Commit Graph
34227 Commits
Author SHA1 Message Date
Zhang Hai Peng b8709f9f13 fix(ble/bluedroid): restore find info PDU stop on UUID format mismatch
Restore GATT_NO_RESOURCES when sequential attributes have differing UUID
sizes so gatts_process_find_info() stops building the response PDU.


(cherry picked from commit 196cb39545)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-09-07 20:38:14 +08:00
Rahul Tank b45a624fd0 Merge branch 'bugfix/fix_ble_pair_attack_v5.5' into 'release/v5.5'
fix(nimble): Fix for BLERP attack (v5.5)

See merge request espressif/esp-idf!52352
2026-09-07 17:38:33 +05:30
Nachiket Kukade 055550e26e Merge branch 'fix/eloop-wifi-deinit-leak-delay_v5.5' into 'release/v5.5'
test(wifi): wait for the idle task after esp_wifi_deinit in Wi-Fi UTs (Backport v5.5)

See merge request espressif/esp-idf!52513
2026-09-07 19:36:09 +08:00
Laukik Hase 59efed194c Merge branch 'fix/tee_disallow_reentrant_sec_svc_v5.5' into 'release/v5.5'
feat(esp_tee): Backports to v5.5

See merge request espressif/esp-idf!52289
2026-09-07 16:22:43 +05:30
Sarvesh Bodakhe 57c0fb83da test(wifi): wait for the idle task after esp_wifi_deinit in Wi-Fi UTs
The Wi-Fi task deletes itself when esp_wifi_deinit() is called, and FreeRTOS
only reclaims its TCB and stack from the idle task afterwards. Test apps that
read the heap right after deinit therefore see that memory as still allocated
and report a leak, most visibly as the eloop unit tests failing on ESP32.

Wait for the idle task at every point where a test deinitialises Wi-Fi
before a leak check, replacing the single-tick delays that only matched what
esp_wifi_deinit() already waits for internally.

(cherry picked from commit bff264775a)
2026-09-07 15:47:36 +05:30
Rahul Tank 58b4f19cdf fix(nimble): Fix for BLERP attack 2026-09-07 14:00:57 +05:30
Rahul Tank 45ce9e56c8 Merge branch 'bugfix/fix_null_proc_dereference_v5.5' into 'release/v5.5'
fix(nimble): Avoid NULL proc dereference in GATT client procedures (v5.5)

See merge request espressif/esp-idf!52219
2026-09-07 13:53:50 +05:30
Jiang Jiang Jian 00cac0b72f Merge branch 'contrib/github_pr_19038_v5.5' into 'release/v5.5'
fix(esp_lcd): yield from SPI ISR when color trans done callback wakes a task (GitHub PR) (v5.5)

See merge request espressif/esp-idf!52455
2026-09-07 11:27:48 +08:00
Jiang Jiang Jian 0cdf36ae5b Merge branch 'fix/sae_pwe_ecc_fail_v5.5' into 'release/v5.5'
fix(wpa_supplicant): Assign correct return value for SAE y-construction failure (v5.5)

See merge request espressif/esp-idf!52359
2026-09-07 11:27:39 +08:00
Jiang Jiang Jian e4404da2c4 Merge branch 'debug/idf-15875-fix_v5.5' into 'release/v5.5'
fix(psram): suspend external cache during CPU freq switch on esp32p4 (v5.5)

See merge request espressif/esp-idf!51686
2026-09-07 11:27:20 +08:00
Jiang Jiang Jian 290bea2cc6 Merge branch 'fix/ringbuf_max_item_size_v5.5' into 'release/v5.5'
fix(esp_ringbuf): harden ringbuf creation sizes checks (v5.5)

See merge request espressif/esp-idf!51001
2026-09-07 11:26:54 +08:00
Wang Meng Yang 362a1776ec Merge branch 'bugfix/delete_unused_avrcp_rcb_v5.5' into 'release/v5.5'
fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails (v5.5)

See merge request espressif/esp-idf!52414
2026-09-06 12:36:05 +08:00
Rahul Tank 45e5ccc1e4 fix(nimble): Avoid NULL proc dereference in GATT client procedures 2026-09-06 09:54:15 +05:30
Wang Meng Yang ca6bee0af8 Merge branch 'bugfix/fix_osi_event_bug_v5.5' into 'release/v5.5'
Bugfix/fix osi event bug[backport v5.5]

See merge request espressif/esp-idf!52324
2026-09-06 12:14:33 +08:00
Alexey Gerenkov 45f9798159 Merge branch 'feature/update-openocd-to-v0.12.0-esp32-20260831_v5.5' into 'release/v5.5'
feat(tools): update openocd version to v0.12.0-esp32-20260831 (v5.5)

See merge request espressif/esp-idf!52393
2026-09-04 20:22:52 +08:00
Jiang Jiang Jian cfe96208d7 Merge branch 'fix/roaming_compilation_v5.5' into 'release/v5.5'
Remove duplicate report_len in roaming neighbor handler(v5.5)

See merge request espressif/esp-idf!52117
2026-09-04 20:17:50 +08:00
liqigan 4c85b9508c change(bt/bluedroid): Used dynamic osi event to reduce lock cost 2026-09-04 20:06:53 +08:00
Jiang Jiang Jian 957208ca40 Merge branch 'bugfix/ftm_calib_v5.5' into 'release/v5.5'
fix(ftm): tolerate small t2/t3 inversion in measurement validation (Backport v5.5)

See merge request espressif/esp-idf!52073
2026-09-04 20:06:21 +08:00
Island f3eb6e9246 Merge branch 'bugfix/fix_bluedroid_gatt_discover_downstream_stall_v5.5' into 'release/v5.5'
fix(ble/bluedroid): allow osi_event re-post during POSTING window (5.5)

See merge request espressif/esp-idf!52043
2026-09-04 17:58:42 +08:00
YoungsunLi d04210c403 fix(esp_lcd): yield from SPI ISR when color trans done callback wakes a task
The return value of on_color_trans_done ("whether a high priority task
has been waken up by this function", see esp_lcd_types.h) was discarded
by the SPI backend. A task unblocked from inside the callback (e.g. via
xSemaphoreGiveFromISR) therefore did not get scheduled until the next
FreeRTOS tick, adding up to 10 ms of latency per color transfer with the
default CONFIG_FREERTOS_HZ=100. The i80 backend already honors the
contract (need_yield -> portYIELD_FROM_ISR); do the same here.
2026-09-04 17:50:21 +08:00
Rahul Tank 8ccbbe0c57 fix(nimble): fix crash on disconnect due to stale per-connection CCCD pool 2026-09-04 12:20:41 +05:30
Island e12f87c8e6 Merge branch 'bugfix/fixed_ble_deinit_crash_issue_5.5' into 'release/v5.5'
fix(bt): fixed mempool deinit crash issue

See merge request espressif/esp-idf!52142
2026-09-04 14:35:23 +08:00
morris c07068a9b9 Merge branch 'feat/atomic-internal_v5.5' into 'release/v5.5'
fix(driver): allocate driver objects containing atomic variables from internal SRAM (v5.5)

See merge request espressif/esp-idf!52342
2026-09-04 14:25:39 +08:00
Laukik Hase f241c77737 fix(esp_tee): Snapshot input arguments in TEE memory before secure service execution 2026-09-04 10:34:49 +05:30
Laukik Hase 58d747706c fix(esp_tee): Reject re-entrant secure service calls from the REE 2026-09-04 10:34:02 +05:30
Laukik Hase 806eb46c20 Merge branch 'fix/fix_esp_tee_iv_length_check_v5.5' into 'release/v5.5'
feat(esp_tee): ESP-TEE Security Audit fixes (v5.5)

See merge request espressif/esp-idf!50970
2026-09-04 10:30:21 +05:30
Shu Chen d12614a666 Merge branch 'fix/fix_openthread_netif_glue_deinit_issue_v5.5' into 'release/v5.5'
fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup (v5.5)

See merge request espressif/esp-idf!52399
2026-09-04 03:48:11 +00:00
Zhang Hai Peng 4b93bb808e fix(ble/bluedroid): allow osi_event re-post during POSTING window
Do not reject osi_thread_post_event() when only POSTING is set.
QUEUED already prevents double-queueing; rejecting POSTING caused
HCI downstream lost wakeup. Add generic osi_event and hci downstream
diagnostics for post failures.


(cherry picked from commit 011138ffd9)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-09-04 10:46:15 +08:00
Zhang Hai Peng befbea021a docs(bt): clarify Bluedroid GATT signed write API comments
Correct misleading CHAR_PROP_BIT_AUTH wording and document CSRK-based
signed write usage for server permissions and client write APIs.


(cherry picked from commit 8d230c7650)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-09-04 10:46:15 +08:00
Matteo Sandrin 96a3643cfe fix(bt/bluedroid): delete the unused AVRCP acceptor RCB when A2DP open fails 2026-09-04 10:08:03 +08:00
Shu Chen 91159942b5 Merge branch 'feat/support_multipan_feature_host_20260813_v5.5' into 'release/v5.5'
feat(openthread): add support for the multipan feature on host devices (v5.5)

See merge request espressif/esp-idf!52377
2026-09-04 02:05:53 +00:00
Wang Meng Yang b58bae632b Merge branch 'bugfix/avrcp_version_compatibility_v5.5' into 'release/v5.5'
fix(bt): Fix the issue of AVRCP version compatibility (v5.5)

See merge request espressif/esp-idf!52088
2026-09-04 09:24:32 +08:00
Wang Meng Yang 79745d864d Merge branch 'bugfix/qos_div_zero_v5.5' into 'release/v5.5'
fix(bt): update ESP32 libbtdm_app.a to fix several issues (v5.5)

See merge request espressif/esp-idf!52054
2026-09-04 08:50:50 +08:00
Xu Si Yu ab71404e03 fix(openthread): fix stack deinit by reversing netif glue teardown and hardening workflow cleanup 2026-09-03 20:04:03 +08:00
Erhan Kurubas a799ef99ef feat(system): add OCD stub bin support for more targets
Add SOC_DEBUG_HAVE_OCD_STUB_BINS for esp32c5, esp32c61, esp32h4,
esp32h21 and esp32p4. Update TEE linker scripts with
correct esp_tee_app_config offsets for the 0x3000 stub reservation
2026-09-03 13:09:36 +02:00
Erhan Kurubas 7674571d46 change(system): increase OCD stub memory reservation from 8K to 12K 2026-09-03 13:09:28 +02:00
Xu Si Yu 28561a3221 feat(openthread): support multipan feature for host device 2026-09-03 17:48:38 +08:00
Ashish Sharma 4692bfd275 docs(esp_tee): fix AEAD doxygen params after IV moved into the context 2026-09-03 12:15:32 +05:30
Laukik Hase 12fe8f0122 fix(esp_tee): Validate REE-supplied memory bounds (esp_tee_app_config) before use 2026-09-03 12:15:32 +05:30
Laukik Hase dabd37fae8 fix(esp_tee): Validate the stack pointer at the privilege switch boundary 2026-09-03 12:15:31 +05:30
Laukik Hase a1bc64d14e feat(esp_tee): Restrict REE access to TEE-owned secure storage keys 2026-09-03 12:15:31 +05:30
Laukik Hase 6a605263e8 fix(esp_tee): Miscellaneous optimizations and fixes
Closes https://github.com/espressif/esp-idf/issues/18591
2026-09-03 12:15:31 +05:30
Ashish Sharma b23211a287 fix(esp_tee): ensure hal assert is enabled for tee builds 2026-09-03 12:15:30 +05:30
Ashish Sharma 5091e7c874 fix(esp_tee): enforce MMU-map vaddr validity at the REE->TEE boundary 2026-09-03 12:15:30 +05:30
Ashish Sharma 53d6c28d3f fix(esp_tee): fixes IV length check for TEE AEAD operations 2026-09-03 12:15:30 +05:30
Akshat Agrawal 342ae2d231 fix(wpa_supplicant): Assign correct return value for SAE y-construction failure 2026-09-03 11:40:15 +05:30
Marius Vikhammer be8aead3d6 Merge branch 'fix/lightsleep_stress_task_leak_v5.5' into 'release/v5.5'
fix(esp_system): wait for idle after light sleep stress tasks (v5.5)

See merge request espressif/esp-idf!52271
2026-09-03 13:18:09 +08:00
Mahavir Jain 3dc1e9cd88 Merge branch 'fix/hmac-ds-reset-corrupts-concurrent-mpi_v5.5' into 'release/v5.5'
fix(esp_security): don't reset DS peripheral in esp_hmac_calculate (v5.5)

See merge request espressif/esp-idf!52204
2026-09-03 09:58:22 +05:30
Jin Cheng b71c37083a fix(bt): update ESP32 libbtdm_app.a to fix several issues
- fixed IntegerDividedByZero during Qos negotiation.
  Closes https://github.com/espressif/esp-idf/issues/18951
- ignored the check for bandwidth and retransmission effort when Host
  accepts the SCO connection request.
2026-09-03 11:27:05 +08:00
morris 37758ef327 fix(driver): allocate driver objects containing atomic variables from internal SRAM
Objects with atomic members must not be allocated to PSRAM, otherwise
the ordering guarantee of atomic accesses is weakened due to a hardware
behavior on ESP32 chips. Explicitly request MALLOC_CAP_INTERNAL |
MALLOC_CAP_8BIT for:

- i2c master bus object (atomic status/trans_idx)
- ISP processor and AE/AF/AWB/HIST controllers (atomic fsm)
- JPEG decoder/encoder dma2d transaction descriptors (atomic started)
- PPA transaction storage embedding dma2d_trans_t
- dma2d m2m test transaction embedding dma2d_trans_t
2026-09-03 09:46:48 +08:00