Commit Graph
36654 Commits
Author SHA1 Message Date
sibeibei d0434b0ddd change(esp_hw_support): enable wifi beacon wakeup and support wifi modem state for esp32s31 2026-06-10 20:39:21 +08:00
sibeibei 853726de89 feat(wifi): support wifi mac bb pd context retention for s31 2026-06-10 20:39:13 +08:00
Mahavir Jain a96553ed75 Merge branch 'fix/esp_tee_bbp_v6.1' into 'release/v6.1'
fix(esp_tee): Harden TEE secure services against REE manipulation (v6.1)

See merge request espressif/esp-idf!49368
2026-06-10 15:56:59 +05:30
Mahavir Jain d460486ab4 Merge branch 'fix/ecdsa_ecc_hw_input_validation_v6.1' into 'release/v6.1'
Validate ECDSA signature range and harden ECC memory power-down (v6.1)

See merge request espressif/esp-idf!49427
2026-06-10 14:39:49 +05:30
Mahavir Jain 3664bd2d7e Merge branch 'fix/disable_secure_boot_v2_ecdsa_v6.1' into 'release/v6.1'
Fix/disable secure boot v2 ecdsa (v6.1)

See merge request espressif/esp-idf!49469
2026-06-10 14:39:06 +05:30
Jiang Jiang Jian 83abf396e3 Merge branch 'idf/ble_iso_minor_update_v6.1' into 'release/v6.1'
feat(ble_iso): Minor update for some ISO internal functions (v6.1)

See merge request espressif/esp-idf!49324
2026-06-10 15:52:25 +08:00
Laukik Hase ba0f3f9872 fix(esp_tee): Harden the TEE secure services against REE manipulation
- `bootloader_flash_execute_command_common`: whitelist the flash command
   opcodes the REE actually uses; reject the rest
- `spi_flash_hal_* services`: a forged `host->driver` could hijack TEE
   control flow since the HAL dispatches through it, so swap
   `host->driver` to a TEE-rodata vtable around each HAL call
- Deny partition table and bootloader writes by default and permit
  bootloader writes only when explicitly enabled via
  `CONFIG_SPI_FLASH_DANGEROUS_WRITE_ALLOWED` option
- Protect the TEE-assigned interrupt pin configuration against REE
- Validate nested DS context pointers in start/finish_sign and bound
  the result copy to the SoC max signature size
- Fix the stack usage in service dispatcher argument parsing
2026-06-10 12:05:47 +05:30
Mahavir Jain 5714492876 Merge branch 'fix/esp_tee_buffer_overflow_v6.1' into 'release/v6.1'
fix(esp_tee): fix buffer overflow (v6.1)

See merge request espressif/esp-idf!49302
2026-06-10 10:10:37 +05:30
Mahavir Jain ab40e38287 Merge branch 'fix/remove_nonexistent_crypto_registers_c61_v6.1' into 'release/v6.1'
Remove non-existent crypto registers (ESP32-C61) (v6.1)

See merge request espressif/esp-idf!49449
2026-06-10 10:10:00 +05:30
Jiang Jiang Jian 895974c34d Merge branch 'feat/enable_sb_and_fe_support_for_esp32s31_v6.1' into 'release/v6.1'
feat: enable Secure Boot, Flash Encryption and Key Manager support in ESP32S31 (v6.1)

See merge request espressif/esp-idf!49161
2026-06-10 11:13:43 +08:00
Jiang Jiang Jian e406662397 Merge branch 'fix/ble_funcs_reset_default_enabled_v6.1' into 'release/v6.1'
fix(bt): Add default BLE controller funcs reset enable (6.1)

See merge request espressif/esp-idf!49139
2026-06-10 11:13:04 +08:00
Jiang Jiang Jian a5565aba09 Merge branch 'fix/154_txrx_at_time_v6.1' into 'release/v6.1'
fix(802.15.4): remove comparison between txrx_at and ramp time (v6.1)

See merge request espressif/esp-idf!49078
2026-06-10 11:10:07 +08:00
Jiang Jiang Jian 9a4d018e0a Merge branch 'fix/heap-minimum-free-size_v6.1' into 'release/v6.1'
fix(heap): Do not consider newly registered heap in minimum free size calculation (v6.1)

See merge request espressif/esp-idf!49035
2026-06-10 11:08:03 +08:00
Jiang Jiang Jian adc0dc0303 Merge branch 'fix/vfs_incorect_deprecation_v6.1' into 'release/v6.1'
fix(storage/vfs): Mark the correct version of function deprecated (v6.1)

See merge request espressif/esp-idf!49016
2026-06-10 11:07:14 +08:00
Aditya Patwardhan 4f2f37ca69 change(secure_boot): mark ECDSA based Secure Boot V2 as insecure on affected SoCs
ECDSA based Secure Boot V2 is not functional for certain input vectors on
ESP32-C5/C61/H2/P4 and on the preview targets ESP32-H4/H21. RSA based Secure
Boot V2 is the recommended scheme where the SoC supports it. This issue will be
fixed in a future hardware ECO revision; more details will be shared through the
hardware errata document.

A new hidden Kconfig option SECURE_BOOT_V2_ECDSA_INSECURE marks the affected
mass-production SoCs (ESP32-C5/C61/H2/P4). On these SoCs, when hardware Secure
Boot V2 is enabled, the ECDSA (V2) signing scheme is no longer offered by
default; it must be turned on explicitly via SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
under "Allow potentially insecure options" (CONFIG_SECURE_BOOT_INSECURE). App
signing without hardware Secure Boot is not affected. Note that ESP32-C61 has no
RSA based Secure Boot V2, so it has no Secure Boot scheme enabled by default.

The preview targets ESP32-H4 and ESP32-H21 mark ECDSA Secure Boot V2 as not
supported in their SoC capabilities instead of using the option above. As
ESP32-H4 has no other Secure Boot V2 scheme, Secure Boot is disabled entirely on
it; ESP32-H21 retains RSA based Secure Boot V2.

The security documentation keeps the ECDSA Secure Boot V2 content visible and
adds a warning describing the limitation (including that ECDSA Secure Boot V2 on
ESP32-C61 is not recommended for production). CI apps that exercise ECDSA Secure
Boot V2 on the affected SoCs set CONFIG_SECURE_BOOT_V2_FORCE_ENABLE_ECDSA
accordingly.
2026-06-10 03:10:27 +05:30
harshal.patil 6bdaf2a293 fix(soc): Remove non-existent crypto registers (ESP32-C61) 2026-06-09 18:16:33 +05:30
harshal.patil 7984290258 test(esp_hal_security): warm up ECC const-time loop before measuring 2026-06-09 18:12:05 +05:30
harshal.patil 72ea236270 fix(esp_tee): Reset crypto peripherals before the panic-induced reset 2026-06-09 18:12:05 +05:30
harshal.patil a15edceb89 fix(esp_rom): Patch ets_ecdsa_verify() to include signature bounds check 2026-06-09 18:12:03 +05:30
Jiang Jiang Jian 167ea95823 Merge branch 'fix/phy_cal_v6.1' into 'release/v6.1'
fix(phy): fix wifi tx failed when sta wake from deepsleep v6.1

See merge request espressif/esp-idf!49439
2026-06-09 20:08:42 +08:00
Jiang Jiang Jian c5c08f3328 Merge branch 'bugfix/issues_from_e22_eco2_testsv6.1' into 'release/v6.1'
fix(bt/controller): fixed several BR/EDR controller bugs found by WVT regression tests on ESP32-S31

See merge request espressif/esp-idf!49424
2026-06-09 20:08:34 +08:00
sibeibei 2f0b9ebb82 fix(phy): fix wifi tx failed when sta wake from deepsleep 2026-06-09 19:16:38 +08:00
morris c66f9a3a8e Merge branch 'feature/esp32h4_flash_support_v6.1' into 'release/v6.1'
feat(spi_flash): Add exclusive support for ESP32H4 (v6.1)

See merge request espressif/esp-idf!49419
2026-06-09 18:19:15 +08:00
harshal.patil beb13babca fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down 2026-06-09 14:58:59 +05:30
Jiang Jiang Jian 785ab7a4e6 Merge branch 'fix/esp_idf_lp_uart_wakeup_muti_times_v6.1' into 'release/v6.1'
fix(ulp): fix lp uart keep wakeup triggered v6.1

See merge request espressif/esp-idf!49396
2026-06-09 17:22:21 +08:00
Jiang Jiang Jian 9ca5354f50 Merge branch 'bugfix/acl_conn_state_error_v6.1' into 'release/v6.1'
fix: Fix missing handling for HCI_ERR_CONNECTION_EXISTS (v6.1)

See merge request espressif/esp-idf!49312
2026-06-09 17:21:32 +08:00
Jin Cheng b62e578edd fix(bt/controller): fixed several BR/EDR controller bugs found by WVT regression tests on ESP32-S31 2026-06-09 16:34:36 +08:00
Song Ruo Jing 5934c5b7f1 fix(spi_flash): gpspi flash clock could reach higher frequency 2026-06-09 15:27:41 +08:00
Song Ruo Jing c9f52c7ca7 feat(spi_flash): Add exclusive support for ESP32H4
Add 32bit addr support for esp32s31 as well
2026-06-09 15:27:41 +08:00
hebinglin 5ff1c38cb8 fix(ulp): fix lp uart keep wakeup triggered 2026-06-08 19:29:53 +08:00
morris 0d92878008 Merge branch 'fix/suspend_s31_v6.1' into 'release/v6.1'
fix(spi_flash): Fix suspend issue on esp32s31, and add trs timing on other target (backport v6.1)

See merge request espressif/esp-idf!49386
2026-06-08 17:10:38 +08:00
Chen Jichang c4d31bbfc7 test(pcnt): fix test failure on s31 after AXI raise to 106M 2026-06-08 14:50:27 +08:00
C.S.M 01a9cbe421 fix(spi_flash): Fix suspend issue on esp32s31, and add trs timing on other target 2026-06-08 14:39:47 +08:00
morris c3640229af Merge branch 'fix/fix_gdma_crc_stuck_with_large_input_v6.1' into 'release/v6.1'
fix(gdma): fix crc stuck with large input (v6.1)

See merge request espressif/esp-idf!49360
2026-06-08 11:32:40 +08:00
Jiang Jiang Jian be531bbec2 Merge branch 'bugfix/esp_idf_retention_bt_4365_v6.1' into 'release/v6.1'
fix(esp_hw_support): fix retention hang when no module in link v6.1

See merge request espressif/esp-idf!49293
2026-06-08 11:09:30 +08:00
Chen Jichang 5deef19f66 fix(gdma): fix crc stuck with large input 2026-06-05 18:53:22 +08:00
morris a8d5fc0e3f Merge branch 'test/enable_isp_test_esp32p4_rev1_v6.1' into 'release/v6.1'
fix(isp): enable esp32p4_rev1 unit test (v6.1)

See merge request espressif/esp-idf!49229
2026-06-05 17:02:22 +08:00
Liu Linyan 8fbe03bf8c feat(ble_iso): Minor update for some ISO internal functions 2026-06-05 14:49:03 +08:00
yangfeng ead8107e82 fix: Fix missing handling for HCI_ERR_CONNECTION_EXISTS
- Closes https://github.com/espressif/esp-idf/issues/18562
2026-06-05 14:17:41 +08:00
Alexey Lapshin 8e4c3f5c0d fix(esp_tee): fix buffer overflow 2026-06-05 12:25:23 +07:00
hebinglin f35500a156 fix(esp_hw_support): fix retention hang when no module in link 2026-06-05 11:32:50 +08:00
Jiang Jiang Jian 2002147714 Merge branch 'fix/tls-session-verify-and-hostname-warn_v6.1' into 'release/v6.1'
fix(esp-tls): fix TLS session resumption bypassing CA verification and clarify skip_common_name behavior (v6.1)

See merge request espressif/esp-idf!48928
2026-06-05 10:38:57 +08:00
Jiang Jiang Jian 039bf48d58 Merge branch 'feat/ble-log-iram-optim_v6.1' into 'release/v6.1'
opt(bt): Move SPI Tx Callback to Flash When SPI ISR IN IRAM Disabled (6.1)

See merge request espressif/esp-idf!48925
2026-06-05 10:38:12 +08:00
Jiang Jiang Jian c38e675c0b Merge branch 'idf/ble_audio_bluedroid_v6.1' into 'release/v6.1'
feat(ble_audio): Support running ISO & LE Audio with Bluedroid Host (v6.1)

See merge request espressif/esp-idf!49059
2026-06-05 10:36:25 +08:00
Jiang Jiang Jian 7cf57fe795 Merge branch 'fix/fix_conn_recycle_assertion_at_halt_v6.1' into 'release/v6.1'
fix(ble): fix conn recycle assertion at halt on ESP32-C2 (6.1)

See merge request espressif/esp-idf!49239
2026-06-05 10:35:22 +08:00
Jiang Jiang Jian 1280ccfbec Merge branch 'bugfix/add_monitor_en_rst_in_pvt_func_backport_v6.1' into 'release/v6.1'
feat(pvt): fix monitor en rst error in pvt func on v 6.1

See merge request espressif/esp-idf!49028
2026-06-05 10:29:54 +08:00
Jiang Jiang Jian 8c0d5b1693 Merge branch 'bugfix/fix_ble_coded_phy_performance_with_wifi_coex_v6.1' into 'release/v6.1'
fix(bt): Update bt lib for ESP32-C3 and ESP32-S3(51d9dfde) (6.1)

See merge request espressif/esp-idf!48996
2026-06-05 10:28:41 +08:00
Jiang Jiang Jian d5ad96e397 Merge branch 'task/v2_aware_component_and_test_gates_v6.1' into 'release/v6.1'
fix(components): linux host-build failure fixes+ disable esp_tee in buildv2 + esp_hw_support and xtensa fixes (v6.1)

See merge request espressif/esp-idf!48919
2026-06-05 10:27:29 +08:00
Jiang Jiang Jian 8ab8298677 Merge branch 'bugfix/fix_crash_due_to_error_print_v6.1' into 'release/v6.1'
fix(nimble): Update excessive logging prints in failure scenario (v6.1)

See merge request espressif/esp-idf!48917
2026-06-05 10:26:56 +08:00
morris 7fd1e25294 Merge branch 'bugfix/async_crc_timeout_v6.1' into 'release/v6.1'
fix(async_crc): limit blocking timeout support (v6.1)

See merge request espressif/esp-idf!49242
2026-06-04 22:40:02 +08:00