February 2024 - Wine-Bugs - list.winehq.org

[Bug 47170] New: nProtect GameGuard Personal/Anti-Virus/Spyware 3.x/ 4.x kernel drivers crash due to 'winedevice' PE module having no export table
by wine-bugs＠winehq.org April 5, 2024

April 5, 2024

https://bugs.winehq.org/show_bug.cgi?id=47170 Bug ID: 47170 Summary: nProtect GameGuard Personal/Anti-Virus/Spyware 3.x/4.x kernel drivers crash due to 'winedevice' PE module having no export table Product: Wine Version: 4.8 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. Stable download link which is a web-installer for nProtect GameGuard Personal 3.x (bundles nProtect Anti-Virus/Spyware 3.0 which fetches 4.0): http://fs2.download82.com/software/bbd8ff9dba17080c0c121804efbd61d5/nprotec… The AVS 4.0 installer works, although one can already see multiple crashing kernel drivers in console which cause additional zombie service processes (Windows userspace side). --- snip --- ... 002d:trace:ntoskrnl:load_driver loading driver L"C:\\windows\\system32\\TKPcFtHk.sys" ... 002d:Call driver init 0x350005 (obj=0x121ba0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\TKPcFt") ... 002d:trace:ntoskrnl:IoCreateDevice (0x121ba0, 0, L"\\Device\\TKPcFt", 34, 0, 0, 0x348104) ... 002d:trace:ntoskrnl:IoCreateSymbolicLink L"\\DosDevices\\TKPcFt" -> L"\\Device\\TKPcFt" ... 002d:Call ntoskrnl.exe.ExAllocatePoolWithTag(00000000,00001000,34314c53) ret=00342f27 002d:Call ntdll.RtlAllocateHeap(00110000,00000000,00001000) ret=7e8789fa 002d:Ret ntdll.RtlAllocateHeap() retval=00121ea0 ret=7e8789fa 002d:trace:ntoskrnl:ExAllocatePoolWithTag 4096 pool 0 -> 0x121ea0 002d:Ret ntoskrnl.exe.ExAllocatePoolWithTag() retval=00121ea0 ret=00342f27 002d:Call ntoskrnl.exe.memset(00121ea0,00000000,00001000) ret=00342f41 002d:Ret ntoskrnl.exe.memset() retval=00121ea0 ret=00342f41 002d:Call ntoskrnl.exe.ZwQuerySystemInformation(0000000b,00121ea0,00001000,0082f864) ret=0034392d 002d:Call ntdll.NtQuerySystemInformation(0000000b,00121ea0,00001000,0082f864) ret=7bc8e964 002d:Ret ntdll.NtQuerySystemInformation() retval=00000000 ret=7bc8e964 002d:Ret ntoskrnl.exe.ZwQuerySystemInformation() retval=00000000 ret=0034392d 002d:Call ntoskrnl.exe.ExAllocatePoolWithTag(00000000,00000104,35314c53) ret=00342f27 002d:Call ntdll.RtlAllocateHeap(00110000,00000000,00000104) ret=7e8789fa 002d:Ret ntdll.RtlAllocateHeap() retval=00122ea8 ret=7e8789fa 002d:trace:ntoskrnl:ExAllocatePoolWithTag 260 pool 0 -> 0x122ea8 002d:Ret ntoskrnl.exe.ExAllocatePoolWithTag() retval=00122ea8 ret=00342f27 002d:Call ntoskrnl.exe.memset(00122ea8,00000000,00000104) ret=00342f41 002d:Ret ntoskrnl.exe.memset() retval=00122ea8 ret=00342f41 002d:trace:seh:raise_exception code=c0000005 flags=0 addr=0x343c13 ip=00343c13 tid=002d 002d:trace:seh:raise_exception info[0]=00000000 002d:trace:seh:raise_exception info[1]=00d05a4d 002d:trace:seh:raise_exception eax=00345390 ebx=00121ba0 ecx=00d05a4f edx=00d05a4d esi=00350005 edi=00121c54 002d:trace:seh:raise_exception ebp=0082f8d4 esp=0082f888 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010206 002d:trace:seh:call_vectored_handlers calling handler at 0x7e877f10 code=c0000005 flags=0 002d:trace:seh:call_vectored_handlers handler at 0x7e877f10 returned 0 002d:trace:seh:call_stack_handlers calling handler at 0x7bcc3660 code=c0000005 flags=0 002d:Call msvcrt.signal(0000000b,00000000) ret=00403789 002d:trace:seh:MSVCRT_signal (11, (nil)) 002d:Ret msvcrt.signal() retval=00000000 ret=00403789 002d:trace:seh:start_debugger Starting debugger "winedbg --auto 42 56" 002d:trace:seh:call_stack_handlers handler at 0x7bcc3660 returned 1 --- snip --- The reason of the crash is not visible by tracing, one has to debug the garbage. Disassembly of sub-routine where the "custom" resolver magic happens, annotated where needed ... --- snip --- 005539C0 MOV EDI,EDI 005539C2 PUSH EBP 005539C3 MOV EBP,ESP 005539C5 SUB ESP,4C 005539C8 MOV DWORD PTR SS:[LOCAL.9],0 005539CF MOV DWORD PTR SS:[LOCAL.10],0 005539D6 MOV DWORD PTR SS:[LOCAL.11],0 005539DD MOV DWORD PTR SS:[LOCAL.13],0 005539E4 MOV DWORD PTR SS:[LOCAL.7],0 005539EB MOV DWORD PTR SS:[LOCAL.4],0 005539F2 MOV DWORD PTR SS:[LOCAL.8],0 005539F9 MOV DWORD PTR SS:[LOCAL.6],0 00553A00 MOV DWORD PTR SS:[LOCAL.12],0 00553A07 MOV DWORD PTR SS:[LOCAL.1],0 00553A0E MOV DWORD PTR SS:[LOCAL.3],0 00553A15 MOV DWORD PTR SS:[LOCAL.5],0 00553A1C MOV DWORD PTR SS:[LOCAL.14],0 00553A23 MOV DWORD PTR SS:[LOCAL.2],0 00553A2A CALL DWORD PTR DS:[<&HAL.KeGetCurrentIrql>] 00553A30 MOVZX EAX,AL 00553A33 TEST EAX,EAX 00553A35 JZ SHORT 00553A3C 00553A37 JMP 00553C72 00553A3C LEA ECX,[LOCAL.10] 00553A3F PUSH ECX 00553A40 PUSH 0B ; SystemModuleInformation 00553A42 CALL 005538C0 ; ZwQuerySystemInformation 00553A47 MOV DWORD PTR SS:[LOCAL.11],EAX 00553A4A CMP DWORD PTR SS:[LOCAL.11],0 00553A4E JNE SHORT 00553A55 00553A50 JMP 00553C72 00553A55 PUSH 35314C53 00553A5A PUSH 104 00553A5F PUSH 0 00553A61 CALL 00552F00 ; ExAllocatePoolWithTag 00553A66 MOV DWORD PTR SS:[LOCAL.8],EAX 00553A69 CMP DWORD PTR SS:[LOCAL.8],0 00553A6D JNE SHORT 00553A74 00553A6F JMP 00553C72 00553A74 MOV EDX,DWORD PTR SS:[LOCAL.11] ; _RTL_PROCESS_MODULE_INFORMATION --- snip --- --- snip --- 00553A74 ; typedef struct _RTL_PROCESS_MODULE_INFORMATION 00553A74 ; { 00553A74 ; HANDLE Section; 00553A74 ; PVOID MappedBase; 00553A74 ; PVOID ImageBase; 00553A74 ; ULONG ImageSize; 00553A74 ; ULONG Flags; 00553A74 ; USHORT LoadOrderIndex; 00553A74 ; USHORT InitOrderIndex; 00553A74 ; USHORT LoadCount; 00553A74 ; USHORT OffsetToFileName; 00553A74 ; UCHAR FullPathName[256]; 00553A74 ; } RTL_PROCESS_MODULE_INFORMATION, *PRTL_PROCESS_MODULE_INFORMATION; 00553A74 ; 00553A74 ; $ ==> 00000000 00553A74 ; $+4 00000000 00553A74 ; $+8 7EFF0000 ; OFFSET winedevice.<STRUCT IMAGE_DOS_HEADER> 00553A74 ; $+C 00010000 00553A74 ; $+10 80080000 00553A74 ; $+14 00000000 00553A74 ; $+18 00140000 00553A74 ; $+1C 775C3A43 C:\w 00553A74 ; $+20 6F646E69 indo 00553A74 ; $+24 735C7377 ws\s 00553A74 ; $+28 65747379 yste 00553A74 ; $+2C 5C32336D m32\ 00553A74 ; $+30 656E6977 wine 00553A74 ; $+34 69766564 devi 00553A74 ; $+38 652E6563 ce.e 00553A74 ; $+3C 00006578 xe 00553A74 ; $+40 00000000 --- snip --- --- snip --- 00553A77 ADD EDX,4 00553A7A MOV DWORD PTR SS:[LOCAL.13],EDX ; ModuleInfo 00553A7D MOV DWORD PTR SS:[LOCAL.4],0 ; mod_count 00553A84 JMP SHORT 00553A8F 00553A86 MOV EAX,DWORD PTR SS:[EBP-10] ; loop_mod_count 00553A89 ADD EAX,1 00553A8C MOV DWORD PTR SS:[EBP-10],EAX ; loop_mod_count 00553A8F MOV ECX,DWORD PTR SS:[EBP-2C] ; ModuleInfo 00553A92 MOV EDX,DWORD PTR SS:[EBP-10] 00553A95 CMP EDX,DWORD PTR DS:[ECX] 00553A97 JAE 00553B5C 00553A9D CMP DWORD PTR SS:[EBP+8],0 00553AA1 JNE SHORT 00553AD8 00553AA3 MOV EAX,DWORD PTR SS:[EBP-34] ; ModuleInfo 00553AA6 MOV ECX,DWORD PTR DS:[EAX+8] ; ImageBase 00553AA9 MOV DWORD PTR SS:[EBP-18],ECX 00553AAC MOV EDX,DWORD PTR SS:[EBP-34] 00553AAF MOVZX EAX,WORD PTR DS:[EDX+1A] ; OffsetToFileName 00553AB3 MOV ECX,DWORD PTR SS:[EBP-34] 00553AB6 LEA EDX,[EAX+ECX+1C] ; ModuleInfo->Modules[i].FullPathName+ModuleInfo->Modules[i].OffsetToFileName 00553ABA PUSH EDX 00553ABB PUSH 00555520 ; ASCII "%s" 00553AC0 PUSH 104 00553AC5 MOV EAX,DWORD PTR SS:[EBP-20] 00553AC8 PUSH EAX 00553AC9 CALL 00553CA0 ; copy_to_buffer 00553ACE ADD ESP,10 00553AD1 JMP 00553B5C 00553AD6 JMP SHORT 00553B57 00553AD8 MOV ECX,DWORD PTR SS:[EBP+8] 00553ADB PUSH ECX 00553ADC MOV EDX,DWORD PTR SS:[EBP-10] ; mod_count 00553ADF IMUL EDX,EDX,11C 00553AE5 ADD EDX,DWORD PTR SS:[EBP-34] ; ModuleInfo 00553AE8 MOV EAX,DWORD PTR SS:[EBP-10] 00553AEB IMUL EAX,EAX,11C 00553AF1 MOV ECX,DWORD PTR SS:[EBP-34] 00553AF4 MOVZX EAX,WORD PTR DS:[EAX+ECX+1A] 00553AF9 LEA ECX,[EAX+EDX+1C] 00553AFD PUSH ECX 00553AFE CALL <JMP.&ntoskrnl_exe._stricmp> 00553B03 ADD ESP,8 00553B06 TEST EAX,EAX 00553B08 JNZ SHORT 00553B57 00553B0A MOV EDX,DWORD PTR SS:[EBP-10] 00553B0D IMUL EDX,EDX,11C 00553B13 MOV EAX,DWORD PTR SS:[EBP-34] 00553B16 MOV ECX,DWORD PTR DS:[EDX+EAX+8] 00553B1A MOV DWORD PTR SS:[EBP-18],ECX 00553B1D MOV EDX,DWORD PTR SS:[EBP-10] 00553B20 IMUL EDX,EDX,11C 00553B26 ADD EDX,DWORD PTR SS:[EBP-34] 00553B29 MOV EAX,DWORD PTR SS:[EBP-10] 00553B2C IMUL EAX,EAX,11C 00553B32 MOV ECX,DWORD PTR SS:[EBP-34] 00553B35 MOVZX EAX,WORD PTR DS:[EAX+ECX+1A] 00553B3A LEA ECX,[EAX+EDX+1C] 00553B3E PUSH ECX 00553B3F PUSH 00555520 ; ASCII "%s" 00553B44 PUSH 104 00553B49 MOV EDX,DWORD PTR SS:[EBP-20] 00553B4C PUSH EDX 00553B4D CALL 00553CA0 ; copy_to_buffer 00553B52 ADD ESP,10 00553B55 JMP SHORT 00553B5C 00553B57 JMP 00553A86 00553B5C CMP DWORD PTR SS:[EBP-18],0 ; ImageBase 00553B60 JNE SHORT 00553B67 00553B62 JMP 00553C72 00553B67 MOV EAX,DWORD PTR SS:[EBP-18] 00553B6A MOV DWORD PTR SS:[EBP-30],EAX 00553B6D MOV ECX,DWORD PTR SS:[EBP-30] 00553B70 MOVZX EDX,WORD PTR DS:[ECX] 00553B73 CMP EDX,5A4D ; DOS HEADER 00553B79 JE SHORT 00553B80 00553B7B JMP 00553C72 00553B80 MOV EAX,DWORD PTR SS:[EBP-30] ; ImageBase 00553B83 MOV ECX,DWORD PTR SS:[EBP-18] 00553B86 ADD ECX,DWORD PTR DS:[EAX+3C] ; file offset to the PE signature 00553B89 MOV DWORD PTR SS:[EBP-4],ECX 00553B8C MOV EDX,DWORD PTR SS:[EBP-4] 00553B8F MOV EAX,DWORD PTR SS:[EBP-18] 00553B92 ADD EAX,DWORD PTR DS:[EDX+78] ; RVA of the export table 00553B95 MOV DWORD PTR SS:[EBP-0C],EAX ; Wine: NULL -> image_base 00553B98 MOV ECX,DWORD PTR SS:[EBP-0C] 00553B9B MOV EDX,DWORD PTR SS:[EBP-18] 00553B9E ADD EDX,DWORD PTR DS:[ECX+20] ; offset(names table) 00553BA1 MOV DWORD PTR SS:[EBP-14],EDX 00553BA4 MOV EAX,DWORD PTR SS:[EBP-0C] 00553BA7 MOV ECX,DWORD PTR SS:[EBP-18] 00553BAA ADD ECX,DWORD PTR DS:[EAX+1C] ; offset(address table) 00553BAD MOV DWORD PTR SS:[EBP-38],ECX 00553BB0 MOV EDX,DWORD PTR SS:[EBP-0C] 00553BB3 MOV EAX,DWORD PTR SS:[EBP-18] 00553BB6 ADD EAX,DWORD PTR DS:[EDX+24] ; offset(ordinals table) 00553BB9 MOV DWORD PTR SS:[EBP-8],EAX 00553BBC MOV DWORD PTR SS:[EBP-10],0 00553BC3 JMP SHORT 00553BE0 00553BC5 MOV ECX,DWORD PTR SS:[EBP-10] 00553BC8 ADD ECX,1 00553BCB MOV DWORD PTR SS:[EBP-10],ECX 00553BCE MOV EDX,DWORD PTR SS:[EBP-14] ; export_names 00553BD1 ADD EDX,4 00553BD4 MOV DWORD PTR SS:[EBP-14],EDX 00553BD7 MOV EAX,DWORD PTR SS:[EBP-8] ; EAT ordinals_addr 00553BDA ADD EAX,2 00553BDD MOV DWORD PTR SS:[EBP-8],EAX 00553BE0 MOV ECX,DWORD PTR SS:[EBP-0C] ; export_table_addr 00553BE3 MOV EDX,DWORD PTR SS:[EBP-10] 00553BE6 CMP EDX,DWORD PTR DS:[ECX+18] ; table numberOfNamePointers 00553BE9 JAE 00553C72 00553BEF CMP DWORD PTR SS:[EBP+0C],0 ; func_name 00553BF3 JNE SHORT 00553BF7 00553BF5 JMP SHORT 00553C6D 00553BF7 MOV EAX,DWORD PTR SS:[EBP-14] ; export_names 00553BFA MOV ECX,DWORD PTR SS:[EBP-18] ; ImageBase 00553BFD ADD ECX,DWORD PTR DS:[EAX] 00553BFF MOV DWORD PTR SS:[EBP-3C],ECX 00553C02 MOV EDX,DWORD PTR SS:[EBP+0C] 00553C05 MOV DWORD PTR SS:[EBP-40],EDX 00553C08 MOV EAX,DWORD PTR SS:[EBP-40] 00553C0B MOV CL,BYTE PTR DS:[EAX] 00553C0D MOV BYTE PTR SS:[EBP-41],CL 00553C10 MOV EDX,DWORD PTR SS:[EBP-3C] ; name_ptr_rva 00553C13 CMP CL,BYTE PTR DS:[EDX] ; *boom* 00553C15 JNE SHORT 00553C45 00553C17 CMP BYTE PTR SS:[EBP-41],0 00553C1B JE SHORT 00553C3C 00553C1D MOV EAX,DWORD PTR SS:[EBP-40] 00553C20 MOV CL,BYTE PTR DS:[EAX+1] 00553C23 MOV BYTE PTR SS:[EBP-42],CL 00553C26 MOV EDX,DWORD PTR SS:[EBP-3C] 00553C29 CMP CL,BYTE PTR DS:[EDX+1] 00553C2C JNE SHORT 00553C45 00553C2E ADD DWORD PTR SS:[EBP-40],2 00553C32 ADD DWORD PTR SS:[EBP-3C],2 00553C36 CMP BYTE PTR SS:[EBP-42],0 00553C3A JNE SHORT 00553C08 00553C3C MOV DWORD PTR SS:[EBP-48],0 00553C43 JMP SHORT 00553C4D 00553C45 SBB EAX,EAX 00553C47 SBB EAX,-1 00553C4A MOV DWORD PTR SS:[EBP-48],EAX 00553C4D MOV ECX,DWORD PTR SS:[EBP-48] 00553C50 MOV DWORD PTR SS:[EBP-4C],ECX 00553C53 CMP DWORD PTR SS:[EBP-4C],0 00553C57 JNE SHORT 00553C6D 00553C59 MOV EDX,DWORD PTR SS:[EBP-8] ; eat_ordinals_addr 00553C5C MOVSX EAX,WORD PTR DS:[EDX] 00553C5F MOV ECX,DWORD PTR SS:[EBP-38] ; export_address_table 00553C62 MOV EDX,DWORD PTR SS:[EBP-18] ; ImageBase 00553C65 ADD EDX,DWORD PTR DS:[EAX*4+ECX] 00553C68 MOV DWORD PTR SS:[EBP-24],EDX 00553C6B JMP SHORT 00553C72 00553C6D JMP 00553BC5 00553C72 CMP DWORD PTR SS:[EBP-2C],0 ; ModuleInfo 00553C76 JE SHORT 00553C81 00553C78 MOV EAX,DWORD PTR SS:[EBP-2C] 00553C7B PUSH EAX 00553C7C CALL 00552F60 00553C81 CMP DWORD PTR SS:[EBP-20],0 00553C85 JE SHORT 00553C90 00553C87 MOV ECX,DWORD PTR SS:[EBP-20] 00553C8A PUSH ECX 00553C8B CALL 00552F60 00553C90 MOV EAX,DWORD PTR SS:[EBP-24] 00553C93 MOV ESP,EBP 00553C95 POP EBP 00553C96 RETN 8 --- snip --- To cut it short: The driver(s) populate the list of loaded modules. Wine runs kernel drivers by design using a helper 'winedevice' hosting process. 'winedevice' is part of the system modules list (first entry). Unfortunately it doesn't export anything hence the drivers choke on an empty export address table. $ sha1sum ggp3d.exe 5c1b2cca00da683b047c5a429bee540cc585b53e ggp3d.exe $ du -sh ggp3d.exe 392K ggp3d.exe $ wine --version wine-4.8 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 43052] New: ChessBase 14 - crashes right after start
by wine-bugs＠winehq.org April 5, 2024

April 5, 2024

https://bugs.winehq.org/show_bug.cgi?id=43052 Bug ID: 43052 Summary: ChessBase 14 - crashes right after start Product: Wine Version: 2.8 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: blizzard(a)sachlevice.eu Distribution: --- Created attachment 58215 --> https://bugs.winehq.org/attachment.cgi?id=58215 whole program run log I attach whole log from start to crash from console. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 13

[Bug 50296] New: Multiple 32-bit applications fail due to incorrect handling of 'HKLM\\Software\\Classes' key in 64-bit WINEPREFIX (shared key under Windows 7+ WOW64)(Autocad 2005)
by WineHQ Bugzilla April 5, 2024

April 5, 2024

https://bugs.winehq.org/show_bug.cgi?id=50296 Bug ID: 50296 Summary: Multiple 32-bit applications fail due to incorrect handling of 'HKLM\\Software\\Classes' key in 64-bit WINEPREFIX (shared key under Windows 7+ WOW64)(Autocad 2005) Product: Wine Version: 6.0-rc1 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wineserver Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. I'm pretty sure there are already a number of existing bugs with the same root cause. Affected app here: Autocad 2005 Registration fails after installation in 64-bit WINEPREFIX with endless urlmon/ieframe looping. Installer and app are both 32-bit. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files (x86)/AutoCAD 2005 $ file acad.exe acad.exe: PE32 executable (GUI) Intel 80386, for MS Windows $ WINEDEBUG=+seh,+loaddll,+mshtml,+ieframe,+urlmon,+reg wine ./acad.exe >>log.txt 2>&1 ... 02f4:trace:ieframe:BindStatusCallback_OnProgress (053C4438)->(4760 4760 14 L"C:\\Program Files (x86)\\AutoCAD 2005\\Webdepot\\RTBeginReg.html") 02f4:trace:urlmon:BindStatusCallback_OnProgress 053C4A70)->(4760 4760 BINDSTATUS_ENDDOWNLOADDATA L"file://C:\\Program Files (x86)\\AutoCAD 2005\\Webdepot\\RTBeginReg.html?p=C%3A%5Cusers%5Cfocht%5CTemp%5C~RTf171.tmp%5C") 02f4:trace:ieframe:BindStatusCallback_OnProgress (053C4438)->(4760 4760 6 L"file://C:\\Program Files (x86)\\AutoCAD 2005\\Webdepot\\RTBeginReg.html?p=C%3A%5Cusers%5Cfocht%5CTemp%5C~RTf171.tmp%5C") 02f4:trace:ieframe:set_status_text (053C4438, 6, L"file://C:\\Program Files (x86)\\AutoCAD 2005\\Webdepot\\RTBeginReg.html?p=C%3A%5Cusers%5Cfocht%5CTemp%5C~RTf171.tmp%5C") 02f4:trace:ieframe:set_status_text => L"Downloading file://C:\\Program Files (x86)\\AutoCAD 2005\\Webdepot\\RTBeginReg.html?p=C%3A%5Cusers%5Cfocht%5CTemp%5C~RTf171.tmp%5C" 02f4:trace:urlmon:Binding_AddRef (053C5168) ref=6 02f4:trace:reg:NtOpenKeyEx (0x74,L"MIME\\Database\\Content Type\\text/html",2000000,0x31a378) 02f4:trace:reg:NtOpenKeyEx <- (nil) 02f4:warn:urlmon:get_mime_clsid Could not open MIME key: 2 02f4:trace:urlmon:BindStatusCallback_OnProgress 053C4A70)->(0 0 BINDSTATUS_BEGINSYNCOPERATION (null)) 02f4:trace:ieframe:BindStatusCallback_OnProgress (053C4438)->(0 0 15 (null)) 02f4:fixme:urlmon:create_object Could not find object for MIME L"text/html" 02f4:trace:urlmon:BindStatusCallback_OnProgress 053C4A70)->(0 0 BINDSTATUS_ENDSYNCOPERATION (null)) 02f4:trace:ieframe:BindStatusCallback_OnProgress (053C4438)->(0 0 16 (null)) 02f4:trace:urlmon:BindStatusCallback_OnStopBinding (053C4A70)->(80040154 (null)) 02f4:trace:ieframe:BindStatusCallback_OnStopBinding (053C4438)->(80040154 (null)) 02f4:trace:ieframe:set_status_text (053C4438, 0, L"") 02f4:trace:ieframe:set_status_text => L"" 02f4:trace:ieframe:notify_download_state (0) 02f4:trace:ieframe:WebBrowser_Invoke (001F6A78)->(104 {00000000-0000-0000-0000-000000000000} 0 00000001 00317F18 00000000 00317EF8 00317F38) 02f4:trace:ieframe:WebBrowser_Navigate (001F6A78)->(L"file://C:\\Program Files (x86)\\AutoCAD 2005\\Webdepot\\RTConnectFail.html?p=C%3A%5Cusers%5Cfocht%5CTemp%5C%7ERTf171.tmp%5C" (null) (null) (null) (null)) 02f4:trace:ieframe:navigate_url navigating to L"file://C:\\Program Files (x86)\\AutoCAD 2005\\Webdepot\\RTConnectFail.html?p=C%3A%5Cusers%5Cfocht%5CTemp%5C%7ERTf171.tmp%5C" 02f4:trace:ieframe:WebBrowser_AddRef (001F6A78) ref=6 02f4:fixme:ieframe:handle_navigation_error Navigate to error page ... <repeats endlessly> --- snip --- Failure to open 'HKCR\\MIME\\Database\\Content Type\\text/html' seemed pretty suspicious to me. 64-bit registry view: --- snip --- [HKEY_CLASSES_ROOT\MIME\Database\Content Type\text/html] "CLSID"="{25336920-03F9-11CF-8FD0-00AA00686F13}" "Encoding"=hex:08,00,00,00 "Extension"=".htm" --- snip --- Apparently 32-bit urlmon looks up the key in the redirected 32-bit view? According to Microsoft docs: https://docs.microsoft.com/en-us/windows/win32/winprog64/shared-registry-ke… --- quote --- The following table lists registry keys that are redirected, shared by both 32-bit and 64-bit applications, or redirected and reflected on 64-bit Windows. Subkeys of the keys in this table inherit the parent key's behavior unless otherwise specified. If a key has no parent listed in this table, the key is shared. --- quote --- 'HKEY_CLASSES_ROOT\\Classes' -> 'HKEY_LOCAL_MACHINE\\Software\\Classes' = shared between both. MIME-type database key is a child key. It's not listed in table but the parent key is, hence it should be shared between both views. Additionally I found these keys: --- snip --- [HKEY_CLASSES_ROOT\Wow6432Node\MIME] [HKEY_CLASSES_ROOT\Wow6432Node\MIME\Database] [HKEY_CLASSES_ROOT\Wow6432Node\MIME\Database\Content Type] [HKEY_CLASSES_ROOT\Wow6432Node\MIME\Database\Content Type\application/futuresplash] "CLSID"="{D27CDB6E-AE6D-11cf-96B8-444553540000}" "Extension"=".spl" [HKEY_CLASSES_ROOT\Wow6432Node\MIME\Database\Content Type\application/x-complus] "CLSID"="{DC5DA001-7CD4-11D2-8ED9-D8C857F98FE3}" [HKEY_CLASSES_ROOT\Wow6432Node\MIME\Database\Content Type\application/x-dwf] "CLSID"="{A662DA7E-CCB7-4743-B71A-D817F6D575DF}" "Extension"=".dwf" [HKEY_CLASSES_ROOT\Wow6432Node\MIME\Database\Content Type\application/x-ms-application] "Extension"=".application" [HKEY_CLASSES_ROOT\Wow6432Node\MIME\Database\Content Type\application/x-shockwave-flash] "CLSID"="{D27CDB6E-AE6D-11cf-96B8-444553540000}" "Extension"=".swf" [HKEY_CLASSES_ROOT\Wow6432Node\MIME\Database\Content Type\drawing/x-dwf] "CLSID"="{A662DA7E-CCB7-4743-B71A-D817F6D575DF}" "Extension"=".dwf" [HKEY_CLASSES_ROOT\Wow6432Node\MIME\Database\Content Type\Model/vnd.dwf] "CLSID"="{A662DA7E-CCB7-4743-B71A-D817F6D575DF}" "Extension"=".dwf" --- snip --- Having the app-specific MIME-type database entries in the 32-bit-only view looks wrong as well. Sometimes there are broken apps which use hard-coded 'Wow6432Node' in the key name but this one doesn't do that. Wine source: https://source.winehq.org/git/wine.git/blob/310019789f7bde12ae3f25f723957c9… --- snip --- 1790 /* registry initialisation */ 1791 void init_registry(void) 1792 { 1793 static const WCHAR HKLM[] = { 'M','a','c','h','i','n','e' }; 1794 static const WCHAR HKU_default[] = { 'U','s','e','r','\\','.','D','e','f','a','u','l','t' }; 1795 static const WCHAR classes[] = {'S','o','f','t','w','a','r','e','\\', 1796 'C','l','a','s','s','e','s','\\', 1797 'W','o','w','6','4','3','2','N','o','d','e'}; 1798 static const struct unicode_str root_name = { NULL, 0 }; 1799 static const struct unicode_str HKLM_name = { HKLM, sizeof(HKLM) }; 1800 static const struct unicode_str HKU_name = { HKU_default, sizeof(HKU_default) }; 1801 static const struct unicode_str classes_name = { classes, sizeof(classes) }; 1802 1803 WCHAR *current_user_path; 1804 struct unicode_str current_user_str; 1805 struct key *key, *hklm, *hkcu; 1806 char *p; 1807 1808 /* switch to the config dir */ 1809 1810 if (fchdir( config_dir_fd ) == -1) fatal_error( "chdir to config dir: %s\n", strerror( errno )); 1811 1812 /* create the root key */ 1813 root_key = alloc_key( &root_name, current_time ); 1814 assert( root_key ); 1815 make_object_permanent( &root_key->obj ); 1816 1817 /* load system.reg into Registry\Machine */ 1818 1819 if (!(hklm = create_key_recursive( root_key, &HKLM_name, current_time ))) 1820 fatal_error( "could not create Machine registry key\n" ); 1821 1822 if (!load_init_registry_from_file( "system.reg", hklm )) 1823 { 1824 if ((p = getenv( "WINEARCH" )) && !strcmp( p, "win32" )) 1825 prefix_type = PREFIX_32BIT; 1826 else 1827 prefix_type = sizeof(void *) > sizeof(int) ? PREFIX_64BIT : PREFIX_32BIT; 1828 } 1829 else if (prefix_type == PREFIX_UNKNOWN) 1830 prefix_type = PREFIX_32BIT; 1831 1832 /* load userdef.reg into Registry\User\.Default */ 1833 1834 if (!(key = create_key_recursive( root_key, &HKU_name, current_time ))) 1835 fatal_error( "could not create User\\.Default registry key\n" ); 1836 1837 load_init_registry_from_file( "userdef.reg", key ); 1838 release_object( key ); 1839 1840 /* load user.reg into HKEY_CURRENT_USER */ 1841 1842 /* FIXME: match default user in token.c. should get from process token instead */ 1843 current_user_path = format_user_registry_path( security_local_user_sid, &current_user_str ); 1844 if (!current_user_path || 1845 !(hkcu = create_key_recursive( root_key, &current_user_str, current_time ))) 1846 fatal_error( "could not create HKEY_CURRENT_USER registry key\n" ); 1847 free( current_user_path ); 1848 load_init_registry_from_file( "user.reg", hkcu ); 1849 1850 /* set the shared flag on Software\Classes\Wow6432Node */ 1851 if (prefix_type == PREFIX_64BIT) 1852 { 1853 if ((key = create_key_recursive( hklm, &classes_name, current_time ))) 1854 { 1855 key->flags |= KEY_WOWSHARE; 1856 release_object( key ); 1857 } 1858 /* FIXME: handle HKCU too */ 1859 } --- snip --- Commit: https://source.winehq.org/git/wine.git/commitdiff/178cd20e281d89358dde524f0… ("server: Add support for Wow64 sharing of the HKLM\Software\Classes key."). I'm stumped to find such a fundamental problem after years. But maybe I'm totally off here, getting wrong conclusions from the code. $ wine --version wine-6.0-rc1-29-g310019789f7 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 26372] New: emulator of the TI Calculator
by wine-bugs＠winehq.org April 5, 2024

April 5, 2024

http://bugs.winehq.org/show_bug.cgi?id=26372 Summary: emulator of the TI Calculator Product: Wine Version: 1.2.2 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: minor Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: honeycuttaaron3(a)gmail.com Once the TI Calculator emulator launches then the calculator takes the background and the buttons are not visible. TI-83 Plus Flash Debugger Program. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 54378] New: VrtuleTree calls unimplemented function ntoskrnl.exe.ExGetPreviousMode
by WineHQ Bugzilla April 5, 2024

April 5, 2024

https://bugs.winehq.org/show_bug.cgi?id=54378 Bug ID: 54378 Summary: VrtuleTree calls unimplemented function ntoskrnl.exe.ExGetPreviousMode Product: Wine Version: 8.0 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: alexhenrie24(a)gmail.com Distribution: --- Created attachment 73946 --> https://bugs.winehq.org/attachment.cgi?id=73946 Console output A black terminal window briefly appears when the program starts, but it does not appear after stubbing ExGetPreviousMode, KeAcquireGuardedMutex, and KeReleaseGuardedMutex. $ sha256sum VrtuleTree.zip dfdf4d01c16517b3f4528799000f66eb34836549a8130e654a7d469c3febb8ad -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 46030] New: Trackmania Unlimiter crashes at startup
by wine-bugs＠winehq.org April 5, 2024

April 5, 2024

https://bugs.winehq.org/show_bug.cgi?id=46030 Bug ID: 46030 Summary: Trackmania Unlimiter crashes at startup Product: Wine Version: 3.18 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: bernhard.gebetsberger(a)gmx.at Distribution: --- Created attachment 62606 --> https://bugs.winehq.org/attachment.cgi?id=62606 Crashlog Trackmania Unlimiter(1.3) crashes immediately after selecting an account at the account selection screen. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 41650] New: SolidWorks 2016 crashes on launch
by wine-bugs＠winehq.org April 5, 2024

April 5, 2024

https://bugs.winehq.org/show_bug.cgi?id=41650 Bug ID: 41650 Summary: SolidWorks 2016 crashes on launch Product: Wine Version: 1.9.22 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: asdfghrbljzmkd(a)outlook.com Distribution: --- Created attachment 56030 --> https://bugs.winehq.org/attachment.cgi?id=56030 Backtrace from crash dialog SLDWORKS.exe always crashes immediately on launch. Term output: qwerty(a)qwerty-Inspiron-3520:~$ env WINEPREFIX="/home/qwerty/.local/share/wineprefixes/solidworks" /opt/wine-staging/bin/wine C:\\Program\ Files\\SOLIDWORKS\\swspmanager.exe fixme:winediag:start_process Wine Staging 1.9.22 is a testing version containing experimental patches. fixme:winediag:start_process Please mention your exact version when filing bug reports on winehq.org. fixme:wer:WerSetFlags (2) stub! fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub fixme:heap:RtlSetHeapInformation 0x240000 0 0x23fcf0 4 stub fixme:wer:WerSetFlags (2) stub! fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub fixme:nls:GetThreadPreferredUILanguages 00000038, 0x23f980, 0x23f990 0x23f984 fixme:nls:get_dummy_preferred_ui_language (0x38 0x23f980 0x23f990 0x23f984) returning a dummy value (current locale) fixme:module:load_library unsupported flag(s) used (flags: 0x00000060) qwerty(a)qwerty-Inspiron-3520:~$ fixme:nls:GetThreadPreferredUILanguages 00000038, 0x33f980, 0x33f990 0x33f984 fixme:nls:get_dummy_preferred_ui_language (0x38 0x33f980 0x33f990 0x33f984) returning a dummy value (current locale) fixme:module:load_library unsupported flag(s) used (flags: 0x00000060) fixme:heap:RtlSetHeapInformation 0xb80000 0 0x33fc90 4 stub fixme:ver:GetCurrentPackageId (0x33f290 (nil)): stub wine: Unhandled exception 0xe06d7363 in thread 3a at address 0x7b450b3a (thread 003a), starting debugger... fixme:nls:GetThreadPreferredUILanguages 00000038, 0x23f980, 0x23f990 0x23f984 fixme:nls:get_dummy_preferred_ui_language (0x38 0x23f980 0x23f990 0x23f984) returning a dummy value (current locale) fixme:module:load_library unsupported flag(s) used (flags: 0x00000060) qwerty(a)qwerty-Inspiron-3520:~$ wine --version wine-1.9.22 (Staging) qwerty(a)qwerty-Inspiron-3520:~$ The backtrace is attached. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 28170] New: "Text Service and Input Languages" crash: Unimplemented function USER32.dll.LoadKeyboardLayoutEx called
by wine-bugs＠winehq.org April 5, 2024

April 5, 2024

http://bugs.winehq.org/show_bug.cgi?id=28170 Summary: "Text Service and Input Languages" crash: Unimplemented function USER32.dll.LoadKeyboardLayoutEx called Product: Wine Version: 1.3.26 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: fracting(a)gmail.com Created an attachment (id=36090) --> (http://bugs.winehq.org/attachment.cgi?id=36090) Log: unimplemented function USER32.dll.LoadKeyboardLayoutEx 1. copy native input.dll, sptip.dll, and sapi.dll 2. regsvr32 sptip.dll for class {dcbd6fa8-032f-11d3-b5b1-00c04fc324a1}, regsvr32 sapi.dll for class {a910187f-0c7a-45ac-92cc-59edafb77b53} 3. import keyboard_layouts.reg with regedit, which is download from http://www.geekstogo.com/forum/index.php?app=core&module=attach&section=att… ( referer url: http://www.geekstogo.com/forum/topic/222396-cant-change-language-settings-f… ) 4. start the "Text Service and Input Languages" : $ wine control input.dll (notes: without step 3, there will be an "incompatible keyboard driver detected" error, and the input.dll control panel can not display complete, I'm not sure if it this a wine bug) 5. click ok, then crash: fixme:msvcrt:_setmbcp trail bytes data not available for DBCS codepage 0 - assuming all bytes fixme:msctf:InputProcessorProfiles_GetLanguageList Semi-STUB:(0x13afd0) wine: Call from 0x7bc4c896 to unimplemented function USER32.dll.LoadKeyboardLayoutEx, aborting -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 17

[Bug 32931] New: FFXI Amazon Downloader crashes when trying to download install files
by wine-bugs＠winehq.org April 4, 2024

April 4, 2024

http://bugs.winehq.org/show_bug.cgi?id=32931 Bug #: 32931 Summary: FFXI Amazon Downloader crashes when trying to download install files Product: Wine Version: 1.5.23 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wininet AssignedTo: wine-bugs(a)winehq.org ReportedBy: btwisgac23(a)gmail.com Classification: Unclassified I ran a successful bisect, and here is the output. This bug has been present since 1.3.18 and is still present in 1.5.23. $ git bisect good ccd11eb7d6720ee5242e619851f41908f285e8f9 is the first bad commit commit ccd11eb7d6720ee5242e619851f41908f285e8f9 Author: Jacek Caban <jacek(a)codeweavers.com> Date: Sat Apr 2 15:20:33 2011 +0200 wininet: Abstract different transfer and content encoding reading to layered structures. :040000 040000 6a31f2cf8265be180b9267ead2317512555f5174 1c317ffca5fdb9434933f12120419a240a50f117 M dlls -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 17

[Bug 47577] New: Final Fantasy XI crashes
by wine-bugs＠winehq.org April 4, 2024

April 4, 2024

https://bugs.winehq.org/show_bug.cgi?id=47577 Bug ID: 47577 Summary: Final Fantasy XI crashes Product: Wine Version: 3.0.4 Hardware: Other OS: Mac OS X Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: marie-christin-schaarschmidt(a)web.de Final Fantasy XI crashes randomly. Sometimes after the bug I can move my character and everything is fine. But sometimes nothing happens. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 2