October 2021 - Wine-Bugs - list.winehq.org

[Bug 39127] New: Multiple applications wrapped with XenoCode Postbuild 2009 application sandboxing crash with stack overflow ('NtWaitForSingleObject' must not call 'NtWaitForMultipleObjects')
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

https://bugs.winehq.org/show_bug.cgi?id=39127 Bug ID: 39127 Summary: Multiple applications wrapped with XenoCode Postbuild 2009 application sandboxing crash with stack overflow ('NtWaitForSingleObject' must not call 'NtWaitForMultipleObjects') Product: Wine Version: 1.7.49 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as the summary says. Continuation of bug 30399 The app crashes very quickly: --- snip --- $ wine ./Stylizer.exe fixme:ole:RemUnknown_QueryInterface No interface for iid {00000019-0000-0000-c000-000000000046} wine: Unhandled stack overflow at address 0x377db8 (thread 0009), starting debugger... err:seh:setup_exception_record stack overflow 816 bytes in thread 0009 eip 00377d91 esp 00241000 stack 0x240000-0x241000-0x340000 --- snip --- --- snip --- -=[ ProtectionID v0.6.6.7 DECEMBER]=- (c) 2003-2015 CDKiLLER & TippeX Build 24/12/14-22:48:13 Ready... Scanning -> Z:\home\focht\Downloads\Stylizer.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 15854203 (0F1EA7Bh) Byte(s) Compilation TimeStamp : 0x50B3AB61 -> Mon 26th Nov 2012 17:48:17 (GMT) [TimeStamp] 0x50B3AB61 -> Mon 26th Nov 2012 17:48:17 (GMT) | PE Header | - | Offset: 0x00000088 | VA: 0x00400088 | - -> File has 15719035 (0EFDA7Bh) bytes of appended data starting at offset 021000h [File Heuristics] -> Flag #1 : 00000000000001001000000000000100 (0x00048004) [Entrypoint Section Entropy] : 6.37 (section #0) ".text " | Size : 0x3ABE (15038) byte(s) [DllCharacteristics] -> Flag : (0x8000) -> TSA [SectionCount] 6 (0x6) | ImageSize 0x30B000 (3190784) byte(s) [!] XenoCode Postbuild 2009 detected ! [CdKeySerial] found "Invalid code" @ VA: 0x00001E60 / Offset: 0x00001260 - Scan Took : 0.332 Second(s) [00000014Ch (332) tick(s)] [558 of 573 scan(s) done] --- snip --- Relay tracing interferes with the way the native API sandboxing scheme works and use of dedicated trace channels doesn't reveal much. Debugging reveals the culprit. 'NtWaitForSingleObject': --- snip --- 7BC99B3E E9 2A057284 JMP 003BA06D ; trampoline 7BC99B43 E4 F0 IN AL,0F0 7BC99B45 FF71 FC PUSH DWORD PTR DS:[ECX-4] 7BC99B48 55 PUSH EBP 7BC99B49 89E5 MOV EBP,ESP 7BC99B4B 51 PUSH ECX 7BC99B4C 83EC 24 SUB ESP,24 7BC99B4F 89C8 MOV EAX,ECX 7BC99B51 8B50 04 MOV EDX,DWORD PTR DS:[EAX+4] 7BC99B54 8855 F4 MOV BYTE PTR SS:[EBP-0C],DL 7BC99B57 0FB655 F4 MOVZX EDX,BYTE PTR SS:[EBP-0C] 7BC99B5B 8B48 08 MOV ECX,DWORD PTR DS:[EAX+8] 7BC99B5E 894C24 10 MOV DWORD PTR SS:[ESP+10],ECX 7BC99B62 895424 0C MOV DWORD PTR SS:[ESP+0C],EDX 7BC99B66 C74424 08 00000 MOV DWORD PTR SS:[ESP+8],0 7BC99B6E 894424 04 MOV DWORD PTR SS:[ESP+4],EAX 7BC99B72 C70424 01000000 MOV DWORD PTR SS:[ESP],1 7BC99B79 E8 E7FEFFFF CALL NtWaitForMultipleObjects 7BC99B7E 83EC 14 SUB ESP,14 7BC99B81 8B4D FC MOV ECX,DWORD PTR SS:[EBP-4] 7BC99B84 C9 LEAVE 7BC99B85 8D61 FC LEA ESP,[ECX-4] 7BC99B88 C2 0C00 RETN 0C ... 00A3004E 8D4C24 04 LEA ECX,[ESP+4] ; saved prolog chunk 00A30052 83E4 F0 AND ESP,FFFFFFF0 00A30055 E9 EB9A267B JMP 7BC99B45 --- snip --- NtWaitForMultipleObjects: --- snip --- 7BC99A65 E9 81067284 JMP 003BA0EB ; trampoline 7BC99A6A F0:81EC 3001000 LOCK SUB ESP,130 7BC99A71 8B55 10 MOV EDX,DWORD PTR SS:[EBP+10] 7BC99A74 8B45 14 MOV EAX,DWORD PTR SS:[EBP+14] 7BC99A77 885424 1C MOV BYTE PTR SS:[ESP+1C],DL 7BC99A7B 884424 18 MOV BYTE PTR SS:[ESP+18],AL 7BC99A7F C78424 28010000 MOV DWORD PTR SS:[ESP+128],2 7BC99A8A 837D 08 00 CMP DWORD PTR SS:[EBP+8],0 7BC99A8E 74 06 JE SHORT 7BC99A96 ... --- snip --- The trampoline/hook state tracking code gets confused due to 'NtWaitForSingleObject' calling 'NtWaitForMultipleObjects' which causes a recursion in the continuation code. Native NT API doesn't do this by design since each function has an own syscall. If you use a static/inline helper which is shared/called by both, the app starts fine. NOTE: Although the app bundles .NET on its own, you will need 'winetricks -q dotnet20' to work around bug 38956 $ sha1sum Stylizer5Setup.exe fa99802266f80441ac4f091e90b20691e170f12d Stylizer5Setup.exe $ du -sh Stylizer5Setup.exe 16M Stylizer5Setup.exe $ wine --version wine-1.7.49-184-g5021e91 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 30397] New: Spoon Studio 2011 (ex Xenocode) application sandboxing scheme needs support for NtSetInformationFile class FileDispositionInformation (Stylizer 5.x, Visual CSS editor)
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

http://bugs.winehq.org/show_bug.cgi?id=30397 Bug #: 30397 Summary: Spoon Studio 2011 (ex Xenocode) application sandboxing scheme needs support for NtSetInformationFile class FileDispositionInformation (Stylizer 5.x, Visual CSS editor) Product: Wine Version: 1.5.1 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, Stylizer 5.x (Visual CSS editor) is wrapped in Xenocode like sandboxing scheme, now called "Spoon Studio 2011". The usual native API hooking in several places. It seems not very happy about some unimplemented NtSetInformationFile classes. ---snip --- ... 0025:Call ntdll.RtlInitUnicodeString(0032f334,008b3068 L"\\??\\C:\\users\\focht\\Local Settings\\Application Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58\\XSandbox.bin.__tmp__") ret=0034d108 0025:Ret ntdll.RtlInitUnicodeString() retval=0032f334 ret=0034d108 0025:Call ntdll.NtOpenFile(0032f308,00110100,0032f31c,0032f2f8,00000007,00000020) ret=0034da48 0025:Ret ntdll.NtOpenFile() retval=00000000 ret=0034da48 0025:Call ntdll.NtSetInformationFile(00000068,0032f300,0032f2cc,00000028,00000004) ret=0034da84 0025:Ret ntdll.NtSetInformationFile() retval=00000000 ret=0034da84 0025:Call ntdll.NtSetInformationFile(00000068,0032f300,0032f31b,00000001,0000000d) ret=0034da9d 0025:fixme:ntdll:NtSetInformationFile Unsupported class (13) 0025:Ret ntdll.NtSetInformationFile() retval=c0000002 ret=0034da9d 0025:Call ntdll.NtClose(00000068) ret=0036b1d3 0025:Ret ntdll.NtClose() retval=00000000 ret=0036b1d3 ... 0025:Call user32.MessageBoxW(00000000,008b2f70 L"The sandbox at \\??\\C:\\users\\focht\\Local Settings\\Application Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58 is corrupt or inaccessible. Please check the location and try again.",008a3f48 L"Spoon Studio 2011",00000010) ret=00396aa6 ... ---snip --- MSDN (ZwSetInformationFile): http://msdn.microsoft.com/en-us/library/windows/hardware/ff567096%28v=vs.85… class 13 -> FILE_DISPOSITION_INFORMATION: http://msdn.microsoft.com/en-us/library/windows/hardware/ff545765%28v=vs.85… Also interesting read: Cygwin's Corinna Vinschen and some MS guy about deletion semantics ;-) http://www.tech-archive.net/Archive/Development/microsoft.public.win32.prog… --- quote --- First off, FILE_DELETE_ON_CLOSE and FileDispositionInformation are NOT the same thing. There are really two parts to delete. The first part is to logically delete the file. This consists of the file system marking the file as deleted and then waiting for the last handle to close. When a file is marked as deleted, many operations (including new opens) fail. Once the last handle as closed, the actual delete of the file can take place. When you open a file with FILE_DELETE_ON_CLOSE, the file is left as is. Neither part of delete is done. The only thing done is to remember that when this handle is closed, the file should be deleted. All operations on the file will proceed as normal. When the handle marked as delete on close is closed, the file is logically deleted. If that handle was the last handle, the file will also actually be deleted. When you use FileDispositionInformation to set a file to deleted, the file is logically deleted right then. Any new opens for the file and many other operations will fail. The file system will not complete the actual removal of the file until the last handle is closed, though. --- quote --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 22

[Bug 30399] New: Spoon Studio 2011 (ex Xenocode) application sandboxing scheme needs support for NtSetInformationFile class FileRenameInformation (Stylizer 5.x, Visual CSS editor)
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

http://bugs.winehq.org/show_bug.cgi?id=30399 Bug #: 30399 Summary: Spoon Studio 2011 (ex Xenocode) application sandboxing scheme needs support for NtSetInformationFile class FileRenameInformation (Stylizer 5.x, Visual CSS editor) Product: Wine Version: 1.5.1 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, Stylizer 5.x (Visual CSS editor) is wrapped in Xenocode like sandboxing scheme, now called "Spoon Studio 2011". The usual native API hooking in several places. It seems not very happy about some unimplemented NtSetInformationFile classes. --- snip --- 0025:Call ntdll.RtlInitUnicodeString(0032f2a0,008b3338 L"\\??\\C:\\users\\focht\\Local Settings\\Application Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58") ret=0034cdc9 0025:Ret ntdll.RtlInitUnicodeString() retval=0032f2a0 ret=0034cdc9 0025:Call ntdll.NtOpenFile(0032f24c,00120089,0032f270,0032f2b0,00000003,00000021) ret=0034ce32 0025:Ret ntdll.NtOpenFile() retval=00000000 ret=0034ce32 0025:Call ntdll.NtQueryVolumeInformationFile(00000068,0032f344,0032f33c,00000008,00000004) ret=0036d89c 0025:Ret ntdll.NtQueryVolumeInformationFile() retval=00000000 ret=0036d89c 0025:Call ntdll.RtlInitUnicodeString(0032f2f8,008b2f70 L"\\??\\C:\\users\\focht\\Local Settings\\Application Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58\\XSandbox.bin") ret=0034cd16 0025:Ret ntdll.RtlInitUnicodeString() retval=0032f2f8 ret=0034cd16 0025:Call ntdll.NtCreateFile(0032f31c,00120116,0032f2e0,0032f300,00000000,00000080,00000000,00000001,00000060,00000000,00000000) ret=0034cd81 0025:Ret ntdll.NtCreateFile() retval=c0000034 ret=0034cd81 0025:Call ntdll.RtlInitUnicodeString(0032f2f8,008b3068 L"\\??\\C:\\users\\focht\\Local Settings\\Application Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58\\XSandbox.bin.__tmp__") ret=0034cd16 0025:Ret ntdll.RtlInitUnicodeString() retval=0032f2f8 ret=0034cd16 0025:Call ntdll.NtCreateFile(0032f31c,0013019f,0032f2e0,0032f300,00000000,00000080,00000000,00000005,00000060,00000000,00000000) ret=0034cd81 0025:Ret ntdll.NtCreateFile() retval=00000000 ret=0034cd81 ... 0025:Call ntdll.NtDuplicateObject(ffffffff,0000006c,ffffffff,0032f318,00000000,00000000,00000002) ret=0039a13e 0025:Ret ntdll.NtDuplicateObject() retval=00000000 ret=0039a13e ... 0025:Call ntdll.NtClose(00000068) ret=0034c187 0025:Ret ntdll.NtClose() retval=00000000 ret=0034c187 ... 0025:Call ntdll.NtSetInformationFile(0000006c,0032f388,0079b9e8,000000e6,0000000a) ret=0034d0c4 0025:fixme:ntdll:NtSetInformationFile Unsupported class (10) 0025:Ret ntdll.NtSetInformationFile() retval=c0000002 ret=0034d0c4 ... 0025:Call ntdll.NtClose(0000006c) ret=0034c187 0025:Ret ntdll.NtClose() retval=00000000 ret=0034c187 --- snip --- MSDN (ZwSetInformationFile): http://msdn.microsoft.com/en-us/library/windows/hardware/ff567096%28v=vs.85… class 10 (FileRenameInformation) -> FILE_RENAME_INFORMATION: http://msdn.microsoft.com/en-us/library/windows/hardware/ff540344%28v=vs.85… Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 14

[Bug 24018] New: Cygwin 1.7.6 installer crashes at start of postinstall
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

http://bugs.winehq.org/show_bug.cgi?id=24018 Summary: Cygwin 1.7.6 installer crashes at start of postinstall Product: Wine Version: 1.3.0 Platform: x86 URL: http://cygwin.com OS/Version: Linux Status: NEW Keywords: download, Installer Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Running the cygwin installer with today's git in a clean .wine aborts when it gets to the postinstall stage: ... Installing file cygfile:///etc/postinstall/update-info-dir.sh AddAccessAllowedAce(, group) failed: 1337 AddAccessAllowedAce(, group) failed: 1337 Visited: 51 nodes out of 1789 while creating dependency order. Dependency order of packages: base-cygwin base-passwd cygwin libgcc1 libiconv2 libintl8 alternatives alternatives libattr1 libgmp3 libsigsegv2 terminfo0 libncurses8 texinfo _update-info-dir gawk tzcode coreutils terminfo libncurses9 libreadline7 bash findutils sed base-files libbz2_1 bzip2 libpopt0 libstdc++6 cygutils groff gzip libncurses10 less man cygwin-doc dash diffutils editrights gettext libpcre0 grep ipc-utils liblzma1 login rebase run xz tar which zlib0 wine: Unhandled page fault on write access to 0x00000001 at address 0x610074 (thread 0028), starting debugger... Usage: winedbg [ [ --gdb ] [ prog-name [ prog-args ] | <num> | file.mdmp | --help ] (bug 21424 seems to still be there, too, if you forge ahead and run bash despite postinstall not having run.) This is a dogfood bug. I was going to try to run gcj in cygwin to look at some other wine bug, but curses! I was foiled. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 31

[Bug 21206] New: Cygwin 1.7.1 fails to install packages under wine
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

http://bugs.winehq.org/show_bug.cgi?id=21206 Summary: Cygwin 1.7.1 fails to install packages under wine Product: Wine Version: 1.1.35 Platform: x86-64 URL: http://www.cygwin.com/setup.exe OS/Version: Linux Status: NEW Keywords: download, source Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: austinenglish(a)gmail.com Created an attachment (id=25469) --> (http://bugs.winehq.org/attachment.cgi?id=25469) terminal output from install 1.5 somewhat worked under wine, but 1.7 fails miserably. Try installing any program: $ sh winetricks cygwin # Make sure to use winetricks from svn, or download cygwin from link above Choose next all the way through to install the base system. Cygwin will download its files, but when trying to install them, gives: running: C:\cygwin\bin\bash.exe --norc --noprofile /etc/postinstall/000-cygwin-post-install.sh fixme:ntdll:NtSetInformationToken unimplemented class 4 fixme:ntdll:NtQueryInformationProcess (process=0xffffffff) Unimplemented information class: ProcessSessionInformation fixme:ntdll:NtQueryVolumeInformationFile 0x104: volume info not supported fixme:ntdll:NtQueryVolumeInformationFile 0x104: attribute info not supported fixme:ntdll:NtQueryObject Unsupported information class 1 ... /etc/postinstall/000-cygwin-post-install.sh: line 53: cannot create temp file for here document: Invalid request code 6 [exiting thread] bash 47 cygthread::stub: erroneous thread activation, name is NULL 20295 [exiting thread] bash 47 cygthread::stub: erroneous thread activation, name is NULL ... There's also a ton of: AddAccessAllowedAce(, group) failed: 1337 while installing. The installer claims to complete, but whenever you try to run it, the ntdll/cygthread::stub messages flood the terminal again. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 15

[Bug 25344] New: Nero 7: Crashed when installing.
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

http://bugs.winehq.org/show_bug.cgi?id=25344 Summary: Nero 7: Crashed when installing. Product: Wine Version: 1.2 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msi AssignedTo: wine-bugs(a)winehq.org ReportedBy: fendersens(a)gmail.com Created an attachment (id=32222) --> (http://bugs.winehq.org/attachment.cgi?id=32222) error generated in the console(output of "wine program_name.exe") It crashed after I choose next in the first window. It is quite similar to bug 10365.... -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 14

[Bug 38096] New: Nero Burning ROM v8 needs 'NetUserEnum' level 20 support (USER_INFO_20)
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

https://bugs.winehq.org/show_bug.cgi?id=38096 Bug ID: 38096 Summary: Nero Burning ROM v8 needs 'NetUserEnum' level 20 support (USER_INFO_20) Product: Wine Version: 1.7.36 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: netapi32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 17322 'Nero Burning ROM 8' still fails and spams the terminal with: --- snip --- fixme:netapi32:NetUserEnum level 20 not supported --- snip --- Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 10287] New: unable to install nero 8
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

http://bugs.winehq.org/show_bug.cgi?id=10287 Summary: unable to install nero 8 Product: Wine Version: CVS/GIT Platform: Other OS/Version: other Status: NEW Severity: major Priority: P2 Component: wine-msi AssignedTo: wine-bugs(a)winehq.org ReportedBy: infyquest(a)gmail.com Created an attachment (id=8939) --> (http://bugs.winehq.org/attachment.cgi?id=8939) nreo console output I am unable to install nero 8. It comes up the screen Preparing Installation, then suddenly it crashes. I am attaching the console output -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 35

[Bug 24889] New: Fresh Diagnose: Hangs up on enumeration of user accounts
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

http://bugs.winehq.org/show_bug.cgi?id=24889 Summary: Fresh Diagnose: Hangs up on enumeration of user accounts Product: Wine Version: 1.3.5 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: lukasz.wojnilowicz(a)gmail.com Steps to reproduce: 1) remove ~/.wine 2) winetricks gecko 3) install Fresh Diagnose 4) wine fdiag.exe 5) Unfold tree Software System->User Accounts Behaviour: Application hangs up. Expected behaviour: Application shouldn't hang up. Terminal output: In terminal there are many of those lines fixme:netapi32:NetUserEnum ((null),0, 0x0,0xd0eca4,-1,0xd0ecb0,0xd0ecac,0xd0eca8) stub! -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 4

[Bug 17322] New: Fresh Diagnose 8.0 : goes on a "loop", and has to be "killed", when trying to get information for the system users.
by wine-bugs＠winehq.org Nov. 17, 2021

Nov. 17, 2021

http://bugs.winehq.org/show_bug.cgi?id=17322 Summary: Fresh Diagnose 8.0 : goes on a "loop", and has to be "killed", when trying to get information for the system users. Product: Wine Version: 1.1.10 Platform: PC URL: http://www.snapfiles.com/get/freshdiagnose.html OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: 231036448(a)freemail.gr Fresh Diagnose 8.0 : goes on a "loop", and has to be "killed", when trying to get information for the system users. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 14