[Bug 18985] New: Two bugs in HTML-kit
http://bugs.winehq.org/show_bug.cgi?id=18985 Summary: Two bugs in HTML-kit Product: Wine Version: 1.1.23 Platform: PC URL: http://htmlkit.com/download/ OS/Version: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: comctl32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: xerox_xerox2000(a)yahoo.co.uk Hi, a user reported trouble with this app here: http://ubuntuforums.org/showthread.php?t=1190483 I gave it a try and actually there seem to be two bugs: 1. All icons in toolbar are black. In the console the line appears: err:imagelist:IMAGELIST_InternalExpandBitmaps creating new image bitmap (x=25600 y=16)! 2. After doing from the menu: Edit->Prefernces->OK an access violation occurs and the app is no longer usable. Both bugs are gone using native comctl32 -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #1 from Louis Lenders <xerox_xerox2000(a)yahoo.co.uk> 2009-06-18 02:05:55 --- Created an attachment (id=21867) --> (http://bugs.winehq.org/attachment.cgi?id=21867) black corruptions in toolbar and rest of the GUI -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 Dmitry Timoshkov <dmitry(a)codeweavers.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID --- Comment #2 from Dmitry Timoshkov <dmitry(a)codeweavers.com> 2009-06-18 03:39:30 --- Please open a separate bug report for each problem. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 Dmitry Timoshkov <dmitry(a)codeweavers.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #3 from Dmitry Timoshkov <dmitry(a)codeweavers.com> 2009-06-18 03:39:45 --- Closing. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 Louis Lenders <xerox_xerox2000(a)yahoo.co.uk> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |REOPENED Resolution|INVALID | Summary|Two bugs in HTML-kit |access violation in | |html-kit --- Comment #4 from Louis Lenders <xerox_xerox2000(a)yahoo.co.uk> 2009-06-21 04:23:48 --- then i'll reopen this one for the crash after doing Edit->Prefernces->OK. Adjusted the summary acoordingly. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #5 from Nikolay Sivov <bunglehead(a)gmail.com> 2009-06-22 14:01:37 --- (In reply to comment #4)
then i'll reopen this one for the crash after doing Edit->Prefernces->OK. Adjusted the summary acoordingly.
Hi, Louis. Attach crash log please. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #6 from Louis Lenders <xerox_xerox2000(a)yahoo.co.uk> 2009-06-23 00:37:22 ---
Hi, Louis.
Attach crash log please.
Hi Nicolai, there isn't any crash log. It pops op a messagebox with "Access violation" and then exits silently. If you need traces just tell me and i'll attach t hem. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 A Wine user <RandomAccountName(a)mail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |RandomAccountName(a)mail.com --- Comment #7 from A Wine user <RandomAccountName(a)mail.com> 2010-01-11 03:58:42 --- Still present in Wine 1.1.36. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #8 from A Wine user <RandomAccountName(a)mail.com> 2010-01-17 08:32:05 --- Created an attachment (id=25768) --> (http://bugs.winehq.org/attachment.cgi?id=25768) Backtrace from winedbg Maybe this will be helpful? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #9 from A Wine user <RandomAccountName(a)mail.com> 2010-04-07 09:54:01 --- Still present in 1.1.42 and git. A little observation: after closing several of those access violation dialogs, it eventually produces a different error message - "list index out of bounds (0)". After closing quite a lot of error dialogs, they eventually stop appearing and the program becomes usable again, at least to an extent. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #10 from Nikolay Sivov <bunglehead(a)gmail.com> 2010-06-06 16:29:15 --- (In reply to comment #9)
Still present in 1.1.42 and git.
A little observation: after closing several of those access violation dialogs, it eventually produces a different error message - "list index out of bounds (0)". After closing quite a lot of error dialogs, they eventually stop appearing and the program becomes usable again, at least to an extent.
I see there's a Listview handlers in backtrace, please attach +listview with comctl32 compiled with -O0 and the same backtrace with -O0 to get parameters listed properly. Lines are shifted apparently so I need logs running current git Wine. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #11 from A Wine user <RandomAccountName(a)mail.com> 2010-06-07 08:12:47 --- Created an attachment (id=28649) --> (http://bugs.winehq.org/attachment.cgi?id=28649) +listview log (compiled with -O0) For this log, I clicked OK to the first two error messages before killing it with wineserrver -k, just in case there's something happening repeatedly to trigger the error dialogs... -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 A Wine user <RandomAccountName(a)mail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #25768|0 |1 is obsolete| | --- Comment #12 from A Wine user <RandomAccountName(a)mail.com> 2010-06-07 08:15:56 --- Created an attachment (id=28650) --> (http://bugs.winehq.org/attachment.cgi?id=28650) Winedbg backtrace (compiled with -O0) Of course, I may have used wineserver -k and not wineserrver -k ;) Here's the relevant backtraces from bt all in winedbg. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #13 from A Wine user <RandomAccountName(a)mail.com> 2010-12-18 10:09:28 CST --- Still present in wine-1.3.9-164-g17e66e0. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #14 from Nikolay Sivov <bunglehead(a)gmail.com> 2011-05-13 11:27:03 CDT --- First patch for that is in as c6dd14199c6f48161ee8393232cb4daddb4df78d. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 Bruno Jesus <00cpxxx(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |00cpxxx(a)gmail.com --- Comment #15 from Bruno Jesus <00cpxxx(a)gmail.com> 2011-10-02 07:52:56 CDT --- In latest git the icons are working very well but the second issue related to the read/write access violation is still present. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #16 from Austin English <austinenglish(a)gmail.com> --- In wine-1.7.8-88-gfb75292, the icons are normal. If I go to Edit, Preferences, the dialog is all black, I can't click anything. I don't see the access violation at all. [austin(a)localhost ~]$ du -h HKToolsTrialSetup.zip 17M HKToolsTrialSetup.zip [austin(a)localhost ~]$ sha1sum HKToolsTrialSetup.zip eedfa0e542d6ae8b98f055e868e2a74337fa6617 HKToolsTrialSetup.zip -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=18985 hanska2(a)luukku.com changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |hanska2(a)luukku.com --- Comment #17 from hanska2(a)luukku.com --- Weird. I don't get this runnig at all. fixme:mscoree:corruntimehost_Start stub 0x1a82c0 fixme:ole:RemUnknown_QueryInterface No interface for iid {00000019-0000-0000-c000-000000000046} err:mscoree:expect_no_runtimes Process exited with a Mono runtime loaded. err:ole:CoUninitialize Mismatched CoUninitialize fixme:ole:RemUnknown_QueryInterface No interface for iid {00000019-0000-0000-c000-000000000046} err:ole:CoReleaseMarshalData IMarshal::ReleaseMarshalData failed with error 0x8001011d wine 1.7.22 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #18 from A Wine user <RandomAccountName(a)mail.com> --- I still see the access violation in wine-1.7.15-173-ge851999. (In reply to Austin English from comment #16)
[austin(a)localhost ~]$ du -h HKToolsTrialSetup.zip 17M HKToolsTrialSetup.zip [austin(a)localhost ~]$ sha1sum HKToolsTrialSetup.zip eedfa0e542d6ae8b98f055e868e2a74337fa6617 HKToolsTrialSetup.zip
That looks like the paid version of HTML-Kit (HTML-Kit Tools). This bug is about the free version of HTML-Kit (HTML-Kit 292) from http://www.htmlkit.com/download/#download-html-kit-292 . -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #19 from A Wine user <RandomAccountName(a)mail.com> --- (In reply to A Wine user from comment #18)
I still see the access violation in wine-1.7.15-173-ge851999.
Oops, that isn't the version I meant to test with. The access violation persists in wine-1.7.24-14-gd1749b5 as well. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #20 from Austin English <austinenglish(a)gmail.com> --- (In reply to A Wine user from comment #19)
(In reply to A Wine user from comment #18)
I still see the access violation in wine-1.7.15-173-ge851999.
Oops, that isn't the version I meant to test with. The access violation persists in wine-1.7.24-14-gd1749b5 as well.
Where is the version that has the access violation? Sha1sum? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #21 from A Wine user <RandomAccountName(a)mail.com> --- (In reply to Austin English from comment #20)
Where is the version that has the access violation? Sha1sum?
It's downloadable here: http://www.htmlkit.com/download/#download-html-kit-292 sha1sum HKSetup.exe 80977e992eb3ff09a204018d657e01b44c3b1a26 HKSetup.exe This installer will also try to download and install the other version (HTML-Kit Tools) if you don't unckeck the option at the end (after the program files are copied). -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 Austin English <austinenglish(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |NEW URL|http://htmlkit.com/download |http://www.htmlkit.com/down |/ |load/#download-html-kit-292 Summary|access violation in |access violation in |html-kit |HTML-Kit 292 --- Comment #22 from Austin English <austinenglish(a)gmail.com> --- Confirming. With: [austin(a)localhost ~]$ sha1sum HKSetup.exe 80977e992eb3ff09a204018d657e01b44c3b1a26 HKSetup.exe [austin(a)localhost ~]$ du -h HKSetup.exe 2.4M HKSetup.exe [austin(a)localhost ~]$ wine --version wine-1.7.24-14-gd1749b5 I declined the HTML-Toolkit installation at the end of the install, then clicked no to all the updates/etc. on starting the app. Made a new file, then Edit>Preferences>OK. Access violation occurred. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #23 from A Wine user <RandomAccountName(a)mail.com> --- Still in wine-1.7.42-29-ge2e1ac2. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #24 from A Wine user <RandomAccountName(a)mail.com> --- Still in wine-1.9.5-160-g03ee99b. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 Robert Giordano <rob215x(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |rob215x(a)gmail.com --- Comment #25 from Robert Giordano <rob215x(a)gmail.com> --- HTML-Kit still crashes with Access Violation $ wine --version wine-4.11 My System: Host: pc2019 Kernel: 4.19.49-1-MANJARO x86_64 bits: 64 compiler: gcc v: 8.3.0 Desktop: Xfce 4.13.4git-be04da Distro: Manjaro Linux I used HTML-Kit for many years and it would be nice to have it from time to time. First I made sure I was in 32bit mode: $ WINEARCH=win32 WINEPREFIX=$HOME/.wine winecfg - and I selected Windows XP as the operating system Next, I downloaded HKSetup.exe (the original, free version, HTML-Kit 292) $ cd ~/Downloads $ WINEARCH=win32 wine HKSetup.exe I've tried two ways of launching it: $ WINEARCH=win32 wine 'c:/Program Files/Chami/HTML-Kit/Bin/HTMLKit.exe' And, on http://www.htmlkit.com/support/docs/pages/H000134.html is says: "Change to the HTML-Kit/Bin directory and run: wine HTMLKit.exe /linux" So I did: $ cd '/home/design215/.wine/drive_c/Program Files/Chami/HTML-Kit/Bin' $ wine HTMLKit.exe /linux Either way, the program opens and looks fine. I can create an html document and save it. But, as soon as I open Edit > Preferences, or make any changes that get saved in the preferences file, the program crashes and I get a dialog box that says: "Access violation at address 00000000. Read of address 00000000" I close the dialog box a bunch of times and it keeps appearing, sometimes with different numbers like 705F4554 instead of 00000000. I don't know if this helps any, but HTML-Kit saves its preferences in the Windows Registry. I think it does this for security so no one can easily get the passwords to all of the web sites you've saved (unless you know where to look). Is there something that needs to be installed for programs to be able to modify the registry? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 Damjan Jovanovic <damjan.jov(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |damjan.jov(a)gmail.com --- Comment #26 from Damjan Jovanovic <damjan.jov(a)gmail.com> --- With WINEDEBUG='+listview' we see this line just before the messagebox: 003a:trace:listview:LISTVIEW_GetNextItem nItem=-1, uFlags=1, nItemCount=1 uFlags=1 means: #define LVNI_FOCUSED 0x0001 which means the code will take this optimized path in that function: /* if we're asked for the focused item, that's only one, * so it's worth optimizing */ if (uFlags & LVNI_FOCUSED) { if ((LISTVIEW_GetItemState(infoPtr, infoPtr->nFocusedItem, uMask) & uMask) != uMask) return -1; return (infoPtr->nFocusedItem == nItem) ? -1 : infoPtr->nFocusedItem; } What is returned, and from which return statement? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #27 from Damjan Jovanovic <damjan.jov(a)gmail.com> --- Created attachment 65697 --> https://bugs.winehq.org/attachment.cgi?id=65697 patch to debug return path With this patch to enhance debugging, and a WINEDEBUG='+listview,+relay,+seh' trace, we get this: 0041:trace:listview:LISTVIEW_GetNextItem nItem=-1, uFlags=1, nItemCount=1 0041:Call msvcrt.memset(003181a0,00000000,00000018) ret=6373a719 0041:Ret msvcrt.memset() retval=003181a0 ret=6373a719 0041:err:listview:LISTVIEW_GetNextItem LISTVIEW_GetNextItem() returning -1 from mask not matching 0041:Ret window proc 0x63733f70 (hwnd=0x7010c,msg=LVM_GETNEXTITEM,wp=ffffffff,lp=00000001) retval=ffffffff 0041:Ret user32.CallWindowProcA() retval=ffffffff ret=0080daf5 0041:Ret window proc 0x1300176 (hwnd=0x7010c,msg=LVM_GETNEXTITEM,wp=ffffffff,lp=00000001) retval=ffffffff 0041:Ret user32.SendMessageA() retval=ffffffff ret=007f277f 0041:Call user32.InvalidateRect(00070206,0031aa08,00000000) ret=0080bb29 0041:Ret user32.InvalidateRect() retval=00000001 ret=0080bb29 0041:trace:seh:raise_exception code=c0000005 flags=0 addr=0x0 ip=00000000 tid=0041 So LISTVIEW_GetNextItem() returns -1 due to failing on: if ((LISTVIEW_GetItemState(infoPtr, infoPtr->nFocusedItem, uMask) & uMask) != uMask) { ERR("LISTVIEW_GetNextItem() returning -1 from mask not matching\n"); return -1; } -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #28 from Damjan Jovanovic <damjan.jov(a)gmail.com> --- Created attachment 65786 --> https://bugs.winehq.org/attachment.cgi?id=65786 hack to disable listview notifications This hack stops HTMLKit from crashing. It stops the listview control from ever sending out notifications. It's definitely the wrong approach, and breaks other things, eg. in winecfg you can't see the Windows version. But it must do something right for this app. What? Step 3: Application crashes, message box reports the access violation: 17 0x6334ebb9 MessageBoxA+0x58() in user32 (0x0031a438) 18 0x0080825e in htmlkit (+0x40825d) (0x0031a474) 19 0x0080832e in htmlkit (+0x40832d) (0x0031a59c) 20 0x00477766 in htmlkit (+0x77765) (0x0031a5d0) 21 0x008081f7 in htmlkit (+0x4081f6) (0x0031ac9c) 22 0x00801976 in htmlkit (+0x401975) (0x0031acb4) Step 2: Callback into the application: 23 0x633b38bc WINPROC_wrapper+0x1b() in user32 (0x0031ace4) 24 0x633b578d call_window_proc+0x12c() in user32 (0x0031ad80) 25 0x633b75bc WINPROC_CallProcWtoA+0x151b() in user32 (0x0031c084) 26 0x633b5bf5 WINPROC_call_window+0x384() in user32 (0x0031c198) 27 0x63344f90 call_window_proc+0x12f() in user32 (0x0031c238) 28 0x6333d1e0 send_message+0x1bf() in user32 (0x0031c2c8) 29 0x6333d535 SendMessageW+0x94() in user32 (0x0031c33c) 30 0x637591d0 notify_hdr+0xdf() in comctl32 (0x0031c398) 31 0x6375c40c notify_listview+0xab() in comctl32 (0x0031c3e0) Step 1: Application sent LVM_SETITEMTEXT, LISTVIEW_SetItemText() ran: 32 0x63762c9f set_main_item+0xa8e() in comctl32 (0x0031c538) 33 0x6374d9ad LISTVIEW_SetItemT+0x1fc() in comctl32 (0x0031c5b8) 34 0x6374e6e7 LISTVIEW_SetItemTextT+0x156() in comctl32 (0x0031c658) 35 0x63743e04 LISTVIEW_WindowProc+0x1ee3() in comctl32 (0x0031c964) 36 0x633b38bc WINPROC_wrapper+0x1b() in user32 (0x0031c994) 37 0x633b578d call_window_proc+0x12c() in user32 (0x0031ca30) 38 0x633b5370 WINPROC_CallProcAtoW+0x157f() in user32 (0x0031e948) 39 0x633b778a CallWindowProcA+0x1a9() in user32 (0x0031e9d8) 40 0x0080daf5 in htmlkit (+0x40daf4) (0x00020286) ie. chain of events +-------------------------------------------------------+ | Application 3.Internal processing -> crash | +-------------------------------------------------------+ | ^ | 1.LVM_SETITEMTEXT | 2.SendMessage() [re-entry] v | +----------------------------------------+ | comctl32.dll listview control | +----------------------------------------+ -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #29 from Damjan Jovanovic <damjan.jov(a)gmail.com> --- Why does that message crash the application? It's one or more of the following: 1. The message contents are wrong. 2. The message is sent when it shouldn't be. 3. The message is sent synchronously using SendMessage() instead of asynchronously using PostMessage(). 4. The message and its timing are right, but the listview state is wrong in some other way, and that message just triggers the processing that crashes as a result of that wrongness. (Hopefully it's one of the easier cases, as dlls/comctl32/listview.c is 11948 lines long...) 1. A WINEDEBUG='+listview' log shows: 002c:trace:listview:notify_listview (code=-101, plvnm=iItem=0, iSubItem=0, uNewState=0x0, uOldState=0x0, uChanged=0x1, ptAction=(0,0), lParam=26371760) which is also sent earlier and doesn't crash. 2. Nope. It gets sent the same way several times, only the 4th time crashes. 3. Not possible, our tests use SendMessage() too. 4. Sadly, this is probably it. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=18985 --- Comment #30 from Damjan Jovanovic <damjan.jov(a)gmail.com> --- The stack trace is lost by the call to SEH handlers. By setting a breakpoint on the first SEH handler, a better stack trace can be obtained: =>0 0x0081f9fe in htmlkit (+0x41f9fe) (0x0031a634) 1 0x628e33eb EXC_CallHandler+0x1a() in ntdll (0x0031a654) 2 0x628e946e call_stack_handlers+0x10d(rec=0x31aaf4, context=0x31a828) [Z:\home\user\Wine\wine\dlls\ntdll\signal_i386.c:662] in ntdll (0x0031a6d0) 3 0x628e6c9d raise_exception+0x41c(rec=0x31aaf4, context=0x31a828, first_chance=0x1) [Z:\home\user\Wine\wine\dlls\ntdll\signal_i386.c:736] in ntdll (0x0031a7d8) 4 0x628e858c raise_generic_exception+0x3b(rec=0x31aaf4, context=0x31a828) [Z:\home\user\Wine\wine\dlls\ntdll\signal_i386.c:1863] in ntdll (0x0031a818) 5 0xdeadbabe (0x0031ab88) 6 0x007e28c1 in htmlkit (+0x3e28c0) (0x0031abc0) 7 0x0080c008 in htmlkit (+0x40c007) (0x0031ac1c) 8 0x0080db30 in htmlkit (+0x40db2f) (0x0031ac9c) 9 0x00801976 in htmlkit (+0x401975) (0x0031acb4) 10 0x633b389c WINPROC_wrapper+0x1b() in user32 (0x0031ace4) 11 0x633b576d call_window_proc+0x12c(hwnd=0x10282, msg=0x4e, wp=0x20286, lp=0x31c4f0, result=0x31c220, arg=0x1300190) [Z:\home\user\Wine\wine\dlls\user32\winproc.c:249] in user32 (0x0031ad80) 12 0x633b759c WINPROC_CallProcWtoA+0x151b(callback=0x633b5640, hwnd=0x10282, msg=0x4e, wParam=0x20286, lParam=0x31c4f0, result=0x31c220, arg=0x1300190) [Z:\home\user\Wine\wine\dlls\user32\winproc.c:864] in user32 (0x0031c084) 13 0x633b5bd5 WINPROC_call_window+0x384(hwnd=0x10282, msg=0x4e, wParam=0x20286, lParam=0x31c4f0, result=0x31c220, unicode=0x1, mapping=1664702431) [Z:\home\user\Wine\wine\dlls\user32\winproc.c:926] in user32 (0x0031c198) 14 0x63344f70 call_window_proc+0x12f(hwnd=0x10282, msg=0x4e, wparam=0x20286, lparam=0x31c4f0, unicode=0x1, same_thread=0x1, mapping=1664702431) [Z:\home\user\Wine\wine\dlls\user32\message.c:2225] in user32 (0x0031c238) 15 0x6333d1c0 send_message+0x1bf(info=0x31c2e8, res_ptr=0x31c318, unicode=0x1) [Z:\home\user\Wine\wine\dlls\user32\message.c:3294] in user32 (0x0031c2c8) 16 0x6333d515 SendMessageW+0x94(hwnd=0x10282, msg=0x4e, wparam=0x20286, lparam=0x31c4f0) [Z:\home\user\Wine\wine\dlls\user32\message.c:3495] in user32 (0x0031c33c) 17 0x637591f0 notify_hdr+0xdf(infoPtr=0x1d4ce8, code=0xffffff9b, pnmh=0x31c4f0) [Z:\home\user\Wine\wine\dlls\comctl32\listview.c:838] in comctl32 (0x0031c398) 18 0x6375c41c notify_listview+0xab(infoPtr=0x1d4ce8, code=0xffffff9b, plvnm=0x31c4f0) [Z:\home\user\Wine\wine\dlls\comctl32\listview.c:888] in comctl32 (0x0031c3e0) 19 0x63762c9f set_main_item+0xa8e(infoPtr=0x1d4ce8, lpLVItem=0x31c600, isNew=0, isW=0x1, bChanged=0x31c590) [Z:\home\user\Wine\wine\dlls\comctl32\listview.c:4368] in comctl32 (0x0031c538) 20 0x6374d9cd LISTVIEW_SetItemT+0x1fc(infoPtr=0x1d4ce8, lpLVItem=0x31c600, isW=0) [Z:\home\user\Wine\wine\dlls\comctl32\listview.c:4490] in comctl32 (0x0031c5b8) 21 0x6374e707 LISTVIEW_SetItemTextT+0x156(infoPtr=0x1d4ce8, nItem=0, lpLVItem=0x31ee30, isW=0) [Z:\home\user\Wine\wine\dlls\comctl32\listview.c:9117] in comctl32 (0x0031c658) 22 0x63743e24 LISTVIEW_WindowProc+0x1ee3(hwnd=0x20286, uMsg=0x102e, wParam=0, lParam=0x31ee30) [Z:\home\user\Wine\wine\dlls\comctl32\listview.c:11691] in comctl32 (0x0031c964) 23 0x633b389c WINPROC_wrapper+0x1b() in user32 (0x0031c994) 24 0x633b576d call_window_proc+0x12c(hwnd=0x20286, msg=0x102e, wp=0, lp=0x31ee30, result=0x31e99c, arg=0x63741f40) [Z:\home\user\Wine\wine\dlls\user32\winproc.c:249] in user32 (0x0031ca30) 25 0x633b5350 WINPROC_CallProcAtoW+0x157f(callback=0x633b5640, hwnd=0x20286, msg=0x102e, wParam=0, lParam=0x31ee30, result=0x31e99c, arg=0x63741f40, mapping=WMCHAR_MAP_CALLWINDOWPROC) [Z:\home\user\Wine\wine\dlls\user32\winproc.c:609] in user32 (0x0031e948) 26 0x633b776a CallWindowProcA+0x1a9(func=0xffff0015, hwnd=0x20286, msg=0x102e, wParam=0, lParam=0x31ee30) [Z:\home\user\Wine\wine\dlls\user32\winproc.c:1010] in user32 (0x0031e9d8) 27 0x0080daf5 in htmlkit (+0x40daf4) (0x00020286) Frame 6 is where the crash happens. Wine-dbg>disassemble 0x007e28bb 0x007e28bb: call *0x188(%ebx) 0x007e28c1: popl %ebx 0x007e28c2: ret 0x188(%ebx) is NULL, leading to a call to a NULL function pointer -> crash. A structure of that size (at least 396 bytes) is something internal to the application, not something we pass. Why it's NULL, how it became NULL, requires an understanding of the application's internals, which is best obtained with the help of the author. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (2)
-
wine-bugs＠winehq.org -
WineHQ Bugzilla