summaryrefslogtreecommitdiff
path: root/kernel
diff options
context:
space:
mode:
authorKees Cook <keescook@chromium.org>2013-07-03 15:04:58 -0700
committerChanho Park <chanho61.park@samsung.com>2014-08-08 15:20:52 +0900
commit353b671e7ccedfea9f36e9fd20d7c776bb09b961 (patch)
tree4b4bdeb1086dd056549ecb079bbeac21b91996b5 /kernel
parent4b3f31b470acf4ed1f069607be42f5bbb7ae4007 (diff)
downloadlinux-3.10-353b671e7ccedfea9f36e9fd20d7c776bb09b961.tar.gz
linux-3.10-353b671e7ccedfea9f36e9fd20d7c776bb09b961.tar.bz2
linux-3.10-353b671e7ccedfea9f36e9fd20d7c776bb09b961.zip
upstream: drivers: avoid parsing names as kthread_run() format strings
Calling kthread_run with a single name parameter causes it to be handled as a format string. Many callers are passing potentially dynamic string content, so use "%s" in those cases to avoid any potential accidents. Signed-off-by: Kees Cook <keescook@chromium.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
Diffstat (limited to 'kernel')
-rw-r--r--kernel/rcutree.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/kernel/rcutree.c b/kernel/rcutree.c
index 35380019f0f..131b2fb5442 100644
--- a/kernel/rcutree.c
+++ b/kernel/rcutree.c
@@ -3120,7 +3120,7 @@ static int __init rcu_spawn_gp_kthread(void)
struct task_struct *t;
for_each_rcu_flavor(rsp) {
- t = kthread_run(rcu_gp_kthread, rsp, rsp->name);
+ t = kthread_run(rcu_gp_kthread, rsp, "%s", rsp->name);
BUG_ON(IS_ERR(t));
rnp = rcu_get_root(rsp);
raw_spin_lock_irqsave(&rnp->lock, flags);