April 2014 - Wine-bugs - list.winehq.org

[Bug 28628] New: advapi32/security.ok: GetTokenInformation(Token, TokenGroups, ...) returns partial garbage leading to uninitialized memory accesses?
by wine-bugs＠winehq.org 02 May '14

02 May '14

http://bugs.winehq.org/show_bug.cgi?id=28628 Bug #: 28628 Summary: advapi32/security.ok: GetTokenInformation(Token, TokenGroups,...) returns partial garbage leading to uninitialized memory accesses? Product: Wine Version: 1.3.29 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: advapi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified "wine advapi32_test.exe.so security.c" says in part security.c:1475: TokenGroups: security.c:1489: S-1-1-0, \Everyone use: 5 attr: 0x00000007 security.c:1489: S-1-2-0, \LOCAL use: 5 attr: 0x00000007 security.c:1489: S-1-5-4, NT AUTHORITY\INTERACTIVE use: 5 attr: 0x00000007 security.c:1489: S-1-5-11, NT AUTHORITY\Authenticated Users use: 5 attr: 0x00000007 security.c:1489: S-1-5-32-544, BUILTIN\Administrators use: 4 attr: 0x0000000f security.c:1492: attr: 0x00000007 LookupAccountSid failed with error 1332 security.c:1492: attr: 0xc0000007 LookupAccountSid failed with error 1332 Those two LookupAccountSid() errors appear to be because the last two SIDs from GetTokenInformation() are garbage. This causes the valgrind warning Conditional jump or move depends on uninitialised value(s) at RtlEqualSid (sec.c:210) by EqualSid (security.c:1027) by IsWellKnownSid (security.c:961) by LookupAccountSidW (security.c:2098) by LookupAccountSidA (security.c:2024) by test_token_attr (security.c:1485) by func_security (security.c:4000) by run_test (test.h:556) by main (test.h:624) Uninitialised value was created by a client request at RtlAllocateHeap (heap.c:208) by test_token_attr (security.c:1468) by func_security (security.c:4000) by run_test (test.h:556) by main (test.h:624) I dumped the SIDs that are being compared in test_token_attr, and it looks like the first six are ok, but the last two aren't: ... security.c:1487: Dumping SIDs security.c:1489: i = 4, j = 0, val = 1 security.c:1489: i = 4, j = 1, val = 2 security.c:1489: i = 4, j = 2, val = 0 security.c:1489: i = 4, j = 3, val = 0 security.c:1489: i = 4, j = 4, val = 0 security.c:1489: i = 4, j = 5, val = 0 security.c:1489: i = 4, j = 6, val = 0 security.c:1489: i = 4, j = 7, val = 5 security.c:1489: i = 4, j = 8, val = 20 security.c:1489: i = 4, j = 9, val = 0 security.c:1489: i = 4, j = 10, val = 0 security.c:1489: i = 4, j = 11, val = 0 security.c:1496: S-1-5-32-544, BUILTIN\Administrators use: 4 attr: 0x0000000f security.c:1487: Dumping SIDs security.c:1489: i = 5, j = 0, val = 1 security.c:1489: i = 5, j = 1, val = 2 security.c:1489: i = 5, j = 2, val = 0 security.c:1489: i = 5, j = 3, val = 0 security.c:1489: i = 5, j = 4, val = cc security.c:1489: i = 5, j = 5, val = cc security.c:1489: i = 5, j = 6, val = cc security.c:1489: i = 5, j = 7, val = cc security.c:1489: i = 5, j = 8, val = cc security.c:1489: i = 5, j = 9, val = cc security.c:1489: i = 5, j = 10, val = cc security.c:1489: i = 5, j = 11, val = cc security.c:1499: attr: 0x00000007 LookupAccountSid failed with error 1332 security.c:1487: Dumping SIDs security.c:1489: i = 6, j = 0, val = cc security.c:1489: i = 6, j = 1, val = cc security.c:1489: i = 6, j = 2, val = cc security.c:1489: i = 6, j = 3, val = cc security.c:1489: i = 6, j = 4, val = cc security.c:1489: i = 6, j = 5, val = cc security.c:1489: i = 6, j = 6, val = cc security.c:1489: i = 6, j = 7, val = cc security.c:1489: i = 6, j = 8, val = cc security.c:1489: i = 6, j = 9, val = cc security.c:1489: i = 6, j = 10, val = cc security.c:1489: i = 6, j = 11, val = cc security.c:1499: attr: 0xc0000007 LookupAccountSid failed with error 1332 Is some buffer length wrong somewhere? The responsible code seems to be from: commit 573db9ef639f65385f1efab5593b52c72b4b4108 Author: Nikolay Sivov <nsivov(a)codeweavers.com> Date: Tue Aug 23 11:16:27 2011 +0400 ntdll: While requesting TokenGroups calculate required user buffer size in server. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 10

[Bug 28695] New: Uninitialized variables in create_rebar
by wine-bugs＠winehq.org 02 May '14

02 May '14

http://bugs.winehq.org/show_bug.cgi?id=28695 Bug #: 28695 Summary: Uninitialized variables in create_rebar Product: Wine Version: 1.3.30 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ieframe AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified Valgrind complains: Conditional jump or move depends on uninitialised value(s) at REBAR_CommonSetupBand (rebar.c:1772) by REBAR_WindowProc (rebar.c:2549) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by create_rebar (iexplore.c:481) by ie_window_proc (iexplore.c:506) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by WIN_CreateWindowEx (win.c:1446) by CreateWindowExW (win.c:1582) by create_ie (iexplore.c:694) by InternetExplorer_Create (iexplore.c:811) Uninitialised value was created by a stack allocation at create_rebar (iexplore.c:434) Conditional jump or move depends on uninitialised value(s) at REBAR_ValidateBand (rebar.c:1630) by REBAR_WindowProc (rebar.c:2565) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by create_rebar (iexplore.c:481) by ie_window_proc (iexplore.c:506) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by WIN_CreateWindowEx (win.c:1446) by CreateWindowExW (win.c:1582) by create_ie (iexplore.c:694) by InternetExplorer_Create (iexplore.c:811) Uninitialised value was created by a stack allocation at create_rebar (iexplore.c:434) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 4

[Bug 17105] New: Magic: The Gathering Online 3.0 fails to log in with L0014
by wine-bugs＠winehq.org 02 May '14

02 May '14

http://bugs.winehq.org/show_bug.cgi?id=17105 Summary: Magic: The Gathering Online 3.0 fails to log in with L0014 Product: Wine Version: 1.1.13 Platform: HP OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: secur32 AssignedTo: kai.blin(a)gmail.com ReportedBy: robfjohnson(a)gmail.com Created an attachment (id=18941) --> (http://bugs.winehq.org/attachment.cgi?id=18941) Console Output When running Magic Online Version 3 with Wine, when I try to log in I receive L0014: The Magic Online Server is down for maintenance. If you continue to receive this error, check your date and time settings. Note that this is different than bug 14060, as 14060 gives you L0001: You have lost your connection to the server. Bug 14060 is supposedly (and from what I see actually) fixed as of git from 1-20-09. I encountered this bug when I tested with git from 1-22-09, and continues into 1-23-09. Having spoken to other Magic Online players, I found that L0014 has been caused (on Windows machines) by firewall issues, and also by incorrectly set Date and Time. I do not know any such issues on my computer that would cause this bug, but I am not certain that the problem is not my computer. It seems to me that the bug is in schan - which was the cause of but 14060. 14060 was schan being not implemented, whereas this bug, unless the problem is with my computer, may be that schan is half-implemented. (See, in the Console Output, the "Using hardcoded "NORMAL" priority" messages.) However, this paragraph is just speculation in case it gives someone an idea. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 26

[Bug 28767] New: shell32: uninitialized memory used during TRASH_EnumItems, triggered by "make recyclebin.ok"
by wine-bugs＠winehq.org 02 May '14

02 May '14

http://bugs.winehq.org/show_bug.cgi?id=28767 Bug #: 28767 Summary: shell32: uninitialized memory used during TRASH_EnumItems, triggered by "make recyclebin.ok" Product: Wine Version: 1.3.30 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: shell32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified Running "make recyclebin.ok" in shell32/tests, valgrind complains Conditional jump or move depends on uninitialised value(s) at __mktime_internal (mktime.c:428) by mktime (mktime.c:518) by TRASH_EnumItems (trash.c:444) by SHQueryRecycleBinW (recyclebin.c:859) by SHQueryRecycleBinA (recyclebin.c:848) by test_query_recyclebin (recyclebin.c:74) by func_recyclebin (recyclebin.c:106) by run_test (test.h:556) by main (test.h:624) Uninitialised value was created by a stack allocation at TRASH_EnumItems (trash.c:506) Looks like not all the fields of del_time got initialized? 47b40c58 (Mikołaj Zalewski 2006-08-17 18:29:58 +0200 444) del_secs = mktime(&del_time); -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 4

[Bug 36132] New: valgrind shows some leaks in gdiplus/tests/graphics.c
by wine-bugs＠winehq.org 02 May '14

02 May '14

https://bugs.winehq.org/show_bug.cgi?id=36132 Bug ID: 36132 Summary: valgrind shows some leaks in gdiplus/tests/graphics.c Product: Wine Version: 1.7.17 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: gdiplus Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ../../../tools/runtest -q -P wine -T ../../.. -M gdiplus.dll -p gdiplus_test.exe.so graphics && touch graphics.ok preloader: Warning: failed to reserve range 00110000-68000000 preloader: Warning: failed to reserve range 7f000000-82000000 fixme:gdiplus:GdipCreateBitmapFromGdiDib (0x4e2fbe4, 0x4e2fa54, 0x4e2fc0c) - partially implemented fixme:gdiplus:SOFTWARE_GdipDrawDriverString Ignoring flags 10 fixme:gdiplus:GdipGetNearestColor (0x4713ec0, (nil)): Passing color unmodified fixme:gdiplus:GdipGetNearestColor ((nil), 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x46f5d30, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x472cfe0, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x473efe0, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x47361d0, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x476bef8, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x4766fe8, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x4734530, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x4712e90, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x472fb48, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x472eec8, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x47333c8, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x46f5d30, 0x4e2fb48): Passing color unmodified fixme:gdiplus:GdipMeasureDriverString Ignoring flags 100 ==28082== 928 bytes in 8 blocks are definitely lost in loss record 862 of 988 ==28082== at 0x7BC4C735: notify_alloc (heap.c:255) ==28082== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==28082== by 0x4E5A551: GdipAlloc (gdiplus.c:142) ==28082== by 0x4E84835: GdipCreateBitmapFromScan0 (image.c:1828) ==28082== by 0x496B0D7: create_graphics (graphics.c:106) ==28082== by 0x4984109: test_transform (graphics.c:3709) ==28082== by 0x4994E78: func_graphics (graphics.c:5573) ==28082== by 0x49D96B0: run_test (test.h:584) ==28082== by 0x49D9A9F: main (test.h:654) ==28082== ==28082== 1,856 bytes in 16 blocks are definitely lost in loss record 902 of 988 ==28082== at 0x7BC4C735: notify_alloc (heap.c:255) ==28082== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==28082== by 0x4E5A551: GdipAlloc (gdiplus.c:142) ==28082== by 0x4E84835: GdipCreateBitmapFromScan0 (image.c:1828) ==28082== by 0x496B0D7: create_graphics (graphics.c:106) ==28082== by 0x4982CAD: test_GdipMeasureString (graphics.c:3522) ==28082== by 0x4994E7D: func_graphics (graphics.c:5574) ==28082== by 0x49D96B0: run_test (test.h:584) ==28082== by 0x49D9A9F: main (test.h:654) ==28082== ==28082== 7,424 bytes in 64 blocks are definitely lost in loss record 970 of 988 ==28082== at 0x7BC4C735: notify_alloc (heap.c:255) ==28082== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==28082== by 0x4E5A551: GdipAlloc (gdiplus.c:142) ==28082== by 0x4E84835: GdipCreateBitmapFromScan0 (image.c:1828) ==28082== by 0x496B0D7: create_graphics (graphics.c:106) ==28082== by 0x49836B7: test_GdipMeasureString (graphics.c:3597) ==28082== by 0x4994E7D: func_graphics (graphics.c:5574) ==28082== by 0x49D96B0: run_test (test.h:584) ==28082== by 0x49D9A9F: main (test.h:654) ==28082== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 36015] New: FIFA 2002 demo crashes because gethostbyaddr with magic loopback address return NULL
by wine-bugs＠winehq.org 02 May '14

02 May '14

http://bugs.winehq.org/show_bug.cgi?id=36015 Bug ID: 36015 Summary: FIFA 2002 demo crashes because gethostbyaddr with magic loopback address return NULL Product: Wine Version: 1.7.16 Hardware: x86 URL: http://www.fileplanet.com/80868/80000/fileinfo/FIFA-20 02-Demo OS: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: winsock Assignee: wine-bugs(a)winehq.org Reporter: 00cpxxx(a)gmail.com Spotted while retesting bug 33246. If gethostbyaddr is hacked to use 127.0.0.1 instead of the value passed the demo will go further and show some screens (and then hang). Maybe the right thing to do is to change back the magic address like done in some different places in the code, like the do_connect or bind function. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 26639] New: Steam: crashes randomly while downloading L4D2
by wine-bugs＠winehq.org 02 May '14

02 May '14

http://bugs.winehq.org/show_bug.cgi?id=26639 Summary: Steam: crashes randomly while downloading L4D2 Product: Wine Version: 1.3.16 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: mewrei(a)mewrei.com Created an attachment (id=33912) --> (http://bugs.winehq.org/attachment.cgi?id=33912) Backtrace file While downloading/installing Left 4 Dead 2 via Steam, the app will randomly crash in random intervals, sometimes on startup, othertimes several minutes after launch. There are no user interactions that cause this. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 18614] New: Problem with starting of wine or winecfg
by wine-bugs＠winehq.org 02 May '14

02 May '14

http://bugs.winehq.org/show_bug.cgi?id=18614 Summary: Problem with starting of wine or winecfg Product: Wine Version: 1.1.21 Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: critical Priority: P1 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: kh-pol(a)yandex.ru When I start winecfg (even when there is no .wine in my home directory) error message emerges. ktdr(a)jigsaw:~$ winecfg wine: created the configuration directory '/home/ktdr/.wine' Could not load Mozilla. HTML rendering will be disabled. wine: Unhandled page fault on write access to 0xeee52e96 at address 0x7d87dc36 (thread 000b), starting debugger... err:process:__wine_kernel_init boot event wait timed out err:winecfg:open_mountmgr failed to open mount manager err 2 ktdr(a)jigsaw:~$ -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 49

[Bug 27413] New: Segmentation fault in Kudos 2 Demo
by wine-bugs＠winehq.org 02 May '14

02 May '14

http://bugs.winehq.org/show_bug.cgi?id=27413 Summary: Segmentation fault in Kudos 2 Demo Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: ktowns(a)live.com.au Created an attachment (id=35059) --> (http://bugs.winehq.org/attachment.cgi?id=35059) Terminal output Downloaded demo here: http://www.positech.co.uk/kudos2/Kudos2DemoInstaller.exe On attempting to start a new game, the application exits. Terminal reads 'Segmentation fault.' Full terminal output attached. On an aside, this game, along with others by Positech show nothing for me, graphically, unless I edit the CONFIG.MUF file in the game's data directory, and set IsWindowed to 1 - that might be useful for anyone looking into this, as well. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 15

[Bug 36114] New: msi/action definite leak in is_process_limited
by wine-bugs＠winehq.org 02 May '14

02 May '14

https://bugs.winehq.org/show_bug.cgi?id=36114 Bug ID: 36114 Summary: msi/action definite leak in is_process_limited Product: Wine Version: 1.7.17 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: minor Priority: P2 Component: msi Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==19872== 16 bytes in 1 blocks are definitely lost in loss record 238 of 1,049 ==19872== at 0x7BC4C735: notify_alloc (heap.c:255) ==19872== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==19872== by 0x7BC78ADD: RtlAllocateAndInitializeSid (sec.c:156) ==19872== by 0x5A3DEA7: AllocateAndInitializeSid (security.c:916) ==19872== by 0x4C17006: is_process_limited (action.c:2264) ==19872== by 0x4C1B28A: test_publish_product (action.c:3136) ==19872== by 0x4C31D1F: func_action (action.c:6813) ==19872== by 0x4D5DEB8: run_test (test.h:584) ==19872== by 0x4D5E2A7: main (test.h:654) ==19872== shows up several times in the tests. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4