Jens Remus 91509973fe zdev: Do not pass user input as format string ...

The function util_path_exists() consumes its first parameter as format
string. Passing the user input specified to the chzdev option --export
as-is to the function opens up the possibility for a format string
injection.

Fixes: d542138868 ("zdev: use libutil provided path functions")
Signed-off-by: Jens Remus <jremus@linux.ibm.com>
Reviewed-by: Peter Oberparleiter <oberpar@linux.ibm.com>
Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>

2019-07-09 16:24:17 +02:00

..

dracut

zdev: Implement support for early device configuration

2018-06-08 15:03:30 +02:00

include

zdev: Copy strings correctly using util_strlcpy()

2018-11-16 15:19:48 +01:00

initramfs

zdev/initramfs: add s390-tools- prefix to hook, due to conflicts.

2018-10-19 15:31:54 +02:00

man

zdev: Implement support for early device configuration

2018-06-08 15:03:30 +02:00

src

zdev: Do not pass user input as format string

2019-07-09 16:24:17 +02:00

Makefile

zdev: Integrate firmware auto-configuration with initramfs-tools

2018-06-08 15:03:30 +02:00