October 2021 - Wine-Bugs - list.winehq.org

[Bug 21483] New: changed token security breaks .NET Framework SDK tools
by wine-bugs＠winehq.org Nov. 16, 2025

Nov. 16, 2025

http://bugs.winehq.org/show_bug.cgi?id=21483 Summary: changed token security breaks .NET Framework SDK tools Product: Wine Version: 1.1.33 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wineserver AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, some of Microsoft's tools from .NET Framework SDKs - namely managed debuggers (CLR) - stopped working after 1.1.33+ release. They seem to be very picky about object security. I bisected this one but technically this isn't a regression because Rob's token patches made Wine more correct - exposing another object security problem. --- snip --- $ git bisect bad bd56916f90e68632993a7275fe30a55a7efa222a is the first bad commit commit bd56916f90e68632993a7275fe30a55a7efa222a Author: Rob Shearman <robertshearman(a)gmail.com> Date: Mon Nov 16 20:11:06 2009 +0000 server: Extend get_token_user server call to also retrieve SIDs for the token's owner or primary group. :040000 040000 829f1543526675ae48f6fde8c8cedff74fd51797 7a77653291795c209ec529dd6660d52fc922a58c M dlls :040000 040000 57735b53b28db37ac4627dc009000e225175164a 4dcc1388cb136e559c06106632c08e8e610fe557 M include :040000 040000 4e83227cb0133c7e288a1e930461d4efe1130882 cf1c3539d6b3c91c854fa2b9b672f68ea601f639 M server --- snip --- "old" behaviour, where default process token was like this: Token owner -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) NtQueryInformationToken had the token owner info hard-coded (to SECURITY_INTERACTIVE_RID) while Rob's patches moved the actual query to wineserver. --- Basically the app code that verifies the security of created objects goes like this: - get SD from created object (event) handle -> GetKernelObjectSecurity( OWNER_SECURITY_INFORMATION | DACL_SECURITY_INFORMATION) - get owner SID of SD -> GetSecurityDescriptorOwner() -> SID1 - get DACL of SD -> GetSecurityDescriptorDacl() - for each ACE from DACL (GetAce) -> SID2: check ACE SID against SD owner SID -> EqualSid( SID1, SID2) - match -> profit! not -> fail! --- snip --- ... 0023: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0014,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}},name=L"Global\\CorDBIPCSetupSyncEvent_36"} ) 0023: create_event() = 0 { handle=01c4 } ... 0025:trace:advapi:GetKernelObjectSecurity (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025:trace:ntdll:NtQuerySecurityObject (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025: get_security_object( handle=00c4, security_info=00000005 ) 0025: get_security_object() = 0 { sd_len=00000050, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}} } 0025:trace:ntdll:RtlGetDaclSecurityDescriptor (0x14ef40,0x33f7c3,0x33f7ec,0x33f7c2) 0025:trace:ntdll:RtlGetAce (0x14ef60,0,0x33f7f0) 0025:trace:ntdll:RtlLengthSid sid=0x14ef54 0025: open_event( access=001f0003, attributes=00000002, rootdir=0034, name=L"Global\\CorDBIPCLSEventAvailName_36" ) 0025: open_event() = 0 { handle=00c8 } ... --- snip --- "new" behaviour, where default process token is now like this: Token owner -> S-1-5-32-544 "BUILTIN\Administrators" (alias) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) --- snip --- ... 0024:trace:ntdll:NtOpenProcessTokenEx (0x1b0,0x00000008,0x00000000,0x318e6d0) 0024: open_token( handle=01b0, access=00000008, attributes=00000000, flags=00000000 ) 0024: open_token() = 0 { token=01b4 } ... 0024:trace:advapi:GetTokenInformation (0x1b4, TokenOwner, 0x184130, 20, 0x318e6e0): 0024:trace:ntdll:NtQueryInformationToken (0x1b4,4,0x184130,20,0x318e6e0) 0024: get_token_sid( handle=01b4, which_sid=00000004 ) 0024: get_token_sid() = 0 { sid_len=16, sid={S-1-5-32-544} } ... 0024: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0018,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}},name=L"Global\\CorDBIPCSetupSyncEvent_37"} ) 0024: create_event() = 0 { handle=01c8 } ... 0026:trace:advapi:GetKernelObjectSecurity (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026:trace:ntdll:NtQuerySecurityObject (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026: get_security_object( handle=00c8, security_info=00000005 ) 0026: get_security_object() = 0 { sd_len=00000058, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}} } ... --- snip --- Using the "admins" sid (alias) as token user in server/token.c:token_create_admin() instead of current "interactive" sid fixes the problem. Though I don't know if this is the right thing to do. I hope I provided enough infos and let Alexandre handle it ;-) To get detailed token infos/dumps you might be interested in this little console app, from cygwin's Corinna Vinschen ;-) http://www.mail-archive.com/cygwin(a)cygwin.com/msg71800.html It might provide useful information when run under different security principals. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 19

[Bug 45000] New: Ziphead by CNCD & Fairlight fails with GL_OUT_OF_MEMORY
by wine-bugs＠winehq.org Nov. 16, 2025

Nov. 16, 2025

https://bugs.winehq.org/show_bug.cgi?id=45000 Bug ID: 45000 Summary: Ziphead by CNCD & Fairlight fails with GL_OUT_OF_MEMORY Product: Wine Version: 3.6 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: arabek+wine(a)gmail.com Distribution: --- Created attachment 61129 --> https://bugs.winehq.org/attachment.cgi?id=61129 wine-staging ziphead.log (gzipped) A demoscene demo from 2015 fails to show any kind of output. I'm attaching the log. Expected result: running as under native Windows. Wine version: 3.6 & 3.6-staging (basically the same output, attached is the log from staging). -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 50182] New: Hotline Miami 2 GOG version not launch after install.
by WineHQ Bugzilla Nov. 14, 2025

Nov. 14, 2025

https://bugs.winehq.org/show_bug.cgi?id=50182 Bug ID: 50182 Summary: Hotline Miami 2 GOG version not launch after install. Product: Wine Version: 5.21 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: pamungkassendy(a)gmail.com Distribution: --- Created attachment 68700 --> https://bugs.winehq.org/attachment.cgi?id=68700 Hotline Miami 2 GOG Version Game Didn't launch and instead give a crasth report -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 1

[Bug 47251] New: add support for ConPTY API (pseudo console)
by wine-bugs＠winehq.org Nov. 14, 2025

Nov. 14, 2025

https://bugs.winehq.org/show_bug.cgi?id=47251 Bug ID: 47251 Summary: add support for ConPTY API (pseudo console) Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: enhancement Priority: P2 Component: cmd Assignee: wine-bugs(a)winehq.org Reporter: programmerjake(a)gmail.com Distribution: --- as in title. API reference: https://docs.microsoft.com/en-us/windows/console/creating-a-pseudoconsole-s… -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 48109] New: Lynx web browser shows console window that gradually gets smaller and then quits
by WineHQ Bugzilla Nov. 14, 2025

Nov. 14, 2025

https://bugs.winehq.org/show_bug.cgi?id=48109 Bug ID: 48109 Summary: Lynx web browser shows console window that gradually gets smaller and then quits Product: Wine Version: 4.20 Hardware: x86-64 URL: ftp://ftp.invisible-island.net/lynx/lynx2.8.9rel.1-set up.exe OS: Mac OS X Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: tobbi.bugs(a)googlemail.com Created attachment 65693 --> https://bugs.winehq.org/attachment.cgi?id=65693 screencast $ wine --version wine-4.20 $ openssl sha256 lynx2.8.9rel.1-setup.exe SHA256(lynx2.8.9rel.1-setup.exe)= 89673bb3b5a8c85dbcd9ada860d5cedeae760ea9c302884b9e6108b5b59722a5 When I try to start the lynx web browser it just shows a console window that gradually gets smaller, then the app quits. Shown in the attached screencast. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 51630] New: "Enemy Territory: Quake Wars SDK 1.5 (EditWorld)" When typing in dialog forms (values, file names, etc.) program crashes
by WineHQ Bugzilla Nov. 14, 2025

Nov. 14, 2025

https://bugs.winehq.org/show_bug.cgi?id=51630 Bug ID: 51630 Summary: "Enemy Territory: Quake Wars SDK 1.5 (EditWorld)" When typing in dialog forms (values, file names, etc.) program crashes Product: Wine Version: 6.15 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: shell32 Assignee: wine-bugs(a)winehq.org Reporter: tx3nl5aq(a)protonmail.com Distribution: Slackware Created attachment 70486 --> https://bugs.winehq.org/attachment.cgi?id=70486 console output with WINEDEBUG=+seh,+tid,+loaddll DESCRIPTION: ------------- When typing in dialog forms (values, file names, etc.) program crashes on first character. Pasting text in these forms works with "SHIFT+INS", but confirming it with "Enter" causes the program crash. REPRODUCTION: ------------- # set "Windows Version: Windows XP" with winecfg on new wineprefix WINEARCH=win32 WINEPREFIX=[WINEPREFIX] winecfg # install ETQW from disk WINEPREFIX=[WINEPREFIX] wine /mnt/dvd/setup.exe # upgrade game to 1.5 version from: # https://cdn.splashdamage.com/downloads/games/etqw/ETQW-client-1.0-1.5-updat… # cfdea517cca5c34eda3100d6097f372e30484118 ETQW-client-1.0-1.5-update.exe WINEPREFIX=[WINEPREFIX] wine ETQW-client-1.0-1.5-update.exe # install ETQW-SDK-1.5 from: # https://cdn.splashdamage.com/downloads/games/etqw/ETQW-SDK-1.5.exe # 6ef6913398aa37401165328b4886bf5b33bd33f7 ETQW-SDK-1.5.exe WINEPREFIX=[WINEPREFIX] wine ETQW-SDK-1.5.exe # launch sdklauncher.exe from "SDK 1.5" installation directory cd [WINEPREFIX]/[PATH]/SDK\ 1.5 WINEPREFIX=[WINEPREFIX] wine sdklauncher.exe # set the game path and choose the tool to launch: "editWorld" # click on "Property Editor" tab inside "Inspectors" window # type something in "Value" form # at this point the program crashes ATTACHMENTS: ------------ console output with WINEDEBUG=+seh,+tid,+loaddll: "console.txt" corresponding backtrace: "backtrace.txt" images of windows forms: "save.jpg", "value.jpg" -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 10

[Bug 45533] New: Puyo Puyo Tetris (Steam) - Game crashes on startup
by wine-bugs＠winehq.org Nov. 14, 2025

Nov. 14, 2025

https://bugs.winehq.org/show_bug.cgi?id=45533 Bug ID: 45533 Summary: Puyo Puyo Tetris (Steam) - Game crashes on startup Product: Wine Version: 3.13 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: sirmentio123(a)gmail.com Distribution: --- Created attachment 61934 --> https://bugs.winehq.org/attachment.cgi?id=61934 These logs are made from the moment I launch steam through the wine prefix to when the application crashes and when I close it/steam itself out The program crashes upon launch in the Steam version. win64 was required in order to play. This was tested obviously with the Steam version and I'm not sure if it's the same for the one from the SEGA store. As far as I know. Using the staging version of 3.13 Ubuntu 18.04 x86 64 Nvidia driver 390 X.Org X Server 1.19.6 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 11

[Bug 50017] New: Atmel studio 7.0.2397 installer stops (without any error).
by WineHQ Bugzilla Nov. 14, 2025

Nov. 14, 2025

https://bugs.winehq.org/show_bug.cgi?id=50017 Bug ID: 50017 Summary: Atmel studio 7.0.2397 installer stops (without any error). Product: Wine Version: 5.19 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: cedric.dewijs(a)eclipso.eu Distribution: ArchLinux Created attachment 68444 --> https://bugs.winehq.org/attachment.cgi?id=68444 Console messages ummary: Atmel studio 7.0.2397 installer stops (without any error). Steps to reproduce: 0) reset the wine environment: $ rm -rf ~/.wine/ && $ wineserver -k $ wineboot 1) Download Atmel studio 7: http://studio.download.atmel.com/7.0.2397/as-installer-7.0.2397-web.exe $ sha256sum as-installer-7.0.2397-web.exe f934c7f1a201a296e45303c464931dd1346f712b9db675a4512001f02dc55732 as-installer-7.0.2397-web.exe 2) Start the web installer: $ wine as-installer-7.0.2397-web.exe Now the Atmel studio splash screen comes up briefly, and then the installer stops. My versions: $ wine --version wine-5.19 (Staging) [cedric(a)cedric-p4 Downloads]$ pacman -Q wine wine-staging 5.19-1 [cedric(a)cedric-p4 Downloads]$ uname -a Linux cedric-p4 5.8.14-arch1-1 #1 SMP PREEMPT Wed, 07 Oct 2020 23:59:46 +0000 x86_64 GNU/Linux -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 11

[Bug 23077] New: UltraEdit 16.10: Plus sign doesn't appear in directory tree
by wine-bugs＠winehq.org Nov. 13, 2025

Nov. 13, 2025

http://bugs.winehq.org/show_bug.cgi?id=23077 Summary: UltraEdit 16.10: Plus sign doesn't appear in directory tree Product: Wine Version: 1.2-rc2 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: lukasz.wojnilowicz(a)gmail.com Created an attachment (id=28652) --> (http://bugs.winehq.org/attachment.cgi?id=28652) Image showing the problem Steps to reproduce: 1) remove ~/.wine 2) install UltraEdit 3) wine Uedit32.exe 4) close all popup windows (buy now, tip of the day etc.) 5) In "File View" Window click on plus sign of "C" then "Program Files" 6) Click on plus sign of "Internet Explorer" branch will unfold, plus sign changes to minus sign 7) Click on minus sign of "Internet Explorer" branch will fold Behaviour: After seventh step minus sign of "Internet Explorer" stays minus sign and I cannot unfold that branch anymore Expected behaviour: After seventh step minus sign of "Internet Explorer" should convert itself into plus sign and I should have ability to unfold the branch In terminal I get only fixme:win:LockWindowUpdate (0x100a0), partial stub! fixme:win:LockWindowUpdate ((nil)), partial stub! for every successful fold/unfold operation -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 13

[Bug 47154] New: Rise of the Tomb Raider crashes after 1st bink video
by wine-bugs＠winehq.org Nov. 11, 2025

Nov. 11, 2025

https://bugs.winehq.org/show_bug.cgi?id=47154 Bug ID: 47154 Summary: Rise of the Tomb Raider crashes after 1st bink video Product: vkd3d Version: 1.1 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: vkd3d Assignee: wine-bugs(a)winehq.org Reporter: berillions(a)gmail.com Distribution: --- Created attachment 64383 --> https://bugs.winehq.org/attachment.cgi?id=64383 Rise of the Tomb Raider d3d12 log Hello, I'm on Gentoo + AMD Rx580 + Mesa Git + LLVM git (9.0.0) + Vkd3d Git and i decided to try the only d3d12 game i have : Rise of the Tomb Raider. The game runs but crash after the 1st bink video when the main menu must be appear. The game runs on wined3d/d3d11 but it's unplayable, works (of course with DXVK) and with the Native version. I attach the +d3d12 log. Josef, i you need something else to help you, don't hesitate. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 9