Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity
51,489 Commits 25 Branches 192 Tags
a2d865b4c8c7ca303b414db9c7122e5deeb91799
Commit Graph

51489 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Konstantin Kondrashov
a2d865b4c8 fix(esp_event): protect is_handler_registered traversal with mutex (SEC-219) 
esp_event_is_handler_registered() walked loop_nodes, base_nodes, id_nodes
and handler lists with no lock held, then released an unowned mutex at the
'out:' label via xSemaphoreGive().

Concurrent register/unregister/delete operations can free handler nodes
during the unlocked walk (SLIST UAF). The xSemaphoreGive on an unowned
recursive mutex corrupts the recursive call-count of any task that
legitimately holds the mutex.

Fix:
- Take loop->mutex with xSemaphoreTakeRecursive before the traversal.
- Replace xSemaphoreGive at the 'out:' label with xSemaphoreGiveRecursive
  so every exit path holds the mutex for exactly one balanced take/give.

Closes SEC_219
 2026-07-21 16:51:39 +03:00
Konstantin Kondrashov
2fec4e6930 fix(esp_event): fix format string vulnerability in esp_event_dump (SEC-064) 
fprintf(file, buf) is a format-string sink: if any registered event base
or handler name contains "%", fprintf interprets it as a format directive,
causing an information leak or crash.

Replace with fprintf(file, "%s", buf) so the buffer is always treated as
plain text regardless of its content.

Closes SEC_064
 2026-07-21 16:51:39 +03:00
Martin Vychodil
406ac81a03 Merge branch 'contrib/github_pr_18400_v6.0' into 'release/v6.0' 
Improve logging for VFS start_select function (GitHub PR) (v6.0)

See merge request espressif/esp-idf!49550
 2026-07-21 19:30:10 +08:00
gadget-man
22d46e4f22 Fix bug in logging for VFS start_select function 
Resolves issue identified in https://github.com/espressif/esp-idf/issues/18398 by seperating logging when `vfs == NULL`

Closes https://github.com/espressif/esp-idf/pull/18400
Closes https://github.com/espressif/esp-idf/issues/18398
 2026-07-21 11:37:34 +02:00
Alexey Gerenkov
f4058b3648 Merge branch 'enable_esp32p4_jtag_tests_v6.0' into 'release/v6.0' 
Enable esp32p4 jtag tests (v6.0)

See merge request espressif/esp-idf!50547
 2026-07-21 12:09:21 +08:00
morris
5d0975e307 Merge branch 'feat/i2s_duplex_update_v6.0' into 'release/v6.0' 
feat(i2s): allow full duplex mode in less strict condition (v6.0)

See merge request espressif/esp-idf!50866
 2026-07-21 11:09:18 +08:00
Jiang Jiang Jian
fb02baed9b Merge branch 'bugfix/fix_some_coex_bugs_260720_v6.0' into 'release/v6.0' 
Bugfix/fix some coex bugs 260720 v6.0(Backport v6.0)

See merge request espressif/esp-idf!50943
 2026-07-21 10:56:10 +08:00
morris
ed43092fa5 Merge branch 'fix/fix_i2s_i80_color_size_check_v6.0' into 'release/v6.0' 
fix(lcd): add color size check for i80 and boundary check for rgb (v6.0)

See merge request espressif/esp-idf!50962
 2026-07-21 10:26:40 +08:00
morris
9a12e8c9d2 Merge branch 'fix/fix_image_header_check_v6.0' into 'release/v6.0' 
image header: fixed image header segment count check (v6.0)

See merge request espressif/esp-idf!50935
 2026-07-21 10:12:07 +08:00
Alexey Gerenkov
c0992a3a5a Merge branch 'sysview_test_fixes_v6.0' into 'release/v6.0' 
Sysview test fixes v6.0

See merge request espressif/esp-idf!50729
 2026-07-20 18:45:30 +08:00
Jiang Jiang Jian
6e1dc59ed9 Merge branch 'fix/blacklist_flag_correction_v6.0' into 'release/v6.0' 
fix(wifi): Correct blacklist flag(v6.0)

See merge request espressif/esp-idf!50919
 2026-07-20 16:17:55 +08:00
Chen Jichang
635ac8461c fix(lcd): add color size check for i80 and boundary check for rgb 2026-07-20 16:16:03 +08:00
morris
9e040f4c20 Merge branch 'bugfix/ana_cmpr_macro_v6.0' into 'release/v6.0' 
fix(ana_cmpr): Fix swapped POS/NEG cross interrupt masks on ESP32-C5/P4 (v6.0)

See merge request espressif/esp-idf!50799
 2026-07-20 14:22:39 +08:00
Jiang Jiang Jian
a2cd919a64 Merge branch 'bugfix/bug_bounty_av_v6.0' into 'release/v6.0' 
fix(bt/bluedroid): Fix bug bounty issues about A/V from NVIDIA (v6.0)

See merge request espressif/esp-idf!50477
 2026-07-20 13:54:41 +08:00
muhaidong
ecf281be4a fix(coex): fix coex status get issue 2026-07-20 12:02:23 +08:00
Xu Si Yu
a2b9628d49 fix(coex): move 15.4 register configuration to 15.4 init 2026-07-20 11:58:33 +08:00
Jiang Jiang Jian
3befd9d774 Merge branch 'bugfix/add_en_rst_in_pvt_func_for_p4_backport_v6.0' into 'release/v6.0' 
fix(pvt): add en reset in pvt func for p4 on release v6.0

See merge request espressif/esp-idf!50882
 2026-07-20 11:39:00 +08:00
Jiang Jiang Jian
f298dd2110 Merge branch 'bugfix/sdmmc-ddr-response-buffer-leak_v6.0' into 'release/v6.0' 
fix(sdmmc): free DMA response buffer on DDR mode switch failure (v6.0)

See merge request espressif/esp-idf!50886
 2026-07-20 10:45:54 +08:00
Jiang Jiang Jian
d1d8dd478d Merge branch 'bugfix/nvs-flash-erase-partition-leak_v6.0' into 'release/v6.0' 
fix(nvs_flash): delete temporary NVSPartition after erase (v6.0)

See merge request espressif/esp-idf!50891
 2026-07-20 10:45:35 +08:00
Jiang Jiang Jian
f24018d113 Merge branch 'feature/enable_zb_for_esp32p4_v6.0' into 'release/v6.0' 
feat(soc): enable zb* extensions for esp32p4 greater v3 (v6.0)

See merge request espressif/esp-idf!50779
 2026-07-20 10:44:17 +08:00
Jiang Jiang Jian
06b8df9d7a Merge branch 'doc/bootloader-anti-rollback-fix_v6.0' into 'release/v6.0' 
fix(docs): Update bootloader anti-rollback documentation (v6.0)

See merge request espressif/esp-idf!50838
 2026-07-20 10:41:12 +08:00
Jiang Jiang Jian
4f063a3166 Merge branch 'fix/bootloader_anti_rollback_konfig_v6.0' into 'release/v6.0' 
fix(bootloader): Hide bootloader anti-rollback Kconfig where not supported (v6.0)

See merge request espressif/esp-idf!50817
 2026-07-20 10:39:09 +08:00
Jiang Jiang Jian
a1b0ace41b Merge branch 'fix/keep_use_secure_element_v6.0' into 'release/v6.0' 
fix(esp-tls): Keep deprecated use_secure_element field for compatibility (v6.0)

See merge request espressif/esp-idf!50780
 2026-07-20 10:38:38 +08:00
Jiang Jiang Jian
f5323ed82c Merge branch 'contrib/github_pr_18817_v6.0' into 'release/v6.0' 
fix(wear_levelling): guard WL_Flash::write()/read() against size==0 underflow (GitHub PR) (v6.0)

See merge request espressif/esp-idf!50731
 2026-07-20 10:36:48 +08:00
Jiang Jiang Jian
21fdc1b01f Merge branch 'contrib/github_pr_18823_v6.0' into 'release/v6.0' 
fix(vfs): use MAX_FDS instead of VFS_MAX_COUNT when clearing fd table on unregister (GitHub PR) (v6.0)

See merge request espressif/esp-idf!50698
 2026-07-20 10:34:04 +08:00
Euripedes Rocha
493af45bb4 Merge branch 'fix/sec-1162-1189-1190-null-checks_v6.0' into 'release/v6.0' 
fix(esp_netif): harden NULL and OOM handling in netif APIs (SEC-1162, SEC-1189, SEC-1190) (v6.0)

See merge request espressif/esp-idf!50599
 2026-07-20 04:32:58 +02:00
Euripedes Rocha
533fdf256b Merge branch 'fix/sec-1137-br-glue-double-free_v6.0' into 'release/v6.0' 
fix(esp_netif): harden br_glue instance-handler cleanup against double-free (SEC-1137) (v6.0)

See merge request espressif/esp-idf!50643
 2026-07-20 04:32:26 +02:00
Erhan Kurubas
f6cc49eeb1 change(ci): limit printing OpenOCD connection errors 2026-07-20 10:31:28 +08:00
Jiang Jiang Jian
d5e6becd46 Merge branch 'fix/lwip_sec_high_v6.0' into 'release/v6.0' 
fix(lwip): high severity lwip fixes (v6.0)

See merge request espressif/esp-idf!50591
 2026-07-20 10:30:51 +08:00
Jiang Jiang Jian
04ccdc72e0 Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260703_v6.0' into 'release/v6.0' 
feat(tools): update openocd version to v0.12.0-esp32-20260703 (v6.0)

See merge request espressif/esp-idf!50503
 2026-07-20 10:30:15 +08:00
Jiang Jiang Jian
55afa16a8a Merge branch 'backport/bdl_ioctl_checker_v6.0' into 'release/v6.0' 
feat(esp_blockdev): add build-time ioctl command reservation overlap checker (v6.0 backport)

See merge request espressif/esp-idf!50217
 2026-07-20 10:21:59 +08:00
Armando (Dou Yiwen)
19784893df fix: fixed image header segment count check 
Signed-off-by: Armando (Dou Yiwen) <douyiwen@espressif.com>
 2026-07-20 10:21:49 +08:00
Wang Meng Yang
bed9759dbb Merge branch 'bugfix/avrc_ca_attr_id_check_v6.0' into 'release/v6.0' 
fix(bt): Fix the validation of AVRCP metadata attr_id in handle_rc_attributes_rsp (v6.0)

See merge request espressif/esp-idf!50550
 2026-07-19 14:37:06 +08:00
Wang Meng Yang
e3a54f6673 Merge branch 'bugfix/fix_bredr_inq_crash_v6.0' into 'release/v6.0' 
fix(bt/bluedroid): fix crash during bredr inquiry when zero-addr device is found (v6.0)

See merge request espressif/esp-idf!50854
 2026-07-19 12:45:13 +08:00
yangfeng
ca77dffadc fix(bt): Fix the validation of AVRCP metadata attr_id in handle_rc_attributes_rsp 2026-07-19 10:26:33 +08:00
yangfeng
e472bc3868 fix(bt/bluedroid): Fix unchecked p_ctrl_cback and p_msg_cback in AVRC 
Closes SEC-1186
 2026-07-19 10:21:29 +08:00
yangfeng
a3088cdce1 fix(bt/bluedroid): Fix missing NULL check on p_cfg in AVDT_ReconfigReq 
Closes SEC-1187
 2026-07-19 10:21:29 +08:00
Rahul Tank
04ccb4c955 Merge branch 'bugfix/add_dis_ieee_udi_to_config_v6.0' into 'release/v6.0' 
fix(nimble): Add option to disable IEEE and UDI Characteristic in DIS (v6.0)

See merge request espressif/esp-idf!50760
 2026-07-18 09:31:45 +05:30
Wang Meng Yang
e743ff2a10 Merge branch 'bugfix/smp_sec_flags_v6.0' into 'release/v6.0' 
fix(bt/bluedroid): fixed several security issues from NVIDIA (v6.0)

See merge request espressif/esp-idf!50566
 2026-07-17 20:04:33 +08:00
tarun.kumar
fd0d67c3dc fix(wifi): Correct blacklist flag 2026-07-17 17:09:24 +05:30
Wang Meng Yang
27a5aba8e1 Merge branch 'feat/ble_log_compression_module_cfg_update_v6.0' into 'release/v6.0' 
Feat/ble log compression module cfg update (6.0)

See merge request espressif/esp-idf!49875
 2026-07-17 19:35:49 +08:00
Martin Vychodil
326a998708 Merge branch 'fix/sdmmc_cmd_err_switch_case_handling_v6.0' into 'release/v6.0' 
fix(sdmmc): sdmmc_cmd.c fixed error handling in certain if and switch statements (v6.0)

See merge request espressif/esp-idf!50683
 2026-07-17 18:23:40 +08:00
Sumeet Singh
73ef4148a8 fix(nimble): Add option to disable IEEE and UDI Characteristic in DIS (v6.0) 2026-07-17 14:57:20 +05:30
sonika.rathi
3ad5251819 fix(nvs_flash): delete temporary NVSPartition after erase 2026-07-17 10:57:27 +02:00
sonika.rathi
849a342fe0 fix(sdmmc): free DMA response buffer on DDR mode switch failure 2026-07-17 10:47:47 +02:00
wuzhenghui
5d528ee6d4 feat(esp_hw_support): fix esp32p4 PVT retention link 2026-07-17 16:24:05 +08:00
yanzihan@espressif.com
d6e6ee1dbb feat(pvt): add en reset in pvt func for p4 on master 2026-07-17 16:23:53 +08:00
Jiang Jiang Jian
a89931243c Merge branch 'bugfix/change_pvt_timer_target_param_backport_v6.0' into 'release/v6.0' 
feat(pvt): change pvt timer target & limit on release v6.0

See merge request espressif/esp-idf!50814
 2026-07-17 16:13:16 +08:00
Chen Chen
5c7be29ef2 refactor(i2s): make the slot_bit_width checks unique 2026-07-17 14:38:27 +08:00
Chen Chen
47bb180049 feat(i2s): allow full duplex mode in less strict condition 2026-07-17 14:38:27 +08:00