Tag
This article from The Old New Thing investigates a common crash in the Windows display control panel caused by an invalid function pointer that was truncated to 32-bit and sign-extended. The author analyzes a crash dump to identify the root cause.
Raymond Chen explains how he identified CcNamespace.dll as the key DLL in a chain of prematurely unloaded DLLs by analyzing the debugger's unloaded DLL list and noting naming patterns and order.
A technical blog post by Raymond Chen investigating a memory corruption bug where a single byte 0x01 corrupts HMODULE handles, causing DLLs to be improperly freed and leading to crashes at process termination.