September 2016 - Wine-Bugs - list.winehq.org

[Bug 33457] New: Will the multiplication suffers from integer overflow @line 268?
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

http://bugs.winehq.org/show_bug.cgi?id=33457 Bug #: 33457 Summary: Will the multiplication suffers from integer overflow @line 268? Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: comctl32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: sunxs(a)is.iscas.ac.cn Classification: Unclassified We notice that the multiplication at line 268 may overflow in some condition, and is not checked. We think it is necessary to check it as the DSA_InsertItem is an exported function. It is not guaranteed that all the parameters will be in the valid range. The related codes are shown below. Xiaoshan Sun TCA, ISCAS ============== related source codes ======================================== Implemented in "dlls/comctl32/dsa.c". source.winehq.org/source/dlls/comctl32/dsa.c 251 INT WINAPI DSA_InsertItem (const HDSA hdsa, INT nIndex, LPVOID pSrc) 252 { 253 INT nNewItems, nSize; 254 LPVOID lpTemp, lpDest; 255 256 TRACE("(%p %d %p)\n", hdsa, nIndex, pSrc); 257 258 if ((!hdsa) || nIndex < 0) 259 return -1; 260 261 /* when nIndex >= nItemCount then append */ 262 if (nIndex >= hdsa->nItemCount) 263 nIndex = hdsa->nItemCount; 264 265 /* do we need to resize ? */ 266 if (hdsa->nItemCount >= hdsa->nMaxCount) { 267 nNewItems = hdsa->nMaxCount + hdsa->nGrow; 268 nSize = hdsa->nItemSize * nNewItems; // if ( nSize/nNewItems != hdsa->nItemSize){ overflow detected;} 269 270 lpTemp = ReAlloc (hdsa->pData, nSize); -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 10

[Bug 40580] New: TASCAM US-16x08 soundcard controller crashes
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

https://bugs.winehq.org/show_bug.cgi?id=40580 Bug ID: 40580 Summary: TASCAM US-16x08 soundcard controller crashes Product: Wine Version: 1.9.9 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: brouits(a)free.fr Distribution: --- Created attachment 54421 --> https://bugs.winehq.org/attachment.cgi?id=54421 backtrace showing a x00 pointer access 1. on fresh wine 1.9.9, install TASCAM US-16x08 controller from http://www.tascam.eu/sw/us-16x08/US-16x08_driver_v104_win.zip 2. run the installed software with wine 3. expected : GUI started, got crash report from wine -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 39874] New: Alien Shooter crashes often with access violation
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

https://bugs.winehq.org/show_bug.cgi?id=39874 Bug ID: 39874 Summary: Alien Shooter crashes often with access violation Product: Wine Version: 1.8 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: zakarjor(a)yahoo.com Distribution: --- Alien shooter (1.2 Gog version) crashes often, usually when lots of actions occur (like massive number of aliens and explosions happening all at the same time.) The error log saved by the game inside Logs directory shows the following at the end: !!!ERROR 09:28:10!!!SOUND: 0x6A Invalid nsfx !!!ERROR 09:28:43!!!TEXTURE: 0x8876086C Couldn't lock !!!ERROR EXCEPTION 0x41B57C!!!: Access violation write to 0x0 Looking at the wine source, it looks like LockRect() in d3d8/surface.c is returning D3DERR_INVALIDCALL after checking for invalid rect. By patching the file to comment out the checking logic, the game seems to play flawlessly (currently played to level 10 without any crash.) The checking logic seems to have been added in 2006: http://source.winehq.org/git/?p=wine.git;a=commit;h=77448f588b888ecc724c7ea… I'm not sure if this is the right way to fix it, but at least it works, and I haven't seen any effect with other games I have. Looking at d3d9/surface.c, I can see that the checking logic doesn't exist in d3d9 LockRect(), and I've seen Internet examples of LockRect() passing invalid rectangles with impunity (like zero width rectangles). -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 11

[Bug 39861] New: Windows utility 'relog.exe' crashes on unimplemented function 'pdh.dll.PdhBindInputDataSourceW'
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

https://bugs.winehq.org/show_bug.cgi?id=39861 Bug ID: 39861 Summary: Windows utility 'relog.exe' crashes on unimplemented function 'pdh.dll.PdhBindInputDataSourceW' Product: Wine Version: 1.9.0 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: pdh Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: Debian Follow up to bug 23298. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 35286] New: Borderlands needs msvcr90.dll._crt_debugger_hook
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

http://bugs.winehq.org/show_bug.cgi?id=35286 Bug ID: 35286 Summary: Borderlands needs msvcr90.dll._crt_debugger_hook Product: Wine Version: 1.7.9 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msvcrt Assignee: wine-bugs(a)winehq.org Reporter: debian(a)carbon-project.org Classification: Unclassified Boderlands (Steam version) needs msvcr90.dll._crt_debugger_hook and fails to launch. Disabling mmdevapi works around this issue. > wine: Call from 0x7b83aabe to unimplemented function msvcr90.dll._crt_debugger_hook, aborting Note: this might be a clone of bug 34870 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 21

[Bug 39744] New: No sound in Applications after Update from 1.7 pre winepulse.drv to 1.7.55 or 1.8 after the pulse update
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

https://bugs.winehq.org/show_bug.cgi?id=39744 Bug ID: 39744 Summary: No sound in Applications after Update from 1.7 pre winepulse.drv to 1.7.55 or 1.8 after the pulse update Product: Wine Version: unspecified Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: NoYzE(a)hotmail.de Distribution: --- Created attachment 53014 --> https://bugs.winehq.org/attachment.cgi?id=53014 a log of the occuring problem with audio debug enabled I updated from a 1.7 Wine version where my default sound driver was winealsa.drv. I wanted to use a newer version of Wine and updated to 1.7.55. I noticed, the default driver has changed to winepulse.drv and winecfg plays the test sound fine. However in applications i have no sound at all. I tried purging pulseaudio, alsa, wine and reinstall and deleting .wine In the wine irc, "slackner" asked me for a log and i generated one, showing lots of "warn:pulse:AudioRenderClient_GetBuffer Wanted to write 7200, but only 2646 available" warnings. I don't think i have made any changes to the pulse config, however i used the music programm LMMS to make music. In the settings there is a slider to turn the Latency up down through buffer size, but i don't think it's globally. Also turning buffer size up there now doesn't affect the problem, so i think it's not connected. Besides i did no changes to Pulse or Alsa i think. I tested with Games like Warcraft III, Hearthstone and Osu! I am running Debian Testing 64-bit Gnome3 Nvidia-Drivers installed. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 37

[Bug 34507] New: __unDName doesn't support data type "$$B"
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

http://bugs.winehq.org/show_bug.cgi?id=34507 Bug #: 34507 Summary: __unDName doesn't support data type "$$B" Product: Wine Version: 1.7.1 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msvcrt AssignedTo: wine-bugs(a)winehq.org ReportedBy: info(a)vmpsoft.com Classification: Unclassified ??_E?$TStrArray@$$BY0BAA(a)D$0BA@@@UAEPAXI(a)Z -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 5

[Bug 20896] New: Use-after-free in DdeClientTransaction in user32 dde tests
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

http://bugs.winehq.org/show_bug.cgi?id=20896 Summary: Use-after-free in DdeClientTransaction in user32 dde tests Product: Wine Version: 1.1.33 Platform: PC OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: user32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com http://kegel.com/wine/valgrind/logs/2009-11-30-19.16/vg-user32_dde.txt says Invalid read of size 2 at GlobalFree (heap.c:767) by WDML_FreeTransaction (dde_misc.c:2439) by DdeClientTransaction (dde_client.c:1228) by test_ddeml_client (dde.c:392) by func_dde (dde.c:2357) by run_test (test.h:535) by main (test.h:585) Address 0x7f075e80 is not stack'd, malloc'd or (recently) free'd It's a little hard to see what's going on, but it appears that the memory in question was indeed recently freed, judging by the attached log, which was generated by the command WINEDEBUG=+relay,+heap valgrind --trace-children=yes wine user32_test.exe.so dde.c and edited to show just the area of interest. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 14

[Bug 36625] New: can't set text background color in richedit
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

http://bugs.winehq.org/show_bug.cgi?id=36625 Bug ID: 36625 Summary: can't set text background color in richedit Product: Wine Version: 1.7.19 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: richedit Assignee: wine-bugs(a)winehq.org Reporter: lostcoderhaley(a)gmail.com Created attachment 48673 --> http://bugs.winehq.org/attachment.cgi?id=48673 Add support for changing the background color of text in a richedit controll In Living Cookbook, when a user is capturing a recipe they select some text then choose what that text is (ingredients, instructions, etc.). Then LC changes the background color of that text so the user can see which parts of the recipe have been imported and what type they are. Currently wine does not allow changing the background color of only some of the text. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 32936] New: SmartMusic crashed wine1.4 upon startup
by wine-bugs＠winehq.org Oct. 7, 2016

Oct. 7, 2016

http://bugs.winehq.org/show_bug.cgi?id=32936 Bug #: 32936 Summary: SmartMusic crashed wine1.4 upon startup Product: Wine Version: 1.4 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: rgncqcll(a)sharklasers.com Classification: Unclassified Created attachment 43491 --> http://bugs.winehq.org/attachment.cgi?id=43491 Backtrace.txt from Wine 1.4 crash with SmartMusic install Running Wine 1.4, default installed with Ubuntu 12.04 LTS as on date. SmartMusic installer (available here: http://www.smartmusic.com/download/default.aspx?mode=download&platform=Wind…) ran smoothly and finished without error. Upon starting SmartMusic, however, Wine immediately crashed with a backtrace as shown in the attachment. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 18