May 2014 - Wine-Bugs - list.winehq.org

[Bug 26043] New: advapi32/security tests shows some leaks in valgrind
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=26043 Summary: advapi32/security tests shows some leaks in valgrind Product: Wine Version: 1.3.13 Platform: x86 OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: minor Priority: P2 Component: advapi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: austinenglish(a)gmail.com 28 bytes in 1 blocks are definitely lost at notify_alloc (heap.c:254) by RtlAllocateHeap (heap.c:1701) by GetNamedSecurityInfoW (security.c:5491) by GetNamedSecurityInfoA (security.c:5428) by test_GetNamedSecurityInfoA (security.c:2809) by func_security (security.c:3526) by run_test (test.h:556) by main (test.h:624) ... 116 bytes in 1 blocks are definitely lost at notify_alloc (heap.c:254) by RtlAllocateHeap (heap.c:1701) by HeapAlloc (heap.c:267) by GlobalAlloc (heap.c:360) by LocalAlloc (heap.c:960) by GetSecurityInfo (security.c:3102) by test_GetSecurityInfo (security.c:3331) by func_security (security.c:3531) by run_test (test.h:556) by main (test.h:624) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 5

[Bug 28628] New: advapi32/security.ok: GetTokenInformation(Token, TokenGroups, ...) returns partial garbage leading to uninitialized memory accesses?
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=28628 Bug #: 28628 Summary: advapi32/security.ok: GetTokenInformation(Token, TokenGroups,...) returns partial garbage leading to uninitialized memory accesses? Product: Wine Version: 1.3.29 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: advapi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified "wine advapi32_test.exe.so security.c" says in part security.c:1475: TokenGroups: security.c:1489: S-1-1-0, \Everyone use: 5 attr: 0x00000007 security.c:1489: S-1-2-0, \LOCAL use: 5 attr: 0x00000007 security.c:1489: S-1-5-4, NT AUTHORITY\INTERACTIVE use: 5 attr: 0x00000007 security.c:1489: S-1-5-11, NT AUTHORITY\Authenticated Users use: 5 attr: 0x00000007 security.c:1489: S-1-5-32-544, BUILTIN\Administrators use: 4 attr: 0x0000000f security.c:1492: attr: 0x00000007 LookupAccountSid failed with error 1332 security.c:1492: attr: 0xc0000007 LookupAccountSid failed with error 1332 Those two LookupAccountSid() errors appear to be because the last two SIDs from GetTokenInformation() are garbage. This causes the valgrind warning Conditional jump or move depends on uninitialised value(s) at RtlEqualSid (sec.c:210) by EqualSid (security.c:1027) by IsWellKnownSid (security.c:961) by LookupAccountSidW (security.c:2098) by LookupAccountSidA (security.c:2024) by test_token_attr (security.c:1485) by func_security (security.c:4000) by run_test (test.h:556) by main (test.h:624) Uninitialised value was created by a client request at RtlAllocateHeap (heap.c:208) by test_token_attr (security.c:1468) by func_security (security.c:4000) by run_test (test.h:556) by main (test.h:624) I dumped the SIDs that are being compared in test_token_attr, and it looks like the first six are ok, but the last two aren't: ... security.c:1487: Dumping SIDs security.c:1489: i = 4, j = 0, val = 1 security.c:1489: i = 4, j = 1, val = 2 security.c:1489: i = 4, j = 2, val = 0 security.c:1489: i = 4, j = 3, val = 0 security.c:1489: i = 4, j = 4, val = 0 security.c:1489: i = 4, j = 5, val = 0 security.c:1489: i = 4, j = 6, val = 0 security.c:1489: i = 4, j = 7, val = 5 security.c:1489: i = 4, j = 8, val = 20 security.c:1489: i = 4, j = 9, val = 0 security.c:1489: i = 4, j = 10, val = 0 security.c:1489: i = 4, j = 11, val = 0 security.c:1496: S-1-5-32-544, BUILTIN\Administrators use: 4 attr: 0x0000000f security.c:1487: Dumping SIDs security.c:1489: i = 5, j = 0, val = 1 security.c:1489: i = 5, j = 1, val = 2 security.c:1489: i = 5, j = 2, val = 0 security.c:1489: i = 5, j = 3, val = 0 security.c:1489: i = 5, j = 4, val = cc security.c:1489: i = 5, j = 5, val = cc security.c:1489: i = 5, j = 6, val = cc security.c:1489: i = 5, j = 7, val = cc security.c:1489: i = 5, j = 8, val = cc security.c:1489: i = 5, j = 9, val = cc security.c:1489: i = 5, j = 10, val = cc security.c:1489: i = 5, j = 11, val = cc security.c:1499: attr: 0x00000007 LookupAccountSid failed with error 1332 security.c:1487: Dumping SIDs security.c:1489: i = 6, j = 0, val = cc security.c:1489: i = 6, j = 1, val = cc security.c:1489: i = 6, j = 2, val = cc security.c:1489: i = 6, j = 3, val = cc security.c:1489: i = 6, j = 4, val = cc security.c:1489: i = 6, j = 5, val = cc security.c:1489: i = 6, j = 6, val = cc security.c:1489: i = 6, j = 7, val = cc security.c:1489: i = 6, j = 8, val = cc security.c:1489: i = 6, j = 9, val = cc security.c:1489: i = 6, j = 10, val = cc security.c:1489: i = 6, j = 11, val = cc security.c:1499: attr: 0xc0000007 LookupAccountSid failed with error 1332 Is some buffer length wrong somewhere? The responsible code seems to be from: commit 573db9ef639f65385f1efab5593b52c72b4b4108 Author: Nikolay Sivov <nsivov(a)codeweavers.com> Date: Tue Aug 23 11:16:27 2011 +0400 ntdll: While requesting TokenGroups calculate required user buffer size in server. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 10

[Bug 28695] New: Uninitialized variables in create_rebar
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=28695 Bug #: 28695 Summary: Uninitialized variables in create_rebar Product: Wine Version: 1.3.30 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ieframe AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified Valgrind complains: Conditional jump or move depends on uninitialised value(s) at REBAR_CommonSetupBand (rebar.c:1772) by REBAR_WindowProc (rebar.c:2549) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by create_rebar (iexplore.c:481) by ie_window_proc (iexplore.c:506) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by WIN_CreateWindowEx (win.c:1446) by CreateWindowExW (win.c:1582) by create_ie (iexplore.c:694) by InternetExplorer_Create (iexplore.c:811) Uninitialised value was created by a stack allocation at create_rebar (iexplore.c:434) Conditional jump or move depends on uninitialised value(s) at REBAR_ValidateBand (rebar.c:1630) by REBAR_WindowProc (rebar.c:2565) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by create_rebar (iexplore.c:481) by ie_window_proc (iexplore.c:506) by ??? (in dlls/user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by call_window_proc (message.c:2211) by send_message (message.c:3084) by SendMessageW (message.c:3264) by WIN_CreateWindowEx (win.c:1446) by CreateWindowExW (win.c:1582) by create_ie (iexplore.c:694) by InternetExplorer_Create (iexplore.c:811) Uninitialised value was created by a stack allocation at create_rebar (iexplore.c:434) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 4

[Bug 28767] New: shell32: uninitialized memory used during TRASH_EnumItems, triggered by "make recyclebin.ok"
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=28767 Bug #: 28767 Summary: shell32: uninitialized memory used during TRASH_EnumItems, triggered by "make recyclebin.ok" Product: Wine Version: 1.3.30 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: shell32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified Running "make recyclebin.ok" in shell32/tests, valgrind complains Conditional jump or move depends on uninitialised value(s) at __mktime_internal (mktime.c:428) by mktime (mktime.c:518) by TRASH_EnumItems (trash.c:444) by SHQueryRecycleBinW (recyclebin.c:859) by SHQueryRecycleBinA (recyclebin.c:848) by test_query_recyclebin (recyclebin.c:74) by func_recyclebin (recyclebin.c:106) by run_test (test.h:556) by main (test.h:624) Uninitialised value was created by a stack allocation at TRASH_EnumItems (trash.c:506) Looks like not all the fields of del_time got initialized? 47b40c58 (Mikołaj Zalewski 2006-08-17 18:29:58 +0200 444) del_secs = mktime(&del_time); -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 4

[Bug 17105] New: Magic: The Gathering Online 3.0 fails to log in with L0014
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=17105 Summary: Magic: The Gathering Online 3.0 fails to log in with L0014 Product: Wine Version: 1.1.13 Platform: HP OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: secur32 AssignedTo: kai.blin(a)gmail.com ReportedBy: robfjohnson(a)gmail.com Created an attachment (id=18941) --> (http://bugs.winehq.org/attachment.cgi?id=18941) Console Output When running Magic Online Version 3 with Wine, when I try to log in I receive L0014: The Magic Online Server is down for maintenance. If you continue to receive this error, check your date and time settings. Note that this is different than bug 14060, as 14060 gives you L0001: You have lost your connection to the server. Bug 14060 is supposedly (and from what I see actually) fixed as of git from 1-20-09. I encountered this bug when I tested with git from 1-22-09, and continues into 1-23-09. Having spoken to other Magic Online players, I found that L0014 has been caused (on Windows machines) by firewall issues, and also by incorrectly set Date and Time. I do not know any such issues on my computer that would cause this bug, but I am not certain that the problem is not my computer. It seems to me that the bug is in schan - which was the cause of but 14060. 14060 was schan being not implemented, whereas this bug, unless the problem is with my computer, may be that schan is half-implemented. (See, in the Console Output, the "Using hardcoded "NORMAL" priority" messages.) However, this paragraph is just speculation in case it gives someone an idea. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 26

[Bug 36207] New: Steel Beasts v1.19 demo installer crashes on exit
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=36207 Bug ID: 36207 Summary: Steel Beasts v1.19 demo installer crashes on exit Product: Wine Version: 1.7.5 Hardware: x86 URL: http://www.fileplanet.com/45253/40000/fileinfo/Steel-B easts-Demo-v1.19 OS: Linux Status: NEW Keywords: download, regression Severity: minor Priority: P2 Component: shell32 Assignee: wine-bugs(a)winehq.org Reporter: gyebro69(a)gmail.com CC: julliard(a)winehq.org Regression SHA1: 116e33d50a3435a539bcf7e9b93ab4adbfbecef9 Created attachment 48328 --> http://bugs.winehq.org/attachment.cgi?id=48328 terminal output At the end of the installation when you close the Wine Explorer window showing the installed shortcuts there is a crash, preceded by an >err:heap:validate_block_pointer Heap 0x110000: bad flags 00000001 for in-use arena 0x13b400 error. Despite of the crash the game is installed correctly. This is the commit that introduced the crash: 116e33d50a3435a539bcf7e9b93ab4adbfbecef9 is the first bad commit commit 116e33d50a3435a539bcf7e9b93ab4adbfbecef9 Author: Alexandre Julliard <julliard(a)winehq.org> Date: Thu Oct 17 18:01:04 2013 +0200 shell32: Delay initialization of the icon cache until needed. :040000 040000 ef0d7553dec7d91788b2ea39482f823f3a1975aa 522d7157e3be8944bb65d8768e2d2883d8f242de M dlls The previous commit (4c6e039aa153aaf3576d52a4106e97bd4d0b1159) results a different backtrace at the end of installation so I couldn't decide which one is the real culprit. Still present in wine-1.7.17-148-g2e5cb7a -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 36132] New: valgrind shows some leaks in gdiplus/tests/graphics.c
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

https://bugs.winehq.org/show_bug.cgi?id=36132 Bug ID: 36132 Summary: valgrind shows some leaks in gdiplus/tests/graphics.c Product: Wine Version: 1.7.17 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: gdiplus Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ../../../tools/runtest -q -P wine -T ../../.. -M gdiplus.dll -p gdiplus_test.exe.so graphics && touch graphics.ok preloader: Warning: failed to reserve range 00110000-68000000 preloader: Warning: failed to reserve range 7f000000-82000000 fixme:gdiplus:GdipCreateBitmapFromGdiDib (0x4e2fbe4, 0x4e2fa54, 0x4e2fc0c) - partially implemented fixme:gdiplus:SOFTWARE_GdipDrawDriverString Ignoring flags 10 fixme:gdiplus:GdipGetNearestColor (0x4713ec0, (nil)): Passing color unmodified fixme:gdiplus:GdipGetNearestColor ((nil), 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x46f5d30, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x472cfe0, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x473efe0, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x47361d0, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x476bef8, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x4766fe8, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x4734530, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x4712e90, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x472fb48, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x472eec8, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x47333c8, 0x4e2fc2c): Passing color unmodified fixme:gdiplus:GdipGetNearestColor (0x46f5d30, 0x4e2fb48): Passing color unmodified fixme:gdiplus:GdipMeasureDriverString Ignoring flags 100 ==28082== 928 bytes in 8 blocks are definitely lost in loss record 862 of 988 ==28082== at 0x7BC4C735: notify_alloc (heap.c:255) ==28082== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==28082== by 0x4E5A551: GdipAlloc (gdiplus.c:142) ==28082== by 0x4E84835: GdipCreateBitmapFromScan0 (image.c:1828) ==28082== by 0x496B0D7: create_graphics (graphics.c:106) ==28082== by 0x4984109: test_transform (graphics.c:3709) ==28082== by 0x4994E78: func_graphics (graphics.c:5573) ==28082== by 0x49D96B0: run_test (test.h:584) ==28082== by 0x49D9A9F: main (test.h:654) ==28082== ==28082== 1,856 bytes in 16 blocks are definitely lost in loss record 902 of 988 ==28082== at 0x7BC4C735: notify_alloc (heap.c:255) ==28082== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==28082== by 0x4E5A551: GdipAlloc (gdiplus.c:142) ==28082== by 0x4E84835: GdipCreateBitmapFromScan0 (image.c:1828) ==28082== by 0x496B0D7: create_graphics (graphics.c:106) ==28082== by 0x4982CAD: test_GdipMeasureString (graphics.c:3522) ==28082== by 0x4994E7D: func_graphics (graphics.c:5574) ==28082== by 0x49D96B0: run_test (test.h:584) ==28082== by 0x49D9A9F: main (test.h:654) ==28082== ==28082== 7,424 bytes in 64 blocks are definitely lost in loss record 970 of 988 ==28082== at 0x7BC4C735: notify_alloc (heap.c:255) ==28082== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==28082== by 0x4E5A551: GdipAlloc (gdiplus.c:142) ==28082== by 0x4E84835: GdipCreateBitmapFromScan0 (image.c:1828) ==28082== by 0x496B0D7: create_graphics (graphics.c:106) ==28082== by 0x49836B7: test_GdipMeasureString (graphics.c:3597) ==28082== by 0x4994E7D: func_graphics (graphics.c:5574) ==28082== by 0x49D96B0: run_test (test.h:584) ==28082== by 0x49D9A9F: main (test.h:654) ==28082== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 36015] New: FIFA 2002 demo crashes because gethostbyaddr with magic loopback address return NULL
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=36015 Bug ID: 36015 Summary: FIFA 2002 demo crashes because gethostbyaddr with magic loopback address return NULL Product: Wine Version: 1.7.16 Hardware: x86 URL: http://www.fileplanet.com/80868/80000/fileinfo/FIFA-20 02-Demo OS: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: winsock Assignee: wine-bugs(a)winehq.org Reporter: 00cpxxx(a)gmail.com Spotted while retesting bug 33246. If gethostbyaddr is hacked to use 127.0.0.1 instead of the value passed the demo will go further and show some screens (and then hang). Maybe the right thing to do is to change back the magic address like done in some different places in the code, like the do_connect or bind function. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 26639] New: Steam: crashes randomly while downloading L4D2
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=26639 Summary: Steam: crashes randomly while downloading L4D2 Product: Wine Version: 1.3.16 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: mewrei(a)mewrei.com Created an attachment (id=33912) --> (http://bugs.winehq.org/attachment.cgi?id=33912) Backtrace file While downloading/installing Left 4 Dead 2 via Steam, the app will randomly crash in random intervals, sometimes on startup, othertimes several minutes after launch. There are no user interactions that cause this. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 7

[Bug 18614] New: Problem with starting of wine or winecfg
by wine-bugs＠winehq.org May 2, 2014

May 2, 2014

http://bugs.winehq.org/show_bug.cgi?id=18614 Summary: Problem with starting of wine or winecfg Product: Wine Version: 1.1.21 Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: critical Priority: P1 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: kh-pol(a)yandex.ru When I start winecfg (even when there is no .wine in my home directory) error message emerges. ktdr(a)jigsaw:~$ winecfg wine: created the configuration directory '/home/ktdr/.wine' Could not load Mozilla. HTML rendering will be disabled. wine: Unhandled page fault on write access to 0xeee52e96 at address 0x7d87dc36 (thread 000b), starting debugger... err:process:__wine_kernel_init boot event wait timed out err:winecfg:open_mountmgr failed to open mount manager err 2 ktdr(a)jigsaw:~$ -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 49