IMPORTANT: Driver Verifier on Windows 11 is BROKEN

If you're not familiar with the verifier.exe command line, and the documentation seems as impenetrable to you as it does to me, here's some help:

Rules you always want to enable:

Special Pool (1)
Forced IRQL Checking (2)
Pool Tracking (4)
I/O Verification (5)
Deadlock Detection (6)
DMA checking (8)
Security Checks (9)
Miscellaneous Checks (12)
DDI Compliance Checks (18)
DDI Compliance additional (20)
Kernel Synchronization Delay Fuzzing (24)
Code Integrity Checks (26)
Additional IRQL Checks (35)

So... that gets you:

verifier /rc 1 2 4 5 6 8 9 12 18 20 24 26 35 /driver <mydriver.sys>

The short-hand equivalent appears to be:

verifier /standard /driver <mydriver.sys>

The following may optionally be added to the above:

Force Pending (10)
Invariant MDL Checks (14 and 15)
Power Framework Delay Fuzzing (16)

Enable WDF Verification: 34
Enable File System Filter Verification: 37

So, for WDF:
verifier /rc 1 2 4 5 6 8 9 12 18 20 24 26 35 34 /driver nothing_kmdf.sys

Using /standard on a WDF driver apparently also enables WDF Verifier.

And for File Systems:
verifier /rc 1 2 4 5 6 8 9 12 18 20 24 26 35 37 /driver MyFilter.sys

If you have other settings that you use, we'd be curious to see what they are.

2 Likes