Commit Graph
42486 Commits
Author SHA1 Message Date
harshal.patil dc5be9b26d fix(esp_common/esp_fault): make ESP_FAULT_ASSERT survive optimization
ESP_FAULT_ASSERT(C) was silently deleted by the optimizer when C is a cached
flag/status already proven by a preceding `if (!C) return/goto`: the compiler
folds C to a constant and drops all three checks, removing the fault-injection
protection with no warning.
2026-06-22 11:38:55 +05:30
harshal.patil 2d24b4cbca fix(secure_boot): range-check ECDSA r,s in bootloader before ROM verify 2026-06-22 11:38:55 +05:30
harshal.patil 3587b50883 fix(esp_common): Add esp_fault_internal.h for use by G0 components
In release/v5.x, esp_fault.h resides in the esp_hw_support (G1)
component, so the G0 components (hal, esp_rom) must not depend on it.
Copy its contents to esp_common as esp_fault_internal.h, keep
esp_fault.h as a compatibility wrapper around it, and switch the hal
and esp_rom ECDSA/ECC code to the internal header.
2026-06-22 11:38:55 +05:30
harshal.patil 4b3c4e2fd9 test(mbedtls): Add out-of-bounds test for the ECDSA hardware driver 2026-06-22 11:38:55 +05:30
harshal.patil 7640ef0a13 fix(esp_rom): Patch ets_ecdsa_verify() to include signature bounds check 2026-06-22 11:38:55 +05:30
harshal.patilandAshish Sharma 85055fabff fix(mbedtls): validate ECDSA signature range and harden ECC memory power-down
Co-Authored-By: Ashish Sharma <ashish.sharma@espressif.com>
2026-06-22 11:38:55 +05:30
Island ab6b359a24 Merge branch 'feat/ble-smp-multi-adv-static-random-address_v5.3' into 'release/v5.3'
feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses (5.3)

See merge request espressif/esp-idf!49786
2026-06-22 10:35:23 +08:00
Island 04a9243eb0 Merge branch 'docs/ble-uart-tutorial_v5.3' into 'release/v5.3'
docs(ble): added ESP-BLE-UART OpenCode Companion Guide (5.3)

See merge request espressif/esp-idf!49381
2026-06-22 10:34:34 +08:00
Rahul Tank 1f75b37d7f Merge branch 'bugfix/fix_log_performance_v5.3' into 'release/v5.3'
fix(nimble): Guard ble_hs_log_mbuf/flat_buf against non-DEBUG log level (v5.3)

See merge request espressif/esp-idf!49731
2026-06-18 21:39:50 +05:30
Wang Meng Yang 5728b5362b Merge branch 'bugfix/bbp_isses_v5.3' into 'release/v5.3'
Bugfix/bbp isses v5.3

See merge request espressif/esp-idf!49627
2026-06-18 14:48:22 +08:00
Zhang Hai Peng e0e3448f44 feat(ble/bluedroid): Add BLE SMP support for multi-ADV with static random addresses
(cherry picked from commit 7986e2faa8)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-06-18 10:24:47 +08:00
Marius Vikhammer 8b9ea01634 Merge branch 'fix/efuse_damaged_reading_virtual_blocks_v5.3' into 'release/v5.3'
fix(efuse): erase virtual blocks before burn in damaged-reading test (v5.3)

See merge request espressif/esp-idf!49722
2026-06-17 18:21:17 +08:00
Island b5116d1180 Merge branch 'feat/format_bt_hci_to_btsnoop_v5.3' into 'release/v5.3'
refactor(bt): migrate bt_hci_to_btsnoop to esp-pylib (5.3)

See merge request espressif/esp-idf!49707
2026-06-17 14:43:50 +08:00
Mahavir Jain f813d5e712 Merge branch 'fix/fix_sec2_client_possible_pub_length_truncation_v5.3' into 'release/v5.3'
fix(esp_prov): fixes security2 client possible public length truncation (v5.3)

See merge request espressif/esp-idf!49335
2026-06-17 10:08:12 +05:30
morris e87ffcd14e Merge branch 'feat/lcd_i2c_use_configurable_timeout_v5.3' into 'release/v5.3'
feat(lcd): add configurable timeout for lcd i2c panel (v5.3)

See merge request espressif/esp-idf!48673
2026-06-17 10:53:16 +08:00
morris 62da65a3c7 Merge branch 'doc/i2s_esp32_mclk_restriction_v5.3' into 'release/v5.3'
docs(i2s): add note for the restriction of MCLK on esp32 (v5.3)

See merge request espressif/esp-idf!48574
2026-06-17 10:51:50 +08:00
Jin Cheng 1a941a77a0 fix(bt/bluedroid): added buffer length check for HID Device data indication 2026-06-17 07:27:25 +08:00
Jin Cheng 756cb96277 fix(bt/bluedroid): added validation for all SMP BR opcode lengths in smp_br_data_received 2026-06-17 07:27:25 +08:00
Jin Cheng a5626bfc54 fix(bt/bluedroid): fixed CTKD link key authentication downgrade in SC-Only mode 2026-06-17 07:27:25 +08:00
Jin Cheng 5a5968c8e9 fix(bt/bluedroid): added buffer length check for HID host data indication 2026-06-17 07:27:25 +08:00
Jin Cheng 8de265dc44 fix(bt/bluedroid): added buffer length check for L2CAP related functions 2026-06-17 07:27:25 +08:00
Jiang Jiang Jian 7a27688622 Merge branch 'bugfix/scan_issue_wpa3_enterprise_v5.3' into 'release/v5.3'
fix(wifi): scan security validation and NAN timer fixes (Backport v5.3)

See merge request espressif/esp-idf!49528
2026-06-16 21:08:46 +08:00
Rahul Tank f882932204 fix(nimble): Gaurd ble_hs_log_mbuf/flat_buf against non-DEBUG log level 2026-06-16 16:30:57 +05:30
Ashish Sharma 9c2adffb58 fix(esp_prov): fixes sec2 client possible public length truncation 2026-06-16 18:25:48 +08:00
Konstantin Kondrashov 1cbe85a666 fix(efuse): erase virtual blocks before burn in damaged-reading test
Some chip may have BLOCK3 in use so we need to erase it before test.
2026-06-16 12:49:08 +03:00
Mahavir Jain a4a5c0af59 Merge branch 'fix/mbedtls_build_failure_x509_crt_v5.3' into 'release/v5.3'
fix(mbedtls): fixes build failure with clang21 (v5.3)

See merge request espressif/esp-idf!49417
2026-06-16 13:36:38 +05:30
Zhang Hai Peng 4db65d5f4c refactor(bt): migrate bt_hci_to_btsnoop to esp-pylib
Replace argparse with rich-click and use esp_pylib.logger for
standardized console output and fatal error handling.


(cherry picked from commit 3a7896f2c5)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-06-16 15:34:02 +08:00
Rahul Tank 43549911a8 Merge branch 'bugfix/fix_security_proto_nimble_v5.3' into 'release/v5.3'
fix(protocomm): harden nimble/bluedroid transport size handling (v5.3)

See merge request espressif/esp-idf!49183
2026-06-15 21:07:38 +05:30
Rahul Tank 972f6ac5a3 fix(protocomm): harden nimble transport size handling 2026-06-15 16:00:56 +05:30
Island 0bb375b34e Merge branch 'fix/gattc-multi-app-notif-warning_v5.3' into 'release/v5.3'
fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if (5.3)

See merge request espressif/esp-idf!49514
2026-06-15 15:08:12 +08:00
Ashish Sharma b0fc1922c5 fix(mbedtls): fixes build failure with clang21
Closes https://github.com/espressif/esp-idf/issues/18456
2026-06-15 12:03:12 +08:00
Island 4d1d5705cd Merge branch 'bugfix/fix_bluedroid_ai_review_bugs_20260427_v5.3' into 'release/v5.3'
Bugfix/fix bluedroid ai review bugs 20260427 (5.3)

See merge request espressif/esp-idf!49538
2026-06-15 11:04:06 +08:00
zhiweijian 6fa3f622ca fix(examples): improve bluedroid BLE example error handling
Check GAP/GATT event status, fix prepare-write buffer lifecycle, and
align example code with updated Bluedroid API behavior.
2026-06-12 10:41:31 +08:00
zhiweijian da9e63b690 refactor(examples): disable unused BT options in bluedroid BLE examples
Add sdkconfig.defaults to turn off unused Bluedroid host features per
example role (GATT client/server, SMP, legacy adv, etc.).
2026-06-12 10:34:45 +08:00
ShenWeilong 1409afdba9 fix(bluedroid): Set CONFIG_PARTITION_TABLE_SINGLE_APP_LARGE=y in bluedroid host examples 2026-06-12 10:34:34 +08:00
Rahul Tank 8c22cfe1af Merge branch 'fix/add_remaining_vars_to_heap_v5.3' into 'release/v5.3'
fix(nimble): Change remaining vars from Static to Dynamic (v5.3)

See merge request espressif/esp-idf!49282
2026-06-11 17:30:33 +05:30
morris fea9e43d06 Merge branch 'fix/jpeg_cve_fix_v5.3' into 'release/v5.3'
fix(jpeg_decoder): Add some strict check to avoid bad picture attack (backport v5.3)

See merge request espressif/esp-idf!49569
2026-06-11 18:42:47 +08:00
Sumeet Singh 9c2ef25d89 fix(nimble): Change remaining vars from Static to Dynamic (v5.3) 2026-06-11 13:38:05 +05:30
C.S.M 303c01305a fix(jpeg_decoder): Add some strict check to avoid bad picture attack 2026-06-11 11:52:30 +08:00
Rahul Tank 3f142abeb9 Merge branch 'bugfix/bt4371_crash_v5.3' into 'release/v5.3'
fix(nimble): Deinit NimBLE stop event in host task (v5.3)

See merge request espressif/esp-idf!49300
2026-06-10 20:32:07 +05:30
Zhi Wei Jian 9d61eddc3a fix(bt): fix BTC task and BLE mesh bluedroid adapter
(cherry picked from commit 678fb93245)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:44 +08:00
Zhi Wei Jian dd7de53bb5 fix(ble/bluedroid): fix HCI command and BTU robustness
(cherry picked from commit c9d13aaf64)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:43 +08:00
Zhi Wei Jian a6fc9cb62c fix(ble/bluedroid): fix CTE and ISO API validation
(cherry picked from commit 0c3c894b7d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:43 +08:00
Zhi Wei Jian bbea975df8 fix(ble/bluedroid): fix GATT server lifecycle and callbacks
(cherry picked from commit 54a1e31916)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:43 +08:00
Zhi Wei Jian 56f64635ec fix(ble/bluedroid): fix GATT client API parameter validation
(cherry picked from commit 653477c3e9)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:42 +08:00
Zhi Wei Jian c68593a521 fix(ble/bluedroid): fix GATT client cache and service discovery
(cherry picked from commit b3ff15ed31)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:41 +08:00
Zhi Wei Jian dc3c75c3f2 fix(ble/bluedroid): fix GAP BLE API parameter validation
(cherry picked from commit e3311c81c4)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:41 +08:00
Zhi Wei Jian 2a8350e47b fix(ble/bluedroid): fix BLE bonding key storage validation
(cherry picked from commit 62cdd4ac38)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-06-10 19:53:40 +08:00
Sarvesh Bodakhe 4861bd27c5 fix(wifi): scan security validation and NAN timer fixes
- Forbid TKIP cipher suites for WPA3-Enterprise scan results
- Use reason 210 (NO_AP_FOUND_W_COMPATIBLE_SECURITY) when an AP is
  found during a connecting scan but filtered out for incompatible
  security
- Stop NAN timers from re-arming after esp_wifi_stop
2026-06-10 15:38:17 +05:30
Zhang Hai Peng d801952d8c fix(bt): Suppress gattc drop-notif warning for unregistered gatt_if
GATT stack broadcasts notifications to every client app, so unregistered
gatt_if instances were flooding logs even when another app had registered
the handle. Only warn when no client app registered for the handle.


(cherry picked from commit c18c8dc5e7)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-06-10 15:24:34 +08:00