Author Archives: lorenzhai

  Why does open network folder hang?  2010-08-23 These days, I have used an old XPSP3 OS (I hadn’t used it for a long time) to test an issue. But When I have opened a network folder, I have always … Continue reading →

Recently, I got a crash issue. It happened when application calls CoUninitialize interface at the end of application. Finally, I had found the root cause, below is key steps for my debug and analysis.   First  Run   0:000> kb … Continue reading →

 I have read some topics about SVCHOST.EXE Troubleshooting recently. Below is key method to implement it. 1.       Isolate services from svchost.exe before troubleshoot. 1.1    To use tasklist /SVC /FI "IMAGENAME eq svchost.exe" command to list which services belong to which … Continue reading →

Today, I got below error when I run a chm in Vista.   At first, I think the local file has corrupted. So I had downloaded a new file from Internet. Yeah, new file can open successfully. Sudden, I had noticed … Continue reading →

  MS Security Development Lifecycle (SDL) Banned Function Calls   The code for the SDL Banned API IDE Visual Studio extension is available in SDLBanned.zip. There are two folders in the ZIP file: src and bin. The source code folder includes … Continue reading →

Several months ago, we got a crash issue. At last, we had found that MS didn’t check variable argument function’s argument is valid. Here is debug information in VS2008 and VC6.   Below is detail analysis for this issue in VC6.   … Continue reading →

今天在公司Snapshot邮件上看到给《Windows® Internals, Fifth Edition 》做forword的Ben Fathi已经加入了Cisco. 看来Security真的是无处不在了。

Here provides a list of additions to the Windows application programming interface (API), grouped by operating system release.   Windows 7 Windows Server 2008 Windows Vista Windows Server 2003 SP1 Windows Server 2003 Windows XP SP1 Windows XP 64-bit Windows … Continue reading →

Below content copy from Michael Howard’s blog, detail information, please click here. Q: What does the HeapSetInformation function do?A: It lets your application configure the Windows heap manager with a small number of options. The only security-related setting kills your application in … Continue reading →

The Windows OS will call nt!NtShutdownSystem()  interface at last when OS showdown system. We can set a breakpoint on nt!NtShutdownSystem() to debug system shutdown process.  It is useful for us when we want to know which application send the showdown command. Who is restarting … Continue reading →