On Sat, 15 Aug 2026 16:08:45 +0100, Daniel Golle wrote:
> part_get_info_ubi() passes the UBI volume name straight to snprintf() as
> its format argument:
>
> snprintf(info->name, PART_NAME_LEN, vol->name);
>
> A volume name that contains a '%' is then interpreted as a printf
> conversion specifier, yielding a wrong partition name or reading
> unintended variadic arguments; a '%n' would be undefined behaviour.
> Volume names are user-defined and boot methods select images by volume
> name, so copy the name through a "%s" format instead.
>
> [...]
Applied to u-boot/main, thanks!
[1/1] disk: ubi: use a format string when copying the volume name
commit: fb79a4fcb09b49c6d6ef0a9a030e1abef32358e9
--
Tom
