bsr: avoid format string leaking into device name

This makes sure a format string cannot accidentally leak into a device name.

Signed-off-by: Kees Cook <keescook@chromium.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

diff --git a/drivers/char/bsr.c b/drivers/char/bsr.c
index 8fedbc2..a6cef54 100644 (file)
--- a/drivers/char/bsr.c
+++ b/drivers/char/bsr.c
@@ -259,7 +259,7 @@ static int bsr_add_node(struct device_node *bn)
                }
 
                cur->bsr_device = device_create(bsr_class, NULL, cur->bsr_dev,
-                                               cur, cur->bsr_name);
+                                               cur, "%s", cur->bsr_name);
                if (IS_ERR(cur->bsr_device)) {
                        printk(KERN_ERR "device_create failed for %s\n",
                               cur->bsr_name);