September 2014 - Wine-Bugs - list.winehq.org

[Bug 24641] New: ProPresenter 4.0.0.1 for Windows doesn't startup - continued
by wine-bugs＠winehq.org Jan. 15, 2021

Jan. 15, 2021

http://bugs.winehq.org/show_bug.cgi?id=24641 Summary: ProPresenter 4.0.0.1 for Windows doesn't startup - continued Product: Wine Version: 1.3.4 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: puk007(a)gmail.com Created an attachment (id=31144) --> (http://bugs.winehq.org/attachment.cgi?id=31144) console-20101005.txt it all began with Bug 24627: http://bugs.winehq.org/show_bug.cgi?id=24627 when trying to run ProPresenter 4.0.0.1, it crashes on startup. steps to reproduce: - clean wine compiled from sources of 20100404 (with patch from bug 24627, so that I could continue installation: http://bugs.winehq.org/attachment.cgi?id=31130) - install using winetricks: winetricks winxp dotnet30 - download ProPresenter & install it from: http://www.renewedvision.com/downloads/pc/ProPresenter_Windows_4.0.0.1.zip when trying to run from console, it crashes (want's to send notification to M$) see attached console output in file console-20101005.txt -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 18

[Bug 36646] New: Windows 7 USB/DVD download tool installer fails, reporting 'Can't recognize 'Wudt.msi' as an internal or external command, or batch script'
by wine-bugs＠winehq.org Jan. 14, 2021

Jan. 14, 2021

https://bugs.winehq.org/show_bug.cgi?id=36646 Bug ID: 36646 Summary: Windows 7 USB/DVD download tool installer fails, reporting 'Can't recognize 'Wudt.msi' as an internal or external command, or batch script' Product: Wine Version: 1.7.19 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: cmd Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, the bootstrapper 'Windows7-USB-DVD-tool.exe' unpacks an .msi and .cmd file. Content of 'setup.cmd': --- snip --- @ECHO OFF Wudt.msi ECHO ON --- snip --- It expects the command processor to figure out the actual program to run with -> 'msiexec -i <filename>' which fails to do so. Relevant part of trace log: --- snip --- $ WINEDEBUG=+tid,+seh,+relay wine ./Windows7-USB-DVD-tool.exe >>log.txt 2>&1 ... 002a:Call KERNEL32.CreateProcessA(00000000,0013ae80 "C:\\users\\focht\\Temp\\IXP000.TMP\\setup.cmd",00000000,00000000,00000000,00000020,00000000,00000000,0033fad8,0033f8a0) ret=01005018 ... 002c:Call KERNEL32.__wine_kernel_init() ret=7bc5a4b2 002a:Ret KERNEL32.CreateProcessA() retval=00000001 ret=01005018 002a:Call KERNEL32.WaitForSingleObject(00000068,ffffffff) ret=0100502e ... 002c:Starting process L"C:\\windows\\system32\\cmd.exe" (entryproc=0x7ed061d4) ... 002c:trace:cmd:wmain Full commandline 'L"C:\\windows\\system32\\cmd.exe /c C:\\users\\focht\\Temp\\IXP000.TMP\\setup.cmd"' 002c:trace:cmd:wmain Command line parm: 'L"/c C:\\users\\focht\\Temp\\IXP000.TMP\\setup.cmd"' ... 002c:trace:cmd:WCMD_run_program Running 'L"Wudt.msi"' (0) ... 002c:trace:cmd:WCMD_run_program Found as L"C:\\users\\focht\\Temp\\IXP000.TMP\\Wudt.msi" ... 002c:Call shell32.FindExecutableW(00329964 L"C:\\users\\focht\\Temp\\IXP000.TMP\\Wudt.msi",00000000,0033203c) ret=7ed020d6 002c:Call advapi32.RegOpenKeyExW(80000002,00327964 L"Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\C:\\users\\focht\\Temp\\IXP000.TMP\\Wudt.msi",00000000,00020019,00328164) ret=7eb1952d 002c:Ret advapi32.RegOpenKeyExW() retval=00000002 ret=7eb1952d 002c:Call KERNEL32.SearchPathW(00000000,00329964 L"C:\\users\\focht\\Temp\\IXP000.TMP\\Wudt.msi",7eb4d076 L".exe",00000100,003281b0,00000000) ret=7eb19928 002c:Ret KERNEL32.SearchPathW() retval=00000027 ret=7eb19928 002c:Call KERNEL32.GetFileAttributesW(003281b0 L"C:\\users\\focht\\Temp\\IXP000.TMP\\Wudt.msi") ret=7eb19a2b 002c:Ret KERNEL32.GetFileAttributesW() retval=00000020 ret=7eb19a2b 002c:Call KERNEL32.GetProfileStringW(7eb4d89c L"windows",7eb4d8ac L"programs",7eb4d8c0 L"exe pif bat cmd com",003283b0,00000100) ret=7eb19bdd 002c:Ret KERNEL32.GetProfileStringW() retval=00000013 ret=7eb19bdd 002c:Call user32.CharLowerW(003283b0 L"exe pif bat cmd com") ret=7eb19bf6 002c:Ret user32.CharLowerW() retval=003283b0 ret=7eb19bf6 002c:Call advapi32.RegQueryValueW(80000000,003281f6 L".msi",00328db4,00328db0) ret=7eb19d39 002c:Ret advapi32.RegQueryValueW() retval=00000000 ret=7eb19d39 002c:Call advapi32.RegOpenKeyExW(80000000,00328db4 L"Msi.Package",00000000,02000000,0032816c) ret=7eb1964c 002c:Ret advapi32.RegOpenKeyExW() retval=00000000 ret=7eb1964c 002c:Call advapi32.RegCloseKey(00000044) ret=7eb1969a 002c:Ret advapi32.RegCloseKey() retval=00000000 ret=7eb1969a 002c:Call advapi32.RegQueryValueW(80000000,00328db4 L"Msi.Package\\shell\\open\\command",003285b0,00328190) ret=7eb196fd 002c:Ret advapi32.RegQueryValueW() retval=00000000 ret=7eb196fd 002c:Call KERNEL32.SearchPathW(00000000,003281b0 L"C:\\users\\focht\\Temp\\IXP000.TMP\\Wudt.msi",7eb4d076 L".exe",00000400,00327918,00000000) ret=7eb1897d 002c:Ret KERNEL32.SearchPathW() retval=00000027 ret=7eb1897d 002c:Ret shell32.FindExecutableW() retval=00000021 ret=7ed020d6 ... 002c:Call shell32.SHGetFileInfoW(0033203c,00000000,00329b6c,000002b4,00002000) ret=7ed0211d 002c:Call shlwapi.PathIsRelativeW(0033203c L"msiexec") ret=7eadee1f 002c:Ret shlwapi.PathIsRelativeW() retval=00000001 ret=7eadee1f 002c:Call KERNEL32.GetCurrentDirectoryW(00000104,003295c4) ret=7eadee3c 002c:Ret KERNEL32.GetCurrentDirectoryW() retval=0000001e ret=7eadee3c 002c:Call shlwapi.PathCombineW(003293bc,003295c4 L"C:\\users\\focht\\Temp\\IXP000.TMP",0033203c L"msiexec") ret=7eadee5d 002c:Ret shlwapi.PathCombineW() retval=003293bc ret=7eadee5d 002c:Call KERNEL32.GetBinaryTypeW(003293bc L"C:\\users\\focht\\Temp\\IXP000.TMP\\msiexec",00329134) ret=7eade91b 002c:Ret KERNEL32.GetBinaryTypeW() retval=00000000 ret=7eade91b 002c:Ret shell32.SHGetFileInfoW() retval=00000000 ret=7ed0211d 002c:Call KERNEL32.GetStartupInfoW(00329888) ret=7ed018dd 002c:Ret KERNEL32.GetStartupInfoW() retval=00000011 ret=7ed018dd 002c:Call KERNEL32.CreateProcessW(00329964 L"C:\\users\\focht\\Temp\\IXP000.TMP\\Wudt.msi",00137ad0 L"Wudt.msi",00000000,00000000,00000001,00000000,00000000,00000000,00329920,00329e24) ret=7ed021b2 002c:Ret KERNEL32.CreateProcessW() retval=00000000 ret=7ed021b2 ... Can't recognize 'Wudt.msi' as an internal or external command, or batch script. --- snip --- Source: http://source.winehq.org/git/wine.git/blob/0f2bed51bdd73676406e908eb105dde1… --- snip --- 1038 void WCMD_run_program (WCHAR *command, BOOL called) 1039 { ... 1170 /* Once found, launch it */ 1171 if (found) { 1172 STARTUPINFOW st; 1173 PROCESS_INFORMATION pe; 1174 SHFILEINFOW psfi; 1175 DWORD console; 1176 HINSTANCE hinst; ... 1192 /* thisDir contains the file to be launched, but with what? 1193 eg. a.exe will require a.exe to be launched, a.html may be iexplore */ 1194 hinst = FindExecutableW (thisDir, NULL, temp); 1195 if ((INT_PTR)hinst < 32) 1196 console = 0; 1197 else 1198 console = SHGetFileInfoW(temp, 0, &psfi, sizeof(psfi), SHGFI_EXETYPE); 1199 1200 ZeroMemory (&st, sizeof(STARTUPINFOW)); 1201 st.cb = sizeof(STARTUPINFOW); 1202 init_msvcrt_io_block(&st); 1203 1204 /* Launch the process and if a CUI wait on it to complete 1205 Note: Launching internal wine processes cannot specify a full path to exe */ 1206 status = CreateProcessW(thisDir, 1207 command, NULL, NULL, TRUE, 0, NULL, NULL, &st, &pe); ... --- snip --- $ sha1sum Windows7-USB-DVD-tool.exe ed1108a525066d1f850023cb5bfa05fc4ed21983 Windows7-USB-DVD-tool.exe $ du -sh Windows7-USB-DVD-tool.exe 2.6M Windows7-USB-DVD-tool.exe $ wine --version wine-1.7.19-70-gd6a59f7 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 12

[Bug 28851] New: Airstrike (Eagles of WWII) crashes during mission launch without native d3dx9_28.dll
by wine-bugs＠winehq.org Jan. 12, 2021

Jan. 12, 2021

http://bugs.winehq.org/show_bug.cgi?id=28851 Bug #: 28851 Summary: Airstrike (Eagles of WWII) crashes during mission launch without native d3dx9_28.dll Product: Wine Version: 1.3.31 Platform: x86 URL: http://www.slithdata.net/files/airstrike_pc/AirstrikeE aglesOfWorldWarII_Demo.exe OS/Version: Linux Status: UNCONFIRMED Severity: minor Priority: P2 Component: directx-d3dx9 AssignedTo: wine-bugs(a)winehq.org ReportedBy: gyebro69(a)gmail.com CC: wine-bugs(a)winehq.org Classification: Unclassified Created attachment 37061 --> http://bugs.winehq.org/attachment.cgi?id=37061 terminal output The crash only happens when effects quality is set to medium or high (can be adjusted from the launcher or via game option). The game requires native d3dx9_36.dll to prevent an early crash, due to unimplemented function d3dx9_36.dll.D3DXCreateCubeTextureFromFileExA The problem is present with Wine-1.0.1, 1.2.3...1.3.x Steps to reproduce the problem in the demo: 1. Install the demo. Place msvbvm60.dll in the game directory. Also install native d3dx9_36 via winetricks. 2. Start the launcher via AS_launcher.exe and go to <Options>. Make sure effects are set to either medium or high. Click on <Save and Play>. (You can also disable in-game music here if you find bug #28850 annoying). 3. When the main menu appears select campaign and initiate a mission. During the loading stage a crash will happen. Workaround: native d3dx9_28.dll Fedora 15 x86 Nvidia 250 / driver 280.13 -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 13

[Bug 19102] New: Don`t install 3D Studio Max 9
by wine-bugs＠winehq.org Jan. 12, 2021

Jan. 12, 2021

http://bugs.winehq.org/show_bug.cgi?id=19102 Summary: Don`t install 3D Studio Max 9 Product: Wine Version: 1.1.24 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: patsev.anton(a)gmail.com Don`t install 3D Studio Max 9. Installation ended prematurely because of an error -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 18

[Bug 31610] New: "The Void" page fault
by wine-bugs＠winehq.org Jan. 12, 2021

Jan. 12, 2021

http://bugs.winehq.org/show_bug.cgi?id=31610 Bug #: 31610 Summary: "The Void" page fault Product: Wine Version: 1.5.11 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: kevinperson(a)topicbox.com Classification: Unclassified Created attachment 41567 --> http://bugs.winehq.org/attachment.cgi?id=41567 console output The game "The Void" (from Steam) occasionally crashes with a page fault. Unfortunately I can't say much about what triggers this. It seems to crash most often in the transition between areas, but sometimes it works. This is using 1.5.11 from the ubuntu-wine PPA. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 5

[Bug 33661] New: Microsoft SQL Server Management Studio Express 2008 R2 installer fails
by wine-bugs＠winehq.org Jan. 12, 2021

Jan. 12, 2021

http://bugs.winehq.org/show_bug.cgi?id=33661 Bug #: 33661 Summary: Microsoft SQL Server Management Studio Express 2008 R2 installer fails Product: Wine Version: 1.5.31 Platform: x86 URL: http://www.microsoft.com/en-us/download/details.aspx?i d=7593 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: djelinski1(a)gmail.com Classification: Unclassified Created attachment 44557 --> http://bugs.winehq.org/attachment.cgi?id=44557 console output Continuation of bug 33115. Now the console log ends with: The following error occurred: The performance counter registry hive is corrupted. To continue, you must repair the performance counter registry hive. For more information, see http://support.microsoft.com/kb/300956. Error result: -2067922940 Result facility code: 1214 Result error code: 4 Please review the summary.txt log for further details To reproduce: Work around bug 33450: winetricks msxml3 winetricks dotnet35sp1 Work around bug 12501: winetricks mspatcha Work around bug 30681: extract System.Data.SqlXml.dll from dotnet20sp2 installer, overwrite the existing ones in Microsoft.NET/Framework/v2.0.50727 and assembly/GAC_MSIL Run installer: wine SQLManagementStudio_x86_ENU.exe /q /FEATURES=SSMS /ACTION=Install /IAcceptSQLServerLicenseTerms -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 18

[Bug 18296] New: DInput has issues with KDE4.2 keyboard input repeat.
by wine-bugs＠winehq.org Jan. 11, 2021

Jan. 11, 2021

http://bugs.winehq.org/show_bug.cgi?id=18296 Summary: DInput has issues with KDE4.2 keyboard input repeat. Product: Wine Version: 1.1.20 Platform: PC-x86-64 URL: http://www.coh.com OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-dinput AssignedTo: wine-bugs(a)winehq.org ReportedBy: wine(a)eternaldusk.com After upgrading to Kubuntu Jaunty, City of Heroes characters show a horrible staggering when you try move consistently in any direction. The character animation resets at the interval equivalent to the keyboard delay. So, it's as if the application is seeing you press the key over and over - instead of holding it down. Turning off keyboard repeat in the system options eliminates this issue. Modifying the delay only slows the initial staggering. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 41

[Bug 26016] New: xmllite installer crashes about 1 in 30 runs
by wine-bugs＠winehq.org Jan. 8, 2021

Jan. 8, 2021

http://bugs.winehq.org/show_bug.cgi?id=26016 Summary: xmllite installer crashes about 1 in 30 runs Product: Wine Version: 1.3.13 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com While running the regression test for winetricks-alpha, I noticed that installing xmllite crashed like this: fixme:wintrust:CryptCATGetCatAttrInfo 0x13e700, L"SPLevel" wine: Unhandled page fault on read access to 0xffffffff at address 0x68a4875f (thread 0013), starting debugger... Backtrace: =>0 0x68a4875f SetupCommitFileQueueW+0x3cf(owner=(nil), handle=0x1414f0, handler=0x68a49040, context=0x33bcdc) [include/wine/unicode.h:200] in setupapi (0x0033bcec) 1 0x68a49031 SetupCommitFileQueueA+0x40(owner=(nil), queue=0x1414f0, handler=0x103be4b, context=0x33c228) [dlls/setupapi/queue.c:879] in setupapi (0x0033f384) 0x68a4875f SetupCommitFileQueueW+0x3cf [include/wine/unicode.h:200] in setupapi: cmpw $0,0x0(%edx) I ran the installer in a loop to try to reproduce, and on the 34th run, I got a different crash at about the same place: fixme:wintrust:CryptCATGetCatAttrInfo 0x1c8ba8, L"SPLevel" err:setupapi:SetupDefaultQueueCallbackA copy error 3 "c:\\e64013c352a7bbb4a28da0908ecc09\\SP2QFE\\xmllite.dll" -> "c:\\windows\\$hf_mig$\\KB915865\\SP2QFE\\xmllite.dll" fixme:setupapi:pSetupGetGlobalFlags stub fixme:setupapi:pSetupGetGlobalFlags stub wine: Unhandled page fault on read access to 0xffffffff at address 0x68c72252 (thread 003f), starting debugger... Backtrace: =>0 0x68c72252 StringTableDestroy+0x42(hStringTable=0x13ed98) [dlls/setupapi/stringtable.c:177] in setupapi (0x0033f384) 0x68c72252 StringTableDestroy+0x42 [dlls/setupapi/stringtable.c:177] in setupapi: movl 0x0(%edx,%edi,1),%edx I ran it again in a loop with WINEDEBUG=warn+heap,+setupapi, and on the 28th, 111th, and 114th runs, saw the error: ... fixme:advapi:RegisterEventSourceW (L"",L"NtServicePack"): stub fixme:advapi:ReportEventA (0xcafe4242,0x0004,0x0000,0x400e1119,0x120df8,0x0002,0x00000000,0x34bcb8,(nil)): stub fixme:advapi:ReportEventW (0xcafe4242,0x0004,0x0000,0x400e1119,0x120df8,0x0002,0x00000000,0x118f90,(nil)): stub fixme:advapi:DeregisterEventSource (0xcafe4242) stub err:heap:HEAP_ValidateInUseArena Heap 0x110000: block 0x137420 tail overwritten at 0x137430 (byte 0/32 == 0xff) 28 -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 51

[Bug 32554] New: XPSEP instalation fails with "Path not found" error
by wine-bugs＠winehq.org Jan. 8, 2021

Jan. 8, 2021

http://bugs.winehq.org/show_bug.cgi?id=32554 Bug #: 32554 Summary: XPSEP instalation fails with "Path not found" error Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: timoteo(a)unimed-agm.com.br Classification: Unclassified Created attachment 42963 --> http://bugs.winehq.org/attachment.cgi?id=42963 Backtrace shown in error window I got an error while trying to install .net framework 3.0 SP1 using winetricks (winetricks dotnet30sp1). I tried installing it by hand also (wine msiexec /i "XPSEP XP and Server 2003 32 bit.msi" /qb), but got the same error. Terminal output shows (among lots of fixmes) the following lines: err:eventlog:ReportEventW L"Windows" err:eventlog:ReportEventW L"" err:eventlog:ReportEventW L"Path not found.\r\n" And After debug information, the following lines: err:msi:ITERATE_Actions Execution halted, action L"EPUpdateInstallAction" returned 1627 err:msi:custom_get_thread_return Invalid Return Code 3 Information: Ubuntu Quantal running on a VirtualBox (I have the same problems running on physical hardware) $ uname -a Linux unimed-box 3.5.0-17-generic #28-Ubuntu SMP Tue Oct 9 19:32:08 UTC 2012 i686 i686 i686 GNU/Linux $ wine --version wine-1.5.19 Backtrace attached -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 23

[Bug 36387] New: Multiple Microsoft installers crash or hang with heap corruption (XmlLite, XPSEP, IE7)
by wine-bugs＠winehq.org Jan. 8, 2021

Jan. 8, 2021

https://bugs.winehq.org/show_bug.cgi?id=36387 Bug ID: 36387 Summary: Multiple Microsoft installers crash or hang with heap corruption (XmlLite, XPSEP, IE7) Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: setupapi Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, continuation of bug 26016 I did more testing, trying to extract a pattern out of the crashes. Unfortunately there is no clear pattern. There was one crash log which gave me another idea though. --- snip --- $ WINEDEBUG=+tid,+seh,+relay,+heap wine ./update.exe -q >>log.txt 2>&1 ... 0035:Call setupapi.SetupInitDefaultQueueCallbackEx(00000000,ffffffff,00000000,00000000,00000000) ret=01053eac 0035:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7e0c34d9 0035:trace:heap:RtlAllocateHeap (0x110000,70000062,0000000c): returning 0x1b70c0 0035:Ret ntdll.RtlAllocateHeap() retval=001b70c0 ret=7e0c34d9 0035:Ret setupapi.SetupInitDefaultQueueCallbackEx() retval=001b70c0 ret=01053eac ... 0035:Call setupapi.SetupCommitFileQueueA(00000000,001f3908,7e09e35c,001b70c0) ret=01053f55 0035:Ret setupapi.SetupCommitFileQueueA() retval=00000001 ret=01053f55 ... 0035:Call setupapi.SetupCommitFileQueueA(00000000,0011c5a0,0103be4b,0034c1b8) ret=01055f68 0035:Call setupapi.SetupDefaultQueueCallbackA(001b70c0,00000001,00000000,00000000) ret=0103bf44 0035:Ret setupapi.SetupDefaultQueueCallbackA() retval=00000001 ret=0103bf44 0035:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=7e0bf759 0035:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e0bf759 0035:Call ntdll.RtlAllocateHeap(00110000,00000000,00000080) ret=7e0bf782 0035:err:heap:HEAP_ValidateInUseArena Heap 0x110000: free block 0x1b70e0 overwritten at 0x1b70f0 by ffffffff ... --- snip --- There was a damaged heap block located near the context structure for the default queue callback. MSDN: http://msdn.microsoft.com/en-us/library/aa376956%28v=vs.85%29.aspx --- quote --- The SetupInitDefaultQueueCallback function builds the context structure that is used by the default queue callback routine. It returns a void pointer to that structure. This structure is essential for the default callback routine's operation and must be passed to the callback routine. You do can this either by specifying the void pointer as the context in a call to SetupCommitFileQueue, or by specifying the void pointer as the context parameter when calling SetupDefaultQueueCallback from a custom callback routine. This context structure must not be altered or referenced by the setup application. --- quote --- What if these guys writing the update installers, distributing their own copy of setupapi (updspapi) give a damn about MSDN and treat the context callback structure not as opaque, possibly peek/modify structure members? The context structured started at 0x001b70c0 .. the damaged part was at 0x1b70f0. Unfortunately, I could not replicate the corruption pattern at this offset with more tests. I gave the callback context structure a larger block - 0x40 bytes to be safe. The block was allocated with HEAP_ZERO_MEMORY to make sure that even if the installer code peeks into structure it doesn't see garbage. The current structure layout (member offsets) is most likely different from their layout but that doesn't seem to play a role here. With that change in place the crashes were gone. I got a random heap crit sec hang out of several hundred tries though (maybe unrelated?). Austin, can you pad the structure here up to 0x40 bytes: http://source.winehq.org/git/wine.git/blob/4d796458d0ed517d45adc57a1aedaf1c… --- snip --- 39 /* context structure for the default queue callback */ 40 struct default_callback_context 41 { 42 HWND owner; 43 HWND progress; 44 UINT message; 45 }; --- snip --- zero init alloc (HEAP_ZERO_MEMORY) here: http://source.winehq.org/git/wine.git/blob/4d796458d0ed517d45adc57a1aedaf1c… --- snip --- 1480 PVOID WINAPI SetupInitDefaultQueueCallbackEx( HWND owner, HWND progress, UINT msg, 1481 DWORD reserved1, PVOID reserved2 ) 1482 { 1483 struct default_callback_context *context; 1484 1485 if ((context = HeapAlloc( GetProcessHeap(), 0, sizeof(*context) ))) 1486 { 1487 context->owner = owner; 1488 context->progress = progress; 1489 context->message = msg; 1490 } 1491 return context; 1492 } --- snip --- and retest? Thanks. Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 13