[PATCH] acpi: avoid leaking format string into kobject name
From: Kees Cook
Date: Thu Jan 07 2016 - 14:24:35 EST
The dn->name is expected to be used as a literal, so add the missing
"%s".
Signed-off-by: Kees Cook <keescook@xxxxxxxxxxxx>
---
drivers/acpi/device_sysfs.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/drivers/acpi/device_sysfs.c b/drivers/acpi/device_sysfs.c
index 707cf6213bc2..b9afb47db7ed 100644
--- a/drivers/acpi/device_sysfs.c
+++ b/drivers/acpi/device_sysfs.c
@@ -104,7 +104,7 @@ static void acpi_expose_nondev_subnodes(struct kobject *kobj,
init_completion(&dn->kobj_done);
ret = kobject_init_and_add(&dn->kobj, &acpi_data_node_ktype,
- kobj, dn->name);
+ kobj, "%s", dn->name);
if (ret)
acpi_handle_err(dn->handle, "Failed to expose (%d)\n", ret);
else
--
2.6.3
--
Kees Cook
Chrome OS & Brillo Security