Who needs Static Tools Logo Test?

Question

Hi Sir:

I am a server manufacturer, do I need to test the Static Tools Logo Test?

Or the NIC or RAID card manufacturer, using static tool testing to validate their drivers?

Answer 1

Hi,

The Static Tools Logo Test is a requirement for kernel-mode driver submissions to improve the reliability and security of drivers. This test performs static analysis on the driver code.

As a server manufacturer, if you are developing kernel-mode drivers for your servers, you would need to pass the Static Tools Logo Test for certification. The same applies to NIC or RAID card manufacturers. If you are developing kernel-mode drivers for these components, you would also need to pass this test.

The Static Tools Logo Test uses CodeQL, a powerful static analysis technology, to secure software. All driver submissions must use the CodeQL engine on driver source code and fix any queries that are deemed “Must-Fix”. This requirement is enforced by the Static Tools Logo Test.

Currently, the Static Tools Logo test requires that CodeQL be run and the “Must-Fix” set of queries passed for all kernel-mode drivers excluding graphics drivers. However, running CodeQL on graphics drivers is highly recommended even though it is not currently required.

In summary, if you are a manufacturer developing kernel-mode drivers, you would need to conduct the Static Tools Logo Test to validate your drivers.