May 2012 - Wine-Bugs - list.winehq.org

[Bug 30465] BridgeCentral: Invalid floating point operation in mozjs.dll (fldcw in JSDOUBLE_IS_INT32)

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=30465 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |linards.liepins(a)gmail.com --- Comment #11 from Anastasius Focht <focht(a)gmx.net> 2012-05-01 07:22:16 CDT --- *** Bug 30563 has been marked as a duplicate of this bug. *** -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012

[Bug 30563] WinBuilder v082: Error "Invalid floating point operation." occuring when running application.

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=30563 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download Status|UNCONFIRMED |RESOLVED URL| |http://reboot.pro/files/fil | |e/4-winbuilder/ CC| |focht(a)gmx.net Component|ieframe |mshtml Resolution| |DUPLICATE --- Comment #1 from Anastasius Focht <focht(a)gmx.net> 2012-05-01 07:22:15 CDT --- Hello, dupe of bug 30465 For a quick fix use "mozjs.dll" from http://bugs.winehq.org/attachment.cgi?id=39850 (compressed). Overwrite the original file in your app's WINEPREFIX with that. For example in default WINEPREFIX: ~/drive_c/windows/system32/gecko/1.5/wine_gecko/mozjs.dll $ du -sh WinBuilder.exe 928K WinBuilder.exe $ sha1sum WinBuilder.exe 0fb46d50b0bd0db7e79ed8aa713a0257a9d94bc1 WinBuilder.exe $ wine --version wine-1.5.3-40-g9080f3c Regards *** This bug has been marked as a duplicate of bug 30465 *** -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012

[Bug 30543] Multiple apps crash/terminate because K32GetModuleFileNameExW overflows supplied buffer

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=30543 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |focht(a)gmx.net Summary|K32GetModuleFileNameExW |Multiple apps |segfault |crash/terminate because | |K32GetModuleFileNameExW | |overflows supplied buffer --- Comment #7 from Anastasius Focht <focht(a)gmx.net> 2012-05-01 07:01:11 CDT --- Hello, I encountered this problem with another app which also indicates K32GetModuleFileNameExW() needs some more fixing. Download: http://download.sonymediasoftware.com/current/cdarchitect52d-trial_enu.exe (needs 'winetricks -q mfc42' prerequisite, ignore the other bugs from installer) The app collects process module information on startup using EnumProcesses/EnumProcessModules/GetModuleFileNameExW sequence. It fails and terminates silently with 0xC0000409 (stack overflow). Winedbg doesn't have a chance to attach due to bug 24038 App code, showing the problem (annotated): --- snip --- 005240F0 SUB ESP,234 005240F6 MOV EAX,DWORD PTR DS:[625C1C] ; global security cookie 005240FB XOR EAX,ESP 005240FD MOV DWORD PTR SS:[ESP+230],EAX ; store local canary on stack 00524104 MOV EAX,DWORD PTR SS:[ESP+238] 0052410B MOV ECX,DWORD PTR SS:[ESP+23C] ... 00524143 PUSH EBX 00524144 PUSH EDI 00524145 MOV EDI,DWORD PTR DS:[<&KERNEL32.GetProcAddress>] 0052414B PUSH OFFSET 005F65B4 ; Procname = "EnumProcesses" 00524150 PUSH EBP ; hModule 00524151 CALL EDI ; KERNEL32.GetProcAddress 00524153 PUSH OFFSET 005F65A0 ; "EnumProcessModules" 00524158 PUSH EBP 00524159 MOV DWORD PTR SS:[ESP+20],EAX ; KERNEL32.EnumProcesses 0052415D CALL EDI ; KERNEL32.GetProcAddress 0052415F PUSH OFFSET 005F6588 ; "GetModuleFileNameExW" 00524164 MOV EBX,EAX 00524166 PUSH EBP 00524167 MOV DWORD PTR SS:[ESP+38],EBX ; KERNEL32.EnumProcessModules 0052416B CALL EDI ; KERNEL32.GetProcAddress 0052416D CMP DWORD PTR SS:[ESP+18],ESI 00524171 MOV DWORD PTR SS:[ESP+28],EAX ; KERNEL32.GetModuleFileNameExW ... 00524197 MOV EDI,400 ... 005241D9 LEA EDX,[ESP+24] 005241DD PUSH EDX 005241DE PUSH EDI ; 0x400 005241DF PUSH ESI ; heap buffer (GlobalAlloc) 005241E0 CALL DWORD PTR SS:[ESP+24] ; KERNEL32.EnumProcesses 005241E4 TEST EAX,EAX ... 00524206 PUSH EAX ; ProcessID 00524207 PUSH 0 ; InheritHandle = FALSE 00524209 PUSH 410 ; Access = PROCESS_VM_READ|PROCESS_QUERY_INFORMATION 0052420E CALL DWORD PTR DS:[<&KERNEL32.OpenProcess>] ; KERNEL32.OpenProcess 00524214 MOV EBX,EAX ... 0052421E LEA ECX,[ESP+34] 00524222 PUSH ECX 00524223 PUSH 4 00524225 LEA EDX,[ESP+20] 00524229 PUSH EDX 0052422A PUSH EBX ; hProcess 0052422B CALL DWORD PTR SS:[ESP+40] ; KERNEL32.EnumProcessModules 0052422F TEST EAX,EAX ... 00524233 MOV ECX,DWORD PTR SS:[ESP+18] 00524237 PUSH 104 ; 0x104 (size of the filename buffer, in characters) 0052423C LEA EAX,[ESP+3C] 00524240 PUSH EAX ; stack buffer for filename 00524241 PUSH ECX ; hModule 00524242 PUSH EBX ; hProcess 00524243 CALL DWORD PTR SS:[ESP+38] ; KERNEL32.GetModuleFileNameExW 00524247 TEST EAX,EAX ; 0x20 ... 005242A0 MOV ECX,DWORD PTR SS:[ESP+238] ; get local canary back 005242A7 XOR EAX,EAX 005242A9 CMP DWORD PTR SS:[ESP+8],EAX ... <security cookie mismatch throw 0xC0000409 and terminate process> --- snip --- The problem is that the local canary is partly overwritten by Wine after return from kernel32.GetModuleFileNameExW(). 0033E370 - buffer start for filename 0033E578 - stack canary 0033E370 + 0x104*2 = 0033E578 Before the call: $+0 = start of buffer for filename --- snip --- $+204 00000023 $+208 C1D9AC35 $+20C 00524384 --- snip --- After the call: --- snip --- $+0 003A0043 C: $+4 0077005C \w $+8 006E0069 in $+C 006F0064 do $+10 00730077 ws $+14 0073005C \s $+18 00730079 ys $+1C 00650074 te $+20 0033006D m3 $+24 005C0032 2\ $+28 00650073 se $+2C 00760072 rv $+30 00630069 ic $+34 00730065 es $+38 0065002E .e $+3C 00650078 xe $+40 003B0000 .; ... <garbage data due to ReadProcessMemory reading more than needed> ... $+204 00000010 $+208 C1D90000 $+20C 00524384 --- snip --- The canary was touched by Wine with following code (line 1268): Source: http://source.winehq.org/git/wine.git/blob/d08f34cd8ecd883a0f0c6bd9b150d924… --- quote --- 1246 DWORD WINAPI K32GetModuleFileNameExW(HANDLE process, HMODULE module, 1247 LPWSTR file_name, DWORD size) 1248 { 1249 LDR_MODULE ldr_module; 1250 DWORD len; 1251 1252 if (!size) return 0; 1253 1254 if(!get_ldr_module(process, module, &ldr_module)) 1255 return 0; 1256 1257 len = ldr_module.FullDllName.Length / sizeof(WCHAR); 1258 if (size <= len) 1259 { 1260 len = size; 1261 size--; 1262 } 1263 1264 if (!ReadProcessMemory(process, ldr_module.FullDllName.Buffer, 1265 file_name, size * sizeof(WCHAR), NULL)) 1266 return 0; 1267 1268 file_name[size] = 0; 1269 return len; 1270 } --- quote --- Alexandre partly fixed some overflow when the caller supplied buffer was too small with: http://source.winehq.org/git/wine.git/commitdiff/d08f34cd8ecd883a0f0c6bd9b1… There is garbage written to the buffer following the module name if the supplied buffer size exceeds "ldr_module.FullDllName.Length". Not sure if this is intended... At least line 1268 is wrong, it writes past the end of buffer, destroying the stack canary for the app. The module name/path which is much shorter than supplied buffer and is already NULL-terminated in between (see dump). $ du -sh cdarchitect52d-trial_enu.exe 30M cdarchitect52d-trial_enu.exe $ sha1sum cdarchitect52d-trial_enu.exe 045cfb932746810b2bfb52594f31926be11ebb73 cdarchitect52d-trial_enu.exe $ wine --version wine-1.5.3-40-g9080f3c Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012

[Bug 28804] Angry Birds: switching from fullscreen to windowed mode problem

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=28804 --- Comment #10 from Graham Inggs <graham(a)nerve.org.za> 2012-05-01 07:00:25 CDT --- @Vinycius Maia: Just to clarify, the current setting of whether the game is in fullscreen or windowed mode is stored (encrypted) in the file 'users/<username>/Angry Birds Seasons/settings.lua'. The setting stored in 'Program Files/Rovio/Angry Birds Seasons/config.lua' seems to control the default setting for a new user, as well as the way in which switching from fullscreen to windowed mode occurs. So, to try and duplicate the problem, first edit 'Program Files/Rovio/Angry Birds Seasons/config.lua' and make sure that 'fullscreen = true'. Now start the game. If the game starts in windowed mode, set it to fullscreen and then exit the game. The game should now be in the same state in which older versions of the game shipped, i.e. the default fullscreen setting = true and the user fullscreen setting = true. Start the game, then switch to windowed mode by clicking on the gear and then the rectangle and see if the problem occurs. O/T: I have seen a problem with the textures similar to what you describe. It turned out to be the game executable and the game data were different versions, possibly caused by an incomplete upgrade. I uninstalled the game through 'Uninstall Wine Software' and then installed from a full download from http://download.angrybirds.com/ . The files in 'users/<username>/Angry Birds Seasons/', settings.lua and highscores.lua, remain untouched, so you don't lose your game progress. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012

[Bug 30558] Multiple app installers fail on missing Session.FeatureRequestState property

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=30558 Hans Leidekker <hans(a)meelstraat.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|-unknown |msi -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012

[Bug 30558] Multiple app installers fail on missing Session.FeatureRequestState property

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=30558 --- Comment #2 from Hans Leidekker <hans(a)meelstraat.net> 2012-05-01 05:53:12 CDT --- I've sent a patch to fix this. There are at least two more bugs after this one. We wrongly called DispGetParam to fetch the value parameter for the Property method (as well as a couple of other methods). I've sent another path to fix this. With these two patches installation proceeds, but only with native vbscript. There seems to be a problem with the way vbscript invokes DISPATCH_PROPERTYPUT methods. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012

[Bug 18290] Curse Client crashes since Curse.com enabled their premium service

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=18290 Frédéric Delanoy <frederic.delanoy(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED CC| |frederic.delanoy(a)gmail.com --- Comment #15 from Frédéric Delanoy <frederic.delanoy(a)gmail.com> 2012-05-01 05:28:09 CDT --- Closing. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012

[Bug 12918] Skip intro video, not work, when mouse is over Wine desktop

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=12918 Quentin Pâris <qparis(a)playonlinux.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |qparis(a)playonlinux.com --- Comment #10 from Quentin Pâris <qparis(a)playonlinux.com> 2012-05-01 05:09:05 CDT --- Same problem with current wine (1.4) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012

[Bug 30561] Intercept Alt-F1/Alt-F2 combinations in wineconsole

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=30561 --- Comment #8 from Artem S. Tashkinov <t.artem(a)mailcity.com> 2012-05-01 04:54:08 CDT --- Strangely Alt+F1 and Alt+F2 work just fine for me. It seems like your DE or Window Manager has these shortcuts assigned for something else, and if it's the case, I don't think you should blame Wine - fix your keyboards shortcuts at first. In Windows, I believe, you cannot even assign system level shortcuts to applications, e.g. try to make any application react to Win+R - your app just won't be able to intercept this shortcut unless the app reads events directly from the keyboard driver. I guess this bug is INVALID/WONTFIX. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012

[Bug 25206] Anarchy Online v18.4, Ingame browser crashes (Awesomium.dll)

by wine-bugs＠winehq.org

http://bugs.winehq.org/show_bug.cgi?id=25206 --- Comment #89 from Laryllan <laryllan(a)web.de> 2012-05-01 04:31:21 CDT --- (In reply to comment #88) > Hi. I am trying to get Ao running on Ubuntu 12.04, in wine 1.4. I see that > there are patches to be made, but I'm oblivious as to where I need to > copy/paste them. Could someone tell me what file it is I'm editing. I > understand I'm editing something in wine, but I don't know where. You may try this guide: http://insomnia-gravis.org/forum/viewtopic.php?f=10&t=1431 There is only one patch needed, raw3. The guide doesn't work on 12.04 if you're on a 64bit system. On 32bit, you need to dpkg-commit the changes. Read the output, it tells you when. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

May 1, 2012