June 2024 - Wine-bugs - list.winehq.org

[Bug 56590] New: Buffer Overflow in jpeg_decoder_initialize
by WineHQ Bugzilla 02 Jul '24

02 Jul '24

https://bugs.winehq.org/show_bug.cgi?id=56590 Bug ID: 56590 Summary: Buffer Overflow in jpeg_decoder_initialize Product: Wine Version: 9.7 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: windowscodecs Assignee: wine-bugs(a)winehq.org Reporter: franco(a)blackwinghq.com Distribution: --- The vulnerable jpeg_decoder_initialize function in file libjpeg.c (https://github.com/wine-mirror/wine/blob/master/dlls/windowscodecs/libjpeg.…) is used to decompress jpegs and create a raw bitmap version of the image. In jpeg_decoder_initialize, the values for cinfo.output_width and cinfo.output_height are retrieved directly from a jpeg file's header. cinfo.output_width and cinfo.output_height can be manipulated by editing the header of the jpeg file being processed. They are two bytes each in the image's header so their values can range from 0x0000 to 0xFFFF. These variables are multiplied with frame.bpp. When these three values are multiplied together they can exceed the limit of a 32-bit unsigned integer, leading to an integer overflow vulnerability. This product is used to set the size of the image_data buffer, which will store the decompressed jpeg (https://github.com/wine-mirror/wine/blob/master/dlls/windowscodecs/libjpeg.…) When the sizing arguments overflow, the buffer becomes too small to store the decompressed data. The program writes the decompressed image to the buffer using the jpeg_read_scanlines function. The function ends up writing to out-of-bounds memory due to the buffer’s small size (https://github.com/wine-mirror/wine/blob/master/dlls/windowscodecs/libjpeg.…) This causes data in memory adjacent to the buffer to be overwritten. An attacker is in control of the image's height, width, and contents. This allows an attacker to craft an exploit to overwrite data in memory with data they control. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 56849] New: [Regression] Ableton Live 12 undo history broken
by WineHQ Bugzilla 02 Jul '24

02 Jul '24

https://bugs.winehq.org/show_bug.cgi?id=56849 Bug ID: 56849 Summary: [Regression] Ableton Live 12 undo history broken Product: Wine Version: 9.11 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: tileacids946(a)gmail.com Distribution: --- After updating to Wine 9.11, Ableton Live complains about not being able to access the undo history file: "Live cannot access the undo history file and is switching to a memory based undo" -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 1

[Bug 54335] New: fp.exe has no mouse, resize does not work, escape string don't work
by WineHQ Bugzilla 01 Jul '24

01 Jul '24

https://bugs.winehq.org/show_bug.cgi?id=54335 Bug ID: 54335 Summary: fp.exe has no mouse, resize does not work, escape string don't work Product: Wine Version: 8.0-rc4 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: margers.roked(a)inbox.lv Distribution: --- fp.exe download link http://downloads.freepascal.org/fpc/dist/3.2.2/i386-win32/fpc-3.2.2.i386-wi… Fail to start from shortcut/launcher. Starting form terminal: 1) has no mouse support 2) not all escape strings work for example Alt+F does not open File menu 3) resize terminal window does not resize program window accordingly. Starting from cmd has the same problems + after exit cmd is broken -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 56778] New: Nextion Editor crash on startup
by WineHQ Bugzilla 01 Jul '24

01 Jul '24

https://bugs.winehq.org/show_bug.cgi?id=56778 Bug ID: 56778 Summary: Nextion Editor crash on startup Product: Mono Version: main Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: mono Assignee: wine-bugs(a)winehq.org Reporter: wghralbwklqcocselg(a)cazlq.com CC: madewokherd(a)gmail.com Distribution: --- Link to download: https://nextion.tech/download/nextion-setup-v1-65-1.exe Wine log: 0170:fixme:ntdll:NtQuerySystemInformation info_class SYSTEM_PERFORMANCE_INFORMATION Failed to run module constructor due to (null) assembly:C:\windows\mono\mono-2.0\lib -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 56841] New: virtual desktop "explorer.exe /desktop=shell,1920x1080" broken in 9.11 (regression since 9.10)
by WineHQ Bugzilla 01 Jul '24

01 Jul '24

https://bugs.winehq.org/show_bug.cgi?id=56841 Bug ID: 56841 Summary: virtual desktop "explorer.exe /desktop=shell,1920x1080" broken in 9.11 (regression since 9.10) Product: Wine Version: 9.11 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: kolAflash(a)kolahilft.de Distribution: --- Since wine-9.11 the virtual desktop doesn't work when started via "/desktop". There's simply no X11 window coming up. Example running winecfg: explorer.exe /desktop=shell,1920x1080 winemine.exe OS: Debian-12 Linux wine-9.10 was working fine. Bad commit (did a git bisect): https://gitlab.winehq.org/wine/wine/-/commit/b89c9c60d50cf21650331d1528ff96… -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 53711] New: Final Fantasy XI Crashes
by WineHQ Bugzilla 01 Jul '24

01 Jul '24

https://bugs.winehq.org/show_bug.cgi?id=53711 Bug ID: 53711 Summary: Final Fantasy XI Crashes Product: Wine Version: 7.17 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: pandora.xero(a)gmail.com Distribution: --- Created attachment 73136 --> https://bugs.winehq.org/attachment.cgi?id=73136 most recent backtrace, 20220920 122500 US Central. I have multiple occurrences over the past several months (most of which I have saved the backtraces for) of the game crashing. Symptoms include: Game crash on logout Occasional Game crash on zone Failure to load textures, or glitched textures loaded I am unable to glean any information from the backtraces, primarily because I am not familiar with x86 assembly, but I have had issues like these for a while now. They mostly occur after switching between characters multiple times, or zoning a large number of times, but the most recent one (attached) was totally random as I was walking through a zone. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 31

[Bug 56580] New: Xdefiant Beta pdh.dll.PdhGetFormattedCounterArrayA
by WineHQ Bugzilla 01 Jul '24

01 Jul '24

https://bugs.winehq.org/show_bug.cgi?id=56580 Bug ID: 56580 Summary: Xdefiant Beta pdh.dll.PdhGetFormattedCounterArrayA Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: pdh Assignee: wine-bugs(a)winehq.org Reporter: hippo1555(a)gmail.com Distribution: --- Launch game, after getting to main menu load any mode. during loading land on: wine: Call from 000000007B013AD7 to unimplemented function -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 55949] New: PEB->PostProcessInitRoutine broken / unimplemented
by WineHQ Bugzilla 01 Jul '24

01 Jul '24

https://bugs.winehq.org/show_bug.cgi?id=55949 Bug ID: 55949 Summary: PEB->PostProcessInitRoutine broken / unimplemented Product: Wine Version: 8.19 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: novae.harpist06(a)icloud.com Distribution: --- Created attachment 75533 --> https://bugs.winehq.org/attachment.cgi?id=75533 Reproducer Reproducer attached. Windows output: Hello world! Wine output: (nothing) -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 1

[Bug 55752] New: ntdll:wow64 - The 32-bit test_peb_teb() fails in Wine's the new WoW mode
by WineHQ Bugzilla 01 Jul '24

01 Jul '24

https://bugs.winehq.org/show_bug.cgi?id=55752 Bug ID: 55752 Summary: ntdll:wow64 - The 32-bit test_peb_teb() fails in Wine's the new WoW mode Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: fgouget(a)codeweavers.com Distribution: --- ntdll:wow64 - The 32-bit test_peb_teb() fails in Wine's the new WoW mode: wow64.c:874: Test failed: wrong Tib.ExceptionList 7ffffe1ff530 / 7FFC2000 See https://test.winehq.org/data/patterns.html#ntdll:wow64 In particular one can see this issue on fg-deb64-i386, fgtb-debian11-i386, fgtb-debian12-i386 and rbernon-*-wow64 which all run the 32-bit tests in the new Windows-on-Windows Wine mode. This failure does no happen in the 64-bit test, or when running in a pure 32-bit environment or in the old Windows-on-Windows mode. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 56831] New: Label disappears except if renderer=gdi
by WineHQ Bugzilla 30 Jun '24

30 Jun '24

https://bugs.winehq.org/show_bug.cgi?id=56831 Bug ID: 56831 Summary: Label disappears except if renderer=gdi Product: Wine Version: 9.10 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: mterrisse(a)free.fr Distribution: --- Created attachment 76639 --> https://bugs.winehq.org/attachment.cgi?id=76639 Sample Delphi/FMX application Hello, Wine dev 9.10, Ubuntu 24.04 I wrote a sample application to illustrate the problem. The application is written in Delphi/FMX, win64 and has just a form with a label and a button that closes the form. The problem is that the label disappears when the mouse hovers over the button. But this doesn't happen if I specify HKEY_CURRENT_USER\Software\Wine\Direct3D\renderer=gdi I have the problem with renderer=gl or renderer=vulkan I have tried to investigate: if I remove the call to InvalidateRect when Repaint is called for the button, the problem disappears (but the aspect of the button is wrong). The coordinates passed to InvalidateRect are the same under Windows and under Ubuntu + Wine. Thank you for your help. Regards, Michel Terrisse -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3