[Bug 14483] New: WinVerifyTrustEx doesn't return expected HRESULT for PE images not digitally signed (TRUST_E_NOSIGNATURE)
http://bugs.winehq.org/show_bug.cgi?id=14483 Summary: WinVerifyTrustEx doesn't return expected HRESULT for PE images not digitally signed (TRUST_E_NOSIGNATURE) Product: Wine Version: CVS/GIT Platform: PC URL: http://www.filehippo.com/download_msn_messenger/751/ OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wintrust AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, this is a follow-up bug of bug 12718 Enable tracing: --- snip --- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\IdentityCRL\Trace] "Level"=dword:00000099 --- snip --- "msnmsgr.exe" PE image is *not* digitally signed. Compare both: --- snip windows trace --- .. <3776, 3780>: Verifying calling process image is signed...(a)passportclientlibrary.cpp_103 <3776, 3780>: Failed to WinVerifyTrustEx : C:\Program Files\MSN Messenger\msnmsgr.exe. hr = 0x800b0100(a)util.cpp_802 <3776, 3780>: Failed to Verify the file signature : C:\Program Files\MSN Messenger\msnmsgr.exe. hr = 0x800b0100(a)util.cpp_858 <3776, 3780>: Unable to verify caller is signed by MSFT cert 0x800b0100. GetCertificate API will not function correctly.(a)passportclientlibrary.cpp_124 --- snip windows trace --- vs. --- snip wine trace --- .. <8, 9>: Verifying calling process image is signed...(a)passportclientlibrary.cpp_103 <8, 9>: Passed WinVerifyTrustEx : C:\Program Files\MSN Messenger\msnmsgr.exe. @util.cpp_807 <8, 9>: Verify certificate against microsoft root : C:\Program Files\MSN Messenger\msnmsgr.exe. @util.cpp_808 <8, 9>: Failed to Verify the file signature : C:\Program Files\MSN Messenger\msnmsgr.exe. hr = 0x800b0100(a)util.cpp_858 <8, 9>: Unable to verify caller is signed by MSFT cert 0x800b0100. GetCertificate API will not function correctly.(a)passportclientlibrary.cpp_124 --- snip wine trace --- --- snip wine --- 0030:Ret imagehlp.ImageGetCertificateHeader() retval=00000000 ret=609fb7cc .. 0030:trace:wintrust:CryptSIPGetSignedDataMsg returning 0 0030:Ret wintrust.CryptSIPGetSignedDataMsg() retval=00000000 ret=607c4b2a 0030:trace:crypt:CryptSIPGetSignedDataMsg returning 0 0030:trace:wintrust:SoftpubLoadMessage returning 1 (800b0100) 0030:Ret wintrust.SoftpubLoadMessage() retval=00000001 ret=60a05942 0030:trace:wintrust:WINTRUST_DefaultVerify returning 00000001 0030:trace:wintrust:WinVerifyTrust returning 00000001 0030:Ret wintrust.WinVerifyTrustEx() retval=00000001 ret=003ad2e9 --- snip wine --- Remember: S_FALSE is not a failure code at all. The return code evaluation from messenger looks like an inlined FAILED() macro ((HRESULT)(Status)<0) which basically just tests if the result has the high bit set. They don't test for S_OK, hence it incorrectly reports "pass" in wine. TRUST_E_NOSIGNATURE has to be propagated somewhere because that's what WinVerifyTrustEx() should return in that case. Reagrds -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=14483 Juan Lang <juan_lang(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |juan_lang(a)yahoo.com -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=14483 Juan Lang <juan_lang(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |NEW Ever Confirmed|0 |1 --- Comment #1 from Juan Lang <juan_lang(a)yahoo.com> 2008-07-15 10:02:11 --- Confirming. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=14483 --- Comment #2 from Juan Lang <juan_lang(a)yahoo.com> 2008-07-15 14:15:41 --- Patches sent to verify and fix the problem: http://www.winehq.org/pipermail/wine-patches/2008-July/057906.html http://www.winehq.org/pipermail/wine-patches/2008-July/057907.html http://www.winehq.org/pipermail/wine-patches/2008-July/057908.html http://www.winehq.org/pipermail/wine-patches/2008-July/057909.html -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=14483 Juan Lang <juan_lang(a)yahoo.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED --- Comment #3 from Juan Lang <juan_lang(a)yahoo.com> 2008-07-16 13:34:25 --- Fix was just committed. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=14483 Alexandre Julliard <julliard(a)winehq.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #4 from Alexandre Julliard <julliard(a)winehq.org> 2008-07-25 13:24:03 --- Closing bugs fixed in 1.1.2. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=14483 Austin English <austinenglish(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Version|CVS/GIT |unspecified -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=14483 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download, Installer Fixed by SHA1| |b871679922efd56777bc24a94bc | |5c9463110b231 Version|unspecified |1.1.1 --- Comment #5 from Anastasius Focht <focht(a)gmx.net> 2011-10-12 03:38:11 CDT --- Hello, filling/correcting fields ... Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=14483 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- URL|http://www.filehippo.com/do |https://web.archive.org/web |wnload_msn_messenger/751/ |/20060813121324/http://down | |load.microsoft.com/download | |/5/a/8/5a892c0f-5b87-4767-8 | |927-6fe5d8cfc582/Install_MS | |N_Messenger.exe --- Comment #6 from Anastasius Focht <focht(a)gmx.net> --- Hello folks, adding stable download link via Internet Archive for documentation https://web.archive.org/web/20060813121324/http://download.microsoft.com/dow... https://www.virustotal.com/gui/file/56ca1fdd145f4ccd5e665b5f0c0864acb3cfbd5d... $ sha1sum Install_MSN_Messenger.exe 9f85d0ba089d7451fd4339973fbd6f71aab98a85 Install_MSN_Messenger.exe $ du -sh Install_MSN_Messenger.exe 9.0M Install_MSN_Messenger.exe Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (2)
-
wine-bugs＠winehq.org -
WineHQ Bugzilla