$ show microsoft/windows-drivers-rs
Microsoft's official Rust framework for developing Windows drivers. The codebase is a multi-crate workspace with clean layering: `wdk-sys` provides raw bindgen-generated FFI bindings to the Windows Driver Kit (WDM/KMDF/UMDF APIs) with feature-gated API subsets (gpio, hid, spb, storage, usb, wdf); `wdk` layers safe idiomatic wrappers on top (no-std formatting buffers, WDF spinlock/timer wrappers, print macros); `wdk-build` powers driver `build.rs` scripts by auto-detecting WDK installations via registry/env vars and emitting compiler flags, linker args, and cfg settings; and `cargo-wdk` is a Cargo extension CLI for scaffolding (`new`), building (`build`), and cleaning (`clean`) driver projects including signing and packaging. Supporting crates `wdk-alloc` and `wdk-panic` provide kernel-mode global allocation (ExAllocatePool2/ExFreePool) and panic handling (KeBugCheckEx/OutputDebugStringA+abort), while `wdk-macros` implements a proc macro for typesafe dispatch of WDF function-table calls. The architecture is a layered library plus CLI toolchain, not a monolith or service; it serves driver developers as both a framework and a build tool. Key entry points are the `cargo wdk` CLI, the `wdk_build::configure_wdk_binary_build()`/`configure_wdk_library_build()` functions invoked from build scripts, and the `wdk` public API. The primary build data flow is: Cargo `[package.metadata.wdk]` manifest metadata → `wdk-build` config → bindgen → generated FFI bindings → driver binary, with WDK/SDK version and install-path detection from registry keys and environment variables. External dependencies include the Windows Driver Kit, LLVM/Clang, bindgen, and Windows packaging/signing tools (signtool, inf2cat, stampinf, certmgr). Engineering quality is genuinely strong: clean crate separation, a testable provider abstraction in the CLI (exec/fs/metadata/wdk_build), secret-redacting command logging, trybuild compile-fail tests, macrotest snapshots pinned per stable/beta/nightly toolchain, emulated-workspace integration tests, and CI spanning multiple WDK/LLVM/Rust versions with CodeQL, cargo-audit, dependabot, and release-plz release automation. Known caveats: the bindgen pipeline is fragile against WDK header changes, a proc-macro cache does not invalidate when source types change, thousands of NTSTATUS constants are manually maintained, LLVM is pinned to 17.0.6 due to an upstream ARM64 bug, and the README explicitly states the project is not yet recommended for production driver use. The repository is Windows-only by domain necessity.
The LLM identified 4 files worth highlighting for reuse:
FormatBuffer and FlushableFormatBuffer: generic, stack-allocated core::fmt::Write implementations that NUL-terminate output and support a flushable segmented-buffer pattern for constrained no-std environments. Self-contained with minimal coupling to internal crates, this is directly extractable for any embedded or kernel context needing formatted output without heap allocation.
A command execution provider that runs external tools (signtool, inf2cat, etc.) while systematically redacting sensitive command-line arguments (signing credentials, key paths) from logs and error paths. Demonstrates a reusable security-conscious subprocess pattern for any CLI tool that delegates to privileged external binaries.
WdkAllocator: a Rust GlobalAlloc implementation wrapping the Windows kernel ExAllocatePool2/ExFreePool APIs, correctly handling alignment requirements and null-pointer semantics of Rust's allocator contract. Self-contained and ready to drop into any Windows kernel-mode Rust driver crate.
TwoPartVersion (dependency-free MAJOR.MINOR version parsing with strict validation) plus WDK/SDK installation discovery that probes registry keys, environment variables, and default directory layouts with graceful fallbacks. The version parser is a clean standalone utility; the discovery logic encapsulates non-obvious Windows toolchain lookup behavior (registry paths, env vars, content-root detection) into a testable module.