Commit Graph

51397 Commits

Author SHA1 Message Date
Ashish Sharma
ea005e8316 fix(esp_http_server): close UAF/double-free, buffer underflows, and OOB read 2026-07-16 18:24:47 +08:00
Ashish Sharma
2742100127 fix(app_update): close OOB read, rollback-guard gap, and length underflow 2026-07-16 18:24:47 +08:00
morris
80f969e279 Merge branch 'isp_dma_one_frame_v6.0' into 'release/v6.0'
feat(isp): support isp dma input and add example (v6.0)

See merge request espressif/esp-idf!50755
2026-07-16 17:17:25 +08:00
Martin Vychodil
7b3c4fca5b Merge branch 'fix/cleanup_after_failed_nvs_set_blob_v6.0' into 'release/v6.0'
Fixed cleanup after nvs_set_blob failed on ESP_ERR_NVS_NOT_ENOUGH_SPACE (v6.0)

See merge request espressif/esp-idf!50743
2026-07-15 18:41:21 +08:00
morris
f1ddd46629 Merge branch 'feat/sec_esp_drivers_v6.0' into 'release/v6.0'
fix(drivers): harden multiple peripheral drivers against local DoS and memory corruption (v6.0)

See merge request espressif/esp-idf!50557
2026-07-15 16:53:40 +08:00
morris
ff81dad1bd Merge branch 'fix/legacy_twai_rx_non_iso_dlc_oob_v6.0' into 'release/v6.0'
fix(driver_twai): fixed legacy twai OOB issue when rx dlc larger than 8 (v6.0)

See merge request espressif/esp-idf!50750
2026-07-15 16:01:02 +08:00
Island
2dc3285e57 Merge branch 'bugfix/fix_bluedroid_read_multi_v6.0' into 'release/v6.0'
fix(ble/bluedroid): fix GATT Read Multiple response handling (6.0)

See merge request espressif/esp-idf!50709
2026-07-15 15:38:50 +08:00
gaoxu
0df7a1f2cf feat(isp): Add example and script to check raw picture by ISP dma input 2026-07-15 14:15:29 +08:00
gaoxu
e4f9f672b0 feat(isp): support isp dma input and add example 2026-07-15 14:15:28 +08:00
Island
1dc74d56a2 Merge branch 'feat/support_bluedroid_le_coc_and_eatt_v6.0' into 'release/v6.0'
feat(ble/bluedroid): Support bluedroid LE COC and EATT features (6.0)

See merge request espressif/esp-idf!50715
2026-07-15 14:02:50 +08:00
morris
ed1a98ac65 Merge branch 'docs/i2s_ws_setting_v6.0' into 'release/v6.0'
docs(i2s): clarify WS width setting for standard mode (v6.0)

See merge request espressif/esp-idf!50666
2026-07-15 11:52:33 +08:00
morris
4edbc85a4a Merge branch 'bugfix/uart_sw_flow_ctrl_xoff_char_v6.0' into 'release/v6.0'
fix(uart): fix uart sw flow ctrl XOFF char write to wrong reg on ESP32C6 (v6.0)

See merge request espressif/esp-idf!50524
2026-07-15 11:52:07 +08:00
morris
a408170eca Merge branch 'fix/jpeg_enc_encrypt_v6.0' into 'release/v6.0'
fix(jpeg): Jpeg can encode and decode in encryption situation  (backport v6.0)

See merge request espressif/esp-idf!50664
2026-07-15 11:50:38 +08:00
morris
3ff1e670a2 Merge branch 'contrib/github_pr_18832_v6.0' into 'release/v6.0'
fix(mocks): add missing `esp_hal_*` includes (GitHub PR) (v6.0)

See merge request espressif/esp-idf!50727
2026-07-15 11:42:38 +08:00
wanckl
ae628e4e98 fix(driver_twai): add fd test on ci 2026-07-15 11:23:51 +08:00
wanckl
9da7cc92b3 feat(driver_twai): fd hardware support time trigger trans 2026-07-15 11:23:44 +08:00
wanckl
f05afe5722 fix(driver_twai): fixed legacy twai OOB issue when rx dlc larger than 8 2026-07-15 10:47:22 +08:00
radek.tandler
daf4796ef6 fix(nvs_flash): fixed cleanup after nvs_set_blob failed on ESP_ERR_NVS_NOT_ENOUGH_SPACE
- fixed identification of blob parts to be cleaned by using right starting chunk index
  - improved localisation of blobs for cases where some of pages get reclaimed
  - created host test cases covering the edge cases above
2026-07-14 16:42:55 +02:00
Chen Chen
269d582181 fix: update flash encryption mock build check
Use a non-deprecated bootloader support API in the mock build test.
Keep the test focused on validating the generated bootloader support mock.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-14 17:30:39 +08:00
Vincent Hamp
f6ed4a607c fix(mocks): add missing esp_hal_* includes 2026-07-14 17:30:39 +08:00
Zhi Wei Jian
1119d40a2c feat(ble/bluedroid): Add bluedroid dual identify server example
(cherry picked from commit 1de0d2fef7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 14:52:45 +08:00
Zhi Wei Jian
1ade9c6f0e feat(ble/bluedroid): Support bluedroid dual identity
(cherry picked from commit 2358786647)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 14:17:33 +08:00
Rahul Tank
8982238192 Merge branch 'bugfix/fix_bond_store_overflow_v6.0' into 'release/v6.0'
fix(nimble): Fix bond-store overflow when IRK is enabled (v6.0)

See merge request espressif/esp-idf!50624
2026-07-14 11:17:35 +05:30
Zhi Wei Jian
279ad49fb0 fix(ble/bluedroid): use BOOLEAN for BLE HCI command builders
(cherry picked from commit abbf001120)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:31 +08:00
Zhi Wei Jian
05e35f842a fix(ble/bluedroid): clean up LE CoC connect on CCB alloc failure
(cherry picked from commit 4fd1ebb4a9)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:25 +08:00
Zhi Wei Jian
656af102e8 docs(ble/bluedroid): note ISO BIG HCI alloc failure not checked
(cherry picked from commit 34b59d30ae)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:25 +08:00
Zhi Wei Jian
8efe8f6ff4 fix(ble/bluedroid): fix direct-connect cleanup and adv bounds
(cherry picked from commit 82e71c1767)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:24 +08:00
Zhi Wei Jian
395229d444 fix(ble/bluedroid): validate BLE confirm/OOB and sec-check device
(cherry picked from commit 93ab11d564)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:24 +08:00
Zhi Wei Jian
273c463497 fix(ble/bluedroid): validate SMP pair-fail reason and OOB device
(cherry picked from commit 98efe02385)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:23 +08:00
Zhi Wei Jian
179ea3578f fix(ble/bluedroid): route ATT indication-conf timeout separately
(cherry picked from commit 6c3267ee84)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:23 +08:00
Zhi Wei Jian
0e4c3ca05d fix(ble/bluedroid): validate ATT PDU sizes
(cherry picked from commit bb00b9817d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:23 +08:00
Zhi Wei Jian
7383c07af9 fix(ble/bluedroid): re-lookup GATT TCB after enc-complete callback
(cherry picked from commit 37562af0ea)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:22 +08:00
Zhi Wei Jian
c7d6a7ce9e fix(ble/bluedroid): fix GATT long read and Service Changed CCC
(cherry picked from commit 4ce692ac0c)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:22 +08:00
Zhi Wei Jian
bd8ce47005 fix(ble/bluedroid): validate GATT client discovery handles
(cherry picked from commit ac35ae6f2d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:21 +08:00
Zhi Wei Jian
98a8e41c83 fix(ble/bluedroid): cap Read By Type length and free failed service decl
(cherry picked from commit 27ff0cf8c7)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:21 +08:00
Zhi Wei Jian
418cf61513 fix(ble/bluedroid): guard GATT database hash and serialization
(cherry picked from commit 995c1508e8)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:21 +08:00
Zhi Wei Jian
de2544c5de fix(ble/bluedroid): fix GATT server busy errors and sr_cmd handling
(cherry picked from commit f86739b03d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:20 +08:00
Zhi Wei Jian
07f3362a98 fix(ble/bluedroid): fix GATT teardown and service-change flow
(cherry picked from commit 0645ba469d)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:20 +08:00
Zhi Wei Jian
bdba7a71d7 fix(ble/bluedroid): fix GATT service lifecycle leaks
(cherry picked from commit ac93d94958)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:19 +08:00
Zhi Wei Jian
6e0ea41536 fix(ble/bluedroid): add GATT resource-cleanup helpers
(cherry picked from commit b83327f3ca)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 12:04:19 +08:00
Zhang Hai Peng
7020f17b59 docs(ble/bluedroid): fix markdown formatting in example docs
(cherry picked from commit dba450de6b)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-14 12:02:17 +08:00
Zhi Wei Jian
87d614ba91 feat(ble/bluedroid): Support bluedroid LE COC and EATT features
(cherry picked from commit 83f0831c53)

Co-authored-by: zhiweijian <zhiweijian@espressif.com>
2026-07-14 11:56:06 +08:00
Zhang Hai Peng
d53c6ad240 fix(ble/bluedroid): downgrade numeric comparison log to warning
(cherry picked from commit 72a49ed53b)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-14 10:37:17 +08:00
Zhang Hai Peng
4e60648f13 fix(ble/bluedroid): preserve ext adv state when set params fails
Only update extend_adv_cb after HCI Set Extended Advertising
Parameters succeeds, so a failed update does not corrupt cached
legacy_pdu and related fields used by adv data validation.


(cherry picked from commit 31bd80fee8)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-14 10:37:16 +08:00
Zhang Hai Peng
2a1436daa2 fix(ble/bluedroid): reject invalid ATT error code 0x00 on client
Map received error reason 0x00 to GATT_UNKNOWN_ERROR so the client
does not report GATT_SUCCESS with zero-length data on malformed errors.


(cherry picked from commit 1b6f9380f4)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-14 10:36:30 +08:00
Zhang Hai Peng
1a914b54d7 fix(ble/bluedroid): use sr_cmd status for GATT server error rsp
When sending an ATT error response after a failed server operation,
use p_tcb->sr_cmd.status instead of the last app callback status so
invalid error code 0x00 is not sent to the peer.


(cherry picked from commit 4c0488d92a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-14 10:36:29 +08:00
Zhang Hai Peng
af4690857c fix(ble/bluedroid): match read-multiple-var responses by handle
(cherry picked from commit 979c7dc567)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-14 10:36:28 +08:00
Zhang Hai Peng
bd4b2050a0 fix(ble/bluedroid): match read-multiple responses by handle
Read Multiple may mix stack auto-responses with app async responses,
so multi_rsp_q order can differ from the request handle order. Look up
each response by handle (with occurrence for duplicates) instead of
walking the queue by index, and treat opcode-only buffers as empty.


(cherry picked from commit f91a41510c)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
2026-07-14 10:36:27 +08:00
Island
6d0268a375 Merge branch 'ble-log-console-migration-notice_v6.0' into 'release/v6.0'
Ble log console repository migration (6.0)

See merge request espressif/esp-idf!50607
2026-07-14 10:20:30 +08:00
C.S.M
1873ca6359 fix(jpeg): JPEG can encode and decode in encryption situation 2026-07-13 19:56:28 +08:00