27 Jun
2023
27 Jun
'23
7:59 a.m.
On Tue Jun 27 07:48:39 2023 +0000, Bernhard Kölbl wrote:
Just out of curiosity, could someone explain the workings behind this line? Especially `((ULONG_PTR)hstr >> 16))`is really puzzling for me.
The addresses below 0xffff are in the first 64k page, which I think is a reserved area on Windows (I believe there's a similar thing on Linux, although I don't know if the size is the same). Any pointer in this range is not a valid address, and probably some corrupted value.