[Bug 60267] New: Multiple E-Banking applications by KOBIL Systems GmbH terminate on startup due to missing WBEM namespace 'ROOT\SecurityCenter2' (MigrosBank EBanking 8.2.x, Sparda Bank SecureApp 1.x)
http://bugs.winehq.org/show_bug.cgi?id=60267 Bug ID: 60267 Summary: Multiple E-Banking applications by KOBIL Systems GmbH terminate on startup due to missing WBEM namespace 'ROOT\SecurityCenter2' (MigrosBank EBanking 8.2.x, Sparda Bank SecureApp 1.x) Product: Wine Version: 11.16 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wmi&wbemprox Assignee: wine-bugs@list.winehq.org Reporter: focht@gmx.net Target Milestone: --- Distribution: --- Hello folks, continuation of bug 47062 Stable links for current installers: Sparda Bank SecureApp: https://web.archive.org/web/20190422125056/https://www.sparda.de/secureapp-p... $ du -sh spardasecureapp_p.exe 9.6M spardasecureapp_p.exe $ sha256sum spardasecureapp_p.exe 444c501236d5704e43ff5238a03b2c66a08eeba046ac246613d605256f9d50db spardasecureapp_p.exe Corresponding VirusTotal scan: https://www.virustotal.com/gui/file/444c501236d5704e43ff5238a03b2c66a08eeba0... --- MigrosBank EBanking app: https://web.archive.org/web/20190422124354/https://download.migrosbank.ch/mi... $ du -sh MigrosBank-EBanking-Win-8.2.2205.exe 9.8M MigrosBank-EBanking-Win-8.2.2205.exe $ sha256sum MigrosBank-EBanking-Win-8.2.2205.exe 9cd93cc70c6a8b24dbf47a3d20c9a1ed5f6341405b194eea008ded3e0b168b16 MigrosBank-EBanking-Win-8.2.2205.exe Corresponding VirusTotal scan: https://www.virustotal.com/gui/file/9cd93cc70c6a8b24dbf47a3d20c9a1ed5f634140... --- Trace log: --- snip --- $ pwd /home/focht/.wine/drive_c/AST-Client $ WINEDEBUG=+relay,+seh wine ./SpardaSecureApp.exe >>log.txt 2>&1 ... 0170:Call ucrtbase._wcsicmp(0042b508 L"SecurityCenter2",7b10d2f4 L"default") ret=7b0f12f6 0170:Ret ucrtbase._wcsicmp() retval=0000000f ret=7b0f12f6 0170:Call ucrtbase._wcsicmp(0042b508 L"SecurityCenter2",7b10d304 L"cimv2") ret=7b0f130b 0170:Ret ucrtbase._wcsicmp() retval=00000010 ret=7b0f130b 0170:Call ucrtbase._wcsicmp(0042b508 L"SecurityCenter2",7b10d310 L"Microsoft\\Windows\\Storage") ret=7b0f131e 0170:Ret ucrtbase._wcsicmp() retval=00000006 ret=7b0f131e 0170:Call ucrtbase._wcsicmp(0042b508 L"SecurityCenter2",7b10d344 L"StandardCimv2") ret=7b0f1331 0170:Ret ucrtbase._wcsicmp() retval=fffffff1 ret=7b0f1331 0170:Call ucrtbase._wcsicmp(0042b508 L"SecurityCenter2",7b10d360 L"wmi") ret=7b0f1344 0170:Ret ucrtbase._wcsicmp() retval=fffffffc ret=7b0f1344 ... 0170:Call oleaut32.SysFreeString(0042dc54 L"ROOT\\SecurityCenter2") ret=1006526a 0170:Call KERNEL32.RaiseException(e06d7363,00000001,00000003,0022f868) ret=100721d5 ... 0170:Call combase.CoUninitialize() ret=10072737 0170:Call wbemprox.DllCanUnloadNow() ret=7b3a5467 0170:Call ntdll.NtTerminateProcess(ffffffffffffffff,02625a39) ret=6ffffe5b6267 ... --- snip --- Wine source: https://gitlab.winehq.org/wine/wine/-/blob/d8a16d5ceadd2b943f623356bc0e7a072... It loads wbemprox and reaches WMI, where it tries to connect to namespace 'ROOT\SecurityCenter2', which wbemprox does not implement yet. The MigrosBank app fails the same way, same comparison chain and same teardown: --- snip --- 0170:Call ucrtbase._wcsicmp(0039e1d0 L"SecurityCenter2",7b10d360 L"wmi") ret=7b0f1344 0170:Call oleaut32.SysFreeString(003a0e84 L"ROOT\\SecurityCenter2") ret=008d552a 0170:Call KERNEL32.RaiseException(e06d7363,00000001,00000003,0022f838) ret=008e2535 ... 0170:Call combase.CoUninitialize() ret=008e2a97 0170:Call wbemprox.DllCanUnloadNow() ret=7b3a5467 0170:Call ntdll.NtTerminateProcess(ffffffffffffffff,02625a39) ret=6ffffe5b6267 --- snip --- Registering the namespace is sufficient for SpardaSecureApp to start normally. It shows an activation screen asking for user credentials/activation code. MigrosBank gets past this point too but then runs into an unrelated problem in the embedded browser control. $ wine --version wine-11.16 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=60267 Anastasius Focht <focht@gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download, obfuscation URL| |https://web.archive.org/web | |/20190422125056/https://www | |.sparda.de/secureapp-pc/med | |ien/spardasecureapp_p.exe -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=60267 --- Comment #1 from Hans Leidekker <hans@meelstraat.net> --- Commit b9a6fa8ec4642aeec89ddbcb69f5491df44e40f5 adds the ROOT\SecurityCenter2 namespace. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=60267 Anastasius Focht <focht@gmx.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Fixed by SHA1| |b9a6fa8ec4642aeec89ddbcb69f | |5491df44e40f5 Resolution|--- |FIXED --- Comment #2 from Anastasius Focht <focht@gmx.net> --- Hello Hans, confirming, this is fixed by commit https://gitlab.winehq.org/wine/wine/-/commit/b9a6fa8ec4642aeec89ddbcb69f5491... ("wbemprox: Add SecurityCenter2 namespace.") Thanks Hans Both applications now get past the namespace lookup. --- snip --- ... 0170:Call ucrtbase._wcsicmp(0042a8d8 L"SecurityCenter2",7b10d2f4 L"default") ret=7b0f1356 0170:Call ucrtbase._wcsicmp(0042a8d8 L"SecurityCenter2",7b10d304 L"cimv2") ret=7b0f136b 0170:Call ucrtbase._wcsicmp(0042a8d8 L"SecurityCenter2",7b10d310 L"Microsoft\\Windows\\Storage") ret=7b0f137e 0170:Call ucrtbase._wcsicmp(0042a8d8 L"SecurityCenter2",7b10d344 L"SecurityCenter2") ret=7b0f1391 0170:Ret ucrtbase._wcsicmp() retval=00000000 ret=7b0f1391 ... --- snip --- SpardaSecureApp reaches its activation screen and stays there. MigrosBank E-Banking gets past this point as well but then dies in the embedded browser control, which is unrelated to this bug. $ wine --version wine-11.16-298-gdfa96293478 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=60267 Alexandre Julliard <julliard@winehq.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED --- Comment #3 from Alexandre Julliard <julliard@winehq.org> --- Closing bugs fixed in 11.17. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.
participants (1)
-
WineHQ Bugzilla