July 2021 - Wine-Bugs - list.winehq.org

[Bug 51375] New: SCM erroneously tries to start 64-bit kernel drivers as 32-bit service due to incorrect handling of 'IMAGE_FILE_DLL' image characteristics in 'kernel32.dll.GetBinaryTypeW' (Protect DiSC 'acedrv11.sys')

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=51375 Bug ID: 51375 Summary: SCM erroneously tries to start 64-bit kernel drivers as 32-bit service due to incorrect handling of 'IMAGE_FILE_DLL' image characteristics in 'kernel32.dll.GetBinaryTypeW' (Protect DiSC 'acedrv11.sys') Product: Wine Version: 6.11 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. https://web.archive.org/web/20210701055235/https://dl.4players.de/f1/pc/cob… 'acedrv11.sys' kernel service from 'Protect DiSC' DRM scheme (continuation of bug 39734) fails to load. It's a 64-bit driver with 'WOW64=1' service entry value set by 32-bit driver installer. --- snip --- $ pwd /home/focht/.wine/drive_c/windows/system32/drivers $ winedump acedrv11.sys Contents of acedrv11.sys: 335288 bytes File Header Machine: 8664 (AMD64) Number of Sections: 7 TimeDateStamp: 4890016E (Wed Jul 30 07:51:42 2008) offset 256 PointerToSymbolTable: 00000000 NumberOfSymbols: 00000000 SizeOfOptionalHeader: 00F0 Characteristics: 0022 EXECUTABLE_IMAGE LARGE_ADDRESS_AWARE Optional Header (64bit) Magic 0x20B 523 linker version 8.00 size of code 0x24200 147968 size of initialized data 0x2a00 10752 size of uninitialized data 0x0 0 entrypoint RVA 0x29008 167944 base of code 0x1000 4096 image base 0x300000 section align 0x1000 4096 file align 0x200 512 required OS version 6.00 image version 6.00 subsystem version 5.02 Win32 Version 0x0 0 size of image 0x56000 352256 size of headers 0x400 1024 checksum 0x5db88 383880 Subsystem 0x1 (Native) DLL characteristics: 0x0000 stack reserve size 0x40000 stack commit size 0x1000 heap reserve size 0x100000 heap commit size 0x1000 loader flags 0x0 0 RVAs & sizes 0x10 16 ... --- snip --- --- snip --- $ WINEDEBUG=+seh,+relay,+server,+ntoskrnl,+loaddll,+module wine net start acedrv11 >>log.txt 2>&1 ... 00d8:Call KERNEL32.GetBinaryTypeW(00168450 L"C:\\windows\\system32\\drivers\\acedrv11.sys",013df330) ret=140006426 ... 00d8:trace:module:GetBinaryTypeW L"C:\\windows\\system32\\drivers\\acedrv11.sys" ... 00d8:Call ntdll.NtQuerySection(00000158,00000001,013df0f0,00000040,00000000) ret=7b61b6dd 00d8: get_mapping_info( handle=0158, access=00000001 ) 00d8: get_mapping_info() = 0 { size=00056000, flags=01800000, shared_file=0000, total=176, image={base=00300000,entry_point=00329008,map_size=00056000,stack_size=00040000,stack_commit=00001000,zerobits=00000000,subsystem=00000001,subsystem_minor=0002,subsystem_major=0005,osversion_major=0006,osversion_minor=0000,image_charact=0022,dll_charact=0000,machine=8664,contains_code=1,image_flags=00,loader_flags=00000000,header_size=00000400,file_size=00051db8,checksum=0005db88}, name=L"" } 00d8:Ret ntdll.NtQuerySection() retval=00000000 ret=7b61b6dd ... 00d8:Ret KERNEL32.GetBinaryTypeW() retval=00000000 ret=140006426 00d8:Call KERNEL32.GetSystemDirectoryW(013df390,00000104) ret=1400065ed 00d8:Ret KERNEL32.GetSystemDirectoryW() retval=00000013 ret=1400065ed ... 00d8:Call KERNEL32.CreateProcessW(00000000,00168630 L"C:\\windows\\syswow64\\winedevice.exe",00000000,00000000,100000000,00000400,00176aa0,00000000,013df080,013df020) ret=140006b7e ... 00d8:Ret KERNEL32.CreateProcessW() retval=00000001 ret=140006b7e ... 0114:trace:ntoskrnl:open_driver opened service for driver L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\acedrv11" ... 0114:trace:ntoskrnl:load_driver loading driver L"C:\\windows\\system32\\drivers\\acedrv11.sys" ... 0114:Call KERNEL32.LoadLibraryExW(0042df50 L"C:\\windows\\system32\\drivers\\acedrv11.sys",00000000,00001100) ret=00394979 ... 0114:Call kernelbase.LoadLibraryExW(0042df50 L"C:\\windows\\system32\\drivers ... 0114:Call ntdll.LdrLoadDll(0042e290 L"C:\\windows\\system32\\drivers;C:\\windows\\syswow64;C:\\windows\\system32\\",00001100,00fcfb14,00fcfafc) ret=7b01c045 0034:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7bc42e5f 0114:trace:module:load_dll looking for L"C:\\windows\\system32\\drivers\\acedrv11.sys" in L"C:\\windows\\system32\\drivers;C:\\windows\\syswow64;C:\\windows\\system32\\" ... 0114:warn:module:load_dll Failed to load module L"C:\\windows\\system32\\drivers\\acedrv11.sys"; status=c0000135 ... 0114:Ret ntdll.LdrLoadDll() retval=c0000135 ret=7b01c045 ... 0114:Ret kernelbase.LoadLibraryExW() retval=00000000 ret=7bc3aa34 ... 0114:Ret KERNEL32.LoadLibraryExW() retval=00000000 ret=00394979 ... 0114:err:ntoskrnl:ZwLoadDriver failed to create driver L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\acedrv11": c0000142 --- snip --- Workaround: Remove 'WOW64=1' registry key from service (leads to fallback with 'false' setting). This is actually a regression: https://source.winehq.org/git/wine.git/commitdiff/1e1f110c99fba4c33ebe85bf1… ("kernel32: Return failure in GetBinaryType() for DLL files.") --- snip --- 166 BOOL WINAPI GetBinaryTypeW( LPCWSTR name, LPDWORD type ) 167 { 168 HANDLE hfile, mapping; 169 NTSTATUS status; 170 const WCHAR *ptr; 171 172 TRACE("%s\n", debugstr_w(name) ); 173 174 if (type == NULL) return FALSE; 175 176 hfile = CreateFileW( name, GENERIC_READ, FILE_SHARE_READ, NULL, OPEN_EXISTING, 0, 0 ); 177 if ( hfile == INVALID_HANDLE_VALUE ) 178 return FALSE; 179 180 status = NtCreateSection( &mapping, STANDARD_RIGHTS_REQUIRED | SECTION_QUERY, 181 NULL, NULL, PAGE_READONLY, SEC_IMAGE, hfile ); 182 CloseHandle( hfile ); 183 184 switch (status) 185 { 186 case STATUS_SUCCESS: 187 { 188 SECTION_IMAGE_INFORMATION info; 189 190 status = NtQuerySection( mapping, SectionImageInformation, &info, sizeof(info), NULL ); 191 CloseHandle( mapping ); 192 if (status) return FALSE; 193 if (!(info.ImageCharacteristics & IMAGE_FILE_DLL)) return FALSE; 194 switch (info.Machine) ... --- snip --- The condition is reversed. The function shall fail if the driver binary has 'IMAGE_FILE_DLL' image characteristics set. $ sha1sum BurningWheelsDemo.exe 6dc03653b97a0336a5c57fc4b04af61e3ebcee5e BurningWheelsDemo.exe $ du -sh BurningWheelsDemo.exe 286M BurningWheelsDemo.exe $ wine --version wine-6.11-235-g7f1623bc626 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021

[Bug 51374] New: GreedFall 1.0.5684 fails with Unhandled exception: unimplemented function KERNEL32.dll.GetCurrentPackagePath called in 64-bit code (0x000000007bc34098)

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=51374 Bug ID: 51374 Summary: GreedFall 1.0.5684 fails with Unhandled exception: unimplemented function KERNEL32.dll.GetCurrentPackagePath called in 64-bit code (0x000000007bc34098) Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: mo78(a)abv.bg Distribution: --- Created attachment 70231 --> https://bugs.winehq.org/attachment.cgi?id=70231 GreedFall Wine Log Hello, The game fails with the following error: Unhandled exception: unimplemented function KERNEL32.dll.GetCurrentPackagePath called in 64-bit code (0x000000007bc34098) I tried Wine, Wine-Staging, Proton, ProtonGE to no avail. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021

[Bug 51052] 6.4 regression: 32-bit Cheat Engine attaching its debugger leads to the target process crashing

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=51052 Gijs Vermeulen <gijsvrm(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution|--- |FIXED --- Comment #2 from Gijs Vermeulen <gijsvrm(a)gmail.com> --- Thanks for reporting back, marking FIXED. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021

[Bug 49165] Multiple kernel drivers crash in entry point due to 'IoGetDeviceObjectPointer' returning a stub device when the device object doesn't exist (VeraCrypt 1.24 'veracrypt_x64.sys', NAV 2010 'ccHPx64.sys', Protect DiSC 'acedrv11.sys')

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=49165 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Multiple kernel drivers |Multiple kernel drivers |crash in entry point due to |crash in entry point due to |'IoGetDeviceObjectPointer' |'IoGetDeviceObjectPointer' |returning a stub device |returning a stub device |when the device object |when the device object |doesn't exist (VeraCrypt |doesn't exist (VeraCrypt |1.24 'veracrypt_x64.sys', |1.24 'veracrypt_x64.sys', |NAV 2010 'ccHPx64.sys') |NAV 2010 'ccHPx64.sys', | |Protect DiSC | |'acedrv11.sys') Keywords| |obfuscation --- Comment #5 from Anastasius Focht <focht(a)gmx.net> --- Hello folks, revisiting, still present. Adding another driver 'acedrv11.sys' from 'Protect DiSC' DRM scheme (continuation of bug 39734) https://web.archive.org/web/20210701055235/https://dl.4players.de/f1/pc/cob… NOTE: The driver service startup suffers from bug 50431 (remove 'WOW64' driver key). --- snip --- $ pwd /home/focht/.wine/drive_c/windows/system32/drivers $ file acedrv11.sys acedrv11.sys: PE32+ executable (native) x86-64, for MS Windows --- snip --- --- snip --- $ WINEDEBUG=+seh,+relay,+server,+ntoskrnl,+loaddll,+module wine net start acedrv11 >>log.txt 2>&1 ... 0120:trace:loaddll:build_module Loaded L"C:\\windows\\system32\\drivers\\acedrv11.sys" at 0000000000DC0000: native ... 0120:trace:module:process_attach (L"acedrv11.sys",0000000000000000) - START 0120:Call LDR notification callback (proc=0000000000367A00,reason=1,data=0000000000C7F2A0,context=0000000000000000) ... 0120:trace:ntoskrnl:ldr_notify_callback loading L"acedrv11.sys" ... 0120:Ret LDR notification callback (proc=0000000000367A00,reason=1,data=0000000000C7F2A0,context=0000000000000000) 0120:trace:module:process_attach (L"acedrv11.sys",0000000000000000) - END 0120:Ret ntdll.LdrLoadDll() retval=00000000 ret=7b020d66 ... 0120:Ret kernelbase.LoadLibraryExW() retval=00dc0000 ret=7bc42e5f 0120:Ret KERNEL32.LoadLibraryExW() retval=00dc0000 ret=003664b6 ... 0120:Call driver init 0000000000DE9008 (obj=0000000000173930,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\acedrv11") ... 0120:Call ntoskrnl.exe.IoCreateDevice(00173930,00000048,00c7f6c8,00000022,00000000,00000000,00c7f6c0) ret=00e09947 ... 0120:trace:ntoskrnl:IoCreateDevice (0000000000173930, 72, L"\\Device\\PCDDRV11", 34, 0, 0, 0000000000C7F6C0) 0120:Call ntdll.RtlAllocateHeap(00140000,00000008,000001a8) ret=00361a7e 0120:Ret ntdll.RtlAllocateHeap() retval=001742a0 ret=00361a7e 0120: create_device( rootdir=0000, user_ptr=001742b0, manager=0040, name=L"\\Device\\PCDDRV11" ) 0120: create_device() = 0 0034:Call ntdll.RtlEnterCriticalSection(7f9c6bdbea20) ret=7f9c6bd6bd9d 0120:Ret ntoskrnl.exe.IoCreateDevice() retval=00000000 ret=00e09947 ... 0120:Call ntoskrnl.exe.IoCreateSymbolicLink(00c7f6f8,00c7f6c8) ret=00e0996f ... 0120:trace:ntoskrnl:IoCreateSymbolicLink L"\\DosDevices\\ACEDRV11" -> L"\\Device\\PCDDRV11" 0120:Call ntdll.NtCreateSymbolicLinkObject(00c7f5b0,000f0001,00c7f5b8,00c7f6c8) ret=00361ffd 0120: create_symlink( access=000f0001, objattr={rootdir=0000,attributes=000000d0,sd={},name=L"\\DosDevices\\ACEDRV11"}, target_name=L"\\Device\\PCDDRV11" ) 0120: create_symlink() = 0 { handle=0048 } 0120:Ret ntdll.NtCreateSymbolicLinkObject() retval=00000000 ret=00361ffd ... 0120:Ret ntoskrnl.exe.IoCreateSymbolicLink() retval=00000000 ret=00e0996f ... 0120:Call ntoskrnl.exe.IoGetDeviceObjectPointer(00c7f6c8,00000080,00c7f740,00c7f738) ret=00dc86fe ... 0120:fixme:ntoskrnl:IoGetDeviceObjectPointer stub: L"\\DosDevices\\CdRom0" 80 0000000000C7F740 0000000000C7F738 0120:Ret ntoskrnl.exe.IoGetDeviceObjectPointer() retval=00000000 ret=00dc86fe 0120:Call ntoskrnl.exe.ExAllocatePool(00000000,000000b8) ret=00de1064 0120:Call ntdll.RtlAllocateHeap(00a00000,00000000,000000b8) ret=0035ffc8 0120:Ret ntdll.RtlAllocateHeap() retval=00a00470 ret=0035ffc8 0120:trace:ntoskrnl:ExAllocatePoolWithTag 184 pool 0 -> 0000000000A00470 0120:Ret ntoskrnl.exe.ExAllocatePool() retval=00a00470 ret=00de1064 0120:Call ntoskrnl.exe.KeInitializeEvent(00a00478,00000000,00000000) ret=00de1187 0120:trace:ntoskrnl:KeInitializeEvent event 0000000000A00478, type 0, state 0. 0120:Ret ntoskrnl.exe.KeInitializeEvent() retval=00000029 ret=00de1187 0120:Call ntoskrnl.exe.IoBuildSynchronousFsdRequest(00000003,0038d5c8,00de6ec0,00000060,00c7f650,00a00478,00c7f658) ret=00e0bc4b 0120:trace:ntoskrnl:IoBuildSynchronousFsdRequest (3 000000000038D5C8 0000000000DE6EC0 96 0000000000C7F650 0000000000C7F658) 0120:trace:ntoskrnl:IoBuildAsynchronousFsdRequest (3 000000000038D5C8 0000000000DE6EC0 96 0000000000C7F650 0000000000C7F658) 0120:trace:ntoskrnl:IoAllocateIrp -128, 0 0120:Call ntdll.RtlAllocateHeap(00a00000,00000000,00000310) ret=0035fea9 0120:Ret ntdll.RtlAllocateHeap() retval=00a00540 ret=0035fea9 0120:trace:ntoskrnl:ExAllocatePoolWithTag 784 pool 0 -> 0000000000A00540 0120:trace:ntoskrnl:IoInitializeIrp 0000000000A00540, 784, -128 0120:Call msvcrt.memset(00a00540,00000000,00000310) ret=0035ff43 0120:Ret msvcrt.memset() retval=00a00540 ret=0035ff43 0120:trace:seh:dispatch_exception code=c0000005 flags=0 addr=0000000000360A9E ip=0000000000360A9E tid=0120 0120:trace:seh:dispatch_exception info[0]=0000000000000001 0120:trace:seh:dispatch_exception info[1]=00000000009fe1c8 0120:warn:seh:dispatch_exception EXCEPTION_ACCESS_VIOLATION exception (code=c0000005) raised 0120:trace:seh:dispatch_exception rax=0000000000a00540 rbx=0000000000000003 rcx=0000000000c9ea80 rdx=0000000000000000 0120:trace:seh:dispatch_exception rsi=000000000038d5c8 rdi=0000000000a00540 rbp=0000000000c7f480 rsp=0000000000c7f430 0120:trace:seh:dispatch_exception r8=0000000000000000 r9=0000000000000030 r10=00007f732f8a6768 r11=0000000000000000 0120:trace:seh:dispatch_exception r12=00000000009fe210 r13=0000000000c7f650 r14=0000000000000060 r15=0000000000de6ec0 0120:trace:seh:call_vectored_handlers calling handler at 000000000035D380 code=c0000005 flags=0 0120:trace:seh:call_vectored_handlers handler at 000000000035D380 returned 0 ... wine: Unhandled page fault on write access to 00000000009FE1C8 at address 0000000000360A9E (thread 0120), starting debugger... --- snip --- $ sha1sum BurningWheelsDemo.exe 6dc03653b97a0336a5c57fc4b04af61e3ebcee5e BurningWheelsDemo.exe $ du -sh BurningWheelsDemo.exe 286M BurningWheelsDemo.exe $ wine --version wine-6.11-235-g7f1623bc626 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021

[Bug 8606] No network-support in the game Joint Operations Typhoon Rising

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=8606 Matteo Bruni <matteo.mystral(a)gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |35288d6537652989473dd87258d | |e5b006d60b589 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021

[Bug 39739] Cobra 11 - Burning Wheels demo: crashes when starting the tutorial

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=39739 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- URL|http://www.4players.de/4pla |https://web.archive.org/web |yers.php/download_info/Down |/20210701055235/https://dl. |loads/Download/50183/Alarm_ |4players.de/f1/pc/cobra_11_ |fuer_Cobra_11_Burning_Wheel |nitro/BurningWheelsDemo.exe |s/Deutsche_Demo.html | CC| |focht(a)gmx.net -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021

[Bug 39738] Protect DiSC v9.x DRM scheme prevents collection of crash information by configured JIT debugger (Cobra 11 - Burning Wheels)

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=39738 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- URL|http://www.4players.de/4pla |https://web.archive.org/web |yers.php/download_info/Down |/20210701055235/https://dl. |loads/Download/50183/Alarm_ |4players.de/f1/pc/cobra_11_ |fuer_Cobra_11_Burning_Wheel |nitro/BurningWheelsDemo.exe |s/Deutsche_Demo.html | -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021

[Bug 39734] ProtectDisc Driver 11: acedrv11.sys crashes

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=39734 Anastasius Focht <focht(a)gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download, obfuscation URL|http://www.4players.de/4pla |https://web.archive.org/web |yers.php/download_info/Down |/20210701055235/https://dl. |loads/Download/50183/Alarm_ |4players.de/f1/pc/cobra_11_ |fuer_Cobra_11_Burning_Wheel |nitro/BurningWheelsDemo.exe |s/Deutsche_Demo.html | CC| |focht(a)gmx.net -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021

[Bug 51373] New: Videos from Super Seducer won't work anymore

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=51373 Bug ID: 51373 Summary: Videos from Super Seducer won't work anymore Product: Wine Version: 6.0.1 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: chaosstare(a)live.fr Distribution: --- Hi, On Wine 6.0, I could play / see the videos while playing Super Seducer 1 / 2 (didn't try the third episode), it's not longer the case with Wine 6.0.1 or later. Nicolas -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021

[Bug 51372] Resident Evil 4 (2007) Sometimes crashes at startup.

by WineHQ Bugzilla

https://bugs.winehq.org/show_bug.cgi?id=51372 Lunknown <BOBBLOG(a)protonmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #70229|0 |1 is obsolete| | --- Comment #1 from Lunknown <BOBBLOG(a)protonmail.com> --- Created attachment 70230 --> https://bugs.winehq.org/attachment.cgi?id=70230 RE4Terminal.txt -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

July 1, 2021