wireguard-nt/driver, branch master

driver: nsi: forward IRPs instead of failing

2026-05-07T12:17:00Z

We always have a file reference to get the proper nsi device object, so rather than failing, in most cases, we can properly service these requests. Signed-off-by: Jason A. Donenfeld

driver: nsi: compare FilterDevice pointers under rundown protection

2026-05-07T12:17:00Z

And also gate the PriorDispatch on the presence of an extension, which NDIS always has. Reported-by: Brian Diff Signed-off-by: Jason A. Donenfeld

driver: nsi: re-initialize rundown protection atomically

2026-05-07T12:17:00Z

Signed-off-by: Jason A. Donenfeld

driver: noise: remove unused StaticPrivate variable

2026-04-29T01:01:39Z

The stack version of this is never used, because it's long-lived, and so we always read it out of the peer struct. Signed-off-by: Jason A. Donenfeld

driver: remove unused prefast suppressions

2026-04-21T19:18:21Z

Signed-off-by: Jason A. Donenfeld

driver: remove fixed codeql suppressions

2026-04-21T13:34:48Z

I fixed the CodeQL rules. Link: https://github.com/microsoft/Windows-Driver-Developer-Supplemental-Tools/pull/217 Signed-off-by: Jason A. Donenfeld

driver: socket: note that stack Endpoint is safe in SocketSendBufferAsReplyToNbl

2026-04-16T10:12:37Z

WSK's WskSendTo copies addresses and control messages synchronously before returning STATUS_PENDING. Confirmed by reverse engineering afd.sys!WskProIRPSendTo and tcpip.sys!UdpSendMessages, which consume address and cmsg data in the transport dispatch call and store only the completion callback and IRP in the NBL context. Signed-off-by: Jason A. Donenfeld

driver: allowedips: return STATUS_SUCCESS instead of 0

2026-04-16T00:34:57Z

Signed-off-by: Jason A. Donenfeld

driver: use /DECLSPEC_ALIGN(n) instead of __declspec(align(n))

2026-04-15T11:34:39Z

Signed-off-by: Jason A. Donenfeld

driver: enable /std:clatest and use typeof

2026-04-14T08:26:48Z

Use C23 typeof to eliminate redundant type parameters from the RCU macros. Also, drop mention of hoping to use alignas in TODO.md. It only goes on members of structs, not the struct type itself, which I find syntactically annoying, and it doesn't really confer any additional real benefits. Moving to C23 means that we must use __VA_OPT__. Signed-off-by: Jason A. Donenfeld