Zhi Wei Jian
a6fed3daae
fix(ble/bluedroid): fix GATT teardown and service-change flow
...
(cherry picked from commit 0645ba469d )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-14 12:03:50 +08:00
Zhi Wei Jian
0927c1990d
fix(ble/bluedroid): fix GATT service lifecycle leaks
...
(cherry picked from commit ac93d94958 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-14 12:03:49 +08:00
Zhi Wei Jian
c33e3c13bc
fix(ble/bluedroid): add GATT resource-cleanup helpers
...
(cherry picked from commit b83327f3ca )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-14 12:03:49 +08:00
Zhi Wei Jian
1b3a7a04c2
feat(ble/bluedroid): Support bluedroid LE COC and EATT features
...
(cherry picked from commit 83f0831c53 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-07-14 11:56:00 +08:00
Island
9c65614fa5
Merge branch 'fix/ble_mesh_fixed_issues_v5.3' into 'release/v5.3'
...
Resolve reported BLE mesh stack issues (5.3)
See merge request espressif/esp-idf!50404
2026-07-14 10:16:53 +08:00
Euripedes Rocha
b6234bb6fc
Merge branch 'fix/sec-347-hostname-null-check_v5.3' into 'release/v5.3'
...
fix(esp_netif): reject NULL hostname in esp_netif_set_hostname_api (SEC_347) (v5.3)
See merge request espressif/esp-idf!50593
2026-07-10 14:14:51 +02:00
morris
e11c30437a
Merge branch 'fix/uhci_rx_fsm_v5.3' into 'release/v5.3'
...
fix(uhci): rx fsm race condition (v5.3)
See merge request espressif/esp-idf!50581
2026-07-10 11:22:38 +08:00
Jiang Jiang Jian
f6bad005cf
Merge branch 'change/change_regdma_malloc_caps_v5.3' into 'release/v5.3'
...
change(esp_hw_support): change regdma malloc caps to allow getting memory in the DMA pool (v5.3)
See merge request espressif/esp-idf!50261
2026-07-10 10:28:44 +08:00
Euripedes Rocha Filho
5e65088205
fix(esp_netif): reject NULL hostname in esp_netif_set_hostname_api
...
esp_netif_set_hostname_api() dereferenced hostname via strlen() without
checking it for NULL first, causing a NULL pointer dereference.
2026-07-09 16:08:17 +02:00
Hu Rui
9bcf04ab89
fix(uhci): rx fsm race condition
...
Closes https://github.com/espressif/esp-idf/issues/18746
2026-07-09 19:06:08 +08:00
Zhang Wen Xu
b6860b2db5
Merge branch 'feat/update_openthread_submodule_and_br_lib_20260624_v5.3' into 'release/v5.3'
...
feat(openthread): update openthread submodule (v5.3)
See merge request espressif/esp-idf!50521
2026-07-09 10:16:54 +00:00
wuzhenghui
82712313ea
change(heap): reserve DMA pool with low priority MALLOC_CAP_DEFAULT caps
2026-07-09 17:37:14 +08:00
Hu Rui
730120e90b
fix(dac): dac_continuous set is_cyclic flag in async mode
2026-07-09 11:21:08 +08:00
Xu Si Yu
779a53a262
feat(openthread): update thread-lib for upstream b678a4f6
...
* esp-openthread: thread_zigbee/esp-openthread@47428f1e8
* openthread: espressif/openthread@b678a4f63
* esp-idf: espressif/esp-idf@3871860a4
2026-07-08 12:54:27 +00:00
Xu Si Yu
3871860a45
feat(openthread): update openthread submodule
2026-07-08 20:40:55 +08:00
Xu Si Yu
79df489b73
fix(openthread): fix TREL peer discovery by selecting IPv6 from mDNS address list
2026-07-08 20:40:55 +08:00
Rahul Tank
0b3400b620
Merge branch 'bugfix/ai_reviewer_nimble_1.6_v5.3' into 'release/v5.3'
...
fix(nimble): Fixes for AI reported issues (v5.3)
See merge request espressif/esp-idf!50017
2026-07-08 13:59:36 +05:30
Jiang Jiang Jian
3a1db20dce
Merge branch 'bugfix/drop_broadcast_frag_frame_v5.3' into 'release/v5.3'
...
fix(esp_wifi): Drop broadcast fragmented frames (v5.3)
See merge request espressif/esp-idf!50463
2026-07-08 14:11:12 +08:00
Rahul Tank
86297605f9
fix(nimble): Fixes for AI reported issues
2026-07-07 16:34:25 +05:30
Kapil Gupta
f538412383
fix(esp_wifi): Drop broadcast fragmented frames
2026-07-07 15:14:33 +05:30
Xu Si Yu
9c5f62906d
feat(openthread): add APIs to clear a single src match short and extended entry in esp radio spinel
2026-07-07 17:40:03 +08:00
Marius Vikhammer
7a79a3f242
Merge branch 'fix/vfs_fatfs_test_stale_partition_v5.3' into 'release/v5.3'
...
test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes (v5.3)
See merge request espressif/esp-idf!50435
2026-07-07 14:43:37 +08:00
Martin Vychodil and Cursor
6d2d0c7056
test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes
...
Reformat the test partition before each mount so those tests always start from
a known-empty filesystem.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-06 16:59:52 +02:00
muhaidong
78d1eb235d
fix(wifi): fix some wifi bugs 260706 v5.3
...
1. support weak func for wifi lmac assert
2. post disconnect event after disassociation tx callback
2026-07-06 19:32:24 +08:00
muhaidong
bf225a618c
fix(wifi): support weak func for wifi lmac assert
2026-07-06 19:28:49 +08:00
muhaidong
65822e1c82
fix(coex): remove unsupported external coex soc caps
2026-07-06 19:28:27 +08:00
Luo Xu
865c1143b7
fix(ble_mesh): re-check scan dev-found cb before scan-rsp invocation
...
(cherry picked from commit 9a3a767824 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:51 +08:00
Luo Xu
b11bd0c0eb
fix(ble_mesh): comment out logs containing sensitive keys
...
(cherry picked from commit 781d6b2314 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:50 +08:00
Luo Xu
5ef184d780
fix(ble_mesh): validate PB-ADV start segment length
...
(cherry picked from commit 912ec8dc62 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:50 +08:00
Luo Xu
4721dba6ca
fix(ble_mesh): Reset reassembly buffer at start of each transaction
...
The reassembly buffer must be reset to its origin at the beginning of every
transaction. prov_msg_recv() pulls the PDU type byte (advancing buf->data by
one) and nothing restores it between transactions. Without this reset,
buf->data drifts forward by one byte per received PDU, causing the segment-0
memcpy to write past the end of the statically allocated rx buffer
(PROV_RX_BUF_SIZE), and the XACT_SEG_DATA() offsets used for continuation
segments to be skewed by the accumulated drift.
(cherry picked from commit 2c4acaa2aa )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:49 +08:00
Luo Xu
4255fbaf84
fix(ble_mesh): fix DFD client message parsing and encoding bugs
...
Fix multiple wire-format and robustness issues in the DFD client
(dfd_cli.c):
- handle_capabilities: read oob_retrieval_supported as u8 instead of
le32. The server encodes a single byte; le32 over-consumed 3 bytes
of the URL scheme list and could over-read the buffer.
- handle_upload_status: extract upload_progress from bits 0-6 (& 0x7F)
and upload_type from bit 7 (>> 7), matching the server encoding
(progress | BIT(7)). The previous >>1 / &0x01 returned wrong values,
mis-classified in-band vs OOB, and falsely rejected valid OOB
messages with high progress.
- handle_dfd_status: correct the transfer-mode byte layout to
trans_mode bits 0-1, update_policy bit 2, RFU bits 3-7 (previously
read bits 6-7 / 5), and fix the RFU mask to 0xF8. Now matches the
struct bitfield definition and the DFD server.
- handle_dfd_status: report status+phase and return early when
buf->len == 0 (IDLE phase) instead of pulling 10 absent bytes.
- bt_mesh_dfd_cli_distribution_start: encode trans_mode/update_policy
into bits 0-2 so the server decodes them correctly.
- handle_receiver_list: validate buf->len >= entries_cnt * 5 before
the loop, and handle entries_cnt == 0 without relying on calloc(0).
- handle_receiver_status: pass the status value (not the whole union)
to the %d log format, fixing undefined behavior.
- dfd_client_recv_status: drop the dead BLE_MESH_DFD_OP_CAPABILITIES_GET
case (a client-send opcode) from the receive switch.
- bt_mesh_dfd_cli_receivers_add: widen msg_length to uint32_t to avoid
uint16_t overflow that bypassed the PDU size guard; add a NULL check
for the receivers array.
- bt_mesh_dfd_cli_distribution_upload_oob_start: return -EINVAL
instead of -1 for consistency with the rest of the file.
(cherry picked from commit 43137475e1 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:49 +08:00
Luo Xu
d17cc4d0ce
fix(ble_mesh): added max dfd srv count limit
...
(cherry picked from commit 781218cb62 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:43 +08:00
Luo Xu
ed236b7b0d
fix(ble_mesh): reject invalid chunk size
...
(cherry picked from commit 35cd10fbdf )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:43 +08:00
Luo Xu
98875dc920
fix(ble_mesh): fixed invalid disconnect handler wrote
...
(cherry picked from commit 52cfff707f )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:42 +08:00
Luo Xu
9aef1fc224
fix(ble_mesh): fixed BLE-Mesh NimBLE extended-adv reassembly buffer overflow on COMPLETE fragment
...
(cherry picked from commit 1b22467f63 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:42 +08:00
Luo Xu
f9da09de61
fix(ble_mesh): fixed BLE-Mesh GATTS read-callback error
...
(cherry picked from commit 00adfb3cbc )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:41 +08:00
Jiang Jiang Jian
698b47d8fd
Merge branch 'fix/ble_mesh_disable_adv_pkt_discard_log_v5.3' into 'release/v5.3'
...
fix(ble_mesh): Disable warning logging when advertising packets are discarded (5.3)
See merge request espressif/esp-idf!50164
2026-07-06 15:13:29 +08:00
Island
4292cd472c
Merge branch 'fix/ble-log-64-bit-io-setup-support_v5.3' into 'release/v5.3'
...
fix(ble_log): use BIT64 over BIT to support 64-bit IO setup (5.3)
See merge request espressif/esp-idf!50328
2026-07-06 12:23:17 +08:00
Wang Meng Yang
2f00d765d6
Merge branch 'bugfix/bbp_issues_v5.3' into 'release/v5.3'
...
Bugfix/bbp issues v5.3
See merge request espressif/esp-idf!50192
2026-07-06 11:56:03 +08:00
Wang Meng Yang
91abdc6674
Merge branch 'bugfix/ai_review_btu_common_v5.3' into 'release/v5.3'
...
fix: Fix the critical issues of btu and bt_common from AI review report (v5.3)
See merge request espressif/esp-idf!50125
2026-07-06 10:48:27 +08:00
Song Ruo Jing
9516083cb1
feat(ppa): add sleep retention support for DMA2D and PPA
2026-07-03 20:36:32 +08:00
Rahul Tank
69d6deb7e6
Merge branch 'bugfix/queue_att_cmd_v5.3' into 'release/v5.3'
...
feat(nimble): Defer all ATT commands until connection event is sent to GAP layer (v5.3)
See merge request espressif/esp-idf!48180
2026-07-03 16:07:05 +05:30
Jiang Jiang Jian
0716e14bc6
Merge branch 'backport/backport_some_wifi_changes_260701_v5.3' into 'release/v5.3'
...
backport/backport_some_wifi_changes_260701_v5.3(backport v5.3)
See merge request espressif/esp-idf!50250
2026-07-03 14:08:52 +08:00
Rahul Tank
9b92b5a02b
fix(nimble): Defer Events / ATT related information from stack
...
Defer Events/ ATT related GAP events from stack until connection
event is sent to GAP layer
2026-07-03 11:21:08 +05:30
Zhou Xiao
c9de85f36a
fix(ble_log): use BIT64 over BIT to support 64-bit IO setup
...
(cherry picked from commit a2876d304e )
Co-authored-by: Zhou Xiao <zhouxiao@espressif.com >
2026-07-03 12:04:53 +08:00
morris
4e044c7c5c
Merge branch 'fix/jpeg_over_size_v5.3' into 'release/v5.3'
...
fix(jpeg): Fix the jpeg size might exceed the buffer size (backport v5.3)
See merge request espressif/esp-idf!50031
2026-07-03 11:12:39 +08:00
yinqingzhao
c6663ccecd
fix(wifi): comment out functions from ld files
2026-07-01 19:35:40 +08:00
yinqingzhao
6fde86c528
fix(wifi): optimizations of csa procedure and keep alive mechanism
2026-07-01 17:21:37 +08:00
yinqingzhao
ac7d6034a0
fix(wifi): fix scheduling issue when tasks have the same priority as the Wi-Fi task
2026-07-01 12:28:35 +08:00
yinqingzhao
d690d0b2d3
fix(phy): fix still put multiple phy init date bin into flash when CONFIG_ESP_PHY_MULTIPLE_INIT_DATA_BIN_EMBED is enabled
2026-07-01 12:27:11 +08:00