June 2025 - Wine-Bugs - list.winehq.org

[Bug 21483] New: changed token security breaks .NET Framework SDK tools
by wine-bugs＠winehq.org Nov. 16, 2025

Nov. 16, 2025

http://bugs.winehq.org/show_bug.cgi?id=21483 Summary: changed token security breaks .NET Framework SDK tools Product: Wine Version: 1.1.33 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wineserver AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, some of Microsoft's tools from .NET Framework SDKs - namely managed debuggers (CLR) - stopped working after 1.1.33+ release. They seem to be very picky about object security. I bisected this one but technically this isn't a regression because Rob's token patches made Wine more correct - exposing another object security problem. --- snip --- $ git bisect bad bd56916f90e68632993a7275fe30a55a7efa222a is the first bad commit commit bd56916f90e68632993a7275fe30a55a7efa222a Author: Rob Shearman <robertshearman(a)gmail.com> Date: Mon Nov 16 20:11:06 2009 +0000 server: Extend get_token_user server call to also retrieve SIDs for the token's owner or primary group. :040000 040000 829f1543526675ae48f6fde8c8cedff74fd51797 7a77653291795c209ec529dd6660d52fc922a58c M dlls :040000 040000 57735b53b28db37ac4627dc009000e225175164a 4dcc1388cb136e559c06106632c08e8e610fe557 M include :040000 040000 4e83227cb0133c7e288a1e930461d4efe1130882 cf1c3539d6b3c91c854fa2b9b672f68ea601f639 M server --- snip --- "old" behaviour, where default process token was like this: Token owner -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) NtQueryInformationToken had the token owner info hard-coded (to SECURITY_INTERACTIVE_RID) while Rob's patches moved the actual query to wineserver. --- Basically the app code that verifies the security of created objects goes like this: - get SD from created object (event) handle -> GetKernelObjectSecurity( OWNER_SECURITY_INFORMATION | DACL_SECURITY_INFORMATION) - get owner SID of SD -> GetSecurityDescriptorOwner() -> SID1 - get DACL of SD -> GetSecurityDescriptorDacl() - for each ACE from DACL (GetAce) -> SID2: check ACE SID against SD owner SID -> EqualSid( SID1, SID2) - match -> profit! not -> fail! --- snip --- ... 0023: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0014,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}},name=L"Global\\CorDBIPCSetupSyncEvent_36"} ) 0023: create_event() = 0 { handle=01c4 } ... 0025:trace:advapi:GetKernelObjectSecurity (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025:trace:ntdll:NtQuerySecurityObject (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025: get_security_object( handle=00c4, security_info=00000005 ) 0025: get_security_object() = 0 { sd_len=00000050, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}} } 0025:trace:ntdll:RtlGetDaclSecurityDescriptor (0x14ef40,0x33f7c3,0x33f7ec,0x33f7c2) 0025:trace:ntdll:RtlGetAce (0x14ef60,0,0x33f7f0) 0025:trace:ntdll:RtlLengthSid sid=0x14ef54 0025: open_event( access=001f0003, attributes=00000002, rootdir=0034, name=L"Global\\CorDBIPCLSEventAvailName_36" ) 0025: open_event() = 0 { handle=00c8 } ... --- snip --- "new" behaviour, where default process token is now like this: Token owner -> S-1-5-32-544 "BUILTIN\Administrators" (alias) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) --- snip --- ... 0024:trace:ntdll:NtOpenProcessTokenEx (0x1b0,0x00000008,0x00000000,0x318e6d0) 0024: open_token( handle=01b0, access=00000008, attributes=00000000, flags=00000000 ) 0024: open_token() = 0 { token=01b4 } ... 0024:trace:advapi:GetTokenInformation (0x1b4, TokenOwner, 0x184130, 20, 0x318e6e0): 0024:trace:ntdll:NtQueryInformationToken (0x1b4,4,0x184130,20,0x318e6e0) 0024: get_token_sid( handle=01b4, which_sid=00000004 ) 0024: get_token_sid() = 0 { sid_len=16, sid={S-1-5-32-544} } ... 0024: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0018,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}},name=L"Global\\CorDBIPCSetupSyncEvent_37"} ) 0024: create_event() = 0 { handle=01c8 } ... 0026:trace:advapi:GetKernelObjectSecurity (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026:trace:ntdll:NtQuerySecurityObject (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026: get_security_object( handle=00c8, security_info=00000005 ) 0026: get_security_object() = 0 { sd_len=00000058, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}} } ... --- snip --- Using the "admins" sid (alias) as token user in server/token.c:token_create_admin() instead of current "interactive" sid fixes the problem. Though I don't know if this is the right thing to do. I hope I provided enough infos and let Alexandre handle it ;-) To get detailed token infos/dumps you might be interested in this little console app, from cygwin's Corinna Vinschen ;-) http://www.mail-archive.com/cygwin(a)cygwin.com/msg71800.html It might provide useful information when run under different security principals. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 19

[Bug 58368] New: Hammer++ texture window and browser broken
by WineHQ Bugzilla Nov. 16, 2025

Nov. 16, 2025

http://bugs.winehq.org/show_bug.cgi?id=58368 Bug ID: 58368 Summary: Hammer++ texture window and browser broken Product: Wine Version: 10.8 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: luka05(a)bk.ru Distribution: --- Created attachment 78772 --> http://bugs.winehq.org/attachment.cgi?id=78772 Texture browser with severe artifacting, rendering it unusable The texture browser seems to have heavy artifacting, smearing everything as you scroll it. Also affects the face edit window, where the window that displays currently selected texture shows garbage instead. Happens with both DXVK and WineD3D. Tested in TF2 (64bit) and Source SDK 2013 Singleplayer (32bit) Hammer++ versions, affecting both OS: Arch Linux x86_64 Kernel: Linux 6.14.9-arch1-1 DE: KDE Plasma 6.3.5 WM: KWin (X11) CPU: Intel(R) Core(TM) i5-9400F (6) @ 4.10 GHz GPU: NVIDIA GeForce GTX 1050 Ti [Discrete] Hammer++ for TF2 download: https://github.com/ficool2/HammerPlusPlus-Website/releases/download/8869/ha… -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 9

[Bug 45000] New: Ziphead by CNCD & Fairlight fails with GL_OUT_OF_MEMORY
by wine-bugs＠winehq.org Nov. 16, 2025

Nov. 16, 2025

https://bugs.winehq.org/show_bug.cgi?id=45000 Bug ID: 45000 Summary: Ziphead by CNCD & Fairlight fails with GL_OUT_OF_MEMORY Product: Wine Version: 3.6 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: arabek+wine(a)gmail.com Distribution: --- Created attachment 61129 --> https://bugs.winehq.org/attachment.cgi?id=61129 wine-staging ziphead.log (gzipped) A demoscene demo from 2015 fails to show any kind of output. I'm attaching the log. Expected result: running as under native Windows. Wine version: 3.6 & 3.6-staging (basically the same output, attached is the log from staging). -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 57342] New: wine 9.20 is not available for several Debian/Ubuntu distributions in the WineHQ repositories
by WineHQ Bugzilla Nov. 16, 2025

Nov. 16, 2025

https://bugs.winehq.org/show_bug.cgi?id=57342 Bug ID: 57342 Summary: wine 9.20 is not available for several Debian/Ubuntu distributions in the WineHQ repositories Product: Packaging Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-packages Assignee: wine-bugs(a)winehq.org Reporter: memax(a)gmx.fr CC: dimesio(a)earthlink.net Distribution: --- Hello wine 9.20 is still not available in the WineHQ repositories for : - Ubuntu 24.04 (noble) - Ubuntu 22.04 (jammy) - Debian Testing (trixie) - Debian 12 (bookworm) However, it is available for: - Ubuntu 24.10 (oracular) - Ubuntu 20.04 (focal) - Debian 11 (bullseye) Any information on why? Thanks Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 57304] New: so like there is a bug when i download wine it says the following packages have unmet dependencies and i tried all way but never came down the solution pleasevremove the bug
by WineHQ Bugzilla Nov. 16, 2025

Nov. 16, 2025

https://bugs.winehq.org/show_bug.cgi?id=57304 Bug ID: 57304 Summary: so like there is a bug when i download wine it says the following packages have unmet dependencies and i tried all way but never came down the solution pleasevremove the bug Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: packager Assignee: wine-bugs(a)winehq.org Reporter: mdboys3171(a)gmail.com Distribution: --- like i cant even download games please solve the following packages have unmet dependencies -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 58406] New: libvkd3d-doc: An error occurs during installation: "Field "section" is not allowed in section Format"
by WineHQ Bugzilla Nov. 16, 2025

Nov. 16, 2025

http://bugs.winehq.org/show_bug.cgi?id=58406 Bug ID: 58406 Summary: libvkd3d-doc: An error occurs during installation: "Field "section" is not allowed in section Format" Product: vkd3d Version: 1.16 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: vkd3d Assignee: wine-bugs(a)winehq.org Reporter: mywine(a)schiermeier-it.de Distribution: --- Hello! There is an error while the package is installed: This is the error: --- Trigger für dochelp (0.1.8+b8) werden verarbeitet ... E: /usr/share/doc-base/libvkd3d-doc.vkd3d: Field "section" is not allowed in section Format --- -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 10

[Bug 57623] New: Approach welcome screen does not appear when rub from a virtual desktop
by WineHQ Bugzilla Nov. 15, 2025

Nov. 15, 2025

https://bugs.winehq.org/show_bug.cgi?id=57623 Bug ID: 57623 Summary: Approach welcome screen does not appear when rub from a virtual desktop Product: Wine-staging Version: 10.0-rc2 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: ToddAndMargo(a)zoho.com CC: leslie_alistair(a)hotmail.com, z.figura12(a)gmail.com Distribution: --- Lotus Approach N99.8.0208.0800 (Smart Suite) Fedora 41 Xfce 4.18 screen resolution: 4096x2160 Reproduced under: WineHQ Staging: wine-staging-10.0.rc3-1.1.x86_64 winehq-staging-10.0.rc3-1.1.x86_64 Wine Staging Fedora repo: wine-9.15-1.fc41.x86_64 wine-9.15-1.fc41.i686 When Lotus Approach is started from a terminal directory, the welcome screen pops up. $ wine approach But when Lotus Approach is started as a "virtual Desktop", it does not. $ cd .wine/drive_c/lotus/approach/ $ wine explorer /desktop approach From Xfce Launcher: bash -c "cd $HOME/.wine/drive_c/lotus/approach; wine explorer /desktop=`date +%%H:%%M:%%S`_wine_virtual_desktop_1680x1050,1680x1050 approach.exe" If you open a database, then close it, the welcome screen does pop up. I will attach a video of it. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 11

[Bug 47251] New: add support for ConPTY API (pseudo console)
by wine-bugs＠winehq.org Nov. 14, 2025

Nov. 14, 2025

https://bugs.winehq.org/show_bug.cgi?id=47251 Bug ID: 47251 Summary: add support for ConPTY API (pseudo console) Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: enhancement Priority: P2 Component: cmd Assignee: wine-bugs(a)winehq.org Reporter: programmerjake(a)gmail.com Distribution: --- as in title. API reference: https://docs.microsoft.com/en-us/windows/console/creating-a-pseudoconsole-s… -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 52128] New: Hog4PC 3.17 installer VBScript custom action wants scrrun:filesys_MoveFolder implementation
by WineHQ Bugzilla Nov. 14, 2025

Nov. 14, 2025

https://bugs.winehq.org/show_bug.cgi?id=52128 Bug ID: 52128 Summary: Hog4PC 3.17 installer VBScript custom action wants scrrun:filesys_MoveFolder implementation Product: Wine Version: 6.22 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: scrrun Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, as it says. --- snip --- $ wine msiexec -i Hog_4_PC_3.17.0.3327.msi ... 0184:trace:scrrun:filesys_FolderExists 0362A084 L"C:\\users\\focht\\AppData\\Roaming" 02F0F970 ... 0184:fixme:scrrun:filesys_MoveFolder 0362A084 L"C:\\users\\focht\\AppData\\Roaming" L"C:\\users\\focht\\AppData\\Roaming" ... 0184:err:msi:MsiActiveScriptSite_OnScriptError script error: L"Object doesn't support this action" ... 0184:trace:msi:ScriptThread custom action (184) returned 1603 --- snip --- VBScript custom action scriptlet: --- snip --- Function renamePersistentDir() Dim appDataEnv appDataEnv = shell.expandEnvironmentStrings("%APPDATA%") Dim roamingDir roamingDir = appDataEnv + "\Flying Pig Systems" If ( fso.FolderExists(roamingDir) ) Then fso.MoveFolder roamingDir, appDataEnv + "\High End Systems" fso.MoveFolder appDataEnv + "\High End Systems\Hog 4PC", appDataEnv + "\High End Systems\Hog 4 PC" End If End Function --- snip --- Wine source: https://source.winehq.org/git/wine.git/blob/f03933fbb73152c7a54383fba411a61… --- snip --- 3616 static HRESULT WINAPI filesys_MoveFolder(IFileSystem3 *iface,BSTR Source, 3617 BSTR Destination) 3618 { 3619 FIXME("%p %s %s\n", iface, debugstr_w(Source), debugstr_w(Destination)); 3620 3621 return E_NOTIMPL; 3622 } --- snip --- Stable download link via Internet Archive: https://web.archive.org/web/20211128125004/https://cdn.etcconnect.com/Hog_4… $ sha1sum Hog_4_PC_3.17.0.3327.msi.zip f98421bbbb0590df0e65ac18903471dd5fb61b6a Hog_4_PC_3.17.0.3327.msi.zip $ du -sh Hog_4_PC_3.17.0.3327.msi.zip 361M Hog_4_PC_3.17.0.3327.msi.zip $ sha1sum Hog_4_PC_3.17.0.3327.msi 0d22bf13c5a9bb682820ee6f690a866c1b320d9b Hog_4_PC_3.17.0.3327.msi $ wine --version wine-6.22-204-gf03933fbb73 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 8

[Bug 57241] New: Managed COM components fail to load outside of application directory
by WineHQ Bugzilla Nov. 14, 2025

Nov. 14, 2025

https://bugs.winehq.org/show_bug.cgi?id=57241 Bug ID: 57241 Summary: Managed COM components fail to load outside of application directory Product: Wine Version: 9.0 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: mscoree Assignee: wine-bugs(a)winehq.org Reporter: bob(a)paradoxlost.com Distribution: --- Managed assemblies are not loaded outside of the "current" directory due to a failure to open the file using the CodeBase path. https://gitlab.winehq.org/wine/wine/-/blob/master/dlls/mscoree/corruntimeho… Here, the incorrect variable is passed to CreateFileW. It should be filename instead of path. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 6