https://bugs.winehq.org/show_bug.cgi?id=36283
Bug ID: 36283
Summary: valgrind shows an invalid read in imm32/tests/imm32.c
Product: Wine
Version: 1.7.18
Hardware: x86
OS: Linux
Status: NEW
Keywords: download, source
Severity: normal
Priority: P2
Component: imm32
Assignee: wine-bugs(a)winehq.org
Reporter: austinenglish(a)gmail.com
==28442== Invalid read of size 4
==28442== at 0x400AD40: memcpy (in
/usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==28442== by 0x4ED078F6: FT_Stream_ReadAt (in
/usr/lib/libfreetype.so.6.10.2)
==28442== by 0x4ED45CA7: ??? (in /usr/lib/libfreetype.so.6.10.2)
==28442== by 0x4ED06223: FT_Load_Sfnt_Table (in
/usr/lib/libfreetype.so.6.10.2)
==28442== by 0x50B72E9: get_font_data (freetype.c:4422)
==28442== by 0x50B89E7: get_gasp_flags (freetype.c:4873)
==28442== by 0x50BAF28: freetype_SelectFont (freetype.c:5489)
==28442== by 0x54C7F20: X11DRV_SelectFont (init.c:319)
==28442== by 0x54FE488: xrenderdrv_SelectFont (xrender.c:858)
==28442== by 0x50A1F7F: FONT_SelectObject (font.c:723)
==28442== by 0x50C5C37: SelectObject (gdiobj.c:1174)
==28442== by 0x4B70F46: get_text_metr_size (sysparams.c:472)
==28442== by 0x4B717AC: normalize_nonclientmetrics (sysparams.c:634)
==28442== by 0x4B73F45: SystemParametersInfoW (sysparams.c:1583)
==28442== by 0x4B77496: GetSystemMetrics (sysparams.c:2414)
==28442== by 0x4B77647: GetSystemMetrics (sysparams.c:2433)
==28442== by 0x4B8D9D7: WINPOS_GetMinMaxInfo (winpos.c:774)
==28442== by 0x4B859BB: WIN_CreateWindowEx (win.c:1568)
==28442== by 0x4B862E0: CreateWindowExA (win.c:1719)
==28442== by 0x4967EC9: test_ImmDefaultHwnd (imm32.c:708)
==28442== Address 0x582d5fc is on thread 1's stack
==28442==
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=42546
Bug ID: 42546
Summary: DSOUND_PrimaryOpen() incorrect set buf size
Product: Wine
Version: 2.2
Hardware: x86
OS: FreeBSD
Status: UNCONFIRMED
Severity: major
Priority: P2
Component: directx-dsound
Assignee: wine-bugs(a)winehq.org
Reporter: rozhuk.im(a)gmail.com
Wine (1.x, 2.x) crashes on FreeBSD 11 release with wineoss.drv
With winealsa.drv on FreeBSD 11 - OK.
With winoss.drv on FreeBSD 10 - OK.
I made some investigation and make patch to fix problem.
I test it and it work. But looks like dsound needs review.
DSOUND_ReopenDevice() call DSOUND_PrimaryOpen() with forcewave = FALSE
DSOUND_PrimaryOpen()
calculate:
new_buflen = device->buflen;
new_buflen -= new_buflen % wfx->nBlockAlign;
(wrong alig code, but newer mind)
Then calculated
DWORD alloc_len = frames * sizeof(float);
and allocated buffer
if (device->buffer)
newbuf = HeapReAlloc(GetProcessHeap(), 0, device->buffer,
alloc_len);
else
newbuf = HeapAlloc(GetProcessHeap(), 0, alloc_len);
final: save new buffer pointer and size:
device->buffer = newbuf;
device->buflen = new_buflen;
!!!
We allocate 6144 (0x00001800) bytes but set buf size to 65536.
DSOUND_MixToPrimary() and norm16() in DSOUND_mixthread use device->buflen and
corrupt heap after first call.
First I make more proper alignment:
new_buflen = (device->buflen + wfx->nBlockAlign);
new_buflen -= (new_buflen % wfx->nBlockAlign);
and change calculation to:
DWORD alloc_len = ((new_buflen / wfx->nBlockAlign) * sizeof(float));
It works.
Next I replace alloc_len->new_buflen and return original calc code:
new_buflen = (frames * sizeof(float));
This work but sound with a bit noise and game crash after some time.
Finnaly:
new_buflen = ((frames + 1) * wfx->nBlockAlign * sizeof(float));
This work OK.
This not looks like proper buf size.
Also in DSOUND_ReopenDevice() after DSOUND_PrimaryOpen():
device->fraglen = frag_frames * wfx->nBlockAlign;
device->aclen = aclen_frames * wfx->nBlockAlign;
device->buflen should somehow be synced with this.
606723.622:0034:0035:trace:heap:RtlAllocateHeap (0x110000,70000062,00000030):
returning 0x11d438
606723.622:0034:0035:trace:oss:AudioClient_Start (0x1ecb38) now playing...
606723.622:0034:0035:trace:oss:AudioClient_GetStreamLatency
(0x1ecb38)->(0x335f590)
606723.622:0034:0035:trace:oss:AudioClient_GetBufferSize
(0x1ecb38)->(0x335f58c)
606723.622:0034:0035:trace:oss:AudioClient_GetBufferSize buffer size: 3840
606723.622:0034:0035:trace:dsound:DSOUND_ReopenDevice period 11 ms fraglen 2048
buflen 6144
606723.622:0034:0035:trace:dsound:DSOUND_PrimaryOpen (0x11e4d8)
606723.622:0034:0035:trace:heap:RtlAllocateHeap (0x110000,70000062,00001800):
returning 0x1fc1e8
606723.622:0034:0035:trace:dsound:DSOUND_PrimaryOpen buflen: 65536, fraglen: 0
606723.622:0034:0035:trace:oss:AudioClient_IsFormatSupported (0x1ecb38)->(0,
0x335f650, 0x335f64c)
...
606723.688:0034:003e:trace:dsound:DSOUND_mixthread (0x11e4d8)
606723.688:0034:003e:trace:dsound:DSOUND_PerformMix (0x11e4d8)
606723.688:0034:003e:trace:oss:AudioClient_GetCurrentPadding
(0x1ecb38)->(0x1448f6b8)
606723.688:0034:003e:trace:oss:AudioClient_GetCurrentPadding pad: 0
606723.688:0034:003e:warn:dsound:DSOUND_PerformMix Probable buffer underrun
606723.688:0034:003e:trace:oss:AudioRenderClient_GetBuffer (0x1ecb38)->(1536,
0x1448f6b0)
606723.690:0034:003e:trace:heap:RtlAllocateHeap (0x110000,70000062,00001810):
returning 0x141908b0
606723.690:0034:003e:trace:dsound:DSOUND_MixToPrimary (0,6144)
606723.690:0034:003e:trace:dsound:norm16 0x1fc1e8 - 0x141908b0 6144
606723.690:0034:003e:trace:oss:AudioRenderClient_ReleaseBuffer
(0x1ecb38)->(1536, 0)
606723.690:0034:003e:trace:oss:AudioRenderClient_ReleaseBuffer writen: 6144
606723.690:0034:003d:err:heap:HEAP_ValidateInUseArena Heap 0x110000: block
0x1fc1e8 tail overwritten at 0x1fd9e8 (byte 0/8 == 0x00)
Heap: 0x110000
...
Sub-heap 0x110014: base=0x110000 size=00110000 committed=00110000
Block Arena Stat Size Id
...
0x1f0118 00bedead pend 00000430
0x1f0550 00bedead pend 00002c18
0x1f3170 00bedead pend 00000430
0x1f35a8 00bedead pend 00008c30
0x1fc1e0 00455355 used 00001808
0x1fd9f0 00000000 pend 00000000
0x1fd9f8 00000000 pend 00000000
0x1fda00 00000000 pend 00000000
0x1fda08 00000000 pend 00000000
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36354
Bug ID: 36354
Summary: valgrind shows a leak in ddraw/tests/dsurface.c
Product: Wine
Version: 1.7.18
Hardware: x86
OS: Linux
Status: NEW
Keywords: download, source, testcase
Severity: normal
Priority: P2
Component: directx-d3d
Assignee: wine-bugs(a)winehq.org
Reporter: austinenglish(a)gmail.com
==8690== 24 bytes in 1 blocks are definitely lost in loss record 250 of 943
==8690== at 0x7BC50A9B: RtlAllocateHeap (heap.c:255)
==8690== by 0x4A868D9: ddraw7_CreatePalette (ddraw.c:3385)
==8690== by 0x4A86D09: ddraw1_CreatePalette (ddraw.c:3458)
==8690== by 0x4DB8A62: PaletteTest (dsurface.c:2247)
==8690== by 0x4DC8FA4: func_dsurface (dsurface.c:3962)
==8690== by 0x4DDD6DC: run_test (test.h:584)
==8690== by 0x4DDDACB: main (test.h:654)
==8690==
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=28766
Bug #: 28766
Summary: DIB engine multiple invalid memory accesses
Product: Wine
Version: 1.3.30
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: gdi32
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: dank(a)kegel.com
Classification: Unclassified
In gdi32/tests, running "make bitmap.ok dib.ok font.ok pen.ok"
makes Valgrind go bonkers. Huw asked for a bug to track these,
and said one big bug would suffice.
I'll attach the initial log, and will do more valgrind runs on request.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=26042
Summary: advapi32/crypt tests show two leaks under valgrind
Product: Wine
Version: 1.3.13
Platform: x86
OS/Version: Linux
Status: NEW
Keywords: download, source, testcase
Severity: minor
Priority: P2
Component: advapi32
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: austinenglish(a)gmail.com
12 bytes in 1 blocks are definitely lost
at notify_alloc (heap.c:254)
by RtlAllocateHeap (heap.c:1701)
by HeapAlloc (heap.c:267)
by GlobalAlloc (heap.c:360)
by LocalAlloc (heap.c:960)
by CryptGenKey (crypt.c:1433)
by test_incorrect_api_usage (crypt.c:241)
by func_crypt (crypt.c:1130)
by run_test (test.h:556)
by main (test.h:624)
...
996 bytes in 1 blocks are definitely lost
at notify_alloc (heap.c:254)
by RtlAllocateHeap (heap.c:1701)
by ???
by ???
by ???
by CryptGenKey (crypt.c:1441)
by test_incorrect_api_usage (crypt.c:241)
by func_crypt (crypt.c:1130)
by run_test (test.h:556)
by main (test.h:624)
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36655
Bug ID: 36655
Summary: valgrind shows an unitialized variable in
mountmgr.sys/device.c (d3d9/tests/d3d9ex.c)
Product: Wine
Version: 1.7.19
Hardware: x86
OS: Linux
Status: NEW
Keywords: download, source, testcase, valgrind
Severity: normal
Priority: P2
Component: mountmgr.sys
Assignee: wine-bugs(a)winehq.org
Reporter: austinenglish(a)gmail.com
==6715== Thread 4:
==6715== Syscall param writev(vector[...]) points to uninitialised byte(s)
==6715== at 0x431A82C: writev (writev.c:54)
==6715== by 0x7BC7FE0B: send_request (server.c:213)
==6715== by 0x7BC7FF9D: wine_server_call (server.c:294)
==6715== by 0x5B66A38: put_message_in_queue (message.c:3141)
==6715== by 0x5B66DE9: send_inter_thread_message (message.c:3209)
==6715== by 0x5B670CA: send_message (message.c:3277)
==6715== by 0x5B67511: SendMessageTimeoutW (message.c:3414)
==6715== by 0x5B692FD: bcast_childwindow (message.c:4265)
==6715== by 0x5B9B07A: EnumDesktopWindows (win.c:3336)
==6715== by 0x5B6967E: bcast_desktop (message.c:4315)
==6715== by 0x5BA9587: EnumDesktopsW (winstation.c:454)
==6715== by 0x5B697DB: bcast_winsta (message.c:4329)
==6715== by 0x5BA8CFB: EnumWindowStationsW (winstation.c:238)
==6715== by 0x5B69B06: BroadcastSystemMessageExW (message.c:4398)
==6715== by 0x5B698F9: BroadcastSystemMessageW (message.c:4350)
==6715== by 0x5710683: send_notify (device.c:186)
==6715== by 0x571214A: add_dos_device (device.c:812)
==6715== by 0x570F70C: udisks2_add_device (dbus.c:479)
==6715== by 0x570F90D: udisks2_add_devices (dbus.c:517)
==6715== by 0x570FEC6: dbus_thread (dbus.c:717)
==6715== Address 0x599e5ce is on thread 1's stack
==6715== Uninitialised value was created by a stack allocation
==6715== at 0x571062B: send_notify (device.c:178)
==6715==
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36162
Bug ID: 36162
Summary: valgrind shows several leaks in
programs/cmd/tests/batch.c
Product: Wine
Version: 1.7.17
Hardware: x86
OS: Linux
Status: NEW
Keywords: download, source, testcase
Severity: normal
Priority: P2
Component: cmd
Assignee: wine-bugs(a)winehq.org
Reporter: austinenglish(a)gmail.com
==19001== 24 bytes in 2 blocks are definitely lost in loss record 77 of 302
==19001== at 0x7BC4C735: notify_alloc (heap.c:255)
==19001== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716)
==19001== by 0x4B2544E: heap_alloc (wcmdmain.c:444)
==19001== by 0x4B1E203: WCMD_pushoperator (builtins.c:3615)
==19001== by 0x4B1F18F: WCMD_handleExpression (builtins.c:3932)
==19001== by 0x4B1F84D: WCMD_setshow_env (builtins.c:4098)
==19001== by 0x4B282D6: WCMD_execute (wcmdmain.c:1553)
==19001== by 0x4B29F36: WCMD_process_commands (wcmdmain.c:2294)
==19001== by 0x4B130E0: WCMD_batch (batch.c:95)
==19001== by 0x4B27185: WCMD_run_program (wcmdmain.c:1187)
==19001== by 0x4B28467: WCMD_execute (wcmdmain.c:1618)
==19001== by 0x4B29F36: WCMD_process_commands (wcmdmain.c:2294)
==19001== by 0x4B2ADC4: wmain (wcmdmain.c:2590)
==19001== by 0x4B2B328: __wine_spec_exe_wentry (exe_wentry.c:36)
==19001== by 0x7B864247: ??? (process.c:1045)
==19001== by 0x7B864394: start_process (process.c:1097)
==19001== by 0x7BC87087: ??? (signal_i386.c:2571)
==19001== by 0x7BC870D0: call_thread_func (signal_i386.c:2630)
==19001== by 0x7BC87065: ??? (signal_i386.c:2571)
==19001== by 0x7BC5A1C0: start_process (loader.c:2840)
==19001==
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
http://bugs.winehq.org/show_bug.cgi?id=26070
Summary: user32/class tests show some valgrind warnings
Product: Wine
Version: 1.3.13
Platform: x86
OS/Version: Linux
Status: NEW
Keywords: download, source, testcase
Severity: minor
Priority: P2
Component: user32
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: austinenglish(a)gmail.com
Invalid read of size 2
at RtlImageNtHeader (loader.c:2508)
by RtlImageDirectoryEntryToData (loader.c:2684)
by find_entry (resource.c:189)
by LdrFindResource_U (resource.c:303)
by find_resourceW (resource.c:139)
by FindResourceExW (resource.c:183)
by FindResourceW (resource.c:192)
by LoadMenuW (menu.c:4359)
by WIN_CreateWindowEx (win.c:1372)
by CreateWindowExA (win.c:1550)
by check_instance_ (class.c:266)
by test_instances (class.c:441)
by func_class (class.c:995)
by run_test (test.h:556)
by main (test.h:624)
Address 0x12345678 is not stack'd, malloc'd or (recently) free'd
...
28 bytes in 1 blocks are definitely lost
at notify_alloc (heap.c:254)
by RtlAllocateHeap (heap.c:1701)
by DIALOG_get_info (defdlg.c:335)
by DIALOG_CreateIndirect (dialog.c:669)
by CreateDialogIndirectParamAorW (dialog.c:755)
by CreateDialogIndirectParamA (dialog.c:764)
by CreateDialogParamA (dialog.c:729)
by CreateDialogParamTest (class.c:878)
by func_class (class.c:990)
by run_test (test.h:556)
by main (test.h:624)
...
42,420 bytes in 21 blocks are possibly lost
at notify_alloc (heap.c:254)
by RtlAllocateHeap (heap.c:1701)
by get_tls_data (test.h:240)
by winetest_set_location (test.h:275)
by check_instance_ (class.c:263)
by thread_proc (class.c:292)
by ??? (signal_i386.c:2473)
by call_thread_entry_point (signal_i386.c:2499)
by start_thread (thread.c:404)
by start_thread (in /lib/libpthread-2.11.2.so)
by clone (in /lib/libc-2.11.2.so)
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
https://bugs.winehq.org/show_bug.cgi?id=36328
Bug ID: 36328
Summary: valgrind shows a leak in rsaenh/tests/rsaenh.c
Product: Wine
Version: 1.7.18
Hardware: x86
OS: Linux
Status: NEW
Keywords: download, source, testcase
Severity: normal
Priority: P2
Component: -unknown
Assignee: wine-bugs(a)winehq.org
Reporter: austinenglish(a)gmail.com
==16347== 88,188 (416 direct, 87,772 indirect) bytes in 7 blocks are definitely
lost in loss record 2,195 of 2,200
==16347== at 0x4006B11: malloc (in
/usr/lib/valgrind/vgpreload_memcheck-x86-linux.so)
==16347== by 0x4ED03DAB: ??? (in /usr/lib/libfreetype.so.6.10.2)
==16347== by 0x4ED08C5A: ft_mem_qalloc (in /usr/lib/libfreetype.so.6.10.2)
==16347== by 0x4ED08CCE: ft_mem_alloc (in /usr/lib/libfreetype.so.6.10.2)
==16347== by 0x4ED0DF8E: FT_Add_Module (in /usr/lib/libfreetype.so.6.10.2)
==16347== by 0x4ED040FE: FT_Add_Default_Modules (in
/usr/lib/libfreetype.so.6.10.2)
==16347== by 0x4ED04169: FT_Init_FreeType (in
/usr/lib/libfreetype.so.6.10.2)
==16347== by 0x6296169: ???
==16347== by 0x6298F85: ???
==16347== by 0x62B4A52: ???
==16347== by 0x7BC53B24: ??? (in
/home/austin/wine-valgrind-known/dlls/ntdll/ntdll.dll.so)
==16347== by 0x7BC5644E: MODULE_InitDLL (loader.c:1068)
==16347== by 0x7BC56AE7: process_attach (loader.c:1157)
==16347== by 0x7BC56AB9: process_attach (loader.c:1149)
==16347== by 0x7BC56AB9: process_attach (loader.c:1149)
==16347== by 0x7BC56AB9: process_attach (loader.c:1149)
==16347== by 0x7BC596E6: LdrLoadDll (loader.c:2129)
==16347== by 0x7B8581FE: load_library (module.c:933)
==16347== by 0x7B8582C9: LoadLibraryExW (module.c:990)
==16347== by 0x7B8584AC: LoadLibraryW (module.c:1032)
==16347==
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.