November 2014 - Wine-Bugs - list.winehq.org

[Bug 16999] New: Visual C++ 2005 Express IDE: stack overflow at startup due to empty class id string
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

http://bugs.winehq.org/show_bug.cgi?id=16999 Summary: Visual C++ 2005 Express IDE: stack overflow at startup due to empty class id string Product: Wine Version: 1.1.13 Platform: Other URL: http://www.microsoft.com/express/2005/download/default.a spx OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: ole32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, prerequisites: Patch from bug 5054 to work around invalid URL cache entries (http://bugs.winehq.org/attachment.cgi?id=18726) 1. clean WINEPREFIX 2. sh winetricks -q dotnet20 msxml6 3. download and run web installer (see URL) 4. start the VC++ 2005 IDE (wine VCExpress.exe) --- The IDE crashes due to stack overflow. --- snip --- ... 0038:Call advapi32.RegQueryValueExW(00000418,50061238 L"MRUCommand2GUID",00000000,003289e8,003289ec,003289e0) ret=50008e41 0038:Ret advapi32.RegQueryValueExW() retval=00000000 ret=50008e41 0038:Call advapi32.RegQueryValueExW(00000418,502800c8 L"MRUCommand2ID",00000000,00000000,00328c38,00328c34) ret=501f1800 0038:Ret advapi32.RegQueryValueExW() retval=00000000 ret=501f1800 0038:Call ole32.CLSIDFromString(00328c40 L"{5EFC7975-14BC-11CF-9B2B-00AA00573819}",50758004) ret=501f181a 0038:trace:ole:__CLSIDFromString L"{5EFC7975-14BC-11CF-9B2B-00AA00573819}" -> 0x50758004 0038:Ret ole32.CLSIDFromString() retval=00000000 ret=501f181a 0038:CALL MSVCR80.memset(003289f0,00000000,00000204) ret=50008e1d 0038:RET MSVCR80.memset() retval=003289f0 ret=50008e1d 0038:Call advapi32.RegQueryValueExW(00000418,50061258 L"MRUCommand3GUID",00000000,003289e8,003289ec,003289e0) ret=50008e41 0038:Ret advapi32.RegQueryValueExW() retval=00000000 ret=50008e41 0038:Call advapi32.RegQueryValueExW(00000418,502800e4 L"MRUCommand3ID",00000000,00000000,00328c38,00328c34) ret=501f1847 0038:Ret advapi32.RegQueryValueExW() retval=00000000 ret=501f1847 0038:Call ole32.CLSIDFromString(00328c40 L"",50758018) ret=501f1861 0038:Call KERNEL32.GetProcessHeap() ret=604e16fd 0038:Ret KERNEL32.GetProcessHeap() retval=00110000 ret=604e16fd 0038:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=604e1711 0038:Ret ntdll.RtlAllocateHeap() retval=00ed1298 ret=604e1711 0038:Call advapi32.RegOpenKeyW(80000000,00ed1298 L"\\CLSID",00328acc) ret=604e1758 0038:Ret advapi32.RegOpenKeyW() retval=00000000 ret=604e1758 ... 0038:Call advapi32.RegOpenKeyW(80000000,00ed1298 L"\\CLSID",0023294c) ret=604e1758 0038:Ret advapi32.RegOpenKeyW() retval=00000000 ret=604e1758 0038:Call KERNEL32.GetProcessHeap() ret=604e17f0 0038:Ret KERNEL32.GetProcessHeap() retval=00110000 ret=604e17f0 0038:Call ntdll.RtlFreeHeap(00110000,00000000,00ed1298) ret=604e1809 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=604e1809 0038:Call advapi32.RegQueryValueW(0000043c,00000000,00232956,00232950) ret=604e182d 0038:Ret advapi32.RegQueryValueW() retval=00000000 ret=604e182d 0038:Call advapi32.RegCloseKey(0000043c) ret=604e18b1 0038:Ret advapi32.RegCloseKey() retval=00000000 ret=604e18b1 0038:trace:seh:raise_exception code=c00000fd flags=0 addr=0x601e289e ip=0x601e289e tid=0038 0038:trace:seh:raise_exception eax=00000000 ebx=602e4ff4 ecx=00232720 edx=00000000 esi=00000000 edi=0023268c 0038:trace:seh:raise_exception ebp=00232038 esp=00231ffc cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010206 0038:trace:seh:call_stack_handlers calling handler at 0x506ea492 code=c00000fd flags=0 0038:err:seh:setup_exception_record stack overflow 976 bytes in thread 0038 eip 601b4678 esp 00230f60 stack 0x230000-0x231000-0x330000 --- snip --- Relevant registry data: --- snip --- [HKEY_USERS\S-1-5-4\Software\Microsoft\VCExpress\8.0\StartPage] "Command1"="{F3192B90-EA73-480F-9471-04524118D767}|20487|" "Command2"="{F3192B90-EA73-480F-9471-04524118D767}|20482|" "Command3"="{F3192B90-EA73-480F-9471-04524118D767}|20480|" "Command4"="{F3192B90-EA73-480F-9471-04524118D767}|20481|" "Command5"="{F3192B90-EA73-480F-9471-04524118D767}|20483|" "Command6"="{F3192B90-EA73-480F-9471-04524118D767}|20485|" "DownloadState"=dword:00000000 "MRUCommand1GUID"="{5EFC7975-14BC-11CF-9B2B-00AA00573819}" "MRUCommand1ID"=dword:000000d8 "MRUCommand2GUID"="{5EFC7975-14BC-11CF-9B2B-00AA00573819}" "MRUCommand2ID"=dword:00000141 "MRUCommand3GUID"="" "MRUCommand3ID"=dword:00000000 "MRUCommand4GUID"="" "MRUCommand4ID"=dword:00000000 --- snip --- The problem is actually a bug in CLSIDFromProgID() when passed an empty id string which results in nice recursion :-) --- snip dlls/ole32/compobj.c --- HRESULT WINAPI CLSIDFromString(LPOLESTR idstr, CLSID *id ) { HRESULT ret; if (!id) return E_INVALIDARG; ret = __CLSIDFromString(idstr, id); if(ret != S_OK) { /* It appears a ProgID is also valid */ ret = CLSIDFromProgID(idstr, id); } return ret; } ... HRESULT WINAPI CLSIDFromProgID(LPCOLESTR progid, LPCLSID clsid) { static const WCHAR clsidW[] = { '\\','C','L','S','I','D',0 }; WCHAR buf2[CHARS_IN_GUID]; LONG buf2len = sizeof(buf2); HKEY xhkey; WCHAR *buf; if (!progid || !clsid) { ERR("neither progid (%p) nor clsid (%p) are optional\n", progid, clsid); return E_INVALIDARG; } /* initialise clsid in case of failure */ memset(clsid, 0, sizeof(*clsid)); buf = HeapAlloc( GetProcessHeap(),0,(strlenW(progid)+8) * sizeof(WCHAR) ); strcpyW( buf, progid ); strcatW( buf, clsidW ); if (RegOpenKeyW(HKEY_CLASSES_ROOT,buf,&xhkey)) { HeapFree(GetProcessHeap(),0,buf); WARN("couldn't open key for ProgID %s\n", debugstr_w(progid)); return CO_E_CLASSSTRING; } HeapFree(GetProcessHeap(),0,buf); if (RegQueryValueW(xhkey,NULL,buf2,&buf2len)) { RegCloseKey(xhkey); WARN("couldn't query clsid value for ProgID %s\n", debugstr_w(progid)); return CO_E_CLASSSTRING; } RegCloseKey(xhkey); return CLSIDFromString(buf2,clsid); } --- snip dlls/ole32/compobj.c --- CLSIDFromProgID() needs to be fixed for the empty cls/prog id string case. With proper patch applied, the IDE starts. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 9

[Bug 36736] New: Tucows Download Manager 2014 crashes on startup (decryption scheme relies on 'kernel32.dll.SetFilePointer' hotpatch signature)
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

https://bugs.winehq.org/show_bug.cgi?id=36736 Bug ID: 36736 Summary: Tucows Download Manager 2014 crashes on startup (decryption scheme relies on 'kernel32.dll.SetFilePointer' hotpatch signature) Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, example download: http://www.tucows.com/preview/609375/Intuit-QuickBooks-Simple-Start-Edition… The download manager/installer uncompresses a secondary installer from bootstrapper. Before that the app decrypts parts of itself and this is done incorrectly, leading to strange results/code paths later. --- snip --- $ WINEDEBUG=+tid,+seh,+relay wine ./Setup_QuickBooks_SimpleStart_Intel_2009.exe >>log.txt 2>&1 ... 0023:Starting process L"Z:\\home\\focht\\Downloads\\Setup_QuickBooks_SimpleStart_Intel_2009.exe" (entryproc=0x409c40) 0023:Call KERNEL32.GetModuleHandleA(00000000) ret=004030e8 0023:Ret KERNEL32.GetModuleHandleA() retval=00400000 ret=004030e8 0023:Call KERNEL32.GetCommandLineA() ret=004030f3 0023:Ret KERNEL32.GetCommandLineA() retval=00134078 ret=004030f3 ... 0023:Call KERNEL32.CreateFileA(004203cc "Z:\\home\\focht\\Downloads\\Setup_QuickBooks_SimpleStart_Intel_2009.exe",80000000,00000001,00000000,00000003,00000080,00000000) ret=004075bd 0023:Ret KERNEL32.CreateFileA() retval=00000050 ret=004075bd 0023:Call KERNEL32.FindResourceA(00000000,00002b67,0000000a) ret=00409bfb 0023:Ret KERNEL32.FindResourceA() retval=004112c8 ret=00409bfb 0023:Call KERNEL32.SizeofResource(00000000,004112c8) ret=00409c0e 0023:Ret KERNEL32.SizeofResource() retval=0000002c ret=00409c0e 0023:Call KERNEL32.LoadResource(00000000,004112c8) ret=00409c20 0023:Ret KERNEL32.LoadResource() retval=00419a88 ret=00409c20 0023:Call KERNEL32.LockResource(00419a88) ret=00409c31 0023:Ret KERNEL32.LockResource() retval=00419a88 ret=00409c31 ... 0023:Call KERNEL32.CreateFileA(00437a5c "C:\\users\\focht\\Temp\\is-RJFDD.tmp\\Setup_QuickBooks_SimpleStart_Intel_2009.tmp",40000000,00000000,00000000,00000002,00000080,00000000) ret=004075bd 0023:Ret KERNEL32.CreateFileA() retval=00000054 ret=004075bd ... 0023:Call KERNEL32.SetFilePointer(00000050,00000000,0033fd78,00000001) ret=004075e0 0023:Ret KERNEL32.SetFilePointer() retval=000b9b03 ret=004075e0 0023:Call KERNEL32.SetFilePointer(00000050,000b9b03,0033fd60,00000000) ret=00407690 0023:Ret KERNEL32.SetFilePointer() retval=000b9b03 ret=00407690 0023:Call KERNEL32.SetFilePointer(00000054,00002a72,0033fd7c,00000000) ret=00407690 0023:Ret KERNEL32.SetFilePointer() retval=00002a72 ret=00407690 0023:Call KERNEL32.SetEndOfFile(00000054) ret=004076b8 0023:Ret KERNEL32.SetEndOfFile() retval=00000001 ret=004076b8 0023:Call KERNEL32.SetFilePointer(00000054,00000000,0033fd7c,00000000) ret=00407690 0023:Ret KERNEL32.SetFilePointer() retval=00000000 ret=00407690 0023:Call KERNEL32.WriteFile(00000054,00420424,00002a72,0033fd88,00000000) ret=004076e4 0023:Ret KERNEL32.WriteFile() retval=00000001 ret=004076e4 0023:Call KERNEL32.CloseHandle(00000054) ret=0040755d 0023:Ret KERNEL32.CloseHandle() retval=00000001 ret=0040755d 0023:Call KERNEL32.CloseHandle(00000050) ret=0040755d 0023:Ret KERNEL32.CloseHandle() retval=00000001 ret=0040755d 0023:Call user32.CreateWindowExA(00000000,0040a334 "STATIC",0040a320 "InnoSetupLdrWindow",00000000,00000000,00000000,00000000,00000000,00000000,00000000,00400000,00000000) ret=0040a136 ... 0023:Call KERNEL32.CreateProcessA(00000000,00420488 "\"C:\\users\\focht\\Temp\\is-RJFDD.tmp\\Setup_QuickBooks_SimpleStart_Intel_2009.tmp\" /SL5=\"$10066,747501,80384,Z:\\home\\focht\\Downloads\\Setup_QuickBooks_SimpleStart_Intel_2009.exe\" ",00000000,00000000,00000000,00000000,00000000,00000000,0033fd64,0033fd54) ret=00409a19 0023:Ret KERNEL32.CreateProcessA() retval=00000000 ret=00409a19 0023:Call KERNEL32.GetLastError() ret=00409671 0023:Ret KERNEL32.GetLastError() retval=00000005 ret=00409671 0023:Call KERNEL32.FormatMessageA(00003200,00000000,00000005,00000000,0033f8f8,00000400,00000000) ret=004072a8 0023:Ret KERNEL32.FormatMessageA() retval=00000010 ret=004072a8 0023:trace:seh:raise_exception code=c0000005 flags=0 addr=0x402eb4 ip=00402eb4 tid=0023 0023:trace:seh:raise_exception info[0]=00000000 0023:trace:seh:raise_exception info[1]=0000fd38 0023:trace:seh:raise_exception eax=00420654 ebx=00000069 ecx=00000002 edx=00000000 esi=00000005 edi=0040b240 0023:trace:seh:raise_exception ebp=0033fd34 esp=0033fd00 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010212 0023:trace:seh:call_stack_handlers calling handler at 0x4096eb code=c0000005 flags=0 ... 0023:trace:seh:call_stack_handlers handler at 0x7bc825c1 returned 2 0023:trace:seh:call_stack_handlers calling handler at 0x4096eb code=c00000fd flags=10 0023:err:seh:setup_exception_record stack overflow 992 bytes in thread 0023 eip f73e796b esp 00240f50 stack 0x240000-0x241000-0x340000 --- snip --- What is not seen (debugging): the app uses the entry point signature of 'kernel32.dll.SetFilePointer' as seed for further decryption. --- snip --- ... 0040400C 8B73 01 MOV ESI,DWORD PTR DS:[EBX+1] ; SetFilePointer 0040400F 89F7 MOV EDI,ESI ; 00404011 4F DEC EDI 00404012 8B57 01 MOV EDX,DWORD PTR DS:[EDI+1] ; *(DWORD*)entry 00404015 BB 6319F033 MOV EBX,33F01963 0040401A 31DA XOR EDX,EBX 0040401C 89D3 MOV EBX,EDX 0040401E 53 PUSH EBX 0040401F 5E POP ESI 00404020 89F0 MOV EAX,ESI 00404022 BA A6AA2938 MOV EDX,3829AAA6 00404027 81F2 A2AA2938 XOR EDX,3829AAA2 0040402D 29D4 SUB ESP,EDX 0040402F 890424 MOV DWORD PTR SS:[ESP],EAX 00404032 68 22778D73 PUSH 738D7722 00404037 B9 E9E37802 MOV ECX,278E3E9 0040403C 58 POP EAX 0040403D 31C1 XOR ECX,EAX 0040403F BF 7325BB99 MOV EDI,99BB2573 00404044 31F9 XOR ECX,EDI 00404046 81F1 5057EB50 XOR ECX,50EB5750 0040404C 31CE XOR ESI,ECX --- snip --- Wine's 'kernel32.dll.SetFilePointer' entry signature: --- snip --- 7B83EE7E 8D4C24 04 LEA ECX,DWORD PTR SS:[ESP+4] 7B83EE82 83E4 F0 AND ESP,FFFFFFF0 7B83EE85 FF71 FC PUSH DWORD PTR DS:[ECX-4] 7B83EE88 55 PUSH EBP 7B83EE89 89E5 MOV EBP,ESP 7B83EE8B 56 PUSH ESI 7B83EE8C 53 PUSH EBX 7B83EE8D 51 PUSH ECX 7B83EE8E 83EC 4C SUB ESP,4C 7B83EE91 E8 FA07FEFF CALL KERNEL32.__x86.get_pc_thunk.bx 7B83EE96 81C3 6AC10700 ADD EBX,7C16A --- snip --- The app expects a hotpatch-type entry which gives proper seed. With 'DECLSPEC_HOTPATCH': --- snip ---- 7B83EE8E 8BFF MOV EDI,EDI 7B83EE90 55 PUSH EBP 7B83EE91 8BEC MOV EBP,ESP 7B83EE93 5D POP EBP 7B83EE94 8D4C24 04 LEA ECX,DWORD PTR SS:[ESP+4] 7B83EE98 83E4 F0 AND ESP,FFFFFFF0 7B83EE9B FF71 FC PUSH DWORD PTR DS:[ECX-4] 7B83EE9E 55 PUSH EBP 7B83EE9F 89E5 MOV EBP,ESP ... --- snip ---- With that part fixed the installer runs into next (known) mshtml/ieframe bug. A DRM/protection scan on the installer doesn't show suspicious schemes (might be custom). --- snip --- -=[ ProtectionID v0.6.5.5 OCTOBER]=- (c) 2003-2013 CDKiLLER & TippeX Build 31/10/13-21:09:09 Ready... Scanning -> Z:\home\focht\Downloads\Setup_QuickBooks_SimpleStart_Intel_2009.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 768984 (0BBBD8h) Byte(s) -> File Appears to be Digitally Signed @ Offset 0B9B08h, size : 020D0h / 08400 byte(s) -> File has 680200 (0A6108h) bytes of appended data starting at offset 013A00h [File Heuristics] -> Flag : 00000000000001001100000000100100 (0x0004C024) [Entrypoint Section Entropy] : 6.66 [-= Installer =-] Inno Setup v5.5.0 Module - Scan Took : 0.261 Second(s) [000000105h tick(s)] [533 scan(s) done] --- snip --- $ du -sh Setup_QuickBooks_SimpleStart_Intel_2009.exe 752K Setup_QuickBooks_SimpleStart_Intel_2009.exe $ sha1sum Setup_QuickBooks_SimpleStart_Intel_2009.exe d2f213e1d05845897c9dae891a73d6be62283206 Setup_QuickBooks_SimpleStart_Intel_2009.exe $ wine --version wine-1.7.20 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 35134] New: Shroud of the Avatar: Forsaken Virtues installer waits indefinitely for cmd.exe during execution of batch files (argv[0] is not 'cmd.exe')
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

http://bugs.winehq.org/show_bug.cgi?id=35134 Bug ID: 35134 Summary: Shroud of the Avatar: Forsaken Virtues installer waits indefinitely for cmd.exe during execution of batch files (argv[0] is not 'cmd.exe') Product: Wine Version: 1.7.8 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: cmd Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, the unwrapped installer spawns 'cmd.exe' to execute some batch files. CreateProcessAsUserW() is used which just passes appname and cmdline to CreateProcessW(). 'appname' -> "C:\\windows\\system32\\cmd.exe" 'cmdline' -> "/C \"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\"" --- snip --- $ WINEDEBUG=+tid,+seh,+relay,+cmd wine ./SotAInstaller.exe >>log.txt 2>&1 ... 0024:Call KERNEL32.CreateProcessW(001481f8 L"C:\\windows\\system32\\msiexec.exe",001483f8 L" /i \"C:\\users\\focht\\Application Data\\Portalarium\\Shroud of the Avatar 0.1.0\\install\\8E829DF\\ShroudPatchClientInstaller.msi\" AI_SETUPEXEPATH=\"Z:\\home\\focht\\Downloads\\SotAInstaller.exe\" SETUPEXEDIR=\"Z:\\home\\focht\\Downloads\\\" EXE_CMD_LINE=\"/exenoupdates /exelang 0 /noprereqs ",00000000,00000000,00000000,00000020,00000000,00000000,0033f8d0,0033f918) ret=0040f458 ... 002b:Call KERNEL32.__wine_kernel_init() ret=7bc599ec 0024:Ret KERNEL32.CreateProcessW() retval=00000001 ret=0040f458 ... 0039:Call advapi32.CreateProcessAsUserW(000000dc,00b54e98 L"C:\\windows\\system32\\cmd.exe",00b55388 L"/C \"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\"",00000000,00000000,00000001,08000000,00000000,00000000,00d5dc18,00d5dca8) ret=0051c6ab 0039:fixme:advapi:CreateProcessAsUserW 0xdc L"C:\\windows\\system32\\cmd.exe" L"/C \"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\"" (nil) (nil) 1 0x08000000 (nil) (null) 0xd5dc18 0xd5dca8 - semi- stub ... 003b:Call KERNEL32.__wine_kernel_init() ret=7bc599ec 0039:Ret advapi32.CreateProcessAsUserW() retval=00000001 ret=0051c6ab 0039:Call KERNEL32.OpenProcess(00100000,00000000,0000003a) ret=0051c6d9 0039:Ret KERNEL32.OpenProcess() retval=000000e0 ret=0051c6d9 0039:Call KERNEL32.WaitForSingleObject(000000e0,ffffffff) ret=0051c6e8 ... 003b:Starting process L"C:\\windows\\system32\\cmd.exe" (entryproc=0x7ed07208) ... 003b:trace:cmd:wmain Full commandline 'L"/C \"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\""' 003b:trace:cmd:wmain Command line parm: 'L"\"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\""' ... 003b:trace:cmd:wmain Set L"=Z:" to L"Z:\\home\\focht\\Downloads" ... 003b:Call KERNEL32.WriteFile(00000010,00129540,00000024,0033ab10,00000000) ret=7ed0063d Microsoft Windows 5.1.2600 (1.7.8) ... 003b:Call KERNEL32.WriteFile(00000010,00129540,0000001a,0033a4d0,00000000) ret=7ed0063d Z:\home\focht\Downloads> ... --- snip --- For whatever reason 'cmd' expects the first argument of the command line to be the executable name. With the executable name missing from 'argv[0]', '/C' is eaten (opt_c remains FALSE) and batch execution never takes place -> hangs on console input. Source: http://source.winehq.org/git/wine.git/blob/dd0b719a3a1419f34774fc4cd921f337… --- snip --- 2329 int wmain (int argc, WCHAR *argvW[]) 2330 { ... 2364 cmdLine = GetCommandLineW(); 2365 WINE_TRACE("Full commandline '%s'\n", wine_dbgstr_w(cmdLine)); 2366 args = 1; /* start at first arg, skipping cmd.exe itself */ ... --- snip --- $ sha1sum SotAInstaller.exe 5163cd5d92cb6c8a50e5b8169ca428afdf2b76b7 SotAInstaller.exe $du -sh SotAInstaller.exe 12M SotAInstaller.exe $ wine --version wine-1.7.8-220-g0bef543 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 10

[Bug 37306] New: ApexDC crashes on start with wine configured as Vista or higher
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

https://bugs.winehq.org/show_bug.cgi?id=37306 Bug ID: 37306 Summary: ApexDC crashes on start with wine configured as Vista or higher Product: Wine Version: 1.7.26 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: hk-wine(a)circlestorm.org ApexDC 1.6.0 x86_64 version ( http://www.apexdc.net/download/ ) ApexDC shows a crash dialog box with no interesting info, however it says that I should run it with the .pdb file to get a debug trace that could be reported to the ApexDC team. However, the .pdb file is already there so possibly that is the FindFirstFileExW bug also causing the failed debug (Bug 37305). $ wine ApexDC-x64.exe fixme:wincodecs:PngDecoder_Block_GetCount stub fixme:module:load_library unsupported flag(s) used (flags: 0x00000800) fixme:advapi:RegisterTraceGuidsW (0x14031ca58, (nil), {f7b697a3-4db5-4d3b-be71-c4d284e6592f}, 7, 0x1404824d0, (null), (null), 0x1404b55a8): stub fixme:file:FindFirstFileExW options not implemented 0x00000000 0x00000001 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 11

[Bug 36549] New: Trove crashes when run
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

http://bugs.winehq.org/show_bug.cgi?id=36549 Bug ID: 36549 Summary: Trove crashes when run Product: Wine Version: 1.7.19 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: lostcoderhaley(a)gmail.com Created attachment 48645 --> http://bugs.winehq.org/attachment.cgi?id=48645 console output Trion's Trove MMO alpha crashes on startup with an access violation. Trove is not an XP compatible exe. Normally it should be run from Glyph to have the login credentials, however, since Glyph rarely runs well enough to start trove I had to run it directly. Since it crashes during early startup this does not appear to have changed the crash dump. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 18

[Bug 37583] New: Trion's Glyph MMO manager crashes unimplemented function msvcr110.dll.?_GetConcurrency@details@Concurrency@@YAIXZ
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

https://bugs.winehq.org/show_bug.cgi?id=37583 Bug ID: 37583 Summary: Trion's Glyph MMO manager crashes unimplemented function msvcr110.dll.?_GetConcurrency(a)details@Concurrency@@YAI XZ Product: Wine Version: 1.7.31 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: msvcrt Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as the summary says. This appeared with recent client update. --- snip --- $ pwd /home/focht/wine-games/wineprefix-trion/drive_c/Program Files/Glyph $ wine ./GlyphClient.exe ... fixme:msvcp:_Locinfo__Locinfo_ctor_cat_cstr (0x33fd34 63 ) semi-stub fixme:msvcp:locale__Locimp__Makexloc (0x33fd34 63 0x2736c78 (nil)) semi-stub fixme:msvcp:locale__Locimp__Makewloc (0x33fd34 63 0x2736c78 (nil)) semi-stub fixme:msvcp:locale__Locimp__Makeushloc (0x33fd34 63 0x2736c78 (nil)) semi-stub wine: Call from 0x7b83b1d3 to unimplemented function msvcr110.dll.?_GetConcurrency(a)details@Concurrency@@YAIXZ, aborting wine: Unimplemented function msvcr110.dll.?_GetConcurrency(a)details@Concurrency@@YAIXZ called at address 0x7b83b1d3 (thread 0009), starting debugger... --- snip --- Source: http://source.winehq.org/git/wine.git/blob/bcbd83d1543a345fca994266eff224fb… $ sha1sum GlyphInstall-0-1.exe d56109ec05c665cc2e745c8d06265a834f0a7f65 GlyphInstall-0-1.exe $ du -sh GlyphInstall-0-1.exe 31M GlyphInstall-0-1.exe $ wine --version wine-1.7.31-47-g516ed8e Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 11

[Bug 35135] New: Air Video Server HD 1.x crashes on startup (NULL SERVER_INFO_101.sv101_comment returned from NetServerGetInfo)
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

http://bugs.winehq.org/show_bug.cgi?id=35135 Bug ID: 35135 Summary: Air Video Server HD 1.x crashes on startup (NULL SERVER_INFO_101.sv101_comment returned from NetServerGetInfo) Product: Wine Version: 1.7.8 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: netapi32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says ... Prerequisite: Bonjour Print Services for Windows v2.x Download: http://support.apple.com/downloads/DL999/en_US/BonjourPSSetup.exe --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/AirVideoServer HD $ WINEDEBUG=+tid,+seh,+relay,+netapi32 wine ./AirVideoServerUI.exe >>log.txt 2>&1 ... 003e:Call netapi32.NetServerGetInfo(00000000,00000065,026fe6f8) ret=00438847 003e:trace:netapi32:NetServerGetInfo (null) 101 0x26fe6f8 003e:Call KERNEL32.GetComputerNameW(026fe520,026fe654) ret=7e028081 003e:Ret KERNEL32.GetComputerNameW() retval=00000001 ret=7e028081 003e:trace:netapi32:NetApiBufferAllocate (38, 0x26fe6f8) 003e:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7e02854b 003e:Ret ntdll.RtlAllocateHeap() retval=01c997d8 ret=7e02854b 003e:Call KERNEL32.GetVersionExW(026fe540) ret=7e028113 003e:Ret KERNEL32.GetVersionExW() retval=00000001 ret=7e028113 003e:Ret netapi32.NetServerGetInfo() retval=00000000 ret=00438847 003e:trace:seh:raise_exception code=c0000005 flags=0 addr=0x40f634 ip=0040f634 tid=003e 003e:trace:seh:raise_exception info[0]=00000000 003e:trace:seh:raise_exception info[1]=00000000 003e:trace:seh:raise_exception eax=00000000 ebx=01c89fb0 ecx=026fe714 edx=00000001 esi=026fe714 edi=00000000 003e:trace:seh:raise_exception ebp=026fe6e0 esp=026fe6d8 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010246 ... --- snip --- Application code showing access of SERVER_INFO_101.sv101_comment member: --- snip --- ... 0043882C 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48] 0043882F 50 PUSH EAX ; bufptr 00438830 6A 65 PUSH 65 ; level: SERVER_INFO_101 00438832 6A 00 PUSH 0 ; servername 00438834 C745 B4 00000000 MOV DWORD PTR SS:[EBP-4C],0 0043883B C745 B8 00000000 MOV DWORD PTR SS:[EBP-48],0 00438842 E8 1F8B5D00 CALL <JMP.&NETAPI32.NetServerGetInfo> 00438847 85C0 TEST EAX,EAX 00438849 75 5C JNZ SHORT AirVideo.004388A7 0043884B 8B45 B8 MOV EAX,DWORD PTR SS:[EBP-48] ; SERVER_INFO_101 0043884E 8D4D D4 LEA ECX,DWORD PTR SS:[EBP-2C] 00438851 FF70 14 PUSH DWORD PTR DS:[EAX+14] ; *boom* ... --- snip --- Dump of structure returned from NetServerGetInfo(): --- snip --- $+0 01C7B700 000001F4 $+4 01C7B704 01C7B718 ; UNICODE ptr "nexus4" $+8 01C7B708 00000005 $+C 01C7B70C 00000001 $+10 01C7B710 00001000 $+14 01C7B714 00000000 ; sv101_comment --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/aa370903%28v=vs.85%… --- quote --- typedef struct _SERVER_INFO_101 { DWORD sv101_platform_id; LPWSTR sv101_name; DWORD sv101_version_major; DWORD sv101_version_minor; DWORD sv101_type; LPWSTR sv101_comment; } SERVER_INFO_101, *PSERVER_INFO_101, *LPSERVER_INFO_101; ... sv101_comment Type: LPWSTR A pointer to a Unicode string specifying a comment describing the server. The comment can be null. --- quote --- "can" ... sure ;-) Maybe Wine could use an empty string by default to prevent applications from crashing that directly access this member without checking for NULL. Source: http://source.winehq.org/git/wine.git/blob/8b5ec5bb4911842966534102a602b0f0… --- snip --- 1018 NET_API_STATUS WINAPI NetServerGetInfo(LMSTR servername, DWORD level, LPBYTE* bufptr) 1019 { ... 1047 if (ret == NERR_Success) 1048 { 1049 /* INFO_100 structure is a subset of INFO_101 */ 1050 PSERVER_INFO_101 info = (PSERVER_INFO_101)*bufptr; 1051 OSVERSIONINFOW verInfo; 1052 1053 info->sv101_platform_id = PLATFORM_ID_NT; 1054 info->sv101_name = (LMSTR)(*bufptr + sizeof(SERVER_INFO_101)); 1055 memcpy(info->sv101_name, computerName, 1056 computerNameLen * sizeof(WCHAR)); 1057 verInfo.dwOSVersionInfoSize = sizeof(verInfo); 1058 GetVersionExW(&verInfo); 1059 info->sv101_version_major = verInfo.dwMajorVersion; 1060 info->sv101_version_minor = verInfo.dwMinorVersion; 1061 /* Use generic type as no wine equivalent of DC / Server */ 1062 info->sv101_type = SV_TYPE_NT; 1063 info->sv101_comment = NULL; 1064 } ... --- snip --- $ sha1sum AirVideoServerHD-1.0.11.exe d1b58dea685bcce3381e29b9cc2fefda90f97389 AirVideoServerHD-1.0.11.exe $ du -sh AirVideoServerHD-1.0.11.exe 11M AirVideoServerHD-1.0.11.exe $ wine --version wine-1.7.8-220-g0bef543 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 18797] New: CATIAV5R19: Fails to install on Wine higher than 1.1.18
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

http://bugs.winehq.org/show_bug.cgi?id=18797 Summary: CATIAV5R19: Fails to install on Wine higher than 1.1.18 Product: Wine Version: 1.1.22 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: lukasz.wojnilowicz(a)gmail.com Created an attachment (id=21574) --> (http://bugs.winehq.org/attachment.cgi?id=21574) Output from terminal I'm using Wine 1.1.22 (compiled from source using gcc version 4.3.2 20081105 (Red Hat 4.3.2-7) ) on Fedora 10 i386. The problem is that CATIAV5R19 crashes during setup (doesn't even start to copy files). This is probably regression because this program installs fine on Wine-1.1.18 (not in 1.1.19 and later). -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 17

[Bug 33006] New: Installation of Garmin Training Center 3.6.5 fails
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

http://bugs.winehq.org/show_bug.cgi?id=33006 Bug #: 33006 Summary: Installation of Garmin Training Center 3.6.5 fails Product: Wine Version: 1.5.22 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: par.johansson8(a)comhem.se Classification: Unclassified Installation of Garmin Training Center 3.6.5 fails with "You must be a local administrator to run this application". According to the app database (http://appdb.winehq.org/objectManager.php?sClass=version&iId=26537) at least installation should work. I use Fedora 17. Best regards, Pär Johansson -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 28

[Bug 36066] New: Basecamp 4.25 : If an application complains about a lack of administrator privileges
by wine-bugs＠winehq.org Nov. 28, 2021

Nov. 28, 2021

http://bugs.winehq.org/show_bug.cgi?id=36066 Bug ID: 36066 Summary: Basecamp 4.25 : If an application complains about a lack of administrator privileges Product: Wine Version: 1.6-rc2 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: sbec(a)heustoeffel.ch Garmin BaseCamp 4.25 complains about a lack of administrator privileges. Wont run under Win98 (as many Threads say to do) How can i bypass this ? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3