March 2021 - Wine-bugs - list.winehq.org

[Bug 44927] New: StarForce v3 kernel driver 'sfdrv01' causes 'winedevice' hosting process to crash due to relocation entry crossing page boundary
by wine-bugs＠winehq.org 16 Jul '21

16 Jul '21

https://bugs.winehq.org/show_bug.cgi?id=44927 Bug ID: 44927 Summary: StarForce v3 kernel driver 'sfdrv01' causes 'winedevice' hosting process to crash due to relocation entry crossing page boundary Product: Wine Version: 3.5 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: programs Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. --- snip --- $ WINEDEBUG=+seh,+relay,+ntoskrnl,+ntdll,+module,+virtual,+winedevice wine notepad >>log.txt 2>&1 ... 0026:trace:winedevice:load_driver loading driver L"System32\\drivers\\sfdrv01.sys" 0026:Call KERNEL32.LoadLibraryW(0011cc98 L"System32\\drivers\\sfdrv01.sys") ret=7effa9de ... 0026:trace:module:load_native_dll Trying native dll L"C:\\windows\\System32\\drivers\\sfdrv01.sys" 0026:trace:virtual:map_view got mem in reserved area 0x780000-0x791000 0026:trace:module:map_image mapped PE file at 0x780000-0x791000 0026:trace:module:map_image mapping section .text at 0x781000 off 400 size 1e00 virt 1d5a flags 68000020 0026:trace:module:map_image clearing 0x782e00 - 0x783000 0026:trace:module:map_image mapping section .rdata at 0x783000 off 2200 size 600 virt 421 flags 48000040 0026:trace:module:map_image clearing 0x783600 - 0x784000 0026:trace:module:map_image mapping section .data at 0x784000 off 2800 size 400 virt 1420 flags c8000040 0026:trace:module:map_image clearing 0x784400 - 0x785000 0026:trace:module:map_image mapping section PAGE at 0x786000 off 2c00 size 6e00 virt 6d7e flags 60000020 0026:trace:module:map_image clearing 0x78ce00 - 0x78d000 0026:trace:module:map_image mapping section INIT at 0x78d000 off 9a00 size 1200 virt 101a flags e2000020 0026:trace:module:map_image clearing 0x78e200 - 0x78f000 0026:trace:module:map_image mapping section .rsrc at 0x78f000 off ac00 size 400 virt 3f0 flags 42000040 0026:trace:module:map_image clearing 0x78f400 - 0x790000 0026:trace:module:map_image mapping section .reloc at 0x790000 off b000 size a00 virt 9fc flags 42000040 0026:trace:module:map_image clearing 0x790a00 - 0x791000 0026:trace:virtual:VIRTUAL_DumpView View: 0x780000 - 0x790fff (image) 0026:trace:virtual:VIRTUAL_DumpView 0x780000 - 0x780fff c-r-- 0026:trace:virtual:VIRTUAL_DumpView 0x781000 - 0x782fff c-r-x 0026:trace:virtual:VIRTUAL_DumpView 0x783000 - 0x783fff c-r-- 0026:trace:virtual:VIRTUAL_DumpView 0x784000 - 0x785fff c-rW- 0026:trace:virtual:VIRTUAL_DumpView 0x786000 - 0x78cfff c-r-x 0026:trace:virtual:VIRTUAL_DumpView 0x78d000 - 0x78efff c-rWx 0026:trace:virtual:VIRTUAL_DumpView 0x78f000 - 0x790fff c-r-- ... 0026:Ret KERNEL32.LoadLibraryW() retval=00780000 ret=7effa9de 0026:Call ntoskrnl.exe.RtlImageNtHeader(00780000) ret=7effa9ff 0026:Call ntdll.RtlImageNtHeader(00780000) ret=7bc7f49b 0026:Ret ntdll.RtlImageNtHeader() retval=007800d8 ret=7bc7f49b 0026:Ret ntoskrnl.exe.RtlImageNtHeader() retval=007800d8 ret=7effa9ff 0026:Call ntoskrnl.exe.NtQuerySystemInformation(00000000,0065f9c4,0000002c,00000000) ret=7effaa32 0026:Call ntdll.NtQuerySystemInformation(00000000,0065f9c4,0000002c,00000000) ret=7bc7f49b 0026:trace:ntdll:NtQuerySystemInformation (0x00000000,0x65f9c4,0x0000002c,(nil)) 0026:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7bc7f49b 0026:Ret ntoskrnl.exe.NtQuerySystemInformation() retval=00000000 ret=7effaa32 0026:Call ntoskrnl.exe.RtlImageDirectoryEntryToData(00780000,00000001,00000005,0065f9c0) ret=7effaa66 0026:Call ntdll.RtlImageDirectoryEntryToData(00780000,00000001,00000005,0065f9c0) ret=7bc7f49b 0026:Ret ntdll.RtlImageDirectoryEntryToData() retval=00790000 ret=7bc7f49b 0026:Ret ntoskrnl.exe.RtlImageDirectoryEntryToData() retval=00790000 ret=7effaa66 0026:trace:winedevice:load_driver_module L"System32\\drivers\\sfdrv01.sys": relocating from 0x10000 to 0x780000 0026:Call KERNEL32.VirtualProtect(00781000,00001000,00000040,0065f9bc) ret=7effaafa 0026:trace:virtual:NtProtectVirtualMemory 0xffffffff 0x781000 00001000 00000040 0026:trace:virtual:VIRTUAL_DumpView View: 0x780000 - 0x790fff (image) 0026:trace:virtual:VIRTUAL_DumpView 0x780000 - 0x780fff c-r-- 0026:trace:virtual:VIRTUAL_DumpView 0x781000 - 0x781fff c-rWx 0026:trace:virtual:VIRTUAL_DumpView 0x782000 - 0x782fff c-r-x 0026:trace:virtual:VIRTUAL_DumpView 0x783000 - 0x783fff c-r-- 0026:trace:virtual:VIRTUAL_DumpView 0x784000 - 0x785fff c-rW- 0026:trace:virtual:VIRTUAL_DumpView 0x786000 - 0x78cfff c-r-x 0026:trace:virtual:VIRTUAL_DumpView 0x78d000 - 0x78efff c-rWx 0026:trace:virtual:VIRTUAL_DumpView 0x78f000 - 0x790fff c-r-- 0026:Ret KERNEL32.VirtualProtect() retval=00000001 ret=7effaafa ... 0026:Call ntdll.LdrProcessRelocationBlock(00781000,00000082,00790008,00770000) ret=7effab18 ... 0026:Ret ntdll.LdrProcessRelocationBlock() retval=0079010c ret=7effab18 ... 0026:Call KERNEL32.VirtualProtect(00788000,00001000,00000040,0065f9bc) ret=7effaafa 0026:trace:virtual:NtProtectVirtualMemory 0xffffffff 0x788000 00001000 00000040 0026:trace:virtual:VIRTUAL_DumpView View: 0x780000 - 0x790fff (image) 0026:trace:virtual:VIRTUAL_DumpView 0x780000 - 0x780fff c-r-- 0026:trace:virtual:VIRTUAL_DumpView 0x781000 - 0x782fff c-r-x 0026:trace:virtual:VIRTUAL_DumpView 0x783000 - 0x783fff c-r-- 0026:trace:virtual:VIRTUAL_DumpView 0x784000 - 0x785fff c-rW- 0026:trace:virtual:VIRTUAL_DumpView 0x786000 - 0x787fff c-r-x 0026:trace:virtual:VIRTUAL_DumpView 0x788000 - 0x788fff c-rWx 0026:trace:virtual:VIRTUAL_DumpView 0x789000 - 0x78cfff c-r-x 0026:trace:virtual:VIRTUAL_DumpView 0x78d000 - 0x78efff c-rWx 0026:trace:virtual:VIRTUAL_DumpView 0x78f000 - 0x790fff c-r-- 0026:Ret KERNEL32.VirtualProtect() retval=00000001 ret=7effaafa 0026:Call ntdll.LdrProcessRelocationBlock(00788000,00000028,00790388,00770000) ret=7effab18 ... 0026:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7bc6a3aa ip=7bc6a3aa tid=0026 0026:trace:seh:raise_exception info[0]=00000001 0026:trace:seh:raise_exception info[1]=00789000 0026:trace:seh:raise_exception eax=00788ffe ebx=0065f920 ecx=0001302c edx=0078302c esi=0065f970 edi=0065f930 0026:trace:seh:raise_exception ebp=0065f908 esp=0065f8e0 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010202 0026:trace:seh:call_vectored_handlers calling handler at 0x7ec122b1 code=c0000005 flags=0 0026:trace:seh:call_vectored_handlers handler at 0x7ec122b1 returned 0 0026:trace:seh:call_stack_handlers calling handler at 0x7bcb1a8e code=c0000005 flags=0 0026:Call KERNEL32.UnhandledExceptionFilter(0065f3e4) ret=7bcb1ac9 ... --- snip --- Relocation directory: --- snip --- ->Relocation Directory 1. Relocation Block: VirtualAddress: 0x00001000 (".text") SizeOfBlock: 0x0000010C (0x0082 block entries) RVA Type ---------- ----------------- 0x00001031 HIGHLOW 0x00001056 HIGHLOW ... 0x00001FA8 HIGHLOW 0x00001FC5 HIGHLOW ... 7. Relocation Block: VirtualAddress: 0x00008000 ("PAGE") SizeOfBlock: 0x00000058 (0x0028 block entries) RVA Type ---------- ----------------- 0x00008CCA HIGHLOW 0x00008D57 HIGHLOW ... 0x00008FED HIGHLOW 0x00008FFE HIGHLOW n/a ABSOLUTE ... --- snip --- Last entry (39), RVA 0x8FFE crosses the page boundary. Source: https://source.winehq.org/git/wine.git/blob/HEAD:/programs/winedevice/devic… --- snip --- 98 static HMODULE load_driver_module( const WCHAR *name ) 99 { 100 IMAGE_NT_HEADERS *nt; 101 const IMAGE_IMPORT_DESCRIPTOR *imports; 102 SYSTEM_BASIC_INFORMATION info; 103 int i; 104 INT_PTR delta; 105 ULONG size; 106 HMODULE module = LoadLibraryW( name ); 107 108 if (!module) return NULL; 109 nt = RtlImageNtHeader( module ); 110 111 if (!(delta = (char *)module - (char *)nt->OptionalHeader.ImageBase)) return module; 112 113 /* the loader does not apply relocations to non page-aligned binaries or executables, 114 * we have to do it ourselves */ 115 116 NtQuerySystemInformation( SystemBasicInformation, &info, sizeof(info), NULL ); 117 if (nt->OptionalHeader.SectionAlignment < info.PageSize || 118 !(nt->FileHeader.Characteristics & IMAGE_FILE_DLL)) 119 { 120 DWORD old; 121 IMAGE_BASE_RELOCATION *rel, *end; 122 123 if ((rel = RtlImageDirectoryEntryToData( module, TRUE, IMAGE_DIRECTORY_ENTRY_BASERELOC, &size ))) 124 { 125 WINE_TRACE( "%s: relocating from %p to %p\n", 126 wine_dbgstr_w(name), (char *)module - delta, module ); 127 end = (IMAGE_BASE_RELOCATION *)((char *)rel + size); 128 while (rel < end && rel->SizeOfBlock) 129 { 130 void *page = (char *)module + rel->VirtualAddress; 131 VirtualProtect( page, info.PageSize, PAGE_EXECUTE_READWRITE, &old ); 132 rel = LdrProcessRelocationBlock( page, (rel->SizeOfBlock - sizeof(*rel)) / sizeof(USHORT), 133 (USHORT *)(rel + 1), delta ); 134 if (old != PAGE_EXECUTE_READWRITE) VirtualProtect( page, info.PageSize, old, &old ); 135 if (!rel) goto error; 136 } 137 /* make sure we don't try again */ 138 size = FIELD_OFFSET( IMAGE_NT_HEADERS, OptionalHeader ) + nt->FileHeader.SizeOfOptionalHeader; 139 VirtualProtect( nt, size, PAGE_READWRITE, &old ); 140 nt->OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_BASERELOC].VirtualAddress = 0; 141 VirtualProtect( nt, size, old, &old ); 142 } 143 } --- snip --- $ sha1sum tmsunrisedemo_setup.exe 2d44577a71718464c595d9da91a017fb0914afc4 tmsunrisedemo_setup.exe $ du -sh tmsunrisedemo_setup.exe 210M tmsunrisedemo_setup.exe $ wine --version wine-3.5-91-g3263d51a1f Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 23474] New: Call to unimplemented function ntoskrnl.exe.IoCreateSynchronizationEvent
by wine-bugs＠winehq.org 16 Jul '21

16 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=23474 Summary: Call to unimplemented function ntoskrnl.exe.IoCreateSynchronizationEvent Product: Wine Version: 1.2-rc5 Platform: x86 URL: http://www.star-force.com/support/sfdrvup.zip OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: markk(a)clara.co.uk Created an attachment (id=29295) --> (http://bugs.winehq.org/attachment.cgi?id=29295) Console output on running sfdrvup.exe I'm not sure whether this should be part of bug 3260. It's related to the StarForce protection driver, but not an actual copy-protection check failing. I tried running the StarForce protection driver update from http://www.star-force.com/support/sfdrvup.zip Note: sfdrvup.exe requires that some version of the protection driver already be installed. I had previously installed a game which uses StarForce under Wine. Console output is attached, but these lines stood out: wine: Call from 0x7b836822 to unimplemented function ntoskrnl.exe.IoCreateSynchronizationEvent, aborting wine: Unimplemented function ntoskrnl.exe.IoCreateSynchronizationEvent called at address 0x7b836822 (thread 0024), starting debugger... Unhandled exception: unimplemented function ntoskrnl.exe.IoCreateSynchronizationEvent called in 32-bit code (0x7b836822). So maybe some minimal implementation of IoCreateSynchronizationEvent could help here? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 4

[Bug 10407] New: TrackMania Nations fails due serveral unimplemented functions
by wine-bugs＠winehq.org 16 Jul '21

16 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=10407 Summary: TrackMania Nations fails due serveral unimplemented functions Product: Wine Version: CVS/GIT Platform: PC-x86-64 URL: http://www.trackmanianations.com/ OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-misc AssignedTo: wine-bugs(a)winehq.org ReportedBy: greg87(a)online.de wine: Call from 0x7b8442f0 to unimplemented function ntoskrnl.exe.IoCreateUnprotectedSymbolicLink, aborting wine: Call from 0x7b8442f0 to unimplemented function ntoskrnl.exe.ExInitializeZone, aborting wine: Call from 0x7b8442f0 to unimplemented function ntoskrnl.exe.ExInterlockedAddLargeInteger, aborting wine: Call from 0x7b8442f0 to unimplemented function ntoskrnl.exe.IoCreateSynchronizationEvent, aborting wine: Call from 0x7b8442f0 to unimplemented function ntoskrnl.exe.ExInitializeResourceLite, aborting Next showstopper is for sure the starforce protection... -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 14

[Bug 44923] New: Failing kernel driver services can stall WINEPREFIX bootstrapping/ startup for a considerable time when configured as autostart
by wine-bugs＠winehq.org 16 Jul '21

16 Jul '21

https://bugs.winehq.org/show_bug.cgi?id=44923 Bug ID: 44923 Summary: Failing kernel driver services can stall WINEPREFIX bootstrapping/startup for a considerable time when configured as autostart Product: Wine Version: 3.5 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: programs Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, since bug 38836 which have synchronous entry point exection of kernel drivers which is correct behaviour. Unfortunately the way it was implemented results in considerable wait when drivers fail in entry point which is still very common for various (unsupported) copy protection drivers. This leads to a stall of WINEPREFIX bootstrapping when drivers have been configured for autostart. End users will be definitely confused because Wine appears to hang/freeze (with no visible user interface) when one or multiple drivers are failing. Along with some scary looking console messages. Example of failing StarForce v3 (actual driver problem is not the point of this ticket): Console log (driver configured as autostart service): --- snip --- $ WINEDEBUG=+timestamp notepad wine: Unhandled page fault on write access to 0x00789000 at address 0x7bc6b20a (thread 0025), starting debugger... 8362.755:000f:err:service:process_send_command service protocol error - failed to read pipe r = 0 count = 0! 8362.755:000f:fixme:service:scmdatabase_autostart_services Auto-start service L"sfdrv01" failed to start: 1053 8362.766:0033:fixme:ntoskrnl:IoCreateSynchronizationEvent (0x65fcb0 0x65fcbc) stub 8362.766:0033:err:winedevice:async_create_driver failed to create driver L"sfhlp02": c000009a 8367.767:0033:err:ntdll:RtlpWaitForCriticalSection section 0x7efff728 "/home/focht/projects/wine/wine.repo/src/programs/winedevice/device.c: drivers_cs" wait timed out in thread 0033, blocked by 0031, retrying (60 sec) 8372.767:000f:err:service:process_send_command receiving command result timed out 8372.767:000f:fixme:service:scmdatabase_autostart_services Auto-start service L"sfhlp02" failed to start: 1053 8392.779:0031:fixme:ntdll:RtlNtStatusToDosErrorNoTeb no mapping for 0000041d --- snip --- Trace log: --- snip --- ... 0033:Ret advapi32.SetServiceStatus() retval=00000001 ret=7effb485 0033:Call KERNEL32.CreateEventW(00000000,00000001,00000000,00000000) ret=7effbbb4 0033:Ret KERNEL32.CreateEventW() retval=0000003c ret=7effbbb4 0033:Call KERNEL32.TrySubmitThreadpoolCallback(7effb78e,0011b960,0043fd34) ret=7effbbd0 ... 0033:Ret KERNEL32.TrySubmitThreadpoolCallback() retval=00000001 ret=7effbbd0 0036:Starting thread proc 0x7bca3cc1 (arg=0x11cb80) 0033:Call KERNEL32.WaitForSingleObject(0000003c,00007530) ret=7effbbfb 0036:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7effb7d7 0036:Ret ntdll.RtlAllocateHeap() retval=0011cbf0 ret=7effb7d7 0036:Call ntoskrnl.exe.RtlInitUnicodeString(0065fdc0,0011cbf0 L"\\Driver\\sfhlp02") ret=7effb81e 0036:Call ntdll.RtlInitUnicodeString(0065fdc0,0011cbf0 L"\\Driver\\sfhlp02") ret=7bc803ab 0036:Ret ntdll.RtlInitUnicodeString() retval=0065fdc0 ret=7bc803ab 0036:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0065fdc0 ret=7effb81e 0036:Call ntoskrnl.exe.IoCreateDriver(0065fdc0,7effb15a) ret=7effb832 0036:trace:ntoskrnl:IoCreateDriver (L"\\Driver\\sfhlp02", 0x7effb15a) ... 0036:Call driver init 0x785300 (obj=0x11cc28,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\sfhlp02") 0036:Call ntoskrnl.exe.RtlInitUnicodeString(0065fc84,00785000 L"\\Device\\sfhlp02") ret=007850b8 0036:Call ntdll.RtlInitUnicodeString(0065fc84,00785000 L"\\Device\\sfhlp02") ret=7bc803ab 0036:Ret ntdll.RtlInitUnicodeString() retval=0065fc84 ret=7bc803ab ... 0036:Call ntoskrnl.exe.IoCreateDevice(0011cc28,00000000,0065fc84,00009000,00000000,00000000,00783004) ret=007850f8 0036:trace:ntoskrnl:IoCreateDevice (0x11cc28, 0, L"\\Device\\sfhlp02", 36864, 0, 0, 0x783004) ... 0036:Ret ntoskrnl.exe.IoCreateDevice() retval=00000000 ret=007850f8 0036:Call ntoskrnl.exe.IoCreateSymbolicLink(0065fc6c,0065fc84) ret=00785114 0036:trace:ntoskrnl:IoCreateSymbolicLink L"\\DosDevices\\sfhlp02" -> L"\\Device\\sfhlp02" 0036:Call ntdll.NtCreateSymbolicLinkObject(0065fbe4,000f0001,0065fbcc,0065fc84) ret=7ec1588e 0036:Ret ntdll.NtCreateSymbolicLinkObject() retval=00000000 ret=7ec1588e 0036:Ret ntoskrnl.exe.IoCreateSymbolicLink() retval=00000000 ret=00785114 0036:Call ntoskrnl.exe.IoCreateDevice(0011cc28,00000000,0065fc7c,00009001,00000000,00000000,00783008) ret=0078513f 0036:trace:ntoskrnl:IoCreateDevice (0x11cc28, 0, L"\\Device\\sfhlp02i", 36865, 0, 0, 0x783008) ... 0036:Ret ntoskrnl.exe.IoCreateDevice() retval=00000000 ret=0078513f 0036:Call ntoskrnl.exe.IoCreateSymbolicLink(0065fc74,0065fc7c) ret=0078515b 0036:trace:ntoskrnl:IoCreateSymbolicLink L"\\DosDevices\\sfhlp02i" -> L"\\Device\\sfhlp02i" 0036:Call ntdll.NtCreateSymbolicLinkObject(0065fbe4,000f0001,0065fbcc,0065fc7c) ret=7ec1588e 0036:Ret ntdll.NtCreateSymbolicLinkObject() retval=00000000 ret=7ec1588e 0036:Ret ntoskrnl.exe.IoCreateSymbolicLink() retval=00000000 ret=0078515b ... 0036:Call ntoskrnl.exe.IoDeleteDevice(0011ce58) ret=00785258 0036:trace:ntoskrnl:IoDeleteDevice 0x11ce58 ... 0036:Ret ntoskrnl.exe.IoDeleteDevice() retval=00000001 ret=00785258 ... 0036:trace:ntoskrnl:IoDeleteDevice 0x11cd98 ... 0036:Ret ntoskrnl.exe.IoDeleteDevice() retval=00000001 ret=0078526d 0036:Ret driver init 0x785300 (obj=0x11cc28,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\sfhlp02") retval=c000009a ... 0036:Ret ntoskrnl.exe.IoCreateDriver() retval=c000009a ret=7effb832 0036:err:winedevice:async_create_driver failed to create driver L"sfhlp02": c000009a ... 0036:err:ntdll:RtlpWaitForCriticalSection section 0x7efff728 "/home/focht/projects/wine/wine.repo/src/programs/winedevice/device.c: drivers_cs" wait timed out in thread 0036, blocked by 0033, retrying (60 sec) --- snip --- Source: https://source.winehq.org/git/wine.git/blob/HEAD:/programs/winedevice/devic… Service handler thread acquires the critsec (line 502): --- snip ---- 494 static DWORD device_handler( DWORD ctrl, const WCHAR *driver_name ) 495 { 496 struct wine_rb_entry *entry; 497 DWORD result = NO_ERROR; 498 499 if (shutdown_in_progress) 500 return ERROR_SERVICE_CANNOT_ACCEPT_CTRL; 501 502 EnterCriticalSection( &drivers_cs ); 503 entry = wine_rb_get( &wine_drivers, driver_name ); 504 505 switch (ctrl) 506 { 507 case SERVICE_CONTROL_START: 508 if (entry) break; 509 result = RtlNtStatusToDosError(create_driver( driver_name )); 510 break; 511 512 case SERVICE_CONTROL_STOP: 513 if (!entry) break; 514 result = RtlNtStatusToDosError(unload_driver( entry, FALSE )); 515 break; 516 517 default: 518 FIXME( "got driver ctrl %x for %s\n", ctrl, wine_dbgstr_w(driver_name) ); 519 break; 520 } 521 LeaveCriticalSection( &drivers_cs ); 522 return result; 523 } --- snip ---- https://source.winehq.org/git/wine.git/blob/HEAD:/programs/winedevice/devic… Driver thread which executes the entry point tries to acquire critsec on exit path (line 404): --- snip --- 361 static void WINAPI async_create_driver( PTP_CALLBACK_INSTANCE instance, void *context ) 362 { 363 static const WCHAR driverW[] = {'\\','D','r','i','v','e','r','\\',0}; 364 struct wine_driver *driver = context; 365 DRIVER_OBJECT *driver_obj; 366 UNICODE_STRING drv_name; 367 NTSTATUS status; 368 WCHAR *str; 369 370 if (!(str = HeapAlloc( GetProcessHeap(), 0, sizeof(driverW) + strlenW(driver->name)*sizeof(WCHAR) ))) 371 goto error; 372 373 lstrcpyW( str, driverW); 374 lstrcatW( str, driver->name ); 375 RtlInitUnicodeString( &drv_name, str ); 376 377 status = IoCreateDriver( &drv_name, init_driver ); 378 if (status != STATUS_SUCCESS) 379 { 380 ERR( "failed to create driver %s: %08x\n", debugstr_w(driver->name), status ); 381 RtlFreeUnicodeString( &drv_name ); 382 goto error; 383 } 384 385 status = ObReferenceObjectByName( &drv_name, OBJ_CASE_INSENSITIVE, NULL, 386 0, NULL, KernelMode, NULL, (void **)&driver_obj ); 387 RtlFreeUnicodeString( &drv_name ); 388 if (status != STATUS_SUCCESS) 389 { 390 ERR( "failed to locate driver %s: %08x\n", debugstr_w(driver->name), status ); 391 goto error; 392 } 393 394 SetEvent(driver->started); 395 396 EnterCriticalSection( &drivers_cs ); 397 driver->driver_obj = driver_obj; 398 set_service_status( driver->handle, SERVICE_RUNNING, 399 SERVICE_ACCEPT_STOP | SERVICE_ACCEPT_SHUTDOWN ); 400 LeaveCriticalSection( &drivers_cs ); 401 return; 402 403 error: 404 EnterCriticalSection( &drivers_cs ); 405 wine_rb_remove( &wine_drivers, &driver->entry ); 406 LeaveCriticalSection( &drivers_cs ); 407 408 set_service_status( driver->handle, SERVICE_STOPPED, 0 ); 409 CloseServiceHandle( (void *)driver->handle ); 410 HeapFree( GetProcessHeap(), 0, driver ); 411 } ... /* load a driver and notify services.exe about the status change */ static NTSTATUS create_driver( const WCHAR *driver_name ) { TP_CALLBACK_ENVIRON environment; struct wine_driver *driver; DWORD length; length = FIELD_OFFSET( struct wine_driver, name[strlenW(driver_name) + 1] ); if (!(driver = HeapAlloc( GetProcessHeap(), 0, length ))) return STATUS_NO_MEMORY; strcpyW( driver->name, driver_name ); driver->driver_obj = NULL; if (!(driver->handle = (void *)OpenServiceW( manager_handle, driver_name, SERVICE_SET_STATUS ))) { HeapFree( GetProcessHeap(), 0, driver ); return STATUS_UNSUCCESSFUL; } if (wine_rb_put( &wine_drivers, driver_name, &driver->entry )) { CloseServiceHandle( (void *)driver->handle ); HeapFree( GetProcessHeap(), 0, driver ); return STATUS_UNSUCCESSFUL; } TRACE( "starting driver %s\n", wine_dbgstr_w(driver_name) ); set_service_status( driver->handle, SERVICE_START_PENDING, 0 ); memset( &environment, 0, sizeof(environment) ); environment.Version = 1; environment.CleanupGroup = cleanup_group; driver->started = CreateEventW(NULL, TRUE, FALSE, NULL); /* don't block the service control handler */ if (!TrySubmitThreadpoolCallback( async_create_driver, driver, &environment )) async_create_driver( NULL, driver ); /* Windows wait 30 Seconds */ if(WaitForSingleObject(driver->started, 30000) == WAIT_TIMEOUT) return ERROR_SERVICE_REQUEST_TIMEOUT; return STATUS_SUCCESS; } --- snip --- You might want to redesign the scoped locking in device handler and in addition the WaitForSingleObject() should use a multi-purpose event or multiple events which cover the case a driver failed in entry point to avoid unnecessary waits. Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 10

[Bug 32732] New: Kompas V11-V13 Interface freeze
by wine-bugs＠winehq.org 16 Jul '21

16 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=32732 Bug #: 32732 Summary: Kompas V11-V13 Interface freeze Product: Wine Version: 1.5.20 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: nogood3(a)hotmail.com Classification: Unclassified Bug have only Kompas V11 , Kompas V12 and Kompas V13. Freezing have started when I try change any settings in programm. For justice ,must say that programm working despite for Interface freezing. When programm run in virtual desk mod , and take a freeze , I was have some solution - just try to close VM desk and programm become alive whith answer "You realy want to quit?" So , what a hell whith it? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 23091] New: KOMPAS-3D LT V11 freeze
by wine-bugs＠winehq.org 16 Jul '21

16 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=23091 Summary: KOMPAS-3D LT V11 freeze Product: Wine Version: 1.2-rc2 Platform: x86-64 URL: http://download.kompas.kolomna.ru/public/Kompas-3D_LT_ V11/Kompas3D_LT_V11_SP1_intgr.zip OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: alexeal(a)gmail.com At first look this program working correctly, but after closing preferences window abruptly freeze. Look at the end of log: -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 12

[Bug 35359] New: Kompas-3D v14: installation crashes
by wine-bugs＠winehq.org 16 Jul '21

16 Jul '21

http://bugs.winehq.org/show_bug.cgi?id=35359 Bug ID: 35359 Summary: Kompas-3D v14: installation crashes Product: Wine Version: 1.7.10 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: stanislav.fyodorov(a)ya.ru Classification: Unclassified Created attachment 47166 --> http://bugs.winehq.org/attachment.cgi?id=47166 Complete terminal output Installation of Kompas-3D v14 crashes. Download link to a free version of the program: http://download.ascon.ru/public/Kompas-3D_V14/SP1_x86/Base/KOMPAS-3D_V14_SP… Any help will be very appreciated. -- System Information: Debian Release: 7.3 APT prefers stable APT policy: (990, 'stable'), (500, 'stable-updates'), (500, 'proposed-updates'), (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores) Locale: LANG=ru_RU.utf8, LC_CTYPE=ru_RU.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Versions of packages wine-unstable depends on: ii wine32-unstable 1.7.10-0.1 ii wine64-unstable 1.7.10-0.1 wine-unstable recommends no packages. Versions of packages wine-unstable suggests: pn avscan | klamav | clamav <none> ii binfmt-support 2.0.12 ii ttf-mscorefonts-installer 3.5 ii winbind 2:4.1.3+dfsg-2 pn wine-doc <none> -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 35842] New: Sentinel HASP hardlock.sys kernel driver (bundled with Kompas-3D v14) tries to access to DR7 (not handled in ntoskrnl emulate_instruction)
by wine-bugs＠winehq.org 16 Jul '21

16 Jul '21

https://bugs.winehq.org/show_bug.cgi?id=35842 Bug ID: 35842 Summary: Sentinel HASP hardlock.sys kernel driver (bundled with Kompas-3D v14) tries to access to DR7 (not handled in ntoskrnl emulate_instruction) Product: Wine Version: 1.7.15 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, found during investigation of bug 35359 The app bundles HASP/Hardlock dongle driver which crashes on startup. Bug 30220 is a similar problem (which is about CR4 access) --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/ASCON/KOMPAS-3D V14/Bin $ wine ./KOMPAS.Exe ... Unhandled exception: privileged instruction in 32-bit code (0x005c39b6). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:005c39b6 ESP:0053e614 EBP:0053e6b8 EFLAGS:00010206( R- -- I - -P- ) EAX:00000400 EBX:7edff000 ECX:005c3a24 EDX:005c6612 ESI:0053fb40 EDI:003d0f00 ... Backtrace: =>0 0x005c39b6 in hardlock.sys (+0x839b6) (0x0053e6b8) 1 0x7edfc613 load_driver+0x577() [/home/focht/projects/wine/wine.repo/src/programs/winedevice/device.c:254] in winedevice (0x0053e948) 2 0x7edfc8d1 ServiceMain+0x129(argc=<couldn't compute location>, argv=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/programs/winedevice/device.c:308] in winedevice (0x0053e9b8) 3 0x7edbc187 service_thread+0x17f(arg=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/advapi32/service.c:302] in advapi32 (0x0053ea48) 4 0x7bc86674 call_thread_func_wrapper+0xb() in ntdll (0x0053ea68) ... 0x005c39b6: movl %eax,%dr7 Modules: Module Address Debug info Name (24 modules) PE 540000- 5d2200 Export hardlock.sys ... Threads: process tid prio (all id:s are in hex) 00000008 KOMPAS.Exe 00000035 0 00000034 0 00000009 0 ... 0000001c (D) C:\windows\system32\winedevice.exe 00000022 0 <== 00000021 0 0000001d 0 ... --- snip --- It clears DR7 with 0x400, the default after hardware reset (bit 10 is reserved, must be set to 1). Tidbit: The driver is heavily obfuscated (not a problem though) :-) $ sha1sum KOMPAS-3D_V14_SP1.7z 224cac526d0a1c552962930f54d2bec879b3a1e2 KOMPAS-3D_V14_SP1.7z $ du -sh KOMPAS-3D_V14_SP1.7z 846M KOMPAS-3D_V14_SP1.7z $ wine --version wine-1.7.15 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 35548] New: FL Studio 11 reports 'OLE error 8007000E' when clicking 'about' menu
by wine-bugs＠winehq.org 15 Jul '21

15 Jul '21

https://bugs.winehq.org/show_bug.cgi?id=35548 Bug ID: 35548 Summary: FL Studio 11 reports 'OLE error 8007000E' when clicking 'about' menu Product: Wine Version: 1.7.12 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says... It seems the 'about' dialog contains an embedded web browser window. I started with 'winetricks -q ie7' and trimmed the list of overrides down until I got the minimum set where the 'about' dialog still worked: * ieframe (native) * urlmon (native) Trace log: --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Image-Line/FL Studio 11 $ WINEDEBUG=+tid,+seh,+relay,+mshtml,+shell,+ieframe,+ole,+variant wine ./FL.exe >>log.txt 2>&1 ... 0024:Call user32.CreateWindowExW(00010000,0033f3a8 L"TAboutForm",02177cb4 L"About",86000000,000000c5,000000ac,00000194,0000019a,000200f4,00000000,00e20000,00000000) ret=00e30488 ... 0024:trace:ieframe:OleInPlaceObject_GetWindow (0x25c9780)->(0x33e7d8) ... 0024:Call user32.SendMessageW(000201ce,00000000,00000000,00000000) ret=00f0ba3f 0024:Call window proc 0xea1274 (hwnd=0x201ce,msg=WM_NULL,wp=00000000,lp=00000000) ... 0024:Call user32.CallWindowProcW(f53b2ada,000201ce,00000000,00000000,00000000) ret=00f0b4d9 0024:Call window proc 0xf53b2ada (hwnd=0x201ce,msg=WM_NULL,wp=00000000,lp=00000000) 0024:Call user32.GetPropW(000201ce,f53c7ace L"THIS") ret=f53b2b3c 0024:Ret user32.GetPropW() retval=025c9780 ret=f53b2b3c 0024:Call user32.DefWindowProcW(000201ce,00000000,00000000,00000000) ret=f53b2ba8 0024:Ret user32.DefWindowProcW() retval=00000000 ret=f53b2ba8 0024:Ret window proc 0xf53b2ada (hwnd=0x201ce,msg=WM_NULL,wp=00000000,lp=00000000) retval=00000000 0024:Ret user32.CallWindowProcW() retval=00000000 ret=00f0b4d9 0024:Ret window proc 0xea1274 (hwnd=0x201ce,msg=WM_NULL,wp=00000000,lp=00000000) retval=00000000 0024:Ret user32.SendMessageW() retval=00000000 ret=00f0ba3f 0024:trace:ieframe:WebBrowser_AddRef (0x25c9780) ref=15 0024:trace:ieframe:WebBrowser_Navigate (0x25c9780)->((null) {vt 10} {vt 10} {vt 10} {vt 10}) 0024:trace:ieframe:navigate_url navigating to (null) 0024:fixme:ieframe:navigate_url Unsupported args (Flags 0x33e958:10; TargetFrameName 0x33e958:10) 0024:Call shlwapi.PathIsURLW(00000000) ret=f53b0217 0024:trace:shell:PathIsURLW (null) 0024:Ret shlwapi.PathIsURLW() retval=00000000 ret=f53b0217 0024:Call shlwapi.UrlApplySchemeW(00000000,0033d840,0033e888,00000007) ret=f53b0257 0024:trace:shell:UrlApplySchemeW ((null), 0x33d840, 0x33e888:out size 2084, 0x00000007) 0024:Ret shlwapi.UrlApplySchemeW() retval=80070057 ret=f53b0257 0024:warn:ieframe:navigate_url UrlApplyScheme failed: 80070057 0024:trace:ieframe:async_doc_navigate (null) ... 0024:Call KERNEL32.FormatMessageW(00003300,00000000,8007000e,00000000,0033e864,00000000,00000000) ret=00e47243 ... 0024:Call KERNEL32.RaiseException(0eedfade,00000001,00000007,0033e910) ret=00f10527 0024:trace:seh:raise_exception code=eedfade flags=1 addr=0x7b83a97b ip=7b83a97b tid=0024 0024:trace:seh:raise_exception info[0]=00f10527 0024:trace:seh:raise_exception info[1]=01ce1040 0024:trace:seh:raise_exception info[2]=00f10527 0024:trace:seh:raise_exception info[3]=00000000 0024:trace:seh:raise_exception info[4]=01b82320 0024:trace:seh:raise_exception info[5]=0033e938 0024:trace:seh:raise_exception info[6]=0033e92c ... 0024:Call user32.MessageBoxW(000601c8,01af30cc L"OLE error 8007000E.",00780cec L"FL Studio",00000010) ret=00ef8ae6 ... --- snip --- $ sha1sum flstudio_11.exe b09a9df3a2068bc9c431f4066f9dc12080ffb814 flstudio_11.exe $ du -sh flstudio_11.exe 298M flstudio_11.exe $ wine --version wine-1.7.12 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 38097] New: FreshDiagnose 8.67 'Protected Files' diagnosis wants sfc.dll.SfcGetNextProtectedFile
by wine-bugs＠winehq.org 15 Jul '21

15 Jul '21

https://bugs.winehq.org/show_bug.cgi?id=38097 Bug ID: 38097 Summary: FreshDiagnose 8.67 'Protected Files' diagnosis wants sfc.dll.SfcGetNextProtectedFile Product: Wine Version: 1.7.36 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as the summary says... The app seems to be quite useful/exhausting at gathering information on many aspects of hardware and software - impressive how much Wine can deliver here ;-) While looking at various kinds of diagnostics I found this one when clicking 'Protected Files', although rather harmless (fault is catched). --- snip --- wine: Call from 0x7b83b54f to unimplemented function sfc.dll.SfcGetNextProtectedFile, aborting --- snip --- $ sha1sum diagnose.exe ba4cae175b4684f27859999abce9138a35ee3acc diagnose.exe $ du -sh diagnose.exe 2.2M diagnose.exe $ wine --version wine-1.7.36-113-g797bd65 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 13