https://bugs.winehq.org/show_bug.cgi?id=36822
Bug ID: 36822
Summary: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys'
driver crashes on unimplemented function
ntoskrnl.exe.KeSetSystemAffinityThread
Product: Wine
Version: 1.7.21
Hardware: x86
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: ntoskrnl
Assignee: wine-bugs(a)winehq.org
Reporter: focht(a)gmx.net
Hello folks,
as the summary says ...
--- snip ---
...
fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ffc 0x53e5bc) stub
wine: Call from 0x7b83adcf to unimplemented function
ntoskrnl.exe.KeSetSystemAffinityThread, aborting
--- snip ---
MSDN:
http://msdn.microsoft.com/en-us/library/windows/hardware/ff553267%28v=vs.85…
--- quote ---
The KeSetSystemAffinityThread routine sets the system affinity of the current
thread.
VOID KeSetSystemAffinityThread(
_In_ KAFFINITY Affinity
);
Parameters
Affinity [in]
A KAFFINITY-typed variable that specifies the new system affinity of the
current thread.
Return value
None
--- quote ---
$ sha1sum mtasa-1.3.5.exe
7f186543892ef0877cd568ce0935c5e9641578c8 mtasa-1.3.5.exe
$ du -sh mtasa-1.3.5.exe
21M mtasa-1.3.5.exe
$ wine --version
wine-1.7.21-3-gbf72c67
Regards
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36821
Bug ID: 36821
Summary: Multi Theft Auto: San Andreas 1.3.5 'FairplayKD.sys'
driver continuously spams terminal due to
'PsLookupProcessByProcessId' stub
Product: Wine
Version: 1.7.20
Hardware: x86
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: ntoskrnl
Assignee: wine-bugs(a)winehq.org
Reporter: focht(a)gmx.net
Hello folks,
the kernel driver is part of 'Multi Theft Auto' v1.3.5
Release notes: https://forum.mtasa.com/viewtopic.php?f=31&t=71767
There is a constant spam on terminal:
--- snip ---
...
fixme:ntoskrnl:PsLookupProcessByProcessId (0x4 0x53e5bc) stub
fixme:ntoskrnl:PsLookupProcessByProcessId (0x8 0x53e5bc) stub
fixme:ntoskrnl:PsLookupProcessByProcessId (0xc 0x53e5bc) stub
fixme:ntoskrnl:PsLookupProcessByProcessId (0x10 0x53e5bc) stub
fixme:ntoskrnl:PsLookupProcessByProcessId (0x14 0x53e5bc) stub
fixme:ntoskrnl:PsLookupProcessByProcessId (0x18 0x53e5bc) stub
fixme:ntoskrnl:PsLookupProcessByProcessId (0x1c 0x53e5bc) stub
...
fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ff8 0x53e5bc) stub
fixme:ntoskrnl:PsLookupProcessByProcessId (0x7ffc 0x53e5bc) stub
fixme:thread:NtQueryInformationThread info class 22 not supported yet
fixme:thread:NtQueryInformationThread info class 22 not supported yet
fixme:thread:NtQueryInformationThread info class 22 not supported yet
fixme:thread:NtQueryInformationThread info class 22 not supported yet
fixme:thread:NtQueryInformationThread info class 22 not supported yet
fixme:thread:NtQueryInformationThread info class 22 not supported yet
fixme:thread:NtQueryInformationThread info class 22 not supported yet
fixme:thread:NtQueryInformationThread info class 22 not supported yet
fixme:thread:NtQueryInformationThread info class 22 not supported yet
fixme:ntoskrnl:PsLookupProcessByProcessId (0x4 0x53e5bc) stub
fixme:ntoskrnl:PsLookupProcessByProcessId (0x8 0x53e5bc) stub
...
<repeats forever>
--- snip ---
'FairplayKD.sys' kernel driver code:
--- snip ---
00541F06 8BFF MOV EDI,EDI
00541F08 55 PUSH EBP
00541F09 8BEC MOV EBP,ESP
00541F0B 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8] ; process id to lookup
00541F0E 53 PUSH EBX
00541F0F 56 PUSH ESI
00541F10 F6C1 03 TEST CL,3
00541F13 75 42 JNZ SHORT 00541F57
00541F15 8B5D 0C MOV EBX,DWORD PTR SS:[EBP+C]
00541F18 F6C3 03 TEST BL,3
00541F1B 75 3A JNZ SHORT 00541F57
00541F1D B8 E8FD0000 MOV EAX,0FDE8 ; max pid (handle)
00541F22 3BC8 CMP ECX,EAX
00541F24 77 31 JA SHORT 00541F57
00541F26 3BD8 CMP EBX,EAX
00541F28 77 2D JA SHORT 00541F57
00541F2A 3BCB CMP ECX,EBX
00541F2C 73 29 JNB SHORT 00541F57
00541F2E 8BF1 MOV ESI,ECX
pid_loop:
00541F30 8D45 08 LEA EAX,DWORD PTR SS:[EBP+8]
00541F33 50 PUSH EAX
00541F34 56 PUSH ESI
00541F35 FF15 8C8A5400 CALL DWORD PTR DS:[548A8C] ;
PsLookupProcessByProcessId
00541F3B 85C0 TEST EAX,EAX
00541F3D 74 0B JE SHORT 00541F4A
00541F3F 83C6 04 ADD ESI,4
00541F42 3BF3 CMP ESI,EBX
00541F44 72 EA JB SHORT 00541F30
00541F46 8BC3 MOV EAX,EBX
00541F48 EB 0F JMP SHORT 00541F59
00541F4A 8B4D 08 MOV ECX,DWORD PTR SS:[EBP+8]
00541F4D FF15 888A5400 CALL DWORD PTR DS:[548A88] ; ObfDereferenceObject
00541F53 8BC6 MOV EAX,ESI
00541F55 EB 02 JMP SHORT 00541F59
00541F57 33C0 XOR EAX,EAX
00541F59 5E POP ESI
00541F5A 5B POP EBX
00541F5B 5D POP EBP
00541F5C C2 0800 RETN 8
--- snip ---
If it fails (Wine stub in this case) just go for the next process id ... genius
logic at work :)
Silencing via "trace once" might be ok for this - even if the loop is still
getting executed.
$ sha1sum mtasa-1.3.5.exe
7f186543892ef0877cd568ce0935c5e9641578c8 mtasa-1.3.5.exe
$ du -sh mtasa-1.3.5.exe
21M mtasa-1.3.5.exe
$ wine --version
wine-1.7.21-3-gbf72c67
Regards
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=11747
Summary: CorelDRAW Graphics Suite X4 Trial installer crashes
Product: Wine
Version: 0.9.56.
Platform: PC
URL: http://www.corel.com/servlet/Satellite?pagename=CorelCom
/ProcessLayout&lc=en&ppg=CorelCorp/Trials/DownloadContai
ner
OS/Version: Linux
Status: NEW
Keywords: download, Installer
Severity: normal
Priority: P2
Component: msxml3
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: truiken(a)gmail.com
$ wine CorelDRAWGraphicsSuiteX4Installer_EN.exe
wine: Unhandled page fault on read access to 0x00000000 at address 0x7ddf3f47
(thread 0016), starting debugger...
Unhandled exception: page fault on read access to 0x00000000 in 32-bit code
(0x7ddf3f47).
Backtrace:
=>1 0x7ddf3f47 queryresult_get_length+0x57(iface=0x130e38, listLength=0x34f58c)
[/home/truiken/wine/dlls/msxml3/queryresult.c:277] in msxml3 (0x0034f554)
2 0x0035401b in setupxml (+0x401b) (0x005f4650)
3 0x00430049 in setup (+0x30049) (0x002f002f)
4 0x00000000 (0x00000000)
0x7ddf3f47 queryresult_get_length+0x57
[/home/truiken/wine/dlls/msxml3/queryresult.c:277] in msxml3: movl
0x0(%eax),%edx
277 *listLength = This->result->nodesetval->nodeNr;
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=22706
Summary: Stylizer: cannot start the program
Product: Wine
Version: 1.1.44
Platform: x86-64
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: shnatsel(a)gmail.com
Created an attachment (id=27979)
--> (http://bugs.winehq.org/attachment.cgi?id=27979)
Console output
Stylizer
(http://appdb.winehq.org/objectManager.php?sClass=application&iId=11499)
doesn't start - wine prints "fixme:..." messages to console. I've used
Winetricks to install .NET framework, but since it seems to be Wine problem,
I'm reporting this as Wine bug.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=30397
Bug #: 30397
Summary: Spoon Studio 2011 (ex Xenocode) application sandboxing
scheme needs support for NtSetInformationFile class
FileDispositionInformation (Stylizer 5.x, Visual CSS
editor)
Product: Wine
Version: 1.5.1
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: ntdll
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: focht(a)gmx.net
Classification: Unclassified
Hello,
Stylizer 5.x (Visual CSS editor) is wrapped in Xenocode like sandboxing scheme,
now called "Spoon Studio 2011".
The usual native API hooking in several places.
It seems not very happy about some unimplemented NtSetInformationFile classes.
---snip ---
...
0025:Call ntdll.RtlInitUnicodeString(0032f334,008b3068
L"\\??\\C:\\users\\focht\\Local Settings\\Application
Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58\\XSandbox.bin.__tmp__")
ret=0034d108
0025:Ret ntdll.RtlInitUnicodeString() retval=0032f334 ret=0034d108
0025:Call
ntdll.NtOpenFile(0032f308,00110100,0032f31c,0032f2f8,00000007,00000020)
ret=0034da48
0025:Ret ntdll.NtOpenFile() retval=00000000 ret=0034da48
0025:Call
ntdll.NtSetInformationFile(00000068,0032f300,0032f2cc,00000028,00000004)
ret=0034da84
0025:Ret ntdll.NtSetInformationFile() retval=00000000 ret=0034da84
0025:Call
ntdll.NtSetInformationFile(00000068,0032f300,0032f31b,00000001,0000000d)
ret=0034da9d
0025:fixme:ntdll:NtSetInformationFile Unsupported class (13)
0025:Ret ntdll.NtSetInformationFile() retval=c0000002 ret=0034da9d
0025:Call ntdll.NtClose(00000068) ret=0036b1d3
0025:Ret ntdll.NtClose() retval=00000000 ret=0036b1d3
...
0025:Call user32.MessageBoxW(00000000,008b2f70 L"The sandbox at
\\??\\C:\\users\\focht\\Local Settings\\Application
Data\\Skybound\\Stylizer\\Sandbox\\2011.12.15T20.58 is corrupt or inaccessible.
Please check the location and try again.",008a3f48 L"Spoon Studio
2011",00000010) ret=00396aa6
...
---snip ---
MSDN (ZwSetInformationFile):
http://msdn.microsoft.com/en-us/library/windows/hardware/ff567096%28v=vs.85…
class 13 -> FILE_DISPOSITION_INFORMATION:
http://msdn.microsoft.com/en-us/library/windows/hardware/ff545765%28v=vs.85…
Also interesting read: Cygwin's Corinna Vinschen and some MS guy about deletion
semantics ;-)
http://www.tech-archive.net/Archive/Development/microsoft.public.win32.prog…
--- quote ---
First off, FILE_DELETE_ON_CLOSE
and FileDispositionInformation are NOT the same thing.
There are really two parts to delete. The first part is to logically
delete the file. This consists of the file system marking the file as
deleted and then waiting for the last handle to close. When a file is
marked as deleted, many operations (including new opens) fail. Once the
last handle as closed, the actual delete of the file can take place.
When you open a file with FILE_DELETE_ON_CLOSE, the file is left as is.
Neither part of delete is done. The only thing done is to remember that
when this handle is closed, the file should be deleted. All operations on
the file will proceed as normal. When the handle marked as delete on close
is closed, the file is logically deleted. If that handle was the last
handle, the file will also actually be deleted.
When you use FileDispositionInformation to set a file to deleted, the file
is logically deleted right then. Any new opens for the file and many other
operations will fail. The file system will not complete the actual removal
of the file until the last handle is closed, though.
--- quote ---
Regards
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=24018
Summary: Cygwin 1.7.6 installer crashes at start of postinstall
Product: Wine
Version: 1.3.0
Platform: x86
URL: http://cygwin.com
OS/Version: Linux
Status: NEW
Keywords: download, Installer
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: dank(a)kegel.com
Running the cygwin installer with today's git in a clean .wine
aborts when it gets to the postinstall stage:
...
Installing file cygfile:///etc/postinstall/update-info-dir.sh
AddAccessAllowedAce(, group) failed: 1337
AddAccessAllowedAce(, group) failed: 1337
Visited: 51 nodes out of 1789 while creating dependency order.
Dependency order of packages: base-cygwin base-passwd cygwin libgcc1 libiconv2
libintl8 alternatives alternatives libattr1 libgmp3 libsigsegv2 terminfo0
libncurses8 texinfo _update-info-dir gawk tzcode coreutils terminfo libncurses9
libreadline7 bash findutils sed base-files libbz2_1 bzip2 libpopt0 libstdc++6
cygutils groff gzip libncurses10 less man cygwin-doc dash diffutils editrights
gettext libpcre0 grep ipc-utils liblzma1 login rebase run xz tar which zlib0
wine: Unhandled page fault on write access to 0x00000001 at address 0x610074
(thread 0028), starting debugger...
Usage:
winedbg [ [ --gdb ] [ prog-name [ prog-args ] | <num> | file.mdmp |
--help ]
(bug 21424 seems to still be there, too, if you forge ahead and run bash
despite postinstall not having run.)
This is a dogfood bug. I was going to try to run gcj in cygwin to look at some
other wine bug, but curses! I was foiled.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.