Commit Graph
31669 Commits
Author SHA1 Message Date
wuzhenghui 265e9d2a54 change(heap): reserve DMA pool with low priority MALLOC_CAP_DEFAULT caps 2026-07-09 17:34:32 +08:00
Jin Cheng 5ba5b3bc0b fix(bt/bluedroid): fixed stuck sec_state on authention HCI command send failure
Closes SEC-1164
2026-07-09 17:14:03 +08:00
Jin Cheng 5d136bf113 fix(bt/bluedroid): fixed HID host slot leak on local VUP ACL drop
Closes SEC-1169
2026-07-09 17:14:03 +08:00
Jin Cheng b6d199ea34 fix(bt/bluedroid): fixed NULL dereference in remote legacy authentication handler
Closes SEC-1143
2026-07-09 17:14:02 +08:00
Jin Cheng 61a66689ce fix(bt/bluedroid): fixed integer overflow in HID report descriptor parser
Closes SEC-084
2026-07-09 17:14:02 +08:00
Jin Cheng eb31ebd509 fix(bt/bluedroid): fixed wrong link key flag cleared on legacy BR/EDR authentication failure
Stale bond trust state cound remain after authenticaion failure, causing
incorrect bond status and link key auto-reply behavior.

Closes SEC-1153
2026-07-09 17:14:02 +08:00
Hu Rui 58af065f82 fix(dac): dac_continuous set is_cyclic flag in async mode 2026-07-09 11:21:03 +08:00
Song Ruo Jing eb9deb150c fix(dma2d): fix non-usable DMA2D_CSC_TX_SCRAMBLE option 2026-07-08 23:13:35 +08:00
Song Ruo JingandCursor 8b0a8c9563 fix(dma2d): fix race with dma2d_force_end and ISR
free_up_channels can only be called once for a started transaction.
Double free will undesirely stop the next picked 2D-DMA transaction on the same channel.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-08 23:13:35 +08:00
Song Ruo Jing b93ae28fdd fix(dma2d): add a dequeue mechanism for dma2d driver
JPEG driver should be able to either dequeue a pending transaction from
a 2D-DMA pool or force end a processing transaction.
2026-07-08 21:07:01 +08:00
Xu Si Yu d425d0df06 feat(openthread): update thread-lib for upstream b678a4f6
* esp-openthread: thread_zigbee/esp-openthread@47428f1e8
* openthread: espressif/openthread@b678a4f63
* esp-idf: espressif/esp-idf@7ef0e515d
2026-07-08 12:51:12 +00:00
Xu Si Yu 7ef0e515d2 feat(openthread): update openthread submodule 2026-07-08 20:40:26 +08:00
Xu Si Yu fe223d0fa3 fix(openthread): fix TREL peer discovery by selecting IPv6 from mDNS address list 2026-07-08 20:39:23 +08:00
Rahul Tank 28b43f2e8d Merge branch 'bugfix/ai_reviewer_nimble_1.6_v5.4' into 'release/v5.4'
fix(nimble): Fixes for AI reported issues (v5.4)

See merge request espressif/esp-idf!50016
2026-07-08 13:58:46 +05:30
yangfeng 110f766ef1 fix(bt/bluedroid): Fix unchecked p_ctrl_cback and p_msg_cback in AVRC
Closes SEC-1186
2026-07-08 15:20:19 +08:00
yangfeng 6964180fb1 fix(bt/bluedroid): Fix missing NULL check on p_cfg in AVDT_ReconfigReq
Closes SEC-1187
2026-07-08 15:20:19 +08:00
Rahul Tank a3aeccbed4 fix(nimble): Fixes for AI reported issues 2026-07-07 16:28:48 +05:30
Xu Si Yu 073473ccf0 feat(openthread): add APIs to clear a single src match short and extended entry in esp radio spinel 2026-07-07 17:39:56 +08:00
Kapil Gupta 50b0d1aeff fix(esp_wifi): Drop broadcast fragmented frames 2026-07-07 14:17:25 +05:30
Marius Vikhammer 581bc0c5ce Merge branch 'fix/vfs_fatfs_test_stale_partition_v5.4' into 'release/v5.4'
test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes (v5.4)

See merge request espressif/esp-idf!50434
2026-07-07 14:43:08 +08:00
Jiang Jiang Jian a089512c33 Merge branch 'fix/use_unilock_for_sleep_process_v5.4' into 'release/v5.4'
fix(esp_hw_support): use same lock for lightsleep/deepsleep process (v5.4)

See merge request espressif/esp-idf!49846
2026-07-07 11:10:41 +08:00
morris 98bbceecfe Merge branch 'feature/dma2d_ppa_sleep_retention_support_v5.4' into 'release/v5.4'
feat(ppa): add sleep retention support for DMA2D and PPA (v5.4)

See merge request espressif/esp-idf!50356
2026-07-07 10:34:39 +08:00
Martin VychodilandCursor abc1b742f8 test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes
Reformat the test partition before each mount so those tests always start from
a known-empty filesystem.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-06 16:59:37 +02:00
muhaidong d44e869233 fix(wifi): fix some wifi bugs 260706 v5.4
1. support weak func for wifi lmac assert
2. post disconnect event after disassociation tx callback
2026-07-06 17:53:05 +08:00
muhaidong f2f3dfa947 fix(wifi): support weak func for wifi lmac assert 2026-07-06 17:49:38 +08:00
muhaidong 81de7b1c23 fix(coex): remove unsupported external coex soc caps 2026-07-06 17:48:01 +08:00
Luo Xu 7e3e04402a fix(ble_mesh): re-check scan dev-found cb before scan-rsp invocation
(cherry picked from commit 9a3a767824)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:44:02 +08:00
Luo Xu 4a8f62c175 fix(ble_mesh): comment out logs containing sensitive keys
(cherry picked from commit 781d6b2314)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:44:00 +08:00
Luo Xu a5cfdef4ed fix(ble_mesh): validate PB-ADV start segment length
(cherry picked from commit 912ec8dc62)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:59 +08:00
Luo Xu eb8962ae8a fix(ble_mesh): Reset reassembly buffer at start of each transaction
The reassembly buffer must be reset to its origin at the beginning of every
transaction. prov_msg_recv() pulls the PDU type byte (advancing buf->data by
one) and nothing restores it between transactions. Without this reset,
buf->data drifts forward by one byte per received PDU, causing the segment-0
memcpy to write past the end of the statically allocated rx buffer
(PROV_RX_BUF_SIZE), and the XACT_SEG_DATA() offsets used for continuation
segments to be skewed by the accumulated drift.


(cherry picked from commit 2c4acaa2aa)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:59 +08:00
Luo Xu 4a3d4756e5 fix(ble_mesh): fix DFD client message parsing and encoding bugs
Fix multiple wire-format and robustness issues in the DFD client
(dfd_cli.c):

- handle_capabilities: read oob_retrieval_supported as u8 instead of
  le32. The server encodes a single byte; le32 over-consumed 3 bytes
  of the URL scheme list and could over-read the buffer.
- handle_upload_status: extract upload_progress from bits 0-6 (& 0x7F)
  and upload_type from bit 7 (>> 7), matching the server encoding
  (progress | BIT(7)). The previous >>1 / &0x01 returned wrong values,
  mis-classified in-band vs OOB, and falsely rejected valid OOB
  messages with high progress.
- handle_dfd_status: correct the transfer-mode byte layout to
  trans_mode bits 0-1, update_policy bit 2, RFU bits 3-7 (previously
  read bits 6-7 / 5), and fix the RFU mask to 0xF8. Now matches the
  struct bitfield definition and the DFD server.
- handle_dfd_status: report status+phase and return early when
  buf->len == 0 (IDLE phase) instead of pulling 10 absent bytes.
- bt_mesh_dfd_cli_distribution_start: encode trans_mode/update_policy
  into bits 0-2 so the server decodes them correctly.
- handle_receiver_list: validate buf->len >= entries_cnt * 5 before
  the loop, and handle entries_cnt == 0 without relying on calloc(0).
- handle_receiver_status: pass the status value (not the whole union)
  to the %d log format, fixing undefined behavior.
- dfd_client_recv_status: drop the dead BLE_MESH_DFD_OP_CAPABILITIES_GET
  case (a client-send opcode) from the receive switch.
- bt_mesh_dfd_cli_receivers_add: widen msg_length to uint32_t to avoid
  uint16_t overflow that bypassed the PDU size guard; add a NULL check
  for the receivers array.
- bt_mesh_dfd_cli_distribution_upload_oob_start: return -EINVAL
  instead of -1 for consistency with the rest of the file.


(cherry picked from commit 43137475e1)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:58 +08:00
Luo Xu 65f798fc3f fix(ble_mesh): added max dfd srv count limit
(cherry picked from commit 781218cb62)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:57 +08:00
Luo Xu e59dc7cc2f fix(ble_mesh): reject invalid chunk size
(cherry picked from commit 35cd10fbdf)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:56 +08:00
Luo Xu e58ee15e68 fix(ble_mesh): fixed invalid disconnect handler wrote
(cherry picked from commit 52cfff707f)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:55 +08:00
Luo Xu 6723edeb5c fix(ble_mesh): fixed BLE-Mesh NimBLE extended-adv reassembly buffer overflow on COMPLETE fragment
(cherry picked from commit 1b22467f63)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:54 +08:00
Luo Xu 2fed52c729 fix(ble_mesh): fixed BLE-Mesh GATTS read-callback error
(cherry picked from commit 00adfb3cbc)

Co-authored-by: luoxu <luoxu@espressif.com>
2026-07-06 17:43:54 +08:00
Jiang Jiang Jian 5fb8206bd6 Merge branch 'fix/ble_mesh_disable_adv_pkt_discard_log_v5.4' into 'release/v5.4'
fix(ble_mesh): Disable warning logging when advertising packets are discarded (5.4)

See merge request espressif/esp-idf!50165
2026-07-06 15:13:23 +08:00
Island f14e94bb83 Merge branch 'fix/ble-log-64-bit-io-setup-support_v5.4' into 'release/v5.4'
fix(ble_log): use BIT64 over BIT to support 64-bit IO setup (5.4)

See merge request espressif/esp-idf!50329
2026-07-06 12:21:09 +08:00
Wang Meng Yang 36e78269b8 Merge branch 'bugfix/bbp_issues_v5.4' into 'release/v5.4'
Bugfix/bbp issues v5.4

See merge request espressif/esp-idf!50191
2026-07-06 11:16:44 +08:00
Song Ruo Jing de7b3abfe0 feat(ppa): add sleep retention support for DMA2D and PPA 2026-07-03 21:37:45 +08:00
Rahul Tank c8d74d975a Merge branch 'bugfix/queue_att_cmd_v5.4' into 'release/v5.4'
feat(nimble): Defer all ATT commands until connection event is sent to GAP layer (v5.4)

See merge request espressif/esp-idf!48179
2026-07-03 16:07:00 +05:30
Jiang Jiang Jian 07f6e7d4a3 Merge branch 'backport/backport_some_wifi_changes_260701_v5.4' into 'release/v5.4'
backport/backport_some_wifi_changes_260701_v5.4(backport v5.4)

See merge request espressif/esp-idf!50263
2026-07-03 16:47:40 +08:00
Rahul Tank b5b35c0d25 fix(nimble): Defer Events / ATT related information from stack
Defer Events/ ATT related GAP events from stack until connection
 event is sent to GAP layer
2026-07-03 11:19:43 +05:30
Zhou Xiao 8db6befe08 fix(ble_log): use BIT64 over BIT to support 64-bit IO setup
(cherry picked from commit a2876d304e)

Co-authored-by: Zhou Xiao <zhouxiao@espressif.com>
2026-07-03 12:04:55 +08:00
yinqingzhao bbfb2840f5 fix(wifi): comment out functions from ld files 2026-07-02 10:16:23 +08:00
yinqingzhao e0f5dd572c fix(wifi): optimizations of csa procedure and keep alive mechanism 2026-07-01 20:10:08 +08:00
yinqingzhao ddec495cf7 fix(wifi): fix scheduling issue when tasks have the same priority as the Wi-Fi task 2026-07-01 17:35:10 +08:00
yinqingzhao d51b8c26f4 fix(phy): fix still put multiple phy init date bin into flash when CONFIG_ESP_PHY_MULTIPLE_INIT_DATA_BIN_EMBED is enabled 2026-07-01 17:33:55 +08:00
yinqingzhao 302e636a13 feat(phy): support change multiple phy init bin path 2026-07-01 17:30:44 +08:00
Sudeep Mohanty 7ae6b26b66 fix(ulp): make LP peripheral default config macros C++ compatible 2026-07-01 08:14:56 +02:00