harshal.patil
dc5be9b26d
fix(esp_common/esp_fault): make ESP_FAULT_ASSERT survive optimization
...
ESP_FAULT_ASSERT(C) was silently deleted by the optimizer when C is a cached
flag/status already proven by a preceding `if (!C) return/goto`: the compiler
folds C to a constant and drops all three checks, removing the fault-injection
protection with no warning.
2026-06-22 11:38:55 +05:30
harshal.patil
2d24b4cbca
fix(secure_boot): range-check ECDSA r,s in bootloader before ROM verify
2026-06-22 11:38:55 +05:30
harshal.patil
3587b50883
fix(esp_common): Add esp_fault_internal.h for use by G0 components
...
In release/v5.x, esp_fault.h resides in the esp_hw_support (G1)
component, so the G0 components (hal, esp_rom) must not depend on it.
Copy its contents to esp_common as esp_fault_internal.h, keep
esp_fault.h as a compatibility wrapper around it, and switch the hal
and esp_rom ECDSA/ECC code to the internal header.
2026-06-22 11:38:55 +05:30
harshal.patil
4b3c4e2fd9
test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver
2026-06-22 11:38:55 +05:30
harshal.patil
7640ef0a13
fix(esp_rom): Patch ets_ecdsa_verify() to include signature bounds check
2026-06-22 11:38:55 +05:30
harshal.patil and Ashish Sharma
85055fabff
fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down
...
Co-Authored-By: Ashish Sharma <ashish.sharma@espressif.com >
2026-06-22 11:38:55 +05:30
Island
ab6b359a24
Merge branch 'feat/ble-smp-multi-adv-static-random-address_v5.3' into 'release/v5.3'
...
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses (5.3)
See merge request espressif/esp-idf!49786
2026-06-22 10:35:23 +08:00
Island
04a9243eb0
Merge branch 'docs/ble-uart-tutorial_v5.3' into 'release/v5.3'
...
docs(ble): added ESP-BLE-UART OpenCode Companion Guide (5.3)
See merge request espressif/esp-idf!49381
2026-06-22 10:34:34 +08:00
Rahul Tank
1f75b37d7f
Merge branch 'bugfix/fix_log_performance_v5.3' into 'release/v5.3'
...
fix(nimble): Guard ble_hs_log_mbuf/flat_buf against non-DEBUG log level (v5.3)
See merge request espressif/esp-idf!49731
2026-06-18 21:39:50 +05:30
Wang Meng Yang
5728b5362b
Merge branch 'bugfix/bbp_isses_v5.3' into 'release/v5.3'
...
Bugfix/bbp isses v5.3
See merge request espressif/esp-idf!49627
2026-06-18 14:48:22 +08:00
Zhang Hai Peng
e0e3448f44
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses
...
(cherry picked from commit 7986e2faa8 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-06-18 10:24:47 +08:00
Marius Vikhammer
8b9ea01634
Merge branch 'fix/efuse_damaged_reading_virtual_blocks_v5.3' into 'release/v5.3'
...
fix(efuse): erase virtual blocks before burn in damaged-reading test (v5.3)
See merge request espressif/esp-idf!49722
2026-06-17 18:21:17 +08:00
Island
b5116d1180
Merge branch 'feat/format_bt_hci_to_btsnoop_v5.3' into 'release/v5.3'
...
refactor(bt): migrate bt_hci_to_btsnoop to esp-pylib (5.3)
See merge request espressif/esp-idf!49707
2026-06-17 14:43:50 +08:00
Mahavir Jain
f813d5e712
Merge branch 'fix/fix_sec2_client_possible_pub_length_truncation_v5.3' into 'release/v5.3'
...
fix(esp_prov): fixes security2 client possible public length truncation (v5.3)
See merge request espressif/esp-idf!49335
2026-06-17 10:08:12 +05:30
morris
e87ffcd14e
Merge branch 'feat/lcd_i2c_use_configurable_timeout_v5.3' into 'release/v5.3'
...
feat(lcd): add configurable timeout for lcd i2c panel (v5.3)
See merge request espressif/esp-idf!48673
2026-06-17 10:53:16 +08:00
morris
62da65a3c7
Merge branch 'doc/i2s_esp32_mclk_restriction_v5.3' into 'release/v5.3'
...
docs(i2s): add note for the restriction of MCLK on esp32 (v5.3)
See merge request espressif/esp-idf!48574
2026-06-17 10:51:50 +08:00
Jin Cheng
1a941a77a0
fix(bt/bluedroid): added buffer length check for HID Device data indication
2026-06-17 07:27:25 +08:00
Jin Cheng
756cb96277
fix(bt/bluedroid): added validation for all SMP BR opcode lengths in smp_br_data_received
2026-06-17 07:27:25 +08:00
Jin Cheng
a5626bfc54
fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode
2026-06-17 07:27:25 +08:00
Jin Cheng
5a5968c8e9
fix(bt/bluedroid): added buffer length check for HID host data indication
2026-06-17 07:27:25 +08:00
Jin Cheng
8de265dc44
fix(bt/bluedroid): added buffer length check for L2CAP related functions
2026-06-17 07:27:25 +08:00
Jiang Jiang Jian
7a27688622
Merge branch 'bugfix/scan_issue_wpa3_enterprise_v5.3' into 'release/v5.3'
...
fix(wifi): scan security validation and NAN timer fixes (Backport v5.3)
See merge request espressif/esp-idf!49528
2026-06-16 21:08:46 +08:00
Rahul Tank
f882932204
fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level
2026-06-16 16:30:57 +05:30
Ashish Sharma
9c2adffb58
fix(esp_prov): fixes sec2 client possible public length truncation
2026-06-16 18:25:48 +08:00
Konstantin Kondrashov
1cbe85a666
fix(efuse): erase virtual blocks before burn in damaged-reading test
...
Some chip may have BLOCK3 in use so we need to erase it before test.
2026-06-16 12:49:08 +03:00
Mahavir Jain
a4a5c0af59
Merge branch 'fix/mbedtls_build_failure_x509_crt_v5.3' into 'release/v5.3'
...
fix(mbedtls): fixes build failure with clang21 (v5.3)
See merge request espressif/esp-idf!49417
2026-06-16 13:36:38 +05:30
Zhang Hai Peng
4db65d5f4c
refactor(bt): migrate bt_hci_to_btsnoop to esp-pylib
...
Replace argparse with rich-click and use esp_pylib.logger for
standardized console output and fatal error handling.
(cherry picked from commit 3a7896f2c5 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-06-16 15:34:02 +08:00
Rahul Tank
43549911a8
Merge branch 'bugfix/fix_security_proto_nimble_v5.3' into 'release/v5.3'
...
fix(protocomm): harden nimble/bluedroid transport size handling (v5.3)
See merge request espressif/esp-idf!49183
2026-06-15 21:07:38 +05:30
Rahul Tank
972f6ac5a3
fix(protocomm): harden nimble transport size handling
2026-06-15 16:00:56 +05:30
Island
0bb375b34e
Merge branch 'fix/gattc-multi-app-notif-warning_v5.3' into 'release/v5.3'
...
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if (5.3)
See merge request espressif/esp-idf!49514
2026-06-15 15:08:12 +08:00
Ashish Sharma
b0fc1922c5
fix(mbedtls): fixes build failure with clang21
...
Closes https://github.com/espressif/esp-idf/issues/18456
2026-06-15 12:03:12 +08:00
Island
4d1d5705cd
Merge branch 'bugfix/fix_bluedroid_ai_review_bugs_20260427_v5.3' into 'release/v5.3'
...
Bugfix/fix bluedroid ai review bugs 20260427 (5.3)
See merge request espressif/esp-idf!49538
2026-06-15 11:04:06 +08:00
zhiweijian
6fa3f622ca
fix(examples): improve bluedroid BLE example error handling
...
Check GAP/GATT event status, fix prepare-write buffer lifecycle, and
align example code with updated Bluedroid API behavior.
2026-06-12 10:41:31 +08:00
zhiweijian
da9e63b690
refactor(examples): disable unused BT options in bluedroid BLE examples
...
Add sdkconfig.defaults to turn off unused Bluedroid host features per
example role (GATT client/server, SMP, legacy adv, etc.).
2026-06-12 10:34:45 +08:00
ShenWeilong
1409afdba9
fix(bluedroid): Set CONFIG_PARTITION_TABLE_SINGLE_APP_LARGE=y in bluedroid host examples
2026-06-12 10:34:34 +08:00
Rahul Tank
8c22cfe1af
Merge branch 'fix/add_remaining_vars_to_heap_v5.3' into 'release/v5.3'
...
fix(nimble): Change remaining vars from Static to Dynamic (v5.3)
See merge request espressif/esp-idf!49282
2026-06-11 17:30:33 +05:30
morris
fea9e43d06
Merge branch 'fix/jpeg_cve_fix_v5.3' into 'release/v5.3'
...
fix(jpeg_decoder): Add some strict check to avoid bad picture attack (backport v5.3)
See merge request espressif/esp-idf!49569
2026-06-11 18:42:47 +08:00
Sumeet Singh
9c2ef25d89
fix(nimble): Change remaining vars from Static to Dynamic (v5.3)
2026-06-11 13:38:05 +05:30
C.S.M
303c01305a
fix(jpeg_decoder): Add some strict check to avoid bad picture attack
2026-06-11 11:52:30 +08:00
Rahul Tank
3f142abeb9
Merge branch 'bugfix/bt4371_crash_v5.3' into 'release/v5.3'
...
fix(nimble): Deinit NimBLE stop event in host task (v5.3)
See merge request espressif/esp-idf!49300
2026-06-10 20:32:07 +05:30
Zhi Wei Jian
9d61eddc3a
fix(bt): fix BTC task and BLE mesh bluedroid adapter
...
(cherry picked from commit 678fb93245 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:44 +08:00
Zhi Wei Jian
dd7de53bb5
fix(ble/bluedroid): fix HCI command and BTU robustness
...
(cherry picked from commit c9d13aaf64 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:43 +08:00
Zhi Wei Jian
a6fc9cb62c
fix(ble/bluedroid): fix CTE and ISO API validation
...
(cherry picked from commit 0c3c894b7d )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:43 +08:00
Zhi Wei Jian
bbea975df8
fix(ble/bluedroid): fix GATT server lifecycle and callbacks
...
(cherry picked from commit 54a1e31916 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:43 +08:00
Zhi Wei Jian
56f64635ec
fix(ble/bluedroid): fix GATT client API parameter validation
...
(cherry picked from commit 653477c3e9 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:42 +08:00
Zhi Wei Jian
c68593a521
fix(ble/bluedroid): fix GATT client cache and service discovery
...
(cherry picked from commit b3ff15ed31 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:41 +08:00
Zhi Wei Jian
dc3c75c3f2
fix(ble/bluedroid): fix GAP BLE API parameter validation
...
(cherry picked from commit e3311c81c4 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:41 +08:00
Zhi Wei Jian
2a8350e47b
fix(ble/bluedroid): fix BLE bonding key storage validation
...
(cherry picked from commit 62cdd4ac38 )
Co-authored-by: zhiweijian <zhiweijian@espressif.com >
2026-06-10 19:53:40 +08:00
Sarvesh Bodakhe
4861bd27c5
fix(wifi): scan security validation and NAN timer fixes
...
- Forbid TKIP cipher suites for WPA3-Enterprise scan results
- Use reason 210 (NO_AP_FOUND_W_COMPATIBLE_SECURITY) when an AP is
found during a connecting scan but filtered out for incompatible
security
- Stop NAN timers from re-arming after esp_wifi_stop
2026-06-10 15:38:17 +05:30
Zhang Hai Peng
d801952d8c
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if
...
GATT stack broadcasts notifications to every client app, so unregistered
gatt_if instances were flooding logs even when another app had registered
the handle. Only warn when no client app registered for the handle.
(cherry picked from commit c18c8dc5e7 )
Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com >
2026-06-10 15:24:34 +08:00