forked from luck/tmp_suning_uos_patched
kobject: sanitize argument for format string
Unlike kobject_set_name(), the kset_create_and_add() interface does not provide a way to use format strings, so make sure that the interface cannot be abused accidentally. It looks like all current callers use static strings, so there's no existing flaw. Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
This commit is contained in:
parent
fc60bb8339
commit
b7165ebbf0
|
@ -805,7 +805,7 @@ static struct kset *kset_create(const char *name,
|
|||
kset = kzalloc(sizeof(*kset), GFP_KERNEL);
|
||||
if (!kset)
|
||||
return NULL;
|
||||
retval = kobject_set_name(&kset->kobj, name);
|
||||
retval = kobject_set_name(&kset->kobj, "%s", name);
|
||||
if (retval) {
|
||||
kfree(kset);
|
||||
return NULL;
|
||||
|
|
Loading…
Reference in New Issue
Block a user