January 2025 - Wine-Bugs - list.winehq.org

[Bug 56590] New: Buffer Overflow in jpeg_decoder_initialize
by WineHQ Bugzilla May 1, 2026

May 1, 2026

https://bugs.winehq.org/show_bug.cgi?id=56590 Bug ID: 56590 Summary: Buffer Overflow in jpeg_decoder_initialize Product: Wine Version: 9.7 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: windowscodecs Assignee: wine-bugs(a)winehq.org Reporter: franco(a)blackwinghq.com Distribution: --- The vulnerable jpeg_decoder_initialize function in file libjpeg.c (https://github.com/wine-mirror/wine/blob/master/dlls/windowscodecs/libjpeg.…) is used to decompress jpegs and create a raw bitmap version of the image. In jpeg_decoder_initialize, the values for cinfo.output_width and cinfo.output_height are retrieved directly from a jpeg file's header. cinfo.output_width and cinfo.output_height can be manipulated by editing the header of the jpeg file being processed. They are two bytes each in the image's header so their values can range from 0x0000 to 0xFFFF. These variables are multiplied with frame.bpp. When these three values are multiplied together they can exceed the limit of a 32-bit unsigned integer, leading to an integer overflow vulnerability. This product is used to set the size of the image_data buffer, which will store the decompressed jpeg (https://github.com/wine-mirror/wine/blob/master/dlls/windowscodecs/libjpeg.…) When the sizing arguments overflow, the buffer becomes too small to store the decompressed data. The program writes the decompressed image to the buffer using the jpeg_read_scanlines function. The function ends up writing to out-of-bounds memory due to the buffer’s small size (https://github.com/wine-mirror/wine/blob/master/dlls/windowscodecs/libjpeg.…) This causes data in memory adjacent to the buffer to be overwritten. An attacker is in control of the image's height, width, and contents. This allows an attacker to craft an exploit to overwrite data in memory with data they control. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 55653] New: Logitech Extreme 3d Joystick has axes mapped incorrectly
by WineHQ Bugzilla April 30, 2026

April 30, 2026

https://bugs.winehq.org/show_bug.cgi?id=55653 Bug ID: 55653 Summary: Logitech Extreme 3d Joystick has axes mapped incorrectly Product: Wine Version: 8.16 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: dinput Assignee: wine-bugs(a)winehq.org Reporter: jonathan(a)jdcox.net Distribution: --- Using the jstest utility the joystick reports this: Joystick (Logitech Logitech Extreme 3D) has 6 axes (X, Y, Rz, Throttle, Hat0X, Hat0Y) wine control shows that Rz is mapped to the Z axis and the throttle is mapped to the Rz axis in wine. These two should be flipped. I have tested with SDL disabled and enabled and I get the same behavior. This occurs in current wine and in current proton releases. The problem does not occur in Proton 6 series, but does with 7 and later. I am aware this bug tracker is for wine, but using Proton was the best way to test an older, albeit heavily patched, version of wine that I am currently aware of. This issue is a problem because games in the X-Wing and Tie Fighter series of games treat the rudder (or accidental joystick rotation on this cheap joystick) as throttle movements and constantly adjust throttle during gameplay. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 26

[Bug 56486] New: Battle.net App Crash Cycle on Startup
by WineHQ Bugzilla April 29, 2026

April 29, 2026

https://bugs.winehq.org/show_bug.cgi?id=56486 Bug ID: 56486 Summary: Battle.net App Crash Cycle on Startup Product: Wine Version: 9.5 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: wschmrdr(a)gmail.com Distribution: --- Created attachment 76256 --> https://bugs.winehq.org/attachment.cgi?id=76256 Backtrace from the Program Error Starting up Battle.net App. Login screen shows with a loading circle as if it's trying to use a saved password to login. I receive a notice that there's an error and Battle.net has to shut down. I close it, and the error shows up again. This continues in a cycle until I use "wineserver -k" to exit. The backtrace saved from this has been attached. I am able to use the Settings button on the login screen for the Battle.net app, as well as typing in a username/password, but I cannot go any farther than that because there is no submit button and it doesn't seem to want to load. Be aware that I had previously been loading Starcraft II directly using the SC2Switcher.exe executable, but because a new version needs to be downloaded, I'm needing to get into the Battle.net app. Not sure if not using the app is a side effect. For the heck of it, I tried running the setup to update Battle.net, and the same thing occurred. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

3 27

[Bug 51502] New: Civilization 3 Sound Stutters, loops, and fails (eventually)
by WineHQ Bugzilla April 29, 2026

April 29, 2026

https://bugs.winehq.org/show_bug.cgi?id=51502 Bug ID: 51502 Summary: Civilization 3 Sound Stutters, loops, and fails (eventually) Product: Wine Version: 6.13 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: mountmgr.sys Assignee: wine-bugs(a)winehq.org Reporter: bryan(a)varnernet.com Distribution: --- Audio on Civilization III is just not very good. Typical short sounds stutter, playback sounding badly rendered into the target buffer, loop when they shouldn't, etc. The most common problem is for the sound (all of it) to just stop, or just continuously loop a small soundfile that should have been a one-off play at the triggered point in time. Looks like the app is using dsound, along with winmm to mmioOpenA the .wav's. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 57564] New: Siemens Solid Edge 2025: Not drawing SVG ribbon UI icons, software unusable
by WineHQ Bugzilla April 28, 2026

April 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=57564 Bug ID: 57564 Summary: Siemens Solid Edge 2025: Not drawing SVG ribbon UI icons, software unusable Product: Wine Version: 10.0-rc2 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: windowscodecs Assignee: wine-bugs(a)winehq.org Reporter: bugzilla_winehq(a)spirit.re Distribution: --- Created attachment 77653 --> https://bugs.winehq.org/attachment.cgi?id=77653 Log from launching of Edge.exe to exit I am on Fedora 41, latest stable at the time of this report(Dec 18, 2024). Running Siemens Solid Edge 2025, everything launches and the software works, aside from the occasional crash, but the UI seems to be using SVG icons which do not render at all, making the software completely unusable. Steps to reproduce: 1 - Obtain an installer for Solid Edge 2025. Unfortunately I can't provide a direct link as Siemens does not, but you can obtain the installer online relatively easily. Piracy is NOT needed, and you do NOT need a license. Just the original, legitimate installer is all that's required. The Community Edition version is based on 2023/2024, which does not have this problem, and therefore is not suitable for reproduction. You need specifically the latest 2025! 2 - Disable wbemprox.dll, or the installer gets hung up on something(bug, trivial/minor, not important). 3 - Run setup.exe, follow the installation process. 4 - When setup is done, remove the wbemprox.dll disablement. 5 - Run /Program/SELicWiz.exe, select the Free 2D Drafting mode. 6 - It will execute a Powershell script (stub?) to modify the registry. Change the following key to what it tells you it wants to be set as: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Environment\SE_LICENSE_SERVER 7 - Run /Program/Edge.exe once or twice. It will complain about not having a license once(bug), then on the next launch it will pick up the free 2D drafting mode and launch in that. 8 - Create a new draft, that's the only option you'll see. 9 - Observe the ribbon menu not having any icons visible. The buttons light up on hover, but there are no icons, and as they're icon-only, it makes the software unusable. I believe this is the important bit in the log: 0024:fixme:dxgi:DXGID3D10CreateDevice Ignoring flags 0x20. 0024:fixme:d2d:d2d_device_context_CreateSvgDocument iface 00000000097EBEE0, input_xml_stream 0000000009CDDE00, svg_document 0000000000A1C460 stub! 0024:fixme:wincodecs:FormatConverter_CanConvert Unsupported source format {6fddc324-4e03-4bfe-b185-3d77768dc900} The problem lies somewhere in wincodecs and/or d2d1, which appear to have stubs for SVG rendering. Installing DXVK via winetricks changes nothing. Swapping binaries around from 2023/2024 breaks the software. The icons it's trying to load are located in /Program/ResDLLs/0009/RibbonImage.drx - there are SVG and PNG versions, but cutting out SVG ones doesn't seem to change anything. It's an empty resource DLL. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 41392] New: directory.c: match_filename always false if mask contains "*?"
by wine-bugs＠winehq.org April 27, 2026

April 27, 2026

https://bugs.winehq.org/show_bug.cgi?id=41392 Bug ID: 41392 Summary: directory.c: match_filename always false if mask contains "*?" Product: Wine Version: 1.9.19 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: lcmecmac(a)gmail.com Distribution: --- A mask containing '*' followed by '?' will not match any files. For example, "dir *?" does not show any files in a non-empty directory. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

3 2

[Bug 25381] New: Trackmania Nation Forever crashes on OS X when sound is enabled
by wine-bugs＠winehq.org April 27, 2026

April 27, 2026

http://bugs.winehq.org/show_bug.cgi?id=25381 Summary: Trackmania Nation Forever crashes on OS X when sound is enabled Product: Wine Version: 1.3.8 Platform: x86 URL: http://www.trackmaniaunited.com OS/Version: Mac OS X 10.6 Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: qparis(a)playonlinux.com Created an attachment (id=32283) --> (http://bugs.winehq.org/attachment.cgi?id=32283) Screenshot + Terminal content Application : Track Mania Nation forever (http://www.trackmaniaunited.com) System information : - Tested both with XQuartz 2.6.0 beta (for Randr support) and stable version - Mac OS 10.6.5 Step to reproduce : - I downloaded the latest version of Trackmania Nation Forever (free) (http://www.trackmaniaunited.com) - The game installation run fine - I started a single player game, it will crash at the end of the loading process - I runned wineserver -k in a terminal to kill wine - I went to settings menu -> Advanced -> Audio - I unchecked the box "Enable sound" - I retried to start a single player race, and it worked perfectly (I retried several time and the problem seems to be linked to the sound) Other details - The menu works fine with - The problem does not exist on Linux -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

3 14

[Bug 29633] New: Richedit hyperlinks limited to first line
by wine-bugs＠winehq.org April 26, 2026

April 26, 2026

http://bugs.winehq.org/show_bug.cgi?id=29633 Bug #: 29633 Summary: Richedit hyperlinks limited to first line Product: Wine Version: 1.2.2 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: richedit AssignedTo: wine-bugs(a)winehq.org ReportedBy: sdh_luc(a)hotmail.com Classification: Unclassified Created attachment 38396 --> http://bugs.winehq.org/attachment.cgi?id=38396 A broken location name with its last word repeated When hyperlinks in StarEdit's trigger sentences (as discussed in #4547) extend over multiple lines (either due to wrapping or because the linked text contains newlines), only the first is active. The others have the correct appearance and cursor but do nothing. (This is unfortunate if the first character is a newline!) Presumably related is that editing the multiline text replaces only the first line (see screenshots). -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

3 22

[Bug 54921] New: ADMS 1J Radio Programmer attempted an unsupported operation
by WineHQ Bugzilla April 26, 2026

April 26, 2026

https://bugs.winehq.org/show_bug.cgi?id=54921 Bug ID: 54921 Summary: ADMS 1J Radio Programmer attempted an unsupported operation Product: Wine Version: 8.7 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: ttvibz(a)tutamail.com Distribution: --- Created attachment 74438 --> https://bugs.winehq.org/attachment.cgi?id=74438 RTSystems radio programmer backtrace. 1) When opening the program, a dialog box is displayed that an unsupported operation was attempted. Clicking "Close", the program opens and displays normally. 2) Tried to open a data file (previously generated under the program while running in Windows) and received a Program Error dialog: "The program RadioEngine_V5.exe has encountered a serious problem and needs to close. We are sorry for the inconvenience." -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 55089] New: Program crashes after the exit button is pushed
by WineHQ Bugzilla April 26, 2026

April 26, 2026

https://bugs.winehq.org/show_bug.cgi?id=55089 Bug ID: 55089 Summary: Program crashes after the exit button is pushed Product: Wine Version: 6.0.3 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: schicktmireurescheisse(a)gmail.com Distribution: --- Created attachment 74645 --> https://bugs.winehq.org/attachment.cgi?id=74645 Backtrace of the error message window After the exit button (the blue button in the upper right corner with the emergency exit icon) of the program "Entgenderer" is pushed, the program crashes. The exit button invokes a command to close the window and terminate the application, freeing up memory in that process. Actually, pushing the cross widget on the window´s upper right corner initiates the inherent closing routine and this one runs without problems. I am the author of this software program. The sample program can be downloaded at https://github.com/Waldwatz/Wine-reveals-the-truth/releases/ by clicking on the Entgenderer2.zip link. It is a 16 Bit NE binary. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8