Audit, hardening and conventions pass: 28 bisectable commits - #55

Merged

Chuccle merged 28 commits into

masterfrom

audit/hardening-pass

Aug 23, 2026

Commits on Aug 23, 2026

Complete TlsFuzzTest's ASan configuration
Chuccle
committed
ae7fadc
Stop the sandbox projects sharing one PDB, in both ways they did
Chuccle
committed
5ea6896
Let the deploy pipeline configure itself from a gitignored env file
Chuccle
committed
f3448c2
Delete Util.c and the dead MapUserBuffer it contained
Chuccle
committed
852c02a
Prefix every exported function with Blorg
Chuccle
committed
17a41ce
Drop the IN/OUT SAL remnants
Chuccle
committed
83aed23
Const-qualify the input parameters that were not
Chuccle
committed
e69dbb3
Reject negative read offsets and make slot containment overflow-proof
Chuccle
committed
6bc0a9c
Say what PrefetchNearMisses counts now that containment retired its case
Chuccle
committed
e753c0a
Give the response parser room for 64 headers, not 16
Chuccle
committed
3c90539
Bound response headers at 64 KB instead of MAXULONG
Chuccle
committed
667a353
Reject a response that declares Content-Length twice
Chuccle
committed
008fde2
Stop denying opens that ask for MAXIMUM_ALLOWED
Chuccle
committed
4937480
Collapse the two access-mask checks onto one permitted set
Chuccle
committed
dc4afcc
Complete oplock-released IRPs when the FSP queue is already gone
Chuccle
committed
7878e44
Bind the connect socket to the remote's address family
Chuccle
committed
8c9cc3c
Stop advertising case-sensitive search on a case-insensitive volume
Chuccle
committed
f5e8dc7
Succeed IRP_MJ_FLUSH_BUFFERS instead of refusing it
Chuccle
committed
011b2a9
Report end-of-file from FileSize, not AllocationSize
Chuccle
committed
fc216fd
Encode the request path straight to ANSI instead of via UTF-16
Chuccle
committed
51c1287
Make Socket.c's WSK registration and provider file-static
Chuccle
committed
53c8123
Name the key schedule's fail-fast idiom instead of repeating it
Chuccle
committed
a33cfc8
Bound directory-listing entry counts against the body that carried them
Chuccle
committed
43b6d1b
Correct three convention statements that contradicted the code
Chuccle
committed
88f7dab
Make the INF seed the hostname the driver actually defaults to
Chuccle
committed
7cee79a
Let a CodeQL config change actually run CodeQL
Chuccle
committed
4221896
Bump the windows-drivers CodeQL pack to 1.10.0
Chuccle
committed
9a0fb2f
Bring up the HTTP client before the filesystem is registered
Chuccle
committed
ef4f301

Navigation Menu

Audit, hardening and conventions pass: 28 bisectable commits - #55

Audit, hardening and conventions pass: 28 bisectable commits#55
Chuccle merged 28 commits into
masterfrom
audit/hardening-pass

Commits on Aug 23, 2026

Complete TlsFuzzTest's ASan configuration

Stop the sandbox projects sharing one PDB, in both ways they did

Let the deploy pipeline configure itself from a gitignored env file

Delete Util.c and the dead MapUserBuffer it contained

Prefix every exported function with Blorg

Drop the IN/OUT SAL remnants

Const-qualify the input parameters that were not

Reject negative read offsets and make slot containment overflow-proof

Say what PrefetchNearMisses counts now that containment retired its case

Give the response parser room for 64 headers, not 16

Bound response headers at 64 KB instead of MAXULONG

Reject a response that declares Content-Length twice

Stop denying opens that ask for MAXIMUM_ALLOWED

Collapse the two access-mask checks onto one permitted set

Complete oplock-released IRPs when the FSP queue is already gone

Bind the connect socket to the remote's address family

Stop advertising case-sensitive search on a case-insensitive volume

Succeed IRP_MJ_FLUSH_BUFFERS instead of refusing it

Report end-of-file from FileSize, not AllocationSize

Encode the request path straight to ANSI instead of via UTF-16

Make Socket.c's WSK registration and provider file-static

Name the key schedule's fail-fast idiom instead of repeating it

Bound directory-listing entry counts against the body that carried them

Correct three convention statements that contradicted the code

Make the INF seed the hostname the driver actually defaults to

Let a CodeQL config change actually run CodeQL

Bump the windows-drivers CodeQL pack to 1.10.0

Bring up the HTTP client before the filesystem is registered