Commit Graph

49246 Commits

Author SHA1 Message Date
Jiang Jiang Jian
b56a9090fc Merge branch 'bugfix/idfci-13866_v5.5' into 'release/v5.5'
backport v5.5: config wakeup gpio pin internal pullup to avoid input floating

See merge request espressif/esp-idf!52773
2026-09-14 20:23:58 +08:00
Wang Meng Yang
c5f9831279 Merge branch 'bugfix/msbc_oob_read_v5.5' into 'release/v5.5'
fix(bt/bluedroid): fixed OOB read dring mSBC sync word check (v5.5)

See merge request espressif/esp-idf!52768
2026-09-14 17:24:43 +08:00
Li Shuai
1e3dd97fbf fix(unit-test): config wakeup gpio pin internal pullup to avoid input floating 2026-09-14 14:51:46 +08:00
Jin Cheng
5d58539407 fix(bt/bluedroid): fixed OOB read dring mSBC sync word check 2026-09-14 12:04:18 +08:00
Jiang Jiang Jian
23d23f3f41 Merge branch 'bugfix/fix_example_power_save_build_fail_issue_v5.5' into 'release/v5.5'
fix(esp_timer): preserve timer_process_alarm symbol for ldgen(Backport v5.5)

See merge request espressif/esp-idf!52741
2026-09-14 11:08:48 +08:00
Jiang Jiang Jian
1e7ba70413 Merge branch 'bugfix/wpa_supplicant_upstream_security_issues_v5.5' into 'release/v5.5'
esp_wifi: Port security issues from upstream supplicant (v5.5)

See merge request espressif/esp-idf!52676
2026-09-14 11:07:50 +08:00
Jiang Jiang Jian
be1c214237 Merge branch 'change/ble_update_lib_20260904_v5.5' into 'release/v5.5'
change(ble): [AUTO_MR] 20260904 - Update ESP BLE Controller Lib (5.5)

See merge request espressif/esp-idf!52438
2026-09-14 10:32:00 +08:00
Marius Vikhammer
7a2d687f53 Merge branch 'fix/esp_task_stack_is_sane_cache_disabled_spm_check_v5.5' into 'release/v5.5'
fix(spi_flash): recognize SPM-resident stacks as cache-disable-safe (v5.5)

See merge request espressif/esp-idf!52739
2026-09-14 09:57:09 +08:00
Jiang Jiang Jian
b4711bcff7 Merge branch 'feat/support-phy-grant-protect_v5.5' into 'release/v5.5'
feat(coex): support phy grant protect (v5.5)

See merge request espressif/esp-idf!52559
2026-09-14 09:46:53 +08:00
Wang Meng Yang
72ea868c67 Merge branch 'fix/bt_hfp_v5.5' into 'release/v5.5'
fix(bt_hfp): Fix some bugs in hfp (v5.5)

See merge request espressif/esp-idf!52751
2026-09-14 08:04:06 +08:00
Rahul Tank
042e88e6bf Merge branch 'bugfix/nimble_gattc_write_long_zero_len_v5.5' into 'release/v5.5'
fix(nimble): Send Prepare Write Request before Execute Write in write long with zero-length data (v5.5)

See merge request espressif/esp-idf!49768
2026-09-13 11:44:54 +05:30
Jiang Jiang Jian
02c6ca331f Merge branch 'fix/supplicant_checks_v5.5' into 'release/v5.5'
Fixed OOB read on short FT auth and RRM action frames(v5.5)

See merge request espressif/esp-idf!52710
2026-09-11 20:21:47 +08:00
morris
ba899c9781 Merge branch 'fix/adc-sample-freq-kconfig-v5.5' into 'release/v5.5'
fix(soc): correct ESP32 ADC sample frequency thresholds

See merge request espressif/esp-idf!51786
2026-09-11 17:58:18 +08:00
Shreeyash Bhakare
c07b5cb9d4 fix(nimble): Send Prepare Write Request before Execute Write with zero-length data 2026-09-11 14:58:59 +05:30
hejiaxin
189b9bbd2d fix(bt_hfp): Fix some bugs in hfp
- Fix hfp callback data length
- Fix the solution of unknown AT command
2026-09-11 17:25:56 +08:00
Rahul Tank
a7121aef2c Merge branch 'bugfix/nimble_issues_08092026_v5.5' into 'release/v5.5'
fix few nimble issues 08092026(v5.5)

See merge request espressif/esp-idf!52603
2026-09-11 14:38:57 +05:30
zhaoweiliang
f37458da02 change(ble): [AUTO_MR] Update lib_esp32c5 to acd9a26e 2026-09-11 16:26:04 +08:00
zhaoweiliang
2f25a9fb5d change(ble): [AUTO_MR] Update lib_esp32h2 to acd9a26e 2026-09-11 16:25:44 +08:00
zhaoweiliang
068dadca31 change(ble): [AUTO_MR] Update lib_esp32c6 to acd9a26e 2026-09-11 16:24:54 +08:00
muhaidong
8fc16bc28f fix(esp_timer): preserve timer_process_alarm symbol for ldgen 2026-09-11 16:05:30 +08:00
Guillaume Souchere
d400947773 fix(spi_flash): Check for SPM memory in esp_task_stack_is_sane_cache_disabled 2026-09-11 09:49:28 +02:00
Xu Si Yu
f14deb95a0 feat(coex): support phy grant protect 2026-09-11 14:41:01 +08:00
Richard Allen
08064bc03b TLS: Avoid discarded-qualifiers
Just a build issue fix depending on GCC5+ configuration, fixes:

assignment discards 'const' qualifier from pointer target type [-Werror=discarded-qualifiers]
return discards 'const' qualifier from pointer target type [-Werror=discarded-qualifiers]

Signed-off-by: Richard Allen <richard@bryghtlabs.com>
2026-09-11 14:24:58 +08:00
Jimi Chen
9de31f008c SAE: Fix crash due to NULL pointer dereference in H2E parsing
In H2E (Hash-to-Element) mode, sae_parse_commit() parses the optional
Anti-Clogging Token Container by calling sae_parse_token_container().

However, callers of sae_parse_commit() that do not require retrieving
the anti-clogging token (such as PASN initiator/responder and SME auth)
pass NULL for the token and token_len output arguments.

If the peer sends a Commit frame containing a valid Anti-Clogging
Token Container element, sae_parse_token_container() unconditionally
sets *token and *token_len, resulting in a NULL pointer dereference
(SIGSEGV) and crashing wpa_supplicant.

Fix this by adding NULL checks before writing to token and token_len.
Update the debug log to print the token directly using 'pos'.

Fixes: 5e32fb0170f4 ("SAE: Use Anti-Clogging Token Container element with H2E")
Signed-off-by: Amarnath Hullur Subramanyam <amarnathhs@google.com>
2026-09-11 14:24:58 +08:00
Jouni Malinen
9c825298fc Require network_ctx and AKMP match for accepting PMKSA entry
When wpa_supplicant was processing EAPOL-Key msg 1/4 with a PMKID
indicated by the AP/Authenticator, a PMKSA for the same AA was accepted
without enforcing matching network_ctx (i.e., same network configuration
block) and AKMP. This could allow misbehaving APs to make wpa_supplicant
use an unacceptable PMKSA entry that was generated for a different
network for AKMP under certain conditions. This could result in showing
a connection to an incorrect network when an attacker has credentials to
one network in wpa_supplicant configuration, but not to another network.

Fix this by accepting the PMKID to set the PMKSA for an association only
if the PMKSA with the same PMKID is for the same network and was
generated using the same AKMP.

Signed-off-by: Jouni Malinen <jouni.malinen@oss.qualcomm.com>
2026-09-11 14:24:58 +08:00
Aditi
03b3e0217c feat(wpa_supplicant): Match SPA when searching PMKSA cache
Store the supplicant address (SPA) in PMKSA cache entries and match
it when looking up the PMKSA cache.

(partially picked from commit 18cbdbf2b1)
2026-09-11 14:24:58 +08:00
tarun.kumar
f9aee5422d fix(wifi) : Fixed OOB read on short FT auth and RRM action frames 2026-09-11 14:23:40 +08:00
Jiang Jiang Jian
d8b677db7e Merge branch 'bugfix/fix_softap_return_home_channel_failed_v5.5' into 'release/v5.5'
fix(scan): prioritize if1_conn check for home channel return logic and fix(wifi): fix wifi scan and wps connect issue v5.5

See merge request espressif/esp-idf!52674
2026-09-11 14:04:53 +08:00
Jiang Jiang Jian
538027f317 Merge branch 'riscv_panic_bp_fix_v5.5' into 'release/v5.5'
fix(esp_system/panic): ensure breakpoint set from panic handler gets hit afterwards (v5.5)

See merge request espressif/esp-idf!51829
2026-09-11 13:59:52 +08:00
Jiang Jiang Jian
7e04f11475 Merge branch 'feature/esp_timer_is_active_when_cb_is_running_v5.5' into 'release/v5.5'
feat(esp_timer): Adds blocking stop API (v5.5)

See merge request espressif/esp-idf!52241
2026-09-11 13:58:12 +08:00
Jiang Jiang Jian
a3c9d8da81 Merge branch 'fix/dualcore_branch_predictor_cache_race_v5.5' into 'release/v5.5'
fix(spi_flash): disable branch prediction on the parked core during flash ops (v5.5)

See merge request espressif/esp-idf!52201
2026-09-11 12:16:45 +08:00
Jiang Jiang Jian
dd1f19b654 Merge branch 'fix/esp-timer-restart-expiry-race_v5.5' into 'release/v5.5'
fix(esp_timer): prevent restart expiry race (v5.5)

See merge request espressif/esp-idf!51806
2026-09-11 12:14:42 +08:00
Jiang Jiang Jian
a44050483b Merge branch 'fix/spi_buslock_unregister_issue_v5.5' into 'release/v5.5'
fix(hw_support): spi buslock fix unregister dev api issue (v5.5)

See merge request espressif/esp-idf!51473
2026-09-11 12:14:33 +08:00
Shu Chen
daa6f6a7e5 Merge branch 'fix/openthread-udp-host-interface_v5.5' into 'release/v5.5'
fix(openthread): preserve host interface on UDP receive (v5.5)

See merge request espressif/esp-idf!52691
2026-09-11 03:41:18 +00:00
sibeibei
1381a2510a ci(wpa_supplicant): use large partition table for supplicant test app 2026-09-10 20:43:07 +08:00
Rahul Tank
ecd654c861 Merge branch 'bugfix/hardware_error_assert_v5.5' into 'release/v5.5'
fix(nimble): Add hardware error event handling as normal event (v5.5)

See merge request espressif/esp-idf!52554
2026-09-10 17:12:24 +05:30
Jiang Jiang Jian
45d111a6aa Merge branch 'backport/h264_regdma_retention_v5.5' into 'release/v5.5'
feat(esp32p4): add H264 REGDMA link and sleep retention module (v5.5)

See merge request espressif/esp-idf!52666
2026-09-10 17:36:48 +08:00
zwx
9396199a22 fix(openthread): preserve host interface on UDP receive 2026-09-10 16:44:46 +08:00
Jiang Jiang Jian
fc488e14d4 Merge branch 'fix/brownout_restore_after_deepsleep_reject_v5.5' into 'release/v5.5'
fix(esp_hw_support): restore brownout after deep sleep rejection on ESP32-S2 (v5.5)

See merge request espressif/esp-idf!52646
2026-09-10 15:55:10 +08:00
Jiang Jiang Jian
e8669c03e7 Merge branch 'fix-ieee802154-teardown-order_v5.5' into 'release/v5.5'
ieee802154: Fix teardown order (v5.5)

See merge request espressif/esp-idf!52662
2026-09-10 15:53:59 +08:00
morris
d126d086d0 Merge branch 'fix/mcpwm_cap_prescale_v5.5' into 'release/v5.5'
fix(mcpwm): correct the wrong capture prescale (v5.5)

See merge request espressif/esp-idf!52506
2026-09-10 14:46:53 +08:00
sibeibei
d537815bb0 fix(scan): prioritize if1_conn check for home channel return logic 2026-09-10 12:25:05 +08:00
Jiang Jiang Jian
f402ab1c18 Merge branch 'fix/fix_issues_when_support_multiple_phy_init_data_v5.5' into 'release/v5.5'
Fix/fix issues when support multiple phy init data v5.5(backport v5.5)

See merge request espressif/esp-idf!52586
2026-09-10 11:26:09 +08:00
Jiang Jiang Jian
28cef9e926 Merge branch 'fix/lp_core_rc_fast_delay_freq_v5.5' into 'release/v5.5'
fix(ulp): hardcode LP core RC_FAST frequency per target (v5.5)

See merge request espressif/esp-idf!52672
2026-09-10 11:07:43 +08:00
Jiang Jiang Jian
a8e0939c4b Merge branch 'docs/mcpwm_deadtime_descrption_v5.5' into 'release/v5.5'
docs(mcpwm): add note for deadtime config (v5.5)

See merge request espressif/esp-idf!52641
2026-09-10 11:07:15 +08:00
Jiang Jiang Jian
175a1a582f Merge branch 'fix/esp32-ble-dtm-txbuf-leak_v5.5' into 'release/v5.5'
Fix DTM TX buffer leak in the BLE controller that could cause memory exhaustion and Interrupt WDT timeout during or after DTM TX tests. (5.5)

See merge request espressif/esp-idf!52614
2026-09-10 11:03:54 +08:00
Jiang Jiang Jian
593476dfb9 Merge branch 'contrib/github_pr_18818_v5.5' into 'release/v5.5'
fix(esp_http_client): fix parser wedge and dead error-classification branches on read timeout (GitHub PR) (v5.5)

See merge request espressif/esp-idf!52619
2026-09-10 11:00:57 +08:00
Jiang Jiang Jian
ca1b526f67 Merge branch 'feat/opt_prefer_bond_device_when_evicting_overflow_bonds_v5.5' into 'release/v5.5'
fix(bt/bluedroid): prefer disconnected peers when evicting overflow bonds (5.5)

See merge request espressif/esp-idf!52609
2026-09-10 11:00:18 +08:00
Jiang Jiang Jian
f23060d30c Merge branch 'bugfix/spp_deinit_fail_v5.5' into 'release/v5.5'
fix(bt/bluedroid): fixed JV disable event has no handler in Bluedroid (v5.5)

See merge request espressif/esp-idf!52595
2026-09-10 10:57:42 +08:00
Jiang Jiang Jian
1f1ed91bf7 Merge branch 'fix/ecdsa_hmac_ds_locking_v5.5' into 'release/v5.5'
fix(esp_security): Stop ECDSA and Key Manager resets from corrupting concurrent crypto (v5.5)

See merge request espressif/esp-idf!52579
2026-09-10 10:56:28 +08:00