Fix ESP-IDF-ESP_DNS-DOS-001 by making esp_dns response parsing
strictly bounds-safe. A malicious DNS response could previously cause
an infinite loop or read past the end of the receive buffer.
- skip_dns_name(): use size_t offset to prevent wraparound, and check
bounds before reading labels and compression pointers
- esp_dns_parse_response(): reject responses shorter than a DNS header,
track buffer_end, guard pointer arithmetic, and validate answer
record headers and RR data before memcpy
- TCP/DoT/DoH callers: require a minimum response size and verify the
RFC 7858 length prefix before parsing
1.11.3
Features
- Add a structure and APIs for allocating TXT items with given value length (234f9f00)
Bug Fixes
- Fix potential browse null instance crash caught by fuzzer (953c3a78)
- fix deadlock caused by re-acquiring the service lock (88c68330)
- free dropped TXT query results when max results reached (f81720b7)
- config.h: drop three duplicate macro defines (HAVE_STDINT_H,
HAVE_SYS_TYPES_H, ERR_REPORTING_STDOUT)
- crypto_kernel.c: gate AES-ICM-192 on SOC_AES_SUPPORT_AES_192 instead
of unconditional #if 0; ESP32 (only SoC with hw AES-192) now enables
the cipher, other SoCs continue to skip it since mbedtls_aes_setkey
returns PLATFORM_FEATURE_UNSUPPORTED for 192-bit keys there
- examples/get_started/README.md: fix link, repo migrated from
idf-extra-components to esp-protocols
- LICENSE: prepend dual-license header (Apache-2.0 wrapper +
BSD-3-Clause bundled libsrtp), keep Apache full text below
Adds libsrtp — an ESP-IDF wrapper around cisco/libsrtp pinned at v2.8.0
(commit 24b3bf8). Crypto routes through ESP-IDF's mbedTLS, so AES
protect/unprotect goes through the chip's on-chip AES peripheral by
default (CONFIG_MBEDTLS_HARDWARE_AES=y on esp32 / s2 / s3 / c3 / c5 /
c6 / p4). Pairs with libwebsockets and (upcoming) usrsctp for the
WebRTC transport stack.
The wrapper bundles cisco/libsrtp as a git submodule and compiles its
sources directly into the IDF component archive — no internal libsrtp2.a
dance. One small port-side delta in port/crypto_kernel.c opts out of
the AES-ICM-192 cipher registration when GCM is enabled (saves binary
size; AES-CM-128 + AES-GCM cover all WebRTC SRTP suites in use).
Naming + version follow cisco's release line. Component is named
'libsrtp' (registry: espressif/libsrtp) tracking whichever 2.x release
is current upstream — v2.8.0 today. The IDF version constraint
(>=5.4,<6) reflects the fact that libsrtp v2.x's mbedTLS adapters
predate the mbedTLS 4 / TF-PSA-Crypto split shipped by IDF v6; bump
when the component tracks a release that speaks mbedTLS 4.
Supported SRTP profiles via the mbedTLS backend:
AEAD: AEAD_AES_128_GCM, AEAD_AES_256_GCM
SRTP: AES_CM_128_HMAC_SHA1_80, AES_CM_128_HMAC_SHA1_32
Tests included:
test_apps/ — embedded Unity smoke (esp32 + esp32c3 via
.build-test-rules)
host_test/ — IDF Linux-target binary, AES-GCM-128 protect/
unprotect roundtrip; aborts on the first libsrtp
failure with EXPECT() for boolean assertions
examples/get_started/ — minimal init/shutdown sanity app
License: Apache-2.0 (port glue) AND BSD-3-Clause (bundled cisco/libsrtp).
(Previously prepared as espressif/idf-extra-components#753; relocated to
esp-protocols where it naturally sits alongside libwebsockets and the
other transport-stack components.)
CONSUME_ALL discards the current buffer, so the URC processed offset must be reset before processing the next buffer. Otherwise, new_data_size can underflow when the next buffer is smaller.
read_pin() treats both SIM PIN and SIM PUK as pin_ok = false
Added read_pin_state() to return the actual state
Added reset_pin() to use PUK to set a new SIM PIN
Closes https://github.com/espressif/esp-protocols/issues/1065
Free browse sync pending lists on packet parse errors, tear down async
searches detached by search_finish in the host unit test, and replace
reassigned browse hostnames without leaking the old allocation.
david-cermak
David Cermak
Abhik Roy
Xu Si Yu
Siflorite
Vikram Dattu
Wis Chu
Suren Gabrielyan
surengab
Richard Allen
Thiker Shreah
Andreas K
Euripedes