From 2b08433100ece77f3b433c6c48bd83a78e35cffe Mon Sep 17 00:00:00 2001 From: John Crispin Date: Wed, 11 Jun 2014 12:59:15 +0000 Subject: kernel: backport the ubiblock patches from 3.14->3.10 Signed-off-by: John Crispin git-svn-id: svn://svn.openwrt.org/openwrt/trunk@41120 3c298f89-4303-0410-b956-a3cf2f4a3e73 --- ...46-UBI-avoid-workqueue-format-string-leak.patch | 30 ++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 target/linux/generic/patches-3.10/046-UBI-avoid-workqueue-format-string-leak.patch (limited to 'target/linux/generic/patches-3.10/046-UBI-avoid-workqueue-format-string-leak.patch') diff --git a/target/linux/generic/patches-3.10/046-UBI-avoid-workqueue-format-string-leak.patch b/target/linux/generic/patches-3.10/046-UBI-avoid-workqueue-format-string-leak.patch new file mode 100644 index 0000000000..86f0d63cd4 --- /dev/null +++ b/target/linux/generic/patches-3.10/046-UBI-avoid-workqueue-format-string-leak.patch @@ -0,0 +1,30 @@ +From bebfef150e0b8fa68704cddacf05b8c26462d565 Mon Sep 17 00:00:00 2001 +From: Kees Cook +Date: Mon, 7 Apr 2014 21:44:07 -0700 +Subject: [PATCH] UBI: avoid workqueue format string leak + +When building the name for the workqueue thread, make sure a format +string cannot leak in from the disk name. + +Signed-off-by: Kees Cook +Signed-off-by: Artem Bityutskiy +--- + drivers/mtd/ubi/block.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/drivers/mtd/ubi/block.c b/drivers/mtd/ubi/block.c +index 7ff473c..8d659e6 100644 +--- a/drivers/mtd/ubi/block.c ++++ b/drivers/mtd/ubi/block.c +@@ -431,7 +431,7 @@ int ubiblock_create(struct ubi_volume_info *vi) + * Create one workqueue per volume (per registered block device). + * Rembember workqueues are cheap, they're not threads. + */ +- dev->wq = alloc_workqueue(gd->disk_name, 0, 0); ++ dev->wq = alloc_workqueue("%s", 0, 0, gd->disk_name); + if (!dev->wq) + goto out_free_queue; + INIT_WORK(&dev->work, ubiblock_do_work); +-- +1.9.2 + -- cgit v1.2.3