disk: ubi: use a format string when copying the volume name

part_get_info_ubi() passes the UBI volume name straight to snprintf() as
its format argument:

	snprintf(info->name, PART_NAME_LEN, vol->name);

A volume name that contains a '%' is then interpreted as a printf
conversion specifier, yielding a wrong partition name or reading
unintended variadic arguments; a '%n' would be undefined behaviour.
Volume names are user-defined and boot methods select images by volume
name, so copy the name through a "%s" format instead.

Fixes: aa5b67ce2262 ("disk: support UBI partitions")
Signed-off-by: Daniel Golle <[email protected]>
Reviewed-by: Heiko Schocher <[email protected]>

0 files changed, 0 insertions, 0 deletions