recent ole32/shdocvw "regression" crashes adobe installers

Oct. 6, 2006

      Hi,

A recent patch by Rob Shearman has caused two Adobe installers to
crash when they try to load up a WebBrowser control to display a EULA:

Commit: ccb634fdee50936c35880a6cffd70e0bcd946b5a
URL:    http://source.winehq.org/git/?p=wine.git;a=commit;h=ccb634fdee50936c35880a6c...

Author: Robert Shearman <rob at codeweavers.com>
Date:   Thu Aug 31 17:14:38 2006 +0100

ole32: Re-structure OleCreate to match to order of calls that native does.

Get rid of hres1 since all failures are returned. Cleanup pUnk on
failure and make sure to return NULL in ppvObj.

We get the following backtrace:

fixme:ole:OleCreate
        {8856f961-340a-11d0-a96b-00c04fd705a2}
        {00000112-0000-0000-c000-000000000046} semi-stub!
fixme:shdocvw:PersistStorage_InitNew (0x1f62b0)->(0x10013378)
wine: Unhandled page fault on read access to 0x00000000 at address
0x100047b0 (thread
...
Backtrace:
=>1 0x100047b0 in epic_eula (+0x47b0) (0x100047b0)
fixme:dbghelp:elf_load_debug_info_from_map Alpha-support for Dwarf2
information for user32<elf>
  2 0x7ebcf97a WINPROC_wrapper+0x1a in user32 (0x7ebcf97a)
  3 0x7ebd0126 call_dialog_proc+0x66(hwnd=0x10034, msg=0x110, wp=0x0,
lp=0x761958, result=0x33bbbc, arg=0x10009010)
[/home/jhawkins/wine/dlls/user/winproc.c:473] in user32 (0x7ebd0126)
  4 0x7ebd490d WINPROC_CallDlgProcW+0x4d(func=0xffff0020,
hwnd=0x10034, msg=0x110, wParam=0x0, lParam=0x761958)
[/home/jhawkins/wine/dlls/user/winproc.c:2339] in user32 (0x7ebd490d)
  5 0x7eb7118b DefDlgProcW+0x5b(hwnd=0x10034, msg=0x110, wParam=0x0,
lParam=0x761958) [/home/jhawkins/wine/dlls/user/defdlg.c:493] in
user32 (0x7eb7118b)
  6 0x7ebcf97a WINPROC_wrapper+0x1a in user32 (0x7ebcf97a)
  7 0x7ebd1956 call_window_proc+0x66(hwnd=0x10034, msg=0x110, wp=0x0,
lp=0x761958, result=0x33bcbc, arg=0x7eb71130)
[/home/jhawkins/wine/dlls/user/winproc.c:452] in user32 (0x7ebd1956)
  8 0x7ebd49fd CallWindowProcW+0x4d(func=0x7eb71130, hwnd=0x10034,
msg=0x110, wParam=0x0, lParam=0x761958)
[/home/jhawkins/wine/dlls/user/winproc.c:2252] in user32 (0x7ebd49fd)
  9 0x7eba3197 call_window_proc+0x127(hwnd=<register not in topmost
frame>, msg=0x110, wparam=0x0, lparam=0x761958, unicode=0x1,
same_thread=0x1) [/home/jhawkins/wine/dlls/user/message.c:1531] in
user32 (0x7eba3197)
  10 0x7eba656c SendMessageTimeoutW+0x16c(hwnd=0x10034, msg=0x110,
wparam=0x0, lparam=0x761958, flags=0x0, timeout=0x0, res_ptr=0x33bdd4)
[/home/jhawkins/wine/dlls/user/message.c:2374] in user32 (0x7eba656c)
  11 0x7eba65b7 SendMessageW+0x37(hwnd=0x10034, msg=0x110, wparam=0x0,
lparam=0x761958) [/home/jhawkins/wine/dlls/user/message.c:2460] in
user32 (0x7eba65b7)
  12 0x7eb769a1 DIALOG_CreateIndirect+0xe91(hInst=0x340000,
dlgTemplate=<register not in topmost frame>, owner=0x10024,
dlgProc=0x10009010, param=0x761958, unicode=0x1, modal=0x1)
[/home/jhawkins/wine/dlls/user/dialog.c:637] in user32 (0x7eb769a1)
  13 0x7eb7732f DialogBoxParamW+0x5f(hInst=0x340000, name=0x65,
owner=0x10024, dlgProc=0x10009010, param=0x761958)
[/home/jhawkins/wine/dlls/user/dialog.c:798] in user32 (0x7eb7732f)
  14 0x10003114 in epic_eula (+0x3114) (0x10003114)
  15 0x100012ea in epic_eula (+0x12ea) (0x100012ea)
  16 0x00000000 (0x00000000)
0x100047b0: movl        0x0(%eax),%eax

epic_eula calls OleCreate.  OleCreate calls
shdocvw:PersistStorage_InitNew which returns E_NOTIMPL.  The new
version of OleCreate handles the error and sets pUnk to NULL and
returns the error value.  epic_eula doesn't check the return value for
an error or check if pUnk is NULL.  When the dialog loads up,
epic_eula tries to use pUnk and we crash.  Note that Rob's patch is
correct and shouldn't be changed.  Making PersistStorage_InitNew
return S_OK fixes the problem, but I don't know if that is acceptable
or not.  The real solution is to implement PersistStorage.  What are
people's thoughts on this?  Is it OK to return S_OK for now?

Thanks,
James Hawkins

James Hawkins

Jacek Caban

tags

participants (2)