February 2019 - Wine-Bugs - list.winehq.org

[Bug 46091] New: RPG Maker game Deltarune plays at too high a framerate, impacting game speed
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=46091 Bug ID: 46091 Summary: RPG Maker game Deltarune plays at too high a framerate, impacting game speed Product: Wine Version: 3.18 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: yaomtcmail(a)gmail.com Distribution: --- Created attachment 62719 --> https://bugs.winehq.org/attachment.cgi?id=62719 The output of DELTARUNE.exe Deltarune, a new RPG Maker game from the creator of Undertale, has a demo out. Currently if you try to play it in Wine, the game speed is too fast, due to being tied to frame rate. This affects movement, sound effects, and music. This is noted by a couple tests here: https://appdb.winehq.org/objectManager.php?sClass=version&iId=37341&iTestin… To play the game normally, you can use libstrangle to limit the game's framerate to 30 fps. https://gitlab.com/torkel104/libstrangle -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 1719] MDI child window minimize problem in Delphi VCL applications
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=1719 Vijay Kamuju <infyquest(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |infyquest(a)gmail.com --- Comment #34 from Vijay Kamuju <infyquest(a)gmail.com> --- It seems this is fixed wine 4.2+ Please test again -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 46693] New: valgrind shows an invalid read in ntdll/tests/file.c
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=46693 Bug ID: 46693 Summary: valgrind shows an invalid read in ntdll/tests/file.c Product: Wine Version: 4.2 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: Gentoo ==22797== Invalid read of size 1 ==22797== at 0x7BC92413: virtual_check_buffer_for_write (virtual.c:2274) ==22797== by 0x7BC47536: NtFlushBuffersFile (file.c:3316) ==22797== by 0x4A9CD25: test_flush_buffers_file (file.c:4705) ==22797== by 0x4AAC361: func_file (file.c:4797) ==22797== by 0x4AF5941: run_test (test.h:617) ==22797== by 0x4AF637F: main (test.h:701) ==22797== Address 0xdeadbeaf is on thread 1's stack ==22797== ==22797== ERROR SUMMARY: 1 errors from 1 contexts (suppressed: 6 from 6) ==22797== ==22797== 1 errors in context 1 of 1: ==22797== Invalid read of size 1 ==22797== at 0x7BC92413: virtual_check_buffer_for_write (virtual.c:2274) ==22797== by 0x7BC47536: NtFlushBuffersFile (file.c:3316) ==22797== by 0x4A9CD25: test_flush_buffers_file (file.c:4705) ==22797== by 0x4AAC361: func_file (file.c:4797) ==22797== by 0x4AF5941: run_test (test.h:617) ==22797== by 0x4AF637F: main (test.h:701) ==22797== Address 0xdeadbeaf is on thread 1's stack ==22797== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 43374] New: valgrind shows an invalid read in dlls/mshtml/tests/ script.c
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=43374 Bug ID: 43374 Summary: valgrind shows an invalid read in dlls/mshtml/tests/script.c Product: Wine Version: 2.12 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: mshtml Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: --- ==28896== Invalid read of size 2 ==28896== at 0x5678C6D: DispCallFunc (typelib.c:6674) ==28896== by 0x680D479: invoke_builtin_function (dispex.c:1123) ==28896== by 0x680D763: function_invoke (dispex.c:1174) ==28896== by 0x680DA11: invoke_builtin_prop (dispex.c:1242) ==28896== by 0x680E964: DispatchEx_InvokeEx (dispex.c:1533) ==28896== by 0x16AC9205: IDispatchEx_InvokeEx (dispex.h:318) ==28896== by 0x16AC9205: disp_call (???:0) ==28896== by 0x16ACC7DF: exprval_call (engine.c:328) ==28896== by 0x16ACF402: interp_call_member (engine.c:1213) ==28896== by 0x16AD482D: enter_bytecode (engine.c:2787) ==28896== by 0x16AD5533: exec_source (engine.c:3040) ==28896== by 0x16AD7CF0: invoke_source (function.c:257) ==28896== by 0x16AD8152: Function_invoke (function.c:350) ==28896== by 0x16AC69A2: invoke_prop_func (dispex.c:383) ==28896== by 0x16AC7C70: DispatchEx_InvokeEx (dispex.c:684) ==28896== by 0x6856620: IDispatchEx_InvokeEx (dispex.h:318) ==28896== by 0x6856620: call_disp_func (???:0) ==28896== by 0x6856A51: call_event_handlers (htmlevent.c:961) ==28896== by 0x685748B: fire_event_obj (htmlevent.c:1095) ==28896== by 0x6857AC4: fire_event (htmlevent.c:1204) ==28896== by 0x68CD65F: handle_load (nsevents.c:282) ==28896== by 0x6B18A8A8: ??? ==28896== Address 0x7869d20 is 0 bytes after a recently re-allocated block of size 0 alloc'd ==28896== at 0x7BC51061: notify_alloc (heap.c:254) ==28896== by 0x7BC5554F: RtlAllocateHeap (heap.c:1716) ==28896== by 0x6809E6F: heap_alloc (mshtml_private.h:1168) ==28896== by 0x680A6FF: add_func_info (dispex.c:277) ==28896== by 0x680ABD4: process_interface (dispex.c:354) ==28896== by 0x680AEE5: preprocess_dispex_data (dispex.c:419) ==28896== by 0x680F3CA: init_dispex_with_compat_mode (dispex.c:1776) ==28896== by 0x68E753F: init_dispex (mshtml_private.h:334) ==28896== by 0x68EA736: OmNavigator_Create (omnavigator.c:1088) ==28896== by 0x68AA791: HTMLWindow2_get_navigator (htmlwindow.c:920) ==28896== by 0x4A9EAFF: IHTMLWindow2_get_navigator (mshtml.h:38483) ==28896== by 0x4A9EAFF: test_script_run (???:0) ==28896== by 0x4A9F739: ActiveScriptParse_ParseScriptText (script.c:2472) ==28896== by 0x68FEBE6: IActiveScriptParse32_ParseScriptText (activscp.h:1126) ==28896== by 0x68FEBE6: parse_elem_text (???:0) ==28896== by 0x68FF823: parse_inline_script (script.c:1103) ==28896== by 0x68FFA7A: parse_script_elem (script.c:1142) ==28896== by 0x69001FF: doc_insert_script (script.c:1285) ==28896== by 0x68B9905: run_insert_script (mutation.c:349) ==28896== by 0x68BA1B0: nsRunnable_Run (mutation.c:532) ==28896== by 0x6A83E0A0: ??? ==28896== by 0x68BAEB0: nsDocumentObserver_AttemptToExecuteScript (mutation.c:817) ==28896== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 1

[Bug 46692] New: valgrind shows several invalid frees in rpcrt4/tests/ server.c
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=46692 Bug ID: 46692 Summary: valgrind shows several invalid frees in rpcrt4/tests/server.c Product: Wine Version: 4.2 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: rpc Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: Gentoo For example: ==3664== 1 errors in context 1 of 15: ==3664== Thread 6: ==3664== Invalid free() / delete / delete[] / realloc() ==3664== at 0x7BC48AEE: notify_free (heap.c:268) ==3664== by 0x7BC4B68D: RtlFreeHeap (heap.c:1772) ==3664== by 0x4A95E0E: MIDL_user_free (server.c:287) ==3664== by 0x541F5C2: NdrFree (ndr_marshall.c:463) ==3664== by 0x54246C3: PointerFree (ndr_marshall.c:1171) ==3664== by 0x5424761: NdrPointerFree (ndr_marshall.c:1649) ==3664== by 0x542EF28: call_freer (ndr_stubless.c:148) ==3664== by 0x5430110: stub_do_args (ndr_stubless.c:1214) ==3664== by 0x5431C9B: NdrStubCall2 (ndr_stubless.c:1502) ==3664== by 0x5431DB5: NdrServerCall2 (ndr_stubless.c:1539) ==3664== by 0x5440612: process_request_packet (rpc_server.c:439) ==3664== by 0x5441615: RPCRT4_process_packet (rpc_server.c:517) ==3664== by 0x54416A6: RPCRT4_worker_thread (rpc_server.c:539) ==3664== by 0x7BC858C7: process_rtl_work_item (threadpool.c:349) ==3664== by 0x7BC86E2B: threadpool_worker_proc (threadpool.c:2126) ==3664== by 0x7BC785A3: ??? (in /home/austin/wine-valgrind/dlls/ntdll/ntdll.dll.so) ==3664== by 0x7BC7BA7E: call_thread_func (signal_i386.c:2701) ==3664== by 0x7BC78595: ??? (in /home/austin/wine-valgrind/dlls/ntdll/ntdll.dll.so) ==3664== Address 0x4ac14dc is in a r-x mapped file /home/austin/wine-valgrind/dlls/rpcrt4/tests/rpcrt4_test.exe.so segment ==3664== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 42667] New: Uplay crashes after close
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=42667 Bug ID: 42667 Summary: Uplay crashes after close Product: Wine Version: 2.3 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: olze(a)trustserv.de Distribution: --- Created attachment 57618 --> https://bugs.winehq.org/attachment.cgi?id=57618 The error output I installed uplay and started it. Then i installed Tom Clancys Ghost Recon Wildlands. I closed uplay. Now i can not start it anymore. I always get an error saying uplay crashed and a crash dump will be generated. Could be related to https://bugs.winehq.org/show_bug.cgi?id=39870 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 46690] New: kernel32/tests/thread.c shows an invalid read
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=46690 Bug ID: 46690 Summary: kernel32/tests/thread.c shows an invalid read Product: Wine Version: 4.2 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: --- ../../../tools/runtest -q -P wine -T ../../.. -M kernel32.dll -p kernel32_test.exe.so thread && touch thread.ok thread.c:346: Tests skipped: child process wasn't mapped at same address, so can't do CreateRemoteThread tests. ==24607== Thread 2: ==24607== Invalid read of size 1 ==24607== at 0x7B46DCFA: lstrlenA (string.c:194) ==24607== by 0x4B4B133: threadFunc1 (thread.c:235) ==24607== by 0x7BC785A3: ??? (in /home/austin/wine-valgrind/dlls/ntdll/ntdll.dll.so) ==24607== by 0x7BC7BA7E: call_thread_func (signal_i386.c:2701) ==24607== by 0x7BC78595: ??? (in /home/austin/wine-valgrind/dlls/ntdll/ntdll.dll.so) ==24607== Address 0xdeadbeef is on thread 1's stack ==24607== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 46689] New: kernel32/tests/locale.c shows an invalid write
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=46689 Bug ID: 46689 Summary: kernel32/tests/locale.c shows an invalid write Product: Wine Version: 4.2 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: --- ../../../tools/runtest -q -P wine -T ../../.. -M kernel32.dll -p kernel32_test.exe.so locale && touch locale.ok preloader: Warning: failed to reserve range 00110000-68000000 preloader: Warning: failed to reserve range 7f000000-82000000 ==21972== Invalid write of size 2 ==21972== at 0x7B4818FB: wine_decompose (decompose.c:2218) ==21972== by 0x7B48197A: wine_decompose (decompose.c:2234) ==21972== by 0x7B480447: wine_decompose_string (normalize.c:100) ==21972== by 0x7B451617: NormalizeString (locale.c:5403) ==21972== by 0x4AF1149: test_NormalizeString (locale.c:5770) ==21972== by 0x4B07EBC: func_locale (locale.c:6021) ==21972== by 0x4B7172E: run_test (test.h:617) ==21972== by 0x4B7216C: main (test.h:701) ==21972== Address 0x494107c is 0 bytes after a recently re-allocated block of size 4 alloc'd ==21972== at 0x7BC48A83: notify_alloc (heap.c:260) ==21972== by 0x7BC4BFA7: RtlAllocateHeap (heap.c:1726) ==21972== by 0x7B4433F8: HeapAlloc (heap.c:271) ==21972== by 0x7B44AB49: heap_realloc (heap.h:40) ==21972== by 0x7B4515F7: NormalizeString (locale.c:5396) ==21972== by 0x4AF1149: test_NormalizeString (locale.c:5770) ==21972== by 0x4B07EBC: func_locale (locale.c:6021) ==21972== by 0x4B7172E: run_test (test.h:617) ==21972== by 0x4B7216C: main (test.h:701) ==21972== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 0

[Bug 46688] New: wmp/tests/media.c: Jump to the invalid address stated on the next line
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=46688 Bug ID: 46688 Summary: wmp/tests/media.c: Jump to the invalid address stated on the next line Product: Wine Version: 4.2 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: wmp&wmvcore Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: --- Not sure if this is libmpg123 or wine; but: ../../../tools/runtest -q -P wine -T ../../.. -M wmp.dll -p wmp_test.exe.so media && touch media.ok ==26940== Jump to the invalid address stated on the next line ==26940== at 0xA4EA930: ??? (in /usr/lib32/libmpg123.so.0.44.8) ==26940== by 0x42932FA: __run_exit_handlers (exit.c:108) ==26940== by 0x42933ED: exit (exit.c:139) ==26940== by 0x7BC61B47: NtTerminateProcess (process.c:91) ==26940== by 0x7BC51274: RtlExitUserProcess (loader.c:3031) ==26940== by 0x7B45C491: ??? (in /home/austin/wine-valgrind/dlls/kernel32/kernel32.dll.so) ==26940== Address 0xa4ea930 is on thread 1's stack -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 1

[Bug 46661] New: ISF_Desktop_fnGetDisplayNameOf function missing check for string variable This- >sPathTarget before copy it
by wine-bugs＠winehq.org Feb. 21, 2019

Feb. 21, 2019

https://bugs.winehq.org/show_bug.cgi?id=46661 Bug ID: 46661 Summary: ISF_Desktop_fnGetDisplayNameOf function missing check for string variable This->sPathTarget before copy it Product: Wine Version: 4.0-rc7 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: shell32 Assignee: wine-bugs(a)winehq.org Reporter: ossecurity(a)iscas.ac.cn Distribution: --- ISF_Desktop_fnGetDisplayNameOf function miss the check for string variable This->sPathTarget before copy it. Malware(virus etc.) can leverage process injection techniques to hook this WINAPI function(ISF_Desktop_fnGetDisplayNameOf) and tampered the string variable This->sPathTarget which may cause "NULL pointer dereference" and "buffer overflow" in shell32.dll. 583:static HRESULT WINAPI ISF_Desktop_fnGetDisplayNameOf (IShellFolder2 * iface, 584: LPCITEMIDLIST pidl, DWORD dwFlags, LPSTRRET strRet) 585:{ 586: IDesktopFolderImpl *This = impl_from_IShellFolder2(iface); ... 596: pszPath = CoTaskMemAlloc((MAX_PATH +1) * sizeof(WCHAR)); ... 600: if (_ILIsDesktop (pidl)) 601: { 602: if ((GET_SHGDN_RELATION (dwFlags) == SHGDN_NORMAL) && 603: (GET_SHGDN_FOR (dwFlags) & SHGDN_FORPARSING)) 604: strcpyW(pszPath, This->sPathTarget);//** missing check before copy ** We find a lot of similar code but not sure about its seriousness yet. Any comments are helpful. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 17