January 2020 - Wine-bugs - list.winehq.org

[Bug 48423] New: Add support of address space layout randomization (ASLR) for PE images with DLLCHARACTERISTICS_DYNAMIC_BASE
by WineHQ Bugzilla 05 Jan '20

05 Jan '20

https://bugs.winehq.org/show_bug.cgi?id=48423 Bug ID: 48423 Summary: Add support of address space layout randomization (ASLR) for PE images with DLLCHARACTERISTICS_DYNAMIC_BASE Product: Wine Version: 5.0-rc4 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, split out from bug 48417 Partial copy/pasta of https://bugs.winehq.org/show_bug.cgi?id=48417#c4 llvm project lld supports option '--dynamicbase' which is used for ASLR. https://github.com/llvm/llvm-project/blob/b11386f9be9b2dc7276a758d64f66833d… --- snip --- if (config->dynamicBase) pe->DLLCharacteristics |= IMAGE_DLL_CHARACTERISTICS_DYNAMIC_BASE; --- snip --- Using Martin's https://github.com/mstorsjo/llvm-mingw I've injected '-Wl,--dynamicbase' into 'CROSSLDFLAGS'. --- snip --- $ winedump $(winepath -u "c:\windows\syswow64\kernelbase.dll") Contents of /home/focht/.wine/dosdevices/c:/windows/syswow64/kernelbase.dll: 1802240 bytes *** This is a Wine builtin DLL *** File Header Machine: 014C (i386) Number of Sections: 13 TimeDateStamp: 5E11DCBC (Sun Jan 5 13:55:24 2020) offset 128 PointerToSymbolTable: 001B7E00 NumberOfSymbols: 00000000 SizeOfOptionalHeader: 00E0 Characteristics: 2102 EXECUTABLE_IMAGE 32BIT_MACHINE DLL Optional Header (32bit) Magic 0x10B 267 linker version 14.00 size of code 0x46800 288768 size of initialized data 0x171200 1511936 size of uninitialized data 0x0 0 entrypoint RVA 0x20850 133200 base of code 0x1000 4096 base of data 0x0 0 image base 0x10000000 268435456 section align 0x1000 4096 file align 0x200 512 required OS version 6.00 image version 0.00 subsystem version 6.00 Win32 Version 0x0 0 size of image 0x1c1000 1839104 size of headers 0x400 1024 checksum 0x0 0 Subsystem 0x2 (Windows GUI) DLL characteristics: 0x140 DYNAMIC_BASE NX_COMPAT stack reserve size 0x100000 1048576 stack commit size 0x1000 4096 heap reserve size 0x100000 1048576 heap commit size 0x1000 4096 loader flags 0x0 0 RVAs & sizes 0x10 16 Data Directory EXPORT rva: 0x72468 size: 0xa8e3 IMPORT rva: 0x7cd4b size: 0x28 RESOURCE rva: 0x0 size: 0x0 EXCEPTION rva: 0x0 size: 0x0 SECURITY rva: 0x0 size: 0x0 BASERELOC rva: 0x85000 size: 0x4158 DEBUG rva: 0x80000 size: 0x1c ARCHITECTURE rva: 0x0 size: 0x0 GLOBALPTR rva: 0x0 size: 0x0 TLS rva: 0x0 size: 0x0 LOAD_CONFIG rva: 0x0 size: 0x0 Bound IAT rva: 0x0 size: 0x0 IAT rva: 0x7d324 size: 0x5b0 Delay IAT rva: 0x0 size: 0x0 CLR Header rva: 0x0 size: 0x0 rva: 0x0 size: 0x0 Done dumping /home/focht/.wine/dosdevices/c:/windows/syswow64/kernelbase.dll --- snip --- 'DLL characteristics' -> 'DYNAMIC_BASE' Dlls will still have the default image base set though: https://github.com/llvm/llvm-project/blob/d3fec7fb456138c83b84e38ce785ea6bf… --- snip --- static uint64_t getDefaultImageBase() { if (config->is64()) return config->dll ? 0x180000000 : 0x140000000; return config->dll ? 0x10000000 : 0x400000; } --- snip --- https://github.com/llvm/llvm-project/blob/d3fec7fb456138c83b84e38ce785ea6bf… --- snip --- // Set default image base if /base is not given. if (config->imageBase == uint64_t(-1)) config->imageBase = getDefaultImageBase(); --- snip --- The problem: ASLR isn't supported in Wine loader yet. --- snip --- $ grep -Hrn DYNAMIC_BASE dlls/kernel32/tests/loader.c:462: if (!(nt_header->OptionalHeader.DllCharacteristics & IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE)) dlls/kernel32/tests/loader.c:1123: nt_header.OptionalHeader.DllCharacteristics = IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE; dlls/kernel32/tests/loader.c:1297: nt64.OptionalHeader.DllCharacteristics = IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE; dlls/kernel32/tests/loader.c:1408: nt32.OptionalHeader.DllCharacteristics = IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE; dlls/fusion/tests/asmcache.c:328: IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE | tools/winedump/pe.c:218: X(IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE, "DYNAMIC_BASE"); server/mapping.c:651: if ((nt.opt.hdr32.DllCharacteristics & IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE) && server/mapping.c:691: if ((nt.opt.hdr64.DllCharacteristics & IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE) && include/winnt.h:2986:#define IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE 0x0040 --- snip --- --- snip --- $ grep -Hrni DynamicallyRelocated dlls/kernel32/tests/loader.c:387: (S(U(image)).ImageDynamicallyRelocated && LOWORD(image.TransferAddress) == LOWORD(entry_point)), dlls/kernel32/tests/loader.c:463: ok( !S(U(image)).ImageDynamicallyRelocated || broken( S(U(image)).ComPlusILOnly ), /* <= win7 */ dlls/kernel32/tests/loader.c:464: "%u: wrong ImageDynamicallyRelocated flags %02x\n", id, U(image).ImageFlags ); dlls/kernel32/tests/loader.c:466: ok( S(U(image)).ImageDynamicallyRelocated || broken(is_winxp), dlls/kernel32/tests/loader.c:467: "%u: wrong ImageDynamicallyRelocated flags %02x\n", id, U(image).ImageFlags ); dlls/kernel32/tests/loader.c:469: ok( !S(U(image)).ImageDynamicallyRelocated || broken(TRUE), /* <= win8 */ dlls/kernel32/tests/loader.c:470: "%u: wrong ImageDynamicallyRelocated flags %02x\n", id, U(image).ImageFlags ); server/protocol.def:767:#define IMAGE_FLAGS_ImageDynamicallyRelocated 0x04 server/mapping.c:653: mapping->image.image_flags |= IMAGE_FLAGS_ImageDynamicallyRelocated; server/mapping.c:693: mapping->image.image_flags |= IMAGE_FLAGS_ImageDynamicallyRelocated; include/winternl.h:2028: UCHAR ImageDynamicallyRelocated : 1; include/wine/server_protocol.h:751:#define IMAGE_FLAGS_ImageDynamicallyRelocated 0x04 --- snip --- Supporting ASLR in Wine loader would bring the PE binaries created with mingw cross-toolchain in line with what's produced by Microsoft's toolchains by default -> https://web.archive.org/web/20200105131452/https://devblogs.microsoft.com/c… Tidbit: https://insights.sei.cmu.edu/cert/2018/08/when-aslr-is-not-really-aslr---th… $ wine --version wine-5.0-rc4 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 10859] New: access violation in mshtml.dll since 0.9.48 / Heredis 9
by wine-bugs＠winehq.org 05 Jan '20

05 Jan '20

http://bugs.winehq.org/show_bug.cgi?id=10859 Summary: access violation in mshtml.dll since 0.9.48 / Heredis 9 Product: Wine Version: 0.9.48. Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-tools AssignedTo: wine-bugs(a)winehq.org ReportedBy: lebon.sylvain(a)gmail.com Created an attachment (id=9751) --> (http://bugs.winehq.org/attachment.cgi?id=9751) Wine output when the bug occurs Since version 0.9.48, with Heredis 9, an error occurs when trying to display html content with the gecko module. An error window pops up : "Access violation at address 7DDXXXXX in module 'mshtml.dll' Read of address 000000XX", where X is a random number. The message is sometimes followed by "Abnormal program termination" killing the program. This error occurs with versions 0.9.48, 0.9.49, 0.9.50 and 0.9.51, but not with previous versions. The tests were made using Ubuntu 7.10. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 10

[Bug 48421] New: wine install packages lost libfaudio0:i386
by WineHQ Bugzilla 05 Jan '20

05 Jan '20

https://bugs.winehq.org/show_bug.cgi?id=48421 Bug ID: 48421 Summary: wine install packages lost libfaudio0:i386 Product: Wine Version: 5.0-rc4 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: amie1972(a)163.com Distribution: --- The recently released wine-devel-rc4 lost a depend package libfaudio0:i386 so install of wine-devel is prevented. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 48347] New: winetricks wmp10 no longer installs
by WineHQ Bugzilla 05 Jan '20

05 Jan '20

https://bugs.winehq.org/show_bug.cgi?id=48347 Bug ID: 48347 Summary: winetricks wmp10 no longer installs Product: Wine Version: 5.0-rc2 Hardware: x86 OS: Linux Status: NEW Keywords: download, Installer, regression Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com CC: julliard(a)winehq.org, xerox.xerox2000x(a)gmail.com Regression SHA1: 1f626b5e1f072be9ba0b0d6eb0aab6e1cf7ebc71 Distribution: Gentoo Regression introduced by commit 1f626b5e1f072be9ba0b0d6eb0aab6e1cf7ebc71 Author: Louis Lenders <xerox.xerox2000x(a)gmail.com> Date: Wed Dec 18 19:29:56 2019 +0100 kernel32: Update version to win7. Wine-Bug: https://bugs.winehq.org/show_bug.cgi?id=48304 Signed-off-by: Louis Lenders <xerox.xerox2000x(a)gmail.com> Signed-off-by: Alexandre Julliard <julliard(a)winehq.org> winetricks sets the version to winxp, but it seems wmp10 checks the actual dll resource version, which is hardcoded and not subject to override by wine's reported version. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 7

[Bug 625] Applications cannot load dlls from custom folders
by WineHQ Bugzilla 04 Jan '20

04 Jan '20

https://bugs.winehq.org/show_bug.cgi?id=625 --- Comment #28 from Aaron Franke <arnfranke(a)yahoo.com> --- Of course, anyone can take a look at it. You can start by trying to reproduce the problem to determine if the issue still exists in Wine 5.0. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 48319] New: Warface thinks wine is vista or under.
by WineHQ Bugzilla 04 Jan '20

04 Jan '20

https://bugs.winehq.org/show_bug.cgi?id=48319 Bug ID: 48319 Summary: Warface thinks wine is vista or under. Product: Wine Version: 5.0-rc1 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: jeremielapuree(a)yahoo.fr Distribution: --- Created attachment 66036 --> https://bugs.winehq.org/attachment.cgi?id=66036 screenshot of the error Warface downloader thinks Wine version in under vista. It wants newer versions of windows to starts -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 48309] New: Unable to use MI Unlock Tool in Ubuntu 19.10
by WineHQ Bugzilla 04 Jan '20

04 Jan '20

https://bugs.winehq.org/show_bug.cgi?id=48309 Bug ID: 48309 Summary: Unable to use MI Unlock Tool in Ubuntu 19.10 Product: Wine Version: 4.0.2 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: Prabesh432(a)gmail.com Distribution: --- Created attachment 66023 --> https://bugs.winehq.org/attachment.cgi?id=66023 barcktrace Trying to work with MI Unlock tool in Ubuntu 19.10 GNOME. Install wine32, wine64, and Q4 Wine using apt. Install Q4 Wini was important because no option showed when I try to run exe file. Error is in attachment -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 2

[Bug 48393] New: Windows media player does not recognize the version of windows
by WineHQ Bugzilla 04 Jan '20

04 Jan '20

https://bugs.winehq.org/show_bug.cgi?id=48393 Bug ID: 48393 Summary: Windows media player does not recognize the version of windows Product: Wine Version: 5.0-rc3 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: jeremielapuree(a)yahoo.fr Distribution: --- Created attachment 66160 --> https://bugs.winehq.org/attachment.cgi?id=66160 screenshot showing the bug step to reproduce rm -fR .wine WINEARCH=win32 winecfg ->choose windows XP wine MPsetup.exe and voila. Bug occurs. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 48351] New: viaDuct-3D Expert 2.322 - page fault when reading 0x8 on first start and when opening a catalog
by WineHQ Bugzilla 04 Jan '20

04 Jan '20

https://bugs.winehq.org/show_bug.cgi?id=48351 Bug ID: 48351 Summary: viaDuct-3D Expert 2.322 - page fault when reading 0x8 on first start and when opening a catalog Product: Wine Version: 5.0-rc2 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: klavier22(a)hotmail.de Distribution: --- Created attachment 66088 --> https://bugs.winehq.org/attachment.cgi?id=66088 Crash report The software can be downloaded here: https://www.cms3.com/en/downloads.html (viaDuct-3D Expert, version 2.322) Direct link: https://www.cms3.com/downloads/viaduct_expert_2322.exe Installation works flawlessly. It asked to install VC2005, which I confirmed. When opening the software the first time, it will crash with the crash report I appended. When opening it again, it will open, giving this error: > Invalid Catalog > The selected catalog "C:\Program Files (x86)\CMS 3 GmbH\Catalogs\CMS DIN\DuctCat.vdb" could not be opened! Please select a valid catalog to open in the menu for the program options. It will then show the main window. If you click on Configuration -> Catalogue -> Open... and select the catalog file "C:\Program Files (x86)\CMS 3 GmbH\Catalogs\CMS DIN\DuctCat.vdb", the same crash will happen. I suspect that this is just some kind of "Open the last catalog again if exited gracefully" logic and both crashes essentially the same (So on the first start, it just tries to open the catalog file on its own) These are the lines from the crash log I think are most relevant: ``` Unhandled exception: page fault on read access to 0x00000008 in 32-bit code (0x781f37d0). Backtrace: =>0 0x781f37d0 EntryPoint+0xffffffff() in mfc80 (0x0032fab0) 0x781f37d0 EntryPoint+0xffffffff in mfc80: movl 0x0(%eax),%eax ``` so the relevant component may be mfc. Tested on a freshly installed ubuntu mate 19.10 with winehq-devel installed (wine-5.0-rc2). It also already happens the ubuntu repositories wine (4.0.2-1) The application works well on windows 7 and 10. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 37716] New: GTAVC in virtual desktop starts minimized
by wine-bugs＠winehq.org 04 Jan '20

04 Jan '20

https://bugs.winehq.org/show_bug.cgi?id=37716 Bug ID: 37716 Summary: GTAVC in virtual desktop starts minimized Product: Wine Version: 1.7.32 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: b7.10110111(a)gmail.com Distribution: --- After wine upgrade launching GTAVC in wine virtual desktop doesn't show anything on screen of the virtual desktop. I can hear sound from intro video though. In fact, I can click on the GTAVC icon at the bottom-left, then a menu appears, selecting "Restore" in which gives me the game window and allows playing. Here's the git-bisect result 45d530461bf29c953f5f4532cc0e917b4c4fc296 is the first bad commit commit 45d530461bf29c953f5f4532cc0e917b4c4fc296 Author: Stefan Dösinger <stefan(a)codeweavers.com> Date: Thu Nov 13 20:39:25 2014 +0100 wined3d: Minimize device windows on focus loss. :040000 040000 7711e853d780f4c05cc8ae578ff45462fb9ec7f7 63f0b55f65e85a8895ac0d1ef0ee94dbb5595db6 M dlls PS: I'm using glib-2.30 with wine, so I can watch/hear the intro videos. I think similar problem would be for those with new glib and disabled wine-gst. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 46