https://bugs.winehq.org/show_bug.cgi?id=36928
Bug ID: 36928 Summary: valgrind shows a couple unitialized variables in dlls/ieframe/tests/ie.c (HTMLDOMNode_Release) Product: Wine Version: 1.7.22 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase, valgrind Severity: normal Priority: P2 Component: ieframe Assignee: wine-bugs@winehq.org Reporter: austinenglish@gmail.com
==15288== Conditional jump or move depends on uninitialised value(s) ==15288== at 0x7D98870: HTMLDOMNode_Release (htmlnode.c:494) ==15288== by 0x7DC3828: htmldoc_release (mshtml_private.h:544) ==15288== by 0x7DC4377: release_inner_window (htmlwindow.c:235) ==15288== by 0x7DC45F5: HTMLWindow2_Release (htmlwindow.c:284) ==15288== by 0x7DC3CE0: detach_inner_window (mshtml.h:47873) ==15288== by 0x7DCE094: update_window_doc (htmlwindow.c:3023) ==15288== by 0x7DD8F04: on_start_nsrequest (navigate.c:1115) ==15288== by 0x7DD9409: read_stream_data (navigate.c:1227) ==15288== by 0x7DDA3BF: nsChannelBSC_read_data (navigate.c:1576) ==15288== by 0x7DD738A: BindStatusCallback_OnDataAvailable (navigate.c:427) ==15288== by 0x4D60487: BindStatusCallback_OnDataAvailable (urlmon.h:820) ==15288== by 0x4D66201: report_data (urlmon.h:820) ==15288== by 0x4D67813: start_binding (binding.c:1530) ==15288== by 0x4D67A2C: bind_to_storage (binding.c:1567) ==15288== by 0x4D87AA0: URLMoniker_BindToStorage (umon.c:280) ==15288== by 0x7DD8569: start_binding (objidl.h:3488) ==15288== by 0x7E04DA7: PersistMoniker_Load (persist.c:627) ==15288== by 0x4D63117: load_doc_mon (urlmon.h:2290) ==15288== by 0x4D63390: create_mime_object (binding.c:278) ==15288== by 0x4D635A2: create_object (binding.c:308) ==15288== Uninitialised value was created by a client request ==15288== at 0x7BC4BF0A: mark_block_uninitialized (heap.c:209) ==15288== by 0x7BC4C075: initialize_block (heap.c:240) ==15288== by 0x7BC50981: RtlAllocateHeap (heap.c:1717) ==15288== by 0x805119E: msvcrt_heap_alloc (heap.c:70) ==15288== by 0x8051D63: MSVCRT_malloc (heap.c:408) ==15288== by 0x80D71095: moz_xmalloc (mozalloc.cpp:54) ==15288== by 0x109B96F7: NS_InitXPCOM2 (nsxpcominit.cpp:464) ==15288== by 0x7DE1F26: init_xpcom (nsembed.c:698) ==15288== by 0x7DE2399: load_gecko (nsembed.c:774) ==15288== by 0x7DE6D01: create_nscontainer (nsembed.c:2042) ==15288== by 0x7D672F6: HTMLDocument_Create (htmldoc.c:4756) ==15288== by 0x7DD0F7D: ClassFactory_CreateInstance (main.c:238) ==15288== by 0x5038C6B: CoCreateInstance (unknwn.h:226) ==15288== by 0x4D63202: create_mime_object (binding.c:258) ==15288== by 0x4D635A2: create_object (binding.c:308) ==15288== by 0x4D660AB: report_data (binding.c:1077) ==15288== by 0x4D663F4: InternetProtocolSink_ReportData (binding.c:1126) ==15288== by 0x4D6B723: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==15288== by 0x4D6C274: report_data_proc (urlmon.h:3113) ==15288== by 0x4D67FCF: process_tasks (bindprot.c:57) ==15288==
==14890== Conditional jump or move depends on uninitialised value(s) ==14890== at 0x109B654F: ccref_decr (nscyclecollectorutils.cpp:75) ==14890== by 0x7DD3828: htmldoc_release (mshtml_private.h:544) ==14890== by 0x7DD4377: release_inner_window (htmlwindow.c:235) ==14890== by 0x7DD45F5: HTMLWindow2_Release (htmlwindow.c:284) ==14890== by 0x7DD3CE0: detach_inner_window (mshtml.h:47873) ==14890== by 0x7DDE094: update_window_doc (htmlwindow.c:3023) ==14890== by 0x7DE8F04: on_start_nsrequest (navigate.c:1115) ==14890== by 0x7DE9409: read_stream_data (navigate.c:1227) ==14890== by 0x7DEA3BF: nsChannelBSC_read_data (navigate.c:1576) ==14890== by 0x7DE738A: BindStatusCallback_OnDataAvailable (navigate.c:427) ==14890== by 0x4D60487: BindStatusCallback_OnDataAvailable (urlmon.h:820) ==14890== by 0x4D66201: report_data (urlmon.h:820) ==14890== by 0x4D67813: start_binding (binding.c:1530) ==14890== by 0x4D67A2C: bind_to_storage (binding.c:1567) ==14890== by 0x4D87AA0: URLMoniker_BindToStorage (umon.c:280) ==14890== by 0x7DE8569: start_binding (objidl.h:3488) ==14890== by 0x7E14DA7: PersistMoniker_Load (persist.c:627) ==14890== by 0x4D63117: load_doc_mon (urlmon.h:2290) ==14890== by 0x4D63390: create_mime_object (binding.c:278) ==14890== by 0x4D635A2: create_object (binding.c:308) ==14890== Uninitialised value was created by a client request ==14890== at 0x7BC4BF0A: mark_block_uninitialized (heap.c:209) ==14890== by 0x7BC4C075: initialize_block (heap.c:240) ==14890== by 0x7BC50981: RtlAllocateHeap (heap.c:1717) ==14890== by 0x806119E: msvcrt_heap_alloc (heap.c:70) ==14890== by 0x8061D63: MSVCRT_malloc (heap.c:408) ==14890== by 0x80E21095: moz_xmalloc (mozalloc.cpp:54) ==14890== by 0x109B96F7: NS_InitXPCOM2 (nsxpcominit.cpp:464) ==14890== by 0x7DF1F26: init_xpcom (nsembed.c:698) ==14890== by 0x7DF2399: load_gecko (nsembed.c:774) ==14890== by 0x7DF6D01: create_nscontainer (nsembed.c:2042) ==14890== by 0x7D772F6: HTMLDocument_Create (htmldoc.c:4756) ==14890== by 0x7DE0F7D: ClassFactory_CreateInstance (main.c:238) ==14890== by 0x5038C6B: CoCreateInstance (unknwn.h:226) ==14890== by 0x4D63202: create_mime_object (binding.c:258) ==14890== by 0x4D635A2: create_object (binding.c:308) ==14890== by 0x4D660AB: report_data (binding.c:1077) ==14890== by 0x4D663F4: InternetProtocolSink_ReportData (binding.c:1126) ==14890== by 0x4D6B723: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==14890== by 0x4D6C274: report_data_proc (urlmon.h:3113) ==14890== by 0x4D67FCF: process_tasks (bindprot.c:57)
==15288== Conditional jump or move depends on uninitialised value(s) ==15288== at 0x109B654F: ccref_decr (nscyclecollectorutils.cpp:75) ==15288== by 0x7DC3828: htmldoc_release (mshtml_private.h:544) ==15288== by 0x7DCE0E3: update_window_doc (htmlwindow.c:3029) ==15288== by 0x7DD8F04: on_start_nsrequest (navigate.c:1115) ==15288== by 0x7DD9409: read_stream_data (navigate.c:1227) ==15288== by 0x7DDA3BF: nsChannelBSC_read_data (navigate.c:1576) ==15288== by 0x7DD738A: BindStatusCallback_OnDataAvailable (navigate.c:427) ==15288== by 0x4D60487: BindStatusCallback_OnDataAvailable (urlmon.h:820) ==15288== by 0x4D66201: report_data (urlmon.h:820) ==15288== by 0x4D67813: start_binding (binding.c:1530) ==15288== by 0x4D67A2C: bind_to_storage (binding.c:1567) ==15288== by 0x4D87AA0: URLMoniker_BindToStorage (umon.c:280) ==15288== by 0x7DD8569: start_binding (objidl.h:3488) ==15288== by 0x7E04DA7: PersistMoniker_Load (persist.c:627) ==15288== by 0x4D63117: load_doc_mon (urlmon.h:2290) ==15288== by 0x4D63390: create_mime_object (binding.c:278) ==15288== by 0x4D635A2: create_object (binding.c:308) ==15288== by 0x4D660AB: report_data (binding.c:1077) ==15288== by 0x4D663F4: InternetProtocolSink_ReportData (binding.c:1126) ==15288== by 0x4D6B723: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==15288== Uninitialised value was created by a client request ==15288== at 0x7BC4BF0A: mark_block_uninitialized (heap.c:209) ==15288== by 0x7BC4C075: initialize_block (heap.c:240) ==15288== by 0x7BC50981: RtlAllocateHeap (heap.c:1717) ==15288== by 0x805119E: msvcrt_heap_alloc (heap.c:70) ==15288== by 0x8051D63: MSVCRT_malloc (heap.c:408) ==15288== by 0x80D71095: moz_xmalloc (mozalloc.cpp:54) ==15288== by 0x109B96F7: NS_InitXPCOM2 (nsxpcominit.cpp:464) ==15288== by 0x7DE1F26: init_xpcom (nsembed.c:698) ==15288== by 0x7DE2399: load_gecko (nsembed.c:774) ==15288== by 0x7DE6D01: create_nscontainer (nsembed.c:2042) ==15288== by 0x7D672F6: HTMLDocument_Create (htmldoc.c:4756) ==15288== by 0x7DD0F7D: ClassFactory_CreateInstance (main.c:238) ==15288== by 0x5038C6B: CoCreateInstance (unknwn.h:226) ==15288== by 0x4D63202: create_mime_object (binding.c:258) ==15288== by 0x4D635A2: create_object (binding.c:308) ==15288== by 0x4D660AB: report_data (binding.c:1077) ==15288== by 0x4D663F4: InternetProtocolSink_ReportData (binding.c:1126) ==15288== by 0x4D6B723: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==15288== by 0x4D6C274: report_data_proc (urlmon.h:3113) ==15288== by 0x4D67FCF: process_tasks (bindprot.c:57) ==15288== ==15556== Conditional jump or move depends on uninitialised value(s) ==15556== at 0x7DA8870: HTMLDOMNode_Release (htmlnode.c:494) ==15556== by 0x7DD3828: htmldoc_release (mshtml_private.h:544) ==15556== by 0x7DDE0E3: update_window_doc (htmlwindow.c:3029) ==15556== by 0x7DE8F04: on_start_nsrequest (navigate.c:1115) ==15556== by 0x7DE9409: read_stream_data (navigate.c:1227) ==15556== by 0x7DEA3BF: nsChannelBSC_read_data (navigate.c:1576) ==15556== by 0x7DE738A: BindStatusCallback_OnDataAvailable (navigate.c:427) ==15556== by 0x4D60487: BindStatusCallback_OnDataAvailable (urlmon.h:820) ==15556== by 0x4D66201: report_data (urlmon.h:820) ==15556== by 0x4D67813: start_binding (binding.c:1530) ==15556== by 0x4D67A2C: bind_to_storage (binding.c:1567) ==15556== by 0x4D87AA0: URLMoniker_BindToStorage (umon.c:280) ==15556== by 0x7DE8569: start_binding (objidl.h:3488) ==15556== by 0x7E14DA7: PersistMoniker_Load (persist.c:627) ==15556== by 0x4D63117: load_doc_mon (urlmon.h:2290) ==15556== by 0x4D63390: create_mime_object (binding.c:278) ==15556== by 0x4D635A2: create_object (binding.c:308) ==15556== by 0x4D660AB: report_data (binding.c:1077) ==15556== by 0x4D663F4: InternetProtocolSink_ReportData (binding.c:1126) ==15556== by 0x4D6B723: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==15556== Uninitialised value was created by a client request ==15556== at 0x7BC4BF0A: mark_block_uninitialized (heap.c:209) ==15556== by 0x7BC4C075: initialize_block (heap.c:240) ==15556== by 0x7BC50981: RtlAllocateHeap (heap.c:1717) ==15556== by 0x806119E: msvcrt_heap_alloc (heap.c:70) ==15556== by 0x8061D63: MSVCRT_malloc (heap.c:408) ==15556== by 0x80C71095: moz_xmalloc (mozalloc.cpp:54) ==15556== by 0x109B96F7: NS_InitXPCOM2 (nsxpcominit.cpp:464) ==15556== by 0x7DF1F26: init_xpcom (nsembed.c:698) ==15556== by 0x7DF2399: load_gecko (nsembed.c:774) ==15556== by 0x7DF6D01: create_nscontainer (nsembed.c:2042) ==15556== by 0x7D772F6: HTMLDocument_Create (htmldoc.c:4756) ==15556== by 0x7DE0F7D: ClassFactory_CreateInstance (main.c:238) ==15556== by 0x5038C6B: CoCreateInstance (unknwn.h:226) ==15556== by 0x4D63202: create_mime_object (binding.c:258) ==15556== by 0x4D635A2: create_object (binding.c:308) ==15556== by 0x4D660AB: report_data (binding.c:1077) ==15556== by 0x4D663F4: InternetProtocolSink_ReportData (binding.c:1126) ==15556== by 0x4D6B723: ProtocolSinkHandler_ReportData (urlmon.h:3113) ==15556== by 0x4D6C274: report_data_proc (urlmon.h:3113) ==15556== by 0x4D67FCF: process_tasks (bindprot.c:57) ==15556==