Jin Cheng
df336b1f4e
change(bt/bluedroid): optimized the HFP example workflow to improve audio quality
...
Disabled inquiry scan and page scan after SCO connection establishment
to reduce over-the-air bandwidth usage and improve audio quality by
prevent scan activities from interrupting SCO traffic.
2026-08-05 17:47:04 +08:00
Island
1c58330176
Merge branch 'fix/ble_mesh_added_gatt_err_rsp_v5.5' into 'release/v5.5'
...
fix(ble_mesh): align GATTS read/write response handling with ATT (5.5)
See merge request espressif/esp-idf!51462
2026-08-05 16:02:56 +08:00
Wang Meng Yang
f73f7b0f34
Merge branch 'feat/bt_in_psram_v5.5' into 'release/v5.5'
...
feat(bluedroid): Add config to place btu and hci task stack in psram (v5.5)
See merge request espressif/esp-idf!51491
2026-08-05 14:26:52 +08:00
Jiang Jiang Jian
8c7d44897e
Merge branch 'fix/lp_uart_data_bits_v5.5' into 'release/v5.5'
...
fix(ulp/lp_core): fix LP UART data_bits validation and add full word-length test coverage (v5.5)
See merge request espressif/esp-idf!48032
2026-08-05 13:56:42 +08:00
Jiang Jiang Jian
4703c74098
Merge branch 'contrib/github_pr_18817_v5.5' into 'release/v5.5'
...
fix(wear_levelling): guard WL_Flash::write()/read() against size==0 underflow (GitHub PR) (v5.5)
See merge request espressif/esp-idf!50732
2026-08-05 12:23:02 +08:00
Jiang Jiang Jian
409df4afc3
Merge branch 'fix/blacklist_flag_correction_v5.5' into 'release/v5.5'
...
fix(wifi): Correct blacklist flag(v5.5)
See merge request espressif/esp-idf!50920
2026-08-05 10:51:25 +08:00
Jiang Jiang Jian
50bc7661d1
Merge branch 'fix/rtc_retain_mem_sb_fast_wakeup_ptr_v5.5' into 'release/v5.5'
...
fix(bootloader_support): fix RTC retain mem offset for secure boot fast wakeup (v5.5)
See merge request espressif/esp-idf!51268
2026-08-05 10:44:17 +08:00
morris
5c57c2a83e
Merge branch 'docs/clarify_p4_no_wifi_ble_v5.5' into 'release/v5.5'
...
docs: Clarify that ESP32-P4 does not have Wi-Fi or Bluetooth in the introduction (v5.5)
See merge request espressif/esp-idf!51506
2026-08-04 18:16:47 +08:00
Zhang Shuxian
8e6f2b938d
docs: Clarify that ESP32-P4 does not have Wi-Fi or Bluetooth in the introduction
2026-08-04 15:30:45 +08:00
hejiaxin
49f12e853e
feat(bluedroid): Add config to place btu and hci task stack in psram
...
- Also adjust the osi_thread_stop implementation.
2026-08-04 14:55:59 +08:00
Rahul Tank
53bde34029
Merge branch 'bugfix/add_nimble_cve_v5.5' into 'release/v5.5'
...
fix(nimble): Fixes for various NimBLE CVEs (v5.5)
See merge request espressif/esp-idf!51202
2026-08-04 12:11:34 +05:30
Wang Meng Yang
89a63e35b8
Merge branch 'fix/aireview_critical_v5.5' into 'release/v5.5'
...
fix: Fix some critical bugs in classic bt (v5.5)
See merge request espressif/esp-idf!51290
2026-08-04 14:16:54 +08:00
Rahul Tank
9ffcc9821e
fix(nimble): Fixes for various NimBLE CVEs
2026-08-03 23:45:23 +05:30
Luo Xu
3033a5fffb
fix(ble_mesh): align GATTS read/write response handling with ATT
...
bt_mesh_bta_gatts_cb did not always answer ATT Read/Write Requests:
- READ: on a callback error it only logged a warning and sent nothing; a
0-byte read (Read Blob at an offset equal to the value length) also sent
nothing, although it is a successful empty read.
- WRITE: on a callback error it sent nothing, and a partial/zero write was
treated as success.
- Both: when the handle was not found or the attribute had no read/write
callback, the request was silently dropped.
An ATT Request must always be answered:
- READ: len >= 0 is success -> Read Response (a 0-byte read yields an empty
value); len < 0 -> ATT Error Response carrying the callback's error code
(-len, since BLE_MESH_GATT_ERR(x) == -x). The copy length is clamped to
the source buffer size as a defensive bound. If the handle is unknown or
the attribute has no read callback, respond with INVALID_HANDLE /
READ_NOT_PERMITTED.
- WRITE: when need_rsp is set, always reply. len == write length -> Write
Response; otherwise (negative ATT error, partial write, or 0) -> ATT
Error Response (the negative code, or UNLIKELY for partial/0). If the
handle is unknown or the attribute has no write callback, respond with
INVALID_HANDLE / WRITE_NOT_PERMITTED. Write Without Response still sends
no response.
A non-success status passed to BTA_GATTS_SendRsp is turned into an ATT
Error Response by the GATT layer (gatt_sr_process_app_rsp ->
gatt_send_error_rsp).
(cherry picked from commit ed1f4de3a3 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-08-03 21:43:46 +08:00
Alexey Gerenkov
d276041d1c
Merge branch 'feature/upgrade-esp-rom-elfs_v5.5' into 'release/v5.5'
...
feat(tools): tools: update esp-rom-elf to version 20260528 (v5.5)
See merge request espressif/esp-idf!50848
2026-08-03 15:43:01 +08:00
Island
c41feceb86
Merge branch 'fix/ble_log_compression_issue_on_windows_v5.5' into 'release/v5.5'
...
fix(bt): fix BLE log compression build on Windows (5.5)
See merge request espressif/esp-idf!51245
2026-08-03 11:31:41 +08:00
Island
4e5966a7f0
Merge branch 'feat/update_mesh_lib_to_supported_get_lib_ver_v5.5' into 'release/v5.5'
...
Feat/update mesh lib to supported get lib ver (5.5)
See merge request espressif/esp-idf!51172
2026-08-03 11:30:16 +08:00
Martin Vychodil
ae16d322a4
Merge branch 'bugfix/idfci-12815-12072-timeout_v5.5' into 'release/v5.5'
...
fix(storage): mark storage pytest apps flaky in CI (v5.5)
See merge request espressif/esp-idf!51337
2026-08-02 16:39:27 +08:00
Alexey Gerenkov
c3dbba967d
Merge branch 'fix/esp32p4_panic_gdbstub_v5.5' into 'release/v5.5'
...
fix(gdbstub): remove unsupported options in qSupported packet
See merge request espressif/esp-idf!50208
2026-07-31 21:23:30 +08:00
Euripedes Rocha
065069270b
Merge branch 'fix/sec-1129-l2tap-close-rollback_v5.5' into 'release/v5.5'
...
fix(esp_netif): roll back l2tap_close on semaphore/task create failure (SEC-1129) (v5.5)
See merge request espressif/esp-idf!51399
2026-07-31 14:38:43 +02:00
Euripedes Rocha Filho
0dc7c2f853
fix(esp_netif): Avoid socket to stay in closing state in l2tap closing
2026-07-31 09:26:32 +02:00
sonika.rathi
310502e340
fix(storage): mark storage pytest apps flaky in CI
2026-07-31 08:54:24 +02:00
tarun.kumar
56d6352aa1
fix(wifi): Correct blacklist flag
2026-07-31 12:08:43 +05:30
Island
3844dee2e7
Merge branch 'fix/fix_some_ble_sleep_issues_v5.5' into 'release/v5.5'
...
Fix/fix some ble sleep issues (5.5)
See merge request espressif/esp-idf!51318
2026-07-31 11:09:57 +08:00
harshal.patil
159d222973
refactor(esp_system): deduplicate ROM fast wake RTC digest reservation
...
The digest length and the condition that reserves it at the end of RTC RAM were
duplicated in seven places. Hold the reservation in a hidden Kconfig value that
is zero when the feature does not apply, so every consumer subtracts it
unconditionally, and derive ESP_SECURE_BOOT_DIGEST_LEN from it.
2026-07-31 10:57:02 +08:00
Rahul Tank
058c921d67
Merge branch 'bugfix/fix_pawr_conn_event_v5.5' into 'release/v5.5'
...
fix(nimble): Deliver PAwR peripheral CONNECT via sync callback (v5.5)
See merge request espressif/esp-idf!51254
2026-07-30 20:40:51 +05:30
Rahul Tank
55cca8b8b4
fix(nimble): Deliver PAwR peripheral CONNECT via sync callback
2026-07-30 16:33:07 +05:30
Euripedes Rocha
416befd3ec
Merge branch 'fix/esp_netif-oom-null-checks-v5.5' into 'release/v5.5'
...
fix(esp_netif): harden NULL and OOM handling in netif APIs (SEC-1189, SEC-1190)
See merge request espressif/esp-idf!50308
2026-07-30 12:32:59 +02:00
Alexey Lapshin
8e3d4f29ec
feat(tools): tools: update esp-rom-elf to version 20260528
...
Closes https://github.com/espressif/esp-idf/issues/18755
2026-07-30 16:34:38 +08:00
Euripedes Rocha Filho and Cursor
9e52922932
fix(esp_netif): harden NULL and OOM handling in netif APIs
...
Use a temporary pointer for br_glue port-list realloc so a failure does
not clobber the existing array. Reject NULL mac in esp_netif_set_mac and
validate config->base in esp_netif_new_api before use.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-30 08:55:13 +02:00
Euripedes Rocha
a1325b694d
Merge branch 'fix/sec-347-hostname-null-check_v5.5' into 'release/v5.5'
...
fix(esp_netif): reject NULL hostname in esp_netif_set_hostname_api (SEC_347) (v5.5)
See merge request espressif/esp-idf!50589
2026-07-30 08:36:50 +02:00
Wang Meng Yang
fa27fd0a52
Merge branch 'fix/bluedroid_aireview_v5.5' into 'release/v5.5'
...
Fix/bluedroid aireview (v5.5)
See merge request espressif/esp-idf!51295
2026-07-30 14:28:55 +08:00
Jiang Jiang Jian
f1bf7346e4
Merge branch 'bugfix/fix_espnow_data_rate_error_v5.5' into 'release/v5.5'
...
fix(wifi): fixed espnow data rate overridden by stale rate control (v5.5)
See merge request espressif/esp-idf!51258
2026-07-30 12:04:26 +08:00
cjin
2fca2f8b49
fix(bt): fix deselect slow clk missing on ESP32-C5
2026-07-30 10:39:30 +08:00
cjin
f01973be75
feat(ble): added CONFIG_PM_SLP_IRAM_OPT to make sure cache error check
2026-07-30 10:17:34 +08:00
Island
bc9e3b168e
Merge branch 'change/ble_update_lib_20260717_v5.5' into 'release/v5.5'
...
change(ble): [AUTO_MR] 20260717 - Update ESP BLE Controller Lib (5.5)
See merge request espressif/esp-idf!50931
2026-07-30 10:08:05 +08:00
Marius Vikhammer
4406e2b236
Merge branch 'fix/lp-core-rc-fast-delay_v5.5' into 'release/v5.5'
...
fix(ulp): use SoC RC_FAST frequency for LP core delay (v5.5)
See merge request espressif/esp-idf!49859
2026-07-29 22:39:20 +08:00
Euripedes Rocha Filho
352f4997fa
fix(esp_netif): reject NULL hostname in esp_netif_set_hostname_api
...
esp_netif_set_hostname_api() dereferenced hostname via strlen() without
checking it for NULL first, causing a NULL pointer dereference.
2026-07-29 16:00:37 +02:00
Marius Vikhammer
ddfd2934ef
test(ulp): check LP core apps avoid soft-float helpers
...
Inspect generated LP core ELF files so accidental floating-point helper linkage is caught in CI.
2026-07-29 14:47:48 +02:00
Marius Vikhammer and Cursor
37a4390c64
fix(ulp): use RC_FAST approximation for LP core fallback
...
Use the shared SoC RC_FAST approximation when the target has no RTC_FAST source option.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-29 14:47:48 +02:00
Marius Vikhammer and Cursor
25b9025d93
fix(ulp): use SoC RC_FAST frequency for LP core delay
...
Use the target RC_FAST approximation for LP core delay conversion.
This prevents ESP32-S31 from under-delaying when running from RC_FAST.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-07-29 14:47:48 +02:00
Jiang Jiang Jian
a7633c1bee
Merge branch 'bugfix/supplicant_crypto_code_correction_v5.5' into 'release/v5.5'
...
fix(wpa_supplicant): Correct some functions in crypto porting layer (v5.5)
See merge request espressif/esp-idf!50879
2026-07-29 19:53:13 +08:00
Rahul Tank
480a354c9a
Merge branch 'feat/sbom_changes_v5.5' into 'release/v5.5'
...
fix(nimble): update sbom file with cve details (v5.5)
See merge request espressif/esp-idf!51182
2026-07-29 15:03:46 +05:30
zhangyanjiao
1a23549f28
fix(wifi): fixed espnow data rate overridden by stale rate control
2026-07-29 17:31:47 +08:00
Jin Cheng
6e4bd4152d
fix(bt/bluedroid): fixed incorrect eSCO packet type validation under secure connection mode in BlueDroid
2026-07-29 17:30:25 +08:00
hejiaxin
60289a9c60
fix(bt): Fix some bug in stm_sco.c
...
- Memory safety
- State machine & logic integrity
- Resource leaks
- Edge cases check
2026-07-29 17:30:25 +08:00
hejiaxin
18c6d51e46
fix(bt_stack): Fix some critical bugs in classic_bt stack
...
related: obex, smp, pbap, sdp, rfcomm, stack_dm
- Deinit function doesn't delete connection when OBEX_DYNAMIC_MEMORY is on
- Union tGOEPC_DATA sometimes is free by osi_free in some cases when it contains mtu_id
- Add correct free and return solution after fail
- Fix symbol mistake in mod calculation
- Fix pointer-related UAF problems and memory free problems
- Fix buffer overflows and out-of-bounds access
- Fix infinite loops triggered by integer overflow wraparound
- Fix double free
- Change layer_specific usage to avoid heap overflow
- Add some NULL check for pointers
- Fix sdp_db free function
- Fix state table mismatch
2026-07-29 17:05:35 +08:00
Jiang Jiang Jian
db33ff497f
Merge branch 'bugfix/clear_ifx_tx_queue_v5.5' into 'release/v5.5'
...
bugfix(wifi): Clear Sta TX queue to prevent key 2 send failure (Backport v5.5)
See merge request espressif/esp-idf!50896
2026-07-29 15:37:21 +08:00
Rahul Tank
80e8f463c3
fix(nimble): update sbom file with cve details
2026-07-29 12:50:20 +05:30
Island
c96d10b850
Merge branch 'feat/add_bt_common_npl_v5.5' into 'release/v5.5'
...
feat(bt): Add host-agnostic BT OSAL and shared BLE profile task (5.5)
See merge request espressif/esp-idf!51218
2026-07-29 15:00:28 +08:00