https://bugs.winehq.org/show_bug.cgi?id=38837
Bug ID: 38837 Summary: STDU (Scientific and Technical Documentation Utility) Viewer v1.6.375 crashes when opening PDF file Product: Wine Version: 1.7.46 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs@winehq.org Reporter: focht@gmx.net Distribution: ---
Hello folks,
continuation of bug 38510
Trace log:
--- snip --- $ WINEDEBUG=+tid,+seh,+relay,+actctx,+ole,+variant,+typelib wine ./STDUViewerApp.exe >>log.txt 2>&1 ... 0026:trace:ole:SysAllocStringLen L"ISTDUImage" 0026:trace:ole:ITypeInfo_fnRelease (0xe28f00)->(1) 0026:trace:ole:ITypeInfo_fnReleaseTypeAttr (0xe2a8d8)->(0xe297d8) ... 0026:Call KERNEL32.lstrcmpW(00e2b73c L"ISTDUImage",7e2843bc L"IDispatch") ret=7e1d59b0 0026:Ret KERNEL32.lstrcmpW() retval=00000001 ret=7e1d59b0 0026:trace:ole:ITypeInfo_fnGetNames (0xe28f00) memid=0x00000096 Maxname=10 0026:trace:ole:SysAllocStringLen L"Buffer" 0026:trace:ole:SysAllocStringLen L"ppVal" ... 0026:trace:ole:deserialize_param vt VT_PTR at 0xe29594 ... 0026:trace:ole:deserialize_param vt VT_PTR at 0xe297d8 0026:trace:ole:_invoke Calling 0xd31ef0(007c9480,00e297d8,) 0026:trace:ole:_invoke returns 00000000 0026:trace:ole:serialize_param (tdesc.vt VT_PTR) 0026:trace:ole:serialize_param (tdesc.vt VT_PTR) 0026:trace:ole:serialize_param (tdesc.vt VT_UI1) ... 0026:trace:ole:ServerRpcChannelBuffer_GetBuffer (0xe29888)->(0x12be7d0,{3905360d-3c87-498c-93d2-27e002b941b1}) ... 0026:trace:ole:ServerRpcChannelBuffer_GetBuffer -- 0 0026:trace:ole:ITypeInfo_fnRelease (0xe28f00)->(0) 0026:trace:ole:ITypeLib2_fnRelease (0xe298a8) ref=2 ... 0026:trace:ole:TMStubImpl_Invoke returning ... 002a:Ret winex11.drv.MsgWaitForMultipleObjectsEx() retval=00000000 ret=7eccf928 002a:Ret user32.MsgWaitForMultipleObjectsEx() retval=00000000 ret=7e3d17ff 002a:trace:ole:CoWaitForMultipleHandles -- 0x00000000 002a:trace:ole:ClientRpcChannelBuffer_SendReceive RPC call status: 0x0 002a:trace:ole:ClientRpcChannelBuffer_SendReceive hrFault = 0x00000000 002a:trace:ole:ClientRpcChannelBuffer_SendReceive -- 0x00000000 ... 002a:trace:ole:deserialize_param vt VT_PTR at 0x12be964 002a:trace:ole:deserialize_param vt VT_PTR at 0x12be994 002a:trace:ole:deserialize_param vt VT_UI1 at (nil) 002a:trace:seh:raise_exception code=c0000005 flags=0 addr=0xf747987c ip=f747987c tid=002a 002a:trace:seh:raise_exception info[0]=00000001 002a:trace:seh:raise_exception info[1]=00000000 002a:trace:seh:raise_exception eax=012be180 ebx=00000000 ecx=00000001 edx=00000000 esi=00e2b180 edi=00e2b180 002a:trace:seh:raise_exception ebp=012be348 esp=012be138 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00210246 002a:trace:seh:call_stack_handlers calling handler at 0x1141498 code=c0000005 flags=0 002a:trace:seh:call_stack_handlers handler at 0x1141498 returned 1 --- snip ---
Method call before the crash:
--- snip --- Wine-dbg> 0x7e1f4af3 call_method+0x1f in oleaut32: call *0x8(%ebp)
Wine-dbg> 0x00d41ef0: movl 0x4(%esp),%eax 0x00d41ef4: movl 0x20(%eax),%ecx 0x00d41ef7: movl 0x8(%esp),%edx 0x00d41efb: movl %ecx,0x0(%edx) 0x00d41efd: xorl %eax,%eax 0x00d41eff: ret $0x8
Wine-dbg>bt
Backtrace: =>0 0x00d41eff in stducore (+0x1eff) (0x0033c7f8) 1 0x7e1f4caf _invoke+0x1aa(func=0xd41ef0, callconv=CC_STDCALL, nrargs=0x2, args=0xe269f0) [/home/focht/projects/wine/wine.repo/src/dlls/oleaut32/typelib.c:6421] in oleaut32 (0x0033c868) 2 0x7e1e3d26 TMStubImpl_Invoke+0x712(iface=<couldn't compute location>, xmsg=<couldn't compute location>, rpcchanbuf=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/oleaut32/tmarshal.c:2167] in oleaut32 (0x0033ca78) 3 0x7e416c6b RPC_ExecuteCall+0x3e4(params=0xe268cc) [/home/focht/projects/wine/wine.repo/build-x86/dlls/ole32/../../include/objidl.h:9091] in ole32 (0x0033cb68) 4 0x7e3d9cba apartment_wndproc+0x33(hWnd=<couldn't compute location>, msg=<couldn't compute location>, wParam=<couldn't compute location>, lParam=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/ole32/compobj.c:1475] in ole32 (0x0033cb88) 5 0x7ecdad46 WINPROC_wrapper+0x19() in user32 (0x0033cbc8) 6 0x7ecdaeab call_window_proc+0xbc(hwnd=0x301aa, msg=0x400, wp=0, lp=0xe268cc, result=0x33cd38, arg=0x7e3d9c86) [/home/focht/projects/wine/wine.repo/src/dlls/user32/winproc.c:245] in user32 (0x0033cc08) 7 0x7ecdcfd7 WINPROC_call_window+0x150(hwnd=0x301aa, msg=0x400, wParam=0, lParam=0xe268cc, result=0x33cd38, unicode=0x1, mapping=WMCHAR_MAP_DISPATCHMESSAGE) [/home/focht/projects/wine/wine.repo/src/dlls/user32/winproc.c:901] in user32 (0x0033cc58) 8 0x7eca1178 DispatchMessageW+0x1ad(msg=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/user32/message.c:4023] in user32 (0x0033cd68)
Wine-dbg>info share Module Address Debug info Name (111 modules) PE 400000- 650000 Export stduviewerapp PE d40000- d4e000 Export stducore PE 1080000- 11c6000 Deferred stdupdffile PE 10000000-100ba000 Export stduviewer ELF 7b800000-7ba6f000 Dwarf kernel32<elf> -PE 7b820000-7ba6f000 \ kernel32 ... --- snip ---
Crash bt
--- snip --- Wine-dbg>bt Backtrace: =>0 0x7e1df59a deserialize_param+0x383(tinfo=0xe26588, readit=0x1, debugout=0, alloc=0, tdesc=0x7e2d2548, arg=0x0(nil), buf=0x12ce7fc) [/home/focht/projects/wine/wine.repo/src/dlls/oleaut32/tmarshal.c:1088] in oleaut32 (0x012ce348) 1 0x7e1dfc97 deserialize_param+0xa7f(tinfo=0xe26588, readit=0x1, debugout=0, alloc=0, tdesc=0xe276b0, arg=0x12ce994, buf=0x12ce7fc) [/home/focht/projects/wine/wine.repo/src/dlls/oleaut32/tmarshal.c:1171] in oleaut32 (0x012ce558) 2 0x7e1dfc97 deserialize_param+0xa7f(tinfo=0xe26588, readit=0x1, debugout=0, alloc=0, tdesc=0xe285e0, arg=0x12ce964, buf=0x12ce7fc) [/home/focht/projects/wine/wine.repo/src/dlls/oleaut32/tmarshal.c:1171] in oleaut32 (0x012ce768) 3 0x7e1e1bd9 xCall+0xd2e(method=<couldn't compute location>, args=<couldn't compute location>) [/home/focht/projects/wine/wine.repo/src/dlls/oleaut32/tmarshal.c:1557] in oleaut32 (0x012ce948) --- snip ---
$ sha1sum stduviewer.zip ad56b235048a118b990e12142ca9c8a359e519eb stduviewer.zip
$ du -sh stduviewer.zip 3.5M stduviewer.zip
$ wine --version wine-1.7.46-43-g9353a36
Regards