February 2019 - Wine-Bugs - list.winehq.org

[Bug 37585] New: 64-bit Google Chrome 38.x crashes (core dlls must be prelinked at fixed addresses)
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

https://bugs.winehq.org/show_bug.cgi?id=37585 Bug ID: 37585 Summary: 64-bit Google Chrome 38.x crashes (core dlls must be prelinked at fixed addresses) Product: Wine Version: 1.7.31 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as 64-bit Google Chrome has finally been released I thought to give it a try. Only useful for improving Wine 64-bit compatibility, not really meant to be used seriously since native port exists. --- snip --- $ pwd /home/focht/wineprefix64/drive_c/Program Files (x86)/Google/Chrome/Application $ file chrome.exe chrome.exe: PE32+ executable (GUI) x86-64, for MS Windows $ WINEDEBUG=+tid,+seh,+relay,+server,+virtual,+module wine64 ./chrome.exe >>log.txt 2>&1 ... 003f:Call advapi32.CreateProcessAsUserW(000002f8,05fad480 L"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe",0011f680 L"\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --enable-deferred-image-decoding --lang=en-US --force-fieldtrials=Prerender/PrerenderEnabled/UMA-New-Install-Uniformity-Trial/Control/UMA-Session-Randomized-Uniformity-Trial-5-Percent/default/UMA-Uniformity-Trial-1-P"...,00000000,00000000,00000000,383330300100040c,00000000,00000000,05bbc4d0,05bbbe98) ret=14003e6bb ... 003f: new_process() = 0 { info=0308, pid=0051, phandle=030c, tid=0052, thandle=0310 } 003f: select( flags=2, cookie=05bbadb4, timeout=infinite, prev_apc=0000, result={}, data={WAIT,handles={0308}} ) 003f: select() = PENDING { timeout=infinite, call={APC_NONE}, apc_handle=0000 } 003f: *wakeup* signaled=0 003f: get_new_process_info( info=0308 ) 003f: get_new_process_info() = 0 { success=1, exit_code=259 } 003f: close_handle( handle=0308 ) 003f: close_handle() = 0 003f: close_handle( handle=0304 ) 003f: close_handle() = 0 003f:Ret advapi32.CreateProcessAsUserW() retval=00000001 ret=14003e6bb ... 003f:Call KERNEL32.VirtualAllocEx(0000030c,00000000,0000006c,00001000,00000004) ret=1400443eb 003f:trace:virtual:NtAllocateVirtualMemory 0x30c (nil) 0000006c 1000 00000004 003f: queue_apc( handle=030c, call={APC_VIRTUAL_ALLOC,addr==00000000,size=0000006c,zero_bits=0,op_type=1000,prot=4} ) 003f: queue_apc() = 0 { handle=0304, self=0 } 003f: select( flags=2, cookie=05bbbc14, timeout=infinite, prev_apc=0000, result={}, data={WAIT_ALL,handles={0304}} ) 003f: select() = PENDING { timeout=infinite, call={APC_NONE}, apc_handle=0000 } 003f: *wakeup* signaled=0 003f: get_apc_result( handle=0304 ) 003f: get_apc_result() = 0 { result={APC_VIRTUAL_ALLOC,status=0,addr=00240000,size=00001000} } 003f:Ret KERNEL32.VirtualAllocEx() retval=00240000 ret=1400443eb 003f:Call KERNEL32.WriteProcessMemory(0000030c,00240000,00113070,0000006c,05bbc350) ret=14004440f 003f: write_process_memory( handle=030c, addr=00240000, data={01,00,00,00,00,00,00,00,00,00,00,00,60,00,00,00,00,00,00,00,30,00,00,00,00,00,00,00,01,00,00,00,00,33,6b,00,65,00,72,00,6e,00,65,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,00,00,30,00,00,00,00,00,00,00,02,00,00,00,0e,00,00,00,78,e0,04,40,01,00,00,00,43,72,65,61,74,65,4e,61,6d,65,64,50,69,70,65,57,00,00,00,00,01,00,11,00} ) 003f: write_process_memory() = 0 003f:Ret KERNEL32.WriteProcessMemory() retval=00000001 ret=14004440f .... 003f:Call KERNEL32.VirtualAllocEx(0000030c,0025c000,00001000,00001000,100000040) ret=140044b18 003f:trace:virtual:NtAllocateVirtualMemory 0x30c 0x25c000 00001000 1000 00000040 003f: queue_apc( handle=030c, call={APC_VIRTUAL_ALLOC,addr==0025c000,size=00001000,zero_bits=0,op_type=1000,prot=40} ) 003f: queue_apc() = 0 { handle=0304, self=0 } 003f: select( flags=2, cookie=05bbbb94, timeout=infinite, prev_apc=0000, result={}, data={WAIT_ALL,handles={0304}} ) 003f: select() = PENDING { timeout=infinite, call={APC_NONE}, apc_handle=0000 } 003f: *wakeup* signaled=0 003f: get_apc_result( handle=0304 ) 003f: get_apc_result() = 0 { result={APC_VIRTUAL_ALLOC,status=0,addr=0025c000,size=00001000} } 003f:Ret KERNEL32.VirtualAllocEx() retval=0025c000 ret=140044b18 003f:Call KERNEL32.GetModuleHandleW(14007d2b0 L"ntdll.dll") ret=1400447aa 003f:trace:module:LdrGetDllHandle L"ntdll.dll" -> 0x7fa7c6270000 (load path L"C:\\Program Files (x86)\\Google\\Chrome\\Application;.;C:\\windows\\system32;C:\\windows\\system;C:\\windows;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem") 003f:Ret KERNEL32.GetModuleHandleW() retval=7fa7c6270000 ret=1400447aa 003f:Call KERNEL32.GetModuleHandleExW(00000006,7fa7c6273fe0,05bbc0e0) ret=1400447f5 003f:Ret KERNEL32.GetModuleHandleExW() retval=00000001 ret=1400447f5 ... 003f:Call KERNEL32.ReadProcessMemory(0000030c,7fa7c627462c,05bbc010,00000020,05bbc040) ret=14004e728 003f: read_process_memory( handle=030c, addr=7fa7c627462c ) 003f: read_process_memory() = ACCESS_VIOLATION { data={} } 003f:Ret KERNEL32.ReadProcessMemory() retval=00000000 ret=14004e728 ... 003f:Call KERNEL32.GetLastError() ret=14003bb29 003f:Ret KERNEL32.GetLastError() retval=000003e6 ret=14003bb29 003f:Call KERNEL32.TerminateProcess(0000030c,00000000) ret=14003eafd 003f: terminate_process( handle=030c, exit_code=0 ) 003f: terminate_process() = 0 { self=0 } 003f:Ret KERNEL32.TerminateProcess() retval=00000001 ret=14003eafd 003f:Call KERNEL32.WaitForSingleObject(0000030c,00000032) ret=14003e406 003f: select( flags=2, cookie=05bbbdc4, timeout=+0.0500000, prev_apc=0000, result={}, data={WAIT,handles={030c}} ) 003f: select() = 0 { timeout=1d0037eb30ca43e (+0.0500000), call={APC_NONE}, apc_handle=0000 } 003f:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=14003e406 003f:Call KERNEL32.GetExitCodeProcess(0000030c,05bbc3d0) ret=14003e414 003f: get_process_info( handle=030c ) 003f: get_process_info() = 0 { pid=0051, ppid=0008, affinity=0000000f, peb=7fffff7ef000, start_time=1d0037eb2fe710c (-0.0431540), end_time=1d0037eb304b832 (-0.0020110), exit_code=0, priority=2, cpu=x86_64, debugger_present=0 } 003f:Ret KERNEL32.GetExitCodeProcess() retval=00000001 ret=14003e414 ... 003f:trace:seh:raise_exception code=80000003 flags=0 addr=0x14001d86d ip=14001d86d tid=003f 003f:trace:seh:raise_exception rax=0000000000000000 rbx=00000001400a3f88 rcx=0000000005bbeb1f rdx=0000000005bbeae0 003f:trace:seh:raise_exception rsi=0000000000110980 rdi=000000000000dead rbp=0000000005bbc500 rsp=0000000005bbc3d0 003f:trace:seh:raise_exception r8=0000003071e48cfd r9=000000000000001e r10=0000000000000000 r11=0000003071f811c0 003f:trace:seh:raise_exception r12=0000000000101160 r13=0000000000101140 r14=0000000000075680 r15=000000000000dead --- snip --- Child process address space for 64-bit 'ntdll.dll': --- snip --- 0054:trace:module:load_dll looking for L"ntdll.dll" in L"C:\\Program Files (x86)\\Google\\Chrome\\Application;.;C:\\windows\\system32;C:\\windows\\system;C:\\windows;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem" 0054:trace:module:load_dll Found L"C:\\windows\\system32\\ntdll.dll" for L"ntdll.dll" at 0x7f3184050000, count=3 0054:trace:virtual:NtProtectVirtualMemory 0xffffffffffffffff 0x7f317d8f9bc0 000002d0 00000004 0054:trace:virtual:VIRTUAL_SetProt 0x7f317d8f9000-0x7f317d8f9fff c-rW- 0054:trace:virtual:VIRTUAL_DumpView View: 0x7f317d680000 - 0x7f317d8fbfff (system) 0054:trace:virtual:VIRTUAL_DumpView 0x7f317d680000 - 0x7f317d680fff c-r-- 0054:trace:virtual:VIRTUAL_DumpView 0x7f317d681000 - 0x7f317d8f4fff c-r-x 0054:trace:virtual:VIRTUAL_DumpView 0x7f317d8f5000 - 0x7f317d8f8fff c-rw- 0054:trace:virtual:VIRTUAL_DumpView 0x7f317d8f9000 - 0x7f317d8f9fff c-rW- 0054:trace:virtual:VIRTUAL_DumpView 0x7f317d8fa000 - 0x7f317d8fbfff c-rw- --- snip --- App sandboxing scheme at work, setting up intermediate trampoline code in the child and then patch out the API entries. Unfortunately the code relies on 64-bit Windows core dlls being mapped at the same (fixed) locations across processes hence it fails here, triggering abort in the parent. Probably same rationale applies here as for 32-bit Windows core dlls. $ sha1sum googlechromestandaloneenterprise64.msi 586f91c05925e22fd5f891aa3e99e1cb9762950a googlechromestandaloneenterprise64.msi $ du -sh googlechromestandaloneenterprise64.msi 47M googlechromestandaloneenterprise64.msi $ wine --version wine-1.7.31-47-g516ed8e Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 21

[Bug 46571] New: FPS Monitor doesn't work
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

https://bugs.winehq.org/show_bug.cgi?id=46571 Bug ID: 46571 Summary: FPS Monitor doesn't work Product: Wine Version: 4.0-rc7 Hardware: x86-64 URL: https://fpsmon.com/en/? OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: luca.finizio.mgbx(a)hotmail.it Distribution: Mint Created attachment 63444 --> https://bugs.winehq.org/attachment.cgi?id=63444 error screenshot I downloaded FPS Monitor, I can install it but it doesn't run. When I run it I get the error:"The procedure entry point D3DKMTCloseAdapter could not be located in the dynamic link library GDI32.dll". Instead, I get nothing in the console output by running the program with "wine FPSMonitor.exe", as you can see in the screenshot that I attached. To reproduce the error: 1) Download FPS Monitor here https://fpsmon.com/en/? 2) Install it 3) Try to run it (with "wine FPSMonitor.exe") 4) Program doesn't start and you get the error -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 37325] New: Rhapsody installs and streams however auto setup for DRM fails
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

https://bugs.winehq.org/show_bug.cgi?id=37325 Bug ID: 37325 Summary: Rhapsody installs and streams however auto setup for DRM fails Product: Wine Version: unspecified Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: kablake(a)live.com Created attachment 49635 --> https://bugs.winehq.org/attachment.cgi?id=49635 backtrace provided when DRM setup fails I installed Rhapsody 4.0 successfully and it streams well so far ... but then I try to authorize the computer so I can download and play tracks locally and the setup for DRM fails. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 11

[Bug 42982] New: Bayonetta can`t save settings
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

https://bugs.winehq.org/show_bug.cgi?id=42982 Bug ID: 42982 Summary: Bayonetta can`t save settings Product: Wine Version: 2.7 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: zentarim(a)rambler.ru Distribution: Ubuntu Created attachment 58119 --> https://bugs.winehq.org/attachment.cgi?id=58119 file trace Bayonetta can`t save settings. Game try to write settings to file ~/documents/Bayonetta/system_data, but fails and freezes. If this "garbage" file is exists - game does not start. file have size ~ 1.7Kb. Log (trace+file) in attachement. Suspicious lines 135820 - 135825: trace:file:ReadFile 0xb0 0x33f3d0 857 0x33f7d4 (nil) trace:file:CreateFileW L"C:\\users\\zentarim\\\041c\043e\0438 \0434\043e\043a\0443\043c\0435\043d\0442\044b/Bayonetta/system_data" GENERIC_READ creation 3 attributes 0x40000080 trace:file:RtlDosPathNameToNtPathName_U (L"C:\\users\\zentarim\\\041c\043e\0438 \0434\043e\043a\0443\043c\0435\043d\0442\044b/Bayonetta/system_data",0x33faa8,(nil),(nil)) trace:file:RtlGetFullPathName_U (L"C:\\users\\zentarim\\\041c\043e\0438 \0434\043e\043a\0443\043c\0435\043d\0442\044b/Bayonetta/system_data" 520 0x33f7e8 (nil)) trace:file:wine_nt_to_unix_file_name L"\\users\\zentarim\\\041c\043e\0438 \0434\043e\043a\0443\043c\0435\043d\0442\044b\\Bayonetta\\system_data" not found in /home/zentarim/.PlayOnLinux//wineprefix/Bayonetta/dosdevices/c:/users/zentarim/Мои документы/Bayonetta trace:file:CreateFileW returning 0xffffffff $ ls -lah '/home/zentarim/.PlayOnLinux//wineprefix/Bayonetta/dosdevices/c:/users/zentarim/Мои документы/Bayonetta/system_data' -rw-rw-r-- 1 zentarim zentarim 1,7K мая 9 20:42 /home/zentarim/.PlayOnLinux//wineprefix/Bayonetta/dosdevices/c:/users/zentarim/Мои документы/Bayonetta/system_data -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 31

[Bug 46680] New: redefinition of type def ‘fnprintf’
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

https://bugs.winehq.org/show_bug.cgi?id=46680 Bug ID: 46680 Summary: redefinition of typedef ‘fnprintf’ Product: Wine Version: 4.1 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: rpc Assignee: wine-bugs(a)winehq.org Reporter: version2013(a)protonmail.com Distribution: --- Created attachment 63642 --> https://bugs.winehq.org/attachment.cgi?id=63642 error_log1 in distro: puppy431 # gcc --version gcc (GCC) 4.2.2 # uname -r 2.6.30.5 # ldd --version ldd (GNU libc) 2.6.1 compiling wine-4.1 and wine-4.2 fails. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 16

[Bug 28240] New: Mipony: Embedded web browser too shown in too small window
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

http://bugs.winehq.org/show_bug.cgi?id=28240 Summary: Mipony: Embedded web browser too shown in too small window Product: Wine Version: 1.3.27 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: lukasz.wojnilowicz(a)gmail.com Created an attachment (id=36180) --> (http://bugs.winehq.org/attachment.cgi?id=36180) Image displaying the problem Steps to reproduce: 1) remove ~/.wine 2) winetricks dotnet20 3) install Mipony 4) (optionaly) override gdiplus.dll 5) wine MiPony.exe Behaviour: See attachment. Expected behaviour: Embedded web browser should be displayed at full available window space. Additional info: winetricks ie7 doesn't help -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

1 6

[Bug 46731] New: 64-bit dotnet20 installer freezes in 4.2
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

https://bugs.winehq.org/show_bug.cgi?id=46731 Bug ID: 46731 Summary: 64-bit dotnet20 installer freezes in 4.2 Product: Wine Version: 4.2 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: sashok.olen(a)gmail.com Distribution: --- Created attachment 63712 --> https://bugs.winehq.org/attachment.cgi?id=63712 log Can't reproduce in 4.1 or 4.0. Attached log. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 35841] New: R.U.S.E. Demo need wmvcore.dll.WMCreateSyncReader implementation
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

http://bugs.winehq.org/show_bug.cgi?id=35841 Bug ID: 35841 Summary: R.U.S.E. Demo need wmvcore.dll.WMCreateSyncReader implementation Product: Wine Version: 1.7.15 Hardware: x86 URL: http://store.steampowered.com/app/21970 OS: Linux Status: UNCONFIRMED Severity: minor Priority: P2 Component: wmp&wmvcore Assignee: wine-bugs(a)winehq.org Reporter: andrey.goosev(a)gmail.com For background movies in the main menu and intro. fixme:wmvcore:WMCreateSyncReader ((nil), 0, 0xa54d1f0): stub Works with wmp9. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 46305] New: Fallout: New Vegas crashes upon launch
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

https://bugs.winehq.org/show_bug.cgi?id=46305 Bug ID: 46305 Summary: Fallout: New Vegas crashes upon launch Product: Wine Version: 4.0-rc2 Hardware: x86-64 OS: Mac OS X Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: ahyattdev(a)icloud.com Created attachment 63030 --> https://bugs.winehq.org/attachment.cgi?id=63030 backtrace Fallout: New Vegas crashes immediately upon launch in gameoverlayrenderer, which is related to the Steam overlay. It crashes even when the steam overlay is disabled in Steam. This is not a duplicate of 38381 because it crashes at a different place (and earlier) and also not a duplicate of 43637 because the 64-bit game patch does not fix this issue. Attached is the backtrace. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 13

[Bug 35986] New: Multiple DRM-enabled apps and games crash when being relay traced (game overlay renderer enabled Stream games)
by wine-bugs＠winehq.org March 15, 2019

March 15, 2019

https://bugs.winehq.org/show_bug.cgi?id=35986 Bug ID: 35986 Summary: Multiple DRM-enabled apps and games crash when being relay traced (game overlay renderer enabled Stream games) Product: Wine Version: 1.7.16 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: tools Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, this is more an experts request but it should also help getting better diagnosis (logs) from users. There are apps and games that crash when being relay traced because they employ intrusive API hooking schemes that can't cope with Wine's relay thunks. Example of a Steam game crashing with game overlay renderer enabled when relay trace is turned on: --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Steam $ WINEDEBUG=+tid,+seh,+relay wine ./steam.exe -no-dwrite -applaunch 238430 -windowed >>log.txt 2>&1 ... Unhandled exception: page fault on read access to 0x0a55527c in 32-bit code (0xf6ea4243). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:f6ea4243 ESP:0033e438 EBP:0a548150 EFLAGS:00010246( R- -- I Z- -P- ) EAX:0a555278 EBX:00000000 ECX:0a548150 EDX:00020234 ESI:0a548150 EDI:0033e6d8 ... Backtrace: =>0 0xf6ea4243 in winmm (+0x4243) (0x0a548150) 1 0x0a532919 in inputsystem (+0x2918) (0x0a548150) 2 0x00000001 (0x0a5422ac) 3 0x0a531990 in inputsystem (+0x198f) (0x0a531760) 4 0xf18b5608 (0x24448b51) 0xf6ea4243: call *0x4(%eax) Modules: Module Address Debug info Name (132 modules) PE 380000- 3b0000 Deferred launcher PE 400000- 46f000 Deferred contagion PE 1a80000- 1ae7000 Deferred tier0 PE 1af0000- 1b52000 Deferred vstdlib PE 9590000- 95e6000 Deferred filesystem_stdio PE 99f0000- a0cc000 Deferred engine PE a530000- a551000 Export inputsystem PE a560000- a68d000 Deferred materialsystem PE b690000- b6d6000 Deferred datacache PE b6e0000- bb0e000 Deferred studiorender PE bb10000- bcb1000 Deferred vphysics PE bcf0000- bd63000 Deferred vscript PE bd70000- bd93000 Deferred valve_avi PE bda0000- bf03000 Deferred vguimatsurface PE bf10000- bf6f000 Deferred vgui2 PE bf90000- c086000 Deferred shaderapidx9 PE c090000- c28f000 Deferred d3dx9_43 PE e4d0000- e584000 Deferred crashhandler PE e6a0000- e6b4000 Deferred xinput1_3 PE 10000000-100bb000 Deferred gameoverlayrenderer PE 18000000-1803b000 Deferred binkw32 PE 38000000-38893000 Deferred steamclient PE 3b400000-3b41e000 Deferred steam_api PE 3f000000-3f0ac000 Deferred tier0_s PE 3f600000-3f64b000 Deferred vstdlib_s ELF 7b800000-7ba60000 Deferred kernel32<elf> \-PE 7b810000-7ba60000 \ kernel32 ELF 7bc00000-7bcee000 Deferred ntdll<elf> \-PE 7bc10000-7bcee000 \ ntdll ELF 7bf00000-7bf04000 Deferred <wine-loader> ... ELF f6e90000-f6f4e000 Dwarf winmm<elf> \-PE f6ea0000-f6f4e000 \ winmm ... Threads: process tid prio (all id:s are in hex) ... 00000031 (D) C:\Program Files\Steam\SteamApps\common\Contagion\contagion.exe 00000063 0 00000064 0 00000067 0 00000065 0 00000030 0 <== --- snip --- Caller code: --- snip --- 0A532900 81EC CC010000 SUB ESP,1CC 0A532906 53 PUSH EBX 0A532907 55 PUSH EBP 0A532908 8BE9 MOV EBP,ECX 0A53290A 33DB XOR EBX,EBX 0A53290C 56 PUSH ESI 0A53290D 899D 8C150000 MOV DWORD PTR SS:[EBP+158C],EBX 0A532913 FF15 5821540A CALL DWORD PTR DS:[<&WINMM.joyGetNumDevs>] 0A532919 8BF0 MOV ESI,EAX 0A53291B 83FE 04 CMP ESI,4 0A53291E 897424 0C MOV DWORD PTR SS:[ESP+C],ESI 0A532922 0F8E 80010000 JLE inputsys.0A532AA8 --- snip --- The game dll calls 'WINMM.joyGetNumDevs'. Original relay thunk emitted for that API: --- snip --- F6F38234 push esp F6F38235 push 1Dh F6F38237 call __wine_spec_get_pc_thunk_eax F6F3823C lea eax, [eax+35270h] ; descriptor lookup F6F38242 push eax F6F38243 call dword ptr [eax+4] F6F38246 retn 0 --- snip --- The hook engine copies all opcodes that are potentially overwritten by the 5-byte long jump to an intermediate thunk. Hence the call to '__wine_spec_get_pc_thunk_eax' is copied too - leading to the actual problem. A long jump is written to the relay thunk entry which jumps to another trampoline, located at the intermediate thunk area. 'WINMM.joyGetNumDevs' relay thunk hooked by Steam's gameoverlayrenderer: --- snip --- F6F38234 E9 D47D5E13 JMP 0A52000D F6F38239 1300 ADC EAX,DWORD PTR DS:[EAX] F6F3823B 008D 80705203 ADD BYTE PTR SS:[EBP+3527080],CL F6F38241 0050 FF ADD BYTE PTR DS:[EAX-1],DL F6F38244 50 PUSH EAX F6F38245 04 C2 ADD AL,0C2 F6F38247 0000 ADD BYTE PTR DS:[EAX],AL --- snip --- Intermediate jump trampoline to actual hook code: --- snip --- 0A52000D E9 DE27B305 JMP gameover.100527F0 --- snip --- 'gameoverlayrenderer' module info: --- snip --- Base=10000000 Size=000BB000 (765952.) Entry=1005798F gameover.<ModuleEntryPoint> Name=gameover File version=02.13.04.49 Path=C:\Program Files\Steam\gameoverlayrenderer.dll --- snip --- 'gameoverlayrenderer' code: --- snip --- 100527F0 833D 2C7A0910 00 CMP DWORD PTR DS:[10097A2C],0 100527F7 7F 06 JG SHORT gameover.100527FF 100527F9 FF25 1C8F0910 JMP DWORD PTR DS:[10098F1C] 100527FF B8 04000000 MOV EAX,4 10052804 C3 RETN 10052805 CC INT3 --- snip --- Memory refs: --- snip --- 10097A2C 00000000 .... ... 10098F1C 0A520000 ..R. --- snip --- Original copy Wine relay thunk entry + continuation + hook jump --- snip --- 0A520000 54 PUSH ESP 0A520001 6A 1D PUSH 1D 0A520003 E8 5095A1EC CALL winmm.__wine_spec_get_pc_thunk_eax 0A520008 E9 2F82A1EC JMP winmm.F6F3823C ; org. relay thunk code (cont) 0A52000D E9 DE27B305 JMP gameover.100527F0 --- snip --- __wine_spec_get_pc_thunk_eax: --- snip --- F6F39558 8B0424 MOV EAX,DWORD PTR SS:[ESP] F6F3955B C3 RETN --- snip --- 'WINMM.joyGetNumDevs' original Wine relay thunk code (continuation): --- snip --- F6F3823C 8D80 70520300 LEA EAX,DWORD PTR DS:[EAX+35270] F6F38242 50 PUSH EAX F6F38243 FF50 04 CALL DWORD PTR DS:[EAX+4] F6F38246 C2 0000 RETN 0 --- snip --- This obviously can't work because '__wine_spec_get_pc_thunk_eax' relies on being called from original relay thunk code. Because Steam game overlay renderer hook engine relocated this essential part of relay thunk code, the returned address will always be wrong. You can fix this problem by padding the relay thunk entry with enough 'no-op' opcodes to not have '__wine_spec_get_pc_thunk_eax' relocated by hook engines. Wine: http://source.winehq.org/git/wine.git/blob/4e4acd5f705c770b7c361605e11d9d7c… The method works and AFAIK has no side-effects. I used a patch in my repo for some time now to cope with such stubborn apps/games (mostly DRM related). $ wine --version wine-1.7.16-133-gd8ca8c2 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 6