Mirrors/esp-idf
1
0
Fork 0
mirror of https://github.com/espressif/esp-idf.git synced 2026-08-18 06:35:35 +03:00
Code Issues Packages Projects Releases Wiki Activity
35,223 Commits 25 Branches 187 Tags
f981b1e86d21f92b72beb25deeefde2db4c490db
Commit Graph

35223 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
zhanghaipeng
f981b1e86d fix(ble/bluedroid): Fix security issues in HCI module 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
de0d79fa1e fix(ble/bluedroid): Fix security issues in GATT module 
(cherry picked from commit f502b2aab1)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
32d608fdf5 fix(ble/bluedroid): Fix security issues in GAP module 
(cherry picked from commit 1ed5a4465d)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
9d67270327 fix(ble/bluedroid): Add length check in prepare write response 
(cherry picked from commit b03ff3cf21)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
7e53fe2b4c fix(ble/bluedroid): Add boundary check for adv_handle in btm_ble_adv_set_terminated_evt 
(cherry picked from commit d2baf3b0d4)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
0d7ed9e048 fix(ble/bluedroid): Add NULL checks in GATT APIs 
(cherry picked from commit a6730c7da6)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
677e3c1284 fix(ble/bluedroid): Add NULL checks in esp_gap_ble_api 
(cherry picked from commit b71c51564a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
3e5810b5f4 fix(ble/bluedroid): Add NULL check in esp_ble_gap_add_device_to_resolving_list 
(cherry picked from commit 4b44d8e814)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
73f8cc0826 fix(ble/bt): Add NULL check in esp_hid_device example 
(cherry picked from commit 8e0f74a2cc)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
2a5d00e314 fix(ble/bt): Add NULL check in esp_hid_host example 
(cherry picked from commit 8b5dd75368)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
867c76f83d fix(ble/blufi): Add DH param length validation 
(cherry picked from commit 773814c087)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
8c58dbaa3c fix(ble/bluedroid): Use snprintf in ble_eddystone example 
(cherry picked from commit 24e023e307)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
4f0e60fe0b fix(ble/bluedroid): Fix potential out-of-bounds issue 
- add length check in hci_hal_h4_hdl_rx_packet to prevent OOB
- add adv data length check in btm_ble_cache_adv_data
- add indicate data length check in BTA_GATTS_HandleValueIndication
- add report length check in bta_hh_parse_keybd_rpt
- add report length check in BTA_HdSendReport
- add descriptor length check in BTA_HdRegisterApp
- prevent buffer overflow in attribute processing


(cherry picked from commit 71efec78c5)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
4bda17200f fix(ble/bluedroid): Fix potential CVE-2024-0039 out-of-bounds write in attp_build_value_cmd 
- Reference: https://source.android.com/docs/security/bulletin/2024-03-01?hl=zh-cn


(cherry picked from commit e1d39f630f)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Zhang Hai Peng
754a18a2b0 fix(ble/bluedroid): Fix potential CVE-2020-0022 in reassemble_and_dispatch 
- Reference: https://nvd.nist.gov/vuln/detail/CVE-2020-0022


(cherry picked from commit 1f7fd91b5a)

Co-authored-by: zhanghaipeng <zhanghaipeng@espressif.com>
 2025-12-17 00:04:45 +08:00
Jiang Jiang Jian
a247a4dbe1 Merge branch 'fix/avoid_unncessary_encryption_for_mgmt_packets_v5.1' into 'release/v5.1' 
fix(wifi): fix memory corruption by avoiding unncessary encryption of Mgmt frames (Backport v5.1)

See merge request espressif/esp-idf!44212
 2025-12-16 14:00:48 +08:00
Sarvesh Bodakhe
c7ba439230 fix(wifi): fix memory corruption by avoiding unncessary encryption of Mgmt frames 
When wpa_supplicant sends an authentication response for an already
connection station (with keys installed after a successful 4-way
handshake), the Mgmt packet was encrypted unconditionaly based on
'bss->pmf_enable'. This lead to memory corruption since extra space for
the encryption header was assumed even when it was not there.

Fix this by verifying that the packet is actually a robust management
frame before enabling the encryption.
 2025-12-15 09:58:47 +05:30
Jiang Jiang Jian
ba7e73349e Merge branch 'bugfix/ftm_memory_corruption_v5.1' into 'release/v5.1' 
bugfix(wifi): Resolve the memory corruption issue in FTM (backport v5.1)

See merge request espressif/esp-idf!44192
 2025-12-15 10:34:42 +08:00
Akshat Agrawal
669df500c3 bugfix(wifi): Resolve the memory corruption issue in FTM 2025-12-12 15:52:54 +05:30
Jiang Jiang Jian
c4b992a0fa Merge branch 'fix/fix_clear_reason_status_issue' into 'release/v5.1' 
fix(wifi): fix not clear disconnect reason status issue

See merge request espressif/esp-idf!44164
 2025-12-12 17:19:10 +08:00
Jiang Jiang Jian
63c78a51e1 Merge branch 'fix/correct_adc_periph_num_on_c2_v5.1' into 'release/v5.1' 
fix(adc): fix ESP32-C2/P4 wrong adc periph num (v5.1)

See merge request espressif/esp-idf!41540
 2025-12-12 10:21:35 +08:00
Jiang Jiang Jian
dd754fc2a4 Merge branch 'bugfix/fix_event_filter_bug_v5.1' into 'release/v5.1' 
fix(bt/controller): Fixed hci connection request event filter bug (v5.1)

See merge request espressif/esp-idf!43879
 2025-12-12 10:17:51 +08:00
Jiang Jiang Jian
43b1fa99d7 Merge branch 'feature/extend_h2_conon_num_to_70_v5.1' into 'release/v5.1' 
change(ble): Updated the maximum number of concurrent connections to 70 on ESP32-H2 (v5.1)

See merge request espressif/esp-idf!43831
 2025-12-12 10:17:06 +08:00
Jiang Jiang Jian
d7793f860f Merge branch 'fix/fix_an_ot_trel_risk_v5.1' into 'release/v5.1' 
fix(openthread): fix a potential stack overflow in TREL (v5.1)

See merge request espressif/esp-idf!43936
 2025-12-12 10:15:22 +08:00
Jiang Jiang Jian
a2448622ff Merge branch 'fix/v55_lib_update_v5.1' into 'release/v5.1' 
fix(openthread): resolve deadlock issues due to switching_lock (v5.1)

See merge request espressif/esp-idf!44085
 2025-12-12 10:13:14 +08:00
wangtao@espressif.com
1914c32c3e fix(wifi): fix not clear disconnect reason status issue 2025-12-11 19:42:13 +08:00
Jiang Jiang Jian
d45df0ca52 Merge branch 'bugfix/wifibug-1615' into 'release/v5.1' 
fix(mac):fix unnecessary event posting when sta disconnect

See merge request espressif/esp-idf!44109
 2025-12-11 18:45:37 +08:00
Island
03ae7637c0 Merge branch 'bugfix/fix_reattempt_sync_estab_v5.1' into 'release/v5.1' 
fix(nimble): Add change to cancel sync in case of reattempt (v5.1)

See merge request espressif/esp-idf!43953
 2025-12-11 14:26:14 +08:00
morris
4606518aec Merge branch 'fix/esp32_adc_continuous_loss_sample_v5.1' into 'release/v5.1' 
Fix/esp32 adc continuous loss sample (v5.1)

See merge request espressif/esp-idf!42833
 2025-12-11 11:27:17 +08:00
morris
009ed2fd85 Merge branch 'bugfix/fix_i2s_auto_port_issue_v5.1' into 'release/v5.1' 
fix(i2s): fix the auto port failure when use simplex on ESP32 (v5.1)

See merge request espressif/esp-idf!43823
 2025-12-11 11:25:06 +08:00
Junchi Chen
5da68217d0 fix(mac):fix unnecessary event posting when sta disconnect 2025-12-10 17:37:12 +08:00
Mahavir Jain
7463bd8787 Merge branch 'bugfix/protocomm_sec1_validation_v5.1' into 'release/v5.1' 
fix(protocomm): add validation for Security1 client verifier data (v5.1)

See merge request espressif/esp-idf!43783
 2025-12-10 14:16:24 +05:30
Rahul Tank
d7ee0303f8 fix(nimble): Add change to cancel sync in case of reattempt 2025-12-10 12:53:53 +08:00
Jiang Jiang Jian
5e0737cb42 Merge branch 'bugfix/fix_wifilib_error_introduced_by_mr43704' into 'release/v5.1' 
fix(wifi): fix wifilib issue introduced by mr43704

See merge request espressif/esp-idf!43923
 2025-12-10 10:21:10 +08:00
Tan Yan Quan
94b7c9d0c2 fix(openthread): resolve deadlock issues due to switching_lock 
* esp-openthread: thread_zigbee/esp-openthread@4a650cc2f
* openthread: espressif/openthread@36b14d3ef
* esp-idf: espressif/esp-idf@ccadda98e
 2025-12-09 09:39:35 +00:00
Jiang Jiang Jian
ccadda98ee Merge branch 'bugfix/fix_bsp_component_build_failure_of_i2s_es8311' into 'release/v5.1' 
fix(i2s_es8311): fix the build warning that introduced in the dependency

See merge request espressif/esp-idf!44056
 2025-12-09 14:18:14 +08:00
laokaiyao
b3f0779096 remove(i2s_es8311): remove the bsp support since the broken dependency 2025-12-09 10:31:59 +08:00
Xu Si Yu
c321488e0b fix(openthread): fix a potential stack overflow in TREL 2025-12-03 10:36:42 +08:00
muhaidong
ca312e6a51 fix(wifi): fix wifilib issue introduced by mr43704 2025-12-02 19:37:08 +08:00
liqigan
27741bb4f4 fix(bt/controller): Fixed hci connection request event filter bug 2025-12-01 13:46:39 +08:00
Jiang Jiang Jian
cb5e4b9708 Merge branch 'fix/cpu_reset_dma_v5.1' into 'release/v5.1' 
dma: fixed issue that DMA are not reset when CPU reset (v5.1)

See merge request espressif/esp-idf!42853
 2025-11-29 12:29:11 +08:00
Jiang Jiang Jian
48397642c3 Merge branch 'bugfix/a2dp_deinit_crash_v5.1' into 'release/v5.1' 
fix(bt): fixed crash caused by deinit during A2DP connection initiation(v5.1)

See merge request espressif/esp-idf!43786
 2025-11-29 12:28:53 +08:00
Jiang Jiang Jian
37f1adb63c Merge branch 'fix/ieee802154_energy_detect_result_v5.1' into 'release/v5.1' 
fix(802.15.4): fixed energy detection result (v5.1)

See merge request espressif/esp-idf!43529
 2025-11-29 11:03:02 +08:00
Jiang Jiang Jian
11cdbbe428 Merge branch 'bugfix/ftm_last_dial_tok_v5.1' into 'release/v5.1' 
bugfix(wifi): Set the dialog token of last FTM resp to zero (Backport v5.1)

See merge request espressif/esp-idf!43699
 2025-11-29 10:59:22 +08:00
Shen Wei Long
73c37b5c8c change(ble): Updated the maximum number of concurrent connections to 70 on ESP32-H2 
(cherry picked from commit cd33f13521)

Co-authored-by: ShenWeilong <shenweilong@espressif.com>
 2025-11-28 09:06:08 +00:00
laokaiyao
2137cbad63 fix(i2s): fix the auto port failure when use simplex on ESP32 2025-11-28 14:50:18 +08:00
Akshat Agrawal
6c91b9c3a4 bugfix(wifi): Set the dialog token of last FTM resp to zero 
- Perform FTM in disconnected state
- Resolve memory corruption by avoiding integer underflow
- Return to home channel as soon as FTM is completed
 2025-11-28 11:01:33 +05:30
Jiang Jiang Jian
470a32467a Merge branch 'bugfix/fix_some_wifi_bugs_251125_v5.1' into 'release/v5.1' 
fix(wifi): fix some wifi bugs 251125(Backport v5.1)

See merge request espressif/esp-idf!43704
 2025-11-28 13:10:33 +08:00
Jiang Jiang Jian
bef993f784 Merge branch 'feature/usb_device_examples_update_v2.0.0_backport_v5.1' into 'release/v5.1' 
feature(usb_device): Examples update to esp_tinyusb v2.0.0 (backport to v5.1)

See merge request espressif/esp-idf!42053
 2025-11-28 10:57:19 +08:00
Xiao Xufeng
93c2572978 dma: fixed issue that DMA are not reset when CPU reset 
When DMA keep writing the memory, some data may be corrupted after reset. For example, the stack of bootloader may be overwritten and failed to boot until a higher scope of reset (Core).
 2025-11-28 10:56:55 +08:00