October 2020 - Wine-Bugs - list.winehq.org

[Bug 22690] New: Total Commander: Cancelling a file copy operation does not work
by wine-bugs＠winehq.org Feb. 10, 2021

Feb. 10, 2021

http://bugs.winehq.org/show_bug.cgi?id=22690 Summary: Total Commander: Cancelling a file copy operation does not work Product: Wine Version: 1.1.44 Platform: x86-64 URL: http://www.ghisler.com/amazons3.php OS/Version: Linux Status: UNCONFIRMED Severity: minor Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: alexandru.balut(a)gmail.com Created an attachment (id=27958) --> (http://bugs.winehq.org/attachment.cgi?id=27958) Cancelling a file copy operation in Total Commander 7.50a on Vista Press F5 to copy a large file (at least 200MB), click the Cancel button. Notice nothing happens, and the file continues to be copied. On Vista, a dialog window appears saying "User abort!". Press F6 to move a large file to a different partition, click the Cancel button, notice after a while the "User abort!" dialog window appears, at this point the file is copied but it should not have been copied. Total Commander 7.50a wine-1.1.44 Ubuntu 10.04 64 -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 16

[Bug 21966] New: Total Commander: Application freezes when queue-ing file copy operations
by wine-bugs＠winehq.org Feb. 10, 2021

Feb. 10, 2021

http://bugs.winehq.org/show_bug.cgi?id=21966 Summary: Total Commander: Application freezes when queue-ing file copy operations Product: Wine Version: 1.1.40 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: minor Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: alexandru.balut(a)gmail.com Total Commander 7.50a - Press F5 to copy a (large) file and press F2 to queue the operation, - Notice problem 1: The window that pops up, showing the queued operations, is frozen. Thus, it does not show the progress. - While TC is still copying the file, press F5 to copy a different file and press F2 to queue the operation. - Notice problem 2: The main TC window is frozen. After the file copy operations are finished, the application is again responsive. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 12

[Bug 41992] New: total commander, copy dialog - Esc key not working
by wine-bugs＠winehq.org Feb. 10, 2021

Feb. 10, 2021

https://bugs.winehq.org/show_bug.cgi?id=41992 Bug ID: 41992 Summary: total commander, copy dialog - Esc key not working Product: Wine Version: 1.9.23 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: andrej8anubis(a)gmail.com Distribution: --- Created attachment 56411 --> https://bugs.winehq.org/attachment.cgi?id=56411 copy dialog box at it appears I am using: total commander 9.0a 64 bit linuxmint 18 64 bit "wine 1.9.23" as shown from : "apt policy wine-staging*" -->> wine-staging: Installed: 1.9.23~ubuntu16.04.1 Candidate: 1.9.23~ubuntu16.04.1 Version table: *** 1.9.23~ubuntu16.04.1 500 500 http://ppa.launchpad.net/wine/wine-builds/ubuntu xenial/main amd64 Packages 100 /var/lib/dpkg/status wine-staging-amd64: Installed: 1.9.23~ubuntu16.04.1 Candidate: 1.9.23~ubuntu16.04.1 Version table: *** 1.9.23~ubuntu16.04.1 500 500 http://ppa.launchpad.net/wine/wine-builds/ubuntu xenial/main amd64 Packages 100 /var/lib/dpkg/status <<-- test1 - works fine ================== - pres F8 for delete a file - a dialog box appear, asking "do you really want to delete..." - pres Esc - the dialog box disappears as it should, as it does in windows. Great test2 - does not work ================== - pres F5 for copy file - a dialog box appears offering me options for how to copy - pres Esc, the dialog box does not disappear as it does in windows, I am guessing the problem in wine is, because the cursor is in the text box,where I can make input from keyboard. But in windows works fine. But... - ...but if I press Tab two times, so the "cursor" is located on plus (+) button in copy dialog box, as it is the case in test1, where the "cursor" is located on the button "yes", and then press Esc key on keyboard, the dialog box disappears as in windows also for copy dialog box . The point here is, that if the "cursor" is located on the button, the Esc key works fine in bothe tests -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 48141] New: Total Commander: launching of native linux commands for file associations is broken
by WineHQ Bugzilla Feb. 10, 2021

Feb. 10, 2021

https://bugs.winehq.org/show_bug.cgi?id=48141 Bug ID: 48141 Summary: Total Commander: launching of native linux commands for file associations is broken Product: Wine Version: 4.20 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: felix.huber(a)schyf.de Distribution: --- Created attachment 65745 --> https://bugs.winehq.org/attachment.cgi?id=65745 Console log of failure to start native linux application When making an internal association by using a script with the line: /usr/bin/xdg-open "`wine winepath -u "$1"`" the launch of the native application creates errors like this: Configuration file "//.config/kde-open5rc" not writable. Please contact your system administrator. and the list of possible applications is empty. It looks like the home path is missing and thus the root folder is used, which is denied. I could bisect the problem to this: commit eee3a4e84a07c50c65c3a7619247f62dbca826b6 Author: Alexandre Julliard <julliard(a)winehq.org> Date: Tue Nov 12 21:48:49 2019 +0100 kernel32: Move support for starting Unix processes to ntdll. Signed-off-by: Alexandre Julliard <julliard(a)winehq.org> :040000 040000 72a0a42afdb9b51f77bf482c49429a79d59d9b18 b61e932c3248669edaafbc2f184ebb59a9ea53d2 M dlls Also, there are error messages on the console that Total Commander cannot get the home directory. This might be the result of a denied read access for L"\\??\\z:\\", see attached error log. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 46274] New: Total Commander 8.52a: Closing the Multi-Rename window after using it is slow and messes up the listbox caret
by wine-bugs＠winehq.org Feb. 10, 2021

Feb. 10, 2021

https://bugs.winehq.org/show_bug.cgi?id=46274 Bug ID: 46274 Summary: Total Commander 8.52a: Closing the Multi-Rename window after using it is slow and messes up the listbox caret Product: Wine Version: 4.0-rc1 Hardware: x86 URL: http://web.archive.org/web/20160121065109/http://total cmd2.s3.amazonaws.com/tcmd852ax32.exe OS: Linux Status: ASSIGNED Severity: normal Priority: P2 Component: user32 Assignee: gabrielopcode(a)gmail.com Reporter: gabrielopcode(a)gmail.com CC: wine-bugs(a)winehq.org Distribution: --- 1) Launch Total Commander and press CTRL+M or go to Files->Multi Rename Tool... 2) Press "Start!" which should work fine. 3) Now close the Multi-Rename window (i.e. click on Close or press ESC) Observe how there's a few seconds of freeze lag, after which the listbox caret in the panel is gone. Switching to the other panel and back brings it back. I did a few investigations and it seems this is not a problem with the listbox at all. Rather, it's a problem with recursive SetFocus and window activation, that's why it's so slow (until it reaches a limit). I'll try to fix it like on Windows so I'll have to see how Windows handles this situation (with testcases of course). It's interesting to note that this does not happen if you don't click on "Start!" in the Multi-Rename Tool. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 46669] New: delete a file in total commander mounted disk
by wine-bugs＠winehq.org Feb. 10, 2021

Feb. 10, 2021

https://bugs.winehq.org/show_bug.cgi?id=46669 Bug ID: 46669 Summary: delete a file in total commander mounted disk Product: Wine Version: 4.0-rc7 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: andrej8anubis(a)gmail.com Distribution: --- I have linux mint and permanently mounted drive. When I delete a file in total commander from this drive, it does not show in Trash in nemo. If I delete a file in total commander in my home folder, the file does show in trash as expected. Am I doing something wrong? Thank you -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36332] New: Total Commander 8.x: moving files between folders renders them inaccessible (SetNamedSecurityInfo)
by wine-bugs＠winehq.org Feb. 10, 2021

Feb. 10, 2021

https://bugs.winehq.org/show_bug.cgi?id=36332 Bug ID: 36332 Summary: Total Commander 8.x: moving files between folders renders them inaccessible (SetNamedSecurityInfo) Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, might be a dupe of bug 36331 in the end. Moving files with the well-known 'Total Commander' (my favourite file manager in Linux) leads to inaccessible files. Before: --- snip --- $ ls -lsa test* test: total 0 0 drwxrwxr-x. 1 focht focht 14 May 4 14:40 . 0 drwxr-xr-x. 1 focht focht 178 May 4 14:40 .. 0 -rw-rw-r--. 1 focht focht 0 May 4 14:38 org.txt test2: total 0 0 drwxrwxr-x. 1 focht focht 0 May 4 14:40 . 0 drwxr-xr-x. 1 focht focht 178 May 4 14:40 .. --- snip --- After moving the file to another folder 'test2' with 'F6 Move': --- snip --- $ ls -lsa test* test: total 0 0 drwxrwxr-x. 1 focht focht 0 May 4 14:41 . 0 drwxr-xr-x. 1 focht focht 178 May 4 14:40 .. test2: total 0 0 drwxrwxr-x. 1 focht focht 14 May 4 14:41 . 0 drwxr-xr-x. 1 focht focht 178 May 4 14:40 .. 0 ----------. 1 focht focht 0 May 4 14:38 org.txt --- snip --- Inaccessible. Whoops. Relevant part of trace log: --- snip --- ... 002d:Call advapi32.GetNamedSecurityInfoW(0f4bce88 L"H:\\Downloads\\test2",00000001,0000000f,0f4bc600,0f4bc5f8,0f4bc5e0,0f4bc5d8,0f4bc5b8) ret=00833d9f 002d:trace:advapi:GetNamedSecurityInfoW L"H:\\Downloads\\test2" 1 15 0xf4bc600 0xf4bc5f8 0xf4bc5e0 0xf4bc5d8 0xf4bc5b8 002d:trace:ntdll:FILE_CreateFile handle=0xf4bc2c0 access=01020000 name=L"\\??\\H:\\Downloads\\test2" objattr=00000040 root=(nil) sec=(nil) io=0xf4bc210 alloc_size=(nil) attr=02000000 sharing=00000007 disp=1 options=00004000 ea=(nil).0x00000000 002d: create_file( access=01020000, attributes=00000040, sharing=00000007, create=1, options=00004000, attrs=02000000, objattr={rootdir=0000,sd={},name=L""}, filename="/home/focht/wine-apps/totalcmd/wineprefix/dosdevices/h:/Downloads/test2" ) 002d: create_file() = 0 { handle=0104 } 002d:trace:ntdll:NtQuerySecurityObject (0x104,0x0000000f,(nil),0x00000000,0xf4bc1ac) 002d: get_security_object( handle=0104, security_info=0000000f ) 002d: get_security_object() = 0 { sd_len=00000094, sd={control=00000014,owner={S-1-5-21-0-0-0-1000},group={S-1-5-32-544},sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=1f01ff,AceFlags=0,Sid={S-1-5-18}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=1f01ff,AceFlags=0,Sid={S-1-5-21-0-0-0-1000}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=1200a9,AceFlags=0,Sid={S-1-1-0}}}} } 002d:trace:ntdll:NtQuerySecurityObject (0x104,0x0000000f,0x36cce0,0x00000094,0xf4bc1a8) 002d: get_security_object( handle=0104, security_info=0000000f ) 002d: get_security_object() = 0 { sd_len=00000094, sd={control=00000014,owner={S-1-5-21-0-0-0-1000},group={S-1-5-32-544},sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=1f01ff,AceFlags=0,Sid={S-1-5-18}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=1f01ff,AceFlags=0,Sid={S-1-5-21-0-0-0-1000}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=1200a9,AceFlags=0,Sid={S-1-1-0}}}} } 002d:trace:ntdll:RtlGetDaclSecurityDescriptor (0x36cce0,0xf4bc0ab,0xf4bc5e0,0xf4bc0aa) 002d:trace:ntdll:RtlGetSaclSecurityDescriptor (0x36cce0,0xf4bc0ab,0xf4bc5d8,0xf4bc0aa) 002d: close_handle( handle=0104 ) 002d: close_handle() = 0 002d:Ret advapi32.GetNamedSecurityInfoW() retval=00000000 ret=00833d9f 002d:Call KERNEL32.GetLastError() ret=00415420 002d:Ret KERNEL32.GetLastError() retval=00000000 ret=00415420 002d:Call advapi32.InitializeAcl(091353d0,00000008,00000002) ret=008341b2 002d:trace:ntdll:RtlCreateAcl 0x91353d0 0x00000008 0x00000002 002d:Ret advapi32.InitializeAcl() retval=00000001 ret=008341b2 002d:Call advapi32.SetNamedSecurityInfoW(0f4bc678 L"H:\\Downloads\\test2\\org.txt",00000001,3000000f,0036ccf4,0036cd10,091353d0,091353d0) ret=00834312 002d:trace:advapi:SetNamedSecurityInfoW L"H:\\Downloads\\test2\\org.txt" 1 805306383 0x36ccf4 0x36cd10 0x91353d0 0x91353d0 002d:trace:ntdll:FILE_CreateFile handle=0xf4bc2d0 access=010c0000 name=L"\\??\\H:\\Downloads\\test2\\org.txt" objattr=00000040 root=(nil) sec=(nil) io=0xf4bc220 alloc_size=(nil) attr=02000000 sharing=00000007 disp=1 options=00004000 ea=(nil).0x00000000 002d: create_file( access=010c0000, attributes=00000040, sharing=00000007, create=1, options=00004000, attrs=02000000, objattr={rootdir=0000,sd={},name=L""}, filename="/home/focht/wine-apps/totalcmd/wineprefix/dosdevices/h:/Downloads/test2/org.txt" ) 002d: create_file() = 0 { handle=0104 } 002d:trace:ntdll:NtSetSecurityObject 0x104 0x3000000f 0xf4bc190 002d:trace:ntdll:RtlGetControlSecurityDescriptor (0xf4bc190,0xf4bc046,0xf4bc048) 002d:trace:ntdll:RtlLengthSid sid=0x36ccf4 002d:trace:ntdll:RtlLengthSid sid=0x36cd10 002d:trace:ntdll:RtlGetSaclSecurityDescriptor (0xf4bc190,0xf4bc04e,0xf4bc060,0xf4bc04f) 002d:trace:ntdll:RtlGetDaclSecurityDescriptor (0xf4bc190,0xf4bc04e,0xf4bc068,0xf4bc04f) 002d: set_security_object( handle=0104, security_info=3000000f, sd={control=00000014,owner={S-1-5-21-0-0-0-1000},group={S-1-5-32-544},sacl={},dacl={}} ) 002d: set_security_object() = 0 002d: close_handle( handle=0104 ) 002d: close_handle() = 0 002d:Ret advapi32.SetNamedSecurityInfoW() retval=00000000 ret=00834312 002d:Call KERNEL32.LocalFree(0036cce0) ret=008344c5 002d:Ret KERNEL32.LocalFree() retval=00000000 ret=008344c5 002d:Call KERNEL32.SetFileAttributesW(0f4c4ec8 L"H:\\Downloads\\test2\\org.txt",00000020) ret=0049312c 002d:trace:ntdll:FILE_CreateFile handle=0xf4c4be8 access=00000000 name=L"\\??\\H:\\Downloads\\test2\\org.txt" objattr=00000040 root=(nil) sec=(nil) io=0xf4c4bf0 alloc_size=(nil) attr=00000000 sharing=00000000 disp=1 options=00000020 ea=(nil).0x00000000 002d: create_file( access=00000000, attributes=00000040, sharing=00000000, create=1, options=00000020, attrs=00000000, objattr={rootdir=0000,sd={},name=L""}, filename="/home/focht/wine-apps/totalcmd/wineprefix/dosdevices/h:/Downloads/test2/org.txt" ) 002d: create_file() = ACCESS_DENIED { handle=0000 } 002d:Ret KERNEL32.SetFileAttributesW() retval=00000000 ret=0049312c --- snip --- $ sha1sum tcm851ax32.exe 628ebb878fb8b1f0728217448b5921f42e987899 tcm851ax32.exe $ du -sh tcm851ax32.exe 3.6M tcm851ax32.exe $ wine --version wine-1.7.18 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 46527] New: delete a file in total commander
by wine-bugs＠winehq.org Feb. 10, 2021

Feb. 10, 2021

https://bugs.winehq.org/show_bug.cgi?id=46527 Bug ID: 46527 Summary: delete a file in total commander Product: Wine Version: 4.0-rc7 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: andrej8anubis(a)gmail.com Distribution: --- I have up to date linux mint 19.1 cinnamon and winehq-devel 4.0~rc7~bionic, both great, I like it... but, when I delete a file in file manager nemo it gets into the trash. When I delete a file in total commander, a file is not to be found in the trash. Is this a bug? Thank you -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 7

[Bug 30329] New: Total Commander 8.0 64-bits beta installer crashes due to pointer truncation (image base address > 4 GiB)
by wine-bugs＠winehq.org Feb. 10, 2021

Feb. 10, 2021

http://bugs.winehq.org/show_bug.cgi?id=30329 Bug #: 30329 Summary: Total Commander 8.0 64-bits beta installer crashes due to pointer truncation (image base address > 4 GiB) Product: Wine Version: 1.5.1 Platform: x86-64 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, the extracted installer "INSTALL.EXE" (64 bits PE binary) can be run alone from "wc0" temp folder. The installer tries to fill a list box with language strings. --- snip --- 0026:Starting process L"Z:\\home\\focht\\Downloads\\wc0\\INSTALL.EXE" (entryproc=0x14000cca0) ... 0026:Call KERNEL32.GetPrivateProfileStringA(140019788 "languages",0022dc90 "18",140019786 "",0022dcf0,00000103,1400226c0 "Z:\\home\\focht\\Downloads\\wc0\\INSTALL.inf") ret=140001c0d 0026:Ret KERNEL32.GetPrivateProfileStringA() retval=00000013 ret=140001c0d 0026:Call KERNEL32.GetLastError() ret=14000e5c0 0026:Ret KERNEL32.GetLastError() retval=00000000 ret=14000e5c0 0026:Call KERNEL32.GetLastError() ret=14000e5c0 0026:Ret KERNEL32.GetLastError() retval=00000000 ret=14000e5c0 0026:Call user32.SendDlgItemMessageA(0001007e,00000064,00000180,00000000,0022dcf0) ret=140001cd1 0026:Call window proc 0x7f45d4b788ef (hwnd=0x10086,msg=LB_ADDSTRING,wp=00000000,lp=0022dcf0) 0026:Ret window proc 0x7f45d4b788ef (hwnd=0x10086,msg=LB_ADDSTRING,wp=00000000,lp=0022dcf0) retval=00000011 0026:Ret user32.SendDlgItemMessageA() retval=00000011 ret=140001cd1 0026:Call user32.GetDlgItem(0001007e,00000004) ret=140001cfb 0026:Ret user32.GetDlgItem() retval=0001008a ret=140001cfb 0026:Call user32.ShowWindow(0001008a,00000000) ret=140001d06 0026:Call window proc 0x7f45d4b78593 (hwnd=0x1008a,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) 0026:Ret window proc 0x7f45d4b78593 (hwnd=0x1008a,msg=WM_SHOWWINDOW,wp=00000000,lp=00000000) retval=00000000 0026:Ret user32.ShowWindow() retval=00000001 ret=140001d06 0026:Call user32.SendDlgItemMessageA(0001007e,00000064,00000181,00000012,40019670) ret=140001d30 0026:Call window proc 0x7f45d4b788ef (hwnd=0x10086,msg=LB_INSERTSTRING,wp=00000012,lp=40019670) 0026:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7b8633f9 ip=7b8633f9 tid=0026 0026:trace:seh:raise_exception info[0]=0000000000000000 0026:trace:seh:raise_exception info[1]=0000000040019670 0026:trace:seh:raise_exception rax=0000000000000000 rbx=0000000000000026 rcx=ffffffffffffffff rdx=0000000040019670 0026:trace:seh:raise_exception rsi=0000000000000181 rdi=0000000040019670 rbp=000000000022d2d0 rsp=000000000022d1a0 0026:trace:seh:raise_exception r8=0000000040019670 r9=00000000ffffffff r10=0000000000000008 r11=000000399ab7c680 0026:trace:seh:raise_exception r12=000000000001f0ac r13=00000001400226c0 r14=0000000000000000 r15=00000001400226c0 --- snip --- The reason for the crash is a 32 bit pointer truncation -> application bug. Most likely the original code was Win32 and had been ported to Win64 with some casts still in there. (annotated) --- snip --- .text:0000000140001D0D movsxd rax, cs:dword_14001F030 .text:0000000140001D14 movsxd r9, r11d ; wParam .text:0000000140001D17 mov edx, 64h ; nIDDlgItem .text:0000000140001D1C mov r8d, 181h ; Msg, LB_INSERTSTRING .text:0000000140001D22 mov rcx, rdi ; hDlg .text:0000000140001D25 mov [rsp+20h], rax .text:0000000140001D2A call cs:SendDlgItemMessageA --- snip --- The data reference (I only decoded the 32 bits part to show the 32 bit access): --- snip --- .data:000000014001F030 dword_14001F030 dd 40019670h .data:000000014001F034 db 1 .data:000000014001F035 db 0 .data:000000014001F036 db 0 .data:000000014001F037 db 0 --- snip --- Page fault address: 0000000040019670 If referenced as 64 bits -> 0x140019670 it would be correct: --- snip --- .rdata:0000000140019670 db 4Fh ; O .rdata:0000000140019671 db 74h ; t .rdata:0000000140019672 db 68h ; h .rdata:0000000140019673 db 65h ; e .rdata:0000000140019674 db 72h ; r .rdata:0000000140019675 db 20h ... --- snip --- Using "dumpbin" tool from Visual Studio/Express/SDK on executable gives: --- snip --- Dump of file INSTALL.exe PE signature found File Type: EXECUTABLE IMAGE FILE HEADER VALUES 8664 machine (x64) 5 number of sections 4EE124C5 time date stamp Thu Dec 08 21:57:41 2011 0 file pointer to symbol table 0 number of symbols F0 size of optional header 23 characteristics Relocations stripped Executable Application can handle large (>2GB) addresses OPTIONAL HEADER VALUES 20B magic # (PE32+) 8.00 linker version 17800 size of code D800 size of initialized data 0 size of uninitialized data CCA0 entry point (000000014000CCA0) 1000 base of code 140000000 image base (0000000140000000 to 0000000140028FFF) 1000 section alignment 200 file alignment 4.00 operating system version 0.00 image version 5.02 subsystem version 0 Win32 version 29000 size of image 400 size of headers 303B3 checksum 2 subsystem (Windows GUI) 8000 DLL characteristics Terminal Server Aware 100000 size of stack reserve 1000 size of stack commit 100000 size of heap reserve 1000 size of heap commit 0 loader flags 10 number of directories 0 [ 0] RVA [size] of Export Directory 1D7D8 [ 64] RVA [size] of Import Directory 26000 [ 23F8] RVA [size] of Resource Directory 24000 [ 10F8] RVA [size] of Exception Directory 22400 [ 1780] RVA [size] of Certificates Directory 0 [ 0] RVA [size] of Base Relocation Directory 0 [ 0] RVA [size] of Debug Directory 0 [ 0] RVA [size] of Architecture Directory 0 [ 0] RVA [size] of Global Pointer Directory 0 [ 0] RVA [size] of Thread Storage Directory 0 [ 0] RVA [size] of Load Configuration Directory 0 [ 0] RVA [size] of Bound Import Directory 19000 [ 5E8] RVA [size] of Import Address Table Directory 0 [ 0] RVA [size] of Delay Import Directory 0 [ 0] RVA [size] of COM Descriptor Directory 0 [ 0] RVA [size] of Reserved Directory --- snip --- Section headers: --- snip --- SECTION HEADER #1 .text name 176BE virtual size 1000 virtual address (0000000140001000 to 00000001400186BD) 17800 size of raw data 400 file pointer to raw data (00000400 to 00017BFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 60000020 flags Code Execute Read SECTION HEADER #2 .rdata name 5B1C virtual size 19000 virtual address (0000000140019000 to 000000014001EB1B) 5C00 size of raw data 17C00 file pointer to raw data (00017C00 to 0001D7FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only Section contains the following imports: KERNEL32.dll 1400190D8 Import Address Table 14001D918 Import Name Table 0 time date stamp 0 Index of first forwarder reference ... SECTION HEADER #3 .data name 4478 virtual size 1F000 virtual address (000000014001F000 to 0000000140023477) 1600 size of raw data 1D800 file pointer to raw data (0001D800 to 0001EDFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers C0000040 flags Initialized Data Read Write ... SECTION HEADER #4 .pdata name 10F8 virtual size 24000 virtual address (0000000140024000 to 00000001400250F7) 1200 size of raw data 1EE00 file pointer to raw data (0001EE00 to 0001FFFF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only ... SECTION HEADER #5 .rsrc name 23F8 virtual size 26000 virtual address (0000000140026000 to 00000001400283F7) 2400 size of raw data 20000 file pointer to raw data (00020000 to 000223FF) 0 file pointer to relocation table 0 file pointer to line numbers 0 number of relocations 0 number of line numbers 40000040 flags Initialized Data Read Only --- snip --- The image load base of 0x0000000140000000 (>4 GiB address space) is probably to catch such 32 vs. 64 bits porting errors. When pointers are stored as 32 bits they would truncate hence triggering page fault as seen here. I've looked into the Total Commander forum (http://www.ghisler.ch/board/index.php?language=english) but didn't find any bug reports about installer crashing on Win64 so I assume this installer somehow runs despite the bug. Would be nice if someone with Win64 could verify this. Maybe the loader does something different on Win64? Even if the bug is invalid it's probably good to have one bug to collect such misbehaving apps. I suspect there are more apps out there. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 8

[Bug 31276] New: Total Commander 8.0 64-bit installer crashes during cabinet extraction (wrong FCI/FDI structure packing for Win64)
by wine-bugs＠winehq.org Feb. 10, 2021

Feb. 10, 2021

http://bugs.winehq.org/show_bug.cgi?id=31276 Bug #: 31276 Summary: Total Commander 8.0 64-bit installer crashes during cabinet extraction (wrong FCI/FDI structure packing for Win64) Product: Wine Version: 1.5.9 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, when bug 30329 is fixed (fix to buggy app installer should be preferred over Wine) the installer runs into another crash. The crash is mentioned in this TC thread: http://ghisler.ch/board/viewtopic.php?p=252389 Trace log doesn't give much useful info because the crash happens within app supplied FDI notification callback. Debugging session: --- snip --- ... Wine-dbg>si 0x00007f76ded7fc60 FDICopy+0xda5 [/home/focht/projects/wine/wine-git/dlls/cabinet/fdi.c:2697] in cabinet: movq 0x0000000000000030(%rbp),%r8 2697 if ((filehf = ((*pfnfdin)(fdintCOPY_FILE, &fdin))) == -1) { Wine-dbg>si 0x00007f76ded7fc64 FDICopy+0xda9 [/home/focht/projects/wine/wine-git/dlls/cabinet/fdi.c:2697] in cabinet: movq %rax,%rdx 2697 if ((filehf = ((*pfnfdin)(fdintCOPY_FILE, &fdin))) == -1) { Wine-dbg>si 0x00007f76ded7fc67 FDICopy+0xdac [/home/focht/projects/wine/wine-git/dlls/cabinet/fdi.c:2697] in cabinet: movl $0x2,%rcx 2697 if ((filehf = ((*pfnfdin)(fdintCOPY_FILE, &fdin))) == -1) { Wine-dbg>si 0x00007f76ded7fc6c FDICopy+0xdb1 [/home/focht/projects/wine/wine-git/dlls/cabinet/fdi.c:2697] in cabinet: calll *%r8d 2697 if ((filehf = ((*pfnfdin)(fdintCOPY_FILE, &fdin))) == -1) { Wine-dbg>info reg Register dump: rip:00007f76ded7fc6c rsp:000000000023df40 rbp:000000000023e2e0 eflags:00000302 ( - -- IT - - - ) rax:000000000023e0e0 rbx:0000000000241160 rcx:0000000000000002 rdx:000000000023e0e0 rsi:000000014000910c rdi:000000000023e118 r8:0000000140009170 r9:0000000000000000 r10:0000000000000008 r11:0000000000000246 r12:000000000023e810 r13:0000000000000000 r14:0000000140022b80 r15:0000000000000103 Wine-dbg>p fdin {cb=0xc7a, psz1="e\REGISTER.RTF", psz2=0x0(nil), psz3=0x0(nil), pv=0x0(nil), hf=0, date=0x40ed, time=0x4020, attribs=0, setID=0, iCabinet=0, iFolder=0, fdie=FDIERROR_NONE} Wine-dbg>x/20x $rdx 0x000000000023e0e0: 00000c7a 00241230 00000000 00000000 0x000000000023e0f0: 00000000 00000000 00000000 00000000 0x000000000023e100: 00000000 00000000 00000000 402040ed 0x000000000023e110: 00000000 00000000 00000000 00000000 0x000000000023e120: 003c30bc 004d0001 00008ace 00000000 ... Wine-dbg>si 0x0000000140009265: movq 0x0000000000000008(%rdi),%rbx Wine-dbg>si Unhandled exception: page fault on read access to 0x00000000 in 64-bit code (0x0000000140009269). Register dump: rip:0000000140009269 rsp:000000000023d7a0 rbp:000000000023e2e0 eflags:00010346 ( R- -- IT Z- -P- ) rax:000000000023d7f0 rbx:0000000000000000 rcx:fffffffec021b9f0 rdx:0000000140021e0c rsi:0000000000000000 rdi:000000000023e0e0 r8:0000000140009170 r9:8101010101010100 r10:81010100f8f8fefe r11:000000000023d7f0 r12:000000000023e810 r13:0000000000000000 r14:0000000140022b80 r15:0000000000000103 Stack dump: 0x000000000023d7a0: 000100020000003c 000000000023d170 0x000000000023d7b0: 000000000023d170 000000000023d0d0 0x000000000023d7c0: 000000000023d0d0 000000000023d0e0 0x000000000023d7d0: 000000000023d0e0 0000000000241160 0x000000000023d7e0: 000000000023d8e0 00007f76e66c281f 0x000000000023d7f0: 6c61746f745c3a63 00007f005c646d63 0x000000000023d800: 000000000023d900 00007f76e66c281f 0x000000000023d810: 000000000023dc24 000000010023dc28 0x000000000023d820: 000000000023d920 000000000023ddf0 0x000000000023d830: 000000000023d930 000000000023de00 0x000000000023d840: 000000000023d940 000000000023de10 0x000000000023d850: 0000000000000000 0000000000000000 Backtrace: =>0 0x0000000140009269 in install (+0x9269) (0x000000000023e2e0) 1 0x00007f76ded7fc6f FDICopy+0xdb3(hfdi=0x241160, pszCabinet="install.cab", pszCabPath="Z:\home\focht\Downloads\wc\", flags=0, pfnfdin=0x140009170, pfnfdid=(nil), pvUser=0x0(nil)) [/home/focht/projects/wine/wine-git/dlls/cabinet/fdi.c:2697] in cabinet (0x000000000023e2e0) 2 0x000000014000985b in install (+0x985a) (0x000000000023e5e0) 3 0x0000000140007036 in install (+0x7035) (0x0000000140019784) 4 0x0000000140007fab in install (+0x7faa) (0x000000000023f7f0) ... 0x0000000140009269: cmpb $0x5c,(%rbx) --- snip --- It seems the app notification callback code tries to access fdin.psz1 member at wrong offset (+8). The FDINOTIFICATION structure: http://source.winehq.org/git/wine.git/blob/4ed257665ccb1e78efcff70306499cd7… --- snip --- ... 28 #include <pshpack4.h> ... 228 typedef struct { 229 LONG cb; 230 char *psz1; 231 char *psz2; 232 char *psz3; /* Points to a 256 character buffer */ 233 void *pv; /* Value for client */ 234 235 INT_PTR hf; 236 237 USHORT date; 238 USHORT time; 239 USHORT attribs; 240 241 USHORT setID; /* Cabinet set ID */ 242 USHORT iCabinet; /* Cabinet number (0-based) */ 243 USHORT iFolder; /* Folder number (0-based) */ 244 245 FDIERROR fdie; 246 } FDINOTIFICATION, *PFDINOTIFICATION; --- snip --- Looking for other 64-bit apps using cabinet API I found this: http://www.codeproject.com/Articles/15397/Cabinet-File-CAB-Compression-and-… The 32-bit version works ok. The 64-bit version (Cabinet_x64.exe) exhibits same behaviour, FDINOTIFICATION psz1 structure member is accessed with wrong offset (+8). It seems for Win64 the explicit structure packing directives are no longer applicable and compiler/platform defaults are used (applies for both, fdi.h and fci.h header). This allows the installer to succeed. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 6