diff options
| author | Denys Vlasenko | 2014-11-20 18:24:33 +0100 |
|---|---|---|
| committer | Denys Vlasenko | 2014-11-20 18:24:33 +0100 |
| commit | 4e314faa0aecb66717418e9a47a4451aec59262b (patch) | |
| tree | 2cd9ecfef1a5cb293d97fbdc026b7fd82fed3148 /modutils | |
| parent | f5add44981b43490376ea0dfed1420dba09a3a75 (diff) | |
| download | busybox-4e314faa0aecb66717418e9a47a4451aec59262b.zip busybox-4e314faa0aecb66717418e9a47a4451aec59262b.tar.gz | |
modprobe,rmmod: reject module names with slashes
function old new delta
add_probe 86 113 +27
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'modutils')
| -rw-r--r-- | modutils/modprobe.c | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/modutils/modprobe.c b/modutils/modprobe.c index f08f085..f090428 100644 --- a/modutils/modprobe.c +++ b/modutils/modprobe.c @@ -238,6 +238,17 @@ static void add_probe(const char *name) { struct module_entry *m; + /* + * get_or_add_modentry() strips path from name and works + * on remaining basename. + * This would make "rmmod dir/name" and "modprobe dir/name" + * to work like "rmmod name" and "modprobe name", + * which is wrong, and can be abused via implicit modprobing: + * "ifconfig /usbserial up" tries to modprobe netdev-/usbserial. + */ + if (strchr(name, '/')) + bb_error_msg_and_die("malformed module name '%s'", name); + m = get_or_add_modentry(name); if (!(option_mask32 & (OPT_REMOVE | OPT_SHOW_DEPS)) && (m->flags & MODULE_FLAG_LOADED) |