RI Development to main by jacob-ronstadt · Pull Request #181 · microsoft/Windows-Driver-Developer-Supplemental-Tools

jacob-ronstadt · 2025-07-14T23:51:22Z

Checklist for Pull Requests

Description is filled out.
Only one query or related query group is in this pull request.
The version number on changed queries has been increased via the @version comment in the file header.
All unit tests have been run: (Test README.md).
Commands codeql database create and codeql database analyze have completed successfully.
A .qhelp file has been added for any new queries or updated if changes have been made to an existing query.

* Update build-codeql.yaml test codeql action Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml manual download Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml add back yest of build step Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml try all jobs Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml test all jobs Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml dvl tests Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Add files via upload Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Create readme Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * restructure * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * add test projects * Update dvl_tests.ps1 Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update dvl_tests.ps1 Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update dvl_tests.ps1 Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update dvl_tests.ps1 Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update dvl_tests.ps1 Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * update build_create_analyze_test.py to fail when different results are found * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * change when results get uploaded * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * fix exit code * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * update to use driver_snippet.c instead of other driver projects * add template path variable * fix path * fix path * test * fix template path * test * update template project to have arm configuration * fix msbuild command * fix driver_snippet.c * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * print results location * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * fix sarif copy and compare sarif results * add expected sarif results * Delete src/drivers/test/dvl_tests/readme Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

* Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * test secret condition without deleting secret Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml change condition back Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml test env Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml test env Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml fail test-codeql-latest-vs-current if prev job fails Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * Update build-codeql.yaml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

…cts (#110) * init commit * moved files around added the snippets * I think this fixes the build * update the WFP library to be more robust. Driver_snippets still need some edits * Update the ID path * fixes build issue * attempt 2 * forgot () added them * fix spelling * updated ID path and hopefully fixed the last compile error * I had another typo, this should fix it * changes the id property * lowercase letters * synced the forked made name change to one query * other name edit --------- Co-authored-by: Elaine Houha <elhouha@microsoft.com>

This reverts commit c282407.

* WIP C28129 * C28129 * add sarif file and update diff file * update id and move out of experimental * add query to ported ca checks suite --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

* C28133 * add query to ported ca checks suite --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

* codeql port of c28151 * Update IrqlIllegalValue.ql Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

codeql port of C28730

Port of C28162

* WIP C28161 * port of C28161 * move from kmdf to wdm * remove old files

* port of C28132 * update to remove false positives

* port of C28716 * add other bool types

* port of C29715 * add other bool types

* port of C28714 * improve query * add other bool types * update name

* C28101 * add query to ported ca checks suite * specifically check for driver_initialize --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

* codeql port of C28165 * update query to also work with typedef types and _use_decl_annotations_ * update sarif

* WIP FloatHardwareStateProtection * FloatHardwareStateProtection.ql TODO test on samples * add more control flow * add query to ported ca checks suite * move from kmdf to wdm. add sarif file. * fix output message * resolve todos

* C28131 * updates to ql * update id and move out of experimental * add query to ported ca checks suite * update to also check for local pointers to structs --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

* port of C28114, Copying a whole IRP stack entry * update unit tests * fix ql name * update id and move out of experimental * add query to ported ca checks suite * fix sarif file --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

@kind

* WIP driver isolation * WIP driver isolation. add zw* using non-null rootdirectory * add flow config for OK open reg key functions? * query finds Zw* isolation function use where OBJECT_ATTRIBUTES has non-null RootDirectory AND the RootDirectory didn't come from allowed function * WIP null rootdir * WIP null rootdir * WIP split into read/write accesses * Preliminary query * fix zwRead and zwWrite predicates * fix null root dir * bug fixes and add test cases * query improvements and tests * flow update * add tests and small query improvements * add exceptions * add extra barriers to flow * refactor query and fix barriers in dataflow * update qhelp files and queries and tests * fix comment * query improvements * WIP query updates * bug fixes and improvements * fix exception for SERIALCOMM to also match as prefix * allow handles that are relative to handles obtained from approved ddi * add recursive check for allowed handle source * change @kind from path-problem for debugging to problem * update select message * update zw violation 2 * small fix * add allowed handle source to driverisolation.qll and zwviolation2. update zwViolation1 to use lib * improve query * query updates * update query to remove potential true results * WIP wdf isolation * move isolation queries to experimental * update config file * Update codeql-config.yml Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> * remove wdf WIP query for dev * update version of qlpack * update driver_snippet --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

* Suite updates to add additional queries * update windows_driver_mustfix.qls * update readme * qlpack version update * update query packs * update github action * update query suites with missing query * update version * sort query suites * add missing queries * Fix opaqueid fields. For some reason opaque-id causes issues with sarif reader. * fix changed file

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

* Revert must-fix to current requirements. Make recommended contain what next mustfix will. Make mustrun suite. * update version * remove old suite files * update dependency versions. update dvl_tests.ps1 for changed mustfix suite name * fix version number in suites * update qlpack version

* Revert must-fix to current requirements. Make recommended contain what next mustfix will. Make mustrun suite. * update version * remove old suite files * Updating documentation for new version * update dependency versions. update dvl_tests.ps1 for changed mustfix suite name * fix version number in suites * update qlpack version * update readme * update qlpack dependency versions --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

* fixing azure file upload * testing * fix pack version check * only compare detailed results * bug fix * use more threads with codeql * save latest version if the results are the same * testing * add manual publish workflow

* suppress breaking change warning. NA because we don't get the output from set-azstoragefilecontent * move float safe/unsafe queries to kmdf folder and fix output strings * move float safe/unsafe queries to kmdf folder and fix output strings

* Improve replacement recommendations in ExtendedDeprecatedApis * Bump query version

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

* update mustfix and recommended suites * bug fix --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

jacob-ronstadt · 2025-07-16T19:48:22Z

Fixed an upload issue with the query health tracker script and validated the reason it is failing is not blocking.

jacob-ronstadt and others added 30 commits May 24, 2024 10:05

Update build-codeql.yaml to allow publish step to fail for outside PRs

468e003

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Update build-codeql.yaml (#141)

ac8f77f

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

codeql port of C28648. TODO needs tests

c282407

Revert "codeql port of C28648. TODO needs tests"

ce7d70c

This reverts commit c282407.

OperandAssignment: CodeQL Port of C28129 (#121)

c15579b

* WIP C28129 * C28129 * add sarif file and update diff file * update id and move out of experimental * add query to ported ca checks suite --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

IoInitializeTimerCall: CodeQL port of C28133 (#123)

540f0d4

* C28133 * add query to ported ca checks suite --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

IrqlIllegalValue: CodeQL port of c28151 (#144)

c2febb9

* codeql port of c28151 * Update IrqlIllegalValue.ql Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com> --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

NullPointerCharacterAssignment: CodeQL port of C28730 (#146)

c8369c9

codeql port of C28730

FloatSafeExit: CodeQL port of C28162 (#147)

786fda0

Port of C28162

FloatUnsafeExit: CodeQL port of C28161 (#148)

9dc8063

* WIP C28161 * port of C28161 * move from kmdf to wdm * remove old files

PointerVariableSize: CodeQL port of C28132 (#143)

f227ac0

* port of C28132 * update to remove false positives

NtstatusExplicitCast3: CodeQL port of C28716 (#151)

735f49f

* port of C28716 * add other bool types

NtstatusExplicitCast2: CodeQL port of C29715 (#150)

d71fb93

* port of C29715 * add other bool types

NtstatusExplicitCast: CodeQL port of C28714 (#149)

3165575

* port of C28714 * improve query * add other bool types * update name

CurrentFunctionTypeNotCorrect: CodeQL port of C28101 (#124)

7edf413

* C28101 * add query to ported ca checks suite * specifically check for driver_initialize --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

InvalidFunctionPointerAnnotation: CodeQL port of C28165 (#145)

4eab8e3

* codeql port of C28165 * update query to also work with typedef types and _use_decl_annotations_ * update sarif

update ported_driver_ca_checks.qls with new queries

e5c16d7

fix typo

713331e

updates to test script

60874fd

update config file to include other isolation queries

129bcb5

update build script

39f0f5d

update sarif files for isolation queries

0c54c94

Update codeql-config.yml

9c1627b

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

jacob-ronstadt and others added 18 commits February 21, 2025 08:51

Add possible false positive note to DriverEntrySaveBuffer.qhelp

335b284

remove non-SAL parameters due to false positives

880c39a

update message

8455a12

update test results to match query update

d99af75

fix query id

1bde64e

Update codeql-config.yml

0ba716b

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Update codeql-config.yml

c88a2a1

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Update codeql-config.yml

4f04d8c

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Update codeql-config.yml

06ef37d

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Update codeql-config.yml

4246e2a

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Update README.md

03de642

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Actions azure file storage fix (#176)

35b9f55

* fixing azure file upload * testing * fix pack version check * only compare detailed results * bug fix * use more threads with codeql * save latest version if the results are the same * testing * add manual publish workflow

Fix query health action (#177)

35d8ba7

* suppress breaking change warning. NA because we don't get the output from set-azstoragefilecontent * move float safe/unsafe queries to kmdf folder and fix output strings * move float safe/unsafe queries to kmdf folder and fix output strings

Improve recommendations in ExtendedDeprecatedApis for strlen (#179)

df3da19

* Improve replacement recommendations in ExtendedDeprecatedApis * Bump query version

Merge branch 'main' into development

4700593

jacob-ronstadt requested a review from JakobL-MSFT July 14, 2025 23:51

jacob-ronstadt added 3 commits July 14, 2025 16:52

update mustfix and recommended suites (#182)

e6e6eb1

Merge branch 'main' into development

37d0652

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Jacob ronstadt/mustfix updates (#183)

452fd53

* update mustfix and recommended suites * bug fix --------- Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

JakobL-MSFT approved these changes Jul 15, 2025

View reviewed changes

jacob-ronstadt added 2 commits July 16, 2025 11:18

Update build-codeql.yaml

631ffa2

Signed-off-by: Jacob Ronstadt <147542405+jacob-ronstadt@users.noreply.github.com>

Merge branch 'main' into development

acb9614

add back old suite files for backward compatibility

d0df031

jacob-ronstadt requested a review from JakobL-MSFT July 16, 2025 19:57

JakobL-MSFT approved these changes Jul 16, 2025

View reviewed changes

jacob-ronstadt merged commit b27f1a4 into main Jul 16, 2025
3 checks passed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

RI Development to main#181

RI Development to main#181
jacob-ronstadt merged 87 commits into
mainfrom
development

jacob-ronstadt commented Jul 14, 2025

Uh oh!

jacob-ronstadt commented Jul 16, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants

Conversation

jacob-ronstadt commented Jul 14, 2025

Checklist for Pull Requests

Uh oh!

jacob-ronstadt commented Jul 16, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

4 participants