December 2018 - Wine-bugs - list.winehq.org

[Bug 45655] New: Acronis Storage Filter Management Driver 'fltsrv.sys' crashes on unimplemented function 'ntoskrnl.exe.DbgQueryDebugFilterState' in trace mode
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=45655 Bug ID: 45655 Summary: Acronis Storage Filter Management Driver 'fltsrv.sys' crashes on unimplemented function 'ntoskrnl.exe.DbgQueryDebugFilterState' in trace mode Product: Wine Version: 3.13 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. --- snip --- ... 0028:Call driver init 0x789a4c (obj=0x11ccd0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\fltsrv") ... 0028:Call ntoskrnl.exe.RtlInitUnicodeString(0065fb3c,00792408 L"EnableTrace") ret=007858d1 0028:Call ntdll.RtlInitUnicodeString(0065fb3c,00792408 L"EnableTrace") ret=7bc813a3 0028:Ret ntdll.RtlInitUnicodeString() retval=0065fb3c ret=7bc813a3 0028:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0065fb3c ret=007858d1 0028:Call ntoskrnl.exe.ZwOpenKey(0065fa98,00000001,0065fa70) ret=00790c21 0028:Call ntdll.NtOpenKey(0065fa98,00000001,0065fa70) ret=7bc813a3 0028:trace:reg:open_key ((nil),L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\fltsrv\\Parameters",1,0x65fa98) 0028:trace:reg:open_key <- 0x44 0028:Ret ntdll.NtOpenKey() retval=00000000 ret=7bc813a3 0028:Ret ntoskrnl.exe.ZwOpenKey() retval=00000000 ret=00790c21 0028:Call ntoskrnl.exe.ZwQueryValueKey(00000044,0065fa2c,00000002,0065fa60,00000014,0065fa34) ret=00790c86 0028:Call ntdll.NtQueryValueKey(00000044,0065fa2c,00000002,0065fa60,00000014,0065fa34) ret=7bc813a3 0028:trace:reg:NtQueryValueKey (0x44,L"EnableTrace",2,0x65fa60,20) 0028:Ret ntdll.NtQueryValueKey() retval=00000000 ret=7bc813a3 0028:Ret ntoskrnl.exe.ZwQueryValueKey() retval=00000000 ret=00790c86 0028:Call ntoskrnl.exe.ZwClose(00000044) ret=00790b84 0028:Call ntdll.NtClose(00000044) ret=7bc813a3 0028:Ret ntdll.NtClose() retval=00000000 ret=7bc813a3 0028:Ret ntoskrnl.exe.ZwClose() retval=00000000 ret=00790b84 ... 0028:Call hal.KeGetCurrentIrql() ret=0078914f 0028:fixme:ntoskrnl:KeGetCurrentIrql stub! 0028:Ret hal.KeGetCurrentIrql() retval=00000000 ret=0078914f 0028:Call hal.KeGetCurrentIrql() ret=00785e7f 0028:fixme:ntoskrnl:KeGetCurrentIrql stub! 0028:Ret hal.KeGetCurrentIrql() retval=00000000 ret=00785e7f 0028:fixme:ntoskrnl:__regs_KfAcquireSpinLock (0x11cf04) stub! 0028:fixme:ntoskrnl:__regs_KfReleaseSpinLock (0x11cf04 0) stub! 0028:Call KERNEL32.RaiseException(80000100,00000001,00000002,0065faf4) ret=7e98b32d 0028:trace:seh:raise_exception code=80000100 flags=1 addr=0x7b44733b ip=7b44733b tid=0028 0028:trace:seh:raise_exception info[0]=7e98b360 0028:trace:seh:raise_exception info[1]=7e98baeb wine: Call from 0x7b44733b to unimplemented function ntoskrnl.exe.DbgQueryDebugFilterState, aborting --- snip --- One has to explicitly enable trace mode by adding the following registry key: --- snip --- [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\fltsrv\Parameters] "EnableTrace"=dword:00000001 --- snip --- Source: https://source.winehq.org/git/wine.git/blob/HEAD:/dlls/ntoskrnl.exe/ntoskrn… --- snip --- 114 @ stub DbgQueryDebugFilterState --- snip --- Prototype: https://github.com/processhacker/processhacker/blob/master/phnt/include/ntd… --- snip --- NTSYSAPI NTSTATUS NTAPI DbgQueryDebugFilterState( _In_ ULONG ComponentId, _In_ ULONG Level ); --- snip --- It's enough to dump the parameters and return 'STATUS_NOT_IMPLEMENTED'. With that in place the driver is a bit more verbose using 'ntdll:vDbgPrintExWithPrefix()'. --- snip --- ... 0027:fixme:ntoskrnl:KeInitializeMutex stub: 0x112774, 0 0027:fixme:ntoskrnl:KeGetCurrentIrql stub! 0027:fixme:ntoskrnl:KeGetCurrentIrql stub! 0027:fixme:ntoskrnl:__regs_KfAcquireSpinLock (0x1126bc) stub! 0027:fixme:ntoskrnl:__regs_KfReleaseSpinLock (0x1126bc 0) stub! 0027:fixme:ntoskrnl:KeGetCurrentIrql stub! 0027:fixme:ntoskrnl:KeGetCurrentIrql stub! 0027:fixme:ntoskrnl:__regs_KfAcquireSpinLock (0x1126bc) stub! 0027:fixme:ntoskrnl:__regs_KfReleaseSpinLock (0x1126bc 0) stub! 0027:fixme:ntoskrnl:DbgQueryDebugFilterState stub: 0x4d 0x2 0027:err:ntdll:vDbgPrintExWithPrefix [fltsrv] 4d: Trace:driver.cpp(37):OnLoad: passed... 0027:fixme:ntoskrnl:KeInitializeMutex stub: 0x14883c, 0 0027:fixme:ntoskrnl:KeInitializeMutex stub: 0x148874, 0 0027:fixme:ntoskrnl:ObQueryNameString (0x1488a0 0x148988 128 0x65fa94) stub 0027:fixme:ntoskrnl:KeInitializeMutex stub: 0x148994, 0 0027:fixme:ntoskrnl:KeInitializeMutex stub: 0x14878c, 0 0027:fixme:ntoskrnl:KeInitializeMutex stub: 0x1487d0, 0 0027:fixme:ntoskrnl:DbgQueryDebugFilterState stub: 0x4d 0x2 0027:err:ntdll:vDbgPrintExWithPrefix [fltsrv] 4d: Version=2227, DeviceNotificationDisabled=0 0027:fixme:ntoskrnl:DbgQueryDebugFilterState stub: 0x4d 0x1 0027:err:ntdll:vDbgPrintExWithPrefix [fltsrv] 4d: status=0xC0000002 0027:fixme:ntoskrnl:DbgQueryDebugFilterState stub: 0x4d 0x2 0027:err:ntdll:vDbgPrintExWithPrefix [fltsrv] 4d: Trace:driver.cpp(56):OnUnload: passed... 0027:fixme:ntoskrnl:KeGetCurrentIrql stub! 0027:fixme:ntoskrnl:KeGetCurrentIrql stub! 0027:fixme:ntoskrnl:__regs_KfAcquireSpinLock (0x14865c) stub! 0027:fixme:ntoskrnl:__regs_KfReleaseSpinLock (0x14865c 0) stub! 0027:fixme:ntoskrnl:KeWaitForSingleObject stub: 0x148994, 0, 0, 0, (nil) 0027:fixme:ntoskrnl:DbgQueryDebugFilterState stub: 0x4d (nil) 0027:err:ntdll:vDbgPrintExWithPrefix [fltsrv] 4d: Expression 'LockWithStatus()' failed with status 0xc0000002, Source File: threading\mutex.cpp, line 32 ... --- snip --- ProtectionID scan: --- snip --- -=[ ProtectionID v0.6.9.0 DECEMBER]=- (c) 2003-2017 CDKiLLER & TippeX Build 24/12/17-21:05:42 Ready... Scanning -> C:\windows\system32\drivers\fltsrv.sys File Type : 32-Bit Driver (BAD checksum - won't load!), Good Checksum = 01ED8Bh Size : 0123744 (01E360h) Byte(s) | Machine: 0x14C (I386) Compilation TimeStamp : 0x5638DF2A -> Tue 03rd Nov 2015 16:22:02 (GMT) [TimeStamp] 0x5638DF2A -> Tue 03rd Nov 2015 16:22:02 (GMT) | PE Header | - | Offset: 0x000000F0 | VA: 0x004000F0 | - [TimeStamp] 0x5638DF2A -> Tue 03rd Nov 2015 16:22:02 (GMT) | DebugDirectory | - | Offset: 0x000139B4 | VA: 0x004151B4 | - -> File Appears to be Digitally Signed @ Offset 017A00h, size : 06960h / 026976 byte(s) [LoadConfig] Struct determined as v8 (Expected size 140 | Actual size 64) [!] Executable uses SEH Tables (/SAFESEH) (3 calculated 2 recorded... 1 invalid addresses) [!] * table may be compressed / encrypted * [LoadConfig] CodeIntegrity -> Flags 0x5352 | Catalog 0x5344 (21316) | Catalog Offset 0x1E431CED | Reserved 0x4EDC114E [LoadConfig] GuardAddressTakenIatEntryTable 0x356CB182 | Count 0x821065B8 (2182112696) [LoadConfig] GuardLongJumpTargetTable 0x1 | Count 0x325C3A4B (844905035) [LoadConfig] HybridMetadataPointer 0x5C373232 | DynamicValueRelocTable 0x6E72656B [LoadConfig] FailFastIndirectProc 0x775C6C65 | FailFastPointer 0x2E5C6E69 [LoadConfig] UnknownZero1 0x7074756F [File Heuristics] -> Flag #1 : 00000100000001001101000000000100 (0x0404D004) [Entrypoint Section Entropy] : 6.66 (section #0) ".text " | Size : 0x13308 (78600) byte(s) [DllCharacteristics] -> Flag : (0x0140) -> ASLR | DEP [SectionCount] 6 (0x6) | ImageSize 0x1C000 (114688) byte(s) [VersionInfo] Company Name : Acronis International GmbH [VersionInfo] Product Name : Acronis Storage Filter Management [VersionInfo] Product Version : 1.3.0.2227 [VersionInfo] File Description : Acronis Storage Filter Management Driver [VersionInfo] File Version : 1.3.0.2227 [VersionInfo] Original FileName : fltsrv.sys [VersionInfo] Internal Name : fltsrv [VersionInfo] Version Comments : Acronis Storage Filter Management [VersionInfo] Legal Trademarks : Acronis International GmbH. All rights reserved. [VersionInfo] Legal Copyrights : Copyright © Acronis International GmbH. 2002-2013. [ModuleReport] [IAT] Modules -> ntoskrnl.exe | HAL.dll [Debug Info] (record 1 of 1) (file offset 0x139B0) Characteristics : 0x0 | TimeDateStamp : 0x5638DF2A (Tue 03rd Nov 2015 16:22:02 (GMT)) | MajorVer : 0 / MinorVer : 0 -> (0.0) Type : 2 (0x2) -> CodeView | Size : 0x4C (76) AddressOfRawData : 0x166A4 | PointerToRawData : 0x14EA4 CvSig : 0x53445352 | SigGuid 1E431CED-114E-4EDC-82B16C35B8651082 Age : 0x1 (1) | Pdb : K:\2227\kernel\win\.output\Win32\Release\fltsrv.pdb [!] File appears to have no protection or is using an unknown protection - Scan Took : 0.247 Second(s) [0000000F7h (247) tick(s)] [135 of 580 scan(s) done] --- snip --- $ sha1sum ADD12_trial_en-US.exe da5cd4fb2b457b86bc9a76b0fafd96ceec5608e6e ADD12_trial_en-US.exe $ du -sh ADD12_trial_en-US.exe 293M ADD12_trial_en-US.exe $ wine --version wine-3.13-318-gccf6211c0a Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 40285] New: Acronis Disk Director 12 fails to register with wine
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=40285 Bug ID: 40285 Summary: Acronis Disk Director 12 fails to register with wine Product: Wine Version: 1.9.5 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: b1779506(a)trbvn.com Distribution: --- $ wine ADD12_trial_en-US.exe fixme:ntdll:__syscall_NtLockFile I/O completion on lock not implemented yet fixme:msi:MsiGetLastErrorRecord fixme:msi:MsiGetLastErrorRecord fixme:msi:MsiGetLastErrorRecord fixme:msi:MsiGetLastErrorRecord fixme:msi:MsiGetLastErrorRecord fixme:msi:MsiGetLastErrorRecord fixme:msi:MsiGetLastErrorRecord err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination err:richedit:ReadStyleSheet skipping optional destination fixme:msi:msi_validate_product_id partial stub: template L"<^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^>" key L"xxxx(removed)" err:msi:ITERATE_Actions Execution halted, action L"CADataInitCA" returned 1603 err:msi:ITERATE_Actions Execution halted, action L"ExecuteAction" returned 1603 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 7

[Bug 45167] New: Acronis Disk Director 12 installer fails: ITERATE_Actions Execution halted, action L" _USRCUSTACT_MsiFltSrvInstall_fltsrv_component" returned 1603 ( setupapi lasterror leakage)
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=45167 Bug ID: 45167 Summary: Acronis Disk Director 12 installer fails: ITERATE_Actions Execution halted, action L"_USRCUSTACT_MsiFltSrvInstall_fltsrv_component" returned 1603 (setupapi lasterror leakage) Product: Wine Version: 3.7 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: setupapi Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, found while re-testing bug 40285 --- snip --- $ WINEDEBUG=+seh,+relay,+msi,+setupapi wine ./ADD12_trial_en-US.exe >>log.txt 2>&1 ... 0009:trace:msi:ACTION_PerformAction Performing action (L"_USRCUSTACT_MsiFltSrvInstall_fltsrv_component") ... 0009:trace:msi:ACTION_CustomAction Handling custom action L"_USRCUSTACT_MsiFltSrvInstall_fltsrv_component" (c01 L"_07ACC498A1CC6CE24B33317680A42CA8" L"MsiFltSrvInstall") ... 0009:trace:msi:HANDLE_CustomType1 Calling function L"MsiFltSrvInstall" from L"C:\\users\\focht\\Temp\\msi2409.tmp" ... 00d1:Call KERNEL32.CreateProcessW(009dfc24 L"C:\\windows\\system32\\msiexec.exe",009df9a4 L"C:\\windows\\system32\\msiexec.exe -Embedding {A121B25A-1BB4-4E7E-8C27-789D2A9666D5}",00000000,00000000,00000000,00000000,00000000,00000000,009dfe2c,009dfe70) ret=7e91e77d ... 00d3:Ret PE DLL (proc=0x10003420,module=0x10000000 L"msi2409.tmp",reason=PROCESS_ATTACH,res=(nil)) retval=1 00d3:Ret KERNEL32.LoadLibraryW() retval=10000000 ret=7e91e173 00d3:Call KERNEL32.GetProcAddress(10000000,0015be58 "MsiFltSrvInstall") ret=7e91e1f0 00d3:Ret KERNEL32.GetProcAddress() retval=100022b0 ret=7e91e1f0 ... 00d3:trace:msi:__wine_msi_call_dll_function calling "MsiFltSrvInstall" ... 00d5:Call KERNEL32.CreateFileW(00168190 L"\\\\?\\C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\fltsrv.x86.sys",c0000000,00000000,00000000,00000002,00000080,00000000) ret=10059a51 00d5:Ret KERNEL32.CreateFileW() retval=00000074 ret=10059a51 ... 00d5:Call msi.MsiRecordSetStringW(00000002,00000001,001646f0 L"MSI_TRACE(fltsrv): MsiFltSrvInstall: build number 2299") ret=10024c68 ... 00d5:Call KERNEL32.CreateFileW(00168480 L"\\\\?\\C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\fltsrv.x86.inf",c0000000,00000000,00000000,00000002,00000080,00000000) ret=10059a51 00d5:Ret KERNEL32.CreateFileW() retval=0000007c ret=10059a51 ... 00d5:Call setupapi.SetupOpenInfFileW(001680c0 L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\fltsrv.x86.inf",00000000,00000002,00000000) ret=1001af9e ... 00d5:trace:setupapi:SetupOpenInfFileW L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\fltsrv.x86.inf" -> 0x168158 00d5:Ret setupapi.SetupOpenInfFileW() retval=00168158 ret=1001af9e ... 00d5:Call msi.MsiRecordSetStringW(00000002,00000001,00168440 L"MSI_TRACE(fltsrv): defaultInstallSection=DefaultInstall") ret=10024c68 ... 00d5:Call setupapi.SetupFindFirstLineW(001681a0,001648a8 L"DefaultInstall",001638f0 L"CopyFiles",0045fb20) ret=1001affd 00d5:trace:setupapi:SetupFindNextMatchLineW (0x1681a0,L"DefaultInstall",L"CopyFiles"): returning 0 00d5:Ret setupapi.SetupFindFirstLineW() retval=00000001 ret=1001affd 00d5:Call setupapi.SetupGetFieldCount(0045fb20) ret=10018f90 00d5:Ret setupapi.SetupGetFieldCount() retval=00000001 ret=10018f90 00d5:Call setupapi.SetupGetStringFieldW(0045fb20,00000001,0016c910,00001000,00000000) ret=10018fc2 00d5:trace:setupapi:SetupGetStringFieldW context 0x1681a0/0x1681a0/1/0 index 1 returning L"FltSrvDrivers" 00d5:Ret setupapi.SetupGetStringFieldW() retval=00000001 ret=10018fc2 ... 00d5:Call setupapi.SetupQueueCopySectionW(00164738,0016c210 L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\",001681a0,00000000,00168088 L"FltSrvDrivers",00000100) ret=1001b30d 00d5:trace:setupapi:SetupQueueCopySectionW hinf=0x1681a0/(nil) section=L"FltSrvDrivers" root=L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\" 00d5:trace:setupapi:SetupFindFirstLineW (0x1681a0,L"FltSrvDrivers",(null)): returning 5/0 00d5:trace:setupapi:SetupFindNextMatchLineW (0x1681a0,L"DestinationDirs",L"FltSrvDrivers"): returning 0 ... 00d5:trace:setupapi:SetupGetStringFieldW context 0x1681a0/0x1681a0/7/0 index 1 returning L"Acronis Storage Filter Management Driver Installation Disk" 00d5:trace:setupapi:SetupQueueCopyIndirectW root=L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\" path=(null) file=L"fltsrv.x86.sys" -> dir=L"C:\\windows\\system32\\drivers" file=L"fltsrv.sys" descr=L"Acronis Storage Filter Management Driver Installation Disk" tag=(null) ... 00d5:Ret setupapi.SetupQueueCopySectionW() retval=00000001 ret=1001b30d ... 00d5:Call setupapi.SetupFindNextMatchLineW(0045fb20,001638f0 L"CopyFiles",0045fb20) ret=1001b061 00d5:trace:setupapi:SetupFindNextMatchLineW (0x1681a0,L"DefaultInstall",L"CopyFiles"): not found 00d5:Ret setupapi.SetupFindNextMatchLineW() retval=00000000 ret=1001b061 00d5:Call KERNEL32.GetLastError() ret=1001b06b 00d5:Ret KERNEL32.GetLastError() retval=e0000102 ret=1001b06b ... 00d5:Call setupapi.SetupDefaultQueueCallbackW(0016bdd0,0000000b,0045fa80,00000000) ret=10019646 00d5:trace:setupapi:SetupDefaultQueueCallbackW start copy L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\fltsrv.x86.sys" -> L"C:\\windows\\system32\\drivers\\fltsrv.sys" 00d5:Ret setupapi.SetupDefaultQueueCallbackW() retval=00000001 ret=10019646 00d5:trace:setupapi:SetupCommitFileQueueW copying file L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\fltsrv.x86.sys" -> L"C:\\windows\\system32\\drivers\\fltsrv.sys" ... 00d5:trace:setupapi:do_file_copyW copy L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\fltsrv.x86.sys" to L"C:\\windows\\system32\\drivers\\fltsrv.sys" style 0x100 00d5:err:setupapi:do_file_copyW Unsupported style(s) 0x100 00d5:Call KERNEL32.CopyFileW(0016b270 L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\fltsrv.x86.sys",0016c210 L"C:\\windows\\system32\\drivers\\fltsrv.sys",00000000) ret=f7ac5e92 00d5:Ret KERNEL32.CopyFileW() retval=00000001 ret=f7ac5e92 00d5:trace:setupapi:do_file_copyW Did copy... rc was 1 00d5:Call setupapi.SetupDefaultQueueCallbackW(0016bdd0,0000000c,0045fa80,00000000) ret=10019646 00d5:trace:setupapi:SetupDefaultQueueCallbackW end copy L"C:\\users\\focht\\Temp\\AE6D8134-43FB-4C07-B3A1-87DA0CC08234\\fltsrv.x86.sys" -> L"C:\\windows\\system32\\drivers\\fltsrv.sys" 00d5:Ret setupapi.SetupDefaultQueueCallbackW() retval=00000000 ret=10019646 00d5:Call setupapi.SetupDefaultQueueCallbackW(0016bdd0,00000004,00000000,00000000) ret=10019646 00d5:trace:setupapi:SetupDefaultQueueCallbackW end subqueue 0 00d5:Ret setupapi.SetupDefaultQueueCallbackW() retval=00000000 ret=10019646 00d5:Call setupapi.SetupDefaultQueueCallbackW(0016bdd0,00000002,00000001,00000000) ret=10019646 00d5:trace:setupapi:SetupDefaultQueueCallbackW end queue 00d5:Ret setupapi.SetupDefaultQueueCallbackW() retval=00000000 ret=10019646 ... 00d5:Ret setupapi.SetupCommitFileQueueW() retval=00000001 ret=100195ca 00d5:Call setupapi.SetupPromptReboot(00164738,00000000,00000001) ret=100195ea 00d5:fixme:setupapi:SetupPromptReboot 0x164738, (nil), 1: stub 00d5:Ret setupapi.SetupPromptReboot() retval=00000000 ret=100195ea ... 00d5:Ret setupapi.SetupCloseFileQueue() retval=00000001 ret=100194ff 00d5:Call setupapi.SetupInstallFromInfSectionW(00000000,001681a0,00168858 L"DefaultInstall",0000000e,80000002,00000000,00000000,00000000,00000000,00000000,00000000) ret=1001b28c 00d5:trace:setupapi:SetupFindNextMatchLineW (0x1681a0,L"DefaultInstall",L"WinePreInstall"): not found 00d5:trace:setupapi:SetupFindNextMatchLineW (0x1681a0,L"DefaultInstall",L"UpdateInis"): not found 00d5:trace:setupapi:SetupFindNextMatchLineW (0x1681a0,L"DefaultInstall",L"UpdateIniFields"): not found 00d5:trace:setupapi:SetupFindNextMatchLineW (0x1681a0,L"DefaultInstall",L"Ini2Reg"): not found 00d5:trace:setupapi:SetupFindNextMatchLineW (0x1681a0,L"DefaultInstall",L"DelReg"): not found 00d5:trace:setupapi:SetupFindNextMatchLineW (0x1681a0,L"DefaultInstall",L"AddReg"): not found 00d5:Ret setupapi.SetupInstallFromInfSectionW() retval=00000001 ret=1001b28c 00d5:Call KERNEL32.GetLastError() ret=1001b29a 00d5:Ret KERNEL32.GetLastError() retval=e0000102 ret=1001b29a 00d5:Call KERNEL32.GetLastError() ret=10033590 00d5:Ret KERNEL32.GetLastError() retval=e0000102 ret=10033590 00d5:Call KERNEL32.GetLastError() ret=10033590 00d5:Ret KERNEL32.GetLastError() retval=e0000102 ret=10033590 00d5:Call KERNEL32.GetLastError() ret=10033590 00d5:Ret KERNEL32.GetLastError() retval=e0000102 ret=10033590 00d5:Call KERNEL32.GetLastError() ret=10033590 00d5:Ret KERNEL32.GetLastError() retval=e0000102 ret=10033590 ... 00d5:Call msi.MsiRecordSetStringW(00000002,00000001,00168440 L"MSI_TRACE(fltsrv): ProcessDirectivesFromSection failed: 3758096642") ret=10024c68 ... 00d5:Call msi.MsiRecordSetStringW(00000002,00000001,00168440 L"MSI_TRACE(fltsrv): Failed to install: status 3758096642.") ret=10024c68 ... --- snip --- It seems there is some lasterror leaking in Wine's setupapi. 0xe0000102 -> ERROR_LINE_NOT_FOUND This error is set due to previous parsing calls (ok) but never reset throughout various setupapi call sequences (external and internal). The app installer checks the lasterror even on API return success and reports failure. I've reset the lasterror in 'SetupInstallFromInfSectionW()' on success to zero since the leaf function calls 'SetupFindNextMatchLineW()' will set it -> leakage. It helps the installer to get further and actually install the (kernel) filter service - only to run into next bug. $ sha1sum ADD12_trial_en-US.exe 9c087d66c4e7e4ef22b30721d9ab519753a394b1 ADD12_trial_en-US.exe $ du -sh ADD12_trial_en-US.exe 290M ADD12_trial_en-US.exe $ wine --version wine-3.7-136-g8f46ac233e Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 9

[Bug 33450] New: .NET 3.5 Framework installation fails (.NET WorkFlow Service Registration Tool "WFServicesReg.exe" crash)
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=33450 Bug #: 33450 Summary: .NET 3.5 Framework installation fails (.NET WorkFlow Service Registration Tool "WFServicesReg.exe" crash) Product: Wine Version: 1.5.28 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: msxml3 AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, while investigating some .NET related bugs I found .NET Framework 3.5 doesn't install anymore with current winetricks. There is now a crash in .NET WorkFlow Service Registration Tool (WFServicesReg.exe) which leads to main installer getting stuck. Looks like a Wine msxml regression or new bug. Can be reproduced after first failed install by running the tool manually. Prerequisite: clean WINEPREFIX + 'winetricks -q dotnet35' Console output: --- snip --- $ wine C:\\windows\\Microsoft.NET\\Framework\\v3.5\\WFServicesReg.exe /c /v /m /i fixme:heap:HeapSetInformation (nil) 1 (nil) 0 DDSet_Entry: WFServicesReg.exe DDSet_Status: CFxInstaller::CopyConfigFilesToTemp is64bit=0 DDSet_Status: CFileHelper::CopyConfigFilesToTempLocation DDSet_Status: CFxInstaller::SetupComponents isInstall=1 DDSet_Status: CFxInstaller::SetupComponents Calling SetupExtensions. isInstall=1 DDSet_Status: CFxInstaller::SetupExtensions isInstall=1 is64Bit=0 DDSet_Status: CConfigEntry::Initialize szConfigPath=C:\users\focht\Temp\WSF8f8c.tmp DDSet_Status: CConfigEntry::RefreshConfigFile DDSet_Status: CExtensionElement::SetData szName=persistenceProvider szType=System.ServiceModel.Configuration.PersistenceProviderElement, System.WorkflowServices, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35 szXPath=system.serviceModel/extensions/behaviorExtensions/add DDSet_Status: CFxInstaller::SetupExtensions Adding System.ServiceModel.Configuration.PersistenceProviderElement, System.WorkflowServices, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35. DDSet_Status: CExtensionElement::AddToConfigFile _xPath=system.serviceModel/extensions/behaviorExtensions/add DDSet_Status: CConfigEntry::IsPresent szPath=system.serviceModel/extensions/behaviorExtensions/add[@name='persistenceProvider' and @type='System.ServiceModel.Configuration.PersistenceProviderElement, System.WorkflowServices, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'] DDSet_Status: CConfigEntry::IsPresent szPath=system.serviceModel/extensions/behaviorExtensions/add[@name='persistenceProvider'] DDSet_Status: CConfigEntry::CreateElementInConfigFile szPath=system.serviceModel/extensions/behaviorExtensions/add insertBefore=0 DDSet_Status: CConfigEntry::AppendTextNode DDSet_Status: CConfigEntry::AppendTextNode DDSet_Status: CConfigEntry::AppendTextNode DDSet_Status: CConfigEntry::AppendTextNode DDSet_Status: CConfigEntry::AppendTextNode DDSet_Status: CConfigEntry::AppendTextNode DDSet_Status: CConfigEntry::AppendTextNode wine: Unhandled page fault on read access to 0x00000007 at address 0xf74cc19d (thread 0009), starting debugger... --- snip --- Running it with winedbg: --- snip --- Unhandled exception: page fault on read access to 0x00000007 in 32-bit code (0xf744619d). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:f744619d ESP:0033f970 EBP:0000003c EFLAGS:00010286( R- -- I S - -P- ) EAX:00000006 EBX:f7578ff4 ECX:f75793f8 EDX:ffffffff ESI:f75793e0 EDI:f75793e0 Stack dump: 0x0033f970: 7e879d70 7bcc89d0 0033f998 0033f9a0 0x0033f980: 7bcc89d0 0033fa20 0033fa08 7bc4b26c 0x0033f990: 7bcc89d0 7bcc89d0 0033fa08 7bc4b26c 0x0033f9a0: 00110060 00000001 00000017 ffffffff 0x0033f9b0: 00000006 00000040 00330000 7de87a8a 0x0033f9c0: 00110014 0000003c 0033fa48 7b850bb3 000c: sel=0067 base=00000000 limit=00000000 32-bit r-x Backtrace: =>0 0xf744619d _int_malloc+0x6d() in libc.so.6 (0x0000003c) 1 0xf7448e75 __libc_malloc+0x64() in libc.so.6 (0x0000003c) 2 0x7dd22462 xmlNewText+0x31() in libxml2.so.2 (0x00000000) 3 0x7dd22850 xmlNewDocText+0xf() in libxml2.so.2 (0x0033fb58) 4 0x7de82243 domdoc_createNode+0x3da(iface=0x12b6d4, Type={n1={n2={vt=0x10, wReserved1=0, wReserved2=0x1a78, wReserved3=0x102, n3={cVal=3, uiVal=0xe03, ulVal=0x1020e03, intVal=0x1020e03, uintVal=0x1020e03, bVal=3, iVal=0xe03, lVal=0x1020e03, fltVal=0.000000, dblVal=0.000000, boolVal=0xe03, scode=0x1020e03, date=0.000000, bstrVal="...", pulVal=0x1020e03, pintVal=0x1020e03, puintVal=0x1020e03, pbVal="...", piVal=0x1020e03, plVal=0x1020e03, pfltVal=0x1020e03, pdblVal=0x1020e03, pboolVal=0x1020e03, pscode=0x1020e03, pdate=0x1020e03, pbstrVal=0x1020e03, pvarVal=0x1020e03, byref=0x1020e03, pcyVal=0x1020e03, pdecVal=0x1020e03, ppunkVal=0x1020e03, ppdispVal=0x1020e03, pparray=0x1020e03, pllVal=0x1020e03, pullVal=0x1020e03, brecVal={pvRecord=0x1020e03, pRecInfo=0x1021a78}}}, decVal={wReserved=0x10, u={={scale=0, sign=0}, signscale=0}, Hi32=0x1021a78, u1={={Lo32=0x1020e03, Mid32=0x1021a78}, Lo64=0x1021a7801020e03}}}}, name=0x0(nil), namespaceURI=0x0(nil), node=0x33fba8) [/home/focht/projects/wine/wine-git/dlls/msxml3/domdoc.c:1969] in msxml3 (0x0033fb58) 5 0x7de811fe domdoc_createTextNode+0x12d(iface=<couldn't compute location>, data=<couldn't compute location>, text=<couldn't compute location>) [/home/focht/projects/wine/wine-build32/dlls/msxml3/../../include/msxml6.h:5222] in msxml3 (0x0033fbf8) 6 0x01013735 in wfservicesreg (+0x13734) (0x0033fc38) ... --- snip --- Can be worked around with 'winetricks msxml3'. $ wine --version wine-1.5.28-200-gf3b0a9f Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 24

[Bug 30384] New: Add support for network connectivity checks using Network List Manager (NLM) API (Vista+)
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=30384 Bug #: 30384 Summary: Add support for network connectivity checks using Network List Manager (NLM) API (Vista+) Product: Wine Version: 1.5.1 Platform: x86 OS/Version: Linux Status: NEW Severity: minor Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, feature bug (for now). There are applications that make use of Network List Manager (NLM) introduced with Windows Vista/Windows 7 to check for network connectivity. A symptom are messages like this in terminal: --- snip --- err:ole:CoGetClassObject class {dcb00c01-570f-4a9b-8d69-199fdba5723b} not registered ... err:ole:create_server class {dcb00c01-570f-4a9b-8d69-199fdba5723b} not registered fixme:ole:CoGetClassObject CLSCTX_REMOTE_SERVER not supported err:ole:CoGetClassObject no class object {dcb00c01-570f-4a9b-8d69-199fdba5723b} could be created for context 0x17 --- snip --- MSDN overview: http://msdn.microsoft.com/en-us/library/ee264321%28v=vs.85%29.aspx Network List Manager: http://msdn.microsoft.com/en-us/library/aa370803%28v=vs.85%29.aspx Example applications: newer EA Download Manager versions, some EA Games (Battlefield 3, FIFA12), Windows Live Essentials 2011 It seems plausible that they use an API that ought to be available on this platform. Failure doesn't seem critical, they use other means to detect network state. Though I didn't test all of them. This bug can serve as collector for apps that spam terminal with "{dcb00c01-570f-4a9b-8d69-199fdba5723b}" (CLSID_NetworkListManager) messages. Maybe there will be one where this missing functionality is actually breaking the app. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 31556] New: Polar WebSync 2.6.0 doesn't install under Ubuntu 12.04 64-bit
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=31556 Bug #: 31556 Summary: Polar WebSync 2.6.0 doesn't install under Ubuntu 12.04 64-bit Product: Wine Version: 1.5.11 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: rjjardim(a)gmail.com Classification: Unclassified Created attachment 41500 --> http://bugs.winehq.org/attachment.cgi?id=41500 backtrace plus the terminal output attached to the end of the file when running the command line "wine websync_2.6.0.exe" on Ubuntu 12.04 64-bit version to install that windows program on linux, pops up a wine dialog box with the error which is enclosed on the attached file. further errors appear on terminal as well as another wine dialog box error if we proceed with the installation, which I think not to be relevant after that first one probably due to the result triggered by aforementioned 1st error. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 4

[Bug 32412] New: WebSync 2.7.0 doesn't install under Ubuntu 12.04 64-bit
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=32412 Bug #: 32412 Summary: WebSync 2.7.0 doesn't install under Ubuntu 12.04 64-bit Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: attil(a)citromail.hu Classification: Unclassified Download: https://polarpersonaltrainer.com/downloads/websync_2.7.0.exe -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 18

[Bug 33390] New: websync 2.8.1 doesn't load in Wine 1.4.1
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=33390 Bug #: 33390 Summary: websync 2.8.1 doesn't load in Wine 1.4.1 Product: Wine Version: 1.4.1 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: oleaut32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: brentcreech(a)hotmail.com Classification: Unclassified Created attachment 44183 --> http://bugs.winehq.org/attachment.cgi?id=44183 ISBEW64 Crash ISBEW64 Crash polard.exe crashes -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 3

[Bug 35284] New: Polar WebSync client fails to communicate with 'polard' service (WS2_AcceptEx with zero 'local_addr_len' parameter)
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=35284 Bug ID: 35284 Summary: Polar WebSync client fails to communicate with 'polard' service (WS2_AcceptEx with zero 'local_addr_len' parameter) Product: Wine Version: 1.7.9 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: winsock Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, a guy in #winehq reported this problem. --- quote --- <focht> this app: http://www.polar.com/en/support/downloads/Polar_WebSync_Software ? ... <lars_> focht: yes, I downloaded it from there <lars_> I'm gonna have to fix a crying baby so gtg. Thanks for the help! ... --- quote --- He 'fixes' the baby - I take care of the bug (which is much easier) :) 'Polar Daemon' is registered as auto-start Windows service and communicates over sockets with the client (gui app). Trace log (filtered for service thread 002a to avoid all the noise from other processes/threads): --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Polar/WebSync $ WINEDEBUG=+tid,+seh,+relay,+service,+snoop,+winsock, wine ./WebSync.exe >>log.txt 2>&1 ... 002a:trace:winsock:WSAStartup verReq=202 002a:trace:winsock:WSAStartup succeeded 002a:Ret ws2_32.WSAStartup() retval=00000000 ret=10176d80 002a:Call ws2_32.WSADuplicateSocketW(000000b0,00000021,0086e0bc) ret=10176e0d 002a:trace:winsock:WS_DuplicateSocket (unicode 1, socket 00b0, processid 21, buffer 0x86e0bc) 002a:Call KERNEL32.OpenProcess(00000040,00000000,00000021) ret=7e9a49b4 002a:Ret KERNEL32.OpenProcess() retval=000000b4 ret=7e9a49b4 002a:Call KERNEL32.DuplicateHandle(ffffffff,000000b0,000000b4,0086e0c4,00000000,00000000,00000002) ret=7e9a4a5d 002a:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=7e9a4a5d 002a:Call KERNEL32.CloseHandle(000000b4) ret=7e9a4a6b 002a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e9a4a6b 002a:Ret ws2_32.WSADuplicateSocketW() retval=00000000 ret=10176e0d 002a:Call ws2_32.WSASocketW(00000002,00000001,00000006,00000000,00000000,00000001) ret=10176e36 002a:trace:winsock:WSASocketW af=2 type=1 protocol=6 protocol_info=(nil) group=0 flags=0x1 002a:trace:winsock:WSASocketW created 00b4 002a:Ret ws2_32.WSASocketW() retval=000000b4 ret=10176e36 ... 002a:Call ws2_32.WSAIoctl(000000b4,c8000006,0086e488,00000010,0086e484,00000004,0086e480,00000000,00000000) ret=10204134 002a:trace:winsock:WSAIoctl 180, 0xc8000006, 0x86e488, 16, 0x86e484, 4, 0x86e480, (nil), (nil) 002a:Ret ws2_32.WSAIoctl() retval=00000000 ret=10204134 002a:Call ws2_32.WSAIoctl(000000b4,c8000006,0086e4a4,00000010,0086e4a0,00000004,0086e480,00000000,00000000) ret=1020415f 002a:trace:winsock:WSAIoctl 180, 0xc8000006, 0x86e4a4, 16, 0x86e4a0, 4, 0x86e480, (nil), (nil) 002a:Ret ws2_32.WSAIoctl() retval=00000000 ret=1020415f 002a:Call KERNEL32.CreateEventW(00000000,00000001,00000000,00000000) ret=1020418a 002a:Ret KERNEL32.CreateEventW() retval=000000d0 ret=1020418a ... 002a:trace:winsock:WS2_AcceptEx (b0, b4, 0x148928, 0, 0, 32, 0x86e480, 0x86e46c) 002a:Call ws2_32.WSAGetLastError() ret=102041f3 002a:Ret ws2_32.WSAGetLastError() retval=00002726 ret=102041f3 002a:Call ws2_32.WSAGetLastError() ret=1020431c 002a:Ret ws2_32.WSAGetLastError() retval=00002726 ret=1020431c 002a:Call KERNEL32.GetLastError() ret=10204329 002a:Ret KERNEL32.GetLastError() retval=00002726 ret=10204329 002a:Call KERNEL32.CloseHandle(000000d0) ret=10204350 002a:Ret KERNEL32.CloseHandle() retval=00000001 ret=10204350 ... 002a:Call ws2_32.WSAGetLastError() ret=10204527 002a:Ret ws2_32.WSAGetLastError() retval=00002726 ret=10204527 ... 002a:Call KERNEL32.GetLastError() ret=101d2dbd 002a:Ret KERNEL32.GetLastError() retval=00002726 ret=101d2dbd 002a:Call msvcp90.??0?$basic_string(a)GU?$char_traits(a)G@std@@V?$allocator(a)G@2@@std@@QAE(a)XZ(0014892c) ret=101d078c 002a:Ret msvcp90.??0?$basic_string(a)GU?$char_traits(a)G@std@@V?$allocator(a)G@2@@std@@QAE(a)XZ() retval=0014892c ret=101d078c 002a:Call KERNEL32.FormatMessageW(00001300,00000000,00002726,00000409,0086e394,00000000,00000000) ret=101d07ba 002a:Ret KERNEL32.FormatMessageW() retval=00000000 ret=101d07ba 002a:Call KERNEL32.FormatMessageW(00001300,00000000,00000507,00000409,0086e394,00000000,00000000) ret=101d07e2 002a:Ret KERNEL32.FormatMessageW() retval=00000000 ret=101d07e2 002a:Call msvcrt._CxxThrowException(0086e400,1029fe24) ret=10204777 002a:Call KERNEL32.RaiseException(e06d7363,00000001,00000003,0086e374) ret=7e7813a1 002a:trace:seh:raise_exception code=e06d7363 flags=1 addr=0x7b83a89f ip=7b83a89f tid=002a 002a:trace:seh:raise_exception info[0]=19930520 002a:trace:seh:raise_exception info[1]=0086e400 002a:trace:seh:raise_exception info[2]=1029fe24 002a:trace:seh:raise_exception eax=7b826921 ebx=7b8ba000 ecx=19930520 edx=0086e2c4 esi=0086e370 edi=0086e330 002a:trace:seh:raise_exception ebp=0086e308 esp=0086e2a4 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000283 --- snip --- The problem is the overly strict parameter check in WS2_AcceptEx(): Source: http://source.winehq.org/git/wine.git/blob/719715c77426c7cb759a012d24f89862… --- snip --- 2361 static BOOL WINAPI WS2_AcceptEx(SOCKET listener, SOCKET acceptor, PVOID dest, DWORD dest_len, 2362 DWORD local_addr_len, DWORD rem_addr_len, LPDWORD received, 2363 LPOVERLAPPED overlapped) 2364 { 2365 DWORD status; 2366 struct ws2_accept_async *wsa; 2367 int fd; 2368 ULONG_PTR cvalue = (overlapped && ((ULONG_PTR)overlapped->hEvent & 1) == 0) ? (ULONG_PTR)overlapped : 0; 2369 2370 TRACE("(%lx, %lx, %p, %d, %d, %d, %p, %p)\n", listener, acceptor, dest, dest_len, local_addr_len, 2371 rem_addr_len, received, overlapped); 2372 ... 2384 2385 if ((local_addr_len < sizeof(struct sockaddr_in) + 16) 2386 || (rem_addr_len < sizeof(struct sockaddr_in) + 16)) 2387 { 2388 SetLastError(WSAEINVAL); 2389 return FALSE; 2390 } ... --- snip --- The app passes zero 'local_addr_len' which fails the parameter input check. With that part fixed, the service successfully initializes and the client can communicate with the service over sockets. The client software (gui wizard) then waits for some USB smart device (Polar RC3 GPS watch) to be plugged in. --- Unrelated to this service/winsock problem but still useful information: The service registers a device notification callback which is probably triggered when the device has been recognized (PnP manager). That stuff is currently missing in Wine but even then ... 'dmesg' output from IRC user: --- snip --- [ 6188.997849] usb 3-2.3: new full-speed USB device number 8 using uhci_hcd [ 6189.150832] usb 3-2.3: New USB device found, idVendor=0da4, idProduct=0006 [ 6189.150838] usb 3-2.3: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6189.150842] usb 3-2.3: Product: Polar RC3 GPS [ 6189.150845] usb 3-2.3: Manufacturer: Polar Electro [ 6189.150848] usb 3-2.3: SerialNumber: 21BF9A4626001B00 [ 6199.157802] hid-generic 0003:0DA4:0006.0005: timeout initializing reports [ 6199.158076] hid-generic 0003:0DA4:0006.0005: hiddev0,hidraw4: USB HID v1.01 Device [Polar Electro Polar RC3 GPS] on usb-0000:00:1a.0-2.3/input0 --- snip --- Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 12

[Bug 45743] New: Firefox crashes on startup due to missing pipe server object type information (needed for Gecko's HandleDispatcher::DuplicateHandleProxy)
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

https://bugs.winehq.org/show_bug.cgi?id=45743 Bug ID: 45743 Summary: Firefox crashes on startup due to missing pipe server object type information (needed for Gecko's HandleDispatcher::DuplicateHandleProxy) Product: Wine Version: 3.14 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wineserver Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files (x86)/Mozilla Firefox $ WINEDEBUG=+pid,+seh,+loaddll,+process,+relay,+ntdll,+server wine ./firefox.exe >>log.txt 2>&1 ... 0008:0055:Starting thread proc 0x7bca4d0b (arg=0x2cb4a980) ... 0008:0055:Call KERNEL32.GetProcAddress(7bc30000,00427c48 "NtQueryObject") ret=004232be 0008:0055:Ret KERNEL32.GetProcAddress() retval=7bc37154 ret=004232be 0008:0055:Call KERNEL32.DuplicateHandle(00000328,000000f0,ffffffff,3030fb70,00000000,00000000,00000002) ret=0041444c 0008:0055:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=0041444c 0008:0055:Call KERNEL32.GetLastError() ret=0040ba5d 0008:0055:Ret KERNEL32.GetLastError() retval=00000000 ret=0040ba5d 0008:0055:Call ntdll.NtQueryObject(000003f8,00000002,3030fb90,0000009e,3030fb6c) ret=0041449f 0008:0055:trace:ntdll:NtQueryObject (0x3f8,0x00000002,0x3030fb90,0x0000009e,0x3030fb6c) 0008:0055:Ret ntdll.NtQueryObject() retval=00000000 ret=0041449f 0008:0055:Call ntdll.wcslen(3030fbf0 L"Section") ret=0041673c 0008:0055:Ret ntdll.wcslen() retval=00000007 ret=0041673c 0008:0055:Call ntdll.wcslen(3030fbf0 L"Section") ret=0041673c 0008:0055:Ret ntdll.wcslen() retval=00000007 ret=0041673c 0008:0055:Call ntdll.RtlCompareUnicodeString(3030fa9c,3030faac,00000001) ret=004167bb 0008:0055:Ret ntdll.RtlCompareUnicodeString() retval=00000000 ret=004167bb 0008:0055:Call KERNEL32.DuplicateHandle(ffffffff,000003f8,ffffffff,3030fc8c,000f0006,00000000,00000000) ret=0041481f 0008:0055:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=0041481f 0008:0055:Call KERNEL32.CloseHandle(000003f8) ret=0040177b 0008:0055:Ret KERNEL32.CloseHandle() retval=00000001 ret=0040177b 0008:0055:Call ucrtbase.memset(2d07e1a0,000000e5,000000a0) ret=1000603f 0008:0055:Ret ucrtbase.memset() retval=2d07e1a0 ret=1000603f 0008:0055:Call KERNEL32.SetEvent(00000338) ret=00420f64 0008:0055:Ret KERNEL32.SetEvent() retval=00000001 ret=00420f64 0008:0055:Call ucrtbase.memset(3030fd24,00000000,00000034) ret=00420f32 0008:0055:Ret ucrtbase.memset() retval=3030fd24 ret=00420f32 0008:0055:Call ucrtbase.memcpy(30e843e0,2cff0094,00000098) ret=00410459 0008:0055:Ret ucrtbase.memcpy() retval=30e843e0 ret=00410459 0008:0055:Call ucrtbase.memset(3030fc74,00000000,0000003c) ret=00420bfb 0008:0055:Ret ucrtbase.memset() retval=3030fc74 ret=00420bfb 0008:0055:Call ucrtbase.memcmp(00428b6c,3030fcb0,00000028) ret=00422697 0008:0055:Ret ucrtbase.memcmp() retval=ffffffff ret=00422697 0008:0055:Call ucrtbase.memcmp(00428b94,3030fcb0,00000028) ret=004226ab 0008:0055:Ret ucrtbase.memcmp() retval=ffffffff ret=004226ab 0008:0055:Call ucrtbase.memcmp(2ff07370,3030fcb0,00000028) ret=004106ca 0008:0055:Ret ucrtbase.memcmp() retval=00000000 ret=004106ca 0008:0055:Call KERNEL32.DuplicateHandle(00000328,00000170,ffffffff,3030fb70,00000000,00000000,00000002) ret=0041444c 0008:0055:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=0041444c 0008:0055:Call KERNEL32.GetLastError() ret=0040ba5d 0008:0055:Ret KERNEL32.GetLastError() retval=00000000 ret=0040ba5d 0008:0055:Call ntdll.NtQueryObject(00000408,00000002,3030fb90,0000009e,3030fb6c) ret=0041449f 0008:0055:trace:ntdll:NtQueryObject (0x408,0x00000002,0x3030fb90,0x0000009e,0x3030fb6c) 0008:0055:Ret ntdll.NtQueryObject() retval=00000000 ret=0041449f 0008:0055:trace:seh:raise_exception code=c0000005 flags=0 addr=0x4144ba ip=004144ba tid=0055 0008:0055:trace:seh:raise_exception info[0]=00000001 0008:0055:trace:seh:raise_exception info[1]=00000000 0008:0055:trace:seh:raise_exception eax=00000000 ebx=00000000 ecx=00000000 edx=00000000 esi=3030fc74 edi=00000002 0008:0055:trace:seh:raise_exception ebp=3030fc34 esp=3030fb58 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010246 0008:0055:trace:seh:call_vectored_handlers calling handler at 0x16d95c3 code=c0000005 flags=0 0008:0055:trace:seh:call_vectored_handlers handler at 0x16d95c3 returned 0 0008:0055:trace:seh:call_stack_handlers calling handler at 0x7bcb3bc4 code=c0000005 flags=0 0008:0055:Call KERNEL32.UnhandledExceptionFilter(3030f654) ret=7bcb3bff ... --- snip --- Tracing the handle back across multiple dupes: --- snip --- ... 0008:002c:Call advapi32.CreateProcessAsUserW(0000031c,2f832a50 L"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe",2fae7800 L"\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"8.0.218090689\\870550889\" -childID 1 -isForBrowser -prefsHandle 756 -prefsLen 5527 -schedulerPrefs 0001,2 -greomni \"C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja\" -appomni \"C:\\Program Files (x86)\\Mozilla Fire"...,00000000,00000000,00000001,0108040c,3041c020,00000000,09c2f0b0,09c2ef94) ret=00422051 ... 002c: new_process( inherit_all=1, create_flags=0108040c, socket_fd=194, exe_file=0318, process_access=001fffff, process_attr=00000000, thread_access=001fffff, thread_attr=00000000, cpu=x86, info_size=1482, ... 002c: new_process() = 0 { info=0320, pid=0056, phandle=0328, tid=0057, thandle=032c } ... 0056:0057:Call KERNEL32.CreateNamedPipeW(010acf40 L"\\\\.\\pipe\\chrome.86.0.22204864",40080003,00000000,00000001,00001000,00001000,00001388,00000000) ret=023d5c1f 0056:0057:trace:ntdll:NtCreateNamedPipeFile (0x33d6dc c0180000 L"\\??\\pipe\\chrome.86.0.22204864" 0x33d6b4 3 5 0 0 0 0 1 4096 4096 0x33d6a8) 0057: create_named_pipe( access=c0180000, options=00000000, sharing=00000003, maxinstances=00000001, outsize=00001000, insize=00001000, timeout=+5.0000000, flags=00000000, objattr={rootdir=0000,attributes=00000040,sd={},name=L"\\??\\pipe\\chrome.86.0.22204864"} ) 0057: create_named_pipe() = 0 { handle=0164 } ... 0057: dup_handle( src_process=ffffffff, src_handle=0164, dst_process=ffffffff, access=00000000, attributes=00000000, options=00000002 ) 0057: dup_handle() = 0 { handle=0168, self=1, closed=0 } ... 0057: dup_handle( src_process=ffffffff, src_handle=0168, dst_process=ffffffff, access=00000000, attributes=00000000, options=00000002 ) 0057: dup_handle() = 0 { handle=0170, self=1, closed=0 } .... 0008:0055:Call KERNEL32.DuplicateHandle(00000328,00000170,ffffffff,3030fb70,00000000,00000000,00000002) ret=0041444c 0055: dup_handle( src_process=0328, src_handle=0170, dst_process=ffffffff, access=00000000, attributes=00000000, options=00000002 ) 0055: dup_handle() = 0 { handle=0408, self=0, closed=0 } 0008:0055:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=0041444c ... 0008:0055:Call ntdll.NtQueryObject(00000408,00000002,3030fb90,0000009e,3030fb6c) ret=0041449f 0008:0055:trace:ntdll:NtQueryObject (0x408,0x00000002,0x3030fb90,0x0000009e,0x3030fb6c) 0055: get_object_type( handle=0408 ) 0055: get_object_type() = 0 { total=0, type=L"" } 0008:0055:Ret ntdll.NtQueryObject() retval=00000000 ret=0041449f --- snip --- Wineserver debug session: --- snip --- ... (gdb) b no_get_type Breakpoint 1 at 0x42c1a2: file /home/focht/projects/wine/mainline-src/server/object.c, line 499. (gdb) c Continuing. Breakpoint 1, no_get_type (obj=0x269c3e0) at /home/focht/projects/wine/mainline-src/server/object.c:499 499 return NULL; (gdb) bt #0 no_get_type (obj=0x269c3e0) at /home/focht/projects/wine/mainline-src/server/object.c:499 #1 0x0000000000415d55 in req_get_object_type (req=0x2692170, reply=0x7fff998dce50) at /home/focht/projects/wine/mainline-src/server/directory.c:524 #2 0x0000000000445c6d in call_req_handler (thread=0x2692020) at /home/focht/projects/wine/mainline-src/server/request.c:303 #3 0x0000000000445e02 in read_request (thread=0x2692020) at /home/focht/projects/wine/mainline-src/server/request.c:337 #4 0x000000000044e264 in thread_poll_event (fd=0x2692250, event=1) at /home/focht/projects/wine/mainline-src/server/thread.c:272 #5 0x0000000000417188 in fd_poll_event (fd=0x2692250, event=1) at /home/focht/projects/wine/mainline-src/server/fd.c:457 #6 0x000000000041756a in main_loop_epoll () at /home/focht/projects/wine/mainline-src/server/fd.c:552 #7 0x0000000000417b80 in main_loop () at /home/focht/projects/wine/mainline-src/server/fd.c:897 #8 0x0000000000423b73 in main (argc=3, argv=0x7fff998dd688) at /home/focht/projects/wine/mainline-src/server/main.c:148 (gdb) p *req $10 = {__header = {req = 256, request_size = 0, reply_size = 62}, handle = 1032} (gdb) p *obj $9 = {refcount = 4, handle_count = 3, ops = 0x47ee80 <pipe_server_ops>, wait_queue = {next = 0x269c3f0, prev = 0x269c3f0}, name = 0x0, sd = 0x0, obj_list = {next = 0x26a3620, prev = 0x26a8090}} --- snip --- I found the involved source code here: https://github.com/mozilla/gecko-dev/blob/HEAD/security/sandbox/chromium/sa… --- snip --- bool HandleDispatcher::DuplicateHandleProxy(IPCInfo* ipc, HANDLE source_handle, uint32_t target_process_id, uint32_t desired_access, uint32_t options) { static NtQueryObject QueryObject = NULL; if (!QueryObject) ResolveNTFunctionPtr("NtQueryObject", &QueryObject); // Get a copy of the handle for use in the broker process. HANDLE handle_temp; if (!::DuplicateHandle(ipc->client_info->process, source_handle, ::GetCurrentProcess(), &handle_temp, 0, FALSE, DUPLICATE_SAME_ACCESS | options)) { ipc->return_info.win32_result = ::GetLastError(); return false; } options &= ~DUPLICATE_CLOSE_SOURCE; base::win::ScopedHandle handle(handle_temp); // Get the object type (32 characters is safe; current max is 14). BYTE buffer[sizeof(OBJECT_TYPE_INFORMATION) + 32 * sizeof(wchar_t)]; OBJECT_TYPE_INFORMATION* type_info = reinterpret_cast<OBJECT_TYPE_INFORMATION*>(buffer); ULONG size = sizeof(buffer) - sizeof(wchar_t); NTSTATUS error = QueryObject(handle.Get(), ObjectTypeInformation, type_info, size, &size); if (!NT_SUCCESS(error)) { ipc->return_info.nt_status = error; return false; } type_info->Name.Buffer[type_info->Name.Length / sizeof(wchar_t)] = L'\0'; CountedParameterSet<HandleTarget> params; params[HandleTarget::NAME] = ParamPickerMake(type_info->Name.Buffer); params[HandleTarget::TARGET] = ParamPickerMake(target_process_id); EvalResult eval = policy_base_->EvalPolicy(IPC_DUPLICATEHANDLEPROXY_TAG, params.GetBase()); ipc->return_info.win32_result = HandlePolicy::DuplicateHandleProxyAction(eval, handle.Get(), target_process_id, &ipc->return_info.handle, desired_access, options); return true; } --- snip --- Used in several places: https://github.com/mozilla/gecko-dev/search?q=DuplicateHandleProxy Wine source: https://source.winehq.org/git/wine.git/blob/d4e0f0a12fdca62fea49a635418d19e… --- snip --- static const struct object_ops pipe_server_ops = 155 { 156 sizeof(struct pipe_server), /* size */ 157 pipe_server_dump, /* dump */ 158 no_get_type, /* get_type */ 159 add_queue, /* add_queue */ ... --- snip --- Although not strictly needed it might be worth to return type names for these too (touches same file): * pipe_client * named_pipe $ sha1sum Firefox\ Setup\ 61.0.2.exe cbda1b0eaf06486ac0dc8cd29df386d75dc1107c Firefox Setup 61.0.2.exe $ du -sh Firefox\ Setup\ 61.0.2.exe 35M Firefox Setup 61.0.2.exe $ wine --version wine-3.14-323-g6edf38c205 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 9