wine-bugs July 2024

wine-bugs@winehq.org

1 participants
2349 discussions

[Bug 21483] New: changed token security breaks .NET Framework SDK tools
by wine-bugs＠winehq.org 16 Nov '25

16 Nov '25

http://bugs.winehq.org/show_bug.cgi?id=21483 Summary: changed token security breaks .NET Framework SDK tools Product: Wine Version: 1.1.33 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: wineserver AssignedTo: wine-bugs(a)winehq.org ReportedBy: focht(a)gmx.net Hello, some of Microsoft's tools from .NET Framework SDKs - namely managed debuggers (CLR) - stopped working after 1.1.33+ release. They seem to be very picky about object security. I bisected this one but technically this isn't a regression because Rob's token patches made Wine more correct - exposing another object security problem. --- snip --- $ git bisect bad bd56916f90e68632993a7275fe30a55a7efa222a is the first bad commit commit bd56916f90e68632993a7275fe30a55a7efa222a Author: Rob Shearman <robertshearman(a)gmail.com> Date: Mon Nov 16 20:11:06 2009 +0000 server: Extend get_token_user server call to also retrieve SIDs for the token's owner or primary group. :040000 040000 829f1543526675ae48f6fde8c8cedff74fd51797 7a77653291795c209ec529dd6660d52fc922a58c M dlls :040000 040000 57735b53b28db37ac4627dc009000e225175164a 4dcc1388cb136e559c06106632c08e8e610fe557 M include :040000 040000 4e83227cb0133c7e288a1e930461d4efe1130882 cf1c3539d6b3c91c854fa2b9b672f68ea601f639 M server --- snip --- "old" behaviour, where default process token was like this: Token owner -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) NtQueryInformationToken had the token owner info hard-coded (to SECURITY_INTERACTIVE_RID) while Rob's patches moved the actual query to wineserver. --- Basically the app code that verifies the security of created objects goes like this: - get SD from created object (event) handle -> GetKernelObjectSecurity( OWNER_SECURITY_INFORMATION | DACL_SECURITY_INFORMATION) - get owner SID of SD -> GetSecurityDescriptorOwner() -> SID1 - get DACL of SD -> GetSecurityDescriptorDacl() - for each ACE from DACL (GetAce) -> SID2: check ACE SID against SD owner SID -> EqualSid( SID1, SID2) - match -> profit! not -> fail! --- snip --- ... 0023: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0014,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}},name=L"Global\\CorDBIPCSetupSyncEvent_36"} ) 0023: create_event() = 0 { handle=01c4 } ... 0025:trace:advapi:GetKernelObjectSecurity (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025:trace:ntdll:NtQuerySecurityObject (0xc4,0x00000005,0x14ef40,0x00000050,0x33f7e8) 0025: get_security_object( handle=00c4, security_info=00000005 ) 0025: get_security_object() = 0 { sd_len=00000050, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-4}}}} } 0025:trace:ntdll:RtlGetDaclSecurityDescriptor (0x14ef40,0x33f7c3,0x33f7ec,0x33f7c2) 0025:trace:ntdll:RtlGetAce (0x14ef60,0,0x33f7f0) 0025:trace:ntdll:RtlLengthSid sid=0x14ef54 0025: open_event( access=001f0003, attributes=00000002, rootdir=0034, name=L"Global\\CorDBIPCLSEventAvailName_36" ) 0025: open_event() = 0 { handle=00c8 } ... --- snip --- "new" behaviour, where default process token is now like this: Token owner -> S-1-5-32-544 "BUILTIN\Administrators" (alias) Token user -> S-1-5-4 "NT AUTHORITY\INTERACTIVE" (well-known group) Token primary group -> S-1-5-32-544 "BUILTIN\Administrators" (alias) --- snip --- ... 0024:trace:ntdll:NtOpenProcessTokenEx (0x1b0,0x00000008,0x00000000,0x318e6d0) 0024: open_token( handle=01b0, access=00000008, attributes=00000000, flags=00000000 ) 0024: open_token() = 0 { token=01b4 } ... 0024:trace:advapi:GetTokenInformation (0x1b4, TokenOwner, 0x184130, 20, 0x318e6e0): 0024:trace:ntdll:NtQueryInformationToken (0x1b4,4,0x184130,20,0x318e6e0) 0024: get_token_sid( handle=01b4, which_sid=00000004 ) 0024: get_token_sid() = 0 { sid_len=16, sid={S-1-5-32-544} } ... 0024: create_event( access=001f0003, attributes=00000080, manual_reset=1, initial_state=0, objattr={rootdir=0018,sd={control=00000004,owner=<not present>,group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}},name=L"Global\\CorDBIPCSetupSyncEvent_37"} ) 0024: create_event() = 0 { handle=01c8 } ... 0026:trace:advapi:GetKernelObjectSecurity (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026:trace:ntdll:NtQuerySecurityObject (0xc8,0x00000005,(nil),0x00000000,0x33f7e8) 0026: get_security_object( handle=00c8, security_info=00000005 ) 0026: get_security_object() = 0 { sd_len=00000058, sd={control=00000037,owner={S-1-5-4},group=<not present>,sacl={},dacl={{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}},{AceType=ACCESS_ALLOWED_ACE_TYPE,Mask=e01f001f,AceFlags=0,Sid={S-1-5-32-544}}}} } ... --- snip --- Using the "admins" sid (alias) as token user in server/token.c:token_create_admin() instead of current "interactive" sid fixes the problem. Though I don't know if this is the right thing to do. I hope I provided enough infos and let Alexandre handle it ;-) To get detailed token infos/dumps you might be interested in this little console app, from cygwin's Corinna Vinschen ;-) http://www.mail-archive.com/cygwin@cygwin.com/msg71800.html It might provide useful information when run under different security principals. Regards -- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

2 19

[Bug 45000] New: Ziphead by CNCD & Fairlight fails with GL_OUT_OF_MEMORY
by wine-bugs＠winehq.org 16 Nov '25

16 Nov '25

https://bugs.winehq.org/show_bug.cgi?id=45000 Bug ID: 45000 Summary: Ziphead by CNCD & Fairlight fails with GL_OUT_OF_MEMORY Product: Wine Version: 3.6 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: arabek+wine(a)gmail.com Distribution: --- Created attachment 61129 --> https://bugs.winehq.org/attachment.cgi?id=61129 wine-staging ziphead.log (gzipped) A demoscene demo from 2015 fails to show any kind of output. I'm attaching the log. Expected result: running as under native Windows. Wine version: 3.6 & 3.6-staging (basically the same output, attached is the log from staging). -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 6

[Bug 44899] New: Access violation at address 000406686 read of address FFFFFFFFFE8
by wine-bugs＠winehq.org 16 Nov '25

16 Nov '25

https://bugs.winehq.org/show_bug.cgi?id=44899 Bug ID: 44899 Summary: Access violation at address 000406686 read of address FFFFFFFFFE8 Product: Wine Version: 3.2 Hardware: x86 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: stevedonato(a)gmail.com Distribution: --- Created attachment 60979 --> https://bugs.winehq.org/attachment.cgi?id=60979 the Program exe attempte to install (PowerISO7-x64.exe) when I got; "Access violation at address 000406686 read of address FFFFFFFFFE8" and no trace dump using wine version 3.2 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 5

[Bug 56577] New: QuarkXPress 2024 crashes on start with assertion error "symt_check_tag(&func->symt, SymTagFunction) || symt_check_tag(&func->symt, SymTagInlineSite)"
by WineHQ Bugzilla 15 Nov '25

15 Nov '25

https://bugs.winehq.org/show_bug.cgi?id=56577 Bug ID: 56577 Summary: QuarkXPress 2024 crashes on start with assertion error "symt_check_tag(&func->symt, SymTagFunction) || symt_check_tag(&func->symt, SymTagInlineSite)" Product: Wine Version: 9.6 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: dbghelp Assignee: wine-bugs(a)winehq.org Reporter: alexhenrie24(a)gmail.com Distribution: --- Created attachment 76332 --> https://bugs.winehq.org/attachment.cgi?id=76332 Terminal output On start, the program displays an error dialog titled "Wine C++ Runtime Library" which says: Assertion failed! Program: C:\Program Files\Quark\QuarkXPress 2024\QuarkXPress 2024.exe File: ../wine/dlls/dbghelp/symbol.c Line: 543 Expression: "symt_check_tag(&func->symt, SymTagFunction) || symt_check_tag(&func->symt, SymTagInlineSite)" Press OK to exit the program, or Cancel to start the Wine debugger. $ sha256sum QX2024_57226_Win.zip d3da582f0836db1bd6930e94b0f5c56b8e91c60a49928647acf75e4bb85e8b2c -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 5

[Bug 49987] New: Application freeze when trying to open file chooser dialog
by WineHQ Bugzilla 15 Nov '25

15 Nov '25

https://bugs.winehq.org/show_bug.cgi?id=49987 Bug ID: 49987 Summary: Application freeze when trying to open file chooser dialog Product: Wine Version: 5.19 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: mikrutrafal(a)protonmail.com Distribution: --- Created attachment 68389 --> https://bugs.winehq.org/attachment.cgi?id=68389 Full log When I download my GTK app - https://github.com/qarmin/czkawka/releases/download/1.1.0/windows_czkawka_g… and run it, then when clicking at "+Add" directly below "Included Directories", then app freeze Suspicious errors from console ``` 01d8:fixme:imm:ImmGetOpenStatus (000000000383F3B0): semi-stub 01d8:fixme:imm:ImmReleaseContext (0000000000030082, 000000000383F3B0): stub 01d8:fixme:file:GetLongPathNameW UNC pathname L"\\\\?\\C:\\users\\rafal\\Local Settings\\Application Data\\recently-used.xbel" 01d8:fixme:file:GetLongPathNameW UNC pathname L"\\\\?\\C:\\users\\rafal\\Local Settings\\Application Data\\gtk-3.0\\bookmarks" 01d8:err:shell:SHGetFileInfoW pidl is null! 01d8:err:shell:SHGetFileInfoW pidl is null! (czkawka_gui.exe:468): Gtk-WARNING **: 14:44:44.483: Error loading theme icon 'list-add' for stock: Icon 'list-add' not present in theme Adwaita 01d8:fixme:file:GetLongPathNameW UNC pathname L"\\\\?\\C:\\users\\rafal\\Local Settings\\Application Data\\gtk-3.0\\bookmarks" 01d8:fixme:file:GetLongPathNameW UNC pathname L"\\\\?\\C:\\users\\rafal\\Local Settings\\Application Data\\gtk-3.0\\servers" ``` On Windows none of this errors is shown -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 6

[Bug 54927] New: grepwinNP3 (part of Notepad3) crashes inside uxtheme
by WineHQ Bugzilla 15 Nov '25

15 Nov '25

https://bugs.winehq.org/show_bug.cgi?id=54927 Bug ID: 54927 Summary: grepwinNP3 (part of Notepad3) crashes inside uxtheme Product: Wine Version: 8.7 Hardware: x86-64 URL: https://github.com/rizonesoft/Notepad3/releases/downlo ad/RELEASE_6.23.203.2/Notepad3_6.23.203.2_x64_Setup.ex e OS: Linux Status: NEW Keywords: download, source Severity: normal Priority: P2 Component: uxtheme Assignee: wine-bugs(a)winehq.org Reporter: xerox.xerox2000x(a)gmail.com Distribution: --- This is a kind of "grep with GUI": Unhandled exception: page fault on read access to 0x0000000000000004 in 64-bit code (0x0000006d5089f5). =>0 0x0000006d5089f5 DrawThemeTextEx+0x45(hTheme=000000000025CA20, hdc=0000000001410094, iPartId=0x2, iStateId=0, pszText=L"Regex search", iCharCount=0xffffffff, flags=0x2450, rect=00000000001FC400, options=0000000000000000) [/home/louis/sda2/wine64-build/../wine/dlls/uxtheme/draw.c:1790] in uxtheme (0x000000001fc400) Apparently crashes in next line because "options" pointer is NULL: if (options->dwFlags & ~(DTT_TEXTCOLOR | DTT_FONTPROP)) FIXME("unsupported flags 0x%08lx\n", options->dwFlags); -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 7

[Bug 56447] New: PlayOnline Viewer: The "splash screen" is blank/grey without its image.
by WineHQ Bugzilla 15 Nov '25

15 Nov '25

https://bugs.winehq.org/show_bug.cgi?id=56447 Bug ID: 56447 Summary: PlayOnline Viewer: The "splash screen" is blank/grey without its image. Product: Wine Version: 9.4 Hardware: x86-64 URL: https://web.archive.org/web/20210810150839/http://www. playonline.com/ff11eu/download/media/install_win.html OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs(a)winehq.org Reporter: chiitoo(a)gentoo.org Distribution: Gentoo This is a very old one, but as far as I can tell, not reported until now (aside from some side-mentions). PlayOnline Viewer, which is used to launch Final Fantasy XI Online, has a blank/grey window for its "splash screen". It has been working in Wine Staging for some time. Not sure if related, but comparing the logging between runs, each of these show up twice with Vanilla but only once with Staging: err:d3d:wined3d_fence_wait glClientWaitSync returned 0x911b. err:d3d:wined3d_context_gl_wait_command_fence Failed to wait for command fence with id 0x1, ret 0x4. err:d3d:wined3d_fence_wait glClientWaitSync returned 0x911b. err:d3d:wined3d_context_gl_wait_command_fence Failed to wait for command fence with id 0x2, ret 0x4. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 2

[Bug 54858] New: Multiple games call for "Windows.System.DispatcherQueue" (Tannenberg, The Last Stand: Aftermath, The Long Dark)
by WineHQ Bugzilla 15 Nov '25

15 Nov '25

https://bugs.winehq.org/show_bug.cgi?id=54858 Bug ID: 54858 Summary: Multiple games call for "Windows.System.DispatcherQueue" (Tannenberg, The Last Stand: Aftermath, The Long Dark) Product: Wine Version: 8.6 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ole32 Assignee: wine-bugs(a)winehq.org Reporter: andrey.goosev(a)gmail.com Distribution: --- Lots of 0e8c:fixme:combase:RoGetActivationFactory (L"Windows.System.DispatcherQueue", {00000035-0000-0000-c000-000000000046}, 00007FEEE4A0FA00): semi-stub 0e8c:err:combase:RoGetActivationFactory Failed to find library for L"Windows.System.DispatcherQueue" 8.6-29-ga19c1ff1697 -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 17

[Bug 50182] New: Hotline Miami 2 GOG version not launch after install.
by WineHQ Bugzilla 14 Nov '25

14 Nov '25

https://bugs.winehq.org/show_bug.cgi?id=50182 Bug ID: 50182 Summary: Hotline Miami 2 GOG version not launch after install. Product: Wine Version: 5.21 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-d3d Assignee: wine-bugs(a)winehq.org Reporter: pamungkassendy(a)gmail.com Distribution: --- Created attachment 68700 --> https://bugs.winehq.org/attachment.cgi?id=68700 Hotline Miami 2 GOG Version Game Didn't launch and instead give a crasth report -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

1 1

[Bug 47251] New: add support for ConPTY API (pseudo console)
by wine-bugs＠winehq.org 14 Nov '25

14 Nov '25

https://bugs.winehq.org/show_bug.cgi?id=47251 Bug ID: 47251 Summary: add support for ConPTY API (pseudo console) Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: enhancement Priority: P2 Component: cmd Assignee: wine-bugs(a)winehq.org Reporter: programmerjake(a)gmail.com Distribution: --- as in title. API reference: https://docs.microsoft.com/en-us/windows/console/creating-a-pseudoconsole-s… -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

2 8

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

wine-bugs July 2024