Song Ruo Jing
f57f4ffa58
fix(ppa): add checks for input to avoid any OOB access
2026-07-24 15:43:03 +08:00
morris
d7dff00514
Merge branch 'docs/i2c_addr_description_v5.5' into 'release/v5.5'
...
docs(i2c): clarify 7-bit address usage (v5.5)
See merge request espressif/esp-idf!51091
2026-07-24 14:30:25 +08:00
morris
da10308f66
Merge branch 'bugfix/ana_cmpr_macro_v5.5' into 'release/v5.5'
...
fix(ana_cmpr): Fix swapped POS/NEG cross interrupt masks on ESP32-C5/P4 (v5.5)
See merge request espressif/esp-idf!50800
2026-07-23 23:59:20 +08:00
morris
dd8d7946bb
Merge branch 'feat/csi_error_event_v5.5' into 'release/v5.5'
...
Add MIPI-CSI error event (v5.5)
See merge request espressif/esp-idf!50682
2026-07-23 19:43:07 +08:00
Island
5f29e3e2e1
Merge branch 'fix/ble_hidd_remove_ccc_gating_v5.5' into 'release/v5.5'
...
fix(esp_hid/bluedroid): remove app-layer CCC gating in HID device (5.5)
See merge request espressif/esp-idf!51006
2026-07-23 19:26:08 +08:00
Island
28b43457a4
Merge branch 'feat/ble_log_compression_module_cfg_update_v5.5' into 'release/v5.5'
...
Feat/ble log compression module cfg update (5.5)
See merge request espressif/esp-idf!49874
2026-07-23 19:25:46 +08:00
morris
758ad09c7d
Merge branch 'feat/sec_esp_drivers_v5.5' into 'release/v5.5'
...
fix(drivers): harden multiple peripheral drivers against local DoS and memory corruption (v5.5)
See merge request espressif/esp-idf!50558
2026-07-23 19:14:24 +08:00
Wang Meng Yang
7bf2026549
Merge branch 'bugfix/bredr_critical_bugs_v5.5' into 'release/v5.5'
...
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI (v5.5)
See merge request espressif/esp-idf!51079
2026-07-23 16:45:34 +08:00
Wang Meng Yang
3d180bf434
Merge branch 'bugfix/low_spp_throughput_v5.5' into 'release/v5.5'
...
change(bt/bluedroid): increased port low watermark of RFCOMM (v5.5)
See merge request espressif/esp-idf!51085
2026-07-23 16:42:45 +08:00
morris
ea26d4590c
Merge branch 'fix/fix_i2s_i80_color_size_check_v5.5' into 'release/v5.5'
...
fix(lcd): add color size check for i80 and boundary check for rgb (v5.5)
See merge request espressif/esp-idf!50965
2026-07-23 16:39:09 +08:00
morris
300cd9f4ea
fix(sdspi): reject oversized pre-read data before block receive
...
Guard start_command_read_blocks against cards that place TOKEN_BLOCK_START so early that extra_data_size exceeds the bytes expected on the current iteration. Without this check, the unsigned subtraction for will_receive underflows and propagates into memset, SPI transaction length, and memcpy counts against the fixed 516-byte block buffer.
2026-07-23 15:09:55 +08:00
morris
9b78b59304
fix(spi_slave): free DMA-private buffers when transaction queue is full
...
spi_slave_queue_trans calls spi_slave_setup_priv_trans to allocate
DMA buffers, then tries xQueueSend. If the queue is full the function
returns ESP_ERR_TIMEOUT without freeing those buffers, leaking up to
2 * max_transfer_sz per failed call. Call spi_slave_uninstall_priv_trans
before returning the timeout.
2026-07-23 15:09:55 +08:00
morris
4196c7ae5c
fix(jpeg): release platform mutex on semaphore/pm-lock allocation failure
...
jpeg_acquire_codec_handle acquires s_jpeg_platform.mutex at entry
but two ESP_RETURN_ON_* macros (semaphore-create and PM-lock-create
failure) return without releasing it. Replace with ESP_GOTO_ON_*
that jumps to a cleanup label which frees partial resources, NULLs
the codec pointer, and releases the mutex.
2026-07-23 15:09:55 +08:00
morris
80aa3978b3
fix(i2c): release platform mutex on intr/pm_lock delete failure
...
ESP_RETURN_ON_ERROR inside the s_i2c_platform.mutex critical section
returns without releasing the mutex, permanently blocking all I2C
bus operations. Replace with ESP_GOTO_ON_ERROR that jumps to a
cleanup label releasing the mutex before return.
2026-07-23 15:09:55 +08:00
luoxu
dfb314ef75
feat(ble): reorganize log compression Kconfig
...
Move log-compression Kconfig files to host/ and profile/mesh/ directories and update source paths.
2026-07-23 14:37:22 +08:00
luoxu
fde5663460
feat(ble): split log compression Kconfig into separate mesh and host files
2026-07-23 14:37:22 +08:00
Luo Xu
d29f5461f8
fix(ble): fix Bluedroid log compression for newly added modules
...
(cherry picked from commit 8d4f1cb608 )
Co-authored-by: luoxu <luoxu@espressif.com >
2026-07-23 14:37:22 +08:00
Island
efd98f4782
Merge branch 'fix/ble_log_compression_add_local_header_file_v5.5' into 'release/v5.5'
...
feat(ble_log): mirror local compression headers (5.5)
See merge request espressif/esp-idf!50951
2026-07-23 14:23:07 +08:00
morris
42882b7078
fix(csi): move csi_fsm init before resource allocation to fix err-path leak
...
CSI_FSM_INIT is 1, but the controller struct is zero-allocated.
Any failure before the former csi_fsm assignment (near the end of
esp_cam_new_csi_ctlr) jumped to err: which called s_del_csi_ctlr.
That function bailed out immediately because csi_fsm == 0, leaking
the claimed slot, queue, bridge, DMA channel, PM lock, and backup
buffer. Move csi_fsm = CSI_FSM_INIT right after a successful claim
so the err: path properly tears down all allocated resources.
2026-07-23 11:18:42 +08:00
morris
8bb93702ab
fix(adc): add missing input validation for channel and ret_handle
...
- adc_cali_curve_fitting: validate config->chan in check_valid() to
prevent OOB access into s_adc_cali_chan_compens compensation table
- adc_filter: make s_adc_filter_free idempotent on !UNIT_BINDED SoCs
to prevent double-free on repeated adc_del_continuous_iir_filter
- adc_cali_line_fitting(esp32): fix config && config typo to
config && ret_handle, preventing NULL-pointer dereference
2026-07-23 11:18:42 +08:00
Island
47bd7785b9
Merge branch 'feat/support_bluedroid_le_coc_and_eatt_v5.5' into 'release/v5.5'
...
feat(ble/bluedroid): Support bluedroid LE COC and EATT features (5.5)
See merge request espressif/esp-idf!50714
2026-07-23 10:06:52 +08:00
Chen Chen
1316bb658e
docs(i2c): clarify 7-bit address usage
...
Closes https://github.com/espressif/esp-idf/pull/18831
2026-07-23 09:13:41 +08:00
Jin Cheng
25c0ece748
change(bt/bluedroid): increased port low watermark of RFCOMM
...
When PORT_RX_BUF_LOW_WM is too low, RFCOMM replenishes credits only
after receiving a relatively large number of packets, which may cause
the peer to exhaust its credits and enter a stop-and-wait state.
Increase the low watermark to replenish credits more promptly and
reduce the likelihood of the peer stalling while waiting for additional
credits.
2026-07-23 08:09:20 +08:00
Jin Cheng
b7ccc6e9ed
fix(bt/bluedroid): fixed issues from AI review in GAP, SPP, HID, L2CAP and HCI
2026-07-23 07:50:26 +08:00
Jiang Jiang Jian
a5045d6952
Merge branch 'bugfix/add_en_rst_in_pvt_func_for_p4_backport_v5.5' into 'release/v5.5'
...
fix(pvt): add en reset in pvt func for p4 on release v5.5
See merge request espressif/esp-idf!50876
2026-07-22 20:54:59 +08:00
Wang Meng Yang
fa6c3e30fe
Merge branch 'bugfix/idf_ci_example_avrcp_v5.5' into 'release/v5.5'
...
fix(bt/example): Add log in the failure path for avrcp_ct_metadata example (v5.5)
See merge request espressif/esp-idf!51060
2026-07-22 16:05:22 +08:00
yangfeng
e7864669f7
fix(bt/example): Add log in the failure path for avrcp_ct_metadata example
2026-07-22 15:36:34 +08:00
Wang Meng Yang
b1ae399d1e
Merge branch 'bugfix/hid_host_oob_read_v5.5' into 'release/v5.5'
...
fix(bt/bluedroid): fixed possible 1-byte OOB read in bta_hh_ctrl_dat_act (v5.5)
See merge request espressif/esp-idf!50973
2026-07-22 14:10:16 +08:00
Island
fc53fce746
Merge branch 'fix/ble-log-store-access-fault_v5.5' into 'release/v5.5'
...
fix: Ensure BLE Log Global Variables in Internal RAM (5.5)
See merge request espressif/esp-idf!51035
2026-07-22 14:02:43 +08:00
Mahavir Jain
39478a75df
Merge branch 'feat/disable_constant_time_rsa_key_gen_v5.5' into 'release/v5.5'
...
fix(mbedtls): revert to non constant time rsa key gen
See merge request espressif/esp-idf!51022
2026-07-22 10:17:17 +05:30
Zhou Xiao
2d91fe9b77
fix(bt): keep BLE log ISR state in internal RAM
...
(cherry picked from commit 2fa434eb50 )
Co-authored-by: Zhou Xiao <zhouxiao@espressif.com >
2026-07-21 19:44:16 +08:00
Ashish Sharma
73fb4ce272
fix(mbedtls): revert to non constant time rsa key gen
2026-07-21 16:07:31 +08:00
Marius Vikhammer
6813d2d2fe
Merge branch 'backport-50410-to-release/v5.5' into 'release/v5.5'
...
fix(pthread,ulp): harden TLS key lookup and ULP bss_size validation (v5.5)
See merge request espressif/esp-idf!50954
2026-07-21 15:17:33 +08:00
Rahul Tank
b97f90ad99
Merge branch 'contrib/github_pr_18761_v5.5' into 'release/v5.5'
...
fix(nimble): initialize return value in LED characteristic access cal… (GitHub PR) (v5.5)
See merge request espressif/esp-idf!50152
2026-07-21 10:26:32 +05:30
Rahul Tank
316f3e17b2
Merge branch 'bugfix/nimble_issues_17072026_v5.5' into 'release/v5.5'
...
fix(nimble): Fix few nimble issues 17072026 (v5.5)
See merge request espressif/esp-idf!50922
2026-07-21 10:24:38 +05:30
Jiang Jiang Jian
4dcc2d33f9
Merge branch 'fix/cleanup_after_failed_nvs_set_blob_v5.5' into 'release/v5.5'
...
Fixed cleanup after nvs_set_blob failed on ESP_ERR_NVS_NOT_ENOUGH_SPACE (v5.5)
See merge request espressif/esp-idf!50744
2026-07-21 12:07:59 +08:00
Jiang Jiang Jian
941cac3d10
Merge branch 'fix/console-security-findings_v5.5' into 'release/v5.5'
...
fix(console): Fix security code review findings (v5.5)
See merge request espressif/esp-idf!50688
2026-07-21 12:07:29 +08:00
Jiang Jiang Jian
6c0d186b98
Merge branch 'fix/sec-1137-br-glue-double-free_v5.5' into 'release/v5.5'
...
fix(esp_netif): harden br_glue instance-handler cleanup against double-free (SEC-1137) (v5.5)
See merge request espressif/esp-idf!50644
2026-07-21 12:07:18 +08:00
Alexey Gerenkov
c54da61b06
Merge branch 'enable_esp32p4_jtag_tests_v5.5' into 'release/v5.5'
...
Enable esp32p4 jtag tests (v5.5)
See merge request espressif/esp-idf!50548
2026-07-21 12:06:59 +08:00
Jiang Jiang Jian
a2e9abc655
Merge branch 'fix/fatfs_vulnerabilities_v5.5' into 'release/v5.5'
...
fix(fatfs): harden against runZero 2026 FatFs bugs (v5.5)
See merge request espressif/esp-idf!50426
2026-07-21 12:06:44 +08:00
Jiang Jiang Jian
707e1e21b2
Merge branch 'fix/vfs_fatfs_test_stale_partition_v5.5' into 'release/v5.5'
...
test(vfs): reformat WL FATFS in setup to avoid stale-partition flakes (v5.5)
See merge request espressif/esp-idf!50402
2026-07-21 12:06:41 +08:00
Jiang Jiang Jian
b76deb40b3
Merge branch 'docs/ulp_fsm_instruction_v5.5' into 'release/v5.5'
...
docs(ulp): clarify ULP FSM instruction cycle timing (v5.5)
See merge request espressif/esp-idf!50368
2026-07-21 12:06:36 +08:00
Jiang Jiang Jian
b18de5cf0c
Merge branch 'fix/w5500_rx_buffer_corruption_recovery' into 'release/v5.5'
...
fix(esp_eth): recover W5500 RX path on corrupted frame length
See merge request espressif/esp-idf!50220
2026-07-21 12:06:17 +08:00
Jiang Jiang Jian
1acff98167
Merge branch 'bugfix/idfci-8839-remove-orphan-test-configs_v5.5' into 'release/v5.5'
...
fix(fatfs): re-enable fatfs and vfs psram/ccomp CI tests (v5.5)
See merge request espressif/esp-idf!50186
2026-07-21 12:05:42 +08:00
Jiang Jiang Jian
de3ba799d2
Merge branch 'fix/fatfs_instance_init_v5.5' into 'release/v5.5'
...
Fix: various FATFS/VFS fixes (v5.5)
See merge request espressif/esp-idf!50102
2026-07-21 12:05:12 +08:00
Jiang Jiang Jian
59375c0125
Merge branch 'feat/seperate_ot_citest_tags_v5.5' into 'release/v5.5'
...
ci: seperate openthread test cases (v5.5)
See merge request espressif/esp-idf!50060
2026-07-21 12:04:52 +08:00
Jiang Jiang Jian
68bcab565a
Merge branch 'test/vfs_fix_register_check_v5.5' into 'release/v5.5'
...
test(vfs): Test changes regarding VFS register incorrect check fix and fix VFS host test not being run at all (v5.5)
See merge request espressif/esp-idf!49947
2026-07-21 12:04:44 +08:00
Jiang Jiang Jian
1c6773d514
Merge branch 'feat/feat_enable_h21_light_sleep_v5.5' into 'release/v5.5'
...
fix(ble): disable flash pd config (5.5)
See merge request espressif/esp-idf!49215
2026-07-21 12:04:31 +08:00
Island
4b00e6588a
Merge branch 'fix/ble_mesh_disable_adv_pkt_discard_log_v5.5' into 'release/v5.5'
...
fix(ble_mesh): Disable warning logging when advertising packets are discarded (5.5)
See merge request espressif/esp-idf!50166
2026-07-21 11:36:00 +08:00
Island
80ffb68adf
Merge branch 'fix/ble_mesh_fixed_issues_v5.5' into 'release/v5.5'
...
Resolve reported BLE mesh stack issues (5.5)
See merge request espressif/esp-idf!50406
2026-07-21 11:35:48 +08:00