July 2020 - Wine-Bugs - list.winehq.org

[Bug 35284] New: Polar WebSync client fails to communicate with 'polard' service (WS2_AcceptEx with zero 'local_addr_len' parameter)
by wine-bugs＠winehq.org March 20, 2021

March 20, 2021

http://bugs.winehq.org/show_bug.cgi?id=35284 Bug ID: 35284 Summary: Polar WebSync client fails to communicate with 'polard' service (WS2_AcceptEx with zero 'local_addr_len' parameter) Product: Wine Version: 1.7.9 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: winsock Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, a guy in #winehq reported this problem. --- quote --- <focht> this app: http://www.polar.com/en/support/downloads/Polar_WebSync_Software ? ... <lars_> focht: yes, I downloaded it from there <lars_> I'm gonna have to fix a crying baby so gtg. Thanks for the help! ... --- quote --- He 'fixes' the baby - I take care of the bug (which is much easier) :) 'Polar Daemon' is registered as auto-start Windows service and communicates over sockets with the client (gui app). Trace log (filtered for service thread 002a to avoid all the noise from other processes/threads): --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Polar/WebSync $ WINEDEBUG=+tid,+seh,+relay,+service,+snoop,+winsock, wine ./WebSync.exe >>log.txt 2>&1 ... 002a:trace:winsock:WSAStartup verReq=202 002a:trace:winsock:WSAStartup succeeded 002a:Ret ws2_32.WSAStartup() retval=00000000 ret=10176d80 002a:Call ws2_32.WSADuplicateSocketW(000000b0,00000021,0086e0bc) ret=10176e0d 002a:trace:winsock:WS_DuplicateSocket (unicode 1, socket 00b0, processid 21, buffer 0x86e0bc) 002a:Call KERNEL32.OpenProcess(00000040,00000000,00000021) ret=7e9a49b4 002a:Ret KERNEL32.OpenProcess() retval=000000b4 ret=7e9a49b4 002a:Call KERNEL32.DuplicateHandle(ffffffff,000000b0,000000b4,0086e0c4,00000000,00000000,00000002) ret=7e9a4a5d 002a:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=7e9a4a5d 002a:Call KERNEL32.CloseHandle(000000b4) ret=7e9a4a6b 002a:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e9a4a6b 002a:Ret ws2_32.WSADuplicateSocketW() retval=00000000 ret=10176e0d 002a:Call ws2_32.WSASocketW(00000002,00000001,00000006,00000000,00000000,00000001) ret=10176e36 002a:trace:winsock:WSASocketW af=2 type=1 protocol=6 protocol_info=(nil) group=0 flags=0x1 002a:trace:winsock:WSASocketW created 00b4 002a:Ret ws2_32.WSASocketW() retval=000000b4 ret=10176e36 ... 002a:Call ws2_32.WSAIoctl(000000b4,c8000006,0086e488,00000010,0086e484,00000004,0086e480,00000000,00000000) ret=10204134 002a:trace:winsock:WSAIoctl 180, 0xc8000006, 0x86e488, 16, 0x86e484, 4, 0x86e480, (nil), (nil) 002a:Ret ws2_32.WSAIoctl() retval=00000000 ret=10204134 002a:Call ws2_32.WSAIoctl(000000b4,c8000006,0086e4a4,00000010,0086e4a0,00000004,0086e480,00000000,00000000) ret=1020415f 002a:trace:winsock:WSAIoctl 180, 0xc8000006, 0x86e4a4, 16, 0x86e4a0, 4, 0x86e480, (nil), (nil) 002a:Ret ws2_32.WSAIoctl() retval=00000000 ret=1020415f 002a:Call KERNEL32.CreateEventW(00000000,00000001,00000000,00000000) ret=1020418a 002a:Ret KERNEL32.CreateEventW() retval=000000d0 ret=1020418a ... 002a:trace:winsock:WS2_AcceptEx (b0, b4, 0x148928, 0, 0, 32, 0x86e480, 0x86e46c) 002a:Call ws2_32.WSAGetLastError() ret=102041f3 002a:Ret ws2_32.WSAGetLastError() retval=00002726 ret=102041f3 002a:Call ws2_32.WSAGetLastError() ret=1020431c 002a:Ret ws2_32.WSAGetLastError() retval=00002726 ret=1020431c 002a:Call KERNEL32.GetLastError() ret=10204329 002a:Ret KERNEL32.GetLastError() retval=00002726 ret=10204329 002a:Call KERNEL32.CloseHandle(000000d0) ret=10204350 002a:Ret KERNEL32.CloseHandle() retval=00000001 ret=10204350 ... 002a:Call ws2_32.WSAGetLastError() ret=10204527 002a:Ret ws2_32.WSAGetLastError() retval=00002726 ret=10204527 ... 002a:Call KERNEL32.GetLastError() ret=101d2dbd 002a:Ret KERNEL32.GetLastError() retval=00002726 ret=101d2dbd 002a:Call msvcp90.??0?$basic_string(a)GU?$char_traits(a)G@std@@V?$allocator(a)G@2@@std@@QAE(a)XZ(0014892c) ret=101d078c 002a:Ret msvcp90.??0?$basic_string(a)GU?$char_traits(a)G@std@@V?$allocator(a)G@2@@std@@QAE(a)XZ() retval=0014892c ret=101d078c 002a:Call KERNEL32.FormatMessageW(00001300,00000000,00002726,00000409,0086e394,00000000,00000000) ret=101d07ba 002a:Ret KERNEL32.FormatMessageW() retval=00000000 ret=101d07ba 002a:Call KERNEL32.FormatMessageW(00001300,00000000,00000507,00000409,0086e394,00000000,00000000) ret=101d07e2 002a:Ret KERNEL32.FormatMessageW() retval=00000000 ret=101d07e2 002a:Call msvcrt._CxxThrowException(0086e400,1029fe24) ret=10204777 002a:Call KERNEL32.RaiseException(e06d7363,00000001,00000003,0086e374) ret=7e7813a1 002a:trace:seh:raise_exception code=e06d7363 flags=1 addr=0x7b83a89f ip=7b83a89f tid=002a 002a:trace:seh:raise_exception info[0]=19930520 002a:trace:seh:raise_exception info[1]=0086e400 002a:trace:seh:raise_exception info[2]=1029fe24 002a:trace:seh:raise_exception eax=7b826921 ebx=7b8ba000 ecx=19930520 edx=0086e2c4 esi=0086e370 edi=0086e330 002a:trace:seh:raise_exception ebp=0086e308 esp=0086e2a4 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000283 --- snip --- The problem is the overly strict parameter check in WS2_AcceptEx(): Source: http://source.winehq.org/git/wine.git/blob/719715c77426c7cb759a012d24f89862… --- snip --- 2361 static BOOL WINAPI WS2_AcceptEx(SOCKET listener, SOCKET acceptor, PVOID dest, DWORD dest_len, 2362 DWORD local_addr_len, DWORD rem_addr_len, LPDWORD received, 2363 LPOVERLAPPED overlapped) 2364 { 2365 DWORD status; 2366 struct ws2_accept_async *wsa; 2367 int fd; 2368 ULONG_PTR cvalue = (overlapped && ((ULONG_PTR)overlapped->hEvent & 1) == 0) ? (ULONG_PTR)overlapped : 0; 2369 2370 TRACE("(%lx, %lx, %p, %d, %d, %d, %p, %p)\n", listener, acceptor, dest, dest_len, local_addr_len, 2371 rem_addr_len, received, overlapped); 2372 ... 2384 2385 if ((local_addr_len < sizeof(struct sockaddr_in) + 16) 2386 || (rem_addr_len < sizeof(struct sockaddr_in) + 16)) 2387 { 2388 SetLastError(WSAEINVAL); 2389 return FALSE; 2390 } ... --- snip --- The app passes zero 'local_addr_len' which fails the parameter input check. With that part fixed, the service successfully initializes and the client can communicate with the service over sockets. The client software (gui wizard) then waits for some USB smart device (Polar RC3 GPS watch) to be plugged in. --- Unrelated to this service/winsock problem but still useful information: The service registers a device notification callback which is probably triggered when the device has been recognized (PnP manager). That stuff is currently missing in Wine but even then ... 'dmesg' output from IRC user: --- snip --- [ 6188.997849] usb 3-2.3: new full-speed USB device number 8 using uhci_hcd [ 6189.150832] usb 3-2.3: New USB device found, idVendor=0da4, idProduct=0006 [ 6189.150838] usb 3-2.3: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 6189.150842] usb 3-2.3: Product: Polar RC3 GPS [ 6189.150845] usb 3-2.3: Manufacturer: Polar Electro [ 6189.150848] usb 3-2.3: SerialNumber: 21BF9A4626001B00 [ 6199.157802] hid-generic 0003:0DA4:0006.0005: timeout initializing reports [ 6199.158076] hid-generic 0003:0DA4:0006.0005: hiddev0,hidraw4: USB HID v1.01 Device [Polar Electro Polar RC3 GPS] on usb-0000:00:1a.0-2.3/input0 --- snip --- Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 12

[Bug 45743] New: Firefox crashes on startup due to missing pipe server object type information (needed for Gecko's HandleDispatcher::DuplicateHandleProxy)
by wine-bugs＠winehq.org March 20, 2021

March 20, 2021

https://bugs.winehq.org/show_bug.cgi?id=45743 Bug ID: 45743 Summary: Firefox crashes on startup due to missing pipe server object type information (needed for Gecko's HandleDispatcher::DuplicateHandleProxy) Product: Wine Version: 3.14 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wineserver Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files (x86)/Mozilla Firefox $ WINEDEBUG=+pid,+seh,+loaddll,+process,+relay,+ntdll,+server wine ./firefox.exe >>log.txt 2>&1 ... 0008:0055:Starting thread proc 0x7bca4d0b (arg=0x2cb4a980) ... 0008:0055:Call KERNEL32.GetProcAddress(7bc30000,00427c48 "NtQueryObject") ret=004232be 0008:0055:Ret KERNEL32.GetProcAddress() retval=7bc37154 ret=004232be 0008:0055:Call KERNEL32.DuplicateHandle(00000328,000000f0,ffffffff,3030fb70,00000000,00000000,00000002) ret=0041444c 0008:0055:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=0041444c 0008:0055:Call KERNEL32.GetLastError() ret=0040ba5d 0008:0055:Ret KERNEL32.GetLastError() retval=00000000 ret=0040ba5d 0008:0055:Call ntdll.NtQueryObject(000003f8,00000002,3030fb90,0000009e,3030fb6c) ret=0041449f 0008:0055:trace:ntdll:NtQueryObject (0x3f8,0x00000002,0x3030fb90,0x0000009e,0x3030fb6c) 0008:0055:Ret ntdll.NtQueryObject() retval=00000000 ret=0041449f 0008:0055:Call ntdll.wcslen(3030fbf0 L"Section") ret=0041673c 0008:0055:Ret ntdll.wcslen() retval=00000007 ret=0041673c 0008:0055:Call ntdll.wcslen(3030fbf0 L"Section") ret=0041673c 0008:0055:Ret ntdll.wcslen() retval=00000007 ret=0041673c 0008:0055:Call ntdll.RtlCompareUnicodeString(3030fa9c,3030faac,00000001) ret=004167bb 0008:0055:Ret ntdll.RtlCompareUnicodeString() retval=00000000 ret=004167bb 0008:0055:Call KERNEL32.DuplicateHandle(ffffffff,000003f8,ffffffff,3030fc8c,000f0006,00000000,00000000) ret=0041481f 0008:0055:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=0041481f 0008:0055:Call KERNEL32.CloseHandle(000003f8) ret=0040177b 0008:0055:Ret KERNEL32.CloseHandle() retval=00000001 ret=0040177b 0008:0055:Call ucrtbase.memset(2d07e1a0,000000e5,000000a0) ret=1000603f 0008:0055:Ret ucrtbase.memset() retval=2d07e1a0 ret=1000603f 0008:0055:Call KERNEL32.SetEvent(00000338) ret=00420f64 0008:0055:Ret KERNEL32.SetEvent() retval=00000001 ret=00420f64 0008:0055:Call ucrtbase.memset(3030fd24,00000000,00000034) ret=00420f32 0008:0055:Ret ucrtbase.memset() retval=3030fd24 ret=00420f32 0008:0055:Call ucrtbase.memcpy(30e843e0,2cff0094,00000098) ret=00410459 0008:0055:Ret ucrtbase.memcpy() retval=30e843e0 ret=00410459 0008:0055:Call ucrtbase.memset(3030fc74,00000000,0000003c) ret=00420bfb 0008:0055:Ret ucrtbase.memset() retval=3030fc74 ret=00420bfb 0008:0055:Call ucrtbase.memcmp(00428b6c,3030fcb0,00000028) ret=00422697 0008:0055:Ret ucrtbase.memcmp() retval=ffffffff ret=00422697 0008:0055:Call ucrtbase.memcmp(00428b94,3030fcb0,00000028) ret=004226ab 0008:0055:Ret ucrtbase.memcmp() retval=ffffffff ret=004226ab 0008:0055:Call ucrtbase.memcmp(2ff07370,3030fcb0,00000028) ret=004106ca 0008:0055:Ret ucrtbase.memcmp() retval=00000000 ret=004106ca 0008:0055:Call KERNEL32.DuplicateHandle(00000328,00000170,ffffffff,3030fb70,00000000,00000000,00000002) ret=0041444c 0008:0055:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=0041444c 0008:0055:Call KERNEL32.GetLastError() ret=0040ba5d 0008:0055:Ret KERNEL32.GetLastError() retval=00000000 ret=0040ba5d 0008:0055:Call ntdll.NtQueryObject(00000408,00000002,3030fb90,0000009e,3030fb6c) ret=0041449f 0008:0055:trace:ntdll:NtQueryObject (0x408,0x00000002,0x3030fb90,0x0000009e,0x3030fb6c) 0008:0055:Ret ntdll.NtQueryObject() retval=00000000 ret=0041449f 0008:0055:trace:seh:raise_exception code=c0000005 flags=0 addr=0x4144ba ip=004144ba tid=0055 0008:0055:trace:seh:raise_exception info[0]=00000001 0008:0055:trace:seh:raise_exception info[1]=00000000 0008:0055:trace:seh:raise_exception eax=00000000 ebx=00000000 ecx=00000000 edx=00000000 esi=3030fc74 edi=00000002 0008:0055:trace:seh:raise_exception ebp=3030fc34 esp=3030fb58 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010246 0008:0055:trace:seh:call_vectored_handlers calling handler at 0x16d95c3 code=c0000005 flags=0 0008:0055:trace:seh:call_vectored_handlers handler at 0x16d95c3 returned 0 0008:0055:trace:seh:call_stack_handlers calling handler at 0x7bcb3bc4 code=c0000005 flags=0 0008:0055:Call KERNEL32.UnhandledExceptionFilter(3030f654) ret=7bcb3bff ... --- snip --- Tracing the handle back across multiple dupes: --- snip --- ... 0008:002c:Call advapi32.CreateProcessAsUserW(0000031c,2f832a50 L"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe",2fae7800 L"\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" -contentproc --channel=\"8.0.218090689\\870550889\" -childID 1 -isForBrowser -prefsHandle 756 -prefsLen 5527 -schedulerPrefs 0001,2 -greomni \"C:\\Program Files (x86)\\Mozilla Firefox\\omni.ja\" -appomni \"C:\\Program Files (x86)\\Mozilla Fire"...,00000000,00000000,00000001,0108040c,3041c020,00000000,09c2f0b0,09c2ef94) ret=00422051 ... 002c: new_process( inherit_all=1, create_flags=0108040c, socket_fd=194, exe_file=0318, process_access=001fffff, process_attr=00000000, thread_access=001fffff, thread_attr=00000000, cpu=x86, info_size=1482, ... 002c: new_process() = 0 { info=0320, pid=0056, phandle=0328, tid=0057, thandle=032c } ... 0056:0057:Call KERNEL32.CreateNamedPipeW(010acf40 L"\\\\.\\pipe\\chrome.86.0.22204864",40080003,00000000,00000001,00001000,00001000,00001388,00000000) ret=023d5c1f 0056:0057:trace:ntdll:NtCreateNamedPipeFile (0x33d6dc c0180000 L"\\??\\pipe\\chrome.86.0.22204864" 0x33d6b4 3 5 0 0 0 0 1 4096 4096 0x33d6a8) 0057: create_named_pipe( access=c0180000, options=00000000, sharing=00000003, maxinstances=00000001, outsize=00001000, insize=00001000, timeout=+5.0000000, flags=00000000, objattr={rootdir=0000,attributes=00000040,sd={},name=L"\\??\\pipe\\chrome.86.0.22204864"} ) 0057: create_named_pipe() = 0 { handle=0164 } ... 0057: dup_handle( src_process=ffffffff, src_handle=0164, dst_process=ffffffff, access=00000000, attributes=00000000, options=00000002 ) 0057: dup_handle() = 0 { handle=0168, self=1, closed=0 } ... 0057: dup_handle( src_process=ffffffff, src_handle=0168, dst_process=ffffffff, access=00000000, attributes=00000000, options=00000002 ) 0057: dup_handle() = 0 { handle=0170, self=1, closed=0 } .... 0008:0055:Call KERNEL32.DuplicateHandle(00000328,00000170,ffffffff,3030fb70,00000000,00000000,00000002) ret=0041444c 0055: dup_handle( src_process=0328, src_handle=0170, dst_process=ffffffff, access=00000000, attributes=00000000, options=00000002 ) 0055: dup_handle() = 0 { handle=0408, self=0, closed=0 } 0008:0055:Ret KERNEL32.DuplicateHandle() retval=00000001 ret=0041444c ... 0008:0055:Call ntdll.NtQueryObject(00000408,00000002,3030fb90,0000009e,3030fb6c) ret=0041449f 0008:0055:trace:ntdll:NtQueryObject (0x408,0x00000002,0x3030fb90,0x0000009e,0x3030fb6c) 0055: get_object_type( handle=0408 ) 0055: get_object_type() = 0 { total=0, type=L"" } 0008:0055:Ret ntdll.NtQueryObject() retval=00000000 ret=0041449f --- snip --- Wineserver debug session: --- snip --- ... (gdb) b no_get_type Breakpoint 1 at 0x42c1a2: file /home/focht/projects/wine/mainline-src/server/object.c, line 499. (gdb) c Continuing. Breakpoint 1, no_get_type (obj=0x269c3e0) at /home/focht/projects/wine/mainline-src/server/object.c:499 499 return NULL; (gdb) bt #0 no_get_type (obj=0x269c3e0) at /home/focht/projects/wine/mainline-src/server/object.c:499 #1 0x0000000000415d55 in req_get_object_type (req=0x2692170, reply=0x7fff998dce50) at /home/focht/projects/wine/mainline-src/server/directory.c:524 #2 0x0000000000445c6d in call_req_handler (thread=0x2692020) at /home/focht/projects/wine/mainline-src/server/request.c:303 #3 0x0000000000445e02 in read_request (thread=0x2692020) at /home/focht/projects/wine/mainline-src/server/request.c:337 #4 0x000000000044e264 in thread_poll_event (fd=0x2692250, event=1) at /home/focht/projects/wine/mainline-src/server/thread.c:272 #5 0x0000000000417188 in fd_poll_event (fd=0x2692250, event=1) at /home/focht/projects/wine/mainline-src/server/fd.c:457 #6 0x000000000041756a in main_loop_epoll () at /home/focht/projects/wine/mainline-src/server/fd.c:552 #7 0x0000000000417b80 in main_loop () at /home/focht/projects/wine/mainline-src/server/fd.c:897 #8 0x0000000000423b73 in main (argc=3, argv=0x7fff998dd688) at /home/focht/projects/wine/mainline-src/server/main.c:148 (gdb) p *req $10 = {__header = {req = 256, request_size = 0, reply_size = 62}, handle = 1032} (gdb) p *obj $9 = {refcount = 4, handle_count = 3, ops = 0x47ee80 <pipe_server_ops>, wait_queue = {next = 0x269c3f0, prev = 0x269c3f0}, name = 0x0, sd = 0x0, obj_list = {next = 0x26a3620, prev = 0x26a8090}} --- snip --- I found the involved source code here: https://github.com/mozilla/gecko-dev/blob/HEAD/security/sandbox/chromium/sa… --- snip --- bool HandleDispatcher::DuplicateHandleProxy(IPCInfo* ipc, HANDLE source_handle, uint32_t target_process_id, uint32_t desired_access, uint32_t options) { static NtQueryObject QueryObject = NULL; if (!QueryObject) ResolveNTFunctionPtr("NtQueryObject", &QueryObject); // Get a copy of the handle for use in the broker process. HANDLE handle_temp; if (!::DuplicateHandle(ipc->client_info->process, source_handle, ::GetCurrentProcess(), &handle_temp, 0, FALSE, DUPLICATE_SAME_ACCESS | options)) { ipc->return_info.win32_result = ::GetLastError(); return false; } options &= ~DUPLICATE_CLOSE_SOURCE; base::win::ScopedHandle handle(handle_temp); // Get the object type (32 characters is safe; current max is 14). BYTE buffer[sizeof(OBJECT_TYPE_INFORMATION) + 32 * sizeof(wchar_t)]; OBJECT_TYPE_INFORMATION* type_info = reinterpret_cast<OBJECT_TYPE_INFORMATION*>(buffer); ULONG size = sizeof(buffer) - sizeof(wchar_t); NTSTATUS error = QueryObject(handle.Get(), ObjectTypeInformation, type_info, size, &size); if (!NT_SUCCESS(error)) { ipc->return_info.nt_status = error; return false; } type_info->Name.Buffer[type_info->Name.Length / sizeof(wchar_t)] = L'\0'; CountedParameterSet<HandleTarget> params; params[HandleTarget::NAME] = ParamPickerMake(type_info->Name.Buffer); params[HandleTarget::TARGET] = ParamPickerMake(target_process_id); EvalResult eval = policy_base_->EvalPolicy(IPC_DUPLICATEHANDLEPROXY_TAG, params.GetBase()); ipc->return_info.win32_result = HandlePolicy::DuplicateHandleProxyAction(eval, handle.Get(), target_process_id, &ipc->return_info.handle, desired_access, options); return true; } --- snip --- Used in several places: https://github.com/mozilla/gecko-dev/search?q=DuplicateHandleProxy Wine source: https://source.winehq.org/git/wine.git/blob/d4e0f0a12fdca62fea49a635418d19e… --- snip --- static const struct object_ops pipe_server_ops = 155 { 156 sizeof(struct pipe_server), /* size */ 157 pipe_server_dump, /* dump */ 158 no_get_type, /* get_type */ 159 add_queue, /* add_queue */ ... --- snip --- Although not strictly needed it might be worth to return type names for these too (touches same file): * pipe_client * named_pipe $ sha1sum Firefox\ Setup\ 61.0.2.exe cbda1b0eaf06486ac0dc8cd29df386d75dc1107c Firefox Setup 61.0.2.exe $ du -sh Firefox\ Setup\ 61.0.2.exe 35M Firefox Setup 61.0.2.exe $ wine --version wine-3.14-323-g6edf38c205 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 9

[Bug 44573] New: Amazon Workspaces: Crashed after login.
by wine-bugs＠winehq.org March 20, 2021

March 20, 2021

https://bugs.winehq.org/show_bug.cgi?id=44573 Bug ID: 44573 Summary: Amazon Workspaces: Crashed after login. Product: Wine Version: unspecified Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: menelaosbgr(a)gmail.com Distribution: --- Created attachment 60543 --> https://bugs.winehq.org/attachment.cgi?id=60543 Attached is the backtrace. So I decided to try amazon workspaces with cross-over. I got to the point of being able to log-on but then everything crashed. Attached is the backtrace. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 45784] New: Bethesda Launcher Updater crashes on unimplemented function msvcp110.xtime_get
by wine-bugs＠winehq.org March 19, 2021

March 19, 2021

https://bugs.winehq.org/show_bug.cgi?id=45784 Bug ID: 45784 Summary: Bethesda Launcher Updater crashes on unimplemented function msvcp110.xtime_get Product: Wine Version: 3.15 Hardware: x86-64 URL: http://download.cdp.bethesda.net/BethesdaNetLauncher_S etup.exe OS: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: msvcp Assignee: wine-bugs(a)winehq.org Reporter: gijsvrm(a)gmail.com Distribution: SUSE Created attachment 62240 --> https://bugs.winehq.org/attachment.cgi?id=62240 log When the installer finishes, the updater will be automatically launched. Attached is a patch that fixes this issue and will make it run into the next problem. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 9

[Bug 45785] New: Bethesda Launcher Updater crashes on unimplemented function msvcp110._Xtime_diff_to_millis2
by wine-bugs＠winehq.org March 19, 2021

March 19, 2021

https://bugs.winehq.org/show_bug.cgi?id=45785 Bug ID: 45785 Summary: Bethesda Launcher Updater crashes on unimplemented function msvcp110._Xtime_diff_to_millis2 Product: Wine Version: 3.15 Hardware: x86-64 URL: http://download.cdp.bethesda.net/BethesdaNetLauncher_S etup.exe OS: Linux Status: NEW Keywords: download, patch Severity: normal Priority: P2 Component: msvcp Assignee: wine-bugs(a)winehq.org Reporter: gijsvrm(a)gmail.com Depends on: 45784 Blocks: 45538 Distribution: SUSE Created attachment 62242 --> https://bugs.winehq.org/attachment.cgi?id=62242 log When the installer finishes, the updater will be automatically launched. Attached in the next comment is a patch that fixes this issue and will make it run into the next problem. I tested in an OpenSUSE Leap 15 VM. $ sha1sum BethesdaNetLauncher_Setup.exe e7fd5dc4e7e2d929cb2db60e38aa9387908f929f BethesdaNetLauncher_Setup.exe -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 7

[Bug 45538] New: App crashes anytime clipboard copy command executes ( ctrl-v or right-click copy)
by wine-bugs＠winehq.org March 19, 2021

March 19, 2021

https://bugs.winehq.org/show_bug.cgi?id=45538 Bug ID: 45538 Summary: App crashes anytime clipboard copy command executes (ctrl-v or right-click copy) Product: Wine Version: 3.13 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msvcrt Assignee: wine-bugs(a)winehq.org Reporter: avanbecelaere(a)gmail.com Distribution: --- Using ElementaryOS Loki (Ubuntu 16.04) All worked fine until a recent update to Wine 3.13, as far as I can tell. Crash output: *************** Unhandled exception: unimplemented function msvcr120.dll.?wait(a)Concurrency@@YAXI(a)Z called in 32-bit code (0x7b43d04c). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:7b43d04c ESP:15eefaa4 EBP:15eefb28 EFLAGS:00000212( - -- I -A- - ) EAX:7b42968d EBX:00000004 ECX:15eefad0 EDX:15eefb4c ESI:7dc7d440 EDI:80000010 Stack dump: 0x15eefaa4: 00000001 7bc94595 15eefad0 15eefb24 0x15eefab4: 00000001 15eefaf8 80000100 00000001 0x15eefac4: 00000000 7b43d04c 00000002 7dc7d440 0x15eefad4: 7dc7ee99 00000000 00001000 c0f2dcc4 0x15eefae4: 01d42825 15eefb10 2c965700 15eefb10 0x15eefaf4: 00000000 02fa9a90 00000000 000f4240 Backtrace: =>0 0x7b43d04c in kernel32 (+0x1d04c) (0x15eefb28) 1 0x7dc7ce37 in msvcr120 (+0x7ce36) (0x15eefb60) 2 0x7dc08615 in msvcr120 (+0x8614) (0x15eefbb0) 3 0x10d15015 in pcoip_vchan_clipboard (+0x15014) (0x15eefbb0) 4 0x10d1b1bf in pcoip_vchan_clipboard (+0x1b1be) (0x15eefc0c) 5 0x10d1d060 in pcoip_vchan_clipboard (+0x1d05f) (0x15eefc28) 6 0x7e9da2ca WINPROC_wrapper+0x19() in user32 (0x15eefc58) 7 0x7e9da909 in user32 (+0x9a908) (0x15eefca8) 8 0x7e9dce33 in user32 (+0x9ce32) (0x15eefcf8) 9 0x7e99ea3c DispatchMessageA+0x9b() in user32 (0x15eefe08) 10 0x10d1c8b5 in pcoip_vchan_clipboard (+0x1c8b4) (0x15eefea0) 11 0x10d17c32 in pcoip_vchan_clipboard (+0x17c31) (0x15eefec8) 12 0x7bc800d4 call_thread_func_wrapper+0xb() in ntdll (0x15eefedc) 13 0x7bc83609 in ntdll (+0x73608) (0x15eeffdc) 14 0x7bc800c6 call_thread_exit_func+0x31() in ntdll (0x15eeffec) 0x7b43d04c: addl $12,%esp Modules: Module Address Debug info Name (208 modules) PE 340000- 373000 Deferred qt5webkitwidgets PE 380000- 3a7000 Deferred qt5sensors PE 3b0000- 3da000 Deferred qt5positioning PE 3e0000- 3f6000 Deferred qt5webchannel PE 400000- 8e3000 Deferred workspaces PE 8f0000- c3e000 Deferred qt5gui PE c40000- d9a000 Deferred libglesv2 PE da0000- ef0000 Deferred icuuc53 PE ef0000- 1f8f000 Deferred qt5webkit PE 1f90000- 21dd000 Deferred qt5quick PE 21e0000- 2266000 Deferred qt5multimedia PE 2270000- 2282000 Deferred libegl PE 2290000- 22a8000 Deferred qt5multimediawidgets PE 22b0000- 22f4000 Deferred qt5printsupport PE 2300000- 2b67000 Deferred a2stunneling PE 2b70000- 2d21000 Deferred a2ssignaling PE 2d30000- 32d8000 Deferred pcoip_core PE 32e0000- 32ec000 Deferred pthreadvc2 PE 32f0000- 32f6000 Deferred pcoip_version PE 3300000- 343b000 Deferred libeay32 PE 3440000- 3487000 Deferred ssleay32 PE 3490000- 368b000 Deferred qt5declarative PE 3690000- 37ac000 Deferred qt5script PE 37b0000- 3814000 Deferred broker_client_utils PE 3ca0000- 3d84000 Deferred qwindows PE 42e0000- 42eb000 Deferred qgif PE 4950000- 495b000 Deferred qico PE 4a70000- 4aaf000 Deferred qjpeg PE 4ab0000- 4aeb000 Deferred qmng PE 4af0000- 4af9000 Deferred qsvg PE 4c10000- 4c50000 Deferred qt5svg PE 4c50000- 4c59000 Deferred qtga PE 4c60000- 4cb0000 Deferred qtiff PE 10000000-10124000 Deferred winsparkle PE 10d00000-10d52000 Export pcoip_vchan_clipboard PE 4a900000-4aae7000 Deferred icuin53 PE 4ad00000-4c18a000 Deferred icudt53 PE 61000000-61260000 Deferred qt5xmlpatterns PE 62000000-62029000 Deferred qt5sql PE 63000000-63043000 Deferred qt5opengl PE 64000000-640ce000 Deferred qt5network PE 65000000-65436000 Deferred qt5widgets PE 66000000-66271000 Deferred qt5qml PE 67000000-673e4000 Deferred qt5core ELF 7a800000-7a93d000 Deferred opengl32<elf> \-PE 7a820000-7a93d000 \ opengl32 ELF 7b400000-7b7ec000 Dwarf kernel32<elf> \-PE 7b420000-7b7ec000 \ kernel32 ELF 7bc00000-7bcfe000 Dwarf ntdll<elf> \-PE 7bc10000-7bcfe000 \ ntdll ELF 7c000000-7c004000 Deferred <wine-loader> ELF 7c007000-7c09b000 Deferred gdiplus<elf> \-PE 7c020000-7c09b000 \ gdiplus ELF 7c09b000-7c127000 Deferred libvorbisenc.so.2 ELF 7c127000-7c187000 Deferred libflac.so.8 ELF 7c187000-7c200000 Deferred libsndfile.so.1 ELF 7c416000-7c442000 Deferred libvorbis.so.0 ELF 7c442000-7c4ca000 Deferred libpulsecommon-8.0.so ELF 7c4ca000-7c524000 Deferred libpulse.so.0 ELF 7c710000-7c719000 Deferred libogg.so.0 ELF 7c719000-7c720000 Deferred libasyncns.so.0 ELF 7c720000-7c72a000 Deferred libwrap.so.0 ELF 7c72a000-7c736000 Deferred libjson-c.so.2 ELF 7c756000-7c77f000 Deferred winepulse<elf> \-PE 7c760000-7c77f000 \ winepulse ELF 7c77f000-7c7a2000 Deferred mmdevapi<elf> \-PE 7c780000-7c7a2000 \ mmdevapi ELF 7c7e6000-7c7fb000 Deferred schannel<elf> \-PE 7c7f0000-7c7fb000 \ schannel ELF 7c7fb000-7c818000 Deferred wintab32<elf> \-PE 7c800000-7c818000 \ wintab32 ELF 7c85e000-7c878000 Deferred cryptnet<elf> \-PE 7c860000-7c878000 \ cryptnet ELF 7c878000-7c8b7000 Deferred rsaenh<elf> \-PE 7c880000-7c8b7000 \ rsaenh ELF 7c8b7000-7c8cf000 Deferred userenv<elf> \-PE 7c8c0000-7c8cf000 \ userenv ELF 7c9cf000-7c9e5000 Deferred libgpg-error.so.0 ELF 7c9e5000-7ca5a000 Deferred libpcre.so.3 ELF 7ca5a000-7ca77000 Deferred libgcc_s.so.1 ELF 7ca77000-7cb26000 Deferred libgcrypt.so.20 ELF 7cb26000-7cb4c000 Deferred liblzma.so.5 ELF 7cb4c000-7cb55000 Deferred librt.so.1 ELF 7cb55000-7cb7b000 Deferred libselinux.so.1 ELF 7cb7b000-7cc09000 Deferred libsystemd.so.0 ELF 7cc09000-7cc63000 Deferred libdbus-1.so.3 ELF 7cc63000-7cc70000 Deferred libkrb5support.so.0 ELF 7cc70000-7cca1000 Deferred libk5crypto.so.3 ELF 7cca1000-7cd77000 Deferred libkrb5.so.3 ELF 7cd77000-7cdfe000 Deferred libcups.so.2 ELF 7ce7a000-7ce81000 Deferred libnss_dns.so.2 ELF 7ce81000-7ce86000 Deferred libkeyutils.so.1 ELF 7ce86000-7ce8b000 Deferred libcom_err.so.2 ELF 7ce8b000-7ce9f000 Deferred libavahi-client.so.3 ELF 7ce9f000-7cead000 Deferred libavahi-common.so.3 ELF 7cead000-7ceff000 Deferred libgssapi_krb5.so.2 ELF 7ceff000-7cf8b000 Deferred libgmp.so.10 ELF 7cf8b000-7cfc0000 Deferred libhogweed.so.4 ELF 7cfc0000-7cffd000 Deferred libnettle.so.6 ELF 7cffd000-7d031000 Deferred libidn.so.11 ELF 7d031000-7d092000 Deferred libp11-kit.so.0 ELF 7d092000-7d1ea000 Deferred libgnutls.so.30 ELF 7d1f0000-7d20a000 Deferred kerberos<elf> \-PE 7d200000-7d20a000 \ kerberos ELF 7d20a000-7d242000 Deferred uxtheme<elf> \-PE 7d210000-7d242000 \ uxtheme ELF 7d242000-7d249000 Deferred libxfixes.so.3 ELF 7d249000-7d255000 Deferred libxcursor.so.1 ELF 7d255000-7d268000 Deferred libxi.so.6 ELF 7d268000-7d26c000 Deferred libxcomposite.so.1 ELF 7d26c000-7d279000 Deferred libxrandr.so.2 ELF 7d279000-7d285000 Deferred libxrender.so.1 ELF 7d285000-7d28c000 Deferred libxxf86vm.so.1 ELF 7d28c000-7d290000 Deferred libxinerama.so.1 ELF 7d290000-7d297000 Deferred libxdmcp.so.6 ELF 7d297000-7d29b000 Deferred libxau.so.6 ELF 7d29b000-7d2c1000 Deferred libxcb.so.1 ELF 7d2c1000-7d40c000 Deferred libx11.so.6 ELF 7d40c000-7d421000 Deferred libxext.so.6 ELF 7d421000-7d42a000 Deferred libffi.so.6 ELF 7d42a000-7d43f000 Deferred libtasn1.so.6 ELF 7d441000-7d4d2000 Deferred winex11<elf> \-PE 7d450000-7d4d2000 \ winex11 ELF 7d598000-7d5c2000 Deferred libexpat.so.1 ELF 7d5c2000-7d60b000 Deferred libfontconfig.so.1 ELF 7d60b000-7d636000 Deferred libpng12.so.0 ELF 7d636000-7d6e6000 Deferred libfreetype.so.6 ELF 7d706000-7d773000 Deferred setupapi<elf> \-PE 7d710000-7d773000 \ setupapi ELF 7d773000-7d788000 Deferred winusb<elf> \-PE 7d780000-7d788000 \ winusb ELF 7d788000-7d7ef000 Deferred dbghelp<elf> \-PE 7d790000-7d7ef000 \ dbghelp ELF 7d7ef000-7d80d000 Deferred msdmo<elf> \-PE 7d7f0000-7d80d000 \ msdmo ELF 7d80d000-7d842000 Deferred secur32<elf> \-PE 7d810000-7d842000 \ secur32 ELF 7d842000-7d934000 Deferred comdlg32<elf> \-PE 7d850000-7d934000 \ comdlg32 ELF 7d934000-7d974000 Deferred winspool<elf> \-PE 7d940000-7d974000 \ winspool ELF 7d974000-7d995000 Deferred bcrypt<elf> \-PE 7d980000-7d995000 \ bcrypt ELF 7d995000-7da66000 Deferred crypt32<elf> \-PE 7d9a0000-7da66000 \ crypt32 ELF 7da66000-7da90000 Deferred iphlpapi<elf> \-PE 7da70000-7da90000 \ iphlpapi ELF 7da90000-7dac1000 Deferred netapi32<elf> \-PE 7daa0000-7dac1000 \ netapi32 ELF 7dac1000-7dada000 Deferred libresolv.so.2 ELF 7dae5000-7dafa000 Deferred mswsock<elf> \-PE 7daf0000-7dafa000 \ mswsock ELF 7dafa000-7db25000 Deferred msacm32<elf> \-PE 7db00000-7db25000 \ msacm32 ELF 7db25000-7dbde000 Deferred winmm<elf> \-PE 7db30000-7dbde000 \ winmm ELF 7dbde000-7dcca000 Dwarf msvcr120<elf> \-PE 7dc00000-7dcca000 \ msvcr120 ELF 7dcca000-7ddeb000 Deferred msvcp120<elf> \-PE 7dd10000-7ddeb000 \ msvcp120 ELF 7ddeb000-7df36000 Deferred wined3d<elf> \-PE 7de00000-7df36000 \ wined3d ELF 7df36000-7df77000 Deferred d3d9<elf> \-PE 7df40000-7df77000 \ d3d9 ELF 7df77000-7df9b000 Deferred imm32<elf> \-PE 7df80000-7df9b000 \ imm32 ELF 7df9b000-7dfe1000 Deferred usp10<elf> \-PE 7dfa0000-7dfe1000 \ usp10 ELF 7dfe1000-7e11c000 Deferred comctl32<elf> \-PE 7dff0000-7e11c000 \ comctl32 ELF 7e11c000-7e24e000 Deferred oleaut32<elf> \-PE 7e130000-7e24e000 \ oleaut32 ELF 7e24e000-7e3a9000 Deferred ole32<elf> \-PE 7e270000-7e3a9000 \ ole32 ELF 7e3a9000-7e3e3000 Deferred ws2_32<elf> \-PE 7e3b0000-7e3e3000 \ ws2_32 ELF 7e3e3000-7e69b000 Deferred shell32<elf> \-PE 7e3f0000-7e69b000 \ shell32 ELF 7e69b000-7e6c3000 Deferred mpr<elf> \-PE 7e6a0000-7e6c3000 \ mpr ELF 7e6c3000-7e6de000 Deferred libz.so.1 ELF 7e6de000-7e6fe000 Deferred dnsapi<elf> \-PE 7e6e0000-7e6fe000 \ dnsapi ELF 7e6fe000-7e77a000 Deferred wininet<elf> \-PE 7e710000-7e77a000 \ wininet ELF 7e77a000-7e7fb000 Deferred rpcrt4<elf> \-PE 7e790000-7e7fb000 \ rpcrt4 ELF 7e7fb000-7e92a000 Deferred gdi32<elf> \-PE 7e810000-7e92a000 \ gdi32 ELF 7e92a000-7eb30000 Dwarf user32<elf> \-PE 7e940000-7eb30000 \ user32 ELF 7eb30000-7eba6000 Deferred shlwapi<elf> \-PE 7eb40000-7eba6000 \ shlwapi ELF 7eba6000-7ec20000 Deferred advapi32<elf> \-PE 7ebb0000-7ec20000 \ advapi32 ELF 7ef50000-7ef63000 Deferred libnss_files.so.2 ELF 7ef63000-7ef70000 Deferred libnss_nis.so.2 ELF 7ef70000-7ef8b000 Deferred libnsl.so.1 ELF 7ef8b000-7efe0000 Deferred libm.so.6 ELF 7efe6000-7f000000 Deferred version<elf> \-PE 7eff0000-7f000000 \ version ELF f7bba000-f7bbf000 Deferred libdl.so.2 ELF f7bbf000-f7d75000 Deferred libc.so.6 ELF f7d75000-f7d92000 Deferred libpthread.so.0 ELF f7d96000-f7da0000 Deferred libnss_compat.so.2 ELF f7db2000-f7f6a000 Dwarf libwine.so.1 ELF f7f6b000-f7f90000 Deferred ld-linux.so.2 ELF f7f93000-f7f95000 Deferred [vdso].so Threads: process tid prio (all id:s are in hex) 0000000e services.exe 00000025 0 00000022 0 0000001d 0 00000013 0 00000010 0 0000000f 0 00000011 winedevice.exe 0000001a 0 00000017 0 00000016 0 00000012 0 0000001b plugplay.exe 0000001f 0 0000001e 0 0000001c 0 00000020 winedevice.exe 0000002a 0 00000024 0 00000023 0 00000021 0 000000b0 (D) c:\Program Files (x86)\Amazon Web Services, Inc\Amazon WorkSpaces\workspaces.exe 00000031 0 00000030 0 <== 00000136 2 00000132 2 00000131 2 00000130 2 0000012f 2 0000012c 2 00000128 2 00000127 2 00000125 2 00000122 2 0000011f 2 0000011e 2 0000011d 2 0000011c 2 000001aa 2 000000ae 2 000000ad 2 000000aa 2 000000a9 2 000000a8 2 000000a6 2 000000a1 2 0000009f 2 000000a7 2 000000a5 2 000000a4 2 000000a3 2 000000a2 2 000000a0 2 0000009e 2 0000009d 2 0000009c 2 0000009b 15 0000009a 15 00000099 15 00000098 15 00000097 2 00000096 2 00000095 2 00000094 2 00000093 15 00000092 0 00000091 2 00000090 2 0000008e 2 0000008f 2 0000008d 2 0000008c 2 0000008b -1 0000008a 2 00000089 2 00000088 2 00000087 2 00000086 0 00000085 15 00000084 2 00000083 2 00000082 2 00000081 2 00000080 2 0000007f 0 0000007e 0 0000007d 2 0000007c 2 0000007b 2 0000007a -2 00000079 0 00000078 0 00000077 15 00000076 0 00000075 0 00000074 0 00000073 0 00000072 1 00000071 15 00000070 15 00000129 0 000000d1 0 000000ca 0 000000c9 0 000000c8 0 000000c7 0 000000c6 0 000000c3 0 000000c2 0 000000c0 0 000000bd 0 000000ba 0 000000b9 0 000000b8 0 000000b7 0 000000b1 0 000000b3 explorer.exe 000000b6 0 000000b5 0 000000b2 0 000000b4 0 System information: Wine build: wine-3.13 Platform: i386 (WOW64) Version: Windows 8 Host system: Linux Host version: 4.15.0-29-generic -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 14

[Bug 16946] New: Calling CloseServiceHandle() multiple times on same client side service handle corrupts heap
by wine-bugs＠winehq.org March 19, 2021

March 19, 2021

http://bugs.winehq.org/show_bug.cgi?id=16946 Summary: Calling CloseServiceHandle() multiple times on same client side service handle corrupts heap Product: Wine Version: 1.1.12 Platform: Other URL: http://www.nbc.com/Video/NBCDirectInstaller.exe OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: advapi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, I've seen this some time ago but forgot about it until encountering it again recently while investigating bug 16626 (this is follow up bug). Prerequisite: --- snip --- $ rm -rf ~/.wine $ winetricks -q wmp10 dotnet20 mdac28 $ wine NBCDirectInstaller.exe --- snip --- The installer uses managed (.NET) wrapper for SCM to fetch a list of current services using EnumServicesStatus(). First call to EnumServicesStatus() to query for buffer size and second time to get the real list. Although M$ .NET Framework error handling is somewhat questionable (it doesn't even check for failure on first call), it's actually Wine's management of client side service handles that causes the breakage. --- snip --- ... 0009:Call advapi32.OpenSCManagerW(00000000,00000000,00000004) ret=03f72620 0009:trace:service:OpenSCManagerW ((null),(null),0x00000004) 0009:trace:service:sc_handle_alloc sc_handle type=0 -> 0x1b1fc0 ... 0013:trace:service:svcctl_OpenSCManagerW ((null), (null), 4) ... 0009:trace:service:OpenSCManagerW returning 0x1b1fc0 (access : 0x00000004) 0009:Ret advapi32.OpenSCManagerW() retval=001b1fc0 ret=03f72620 ... 0009:Call advapi32.EnumServicesStatusW(001b1fc0,00000030,00000003,00000000,00000000,0032f32c,0032f328,0032f324) ret=03f726df 0009:fixme:service:EnumServicesStatusW 0x1b1fc0 type=30 state=3 (nil) 0 0x32f32c 0x32f328 0x32f324 0009:Ret advapi32.EnumServicesStatusW() retval=00000000 ret=03f726df 0009:Call KERNEL32.GetLastError() ret=03f726e5 0009:Ret KERNEL32.GetLastError() retval=00000005 ret=03f726e5 0009:Call KERNEL32.LocalAlloc(00000000,00000000) ret=04248243 0009:Ret KERNEL32.LocalAlloc() retval=03ec9988 ret=04248243 0009:Call advapi32.EnumServicesStatusW(001b1fc0,00000030,00000003,03ec9988,00000000,0032f32c,0032f328,0032f324) ret=03f726df 0009:fixme:service:EnumServicesStatusW 0x1b1fc0 type=30 state=3 0x3ec9988 0 0x32f32c 0x32f328 0x32f324 0009:Ret advapi32.EnumServicesStatusW() retval=00000000 ret=03f726df 0009:Call KERNEL32.GetLastError() ret=03f726e5 0009:Ret KERNEL32.GetLastError() retval=00000005 ret=03f726e5 ... 0009:Call advapi32.CloseServiceHandle(001b1fc0) ret=007aa722 0009:trace:service:CloseServiceHandle 0x1b1fc0 ... 0009:trace:service:sc_handle_destroy_manager destroying SC Manager 0x1b1fc0 0009:Ret advapi32.CloseServiceHandle() retval=00000001 ret=007aa722 ... --- snip --- Releasing the same client handle again: --- snip --- 0009:Call advapi32.CloseServiceHandle(001b1fc0) ret=007aa722 0009:trace:service:CloseServiceHandle 0x1b1fc0 0009:Call rpcrt4.NdrClientInitializeNew(0032ef8c,0032f06c,60376640,00000000) ret=60366f60 0009:Ret rpcrt4.NdrClientInitializeNew() retval=0032f06c ret=60366f60 0009:Call rpcrt4.NdrGetBuffer(0032f06c,00000018,00000000) ret=60366fbe 0009:err:rpc:I_RpcGetBuffer no binding 0009:Call KERNEL32.RaiseException(000006a6,00000000,00000000,00000000) ret=60b21399 0009:trace:seh:raise_exception code=6a6 flags=0 addr=0x7b844f6c ip=0x7b844fef tid=0009 0009:trace:seh:raise_exception eax=7b82cca9 ebx=7b8c3940 ecx=00000000 edx=00000010 esi=0032ee90 edi=0032ee10 0009:trace:seh:raise_exception ebp=0032edf8 esp=0032ed94 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000246 0009:trace:seh:call_stack_handlers calling handler at 0x60366cec code=6a6 flags=0 0009:trace:seh:call_stack_handlers handler at 0x60366cec returned 1 0009:trace:seh:call_stack_handlers calling handler at 0x6036266f code=6a6 flags=0 0009:Call rpcrt4.I_RpcExceptionFilter(000006a6) ret=60360fdd 0009:Ret rpcrt4.I_RpcExceptionFilter() retval=00000001 ret=60360fdd 0009:trace:seh:__regs_RtlUnwind code=6a6 flags=2 0009:trace:seh:__regs_RtlUnwind calling handler at 0x7bc3b2ec code=6a6 flags=2 0009:trace:seh:__regs_RtlUnwind handler at 0x7bc3b2ec returned 1 0009:trace:seh:__regs_RtlUnwind calling handler at 0x60366cec code=6a6 flags=2 0009:Call rpcrt4.NdrFreeBuffer(0032f06c) ret=60366e7f 0009:Ret rpcrt4.NdrFreeBuffer() retval=00000000 ret=60366e7f 0009:trace:seh:__regs_RtlUnwind handler at 0x60366cec returned 1 0009:Ret advapi32.CloseServiceHandle() retval=00000000 ret=007aa722 --- snip --- Even if RPC code correctly detects invalid SCM handles, the latter sc_handle_free() will eventually corrupt heap which will later lead to breakage. This needs to be avoided at all costs. Second allocation returns garbage sub block due to corrupted heap lists, causing exception. --- snip --- ... 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=79e78360 0009:Ret ntdll.RtlAllocateHeap() retval=001b1fc0 ret=79e78360 0009:Call KERNEL32.GetLastError() ret=79e71862 0009:Ret KERNEL32.GetLastError() retval=000006a6 ret=79e71862 0009:Call ntdll.RtlTryEnterCriticalSection(0013cedc) ret=79e74811 0009:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=79e74811 0009:Call KERNEL32.GetLastError() ret=79e783fb 0009:Ret KERNEL32.GetLastError() retval=000006a6 ret=79e783fb 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=79e78360 0009:Ret ntdll.RtlAllocateHeap() retval=03ec9988 ret=79e78360 0009:Call KERNEL32.GetLastError() ret=79e71862 0009:Ret KERNEL32.GetLastError() retval=000006a6 ret=79e71862 0009:Call KERNEL32.InitializeCriticalSection(03ec9998) ret=79e7a501 0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7bc450bd ip=0x7bc450bd tid=0009 0009:trace:seh:raise_exception info[0]=00000000 0009:trace:seh:raise_exception info[1]=00001796 0009:trace:seh:raise_exception eax=00001796 ebx=7bc9bd90 ecx=7bc9bd90 edx=00110078 esi=00110070 edi=0032f0e4 0009:trace:seh:raise_exception ebp=0032efe8 esp=0032ef80 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010206 0009:trace:seh:call_stack_handlers calling handler at 0x7a322c04 code=c0000005 flags=0 --- snip --- --- snip dlls/advapi32/service.c --- BOOL WINAPI CloseServiceHandle( SC_HANDLE hSCObject ) { struct sc_handle *obj; DWORD err; TRACE("%p\n", hSCObject); if (hSCObject == NULL) { SetLastError(ERROR_INVALID_HANDLE); return FALSE; } obj = (struct sc_handle *)hSCObject; __TRY { err = svcctl_CloseServiceHandle(&obj->server_handle); } __EXCEPT(rpc_filter) { err = map_exception_code(GetExceptionCode()); } __ENDTRY sc_handle_free( obj ); // <---- will eventually corrupt heap! if (err != ERROR_SUCCESS) { SetLastError(err); return FALSE; } return TRUE; } --- snip dlls/advapi32/service.c --- Change the way how client side service handles are managed to avoid heap corruption and allow for multiple service handle close calls. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 8

[Bug 16626] New: NBC Direct installer requires installation of Windows Installer 3.1 redist
by wine-bugs＠winehq.org March 19, 2021

March 19, 2021

http://bugs.winehq.org/show_bug.cgi?id=16626 Summary: NBC Direct installer requires installation of Windows Installer 3.1 redist Product: Wine Version: 1.1.11 Platform: PC URL: http://www.nbc.com/Video/NBCDirectInstaller.exe OS/Version: Linux Status: NEW Keywords: dotnet, download, Installer Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: austinenglish(a)gmail.com CC: focht(a)gmx.net, yolande(a)haneder.biz Created an attachment (id=18188) --> (http://bugs.winehq.org/attachment.cgi?id=18188) terminal output in git Continuing from bug 12477, NBC installer doesn't yet work. Prereq's: $ rm -rf ~/.wine $ winetricks -q wmp10 dotnet20 mdac28 $ wine NBCDirectInstaller.exe Fails with an error box: SetupManager Error 'Failed to update Select Dialog resources from an external resource file. Please verify that the SetupManagerResource.resx files resides beside executable and is valid. Error details: No access to memory location OK Anastasius suggested to file the bug, saying it probably affects more dotnet apps. Terminal output attached. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 12

[Bug 36835] New: Microsoft OneDrive/SkyDrive needs support for Shell32.dll.SHGetKnownFolderPath with 'KNOWNFOLDERID_Links'
by wine-bugs＠winehq.org March 19, 2021

March 19, 2021

https://bugs.winehq.org/show_bug.cgi?id=36835 Bug ID: 36835 Summary: Microsoft OneDrive/SkyDrive needs support for Shell32.dll.SHGetKnownFolderPath with 'KNOWNFOLDERID_Links' Product: Wine Version: 1.7.21 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: shell32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, as the summary says ... The installer needs WINEPREFIX Windows version set to 'Vista' or later. --- snip --- $ WINEDEBUG=+tid,+seh,+relay,+shell wine ./OneDriveSetup.exe >>log2.txt 2>&1 ... 0044:Call shell32.SHGetKnownFolderPath(004053e4,00000000,ffffffff,00bee754) ret=00432f55 0044:trace:shell:SHGetKnownFolderPath {bfb9d5e0-c6a9-404c-b2b2-ae6db6af4968}, 0x00000000, 0xffffffff, 0xbee754 0044:trace:shell:SHGetFolderPathAndSubDirW (nil),0xbee4b0,nFolder=0x004d,(null) 0044:trace:shell:_SHGetUserProfilePath 0xffffffff,0x00000000,0x4d,0xbedfc8 0044:trace:shell:_SHGetUserShellFolderPath 0x80000003,L".Default", ... 0044:trace:shell:_SHGetUserShellFolderPath returning 0x80004005 0044:trace:shell:_SHGetUserShellFolderPath 0x80000002,(null),(null),0xbedfc8 0044:Call advapi32.RegCreateKeyW(80000002,7ebfa220 L"Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Shell Folders",00bedad0) ret=7ebacb12 ... 0044:trace:shell:_SHGetUserShellFolderPath returning 0x80004005 ... 0044:trace:shell:_SHGetUserProfilePath returning 0x00000000 (output path is L"%USERPROFILE%\\Links") 0044:trace:shell:_SHExpandEnvironmentStrings L"%USERPROFILE%\\Links", 0xbee1d0 ... 0044:trace:shell:PathCanonicalizeW (0xbee1d0,L"C:\\users\\focht\\Links") ... 0044:trace:shell:_SHExpandEnvironmentStrings returning 0x00000000 (input was L"%USERPROFILE%\\Links", output is L"C:\\users\\focht\\Links") 0044:Call shlwapi.PathFileExistsW(00bee1d0 L"C:\\users\\focht\\Links") ret=7ebae9eb 0044:trace:shell:PathFileExistsW (L"C:\\users\\focht\\Links") 0044:Call KERNEL32.SetErrorMode(00000001) ret=7eafcd6f 0044:Ret KERNEL32.SetErrorMode() retval=00000000 ret=7eafcd6f 0044:Call KERNEL32.GetFileAttributesW(00bee1d0 L"C:\\users\\focht\\Links") ret=7eafcd7f 0044:Ret KERNEL32.GetFileAttributesW() retval=ffffffff ret=7eafcd7f 0044:Call KERNEL32.SetErrorMode(00000000) ret=7eafcd90 0044:Ret KERNEL32.SetErrorMode() retval=00000001 ret=7eafcd90 0044:Ret shlwapi.PathFileExistsW() retval=00000000 ret=7ebae9eb 0044:trace:shell:SHGetFolderPathAndSubDirW returning 0x80070003 (final path is L"C:\\users\\focht\\Links") 0044:Ret shell32.SHGetKnownFolderPath() retval=80070002 ret=00432f55 0044:Call KERNEL32.GetLastError() ret=00453265 0044:Ret KERNEL32.GetLastError() retval=00000002 ret=00453265 ... 0044:Call KERNEL32.IsDebuggerPresent() ret=0045482b 0044:Ret KERNEL32.IsDebuggerPresent() retval=00000000 ret=0045482b 0044:Call KERNEL32.SetUnhandledExceptionFilter(00000000) ret=00454276 0044:Ret KERNEL32.SetUnhandledExceptionFilter() retval=00452f40 ret=00454276 0044:Call KERNEL32.UnhandledExceptionFilter(00be62b4) ret=0045427f 0044:trace:seh:start_debugger Starting debugger "winedbg --auto 64 208" 0044:Ret KERNEL32.UnhandledExceptionFilter() retval=00000000 ret=0045427f 0044:Call KERNEL32.TerminateProcess(ffffffff,c0000417) ret=00454264 --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/bb762584%28v=VS.85%29.aspx --- quote --- FOLDERID_Links GUID {bfb9d5e0-c6a9-404c-b2b2-ae6db6af4968} Display Name Links Folder Type PERUSER Default Path %USERPROFILE%\Links CSIDL Equivalent None Legacy Display Name Not applicable Legacy Default Path Not applicable --- quote --- Discussion here: https://stackoverflow.com/questions/16656342/how-to-programmatically-add-a-… $ sha1sum OneDriveSetup.exe 172ea5833afcc53b4876cb8d9849ba122e5e9223 OneDriveSetup.exe $ du -sh OneDriveSetup.exe 5.9M OneDriveSetup.exe $ wine --version wine-1.7.21-41-g5af3b8c Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 21783] New: SlingPlayerSetup 2.0.4 causes wine error: Deficiency in wine message just like bug 21567
by wine-bugs＠winehq.org March 19, 2021

March 19, 2021

http://bugs.winehq.org/show_bug.cgi?id=21783 Summary: SlingPlayerSetup 2.0.4 causes wine error: Deficiency in wine message just like bug 21567 Product: Wine Version: 1.1.39 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: currter(a)gmail.com Created an attachment (id=26340) --> (http://bugs.winehq.org/attachment.cgi?id=26340) This is the output/log from SlingPlayer 2.0.4 Setup executable file After wine install and winetricks dotnet20 script is run, when I install the downloaded SlingPlayer-2.0.4-Setup.exe I get an error perhaps caused by a deficiency in wine error. There are a series of other "errors" that occur during the setup process that occurred before with bug 21567. 1. Unable to register SlingSDK. Please contact system administrator. 2. Error 1603 Fatal error during registration, Consult Windows Installer Help (Msi.chm) or MSDN. 3. SlingPlayerSetup encountered serious problem. Problem caused in the program or a deficiency in Wine. I will attach the log and images. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 10