November 2014 - Wine-Bugs - list.winehq.org

[Bug 37548] New: .NET applications using native .NET Frameworks fail to load, reporting 'CLR error: 80004005. The program will now terminate.' ('RtlAddVectoredContinueHandler' is a stub)
by wine-bugs＠winehq.org Nov. 19, 2021

Nov. 19, 2021

https://bugs.winehq.org/show_bug.cgi?id=37548 Bug ID: 37548 Summary: .NET applications using native .NET Frameworks fail to load, reporting 'CLR error: 80004005. The program will now terminate.' ('RtlAddVectoredContinueHandler' is a stub) Product: Wine Version: 1.7.30 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, since the addition of vectored continue handlers (http://source.winehq.org/git/wine.git/commitdiff/4c0ceacee0413031f129d2e62b…) .NET apps using MS .NET Frameworks fail to load. Example: 'KeePass Password Safe' (.NET 2.0 based) Download: http://sourceforge.net/projects/keepass/files/KeePass 2.x/2.28/KeePass-2.28-Setup.exe Prerequisite: 'winetricks -q dotnet20' --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/KeePass Password Safe 2 ... $ WINEDEBUG=+tid,+seh,+relay wine ./KeePass.exe >>log.txt 2>&1 ... 002a:Call KERNEL32.GetModuleHandleW(79e7fcf4 L"kernel32.dll") ret=79ed0a64 002a:Ret KERNEL32.GetModuleHandleW() retval=7b810000 ret=79ed0a64 002a:Call KERNEL32.GetProcAddress(7b810000,79ed0ac8 "AddVectoredContinueHandler") ret=79ed0a79 002a:Ret KERNEL32.GetProcAddress() retval=7bc22b3c ret=79ed0a79 002a:Call KERNEL32.GetProcAddress(7b810000,79ed0aa8 "RemoveVectoredContinueHandler") ret=79ed0a86 002a:Ret KERNEL32.GetProcAddress() retval=7bc24324 ret=79ed0a86 002a:Call ntdll.RtlAddVectoredContinueHandler(00000001,7a05baae) ret=7a05e131 002a:fixme:seh:RtlAddVectoredContinueHandler 1 0x7a05baae stub 002a:Ret ntdll.RtlAddVectoredContinueHandler() retval=00000000 ret=7a05e131 ... 002a:Call msvcr80._CxxThrowException(0033fc70,79f9acc4) ret=79f97365 002a:Call KERNEL32.RaiseException(e06d7363,00000001,00000003,0033fbb4) ret=7e94e191 002a:trace:seh:raise_exception code=e06d7363 flags=1 addr=0x7b83af87 ip=7b83af87 tid=002a 002a:trace:seh:raise_exception info[0]=19930520 002a:trace:seh:raise_exception info[1]=0033fc70 002a:trace:seh:raise_exception info[2]=79f9acc4 002a:trace:seh:raise_exception eax=7b826e65 ebx=7b8be000 ecx=79f9acc4 edx=0033fb10 esi=0033fbb0 edi=0033fb70 002a:trace:seh:raise_exception ebp=0033fb48 esp=0033fae4 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000283 002a:trace:seh:call_stack_handlers calling handler at 0x79f9ab98 code=e06d7363 flags=1 002a:trace:seh:call_stack_handlers handler at 0x79f9ab98 returned 1 002a:trace:seh:call_stack_handlers calling handler at 0x79f93fe6 code=e06d7363 flags=1 .... 002a:trace:seh:call_stack_handlers handler at 0x79f93fe6 returned 1 002a:trace:seh:call_stack_handlers calling handler at 0x7a2ee06a code=e06d7363 flags=1 002a:trace:seh:cxx_frame_handler handling C++ exception rec 0x33faf0 frame 0x33fccc trylevel 4 descr 0x7a2ee090 nested_frame (nil) 002a:trace:seh:dump_exception_type flags 0 destr (nil) handler (nil) type info 0x79f9acd4 002a:trace:seh:dump_exception_type 0: flags 1 type 0x7a38fdf0 {vtable=0x79f9a3b0 name=.PAVEEMessageException@@ ()} offsets 0,-1,0 size 4 copy ctor (nil) 002a:trace:seh:dump_exception_type 1: flags 1 type 0x7a38fdb8 {vtable=0x79f9a3b0 name=.PAVEEException@@ ()} offsets 0,-1,0 size 4 copy ctor (nil) 002a:trace:seh:dump_exception_type 2: flags 1 type 0x7a38fdd4 {vtable=0x79f9a3b0 name=.PAVCLRException@@ ()} offsets 0,-1,0 size 4 copy ctor (nil) 002a:trace:seh:dump_exception_type 3: flags 1 type 0x7a38f788 {vtable=0x79f9a3b0 name=.PAVException@@ ()} offsets 0,-1,0 size 4 copy ctor (nil) 002a:trace:seh:dump_exception_type 4: flags 1 type 0x7a38f7ac {vtable=0x79f9a3b0 name=.PAX ()} offsets 0,-1,0 size 4 copy ctor (nil) ... ... 002a:Call user32.MessageBoxW(00010020,0033fab4 L"CLR error: 80004005.\n The program will now terminate.",0033f484 L"KeePass.exe - Fatal error",00001010) ret=7a127ae5 ... --- snip --- $ sha1sum KeePass-2.28-Setup.exe cdcdb6f86112d2a7a5b7094b7c49a30fdb2d280c KeePass-2.28-Setup.exe $ du -sh KeePass-2.28-Setup.exe 2.5M KeePass-2.28-Setup.exe $ wine --version wine-1.7.30-181-gffd3135 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 10

[Bug 27837] New: E-Bundle Transcript Viewer: crashes when opening a supported file
by wine-bugs＠winehq.org Nov. 18, 2021

Nov. 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=27837 Summary: E-Bundle Transcript Viewer: crashes when opening a supported file Product: Wine Version: unspecified Platform: x86 OS/Version: Mac OS X 10.5 Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: Guiding_Light87(a)hotmail.com When I double-click the document icon or try to launch from the application "open" command, an error message appears saying that a serious problem has occurred and the program needs to be closed. The program in question is West E-Transcript Bundle Viewer (http://www.reallegal.com/download.asp) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 7

[Bug 35472] New: E-Transcript Bundle Viewer 6.x installer uses VBScript MsgBox function with optional arguments
by wine-bugs＠winehq.org Nov. 18, 2021

Nov. 18, 2021

https://bugs.winehq.org/show_bug.cgi?id=35472 Bug ID: 35472 Summary: E-Transcript Bundle Viewer 6.x installer uses VBScript MsgBox function with optional arguments Product: Wine Version: 1.7.11 Hardware: x86 OS: Linux Status: NEW Severity: enhancement Priority: P2 Component: vbscript Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, not a serious thing. Though this might be useful in future for other apps. The installer wants to show a message box via VBScript and supplies optional arguments in VBScript MsgBox function: --- snip --- $ wine ./ebundleviewer-6.0.exe ... fixme:vbscript:Global_MsgBox unsupported arg_cnt 3 --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/sfw6660x%28v=vs.84%29.aspx Source: http://source.winehq.org/git/wine.git/blob/d22252198949d3bf5fd3df77fa686adb… --- snip --- 1291 static HRESULT Global_MsgBox(vbdisp_t *This, VARIANT *args, unsigned args_cnt, VARIANT *res) 1292 { 1293 BSTR prompt; 1294 HRESULT hres; 1295 1296 TRACE("\n"); 1297 1298 if(args_cnt != 1) { 1299 FIXME("unsupported arg_cnt %d\n", args_cnt); 1300 return E_NOTIMPL; 1301 } 1302 1303 hres = to_string(args, &prompt); 1304 if(FAILED(hres)) 1305 return hres; 1306 1307 hres = show_msgbox(This->desc->ctx, prompt, res); 1308 SysFreeString(prompt); 1309 return hres; 1310 } --- snip --- $ sha1sum ebundleviewer-6.0.exe 58ab2e55039e61f8522a06d551c0bbfc32c8badc ebundleviewer-6.0.exe $ du -sh ebundleviewer-6.0.exe 31M ebundleviewer-6.0.exe $ wine --version wine-1.7.11-275-ge0024ff Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 35171] New: Adobe Shockwave Player 12.x installer crashes on startup (URL moniker notify window class not unregistered during unload of urlmon)
by wine-bugs＠winehq.org Nov. 18, 2021

Nov. 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=35171 Bug ID: 35171 Summary: Adobe Shockwave Player 12.x installer crashes on startup (URL moniker notify window class not unregistered during unload of urlmon) Product: Wine Version: 1.7.8 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: urlmon Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says. Relevant part of trace log: --- snip --- $ WINEDEBUG=+tid,+seh,+relay,+win,+msg wine ./Shockwave_Installer_Full.exe >>log.txt 2>&1 ... 0024:Call urlmon.URLOpenStreamW(00000000,00206e00 L"http://liveupdate.symantecliveupdate.com/upgrade/NSS/SymCCIS/Production/SCC…",00000000,0182b370) ret=017e697a ... 0024:Call user32.RegisterClassExW(7d8bf420) ret=7d82b211 0024:trace:win:alloc_winproc allocated 0xffff002b for W 0x7d82b0e1 (44/4096 used) 0024:Ret user32.RegisterClassExW() retval=0000c053 ret=7d82b211 0024:Call user32.CreateWindowExW(00000000,7d88a000 L"URL Moniker Notification Window",7d88a000 L"URL Moniker Notification Window",00000000,00000000,00000000,00000000,00000000,fffffffd,00000000,7d810000,00000000) ret=7d82b2ad 0024:trace:win:WIN_CreateWindowEx L"URL Moniker Notification Window" L"URL Moniker Notification Window" ex=00000000 style=00000000 0,0 0x0 parent=0xfffffffd menu=(nil) inst=0x7d810000 params=(nil) 0024:trace:win:dump_window_styles style: 0024:trace:win:dump_window_styles exstyle: 0024:trace:win:GetWindowRect hwnd 0x60098 (0,0)-(0,0) ... 0024:Ret urlmon.URLOpenStreamW() retval=000401e8 ret=017e697a ... 0024:Ret PE DLL (proc=0x7d886d0c,module=0x7d810000 L"urlmon.dll",reason=PROCESS_DETACH,res=(nil)) retval=1 0024:Ret KERNEL32.FreeLibrary() retval=00000001 ret=00f4af02 ... 0024:Call user32.PeekMessageW(00f3d758,00000000,00000000,00000000,00000003) ret=7e5d0994 0024:trace:msg:peek_message got type 6 msg 465 (WM_USER+101) hwnd 0x60098 wp 0 lp 207918 0024:Ret user32.PeekMessageW() retval=00000001 ret=7e5d0994 0024:Call user32.TranslateMessage(00f3d758) ret=7e5d0d5b 0024:Ret user32.TranslateMessage() retval=00000000 ret=7e5d0d5b 0024:Call user32.DispatchMessageW(00f3d758) ret=7e5d0d6c 0024:Call window proc 0x7d82b0e1 (hwnd=0x60098,msg=WM_USER+101,wp=00000000,lp=00207918) 0024:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7d82b0e1 ip=7d82b0e1 tid=0024 0024:trace:seh:raise_exception info[0]=00000000 0024:trace:seh:raise_exception info[1]=7d82b0e1 0024:trace:seh:raise_exception eax=7d82b0e1 ebx=7ed98000 ecx=00000000 edx=00f3ef88 esi=00207918 edi=00f3d6a8 0024:trace:seh:raise_exception ebp=00f3d538 esp=00f3d50c cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010202 --- snip ---- The class proc is still registered when urlmon is unloaded, leading to later crash. Registration of window class: --- snip --- Wine-dbg>bt Backtrace: =>0 0x7ec829ba RegisterClassExW(wc=0x7d816420) [/home/focht/projects/wine/wine-git/dlls/user32/class.c:615] in user32 (0x00f3dc68) 1 0x7d781144 Binding_Create+0xa7(mon=(nil), binding_ctx=(nil), uri=0x1d5718, pbc=0x1d59f8, to_obj=0, riid=0x7d7ea79c, binding=0xf3dd58) [/home/focht/projects/wine/wine-git/dlls/urlmon/binding.c:1410] in urlmon (0x00f3dd08) 2 0x7d781749 start_binding+0x50(mon=(nil), binding_ctx=(nil), uri=0x1d5718, pbc=0x1d59f8, to_obj=0, riid=0x7d7ea79c, ret=0xf3dde8) [/home/focht/projects/wine/wine-git/dlls/urlmon/binding.c:1510] in urlmon (0x00f3ddb8) 3 0x7d781b26 bind_to_storage+0x52(uri=0x1d5718, pbc=0x1d59f8, riid=0x7d7ea79c, ppv=0xf3def4) [/home/focht/projects/wine/wine-git/dlls/urlmon/binding.c:1567] in urlmon (0x00f3de08) 4 0x7d7a197e URLMoniker_BindToStorage+0x14a(iface=0x1dc9b8, pbc=0x1d59f8, pmkToLeft=(nil), riid=0x7d7ea79c, ppvObject=0xf3def4) [/home/focht/projects/wine/wine-git/dlls/urlmon/umon.c:280] in urlmon (0x00f3de68) 5 0x7d7a3e8e URLStartDownload+0x138(szURL="http://liveupdate.symantecliveupdate.com/upgrade/NSS/SymCCIS/Production/SCC…", ppStream=0xf3def4, pBSC=0xf3def8) [/home/focht/projects/wine/wine-build32/dlls/urlmon/../../include/objidl.h:3488] in urlmon (0x00f3dec8) 6 0x7d7a434a URLOpenStreamW+0xc0(pCaller=<couldn't compute location>, szURL=<couldn't compute location>, dwReserved=<couldn't compute location>, lpfnCB=<couldn't compute location>) [/home/focht/projects/wine/wine-git/dlls/urlmon/umstream.c:337] in urlmon (0x00f3df28) 7 0x017e697a in symccis (+0x6979) (0x7b836097) 8 0xfff0e483 (0x04244c8d) --- snip --- There is no code path where the window class is unregistered when tearing down? Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 33572] New: Windows Download Integrator 3.x needs IWbemServices::ExecNotificationQueryAsync
by wine-bugs＠winehq.org Nov. 18, 2021

Nov. 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=33572 Bug #: 33572 Summary: Windows Download Integrator 3.x needs IWbemServices::ExecNotificationQueryAsync Product: Wine Version: 1.5.30 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: wmi&wbemprox AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says. Prerequisite: 'winetricks -q dotnet40' --- snip --- ... fixme:wbemprox:wbem_services_ExecNotificationQueryAsync fixme:ole:Context_CC_ContextCallback (0x184cd0/0x184cd4)->(0x791c8272, 0x32f004, {d7174f82-36b8-4aa8-800a-e963ab2dfab9}, 2, (nil)) fixme:wmiutils:wmiutils_cf_QueryInterface interface {b196b28f-bab4-101a-b69c-00aa00341d07} not implemented fixme:wmiutils:status_code_QueryInterface interface {c3fcc19e-a970-11d2-8b5a-00a0c9b7c9c4} not implemented fixme:wmiutils:status_code_QueryInterface interface {00000003-0000-0000-c000-000000000046} not implemented fixme:wmiutils:status_code_QueryInterface interface {00000144-0000-0000-c000-000000000046} not implemented fixme:wmiutils:status_code_GetErrorCodeText 0x154e30, 0x80041001, 0x0000, 0x00000001, 0x32f16c Unhandled Exception: System.Management.ManagementException: Error code: 0x80041001 at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode) at System.Management.ManagementEventWatcher.Start() at Windows_Download_Integrator.Form1..ctor() ... --- snip --- Source: http://source.winehq.org/git/wine.git/blob/07197a19f2843b41b32be2c1d07ba4cc… --- snip --- 557 static HRESULT WINAPI wbem_services_ExecNotificationQueryAsync( 558 IWbemServices *iface, 559 const BSTR strQueryLanguage, 560 const BSTR strQuery, 561 LONG lFlags, 562 IWbemContext *pCtx, 563 IWbemObjectSink *pResponseHandler ) 564 { 565 FIXME("\n"); 566 return WBEM_E_FAILED; 567 } --- snip --- $ du -sh Windows\ Download\ Integrator_B3.5.7z 5.0M Windows Download Integrator_B3.5.7z $ sha1sum Windows\ Download\ Integrator_B3.5.7z 83a7c515b04e0935d448d89df038712a13f869db Windows Download Integrator_B3.5.7z $ wine --version wine-1.5.30-43-ge5bf20e Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 6

[Bug 36435] New: Adobe Flash Builder 4.6 uses potentially erroneous shell32.dll PathYetAnotherMakeUniqueName stub
by wine-bugs＠winehq.org Nov. 18, 2021

Nov. 18, 2021

https://bugs.winehq.org/show_bug.cgi?id=36435 Bug ID: 36435 Summary: Adobe Flash Builder 4.6 uses potentially erroneous shell32.dll PathYetAnotherMakeUniqueName stub Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: shell32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, nothing serious .. the stub lies: it returns 'TRUE' (success, buffer filled) but doesn't touch the 'out' buffer at all. Applications might peek into uninitialized/garbage data (stack, heap), finding NULL terminator by chance. --- snip --- $ WINEDEBUG=+tid,+seh,+relay wine ./FlashBuilder_4_6_LS10.exe >>log.txt 2>&1 ... fixme:shell:PathYetAnotherMakeUniqueName (0x26afec8, L"C:\\adobeTemp\\backup", L"tmp" ,L"adobetmp000126541"):stub. --- snip --- Source: http://source.winehq.org/git/wine.git/blob/4903dda319f092af37f5b0e58716e3a0… --- snip --- 538 /************************************************************************* 539 * PathYetAnotherMakeUniqueName [SHELL32.75] 540 * 541 * NOTES 542 * exported by ordinal 543 */ 544 BOOL WINAPI PathYetAnotherMakeUniqueName( 545 LPWSTR lpszBuffer, 546 LPCWSTR lpszPathName, 547 LPCWSTR lpszShortName, 548 LPCWSTR lpszLongName) 549 { 550 FIXME("(%p, %s, %s ,%s):stub.\n", 551 lpszBuffer, debugstr_w(lpszPathName), debugstr_w(lpszShortName), debugstr_w(lpszLongName)); 552 return TRUE; 553 } --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/bb776479%28v=vs.85%… Either change the stub to return FALSE and set lasterror "unimplemented" or flesh out the stub (not too hard). $ sha1sum FlashBuilder_4_6_LS10.exe 7991023d94bcf62f06eb1500914b5274b32c30ea FlashBuilder_4_6_LS10.exe $ du -sh FlashBuilder_4_6_LS10.exe 819M FlashBuilder_4_6_LS10.exe $ wine --version wine-1.7.18-76-gcfb81f2 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 36811] New: Avast! Free Antivirus 9.0.2013 'AvastSvc.exe' crashes on unimplemented function KERNEL32.dll.GetFirmwareEnvironmentVariableA
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

https://bugs.winehq.org/show_bug.cgi?id=36811 Bug ID: 36811 Summary: Avast! Free Antivirus 9.0.2013 'AvastSvc.exe' crashes on unimplemented function KERNEL32.dll.GetFirmwareEnvironmentVariableA Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, the installer now works with bug 36487 and bug 36500 fixed. The service app crashes on startup though. Start the gui app and finish initial setup wizard. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/AVAST Software/Avast $ wine ./AvastUI.exe ... Unhandled exception: unimplemented function KERNEL32.dll.GetFirmwareEnvironmentVariableA called in 32-bit code (0x7bc52792). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:7bc52792 ESP:1146de28 EBP:1146de8c EFLAGS:00200216( - -- I -A-P- ) EAX:1146de34 EBX:7bcd1000 ECX:8720c0a8 EDX:00410064 ESI:1146e2dc EDI:1146e2dc ... Backtrace: =>0 0x7bc52792 stub_entry_point+0x4b(dll="KERNEL32.dll", name="GetFirmwareEnvironmentVariableA", ret_addr=0x10d83851) [/home/focht/projects/wine/wine.repo/src/dlls/ntdll/loader.c:196] in ntdll (0x1146de8c) 1 0x003400b4 (0x1146e1a8) 2 0x10d75525 in aswjsscan (+0x5524) (0x1146e250) 3 0x009787d1 (0x1146e33c) 4 0x00978b64 (0x1146ea58) ... 196 for (;;) RtlRaiseException( &rec ); Modules: Module Address Debug info Name (166 modules) PE 400000- 40d000 Deferred avastsvc PE 520000- 645000 Deferred libeay32 PE bb0000- c36000 Deferred aswsqlt PE 54e0000- 54e9000 Deferred ahresws2 PE f330000- f3cf000 Deferred ashbase PE f3d0000- f416000 Deferred ssleay32 PE f520000- f772000 Deferred aavm4h PE f780000- f7d3000 Deferred ahresws PE 10000000-1006a000 Deferred aswcommchannel PE 10d70000-11367000 Export aswjsscan ... Threads: process tid prio (all id:s are in hex) 00000008 AvastUI.exe 000000cb 0 000000ca 0 000000c9 0 ... 00000031 (D) C:\Program Files\AVAST Software\Avast\AvastSvc.exe 000000c4 0 000000c3 0 000000c2 0 000000c1 0 <== 000000be 0 000000b5 -15 ... --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/ms724325%28v=vs.85%… $ sha1sum avast_free_antivirus_setup_9_0_2018.exe f3c810bb61028801d3d89e5f6c7a4eb2761145e9 avast_free_antivirus_setup_9_0_2018.exe $ du -sh avast_free_antivirus_setup_9_0_2018.exe 85M avast_free_antivirus_setup_9_0_2018.exe $ wine --version wine-1.7.20-158-g8762842 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 36505] New: DynDNS Updater 4.1.6 crashes on startup
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

https://bugs.winehq.org/show_bug.cgi?id=36505 Bug ID: 36505 Summary: DynDNS Updater 4.1.6 crashes on startup Product: Wine Version: 1.7.19 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: jscript Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, relevant part of trace log: ---- snip --- WINEDEBUG=+tid,+seh,+relay,+jscript,+ole,+variant wine ./DynDNS\ Updater\ 4.1.6.exe >>log.txt 2>&1 ... 0023:trace:jscript:JScriptParse_ParseScriptText (0x140338)->(L"require(\"res://scriptLib.js\");\r\nrequire(\"res://json2.js\");\r\nrequire(\"res://base64.js\");\r\nrequire(\"res://md5.js\");\r\n\r\n/////////////////////////////////////////////////////////////////////\r\napp.log(0, 'SCRIPT STARTS');\r\napp.log(0, 'TAG DATA: ' + app.tag);\r\n\r\nvar mainScript = ("... (null) (nil) (null) ffffffff 0 20 (nil) (nil)) ... 0023:trace:jscript:interp_str L"res://scriptLib.js" ... 0023:trace:jscript:JScriptParse_ParseScriptText (0x140338)->(L"////////////////////////////////////////////////////////////////////\r\n// Library\r\n//\r\nvar WinConst = {\r\n//-- window style bits.\r\n WS_OVERLAPPED: 0x00000000,\r\n WS_POPUP: 0x80000000,\r\n WS_CLIPSIBLINGS: 0x04000000,\r\n WS_CLIPCHILDREN: 0x02000000,\r\n WS_CAPTION: 0x00C00000,"... (null) (nil) (null) ffffffff 0 20 (nil) (nil)) ... 0023:trace:jscript:interp_double 0.000000 0023:trace:jscript:interp_obj_prop L"FFF_DEFAULT" 0023:trace:jscript:ensure_prop_name creating prop L"FFF_DEFAULT" flags 200 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,00000018) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b3978 ret=7d688c0d 0023:trace:jscript:prop_put L"FFF_DEFAULT" = 0.000000 0023:trace:jscript:interp_double 1.000000 0023:trace:jscript:interp_obj_prop L"FFF_FILESONLY" 0023:trace:jscript:ensure_prop_name creating prop L"FFF_FILESONLY" flags 200 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b3998 ret=7d688c0d 0023:trace:jscript:prop_put L"FFF_FILESONLY" = 1.000000 0023:trace:jscript:interp_double 2.000000 0023:trace:jscript:interp_obj_prop L"FFF_DIRSONLY" 0023:trace:jscript:ensure_prop_name creating prop L"FFF_DIRSONLY" flags 200 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001a) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b39c0 ret=7d688c0d 0023:trace:jscript:prop_put L"FFF_DIRSONLY" = 2.000000 0023:trace:jscript:interp_double 4.000000 0023:trace:jscript:interp_obj_prop L"FFF_RECURSIVE" 0023:trace:jscript:ensure_prop_name creating prop L"FFF_RECURSIVE" flags 200 0023:Call ntdll.RtlReAllocateHeap(00110000,00000000,001b38f0,00000100) ret=7d688c76 0023:Ret ntdll.RtlReAllocateHeap() retval=001b39e8 ret=7d688c76 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b38f0 ret=7d688c0d 0023:trace:jscript:prop_put L"FFF_RECURSIVE" = 4.000000 0023:trace:jscript:interp_double 1.000000 0023:trace:jscript:interp_obj_prop L"SLOF_ABORT_RESISTANT" 0023:trace:jscript:ensure_prop_name creating prop L"SLOF_ABORT_RESISTANT" flags 200 0023:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002a) ret=7d688c0d 0023:Ret ntdll.RtlAllocateHeap() retval=001b3918 ret=7d688c0d 0023:trace:jscript:prop_put L"SLOF_ABORT_RESISTANT" = 1.000000 0023:trace:jscript:interp_var_set L"AppConst" 0023:trace:jscript:prop_put L"AppConst" = obj(0x1b38c8) 0023:trace:jscript:interp_ret 0023:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7d6a794b ip=7d6a794b tid=0023 0023:trace:seh:raise_exception info[0]=00000001 0023:trace:seh:raise_exception info[1]=00000000 0023:trace:seh:raise_exception eax=00000000 ebx=7d6dd000 ecx=7d6a7948 edx=7ff80001 esi=0033f258 edi=00217b8c 0023:trace:seh:raise_exception ebp=0033f1b8 esp=0033f170 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00210216 ... Unhandled exception: page fault on write access to 0x00000000 in 32-bit code (0x7d6a794b). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:7d6a794b ESP:0033f170 EBP:0033f1b8 EFLAGS:00210216( R- -- I -A-P- ) EAX:00000000 EBX:7d6dd000 ECX:7d6a7948 EDX:7ff80001 ESI:0033f258 EDI:00217b8c ... Backtrace: =>0 0x7d6a794b jsval_to_variant+0x63(val={u={n=nan, s={u={obj=0x217b8c, str=0x217b8c, b=0x217b8c, v=0x217b8c, as_uintptr=0x217b8c}, tag=JSV_UNDEFINED}}}, retv=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/jsutils.c:344] in jscript (0x0033f1b8) 1 0x7d6a0bc6 JScriptParse_ParseScriptText+0x250(iface=<couldn't compute location>, pstrCode=<couldn't compute location>, pstrItemName=<couldn't compute location>, punkContext=<couldn't compute location>, pstrDelimiter=<couldn't compute location>, dwSourceContextCookie=<couldn't compute location>, ulStartingLine=<couldn't compute location>, dwFlags=<couldn't compute location>, pvarResult=<couldn't compute location>, pexcepinfo=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/jscript.c:786] in jscript (0x0033f248) 2 0x0040eef2 in dyndns updater 4.1.6 (+0xeef1) (0x0033f2dc) 3 0x0040dcfe in dyndns updater 4.1.6 (+0xdcfd) (0x0033f364) 4 0x0040dfa7 in dyndns updater 4.1.6 (+0xdfa6) (0x0033f3d8) 5 0x7e2adf16 call_method+0x21() in oleaut32 (0x0033f3f8) ... 344 V_VT(retv) = VT_EMPTY; Modules: Module Address Debug info Name (86 modules) PE 400000- 477000 Export dyndns updater 4.1.6 ELF 7b800000-7ba60000 Dwarf kernel32<elf> \-PE 7b810000-7ba60000 \ kernel32 ELF 7bc00000-7bcee000 Dwarf ntdll<elf> \-PE 7bc10000-7bcee000 \ ntdll ELF 7bf00000-7bf04000 Dwarf <wine-loader> ELF 7d663000-7d6fa000 Dwarf jscript<elf> \-PE 7d670000-7d6fa000 \ jscript ... process tid prio (all id:s are in hex) ... 00000022 (D) Z:\home\focht\Downloads\DynDNS Updater 4.1.6.exe 00000023 0 <== --- snip --- The app passes 'dwFlags = SCRIPTTEXT_ISEXPRESSION' _and_ NULL 'pvarResult' which Wine's JScript tries to write to after successful 'exec_source'. The scriptlet is rather uninteresting (not a problem): --- snip --- //////////////////////////////////////////////////////////////////// // Library // var WinConst = { //-- window style bits. WS_OVERLAPPED: 0x00000000, WS_POPUP: 0x80000000, WS_CLIPSIBLINGS: 0x04000000, WS_CLIPCHILDREN: 0x02000000, ... INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTP : 0x00008000, // ignore https:// to http:// INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTPS : 0x00004000, // ignore http:// to https:// INTERNET_FLAG_IGNORE_CERT_DATE_INVALID : 0x00002000, // ignore expired X509 Cert. INTERNET_FLAG_IGNORE_CERT_CN_INVALID : 0x00001000, // ignore bad common name in X509 Cert. ___LINE_FOR_NEW_VALUES___ : 0 }; var AppConst = { FFF_DEFAULT : 0, FFF_FILESONLY : 1, FFF_DIRSONLY : 2, FFF_RECURSIVE : 4, SLOF_ABORT_RESISTANT : 0x0001 }; --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/tch4w30x%28v=vs.94%29.aspx --- quote --- pvarResult [out] Address of a buffer that receives the results of scriptlet processing, or NULL if the caller expects no result (that is, the SCRIPTTEXT_ISEXPRESSION value is not set). --- quote --- Someone is wrong here ... Source: http://source.winehq.org/git/wine.git/blob/02d63cb3120d89a5107d4e26a92eb4bd… --- snip --- 753 static HRESULT WINAPI JScriptParse_ParseScriptText(IActiveScriptParse *iface, 754 LPCOLESTR pstrCode, LPCOLESTR pstrItemName, IUnknown *punkContext, 755 LPCOLESTR pstrDelimiter, CTXARG_T dwSourceContextCookie, ULONG ulStartingLine, 756 DWORD dwFlags, VARIANT *pvarResult, EXCEPINFO *pexcepinfo) 757 { 758 JScript *This = impl_from_IActiveScriptParse(iface); 759 bytecode_t *code; 760 HRESULT hres; ... 774 if(dwFlags & SCRIPTTEXT_ISEXPRESSION) { 775 exec_ctx_t *exec_ctx; 776 777 hres = create_exec_ctx(This->ctx, NULL, This->ctx->global, NULL, TRUE, &exec_ctx); 778 if(SUCCEEDED(hres)) { 779 jsval_t r; 780 781 IActiveScriptSite_OnEnterScript(This->site); 782 783 clear_ei(This->ctx); 784 hres = exec_source(exec_ctx, code, &code->global_code, TRUE, &r); 785 if(SUCCEEDED(hres)) { 786 hres = jsval_to_variant(r, pvarResult); 787 jsval_release(r); 788 } 789 exec_release(exec_ctx); 790 791 IActiveScriptSite_OnLeaveScript(This->site); 792 } ... --- snip --- $ sha1sum DynDNS\ Updater\ 4.1.6.exe 629268eaef62d424798c7965d3e9e63a0584861a DynDNS Updater 4.1.6.exe $ du -sh DynDNS\ Updater\ 4.1.6.exe 460K DynDNS Updater 4.1.6.exe $ wine --version wine-1.7.19-47-g704d169 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 36822] New: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThread
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

https://bugs.winehq.org/show_bug.cgi?id=36822 Bug ID: 36822 Summary: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver crashes on unimplemented function ntoskrnl.exe.KeSetSystemAffinityThread Product: Wine Version: 1.7.21 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, as the summary says ... --- snip --- ... fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ffc 0x53e5bc) stub wine: Call from 0x7b83adcf to unimplemented function ntoskrnl.exe.KeSetSystemAffinityThread, aborting --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/hardware/ff553267%28v=vs.85… --- quote --- The KeSetSystemAffinityThread routine sets the system affinity of the current thread. VOID KeSetSystemAffinityThread( _In_ KAFFINITY Affinity ); Parameters Affinity [in] A KAFFINITY-typed variable that specifies the new system affinity of the current thread. Return value None --- quote --- $ sha1sum mtasa-1.3.5.exe 7f186543892ef0877cd568ce0935c5e9641578c8 mtasa-1.3.5.exe $ du -sh mtasa-1.3.5.exe 21M mtasa-1.3.5.exe $ wine --version wine-1.7.21-3-gbf72c67 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 36821] New: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver continuously spams terminal due to 'PsLookupProcessByProcessId' stub
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

https://bugs.winehq.org/show_bug.cgi?id=36821 Bug ID: 36821 Summary: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys' driver continuously spams terminal due to 'PsLookupProcessByProcessId' stub Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, the kernel driver is part of 'Multi Theft Auto' v1.3.5 Release notes: https://forum.mtasa.com/viewtopic.php?f=31&t=71767 There is a constant spam on terminal: --- snip --- ... fixme:ntoskrnl:PsLookupProcessByProcessId (0x4 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x8 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0xc 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x10 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x14 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x18 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x1c 0x53e5bc) stub ... fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ff8 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ffc 0x53e5bc) stub fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:thread:NtQueryInformationThread info class 22 not supported yet fixme:ntoskrnl:PsLookupProcessByProcessId (0x4 0x53e5bc) stub fixme:ntoskrnl:PsLookupProcessByProcessId (0x8 0x53e5bc) stub ... <repeats forever> --- snip --- 'FairplayKD.sys' kernel driver code: --- snip --- 00541F06 8BFF MOV EDI,EDI 00541F08 55 PUSH EBP 00541F09 8BEC MOV EBP,ESP 00541F0B 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] ; process id to lookup 00541F0E 53 PUSH EBX 00541F0F 56 PUSH ESI 00541F10 F6C1 03 TEST CL,3 00541F13 75 42 JNZ SHORT 00541F57 00541F15 8B5D 0C MOV EBX,DWORD PTR SS:[EBP+C] 00541F18 F6C3 03 TEST BL,3 00541F1B 75 3A JNZ SHORT 00541F57 00541F1D B8 E8FD0000 MOV EAX,0FDE8 ; max pid (handle) 00541F22 3BC8 CMP ECX,EAX 00541F24 77 31 JA SHORT 00541F57 00541F26 3BD8 CMP EBX,EAX 00541F28 77 2D JA SHORT 00541F57 00541F2A 3BCB CMP ECX,EBX 00541F2C 73 29 JNB SHORT 00541F57 00541F2E 8BF1 MOV ESI,ECX pid_loop: 00541F30 8D45 08 LEA EAX,DWORD PTR SS:[EBP+8] 00541F33 50 PUSH EAX 00541F34 56 PUSH ESI 00541F35 FF15 8C8A5400 CALL DWORD PTR DS:[548A8C] ; PsLookupProcessByProcessId 00541F3B 85C0 TEST EAX,EAX 00541F3D 74 0B JE SHORT 00541F4A 00541F3F 83C6 04 ADD ESI,4 00541F42 3BF3 CMP ESI,EBX 00541F44 72 EA JB SHORT 00541F30 00541F46 8BC3 MOV EAX,EBX 00541F48 EB 0F JMP SHORT 00541F59 00541F4A 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] 00541F4D FF15 888A5400 CALL DWORD PTR DS:[548A88] ; ObfDereferenceObject 00541F53 8BC6 MOV EAX,ESI 00541F55 EB 02 JMP SHORT 00541F59 00541F57 33C0 XOR EAX,EAX 00541F59 5E POP ESI 00541F5A 5B POP EBX 00541F5B 5D POP EBP 00541F5C C2 0800 RETN 8 --- snip --- If it fails (Wine stub in this case) just go for the next process id ... genius logic at work :) Silencing via "trace once" might be ok for this - even if the loop is still getting executed. $ sha1sum mtasa-1.3.5.exe 7f186543892ef0877cd568ce0935c5e9641578c8 mtasa-1.3.5.exe $ du -sh mtasa-1.3.5.exe 21M mtasa-1.3.5.exe $ wine --version wine-1.7.21-3-gbf72c67 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5