I am implementing the requirements for the Microsoft Windows Hardware Compatibility Program (WHCP) and I encounter problems in the DVL generated and then failure of the Static Tools Logo test.
I'm using the DVL.exe tool from EDWK 26100 required by WHCP_25H2 to which I provide the path to a folder where CodeQL sarif file and the vcxproj file of the driver are located. CodeQL recommended and mustrun query suites are executed to generate the sarif file (microsoft/windows-drivers@1.8.0:windows-driver-suites/recommended.qls).
The command run is dvl.exe /manualCreate driverName X64 /sarifPath pathToFolder .
The dvl file is generated but upon inspection I can see that I contains duplicate entries with same ScoreName but different ScoreUnit and ScoreValue.
<?xml version="1.0" encoding="utf-8"?>
<Data version="1.1.0.0">
<AssessmentScore ScoreName="driverName.x64.Semmle.Defect.cpp/drivers/role-type-correctly-used" ScoreValue="3" ScoreUnit="SEMMLE_RECOMMENDED_FAILED" />
<AssessmentScore ScoreName="driverName.x64.Semmle.Defect.cpp/drivers/role-type-correctly-used" ScoreValue="1" ScoreUnit="SEMMLE_MUSTRUN_SKIPPED" />
...
</Data>
Does anybody know why this duplication occurs, it's obvious that the test run and it failed. Why is the rule listed also as skipped?
I have defects that have been fixed in source code and the query entry SEMMLE_MUSTFIX_FAILED disappeared from the xml but still there is one line with SEMMLE_MUSTRUN_SKIPPED for the same query.
It's like these SEMMLE_MUSTRUN_SKIPPED are populated by default for all the queries.
Any advice is appreciated, thanks!