wine-bugs September 2010

wine-bugs@winehq.org

1 participants
7663 discussions

[Bug 21483] New: changed token security breaks .NET Framework SDK tools
by wine-bugs＠winehq.org 19 Feb '21

19 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=21483 Summary: changed token security breaks .NET Framework SDK tools Product: Wine Version: 1.1.33 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wineserver AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, some of Microsoft's tools from .NET Framework SDKs - namely managed debuggers (CLR) - stopped working after 1.1.33+ release. They seem to be very picky about object security. I bisected this one but technically this isn't a regression because Rob's token patches made Wine more correct - exposing another object security problem. --- snip --- $ git bisect bad bd56916f90e68632993a7275fe30a55a7efa222a is the first bad commit commit bd56916f90e68632993a7275fe30a55a7efa222a Author: Rob Shearman <robertshearman(a)gmail.com> Date: Mon Nov 16 20:11:06 2009 +0000 server: Extend get_token_user server call to also retrieve SIDs for the token's owner or primary group. :040000 040000 829f1543526675ae48f6fde8c8cedff74fd51797 7a77653291795c209ec529dd6660d52fc922a58c M dlls :040000 040000 57735b53b28db37ac4627dc009000e225175164a 4dcc1388cb136e559c06106632c08e8e610fe557 M include :040000 040000 4e83227cb0133c7e288a1e930461d4efe1130882 cf1c3539d6b3c91c854fa2b9b672f68ea601f639 M server --- snip --- "old" behaviour, where default process token was like this: Token owner -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) NtQueryInformationToken had the token owner info hard-coded (to SECURITY_INTERACTIVE_RID) while Rob's patches moved the actual query to wineserver. --- Basically the app code that verifies the security of created objects goes like this: - get SD from created object (event) handle -> GetKernelObjectSecurity( OWNER_SECURITY_INFORMATION | DACL_SECURITY_INFORMATION) - get owner SID of SD -> GetSecurityDescriptorOwner() -> SID1 - get DACL of SD -> GetSecurityDescriptorDacl() - for each ACE from DACL (GetAce) -> SID2: check ACE SID against SD owner SID -> EqualSid( SID1, SID2) - match -> profit! not -> fail! --- snip --- ... 0023: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0014,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}},name=L"Global\\CorDBIPCSetupSyncEvent_36"} ) 0023: create_event() = 0 { handle=01c4 } ... 0025:trace:advapi:GetKernelObjectSecurity (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025:trace:ntdll:NtQuerySecurityObject (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025: get_security_object( handle=00c4, security_info=00000005 ) 0025: get_security_object() = 0 { sd_len=00000050, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}} } 0025:trace:ntdll:RtlGetDaclSecurityDescriptor (0x14ef40,0x33f7c3,0x33f7ec,0x33f7c2) 0025:trace:ntdll:RtlGetAce (0x14ef60,0,0x33f7f0) 0025:trace:ntdll:RtlLengthSid sid=0x14ef54 0025: open_event( access=001f0003, attributes=00000002, rootdir=0034, name=L"Global\\CorDBIPCLSEventAvailName_36" ) 0025: open_event() = 0 { handle=00c8 } ... --- snip --- "new" behaviour, where default process token is now like this: Token owner -> S-1-5-32-544 "BUILTIN\Administrators" (alias) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) --- snip --- ... 0024:trace:ntdll:NtOpenProcessTokenEx (0x1b0,0x00000008,0x00000000,0x318e6d0) 0024: open_token( handle=01b0, access=00000008, attributes=00000000, flags=00000000 ) 0024: open_token() = 0 { token=01b4 } ... 0024:trace:advapi:GetTokenInformation (0x1b4, TokenOwner, 0x184130, 20, 0x318e6e0): 0024:trace:ntdll:NtQueryInformationToken (0x1b4,4,0x184130,20,0x318e6e0) 0024: get_token_sid( handle=01b4, which_sid=00000004 ) 0024: get_token_sid() = 0 { sid_len=16, sid={S-1-5-32-544} } ... 0024: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0018,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}},name=L"Global\\CorDBIPCSetupSyncEvent_37"} ) 0024: create_event() = 0 { handle=01c8 } ... 0026:trace:advapi:GetKernelObjectSecurity (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026:trace:ntdll:NtQuerySecurityObject (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026: get_security_object( handle=00c8, security_info=00000005 ) 0026: get_security_object() = 0 { sd_len=00000058, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}} } ... --- snip --- Using the "admins" sid (alias) as token user in server/token.c:token_create_admin() instead of current "interactive" sid fixes the problem. Though I don't know if this is the right thing to do. I hope I provided enough infos and let Alexandre handle it ;-) To get detailed token infos/dumps you might be interested in this little console app, from cygwin's Corinna Vinschen ;-) http://www.mail-archive.com/cygwin@cygwin.com/msg71800.html It might provide useful information when run under different security principals. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 15

[Bug 21235] New: Monopoly Deluxe crash while starting
by wine-bugs＠winehq.org 19 Feb '21

19 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=21235 Summary: Monopoly Deluxe crash while starting Product: Wine Version: 1.1.35 Platform: x86 URL: http://cdn.media.zylom.com/games/2130/7/34/2964/monopo lydownload.exe OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: jaimerave(a)gmail.com Created an attachment (id=25512) --> (http://bugs.winehq.org/attachment.cgi?id=25512) backtrace After the initial screen, when you click in the button to start the game it just crash. I'm attaching the backtrace. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 14239] New: Sonos Desktop Controller: Crashes clicking in the Music Library list
by wine-bugs＠winehq.org 18 Feb '21

18 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=14239 Summary: Sonos Desktop Controller: Crashes clicking in the Music Library list Product: Wine Version: 1.1.0 Platform: PC URL: http://www.sonos.com/support/ OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dunc(a)dflock.co.uk Created an attachment (id=14528) --> (http://bugs.winehq.org/attachment.cgi?id=14528) Terminal trace of running Sonos Desktop Controller until crash. When running the Sonos Desktop Controller software, v2.5 - available here: http://www.sonos.com/support/, clicking around in the Music Library List on the right hand side causes the software to crash. Lots of other things also cause this software to crash running under Wine - it crashes a lot - but this crash is pretty repeatable. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 10

[Bug 18642] New: Silverlight About Window reports wrong App version
by wine-bugs＠winehq.org 18 Feb '21

18 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=18642 Summary: Silverlight About Window reports wrong App version Product: Wine Version: 1.1.22 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: minor Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: mellery(a)gmail.com The Silverlight about window reports the version number as 1.0.0.0, looking at the about window in Windows it is reported at 2.0.40115.0. It sounds like the Silverlight installer running in wine might not be writing the correct version number (and maybe other important keys) to the registry -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 14

[Bug 18321] New: FireFox 3.0.9 + Silverlight 2.0 = Crash
by wine-bugs＠winehq.org 18 Feb '21

18 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=18321 Summary: FireFox 3.0.9 + Silverlight 2.0 = Crash Product: Wine Version: 1.1.20 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P3 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dave(a)higherform.com Problem: Firefox 3.0.9 for Windows crashes when attempting to watch a Netflix movie online. Steps to reproduce: Install PlayOnLinux 3.4, Wine 1.1.20 Use PlayOnLinux's install other application feature to create a new wineprefix and install FireFox 3.0.9 into it Install Microsoft Fonts into newly created wine prefix Navigate to http://www.microsoft.com/express/visual%20Studio%20Control%20TourTestPage.h… Install Silverlight2.0.exe as prompted Refresh the page, and after the silverlight file finishes buffering, FireFox will crash Backtrace attached -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 26

[Bug 15845] New: Silverlight configuration tap "Application storage" causes freeze
by wine-bugs＠winehq.org 18 Feb '21

18 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=15845 Summary: Silverlight configuration tap "Application storage" causes freeze Product: Wine Version: 1.1.7 Platform: Other OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: mellery(a)gmail.com I'm using firefox to test silverlight, I'm streaming live video with it on mlb.com and its working good, but when I right click on the config options and select application storage the configuration window freezes and I have to kill it. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 18

[Bug 18345] New: Silverlight 2 installer fails
by wine-bugs＠winehq.org 18 Feb '21

18 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=18345 Summary: Silverlight 2 installer fails Product: Wine Version: 1.1.20 Platform: PC URL: http://silverlight.net OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msi AssignedTo: wine-bugs(a)winehq.org ReportedBy: kennybobs(a)o2.co.uk Created an attachment (id=20895) --> (http://bugs.winehq.org/attachment.cgi?id=20895) Wine 1.1.20 +file +msi Although others have had better luck, when I try to install Silverlight 2, the installer claims to complete successfully, but doesn't do anything. Tested with latest git and the same. Tested with 1.1.11 and it installs fine. Result of bisect: 86af876987a714cbd88b36858178d6ef1a36943e is first bad commit commit 86af876987a714cbd88b36858178d6ef1a36943e Author: Hans Leidekker <hans(a)codeweavers.com> Date: Tue Mar 24 10:26:42 2009 +0100 msi: Only apply a transform when its language id matches the system language id. Fix for office 2007 sp1 installer. :040000 040000 7e7d74822b91c0a5981893f375a05c22bb144360 800377a31f6cd5f9f9937cab3db26103ed282bf2 M dlls -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 37

[Bug 23461] New: Power Point Viewer 2007 Crashes to Open
by wine-bugs＠winehq.org 18 Feb '21

18 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=23461 Summary: Power Point Viewer 2007 Crashes to Open Product: Wine Version: 1.2-rc5 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: jpxsat(a)gmail.com Created an attachment (id=29279) --> (http://bugs.winehq.org/attachment.cgi?id=29279) backtrace A few days back (1.2-rc4 i think) it worked just fine. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 6

[Bug 16530] New: Power Point Viewer 2007
by wine-bugs＠winehq.org 18 Feb '21

18 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=16530 Summary: Power Point Viewer 2007 Product: Wine Version: 1.1.10 Platform: PC-x86-64 OS/Version: Linux Status: UNCONFIRMED Severity: blocker Priority: P1 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: amaciel81(a)gmail.com PowerPoint Viewer 2007 stops to work. There is reports of application working well in 1.1.5, but don't working in 1.1.8, then, I think this is a severe regression. Installation is fine, but when I try to execute, the following message is displayed: fixme:heap:HeapSetInformation 0x110000 1 (nil) 0 No Window is displayed. Thanks a lot, Alexandre -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 30

[Bug 10820] New: Unhandled division by zero in ALSA_AddRingMessage
by wine-bugs＠winehq.org 18 Feb '21

18 Feb '21

http://bugs.winehq.org/show_bug.cgi?id=10820 Summary: Unhandled division by zero in ALSA_AddRingMessage Product: Wine Version: 0.9.51. Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-multimedia AssignedTo: wine-bugs(a)winehq.org ReportedBy: sarulezzz(a)inbox.ru Created an attachment (id=9686) --> (http://bugs.winehq.org/attachment.cgi?id=9686) dump Microsoft Office PowerPoint Viewer 2007 randomly crashed with dump (in attachment). If I set OSS as audio driver in winecfg PowerPoint Viewer works fine. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 26

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

wine-bugs September 2010