April 2014 - Wine-Bugs - list.winehq.org

[Bug 21483] New: changed token security breaks .NET Framework SDK tools
by wine-bugs＠winehq.org Nov. 16, 2025

Nov. 16, 2025

http://bugs.winehq.org/show_bug.cgi?id=21483 Summary: changed token security breaks .NET Framework SDK tools Product: Wine Version: 1.1.33 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wineserver AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, some of Microsoft's tools from .NET Framework SDKs - namely managed debuggers (CLR) - stopped working after 1.1.33+ release. They seem to be very picky about object security. I bisected this one but technically this isn't a regression because Rob's token patches made Wine more correct - exposing another object security problem. --- snip --- $ git bisect bad bd56916f90e68632993a7275fe30a55a7efa222a is the first bad commit commit bd56916f90e68632993a7275fe30a55a7efa222a Author: Rob Shearman <robertshearman(a)gmail.com> Date: Mon Nov 16 20:11:06 2009 +0000 server: Extend get_token_user server call to also retrieve SIDs for the token's owner or primary group. :040000 040000 829f1543526675ae48f6fde8c8cedff74fd51797 7a77653291795c209ec529dd6660d52fc922a58c M dlls :040000 040000 57735b53b28db37ac4627dc009000e225175164a 4dcc1388cb136e559c06106632c08e8e610fe557 M include :040000 040000 4e83227cb0133c7e288a1e930461d4efe1130882 cf1c3539d6b3c91c854fa2b9b672f68ea601f639 M server --- snip --- "old" behaviour, where default process token was like this: Token owner -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) NtQueryInformationToken had the token owner info hard-coded (to SECURITY_INTERACTIVE_RID) while Rob's patches moved the actual query to wineserver. --- Basically the app code that verifies the security of created objects goes like this: - get SD from created object (event) handle -> GetKernelObjectSecurity( OWNER_SECURITY_INFORMATION | DACL_SECURITY_INFORMATION) - get owner SID of SD -> GetSecurityDescriptorOwner() -> SID1 - get DACL of SD -> GetSecurityDescriptorDacl() - for each ACE from DACL (GetAce) -> SID2: check ACE SID against SD owner SID -> EqualSid( SID1, SID2) - match -> profit! not -> fail! --- snip --- ... 0023: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0014,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}},name=L"Global\\CorDBIPCSetupSyncEvent_36"} ) 0023: create_event() = 0 { handle=01c4 } ... 0025:trace:advapi:GetKernelObjectSecurity (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025:trace:ntdll:NtQuerySecurityObject (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025: get_security_object( handle=00c4, security_info=00000005 ) 0025: get_security_object() = 0 { sd_len=00000050, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}} } 0025:trace:ntdll:RtlGetDaclSecurityDescriptor (0x14ef40,0x33f7c3,0x33f7ec,0x33f7c2) 0025:trace:ntdll:RtlGetAce (0x14ef60,0,0x33f7f0) 0025:trace:ntdll:RtlLengthSid sid=0x14ef54 0025: open_event( access=001f0003, attributes=00000002, rootdir=0034, name=L"Global\\CorDBIPCLSEventAvailName_36" ) 0025: open_event() = 0 { handle=00c8 } ... --- snip --- "new" behaviour, where default process token is now like this: Token owner -> S-1-5-32-544 "BUILTIN\Administrators" (alias) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) --- snip --- ... 0024:trace:ntdll:NtOpenProcessTokenEx (0x1b0,0x00000008,0x00000000,0x318e6d0) 0024: open_token( handle=01b0, access=00000008, attributes=00000000, flags=00000000 ) 0024: open_token() = 0 { token=01b4 } ... 0024:trace:advapi:GetTokenInformation (0x1b4, TokenOwner, 0x184130, 20, 0x318e6e0): 0024:trace:ntdll:NtQueryInformationToken (0x1b4,4,0x184130,20,0x318e6e0) 0024: get_token_sid( handle=01b4, which_sid=00000004 ) 0024: get_token_sid() = 0 { sid_len=16, sid={S-1-5-32-544} } ... 0024: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0018,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}},name=L"Global\\CorDBIPCSetupSyncEvent_37"} ) 0024: create_event() = 0 { handle=01c8 } ... 0026:trace:advapi:GetKernelObjectSecurity (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026:trace:ntdll:NtQuerySecurityObject (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026: get_security_object( handle=00c8, security_info=00000005 ) 0026: get_security_object() = 0 { sd_len=00000058, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}} } ... --- snip --- Using the "admins" sid (alias) as token user in server/token.c:token_create_admin() instead of current "interactive" sid fixes the problem. Though I don't know if this is the right thing to do. I hope I provided enough infos and let Alexandre handle it ;-) To get detailed token infos/dumps you might be interested in this little console app, from cygwin's Corinna Vinschen ;-) http://www.mail-archive.com/cygwin(a)cygwin.com/msg71800.html It might provide useful information when run under different security principals. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 19

[Bug 23077] New: UltraEdit 16.10: Plus sign doesn't appear in directory tree
by wine-bugs＠winehq.org Nov. 13, 2025

Nov. 13, 2025

http://bugs.winehq.org/show_bug.cgi?id=23077 Summary: UltraEdit 16.10: Plus sign doesn't appear in directory tree Product: Wine Version: 1.2-rc2 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: lukasz.wojnilowicz(a)gmail.com Created an attachment (id=28652) --> (http://bugs.winehq.org/attachment.cgi?id=28652) Image showing the problem Steps to reproduce: 1) remove ~/.wine 2) install UltraEdit 3) wine Uedit32.exe 4) close all popup windows (buy now, tip of the day etc.) 5) In "File View" Window click on plus sign of "C" then "Program Files" 6) Click on plus sign of "Internet Explorer" branch will unfold, plus sign changes to minus sign 7) Click on minus sign of "Internet Explorer" branch will fold Behaviour: After seventh step minus sign of "Internet Explorer" stays minus sign and I cannot unfold that branch anymore Expected behaviour: After seventh step minus sign of "Internet Explorer" should convert itself into plus sign and I should have ability to unfold the branch In terminal I get only fixme:win:LockWindowUpdate (0x100a0), partial stub! fixme:win:LockWindowUpdate ((nil)), partial stub! for every successful fold/unfold operation -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 13

[Bug 30155] New: secdrv.sys from SafeDisc v2.05.030 does not work
by wine-bugs＠winehq.org Nov. 10, 2025

Nov. 10, 2025

http://bugs.winehq.org/show_bug.cgi?id=30155 Bug #: 30155 Summary: secdrv.sys from SafeDisc v2.05.030 does not work Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl AssignedTo: wine-bugs(a)winehq.org ReportedBy: stefan(a)codeweavers.com Classification: Unclassified Created attachment 39336 --> http://bugs.winehq.org/attachment.cgi?id=39336 service,relay,winedevice,ntoskrnl log SafeDisc 2.05.030 does not work out of the box. The user-visible symptom is that the application exits with exit code 0 without any output. This affects for example the Command and Conquer Red Alert 2 installer, which is safedisc protected for some reason. The problem seems to be related to the specific secdrv.sys version. If I take a secdrv.sys from a newer safedisc version(e.g. 2.40.010 from the RA2 Yuri's revenge expansion) and put it in C:\windows\system32\drivers, the installer works. ProtectId says: Scanning -> D:\Setup\Setup.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 1308863 (013F8BFh) Byte(s) -> File has 733375 (0B30BFh) bytes of appended data starting at offset 08C800h [File Heuristics] -> Flag : 00000000000000000100000000100111 (0x00004027) [!] Safedisc v2.05.030 detected ! [i] Appended data contents.... [.] o: 0x0008C828 / t: <0x00000001> <0x00000000> <0x00000001> / s: 00194947 byte(s) -> ~de7bc4.tmp [.] o: 0x000BC1D2 / t: <0x00000001> <0x00000000> <0x0000044C> / s: 00030208 byte(s) -> clcd32.dll [.] o: 0x000C37F9 / t: <0x00000001> <0x00000000> <0x0000044C> / s: 00006784 byte(s) -> clcd16.dll [.] o: 0x000C529D / t: <0x00000001> <0x00000000> <0x0000044D> / s: 00067584 byte(s) -> mcp.dll [.] o: 0x000D5AC5 / t: <0x00000001> <0x00000000> <0x00000000> / s: 00327220 byte(s) -> ~df394b.tmp [.] o: 0x00125920 / t: <0x00000001> <0x00000000> <0x00000002> / s: 00034304 byte(s) -> drvmgt.dll [.] o: 0x0012DF47 / t: <0x00000001> <0x00000000> <0x00000002> / s: 00018768 byte(s) -> secdrv.sys [.] o: 0x001328BF / t: <0x00000001> <0x00000000> <0x00000000> / s: 00053248 byte(s) -> ~ef7194.tmp [CompilerDetect] -> Visual C++ 6.0 - Scan Took : 0.640 Second(s) The md5sum of the broken secdrv.sys is XXX. The md5sum of the working 2.40.010 driver is f376a1580204e47f37a721e1cbc5582a. I am attaching a +relay,+service,+winedevice+ntoskrnl log of a failed run of the setup tool. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 33

[Bug 20947] New: Slow mouse and menus in Kdeops studio anventure game engine
by wine-bugs＠winehq.org Nov. 9, 2025

Nov. 9, 2025

http://bugs.winehq.org/show_bug.cgi?id=20947 Summary: Slow mouse and menus in Kdeops studio anventure game engine Product: Wine Version: 1.1.33 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: 4plague(a)gmail.com Created an attachment (id=25113) --> (http://bugs.winehq.org/attachment.cgi?id=25113) full console output Every Kheops Studio adventure game tested (Echo: Secrets of the Lost Cavern; Return to Mysterious Island; Voyage: Journey to the Moon; Escape from Treasure Island) has the same problem: When entering a menu (overlay over the 3D game world and the main menu) mouse is extremely slow as are background sprite graphics (butterflies etc). console is flooded by: fixme:d3d:stretch_rect_fbo >>>>>>>>>>>>>>>>> GL_INVALID_OPERATION (0x502) from glBlitFramebuffer() @ device.c / 6174 -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 13

[Bug 35371] New: Battlefield 2: Wine crashes on mic setup
by wine-bugs＠winehq.org Nov. 8, 2025

Nov. 8, 2025

http://bugs.winehq.org/show_bug.cgi?id=35371 Bug ID: 35371 Summary: Battlefield 2: Wine crashes on mic setup Product: Wine Version: 1.7.10 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: crazy.just(a)verizon.net Classification: Unclassified Created attachment 47174 --> http://bugs.winehq.org/attachment.cgi?id=47174 Program Error Details Battlefield 2: Wine crashes on mic setup. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 14

[Bug 11536] New: Worms World Party doesn't respond after match
by wine-bugs＠winehq.org Nov. 7, 2025

Nov. 7, 2025

http://bugs.winehq.org/show_bug.cgi?id=11536 Summary: Worms World Party doesn't respond after match Product: Wine Version: 0.9.52. Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P3 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: rpgraca(a)gmail.com After most matches, like missions and deathmatch and in multiplayer games in the 3rd game, the game doesn't respond to mouse input and I only get beeps when I click on the window. This does't happen in multiplayer games whenever the final result 2-0 or 1-0. I get no stange message in the terminal. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 20

[Bug 29780] New: XPS Viewer EP shows garbage in the toolbar background
by wine-bugs＠winehq.org Nov. 6, 2025

Nov. 6, 2025

http://bugs.winehq.org/show_bug.cgi?id=29780 Bug #: 29780 Summary: XPS Viewer EP shows garbage in the toolbar background Product: Wine Version: 1.4-rc2 Platform: x86-64 URL: http://download.microsoft.com/download/2/5/2/2526f55d- 32bc-410f-be18-164ba67ae07d/XPSEP XP and Server 2003 32 bit.msi OS/Version: Linux Status: UNCONFIRMED Severity: trivial Priority: P2 Component: comctl32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: RandomAccountName(a)mail.com CC: bunglehead(a)gmail.com Classification: Unclassified Regression SHA1: 1c1b1c0073c3dea34ff4096d749a459accf5e337 Created attachment 38676 --> http://bugs.winehq.org/attachment.cgi?id=38676 Terminal output The background of the toolbar in XPS Viewer EP is not displayed properly, showing garbage (previous screen content). This worked in 1.4-rc1, and regression testing indicated: 1c1b1c0073c3dea34ff4096d749a459accf5e337 is the first bad commit commit 1c1b1c0073c3dea34ff4096d749a459accf5e337 Author: Nikolay Sivov <nsivov(a)codeweavers.com> Date: Wed Feb 1 00:07:00 2012 +0300 comctl32: More tests for Toolbar window style handling. :040000 040000 dd921cd22cea799bb21627f6e80aba024d087098 ee93a6dccb2bc9c894dc6330dbae8fc4650b2b82 M dlls Reverting the patch fixed it. To reproduce: 1. In system32, make a copy of acledit.dll named xpssvcs.dll 2. Install (occasionally crashes - retry if needed) 3. wine xpsrchvw -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 10

[Bug 29714] New: mmdevapi/capture test often fails on debian testing
by wine-bugs＠winehq.org Nov. 6, 2025

Nov. 6, 2025

http://bugs.winehq.org/show_bug.cgi?id=29714 Bug #: 29714 Summary: mmdevapi/capture test often fails on debian testing Product: Wine Version: 1.3.37 Platform: x86 OS/Version: Linux Status: NEW Keywords: download, regression Severity: normal Priority: P2 Component: mmdevapi AssignedTo: wine-bugs(a)winehq.org ReportedBy: austinenglish(a)gmail.com CC: hoehle(a)users.sourceforge.net Classification: Unclassified Regression SHA1: f24b31fcf2047e8b4d0d8b910c54c0815c54d1cf Created attachment 38565 --> http://bugs.winehq.org/attachment.cgi?id=38565 +tid,+mmdevapi,+winmm,+driver,+midi,+dsound,+dmusic,+mci,+oss,+alsa,+coreaudio trace austin(a)debian-buildbot:~/wine-git$ git bisect bad f24b31fcf2047e8b4d0d8b910c54c0815c54d1cf is the first bad commit commit f24b31fcf2047e8b4d0d8b910c54c0815c54d1cf Author: J��rg H��hle <hoehle(a)users.sourceforge.net> Date: Thu Jan 12 22:36:31 2012 +0100 mmdevapi/tests: Perform capture protocol tests in shared mode. :040000 040000 8251887bab3583e1327626d8e7492e61fa5e0285 255d9de316fae3fc6fc5b26a87b771593858e8c6 M dlls +tid,+mmdevapi,+winmm,+driver,+midi,+dsound,+dmusic,+mci,+oss,+alsa,+coreaudio trace attached. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 10

[Bug 21187] New: OLE Exception code 80004002 - AmiBroker + AmiQuote
by wine-bugs＠winehq.org Nov. 4, 2025

Nov. 4, 2025

http://bugs.winehq.org/show_bug.cgi?id=21187 Summary: OLE Exception code 80004002 - AmiBroker + AmiQuote Product: Wine Version: 1.1.35 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ole32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: mxn(a)atlas.cz Steps to reproduce: 1) Download AmiBroker (trial application ver. 5.20) from http://www.amibroker.com/download.html 2) Install it with command 'wine AmiBroker520.exe' 3) 'cd' to directory where AmiBroker trianl is installed 4) Start AmiBroker with command 'wine Broker.exe' 5) Start AmiQuote with command 'wine AmiQuote/Quote.exe' 6) In 'AmiQuote' choose 'Tools -> Auto-update Amibroker database' 7) Error dialog pops up 'OLE Exception code 80004002' 8) downgrade wine to ver. 1.1.33 9) Repeat steps 4) - 6), no Error dialog is displayed and everything works correctly (database is updated) Note: I believe bug is also reproducible in wine 1.1.34. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 21

[Bug 32010] New: Guild Wars 2 updater uses always 100% of a CPU core
by wine-bugs＠winehq.org Nov. 2, 2025

Nov. 2, 2025

http://bugs.winehq.org/show_bug.cgi?id=32010 Bug #: 32010 Summary: Guild Wars 2 updater uses always 100% of a CPU core Product: Wine Version: 1.5.15 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: nob.dir.info(a)gmail.com Classification: Unclassified The launcher of Guild Wars 2 (where you enter your user name and password) uses a complete core to run (even if I don't write anything or move it). I think it's bug, because X comes laggy too, and on Windows 7 its don't uses a whole core to run. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 22