December 2014 - Wine-bugs - list.winehq.org

[Bug 12968] New: MS Visual Studio V6 setup error 258 since 0.9.58
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=12968 Summary: MS Visual Studio V6 setup error 258 since 0.9.58 Product: Wine Version: 0.9.61. Platform: All OS/Version: Linux Status: UNCONFIRMED Severity: critical Priority: P1 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: k.king177(a)ntlworld.com trying to install Visual Studio v6 get MS Msgbox headed "Setup Error 258" with text Your setup files may be damaged. Try restarting the setup program from where you originally ran it. this is probably related or from same issue causing bug# 12967 for Office 97 see that bug for environment details. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 5

[Bug 15948] New: Error generated when trying to install visual studio 6.0 into centos5 via wine
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=15948 Summary: Error generated when trying to install visual studio 6.0 into centos5 via wine Product: Wine Version: 1.1.7 Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: enhancement Priority: P4 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: boniemx(a)gmail.com Created an attachment (id=17135) --> (http://bugs.winehq.org/attachment.cgi?id=17135) error-log for installation of visual studio 6.0 via wine into centos5 Hi, am trying to install Visual studio 6.0, but it produces the error that I have attached. Please I need to do this urgently. Please help -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 6

[Bug 34828] New: Visual Studio 2010 fails to start (IWICBitmapFrameEncode_WriteSource_Proxy, empty rect)
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=34828 Bug #: 34828 Summary: Visual Studio 2010 fails to start (IWICBitmapFrameEncode_WriteSource_Proxy, empty rect) Product: Wine Version: 1.7.5 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: windowscodecs AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, continuation of bug 32654 Prerequisite: winetricks -q dotnet20 dotnet40 corefonts Copying my analysis verbatim from http://bugs.winehq.org/show_bug.cgi?id=32654#c2 here --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Microsoft Visual Studio 10.0/Common7/IDE ... $ WINEDEBUG=+tid,+seh,+relay,+wincodecs wine ./VCExpress.exe ... 002b:Call windowscodecs.WICSetEncoderFormat_Proxy(065e6080,00000000,065e4e50,0032f15c) ret=0f24f5bb 002b:trace:wincodecs:WICSetEncoderFormat_Proxy 0x65e6080,(nil),0x65e4e50,0x32f15c 002b:trace:wincodecs:BitmapImpl_GetPixelFormat (0x65e6080,0x32f008) 002b:trace:wincodecs:TiffFrameEncode_SetPixelFormat (0x65e4e50,{6fddc324-4e03-4bfe-b185-3d77768dc90f}) 002b:trace:wincodecs:BitmapImpl_AddRef (0x65e6080) refcount=5 002b:Ret windowscodecs.WICSetEncoderFormat_Proxy() retval=00000000 ret=0f24f5bb ... 002b:Call windowscodecs.IWICBitmapFrameEncode_WriteSource_Proxy(065e4e50,065e6080,0032f214) ret=0f24f77b 002b:trace:wincodecs:TiffFrameEncode_WriteSource (0x65e4e50,0x65e6080,0x32f214) 002b:trace:wincodecs:BitmapImpl_GetPixelFormat (0x65e6080,0x32ef7c) 002b:Ret windowscodecs.IWICBitmapFrameEncode_WriteSource_Proxy() retval=80070057 ret=0f24f77b ... 002b:trace:seh:raise_exception code=e0434352 flags=1 addr=0x7b83aabb ip=7b83aabb tid=002b 002b:trace:seh:raise_exception info[0]=80070057 002b:trace:seh:raise_exception info[1]=00000000 002b:trace:seh:raise_exception info[2]=00000000 002b:trace:seh:raise_exception info[3]=00000000 002b:trace:seh:raise_exception info[4]=79140000 002b:trace:seh:raise_exception eax=7b826891 ebx=7b8b96b0 ecx=79140000 edx=0032ef88 esi=0032f068 edi=0032efe0 002b:trace:seh:raise_exception ebp=0032efb8 esp=0032ef54 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000283 002b:trace:seh:call_vectored_handlers calling handler at 0x791f5a7c code=e0434352 flags=1 ... 002b:Call oleaut32.SysAllocStringLen(01584f9c L"Value does not fall within the expected range.",0000002e) ret=793c87f2 --- snip --- --- snip --- Wine-dbg>bt Backtrace: =>0 0xf728bb6f TiffFrameEncode_WriteSource(iface=0xeccd9f0, pIBitmapSource=0xec9f448, prc=0x33f214) [/home/focht/projects/wine/wine-git/dlls/windowscodecs/tiffformat.c:1642] in windowscodecs (0x0033f108) 1 0x06a6f77b (0x0033f19c) 2 0x06a6edcd (0x0033f25c) Wine-dbg>p *prc {X=0, Y=0, Width=0, Height=0} Wine-dbg>p *This {IWICBitmapFrameEncode_iface={lpVtbl=0xf72f7740}, ref=0x1, parent=0xec9f6e8, initialized=0x1, info_written=0, committed=0, format=0xf72f8d20, width=0x10, height=0x10, xres=96.000000, yres=96.000000, lines_written=0} --- snip --- Source of failure: http://source.winehq.org/git/wine.git/blob/d8c71dd5ed80111c401382dc9dd6c5a2… --- snip --- 1640 static HRESULT WINAPI TiffFrameEncode_WriteSource(IWICBitmapFrameEncode *iface, 1641 IWICBitmapSource *pIBitmapSource, WICRect *prc) 1642 { 1643 TiffFrameEncode *This = impl_from_IWICBitmapFrameEncode(iface); 1644 HRESULT hr; 1645 WICRect rc; 1646 WICPixelFormatGUID guid; 1647 UINT stride; 1648 BYTE *pixeldata; ... Wine-dbg>l 1693 if (prc->Width != This->width) return E_INVALIDARG; 1694 1695 stride = (This->format->bpp * This->width + 7)/8; 1696 1697 pixeldata = HeapAlloc(GetProcessHeap(), 0, stride * prc->Height); 1698 if (!pixeldata) return E_OUTOFMEMORY; 1699 1700 hr = IWICBitmapSource_CopyPixels(pIBitmapSource, prc, stride, 1701 stride*prc->Height, pixeldata); 1702 1703 if (SUCCEEDED(hr)) --- snip --- $ wine --version wine-1.7.5-174-g2eb6502 Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 5

[Bug 32654] New: Visual Studio 2010 fails on shutdown, needs windowscodecs WICSetEncoderFormat_Proxy stub
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=32654 Bug #: 32654 Summary: Visual Studio 2010 fails on shutdown, needs windowscodecs WICSetEncoderFormat_Proxy stub Product: Wine Version: 1.5.21 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: windowscodecs AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, upon shutdown of Visual Studio 2010 IDE: --- snip --- 002c:Call KERNEL32.GetProcAddress(f7140000,055bfe54 "WICSetEncoderFormat_Proxy") ret=79171e1e 002c:Ret KERNEL32.GetProcAddress() retval=f714e9fc ret=79171e1e ... 002c:Call KERNEL32.RaiseException(80000100,00000001,00000002,0032dbf4) ret=f71d0891 002c:trace:seh:raise_exception code=80000100 flags=1 addr=0x7b83aa77 ip=7b83aa77 tid=002c 002c:trace:seh:raise_exception info[0]=f71d0900 002c:trace:seh:raise_exception info[1]=f71d0a88 wine: Call from 0x7b83aa77 to unimplemented function windowscodecs.dll.WICSetEncoderFormat_Proxy, aborting 002c:trace:seh:call_vectored_handlers calling handler at 0x791f5a7c code=80000100 flags=1 002c:Call KERNEL32.GetLastError() ret=791f5aa7 002c:Ret KERNEL32.GetLastError() retval=00000000 ret=791f5aa7 002c:trace:seh:call_vectored_handlers handler at 0x791f5a7c returned 0 002c:trace:seh:call_stack_handlers calling handler at 0x791ccc44 code=80000100 flags=1 --- snip --- Prerequisite: winetricks -q dotnet20 dotnet40 corefonts Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 16

[Bug 32561] New: Visual Studio 2010 (10.0) Express Edition needs windowscodecs ComponentFactory_CreateBitmapFromHICON impl
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=32561 Bug #: 32561 Summary: Visual Studio 2010 (10.0) Express Edition needs windowscodecs ComponentFactory_CreateBitmapFromHICON impl Product: Wine Version: 1.5.20 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: windowscodecs AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, continuation of bug 32549 With Dmitry's patches (http://source.winehq.org/patches/data/93114 and http://source.winehq.org/patches/data/93115) the IDE runs further - into next bug ;-) Prerequisite: winetricks -q dotnet20 dotnet40 --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Microsoft Visual Studio 10.0/Common7/IDE ... $ WINEDEBUG=+tid,+seh,+relay,+wincodecs wine ./VCExpress.exe ... 002b:Call KERNEL32.GetProcAddress(f7140000,0554f03d "IWICImagingFactory_CreateBitmapFromHICON_Proxy") ret=79171e1e 002b:Ret KERNEL32.GetProcAddress() retval=f714f040 ret=79171e1e ... 002b:Call windowscodecs.IWICImagingFactory_CreateBitmapFromHICON_Proxy(0f0313d0,0001008c,0032f1cc) ret=06a2ac67 002b:fixme:wincodecs:ComponentFactory_CreateBitmapFromHICON (0xf0313d0,0x1008c,0x32f1cc): stub 002b:Ret windowscodecs.IWICImagingFactory_CreateBitmapFromHICON_Proxy() retval=80004001 ret=06a2ac67 ... 002b:Call KERNEL32.RaiseException(e0434352,00000001,00000005,0032f0ec) ret=791cac08 002b:trace:seh:raise_exception code=e0434352 flags=1 addr=0x7b83aa77 ip=7b83aa77 tid=002b 002b:trace:seh:raise_exception info[0]=80004001 002b:trace:seh:raise_exception info[1]=00000000 002b:trace:seh:raise_exception info[2]=00000000 002b:trace:seh:raise_exception info[3]=00000000 002b:trace:seh:raise_exception info[4]=79140000 002b:trace:seh:raise_exception eax=7b826831 ebx=7b8b96b0 ecx=79140000 edx=0032efc8 esi=0032f0a8 edi=0032f020 002b:trace:seh:raise_exception ebp=0032eff8 esp=0032ef94 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000283 002b:trace:seh:call_vectored_handlers calling handler at 0x791f5a7c code=e0434352 flags=1 ... 002b:Call oleaut32.SysAllocStringLen(01568104 L"The method or operation is not implemented.",0000002b) ret=793c87f2 ... --- snip --- 'winetricks windowscodecs' works around. Source: http://source.winehq.org/git/wine.git/blob/96ebc618b5029723d1f2401dc54e5e0f… --- snip --- 595 static HRESULT WINAPI ComponentFactory_CreateBitmapFromHICON(IWICComponentFactory *iface, 596 HICON hIcon, IWICBitmap **ppIBitmap) 597 { 598 FIXME("(%p,%p,%p): stub\n", iface, hIcon, ppIBitmap); 599 return E_NOTIMPL; 600 } --- snip --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 10

[Bug 32564] New: Visual Studio 2010 (10.0) Express Edition needs atl100.dll.AtlAxDialogBoxW
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=32564 Bug #: 32564 Summary: Visual Studio 2010 (10.0) Express Edition needs atl100.dll.AtlAxDialogBoxW Product: Wine Version: 1.5.20 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: atl AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, found while investigating bug 32562 After clicking "OK" in project creation wizard nothing happens and the following is shown in console: --- snip --- 0009:trace:seh:raise_exception code=80000100 flags=1 addr=0x7b83aa77 ip=7b83aa77 tid=0009 0009:trace:seh:raise_exception info[0]=7ec005c0 0009:trace:seh:raise_exception info[1]=7ec0065d wine: Call from 0x7b83aa77 to unimplemented function atl100.dll.AtlAxDialogBoxW, aborting 0009:trace:seh:call_vectored_handlers calling handler at 0x791f5a7c code=80000100 flags=1 --- snip --- Source: http://source.winehq.org/git/wine.git/blob/c0456aea76bcd8ce77d7c91dfc95a5ff… --- snip --- 21 35 stub AtlAxDialogBoxW 22 36 stub AtlAxDialogBoxA --- snip --- Prerequisite: 'winetricks -q dotnet20 dotnet40 windowscodecs corefonts' Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 6

[Bug 32549] New: Visual Studio 2010 (10.0) Express Edition needs windowscodecs ComponentFactory_CreateBitmapFromMemory impl
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=32549 Bug #: 32549 Summary: Visual Studio 2010 (10.0) Express Edition needs windowscodecs ComponentFactory_CreateBitmapFromMemory impl Product: Wine Version: 1.5.20 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: windowscodecs AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, prerequisite: winetricks -q dotnet20 dotnet40 --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Microsoft Visual Studio 10.0/Common7/IDE ... $ WINEDEBUG=+tid,+seh,+loaddll,+process wine ./VCExpress.exe ... 0009:fixme:wincodecs:ComponentFactory_CreateBitmapFromMemory (0x215d78,4,4,{6fddc324-4e03-4bfe-b185-3d77768dc90f},16,64,0x1455540,0x32ed1c): stub 0009:trace:seh:raise_exception code=e0434352 flags=1 addr=0x7b83aa77 ip=7b83aa77 tid=0009 0009:trace:seh:raise_exception info[0]=80004001 0009:trace:seh:raise_exception info[1]=00000000 0009:trace:seh:raise_exception info[2]=00000000 0009:trace:seh:raise_exception info[3]=00000000 0009:trace:seh:raise_exception info[4]=79140000 0009:trace:seh:raise_exception eax=7b826831 ebx=7b8b96b0 ecx=80004001 edx=0032eba4 esi=0032ec54 edi=001871e8 0009:trace:seh:raise_exception ebp=0032ebe8 esp=0032eb84 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000283 ... --- snip --- 'winetricks windowscodecs' works around. Source: http://source.winehq.org/git/wine.git/blob/96ebc618b5029723d1f2401dc54e5e0f… --- snip --- 578 static HRESULT WINAPI ComponentFactory_CreateBitmapFromMemory(IWICComponentFactory *iface, 579 UINT uiWidth, UINT uiHeight, REFWICPixelFormatGUID pixelFormat, UINT cbStride, 580 UINT cbBufferSize, BYTE *pbBuffer, IWICBitmap **ppIBitmap) 581 { 582 FIXME("(%p,%u,%u,%s,%u,%u,%p,%p): stub\n", iface, uiWidth, uiHeight, 583 debugstr_guid(pixelFormat), cbStride, cbBufferSize, pbBuffer, ppIBitmap); 584 return E_NOTIMPL; 585 } --- snip --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 7

[Bug 35084] New: Visual Studio 2010 installer fails to install in 64-bit Windows XP WINEPREFIX (claims "Windows XP x64 Service Pack 2 is required")
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=35084 Bug #: 35084 Summary: Visual Studio 2010 installer fails to install in 64-bit Windows XP WINEPREFIX (claims "Windows XP x64 Service Pack 2 is required") Product: Wine Version: 1.7.7 Platform: x86-64 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says. The installer prerequisite log "dd_depcheck_VC_EXP_100.txt" is pretty verbose, no need for Wine trace log: --- snip --- ... [12/08/13,20:06:38] Windows XP x64 Service Pack 2 is required == [12/08/13,20:06:38] This component uses the FileRegVerCheck version check method. It will compare a given version against the version of a regkey on your machine. [12/08/13,20:06:38] Registry key being interrogated: HKLM,System\CurrentControlSet\Control\Windows; Value: CSDVersion; Version: 512. [12/08/13,20:06:38] Version on user's machine: 256 [12/08/13,20:06:38] Version to be installed: 512 [12/08/13,20:06:38] Windows XP x64 Service Pack 2 is required == Component to be installed. --- snip --- Setting CSDVersion to 512 in 64-bit prefix allows the installer go further. Wine uses "Service Pack 3" for 32-bit "Windows XP" setting (=latest). There is no SP3 for the 64-bit version of Windows XP. XP2 is indeed the latest. For consistency it would make sense that Wine uses SP2 for 64-bit XP, indicating highest SP level. $ sha1sum vc_web.exe c2d61a5424aa474a169e59199aa2158a858833f6 vc_web.exe $ du -sh vc_web.exe 3.2M vc_web.exe $ wine --version wine-1.7.8-128-g37460b6 Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 10

[Bug 32558] New: Visual Studio 2010 (10.0) Express Edition web installer crashes due to winhttp reporting available chunk size > 32 KiB (heap corruption)
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=32558 Bug #: 32558 Summary: Visual Studio 2010 (10.0) Express Edition web installer crashes due to winhttp reporting available chunk size > 32 KiB (heap corruption) Product: Wine Version: 1.5.20 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: winhttp AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, I noticed strange crashes with the web installer of Visual Studio 2010 (10.0) Express Edition. Sometimes the installer would just bail out silently during download. Prerequisite: 'winetricks -q dotnet20 dotnet40' Unfortunately +relay or even repeated installer runs succeed most of the time so it's not easily to reproduce/track down (also depends on client connection to server). Also running the inner installer under debugger changes symptoms. Fortunately I managed get a crash with +relay at one time (using inner installer). --- snip --- $ WINEDEBUG=+tid,+seh,+loaddll,+winhttp,+relay wine ./setup.exe /web /CreatedTemp /NoExclude /InstalledFrom . >>log.txt 2>&1 ... 002a:trace:loaddll:load_native_dll Loaded L"Z:\\home\\focht\\Downloads\\test\\dlmgr.dll" at 0x364c0000: native ... 0030:Call oleaut32.SysAllocString(00c00840 L"dlmgr: Starting download attempt 1 of 3 for http://go.microsoft.com/fwlink/?LinkId=165067&clcid=0x409 using Http") ret=3593f268 0030:Ret oleaut32.SysAllocString() retval=01560ec4 ret=3593f268 ... 0030:Call ntdll.RtlAllocateHeap(00453000,00000008,00008000) ret=364e1884 0030:Ret ntdll.RtlAllocateHeap() retval=0045bdc8 ret=364e1884 ... 0042:Call KERNEL32.CreateFileW(0186f540 L"C:\\users\\focht\\Temp\\30319.01\\1033\\VC_EXP\\wcu\\watson\\dw20shared.msi",00000002,00000000,00000000,00000002,00000080,00000000) ret=364db8ff 0042:Ret KERNEL32.CreateFileW() retval=000001e8 ret=364db8ff ... 0042:Call winhttp.WinHttpQueryHeaders(00000003,00000005,00000000,0b56e850,0b56e840,00000000) ret=364d77ed 0042:trace:winhttp:WinHttpQueryHeaders 0x3, 0x00000005, (null), 0xb56e850, 0xb56e840, (nil) 0042:trace:winhttp:addref_object 0x1718bc0 -> refcount = 3 0042:trace:winhttp:grab_object handle 0x3 -> 0x1718bc0 0042:trace:winhttp:query_headers attribute L"Content-Length" 0042:trace:winhttp:get_header_index L"Content-Length" 0042:trace:winhttp:get_header_index returning 12 0042:trace:winhttp:query_headers returning string: L"1850368" 0042:trace:winhttp:release_object object 0x1718bc0 refcount = 2 0042:Ret winhttp.WinHttpQueryHeaders() retval=00000001 ret=364d77ed 0042:Call winhttp.WinHttpQueryDataAvailable(00000003,00000000) ret=364d77a6 0042:trace:winhttp:WinHttpQueryDataAvailable 0x3, (nil) 0042:trace:winhttp:addref_object 0x1718bc0 -> refcount = 3 0042:trace:winhttp:grab_object handle 0x3 -> 0x1718bc0 0042:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7e2dc554 0042:Ret ntdll.RtlAllocateHeap() retval=0186fa68 ret=7e2dc554 0042:trace:winhttp:addref_object 0x1718bc0 -> refcount = 4 0042:Call KERNEL32.QueueUserWorkItem(7e2dc7e9,0186fa68,00000010) ret=7e2dc85b 0042:Ret KERNEL32.QueueUserWorkItem() retval=00000001 ret=7e2dc85b 0042:trace:winhttp:release_object object 0x1718bc0 refcount = 3 0042:Ret winhttp.WinHttpQueryDataAvailable() retval=00000001 ret=364d77a6 --- snip --- Download for first component is 1850368 bytes in total. The installer allocates a 32 KiB buffer and begins async download using winhttp. The "good" sequence reads like this: --- snip --- ... 0044:Call winhttp.WinHttpReadData(00000003,0045bdc8,00001554,00000000) ret=364d7787 0042:Call ntdll.RtlFreeHeap(00110000,00000000,01718950) ret=7e2dc63a 0044:trace:winhttp:WinHttpReadData 0x3, 0x45bdc8, 5460, (nil) 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e2dc63a 0044:trace:winhttp:addref_object 0x1718bc0 -> refcount = 3 0044:trace:winhttp:grab_object handle 0x3 -> 0x1718bc0 0044:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7e2dc554 0044:Ret ntdll.RtlAllocateHeap() retval=01718cb0 ret=7e2dc554 0044:trace:winhttp:addref_object 0x1718bc0 -> refcount = 4 0044:Call KERNEL32.QueueUserWorkItem(7e2dc7e9,01718cb0,00000010) ret=7e2dc85b 0042:trace:winhttp:query_headers attribute L"Transfer-Encoding" 0042:trace:winhttp:get_header_index L"Transfer-Encoding" 0042:trace:winhttp:get_header_index returning -1 0042:trace:winhttp:read_data *** async=1, to_read=5460, num_bytes: 5460, ret=1, callback=0x364da8e0, buffer=0x45bdc8 0042:trace:winhttp:read_data *** buf heap magic=0x455355, size=0x8000 0042:trace:winhttp:send_callback 0x1718bc0, 0x00080000, 0x45bdc8, 5460 0042:Call KERNEL32.WriteFile(000001e8,0045bdc8,00001554,0b56e814,00000000) ret=364db83b 0042:Ret KERNEL32.WriteFile() retval=00000001 ret=364db83b ... 0044:Ret KERNEL32.QueueUserWorkItem() retval=00000001 ret=7e2dc85b ... 0044:trace:winhttp:release_object object 0x1718bc0 refcount = 3 0042:Ret KERNEL32.GetLastError() retval=00002f76 ret=364dfd2f 0044:Ret winhttp.WinHttpReadData() retval=00000001 ret=364d7787 --- snip --- "trace:winhttp:read_data ***" trace message was added by me for diagnosis immediately before the send callback (also heap magic and size dump because +heap is not usable here). At one point we get this interesting sequence: --- snip --- ... 000d:Call winhttp.WinHttpQueryDataAvailable(00000003,00000000) ret=364d77a6 000d:trace:winhttp:WinHttpQueryDataAvailable 0x3, (nil) 000d:trace:winhttp:addref_object 0x1718bc0 -> refcount = 3 000d:trace:winhttp:grab_object handle 0x3 -> 0x1718bc0 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7e2dc554 000d:Ret ntdll.RtlAllocateHeap() retval=01718cb0 ret=7e2dc554 000d:trace:winhttp:addref_object 0x1718bc0 -> refcount = 4 000d:Call KERNEL32.QueueUserWorkItem(7e2dc7e9,01718cb0,00000010) ret=7e2dc85b 000d:Ret KERNEL32.QueueUserWorkItem() retval=00000001 ret=7e2dc85b 0042:trace:winhttp:query_data 73440 bytes available 000d:trace:winhttp:release_object object 0x1718bc0 refcount = 3 0042:trace:winhttp:send_callback 0x1718bc0, 0x00040000, 0xb56e90c, 4 000d:Ret winhttp.WinHttpQueryDataAvailable() retval=00000001 ret=364d77a6 ... 0042:Call winhttp.WinHttpReadData(00000003,0045bdc8,00011ee0,00000000) ret=364d7787 000d:Call ntdll.RtlFreeHeap(00110000,00000000,01870290) ret=7e2dc63a 0042:trace:winhttp:WinHttpReadData 0x3, 0x45bdc8, 73440, (nil) 000d:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e2dc63a 0042:trace:winhttp:addref_object 0x1718bc0 -> refcount = 3 0042:trace:winhttp:grab_object handle 0x3 -> 0x1718bc0 0042:Call ntdll.RtlAllocateHeap(00110000,00000000,00000014) ret=7e2dc554 0042:Ret ntdll.RtlAllocateHeap() retval=01870290 ret=7e2dc554 0042:trace:winhttp:addref_object 0x1718bc0 -> refcount = 4 0042:Call KERNEL32.QueueUserWorkItem(7e2dc7e9,01870290,00000010) ret=7e2dc85b 0042:Ret KERNEL32.QueueUserWorkItem() retval=00000001 ret=7e2dc85b 0044:trace:winhttp:query_headers attribute L"Transfer-Encoding" 0042:trace:winhttp:release_object object 0x1718bc0 refcount = 3 0044:trace:winhttp:get_header_index L"Transfer-Encoding" 0042:Ret winhttp.WinHttpReadData() retval=00000001 ret=364d7787 0044:trace:winhttp:get_header_index returning -1 0042:trace:winhttp:release_object object 0x1718bc0 refcount = 2 0042:Call ntdll.RtlFreeHeap(00110000,00000000,01718cb0) ret=7e2dc63a 0042:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e2dc63a 0044:trace:winhttp:read_data *** async=1, to_read=73440, num_bytes: 73440, ret=1, callback=0x364da8e0, buffer=0x45bdc8 0044:trace:winhttp:read_data *** buf heap magic=0x455355, size=0x8000 0044:trace:winhttp:send_callback 0x1718bc0, 0x00080000, 0x45bdc8, 73440 ... --- snip --- 73440 bytes available reported and WinHttpReadData() is called from installer with the _same_ original buffer (0x45bdc8) which was allocated with 32 KiB (0x8000 bytes) - no realloc in between! This obviously leads to a heap overwrite and some time later to crashes. --- snip --- ... 000d:trace:winhttp:read_data *** async=1, to_read=5760, num_bytes: 5760, ret=1, callback=0x364da8e0, buffer=0x45bdc8 000d:trace:winhttp:read_data *** buf heap magic=0x455355, size=0x8000 000d:trace:winhttp:send_callback 0x1718bc0, 0x00080000, 0x45bdc8, 5760 000d:Call KERNEL32.WriteFile(000001e8,0045bdc8,00001680,0b76e814,00000000) ret=364db83b 000d:Ret KERNEL32.WriteFile() retval=00000001 ret=364db83b 000d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=364ee12c 000d:Ret ntdll.RtlAllocateHeap() retval=0186fc18 ret=364ee12c 000d:Call KERNEL32.GetLastError() ret=364dfd2f 000d:Ret KERNEL32.GetLastError() retval=00002f76 ret=364dfd2f 000d:Call KERNEL32.GetLastError() ret=364dfd2f 000d:Ret KERNEL32.GetLastError() retval=00002f76 ret=364dfd2f 000d:trace:seh:raise_exception code=c0000005 flags=0 addr=0x364e4b6f ip=364e4b6f tid=000d 000d:trace:seh:raise_exception info[0]=00000000 000d:trace:seh:raise_exception info[1]=98211559 000d:trace:seh:raise_exception eax=982114ad ebx=00000002 ecx=0b76e30c edx=00000000 esi=0b76e53a edi=0b76e53a 000d:trace:seh:raise_exception ebp=0b76e740 esp=0b76e2bc cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010202 --- snip --- I added a small code snippet to automatically report/truncate available chunk size to 32 KiB if larger. --- snip --- ... fixme:winhttp:query_data truncating data avail from 50400 to 32768 bytes! fixme:winhttp:query_data truncating data avail from 89632 to 32768 bytes! fixme:winhttp:query_data truncating data avail from 71264 to 32768 bytes! fixme:winhttp:query_data truncating data avail from 91776 to 32768 bytes! fixme:winhttp:query_data truncating data avail from 116608 to 32768 bytes! fixme:winhttp:query_data truncating data avail from 93920 to 32768 bytes! fixme:winhttp:query_data truncating data avail from 69792 to 32768 bytes! fixme:winhttp:query_data truncating data avail from 96064 to 32768 bytes! fixme:winhttp:query_data truncating data avail from 67616 to 32768 bytes! fixme:winhttp:query_data truncating data avail from 59328 to 32768 bytes! ... --- snip --- With that change in place the web installer runs rock stable, sometimes reaching download speeds of 2-3 MiB/s using winhttp (not maxing out my connection - that might be server-side bandwidth issue). I've not found any useful info on MSDN about a 32 KiB limit on winhttp chunk size. Maybe the MS guys who wrote the installer made some assumption about some underlying native winsock implementation limitation on Windows. It might be interesting to see what max. chunk size native winhttp reports to clients. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 7

[Bug 37272] New: CheatEngine 6.4 fails after remote process 'breakin', reporting 'Debugger Crash:Access violation (Last location:41)'
by wine-bugs＠winehq.org 19 Jul '21

19 Jul '21

https://bugs.winehq.org/show_bug.cgi?id=37272 Bug ID: 37272 Summary: CheatEngine 6.4 fails after remote process 'breakin', reporting 'Debugger Crash:Access violation (Last location:41)' Product: Wine Version: 1.7.26 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: dbghelp Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, as the summary says. The app works well in general - except when breaking into remote process for debugging (to single step). The app is pretty verbose about its doings, using 'OutputDebugString' API. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Cheat Engine 6.4 ... $ WINEDEBUG=+tid,+seh,+loaddll,+process,+debugstr wine ./Cheat\ Engine.exe >>log.txt 2>&1 ... 0023:warn:debugstr:OutputDebugStringA "setThreadContext(28, 110, 07E9710C). dr0=0 dr1=0 dr2=0 dr3=0 dr7=400" ... 002b:warn:debugstr:OutputDebugStringA "HandleExceptionDebugEvent:80000004" ... 002b:warn:debugstr:OutputDebugStringA "EXCEPTION_SINGLE_STEP. Dr6=00004000" ... 002b:warn:debugstr:OutputDebugStringA "Handling as a single step event" ... 002b:warn:debugstr:OutputDebugStringA "HandleBreak()" ... 0023:trace:seh:raise_exception code=c0000005 flags=0 addr=0x410464 ip=00410464 tid=0023 0023:trace:seh:raise_exception info[0]=00000001 0023:trace:seh:raise_exception info[1]=d000db06 0023:trace:seh:raise_exception eax=0000000b ebx=044bbc78 ecx=d000dafe edx=001c9071 esi=044bbc74 edi=001c9071 0023:trace:seh:raise_exception ebp=01b8ea5c esp=01b8e9f0 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00210282 0023:trace:seh:call_stack_handlers calling handler at 0x7bc9de17 code=c0000005 flags=0 0023:trace:seh:call_stack_handlers handler at 0x7bc9de17 returned 0 ... --- snip --- The CheatEngine debugger was attached to 'notepad' process. --- snip --- Wine-dbg>info process pid threads executable (all id:s are in hex) 00000027 1 'notepad.exe' 00000022 3 'cheatengine-i386.exe' 00000020 1 'explorer.exe' 0000000e 5 'services.exe' 00000019 3 \_ 'plugplay.exe' 00000012 4 \_ 'winedevice.exe' Wine-dbg>info thread process tid prio (all id:s are in hex) ... 00000022 cheatengine-i386.exe 0000002b 0 00000024 0 00000023 0 00000027 notepad.exe 00000028 0 --- snip --- Running the debugger under a debugger yields the following: --- snip --- Unhandled exception: page fault on write access to 0xd000db06 in 32-bit code (0x00410464). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:00410464 ESP:01b8e9f0 EBP:01b8ea5c EFLAGS:00210282( R- -- I S - - - ) EAX:0000000b EBX:040341a8 ECX:d000dafe EDX:001c9071 ESI:040341a4 EDI:001c9071 Stack dump: 0x01b8e9f0: 000000b0 0000000b 040341a4 000000b0 0x01b8ea00: 0423c2e8 0423c2ec 004105ee 0000004c 0x01b8ea10: 0423c2e8 00410bdd 0000001c 0423c2e8 0x01b8ea20: 00000414 0040fa88 006426a9 0423c2e8 0x01b8ea30: 0410a7f8 00000414 006429b7 0423c2e8 0x01b8ea40: 0410a7f8 006427ad 001b2ba8 00000000 000c: sel=0067 base=00000000 limit=00000000 16-bit --x Backtrace: =>0 0x00410464 in cheatengine-i386 (+0x10464) (0x01b8ea5c) 1 0x007011b4 in cheatengine-i386 (+0x3011b3) (0x01b8ea70) 2 0x0050bc97 in cheatengine-i386 (+0x10bc96) (0x01b8f368) 3 0x0050c155 in cheatengine-i386 (+0x10c154) (0x01b8f6a0) 4 0x0044b868 in cheatengine-i386 (+0x4b867) (0x01b8f6b8) 5 0x00452019 in cheatengine-i386 (+0x52018) (0x01b8f728) 6 0x004fd312 in cheatengine-i386 (+0xfd311) (0x01b8f7ac) 7 0x005013c1 in cheatengine-i386 (+0x1013c0) (0x01b8f824) 8 0x0058ef28 in cheatengine-i386 (+0x18ef27) (0x01b8f898) 9 0x006e7668 in cheatengine-i386 (+0x2e7667) (0x01b8faa8) 10 0x7eb8fb5e WINPROC_wrapper+0x19() in user32 (0x01b8fad8) ... 0x00410464: movl $0x0,0x8(%ecx) --- snip --- The app is open source: https://code.google.com/p/cheat-engine --- snip --- $ svn checkout http://cheat-engine.googlecode.com/svn/trunk/ cheat-engine-read-only --- snip --- 'Last location:41' part of error message gives a hint: htps://code.google.com/p/cheat-engine/source/browse/trunk/Cheat%20Engine/de… --- snip --- procedure TDebugThreadHandler.VisualizeBreak; begin TDebuggerthread(debuggerthread).execlocation:=41; if processhandler.SystemArchitecture=archx86 then MemoryBrowser.lastdebugcontext:=context^ else MemoryBrowser.lastdebugcontextarm:=armcontext; WaitingToContinue:=not lua_onBreakpoint(context); if WaitingToContinue then //no lua script or it returned 0 MemoryBrowser.UpdateDebugContext(self.Handle, self.ThreadId); end; --- snip --- The crashes happens during update of stacktrace listview, after a couple of 'dbghelp.StackWalk64' calls. 'TMemoryBrowser.UpdateDebugContext' -> 'TfrmStacktrace.stacktrace' https://code.google.com/p/cheat-engine/source/browse/trunk/Cheat%20Engine/f… The crash address is an indirect reference from ECX = 0xd000dafe (+8) .. a value which corresponds to Wine's 'frame->KdHelp.KiCallUserMode' magic value. The stack frame data structure passed to 'StackWalk64' is allocated from internal Delphi heap and initialized. --- snip --- procedure TfrmStacktrace.stacktrace(threadhandle:thandle;context:_context); var stackframe: PStackframe64; cxt:_context; wow64ctx: CONTEXT32; a,b,c,d: dword; sa,sb,sc,sd:string; machinetype: dword; cp: pointer; found: boolean; begin ... getmem(stackframe,sizeof(tstackframe)); zeromemory(stackframe,sizeof(tstackframe)); stackframe^.AddrPC.Offset:=context.{$ifdef cpu64}rip{$else}eip{$endif}; stackframe^.AddrPC.mode:=AddrModeFlat; stackframe^.AddrStack.Offset:=context.{$ifdef cpu64}rsp{$else}esp{$endif}; stackframe^.AddrStack.Mode:=addrmodeflat; stackframe^.AddrFrame.Offset:=context.{$ifdef cpu64}rbp{$else}ebp{$endif}; stackframe^.AddrFrame.Mode:=addrmodeflat; ... --- snip --- The corresponding disassembly, annotated: --- snip --- 0050BBD1 8D45 F8 LEA EAX,DWORD PTR SS:[EBP-8] 0050BBD4 BA A4000000 MOV EDX,0A4 ; sizeof(tstackframe) 0050BBD9 E8 323EF0FF CALL cheateng.0040FA10 ; getmem() 0050BBDE 68 A4000000 PUSH 0A4 ; sizeof(tstackframe) 0050BBE3 FF75 F8 PUSH DWORD PTR SS:[EBP-8] 0050BBE6 E8 C5121600 CALL cheateng.0066CEB0 ; zeromemory() 0050BBEB 8B4D F8 MOV ECX,DWORD PTR SS:[EBP-8] 0050BBEE 8B95 38F8FFFF MOV EDX,DWORD PTR SS:[EBP-7C8] 0050BBF4 B8 00000000 MOV EAX,0 0050BBF9 8911 MOV DWORD PTR DS:[ECX],EDX ; stackframe^.AddrPC.. 0050BBFB 8941 04 MOV DWORD PTR DS:[ECX+4],EAX --- snip --- 0xA4 is a bit too small for 'STACKFRAME64' structure. MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/ms680646%28v=vs.85%… My guess is that Delphi/Pascal's definition of 'tstackframe' doesn't include the 'KDHELP64' part which is reserved for kernel debuggers. The problem is that Wine writes magic values into an area that should be left untouched since we're dealing with usermode debugging. That corrupts the internal heap. Source: http://source.winehq.org/git/wine.git/blob/61a9eef9a1c0a72e6571742dbb830f7b… --- snip --- ... 242 /* we don't handle KdHelp */ 243 frame->KdHelp.Thread = 0xC000FADE; 244 frame->KdHelp.ThCallbackStack = 0x10; 245 frame->KdHelp.ThCallbackBStore = 0; 246 frame->KdHelp.NextCallback = 0; 247 frame->KdHelp.FramePointer = 0; 248 frame->KdHelp.KiCallUserMode = 0xD000DAFE; 249 frame->KdHelp.KeUserCallbackDispatcher = 0xE000F000; 250 frame->KdHelp.SystemRangeStart = 0xC0000000; 251 frame->KdHelp.Reserved[0] /* KiUserExceptionDispatcher */ = 0xE0005000; ... --- snip --- The code that writes the magic values was added 8 years ago: http://source.winehq.org/git/wine.git/commitdiff/558130a696a1e6c11a84f3d1f1… Not sure what the intention was since usermode debuggers can't deal with these things anyway. With that part fixed, CheatEngine can debug remote processes after attaching. $ sha1sum CheatEngine64.exe 8cb06bca312ed2bfa02c7f9344f2717d02ecd931 CheatEngine64.exe $ du -sh CheatEngine64.exe 8.7M CheatEngine64.exe $ wine --version wine-1.7.26-44-gb10b391 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5