From: Sasha Finkelstein <fnkl.kernel@gmail.com>

Date: Fri, 10 Mar 2023 11:28:42 +0100

Subject: [PATCH] bluetooth: btbcm: Fix logic error in forming the board name.

References: bsc#1012628

Patch-mainline: 6.2.12

Git-commit: b76abe4648c1acc791a207e7c08d1719eb9f4ea8

commit b76abe4648c1acc791a207e7c08d1719eb9f4ea8 upstream.

This patch fixes an incorrect loop exit condition in code that replaces

'/' symbols in the board name. There might also be a memory corruption

issue here, but it is unlikely to be a real problem.

Cc: <stable@vger.kernel.org>

Signed-off-by: Sasha Finkelstein <fnkl.kernel@gmail.com>

Signed-off-by: Luiz Augusto von Dentz <luiz.von.dentz@intel.com>

Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

Signed-off-by: Jiri Slaby <jslaby@suse.cz>

---

 drivers/bluetooth/btbcm.c | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/drivers/bluetooth/btbcm.c b/drivers/bluetooth/btbcm.c

index 3006e2a0..43e98a59 100644

--- a/drivers/bluetooth/btbcm.c

+++ b/drivers/bluetooth/btbcm.c

@@ -511,7 +511,7 @@ static const char *btbcm_get_board_name(struct device *dev)

 	len = strlen(tmp) + 1;

 	board_type = devm_kzalloc(dev, len, GFP_KERNEL);

 	strscpy(board_type, tmp, len);

-	for (i = 0; i < board_type[i]; i++) {

+	for (i = 0; i < len; i++) {

 		if (board_type[i] == '/')

 			board_type[i] = '-';

 	}

-- 

2.35.3