May 22, 2015
Post comments count0
Post likes count0
So you decided to call SHFileOperation from a service, at least remember to disable copy hooks
Mitigating the disaster.
Showing results for Code - The Old New Thing
May 19, 2015
Post comments count0
Post likes count0
It rather involved being on the other side of this airtight hatchway: Code injection via QueueUserAPC
But you already pwn that thread.
May 18, 2015
Post comments count0
Post likes count0
Determining programmatically whether a file was built with LAA, ASLR, DEP, or OS-assisted /GS
Sucking the flags out of the header.
May 15, 2015
Post comments count0
Post likes count0
MapGenericMask is just a convenience function for converting generic access to specific access, according to the instructions you provide
It's useful on the server side, not the client side.
May 14, 2015
Post comments count0
Post likes count0
Low-level hooks have thread affinity, so make sure you keep an eye on the thread
Poof, it's gone.
May 13, 2015
Post comments count0
Post likes count0
Why don't you forward WM_GETMINMAXINFO and clamp the results?
In my illustration of how to make a window resizable in only one direction, commenter Josua asks, "Why don't you forward and clamp the results?" I'm going to assume the question is really "Why don't you forward before clamping the results?" rather than "Why did you bother writing all this code in the first place? Why not simply forward and cla...
May 4, 2015
Post comments count0
Post likes count0
Creating a window that can be resized in only one direction
Overriding WM_NCHITTEST.
May 1, 2015
Post comments count0
Post likes count0
How does the window manager adjust ptMaxSize and ptMaxPosition for multiple monitors?
Very carefully.
Apr 30, 2015
Post comments count0
Post likes count0
How can I tell if a file is an image of some type?
The perceived type tells you what kind of file it is, for a very general sense of the word "kind".
Apr 29, 2015
Post comments count0
Post likes count0
Is the atom returned by RegisterClass(Ex) a "real" atom?
A customer was debugging some code that calls on a class that's already been registered. In this case, it was registered by another DLL in the same process. Normally, this wouldn't be a problem, because each DLL passes its own instance handle to so that there are no name collisions. However, in this case, both DLLs are passing the flag, which m...