Latest posts
- The other kind of control flow guard check: The combined validate and callJul 08, 2026Raymond Chen
A two-in-one package. The post The other kind of control flow guard check: The combined validate and call appeared first on The Old New Thing.
- How did Windows 95 decide that a setup program ran?Jul 07, 2026Raymond Chen
It used some heuristics. The post How did Windows 95 decide that a setup program ran? appeared first on The Old New Thing.
- I opened a file with FILE_FLAG_DELETE_ON_CLOSE, but now I changed my mindJul 06, 2026Raymond Chen
You can't change your mind, but you can do it a different way. The post I opened a file with <CODE>FILE_<WBR>FLAG_<WBR>DELETE_<WBR>ON_<WBR>CLOSE</CODE>, but now I changed my mind appeared first on The Old New Thing.
- How did we conclude that CcNamespace.dll was the ringleader of a group of DLLs that unloaded prematurely?Jul 03, 2026Raymond Chen
Contextual clues. The post How did we conclude that <TT>CcNamespace.dll</TT> was the ringleader of a group of DLLs that unloaded prematurely? appeared first on The Old New Thing.
- The case of the thread executing from an unloaded third-party DLLJul 02, 2026Raymond Chen
Oops, I didn't realize that I was still doing that. The post The case of the thread executing from an unloaded third-party DLL appeared first on The Old New Thing.
- It rather involved being on the other side of this airtight hatchway: Changing administrative settingsJul 01, 2026Raymond Chen
Unlocking the door from the inside. The post It rather involved being on the other side of this airtight hatchway: Changing administrative settings appeared first on The Old New Thing.
- 2026 mid-year link clearanceJun 30, 2026Raymond Chen
Made it to another midpoint. The post 2026 mid-year link clearance appeared first on The Old New Thing.
- A compatibility note on the abuse of Windows window class extra bytesJun 30, 2026Raymond Chen
Finding an illicit place to hide data. The post A compatibility note on the abuse of Windows window class extra bytes appeared first on The Old New Thing.
- The evolution of window and class extra bytes in WindowsJun 29, 2026Raymond Chen
The intended usage is encoded in the prefix. The post The evolution of window and class extra bytes in Windows appeared first on The Old New Thing.
- The case of the DLL that was not present in memory despite not being formally unloaded, part 2Jun 26, 2026Raymond Chen
Tying two bugs together. The post The case of the DLL that was not present in memory despite not being formally unloaded, part 2 appeared first on The Old New Thing.