dev/security 1.30

[Jess Kube (jessk-msft)]

Version [1.30.1.0]

• Updating to P4API 26.1
• Updating to OpenSSL 3.0.21 as recommended by P4API 26.1
• Driver security updates to address Microsoft Security Response Center recommendations
  MSRC-126533, MSRC-121148, MSRC-121146, MSRC-121144, MSRC-123527, MSRC-121150, MSRC-121128
• Driver user mode control port messages now require process to have elevated access
  for any file operations
• Driver P4VFS_FLT_FILE_HANDLE data shared now indirectly maps to kernel mode objects
  to prevent possible tampering in user mode
• Driver user mode control port now uses structured exception handling prevent possible
  access violation to user mode input and output buffer. This could be caused by a time-of-check
  time-of-use (TOCTOU) race condition. This also prevents possible alignment failures
  casting and using misaligned user-mode P4VFS_CONTROL_MSG & P4VFS_CONTROL_REPLY buffers.
• Driver now guarding against invalid offsets in P4VFS_UNICODE_STRING from user mode.
• Driver WPP tracing fixes for unicode file paths with FILE_ID_128 suffix
• Additional driver unit tests for internal P4VFS_FLT_FILE_HANDLE translation
• Addition of TestPush.bat script to optionally use in a post-build deployment to a
  virtual machine for full development driver and user-mode testing.
• Updating unit test server to support p4d 2026.1 with default configurable security=4 and
  enable database journal to avoid bug with p4d crash when deleting auth extension
• Addition to default ExcludedProcessNames of SenseNdr.exe, SenseDlpProcessor.exe
• OpenSSL configure now includes no-makedepend for a slight reduction in build time
• Fixing info output log when syncing to files that must resolve before submitting
• Addition of CodeSign 'tokens' command to request and display short-lived access tokens
  for debugging service REST APIs.