December 2024 - Wine-Bugs - list.winehq.org

[Bug 36632] New: valgrind shows a use after free in dsound/tests/ds3d8.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36632 Bug ID: 36632 Summary: valgrind shows a use after free in dsound/tests/ds3d8.c Product: Wine Version: 1.7.19 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: directx-dsound Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ../../../tools/runtest -q -P wine -T ../../.. -M dsound.dll -p dsound_test.exe.so ds3d8 && touch ds3d8.ok preloader: Warning: failed to reserve range 00110000-68000000 preloader: Warning: failed to reserve range 7f000000-82000000 ==10296== Thread 2: ==10296== Invalid read of size 4 ==10296== at 0x7BC39D3F: RtlpWaitForCriticalSection (critsection.c:446) ==10296== by 0x7BC3A0D0: RtlEnterCriticalSection (critsection.c:558) ==10296== by 0x6315EBF: alsa_push_buffer_data (mmdevdrv.c:2150) ==10296== by 0x7BC91871: timer_callback_wrapper (threadpool.c:572) ==10296== by 0x7BC91BD4: queue_timer_expire (threadpool.c:649) ==10296== by 0x7BC91DF5: timer_queue_thread_proc (threadpool.c:712) ==10296== by 0x7BC87137: ??? (signal_i386.c:2571) ==10296== by 0x7BC87180: call_thread_func (signal_i386.c:2630) ==10296== by 0x7BC87115: ??? (signal_i386.c:2571) ==10296== by 0x7BC8E560: start_thread (thread.c:428) ==10296== by 0x4EA7BD89: start_thread (in /usr/lib/libpthread-2.18.so) ==10296== by 0x4E95CA0D: clone (in /usr/lib/libc-2.18.so) ==10296== Address 0x4908c54 is 300 bytes inside a block of size 344 free'd ==10296== at 0x7BC4C7AA: notify_free (heap.c:263) ==10296== by 0x7BC510EF: RtlFreeHeap (heap.c:1762) ==10296== by 0x63113EE: AudioClient_Release (mmdevdrv.c:913) ==10296== by 0x6319DAA: AudioStreamVolume_Release (audioclient.h:311) ==10296== by 0x5D3F32A: DirectSoundDevice_Release (audioclient.h:1249) ==10296== by 0x5D3D0E5: directsound_destroy (dsound.c:124) ==10296== by 0x5D3D833: IDirectSound8Impl_Release (dsound.c:233) ==10296== by 0x4A613E2: test_secondary8 (ds3d8.c:808) ==10296== by 0x4A62955: dsenum_callback (ds3d8.c:1121) ==10296== by 0x5D42693: a_to_w_callback (dsound_main.c:319) ==10296== by 0x5D42F64: enumerate_mmdevices (dsound_main.c:492) ==10296== by 0x5D43278: DirectSoundEnumerateW (dsound_main.c:561) ==10296== by 0x5D42736: DirectSoundEnumerateA (dsound_main.c:349) ==10296== by 0x4A62BC4: ds3d8_tests (ds3d8.c:1137) ==10296== by 0x4A62CC0: func_ds3d8 (ds3d8.c:1157) ==10296== by 0x4A74540: run_test (test.h:584) ==10296== by 0x4A7492F: main (test.h:654) ==10296== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36393] New: valgrind shows a possible leak in infosoft/tests/infosoft.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36393 Bug ID: 36393 Summary: valgrind shows a possible leak in infosoft/tests/infosoft.c Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ../../../tools/runtest -q -P wine -T ../../.. -M infosoft.dll -p infosoft_test.exe.so infosoft && touch infosoft.ok preloader: Warning: failed to reserve range 00110000-68000000 preloader: Warning: failed to reserve range 7f000000-82000000 ==21605== 28 bytes in 1 blocks are possibly lost in loss record 157 of 548 ==21605== at 0x7BC508EB: RtlAllocateHeap (heap.c:255) ==21605== by 0x5062BE8: apartment_getclassobject (compobj.c:526) ==21605== by 0x5065FF6: get_inproc_class_object (compobj.c:2894) ==21605== by 0x5068D5F: CoGetClassObject (compobj.c:3032) ==21605== by 0x50694E7: CoCreateInstance (compobj.c:3197) ==21605== by 0x4AA23CE: func_infosoft (infosoft.c:167) ==21605== by 0x4AA285A: run_test (test.h:584) ==21605== by 0x4AA1C8E: main (test.h:654) ==21605== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36424] New: valgrind shows a leak in quartz/tests/filtergraph.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36424 Bug ID: 36424 Summary: valgrind shows a leak in quartz/tests/filtergraph.c Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: quartz Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==27031== 28 bytes in 1 blocks are possibly lost in loss record 248 of 920 ==27031== at 0x7BC50A9B: RtlAllocateHeap (heap.c:255) ==27031== by 0x530CBB8: apartment_getclassobject (compobj.c:526) ==27031== by 0x530FFC6: get_inproc_class_object (compobj.c:2894) ==27031== by 0x5312D2F: CoGetClassObject (compobj.c:3032) ==27031== by 0x53134B7: CoCreateInstance (compobj.c:3197) ==27031== by 0x6108B69: ??? ==27031== by 0x4D6B3AD: test_render_filter_priority (strmif.h:4913) ==27031== by 0x4D6BFE7: func_filtergraph (filtergraph.c:1893) ==27031== by 0x4D723D4: run_test (test.h:584) ==27031== by 0x4D727C3: main (test.h:654) ==27031== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36310] New: valgrind shows lots of uninitialized reads/writes in msxml3/tests/xmlview.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36310 Bug ID: 36310 Summary: valgrind shows lots of uninitialized reads/writes in msxml3/tests/xmlview.c Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: msxml3 Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==6314== Invalid read of size 4 ==6314== at 0x7018C5F3: ??? ==6314== by 0x70197781: ??? ==6314== by 0x70181492: ??? ==6314== by 0x7BC555FE: MODULE_InitDLL (loader.c:1068) ==6314== by 0x7BC5597C: process_attach (loader.c:1157) ==6314== by 0x7BC5592C: process_attach (loader.c:1149) ==6314== by 0x7BC585E2: LdrLoadDll (loader.c:2129) ==6314== by 0x7B85A79A: load_library (module.c:933) ==6314== by 0x7B85A908: LoadLibraryExW (module.c:990) ==6314== by 0x73A81BA: load_xul (nsembed.c:484) ==6314== by 0x73A8E4A: load_wine_gecko_v (nsembed.c:587) ==6314== by 0x73A8EB7: load_wine_gecko (nsembed.c:605) ==6314== by 0x73A97E5: load_gecko (nsembed.c:772) ==6314== by 0x73AE233: create_nscontainer (nsembed.c:2047) ==6314== by 0x732CB68: HTMLDocument_Create (htmldoc.c:4751) ==6314== by 0x7398C60: ClassFactory_CreateInstance (main.c:238) ==6314== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6314== by 0x6CA4DB0: XMLView_create (xmlview.c:1444) ==6314== by 0x6C62320: ClassFactory_CreateInstance (factory.c:178) ==6314== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6314== Address 0x4eddfe4 is not stack'd, malloc'd or (recently) free'd ==6314== ==6530== Thread 4: ==6530== Invalid read of size 4 ==6530== at 0x7E41033: ??? ==6530== by 0x7E362D2: ??? ==6530== Address 0xcc3d7fc is on thread 1's stack ==6530== ==6652== Conditional jump or move depends on uninitialised value(s) ==6652== at 0x69DA2A6E: ??? ==6652== by 0x69D912D8: ??? ==6652== by 0x6B05358C: ??? ==6652== by 0x69FA8430: ??? ==6652== by 0x69F7B782: ??? ==6652== by 0x69F7C6BE: ??? ==6652== by 0x73A5E34: init_nscontainer (nsiface.h:59567) ==6652== by 0x73A62D1: create_nscontainer (nsembed.c:2065) ==6652== by 0x7324B68: HTMLDocument_Create (htmldoc.c:4751) ==6652== by 0x7390C60: ClassFactory_CreateInstance (main.c:238) ==6652== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6652== by 0x6CA4DB0: XMLView_create (xmlview.c:1444) ==6652== by 0x6C62320: ClassFactory_CreateInstance (factory.c:178) ==6652== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6652== by 0x4CA707B: test_QueryInterface (xmlview.c:156) ==6652== by 0x4CA7B69: func_xmlview (xmlview.c:269) ==6652== by 0x4CA896C: run_test (test.h:584) ==6652== by 0x4CA8D5B: main (test.h:654) ==6652== Uninitialised value was created by a stack allocation ==6652== at 0x69DA29E6: ??? ==6652== ==6753== Conditional jump or move depends on uninitialised value(s) ==6753== at 0x69D80B25: ??? ==6753== by 0x6A0E6970: ??? ==6753== by 0x6A0E645E: ??? ==6753== by 0x6AFE5020: ??? ==6753== by 0x69CAB81E: ??? ==6753== by 0x6A0E65B1: ??? ==6753== by 0x69D80A6F: ??? ==6753== by 0x5778509: ??? (winproc.c:173) ==6753== by 0x577867E: call_window_proc (winproc.c:244) ==6753== by 0x577986C: WINPROC_CallProcAtoW (winproc.c:603) ==6753== by 0x577A911: WINPROC_call_window (winproc.c:911) ==6753== by 0x573B8F9: DispatchMessageA (message.c:3948) ==6753== by 0x4CB7928: test_Load (xmlview.c:247) ==6753== by 0x4CB7B6E: func_xmlview (xmlview.c:270) ==6753== by 0x4CB896C: run_test (test.h:584) ==6753== by 0x4CB8D5B: main (test.h:654) ==6753== Uninitialised value was created by a stack allocation ==6753== at 0x69D80AB6: ??? ==6753== ==6998== Conditional jump or move depends on uninitialised value(s) ==6998== at 0x6AEE5337: ??? ==6998== by 0x69ECD001: ??? ==6998== by 0x6A1714F7: ??? ==6998== by 0x6A36FB0A: ??? ==6998== by 0x6AECA4E7: ??? ==6998== by 0x6AECA48F: ??? ==6998== by 0x69CAB81E: ??? ==6998== by 0x6A0E65B1: ??? ==6998== by 0x69D80A6F: ??? ==6998== by 0x5768509: ??? (winproc.c:173) ==6998== by 0x576867E: call_window_proc (winproc.c:244) ==6998== by 0x576986C: WINPROC_CallProcAtoW (winproc.c:603) ==6998== by 0x576A911: WINPROC_call_window (winproc.c:911) ==6998== by 0x572B8F9: DispatchMessageA (message.c:3948) ==6998== by 0x4CB3928: test_Load (xmlview.c:247) ==6998== by 0x4CB3B6E: func_xmlview (xmlview.c:270) ==6998== by 0x4CB496C: run_test (test.h:584) ==6998== by 0x4CB4D5B: main (test.h:654) ==6998== Uninitialised value was created by a client request ==6998== at 0x7BC4C52C: mark_block_uninitialized (heap.c:209) ==6998== by 0x7BC4C697: initialize_block (heap.c:240) ==6998== by 0x7BC50FA3: RtlAllocateHeap (heap.c:1717) ==6998== by 0x76E1CE0: MSVCRT_malloc (heap.c:329) ==6998== by 0x61E426BF: ??? ==6998== by 0x69D2235D: ??? ==6998== by 0x6A74092C: ??? ==6998== by 0x6A5B7D64: ??? ==6998== by 0x69C860AB: ??? ==6998== by 0x6B073403: ??? ==6998== by 0x6A4BD183: ??? ==6998== by 0x6AFE511D: ??? ==6998== by 0x69CAB81E: ??? ==6998== by 0x6A0E65B1: ??? ==6998== by 0x69D80A6F: ??? ==6998== by 0x5768509: ??? (winproc.c:173) ==6998== by 0x576867E: call_window_proc (winproc.c:244) ==6998== by 0x576986C: WINPROC_CallProcAtoW (winproc.c:603) ==6998== by 0x576A911: WINPROC_call_window (winproc.c:911) ==6998== by 0x572B8F9: DispatchMessageA (message.c:3948) ==6998== ==6998== 8 bytes in 1 blocks are possibly lost in loss record 421 of 6,589 ==6998== at 0x7BC4C735: notify_alloc (heap.c:255) ==6998== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==6998== by 0x7B84586B: HeapAlloc (heap.c:271) ==6998== by 0x7B845B40: GlobalAlloc (heap.c:376) ==6998== by 0x53683E7: OLEClipbrd_Initialize (clipboard.c:1732) ==6998== by 0x53A1772: OleInitialize (ole2.c:215) ==6998== by 0x6AFF45B4: ??? ==6998== by 0x69D19393: ??? ==6998== by 0x6A74092C: ??? ==6998== by 0x69C92A72: ??? ==6998== by 0x6B06D8C2: ??? ==6998== by 0x69F7C26F: ??? ==6998== by 0x73ADE34: init_nscontainer (nsiface.h:59567) ==6998== by 0x73AE2D1: create_nscontainer (nsembed.c:2065) ==6998== by 0x732CB68: HTMLDocument_Create (htmldoc.c:4751) ==6998== by 0x7398C60: ClassFactory_CreateInstance (main.c:238) ==6998== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6998== by 0x6CA4DB0: XMLView_create (xmlview.c:1444) ==6998== by 0x6C62320: ClassFactory_CreateInstance (factory.c:178) ==6998== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==6998== ==7281== 8 bytes in 1 blocks are possibly lost in loss record 428 of 6,602 ==7281== at 0x7BC4C735: notify_alloc (heap.c:255) ==7281== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==7281== by 0x7B84586B: HeapAlloc (heap.c:271) ==7281== by 0x7B845B40: GlobalAlloc (heap.c:376) ==7281== by 0x532204A: CreateStreamOnHGlobal (hglobalstream.c:603) ==7281== by 0x6C4D838: domdoc_load_from_stream (domdoc.c:772) ==7281== by 0x6C52086: domdoc_load (domdoc.c:2198) ==7281== by 0x6C9CCBA: handle_xml_load (msxml6.h:5228) ==7281== by 0x6C9D60C: XMLView_BindStatusCallback_OnDataAvailable (xmlview.c:539) ==7281== by 0x5FF159A: BindStatusCallback_OnDataAvailable (urlmon.h:820) ==7281== by 0x5FF73A2: report_data (urlmon.h:820) ==7281== by 0x5FF7595: InternetProtocolSink_ReportData (binding.c:1126) ==7281== by 0x5FFC920: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==7281== by 0x5FFD5D6: BPInternetProtocolSink_ReportData (urlmon.h:3113) ==7281== by 0x73D062D: ResProtocol_Start (urlmon.h:3113) ==7281== by 0x5FFB2D1: BindProtocol_StartEx (urlmon.h:3296) ==7281== by 0x5FF8A1B: start_binding (urlmon.h:7870) ==7281== by 0x5FF8BCD: bind_to_storage (binding.c:1567) ==7281== by 0x6018CF1: URLMoniker_BindToStorage (umon.c:280) ==7281== by 0x6C9F74D: XMLView_PersistMoniker_Load (objidl.h:3488) ==7281== ==7281== 32 bytes in 1 blocks are possibly lost in loss record 2,478 of 6,602 ==7281== at 0x7BC4C735: notify_alloc (heap.c:255) ==7281== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==7281== by 0x7BC39AE9: RtlInitializeCriticalSectionEx (critsection.c:326) ==7281== by 0x7B876B51: InitializeCriticalSectionEx (sync.c:356) ==7281== by 0x7B876B17: InitializeCriticalSectionAndSpinCount (sync.c:334) ==7281== by 0x6AFB523E: ??? ==7281== by 0x69DFCC68: ??? ==7281== by 0x6A6C7944: ??? ==7281== by 0x69E6E0B7: ??? ==7281== by 0x7BC870D0: call_thread_func (signal_i386.c:2630) ==7281== by 0x7BC87065: ??? (signal_i386.c:2571) ==7281== by 0x7BC8E4B0: start_thread (thread.c:428) ==7281== by 0x4EA7BD89: start_thread (in /usr/lib/libpthread-2.18.so) ==7281== by 0x4E95CA0D: clone (in /usr/lib/libc-2.18.so) ==7449== 8 bytes in 1 blocks are possibly lost in loss record 422 of 6,591 ==7449== at 0x7BC4C735: notify_alloc (heap.c:255) ==7449== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==7449== by 0x7B84586B: HeapAlloc (heap.c:271) ==7449== by 0x7B845B40: GlobalAlloc (heap.c:376) ==7449== by 0x53683E7: OLEClipbrd_Initialize (clipboard.c:1732) ==7449== by 0x53A1772: OleInitialize (ole2.c:215) ==7449== by 0x6AFF45B4: ??? ==7449== by 0x69D19393: ??? ==7449== by 0x6A74092C: ??? ==7449== by 0x69C92A72: ??? ==7449== by 0x6B06D8C2: ??? ==7449== by 0x69F7C26F: ??? ==7449== by 0x739DE34: init_nscontainer (nsiface.h:59567) ==7449== by 0x739E2D1: create_nscontainer (nsembed.c:2065) ==7449== by 0x731CB68: HTMLDocument_Create (htmldoc.c:4751) ==7449== by 0x7388C60: ClassFactory_CreateInstance (main.c:238) ==7449== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==7449== by 0x6C94DB0: XMLView_create (xmlview.c:1444) ==7449== by 0x6C52320: ClassFactory_CreateInstance (factory.c:178) ==7449== by 0x5373E26: CoCreateInstance (unknwn.h:226) ==7449== etc. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 36282] New: valgrind shows an unitialized write in ieframe/tests/ie.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36282 Bug ID: 36282 Summary: valgrind shows an unitialized write in ieframe/tests/ie.c Product: Wine Version: 1.3.13 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: minor Priority: P2 Component: ieframe Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==16468== Thread 6: ==16468== Syscall param write(buf) points to uninitialised byte(s) ==16468== at 0x4EA8262B: ??? (in /usr/lib/libpthread-2.18.so) ==16468== by 0x7BC46BB8: NtWriteFile (file.c:1073) ==16468== by 0x7B83E0AA: WriteFile (file.c:563) ==16468== by 0x5A01BB8: rpcrt4_conn_np_write (rpc_transport.c:444) ==16468== by 0x59F6B27: rpcrt4_conn_write (rpc_binding.h:189) ==16468== by 0x59F8AA9: RPCRT4_SendWithAuth (rpc_message.c:849) ==16468== by 0x59F9BA0: RPCRT4_Send (rpc_message.c:1245) ==16468== by 0x59FCD02: process_request_packet (rpc_server.c:464) ==16468== by 0x59FCF82: RPCRT4_process_packet (rpc_server.c:519) ==16468== by 0x59FD115: RPCRT4_worker_thread (rpc_server.c:541) ==16468== by 0x7BC909EA: worker_thread_proc (threadpool.c:110) ==16468== by 0x7BC87087: ??? (signal_i386.c:2571) ==16468== by 0x7BC870D0: call_thread_func (signal_i386.c:2630) ==16468== by 0x7BC87065: ??? (signal_i386.c:2571) ==16468== by 0x7BC8E4B0: start_thread (thread.c:428) ==16468== by 0x4EA7BD89: start_thread (in /usr/lib/libpthread-2.18.so) ==16468== by 0x4E95CA0D: clone (in /usr/lib/libc-2.18.so) ==16468== Address 0x47f9cf4 is 44 bytes inside a recently re-allocated block of size 92 alloc'd ==16468== at 0x7BC4C735: notify_alloc (heap.c:255) ==16468== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==16468== by 0x59F88E9: RPCRT4_SendWithAuth (rpc_message.c:808) ==16468== by 0x59F9BA0: RPCRT4_Send (rpc_message.c:1245) ==16468== by 0x59FCD02: process_request_packet (rpc_server.c:464) ==16468== by 0x59FCF82: RPCRT4_process_packet (rpc_server.c:519) ==16468== by 0x59FD115: RPCRT4_worker_thread (rpc_server.c:541) ==16468== by 0x7BC909EA: worker_thread_proc (threadpool.c:110) ==16468== by 0x7BC87087: ??? (signal_i386.c:2571) ==16468== by 0x7BC870D0: call_thread_func (signal_i386.c:2630) ==16468== by 0x7BC87065: ??? (signal_i386.c:2571) ==16468== by 0x7BC8E4B0: start_thread (thread.c:428) ==16468== by 0x4EA7BD89: start_thread (in /usr/lib/libpthread-2.18.so) ==16468== by 0x4E95CA0D: clone (in /usr/lib/libc-2.18.so) ==16468== Uninitialised value was created by a client request ==16468== at 0x7BC4C52C: mark_block_uninitialized (heap.c:209) ==16468== by 0x7BC4C697: initialize_block (heap.c:240) ==16468== by 0x7BC50FA3: RtlAllocateHeap (heap.c:1717) ==16468== by 0x501E635: IMalloc_fnAlloc (ifs.c:186) ==16468== by 0x501EF50: CoTaskMemAlloc (objidl.h:1236) ==16468== by 0x505C935: RemUnknown_RemQueryInterface (stubmanager.c:690) ==16468== by 0x50661C6: IRemUnknown_RemQueryInterface_Stub (dcom_p.c:369) ==16468== by 0x59CA5BF: CStdStubBuffer_Invoke (cstub.c:477) ==16468== by 0x503D280: RPC_ExecuteCall (objidl.h:9086) ==16468== by 0x4FFC1ED: apartment_wndproc (compobj.c:1460) ==16468== by 0x548C509: ??? (winproc.c:173) ==16468== by 0x548C67E: call_window_proc (winproc.c:244) ==16468== by 0x548E817: WINPROC_call_window (winproc.c:900) ==16468== by 0x544FBE4: DispatchMessageW (message.c:4019) ==16468== by 0x4793F60: IEWinMain (iexplore.c:1061) ==16468== by 0x472CA34: wWinMain (main.c:84) ==16468== by 0x472CD21: wmain (exe_wmain.c:51) ==16468== by 0x472CBFC: __wine_spec_exe_wentry (exe_wentry.c:36) ==16468== by 0x7B864247: ??? (process.c:1045) ==16468== by 0x7B864394: start_process (process.c:1097) ==16468== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

3 5

[Bug 36183] New: valgrind shows a potential leaks in atl100/tests/atl.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36183 Bug ID: 36183 Summary: valgrind shows a potential leaks in atl100/tests/atl.c Product: Wine Version: 1.3.13 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: atl Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==13578== 8 bytes in 1 blocks are possibly lost in loss record 37 of 602 ==13578== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==13578== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==13578== by 0x7B8457FF: HeapAlloc (heap.c:271) ==13578== by 0x7B845AD4: GlobalAlloc (heap.c:376) ==13578== by 0x4E29357: OLEClipbrd_Initialize (clipboard.c:1732) ==13578== by 0x4E626C6: OleInitialize (ole2.c:215) ==13578== by 0x4DE5CA0: AtlAxWinInit (atl_ax.c:108) ==13578== by 0x4C9708E: test_ax_win (atl.c:600) ==13578== by 0x4C97273: func_atl (atl.c:627) ==13578== by 0x4C98072: run_test (test.h:584) ==13578== by 0x4C98460: main (test.h:654) ==13578== ==13578== 32 bytes in 1 blocks are possibly lost in loss record 208 of 602 ==13578== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==13578== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==13578== by 0x7BC39A6B: RtlInitializeCriticalSectionEx (critsection.c:326) ==13578== by 0x7B876AE5: InitializeCriticalSectionEx (sync.c:356) ==13578== by 0x7B876A64: InitializeCriticalSection (sync.c:313) ==13578== by 0x4DE4213: AtlWinModuleInit (atl.c:436) ==13578== by 0x4C950D9: test_winmodule (atl.c:89) ==13578== by 0x4C9725A: func_atl (atl.c:622) ==13578== by 0x4C98072: run_test (test.h:584) ==13578== by 0x4C98460: main (test.h:654) ==13578== ==1611== 32 bytes in 1 blocks are possibly lost in loss record 217 of 629 ==1611== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==1611== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==1611== by 0x7BC39A6B: RtlInitializeCriticalSectionEx (critsection.c:326) ==1611== by 0x7B876AE5: InitializeCriticalSectionEx (sync.c:356) ==1611== by 0x7B876A64: InitializeCriticalSection (sync.c:313) ==1611== by 0x4E62252: test_winmodule (atl.c:101) ==1611== by 0x4E6425A: func_atl (atl.c:622) ==1611== by 0x4E65072: run_test (test.h:584) ==1611== by 0x4E65460: main (test.h:654) ==1611== ==1611== 32 bytes in 1 blocks are possibly lost in loss record 218 of 629 ==1611== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==1611== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==1611== by 0x5B300B4: alloc_bstr (oleaut.c:162) ==1611== by 0x5B3044A: SysAllocStringLen (oleaut.c:324) ==1611== by 0x5B535E8: TLB_MultiByteToBSTR (typelib.c:1753) ==1611== by 0x5B580A8: ITypeLib2_Constructor_MSFT (typelib.c:3706) ==1611== by 0x5B57398: TLB_ReadTypeLib (typelib.c:3460) ==1611== by 0x5B4F6BC: LoadTypeLibEx (typelib.c:478) ==1611== by 0x5B4F5F8: LoadTypeLib (typelib.c:454) ==1611== by 0x4E639C1: Dispatch_GetTypeInfo (atl.c:520) ==1611== by 0x4F853FA: AtlGetObjectSourceInterface (oaidl.h:811) ==1611== by 0x4E63D58: test_source_iface (atl.c:576) ==1611== by 0x4E6426E: func_atl (atl.c:626) ==1611== by 0x4E65072: run_test (test.h:584) ==1611== by 0x4E65460: main (test.h:654) ==1611== ==1659== 32 bytes in 1 blocks are possibly lost in loss record 218 of 630 ==1659== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==1659== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==1659== by 0x7BC39A6B: RtlInitializeCriticalSectionEx (critsection.c:326) ==1659== by 0x7B876AE5: InitializeCriticalSectionEx (sync.c:356) ==1659== by 0x7B876A64: InitializeCriticalSection (sync.c:313) ==1659== by 0x4E62252: test_winmodule (atl.c:101) ==1659== by 0x4E6425A: func_atl (atl.c:622) ==1659== by 0x4E65072: run_test (test.h:584) ==1659== by 0x4E65460: main (test.h:654) ==1659== ==1986== 80 bytes in 1 blocks are possibly lost in loss record 348 of 630 ==1986== at 0x7BC4C6B7: notify_alloc (heap.c:255) ==1986== by 0x7BC50EFB: RtlAllocateHeap (heap.c:1716) ==1986== by 0x5B040B4: alloc_bstr (oleaut.c:162) ==1986== by 0x5B045F5: SysAllocStringByteLen (oleaut.c:413) ==1986== by 0x5B29DA8: MSFT_ReadAllStrings (typelib.c:2879) ==1986== by 0x5B2B9F0: ITypeLib2_Constructor_MSFT (typelib.c:3581) ==1986== by 0x5B2B398: TLB_ReadTypeLib (typelib.c:3460) ==1986== by 0x5B236BC: LoadTypeLibEx (typelib.c:478) ==1986== by 0x5B235F8: LoadTypeLib (typelib.c:454) ==1986== by 0x4A349C1: Dispatch_GetTypeInfo (atl.c:520) ==1986== by 0x4F553FA: AtlGetObjectSourceInterface (oaidl.h:811) ==1986== by 0x4A34D58: test_source_iface (atl.c:576) ==1986== by 0x4A3526E: func_atl (atl.c:626) ==1986== by 0x4A36072: run_test (test.h:584) ==1986== by 0x4A36460: main (test.h:654) ==1986== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 52010] New: %USERPROFILE% environment variable gets ignored
by WineHQ Bugzilla Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=52010 Bug ID: 52010 Summary: %USERPROFILE% environment variable gets ignored Product: Wine Version: 6.21 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: docmax(a)gmx.de Distribution: --- i created a little batch file where %USERPROFILE% is set and when the app starts it writes into that dir. this works in windows but in wine it gets ignored (writing to c:\Users\user\...). how can this be fixed? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 43386] New: valgrind shows uninitialized memory in dlls/shell32/tests /shelldispatch.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=43386 Bug ID: 43386 Summary: valgrind shows uninitialized memory in dlls/shell32/tests/shelldispatch.c Product: Wine Version: 2.12 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: shell32 Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: Gentoo ==368== Thread 3: ==368== Syscall param writev(vector[...]) points to uninitialised byte(s) ==368== at 0x433804F: ??? (syscall-template.S:84) ==368== by 0x7BC8946B: send_request (server.c:228) ==368== by 0x7BC89626: wine_server_call (server.c:309) ==368== by 0x7BC4867A: server_write_file (file.c:624) ==368== by 0x7BC49E71: NtWriteFile (file.c:1238) ==368== by 0x5969332: rpcrt4_conn_np_write (rpc_transport.c:414) ==368== by 0x595E242: rpcrt4_conn_write (rpc_binding.h:196) ==368== by 0x5960001: RPCRT4_SendWithAuth (rpc_message.c:849) ==368== by 0x5961050: RPCRT4_Send (rpc_message.c:1248) ==368== by 0x59627D4: I_RpcSend (rpc_message.c:1809) ==368== by 0x5962B49: I_RpcSendReceive (rpc_message.c:1912) ==368== by 0x55E1881: rpc_sendreceive_thread (rpc.c:800) ==368== by 0x7BC9E2D7: process_rtl_work_item (threadpool.c:349) ==368== by 0x7BCA2224: threadpool_worker_proc (threadpool.c:2112) ==368== by 0x7BC913B3: ??? (signal_i386.c:2700) ==368== by 0x7BC9143B: call_thread_func (signal_i386.c:2759) ==368== by 0x7BC91391: ??? (signal_i386.c:2700) ==368== by 0x7BC9B3EE: start_thread (thread.c:487) ==368== by 0x4244249: start_thread (pthread_create.c:333) ==368== by 0x433FD6D: clone (clone.S:114) ==368== Address 0x667ec72 is 90 bytes inside a recently re-allocated block of size 140 alloc'd ==368== at 0x7BC51061: notify_alloc (heap.c:254) ==368== by 0x7BC5554F: RtlAllocateHeap (heap.c:1716) ==368== by 0x595FE79: RPCRT4_SendWithAuth (rpc_message.c:808) ==368== by 0x5961050: RPCRT4_Send (rpc_message.c:1248) ==368== by 0x59627D4: I_RpcSend (rpc_message.c:1809) ==368== by 0x5962B49: I_RpcSendReceive (rpc_message.c:1912) ==368== by 0x55E1881: rpc_sendreceive_thread (rpc.c:800) ==368== by 0x7BC9E2D7: process_rtl_work_item (threadpool.c:349) ==368== by 0x7BCA2224: threadpool_worker_proc (threadpool.c:2112) ==368== by 0x7BC913B3: ??? (signal_i386.c:2700) ==368== by 0x7BC9143B: call_thread_func (signal_i386.c:2759) ==368== by 0x7BC91391: ??? (signal_i386.c:2700) ==368== by 0x7BC9B3EE: start_thread (thread.c:487) ==368== by 0x4244249: start_thread (pthread_create.c:333) ==368== by 0x433FD6D: clone (clone.S:114) ==368== Uninitialised value was created by a stack allocation ==368== at 0x4A30CB3: test_ShellWindows (shelldispatch.c:679) ==368== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 2

[Bug 38439] New: valgrind shows an uninitialized value atl100/tests/atl.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=38439 Bug ID: 38439 Summary: valgrind shows an uninitialized value atl100/tests/atl.c Product: Wine Version: 1.7.41 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: atl Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: --- ==5614== Conditional jump or move depends on uninitialised value(s) ==5614== at 0x98944C9: ??? ==5614== by 0x7465456: create_nscontainer (nsembed.c:2115) ==5614== by 0x73E29E8: HTMLDocument_Create (htmldoc.c:4857) ==5614== by 0x745127D: ClassFactory_CreateInstance (main.c:271) ==5614== by 0x48C046C: IClassFactory_CreateInstance (unknwn.h:226) ==5614== by 0x48C046C: CoCreateInstance (???:0) ==5614== by 0x5504C7C: create_mime_object (binding.c:260) ==5614== by 0x5504FAB: create_object (binding.c:310) ==5614== by 0x5507716: report_data (binding.c:1079) ==5614== by 0x55079F3: InternetProtocolSink_ReportData (binding.c:1128) ==5614== by 0x550C581: IInternetProtocolSink_ReportData (urlmon.h:3113) ==5614== by 0x550C581: ProtocolSinkHandler_ReportData (???:0) ==5614== by 0x550D12A: IInternetProtocolSink_ReportData (urlmon.h:3113) ==5614== by 0x550D12A: BPInternetProtocolSink_ReportData (???:0) ==5614== by 0x5510173: IInternetProtocolSink_ReportData (urlmon.h:3113) ==5614== by 0x5510173: FileProtocol_StartEx (???:0) ==5614== by 0x550B050: IInternetProtocolEx_StartEx (urlmon.h:7872) ==5614== by 0x550B050: BindProtocol_StartEx (???:0) ==5614== by 0x5508CD1: IInternetProtocolEx_StartEx (urlmon.h:7872) ==5614== by 0x5508CD1: start_binding (???:0) ==5614== by 0x5508F63: bind_to_object (binding.c:1598) ==5614== by 0x5525A69: URLMoniker_BindToObject (umon.c:260) ==5614== by 0x54922E5: IMoniker_BindToObject (objidl.h:3485) ==5614== by 0x54922E5: bind_to_object (???:0) ==5614== by 0x5492B7E: navigate_bsc (navigate.c:910) ==5614== by 0x5492C45: navigate_bsc_proc (navigate.c:940) ==5614== by 0x547D93F: process_dochost_tasks (dochost.c:63) ==5614== Uninitialised value was created by a stack allocation ==5614== at 0x9894439: ??? ==5614== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36904] New: valgrind shows a few unitialized variables in dlls/ieframe/tests/ie.c (js::frontend)
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36904 Bug ID: 36904 Summary: valgrind shows a few unitialized variables in dlls/ieframe/tests/ie.c (js::frontend) Product: Wine Version: 1.7.22 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: ieframe Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Unfortunately, I don't know what files these are in, apparently a large one: ==1840== warning: ignoring line info entry with huge line number (16707566) ==1840== Can't handle line numbers greater than 1048575, sorry ==1840== (Nb: this message is only shown once) I checked the wine-mozilla source, but the largest file isn't even close: 140456 ./db/sqlite3/src/sqlite3.c 137413 ./security/nss/lib/sqlite/sqlite3.c presumably that line number count includes headers, etc. Anywho, the bugs: ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4C571: js::frontend::Parser<js::frontend::FullParseHandler>::newFunction (???:1207) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4C58A: js::frontend::Parser<js::frontend::FullParseHandler>::newFunction (???:1209) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4D5B2: js::frontend::FunctionBox::FunctionBox<js::frontend::FullParseHandler> (???:482) ==1840== by 0xA69C4AF: ??? ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4F2AD: js::frontend::Parser<js::frontend::FullParseHandler>::leaveFunction (???:1318) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4CF11: js::frontend::Parser<js::frontend::FullParseHandler>::memberExpr (???:6244) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E59FF0: js::frontend::Parser<js::frontend::FullParseHandler>::primaryExpr (???:6639) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E59B27: js::frontend::Parser<js::frontend::FullParseHandler>::primaryExpr (???:6439) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x7035ADB: _chkstk (???:91) ==1840== ==1840== Conditional jump or move depends on uninitialised value(s) ==1840== at 0x6E4D5B2: js::frontend::FunctionBox::FunctionBox<js::frontend::FullParseHandler> (???:482) ==1840== Uninitialised value was created by a stack allocation ==1840== at 0x6E585E0: js::frontend::Parser<js::frontend::FullParseHandler>::functionArgsAndBody (???:2041) ==1840== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 2