November 2015 - Wine-bugs - list.winehq.org

[Bug 33457] New: Will the multiplication suffers from integer overflow @line 268?
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

http://bugs.winehq.org/show_bug.cgi?id=33457 Bug #: 33457 Summary: Will the multiplication suffers from integer overflow @line 268? Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: comctl32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: sunxs(a)is.iscas.ac.cn Classification: Unclassified We notice that the multiplication at line 268 may overflow in some condition, and is not checked. We think it is necessary to check it as the DSA_InsertItem is an exported function. It is not guaranteed that all the parameters will be in the valid range. The related codes are shown below. Xiaoshan Sun TCA, ISCAS ============== related source codes ======================================== Implemented in "dlls/comctl32/dsa.c". source.winehq.org/source/dlls/comctl32/dsa.c 251 INT WINAPI DSA_InsertItem (const HDSA hdsa, INT nIndex, LPVOID pSrc) 252 { 253 INT nNewItems, nSize; 254 LPVOID lpTemp, lpDest; 255 256 TRACE("(%p %d %p)\n", hdsa, nIndex, pSrc); 257 258 if ((!hdsa) || nIndex < 0) 259 return -1; 260 261 /* when nIndex >= nItemCount then append */ 262 if (nIndex >= hdsa->nItemCount) 263 nIndex = hdsa->nItemCount; 264 265 /* do we need to resize ? */ 266 if (hdsa->nItemCount >= hdsa->nMaxCount) { 267 nNewItems = hdsa->nMaxCount + hdsa->nGrow; 268 nSize = hdsa->nItemSize * nNewItems; // if ( nSize/nNewItems != hdsa->nItemSize){ overflow detected;} 269 270 lpTemp = ReAlloc (hdsa->pData, nSize); -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 10

[Bug 39195] New: msvcr120.dll.nextafter is needed by Sonkwo
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

https://bugs.winehq.org/show_bug.cgi?id=39195 Bug ID: 39195 Summary: msvcr120.dll.nextafter is needed by Sonkwo Product: Wine Version: 1.7.48 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: litimetal(a)gmail.com Distribution: --- http://www.sonkwo.com is a game store in China. 0. Download http://www.sonkwo.com/installer/SonkwoInstaller.exe $ sha1sum SonkwoInstaller.exe 0ef9ccba21b0b00ebeb312a40f2f5ce752fadd16 SonkwoInstaller.exe 2. wine SonkwoInstaller.exe wine: Call from 0x7b83c2b3 to unimplemented function msvcr120.dll.nextafter, aborting wine: Unimplemented function msvcr120.dll.nextafter called at address 0x7b83c2b3 (thread 002a), starting debugger... -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 19

[Bug 35286] New: Borderlands needs msvcr90.dll._crt_debugger_hook
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

http://bugs.winehq.org/show_bug.cgi?id=35286 Bug ID: 35286 Summary: Borderlands needs msvcr90.dll._crt_debugger_hook Product: Wine Version: 1.7.9 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msvcrt Assignee: wine-bugs(a)winehq.org Reporter: debian(a)carbon-project.org Classification: Unclassified Boderlands (Steam version) needs msvcr90.dll._crt_debugger_hook and fails to launch. Disabling mmdevapi works around this issue. > wine: Call from 0x7b83aabe to unimplemented function msvcr90.dll._crt_debugger_hook, aborting Note: this might be a clone of bug 34870 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 21

[Bug 20896] New: Use-after-free in DdeClientTransaction in user32 dde tests
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

http://bugs.winehq.org/show_bug.cgi?id=20896 Summary: Use-after-free in DdeClientTransaction in user32 dde tests Product: Wine Version: 1.1.33 Platform: PC OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: user32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com http://kegel.com/wine/valgrind/logs/2009-11-30-19.16/vg-user32_dde.txt says Invalid read of size 2 at GlobalFree (heap.c:767) by WDML_FreeTransaction (dde_misc.c:2439) by DdeClientTransaction (dde_client.c:1228) by test_ddeml_client (dde.c:392) by func_dde (dde.c:2357) by run_test (test.h:535) by main (test.h:585) Address 0x7f075e80 is not stack'd, malloc'd or (recently) free'd It's a little hard to see what's going on, but it appears that the memory in question was indeed recently freed, judging by the attached log, which was generated by the command WINEDEBUG=+relay,+heap valgrind --trace-children=yes wine user32_test.exe.so dde.c and edited to show just the area of interest. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 14

[Bug 34507] New: __unDName doesn't support data type "$$B"
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

http://bugs.winehq.org/show_bug.cgi?id=34507 Bug #: 34507 Summary: __unDName doesn't support data type "$$B" Product: Wine Version: 1.7.1 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msvcrt AssignedTo: wine-bugs(a)winehq.org ReportedBy: info(a)vmpsoft.com Classification: Unclassified ??_E?$TStrArray@$$BY0BAA(a)D$0BA@@@UAEPAXI(a)Z -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 5

[Bug 36625] New: can't set text background color in richedit
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

http://bugs.winehq.org/show_bug.cgi?id=36625 Bug ID: 36625 Summary: can't set text background color in richedit Product: Wine Version: 1.7.19 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: richedit Assignee: wine-bugs(a)winehq.org Reporter: lostcoderhaley(a)gmail.com Created attachment 48673 --> http://bugs.winehq.org/attachment.cgi?id=48673 Add support for changing the background color of text in a richedit controll In Living Cookbook, when a user is capturing a recipe they select some text then choose what that text is (ingredients, instructions, etc.). Then LC changes the background color of that text so the user can see which parts of the recipe have been imported and what type they are. Currently wine does not allow changing the background color of only some of the text. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 32936] New: SmartMusic crashed wine1.4 upon startup
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

http://bugs.winehq.org/show_bug.cgi?id=32936 Bug #: 32936 Summary: SmartMusic crashed wine1.4 upon startup Product: Wine Version: 1.4 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: rgncqcll(a)sharklasers.com Classification: Unclassified Created attachment 43491 --> http://bugs.winehq.org/attachment.cgi?id=43491 Backtrace.txt from Wine 1.4 crash with SmartMusic install Running Wine 1.4, default installed with Ubuntu 12.04 LTS as on date. SmartMusic installer (available here: http://www.smartmusic.com/download/default.aspx?mode=download&platform=Wind…) ran smoothly and finished without error. Upon starting SmartMusic, however, Wine immediately crashed with a backtrace as shown in the attachment. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 18

[Bug 34870] New: msvcr100.dll _crt_debugger_hook not found - ArchiCAD 16
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

http://bugs.winehq.org/show_bug.cgi?id=34870 Bug #: 34870 Summary: msvcr100.dll _crt_debugger_hook not found - ArchiCAD 16 Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: msvcrt AssignedTo: wine-bugs(a)winehq.org ReportedBy: matt(a)tirian.net Classification: Unclassified ArchiCAD 16 does not run - crashes with: msvcr100.dll _crt_debugger_hook not found -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 15

[Bug 39677] New: Zararadio crashes
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

https://bugs.winehq.org/show_bug.cgi?id=39677 Bug ID: 39677 Summary: Zararadio crashes Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: critical Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: jotape1960(a)yahoo.com Distribution: --- Created attachment 52902 --> https://bugs.winehq.org/attachment.cgi?id=52902 Error generated by Zararadio ZaraRadio (a radio automation software for Windows) crashes when it has to change from a playlist to another. I use Wine 1.6.2 into Ubuntu Studio 15.10. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 81

[Bug 39074] New: IXMLDOMDocument::cloneNode crash
by wine-bugs＠winehq.org 07 Oct '16

07 Oct '16

https://bugs.winehq.org/show_bug.cgi?id=39074 Bug ID: 39074 Summary: IXMLDOMDocument::cloneNode crash Product: Wine Version: 1.7.49 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msxml3 Assignee: wine-bugs(a)winehq.org Reporter: litimetal(a)gmail.com Distribution: --- Created attachment 52061 --> https://bugs.winehq.org/attachment.cgi?id=52061 domdoc.txt IXMLDOMDocument::cloneNode will crash if it is called 0. Apply domdoc.txt to wine-git 1. cd dlls/msxml3/tests; make domdoc.ok 2. crash My patch works fine on testbot[1], so it showed a wine bug [1]： https://testbot.winehq.org/JobDetails.pl?Key=15939 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 7