November 2009 - Wine-bugs - list.winehq.org

[Bug 20851] New: Read buffer overflow in CombineRgn, triggered by imm32/tests/imm32.c
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=20851 Summary: Read buffer overflow in CombineRgn, triggered by imm32/tests/imm32.c Product: Wine Version: 1.1.33 Platform: PC OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com http://kegel.com/wine/valgrind/logs/2009-11-18-21.51/vg-imm32_imm32.txt through http://kegel.com/wine/valgrind/logs/2009-11-27-12.53/vg-imm32_imm32.txt have the warning Invalid read of size 4 at REGION_SubtractO (region.c:2219) by REGION_RegionOp (region.c:1776) by REGION_SubtractRegion (region.c:2258) by CombineRgn (region.c:1376) by NC_DoNCPaint (nonclient.c:1022) by NC_HandleNCPaint (nonclient.c:1117) by DEFWND_DefWinProc (defwnd.c:303) by DefWindowProcA (defwnd.c:914) by ??? (library.h:159) by call_window_proc (winproc.c:469) by WINPROC_CallProcWtoA (winproc.c:1279) by WINPROC_call_window (winproc.c:2216) by call_window_proc (message.c:1635) by send_message (message.c:2482) by SendMessageW (message.c:2605) by send_ncpaint (painting.c:665) by BeginPaint (painting.c:871) by DEFWND_DefWinProc (defwnd.c:428) by DefWindowProcA (defwnd.c:914) by ??? (library.h:159) Address 0x7f082810 is 0 bytes after a block of size 32 alloc'd at notify_alloc (heap.c:247) by RtlAllocateHeap (heap.c:1697) by init_region (region.c:492) by REGION_RegionOp (region.c:1666) by REGION_UnionRegion (region.c:2094) by REGION_UnionRectWithRegion (region.c:1260) by ExtCreateRegion (region.c:1073) by get_update_region (painting.c:549) by send_ncpaint (painting.c:621) by BeginPaint (painting.c:871) by DEFWND_DefWinProc (defwnd.c:428) by DefWindowProcA (defwnd.c:914) by ??? (library.h:159) by call_window_proc (winproc.c:469) by WINPROC_call_window (winproc.c:2223) by DispatchMessageA (message.c:3089) by msg_spy_pump_msg_queue (imm32.c:81) by msg_spy_flush_msgs (imm32.c:88) by msg_spy_init (imm32.c:118) by init (imm32.c:173) This is likely a very old problem. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 3

[Bug 20850] New: Write buffer overflow in WidenPath()
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=20850 Summary: Write buffer overflow in WidenPath() Product: Wine Version: 1.1.33 Platform: PC OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: gdi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com http://kegel.com/wine/valgrind/logs/2009-11-19-08.35/vg-gdi32_path.txt has the warning Invalid write of size 4 at PATH_WidenPath (path.c:1911) by WidenPath (path.c:2232) by test_widenpath (path.c:68) by func_path (path.c:508) by run_test (test.h:535) by main (test.h:585) Address 0x7f03bb48 is 0 bytes after a block of size 0 alloc'd at notify_alloc (heap.c:279) by RtlAllocateHeap (heap.c:1521) by PATH_WidenPath (path.c:1910) by WidenPath (path.c:2232) by test_widenpath (path.c:68) The same problem appears in current sources, and has probably been there since 2007. Looking at WidenPath(), it seems that maybe numStrokes should start at 1, not 0? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 9

[Bug 20806] New: Civilization II crashes on startup
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=20806 Summary: Civilization II crashes on startup Product: Wine Version: 1.1.33 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: gdi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: arethusa26(a)gmail.com Created an attachment (id=24919) --> (http://bugs.winehq.org/attachment.cgi?id=24919) Civilization II backtrace With wine-1.1.33-301-gd963e97, Civilization II crashes with: fixme:wing:WinGGetDIBPointer16 6b8, (nil): not supported wine: Unhandled page fault on read access to 0xffffffff at address 0x1417:0x0000021a (thread 001c), starting debugger... Unhandled exception: page fault on read access to 0xffffffff in 16-bit code (1417:021a). ... Since this did not occur in 1.1.29, a regression test was performed, which showed: 6ad951804a2188dc0614ae0b9bd18e843937e8d3 is the first bad commit commit 6ad951804a2188dc0614ae0b9bd18e843937e8d3 Author: Alexandre Julliard <julliard(a)winehq.org> Date: Sat Sep 26 13:32:25 2009 +0200 gdi32: Make wing.dll into a stand-alone 16-bit module. :100644 100644 418244e96b0cb9af6c7df68bb9672fdba2f22057 f439b356d3dfcd102c2c57bfdd305aec7e51e08d M .gitignore :100755 100755 6a76027b8696730d320ef676e0b9b0d791457953 5372518cf20852bddda590c6616c1a303dbb232e M configure :100644 100644 175b051bad723f1f5b14afabc57d6038c448b75f faf891df33ba999eacd591a57f0a6e3475381e55 M configure.ac :040000 040000 7037a30347a8adf0775b3158c964cf213bb48aeb 156c989d78f1343a55d0b07e80f071d0e0db131c M dlls It looks like the removal of the WinGGetDIBPointer16 implementation makes Civilization II unhappy. Full output is attached. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 20684] New: Memory leak in CryptGenKey/CryptDestroyKey?
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=20684 Summary: Memory leak in CryptGenKey/CryptDestroyKey? Product: Wine Version: 1.1.32 Platform: PC OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: rsaenh AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Created an attachment (id=24711) --> (http://bugs.winehq.org/attachment.cgi?id=24711) minimal test showing problem Chromium's unit_tests.exe's SignatureCreatorTest.BasicTest seems to show a leak in CryptGenKey(): 972 bytes in 1 blocks are definitely lost in loss record 836 of 921 at RtlAllocateHeap (heap.c:1423) by ??? by ??? by ??? by CryptGenKey (crypt.c:1434) by base::RSAPrivateKey::Create (rsa_private_key_win.cc:35) by SignatureCreatorTest_BasicTest_Test::TestBody (signature_creator_unittest.cc:15) I've extracted a minimal test case into the attached patch. To repeat, apply the patch and then run the rsaenh test under valgrind. It complains 972 bytes in 1 blocks are definitely lost in loss record 463 of 518 at RtlAllocateHeap (heap.c:1423) by new_object (handle.c:362) by new_key (rsaenh.c:834) by RSAENH_CPGenKey (rsaenh.c:3064) by CryptGenKey (crypt.c:1434) by func_rsaenh (rsaenh.c:2546) by run_test (test.h:535) by main (test.h:585) It seems the reference count of the generated key starts off one too high, or something? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 14

[Bug 20224] New: dlls/d3dx9_36/tests/math.C: Test failed: Expected matrix
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=20224 Summary: dlls/d3dx9_36/tests/math.C: Test failed: Expected matrix Product: Wine Version: 1.1.30 Platform: PC-x86-64 URL: http://test.winehq.org/data/f3b9fb554dd116c88142209873 8a1f0223087cd1/wine_ae-904-x64-nogecko/d3dx9_36:math.h tml OS/Version: Linux Status: NEW Keywords: download, source, testcase, win64 Severity: trivial Priority: P2 Component: directx-d3d AssignedTo: wine-bugs(a)winehq.org ReportedBy: austinenglish(a)gmail.com Normally, I wouldn't file bugs related to testcases failing on 64-bit, but Jörg pointed out something interesting: http://test.winehq.org/data/f3b9fb554dd116c881422098738a1f0223087cd1/wine_a… http://test.winehq.org/data/f3b9fb554dd116c881422098738a1f0223087cd1/wine_j… (both are winetest results from 1.1.30, my win64 tests, and his 32-bit OS X tests) Both fail in the same way: dlls/d3dx9_36/tests/math.c math.c:512: Test failed: Expected matrix= (-0.214800,1.311600,0.475200,0.000000 0.950400,-0.883600,0.924400,0.000000 1.021200,0.193600,-1.358800,0.000000 18.298500,-29.624001,15.683499,1.000000 ) Got matrix= (-0.214800,1.311600,0.475200,0.000000 0.950402,-0.883606,0.924399,0.000000 1.021202,0.193600,-1.358803,0.000000 18.298527,-29.624161,15.683442,1.000000) math.c:756: Test marked todo: Expected Vector= (0.206945, 0.103473, 0.310418, 0.000000) , Got Vector= (0.093768, 0.187536, 0.375073, 0.000000) math: 364 tests executed (1 marked as todo, 1 failure), 0 skipped. Since it also affects a 32-bit wine, I figured I should file a bug. Perhaps driver related, and so only affects OS X/64-bit? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 20013] New: Exchange Server 2007 fails to start
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=20013 Summary: Exchange Server 2007 fails to start Product: Wine Version: 1.1.29 Platform: PC URL: http://technet.microsoft.com/en-us/exchange/bb330851.a spx OS/Version: Linux Status: NEW Keywords: download, Installer Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: leslie_alistair(a)hotmail.com Created an attachment (id=23552) --> (http://bugs.winehq.org/attachment.cgi?id=23552) Crash dump of installer See attachment for log of crash when it trying to install. This is a regression worked in 1.1.9 and failed in 1.1.29. Currently I don't have time to run a regression test. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 5

[Bug 19898] New: WinMX: crashes instantly upon start
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=19898 Summary: WinMX: crashes instantly upon start Product: Wine Version: 1.1.25 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: nylly123(a)gmx.de CC: julliard(a)winehq.org Created an attachment (id=23357) --> (http://bugs.winehq.org/attachment.cgi?id=23357) Console output / backtrace Regression: The filesharing app WinMX crashes instantly after starting. This has been tested with versions 3.53 and 3.54beta4, available here: http://archive.winmxworld.com/WinMX/WinMx%20Releases/winmx353.exe http://archive.winmxworld.com/WinMX/Beta/3.54%20betas/winmx354beta4.zip Bug is present in version 1.1.25 onwards through 1.1.28 from git. Works fine in wine 1.1.24 Console output/backtrace in attachment. Regression test shows edebc2b75f59b5d0f63e300084eba6fbca814bef is first bad commit, git bisect output also attached. Reverting the patch removes the bug. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 8

[Bug 19802] New: SiSoftware Sandra 2009.SP4 unhandled exception
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=19802 Summary: SiSoftware Sandra 2009.SP4 unhandled exception Product: Wine Version: 1.1.27 Platform: PC URL: http://download.cnet.com/SiSoftware-Sandra/3000-2086_4 -10556571.html OS/Version: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: kennybobs(a)o2.co.uk Created an attachment (id=23196) --> (http://bugs.winehq.org/attachment.cgi?id=23196) wine-1.1.27-387-ge4106b6 console output SiSoftware Sandra 2009.SP4 causes an unhandled exception when loading and exits. 1 0x7e86dc0f RpcRaiseException+0x35(exception=1722) [/home/test/wine-git/dlls/rpcrt4/rpcrt4_main.c:176] in rpcrt4 (0x0032acfc) 2 0x7e83531b NdrGetBuffer+0xa9(stubmsg=0x32b230, buflen=1172, handle=0xe69118) [/home/test/wine-git/dlls/rpcrt4/ndr_clientserver.c:175] in rpcrt4 (0x0032ad3c) 3 0x7e851881 NdrClientCall2+0xa03(pStubDesc=0x4bc260, pFormat="H") [/home/test/wine-git/dlls/rpcrt4/ndr_stubless.c:764] in rpcrt4 (0x0032b3fc) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 9

[Bug 19483] New: crash when launching zattoo
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=19483 Summary: crash when launching zattoo Product: Wine Version: unspecified Platform: PC URL: http://zattoo.com OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: davidmohammed(a)gmail.com Created an attachment (id=22649) --> (http://bugs.winehq.org/attachment.cgi?id=22649) this is a winedebug trace when running the application zattoo crashes with "serious application error" when starting the application wine Zattoo1.exe -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 16

[Bug 18786] New: Minitab doesn't run anymore
by wine-bugs＠winehq.org 18 Dec '09

18 Dec '09

http://bugs.winehq.org/show_bug.cgi?id=18786 Summary: Minitab doesn't run anymore Product: Wine Version: 1.1.22 Platform: PC-x86-64 URL: http://www.minitab.com OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: mitchellvc(a)gmail.com According to the App DB, Minitab 15.1 and Minitab 14.1 can be run with wine 0.9.54 or 0.9.55, installing dcom98 but it doesn't help anymore, in fact if you install it then would not be able to install neither Minitab 14.1 nor Minitab 15.1. Both versions of Minitab install successfully with default settings but they can't be run in any way. For Minitab 15.1 an error window from HASP Alladin software is shown. This is a regression since it was possible to make this two applications be run in an older version of wine. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 28