May 2017 - Wine-Bugs - list.winehq.org

[Bug 36310] New: valgrind shows lots of uninitialized reads/writes in msxml3/tests/xmlview.c
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=36310 Bug ID: 36310 Summary: valgrind shows lots of uninitialized reads/writes in msxml3/tests/xmlview.c Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: msxml3 Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==6314== Invalid read of size 4 ==6314== at 0x7018C5F3: ??? ==6314== by 0x70197781: ??? ==6314== by 0x70181492: ??? ==6314== by 0x7BC555FE: MODULE_InitDLL (loader.c:1068) ==6314== by 0x7BC5597C: process_attach (loader.c:1157) ==6314== by 0x7BC5592C: process_attach (loader.c:1149) ==6314== by 0x7BC585E2: LdrLoadDll (loader.c:2129) ==6314== by 0x7B85A79A: load_library (module.c:933) ==6314== by 0x7B85A908: LoadLibraryExW (module.c:990) ==6314== by 0x73A81BA: load_xul (nsembed.c:484) ==6314== by 0x73A8E4A: load_wine_gecko_v (nsembed.c:587) ==6314== by 0x73A8EB7: load_wine_gecko (nsembed.c:605) ==6314== by 0x73A97E5: load_gecko (nsembed.c:772) ==6314== by 0x73AE233: create_nscontainer (nsembed.c:2047) ==6314== by 0x732CB68: HTMLDocument_Create (htmldoc.c:4751) ==6314== by 0x7398C60: ClassFactory_CreateInstance (main.c:238) ==6314== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6314== by 0x6CA4DB0: XMLView_create (xmlview.c:1444) ==6314== by 0x6C62320: ClassFactory_CreateInstance (factory.c:178) ==6314== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6314== Address 0x4eddfe4 is not stack'd, malloc'd or (recently) free'd ==6314== ==6530== Thread 4: ==6530== Invalid read of size 4 ==6530== at 0x7E41033: ??? ==6530== by 0x7E362D2: ??? ==6530== Address 0xcc3d7fc is on thread 1's stack ==6530== ==6652== Conditional jump or move depends on uninitialised value(s) ==6652== at 0x69DA2A6E: ??? ==6652== by 0x69D912D8: ??? ==6652== by 0x6B05358C: ??? ==6652== by 0x69FA8430: ??? ==6652== by 0x69F7B782: ??? ==6652== by 0x69F7C6BE: ??? ==6652== by 0x73A5E34: init_nscontainer (nsiface.h:59567) ==6652== by 0x73A62D1: create_nscontainer (nsembed.c:2065) ==6652== by 0x7324B68: HTMLDocument_Create (htmldoc.c:4751) ==6652== by 0x7390C60: ClassFactory_CreateInstance (main.c:238) ==6652== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6652== by 0x6CA4DB0: XMLView_create (xmlview.c:1444) ==6652== by 0x6C62320: ClassFactory_CreateInstance (factory.c:178) ==6652== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6652== by 0x4CA707B: test_QueryInterface (xmlview.c:156) ==6652== by 0x4CA7B69: func_xmlview (xmlview.c:269) ==6652== by 0x4CA896C: run_test (test.h:584) ==6652== by 0x4CA8D5B: main (test.h:654) ==6652== Uninitialised value was created by a stack allocation ==6652== at 0x69DA29E6: ??? ==6652== ==6753== Conditional jump or move depends on uninitialised value(s) ==6753== at 0x69D80B25: ??? ==6753== by 0x6A0E6970: ??? ==6753== by 0x6A0E645E: ??? ==6753== by 0x6AFE5020: ??? ==6753== by 0x69CAB81E: ??? ==6753== by 0x6A0E65B1: ??? ==6753== by 0x69D80A6F: ??? ==6753== by 0x5778509: ??? (winproc.c:173) ==6753== by 0x577867E: call_window_proc (winproc.c:244) ==6753== by 0x577986C: WINPROC_CallProcAtoW (winproc.c:603) ==6753== by 0x577A911: WINPROC_call_window (winproc.c:911) ==6753== by 0x573B8F9: DispatchMessageA (message.c:3948) ==6753== by 0x4CB7928: test_Load (xmlview.c:247) ==6753== by 0x4CB7B6E: func_xmlview (xmlview.c:270) ==6753== by 0x4CB896C: run_test (test.h:584) ==6753== by 0x4CB8D5B: main (test.h:654) ==6753== Uninitialised value was created by a stack allocation ==6753== at 0x69D80AB6: ??? ==6753== ==6998== Conditional jump or move depends on uninitialised value(s) ==6998== at 0x6AEE5337: ??? ==6998== by 0x69ECD001: ??? ==6998== by 0x6A1714F7: ??? ==6998== by 0x6A36FB0A: ??? ==6998== by 0x6AECA4E7: ??? ==6998== by 0x6AECA48F: ??? ==6998== by 0x69CAB81E: ??? ==6998== by 0x6A0E65B1: ??? ==6998== by 0x69D80A6F: ??? ==6998== by 0x5768509: ??? (winproc.c:173) ==6998== by 0x576867E: call_window_proc (winproc.c:244) ==6998== by 0x576986C: WINPROC_CallProcAtoW (winproc.c:603) ==6998== by 0x576A911: WINPROC_call_window (winproc.c:911) ==6998== by 0x572B8F9: DispatchMessageA (message.c:3948) ==6998== by 0x4CB3928: test_Load (xmlview.c:247) ==6998== by 0x4CB3B6E: func_xmlview (xmlview.c:270) ==6998== by 0x4CB496C: run_test (test.h:584) ==6998== by 0x4CB4D5B: main (test.h:654) ==6998== Uninitialised value was created by a client request ==6998== at 0x7BC4C52C: mark_block_uninitialized (heap.c:209) ==6998== by 0x7BC4C697: initialize_block (heap.c:240) ==6998== by 0x7BC50FA3: RtlAllocateHeap (heap.c:1717) ==6998== by 0x76E1CE0: MSVCRT_malloc (heap.c:329) ==6998== by 0x61E426BF: ??? ==6998== by 0x69D2235D: ??? ==6998== by 0x6A74092C: ??? ==6998== by 0x6A5B7D64: ??? ==6998== by 0x69C860AB: ??? ==6998== by 0x6B073403: ??? ==6998== by 0x6A4BD183: ??? ==6998== by 0x6AFE511D: ??? ==6998== by 0x69CAB81E: ??? ==6998== by 0x6A0E65B1: ??? ==6998== by 0x69D80A6F: ??? ==6998== by 0x5768509: ??? (winproc.c:173) ==6998== by 0x576867E: call_window_proc (winproc.c:244) ==6998== by 0x576986C: WINPROC_CallProcAtoW (winproc.c:603) ==6998== by 0x576A911: WINPROC_call_window (winproc.c:911) ==6998== by 0x572B8F9: DispatchMessageA (message.c:3948) ==6998== ==6998== 8 bytes in 1 blocks are possibly lost in loss record 421 of 6,589 ==6998== at 0x7BC4C735: notify_alloc (heap.c:255) ==6998== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==6998== by 0x7B84586B: HeapAlloc (heap.c:271) ==6998== by 0x7B845B40: GlobalAlloc (heap.c:376) ==6998== by 0x53683E7: OLEClipbrd_Initialize (clipboard.c:1732) ==6998== by 0x53A1772: OleInitialize (ole2.c:215) ==6998== by 0x6AFF45B4: ??? ==6998== by 0x69D19393: ??? ==6998== by 0x6A74092C: ??? ==6998== by 0x69C92A72: ??? ==6998== by 0x6B06D8C2: ??? ==6998== by 0x69F7C26F: ??? ==6998== by 0x73ADE34: init_nscontainer (nsiface.h:59567) ==6998== by 0x73AE2D1: create_nscontainer (nsembed.c:2065) ==6998== by 0x732CB68: HTMLDocument_Create (htmldoc.c:4751) ==6998== by 0x7398C60: ClassFactory_CreateInstance (main.c:238) ==6998== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6998== by 0x6CA4DB0: XMLView_create (xmlview.c:1444) ==6998== by 0x6C62320: ClassFactory_CreateInstance (factory.c:178) ==6998== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6998== ==7281== 8 bytes in 1 blocks are possibly lost in loss record 428 of 6,602 ==7281== at 0x7BC4C735: notify_alloc (heap.c:255) ==7281== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==7281== by 0x7B84586B: HeapAlloc (heap.c:271) ==7281== by 0x7B845B40: GlobalAlloc (heap.c:376) ==7281== by 0x532204A: CreateStreamOnHGlobal (hglobalstream.c:603) ==7281== by 0x6C4D838: domdoc_load_from_stream (domdoc.c:772) ==7281== by 0x6C52086: domdoc_load (domdoc.c:2198) ==7281== by 0x6C9CCBA: handle_xml_load (msxml6.h:5228) ==7281== by 0x6C9D60C: XMLView_BindStatusCallback_OnDataAvailable (xmlview.c:539) ==7281== by 0x5FF159A: BindStatusCallback_OnDataAvailable (urlmon.h:820) ==7281== by 0x5FF73A2: report_data (urlmon.h:820) ==7281== by 0x5FF7595: InternetProtocolSink_ReportData (binding.c:1126) ==7281== by 0x5FFC920: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==7281== by 0x5FFD5D6: BPInternetProtocolSink_ReportData (urlmon.h:3113) ==7281== by 0x73D062D: ResProtocol_Start (urlmon.h:3113) ==7281== by 0x5FFB2D1: BindProtocol_StartEx (urlmon.h:3296) ==7281== by 0x5FF8A1B: start_binding (urlmon.h:7870) ==7281== by 0x5FF8BCD: bind_to_storage (binding.c:1567) ==7281== by 0x6018CF1: URLMoniker_BindToStorage (umon.c:280) ==7281== by 0x6C9F74D: XMLView_PersistMoniker_Load (objidl.h:3488) ==7281== ==7281== 32 bytes in 1 blocks are possibly lost in loss record 2,478 of 6,602 ==7281== at 0x7BC4C735: notify_alloc (heap.c:255) ==7281== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==7281== by 0x7BC39AE9: RtlInitializeCriticalSectionEx (critsection.c:326) ==7281== by 0x7B876B51: InitializeCriticalSectionEx (sync.c:356) ==7281== by 0x7B876B17: InitializeCriticalSectionAndSpinCount (sync.c:334) ==7281== by 0x6AFB523E: ??? ==7281== by 0x69DFCC68: ??? ==7281== by 0x6A6C7944: ??? ==7281== by 0x69E6E0B7: ??? ==7281== by 0x7BC870D0: call_thread_func (signal_i386.c:2630) ==7281== by 0x7BC87065: ??? (signal_i386.c:2571) ==7281== by 0x7BC8E4B0: start_thread (thread.c:428) ==7281== by 0x4EA7BD89: start_thread (in /usr/lib/libpthread-2.18.so) ==7281== by 0x4E95CA0D: clone (in /usr/lib/libc-2.18.so) ==7449== 8 bytes in 1 blocks are possibly lost in loss record 422 of 6,591 ==7449== at 0x7BC4C735: notify_alloc (heap.c:255) ==7449== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==7449== by 0x7B84586B: HeapAlloc (heap.c:271) ==7449== by 0x7B845B40: GlobalAlloc (heap.c:376) ==7449== by 0x53683E7: OLEClipbrd_Initialize (clipboard.c:1732) ==7449== by 0x53A1772: OleInitialize (ole2.c:215) ==7449== by 0x6AFF45B4: ??? ==7449== by 0x69D19393: ??? ==7449== by 0x6A74092C: ??? ==7449== by 0x69C92A72: ??? ==7449== by 0x6B06D8C2: ??? ==7449== by 0x69F7C26F: ??? ==7449== by 0x739DE34: init_nscontainer (nsiface.h:59567) ==7449== by 0x739E2D1: create_nscontainer (nsembed.c:2065) ==7449== by 0x731CB68: HTMLDocument_Create (htmldoc.c:4751) ==7449== by 0x7388C60: ClassFactory_CreateInstance (main.c:238) ==7449== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==7449== by 0x6C94DB0: XMLView_create (xmlview.c:1444) ==7449== by 0x6C52320: ClassFactory_CreateInstance (factory.c:178) ==7449== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==7449== etc. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 36282] New: valgrind shows an unitialized write in ieframe/tests/ie.c
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=36282 Bug ID: 36282 Summary: valgrind shows an unitialized write in ieframe/tests/ie.c Product: Wine Version: 1.3.13 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: minor Priority: P2 Component: ieframe Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==16468== Thread 6: ==16468== Syscall param write(buf) points to uninitialised byte(s) ==16468== at 0x4EA8262B: ??? (in /usr/lib/libpthread-2.18.so) ==16468== by 0x7BC46BB8: NtWriteFile (file.c:1073) ==16468== by 0x7B83E0AA: WriteFile (file.c:563) ==16468== by 0x5A01BB8: rpcrt4_conn_np_write (rpc_transport.c:444) ==16468== by 0x59F6B27: rpcrt4_conn_write (rpc_binding.h:189) ==16468== by 0x59F8AA9: RPCRT4_SendWithAuth (rpc_message.c:849) ==16468== by 0x59F9BA0: RPCRT4_Send (rpc_message.c:1245) ==16468== by 0x59FCD02: process_request_packet (rpc_server.c:464) ==16468== by 0x59FCF82: RPCRT4_process_packet (rpc_server.c:519) ==16468== by 0x59FD115: RPCRT4_worker_thread (rpc_server.c:541) ==16468== by 0x7BC909EA: worker_thread_proc (threadpool.c:110) ==16468== by 0x7BC87087: ??? (signal_i386.c:2571) ==16468== by 0x7BC870D0: call_thread_func (signal_i386.c:2630) ==16468== by 0x7BC87065: ??? (signal_i386.c:2571) ==16468== by 0x7BC8E4B0: start_thread (thread.c:428) ==16468== by 0x4EA7BD89: start_thread (in /usr/lib/libpthread-2.18.so) ==16468== by 0x4E95CA0D: clone (in /usr/lib/libc-2.18.so) ==16468== Address 0x47f9cf4 is 44 bytes inside a recently re-allocated block of size 92 alloc'd ==16468== at 0x7BC4C735: notify_alloc (heap.c:255) ==16468== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==16468== by 0x59F88E9: RPCRT4_SendWithAuth (rpc_message.c:808) ==16468== by 0x59F9BA0: RPCRT4_Send (rpc_message.c:1245) ==16468== by 0x59FCD02: process_request_packet (rpc_server.c:464) ==16468== by 0x59FCF82: RPCRT4_process_packet (rpc_server.c:519) ==16468== by 0x59FD115: RPCRT4_worker_thread (rpc_server.c:541) ==16468== by 0x7BC909EA: worker_thread_proc (threadpool.c:110) ==16468== by 0x7BC87087: ??? (signal_i386.c:2571) ==16468== by 0x7BC870D0: call_thread_func (signal_i386.c:2630) ==16468== by 0x7BC87065: ??? (signal_i386.c:2571) ==16468== by 0x7BC8E4B0: start_thread (thread.c:428) ==16468== by 0x4EA7BD89: start_thread (in /usr/lib/libpthread-2.18.so) ==16468== by 0x4E95CA0D: clone (in /usr/lib/libc-2.18.so) ==16468== Uninitialised value was created by a client request ==16468== at 0x7BC4C52C: mark_block_uninitialized (heap.c:209) ==16468== by 0x7BC4C697: initialize_block (heap.c:240) ==16468== by 0x7BC50FA3: RtlAllocateHeap (heap.c:1717) ==16468== by 0x501E635: IMalloc_fnAlloc (ifs.c:186) ==16468== by 0x501EF50: CoTaskMemAlloc (objidl.h:1236) ==16468== by 0x505C935: RemUnknown_RemQueryInterface (stubmanager.c:690) ==16468== by 0x50661C6: IRemUnknown_RemQueryInterface_Stub (dcom_p.c:369) ==16468== by 0x59CA5BF: CStdStubBuffer_Invoke (cstub.c:477) ==16468== by 0x503D280: RPC_ExecuteCall (objidl.h:9086) ==16468== by 0x4FFC1ED: apartment_wndproc (compobj.c:1460) ==16468== by 0x548C509: ??? (winproc.c:173) ==16468== by 0x548C67E: call_window_proc (winproc.c:244) ==16468== by 0x548E817: WINPROC_call_window (winproc.c:900) ==16468== by 0x544FBE4: DispatchMessageW (message.c:4019) ==16468== by 0x4793F60: IEWinMain (iexplore.c:1061) ==16468== by 0x472CA34: wWinMain (main.c:84) ==16468== by 0x472CD21: wmain (exe_wmain.c:51) ==16468== by 0x472CBFC: __wine_spec_exe_wentry (exe_wentry.c:36) ==16468== by 0x7B864247: ??? (process.c:1045) ==16468== by 0x7B864394: start_process (process.c:1097) ==16468== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

3 5

[Bug 36183] New: valgrind shows a potential leaks in atl100/tests/atl.c
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=36183 Bug ID: 36183 Summary: valgrind shows a potential leaks in atl100/tests/atl.c Product: Wine Version: 1.3.13 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: atl Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==13578== 8 bytes in 1 blocks are possibly lost in loss record 37 of 602 ==13578== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==13578== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==13578== by 0x7B8457FF: HeapAlloc (heap.c:271) ==13578== by 0x7B845AD4: GlobalAlloc (heap.c:376) ==13578== by 0x4E29357: OLEClipbrd_Initialize (clipboard.c:1732) ==13578== by 0x4E626C6: OleInitialize (ole2.c:215) ==13578== by 0x4DE5CA0: AtlAxWinInit (atl_ax.c:108) ==13578== by 0x4C9708E: test_ax_win (atl.c:600) ==13578== by 0x4C97273: func_atl (atl.c:627) ==13578== by 0x4C98072: run_test (test.h:584) ==13578== by 0x4C98460: main (test.h:654) ==13578== ==13578== 32 bytes in 1 blocks are possibly lost in loss record 208 of 602 ==13578== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==13578== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==13578== by 0x7BC39A6B: RtlInitializeCriticalSectionEx (critsection.c:326) ==13578== by 0x7B876AE5: InitializeCriticalSectionEx (sync.c:356) ==13578== by 0x7B876A64: InitializeCriticalSection (sync.c:313) ==13578== by 0x4DE4213: AtlWinModuleInit (atl.c:436) ==13578== by 0x4C950D9: test_winmodule (atl.c:89) ==13578== by 0x4C9725A: func_atl (atl.c:622) ==13578== by 0x4C98072: run_test (test.h:584) ==13578== by 0x4C98460: main (test.h:654) ==13578== ==1611== 32 bytes in 1 blocks are possibly lost in loss record 217 of 629 ==1611== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==1611== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==1611== by 0x7BC39A6B: RtlInitializeCriticalSectionEx (critsection.c:326) ==1611== by 0x7B876AE5: InitializeCriticalSectionEx (sync.c:356) ==1611== by 0x7B876A64: InitializeCriticalSection (sync.c:313) ==1611== by 0x4E62252: test_winmodule (atl.c:101) ==1611== by 0x4E6425A: func_atl (atl.c:622) ==1611== by 0x4E65072: run_test (test.h:584) ==1611== by 0x4E65460: main (test.h:654) ==1611== ==1611== 32 bytes in 1 blocks are possibly lost in loss record 218 of 629 ==1611== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==1611== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==1611== by 0x5B300B4: alloc_bstr (oleaut.c:162) ==1611== by 0x5B3044A: SysAllocStringLen (oleaut.c:324) ==1611== by 0x5B535E8: TLB_MultiByteToBSTR (typelib.c:1753) ==1611== by 0x5B580A8: ITypeLib2_Constructor_MSFT (typelib.c:3706) ==1611== by 0x5B57398: TLB_ReadTypeLib (typelib.c:3460) ==1611== by 0x5B4F6BC: LoadTypeLibEx (typelib.c:478) ==1611== by 0x5B4F5F8: LoadTypeLib (typelib.c:454) ==1611== by 0x4E639C1: Dispatch_GetTypeInfo (atl.c:520) ==1611== by 0x4F853FA: AtlGetObjectSourceInterface (oaidl.h:811) ==1611== by 0x4E63D58: test_source_iface (atl.c:576) ==1611== by 0x4E6426E: func_atl (atl.c:626) ==1611== by 0x4E65072: run_test (test.h:584) ==1611== by 0x4E65460: main (test.h:654) ==1611== ==1659== 32 bytes in 1 blocks are possibly lost in loss record 218 of 630 ==1659== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==1659== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==1659== by 0x7BC39A6B: RtlInitializeCriticalSectionEx (critsection.c:326) ==1659== by 0x7B876AE5: InitializeCriticalSectionEx (sync.c:356) ==1659== by 0x7B876A64: InitializeCriticalSection (sync.c:313) ==1659== by 0x4E62252: test_winmodule (atl.c:101) ==1659== by 0x4E6425A: func_atl (atl.c:622) ==1659== by 0x4E65072: run_test (test.h:584) ==1659== by 0x4E65460: main (test.h:654) ==1659== ==1986== 80 bytes in 1 blocks are possibly lost in loss record 348 of 630 ==1986== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==1986== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==1986== by 0x5B040B4: alloc_bstr (oleaut.c:162) ==1986== by 0x5B045F5: SysAllocStringByteLen (oleaut.c:413) ==1986== by 0x5B29DA8: MSFT_ReadAllStrings (typelib.c:2879) ==1986== by 0x5B2B9F0: ITypeLib2_Constructor_MSFT (typelib.c:3581) ==1986== by 0x5B2B398: TLB_ReadTypeLib (typelib.c:3460) ==1986== by 0x5B236BC: LoadTypeLibEx (typelib.c:478) ==1986== by 0x5B235F8: LoadTypeLib (typelib.c:454) ==1986== by 0x4A349C1: Dispatch_GetTypeInfo (atl.c:520) ==1986== by 0x4F553FA: AtlGetObjectSourceInterface (oaidl.h:811) ==1986== by 0x4A34D58: test_source_iface (atl.c:576) ==1986== by 0x4A3526E: func_atl (atl.c:626) ==1986== by 0x4A36072: run_test (test.h:584) ==1986== by 0x4A36460: main (test.h:654) ==1986== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 38439] New: valgrind shows an uninitialized value atl100/tests/atl.c
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=38439 Bug ID: 38439 Summary: valgrind shows an uninitialized value atl100/tests/atl.c Product: Wine Version: 1.7.41 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: atl Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: --- ==5614== Conditional jump or move depends on uninitialised value(s) ==5614== at 0x98944C9: ??? ==5614== by 0x7465456: create_nscontainer (nsembed.c:2115) ==5614== by 0x73E29E8: HTMLDocument_Create (htmldoc.c:4857) ==5614== by 0x745127D: ClassFactory_CreateInstance (main.c:271) ==5614== by 0x48C046C: IClassFactory_CreateInstance (unknwn.h:226) ==5614== by 0x48C046C: CoCreateInstance (???:0) ==5614== by 0x5504C7C: create_mime_object (binding.c:260) ==5614== by 0x5504FAB: create_object (binding.c:310) ==5614== by 0x5507716: report_data (binding.c:1079) ==5614== by 0x55079F3: InternetProtocolSink_ReportData (binding.c:1128) ==5614== by 0x550C581: IInternetProtocolSink_ReportData (urlmon.h:3113) ==5614== by 0x550C581: ProtocolSinkHandler_ReportData (???:0) ==5614== by 0x550D12A: IInternetProtocolSink_ReportData (urlmon.h:3113) ==5614== by 0x550D12A: BPInternetProtocolSink_ReportData (???:0) ==5614== by 0x5510173: IInternetProtocolSink_ReportData (urlmon.h:3113) ==5614== by 0x5510173: FileProtocol_StartEx (???:0) ==5614== by 0x550B050: IInternetProtocolEx_StartEx (urlmon.h:7872) ==5614== by 0x550B050: BindProtocol_StartEx (???:0) ==5614== by 0x5508CD1: IInternetProtocolEx_StartEx (urlmon.h:7872) ==5614== by 0x5508CD1: start_binding (???:0) ==5614== by 0x5508F63: bind_to_object (binding.c:1598) ==5614== by 0x5525A69: URLMoniker_BindToObject (umon.c:260) ==5614== by 0x54922E5: IMoniker_BindToObject (objidl.h:3485) ==5614== by 0x54922E5: bind_to_object (???:0) ==5614== by 0x5492B7E: navigate_bsc (navigate.c:910) ==5614== by 0x5492C45: navigate_bsc_proc (navigate.c:940) ==5614== by 0x547D93F: process_dochost_tasks (dochost.c:63) ==5614== Uninitialised value was created by a stack allocation ==5614== at 0x9894439: ??? ==5614== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36904] New: valgrind shows a few unitialized variables in dlls/ieframe/tests/ie.c (js::frontend)
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=36904 Bug ID: 36904 Summary: valgrind shows a few unitialized variables in dlls/ieframe/tests/ie.c (js::frontend) Product: Wine Version: 1.7.22 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: ieframe Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Unfortunately, I don't know what files these are in, apparently a large one: ==1840== warning: ignoring line info entry with huge line number (16707566) ==1840== Can't handle line numbers greater than 1048575, sorry ==1840== (Nb: this message is only shown once) I checked the wine-mozilla source, but the largest file isn't even close: 140456 ./db/sqlite3/src/sqlite3.c 137413 ./security/nss/lib/sqlite/sqlite3.c presumably that line number count includes headers, etc. Anywho, the bugs: ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4C571: js::frontend::Parser<js::frontend::FullParseHandler>::newFunction (???:1207) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4C58A: js::frontend::Parser<js::frontend::FullParseHandler>::newFunction (???:1209) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4D5B2: js::frontend::FunctionBox::FunctionBox<js::frontend::FullParseHandler> (???:482) ==1840== by 0xA69C4AF: ??? ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4F2AD: js::frontend::Parser<js::frontend::FullParseHandler>::leaveFunction (???:1318) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4CF11: js::frontend::Parser<js::frontend::FullParseHandler>::memberExpr (???:6244) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E59FF0: js::frontend::Parser<js::frontend::FullParseHandler>::primaryExpr (???:6639) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E59B27: js::frontend::Parser<js::frontend::FullParseHandler>::primaryExpr (???:6439) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4D5B2: js::frontend::FunctionBox::FunctionBox<js::frontend::FullParseHandler> (???:482) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x6E585E0: js::frontend::Parser<js::frontend::FullParseHandler>::functionArgsAndBody (???:2041) ==1840== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 2

[Bug 36559] New: valgrind shows a definite leak in ieframe/tests/webbrowser.c (fd_sets_to_poll)
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=36559 Bug ID: 36559 Summary: valgrind shows a definite leak in ieframe/tests/webbrowser.c (fd_sets_to_poll) Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: ieframe Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==13698== 8 bytes in 1 blocks are definitely lost in loss record 428 of 11,275 ==13698== at 0x7BC4C75D: notify_alloc (heap.c:255) ==13698== by 0x7BC50FA1: RtlAllocateHeap (heap.c:1716) ==13698== by 0x7F61C60: fd_sets_to_poll (socket.c:4299) ==13698== by 0x7F6232A: WS_select (socket.c:4422) ==13698== by 0x7F0F0F0: ??? (in /home/austin/.wine/drive_c/windows/system32/gecko/2.24/wine_gecko/nspr4.dll) ==13698== by 0x7F062D2: ??? (in /home/austin/.wine/drive_c/windows/system32/gecko/2.24/wine_gecko/nspr4.dll) ==13698== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 36908] New: valgrind shows an unitialized variable in dlls/ieframe/tests/ie.c (nsWindowRoot::Release)
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=36908 Bug ID: 36908 Summary: valgrind shows an unitialized variable in dlls/ieframe/tests/ie.c (nsWindowRoot::Release) Product: Wine Version: 1.7.22 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: ieframe Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==24504== Conditional jump or move depends on uninitialised value(s) ==24504== at 0x10433214: nsWindowRoot::Release (in /home/austin/.wine/drive_c/windows/system32/gecko/2.24/wine_gecko/xul.dll) ==24504== Uninitialised value was created by a client request ==24504== at 0x7BC4C4D6: mark_block_uninitialized (heap.c:209) ==24504== by 0x7BC4C641: initialize_block (heap.c:240) ==24504== by 0x7BC50F4D: RtlAllocateHeap (heap.c:1717) ==24504== by 0x6F9176B: msvcrt_heap_alloc (heap.c:70) ==24504== by 0x6F92330: MSVCRT_malloc (heap.c:408) ==24504== by 0x80C71095: moz_xmalloc (mozalloc.cpp:54) ==24504== by 0x109B96F7: NS_InitXPCOM2 (nsxpcominit.cpp:464) ==24504== by 0x6D4F1B3: init_xpcom (nsembed.c:698) ==24504== by 0x6D4F626: load_gecko (nsembed.c:774) ==24504== by 0x6D54013: create_nscontainer (nsembed.c:2042) ==24504== by 0x6CD4477: HTMLDocument_Create (htmldoc.c:4756) ==24504== by 0x6D3E178: ClassFactory_CreateInstance (main.c:238) ==24504== by 0x4EE10A2: CoCreateInstance (unknwn.h:226) ==24504== by 0x4E042B2: create_mime_object (binding.c:258) ==24504== by 0x4E04652: create_object (binding.c:308) ==24504== by 0x4E071E8: report_data (binding.c:1077) ==24504== by 0x4E07531: InternetProtocolSink_ReportData (binding.c:1126) ==24504== by 0x4E0C8F0: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==24504== by 0x4E0D441: report_data_proc (urlmon.h:3113) ==24504== by 0x4E0910E: process_tasks (bindprot.c:57) ==24504== ==24504== Conditional jump or move depends on uninitialised value(s) ==24504== at 0x10433257: nsWindowRoot::Release (in /home/austin/.wine/drive_c/windows/system32/gecko/2.24/wine_gecko/xul.dll) ==24504== by 0x10418F9F: nsGlobalWindow::SetNewDocument (nsglobalwindow.cpp:2231) ==24504== by 0x1014C7FB: nsDocumentViewer::InitInternal (nsdocumentviewer.cpp:937) ==24504== by 0x1014D13C: nsDocumentViewer::Init (nsdocumentviewer.cpp:683) ==24504== by 0x109B3C6C: nsCOMPtr_base::assign_from_qi_with_error (nscomptr.cpp:65) ==24504== by 0x800EEB43: ??? ==24504== Uninitialised value was created by a client request ==24504== at 0x7BC4C4D6: mark_block_uninitialized (heap.c:209) ==24504== by 0x7BC4C641: initialize_block (heap.c:240) ==24504== by 0x7BC50F4D: RtlAllocateHeap (heap.c:1717) ==24504== by 0x6F9176B: msvcrt_heap_alloc (heap.c:70) ==24504== by 0x6F92330: MSVCRT_malloc (heap.c:408) ==24504== by 0x80C71095: moz_xmalloc (mozalloc.cpp:54) ==24504== by 0x109B96F7: NS_InitXPCOM2 (nsxpcominit.cpp:464) ==24504== by 0x6D4F1B3: init_xpcom (nsembed.c:698) ==24504== by 0x6D4F626: load_gecko (nsembed.c:774) ==24504== by 0x6D54013: create_nscontainer (nsembed.c:2042) ==24504== by 0x6CD4477: HTMLDocument_Create (htmldoc.c:4756) ==24504== by 0x6D3E178: ClassFactory_CreateInstance (main.c:238) ==24504== by 0x4EE10A2: CoCreateInstance (unknwn.h:226) ==24504== by 0x4E042B2: create_mime_object (binding.c:258) ==24504== by 0x4E04652: create_object (binding.c:308) ==24504== by 0x4E071E8: report_data (binding.c:1077) ==24504== by 0x4E07531: InternetProtocolSink_ReportData (binding.c:1126) ==24504== by 0x4E0C8F0: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==24504== by 0x4E0D441: report_data_proc (urlmon.h:3113) ==24504== by 0x4E0910E: process_tasks (bindprot.c:57) ==24504== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 2

[Bug 36398] New: valgrind shows an invalid read in comctl32/tests/toolbar.c
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=36398 Bug ID: 36398 Summary: valgrind shows an invalid read in comctl32/tests/toolbar.c Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: comctl32 Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==18993== Invalid read of size 2 ==18993== at 0x7BC55D60: RtlImageNtHeader (loader.c:2742) ==18993== by 0x7BC55EB9: RtlImageDirectoryEntryToData (loader.c:2916) ==18993== by 0x7BC6FBC4: find_entry (resource.c:189) ==18993== by 0x7BC70270: LdrFindResource_U (resource.c:303) ==18993== by 0x7B86DB6F: find_resourceW (resource.c:139) ==18993== by 0x7B86F7FD: FindResourceExW (resource.c:183) ==18993== by 0x7B86F8ED: FindResourceW (resource.c:192) ==18993== by 0x51A10FB: TOOLBAR_AddStringW (toolbar.c:2922) ==18993== by 0x51A8403: ToolbarWindowProc (toolbar.c:2993) ==18993== by 0x54CC579: ??? (in /home/austin/wine-valgrind-known/dlls/user32/user32.dll.so) ==18993== by 0x54CCCB5: call_window_proc (winproc.c:244) ==18993== by 0x54CE525: WINPROC_CallProcAtoW (winproc.c:504) ==18993== by 0x54CF3F2: WINPROC_call_window (winproc.c:911) ==18993== by 0x548DF3C: call_window_proc (message.c:2223) ==18993== by 0x5495685: send_message (message.c:3260) ==18993== by 0x5497BB0: SendMessageA (message.c:3476) ==18993== by 0x4FB7E62: test_add_string (toolbar.c:537) ==18993== by 0x4FBE480: func_toolbar (toolbar.c:1955) ==18993== by 0x4F4284B: main (test.h:584) ==18993== Address 0xdeadbeee is on thread 1's stack ==18993== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36219] New: valgrind shows some definite leaks in dlls/jscript/tests/run.c
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=36219 Bug ID: 36219 Summary: valgrind shows some definite leaks in dlls/jscript/tests/run.c Product: Wine Version: 1.7.17 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: jscript Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Created attachment 48354 --> https://bugs.winehq.org/attachment.cgi?id=48354 valgrind log Unfortunately, not getting very good stack traces, even with -O0 and an unstripped gecko build: ==27187== 32 bytes in 1 blocks are definitely lost in loss record 4,576 of 15,293 ==27187== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==27187== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==27187== by 0x69C350F: ??? ==27187== by 0x69C4488: ??? ==27187== by 0x69C7127: ??? ==27187== by 0x69C7912: ??? ==27187== by 0x69C5F2E: ??? ==27187== by 0x69C7D84: ??? ==27187== by 0x69C80C5: ??? ==27187== by 0x69C85F8: ??? ==27187== by 0x69E8695: ??? ==27187== by 0x4E5D234: parse_script (activscp.h:1290) ==27187== by 0x4E5F086: run_from_res (run.c:1814) ==27187== by 0x4E60FA5: run_tests (run.c:2162) ==27187== by 0x4E61EFD: func_run (run.c:2415) ==27187== by 0x4E62D5F: run_test (test.h:584) ==27187== by 0x4E6314E: main (test.h:654) ==27187== Also some possible leaks ==9457== 16 bytes in 1 blocks are possibly lost in loss record 1,052 of 15,293 ==9457== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==9457== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==9457== by 0x4FE80B4: alloc_bstr (oleaut.c:162) ==9457== by 0x4FE844A: SysAllocStringLen (oleaut.c:324) ==9457== by 0x4FE8161: SysAllocString (oleaut.c:232) ==9457== by 0x69C3E31: ??? ==9457== by 0x69C4139: ??? ==9457== by 0x69C6041: ??? ==9457== by 0x69C6088: ??? ==9457== by 0x69C7957: ??? ==9457== by 0x69C5F2E: ??? ==9457== by 0x69C7D84: ??? ==9457== by 0x69C80C5: ??? ==9457== by 0x69C85F8: ??? ==9457== by 0x69E8695: ??? ==9457== by 0x4E5D234: parse_script (activscp.h:1290) ==9457== by 0x4E5EAA4: parse_script_af (run.c:1692) ==9457== by 0x4E5EB0C: parse_script_a (run.c:1699) ==9457== by 0x4E607D3: run_tests (run.c:2070) ==9457== by 0x4E61EFD: func_run (run.c:2415) -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 26108] New: ole32/defaulthandlers tests shows a valgrind warning
by wine-bugs＠winehq.org Aug. 27, 2026

Aug. 27, 2026

http://bugs.winehq.org/show_bug.cgi?id=26108 Summary: ole32/defaulthandlers tests shows a valgrind warning Product: Wine Version: 1.3.13 Platform: x86 OS/Version: Linux Status: NEW Keywords: download, source, testcase Severity: minor Priority: P2 Component: ole32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: austinenglish(a)gmail.com Conditional jump or move depends on uninitialised value(s) at StorageImpl_CreateDirEntry (storage32.c:1251) by StorageBaseImpl_CreateDirEntry (storage32.h:272) by StorageBaseImpl_CreateStream (storage32.c:985) by init_ole_stream (defaulthandler.c:1619) by DefaultHandler_IPersistStorage_InitNew (defaulthandler.c:1685) by test_olestream (defaulthandler.c:81) by func_defaulthandler (defaulthandler.c:107) by run_test (test.h:556) by main (test.h:624) Uninitialised value was created by a client request at mark_block_uninitialized (heap.c:208) by initialize_block (heap.c:239) by RtlReAllocateHeap (heap.c:1897) by HeapReAlloc (heap.c:277) by GlobalReAlloc (heap.c:676) by HGLOBALLockBytesImpl_SetSize (memlockbytes.c:518) by StorageImpl_Construct (storage32.c:2740) by Storage_Construct (storage32.c:5131) by StgCreateDocfileOnILockBytes (storage32.c:7709) by create_storage (defaulthandler.c:41) by test_olestream (defaulthandler.c:69) by func_defaulthandler (defaulthandler.c:107) by run_test (test.h:556) by main (test.h:624) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

3 8