March 2015 - Wine-bugs - list.winehq.org

[Bug 37460] New: civilizations beyond earth crashes on startup
by wine-bugs＠winehq.org 15 Apr '16

15 Apr '16

https://bugs.winehq.org/show_bug.cgi?id=37460 Bug ID: 37460 Summary: civilizations beyond earth crashes on startup Product: Wine Version: unspecified Hardware: x86 OS: Mac OS X Status: UNCONFIRMED Severity: major Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: sand--demon(a)hotmail.com Created attachment 49832 --> https://bugs.winehq.org/attachment.cgi?id=49832 Error Logs Unhandled exception: page fault on read access to 0x00000001 in 32-bit code (0x0 Running on a mac using wine to run civ beyond earth -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 17918] New: AvsP Preview window fails to load
by wine-bugs＠winehq.org 15 Apr '16

15 Apr '16

http://bugs.winehq.org/show_bug.cgi?id=17918 Summary: AvsP Preview window fails to load Product: Wine Version: 1.1.18 Platform: All URL: http://avisynth.org/qwerpoi/ OS/Version: Linux Status: UNCONFIRMED Severity: enhancement Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: cheeseboy(a)awesome-toons.org Created an attachment (id=20249) --> (http://bugs.winehq.org/attachment.cgi?id=20249) wine log AvsP is a IDE for avisynth. I am on gentoo linux and am runnng wine 1.1.18. When I open a avs script or write one in editor and attemp to preview it Only a black box appears. Pic: http://i39.tinypic.com/2s17rrk.jpg How to reproduce: Download install avisynth from http://downloads.sourceforge.net/avisynth2/Avisynth_258.exe Download http://www.avisynth.org/qwerpoi/AvsP_v2.0.2.zip Unzip AvsP_v2.0.2.zip and open AvsP.exe type either MPEG2Source("Z:\path\to\file.mpg") avisource("Z:\path\to\file.avi") note: for avi you may need a codec press f5 to preview video log attached below -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 13

[Bug 32007] New: AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList
by wine-bugs＠winehq.org 15 Apr '16

15 Apr '16

http://bugs.winehq.org/show_bug.cgi?id=32007 Bug #: 32007 Summary: AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList Product: Wine Version: 1.5.15 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: directx-dxgi AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified Found while checking bug 23402. Installing just the demo, and declining DirectX runtime installation, succeeds if you set wine for vista. The app then aborts with fixme:dxgi:dxgi_output_GetDisplayModeList iface 0x140a38, format DXGI_FORMAT_R8G8B8A8_UNORM, flags 0x3, mode_count 0x33fa1c, desc (nil) partial stub! wine: Unhandled page fault on read access to 0x00000030 at address 0x30 (thread 0009), starting debugger... -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 18

[Bug 33568] New: Unhandled exception: page fault on read access to 0x44801e67 in 32-bit code (0x1e06a9d9).
by wine-bugs＠winehq.org 13 Apr '16

13 Apr '16

http://bugs.winehq.org/show_bug.cgi?id=33568 Bug #: 33568 Summary: Unhandled exception: page fault on read access to 0x44801e67 in 32-bit code (0x1e06a9d9). Product: Wine Version: 1.4.1 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: cmd AssignedTo: wine-bugs(a)winehq.org ReportedBy: csakalinuxjo(a)gmail.com Classification: Unclassified Created attachment 44441 --> http://bugs.winehq.org/attachment.cgi?id=44441 Unhandled exception Unhandled exception: page fault on read access to 0x44801e67 in 32-bit code (0x1e06a9d9). -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 10

[Bug 15473] New: After Effects 4 crashes on startup
by wine-bugs＠winehq.org 12 Apr '16

12 Apr '16

http://bugs.winehq.org/show_bug.cgi?id=15473 Summary: After Effects 4 crashes on startup Product: Wine Version: 1.1.5 Platform: Other URL: http://download.adobe.com/pub/adobe/aftereffects/win/4.x /ae4try_uk.exe OS/Version: other Status: NEW Keywords: download Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com sha1sum of ae4try_uk.exe is 8b9dd9bbe422209a311c5f0ce9054e2e687f5450 App installs ok and puts up a gui when you start it, but quickly crashes with dialog "After Effects can't continue: sorry, an abnormal condition has been detected" +seh shows there's an exception, but the +relay,+text,+seh log isn't very illuminating. Running in winedbg gives a nice stack dump; inside SetWindowPos(), for some reason DefWindowProc gets WM_KEYF1 and sends WM_HELP, which is handled by the app's window procedure, which crashes on a near-null pointer access. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 15

[Bug 35187] New: Jade Empire Special Edition configuration tool always resetting video settings
by wine-bugs＠winehq.org 12 Apr '16

12 Apr '16

http://bugs.winehq.org/show_bug.cgi?id=35187 Bug ID: 35187 Summary: Jade Empire Special Edition configuration tool always resetting video settings Product: Wine Version: 1.7.8 Hardware: x86 OS: Linux Status: NEW Keywords: regression Severity: minor Priority: P2 Component: msxml3 Assignee: wine-bugs(a)winehq.org Reporter: gyebro69(a)gmail.com CC: amartinson(a)codeweavers.com Classification: Unclassified Regression SHA1: 85ced167bd68e882900085ea50f25897e8457172 Created attachment 46937 --> http://bugs.winehq.org/attachment.cgi?id=46937 terminal output This was tested with the GOG.com version of the game. The game has a configuration tool (JadeEmpireConfig.exe) similar to the one used in Dragon Age:Origins, except the problem doesn't exist in DA:Origins' utility. The problem: when you start the configuration tool it always resets the video options that you set and saved earlier. The problem can be reproduced by selecting a different screen resolution in the utility, then click on the System -> Rescan option. Screen resolution and all other video options reverted to 640x480. The problem is not with saving the options, because the changes you've made are saved correctly in JadeEmpire.ini. I found out this is a regression from Wine 1.3.7: 85ced167bd68e882900085ea50f25897e8457172 is the first bad commit commit 85ced167bd68e882900085ea50f25897e8457172 Author: Adam Martinson <amartinson(a)codeweavers.com> Date: Wed Nov 3 16:13:58 2010 -0500 msxml3: Fix node_get_text() whitespace handling. :040000 040000 76eb4e8a62b445fe244a16524f7305411c69875f af858af05d7afa1534da053cada3cf8583992c69 M dlls Native msxml3 (winetricks msxml3) works around the problem. wine-1.7.8-142-gb87b9f0 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 10

[Bug 33988] New: Star Wars: The Force Unleashed II - Crashes with a page fault
by wine-bugs＠winehq.org 12 Apr '16

12 Apr '16

http://bugs.winehq.org/show_bug.cgi?id=33988 Bug #: 33988 Summary: Star Wars: The Force Unleashed II - Crashes with a page fault Product: Wine Version: 1.6-rc4 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: tomas191191(a)gmail.com Classification: Unclassified Created attachment 45159 --> http://bugs.winehq.org/attachment.cgi?id=45159 Program Error Details This game installs and starts perfectly from Steam (although it requires the same Virtual Memory fix as its predecessor). When I attempt to start a new game, it crashes with a page fault. I used "d3dx9_43" when trying to play this game. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 21

[Bug 37556] New: String compare functions with only one length argument can lead to page faults.
by wine-bugs＠winehq.org 12 Apr '16

12 Apr '16

https://bugs.winehq.org/show_bug.cgi?id=37556 Bug ID: 37556 Summary: String compare functions with only one length argument can lead to page faults. Product: Wine Version: 1.7.31 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: sebastian(a)fds-team.de Distribution: --- This issue was discovered with Adobe Flash, but is not limited to this single application. Moreover there are much more ways to trigger this issue than just the way described below. Important parts of the stacktrace: --- snip --- Unhandled exception: page fault on read access to 0x077ca000 in 32-bit code (0xf7563773). [...] Backtrace: =>0 0xf7563773 real_length+0x1f(str=".SOL", len=0xf) [libs/wine/sortkey.c:329] in libwine.so.1 (0x0093cf98) 1 0xf7563791 wine_compare_string+0x10(flags=0x1, str1=".SOL", len1=0xf, str2="\\?\GLOBALROOT\", len2=0xf) [libs/wine/sortkey.c:338] in libwine.so.1 (0x0093cfb8) 2 0x7b84f65f CompareStringEx+0x1f0(locale=..., flags=..., str1=..., len1=..., str2=..., len2=..., version=..., reserved=..., lParam=...) [dlls/kernel32/locale.c:3312] in kernel32 (0x0093d028) 3 0x7b84f45f CompareStringW+0x3a(lcid=..., flags=..., str1=..., len1=..., str2=..., len2=...) [dlls/kernel32/locale.c:3271] in kernel32 (0x0093d078) 4 0x7dd949a3 StrCmpNIW+0x9f(lpszStr=..., lpszComp=..., iLen=...) [dlls/shlwapi/string.c:418] in shlwapi (0x0093d0d8) [...] 0xf7563773 real_length+0x1f [libs/wine/sortkey.c:329] in libwine.so.1: movzwl 0x0(%eax),%eax 329 while (len && !str[len - 1]) len--; --- snip --- What happens here is that StrCmpNIW is called with two strings. --- snip --- INT WINAPI StrCmpNIW(LPCWSTR lpszStr, LPCWSTR lpszComp, int iLen) { TRACE("(%s,%s,%i)\n", debugstr_w(lpszStr), debugstr_w(lpszComp), iLen); return CompareStringW(GetThreadLocale(), NORM_IGNORECASE, lpszStr, iLen, lpszComp, iLen) - CSTR_EQUAL; } --- snip -- The exact length of both strings is unknown in this function, so wine passes "iLen" for both strings to CompareStringW. CompareStringW assumes that memory regions are valid, and then tries to access them in real_length(..). In this case however unfortunately one of the strings is very close to a page boundary, so accessing the whole memory block leads to a page fault. To fix this issue it is either necessary to: * Change all places where CompareStringW(..) is called with 'invalid' length values. * Add exception handlers to real_length(..). * Move real_length(..) from the beginning of CompareStringW(..) somewhere to the end, so that the function aborts on the first non-matching byte. I am opening this issue as a bug report since it needs further investigation, and I am not sure yet whats the right way to fix it. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 38314] New: Mouse Wheel doesn’t work for JA2 1.13 (it uses MOUSEHOOKSTRUCTEX)
by wine-bugs＠winehq.org 12 Apr '16

12 Apr '16

https://bugs.winehq.org/show_bug.cgi?id=38314 Bug ID: 38314 Summary: Mouse Wheel doesn’t work for JA2 1.13 (it uses MOUSEHOOKSTRUCTEX) Product: Wine Version: 1.7.39 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: notifications+bugs.winehq.org(a)m0a.de Distribution: --- The mouse wheel does not work at all in JA2 1.13 and by looking at the source code I think it may be one of several reasons: 1) MOUSEHOOKSTRUCTEX is not properly supported in wine 2) The wheel distance in mouseData does not equal WHEEL_DELTA (if it’s not exactly WHEEL_DELTA then this code will just drop the event) 3) There is a "bug" in the JA2 1.13 code, which actually works in Windows 3a) If I look at the code I see a comparison with WHEEL_DELTA, this will fail if the LOWORD of mouseData is not zero. Seems like on windows it’s always zero? Maybe in wine it’s not zero? Source: https://msdn.microsoft.com/en-us/library/windows/desktop/ms644969%28v=vs.85… The code: LRESULT CALLBACK MouseHandler(int Code, WPARAM wParam, LPARAM lParam) { [...] p_mhs = (MOUSEHOOKSTRUCTEX*)lParam; [...] if(p_mhs->mouseData==(WHEEL_DELTA<<16)) //up MessageBeep(-1); QueueEvent(MOUSE_WHEEL_UP, 0, uiParam); if(p_mhs->mouseData==(-WHEEL_DELTA<<16)) //dn MessageBeep(0x00000040L); QueueEvent(MOUSE_WHEEL_DOWN, 0, uiParam); -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 22

[Bug 36013] New: bleem! (PlayStation emulator) fails on startup, complaining with 'Not enough memory to load program!'
by wine-bugs＠winehq.org 12 Apr '16

12 Apr '16

https://bugs.winehq.org/show_bug.cgi?id=36013 Bug ID: 36013 Summary: bleem! (PlayStation emulator) fails on startup, complaining with 'Not enough memory to load program!' Product: Wine Version: 1.7.16 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, continuation of bug 34618 You need my 1-byte binary patch from bug 34618 to bypass the Win9X debugger check: --- snip --- $ printf '\x30' | dd of=bleem\!.exe bs=1 seek=349588 count=1 conv=notrunc --- snip --- WINEPREFIX Windows version must be set to 'Win9X' variant. Relevant part of trace log: --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/bleem/bleem! $ WINEDEBUG=+tid,+seh,+relay,+vxd wine ./bleem\!.exe >>log.txt 2>&1 ... 0023:Call KERNEL32.CreateFileA(004011e0 "C:\\Program Files\\bleem\\bleem!\\bleem!.exe",80000000,00000001,00000000,00000003,00000080,00000000) ret=0040107c 0023:Ret KERNEL32.CreateFileA() retval=0000005c ret=0040107c 0023:Call KERNEL32.CreateFileMappingA(0000005c,00000000,00000002,00000000,00000000,00000000) ret=00401096 0023:Ret KERNEL32.CreateFileMappingA() retval=00000060 ret=00401096 0023:Call KERNEL32.MapViewOfFile(00000060,00000004,00000000,00000000,00000000) ret=004010ad 0023:Ret KERNEL32.MapViewOfFile() retval=00340000 ret=004010ad 0023:Call krnl386.exe16.VxDCall0(002a0000) ret=003958ad 0023: eax=004022a4 ebx=000000b5 ecx=00000000 edx=00000005 esi=0033feb0 edi=0033fbac ebp=0033fe38 esp=0033fb08 ds=002b es=002b fs=0063 gs=006b flags=00000202 0023:Call KERNEL32.LoadLibraryW(7e6dd0e4 L"vwin32.vxd") ret=7e6acb8c ... 0023:Ret KERNEL32.LoadLibraryW() retval=7e400000 ret=7e6acb8c 0023:Call KERNEL32.GetProcAddress(7e400000,7e6c08de "VxDCall") ret=7e6acbf8 0023:Ret KERNEL32.GetProcAddress() retval=7e4066ac ret=7e6acbf8 0023:Call vwin32.vxd.VxDCall(002a0000,0033f794) ret=7e6acc68 0023:Call KERNEL32.GetVersion() ret=7e406cc7 0023:Ret KERNEL32.GetVersion() retval=c0000a04 ret=7e406cc7 0023:Ret vwin32.vxd.VxDCall() retval=0000040a ret=7e6acc68 0023:Ret krnl386.exe16.VxDCall0() retval=0000040a ret=003958ad 0023: eax=0000040a ebx=000000b5 ecx=00000000 edx=00000005 esi=0033feb0 edi=0033fbac ebp=0033fe38 esp=0033fb08 ds=002b es=002b fs=0063 gs=006b flags=00000202 0023:Call krnl386.exe16.VxDCall0(002a002a) ret=003958c0 0023: eax=004022a4 ebx=002a002a ecx=00000000 edx=00000005 esi=0033feb0 edi=0033fbac ebp=0033fe38 esp=0033fb0c ds=002b es=002b fs=0063 gs=006b flags=00000206 0023:Call vwin32.vxd.VxDCall(002a002a,0033f798) ret=7e6acc68 0023:Ret vwin32.vxd.VxDCall() retval=0000004f ret=7e6acc68 0023:Ret krnl386.exe16.VxDCall0() retval=0000004f ret=003958c0 0023: eax=0000004f ebx=002a002a ecx=00000000 edx=00000005 esi=0033feb0 edi=0033fbac ebp=0033fe38 esp=0033fb10 ds=002b es=002b fs=0063 gs=006b flags=00000206 0023:Call krnl386.exe16.VxDCall0(00010000) ret=00395737 0023: eax=004022a4 ebx=00000010 ecx=0005b944 edx=00000000 esi=0033fb60 edi=0034fa0c ebp=8005a244 esp=0033fafc ds=002b es=002b fs=0063 gs=006b flags=00000202 0023:Call KERNEL32.LoadLibraryW(7e6dd0c0 L"vmm.vxd") ret=7e6acb8c ... 0023:Ret KERNEL32.LoadLibraryW() retval=7e1e0000 ret=7e6acb8c 0023:Call KERNEL32.GetProcAddress(7e1e0000,7e6c08de "VxDCall") ret=7e6acbf8 0023:Ret KERNEL32.GetProcAddress() retval=7e1ee794 ret=7e6acbf8 0023:Call vmm.vxd.VxDCall(00010000,0033f788) ret=7e6acc68 0023:trace:vxd:VMM_VxDCall PageReserve: page: 80000400, npages: 0000005c, flags: 00000008 partial stub! 0023:Call KERNEL32.VirtualAlloc(00000000,0005c000,00002000,00000000) ret=7e1eea61 0023:Ret KERNEL32.VirtualAlloc() retval=00000000 ret=7e1eea61 0023:trace:vxd:VMM_VxDCall PageReserve: returning: (nil) 0023:Ret vmm.vxd.VxDCall() retval=ffffffff ret=7e6acc68 0023:Ret krnl386.exe16.VxDCall0() retval=ffffffff ret=00395737 0023: eax=ffffffff ebx=00000010 ecx=0005b944 edx=00000000 esi=0033fb60 edi=0034fa0c ebp=8005a244 esp=0033fb08 ds=002b es=002b fs=0063 gs=006b flags=00000202 0023:Call KERNEL32.UnmapViewOfFile(00340000) ret=004010d6 0023:Ret KERNEL32.UnmapViewOfFile() retval=00000001 ret=004010d6 0023:Call KERNEL32.CloseHandle(00000060) ret=004010e1 0023:Ret KERNEL32.CloseHandle() retval=00000001 ret=004010e1 0023:Call KERNEL32.CloseHandle(0000005c) ret=004010ec 0023:Ret KERNEL32.CloseHandle() retval=00000001 ret=004010ec 0023:Call user32.MessageBeep(00000010) ret=004010ff 0023:Call winex11.drv.SystemParametersInfo(00000001,00000000,0033fdcc,00000000) ret=7ec19bd2 0023:Ret winex11.drv.SystemParametersInfo() retval=00000000 ret=7ec19bd2 0023:Call winex11.drv.Beep() ret=7ebffc49 0023:Ret winex11.drv.Beep() retval=00000001 ret=7ebffc49 0023:Ret user32.MessageBeep() retval=00000001 ret=004010ff 0023:Call user32.MessageBoxA(00000000,00401336 "Not enough memory to load program!\n\nClose other applications and try again.",004012e5 "bleem, llc.",00011010) ret=0040111c --- snip --- The emulator uses VMM.VXD service 'PageReserve' with 'PR_FIXED' attributes to request a chunk of memory. VirtualAlloc() with '0' page protection attributes (line 162) doesn't make sense here, probably a typo. Source: http://source.winehq.org/git/wine.git/blob/ae9b07fdc0f8b179d87db07c8ecd2c07… --- snip --- 136 DWORD WINAPI VMM_VxDCall( DWORD service, CONTEXT *context ) 137 { 138 static int warned; 139 140 switch ( LOWORD(service) ) 141 { 142 case 0x0000: /* PageReserve */ 143 { 144 LPVOID address; 145 LPVOID ret; 146 ULONG page = stack32_pop( context ); 147 ULONG npages = stack32_pop( context ); 148 ULONG flags = stack32_pop( context ); 149 150 TRACE("PageReserve: page: %08x, npages: %08x, flags: %08x partial stub!\n", 151 page, npages, flags ); 152 153 if ( page == PR_SYSTEM ) { 154 ERR("Can't reserve ring 1 memory\n"); 155 return -1; 156 } 157 /* FIXME: This has to be handled separately for the separate 158 address-spaces we now have */ 159 if ( page == PR_PRIVATE || page == PR_SHARED ) page = 0; 160 /* FIXME: Handle flags in some way */ 161 address = (LPVOID )(page * page_size); 162 ret = VirtualAlloc ( address, npages * page_size, MEM_RESERVE, 0 ); 163 TRACE("PageReserve: returning: %p\n", ret ); 164 if ( ret == NULL ) 165 return -1; 166 else 167 return (DWORD )ret; 168 } ... --- snip --- $ sha1sum demo-v1_4.exe b05c7c4023046fabec5a47aac0754ad0ac6b2325 demo-v1_4.exe $ du -sh demo-v1_4.exe 444K demo-v1_4.exe $ wine --version wine-1.7.16-178-g7e874ae Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 12