summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDenys Vlasenko2014-11-20 18:24:33 +0100
committerDenys Vlasenko2014-11-20 18:24:33 +0100
commit4e314faa0aecb66717418e9a47a4451aec59262b (patch)
tree2cd9ecfef1a5cb293d97fbdc026b7fd82fed3148
parentf5add44981b43490376ea0dfed1420dba09a3a75 (diff)
downloadbusybox-4e314faa0aecb66717418e9a47a4451aec59262b.zip
busybox-4e314faa0aecb66717418e9a47a4451aec59262b.tar.gz
modprobe,rmmod: reject module names with slashes
function old new delta add_probe 86 113 +27 Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
-rw-r--r--modutils/modprobe.c11
1 files changed, 11 insertions, 0 deletions
diff --git a/modutils/modprobe.c b/modutils/modprobe.c
index f08f085..f090428 100644
--- a/modutils/modprobe.c
+++ b/modutils/modprobe.c
@@ -238,6 +238,17 @@ static void add_probe(const char *name)
{
struct module_entry *m;
+ /*
+ * get_or_add_modentry() strips path from name and works
+ * on remaining basename.
+ * This would make "rmmod dir/name" and "modprobe dir/name"
+ * to work like "rmmod name" and "modprobe name",
+ * which is wrong, and can be abused via implicit modprobing:
+ * "ifconfig /usbserial up" tries to modprobe netdev-/usbserial.
+ */
+ if (strchr(name, '/'))
+ bb_error_msg_and_die("malformed module name '%s'", name);
+
m = get_or_add_modentry(name);
if (!(option_mask32 & (OPT_REMOVE | OPT_SHOW_DEPS))
&& (m->flags & MODULE_FLAG_LOADED)