RELOAD!

[rubberduck-vba/Rubberduck] 3 commits. 3 opened issues. 2 closed issues. 19 issue comments. 3740 additions. 321 deletions.

> Total Downloads 12,884

I have a PublicNotCreatable class in an addin (along with a public constructor):

Option Explicit

Private pwd As String

Public Sub SetPassword(ByVal password As String)
  pwd = password
End Sub

^ i.e. it's a write-only, encapsulated password. The field is private.

but thanks to CopyMemory...

in another project that references the addin:

Private Declare Sub CopyMemory Lib "kernel32.dll" Alias "RtlMoveMemory" (ByRef Destination As Any, ByRef Source As Any, ByVal Length As Long)

Sub test1()

  Const SECRET_PASSWORD As String = "Secret Squirrel"

  Dim c As Class1
  Set c = GetClass1

  c.SetPassword SECRET_PASSWORD

  Dim instancePointer As Long
  instancePointer = ObjPtr(c) + &H34

  Dim fieldPointer As Long
  CopyMemory fieldPointer, ByVal instancePointer, 4&

  Dim stringLengthPointer As Long
  stringLengthPointer = fieldPointer - 4

sure, that &h34 is a magic number that works for this COM object, but encapsulation is DOA.

This is just showing that encapsulation is not a sufficient security measure.

reads the reference counter on a class instance

contemplates changing it - contemplates the memory leaks

@M.Doerner aye, but if I can read the function pointers (including IUnknown/IDispatch pointers), and the fields (including the reference count field), and the interface IIDs, then I think I have a pretty good start on analyzing a class instance's memory layout.

If I can that working for an ObjPtr, then I think I can get it working for a VBE-level pointer I found that I think exposes IPersist and ITypeLib

@Mat'sMug ^ hands in the guts - might be able to get a handle to VBA's APC.

github.com/baiyanhuang/backup/blob/master/experiments/XCAD/3p/…

// for IVbaProjItem::GetItemType
typedef enum {
	VBAPIT_StdModule,
	VBAPIT_ClassModule,
	VBAPIT_Designer,
	VBAPIT_DocumentObject,
	VBAPIT_DocumentClass,
	VBAPIT_Other
} VBAPROJITEMTYPE;

I want to know which host implements a DocumentObject

I don't know if anyone here will find this interesting or not, but I think it confirms where we already know there are issues. gist.github.com/rubberduck203/a7c02d87b1725a07e97cc36543953c27

Top 100 changed files ^

[rubberduck-vba/Rubberduck] MDoerner created wiki page The Parsing Process

[rubberduck-vba/Rubberduck] MDoerner edited wiki page The Parsing Process

[rubberduck-vba/Rubberduck] MDoerner edited wiki page _Sidebar

[rubberduck-vba/Rubberduck] MDoerner created pull request #3131: Improving Cancellation Safety to merge MDoerner/Rubberduck/MoreCancellationSafety into rubberduck-vba/Rubberduck/next

> We are reresolving all modules that reference modules or references that got removed. This is necessary because the same identifers might now resolve to different declarations. So far, a cancellation of a parsing run in which modules got removed caused us to loose the information that the modules referencing the removed modules had to be reresolved. Moreover, a parser error in some other module changed in the meantime would have caused the same loss. With the changes in this PR this...

[rubberduck-vba/Rubberduck] build for commit faa3af02 on unknown branch: AppVeyor build succeeded

@RubberDuck You need to let your tool exclude file types and folders.

You should filter the .csproj's out.

And maybe the test folder.

@Duga @M.Doerner mind if I take this and turn it into "Inside Rubberduck pt.2"?

Thanks a million for taking the time to write this!

@Mat'sMug Just wait a bit longer. I still have two sections to write.

I will probably do that tomorrow.

sure.. do you want to write/publish the actual WP / RD News post? I'll add you as an author on the blog if you want

(I'm still reading - it's excellent btw)

I'll add a preamble about Declaration and IdentifierReference

@Duga @M.Doerner Thanks for writing this! It's very informative. Do you mind if I edit it for punctuation and spelling?

@Hosch250 a filter would be a nice convenience compared to gitnstats | grep -oP .+\.cs$ I'll add it to the backlog.

I wouldn't want to make assumptions for the user, so I wouldn't filter anything, but letting the user specify some filters would be nice.

@shadowofsilicon Feel free to apply any corrections you find necessary.

[rubberduck-vba/Rubberduck] MDoerner edited wiki page RubberduckParserState

[rubberduck-vba/Rubberduck] MDoerner edited wiki page RubberduckParserState

[rubberduck-vba/Rubberduck] MDoerner edited wiki page Adding a new Host Application to Rubberduck

[rubberduck-vba/Rubberduck] MDoerner edited wiki page Architecture Overview

[rubberduck-vba/Rubberduck] MDoerner edited wiki page UI Design Guidelines

[rubberduck-vba/Rubberduck] MDoerner edited wiki page Tutorial Guidelines

[rubberduck-vba/Rubberduck] MDoerner edited wiki page User Interface

[rubberduck-vba/Rubberduck] MDoerner edited wiki page Features

[rubberduck-vba/Rubberduck] MDoerner edited wiki page Source Control: Getting Started

@RubberDuck Of course.

@M.Doerner I hope to, that's why I went ahead and bought it.

To be honest, I am reading it myself at the moment. I am somewhere in the middle of part 3.

I don't think it's possible to regret the $ spent on that book. It's essential for every C# dev IMO.

I still reference it from time to time.

@IvenBach I have learnt a new law, exp-platform.com/Documents/TwymansLaw.pdf. Interestingly that he is a statistician who noticed errors from practical people are useful as use cases like on slide number 5.