Commit Graph

31305 Commits

Author SHA1 Message Date
Jin Cheng
cc3478275e fix(bt/bluedroid): added buffer length check for HID Device data indication 2026-06-12 18:40:06 +08:00
Jin Cheng
e7d62574f3 fix(bt/bluedroid): added validation for all SMP BR opcode lengths in smp_br_data_received 2026-06-12 18:40:06 +08:00
Jin Cheng
58b11e36bc fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode 2026-06-12 18:40:06 +08:00
Jin Cheng
d544e486c9 fix(bt/bluedroid): added buffer length check for HID host data indication 2026-06-12 18:40:06 +08:00
Jin Cheng
5731c63ece fix(bt/bluedroid): added buffer length check for L2CAP related functions 2026-06-12 18:40:06 +08:00
Sumeet Singh
1b468d2271 fix(nimble): Change remaining vars from Static to Dynamic (v5.4) 2026-06-11 13:35:52 +05:30
morris
5ddae0f71a Merge branch 'fix/fix_gdma_crc_stuck_with_large_input_v5.4' into 'release/v5.4'
fix(gdma): fix crc stuck with large input (v5.4)

See merge request espressif/esp-idf!49363
2026-06-11 14:12:27 +08:00
Rahul Tank
70540f6015 Merge branch 'bugfix/bt4371_crash_v5.4' into 'release/v5.4'
fix(nimble): Deinit NimBLE stop event in host task (v5.4)

See merge request espressif/esp-idf!49299
2026-06-10 20:38:36 +05:30
Jiang Jiang Jian
a4b0b4e396 Merge branch 'bugfix/scan_issue_wpa3_enterprise_v5.4' into 'release/v5.4'
fix(wifi): scan security validation and NAN timer fixes (Backport v5.4)

See merge request espressif/esp-idf!49447
2026-06-10 20:29:07 +08:00
Sarvesh Bodakhe
446de20821 fix(wifi): scan security validation and NAN timer fixes
- Forbid TKIP cipher suites for WPA3-Enterprise scan results
- Use reason 210 (NO_AP_FOUND_W_COMPATIBLE_SECURITY) when an AP is
  found during a connecting scan but filtered out for incompatible
  security
- Stop NAN timers from re-arming after esp_wifi_stop
2026-06-10 15:03:11 +05:30
Aditya Patwardhan
fcf5b75d8c fix(esp-tls): clarify skip_common_name and warn when SNI is disabled
The skip_common_name flag was named for the legacy CN field but actually
suppresses the entire mbedtls_ssl_set_hostname() call -- disabling
hostname matching against CN/SAN AND Server Name Indication. Update the
doxygen to describe the real effect, and emit a per-call WARN inside the
SNI-disable branch so debug-only use does not slip into production
unnoticed.
2026-06-10 12:56:07 +05:30
Aditya Patwardhan
9f6bd1e2e3 fix(esp-tls): close CA-verification bypass during session resumption
The session-resumption else-if in set_client_config() short-circuited
the CA verification chain when only client_session was supplied. Remove
the branch so session-only configs fall through to the normal error /
skip-verify path; resumption no longer silently disables CA validation.
2026-06-10 12:56:07 +05:30
Rahul Tank
92c8ec0450 fix(nimble): Deinit NimBLE stop event in host task 2026-06-09 16:34:43 +05:30
Ashish Sharma
385c1f5d8e fix(mbedtls): fixes build failure with clang21
Closes https://github.com/espressif/esp-idf/issues/18456
2026-06-09 14:04:22 +08:00
morris
0664dc6ab7 Merge branch 'test/enlarge_threshold_for_h2_gptimer' into 'release/v5.4'
test(gptimer): enlarge test threshold for h2 on 5.4

See merge request espressif/esp-idf!49395
2026-06-09 11:12:28 +08:00
Mahavir Jain
afe7502ca7 Merge branch 'contrib/github_pr_18641_v5.4' into 'release/v5.4'
fix(protocomm): prevent out-of-bounds write in console line buffer (GitHub PR) (v5.4)

See merge request espressif/esp-idf!49345
2026-06-08 19:32:43 +05:30
Chen Jichang
af09e294e0 test(gptimer): enlarge threshold for h2 on 5.4 2026-06-08 19:13:32 +08:00
Chen Jichang
22665c8ebd fix(gdma): fix crc stuck with large input 2026-06-08 15:12:09 +08:00
Jiang Jiang Jian
06cceb7dfe Merge branch 'bugfix/acl_conn_state_error_v5.4' into 'release/v5.4'
fix: Fix missing handling for HCI_ERR_CONNECTION_EXISTS (v5.4)

See merge request espressif/esp-idf!49315
2026-06-08 13:55:52 +08:00
morris
ed980bd744 Merge branch 'fix/s3_xip_opt_os_startup_v5.4' into 'release/v5.4'
fix(mspi): fixed possible boot failure in some builds when psram is enabled (v5.4)

See merge request espressif/esp-idf!48585
2026-06-08 10:39:18 +08:00
morris
9b0fc47310 Merge branch 'fix/jpeg_cve_fix_v5.4' into 'release/v5.4'
fix(jpeg_decoder): Add some strict check to avoid bad picture attack (backport v5.4)

See merge request espressif/esp-idf!49256
2026-06-08 10:38:05 +08:00
Rahul Tank
7bd00faf4a Merge branch 'bugfix/fix_clang_compilation_issue_v5.4' into 'release/v5.4'
fix(nimble): Fix for clang compilation issues (v5.4)

See merge request espressif/esp-idf!49308
2026-06-06 09:26:18 +05:30
Andrii Anoshyn
18ec8de5d0 fix(protocomm): prevent out-of-bounds write in console line buffer
The console transport read loop passed &linebuf[i] to uart_read_bytes()
before checking i < LINE_BUF_SIZE, so a line of LINE_BUF_SIZE or more
bytes without a terminator wrote one byte past the 256-byte linebuf
stack array.

Gate the read on the bounds check and reserve the final byte for the NUL
terminator (LINE_BUF_SIZE - 1), so the buffer handed to esp_console_run()
stays terminated even when an overlong line is truncated.

Closes https://github.com/espressif/esp-idf/issues/18638

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-06-05 17:33:48 +08:00
Island
8510e0a0c6 Merge branch 'feat/ble-log-iram-optim_v5.4' into 'release/v5.4'
opt(bt): Move SPI Tx Callback to Flash When SPI ISR IN IRAM Disabled (5.4)

See merge request espressif/esp-idf!48922
2026-06-05 15:50:57 +08:00
yangfeng
fe93a95f41 fix: Fix missing handling for HCI_ERR_CONNECTION_EXISTS
- Closes https://github.com/espressif/esp-idf/issues/18562
2026-06-05 14:18:03 +08:00
Rahul Tank
f05856b5f5 fix(nimble): Fix for clang compilation issues 2026-06-05 10:58:46 +05:30
Island
636ef16079 Merge branch 'fix/ble_funcs_reset_default_enabled_v5.4' into 'release/v5.4'
fix(bt): Add default BLE controller funcs reset enable (5.4)

See merge request espressif/esp-idf!49136
2026-06-05 12:13:36 +08:00
Jiang Jiang Jian
70ff3b10d1 Merge branch 'doc-fix_sleep_mode_doc_v5.4' into 'release/v5.4'
docs(system): update GPIO wakeup section for clarity on EXT0 and EXT1 support (v5.4)

See merge request espressif/esp-idf!49115
2026-06-05 10:53:24 +08:00
Island
4680930335 Merge branch 'change/ble_update_lib_20260520_v5.4' into 'release/v5.4'
change(ble): [AUTO_MR] 20260520 - Update ESP BLE Controller Lib (5.4)

See merge request espressif/esp-idf!48768
2026-06-04 19:22:21 +08:00
Island
a45f9ed240 Merge branch 'fix/fix_conn_recycle_assertion_at_halt_v5.4' into 'release/v5.4'
fix(ble): fix conn recycle assertion at halt on ESP32-C2 (5.4)

See merge request espressif/esp-idf!49236
2026-06-04 19:21:15 +08:00
C.S.M
7ccfc00f39 fix(jpeg_decoder): Add some strict check to avoid bad picture attack 2026-06-04 14:19:20 +08:00
ShenWeilong
4d869f725c fix(ble): won't add -Wno-unterminated-string-initialization for clang 2026-06-04 11:11:54 +08:00
luoxu
8dd492fee0 fix(bt): Normalize source paths for log compression pattern matching 2026-06-04 11:11:54 +08:00
ShenWeilong
a8b57a6be0 change(bt): Separated bt/cmakelist to bt/controller/cmakelist and bt/porting/cmakelist 2026-06-04 11:11:54 +08:00
zhaoweiliang
4d6542b2c9 change(ble): [AUTO_MR] Update lib_esp32c6 to 4adb29e0 2026-06-04 11:11:54 +08:00
zhaoweiliang
eeec8c50ff change(ble): [AUTO_MR] Update lib_esp32h2 to 4adb29e0 2026-06-04 11:11:54 +08:00
Jiang Jiang Jian
4c02142d8b Merge branch 'bugfix/ft_igtk_installation_v5.4' into 'release/v5.4'
fix(esp_wifi): Correct igtk key installation in ft-psk mode (v5.4)

See merge request espressif/esp-idf!49211
2026-06-04 11:11:21 +08:00
Jin Chen
f74ca1653b fix(ble): fix conn recycle assertion at halt on ESP32-C2
(cherry picked from commit 5483aeedb6)

Co-authored-by: cjin <jinchen@espressif.com>
2026-06-03 17:54:04 +08:00
wuzhenghui
54fcd16880 docs(system): update GPIO wakeup section for clarity on EXT0 and EXT1 support 2026-06-03 17:30:26 +08:00
Zhou Xiao
e2e75cbbf4 change(ble_log): move spi tx callback to flash when spi isr in iram disabled
(cherry picked from commit 725e9ee162)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2026-06-03 15:17:30 +08:00
Rahul Tank
e086cd3301 Merge branch 'bugfix/fix_security_proto_nimble_v5.4' into 'release/v5.4'
fix(protocomm): harden nimble/bluedroid transport size handling (v5.4)

See merge request espressif/esp-idf!49182
2026-06-03 11:09:07 +05:30
Kapil Gupta
edd79a6c67 fix(esp_wifi): Correct igtk key installation in ft 2026-06-03 08:57:44 +05:30
Jiang Jiang Jian
f018624f04 Merge branch 'fix-fix_rtc_spinlock_sleep_dead_lock_v5.4' into 'release/v5.4'
fix(esp_hw_support): fix possible dead lock in deepsleep process (v5.4)

See merge request espressif/esp-idf!49175
2026-06-03 10:57:45 +08:00
Jiang Jiang Jian
7e92e9a414 Merge branch 'fix-fix_ub_in_gpio_wakeup_setting_v5.4' into 'release/v5.4'
fix(esp_hw_support): add validation for gpio_pin_mask (v5.4)

See merge request espressif/esp-idf!49108
2026-06-03 10:57:27 +08:00
Jiang Jiang Jian
38f8733c44 Merge branch 'change/esp_idf_ulp_add_int_api_5.4' into 'release/v5.4'
change(ulp): add lp periph intr enable apis  v5.4

See merge request espressif/esp-idf!49145
2026-06-03 10:57:12 +08:00
Rahul Tank
8633096938 fix(protocomm): harden nimble transport size handling 2026-06-02 16:17:33 +05:30
wuzhenghui
219e052816 fix(esp_hw_support): fix possible dead lock in deepsleep process 2026-06-02 17:47:36 +08:00
hebinglin
52e48def21 change(ulp): add lp periph intr enable apis 2026-06-02 11:39:23 +08:00
Zhang Hai Peng
c501d559ed fix(ble/bluedroid): Propagate create_attr_tab BTA failures in inter_cb
(cherry picked from commit 4f8027da11)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-06-02 10:23:56 +08:00
Zhang Hai Peng
0f5eb923e8 fix(ble/bluedroid): Validate signed-write perm vs AUTH in attr table check
(cherry picked from commit fce3fa337a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-06-02 10:23:56 +08:00