Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-09-22 13:01:16 +03:00
Code Issues Packages Projects Releases Wiki Activity
51,858 Commits 25 Branches 192 Tags
ab5b29e52ceba7bc4d39a37a7901efed2f3d472e
Commit Graph

36010 Commits

Author SHA1 Message Date
Laukik Hase
ab5b29e52c Merge branch 'fix/tee_reentrant_svc_and_non_det_sign_v6.0' into 'release/v6.0' 
feat(esp_tee): Backports to v6.0

See merge request espressif/esp-idf!52290
 2026-09-07 10:10:44 +05:30
Mahavir Jain
62d03c7761 Merge branch 'fix/hmac-ds-reset-corrupts-concurrent-mpi_v6.0' into 'release/v6.0' 
fix(esp_security): don't reset DS peripheral in esp_hmac_calculate (v6.0)

See merge request espressif/esp-idf!52200
 2026-09-07 08:04:00 +05:30
Mahavir Jain
ad299bbd82 Merge branch 'contrib/github_pr_18922_v6.0' into 'release/v6.0' 
fix(esp_https_server): restore use_secure_element initializer in HTTPD_SSL_CONFIG_DEFAULT() (GitHub PR) (v6.0)

See merge request espressif/esp-idf!52207
 2026-09-06 20:37:52 +05:30
Ashish Sharma
7cf8c1fe05 fix(esp_security): don't reset DS peripheral in esp_hmac_calculate 
esp_hmac_calculate() enabled and reset the Digital Signature (DS)
peripheral, but HMAC has no dependency on DS (the dependency runs the
other way: a DS operation uses HMAC/SHA).

The DS peripheral drives the RSA (MPI) accelerator internally, so pulsing
the DS reset also resets the RSA datapath. This coupling exists on every
target that has the DS peripheral: the MPI reset routine itself clears the
DS reset "otherwise RSA is held in reset".

esp_hmac_calculate() holds only the HMAC and SHA/AES locks, not the MPI
lock, so it can corrupt a concurrent RSA/MPI operation. On multi-core
targets (e.g. ESP32-P4, ESP32-S31, ESP32-S3) an HMAC on one core resets an
RSA op running on another core; on single-core targets (e.g. ESP32-C5) the
same corruption happens when an HMAC preempts an in-flight RSA op. The
result is a wrong RSA result or a crash in the computation.

Remove the DS peripheral enable/reset from the HMAC path. SHA, which HMAC
depends on, is enabled independently, so the HMAC output is unchanged.
This also drops a few redundant register writes.
 2026-09-06 20:14:29 +05:30
Mahavir Jain
307018d1ab Merge branch 'fix/esp_http_server-ws-frame-header-strictness_v6.0' into 'release/v6.0' 
Fix(esp http server): ws frame header strictness (v6.0)

See merge request espressif/esp-idf!51857
 2026-09-06 20:12:59 +05:30
Wang Meng Yang
8d9613b259 Merge branch 'bugfix/delete_unused_avrcp_rcb_v6.0' into 'release/v6.0' 
fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails (v6.0)

See merge request espressif/esp-idf!52413
 2026-09-06 12:08:39 +08:00
Wang Meng Yang
b1f6f992d2 Merge branch 'bugfix/qos_div_zero_v6.0' into 'release/v6.0' 
fix(bt): update ESP32 libbtdm_app.a to fix several issues (v6.0)

See merge request espressif/esp-idf!52053
 2026-09-06 11:32:52 +08:00
Wang Meng Yang
70d938445d Merge branch 'fix/aireview_pbap_v6.0' into 'release/v6.0' 
fix(bt_pbap): Fix some bugs in bluedroid PBAP (v6.0)

See merge request espressif/esp-idf!51728
 2026-09-06 11:26:03 +08:00
Wang Meng Yang
d5f9b93781 Merge branch 'change/refactor_hidh_datapath_v6.0' into 'release/v6.0' 
Change/refactor hidh datapath[backport v6.0]

See merge request espressif/esp-idf!51279
 2026-09-06 11:24:27 +08:00
Wang Meng Yang
a9ad41e428 Merge branch 'bugfix/a2dp_api_init_check_v6.0' into 'release/v6.0' 
fix(bt): Fix compatibility with A2DP API legacy usage methods (v6.0)

See merge request espressif/esp-idf!51328
 2026-09-06 11:20:08 +08:00
Wang Meng Yang
06a411f81a Merge branch 'fix/aireview_obex_v6.0' into 'release/v6.0' 
fix(bt_obex): fix some bugs in bluedroid obex (v6.0)

See merge request espressif/esp-idf!52005
 2026-09-06 11:18:52 +08:00
Wang Meng Yang
2cf3ad6d31 Merge branch 'fix/bt_memory_v6.0' into 'release/v6.0' 
fix(bt_memory): Reduce memory usage in transfer (v6.0)

See merge request espressif/esp-idf!52276
 2026-09-06 11:16:58 +08:00
Jiang Jiang Jian
3c5eaa6669 Merge branch 'fix/sae_pwe_ecc_fail_v6.0' into 'release/v6.0' 
fix(wpa_supplicant): Assign correct return value for SAE y-construction failure (v6.0)

See merge request espressif/esp-idf!52357
 2026-09-04 20:13:27 +08:00
Jiang Jiang Jian
89820050b7 Merge branch 'fix/roam_fixes_v6.0' into 'release/v6.0' 
Require RSSI gain before low-RSSI roam and added reason codes(v6.0)

See merge request espressif/esp-idf!52247
 2026-09-04 19:38:18 +08:00
Island
6eb40db09d Merge branch 'feat/adapt_uhci_code_260824_v6.0' into 'release/v6.0' 
refactor(hci): switch HCI UART DMA transport to UHCI driver APIs (6.0)

See merge request espressif/esp-idf!52160
 2026-09-04 17:58:17 +08:00
morris
31ceb68a04 Merge branch 'fix/jpeg_enc_header_oob_v6.0' into 'release/v6.0' 
fix(jpeg): validate encoder buffer sizes before header/DMA access (backport v6.0)

See merge request espressif/esp-idf!52122
 2026-09-04 17:57:34 +08:00
morris
17dabceecf Merge branch 'fix/dualcore_branch_predictor_cache_race_v6.0' into 'release/v6.0' 
fix(spi_flash): disable branch prediction on the parked core during flash ops (v6.0)

See merge request espressif/esp-idf!52202
 2026-09-04 17:57:09 +08:00
morris
c2638a5689 Merge branch 'fix/i2s_tdm_5slot_clock_test_v6.0' into 'release/v6.0' 
fix(hal): prevent overflow in fractional clock division (v6.0)

See merge request espressif/esp-idf!51430
 2026-09-04 17:56:03 +08:00
Alexey Gerenkov
2007a7c8db Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260831_v6.0' into 'release/v6.0' 
feat(tools): update openocd version to v0.12.0-esp32-20260831 (v6.0)

See merge request espressif/esp-idf!52392
 2026-09-04 17:32:14 +08:00
Alexey Gerenkov
3d678a280b Merge branch 'add_trace_doc_section_v6.0' into 'release/v6.0' 
docs(esp_trace): restructure tracing docs with esp_trace as master (v6.0)

See merge request espressif/esp-idf!52265
 2026-09-04 17:22:14 +08:00
morris
e214cf1b20 Merge branch 'feat/atomic-internal_v6.0' into 'release/v6.0' 
fix(driver): allocate driver objects containing atomic variables from internal SRAM (v6.0)

See merge request espressif/esp-idf!52341
 2026-09-04 17:18:55 +08:00
Rahul Tank
c0b30a11db Merge branch 'bugfix/fix_stale_conn_cccd_v6.0' into 'release/v6.0' 
fix(nimble): fix crash on disconnect due to stale per-connection CCCD pool (v6.0)

See merge request espressif/esp-idf!51951
 2026-09-04 14:42:22 +05:30
Fu Hanxi
14297ada26 Merge branch 'ci/apply-common-scripts-v6.0' into 'release/v6.0' 
ci: apply common-scripts refactor (v6.0)

See merge request espressif/esp-idf!50991
 2026-09-04 09:33:06 +02:00
Mahavir Jain
068fb15c0f Merge branch 'fix/crt-bundle-unaligned-reads_v6.0' into 'release/v6.0' 
fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access (v6.0)

See merge request espressif/esp-idf!51724
 2026-09-04 12:31:11 +05:30
Rahul Tank
a64ac3a8f6 fix(nimble): fix crash on disconnect due to stale per-connection CCCD pool 2026-09-04 12:17:48 +05:30
Mahavir Jain
ec3877cf6c fix(mbedtls): read crt bundle byte-wise to avoid misaligned flash access 
The offset table and the per-cert length fields of the certificate
bundle were read through uint16_t*/uint32_t* casts, which compile to
halfword/word loads at addresses with no alignment guarantee: bundles
supplied via esp_crt_bundle_set() can start anywhere, and cert entries
are byte-packed, so their 16-bit fields land at arbitrary offsets.

On chips with SOC_CPU_MISALIGNED_ACCESS_ON_PMP_MISMATCH_ISSUE (DIG-694:
ESP32-C6/H2/H21) a misaligned load from memory-mapped flash can take a
spurious "Load access fault" when it sits within two instructions of an
access to a differently-permissioned region, observed as a crash in
esp_crt_check_bundle()/CA callback during TLS handshakes with a bundle
that happened to be placed at an odd address.
 2026-09-04 11:06:54 +05:30
Laukik Hase
c7f74fd751 change(esp_tee): Limit the TEE secure storage AEAD operation input buffer length 2026-09-04 10:23:25 +05:30
Laukik Hase
a4d6b802a7 feat(esp_tee): Disable the MBEDTLS_PSA_ASSUME_EXCLUSIVE_BUFFERS option for TEE build 2026-09-04 10:23:25 +05:30
Laukik Hase
e5c3063dee fix(esp_tee): Snapshot input arguments in TEE memory before secure service execution 
- Also fix the `tee_cli_app` build failure due to TEE heap size overflow
 2026-09-04 10:23:25 +05:30
Laukik Hase
e9cd262217 change(esp_tee): Force non-deterministic ECDSA signing for TEE secure storage keys 2026-09-04 10:23:24 +05:30
Laukik Hase
8e34cc16cc feat(esp_tee): Use CTR-DRBG for assisting random number generation in TEE 
- For ESP-TEE, fault-assert in `esp_random()` if the RNG is held in a
  freeze state
 2026-09-04 10:23:24 +05:30
Laukik Hase
eb0a81b89a feat(hal): Add LL-API to check whether RNG is enabled 
- Also add RNG LL-APIs for ESP32-C61
 2026-09-04 10:23:24 +05:30
Laukik Hase
e01f93eec4 fix(esp_tee): Reject re-entrant secure service calls from the REE 2026-09-04 10:23:23 +05:30
Ashish Sharma
e41ac40b86 fix(ws): enforce payload length encoding minimality and MSB constraints 
Independently reported in parallel by DatanoiseTV <syso.berlin@icloud.com>
 2026-09-04 12:03:15 +08:00
Ashish Sharma
ebd8108ccc fix(ws): reject RSV bits, reserved opcodes, fragmented control frames 2026-09-04 12:01:03 +08:00
hejiaxin
340ce2b338 fix(bt_pbap): Fix some bugs in bluedroid PBAP 
- Add sdp_seq to avoid p_ccb being free during sdp
- Changed some BTA_Pba functions to return non-void value
- Improve error catching and report
- Refactor bta_pba_client_response to avoid UAF problem
- Rearrange btc_pba_client init flag to avoid some disturbing bug
 2026-09-04 11:55:05 +08:00
hejiaxin
b2c98e72cd fix(bt_avrcp): size some AVRC command buffers 2026-09-04 11:51:39 +08:00
ShenWeilong
d3b4dd9584 fix(ble): Check if there are illegal library files in controller lib path 2026-09-04 11:03:01 +08:00
ShenWeilong
3dbbafbbb3 fix(bt): fixed mempool deinit crash issue 2026-09-04 11:00:59 +08:00
Shu Chen
1ccc930b04 Merge branch 'fix/fix_openthread_netif_glue_deinit_issue_v6.0' into 'release/v6.0' 
fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup (v6.0)

See merge request espressif/esp-idf!52398
 2026-09-04 02:45:20 +00:00
hejiaxin
4226c1fdd4 fix(bt_obex): fix some bugs in bluedroid obex 
- fix goepc wait state switch
- fix psm unbind's mismatch
- fix some resources leak
- fix goep connection's incorrect ternimation when congesting
- Add some NULL ptr check
 2026-09-04 10:20:04 +08:00
Matteo Sandrin
ffa442cb5d fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails 2026-09-04 10:07:55 +08:00
yangfeng
9905ffe7f5 fix(bt): Fix compatibility with A2DP API legacy usage methods 
- Modify the timing of API calls in the A2DP example
- Closes https://github.com/espressif/esp-idf/issues/18786
 2026-09-04 10:02:48 +08:00
liqigan
822f1617bf change(bt/bluedroid): Used dynamic osi event to reduce lock cost 2026-09-04 09:41:19 +08:00
zhanghaipeng
6d23cb7278 docs(bt): clarify Bluedroid GATT signed write API comments 
Correct misleading CHAR_PROP_BIT_AUTH wording and document CSRK-based
signed write usage for server permissions and client write APIs.
 2026-09-04 09:40:32 +08:00
zhanghaipeng
ad5a7d778e fix(ble/bluedroid): allow osi_event re-post during POSTING window 
Do not reject osi_thread_post_event() when only POSTING is set.
QUEUED already prevents double-queueing; rejecting POSTING caused
HCI downstream lost wakeup. Add generic osi_event and hci downstream
diagnostics for post failures.
 2026-09-04 09:40:32 +08:00
liqigan
4412ff55b2 fix(bt/bluedroid): Fixed use after free issue on osi_event_delete 2026-09-04 09:40:29 +08:00
liqigan
1dcaf24129 fix(bt/bluedroid): Fixed HID host reconnection bug and enabled load HID devices 
Closes https://github.com/espressif/esp-idf/issues/18335
 2026-09-04 09:32:58 +08:00
liqigan
6c27057d67 change(bt/bluedroid): Refactored HCI ACL datapath 2026-09-04 09:32:58 +08:00
liqigan
20757b7933 change(bt/bluedroid): Refactored HID host datapath 2026-09-04 09:32:58 +08:00