STUBS/FileSystem.hppextern Window next_window; Window next_window = INV_WINDOW; //8 uses in this file RFC_pub.h rfc_dd.cpp Isolate a Global Window next_window = MY_WINDOW; //93 uses in this file DD_BUILD Conditionally included if BUILD == HH_BUILDIsolate a Global void SetNextWindow(Window nextWindow); Window GetNextWindow(); #include "RFC_pub.h" //All assignments use Set, all reads use Get RFC_pub "RFC_pub.h" namespace { Window next_window = RFC_INV_WINDOW; } void SetNextWindow(Window nextWindow) { next_window = nextWindow; } Window GetNextWindow() { return next_window; } //All assignments use

37Example: window layout class diagram 38 UI::WindowLayout IWindowLayout WindowLayoutStackExample: window layout class IWindowLayout { public: virtual core::Expected:> add(const window::Uri& windowUri) windowUri) = 0; }; ./ ... core::Expected:> WindowLayoutStack::add(const window::Uri& windowUri) { return loadWindow(windowUri, m_windowLoader) .and_then(&addToLayout) .and_then(&updateActiveWindow) and_then(&updateActiveWindow) .or_else(&addWindowLayoutPrefix); } 39Example: window layout wrapper ./ Inside another namespace class WindowLayout : public QObject { Q_OBJECT Q_PROPERTY(QString

滑鼠拖放（Drag and Drop） / 442 訊息映射（Message Map） / 445 標準選單 File/Edit/View/Window/Help / 446 對話盒 / 449 改用 CEditView / 450 第㆕篇 深入 MFC 程式設計 / 453 第８章 Document-View 附錄 B Scribble Step5 程式原始碼列表 / 873 附錄 C Visual C++ 5.0 MFC 範例程式總覽 / 915 * 附錄 D 以 MFC 重建 Debug Window（DBWIN） / 921 第０章 你㆒定要知道（導讀） 27 第０章 你一定要知道（导读） 这本书适合谁 深入淺出 深入淺出 深入淺出 深入淺出 MFC 是一本介绍MFC（Microsoft 或Win32 程序设计，只在DOS 环境下 开发过软件，我在第１章为你安排了一些Win32 程序设计基础。这个基础至为重要，只 会在各个Wizards 上按来按去，却不懂所谓message loop 与window procedure 的人， 不可能搞定Windows 程序设计-- 不管你用的是MFC 或OWL 或Open Class Library，不管你用的是Visual C++ 或Borland

buf_len) { rf_512 prev; //- Bottom of the input data window rf_512 curr; //- Middle of the input data window rf_512 next; //- Top of the input data window rf_512 lo; //- Primary work register rf_512 buf_len) { rf_512 prev; //- Bottom of the input data window rf_512 curr; //- Middle of the input data window rf_512 next; //- Top of the input data window rf_512 lo; //- Primary work register rf_512 buf_len) { rf_512 prev; //- Bottom of the input data window rf_512 curr; //- Middle of the input data window rf_512 next; //- Top of the input data window rf_512 lo; //- Primary work register rf_512

1; rf_512 prev; //- Bottom of the input data window rf_512 curr; //- Middle of the input data windows rf_512 next; //- Top of the input data window rf_512 lo; //- Primary work data register, used KernelSize; ++i, --j) { kcoeff[i] = load_value(pkrnl[j]); } //- Preload the initial input data window; note the zeroes in the register representing data // preceding the input array. // prev = load_value(0 KernelSize; ++i, --j) { kcoeff[i] = load_value(pkrnl[j]); } //- Preload the initial input data window; note the zeroes in the register representing data // preceding the input array. // prev = load_value(0

log_sink log_sink classes: classes: "ordinary" sinks that send entries to di�erent places (�le, output window, etc)CASE STUDY: LOGGING CASE STUDY: LOGGING Given the Given the push push function, we can write log_sink log_sink classes: classes: "ordinary" sinks that send entries to di�erent places (�le, output window, etc) a �lter sink that runs a predicate on the entry and accepts it conditionallyCASE STUDY: LOGGING log_sink log_sink classes: classes: "ordinary" sinks that send entries to di�erent places (�le, output window, etc) a �lter sink that runs a predicate on the entry and accepts it conditionally a sink that wraps

referenceFactory Method int main() { const Window* window = createWindow(Window::Default); } Open question with a pointer interface: ▪ Who is the owner of the window? ▪ Who releases the resource? Use smart

Aurora Innovation Broken windows theory “If a window in a building is broken and is left unrepaired, all the rest of the windows will soon be broken. [...] Window-breaking does not necessarily occur on a large large scale because some areas are inhabited by determined window-breakers, rather, one unrepaired broken window is a signal that no one cares, and so breaking more windows costs nothing.” The Atlantic

privilege escalation • Out-of-bounds (OOB) write vulnerability in dwmcore.dll, which is part of Desktop Window Manager (dwm.exe) • Attacker grooms the heap in the dwm.exe • Attacker controlled data at a controlled this->properties[propertyId]->type == type • Used for privilege escalation • Win32k (win32kfull.sys) window object type confusion leading to an OOB (out-of-bounds) write • ClientAllocWindowClassExtraBytes ob/main/CVE-2021-1732/CVE-2021-1732.cpp https://securelist.com/zero-day-vulnerability-in-desktop-window-manager-cve-2021-28310-used-in-the-wild/101898/ https://www.cisa.gov/news-events/alerts/2022/03/