From: Arnd Bergmann <a...@arndb.de>

Passing a variable string as a printf style format is potentially
dangerous that -Wformat-security can warn about if enabled. A new
instance just got added:

drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c: In function 'dpu_kms_mdp_snapshot':
drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c:1046:49: error: format not a string 
literal and no format arguments [-Werror=format-security]
 1046 |                                             vbif->name);
      |                                             ~~~~^~~~~~

Fix this one and the preexisting -Wformat-security warnings the in the
DRM code for snapdragon.

Fixes: 1a40bb31fcf1 ("drm/msm/dpu: Add VBIF to DPU snapshot") # and others
Signed-off-by: Arnd Bergmann <a...@arndb.de>
---
I have a larger series that I still plan to send eventually, sending this
one now as I just saw another one get added. The warning is enabled by
default because there are still over 100 other files with the same problem.
---
 drivers/gpu/drm/msm/adreno/a6xx_gmu.c   |  2 +-
 drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 28 ++++++++++++++++---------
 2 files changed, 19 insertions(+), 11 deletions(-)

diff --git a/drivers/gpu/drm/msm/adreno/a6xx_gmu.c 
b/drivers/gpu/drm/msm/adreno/a6xx_gmu.c
index 14db7376c712..fac3128695c6 100644
--- a/drivers/gpu/drm/msm/adreno/a6xx_gmu.c
+++ b/drivers/gpu/drm/msm/adreno/a6xx_gmu.c
@@ -1265,7 +1265,7 @@ static int a6xx_gmu_memory_alloc(struct a6xx_gmu *gmu, 
struct a6xx_gmu_bo *bo,
        bo->virt = msm_gem_get_vaddr(bo->obj);
        bo->size = size;
 
-       msm_gem_object_set_name(bo->obj, name);
+       msm_gem_object_set_name(bo->obj, "%s", name);
 
        return 0;
 }
diff --git a/drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c 
b/drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c
index dae8a94d3366..cdd6379545d2 100644
--- a/drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c
+++ b/drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c
@@ -938,12 +938,14 @@ static void dpu_kms_mdp_snapshot(struct msm_disp_state 
*disp_state, struct msm_k
        /* dump CTL sub-blocks HW regs info */
        for (i = 0; i < cat->ctl_count; i++)
                msm_disp_snapshot_add_block(disp_state, cat->ctl[i].len,
-                               dpu_kms->mmio + cat->ctl[i].base, 
cat->ctl[i].name);
+                               dpu_kms->mmio + cat->ctl[i].base, "%s",
+                               cat->ctl[i].name);
 
        /* dump DSPP sub-blocks HW regs info */
        for (i = 0; i < cat->dspp_count; i++) {
                base = dpu_kms->mmio + cat->dspp[i].base;
-               msm_disp_snapshot_add_block(disp_state, cat->dspp[i].len, base, 
cat->dspp[i].name);
+               msm_disp_snapshot_add_block(disp_state, cat->dspp[i].len, base,
+                                           "%s", cat->dspp[i].name);
 
                if (cat->dspp[i].sblk && cat->dspp[i].sblk->pcc.len > 0)
                        msm_disp_snapshot_add_block(disp_state, 
cat->dspp[i].sblk->pcc.len,
@@ -955,13 +957,14 @@ static void dpu_kms_mdp_snapshot(struct msm_disp_state 
*disp_state, struct msm_k
        /* dump INTF sub-blocks HW regs info */
        for (i = 0; i < cat->intf_count; i++)
                msm_disp_snapshot_add_block(disp_state, cat->intf[i].len,
-                               dpu_kms->mmio + cat->intf[i].base, 
cat->intf[i].name);
+                               dpu_kms->mmio + cat->intf[i].base, "%s",
+                               cat->intf[i].name);
 
        /* dump PP sub-blocks HW regs info */
        for (i = 0; i < cat->pingpong_count; i++) {
                base = dpu_kms->mmio + cat->pingpong[i].base;
                msm_disp_snapshot_add_block(disp_state, cat->pingpong[i].len, 
base,
-                                           cat->pingpong[i].name);
+                                           "%s", cat->pingpong[i].name);
 
                /* TE2 sub-block has length of 0, so will not print it */
 
@@ -975,7 +978,8 @@ static void dpu_kms_mdp_snapshot(struct msm_disp_state 
*disp_state, struct msm_k
        /* dump SSPP sub-blocks HW regs info */
        for (i = 0; i < cat->sspp_count; i++) {
                base = dpu_kms->mmio + cat->sspp[i].base;
-               msm_disp_snapshot_add_block(disp_state, cat->sspp[i].len, base, 
cat->sspp[i].name);
+               msm_disp_snapshot_add_block(disp_state, cat->sspp[i].len, base,
+                                           "%s", cat->sspp[i].name);
 
                if (cat->sspp[i].sblk && cat->sspp[i].sblk->scaler_blk.len > 0)
                        msm_disp_snapshot_add_block(disp_state, 
cat->sspp[i].sblk->scaler_blk.len,
@@ -993,12 +997,14 @@ static void dpu_kms_mdp_snapshot(struct msm_disp_state 
*disp_state, struct msm_k
        /* dump LM sub-blocks HW regs info */
        for (i = 0; i < cat->mixer_count; i++)
                msm_disp_snapshot_add_block(disp_state, cat->mixer[i].len,
-                               dpu_kms->mmio + cat->mixer[i].base, 
cat->mixer[i].name);
+                               dpu_kms->mmio + cat->mixer[i].base,
+                               "%s", cat->mixer[i].name);
 
        /* dump WB sub-blocks HW regs info */
        for (i = 0; i < cat->wb_count; i++)
                msm_disp_snapshot_add_block(disp_state, cat->wb[i].len,
-                               dpu_kms->mmio + cat->wb[i].base, 
cat->wb[i].name);
+                               dpu_kms->mmio + cat->wb[i].base, "%s",
+                               cat->wb[i].name);
 
        if (cat->mdp[0].features & BIT(DPU_MDP_PERIPH_0_REMOVED)) {
                msm_disp_snapshot_add_block(disp_state, MDP_PERIPH_TOP0,
@@ -1013,7 +1019,8 @@ static void dpu_kms_mdp_snapshot(struct msm_disp_state 
*disp_state, struct msm_k
        /* dump DSC sub-blocks HW regs info */
        for (i = 0; i < cat->dsc_count; i++) {
                base = dpu_kms->mmio + cat->dsc[i].base;
-               msm_disp_snapshot_add_block(disp_state, cat->dsc[i].len, base, 
cat->dsc[i].name);
+               msm_disp_snapshot_add_block(disp_state, cat->dsc[i].len, base,
+                                           "%s", cat->dsc[i].name);
 
                if (cat->dsc[i].features & BIT(DPU_DSC_HW_REV_1_2)) {
                        struct dpu_dsc_blk enc = cat->dsc[i].sblk->enc;
@@ -1028,14 +1035,15 @@ static void dpu_kms_mdp_snapshot(struct msm_disp_state 
*disp_state, struct msm_k
 
        if (cat->cdm)
                msm_disp_snapshot_add_block(disp_state, cat->cdm->len,
-                                           dpu_kms->mmio + cat->cdm->base, 
cat->cdm->name);
+                                           dpu_kms->mmio + cat->cdm->base,
+                                           "%s", cat->cdm->name);
 
        for (i = 0; i < dpu_kms->catalog->vbif_count; i++) {
                const struct dpu_vbif_cfg *vbif = &dpu_kms->catalog->vbif[i];
 
                msm_disp_snapshot_add_block(disp_state, vbif->len,
                                            dpu_kms->vbif[vbif->id] + 
vbif->base,
-                                           vbif->name);
+                                           "%s", vbif->name);
        }
 
        pm_runtime_put_sync(&dpu_kms->pdev->dev);
-- 
2.39.5

Reply via email to