Zhang Hai Peng
b8709f9f13
fix(ble/bluedroid): restore find info PDU stop on UUID format mismatch
...
Restore GATT_NO_RESOURCES when sequential attributes have differing UUID
sizes so gatts_process_find_info() stops building the response PDU.
(cherry picked from commit 196cb39545 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-09-07 20:38:14 +08:00
Rahul Tank
b45a624fd0
Merge branch 'bugfix/fix_ble_pair_attack_v5.5' into 'release/v5.5'
...
fix(nimble): Fix for BLERP attack (v5.5)
See merge request espressif/esp-idf!52352
2026-09-07 17:38:33 +05:30
Nachiket Kukade
055550e26e
Merge branch 'fix/eloop-wifi-deinit-leak-delay_v5.5' into 'release/v5.5'
...
test(wifi): wait for the idle task after esp_wifi_deinit in Wi-Fi UTs (Backport v5.5)
See merge request espressif/esp-idf!52513
2026-09-07 19:36:09 +08:00
Laukik Hase
59efed194c
Merge branch 'fix/tee_disallow_reentrant_sec_svc_v5.5' into 'release/v5.5'
...
feat(esp_tee): Backports to v5.5
See merge request espressif/esp-idf!52289
2026-09-07 16:22:43 +05:30
Sarvesh Bodakhe
57c0fb83da
test(wifi): wait for the idle task after esp_wifi_deinit in Wi-Fi UTs
...
The Wi-Fi task deletes itself when esp_wifi_deinit() is called, and FreeRTOS
only reclaims its TCB and stack from the idle task afterwards. Test apps that
read the heap right after deinit therefore see that memory as still allocated
and report a leak, most visibly as the eloop unit tests failing on ESP32.
Wait for the idle task at every point where a test deinitialises Wi-Fi
before a leak check, replacing the single-tick delays that only matched what
esp_wifi_deinit() already waits for internally.
(cherry picked from commit bff264775a )
2026-09-07 15:47:36 +05:30
Rahul Tank
58b4f19cdf
fix(nimble): Fix for BLERP attack
2026-09-07 14:00:57 +05:30
Rahul Tank
45ce9e56c8
Merge branch 'bugfix/fix_null_proc_dereference_v5.5' into 'release/v5.5'
...
fix(nimble): Avoid NULL proc dereference in GATT client procedures (v5.5)
See merge request espressif/esp-idf!52219
2026-09-07 13:53:50 +05:30
Jiang Jiang Jian
00cac0b72f
Merge branch 'contrib/github_pr_19038_v5.5' into 'release/v5.5'
...
fix(esp_lcd): yield from SPI ISR when color trans done callback wakes a task (GitHub PR) (v5.5)
See merge request espressif/esp-idf!52455
2026-09-07 11:27:48 +08:00
Jiang Jiang Jian
0cdf36ae5b
Merge branch 'fix/sae_pwe_ecc_fail_v5.5' into 'release/v5.5'
...
fix(wpa_supplicant): Assign correct return value for SAE y-construction failure (v5.5)
See merge request espressif/esp-idf!52359
2026-09-07 11:27:39 +08:00
Jiang Jiang Jian
e4404da2c4
Merge branch 'debug/idf-15875-fix_v5.5' into 'release/v5.5'
...
fix(psram): suspend external cache during CPU freq switch on esp32p4 (v5.5)
See merge request espressif/esp-idf!51686
2026-09-07 11:27:20 +08:00
Jiang Jiang Jian
290bea2cc6
Merge branch 'fix/ringbuf_max_item_size_v5.5' into 'release/v5.5'
...
fix(esp_ringbuf): harden ringbuf creation sizes checks (v5.5)
See merge request espressif/esp-idf!51001
2026-09-07 11:26:54 +08:00
Wang Meng Yang
362a1776ec
Merge branch 'bugfix/delete_unused_avrcp_rcb_v5.5' into 'release/v5.5'
...
fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails (v5.5)
See merge request espressif/esp-idf!52414
2026-09-06 12:36:05 +08:00
Rahul Tank
45e5ccc1e4
fix(nimble): Avoid NULL proc dereference in GATT client procedures
2026-09-06 09:54:15 +05:30
Wang Meng Yang
ca6bee0af8
Merge branch 'bugfix/fix_osi_event_bug_v5.5' into 'release/v5.5'
...
Bugfix/fix osi event bug[backport v5.5]
See merge request espressif/esp-idf!52324
2026-09-06 12:14:33 +08:00
Alexey Gerenkov
45f9798159
Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260831_v5.5' into 'release/v5.5'
...
feat(tools): update openocd version to v0.12.0-esp32-20260831 (v5.5)
See merge request espressif/esp-idf!52393
2026-09-04 20:22:52 +08:00
Jiang Jiang Jian
cfe96208d7
Merge branch 'fix/roaming_compilation_v5.5' into 'release/v5.5'
...
Remove duplicate report_len in roaming neighbor handler(v5.5)
See merge request espressif/esp-idf!52117
2026-09-04 20:17:50 +08:00
liqigan
4c85b9508c
change(bt/bluedroid): Used dynamic osi event to reduce lock cost
2026-09-04 20:06:53 +08:00
Jiang Jiang Jian
957208ca40
Merge branch 'bugfix/ftm_calib_v5.5' into 'release/v5.5'
...
fix(ftm): tolerate small t2/t3 inversion in measurement validation (Backport v5.5)
See merge request espressif/esp-idf!52073
2026-09-04 20:06:21 +08:00
Island
f3eb6e9246
Merge branch 'bugfix/fix_bluedroid_gatt_discover_downstream_stall_v5.5' into 'release/v5.5'
...
fix(ble/bluedroid): allow osi_event re-post during POSTING window (5.5)
See merge request espressif/esp-idf!52043
2026-09-04 17:58:42 +08:00
YoungsunLi
d04210c403
fix(esp_lcd): yield from SPI ISR when color trans done callback wakes a task
...
The return value of on_color_trans_done ("whether a high priority task
has been waken up by this function", see esp_lcd_types.h) was discarded
by the SPI backend. A task unblocked from inside the callback (e.g. via
xSemaphoreGiveFromISR) therefore did not get scheduled until the next
FreeRTOS tick, adding up to 10 ms of latency per color transfer with the
default CONFIG_FREERTOS_HZ=100. The i80 backend already honors the
contract (need_yield -> portYIELD_FROM_ISR); do the same here.
2026-09-04 17:50:21 +08:00
Rahul Tank
8ccbbe0c57
fix(nimble): fix crash on disconnect due to stale per-connection CCCD pool
2026-09-04 12:20:41 +05:30
Island
e12f87c8e6
Merge branch 'bugfix/fixed_ble_deinit_crash_issue_5.5' into 'release/v5.5'
...
fix(bt): fixed mempool deinit crash issue
See merge request espressif/esp-idf!52142
2026-09-04 14:35:23 +08:00
morris
c07068a9b9
Merge branch 'feat/atomic-internal_v5.5' into 'release/v5.5'
...
fix(driver): allocate driver objects containing atomic variables from internal SRAM (v5.5)
See merge request espressif/esp-idf!52342
2026-09-04 14:25:39 +08:00
Laukik Hase
f241c77737
fix(esp_tee): Snapshot input arguments in TEE memory before secure service execution
2026-09-04 10:34:49 +05:30
Laukik Hase
58d747706c
fix(esp_tee): Reject re-entrant secure service calls from the REE
2026-09-04 10:34:02 +05:30
Laukik Hase
806eb46c20
Merge branch 'fix/fix_esp_tee_iv_length_check_v5.5' into 'release/v5.5'
...
feat(esp_tee): ESP-TEE Security Audit fixes (v5.5)
See merge request espressif/esp-idf!50970
2026-09-04 10:30:21 +05:30
Shu Chen
d12614a666
Merge branch 'fix/fix_openthread_netif_glue_deinit_issue_v5.5' into 'release/v5.5'
...
fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup (v5.5)
See merge request espressif/esp-idf!52399
2026-09-04 03:48:11 +00:00
Zhang Hai Peng
4b93bb808e
fix(ble/bluedroid): allow osi_event re-post during POSTING window
...
Do not reject osi_thread_post_event() when only POSTING is set.
QUEUED already prevents double-queueing; rejecting POSTING caused
HCI downstream lost wakeup. Add generic osi_event and hci downstream
diagnostics for post failures.
(cherry picked from commit 011138ffd9 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-09-04 10:46:15 +08:00
Zhang Hai Peng
befbea021a
docs(bt): clarify Bluedroid GATT signed write API comments
...
Correct misleading CHAR_PROP_BIT_AUTH wording and document CSRK-based
signed write usage for server permissions and client write APIs.
(cherry picked from commit 8d230c7650 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-09-04 10:46:15 +08:00
Matteo Sandrin
96a3643cfe
fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails
2026-09-04 10:08:03 +08:00
Shu Chen
91159942b5
Merge branch 'feat/support_multipan_feature_host_20260813_v5.5' into 'release/v5.5'
...
feat(openthread): add support for the multipan feature on host devices (v5.5)
See merge request espressif/esp-idf!52377
2026-09-04 02:05:53 +00:00
Wang Meng Yang
b58bae632b
Merge branch 'bugfix/avrcp_version_compatibility_v5.5' into 'release/v5.5'
...
fix(bt): Fix the issue of AVRCP version compatibility (v5.5)
See merge request espressif/esp-idf!52088
2026-09-04 09:24:32 +08:00
Wang Meng Yang
79745d864d
Merge branch 'bugfix/qos_div_zero_v5.5' into 'release/v5.5'
...
fix(bt): update ESP32 libbtdm_app.a to fix several issues (v5.5)
See merge request espressif/esp-idf!52054
2026-09-04 08:50:50 +08:00
Xu Si Yu
ab71404e03
fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup
2026-09-03 20:04:03 +08:00
Erhan Kurubas
a799ef99ef
feat(system): add OCD stub bin support for more targets
...
Add SOC_DEBUG_HAVE_OCD_STUB_BINS for esp32c5, esp32c61, esp32h4,
esp32h21 and esp32p4. Update TEE linker scripts with
correct esp_tee_app_config offsets for the 0x3000 stub reservation
2026-09-03 13:09:36 +02:00
Erhan Kurubas
7674571d46
change(system): increase OCD stub memory reservation from 8K to 12K
2026-09-03 13:09:28 +02:00
Xu Si Yu
28561a3221
feat(openthread): support multipan feature for host device
2026-09-03 17:48:38 +08:00
Ashish Sharma
4692bfd275
docs(esp_tee): fix AEAD doxygen params after IV moved into the context
2026-09-03 12:15:32 +05:30
Laukik Hase
12fe8f0122
fix(esp_tee): Validate REE-supplied memory bounds (esp_tee_app_config) before use
2026-09-03 12:15:32 +05:30
Laukik Hase
dabd37fae8
fix(esp_tee): Validate the stack pointer at the privilege switch boundary
2026-09-03 12:15:31 +05:30
Laukik Hase
a1bc64d14e
feat(esp_tee): Restrict REE access to TEE-owned secure storage keys
2026-09-03 12:15:31 +05:30
Laukik Hase
6a605263e8
fix(esp_tee): Miscellaneous optimizations and fixes
...
Closes https://github.com/espressif/esp-idf/issues/18591
2026-09-03 12:15:31 +05:30
Ashish Sharma
b23211a287
fix(esp_tee): ensure hal assert is enabled for tee builds
2026-09-03 12:15:30 +05:30
Ashish Sharma
5091e7c874
fix(esp_tee): enforce MMU-map vaddr validity at the REE->TEE boundary
2026-09-03 12:15:30 +05:30
Ashish Sharma
53d6c28d3f
fix(esp_tee): fixes IV length check for TEE AEAD operations
2026-09-03 12:15:30 +05:30
Akshat Agrawal
342ae2d231
fix(wpa_supplicant): Assign correct return value for SAE y-construction failure
2026-09-03 11:40:15 +05:30
Marius Vikhammer
be8aead3d6
Merge branch 'fix/lightsleep_stress_task_leak_v5.5' into 'release/v5.5'
...
fix(esp_system): wait for idle after light sleep stress tasks (v5.5)
See merge request espressif/esp-idf!52271
2026-09-03 13:18:09 +08:00
Mahavir Jain
3dc1e9cd88
Merge branch 'fix/hmac-ds-reset-corrupts-concurrent-mpi_v5.5' into 'release/v5.5'
...
fix(esp_security): don't reset DS peripheral in esp_hmac_calculate (v5.5)
See merge request espressif/esp-idf!52204
2026-09-03 09:58:22 +05:30
Jin Cheng
b71c37083a
fix(bt): update ESP32 libbtdm_app.a to fix several issues
...
- fixed IntegerDividedByZero during Qos negotiation.
Closes https://github.com/espressif/esp-idf/issues/18951
- ignored the check for bandwidth and retransmission effort when Host
accepts the SCO connection request.
2026-09-03 11:27:05 +08:00
morris
37758ef327
fix(driver): allocate driver objects containing atomic variables from internal SRAM
...
Objects with atomic members must not be allocated to PSRAM, otherwise
the ordering guarantee of atomic accesses is weakened due to a hardware
behavior on ESP32 chips. Explicitly request MALLOC_CAP_INTERNAL |
MALLOC_CAP_8BIT for:
- i2c master bus object (atomic status/trans_idx)
- ISP processor and AE/AF/AWB/HIST controllers (atomic fsm)
- JPEG decoder/encoder dma2d transaction descriptors (atomic started)
- PPA transaction storage embedding dma2d_trans_t
- dma2d m2m test transaction embedding dma2d_trans_t
2026-09-03 09:46:48 +08:00