December 2009 - Wine-Bugs - list.winehq.org

[Bug 20949] New: Native d3dx9_27.dll causes crash on save load
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20949 Summary: Native d3dx9_27.dll causes crash on save load Product: Wine Version: 1.1.34 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-d3d AssignedTo: wine-bugs(a)winehq.org ReportedBy: sternn(a)uhacc.org This started with 1.1.34. When loading any save (or starting a new game), Oblivion almost immediately crashes during the loading screen. The crash log indicates the native d3dx9_27.dll (copied from Oblivion DVD as per the Oblivion 1.2 article) as the culprit. Switching to builtin allows the game to run normally, but NPCs' and the player's skin render as solid black. Additionally, the player's equipment is ridiculously bright. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 20943] New: Red Alert 3 fails to start
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20943 Summary: Red Alert 3 fails to start Product: Wine Version: 1.1.34 Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: b_clephas(a)hotmail.com Created an attachment (id=25109) --> (http://bugs.winehq.org/attachment.cgi?id=25109) Part of the logfile OS: GNU/Linux Kubuntu-9.10 Program: EA Command & Conquer Red Alert 3 (official version) CmdLine: env WINEPREFIX="/home/<username>/.wine" winedbg "C:\Program Files\Electronic Arts\Red Alert 3\RA3.exe" Steps to reproduce: install RA3 and use above command line Starting with WINEDEBUG env gets the list as attached. Note that I only supplied part of the log, since the log is over 113 MB normal size or 3.4 MB zip-compressed. Started with winedbg instead of wine gets me this: WineDbg starting on pid 003b start_process () at /build/buildd/wine1.2-1.1.31/dlls/kernel32/process.c:953 0x7b8774bf start_process+0x4f [/build/buildd/wine1.2-1.1.31/dlls/kernel32/process.c:953] in kernel32: movl %esi,0x0(%esp) Unable to open file '' Backtrace: =>0 0x7b8774bf start_process+0x4f(peb=0x7ffdf000) [/build/buildd/wine1.2-1.1.31/dlls/kernel32/process.c:953] in kernel32 (0x0033fee8) 1 0x7bc6c164 call_thread_func+0xc() in ntdll (0x0033fef8) 2 0x7bc6c370 call_thread_entry_point+0x70(entry=0x7b877470, arg=0x7ffdf000) [/build/buildd/wine1.2-1.1.31/dlls/ntdll/signal_i386.c:2310] in ntdll (0x0033ffc8) 3 0x7bc4835a in ntdll (+0x3835a) (0x0033ffe8) 4 0xf7648e9d wine_call_on_stack+0x1d() in libwine.so.1 (0x00000000) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 4

[Bug 20941] New: 3DMark 2001SE crash on start (regression)
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20941 Summary: 3DMark 2001SE crash on start (regression) Product: Wine Version: 1.1.34 Platform: PC URL: http://www.futuremark.com/download/3dmark2001/ OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: zilforever(a)gmail.com It works in wine 1.1.33, I unistalled 1.1.34 to check it. To reproduce just install 3DMark and run: wine "c:/Program Files/MadOnion.com/3DMark2001 SE/3DMark2001SE.exe" err:module:attach_process_dlls "grphmfc.dll" failed to initialize, aborting err:module:LdrInitializeThunk Main exe initialization for L"C:\\Program Files\\MadOnion.com\\3DMark2001 SE\\3DMark2001SE.exe" failed, status e06d7363 OR wine "c:/Program Files/MadOnion.com/3DMark2001 SE/3DMark2001SE.exe" mmap() failed: Cannot allocate memory mmap() failed: Cannot allocate memory mmap() failed: Cannot allocate memory mmap() failed: Cannot allocate memory mmap() failed: Cannot allocate memory mmap() failed: Cannot allocate memory mmap() failed: Cannot allocate memory mmap() failed: Cannot allocate memory mmap() failed: Cannot allocate memory mmap() failed: Cannot allocate memory err:module:attach_process_dlls "grphmfc.dll" failed to initialize, aborting err:module:LdrInitializeThunk Main exe initialization for L"C:\\Program Files\\MadOnion.com\\3DMark2001 SE\\3DMark2001SE.exe" failed, status e06d7363 :( 3DMark 2000 works in 1.1.34 -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 10

[Bug 20923] New: Crash in mshtml/tests/events.c when run under valgrind
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20923 Summary: Crash in mshtml/tests/events.c when run under valgrind Product: Wine Version: 1.1.34 Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: mshtml AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com http://kegel.com/wine/valgrind/logs/2009-12-05-01.15/vg-mshtml_events.txt (and going back to Nov 27th) have a null pointer crash when run under valgrind: Backtrace: =>0 set_client_site+0xb3(doc=(nil), set=1) [dlls/mshtml/tests/events.c:1750] in mshtml_test (0x7f21fcc8) 1 run_test+0x3e(str="<html></html>", test=0xcf27000) [dlls/mshtml/tests/events.c:1796] in mshtml_test (0x7f21fd18) 2 func_events+0x69() [dlls/mshtml/tests/events.c:1859] in mshtml_test (0x7f21fd38) 3 run_test+0x9f(name="events.c") [include/wine/test.h:537] in mshtml_test (0x7f21fd98) set_client_site+0xb3 [dlls/mshtml/tests/events.c:1750] in mshtml_test: movl 0x0(%eax),%eax 1750 hres = IHTMLDocument2_QueryInterface(doc, &IID_IOleObject, (void**)&oleobj); Doesn't crash normally. Not sure why it crashes under valgrind, maybe some race condition shows up there because valgrind's so slow? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 3

[Bug 20920] New: Regression - read buffer overflow in StorageImpl_Construct in many msi tests
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20920 Summary: Regression - read buffer overflow in StorageImpl_Construct in many msi tests Product: Wine Version: 1.1.34 Platform: PC OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ole32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com http://kegel.com/wine/valgrind/logs/2009-12-04-18.45/diff-msi_msi.txt http://kegel.com/wine/valgrind/logs/2009-12-04-18.45/vg-msi_msi.txt and the rest of the msi logs for today show a regression like this: Invalid read of size 1 at memcpy (mc_replace_strmem.c:482) by StorageImpl_Construct (storage32.c:2280) by StgCreateDocfile (storage32.c:5696) by MSI_OpenDatabaseW (database.c:121) by MsiOpenDatabaseW (database.c:228) by MsiOpenDatabaseA (database.c:263) by create_package_db (msi.c:150) by test_MsiOpenProduct (msi.c:7194) Address 0x7f0459a2 is 0 bytes after a block of size 26 alloc'd at notify_alloc (heap.c:247) by RtlAllocateHeap (heap.c:1697) by msi_alloc (msipriv.h:1078) by strdupAtoW (msipriv.h:1124) by MsiOpenDatabaseA (database.c:249) by create_package_db (msi.c:150) by test_MsiOpenProduct (msi.c:7194) Did today's ole32 storage changes introduce it? This change looks like it's related: http://www.winehq.org/pipermail/wine-cvs/2009-December/062265.html @@ -2295,6 +2271,9 @@ static HRESULT StorageImpl_Construct( goto end; } strcpyW(This->pwcsName, pwcsName); + + memcpy(This->base.filename, pwcsName, DIRENTRY_NAME_BUFFER_LEN-1); + This->base.filename[DIRENTRY_NAME_BUFFER_LEN-1] = 0; -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 20851] New: Read buffer overflow in CombineRgn, triggered by imm32/tests/imm32.c
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20851 Summary: Read buffer overflow in CombineRgn, triggered by imm32/tests/imm32.c Product: Wine Version: 1.1.33 Platform: PC OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com http://kegel.com/wine/valgrind/logs/2009-11-18-21.51/vg-imm32_imm32.txt through http://kegel.com/wine/valgrind/logs/2009-11-27-12.53/vg-imm32_imm32.txt have the warning Invalid read of size 4 at REGION_SubtractO (region.c:2219) by REGION_RegionOp (region.c:1776) by REGION_SubtractRegion (region.c:2258) by CombineRgn (region.c:1376) by NC_DoNCPaint (nonclient.c:1022) by NC_HandleNCPaint (nonclient.c:1117) by DEFWND_DefWinProc (defwnd.c:303) by DefWindowProcA (defwnd.c:914) by ??? (library.h:159) by call_window_proc (winproc.c:469) by WINPROC_CallProcWtoA (winproc.c:1279) by WINPROC_call_window (winproc.c:2216) by call_window_proc (message.c:1635) by send_message (message.c:2482) by SendMessageW (message.c:2605) by send_ncpaint (painting.c:665) by BeginPaint (painting.c:871) by DEFWND_DefWinProc (defwnd.c:428) by DefWindowProcA (defwnd.c:914) by ??? (library.h:159) Address 0x7f082810 is 0 bytes after a block of size 32 alloc'd at notify_alloc (heap.c:247) by RtlAllocateHeap (heap.c:1697) by init_region (region.c:492) by REGION_RegionOp (region.c:1666) by REGION_UnionRegion (region.c:2094) by REGION_UnionRectWithRegion (region.c:1260) by ExtCreateRegion (region.c:1073) by get_update_region (painting.c:549) by send_ncpaint (painting.c:621) by BeginPaint (painting.c:871) by DEFWND_DefWinProc (defwnd.c:428) by DefWindowProcA (defwnd.c:914) by ??? (library.h:159) by call_window_proc (winproc.c:469) by WINPROC_call_window (winproc.c:2223) by DispatchMessageA (message.c:3089) by msg_spy_pump_msg_queue (imm32.c:81) by msg_spy_flush_msgs (imm32.c:88) by msg_spy_init (imm32.c:118) by init (imm32.c:173) This is likely a very old problem. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 3

[Bug 20850] New: Write buffer overflow in WidenPath()
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20850 Summary: Write buffer overflow in WidenPath() Product: Wine Version: 1.1.33 Platform: PC OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: gdi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com http://kegel.com/wine/valgrind/logs/2009-11-19-08.35/vg-gdi32_path.txt has the warning Invalid write of size 4 at PATH_WidenPath (path.c:1911) by WidenPath (path.c:2232) by test_widenpath (path.c:68) by func_path (path.c:508) by run_test (test.h:535) by main (test.h:585) Address 0x7f03bb48 is 0 bytes after a block of size 0 alloc'd at notify_alloc (heap.c:279) by RtlAllocateHeap (heap.c:1521) by PATH_WidenPath (path.c:1910) by WidenPath (path.c:2232) by test_widenpath (path.c:68) The same problem appears in current sources, and has probably been there since 2007. Looking at WidenPath(), it seems that maybe numStrokes should start at 1, not 0? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 9

[Bug 20806] New: Civilization II crashes on startup
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20806 Summary: Civilization II crashes on startup Product: Wine Version: 1.1.33 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: gdi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: arethusa26(a)gmail.com Created an attachment (id=24919) --> (http://bugs.winehq.org/attachment.cgi?id=24919) Civilization II backtrace With wine-1.1.33-301-gd963e97, Civilization II crashes with: fixme:wing:WinGGetDIBPointer16 6b8, (nil): not supported wine: Unhandled page fault on read access to 0xffffffff at address 0x1417:0x0000021a (thread 001c), starting debugger... Unhandled exception: page fault on read access to 0xffffffff in 16-bit code (1417:021a). ... Since this did not occur in 1.1.29, a regression test was performed, which showed: 6ad951804a2188dc0614ae0b9bd18e843937e8d3 is the first bad commit commit 6ad951804a2188dc0614ae0b9bd18e843937e8d3 Author: Alexandre Julliard <julliard(a)winehq.org> Date: Sat Sep 26 13:32:25 2009 +0200 gdi32: Make wing.dll into a stand-alone 16-bit module. :100644 100644 418244e96b0cb9af6c7df68bb9672fdba2f22057 f439b356d3dfcd102c2c57bfdd305aec7e51e08d M .gitignore :100755 100755 6a76027b8696730d320ef676e0b9b0d791457953 5372518cf20852bddda590c6616c1a303dbb232e M configure :100644 100644 175b051bad723f1f5b14afabc57d6038c448b75f faf891df33ba999eacd591a57f0a6e3475381e55 M configure.ac :040000 040000 7037a30347a8adf0775b3158c964cf213bb48aeb 156c989d78f1343a55d0b07e80f071d0e0db131c M dlls It looks like the removal of the WinGGetDIBPointer16 implementation makes Civilization II unhappy. Full output is attached. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 20684] New: Memory leak in CryptGenKey/CryptDestroyKey?
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20684 Summary: Memory leak in CryptGenKey/CryptDestroyKey? Product: Wine Version: 1.1.32 Platform: PC OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: rsaenh AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Created an attachment (id=24711) --> (http://bugs.winehq.org/attachment.cgi?id=24711) minimal test showing problem Chromium's unit_tests.exe's SignatureCreatorTest.BasicTest seems to show a leak in CryptGenKey(): 972 bytes in 1 blocks are definitely lost in loss record 836 of 921 at RtlAllocateHeap (heap.c:1423) by ??? by ??? by ??? by CryptGenKey (crypt.c:1434) by base::RSAPrivateKey::Create (rsa_private_key_win.cc:35) by SignatureCreatorTest_BasicTest_Test::TestBody (signature_creator_unittest.cc:15) I've extracted a minimal test case into the attached patch. To repeat, apply the patch and then run the rsaenh test under valgrind. It complains 972 bytes in 1 blocks are definitely lost in loss record 463 of 518 at RtlAllocateHeap (heap.c:1423) by new_object (handle.c:362) by new_key (rsaenh.c:834) by RSAENH_CPGenKey (rsaenh.c:3064) by CryptGenKey (crypt.c:1434) by func_rsaenh (rsaenh.c:2546) by run_test (test.h:535) by main (test.h:585) It seems the reference count of the generated key starts off one too high, or something? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 14

[Bug 20224] New: dlls/d3dx9_36/tests/math.C: Test failed: Expected matrix
by wine-bugs＠winehq.org Dec. 18, 2009

Dec. 18, 2009

http://bugs.winehq.org/show_bug.cgi?id=20224 Summary: dlls/d3dx9_36/tests/math.C: Test failed: Expected matrix Product: Wine Version: 1.1.30 Platform: PC-x86-64 URL: http://test.winehq.org/data/f3b9fb554dd116c88142209873 8a1f0223087cd1/wine_ae-904-x64-nogecko/d3dx9_36:math.h tml OS/Version: Linux Status: NEW Keywords: download, source, testcase, win64 Severity: trivial Priority: P2 Component: directx-d3d AssignedTo: wine-bugs(a)winehq.org ReportedBy: austinenglish(a)gmail.com Normally, I wouldn't file bugs related to testcases failing on 64-bit, but Jörg pointed out something interesting: http://test.winehq.org/data/f3b9fb554dd116c881422098738a1f0223087cd1/wine_a… http://test.winehq.org/data/f3b9fb554dd116c881422098738a1f0223087cd1/wine_j… (both are winetest results from 1.1.30, my win64 tests, and his 32-bit OS X tests) Both fail in the same way: dlls/d3dx9_36/tests/math.c math.c:512: Test failed: Expected matrix= (-0.214800,1.311600,0.475200,0.000000 0.950400,-0.883600,0.924400,0.000000 1.021200,0.193600,-1.358800,0.000000 18.298500,-29.624001,15.683499,1.000000 ) Got matrix= (-0.214800,1.311600,0.475200,0.000000 0.950402,-0.883606,0.924399,0.000000 1.021202,0.193600,-1.358803,0.000000 18.298527,-29.624161,15.683442,1.000000) math.c:756: Test marked todo: Expected Vector= (0.206945, 0.103473, 0.310418, 0.000000) , Got Vector= (0.093768, 0.187536, 0.375073, 0.000000) math: 364 tests executed (1 marked as todo, 1 failure), 0 skipped. Since it also affects a 32-bit wine, I figured I should file a bug. Perhaps driver related, and so only affects OS X/64-bit? -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7