Skip to content

Bring several memory and access safety queries in from internal repo.#208

Merged
NateD-MSFT merged 8 commits intodevelopmentfrom
user/nated-msft/2603-sdl-merge
Feb 27, 2026
Merged

Bring several memory and access safety queries in from internal repo.#208
NateD-MSFT merged 8 commits intodevelopmentfrom
user/nated-msft/2603-sdl-merge

Conversation

@NateD-MSFT
Copy link
Collaborator

This change adds the following queries:

  • ConditionallyUninitializedVariableAutomation.ql: Flags calls to initialization functions whose return status is not checked, potentially leaving a local variable uninitialized.
  • UnprobedDereference.ql: Detects dereferences of user-provided pointers that haven't been probed first, which could cause access violations.
  • UserModeMemoryOutsideTry.ql: Finds reads of user-mode memory that occur outside a try/catch block, where unexpected exceptions from changed memory protections could crash the kernel.
  • UserModeMemoryReadMultipleTimes.ql: identifies double-fetch vulnerabilities where user-mode memory is read more than once without being copied to kernel memory first.
  • UnguardedNullReturnDereference.ql: Reports dereferences of return values from calls that may return NULL (e.g. heap allocations) without a preceding null check.

@NateD-MSFT NateD-MSFT marked this pull request as ready for review February 27, 2026 19:39
@NateD-MSFT NateD-MSFT merged commit b343c9d into development Feb 27, 2026
5 of 7 checks passed
@NateD-MSFT NateD-MSFT deleted the user/nated-msft/2603-sdl-merge branch February 27, 2026 23:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants