wine-bugs February 2018

wine-bugs@winehq.org

1 participants
8011 discussions

[Bug 26994] New: Microsoft reader crashes due to unimpl msvcirt.dll.?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=26994 Summary: Microsoft reader crashes due to unimpl msvcirt.dll.?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ Product: Wine Version: 1.3.19 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, follow-up of bug 18644 The app crashes now due to msvcirt.dll.?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ missing --- snip --- ... 0025:Call msvcirt.??0ostrstream@@QAE@XZ(0032efc8,00000001) ret=5fb5a3f2 0025:fixme:msvcirt:MSVCIRT_ostrstream_sl_void (0x32efc8) stub 0025:Ret msvcirt.??0ostrstream@@QAE@XZ() retval=0032efc8 ret=5fb5a3f2 0025:Call msvcirt.??6ostream@@QAEAAV0@PBD@Z(0032efc8,5fb52120,5fb521b0) ret=5fb5a405 0025:fixme:msvcirt:MSVCIRT_operator_sl_pchar (0x32efc8)->(" in regsubget") stub 0025:Ret msvcirt.??6ostream@@QAEAAV0@PBD@Z() retval=0032efc8 ret=5fb5a405 0025:Call msvcirt.?ends@@YAAAVostream@@AAV1@@Z(0032efc8) ret=5fb5a40c 0025:fixme:msvcirt:MSVCIRT_ends (0x32efc8)->() stub 0025:Ret msvcirt.?ends@@YAAAVostream@@AAV1@@Z() retval=0032efc8 ret=5fb5a40c 0025:Call msvcirt.??0ostrstream@@QAE@XZ(0032f020,00000001) ret=5fb5a414 0025:fixme:msvcirt:MSVCIRT_ostrstream_sl_void (0x32f020) stub 0025:Ret msvcirt.??0ostrstream@@QAE@XZ() retval=0032f020 ret=5fb5a414 0025:Call msvcirt.??6ostream@@QAEAAV0@PBD@Z(0032f020,5fb521c8,7bc64387) ret=5fb5a41b 0025:fixme:msvcirt:MSVCIRT_operator_sl_pchar (0x32f020)->("SOFTWARE\\Microsoft\\Windows\\CurrentVersion") stub 0025:Ret msvcirt.??6ostream@@QAEAAV0@PBD@Z() retval=0032f020 ret=5fb5a41b 0025:Call msvcirt.??6ostream@@QAEAAV0@PBD@Z(0032f020,7bc64387,03000000) ret=5fb5a439 0025:fixme:msvcirt:MSVCIRT_operator_sl_pchar (0x32f020)->("\x8bE\xd0\x8bU\xd4\x83\xc4@[^]\xc2\x0c") stub 0025:Ret msvcirt.??6ostream@@QAEAAV0@PBD@Z() retval=0032f020 ret=5fb5a439 0025:Call msvcirt.?ends@@YAAAVostream@@AAV1@@Z(0032f020) ret=5fb5a443 0025:fixme:msvcirt:MSVCIRT_ends (0x32f020)->() stub 0025:Ret msvcirt.?ends@@YAAAVostream@@AAV1@@Z() retval=0032f020 ret=5fb5a443 0025:Call msvcrt.??3@YAXPAX@Z(00000000) ret=5fb5a5a7 0025:Call ntdll.RtlFreeHeap(00110000,00000000,00000000) ret=6856981b 0025:Ret ntdll.RtlFreeHeap() retval=00000001 ret=6856981b 0025:Ret msvcrt.??3@YAXPAX@Z() retval=00000001 ret=5fb5a5a7 0025:Call KERNEL32.RaiseException(80000100,00000001,00000002,0032efa0) ret=6afaac31 0025:trace:seh:raise_exception code=80000100 flags=1 addr=0x7b83821f ip=7b83821f tid=0025 0025:trace:seh:raise_exception info[0]=6afaac94 0025:trace:seh:raise_exception info[1]=6afacbb6 wine: Call from 0x7b83821f to unimplemented function msvcirt.dll.?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ, aborting --- snip --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 12

[Bug 41387] New: An error message displays when I run wine. Program is running but message is really annoying..
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=41387 Bug ID: 41387 Summary: An error message displays when I run wine. Program is running but message is really annoying.. Product: Wine Version: 0.9.1. Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: shashikarajindabandara(a)gmail.com Distribution: --- Created attachment 55738 --> https://bugs.winehq.org/attachment.cgi?id=55738 Error Log Log -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 23774] New: UltraISO: listview items don't highlight on single LClick
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=23774 Summary: UltraISO: listview items don't highlight on single LClick Product: Wine Version: 1.2-rc7 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: ivankob4wine(a)gmail.com Created an attachment (id=29798) --> (http://bugs.winehq.org/attachment.cgi?id=29798) np highlight see the atachment -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 7

[Bug 43803] New: Problems to starts programs
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=43803 Bug ID: 43803 Summary: Problems to starts programs Product: Wine Version: unspecified Hardware: aarch64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: villamarinf(a)gmail.com Distribution: --- Created attachment 59337 --> https://bugs.winehq.org/attachment.cgi?id=59337 This .txt is the error in my computer When I run any programs, Wine said, Critical error detected, but the program starts normally -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 35755] New: UltraISO 'ISODrive.sys' needs ntoskrnl.exe.ExfInterlockedRemoveHeadList
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=35755 Bug ID: 35755 Summary: UltraISO 'ISODrive.sys' needs ntoskrnl.exe.ExfInterlockedRemoveHeadList Product: Wine Version: 1.7.14 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, as the summary says ... (also mentioned in bug 32657) --- snip --- $ wine ultraiso.exe fixme:ntoskrnl:KeInitializeSpinLock stub: 0x117390 fixme:ntoskrnl:KeInitializeEvent stub: 0x117394 1 0 fixme:ntoskrnl:ObReferenceObjectByHandle stub: 0x20 1f03ff (nil) 0 0x1173a4 (nil) fixme:ntoskrnl:KeSetEvent (0x117394, 0, 0): stub fixme:ntoskrnl:KeWaitForSingleObject stub: 0x117394, 0, 0, 0, (nil) fixme:ntoskrnl:PsTerminateSystemThread stub: 0 wine: Call from 0x7b83ab23 to unimplemented function ntoskrnl.exe.ExfInterlockedRemoveHeadList, aborting wine: Unimplemented function ntoskrnl.exe.ExfInterlockedRemoveHeadList called at address 0x7b83ab23 (thread 0014), starting debugger... --- snip --- $ wine --version wine-1.7.14 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 17

[Bug 38719] New: 64-bit ARM Windows applications from Windows SDK for Windows 10 crash when accessing TEB/PEB members (AArch64 platform specific register X18 used for TEB?)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=38719 Bug ID: 38719 Summary: 64-bit ARM Windows applications from Windows SDK for Windows 10 crash when accessing TEB/PEB members (AArch64 platform specific register X18 used for TEB?) Product: Wine Version: 1.7.44 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntdll Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 38714 'mt.exe' runs further now but still crashes. --- snip --- ... 0027:Starting process L"Z:\\root\\wine\\64\\arm64\\mt.exe" (entryproc=0x14010ca70) 0027:fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub 0027:trace:seh:raise_exception info[0]=0000000000000000 0027:trace:seh:raise_exception info[1]=0000001200000268 0027:trace:seh:call_stack_handlers calling handler at 0x7fb0d6dbbc code=c0000005 flags=0 wine: Unhandled page fault on read access to 0x1200000268 at address 0x140056d50 (thread 0027), starting debugger... 0027:trace:seh:start_debugger Starting debugger "winedbg --auto 38 64" fixme:ole:RemUnknown_QueryInterface No interface for iid {00000019-0000-0000-c000-000000000046} ... Unhandled exception: page fault on read access to 0x1200000268 in 64-bit code (0x0000000140056d50). Register dump: ARM64 EL0t Mode Pc:0000000140056d50 Sp:0000007fafe9f5a0 Lr:00000001400e94d8 Pstate:0000000020000000(--C-) x0: 000000000000003e x1: 0000000000000000 x2: 000000000000003e x3: 0000007fafe9f5f8 x4: 0000000000000001 x5: 0000007fb02900e8 x6: 0000007fb029af54 x7: 0000000000000002 x8: 0000000140140220 x9: 0000001200000238 x10:0000000000000000 x11:0000000000000000 x12:0101010101010101 x13:0000000000000028 x14:ffffffffffffffff x15:0000007fafd49a08 ip0:0000007fb0d92268 ip1:0000007f53e999c0 x18:0000007fb0f619d0 x19:0000007fafe9f628 x20:000000000000003e x21:0000007fb0290750 x22:0000007fafe9fbb8 x23:0000007fafe9f698 x24:0000007fb00cd000 x25:0000007fb02908c0 x26:0000007fdd267d80 x27:0000007fdd267cf8 x28:0000007fb00e5000 Fp:0000007fafe9f5d0 Stack dump: 0x0000007fafe9f5a0: 0000007fafe9f5c0 0000007fb0d37378 0x0000007fafe9f5b0: 0000007fafe9f5c0 0000007fb0d37510 0x0000007fafe9f5c0: 0000007fc00000e5 0000007f53e999c0 0x0000007fafe9f5d0: 0000007fafe9f650 00000001400730b0 0x0000007fafe9f5e0: 0000000000000000 000000000000001c 0x0000007fafe9f5f0: 0000007f00000000 000000000000003e 0x0000007fafe9f600: 0000007fb02908c0 0000007fdd267d80 0x0000007fafe9f610: 0000007fdd267cf8 4010040140100401 0x0000007fafe9f620: 0000000000000006 0000000000000000 0x0000007fafe9f630: 0000000000000000 0000000000000000 0x0000007fafe9f640: 0000007fafe9f670 0000007f53e99a40 0x0000007fafe9f650: 0000007fafe9f6c0 0000000140073688 Backtrace: =>0 0x0000000140056d50 in mt (+0x56d50) (0x0000007fafe9f5d0) 1 0x00000001400e94d8 in mt (+0xe94d7) (0x0000007fafe9f5d0) 0x0000000140056d50: be_arm64_disasm_one_insn: not done Modules: Module Address Debug info Name (52 modules) ELF 400000- 413000 Deferred <wine-loader> PE 140000000- 140170000 Export mt ... Threads: process tid prio (all id:s are in hex) ... 00000026 (D) Z:\root\wine\64\arm64\mt.exe 00000027 0 <== --- snip --- Since debugging is not possible as of now, an "offline" analysis at the crash location: --- snip --- ... 0000000140056D38 ADD X8, X18, #0 ; X18 = NtCurrentTeb()? 0000000140056D3C LDR X9, [X8,#0x60] ; Teb->Peb 0000000140056D40 ADRP X8, #0x140140000 ; imports segment (.idata) 0000000140056D44 ADD X2, X0, #0 ; arg3 = size 0000000140056D48 ADD X8, X8, #0x220 ; HeapAlloc 0000000140056D4C MOV W1, #0 ; arg2 = flags = 0 0000000140056D50 LDR X0, [X9,#0x30] ; arg1 = Peb->ProcessHeap 0000000140056D54 LDAR X9, [X8] 0000000140056D58 BR X9 ; HeapAlloc() --- snip --- Essentially being: HeapAlloc( GetProcessHeap(), 0, size) Further decoded: HeapAlloc( ((NtCurrentTeb()->ProcessEnvironmentBlock)->ProcessHeap), 0, size) I haven't found information on register X18 being used for TEB hence this is another guess. There is no initialization of X18 in caller chain and even in the whole app code. Running the whole .text segment through disas only reads through "ADD" and "LDR" instructions can be found. Other information sources: http://lists.cs.uiuc.edu/pipermail/llvm-commits/Week-of-Mon-20150119/254111… ("[llvm] r226664 - AArch64: add backend option to reserve x18 (platform register)") https://android.googlesource.com/platform/art/+/63206f3%5E!/ ("AArch64: Fix the usage of Thread Register for arm64") --- quote --- This patch cleans-up the usage of x18 as TR for Arm64. As described in the Arm64 Procedure Call Standard, the recommended usage for x18 is to carry inter-procedural state (i.e. ART thread information). ... --- quote --- https://stackoverflow.com/questions/28109826/arm64-using-gas-on-ios --- quote --- X0-X7 - arguments and return value (volatile) X8 = indirect result (struct) location (or temp reg) X9-X15 = temporary (volatile) X16-X17 - intro-call-use registers (PLT, Linker) or temp X18 - platform specific use (TLS) X19-X28 - callee saved registers (non-volatile) X29 - frame pointer X30 - link register (LR) SP - stack pointer and zero (XZR) V0-V7, V16-V31 - volatile NEON and FP registers V8-V15 - callee saved registers (non-volatile, used for temp vars by compilers) --- quote --- $ sha1sum sdksetup.exe 0720e4e922ff7aa8cc78b23a00906a96c2b237a4 sdksetup.exe $ du -sh sdksetup.exe 1.2M sdksetup.exe # ./wine64 --version wine-1.7.43-178-g22983f2 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 11

[Bug 27180] New: Mobile Master: Crash at update
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=27180 Summary: Mobile Master: Crash at update Product: Wine Version: 1.3.19 Platform: x86 URL: http://www.jumpingbytes.com/down/MobileMasterInst.exe OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: lukasz.wojnilowicz(a)gmail.com Created an attachment (id=34724) --> (http://bugs.winehq.org/attachment.cgi?id=34724) Terminal output on Wine 1.3.20 Steps to reproduce: 1) remove ~/.wine 2) winetricks gecko 3) install Mobile Master 7.8.4 4) wine MMStarter.exe 5) Help->Check for Update...->Install Behaviour: Crash. Expected behaviour: No crash. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 6

[Bug 35269] New: Mobile Master crashes on startup (array-index out of bounds for IFile_tid in scrrun get_typeinfo)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=35269 Bug ID: 35269 Summary: Mobile Master crashes on startup (array-index out of bounds for IFile_tid in scrrun get_typeinfo) Product: Wine Version: 1.7.9 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: scrrun Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, while verifying bug 27180 I stumbled into another problem :| Relevant part of backtrace: --- snip --- Unhandled exception: page fault on read access to 0x00000001 in 32-bit code (0xf7550803). ... Backtrace: =>0 0xf7550803 __memcmp_sse4_2+0x163() in libc.so.6 (0x0033e488) 1 0x7e713a8e ITypeLib2_fnGetTypeInfoOfGuid+0xcd(iface=<couldn't compute location>, guid=<couldn't compute location>, ppTInfo=<couldn't compute location>) [/home/focht/projects/wine/wine-git/dlls/oleaut32/typelib.c:4960] in oleaut32 (0x0033e488) 2 0x7ded5435 get_typeinfo+0x81(tid=IFile_tid, typeinfo=0x33e548) [/home/focht/projects/wine/wine-build32/dlls/scrrun/../../include/oaidl.h:2669] in scrrun (0x0033e508) 3 0x7ded0ad7 file_GetIDsOfNames+0xba(iface=<couldn't compute location>, riid=<couldn't compute location>, rgszNames=<couldn't compute location>, cNames=<couldn't compute location>, lcid=<couldn't compute location>, rgDispId=<couldn't compute location>) [/home/focht/projects/wine/wine-git/dlls/scrrun/filesystem.c:704] in scrrun (0x0033e588) 4 0x72a478d1 in msvbvm60 (+0x1078d0) (0x0033e5b8) 5 0x72a48336 in msvbvm60 (+0x108335) (0x0033e5e4) 6 0x72a410e0 in msvbvm60 (+0x1010df) (0x0033f848) 7 0x72991d33 in msvbvm60 (+0x51d32) (0x0033f854) 8 0x004454e4 in mobilemaster (+0x454e3) (0x0033f864) ... 0xf7550803 __memcmp_sse4_2+0x163 in libc.so.6: movl 0xfffffff0(%edx),%ebx Modules: Module Address Debug info Name (72 modules) PE 400000- bc6000 Export mobilemaster PE 113d0000-114c0000 Deferred tssofficemenu1d PE 72940000-72a93000 Export msvbvm60 ELF 7b800000-7ba61000 Dwarf kernel32<elf> ... Threads: process tid prio (all id:s are in hex) ... 00000024 MMStarter.exe 00000025 0 00000026 (D) C:\Program Files\Mobile Master\MobileMaster.exe 00000029 0 00000028 0 00000027 0 <== --- snip --- Trace log with +ole gives a bit of hint ... --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Mobile Master $ WINEDEBUG=+tid,+seh,+relay,+scrrun,+typelib wine ./MMStarter.exe >>log.txt 2>&1 ... 0026:trace:scrrun:file_GetIDsOfNames (0x152b538)->({00000000-0000-0000-0000-000000000000} 0x33e5c0 1 1033 0x33e5c4) 0026:trace:ole:ITypeLib2_fnGetTypeInfoOfGuid 0x173af8 <guid-0x0001> 0x33e4c4 0026:trace:seh:raise_exception code=c0000005 flags=0 addr=0xf748d803 ip=f748d803 tid=0026 0026:trace:seh:raise_exception info[0]=00000000 0026:trace:seh:raise_exception info[1]=00000001 0026:trace:seh:raise_exception eax=001773d8 ebx=f748d800 ecx=42c642c1 edx=00000011 esi=0033e4a0 edi=7deecda0 0026:trace:seh:raise_exception ebp=0033e488 esp=0033e428 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010287 --- snip --- Strange GUID in second parameter of ITypeLib2_fnGetTypeInfoOfGuid() ;-) Source: http://source.winehq.org/git/wine.git/blob/a29d77088ac2b07fb68d84646be2884f… --- snip --- 24 typedef enum tid_t 25 { 26 NULL_tid, 27 IDictionary_tid, 28 IFileSystem3_tid, 29 IFolder_tid, 30 ITextStream_tid, 31 IFile_tid, 32 LAST_tid 33 } tid_t; --- snip --- The corresponding array and referencing code: Source: http://source.winehq.org/git/wine.git/blob/a29d77088ac2b07fb68d84646be2884f… --- snip --- 103 static REFIID tid_ids[] = { 104 &IID_NULL, 105 &IID_IDictionary, 106 &IID_IFileSystem3, 107 &IID_IFolder, 108 &IID_IFile 109 }; ... 127 HRESULT get_typeinfo(tid_t tid, ITypeInfo **typeinfo) 128 { ... 136 if(!typeinfos[tid]) { 137 ITypeInfo *ti; 138 139 hres = ITypeLib_GetTypeInfoOfGuid(typelib, tid_ids[tid], &ti); 140 if(FAILED(hres)) { 141 ERR("GetTypeInfoOfGuid(%s) failed: %08x\n", debugstr_guid(tid_ids[tid]), hres); 142 } 144 ... 151 } --- snip --- 'ITextStream_tid' was added with commit http://source.winehq.org/git/wine.git/commitdiff/49a8d4ecb0cb868451c7ba3ded… but the array was not synchronized leading to out-of-bound indexing for 'IFile_tid'. $ sha1sum MobileMasterInst.exe 0bedc83c67f4a0181aac916150457f395f095526 MobileMasterInst.exe $ du -sh MobileMasterInst.exe 21M MobileMasterInst.exe $ wine --version wine-1.7.9-209-gb231b4b Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 33543] New: Pervasive SQL v10 installer aborts with "not enough free disk space" (needs msi builtin "PrimaryVolumePath" and "PrimaryVolumeSpaceAvailable" properties)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=33543 Bug #: 33543 Summary: Pervasive SQL v10 installer aborts with "not enough free disk space" (needs msi builtin "PrimaryVolumePath" and "PrimaryVolumeSpaceAvailable" properties) Product: Wine Version: 1.5.29 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: msi AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, the PSQL installer (actually a sub-installer of another app) complains about not enough free disk space. "... installation requires at least [PsqlRequiredMinimumMB] MB of free space on volume [PrimaryVolumePath] to continue. Free up space on this volume and run the installation again or run the installation on a different system." Trace log: --- snip --- ... 0031:trace:process:create_process_impl app (null) cmdline L"msiexec /i \"F:\\PervasiveMin\\PervasivePSQLv10WGE_x86.msi\" /qn PVSW_PSQL_LICENSE_KEY=foo PVSW_RUN_WGE_AS_SVC=Y /l*v \"C:\\PSQL_v10_Install.log\"" ... 000d:trace:msi:msi_get_property property L"PrimaryVolumeSpaceAvailable" not found ... 000d:trace:msi:msi_get_property returning L"122880" for property L"PsqlRequiredMinimum512Bytes" ... 000d:trace:msi:MSI_EvaluateConditionW 1 <- L"Not Installed And (PrimaryVolumeSpaceAvailable<PsqlRequiredMinimum512Bytes)" 000d:trace:msi:ACTION_PerformAction Performing action (L"pvswCA_AbortMsg_NotEnoughMinimumDiskSpace") ... 000d:trace:msi:ACTION_CustomAction Handling custom action L"pvswCA_AbortMsg_NotEnoughMinimumDiskSpace" (113 (null) L"29033") ... 000d:err:msi:ITERATE_Actions Execution halted, action L"pvswCA_AbortMsg_NotEnoughMinimumDiskSpace" returned 1603 --- snip --- MSDN: http://msdn.microsoft.com/en-us/library/windows/desktop/aa370847%28v=vs.85%… ("PrimaryVolumeSpaceAvailable property") http://msdn.microsoft.com/en-us/library/windows/desktop/aa370846%28v=vs.85%… ("PrimaryVolumePath property") http://msdn.microsoft.com/en-us/library/windows/desktop/aa370845%28v=vs.85%… ("PRIMARYFOLDER property") Orca, "PervasivePSQLv10WGE_x86.msi" Property table: --- snip --- ... PRIMARYFOLDER PVSW_PSQL_INSTDIR32 ... --- snip --- Directory table: --- snip --- PVSW_PSQL_INSTDIR32 PVSW_PSQL_INSTDIR32_ROOT PSQL INSTALLDIR PVSW_PSQL_INSTDIR32 . PVSW_PSQL_INSTDIR64 PVSW_PSQL_INSTDIR64_ROOT PSQL INSTALLDIR64 PVSW_PSQL_INSTDIR64 . ISCommonFilesFolder CommonFilesFolder Instal~1|InstallShield PVSW_PSQL_DATADIR_ROOT CommonAppDataFolder PERVAS~3|Pervasive Software PVSW_PSQL_DATADIR PVSW_PSQL_DATADIR_ROOT PSQL PVSW_PSQL_INSTDIR32_ROOT ProgramFilesFolder PERVAS~1|Pervasive Software ProgramFilesFolder TARGETDIR .:PROGRA~1|program files PVSW_PSQL_INSTDIR64_ROOT ProgramFiles64Folder PERVAS~2|Pervasive Software --- snip --- Google found a log of installer on native Windows which also gives hints: http://www.sms.com.sg/public/olam/PSQL_v10_Install.log --- snip --- ... MSI (s) (08:10) [18:54:59:859]: PROPERTY CHANGE: Modifying CostingComplete property. Its current value is '0'. Its new value: '1'. MSI (s) (08:10) [18:54:59:859]: Note: 1: 2205 2: 3: BindImage MSI (s) (08:10) [18:54:59:859]: Note: 1: 2205 2: 3: PublishComponent MSI (s) (08:10) [18:54:59:859]: Note: 1: 2205 2: 3: SelfReg MSI (s) (08:10) [18:54:59:859]: Note: 1: 2262 2: Extension 3: -2147287038 MSI (s) (08:10) [18:54:59:859]: Note: 1: 2205 2: 3: Font MSI (s) (08:10) [18:54:59:859]: PROPERTY CHANGE: Modifying PrimaryVolumeSpaceAvailable property. Its current value is '0'. Its new value: '431264336'. MSI (s) (08:10) [18:54:59:859]: PROPERTY CHANGE: Modifying PrimaryVolumeSpaceRequired property. Its current value is '0'. Its new value: '87239'. MSI (s) (08:10) [18:54:59:859]: PROPERTY CHANGE: Modifying PrimaryVolumeSpaceRemaining property. Its current value is '0'. Its new value: '431177097'. MSI (s) (08:10) [18:54:59:859]: PROPERTY CHANGE: Adding PrimaryVolumePath property. Its value is 'C:'. MSI (s) (08:10) [18:54:59:859]: Skipping action: pvswCA_AbortMsg_NotEnoughMinimumDiskSpace (condition is false) MSI (s) (08:10) [18:54:59:859]: Doing action: RemoveExistingProducts Action ended 18:54:59: InstallValidate. Return value 1. ... --- snip --- Might be useful to also provide "PrimaryVolumeSpaceRequired" and "PrimaryVolumeSpaceRemaining" properties at some point but not strictly required here. $ wine --version wine-1.5.29-163-g4013a8d Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 4

[Bug 35235] New: GoldCoin 0.7.1.7: synchronization with network spams terminal with "fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0" messages
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=35235 Bug ID: 35235 Summary: GoldCoin 0.7.1.7: synchronization with network spams terminal with "fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0" messages Product: Wine Version: 1.7.9 Hardware: x86 OS: Linux Status: NEW Severity: minor Priority: P2 Component: winsock Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, with bug 35061 fixed the app starts fine. The annoying bit: there is a constant flood of messages in terminal during initial synchronization with network. Trace log: --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/GoldCoin (GLD) $ WINEDEBUG=+tid,+seh,+relay,+winsock wine ./goldcoin-qt.exe >>log.txt 2>&1 ... 0029:Call ws2_32.getnameinfo(0834e950,00000010,0834e54f,00000401,00000000,00000000,00000002) ret=004202c8 ... 0029:trace:winsock:WS_getnameinfo { family AF_INET, address 111.111.111.111, port 0 } 16 0x834e54f 1025 (nil) 0 2 ... 0029:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 ... 0029:Ret ws2_32.getnameinfo() retval=00000000 ret=004202c8 ... 0029:Call msvcrt.vfprintf(7edfe420,00932974 "GetMyExternalIP() returned %s\n",0834ea24) ret=0073f748 --- snip --- With +timestamp to show the rate: --- snip --- ... 32104.177:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 32104.183:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 32104.185:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 32104.185:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 32104.185:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 32104.185:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 32104.185:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 32104.187:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 32104.191:fixme:winsock:convert_eai_u2w Unhandled unix EAI_xxx ret 0 ... --- snip --- getnameinfo() returning 0 = 'success' should be exempt from error code translation. Source: http://source.winehq.org/git/wine.git/blob/c66c14ddda242cee69e8a730310c1855… --- snip --- 5668 int WINAPI WS_getnameinfo(const SOCKADDR *sa, WS_socklen_t salen, PCHAR host, 5669 DWORD hostlen, PCHAR serv, DWORD servlen, INT flags) 5670 { 5671 #ifdef HAVE_GETNAMEINFO ... 5685 ret = getnameinfo(&sa_u.addr, size, host, hostlen, serv, servlen, convert_niflag_w2u(flags)); 5686 return convert_eai_u2w(ret); 5687 #else 5688 FIXME("getnameinfo() failed, not found during buildtime.\n"); 5689 return EAI_FAIL; 5690 #endif 5691 } --- snip --- Source: http://source.winehq.org/git/wine.git/blob/c66c14ddda242cee69e8a730310c1855… --- snip --- 5365 static int convert_eai_u2w(int unixret) { 5366 int i; 5367 5368 for (i=0;ws_eai_map[i][0];i++) 5369 if (ws_eai_map[i][1] == unixret) 5370 return ws_eai_map[i][0]; 5371 5372 if (unixret == EAI_SYSTEM) 5373 /* There are broken versions of glibc which return EAI_SYSTEM 5374 * and set errno to 0 instead of returning EAI_NONAME. 5375 */ 5376 return errno ? sock_get_error( errno ) : WS_EAI_NONAME; 5377 5378 FIXME("Unhandled unix EAI_xxx ret %d\n", unixret); 5379 return unixret; 5380 } --- snip --- $ sha1sum goldcoin-0.7.1.7-win32-setup.exe b7f714096bee9c766c5c656e9ffddfd95c9e2026 goldcoin-0.7.1.7-win32-setup.exe $ du -sh goldcoin-0.7.1.7-win32-setup.exe 9.4M goldcoin-0.7.1.7-win32-setup.exe $ wine --version wine-1.7.9-183-g919e620 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 34637] New: Winlaunch OSX launchpad for windows crashes on start
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=34637 Bug #: 34637 Summary: Winlaunch OSX launchpad for windows crashes on start Product: Wine Version: 1.7.3 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: adec2010(a)hotmail.co.uk Classification: Unclassified Created attachment 46163 --> http://bugs.winehq.org/attachment.cgi?id=46163 Winlaunch attachment Winlaunch OSX style launcher for windows. Does not run at all. Attached error log -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 9

[Bug 34911] New: WinLaunch 0.4.6.1 (OSX Style free Launcher) needs windowscodecs.dll.IPropertyBag2_Write_Proxy
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=34911 Bug #: 34911 Summary: WinLaunch 0.4.6.1 (OSX Style free Launcher) needs windowscodecs.dll.IPropertyBag2_Write_Proxy Product: Wine Version: 1.7.6 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: windowscodecs AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says... Prerequisite: 'winetricks -q dotnet40' If you switch themes/save settings the app displays a message box "exception thrown". Terminal output: --- snip --- wine: Call from 0x7b83a8bf to unimplemented function windowscodecs.dll.IPropertyBag2_Write_Proxy, aborting --- snip --- 'winetricks -q windowscodecs' works around. $ sha1sum WinLaunch.zip 5d79fb1d160354a04548fc7bba1a78012800c59c WinLaunch.zip $ du -sh WinLaunch.zip 20M WinLaunch.zip $ wine --version wine-1.7.6-225-g8c8d5a0 Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 4

[Bug 36749] New: WinLaunch 0.4.6.1 (OSX Style free Launcher) fails to save theme (libpng png_write_end fails with 'No IDATs written into file')
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=36749 Bug ID: 36749 Summary: WinLaunch 0.4.6.1 (OSX Style free Launcher) fails to save theme (libpng png_write_end fails with 'No IDATs written into file') Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: windowscodecs Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, continuation of bug 34942 Prerequisite: 'winetricks -q dotnet40' 'Settings' -> 'General' -> 'Open performance advisor', select theme -> 'done' --- snip --- $ WINEDEBUG=+tid,+seh,+relay,+wincodecs wine ./WinLaunch.exe >>log.txt 2>&1 ... 002c:Call windowscodecs.IWICBitmapFrameEncode_WriteSource_Proxy(058bfd1c,0582c404,0033e7d4) ret=0986eebb 002c:trace:wincodecs:PngFrameEncode_WriteSource (0x58bfd1c,0x582c404,(nil)) 002c:trace:wincodecs:BitmapImpl_GetPixelFormat (0x582c404,0x33e5c0) 002c:trace:wincodecs:BitmapImpl_GetSize (0x582c404,0x33e5b4,0x33e5b0) 002c:Call ntdll.RtlAllocateHeap(00110000,00000000,000204e8) ret=7df568c2 002c:Ret ntdll.RtlAllocateHeap() retval=0857ad90 ret=7df568c2 002c:trace:wincodecs:BitmapImpl_CopyPixels (0x582c404,0x33e5b8,952,132328,0x857ad90) 002c:trace:wincodecs:PngFrameEncode_WritePixels (0x58bfd1c,139,952,132328,0x857ad90) ... 002c:Ret windowscodecs.IWICBitmapFrameEncode_WriteSource_Proxy() retval=00000000 ret=0986eebb ... 002c:Call windowscodecs.IWICBitmapFrameEncode_Commit_Proxy(058bfd1c) ret=0986f0a6 002c:trace:wincodecs:PngFrameEncode_Commit (0x58bfd1c) 002c:warn:wincodecs:user_error_fn PNG error: "No IDATs written into file" 002c:Ret windowscodecs.IWICBitmapFrameEncode_Commit_Proxy() retval=80004005 ret=0986f0a6 002c:Call KERNEL32.GetLastError() ret=7919c63c 002c:Ret KERNEL32.GetLastError() retval=000036b7 ret=7919c63c ... 002c:Call KERNEL32.RaiseException(e0434352,00000001,00000005,0033e66c) ret=791cac08 002c:trace:seh:raise_exception code=e0434352 flags=1 addr=0x7b83ac6b ip=7b83ac6b tid=002c 002c:trace:seh:raise_exception info[0]=80004005 002c:trace:seh:raise_exception info[1]=00000000 002c:trace:seh:raise_exception info[2]=00000000 002c:trace:seh:raise_exception info[3]=00000000 002c:trace:seh:raise_exception info[4]=79140000 002c:trace:seh:raise_exception eax=7b826c7d ebx=7b8bb000 ecx=80004005 edx=0033e584 esi=0033e628 edi=0033e5f0 002c:trace:seh:raise_exception ebp=0033e5c8 esp=0033e564 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00200283 ... 002c:Call user32.MessageBoxW(00030072,00f4cfd0 L"error saving theme!",00f4d608 L"WinLaunch error",00000000) ret=053d6d7f --- snip --- Source: http://source.winehq.org/git/wine.git/blob/3ccaad8b41fe9514b95aa7610a1b33bb… $ sha1sum WinLaunch.zip 5d79fb1d160354a04548fc7bba1a78012800c59c WinLaunch.zip $ du -sh WinLaunch.zip 20M WinLaunch.zip $ wine --version wine-1.7.20-33-g3ccaad8 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 34942] New: WinLaunch 0.4.6.1 (OSX Style free Launcher) needs support for WIC encoder "InterlaceOption" option (property bag)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=34942 Bug #: 34942 Summary: WinLaunch 0.4.6.1 (OSX Style free Launcher) needs support for WIC encoder "InterlaceOption" option (property bag) Product: Wine Version: 1.7.6 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: windowscodecs AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, continuation of bug 34911 Prerequisite: 'winetricks -q dotnet40' If you switch themes/save settings the app displays a message box "Error HRESULT E_FAIL has been returned from a call to a COM component." --- snip --- $ WINEDEBUG=+tid,+seh,+loaddll,+process,+wincodecs wine ./WinLaunch.exe >>log.txt 2>&1 ... 002b:trace:wincodecs:PngEncoder_Initialize (0x90c18e8,0x9e6de08,2) 002b:trace:wincodecs:PngEncoder_CreateNewFrame (0x90c18e8,0x33e834,0x33e830) 002b:trace:wincodecs:PngEncoder_AddRef (0x90c18e8) refcount=2 002b:trace:wincodecs:PropertyBag_Write (0x5815010,1,0x33e74c,0x33e76c) 002b:fixme:wincodecs:PropertyBag_Write Application tried to set the unknown option L"InterlaceOption". 002b:trace:seh:raise_exception code=e0434352 flags=1 addr=0x7b83a8bf ip=7b83a8bf tid=002b 002b:trace:seh:raise_exception info[0]=80004005 002b:trace:seh:raise_exception info[1]=00000000 002b:trace:seh:raise_exception info[2]=00000000 002b:trace:seh:raise_exception info[3]=00000000 002b:trace:seh:raise_exception info[4]=79140000 002b:trace:seh:raise_exception eax=7b8268f1 ebx=7b8ba000 ecx=80004005 edx=0033e5a4 esi=0033e64c edi=0012c750 002b:trace:seh:raise_exception ebp=0033e5e8 esp=0033e584 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00200283 ... --- snip --- MSDN info here: http://msdn.microsoft.com/en-us/library/windows/desktop/ee719871%28v=vs.85%… (Encoder Options/Usage). Source: http://source.winehq.org/git/wine.git/blob/4a5bc1375ee446a9aec04cc3f39ee6ac… --- snip --- 1596 static HRESULT WINAPI PngEncoder_CreateNewFrame(IWICBitmapEncoder *iface, 1597 IWICBitmapFrameEncode **ppIFrameEncode, IPropertyBag2 **ppIEncoderOptions) 1598 { 1599 PngEncoder *This = impl_from_IWICBitmapEncoder(iface); 1600 HRESULT hr; 1601 TRACE("(%p,%p,%p)\n", iface, ppIFrameEncode, ppIEncoderOptions); 1602 1603 EnterCriticalSection(&This->lock); 1604 1605 if (This->frame_count != 0) 1606 { 1607 LeaveCriticalSection(&This->lock); 1608 return WINCODEC_ERR_UNSUPPORTEDOPERATION; 1609 } 1610 1611 if (!This->stream) 1612 { 1613 LeaveCriticalSection(&This->lock); 1614 return WINCODEC_ERR_NOTINITIALIZED; 1615 } 1616 1617 hr = CreatePropertyBag2(NULL, 0, ppIEncoderOptions); 1618 if (FAILED(hr)) 1619 { 1620 LeaveCriticalSection(&This->lock); 1621 return hr; 1622 } 1623 1624 This->frame_count = 1; 1625 1626 LeaveCriticalSection(&This->lock); 1627 1628 IWICBitmapEncoder_AddRef(iface); 1629 *ppIFrameEncode = &This->IWICBitmapFrameEncode_iface; 1630 1631 return S_OK; 1632 } --- snip --- -> CreatePropertyBag2(NULL, 0, ppIEncoderOptions) 'winetricks -q windowscodecs' works around. $ sha1sum WinLaunch.zip 5d79fb1d160354a04548fc7bba1a78012800c59c WinLaunch.zip $ du -sh WinLaunch.zip 20M WinLaunch.zip $ wine --version wine-1.7.6-273-ga4d8627 Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 10666] New: My Invoices and Estimates does not run and Installs ( with errors).
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=10666 Summary: My Invoices and Estimates does not run and Installs (with errors). Product: Wine Version: 0.9.49. Platform: PC URL: http://shop.avanquest.com/usa/ OS/Version: Linux Status: UNCONFIRMED Severity: enhancement Priority: P2 Component: wine-winelib AssignedTo: wine-bugs(a)winehq.org ReportedBy: dennis.dentremont(a)gmail.com Created an attachment (id=9493) --> (http://bugs.winehq.org/attachment.cgi?id=9493) wine console output My Invoice and Estimates 8.0 Trial version. Software installs but fails to install fonts and produces the following type of error. "Font TT0001M did not install". The code changes to TT0XXXX depending on the font it's trying to install at the time. When I try and run it, it just simply fails. I have attached the console output. -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are watching all bug changes.

2 5

[Bug 35444] New: Wayward Terran Frontier Open Alpha (.NET 4.0/XNA 4 game) reports 'Could not find a Direct3D device that supports the XNA Framework HiDef profile'
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=35444 Bug ID: 35444 Summary: Wayward Terran Frontier Open Alpha (.NET 4.0/XNA 4 game) reports 'Could not find a Direct3D device that supports the XNA Framework HiDef profile' Product: Wine Version: 1.7.11 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says. Prerequisite: 'winetricks -q dotnet40' in 32-bit WINEPREFIX The game will install XNA 4.0 on its own. Trace log isn't very interesting ... it's managed code that does the actual work. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Wayward Terran Frontier $ WINEDEBUG=+tid,+seh,+relay,+d3d9,+d3d wine ./Wayward\ Terran\ Frontier.exe >>log.txt 2>&1 ... 002a:Ret PE DLL (proc=0x7e0a24d0,module=0x7df90000 L"wined3d.dll",reason=PROCESS_ATTACH,res=(nil)) retval=1 002a:Call PE DLL (proc=0x7e218ee8,module=0x7e1f0000 L"d3d9.dll",reason=PROCESS_ATTACH,res=(nil)) ... 002a:Call PE DLL (proc=0x3abf6b8,module=0x3a80000 L"Microsoft.Xna.Framework.Graphic",reason=PROCESS_ATTACH,res=(nil)) 002a:Call KERNEL32.GetModuleFileNameW(03a80000,0033c310,00000104) ret=603d40c1 002a:Ret KERNEL32.GetModuleFileNameW() retval=0000008d ret=603d40c1 002a:Call KERNEL32.CreateFileW(0033c310 L"C:\\windows\\Microsoft.Net\\assembly\\GAC_32\\Microsoft.Xna.Framework.Graphics\\v4.0_4.0.0.0__842cf8be1de50553\\Microsoft.Xna.Framework.Graphics.dll",80000000,00000001,00000000,00000003,08000000,00000000) ret=603be944 002a:Ret KERNEL32.CreateFileW() retval=00000184 ret=603be944 ... 002a:Call d3d9.Direct3DCreate9(00000020) ret=04c2c787 002a:trace:d3d9:Direct3DCreate9 sdk_version 0x20. ... 002a:trace:d3d:wined3d_create Created wined3d object 0x1a5860 for d3d9 support. 002a:Ret wined3d.wined3d_create() retval=001a5860 ret=7e20e6fe ... 002a:trace:d3d9:Direct3DCreate9 Created d3d9 object 0x18fed0. 002a:Ret d3d9.Direct3DCreate9() retval=0018fed0 ret=04c2c787 ... 002a:Call d3d9.D3DPERF_SetOptions(00000002) ret=04c2c8c7 002a:fixme:d3d9:D3DPERF_SetOptions (0x2) : stub 002a:Ret d3d9.D3DPERF_SetOptions() retval=00000030 ret=04c2c8c7 ... 002a:trace:d3d9:d3d9_GetDeviceCaps iface 0x18fed0, adapter 0, device_type 0x1, caps 0x33efd4. ... 002a:Call wined3d.wined3d_get_device_caps(001a5860,00000000,00000001,001a9c20) ret=7e20d852 002a:trace:d3d:wined3d_get_device_caps wined3d 0x1a5860, adapter_idx 0, device_type WINED3D_DEVICE_TYPE_HAL, caps 0x1a9c20. 002a:Ret wined3d.wined3d_get_device_caps() retval=00000000 ret=7e20d852 ... 002a:Call KERNEL32.RaiseException(e0434352,00000001,00000005,0033f094) ret=791cac08 002a:trace:seh:raise_exception code=e0434352 flags=1 addr=0x7b83a913 ip=7b83a913 tid=002a 002a:trace:seh:raise_exception info[0]=80131500 002a:trace:seh:raise_exception info[1]=00000000 002a:trace:seh:raise_exception info[2]=00000000 002a:trace:seh:raise_exception info[3]=00000000 002a:trace:seh:raise_exception info[4]=79140000 002a:trace:seh:raise_exception eax=7b826989 ebx=7b8ba000 ecx=80131500 edx=0033efa4 esi=0033f050 edi=0033f010 002a:trace:seh:raise_exception ebp=0033efe8 esp=0033ef84 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00000283 ... 002a:Call user32.MessageBoxW(0001006c,00cde088 L"No suitable graphics card found.\n\nCould not find a Direct3D device that supports the XNA Framework HiDef profile.\r\n\r\nVerify that a suitable graphics device is installed.\r\n\r\nMake sure the desktop is not locked, and that no other application is running in full screen mode.\r\n\r\nAvoid runnin"...,00ccbe48 L"Wayward Terran Frontier",00000010) ret=04c6de0f ... --- snip --- With a managed debugger: --- snip --- 0033f140 7b83a913 [HelperMethodFrame: 0033f140] 0033f190 04c2c514 Microsoft.Xna.Framework.GraphicsDeviceManager.FindBestPlatformDevice(Boolean) 0033f1ac 04c2c3fc Microsoft.Xna.Framework.GraphicsDeviceManager.FindBestDevice(Boolean) 0033f1b0 04c2bf01 Microsoft.Xna.Framework.GraphicsDeviceManager.ChangeDevice(Boolean) 0033f218 04c2bddb Microsoft.Xna.Framework.GraphicsDeviceManager.Microsoft.Xna.Framework.IGraphicsDeviceManager.CreateDevice() 0033f21c 04c2bb98 Microsoft.Xna.Framework.Game.RunGame(Boolean) 0033f250 037326f2 WTFLauncher.Program.Main(System.String[]) 0033f4a8 791421db [GCFrame: 0033f4a8] --- snip --- The XNA code compares the returned D3D device caps against XNA 4.0 'HiDef' profile values. More info here: http://msdn.microsoft.com/en-us/library/ff604995.aspx (What Is a Profile?) http://blogs.msdn.com/b/shawnhar/archive/2010/03/12/reach-vs-hidef.aspx (Reach vs. HiDef) Debugging the actual validation is very annoying so I just dumped the profile values. Maybe one D3D dev can spot values that aren't met in Wine by default (shader is 3.0). --- snip --- VertexShaderVersion = 768u, PixelShaderVersion = 768u, OcclusionQuery = true, GetBackBufferData = true, SeparateAlphaBlend = true, DestBlendSrcAlphaSat = true, MinMaxSrcDestBlend = false, MaxPrimitiveCount = 1048575, IndexElementSize32 = true, MaxVertexStreams = 16, MaxStreamStride = 255, MaxVertexBufferSize = 67108863, MaxIndexBufferSize = 67108863, MaxTextureSize = 4096, MaxCubeSize = 4096, MaxVolumeExtent = 256, MaxTextureAspectRatio = 2048, MaxSamplers = 16, MaxVertexSamplers = 4, MaxRenderTargets = 4, NonPow2Unconditional = true, NonPow2Cube = true, NonPow2Volume = true, ValidTextureFormats = { SurfaceFormat.Color, SurfaceFormat.Bgr565, SurfaceFormat.Bgra5551, SurfaceFormat.Bgra4444, SurfaceFormat.Dxt1, SurfaceFormat.Dxt3, SurfaceFormat.Dxt5, SurfaceFormat.NormalizedByte2, SurfaceFormat.NormalizedByte4, SurfaceFormat.Rgba1010102, SurfaceFormat.Rg32, SurfaceFormat.Rgba64, SurfaceFormat.Alpha8, SurfaceFormat.Single, SurfaceFormat.Vector2, SurfaceFormat.Vector4, SurfaceFormat.HalfSingle, SurfaceFormat.HalfVector2, SurfaceFormat.HalfVector4, SurfaceFormat.HdrBlendable }, ValidCubeFormats = { SurfaceFormat.Color, SurfaceFormat.Bgr565, SurfaceFormat.Bgra5551, SurfaceFormat.Bgra4444, SurfaceFormat.Dxt1, SurfaceFormat.Dxt3, SurfaceFormat.Dxt5, SurfaceFormat.Rgba1010102, SurfaceFormat.Rg32, SurfaceFormat.Rgba64, SurfaceFormat.Alpha8, SurfaceFormat.Single, SurfaceFormat.Vector2, SurfaceFormat.Vector4, SurfaceFormat.HalfSingle, SurfaceFormat.HalfVector2, SurfaceFormat.HalfVector4, SurfaceFormat.HdrBlendable }, ValidVolumeFormats = { SurfaceFormat.Color, SurfaceFormat.Bgr565, SurfaceFormat.Bgra5551, SurfaceFormat.Bgra4444, SurfaceFormat.Rgba1010102, SurfaceFormat.Rg32, SurfaceFormat.Rgba64, SurfaceFormat.Alpha8, SurfaceFormat.Single, SurfaceFormat.Vector2, SurfaceFormat.Vector4, SurfaceFormat.HalfSingle, SurfaceFormat.HalfVector2, SurfaceFormat.HalfVector4, SurfaceFormat.HdrBlendable }, ValidVertexTextureFormats = { SurfaceFormat.Single, SurfaceFormat.Vector2, SurfaceFormat.Vector4, SurfaceFormat.HalfSingle, SurfaceFormat.HalfVector2, SurfaceFormat.HalfVector4, SurfaceFormat.HdrBlendable }, InvalidFilterFormats = { SurfaceFormat.Single, SurfaceFormat.Vector2, SurfaceFormat.Vector4, SurfaceFormat.HalfSingle, SurfaceFormat.HalfVector2, SurfaceFormat.HalfVector4, SurfaceFormat.HdrBlendable }, InvalidBlendFormats = { SurfaceFormat.Single, SurfaceFormat.Vector2, SurfaceFormat.Vector4, SurfaceFormat.HalfSingle, SurfaceFormat.HalfVector2, SurfaceFormat.HalfVector4 }, ValidDepthFormats = { DepthFormat.Depth16, DepthFormat.Depth24, DepthFormat.Depth24Stencil8 }, ValidVertexFormats = { VertexElementFormat.Color, VertexElementFormat.Single, VertexElementFormat.Vector2, VertexElementFormat.Vector3, VertexElementFormat.Vector4, VertexElementFormat.Byte4, VertexElementFormat.Short2, VertexElementFormat.Short4, VertexElementFormat.NormalizedShort2, VertexElementFormat.NormalizedShort4, VertexElementFormat.HalfVector2, VertexElementFormat.HalfVector4 } --- snip --- NOTE: Not all 'formats' (enum) values need to be present but most likely all the integer/bool properties need to pass. $ sha1sum WaywardSetup.msi ad1b0bf88ce284b2c4c36fbb93012b60cb0a673f WaywardSetup.msi $ du -sh WaywardSetup.msi 8.5M WaywardSetup.msi $ wine --version wine-1.7.11-159-gee33839 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 12

[Bug 29344] New: Multiple apps need Scripting.FileSystemObject implementation (Microsoft Scripting Runtime)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=29344 Bug #: 29344 Summary: Multiple apps need Scripting.FileSystemObject implementation (Microsoft Scripting Runtime) Product: Wine Version: 1.3.34 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello, there are several apps/bugs that suffer from missing "Scripting.FileSystemObject" implementation. Unfortunately there is not a single bug that is not polluted by winetricks wsh56/57 recipes where people kept on moving to other issues, completely ignoring this one... Creating this bug as starting point for "Scripting.FileSystemObject" implementation to allow proper dependency tracking of other bugs. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 18

[Bug 30131] New: wPrime doesn't start
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=30131 Bug #: 30131 Summary: wPrime doesn't start Product: Wine Version: 1.4 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: t.artem(a)mailcity.com Classification: Unclassified When I try to run it using native msvbm60.dll, these messages are being logged in console: fixme:ole:OleLoadPictureEx (0xbae154,774,0,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x32f914), partially implemented. fixme:ole:OLEPictureImpl_SaveAsFile (0x133800)->(0x1383d8, 0, (nil)), hacked stub. Welcome to wPrime Benchmark v2.08. err:ole:CoGetClassObject class {0d43fe01-f093-11cf-8940-00a0c9054228} not registered err:ole:create_server class {0d43fe01-f093-11cf-8940-00a0c9054228} not registered err:ole:CoGetClassObject no class object {0d43fe01-f093-11cf-8940-00a0c9054228} could be created for context 0x5 followed by a message box saying: Run-time error '429': ActiveX component can't create object -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 8

[Bug 36465] New: Age of Wushu: Lua script - Create device failed!
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=36465 Bug ID: 36465 Summary: Age of Wushu: Lua script - Create device failed! Product: Wine Version: 1.7.18 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: furyhamster(a)gmail.com Created attachment 48516 --> http://bugs.winehq.org/attachment.cgi?id=48516 Terminal output from running the launcher. Running the launcer of Age of Wushu opens up an window titled "lua script" and in that window it states that "Create device failed!" -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 10

[Bug 36486] New: Age of Wushu: frequent display of in-game "Don't speed up!" dialog tip disrupts gameplay (Wine fails kernel32.GetTickCount API entry hook check)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=36486 Bug ID: 36486 Summary: Age of Wushu: frequent display of in-game "Don't speed up!" dialog tip disrupts gameplay (Wine fails kernel32.GetTickCount API entry hook check) Product: Wine Version: 1.7.19 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: kernel32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, during investigation of bug 36465 I found this goodie, deserving it's own bug of course :) Searching the net reveals similar reports for Windows and MAC: http://www.ageofwushu.com/forums/viewtopic.php?f=29&t=7339 http://www.ageofwushu.com/forums/viewtopic.php?f=30&t=14469 http://portingteam.com/topic/9284-age-of-wushu-dont-speed-up-tip-spam/ This disguised message is in fact the result of a failed API hook check. The vendor obviously doesn't want to go into technical details/reveal this, see the support forums/site for answers to this problem. Enter Wine and get the answers :) One hint is contained in the game log file 'bin/trace.log' With relay thunks emitted (+relay channel): --- snip --- ... [2014-05-18 22:01:13.573] Time Func Pos Begin QueryPerformanceCounter=54 QueryPerformanceFrequency=54 GetTickCount=54 timeGetTime=54 timeSetEvent=54 SetTimer=54 ... --- snip --- without relay thunks: --- snip --- [2014-05-18 22:23:02.818] Time Func Pos Begin QueryPerformanceCounter=8d QueryPerformanceFrequency=8d GetTickCount=55 timeGetTime=55 timeSetEvent=8d SetTimer=55 --- snip --- The hex codes are the first opcode byte of each API entry. The protection code makes a snapshot of certain API entries on startup. The entry bytes are stored for later comparison to detect dynamic hooking (through dll injection for example). --- snip --- ... 0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c3b1 0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c3b1 0056:Call KERNEL32.GetProcAddress(7b810000,11a8eed4 "QueryPerformanceCounter") ret=1134c3c3 0056:Ret KERNEL32.GetProcAddress() retval=7b824afc ret=1134c3c3 0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c3d9 0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c3d9 0056:Call KERNEL32.GetProcAddress(7b810000,11a8eeb4 "QueryPerformanceFrequency") ret=1134c3e5 0056:Ret KERNEL32.GetProcAddress() retval=7b824b14 ret=1134c3e5 0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c3fb 0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c3fb 0056:Call KERNEL32.GetProcAddress(7b810000,11a8eea4 "GetTickCount") ret=1134c407 0056:Ret KERNEL32.GetProcAddress() retval=7b82374c ret=1134c407 0056:Call KERNEL32.GetModuleHandleA(11a8ee98 "WINMM.dll") ret=1134c41d 0056:Ret KERNEL32.GetModuleHandleA() retval=f7220000 ret=1134c41d 0056:Call KERNEL32.GetProcAddress(f7220000,11a8ee88 "timeGetTime") ret=1134c429 0056:Ret KERNEL32.GetProcAddress() retval=7b82374c ret=1134c429 0056:Call KERNEL32.GetModuleHandleA(11a8ee98 "WINMM.dll") ret=1134c43f 0056:Ret KERNEL32.GetModuleHandleA() retval=f7220000 ret=1134c43f 0056:Call KERNEL32.GetProcAddress(f7220000,11a8ee78 "timeSetEvent") ret=1134c44b 0056:Ret KERNEL32.GetProcAddress() retval=f7226d44 ret=1134c44b 0056:Call KERNEL32.GetModuleHandleA(11a8ee68 "USER32.dll") ret=1134c461 0056:Ret KERNEL32.GetModuleHandleA() retval=7eca0000 ret=1134c461 0056:Call KERNEL32.GetProcAddress(7eca0000,11a8ee5c "SetTimer") ret=1134c46d 0056:Ret KERNEL32.GetProcAddress() retval=7ecb0798 ret=1134c46d ... --- snip --- Runtime check of API entries every two seconds: --- snip --- ... 0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c4f5 0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c4f5 0056:Call KERNEL32.GetProcAddress(7b810000,11a8eed4 "QueryPerformanceCounter") ret=1134c505 0056:Ret KERNEL32.GetProcAddress() retval=7b824afc ret=1134c505 0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c2fb 0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c2fb 0056:Call KERNEL32.GetProcAddress(7b810000,11a8eeb4 "QueryPerformanceFrequency") ret=1134c30b 0056:Ret KERNEL32.GetProcAddress() retval=7b824b14 ret=1134c30b 0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c2fb 0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c2fb 0056:Call KERNEL32.GetProcAddress(7b810000,11a8eea4 "GetTickCount") ret=1134c30b 0056:Ret KERNEL32.GetProcAddress() retval=7b82374c ret=1134c30b 0056:Call KERNEL32.GetModuleHandleA(11a8ee98 "WINMM.dll") ret=1134c32b 0056:Ret KERNEL32.GetModuleHandleA() retval=f7220000 ret=1134c32b 0056:Call KERNEL32.GetProcAddress(f7220000,11a8ee88 "timeGetTime") ret=1134c33b 0056:Ret KERNEL32.GetProcAddress() retval=7b82374c ret=1134c33b 0056:Call KERNEL32.GetModuleHandleA(11a8ee98 "WINMM.dll") ret=1134c2fb 0056:Ret KERNEL32.GetModuleHandleA() retval=f7220000 ret=1134c2fb 0056:Call KERNEL32.GetProcAddress(f7220000,11a8ee78 "timeSetEvent") ret=1134c30b 0056:Ret KERNEL32.GetProcAddress() retval=f7226d44 ret=1134c30b 0056:Call KERNEL32.GetModuleHandleA(11a8ee68 "USER32.dll") ret=1134c2fb 0056:Ret KERNEL32.GetModuleHandleA() retval=7eca0000 ret=1134c2fb 0056:Call KERNEL32.GetProcAddress(7eca0000,11a8ee5c "SetTimer") ret=1134c30b 0056:Ret KERNEL32.GetProcAddress() retval=7ecb0798 ret=1134c30b ... --- snip --- Following is the list of API functions and their opcode checks. call/jmp opcode bytes are treated as hook. --- snip --- kernel32.dll!QueryPerformanceCounter -> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot> kernel32.dll!QueryPerformanceFrequency -> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot> kernel32.dll!GetTickCount -> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot> WINMM.dll!timeGetTime -> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot> | [7]=0xE8 | [7]=0xE9 | [7]=0xFF WINMM.dll!timeSetEvent -> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot> user32.dll!SetTimer -> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot> --- snip --- The 'WINMM.dll!timeGetTime' entry point gets a special treatment and this the problem. Wine 'winmm.spec' --- snip --- @ stdcall timeGetTime() kernel32.GetTickCount --- snip --- Forwarded. Dumping the target with Winedbg gives: --- snip --- Wine-dbg>x/10b GetTickCount 0x7b8480d9 GetTickCount: 55 89 e5 53 83 e4 f0 e8 ab 75 --- snip --- Disassembly: --- snip --- 7B8480D9 55 PUSH EBP 7B8480DA 89E5 MOV EBP,ESP 7B8480DC 53 PUSH EBX 7B8480DD 83E4 F0 AND ESP,FFFFFFF0 7B8480E0 E8 AB75FDFF CALL KERNEL32.__x86.get_pc_thunk.bx 7B8480E5 81C3 1B2F0700 ADD EBX,72F1B 7B8480EB E8 72FFFFFF CALL KERNEL32.GetTickCount64 7B8480F0 8B5D FC MOV EBX,DWORD PTR SS:[EBP-4] 7B8480F3 C9 LEAVE 7B8480F4 C3 RETN --- snip --- *eeek* .. 'entry[7]' has indeed value 0xE8 hence the check fails. The PIC code (setup of PIC register) in function prolog causes the harm here. If you avoid the call opcode at 'entry[7]' everything is fine (for example making this entry hotpatchable, inline GetTickCount64, use wrapper). I already tested this. Wine code is no longer (mis)detected as hook and the game runs fine without any "Speedup" spam. $ sha1sum AgeofWushu_download.exe a7101c50ce8deb33008da4ce044fca5e3add721d AgeofWushu_download.exe $ du -sh AgeofWushu_download.exe 1.9M AgeofWushu_download.exe $ wine --version wine-1.7.19 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 4

[Bug 34403] New: AVP Classic WinRT/ARM port needs xinput1_4.dll
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=34403 Bug #: 34403 Summary: AVP Classic WinRT/ARM port needs xinput1_4.dll Product: Wine Version: 1.7.1 Platform: arm OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, as the summary says... --- snip --- linaro@linaro-ubuntu-desktop:~/wine-apps/avpclassic$ ll total 10744 drwxr-xr-x 2 linaro linaro 4096 Aug 31 15:05 ./ drwxrwxr-x 51 linaro linaro 4096 Aug 31 15:05 ../ -rw-rw-r-- 1 linaro linaro 37736 Jul 25 2012 D3D11ProxyDriver.dll -rw-rw-r-- 1 linaro linaro 2840416 Aug 20 2012 D3DCompiler_Test.dll -rw-rw-r-- 1 linaro linaro 1287248 Aug 21 08:05 MyAvP.exe -rw-r--r-- 1 linaro linaro 2675765 Aug 31 15:05 avp_classic_arm.7z -rw-rw-r-- 1 linaro linaro 333672 Jul 25 2012 d3dref9.dll -rw-rw-r-- 1 linaro linaro 1742184 Jul 25 2012 d3dx9d.dll -rw-rw-r-- 1 linaro linaro 71760 Aug 21 08:05 libbinkdec.dll -rw-rw-r-- 1 linaro linaro 19536 Aug 21 08:05 libogg.dll -rw-rw-r-- 1 linaro linaro 39504 Aug 21 08:05 libsmackerdec.dll -rw-rw-r-- 1 linaro linaro 163920 Aug 21 08:05 libtheora.dll -rw-rw-r-- 1 linaro linaro 1611856 Aug 21 08:05 libvorbis.dll -rw-rw-r-- 1 linaro linaro 32848 Aug 21 08:05 libvorbisfile.dll -rw-rw-r-- 1 linaro linaro 105316 Nov 10 2001 non-gold_english.txt ... linaro@linaro-ubuntu-desktop:~/wine-apps/avpclassic$ wine ./MyAvP.exe err:module:import_dll Library XINPUT1_4.dll (which is needed by L"Z:\\home\\linaro\\wine-apps\\avpclassic\\MyAvP.exe") not found err:module:LdrInitializeThunk Main exe initialization for L"Z:\\home\\linaro\\wine-apps\\avpclassic\\MyAvP.exe" failed, status c0000135 --- snip --- More info on XInput versions here: http://msdn.microsoft.com/en-us/library/windows/desktop/hh405051%28v=vs.85%… --- quote --- XInput 1.4 ships today as a system component in Windows 8 as XINPUT1_4.DLL. It is available “inbox” and does not require redistribution with an application. The Windows Software Development Kit (SDK) contains the header and import library for statically linking against XINPUT1_4.DLL. To download the Windows 8 SDK, see Downloads for developing desktop apps. XInput 1.4 has these primary advantages over other versions of XInput: * This is the only version that can be used in C++/DirectX Windows Store apps. * The new XInputGetAudioDeviceIds function provides an audio device ID string that you can use to open an XAudio2 mastering voice or audio device for a headset attached to an Xbox 360 common controller. The XInputGetDSoundAudioDeviceGuids function is not available in this version. * Provides improved device capabilities reporting including XINPUT_CAPS_WIRELESS, XINPUT_CAPS_FFB_SUPPORTED, XINPUT_CAPS_PMD_SUPPORTED, and XINPUT_CAPS_NO_NAVIGATION flags and more accurate reporting of XINPUT_CAPS_VOICE_SUPPORTED. These flags are combined in the Flags member of the XINPUT_CAPABILITIES structure. The XInputGetCapabilities function returns XINPUT_CAPABILITIES. --- quote --- Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 6

[Bug 34943] New: Visual C++ 2010 Express web installer exits silently during download of prerequisites
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

http://bugs.winehq.org/show_bug.cgi?id=34943 Bug #: 34943 Summary: Visual C++ 2010 Express web installer exits silently during download of prerequisites Product: Wine Version: 1.7.6 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: winhttp AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Classification: Unclassified Hello folks, might be a regression ... I remember the download of prerequisites was pretty stable some time ago (after months of instabilities). Writes past the end of buffer. --- snip --- Unhandled exception: page fault on write access to 0x00473000 in 32-bit code (0xf74a6bc8). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:f74a6bc8 ESP:043be934 EBP:043be978 EFLAGS:00010202( R- -- I - - - ) EAX:02550d80 EBX:f74d7b30 ECX:00000f58 EDX:00472fa0 ESI:00017000 EDI:00000080 Stack dump: 0x043be934: 003d0f00 7e3e6000 7e3cb069 00472f98 0x043be944: 02550d7c 00001000 7e3cbd95 02550cb0 0x043be954: 00040000 02507e88 043be980 7bcd0000 0x043be964: 043be9f0 00017000 00001000 7bcd0000 0x043be974: 00000000 043be9b8 7e3cbfda 02550cb0 0x043be984: 0045bf98 0002bcc0 00000000 00000001 000c: sel=0067 base=00000000 limit=00000000 16-bit --x Backtrace: =>0 0xf74a6bc8 __memcpy_ssse3_rep+0x568() in libc.so.6 (0x043be978) 1 0x7e3cb069 read_data+0xba(request=0x2550cb0, buffer=0x45bf98, size=0x2bcc0, read=0x0(nil), async=0x1) [/home/focht/projects/wine/wine-git/dlls/winhttp/request.c:2119] in winhttp (0x043be978) 2 0x7e3cbfda task_read_data+0x3f(task=0x2508508) [/home/focht/projects/wine/wine-git/dlls/winhttp/request.c:2460] in winhttp (0x043be9b8) 3 0x7e3c50fa task_thread+0x1f(param=0x2508508) [/home/focht/projects/wine/wine-git/dlls/winhttp/request.c:184] in winhttp (0x043be9e8) 4 0x7bc8efae worker_thread_proc+0x14a(param=<couldn't compute location>) [/home/focht/projects/wine/wine-git/dlls/ntdll/threadpool.c:114] in ntdll (0x043bea48) 5 0x7bc85c04 call_thread_func_wrapper+0xb() in ntdll (0x043bea68) 6 0x7bc85c4d call_thread_func+0x3e(entry=0x7bc8ee63, arg=0x0(nil), frame=0x43beb68) [/home/focht/projects/wine/wine-git/dlls/ntdll/signal_i386.c:2602] in ntdll (0x043beb48) 7 0x7bc85be2 call_thread_entry_point+0x11() in ntdll (0x043beb68) 8 0x7bc8ca58 start_thread+0x165(info=0x81fdcfb8) [/home/focht/projects/wine/wine-git/dlls/ntdll/thread.c:417] in ntdll (0x043bf3a8) 9 0xf75229da start_thread+0xc9() in libpthread.so.0 (0x043bf468) 10 0xf7454bfe __clone+0x5d() in libc.so.6 (0x00000000) ... Wine-dbg>frame 1 2120 remove_data( request, count ); Wine-dbg>info locals 0x7e3cb068 read_data+0xba: (043be978) request_t* request=0x2550cb0 (parameter [EBP+8]) void* buffer=0x45bf98 (parameter [EBP+12]) DWORD size=0x2bcc0 (parameter [EBP+16]) DWORD* read=0x0(nil) (parameter [EBP+20]) BOOL async=0x1 (parameter [EBP+24]) int count=0x1000 (local [EBP-12]) int bytes_read=0x17000 (local [EBP-16]) --- snip --- Source of crash: http://source.winehq.org/git/wine.git/blob/e894c897d52c3e5852498164e246b473… --- snip --- 2105 static BOOL read_data( request_t *request, void *buffer, DWORD size, DWORD *read, BOOL async ) 2106 { 2107 int count, bytes_read = 0; 2108 2109 if (end_of_read_data( request )) goto done; 2110 2111 while (size) 2112 { 2113 if (!(count = get_available_data( request ))) 2114 { 2115 if (!refill_buffer( request, async )) goto done; 2116 if (!(count = get_available_data( request ))) goto done; 2117 } 2118 count = min( count, size ); 2119 memcpy( (char *)buffer + bytes_read, request->read_buf + request->read_pos, count ); 2120 remove_data( request, count ); 2121 if (request->read_chunked) request->read_chunked_size -= count; 2122 size -= count; 2123 bytes_read += count; 2124 request->content_read += count; 2125 if (end_of_read_data( request )) goto done; 2126 } 2127 if (request->read_chunked && !request->read_chunked_size) refill_buffer( request, async ); ... --- snip --- $ sha1sum vc_web.exe c2d61a5424aa474a169e59199aa2158a858833f6 vc_web.exe $ du -sh vc_web.exe 3.2M vc_web.exe $ wine --version wine-1.7.6-273-ga4d8627 Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 11

[Bug 38955] New: Visual Studio Code installer crashes on startup (parsing of overly long string-format security descriptor causes stack corruption)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=38955 Bug ID: 38955 Summary: Visual Studio Code installer crashes on startup (parsing of overly long string-format security descriptor causes stack corruption) Product: Wine Version: 1.7.47 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: advapi32 Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, the installer passes an overly long string-format security descriptor which is greater than MAX_PATH. --- snip --- $ WINEDEBUG=+tid,+seh,+relay wine ./VSCodeSetup.exe >>log.txt 2>&1 ... 0044:Call advapi32.ConvertStringSecurityDescriptorToSecurityDescriptorW(004237d0 L"D:PAI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CIIO;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;OICIIO;GA;;;SY)(A;;0x1301bf;;;BA)(A;OICIIO;GA;;;BA)(A;;0x1200a9;;;BU)(A;OICIIO;GXGR;;;BU)(A;OICIIO;GA;;;CO)(A;;0x1200a9;;;AC)(A"...,00000001,0033d5a0,00000000) ret=004022d7 0044:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7ea9690c ip=7ea9690c tid=0044 0044:trace:seh:raise_exception info[0]=00000001 0044:trace:seh:raise_exception info[1]=00d1d326 0044:trace:seh:raise_exception eax=004f0049 ebx=0033d540 ecx=0033d480 edx=0033d294 esi=0033d584 edi=0033d550 0044:trace:seh:raise_exception ebp=0033d4c8 esp=0033d260 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010246 ... Unhandled exception: page fault on write access to 0x003b0041 in 32-bit code (0x7ea99089). ... Backtrace: =>0 0x7ea99089 ParseStringSidToSid+0x3a4(StringSid="PAI(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CIIO;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;0x1301bf;;;SY)(A;OICIIO;GA;;;SY)(A;;0x1301bf;;;BA)(A;OICIIO;GA;;;BA)(A;;0x1200a9;;;BU)(A;OICIIO;GXGR;;;BU)(A;OICIIO;GA;;;CO)(A;;0x1200a9;;;AC)(A;OICIIO;GXGR;;;AC)?????", pSid=0x3b0041, cBytes=0x33d28c) [/home/focht/projects/wine/wine.repo/src/dlls/advapi32/security.c:5587] in advapi32 (0x0033d258) 1 0x7ea969c7 ParseStringSecurityDescriptorToSecurityDescriptor+0x197(StringSecurityDescriptor="", SecurityDescriptor=0x610030, cBytes=0x3b0039) [/home/focht/projects/wine/wine.repo/src/dlls/advapi32/security.c:4577] in advapi32 (0x0033d4c8) 2 0x00310078 (0x0030003b) 0x7ea99089 ParseStringSidToSid+0x3a4 [/home/focht/projects/wine/wine.repo/src/dlls/advapi32/security.c:5587] in advapi32: movb $0x1,0x0(%eax) 5587 pisid->Revision = SDDL_REVISION; Modules: Module Address Debug info Name (66 modules) PE 400000- 3e07000 Deferred vscodesetup ELF 7b800000-7ba71000 Deferred kernel32<elf> \-PE 7b820000-7ba71000 \ kernel32 ... Threads: process tid prio (all id:s are in hex) ... 00000043 (D) Z:\home\focht\Downloads\VSCodeSetup.exe 00000044 0 <== --- snip --- Source: https://source.winehq.org/git/wine.git/blob/3e55f1d2cc673d55ee342ff168a335b… --- snip --- 4508 static BOOL ParseStringSecurityDescriptorToSecurityDescriptor( 4509 LPCWSTR StringSecurityDescriptor, 4510 SECURITY_DESCRIPTOR_RELATIVE* SecurityDescriptor, 4511 LPDWORD cBytes) 4512 { 4513 BOOL bret = FALSE; 4514 WCHAR toktype; 4515 WCHAR tok[MAX_PATH]; 4516 LPCWSTR lptoken; 4517 LPBYTE lpNext = NULL; 4518 DWORD len; 4519 4520 *cBytes = sizeof(SECURITY_DESCRIPTOR); 4521 4522 if (SecurityDescriptor) 4523 lpNext = (LPBYTE)(SecurityDescriptor + 1); ... --- snip --- $ sha1sum VSCodeSetup.exe c971e8805aa21ef6483e04434cb819e524e682f0 VSCodeSetup.exe $ du -sh VSCodeSetup.exe 59M VSCodeSetup.exe $ wine --version wine-1.7.47-162-g0f9a0aa Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 38908] New: PlanetSide 2 v5.2.4.x launcher process exit causes wineserver crash
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=38908 Bug ID: 38908 Summary: PlanetSide 2 v5.2.4.x launcher process exit causes wineserver crash Product: Wine Version: 1.7.47 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wineserver Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, found this by chance ... --- snip --- (gdb) c Continuing. Program received signal SIGSEGV, Segmentation fault. 0x000000000042733a in grab_object (ptr=0x0) at /home/focht/projects/wine/wine.repo/src/server/object.c:298 298 assert( obj->refcount < INT_MAX ); (gdb) bt #0 0x000000000042733a in grab_object (ptr=0x0) at /home/focht/projects/wine/wine.repo/src/server/object.c:298 #1 0x0000000000410da7 in add_irp_to_queue (file=0x2a8e9a0, irp=0x2a948f0) at /home/focht/projects/wine/wine.repo/src/server/device.c:347 #2 0x0000000000411189 in device_file_close_handle (obj=0x2a8e9a0, process=0x29e5a20, handle=104) at /home/focht/projects/wine/wine.repo/src/server/device.c:429 #3 0x000000000041c6fc in handle_table_destroy (obj=0x29e5ba0) at /home/focht/projects/wine/wine.repo/src/server/handle.c:175 #4 0x000000000042748a in release_object (ptr=0x29e5ba0) at /home/focht/projects/wine/wine.repo/src/server/object.c:313 #5 0x000000000041c7c7 in close_process_handles (process=0x29e5a20) at /home/focht/projects/wine/wine.repo/src/server/handle.c:194 #6 0x000000000042a132 in process_killed (process=0x29e5a20) at /home/focht/projects/wine/wine.repo/src/server/process.c:817 #7 0x000000000042a510 in remove_process_thread (process=0x29e5a20, thread=0x2a0c9e0) at /home/focht/projects/wine/wine.repo/src/server/process.c:883 #8 0x000000000044af03 in kill_thread (thread=0x2a0c9e0, violent_death=0) at /home/focht/projects/wine/wine.repo/src/server/thread.c:1107 #9 0x0000000000448836 in thread_poll_event (fd=0x2a0cc10, event=16) at /home/focht/projects/wine/wine.repo/src/server/thread.c:266 #10 0x0000000000415130 in fd_poll_event (fd=0x2a0cc10, event=16) at /home/focht/projects/wine/wine.repo/src/server/fd.c:446 #11 0x000000000041550a in main_loop_epoll () at /home/focht/projects/wine/wine.repo/src/server/fd.c:541 #12 0x0000000000415b1c in main_loop () at /home/focht/projects/wine/wine.repo/src/server/fd.c:886 #13 0x0000000000420fa5 in main (argc=1, argv=0x7ffdb89b57c8) at /home/focht/projects/wine/wine.repo/src/server/main.c:148 (gdb) frame 1 #1 0x0000000000410da7 in add_irp_to_queue (file=0x2a8e9a0, irp=0x2a948f0) at /home/focht/projects/wine/wine.repo/src/server/device.c:347 347 irp->thread = (struct thread *)grab_object( current ); (gdb) p *file $1 = {obj = {refcount = 2, handle_count = 1, ops = 0x4741e0 <device_file_ops>, wait_queue = {next = 0x2a8e9b0, prev = 0x2a8e9b0}, name = 0x0, sd = 0x0, obj_list = {next = 0x2a8eb30, prev = 0x2a8ea50}}, device = 0x29b18b0, fd = 0x2a8ea20, user_ptr = 1121136, entry = {next = 0x29b1918, prev = 0x29b1918}, requests = {next = 0x2a8ea08, prev = 0x2a8ea08}} (gdb) p *irp $2 = {obj = {refcount = 2, handle_count = 0, ops = 0x474060 <irp_call_ops>, wait_queue = {next = 0x2a94900, prev = 0x2a94900}, name = 0x0, sd = 0x0, obj_list = {next = 0x2a8f8d0, prev = 0x699580 <object_list>}}, dev_entry = {next = 0x5555555555555555, prev = 0x5555555555555555}, mgr_entry = { next = 0x5555555555555555, prev = 0x5555555555555555}, file = 0x2a8e9a0, thread = 0x5555555555555555, user_arg = 6148914691236517205, async = 0x0, status = 259, params = {major = 2, create = {major = 2, access = 13, sharing = 1121136, options = 0, device = 43932192}, close = {major = 2, __pad = 13, file = 1121136}, read = {major = 2, key = 13, file = 1121136, pos = 43932192}, write = {major = 2, key = 13, file = 1121136, pos = 43932192}, flush = { major = 2, __pad = 13, file = 1121136}, ioctl = {major = 2, code = 13, file = 1121136}}, result = 0, in_size = 0, in_data = 0x0, out_size = 0, out_data = 0x0} $ (gdb) frame 2 #2 0x0000000000411189 in device_file_close_handle (obj=0x2a8e9a0, process=0x29e5a20, handle=104) at /home/focht/projects/wine/wine.repo/src/server/device.c:429 429 add_irp_to_queue( file, irp ); (gdb) p *obj $5 = {refcount = 2, handle_count = 1, ops = 0x4741e0 <device_file_ops>, wait_queue = {next = 0x2a8e9b0, prev = 0x2a8e9b0}, name = 0x0, sd = 0x0, obj_list = { next = 0x2a8eb30, prev = 0x2a8ea50}} (gdb) p *process $4 = {obj = {refcount = 57, handle_count = 0, ops = 0x477080 <process_ops>, wait_queue = {next = 0x29e5a30, prev = 0x29e5a30}, name = 0x0, sd = 0x0, obj_list = {next = 0x2a07fe0, prev = 0x29fb160}}, entry = {next = 0x2a13e90, prev = 0x6995a0 <process_list>}, parent = 0x0, thread_list = { next = 0x29e5a78, prev = 0x29e5a78}, debugger = 0x0, handles = 0x0, msg_fd = 0x29fb130, id = 8, group_id = 8, sigkill_timeout = 0x0, cpu = CPU_x86, unix_pid = 1166, exit_code = 0, running_threads = 0, start_time = 130812070795368620, end_time = 130812071183535560, affinity = 15, priority = 2, suspend = 0, is_system = 0, debug_children = 0, is_terminating = 1, job = 0x0, job_entry = {next = 0x5555555555555555, prev = 0x5555555555555555}, locks = { next = 0x29e5b00, prev = 0x29e5b00}, classes = {next = 0x2a94200, prev = 0x2a8e770}, console = 0x2a10100, startup_state = STARTUP_DONE, startup_info = 0x0, idle_event = 0x2a6e170, winstation = 0, desktop = 0, token = 0x2a08770, dlls = {next = 0x2a6e5b0, prev = 0x2a94850}, peb = 2147348480, ldt_copy = 4151760128, trace_data = 0, rawinput_devices = {next = 0x29e5b78, prev = 0x29e5b78}, rawinput_mouse = 0x0, rawinput_kbd = 0x0} --- snip --- $ wine --version wine-1.7.47 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 36731] New: Runes of Magic 'ClientUpdater.exe' crashes after a number of update cycles (mshtml environment setup contains stack buffer overflow)
by wine-bugs＠winehq.org 05 Dec '21

05 Dec '21

https://bugs.winehq.org/show_bug.cgi?id=36731 Bug ID: 36731 Summary: Runes of Magic 'ClientUpdater.exe' crashes after a number of update cycles (mshtml environment setup contains stack buffer overflow) Product: Wine Version: 1.7.20 Hardware: x86 OS: Linux Status: NEW Severity: normal Priority: P2 Component: mshtml Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Hello folks, found during investigation of 'Runes of Magic' client updater. There is a crash after a number of update cycles. Unfortunately it's not easily traceable as it requires large downloads and many client restarts (= hours) to reach the crash point. I started the updater with a few debug channels (= reduced noise) which still allowed me to do post-mortem analysis. The launcher restarts itself after each update cycle. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/Runes of Magic $ WINEDEBUG=+tid,+seh,+loaddll,+process,+mshtml wine ./launcher.exe ... <hours, multiple updater restarts> ... 004f:trace:loaddll:load_builtin_dll Loaded L"C:\\windows\\system32\\mshtml.dll" at 0x7c090000: builtin 004f:trace:mshtml:DllGetClassObject (CLSID_HTMLDocument {00000001-0000-0000-c000-000000000046} 0x3392a8) 004f:trace:mshtml:ClassFactory_AddRef (0x1c2c80) ref = 1 004f:trace:mshtml:HTMLDocument_Create ((nil) IID_IUnknown 0x1c19d4) 004f:trace:mshtml:load_gecko () 004f:trace:mshtml:check_version "Wine Gecko 2.24" 004f:trace:mshtml:load_xul (L"C:\\windows\\system32\\gecko\\2.24\\wine_gecko\\\\xul.dll") 004f:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7c130001 ip=7c130001 tid=004f 004f:trace:seh:raise_exception info[0]=00000001 004f:trace:seh:raise_exception info[1]=8d43ade4 004f:trace:seh:raise_exception eax=00000001 ebx=006b0063 ecx=003389a0 edx=7bcda204 esi=00339330 edi=001c2de8 004f:trace:seh:raise_exception ebp=005c0070 esp=00338c00 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010212 004f:trace:seh:call_stack_handlers calling handler at 0x4a97b0 code=c0000005 flags=0 004f:trace:seh:call_stack_handlers handler at 0x4a97b0 returned 1 004f:trace:seh:call_stack_handlers calling handler at 0x7bc9ecf7 code=c0000005 flags=0 wine: Unhandled page fault on write access to 0x8d43ade4 at address 0x7c130001 (thread 004f), starting debugger... --- snip --- I looked at the crash site and noticed it being in the middle of opcode sequence. --- snip --- 7C130000 45 INC EBP 7C130001 0889 4424108D OR BYTE PTR DS:[ECX+8D102444],CL 7C130007 8313 B5 ADC DWORD PTR DS:[EBX],-4B 7C13000A FA CLI --- snip --- Decoded with proper opcode start addresses: --- snip --- 7C12FFFF 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8] 7C130002 894424 10 MOV DWORD PTR SS:[ESP+10],EAX 7C130006 8D83 13B5FAFF LEA EAX,[EBX+FFFAB513] --- snip --- Partial stack dump with 'esp' = 0x00338c00 from exception context: --- snip --- ... 00338BA8 C0000005 00338BAC 00000000 00338BB0 00000000 00338BB4 7C130001 00338BB8 00000002 00338BBC 00000001 00338BC0 8D43ADE4 äC 00338BC4 00650074 t e 00338BC8 0033006D m 3 00338BCC 005C0032 2 \ 00338BD0 00650067 g e 00338BD4 006B0063 c k 00338BD8 005C006F o \ 00338BDC 002E0032 2 . 00338BE0 00340032 2 4 00338BE4 0077005C \ w 00338BE8 006E0069 i n 00338BEC 00000005 00338BF0 00650067 g e 00338BF4 006B0063 c k 00338BF8 005C006F o \ 00338BFC 7C130000 00338C00 00338F74 ; UNICODE "C:\windows\system32\gecko\2.24\wine_gecko\" 00338C04 7C1FF480 00338C08 7C19E234 ; ASCII "load_xul" 00338C0C 7C19CF48 ; ASCII "(%s)" 00338C10 7BCEC8C1 ; ASCII "L"C:\\windows\\system32\\gecko\\2.24\\wine_gecko\\\\xul.dll"" 00338C14 7C19D4E8 ; ASCII "Wine Gecko 2.24" 00338C18 7C19E250 ; ASCII "check_version" 00338C1C 7C19D4C0 ; ASCII "%s" 00338C20 7BCEC8AF ; ASCII ""Wine Gecko 2.24"" ... --- snip --- Yes, looks pretty much like a stack buffer overflow. A string buffer overwrote 'ebp', 'ebx' values (register save on stack for '__x86_get_pc_thunk_bx') and parts of the return address. The NULL terminator cancelled out the lower 16 bits of the return address. The culprit: 'load_xul' -> 'set_environment' Source: http://source.winehq.org/git/wine.git/blob/0be56d27d2d4b22367313fa4c6f1e658… --- snip --- 439 static void set_environment(LPCWSTR gre_path) 440 { 441 WCHAR path_env[MAX_PATH], buf[20]; 442 int len, debug_level = 0; 443 444 static const WCHAR pathW[] = {'P','A','T','H',0}; 445 static const WCHAR warnW[] = {'w','a','r','n',0}; 446 static const WCHAR xpcom_debug_breakW[] = 447 {'X','P','C','O','M','_','D','E','B','U','G','_','B','R','E','A','K',0}; 448 static const WCHAR nspr_log_modulesW[] = 449 {'N','S','P','R','_','L','O','G','_','M','O','D','U','L','E','S',0}; 450 static const WCHAR debug_formatW[] = {'a','l','l',':','%','d',0}; 451 452 /* We have to modify PATH as XPCOM loads other DLLs from this directory. */ 453 GetEnvironmentVariableW(pathW, path_env, sizeof(path_env)/sizeof(WCHAR)); 454 len = strlenW(path_env); 455 path_env[len++] = ';'; 456 strcpyW(path_env+len, gre_path); 457 SetEnvironmentVariableW(pathW, path_env); 458 459 SetEnvironmentVariableW(xpcom_debug_breakW, warnW); 460 461 if(TRACE_ON(gecko)) 462 debug_level = 5; 463 else if(WARN_ON(gecko)) 464 debug_level = 3; 465 else if(ERR_ON(gecko)) 466 debug_level = 2; 467 468 sprintfW(buf, debug_formatW, debug_level); 469 SetEnvironmentVariableW(nspr_log_modulesW, buf); 470 } --- snip --- 'path_env' must have overflowed ... but how? I used a JIT debugger to examine the process environment block at the time of the crash since 'GetEnvironmentVariableW' reads from 'NtCurrentTeb()->Peb->ProcessParameters->Environment'. --- snip ---- Address UNICODE dump ... 00231EC0 m32\cmd.exe.PATH 00231EE0 =C:\windows\syst 00231F00 em32;C:\windows; 00231F20 C:\windows\syste 00231F40 m32\wbem;C:\wind 00231F60 ows\system32\gec 00231F80 ko\2.24\wine_gec 00231FA0 ko\;C:\windows\s 00231FC0 ystem32\gecko\2. 00231FE0 24\wine_gecko\;C 00232000 :\windows\system 00232020 32\gecko\2.24\wi 00232040 ne_gecko\;C:\win 00232060 dows\system32\ge 00232080 cko\2.24\wine_ge 002320A0 cko\;C:\windows\ 002320C0 system32\gecko\2 002320E0 .24\wine_gecko\. 00232100 TEMP=C:\users\fo 00232120 cht\Temp.TMP=C:\ 00232140 users\focht\Temp 00232160 .windir=C:\windo 00232180 ws.ALLUSERSPROFI 002321A0 LE=C:\users\Publ 002321C0 ic.APPDATA=C:\us ... --- snip --- At the time 'gre_path' path was appended, the string from 'PATH' environment variable had already grown near 'MAX_PATH' (260 characters) buffer limit. 'PATH' is of course not limited to 'MAX_PATH' since it contains a list of paths. A better option would be to query with 'GetEnvironmentVariableW( value, NULL, 0)' first and allocate the needed buffer from heap, including length for 'gre_path'. Even with these things corrected there is still a general problem: at one point it will overflow/being blocked from appending to 'PATH'. Each newly created updater process inherits the process environment from parent (client updater restarts itself each time). A more sophisticated thing to do would be to search for existing value and not append if already present. Wine Mono 'mscoree' component has a similar potential stack buffer overflow: http://source.winehq.org/git/wine.git/blob/8cdcf470016f0655dfc8810f9d4d2f2d… Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

wine-bugs February 2018