drivers: avoid parsing names as kthread_run() format strings
Calling kthread_run with a single name parameter causes it to be handled as a format string. Many callers are passing potentially dynamic string content, so use "%s" in those cases to avoid any potential accidents. Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
这个提交包含在:
@@ -1893,7 +1893,8 @@ static int airo_open(struct net_device *dev) {
|
||||
|
||||
if (ai->wifidev != dev) {
|
||||
clear_bit(JOB_DIE, &ai->jobs);
|
||||
ai->airo_thread_task = kthread_run(airo_thread, dev, dev->name);
|
||||
ai->airo_thread_task = kthread_run(airo_thread, dev, "%s",
|
||||
dev->name);
|
||||
if (IS_ERR(ai->airo_thread_task))
|
||||
return (int)PTR_ERR(ai->airo_thread_task);
|
||||
|
||||
|
在新工单中引用
屏蔽一个用户