Jiang Jiang Jian
b21c907b3d
Merge branch 'fix/improve_get_start_doc_notes_v53' into 'release/v5.3'
...
fix(doc): fix get start process in port notes
See merge request espressif/esp-idf!45226
2026-01-26 10:50:27 +08:00
Jiang Jiang Jian
b1f588a521
Merge branch 'bugfix/idfci-7928_v5.3' into 'release/v5.3'
...
backport v5.3: fix ci failed test case of Automatic light occurs when tasks are suspended
See merge request espressif/esp-idf!45213
2026-01-26 10:48:45 +08:00
Jiang Jiang Jian
97b6acea33
Merge branch 'bugfix/esp_idf_p4_pm-654_v5.3' into 'release/v5.3'
...
fix(esp_hal_wdt): ESP32P4 RTC WDT stage0 timeout set error(v5.3)
See merge request espressif/esp-idf!45307
2026-01-26 10:44:34 +08:00
Jiang Jiang Jian
7debd4858d
Merge branch 'fix/ieee802154_sec_frame_config_v5.3' into 'release/v5.3'
...
fix(802.15.4): fixed security frame configuration (v5.3)
See merge request espressif/esp-idf!45355
2026-01-26 10:39:51 +08:00
Wang Meng Yang
86a2cd358b
Merge branch 'bugfix/sync_security_fix_from_flouride_v5.3' into 'release/v5.3'
...
fix: synchronized several security-related fixes from Google Fluoride (v5.3)
See merge request espressif/esp-idf!44409
2026-01-23 10:17:34 +08:00
Martin Vychodil
05be360759
Merge branch 'contribute/github_pr_17789_v5.3' into 'release/v5.3'
...
fix(storage/spiffs): fix readdir setting errno on directory end (v5.3)
See merge request espressif/esp-idf!45383
2026-01-23 04:37:19 +08:00
Augusto Zanellato
1333f8310e
fix(storage/spiffs): fix readdir setting errno on directory end
...
spiffs_res_to_errno maps `SPIFFS_ERR_END_OF_OBJECT` to EIO which breaks the common contract where
errno should be 0 if readdir iterated through all the entries in a directory.
The fix is explicitly checking for `SPIFFS_ERR_END_OF_OBJECT` and in that case set errno to 0.
2026-01-22 15:02:22 +01:00
zwx
d711ffabf7
fix(802.15.4): locate the ieee802154_sec_clear on the noflash
2026-01-22 19:47:57 +08:00
zwx
fa7b11e4f9
fix(802.15.4): fixed security frame configuration
2026-01-22 15:15:26 +08:00
Rahul Tank
899ad86b51
Merge branch 'bugfix/fix_memory_leak_in_deinit_v5.3' into 'release/v5.3'
...
fix(nimble): Fixed invalid access to already freed memory in deinit sequence (v5.3)
See merge request espressif/esp-idf!45236
2026-01-22 09:31:47 +05:30
Island
85e984ec38
Merge branch 'fix/ble_mesh_eliminate_deprecated_warn_for_mbt_v5.3' into 'release/v5.3'
...
fix(ble_mesh): eliminate deprecated warning for mbt (v5.3)
See merge request espressif/esp-idf!44627
2026-01-22 11:44:22 +08:00
Jin Cheng
80d811ecb1
fix(bt/bluedroid): cleaned the code according to the tool cppcheck
2026-01-22 10:53:51 +08:00
Jin Cheng
833597cf0f
fix(bt/bluedroid): fixed possible OOB read in smp_br_data_received
2026-01-22 10:53:51 +08:00
Jin Cheng
6aacb79a7c
fix(bt/bluedroid): drop connection when atttempting to disable encryption
2026-01-22 10:53:51 +08:00
Jin Cheng
a0719393cb
fix(bt/bluedroid): fixed an integer overflow bug in attp_build_read_multi_cmd
2026-01-22 10:53:51 +08:00
Jin Cheng
df9e25affa
fix(bt/bluedroid): fixed an integer overflow bug in avdt_msg_asmbl
2026-01-22 10:53:51 +08:00
Jin Cheng
b079446301
fix(bt/bluedroid): fixed an OOB bug in bta_av_setconfig_rej
2026-01-22 10:53:51 +08:00
Jin Cheng
035c2e5204
fix(bt/bluedroid): fixed an OOB bug in btm_read_rssi_complete
2026-01-22 10:53:51 +08:00
Jin Cheng
25aa93ed9b
fix(bt/bluedroid): fixed an OOB bug in btm_delete_stored_link_key_complete
2026-01-22 10:53:51 +08:00
Jin Cheng
90ca5a29bc
fix(bt/bluedroid): fixed an OOB bug in btm_read_tx_power_complete
2026-01-22 10:53:51 +08:00
Jin Cheng
3bad841601
fix(bt/bluedroid): fixed an OOB bug in btm_create_conn_cancel_complete
2026-01-22 10:53:51 +08:00
Jin Cheng
7a7f21f3d0
fix(bt/bluedroid): fixed an OOB bug in btm_read_local_oob_complete
2026-01-22 10:53:51 +08:00
Jin Cheng
e6c3031280
fix(bt/bluedroid): fixed an OOB write in SDP_AddAttribute
2026-01-22 10:53:51 +08:00
Jin Cheng
1f82934814
fix(bt/bluedroid): report failure when not able to connect to AVRCP
2026-01-22 10:53:51 +08:00
Jin Cheng
f814a1125e
fix(bt/bluedroid): fixed buffer overflow in BRSF
2026-01-22 10:53:51 +08:00
Jin Cheng
c2cf36d98c
fix(bt/bluedroid): added negative length check in process_service_search_rsp
2026-01-22 10:53:51 +08:00
Jin Cheng
13033abfe0
fix(bt/bluedroid): fixed OOB read in SDP server continuation length
2026-01-22 10:53:51 +08:00
Jin Cheng
91b76926aa
fix(bt/bluedroid): added length check when copy AVDTP packet
2026-01-22 10:53:51 +08:00
Jin Cheng
09f381ba97
fix(bt/bluedroid): fixed OOB read in AT_SKIP_RESET
2026-01-22 10:53:51 +08:00
Jin Cheng
80fda864ad
fix(bt/bluedroid): fixed OOB write in bta_hf_client_handle_cind_list_item
2026-01-22 10:53:51 +08:00
Jin Cheng
0084b75e2d
fix(bt/bluedroid): added boundary check when reading SDP attribute response packet
2026-01-22 10:53:51 +08:00
Jin Cheng
4d13c41ce8
fix(bt/bluedroid): fixed potential OOB read in the avrc_pars_vendor_rsp
2026-01-22 10:53:51 +08:00
Jin Cheng
4e47e20177
fix(bt/bluedroid): fixed potential OOB read in the reporting handler
...
Thanks to Luigino Camastra and Pavel Kohout from Aisle Research as
co-reporters for discovering and reporting this issue.
2026-01-22 10:53:51 +08:00
Jin Cheng
bca3ea13f6
fix(bt/bluedroid): fixed a potential overflow about the media payload offset
...
This variable is uint16_t, and is possible to overflow when the length
of headder extension is larger. Here we compare with the data length to
prevent any exceptions.
2026-01-22 10:53:51 +08:00
Jin Cheng
0296e64d35
fix(bt/bluedroid): fixed p_data null dereference in l2c_csm_open
2026-01-22 10:53:51 +08:00
Jin Cheng
56494d664e
fix(bt/bluedroid): fixed Use-After-Free in btm_sec_[dis]connected
2026-01-22 10:53:51 +08:00
Jin Cheng
516a54f0fb
fix(bt/bluedroid): reject device with same address in legacy paring
2026-01-22 10:53:51 +08:00
Jin Cheng
2cb39d84aa
fix(bt/bluedroid): ignore AVCT commands that are too long
2026-01-22 10:53:51 +08:00
Jin Cheng
2e9a6554e4
fix(bt/bluedroid): use osi_calloc to zero reserved fields in AVRCP
2026-01-22 10:53:51 +08:00
Jin Cheng
dfad85a5cd
fix(bt/bluedroid): make sure SDP only start discovery once
2026-01-22 10:53:51 +08:00
Jin Cheng
e2c0498697
fix(bt/bluedroid): check event ID if of register notification from remote to avoid OOB write
2026-01-22 10:53:51 +08:00
Jin Cheng
2f17f9ffd7
fix(bt/blurdoird): check Classic key before cross-key derivation
2026-01-22 10:53:51 +08:00
Jin Cheng
87740ade2d
fix(bt/blurdoird): enable bitpool snity checks
2026-01-22 10:53:51 +08:00
Marius Vikhammer
1b4082ebcd
Merge branch 'ci/enable_esp_event_tests_v5.3' into 'release/v5.3'
...
ci(core): fixed esp_event not running properly in CI (v5.3)
See merge request espressif/esp-idf!44760
2026-01-22 09:12:21 +08:00
Alexey Gerenkov
418b307914
Merge branch 'update_jtag_docs_v5.3' into 'release/v5.3'
...
Update jtag docs (v5.3)
See merge request espressif/esp-idf!44889
2026-01-21 23:09:32 +08:00
Wang Meng Yang
73860f3c6e
Merge branch 'feat/set_max_sync_conn_v5.3' into 'release/v5.3'
...
feat(bt): set BR/EDR max sync conn eff for Bluedroid HFP on ESP32 (v5.3)
See merge request espressif/esp-idf!45244
2026-01-21 19:47:06 +08:00
Wang Meng Yang
df554b5b54
Merge branch 'bugfix/source_acp_miss_audio_cfg_evt_v5.3' into 'release/v5.3'
...
Bugfix/source acp miss audio cfg evt v5.3
See merge request espressif/esp-idf!45260
2026-01-21 19:13:30 +08:00
Roland Dobai
b5b374ab3a
Merge branch 'coredump_read_flash_retry_v5.3' into 'release/v5.3'
...
Add retry logic to espcoredump subprocess call (v5.3)
See merge request espressif/esp-idf!45320
2026-01-21 10:10:26 +01:00
Erhan Kurubas
0bfd92877f
test(panic): add retry logic to espcoredump subprocess call
2026-01-21 08:33:47 +03:00
Rahul Tank
9a6d89752a
fix(nimble): Fix memory leak in controller/stack deinit sequence
2026-01-21 10:30:35 +05:30
