http://bugs.winehq.org/show_bug.cgi?id=29974
Bug #: 29974 Summary: StarBurn crashes on disabling skins Product: Wine Version: 1.4-rc4 Platform: x86-64 URL: http://www.starburnsoftware.com/products/starburn/down load/download-starburn-free OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: uxtheme AssignedTo: wine-bugs@winehq.org ReportedBy: RandomAccountName@mail.com Classification: Unclassified
Created attachment 39020 --> http://bugs.winehq.org/attachment.cgi?id=39020 Terminal output
StarBurn crashes a moment after disabling skins within the program. This option is at view -> skin -> disable.
Workaround: native uxtheme.dll
http://bugs.winehq.org/show_bug.cgi?id=29974
A Wine user RandomAccountName@mail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download
http://bugs.winehq.org/show_bug.cgi?id=29974
--- Comment #1 from A Wine user RandomAccountName@mail.com 2012-02-22 05:51:28 CST --- Created attachment 39021 --> http://bugs.winehq.org/attachment.cgi?id=39021 Terminal output with warn+heap
Running it with WINEDEBUG=warn+heap gives a different backtrace.
http://bugs.winehq.org/show_bug.cgi?id=29974
--- Comment #2 from Nikolay Sivov bunglehead@gmail.com 2012-02-22 06:03:58 CST --- The reason here is most likely that HTHEME should really be a handle, not a pointer to some data. This way all public calls are able to validate and we blindly dereference it now. I think we had a similar bug some time ago, should still be open.
http://bugs.winehq.org/show_bug.cgi?id=29974
A Wine user RandomAccountName@mail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution| |DUPLICATE
--- Comment #3 from A Wine user RandomAccountName@mail.com 2012-02-22 06:18:19 CST --- Yeah, same thing is mentioned in bug 24823. I'll mark this as a duplicate.
*** This bug has been marked as a duplicate of bug 24823 ***
http://bugs.winehq.org/show_bug.cgi?id=29974
Nikolay Sivov bunglehead@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |UNCONFIRMED Resolution|DUPLICATE |
--- Comment #4 from Nikolay Sivov bunglehead@gmail.com 2012-02-22 06:25:52 CST --- On the second thought could you try the following change:
in MSSTYLES_AddClass() do the following:
--- cur = HeapAlloc(GetProcessHeap(), 0, sizeof(THEME_CLASS)); + cur->tf = NULL; cur->hTheme = tf->hTheme; ---
I don't see it's ever got initialized here, so you probably just get uninit memory access.
--- Comment #5 from A Wine user RandomAccountName@mail.com 2012-02-22 06:46:13 CST --- (In reply to comment #4)
Unfortunately, it still crashes (with the same backtraces) after adding that line.
http://bugs.winehq.org/show_bug.cgi?id=29974
Nikolay Sivov bunglehead@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |NEW Ever confirmed|0 |1
--- Comment #6 from Nikolay Sivov bunglehead@gmail.com --- It looks like application bug that causes that use-after-free:
--- 0022:Call ntdll.RtlFreeHeap(00cb0000,00000000,01240be0) ret=0056adfe 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=0056adfe ... 0022:Call uxtheme.CloseThemeData(01240be0) ret=005f4f89 0022:trace:uxtheme:CloseThemeData (0x1240be0) 0022:err:uxtheme:MSSTYLES_CloseThemeClass 0xfeeefeee ---
but native seems to deal with that just fine. This needs more testing regarding what HTHEME really is. Confirming.
https://bugs.winehq.org/show_bug.cgi?id=29974
super_man@post.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |super_man@post.com
--- Comment #7 from super_man@post.com --- What was the version used? I don't see view menu. This program says that its already 15.5V.
https://bugs.winehq.org/show_bug.cgi?id=29974
--- Comment #8 from A Wine user awineuser@mail.com --- (In reply to super_man from comment #7)
What was the version used?
I used StarBurn version 13.
sha256sum StarBurnSetup.exe 0fecc4e4896f7a06a7b64d2492477054f01ba6adedb95ff89492a300482299e6 StarBurnSetup.exe
Still present in wine-5.2.
https://bugs.winehq.org/show_bug.cgi?id=29974
A Wine user awineuser@mail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- URL|http://www.starburnsoftware |https://web.archive.org/web |.com/products/starburn/down |/20120113141750/http://www. |load/download-starburn-free |starburnsoftware.com/produc | |ts/downloads/StarBurnSetup. | |exe
https://bugs.winehq.org/show_bug.cgi?id=29974
A Wine user awineuser@mail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|StarBurn crashes on |StarBurn 13 crashes on |disabling skins |disabling skins
--- Comment #9 from A Wine user awineuser@mail.com --- Still present in wine-6.14-212-g2cc98b72846.
https://bugs.winehq.org/show_bug.cgi?id=29974
Zhiyi Zhang zzhang@codeweavers.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |zzhang@codeweavers.com
https://bugs.winehq.org/show_bug.cgi?id=29974
Zhiyi Zhang zzhang@codeweavers.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |113eca095a33693c18323275c7b | |d420888914837 Resolution|--- |FIXED Status|NEW |RESOLVED
--- Comment #10 from Zhiyi Zhang zzhang@codeweavers.com --- Fixed by 113eca095a33693c18323275c7bd420888914837
https://bugs.winehq.org/show_bug.cgi?id=29974
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #11 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 7.21.
-
wine-bugs＠winehq.org -
WineHQ Bugzilla