![]() If you dump memory starting at this interface pointer, you get the expected vtable, but the rest does not match the expected implementation type. The basic trick of treating the pointer as the start of an object doesn’t work: 0:000> ? s ![]() ![]() Say you are looking at a crash dump, and you have a pointer to a Windows Runtime object projection, and you know that the Windows Runtime object is implemented in C++/WinRT, and you want to get to the implementation type so you can look at its private members. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |