http://bugs.winehq.org/show_bug.cgi?id=34911
Bug #: 34911
Summary: WinLaunch 0.4.6.1 (OSX Style free Launcher) needs
windowscodecs.dll.IPropertyBag2_Write_Proxy
Product: Wine
Version: 1.7.6
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: windowscodecs
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: focht(a)gmx.net
…
[View More]Classification: Unclassified
Hello folks,
as the summary says...
Prerequisite: 'winetricks -q dotnet40'
If you switch themes/save settings the app displays a message box "exception
thrown".
Terminal output:
--- snip ---
wine: Call from 0x7b83a8bf to unimplemented function
windowscodecs.dll.IPropertyBag2_Write_Proxy, aborting
--- snip ---
'winetricks -q windowscodecs' works around.
$ sha1sum WinLaunch.zip
5d79fb1d160354a04548fc7bba1a78012800c59c WinLaunch.zip
$ du -sh WinLaunch.zip
20M WinLaunch.zip
$ wine --version
wine-1.7.6-225-g8c8d5a0
Regards
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
[View Less]
http://bugs.winehq.org/show_bug.cgi?id=10666
Summary: My Invoices and Estimates does not run and Installs
(with errors).
Product: Wine
Version: 0.9.49.
Platform: PC
URL: http://shop.avanquest.com/usa/
OS/Version: Linux
Status: UNCONFIRMED
Severity: enhancement
Priority: P2
Component: wine-winelib
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: dennis.…
[View More]dentremont(a)gmail.com
Created an attachment (id=9493)
--> (http://bugs.winehq.org/attachment.cgi?id=9493)
wine console output
My Invoice and Estimates 8.0 Trial version.
Software installs but fails to install fonts and produces the following type of
error. "Font TT0001M did not install". The code changes to TT0XXXX depending on
the font it's trying to install at the time.
When I try and run it, it just simply fails. I have attached the console
output.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching all bug changes.
[View Less]
http://bugs.winehq.org/show_bug.cgi?id=29344
Bug #: 29344
Summary: Multiple apps need Scripting.FileSystemObject
implementation (Microsoft Scripting Runtime)
Product: Wine
Version: 1.3.34
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: focht(a)gmx.net
…
[View More]Classification: Unclassified
Hello,
there are several apps/bugs that suffer from missing
"Scripting.FileSystemObject" implementation.
Unfortunately there is not a single bug that is not polluted by winetricks
wsh56/57 recipes where people kept on moving to other issues, completely
ignoring this one...
Creating this bug as starting point for "Scripting.FileSystemObject"
implementation to allow proper dependency tracking of other bugs.
Regards
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
[View Less]
http://bugs.winehq.org/show_bug.cgi?id=30131
Bug #: 30131
Summary: wPrime doesn't start
Product: Wine
Version: 1.4
Platform: x86
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: t.artem(a)mailcity.com
Classification: Unclassified
When I try to run it using native msvbm60.dll, these …
[View More]messages are being logged
in console:
fixme:ole:OleLoadPictureEx
(0xbae154,774,0,{7bf80980-bf32-101a-8bbb-00aa00300cab},x=0,y=0,f=0,0x32f914),
partially implemented.
fixme:ole:OLEPictureImpl_SaveAsFile (0x133800)->(0x1383d8, 0, (nil)), hacked
stub.
Welcome to wPrime Benchmark v2.08.
err:ole:CoGetClassObject class {0d43fe01-f093-11cf-8940-00a0c9054228} not
registered
err:ole:create_server class {0d43fe01-f093-11cf-8940-00a0c9054228} not
registered
err:ole:CoGetClassObject no class object {0d43fe01-f093-11cf-8940-00a0c9054228}
could be created for context 0x5
followed by a message box saying:
Run-time error '429':
ActiveX component can't create object
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=47603
Bug ID: 47603
Summary: Crash with error report
Product: Wine
Version: unspecified
Hardware: x86-64
OS: Linux
Status: UNCONFIRMED
Severity: critical
Priority: P2
Component: -unknown
Assignee: wine-bugs(a)winehq.org
Reporter: marko.tuovila(a)gmail.com
Distribution: ---
Created attachment 65028
--> https://…
[View More]bugs.winehq.org/attachment.cgi?id=65028
error report
Crash with error report when opening Note Shot Finance.exe
available from:
http://www.noteshot.fi/tiedostot/Note_Shot_Finance_SETUP.exe
Error does not come with Windows.
It's a VB6 app.
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
http://bugs.winehq.org/show_bug.cgi?id=36465
Bug ID: 36465
Summary: Age of Wushu: Lua script - Create device failed!
Product: Wine
Version: 1.7.18
Hardware: x86
OS: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: -unknown
Assignee: wine-bugs(a)winehq.org
Reporter: furyhamster(a)gmail.com
Created attachment 48516
--> http://bugs.winehq.org/…
[View More]attachment.cgi?id=48516
Terminal output from running the launcher.
Running the launcer of Age of Wushu opens up an window titled "lua script" and
in that window it states that "Create device failed!"
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=36486
Bug ID: 36486
Summary: Age of Wushu: frequent display of in-game "Don't speed
up!" dialog tip disrupts gameplay (Wine fails
kernel32.GetTickCount API entry hook check)
Product: Wine
Version: 1.7.19
Hardware: x86
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: kernel32
…
[View More]Assignee: wine-bugs(a)winehq.org
Reporter: focht(a)gmx.net
Hello folks,
during investigation of bug 36465 I found this goodie, deserving it's own bug
of course :)
Searching the net reveals similar reports for Windows and MAC:
http://www.ageofwushu.com/forums/viewtopic.php?f=29&t=7339http://www.ageofwushu.com/forums/viewtopic.php?f=30&t=14469http://portingteam.com/topic/9284-age-of-wushu-dont-speed-up-tip-spam/
This disguised message is in fact the result of a failed API hook check.
The vendor obviously doesn't want to go into technical details/reveal this, see
the support forums/site for answers to this problem.
Enter Wine and get the answers :)
One hint is contained in the game log file 'bin/trace.log'
With relay thunks emitted (+relay channel):
--- snip ---
...
[2014-05-18 22:01:13.573] Time Func Pos Begin QueryPerformanceCounter=54
QueryPerformanceFrequency=54 GetTickCount=54 timeGetTime=54 timeSetEvent=54
SetTimer=54
...
--- snip ---
without relay thunks:
--- snip ---
[2014-05-18 22:23:02.818] Time Func Pos Begin QueryPerformanceCounter=8d
QueryPerformanceFrequency=8d GetTickCount=55 timeGetTime=55 timeSetEvent=8d
SetTimer=55
--- snip ---
The hex codes are the first opcode byte of each API entry.
The protection code makes a snapshot of certain API entries on startup.
The entry bytes are stored for later comparison to detect dynamic hooking
(through dll injection for example).
--- snip ---
...
0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c3b1
0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c3b1
0056:Call KERNEL32.GetProcAddress(7b810000,11a8eed4 "QueryPerformanceCounter")
ret=1134c3c3
0056:Ret KERNEL32.GetProcAddress() retval=7b824afc ret=1134c3c3
0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c3d9
0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c3d9
0056:Call KERNEL32.GetProcAddress(7b810000,11a8eeb4
"QueryPerformanceFrequency") ret=1134c3e5
0056:Ret KERNEL32.GetProcAddress() retval=7b824b14 ret=1134c3e5
0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c3fb
0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c3fb
0056:Call KERNEL32.GetProcAddress(7b810000,11a8eea4 "GetTickCount")
ret=1134c407
0056:Ret KERNEL32.GetProcAddress() retval=7b82374c ret=1134c407
0056:Call KERNEL32.GetModuleHandleA(11a8ee98 "WINMM.dll") ret=1134c41d
0056:Ret KERNEL32.GetModuleHandleA() retval=f7220000 ret=1134c41d
0056:Call KERNEL32.GetProcAddress(f7220000,11a8ee88 "timeGetTime") ret=1134c429
0056:Ret KERNEL32.GetProcAddress() retval=7b82374c ret=1134c429
0056:Call KERNEL32.GetModuleHandleA(11a8ee98 "WINMM.dll") ret=1134c43f
0056:Ret KERNEL32.GetModuleHandleA() retval=f7220000 ret=1134c43f
0056:Call KERNEL32.GetProcAddress(f7220000,11a8ee78 "timeSetEvent")
ret=1134c44b
0056:Ret KERNEL32.GetProcAddress() retval=f7226d44 ret=1134c44b
0056:Call KERNEL32.GetModuleHandleA(11a8ee68 "USER32.dll") ret=1134c461
0056:Ret KERNEL32.GetModuleHandleA() retval=7eca0000 ret=1134c461
0056:Call KERNEL32.GetProcAddress(7eca0000,11a8ee5c "SetTimer") ret=1134c46d
0056:Ret KERNEL32.GetProcAddress() retval=7ecb0798 ret=1134c46d
...
--- snip ---
Runtime check of API entries every two seconds:
--- snip ---
...
0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c4f5
0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c4f5
0056:Call KERNEL32.GetProcAddress(7b810000,11a8eed4 "QueryPerformanceCounter")
ret=1134c505
0056:Ret KERNEL32.GetProcAddress() retval=7b824afc ret=1134c505
0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c2fb
0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c2fb
0056:Call KERNEL32.GetProcAddress(7b810000,11a8eeb4
"QueryPerformanceFrequency") ret=1134c30b
0056:Ret KERNEL32.GetProcAddress() retval=7b824b14 ret=1134c30b
0056:Call KERNEL32.GetModuleHandleA(11a8eef0 "kernel32.dll") ret=1134c2fb
0056:Ret KERNEL32.GetModuleHandleA() retval=7b810000 ret=1134c2fb
0056:Call KERNEL32.GetProcAddress(7b810000,11a8eea4 "GetTickCount")
ret=1134c30b
0056:Ret KERNEL32.GetProcAddress() retval=7b82374c ret=1134c30b
0056:Call KERNEL32.GetModuleHandleA(11a8ee98 "WINMM.dll") ret=1134c32b
0056:Ret KERNEL32.GetModuleHandleA() retval=f7220000 ret=1134c32b
0056:Call KERNEL32.GetProcAddress(f7220000,11a8ee88 "timeGetTime") ret=1134c33b
0056:Ret KERNEL32.GetProcAddress() retval=7b82374c ret=1134c33b
0056:Call KERNEL32.GetModuleHandleA(11a8ee98 "WINMM.dll") ret=1134c2fb
0056:Ret KERNEL32.GetModuleHandleA() retval=f7220000 ret=1134c2fb
0056:Call KERNEL32.GetProcAddress(f7220000,11a8ee78 "timeSetEvent")
ret=1134c30b
0056:Ret KERNEL32.GetProcAddress() retval=f7226d44 ret=1134c30b
0056:Call KERNEL32.GetModuleHandleA(11a8ee68 "USER32.dll") ret=1134c2fb
0056:Ret KERNEL32.GetModuleHandleA() retval=7eca0000 ret=1134c2fb
0056:Call KERNEL32.GetProcAddress(7eca0000,11a8ee5c "SetTimer") ret=1134c30b
0056:Ret KERNEL32.GetProcAddress() retval=7ecb0798 ret=1134c30b
...
--- snip ---
Following is the list of API functions and their opcode checks.
call/jmp opcode bytes are treated as hook.
--- snip ---
kernel32.dll!QueryPerformanceCounter
-> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot>
kernel32.dll!QueryPerformanceFrequency
-> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot>
kernel32.dll!GetTickCount
-> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot>
WINMM.dll!timeGetTime
-> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot> | [7]=0xE8 | [7]=0xE9 |
[7]=0xFF
WINMM.dll!timeSetEvent
-> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot>
user32.dll!SetTimer
-> [0]=0xE8 | [0]=0xE9 | [0]=0xFF | ![0]=<snapshot>
--- snip ---
The 'WINMM.dll!timeGetTime' entry point gets a special treatment and this the
problem.
Wine 'winmm.spec'
--- snip ---
@ stdcall timeGetTime() kernel32.GetTickCount
--- snip ---
Forwarded. Dumping the target with Winedbg gives:
--- snip ---
Wine-dbg>x/10b GetTickCount
0x7b8480d9 GetTickCount: 55 89 e5 53 83 e4 f0 e8 ab 75
--- snip ---
Disassembly:
--- snip ---
7B8480D9 55 PUSH EBP
7B8480DA 89E5 MOV EBP,ESP
7B8480DC 53 PUSH EBX
7B8480DD 83E4 F0 AND ESP,FFFFFFF0
7B8480E0 E8 AB75FDFF CALL KERNEL32.__x86.get_pc_thunk.bx
7B8480E5 81C3 1B2F0700 ADD EBX,72F1B
7B8480EB E8 72FFFFFF CALL KERNEL32.GetTickCount64
7B8480F0 8B5D FC MOV EBX,DWORD PTR SS:[EBP-4]
7B8480F3 C9 LEAVE
7B8480F4 C3 RETN
--- snip ---
*eeek* .. 'entry[7]' has indeed value 0xE8 hence the check fails.
The PIC code (setup of PIC register) in function prolog causes the harm here.
If you avoid the call opcode at 'entry[7]' everything is fine (for example
making this entry hotpatchable, inline GetTickCount64, use wrapper).
I already tested this. Wine code is no longer (mis)detected as hook and the
game runs fine without any "Speedup" spam.
$ sha1sum AgeofWushu_download.exe
a7101c50ce8deb33008da4ce044fca5e3add721d AgeofWushu_download.exe
$ du -sh AgeofWushu_download.exe
1.9M AgeofWushu_download.exe
$ wine --version
wine-1.7.19
Regards
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
http://bugs.winehq.org/show_bug.cgi?id=34403
Bug #: 34403
Summary: AVP Classic WinRT/ARM port needs xinput1_4.dll
Product: Wine
Version: 1.7.1
Platform: arm
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: focht(a)gmx.net
Classification: Unclassified
Hello folks,
as the summary says...
--- …
[View More]snip ---
linaro@linaro-ubuntu-desktop:~/wine-apps/avpclassic$ ll
total 10744
drwxr-xr-x 2 linaro linaro 4096 Aug 31 15:05 ./
drwxrwxr-x 51 linaro linaro 4096 Aug 31 15:05 ../
-rw-rw-r-- 1 linaro linaro 37736 Jul 25 2012 D3D11ProxyDriver.dll
-rw-rw-r-- 1 linaro linaro 2840416 Aug 20 2012 D3DCompiler_Test.dll
-rw-rw-r-- 1 linaro linaro 1287248 Aug 21 08:05 MyAvP.exe
-rw-r--r-- 1 linaro linaro 2675765 Aug 31 15:05 avp_classic_arm.7z
-rw-rw-r-- 1 linaro linaro 333672 Jul 25 2012 d3dref9.dll
-rw-rw-r-- 1 linaro linaro 1742184 Jul 25 2012 d3dx9d.dll
-rw-rw-r-- 1 linaro linaro 71760 Aug 21 08:05 libbinkdec.dll
-rw-rw-r-- 1 linaro linaro 19536 Aug 21 08:05 libogg.dll
-rw-rw-r-- 1 linaro linaro 39504 Aug 21 08:05 libsmackerdec.dll
-rw-rw-r-- 1 linaro linaro 163920 Aug 21 08:05 libtheora.dll
-rw-rw-r-- 1 linaro linaro 1611856 Aug 21 08:05 libvorbis.dll
-rw-rw-r-- 1 linaro linaro 32848 Aug 21 08:05 libvorbisfile.dll
-rw-rw-r-- 1 linaro linaro 105316 Nov 10 2001 non-gold_english.txt
...
linaro@linaro-ubuntu-desktop:~/wine-apps/avpclassic$ wine ./MyAvP.exe
err:module:import_dll Library XINPUT1_4.dll (which is needed by
L"Z:\\home\\linaro\\wine-apps\\avpclassic\\MyAvP.exe") not found
err:module:LdrInitializeThunk Main exe initialization for
L"Z:\\home\\linaro\\wine-apps\\avpclassic\\MyAvP.exe" failed, status c0000135
--- snip ---
More info on XInput versions here:
http://msdn.microsoft.com/en-us/library/windows/desktop/hh405051%28v=vs.85%…
--- quote ---
XInput 1.4 ships today as a system component in Windows 8 as XINPUT1_4.DLL. It
is available “inbox” and does not require redistribution with an application.
The Windows Software Development Kit (SDK) contains the header and import
library for statically linking against XINPUT1_4.DLL. To download the Windows 8
SDK, see Downloads for developing desktop apps.
XInput 1.4 has these primary advantages over other versions of XInput:
* This is the only version that can be used in C++/DirectX Windows Store apps.
* The new XInputGetAudioDeviceIds function provides an audio device ID string
that you can use to open an XAudio2 mastering voice or audio device for a
headset attached to an Xbox 360 common controller. The
XInputGetDSoundAudioDeviceGuids function is not available in this version.
* Provides improved device capabilities reporting including
XINPUT_CAPS_WIRELESS, XINPUT_CAPS_FFB_SUPPORTED, XINPUT_CAPS_PMD_SUPPORTED, and
XINPUT_CAPS_NO_NAVIGATION flags and more accurate reporting of
XINPUT_CAPS_VOICE_SUPPORTED. These flags are combined in the Flags member of
the XINPUT_CAPABILITIES structure. The XInputGetCapabilities function returns
XINPUT_CAPABILITIES.
--- quote ---
Regards
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=36731
Bug ID: 36731
Summary: Runes of Magic 'ClientUpdater.exe' crashes after a
number of update cycles (mshtml environment setup
contains stack buffer overflow)
Product: Wine
Version: 1.7.20
Hardware: x86
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mshtml
Assignee: wine-bugs(…
[View More]a)winehq.org
Reporter: focht(a)gmx.net
Hello folks,
found during investigation of 'Runes of Magic' client updater.
There is a crash after a number of update cycles.
Unfortunately it's not easily traceable as it requires large downloads and many
client restarts (= hours) to reach the crash point.
I started the updater with a few debug channels (= reduced noise) which still
allowed me to do post-mortem analysis.
The launcher restarts itself after each update cycle.
--- snip ---
$ pwd
/home/focht/.wine/drive_c/Program Files/Runes of Magic
$ WINEDEBUG=+tid,+seh,+loaddll,+process,+mshtml wine ./launcher.exe
...
<hours, multiple updater restarts>
...
004f:trace:loaddll:load_builtin_dll Loaded L"C:\\windows\\system32\\mshtml.dll"
at 0x7c090000: builtin
004f:trace:mshtml:DllGetClassObject (CLSID_HTMLDocument
{00000001-0000-0000-c000-000000000046} 0x3392a8)
004f:trace:mshtml:ClassFactory_AddRef (0x1c2c80) ref = 1
004f:trace:mshtml:HTMLDocument_Create ((nil) IID_IUnknown 0x1c19d4)
004f:trace:mshtml:load_gecko ()
004f:trace:mshtml:check_version "Wine Gecko 2.24"
004f:trace:mshtml:load_xul
(L"C:\\windows\\system32\\gecko\\2.24\\wine_gecko\\\\xul.dll")
004f:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7c130001
ip=7c130001 tid=004f
004f:trace:seh:raise_exception info[0]=00000001
004f:trace:seh:raise_exception info[1]=8d43ade4
004f:trace:seh:raise_exception eax=00000001 ebx=006b0063 ecx=003389a0
edx=7bcda204 esi=00339330 edi=001c2de8
004f:trace:seh:raise_exception ebp=005c0070 esp=00338c00 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00010212
004f:trace:seh:call_stack_handlers calling handler at 0x4a97b0 code=c0000005
flags=0
004f:trace:seh:call_stack_handlers handler at 0x4a97b0 returned 1
004f:trace:seh:call_stack_handlers calling handler at 0x7bc9ecf7 code=c0000005
flags=0
wine: Unhandled page fault on write access to 0x8d43ade4 at address 0x7c130001
(thread 004f), starting debugger...
--- snip ---
I looked at the crash site and noticed it being in the middle of opcode
sequence.
--- snip ---
7C130000 45 INC EBP
7C130001 0889 4424108D OR BYTE PTR DS:[ECX+8D102444],CL
7C130007 8313 B5 ADC DWORD PTR DS:[EBX],-4B
7C13000A FA CLI
--- snip ---
Decoded with proper opcode start addresses:
--- snip ---
7C12FFFF 8B45 08 MOV EAX,DWORD PTR SS:[EBP+8]
7C130002 894424 10 MOV DWORD PTR SS:[ESP+10],EAX
7C130006 8D83 13B5FAFF LEA EAX,[EBX+FFFAB513]
--- snip ---
Partial stack dump with 'esp' = 0x00338c00 from exception context:
--- snip ---
...
00338BA8 C0000005
00338BAC 00000000
00338BB0 00000000
00338BB4 7C130001
00338BB8 00000002
00338BBC 00000001
00338BC0 8D43ADE4 äC
00338BC4 00650074 t e
00338BC8 0033006D m 3
00338BCC 005C0032 2 \
00338BD0 00650067 g e
00338BD4 006B0063 c k
00338BD8 005C006F o \
00338BDC 002E0032 2 .
00338BE0 00340032 2 4
00338BE4 0077005C \ w
00338BE8 006E0069 i n
00338BEC 00000005
00338BF0 00650067 g e
00338BF4 006B0063 c k
00338BF8 005C006F o \
00338BFC 7C130000
00338C00 00338F74 ; UNICODE "C:\windows\system32\gecko\2.24\wine_gecko\"
00338C04 7C1FF480
00338C08 7C19E234 ; ASCII "load_xul"
00338C0C 7C19CF48 ; ASCII "(%s)"
00338C10 7BCEC8C1 ; ASCII
"L"C:\\windows\\system32\\gecko\\2.24\\wine_gecko\\\\xul.dll""
00338C14 7C19D4E8 ; ASCII "Wine Gecko 2.24"
00338C18 7C19E250 ; ASCII "check_version"
00338C1C 7C19D4C0 ; ASCII "%s"
00338C20 7BCEC8AF ; ASCII ""Wine Gecko 2.24""
...
--- snip ---
Yes, looks pretty much like a stack buffer overflow.
A string buffer overwrote 'ebp', 'ebx' values (register save on stack for
'__x86_get_pc_thunk_bx') and parts of the return address.
The NULL terminator cancelled out the lower 16 bits of the return address.
The culprit: 'load_xul' -> 'set_environment'
Source:
http://source.winehq.org/git/wine.git/blob/0be56d27d2d4b22367313fa4c6f1e658…
--- snip ---
439 static void set_environment(LPCWSTR gre_path)
440 {
441 WCHAR path_env[MAX_PATH], buf[20];
442 int len, debug_level = 0;
443
444 static const WCHAR pathW[] = {'P','A','T','H',0};
445 static const WCHAR warnW[] = {'w','a','r','n',0};
446 static const WCHAR xpcom_debug_breakW[] =
447
{'X','P','C','O','M','_','D','E','B','U','G','_','B','R','E','A','K',0};
448 static const WCHAR nspr_log_modulesW[] =
449 {'N','S','P','R','_','L','O','G','_','M','O','D','U','L','E','S',0};
450 static const WCHAR debug_formatW[] = {'a','l','l',':','%','d',0};
451
452 /* We have to modify PATH as XPCOM loads other DLLs from this
directory. */
453 GetEnvironmentVariableW(pathW, path_env,
sizeof(path_env)/sizeof(WCHAR));
454 len = strlenW(path_env);
455 path_env[len++] = ';';
456 strcpyW(path_env+len, gre_path);
457 SetEnvironmentVariableW(pathW, path_env);
458
459 SetEnvironmentVariableW(xpcom_debug_breakW, warnW);
460
461 if(TRACE_ON(gecko))
462 debug_level = 5;
463 else if(WARN_ON(gecko))
464 debug_level = 3;
465 else if(ERR_ON(gecko))
466 debug_level = 2;
467
468 sprintfW(buf, debug_formatW, debug_level);
469 SetEnvironmentVariableW(nspr_log_modulesW, buf);
470 }
--- snip ---
'path_env' must have overflowed ... but how?
I used a JIT debugger to examine the process environment block at the time of
the crash since 'GetEnvironmentVariableW' reads from
'NtCurrentTeb()->Peb->ProcessParameters->Environment'.
--- snip ----
Address UNICODE dump
...
00231EC0 m32\cmd.exe.PATH
00231EE0 =C:\windows\syst
00231F00 em32;C:\windows;
00231F20 C:\windows\syste
00231F40 m32\wbem;C:\wind
00231F60 ows\system32\gec
00231F80 ko\2.24\wine_gec
00231FA0 ko\;C:\windows\s
00231FC0 ystem32\gecko\2.
00231FE0 24\wine_gecko\;C
00232000 :\windows\system
00232020 32\gecko\2.24\wi
00232040 ne_gecko\;C:\win
00232060 dows\system32\ge
00232080 cko\2.24\wine_ge
002320A0 cko\;C:\windows\
002320C0 system32\gecko\2
002320E0 .24\wine_gecko\.
00232100 TEMP=C:\users\fo
00232120 cht\Temp.TMP=C:\
00232140 users\focht\Temp
00232160 .windir=C:\windo
00232180 ws.ALLUSERSPROFI
002321A0 LE=C:\users\Publ
002321C0 ic.APPDATA=C:\us
...
--- snip ---
At the time 'gre_path' path was appended, the string from 'PATH' environment
variable had already grown near 'MAX_PATH' (260 characters) buffer limit.
'PATH' is of course not limited to 'MAX_PATH' since it contains a list of
paths.
A better option would be to query with 'GetEnvironmentVariableW( value, NULL,
0)' first and allocate the needed buffer from heap, including length for
'gre_path'.
Even with these things corrected there is still a general problem: at one point
it will overflow/being blocked from appending to 'PATH'.
Each newly created updater process inherits the process environment from parent
(client updater restarts itself each time).
A more sophisticated thing to do would be to search for existing value and not
append if already present.
Wine Mono 'mscoree' component has a similar potential stack buffer overflow:
http://source.winehq.org/git/wine.git/blob/8cdcf470016f0655dfc8810f9d4d2f2d…
Regards
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=49999
Bug ID: 49999
Summary: It should be possible to submit results for all
versions of the current stable branch
Product: WineHQ Apps Database
Version: unspecified
Hardware: x86-64
OS: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: appdb-unknown
Assignee: wine-bugs(a)winehq.org
…
[View More]Reporter: elk_aide(a)startmail.com
Distribution: ---
Lots of Linux Distributions and FreeBSD only ship the stable releases of wine
in their repositories. They often stick to the first minor release (In Debian
and FreeBSD this currently is 5.0 for example).
I think it should be possible to submit tests with the distribution's own most
recent wine package, as that probably is the main way wine is aquired.
Therefore the AppDB list should include the "outdated" minor releases of the
current stable branch for selection aswell.
This is currently not the case (only 5.0.2 is available for selection
currently).
Cheers!
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=47867
Bug ID: 47867
Summary: comctl32:animate: create_animate() fails in Japanese
on Windows 10 1809
Product: Wine
Version: 4.17
Hardware: x86
OS: Windows
Status: NEW
Severity: normal
Priority: P2
Component: comctl32
Assignee: wine-bugs(a)winehq.org
Reporter: fgouget(a)codeweavers.com
comctl32:animate …
[View More]has the following failures on the new w1064v1809_ja VM
(Windows 10 1809 + Japanese locale):
animate.c:106: Test failed: GetUpdateRect: There should be a region that needs
to be updated
animate.c:106: Test failed: GetUpdateRect: There should be a region that needs
to be updated
Interestingly this does not fail on the fg-win7u64-1spie9-ja VM so this is
specific to the Japanese + Windows 10 combination.
The test was introduced in this commit:
commit bc357819296594aca300fdf30bb0cda46e9f0be0
Author: Bruno Jesus <00cpxxx(a)gmail.com>
AuthorDate: Fri Mar 18 14:29:48 2016 +0530
Commit: Alexandre Julliard <julliard(a)winehq.org>
CommitDate: Tue Mar 22 00:36:30 2016 +0900
comctl32/tests: Add initial tests for the animation control.
Signed-off-by: Bruno Jesus <00cpxxx(a)gmail.com>
Signed-off-by: Alexandre Julliard <julliard(a)winehq.org>
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=51899
Bug ID: 51899
Summary: 16-bit Collins Dictionary has black background.
Product: Wine
Version: 6.19
Hardware: x86-64
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: gdi32
Assignee: wine-bugs(a)winehq.org
Reporter: zzhang(a)codeweavers.com
Distribution: ---
This is a split from bug 51802. Bisect …
[View More]points to
6f095cea53787f03a159f0464b9881ace3724e6b is the first bad commit
commit 6f095cea53787f03a159f0464b9881ace3724e6b
Author: Jacek Caban <jacek(a)codeweavers.com>
Date: Tue Aug 3 12:56:49 2021 +0200
gdi32: Use NtGdiPatBlt for PatBlt implementation.
Signed-off-by: Jacek Caban <jacek(a)codeweavers.com>
Signed-off-by: Huw Davies <huw(a)codeweavers.com>
Signed-off-by: Alexandre Julliard <julliard(a)winehq.org>
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
http://bugs.winehq.org/show_bug.cgi?id=31358
Bug #: 31358
Summary: Bobcad v25 hangs on startup
Product: Wine
Version: 1.5.9
Platform: x86
OS/Version: Linux
Status: NEW
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: dank(a)kegel.com
Classification: Unclassified
Tried installing free trial
…
[View More]13f91536f3a429ccb65b45b7bf72adb927c7d294 BobCAD_V25_Demo_32bit.exe
from
http://www.bobcad.com/products/cad
Seemed to install fine, and put up a UI, but the main window of the
UI was never drawn, and the UI was nonresponsive.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
[View Less]
http://bugs.winehq.org/show_bug.cgi?id=24664
Summary: The letter 'R' is not visible in Shapes On A Plane
Product: Wine
Version: 1.3.4
Platform: x86
URL: https://www.digipen.edu/?id=1170&proj=433
OS/Version: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: -unknown
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: andrew.millington(a)gmail.com
Nearly …
[View More]all the letter 'R' are not visible in text such as the options screen.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=40111
Bug ID: 40111
Summary: mpr:mpr regression
Product: Wine
Version: 1.9.3
Hardware: x86
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: -unknown
Assignee: wine-bugs(a)winehq.org
Reporter: fgouget(a)codeweavers.com
Distribution: ---
Since the commit below, all Windows XP machines (even non-VMs) except …
[View More]the
TestBot have a couple of systematic failures. It's not clear why the TestBot VM
does not get a failure. It could be because it's the only one to be a Pro
version, or because of a subtle network configuration difference.
Failure:
mpr.c:283: Test failed: Unexpected return: 53
mpr.c:303: Test failed: Unexpected return: 53
mpr:mpr results on test.winehq.org:
https://test.winehq.org/data/tests/mpr:mpr.html
commit d2ce22ba239d6ea4955e58784cf3e912920bb93b
Author: Pierre Schweitzer <pierre(a)reactos.org>
Date: Sun Jan 31 22:17:27 2016 +0100
mpr/tests: Add tests for WNetUseConnectionA().
Signed-off-by: Pierre Schweitzer <pierre(a)reactos.org>
Signed-off-by: Alexandre Julliard <julliard(a)winehq.org>
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=47938
Bug ID: 47938
Summary: kernel32:heap fails on fg-win7u64-* since 9 September
2019
Product: Wine
Version: 4.17
Hardware: x86
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: kernel32
Assignee: wine-bugs(a)winehq.org
Reporter: z.figura12(a)gmail.com
Distribution: ---
<http://…
[View More]test.winehq.org/data/tests/kernel32:heap.html>
Very consistently we see this:
heap.c:1209: Test failed: GetPhysicallyInstalledSystemMemory unexpectedly
failed
heap.c:1210: Test failed: expected total_memory != 0
heap.c:1215: Test failed: expected total_memory >= memstatus.ullTotalPhys /
1024
I'm more than a little inclined to blame the virtualization software.
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
http://bugs.winehq.org/show_bug.cgi?id=20987
Summary: msi tests can't be run in parallel
Product: Wine
Version: 1.1.34
Platform: PC
OS/Version: Linux
Status: NEW
Severity: enhancement
Priority: P2
Component: testcases
AssignedTo: wine-bugs(a)winehq.org
ReportedBy: dank(a)kegel.com
We spend an awful lot of time waiting for tests to finish.
It'd be awesome if "make -j 100 test" worked.
…
[View More]As a first step, let's make the msi tests work in parallel.
"make -j100" in the msi directory explodes at the moment
because many of the tests use the same filenames.
--
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=48047
Bug ID: 48047
Summary: urlmon:protocol - The https test fails on XP since the
winehq.org upgrade
Product: Wine
Version: unspecified
Hardware: x86
OS: Windows
Status: NEW
Severity: normal
Priority: P2
Component: urlmon
Assignee: wine-bugs(a)winehq.org
Reporter: fgouget(a)codeweavers.com
Created …
[View More]attachment 65588
--> https://bugs.winehq.org/attachment.cgi?id=65588
Screen capture of test.winehq showing the failures starting on Sep 09
The https protocol test in urlmon:protocol has been failing on Windows XP and
2003 since the winehq.org upgrade:
protocol.c:3591: Testing https protocol (from urlmon)...
protocol.c:1190: Test failed: hrResult = 800c0008, expected: 00000000
protocol.c:3435: Test failed: wait timed out
protocol.c:3437: Test failed: expected Switch
urlmon:protocol:0444 done (258) in 120s
Test failed: timed out
Note: 800c0008 is INET_E_DOWNLOAD_FAILURE.
See https://test.winehq.org/data/tests/urlmon:protocol.html
On Windows XP trying to open https://www.winehq.org in Internet Explorer
(8.0.6001.18702) fails with no clear reason. Many other sites fail in the same
way while trying to access google.com clearly indicates there is a certificate
problem and asks whether to trust it anyway. As is Windows XP is unusable to
surf the web. It's still possible to install Firefox 52.9.0 and then accessing
https://www.winehq.org works. But then Firefox uses its own rot certificates
and may not even use the Windows libraries for encryption.
Windows Update offers no meaningful update (only Microsoft Security Essentials
and Windows Live Essentials).
So it's possible Windows XP and 2003 are either missing the required root
certificates or do not support support whichever standard is used in the
current certificates. In that case this test should be skipped on these
platforms.
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]
https://bugs.winehq.org/show_bug.cgi?id=51084
Bug ID: 51084
Summary: Failed to load … win32k.sys, not working at all on
Fedora 34
Product: Wine
Version: 6.7
Hardware: x86-64
OS: Linux
Status: UNCONFIRMED
Severity: normal
Priority: P2
Component: -unknown
Assignee: wine-bugs(a)winehq.org
Reporter: andy(a)madspunky.net
Distribution: ---
I …
[View More]don't know why the official Wine documentation doesn't even mention that
there are official Fedora packages, or respectively why installing the Wine
repository would be preferable. Anyway, it's not available for F34 yet.
So I installed wine `dnf install wine` and tried `winecfg`, but it fails:
```
002c:fixme:winediag:LdrInitializeThunk wine-staging is a testing version
containing experimental patches.
002c:fixme:winediag:LdrInitializeThunk Please mention your exact version when
filing bug reports on winehq.org.
0058:err:winedevice:ServiceMain Failed to load
L"C:\\windows\\system32\\win32k.sys"
0034:fixme:font:get_name_record_codepage encoding 20 not handled, platform 1.
005c:fixme:font:get_name_record_codepage encoding 20 not handled, platform 1.
0064:fixme:font:get_name_record_codepage encoding 20 not handled, platform 1.
006c:fixme:font:get_name_record_codepage encoding 20 not handled, platform 1.
00a4:err:winedevice:ServiceMain Failed to load
L"C:\\windows\\system32\\win32k.sys"
00a0:fixme:font:get_name_record_codepage encoding 20 not handled, platform 1.
002c:fixme:font:get_name_record_codepage encoding 20 not handled, platform 1.
wine: could not load kernel32.dll, status c0000135
```
wine-6.7 (Staging)
Thanks
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
[View Less]