0bcb5ddf0c
- CONFIG_COMPILER_STACK_CHECK_MODE_NORM=y (buffer overflow detection) - CONFIG_HEAP_POISONING_LIGHT=y (use-after-free/corruption detection) - CONFIG_ESP_TASK_WDT_PANIC=y (auto-reboot on hung task) - Remove unused #include "esp_now.h" (CVE-2025-52471 mitigation) - Replace hardcoded default IP 192.168.129.11 with 0.0.0.0 in Kconfig
99 lines
1.9 KiB
Plaintext
99 lines
1.9 KiB
Plaintext
#
|
|
# Wi-Fi
|
|
#
|
|
CONFIG_ESP32_WIFI_CSI_ENABLED=y
|
|
CONFIG_ESP32_WIFI_AMPDU_TX_ENABLED=
|
|
CONFIG_ESP32_WIFI_DYNAMIC_RX_BUFFER_NUM=128
|
|
|
|
#
|
|
# UART
|
|
#
|
|
CONFIG_ESP_CONSOLE_UART_CUSTOM=y
|
|
CONFIG_ESP_CONSOLE_UART=y
|
|
CONFIG_ESP_CONSOLE_UART_NUM=0
|
|
CONFIG_CONSOLE_UART_BAUDRATE=921600
|
|
|
|
CONFIG_ESP_TASK_WDT_TIMEOUT_S=30
|
|
CONFIG_ESP_TASK_WDT_PANIC=y
|
|
|
|
CONFIG_ESPTOOLPY_MONITOR_BAUD_921600B=y
|
|
CONFIG_ESPTOOLPY_MONITOR_BAUD=921600
|
|
|
|
|
|
#
|
|
# Wi-Fi
|
|
#
|
|
CONFIG_ESP32_WIFI_CSI_ENABLED=y
|
|
CONFIG_ESP32_WIFI_AMPDU_TX_ENABLED=
|
|
CONFIG_ESP32_WIFI_AMPDU_RX_ENABLED=
|
|
|
|
#
|
|
# Compiler options (size optimization saves ~75 KB)
|
|
#
|
|
CONFIG_COMPILER_OPTIMIZATION_SIZE=y
|
|
CONFIG_COMPILER_STACK_CHECK_MODE_NORM=y
|
|
CONFIG_HEAP_POISONING_LIGHT=y
|
|
|
|
#
|
|
# FreeRTOS
|
|
#
|
|
CONFIG_FREERTOS_HZ=1000
|
|
CONFIG_FREERTOS_USE_TRACE_FACILITY=y
|
|
CONFIG_FREERTOS_GENERATE_RUN_TIME_STATS=y
|
|
CONFIG_FREERTOS_USE_STATS_FORMATTING_FUNCTIONS=y
|
|
|
|
#
|
|
# ESP32-specific
|
|
#
|
|
CONFIG_ESP32_DEFAULT_CPU_FREQ_240=y
|
|
CONFIG_ESP32_DEFAULT_CPU_FREQ_MHZ=240
|
|
|
|
CONFIG_ESP32_WIFI_DYNAMIC_TX_BUFFER_NUM=32
|
|
|
|
#
|
|
# ESP32S3-specific
|
|
#
|
|
CONFIG_ESP32S3_DEFAULT_CPU_FREQ_240=y
|
|
CONFIG_ESP32S3_DEFAULT_CPU_FREQ_MHZ=240
|
|
|
|
#
|
|
# Flash & Partitions (4MB flash, dual OTA)
|
|
#
|
|
CONFIG_ESPTOOLPY_FLASHSIZE_4MB=y
|
|
CONFIG_PARTITION_TABLE_CUSTOM=y
|
|
CONFIG_PARTITION_TABLE_CUSTOM_FILENAME="partitions.csv"
|
|
|
|
#
|
|
# OTA Updates
|
|
#
|
|
CONFIG_BOOTLOADER_APP_ROLLBACK_ENABLE=y
|
|
CONFIG_ESP_HTTPS_OTA_ALLOW_HTTP=y
|
|
|
|
#
|
|
# BLE (NimBLE, scan-only, WiFi coexistence)
|
|
#
|
|
CONFIG_BT_ENABLED=y
|
|
CONFIG_BTDM_CTRL_MODE_BLE_ONLY=y
|
|
CONFIG_BTDM_CTRL_MODE_BR_EDR_ONLY=n
|
|
CONFIG_BTDM_CTRL_MODE_BTDM=n
|
|
CONFIG_BT_BLUEDROID_ENABLED=n
|
|
CONFIG_BT_NIMBLE_ENABLED=y
|
|
CONFIG_ESP_WIFI_IRAM_OPT=n
|
|
|
|
#
|
|
# Power Management
|
|
#
|
|
CONFIG_PM_ENABLE=y
|
|
CONFIG_FREERTOS_USE_TICKLESS_IDLE=y
|
|
|
|
#
|
|
# WiFi Authentication (reject open/WEP APs)
|
|
#
|
|
CONFIG_EXAMPLE_WIFI_AUTH_WPA2_WPA3_PSK=y
|
|
|
|
#
|
|
# Protected Management Frames (802.11w) — prevent deauth attacks
|
|
#
|
|
CONFIG_ESP_WIFI_PMF_ENABLED=y
|
|
CONFIG_ESP_WIFI_PMF_REQUIRED=y
|