[Bug 36758] New: Adobe Creative Cloud Setup crashes very early in windows 7 mode
https://bugs.winehq.org/show_bug.cgi?id=36758 Bug ID: 36758 Summary: Adobe Creative Cloud Setup crashes very early in windows 7 mode Product: Wine Version: 1.7.20 Hardware: x86 URL: https://ccmdls.adobe.com/AdobeProducts/ILST/17/win32/A AMmetadataLS20/CreativeCloudSet-Up.exe OS: Linux Status: NEW Keywords: download, Installer Severity: normal Priority: P2 Component: msxml3 Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Created attachment 48812 --> https://bugs.winehq.org/attachment.cgi?id=48812 relay,seh,tid,msxml I wanted to test bug 28479, so I tried Adobe Illustrator. The adobe website won't let you download under Linux Chrome/Firefox, but Firefox under Wine works (if you run in win7 mode. In xp, it tells you that Adobe no longer supports the operating system). Trying to install under winxp mode fails, so I tried win7 (no other changes, 32-bit prefix). Very quickly crashed: Backtrace: =>0 0x7da85cbb node_insert_before+0x1fb(This=0x164800, new_child=0x1522c8, ref_child=0x7fe6c0, ret=0x7fe7c8) [/home/austin/wine-git/dlls/msxml3/../../include/msxml6.h:1733] in msxml3 (0x007fe688) 1 0x7da6ab5a domelem_insertBefore+0xc9(iface=<couldn't compute location>, newNode=<couldn't compute location>, refChild={n1={n2={vt=0, wReserved1=0x7dad, wReserved2=0x6008, wReserved3=0x16, n3={cVal=-104, uiVal=0xe798, ulVal=0x7fe798, intVal=0x7fe798, uintVal=0x7fe798, bVal=-104, iVal=0xffffe798, lVal=0x7fe798, fltVal=0.000000, dblVal=1859298639392996210870421805017785035968781486115650566217455192038109727765211832390318882733954256552973599870182013845511593275178033793671134739550254788892387423787817576629618565205251330958165590449085282054386014533309249324619860225252311250620663737273560648579294494978177977729440284672.000000, boolVal=0xffffe798, scode=0x7fe798, date=1859298639392996210870421805017785035968781486115650566217455192038109727765211832390318882733954256552973599870182013845511593275178033793671134739550254788892387423787817576629618565205251330958165590449085282054386014533309249324619860225252311250620663737273560648579294494978177977729440284672.000000, bstrVal="????????K????", cyVal={={Lo=0x7fe798, Hi=0x7da6be6b}, int64=0x7da6be6b007fe798}, punkVal=0x7fe798, pdispVal=0x7fe798, parray=0x7fe798, llVal=0x7da6be6b007fe798, ullVal=0x7da6be6b007fe798, pcVal="╪τ", puiVal="????????K????", pulVal=0x7fe798, pintVal=0x7fe798, puintVal=0x7fe798, pbVal="╪τ", piVal=0x7fe798, plVal=0x7fe798, pfltVal=0x7fe798, pdblVal=0x7fe798, pboolVal=0x7fe798, pscode=0x7fe798, pdate=0x7fe798, pbstrVal=0x7fe798, pvarVal=0x7fe798, byref=0x7fe798, pcyVal=0x7fe798, pdecVal=0x7fe798, ppunkVal=0x7fe798, ppdispVal=0x7fe798, pparray=0x7fe798, pllVal=0x7fe798, pullVal=0x7fe798, brecVal={pvRecord=0x7fe798, pRecInfo=0x7da6be6b}}}, decVal={wReserved=0, ={={scale=-83, sign='}'}, signscale=0x7dad}, Hi32=0x166008, ={={Lo32=0x7fe798, Mid32=0x7da6be6b}, Lo64=0x7da6be6b007fe798}}}}, old_node=<couldn't compute location>) [/home/austin/wine-git/dlls/msxml3/element.c:325] in msxml3 (0x007fe6f8) 2 0x7da86413 node_append_child+0x92(This=0x164800, child=0x1522c8, outChild=0x7fe7c8) [/home/austin/wine-git/dlls/msxml3/../../include/msxml6.h:1727] in msxml3 (0x007fe778) 3 0x7da6a975 domelem_appendChild+0x74(iface=0x164818, child=0x1522c8, outChild=0x7fe7c8) [/home/austin/wine-git/dlls/msxml3/element.c:357] in msxml3 (0x007fe7ac) austin(a)aw25 ~ $ wine --version wine-1.7.20-62-g0b30276 austin(a)aw25 ~ $ sha1sum CreativeCloudSet-Up.exe 5439e86c0378a2d0debaa071259cc741762e5374 CreativeCloudSet-Up.exe austin(a)aw25 ~ $ du -h CreativeCloudSet-Up.exe 3.0M CreativeCloudSet-Up.exe austin(a)aw25 ~ $ -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36758 Austin English <austinenglish(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |36769 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36758 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |focht(a)gmx.net --- Comment #1 from Anastasius Focht <focht(a)gmx.net> --- Hello Austin, I can't reproduce this, the bootstrapper installer runs fine here in 'Windows 7' mode. I compared the relay outputs up to the crash location and it looks pretty much the same. Yours: --- snip --- ... 0036:trace:msxml:domdoc_loadXML (0x17daf8)->(L"<application>\r\n\t<name>CCLBS</name>\r\n\t<platform>win32</platform>\r\n\t<version>2.6.0.393</version>\r\n\t<releaseNotesUrl/>\r\n\t<packageSets>\r\n\t\t<packageSet>\r\n\t\t\t<name>CCLBS</name>\r\n\t\t\t<installPath>[PROGRAMFILES]\\Adobe\\Adobe Creative Cloud</installPath>\r\n\t\t\t<sequenceNumber>1"... 0x7fe7c4) 0036:trace:msxml:domdoc_loadXML parsed document 0x7da06098 ... 0036:trace:msxml:domdoc_AddRef (0x17daf8)->(2) 0036:trace:msxml:domdoc_Release (0x17daf8)->(1) 0036:trace:msxml:domdoc_get_documentElement (0x17daf8)->(0x7fe7f4) 0036:trace:msxml:create_node type 1 0036:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7dd06b74 0036:Ret ntdll.RtlAllocateHeap() retval=001786a0 ret=7dd06b74 0036:trace:msxml:xmldoc_add_refs (0x7da06098)->(2) 0036:trace:msxml:domelem_QueryInterface (0x1786a0)->({2933bf80-7b36-11d2-b20e-00c04f983e60} 0x7fe77c) 0036:trace:msxml:domelem_AddRef (0x1786a0)->(2) 0036:trace:msxml:domelem_Release (0x1786a0)->(1) 0036:trace:msxml:domelem_QueryInterface (0x1786a0)->({2933bf86-7b36-11d2-b20e-00c04f983e60} 0x7fe7f4) 0036:trace:msxml:domelem_AddRef (0x1786a0)->(2) 0036:trace:msxml:domelem_Release (0x1786a0)->(1) 0036:trace:msxml:domelem_AddRef (0x1786a0)->(2) 0036:trace:msxml:domelem_Release (0x1786a0)->(1) 0036:trace:msxml:domelem_AddRef (0x1786a0)->(2) 0036:trace:msxml:domelem_AddRef (0x162b88)->(2) 0036:trace:msxml:domelem_appendChild (0x1786a0)->(0x162ba0 0x7fe7c8) 0036:trace:msxml:domelem_get_nodeType (0x162b88)->(0x7fe73c) 0036:Call oleaut32.VariantInit(007fe740) ret=7dd1e3c9 0036:Ret oleaut32.VariantInit() retval=00000000 ret=7dd1e3c9 0036:trace:msxml:domelem_insertBefore (0x1786a0)->(0x162ba0 {VT_EMPTY} 0x7fe7c8) 0036:trace:msxml:domelem_get_nodeType (0x162b88)->(0x7fe6dc) 0036:trace:msxml:domelem_insertBefore new node type 1 0036:trace:msxml:domelem_QueryInterface (0x162b88)->({4f2f4ba2-b822-11df-8b8a-6850dfd72085} 0x7fe61c) 0036:trace:msxml:node_query_interface (0x162b88)->(IID_xmlnode 0x7fe61c) 0036:trace:msxml:node_insert_before new child 0x7da06190, This->node 0x7da49440 0036:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7dd1dcbb ip=7dd1dcbb tid=0036 0036:trace:seh:raise_exception info[0]=00000000 0036:trace:seh:raise_exception info[1]=00000050 0036:trace:seh:raise_exception eax=0017d4c8 ebx=7dd77000 ecx=00162ba0 edx=00000000 esi=00162b88 edi=7da06190 0036:trace:seh:raise_exception ebp=007fe688 esp=007fe630 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010202 0036:trace:seh:call_stack_handlers calling handler at 0x50d4d0 code=c0000005 flags=0 --- snip --- Mine: --- snip --- ... 0024:trace:msxml:domdoc_loadXML (0xd17760)->(L"<application>\r\n\t<name>CCLBS</name>\r\n\t<platform>win32</platform>\r\n\t<version>2.6.0.393</version>\r\n\t<releaseNotesUrl/>\r\n\t<packageSets>\r\n\t\t<packageSet>\r\n\t\t\t<name>CCLBS</name>\r\n\t\t\t<installPath>[PROGRAMFILES]\\Adobe\\Adobe Creative Cloud</installPath>\r\n\t\t\t<sequenceNumber>1"... 0x7fe814) 0024:trace:msxml:domdoc_loadXML parsed document 0x7da49590 ... 0024:trace:msxml:domdoc_AddRef (0xd17760)->(2) 0024:trace:msxml:domdoc_Release (0xd17760)->(1) 0024:trace:msxml:domdoc_get_documentElement (0xd17760)->(0x7fe844) 0024:trace:msxml:create_node type 1 0024:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7d95cae5 0024:Ret ntdll.RtlAllocateHeap() retval=001775a8 ret=7d95cae5 0024:trace:msxml:xmldoc_add_refs (0x7da49590)->(2) 0024:trace:msxml:domelem_QueryInterface (0x1775a8)->({2933bf80-7b36-11d2-b20e-00c04f983e60} 0x7fe790) 0024:trace:msxml:domelem_AddRef (0x1775a8)->(2) 0024:trace:msxml:domelem_Release (0x1775a8)->(1) 0024:trace:msxml:domelem_QueryInterface (0x1775a8)->({2933bf86-7b36-11d2-b20e-00c04f983e60} 0x7fe844) 0024:trace:msxml:domelem_AddRef (0x1775a8)->(2) 0024:trace:msxml:domelem_Release (0x1775a8)->(1) 0024:trace:msxml:domelem_AddRef (0x1775a8)->(2) 0024:trace:msxml:domelem_Release (0x1775a8)->(1) 0024:trace:msxml:domelem_AddRef (0x1775a8)->(2) 0024:trace:msxml:domelem_AddRef (0x15ec28)->(2) 0024:trace:msxml:domelem_appendChild (0x1775a8)->(0x15ec40 0x7fe818) 0024:trace:msxml:domelem_get_nodeType (0x15ec28)->(0x7fe794) 0024:Call oleaut32.VariantInit(007fe780) ret=7d97aecc 0024:Ret oleaut32.VariantInit() retval=007fe780 ret=7d97aecc 0024:trace:msxml:domelem_insertBefore (0x1775a8)->(0x15ec40 {VT_EMPTY} 0x7fe818) 0024:trace:msxml:domelem_get_nodeType (0x15ec28)->(0x7fe6fc) 0024:trace:msxml:domelem_insertBefore new node type 1 0024:trace:msxml:domelem_QueryInterface (0x15ec28)->({4f2f4ba2-b822-11df-8b8a-6850dfd72085} 0x7fe608) 0024:trace:msxml:node_query_interface (0x15ec28)->(IID_xmlnode 0x7fe608) 0024:trace:msxml:node_insert_before new child 0x7da06ca8, This->node 0x7da088b0 0024:trace:msxml:domelem_removeChild (0x164a70)->(0x15ec40 (nil)) 0024:trace:msxml:domelem_QueryInterface (0x15ec28)->({4f2f4ba2-b822-11df-8b8a-6850dfd72085} 0x7fe588) 0024:trace:msxml:node_query_interface (0x15ec28)->(IID_xmlnode 0x7fe588) 0024:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7d9521fb 0024:Ret ntdll.RtlAllocateHeap() retval=00178d00 ret=7d9521fb 0024:Call ntdll.RtlFreeHeap(00110000,00000000,00178d00) ret=7d952295 0024:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7d952295 0024:trace:msxml:xmldoc_add_refs (0x7da49590)->(3) 0024:trace:msxml:xmldoc_release_refs (0x7da139a8)->(0) 0024:trace:msxml:xmldoc_release_refs freeing docptr 0x7da139a8 --- snip --- The crash seems to happen during unlink from current parent of the node. A parent node vtable pointer is NULL hence the call to 'domelem_removeChild' method causes the crash. Source: http://source.winehq.org/git/wine.git/blob/980e9225d20ade10cd85c3edea518d78d... --- snip --- 432 HRESULT node_insert_before(xmlnode *This, IXMLDOMNode *new_child, const VARIANT *ref_child, 433 IXMLDOMNode **ret) ... 473 refcount = xmlnode_get_inst_cnt(node_obj); 474 475 if(before) 476 { 477 xmlnode *before_node_obj = get_node_obj(before); 478 IXMLDOMNode_Release(before); 479 if(!before_node_obj) return E_FAIL; 480 481 /* unlink from current parent first */ 482 if(node_obj->parent) 483 { 484 hr = IXMLDOMNode_removeChild(node_obj->parent, node_obj->iface, NULL); 485 if (hr == S_OK) xmldoc_remove_orphan(node_obj->node->doc, node_obj->node); 486 } ... --- snip --- Do you use by chance this bugged gcc 4.9 compiler for building Wine? If yes, try downgrading to 4.8.x series and check again. $ sha1sum CreativeCloudSet-Up.exe 5439e86c0378a2d0debaa071259cc741762e5374 CreativeCloudSet-Up.exe $ du -sh CreativeCloudSet-Up.exe 3.0M CreativeCloudSet-Up.exe $ wine --version wine-1.7.20-112-g6e1d877 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36758 Austin English <austinenglish(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Adobe Creative Cloud Setup |Adobe Creative Cloud Setup |crashes very early in |crashes very early in |windows 7 mode |windows 7 mode (gcc-4.9.0) --- Comment #2 from Austin English <austinenglish(a)gmail.com> --- (In reply to Anastasius Focht from comment #1)
Do you use by chance this bugged gcc 4.9 compiler for building Wine? If yes, try downgrading to 4.8.x series and check again.
Actually, I was testing on my desktop using gentoo/gcc-4.8.2, but I can see the same issue on my laptop (fedora rawhide), with gcc-4.9.0. Using gcc-4.8.3 on my laptop avoids the issue. I was not aware of gcc-4.9.0 being buggy, the only issue I'm aware of was in msi, bug 36139, which is fixed.
$ sha1sum CreativeCloudSet-Up.exe 5439e86c0378a2d0debaa071259cc741762e5374 CreativeCloudSet-Up.exe
$ du -sh CreativeCloudSet-Up.exe 3.0M CreativeCloudSet-Up.exe
Same installer here. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=36758 --- Comment #3 from Ken Sharp <imwellcushtymelike(a)gmail.com> --- Is there an upstream GCC bug? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36758 --- Comment #4 from Austin English <austinenglish(a)gmail.com> --- (In reply to Ken Sharp from comment #3)
Is there an upstream GCC bug?
I haven't filed one. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36758 Sebastian Lackner <sebastian(a)fds-team.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |sebastian(a)fds-team.de --- Comment #5 from Sebastian Lackner <sebastian(a)fds-team.de> --- I am not sure if this is really a gcc bug. I am using Archlinux, which also ships a very new gcc version --- snip --- $ gcc --version gcc (GCC) 4.9.1 20140903 (prerelease) --- snip --- Nevertheless, this problem doesn't occur always - it only occurs with a small probability. I am able to reproduce this even with -O0, so its most likely not an optimization issue. Could someone with an old version of gcc please test that this issue really doesn't exist yet? I suspect that it might be timing related or some kind of multithreaded issue. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36758 Ken Sharp <imwellcushtymelike(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- See Also| |http://bugs.winehq.org/show | |_bug.cgi?id=35732 Severity|normal |minor --- Comment #6 from Ken Sharp <imwellcushtymelike(a)gmail.com> --- So it's a random failure? http://bugs.winehq.org/show_bug.cgi?id=35732 I suspect these two are duplicates. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36758 Ken Sharp <imwellcushtymelike(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |DUPLICATE --- Comment #7 from Ken Sharp <imwellcushtymelike(a)gmail.com> --- Indeed. The traces are the same. *** This bug has been marked as a duplicate of bug 35732 *** -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36758 Austin English <austinenglish(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #8 from Austin English <austinenglish(a)gmail.com> --- Closing. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (1)
-
wine-bugs＠winehq.org