July 2021 - Wine-Bugs - list.winehq.org

[Bug 38714] New: 64-bit ARM Windows applications from Windows SDK crash in entry (loader needs to set/randomize cookie for PE modules)
by wine-bugs＠winehq.org July 18, 2021

July 18, 2021

https://bugs.winehq.org/show_bug.cgi?id=38714 Bug ID: 38714 Summary: 64-bit ARM Windows applications from Windows SDK crash in entry (loader needs to set/randomize cookie for PE modules) Product: Wine Version: 1.7.44 Hardware: aarch64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, this is more an educated guess since I only have remote access to some 64-bit ARM Linux VM without proper debugging tools. Winedbg/gdb proxy is unusable as of now and my shiny JTAG Debugger for Cortex-A5x (ICD) can't work "remotely". Anyway, I think I gathered enough information without the need for debugging. Don't complain about 'root' - it's not my machine :) --- snip --- # wine64 winedbg arm64/mt.exe Wine-dbg>info process pid threads executable (all id:s are in hex) >00000024 1 'mt.exe' 00000026 2 \_ 'wineconsole.exe' 00000014 4 'explorer.exe' 0000000e 5 'services.exe' 0000001b 3 \_ 'plugplay.exe' 00000012 3 \_ 'winedevice.exe' Wine-dbg>info thread process tid prio (all id:s are in hex) 0000000e services.exe 0000001e 0 0000001d 0 00000016 0 00000010 0 0000000f 0 00000012 winedevice.exe 0000001a 0 00000019 0 00000013 0 00000014 explorer.exe 00000023 0 00000022 0 00000021 0 00000015 0 0000001b plugplay.exe 00000020 0 0000001f 0 0000001c 0 00000024 (D) Z:\root\wine\64\arm64\mt.exe 00000025 0 <== 00000026 wineconsole.exe 00000028 0 00000027 0 --- snip --- --- snip --- Wine-dbg>si be_arm64_single_step: not done Unhandled exception: illegal instruction in 64-bit code (0x000000014010ce78). Register dump: ARM64 EL0t Mode Pc:000000014010ce78 Sp:0000007f8aa6fe20 Lr:000000014010ca7c Pstate:0000000060000000(-ZC-) x0: 0000007f8bd0c000 x1: 0000000000000005 x2: 0000007f8bd0e000 x3: 0000000000000001 x4: 0000000000000001 x5: f5183970d346f95f x6: 0000000000000001 x7: 0000000000000002 x8: 00002b992ddfa232 x9: 00002b992ddfa232 x10:00000000031bb537 x11:0000007f8bd0f078 x12:0000007ffb057a54 x13:0000007ffb057a58 x14:0000007ffb057b20 x15:0000007f8bb35908 ip0:0000007f8b966120 ip1:0000007f8b9c9e10 x18:0000007f8bb359d0 x19:0000007f8bd0c000 x20:000000014010ca70 x21:0000000000000000 x22:0000007f8b949000 x23:0000007f8acd3584 x24:0000007f8acfd000 x25:0000007f8aee07f0 x26:0000007ffb057e90 x27:0000007ffb057e08 x28:0000007f8ad15000 Fp:0000007f8aa6fe20 Stack dump: 0x0000007f8aa6fe20: 0000007f8aa6fe30 0000007f8acd35e0 0x0000007f8aa6fe30: 0000007f8aa6fe60 0000007f8b9310ac 0x0000007f8aa6fe40: 0000007f8acd3584 0000007f8bd0c000 0x0000007f8aa6fe50: 0000000000000000 0000000000000000 0x0000007f8aa6fe60: 0000007f8aa6ffe0 0000007f8b90ca20 0x0000007f8aa6fe70: 0000007f8bd0c000 0000007f8acd3584 0x0000007f8aa6fe80: ffffffffffffffff 0000007f8b941ab4 0x0000007f8aa6fe90: 0000007f8acb67cc 0000007f8acd3584 0x0000007f8aa6fea0: 0000007f8bd0c000 0000000000000000 0x0000007f8aa6feb0: 0000007f8b949000 0000007f8acd3584 0x0000007f8aa6fec0: 0000007f8acfd000 0000007f8aee07f0 0x0000007f8aa6fed0: 0000007ffb057e90 0000007ffb057e08 Backtrace: =>0 0x000000014010ce78 in mt (+0x10ce78) (0x0000007f8aa6fe20) 1 0x000000014010ca7c in mt (+0x10ca7b) (0x0000007f8aa6fe20) ... --- snip --- The entry point code of the app: --- snip --- entry: 0000000140020300 STP X29, X30, [SP,#-0x10]! 0000000140020304 MOV X29, SP 0000000140020308 BL 140020E40 000000014002030C BL 140020318 0000000140020310 LDP X29, X30, [SP],#0x10 0000000140020314 RET ... 0000000140020E40 ADRP X8, #0x140030000 ; .data 0000000140020E44 LDR X8, [X8,#0x800] ; offset to cookie 000000014010CE68 CBZ X8, 14010CE78 000000014010CE6C LDR X9, =0x2B992DDFA232 ; default cookie arm64? 000000014010CE70 CMP X8, X9 000000014010CE74 B.NE 14010CE7C 000000014010CE78 BRK #0xF003 ; whoops, bail here 000000014010CE7C MVN X8, X8 0000000140020E60 ADRP X9, #0x140030000 0000000140020E64 STR X8, [X9,#0x808] 000000014010CE88 RET .data: ... 0000000140030800 DCQ 0x2B992DDFA232 ; module security cookie (default val) --- snip --- Looks like the entry code checks for the default value of the security cookie and bails if it's still unmodified. MSDN: https://msdn.microsoft.com/en-us/library/windows/desktop/ms680328%28v=vs.85… IMAGE_LOAD_CONFIG_DIRECTORY64 -> SecurityCookie (64-bit VA) The loader needs to randomize the cookie for each module if present (= non-zero VA) before calling the entry. --- Another tidbit: For decoding the immediate field in the emitted 'brk' instruction I only found information for the Linux counterpart which says range 0x2000-0xffff is app/user-defined. https://gcc.gnu.org/ml/gcc-patches/2013-11/msg02228.html --- quote --- POSIX siginfo BRK #imm16 si_signo si_code Purpose ---------- -------- ------- ------- 0000-0fff S/w breakpoint, reserved for debuggers 0000-3ff SIGTRAP TRAP_BRKPT- EL0 breakpoint (e.g. gdb) 0400-7ff SIGILL ILL_ILLTRP* EL1 breakpoint (e.g. kgdb) 0800-bff SIGILL ILL_ILLTRP* EL2 breakpoint 0c00-fff SIGILL ILL_ILLTRP* EL3 breakpoint 1000-1fff C/C++ runtime errors 1000 SIGABRT n/a libc abort() 1001 SIGFPE FPE_INTDIV integer divide by zero 1002 SIGFPE FPE_INTOVF integer overflow 1003 SIGFPE FPE_FLTDIV floating-point divide by zero 1004 SIGFPE FPE_FLTOVF floating-point overflow 1005 SIGFPE FPE_FLTUND floating-point underflow 1006 SIGFPE FPE_FLTRES floating-point inexact result 1007 SIGFPE FPE_FLTINV floating-point invalid op 1008 SIGFPE FPE_FLTSUB subscript out of range 1009-1fff SIGILL ILL_ILLTRP unused but reserved 2000-ffff SIGILL ILL_ILLOPC+ Guaranteed unused, resvd for apps - This is the signal generated now for all values of BRK immediate. GDB currently uses "BRK #0" * The EL1/EL2/EL3 breakpoints would deliver a SIGILL if they are executed by EL0 code, and caught by the EL1 kernel. A s/w debugger operating at a higher EL which placed such breakpoints would presumably catch them and handle them, without the EL1 kernel ever seeing them. + Immediate values 0x2000-ffff generate the same signal as any other UNDEFINED instruction encoding, but with guaranteed behaviour for JITs etc. The original imm16 value could be made available in the si_trapno field of the signal context. --- quote --- Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 49025] New: League of Legends crashes at game start (wine 5.7 regression)
by WineHQ Bugzilla July 18, 2021

July 18, 2021

https://bugs.winehq.org/show_bug.cgi?id=49025 Bug ID: 49025 Summary: League of Legends crashes at game start (wine 5.7 regression) Product: Wine Version: 5.7 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: aguertin+wine(a)aguertin.net Distribution: --- League of Legends crashes at game start using wine-staging 5.7. It works fine using wine-staging 5.6 (plus some league-specific patches). I will bisect. Gentoo, x86_64. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 25

[Bug 25558] New: Can't install Flight Simulator X
by wine-bugs＠winehq.org July 18, 2021

July 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=25558 Summary: Can't install Flight Simulator X Product: Wine Version: 1.3.9 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: el.il(a)doom.co.il Created an attachment (id=32543) --> (http://bugs.winehq.org/attachment.cgi?id=32543) Terminal Output Microsoft Flight Simulator X Installation doesn't work. I'm tested with a clean wineprefix. I'm using wine-1.3.9-1.fc14, on 64bit I can see the installer loading dialog, but when the progress line gets to the end, an error shows up, saying "1628: Failed to complete installation". Attached is the terminal output. Notice the line "wine: Invalid address" I think this might need extra debugging. Please note that the bug also occurs in the installer of the demo version. Download: https://www.microsoft.com/games/flightsimulatorx/downloads.html -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 30

[Bug 25373] New: epoc32 emulator don't start
by wine-bugs＠winehq.org July 18, 2021

July 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=25373 Summary: epoc32 emulator don't start Product: Wine Version: 1.3.8 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: daniele(a)smartango.com $ env WINEPREFIX="/home/daniele/.wine" wine "C:\\Symbian\\9.1\\S60_3rd_MR\\Epoc32\\Release\\Winscw\\Udeb\\Epoc.exe" fixme:ntoskrnl:__regs_ExAcquireFastMutex 0x59cd818: stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex (0x59cd850) stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex ((nil)) stub fixme:ntoskrnl:__regs_ExAcquireFastMutex 0x59cd818: stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex (0x59cd850) stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex ((nil)) stub fixme:ntoskrnl:__regs_ExAcquireFastMutex 0x59cd818: stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex (0x59cd850) stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex ((nil)) stub fixme:ntoskrnl:__regs_ExAcquireFastMutex 0x59cd818: stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex (0x59cd850) stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex ((nil)) stub fixme:ntoskrnl:__regs_ExAcquireFastMutex 0x59cd818: stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex (0x59cd850) stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex ((nil)) stub fixme:ntoskrnl:__regs_ExAcquireFastMutex 0x59cd818: stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex (0x59cd850) stub fixme:ntoskrnl:__regs_ExTryToAcquireFastMutex ((nil)) stub fixme:ntoskrnl:__regs_ExAcquireFastMutex 0xffffff01: stub err:mmtime:TIME_MMTimeStop Timer still active?! $ strace env WINEPREFIX="/home/daniele/.wine" wine "C:\\Symbian\\9.1\\S60_3rd_MR\\Epoc32\\Release\\Winscw\\Udeb\\Epoc.exe" 2>mylog.txt I attach strace (fist time I report a bug here, I think strace could be useful ...) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 12628] New: wine: Call from 0x7b840fc8 to unimplemented function hal. dll.ExAcquireFastMutex
by wine-bugs＠winehq.org July 18, 2021

July 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=12628 Summary: wine: Call from 0x7b840fc8 to unimplemented function hal.dll.ExAcquireFastMutex Product: Wine Version: 0.9.59. Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: enhancement Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: jaimeff(a)gmail.com I get the following error: wine: Call from 0x7b840fc8 to unimplemented function hal.dll.ExAcquireFastMutex, aborting It would be great if that function were implemented :) (I'm running epoc.exe, an emulator for Symbian development) -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 25162] New: E-Card Blue Societe general doesn't work
by wine-bugs＠winehq.org July 18, 2021

July 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=25162 Summary: E-Card Blue Societe general doesn't work Product: Wine Version: 1.3.6 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: lightdragonfire(a)msn.com Created an attachment (id=31917) --> (http://bugs.winehq.org/attachment.cgi?id=31917) backtrace The application crash from the launch. I installed ntlm_auth but it didn't resolve my problem. Where download the application ? http://groupe.socgen.com/html/e-carte/V4/ecartebleueSG.exe -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 20

[Bug 34677] New: e-carte bleue la banque postale doesn't work at all
by wine-bugs＠winehq.org July 18, 2021

July 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=34677 Bug #: 34677 Summary: e-carte bleue la banque postale doesn't work at all Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: adri1jld(a)hotmail.fr Classification: Unclassified I install the e-carte bleue (by la banque postale) app on my PC but a window say that there is a serious problem and have to be closed -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 21

[Bug 28937] New: YouSendIt crashes
by wine-bugs＠winehq.org July 18, 2021

July 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=28937 Bug #: 28937 Summary: YouSendIt crashes Product: Wine Version: 1.3.31 Platform: x86 URL: http://www.yousendit.com/cms/standalone-app OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msxml3 AssignedTo: wine-bugs(a)winehq.org ReportedBy: ocean04(a)suomi24.fi Classification: Unclassified YouSendItExpressSetup2_10_2.exe fixme:msxml:domdoc_get_parseError (0x1a944c)->(0x33c3b8): creating a dummy parseError fixme:msxml:parseError_QueryInterface interface {a6ef9860-c720-11d0-9337-00a0c90dcaa9} not implemented fixme:msxml:parseError_QueryInterface interface {719c3050-f9d3-11cf-a493-00400523a8a6} not implemented fixme:msxml:parseError_QueryInterface interface {a6ef9860-c720-11d0-9337-00a0c90dcaa9} not implemented wine: Unhandled page fault on read access to 0x00000010 at address 0x202666e2 (thread 0040), starting debugger... Workaround: winetricks msxml3 -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 29

[Bug 34687] New: Port Royale 2 crashes on startup (SymGetLineFromAddr() returns unix-style path for source file)
by wine-bugs＠winehq.org July 18, 2021

July 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=34687 Bug #: 34687 Summary: Port Royale 2 crashes on startup (SymGetLineFromAddr() returns unix-style path for source file) Product: Wine Version: 1.7.3 Platform: x86 OS/Version: Linux Status: NEW Severity: minor Priority: P2 Component: dbghelp AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says ... The game bundles a native version of 'dbghelp.dll' which is used in their exception handling/stack analysis library code living in 'Walhalla.dll' to provide more information. Wine builtin is of course preferred/loaded. The game engine uses custom C++ exception classes which retrieve some context information using dbghelp. After calling dbghelp.SymGetLineFromAddr(), strrchr() is used on the returned IMAGEHLP_LINE64.FileName member. This obviously won't work because Wine returns a unix-style path, leading to crash. 'strrchr' returns NULL -> input to STL basic_string() ctor --- snip --- 0025:Call dbghelp.SymGetModuleInfo64(ffffffff,7bc8d47f,00000000,0033ad20) ret=00af4ad6 0025:Call KERNEL32.WideCharToMultiByte(00000000,00000000,00339794 L"ntdll",ffffffff,0033a44c,00000020,00000000,00000000) ret=7e5a69c2 0025:Ret KERNEL32.WideCharToMultiByte() retval=00000006 ret=7e5a69c2 ... 0025:Ret dbghelp.SymGetModuleInfo64() retval=00000001 ret=00af4ad6 0025:Call ntdll.RtlAllocateHeap(00dd3000,00000000,00000020) ret=7c3416b3 0025:Ret ntdll.RtlAllocateHeap() retval=00e29e78 ret=7c3416b3 0025:Call dbghelp.SymGetSymFromAddr64(ffffffff,7bc8d47f,00000000,0033ad18,0033abe8) ret=00af4b41 0025:Ret dbghelp.SymGetSymFromAddr64() retval=00000001 ret=00af4b41 0025:Call ntdll.RtlAllocateHeap(00dd3000,00000000,00000020) ret=7c3416b3 0025:Ret ntdll.RtlAllocateHeap() retval=0e9fefb0 ret=7c3416b3 0025:Call dbghelp.SymGetLineFromAddr64(ffffffff,7bc8d47f,00000000,00000000,0033ab70) ret=00af4b9d 0025:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7e5c219e ip=7e5c219e tid=0025 0025:trace:seh:raise_exception info[0]=00000001 0025:trace:seh:raise_exception info[1]=00000000 0025:trace:seh:raise_exception eax=00000000 ebx=7e5d9000 ecx=0000000e edx=0000000e esi=0033ab3c edi=0033ab04 0025:trace:seh:raise_exception ebp=0033aae8 esp=0033aa90 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00210202 --- snip --- The actual code: --- snip --- ... 0113D393 MOV DWORD PTR SS:[ESP+40],EDX 0113D397 MOV DWORD PTR SS:[ESP+30],14 0113D39F CALL DWORD PTR DS:[11E627C] ; dbghelp.SymGetLineFromAddr 0113D3A5 TEST EAX,EAX 0113D3A7 JE SHORT Walhalla.0113D3DE 0113D3A9 MOV EDX,DWORD PTR SS:[ESP+2C] 0113D3AD PUSH 5C 0113D3AF PUSH EDX 0113D3B0 CALL DWORD PTR DS:[11E61C0] ; MSVCR71.strrchr 0113D3B6 ADD ESP,8 0113D3B9 INC EAX 0113D3BA PUSH EAX 0113D3BB LEA ECX,DWORD PTR SS:[ESP+44] 0113D3BF CALL DWORD PTR DS:[11E63BC] ; stlport_.?assign@?$basic_string(a)DV?$char_traits(a)D@_STL@@V?$allocator(a)D@2@@_STL@@QAEAAV12(a)PBD@Z ... --- snip --- Dump of IMAGEHLP_LINE64 structure returned by dbghelp.SymGetLineFromAddr: --- snip --- 0033EF6C 0000000E 0033EF70 00000014 0033EF74 106AA4B4 0033EF78 0000035A 0033EF7C 0E62914C ASCII "/home/focht/projects/wine/wine-git/dlls/ntdll/thread.c" 0033EF80 7BC8D471 ntdll.7BC8D471 --- snip --- Source: http://source.winehq.org/git/wine.git/blob/878ea7d9ea4bbb924a539ec280886746… --- snip --- 1435 BOOL symt_fill_func_line_info(const struct module* module, const struct symt_function* func, 1436 DWORD64 addr, IMAGEHLP_LINE64* line) 1437 { ... 1456 if (found) 1457 { 1458 line->FileName = (char*)source_get(module, dli->u.source_file); 1459 return TRUE; 1460 } ... --- snip --- Starting the game with 'WINEDLLOVERRIDES=dbghelp=n' works around Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 17

[Bug 21915] New: Port Royale 2 hangs on splash screen (d3d8:vertexshader_init)
by wine-bugs＠winehq.org July 18, 2021

July 18, 2021

http://bugs.winehq.org/show_bug.cgi?id=21915 Summary: Port Royale 2 hangs on splash screen (d3d8:vertexshader_init) Product: Wine Version: 1.1.39 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: adrian(a)hoehne.tk Created an attachment (id=26585) --> (http://bugs.winehq.org/attachment.cgi?id=26585) Wine Output starting Port Royale with Steam Port Royale 2 over Steam hangs on splash screen. You can only see the background and the mousecursor looks like a sword (so the cursor is changed properly by the game). Soundtrack plays too. And thats all. There are no buttons or menu entries only the background. Blind click has no effect. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 15