[Bug 39734] New: ProtectDisc Driver 11: acedrv11.sys crashes
https://bugs.winehq.org/show_bug.cgi?id=39734 Bug ID: 39734 Summary: ProtectDisc Driver 11: acedrv11.sys crashes Product: Wine Version: 1.8-rc2 Hardware: x86-64 URL: http://www.4players.de/4players.php/download_info/Down loads/Download/50183/Alarm_fuer_Cobra_11_Burning_Wheel s/Deutsche_Demo.html OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: bernhardu(a)vr-web.de Distribution: Debian Created attachment 52986 --> https://bugs.winehq.org/attachment.cgi?id=52986 backtrace.txt The demo version of "Cobra 11: Burning Wheels" comes with this copy protection driver. It gets silently installed by default. One can extract the protection driver from the setup with: 7z x BurningWheelsDemo.exe "\$PLUGINSDIR/Driver_Setup.exe" After this driver is installed wine tries to start the copy protection driver acedrv11.sys on every startup of this wineprefix. This results in a crash of this driver: bernhard(a)rechner:~/wine/drive_c$ wineserver -k; wine wineboot fixme:ntoskrnl:IoGetDeviceObjectPointer stub: L"\\DosDevices\\CdRom0" 80 0x53e690 0x53e694 fixme:ntoskrnl:KeInitializeEvent stub: 0x11264c 0 0 wine: Unhandled page fault on read access to 0x00000060 at address 0x57923a (thread 0019), starting debugger... ProtectionID v0.6.7.0 identifies it as: #[VersionInfo] Product Name : ProtectDisc x64/x86 Hybrid Driver #[VersionInfo] Product Version : 9.0.0.0 #[VersionInfo] File Version : 11.0.0.11 built by: WinDDK #[VersionInfo] Original FileName : acedrv.sys #[!] ProtectDisc v 9.0.0.0 Driver -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 --- Comment #1 from Bernhard Übelacker <bernhardu(a)vr-web.de> --- Created attachment 52987 --> https://bugs.winehq.org/attachment.cgi?id=52987 ntoskrnl.exe: Avoid crash in acedrv11.sys. A +ntoskrnl trace shows such a line: trace:ntoskrnl:IoAllocateIrp -128, 0 With the attached patch the driver does at least not crash. - It just casts the negative stack_size to an unsigned char in IoAllocateIrp and IoInitializeIrp. - Returns in IoCallDriver on NULL despatch function. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Vijay Kamuju <infyquest(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |infyquest(a)gmail.com --- Comment #2 from Vijay Kamuju <infyquest(a)gmail.com> --- send the patch to wine-patches(a)winehq.org -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 super_man(a)post.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sebastian(a)fds-team.de, | |super_man(a)post.com -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Bernhard Übelacker <bernhardu(a)vr-web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |39739 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Sergey Isakov <isakov-sl(a)bk.ru> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |isakov-sl(a)bk.ru --- Comment #3 from Sergey Isakov <isakov-sl(a)bk.ru> --- I confirm the bug and the patch. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Alistair Leslie-Hughes <leslie_alistair(a)hotmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |patch -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 --- Comment #4 from Bernhard Übelacker <bernhardu(a)vr-web.de> --- Created attachment 54059 --> https://bugs.winehq.org/attachment.cgi?id=54059 ntoskrnl.exe/tests: Add tests for IoAllocateIrp. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Bernhard Übelacker <bernhardu(a)vr-web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #52987|0 |1 is obsolete| | --- Comment #5 from Bernhard Übelacker <bernhardu(a)vr-web.de> --- Created attachment 54060 --> https://bugs.winehq.org/attachment.cgi?id=54060 ntoskrnl.exe: Make IoAllocateIrp not crash on negative values. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 --- Comment #6 from Bernhard Übelacker <bernhardu(a)vr-web.de> --- Created attachment 54061 --> https://bugs.winehq.org/attachment.cgi?id=54061 ntoskrnl.exe: Do not try to call NULL function pointer in IoCallDriver. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Bernhard Übelacker <bernhardu(a)vr-web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #54059|0 |1 is obsolete| | --- Comment #7 from Bernhard Übelacker <bernhardu(a)vr-web.de> --- Created attachment 54115 --> https://bugs.winehq.org/attachment.cgi?id=54115 ntoskrnl.exe/tests: Add tests for IoAllocateIrp (try 2). -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Bernhard Übelacker <bernhardu(a)vr-web.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #54060|0 |1 is obsolete| | --- Comment #8 from Bernhard Übelacker <bernhardu(a)vr-web.de> --- Created attachment 54116 --> https://bugs.winehq.org/attachment.cgi?id=54116 ntoskrnl.exe: Make IoAllocateIrp not crash on negative values. (try 3) -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 --- Comment #9 from Sergey Isakov <isakov-sl(a)bk.ru> --- (In reply to Bernhard Übelacker from comment #8)
Created attachment 54116 [details] ntoskrnl.exe: Make IoAllocateIrp not crash on negative values. (try 3)
irp->AllocationFlags will be undefined -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 --- Comment #10 from Sergey Isakov <isakov-sl(a)bk.ru> --- OK, zero. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 winetest(a)luukku.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |bernhardu(a)mailbox.org -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 winetest(a)luukku.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |winetest(a)luukku.com --- Comment #11 from winetest(a)luukku.com --- Is this bug actually fixed? Or does it need more work? http://source.winehq.org/git/wine.git/commit/64aec5d8dbae329958b9b677d3289de... I found this commit after I noticed that the latest patch doesn't merge cleanly. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Matteo Bruni <matteo.mystral(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Fixed by SHA1| |64aec5d8dbae329958b9b677d32 | |89de78142e289 Status|UNCONFIRMED |RESOLVED --- Comment #12 from Matteo Bruni <matteo.mystral(a)gmail.com> --- Let's resolve it, if there are other issues they should be covered by separate bugs anyway. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 --- Comment #13 from Bernhard Übelacker <bernhardu(a)mailbox.org> --- Sorry for the late reply. In the last review [1] for some more test coverage was asked. Unfortunately I did not get around to that. And if I would have I do not see yet the ntoskrnl-DriverTest appear in wine, so I am not sure where to submit such a test to. So yes, closing this bug is fine. [1] https://www.winehq.org/pipermail/wine-devel/2016-March/112517.html -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Alexandre Julliard <julliard(a)winehq.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #14 from Alexandre Julliard <julliard(a)winehq.org> --- Closing bugs fixed in 1.9.24. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Michael Stefaniuc <mstefani(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |1.8.x -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Michael Stefaniuc <mstefani(a)redhat.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|1.8.x |--- --- Comment #15 from Michael Stefaniuc <mstefani(a)redhat.com> --- Removing 1.8.x milestone from bugs included in 1.8.6. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=39734 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download, obfuscation URL|http://www.4players.de/4pla |https://web.archive.org/web |yers.php/download_info/Down |/20210701055235/https://dl. |loads/Download/50183/Alarm_ |4players.de/f1/pc/cobra_11_ |fuer_Cobra_11_Burning_Wheel |nitro/BurningWheelsDemo.exe |s/Deutsche_Demo.html | CC| |focht(a)gmx.net -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (2)
-
wine-bugs＠winehq.org -
WineHQ Bugzilla