diff options
| author | Alban Crequy <alban.crequy@collabora.co.uk> | 2014-08-18 12:20:20 +0100 |
|---|---|---|
| committer | Ben Hutchings <ben@decadent.org.uk> | 2014-11-05 20:27:39 +0000 |
| commit | 9e55f15dff80cadac01296cbf805ee0fb414ff58 (patch) | |
| tree | 536e301fdd9f51bc60da15931c86461061aea529 /kernel | |
| parent | ba895cc68b8cd42daa559576783af546fd79d59b (diff) | |
| download | kernel_samsung_smdk4412-9e55f15dff80cadac01296cbf805ee0fb414ff58.zip kernel_samsung_smdk4412-9e55f15dff80cadac01296cbf805ee0fb414ff58.tar.gz kernel_samsung_smdk4412-9e55f15dff80cadac01296cbf805ee0fb414ff58.tar.bz2 | |
cgroup: reject cgroup names with '
'
commit 71b1fb5c4473a5b1e601d41b109bdfe001ec82e0 upstream.
/proc/<pid>/cgroup contains one cgroup path on each line. If cgroup names are
allowed to contain "\n", applications cannot parse /proc/<pid>/cgroup safely.
Signed-off-by: Alban Crequy <alban.crequy@collabora.co.uk>
Signed-off-by: Tejun Heo <tj@kernel.org>
[bwh: Backported to 3.2:
- Adjust context
- We have to get the name from the dentry pointer]
Signed-off-by: Ben Hutchings <ben@decadent.org.uk>
Diffstat (limited to 'kernel')
| -rw-r--r-- | kernel/cgroup.c | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/kernel/cgroup.c b/kernel/cgroup.c index 93fc15e..ffcf896 100644 --- a/kernel/cgroup.c +++ b/kernel/cgroup.c @@ -3871,6 +3871,11 @@ static int cgroup_mkdir(struct inode *dir, struct dentry *dentry, int mode) { struct cgroup *c_parent = dentry->d_parent->d_fsdata; + /* Do not accept '\n' to prevent making /proc/<pid>/cgroup unparsable. + */ + if (strchr(dentry->d_name.name, '\n')) + return -EINVAL; + /* the vfs holds inode->i_mutex already */ return cgroup_create(c_parent, dentry, mode | S_IFDIR); } |