February 2026 - Wine-Bugs - list.winehq.org

[Bug 46688] New: wmp/tests/media.c: Jump to the invalid address stated on the next line
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=46688 Bug ID: 46688 Summary: wmp/tests/media.c: Jump to the invalid address stated on the next line Product: Wine Version: 4.2 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: wmp&wmvcore Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: --- Not sure if this is libmpg123 or wine; but: ../../../tools/runtest -q -P wine -T ../../.. -M wmp.dll -p wmp_test.exe.so media && touch media.ok ==26940== Jump to the invalid address stated on the next line ==26940== at 0xA4EA930: ??? (in /usr/lib32/libmpg123.so.0.44.8) ==26940== by 0x42932FA: __run_exit_handlers (exit.c:108) ==26940== by 0x42933ED: exit (exit.c:139) ==26940== by 0x7BC61B47: NtTerminateProcess (process.c:91) ==26940== by 0x7BC51274: RtlExitUserProcess (loader.c:3031) ==26940== by 0x7B45C491: ??? (in /home/austin/wine-valgrind/dlls/kernel32/kernel32.dll.so) ==26940== Address 0xa4ea930 is on thread 1's stack -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 46348] New: rpcrt4/tests/ server.c shows uninitialized memory use in union_tests()
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=46348 Bug ID: 46348 Summary: rpcrt4/tests/server.c shows uninitialized memory use in union_tests() Product: Wine Version: 4.0-rc3 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: rpc Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: Gentoo ../../../tools/runtest -q -P wine -T ../../.. -M rpcrt4.dll -p rpcrt4_test.exe.so server && touch server.ok ==19697== Syscall param sendmsg(msg.msg_iov[0]) points to uninitialised byte(s) ==19697== at 0x425091F: sendmsg (sendmsg.c:30) ==19697== by 0x56081C4: WS2_send (socket.c:2628) ==19697== by 0x56084BB: WS2_sendto (socket.c:5606) ==19697== by 0x560EBC5: WS_send (socket.c:5521) ==19697== by 0x552C19C: rpcrt4_conn_tcp_write (rpc_transport.c:1424) ==19697== by 0x551F74C: rpcrt4_conn_write (rpc_binding.h:197) ==19697== by 0x5520FD0: RPCRT4_SendWithAuth (rpc_message.c:850) ==19697== by 0x5521CE2: RPCRT4_Send (rpc_message.c:1249) ==19697== by 0x5522C8E: I_RpcSend (rpc_message.c:1813) ==19697== by 0x5522F6E: I_RpcSendReceive (rpc_message.c:1926) ==19697== by 0x54FFBFF: NdrSendReceive (ndr_clientserver.c:215) ==19697== by 0x4A6B3E6: ip_test (server_c.c:5576) ==19697== by 0x4A59939: union_tests (server.c:1120) ==19697== by 0x4A5E4EB: run_tests (server.c:1613) ==19697== by 0x4A5E78F: client (server.c:1674) ==19697== by 0x4A60399: func_server (server.c:2229) ==19697== by 0x4A7AFD8: run_test (test.h:617) ==19697== by 0x4A7BA16: main (test.h:701) ==19697== Address 0x492d4c8 is 24 bytes inside a recently re-allocated block of size 100 alloc'd ==19697== at 0x7BC483AD: notify_alloc (heap.c:260) ==19697== by 0x7BC4B8D1: RtlAllocateHeap (heap.c:1726) ==19697== by 0x5521086: RPCRT4_SendWithAuth (rpc_message.c:809) ==19697== by 0x5521CE2: RPCRT4_Send (rpc_message.c:1249) ==19697== by 0x5522C8E: I_RpcSend (rpc_message.c:1813) ==19697== by 0x5522F6E: I_RpcSendReceive (rpc_message.c:1926) ==19697== by 0x54FFBFF: NdrSendReceive (ndr_clientserver.c:215) ==19697== by 0x4A6B3E6: ip_test (server_c.c:5576) ==19697== by 0x4A59939: union_tests (server.c:1120) ==19697== by 0x4A5E4EB: run_tests (server.c:1613) ==19697== by 0x4A5E78F: client (server.c:1674) ==19697== by 0x4A60399: func_server (server.c:2229) ==19697== by 0x4A7AFD8: run_test (test.h:617) ==19697== by 0x4A7BA16: main (test.h:701) ==19697== Uninitialised value was created by a stack allocation ==19697== at 0x4A595F7: union_tests (server.c:1069) ==19697== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36561] New: valgrind shows a definite leak in msrle/tests/msrle.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36561 Bug ID: 36561 Summary: valgrind shows a definite leak in msrle/tests/msrle.c Product: Wine Version: 1.7.19 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==29940== 256 bytes in 1 blocks are definitely lost in loss record 399 of 539 ==29940== at 0x7BC4C6DF: notify_alloc (heap.c:255) ==29940== by 0x7BC50F23: RtlAllocateHeap (heap.c:1716) ==29940== by 0x7B8457FF: HeapAlloc (heap.c:271) ==29940== by 0x7B845A26: GlobalAlloc (heap.c:364) ==29940== by 0x7B846E63: LocalAlloc (heap.c:967) ==29940== by 0x65FE88C: ??? ==29940== by 0x65FEB12: ??? ==29940== by 0x6600326: ??? ==29940== by 0x4E168F6: DRIVER_SendMessage (driver.c:136) ==29940== by 0x4E16A41: SendDriverMessage (driver.c:156) ==29940== by 0x4DEE914: MSVIDEO_SendMessage (msvideo_main.c:173) ==29940== by 0x4DF13FD: ICSendMessage (msvideo_main.c:1096) ==29940== by 0x4DF0492: ICCompress (msvideo_main.c:741) ==29940== by 0x4CA23BE: test_encode (msrle.c:92) ==29940== by 0x4CA24A6: func_msrle (msrle.c:104) ==29940== by 0x4CA3299: run_test (test.h:584) ==29940== by 0x4CA3687: main (test.h:654) ==29940== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36116] New: msi/action possible leak in test_create_remove_shortcut
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36116 Bug ID: 36116 Summary: msi/action possible leak in test_create_remove_shortcut Product: Wine Version: 1.7.17 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: minor Priority: P2 Component: msi Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==20424== 48 bytes in 1 blocks are possibly lost in loss record 485 of 1,049 ==20424== at 0x7BC4C735: notify_alloc (heap.c:255) ==20424== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==20424== by 0x5069418: msi_alloc (msipriv.h:1188) ==20424== by 0x506AE0C: get_table (table.c:601) ==20424== by 0x506F48C: TABLE_CreateView (table.c:2161) ==20424== by 0x5075B7D: WHERE_CreateView (where.c:1242) ==20424== by 0x50797E1: sql_parse (sql.y:494) ==20424== by 0x507A959: MSI_ParseSQL (sql.y:1002) ==20424== by 0x5044749: MSI_DatabaseOpenViewW (msiquery.c:132) ==20424== by 0x4FEC6FC: load_all_files (action.c:1300) ==20424== by 0x4FED0F6: ACTION_CostInitialize (action.c:1544) ==20424== by 0x4FFDEFD: ACTION_HandleStandardAction (action.c:7619) ==20424== by 0x4FFE0F1: ACTION_PerformAction (action.c:7648) ==20424== by 0x4FEA821: ITERATE_Actions (action.c:507) ==20424== by 0x50448B6: MSI_IterateRecords (msiquery.c:188) ==20424== by 0x4FEABBF: ACTION_ProcessExecSequence (action.c:590) ==20424== by 0x4FFE945: MSI_InstallPackage (action.c:7840) ==20424== by 0x50386E7: MsiInstallProductW (msi.c:251) ==20424== by 0x50385D8: MsiInstallProductA (msi.c:226) ==20424== by 0x4C3C622: test_create_remove_shortcut (action.c:5746) ==20424== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

3 8

[Bug 53965] New: Writing a new line after writing a full end element(WriteFullEndElement)
by WineHQ Bugzilla Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=53965 Bug ID: 53965 Summary: Writing a new line after writing a full end element(WriteFullEndElement) Product: Wine Version: 7.21 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: xmllite Assignee: wine-bugs(a)winehq.org Reporter: k.kahurani(a)gmail.com Distribution: --- Created attachment 73553 --> https://bugs.winehq.org/attachment.cgi?id=73553 Test case It doesn't look possible to write a whitespace character after writing a full end element with WriteFullEndElement. It looks to me like this should be possible just like it is possible with WriteEndElement. I have also noticed that native xmllite sometimes breaks(not sure whether this is a feature or a bug) but at times native xmllite doesn't write new lines after writing the elements. I'm not sure how exactly this happens but the possible work-around in this is to manually write new lines(with WriteWhitespace) which means this issue could easily break working code. I'm not sure how to fix this right away so I am submitting a bug. As can be seen in the attached diff, wine doesn't pass the test but native does. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 46395] New: valgrind shows an invalid free in ws2_32/tests/sock.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=46395 Bug ID: 46395 Summary: valgrind shows an invalid free in ws2_32/tests/sock.c Product: Wine Version: 4.0-rc4 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: winsock Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com Distribution: Gentoo ../../../tools/runtest -q -P wine -T ../../.. -M ws2_32.dll -p ws2_32_test.exe.so sock && touch sock.ok ==30640== Invalid free() / delete / delete[] / realloc() ==30640== at 0x7BC48471: notify_realloc (heap.c:276) ==30640== by 0x7BC4BD90: RtlReAllocateHeap (heap.c:1906) ==30640== by 0x4BDC310: WS_get_local_ips (socket.c:6309) ==30640== by 0x4BDFBA4: WS_gethostbyname (socket.c:6392) ==30640== by 0x4A95ADD: test_getsockname (sock.c:4621) ==30640== by 0x4AADC3A: func_sock (sock.c:11530) ==30640== by 0x4AAE05F: run_test (test.h:617) ==30640== by 0x4AAEA9D: main (test.h:701) ==30640== Address 0x4a2aac8 is 0 bytes after a recently re-allocated block of size 0 alloc'd ==30640== at 0x7BC48394: notify_alloc (heap.c:260) ==30640== by 0x7BC4B8B8: RtlAllocateHeap (heap.c:1726) ==30640== by 0x4BDC210: WS_get_local_ips (socket.c:6275) ==30640== by 0x4BDFBA4: WS_gethostbyname (socket.c:6392) ==30640== by 0x4A95ADD: test_getsockname (sock.c:4621) ==30640== by 0x4AADC3A: func_sock (sock.c:11530) ==30640== by 0x4AAE05F: run_test (test.h:617) ==30640== by 0x4AAEA9D: main (test.h:701) ==30640== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 36678] New: shell32/tests/shlexec.c: several tests fail under valgrind
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36678 Bug ID: 36678 Summary: shell32/tests/shlexec.c: several tests fail under valgrind Product: Wine Version: 1.7.19 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: shell32 Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com shlexec.c:139: Test failed: ShellExecute(verb="", file=""C:\users\austin\Temp\wtb94b.tmp\drawback_file.noassoc foo.shlexec"") WaitForSingleObject returned 258 shlexec.c:139: Test failed: ShellExecute(verb="", file="C:\users\austin\Temp\wtb94b.tmp\drawback_nonexist.noassoc foo.shlexec") WaitForSingleObject returned 258 shlexec.c:139: Test failed: ShellExecute(verb="", file="C:\users\austin\Temp\wtb94b.tmp\test file.shlexec") WaitForSingleObject returned 258 shlexec.c:139: Test failed: ShellExecute(file="C:\users\austin\Temp\wtb94b.tmp\test file.shlexec") WaitForSingleObject returned 258 shlexec.c:1565: Test failed: argvA3 expected 'Open', but key not found or empty shlexec.c:1573: Test failed: argvA4 expected 'C:\users\austin\Temp\wtb94b.tmp\test file.shlexec', but key not found or empty -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 2

[Bug 36674] New: mmdevapi/tests/capture.c fails under valgrind
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36674 Bug ID: 36674 Summary: mmdevapi/tests/capture.c fails under valgrind Product: Wine Version: 1.7.17 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: mmdevapi Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ../../../tools/runtest -q -P wine -T ../../.. -M mmdevapi.dll -p mmdevapi_test.exe.so capture && touch capture.ok preloader: Warning: failed to reserve range 00110000-68000000 preloader: Warning: failed to reserve range 7f000000-82000000 capture.c:141: Test failed: GetNextPacketSize 480 vs. GCP 728 capture.c:308: Test failed: GCP 968 vs. BufferSize 23941 capture.c:348: Test failed: Valid IAudioCaptureClient_GetBuffer returns 08890001 capture.c:355: Test failed: restarted GCP 8 capture.c:409: Test failed: Valid IAudioCaptureClient_GetBuffer returns 08890001 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 2

[Bug 36326] New: valgrind shows a leak in rpcrt4/tests/rpc_protoseq.c
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

https://bugs.winehq.org/show_bug.cgi?id=36326 Bug ID: 36326 Summary: valgrind shows a leak in rpcrt4/tests/rpc_protoseq.c Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: rpc Assignee: wine-bugs(a)winehq.org Reporter: austinenglish(a)gmail.com ==13435== 68 bytes in 1 blocks are possibly lost in loss record 143 of 282 ==13435== at 0x7BC50A9B: RtlAllocateHeap (heap.c:255) ==13435== by 0x5BB4B33: rpcrt4_protseq_sock_alloc (rpc_transport.c:1554) ==13435== by 0x5BAFAE5: RPCRT4_get_or_create_serverprotseq (rpc_server.c:927) ==13435== by 0x5BB1D62: RpcServerUseProtseqA (rpc_server.c:1041) ==13435== by 0x4D7A5B0: func_rpc_protseq (rpc_protseq.c:71) ==13435== by 0x4D9AC78: run_test (test.h:584) ==13435== by 0x4D9B067: main (test.h:654) ==13435== ==13580== 64 bytes in 1 blocks are possibly lost in loss record 140 of 282 ==13580== at 0x7BC50A9B: RtlAllocateHeap (heap.c:255) ==13580== by 0x5B94EC7: rpcrt4_protseq_np_alloc (rpc_transport.c:642) ==13580== by 0x5B8FAE5: RPCRT4_get_or_create_serverprotseq (rpc_server.c:927) ==13580== by 0x5B919A1: RpcServerUseProtseqEpExA (rpc_server.c:997) ==13580== by 0x5B91B08: RpcServerUseProtseqEpA (rpc_server.c:892) ==13580== by 0x4D5A4F6: func_rpc_protseq (rpc_protseq.c:58) ==13580== by 0x4D7AC78: run_test (test.h:584) ==13580== by 0x4D7B067: main (test.h:654) ==13580== -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

3 4

[Bug 32754] New: rFactor 2 dedicated server crash - Unhandled exception
by wine-bugs＠winehq.org Aug. 28, 2026

Aug. 28, 2026

http://bugs.winehq.org/show_bug.cgi?id=32754 Bug #: 32754 Summary: rFactor 2 dedicated server crash - Unhandled exception Product: Wine Version: 1.5.22 Platform: x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: marcus.blumhagen(a)web.de Classification: Unclassified Created attachment 43231 --> http://bugs.winehq.org/attachment.cgi?id=43231 console output, when not requesting crash details Overview "Core/rFactor2 Dedicated.exe", run from the root dirctory of the application, crashes. Steps to reproduce (There is no purchase required for running the dedicated server, so by following below steps anybody can try and reproduce the above behaviour.) 1. Download "rFactor2 full installer" (currently Build 134) from http://rfactor.net/web/rf2/rf2dl/. Also download at least one .rfmod file from the category "Content (cars, tracks, etc)". I´d recommend "2012 FIA Formula Two", since it has no updates yet, no dependencies on other content and is comparably small, thus making its installation the least troublesome. 2.a Install rFactor2, take a note of where you choose the "Data and Settings Destination Folder" to be, or make it the same as the "Core Destination Folder". 2.b Put your .rfmod file(s) into the "Packages" directory inside the "Data and Settings Destination Folder". 2.c Change directory to the "Core Destination Folder", run "Core/ModMgr.exe" and Install the Mod(s) 3. Still in the "Core Destination Folder", run "Core/rFactor2\ Dedicated.exe". Leave the default settings by clicking the bottom right button in the first 3 windows that appear. Then assign a "Race Name" (top left) on the last dialog (the one that has "Load Track" written on the bottom right button). Then click "Load Track"... Actual Result The server starts loading but crashes in the process after a short time and the following message is output on the terminal: "wine: Unhandled exception 0xc0000417 in thread 29 at address 0x5369bc (thread 0029), starting debugger..." Also, the crash window of wine titled "Program Error" comes up, but when I click "Show Details", the window of "rFactor2 Dedicated.exe" is closed immediately and the window "Program Error Details" pops up but won´t show any details, it stays at: "Loading detailed information, please wait..." Whereas, when after the crash I choose to close the "Program Error" window there is more information on the terminal, see the attachment. Expected Result A running rFactor 2 dedicated server. Build date & Platform Build date: 2013-01-19 gcc --version: gcc (Debian 4.7.2-5) 4.7.2 wine --version: wine-1.5.22 Build and run environment is a chroot containing Debian Sid i386, host is Debian 6.0.6 (Squeeze). Build dependencies were installed by "apt-get build-dep wine" Additional information The program was run semi-successfully already, but I cannot reproduce it anymore. But even then it crashed more than 75% of the time with the symptoms described above. When it successfully launched, the server sometimes could not connect to the matchmaker. Not knowing, which component ist at fault, I tried a run with WINEDEBUG=trace+all, but after half an hour and seeing the log grow to more than 2.2 GB, I gave up. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 14