On 12/7/17 10:21 AM, Jean-Louis Leroy wrote: > Bar.classinfo.vtbl.ptr[Bar.classinfo.vtbl.length] = cast(void*) 0x123456; This is a buffer overflow, why are you doing this specifically? -Steve