June 2014 - Wine-bugs - list.winehq.org

[Bug 35171] New: Adobe Shockwave Player 12.x installer crashes on startup (URL moniker notify window class not unregistered during unload of urlmon)
by wine-bugs＠winehq.org 18 Nov '21

18 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=35171 Bug ID: 35171 Summary: Adobe Shockwave Player 12.x installer crashes on startup (URL moniker notify window class not unregistered during unload of urlmon) Product: Wine Version: 1.7.8 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: urlmon Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says. Relevant part of trace log: --- snip --- $ WINEDEBUG=+tid,+seh,+relay,+win,+msg wine ./Shockwave_Installer_Full.exe >>log.txt 2>&1 ... 0024:Call urlmon.URLOpenStreamW(00000000,00206e00 L"http://liveupdate.symantecliveupdate.com/upgrade/NSS/SymCCIS/Production/SCC…",00000000,0182b370) ret=017e697a ... 0024:Call user32.RegisterClassExW(7d8bf420) ret=7d82b211 0024:trace:win:alloc_winproc allocated 0xffff002b for W 0x7d82b0e1 (44/4096 used) 0024:Ret user32.RegisterClassExW() retval=0000c053 ret=7d82b211 0024:Call user32.CreateWindowExW(00000000,7d88a000 L"URL Moniker Notification Window",7d88a000 L"URL Moniker Notification Window",00000000,00000000,00000000,00000000,00000000,fffffffd,00000000,7d810000,00000000) ret=7d82b2ad 0024:trace:win:WIN_CreateWindowEx L"URL Moniker Notification Window" L"URL Moniker Notification Window" ex=00000000 style=00000000 0,0 0x0 parent=0xfffffffd menu=(nil) inst=0x7d810000 params=(nil) 0024:trace:win:dump_window_styles style: 0024:trace:win:dump_window_styles exstyle: 0024:trace:win:GetWindowRect hwnd 0x60098 (0,0)-(0,0) ... 0024:Ret urlmon.URLOpenStreamW() retval=000401e8 ret=017e697a ... 0024:Ret PE DLL (proc=0x7d886d0c,module=0x7d810000 L"urlmon.dll",reason=PROCESS_DETACH,res=(nil)) retval=1 0024:Ret KERNEL32.FreeLibrary() retval=00000001 ret=00f4af02 ... 0024:Call user32.PeekMessageW(00f3d758,00000000,00000000,00000000,00000003) ret=7e5d0994 0024:trace:msg:peek_message got type 6 msg 465 (WM_USER+101) hwnd 0x60098 wp 0 lp 207918 0024:Ret user32.PeekMessageW() retval=00000001 ret=7e5d0994 0024:Call user32.TranslateMessage(00f3d758) ret=7e5d0d5b 0024:Ret user32.TranslateMessage() retval=00000000 ret=7e5d0d5b 0024:Call user32.DispatchMessageW(00f3d758) ret=7e5d0d6c 0024:Call window proc 0x7d82b0e1 (hwnd=0x60098,msg=WM_USER+101,wp=00000000,lp=00207918) 0024:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7d82b0e1 ip=7d82b0e1 tid=0024 0024:trace:seh:raise_exception info[0]=00000000 0024:trace:seh:raise_exception info[1]=7d82b0e1 0024:trace:seh:raise_exception eax=7d82b0e1 ebx=7ed98000 ecx=00000000 edx=00f3ef88 esi=00207918 edi=00f3d6a8 0024:trace:seh:raise_exception ebp=00f3d538 esp=00f3d50c cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010202 --- snip ---- The class proc is still registered when urlmon is unloaded, leading to later crash. Registration of window class: --- snip --- Wine-dbg>bt Backtrace: =>0 0x7ec829ba RegisterClassExW(wc=0x7d816420) [/home/focht/projects/wine/wine-git/dlls/user32/class.c:615] in user32 (0x00f3dc68) 1 0x7d781144 Binding_Create+0xa7(mon=(nil), binding_ctx=(nil), uri=0x1d5718, pbc=0x1d59f8, to_obj=0, riid=0x7d7ea79c, binding=0xf3dd58) [/home/focht/projects/wine/wine-git/dlls/urlmon/binding.c:1410] in urlmon (0x00f3dd08) 2 0x7d781749 start_binding+0x50(mon=(nil), binding_ctx=(nil), uri=0x1d5718, pbc=0x1d59f8, to_obj=0, riid=0x7d7ea79c, ret=0xf3dde8) [/home/focht/projects/wine/wine-git/dlls/urlmon/binding.c:1510] in urlmon (0x00f3ddb8) 3 0x7d781b26 bind_to_storage+0x52(uri=0x1d5718, pbc=0x1d59f8, riid=0x7d7ea79c, ppv=0xf3def4) [/home/focht/projects/wine/wine-git/dlls/urlmon/binding.c:1567] in urlmon (0x00f3de08) 4 0x7d7a197e URLMoniker_BindToStorage+0x14a(iface=0x1dc9b8, pbc=0x1d59f8, pmkToLeft=(nil), riid=0x7d7ea79c, ppvObject=0xf3def4) [/home/focht/projects/wine/wine-git/dlls/urlmon/umon.c:280] in urlmon (0x00f3de68) 5 0x7d7a3e8e URLStartDownload+0x138(szURL="http://liveupdate.symantecliveupdate.com/upgrade/NSS/SymCCIS/Production/SCC…", ppStream=0xf3def4, pBSC=0xf3def8) [/home/focht/projects/wine/wine-build32/dlls/urlmon/../../include/objidl.h:3488] in urlmon (0x00f3dec8) 6 0x7d7a434a URLOpenStreamW+0xc0(pCaller=<couldn't compute location>, szURL=<couldn't compute location>, dwReserved=<couldn't compute location>, lpfnCB=<couldn't compute location>) [/home/focht/projects/wine/wine-git/dlls/urlmon/umstream.c:337] in urlmon (0x00f3df28) 7 0x017e697a in symccis (+0x6979) (0x7b836097) 8 0xfff0e483 (0x04244c8d) --- snip --- There is no code path where the window class is unregistered when tearing down? Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 33572] New: Windows Download Integrator 3.x needs IWbemServices::ExecNotificationQueryAsync
by wine-bugs＠winehq.org 18 Nov '21

18 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=33572 Bug #: 33572 Summary: Windows Download Integrator 3.x needs IWbemServices::ExecNotificationQueryAsync Product: Wine Version: 1.5.30 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: wmi&wbemprox AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says. Prerequisite: 'winetricks -q dotnet40' --- snip --- ... fixme:wbemprox:wbem_services_ExecNotificationQueryAsync fixme:ole:Context_CC_ContextCallback (0x184cd0/0x184cd4)->(0x791c8272, 0x32f004, {d7174f82-36b8-4aa8-800a-e963ab2dfab9}, 2, (nil)) fixme:wmiutils:wmiutils_cf_QueryInterface interface {b196b28f-bab4-101a-b69c-00aa00341d07} not implemented fixme:wmiutils:status_code_QueryInterface interface {c3fcc19e-a970-11d2-8b5a-00a0c9b7c9c4} not implemented fixme:wmiutils:status_code_QueryInterface interface {00000003-0000-0000-c000-000000000046} not implemented fixme:wmiutils:status_code_QueryInterface interface {00000144-0000-0000-c000-000000000046} not implemented fixme:wmiutils:status_code_GetErrorCodeText 0x154e30, 0x80041001, 0x0000, 0x00000001, 0x32f16c Unhandled Exception: System.Management.ManagementException: Error code: 0x80041001 at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode) at System.Management.ManagementEventWatcher.Start() at Windows_Download_Integrator.Form1..ctor() ... --- snip --- Source: http://source.winehq.org/git/wine.git/blob/07197a19f2843b41b32be2c1d07ba4cc… --- snip --- 557 static HRESULT WINAPI wbem_services_ExecNotificationQueryAsync( 558 IWbemServices *iface, 559 const BSTR strQueryLanguage, 560 const BSTR strQuery, 561 LONG lFlags, 562 IWbemContext *pCtx, 563 IWbemObjectSink *pResponseHandler ) 564 { 565 FIXME("\n"); 566 return WBEM_E_FAILED; 567 } --- snip --- $ du -sh Windows\ Download\ Integrator_B3.5.7z 5.0M Windows Download Integrator_B3.5.7z $ sha1sum Windows\ Download\ Integrator_B3.5.7z 83a7c515b04e0935d448d89df038712a13f869db Windows Download Integrator_B3.5.7z $ wine --version wine-1.5.30-43-ge5bf20e Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 6

[Bug 36435] New: Adobe Flash Builder 4.6 uses potentially erroneous shell32.dll PathYetAnotherMakeUniqueName stub
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=36435 Bug ID: 36435 Summary: Adobe Flash Builder 4.6 uses potentially erroneous shell32.dll PathYetAnotherMakeUniqueName stub Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: shell32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, nothing serious .. the stub lies: it returns 'TRUE' (success, buffer filled) but doesn't touch the 'out' buffer at all. Applications might peek into uninitialized/garbage data (stack, heap), finding NULL terminator by chance. --- snip --- $ WINEDEBUG=+tid,+seh,+relay wine ./FlashBuilder_4_6_LS10.exe >>log.txt 2>&1 ... fixme:shell:PathYetAnotherMakeUniqueName (0x26afec8, L"C:\\adobeTemp\\backup", L"tmp" ,L"adobetmp000126541"):stub. --- snip --- Source: http://source.winehq.org/git/wine.git/blob/4903dda319f092af37f5b0e58716e3a0… --- snip --- 538 /************************************************************************* 539 * PathYetAnotherMakeUniqueName [SHELL32.75] 540 * 541 * NOTES 542 * exported by ordinal 543 */ 544 BOOL WINAPI PathYetAnotherMakeUniqueName( 545 LPWSTR lpszBuffer, 546 LPCWSTR lpszPathName, 547 LPCWSTR lpszShortName, 548 LPCWSTR lpszLongName) 549 { 550 FIXME("(%p, %s, %s ,%s):stub.\n", 551 lpszBuffer, debugstr_w(lpszPathName), debugstr_w(lpszShortName), debugstr_w(lpszLongName)); 552 return TRUE; 553 } --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/bb776479%28v=vs.85%… Either change the stub to return FALSE and set lasterror "unimplemented" or flesh out the stub (not too hard). $ sha1sum FlashBuilder_4_6_LS10.exe 7991023d94bcf62f06eb1500914b5274b32c30ea FlashBuilder_4_6_LS10.exe $ du -sh FlashBuilder_4_6_LS10.exe 819M FlashBuilder_4_6_LS10.exe $ wine --version wine-1.7.18-76-gcfb81f2 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 36811] New: Avast! Free Antivirus 9.0.2013 'AvastSvc.exe' crashes on unimplemented function KERNEL32.dll.GetFirmwareEnvironmentVariableA
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=36811 Bug ID: 36811 Summary: Avast! Free Antivirus 9.0.2013 'AvastSvc.exe' crashes on unimplemented function KERNEL32.dll.GetFirmwareEnvironmentVariableA Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, the installer now works with bug 36487 and bug 36500 fixed. The service app crashes on startup though. Start the gui app and finish initial setup wizard. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/AVAST Software/Avast $ wine ./AvastUI.exe ... Unhandled exception: unimplemented function KERNEL32.dll.GetFirmwareEnvironmentVariableA called in 32-bit code (0x7bc52792). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:7bc52792 ESP:1146de28 EBP:1146de8c EFLAGS:00200216( - -- I -A-P- ) EAX:1146de34 EBX:7bcd1000 ECX:8720c0a8 EDX:00410064 ESI:1146e2dc EDI:1146e2dc ... Backtrace: =>0 0x7bc52792 stub_entry_point+0x4b(dll="KERNEL32.dll", name="GetFirmwareEnvironmentVariableA", ret_addr=0x10d83851) [/home/focht/projects/wine/wine.repo/src/dlls/ntdll/loader.c:196] in ntdll (0x1146de8c) 1 0x003400b4 (0x1146e1a8) 2 0x10d75525 in aswjsscan (+0x5524) (0x1146e250) 3 0x009787d1 (0x1146e33c) 4 0x00978b64 (0x1146ea58) ... 196 for (;;) RtlRaiseException( &rec ); Modules: Module Address Debug info Name (166 modules) PE 400000- 40d000 Deferred avastsvc PE 520000- 645000 Deferred libeay32 PE bb0000- c36000 Deferred aswsqlt PE 54e0000- 54e9000 Deferred ahresws2 PE f330000- f3cf000 Deferred ashbase PE f3d0000- f416000 Deferred ssleay32 PE f520000- f772000 Deferred aavm4h PE f780000- f7d3000 Deferred ahresws PE 10000000-1006a000 Deferred aswcommchannel PE 10d70000-11367000 Export aswjsscan ... Threads: process tid prio (all id:s are in hex) 00000008 AvastUI.exe 000000cb 0 000000ca 0 000000c9 0 ... 00000031 (D) C:\Program Files\AVAST Software\Avast\AvastSvc.exe 000000c4 0 000000c3 0 000000c2 0 000000c1 0 <== 000000be 0 000000b5 -15 ... --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/ms724325%28v=vs.85%… $ sha1sum avast_free_antivirus_setup_9_0_2018.exe f3c810bb61028801d3d89e5f6c7a4eb2761145e9 avast_free_antivirus_setup_9_0_2018.exe $ du -sh avast_free_antivirus_setup_9_0_2018.exe 85M avast_free_antivirus_setup_9_0_2018.exe $ wine --version wine-1.7.20-158-g8762842 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 36505] New: DynDNS Updater 4.1.6 crashes on startup
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=36505 Bug ID: 36505 Summary: DynDNS Updater 4.1.6 crashes on startup Product: Wine Version: 1.7.19 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: jscript Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, relevant part of trace log: ---- snip --- WINEDEBUG=+tid,+seh,+relay,+jscript,+ole,+variant wine ./DynDNS\ Updater\ 4.1.6.exe >>log.txt 2>&1 ... 0023:trace:jscript:JScriptParse_ParseScriptText (0x140338)->(L"require(\"res://scriptLib.js\");\r\nrequire(\"res://json2.js\");\r\nrequire(\"res://base64.js\");\r\nrequire(\"res://md5.js\");\r\n\r\n/////////////////////////////////////////////////////////////////////\r\napp.log(0, 'SCRIPT STARTS');\r\napp.log(0, 'TAG DATA: ' + app.tag);\r\n\r\nvar mainScript = ("... (null) (nil) (null) ffffffff 0 20 (nil) (nil)) ... 0023:trace:jscript:interp_str L"res://scriptLib.js" ... 0023:trace:jscript:JScriptParse_ParseScriptText (0x140338)->(L"////////////////////////////////////////////////////////////////////\r\n// Library\r\n//\r\nvar WinConst = {\r\n//-- window style bits.\r\n WS_OVERLAPPED: 0x00000000,\r\n WS_POPUP: 0x80000000,\r\n WS_CLIPSIBLINGS: 0x04000000,\r\n WS_CLIPCHILDREN: 0x02000000,\r\n WS_CAPTION: 0x00C00000,"... (null) (nil) (null) ffffffff 0 20 (nil) (nil)) ... 0023:trace:jscript:interp_double 0.000000 0023:trace:jscript:interp_obj_prop L"FFF_DEFAULT" 0023:trace:jscript:ensure_prop_name creating prop L"FFF_DEFAULT" flags 200 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b3978 ret=7d688c0d 0023:trace:jscript:prop_put L"FFF_DEFAULT" = 0.000000 0023:trace:jscript:interp_double 1.000000 0023:trace:jscript:interp_obj_prop L"FFF_FILESONLY" 0023:trace:jscript:ensure_prop_name creating prop L"FFF_FILESONLY" flags 200 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b3998 ret=7d688c0d 0023:trace:jscript:prop_put L"FFF_FILESONLY" = 1.000000 0023:trace:jscript:interp_double 2.000000 0023:trace:jscript:interp_obj_prop L"FFF_DIRSONLY" 0023:trace:jscript:ensure_prop_name creating prop L"FFF_DIRSONLY" flags 200 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b39c0 ret=7d688c0d 0023:trace:jscript:prop_put L"FFF_DIRSONLY" = 2.000000 0023:trace:jscript:interp_double 4.000000 0023:trace:jscript:interp_obj_prop L"FFF_RECURSIVE" 0023:trace:jscript:ensure_prop_name creating prop L"FFF_RECURSIVE" flags 200 0023:Call ntdll.RtlReAllocateHeap(00110000,00000000,001b38f0,00000100) ret=7d688c76 0023:Ret ntdll.RtlReAllocateHeap() retval=001b39e8 ret=7d688c76 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b38f0 ret=7d688c0d 0023:trace:jscript:prop_put L"FFF_RECURSIVE" = 4.000000 0023:trace:jscript:interp_double 1.000000 0023:trace:jscript:interp_obj_prop L"SLOF_ABORT_RESISTANT" 0023:trace:jscript:ensure_prop_name creating prop L"SLOF_ABORT_RESISTANT" flags 200 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002a) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b3918 ret=7d688c0d 0023:trace:jscript:prop_put L"SLOF_ABORT_RESISTANT" = 1.000000 0023:trace:jscript:interp_var_set L"AppConst" 0023:trace:jscript:prop_put L"AppConst" = obj(0x1b38c8) 0023:trace:jscript:interp_ret 0023:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7d6a794b ip=7d6a794b tid=0023 0023:trace:seh:raise_exception info[0]=00000001 0023:trace:seh:raise_exception info[1]=00000000 0023:trace:seh:raise_exception eax=00000000 ebx=7d6dd000 ecx=7d6a7948 edx=7ff80001 esi=0033f258 edi=00217b8c 0023:trace:seh:raise_exception ebp=0033f1b8 esp=0033f170 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00210216 ... Unhandled exception: page fault on write access to 0x00000000 in 32-bit code (0x7d6a794b). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:7d6a794b ESP:0033f170 EBP:0033f1b8 EFLAGS:00210216( R- -- I -A-P- ) EAX:00000000 EBX:7d6dd000 ECX:7d6a7948 EDX:7ff80001 ESI:0033f258 EDI:00217b8c ... Backtrace: =>0 0x7d6a794b jsval_to_variant+0x63(val={u={n=nan, s={u={obj=0x217b8c, str=0x217b8c, b=0x217b8c, v=0x217b8c, as_uintptr=0x217b8c}, tag=JSV_UNDEFINED}}}, retv=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/jsutils.c:344] in jscript (0x0033f1b8) 1 0x7d6a0bc6 JScriptParse_ParseScriptText+0x250(iface=<couldn't compute location>, pstrCode=<couldn't compute location>, pstrItemName=<couldn't compute location>, punkContext=<couldn't compute location>, pstrDelimiter=<couldn't compute location>, dwSourceContextCookie=<couldn't compute location>, ulStartingLine=<couldn't compute location>, dwFlags=<couldn't compute location>, pvarResult=<couldn't compute location>, pexcepinfo=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/jscript.c:786] in jscript (0x0033f248) 2 0x0040eef2 in dyndns updater 4.1.6 (+0xeef1) (0x0033f2dc) 3 0x0040dcfe in dyndns updater 4.1.6 (+0xdcfd) (0x0033f364) 4 0x0040dfa7 in dyndns updater 4.1.6 (+0xdfa6) (0x0033f3d8) 5 0x7e2adf16 call_method+0x21() in oleaut32 (0x0033f3f8) ... 344 V_VT(retv) = VT_EMPTY; Modules: Module Address Debug info Name (86 modules) PE 400000- 477000 Export dyndns updater 4.1.6 ELF 7b800000-7ba60000 Dwarf kernel32<elf> \-PE 7b810000-7ba60000 \ kernel32 ELF 7bc00000-7bcee000 Dwarf ntdll<elf> \-PE 7bc10000-7bcee000 \ ntdll ELF 7bf00000-7bf04000 Dwarf <wine-loader> ELF 7d663000-7d6fa000 Dwarf jscript<elf> \-PE 7d670000-7d6fa000 \ jscript ... process tid prio (all id:s are in hex) ... 00000022 (D) Z:\home\focht\Downloads\DynDNS Updater 4.1.6.exe 00000023 0 <== --- snip --- The app passes 'dwFlags = SCRIPTTEXT_ISEXPRESSION' _and_ NULL 'pvarResult' which Wine's JScript tries to write to after successful 'exec_source'. The scriptlet is rather uninteresting (not a problem): --- snip --- //////////////////////////////////////////////////////////////////// // Library // var WinConst = { //-- window style bits. WS_OVERLAPPED: 0x00000000, WS_POPUP: 0x80000000, WS_CLIPSIBLINGS: 0x04000000, WS_CLIPCHILDREN: 0x02000000, ... INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTP : 0x00008000, // ignore https:// to http:// INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTPS : 0x00004000, // ignore http:// to https:// INTERNET_FLAG_IGNORE_CERT_DATE_INVALID : 0x00002000, // ignore expired X509 Cert. INTERNET_FLAG_IGNORE_CERT_CN_INVALID : 0x00001000, // ignore bad common name in X509 Cert. ___LINE_FOR_NEW_VALUES___ : 0 }; var AppConst = { FFF_DEFAULT : 0, FFF_FILESONLY : 1, FFF_DIRSONLY : 2, FFF_RECURSIVE : 4, SLOF_ABORT_RESISTANT : 0x0001 }; --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/tch4w30x%28v=vs.94%29.aspx --- quote --- pvarResult [out] Address of a buffer that receives the results of scriptlet processing, or NULL if the caller expects no result (that is, the SCRIPTTEXT_ISEXPRESSION value is not set). --- quote --- Someone is wrong here ... Source: http://source.winehq.org/git/wine.git/blob/02d63cb3120d89a5107d4e26a92eb4bd… --- snip --- 753 static HRESULT WINAPI JScriptParse_ParseScriptText(IActiveScriptParse *iface, 754 LPCOLESTR pstrCode, LPCOLESTR pstrItemName, IUnknown *punkContext, 755 LPCOLESTR pstrDelimiter, CTXARG_T dwSourceContextCookie, ULONG ulStartingLine, 756 DWORD dwFlags, VARIANT *pvarResult, EXCEPINFO *pexcepinfo) 757 { 758 JScript *This = impl_from_IActiveScriptParse(iface); 759 bytecode_t *code; 760 HRESULT hres; ... 774 if(dwFlags & SCRIPTTEXT_ISEXPRESSION) { 775 exec_ctx_t *exec_ctx; 776 777 hres = create_exec_ctx(This->ctx, NULL, This->ctx->global, NULL, TRUE, &exec_ctx); 778 if(SUCCEEDED(hres)) { 779 jsval_t r; 780 781 IActiveScriptSite_OnEnterScript(This->site); 782 783 clear_ei(This->ctx); 784 hres = exec_source(exec_ctx, code, &code->global_code, TRUE, &r); 785 if(SUCCEEDED(hres)) { 786 hres = jsval_to_variant(r, pvarResult); 787 jsval_release(r); 788 } 789 exec_release(exec_ctx); 790 791 IActiveScriptSite_OnLeaveScript(This->site); 792 } ... --- snip --- $ sha1sum DynDNS\ Updater\ 4.1.6.exe 629268eaef62d424798c7965d3e9e63a0584861a DynDNS Updater 4.1.6.exe $ du -sh DynDNS\ Updater\ 4.1.6.exe 460K DynDNS Updater 4.1.6.exe $ wine --version wine-1.7.19-47-g704d169 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 36822] New: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThread
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=36822 Bug ID: 36822 Summary: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThread Product: Wine Version: 1.7.21 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, as the summary says ... --- snip --- ... fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ffc 0x53e5bc) stub wine: Call from 0x7b83adcf to unimplemented function ntoskrnl.exe.KeSetSystemAffinityThread, aborting --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/hardware/ff553267%28v=vs.85… --- quote --- The KeSetSystemAffinityThread routine sets the system affinity of the current thread. VOID KeSetSystemAffinityThread( _In_ KAFFINITY Affinity ); Parameters Affinity [in] A KAFFINITY-typed variable that specifies the new system affinity of the current thread. Return value None --- quote --- $ sha1sum mtasa-1.3.5.exe 7f186543892ef0877cd568ce0935c5e9641578c8 mtasa-1.3.5.exe $ du -sh mtasa-1.3.5.exe 21M mtasa-1.3.5.exe $ wine --version wine-1.7.21-3-gbf72c67 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 36821] New: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver continuously spams terminal due to 'PsLookupProcessByProcessId' stub
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=36821 Bug ID: 36821 Summary: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver continuously spams terminal due to 'PsLookupProcessByProcessId' stub Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, the kernel driver is part of 'Multi Theft Auto' v1.3.5 Release notes: https://forum.mtasa.com/viewtopic.php?f=31&t=71767 There is a constant spam on terminal: --- snip --- ... fixme:ntoskrnl:PsLookupProcessByProcessId (0x4 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x8 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0xc 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x10 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x14 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x18 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x1c 0x53e5bc) stub ... fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ff8 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ffc 0x53e5bc) stub fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:ntoskrnl:PsLookupProcessByProcessId (0x4 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x8 0x53e5bc) stub ... <repeats forever> --- snip --- 'FairplayKD.sys' kernel driver code: --- snip --- 00541F06 8BFF MOV EDI,EDI 00541F08 55 PUSH EBP 00541F09 8BEC MOV EBP,ESP 00541F0B 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] ; process id to lookup 00541F0E 53 PUSH EBX 00541F0F 56 PUSH ESI 00541F10 F6C1 03 TEST CL,3 00541F13 75 42 JNZ SHORT 00541F57 00541F15 8B5D 0C MOV EBX,DWORD PTR SS:[EBP+C] 00541F18 F6C3 03 TEST BL,3 00541F1B 75 3A JNZ SHORT 00541F57 00541F1D B8 E8FD0000 MOV EAX,0FDE8 ; max pid (handle) 00541F22 3BC8 CMP ECX,EAX 00541F24 77 31 JA SHORT 00541F57 00541F26 3BD8 CMP EBX,EAX 00541F28 77 2D JA SHORT 00541F57 00541F2A 3BCB CMP ECX,EBX 00541F2C 73 29 JNB SHORT 00541F57 00541F2E 8BF1 MOV ESI,ECX pid_loop: 00541F30 8D45 08 LEA EAX,DWORD PTR SS:[EBP+8] 00541F33 50 PUSH EAX 00541F34 56 PUSH ESI 00541F35 FF15 8C8A5400 CALL DWORD PTR DS:[548A8C] ; PsLookupProcessByProcessId 00541F3B 85C0 TEST EAX,EAX 00541F3D 74 0B JE SHORT 00541F4A 00541F3F 83C6 04 ADD ESI,4 00541F42 3BF3 CMP ESI,EBX 00541F44 72 EA JB SHORT 00541F30 00541F46 8BC3 MOV EAX,EBX 00541F48 EB 0F JMP SHORT 00541F59 00541F4A 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 00541F4D FF15 888A5400 CALL DWORD PTR DS:[548A88] ; ObfDereferenceObject 00541F53 8BC6 MOV EAX,ESI 00541F55 EB 02 JMP SHORT 00541F59 00541F57 33C0 XOR EAX,EAX 00541F59 5E POP ESI 00541F5A 5B POP EBX 00541F5B 5D POP EBP 00541F5C C2 0800 RETN 8 --- snip --- If it fails (Wine stub in this case) just go for the next process id ... genius logic at work :) Silencing via "trace once" might be ok for this - even if the loop is still getting executed. $ sha1sum mtasa-1.3.5.exe 7f186543892ef0877cd568ce0935c5e9641578c8 mtasa-1.3.5.exe $ du -sh mtasa-1.3.5.exe 21M mtasa-1.3.5.exe $ wine --version wine-1.7.21-3-gbf72c67 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 11747] New: CorelDRAW Graphics Suite X4 Trial installer crashes
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=11747 Summary: CorelDRAW Graphics Suite X4 Trial installer crashes Product: Wine Version: 0.9.56. Platform: PC URL: http://www.corel.com/servlet/Satellite?pagename=CorelCom /ProcessLayout&lc=en&ppg=CorelCorp/Trials/DownloadContai ner OS/Version: Linux Status: NEW Keywords: download, Installer Severity: normal Priority: P2 Component: msxml3 AssignedTo: wine-bugs(a)winehq.org ReportedBy: truiken(a)gmail.com $ wine CorelDRAWGraphicsSuiteX4Installer_EN.exe wine: Unhandled page fault on read access to 0x00000000 at address 0x7ddf3f47 (thread 0016), starting debugger... Unhandled exception: page fault on read access to 0x00000000 in 32-bit code (0x7ddf3f47). Backtrace: =>1 0x7ddf3f47 queryresult_get_length+0x57(iface=0x130e38, listLength=0x34f58c) [/home/truiken/wine/dlls/msxml3/queryresult.c:277] in msxml3 (0x0034f554) 2 0x0035401b in setupxml (+0x401b) (0x005f4650) 3 0x00430049 in setup (+0x30049) (0x002f002f) 4 0x00000000 (0x00000000) 0x7ddf3f47 queryresult_get_length+0x57 [/home/truiken/wine/dlls/msxml3/queryresult.c:277] in msxml3: movl 0x0(%eax),%edx 277 *listLength = This->result->nodesetval->nodeNr; -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 39

[Bug 22706] New: Stylizer: cannot start the program
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=22706 Summary: Stylizer: cannot start the program Product: Wine Version: 1.1.44 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: shnatsel(a)gmail.com Created an attachment (id=27979) --> (http://bugs.winehq.org/attachment.cgi?id=27979) Console output Stylizer (http://appdb.winehq.org/objectManager.php?sClass=application&iId=11499) doesn't start - wine prints "fixme:..." messages to console. I've used Winetricks to install .NET framework, but since it seems to be Wine problem, I'm reporting this as Wine bug. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 15

[Bug 30397] New: Spoon Studio 2011 (ex Xenocode) application sandboxing scheme needs support for NtSetInformationFile class FileDispositionInformation (Stylizer 5.x, Visual CSS editor)
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=30397 Bug #: 30397 Summary: Spoon Studio 2011 (ex Xenocode) application sandboxing scheme needs support for NtSetInformationFile class FileDispositionInformation (Stylizer 5.x, Visual CSS editor) Product: Wine Version: 1.5.1 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, Stylizer 5.x (Visual CSS editor) is wrapped in Xenocode like sandboxing scheme, now called "Spoon Studio 2011". The usual native API hooking in several places. It seems not very happy about some unimplemented NtSetInformationFile classes. ---snip --- ... 0025:Call ntdll.RtlInitUnicodeString(0032f334,008b3068 L"\\??\\C:\\users\\focht\\Local Settings\\Application Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58\\XSandbox.bin.__tmp__") ret=0034d108 0025:Ret ntdll.RtlInitUnicodeString() retval=0032f334 ret=0034d108 0025:Call ntdll.NtOpenFile(0032f308,00110100,0032f31c,0032f2f8,00000007,00000020) ret=0034da48 0025:Ret ntdll.NtOpenFile() retval=00000000 ret=0034da48 0025:Call ntdll.NtSetInformationFile(00000068,0032f300,0032f2cc,00000028,00000004) ret=0034da84 0025:Ret ntdll.NtSetInformationFile() retval=00000000 ret=0034da84 0025:Call ntdll.NtSetInformationFile(00000068,0032f300,0032f31b,00000001,0000000d) ret=0034da9d 0025:fixme:ntdll:NtSetInformationFile Unsupported class (13) 0025:Ret ntdll.NtSetInformationFile() retval=c0000002 ret=0034da9d 0025:Call ntdll.NtClose(00000068) ret=0036b1d3 0025:Ret ntdll.NtClose() retval=00000000 ret=0036b1d3 ... 0025:Call user32.MessageBoxW(00000000,008b2f70 L"The sandbox at \\??\\C:\\users\\focht\\Local Settings\\Application Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58 is corrupt or inaccessible. Please check the location and try again.",008a3f48 L"Spoon Studio 2011",00000010) ret=00396aa6 ... ---snip --- MSDN (ZwSetInformationFile): http://msdn.microsoft.com/en-us/library/windows/hardware/ff567096%28v=vs.85… class 13 -> FILE_DISPOSITION_INFORMATION: http://msdn.microsoft.com/en-us/library/windows/hardware/ff545765%28v=vs.85… Also interesting read: Cygwin's Corinna Vinschen and some MS guy about deletion semantics ;-) http://www.tech-archive.net/Archive/Development/microsoft.public.win32.prog… --- quote --- First off, FILE_DELETE_ON_CLOSE and FileDispositionInformation are NOT the same thing. There are really two parts to delete. The first part is to logically delete the file. This consists of the file system marking the file as deleted and then waiting for the last handle to close. When a file is marked as deleted, many operations (including new opens) fail. Once the last handle as closed, the actual delete of the file can take place. When you open a file with FILE_DELETE_ON_CLOSE, the file is left as is. Neither part of delete is done. The only thing done is to remember that when this handle is closed, the file should be deleted. All operations on the file will proceed as normal. When the handle marked as delete on close is closed, the file is logically deleted. If that handle was the last handle, the file will also actually be deleted. When you use FileDispositionInformation to set a file to deleted, the file is logically deleted right then. Any new opens for the file and many other operations will fail. The file system will not complete the actual removal of the file until the last handle is closed, though. --- quote --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 22