This is a note to let you know that I've just added the patch titled bluetooth: btbcm: Fix logic error in forming the board name. to the 6.2-stable tree which can be found at: http://www.kernel.org/git/?p=linux/kernel/git/stable/stable-queue.git;a=summary The filename of the patch is: bluetooth-btbcm-fix-logic-error-in-forming-the-board-name.patch and it can be found in the queue-6.2 subdirectory. If you, or anyone else, feels it should not be added to the stable tree, please let <stable@xxxxxxxxxxxxxxx> know about it. >From b76abe4648c1acc791a207e7c08d1719eb9f4ea8 Mon Sep 17 00:00:00 2001 From: Sasha Finkelstein <fnkl.kernel@xxxxxxxxx> Date: Fri, 10 Mar 2023 11:28:42 +0100 Subject: bluetooth: btbcm: Fix logic error in forming the board name. From: Sasha Finkelstein <fnkl.kernel@xxxxxxxxx> commit b76abe4648c1acc791a207e7c08d1719eb9f4ea8 upstream. This patch fixes an incorrect loop exit condition in code that replaces '/' symbols in the board name. There might also be a memory corruption issue here, but it is unlikely to be a real problem. Cc: <stable@xxxxxxxxxxxxxxx> Signed-off-by: Sasha Finkelstein <fnkl.kernel@xxxxxxxxx> Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx> Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx> --- drivers/bluetooth/btbcm.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/drivers/bluetooth/btbcm.c +++ b/drivers/bluetooth/btbcm.c @@ -511,7 +511,7 @@ static const char *btbcm_get_board_name( len = strlen(tmp) + 1; board_type = devm_kzalloc(dev, len, GFP_KERNEL); strscpy(board_type, tmp, len); - for (i = 0; i < board_type[i]; i++) { + for (i = 0; i < len; i++) { if (board_type[i] == '/') board_type[i] = '-'; } Patches currently in stable-queue which might be from fnkl.kernel@xxxxxxxxx are queue-6.2/bluetooth-btbcm-fix-logic-error-in-forming-the-board-name.patch