DF-2306
Unconditional PCI vendor/device ID disclosure to console in probe routine
Summary
The generic-class fallthrough in fwohci_pci_probe unconditionally prints PCI vendor and device IDs to system console via device_printf without any bootverbose or firewire_debug guard. Inconsistent with specific-ID matches above (which only call device_set_desc) and leaks hardware identifying information on every boot for any OHCI-1394 controller not in hard-coded list. Hardening/info-disclosure issue.
No comments yet.