Re: [PATCH v2] Bluetooth: virtio_bt: avoid OOB read of build info string

[patchwork-bot+bluetooth]

Hello:

This patch was applied to bluetooth/bluetooth-next.git (master)
by Luiz Augusto von Dentz <luiz.von.dentz@xxxxxxxxx>:

On Thu, 30 Jul 2026 10:57:28 +0900 you wrote:
> The virtbt_setup_zephyr() sends the Zephyr vendor command 0xfc08 (Read
> Build Information) and hands the response to bt_dev_info() and
> hci_set_fw_info() as a "%s" string starting at skb->data + 1, without
> checking the length. A backend that answers with status only leaves that
> pointer past the end of the received data, so the walk reads adjacent
> slab memory until it meets a NUL. Those bytes reach the kernel log and
> the firmware-info debugfs file.
> 
> [...]

Here is the summary with links:
  - [v2] Bluetooth: virtio_bt: avoid OOB read of build info string
    https://git.kernel.org/bluetooth/bluetooth-next/c/d264c90ca22e

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html