wuzhenghui
265e9d2a54
change(heap): reserve DMA pool with low priority MALLOC_CAP_DEFAULT caps
2026-07-09 17:34:32 +08:00
Jin Cheng
5ba5b3bc0b
fix(bt/bluedroid): fixed stuck sec_state on authention HCI command send failure
...
Closes SEC-1164
2026-07-09 17:14:03 +08:00
Jin Cheng
5d136bf113
fix(bt/bluedroid): fixed HID host slot leak on local VUP ACL drop
...
Closes SEC-1169
2026-07-09 17:14:03 +08:00
Jin Cheng
b6d199ea34
fix(bt/bluedroid): fixed NULL dereference in remote legacy authentication handler
...
Closes SEC-1143
2026-07-09 17:14:02 +08:00
Jin Cheng
61a66689ce
fix(bt/bluedroid): fixed integer overflow in HID report descriptor parser
...
Closes SEC-084
2026-07-09 17:14:02 +08:00
Jin Cheng
eb31ebd509
fix(bt/bluedroid): fixed wrong link key flag cleared on legacy BR/EDR authentication failure
...
Stale bond trust state cound remain after authenticaion failure, causing
incorrect bond status and link key auto-reply behavior.
Closes SEC-1153
2026-07-09 17:14:02 +08:00
Hu Rui
58af065f82
fix(dac): dac_continuous set is_cyclic flag in async mode
2026-07-09 11:21:03 +08:00
Song Ruo Jing
eb9deb150c
fix(dma2d): fix non-usable DMA2D_CSC_TX_SCRAMBLE option
2026-07-08 23:13:35 +08:00
Song Ruo Jing and Cursor
8b0a8c9563
fix(dma2d): fix race with dma2d_force_end and ISR
...
free_up_channels can only be called once for a started transaction.
Double free will undesirely stop the next picked 2D-DMA transaction on the same channel.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-08 23:13:35 +08:00
Song Ruo Jing
b93ae28fdd
fix(dma2d): add a dequeue mechanism for dma2d driver
...
JPEG driver should be able to either dequeue a pending transaction from
a 2D-DMA pool or force end a processing transaction.
2026-07-08 21:07:01 +08:00
Xu Si Yu
d425d0df06
feat(openthread): update thread-lib for upstream b678a4f6
...
* esp-openthread: thread_zigbee/esp-openthread@47428f1e8
* openthread: espressif/openthread@b678a4f63
* esp-idf: espressif/esp-idf@7ef0e515d
2026-07-08 12:51:12 +00:00
Xu Si Yu
7ef0e515d2
feat(openthread): update openthread submodule
2026-07-08 20:40:26 +08:00
Xu Si Yu
fe223d0fa3
fix(openthread): fix TREL peer discovery by selecting IPv6 from mDNS address list
2026-07-08 20:39:23 +08:00
Rahul Tank
28b43f2e8d
Merge branch 'bugfix/ai_reviewer_nimble_1.6_v5.4' into 'release/v5.4'
...
fix(nimble): Fixes for AI reported issues (v5.4)
See merge request espressif/esp-idf!50016
2026-07-08 13:58:46 +05:30
yangfeng
110f766ef1
fix(bt/bluedroid): Fix unchecked p_ctrl_cback and p_msg_cback in AVRC
...
Closes SEC-1186
2026-07-08 15:20:19 +08:00
yangfeng
6964180fb1
fix(bt/bluedroid): Fix missing NULL check on p_cfg in AVDT_ReconfigReq
...
Closes SEC-1187
2026-07-08 15:20:19 +08:00
Rahul Tank
a3aeccbed4
fix(nimble): Fixes for AI reported issues
2026-07-07 16:28:48 +05:30
Xu Si Yu
073473ccf0
feat(openthread): add APIs to clear a single src match short and extended entry in esp radio spinel
2026-07-07 17:39:56 +08:00
Kapil Gupta
50b0d1aeff
fix(esp_wifi): Drop broadcast fragmented frames
2026-07-07 14:17:25 +05:30
Marius Vikhammer
581bc0c5ce
Merge branch 'fix/vfs_fatfs_test_stale_partition_v5.4' into 'release/v5.4'
...
test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes (v5.4)
See merge request espressif/esp-idf!50434
2026-07-07 14:43:08 +08:00
Jiang Jiang Jian
a089512c33
Merge branch 'fix/use_unilock_for_sleep_process_v5.4' into 'release/v5.4'
...
fix(esp_hw_support): use same lock for lightsleep/deepsleep process (v5.4)
See merge request espressif/esp-idf!49846
2026-07-07 11:10:41 +08:00
morris
98bbceecfe
Merge branch 'feature/dma2d_ppa_sleep_retention_support_v5.4' into 'release/v5.4'
...
feat(ppa): add sleep retention support for DMA2D and PPA (v5.4)
See merge request espressif/esp-idf!50356
2026-07-07 10:34:39 +08:00
Martin Vychodil and Cursor
abc1b742f8
test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes
...
Reformat the test partition before each mount so those tests always start from
a known-empty filesystem.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-06 16:59:37 +02:00
muhaidong
d44e869233
fix(wifi): fix some wifi bugs 260706 v5.4
...
1. support weak func for wifi lmac assert
2. post disconnect event after disassociation tx callback
2026-07-06 17:53:05 +08:00
muhaidong
f2f3dfa947
fix(wifi): support weak func for wifi lmac assert
2026-07-06 17:49:38 +08:00
muhaidong
81de7b1c23
fix(coex): remove unsupported external coex soc caps
2026-07-06 17:48:01 +08:00
Luo Xu
7e3e04402a
fix(ble_mesh): re-check scan dev-found cb before scan-rsp invocation
...
(cherry picked from commit 9a3a767824 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:44:02 +08:00
Luo Xu
4a8f62c175
fix(ble_mesh): comment out logs containing sensitive keys
...
(cherry picked from commit 781d6b2314 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:44:00 +08:00
Luo Xu
a5cfdef4ed
fix(ble_mesh): validate PB-ADV start segment length
...
(cherry picked from commit 912ec8dc62 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:59 +08:00
Luo Xu
eb8962ae8a
fix(ble_mesh): Reset reassembly buffer at start of each transaction
...
The reassembly buffer must be reset to its origin at the beginning of every
transaction. prov_msg_recv() pulls the PDU type byte (advancing buf->data by
one) and nothing restores it between transactions. Without this reset,
buf->data drifts forward by one byte per received PDU, causing the segment-0
memcpy to write past the end of the statically allocated rx buffer
(PROV_RX_BUF_SIZE), and the XACT_SEG_DATA() offsets used for continuation
segments to be skewed by the accumulated drift.
(cherry picked from commit 2c4acaa2aa )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:59 +08:00
Luo Xu
4a3d4756e5
fix(ble_mesh): fix DFD client message parsing and encoding bugs
...
Fix multiple wire-format and robustness issues in the DFD client
(dfd_cli.c):
- handle_capabilities: read oob_retrieval_supported as u8 instead of
le32. The server encodes a single byte; le32 over-consumed 3 bytes
of the URL scheme list and could over-read the buffer.
- handle_upload_status: extract upload_progress from bits 0-6 (& 0x7F)
and upload_type from bit 7 (>> 7), matching the server encoding
(progress | BIT(7)). The previous >>1 / &0x01 returned wrong values,
mis-classified in-band vs OOB, and falsely rejected valid OOB
messages with high progress.
- handle_dfd_status: correct the transfer-mode byte layout to
trans_mode bits 0-1, update_policy bit 2, RFU bits 3-7 (previously
read bits 6-7 / 5), and fix the RFU mask to 0xF8. Now matches the
struct bitfield definition and the DFD server.
- handle_dfd_status: report status+phase and return early when
buf->len == 0 (IDLE phase) instead of pulling 10 absent bytes.
- bt_mesh_dfd_cli_distribution_start: encode trans_mode/update_policy
into bits 0-2 so the server decodes them correctly.
- handle_receiver_list: validate buf->len >= entries_cnt * 5 before
the loop, and handle entries_cnt == 0 without relying on calloc(0).
- handle_receiver_status: pass the status value (not the whole union)
to the %d log format, fixing undefined behavior.
- dfd_client_recv_status: drop the dead BLE_MESH_DFD_OP_CAPABILITIES_GET
case (a client-send opcode) from the receive switch.
- bt_mesh_dfd_cli_receivers_add: widen msg_length to uint32_t to avoid
uint16_t overflow that bypassed the PDU size guard; add a NULL check
for the receivers array.
- bt_mesh_dfd_cli_distribution_upload_oob_start: return -EINVAL
instead of -1 for consistency with the rest of the file.
(cherry picked from commit 43137475e1 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:58 +08:00
Luo Xu
65f798fc3f
fix(ble_mesh): added max dfd srv count limit
...
(cherry picked from commit 781218cb62 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:57 +08:00
Luo Xu
e59dc7cc2f
fix(ble_mesh): reject invalid chunk size
...
(cherry picked from commit 35cd10fbdf )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:56 +08:00
Luo Xu
e58ee15e68
fix(ble_mesh): fixed invalid disconnect handler wrote
...
(cherry picked from commit 52cfff707f )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:55 +08:00
Luo Xu
6723edeb5c
fix(ble_mesh): fixed BLE-Mesh NimBLE extended-adv reassembly buffer overflow on COMPLETE fragment
...
(cherry picked from commit 1b22467f63 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:54 +08:00
Luo Xu
2fed52c729
fix(ble_mesh): fixed BLE-Mesh GATTS read-callback error
...
(cherry picked from commit 00adfb3cbc )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-06 17:43:54 +08:00
Jiang Jiang Jian
5fb8206bd6
Merge branch 'fix/ble_mesh_disable_adv_pkt_discard_log_v5.4' into 'release/v5.4'
...
fix(ble_mesh): Disable warning logging when advertising packets are discarded (5.4)
See merge request espressif/esp-idf!50165
2026-07-06 15:13:23 +08:00
Island
f14e94bb83
Merge branch 'fix/ble-log-64-bit-io-setup-support_v5.4' into 'release/v5.4'
...
fix(ble_log): use BIT64 over BIT to support 64-bit IO setup (5.4)
See merge request espressif/esp-idf!50329
2026-07-06 12:21:09 +08:00
Wang Meng Yang
36e78269b8
Merge branch 'bugfix/bbp_issues_v5.4' into 'release/v5.4'
...
Bugfix/bbp issues v5.4
See merge request espressif/esp-idf!50191
2026-07-06 11:16:44 +08:00
Song Ruo Jing
de7b3abfe0
feat(ppa): add sleep retention support for DMA2D and PPA
2026-07-03 21:37:45 +08:00
Rahul Tank
c8d74d975a
Merge branch 'bugfix/queue_att_cmd_v5.4' into 'release/v5.4'
...
feat(nimble): Defer all ATT commands until connection event is sent to GAP layer (v5.4)
See merge request espressif/esp-idf!48179
2026-07-03 16:07:00 +05:30
Jiang Jiang Jian
07f6e7d4a3
Merge branch 'backport/backport_some_wifi_changes_260701_v5.4' into 'release/v5.4'
...
backport/backport_some_wifi_changes_260701_v5.4(backport v5.4)
See merge request espressif/esp-idf!50263
2026-07-03 16:47:40 +08:00
Rahul Tank
b5b35c0d25
fix(nimble): Defer Events / ATT related information from stack
...
Defer Events/ ATT related GAP events from stack until connection
event is sent to GAP layer
2026-07-03 11:19:43 +05:30
Zhou Xiao
8db6befe08
fix(ble_log): use BIT64 over BIT to support 64-bit IO setup
...
(cherry picked from commit a2876d304e )
Co-authored-by: Zhou Xiao <zhouxiao@espressif.com >
2026-07-03 12:04:55 +08:00
yinqingzhao
bbfb2840f5
fix(wifi): comment out functions from ld files
2026-07-02 10:16:23 +08:00
yinqingzhao
e0f5dd572c
fix(wifi): optimizations of csa procedure and keep alive mechanism
2026-07-01 20:10:08 +08:00
yinqingzhao
ddec495cf7
fix(wifi): fix scheduling issue when tasks have the same priority as the Wi-Fi task
2026-07-01 17:35:10 +08:00
yinqingzhao
d51b8c26f4
fix(phy): fix still put multiple phy init date bin into flash when CONFIG_ESP_PHY_MULTIPLE_INIT_DATA_BIN_EMBED is enabled
2026-07-01 17:33:55 +08:00
yinqingzhao
302e636a13
feat(phy): support change multiple phy init bin path
2026-07-01 17:30:44 +08:00
Sudeep Mohanty
7ae6b26b66
fix(ulp): make LP peripheral default config macros C++ compatible
2026-07-01 08:14:56 +02:00