AUDIT: Escape comm when logging task info

It comes from the user; it needs to be escaped.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>

1 files changed, 2 insertions, 1 deletions

diff --git a/kernel/auditsc.c b/kernel/auditsc.c
index 5fc4f52d218f..b45677eba78f 100644
--- a/kernel/auditsc.c
+++ b/kernel/auditsc.c
@@ -650,7 +650,8 @@ static void audit_log_task_info(struct audit_buffer *ab)
         struct vm_area_struct *vma;
 
         get_task_comm(name, current);
-        audit_log_format(ab, " comm=%s", name);
+        audit_log_format(ab, " comm=");
+        audit_log_untrustedstring(ab, name);
 
         if (!mm)
                 return;