[Bug 54049] New: ddraw:ddraw2 test_texture_wrong_caps test triggers use after free bug

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=54049

Bug ID: 54049
           Summary: ddraw:ddraw2 test_texture_wrong_caps test triggers use
                    after free bug
           Product: Wine
           Version: unspecified
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: d3d
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

The test crashes when run with WINEDEBUG=warn+heap, with the following stack:

#0  wined3d_device_context_get_depth_stencil_view (context=0xfeeefeee) at
../source/dlls/wined3d/device.c:5297
#1  0x69ef72bb in ddraw_surface_delete_attached_surface
(surface=surface@entry=0x63484e0, attachment=0x6348260, detach_iface=0x6348270)
at ../source/dlls/ddraw/surface.c:2207
#2  0x69ef8791 in ddraw_surface_wined3d_object_destroyed (parent=0x63484e0) at
../source/dlls/ddraw/surface.c:5899
#3  0x6ce08858 in wined3d_texture_sub_resources_destroyed (texture=<optimized
out>, texture@entry=0x2285810) at ../source/dlls/wined3d/texture.c:1100
#4  0x6cc8601a in adapter_gl_destroy_texture (texture=<optimized out>) at
../source/dlls/wined3d/adapter_gl.c:4808
#5  0x6cdfea7a in wined3d_texture_decref (texture=0x2285810) at
../source/dlls/wined3d/texture.c:1635
#6  wined3d_texture_decref (texture=0x2285810) at
../source/dlls/wined3d/texture.c:1603
#7  0x69ef524b in ddraw_surface_cleanup (surface=surface@entry=0x63484e0) at
../source/dlls/ddraw/surface.c:609
#8  0x69ef797f in ddraw_surface_release_iface (This=This@entry=0x63484e0) at
../source/dlls/ddraw/surface.c:638
#9  0x69eea830 in ddraw_surface1_Release (iface=0x63484f0) at
../source/dlls/ddraw/surface.c:749
#10 0x69ed4b76 in d3d_device_inner_Release (iface=0x34e4a90) at
../source/dlls/ddraw/device.c:356
#11 0x69ecae68 in d3d_device2_Release (iface=0x34e4a88) at
../source/dlls/ddraw/device.c:397
#12 0x0052ef3b in test_texture_wrong_caps (device_guid=<optimized out>) at
../source/dlls/ddraw/tests/ddraw2.c:15661
#13 0x00420a16 in run_for_each_device_type (test_func=0x52e9a0
<test_texture_wrong_caps>) at ../source/dlls/ddraw/tests/ddraw2.c:16338
#14 func_ddraw2 () at ../source/dlls/ddraw/tests/ddraw2.c:16464
#15 0x00560641 in run_test (name=0x90aae0 "ddraw2") at
../source/include/wine/test.h:718
#16 main (argc=2, argv=0x90aa80) at ../source/include/wine/test.h:833
#17 0x0043354d in mainCRTStartup () at ../source/dlls/msvcrt/crt_main.c:58
#18 0x7b60e6a4 in InterlockedDecrement@4 ()
#19 0x7bc0c99f in call_thread_func_wrapper ()
#20 0x7bc42160 in call_thread_func (entry=<optimized out>, arg=<optimized out>)
at ../source/dlls/ntdll/thread.c:270
#21 0x00000000 in ?? ()