November 2021 - Wine-bugs - list.winehq.org

[Bug 36821] New: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver continuously spams terminal due to 'PsLookupProcessByProcessId' stub
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=36821 Bug ID: 36821 Summary: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver continuously spams terminal due to 'PsLookupProcessByProcessId' stub Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, the kernel driver is part of 'Multi Theft Auto' v1.3.5 Release notes: https://forum.mtasa.com/viewtopic.php?f=31&t=71767 There is a constant spam on terminal: --- snip --- ... fixme:ntoskrnl:PsLookupProcessByProcessId (0x4 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x8 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0xc 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x10 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x14 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x18 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x1c 0x53e5bc) stub ... fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ff8 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ffc 0x53e5bc) stub fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:ntoskrnl:PsLookupProcessByProcessId (0x4 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x8 0x53e5bc) stub ... <repeats forever> --- snip --- 'FairplayKD.sys' kernel driver code: --- snip --- 00541F06 8BFF MOV EDI,EDI 00541F08 55 PUSH EBP 00541F09 8BEC MOV EBP,ESP 00541F0B 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] ; process id to lookup 00541F0E 53 PUSH EBX 00541F0F 56 PUSH ESI 00541F10 F6C1 03 TEST CL,3 00541F13 75 42 JNZ SHORT 00541F57 00541F15 8B5D 0C MOV EBX,DWORD PTR SS:[EBP+C] 00541F18 F6C3 03 TEST BL,3 00541F1B 75 3A JNZ SHORT 00541F57 00541F1D B8 E8FD0000 MOV EAX,0FDE8 ; max pid (handle) 00541F22 3BC8 CMP ECX,EAX 00541F24 77 31 JA SHORT 00541F57 00541F26 3BD8 CMP EBX,EAX 00541F28 77 2D JA SHORT 00541F57 00541F2A 3BCB CMP ECX,EBX 00541F2C 73 29 JNB SHORT 00541F57 00541F2E 8BF1 MOV ESI,ECX pid_loop: 00541F30 8D45 08 LEA EAX,DWORD PTR SS:[EBP+8] 00541F33 50 PUSH EAX 00541F34 56 PUSH ESI 00541F35 FF15 8C8A5400 CALL DWORD PTR DS:[548A8C] ; PsLookupProcessByProcessId 00541F3B 85C0 TEST EAX,EAX 00541F3D 74 0B JE SHORT 00541F4A 00541F3F 83C6 04 ADD ESI,4 00541F42 3BF3 CMP ESI,EBX 00541F44 72 EA JB SHORT 00541F30 00541F46 8BC3 MOV EAX,EBX 00541F48 EB 0F JMP SHORT 00541F59 00541F4A 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 00541F4D FF15 888A5400 CALL DWORD PTR DS:[548A88] ; ObfDereferenceObject 00541F53 8BC6 MOV EAX,ESI 00541F55 EB 02 JMP SHORT 00541F59 00541F57 33C0 XOR EAX,EAX 00541F59 5E POP ESI 00541F5A 5B POP EBX 00541F5B 5D POP EBP 00541F5C C2 0800 RETN 8 --- snip --- If it fails (Wine stub in this case) just go for the next process id ... genius logic at work :) Silencing via "trace once" might be ok for this - even if the loop is still getting executed. $ sha1sum mtasa-1.3.5.exe 7f186543892ef0877cd568ce0935c5e9641578c8 mtasa-1.3.5.exe $ du -sh mtasa-1.3.5.exe 21M mtasa-1.3.5.exe $ wine --version wine-1.7.21-3-gbf72c67 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 38098] New: Managed (.NET) debugger fails to load symbol files ('GetFileVersionInfoExW' is a stub)
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=38098 Bug ID: 38098 Summary: Managed (.NET) debugger fails to load symbol files ('GetFileVersionInfoExW' is a stub) Product: Wine Version: 1.7.36 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 38090 With patch from bug 38090 applied it runs into: --- snip --- (28.29): C++ EH exception - code e06d7363 (first chance) (28.29): CLR exception - code e0434f4d (first chance) ... 0009:fixme:ver:GetFileVersionInfoExW stub: 0 L"z:\\home\\focht\\downloads\\debug_symbols\\mscordacwks_x86_x86_2.0.50727.42.dll\\4333E7EC561000\\mscordacwks_x86_x86_2.0.50727.42.dll" 0 1964 0x439450 Failed to load data access DLL, 0x80004005 ... --- snip --- The stub was committed one day later: --- snip --- version: Add stubs for GetFileVersionInfoExA/W. author Austin English <austinenglish(a)gmail.com> Tue, 23 Dec 2014 01:37:46 +0000 (19:37 -0600) committer Alexandre Julliard <julliard(a)winehq.org> Tue, 23 Dec 2014 14:30:50 +0000 (15:30 +0100) commit 61fc9ac92f0dbe80e07d883a2365e16fd6f37774 tree 1b4ace4cee89aff7b8cf0a3119e8677310a9822b parent 0029290e3e769880f2e357cf9608ac26535c29fb --- snip --- Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 9

[Bug 38090] New: Managed (.NET) debugger fails to load symbol files ('GetFileVersionInfoSizeExW' is a stub)
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=38090 Bug ID: 38090 Summary: Managed (.NET) debugger fails to load symbol files ('GetFileVersionInfoSizeExW' is a stub) Product: Wine Version: 1.7.36 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, found while investigating bugs with managed applications (.NET). Dump of managed callstacks doesn't work anymore, instead the debugger prints 'Failed to load data access DLL foo, 80004005'. --- snip --- ... 0009:Call version.GetFileVersionInfoSizeExW(00000000,00438f88 L"z:\\home\\focht\\downloads\\debug_symbols\\mscorwks.dll\\4333E7EC561000\\mscordacwks_x86_x86_2.0.50727.42.dll",0033c47c) ret=022d643e 0009:fixme:ver:GetFileVersionInfoSizeExW stub: 0 L"z:\\home\\focht\\downloads\\debug_symbols\\mscorwks.dll\\4333E7EC561000\\mscordacwks_x86_x86_2.0.50727.42.dll" 0x33c47c 0009:Ret version.GetFileVersionInfoSizeExW() retval=00000000 ret=022d643e 0009:Call KERNEL32.SetErrorMode(00000001) ret=021e29b4 0009:Ret KERNEL32.SetErrorMode() retval=00000001 ret=021e29b4 0009:Call msvcrt._vsnwprintf(0236af88,00000040,020c65a8 L"Win32 error 0n%d",0033c718) ret=022d4956 0009:Ret msvcrt._vsnwprintf() retval=00000010 ret=022d4956 0009:Call msvcrt._vsnwprintf(0035411c,00000145,0203dbd8 L"ERROR: Unable to load DLL %s, %s",0033c728) ret=022d4956 0009:Ret msvcrt._vsnwprintf() retval=00000050 ret=022d4956 ... 0009:Call KERNEL32.MultiByteToWideChar(00000000,00000000,64273bbc "Failed to load data access DLL, 0x%08x\n",ffffffff,00000000,00000000) ret=020ebf5b 0009:Ret KERNEL32.MultiByteToWideChar() retval=00000028 ret=020ebf5b --- snip --- It a regression: http://source.winehq.org/git/wine.git/commitdiff/caaf6aafa96d1f8ac72f5e019c… --- snip --- author Austin English <austinenglish(a)gmail.com> Sat, 20 Dec 2014 19:39:54 +0000 (13:39 -0600) committer Alexandre Julliard <julliard(a)winehq.org> Mon, 22 Dec 2014 18:18:21 +0000 (19:18 +0100) commit caaf6aafa96d1f8ac72f5e019c4c97ef3d1958e6 tree cec676788e3b8000423aa779ed269408b9804df4 parent ef8db24b9c77bdc110c4c2b6acb4581b9fd6d193 version: Add stubs for GetFileVersionInfoSizeExA/W. --- snip --- It shouldn't be too hard to add an actual implementation. Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 19

[Bug 38388] New: Visual Studio Express 2013 (12.0) installer aborts with 'Runtime Error! R6016 - not enough space for thread data' in Win 8.1 mode (needs ntdll.dll 'WinSqmIsOptedIn')
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=38388 Bug ID: 38388 Summary: Visual Studio Express 2013 (12.0) installer aborts with 'Runtime Error! R6016 - not enough space for thread data' in Win 8.1 mode (needs ntdll.dll 'WinSqmIsOptedIn') Product: Wine Version: 1.7.40 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, Visual Studio Express 2013 (12.0) has multiple installer blockers. Prerequisite: 'winetricks -q dotnet40 corefonts win7' Patch for bug 38387 The WPF 4.x based installer user-interface is unreadable in Win7 mode. It makes heavy use of DWrite API, unearthing a couple Wine insufficiencies. The visible part (stub noise): --- snip --- ... fixme:dwrite:dwritefontface_GetRecommendedRenderingMode (0x56a4580)->(12.000000 1.000000 0 0x55cd738 0xf84e1fc): stub fixme:dwrite:dwritefactory_CreateGlyphRunAnalysis (0x211510)->(0xf84e1d8 1.000000 0xf84e21c 4 0 0.000000 0.000000 0xf84e20c): stub ... --- snip --- Fortunately the installer is very verbose about its doings in the log file. %temp% -> dd_winexpress_full_<datetimestamp>.log --- snip --- ... [002E:002F][2015-04-10T22:54:23]i052: Condition '(VersionNT = v6.3) AND (WindowsBuildNumber < 9600)' evaluates to false. [002E:002F][2015-04-10T22:54:23]i052: Condition 'VersionNT < v6.3' evaluates to true. [002E:002F][2015-04-10T22:54:23]i052: Condition '(VersionNT = v6.3) AND (netfxfullredist_43_DetectKey < v4.5.50709)' evaluates to false. [002E:002F][2015-04-10T22:54:23]i052: Condition 'CompatibilityMode = 0' evaluates to false. [002E:002F][2015-04-10T22:54:23]i052: Condition 'RebootPending = 1' evaluates to false. [002E:002F][2015-04-10T22:54:23]i052: Condition 'NOT (IEsvcVersionExists) OR (IEsvcVersion < v10.0)' evaluates to true. [002E:002F][2015-04-10T22:54:23]i000: MUX: Stop Block: WinBlock : This version of Visual Studio requires a computer with a !$!http://go.microsoft.com/fwlink/?LinkID=320086&clcid=0x409,newer version of Windows!@!. [002E:002F][2015-04-10T22:54:23]i000: MUX: Stop Block: IE10Block : This version of Visual Studio requires Internet Explorer 10 which is currently not installed on your computer. Please !$!http://go.microsoft.com/fwlink/?LinkID=320085&clcid=0x409,install Internet Explorer 10!@! and then retry installing Visual Studio. [002E:002F][2015-04-10T22:54:23]i000: MUX: Detect Completed [002E:002F][2015-04-10T22:54:23]i000: MUX: Wait for View to be loaded [002E:0038][2015-04-10T22:54:23]i000: MUX: Detect Completed, now create view [002E:002F][2015-04-10T22:54:26]i000: MUX: View loaded [002E:002F][2015-04-10T22:54:26]i000: MUX: Go to Blocker page. [002E:002F][2015-04-10T22:54:26]i199: Detect complete, result: 0x0 --- snip --- It needs Win 8.1 mode and .NET Framework 4.5 installed. It's best to run .NET 4.5 installer directly from winetricks cache standalone to avoid long .NET 2.x, 3.x install sequence for now. With these requirements met, the installer aborts much early with run-time error. --- snip --- $ WINEDEBUG=+tid,+seh,+relay,+msi wine ./winexpress_full.exe >>log.txt 2>&1 ... 002a:Call KERNEL32.CreateProcessW(001461d0 L"Z:\\home\\focht\\Downloads\\winexpress_full.exe",001465e8 L"\"Z:\\home\\focht\\Downloads\\winexpress_full.exe\" -burn.unelevated BurnPipe.{1FC0A2CB-7160-4EDB-A330-B0CF4FBE54BC} {4F44BA81-61F1-499A-8FCD-A00AD817497E} 41",00000000,00000000,00000000,00000000,00000000,00000000,0033f688,0033f6cc) ret=0042f42d ... 002d:Call KERNEL32.__wine_kernel_init() ret=7bc5aa05 002a:Ret KERNEL32.CreateProcessW() retval=00000001 ret=0042f42d ... 002d:Call KERNEL32.GetModuleHandleW(0035c504 L"ntdll.dll") ret=0035c4ce 002d:Ret KERNEL32.GetModuleHandleW() retval=7bc10000 ret=0035c4ce 002d:Call KERNEL32.GetProcAddress(7bc10000,0035c4f4 "WinSqmIsOptedIn") ret=0035c4da 002d:Ret KERNEL32.GetProcAddress() retval=00000000 ret=0035c4da 002d:trace:seh:raise_exception code=c0000005 flags=0 addr=(nil) ip=00000000 tid=002d 002d:trace:seh:raise_exception info[0]=00000008 002d:trace:seh:raise_exception info[1]=00000000 002d:trace:seh:raise_exception eax=00000000 ebx=00000000 ecx=00000006 edx=7bca6ec0 esi=0014b160 edi=7b824394 002d:trace:seh:raise_exception ebp=0033ee34 esp=0033edd8 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010202 002d:trace:seh:call_stack_handlers calling handler at 0x3a7458 code=c0000005 flags=0 002d:Call KERNEL32.GetLastError() ret=003568a6 002d:Ret KERNEL32.GetLastError() retval=0000007f ret=003568a6 ... 002d:Call user32.MessageBoxW(00000000,003c12f8 L"Runtime Error!\n\nProgram: Z:\\home\\focht\\Downloads\\winexpress_full.exe\n\nR6016\r\n- not enough space for thread data\r\n",0039a878 L"Microsoft Visual C++ Runtime Library",00012010) ret=003a0476 --- snip --- $ sha1sum winexpress_full.exe 51394c6e8d4d4235396cb7933af030974e25579f winexpress_full.exe $ du -sh winexpress_full.exe 1000K winexpress_full.exe $ wine --version wine-1.7.40-99-gdc22283 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 7

[Bug 38386] New: Visual Studio Express 2013 for Windows Installer crashed with native dotnet40
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=38386 Bug ID: 38386 Summary: Visual Studio Express 2013 for Windows Installer crashed with native dotnet40 Product: Wine Version: 1.7.40 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: litimetal(a)gmail.com Distribution: --- Created attachment 51233 --> https://bugs.winehq.org/attachment.cgi?id=51233 wrong logo.png 0. download from http://go.microsoft.com/?linkid=9832256 $ sha1sum winexpress_full.exe 52e551bf9ab3a587c5ec0f9dbaad49ffb5e5d168 winexpress_full.exe 1. winetricks -q dotnet40 to workaround bug 38385 2. The installer aborted silently 3. A wrong logo is shown Few secones later, wine crashed -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 11

[Bug 46791] New: Corel Draw X4 - Installer hangs at splash screen
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=46791 Bug ID: 46791 Summary: Corel Draw X4 - Installer hangs at splash screen Product: Wine Version: 4.1 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: maiktapwagner(a)aol.com Distribution: --- Created attachment 63810 --> https://bugs.winehq.org/attachment.cgi?id=63810 Console output on wine 4.1 (non-staging) Hello everyone, with a friend of a German forum I have been notified that "CorelDraw X4" requires msxml3 and ie7 to get started. I created a fresh wine-Prefix (32-Bit) with wine 4.1 and installed the two components using winetricks. winetricks msxml3 (Worked fine) wget https://raw.githubusercontent.com/Winetricks/winetricks/master/src/winetric… && sh winetricks ie7 (Had to renew my script aparently) sha256sum CorelDRAWGraphicsSuiteX4Installer_DE.exe f61dfb1bf7b6c4c1f92d8d72d124a98e2f4af691e732094ae0295c29c67d4f55 CorelDRAWGraphicsSuiteX4Installer_DE.exe With these two components installed I get to the splash screen and there is a lot of console output. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 2

[Bug 11747] New: CorelDRAW Graphics Suite X4 Trial installer crashes
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=11747 Summary: CorelDRAW Graphics Suite X4 Trial installer crashes Product: Wine Version: 0.9.56. Platform: PC URL: http://www.corel.com/servlet/Satellite?pagename=CorelCom /ProcessLayout&lc=en&ppg=CorelCorp/Trials/DownloadContai ner OS/Version: Linux Status: NEW Keywords: download, Installer Severity: normal Priority: P2 Component: msxml3 AssignedTo: wine-bugs(a)winehq.org ReportedBy: truiken(a)gmail.com $ wine CorelDRAWGraphicsSuiteX4Installer_EN.exe wine: Unhandled page fault on read access to 0x00000000 at address 0x7ddf3f47 (thread 0016), starting debugger... Unhandled exception: page fault on read access to 0x00000000 in 32-bit code (0x7ddf3f47). Backtrace: =>1 0x7ddf3f47 queryresult_get_length+0x57(iface=0x130e38, listLength=0x34f58c) [/home/truiken/wine/dlls/msxml3/queryresult.c:277] in msxml3 (0x0034f554) 2 0x0035401b in setupxml (+0x401b) (0x005f4650) 3 0x00430049 in setup (+0x30049) (0x002f002f) 4 0x00000000 (0x00000000) 0x7ddf3f47 queryresult_get_length+0x57 [/home/truiken/wine/dlls/msxml3/queryresult.c:277] in msxml3: movl 0x0(%eax),%edx 277 *listLength = This->result->nodesetval->nodeNr; -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 39

[Bug 22706] New: Stylizer: cannot start the program
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=22706 Summary: Stylizer: cannot start the program Product: Wine Version: 1.1.44 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: shnatsel(a)gmail.com Created an attachment (id=27979) --> (http://bugs.winehq.org/attachment.cgi?id=27979) Console output Stylizer (http://appdb.winehq.org/objectManager.php?sClass=application&iId=11499) doesn't start - wine prints "fixme:..." messages to console. I've used Winetricks to install .NET framework, but since it seems to be Wine problem, I'm reporting this as Wine bug. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 15

[Bug 39127] New: Multiple applications wrapped with XenoCode Postbuild 2009 application sandboxing crash with stack overflow ('NtWaitForSingleObject' must not call 'NtWaitForMultipleObjects')
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=39127 Bug ID: 39127 Summary: Multiple applications wrapped with XenoCode Postbuild 2009 application sandboxing crash with stack overflow ('NtWaitForSingleObject' must not call 'NtWaitForMultipleObjects') Product: Wine Version: 1.7.49 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as the summary says. Continuation of bug 30399 The app crashes very quickly: --- snip --- $ wine ./Stylizer.exe fixme:ole:RemUnknown_QueryInterface No interface for iid {00000019-0000-0000-c000-000000000046} wine: Unhandled stack overflow at address 0x377db8 (thread 0009), starting debugger... err:seh:setup_exception_record stack overflow 816 bytes in thread 0009 eip 00377d91 esp 00241000 stack 0x240000-0x241000-0x340000 --- snip --- --- snip --- -=[ ProtectionID v0.6.6.7 DECEMBER]=- (c) 2003-2015 CDKiLLER & TippeX Build 24/12/14-22:48:13 Ready... Scanning -> Z:\home\focht\Downloads\Stylizer.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 15854203 (0F1EA7Bh) Byte(s) Compilation TimeStamp : 0x50B3AB61 -> Mon 26th Nov 2012 17:48:17 (GMT) [TimeStamp] 0x50B3AB61 -> Mon 26th Nov 2012 17:48:17 (GMT) | PE Header | - | Offset: 0x00000088 | VA: 0x00400088 | - -> File has 15719035 (0EFDA7Bh) bytes of appended data starting at offset 021000h [File Heuristics] -> Flag #1 : 00000000000001001000000000000100 (0x00048004) [Entrypoint Section Entropy] : 6.37 (section #0) ".text " | Size : 0x3ABE (15038) byte(s) [DllCharacteristics] -> Flag : (0x8000) -> TSA [SectionCount] 6 (0x6) | ImageSize 0x30B000 (3190784) byte(s) [!] XenoCode Postbuild 2009 detected ! [CdKeySerial] found "Invalid code" @ VA: 0x00001E60 / Offset: 0x00001260 - Scan Took : 0.332 Second(s) [00000014Ch (332) tick(s)] [558 of 573 scan(s) done] --- snip --- Relay tracing interferes with the way the native API sandboxing scheme works and use of dedicated trace channels doesn't reveal much. Debugging reveals the culprit. 'NtWaitForSingleObject': --- snip --- 7BC99B3E E9 2A057284 JMP 003BA06D ; trampoline 7BC99B43 E4 F0 IN AL,0F0 7BC99B45 FF71 FC PUSH DWORD PTR DS:[ECX-4] 7BC99B48 55 PUSH EBP 7BC99B49 89E5 MOV EBP,ESP 7BC99B4B 51 PUSH ECX 7BC99B4C 83EC 24 SUB ESP,24 7BC99B4F 89C8 MOV EAX,ECX 7BC99B51 8B50 04 MOV EDX,DWORD PTR DS:[EAX+4] 7BC99B54 8855 F4 MOV BYTE PTR SS:[EBP-0C],DL 7BC99B57 0FB655 F4 MOVZX EDX,BYTE PTR SS:[EBP-0C] 7BC99B5B 8B48 08 MOV ECX,DWORD PTR DS:[EAX+8] 7BC99B5E 894C24 10 MOV DWORD PTR SS:[ESP+10],ECX 7BC99B62 895424 0C MOV DWORD PTR SS:[ESP+0C],EDX 7BC99B66 C74424 08 00000 MOV DWORD PTR SS:[ESP+8],0 7BC99B6E 894424 04 MOV DWORD PTR SS:[ESP+4],EAX 7BC99B72 C70424 01000000 MOV DWORD PTR SS:[ESP],1 7BC99B79 E8 E7FEFFFF CALL NtWaitForMultipleObjects 7BC99B7E 83EC 14 SUB ESP,14 7BC99B81 8B4D FC MOV ECX,DWORD PTR SS:[EBP-4] 7BC99B84 C9 LEAVE 7BC99B85 8D61 FC LEA ESP,[ECX-4] 7BC99B88 C2 0C00 RETN 0C ... 00A3004E 8D4C24 04 LEA ECX,[ESP+4] ; saved prolog chunk 00A30052 83E4 F0 AND ESP,FFFFFFF0 00A30055 E9 EB9A267B JMP 7BC99B45 --- snip --- NtWaitForMultipleObjects: --- snip --- 7BC99A65 E9 81067284 JMP 003BA0EB ; trampoline 7BC99A6A F0:81EC 3001000 LOCK SUB ESP,130 7BC99A71 8B55 10 MOV EDX,DWORD PTR SS:[EBP+10] 7BC99A74 8B45 14 MOV EAX,DWORD PTR SS:[EBP+14] 7BC99A77 885424 1C MOV BYTE PTR SS:[ESP+1C],DL 7BC99A7B 884424 18 MOV BYTE PTR SS:[ESP+18],AL 7BC99A7F C78424 28010000 MOV DWORD PTR SS:[ESP+128],2 7BC99A8A 837D 08 00 CMP DWORD PTR SS:[EBP+8],0 7BC99A8E 74 06 JE SHORT 7BC99A96 ... --- snip --- The trampoline/hook state tracking code gets confused due to 'NtWaitForSingleObject' calling 'NtWaitForMultipleObjects' which causes a recursion in the continuation code. Native NT API doesn't do this by design since each function has an own syscall. If you use a static/inline helper which is shared/called by both, the app starts fine. NOTE: Although the app bundles .NET on its own, you will need 'winetricks -q dotnet20' to work around bug 38956 $ sha1sum Stylizer5Setup.exe fa99802266f80441ac4f091e90b20691e170f12d Stylizer5Setup.exe $ du -sh Stylizer5Setup.exe 16M Stylizer5Setup.exe $ wine --version wine-1.7.49-184-g5021e91 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 30397] New: Spoon Studio 2011 (ex Xenocode) application sandboxing scheme needs support for NtSetInformationFile class FileDispositionInformation (Stylizer 5.x, Visual CSS editor)
by wine-bugs＠winehq.org 17 Nov '21

17 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=30397 Bug #: 30397 Summary: Spoon Studio 2011 (ex Xenocode) application sandboxing scheme needs support for NtSetInformationFile class FileDispositionInformation (Stylizer 5.x, Visual CSS editor) Product: Wine Version: 1.5.1 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, Stylizer 5.x (Visual CSS editor) is wrapped in Xenocode like sandboxing scheme, now called "Spoon Studio 2011". The usual native API hooking in several places. It seems not very happy about some unimplemented NtSetInformationFile classes. ---snip --- ... 0025:Call ntdll.RtlInitUnicodeString(0032f334,008b3068 L"\\??\\C:\\users\\focht\\Local Settings\\Application Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58\\XSandbox.bin.__tmp__") ret=0034d108 0025:Ret ntdll.RtlInitUnicodeString() retval=0032f334 ret=0034d108 0025:Call ntdll.NtOpenFile(0032f308,00110100,0032f31c,0032f2f8,00000007,00000020) ret=0034da48 0025:Ret ntdll.NtOpenFile() retval=00000000 ret=0034da48 0025:Call ntdll.NtSetInformationFile(00000068,0032f300,0032f2cc,00000028,00000004) ret=0034da84 0025:Ret ntdll.NtSetInformationFile() retval=00000000 ret=0034da84 0025:Call ntdll.NtSetInformationFile(00000068,0032f300,0032f31b,00000001,0000000d) ret=0034da9d 0025:fixme:ntdll:NtSetInformationFile Unsupported class (13) 0025:Ret ntdll.NtSetInformationFile() retval=c0000002 ret=0034da9d 0025:Call ntdll.NtClose(00000068) ret=0036b1d3 0025:Ret ntdll.NtClose() retval=00000000 ret=0036b1d3 ... 0025:Call user32.MessageBoxW(00000000,008b2f70 L"The sandbox at \\??\\C:\\users\\focht\\Local Settings\\Application Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58 is corrupt or inaccessible. Please check the location and try again.",008a3f48 L"Spoon Studio 2011",00000010) ret=00396aa6 ... ---snip --- MSDN (ZwSetInformationFile): http://msdn.microsoft.com/en-us/library/windows/hardware/ff567096%28v=vs.85… class 13 -> FILE_DISPOSITION_INFORMATION: http://msdn.microsoft.com/en-us/library/windows/hardware/ff545765%28v=vs.85… Also interesting read: Cygwin's Corinna Vinschen and some MS guy about deletion semantics ;-) http://www.tech-archive.net/Archive/Development/microsoft.public.win32.prog… --- quote --- First off, FILE_DELETE_ON_CLOSE and FileDispositionInformation are NOT the same thing. There are really two parts to delete. The first part is to logically delete the file. This consists of the file system marking the file as deleted and then waiting for the last handle to close. When a file is marked as deleted, many operations (including new opens) fail. Once the last handle as closed, the actual delete of the file can take place. When you open a file with FILE_DELETE_ON_CLOSE, the file is left as is. Neither part of delete is done. The only thing done is to remember that when this handle is closed, the file should be deleted. All operations on the file will proceed as normal. When the handle marked as delete on close is closed, the file is logically deleted. If that handle was the last handle, the file will also actually be deleted. When you use FileDispositionInformation to set a file to deleted, the file is logically deleted right then. Any new opens for the file and many other operations will fail. The file system will not complete the actual removal of the file until the last handle is closed, though. --- quote --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 22