August 2017 - wine-bugs

[Bug 34943] New: Visual C++ 2010 Express web installer exits silently during download of prerequisites
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=34943 Bug #: 34943 Summary: Visual C++ 2010 Express web installer exits silently during download of prerequisites Product: Wine Version: 1.7.6 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: winhttp AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: … [View More]Unclassified Hello folks, might be a regression ... I remember the download of prerequisites was pretty stable some time ago (after months of instabilities). Writes past the end of buffer. --- snip --- Unhandled exception: page fault on write access to 0x00473000 in 32-bit code (0xf74a6bc8). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:f74a6bc8 ESP:043be934 EBP:043be978 EFLAGS:00010202( R- -- I - - - ) EAX:02550d80 EBX:f74d7b30 ECX:00000f58 EDX:00472fa0 ESI:00017000 EDI:00000080 Stack dump: 0x043be934: 003d0f00 7e3e6000 7e3cb069 00472f98 0x043be944: 02550d7c 00001000 7e3cbd95 02550cb0 0x043be954: 00040000 02507e88 043be980 7bcd0000 0x043be964: 043be9f0 00017000 00001000 7bcd0000 0x043be974: 00000000 043be9b8 7e3cbfda 02550cb0 0x043be984: 0045bf98 0002bcc0 00000000 00000001 000c: sel=0067 base=00000000 limit=00000000 16-bit --x Backtrace: =>0 0xf74a6bc8 __memcpy_ssse3_rep+0x568() in libc.so.6 (0x043be978) 1 0x7e3cb069 read_data+0xba(request=0x2550cb0, buffer=0x45bf98, size=0x2bcc0, read=0x0(nil), async=0x1) [/home/focht/projects/wine/wine-git/dlls/winhttp/request.c:2119] in winhttp (0x043be978) 2 0x7e3cbfda task_read_data+0x3f(task=0x2508508) [/home/focht/projects/wine/wine-git/dlls/winhttp/request.c:2460] in winhttp (0x043be9b8) 3 0x7e3c50fa task_thread+0x1f(param=0x2508508) [/home/focht/projects/wine/wine-git/dlls/winhttp/request.c:184] in winhttp (0x043be9e8) 4 0x7bc8efae worker_thread_proc+0x14a(param=<couldn't compute location>) [/home/focht/projects/wine/wine-git/dlls/ntdll/threadpool.c:114] in ntdll (0x043bea48) 5 0x7bc85c04 call_thread_func_wrapper+0xb() in ntdll (0x043bea68) 6 0x7bc85c4d call_thread_func+0x3e(entry=0x7bc8ee63, arg=0x0(nil), frame=0x43beb68) [/home/focht/projects/wine/wine-git/dlls/ntdll/signal_i386.c:2602] in ntdll (0x043beb48) 7 0x7bc85be2 call_thread_entry_point+0x11() in ntdll (0x043beb68) 8 0x7bc8ca58 start_thread+0x165(info=0x81fdcfb8) [/home/focht/projects/wine/wine-git/dlls/ntdll/thread.c:417] in ntdll (0x043bf3a8) 9 0xf75229da start_thread+0xc9() in libpthread.so.0 (0x043bf468) 10 0xf7454bfe __clone+0x5d() in libc.so.6 (0x00000000) ... Wine-dbg>frame 1 2120 remove_data( request, count ); Wine-dbg>info locals 0x7e3cb068 read_data+0xba: (043be978) request_t* request=0x2550cb0 (parameter [EBP+8]) void* buffer=0x45bf98 (parameter [EBP+12]) DWORD size=0x2bcc0 (parameter [EBP+16]) DWORD* read=0x0(nil) (parameter [EBP+20]) BOOL async=0x1 (parameter [EBP+24]) int count=0x1000 (local [EBP-12]) int bytes_read=0x17000 (local [EBP-16]) --- snip --- Source of crash: http://source.winehq.org/git/wine.git/blob/e894c897d52c3e5852498164e246b473… --- snip --- 2105 static BOOL read_data( request_t *request, void *buffer, DWORD size, DWORD *read, BOOL async ) 2106 { 2107 int count, bytes_read = 0; 2108 2109 if (end_of_read_data( request )) goto done; 2110 2111 while (size) 2112 { 2113 if (!(count = get_available_data( request ))) 2114 { 2115 if (!refill_buffer( request, async )) goto done; 2116 if (!(count = get_available_data( request ))) goto done; 2117 } 2118 count = min( count, size ); 2119 memcpy( (char *)buffer + bytes_read, request->read_buf + request->read_pos, count ); 2120 remove_data( request, count ); 2121 if (request->read_chunked) request->read_chunked_size -= count; 2122 size -= count; 2123 bytes_read += count; 2124 request->content_read += count; 2125 if (end_of_read_data( request )) goto done; 2126 } 2127 if (request->read_chunked && !request->read_chunked_size) refill_buffer( request, async ); ... --- snip --- $ sha1sum vc_web.exe c2d61a5424aa474a169e59199aa2158a858833f6 vc_web.exe $ du -sh vc_web.exe 3.2M vc_web.exe $ wine --version wine-1.7.6-273-ga4d8627 Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes. [View Less]

2 11

[Bug 38955] New: Visual Studio Code installer crashes on startup (parsing of overly long string-format security descriptor causes stack corruption)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=38955 Bug ID: 38955 Summary: Visual Studio Code installer crashes on startup (parsing of overly long string-format security descriptor causes stack corruption) Product: Wine Version: 1.7.47 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: advapi32 Assignee: wine-… [View More]bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, the installer passes an overly long string-format security descriptor which is greater than MAX_PATH. --- snip --- $ WINEDEBUG=+tid,+seh,+relay wine ./VSCodeSetup.exe >>log.txt 2>&1 ... 0044:Call advapi32.ConvertStringSecurityDescriptorToSecurityDescriptorW(004237d0 L"D:PAI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CIIO;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;OICIIO;GA;;;SY)(A;;0x1301bf;;;BA)(A;OICIIO;GA;;;BA)(A;;0x1200a9;;;BU)(A;OICIIO;GXGR;;;BU)(A;OICIIO;GA;;;CO)(A;;0x1200a9;;;AC)(A"...,00000001,0033d5a0,00000000) ret=004022d7 0044:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7ea9690c ip=7ea9690c tid=0044 0044:trace:seh:raise_exception info[0]=00000001 0044:trace:seh:raise_exception info[1]=00d1d326 0044:trace:seh:raise_exception eax=004f0049 ebx=0033d540 ecx=0033d480 edx=0033d294 esi=0033d584 edi=0033d550 0044:trace:seh:raise_exception ebp=0033d4c8 esp=0033d260 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010246 ... Unhandled exception: page fault on write access to 0x003b0041 in 32-bit code (0x7ea99089). ... Backtrace: =>0 0x7ea99089 ParseStringSidToSid+0x3a4(StringSid="PAI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CIIO;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;OICIIO;GA;;;SY)(A;;0x1301bf;;;BA)(A;OICIIO;GA;;;BA)(A;;0x1200a9;;;BU)(A;OICIIO;GXGR;;;BU)(A;OICIIO;GA;;;CO)(A;;0x1200a9;;;AC)(A;OICIIO;GXGR;;;AC)?????", pSid=0x3b0041, cBytes=0x33d28c) [/home/focht/projects/wine/wine.repo/src/dlls/advapi32/security.c:5587] in advapi32 (0x0033d258) 1 0x7ea969c7 ParseStringSecurityDescriptorToSecurityDescriptor+0x197(StringSecurityDescriptor="", SecurityDescriptor=0x610030, cBytes=0x3b0039) [/home/focht/projects/wine/wine.repo/src/dlls/advapi32/security.c:4577] in advapi32 (0x0033d4c8) 2 0x00310078 (0x0030003b) 0x7ea99089 ParseStringSidToSid+0x3a4 [/home/focht/projects/wine/wine.repo/src/dlls/advapi32/security.c:5587] in advapi32: movb $0x1,0x0(%eax) 5587 pisid->Revision = SDDL_REVISION; Modules: Module Address Debug info Name (66 modules) PE 400000- 3e07000 Deferred vscodesetup ELF 7b800000-7ba71000 Deferred kernel32<elf> \-PE 7b820000-7ba71000 \ kernel32 ... Threads: process tid prio (all id:s are in hex) ... 00000043 (D) Z:\home\focht\Downloads\VSCodeSetup.exe 00000044 0 <== --- snip --- Source: https://source.winehq.org/git/wine.git/blob/3e55f1d2cc673d55ee342ff168a335b… --- snip --- 4508 static BOOL ParseStringSecurityDescriptorToSecurityDescriptor( 4509 LPCWSTR StringSecurityDescriptor, 4510 SECURITY_DESCRIPTOR_RELATIVE* SecurityDescriptor, 4511 LPDWORD cBytes) 4512 { 4513 BOOL bret = FALSE; 4514 WCHAR toktype; 4515 WCHAR tok[MAX_PATH]; 4516 LPCWSTR lptoken; 4517 LPBYTE lpNext = NULL; 4518 DWORD len; 4519 4520 *cBytes = sizeof(SECURITY_DESCRIPTOR); 4521 4522 if (SecurityDescriptor) 4523 lpNext = (LPBYTE)(SecurityDescriptor + 1); ... --- snip --- $ sha1sum VSCodeSetup.exe c971e8805aa21ef6483e04434cb819e524e682f0 VSCodeSetup.exe $ du -sh VSCodeSetup.exe 59M VSCodeSetup.exe $ wine --version wine-1.7.47-162-g0f9a0aa Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 5

[Bug 38908] New: PlanetSide 2 v5.2.4.x launcher process exit causes wineserver crash
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=38908 Bug ID: 38908 Summary: PlanetSide 2 v5.2.4.x launcher process exit causes wineserver crash Product: Wine Version: 1.7.47 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wineserver Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello … [View More]folks, found this by chance ... --- snip --- (gdb) c Continuing. Program received signal SIGSEGV, Segmentation fault. 0x000000000042733a in grab_object (ptr=0x0) at /home/focht/projects/wine/wine.repo/src/server/object.c:298 298 assert( obj->refcount < INT_MAX ); (gdb) bt #0 0x000000000042733a in grab_object (ptr=0x0) at /home/focht/projects/wine/wine.repo/src/server/object.c:298 #1 0x0000000000410da7 in add_irp_to_queue (file=0x2a8e9a0, irp=0x2a948f0) at /home/focht/projects/wine/wine.repo/src/server/device.c:347 #2 0x0000000000411189 in device_file_close_handle (obj=0x2a8e9a0, process=0x29e5a20, handle=104) at /home/focht/projects/wine/wine.repo/src/server/device.c:429 #3 0x000000000041c6fc in handle_table_destroy (obj=0x29e5ba0) at /home/focht/projects/wine/wine.repo/src/server/handle.c:175 #4 0x000000000042748a in release_object (ptr=0x29e5ba0) at /home/focht/projects/wine/wine.repo/src/server/object.c:313 #5 0x000000000041c7c7 in close_process_handles (process=0x29e5a20) at /home/focht/projects/wine/wine.repo/src/server/handle.c:194 #6 0x000000000042a132 in process_killed (process=0x29e5a20) at /home/focht/projects/wine/wine.repo/src/server/process.c:817 #7 0x000000000042a510 in remove_process_thread (process=0x29e5a20, thread=0x2a0c9e0) at /home/focht/projects/wine/wine.repo/src/server/process.c:883 #8 0x000000000044af03 in kill_thread (thread=0x2a0c9e0, violent_death=0) at /home/focht/projects/wine/wine.repo/src/server/thread.c:1107 #9 0x0000000000448836 in thread_poll_event (fd=0x2a0cc10, event=16) at /home/focht/projects/wine/wine.repo/src/server/thread.c:266 #10 0x0000000000415130 in fd_poll_event (fd=0x2a0cc10, event=16) at /home/focht/projects/wine/wine.repo/src/server/fd.c:446 #11 0x000000000041550a in main_loop_epoll () at /home/focht/projects/wine/wine.repo/src/server/fd.c:541 #12 0x0000000000415b1c in main_loop () at /home/focht/projects/wine/wine.repo/src/server/fd.c:886 #13 0x0000000000420fa5 in main (argc=1, argv=0x7ffdb89b57c8) at /home/focht/projects/wine/wine.repo/src/server/main.c:148 (gdb) frame 1 #1 0x0000000000410da7 in add_irp_to_queue (file=0x2a8e9a0, irp=0x2a948f0) at /home/focht/projects/wine/wine.repo/src/server/device.c:347 347 irp->thread = (struct thread *)grab_object( current ); (gdb) p *file $1 = {obj = {refcount = 2, handle_count = 1, ops = 0x4741e0 <device_file_ops>, wait_queue = {next = 0x2a8e9b0, prev = 0x2a8e9b0}, name = 0x0, sd = 0x0, obj_list = {next = 0x2a8eb30, prev = 0x2a8ea50}}, device = 0x29b18b0, fd = 0x2a8ea20, user_ptr = 1121136, entry = {next = 0x29b1918, prev = 0x29b1918}, requests = {next = 0x2a8ea08, prev = 0x2a8ea08}} (gdb) p *irp $2 = {obj = {refcount = 2, handle_count = 0, ops = 0x474060 <irp_call_ops>, wait_queue = {next = 0x2a94900, prev = 0x2a94900}, name = 0x0, sd = 0x0, obj_list = {next = 0x2a8f8d0, prev = 0x699580 <object_list>}}, dev_entry = {next = 0x5555555555555555, prev = 0x5555555555555555}, mgr_entry = { next = 0x5555555555555555, prev = 0x5555555555555555}, file = 0x2a8e9a0, thread = 0x5555555555555555, user_arg = 6148914691236517205, async = 0x0, status = 259, params = {major = 2, create = {major = 2, access = 13, sharing = 1121136, options = 0, device = 43932192}, close = {major = 2, __pad = 13, file = 1121136}, read = {major = 2, key = 13, file = 1121136, pos = 43932192}, write = {major = 2, key = 13, file = 1121136, pos = 43932192}, flush = { major = 2, __pad = 13, file = 1121136}, ioctl = {major = 2, code = 13, file = 1121136}}, result = 0, in_size = 0, in_data = 0x0, out_size = 0, out_data = 0x0} $ (gdb) frame 2 #2 0x0000000000411189 in device_file_close_handle (obj=0x2a8e9a0, process=0x29e5a20, handle=104) at /home/focht/projects/wine/wine.repo/src/server/device.c:429 429 add_irp_to_queue( file, irp ); (gdb) p *obj $5 = {refcount = 2, handle_count = 1, ops = 0x4741e0 <device_file_ops>, wait_queue = {next = 0x2a8e9b0, prev = 0x2a8e9b0}, name = 0x0, sd = 0x0, obj_list = { next = 0x2a8eb30, prev = 0x2a8ea50}} (gdb) p *process $4 = {obj = {refcount = 57, handle_count = 0, ops = 0x477080 <process_ops>, wait_queue = {next = 0x29e5a30, prev = 0x29e5a30}, name = 0x0, sd = 0x0, obj_list = {next = 0x2a07fe0, prev = 0x29fb160}}, entry = {next = 0x2a13e90, prev = 0x6995a0 <process_list>}, parent = 0x0, thread_list = { next = 0x29e5a78, prev = 0x29e5a78}, debugger = 0x0, handles = 0x0, msg_fd = 0x29fb130, id = 8, group_id = 8, sigkill_timeout = 0x0, cpu = CPU_x86, unix_pid = 1166, exit_code = 0, running_threads = 0, start_time = 130812070795368620, end_time = 130812071183535560, affinity = 15, priority = 2, suspend = 0, is_system = 0, debug_children = 0, is_terminating = 1, job = 0x0, job_entry = {next = 0x5555555555555555, prev = 0x5555555555555555}, locks = { next = 0x29e5b00, prev = 0x29e5b00}, classes = {next = 0x2a94200, prev = 0x2a8e770}, console = 0x2a10100, startup_state = STARTUP_DONE, startup_info = 0x0, idle_event = 0x2a6e170, winstation = 0, desktop = 0, token = 0x2a08770, dlls = {next = 0x2a6e5b0, prev = 0x2a94850}, peb = 2147348480, ldt_copy = 4151760128, trace_data = 0, rawinput_devices = {next = 0x29e5b78, prev = 0x29e5b78}, rawinput_mouse = 0x0, rawinput_kbd = 0x0} --- snip --- $ wine --version wine-1.7.47 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 8

[Bug 36731] New: Runes of Magic 'ClientUpdater.exe' crashes after a number of update cycles (mshtml environment setup contains stack buffer overflow)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=36731 Bug ID: 36731 Summary: Runes of Magic 'ClientUpdater.exe' crashes after a number of update cycles (mshtml environment setup contains stack buffer overflow) Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: mshtml Assignee: wine-bugs(… [View More]a)winehq.org Reporter: focht(a)gmx.net Hello folks, found during investigation of 'Runes of Magic' client updater. There is a crash after a number of update cycles. Unfortunately it's not easily traceable as it requires large downloads and many client restarts (= hours) to reach the crash point. I started the updater with a few debug channels (= reduced noise) which still allowed me to do post-mortem analysis. The launcher restarts itself after each update cycle. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Runes of Magic $ WINEDEBUG=+tid,+seh,+loaddll,+process,+mshtml wine ./launcher.exe ... <hours, multiple updater restarts> ... 004f:trace:loaddll:load_builtin_dll Loaded L"C:\\windows\\system32\\mshtml.dll" at 0x7c090000: builtin 004f:trace:mshtml:DllGetClassObject (CLSID_HTMLDocument {00000001-0000-0000-c000-000000000046} 0x3392a8) 004f:trace:mshtml:ClassFactory_AddRef (0x1c2c80) ref = 1 004f:trace:mshtml:HTMLDocument_Create ((nil) IID_IUnknown 0x1c19d4) 004f:trace:mshtml:load_gecko () 004f:trace:mshtml:check_version "Wine Gecko 2.24" 004f:trace:mshtml:load_xul (L"C:\\windows\\system32\\gecko\\2.24\\wine_gecko\\\\xul.dll") 004f:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7c130001 ip=7c130001 tid=004f 004f:trace:seh:raise_exception info[0]=00000001 004f:trace:seh:raise_exception info[1]=8d43ade4 004f:trace:seh:raise_exception eax=00000001 ebx=006b0063 ecx=003389a0 edx=7bcda204 esi=00339330 edi=001c2de8 004f:trace:seh:raise_exception ebp=005c0070 esp=00338c00 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010212 004f:trace:seh:call_stack_handlers calling handler at 0x4a97b0 code=c0000005 flags=0 004f:trace:seh:call_stack_handlers handler at 0x4a97b0 returned 1 004f:trace:seh:call_stack_handlers calling handler at 0x7bc9ecf7 code=c0000005 flags=0 wine: Unhandled page fault on write access to 0x8d43ade4 at address 0x7c130001 (thread 004f), starting debugger... --- snip --- I looked at the crash site and noticed it being in the middle of opcode sequence. --- snip --- 7C130000 45 INC EBP 7C130001 0889 4424108D OR BYTE PTR DS:[ECX+8D102444],CL 7C130007 8313 B5 ADC DWORD PTR DS:[EBX],-4B 7C13000A FA CLI --- snip --- Decoded with proper opcode start addresses: --- snip --- 7C12FFFF 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 7C130002 894424 10 MOV DWORD PTR SS:[ESP+10],EAX 7C130006 8D83 13B5FAFF LEA EAX,[EBX+FFFAB513] --- snip --- Partial stack dump with 'esp' = 0x00338c00 from exception context: --- snip --- ... 00338BA8 C0000005 00338BAC 00000000 00338BB0 00000000 00338BB4 7C130001 00338BB8 00000002 00338BBC 00000001 00338BC0 8D43ADE4 äC 00338BC4 00650074 t e 00338BC8 0033006D m 3 00338BCC 005C0032 2 \ 00338BD0 00650067 g e 00338BD4 006B0063 c k 00338BD8 005C006F o \ 00338BDC 002E0032 2 . 00338BE0 00340032 2 4 00338BE4 0077005C \ w 00338BE8 006E0069 i n 00338BEC 00000005 00338BF0 00650067 g e 00338BF4 006B0063 c k 00338BF8 005C006F o \ 00338BFC 7C130000 00338C00 00338F74 ; UNICODE "C:\windows\system32\gecko\2.24\wine_gecko\" 00338C04 7C1FF480 00338C08 7C19E234 ; ASCII "load_xul" 00338C0C 7C19CF48 ; ASCII "(%s)" 00338C10 7BCEC8C1 ; ASCII "L"C:\\windows\\system32\\gecko\\2.24\\wine_gecko\\\\xul.dll"" 00338C14 7C19D4E8 ; ASCII "Wine Gecko 2.24" 00338C18 7C19E250 ; ASCII "check_version" 00338C1C 7C19D4C0 ; ASCII "%s" 00338C20 7BCEC8AF ; ASCII ""Wine Gecko 2.24"" ... --- snip --- Yes, looks pretty much like a stack buffer overflow. A string buffer overwrote 'ebp', 'ebx' values (register save on stack for '__x86_get_pc_thunk_bx') and parts of the return address. The NULL terminator cancelled out the lower 16 bits of the return address. The culprit: 'load_xul' -> 'set_environment' Source: http://source.winehq.org/git/wine.git/blob/0be56d27d2d4b22367313fa4c6f1e658… --- snip --- 439 static void set_environment(LPCWSTR gre_path) 440 { 441 WCHAR path_env[MAX_PATH], buf[20]; 442 int len, debug_level = 0; 443 444 static const WCHAR pathW[] = {'P','A','T','H',0}; 445 static const WCHAR warnW[] = {'w','a','r','n',0}; 446 static const WCHAR xpcom_debug_breakW[] = 447 {'X','P','C','O','M','_','D','E','B','U','G','_','B','R','E','A','K',0}; 448 static const WCHAR nspr_log_modulesW[] = 449 {'N','S','P','R','_','L','O','G','_','M','O','D','U','L','E','S',0}; 450 static const WCHAR debug_formatW[] = {'a','l','l',':','%','d',0}; 451 452 /* We have to modify PATH as XPCOM loads other DLLs from this directory. */ 453 GetEnvironmentVariableW(pathW, path_env, sizeof(path_env)/sizeof(WCHAR)); 454 len = strlenW(path_env); 455 path_env[len++] = ';'; 456 strcpyW(path_env+len, gre_path); 457 SetEnvironmentVariableW(pathW, path_env); 458 459 SetEnvironmentVariableW(xpcom_debug_breakW, warnW); 460 461 if(TRACE_ON(gecko)) 462 debug_level = 5; 463 else if(WARN_ON(gecko)) 464 debug_level = 3; 465 else if(ERR_ON(gecko)) 466 debug_level = 2; 467 468 sprintfW(buf, debug_formatW, debug_level); 469 SetEnvironmentVariableW(nspr_log_modulesW, buf); 470 } --- snip --- 'path_env' must have overflowed ... but how? I used a JIT debugger to examine the process environment block at the time of the crash since 'GetEnvironmentVariableW' reads from 'NtCurrentTeb()->Peb->ProcessParameters->Environment'. --- snip ---- Address UNICODE dump ... 00231EC0 m32\cmd.exe.PATH 00231EE0 =C:\windows\syst 00231F00 em32;C:\windows; 00231F20 C:\windows\syste 00231F40 m32\wbem;C:\wind 00231F60 ows\system32\gec 00231F80 ko\2.24\wine_gec 00231FA0 ko\;C:\windows\s 00231FC0 ystem32\gecko\2. 00231FE0 24\wine_gecko\;C 00232000 :\windows\system 00232020 32\gecko\2.24\wi 00232040 ne_gecko\;C:\win 00232060 dows\system32\ge 00232080 cko\2.24\wine_ge 002320A0 cko\;C:\windows\ 002320C0 system32\gecko\2 002320E0 .24\wine_gecko\. 00232100 TEMP=C:\users\fo 00232120 cht\Temp.TMP=C:\ 00232140 users\focht\Temp 00232160 .windir=C:\windo 00232180 ws.ALLUSERSPROFI 002321A0 LE=C:\users\Publ 002321C0 ic.APPDATA=C:\us ... --- snip --- At the time 'gre_path' path was appended, the string from 'PATH' environment variable had already grown near 'MAX_PATH' (260 characters) buffer limit. 'PATH' is of course not limited to 'MAX_PATH' since it contains a list of paths. A better option would be to query with 'GetEnvironmentVariableW( value, NULL, 0)' first and allocate the needed buffer from heap, including length for 'gre_path'. Even with these things corrected there is still a general problem: at one point it will overflow/being blocked from appending to 'PATH'. Each newly created updater process inherits the process environment from parent (client updater restarts itself each time). A more sophisticated thing to do would be to search for existing value and not append if already present. Wine Mono 'mscoree' component has a similar potential stack buffer overflow: http://source.winehq.org/git/wine.git/blob/8cdcf470016f0655dfc8810f9d4d2f2d… Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 6

[Bug 31358] New: Bobcad v25 hangs on startup
by wine-bugs＠winehq.org 04 Dec '21

04 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=31358 Bug #: 31358 Summary: Bobcad v25 hangs on startup Product: Wine Version: 1.5.9 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Classification: Unclassified Tried installing free trial … [View More]

2 7

[Bug 24664] New: The letter 'R' is not visible in Shapes On A Plane
by wine-bugs＠winehq.org 04 Dec '21

04 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=24664 Summary: The letter 'R' is not visible in Shapes On A Plane Product: Wine Version: 1.3.4 Platform: x86 URL: https://www.digipen.edu/?id=1170&proj=433 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: andrew.millington(a)gmail.com Nearly … [View More]

2 12

[Bug 40111] New: mpr:mpr regression
by wine-bugs＠winehq.org 04 Dec '21

04 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=40111 Bug ID: 40111 Summary: mpr:mpr regression Product: Wine Version: 1.9.3 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: fgouget(a)codeweavers.com Distribution: --- Since the commit below, all Windows XP machines (even non-VMs) except … [View More]

2 8

[Bug 20987] New: msi tests can't be run in parallel
by wine-bugs＠winehq.org 04 Dec '21

04 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=20987 Summary: msi tests can't be run in parallel Product: Wine Version: 1.1.34 Platform: PC OS/Version: Linux Status: NEW Severity: enhancement Priority: P2 Component: testcases AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com We spend an awful lot of time waiting for tests to finish. It'd be awesome if "make -j 100 test" worked. … [View More]

2 6

[Bug 42118] New: Chessmaster 9000 Mentor Lines/Thinking Lines don' t work and freeze the game
by wine-bugs＠winehq.org 04 Dec '21

04 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=42118 Bug ID: 42118 Summary: Chessmaster 9000 Mentor Lines/Thinking Lines don't work and freeze the game Product: Wine Version: 2.0-rc3 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: bkbk9(a)yahoo.ca … [View More]

2 10

[Bug 41692] New: World of Tanks crashes instantly on start with OSSv4 on wine 1.9.17
by wine-bugs＠winehq.org 04 Dec '21

04 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=41692 Bug ID: 41692 Summary: World of Tanks crashes instantly on start with OSSv4 on wine 1.9.17 Product: Wine Version: 1.9.17 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-dsound Assignee: wine-bugs(a)winehq.org Reporter: HASH.DuOrden(a)gmail.com … [View More]

2 10

[Bug 43456] New: Cannot successfully install WebPlus X8 from SERIF.
by wine-bugs＠winehq.org 03 Dec '21

03 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=43456 Bug ID: 43456 Summary: Cannot successfully install WebPlus X8 from SERIF. Product: Wine Version: 2.13 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: want.g(a)xtra.co.nz Distribution: --- Created attachment 58824 --> … [View More]

2 3

[Bug 32991] New: ARM port of "WabbitEMU" crashes due to unimplemented function KERNEL32.dll.RtlUnwindEx (no ntdll forward on arch=arm)
by wine-bugs＠winehq.org 03 Dec '21

03 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=32991 Bug #: 32991 Summary: ARM port of "WabbitEMU" crashes due to unimplemented function KERNEL32.dll.RtlUnwindEx (no ntdll forward on arch=arm) Product: Wine Version: 1.5.24 Platform: arm OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: kernel32 AssignedTo: wine-bugs(a)winehq.org … [View More] ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, the ARM port of "WabbitEMU", a Texas Instruments graphing calculator emulator and dev tools crashes after clicking "Browse for a ROM image" radio button in image selection dialog. Download: http://forum.xda-developers.com/showpost.php?p=37928562 (main thread: http://forum.xda-developers.com/showthread.php?t=2092348) --- snip --- $ WINEDEBUG=+tid,+seh,+relay wine ./Wabbitemu.exe ... 0024:Call user32.GetWindowTextA(00010096,40a0ebf0,00000104) ret=00439fa5 0024:Call window proc 0x40bc5f30 (hwnd=0x10096,msg=WM_GETTEXT,wp=00000104,lp=40a0ebf0) 0024:Ret window proc 0x40bc5f30 (hwnd=0x10096,msg=WM_GETTEXT,wp=00000104,lp=40a0ebf0) retval=00000000 0024:Ret user32.GetWindowTextA() retval=00000000 ret=00439fa5 0024:Call KERNEL32.GetLastError() ret=004141cf 0024:Ret KERNEL32.GetLastError() retval=00000000 ret=004141cf 0024:trace:seh:raise_exception info[0]=0047be54 0024:trace:seh:raise_exception info[1]=0047cc8e wine: Call from 0x7bc9a630 to unimplemented function KERNEL32.dll.RtlUnwindEx, aborting 0024:trace:seh:call_stack_handlers calling handler at 0x7bcb8d88 code=80000100 flags=1 0024:Call KERNEL32.UnhandledExceptionFilter(40a0e81c) ret=7bcb8df0 --- snip --- The app is importing all win32 API by name so it's the real thing :-) +module,+imports --- snip --- ... 0009:trace:module:load_dll looking for L"KERNEL32.dll" in L"Z:\\home\\linaro\\wine-apps\\wabbitemu;.;C:\\windows\\system32;C:\\windows\\system;C:\\windows;C:\\windows\\system32;C:\\windows;C:\\windows\\system32\\wbem" 0009:trace:module:load_dll Found L"C:\\windows\\system32\\KERNEL32.dll" for L"KERNEL32.dll" at 0x7b820000, count=19 0009:warn:module:import_dll No implementation for KERNEL32.dll.RtlUnwindEx imported from L"Z:\\home\\linaro\\wine-apps\\wabbitemu\\Wabbitemu.exe", setting to 0x41820000 0009:trace:imports:import_dll --- RtlUnwindEx KERNEL32.dll.1209 = 0x41820000 0009:trace:imports:import_dll --- GetCommandLineA KERNEL32.dll.481 = 0x7b846be0 0009:trace:imports:import_dll --- RtlPcToFileHeader KERNEL32.dll.1205 = 0x7bc69188 0009:warn:module:import_dll No implementation for KERNEL32.dll.RtlLookupFunctionEntry imported from L"Z:\\home\\linaro\\wine-apps\\wabbitemu\\Wabbitemu.exe", setting to 0x41820024 0009:trace:imports:import_dll --- RtlLookupFunctionEntry KERNEL32.dll.1203 = 0x41820024 0009:trace:imports:import_dll --- GetModuleFileNameW KERNEL32.dll.634 = 0x7b86b864 ... --- snip --- It also needs KERNEL32.dll.RtlLookupFunctionEntry later. Wine forwards both to ntdll but only on arch=x86_64. It seems Windows RT exposes both API. Interestingly only the MSDN page for KERNEL32.dll.RtlLookupFunctionEntry gives a hint about this: http://msdn.microsoft.com/en-us/library/windows/desktop/ms680597%28v=vs.85%… ("ARM Definition"). Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes. [View Less]

2 23

[Bug 25193] New: Dasher does not operate correctly
by wine-bugs＠winehq.org 03 Dec '21

03 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=25193 Summary: Dasher does not operate correctly Product: Wine Version: 1.3.7 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: physicspirate(a)yahoo.ca Greetings, I've attempted to run Dasher(http://appdb.winehq.org/objectManager.php?sClass=version… [View More]

2 13

[Bug 39339] New: Adventure games from Daedalic Ent. (Night of the Rabbit, Edna & Harvey, A New Beginning) have no in-game audio and freeze on new game start - XAudio2_7
by wine-bugs＠winehq.org 03 Dec '21

03 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=39339 Bug ID: 39339 Summary: Adventure games from Daedalic Ent. (Night of the Rabbit, Edna & Harvey, A New Beginning) have no in-game audio and freeze on new game start - XAudio2_7 Product: Wine Version: 1.7.51 Hardware: x86 URL: http://store.steampowered.com/app/230820/ OS: Linux Status: NEW Keywords: … [View More]download Severity: normal Priority: P2 Component: xaudio2 Assignee: wine-bugs(a)winehq.org Reporter: gyebro69(a)gmail.com CC: aeikum(a)codeweavers.com Distribution: --- On my system the problem was surfaced by the Xaudio2 implementation in 1.7.51, the games used to work properly before. It sounds similar to bug #39320 and bug #39321, except that the proposed patch doesn't help here. All the adventure games from the developer/publisher Daedalic Entertainment that use Xaudio2 interface are affected in a similar manner: - the main menu is missing audio - when I try to start a new game or load a saved game, the game freezes (100% cpu usage) as soon as the game is loaded. - quitting the games from the main menu takes a long time (1-2 minutes) I reproduced the problem in these games: The Night of the Rabbit, Edna & Harvey: Harvey's New Eyes, A New Beginning - Final Cut. The games load xaudio2_7.dll Note that almost all these games have demo versions either on Steam or elsewhere, but those demos are older versions of the games and they don't use XAudio2. The only demo (so far) which has the bug is the Night of the Rabbit demo on Steam (link added to url). Steps to reproduce the problem in NotR demo: 1. install the demo on Steam. Steam installs .Net 3.5 and MSVC++, they are not needed for the game, you can delete the installers located in _CommonRedist before starting the demo. 2. the demo starts with a video (audio works in there). The menu has no audio with built-in xaudio2. 3. start a new game...the game seems to be hung at this point. It takes 1-2 minutes until the first intro video begins to play. Skip the video <Esc>, the game screen appears and the game is frozen for good. 4. you can reproduce the long wait before the game completely quits, if you exit the game from the main menu. wine-1.7.51-201-g60d1d6f Fedora 22 32-bit alsa-lib-1.0.29-1.fc22.i686 openal-soft-1.16.0-5.fc22.i686 Audio device: NVIDIA Corporation MCP61 High Definition Audio (rev a2) -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 8

[Bug 36844] New: Multiple games need X3DAudio1_7.dll (BeamNG v0.3 Tech Demo)
by wine-bugs＠winehq.org 01 Dec '21

01 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=36844 Bug ID: 36844 Summary: Multiple games need X3DAudio1_7.dll (BeamNG v0.3 Tech Demo) Product: Wine Version: 1.7.21 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: directx-dsound Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, as the summary says. … [View More]

2 13

[Bug 42449] New: unimplemented function msvcr120.dll.fesetround called in 32-bit code
by wine-bugs＠winehq.org 01 Dec '21

01 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=42449 Bug ID: 42449 Summary: unimplemented function msvcr120.dll.fesetround called in 32-bit code Product: Wine Version: 2.1 Hardware: x86 URL: https://play0ad.com/ OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: … [View More]

2 13

[Bug 21010] New: vc2005express install broken
by wine-bugs＠winehq.org 29 Nov '21

29 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=21010 Summary: vc2005express install broken Product: Wine Version: 1.1.34 Platform: PC-x86-64 OS/Version: Linux Status: NEW Keywords: download, Installer, regression Severity: normal Priority: P2 Component: msi AssignedTo: wine-bugs(a)winehq.org ReportedBy: austinenglish(a)gmail.com CC: hans(a)meelstraat.net Regression … [View More]

2 5

[Bug 16999] New: Visual C++ 2005 Express IDE: stack overflow at startup due to empty class id string
by wine-bugs＠winehq.org 29 Nov '21

29 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=16999 Summary: Visual C++ 2005 Express IDE: stack overflow at startup due to empty class id string Product: Wine Version: 1.1.13 Platform: Other URL: http://www.microsoft.com/express/2005/download/default.a spx OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: ole32 … [View More]AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, prerequisites: Patch from bug 5054 to work around invalid URL cache entries (http://bugs.winehq.org/attachment.cgi?id=18726) 1. clean WINEPREFIX 2. sh winetricks -q dotnet20 msxml6 3. download and run web installer (see URL) 4. start the VC++ 2005 IDE (wine VCExpress.exe) --- The IDE crashes due to stack overflow. --- snip --- ... 0038:Call advapi32.RegQueryValueExW(00000418,50061238 L"MRUCommand2GUID",00000000,003289e8,003289ec,003289e0) ret=50008e41 0038:Ret advapi32.RegQueryValueExW() retval=00000000 ret=50008e41 0038:Call advapi32.RegQueryValueExW(00000418,502800c8 L"MRUCommand2ID",00000000,00000000,00328c38,00328c34) ret=501f1800 0038:Ret advapi32.RegQueryValueExW() retval=00000000 ret=501f1800 0038:Call ole32.CLSIDFromString(00328c40 L"{5EFC7975-14BC-11CF-9B2B-00AA00573819}",50758004) ret=501f181a 0038:trace:ole:__CLSIDFromString L"{5EFC7975-14BC-11CF-9B2B-00AA00573819}" -> 0x50758004 0038:Ret ole32.CLSIDFromString() retval=00000000 ret=501f181a 0038:CALL MSVCR80.memset(003289f0,00000000,00000204) ret=50008e1d 0038:RET MSVCR80.memset() retval=003289f0 ret=50008e1d 0038:Call advapi32.RegQueryValueExW(00000418,50061258 L"MRUCommand3GUID",00000000,003289e8,003289ec,003289e0) ret=50008e41 0038:Ret advapi32.RegQueryValueExW() retval=00000000 ret=50008e41 0038:Call advapi32.RegQueryValueExW(00000418,502800e4 L"MRUCommand3ID",00000000,00000000,00328c38,00328c34) ret=501f1847 0038:Ret advapi32.RegQueryValueExW() retval=00000000 ret=501f1847 0038:Call ole32.CLSIDFromString(00328c40 L"",50758018) ret=501f1861 0038:Call KERNEL32.GetProcessHeap() ret=604e16fd 0038:Ret KERNEL32.GetProcessHeap() retval=00110000 ret=604e16fd 0038:Call ntdll.RtlAllocateHeap(00110000,00000000,00000010) ret=604e1711 0038:Ret ntdll.RtlAllocateHeap() retval=00ed1298 ret=604e1711 0038:Call advapi32.RegOpenKeyW(80000000,00ed1298 L"\\CLSID",00328acc) ret=604e1758 0038:Ret advapi32.RegOpenKeyW() retval=00000000 ret=604e1758 ... 0038:Call advapi32.RegOpenKeyW(80000000,00ed1298 L"\\CLSID",0023294c) ret=604e1758 0038:Ret advapi32.RegOpenKeyW() retval=00000000 ret=604e1758 0038:Call KERNEL32.GetProcessHeap() ret=604e17f0 0038:Ret KERNEL32.GetProcessHeap() retval=00110000 ret=604e17f0 0038:Call ntdll.RtlFreeHeap(00110000,00000000,00ed1298) ret=604e1809 0038:Ret ntdll.RtlFreeHeap() retval=00000001 ret=604e1809 0038:Call advapi32.RegQueryValueW(0000043c,00000000,00232956,00232950) ret=604e182d 0038:Ret advapi32.RegQueryValueW() retval=00000000 ret=604e182d 0038:Call advapi32.RegCloseKey(0000043c) ret=604e18b1 0038:Ret advapi32.RegCloseKey() retval=00000000 ret=604e18b1 0038:trace:seh:raise_exception code=c00000fd flags=0 addr=0x601e289e ip=0x601e289e tid=0038 0038:trace:seh:raise_exception eax=00000000 ebx=602e4ff4 ecx=00232720 edx=00000000 esi=00000000 edi=0023268c 0038:trace:seh:raise_exception ebp=00232038 esp=00231ffc cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010206 0038:trace:seh:call_stack_handlers calling handler at 0x506ea492 code=c00000fd flags=0 0038:err:seh:setup_exception_record stack overflow 976 bytes in thread 0038 eip 601b4678 esp 00230f60 stack 0x230000-0x231000-0x330000 --- snip --- Relevant registry data: --- snip --- [HKEY_USERS\S-1-5-4\Software\Microsoft\VCExpress\8.0\StartPage] "Command1"="{F3192B90-EA73-480F-9471-04524118D767}|20487|" "Command2"="{F3192B90-EA73-480F-9471-04524118D767}|20482|" "Command3"="{F3192B90-EA73-480F-9471-04524118D767}|20480|" "Command4"="{F3192B90-EA73-480F-9471-04524118D767}|20481|" "Command5"="{F3192B90-EA73-480F-9471-04524118D767}|20483|" "Command6"="{F3192B90-EA73-480F-9471-04524118D767}|20485|" "DownloadState"=dword:00000000 "MRUCommand1GUID"="{5EFC7975-14BC-11CF-9B2B-00AA00573819}" "MRUCommand1ID"=dword:000000d8 "MRUCommand2GUID"="{5EFC7975-14BC-11CF-9B2B-00AA00573819}" "MRUCommand2ID"=dword:00000141 "MRUCommand3GUID"="" "MRUCommand3ID"=dword:00000000 "MRUCommand4GUID"="" "MRUCommand4ID"=dword:00000000 --- snip --- The problem is actually a bug in CLSIDFromProgID() when passed an empty id string which results in nice recursion :-) --- snip dlls/ole32/compobj.c --- HRESULT WINAPI CLSIDFromString(LPOLESTR idstr, CLSID *id ) { HRESULT ret; if (!id) return E_INVALIDARG; ret = __CLSIDFromString(idstr, id); if(ret != S_OK) { /* It appears a ProgID is also valid */ ret = CLSIDFromProgID(idstr, id); } return ret; } ... HRESULT WINAPI CLSIDFromProgID(LPCOLESTR progid, LPCLSID clsid) { static const WCHAR clsidW[] = { '\\','C','L','S','I','D',0 }; WCHAR buf2[CHARS_IN_GUID]; LONG buf2len = sizeof(buf2); HKEY xhkey; WCHAR *buf; if (!progid || !clsid) { ERR("neither progid (%p) nor clsid (%p) are optional\n", progid, clsid); return E_INVALIDARG; } /* initialise clsid in case of failure */ memset(clsid, 0, sizeof(*clsid)); buf = HeapAlloc( GetProcessHeap(),0,(strlenW(progid)+8) * sizeof(WCHAR) ); strcpyW( buf, progid ); strcatW( buf, clsidW ); if (RegOpenKeyW(HKEY_CLASSES_ROOT,buf,&xhkey)) { HeapFree(GetProcessHeap(),0,buf); WARN("couldn't open key for ProgID %s\n", debugstr_w(progid)); return CO_E_CLASSSTRING; } HeapFree(GetProcessHeap(),0,buf); if (RegQueryValueW(xhkey,NULL,buf2,&buf2len)) { RegCloseKey(xhkey); WARN("couldn't query clsid value for ProgID %s\n", debugstr_w(progid)); return CO_E_CLASSSTRING; } RegCloseKey(xhkey); return CLSIDFromString(buf2,clsid); } --- snip dlls/ole32/compobj.c --- CLSIDFromProgID() needs to be fixed for the empty cls/prog id string case. With proper patch applied, the IDE starts. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes. [View Less]

2 9

[Bug 36736] New: Tucows Download Manager 2014 crashes on startup (decryption scheme relies on 'kernel32.dll.SetFilePointer' hotpatch signature)
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=36736 Bug ID: 36736 Summary: Tucows Download Manager 2014 crashes on startup (decryption scheme relies on 'kernel32.dll.SetFilePointer' hotpatch signature) Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)… [View More]winehq.org Reporter: focht(a)gmx.net Hello folks, example download: http://www.tucows.com/preview/609375/Intuit-QuickBooks-Simple-Start-Edition… The download manager/installer uncompresses a secondary installer from bootstrapper. Before that the app decrypts parts of itself and this is done incorrectly, leading to strange results/code paths later. --- snip --- $ WINEDEBUG=+tid,+seh,+relay wine ./Setup_QuickBooks_SimpleStart_Intel_2009.exe >>log.txt 2>&1 ... 0023:Starting process L"Z:\\home\\focht\\Downloads\\Setup_QuickBooks_SimpleStart_Intel_2009.exe" (entryproc=0x409c40) 0023:Call KERNEL32.GetModuleHandleA(00000000) ret=004030e8 0023:Ret KERNEL32.GetModuleHandleA() retval=00400000 ret=004030e8 0023:Call KERNEL32.GetCommandLineA() ret=004030f3 0023:Ret KERNEL32.GetCommandLineA() retval=00134078 ret=004030f3 ... 0023:Call KERNEL32.CreateFileA(004203cc "Z:\\home\\focht\\Downloads\\Setup_QuickBooks_SimpleStart_Intel_2009.exe",80000000,00000001,00000000,00000003,00000080,00000000) ret=004075bd 0023:Ret KERNEL32.CreateFileA() retval=00000050 ret=004075bd 0023:Call KERNEL32.FindResourceA(00000000,00002b67,0000000a) ret=00409bfb 0023:Ret KERNEL32.FindResourceA() retval=004112c8 ret=00409bfb 0023:Call KERNEL32.SizeofResource(00000000,004112c8) ret=00409c0e 0023:Ret KERNEL32.SizeofResource() retval=0000002c ret=00409c0e 0023:Call KERNEL32.LoadResource(00000000,004112c8) ret=00409c20 0023:Ret KERNEL32.LoadResource() retval=00419a88 ret=00409c20 0023:Call KERNEL32.LockResource(00419a88) ret=00409c31 0023:Ret KERNEL32.LockResource() retval=00419a88 ret=00409c31 ... 0023:Call KERNEL32.CreateFileA(00437a5c "C:\\users\\focht\\Temp\\is-RJFDD.tmp\\Setup_QuickBooks_SimpleStart_Intel_2009.tmp",40000000,00000000,00000000,00000002,00000080,00000000) ret=004075bd 0023:Ret KERNEL32.CreateFileA() retval=00000054 ret=004075bd ... 0023:Call KERNEL32.SetFilePointer(00000050,00000000,0033fd78,00000001) ret=004075e0 0023:Ret KERNEL32.SetFilePointer() retval=000b9b03 ret=004075e0 0023:Call KERNEL32.SetFilePointer(00000050,000b9b03,0033fd60,00000000) ret=00407690 0023:Ret KERNEL32.SetFilePointer() retval=000b9b03 ret=00407690 0023:Call KERNEL32.SetFilePointer(00000054,00002a72,0033fd7c,00000000) ret=00407690 0023:Ret KERNEL32.SetFilePointer() retval=00002a72 ret=00407690 0023:Call KERNEL32.SetEndOfFile(00000054) ret=004076b8 0023:Ret KERNEL32.SetEndOfFile() retval=00000001 ret=004076b8 0023:Call KERNEL32.SetFilePointer(00000054,00000000,0033fd7c,00000000) ret=00407690 0023:Ret KERNEL32.SetFilePointer() retval=00000000 ret=00407690 0023:Call KERNEL32.WriteFile(00000054,00420424,00002a72,0033fd88,00000000) ret=004076e4 0023:Ret KERNEL32.WriteFile() retval=00000001 ret=004076e4 0023:Call KERNEL32.CloseHandle(00000054) ret=0040755d 0023:Ret KERNEL32.CloseHandle() retval=00000001 ret=0040755d 0023:Call KERNEL32.CloseHandle(00000050) ret=0040755d 0023:Ret KERNEL32.CloseHandle() retval=00000001 ret=0040755d 0023:Call user32.CreateWindowExA(00000000,0040a334 "STATIC",0040a320 "InnoSetupLdrWindow",00000000,00000000,00000000,00000000,00000000,00000000,00000000,00400000,00000000) ret=0040a136 ... 0023:Call KERNEL32.CreateProcessA(00000000,00420488 "\"C:\\users\\focht\\Temp\\is-RJFDD.tmp\\Setup_QuickBooks_SimpleStart_Intel_2009.tmp\" /SL5=\"$10066,747501,80384,Z:\\home\\focht\\Downloads\\Setup_QuickBooks_SimpleStart_Intel_2009.exe\" ",00000000,00000000,00000000,00000000,00000000,00000000,0033fd64,0033fd54) ret=00409a19 0023:Ret KERNEL32.CreateProcessA() retval=00000000 ret=00409a19 0023:Call KERNEL32.GetLastError() ret=00409671 0023:Ret KERNEL32.GetLastError() retval=00000005 ret=00409671 0023:Call KERNEL32.FormatMessageA(00003200,00000000,00000005,00000000,0033f8f8,00000400,00000000) ret=004072a8 0023:Ret KERNEL32.FormatMessageA() retval=00000010 ret=004072a8 0023:trace:seh:raise_exception code=c0000005 flags=0 addr=0x402eb4 ip=00402eb4 tid=0023 0023:trace:seh:raise_exception info[0]=00000000 0023:trace:seh:raise_exception info[1]=0000fd38 0023:trace:seh:raise_exception eax=00420654 ebx=00000069 ecx=00000002 edx=00000000 esi=00000005 edi=0040b240 0023:trace:seh:raise_exception ebp=0033fd34 esp=0033fd00 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010212 0023:trace:seh:call_stack_handlers calling handler at 0x4096eb code=c0000005 flags=0 ... 0023:trace:seh:call_stack_handlers handler at 0x7bc825c1 returned 2 0023:trace:seh:call_stack_handlers calling handler at 0x4096eb code=c00000fd flags=10 0023:err:seh:setup_exception_record stack overflow 992 bytes in thread 0023 eip f73e796b esp 00240f50 stack 0x240000-0x241000-0x340000 --- snip --- What is not seen (debugging): the app uses the entry point signature of 'kernel32.dll.SetFilePointer' as seed for further decryption. --- snip --- ... 0040400C 8B73 01 MOV ESI,DWORD PTR DS:[EBX+1] ; SetFilePointer 0040400F 89F7 MOV EDI,ESI ; 00404011 4F DEC EDI 00404012 8B57 01 MOV EDX,DWORD PTR DS:[EDI+1] ; *(DWORD*)entry 00404015 BB 6319F033 MOV EBX,33F01963 0040401A 31DA XOR EDX,EBX 0040401C 89D3 MOV EBX,EDX 0040401E 53 PUSH EBX 0040401F 5E POP ESI 00404020 89F0 MOV EAX,ESI 00404022 BA A6AA2938 MOV EDX,3829AAA6 00404027 81F2 A2AA2938 XOR EDX,3829AAA2 0040402D 29D4 SUB ESP,EDX 0040402F 890424 MOV DWORD PTR SS:[ESP],EAX 00404032 68 22778D73 PUSH 738D7722 00404037 B9 E9E37802 MOV ECX,278E3E9 0040403C 58 POP EAX 0040403D 31C1 XOR ECX,EAX 0040403F BF 7325BB99 MOV EDI,99BB2573 00404044 31F9 XOR ECX,EDI 00404046 81F1 5057EB50 XOR ECX,50EB5750 0040404C 31CE XOR ESI,ECX --- snip --- Wine's 'kernel32.dll.SetFilePointer' entry signature: --- snip --- 7B83EE7E 8D4C24 04 LEA ECX,DWORD PTR SS:[ESP+4] 7B83EE82 83E4 F0 AND ESP,FFFFFFF0 7B83EE85 FF71 FC PUSH DWORD PTR DS:[ECX-4] 7B83EE88 55 PUSH EBP 7B83EE89 89E5 MOV EBP,ESP 7B83EE8B 56 PUSH ESI 7B83EE8C 53 PUSH EBX 7B83EE8D 51 PUSH ECX 7B83EE8E 83EC 4C SUB ESP,4C 7B83EE91 E8 FA07FEFF CALL KERNEL32.__x86.get_pc_thunk.bx 7B83EE96 81C3 6AC10700 ADD EBX,7C16A --- snip --- The app expects a hotpatch-type entry which gives proper seed. With 'DECLSPEC_HOTPATCH': --- snip ---- 7B83EE8E 8BFF MOV EDI,EDI 7B83EE90 55 PUSH EBP 7B83EE91 8BEC MOV EBP,ESP 7B83EE93 5D POP EBP 7B83EE94 8D4C24 04 LEA ECX,DWORD PTR SS:[ESP+4] 7B83EE98 83E4 F0 AND ESP,FFFFFFF0 7B83EE9B FF71 FC PUSH DWORD PTR DS:[ECX-4] 7B83EE9E 55 PUSH EBP 7B83EE9F 89E5 MOV EBP,ESP ... --- snip ---- With that part fixed the installer runs into next (known) mshtml/ieframe bug. A DRM/protection scan on the installer doesn't show suspicious schemes (might be custom). --- snip --- -=[ ProtectionID v0.6.5.5 OCTOBER]=- (c) 2003-2013 CDKiLLER & TippeX Build 31/10/13-21:09:09 Ready... Scanning -> Z:\home\focht\Downloads\Setup_QuickBooks_SimpleStart_Intel_2009.exe File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 768984 (0BBBD8h) Byte(s) -> File Appears to be Digitally Signed @ Offset 0B9B08h, size : 020D0h / 08400 byte(s) -> File has 680200 (0A6108h) bytes of appended data starting at offset 013A00h [File Heuristics] -> Flag : 00000000000001001100000000100100 (0x0004C024) [Entrypoint Section Entropy] : 6.66 [-= Installer =-] Inno Setup v5.5.0 Module - Scan Took : 0.261 Second(s) [000000105h tick(s)] [533 scan(s) done] --- snip --- $ du -sh Setup_QuickBooks_SimpleStart_Intel_2009.exe 752K Setup_QuickBooks_SimpleStart_Intel_2009.exe $ sha1sum Setup_QuickBooks_SimpleStart_Intel_2009.exe d2f213e1d05845897c9dae891a73d6be62283206 Setup_QuickBooks_SimpleStart_Intel_2009.exe $ wine --version wine-1.7.20 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 5

[Bug 35134] New: Shroud of the Avatar: Forsaken Virtues installer waits indefinitely for cmd.exe during execution of batch files (argv[0] is not 'cmd.exe')
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=35134 Bug ID: 35134 Summary: Shroud of the Avatar: Forsaken Virtues installer waits indefinitely for cmd.exe during execution of batch files (argv[0] is not 'cmd.exe') Product: Wine Version: 1.7.8 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: cmd Assignee: wine-bugs(… [View More]a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, the unwrapped installer spawns 'cmd.exe' to execute some batch files. CreateProcessAsUserW() is used which just passes appname and cmdline to CreateProcessW(). 'appname' -> "C:\\windows\\system32\\cmd.exe" 'cmdline' -> "/C \"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\"" --- snip --- $ WINEDEBUG=+tid,+seh,+relay,+cmd wine ./SotAInstaller.exe >>log.txt 2>&1 ... 0024:Call KERNEL32.CreateProcessW(001481f8 L"C:\\windows\\system32\\msiexec.exe",001483f8 L" /i \"C:\\users\\focht\\Application Data\\Portalarium\\Shroud of the Avatar 0.1.0\\install\\8E829DF\\ShroudPatchClientInstaller.msi\" AI_SETUPEXEPATH=\"Z:\\home\\focht\\Downloads\\SotAInstaller.exe\" SETUPEXEDIR=\"Z:\\home\\focht\\Downloads\\\" EXE_CMD_LINE=\"/exenoupdates /exelang 0 /noprereqs ",00000000,00000000,00000000,00000020,00000000,00000000,0033f8d0,0033f918) ret=0040f458 ... 002b:Call KERNEL32.__wine_kernel_init() ret=7bc599ec 0024:Ret KERNEL32.CreateProcessW() retval=00000001 ret=0040f458 ... 0039:Call advapi32.CreateProcessAsUserW(000000dc,00b54e98 L"C:\\windows\\system32\\cmd.exe",00b55388 L"/C \"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\"",00000000,00000000,00000001,08000000,00000000,00000000,00d5dc18,00d5dca8) ret=0051c6ab 0039:fixme:advapi:CreateProcessAsUserW 0xdc L"C:\\windows\\system32\\cmd.exe" L"/C \"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\"" (nil) (nil) 1 0x08000000 (nil) (null) 0xd5dc18 0xd5dca8 - semi- stub ... 003b:Call KERNEL32.__wine_kernel_init() ret=7bc599ec 0039:Ret advapi32.CreateProcessAsUserW() retval=00000001 ret=0051c6ab 0039:Call KERNEL32.OpenProcess(00100000,00000000,0000003a) ret=0051c6d9 0039:Ret KERNEL32.OpenProcess() retval=000000e0 ret=0051c6d9 0039:Call KERNEL32.WaitForSingleObject(000000e0,ffffffff) ret=0051c6e8 ... 003b:Starting process L"C:\\windows\\system32\\cmd.exe" (entryproc=0x7ed07208) ... 003b:trace:cmd:wmain Full commandline 'L"/C \"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\""' 003b:trace:cmd:wmain Command line parm: 'L"\"C:\\users\\focht\\Temp\\{3CD9F337-4F1D-41C4-A1E4-86453C48EDC4}.bat\""' ... 003b:trace:cmd:wmain Set L"=Z:" to L"Z:\\home\\focht\\Downloads" ... 003b:Call KERNEL32.WriteFile(00000010,00129540,00000024,0033ab10,00000000) ret=7ed0063d Microsoft Windows 5.1.2600 (1.7.8) ... 003b:Call KERNEL32.WriteFile(00000010,00129540,0000001a,0033a4d0,00000000) ret=7ed0063d Z:\home\focht\Downloads> ... --- snip --- For whatever reason 'cmd' expects the first argument of the command line to be the executable name. With the executable name missing from 'argv[0]', '/C' is eaten (opt_c remains FALSE) and batch execution never takes place -> hangs on console input. Source: http://source.winehq.org/git/wine.git/blob/dd0b719a3a1419f34774fc4cd921f337… --- snip --- 2329 int wmain (int argc, WCHAR *argvW[]) 2330 { ... 2364 cmdLine = GetCommandLineW(); 2365 WINE_TRACE("Full commandline '%s'\n", wine_dbgstr_w(cmdLine)); 2366 args = 1; /* start at first arg, skipping cmd.exe itself */ ... --- snip --- $ sha1sum SotAInstaller.exe 5163cd5d92cb6c8a50e5b8169ca428afdf2b76b7 SotAInstaller.exe $du -sh SotAInstaller.exe 12M SotAInstaller.exe $ wine --version wine-1.7.8-220-g0bef543 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 10

[Bug 38398] New: Multiple application installers requiring native mspatcha.dll abort on 'PatchFiles' action (Adobe Reader 11)
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=38398 Bug ID: 38398 Summary: Multiple application installers requiring native mspatcha.dll abort on 'PatchFiles' action (Adobe Reader 11) Product: Wine Version: 1.7.40 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: msi Assignee: wine-bugs(a)winehq.org … [View More]

2 6

[Bug 37306] New: ApexDC crashes on start with wine configured as Vista or higher
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=37306 Bug ID: 37306 Summary: ApexDC crashes on start with wine configured as Vista or higher Product: Wine Version: 1.7.26 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: hk-wine(a)circlestorm.org ApexDC 1.6.0 x86_64 … [View More]

2 11

[Bug 36549] New: Trove crashes when run
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=36549 Bug ID: 36549 Summary: Trove crashes when run Product: Wine Version: 1.7.19 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: lostcoderhaley(a)gmail.com Created attachment 48645 --> http://bugs.winehq.org/attachment.cgi?id=… [View More]

2 18

[Bug 39008] New: Trove: Crash on startup
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=39008 Bug ID: 39008 Summary: Trove: Crash on startup Product: Wine Version: 1.7.48 Hardware: x86 OS: Mac OS X Status: UNCONFIRMED Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: philippe.groarke(a)gmail.com This is a crash that seems related to vcrun2012 and setting winecfg to … [View More]Vista. Before you ask, the game isn't directx11 (it actually starts in openGL I believe, it is an SDL2 game). The game is free so it makes for a nice testbed, though you would need a Trion account to test (also free of course). Steps to install trove: - Download GlyphInstaller. - winetricks vcrun2012 - Install Glyph. In glyph install Trove. Exit Glyph. - winecfg, set windows version to Vista. To test the game without Glyph, run like so: ~/.wine-trove/drive_c/Program Files/Glyph/Games/Trove/Live$ wine Trove.exe -k {credentials} -C "[AuthServer] Address = dal-c18-b01.dal.triongames.com:6560|dal-c18-b02.dal.triongames.com:6560|dal-c18-b03.dal.triongames.com:6560|dal-c18-b14.dal.triongames.com:6560|dal-c18-b15.dal.triongames.com:6560|dal-c18-b16.dal.triongames.com:6560|dal-c35-b05.dal.triongames.com:6560|dal-c35-b06.dal.triongames.com:6560|dal-c35-b07.dal.triongames.com:6560|dal-c35-b08.dal.triongames.com:6560" Both the game and the crash reporter crash on startup. Unhandled exception: page fault on read access to 0x00000020 in 32-bit code (0x00509304). Register dump: CS:001b SS:0023 DS:0023 ES:0023 FS:1007 GS:000f EIP:00509304 ESP:0033fdc0 EBP:0033fe10 EFLAGS:00010202( R- -- I - - - ) EAX:00000000 EBX:005f9fb8 ECX:000001ac EDX:0000000e ESI:00000000 EDI:005fa070 Stack dump: 0x0033fdc0: 005f9fb8 005138dc 005fa070 00010641 0x0033fdd0: 00010001 00000000 00000000 00000000 0x0033fde0: 00000000 00000000 00000000 461c22fd 0x0033fdf0: 00640000 00000000 00000000 00000000 0x0033fe00: 00000000 00000000 00000000 005f9fb8 0x0033fe10: 0033fe30 004f7fc4 0033fe38 00000000 0200: sel=1007 base=7ffc0000 limit=00000fff 32-bit rw- Backtrace: =>0 0x00509304 in crashhandler (+0x109304) (0x0033fe10) 1 0x004f7fc4 in crashhandler (+0xf7fc3) (0x0033fe30) 2 0x00505253 in crashhandler (+0x105252) (0x0033fe54) 3 0x004d509a in crashhandler (+0xd5099) (0x0033fe8c) 4 0x005115c0 in crashhandler (+0x1115bf) (0x0033fed0) 5 0x7b85024c _call_process_entry+0xb() in kernel32 (0x0033fee8) 6 0x7b852e48 _start_process+0xa7() in kernel32 (0x0033ff28) 7 0x7bc6e57c _call_thread_func_wrapper+0xb() in ntdll (0x0033ff38) 8 0x7bc706ad _call_thread_func+0x6c() in ntdll (0x0033ffb8) 9 0x7bc6e542 _call_thread_entry_point+0x11() in ntdll (0x0033ffd8) 10 0x7bc46f2f _start_process+0x1e() in ntdll (0x0033ffe8) 0x00509304: movl 0x20(%eax),%ebx Modules: Module Address Debug info Name (231 modules) PE 400000- 639000 Export crashhandler PE 40001000-401be000 Stabs libwine.1.dylib ELF 44296000-442c1000 Deferred iphlpapi<elf> \-PE 442a0000-442b9000 \ iphlpapi ELF 442c1000-442dc000 Deferred version<elf> \-PE 442d0000-442d9000 \ version ELF 44782000-447b4000 Deferred credui<elf> \-PE 44790000-447b0000 \ credui ELF 447db000-447ef000 Deferred psapi<elf> \-PE 447e0000-447ee000 \ psapi ELF 450c1000-450f4000 Deferred jsproxy<elf> \-PE 450d0000-450dc000 \ jsproxy ELF 45300000-4538a000 Deferred advapi32<elf> \-PE 45310000-45365000 \ advapi32 ELF 4538a000-454b9000 Deferred comctl32<elf> \-PE 45390000-45480000 \ comctl32 ELF 454b9000-4562b000 Deferred user32<elf> \-PE 454c0000-455cb000 \ user32 ELF 4562b000-45760000 Deferred gdi32<elf> \-PE 45630000-456e1000 \ gdi32 ELF 45760000-457b6000 Deferred winhttp<elf> \-PE 45770000-45795000 \ winhttp ELF 457b6000-45923000 Deferred oleaut32<elf> \-PE 457c0000-4589e000 \ oleaut32 ELF 45923000-45a9e000 Deferred ole32<elf> \-PE 45930000-45a20000 \ ole32 ELF 45a9e000-45b48000 Deferred rpcrt4<elf> \-PE 45aa0000-45b10000 \ rpcrt4 ELF 45b48000-45bba000 Deferred dbghelp<elf> \-PE 45b50000-45ba0000 \ dbghelp ELF 45bba000-45bf8000 Deferred ws2_32<elf> \-PE 45bc0000-45bef000 \ ws2_32 ELF 45bf8000-45ce2000 Deferred crypt32<elf> \-PE 45c00000-45cba000 \ crypt32 ELF 45ce2000-45f61000 Deferred shell32<elf> \-PE 45cf0000-45ef8000 \ shell32 ELF 45f61000-46002000 Deferred shlwapi<elf> \-PE 45f70000-45fc8000 \ shlwapi ELF 46002000-46184000 Deferred msvcp120<elf> \-PE 46010000-460d8000 \ msvcp120 ELF 46184000-46285000 Deferred msvcr120<elf> \-PE 46190000-46235000 \ msvcr120 PE 46285000-46306000 Deferred libfreetype.6.dylib ELF 46306000-4632d000 Deferred imm32<elf> \-PE 46310000-46326000 \ imm32 ELF 4632d000-463f7000 Deferred winemac<elf> \-PE 46330000-463b1000 \ winemac PE 49c46000-49cc5000 Deferred clouddocs ELF 49cc5000-49d02000 Deferred uxtheme<elf> \-PE 49cd0000-49cf8000 \ uxtheme ELF 7b800000-7ba8f000 Stabs kernel32<elf> \-PE 7b810000-7ba40000 \ kernel32 ELF 7bc00000-7bd03000 Stabs ntdll<elf> \-PE 7bc10000-7bcb3000 \ ntdll ELF 7bf00000-7bf03000 Deferred <wine-loader> PE 90008000-90084000 Deferred htmlrendering PE 90008000-90084000 Deferred htmlrendering PE 90008000-90084000 Deferred htmlrendering PE 90008000-90084000 Deferred htmlrendering PE 90114000-9012e000 Deferred crashreportersupport PE 90114000-9012e000 Deferred crashreportersupport PE 90114000-9012e000 Deferred crashreportersupport PE 90127000-9015d000 Deferred cfopendirectory PE 901b8000-9025f000 Deferred securityfoundation PE 9022f000-90239000 Deferred servicemanagement PE 902c2000-90349000 Deferred hiservices PE 903b3000-903cf000 Deferred langanalysis PE 903b3000-903cf000 Deferred langanalysis PE 903b3000-903cf000 Deferred langanalysis PE 90d72000-90db0000 Deferred libsystem_m.dylib PE 90da6000-90de8000 Deferred iconservices PE 90da6000-90de8000 Deferred iconservices PE 911b6000-911ee000 Deferred chunkinglibrary PE 912f2000-91573000 Deferred quartzcore PE 914db000-918ca000 Deferred coreimage PE 914db000-918ca000 Deferred coreimage PE 914db000-918ca000 Deferred coreimage PE 917ce000-917e6000 Deferred protocolbuffer PE 917ce000-917e6000 Deferred protocolbuffer PE 91862000-9190b000 Deferred corewifi PE 919b9000-91a0b000 Deferred applejpeg PE 91a33000-91a3d000 Deferred libcorevmclient.dylib PE 922b0000-9238e000 Deferred performanceanalysis PE 922b0000-9238e000 Deferred performanceanalysis PE 922b0000-9238e000 Deferred performanceanalysis PE 92375000-923db000 Deferred navigationservices PE 923f6000-927ac000 Deferred security PE 923f6000-927ac000 Deferred security PE 926d5000-926de000 Deferred help PE 926d5000-926de000 Deferred help PE 926d9000-92744000 Deferred languagemodeling PE 92c85000-92cd4000 Deferred dictionaryservices PE 92cbd000-92d17000 Deferred coreservicesinternal PE 92cbd000-92d17000 Deferred coreservicesinternal PE 92d9c000-92db1000 Deferred netauth PE 92d9c000-92db1000 Deferred netauth PE 92db5000-92dbd000 Deferred libsystem_sandbox.dylib PE 92db5000-92dbd000 Deferred libsystem_sandbox.dylib PE 92e25000-92e50000 Deferred libjpeg.dylib PE 92e25000-92e50000 Deferred libjpeg.dylib PE 92f40000-92f5f000 Deferred speechsynthesis PE 92f40000-92f5f000 Deferred speechsynthesis PE 93093000-930a9000 Deferred opengl PE 93093000-930a9000 Deferred opengl PE 930a2000-932b9000 Deferred audiotoolbox PE 930a2000-932b9000 Deferred audiotoolbox PE 930a2000-932b9000 Deferred audiotoolbox PE 93283000-935ee000 Deferred coredata PE 9351b000-9357e000 Deferred opencl PE 93f1c000-9412f000 Deferred libobjc.a.dylib PE 9410c000-9411e000 Deferred carbonsound PE 94117000-94125000 Deferred print PE 94117000-94125000 Deferred print PE 9412f000-9415f000 Deferred libpng.dylib PE 941e5000-941f5000 Deferred libcgcms.a.dylib PE 941e5000-941f5000 Deferred libcgcms.a.dylib PE 941ee000-94244000 Deferred debugsymbols PE 944de000-944e5000 Deferred libcvmspluginsupport.dylib PE 944de000-944e5000 Deferred libcvmspluginsupport.dylib PE 9450c000-9453e000 Deferred multitouchsupport PE 945a7000-945c2000 Deferred speechrecognitioncore PE 945c2000-945f8000 Deferred libxslt.1.dylib PE 945c2000-945f8000 Deferred libxslt.1.dylib PE 945f0000-947e0000 Deferred coreui PE 945f0000-947e0000 Deferred coreui PE 94836000-94842000 Deferred commonpanels PE 94836000-94842000 Deferred commonpanels PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 94e59000-95366000 Deferred foundation PE 954f4000-95514000 Deferred libcmph.dylib PE 95508000-95550000 Deferred libglimage.dylib PE 95508000-95550000 Deferred libglimage.dylib PE 95562000-959e8000 Deferred vimage PE 9599e000-95a07000 Deferred libtiff.dylib PE 959fa000-95a29000 Deferred apple80211 PE 959fa000-95a29000 Deferred apple80211 PE 95a1f000-95eb1000 Deferred coregraphics PE 95a1f000-95eb1000 Deferred coregraphics PE 95e3e000-95e6f000 Deferred generationalstorage PE 95e6b000-95e71000 Deferred audiounit PE 95e6b000-95e71000 Deferred audiounit PE 95e6c000-95f71000 Deferred iobluetooth PE 962b0000-962dd000 Deferred openscripting PE 962b0000-962dd000 Deferred openscripting PE 962cc000-962ef000 Deferred libsystem_asl.dylib PE 96699000-966bc000 Deferred libgl.dylib PE 96699000-966bc000 Deferred libgl.dylib PE 967af000-967bf000 Deferred commonauth PE 9680d000-96877000 Deferred libfontregistry.dylib PE 96923000-96926000 Deferred accelerate PE 96923000-96926000 Deferred accelerate PE 969ba000-96a1b000 Deferred libsystem_network.dylib PE 96aab000-96ab2000 Deferred libsystem_coreservices.dylib PE 96aae000-96b64000 Deferred systemconfiguration PE 96b2e000-96c81000 Deferred libfontparser.dylib PE 96b2e000-96c81000 Deferred libfontparser.dylib PE 96c78000-96d28000 Deferred searchkit PE 96d16000-96d26000 Deferred speechrecognition PE 96d1e000-96d41000 Deferred corebluetooth PE 96d1e000-96d41000 Deferred corebluetooth PE 96d32000-96d83000 Deferred libglu.dylib PE 96e68000-96e72000 Deferred libheimdal-asn1.dylib PE 96e68000-96e72000 Deferred libheimdal-asn1.dylib PE 96e6d000-96e70000 Deferred carbon PE 96e6d000-96e70000 Deferred carbon PE 96e70000-96f48000 Deferred osservices PE 96e70000-96f48000 Deferred osservices PE 96efb000-96f1d000 Deferred liblzma.5.dylib PE 96efb000-96f1d000 Deferred liblzma.5.dylib PE 96f76000-96f98000 Deferred libsystem_malloc.dylib PE 972d5000-972f2000 Deferred opendirectory PE 972d5000-972f2000 Deferred opendirectory PE 97346000-9734d000 Deferred libsystem.b.dylib PE 97348000-97350000 Deferred applicationservices PE 97349000-973e9000 Deferred ats PE 973ca000-97491000 Deferred ink PE 973ca000-97491000 Deferred ink PE 97468000-977dc000 Deferred carboncore PE 97770000-977ff000 Deferred ae PE 977d5000-977db000 Deferred libradiance.dylib PE 97b15000-97ca6000 Deferred desktopservicespriv PE 97b15000-97ca6000 Deferred desktopservicespriv PE 97c2c000-97c52000 Deferred sharing PE 97c2c000-97c52000 Deferred sharing PE 97c2c000-97c52000 Deferred sharing PE 97c59000-97d03000 Deferred corewlan PE 97c59000-97d03000 Deferred corewlan PE 97ce0000-97dd8000 Deferred libvmisc.dylib PE 97dd2000-97de2000 Deferred libgfxshared.dylib PE 98d96000-98da1000 Deferred tcc PE 98d96000-98da1000 Deferred tcc PE 98eb3000-98f01000 Deferred gss PE 98eb3000-98f01000 Deferred gss PE 99081000-9915a000 Deferred colorsync PE 9911c000-991a6000 Deferred printcore PE 9911c000-991a6000 Deferred printcore PE 9917a000-99419000 Deferred libicucore.a.dylib PE 99373000-993ea000 Deferred coreaudio PE 994d2000-994e0000 Deferred libunwind.dylib PE 99ae9000-99c7b000 Deferred uifoundation PE 99ebd000-99edc000 Deferred liblinearalgebra.dylib PE 99ebd000-99edc000 Deferred liblinearalgebra.dylib PE 99f42000-9a08d000 Deferred backup PE 99f42000-9a08d000 Deferred backup PE 9b957000-9beb4000 Deferred hitoolbox PE 9b957000-9beb4000 Deferred hitoolbox PE 9b957000-9beb4000 Deferred hitoolbox PE 9b957000-9beb4000 Deferred hitoolbox PE 9bd8f000-9be34000 Deferred coresymbolication PE 9bed0000-9bee0000 Deferred libcopyfile.dylib PE 9beda000-9bf25000 Deferred corevideo PE 9beda000-9bf25000 Deferred corevideo PE 9beda000-9bf25000 Deferred corevideo PE 9bf37000-9bf4a000 Deferred libbz2.1.0.dylib PE 9bf37000-9bf4a000 Deferred libbz2.1.0.dylib PE 9bfc3000-9c027000 Deferred remoteviewservices PE 9bfc3000-9c027000 Deferred remoteviewservices PE 9bfc3000-9c027000 Deferred remoteviewservices PE 9c025000-9c083000 Deferred symbolication PE 9c025000-9c083000 Deferred symbolication PE 9c025000-9c083000 Deferred symbolication PE 9c068000-9c200000 Deferred libblas.dylib PE 9c1db000-9c1e4000 Deferred libgif.dylib PE 9c34d000-9c4c5000 Deferred launchservices Threads: process tid prio (all id:s are in hex) 00000008 Trove.exe 00000009 0 0000000e services.exe 0000001f 0 0000001e 0 00000014 0 00000010 0 0000000f 0 00000012 winedevice.exe 0000001d 0 0000001c 0 00000019 0 00000018 0 00000013 0 0000001a plugplay.exe 00000021 0 00000020 0 0000001b 0 00000022 explorer.exe 00000026 0 00000025 0 00000024 0 00000023 0 00000027 (D) C:\Program Files\Glyph\Games\Trove\Live\CrashHandler.exe 00000028 0 <== 00000029 winedbg.exe 0000002a 0 System information: Wine build: wine-1.7.48-30-g5bd9d58 Platform: i386 Host system: Darwin Host version: 14.4.0 Unhandled exception: page fault on read access to 0x00000020 in 32-bit code (0x008b4b64). Register dump: CS:001b SS:0023 DS:0023 ES:0023 FS:1007 GS:000f EIP:008b4b64 ESP:0032fdbc EBP:0032fe0c EFLAGS:00010202( R- -- I - - - ) EAX:00000000 EBX:00c921d8 ECX:000001ac EDX:0000000e ESI:00000000 EDI:00c92290 Stack dump: 0x0032fdbc: 00c921d8 00b5458c 00c92290 00010641 0x0032fdcc: 00010001 00000000 00000000 00000000 0x0032fddc: 00000000 00000000 00000000 00c922b0 0x0032fdec: 0094a51b 00000000 00000000 00000000 0x0032fdfc: 00000000 00000000 00000000 00000001 0x0032fe0c: 0032fe30 0079bb27 0032fe28 00000000 0200: sel=1007 base=7ffc0000 limit=00000fff 32-bit rw- Backtrace: =>0 0x008b4b64 in trove (+0x4b4b64) (0x0032fe0c) 1 0x0079bb27 in trove (+0x39bb26) (0x0032fe30) 2 0x00780553 in trove (+0x380552) (0x0032fe54) 3 0x004f9b0a in trove (+0xf9b09) (0x0032fe8c) 4 0x00b45b02 in trove (+0x745b01) (0x0032fed0) 5 0x7b85024c _call_process_entry+0xb() in kernel32 (0x0032fee8) 6 0x7b852e48 _start_process+0xa7() in kernel32 (0x0032ff28) 7 0x7bc6e57c _call_thread_func_wrapper+0xb() in ntdll (0x0032ff38) 8 0x7bc706ad _call_thread_func+0x6c() in ntdll (0x0032ffb8) 9 0x7bc6e542 _call_thread_entry_point+0x11() in ntdll (0x0032ffd8) 10 0x7bc46f2f _start_process+0x1e() in ntdll (0x0032ffe8) 0x008b4b64: movl 0x20(%eax),%ebx Modules: Module Address Debug info Name (233 modules) PE 330000- 36d000 Deferred binkw32 PE 400000- df5000 Export trove PE e00000- edd000 Deferred iggy_w32 PE 10000000-10356000 Deferred d3dcompiler_47 PE 3b400000-3b432000 Deferred steam_api PE 40001000-401be000 Stabs libwine.1.dylib ELF 44104000-4418e000 Deferred advapi32<elf> \-PE 44110000-44169000 \ advapi32 ELF 4418e000-4440d000 Deferred shell32<elf> \-PE 44190000-443a4000 \ shell32 ELF 4440d000-444ae000 Deferred shlwapi<elf> \-PE 44410000-44474000 \ shlwapi ELF 444ae000-44620000 Deferred user32<elf> \-PE 444b0000-445c0000 \ user32 ELF 44620000-44755000 Deferred gdi32<elf> \-PE 44630000-446d6000 \ gdi32 ELF 4476f000-4478a000 Deferred version<elf> \-PE 44770000-44787000 \ version ELF 4478a000-447b5000 Deferred iphlpapi<elf> \-PE 44790000-447ad000 \ iphlpapi ELF 447b5000-447cb000 Deferred d3d11<elf> \-PE 447c0000-447c9000 \ d3d11 ELF 447cb000-447f8000 Deferred msacm32<elf> \-PE 447d0000-447f1000 \ msacm32 ELF 45800000-458cd000 Deferred msvcrt<elf> \-PE 45810000-45890000 \ msvcrt ELF 458cd000-45977000 Deferred rpcrt4<elf> \-PE 458d0000-4593f000 \ rpcrt4 ELF 45977000-45ae4000 Deferred oleaut32<elf> \-PE 45980000-45a5f000 \ oleaut32 ELF 45ae4000-45c5f000 Deferred ole32<elf> \-PE 45af0000-45be1000 \ ole32 ELF 45c5f000-45d25000 Deferred winmm<elf> \-PE 45c60000-45d0e000 \ winmm ELF 45d25000-45d4c000 Deferred imm32<elf> \-PE 45d30000-45d45000 \ imm32 ELF 45d4c000-45ece000 Deferred msvcp120<elf> \-PE 45d50000-45e22000 \ msvcp120 ELF 45ece000-45fcf000 Deferred msvcr120<elf> \-PE 45ed0000-45f7f000 \ msvcr120 ELF 45fcf000-4600d000 Deferred ws2_32<elf> \-PE 45fd0000-46004000 \ ws2_32 ELF 4600d000-460f7000 Deferred crypt32<elf> \-PE 46010000-460cf000 \ crypt32 PE 460f7000-46137000 Deferred libncurses.5.4.dylib PE 46137000-461b8000 Deferred libfreetype.6.dylib ELF 461b8000-46282000 Deferred winemac<elf> \-PE 461c0000-4623c000 \ winemac PE 49bba000-49c39000 Deferred clouddocs PE 6c740000-6c829000 Deferred sdl2 ELF 7a800000-7a95f000 Deferred opengl32<elf> \-PE 7a810000-7a8b8000 \ opengl32 ELF 7b800000-7ba8f000 Stabs kernel32<elf> \-PE 7b810000-7ba40000 \ kernel32 ELF 7bc00000-7bd03000 Stabs ntdll<elf> \-PE 7bc10000-7bcb3000 \ ntdll ELF 7bf00000-7bf03000 Deferred <wine-loader> PE 90008000-90084000 Deferred htmlrendering PE 90008000-90084000 Deferred htmlrendering PE 90008000-90084000 Deferred htmlrendering PE 90008000-90084000 Deferred htmlrendering PE 90114000-9012e000 Deferred crashreportersupport PE 90114000-9012e000 Deferred crashreportersupport PE 90114000-9012e000 Deferred crashreportersupport PE 90127000-9015d000 Deferred cfopendirectory PE 901b8000-9025f000 Deferred securityfoundation PE 9022f000-90239000 Deferred servicemanagement PE 902c2000-90349000 Deferred hiservices PE 903b3000-903cf000 Deferred langanalysis PE 903b3000-903cf000 Deferred langanalysis PE 903b3000-903cf000 Deferred langanalysis PE 90d72000-90db0000 Deferred libsystem_m.dylib PE 90da6000-90de8000 Deferred iconservices PE 90da6000-90de8000 Deferred iconservices PE 911b6000-911ee000 Deferred chunkinglibrary PE 912f2000-91573000 Deferred quartzcore PE 914db000-918ca000 Deferred coreimage PE 914db000-918ca000 Deferred coreimage PE 914db000-918ca000 Deferred coreimage PE 917ce000-917e6000 Deferred protocolbuffer PE 917ce000-917e6000 Deferred protocolbuffer PE 91862000-9190b000 Deferred corewifi PE 919b9000-91a0b000 Deferred applejpeg PE 91a33000-91a3d000 Deferred libcorevmclient.dylib PE 922b0000-9238e000 Deferred performanceanalysis PE 922b0000-9238e000 Deferred performanceanalysis PE 922b0000-9238e000 Deferred performanceanalysis PE 92375000-923db000 Deferred navigationservices PE 923f6000-927ac000 Deferred security PE 923f6000-927ac000 Deferred security PE 926d5000-926de000 Deferred help PE 926d5000-926de000 Deferred help PE 926d9000-92744000 Deferred languagemodeling PE 92c85000-92cd4000 Deferred dictionaryservices PE 92cbd000-92d17000 Deferred coreservicesinternal PE 92cbd000-92d17000 Deferred coreservicesinternal PE 92d9c000-92db1000 Deferred netauth PE 92d9c000-92db1000 Deferred netauth PE 92db5000-92dbd000 Deferred libsystem_sandbox.dylib PE 92db5000-92dbd000 Deferred libsystem_sandbox.dylib PE 92e25000-92e50000 Deferred libjpeg.dylib PE 92e25000-92e50000 Deferred libjpeg.dylib PE 92f40000-92f5f000 Deferred speechsynthesis PE 92f40000-92f5f000 Deferred speechsynthesis PE 93093000-930a9000 Deferred opengl PE 93093000-930a9000 Deferred opengl PE 930a2000-932b9000 Deferred audiotoolbox PE 930a2000-932b9000 Deferred audiotoolbox PE 930a2000-932b9000 Deferred audiotoolbox PE 93283000-935ee000 Deferred coredata PE 9351b000-9357e000 Deferred opencl PE 93f1c000-9412f000 Deferred libobjc.a.dylib PE 9410c000-9411e000 Deferred carbonsound PE 94117000-94125000 Deferred print PE 94117000-94125000 Deferred print PE 9412f000-9415f000 Deferred libpng.dylib PE 941e5000-941f5000 Deferred libcgcms.a.dylib PE 941e5000-941f5000 Deferred libcgcms.a.dylib PE 941ee000-94244000 Deferred debugsymbols PE 944de000-944e5000 Deferred libcvmspluginsupport.dylib PE 944de000-944e5000 Deferred libcvmspluginsupport.dylib PE 9450c000-9453e000 Deferred multitouchsupport PE 945a7000-945c2000 Deferred speechrecognitioncore PE 945c2000-945f8000 Deferred libxslt.1.dylib PE 945c2000-945f8000 Deferred libxslt.1.dylib PE 945f0000-947e0000 Deferred coreui PE 945f0000-947e0000 Deferred coreui PE 94836000-94842000 Deferred commonpanels PE 94836000-94842000 Deferred commonpanels PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 949ac000-94ff4000 Deferred facecore PE 94e59000-95366000 Deferred foundation PE 954f4000-95514000 Deferred libcmph.dylib PE 95508000-95550000 Deferred libglimage.dylib PE 95508000-95550000 Deferred libglimage.dylib PE 95562000-959e8000 Deferred vimage PE 9599e000-95a07000 Deferred libtiff.dylib PE 959fa000-95a29000 Deferred apple80211 PE 959fa000-95a29000 Deferred apple80211 PE 95a1f000-95eb1000 Deferred coregraphics PE 95a1f000-95eb1000 Deferred coregraphics PE 95e3e000-95e6f000 Deferred generationalstorage PE 95e6b000-95e71000 Deferred audiounit PE 95e6b000-95e71000 Deferred audiounit PE 95e6c000-95f71000 Deferred iobluetooth PE 962b0000-962dd000 Deferred openscripting PE 962b0000-962dd000 Deferred openscripting PE 962cc000-962ef000 Deferred libsystem_asl.dylib PE 96699000-966bc000 Deferred libgl.dylib PE 96699000-966bc000 Deferred libgl.dylib PE 967af000-967bf000 Deferred commonauth PE 9680d000-96877000 Deferred libfontregistry.dylib PE 96923000-96926000 Deferred accelerate PE 96923000-96926000 Deferred accelerate PE 969ba000-96a1b000 Deferred libsystem_network.dylib PE 96aab000-96ab2000 Deferred libsystem_coreservices.dylib PE 96aae000-96b64000 Deferred systemconfiguration PE 96b2e000-96c81000 Deferred libfontparser.dylib PE 96b2e000-96c81000 Deferred libfontparser.dylib PE 96c78000-96d28000 Deferred searchkit PE 96d16000-96d26000 Deferred speechrecognition PE 96d1e000-96d41000 Deferred corebluetooth PE 96d1e000-96d41000 Deferred corebluetooth PE 96d32000-96d83000 Deferred libglu.dylib PE 96e68000-96e72000 Deferred libheimdal-asn1.dylib PE 96e68000-96e72000 Deferred libheimdal-asn1.dylib PE 96e6d000-96e70000 Deferred carbon PE 96e6d000-96e70000 Deferred carbon PE 96e70000-96f48000 Deferred osservices PE 96e70000-96f48000 Deferred osservices PE 96efb000-96f1d000 Deferred liblzma.5.dylib PE 96efb000-96f1d000 Deferred liblzma.5.dylib PE 96f76000-96f98000 Deferred libsystem_malloc.dylib PE 972d5000-972f2000 Deferred opendirectory PE 972d5000-972f2000 Deferred opendirectory PE 97346000-9734d000 Deferred libsystem.b.dylib PE 97348000-97350000 Deferred applicationservices PE 97349000-973e9000 Deferred ats PE 973ca000-97491000 Deferred ink PE 973ca000-97491000 Deferred ink PE 97468000-977dc000 Deferred carboncore PE 97770000-977ff000 Deferred ae PE 977d5000-977db000 Deferred libradiance.dylib PE 97b15000-97ca6000 Deferred desktopservicespriv PE 97b15000-97ca6000 Deferred desktopservicespriv PE 97c2c000-97c52000 Deferred sharing PE 97c2c000-97c52000 Deferred sharing PE 97c2c000-97c52000 Deferred sharing PE 97c59000-97d03000 Deferred corewlan PE 97c59000-97d03000 Deferred corewlan PE 97ce0000-97dd8000 Deferred libvmisc.dylib PE 97dd2000-97de2000 Deferred libgfxshared.dylib PE 98d96000-98da1000 Deferred tcc PE 98d96000-98da1000 Deferred tcc PE 98eb3000-98f01000 Deferred gss PE 98eb3000-98f01000 Deferred gss PE 99081000-9915a000 Deferred colorsync PE 9911c000-991a6000 Deferred printcore PE 9911c000-991a6000 Deferred printcore PE 9917a000-99419000 Deferred libicucore.a.dylib PE 99373000-993ea000 Deferred coreaudio PE 994d2000-994e0000 Deferred libunwind.dylib PE 99ae9000-99c7b000 Deferred uifoundation PE 99ebd000-99edc000 Deferred liblinearalgebra.dylib PE 99ebd000-99edc000 Deferred liblinearalgebra.dylib PE 99f42000-9a08d000 Deferred backup PE 99f42000-9a08d000 Deferred backup PE 9b957000-9beb4000 Deferred hitoolbox PE 9b957000-9beb4000 Deferred hitoolbox PE 9b957000-9beb4000 Deferred hitoolbox PE 9b957000-9beb4000 Deferred hitoolbox PE 9bd8f000-9be34000 Deferred coresymbolication PE 9bed0000-9bee0000 Deferred libcopyfile.dylib PE 9beda000-9bf25000 Deferred corevideo PE 9beda000-9bf25000 Deferred corevideo PE 9beda000-9bf25000 Deferred corevideo PE 9bf37000-9bf4a000 Deferred libbz2.1.0.dylib PE 9bf37000-9bf4a000 Deferred libbz2.1.0.dylib PE 9bfc3000-9c027000 Deferred remoteviewservices PE 9bfc3000-9c027000 Deferred remoteviewservices PE 9bfc3000-9c027000 Deferred remoteviewservices PE 9c025000-9c083000 Deferred symbolication PE 9c025000-9c083000 Deferred symbolication PE 9c025000-9c083000 Deferred symbolication PE 9c068000-9c200000 Deferred libblas.dylib PE 9c1db000-9c1e4000 Deferred libgif.dylib PE 9c34d000-9c4c5000 Deferred launchservices Threads: process tid prio (all id:s are in hex) 00000008 (D) C:\Program Files\Glyph\Games\Trove\Live\Trove.exe 00000009 0 <== 0000000e services.exe 0000001f 0 0000001e 0 00000014 0 00000010 0 0000000f 0 00000012 winedevice.exe 0000001d 0 0000001c 0 00000019 0 00000018 0 00000013 0 0000001a plugplay.exe 00000021 0 00000020 0 0000001b 0 00000022 explorer.exe 00000026 0 00000025 0 00000024 0 00000023 0 System information: Wine build: wine-1.7.48-30-g5bd9d58 Platform: i386 Host system: Darwin Host version: 14.4.0 Here is a debug-all output that gives a little more information it seems: Backtrace: =>0 0x008b4b64 in trove (+0x4b4b64) (0x0033fdcc) 1 0x0079bb27 in trove (+0x39bb26) (0x0033fdf0) 2 0x00780553 in trove (+0x380552) (0x0033fe14) 3 0x004f9b0a in trove (+0xf9b09) (0x0033fe58) 4 0x7bc5b73a _relay_call+0x39() in ntdll (0x0033fe7c) 5 0x4568039d .L__wine_spec_relay_entry_point_786+0x14() in msvcr120 (0x0033fed0) 6 0x00000000 (0x0033fed0) 7 0x7b85024c _call_process_entry+0xb() in kernel32 (0x0033fee8) 8 0x7b852e48 _start_process+0xa7() in kernel32 (0x0033ff28) 9 0x7bc6e57c _call_thread_func_wrapper+0xb() in ntdll (0x0033ff38) 10 0x7bc706ad _call_thread_func+0x6c() in ntdll (0x0033ffb8) 11 0x7bc6e542 _call_thread_entry_point+0x11() in ntdll (0x0033ffd8) 12 0x7bc46f2f _start_process+0x1e() in ntdll (0x0033ffe8) -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 7

[Bug 37583] New: Trion's Glyph MMO manager crashes unimplemented function msvcr110.dll.?_GetConcurrency@details@Concurrency@@YAIXZ
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=37583 Bug ID: 37583 Summary: Trion's Glyph MMO manager crashes unimplemented function msvcr110.dll.?_GetConcurrency@details@Concurrency@@YAI XZ Product: Wine Version: 1.7.31 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: msvcrt Assignee: wine-… [View More]

2 11

[Bug 39076] New: Trion Glyph (MMPORG Defiance) installer crashes when trying to run through wine
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=39076 Bug ID: 39076 Summary: Trion Glyph (MMPORG Defiance) installer crashes when trying to run through wine Product: Wine Version: 1.6.2 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: whiskeykitten(a)gmail.com … [View More]

2 14

[Bug 39114] New: Trion's Glyph MMO manager installer crashes. "Unhandled exception: unimplemented function msvcr110.dll.?"
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=39114 Bug ID: 39114 Summary: Trion's Glyph MMO manager installer crashes. "Unhandled exception: unimplemented function msvcr110.dll.?" Product: Wine Version: 1.7.26 Hardware: x86-64 OS: Mac OS X Status: UNCONFIRMED Severity: major Priority: P2 Component: version Assignee: wine-bugs(a)winehq.org … [View More]

2 4

[Bug 35135] New: Air Video Server HD 1.x crashes on startup (NULL SERVER_INFO_101.sv101_comment returned from NetServerGetInfo)
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=35135 Bug ID: 35135 Summary: Air Video Server HD 1.x crashes on startup (NULL SERVER_INFO_101.sv101_comment returned from NetServerGetInfo) Product: Wine Version: 1.7.8 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: netapi32 Assignee: wine-bugs(a)winehq.org … [View More]Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says ... Prerequisite: Bonjour Print Services for Windows v2.x Download: http://support.apple.com/downloads/DL999/en_US/BonjourPSSetup.exe --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/AirVideoServer HD $ WINEDEBUG=+tid,+seh,+relay,+netapi32 wine ./AirVideoServerUI.exe >>log.txt 2>&1 ... 003e:Call netapi32.NetServerGetInfo(00000000,00000065,026fe6f8) ret=00438847 003e:trace:netapi32:NetServerGetInfo (null) 101 0x26fe6f8 003e:Call KERNEL32.GetComputerNameW(026fe520,026fe654) ret=7e028081 003e:Ret KERNEL32.GetComputerNameW() retval=00000001 ret=7e028081 003e:trace:netapi32:NetApiBufferAllocate (38, 0x26fe6f8) 003e:Call ntdll.RtlAllocateHeap(00110000,00000000,00000026) ret=7e02854b 003e:Ret ntdll.RtlAllocateHeap() retval=01c997d8 ret=7e02854b 003e:Call KERNEL32.GetVersionExW(026fe540) ret=7e028113 003e:Ret KERNEL32.GetVersionExW() retval=00000001 ret=7e028113 003e:Ret netapi32.NetServerGetInfo() retval=00000000 ret=00438847 003e:trace:seh:raise_exception code=c0000005 flags=0 addr=0x40f634 ip=0040f634 tid=003e 003e:trace:seh:raise_exception info[0]=00000000 003e:trace:seh:raise_exception info[1]=00000000 003e:trace:seh:raise_exception eax=00000000 ebx=01c89fb0 ecx=026fe714 edx=00000001 esi=026fe714 edi=00000000 003e:trace:seh:raise_exception ebp=026fe6e0 esp=026fe6d8 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010246 ... --- snip --- Application code showing access of SERVER_INFO_101.sv101_comment member: --- snip --- ... 0043882C 8D45 B8 LEA EAX,DWORD PTR SS:[EBP-48] 0043882F 50 PUSH EAX ; bufptr 00438830 6A 65 PUSH 65 ; level: SERVER_INFO_101 00438832 6A 00 PUSH 0 ; servername 00438834 C745 B4 00000000 MOV DWORD PTR SS:[EBP-4C],0 0043883B C745 B8 00000000 MOV DWORD PTR SS:[EBP-48],0 00438842 E8 1F8B5D00 CALL <JMP.&NETAPI32.NetServerGetInfo> 00438847 85C0 TEST EAX,EAX 00438849 75 5C JNZ SHORT AirVideo.004388A7 0043884B 8B45 B8 MOV EAX,DWORD PTR SS:[EBP-48] ; SERVER_INFO_101 0043884E 8D4D D4 LEA ECX,DWORD PTR SS:[EBP-2C] 00438851 FF70 14 PUSH DWORD PTR DS:[EAX+14] ; *boom* ... --- snip --- Dump of structure returned from NetServerGetInfo(): --- snip --- $+0 01C7B700 000001F4 $+4 01C7B704 01C7B718 ; UNICODE ptr "nexus4" $+8 01C7B708 00000005 $+C 01C7B70C 00000001 $+10 01C7B710 00001000 $+14 01C7B714 00000000 ; sv101_comment --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/aa370903%28v=vs.85%… --- quote --- typedef struct _SERVER_INFO_101 { DWORD sv101_platform_id; LPWSTR sv101_name; DWORD sv101_version_major; DWORD sv101_version_minor; DWORD sv101_type; LPWSTR sv101_comment; } SERVER_INFO_101, *PSERVER_INFO_101, *LPSERVER_INFO_101; ... sv101_comment Type: LPWSTR A pointer to a Unicode string specifying a comment describing the server. The comment can be null. --- quote --- "can" ... sure ;-) Maybe Wine could use an empty string by default to prevent applications from crashing that directly access this member without checking for NULL. Source: http://source.winehq.org/git/wine.git/blob/8b5ec5bb4911842966534102a602b0f0… --- snip --- 1018 NET_API_STATUS WINAPI NetServerGetInfo(LMSTR servername, DWORD level, LPBYTE* bufptr) 1019 { ... 1047 if (ret == NERR_Success) 1048 { 1049 /* INFO_100 structure is a subset of INFO_101 */ 1050 PSERVER_INFO_101 info = (PSERVER_INFO_101)*bufptr; 1051 OSVERSIONINFOW verInfo; 1052 1053 info->sv101_platform_id = PLATFORM_ID_NT; 1054 info->sv101_name = (LMSTR)(*bufptr + sizeof(SERVER_INFO_101)); 1055 memcpy(info->sv101_name, computerName, 1056 computerNameLen * sizeof(WCHAR)); 1057 verInfo.dwOSVersionInfoSize = sizeof(verInfo); 1058 GetVersionExW(&verInfo); 1059 info->sv101_version_major = verInfo.dwMajorVersion; 1060 info->sv101_version_minor = verInfo.dwMinorVersion; 1061 /* Use generic type as no wine equivalent of DC / Server */ 1062 info->sv101_type = SV_TYPE_NT; 1063 info->sv101_comment = NULL; 1064 } ... --- snip --- $ sha1sum AirVideoServerHD-1.0.11.exe d1b58dea685bcce3381e29b9cc2fefda90f97389 AirVideoServerHD-1.0.11.exe $ du -sh AirVideoServerHD-1.0.11.exe 11M AirVideoServerHD-1.0.11.exe $ wine --version wine-1.7.8-220-g0bef543 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 5

[Bug 18797] New: CATIAV5R19: Fails to install on Wine higher than 1.1.18
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=18797 Summary: CATIAV5R19: Fails to install on Wine higher than 1.1.18 Product: Wine Version: 1.1.22 Platform: PC OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: lukasz.wojnilowicz(a)gmail.com Created an attachment (id=21574) --> (http://… [View More]

2 17

[Bug 33006] New: Installation of Garmin Training Center 3.6.5 fails
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=33006 Bug #: 33006 Summary: Installation of Garmin Training Center 3.6.5 fails Product: Wine Version: 1.5.22 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: par.johansson8(a)comhem.se Classification: Unclassified Installation of … [View More]

2 28

[Bug 36066] New: Basecamp 4.25 : If an application complains about a lack of administrator privileges
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=36066 Bug ID: 36066 Summary: Basecamp 4.25 : If an application complains about a lack of administrator privileges Product: Wine Version: 1.6-rc2 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: sbec(a)heustoeffel.ch … [View More]

2 3

[Bug 33357] New: garmin basecamp 4.1.2 "requires administrator privileges" and will not run
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=33357 Bug #: 33357 Summary: garmin basecamp 4.1.2 "requires administrator privileges" and will not run Product: Wine Version: 1.5.27 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: andrew.duncan(a)ncl.ac.uk … [View More]

2 8

[Bug 34843] New: Garmin BaseCamp 4.1.2 fails due to unimplemented gdiplus.GdipCreateRegionRgnData
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=34843 Bug #: 34843 Summary: Garmin BaseCamp 4.1.2 fails due to unimplemented gdiplus.GdipCreateRegionRgnData Product: Wine Version: 1.7.5 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: gdiplus AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: … [View More]

2 19

[Bug 29938] New: signcode tool from .NET Framework SDK 1.1 crashes due to unimplemented function cryptui.dll.CryptUIWizDigitalSign
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=29938 Bug #: 29938 Summary: signcode tool from .NET Framework SDK 1.1 crashes due to unimplemented function cryptui.dll.CryptUIWizDigitalSign Product: Wine Version: 1.4-rc4 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org … [View More]

2 7

[Bug 38367] New: Desura client 0.0.20.2 crashes on unimplemented function msvcr120.dll.strtoull
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=38367 Bug ID: 38367 Summary: Desura client 0.0.20.2 crashes on unimplemented function msvcr120.dll.strtoull Product: Wine Version: 1.7.40 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: msvcrt Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- … [View More]

2 5

[Bug 25570] New: Crash when attempting to log in to Desura client
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=25570 Summary: Crash when attempting to log in to Desura client Product: Wine Version: 1.3.9 Platform: x86 URL: http://www.desura.com/DesuraInstaller.exe OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: leighmanthegreat(a)hotmail.com Created an … [View More]

2 11

[Bug 33109] New: Desura fails to update
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=33109 Bug #: 33109 Summary: Desura fails to update Product: Wine Version: 1.5.25 Platform: x86 URL: http://www.desura.com/DesuraInstaller.exe OS/Version: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: madewokherd(a)gmail.com … [View More]

2 5

[Bug 37527] New: Multiple games and applications fail to connect/login via SSL, reporting 'schannel failed to setup sequence detection' (Desura client, Darkfall, ARMA II multiplayer)
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=37527 Bug ID: 37527 Summary: Multiple games and applications fail to connect/login via SSL, reporting 'schannel failed to setup sequence detection' (Desura client, Darkfall, ARMA II multiplayer) Product: Wine Version: 1.7.30 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 … [View More] Component: secur32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, found this while trying out Desura client for Windows. The Linux client was discontinued/broken some time ago hence this might be useful for the 5 users left wanting to play with an up-to-date Desura :) A quick search turned up some more hits on this error: Desura -> https://forum.winehq.org/viewtopic.php?f=8&t=22986 ArmA II: Operation Arrowhead -> appdb, Multiplayer Darkfall -> reported multiple times in WineHQ forums, no resolution --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Desura $ WINEDEBUG=+tid,+seh,+relay,+secur32 wine ./desura.exe >>log.txt 2>&1 ... 002e:trace:secur32:InitializeSecurityContextA 0x2638f68 0x2638f08 "secure.desura.com" 0x0000811c 0 0 0xba0e154 0 (nil) 0xba0e148 0x2637970 0x2638f10 002e:trace:secur32:schan_InitializeSecurityContextA 0x2638ef0 0x2638f20 "secure.desura.com" 33052 0 0 0xba0e154 0 (nil) 0xba0e148 0x2637970 0x2638f10 ... 002e:trace:secur32:schan_InitializeSecurityContextW 0x2638ef0 0x2638f20 L"secure.desura.com" 0x0000811c 0 0 0xba0e154 0 (nil) 0xba0e148 0x2637970 0x2638f10 002e:trace:secur32:dump_buffer_desc Buffer desc 0xba0e154: 002e:trace:secur32:dump_buffer_desc buffer 0: cbBuffer 258, BufferType 0x2 pvBuffer 0x2635b68 002e:trace:secur32:dump_buffer_desc buffer 1: cbBuffer 0, BufferType 0 pvBuffer (nil) 002e:trace:secur32:dump_buffer_desc Buffer desc 0xba0e148: 002e:trace:secur32:dump_buffer_desc buffer 0: cbBuffer 0, BufferType 0x2 pvBuffer (nil) 002e:trace:secur32:dump_buffer_desc buffer 1: cbBuffer 0, BufferType 0x11 pvBuffer (nil) 002e:trace:secur32:schan_InitializeSecurityContextW Using expected_size 258. ... 002e:trace:secur32:schan_imp_handshake Handshake completed ... 002e:trace:secur32:ApplyControlToken 0x2638f08 0xba0e178 ... 002e:Call KERNEL32.FormatMessageA(00001200,00000000,80090302,00000000,0ba0e040,000000ff,00000000) ret=017216ce 002e:Ret KERNEL32.FormatMessageA() retval=00000000 ret=017216ce ... 002e:trace:secur32:InitializeSecurityContextA 0x2638f68 0x2638f08 "secure.desura.com" 0x0000811c 0 0 (nil) 0 0x2638f08 0xba0e184 0x2637970 0x2638f10 002e:trace:secur32:schan_InitializeSecurityContextA 0x2638ef0 0x2638f20 "secure.desura.com" 33052 0 0 (nil) 0 0xba0e0c8 0xba0e184 0x2637970 0x2638f10 ... 002e:trace:secur32:schan_InitializeSecurityContextW 0x2638ef0 0x2638f20 L"secure.desura.com" 0x0000811c 0 0 (nil) 0 0xba0e0c8 0xba0e184 0x2637970 0x2638f10 002e:trace:secur32:dump_buffer_desc Buffer desc 0xba0e184: 002e:trace:secur32:dump_buffer_desc buffer 0: cbBuffer 0, BufferType 0 pvBuffer (nil) ... 002e:trace:secur32:DeleteSecurityContext 0x2638f08 002e:trace:secur32:schan_DeleteSecurityContext context_handle 0x2638f20 002e:trace:secur32:schan_gnutls_log <4> REC[0x7c701708]: Start of epoch cleanup 002e:trace:secur32:schan_gnutls_log <4> REC[0x7c701708]: End of epoch cleanup 002e:trace:secur32:schan_gnutls_log <4> REC[0x7c701708]: Epoch #1 freed ... 002e:trace:secur32:FreeCredentialsHandle 0x2638f68 002e:trace:secur32:schan_FreeCredentialsHandle phCredential 0x2638ef0 ... 002e:Call KERNEL32.RaiseException(e06d7363,00000001,00000003,0ba0e204) ret=01009339 002e:trace:seh:raise_exception code=e06d7363 flags=1 addr=0x7b83af77 ip=7b83af77 tid=002e 002e:trace:seh:raise_exception info[0]=19930520 002e:trace:seh:raise_exception info[1]=0ba0e248 002e:trace:seh:raise_exception info[2]=018261d0 002e:trace:seh:raise_exception eax=7b826e55 ebx=7b8be000 ecx=19930520 edx=0ba0e144 esi=0ba0e1e8 edi=0ba0e1b0 002e:trace:seh:raise_exception ebp=0ba0e188 esp=0ba0e124 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000283 002e:trace:seh:call_stack_handlers calling handler at 0x17f0d98 code=e06d7363 flags=1 ... 0023:Call user32.SetWindowTextW(000100ee,02635de8 L"Failed to login\n\nSSL connect error (https://secure.desura.com/3/memberlogin) [schannel: failed to setup sequence detection] [58.35]") ret=01a3af80 --- snip --- I left out multiple non-failing 'InitializeSecurityContextA' calls, denoting different connection stages/phases. The failing call to 'ApplyControlToken' returning 'SEC_E_UNSUPPORTED_FUNCTION' is mostly harmless. The last call to 'InitializeSecurityContextA' -> 'schan_InitializeSecurityContextA' also fails, returning 'SEC_E_INCOMPLETE_MESSAGE'. . That's on the connection/protocol tear-down path (SSL close notify message). --- snip --- ... 01732756 LEA EAX,DWORD PTR DS:[ECX+8] 01732759 MOV DWORD PTR SS:[ESP+18],0 01732761 PUSH EAX ; ptsExpiry 01732762 LEA EAX,DWORD PTR DS:[ESI+44] 01732765 MOV DWORD PTR SS:[ESP+38],0 0173276D PUSH EAX ; pfContextAttr 0173276E LEA EAX,DWORD PTR SS:[ESP+3C] 01732772 MOV DWORD PTR SS:[ESP+40],1 0173277A PUSH EAX ; pOutput 0173277B MOV EAX,DWORD PTR DS:[1834318] 01732780 PUSH ECX ; phNewContext 01732781 PUSH 0 ; Reserved2 = 0 01732783 PUSH 0 ; pInput = NULL 01732785 MOV EAX,DWORD PTR DS:[EAX+18] 01732788 PUSH 0 ; TargetDataRep = 0 0173278A PUSH 0 ; Reserved1 = NUL 0173278C PUSH DWORD PTR DS:[ESI+40] ; fContextReq = 0x811C 0173278F PUSH EDX ; pszTargetName = "secure.desura.com" 01732790 PUSH ECX ; phContext 01732791 PUSH DWORD PTR DS:[ESI+8] ; phCredential 01732794 CALL EAX ; InitializeSecurityContextA 01732796 TEST EAX,EAX ; eax = 0x80090318 01732798 JE SHORT webcore.017327A1 0173279A CMP EAX,90317 0173279F JNZ SHORT webcore.017327F6 ... --- snip --- fContextReq = 0x811C -> ISC_REQ_STREAM | ISC_REQ_ALLOCATE_MEMORY | ISC_REQ_CONFIDENTIALITY | ISC_REQ_SEQUENCE_DETECT | ISC_REQ_REPLAY_DETECT Unfortunately the failing protocol sequence on tear-down path wasn't even responsible for the problem. It took me some good hours to debug this out as the error code is internally maintained and propagated through some objects until the C++ exception is finally raised. At one time during SSL connection sequence, the client code checks if the required context attributes are met. It specifically looks for 'ISC_RET_SEQUENCE_DETECT' while Wine returned 0x100 ('ISC_REQ_ALLOCATE_MEMORY'). Source: http://source.winehq.org/git/wine.git/blob/4d97b3232310d8a71610a5c97b9738fb… --- snip --- 775 static SECURITY_STATUS SEC_ENTRY schan_InitializeSecurityContextW( 776 PCredHandle phCredential, PCtxtHandle phContext, SEC_WCHAR *pszTargetName, 777 ULONG fContextReq, ULONG Reserved1, ULONG TargetDataRep, 778 PSecBufferDesc pInput, ULONG Reserved2, PCtxtHandle phNewContext, 779 PSecBufferDesc pOutput, ULONG *pfContextAttr, PTimeStamp ptsExpiry) 780 { ... 910 *pfContextAttr = 0; 911 if (ctx->req_ctx_attr & ISC_REQ_ALLOCATE_MEMORY) 912 *pfContextAttr |= ISC_RET_ALLOCATED_MEMORY; 913 914 return ret; 915 } --- snip --- You need to handle (return) more context attributes, at least 'ISC_RET_SEQUENCE_DETECT', 'ISC_RET_REPLAY_DETECT', 'ISC_RET_CONFIDENTIALITY', 'ISC_RET_STREAM' in addition to 'ISC_RET_ALLOCATED_MEMORY'. I tested a fix and it allows to login with Desura, visit market place, download games etc. $ sha1sum DesuraInstaller.exe 8694863a4fe8989de4e57d249ba23e637dc36cd7 DesuraInstaller.exe $ du -sh DesuraInstaller.exe 1.2M DesuraInstaller.exe $ wine --version wine-1.7.30-112-g5d17f9b Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 5

[Bug 37536] New: Desura needs implementation of msvcr120.dll.___lc_locale_name_func
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=37536 Bug ID: 37536 Summary: Desura needs implementation of msvcr120.dll.___lc_locale_name_func Product: Wine Version: 1.7.30 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: msvcrt Assignee: wine-bugs(a)winehq.org Reporter: sebastian(a)fds-team.de Distribution: --… [View More]

2 12

[Bug 36073] New: Unimplemented function KERNEL32.dll.GetFinalPathNameByHandleW
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=36073 Bug ID: 36073 Summary: Unimplemented function KERNEL32.dll.GetFinalPathNameByHandleW Product: Wine Version: 1.6.2 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: matyapiro31(a)gmail.com Onedrive.exe says that … [View More]

2 11

[Bug 35375] New: Unimplemented function COMCTL32.dll.380
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=35375 Bug ID: 35375 Summary: Unimplemented function COMCTL32.dll.380 Product: Wine Version: 1.7.10 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: comctl32 Assignee: wine-bugs(a)winehq.org Reporter: denis.bonnenfant(a)diderot.org Classification: Unclassified Created attachment 47178 … [View More]

2 24

[Bug 32711] New: BSAopt fails with "Unhandled exception: unimplemented function ADVAPI32.dll.RegSetKeyValueA called"
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=32711 Bug #: 32711 Summary: BSAopt fails with "Unhandled exception: unimplemented function ADVAPI32.dll.RegSetKeyValueA called" Product: Wine Version: 1.5.21 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: advapi32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: daniel.… [View More]

2 15

[Bug 34851] New: 64-bit Autodesk Fusion 360 installer needs kernel32 GetFinalPathNameByHandleA/W
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=34851 Bug #: 34851 Summary: 64-bit Autodesk Fusion 360 installer needs kernel32 GetFinalPathNameByHandleA/W Product: Wine Version: 1.7.5 Platform: x86-64 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: kernel32 AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: … [View More]Unclassified Hello folks, as the summary says... An appdb user mentioned this here: http://appdb.winehq.org/objectManager.php?sClass=version&iId=29272 Direct link to bootstrapper downloader location here (to work around browser OS/platform check): https://dl.appstreaming.autodesk.com/production/installers/Fusion%20360%20C… Prerequisite: 64-bit WINEPREFIX and Winver set to "Windows 7" Download/installation is almost done when an error dialog is shown, stating: "GetFinalPathNameByHandle not available on this platform" Log file content, mentioned in error dialog: --- snip --- ... 2013-11-03 20:29:50,805 - adsk.dls.streamer.process - ERROR :: Exception during processing: Traceback (most recent call last): File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\process.py", line 935, in execute File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\process.py", line 910, in _execute_base_impl File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\process.py", line 771, in _config_app File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\process.py", line 463, in _executetasks File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\utils.py", line 564, in activate_configurations File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\process.py", line 1063, in activate_configurations File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\manifests.py", line 383, in walk File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\manifests.py", line 405, in _walk File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\process.py", line 1058, in _visit_file File "W:\SRC\Neutron\Installer\Streamer\src\adsk\dls\streamer\windows\platform.py", line 685, in activate_configuration File "F:\P4\Neutron\3P\PYTHON\3.3_slim_a\WIN64\lib\shutil.py", line 221, in copy File "F:\P4\Neutron\3P\PYTHON\3.3_slim_a\WIN64\lib\shutil.py", line 92, in copyfile File "F:\P4\Neutron\3P\PYTHON\3.3_slim_a\WIN64\lib\shutil.py", line 77, in _samefile File "C:\PROJECTS\Neutron3rd\PYTHON\3.3_slim_a\WIN64\lib\ntpath.py", line 661, in samefile NotImplementedError: GetFinalPathNameByHandle not available on this platform ------------------------------------------------------------------------------- 2013-11-03 20:29:50,807 - adsk.dls.streamer.process - WARNING :: Error detected, removing incomplete packages 2013-11-03 20:29:51,770 - adsk.dls.streamer.utils - WARNING :: Could not remove non-existant file: c:\users\focht\local settings\application data\autodesk\webdeploy\production\201fd6e278bda5ff82a09daf7e42854420d9b4bc\fusion 360.server.config 2013-11-03 20:29:55,568 - adsk.dls.streamer.registry - INFO :: Shutting down database connection --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/aa364962%28v=vs.85%… $ sha1sum Fusion\ 360\ Client\ Downloader.exe 3621396240db11f87a1263c4593a7b760308a2d9 Fusion 360 Client Downloader.exe $ du -sh Fusion\ 360\ Client\ Downloader.exe 5.4M Fusion 360 Client Downloader.exe $ wine --version wine-1.7.5-251-gbcf4ded Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes. [View Less]

2 21

[Bug 34913] New: GEOVIA Surpac 6.x (geology and mine planning software) needs vbscript:Global_InStrRev and vbscript:Global_Replace
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=34913 Bug #: 34913 Summary: GEOVIA Surpac 6.x (geology and mine planning software) needs vbscript:Global_InStrRev and vbscript:Global_Replace Product: Wine Version: 1.7.6 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: vbscript AssignedTo: wine-bugs(a)winehq.org … [View More]

2 5

[Bug 38072] New: GEOVIA Surpac 6.x (geology and mine planning software) installer reports 'WshShell3_Run failed to convert wait argument'
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=38072 Bug ID: 38072 Summary: GEOVIA Surpac 6.x (geology and mine planning software) installer reports 'WshShell3_Run failed to convert wait argument' Product: Wine Version: 1.7.36 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.… [View More]org Reporter: focht(a)gmx.net Distribution: --- Hello folks, nothing serious (installer doesn't fail), just spotted by chance within logs. --- snip --- $ WINEDEBUG=+tid,+seh,+relay,+msi,+vbscript,+wshom,+ole,+variant wine msiexec -i surpac_63.msi >>log.txt 2>&1 ... 0047:trace:wshom:WshShell3_Invoke (1000 {00000000-0000-0000-0000-000000000000} 0 1 0x88e634 (nil) 0x88e580 0x88e57c) ... 0047:trace:ole:dump_DispParms args=2 named args=0 0047:trace:ole:dump_DispParms args: 0047:trace:ole:dump_DispParms [0] 0x5c21e0 {VT_I2: 0} 0047:trace:ole:dump_DispParms [1] 0x5c21f0 {VT_VARIANT|VT_BYREF: 0x16e5a4 {VT_BSTR: L"cacls \"C:\\users\\Public\\Gemcom\\Surpac\\63\" /T /E /G EveryOne:F"}} 0047:trace:ole:ITypeInfo_fnInvoke invoking: L"Run"(4) parm0: L"Command" parm1: L"WindowStyle" parm2: L"WaitOnReturn" parm3: L"out_ExitCode" memid is 000003e8 Param 0: tdesc.vartype 8 (VT_BSTR) u.paramdesc.wParamFlags PARAMFLAG_FIN u.paramdesc.lpex (nil) Param 1: tdesc.vartype 26 (ptr to VT_VARIANT) u.paramdesc.wParamFlags PARAMFLAG_FIN PARAMFLAG_FOPT u.paramdesc.lpex (nil) Param 2: tdesc.vartype 26 (ptr to VT_VARIANT) u.paramdesc.wParamFlags PARAMFLAG_FIN PARAMFLAG_FOPT u.paramdesc.lpex (nil) Param 3: tdesc.vartype 26 (ptr to VT_INT) u.paramdesc.wParamFlags PARAMFLAG_FOUT PARAMFLAG_FRETVAL u.paramdesc.lpex (nil) funckind: 1 (pure virtual) invkind: 1 (func) callconv: 4 (stdcall) oVft: 36 cParamsOpt: 2 wFlags: 0 elemdescFunc (return value type): tdesc.vartype 25 (VT_HRESULT) u.paramdesc.wParamFlags PARAMFLAGS_NONE u.paramdesc.lpex (nil) helpstring: (null) entry: invalid ... 0047:trace:ole:ITypeInfo_fnInvoke changing args 0047:trace:ole:ITypeInfo_fnInvoke 0x5c21f0 {VT_VARIANT|VT_BYREF: 0x16e5a4 {VT_BSTR: L"cacls \"C:\\users\\Public\\Gemcom\\Surpac\\63\" /T /E /G EveryOne:F"}} 0047:trace:variant:VariantChangeTypeEx (0x57ac88 {VT_VARIANT|VT_BYREF: (null)},0x5c21f0 {VT_VARIANT|VT_BYREF: 0x16e5a4 {VT_BSTR: L"cacls \"C:\\users\\Public\\Gemcom\\Surpac\\63\" /T /E /G EveryOne:F"}},0x00000400,0x0000,VT_BSTR) ... 0047:trace:variant:VariantChangeTypeEx returning 0x00000000, 0x57ac88 {VT_BSTR: L"cacls \"C:\\users\\Public\\Gemcom\\Surpac\\63\" /T /E /G EveryOne:F"} 0047:trace:ole:ITypeInfo_fnInvoke 0x5c21e0 {VT_I2: 0} 0047:trace:variant:VariantCopy (0x57acd8 {VT_EMPTY},0x5c21e0 {VT_I2: 0}) 0047:trace:variant:VariantClear (0x57acd8 {VT_EMPTY}) 0047:trace:ole:DispCallFunc (0xf7035948, 36, 4, 10, 4, 0x57ad18, 0x57ad08, 0x88dc18 (vt=10)) ... 0047:trace:ole:DispCallFunc arg 0: type VT_BSTR 0x57ac88 {VT_BSTR: L"cacls \"C:\\users\\Public\\Gemcom\\Surpac\\63\" /T /E /G EveryOne:F"} 0047:trace:ole:DispCallFunc arg 1: type VT_VARIANT|VT_BYREF 0x57ac98 {VT_VARIANT|VT_BYREF: 0x57acd8 {VT_I2: 0}} 0047:trace:ole:DispCallFunc arg 2: type VT_VARIANT|VT_BYREF 0x57aca8 {VT_VARIANT|VT_BYREF: 0x57ace8 {VT_ERROR: 80020004}} 0047:trace:ole:DispCallFunc arg 3: type VT_I4|VT_BYREF 0x57acb8 {VT_I4|VT_BYREF 0x88dc08} 0047:trace:wshom:WshShell3_Run (L"cacls \"C:\\users\\Public\\Gemcom\\Surpac\\63\" /T /E /G EveryOne:F" 0x57acd8 {VT_I2: 0} 0x57ace8 {VT_ERROR: 80020004} 0x88dc08) 0047:Call oleaut32.VariantInit(0088da10) ret=f7023e03 0047:trace:variant:VariantInit (0x88da10) 0047:Ret oleaut32.VariantInit() retval=0088da10 ret=f7023e03 0047:Call oleaut32.VariantChangeType(0088da10,0057acd8,00000000,00000003) ret=f7023e2b 0047:trace:variant:VariantChangeTypeEx (0x88da10 {VT_EMPTY},0x57acd8 {VT_I2: 0},0x00000400,0x0000,VT_I4) 0047:trace:variant:VariantClear (0x88d8e8 {VT_EMPTY}) 0047:trace:variant:VariantClear (0x88d8d8 {VT_EMPTY}) 0047:trace:variant:VariantCopyInd (0x88d8d8 {VT_EMPTY},0x57acd8 {VT_I2: 0}) 0047:trace:variant:VariantCopy (0x88d8d8 {VT_EMPTY},0x57acd8 {VT_I2: 0}) 0047:trace:variant:VariantClear (0x88d8d8 {VT_EMPTY}) 0047:trace:variant:VARIANT_Coerce (0x88d8e8 {VT_EMPTY},0x00000400,0x0000,0x88d8d8 {VT_I2: 0},VT_I4) 0047:trace:variant:VariantCopy (0x88da10 {VT_EMPTY},0x88d8e8 {VT_I4: 0}) 0047:trace:variant:VariantClear (0x88da10 {VT_EMPTY}) 0047:trace:variant:VariantClear (0x88d8e8 {VT_I4: 0}) 0047:trace:variant:VariantClear (0x88d8d8 {VT_I2: 0}) 0047:trace:variant:VariantChangeTypeEx returning 0x00000000, 0x88da10 {VT_I4: 0} 0047:Ret oleaut32.VariantChangeType() retval=00000000 ret=f7023e2b 0047:Call oleaut32.VariantInit(0088da00) ret=f7023e9d 0047:trace:variant:VariantInit (0x88da00) 0047:Ret oleaut32.VariantInit() retval=0088da00 ret=f7023e9d 0047:Call oleaut32.VariantChangeType(0088da00,0057ace8,00000000,00000003) ret=f7023ec5 0047:trace:variant:VariantChangeTypeEx (0x88da00 {VT_EMPTY},0x57ace8 {VT_ERROR: 80020004},0x00000400,0x0000,VT_I4) 0047:trace:variant:VariantClear (0x88d8e8 {VT_EMPTY}) 0047:trace:variant:VariantClear (0x88d8d8 {VT_EMPTY}) 0047:trace:variant:VariantCopyInd (0x88d8d8 {VT_EMPTY},0x57ace8 {VT_ERROR: 80020004}) 0047:trace:variant:VariantCopy (0x88d8d8 {VT_EMPTY},0x57ace8 {VT_ERROR: 80020004}) 0047:trace:variant:VariantClear (0x88d8d8 {VT_EMPTY}) 0047:trace:variant:VARIANT_Coerce (0x88d8e8 {VT_EMPTY},0x00000400,0x0000,0x88d8d8 {VT_ERROR: 80020004},VT_I4) 0047:trace:variant:VariantClear (0x88d8e8 {VT_EMPTY}) 0047:trace:variant:VariantClear (0x88d8d8 {VT_ERROR: 80020004}) 0047:trace:variant:VariantChangeTypeEx returning 0x80020005, 0x88da00 {VT_EMPTY} 0047:Ret oleaut32.VariantChangeType() retval=80020005 ret=f7023ec5 0047:err:wshom:WshShell3_Run failed to convert wait argument, 0x80020005 ... 0047:trace:ole:DispCallFunc retval: 0x88dc18 {VT_ERROR: 80020005} --- sinp --- The extracted VBScript code (MSI custom action): --- snip --- Const SILENTMODE = 0 'do not open any windows ... if not (strCommand = "") then Call objShell.Run(strCommand, SILENTMODE) end if ... --- snip --- 'WaitOnReturn' is optional hence must be treated so in WshShell3_Run(). $ sha1sum Surpac_Viewer.zip 554c7e0d552667747813a19f6a2a8c77bb7d46e6 Surpac_Viewer.zip $ du -sh Surpac_Viewer.zip 137M Surpac_Viewer.zip $ wine --version wine-1.7.36-41-ge4cb3b5 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes. [View Less]

2 7

[Bug 37261] New: Dasher crashes on start in mshtml:get_node()
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

https://bugs.winehq.org/show_bug.cgi?id=37261 Bug ID: 37261 Summary: Dasher crashes on start in mshtml:get_node() Product: Wine Version: 1.7.26 Hardware: x86 URL: http://www.chessclub.com/bits/interface/Dasher_154_ins taller.exe OS: Linux Status: NEW Keywords: download Severity: normal Priority: P2 Component: mshtml Assignee: … [View More]

2 5

[Bug 10716] New: Spurious hyperlink rendering in Blitzin 2.34
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=10716 Summary: Spurious hyperlink rendering in Blitzin 2.34 Product: Wine Version: CVS/GIT Platform: Other OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-richedit AssignedTo: wine-bugs(a)winehq.org ReportedBy: Andrew.Talbot(a)talbotville.com Patch git-commit f945f16de201dbd834da10701025665bfa8f05ee "riched20: … [View More]

2 17

[Bug 10809] New: Directory selection broken in 16-bit File dialog
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=10809 Summary: Directory selection broken in 16-bit File dialog Product: Wine Version: 0.9.50. Platform: Other OS/Version: other Status: UNCONFIRMED Severity: normal Priority: P2 Component: wine-user AssignedTo: wine-bugs(a)winehq.org ReportedBy: Andrew.Talbot(a)talbotville.com The following patch renders the "Directories" pane of 16-bit File … [View More]

2 19

[Bug 12098] New: Text positioning regression in Dragon Naturally Speaking 9
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=12098 Summary: Text positioning regression in Dragon Naturally Speaking 9 Product: Wine Version: CVS/GIT Platform: Other OS/Version: other Status: NEW Keywords: regression Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: dank(a)kegel.com Sometime between wine-0.9.57 and … [View More]

2 13

[Bug 14462] New: Blitzin2: Cursor not visible
by wine-bugs＠winehq.org 28 Nov '21

28 Nov '21

http://bugs.winehq.org/show_bug.cgi?id=14462 Summary: Blitzin2: Cursor not visible Product: Wine Version: 1.1.1 Platform: Other URL: http://www.chessclub.com/bits/interface/blitzin234.exe OS/Version: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: richedit AssignedTo: wine-bugs(a)winehq.org ReportedBy: Andrew.Talbot(a)talbotville.com Git commit … [View More]

2 5

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

wine-bugs August 2017