The Old New Thing

The chain reaction started when a customer’s line of business application doesn’t work with UNCs

May 31, 2016 May 31, 2016 05/31/16

Raymond Chen

Fighting over a registry key.

Printing the name and position of the focused item on the desktop

May 30, 2016 May 30, 2016 05/30/16

Raymond Chen

You already know how to get the view, so ask the view.

Diagnosing a crash in unloaded_something.dll

May 27, 2016 May 27, 2016 05/27/16

Raymond Chen

Find out what used to be loaded there.

Debugging session: Which of the many things happening in this single line of code is the one that crashed?

May 26, 2016 May 26, 2016 05/26/16

Raymond Chen

Let's go to the disassembly.

How can I generate a stack backtrace that is independent of ASLR?

May 25, 2016 May 25, 2016 05/25/16

Raymond Chen

Use module offsets rather than absolute addresses.

How do I create a directory where people can create subdirectories but cannot mess with those created by other users?

May 24, 2016 May 24, 2016 05/24/16

Raymond Chen

Advanced ACL games.

Security through lying

May 23, 2016 May 23, 2016 05/23/16

Raymond Chen

Factual errors make it harder for the good guys.

How long do I have to keep the SECURITY_ATTRIBUTES and SECURITY_DESCRIPTOR structures valid after using them to create a file?

May 20, 2016 May 20, 2016 05/20/16

Raymond Chen

Once CreateFile returns, they aren't needed any more.

Why did the friendly name for the Network Service account change?

May 19, 2016 May 19, 2016 05/19/16

Raymond Chen

Nobody promised it wouldn't.

Why doesn’t RevertToSelf undo the most recent SetThreadToken?

May 18, 2016 May 18, 2016 05/18/16

Raymond Chen

It removes all impersonation; it doesn't restore it.