⬢ DragonFlyBSD Kernel Audit
DF-2306 / manifest.json
← back to finding ↓ download raw 
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
{
  "finding_id": "DF-2306",
  "title": "Unconditional PCI vendor/device ID console disclosure in fwohci_pci_probe generic-class fallthrough (fwohci_pci.c:190-191)",
  "verdict": "reproduced",
  "impact": "leak",
  "confidence": "certain",
  "reproduce": {
    "build": "scp -F dfbsd-qemu/config * dfbsd:/root/fwo/ && vm.sh run_root 'sh /root/fwo/fwpci_prep.sh && sh /root/fwo/build_kernel.sh' && vm.sh down && vm.sh up",
    "run": "vm.sh run_root 'sh /root/fwo/run.sh'",
    "expected": "dmesg contains: fwohci6: vendor=1a2b, dev=3c4d  (emitted by the unguarded device_printf at fwohci_pci.c:190-191 for a generic-class 1394 OHCI identity not in the ID table); probe rc=0, desc set"
  },
  "kernel_refs": [
    "sys/bus/firewire/fwohci_pci.c:190-191",
    "sys/bus/firewire/fwohci_pci.c:187-194",
    "sys/bus/firewire/fwohci_pci.c:261-262"
  ],
  "artifacts": [
    "fwpci_harness.c", "fwpci_harness.h", "fwohci_harness.c", "fwohci_harness.h",
    "fwpcictl.c", "fwpci_prep.sh", "build_kernel.sh", "build_fix.sh",
    "run.sh", "run.log", "run_fixed.log", "fix.diff",
    "env.txt", "build.log", "README.md", "VERDICT.md", "manifest.json", "verdict.json"
  ]
}