Skip to content

fix: harden and package Windows kernel tools - #1

Merged
FreddyJD merged 8 commits into
mainfrom
fix/driver-input-safety
Sep 14, 2026
Merged

FreddyJD merged 8 commits into
mainfrom
fix/driver-input-safety

Conversation

@FreddyJD

Copy link
Copy Markdown
Contributor

Summary

  • validate every fixed-size UTF-16 path and registry request in the driver
  • reject empty required strings, embedded NULs, and oversized bridge inputs instead of truncating them
  • zero directory query/output buffers and handle empty directories without parsing uninitialized data
  • validate every returned directory record boundary, filename length, and next-record offset
  • enumerate validated directory batches up to the protocol cap
  • preserve the existing wire layout while avoiding misaligned typed output writes
  • reject impossible file-list counts in the Rust bridge

Validation

  • cargo fmt -- --check
  • cargo test (7 passed)
  • cargo clippy --bin roxy-kernel-bridge -- -D warnings
  • cargo build --release
  • git diff --check

Native driver compilation was attempted but remains blocked on this workstation because Visual Studio cannot find the WindowsKernelModeDriver10.0 platform toolset. The Windows SDK headers/tools are present, but WDK Visual Studio integration is not installed correctly.

FreddyJD and others added 8 commits September 14, 2026 03:14
Validate all fixed-size UTF-16 requests, reject bridge truncation, and safely parse zeroed directory query results across multiple batches.\n\nCo-authored-by: Roxy <299891354+roxy-commits@users.noreply.github.com>
Build the KMDF driver and Rust MCP bridge on the GitHub Windows runner, test-sign the package, and publish versioned release archives with checksums.

Co-authored-by: Roxy <299891354+roxy-commits@users.noreply.github.com>
Use ntifs.h for the process, directory, and file structures consumed by the KMDF driver.

Co-authored-by: Roxy <299891354+roxy-commits@users.noreply.github.com>
Define the native process information prefix used by the driver and avoid user-mode-only access constants so the WDK compiler can build it.

Co-authored-by: Roxy <299891354+roxy-commits@users.noreply.github.com>
Flatten guarded registry value match arms so release builds remain warning-free on the current stable Rust toolchain.

Co-authored-by: Roxy <299891354+roxy-commits@users.noreply.github.com>
Search the installed WDK tree because InfVerif and Inf2Cat are not laid out beside SignTool on every runner image.

Co-authored-by: Roxy <299891354+roxy-commits@users.noreply.github.com>
Ship the embedded-signed SYS and public test certificate directly because Roxy installs this non-PnP driver with the Service Control Manager.

Co-authored-by: Roxy <299891354+roxy-commits@users.noreply.github.com>
Match the packaged driver signature to the generated certificate without blocking CI on self-signed chain or revocation checks.

Co-authored-by: Roxy <299891354+roxy-commits@users.noreply.github.com>
@FreddyJD FreddyJD changed the title fix: harden driver input and directory handling fix: harden and package Windows kernel tools Sep 14, 2026
@FreddyJD
FreddyJD merged commit 594bb47 into main Sep 14, 2026
4 checks passed
@FreddyJD
FreddyJD deleted the fix/driver-input-safety branch September 14, 2026 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant