diff options
| author | Thomas Zimmermann <tzimmermann@suse.de> | 2026-09-11 14:43:54 +0200 |
|---|---|---|
| committer | Thomas Zimmermann <tzimmermann@suse.de> | 2026-09-17 09:16:25 +0200 |
| commit | 6596aae25585b183ebd528206bde6f12efaf8db1 (patch) | |
| tree | f3a60c337be9071f8deb54d1f388e38b06253c9d /tools/perf/scripts/python/flamegraph.py | |
| parent | 5589ef09f93b85b6f506e279a502d4cf1654f232 (diff) | |
| download | linux-6596aae25585b183ebd528206bde6f12efaf8db1.tar.gz linux-6596aae25585b183ebd528206bde6f12efaf8db1.zip | |
drm/panic: Do not use un-escaped URL as format string
Replace the direct use of DRM_PANIC_SCREEN_QR_CODE_URL in snprintf()
with a %s conversion specifier. Avoids a possible vulnerabilty from
a crafted URL string.
As the attacker needs to control the kernel at the Kconfig level, the
potential for an exploit is likely low.
Signed-off-by: Thomas Zimmermann <tzimmermann@suse.de>
Reviewed-by: Jocelyn Falempe <jfalempe@redhat.com>
Fixes: cb5164ac43d0 ("drm/panic: Add a QR code panic screen")
Cc: Javier Martinez Canillas <javierm@redhat.com>
Cc: Jocelyn Falempe <jfalempe@redhat.com>
Cc: dri-devel@lists.freedesktop.org
Cc: <stable@vger.kernel.org> # v6.12+
Link: https://patch.msgid.link/20260911124540.279841-2-tzimmermann@suse.de
Diffstat (limited to 'tools/perf/scripts/python/flamegraph.py')
0 files changed, 0 insertions, 0 deletions