http://bugs.winehq.org/show_bug.cgi?id=27371
Summary: crash while install 360chrome browser Product: Wine Version: 1.3.21 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs@winehq.org ReportedBy: fracting@gmail.com
Created an attachment (id=34996) --> (http://bugs.winehq.org/attachment.cgi?id=34996) Log : crash while install 360cse.exe
360chrome is a fork of google chrome.
1 download 360chrome $ wget http://down.360safe.com/cse/360cse_4.0.4.321.exe
2. start the installer $ $ wine Wine/360cse_4.0.4.321.exe &> 360cse.log
full log is attached.
http://bugs.winehq.org/show_bug.cgi?id=27371
fracting fracting@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download URL| |http://down.360safe.com/cse | |/360cse_4.0.4.321.exe
http://bugs.winehq.org/show_bug.cgi?id=27371
Dan Kegel dank@kegel.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |dank@kegel.com
--- Comment #1 from Dan Kegel dank@kegel.com 2011-06-02 16:33:23 CDT --- Home page is http://chrome.360.cn/
Your log shows Backtrace: =>0 0x6835ee3e in wininet (+0x1ee3e) (0x0099d908) 1 0x68368eb7 in wininet (+0x28eb6) (0x0099e9c8)
Please install debug symbols.
http://bugs.winehq.org/show_bug.cgi?id=27371
--- Comment #2 from fracting fracting@gmail.com 2011-06-03 01:48:18 CDT --- Created an attachment (id=34999) --> (http://bugs.winehq.org/attachment.cgi?id=34999) Log: install 360chrome (with debug symbol)
http://bugs.winehq.org/show_bug.cgi?id=27371
Dan Kegel dank@kegel.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Component|-unknown |wininet
--- Comment #3 from Dan Kegel dank@kegel.com 2011-06-03 09:00:13 CDT --- Key part of log:
Unhandled exception: page fault on write access to 0x00000014 in 32-bit code (0x68352e3e). Backtrace: =>0 http_process_keep_alive+0x6e(req=0x1e03b0) [wine1.3-1.3.21/dlls/wininet/http.c:4404] in wininet (0x0099d908) 1 0x6835ceb7 in wininet (+0x1ceb6) (0x0099e9c8) 2 INTERNET_WorkerThreadFunc+0x7a(lpvParam=0x1ad068) [wine1.3-1.3.21/dlls/wininet/internet.c:3528]
That function is http://source.winehq.org/source/dlls/wininet/http.c#L4396
Maybe req->netconn is NULL... maybe this is a use-after-free. What happens if you run with WINEDEBUG=warn+heap ?
http://bugs.winehq.org/show_bug.cgi?id=27371
--- Comment #4 from fracting fracting@gmail.com 2011-06-03 09:26:14 CDT --- Created an attachment (id=35004) --> (http://bugs.winehq.org/attachment.cgi?id=35004) trace:+warn,+heap
Maybe req->netconn is NULL... maybe this is a use-after-free. What happens if you run with WINEDEBUG=warn+heap ?
Does this help?
http://bugs.winehq.org/show_bug.cgi?id=27371
Jacek Caban jacek@codeweavers.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |NEW CC| |jacek@codeweavers.com Ever Confirmed|0 |1
--- Comment #5 from Jacek Caban jacek@codeweavers.com 2011-06-03 09:38:30 CDT --- Confirming. The problem is that HttpSendRequest calls request complete when it shouldn't.
http://bugs.winehq.org/show_bug.cgi?id=27371
--- Comment #6 from fracting fracting@gmail.com 2011-12-08 11:43:38 CST --- Doesn't crash anymore with wine-1.3.34-131-gfd230c5 + two versions of 360chrome installer :
$ sha1sum 360cse_4.0.4.321.exe d6328fa9215116d5ccef330549b55be09a73eeb3 360cse_4.0.4.321.exe
$ sha1sum 360cse_4.2.0.516.exe 39bb79fc6e4846763a8be86ff86524d64a86adf7 360cse_4.2.0.516.exe
http://bugs.winehq.org/show_bug.cgi?id=27371
Jacek Caban jacek@codeweavers.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |892d3cd46bb748bbb6f65d9733e | |c6b2fff0bc8d5 Status|NEW |RESOLVED Resolution| |FIXED
--- Comment #7 from Jacek Caban jacek@codeweavers.com 2011-12-09 03:57:51 CST --- Reported fixed
http://bugs.winehq.org/show_bug.cgi?id=27371
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #8 from Alexandre Julliard julliard@winehq.org 2011-12-16 13:29:24 CST --- Closing bugs fixed in 1.3.35.