[Bug 19743] New: Acrobat Reader 5 page fault on load
http://bugs.winehq.org/show_bug.cgi?id=19743 Summary: Acrobat Reader 5 page fault on load Product: Wine Version: 1.1.27 Platform: PC URL: ftp://ftp.adobe.com/pub/adobe/acrobatreader/win/5.x/ar 500enu.exe OS/Version: Linux Status: NEW Keywords: download Severity: minor Priority: P4 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: kennybobs(a)o2.co.uk Acrobat Reader 5 causes a page fault when loading. =>0 0x3702e6cb in docbox.api (+0x2e6cb) (0x0032f10c) Removing docbox.api allows the app to load. docbox.api is some kind of plug-in from InterTrust, but the crash does not occur under Windows. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=19743 --- Comment #1 from Ken Sharp <kennybobs(a)o2.co.uk> 2009-08-15 17:45:38 --- Created an attachment (id=23090) --> (http://bugs.winehq.org/attachment.cgi?id=23090) wine-1.1.27-221-g4e1a4ec console output -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=19743 --- Comment #2 from Ken Sharp <kennybobs(a)o2.co.uk> 2009-08-15 17:49:54 --- Created an attachment (id=23091) --> (http://bugs.winehq.org/attachment.cgi?id=23091) wine-1.1.27-221-g4e1a4ec +relay +seh +tid -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=19743 --- Comment #3 from Ken Sharp <kennybobs(a)o2.co.uk> 2011-10-01 06:07:22 CDT --- Still present in wine-1.3.29-121-gfdda702 -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=19743 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |obfuscation Status|NEW |RESOLVED CC| |focht(a)gmx.net Resolution| |WONTFIX Summary|Acrobat Reader 5 page fault |Acrobat Reader 5 page fault |on load |on load (docbox.api plugin | |uses custom imports | |resolver verifying/using | |on-disk image of Windows | |core dlls) --- Comment #4 from Anastasius Focht <focht(a)gmx.net> 2012-01-16 15:55:02 CST --- Hello, this is a WONTFIX. The docbox.api plugin guys from "InterTrust" tried to be very "clever". The plugin has it's own internal imports resolver that verifies/uses on-disk PE images of Windows core dlls (kernel32.dll, ...) in conjunction with in-memory mapped PE image. --- snip --- ... 0024:Call KERNEL32.CreateFileA(01301e20 "C:\\windows\\system32\\kernel32.dll",80000000,00000001,00000000,00000003,00000080,00000000) ret=37043b3e 0024:Ret KERNEL32.CreateFileA() retval=0000000c ret=37043b3e 0024:Call KERNEL32.GetFileSize(0000000c,0032e14c) ret=3703f725 0024:Ret KERNEL32.GetFileSize() retval=00053094 ret=3703f725 0024:Call ntdll.RtlAllocateHeap(011e1000,00000000,000530a0) ret=37033ebe 0024:Ret ntdll.RtlAllocateHeap() retval=011e6de8 ret=37033ebe 0024:Call KERNEL32.GetCurrentThreadId() ret=37032aa5 0024:Ret KERNEL32.GetCurrentThreadId() retval=00000024 ret=37032aa5 0024:Call KERNEL32.SetFilePointer(0000000c,00000000,0032e134,00000000) ret=37026d43 0024:Ret KERNEL32.SetFilePointer() retval=00000000 ret=37026d43 0024:Call KERNEL32.ReadFile(0000000c,011e6de8,00053094,0032e128,00000000) ret=37026d9d 0024:Ret KERNEL32.ReadFile() retval=00000001 ret=37026d9d ... <build custom import verification structures from PE disk image> ... 0024:Call KERNEL32.LoadLibraryA(0032ec14 "C:\\windows\\system32\\kernel32.dll") ret=3702e5b5 0024:Ret KERNEL32.LoadLibraryA() retval=7b810000 ret=3702e5b5 ... <resolve imports using own loader, cross check> ... 0024:trace:seh:raise_exception code=c0000005 flags=0 addr=0x3702e6cb ip=3702e6cb tid=0024 0024:trace:seh:raise_exception info[0]=00000000 0024:trace:seh:raise_exception info[1]=00000008 0024:trace:seh:raise_exception eax=00000000 ebx=0000000b ecx=01301c40 edx=00000000 esi=00dcfe58 edi=00000000 0024:trace:seh:raise_exception ebp=0032f064 esp=0032e2c8 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010206 0024:trace:seh:call_stack_handlers calling handler at 0x37022d08 code=c0000005 flags=0 0024:trace:seh:call_stack_handlers handler at 0x37022d08 returned 1 0024:trace:seh:call_stack_handlers calling handler at 0x6172f0 code=c0000005 flags=0 ... --- snip --- They also try hide stuff while resolving imports, destroying original lookup data. Additionally anti debugging trickery is pulled at later state. There is little to no value in this plugin and still they managed to make whole product incompatible with certain Windows versions. Good job. Only a brain damaged soul could have done this. Acrobat 5.0 is officially reported incompatible with newer Windows versions by Microsoft/Adobe due to this plugin (not even application shims can fix this). Just get rid of this plugin or don't use this version at all. --- snip --- rm ~/.wine/drive_c/Program Files/Adobe/Acrobat 5.0/Reader/plug_ins/InterTrust/DocBox.api --- snip --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=19743 Austin English <austinenglish(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #5 from Austin English <austinenglish(a)gmail.com> 2012-01-23 23:54:59 CST --- Closing. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=19743 Nikolay Sivov <bunglehead(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |last_deceneu(a)yahoo.com --- Comment #6 from Nikolay Sivov <bunglehead(a)gmail.com> 2012-05-11 14:52:17 CDT --- *** Bug 17342 has been marked as a duplicate of this bug. *** -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=19743 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |morcovadrianmihai(a)gmail.com --- Comment #7 from Anastasius Focht <focht(a)gmx.net> --- *** Bug 37177 has been marked as a duplicate of this bug. *** -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=19743 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ss12home(a)yahoo.com --- Comment #8 from Anastasius Focht <focht(a)gmx.net> --- *** Bug 32860 has been marked as a duplicate of this bug. *** -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=19743 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |ap7i(a)wp.pl --- Comment #9 from Anastasius Focht <focht(a)gmx.net> --- *** Bug 44359 has been marked as a duplicate of this bug. *** -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=19743 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CLOSED |REOPENED URL|ftp://ftp.adobe.com/pub/ado |https://web.archive.org/web |be/acrobatreader/win/5.x/ar |/20020811041232/http://ftp. |500enu.exe |adobe.com/pub/adobe/acrobat | |reader/win/5.x/ar500enu.exe Resolution|WONTFIX |--- Summary|Acrobat Reader 5 page fault |Acrobat Reader 5 crashes on |on load (docbox.api plugin |startup (InterTrust |uses custom imports |'docbox.api' plugin |resolver verifying/using |incompatible with Windows |on-disk image of Windows |7+) |core dlls) | --- Comment #10 from Anastasius Focht <focht(a)gmx.net> --- Hello folks, reopening, since the blocker from 8 years ago (validating PE image from memory with on-disk image) might be resolved with the conversion of Wine core dlls to PE format. Microsoft explicitly blacklists Adobe 5.0 on Windows 7+ systems. Users can easily work around by deleting the useless plugin. Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=19743 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |noobusinghacks(a)gmail.com --- Comment #11 from Anastasius Focht <focht(a)gmx.net> --- *** Bug 49383 has been marked as a duplicate of this bug. *** -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=19743 Ken Sharp <imwellcushtymelike(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|REOPENED |RESOLVED --- Comment #12 from Ken Sharp <imwellcushtymelike(a)gmail.com> --- Fixed! in Wine 7.9 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=19743 Alexandre Julliard <julliard(a)winehq.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #13 from Alexandre Julliard <julliard(a)winehq.org> --- Closing bugs fixed in 7.10. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (2)
-
wine-bugs＠winehq.org -
WineHQ Bugzilla