Hi Szymon, > > + > > + strcpy(mfg_firmware, buf); > > if len == sizeof(mfg_firmware) you will write 1 byte after mfg_firmware > > > + mfg_firmware[len - 1] = '\0'; > > if len == 0 you will write 1 byte before mfg_firmware > > > + Thanks for your review. We will take care of this in updated version. Regards, Amit -- To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html