February 2021 - Wine-bugs - list.winehq.org

[Bug 42151] New: Virtual Springfield: Crashes on Startup
by wine-bugs＠winehq.org 17 Jan '24

17 Jan '24

https://bugs.winehq.org/show_bug.cgi?id=42151 Bug ID: 42151 Summary: Virtual Springfield: Crashes on Startup Product: Wine Version: 2.0-rc3 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: crowdiest(a)outlook.com Distribution: --- After issuing the following command: wine VIRTUAL.EXE A "Program Error" message box is displayed, and the following output is written to the terminal: preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 preloader: Warning: failed to reserve range 00010000-00110000 Could not load wine-gecko. HTML rendering will be disabled. preloader: Warning: failed to reserve range 00010000-00110000 wine: configuration in '/home/daniel/.wine' has been updated. wine: Unhandled page fault on write access to 0x00000000 at address 0x4206d0 (thread 0009), starting debugger... preloader: Warning: failed to reserve range 00010000-00110000 Unhandled exception: page fault on write access to 0x00000000 in 32-bit code (0x004206d0). Register dump: CS:0073 SS:007b DS:007b ES:007b FS:0033 GS:003b EIP:004206d0 ESP:0032fdcc EBP:0032fe60 EFLAGS:00010206( R- -- I - -P- ) EAX:00000000 EBX:7b638000 ECX:0032fdac EDX:00000000 ESI:7ffdf000 EDI:0041ce00 Stack dump: 0x0032fdcc: 0041d42f 00010000 00030000 0041c804 0x0032fddc: 0041dd0b 0041ceb2 0041ce00 7ffdf000 0x0032fdec: 7b638000 00000000 00000000 00000000 0x0032fdfc: 00000000 00000000 00000000 00000000 0x0032fe0c: 00000000 00000000 00000000 00000000 0x0032fe1c: 00000000 00000000 00000000 00000000 Backtrace: =>0 0x004206d0 in virtual (+0x206d0) (0x0032fe60) 1 0x7b45ee8c call_process_entry+0xb() in kernel32 (0x0032fe78) 2 0x7b45fdaa start_process+0x59(peb=<couldn't compute location>) [/usr/src/wine-2.0-rc3/dlls/kernel32/process.c:1108] in kernel32 (0x0032fea8) 3 0x7bc80ccc call_thread_func_wrapper+0xb() in ntdll (0x0032fec8) 4 0x7bc83a78 call_thread_func+0xd7(entry=0x7b45fd50, arg=0x7ffdf000, frame=0x32ffc8) [/usr/src/wine-2.0-rc3/dlls/ntdll/signal_i386.c:2759] in ntdll (0x0032ffa8) 5 0x7bc80caa call_thread_entry_point+0x11() in ntdll (0x0032ffc8) 6 0x7bc54399 start_process+0x18(kernel_start=0x7b45fd50) [/usr/src/wine-2.0-rc3/dlls/ntdll/loader.c:3047] in ntdll (0x0032ffe8) 7 0xb7579a3d wine_call_on_stack+0x1c() in libwine.so.1 (0x00000000) 8 0xb7579b73 wine_switch_to_stack+0x22(func=0x7bc54380, arg=0x7b45fd50, stack=0x330000) [/usr/src/wine-2.0-rc3/libs/wine/port.c:77] in libwine.so.1 (0xbfaa79c8) 9 0x7bc5a0ab LdrInitializeThunk+0x22a(kernel_start=<couldn't compute location>, unknown2=<couldn't compute location>, unknown3=<couldn't compute location>, unknown4=<couldn't compute location>) [/usr/src/wine-2.0-rc3/dlls/ntdll/loader.c:3103] in ntdll (0xbfaa7a08) 10 0x7b465cf9 __wine_kernel_init+0xa38() [/usr/src/wine-2.0-rc3/dlls/kernel32/process.c:1302] in kernel32 (0xbfaa88f8) 11 0x7bc5aeeb __wine_process_init+0x14a() [/usr/src/wine-2.0-rc3/dlls/ntdll/loader.c:3312] in ntdll (0xbfaa8968) 12 0xb7577db3 wine_init+0x292(argc=0x2, argv=0xbfaa8ea4, error="", error_size=0x400) [/usr/src/wine-2.0-rc3/libs/wine/loader.c:956] in libwine.so.1 (0xbfaa89b8) 13 0x7c000b7a main+0x79(argc=<is not available>, argv=<is not available>) [/usr/src/wine-2.0-rc3/loader/main.c:254] in <wine-loader> (0xbfaa8df8) 14 0xb73b1697 __libc_start_main+0x106() in libc.so.6 (0x00000000) 0x004206d0: addb %al,0x0(%eax) Modules: Module Address Debug info Name (67 modules) PE 400000- 435000 Export virtual ELF 7a800000-7a935000 Deferred opengl32<elf> \-PE 7a820000-7a935000 \ opengl32 ELF 7b400000-7b7df000 Dwarf kernel32<elf> \-PE 7b410000-7b7df000 \ kernel32 ELF 7bc00000-7bcf7000 Dwarf ntdll<elf> \-PE 7bc10000-7bcf7000 \ ntdll ELF 7c000000-7c004000 Dwarf <wine-loader> ELF 7e12b000-7e131000 Deferred libxfixes.so.3 ELF 7e131000-7e13c000 Deferred libxcursor.so.1 ELF 7e13c000-7e14d000 Deferred libxi.so.6 ELF 7e14d000-7e158000 Deferred libxrandr.so.2 ELF 7e158000-7e163000 Deferred libxrender.so.1 ELF 7e163000-7e169000 Deferred libxxf86vm.so.1 ELF 7e169000-7e18b000 Deferred libxcb.so.1 ELF 7e18b000-7e2ce000 Deferred libx11.so.6 ELF 7e2ce000-7e2e0000 Deferred libxext.so.6 ELF 7e303000-7e38f000 Deferred winex11<elf> \-PE 7e310000-7e38f000 \ winex11 ELF 7e38f000-7e3b3000 Deferred imm32<elf> \-PE 7e3a0000-7e3b3000 \ imm32 ELF 7e3f2000-7e419000 Deferred libexpat.so.1 ELF 7e419000-7e454000 Deferred libfontconfig.so.1 ELF 7e454000-7e46a000 Deferred libz.so.1 ELF 7e46a000-7e4a1000 Deferred libpng16.so.16 ELF 7e4a1000-7e4b2000 Deferred libbz2.so.1 ELF 7e4b2000-7e5f4000 Deferred libglib-2.0.so.0 ELF 7e5f4000-7e675000 Deferred libharfbuzz.so.0 ELF 7e675000-7e70e000 Deferred libfreetype.so.6 ELF 7e70e000-7e75e000 Deferred libncurses.so.5 ELF 7e760000-7e763000 Deferred libxcomposite.so.1 ELF 7e763000-7e766000 Deferred libxinerama.so.1 ELF 7e766000-7e76c000 Deferred libxdmcp.so.6 ELF 7e781000-7e7cb000 Deferred dsound<elf> \-PE 7e790000-7e7cb000 \ dsound ELF 7e7cb000-7e7f6000 Deferred msacm32<elf> \-PE 7e7d0000-7e7f6000 \ msacm32 ELF 7e7f6000-7e876000 Deferred rpcrt4<elf> \-PE 7e800000-7e876000 \ rpcrt4 ELF 7e876000-7e9ac000 Deferred ole32<elf> \-PE 7e890000-7e9ac000 \ ole32 ELF 7e9ac000-7ea64000 Deferred winmm<elf> \-PE 7e9b0000-7ea64000 \ winmm ELF 7ea64000-7ebb6000 Deferred user32<elf> \-PE 7ea80000-7ebb6000 \ user32 ELF 7ebb6000-7ec2c000 Deferred advapi32<elf> \-PE 7ebc0000-7ec2c000 \ advapi32 ELF 7ec2c000-7ed5f000 Deferred gdi32<elf> \-PE 7ec40000-7ed5f000 \ gdi32 ELF 7ed5f000-7ee8d000 Deferred wined3d<elf> \-PE 7ed70000-7ee8d000 \ wined3d ELF 7ee8d000-7ef00000 Deferred ddraw<elf> \-PE 7ee90000-7ef00000 \ ddraw ELF 7ef43000-7ef55000 Deferred libnss_files.so.2 ELF 7ef55000-7ef62000 Deferred libnss_nis.so.2 ELF 7ef62000-7ef7e000 Deferred libnsl.so.1 ELF 7ef7e000-7ef89000 Deferred libnss_compat.so.2 ELF 7ef89000-7efdd000 Deferred libm.so.6 ELF 7efde000-7efe1000 Deferred libxau.so.6 ELF 7efe1000-7effb000 Deferred version<elf> \-PE 7eff0000-7effb000 \ version ELF b7394000-b7399000 Deferred libdl.so.2 ELF b7399000-b7531000 Dwarf libc.so.6 ELF b7531000-b754e000 Deferred libpthread.so.0 ELF b7571000-b7728000 Dwarf libwine.so.1 ELF b7729000-b7750000 Deferred ld-linux.so.2 ELF b7752000-b7753000 Deferred [vdso].so Threads: process tid prio (all id:s are in hex) 00000008 (D) C:\Program Files\FOX\Virtual Springfield\VIRTUAL.EXE 00000009 0 <== 0000000e services.exe 0000003c 0 0000001f 0 00000014 0 00000010 0 0000000f 0 00000012 winedevice.exe 0000001c 0 00000019 0 00000018 0 00000013 0 0000001d plugplay.exe 00000022 0 00000021 0 0000001e 0 00000025 explorer.exe 0000002e 0 0000002d 0 0000002c 0 0000002b 0 00000026 0 System information: Wine build: wine-2.0-rc3 Platform: i386 Version: Windows XP Host system: Linux Host version: 4.4.14-smp -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 10

[Bug 30144] New: Art of Murder - Hunt for the Puppeteer audio issue: speech cut off prematurely
by wine-bugs＠winehq.org 17 Jan '24

17 Jan '24

http://bugs.winehq.org/show_bug.cgi?id=30144 Bug #: 30144 Summary: Art of Murder - Hunt for the Puppeteer audio issue: speech cut off prematurely Product: Wine Version: 1.3.30 Platform: x86 URL: http://www.fileplanet.com/197199/190000/fileinfo/Art-o f-Murder:-Hunt-for-the-Puppeteer-Demo OS/Version: Linux Status: NEW Keywords: download, regression Severity: minor Priority: P2 Component: winealsa.drv AssignedTo: wine-bugs(a)winehq.org ReportedBy: gyebro69(a)gmail.com CC: aeikum(a)codeweavers.com Classification: Unclassified Regression SHA1: 8258a5188cc36563809ac7495e49bc43ae4326e4 In Art of Murder 2 dialogues are corrupted: in a spoken sentence only the first few words can be heard, the rest is skipped. This is after 8258a5188cc36563809ac7495e49bc43ae4326e4 is the first bad commit commit 8258a5188cc36563809ac7495e49bc43ae4326e4 Author: Andrew Eikum <aeikum(a)codeweavers.com> Date: Fri Sep 23 15:03:51 2011 -0500 winealsa.drv: Remove wave, mixer, and dsound driver code. :040000 040000 e34e9dab6f585755d23f4cad91d4af6dc37b786b bf2a47c73bcdd75db339177384a4d566c4fa41e6 M dlls Still present as of wine-1.4-78-g94953f1. Other bugs related to this commit: bug #28856, bug #29497, bug #30143. The linked demo version is in Polish, but speech is in English. Installation of the demo is straightforward. In the main menu click on the topmost button to start a new game. While in the game, right click on any of the inventory items to hear the broken dialogues. The game starts with a long intro video, which is unskippable, thus the generated debug log was 65 MB. I couldn't compress the log below 1 MB, so I uploaded the file here: https://docs.google.com/open?id=0B-tTbLKBl-tOVXlTTjdNMXVRd2FtbF9LRGUxc1FZUQ Fedora 16 x86 Alsa 1.0.25 Pulseaudio is not running Audio device: nVidia Corporation MCP61 High Definition Audio (rev a2) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 16

[Bug 50265] New: Grandia2 Sound Underrun
by WineHQ Bugzilla 17 Jan '24

17 Jan '24

https://bugs.winehq.org/show_bug.cgi?id=50265 Bug ID: 50265 Summary: Grandia2 Sound Underrun Product: Wine Version: 6.0-rc1 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: SolisX007(a)yahoo.com Distribution: --- Created attachment 68804 --> https://bugs.winehq.org/attachment.cgi?id=68804 Grandia2-Terminal.txt Grandia2 movies sound like it's skipping on wine-6.0rc1 on a clean wine prefix. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 2

[Bug 48812] New: Sounds don't play in Blood 2: Choosen
by WineHQ Bugzilla 17 Jan '24

17 Jan '24

https://bugs.winehq.org/show_bug.cgi?id=48812 Bug ID: 48812 Summary: Sounds don't play in Blood 2: Choosen Product: Wine Version: 5.0 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: roland(a)mxchange.org Distribution: --- The sounds, including music don't work in Blood 2: Choosen (game id 29095) but worked in earlier versions. If you need some debug logs, please write back. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 9

[Bug 38028] New: 163music can not glibly playback music
by wine-bugs＠winehq.org 17 Jan '24

17 Jan '24

https://bugs.winehq.org/show_bug.cgi?id=38028 Bug ID: 38028 Summary: 163music can not glibly playback music Product: Wine Version: 1.7.35 Hardware: x86 URL: http://music.163.com OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-dsound Assignee: wine-bugs(a)winehq.org Reporter: hillwoodroc(a)gmail.com CC: fracting(a)gmail.com Distribution: SUSE But We can use winetricks to install directx9 to fix it. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 50108] New: Multiple applications using native API sandboxing / virtualization crash when being relay traced (Adobe Reader 11)
by WineHQ Bugzilla 16 Jan '24

16 Jan '24

https://bugs.winehq.org/show_bug.cgi?id=50108 Bug ID: 50108 Summary: Multiple applications using native API sandboxing / virtualization crash when being relay traced (Adobe Reader 11) Product: Wine Version: 5.21 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: tools Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, encountered while revisiting some Adobe bugs with native API sandboxing enabled (default). Native API sandboxing works as designed under normal conditions, see my no-relay references later. Relay debugging is a developer / triager use-case. Stable download link via Internet Archive: https://web.archive.org/web/20200522053748/http://ardownload.adobe.com/pub/… Acrobat Reader creates a sandboxed process (initially suspended) which crashes in entry point when being relay traced. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files (x86)/Adobe/Reader 11.0/Reader $ WINEDEBUG=+seh,+relay,+server,+ntdll wine ./AcroRd32.exe >>log.txt 2>&1 ... 0024:Call KERNEL32.CreateProcessAsUserW(00000100,0198e508 L"C:\\Program Files (x86)\\Adobe\\Reader 11.0\\Reader\\AcroRd32.exe",0198e618 L"\"C:\\Program Files (x86)\\Adobe\\Reader 11.0\\Reader\\AcroRd32.exe\" --channel=32.1.1899522388 --type=renderer",00000000,00000000,00000000,0100040c,00df6f68,00000000,0031f644,0031f694) ret=0042b162 ... 0130: init_process_done( gui=1, module=00400000, ldt_copy=f7d5d9c0, entry=00401039 ) 0024: *wakeup* signaled=0 0130: init_process_done() = 0 { suspend=1 } ... 0024:Ret KERNEL32.CreateProcessAsUserW() retval=00000001 ret=0042b162 ... 0130:Call ntdll.RtlInitNlsTables(011d0000,011f0000,00fed810,7b081484) ret=7b01d500 0130:Ret ntdll.RtlInitNlsTables() retval=7b081484 ret=7b01d500 0130:Call ntdll.RtlResetRtlTranslations(7b081484) ret=7b01d50b 0130:Ret ntdll.RtlResetRtlTranslations() retval=00000400 ret=7b01d50b 0130:Call ntdll.RtlInitUnicodeString(0031eb78,7b069b30 L"\\Registry\\Machine") ret=7b0387b3 0130:Ret ntdll.RtlInitUnicodeString() retval=00000024 ret=7b0387b3 0130:trace:seh:dispatch_exception code=c0000096 flags=0 addr=00A8C960 ip=00a8c960 tid=0130 0130:trace:seh:dispatch_exception eax=7bc6c000 ebx=0031eb80 ecx=0031eb50 edx=02000000 esi=00000000 edi=00000000 0130:trace:seh:dispatch_exception ebp=0031eb04 esp=0031ea64 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010202 0130:trace:seh:call_stack_handlers calling handler at 0040C7F0 code=c0000096 flags=0 0130:trace:seh:call_stack_handlers handler at 0040C7F0 returned 1 0130:trace:seh:call_stack_handlers calling handler at 7BC513A0 code=c0000096 flags=0 0130:trace:seh:__regs_RtlUnwind code=c0000096 flags=2 0130:trace:seh:__regs_RtlUnwind eax=00000000 ebx=0031eed8 ecx=0031e8a8 edx=0031eed8 esi=00000001 edi=00000000 0130:trace:seh:__regs_RtlUnwind ebp=0031e508 esp=0031e500 eip=7bc512a6 cs=0023 ds=002b fs=0063 gs=006b flags=00000206 0130:trace:seh:__regs_RtlUnwind calling handler at 7BC460F0 code=c0000096 flags=2 0130:trace:seh:__regs_RtlUnwind handler at 7BC460F0 returned 1 0130:trace:seh:__regs_RtlUnwind calling handler at 0040C7F0 code=c0000096 flags=2 0130:trace:seh:__regs_RtlUnwind handler at 0040C7F0 returned 1 0130: select( flags=3, cookie=0031d88c, timeout=0, size=0, prev_apc=0000, result={}, data={}, context={} ) 0130: select() = TIMEOUT { call={APC_NONE}, apc_handle=0000, context={} } 0130:exception c0000096 in PE entry point (proc=7B0272D0,module=7B000000,reason=PROCESS_ATTACH,res=0031FD24) 0130:Ret PE DLL (proc=7B0272D0,module=7B000000 L"kernelbase.dll",reason=PROCESS_ATTACH,res=0031FD24) retval=0 0130:Call PE DLL (proc=7B0272D0,module=7B000000 L"kernelbase.dll",reason=PROCESS_DETACH,res=0031FD24) 0130:Ret PE DLL (proc=7B0272D0,module=7B000000 L"kernelbase.dll",reason=PROCESS_DETACH,res=0031FD24) retval=1 0130:err:module:LdrInitializeThunk "kernelbase.dll" failed to initialize, aborting 0130:err:module:LdrInitializeThunk Initializing dlls for L"C:\\Program Files (x86)\\Adobe\\Reader 11.0\\Reader\\AcroRd32.exe" failed, status c0000096 0130: terminate_process( handle=ffffffff, exit_code=-1073741674 ) 0130: terminate_process() = 0 { self=1 } 0130: *killed* exit_code=-1073741674 --- snip --- The crash is in kernelbase:init_locale() which calls RegCreateKeyExW -> NtCreateKey() NtCreateKey() happens to be the first of the hooked native API functions being called. Wine source: https://source.winehq.org/git/wine.git/blob/70d77a439ab58dcf56664d1545aa0c4… --- snip --- 699 /*********************************************************************** 700 * init_locale 701 */ 702 void init_locale(void) 703 { 704 UINT ansi_cp = 0, oem_cp = 0; 705 USHORT *ansi_ptr, *oem_ptr; 706 void *sort_ptr; 707 LCID lcid = GetUserDefaultLCID(); 708 WCHAR bufferW[80]; 709 DYNAMIC_TIME_ZONE_INFORMATION timezone; 710 GEOID geoid = GEOID_NOT_AVAILABLE; 711 DWORD count, dispos, i; 712 SIZE_T size; 713 HKEY hkey; 714 715 kernel32_handle = GetModuleHandleW( L"kernel32.dll" ); 716 717 GetLocaleInfoW( LOCALE_SYSTEM_DEFAULT, LOCALE_IDEFAULTANSICODEPAGE | LOCALE_RETURN_NUMBER, 718 (WCHAR *)&ansi_cp, sizeof(ansi_cp)/sizeof(WCHAR) ); 719 GetLocaleInfoW( LOCALE_SYSTEM_DEFAULT, LOCALE_IDEFAULTMACCODEPAGE | LOCALE_RETURN_NUMBER, 720 (WCHAR *)&mac_cp, sizeof(mac_cp)/sizeof(WCHAR) ); 721 GetLocaleInfoW( LOCALE_SYSTEM_DEFAULT, LOCALE_IDEFAULTCODEPAGE | LOCALE_RETURN_NUMBER, 722 (WCHAR *)&oem_cp, sizeof(oem_cp)/sizeof(WCHAR) ); 723 724 NtGetNlsSectionPtr( 9, 0, NULL, &sort_ptr, &size ); 725 NtGetNlsSectionPtr( 12, NormalizationC, NULL, (void **)&norm_info, &size ); 726 init_sortkeys( sort_ptr ); 727 728 if (!ansi_cp || NtGetNlsSectionPtr( 11, ansi_cp, NULL, (void **)&ansi_ptr, &size )) 729 NtGetNlsSectionPtr( 11, 1252, NULL, (void **)&ansi_ptr, &size ); 730 if (!oem_cp || NtGetNlsSectionPtr( 11, oem_cp, 0, (void **)&oem_ptr, &size )) 731 NtGetNlsSectionPtr( 11, 437, NULL, (void **)&oem_ptr, &size ); 732 NtCurrentTeb()->Peb->AnsiCodePageData = ansi_ptr; 733 NtCurrentTeb()->Peb->OemCodePageData = oem_ptr; 734 NtCurrentTeb()->Peb->UnicodeCaseTableData = sort.casemap; 735 RtlInitNlsTables( ansi_ptr, oem_ptr, sort.casemap, &nls_info ); 736 RtlResetRtlTranslations( &nls_info ); 737 738 RegCreateKeyExW( HKEY_LOCAL_MACHINE, L"System\\CurrentControlSet\\Control\\Nls", 739 0, NULL, REG_OPTION_NON_VOLATILE, KEY_ALL_ACCESS, NULL, &nls_key, NULL ); ... --- snip --- Entry point code of <ntdll.NtCreateKey> is read two times: --- snip --- 0024:Call KERNEL32.ReadProcessMemory(0000010c,7bc036ac,0031f7d0,00000018,0031f7cc) ret=004614db ... 0024: read_process_memory( handle=010c, addr=7bc036ac ) 0130: *signal* signal=19 0024: read_process_memory() = 0 { data={8b,ff,55,8b,ec,5d,68,83,00,07,00,b8,00,c0,c6,7b,50,ff,50,04,c2,1c,00,90} } ... 0024:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=004614db 0024:Call KERNEL32.ReadProcessMemory(0000010c,7bc036ac,0031f7d4,00000010,0031f7d0) ret=004617e7 0024: read_process_memory( handle=010c, addr=7bc036ac ) 0130: *signal* signal=19 0024: read_process_memory() = 0 { data={8b,ff,55,8b,ec,5d,68,83,00,07,00,b8,00,c0,c6,7b} } ... 0024:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=004617e7 --- snip --- * 0x18 bytes = pre-analysis * 0x10 bytes = unknown native API entry signature -> defaults to syscall style The <ntdll.NtCreateKey> relay entry disassembly: --- snip --- 7BC036AC | 8BFF | mov edi,edi | hotpatch prolog start 7BC036AE | 55 | push ebp | 7BC036AF | 8BEC | mov ebp,esp | 7BC036B1 | 5D | pop ebp | hotpatch prolog end 7BC036B2 | 68 83000700 | push 70083 | 7BC036B7 | B8 00C0C67B | mov eax,ntdll.7BC6C000 | 7BC036BC | 50 | push eax | not copied 7BC036BD | FF50 04 | call dword ptr ds:[eax+4] | not copied 7BC036C0 | C2 1C00 | ret 1C | not copied 7BC036C3 | 90 | nop | --- snip --- Wine source, emitting relay entry: https://source.winehq.org/git/wine.git/blob/70d77a439ab58dcf56664d1545aa0c4… --- snip --- 212 /******************************************************************* 213 * output_relay_debug 214 * 215 * Output entry points for relay debugging 216 */ 217 static void output_relay_debug( DLLSPEC *spec ) 218 { ... 244 output( "\t.text\n" ); 245 output( "__wine_spec_relay_entry_points:\n" ); 246 output( "\tnop\n" ); /* to avoid 0 offset */ 247 248 for (i = spec->base; i <= spec->limit; i++) 249 { 250 ORDDEF *odp = spec->ordinals[i]; 251 252 if (!needs_relay( odp )) continue; 253 254 switch (target_cpu) 255 { 256 case CPU_x86: 257 output( "\t.align %d\n", get_alignment(4) ); 258 output( "\t.long 0x90909090,0x90909090\n" ); 259 output( ".L__wine_spec_relay_entry_point_%d:\n", i ); 260 output_cfi( ".cfi_startproc" ); 261 output( "\t.byte 0x8b,0xff,0x55,0x8b,0xec,0x5d\n" ); /* hotpatch prolog */ 262 if (odp->flags & (FLAG_THISCALL | FLAG_FASTCALL)) /* add the register arguments */ 263 { 264 output( "\tpopl %%eax\n" ); 265 if ((odp->flags & FLAG_FASTCALL) && get_args_size( odp ) > 4) output( "\tpushl %%edx\n" ); 266 output( "\tpushl %%ecx\n" ); 267 output( "\tpushl %%eax\n" ); 268 } 269 output( "\tpushl $%u\n", (odp->u.func.args_str_offset << 16) | (i - spec->base) ); 270 output_cfi( ".cfi_adjust_cfa_offset 4" ); 271 272 if (UsePIC) 273 { 274 output( "\tcall %s\n", asm_name("__wine_spec_get_pc_thunk_eax") ); 275 output( "1:\tleal .L__wine_spec_relay_descr-1b(%%eax),%%eax\n" ); 276 needs_get_pc_thunk = 1; 277 } 278 else output( "\tmovl $.L__wine_spec_relay_descr,%%eax\n" ); 279 output( "\tpushl %%eax\n" ); 280 output_cfi( ".cfi_adjust_cfa_offset 4" ); 281 282 output( "\tcall *4(%%eax)\n" ); 283 output_cfi( ".cfi_adjust_cfa_offset -8" ); 284 if (odp->type == TYPE_STDCALL) 285 output( "\tret $%u\n", get_args_size( odp )); 286 else 287 output( "\tret\n" ); 288 output_cfi( ".cfi_endproc" ); 289 break; --- snip --- For reference, <ntdll.NtCreateKey> without relay trace (syscall style,fits into 16 bytes): --- snip --- 7BC0B9B0 | B8 1C000000 | mov eax,1C | 7BC0B9B5 | BA D0C5C07B | mov edx,ntdll.7BC0C5D0 | 7BC0B9BA | FFD2 | call edx | 7BC0B9BC | C2 1C00 | ret 1C | 7BC0B9BF | 90 | nop | ... 7BC0C5D0 | FF25 18C0C67B | jmp dword ptr ds:[<__wine_syscall_dispatcher>] | --- snip --- The parent process writes a copy of the original native API entry and trampoline code into child process (sandbox) address space: --- snip --- 0024:Call KERNEL32.WriteProcessMemory(0000010c,00a8c950,019da140,00000036,0031f7cc) ret=00430409 ... 0024: write_process_memory( handle=010c, addr=00a8c950, data={8b,ff,55,8b,ec,5d,68,83,00,07,00,b8,00,c0,c6,7b,6c,00,00,00,00,00,00,00,83,ec,08,52,8b,54,24,0c,89,54,24,08,c7,44,24,0c,50,c9,a8,00,c7,44,24,04,70,8a,41,00,5a,c3} ) 0130: *signal* signal=19 0024: write_process_memory() = 0 ... 0024:Ret KERNEL32.WriteProcessMemory() retval=00000001 ret=00430409 --- snip --- --- snip --- 00A8C950 | 8BFF | mov edi,edi | org copy of 00A8C952 | 55 | push ebp | NtCreateKey 00A8C953 | 8BEC | mov ebp,esp | relay entry 00A8C955 | 5D | pop ebp | 00A8C956 | 68 83000700 | push 70083 | 00A8C95B | B8 00C0C67B | mov eax,ntdll.7BC6C000 | 00A8C960 | 6C | insb | *boom* 00A8C962 | 0000 | add byte ptr ds:[eax],al | 00A8C964 | 0000 | add byte ptr ds:[eax],al | 00A8C966 | 0000 | add byte ptr ds:[eax],al | 00A8C967 | 00 00A8C968 | 83EC 08 | sub esp,8 | trampoline 00A8C96C | 52 | push edx | 00A8C970 | 8B5424 0C | mov edx,dword ptr ss:[esp+C] | 00A8C974 | 895424 08 | mov dword ptr ss:[esp+8],edx | 00A8C978 | C74424 0C 50C9A800 | mov dword ptr ss:[esp+C],A8C950 | NtCreateKey 00A8C980 | C74424 04 708A4100 | mov dword ptr ss:[esp+4],acrord32.418A70 | hook impl. 00A8C988 | 5A | pop edx | 00A8C989 | C3 | ret | --- snip --- and patches original <ntdll.NtCreateKey> relay entry: --- snip --- 0024:Call KERNEL32.WriteProcessMemory(0000010c,7bc036ac,0031f7d4,0000000c,0031f798) ret=004304ed ... 0024: write_process_memory( handle=010c, addr=7bc036ac, data={b8,ff,55,8b,ec,ba,68,c9,a8,00,ff,e2} ) 0130: *signal* signal=19 0024: write_process_memory() = 0 ... 0024:Ret KERNEL32.WriteProcessMemory() retval=00000001 ret=004304ed --- snip --- Patched <ntdll.NtCreateKey> relay entry: --- snip --- 7BC036AC | B8 FF558BEC | mov eax,EC8B55FF | garbage #sysc 7BC036B1 | BA 68C9A800 | mov edx,A8C968 | trampoline 7BC036B6 | FFE2 | jmp edx | --- snip --- It crashes when the hook calls the original relay entry code which was only partially copied. For reference how it looks like without relay - working as intended: --- snip --- 00576950 | B8 1C000000 | mov eax,1C | org copy of 00576955 | BA D0C5C07B | mov edx,ntdll.7BC0C5D0 | NtCreateKey 0057695A | FFD2 | call edx | entry 0057695C | C2 1C00 | ret 1C | 0057695F | 90 | nop | 00576960 | 6C | insb | fill 00576961 | 0000 | add byte ptr ds:[eax],al | 00576963 | 0000 | add byte ptr ds:[eax],al | 00576965 | 0000 | add byte ptr ds:[eax],al | 00576967 | 00 00576968 | 83EC 08 | sub esp,8 | trampoline 0057696C | 52 | push edx | 00576970 | 895424 08 | mov dword ptr ss:[esp+8],edx | 00576974 | C74424 0C 50695700 | mov dword ptr ss:[esp+C],576950 | NtCreateKey 0057697C | C74424 04 708A4100 | mov dword ptr ss:[esp+4],acrord32.418A70 | hook impl. 00576984 | 5A | pop edx | 00576985 | C3 | ret | --- snip --- Patched <ntdll.NtCreateKey> entry: --- snip --- 7BC0B9B0 | B8 1C000000 | mov eax,1C | org #sysc 7BC0B9B5 | BA 68695700 | mov edx,576968 | trampoline 7BC0B9BA | FFE2 | jmp edx 7BC0B9BC | C2 1C00 | retn 1C 7BC0B9BF | 90 | nop --- snip --- Yes, I know it's possible to disable relay thunks for native API (RelayExclude -> ntdll.*), even for a sub-set (the ones being hooked) to avoid crashes. Maybe something can be done without resorting to that functionality. If it's not worth to do extra handling for NT syscall relay thunks then you might resolve this one as 'WONTFIX'. $ sha1sum AdbeRdr11004_en_US.exe 9c295c16d374735bf292ef6c630c9ab392c22500 AdbeRdr11004_en_US.exe $ du -sh AdbeRdr11004_en_US.exe 49M AdbeRdr11004_en_US.exe $ wine --version wine-5.21 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 49037] New: Japanese Visual Novel "Natural Vacation" gives error MessageBox
by WineHQ Bugzilla 15 Jan '24

15 Jan '24

https://bugs.winehq.org/show_bug.cgi?id=49037 Bug ID: 49037 Summary: Japanese Visual Novel "Natural Vacation" gives error MessageBox Product: Wine Version: 5.7 Hardware: x86 OS: Linux Status: NEW Severity: trivial Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: dark.shadow4(a)web.de Distribution: --- Created attachment 67016 --> https://bugs.winehq.org/attachment.cgi?id=67016 Screenshot on wine See the attached picture. You can close the messagebox again and it seems to work just fine, but it's a bit annoying. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 7

[Bug 41739] New: Yesterday crashes at the savegame selection screen ( 1st run)
by wine-bugs＠winehq.org 15 Jan '24

15 Jan '24

https://bugs.winehq.org/show_bug.cgi?id=41739 Bug ID: 41739 Summary: Yesterday crashes at the savegame selection screen (1st run) Product: Wine Version: 1.9.22 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: wine-devel(a)hurrikhan.eu Distribution: --- Created attachment 56179 --> https://bugs.winehq.org/attachment.cgi?id=56179 filtered logs followed by the backtrace of the error I start the game Yesterday.exe, on steam. The game crashes (obvious null pointer at the 16th byte of a struct) as soon as the savegame selection is shown. There is is a fixme reporting a call to SystemParametersInfoW that says "unknown action 116" (documented as "get audio description") There is also a warning on cert_verify_proc_win (reported for another game) I've attached the logs "WARNING\|Unknown\|fixme\|crash\|Yesterday\|psengine" -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 15

[Bug 11320] New: AVP Gold fails to install - can' t find audio track information
by wine-bugs＠winehq.org 15 Jan '24

15 Jan '24

http://bugs.winehq.org/show_bug.cgi?id=11320 Summary: AVP Gold fails to install - can't find audio track information Product: Wine Version: 0.9.53. Platform: All OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: jeffzaroyko(a)gmail.com wine-0.9.53, Ubuntu 7.04 AVP Gold (Retail) Installer checks for a valid CD2 (audio cdrom) by attempting to read track information using CreateFileW against where it expects .cda files to exist warn:file:CreateFileW Unable to create file L"d:\\track01.cda" (status c0000034) normally in a windows environment, the root of a cdrom drive will have an .cda file for each track which contains data about the track since these don't exist when running the installer in wine it fails. someone has published some details on the file format here: http://www.moon-soft.com/program/FORMAT/sound/cda.htm -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 17

[Bug 9916] New: "make test" usually fails
by wine-bugs＠winehq.org 15 Jan '24

15 Jan '24

http://bugs.winehq.org/show_bug.cgi?id=9916 Summary: "make test" usually fails Product: Wine Version: 0.9.46. Platform: Other OS/Version: other Status: NEW Severity: enhancement Priority: P2 Component: wine-misc AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com "make test" should usually run well. Right now, it usually fails badly. Right now, on my machine, it: put up a modal dialog once (requiring a mouse click), hung once (requiring a 'wineserver -k'), dropped me into the debugger once (requiring a 'wineserver -k'), screwed up my screen resolution once, and had 22 package failures and 169 individual test failures. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 118