Mahavir Jain
e054d168c1
Merge branch 'fix/c5_tee_sram_prot_v5.5' into 'release/v5.5'
...
fix(esp_tee): Split TEE SRAM as I/DRAM for ESP32-C5 with PMA (v5.5)
See merge request espressif/esp-idf!42680
2025-10-21 17:25:15 +05:30
Mahavir Jain
cfba6ee0fd
Merge branch 'bugfix/ota_resumption_saved_size_alignmnet_v5.5' into 'release/v5.5'
...
fix: Ensure OTA written size for 16-byte alignment (v5.5)
See merge request espressif/esp-idf!42683
2025-10-21 07:53:49 +05:30
Mahavir Jain
2175df7d51
Merge branch 'fix/esp_tee_int_wdt_v5.5' into 'release/v5.5'
...
fix(esp_tee): Sync M-U interrupt thresholds during service calls from critical sections (v5.5)
See merge request espressif/esp-idf!42720
2025-10-20 14:43:02 +05:30
Mahavir Jain
1a760a91e5
Merge branch 'feature/add_ecdsa_p384_support_and_testcases_v5.5' into 'release/v5.5'
...
feat: add ecdsa-p384 testcases and relative support for ESP32C5 ECO2 (v5.5)
See merge request espressif/esp-idf!41274
2025-10-17 22:42:26 +05:30
Mahavir Jain
5058b757ee
Merge branch 'feature/partial_download_over_single_connection_v5.5' into 'release/v5.5'
...
feat(esp_https_ota): Support partial downloading of OTA over single connection (v5.5)
See merge request espressif/esp-idf!42678
2025-10-17 21:07:47 +05:30
Mahavir Jain
3f3525ee14
Merge branch 'fix/esp_efuse_enable_rom_secure_download_mode_v5.5' into 'release/v5.5'
...
fix(efuse): Fix enabling ROM secure download mode (v5.5)
See merge request espressif/esp-idf!42627
2025-10-17 09:43:38 +05:30
Mahavir Jain
ea36c4f609
Merge branch 'feature/esp_tee_c5_v5.5' into 'release/v5.5'
...
feat(esp_tee): Initial support for ESP32-C5 and related changes (v5.5)
See merge request espressif/esp-idf!42357
2025-10-16 09:39:23 +05:30
Mahavir Jain
042f29dd66
Merge branch 'fix/change_write_protection_bit_of_shared_security_efuses_v5.5' into 'release/v5.5'
...
Reorder write protection bits of some shared security efuses (v5.5)
See merge request espressif/esp-idf!42033
2025-10-15 09:38:59 +05:30
Mahavir Jain
4cc95c4a71
Merge branch 'fix/key_mgr_use_default_efuse_key_v5.5' into 'release/v5.5'
...
Configure the Key Manager to use XTS-AES efuse key by-default (v5.5)
See merge request espressif/esp-idf!42395
2025-10-15 09:38:03 +05:30
Mahavir Jain
d28a8a0d11
Merge branch 'fix/improve_rng_documentation_v5.5' into 'release/v5.5'
...
fix(docs): Improved RNG documentation (v5.5)
See merge request espressif/esp-idf!42573
2025-10-14 15:07:13 +05:30
Mahavir Jain
a61f93b05c
Merge branch 'fix/http_async_handler_ci_test_failure_v5.5' into 'release/v5.5'
...
fix(http_server): Fix CI test failure async_handler (v5.5)
See merge request espressif/esp-idf!42542
2025-10-14 11:48:53 +05:30
Mahavir Jain
d5161cb2a0
Merge branch 'contrib/github_pr_17652_v5.5' into 'release/v5.5'
...
fix(esp_tls_conn_new_sync): Fix `esp_tls_conn_new_sync`'s doc to reflect its implementation (GitHub PR) (v5.5)
See merge request espressif/esp-idf!42329
2025-10-03 09:41:16 +05:30
Mahavir Jain
2f3eccd25a
Merge branch 'fix(esp_tls)/dynamic_buffer_ssl_crash_v5.5' into 'release/v5.5'
...
fix(esp_tls): fix potential ssl crash with dynamic buffer (v5.5)
See merge request espressif/esp-idf!42138
2025-09-28 15:10:37 +05:30
Mahavir Jain
da21126583
Merge branch 'fix/cjson_cpe_v5.5' into 'release/v5.5'
...
fix(cjson): add CPE with davegamble as vendor (v5.5)
See merge request espressif/esp-idf!42070
2025-09-26 14:42:57 +05:30
Mahavir Jain
0313a369ea
Merge branch 'contrib/github_pr_17470_v5.5' into 'release/v5.5'
...
fix(http_server): Corrected initialization value for lru_counter at h… (GitHub PR) (v5.5)
See merge request espressif/esp-idf!42061
2025-09-24 07:54:12 +05:30
Mahavir Jain
5d6573cf0c
Merge branch 'featue/allow_custom_key_purposes_v5.5' into 'release/v5.5'
...
feat(efuse): Allow custom key purposes (v5.5)
See merge request espressif/esp-idf!41934
2025-09-22 12:48:48 +05:30
Mahavir Jain
fa08f239c0
Merge branch 'bugfix/encrypt_len_for_sb_update_case_v5.5' into 'release/v5.5'
...
fix(bootloader): correct encryption length for secure update without secure boot (v5.5)
See merge request espressif/esp-idf!41923
2025-09-21 18:37:43 +05:30
Mahavir Jain
8a4f0c597a
Merge branch 'fix/handle_error_and_dispatch_event_while_reading_data_from_server_v5.5' into 'release/v5.5'
...
feat(esp_http_client): handle error while reading data from server (v5.5)
See merge request espressif/esp-idf!41324
2025-09-21 18:06:05 +05:30
Mahavir Jain
1970cc7a40
Merge branch 'fix/http_server_async_requests_on_same_socket_blocks_v5.5' into 'release/v5.5'
...
Fix async requests on same socket blocking server (v5.5)
See merge request espressif/esp-idf!41997
2025-09-20 02:44:45 +05:30
Mahavir Jain
4014385d8d
Merge branch 'fix/rng_entropy_mixing_with_rtc_timer_v5.5' into 'release/v5.5'
...
fix(esp_hw_support): Fixed entropy mixing of RTC timer with RNG (v5.5)
See merge request espressif/esp-idf!41824
2025-09-19 21:27:19 +05:30
Mahavir Jain
9c257c4f0b
test: add test case for secure update with FE case
2025-09-16 10:16:42 +05:30
Mahavir Jain
b0713ffe08
fix(bootloader): correct encryption length for secure update without secure boot
...
For secure update without secure boot case, the encryption length for
app image must consider signature block length as well. This was
correctly handled for secure boot case but not for secure update without
secure boot.
2025-09-16 10:16:37 +05:30
Mahavir Jain
847ceb6301
Merge branch 'change/exclude_cve-2025-57052_v5.5' into 'release/v5.5'
...
change(cjson): Update to v1.7.19 (v5.5)
See merge request espressif/esp-idf!41837
2025-09-11 18:12:14 +05:30
Mahavir Jain
b966e396d3
Merge branch 'feat/support_authentication_feature_for_ws_v5.5' into 'release/v5.5'
...
Added pre handshake callback for websocket (v5.5)
See merge request espressif/esp-idf!41037
2025-09-02 09:18:29 +05:30
Mahavir Jain
d0ffafb71f
Merge branch 'feat/add_new_client_state_and_update_state_flow_v5.5' into 'release/v5.5'
...
feat(esp_http_client): added new HTTP state HTTP_STATE_CONNECTING and change state flow (v5.5)
See merge request espressif/esp-idf!41276
2025-09-02 09:14:17 +05:30
Mahavir Jain
55cd1f3cc9
Merge branch 'fix/handle_return_during_assiging_header_for_range_request_v5.5' into 'release/v5.5'
...
fix(esp_https_ota): fixed missing return check during setting range header (v5.5)
See merge request espressif/esp-idf!41193
2025-09-02 09:12:12 +05:30
Mahavir Jain
7d8bed20f2
Merge branch 'change/ecdsa_does_not_use_mpi_esp32h2_eco5_v5.5' into 'release/v5.5'
...
The ECDSA module of ESP32-H2 ECO5 does not use the MPI module (v5.5)
See merge request espressif/esp-idf!41215
2025-09-02 09:12:07 +05:30
Mahavir Jain
ac38a274e5
Merge branch 'feat/make_https_async_request_under_crt_bundle_config_v5.5' into 'release/v5.5'
...
feat(esp_http_client): Make https_async request under CERT BUNDLE config (v5.5)
See merge request espressif/esp-idf!41458
2025-09-02 09:11:54 +05:30
Mahavir Jain
742d38b051
Merge branch 'doc/update_blufi_doc_v5.5' into 'release/v5.5'
...
docs(ble): add advisory for CVE-2025-55297 found in Blufi example (v5.5)
See merge request espressif/esp-idf!41488
2025-09-02 09:11:36 +05:30
Mahavir Jain
c59ec8a330
Merge branch 'contrib/github_pr_17464_v5.5' into 'release/v5.5'
...
Update the QEMU instructions for the security_features_app example (GitHub PR) (v5.5)
See merge request espressif/esp-idf!41678
2025-09-02 09:11:13 +05:30
Mahavir Jain
29df7286c8
fix(esp_psram): make SPIRAM_USE_MEMMAP depend on ESP32 target
2025-08-11 13:46:39 +05:30
Mahavir Jain
2829481eb6
fix(psram): provide boot warning about PSRAM encryption issue on C5/C61
...
For C5/C61 revision 1.0, PSRAM encryption has hardware issue. This will
be addressed in future silicon version. Add explicit warning about this.
2025-08-11 13:46:38 +05:30
Mahavir Jain
942a9bfbe4
Merge branch 'fix(esp_http_client)/fix_potential_double_free' into 'release/v5.5'
...
fix(esp_http_client): fix possible double memory free
See merge request espressif/esp-idf!40965
2025-08-08 09:46:48 +05:30
Mahavir Jain
2795fae32c
Merge branch 'fix/update_postman_root_certificate_v5.5' into 'release/v5.5'
...
Updated postman root certificate (v5.5)
See merge request espressif/esp-idf!41051
2025-08-08 09:46:08 +05:30
Mahavir Jain
995c2f38ee
fix: change brownout log from INFO to ERROR
2025-08-01 08:48:05 +05:30
Mahavir Jain
e34b8ecf8f
Merge branch 'docs/update_bootloader_max_size_v5.5' into 'release/v5.5'
...
Update the maximum supported bootloader size (v5.5)
See merge request espressif/esp-idf!40789
2025-07-24 19:10:35 +05:30
Mahavir Jain
c9f92e84a4
Merge branch 'feature/support_rng_sampling_v5.5' into 'release/v5.5'
...
Feature/support rng sampling (v5.5)
See merge request espressif/esp-idf!40600
2025-07-24 10:43:30 +05:30
Mahavir Jain
8d0b576c1e
Merge branch 'contrib/github_pr_16076_v5.5' into 'release/v5.5'
...
fix(esp_http_client): fix spurious async open error (GitHub PR) (v5.5)
See merge request espressif/esp-idf!40740
2025-07-23 08:05:45 +05:30
Mahavir Jain
0b0e7b23ff
Merge branch 'doc/update_esp_https_ota_pre_encrypted_doc_v5.5' into 'release/v5.5'
...
docs(system/esp_https_ota): adds ECIES-256 to pre-enc ota design doc (v5.5)
See merge request espressif/esp-idf!40372
2025-07-22 14:49:56 +05:30
Mahavir Jain
fa02f84c3e
Merge branch 'docs/fix_secure_download_mode_unsupported_esp32_v5.5' into 'release/v5.5'
...
fix(bootloader): Fix documentation as ESP32 does not support secure download mode (v5.5)
See merge request espressif/esp-idf!40213
2025-07-22 14:49:14 +05:30
Mahavir Jain
b458016805
Merge branch 'feat/adding_different_strategy_to_perform_tls_using_dynamic_feature_v5.5' into 'release/v5.5'
...
Add configuration to control dynamic buffer strategy in mbedtls (v5.5)
See merge request espressif/esp-idf!39919
2025-07-22 14:48:44 +05:30
Mahavir Jain
c76d8c49ee
Merge branch 'feat/adding_hidden_config_for_dynamic_buffer_control_configuration_v5.5' into 'release/v5.5'
...
feat(esp_tls): Added hidden config in esp-tls for dynamic buffer strategy configuration (v5.5)
See merge request espressif/esp-idf!40265
2025-07-22 14:48:21 +05:30
Mahavir Jain
570ecdc1cc
Merge branch 'feature/support_ds_peripheral_rsa_decryption_v5.5' into 'release/v5.5'
...
feat(mbedtls): Add support for RSA decryption with DS peripheral (v5.5)
See merge request espressif/esp-idf!40449
2025-07-22 11:57:15 +05:30
Mahavir Jain
5c02c6fc1e
Merge branch 'feat/update_mbedtls_3.6.4_v5.5' into 'release/v5.5'
...
feat(mbedtls): update to version 3.6.4 (v5.5)
See merge request espressif/esp-idf!40375
2025-07-22 11:52:29 +05:30
Mahavir Jain
6cf1a6f297
Merge branch 'fix/suppress_cert_bundle_serial_number_warning_v5.5' into 'release/v5.5'
...
fix(mbedtls/esp_crt_bundle): Suppress non-negative serial number warning (v5.5)
See merge request espressif/esp-idf!39401
2025-06-16 15:42:10 +05:30
Mahavir Jain
95b7c023da
Merge branch 'feat/httpd_register_uri_handler_strdup_failure_case_check_v5.5' into 'release/v5.5'
...
Handling httdp_register_uri_handler() strdup function failure case check (v5.5)
See merge request espressif/esp-idf!39511
2025-06-16 15:41:47 +05:30
Mahavir Jain
881c5a9795
fix: update root certificate for postman-echo endpoint
...
The certificate chain for postman-echo endpoint has switched to
Let's Encrypt root CA
2025-06-13 11:03:24 +05:30
Mahavir Jain
45831351fa
test: add secure image verification case for C6/H2
2025-05-14 10:53:47 +05:30
Mahavir Jain
37e28522c2
fix: secure OTA without secure boot issue for MMU page size configurable SoCs
...
For secure app verification during OTA update case, the image was
getting memory mapped twice and hence the failure in verification.
Modified from memory mapped flash read to SPI flash read approach
for the MMU page size from image header.
Regression from 07318a4987
Closes https://github.com/espressif/esp-idf/issues/15936
2025-05-14 10:53:46 +05:30
Mahavir Jain
af1ea42391
Merge branch 'feature/update_h21_documentation' into 'master'
...
feat: update documentation for esp32h21
Closes IDF-12160, IDF-12163, IDF-12164, and IDF-12165
See merge request espressif/esp-idf!38856
2025-05-12 16:59:00 +08:00
Mahavir Jain
999a81b013
Merge branch 'contrib/github_pr_15818' into 'master'
...
fix(esp_local_ctrl): Add 'esp_netif' as requirements in CMakeLists (GitHub PR)
Closes IDFGH-15141
See merge request espressif/esp-idf!38948
2025-05-07 21:34:19 +08:00
Mahavir Jain
081de6dc0d
Merge branch 'contrib/github_pr_15868' into 'master'
...
feat(tcp_transport): add API to configure SSL cipher suites (GitHub PR)
Closes IDFGH-15197
See merge request espressif/esp-idf!38883
2025-05-06 01:48:28 +08:00
Mahavir Jain
63e89ea077
Merge branch 'fix/unaligned_writes_acces_in_sha_input_fill' into 'master'
...
Fix unaligned memory access while populating SHA input buffer
Closes PM-398
See merge request espressif/esp-idf!38806
2025-05-02 12:21:36 +08:00
Mahavir Jain
ff555428d1
Merge branch 'feat/dynamic_buffer_tls1.3' into 'master'
...
feat(mbedtls): add support for dynamic buffer for TLS1.3
Closes IDFGH-14708, IDF-12469, IDF-9178, and IDF-1725
See merge request espressif/esp-idf!38258
2025-04-30 17:52:43 +08:00
Mahavir Jain
6c0d5def85
test: convert C6 secure boot tests to use ECDSA scheme
2025-04-29 12:05:22 +08:00
Mahavir Jain
f3b4050a9f
fix: Secure boot (ECDSA) build failure for C6 rev0 target
...
Closes https://github.com/espressif/esp-idf/issues/15856
2025-04-29 12:05:22 +08:00
Mahavir Jain
8d8bf19395
Merge branch 'feature/resupport_ecdsa_in_c5_eco2' into 'master'
...
feat: re-enable ecdsa support for c5 eco2
Closes IDF-12829
See merge request espressif/esp-idf!38795
2025-04-29 00:30:33 +08:00
Mahavir Jain
74eff52e2e
fix: build regression in the test application
...
Regression from bb6da46ccd . Disabling
relevant config until further debug.
2025-04-28 20:59:22 +05:30
Mahavir Jain
604957d4f7
Merge branch 'fix/async_handler_example_not_working' into 'master'
...
Fix double freeing issue in Async handler example
See merge request espressif/esp-idf!37987
2025-04-28 17:36:39 +08:00
Mahavir Jain
26f631e0dc
Merge branch 'feat/c5_eco2_ecc' into 'master'
...
feat(hal): add support for ESP32-C5 ECO2 ECC peripheral
See merge request espressif/esp-idf!38729
2025-04-28 12:34:07 +08:00
Mahavir Jain
f7724eedef
Merge branch 'feature/enable_secure_boot_for_esp32h21' into 'master'
...
feat: enable secure boot support for esp32h21
Closes IDF-11500 and IDF-12161
See merge request espressif/esp-idf!36618
2025-04-28 11:37:37 +08:00
Mahavir Jain
fbc38a95ec
Merge branch 'fix/async_handler_example_stack_overflow_issue' into 'master'
...
fix(esp_http_server): Async handler example stack overflow fix
See merge request espressif/esp-idf!38586
Related: https://github.com/espressif/esp-idf/issues/15587
2025-04-25 14:52:01 +08:00
Mahavir Jain
674dc8810e
feat(hal): add support for ESP32-C5 ECO2 ECC peripheral
2025-04-25 14:44:09 +08:00
Mahavir Jain
0bd1ec60d9
Merge branch 'fix/fix_esp_tls_ipv6_only_build_issue' into 'master'
...
fix(esp-tls): Fixed build issue in esp-tls related to IPV6 only config
See merge request espressif/esp-idf!38722
2025-04-24 22:04:15 +08:00
Mahavir Jain
23259d3791
Merge branch 'feat/allow_der_certificates_in_esp_http_client' into 'master'
...
feat(esp_http_client): Allow the der certificates in esp_http_client
See merge request espressif/esp-idf!38407
2025-04-24 14:04:57 +08:00
Mahavir Jain
8b239ab605
Merge branch 'fix/remove_mbedtls_logical_dead_code' into 'master'
...
fix(mbedtls): remove logical dead code from mbedtls
Closes IDF-12866
See merge request espressif/esp-idf!38498
2025-04-23 12:21:20 +08:00
Mahavir Jain
672db2b297
Merge branch 'fix/build_failure_when_sha1_config_is_disabled' into 'master'
...
Fix build failure when CONFIG_MBEDTLS_SHA1_C is disabled
See merge request espressif/esp-idf!38329
2025-04-23 00:04:37 +08:00
Mahavir Jain
6dc71c2b52
Merge branch 'docs/fix_unterminated_quotes' into 'master'
...
fix(docs): Fix unterminated quotes in secure-boot-v2.rst
See merge request espressif/esp-idf!38571
2025-04-22 15:10:32 +08:00
Mahavir Jain
e37c47f6e7
Merge branch 'bugfix/crypto_reset_on_exit' into 'master'
...
fix(esp_system): reset crypto peripherals before device restart
See merge request espressif/esp-idf!38399
2025-04-17 21:24:25 +08:00
Mahavir Jain
c8f790078b
Merge branch 'feature/enable_ecdsa_support_for_esp32h21' into 'master'
...
feat: add ECDSA support for esp32h21
Closes IDF-11496
See merge request espressif/esp-idf!36591
2025-04-16 17:58:52 +08:00
Mahavir Jain
13515d729e
Merge branch 'feat/ensure_not_all_of_the_security_versions_are_disabled' into 'master'
...
feat(wifi_prov): Ensure not all security versions are disabled at same time
Closes IDF-12794
See merge request espressif/esp-idf!38029
Related https://github.com/espressif/esp-idf/issues/15549
2025-04-15 21:41:26 +08:00
Mahavir Jain
55a2ad3df3
fix(esp_system): reset crypto peripherals before device restart
...
This change addresses a rare but critical issue observed on certain
ESP32-C3 and ESP32-S3 devices, where secure boot verification
intermittently fails due to improper cleanup of crypto peripherals
during a restart.
Background – Restart Behavior in IDF
------------------------------------
In ESP-IDF, when the device restarts (via `esp_restart()` or due to a
panic/exception), a partial peripheral reset is performed followed by a
CPU reset. However, until now, crypto-related peripherals were not
included in this selective reset sequence.
Problem Scenario
----------------
If a restart occurs while the application is in the middle of a bignum
operation (i.e., using the MPI/Bignum peripheral), the ROM code may
encounter an inconsistent peripheral state during the subsequent boot.
This leads to transient RSA-PSS secure boot verification failures.
Following such a failure, the ROM typically triggers a full-chip reset
via the watchdog timer (WDT). This full reset clears the crypto
peripheral state, allowing secure boot verification to succeed on the
next boot.
Risk with Aggressive Revocation
-------------------------------
If secure boot aggressive revocation is enabled (disabled by default in
IDF), this transient verification failure could mistakenly lead to
revocation of the secure boot digest.
If your product configuration has aggressive revocation enabled,
applying this fix is strongly recommended.
Frequency of Occurrence
-----------------------
The issue is rare and only occurs in corner cases involving
simultaneous use of the MPI peripheral and an immediate CPU reset.
Fix
---
This fix ensures that all crypto peripherals are explicitly reset prior
to any software-triggered restart (including panic scenarios),
guaranteeing a clean peripheral state for the next boot and preventing
incorrect secure boot behavior.
2025-04-15 19:06:26 +05:30
Mahavir Jain
78ef080251
Merge branch 'fix/ota_pytest_idf_path_fix' into 'master'
...
fix(ota): Fix the pytest's idf_path
See merge request espressif/esp-idf!38321
2025-04-15 17:04:39 +08:00
Mahavir Jain
9707baf05c
Merge branch 'feat/httpd_uri_handler_doc_update' into 'master'
...
feat(esp_http_server): Added httpd URI handler docs
See merge request espressif/esp-idf!37560
2025-04-08 13:59:49 +08:00
Mahavir Jain
83cb9d73b9
Merge branch 'feature/add_test_to_verify_chip_revision_while_performing_ota' into 'master'
...
feat: updated check for chip revision and added testcase
Closes IDF-12587
See merge request espressif/esp-idf!37546
2025-04-08 13:46:45 +08:00
Mahavir Jain
4f3e64331b
Merge branch 'contrib/github_pr_14909' into 'master'
...
fix(esp-tls): Remove useless const from size paramter (GitHub PR)
Closes IDFGH-14099
See merge request espressif/esp-idf!36828
2025-04-07 16:48:32 +08:00
Mahavir Jain
7e401a8bec
Merge branch 'refactor/esp_security_clk_cfg' into 'master'
...
refactor(esp_security): Introduce dedicated APIs for crypto clock configuration
See merge request espressif/esp-idf!37448
2025-04-06 21:32:42 +08:00
Mahavir Jain
a0c707e539
Merge branch 'contrib/github_pr_15715' into 'master'
...
fix(esp_http_client): fix error return when set_header has value==NULL (GitHub PR)
Closes IDFGH-15024 and IDFGH-15023
See merge request espressif/esp-idf!38246
2025-04-06 19:24:27 +08:00
Mahavir Jain
c263a3f9c5
Merge branch 'contrib/github_pr_15288' into 'master'
...
Improve httpd string value fetching efficiency (GitHub PR)
Closes IDFGH-14524
See merge request espressif/esp-idf!37301
2025-04-06 19:17:28 +08:00
Mahavir Jain
6658d081e2
Merge branch 'feature/ecdsa_op_w_tee_sec_stg' into 'master'
...
feat(esp_tee): Add support for mbedtls ECDSA signing with TEE secure storage
Closes IDF-12183
See merge request espressif/esp-idf!37217
2025-04-04 12:47:53 +08:00
Mahavir Jain
ccf7178582
Merge branch 'fix/examples_python3.13_ssl_conn_failure' into 'master'
...
Change in Python3.13's default ssl context caused SSL connection failure
See merge request espressif/esp-idf!38175
2025-04-04 12:30:05 +08:00
Mahavir Jain
5c51472e82
Merge branch 'bugfix/linux_cert_bundle_build_warn' into 'master'
...
fix(tools): suppress GNU bin-utils warning about executable stack
Closes IDFCI-2819
See merge request espressif/esp-idf!38109
2025-04-01 23:56:43 +08:00
Mahavir Jain
21f59bd030
Merge branch 'feat/update_mbedtls_3.6.3' into 'master'
...
feat(component/mbedtls): update to upstream v3.6.3
Closes IDF-12730
See merge request espressif/esp-idf!38041
2025-04-01 18:38:12 +08:00
Mahavir Jain
32875d5a66
fix(tools): suppress GNU bin-utils warning about executable stack
...
Newer GNU bin-utils version 2.39 has started emitting a warning
about an executable stack region for Linux target build:
/usr/bin/ld: warning: x509_crt_bundle.S.o: missing .note.GNU-stack section implies executable stack
Fix the issue by adding appropriate "noexecute" attribute for stack
section.
2025-03-31 19:15:36 +05:30
Mahavir Jain
574d2eebd7
Merge branch 'fix/bootloader_sha_handle_memory_leak' into 'master'
...
fix(bootloader_support): Fix sha handle memory leak when returning error
Closes IDF-12735
See merge request espressif/esp-idf!38058
2025-03-27 17:05:06 +08:00
Mahavir Jain
8e4cbdfe36
Merge branch 'feat/configurable_mbedtls_sha1' into 'master'
...
feat(mbedtls): Make mbedtls SHA1 support configurable
See merge request espressif/esp-idf!37795
2025-03-24 17:38:05 +08:00
Mahavir Jain
ce7ec7f19f
Merge branch 'feature/enable_hmac_and_ds_support_for_esp32h21' into 'master'
...
feat: enabled hmac and ds support in esp32h21
Closes IDF-11495 and IDF-11497
See merge request espressif/esp-idf!37085
2025-03-21 17:23:46 +08:00
Mahavir Jain
b3f525d12f
Merge branch 'refactor/esp_tee_aes_gcm_port' into 'master'
...
refactor(esp_tee): Use the AES-GCM port layer for operations in the TEE
See merge request espressif/esp-idf!37650
2025-03-20 16:11:38 +08:00
Mahavir Jain
2022c11441
Merge branch 'bugfix/fix_github_cert_verification_simpleota' into 'master'
...
fix: failing Github certificate verification
See merge request espressif/esp-idf!37769
2025-03-18 12:44:43 +08:00
Mahavir Jain
ba7a10e4e9
Merge branch 'feature/add_esp32s3_target_to_security_feature_application' into 'master'
...
security: add esp32s3 target to security feature application
See merge request espressif/esp-idf!37544
2025-03-18 11:21:55 +08:00
Mahavir Jain
23398bdc93
Merge branch 'feat/add_protocomm_sec_patch_config' into 'master'
...
feat(protocomm): add (hidden) config option to indicate security patch feature
See merge request espressif/esp-idf!37785
2025-03-17 16:38:27 +08:00
Mahavir Jain
18f514a4c0
Merge branch 'fix/nvs_logger_json_output' into 'master'
...
fix(nvs_flash/nvs_tool): Fix nvs_tool.py to output required values
Closes IDFGH-14504
See merge request espressif/esp-idf!36909
2025-03-17 14:02:22 +08:00
Mahavir Jain
8a8cd3e43b
Merge branch 'feature/enable_flash_encryption_for_esp32h21' into 'master'
...
feat: enable flash encryption support for esp32h21
Closes IDF-11499
See merge request espressif/esp-idf!36440
2025-03-17 13:54:22 +08:00
Mahavir Jain
2fcceb01a7
feat(protocomm): add (hidden) config option to indicate security patch feature
2025-03-17 10:20:01 +05:30
Mahavir Jain
884c85536d
Merge branch 'bugfix/http_ws_api_reference' into 'master'
...
fix(esp_http_server): enable doxygen build for websocket API reference
Closes IDFGH-14785
See merge request espressif/esp-idf!37529
2025-03-11 19:12:36 +08:00
Mahavir Jain
2f538ffbb2
Merge branch 'feature/add_ota_resumption_testcase_for_ethernet' into 'master'
...
feat: added test for ota resumption over ethernet
Closes IDF-12086
See merge request espressif/esp-idf!37237
2025-03-11 18:36:09 +08:00
Mahavir Jain
28472cc6b7
Merge branch 'feature/enable_aes_sha_support_for_h21' into 'master'
...
feat: enabled aes and sha support for esp32h21
Closes IDF-11501 and IDF-11504
See merge request espressif/esp-idf!37072
2025-03-11 13:16:27 +08:00
Mahavir Jain
87024c3da1
Merge branch 'bugfix/cleanup_aes_192_references_for_unsupported_chips' into 'master'
...
fix(esp_rom): Remove AES - 192 references for unsupported chips
See merge request espressif/esp-idf!37506
2025-03-10 14:06:25 +08:00
Mahavir Jain
00e8d1a832
fix(esp_local_ctrl): update for changes in protocomm security2 scheme
2025-03-07 13:49:12 +05:30
Mahavir Jain
ab7d37d014
fix(docs): update for changes in provisioning security2 scheme
2025-03-07 13:49:11 +05:30