only when the context pointer
is non-NULL.
2026-05-30 23:15:42 +05:30
wuzhenghui 12af88b3d9 fix(esp_hw_support): fix possible dead lock in deepsleep process 2026-05-29 21:21:36 +08:00
Jiang Jiang Jian 9d24b38a42 Merge branch 'fix/bring_back_ecjpake_config_v6.0' into 'release/v6.0'
fix(mbedtls): bring back deprecated config MBEDTLS_ECJPAKE_C (v6.0)

See merge request espressif/esp-idf!48623
2026-05-29 17:27:59 +08:00
Jiang Jiang Jian 6bdbae15c9 Merge branch 'fix/protocomm-close-session-id-mismatch_v6.0' into 'release/v6.0'
fix(protocomm): pass current session id when closing existing session (v6.0)

See merge request espressif/esp-idf!48734
2026-05-29 17:26:26 +08:00
Jiang Jiang Jian 43437de360 Merge branch 'bugfix/fix_some_rom_func_ld_issue_v6.0' into 'release/v6.0'
fix(wifi): fix som rom func ld issue(Backport v6.0)

See merge request espressif/esp-idf!49006
2026-05-29 11:37:00 +08:00
Jiang Jiang Jian 3747a7025d Merge branch 'fix/remove_intwdt_config_critical_for_chips_except_esp32_v6.0' into 'release/v6.0'
fix(esp_system): remove intwdt config critical area for chips except esp32 (v6.0)

See merge request espressif/esp-idf!48844
2026-05-29 10:27:59 +08:00
Jiang Jiang Jian 97db803782 Merge branch 'bugfix/hfp_reg_data_cb_v6.0' into 'release/v6.0'
fix: Remove the check for recv and send being NULL(6.0)

See merge request espressif/esp-idf!48615
2026-05-29 10:27:03 +08:00
Mahavir Jain b31c2753bc Merge branch 'fix/fix_psa_ecdsa_driver_missing_checks_v6.0' into 'release/v6.0'
fix(mbedtls): fixes missing check before ecdsa verify (v6.0)

See merge request espressif/esp-idf!48947
2026-05-28 21:05:31 +05:30
muhaidong cb733f5287 fix(wifi): fix som rom func ld issue 2026-05-28 16:10:20 +08:00
Zhang Hai Peng 77c5270501 fix(bt): Update bt lib for ESP32-C3 and ESP32-S3(51d9dfde)
- improve coded PHY performance under Wi-Fi coexistence


(cherry picked from commit 8da824cd0e)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-05-28 11:24:25 +08:00
Jiang Jiang Jian 292d2cf23d Merge branch 'fix/mbedtls-threading-impl-kconfig-v6.0' into 'release/v6.0'
fix(mbedtls): make threading implementation exclusive (v6.0)

See merge request espressif/esp-idf!48850
2026-05-28 10:48:54 +08:00
Jiang Jiang Jian aeaff69b61 Merge branch 'bugfix/esp_idf_h4_ci_issues_v6.0' into 'release/v6.0'
fix(esp_rom): fix RTC_SLEEP_MODE_REG addr mismatch v6.0

See merge request espressif/esp-idf!48787
2026-05-28 10:34:46 +08:00
Jiang Jiang Jian 3014675c87 Merge branch 'fix/for_cache_after_p4_wb_loss_issue_v6.0' into 'release/v6.0'
fix(esp_rom): avoid critical issue in writeback v6.0

See merge request espressif/esp-idf!48746
2026-05-28 10:34:00 +08:00
zhiweijian 76b7ddd13e fix(ble/bluedroid): note LE Coded PHY impact on Wi-Fi coexistence in bluedroid GAP/GATT APIs 2026-05-28 10:30:54 +08:00
linruihao 799a720989 fix(coex): fix ble coded phy rx issue when aborted by coex 2026-05-28 10:30:53 +08:00
Island bac0d603b9 Merge branch 'change/ble_update_lib_20260520_v6.0' into 'release/v6.0'
change(ble): [AUTO_MR] 20260520 - Update ESP BLE Controller Lib (6.0)

See merge request espressif/esp-idf!48770
2026-05-27 19:00:28 +08:00
harshal.patil 40de3df854 test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver 2026-05-27 11:38:14 +05:30
Ashish Sharma 9de91ed9e5 fix(mbedtls): fixes missing check before ecdsa verify 2026-05-27 11:38:13 +05:30
Aditya Patwardhan 0004544536 fix(esp-tls): clarify skip_common_name and warn when SNI is disabled
The skip_common_name flag was named for the legacy CN field but actually
suppresses the entire mbedtls_ssl_set_hostname() call -- disabling
hostname matching against CN/SAN AND Server Name Indication. Update the
doxygen to describe the real effect, and emit a per-call WARN inside the
SNI-disable branch so debug-only use does not slip into production
unnoticed.
2026-05-26 19:12:27 +05:30
Aditya Patwardhan 15ac4697f3 fix(esp-tls): close CA-verification bypass during session resumption
The session-resumption else-if in set_client_config() short-circuited
the CA verification chain when only client_session was supplied. Remove
the branch so session-only configs fall through to the normal error /
skip-verify path; resumption no longer silently disables CA validation.
2026-05-26 19:12:27 +05:30
ShenWeilong d1930f9d45 fix(ble): won't add -Wno-unterminated-string-initialization for clang 2026-05-26 17:07:46 +08:00
luoxu 3dd06b7abe fix(bt): Normalize source paths for log compression pattern matching 2026-05-26 13:34:43 +08:00
Roland Dobai a9df167bf4 ci(gitlab): Use internal Esptool releases in the pipeline 2026-05-25 15:31:52 +02:00
ShenWeilong d8c912eb4d change(bt): Separated bt/cmakelist to bt/controller/cmakelist and bt/porting/cmakelist 2026-05-25 21:01:21 +08:00
Jiang Guang Ming da5f99a518 fix(mbedtls): make threading implementation exclusive
Ensure the pthread and alternate threading implementations cannot be enabled at the same time.
2026-05-25 13:52:12 +08:00
wuzhenghui fcad5f0a1d fix(esp_system): fix build err if int_wdt is not enabled on esp32 2026-05-25 10:35:34 +08:00
wuzhenghui e99ea90ee8 fix(esp_system): remove intwdt config critical area for chips except esp32 2026-05-25 10:35:30 +08:00
wanglei 66e2d08ed6 feat(esp_rom): do not patch Cache_WriteBack_All for bootloader build 2026-05-22 11:58:28 +08:00
wanglei 1f559a5558 fix(esp_rom): implement cache writeback related apis in iram
avoid critical issues caused by manual cache writeback and conflicting
writes. The issue exist on chips after esp32p4
2026-05-22 10:16:02 +08:00
hebinglin db3cf7c792 fix(esp_rom): fix RTC_SLEEP_MODE_REG addr mismatch 2026-05-21 15:31:34 +08:00
zhaoweiliang 527c3a0ade change(ble): [AUTO_MR] Update lib_esp32c6 to 4adb29e0 2026-05-21 10:41:15 +08:00
zhaoweiliang 8782647ac7 change(ble): [AUTO_MR] Update lib_esp32c5 to 4adb29e0 2026-05-21 10:40:18 +08:00
zhaoweiliang a4066942af change(ble): [AUTO_MR] Update lib_esp32h2 to 4adb29e0 2026-05-21 10:37:53 +08:00
Aditya Patwardhan f7399e0069 fix(protocomm): pass current session id when closing existing session
sec1_new_session()/sec2_new_session() were calling sec*_close_session()
with the *new* session_id parameter instead of the existing
cur_session->id. The close handler validates `cur_session->id ==
session_id` before performing teardown, so the call always failed with
ESP_ERR_INVALID_STATE.

Effect: when a peer started a new provisioning session while another was
already active, the previous session's PSA keys, AES context, SRP handle
and username buffer were leaked instead of being destroyed. The cleared
session struct was overwritten by the new session, leaking the previous
key handles inside PSA Crypto and (for security2) leaking heap memory
for the username and SRP context.

Fix: pass cur_session->id so the close path actually executes the
teardown (psa_destroy_key/psa_cipher_abort/esp_srp_free/free) before the
new session takes over.
2026-05-20 12:37:18 +05:30
Roland Dobai 8ea6271b77 ci(gitlab): Force the update of esptool to the latest dev release 2026-05-18 10:10:46 +02:00