From: David Woodhouse <dwmw2@shinybook.infradead.org>
Date: Mon, 23 May 2005 20:57:41 +0000 (+0100)
Subject: AUDIT: Escape comm when logging task info
X-Git-Tag: v2.6.14-rc2~49^2~44
X-Git-Url: http://ftp.safe.ca/?a=commitdiff_plain;h=99e45eeac867d51ff3395dcf3d7aedf5ac2812c8;p=safe%2Fjmp%2Flinux-2.6

AUDIT: Escape comm when logging task info

It comes from the user; it needs to be escaped.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
---

diff --git a/kernel/auditsc.c b/kernel/auditsc.c
index 5fc4f52..b45677e 100644
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -650,7 +650,8 @@ static void audit_log_task_info(struct audit_buffer *ab)
 	struct vm_area_struct *vma;
 
 	get_task_comm(name, current);
-	audit_log_format(ab, " comm=%s", name);
+	audit_log_format(ab, " comm=");
+	audit_log_untrustedstring(ab, name);
 
 	if (!mm)
 		return;