July 2018 - Wine-Bugs - list.winehq.org

[Bug 45104] New: OOB read in gdiplus
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=45104 Bug ID: 45104 Summary: OOB read in gdiplus Product: Wine Version: 3.7 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: gdiplus Assignee: wine-bugs(a)winehq.org Reporter: robert.gawlik(a)rub.de Distribution: --- Original submitted report can be found here: https://bugs.launchpad.net/ubuntu/+source/wine/+bug/1764719 (*) Out-of-bounds read in dlls/gdiplus/metafile.c:2528 (last commit: dd2624a24fba400bf59b9396e496d16c43d399d9): The parameters data, dataSize and recordType are completely user controlled and flow into a memcpy() call in line 2528. If the length of data is less than dataSize, then this results in an out-of-bounds read. 2461 GpStatus WINGDIPAPI GdipPlayMetafileRecord(GDIPCONST GpMetafile *metafile, 2462 EmfPlusRecordType recordType, UINT flags, UINT dataSize, GDIPCONST BYTE *data) 2463 { .... 2471 2472 if (recordType >= 1 && recordType <= 0x7a) 2473 { 2474 /* regular EMF record */ 2475 if (metafile->playback_dc) 2476 { 2477 switch (recordType) 2478 { .... 2520 default: 2521 { 2522 ENHMETARECORD *record = heap_alloc_zero(dataSize + 8); // <== dataSize is completely user controlled 2523 2524 if (record) 2525 { 2526 record->iType = recordType; 2527 record->nSize = dataSize + 8; 2528 memcpy(record->dParm, data, dataSize); // <== data is user controlled, memcpy performs OOB read 2529 2530 if(PlayEnhMetaFileRecord(metafile->playback_dc, metafile->handle_table, 2531 record, metafile->handle_count) == 0) // (record is user controlled => source of many vulnerabilities) 2532 ERR("PlayEnhMetaFileRecord failed\n"); If you need more information (EMF trigger file, etc.) let me know! -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 44155] New: Build packages for Fedora 27 and discontinue building for Fedora 24
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=44155 Bug ID: 44155 Summary: Build packages for Fedora 27 and discontinue building for Fedora 24 Product: Packaging Version: unspecified Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wine-packages Assignee: wine-bugs(a)winehq.org Reporter: dimesio(a)earthlink.net CC: michael(a)fds-team.de, sebastian(a)fds-team.de Distribution: --- Fedora 27 was released on November 14, 2017. Fedora 24 went EOL on August 8, 2017. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 6

[Bug 43383] New: valgrind shows several definite leak in dlls/qcap/tests/ smartteefilter.c
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=43383 Bug ID: 43383 Summary: valgrind shows several definite leak in dlls/qcap/tests/smartteefilter.c Product: Wine Version: 2.12 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: qcap Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: Gentoo ==31520== 72 bytes in 1 blocks are definitely lost in loss record 321 of 616 ==31520== at 0x7BC51061: notify_alloc (heap.c:254) ==31520== by 0x7BC5554F: RtlAllocateHeap (heap.c:1716) ==31520== by 0x4F1442B: IMalloc_fnAlloc (ifs.c:187) ==31520== by 0x4F14CCB: IMalloc_Alloc (objidl.h:1405) ==31520== by 0x4F14CCB: CoTaskMemAlloc (???:0) ==31520== by 0x606C8DA: ??? ==31520== by 0x4A21688: IMediaSample_SetMediaType (strmif.h:2289) ==31520== by 0x4A21688: media_thread (???:0) ==31520== by 0x7BC913B3: ??? (signal_i386.c:2700) ==31520== by 0x7BC9143B: call_thread_func (signal_i386.c:2759) ==31520== by 0x7BC91391: ??? (signal_i386.c:2700) ==31520== by 0x7BC9B3EE: start_thread (thread.c:487) ==31520== by 0x4244249: start_thread (pthread_create.c:333) ==31520== by 0x433FD6D: clone (clone.S:114) ==31520== ==31520== 72 bytes in 1 blocks are definitely lost in loss record 322 of 616 ==31520== at 0x7BC51061: notify_alloc (heap.c:254) ==31520== by 0x7BC5554F: RtlAllocateHeap (heap.c:1716) ==31520== by 0x4F1442B: IMalloc_fnAlloc (ifs.c:187) ==31520== by 0x4F14CCB: IMalloc_Alloc (objidl.h:1405) ==31520== by 0x4F14CCB: CoTaskMemAlloc (???:0) ==31520== by 0x606C8DA: ??? ==31520== by 0x5FF3D18: ??? ==31520== by 0x5FF3F76: ??? ==31520== by 0x60006CA: ??? ==31520== by 0x4A21771: IMemInputPin_Receive (strmif.h:3041) ==31520== by 0x4A21771: media_thread (???:0) ==31520== by 0x7BC913B3: ??? (signal_i386.c:2700) ==31520== by 0x7BC9143B: call_thread_func (signal_i386.c:2759) ==31520== by 0x7BC91391: ??? (signal_i386.c:2700) ==31520== by 0x7BC9B3EE: start_thread (thread.c:487) ==31520== by 0x4244249: start_thread (pthread_create.c:333) ==31520== by 0x433FD6D: clone (clone.S:114) ==31520== ==31520== 72 bytes in 1 blocks are definitely lost in loss record 324 of 616 ==31520== at 0x7BC51061: notify_alloc (heap.c:254) ==31520== by 0x7BC5554F: RtlAllocateHeap (heap.c:1716) ==31520== by 0x4F1442B: IMalloc_fnAlloc (ifs.c:187) ==31520== by 0x4F14CCB: IMalloc_Alloc (objidl.h:1405) ==31520== by 0x4F14CCB: CoTaskMemAlloc (???:0) ==31520== by 0x606C8DA: ??? ==31520== by 0x5FF3D18: ??? ==31520== by 0x5FF4014: ??? ==31520== by 0x60006CA: ??? ==31520== by 0x4A21771: IMemInputPin_Receive (strmif.h:3041) ==31520== by 0x4A21771: media_thread (???:0) ==31520== by 0x7BC913B3: ??? (signal_i386.c:2700) ==31520== by 0x7BC9143B: call_thread_func (signal_i386.c:2759) ==31520== by 0x7BC91391: ??? (signal_i386.c:2700) ==31520== by 0x7BC9B3EE: start_thread (thread.c:487) ==31520== by 0x4244249: start_thread (pthread_create.c:333) ==31520== by 0x433FD6D: clone (clone.S:114) ==31520== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 1

[Bug 44406] New: Wine-staging packages haven' t been built since the end of November, 2017
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=44406 Bug ID: 44406 Summary: Wine-staging packages haven't been built since the end of November, 2017 Product: Packaging Version: unspecified Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wine-packages Assignee: wine-bugs(a)winehq.org Reporter: dimesio(a)earthlink.net CC: michael(a)fds-team.de, sebastian(a)fds-team.de Distribution: --- There have been no new wine-staging packages since 2.21, two months ago. Multiple users are asking about it on the forum, especially now that 3.0 is out. If the branch is being abandoned, we need to inform users of that. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 37

[Bug 45141] New: Provide packages for Fedora 28
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=45141 Bug ID: 45141 Summary: Provide packages for Fedora 28 Product: Packaging Version: unspecified Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wine-packages Assignee: wine-bugs(a)winehq.org Reporter: dimesio(a)earthlink.net CC: michael(a)fds-team.de, sebastian(a)fds-team.de Distribution: --- Fedora 28 was released on May 1. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 45085] New: Provide packages for Ubuntu 18.04 Bionic Beaver
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=45085 Bug ID: 45085 Summary: Provide packages for Ubuntu 18.04 Bionic Beaver Product: Packaging Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: wine-packages Assignee: wine-bugs(a)winehq.org Reporter: asdfghrbljzmkd(a)outlook.com CC: michael(a)fds-team.de, sebastian(a)fds-team.de Distribution: --- The archive currently doesn't provide packages for Ubuntu 18.04, packages would be appreciated. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 31

[Bug 40346] New: Unable to install winehq-devel on debian jessie (tries to download 1.9.5 when 1.9.6 is the only version on the server)
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=40346 Bug ID: 40346 Summary: Unable to install winehq-devel on debian jessie (tries to download 1.9.5 when 1.9.6 is the only version on the server) Product: Packaging Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-packages Assignee: wine-bugs(a)winehq.org Reporter: Bob-winehq(a)HamsterRepublic.com CC: michael(a)fds-team.de, sebastian(a)fds-team.de Distribution: --- Hello! I am trying to install winehq-devel on Debian Jessie using the instructions provided at https://wiki.winehq.org/Debian When I get to the step where I: apt-get install winehq-devel It fails with the following 404 error messages: E: Failed to fetch https://dl.winehq.org/wine-builds/debian/pool/main/w/wine-devel/wine-devel-… HttpError404 E: Failed to fetch https://dl.winehq.org/wine-builds/debian/pool/main/w/wine-devel/wine-devel-… HttpError404 E: Failed to fetch https://dl.winehq.org/wine-builds/debian/pool/main/w/wine-devel/wine-devel_… HttpError404 E: Failed to fetch https://dl.winehq.org/wine-builds/debian/pool/main/w/wine-devel/winehq-deve… HttpError404 E: Unable to fetch some archives, maybe run apt-get update or try with --fix-missing? I checked the download server, and I can see that the files for version 1.9.5 indeed do not exist there, but the files for 1.9.6 DO exist. I went poking around a bit, and I discovered that in https://dl.winehq.org/wine-builds/debian/dists/jessie/main/binary-amd64/ the Release file references 1.9.6, but the Release.gz references 1.9.5 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 24

[Bug 45247] New: Fedora Packaging: Incorrect URL in gpgkey field in winehq.repo
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=45247 Bug ID: 45247 Summary: Fedora Packaging: Incorrect URL in gpgkey field in winehq.repo Product: Packaging Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-packages Assignee: wine-bugs(a)winehq.org Reporter: m.v.b(a)runbox.com CC: michael(a)fds-team.de, sebastian(a)fds-team.de Distribution: --- This bug applies to all winehq.repo files hosted by WineHQ for Fedora packaging. As an example, please take a look at the following winehq.repo file for Fedora 26: https://dl.winehq.org/wine-builds/fedora/26/winehq.repo Here are its contents: [WineHQ] name=WineHQ packages (Fedora 26) type=rpm-md baseurl=https://dl.winehq.org/wine-builds/fedora/26 gpgcheck=1 gpgkey=https://repos.wine-staging.com/wine/Release.key enabled=1 As you will notice, the gpgkey= field points to the following URL: https://repos.wine-staging.com/wine/Release.key This prevents the installation of packages, as this URL redirects to the WineHQ Bugzilla. The correct URL appears to be: https://dl.winehq.org/wine-builds/Release.key I verified that using this URL works. Would it be possible to update the winehq.repo files for the Fedora package releases so that they point to the correct URL in the gpgkey field? Thank you. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 43820] New: Provide packages for Ubuntu Artful 17.10
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=43820 Bug ID: 43820 Summary: Provide packages for Ubuntu Artful 17.10 Product: Packaging Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-packages Assignee: wine-bugs(a)winehq.org Reporter: derekbga(a)gmail.com CC: michael(a)fds-team.de, sebastian(a)fds-team.de Distribution: --- Ubuntu 17.10 Artful Aardvark is currently in its final beta phase, before its release on 2017-10-19. It would be helpful to provide packages for this version, especially before the release date. At https://dl.winehq.org/wine-builds/ubuntu/dists/ I don't see a folder for artful. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 43833] New: FATAL ERROR: wglCreateContextAttribsARB failed in Wolfenstein: The New Order
by wine-bugs＠winehq.org July 3, 2018

July 3, 2018

https://bugs.winehq.org/show_bug.cgi?id=43833 Bug ID: 43833 Summary: FATAL ERROR: wglCreateContextAttribsARB failed in Wolfenstein: The New Order Product: Wine Version: 2.17 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: katoflip(a)protonmail.com Distribution: --- Whenver I try to start up Wolfenstein: TNO I get this message. https://ghostbin.com/paste/eyrvx Let me know what other information I can provide. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5