esp-idf/components
David Cermak e00a689a77 lwip: Security fixes; PPPoS null-deref; NAPT ip-forward
* Cherry-pick important fixes to 2.1.2-esp
  - CVE-2020-22283: Attacker could craft a packet that would disclose 8 bytes of some heap memory:
    - icmp6: Don't copy too much data
    - icmp6: Fix copying of chained pbuf in reply
    - icmp6: keep to the RFC and send as much as possible with icmp6 error messages
  - CVE-2020-22284: ZEP - ZigBee Encapsulation Protocol/6LoWPAN is not supported in IDF,
    the netif module (zepif.c) is not included in the build, but users can still inject
    the file into compilation process, implement IO interface and use this.
    - zepif: Copy possibly chained output pbuf properly
    - Add #define for minimum IPv6 MTU length
    - pbuf: Add pbuf_copy_partial_pbuf library function
* PPPoS: Fix null-deref when processing double break packet
  - pppos: fix in_tail null (espressif/esp-lwip@537c69d5)
  - PPP: Add test exhibiting empty packet null-deref (espressif/esp-lwip@202a07da)
* NAPT: Fix PBUF_REF type to clone the pbuf before forwarding
  - IP-FORWARD: If packet-type is PBUF_REF clone it before forwarding
  - Add NAPT unit test to exercise NAT feature for both RAM and REF pbuf types
* version: Update version numbers to match 2.1.2-esp
* Minor fixes listed below: Fix client receive KOD, NAPT fixes, restore
  dhcp_cb, sntp docs, vendor class id (disabled)

* Update submodule: 2195f7416f...76303df238

Detailed description of the changes:
  - test/napt: Add unit test for IP forward with PBUF_REF (espressif/esp-lwip@76303df2)
  - napt: Fix PBUF_REF type to clone the pbuf before forwarding (espressif/esp-lwip@39068263)
  - version: Update version numbers to match 2.1.2-esp (espressif/esp-lwip@2b922919)
  - pppos: fix in_tail null (espressif/esp-lwip@537c69d5)
  - PPP: Add test exhibiting empty packet null-deref (espressif/esp-lwip@202a07da)
  - pbuf: Add pbuf_copy_partial_pbuf library function (espressif/esp-lwip@1c9cd9c1)
  - Add #define for minimum IPv6 MTU length (espressif/esp-lwip@d2dc577b)
  - zepif: Copy possibly chained output pbuf properly (espressif/esp-lwip@64ab7f2a)
  - icmp6: Don't copy too much data (espressif/esp-lwip@4a64731b)
  - icmp6: Fix copying of chained pbuf in reply (espressif/esp-lwip@7c822ff4)
  - icmp6: keep to the RFC and send as much as possible with icmp6 error messages (espressif/esp-lwip@29100ab6)
  - dns: Add API to clear dns cache (espressif/esp-lwip@ee59f77d)
  - CI: Fixed adding gitlab key (espressif/esp-lwip@5a2bdba7)
  - test case: modify test case test_tcp_new_max_num_remove_FIN_WAIT_1 (espressif/esp-lwip@6b090f7d)
  - add function for deinit lwip timers (espressif/esp-lwip@2749568f)
  - dhcp: Fix build issue that set ESP_DHCP_DISABLE_VENDOR_CLASS_IDENTIFIER to true will build fail (espressif/esp-lwip@d827dbf7)
  - Document that sntp_setservername doesn't copy the string (espressif/esp-lwip@54acdb59) #6786
  - lwip/dhcp: add 60 option for vendor class identify (espressif/esp-lwip@ae7edc2a) espressif/esp-lwip#32
  - dhcp: Restore dhcp_cb on restart after dhcp_release_and_stop() (espressif/esp-lwip@55ea9d9c) #7217
  - napt: Fix disbale IPv6 and enable NAPT will build error (espressif/esp-lwip@74cf7f9f)
  - napt: fix checksum of UDP (espressif/esp-lwip@bb63eed1)
  - sntp: Fix client receive KOD packet that make pool MEMP_SYS_TIMEOUT not be freed (espressif/esp-lwip@1c1642fe)
  - test case: add tcp state and reset test cases. (espressif/esp-lwip@67deb805)

Closes https://github.com/espressif/esp-idf/issues/8300
Closes https://github.com/espressif/esp-idf/issues/8451
2022-03-09 10:33:31 +01:00
..
app_trace esp_ipc: fix race condition in ipc task 2021-09-17 23:19:27 +03:00
app_update bootloader: Fixes bootloader_common_get_sha256_of_partition. Adds hash check. 2022-01-25 20:01:00 +08:00
asio asio coap: If LWIP IPV6 is disabled, automatically don't build asio & coap 2021-11-23 22:39:58 +08:00
bootloader secure_boot: Added Kconfig option for aggressive key revoke 2021-11-17 12:35:06 +05:30
bootloader_support bootloader: fixed the issue custom_uart_gpio doesn't take effect 2022-03-02 02:56:17 +08:00
bt Update ESP32-C3 bt lib and phy lib 2022-03-08 01:45:06 +00:00
cbor esp_ipc: fix race condition in ipc task 2021-09-17 23:19:27 +03:00
cmock Whitespace: Automated whitespace fixes (large commit) 2020-11-11 07:36:35 +00:00
coap asio coap: If LWIP IPV6 is disabled, automatically don't build asio & coap 2021-11-23 22:39:58 +08:00
console console: fix a bug preventing us from starting a CLI on non-default UART 2021-09-13 14:10:19 +08:00
cxx [C++]: wrapper functions around unwind code 2021-06-01 13:46:50 +08:00
driver gpio: Fix the bug that gpio interrupt cannot be triggered on app cpu on ESP32S3 2022-02-28 16:10:37 +08:00
efuse remove esp32c3 unsupported efuse field 2022-02-28 18:58:12 +08:00
esp32 psram: add ESP32-D0WD-R2-V3 support 2022-02-13 22:31:24 +08:00
esp32c3 System: fix RTCFAST section alignment 2021-12-23 02:09:46 +01:00
esp32s2 System/Memprot: fixed voltage glitching detection logic 2021-10-04 19:25:32 +02:00
esp32s3 Merge branch 'feature/support_bss_in_psram_for_esp32s2_v4.3' into 'release/v4.3' 2021-09-15 08:09:42 +00:00
esp_adc_cal adc: upgrade adc calibration algorithm to version 2 on c3 2022-02-15 15:27:25 +08:00
esp_common Task WDT: Fix overflow issue during timeout calculation 2022-01-17 10:06:38 +08:00
esp_eth esp_eth: EMAC start/stop optimization 2022-03-07 14:54:55 +01:00
esp_event [esp_event]: fixed and improved docs 2021-09-10 10:12:39 +08:00
esp_gdbstub fix (gdbstub): added xtensa, esp32 as public includes in component.mk 2021-11-10 13:45:05 +08:00
esp_hid Fixed left right key confusion in comments. 2022-01-05 10:47:56 +08:00
esp_http_client esp_http_client: Cache received data in http_on_body callback. 2022-03-07 06:16:56 +00:00
esp_http_server esp_http_server: Websocket CLOSE frame can support callback function 2022-03-03 15:48:07 +08:00
esp_https_ota esp_https_ota: fix for checking chip id at start of OTA 2022-02-22 11:05:19 +05:30
esp_https_server Fixed ssl_ctx not being freed at the time of error. 2020-11-25 13:47:38 +05:30
esp_hw_support USB_SERIAL_JTAG: Fix the issue that there is no rom log when restarting 2022-02-10 10:33:40 +08:00
esp_ipc esp_ipc: fix race condition in ipc task 2021-09-17 23:19:27 +03:00
esp_local_ctrl Added support for security1 in local control 2021-09-21 09:21:18 +05:30
esp_netif esp_netif: Fix dhcps state transitions 2021-07-19 15:00:37 +02:00
esp_pm fix pm lock issue in dual core mode 2022-02-23 21:50:37 +08:00
esp_ringbuf ringbuf: Fix bug where comparision between a signed and unsigned operand resulted in incorrect free size for no-split/allow-split buffers 2021-12-27 15:02:27 +08:00
esp_rom esp_rom: remove functions which depend on sizeof(struct stat) 2022-02-11 07:07:12 +00:00
esp_serial_slave_link essl: add essl spi support to communicate with spi slave hd mode 2021-10-15 16:50:24 +08:00
esp_system sleep: fixed ext1 cannot wakeup via RTCIO >= 18 issue 2022-02-18 11:10:49 +08:00
esp_timer spi_flash: No CPU release time for an erase operation when OS is not running 2021-11-04 15:18:44 +08:00
esp_websocket_client transport: Add CONFI_WS_TRANSPORT for optimize the code size 2021-06-23 11:26:56 +08:00
esp_wifi Update ESP32-C3 bt lib and phy lib 2022-03-08 01:45:06 +00:00
esp-tls Fix esp_mbedtls_write API 2021-09-21 16:31:21 +08:00
espcoredump coredump: backport the coredump test data from v4.4 2022-02-28 12:29:08 +07:00
esptool_py remove in esptool 2022-02-28 19:24:59 +08:00
expat expat: upgrade to v2.4.3 release 2022-01-31 11:15:29 +05:30
fatfs vfs/fatfs: fix failed tests by increasing timeout 2021-09-21 08:53:18 +02:00
freemodbus freemodbus: fix port enable disable sequence for tcp master and slave 2022-03-08 09:40:08 +01:00
freertos docs:fix broken links 2022-02-15 14:28:59 +08:00
hal esp_eth: EMAC start/stop optimization 2022-03-07 14:54:55 +01:00
heap Heap: Fix a possible bug in the TLSF allocator (backport v4.3) 2022-01-06 11:36:46 +00:00
idf_test CI: optimize integration test workflow 2022-02-15 13:23:15 +08:00
jsmn Whitespace: Automated whitespace fixes (large commit) 2020-11-11 07:36:35 +00:00
json cJSON: Update submodule to latest release. 2021-08-30 13:16:55 +05:30
libsodium libsodium: fix source directory names to address build issues with Make 2021-08-12 08:43:35 +05:30
log Merge branch 'feature/c3_IDF-2554' into 'master' 2021-01-13 12:55:21 +08:00
lwip lwip: Security fixes; PPPoS null-deref; NAPT ip-forward 2022-03-09 10:33:31 +01:00
mbedtls ci: Fix issues for build stage 2022-02-02 15:07:50 +05:30
mdns mdns: Fix potential null deref reported by fuzzer test 2022-02-14 22:49:34 +08:00
mqtt MQTT: Fix build if CONFIG_WS_TRANSPORT is not set and client cleanups 2022-01-07 15:07:27 +00:00
newlib newlib: Mitigate UT - time adjustment happens linearly 2022-02-23 16:51:28 +08:00
nghttp Whitespace: Automated whitespace fixes (large commit) 2020-11-11 07:36:35 +00:00
nvs_flash nvs: add config to ignore "encrypted" flag of nvs partitions 2021-11-12 09:44:04 +05:30
openssl Whitespace: Automated whitespace fixes (large commit) 2020-11-11 07:36:35 +00:00
partition_table partition_table: Fix case when a few similar to otadata partitions in the table 2021-10-26 16:07:31 +08:00
perfmon esp32c3: Disable components that are not yet supported 2020-12-31 09:27:38 +11:00
protobuf-c
protocomm protocomm: Updated function for constant time buffer comparison 2022-02-02 11:00:32 +05:30
pthread pthread: Fix behaviour when pthread destructor calls pthread_getspecific/pthread_setspecific 2021-12-21 01:27:49 +00:00
riscv RISC-V: fix usage of special register when interrupts are enabled 2021-12-21 01:06:11 +00:00
sdmmc Fix minor documentation issue 2020-12-25 15:46:36 +08:00
soc Merge branch 'bugfix/bootloader_uart_custom_gpio_v4.3' into 'release/v4.3' 2022-03-03 16:49:49 +08:00
spi_flash spi_flash: add support for th 1M flash 2022-02-14 16:01:43 +08:00
spiffs style: format python files with isort and double-quote-string-fixer 2021-01-26 10:49:01 +08:00
tcp_transport tls: Modify tls optimize both mbedtls and wolfssl 2021-06-29 00:19:03 +08:00
tcpip_adapter components: Use CONFIG_LWIP_IPV6 to strip IPv6 function in components 2021-04-12 05:42:50 +00:00
tinyusb esp_ipc: fix race condition in ipc task 2021-09-17 23:19:27 +03:00
touch_element touch_element: fix event callback parameter type, change it into pointer 2021-03-05 11:45:47 +08:00
ulp ulp riscv: force cocpu clock on to prevent spurious cocpu trap resets 2021-07-28 18:15:38 +08:00
unity spi_flash: mocking should be possible now 2020-12-14 18:53:14 +08:00
vfs vfs: add test for errno value after 'open' 2022-02-07 11:36:21 +01:00
wear_levelling docs: update sdmmc and vfs cn trans 2022-02-22 11:07:16 +08:00
wifi_provisioning wifi_prov_mgr: Fix provisioning not stopping in release mode 2022-02-01 09:50:45 +05:30
wpa_supplicant Merge branch 'bugfix/eap_client_crash_v4.3' into 'release/v4.3' 2022-02-16 04:03:49 +00:00
xtensa arch: move stdatomic 2021-11-02 16:24:18 +01:00