--- net/bluetooth/rfcomm/sock.c

+++ net/bluetooth/rfcomm/sock.c

@@ -1065,13 +1065,22 @@ static ssize_t rfcomm_sock_sysfs_show(st

struct sock *sk;

struct hlist_node *node;

char *str = buf;

+ int size = PAGE_SIZE;

read_lock_bh(&rfcomm_sk_list.lock);

sk_for_each(sk, node, &rfcomm_sk_list.head) {

- str += sprintf(str, "%s %s %d %d\n",

+ int len;

+

+ len = snprintf(str, size, "%s %s %d %d\n",

batostr(&bt_sk(sk)->src), batostr(&bt_sk(sk)->dst),

sk->sk_state, rfcomm_pi(sk)->channel);

+

+ size -= len;

+ if (size <= 0)

+ break;

+

+ str += len;

}

read_unlock_bh(&rfcomm_sk_list.lock);