http://bugs.winehq.org/show_bug.cgi?id=11746
Summary: repeatable wineserver crash when exporting pdf with adobe InDesign CS trial Product: Wine Version: CVS/GIT Platform: Other URL: http://www.winsoft.eu/support/download-adobe- indesign.php OS/Version: other Status: NEW Keywords: download Severity: critical Priority: P2 Component: -unknown AssignedTo: wine-bugs@winehq.org ReportedBy: dank@kegel.com
A comment in http://blog.foozia.com/blog/2007/dec/12/running-adobe-indesign-cs2-under-win... said that exporting pdfs didn't work, so I tried it in CS.
To repeat: Install InDesign CS trial, and delete the vb plugin to get around bug 9043. Then create a document, maybe put a little text on it, and export as a pdf. Whammo, wineserver crash! Here's the stack dump:
Program received signal SIGSEGV, Segmentation fault. 0xb7d40583 in strlen () from /lib/tls/i686/cmov/libc.so.6 (gdb) bt #0 0xb7d40583 in strlen () from /lib/tls/i686/cmov/libc.so.6 #1 0x0804b7ed in prepend (path=0x48, segment=0x48 <Address 0x48 out of bounds>) at change.c:671 #2 0x0804bbad in inotify_poll_event (fd=0x82014e8, event=1) at change.c:744 #3 0x08056564 in main_loop () at fd.c:437 #4 0x0805a905 in main (argc=3, argv=0xbfbfce84) at main.c:138 (gdb)
This is on Gutsy.
http://bugs.winehq.org/show_bug.cgi?id=11746
--- Comment #1 from Dan Kegel dank@kegel.com 2008-02-26 17:39:41 --- The stack looked smashed (args both 48), so I ran the server under valgrind. Sure enough, got lots of
==10887== Invalid read of size 4 ==10887== at 0x804B170: filter_from_inode (change.c:579) ==10887== by 0x804C23B: req_read_directory_changes (change.c:872) ==10887== by 0x806B807: call_req_handler (request.c:286) ==10887== by 0x8056563: main_loop (fd.c:437) ==10887== by 0x805A904: main (main.c:138) ==10887== Address 0x4F0E67C is 20 bytes inside a block of size 68 free'd ==10887== at 0x402237F: free (vg_replace_malloc.c:233) ==10887== by 0x804B2FA: free_inode (change.c:475) ==10887== by 0x804B344: free_inode (change.c:457) ==10887== by 0x804C5B1: dir_destroy (change.c:314) ==10887== by 0x805DA5D: release_object (object.c:282) ==10887== by 0x8057EB1: close_handle (handle.c:377) ==10887== by 0x806B807: call_req_handler (request.c:286) ==10887== by 0x8056563: main_loop (fd.c:437) ==10887== by 0x805A904: main (main.c:138)
so the server seems to be referencing freed memory. Tsk.
http://bugs.winehq.org/show_bug.cgi?id=11746
--- Comment #2 from Dan Kegel dank@kegel.com 2008-02-26 18:04:55 --- Created an attachment (id=11000) --> (http://bugs.winehq.org/attachment.cgi?id=11000) +file change calls and notifications
Annoyingly, running with +file makes the crash go away. Nevertheless, here's a log of just the change requests and notifications during a successful run where I just do a pdf export.
http://bugs.winehq.org/show_bug.cgi?id=11746
--- Comment #3 from Dan Kegel dank@kegel.com 2008-02-26 18:24:33 --- Recompiling server with -O0 -g shows a more complete stack trace in valgrind:
==11223== Invalid read of size 4 ==11223== at 0x804C1AF: filter_from_inode (change.c:579) ==11223== by 0x804CBA5: inotify_adjust_changes (change.c:872) ==11223== by 0x804D14B: req_read_directory_changes (change.c:1062) ==11223== by 0x8071C7B: call_req_handler (request.c:286) ==11223== by 0x8071DD0: read_request (request.c:320) ==11223== by 0x80772CE: thread_poll_event (thread.c:234) ==11223== by 0x8056412: fd_poll_event (fd.c:437) ==11223== by 0x8056357: main_loop_epoll (fd.c:532) ==11223== by 0x805615E: main_loop (fd.c:776) ==11223== by 0x805EAD1: main (main.c:138) ==11223== Address 0x4C9057C is 20 bytes inside a block of size 68 free'd ==11223== at 0x402237F: free (vg_replace_malloc.c:233) ==11223== by 0x804BEDC: free_inode (change.c:475) ==11223== by 0x804BE43: free_inode (change.c:457) ==11223== by 0x804B85A: dir_destroy (change.c:314) ==11223== by 0x8062A71: release_object (object.c:282) ==11223== by 0x805BB31: close_handle (handle.c:377) ==11223== by 0x805C082: req_close_handle (handle.c:565) ==11223== by 0x8071C7B: call_req_handler (request.c:286) ==11223== by 0x8071DD0: read_request (request.c:320) ==11223== by 0x80772CE: thread_poll_event (thread.c:234) ==11223== by 0x8056412: fd_poll_event (fd.c:437) ==11223== by 0x8056357: main_loop_epoll (fd.c:532)
http://bugs.winehq.org/show_bug.cgi?id=11746
--- Comment #4 from Dmitry Timoshkov dmitry@codeweavers.com 2008-02-27 01:46:59 --- (In reply to comment #2)
Created an attachment (id=11000)
--> (http://bugs.winehq.org/attachment.cgi?id=11000) [details]
+file change calls and notifications Annoyingly, running with +file makes the crash go away. Nevertheless, here's a log of just the change requests and notifications during a successful run where I just do a pdf export.
Do you redirect the debug output to a file on the same partition where the app gets notifications from?
http://bugs.winehq.org/show_bug.cgi?id=11746
--- Comment #5 from Dan Kegel dank@kegel.com 2008-02-27 16:01:55 --- Yeah, I guess I should have been more careful with where the log was going.
Alexandre's patch seems to fix it, http://marc.info/?l=wine-devel&m=120411991216615&w=2
http://bugs.winehq.org/show_bug.cgi?id=11746
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |FIXED
--- Comment #6 from Alexandre Julliard julliard@winehq.org 2008-02-28 13:08:22 --- The fix is committed.
http://bugs.winehq.org/show_bug.cgi?id=11746
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |m.b.lankhorst@gmail.com
--- Comment #7 from Alexandre Julliard julliard@winehq.org 2008-02-28 13:09:16 --- *** Bug 11515 has been marked as a duplicate of this bug. ***
http://bugs.winehq.org/show_bug.cgi?id=11746
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #8 from Alexandre Julliard julliard@winehq.org 2008-03-07 11:28:45 --- Closing bugs fixed in 0.9.57.
http://bugs.winehq.org/show_bug.cgi?id=11746
Austin English austinenglish@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Version|CVS/GIT |unspecified
https://bugs.winehq.org/show_bug.cgi?id=11746
André H. nerv@dawncrow.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |037afca5a5c9c2561e5072e118a | |8a384a01ee814 CC| |nerv@dawncrow.de Hardware|Other |x86 OS|other |Linux
https://bugs.winehq.org/show_bug.cgi?id=11746
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |focht@gmx.net Component|-unknown |wineserver Version|unspecified |0.9.56.
https://bugs.winehq.org/show_bug.cgi?id=11746
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|repeatable wineserver crash |Adobe InDesign CS2: |when exporting pdf with |repeatable wineserver crash |adobe InDesign CS trial |when exporting PDF URL|http://www.winsoft.eu/suppo |https://web.archive.org/web |rt/download-adobe-indesign. |/20151201090929/ftp://ftp.a |php |dobe.com/pub/adobe/indesign | |/win/cs2/InDesign_CS2_Tryou | |t.exe