AUDIT: Escape comm when logging task info

It comes from the user; it needs to be escaped.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

diff --git a/kernel/auditsc.c b/kernel/auditsc.c
index 5fc4f52d218fc5b1de7340029706338dc8dc093d..b45677eba78fc61f7b8277cc07f6b12ae42fd356 100644 (file)
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -650,7 +650,8 @@ static void audit_log_task_info(struct audit_buffer *ab)
        struct vm_area_struct *vma;
 
        get_task_comm(name, current);
-       audit_log_format(ab, " comm=%s", name);
+       audit_log_format(ab, " comm=");
+       audit_log_untrustedstring(ab, name);
 
        if (!mm)
                return;