February 2010 - Wine-bugs - list.winehq.org

[Bug 16946] New: Calling CloseServiceHandle() multiple times on same client side service handle corrupts heap
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=16946 Summary: Calling CloseServiceHandle() multiple times on same client side service handle corrupts heap Product: Wine Version: 1.1.12 Platform: Other URL: http://www.nbc.com/Video/NBCDirectInstaller.exe OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: advapi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, I've seen this some time ago but forgot about it until encountering it again recently while investigating bug 16626 (this is follow up bug). Prerequisite: --- snip --- $ rm -rf ~/.wine $ winetricks -q wmp10 dotnet20 mdac28 $ wine NBCDirectInstaller.exe --- snip --- The installer uses managed (.NET) wrapper for SCM to fetch a list of current services using EnumServicesStatus(). First call to EnumServicesStatus() to query for buffer size and second time to get the real list. Although M$ .NET Framework error handling is somewhat questionable (it doesn't even check for failure on first call), it's actually Wine's management of client side service handles that causes the breakage. --- snip --- ... 0009:Call advapi32.OpenSCManagerW(00000000,00000000,00000004) ret=03f72620 0009:trace:service:OpenSCManagerW ((null),(null),0x00000004) 0009:trace:service:sc_handle_alloc sc_handle type=0 -> 0x1b1fc0 ... 0013:trace:service:svcctl_OpenSCManagerW ((null), (null), 4) ... 0009:trace:service:OpenSCManagerW returning 0x1b1fc0 (access : 0x00000004) 0009:Ret advapi32.OpenSCManagerW() retval=001b1fc0 ret=03f72620 ... 0009:Call advapi32.EnumServicesStatusW(001b1fc0,00000030,00000003,00000000,00000000,0032f32c,0032f328,0032f324) ret=03f726df 0009:fixme:service:EnumServicesStatusW 0x1b1fc0 type=30 state=3 (nil) 0 0x32f32c 0x32f328 0x32f324 0009:Ret advapi32.EnumServicesStatusW() retval=00000000 ret=03f726df 0009:Call KERNEL32.GetLastError() ret=03f726e5 0009:Ret KERNEL32.GetLastError() retval=00000005 ret=03f726e5 0009:Call KERNEL32.LocalAlloc(00000000,00000000) ret=04248243 0009:Ret KERNEL32.LocalAlloc() retval=03ec9988 ret=04248243 0009:Call advapi32.EnumServicesStatusW(001b1fc0,00000030,00000003,03ec9988,00000000,0032f32c,0032f328,0032f324) ret=03f726df 0009:fixme:service:EnumServicesStatusW 0x1b1fc0 type=30 state=3 0x3ec9988 0 0x32f32c 0x32f328 0x32f324 0009:Ret advapi32.EnumServicesStatusW() retval=00000000 ret=03f726df 0009:Call KERNEL32.GetLastError() ret=03f726e5 0009:Ret KERNEL32.GetLastError() retval=00000005 ret=03f726e5 ... 0009:Call advapi32.CloseServiceHandle(001b1fc0) ret=007aa722 0009:trace:service:CloseServiceHandle 0x1b1fc0 ... 0009:trace:service:sc_handle_destroy_manager destroying SC Manager 0x1b1fc0 0009:Ret advapi32.CloseServiceHandle() retval=00000001 ret=007aa722 ... --- snip --- Releasing the same client handle again: --- snip --- 0009:Call advapi32.CloseServiceHandle(001b1fc0) ret=007aa722 0009:trace:service:CloseServiceHandle 0x1b1fc0 0009:Call rpcrt4.NdrClientInitializeNew(0032ef8c,0032f06c,60376640,00000000) ret=60366f60 0009:Ret rpcrt4.NdrClientInitializeNew() retval=0032f06c ret=60366f60 0009:Call rpcrt4.NdrGetBuffer(0032f06c,00000018,00000000) ret=60366fbe 0009:err:rpc:I_RpcGetBuffer no binding 0009:Call KERNEL32.RaiseException(000006a6,00000000,00000000,00000000) ret=60b21399 0009:trace:seh:raise_exception code=6a6 flags=0 addr=0x7b844f6c ip=0x7b844fef tid=0009 0009:trace:seh:raise_exception eax=7b82cca9 ebx=7b8c3940 ecx=00000000 edx=00000010 esi=0032ee90 edi=0032ee10 0009:trace:seh:raise_exception ebp=0032edf8 esp=0032ed94 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000246 0009:trace:seh:call_stack_handlers calling handler at 0x60366cec code=6a6 flags=0 0009:trace:seh:call_stack_handlers handler at 0x60366cec returned 1 0009:trace:seh:call_stack_handlers calling handler at 0x6036266f code=6a6 flags=0 0009:Call rpcrt4.I_RpcExceptionFilter(000006a6) ret=60360fdd 0009:Ret rpcrt4.I_RpcExceptionFilter() retval=00000001 ret=60360fdd 0009:trace:seh:__regs_RtlUnwind code=6a6 flags=2 0009:trace:seh:__regs_RtlUnwind calling handler at 0x7bc3b2ec code=6a6 flags=2 0009:trace:seh:__regs_RtlUnwind handler at 0x7bc3b2ec returned 1 0009:trace:seh:__regs_RtlUnwind calling handler at 0x60366cec code=6a6 flags=2 0009:Call rpcrt4.NdrFreeBuffer(0032f06c) ret=60366e7f 0009:Ret rpcrt4.NdrFreeBuffer() retval=00000000 ret=60366e7f 0009:trace:seh:__regs_RtlUnwind handler at 0x60366cec returned 1 0009:Ret advapi32.CloseServiceHandle() retval=00000000 ret=007aa722 --- snip --- Even if RPC code correctly detects invalid SCM handles, the latter sc_handle_free() will eventually corrupt heap which will later lead to breakage. This needs to be avoided at all costs. Second allocation returns garbage sub block due to corrupted heap lists, causing exception. --- snip --- ... 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=79e78360 0009:Ret ntdll.RtlAllocateHeap() retval=001b1fc0 ret=79e78360 0009:Call KERNEL32.GetLastError() ret=79e71862 0009:Ret KERNEL32.GetLastError() retval=000006a6 ret=79e71862 0009:Call ntdll.RtlTryEnterCriticalSection(0013cedc) ret=79e74811 0009:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=79e74811 0009:Call KERNEL32.GetLastError() ret=79e783fb 0009:Ret KERNEL32.GetLastError() retval=000006a6 ret=79e783fb 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=79e78360 0009:Ret ntdll.RtlAllocateHeap() retval=03ec9988 ret=79e78360 0009:Call KERNEL32.GetLastError() ret=79e71862 0009:Ret KERNEL32.GetLastError() retval=000006a6 ret=79e71862 0009:Call KERNEL32.InitializeCriticalSection(03ec9998) ret=79e7a501 0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7bc450bd ip=0x7bc450bd tid=0009 0009:trace:seh:raise_exception info[0]=00000000 0009:trace:seh:raise_exception info[1]=00001796 0009:trace:seh:raise_exception eax=00001796 ebx=7bc9bd90 ecx=7bc9bd90 edx=00110078 esi=00110070 edi=0032f0e4 0009:trace:seh:raise_exception ebp=0032efe8 esp=0032ef80 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010206 0009:trace:seh:call_stack_handlers calling handler at 0x7a322c04 code=c0000005 flags=0 --- snip --- --- snip dlls/advapi32/service.c --- BOOL WINAPI CloseServiceHandle( SC_HANDLE hSCObject ) { struct sc_handle *obj; DWORD err; TRACE("%p\n", hSCObject); if (hSCObject == NULL) { SetLastError(ERROR_INVALID_HANDLE); return FALSE; } obj = (struct sc_handle *)hSCObject; __TRY { err = svcctl_CloseServiceHandle(&obj->server_handle); } __EXCEPT(rpc_filter) { err = map_exception_code(GetExceptionCode()); } __ENDTRY sc_handle_free( obj ); // <---- will eventually corrupt heap! if (err != ERROR_SUCCESS) { SetLastError(err); return FALSE; } return TRUE; } --- snip dlls/advapi32/service.c --- Change the way how client side service handles are managed to avoid heap corruption and allow for multiple service handle close calls. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 8

[Bug 16626] New: NBC Direct installer requires installation of Windows Installer 3.1 redist
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=16626 Summary: NBC Direct installer requires installation of Windows Installer 3.1 redist Product: Wine Version: 1.1.11 Platform: PC URL: http://www.nbc.com/Video/NBCDirectInstaller.exe OS/Version: Linux Status: NEW Keywords: dotnet, download, Installer Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: austinenglish(a)gmail.com CC: focht(a)gmx.net, yolande(a)haneder.biz Created an attachment (id=18188) --> (http://bugs.winehq.org/attachment.cgi?id=18188) terminal output in git Continuing from bug 12477, NBC installer doesn't yet work. Prereq's: $ rm -rf ~/.wine $ winetricks -q wmp10 dotnet20 mdac28 $ wine NBCDirectInstaller.exe Fails with an error box: SetupManager Error 'Failed to update Select Dialog resources from an external resource file. Please verify that the SetupManagerResource.resx files resides beside executable and is valid. Error details: No access to memory location OK Anastasius suggested to file the bug, saying it probably affects more dotnet apps. Terminal output attached. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 12

[Bug 21783] New: SlingPlayerSetup 2.0.4 causes wine error: Deficiency in wine message just like bug 21567
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=21783 Summary: SlingPlayerSetup 2.0.4 causes wine error: Deficiency in wine message just like bug 21567 Product: Wine Version: 1.1.39 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: currter(a)gmail.com Created an attachment (id=26340) --> (http://bugs.winehq.org/attachment.cgi?id=26340) This is the output/log from SlingPlayer 2.0.4 Setup executable file After wine install and winetricks dotnet20 script is run, when I install the downloaded SlingPlayer-2.0.4-Setup.exe I get an error perhaps caused by a deficiency in wine error. There are a series of other "errors" that occur during the setup process that occurred before with bug 21567. 1. Unable to register SlingSDK. Please contact system administrator. 2. Error 1603 Fatal error during registration, Consult Windows Installer Help (Msi.chm) or MSDN. 3. SlingPlayerSetup encountered serious problem. Problem caused in the program or a deficiency in Wine. I will attach the log and images. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 10

[Bug 17991] New: QueryPathOfRegTypeLib fails to locate typelib when (major.minor) = (0xffff.0xffff)
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=17991 Summary: QueryPathOfRegTypeLib fails to locate typelib when (major.minor) = (0xffff.0xffff) Product: Wine Version: 1.1.18 Platform: Other OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: oleaut32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, oleauto32.QueryPathOfRegTypeLib() doesn't work correctly when (major.minor) = (0xffff.0xffff). These parameters are passed by .NET Framework/CLR when regasm.exe utility is used to export and register typelibs from .NET assemblies. E.g. something like this: --- snip --- $ wine regasm.exe foo.dll /codebase /tlb --- snip --- WINEDEBUG=+tid,+seh,+ole,+reg --- snip --- ... 0021:trace:typelib:QueryPathOfRegTypeLib ({00020430-0000-0000-c000-000000000046}, ffff.ffff, 0x0, 0x32d634) 0021:trace:reg:NtOpenKey (0x21c,L"Typelib\\{00020430-0000-0000-C000-000000000046}",20019,0x32cfcc) 0021:trace:reg:NtOpenKey <- 0x22c 0021:trace:reg:RegEnumKeyExA (0x22c,0,0x32cfd4,0x32cfd0(16),(nil),(nil),(nil),(nil)) 0021:trace:ole:find_typelib_key found L"Typelib\\{00020430-0000-0000-C000-000000000046}": 1.0 0021:trace:reg:RegEnumKeyExA (0x22c,1,0x32cfd4,0x32cfd0(16),(nil),(nil),(nil),(nil)) 0021:trace:ole:find_typelib_key found L"Typelib\\{00020430-0000-0000-C000-000000000046}": 2.0 0021:trace:reg:RegEnumKeyExA (0x22c,2,0x32cfd4,0x32cfd0(16),(nil),(nil),(nil),(nil)) 0021:trace:ole:GetErrorInfo (0, 0x32cb70, (nil)) 0021:trace:ole:CreateErrorInfo (0x32aab8) 0021:trace:ole:IErrorInfoImpl_QueryInterface (0x1d4110)->( IID: {22f03340-547d-101b-8e65-08002b2bd119},0x32aab8) 0021:trace:ole:ICreateErrorInfoImpl_AddRef (0x1d4110) 0021:trace:ole:IErrorInfoImpl_AddRef (0x1d4110)->(count=1) 0021:trace:ole:IErrorInfoImpl_QueryInterface -- Interface: (0x32aab8)->(0x1d4114) 0021:trace:ole:IErrorInfoImpl_Release (0x1d4110)->(count=2) 0021:trace:ole:ICreateErrorInfoImpl_SetDescription (0x1d4110): L"Type library exporter encountered an error while processing 'SlingSDK'. Error: Common Language Runtime Internal error: 0x8002801d" 0021:trace:ole:ICreateErrorInfoImpl_SetHelpFile (0x1d4110,L"complib.hlp") 0021:trace:ole:ICreateErrorInfoImpl_SetHelpContext (0x1d4110,4451) 0021:trace:ole:ICreateErrorInfoImpl_QueryInterface (0x1d4110) 0021:trace:ole:IErrorInfoImpl_QueryInterface (0x1d4110)->( IID: {1cf2b120-547d-101b-8e65-08002b2bd119},0x32aab4) 0021:trace:ole:IErrorInfoImpl_AddRef (0x1d4110)->(count=1) 0021:trace:ole:IErrorInfoImpl_QueryInterface -- Interface: (0x32aab4)->(0x1d4110) 0021:trace:ole:SetErrorInfo (0, 0x1d4110) 0021:trace:ole:IErrorInfoImpl_AddRef (0x1d4110)->(count=2) 0021:trace:ole:ICreateErrorInfoImpl_Release (0x1d4110) 0021:trace:ole:IErrorInfoImpl_Release (0x1d4110)->(count=3) 0021:trace:ole:IErrorInfoImpl_Release (0x1d4110)->(count=2) 0021:trace:ole:GetErrorInfo (0, 0x32cb3c, 0x1d4110) 0021:trace:ole:IErrorInfoImpl_GetSource (0x1d4110)->(pBstrSource=0x1d4298) 0021:trace:ole:IErrorInfoImpl_GetDescription (0x1d4110)->(pBstrDescription=0x1d4294) 0021:trace:ole:IErrorInfoImpl_GetHelpFile (0x1d4110)->(pBstrHelpFile=0x1d429c) 0021:trace:ole:IErrorInfoImpl_GetHelpContext (0x1d4110)->(pdwHelpContext=0x1d42a0) 0021:trace:ole:IErrorInfoImpl_GetGUID (0x1d4110)->(count=1) 0021:trace:ole:IErrorInfoImpl_Release (0x1d4110)->(count=1) 0021:trace:ole:IErrorInfoImpl_Release -- destroying IErrorInfo(0x1d4110) 0021:trace:seh:raise_exception code=e06d7363 flags=1 addr=0x7b8437e8 ip=0x7b84386b tid=0021 0021:trace:seh:raise_exception info[0]=19930520 0021:trace:seh:raise_exception info[1]=0032cb1c 0021:trace:seh:raise_exception info[2]=7a35d570 0021:trace:seh:raise_exception eax=7b82ca2d ebx=7b8c2bf8 ecx=00000000 edx=00004000 esi=00004000 edi=00000000 0021:trace:seh:raise_exception ebp=0032ca98 esp=0032ca34 cs=0023 ds=002b es=002b fs=0063 gs=006b --- snip --- MSDN doesn't mention such condition so this obviously needs some test case to find out what logic is used to select the best match (first? last? lowest? highest?). dll/oleaut32/typelib.c:find_typelib_key() needs to be fixed accordingly. "wMaj" needs to be made an "out" parameter too to actually return best matching maj.min pair With this part fixed it goes further - only to stumble into next bug ;-) Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 18025] New: .NET 2.0 Regasm.exe typelib exporter needs ICreateTypeInfo2::SetCustData
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=18025 Summary: .NET 2.0 Regasm.exe typelib exporter needs ICreateTypeInfo2::SetCustData Product: Wine Version: 1.1.19 Platform: Other URL: http://downloads.slingmedia.com/go/slingbox-desktop-us OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: oleaut32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, after overcoming bug 17799, regasm typelib exporter blocks on next one: --- snip --- $ wine ../../../windows/Microsoft.NET/Framework/v2.0.50727/regasm.exe SlingSDK.dll /code /tlb fixme:ole:CoGetContextToken stub Microsoft (R) .NET Framework Assembly Registration Utility 2.0.50727.42 Copyright (C) Microsoft Corporation 1998-2004. All rights reserved. fixme:ole:TLB_ReadTypeLib Header type magic 0x00905a4d not supported. err:ole:TLB_ReadTypeLib Loading of typelib L"C:\\Program Files\\Sling Media\\SlingPlayer\\SlingSDK.dll" failed with error 0 fixme:shell:URL_ParseUrl failed to parse L"" fixme:shell:URL_ParseUrl failed to parse L"RegAsm" fixme:shell:URL_ParseUrl failed to parse L"" fixme:shell:URL_ParseUrl failed to parse L"SMBridge" fixme:powrprof:DllMain (0x61020000, 1, (nil)) not fully implemented fixme:shell:URL_ParseUrl failed to parse L"System" Types registered successfully fixme:shell:URL_ParseUrl failed to parse L"System.Drawing" Type library exporter warning processing 'SlingSDK.Evolution.FiniteStateAutomation.Pair`1, SlingSDK'. Warning: Type library exporter encountered a generic type. Generic classes may not be exposed to COM. fixme:typelib2:ICreateTypeInfo2_fnSetCustData (0x1df508,{0f21f359-ab84-41e8-9a78-36d110e6d2f9},0x32c5b0), stub! RegAsm : error RA0000 : Type library exporter encountered an error while processing 'SlingSDK.WebServices.ClipAndSlingService, SlingSDK'. Error: Common Language Runtime Internal error: 0x8007000e --- snip --- The TLB_ReadTypeLib and typelib exporter warnings are *expected* and completely sane (I'll add a note to appdb later to prevent confusion). The problem is ICreateTypeInfo2::SetCustData being a stub. --- snip dlls/oleaut32/typelib2.c --- static HRESULT WINAPI ICreateTypeInfo2_fnSetCustData( ICreateTypeInfo2* iface, /* [I] The typeinfo in which to set the custom data. */ REFGUID guid, /* [I] The GUID used as a key to retrieve the custom data. */ VARIANT* pVarVal) /* [I] The custom data. */ { FIXME("(%p,%s,%p), stub!\n", iface, debugstr_guid(guid), pVarVal); return E_OUTOFMEMORY; } --- snip dlls/oleaut32/typelib2.c --- Trace log: --- snip --- 007b:Call oleaut32.SysAllocString(0032c638 L"SlingSDK.WebServices.ClipAndSlingService") ret=7a037994 007b:Call KERNEL32.lstrlenW(0032c638 L"SlingSDK.WebServices.ClipAndSlingService") ret=60dfbda4 007b:Ret KERNEL32.lstrlenW() retval=00000028 ret=60dfbda4 ... 007b:Ret oleaut32.SysAllocString() retval=001fb59c ret=7a037994 007b:fixme:typelib2:ICreateTypeInfo2_fnSetCustData (0x205ab8,{0f21f359-ab84-41e8-9a78-36d110e6d2f9},0x32c5b0), stub! 007b:Call ole32.GetErrorInfo(00000000,0032bcd4) ret=79f97d03 007b:Ret ole32.GetErrorInfo() retval=00000001 ret=79f97d03 ... 007b:Call KERNEL32.FormatMessageW(00001000,00000000,8007000e,00000400,0032bcf8,00000400,00000000) ret=7a127c38 007b:Ret KERNEL32.FormatMessageW() retval=00000000 ret=7a127c38 007b:Call KERNEL32.GetLastError() ret=79f061ff 007b:Ret KERNEL32.GetLastError() retval=00000717 ret=79f061ff ... 007b:trace:ole:ICreateErrorInfoImpl_SetDescription (0x1fb468): L"Type library exporter encountered an error while processing 'SlingSDK.WebServices.ClipAndSlingService, SlingSDK'. Error: Common Language Runtime Internal error: 0x8007000e" ... 007b:Call KERNEL32.RaiseException(e06d7363,00000001,00000003,0032bc28) ret=78158dd3 007b:trace:seh:raise_exception code=e06d7363 flags=1 addr=0x7b84386b ip=0x7b84386b tid=007b 007b:trace:seh:raise_exception info[0]=19930520 007b:trace:seh:raise_exception info[1]=0032bc80 007b:trace:seh:raise_exception info[2]=7a35d570 007b:trace:seh:raise_exception eax=7b82ca2d ebx=7b8c2bf8 ecx=00000000 edx=0032bc14 esi=0032bc14 edi=0032bb90 007b:trace:seh:raise_exception ebp=0032bb78 esp=0032bb14 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000246 --- snip --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 13

[Bug 21557] New: .net 3.0 redistributable installer aborts after clicking 'OK'
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=21557 Summary: .net 3.0 redistributable installer aborts after clicking 'OK' Product: Wine Version: 1.1.37 Platform: x86 OS/Version: Linux Status: NEW Keywords: regression Severity: normal Priority: P2 Component: wintrust AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com http://appdb.winehq.org/objectManager.php?sClass=version&iId=9828 says "winetricks dotnet30" works but says there is a "large delay near the end of installation". This seems to be true with wine-1.1.31, but with current wine, it aborts after a few seconds instead. Looking in c:/users/$LOGNAME/Temp, I see dd_dotnetfx3error.txt which says [01/30/10,16:19:12] XPSEPSC x86 Installer: [2] Error code 1603 for this component means "ERROR_INSTALL_FAILURE" and dd_XPS.txt (?) which says STR_FAILED_INF_INTEGRITY. Could this be the same regression as bug 21542? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 4

[Bug 21542] New: SOFTPUB_LoadCatalogMessage should use catalog members instead of file ones for retrieving msg data
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=21542 Summary: SOFTPUB_LoadCatalogMessage should use catalog members instead of file ones for retrieving msg data Product: Wine Version: 1.1.37 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wintrust AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, recent wintrust refactoring patch series broke PowerShell 1.x/2.x installers by revealing a previously hidden bug... --- snip --- 0036:Call wintrust.SoftpubInitialize(001e86f8) ret=7974e691 0036:trace:wintrust:SoftpubInitialize (0x1e86f8) 0036:trace:wintrust:SoftpubInitialize returning 00000000 0036:Ret wintrust.SoftpubInitialize() retval=00000000 ret=7974e691 0036:Call wintrust.SoftpubLoadMessage(001e86f8) ret=7974e691 0036:trace:wintrust:SoftpubLoadMessage (0x1e86f8) 0036:Call KERNEL32.CreateFileW(0033b53c L"C:\\windows\\system32\\catroot\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\KB968930xp.cat",80000000,00000001,00000000,00000003,00000080,00000000) ret=7974bf32 0036:Ret KERNEL32.CreateFileW() retval=0000007c ret=7974bf32 0036:Call crypt32.CryptSIPRetrieveSubjectGuid(0033b53c L"C:\\windows\\system32\\catroot\\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\\KB968930xp.cat",0000007c,001640dc) ret=7974bf70 ... 0036:Call KERNEL32.GetFileSize(0000007c,00000000) ret=686fa459 0036:Ret KERNEL32.GetFileSize() retval=0000e8d2 ret=686fa459 ... 0036:Ret crypt32.CryptSIPRetrieveSubjectGuid() retval=00000001 ret=7974bf70 ... 0036:Call crypt32.CryptSIPLoad(001640dc,00000000,001ed4c0) ret=7974b4f9 ... 0036:Ret crypt32.CryptSIPLoad() retval=00000001 ret=7974b4f9 0036:trace:wintrust:SOFTPUB_GetSIP returning 0 ... 0036:Call wintrust.CryptSIPGetSignedDataMsg(001e8780,001e8730,00000000,0033b188,00000000) ret=686fb39a 0036:trace:wintrust:CryptSIPGetSignedDataMsg (0x1e8780 0x1e8730 0 0x33b188 (nil)) 0036:trace:wintrust:WINTRUST_GetSignedMsgFromCatFile (0x1e8780 0x1e8730 0 0x33b188 (nil)) 0036:Call KERNEL32.GetFileSize(0033b53c,00000000) ret=7974418b 0036:Ret KERNEL32.GetFileSize() retval=ffffffff ret=7974418b 0036:trace:wintrust:CryptSIPGetSignedDataMsg returning 1 0036:Ret wintrust.CryptSIPGetSignedDataMsg() retval=00000001 ret=686fb39a 0036:Call KERNEL32.GetProcessHeap() ret=7974e07e 0036:Ret KERNEL32.GetProcessHeap() retval=00110000 ret=7974e07e 0036:Call ntdll.RtlAllocateHeap(00110000,00000008,ffffffff) ret=7974e095 0036:Ret ntdll.RtlAllocateHeap() retval=00000000 ret=7974e095 0036:Call KERNEL32.CloseHandle(0000007c) ret=7974bfff 0036:Ret KERNEL32.CloseHandle() retval=00000001 ret=7974bfff 0036:trace:wintrust:SoftpubLoadMessage returning 1 (0000000e) 0036:Ret wintrust.SoftpubLoadMessage() retval=00000001 ret=7974e691 0036:trace:wintrust:WINTRUST_DefaultVerify returning 0000000e 0036:trace:wintrust:WINTRUST_DefaultClose ((nil), {00aac56b-cd44-11d0-8cc2-00c04fc295ee}, 0x33b4e8) 0036:Call wintrust.SoftpubCleanup(001e86f8) ret=7974eb81 ... --- snip --- SoftpubLoadMessage -> (WTD_CHOICE_CATALOG) SOFTPUB_LoadCatalogMessage -> SOFTPUB_GetMessageFromFile WINTRUST_GetSignedMsgFromCatFile -> GetFileSize() gets passed invalid file handle (stack garbage) -> following alloc fails and error is propagated to top ... --- snip dlls/wintrust/softpub.c --- static DWORD SOFTPUB_LoadCatalogMessage(CRYPT_PROVIDER_DATA *data) { DWORD err; HANDLE catalog = INVALID_HANDLE_VALUE; if (!data->pWintrustData->u.pCatalog) { SetLastError(ERROR_INVALID_PARAMETER); return FALSE; } catalog = CreateFileW(data->pWintrustData->u.pCatalog->pcwszCatalogFilePath, GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL); if (catalog == INVALID_HANDLE_VALUE) return GetLastError(); if (!CryptSIPRetrieveSubjectGuid( data->pWintrustData->u.pCatalog->pcwszCatalogFilePath, catalog, &data->u.pPDSip->gSubject)) { err = GetLastError(); goto error; } err = SOFTPUB_GetSIP(data); if (err) goto error; err = SOFTPUB_GetMessageFromFile(data, data->pWintrustData->u.pFile->hFile, data->pWintrustData->u.pFile->pcwszFilePath); if (err) goto error; ... } --- snip dlls/wintrust/softpub.c --- This is a catalog type file hence the pFile members can't be used for SOFTPUB_GetMessageFromFile(), e.g. "data->pWintrustData->u.pFile->hFile" and "data->pWintrustData->u.pFile->pcwszFilePath" will be invalid upon entry. You must use "catalog" file handle and "data->pWintrustData->u.pCatalog->pcwszCatalogFilePath" just like you do with CryptSIPRetrieveSubjectGuid() for SOFTPUB_GetMessageFromFile(). Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 10

[Bug 21549] New: Windows PowerShell 1.x installer dies on unimplemented function USERENV.dll.138
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=21549 Summary: Windows PowerShell 1.x installer dies on unimplemented function USERENV.dll.138 Product: Wine Version: 1.1.37 Platform: x86 URL: http://www.google.de/search?q=WindowsXP-KB926139-v2-x8 6-ENU.exe OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, after working around bug 21542, the installer dies in post-install action: --- snip --- 0030:Starting process L"C:\\3f9c459343b0ee6273e24b88b0d982f2\\update\\update.exe" (entryproc=0x1065e2c) ... 0030:Call shlwapi.PathFileExistsW(0033ad50 L"C:\\users\\Public\\Start Menu\\Programs") ret=68ad8ae7 0030:Call KERNEL32.SetErrorMode(00000001) ret=68c4a703 0030:Ret KERNEL32.SetErrorMode() retval=00008005 ret=68c4a703 0030:Call KERNEL32.GetFileAttributesW(0033ad50 L"C:\\users\\Public\\Start Menu\\Programs") ret=68c4a714 0030:Ret KERNEL32.GetFileAttributesW() retval=00000010 ret=68c4a714 0030:Call KERNEL32.SetErrorMode(00008005) ret=68c4a725 0030:Ret KERNEL32.SetErrorMode() retval=00000001 ret=68c4a725 0030:Ret shlwapi.PathFileExistsW() retval=00000001 ret=68ad8ae7 0030:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0033b00c L"C:\\users\\Public\\Start Menu\\Programs",ffffffff,0033b33c,00000104,00000000,00000000) ret=68ad8d7d 0030:Ret KERNEL32.WideCharToMultiByte() retval=00000024 ret=68ad8d7d 0030:Ret shell32.SHGetSpecialFolderPathA() retval=00000001 ret=01072df8 0030:Call KERNEL32.FindFirstFileA(0033b544 "C:\\users\\Public\\Start Menu\\Programs\\Windows PowerShell 1.0\\@.lnk",0033b18c) ret=0106da6d 0030:Ret KERNEL32.FindFirstFileA() retval=ffffffff ret=0106da6d 0030:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc4af8a ip=7bc4af8a tid=0030 0030:trace:seh:raise_exception info[0]=0108d004 0030:trace:seh:raise_exception info[1]=0000008a wine: Call from 0x7bc4af8a to unimplemented function USERENV.dll.138, aborting 0030:trace:seh:call_vectored_handlers calling handler at 0x68ec9e52 code=80000100 flags=1 0030:trace:seh:call_vectored_handlers handler at 0x68ec9e52 returned 0 0030:trace:seh:call_vectored_handlers calling handler at 0x6879bdc6 code=80000100 flags=1 0030:trace:seh:call_vectored_handlers handler at 0x6879bdc6 returned 0 0030:trace:seh:call_stack_handlers calling handler at 0x1066099 code=80000100 flags=1 0030:Call msvcrt._except_handler3(0033b25c,0033f37c,0033aeec,0033add0) ret=7bc77ab5 ... --- snip --- Dumping userenv imports for the installer: --- snip --- $ winedump -j import update.exe ... offset 0008c2f4 USERENV.dll Hint/Name Table: 0008D824 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 000017F8 Ordn Name 138 <by ordinal> 121 <by ordinal> 119 <by ordinal> ... --- snip --- Actually only ordinal 138 seems to get used (Wine 'Windows XP' config). Unfortunately I didn't find anything useful about this one (MSDN, blogs, Bing ..) :-( By analyzing the caller stack setup we can deduce the necessary information to create a simple stub. The installer calls the ordinal like this: --- snip --- $ winedbg disas ... 0x01072e9b: pushl 0xffffff88(%ebp) 0x01072e9e: leal 0xbc(%ebp),%eax 0x01072ea4: pushl %eax 0x01072ea5: leal 0x5d0(%ebp),%eax 0x01072eab: pushl %eax 0x01072eac: pushl 0xffffff9c(%ebp) 0x01072eaf: leal 0x2c4(%ebp),%eax 0x01072eb5: pushl 0xffffffa0(%ebp) 0x01072eb8: pushl %eax 0x01072eb9: pushl 0xffffffa4(%ebp) 0x01072ebc: leal 0x4cc(%ebp),%eax 0x01072ec2: pushl %eax 0x01072ec3: leal 0x3c8(%ebp),%eax 0x01072ec9: pushl %eax 0x01072eca: leal 0x7d8(%ebp),%eax 0x01072ed0: pushl %eax 0x01072ed1: leal 0x6d4(%ebp),%eax 0x01072ed7: pushl %eax 0x01072ed8: pushl 0xffffffb4(%ebp) 0x01072edb: call *0x10017f8 -> 0x00450000 0x01072ee1: cmpl %ebx,%eax 0x01072ee3: movl %eax,0xffffffa8(%ebp) 0x01072ee6: jnz 0x01072f0c ... --- snip --- number of arguments: 12 calling conv: stdcall return type: most likely boolean (like the other known userenv API). Armed with this information one can add a simple stub, export with ordinal 138, -noname and 12 ptr params, name it whatever you like. If you find any documented name, feel free to use it. If we fake the stub to return FALSE, following messages will be logged to: "c:\windows\KB926139-v2.log" --- snip --- 22.312: Failed To Create Link -3 Windows PowerShell 22.314: Failed To Create Link -3 Release Notes 22.316: Failed To Create Link -3 Getting Started 22.319: Failed To Create Link -3 User Guide 22.321: Failed To Create Link -3 Quick Reference --- snip --- So this API is most likely some Lnk creation stuff. Anyway, that simple stub is sufficient to let the installer proceed with its post-install steps. In the end, the installer runs into bug 16876 (bug in property sheet control). Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 8

[Bug 10467] New: Making Microsoft .NET 2.0 to work in wine, based on example app FastMD5 1.4 for NET 2.0
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=10467 Summary: Making Microsoft .NET 2.0 to work in wine, based on example app FastMD5 1.4 for NET 2.0 Product: Wine Version: CVS/GIT Platform: PC URL: http://www.paehl.de/english.php OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-dotnet AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, this bug id exists for the sole purpose of showing my little journey of getting .NET 2.0 to work in wine. This topic does *NOT* cover the MONO project in any way. The windows version of MONO is covered by other bug reports. DISCLAIMER: This is just a first step which aims at major show stoppers. There are *many* issues left when it comes to managed (JIT) vs. unmanaged (native) API code bridging. To iron out all the bugs, many different applications are needed which cover the whole range of .NET Framework. I randomly chose a simple .NET 2.0 app which uses plain system.windows.forms stuff (no fancy controls/interop). --- snip --- http://www.paehl.de/fastmd5_net20.zip FASTMD5 create very fast with low CPU use a MD5 hash. Required .NET 1.1 or 2.0 --- snip --- Just as foreword: yes, it plain sucks to debug mixed code in wine (managed + unmanaged) because the tools required don't work reliable (or at all) due to several wine bugs/design problems. Prerequisite: successful installation of .NET 2.0 Framework and wine-0.9.49 (or GIT) ---------- If you start .NET apps they will fail with stack overflows and some exceptions thrown. The exception type tells us what we are dealing with: 0xe0434f4d For the uninitiated: this an exception type exclusively thrown by .NET common language runtime (CLR). Using my specially hacked wine to run tools like windbg one can get a raw estimate by looking at native method callstack: --- snip --- 0:000> sxe clr .. 0:000> .load clr20\sos.dll .. 0:000> g .. 0:000> kb ChildEBP RetAddr Args to Child WARNING: Stack unwind information not available. Following frames may be wrong. 0034efb8 79f97065 e0434f4d 00000001 00000001 KERNEL32!RaiseException+0x78 0034f018 7a0945a4 00a11cb4 00000000 00000000 mscorwks!RaiseTheExceptionInternalOnly+0x226 0034f0dc 02fa364b 00000000 0000007f 0034f138 mscorwks!JIT_Throw+0xd0 0034f1d8 79e88f63 00000000 0012e0f8 0034f22c 0x2fa364b 0034f1f8 79e88f63 00000000 00000000 0016b200 mscorwks!CallDescrWorker+0x33 0034f210 79e88ee4 0034f2e8 00000002 0034f2b0 mscorwks!CallDescrWorker+0x33 .. --- snip --- JIT code is at 0x2fa364b which transfers managed exceptions using mscorwks!JIT_Throw() to native code/OS. Lets look at CLR exception info... --- snip --- 0:000> !PrintException Exception object: 00a11cb4 Exception type: System.TypeInitializationException Message: The type initializer for 'System.Globalization.TextInfo' threw an exception. InnerException: <none> StackTrace (generated): <none> StackTraceString: <none> HResult: 80131534 --- snip --- And the managed code callstack... --- snip --- 0:000> !ClrStack OS Thread Id: 0xf (0) ESP EIP 0034f040 7b8414d8 [HelperMethodFrame: 0034f040] 0034f0e4 02fa364b System.Globalization.TextInfo.GetNativeTextInfo(Int32) 0034f114 02fa3511 System.Globalization.TextInfo.get_InvariantNativeTextInfo() 0034f140 02fa193d System.String.Compare(System.String, Int32, System.String, Int32, Int32, System.StringComparison) 0034f16c 02fa15a1 System.Security.Util.URLString.PreProcessForExtendedPathRemoval(System.String, Boolean) 0034f184 02fa10b0 System.AppDomainSetup.NormalizePath(System.String, Boolean) 0034f1a4 02fa06d6 System.AppDomainSetup.SetupDefaultApplicationBase(System.String) 0034f1bc 02fa02cc System.AppDomain.SetupFusionStore(System.AppDomainSetup) 0034f1d4 02fa01fa System.AppDomain.SetupDomain(Boolean, System.String, System.String) 0034f42c 79e88f63 [GCFrame: 0034f42c] 0034f9e0 79e88f63 [DebuggerClassInitMarkFrame: 0034f9e0] --- snip --- Some native method call in GetNativeTextInfo() seems to be the culprit. For many (string) resource based stuff to work, a unicode OS casing table is required. The table for the invariant version is built from external .NLS file. To make story short: wine does not ship the default case mapping table for unicode characters: "l_intl.nls". This is a "must" requirement and failure results in early TypeInitializationException while setting up default application domain. Short fix: copy the file from your windows system32 directory to wine system32. Long run fix: let wine generate/install this file. Not a big deal. Now simple .NET _console_ based apps (like "Hello World") will work. --------------------------------------- Stay tuned, more goodies to come ... Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 109

[Bug 15437] New: Company of Heroes Opposing Fronts: Installer fails
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=15437 Summary: Company of Heroes Opposing Fronts: Installer fails Product: Wine Version: 1.1.5 Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: xvachon(a)gmail.com Created an attachment (id=16303) --> (http://bugs.winehq.org/attachment.cgi?id=16303) log Installation of the game is not possible. Exception EAccessViolation error in module GameInst.exe happens. According to test data the game had to be installed from a Windows installation in order to be played. A log is attached. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 66