wine-bugs November 2010

wine-bugs@winehq.org

1 participants
8143 discussions

[Bug 18531] New: FontValidator (.NET based app) needs OleInPlaceObject_InPlaceDeactivate properly implemented
by wine-bugs＠winehq.org 21 Mar '21

21 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=18531 Summary: FontValidator (.NET based app) needs OleInPlaceObject_InPlaceDeactivate properly implemented Product: Wine Version: 1.1.21 Platform: Other URL: http://www.microsoft.com/typography/FontValidator.mspx OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: shdocvw … [View More]AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, now that some urlmon MIME support patches are on the way which are essential for this app ("text/xml" MIME is later needed to show XML content in embedded browser window) I file an "intermediate" bug that needs to be fixed before we can verify the new functionality with real apps ;-) The story is basically about in-place activation and deactivation of embedded browser control. The current shdocvw OleInPlaceObject_InPlaceDeactivate stub is mostly harmless for many embedded browser control hosting apps because they don't rely on the fact that in-place deactivation doesn't really take place (control will be destroyed shortly anyway). This app use case is a bit special hence the current in-place deactivation stub becomes the culprit. Steps to reproduce: 1. clean WINEPREFIX 2. winetricks -q dotnet20 3. start app, "Font files" -> "Add..." -> select whatever true/opentype font from your system 4. "Table tests" -> "Clear All" -> select only "BASE" (shortens test) 5. "Rasterization" -> deselect "Test rasterization of TrueType outlines" (shortens test) 6. hit "Start validation" The .NET 2.0 app creates an embedded browser control: --- snip --- ... 0029:trace:ole:CoCreateInstance (rclsid={8856f961-340a-11d0-a96b-00c04fd705a2}, pUnkOuter=(nil), dwClsContext=00000001, riid={00000000-0000-0000-c000-000000000046}, ppv=0x32e2a4) ... 0029:fixme:shell:URL_ParseUrl failed to parse L"Interop.SHDocVw" ... 0029:trace:win:WIN_CreateWindowEx L"Shell Embedding" L"Shell Embedding" ex=00000100 style=46010000 0,0 0x0 parent=0x500b4 menu=(nil) inst=0x61020000 params=0x136d00 ... 0029:trace:win:WIN_CreateWindowEx created window 0x100b6 ... 0029:trace:shdocvw:create_shell_embedding_hwnd parent=0x500b4 hwnd=0x100b6 ... 0029:trace:shdocvw:OleObject_DoVerb (0x136d00)->(-5 (nil) 0x3c80034 -1 0x500b4 0xadd434) 0029:trace:shdocvw:OleObject_DoVerb OLEIVERB_INPLACEACTIVATE ... 0029:trace:win:DestroyWindow (0x500b4) ... --- snip --- and a "parking window" to host the control in inactive/hidden state until the real hosting window is about to be created and displayed to avoid runtime penalties of destroying and recreating browser control each time. This blog gives some insight in the world of "parking windows": http://blogs.msdn.com/sburke/archive/2007/06/20/flashback-windows-forms-par… --- snip --- 0029:trace:win:WIN_CreateWindowEx L"WindowsFormsParkingWindow" L"WindowsForms10.Window.8.app.0.378734a" ex=00010000 style=02010000 0,0 0x0 parent=0xfffffffd menu=(nil) inst=0x400000 params=(nil) ... 0029:trace:win:WIN_CreateWindowEx created window 0x100b8 0029:trace:win:show_window hwnd=0x100b6, cmd=0, wasVisible 1 ... 0029:fixme:shdocvw:OleInPlaceObject_InPlaceDeactivate (0x136d00) 0029:trace:shdocvw:WebBrowser_AddRef (0x136d00) ref=11 0029:trace:ole:GetErrorInfo (0, 0x32d9b0, 0x19a9c4) 0029:fixme:shdocvw:WebBrowser_QueryInterface (0x136d00)->({df0b3d60-548f-101b-8e65-08002b2bd119} 0x32d9a8) interface not supported 0029:trace:shdocvw:WebBrowser_Release (0x136d00) ref=10 0029:trace:seh:raise_exception code=e06d7363 flags=1 addr=0x7b84385b ip=7b84385b tid=0029 ... 0029:trace:win:WIN_SetWindowLong 0x100b6 -4 61031784 W 0029:trace:win:alloc_winproc reusing 0xffff0057 for (nil)/0x61031784 0029:trace:win:WIN_DestroyWindow 0x500b4 --- snip --- The CLR exceptions resulting from E_NOTIMPL of OleInPlaceObject_InPlaceDeactivate are handled gracefully. The window which is the real target for the browser control gets created later: --- snip --- 0029:trace:win:WIN_CreateWindowEx L"C:\\windows\\temp\\tmp47b0.tmp.report.xml" L"WindowsForms10.Window.8.app.0.378734a" ex=00050040 style=46cf0000 -2147483648,-2147483648 376x358 parent=0x10088 menu=(nil) inst=0x400000 params=(nil) ... 0029:trace:win:WIN_CreateWindowEx hwnd 0x600b4 cs 0,0 376x358 ... 0029:trace:win:show_window hwnd=0x600b4, cmd=5, wasVisible 0 0029:trace:shdocvw:WebBrowser_AddRef (0x136d00) ref=11 0029:trace:shdocvw:OleObject_DoVerb (0x136d00)->(-5 (nil) 0x3c80034 -1 0x600b4 0xaece88) 0029:trace:shdocvw:OleObject_DoVerb OLEIVERB_INPLACEACTIVATE 0029:trace:shdocvw:WebBrowser_Release (0x136d00) ref=10 0029:trace:seh:raise_exception code=e0434f4d flags=1 addr=0x7b84385b ip=7b84385b tid=0029 0029:trace:seh:raise_exception info[0]=80131509 0029:trace:seh:raise_exception eax=7b82ca1d ebx=7b8c2918 ecx=00000000 edx=0032d958 esi=0032d958 edi=e0434f4d 0029:trace:seh:raise_exception ebp=0032d920 esp=0032d8bc cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000246 --- snip --- The CLR exception leads to following backtrace dialog (and abort): --- snip --- ************** Exception Text ************** System.InvalidOperationException: Unable to get the window handle for the 'AxWebBrowser' control. Windowless ActiveX controls are not supported. at System.Windows.Forms.AxHost.EnsureWindowPresent() at System.Windows.Forms.AxHost.InPlaceActivate() at System.Windows.Forms.AxHost.TransitionUpTo(Int32 state) at System.Windows.Forms.AxHost.CreateHandle() at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible) at System.Windows.Forms.Control.CreateControl(Boolean fIgnoreVisible) at System.Windows.Forms.Control.CreateControl() at System.Windows.Forms.Control.WmShowWindow(Message& m) at System.Windows.Forms.Control.WndProc(Message& m) at System.Windows.Forms.ScrollableControl.WndProc(Message& m) at System.Windows.Forms.ContainerControl.WndProc(Message& m) at System.Windows.Forms.Form.WmShowWindow(Message& m) at System.Windows.Forms.Form.WndProc(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.OnMessage(Message& m) at System.Windows.Forms.Control.ControlNativeWindow.WndProc(Message& m) at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam) --- snip --- The activate_inplace() OLE verb bails out early because Wine thinks the control is in-place activated (This->inplace) -> real in-place deactivation never took place. .NET runtime tries to fetch hosted control's window handle which fails because no parent switch was done. Adding simple in-place deactivation (releasing IOleInPlaceSite, resetting This->inplace) lets this app succeed, having windows properly switched/re-parented. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes. [View Less]

2 9

[Bug 19428] New: Microsoft SQL Express 2005 fails to install - Error 1627 - ERROR_FUNCTION_FAILED
by wine-bugs＠winehq.org 21 Mar '21

21 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=19428 Summary: Microsoft SQL Express 2005 fails to install - Error 1627 - ERROR_FUNCTION_FAILED Product: Wine Version: 1.1.26 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: yurienu.amenysta(a)gmail.com Hi, I run SQLEXPR.exe, … [View More]

2 12

[Bug 20220] New: AutoCAD 2009: unimplemented function windowscodecs.dll.WICCreateImagingFactory_Proxy
by wine-bugs＠winehq.org 21 Mar '21

21 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=20220 Summary: AutoCAD 2009: unimplemented function windowscodecs.dll.WICCreateImagingFactory_Proxy Product: Wine Version: 1.1.30 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: lukasz.wojnilowicz(a)gmail.com Created an … [View More]

2 25

[Bug 18640] New: .NET 3.0 WPF requires IDirect3D9Ex to be functional
by wine-bugs＠winehq.org 21 Mar '21

21 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=18640 Summary: .NET 3.0 WPF requires IDirect3D9Ex to be functional Product: Wine Version: 1.1.22 Platform: Other OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-d3d AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, another one, rotting on harddisk half a year now (since first .NET 3.0 … [View More]voyage) - before it gets lost. --- snip --- ... fixme:d3d9:IDirect3D9ExImpl_GetAdapterLUID (0x17b328)->(0, 0x1814d0) fixme:d3d9:IDirect3D9ExImpl_GetAdapterDisplayModeEx (0x17b328)->(0, 0x181568, 0x181580): Stub! fixme:seh:RtlCaptureStackBackTrace (2, 3, 0x533546e4, (nil)) stub! ... err:ntdll:vDbgPrintExWithPrefix 65: MIL FAILURE: Unexpected HRESULT 0x88760827 in caller: Could not create display set. fixme:d3d9:IDirect3D9ExImpl_GetAdapterLUID (0x17a388)->(0, 0x19bcc0) fixme:d3d9:IDirect3D9ExImpl_GetAdapterDisplayModeEx (0x17a388)->(0, 0x19bd58, 0x19bd70): Stub! fixme:seh:RtlCaptureStackBackTrace (2, 3, 0x533547a4, (nil)) stub! err:ntdll:vDbgPrintExWithPrefix 65: MIL FAILURE: Unexpected HRESULT 0x88760827 in caller: The render thread failed unexpectedly. fixme:seh:RtlCaptureStackBackTrace (2, 3, 0x533548ac, (nil)) stub! ... fixme:shell:URL_ParseUrl failed to parse L"PresentationFramework.resources" ... fixme:advapi:RegisterEventSourceW ((null),L".NET Runtime 2.0 Error Reporting"): stub fixme:advapi:ReportEventW (0xcafe4242,0x0001,0x0000,0x00001388,(nil),0x000b,0x00000102,0x3009a1b4,0x6cc5c4): stub err:eventlog:ReportEventW L"clr20r3" err:eventlog:ReportEventW L"viewer.exe" err:eventlog:ReportEventW L"1.0.0.0" err:eventlog:ReportEventW L"473fefa6" err:eventlog:ReportEventW L"presentationframework" err:eventlog:ReportEventW L"3.0.0.0" err:eventlog:ReportEventW L"45398c20" err:eventlog:ReportEventW L"6496" err:eventlog:ReportEventW L"be" err:eventlog:ReportEventW L"system.windows.markup.xamlparse" err:eventlog:ReportEventW L"NIL" fixme:advapi:DeregisterEventSource (0xcafe4242) stub ... Unhandled Exception: System.Windows.Markup.XamlParseException: Cannot create instance of 'MainWindow' defined in assembly 'Viewer, Version=1.0.0.0, Culture=neutral, PublicKeyToken=963dca5fb49a45ad'. Exception has been thrown by the target of an invocation. Error in markup file 'MainWindow.xaml'. ---> System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.Windows.Markup.XamlParseException: 'Menu' object cannot be added to 'Grid'. Exception from HRESULT: 0x88980406 Error at object 'System.Windows.Controls.Menu' in markup file 'Viewer;component/mainwindow.xaml'. ---> System.Runtime.InteropServices.COMException (0x88980406): Exception from HRESULT: 0x88980406 at MS.Internal.HRESULT.Check(Int32 hr) at System.Windows.Media.Composition.DUCE.Channel.SyncFlush() at System.Windows.Media.MediaContext.CompleteRender() at System.Windows.Media.MediaContext.CreateChannels() at System.Windows.Media.MediaSystem.ConnectChannels(MediaContext mc) at System.Windows.Media.MediaContext..ctor(Dispatcher dispatcher) at System.Windows.Media.MediaContext.From(Dispatcher dispatcher) at System.Windows.Media.VisualCollection.Add(Visual visual) at System.Windows.Controls.UIElementCollection.AddInternal(UIElement element) at System.Windows.Controls.UIElementCollection.Add(UIElement element) at System.Windows.Controls.UIElementCollection.System.Collections.IList.Add(Object value) at System.Windows.Markup.BamlRecordReader.AddToContentProperty(Object container, Object contentProperty, Object value) ... --- snip --- IDirect3D9ExImpl_GetAdapterLUID IDirect3D9ExImpl_GetAdapterDisplayModeEx currently return D3DERR_DRIVERINTERNALERROR Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes. [View Less]

2 41

[Bug 18638] New: .NET 3.0 apps abort with: Call from to unimplemented function GDI32.dll.GdiEntry13, aborting
by wine-bugs＠winehq.org 21 Mar '21

21 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=18638 Summary: .NET 3.0 apps abort with: Call from to unimplemented function GDI32.dll.GdiEntry13, aborting Product: Wine Version: 1.1.22 Platform: Other OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: gdi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, another one, … [View More]

2 10

[Bug 18639] New: .NET 3.0 WPF needs NtSecureConnectPort stub
by wine-bugs＠winehq.org 21 Mar '21

21 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=18639 Summary: .NET 3.0 WPF needs NtSecureConnectPort stub Product: Wine Version: 1.1.22 Platform: Other OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntdll AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, another one, rotting on harddisk half a year now (since first .NET 3.0 voyage) - before … [View More]it gets lost. --- snip --- $ wine ./Viewer.exe fixme:ole:CoGetContextToken stub fixme:shell:URL_ParseUrl failed to parse L"PresentationFramework" fixme:shell:URL_ParseUrl failed to parse L"WindowsBase" fixme:shell:URL_ParseUrl failed to parse L"System" fixme:shell:URL_ParseUrl failed to parse L"PresentationCore" fixme:advapi:RegisterTraceGuidsW 0x6307f2 (nil) 0x32dfc4 1 0x32dfa0 (null) (null) 0x32dfa8 fixme:shell:URL_ParseUrl failed to parse L"Viewer.resources" fixme:shell:URL_ParseUrl failed to parse L"Viewer.resources" fixme:shell:URL_ParseUrl failed to parse L"Engine" fixme:shell:URL_ParseUrl failed to parse L"msvcm90" fixme:shell:URL_ParseUrl failed to parse L"Cube" fixme:advapi:RegisterTraceGuidsW 0x532dc234 (nil) 0x53218780 27 0x32d050 (null) (null) 0x53355f40 fixme:seh:RtlCaptureStackBackTrace (2, 3, 0x533546cc, (nil)) stub! wine: Call from 0x7bc3c616 to unimplemented function ntdll.dll.NtSecureConnectPort, aborting fixme:shell:URL_ParseUrl failed to parse L"PresentationFramework.resources" fixme:advapi:CheckTokenMembership (0x1c4 0x174c50 0x32d5f8) stub! fixme:imm:ImmDisableIME (-1): stub fixme:thread:NtQueryInformationThread Cannot get kerneltime or usertime of other threads fixme:thread:NtQueryInformationThread info class 9 not supported yet fixme:thread:NtQueryInformationThread info class 9 not supported yet fixme:thread:NtQueryInformationThread info class 9 not supported yet fixme:advapi:RegisterEventSourceW ((null),L".NET Runtime 2.0 Error Reporting"): stub fixme:advapi:ReportEventW (0xcafe4242,0x0001,0x0000,0x00001388,(nil),0x000b,0x00000102,0x3009a1b4,0x7ed505c4): stub err:eventlog:ReportEventW L"clr20r3" err:eventlog:ReportEventW L"viewer.exe" err:eventlog:ReportEventW L"1.0.0.0" err:eventlog:ReportEventW L"473fefa6" err:eventlog:ReportEventW L"presentationframework" err:eventlog:ReportEventW L"3.0.0.0" err:eventlog:ReportEventW L"45398c20" err:eventlog:ReportEventW L"6496" err:eventlog:ReportEventW L"be" err:eventlog:ReportEventW L"system.windows.markup.xamlparse" err:eventlog:ReportEventW L"NIL" fixme:advapi:DeregisterEventSource (0xcafe4242) stub fixme:thread:NtQueryInformationThread info class 9 not supported yet fixme:thread:NtQueryInformationThread info class 9 not supported yet fixme:thread:NtQueryInformationThread info class 9 not supported yet Unhandled Exception: System.Windows.Markup.XamlParseException: Cannot create instance of 'MainWindow' defined in assembly 'Viewer, Version=1.0.0.0, Culture=neutral, PublicKeyToken=963dca5fb49a45ad'. Exception has been thrown by the target of an invocation. Error in markup file 'MainWindow.xaml'. ---> System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.TypeInitializationException: The type initializer for 'System.Windows.Window' threw an exception. ---> System.TypeInitializationException: The type initializer for 'System.Windows.FrameworkElement' threw an exception. ---> System.TypeInitializationException: The type initializer for 'System.Windows.Documents.TextElement' threw an exception. ---> System.TypeInitializationException: The type initializer for 'System.Windows.Media.FontFamily' threw an exception. ---> System.Runtime.InteropServices.SEHException: External component has thrown an exception. at NtSecureConnectPort(Void** , _UNICODE_STRING* , _SECURITY_QUALITY_OF_SERVICE* , _PORT_VIEW* , Void* , _REMOTE_PORT_VIEW* , UInt32* , Void* , UInt32* ) at MS.Internal.FontCache.LPCServices.TryConnectToLPCPort(String portName, Void* rawExpectedSid, Byte[] connectBuffer, Int32& errorCode) at MS.Internal.FontCache.LPCServices.TryConnectToLPCPort(String portName, Sid expectedSid, Byte[] connectBuffer, Int32& errorCode) at MS.Internal.FontCache.LPCProtocol.TryConnectToServer(Int32 timeout, Int32& errorCode) at MS.Internal.FontCache.IPCCacheManager.GetServerSectionName(Int32 timeout, Int32& errorCode) at MS.Internal.FontCache.CacheManager.GetServerCache() at MS.Internal.FontCache.CacheManager.Lookup(IFontCacheElement e) at System.Windows.Media.FontFamily.PreCreateDefaultFamilyCollection() at System.Windows.Media.FontFamily..cctor() ... at Viewer.App.Main() wine: Unhandled exception 0xe0434f4d at address 0x7b844f6c (thread 003e), starting debugger... Unhandled exception: 0xe0434f4d in 32-bit code (0x7b844fef). --- snip --- A simple stub returning STATUS_NOT_IMPLEMENTED is enough. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes. [View Less]

2 17

[Bug 17212] New: Unimplemented function ntoskrnl.exe.KeInitializeMutex
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=17212 Summary: Unimplemented function ntoskrnl.exe.KeInitializeMutex Product: Wine Version: 1.1.13 Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntoskrnl AssignedTo: wine-bugs(a)winehq.org ReportedBy: mc2374(a)mclink.it Created an attachment (id=19133) --> (http://bugs.winehq.org/attachment.… [View More]

2 28

[Bug 16041] New: Acronis Crash while install
by wine-bugs＠winehq.org 20 Mar '21

20 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=16041 Summary: Acronis Crash while install Product: Wine Version: 1.1.8 Platform: Other OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: james2432(a)gmail.com Created an attachment (id=17266) --> (http://bugs.winehq.org/attachment.cgi?id=17266) Backtrace of … [View More]

2 19

[Bug 21600] New: WebLog Expert help button doesn't work
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=21600 Summary: WebLog Expert help button doesn't work Product: Wine Version: 1.1.37 Platform: x86 URL: http://www.weblogexpert.com/files/WLELiteSetup.exe OS/Version: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: user32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: kennybobs(a)o2.co.uk The … [View More]

2 14

[Bug 16946] New: Calling CloseServiceHandle() multiple times on same client side service handle corrupts heap
by wine-bugs＠winehq.org 19 Mar '21

19 Mar '21

http://bugs.winehq.org/show_bug.cgi?id=16946 Summary: Calling CloseServiceHandle() multiple times on same client side service handle corrupts heap Product: Wine Version: 1.1.12 Platform: Other URL: http://www.nbc.com/Video/NBCDirectInstaller.exe OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: advapi32 AssignedTo: wine-bugs(a)… [View More]winehq.org ReportedBy: focht(a)gmx.net Hello, I've seen this some time ago but forgot about it until encountering it again recently while investigating bug 16626 (this is follow up bug). Prerequisite: --- snip --- $ rm -rf ~/.wine $ winetricks -q wmp10 dotnet20 mdac28 $ wine NBCDirectInstaller.exe --- snip --- The installer uses managed (.NET) wrapper for SCM to fetch a list of current services using EnumServicesStatus(). First call to EnumServicesStatus() to query for buffer size and second time to get the real list. Although M$ .NET Framework error handling is somewhat questionable (it doesn't even check for failure on first call), it's actually Wine's management of client side service handles that causes the breakage. --- snip --- ... 0009:Call advapi32.OpenSCManagerW(00000000,00000000,00000004) ret=03f72620 0009:trace:service:OpenSCManagerW ((null),(null),0x00000004) 0009:trace:service:sc_handle_alloc sc_handle type=0 -> 0x1b1fc0 ... 0013:trace:service:svcctl_OpenSCManagerW ((null), (null), 4) ... 0009:trace:service:OpenSCManagerW returning 0x1b1fc0 (access : 0x00000004) 0009:Ret advapi32.OpenSCManagerW() retval=001b1fc0 ret=03f72620 ... 0009:Call advapi32.EnumServicesStatusW(001b1fc0,00000030,00000003,00000000,00000000,0032f32c,0032f328,0032f324) ret=03f726df 0009:fixme:service:EnumServicesStatusW 0x1b1fc0 type=30 state=3 (nil) 0 0x32f32c 0x32f328 0x32f324 0009:Ret advapi32.EnumServicesStatusW() retval=00000000 ret=03f726df 0009:Call KERNEL32.GetLastError() ret=03f726e5 0009:Ret KERNEL32.GetLastError() retval=00000005 ret=03f726e5 0009:Call KERNEL32.LocalAlloc(00000000,00000000) ret=04248243 0009:Ret KERNEL32.LocalAlloc() retval=03ec9988 ret=04248243 0009:Call advapi32.EnumServicesStatusW(001b1fc0,00000030,00000003,03ec9988,00000000,0032f32c,0032f328,0032f324) ret=03f726df 0009:fixme:service:EnumServicesStatusW 0x1b1fc0 type=30 state=3 0x3ec9988 0 0x32f32c 0x32f328 0x32f324 0009:Ret advapi32.EnumServicesStatusW() retval=00000000 ret=03f726df 0009:Call KERNEL32.GetLastError() ret=03f726e5 0009:Ret KERNEL32.GetLastError() retval=00000005 ret=03f726e5 ... 0009:Call advapi32.CloseServiceHandle(001b1fc0) ret=007aa722 0009:trace:service:CloseServiceHandle 0x1b1fc0 ... 0009:trace:service:sc_handle_destroy_manager destroying SC Manager 0x1b1fc0 0009:Ret advapi32.CloseServiceHandle() retval=00000001 ret=007aa722 ... --- snip --- Releasing the same client handle again: --- snip --- 0009:Call advapi32.CloseServiceHandle(001b1fc0) ret=007aa722 0009:trace:service:CloseServiceHandle 0x1b1fc0 0009:Call rpcrt4.NdrClientInitializeNew(0032ef8c,0032f06c,60376640,00000000) ret=60366f60 0009:Ret rpcrt4.NdrClientInitializeNew() retval=0032f06c ret=60366f60 0009:Call rpcrt4.NdrGetBuffer(0032f06c,00000018,00000000) ret=60366fbe 0009:err:rpc:I_RpcGetBuffer no binding 0009:Call KERNEL32.RaiseException(000006a6,00000000,00000000,00000000) ret=60b21399 0009:trace:seh:raise_exception code=6a6 flags=0 addr=0x7b844f6c ip=0x7b844fef tid=0009 0009:trace:seh:raise_exception eax=7b82cca9 ebx=7b8c3940 ecx=00000000 edx=00000010 esi=0032ee90 edi=0032ee10 0009:trace:seh:raise_exception ebp=0032edf8 esp=0032ed94 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000246 0009:trace:seh:call_stack_handlers calling handler at 0x60366cec code=6a6 flags=0 0009:trace:seh:call_stack_handlers handler at 0x60366cec returned 1 0009:trace:seh:call_stack_handlers calling handler at 0x6036266f code=6a6 flags=0 0009:Call rpcrt4.I_RpcExceptionFilter(000006a6) ret=60360fdd 0009:Ret rpcrt4.I_RpcExceptionFilter() retval=00000001 ret=60360fdd 0009:trace:seh:__regs_RtlUnwind code=6a6 flags=2 0009:trace:seh:__regs_RtlUnwind calling handler at 0x7bc3b2ec code=6a6 flags=2 0009:trace:seh:__regs_RtlUnwind handler at 0x7bc3b2ec returned 1 0009:trace:seh:__regs_RtlUnwind calling handler at 0x60366cec code=6a6 flags=2 0009:Call rpcrt4.NdrFreeBuffer(0032f06c) ret=60366e7f 0009:Ret rpcrt4.NdrFreeBuffer() retval=00000000 ret=60366e7f 0009:trace:seh:__regs_RtlUnwind handler at 0x60366cec returned 1 0009:Ret advapi32.CloseServiceHandle() retval=00000000 ret=007aa722 --- snip --- Even if RPC code correctly detects invalid SCM handles, the latter sc_handle_free() will eventually corrupt heap which will later lead to breakage. This needs to be avoided at all costs. Second allocation returns garbage sub block due to corrupted heap lists, causing exception. --- snip --- ... 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000001c) ret=79e78360 0009:Ret ntdll.RtlAllocateHeap() retval=001b1fc0 ret=79e78360 0009:Call KERNEL32.GetLastError() ret=79e71862 0009:Ret KERNEL32.GetLastError() retval=000006a6 ret=79e71862 0009:Call ntdll.RtlTryEnterCriticalSection(0013cedc) ret=79e74811 0009:Ret ntdll.RtlTryEnterCriticalSection() retval=00000001 ret=79e74811 0009:Call KERNEL32.GetLastError() ret=79e783fb 0009:Ret KERNEL32.GetLastError() retval=000006a6 ret=79e783fb 0009:Call ntdll.RtlAllocateHeap(00110000,00000000,0000003c) ret=79e78360 0009:Ret ntdll.RtlAllocateHeap() retval=03ec9988 ret=79e78360 0009:Call KERNEL32.GetLastError() ret=79e71862 0009:Ret KERNEL32.GetLastError() retval=000006a6 ret=79e71862 0009:Call KERNEL32.InitializeCriticalSection(03ec9998) ret=79e7a501 0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7bc450bd ip=0x7bc450bd tid=0009 0009:trace:seh:raise_exception info[0]=00000000 0009:trace:seh:raise_exception info[1]=00001796 0009:trace:seh:raise_exception eax=00001796 ebx=7bc9bd90 ecx=7bc9bd90 edx=00110078 esi=00110070 edi=0032f0e4 0009:trace:seh:raise_exception ebp=0032efe8 esp=0032ef80 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010206 0009:trace:seh:call_stack_handlers calling handler at 0x7a322c04 code=c0000005 flags=0 --- snip --- --- snip dlls/advapi32/service.c --- BOOL WINAPI CloseServiceHandle( SC_HANDLE hSCObject ) { struct sc_handle *obj; DWORD err; TRACE("%p\n", hSCObject); if (hSCObject == NULL) { SetLastError(ERROR_INVALID_HANDLE); return FALSE; } obj = (struct sc_handle *)hSCObject; __TRY { err = svcctl_CloseServiceHandle(&obj->server_handle); } __EXCEPT(rpc_filter) { err = map_exception_code(GetExceptionCode()); } __ENDTRY sc_handle_free( obj ); // <---- will eventually corrupt heap! if (err != ERROR_SUCCESS) { SetLastError(err); return FALSE; } return TRUE; } --- snip dlls/advapi32/service.c --- Change the way how client side service handles are managed to avoid heap corruption and allow for multiple service handle close calls. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes. [View Less]

2 8

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

wine-bugs November 2010