December 2013 - Wine-Bugs - list.winehq.org

[Bug 28628] New: advapi32/security.ok: GetTokenInformation(Token, TokenGroups, ...) returns partial garbage leading to uninitialized memory accesses?
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=28628 Bug #: 28628 Summary: advapi32/security.ok: GetTokenInformation(Token, TokenGroups,...) returns partial garbage leading to uninitialized memory accesses? Product: Wine Version: 1.3.29 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: advapi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified "wine advapi32_test.exe.so security.c" says in part security.c:1475: TokenGroups: security.c:1489: S-1-1-0, \Everyone use: 5 attr: 0x00000007 security.c:1489: S-1-2-0, \LOCAL use: 5 attr: 0x00000007 security.c:1489: S-1-5-4, NT AUTHORITY\INTERACTIVE use: 5 attr: 0x00000007 security.c:1489: S-1-5-11, NT AUTHORITY\Authenticated Users use: 5 attr: 0x00000007 security.c:1489: S-1-5-32-544, BUILTIN\Administrators use: 4 attr: 0x0000000f security.c:1492: attr: 0x00000007 LookupAccountSid failed with error 1332 security.c:1492: attr: 0xc0000007 LookupAccountSid failed with error 1332 Those two LookupAccountSid() errors appear to be because the last two SIDs from GetTokenInformation() are garbage. This causes the valgrind warning Conditional jump or move depends on uninitialised value(s) at RtlEqualSid (sec.c:210) by EqualSid (security.c:1027) by IsWellKnownSid (security.c:961) by LookupAccountSidW (security.c:2098) by LookupAccountSidA (security.c:2024) by test_token_attr (security.c:1485) by func_security (security.c:4000) by run_test (test.h:556) by main (test.h:624) Uninitialised value was created by a client request at RtlAllocateHeap (heap.c:208) by test_token_attr (security.c:1468) by func_security (security.c:4000) by run_test (test.h:556) by main (test.h:624) I dumped the SIDs that are being compared in test_token_attr, and it looks like the first six are ok, but the last two aren't: ... security.c:1487: Dumping SIDs security.c:1489: i = 4, j = 0, val = 1 security.c:1489: i = 4, j = 1, val = 2 security.c:1489: i = 4, j = 2, val = 0 security.c:1489: i = 4, j = 3, val = 0 security.c:1489: i = 4, j = 4, val = 0 security.c:1489: i = 4, j = 5, val = 0 security.c:1489: i = 4, j = 6, val = 0 security.c:1489: i = 4, j = 7, val = 5 security.c:1489: i = 4, j = 8, val = 20 security.c:1489: i = 4, j = 9, val = 0 security.c:1489: i = 4, j = 10, val = 0 security.c:1489: i = 4, j = 11, val = 0 security.c:1496: S-1-5-32-544, BUILTIN\Administrators use: 4 attr: 0x0000000f security.c:1487: Dumping SIDs security.c:1489: i = 5, j = 0, val = 1 security.c:1489: i = 5, j = 1, val = 2 security.c:1489: i = 5, j = 2, val = 0 security.c:1489: i = 5, j = 3, val = 0 security.c:1489: i = 5, j = 4, val = cc security.c:1489: i = 5, j = 5, val = cc security.c:1489: i = 5, j = 6, val = cc security.c:1489: i = 5, j = 7, val = cc security.c:1489: i = 5, j = 8, val = cc security.c:1489: i = 5, j = 9, val = cc security.c:1489: i = 5, j = 10, val = cc security.c:1489: i = 5, j = 11, val = cc security.c:1499: attr: 0x00000007 LookupAccountSid failed with error 1332 security.c:1487: Dumping SIDs security.c:1489: i = 6, j = 0, val = cc security.c:1489: i = 6, j = 1, val = cc security.c:1489: i = 6, j = 2, val = cc security.c:1489: i = 6, j = 3, val = cc security.c:1489: i = 6, j = 4, val = cc security.c:1489: i = 6, j = 5, val = cc security.c:1489: i = 6, j = 6, val = cc security.c:1489: i = 6, j = 7, val = cc security.c:1489: i = 6, j = 8, val = cc security.c:1489: i = 6, j = 9, val = cc security.c:1489: i = 6, j = 10, val = cc security.c:1489: i = 6, j = 11, val = cc security.c:1499: attr: 0xc0000007 LookupAccountSid failed with error 1332 Is some buffer length wrong somewhere? The responsible code seems to be from: commit 573db9ef639f65385f1efab5593b52c72b4b4108 Author: Nikolay Sivov <nsivov(a)codeweavers.com> Date: Tue Aug 23 11:16:27 2011 +0400 ntdll: While requesting TokenGroups calculate required user buffer size in server. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 10

[Bug 28695] New: Uninitialized variables in create_rebar
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=28695 Bug #: 28695 Summary: Uninitialized variables in create_rebar Product: Wine Version: 1.3.30 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ieframe AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified Valgrind complains: Conditional jump or move depends on uninitialised value(s) at REBAR_CommonSetupBand (rebar.c:1772) by REBAR_WindowProc (rebar.c:2549) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by create_rebar (iexplore.c:481) by ie_window_proc (iexplore.c:506) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by WIN_CreateWindowEx (win.c:1446) by CreateWindowExW (win.c:1582) by create_ie (iexplore.c:694) by InternetExplorer_Create (iexplore.c:811) Uninitialised value was created by a stack allocation at create_rebar (iexplore.c:434) Conditional jump or move depends on uninitialised value(s) at REBAR_ValidateBand (rebar.c:1630) by REBAR_WindowProc (rebar.c:2565) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by create_rebar (iexplore.c:481) by ie_window_proc (iexplore.c:506) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by WIN_CreateWindowEx (win.c:1446) by CreateWindowExW (win.c:1582) by create_ie (iexplore.c:694) by InternetExplorer_Create (iexplore.c:811) Uninitialised value was created by a stack allocation at create_rebar (iexplore.c:434) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 4

[Bug 28767] New: shell32: uninitialized memory used during TRASH_EnumItems, triggered by "make recyclebin.ok"
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=28767 Bug #: 28767 Summary: shell32: uninitialized memory used during TRASH_EnumItems, triggered by "make recyclebin.ok" Product: Wine Version: 1.3.30 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: shell32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified Running "make recyclebin.ok" in shell32/tests, valgrind complains Conditional jump or move depends on uninitialised value(s) at __mktime_internal (mktime.c:428) by mktime (mktime.c:518) by TRASH_EnumItems (trash.c:444) by SHQueryRecycleBinW (recyclebin.c:859) by SHQueryRecycleBinA (recyclebin.c:848) by test_query_recyclebin (recyclebin.c:74) by func_recyclebin (recyclebin.c:106) by run_test (test.h:556) by main (test.h:624) Uninitialised value was created by a stack allocation at TRASH_EnumItems (trash.c:506) Looks like not all the fields of del_time got initialized? 47b40c58 (Mikołaj Zalewski 2006-08-17 18:29:58 +0200 444) del_secs = mktime(&del_time); -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 4

[Bug 17105] New: Magic: The Gathering Online 3.0 fails to log in with L0014
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=17105 Summary: Magic: The Gathering Online 3.0 fails to log in with L0014 Product: Wine Version: 1.1.13 Platform: HP OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: secur32 AssignedTo: kai.blin(a)gmail.com ReportedBy: robfjohnson(a)gmail.com Created an attachment (id=18941) --> (http://bugs.winehq.org/attachment.cgi?id=18941) Console Output When running Magic Online Version 3 with Wine, when I try to log in I receive L0014: The Magic Online Server is down for maintenance. If you continue to receive this error, check your date and time settings. Note that this is different than bug 14060, as 14060 gives you L0001: You have lost your connection to the server. Bug 14060 is supposedly (and from what I see actually) fixed as of git from 1-20-09. I encountered this bug when I tested with git from 1-22-09, and continues into 1-23-09. Having spoken to other Magic Online players, I found that L0014 has been caused (on Windows machines) by firewall issues, and also by incorrectly set Date and Time. I do not know any such issues on my computer that would cause this bug, but I am not certain that the problem is not my computer. It seems to me that the bug is in schan - which was the cause of but 14060. 14060 was schan being not implemented, whereas this bug, unless the problem is with my computer, may be that schan is half-implemented. (See, in the Console Output, the "Using hardcoded "NORMAL" priority" messages.) However, this paragraph is just speculation in case it gives someone an idea. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 26

[Bug 26639] New: Steam: crashes randomly while downloading L4D2
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=26639 Summary: Steam: crashes randomly while downloading L4D2 Product: Wine Version: 1.3.16 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: mewrei(a)mewrei.com Created an attachment (id=33912) --> (http://bugs.winehq.org/attachment.cgi?id=33912) Backtrace file While downloading/installing Left 4 Dead 2 via Steam, the app will randomly crash in random intervals, sometimes on startup, othertimes several minutes after launch. There are no user interactions that cause this. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 18614] New: Problem with starting of wine or winecfg
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=18614 Summary: Problem with starting of wine or winecfg Product: Wine Version: 1.1.21 Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: critical Priority: P1 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: kh-pol(a)yandex.ru When I start winecfg (even when there is no .wine in my home directory) error message emerges. ktdr(a)jigsaw:~$ winecfg wine: created the configuration directory '/home/ktdr/.wine' Could not load Mozilla. HTML rendering will be disabled. wine: Unhandled page fault on write access to 0xeee52e96 at address 0x7d87dc36 (thread 000b), starting debugger... err:process:__wine_kernel_init boot event wait timed out err:winecfg:open_mountmgr failed to open mount manager err 2 ktdr(a)jigsaw:~$ -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 49

[Bug 27413] New: Segmentation fault in Kudos 2 Demo
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=27413 Summary: Segmentation fault in Kudos 2 Demo Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: ktowns(a)live.com.au Created an attachment (id=35059) --> (http://bugs.winehq.org/attachment.cgi?id=35059) Terminal output Downloaded demo here: http://www.positech.co.uk/kudos2/Kudos2DemoInstaller.exe On attempting to start a new game, the application exits. Terminal reads 'Segmentation fault.' Full terminal output attached. On an aside, this game, along with others by Positech show nothing for me, graphically, unless I edit the CONFIG.MUF file in the game's data directory, and set IsWindowed to 1 - that might be useful for anyone looking into this, as well. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 15

[Bug 15784] New: Grim Fandango: altered colors
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=15784 Summary: Grim Fandango: altered colors Product: Wine Version: 1.1.7 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: t0p0linik(a)yahoo.it Created an attachment (id=16896) --> (http://bugs.winehq.org/attachment.cgi?id=16896) In 16 bpp the background fades to dark green The game runs very slow and Manny doesn't move smooth, both when i set 3D accel and when i set software rendering. Furthermore, background colors get altered in a few seconds: when X is at 16 bpp the background fades to dark green, when X is in 24 bpp mode the background gets saturated. Note that there is a rectangle around Manny which is at normal colors (maybe is it redrawn more often than the other parts of the window?). -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 18

[Bug 25241] New: Steam: Source based games will not start
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=25241 Summary: Steam: Source based games will not start Product: Wine Version: 1.3.6 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: arho.iivari(a)elisanet.fi Source based games will not start in steam after recent updates to Source engine. A popup window will appear with text "Preparing to launch Counter Strike: Source...". Then the pop-up disappears and the game will not start. Same happens with all Source based games. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 8

[Bug 18119] New: SmartDraw aborts after displaying trial window
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=18119 Summary: SmartDraw aborts after displaying trial window Product: Wine Version: 1.1.19 Platform: PC URL: http://www.smartdraw.com/downloads/ OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: user32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: arethusa26(a)gmail.com Created an attachment (id=20566) --> (http://bugs.winehq.org/attachment.cgi?id=20566) SmartDraw output After applying the patch from bug 18076 onto today's Git (wine-1.1.19-90-g781b087) or installing native gdiplus, after choosing to continue using the trial version of SmartDraw 2009, SmartDraw displays a dialog box with the message: "Unable to load SmartDraw. Perhaps too many instances are open." >From the relay log, I noticed that this occurs prior to the message box being displayed: 0009:Call user32.AppendMenuA(00000f00,00000110,000075cd,03c97a78) ret=0150caa8 0009:Ret user32.AppendMenuA() retval=00000000 ret=0150caa8 I've attached a +menu trace and the normal trace output. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 8