January 2021 - Wine-Bugs - list.winehq.org

[Bug 10515] New: Muvee autoproducer fails to install
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

http://bugs.winehq.org/show_bug.cgi?id=10515 Summary: Muvee autoproducer fails to install Product: Wine Version: CVS/GIT Platform: PC URL: http://www.muvee.com/en/products/ap/ap6_free_trial OS/Version: Linux Status: UNCONFIRMED Keywords: download, Installer Severity: enhancement Priority: P2 Component: wine-msi AssignedTo: wine-bugs(a)winehq.org ReportedBy: xerox_xerox2000(a)yahoo.co.uk Hi, another "garbage app" sent into the appdb: the installer fails with a messagebox : Error Number: 0x80020006 Quote from the person who sent it in: Installshield warns about missing Quicktime and Media player components (it does that on Windows too unless they're installed but will install and run without them),then runs through the initial license confirmation and destination directory selection. It then aborts with MessageBox: Error Number: 0x80020006 There was one msi-related fixme message in the console, that appeared when the messagebox appeared: fixme:msi:AutomationObject_GetIDsOfNames Unknown member L"version", clsid {000c1090-0000-0000-c000-000000000046} -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 6

[Bug 26524] New: Muvee Reveal 8, execution from folder causes crash
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

http://bugs.winehq.org/show_bug.cgi?id=26524 Summary: Muvee Reveal 8, execution from folder causes crash Product: Wine Version: 1.3.16 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: fcole90(a)gmail.com Created an attachment (id=33782) --> (http://bugs.winehq.org/attachment.cgi?id=33782) log of the application I made this test trying to run the app from a Windows previus installation, then I copied the folder on my Wine folder and launched the app. The applications shows many dialog boxes to report many errors: 1st dialog box) Application has generated an exception that could not be handed. Process ID=0x8 (8), Thread ID=0x9 (9). Click OK to terminate the application. Click CANCEL to debug the application. #I click CANCEL 2nd dialog box) No registered JIT debugger was specified. Click on Retry to have the process wait while attaching a debugger manually. Click on Cancel to abort the JIT debug request. #If I click Retry the dialog appears again or crashes. #If I press abort the app abort. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 17

[Bug 26507] New: Muvee Reveal finds a problem and doesn't install
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

http://bugs.winehq.org/show_bug.cgi?id=26507 Summary: Muvee Reveal finds a problem and doesn't install Product: Wine Version: 1.3.16 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: advapi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: fcole90(a)gmail.com Created an attachment (id=33746) --> (http://bugs.winehq.org/attachment.cgi?id=33746) Various fixme on win, advapi and an error on cabinet I'm not able to run the installer of the application. I tried using native libraries for: advapi32, cabinet and wininet. When the installer runs just stops after a screen reporting that found a critical problem that caused the app to crash. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 23

[Bug 35282] New: Multiple applications/installers need 'reg.exe' 'import' operation implementation (Muvee Reveal 8.0.x)
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

http://bugs.winehq.org/show_bug.cgi?id=35282 Bug ID: 35282 Summary: Multiple applications/installers need 'reg.exe' 'import' operation implementation (Muvee Reveal 8.0.x) Product: Wine Version: 1.7.9 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: programs Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, example: 'Muvee Reveal 8.0.1.1421' installer. Relevant part of trace log: --- snip --- 0047:Call KERNEL32.CreateProcessW(00000000,00b7a4c0 L"C:\\windows\\system32\\reg.exe import C:\\users\\focht\\Temp\\muveeInstall\\SF_NTI_MC_MPEGEnc_001fffff.reg",00000000,00000000,00000000,00000000,00000000,004d6a00 L"C:\\windows\\system32\\",0033f6bc,0033f6ac) ret=7ece5e8a ... 0040:Call KERNEL32.__wine_kernel_init() ret=7bc5a056 0047:Ret KERNEL32.CreateProcessW() retval=00000001 ret=7ece5e8a ... Error: Invalid command line parameters ... 0040:Call KERNEL32.ExitProcess(00000001) ret=7edf5e5e --- snip --- $ sha1sum muveeReveal_8.0.1.14210_2299.exe 93db0d86103c8ed4e3c3ecff367468f2b120e8dc muveeReveal_8.0.1.14210_2299.exe $ du -sh muveeReveal_8.0.1.14210_2299.exe 101M muveeReveal_8.0.1.14210_2299.exe $ wine --version wine-1.7.9-286-g8f53710 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 7

[Bug 35892] New: sdb2xml (.NET 2.0 app) crashes on unimplemented function apphelp.dll.SdbGetAppPatchDir
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

https://bugs.winehq.org/show_bug.cgi?id=35892 Bug ID: 35892 Summary: sdb2xml (.NET 2.0 app) crashes on unimplemented function apphelp.dll.SdbGetAppPatchDir Product: Wine Version: 1.7.15 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, as the summary says. Prerequisite: 'winetricks -q dotnet20' (Mono might work too, couldn't test) ('foo' doesn't exist) --- snip --- $ wine ./sdb2xml.exe foo fixme:thread:SetThreadStackGuarantee (0x33fc28): stub fixme:shell:URL_ParseUrl failed to parse L"System" fixme:shell:URL_ParseUrl failed to parse L"System.Xml" wine: Call from 0x7b83abc3 to unimplemented function apphelp.dll.SdbGetAppPatchDir, aborting Error: External component has thrown an exception. fixme:process:FlushProcessWriteBuffers : stub --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/bb432442%28v=vs.85%29.aspx --- quote --- void WINAPI SdbGetAppPatchDir( _In_opt_ HSDB hSDB, _Out_ LPTSTR szAppPatchPath, _In_ DWORD cchSize ); Parameters hSDB [in, optional] A handle to the shim database returned by the SdbInitDatabase function. szAppPatchPath [out] The resulting path. cchSize [in] The size of the szAppPatchPath buffer, in characters. If the function fails, this parameter is set to the empty string (""). --- quote --- The documentation doesn't live up to the standards. Vista+ API with no ANSI version of the API but they still state 'LPTSTR' type? $ sha1sum sdb2xml.exe 9808bc17a7ea4f43ecdcb11f4e18204805246dbd sdb2xml.exe $ du -sh sdb2xml.exe 28K sdb2xml.exe $ wine --version wine-1.7.15-112-g2aad5d7 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 13

[Bug 35891] New: sdb2xml and native setupapi override crash on unimplemented function apphelp.dll.SdbInitDatabase
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

https://bugs.winehq.org/show_bug.cgi?id=35891 Bug ID: 35891 Summary: sdb2xml and native setupapi override crash on unimplemented function apphelp.dll.SdbInitDatabase Product: Wine Version: 1.7.15 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, encountered by Austin's tests with native overrides (https://bugs.winehq.org/show_bug.cgi?id=26016#c20) --- quote --- and crashes with: wine: Call from 0x7b83a82e to unimplemented function apphelp.dll.SdbInitDatabase, aborting if I stub that, it gets further, to SCECLI.dll.SceSetupMoveSecurityFile. That function doesn't appear to be documented, howver, so I didn't try to do anything with it. (that's for ie7) xmllite installs with no issues with native setupapi after SdbInitDatabase was stubbed. Running it now in a loop. --- quote --- I found another interesting tool which makes use of Application Compatibility Database API's too: 'sdb2xml' MSDN: http://blogs.msdn.com/b/heaths/archive/2007/11/02/sdb2xml.aspx $ sha1sum sdb2xml.exe 9808bc17a7ea4f43ecdcb11f4e18204805246dbd sdb2xml.exe $ du -sh sdb2xml.exe 28K sdb2xml.exe $ wine --version wine-1.7.15-112-g2aad5d7 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 38017] New: sdb2xml (.NET 2.0 app) crashes on unimplemented function apphelp.dll.SdbGetFirstChild
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

https://bugs.winehq.org/show_bug.cgi?id=38017 Bug ID: 38017 Summary: sdb2xml (.NET 2.0 app) crashes on unimplemented function apphelp.dll.SdbGetFirstChild Product: Wine Version: 1.7.35 Hardware: x86 URL: http://blogs.msdn.com/b/heaths/archive/2007/11/02/sdb2 xml.aspx OS: Linux Status: NEW Keywords: dotnet, download Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com CC: austinenglish(a)gmail.com, focht(a)gmx.net Depends on: 35893 Distribution: --- Followup to bug 35893 Created a dummy file: --- snip --- $ touch foo.sdb --- snip --- Run the app: --- snip --- $ wine ./sdb2xml.exe foo.sdb fixme:apphelp:SdbOpenDatabase stub: L"foo.sdb" 00000000 <?xml version="1.0" encoding="IBM437" standalone="yes"?> <SDB xmlns:xs="http://www.w3.org/2001/XMLSchema" path="foo.sdb"wine: Call from 0x7b83957c to unimplemented function apphelp.dll.SdbGetFirstChild, aborting -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 35893] New: sdb2xml (.NET 2.0 app) crashes on unimplemented function apphelp.dll.SdbOpenDatabase
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

https://bugs.winehq.org/show_bug.cgi?id=35893 Bug ID: 35893 Summary: sdb2xml (.NET 2.0 app) crashes on unimplemented function apphelp.dll.SdbOpenDatabase Product: Wine Version: 1.7.15 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, as the summary says. Prerequisite: 'winetricks -q dotnet20' (Mono might work too, couldn't test) Created a dummy file: --- snip --- $ touch foo.sdb --- snip --- Run the app: --- snip --- $ wine ./sdb2xml.exe foo.sdb fixme:thread:SetThreadStackGuarantee (0x33fc28): stub fixme:shell:URL_ParseUrl failed to parse L"System" fixme:shell:URL_ParseUrl failed to parse L"System.Xml" wine: Call from 0x7b83abc3 to unimplemented function apphelp.dll.SdbOpenDatabase, aborting Error: External component has thrown an exception. fixme:process:FlushProcessWriteBuffers : stub --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/bb432457%28v=vs.85%29.aspx --- quote --- PDB WINAPI SdbOpenDatabase( _In_ LPCTSTR pwszPath, _In_ PATH_TYPE eType ); Parameters pwszPath [in] The database path. This parameter cannot be NULL. eType [in] The path type. See PATH_TYPE for a list of values. --- quote --- There is no ANSI version here, LPCTSTR will be always mapped to LPCWSTR. Interestingly there seem to be two API functions essentially doing the same: SdbOpenDatabase -> Windows Vista+, returns 'PDB' SdbInitDatabase -> Windows XP+, returns 'HSDB' $ sha1sum sdb2xml.exe 9808bc17a7ea4f43ecdcb11f4e18204805246dbd sdb2xml.exe $ du -sh sdb2xml.exe 28K sdb2xml.exe $ wine --version wine-1.7.15-112-g2aad5d7 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 45143] New: Neoncron 2 Launcher crashes embedding IE browser process when clicking bottom menu items
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

https://bugs.winehq.org/show_bug.cgi?id=45143 Bug ID: 45143 Summary: Neoncron 2 Launcher crashes embedding IE browser process when clicking bottom menu items Product: Wine Version: 3.7 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: jscript Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, to track: https://www.winehq.org/pipermail/wine-devel/2018-May/126571.html Prerequisite: 'winetricks -q mfc42' --- snip --- $ pwd /home/focht/.wine/drive_c/Games/Neocron Evolution/Live Server $ file *{.dll,.exe} baselib.dll: PE32 executable (DLL) (console) Intel 80386, for MS Windows D3D9Drv.dll: PE32 executable (DLL) (console) Intel 80386, for MS Windows dbghelp.dll: PE32 executable (DLL) (console) Intel 80386, for MS Windows Engine.dll: PE32 executable (DLL) (console) Intel 80386, for MS Windows FreeImage.dll: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows gamebase.dll: PE32 executable (DLL) (console) Intel 80386, for MS Windows lua.dll: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows msvcp60.dll: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows NetLib.dll: PE32 executable (DLL) (console) Intel 80386, for MS Windows stlport_vc645.dll: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows client.exe: PE32 executable (console) Intel 80386, for MS Windows neocronclient.exe: PE32 executable (GUI) Intel 80386, for MS Windows NeocronLauncher.exe: PE32 executable (GUI) Intel 80386, for MS Windows nlsp.exe: PE32 executable (GUI) Intel 80386, for MS Windows $ WINEDEBUG=+seh,+loaddll,+process wine ./NeocronLauncher.exe ... 0009:fixme:ieframe:NewWindowManager_EvaluateNewWindow (0x1593a4)->(L"http://www.neocron-game.com/AccountManagement/Register" L"_blank" L"http://www.neocron-game.com/launcher/?LANG=ENG&IP=127.0.0.0&PORT=8020&VERSI…" (null) 0 0 0) 0009:trace:process:create_process_impl app (null) cmdline L"\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" -Embedding" ... 0009:trace:process:create_process_impl starting L"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" as Win32 binary (10000000-10019000, arch 014c, fakedll) ... 00af:trace:process:init_current_directory starting in L"C:\\Games\\Neocron Evolution\\Live Server\\" 0x20 00af:trace:process:__wine_kernel_init starting process name=L"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" argv[0]=L"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" ... 00af:trace:seh:raise_exception code=c0000005 flags=0 addr=0xf5ccc1a3 ip=f5ccc1a3 tid=00af 00af:trace:seh:raise_exception info[0]=00000000 00af:trace:seh:raise_exception info[1]=00000004 00af:trace:seh:raise_exception eax=00000000 ebx=00008001 ecx=00000000 edx=0033e288 esi=01411820 edi=0033e2bc 00af:trace:seh:raise_exception ebp=0033e2f8 esp=0033e25c cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00210216 00af:trace:seh:call_stack_handlers calling handler at 0x7b48fd25 code=c0000005 flags=0 wine: Unhandled page fault on read access to 0x00000004 at address 0xf5ccc1a3 (thread 00af), starting debugger... ... Backtrace: =>0 0xf5cfc1a3 JSON_stringify+0x239(ctx=0x2028c8, jsthis=0x33e334, flags=0x1, argc=0, argv=(nil), r=0x14308cc) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/json.c:805] in jscript (0x0033e2f8) 1 0xf5cf153b invoke_value_proc+0x81(ctx=0x2028c8, function=0x14303a0, this_disp=(nil), flags=0x1, argc=0, argv=(nil), r=0x14308cc) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/function.c:277] in jscript (0x0033e348) 2 0xf5cf175c Function_invoke+0xcc(func_this=0x14303a0, jsthis=(nil), flags=0x1, argc=0, argv=(nil), r=0x14308cc) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/function.c:334] in jscript (0x0033e3a8) 3 0xf5ce4d64 jsdisp_call_value+0x62(jsfunc=0x14303a0, jsthis=(nil), flags=0x8001, argc=0, argv=(nil), r=0x14308cc) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/dispex.c:1066] in jscript (0x0033e408) 4 0xf5ce5445 disp_call_value+0x88(ctx=0x2028c8, disp=0x14303a0, jsthis=(nil), flags=0x8001, argc=0, argv=(nil), r=0x14308cc) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/dispex.c:1214] in jscript (0x0033e558) 5 0xf5ce7c91 exprval_call+0xd3(ctx=0x2028c8, ref=0x33e5d0, flags=0x8001, argc=0, argv=(nil), r=0x14308cc) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/engine.c:324] in jscript (0x0033e5a8) 6 0xf5cea24c interp_call_member+0xea(ctx=0x2028c8) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/engine.c:1212] in jscript (0x0033e5f8) 7 0xf5cee89a enter_bytecode+0x7e(ctx=0x2028c8, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/engine.c:2787] in jscript (0x0033e648) 8 0xf5cef435 exec_source+0x4db(ctx=0x2028c8, flags=0, bytecode=0x1310188, function=0x12e2d18, scope=0x1423f30, this_obj=0x14b1118, function_instance=0x142b9f8, variable_obj=0x142ea80, argc=0x6, argv=0x142ea48, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/engine.c:3040] in jscript (0x0033e6a8) 9 0xf5cf149a invoke_source+0x11d(ctx=0x2028c8, function=0x142b9f8, this_obj=0x14b1118, argc=0x6, argv=0x142ea48, is_constructor=0, caller_execs_source=0, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/function.c:257] in jscript (0x0033e708) 10 0xf5cf15a2 call_function+0x4c(ctx=0x2028c8, function=0x142b9f8, this_obj=0x14b1118, argc=0x6, argv=0x142ea48, caller_execs_source=0, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/function.c:289] in jscript (0x0033e738) 11 0xf5cf1d6f Function_apply+0x236(ctx=0x2028c8, jsthis=0x33e7f4, flags=0x1, argc=0x2, argv=0x1113bd0, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/function.c:470] in jscript (0x0033e7b8) 12 0xf5cf153b invoke_value_proc+0x81(ctx=0x2028c8, function=0x14b1028, this_disp=0x142b9f8, flags=0x1, argc=0x2, argv=0x1113bd0, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/function.c:277] in jscript (0x0033e808) 13 0xf5cf175c Function_invoke+0xcc(func_this=0x14b1028, jsthis=0x142b9f8, flags=0x1, argc=0x2, argv=0x1113bd0, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/function.c:334] in jscript (0x0033e868) 14 0xf5ce4d64 jsdisp_call_value+0x62(jsfunc=0x14b1028, jsthis=0x142b9f8, flags=0x8001, argc=0x2, argv=0x1113bd0, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/dispex.c:1066] in jscript (0x0033e8c8) 15 0xf5ce5445 disp_call_value+0x88(ctx=0x2028c8, disp=0x14b1028, jsthis=0x142b9f8, flags=0x8001, argc=0x2, argv=0x1113bd0, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/dispex.c:1214] in jscript (0x0033ea18) 16 0xf5ce3102 invoke_prop_func+0x2ae(This=0x202ca8, jsthis=0x142b9f8, prop=0x106c2b0, flags=0x8001, argc=0x2, argv=0x1113bd0, r=(nil), caller=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/dispex.c:414] in jscript (0x0033ea88) 17 0xf5ce2fed invoke_prop_func+0x199(This=0x142b9f8, jsthis=0x142b9f8, prop=0x142c068, flags=0x8001, argc=0x2, argv=0x1113bd0, r=(nil), caller=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/dispex.c:404] in jscript (0x0033eaf8) 18 0xf5ce4e7b jsdisp_call+0x52(disp=0x142b9f8, id=0x3, flags=0x8001, argc=0x2, argv=0x1113bd0, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/dispex.c:1091] in jscript (0x0033eb48) 19 0xf5ce4fa6 disp_call+0xb0(ctx=0x2028c8, disp=0x142b9f8, id=0x3, flags=0x8001, argc=0x2, argv=0x1113bd0, ret=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/dispex.c:1124] in jscript (0x0033ec98) 20 0xf5ce7cbd exprval_call+0xff(ctx=0x2028c8, ref=0x33ed10, flags=0x8001, argc=0x2, argv=0x1113bd0, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/engine.c:327] in jscript (0x0033ece8) 21 0xf5cea24c interp_call_member+0xea(ctx=0x2028c8) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/engine.c:1212] in jscript (0x0033ed38) 22 0xf5cee89a enter_bytecode+0x7e(ctx=0x2028c8, r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/engine.c:2787] in jscript (0x0033ed88) 23 0xf5cef435 exec_source+0x4db(ctx=0x2028c8, flags=0x1, bytecode=0x1310188, function=0x13101ac, scope=(nil), this_obj=(nil), function_instance=(nil), variable_obj=0x202c58, argc=0, argv=(nil), r=(nil)) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/engine.c:3040] in jscript (0x0033ede8) 24 0xf5cf6b86 exec_global_code+0x67(This=0x202878, code=0x1310188) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/jscript.c:111] in jscript (0x0033ee38) 25 0xf5cf8b63 JScriptParse_ParseScriptText+0x26d(iface=<couldn't compute location>, pstrCode=<couldn't compute location>, pstrItemName=<couldn't compute location>, punkContext=<couldn't compute location>, pstrDelimiter=<couldn't compute location>, dwSourceContextCookie=<couldn't compute location>, ulStartingLine=<couldn't compute location>, dwFlags=<couldn't compute location>, pvarResult=<couldn't compute location>, pexcepinfo=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/jscript/jscript.c:801] in jscript (0x0033eea8) 26 0xf7111adf parse_elem_text+0x122(script_host=0x202828, script_elem=0x11f61e8, text="/*1525565736,,JIT Construction: v3882345,en_GB*/ ... 47 0x7b46da71 start_process+0x132(entry=<couldn't compute location>, peb=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/kernel32/process.c:1099] in kernel32 (0x0033ffd8) 48 0x7b46d93e start_process_wrapper+0x9() in kernel32 (0x0033ffec) 0xf5cfc1a3 JSON_stringify+0x239 [/home/focht/projects/wine/wine.repo/src/dlls/jscript/json.c:805] in jscript: pushl 0x4(%eax) 805 hres = stringify(&stringify_ctx, argv[0]); Modules: Module Address Debug info Name (161 modules) PE 2180000- 2396000 Deferred nss3 PE 661c0000-662a4000 Deferred mozglue PE 69e40000-6d7d7000 Deferred xul PE 70a80000-70b5d000 Deferred lgpllibs ELF 7b400000-7b7f4000 Dwarf kernel32<elf> \-PE 7b420000-7b7f4000 \ kernel32 ELF 7bc00000-7bd0d000 Deferred ntdll<elf> \-PE 7bc30000-7bd0d000 \ ntdll ... Threads: process tid prio (all id:s are in hex) 00000008 NeocronLauncher.exe ... 0000003b 0 00000009 0 ... 0000006a (D) C:\windows\system32\iexplore.exe 000000a8 0 000000a7 0 ... 0000006c 0 0000006b 0 <== --- snip --- $ sha1sum Neocron-Evolution-Installer-241-139.exe 9de37a38c05b3b51df73807226dcf2ff7db2df41 Neocron-Evolution-Installer-241-139.exe $ du -sh Neocron-Evolution-Installer-241-139.exe 2.1G Neocron-Evolution-Installer-241-139.exe $ wine --version wine-3.7-77-g540c48b911 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 7

[Bug 44460] New: Wine' s loader should prevent multiple executable mappings of images (dlls) backed by the same physical file (long path vs. short path)
by wine-bugs＠winehq.org July 26, 2021

July 26, 2021

https://bugs.winehq.org/show_bug.cgi?id=44460 Bug ID: 44460 Summary: Wine's loader should prevent multiple executable mappings of images (dlls) backed by the same physical file (long path vs. short path) Product: Wine Version: 3.0 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, split out from bug 35106 because there are multiple issues and this one affects a different area: Wine loader. Currently, loading a dll with default load flags one time with long path name and the other time with short path name (= same physical file) results in two different mappings of the dll which creates problems with apps expecting unique instance data. In short: Wine's loader currently lacks a more elaborate identity check to prevent this case. CMS DVR (video surveillance app) v1.0.0.8 uses multiple MFC-based ActiveX/COM servers. Taking the first one 'WndManager.ocx' as example: --- snip --- -=[ ProtectionID v0.6.9.0 DECEMBER]=- (c) 2003-2017 CDKiLLER & TippeX Build 24/12/17-21:05:42 Ready... Scanning -> C:\Program Files\CMS\WndManager.ocx File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 266240 (041000h) Byte(s) | Machine: 0x14C (I386) Compilation TimeStamp : 0x4B583655 -> Thu 21st Jan 2010 11:11:17 (GMT) [TimeStamp] 0x4B583655 -> Thu 21st Jan 2010 11:11:17 (GMT) | PE Header | - | Offset: 0x000000F8 | VA: 0x100000F8 | - [TimeStamp] 0x4B583655 -> Thu 21st Jan 2010 11:11:17 (GMT) | Export | - | Offset: 0x00020A74 | VA: 0x10020A74 | - [LoadConfig] CodeIntegrity -> Flags 0xA3F0 | Catalog 0x46 (70) | Catalog Offset 0x2000001 | Reserved 0x46A4A0 [LoadConfig] GuardAddressTakenIatEntryTable 0x8000011 | Count 0x46A558 (4629848) [LoadConfig] GuardLongJumpTargetTable 0x8000001 | Count 0x46A5F8 (4630008) [LoadConfig] HybridMetadataPointer 0x8000011 | DynamicValueRelocTable 0x46A66C [LoadConfig] FailFastIndirectProc 0x8000011 | FailFastPointer 0x46C360 [LoadConfig] UnknownZero1 0x8000011 [File Heuristics] -> Flag #1 : 00000000000000000000010100000000 (0x00000500) [Entrypoint Section Entropy] : 5.56 (section #0) ".text " | Size : 0x1B276 (111222) byte(s) [DllCharacteristics] -> Flag : (0x0000) -> NONE [SectionCount] 5 (0x5) | ImageSize 0x44000 (278528) byte(s) [Export] 100% of function(s) (4 of 4) are in file | 0 are forwarded | 4 code | 0 data | 0 uninit data | 0 unknown | [VersionInfo] Product Name : VideoWindow ActiveX Control Module [VersionInfo] Product Version : 1. 0. 0. 4 [VersionInfo] File Description : VideoWindow ActiveX Control Module [VersionInfo] File Version : 1. 0. 0. 4 [VersionInfo] Original FileName : VideoWindow.OCX [VersionInfo] Internal Name : VideoWindow [VersionInfo] Legal Copyrights : Copyright (C) 2006 [ModuleReport] [IAT] Modules -> MFC42.DLL | MSVCRT.dll | KERNEL32.dll | USER32.dll | GDI32.dll | COMCTL32.dll | ole32.dll | OLEPRO32.DLL | OLEAUT32.dll [!] File appears to have no protection or is using an unknown protection - Scan Took : 0.224 Second(s) [0000000E0h (224) tick(s)] [246 of 580 scan(s) done] --- snip --- The app explicitly loads its ActiveX/OCX to register these inproc servers (registry): --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/CMS ... 002d:Call KERNEL32.LoadLibraryA(01421b78 "C:\\Program Files\\CMS\\WndManager.ocx") ret=00404efc ... 002d:Call PE DLL (proc=0x154b467,module=0x1530000 L"WndManager.ocx",reason=PROCESS_ATTACH,res=(nil)) ... 002d:Ret PE DLL (proc=0x154b467,module=0x1530000 L"WndManager.ocx",reason=PROCESS_ATTACH,res=(nil)) retval=1 002d:Ret KERNEL32.LoadLibraryA() retval=01530000 ret=00404efc 002d:Call KERNEL32.GetProcAddress(01530000,0050d090 "DllRegisterServer") ret=00404fa9 002d:Ret KERNEL32.GetProcAddress() retval=01580022 ret=00404fa9 002d:CALL VIDEOWINDOW.OCX.DllRegisterServer(<unknown, check return>) ret=00404fb3 ... 002d:CALL MFC42.1212(<unknown, check return>) ret=01545e8f 002d:Call KERNEL32.LoadLibraryA(5f49ed88 "ole32.dll") ret=5f405b81 002d:Ret KERNEL32.LoadLibraryA() retval=7e580000 ret=5f405b81 ... 002d:Call KERNEL32.GetProcAddress(7e580000,5f4c5ace "StringFromGUID2") ret=5f405b3f 002d:Ret KERNEL32.GetProcAddress() retval=7e58ba80 ret=5f405b3f 002d:Call ole32.StringFromGUID2(01553df0,0032bf28,00000027) ret=5f4392e7 002d:Ret ole32.StringFromGUID2() retval=00000027 ret=5f4392e7 002d:Call KERNEL32.lstrlenW(0032bf28 L"{2FBB7C49-53D0-4FFF-B3A0-B3880750976A}") ret=5f43931c 002d:Ret KERNEL32.lstrlenW() retval=00000026 ret=5f43931c 002d:Call KERNEL32.WideCharToMultiByte(00000000,00000000,0032bf28 L"{2FBB7C49-53D0-4FFF-B3A0-B3880750976A}",ffffffff,0032bdc8,0000004e,00000000,00000000) ret=5f439345 002d:Ret KERNEL32.WideCharToMultiByte() retval=00000027 ret=5f439345 002d:Call KERNEL32.GetModuleFileNameA(01530000,0032bcb4,00000104) ret=5f411dc5 002d:Ret KERNEL32.GetModuleFileNameA() retval=00000023 ret=5f411dc5 002d:Call msvcrt.memcpy(00fd04a0,5f4d1c58,00000001) ret=5f402437 002d:Ret msvcrt.memcpy() retval=00fd04a0 ret=5f402437 002d:Call KERNEL32.GetShortPathNameA(0032bcb4 "C:\\Program Files\\CMS\\WndManager.ocx",00fd04a0,00000104) ret=5f411ddd 002d:Ret KERNEL32.GetShortPathNameA() retval=0000001c ret=5f411ddd 002d:Call KERNEL32.lstrlenA(00fd04a0 "C:\\PROG~FBU\\CMS\\WNDM~VNJ.OCX") ret=5f40248f 002d:Ret KERNEL32.lstrlenA() retval=0000001c ret=5f40248f 002d:Call KERNEL32.FindResourceA(01530000,00000001,00000006) ret=5f403a4e 002d:Ret KERNEL32.FindResourceA() retval=01556f98 ret=5f403a4e 002d:Call user32.LoadStringA(01530000,00000002,0032bcb8,00000100) ret=5f403a5e 002d:Ret user32.LoadStringA() retval=00000019 ret=5f403a5e 002d:Call KERNEL32.lstrlenA(0032bcb8 "VideoWindow Property Page") ret=5f4038d7 002d:Ret KERNEL32.lstrlenA() retval=00000019 ret=5f4038d7 002d:Call msvcrt.memcpy(00fce610,0032bcb8,00000019) ret=5f403905 002d:Ret msvcrt.memcpy() retval=00fce610 ret=5f403905 ... 002d:Call KERNEL32.GetProcAddress(7e9d0000,5f4c549a "RegCreateKeyA") ret=5f405b3f 002d:Ret KERNEL32.GetProcAddress() retval=7e9dcd60 ret=5f405b3f 002d:Call advapi32.RegCreateKeyA(80000000,0032be24 "CLSID\\{2FBB7C49-53D0-4FFF-B3A0-B3880750976A}",0032bfa8) ret=5f4393b1 002d:Ret advapi32.RegCreateKeyA() retval=00000000 ret=5f4393b1 ... --- snip --- The interesting part is that all inproc server paths are created with short path name in registry (see 'GetShortPathNameA' calls). I found little information on the "why". This seems to be MFC built-in/enforced behaviour, for example mentioned here: https://jeffpar.github.io/kbarchive/kb/179/Q179690/ --- quote --- MFC uses short file names for registration. --- quote --- Later the same ActiveX/inproc server was loaded using 'ole32.CoGetClassObject' which used the short path name from registry data but still referred to the same physical file. To my surprise it was mapped a second time at a different base address 0x2ab0000 (relocated), resulting in another set of instance data. --- snip --- ... 002d:Call ole32.CoGetClassObject(0032a304,00000003,00000000,0050bddc,00329fa0) ret=004b34b4 002d:Call KERNEL32.FindActCtxSectionGuid(00000001,00000000,00000004,0032a304,00329e40) ret=7e59e1f6 002d:Ret KERNEL32.FindActCtxSectionGuid() retval=00000000 ret=7e59e1f6 002d:Call ntdll.RtlInitUnicodeString(00329cd4,7e665600 L"\\Registry\\Machine\\Software\\Classes") ret=7e598c09 002d:Ret ntdll.RtlInitUnicodeString() retval=00329cd4 ret=7e598c09 002d:Call ntdll.NtCreateKey(00329cf4,02000000,00329cdc,00000000,00000000,00000000,00000000) ret=7e598a08 002d:Ret ntdll.NtCreateKey() retval=00000000 ret=7e598a08 002d:Call ntdll.RtlInitUnicodeString(00329d70,00329dc2 L"CLSID\\{6AD651C3-AB21-4FCB-90D8-FB1396B04A07}") ret=7e598e9a 002d:Ret ntdll.RtlInitUnicodeString() retval=00329d70 ret=7e598e9a 002d:Call ntdll.NtOpenKey(00329dbc,00020019,00329d78) ret=7e598eaf 002d:Ret ntdll.NtOpenKey() retval=00000000 ret=7e598eaf 002d:Call ntdll.RtlNtStatusToDosError(00000000) ret=7e598ebb 002d:Ret ntdll.RtlNtStatusToDosError() retval=00000000 ret=7e598ebb 002d:Call ntdll.RtlInitUnicodeString(00329d70,7e666c48 L"InprocServer32") ret=7e598e9a 002d:Ret ntdll.RtlInitUnicodeString() retval=00329d70 ret=7e598e9a 002d:Call ntdll.NtOpenKey(00329e84,00020019,00329d78) ret=7e598eaf 002d:Ret ntdll.NtOpenKey() retval=00000000 ret=7e598eaf 002d:Call ntdll.RtlNtStatusToDosError(00000000) ret=7e598ebb 002d:Ret ntdll.RtlNtStatusToDosError() retval=00000000 ret=7e598ebb 002d:Call advapi32.RegCloseKey(00000170) ret=7e59cf21 002d:Ret advapi32.RegCloseKey() retval=00000000 ret=7e59cf21 002d:Call advapi32.RegQueryValueExW(00000174,7e666bd0 L"ThreadingModel",00000000,00329ba0,00329ba8,00329ba4) ret=7e59dd41 002d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7e59dd41 002d:Call advapi32.RegQueryValueExW(00000174,00000000,00000000,00329bac,0032999c,00329ba8) ret=7e59b18a 002d:Ret advapi32.RegQueryValueExW() retval=00000000 ret=7e59b18a ... 002d:Call KERNEL32.LoadLibraryExW(00329bee L"C:\\PROG~FBU\\CMS\\WNDM~VNJ.OCX",00000000,00000008) ret=7e598ff2 ... 002d:Call PE DLL (proc=0x2acb467,module=0x2ab0000 L"WNDM~VNJ.OCX",reason=PROCESS_ATTACH,res=(nil)) 002d:Call KERNEL32.LocalAlloc(00000000,00002000) ret=02acb1be ... --- snip --- Winedbg: --- snip --- Wine-dbg>bt Backtrace: =>0 0x7b463443 MODULE_get_dll_load_path(module="C:\PROG~FBU\CMS\WNDM~VNJ.OCX", safe_mode=0xffffffff) [/home/focht/projects/wine/wine.repo/src/dlls/kernel32/module.c:974] in kernel32 (0x00329ba8) 1 0x7b463df7 LoadLibraryExW+0x73(libnameW=<couldn't compute location>, hfile=<couldn't compute location>, flags=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/kernel32/module.c:1272] in kernel32 (0x00329bd8) 2 0x7e5a6ff2 COMPOBJ_DllList_Add+0x8d(library_name="C:\PROG~FBU\CMS\WNDM~VNJ.OCX", ret=0x1c7dcf8) [/home/focht/projects/wine/wine.repo/src/dlls/ole32/compobj.c:521] in ole32 (0x00329c48) 3 0x7e5a8fe1 apartment_getclassobject+0x1d3(apt=0x1f7ed08, dllpath="C:\PROG~FBU\CMS\WNDM~VNJ.OCX", apartment_threaded=0x1, rclsid=0x32a3c4, riid=0x50bddc, ppv=0x32a060) [/home/focht/projects/wine/wine.repo/src/dlls/ole32/compobj.c:1366] in ole32 (0x00329cb8) 4 0x7e5abfbb get_inproc_class_object+0x1e1(apt=0x1f7ed08, regdata=0x329f8c, rclsid=0x32a3c4, riid=0x50bddc, hostifnecessary=0x1, ppv=0x32a060) [/home/focht/projects/wine/wine.repo/src/dlls/ole32/compobj.c:2954] in ole32 (0x00329f18) 5 0x7e5ac42d CoGetClassObject+0x457(rclsid=<couldn't compute location>, dwClsContext=<couldn't compute location>, pServerInfo=<couldn't compute location>, iid=<couldn't compute location>, ppv=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/ole32/compobj.c:3094] in ole32 (0x0032a018) 6 0x004b34b4 in cms (+0xb34b3) (0x0032a044) 7 0x004b4d92 in cms (+0xb4d91) (0x0032a0e8) 8 0x004b48d4 in cms (+0xb48d3) (0x0032a158) 9 0x004b344b in cms (+0xb344a) (0x0032a1c8) 10 0x004aeace in cms (+0xaeacd) (0x0032a224) 11 0x004aebb1 in cms (+0xaebb0) (0x0032a298) 12 0x004aef64 in cms (+0xaef63) (0x0032a2f0) 13 0x004abc5d in cms (+0xabc5c) (0x0032a38c) 14 0x0032a3b0 (0x0032a38c) ... --- snip --- Another session, showing the same dll present two times: --- snip --- Wine-dbg>info share Module Address Debug info Name (100 modules) PE 340000- 36f000 Export h264play PE 370000- 380000 Export dlldeinterlace PE 380000- 391000 Export streamreader PE 3a0000- 3ab000 Export password PE 400000- 5c7000 Export cms PE 5d0000- 659000 Export playback PE 660000- 736000 Export configmodule PE 740000- 7ae000 Export localrecord PE 1480000- 14c4000 Export wndmanager PE 14d0000- 1571000 Export mapctrl PE 2380000- 23c4000 Deferred wndm~vnj PE 10000000-10083000 Export netsdk PE 5f400000-5f4f2000 Export mfc42 ELF 7a800000-7a949000 Dwarf opengl32<elf> \-PE 7a840000-7a949000 \ opengl32 ELF 7b400000-7b7f0000 Dwarf kernel32<elf> \-PE 7b420000-7b7f0000 \ kernel32 ELF 7bc00000-7bd0a000 Dwarf ntdll<elf> \-PE 7bc30000-7bd0a000 \ ntdll ELF 7c000000-7c004000 Dwarf <wine-loader> ... --- snip --- wndmanager -> 0x1480000 (by long path name "C:\\Program Files\\CMS\\WndManager.ocx")) wndm~vnj -> 0x2380000 (by short path name "C:\\PROG~FBU\\CMS\\WNDM~VNJ.OCX") To avoid this, Wine loader 'load_native_dll' function needs to implement additional checks after creating the file-backed section view, before doing anything further (reloc fixups, allocating module entry, ...). Essentially walk the current module list and for each entry: * basic (quick) check: time/date stamp and image size against NT file header data from the newly created section view (NOTE: 'alloc_module' currently doesn't copy 'TimeDateStamp' from 'FileHeader.TimeDateStamp' which is needed for comparison) * memory compare IMAGE_NT_HEADERS * use NtAreMappedFilesTheSame() to check if the views from the image sections are backed by the same physical file If these conditions are met, the existing module entry shall be used and the new mapping must be destroyed (NtUnmapViewOfSection). I've already tested this using an own prototype. It seems to work fine without breaking other apps. NOTE: It doesn't prevent the crash reported in bug 35106 (another issue, unrelated to loader) but makes Wine more compliant with Windows OS loader behaviour. $ sha1sum General_CMS_Eng_V1.0.0.8.T.20101202.exe 902e9408ebfc295ce2477fe3d9ca05e8a7588589 General_CMS_Eng_V1.0.0.8.T.20101202.exe $ du -sh General_CMS_Eng_V1.0.0.8.T.20101202.exe 4.7M General_CMS_Eng_V1.0.0.8.T.20101202.exe $ wine --version wine-3.0-260-gdf715e5a9a Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4