Commit Graph
20 Commits
Author SHA1 Message Date
Ashish Sharma dcc46710f7 feat(esp_http_server): adds check for crlf in response creation 2026-04-28 15:14:04 +08:00
Ashish Sharma 450ccdcb9a fix(wifi_provisioning): fixes memory leak on OOM 2026-04-28 15:06:12 +08:00
Ashish Sharma bfc62578de fix(wifi_provisioning): fixes potential null dereference on malformed packet 2026-04-28 15:06:12 +08:00
Ashish Sharma 56c3e38561 fix(protocomm): fixes potential issues that can lead to crash during device provisioning 2026-04-28 15:05:14 +08:00
Ashish Sharma 83790f32b6 fix: fixes memory leak with subprotocols 2026-04-28 15:03:31 +08:00
Ashish Sharma dc46dc5135 fix: fixes websocket server possible null dereference 2026-04-28 15:03:28 +08:00
Ashish Sharma 06b3c019b6 change(mbedtls): adds CVE-2025-66442 to exclude list.
The CVE is applicable with Clang using LLVM's select-optimize feature. ESP-IDF uses GCC as default compiler and sets -Os as the default optimisation flag
2026-04-27 14:11:56 +08:00
Ashish Sharma 39b56cbdba fix(esp_srp): reject SRP client public key when A mod N is zero 2026-04-27 13:06:54 +08:00
Ashish Sharma ac0c138eb4 feat(mbedtls): update to version 3.6.6 2026-04-08 11:11:07 +08:00
Ashish Sharma 6f6b63ba4c feat(cjson): update to latest master 2026-04-07 10:34:10 +08:00
Ashish Sharma 0ae996be45 feat(mbedtls): update to version 3.6.5 2025-11-22 15:02:54 +08:00
Ashish Sharma 36b81e3305 change(cjson): update cjson version to 1.7.19 2025-09-11 15:36:34 +08:00
Ashish Sharma 9e9ceeeb1d fix(esp_http_client): fix possible double memory free 2025-08-01 15:10:17 +08:00
Ashish Sharma b2e7b20622 fix(esp_http_client): fix memory leak in current_header_value buffer
Fixed memory leak in esp_http_client_cleanup() where current_header_value
buffer was not being freed when ESP_ERR_HTTP_FETCH_HEADER is returned
during header parsing failures.
2025-07-21 15:37:45 +08:00
Ashish Sharma 936c6495c0 feat(mbedtls): update to version 3.6.4 2025-07-09 17:33:36 +08:00
Ashish Sharma c6f3666381 change: adds CVE-2023-53154 to cJSON sbom exclude list 2025-05-26 17:32:16 +08:00
Ashish Sharma e8a418cf4e feat(cjson): update to latest upstream 2025-05-19 09:51:29 +08:00
Ashish Sharma e1cec0d941 feat(mbedtls): new config to allow weak cert verification 2025-04-02 08:43:49 +05:30
Ashish Sharma e6ad551c10 feat(mbedtls): update to version 3.6.3 2025-04-02 08:43:48 +05:30
Ashish Sharma e7f44138d8 fix(component/mbedtls): Adds github root cert to cmn_crt_authorities.csv 2025-03-18 14:39:42 +08:00