Two ESP-IDF usability additions for libwebsockets consumers such as the AWS KVS
WebRTC signaling client:
- LWS_WITH_CUSTOM_HEADERS Kconfig option (off by default). When set, the
websockets target gets LWS_WITH_CUSTOM_HEADERS / LWS_WITH_CUSTOM_HTTP_HEADERS
as PUBLIC compile definitions, so lws_hdr_custom_copy() is available to lws and
its consumers. lws's own option(LWS_WITH_CUSTOM_HEADERS) is gated 'H1 only' and
is dropped on the FreeRTOS/minimal profile, so the compile-def is the reliable
route. Used to read service-specific response headers (e.g. x-amzn-RequestId).
- UTC timegm(). ESP picolibc ships timegm() but gates its <time.h> prototype
behind BSD/GNU visibility and the symbol isn't reliably linkable, so lws's
CHECK_FUNCTION_EXISTS(timegm) fails and lws_http_date_parse_unix() falls back
to mktime() (local TZ) — misreading a server 'GMT' Date header by the TZ offset,
which breaks HTTP clock-skew handling (e.g. AWS SigV4). Force LWS_HAVE_TIMEGM
and provide a dependency-free UTC timegm() in port/, prototype force-included.
Validated on an ESP32-P4 esp-rainmaker camera (CONFIG_LWS_WITH_CUSTOM_HEADERS=y +
CONFIG_LWS_WITH_THREADPOOL=y): KVS WebRTC signaling links and streams end-to-end,
SigV4 clock-skew correct.
Fix ESP-IDF-ESP_DNS-DOS-001 by making esp_dns response parsing
strictly bounds-safe. A malicious DNS response could previously cause
an infinite loop or read past the end of the receive buffer.
- skip_dns_name(): use size_t offset to prevent wraparound, and check
bounds before reading labels and compression pointers
- esp_dns_parse_response(): reject responses shorter than a DNS header,
track buffer_end, guard pointer arithmetic, and validate answer
record headers and RR data before memcpy
- TCP/DoT/DoH callers: require a minimum response size and verify the
RFC 7858 length prefix before parsing
1.11.3
Features
- Add a structure and APIs for allocating TXT items with given value length (234f9f00)
Bug Fixes
- Fix potential browse null instance crash caught by fuzzer (953c3a78)
- fix deadlock caused by re-acquiring the service lock (88c68330)
- free dropped TXT query results when max results reached (f81720b7)
- config.h: drop three duplicate macro defines (HAVE_STDINT_H,
HAVE_SYS_TYPES_H, ERR_REPORTING_STDOUT)
- crypto_kernel.c: gate AES-ICM-192 on SOC_AES_SUPPORT_AES_192 instead
of unconditional #if 0; ESP32 (only SoC with hw AES-192) now enables
the cipher, other SoCs continue to skip it since mbedtls_aes_setkey
returns PLATFORM_FEATURE_UNSUPPORTED for 192-bit keys there
- examples/get_started/README.md: fix link, repo migrated from
idf-extra-components to esp-protocols
- LICENSE: prepend dual-license header (Apache-2.0 wrapper +
BSD-3-Clause bundled libsrtp), keep Apache full text below
Adds libsrtp — an ESP-IDF wrapper around cisco/libsrtp pinned at v2.8.0
(commit 24b3bf8). Crypto routes through ESP-IDF's mbedTLS, so AES
protect/unprotect goes through the chip's on-chip AES peripheral by
default (CONFIG_MBEDTLS_HARDWARE_AES=y on esp32 / s2 / s3 / c3 / c5 /
c6 / p4). Pairs with libwebsockets and (upcoming) usrsctp for the
WebRTC transport stack.
The wrapper bundles cisco/libsrtp as a git submodule and compiles its
sources directly into the IDF component archive — no internal libsrtp2.a
dance. One small port-side delta in port/crypto_kernel.c opts out of
the AES-ICM-192 cipher registration when GCM is enabled (saves binary
size; AES-CM-128 + AES-GCM cover all WebRTC SRTP suites in use).
Naming + version follow cisco's release line. Component is named
'libsrtp' (registry: espressif/libsrtp) tracking whichever 2.x release
is current upstream — v2.8.0 today. The IDF version constraint
(>=5.4,<6) reflects the fact that libsrtp v2.x's mbedTLS adapters
predate the mbedTLS 4 / TF-PSA-Crypto split shipped by IDF v6; bump
when the component tracks a release that speaks mbedTLS 4.
Supported SRTP profiles via the mbedTLS backend:
AEAD: AEAD_AES_128_GCM, AEAD_AES_256_GCM
SRTP: AES_CM_128_HMAC_SHA1_80, AES_CM_128_HMAC_SHA1_32
Tests included:
test_apps/ — embedded Unity smoke (esp32 + esp32c3 via
.build-test-rules)
host_test/ — IDF Linux-target binary, AES-GCM-128 protect/
unprotect roundtrip; aborts on the first libsrtp
failure with EXPECT() for boolean assertions
examples/get_started/ — minimal init/shutdown sanity app
License: Apache-2.0 (port glue) AND BSD-3-Clause (bundled cisco/libsrtp).
(Previously prepared as espressif/idf-extra-components#753; relocated to
esp-protocols where it naturally sits alongside libwebsockets and the
other transport-stack components.)
CONSUME_ALL discards the current buffer, so the URC processed offset must be reset before processing the next buffer. Otherwise, new_data_size can underflow when the next buffer is smaller.
david-cermak
Suren Gabrielyan
David Cermak
Erki Aring
Vikram Dattu
Abhik Roy
Xu Si Yu
Siflorite
Wis Chu
surengab
Richard Allen
Thiker Shreah
Andreas K
Euripedes