Re: [PATCH] gpiolib: avoid format string weakness in workqueue interface

From: Bartosz Golaszewski
Date: Thu Oct 31 2024 - 08:44:50 EST


From: Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxx>


On Mon, 28 Oct 2024 14:21:46 +0000, Arnd Bergmann wrote:
> Using a string literal as a format string is a possible bug when the
> string contains '%' characters:
>
> drivers/gpio/gpiolib-cdev.c:2813:48: error: format string is not a string literal (potentially insecure) [-Werror,-Wformat-security]
> 2813 | gdev->line_state_wq = alloc_ordered_workqueue(dev_name(&gdev->dev),
> | ^~~~~~~~~~~~~~~~~~~~
> drivers/gpio/gpiolib-cdev.c:2813:48: note: treat the string as an argument to avoid this
> 2813 | gdev->line_state_wq = alloc_ordered_workqueue(dev_name(&gdev->dev),
> | ^
> | "%s",
>
> [...]

Applied, thanks!

[1/1] gpiolib: avoid format string weakness in workqueue interface
commit: a22c9dc26d6fc522357b73858b13e29c58f49d64

Best regards,
--
Bartosz Golaszewski <bartosz.golaszewski@xxxxxxxxxx>