sonika.rathi
bdeb413603
fix(storage): mark storage pytest apps flaky in CI
2026-07-31 08:55:18 +02:00
Island
de4c7c205f
Merge branch 'feat/add_bt_common_npl_v5.4' into 'release/v5.4'
...
feat(bt): Add host-agnostic BT OSAL and shared BLE profile task (5.4)
See merge request espressif/esp-idf!51232
2026-07-30 14:33:58 +08:00
Jiang Jiang Jian
58c0cf43fe
Merge branch 'bugfix/fix_espnow_data_rate_error_v5.4' into 'release/v5.4'
...
fix(wifi): fixed espnow data rate overridden by stale rate control (v5.4)
See merge request espressif/esp-idf!51301
2026-07-30 11:53:03 +08:00
Island
750e5fc824
Merge branch 'change/ble_update_lib_20260717_v5.4' into 'release/v5.4'
...
change(ble): [AUTO_MR] 20260717 - Update ESP BLE Controller Lib (5.4)
See merge request espressif/esp-idf!50930
2026-07-30 10:08:00 +08:00
morris
8543b57cf1
Merge branch 'feat/sec_esp_drivers_v5.4' into 'release/v5.4'
...
fix(drivers): harden multiple peripheral drivers against local DoS and memory corruption (v5.4)
See merge request espressif/esp-idf!50559
2026-07-29 17:56:19 +08:00
zhangyanjiao
d6ad1e738d
fix(wifi): fixed espnow data rate overridden by stale rate control
2026-07-29 17:37:09 +08:00
Jiang Jiang Jian
8b295c456a
Merge branch 'bugfix/supplicant_crypto_code_correction_v5.4' into 'release/v5.4'
...
fix(wpa_supplicant): Correct some functions in crypto porting layer (v5.4)
See merge request espressif/esp-idf!50880
2026-07-29 15:29:34 +08:00
chenjianhua
87af736067
feat(bt): Add host-agnostic BT OSAL and shared BLE profile task
...
- Add bt_osal: event queues, mutexes, semaphores, callouts, etc.
- Add the shared BLE profile task and event queue
- Bring both up and tear them down in the host init/deinit paths
- Add unit tests for the OSAL and the profile task
2026-07-29 15:25:36 +08:00
akshat
9d07cbc3ed
bugfix(wifi): Clear Sta TX queue to prevent key 2 send failure
...
Also, Ensure correct return values for key 2 and key 4.
2026-07-29 10:50:05 +05:30
morris
8e8be0cc7f
fix(sdspi): reject oversized pre-read data before block receive
...
Guard start_command_read_blocks against cards that place TOKEN_BLOCK_START so early that extra_data_size exceeds the bytes expected on the current iteration. Without this check, the unsigned subtraction for will_receive underflows and propagates into memset, SPI transaction length, and memcpy counts against the fixed 516-byte block buffer.
2026-07-29 11:40:43 +08:00
morris
612eb0b97f
fix(spi_slave): free DMA-private buffers when transaction queue is full
...
spi_slave_queue_trans calls spi_slave_setup_priv_trans to allocate
DMA buffers, then tries xQueueSend. If the queue is full the function
returns ESP_ERR_TIMEOUT without freeing those buffers, leaking up to
2 * max_transfer_sz per failed call. Call spi_slave_uninstall_priv_trans
before returning the timeout.
2026-07-29 11:40:43 +08:00
morris
b1d4725de1
fix(jpeg): release platform mutex on semaphore/pm-lock allocation failure
...
jpeg_acquire_codec_handle acquires s_jpeg_platform.mutex at entry
but two ESP_RETURN_ON_* macros (semaphore-create and PM-lock-create
failure) return without releasing it. Replace with ESP_GOTO_ON_*
that jumps to a cleanup label which frees partial resources, NULLs
the codec pointer, and releases the mutex.
2026-07-29 11:40:43 +08:00
morris
1428638fd6
fix(i2c): release platform mutex on intr/pm_lock delete failure
...
ESP_RETURN_ON_ERROR inside the s_i2c_platform.mutex critical section
returns without releasing the mutex, permanently blocking all I2C
bus operations. Replace with ESP_GOTO_ON_ERROR that jumps to a
cleanup label releasing the mutex before return.
2026-07-29 11:40:42 +08:00
morris
9f2a14562b
fix(csi): move csi_fsm init before resource allocation to fix err-path leak
...
CSI_FSM_INIT is 1, but the controller struct is zero-allocated.
Any failure before the former csi_fsm assignment (near the end of
esp_cam_new_csi_ctlr) jumped to err: which called s_del_csi_ctlr.
That function bailed out immediately because csi_fsm == 0, leaking
the claimed slot, queue, bridge, DMA channel, PM lock, and backup
buffer. Move csi_fsm = CSI_FSM_INIT right after a successful claim
so the err: path properly tears down all allocated resources.
2026-07-29 11:34:57 +08:00
morris
b48a5356be
fix(adc): add missing input validation for channel and ret_handle
...
- adc_cali_curve_fitting: validate config->chan in check_valid() to
prevent OOB access into s_adc_cali_chan_compens compensation table
- adc_filter: make s_adc_filter_free idempotent on !UNIT_BINDED SoCs
to prevent double-free on repeated adc_del_continuous_iir_filter
- adc_cali_line_fitting(esp32): fix config && config typo to
config && ret_handle, preventing NULL-pointer dereference
2026-07-29 11:34:57 +08:00
Jiang Jiang Jian
095f3c2e83
Merge branch 'bugfix/fix_some_coex_bugs_260723_v5.4' into 'release/v5.4'
...
Bugfix/fix some coex bugs 260723 v5.4(Backport v5.4)
See merge request espressif/esp-idf!51103
2026-07-29 10:19:09 +08:00
Jiang Jiang Jian
a2695ee1f5
Merge branch 'fix/fix_iram_sleep_process_access_cache_v5.4' into 'release/v5.4'
...
fix(esp_hw_support): fix get_act_hp/lp_dbias accessed ext mem (v5.4)
See merge request espressif/esp-idf!51213
2026-07-29 10:18:57 +08:00
Jin Chen
708d93fbf5
change(ble): [AUTO_MR] Update lib_esp32c6 to 18aafc6f
...
(cherry picked from commit 624845829a )
Co-authored-by: cjin <jinchen@espressif.com >
2026-07-29 08:37:20 +08:00
Jin Chen
4ff112dace
change(ble): [AUTO_MR] Update lib_esp32h2 to 18aafc6f
...
(cherry picked from commit d7b7876c3c )
Co-authored-by: cjin <jinchen@espressif.com >
2026-07-29 08:37:20 +08:00
morris
7db201bca4
Merge branch 'fix/uhci_rx_size_check_v5.4' into 'release/v5.4'
...
fix(uhci): rx fsm race condition and buffer size check (v5.4)
See merge request espressif/esp-idf!51233
2026-07-28 18:23:09 +08:00
Hu Rui
3a46556120
fix(uhci): rx fsm race condition and buffer size check
...
Closes https://github.com/espressif/esp-idf/issues/18819
Closes https://github.com/espressif/esp-idf/issues/18820
2026-07-28 14:11:25 +08:00
Li Shuai
adff718a2a
change(esp_hw_support): optimize get hp/lp dbias implementation iram or flash usage
2026-07-27 19:15:22 +08:00
Guilherme Ferreira
9f4d31d692
fix(esp_eth): recover W5500 RX path on corrupted frame length
...
Reject an implausible SPI-read frame-length header and drain the
socket RX buffer to resync Sn_RX_RD, instead of looping forever on
the unrecoverable descriptor and starving the system.
2026-07-27 10:26:00 +02:00
morris
0c9d5bec51
Merge branch 'backport/spi_flash_fixes_v5.4' into 'release/v5.4'
...
fix(spi_flash): backport aes-xts error-path & mxic fixes (v5.4)
See merge request espressif/esp-idf!51137
2026-07-27 10:36:23 +08:00
morris
bec7a54946
Merge branch 'bugfix/ppa_buffer_oob_v5.4' into 'release/v5.4'
...
fix(ppa): add checks for input to avoid any OOB access (v5.4)
See merge request espressif/esp-idf!51141
2026-07-27 10:36:10 +08:00
Shreeyash Bhakare
b5f5f08022
fix(nimble): Added security related fixes
2026-07-25 13:46:25 +05:30
Astha Verma
68bdd97e95
fix(nimble): Restore throughput after switching from LE Coded PHY
2026-07-24 18:07:01 +05:30
Rahul Tank
9f655295b5
Merge branch 'bugfix/red_rem_feat_evt_v5.4' into 'release/v5.4'
...
Handle Read Remote Supported Feature failure (v5.4)
See merge request espressif/esp-idf!50811
2026-07-24 14:26:58 +05:30
Shu Chen
9b7c7d1801
Merge branch 'support/ot_register_154_event_cb_v5.4' into 'release/v5.4'
...
feat(openthread): use ieee802154 event callback list instead of weak overrides (v5.4)
See merge request espressif/esp-idf!51129
2026-07-24 08:18:55 +00:00
Wang Meng Yang
2f68c062fd
Merge branch 'bugfix/low_spp_throughput_v5.4' into 'release/v5.4'
...
change(bt/bluedroid): increased port low watermark of RFCOMM (v5.4)
See merge request espressif/esp-idf!51086
2026-07-24 16:01:06 +08:00
Song Ruo Jing
8d091111f3
fix(ppa): add checks for input to avoid any OOB access
2026-07-24 15:41:35 +08:00
Shu Chen
d524f95216
Merge branch 'feat/update_phylib_on_s31_c6_for_track_v5.4' into 'release/v5.4'
...
feat(phy): update phy lib for esp32s31 & esp32c6 for track (v5.4)
See merge request espressif/esp-idf!50793
2026-07-24 07:30:42 +00:00
C.S.M
c6094ef764
fix(spi_flash): Fix spi_flash leaks release aes-xts in error path
...
(cherry picked from commit 305c5869ee )
2026-07-24 14:52:22 +08:00
Shengyu Qu
258c25b8c3
fix(spi_flash): add #if check for s_mxic_set_required_regs()
...
Currently, s_mxic_set_required_regs() lacks checking for
CONFIG_SPI_FLASH_SUPPORT_MXIC_OPI_CHIP. And this causes a defined but not
used warning when MXIC flash driver is disabled in project config. So add
a #if check for this to supress warning.
Signed-off-by: Shengyu Qu <wiagn@4d2.org >
(cherry picked from commit 062c948c18 )
2026-07-24 14:52:21 +08:00
zwx
6946fa80a0
feat(openthread): use ieee802154 event callback list instead of weak overrides
2026-07-24 14:23:50 +08:00
morris
15ce077144
Merge branch 'bugfix/ana_cmpr_macro_v5.4' into 'release/v5.4'
...
fix(ana_cmpr): Fix swapped POS/NEG cross interrupt masks on ESP32-C5/P4 (v5.4)
See merge request espressif/esp-idf!50801
2026-07-23 22:15:03 +08:00
Island
69ae551ac6
Merge branch 'fix/ble_hidd_remove_ccc_gating_v5.4' into 'release/v5.4'
...
fix(esp_hid/bluedroid): remove app-layer CCC gating in HID device (5.4)
See merge request espressif/esp-idf!51005
2026-07-23 19:26:13 +08:00
Tiago Medicci
c064771d2e
fix(ana_cmpr): Fix swapped POS/NEG cross interrupt masks on ESP32-P4
2026-07-23 17:15:03 +08:00
muhaidong
6becea20cb
fix(coex): fix coex status get issue
2026-07-23 17:03:44 +08:00
Xu Si Yu
c60989b27e
fix(coex): move 15.4 register configuration to 15.4 init
2026-07-23 17:03:33 +08:00
Wang Meng Yang
15c2c05e96
Merge branch 'bugfix/bredr_critical_bugs_v5.4' into 'release/v5.4'
...
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI (v5.4)
See merge request espressif/esp-idf!51080
2026-07-23 16:44:30 +08:00
Island
b0e440355d
Merge branch 'fix/ble_log_compression_safety_v5.4' into 'release/v5.4'
...
fix(ble_log): fix unaligned access and buffer safety in log compression (5.4)
See merge request espressif/esp-idf!47929
2026-07-23 14:26:51 +08:00
Jin Cheng
8359636930
change(bt/bluedroid): increased port low watermark of RFCOMM
...
When PORT_RX_BUF_LOW_WM is too low, RFCOMM replenishes credits only
after receiving a relatively large number of packets, which may cause
the peer to exhaust its credits and enter a stop-and-wait state.
Increase the low watermark to replenish credits more promptly and
reduce the likelihood of the peer stalling while waiting for additional
credits.
2026-07-23 08:09:59 +08:00
Jin Cheng
b19ab411cb
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI
2026-07-23 07:52:39 +08:00
Jack
c0466739ba
fix(phy): removed all librfate logic from cmake
2026-07-22 20:04:28 +08:00
morris
2b49bba8a8
Merge branch 'feat/i2s_duplex_update_v5.4' into 'release/v5.4'
...
feat(i2s): allow full duplex mode in less strict condition (v5.4)
See merge request espressif/esp-idf!50868
2026-07-22 18:26:50 +08:00
Astha Verma
e7321c0ce0
fix(nimble): Handle Read Remote Supported Features failure correctly
2026-07-22 12:20:07 +05:30
Wang Meng Yang
4d44115e31
Merge branch 'bugfix/hid_host_oob_read_v5.4' into 'release/v5.4'
...
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act (v5.4)
See merge request espressif/esp-idf!50974
2026-07-22 14:10:28 +08:00
Island
472d73d74c
Merge branch 'fix/ble-log-store-access-fault_v5.4' into 'release/v5.4'
...
fix: Ensure BLE Log Global Variables in Internal RAM (5.4)
See merge request espressif/esp-idf!51034
2026-07-22 14:02:47 +08:00
zhuanghang
2e91163d02
feat(phy): update phy lib for esp32s31 & esp32c6 for track
2026-07-22 14:01:50 +08:00