https://bugs.winehq.org/show_bug.cgi?id=36583
Bug ID: 36583 Summary: valgrind shows several invalid reads in user32/tests/dde.c Product: Wine Version: 1.7.19 Hardware: x86 OS: Linux Status: NEW Keywords: download, source, testcase Severity: normal Priority: P2 Component: user32 Assignee: wine-bugs@winehq.org Reporter: austinenglish@gmail.com
==5757== Invalid read of size 4 ==5757== at 0x5300A0F: WDML_GetConv (dde_misc.c:2248) ==5757== by 0x53010CE: DdeQueryConvInfo (dde_misc.c:2453) ==5757== by 0x4E75978: test_dde_aw_transaction (dde.c:1714) ==5757== by 0x4E7BD78: func_dde (dde.c:2779) ==5757== by 0x4F50978: run_test (test.h:584) ==5757== by 0x4F50D67: main (test.h:654) ==5757== Address 0x49b6290 is 288 bytes inside a block of size 318 free'd ==5757== at 0x7BC4C72C: notify_free (heap.c:263) ==5757== by 0x7BC51071: RtlFreeHeap (heap.c:1762) ==5757== by 0x7BC756DB: RtlFreeAnsiString (rtlstr.c:173) ==5757== by 0x7BC44D3F: FILE_CreateFile (file.c:190) ==5757== by 0x7BC44F02: NtOpenFile (file.c:246) ==5757== by 0x7B840FE2: FindFirstFileExW (file.c:1948) ==5757== by 0x7B841DE2: FindFirstFileW (file.c:2241) ==5757== by 0x7B85D58E: GetLongPathNameW (path.c:373) ==5757== by 0x7B8658CE: create_startup_info (process.c:1618) ==5757== by 0x7B866722: create_process (process.c:1998) ==5757== by 0x7B867B26: create_process_impl (process.c:2361) ==5757== by 0x7B868155: CreateProcessA (process.c:2444) ==5757== by 0x4E7BA7A: func_dde (dde.c:2738) ==5757== by 0x4F50978: run_test (test.h:584) ==5757== by 0x4F50D67: main (test.h:654)
==5757== Invalid read of size 1 ==5757== at 0x402BE93: strlen (vg_replace_strmem.c:412) ==5757== by 0x7B852F8B: CompareStringA (locale.c:3055) ==5757== by 0x7B853485: lstrcmpA (locale.c:3170) ==5757== by 0x4E73DA8: dde_server_wndprocW (dde.c:1420) ==5757== by 0x538B4F5: ??? (winproc.c:173) ==5757== by 0x538B66A: call_window_proc (winproc.c:244) ==5757== by 0x538D803: WINPROC_call_window (winproc.c:900) ==5757== by 0x534EB44: DispatchMessageW (message.c:4019) ==5757== by 0x52FB4A0: WDML_SyncWaitTransactionReply (dde_client.c:1067) ==5757== by 0x52FB727: WDML_ClientHandle (dde_client.c:1124) ==5757== by 0x52FBB96: DdeClientTransaction (dde_client.c:1222) ==5757== by 0x4E74C12: test_dde_aw_transaction (dde.c:1609) ==5757== by 0x4E7BD64: func_dde (dde.c:2777) ==5757== by 0x4F50978: run_test (test.h:584) ==5757== by 0x4F50D67: main (test.h:654) ==5757== Address 0x49b33b0 is 0 bytes after a recently re-allocated block of size 16 alloc'd ==5757== at 0x7BC4C6DF: notify_alloc (heap.c:255) ==5757== by 0x7BC50F23: RtlAllocateHeap (heap.c:1716) ==5757== by 0x7B8457FF: HeapAlloc (heap.c:271) ==5757== by 0x7B845B34: GlobalAlloc (heap.c:388) ==5757== by 0x5349F4D: unpack_dde_message (message.c:2172) ==5757== by 0x534C1D3: peek_message (message.c:2936) ==5757== by 0x534DDC6: PeekMessageW (message.c:3757) ==5757== by 0x52FB4CE: WDML_SyncWaitTransactionReply (dde_client.c:1037) ==5757== by 0x52FB727: WDML_ClientHandle (dde_client.c:1124) ==5757== by 0x52FBB96: DdeClientTransaction (dde_client.c:1222) ==5757== by 0x4E74C12: test_dde_aw_transaction (dde.c:1609) ==5757== by 0x4E7BD64: func_dde (dde.c:2777) ==5757== by 0x4F50978: run_test (test.h:584) ==5757== by 0x4F50D67: main (test.h:654) ==5757==
etc.
(this is in a virtual desktop)