Skip to content

Commit 2d834e7

Browse files
committed
Update QLPack version and changelog.
1 parent ceff475 commit 2d834e7

3 files changed

Lines changed: 19 additions & 1 deletion

File tree

CHANGELOG.md

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,19 @@
22
# Change Log
33
All notable changes to this project will be documented in this file.
44

5+
## [1.9.0] - 2026-02-27
6+
7+
### Added
8+
- Added five new queries in the Microsoft subfolder. These queries are now part of our recommended and must-run sets.
9+
- ConditionallyUninitializedVariableAutomation.ql: Flags calls to initialization functions whose return status is not checked, potentially leaving a local variable uninitialized.
10+
- UnprobedDereference.ql: Detects dereferences of user-provided pointers that haven't been probed first, which could cause access violations.
11+
- UserModeMemoryOutsideTry.ql: Finds reads of user-mode memory that occur outside a try/catch block, where unexpected exceptions from changed memory protections could crash the kernel.
12+
- UserModeMemoryReadMultipleTimes.ql: identifies double-fetch vulnerabilities where user-mode memory is read more than once without being copied to kernel memory first.
13+
- UnguardedNullReturnDereference.ql: Reports dereferences of return values from calls that may return NULL (e.g. heap allocations) without a preceding null check.
14+
15+
### Changed
16+
- Standardized the rule ID of UninitializedPtrField.ql to "cpp/microsoft/public/likely-bugs/uninitializedptrfield" and updated accuracy.
17+
518
## [1.8.3] - 2026-02-25
619

720
### Changed

src/qlpack.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ library: false
55
warnOnImplicitThis: false
66
compileForOverlayEval: false
77
name: microsoft/windows-drivers
8-
version: 1.8.3
8+
version: 1.9.0
99
description: CodeQL queries designed for Windows device driver development.
1010
dependencies:
1111
codeql/cpp-all: ^7.0.0

src/windows-driver-suites/recommended.qls

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,12 @@
5454
- microsoft/Likely Bugs/Boundary Violations/PaddingByteInformationDisclosure.ql
5555
- microsoft/Likely Bugs/Conversion/BadOverflowGuard.ql
5656
- microsoft/Likely Bugs/Conversion/InfiniteLoop.ql
57+
- microsoft/Likely Bugs/Memory Management/ConditionallyUninitializedVariable.ql
58+
- microsoft/Likely Bugs/Memory Management/UnprobedDereference.ql
59+
- microsoft/Likely Bugs/Memory Management/UserModeMemoryOutsideTry.ql
60+
- microsoft/Likely Bugs/Memory Management/UserModeMemoryReadMultipleTimes.ql
5761
- microsoft/Likely Bugs/Memory Management/UseAfterFree/UseAfterFree.ql
62+
- microsoft/Likely Bugs/UnguardedNullReturnDereference.ql
5863
- microsoft/Likely Bugs/UninitializedPtrField.ql
5964
- microsoft/Security/Crytpography/HardcodedIVCNG.ql
6065
- queries: .

0 commit comments

Comments
 (0)