Windows 드라이버 테스트를 위한 CodeQL 쿼리 및 제품군

Microsoft CodeQL GitHub 리포지토리는 Windows 드라이버 개발을 간소화하고 WHCP(Windows 하드웨어 호환성 프로그램)를 준수하도록 하는 두 개의 쿼리 도구 모음을 제공합니다. recommended.qls 제품군에는 드라이버 개발자를 위한 모든 권장 쿼리가 포함되며, mustfix.qls 제품군은 WHCP 인증에 필요한 "반드시 수정해야 하는" 쿼리에 중점을 둡니다. 두 제품군은 정기적으로 업데이트됩니다.

Must-Fix WCHP 인증에 대한 쿼리

다음 쿼리 하위 집합은 WHCP 인증을 위한 Must-Fix 이며 권장 수정 도구 모음에도 포함되어 있습니다.

이 규칙 집합은 mustfix.qls에 포함됩니다.

mustfix.qls 파일에는 다음 필수 수정 코드 쿼리가 포함됩니다.

# Copyright (c) Microsoft Corporation.
# Licensed under the MIT license.

- description: Security queries required to fix when certifying Windows Drivers
- queries: .
  from: codeql/cpp-queries
  version: 0.9.0
- include:
    query path:
      - Likely Bugs/Arithmetic/BadAdditionOverflowCheck.ql
      - Likely Bugs/Memory Management/PointerOverflow.ql
      - Likely Bugs/Underspecified Functions/TooFewArguments.ql
      - Security/CWE/CWE-190/ComparisonWithWiderType.ql
      - Security/CWE/CWE-253/HResultBooleanConversion.ql
- import: windows-driver-suites/windows_mustfix_partial.qls
  from: microsoft/windows-drivers

이 규칙 집합은 windows-driver-suites/windows_mustfix_partial.qls에 포함됩니다.

windows_mustfix_partial.qls 파일에는 다음 필수 수정 코드 쿼리가 포함되어 있습니다.

# Copyright (c) Microsoft Corporation.
# Licensed under the MIT license.

- description: Security queries required to fix when certifying Windows Drivers
- queries: .
  from: microsoft/windows-drivers
- include:
    query path:
      - drivers/general/queries/WdkDeprecatedApis/wdk-deprecated-api.ql
      - microsoft/Security/CWE/CWE-704/WcharCharConversionLimited.ql

권장되는 수정 쿼리

이러한 쿼리는 Microsoft GitHub CodeQL 리포지토리에서 권장되는.qls 쿼리 도구 모음의 일부입니다. "CWE(Common Weakness Enumeration)" 열은 지정된 쿼리가 검색하는 보안 문제의 유형을 식별합니다. CWE에 대한 자세한 내용은 CWE의 Mitre 페이지를 참조하세요.

"CWE(Common Weakness Enumeration)" 열에는 쿼리에서 식별하는 보안 문제 유형이 표시됩니다.

모범 사례

가능성 있는 버그

안전

recommended.qls 파일에는 다음과 같은 권장 코드 쿼리가 포함됩니다.

# Copyright (c) Microsoft Corporation.
# Licensed under the MIT license.

- description: Recommended and required queries for Windows Drivers.
- import: windows-driver-suites/windows_mustfix_partial.qls
  from: microsoft/windows-drivers
- import: windows-driver-suites/windows_recommended_partial.qls
  from: microsoft/windows-drivers
- queries: .
  from: codeql/cpp-queries
  version: 0.9.0
- include:
    query path:
      - Best Practices/Likely Errors/OffsetUseBeforeRangeCheck.ql
      - Likely Bugs/Arithmetic/IntMultToLong.ql
      - Likely Bugs/Arithmetic/SignedOverflowCheck.ql
      - Likely Bugs/Conversion/CastArrayPointerArithmetic.ql
      - Likely Bugs/Likely Typos/IncorrectNotOperatorUsage.ql
      - Likely Bugs/Memory Management/SuspiciousSizeof.ql
      - Likely Bugs/Memory Management/UninitializedLocal.ql
      - Security/CWE/CWE-121/UnterminatedVarargsCall.ql
      - Security/CWE/CWE-457/ConditionallyUninitializedVariable.ql
      - Security/CWE/CWE-468/IncorrectPointerScaling.ql
      - Security/CWE/CWE-468/IncorrectPointerScalingVoid.ql
      - Security/CWE/CWE-468/SuspiciousAddWithSizeof.ql
      - Security/CWE/CWE-676/PotentiallyDangerousFunction.ql
      - Security/CWE/CWE-704/WcharCharConversion.ql
      - Likely Bugs/Arithmetic/BadAdditionOverflowCheck.ql
      - Likely Bugs/Memory Management/PointerOverflow.ql
      - Likely Bugs/Underspecified Functions/TooFewArguments.ql
      - Security/CWE/CWE-190/ComparisonWithWiderType.ql
      - Security/CWE/CWE-253/HResultBooleanConversion.ql

이러한 쿼리는 windows_recommended_partial.qls 쿼리 도구 모음의 일부입니다.

발생 가능성이 있는 버그 - windows_recommended_partial.qls

보안 - windows_recommended_partial.qls

드라이버 - 일반

드라이버 - WDM

windows-driver-suites/windows_recommended_partial.qls 파일에는 다음과 같은 권장 코드 쿼리가 포함됩니다.

# Copyright (c) Microsoft Corporation.
# Licensed under the MIT license.

- description: Recommended and required queries for Windows Drivers.
- import: windows-driver-suites/windows_mustfix_partial.qls
- queries: .
  from: microsoft/windows-drivers
- include:
    query path:
      - microsoft/Likely Bugs/Boundary Violations/PaddingByteInformationDisclosure.ql
      - microsoft/Likely Bugs/Conversion/BadOverflowGuard.ql
      - microsoft/Likely Bugs/Conversion/InfiniteLoop.ql
      - microsoft/Likely Bugs/Memory Management/UseAfterFree/UseAfterFree.ql
      - microsoft/Likely Bugs/UninitializedPtrField.ql
      - microsoft/Security/Crytpography/HardcodedIVCNG.ql
      - drivers/general/queries/KeSetEventPageable/KeSetEventPageable.ql
      - drivers/general/queries/RoleTypeCorrectlyUsed/RoleTypeCorrectlyUsed.ql
      - drivers/general/queries/DefaultPoolTag/DefaultPoolTag.ql
      - drivers/general/queries/ExaminedValue/ExaminedValue.ql
      - drivers/general/queries/ExtendedDeprecatedApis/ExtendedDeprecatedApis.ql
      - drivers/general/queries/IrqlNotSaved/IrqlNotSaved.ql
      - drivers/general/queries/IrqlNotUsed/IrqlNotUsed.ql
      - drivers/general/queries/IrqlTooHigh/IrqlTooHigh.ql
      - drivers/general/queries/IrqlTooLow/IrqlTooLow.ql
      - drivers/general/queries/IrqlSetTooHigh/IrqlTooHigh.ql
      - drivers/general/queries/IrqlSetTooLow/IrqlSetTooLow.ql
      - drivers/general/queries/PoolTagIntegral/PoolTagIntegral.ql
      - drivers/general/queries/StrSafe/StrSafe.ql
      - drivers/wdm/queries/IllegalFieldAccess/IllegalFieldAccess.ql
      - drivers/wdm/queries/IllegalFieldAccess2/IllegalFieldAccess2.ql
      - drivers/wdm/queries/IllegalFieldWrite/IllegalFieldWrite.ql
      - drivers/wdm/queries/OpaqueMdlUse/OpaqueMdlUse.ql
      - drivers/wdm/queries/OpaqueMdlUse/OpaqueMdlWrite.ql
      - drivers/wdm/queries/PendingStatusError/PendingStatusError.ql
      - drivers/wdm/queries/WrongDispatchTableAssignment/WrongDispatchTableAssignment.ql

관련 내용

• 드라이버 코드에서 CodeQL 분석 실행
• CodeQL 개요
• CodeQL FAQ