wine-bugs May 2020

wine-bugs@winehq.org

1 participants
7164 discussions

[Bug 48927] New: Heap buffer underflow in TiffFrameDecode_ReadTile when decoding 1x1 4bpp RGBA image
by WineHQ Bugzilla 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=48927 Bug ID: 48927 Summary: Heap buffer underflow in TiffFrameDecode_ReadTile when decoding 1x1 4bpp RGBA image Product: Wine-staging Version: unspecified Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: thomas.faber(a)reactos.org CC: leslie_alistair(a)hotmail.com, z.figura12(a)gmail.com Distribution: --- Created attachment 66887 --> https://bugs.winehq.org/attachment.cgi?id=66887 Debugger info from ReactOS ReactOS bug for reference: https://jira.reactos.org/browse/CORE-16796 Apologies for not reproducing this on Wine; the bug & fix are pretty simple though. The gdiplus:image test tries to decode a 1x1 TIFF image, and TiffFrameDecode_ReadTile assumes that the cached_tile is large enough for an even number of output pixels (i.e. a full number of input bytes). The issue appears to be with this Staging patch: https://github.com/wine-staging/wine-staging/blob/master/patches/windowscod… The attachment has a backtrace and relevant variables. The line numbers may not match but the underflow got caught at: dst[0] = (b & 0x20) ? 0xff : 0; /* B */ -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 12

[Bug 40311] New: Processing of 'DeviceIoControl' calls doesn't corresponds to specification
by wine-bugs＠winehq.org 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=40311 Bug ID: 40311 Summary: Processing of 'DeviceIoControl' calls doesn't corresponds to specification Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: ugnenko(a)mail.ru Distribution: --- As described in specification 'Buffer Descriptions for I/O Control Codes' for 'METHOD_IN_DIRECT' or 'METHOD_OUT_DIRECT' transfer types the data buffer, to which points the pointer passed as 'lpOutputBuffer' argument into 'DeviceIoControl', must be accessible from driver. In other words, when in control code is specified 'METHOD_IN_DIRECT' tranfer type, the 'lpOutputBuffer' buffer may be used as the additional buffer of data that driver may transfer to device. This feature is used in software and drivers for Hantek Oscilloscopes. The pointer 'lpOutputBuffer' and argument 'nOutBufferSize', which are passed to 'DeviceIoControl' function, must are used as corresponding values for fields 'StartVa', 'ByteOffset' and 'ByteCount' in 'irp->MdlAddress' structure. But Wine allocates new output buffer that are passed to 'IoBuildDeviceIoControlRequest' (see function 'dispatch_ioctl' in source file 'dlls/ntoskrnl.exe/ntoskrnl.c'). Thus data stored in output buffer aren't available for driver. Specification: https://msdn.microsoft.com/en-us/library/windows/hardware/ff540663(v=vs.85)… -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

[Bug 40894] New: Warcraft 3: Crash on starting the game
by wine-bugs＠winehq.org 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=40894 Bug ID: 40894 Summary: Warcraft 3: Crash on starting the game Product: Wine Version: 1.9.13 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: sworddragon2(a)aol.com Distribution: --- Created attachment 54985 --> https://bugs.winehq.org/attachment.cgi?id=54985 Terminal output A few days before I was still able to start Warcraft 3 (not sure if it was with Wine 1.9.12 or already Wine 1.9.13) and now after using a clean profile Warcraft 3 crashes on starting it. In the attachments is the terminal output. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 18

[Bug 49043] New: iLok License Manager daemon 'LDSvc.exe' crashes on startup (PACE copy protection spuriously fails to get/set thread context of newly created threads)
by WineHQ Bugzilla 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=49043 Bug ID: 49043 Summary: iLok License Manager daemon 'LDSvc.exe' crashes on startup (PACE copy protection spuriously fails to get/set thread context of newly created threads) Product: Wine Version: 5.7 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: wineserver Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, an interesting problem while looking at bug 49010 ("ilok license manager: doesn't connect to the activation server as in 4.0.2"). NOTE: It's not the only problem but I think it's worth mentioning separately and there is actually a patchset that aims to mitigate the issue. Also these patches do not refer to any bug id. The license manager is an auto-start service. Part of PACE copy-protection hence obviously using anti-debug/hacking trickery. --- snip --- $ pwd /home/focht/.wine/drive_c/Program Files (x86)/iLok License Manager $ WINEDEBUG=+seh,+relay,+loaddll,+process,+ntdll,+server,+virtual wine ./iLok\ License\ Manager.exe >>log.txt 2>&1 ... 003c:Call KERNEL32.CreateProcessW(00000000,008ab690 L"C:\\Program Files (x86)\\Common Files\\PACE\\Services\\LicenseServices\\LDSvc.exe -u https://activation.paceap.com/InitiateActivation",00000000,00000000,100000000,00000400,008aa020,00000000,0022f5a0,0022f570) ret=14000683a ... 0068:trace:loaddll:load_native_dll Loaded L"C:\\windows\\system32\\kernelbase.dll" at 0x7b000000: PE builtin 0068:trace:loaddll:load_so_dll Loaded L"C:\\windows\\system32\\kernel32.dll" at 0x7b420000: builtin 0068:trace:loaddll:load_native_dll Loaded L"C:\\Program Files (x86)\\Common Files\\PACE\\Services\\LicenseServices\\LDSvc.exe" at 0x400000: native 0068:trace:loaddll:load_so_dll Loaded L"C:\\windows\\system32\\ucrtbase.dll" at 0x7e720000: builtin 0068:trace:loaddll:load_native_dll Loaded L"C:\\windows\\system32\\version.dll" at 0x330000: PE builtin 0068:trace:loaddll:load_native_dll Loaded L"C:\\windows\\system32\\sechost.dll" at 0x350000: PE builtin 0068:trace:loaddll:load_so_dll Loaded L"C:\\windows\\system32\\advapi32.dll" at 0x7e680000: builtin 0068:trace:loaddll:load_native_dll Loaded L"C:\\windows\\system32\\rpcrt4.dll" at 0x5430000: PE builtin 0068:trace:loaddll:load_native_dll Loaded L"C:\\windows\\system32\\setupapi.dll" at 0x5340000: PE builtin 0068:trace:loaddll:load_so_dll Loaded L"C:\\windows\\system32\\gdi32.dll" at 0x7e540000: builtin 0068:trace:loaddll:load_so_dll Loaded L"C:\\windows\\system32\\user32.dll" at 0x7e830000: builtin 0068:trace:loaddll:load_native_dll Loaded L"C:\\windows\\system32\\ole32.dll" at 0x5580000: PE builtin 0068:trace:loaddll:load_native_dll Loaded L"C:\\windows\\system32\\msacm32.dll" at 0x370000: PE builtin 0068:trace:loaddll:load_native_dll Loaded L"C:\\windows\\system32\\WINMM.dll" at 0x10000000: PE builtin 0068:trace:loaddll:load_native_dll Loaded L"C:\\windows\\system32\\MSVCP140.dll" at 0x58e0000: PE builtin ... 003c:trace:process:RtlCreateUserProcess L"\\??\\C:\\Program Files (x86)\\Common Files\\PACE\\Services\\LicenseServices\\LDSvc.exe" pid 0064 tid 0068 handles 0xe8/0xec ... 0068:Starting process L"C:\\Program Files (x86)\\Common Files\\PACE\\Services\\LicenseServices\\LDSvc.exe" (entryproc=0x449060) ... 0068:Call advapi32.StartServiceCtrlDispatcherA(0032fdac) ret=004482e8 ... 007c:Call advapi32.RegisterServiceCtrlHandlerA(029090e4 "PACELicenseDServices",004474d0) ret=00447605 ... 007c:Call KERNEL32.CreateRemoteThread(ffffffff,00000000,00000000,00447580,00000000,00000004,00000000) ret=004486d6 ... 007c:Ret KERNEL32.CreateRemoteThread() retval=000000a0 ret=004486d6 ... 0080:Call ucrtbase._beginthreadex(00000000,00000000,004969c0,06527148,00000004,06527168) ret=00496955 ... 0080:Ret ucrtbase._beginthreadex() retval=0000018c ret=00496955 0080:Call KERNEL32.ResumeThread(0000018c) ret=0049699a ... 0080:Ret KERNEL32.ResumeThread() retval=00000001 ret=0049699a ... 00b8: *fd* 24 <- 179 00b8: init_thread( unix_pid=26107, unix_tid=26127, debug_level=1, teb=7ffc4000, entry=004969c0, reply_fd=24, wait_fd=26, cpu=x86 ) 00b8: *fd* 26 <- 180 00b8: init_thread() = 0 { pid=0064, tid=00b8, server_start=1d61d46752028e8 (-2.0593510), info_size=0, version=602, all_cpus=00000003, suspend=1 } 00b8: select( flags=2, cookie=06e1e5a4, timeout=0, size=0, prev_apc=0000, result={}, data={}, context={cpu=x86,eip=7bcb24a4,esp=06e1fff0,ebp=00000000,eflags=00000202,cs=0023,ss=002b,ds=002b,es=002b,fs=0063,gs=006b,eax=004969c0,ebx=065231e0,ecx=00000000,edx=00000000,esi=00000000,edi=00000000,dr0=00000000,dr1=00000000,dr2=00000000,dr3=00000000,dr6=00000000,dr7=00000000,fp.ctrl=0000027f,fp.status=00000000,fp.tag=00000000,fp.err_off=00000000,fp.err_sel=00000000,fp.data_off=00000000,fp.data_sel=00000000,fp.cr0npx=00000000,fp.reg0=0,fp.reg1=0,fp.reg2=0,fp.reg3=0,fp.reg4=0,fp.reg5=0,fp.reg6=0,fp.reg7=0,extended={0000027f,...,00000000}} ) 00b8: select() = TIMEOUT { call={APC_NONE}, apc_handle=0000, context={} } 00b8:Call PE DLL (proc=0x7e769d80,module=0x7e720000 L"ucrtbase.dll",reason=THREAD_ATTACH,res=(nil)) ... L"WININET.dll",reason=THREAD_ATTACH,res=(nil)) retval=1 00b8:Call PE DLL (proc=0x160050e3,module=0x16000000 L"dnssd.dll",reason=THREAD_ATTACH,res=(nil)) ... 00b8:Call KERNEL32.WaitForMultipleObjects(00000002,06e1fd90,00000000,fffffffe) ret=00495e84 00b8:Call kernelbase.WaitForMultipleObjects(00000002,06e1fd90,00000000,fffffffe) ret=7bc9f8e4 00b8:Call ntdll.NtWaitForMultipleObjects(00000002,06e1fb7c,00000001,00000000,06e1fb00) ret=7b040eda 00b8: select( flags=2, cookie=06e1f194, timeout=+4294967.2939836, size=12, prev_apc=0000, result={}, data={WAIT,handles={0124,00dc}}, context={} ) 00b8: select() = PENDING { call={APC_NONE}, apc_handle=0000, context={} } 00b8: *wakeup* signaled=0 00b8:Ret ntdll.NtWaitForMultipleObjects() retval=00000000 ret=7b040eda 00b8:Ret kernelbase.WaitForMultipleObjects() retval=00000000 ret=7bc9f8e4 00b8:Ret KERNEL32.WaitForMultipleObjects() retval=00000000 ret=00495e84 00b8:Call KERNEL32.WaitForSingleObject(00000128,00000000) ret=00592a19 00b8:Call kernelbase.WaitForSingleObject(00000128,00000000) ret=7bc9f8e4 00b8:Call ntdll.NtWaitForMultipleObjects(00000001,06e1fc3c,00000001,00000000,06e1fbc0) ret=7b040eda 00b8: select( flags=2, cookie=06e1f254, timeout=0, size=8, prev_apc=0000, result={}, data={WAIT,handles={0128}}, context={} ) 00b8: select() = 0 { call={APC_NONE}, apc_handle=0000, context={} } 00b8:Ret ntdll.NtWaitForMultipleObjects() retval=00000000 ret=7b040eda 00b8:Ret kernelbase.WaitForSingleObject() retval=00000000 ret=7bc9f8e4 00b8:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=00592a19 00b8:trace:process:NtQueryInformationProcess (0xffffffff,0x00000022,0x7ffc7ac0,0x00000004,(nil)) 00b8:trace:seh:raise_exception code=c0000005 flags=0 addr=(nil) ip=00000000 tid=00b8 00b8:trace:seh:raise_exception info[0]=00000008 00b8:trace:seh:raise_exception info[1]=00000000 00b8:trace:seh:raise_exception eax=06e1fdec ebx=065231e0 ecx=00002592 edx=4a108e6a esi=00000000 edi=012933bb 00b8:trace:seh:raise_exception ebp=06e1fdec esp=06e1fbd0 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010246 00b8:trace:seh:call_vectored_handlers calling handler at 0x448700 code=c0000005 flags=0 00b8:trace:seh:call_vectored_handlers handler at 0x448700 returned 0 00b8:trace:seh:call_stack_handlers calling handler at (nil) code=c0000005 flags=0 00b8:trace:process:NtQueryInformationProcess (0xffffffff,0x00000022,0x7ffc7ac0,0x00000004,(nil)) 00b8:trace:seh:raise_exception code=c0000005 flags=0 addr=(nil) ip=00000000 tid=00b8 00b8:trace:seh:raise_exception info[0]=00000008 00b8:trace:seh:raise_exception info[1]=00000000 00b8:trace:seh:raise_exception eax=06e1f86c ebx=06e1fb78 ecx=00000000 edx=7bcb2550 esi=06e1f8ac edi=06e1fde0 00b8:trace:seh:raise_exception ebp=06e1f808 esp=06e1f7dc cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010216 00b8:trace:seh:call_vectored_handlers calling handler at 0x448700 code=c0000005 flags=0 00b8:trace:seh:call_vectored_handlers handler at 0x448700 returned 0 00b8:trace:seh:call_stack_handlers calling handler at 0x7bcb2550 code=c0000005 flags=0 00b8:trace:seh:call_stack_handlers handler at 0x7bcb2550 returned 2 00b8:trace:seh:call_stack_handlers calling handler at (nil) code=c0000005 flags=10 ... 00b8:err:seh:setup_exception_record stack overflow 1600 bytes in thread 00b8 eip f7c3f5ed esp 06d20cf0 stack 0x6d20000-0x6d21000-0x6e20000 00b8: *killed* exit_code=0 --- snip --- The root cause can be seen much earlier. NOTE: I made the output linear / "atomic" for easier reading. In reality various consecutive calls were interleaved from many other threads started in parallel. --- snip --- ... 0080:Call ucrtbase._beginthreadex(00000000,00000000,004969c0,065231e0,00000004,06523200) ret=00496955 0080:Call KERNEL32.CreateRemoteThread(ffffffff,00000000,00000000,004969c0,065231e0,00000004,06523200) ret=004486d6 0080:Call kernelbase.CreateRemoteThread(ffffffff,00000000,00000000,004969c0,065231e0,00000004,06523200) ret=7bc9f8e4 0080:Call ntdll.RtlCreateUserThread(ffffffff,00000000,00000001,00000000,00000000,00000000,004969c0,065231e0,06bfec30,06bfec24) ret=7b0434a6 0080: *fd* 16 <- 177 0080: new_thread( process=ffffffff, access=001fffff, suspend=1, request_fd=16, objattr={} ) 0080: new_thread() = 0 { tid=00b8, handle=00e0 } 0080:trace:virtual:map_view got mem in reserved area 0x7ffc4000-0x7ffc8000 0080:trace:virtual:VIRTUAL_DumpView View: 0x7ffc4000 - 0x7ffc7fff (valloc) 0080:trace:virtual:VIRTUAL_DumpView 0x7ffc4000 - 0x7ffc7fff c-rw- 0080:trace:virtual:map_view got mem in reserved area 0x6d20000-0x6e24000 0080:trace:virtual:VIRTUAL_DumpView View: 0x6d20000 - 0x6e23fff (valloc) 0080:trace:virtual:VIRTUAL_DumpView 0x6d20000 - 0x6d20fff c---- 0080:trace:virtual:VIRTUAL_DumpView 0x6d21000 - 0x6d21fff cgrw- 0080:trace:virtual:VIRTUAL_DumpView 0x6d22000 - 0x6e23fff c-rw- 0080:Ret ntdll.RtlCreateUserThread() retval=00000000 ret=7b0434a6 0080:Ret kernelbase.CreateRemoteThread() retval=000000e0 ret=7bc9f8e4 0080:Ret KERNEL32.CreateRemoteThread() retval=000000e0 ret=004486d6 0080:Call KERNEL32.GetThreadContext(000000e0,06bfea38) ret=00448963 0080:Call kernelbase.GetThreadContext(000000e0,06bfea38) ret=7bc9f8e4 0080: get_thread_context( handle=00e0, flags=00000010 ) 0080: get_thread_context() = ACCESS_DENIED { self=0, handle=0000, context={} } ... 00b8: init_thread( unix_pid=26107, unix_tid=26127, debug_level=1, teb=7ffc4000, entry=004969c0, reply_fd=24, wait_fd=26, cpu=x86 ) 00b8: *fd* 26 <- 180 ... 0080:Call ntdll.RtlNtStatusToDosError(c0000022) ret=7b04371d 0080:Ret ntdll.RtlNtStatusToDosError() retval=00000005 ret=7b04371d 0080:Ret kernelbase.GetThreadContext() retval=00000000 ret=7bc9f8e4 0080:Ret KERNEL32.GetThreadContext() retval=00000000 ret=00448963 ... 00b8: init_thread() = 0 { pid=0064, tid=00b8, server_start=1d61d46752028e8 (-2.0593510), info_size=0, version=602, all_cpus=00000003, suspend=1 } ... 0080:Ret ucrtbase._beginthreadex() retval=000000e0 ret=00496955 0080:Call KERNEL32.ResumeThread(000000e0) ret=0049699a 0080:Call kernelbase.ResumeThread(000000e0) ret=7bc9f8e4 0080:Call ntdll.NtResumeThread(000000e0,06bfed74) ret=7b043b01 0080: resume_thread( handle=00e0 ) 0080: resume_thread() = 0 { count=1 } 0080:Ret ntdll.NtResumeThread() retval=00000000 ret=7b043b01 0080:Ret kernelbase.ResumeThread() retval=00000001 ret=7bc9f8e4 0080:Ret KERNEL32.ResumeThread() retval=00000001 ret=0049699a --- snip --- Every newly created (suspended) thread gets the hardware debug breakpoint registers "consumed" with predefined values (handler) as part of the protection scheme. If it fails to do so, the goes haywire at some later point. The "good" case: --- snip --- ... 0080:Call ucrtbase._beginthreadex(00000000,00000000,004969c0,06523b30,00000004,06523b50) ret=00496955 0080:Call KERNEL32.CreateRemoteThread(ffffffff,00000000,00000000,004969c0,06523b30,00000004,06523b50) ret=004486d6 0080:Call kernelbase.CreateRemoteThread(ffffffff,00000000,00000000,004969c0,06523b30,00000004,06523b50) ret=7bc9f8e4 0080:Call ntdll.RtlCreateUserThread(ffffffff,00000000,00000001,00000000,00000000,00000000,004969c0,06523b30,06bfec30,06bfec24) ret=7b0434a6 0080: *fd* 28 <- 184 0080: new_thread( process=ffffffff, access=001fffff, suspend=1, request_fd=28, objattr={} ) 0080: new_thread() = 0 { tid=00c0, handle=00f4 } 0080:trace:virtual:map_view got mem in reserved area 0x7ffbc000-0x7ffc0000 0080:trace:virtual:VIRTUAL_DumpView View: 0x7ffbc000 - 0x7ffbffff (valloc) 0080:trace:virtual:VIRTUAL_DumpView 0x7ffbc000 - 0x7ffbffff c-rw- 0080:trace:virtual:map_view got mem in reserved area 0x6f40000-0x7044000 0080:trace:virtual:VIRTUAL_DumpView View: 0x6f40000 - 0x7043fff (valloc) 0080:trace:virtual:VIRTUAL_DumpView 0x6f40000 - 0x6f40fff c---- 0080:trace:virtual:VIRTUAL_DumpView 0x6f41000 - 0x6f41fff cgrw- 0080:trace:virtual:VIRTUAL_DumpView 0x6f42000 - 0x7043fff c-rw- 0080:Ret ntdll.RtlCreateUserThread() retval=00000000 ret=7b0434a6 0080:Ret kernelbase.CreateRemoteThread() retval=000000f4 ret=7bc9f8e4 0080:Ret KERNEL32.CreateRemoteThread() retval=000000f4 ret=004486d6 0080:Call KERNEL32.GetThreadContext(000000f4,06bfea38) ret=00448963 0080:Call kernelbase.GetThreadContext(000000f4,06bfea38) ret=7bc9f8e4 ... 00c0: *fd* 32 <- 185 00c0: *fd* 34 <- 186 00c0: init_thread( unix_pid=26107, unix_tid=26129, debug_level=1, teb=7ffbc000, entry=004969c0, reply_fd=32, wait_fd=34, cpu=x86 ) 00c0: init_thread() = 0 { pid=0064, tid=00c0, server_start=1d61d46752028e8 (-2.0605960), info_size=0, version=602, all_cpus=00000003, suspend=1 } ... 0080: get_thread_context( handle=00f4, flags=00000010 ) ... 00c0: *sent signal* signal=10 00c0: *signal* signal=19 ... 0080: get_thread_context() = PENDING { self=0, handle=00f8, context={} } 0080: select( flags=2, cookie=06bfd9a4, timeout=+0.0999631, size=8, prev_apc=0000, result={}, data={WAIT_ALL,handles={00f8}}, context={} ) 0080: select() = 0 { call={APC_NONE}, apc_handle=0000, context={} } 0080: get_thread_context( handle=00f8, flags=00000010 ) 0080: get_thread_context() = 0 { self=0, handle=0000, context={cpu=x86,dr0=00000000,dr1=00000000,dr2=00000000,dr3=00000000,dr6=00000000,dr7=00000000} } 0080:trace:seh:__regs_NtGetContextThread 0xf4: dr0=00000000 dr1=00000000 dr2=00000000 dr3=00000000 dr6=00000000 dr7=00000000 0080:Ret kernelbase.GetThreadContext() retval=00000001 ret=7bc9f8e4 0080:Ret KERNEL32.GetThreadContext() retval=00000001 ret=00448963 0080:Call KERNEL32.GetThreadId(000000f4) ret=00448980 0080:Call kernelbase.GetThreadId(000000f4) ret=7bc9f8e4 0080:Call ntdll.NtQueryInformationThread(000000f4,00000000,06bfe988,0000001c,00000000) ret=7b04380a 0080: get_thread_info( handle=00f4, tid_in=0000 ) 0080: get_thread_info() = 0 { pid=0064, tid=00c0, teb=7ffbc000, entry_point=004969c0, affinity=000000ff, exit_code=259, priority=0, last=0, suspend_count=1, desc_len=0, desc=L"" } 0080:Ret ntdll.NtQueryInformationThread() retval=00000000 ret=7b04380a 0080:Ret kernelbase.GetThreadId() retval=000000c0 ret=7bc9f8e4 0080:Ret KERNEL32.GetThreadId() retval=000000c0 ret=00448980 0080:Call KERNEL32.SetThreadContext(000000f4,06bfea38) ret=00448a2b 0080:Call kernelbase.SetThreadContext(000000f4,06bfea38) ret=7bc9f8e4 0080:Call ntdll.NtSetContextThread(000000f4,06bfea38) ret=7b043b40 0080: set_thread_context( handle=00f4, context={cpu=x86,dr0=004490a2,dr1=004490a2,dr2=004490a2,dr3=004490a2,dr6=00000000,dr7=00000055} ) 0080: set_thread_context() = 0 { self=0 } 0080:Ret ntdll.NtSetContextThread() retval=00000000 ret=7b043b40 0080:Ret kernelbase.SetThreadContext() retval=00000001 ret=7bc9f8e4 0080:Ret KERNEL32.SetThreadContext() retval=00000001 ret=00448a2b 0080:Ret ucrtbase._beginthreadex() retval=000000f4 ret=00496955 0080:Call KERNEL32.ResumeThread(000000f4) ret=0049699a 0080:Call kernelbase.ResumeThread(000000f4) ret=7bc9f8e4 0080:Call ntdll.NtResumeThread(000000f4,06bfed74) ret=7b043b01 0080: resume_thread( handle=00f4 ) 0080: resume_thread() = 0 { count=1 } 0080:Ret ntdll.NtResumeThread() retval=00000000 ret=7b043b01 0080:Ret kernelbase.ResumeThread() retval=00000001 ret=7bc9f8e4 0080:Ret KERNEL32.ResumeThread() retval=00000001 ret=0049699a --- snip --- * https://www.winehq.org/pipermail/wine-devel/2020-April/165465.html * https://www.winehq.org/pipermail/wine-devel/2020-April/165466.html $ sha1sum LicenseSupportInstallerWin64.zip b22693fe4c29a60068c1f4c024232f9dc263b12b LicenseSupportInstallerWin64.zip $ du -sh LicenseSupportInstallerWin64.zip 282M LicenseSupportInstallerWin64.zip $ wine-5.7-58-g28ec279518 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 46377] New: The Bat!: weird behaviour of program icon on the KDE taskbar
by wine-bugs＠winehq.org 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=46377 Bug ID: 46377 Summary: The Bat!: weird behaviour of program icon on the KDE taskbar Product: Wine Version: 4.0-rc3 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: mywine(a)schiermeier-it.de Distribution: --- Created attachment 63123 --> https://bugs.winehq.org/attachment.cgi?id=63123 Weird icon changes The program icon shown on the taskbar changes during the program is active und also when it closes. Also the label on taskbar is changing. This is Debian buster with Plasma (KDE) desktop. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 49088] New: Acronis Storage Filter Management Driver 'fltsrv.sys' crashes on unimplemented function 'ntoskrnl.exe.IoIs32bitProcess'
by WineHQ Bugzilla 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=49088 Bug ID: 49088 Summary: Acronis Storage Filter Management Driver 'fltsrv.sys' crashes on unimplemented function 'ntoskrnl.exe.IoIs32bitProcess' Product: Wine Version: 5.7 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs(a)winehq.org Reporter: focht(a)gmx.net Distribution: --- Hello folks, continuation of bug 47623 Download: https://web.archive.org/web/20150518142343/http://dl2.acronis.com/u/ADD12_t… --- snip --- $ WINEDEBUG=+seh,+relay,+ntoskrnl,+winedevice,+module,+msi wine ./ADD12_trial_en-US.exe >>log.txt 2>&1 ... 0244:trace:ntoskrnl:load_driver loading driver L"C:\\windows\\system32\\drivers\\fltsrv.sys" 0244:Call KERNEL32.LoadLibraryW(000fc490 L"C:\\windows\\system32\\drivers\\fltsrv.sys") ret=00236878 ... 0244:trace:module:map_image mapped PE file at 0xe10000-0xe35000 0244:trace:module:map_image mapping section .text at 0xe11000 off 400 size 19200 virt 1914b flags 68000020 0244:trace:module:map_image clearing 0xe2a200 - 0xe2b000 0244:trace:module:map_image mapping section .rdata at 0xe2b000 off 19600 size 3800 virt 37ec flags 48000040 0244:trace:module:map_image clearing 0xe2e800 - 0xe2f000 0244:trace:module:map_image mapping section .data at 0xe2f000 off 1ce00 size 200 virt 28c flags c8000040 0244:trace:module:map_image clearing 0xe2f200 - 0xe30000 0244:trace:module:map_image mapping section .pdata at 0xe30000 off 1d000 size 1c00 virt 1a7c flags 48000040 0244:trace:module:map_image clearing 0xe31c00 - 0xe32000 0244:trace:module:map_image mapping section INIT at 0xe32000 off 1ec00 size e00 virt d06 flags e2000020 0244:trace:module:map_image clearing 0xe32e00 - 0xe33000 0244:trace:module:map_image mapping section .rsrc at 0xe33000 off 1fa00 size 600 virt 510 flags 42000040 0244:trace:module:map_image clearing 0xe33600 - 0xe34000 0244:trace:module:map_image mapping section .reloc at 0xe34000 off 20000 size a00 virt 834 flags 42000040 0244:trace:module:map_image clearing 0xe34a00 - 0xe35000 0244:trace:module:get_load_order looking for L"C:\\windows\\system32\\drivers\\fltsrv.sys" ... 0244:warn:module:import_dll No implementation for ntoskrnl.exe.IoIs32bitProcess imported from L"C:\\windows\\system32\\drivers\\fltsrv.sys", setting to 0xe40000 0244:trace:module:load_dll Loaded module L"\\??\\C:\\windows\\system32\\drivers\\fltsrv.sys" at 0xe10000 ... 0244:Ret KERNEL32.LoadLibraryW() retval=00e10000 ret=00236878 ... 0244:Call driver init 0000000000E32000 (obj=00000000007FE0F0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\fltsrv") ... 0244:Ret driver init 0000000000E32000 (obj=00000000007FE0F0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\fltsrv") retval=00000000 ... 0244:trace:ntoskrnl:init_driver init done for L"fltsrv" obj 00000000007FE0F0 0244:trace:ntoskrnl:init_driver - DriverInit = 0000000000E32000 0244:trace:ntoskrnl:init_driver - DriverStartIo = 0000000000000000 0244:trace:ntoskrnl:init_driver - DriverUnload = 0000000000E1C39C 0244:trace:ntoskrnl:init_driver - MajorFunction[0] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[1] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[2] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[3] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[4] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[5] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[6] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[7] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[8] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[9] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[10] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[11] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[12] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[13] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[14] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[15] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[16] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[17] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[18] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[19] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[20] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[21] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[22] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[23] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[24] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[25] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[26] = 0000000000E1BCF4 0244:trace:ntoskrnl:init_driver - MajorFunction[27] = 0000000000E1BCF4 ... 0224:Call KERNEL32.CreateFileA(01c96a00 "\\\\.\\Global\\StorageFilterControl",c0000000,00000003,00000000,00000003,00000000,00000000) ret=020426f3 ... 0224:Ret KERNEL32.CreateFileA() retval=000000ac ret=020426f3 ... 0248:Ret KERNEL32.WaitForMultipleObjectsEx() retval=00000001 ret=0022e9de 0224:Call KERNEL32.WaitForSingleObject(000000a8,ffffffff) ret=02041c42 0224:Call ntdll.NtWaitForMultipleObjects(00000001,0220f1e0,00000001,00000000,00000000) ret=7b04b037 0224:Ret ntdll.NtWaitForMultipleObjects() retval=00000000 ret=7b04b037 0224:Ret KERNEL32.WaitForSingleObject() retval=00000000 ret=02041c42 0224:Call KERNEL32.DeviceIoControl(000000ac,8021240b,0220f560,00000018,00000000,00000000,0220f598,00000000) ret=02042610 0248:trace:ntoskrnl:dispatch_create device 00000000007FE2B0 -> file 00000000007FE660 0248:trace:ntoskrnl:IoGetAttachedDevice (00000000007FE2B0) 0248:trace:ntoskrnl:IoAllocateIrp 1, 0 .... 0248:trace:ntoskrnl:IoInitializeIrp 00000000009AD2B0, 280, 1 ... 0248:Call ntoskrnl.exe.IoGetCurrentProcess() ret=00e1cb6c 0248:Ret ntoskrnl.exe.IoGetCurrentProcess() retval=000fc6c0 ret=00e1cb6c 0248:trace:seh:raise_exception code=c0000096 flags=0 addr=0xe1cb7f ip=e1cb7f tid=0248 0248:trace:seh:raise_exception rax=00000000000fc6c0 rbx=00000000009aca40 rcx=00007f76a7cf2ab7 rdx=000000000000004a 0248:trace:seh:raise_exception rsi=00000000009ad2b0 rdi=0000000000950390 rbp=0000000000000000 rsp=0000000000dff830 0248:trace:seh:raise_exception r8=0000000000000000 r9=0000000000dff032 r10=0000000000000000 r11=0000000000000000 0248:trace:seh:raise_exception r12=00000000009ad2b0 r13=0000000000dffb50 r14=00000000c0000017 r15=0000000000dffb58 0248:trace:seh:call_vectored_handlers calling handler at 0x22cde0 code=c0000096 flags=0 0248:trace:seh:call_vectored_handlers handler at 0x22cde0 returned ffffffff 0248:Call ntoskrnl.exe.IoGetRequestorProcess(009ad2b0) ret=00e1cbf9 0248:trace:ntoskrnl:IoGetRequestorProcess irp 00000000009AD2B0. 0248:Ret ntoskrnl.exe.IoGetRequestorProcess() retval=000fc6c0 ret=00e1cbf9 0248:trace:seh:raise_exception code=80000100 flags=1 addr=0x7bc6dfdc ip=7bc6dfdc tid=0248 0248:trace:seh:raise_exception info[0]=0000000000e324b6 0248:trace:seh:raise_exception info[1]=0000000000e3298e wine: Call from 0x7bc6dfdc to unimplemented function ntoskrnl.exe.IoIs32bitProcess, aborting --- snip --- --- snip --- $ winedump -j import .wine/drive_c/windows/system32/drivers/fltsrv.sys Contents of .wine/drive_c/windows/system32/drivers/fltsrv.sys: 160600 bytes Import Table size: 00000028 offset 0001ec90 ntoskrnl.exe Hint/Name Table: 000220B8 TimeDateStamp: 00000000 (Thu Jan 1 01:00:00 1970) ForwarderChain: 00000000 First thunk RVA: 0001B008 Thunk Ordn Name 0001b008 510 IoGetAttachedDeviceReference 0001b010 1162 ObfReferenceObject 0001b018 1160 ObfDereferenceObject 0001b020 532 IoGetLowerDeviceObject 0001b028 1994 _purecall 0001b030 674 IofCallDriver 0001b038 675 IofCompleteRequest 0001b040 521 IoGetDeviceObjectPointer 0001b048 1175 PoCallDriver 0001b050 712 KeBugCheckEx 0001b058 1484 RtlIntegerToUnicodeString 0001b060 1466 RtlInitUnicodeString 0001b068 1346 RtlCompareUnicodeString 0001b070 1361 RtlCopyUnicodeString 0001b078 1326 RtlAppendUnicodeStringToString 0001b080 583 IoRegisterPlugPlayNotification 0001b088 643 IoUnregisterPlugPlayNotification 0001b090 545 IoInitializeRemoveLockEx 0001b098 421 IoAcquireRemoveLockEx 0001b0a0 588 IoReleaseRemoveLockEx 0001b0a8 587 IoReleaseRemoveLockAndWaitEx 0001b0b0 903 KeWaitForSingleObject 0001b0b8 695 KeAcquireSpinLockAtDpcLevel 0001b0c0 697 KeAcquireSpinLockRaiseToDpc 0001b0c8 840 KeReleaseSpinLock 0001b0d0 842 KeReleaseSpinLockFromDpcLevel 0001b0d8 115 ExAllocatePoolWithTag 0001b0e0 139 ExFreePoolWithTag 0001b0e8 763 KeInitializeMutex 0001b0f0 837 KeReleaseMutex 0001b0f8 2087 vDbgPrintExWithPrefix 0001b100 67 DbgQueryDebugFilterState 0001b108 68 DbgSetDebugFilterState 0001b110 1454 RtlGetVersion 0001b118 677 KdDebuggerEnabled 0001b120 988 MmProbeAndLockPages 0001b128 1004 MmUnlockPages 0001b130 976 MmMapLockedPagesSpecifyCache 0001b138 430 IoAllocateMdl 0001b140 504 IoFreeMdl 0001b148 1981 __C_specific_handler 0001b150 1465 RtlInitString 0001b158 1461 RtlInitAnsiString 0001b160 1323 RtlAnsiStringToUnicodeString 0001b168 1611 RtlUnicodeStringToAnsiString 0001b170 1648 RtlxUnicodeStringToAnsiSize 0001b178 1646 RtlxAnsiStringToUnicodeSize 0001b180 1345 RtlCompareString 0001b188 1017 NlsMbOemCodePageTag 0001b190 495 IoEnumerateDeviceObjectList 0001b198 575 IoRegisterBootDriverReinitialization 0001b1a0 1150 ObReferenceObjectByName 0001b1a8 492 IoDriverObjectType 0001b1b0 472 IoCreateSymbolicLink 0001b1b8 485 IoDeleteSymbolicLink 0001b1c0 1810 ZwClose 0001b1c8 1880 ZwOpenSymbolicLinkObject 0001b1d0 1921 ZwQuerySymbolicLinkObject 0001b1d8 516 IoGetCurrentProcess 0001b1e0 550 IoIs32bitProcess 0001b1e8 1201 PoStartNextPowerIrp 0001b1f0 536 IoGetRequestorProcess 0001b1f8 443 IoBuildSynchronousFsdRequest 0001b200 462 IoCreateDevice 0001b208 483 IoDeleteDevice 0001b210 540 IoGetStackLimits 0001b218 1146 ObQueryNameString 0001b220 1226 PsGetCurrentThreadId 0001b228 1266 PsInitialSystemProcess 0001b230 438 IoAttachDeviceToDeviceStack 0001b238 522 IoGetDeviceProperty 0001b240 875 KeSetPriorityThread 0001b248 1213 PsCreateSystemThread 0001b250 1148 ObReferenceObjectByHandle 0001b258 1243 PsGetProcessId 0001b260 887 KeStackAttachProcess 0001b268 897 KeUnstackDetachProcess 0001b270 1865 ZwOpenDirectoryObject 0001b278 1900 ZwQueryDirectoryObject 0001b280 429 IoAllocateIrp 0001b288 440 IoBuildAsynchronousFsdRequest 0001b290 486 IoDetachDevice 0001b298 503 IoFreeIrp 0001b2a0 1868 ZwOpenFile 0001b2a8 1835 ZwDeviceIoControlFile 0001b2b0 1849 ZwFsControlFile 0001b2b8 1870 ZwOpenKey 0001b2c0 1923 ZwQueryValueKey 0001b2c8 941 MmBuildMdlForNonPagedPool 0001b2d0 441 IoBuildDeviceIoControlRequest 0001b2d8 433 IoAllocateWorkItem 0001b2e0 507 IoFreeWorkItem 0001b2e8 566 IoQueueWorkItem 0001b2f0 759 KeInitializeEvent 0001b2f8 869 KeSetEvent 0001b300 765 KeInitializeSemaphore 0001b308 839 KeReleaseSemaphore 0001b310 959 MmGetSystemRoutineAddress 0001b318 1205 ProbeForRead 0001b320 1206 ProbeForWrite Done dumping .wine/drive_c/windows/system32/drivers/fltsrv.sys --- snip --- $ sha1sum ADD12_trial_en-US.exe a5cd4fb2b457b86bc9a76b0fafd96ceec5608e6e ADD12_trial_en-US.exe $ du -sh ADD12_trial_en-US.exe 293M ADD12_trial_en-US.exe $ wine --version wine-5.7-177-gad1fad8a94 Regards -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 3

[Bug 42313] New: Process Hacker 2.39.124 crashes when attempting to inspect any process
by wine-bugs＠winehq.org 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=42313 Bug ID: 42313 Summary: Process Hacker 2.39.124 crashes when attempting to inspect any process Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: hakusdream(a)gmail.com Distribution: --- Created attachment 57053 --> https://bugs.winehq.org/attachment.cgi?id=57053 Relevant backtrace Release version of Process Hacker faults when attempting to inspect a process through its GUI. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 9

[Bug 48920] New: Can't quit Legends of Runeterra by closing virtual desktop window (stack overflow) (5.6 regression)
by WineHQ Bugzilla 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=48920 Bug ID: 48920 Summary: Can't quit Legends of Runeterra by closing virtual desktop window (stack overflow) (5.6 regression) Product: Wine Version: 5.6 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: aguertin+wine(a)aguertin.net Distribution: --- In wine-staging-5.5, when running Legends of Runeterra in a virtual desktop, you could close the game by clicking the X button on the virtual desktop's window. The game would close, and then shortly afterwards the virtual desktop would close. In wine-staging-5.6, when you click the X button on the virtual desktop, the game does not close, the virtual desktop does not close, and the following line is printed in terminal output: 0052:err:seh:setup_exception stack overflow 1600 bytes in thread 0052 eip 000000007bce1e27 esp 0000000000120fd0 stack 0x120000-0x121000-0x220000 (The thread number changes, but all other values seem to be consistent between attempts.) Quitting the game using the in-game menu works fine. Gentoo, x86_64 I'll work on getting a regression range -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 44216] New: Game crach
by wine-bugs＠winehq.org 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=44216 Bug ID: 44216 Summary: Game crach Product: Wine Version: 2.21 Hardware: x86 OS: Windows Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: otisdave(a)protonmail.com Created attachment 60000 --> https://bugs.winehq.org/attachment.cgi?id=60000 Trace log the game crash when loading the game The 4Th coming. I remember that I was able to run this game with an older version of wine, (around 1.3 and 1.5 if I remember correcly) Back in the day -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 12

[Bug 38495] New: Origin crashes when launching a game
by wine-bugs＠winehq.org 08 May '20

08 May '20

https://bugs.winehq.org/show_bug.cgi?id=38495 Bug ID: 38495 Summary: Origin crashes when launching a game Product: Wine Version: 1.7.41 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: maiktapwagner(a)aol.com Distribution: --- Created attachment 51342 --> https://bugs.winehq.org/attachment.cgi?id=51342 Origin backtrace - Slackware 14.1 - wine 1.7.41 Hello everyone, I compiled "wine 1.7.41" from source and bought the "Humble Bundle Origin 2" today. Registering games works fine but when I tried to launch the "Syndicate" game I ran into a crash. Backtrace is attached. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 17

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

wine-bugs May 2020