Kapil Gupta
d588a95acb
fix(esp_wifi): Add alt snonce verification in softAP
2026-03-04 12:02:44 +05:30
Kapil Gupta
2bc5cb0ea5
fix(esp_wifi): Fix bug where wps_finish is called recursively
2026-02-28 11:48:37 +08:00
Kapil Gupta
f973a3292f
docs: update vulnerabilities guide to mention CVE-2026-25532
2026-02-04 14:31:02 +05:30
Kapil Gupta
acd7b505de
Merge branch 'bugfix/invalid_memory_access_supplicant_v5.4' into 'release/v5.4'
...
fix(esp_wifi): Fix some invalid memory access (v5.4)
See merge request espressif/esp-idf!44275
2026-01-26 15:25:24 +05:30
Kapil Gupta
73a587d42a
fix(esp_wifi): Fix invalid memory accesses in supplicant code
2026-01-26 14:09:44 +05:30
Kapil Gupta
f58a379b2f
fix(esp_wifi): Change some defaults in roaming app
2026-01-08 14:49:41 +05:30
Kapil Gupta
f3b4a05848
fix(esp_wifi): Use correct variable for neighbour report
2026-01-08 14:49:29 +05:30
Kapil Gupta
13515bc1e1
fix(esp_wifi): Check conditional compilation for roaming app features
2026-01-08 14:49:19 +05:30
Kapil Gupta
54f5970464
fix(esp_wifi): Cancel roaming_app_periodic_scan_internal_handler correctly
2026-01-08 14:49:04 +05:30
Kapil Gupta
025de31dc9
fix(esp_wifi): Add some fixes in roaming app
2026-01-08 14:49:04 +05:30
Kapil Gupta
29811c1630
fix(esp_wifi): Address some review comments and issues
2026-01-08 14:49:04 +05:30
Kapil Gupta
b1b6e0f1fa
feat(roaming): ignore WPA2-only APs on transition disable
...
This commit introduces a new feature to the roaming logic. If the
currently connected AP has the 'transition disable' bit set in its
RSN IE, the roaming logic will now ignore any scanned APs that only
support WPA2-PSK. This prevents a security downgrade when roaming in a
mixed WPA2/WPA3 environment.
A new Kconfig option, CONFIG_ESP_WIFI_IGNORE_WPA2_ONLY_ON_TRANSITION_DISABLE,
has been added to control this feature. It is disabled by default.
2026-01-08 14:49:04 +05:30
Kapil Gupta
19b510c261
fix(roaming_app): resolve issues in blacklisting logic
...
This commit addresses several issues in the BSSID blacklisting
feature of the roaming application:
- Merged duplicate functions into a single,
unified function, resolving a compilation error.
- Corrected and
to properly access the member of the
struct, fixing invalid memory access.
- Introduced in Kconfig to enable
the manual blacklisting feature and made auto-blacklisting
dependent on it.
- Updated to use the
correct BSSID from .
- Optimized the removal of expired blacklist entries by using
for better efficiency.
2026-01-08 14:49:04 +05:30
Kapil Gupta
a105dc6064
fix(esp_wifi): Add blacklist logic in roaming app
2026-01-08 14:49:04 +05:30
Kapil Gupta
e8c27ff92a
fix(esp_wifi): skip call to esp_fast_psk() when hardware SHA is not supported
2025-12-05 15:04:56 +08:00
Kapil Gupta
4495803370
Merge branch 'bugfix/cleanup_ctr_drbg_v5.4' into 'release/v5.4'
...
wpa_supplicant: Replace use of mbedtls_ctr_drbg with esp_mbedtls_random() (v5.4)
See merge request espressif/esp-idf!42376
2025-11-15 19:58:23 +05:30
Kapil Gupta
2ecb81d745
refactor(esp_wifi): Remove WPS task code
2025-10-09 23:25:09 +05:30
Kapil Gupta
3cf1f74776
fix(mbedtls): Addressed comments on PR15679
2025-10-06 11:27:16 +05:30
Kapil Gupta
eb93cd9932
fix(esp_wifi): Add depenedency of 192 bit config on wifi enterprise
...
Closes https://github.com/espressif/esp-idf/issues/17567
2025-09-21 12:31:00 +05:30
Kapil Gupta
1502a50bc6
fix (esp_wifi): Set default akm as eap for non AKM APs
2025-08-28 11:02:26 +05:30
Kapil Gupta
5e91cd87a8
fix(wpa_supplicant): Delay sending of EAP_START for EAP auth
2025-08-28 11:00:10 +05:30
Kapil Gupta
297c9de26a
fix(esp_wifi): Address review comments
2025-07-28 12:35:55 +05:30
Kapil Gupta
9c8ac5c3fb
feat(esp_wifi): Add support to limit EAP methods
...
Added support to limit EAP method supported by device based on
user configuration.
2025-07-28 12:33:44 +05:30
Kapil Gupta
0a19eac18f
fix(esp_wifi): Set default ap mgmt cipher
2025-07-25 16:53:25 +05:30
Kapil Gupta
2348bc3ff9
ci(esp_wifi): Extend eloop test to verify wifi deinit properly
2025-05-27 13:43:03 +05:30
Kapil Gupta
6d97c71d91
fix(esp_wifi): Fixed some concurrency issues in eloop deinit
2025-05-27 13:42:55 +05:30
Kapil Gupta
3e810f5936
fix(esp_wifi): Add eloop blocking call API for public APIs
2025-05-27 13:42:41 +05:30
Kapil Gupta
221f641eb8
fix(esp_wifi): Fixed static analyzer issues
2025-05-27 13:39:08 +05:30
Kapil Gupta
4514aa8e11
fix(esp_wifi): Disble IP renew skip by default
2025-05-27 13:37:23 +05:30
Kapil Gupta
0de5180d8a
fix(esp_wifi): Increase WPS timeout
2025-05-06 12:46:42 +05:30
Kapil Gupta
ad4f3277db
fix(esp_wifi): Use supplicant's internal SHA1 if not available from IDF
2025-04-29 11:10:56 +05:30
Kapil Gupta
a18ce5df2d
Merge branch 'bugfix/roaming_app_issues_v5.4' into 'release/v5.4'
...
fix(wifi): Fix some issues observed in roaming app (v5.4)
See merge request espressif/esp-idf!37414
2025-04-11 19:34:05 +08:00
Kapil Gupta
d255e7e7b5
fix(esp_wifi): Fix some compilation errors in roaming app
2025-04-11 15:49:12 +05:30
Kapil Gupta
5574205935
fix(esp_wifi): Removed unnecessary handlers to cleanup
2025-04-11 15:49:06 +05:30
Kapil Gupta
2b495713b2
fix(esp_wifi): Roaming app, sync api naming
2025-04-11 15:47:19 +05:30
Kapil Gupta
e5915c3ce3
fix(esp_wifi): Some more cleanup for roaming app
2025-04-11 15:47:17 +05:30
Kapil Gupta
8ed1cf8050
fix(esp_wifi): moving around roaming app code a bit
2025-04-11 15:46:25 +05:30
Kapil Gupta
7c94365ce9
fix(roaming_app): Add get set config params for the app
2025-04-11 15:46:25 +05:30
Kapil Gupta
e296094b00
fix(wifi): Provide a config option to skip IP renew during roam
2025-04-11 15:46:25 +05:30
Kapil Gupta
84ae3dc848
fix(esp_wifi): Set minimum scan time to 30ms in roaming app
2025-04-11 15:46:25 +05:30
Kapil Gupta
516551adc4
fix(wifi): Fix some issues observed in roaming app
2025-04-11 15:46:25 +05:30
Kapil Gupta
0cb892d6a2
Merge branch 'feature/github_pull_15073_v5.4' into 'release/v5.4'
...
feat(wpa_supplicant): Add optimized PSK implementation (v5.4)
See merge request espressif/esp-idf!38104
2025-04-09 00:21:40 +08:00
Kapil Gupta
582c2d8d4c
fix(esp_wifi): Flush PMK when EAP config is changed
2025-04-08 17:58:24 +05:30
Kapil Gupta
c2fad24731
fix(esp_wifi): Code cleanup for PR#15550 PR#15551
...
Closes https://github.com/espressif/esp-idf/pull/15550
Closes https://github.com/espressif/esp-idf/pull/15551
2025-04-08 17:57:27 +05:30
Kapil Gupta
2a0866ac9f
fix(ci): Update UT to verify fast psk calculations
...
Also update some comments
2025-04-07 14:02:48 +08:00
Kapil Gupta
b9f2ca9068
fix(esp_wifi): Add some comments in github PR 15073
...
Closes https://github.com/espressif/esp-idf/pull/15073
2025-04-07 14:02:48 +08:00
Kapil Gupta
2863fe328c
fix(esp_wifi): Add alternate SHA1 APIs in WiFi
...
Add alternate SHA1 APIs to handle cases when
`CONFIG_MBEDTLS_SHA1_C` is disabled.
2025-04-01 12:40:55 +05:30
Kapil Gupta
a2d0171a17
ci(wifi): Add builds for FT, RRM and WNM configs
2025-03-19 12:43:30 +05:30
Kapil Gupta
24fed6d3c2
fix(wifi): Fixed compilation error when 11R is enabled without 11KV
2025-03-19 12:43:20 +05:30
Kapil Gupta
793fe61c81
fix(esp_wifi): Prevent flushing of FT data mistakenly
2025-03-05 12:41:10 +05:30
Kapil Gupta
2ed843bdd2
fix(esp_wifi): Correctly break 11kv config into wnm and rrm configs
2025-03-05 12:40:54 +05:30
Kapil Gupta
31b88484a6
fix(esp_wifi): Fix stack corruption in wpa3 task
2025-02-13 14:23:08 +05:30
Kapil Gupta
698392735c
fix(esp_wifi): fixed Stack corruption in DPP task
2025-02-13 14:23:08 +05:30
Kapil Gupta
a64056fac2
fix(esp_wifi): fixed Stack corruption in WPS processing
2025-02-13 14:23:08 +05:30
Kapil Gupta
c3959700b3
fix(esp_wifi): Fixed memory corruption in wifi enterprise
...
Closes https://github.com/espressif/esp-idf/issues/15370
2025-02-13 14:23:08 +05:30
Kapil Gupta
cd934c08ab
fix(esp_wifi): Add review comments and some cleanup
2025-02-10 15:46:30 +05:30
Kapil Gupta
3c085db83e
fix(esp_wifi): fix some analyzer issues
...
Closes https://github.com/espressif/esp-idf/issues/15097
Closes https://github.com/espressif/esp-idf/issues/15098
Closes https://github.com/espressif/esp-idf/issues/15099
2025-02-10 15:46:30 +05:30
Kapil Gupta
17032b875a
fix(esp_wifi): Reduce scan frequency in WPS
2025-02-10 15:11:14 +05:30
Kapil Gupta
85156cceff
fix(esp_wifi): Address some review comments
2025-01-20 14:18:14 +08:00
Kapil Gupta
5abadc5b38
fix(esp_wifi): Enable EAP workarounds by default
...
Enabling this will make sure our behavior is same as upstream
wpa_supplicant.
2025-01-03 17:42:53 +05:30
Kapil Gupta
234dce0e7f
fix(wifi): Remove WPS IEs once WPS succeeds
2024-11-21 13:42:29 +05:30
Kapil Gupta
bac76f0491
ci(docs): Add wifi code owners for wifi docs
2024-10-19 15:45:27 +08:00
Kapil Gupta
974eb7933d
Merge branch 'feat/add_sbom_wpa_supplicant' into 'master'
...
feat(wpa_supplicant): Add sbom manifest file for wpa_supplicant
Closes IDF-8308
See merge request espressif/esp-idf!34193
2024-10-15 20:46:38 +08:00
Kapil Gupta
3f57872ff2
Merge branch 'bugfix/correct_typo_scan' into 'master'
...
fix(esp_wifi): Correct typos in example/scan.c
See merge request espressif/esp-idf!34145
2024-10-14 19:42:10 +08:00
Kapil Gupta
1fa67f81f8
Merge branch 'fix/wifi_netif_null_deref' into 'master'
...
esp_wifi: Add null pointer checks to WiFi-netif APIs
Closes IDFGH-7092
See merge request espressif/esp-idf!33946
2024-10-01 21:34:18 +08:00
Kapil Gupta
d2e0eb7a52
fix(esp_wifi): Prevent memory overflow in WPS
2024-09-21 14:38:09 +05:30
Kapil Gupta
5d792910be
Merge branch 'bugfix/wps_timer_causing_disconnect' into 'master'
...
fix(esp_wifi): Disable WPS timers once WPS succeed
Closes WIFIBUG-393
See merge request espressif/esp-idf!33240
2024-09-21 15:03:19 +08:00
Kapil Gupta
0c9d7c9dd0
Merge branch 'bugfix/2g_5g_wnm_scan' into 'master'
...
fix(esp_wifi): Add changes to enable 5ghz scan
Closes WIFIBUG-773
See merge request espressif/esp-idf!33657
2024-09-20 22:20:26 +08:00
Kapil Gupta
3629909b11
fix(esp_wifi): Mask some error conditions in WPS
...
Mask some error conditions in WPS to increase the probability of
WPS success.
2024-09-20 22:08:01 +08:00
Kapil Gupta
3a35b26de1
fix(esp_wifi): Disable WPS timers once WPS succeed
2024-09-20 22:08:01 +08:00
Kapil Gupta
b0712b6a2b
Merge branch 'bugfix/deinitialize_wps_registrar' into 'master'
...
fix(esp_wifi): Deinit WPS registrar during hostapd deinit
Closes WIFIBUG-786 and WIFIBUG-695
See merge request espressif/esp-idf!33658
2024-09-20 17:40:57 +08:00
Kapil Gupta
1d7241acc1
fix(esp_wifi): Add changes to enable 5ghz scan
2024-09-20 12:58:14 +05:30
Kapil Gupta
903c11ff1a
Merge branch 'bugfix/dpp_5ghz_chan_support' into 'master'
...
fix(esp_wifi): Add support for 5ghz channel list for easy connect
Closes WIFI-6420
See merge request espressif/esp-idf!32146
2024-09-20 14:46:05 +08:00
Kapil Gupta
e24005c8db
fix(esp_wifi): Add support for 5ghz channel list for easy connect
2024-09-20 14:46:05 +08:00
Kapil Gupta
1ac6043bce
Merge branch 'bugfix/wps_wpa_connection' into 'master'
...
fix(esp_wifi): Allow connection with WPA mode in WPS
See merge request espressif/esp-idf!32360
2024-09-20 14:16:26 +08:00
Kapil Gupta
52002bf92d
fix(esp_wifi): Allow connection with WPA mode in WPS
2024-09-20 14:16:01 +08:00
Kapil Gupta
28f12bfb47
fix(esp_wifi): Deinit WPS registrar during hostapd deinit
2024-09-19 23:10:08 +05:30
Kapil Gupta
27cf5267a1
fix(esp_wifi): Added prints in btm roam for error condition
2024-09-18 14:44:24 +08:00
Kapil Gupta
b66f4444d7
fix(esp_wifi): Stop roaming app when station stops
2024-09-11 12:01:31 +05:30
Kapil Gupta
09b421674b
fix(esp_wifi): Remove duplicate declaration of function
2024-09-11 10:03:38 +05:30
Kapil Gupta
2a222d437e
Merge branch 'bugfix/deinit_roaming_app_crash' into 'master'
...
fix(esp_wifi): Fix crash in wifi deinit due to roaming neighbor list
Closes WIFIBUG-656
See merge request espressif/esp-idf!32418
2024-07-30 20:07:48 +08:00
Kapil Gupta
4c401905e0
Merge branch 'bugfix/dpp_auth_failure' into 'master'
...
Fix(wpa_supplicant):Deinit old dpp authentication when config is received.
Closes WIFIBUG-649
See merge request espressif/esp-idf!31924
2024-07-24 14:50:33 +08:00
Kapil Gupta
131dc6d1c0
fix(esp_wifi): cleanup for crypto_ec struct
2024-07-10 19:29:34 +08:00
Kapil Gupta
63386f34bf
Merge branch 'bugfix/wpa3_init_crash' into 'master'
...
fix(wpa_supplicant): Fix wpa3 AP crash because of dangling pointer
Closes WIFIBUG-540
See merge request espressif/esp-idf!31358
2024-06-11 18:06:30 +08:00
Kapil Gupta
b102277a12
Merge branch 'feat/add_itwt_teardown_status' into 'master'
...
feat(wifi): add itwt teardown status
See merge request espressif/esp-idf!30679
2024-05-19 02:37:11 +08:00
Kapil Gupta
79cea90dc1
fix(esp_wifi): Correct action frame type in send_mgmt_frame API
2024-04-22 16:08:18 +05:30
Kapil Gupta
617130a485
Merge branch 'feat/scan_set_params_api' into 'master'
...
Adds a new API to set default scan parameters
Closes WIFI-6238, WIFI-6344, WIFIBUG-254, and IDFGH-12419
See merge request espressif/esp-idf!27761
2024-04-19 12:03:10 +08:00
Kapil Gupta
95b522a1be
fix(wifi): Fix encryption/decryption issue for mgmt packets
...
* Fix issues related to mgmt packets encryption in GCMP
* Fix issue of wrong decryption of mgmt packets when PMF is enabled
* Fix softAP bug in handling of SAE Reauthentication
2024-04-16 19:49:09 +05:30
Kapil Gupta
58ee771f3c
fix(wifi): Run tools/format.sh on WiFi component
2024-04-16 10:58:37 +05:30
Kapil Gupta
d2978ab9d4
fix(ci): Skip spell check for WiFi component
2024-04-15 23:19:06 +05:30
Kapil Gupta
0ba7836bd2
fix(ci): Update coding rules for esp_wifi files
2024-04-15 23:18:33 +05:30
Kapil Gupta
00ab1ef500
feat(esp_wifi): Provide API to disable PMK caching
2024-04-02 10:21:26 +05:30
Kapil Gupta
464fd689a1
fix(esp_wifi): Send unicast probe requests if bssid is known during scan
2024-04-02 11:23:32 +08:00
Kapil Gupta
431a2a7d1c
fix(esp_wifi): Address review comments
2024-04-01 23:00:01 +08:00
Kapil Gupta
59a62f2af6
fix(wpa_supplicant): (PEAP client) Update Phase 2 auth requirements
...
The previous PEAP client behavior allowed the server to skip Phase 2
authentication with the expectation that the server was authenticated
during Phase 1 through TLS server certificate validation. Various PEAP
specifications are not exactly clear on what the behavior on this front
is supposed to be and as such, this ended up being more flexible than
the TTLS/FAST/TEAP cases. However, this is not really ideal when
unfortunately common misconfiguration of PEAP is used in deployed
devices where the server trust root (ca_cert) is not configured or the
user has an easy option for allowing this validation step to be skipped.
Change the default PEAP client behavior to be to require Phase 2
authentication to be successfully completed for cases where TLS session
resumption is not used and the client certificate has not been
configured. Those two exceptions are the main cases where a deployed
authentication server might skip Phase 2 and as such, where a more
strict default behavior could result in undesired interoperability
issues. Requiring Phase 2 authentication will end up disabling TLS
session resumption automatically to avoid interoperability issues.
Allow Phase 2 authentication behavior to be configured with a new phase1
configuration parameter option:
'phase2_auth' option can be used to control Phase 2 (i.e., within TLS
tunnel) behavior for PEAP:
* 0 = do not require Phase 2 authentication
* 1 = require Phase 2 authentication when client certificate
(private_key/client_cert) is no used and TLS session resumption was
not used (default)
* 2 = require Phase 2 authentication in all cases
2024-03-15 16:57:26 +08:00
Kapil Gupta
97e1afbe67
Merge branch 'bugfix/wps_scan_log_flood' into 'master'
...
Suppress RSN IE print to Verbose level
Closes WIFIBUG-437
See merge request espressif/esp-idf!29558
2024-03-13 22:51:45 +08:00
Kapil Gupta
3a2e0dcbfb
Merge branch 'bugfix/mbo_api_flag' into 'master'
...
fix(wpa_supplicant):Add CONFIG_MBO flag for mbo apis.
Closes WIFIBUG-390
See merge request espressif/esp-idf!28560
2024-02-21 10:54:46 +08:00
Kapil Gupta
2dc6783c55
Merge branch 'bugfix/esp32c2_eap_auth' into 'master'
...
fix(wifi): Added low heap usage Kconfig option for eap enterprise
Closes WIFIBUG-227 and WIFIBUG-296
See merge request espressif/esp-idf!26930
2024-02-01 12:33:46 +08:00
Kapil Gupta
d033c3ebff
fix(wifi): add low memory options for eap enterprise
2024-01-30 22:54:22 +08:00
Kapil Gupta
685fcf4278
Merge branch 'feature/supplicant_bss_extmem' into 'master'
...
WiFi: Add support to move supplicant BSS to external memory
See merge request espressif/esp-idf!27891
2024-01-11 15:55:14 +08:00