May 2026 - Wine-Bugs - list.winehq.org

[Bug 14980] New: Powerpoint 2007 fails to start
by wine-bugs＠winehq.org July 18, 2026

July 18, 2026

http://bugs.winehq.org/show_bug.cgi?id=14980 Summary: Powerpoint 2007 fails to start Product: Wine Version: 1.1.3 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dimesio(a)earthlink.net Created an attachment (id=15589) --> (http://bugs.winehq.org/attachment.cgi?id=15589) Console from 1st attempt to run Powerpoint Powerpoint 2007 fails to start in 1.1.3 on openSUSE 10.3, installed to a clean wineprefix with no overrides. The first time trying to run Powerpoint, the splash screen appears briefly, then Powerpoint just shuts down. The second time, a dialog box appears with the message "PowerPoint failed to start correctly last time. Starting PowerPoint in safe mode will help you correct or isolate a startup problem in order to successfully start the program. Some functionality may be disabled in this mode. Do you want to start PowerPoint in safe mode?" If I click yes, the splash screen appears briefly, then Powerpoint shuts down. The third time, a dialog box appears with the message "PowerPoint failed to launch in safe mode. Do you want to start Detect and Repair?" If I click yes, it just shuts down. This cycle repeats for subsequent attempt to run the program. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

3 65

[Bug 58723] New: [Bisected] Windows Steam client in FreeBSD Wine fails to display a window.
by WineHQ Bugzilla July 17, 2026

July 17, 2026

http://bugs.winehq.org/show_bug.cgi?id=58723 Bug ID: 58723 Summary: [Bisected] Windows Steam client in FreeBSD Wine fails to display a window. Product: Wine Version: unspecified Hardware: x86-64 URL: https://github.com/XaeroVincent/wine-tkg/blob/main/emu lators/wine-tkg-devel/steam-reverts.txt OS: FreeBSD Status: UNCONFIRMED Severity: normal Priority: P2 Component: user32 Assignee: wine-bugs(a)winehq.org Reporter: darkvincentdude(a)yahoo.com Sometime during the Wine 10.x lifecycle, the Windows Steam client running in FreeBSD 14.3 Wine-Devel fails to create a window and function properly after two different commits. Each offending commit broke the steam client a separate time. These are the bisected commits: * Commit: 62b3eee965223a2de62daa87c4b81708cd62e6f3 - "user32: Add stub for SetProcessLaunchForegroundPolicy." - May 25th 2025 https://gitlab.winehq.org/wine/wine/-/commit/62b3eee965223a2de62daa87c4b817… * Commit: 9195d892ba24ca312588f2c338d33269b21bf0c8 - "configure: Build PEs with -ffp-exception-behavior=maytrap." - July 1st 2025 https://gitlab.winehq.org/wine/wine/-/commit/9195d892ba24ca312588f2c338d332… With these commits reverted, the Window Steam client functions correctly on Wine 10.15 and older versions. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 57263] New: Steam doesn't load since may update.
by WineHQ Bugzilla July 17, 2026

July 17, 2026

https://bugs.winehq.org/show_bug.cgi?id=57263 Bug ID: 57263 Summary: Steam doesn't load since may update. Product: Wine Version: unspecified Hardware: x86-64 OS: FreeBSD Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: Alexander88207(a)Protonmail.com Created attachment 77184 --> https://bugs.winehq.org/attachment.cgi?id=77184 Steam-WINED3D.log Hello, since the may update of Steam, Steam doesn't load anymore. The steamwebhelper seems trying to load but an window never gets created. Default debug logs have been attached, if there are specific debug channels of interest please tell me. The web fonts for using CEF browser and friends are installed. For comparison: The chromium build 129.0.6668.71 (1343869) • Wednesday, 25 Sep 2024 works without issues. Thank you in advance! FreeBSD 14.1 Wine 9.17 (Currently latest in ports at this time of writing) -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 52105] New: Handle to \Device\NamedPipe\ cannot be used as the RootDirectory for NtCreateNamedPipeFile
by WineHQ Bugzilla July 17, 2026

July 17, 2026

https://bugs.winehq.org/show_bug.cgi?id=52105 Bug ID: 52105 Summary: Handle to \Device\NamedPipe\ cannot be used as the RootDirectory for NtCreateNamedPipeFile Product: Wine Version: 6.22 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wineserver Assignee: wine-bugs(a)winehq.org Reporter: jinoh.kang.kr(a)gmail.com CC: jacek(a)codeweavers.com Regression SHA1: 2600ecd4edfdb71097105c74312f83845305a4f2 Distribution: --- Commit 2600ecd4edf (server: Use a separated object for each opened named pipe device file., 2018-10-29) split the role of the named pipe device and the named pipe file. However, in doing so, it changed the semantics of opening \Device\NamedPipe\. In particular, it is no longer possible to use a handle to \Device\NamedPipe\ as RootDirectory when creating a named pipe. This bug makes Cygwin's named pipe creation (https://github.com/cygwin/cygwin/blob/4f47e64b11ed8d47c62fa89e9b971f44b7e9a…) loop forever. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 22

[Bug 55242] New: iperf 2.0.8 will not quit with CTRL+C
by WineHQ Bugzilla July 17, 2026

July 17, 2026

https://bugs.winehq.org/show_bug.cgi?id=55242 Bug ID: 55242 Summary: iperf 2.0.8 will not quit with CTRL+C Product: Wine Version: 8.12 Hardware: x86-64 URL: https://web.archive.org/web/20190523161058/https://ipe rf.fr/download/windows/iperf-2.0.8-win32.zip OS: Linux Status: NEW Keywords: download, source Severity: minor Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: imwellcushtymelike(a)gmail.com Distribution: Ubuntu When iperf is run in dual mode it will not exit after hitting CTRL+C. $ wine iperf.exe -c 127.0.0.1 -d -t 1 -P 5 007c:fixme:hid:handle_IRP_MN_QUERY_ID Unhandled type 00000005 007c:fixme:hid:handle_IRP_MN_QUERY_ID Unhandled type 00000005 007c:fixme:hid:handle_IRP_MN_QUERY_ID Unhandled type 00000005 007c:fixme:hid:handle_IRP_MN_QUERY_ID Unhandled type 00000005 connect failed: Connection refused ------------------------------------------------------------ connect failed: Connection refused Server listening on TCP port 5001 TCP window size: 128 KByte (default) ------------------------------------------------------------ connect failed: Connection refused ------------------------------------------------------------ Client connecting to 127.0.0.1, TCP port 5001 connect failed: Connection refused TCP window size: 16.0 KByte (default) ------------------------------------------------------------ [264] local 127.0.0.1 port 5001 connected with 127.0.0.1 port 53058 ^CWaiting for server threads to complete. Interrupt again to force quit. Pressing CTRL+C has no effect and the app has to be SIGKILLed. $ sha1sum iperf-2.0.8-win32.zip f312bf6ab7de3b1921cae7f4953aed0ce6b17afa iperf-2.0.8-win32.zip iperf -s will exit with CTRL+C though. It also doesn't produce any "connection failed" messages. Source: https://iperf.fr/download/source/iperf-2.0.8-source.tar.gz -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 55769] New: Philips Hue Sync: Application crashes on launch
by WineHQ Bugzilla July 17, 2026

July 17, 2026

https://bugs.winehq.org/show_bug.cgi?id=55769 Bug ID: 55769 Summary: Philips Hue Sync: Application crashes on launch Product: Wine Version: 8.17 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: joni.hilger(a)yahoo.de Distribution: --- After installing the Hue Sync Desktop App it crashes immediately on launch. see error.log for my output. The window doesn't even open. The installer worked fine though. You can download it here for free: https://firmware.meethue.com/v1/download?deviceTypeId=HueSyncWin joni(a)linuxjoni03:~/Downloads> md5sum HueSyncInstaller_1.11.1.56.exe 220bea696b80d0157e9e56d49a9a4874 HueSyncInstaller_1.11.1.56.exe I started the App with the following command: ~> wine 'C:\Program Files\Hue Sync\HueSyncStarter.exe' > ~/Desktop/crash.log 2>&1 I'm using wine-8.17 (Staging) on OpenSUSE Tumbleweed 20231006 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 59617] New: wineboot times out and does not copy any system dll (all versions after 10.2, including)
by WineHQ Bugzilla July 16, 2026

July 16, 2026

http://bugs.winehq.org/show_bug.cgi?id=59617 Bug ID: 59617 Summary: wineboot times out and does not copy any system dll (all versions after 10.2, including) Product: Wine Version: 10.2 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown Assignee: wine-bugs(a)list.winehq.org Reporter: otigkd(a)gmail.com Distribution: --- Created attachment 80678 --> http://bugs.winehq.org/attachment.cgi?id=80678 output of winecfg/wineboot Noticed this last year on all my gentoo machines (the setup on all of them is almost identical: X + Xfce and NO wayland): On a fresh first run either wineboot or winecfg hangs for a rather long time, then fails with the status c0000135 (STATUS_DLL_NOT_FOUND) I have spent a lot of time last year, to find the source of the problem, at first i thought this was a gentoo issue: wine stopped working, when the gentoo ebuilds first got the "X" and "wayland" use flags. An old 10.0 installation still works on my machine, but i would like to update to newer versions, so i decided to find at least the version, that broke it on my machine. After checking out wine (vanilla, NOT staging), and building it and trying to run notepad, I have narrowed it down to the 10.2 release: - wine-10.0: works - wine-10.1: works - wine-10.2: does NOT work - wine-10.3: does NOT work - wine-10.6: does NOT work - wine-10.10: does NOT work I also tried to do a diff between the 2 tags, but there a hundreds of commits to try to rebuild and test them individually. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 61

[Bug 52959] New: Some games are rendered in square instead fullscreen
by WineHQ Bugzilla July 16, 2026

July 16, 2026

https://bugs.winehq.org/show_bug.cgi?id=52959 Bug ID: 52959 Summary: Some games are rendered in square instead fullscreen Product: Wine Version: 7.7 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: d2d Assignee: wine-bugs(a)winehq.org Reporter: slawek(a)lach.art.pl Distribution: --- Some games (like Empire Earth: Gold, Commandos: Behind Enemy Lines) do not render property. It renders only in top-left square (full game frame). Rest of screen is black. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 25

[Bug 52976] New: Daagon Map Maker on itch.io crash
by WineHQ Bugzilla July 15, 2026

July 15, 2026

https://bugs.winehq.org/show_bug.cgi?id=52976 Bug ID: 52976 Summary: Daagon Map Maker on itch.io crash Product: Wine Version: 7.0 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: registry Assignee: wine-bugs(a)winehq.org Reporter: ildaniel999(a)hotmail.com Distribution: --- Created attachment 72346 --> https://bugs.winehq.org/attachment.cgi?id=72346 wine file loads up to 100%, changes screen settings, but then crashes -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 37125] New: PVS-Studio Error: First the execution, then the trial
by wine-bugs＠winehq.org July 15, 2026

July 15, 2026

https://bugs.winehq.org/show_bug.cgi?id=37125 Bug ID: 37125 Summary: PVS-Studio Error: First the execution, then the trial Product: Wine Version: 1.7.22 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: lukebenes(a)hotmail.com PVS-Studio identifies a First the execution, then the trial Error,V595. The 'decl' pointer was utilized before it was verified against nullptr. Check lines: 1411, 1417. parser.y 1411 ... var_t *v = decl->var; //<== expr_list_t *sizes = get_attrp(attrs, ATTR_SIZEIS); expr_list_t *lengs = get_attrp(attrs, ATTR_LENGTHIS); int sizeless; expr_t *dim; type_t **ptype; array_dims_t *arr = decl ? decl->array : NULL; //<== type_t *func_type = decl ? decl->func_type : NULL; //<== ... First the value by pointer is taken, then it is checked. Other similar fragments: V595 The 'pcbData' pointer was utilized before it was verified against nullptr. Check lines: 1859, 1862. registry.c 1859 V595 The 'token_user' pointer was utilized before it was verified against nullptr. Check lines: 206, 213. lsa.c 206 V595 The 'psp' pointer was utilized before it was verified against nullptr. Check lines: 2680, 2689. propsheet.c 2680 V595 The 'lpFindInfo' pointer was utilized before it was verified against nullptr. Check lines: 6285, 6289. listview.c 6285 V595 The 'compiland' pointer was utilized before it was verified against nullptr. Check lines: 287, 294. symbol.c 287 V595 The 'graphics' pointer was utilized before it was verified against nullptr. Check lines: 2096, 2112. graphics.c 2096 V595 The 'current' pointer was utilized before it was verified against nullptr. Check lines: 240, 251. request.c 240 details on the V595 error here: http://www.viva64.com/en/d/0205/ -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 3

[Bug 58440] New: Dance eJay 6 and dance eJay 7 crash with advapi32 error
by WineHQ Bugzilla July 15, 2026

July 15, 2026

http://bugs.winehq.org/show_bug.cgi?id=58440 Bug ID: 58440 Summary: Dance eJay 6 and dance eJay 7 crash with advapi32 error Product: Wine Version: 10.10 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: advapi32 Assignee: wine-bugs(a)winehq.org Reporter: rave002(a)o2.pl Distribution: --- Created attachment 78891 --> http://bugs.winehq.org/attachment.cgi?id=78891 Dance ejay 6 Reloaded crash log Both applications used to run fine on the older versions of wine. I'm attaching the logs for Dance eJay 6.0, but the one for Dance 7 is pretty much the same. Tried winetricks to maybe install a "proper" version of advapi32, however winetricks doesn't provide it. I will try to add Dance eJay 7.0 crash log in a following comment if I'm able to. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 37117] New: PVS-Studio Error: Shifting a negative number
by wine-bugs＠winehq.org July 15, 2026

July 15, 2026

https://bugs.winehq.org/show_bug.cgi?id=37117 Bug ID: 37117 Summary: PVS-Studio Error: Shifting a negative number Product: Wine Version: 1.7.22 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: lukebenes(a)hotmail.com PVS-Studio Error: V610 Undefined behavior. Check the shift operator '<<. The left operand '(LONGLONG) - 1' is negative. propvar.c 127 ... if (*res >= ((LONGLONG)1 << (dest_bits-1)) || *res < ((LONGLONG)-1 << (dest_bits-1))) return HRESULT_FROM_WIN32(ERROR_ARITHMETIC_OVERFLOW); ... The LONGLONG type is declared as 'typedef signed __int64 LONGLONG;', i.e. it is a signed type. According to the new standard, shifting negative numbers leads to undefined or unspecified behavior. To find out why such code still may work and how to fix it best, see the article Wade not in unknown waters - part three. details on the V610 error here: http://www.viva64.com/en/d/0225/ -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 52092] New: game pass
by WineHQ Bugzilla July 14, 2026

July 14, 2026

https://bugs.winehq.org/show_bug.cgi?id=52092 Bug ID: 52092 Summary: game pass Product: Wine Version: 6.21 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: master.zion(a)gmail.com Distribution: --- Hi everyone... it seems it is not possible to install the xbox application for PC using wine. It would be useful to play Windows games from xbox game pass, and it will be very useful on Steam deck. it fails during the installation startup. ------ Unhandled Exception: 0024:fixme:ntdll:EtwEventRegister ({8e9f5090-2d75-4d03-8a81-e5afbf85daf1}, 05E202EE, 00000000, 01EA96F4) stub. Unhandled Exception: System.IO.FileNotFoundException: Could not load file or assembly 'Windows.Foundation.UniversalApiContract, Version=7.0.0.0, Culture=neutral, PublicKeyToken=null, ContentType=WindowsRunt ime' or one of its dependencies. Module not found. at XboxInstaller.App..ctor() at XboxInstaller.App.Main() ------ https://www.xbox.com/en-IN/apps/xbox-app-for-pc -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 26

[Bug 57646] New: Scrapland Remastered - Videos are not played
by WineHQ Bugzilla July 14, 2026

July 14, 2026

https://bugs.winehq.org/show_bug.cgi?id=57646 Bug ID: 57646 Summary: Scrapland Remastered - Videos are not played Product: Wine Version: 10.0-rc4 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: quartz Assignee: wine-bugs(a)winehq.org Reporter: accounts.winehq.org(a)vv221.fr Distribution: --- With WINE 10.0-rc2 and 10.0-rc4, videos in Scrapland Remastered are not played: no logo video when starting the game, no introduction video when beginning a new game, we are instead directly starting right after this video should end. With WINE 9.0, the same videos are played correctly. An extra symptom is that with WINE 10.0-rc2 and 10.0-rc4 the game tends to freeze when trying to quit it, so its process needs to be killed. That is something I have often seen with games that have videos that could not be played, but usually this is related to missing GStreamer plugins. Here GStreamer plugins are out of the equation as the tests with WINE 10.0 and 9.0 are done on the exact same system, with nothing modified but the used WINE build. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 9

[Bug 57022] New: Graphical and color distortions in The Witcher [d3dx9_35.dll]
by WineHQ Bugzilla July 14, 2026

July 14, 2026

https://bugs.winehq.org/show_bug.cgi?id=57022 Bug ID: 57022 Summary: Graphical and color distortions in The Witcher [d3dx9_35.dll] Product: Wine Version: 9.14 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: d3d Assignee: wine-bugs(a)winehq.org Reporter: shtetldik(a)gmail.com Distribution: --- In some scenes in the Witcher there are glitches when using Wine + dxvk. See a small video example in the linked dxvk issue (see Shani's hair and some general flickering and light anomalies especially around that candle on the table): https://github.com/doitsujin/dxvk/issues/4178 Set up: * Game: The Witcher Enhanced Edition, latest GOG release. * Wine: 9.14 + esync * dxvk: git 1077d6a * GPU: AMD Sapphire Nitro+ RX 7900 XTX * Kernel/amdgpu: 6.10.2 * Mesa/radv: git deb1d1f9c3 dxvk developers helped narrowing it down to Wine's side, since installing native d3dx9_35.dll works around it so it must be some issue with built-in d3dx9_35 implementation. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 17

[Bug 18288] New: Quicktime 3 creates unusual menus / string value error
by wine-bugs＠winehq.org July 13, 2026

July 13, 2026

http://bugs.winehq.org/show_bug.cgi?id=18288 Summary: Quicktime 3 creates unusual menus / string value error Product: Wine Version: 1.1.20 Platform: PC URL: http://www.oldversion.com/download/quicktime302.exe OS/Version: Linux Status: UNCONFIRMED Severity: trivial Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: kennybobs(a)o2.co.uk Created an attachment (id=20819) --> (http://bugs.winehq.org/attachment.cgi?id=20819) Wine 1.1.20 +menubuilder The Quicktime 3.0.2 installer reports an error when attempting to create program groups and icons: "String variable is not large enough for string. Check the string declarations. Error 401." The installer then creates an unusual directory structure: ls -aR /home/test/.local/share/applications/wine/Programs /home/test/.local/share/applications/wine/Programs: . .. QuickTime QuickTime 3.0 /home/test/.local/share/applications/wine/Programs/QuickTime: . .. MoviePlayer.desktop PictureViewer.desktop ReadMe.desktop UnInstall QuickTime 3.0.desktop /home/test/.local/share/applications/wine/Programs/QuickTime 3.0: . .. .desktop Setup completes successfully. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

3 20

[Bug 39068] New: Santander bank security module crashes during core module installation
by wine-bugs＠winehq.org July 13, 2026

July 13, 2026

https://bugs.winehq.org/show_bug.cgi?id=39068 Bug ID: 39068 Summary: Santander bank security module crashes during core module installation Product: Wine Version: 1.7.49 Hardware: x86 URL: https://wwws.santandernet.com.br/mps/bin/gbpluginabnse tup.exe OS: Linux Status: NEW Keywords: download, Installer Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: 00cpxxx(a)gmail.com Distribution: Debian Created attachment 52045 --> https://bugs.winehq.org/attachment.cgi?id=52045 log+crash Follow up from bug 33430. After applying the patch from https://bugs.winehq.org/attachment.cgi?id=52041 the app installer still crashes, the last line from the log is: 0009:fixme:urlmon:SecManagerImpl_GetZoneMappings Default action is not implemented wine: Unhandled page fault on read access to 0x00000000 at address 0x433660 (thread 0009), starting debugger... It could suggest that the application does not like the stub return from GetZoneMappings. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 14

[Bug 59646] New: Virtual Desktop Streamer: Assertion at Mono's prepare_run_main
by WineHQ Bugzilla July 13, 2026

July 13, 2026

http://bugs.winehq.org/show_bug.cgi?id=59646 Bug ID: 59646 Summary: Virtual Desktop Streamer: Assertion at Mono's prepare_run_main Product: Wine Version: 11.5 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)list.winehq.org Reporter: kyle.kcsoftwares(a)gmail.com Distribution: --- From Bug54681 https://download.vrdesktop.net/files/VirtualDesktop.Streamer.Setup.exe SHA1 (March 13, 2023): 9bcfa9922a4aafd98a5f6c77b54e8e5b0b316b73 * Assertion at /builds/mono/wine-mono/wine-mono-11.0.0/mono/mono/metadata/object.c:4679, condition `is_ok (error)' not met, function:prepare_run_main, (null) assembly:C:\windows\mono\mono-2.0\lib\mono\4.5\mscorlib.dll type:TypeInitializationException member:(null) -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 4

[Bug 59626] New: Stratego (1997) doesn't play videos
by WineHQ Bugzilla July 13, 2026

July 13, 2026

http://bugs.winehq.org/show_bug.cgi?id=59626 Bug ID: 59626 Summary: Stratego (1997) doesn't play videos Product: Wine Version: 11.6 Hardware: x86-64 URL: https://archive.org/details/STRATEGO OS: MacOS Status: UNCONFIRMED Severity: minor Priority: P2 Component: -unknown Assignee: wine-bugs(a)list.winehq.org Reporter: tobbi.bugs(a)googlemail.com CC: jeremielapuree(a)yahoo.fr, z.figura12(a)gmail.com Created attachment 80694 --> http://bugs.winehq.org/attachment.cgi?id=80694 normal log +++ This bug was initially created as a clone of Bug #59572 +++ Stratego now works almost fine on my setup. Unfortunately, the videos that are set to play at the beginning of the game and during a win / lose condition don't play. % ./wine --version wine-11.6 % openssl sha256 STRATEGO.iso SHA2-256(STRATEGO.iso)= e82340b5e23554618dfe406c102ca2a793b34e49723e921e5cc6a5911a9867e1 I'm trying to install Stratego from here: https://archive.org/details/STRATEGO Steps to reproduce: 1. Download the ISO and mount it on your system. 2. Change the configuration options of Wine to map E: to the path where the ISO image was mounted, as well as the Operating System to Windows XP (or Windows 98 - shouldn't matter) 3. Install Stratego by running the SETUP.EXE file with wine. 4. Start Stratego by running the Stratego.exe in C:/Program Files (x86)/Hasbro Interactive/Stratego/Stratego.exe Expected Result: Stratego videos play Actual result: Stratego videos get skipped silently. I can see this in the normal log, not sure if it's related: ``` 0154:err:quartz:autoplug Failed to create filter for L"MPEG-I Stream Splitter", hr 0x80040154. 0168:err:ole:com_get_class_object class {272bfbfb-50d0-4078-b600-1e959c301337} not registered 0168:err:ole:com_get_class_object no class object {272bfbfb-50d0-4078-b600-1e959c301337} could be created for context 0x1 0168:fixme:ole:CoCreateInstanceEx no instance created for interface {00000000-0000-0000-c000-000000000046} of class {1b544c20-fd0b-11ce-8c63-00aa0044b51e}, hr 0x80040154. 0154:err:quartz:autoplug Failed to create filter for L"AVI Splitter", hr 0x80040154. ``` -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 2

[Bug 49601] New: Execution failure for Acrobat Reader download manager
by WineHQ Bugzilla July 13, 2026

July 13, 2026

https://bugs.winehq.org/show_bug.cgi?id=49601 Bug ID: 49601 Summary: Execution failure for Acrobat Reader download manager Product: Wine Version: 5.13 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: mshtml Assignee: wine-bugs(a)winehq.org Reporter: Markus.Elfring(a)web.de Distribution: --- I have tried the software “Wine 5.13-1186.1” out again because I would like to check the collaboration of another well-known PDF tool here. Thus I chose to store the software “Adobe Acrobat Reader DC 2020.009.20063 German for Windows” in a local directory. I got the following log during my test attempt. elfring(a)Sonne:~> wine /home/elfring/geladen/readerdc_de_a_install.exe 019c:fixme:nls:RtlGetThreadPreferredUILanguages 00000038, 0031F7D0, 0031F7E0 0031F7D4 019c:fixme:nls:get_dummy_preferred_ui_language (0x38 0031F7D0 0031F7E0 0031F7D4) returning a dummy value (current locale) 019c:fixme:process:RegisterApplicationRestart (L" /RestartByRestartManager:D0F8BCD2-B415-4fec-832F-9D832D0E7581",0) 019c:fixme:ver:GetCurrentPackageId (0031F670 00000000): stub 019c:fixme:shell:InitNetworkAddressControl stub 019c:fixme:ieframe:PersistStreamInit_InitNew (00E2DE98) 019c:fixme:ieframe:navigate_url Unsupported args (Flags 0031F078 {VT_I4: 0}; TargetFrameName 0031F068 {VT_BSTR: (null)}) 019c:fixme:dwmapi:DwmIsCompositionEnabled 06BBDD14 01ac:fixme:iphlpapi:NotifyIpInterfaceChange (family 0, callback 0x333f537, context 0x7068d78, init_notify 0, handle 0x78afcd8): stub 019c:fixme:ntdll:NtQuerySystemInformation info_class SYSTEM_PERFORMANCE_INFORMATION 019c:fixme:imm:ImmGetDescriptionW (04070407, 00000000, 0): semi stub 019c:fixme:imm:ImmGetDescriptionW (04070407, 09E455B0, 9): semi stub 019c:fixme:msctf:InputProcessorProfileMgr_GetActiveProfile (02DA21D8)->({34745c63-b2f0-4784-8b67-5e12c8701a31} 0031C420) … 412[7011988]: TSF: 0x9e45528 TSFStaticSink::EnsureInitActiveLanguageProfile(), FAILED to get active TIP keyboard, hr=0x80004001 019c:fixme:mshtml:ScriptBSC_stop_binding binding failed 80070057 019c:fixme:mshtml:ActiveScriptSite_OnScriptError (00E40AB8)->(02ED3338) … How are the chances to get the application “Adobe Download Manager” working for the desired software installation? -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 2

[Bug 52550] New: JumpStart 1st grade won't start
by WineHQ Bugzilla July 12, 2026

July 12, 2026

https://bugs.winehq.org/show_bug.cgi?id=52550 Bug ID: 52550 Summary: JumpStart 1st grade won't start Product: Wine Version: 7.1 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: odecif(a)gmail.com Distribution: --- Created attachment 71863 --> https://bugs.winehq.org/attachment.cgi?id=71863 warn+all log After installing the game (Swedish version in my case called "Första klass") and you execute the FG.exe-file, the screen turns black (expected) and a popup shows stating that the software works best in 256 colors. After clicking OK in the popup the mouse cursor turns into the in-game hour glass and stays that way until you close the program. I found the english version of the game on an abandonware-site which might produce the same error (haven't tried). The CD is an original copy and it confirmed working in a Windows XP Pro virtualbox. Attached is a debug log with warn+all from execution until forced stop. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 43590] New: Rise of Nations Thrones & Patriots weird graphics
by wine-bugs＠winehq.org July 12, 2026

July 12, 2026

https://bugs.winehq.org/show_bug.cgi?id=43590 Bug ID: 43590 Summary: Rise of Nations Thrones & Patriots weird graphics Product: WineHQ Apps Database Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: appdb-unknown Assignee: wine-bugs(a)winehq.org Reporter: brabec.tomislav(a)gmail.com Distribution: --- Created attachment 59003 --> https://bugs.winehq.org/attachment.cgi?id=59003 Weird map rendering I have a problem with Rise of Nations: Thrones & Patriots graphics. While the basic version of game works fine, the expansion has weird rendering while playing (image). -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

3 40

[Bug 23345] New: Adobe Reader freezes when trying to open embedded multimedia
by wine-bugs＠winehq.org July 12, 2026

July 12, 2026

http://bugs.winehq.org/show_bug.cgi?id=23345 Summary: Adobe Reader freezes when trying to open embedded multimedia Product: Wine Version: 1.2-rc4 Platform: x86-64 URL: http://www.adobe.com/ OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: septim.dt(a)gmail.com Created an attachment (id=29085) --> (http://bugs.winehq.org/attachment.cgi?id=29085) Terminal output with backtrace on wine-1.2-rc4-119-g410f8e9 When I try to play an avi video embedded in a PDF file (made with the LaTeX multimedia package) Adobe Reader freezes. I also found this problem reported on the AppDB page, but I couldn't find a bug report. Terminal output with backtrace attached (using wine wine-1.2-rc4-119-g410f8e9). -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

3 18

[Bug 13664] New: dogfood: Disabled Buttons are complete gray in Adobe Reader 3.x (16-Bit)
by wine-bugs＠winehq.org July 12, 2026

July 12, 2026

http://bugs.winehq.org/show_bug.cgi?id=13664 Summary: dogfood: Disabled Buttons are complete gray in Adobe Reader 3.x (16-Bit) Product: Wine Version: 1.0-rc3 Platform: PC URL: http://appdb.winehq.org/objectManager.php?sClass=version &iId=12388 OS/Version: Linux Status: NEW Keywords: download, win16 Severity: enhancement Priority: P5 Component: user32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: wine.dev(a)web.de Disabled Buttons in the toolbar should be shaded, but they are gray -- By by ... Detlef -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

3 34

[Bug 50108] New: Multiple applications using native API sandboxing / virtualization crash when being relay traced (Adobe Reader 11)
by WineHQ Bugzilla July 11, 2026

July 11, 2026

https://bugs.winehq.org/show_bug.cgi?id=50108 Bug ID: 50108 Summary: Multiple applications using native API sandboxing / virtualization crash when being relay traced (Adobe Reader 11) Product: Wine Version: 5.21 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: tools Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, encountered while revisiting some Adobe bugs with native API sandboxing enabled (default). Native API sandboxing works as designed under normal conditions, see my no-relay references later. Relay debugging is a developer / triager use-case. Stable download link via Internet Archive: https://web.archive.org/web/20200522053748/http://ardownload.adobe.com/pub/… Acrobat Reader creates a sandboxed process (initially suspended) which crashes in entry point when being relay traced. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files (x86)/Adobe/Reader 11.0/Reader $ WINEDEBUG=+seh,+relay,+server,+ntdll wine ./AcroRd32.exe >>log.txt 2>&1 ... 0024:Call KERNEL32.CreateProcessAsUserW(00000100,0198e508 L"C:\\Program Files (x86)\\Adobe\\Reader 11.0\\Reader\\AcroRd32.exe",0198e618 L"\"C:\\Program Files (x86)\\Adobe\\Reader 11.0\\Reader\\AcroRd32.exe\" --channel=32.1.1899522388 --type=renderer",00000000,00000000,00000000,0100040c,00df6f68,00000000,0031f644,0031f694) ret=0042b162 ... 0130: init_process_done( gui=1, module=00400000, ldt_copy=f7d5d9c0, entry=00401039 ) 0024: *wakeup* signaled=0 0130: init_process_done() = 0 { suspend=1 } ... 0024:Ret KERNEL32.CreateProcessAsUserW() retval=00000001 ret=0042b162 ... 0130:Call ntdll.RtlInitNlsTables(011d0000,011f0000,00fed810,7b081484) ret=7b01d500 0130:Ret ntdll.RtlInitNlsTables() retval=7b081484 ret=7b01d500 0130:Call ntdll.RtlResetRtlTranslations(7b081484) ret=7b01d50b 0130:Ret ntdll.RtlResetRtlTranslations() retval=00000400 ret=7b01d50b 0130:Call ntdll.RtlInitUnicodeString(0031eb78,7b069b30 L"\\Registry\\Machine") ret=7b0387b3 0130:Ret ntdll.RtlInitUnicodeString() retval=00000024 ret=7b0387b3 0130:trace:seh:dispatch_exception code=c0000096 flags=0 addr=00A8C960 ip=00a8c960 tid=0130 0130:trace:seh:dispatch_exception eax=7bc6c000 ebx=0031eb80 ecx=0031eb50 edx=02000000 esi=00000000 edi=00000000 0130:trace:seh:dispatch_exception ebp=0031eb04 esp=0031ea64 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010202 0130:trace:seh:call_stack_handlers calling handler at 0040C7F0 code=c0000096 flags=0 0130:trace:seh:call_stack_handlers handler at 0040C7F0 returned 1 0130:trace:seh:call_stack_handlers calling handler at 7BC513A0 code=c0000096 flags=0 0130:trace:seh:__regs_RtlUnwind code=c0000096 flags=2 0130:trace:seh:__regs_RtlUnwind eax=00000000 ebx=0031eed8 ecx=0031e8a8 edx=0031eed8 esi=00000001 edi=00000000 0130:trace:seh:__regs_RtlUnwind ebp=0031e508 esp=0031e500 eip=7bc512a6 cs=0023 ds=002b fs=0063 gs=006b flags=00000206 0130:trace:seh:__regs_RtlUnwind calling handler at 7BC460F0 code=c0000096 flags=2 0130:trace:seh:__regs_RtlUnwind handler at 7BC460F0 returned 1 0130:trace:seh:__regs_RtlUnwind calling handler at 0040C7F0 code=c0000096 flags=2 0130:trace:seh:__regs_RtlUnwind handler at 0040C7F0 returned 1 0130: select( flags=3, cookie=0031d88c, timeout=0, size=0, prev_apc=0000, result={}, data={}, context={} ) 0130: select() = TIMEOUT { call={APC_NONE}, apc_handle=0000, context={} } 0130:exception c0000096 in PE entry point (proc=7B0272D0,module=7B000000,reason=PROCESS_ATTACH,res=0031FD24) 0130:Ret PE DLL (proc=7B0272D0,module=7B000000 L"kernelbase.dll",reason=PROCESS_ATTACH,res=0031FD24) retval=0 0130:Call PE DLL (proc=7B0272D0,module=7B000000 L"kernelbase.dll",reason=PROCESS_DETACH,res=0031FD24) 0130:Ret PE DLL (proc=7B0272D0,module=7B000000 L"kernelbase.dll",reason=PROCESS_DETACH,res=0031FD24) retval=1 0130:err:module:LdrInitializeThunk "kernelbase.dll" failed to initialize, aborting 0130:err:module:LdrInitializeThunk Initializing dlls for L"C:\\Program Files (x86)\\Adobe\\Reader 11.0\\Reader\\AcroRd32.exe" failed, status c0000096 0130: terminate_process( handle=ffffffff, exit_code=-1073741674 ) 0130: terminate_process() = 0 { self=1 } 0130: *killed* exit_code=-1073741674 --- snip --- The crash is in kernelbase:init_locale() which calls RegCreateKeyExW -> NtCreateKey() NtCreateKey() happens to be the first of the hooked native API functions being called. Wine source: https://source.winehq.org/git/wine.git/blob/70d77a439ab58dcf56664d1545aa0c4… --- snip --- 699 /*********************************************************************** 700 * init_locale 701 */ 702 void init_locale(void) 703 { 704 UINT ansi_cp = 0, oem_cp = 0; 705 USHORT *ansi_ptr, *oem_ptr; 706 void *sort_ptr; 707 LCID lcid = GetUserDefaultLCID(); 708 WCHAR bufferW[80]; 709 DYNAMIC_TIME_ZONE_INFORMATION timezone; 710 GEOID geoid = GEOID_NOT_AVAILABLE; 711 DWORD count, dispos, i; 712 SIZE_T size; 713 HKEY hkey; 714 715 kernel32_handle = GetModuleHandleW( L"kernel32.dll" ); 716 717 GetLocaleInfoW( LOCALE_SYSTEM_DEFAULT, LOCALE_IDEFAULTANSICODEPAGE | LOCALE_RETURN_NUMBER, 718 (WCHAR *)&ansi_cp, sizeof(ansi_cp)/sizeof(WCHAR) ); 719 GetLocaleInfoW( LOCALE_SYSTEM_DEFAULT, LOCALE_IDEFAULTMACCODEPAGE | LOCALE_RETURN_NUMBER, 720 (WCHAR *)&mac_cp, sizeof(mac_cp)/sizeof(WCHAR) ); 721 GetLocaleInfoW( LOCALE_SYSTEM_DEFAULT, LOCALE_IDEFAULTCODEPAGE | LOCALE_RETURN_NUMBER, 722 (WCHAR *)&oem_cp, sizeof(oem_cp)/sizeof(WCHAR) ); 723 724 NtGetNlsSectionPtr( 9, 0, NULL, &sort_ptr, &size ); 725 NtGetNlsSectionPtr( 12, NormalizationC, NULL, (void **)&norm_info, &size ); 726 init_sortkeys( sort_ptr ); 727 728 if (!ansi_cp || NtGetNlsSectionPtr( 11, ansi_cp, NULL, (void **)&ansi_ptr, &size )) 729 NtGetNlsSectionPtr( 11, 1252, NULL, (void **)&ansi_ptr, &size ); 730 if (!oem_cp || NtGetNlsSectionPtr( 11, oem_cp, 0, (void **)&oem_ptr, &size )) 731 NtGetNlsSectionPtr( 11, 437, NULL, (void **)&oem_ptr, &size ); 732 NtCurrentTeb()->Peb->AnsiCodePageData = ansi_ptr; 733 NtCurrentTeb()->Peb->OemCodePageData = oem_ptr; 734 NtCurrentTeb()->Peb->UnicodeCaseTableData = sort.casemap; 735 RtlInitNlsTables( ansi_ptr, oem_ptr, sort.casemap, &nls_info ); 736 RtlResetRtlTranslations( &nls_info ); 737 738 RegCreateKeyExW( HKEY_LOCAL_MACHINE, L"System\\CurrentControlSet\\Control\\Nls", 739 0, NULL, REG_OPTION_NON_VOLATILE, KEY_ALL_ACCESS, NULL, &nls_key, NULL ); ... --- snip --- Entry point code of <ntdll.NtCreateKey> is read two times: --- snip --- 0024:Call KERNEL32.ReadProcessMemory(0000010c,7bc036ac,0031f7d0,00000018,0031f7cc) ret=004614db ... 0024: read_process_memory( handle=010c, addr=7bc036ac ) 0130: *signal* signal=19 0024: read_process_memory() = 0 { data={8b,ff,55,8b,ec,5d,68,83,00,07,00,b8,00,c0,c6,7b,50,ff,50,04,c2,1c,00,90} } ... 0024:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=004614db 0024:Call KERNEL32.ReadProcessMemory(0000010c,7bc036ac,0031f7d4,00000010,0031f7d0) ret=004617e7 0024: read_process_memory( handle=010c, addr=7bc036ac ) 0130: *signal* signal=19 0024: read_process_memory() = 0 { data={8b,ff,55,8b,ec,5d,68,83,00,07,00,b8,00,c0,c6,7b} } ... 0024:Ret KERNEL32.ReadProcessMemory() retval=00000001 ret=004617e7 --- snip --- * 0x18 bytes = pre-analysis * 0x10 bytes = unknown native API entry signature -> defaults to syscall style The <ntdll.NtCreateKey> relay entry disassembly: --- snip --- 7BC036AC | 8BFF | mov edi,edi | hotpatch prolog start 7BC036AE | 55 | push ebp | 7BC036AF | 8BEC | mov ebp,esp | 7BC036B1 | 5D | pop ebp | hotpatch prolog end 7BC036B2 | 68 83000700 | push 70083 | 7BC036B7 | B8 00C0C67B | mov eax,ntdll.7BC6C000 | 7BC036BC | 50 | push eax | not copied 7BC036BD | FF50 04 | call dword ptr ds:[eax+4] | not copied 7BC036C0 | C2 1C00 | ret 1C | not copied 7BC036C3 | 90 | nop | --- snip --- Wine source, emitting relay entry: https://source.winehq.org/git/wine.git/blob/70d77a439ab58dcf56664d1545aa0c4… --- snip --- 212 /******************************************************************* 213 * output_relay_debug 214 * 215 * Output entry points for relay debugging 216 */ 217 static void output_relay_debug( DLLSPEC *spec ) 218 { ... 244 output( "\t.text\n" ); 245 output( "__wine_spec_relay_entry_points:\n" ); 246 output( "\tnop\n" ); /* to avoid 0 offset */ 247 248 for (i = spec->base; i <= spec->limit; i++) 249 { 250 ORDDEF *odp = spec->ordinals[i]; 251 252 if (!needs_relay( odp )) continue; 253 254 switch (target_cpu) 255 { 256 case CPU_x86: 257 output( "\t.align %d\n", get_alignment(4) ); 258 output( "\t.long 0x90909090,0x90909090\n" ); 259 output( ".L__wine_spec_relay_entry_point_%d:\n", i ); 260 output_cfi( ".cfi_startproc" ); 261 output( "\t.byte 0x8b,0xff,0x55,0x8b,0xec,0x5d\n" ); /* hotpatch prolog */ 262 if (odp->flags & (FLAG_THISCALL | FLAG_FASTCALL)) /* add the register arguments */ 263 { 264 output( "\tpopl %%eax\n" ); 265 if ((odp->flags & FLAG_FASTCALL) && get_args_size( odp ) > 4) output( "\tpushl %%edx\n" ); 266 output( "\tpushl %%ecx\n" ); 267 output( "\tpushl %%eax\n" ); 268 } 269 output( "\tpushl $%u\n", (odp->u.func.args_str_offset << 16) | (i - spec->base) ); 270 output_cfi( ".cfi_adjust_cfa_offset 4" ); 271 272 if (UsePIC) 273 { 274 output( "\tcall %s\n", asm_name("__wine_spec_get_pc_thunk_eax") ); 275 output( "1:\tleal .L__wine_spec_relay_descr-1b(%%eax),%%eax\n" ); 276 needs_get_pc_thunk = 1; 277 } 278 else output( "\tmovl $.L__wine_spec_relay_descr,%%eax\n" ); 279 output( "\tpushl %%eax\n" ); 280 output_cfi( ".cfi_adjust_cfa_offset 4" ); 281 282 output( "\tcall *4(%%eax)\n" ); 283 output_cfi( ".cfi_adjust_cfa_offset -8" ); 284 if (odp->type == TYPE_STDCALL) 285 output( "\tret $%u\n", get_args_size( odp )); 286 else 287 output( "\tret\n" ); 288 output_cfi( ".cfi_endproc" ); 289 break; --- snip --- For reference, <ntdll.NtCreateKey> without relay trace (syscall style,fits into 16 bytes): --- snip --- 7BC0B9B0 | B8 1C000000 | mov eax,1C | 7BC0B9B5 | BA D0C5C07B | mov edx,ntdll.7BC0C5D0 | 7BC0B9BA | FFD2 | call edx | 7BC0B9BC | C2 1C00 | ret 1C | 7BC0B9BF | 90 | nop | ... 7BC0C5D0 | FF25 18C0C67B | jmp dword ptr ds:[<__wine_syscall_dispatcher>] | --- snip --- The parent process writes a copy of the original native API entry and trampoline code into child process (sandbox) address space: --- snip --- 0024:Call KERNEL32.WriteProcessMemory(0000010c,00a8c950,019da140,00000036,0031f7cc) ret=00430409 ... 0024: write_process_memory( handle=010c, addr=00a8c950, data={8b,ff,55,8b,ec,5d,68,83,00,07,00,b8,00,c0,c6,7b,6c,00,00,00,00,00,00,00,83,ec,08,52,8b,54,24,0c,89,54,24,08,c7,44,24,0c,50,c9,a8,00,c7,44,24,04,70,8a,41,00,5a,c3} ) 0130: *signal* signal=19 0024: write_process_memory() = 0 ... 0024:Ret KERNEL32.WriteProcessMemory() retval=00000001 ret=00430409 --- snip --- --- snip --- 00A8C950 | 8BFF | mov edi,edi | org copy of 00A8C952 | 55 | push ebp | NtCreateKey 00A8C953 | 8BEC | mov ebp,esp | relay entry 00A8C955 | 5D | pop ebp | 00A8C956 | 68 83000700 | push 70083 | 00A8C95B | B8 00C0C67B | mov eax,ntdll.7BC6C000 | 00A8C960 | 6C | insb | *boom* 00A8C962 | 0000 | add byte ptr ds:[eax],al | 00A8C964 | 0000 | add byte ptr ds:[eax],al | 00A8C966 | 0000 | add byte ptr ds:[eax],al | 00A8C967 | 00 00A8C968 | 83EC 08 | sub esp,8 | trampoline 00A8C96C | 52 | push edx | 00A8C970 | 8B5424 0C | mov edx,dword ptr ss:[esp+C] | 00A8C974 | 895424 08 | mov dword ptr ss:[esp+8],edx | 00A8C978 | C74424 0C 50C9A800 | mov dword ptr ss:[esp+C],A8C950 | NtCreateKey 00A8C980 | C74424 04 708A4100 | mov dword ptr ss:[esp+4],acrord32.418A70 | hook impl. 00A8C988 | 5A | pop edx | 00A8C989 | C3 | ret | --- snip --- and patches original <ntdll.NtCreateKey> relay entry: --- snip --- 0024:Call KERNEL32.WriteProcessMemory(0000010c,7bc036ac,0031f7d4,0000000c,0031f798) ret=004304ed ... 0024: write_process_memory( handle=010c, addr=7bc036ac, data={b8,ff,55,8b,ec,ba,68,c9,a8,00,ff,e2} ) 0130: *signal* signal=19 0024: write_process_memory() = 0 ... 0024:Ret KERNEL32.WriteProcessMemory() retval=00000001 ret=004304ed --- snip --- Patched <ntdll.NtCreateKey> relay entry: --- snip --- 7BC036AC | B8 FF558BEC | mov eax,EC8B55FF | garbage #sysc 7BC036B1 | BA 68C9A800 | mov edx,A8C968 | trampoline 7BC036B6 | FFE2 | jmp edx | --- snip --- It crashes when the hook calls the original relay entry code which was only partially copied. For reference how it looks like without relay - working as intended: --- snip --- 00576950 | B8 1C000000 | mov eax,1C | org copy of 00576955 | BA D0C5C07B | mov edx,ntdll.7BC0C5D0 | NtCreateKey 0057695A | FFD2 | call edx | entry 0057695C | C2 1C00 | ret 1C | 0057695F | 90 | nop | 00576960 | 6C | insb | fill 00576961 | 0000 | add byte ptr ds:[eax],al | 00576963 | 0000 | add byte ptr ds:[eax],al | 00576965 | 0000 | add byte ptr ds:[eax],al | 00576967 | 00 00576968 | 83EC 08 | sub esp,8 | trampoline 0057696C | 52 | push edx | 00576970 | 895424 08 | mov dword ptr ss:[esp+8],edx | 00576974 | C74424 0C 50695700 | mov dword ptr ss:[esp+C],576950 | NtCreateKey 0057697C | C74424 04 708A4100 | mov dword ptr ss:[esp+4],acrord32.418A70 | hook impl. 00576984 | 5A | pop edx | 00576985 | C3 | ret | --- snip --- Patched <ntdll.NtCreateKey> entry: --- snip --- 7BC0B9B0 | B8 1C000000 | mov eax,1C | org #sysc 7BC0B9B5 | BA 68695700 | mov edx,576968 | trampoline 7BC0B9BA | FFE2 | jmp edx 7BC0B9BC | C2 1C00 | retn 1C 7BC0B9BF | 90 | nop --- snip --- Yes, I know it's possible to disable relay thunks for native API (RelayExclude -> ntdll.*), even for a sub-set (the ones being hooked) to avoid crashes. Maybe something can be done without resorting to that functionality. If it's not worth to do extra handling for NT syscall relay thunks then you might resolve this one as 'WONTFIX'. $ sha1sum AdbeRdr11004_en_US.exe 9c295c16d374735bf292ef6c630c9ab392c22500 AdbeRdr11004_en_US.exe $ du -sh AdbeRdr11004_en_US.exe 49M AdbeRdr11004_en_US.exe $ wine --version wine-5.21 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4