[Bug 8277] Windows Sysinternals Process Explorer and other tools show zero thread start address (NtQueryInformationThread with ThreadQuerySetWin32StartAddress info class)

https://bugs.winehq.org/show_bug.cgi?id=8277

--- Comment #18 from Anastasius Focht  ---
Hello folks,

the main part is now implemented by commit
https://source.winehq.org/git/wine.git/commitdiff/845164004b4b6f2e0c64a588fe...

Thanks Sebastian

For reproducing older versions of Sysinternals Process Explorer are needed.
I found v16.02 from 2014 working.
Most recent one v16.05 crashes before user interface is reached (another
issue).

--- snip ---
Wine-dbg>info process

pid      threads  executable (all id:s are in hex)
 00000021 4        'explorer.exe'
 0000000e 6        'services.exe'
> 0000001a 3        _ 'plugplay.exe'

00000012 4        _ 'winedevice.exe'
 00000008 2        'procexp.exe'

Wine-dbg>info thread

process  tid      prio (all id:s are in hex)
00000008 procexp.exe
    0000002a    0
    00000009    0
...
0000001a (D) C:\windows\system32\plugplay.exe
    00000020    0
    0000001f    0
    0000001b    0 <==
--- snip ---

Selecting Wine's builtin 'plugplay.exe' here as example for thread entry
points.

--- snip ---
Wine-dbg>bt 0x1b

...
16 0x7bc95c99 call_thread_func+0x32(entry=0x7b86e6de, arg=0x7ffdf000,
frame=0x33ffb8)
[/home/focht/projects/wine/wine.repo/src/dlls/ntdll/signal_i386.c:2732] in
ntdll (0x0033ff98)
17 0x7bc95c3a call_thread_entry_point+0x11() in ntdll (0x0033ffb8)
18 0x7bc6a999 start_process+0x23(kernel_start=0x7b86e6de)
[/home/focht/projects/wine/wine.repo/src/dlls/ntdll/loader.c:2873] in ntdll
(0x0033ffe8)
19 0xf75ef701 wine_call_on_stack+0x1c() in libwine.so.1 (0x00000000)
20 0xf75ef6df wine_switch_to_stack+0x1e(func=0x7bc6a975, arg=0x7b86e6de,
stack=0x340000) [/home/focht/projects/wine/wine.repo/src/libs/wine/port.c:59]
in libwine.so.1 (0xffe2cc18)
21 0x7bc6ac7d LdrInitializeThunk+0x2e3(kernel_start=<couldn't compute
location>, unknown2=<couldn't compute location>, unknown3=<couldn't compute
location>, unknown4=<couldn't compute location>)
[/home/focht/projects/wine/wine.repo/src/dlls/ntdll/loader.c:2927] in ntdll
(0xffe2cc98)
22 0x7b86efef __wine_kernel_init+0x625()
[/home/focht/projects/wine/wine.repo/src/dlls/kernel32/process.c:1276] in
kernel32 (0xffe2db48)
23 0x7bc7e51e relay_call+0x39() in ntdll (0xffe2db68)
24 0x7b8321a9 in kernel32 (+0x121a8) (0xffe2dbc8)
25 0x7bc6b3ab __wine_process_init+0x139()
[/home/focht/projects/wine/wine.repo/src/dlls/ntdll/loader.c:3136] in ntdll
(0xffe2dbc8)
26 0xf75ee0b3 wine_init+0x124(argc=0x2, argv=0xffe2e0d4, error="",
error_size=0x400)
[/home/focht/projects/wine/wine.repo/src/libs/wine/loader.c:958] in
libwine.so.1 (0xffe2dc08)
27 0x7bf011aa main+0x132(argc=0x2, argv=0xffe2e0d4)
[/home/focht/projects/wine/wine.repo/src/loader/main.c:247] in <wine-loader>
(0xffe2e038)
28 0xf73e5715 __libc_start_main+0xf4() in libc.so.6 (0x00000000)
...

Wine-dbg>bt 0x1f

Backtrace:
...
  5 0x7bc95c5c call_thread_func_wrapper+0xb() in ntdll (0x0043ea28)
  6 0x7bc95c99 call_thread_func+0x32(entry=0x7ed4037a, arg=0x116a18,
frame=0x43eb28)
[/home/focht/projects/wine/wine.repo/src/dlls/ntdll/signal_i386.c:2732] in
ntdll (0x0043eb08)
  7 0x7bc95c3a call_thread_entry_point+0x11() in ntdll (0x0043eb28)
  8 0x7bc9cca7 start_thread+0x108(info=0x81ffcfb8)
[/home/focht/projects/wine/wine.repo/src/dlls/ntdll/thread.c:443] in ntdll
(0x0043f368)
  9 0xf759f370 start_thread+0xdf() in libpthread.so.0 (0x0043f428)
  10 0xf74c52be __clone+0x5d() in libc.so.6 (0x00000000)
...

Wine-dbg>bt 0x20

Backtrace:
...
  11 0x7bc95c5c call_thread_func_wrapper+0xb() in ntdll (0x0053ea28)
  12 0x7bc95c99 call_thread_func+0x32(entry=0x7ed3feec, arg=0x1157c0,
frame=0x53eb28)
[/home/focht/projects/wine/wine.repo/src/dlls/ntdll/signal_i386.c:2732] in
ntdll (0x0053eb08)
  13 0x7bc95c3a call_thread_entry_point+0x11() in ntdll (0x0053eb28)
  14 0x7bc9cca7 start_thread+0x108(info=0x81ff8fb8)
[/home/focht/projects/wine/wine.repo/src/dlls/ntdll/thread.c:443] in ntdll
(0x0053f368)
  15 0xf759f370 start_thread+0xdf() in libpthread.so.0 (0x0053f428)
  16 0xf74c52be __clone+0x5d() in libc.so.6 (0x00000000)
...
--- snip ---

Display in Process Explorer 'Threads' property page:

--- snip ---
TID   Start Address

32    shlwapi.dll+0x2feec
31    shlwapi.dll+0x3037a
27    0x0
--- snip ---

Trace log:

--- snip ---
...
0031:Call ntdll.NtOpenThread(00eeca94,00000040,00eeca9c,00eeca8c) ret=00448fa3
0031: open_thread( tid=0020, access=00000040, attributes=00000000 )
0031: open_thread() = 0 { handle=01f4 }
0031:Ret  ntdll.NtOpenThread() retval=00000000 ret=00448fa3
0031:Call
ntdll.NtQueryInformationThread(000001f4,00000009,00eecacc,00000004,00eecac4)
ret=00448ffa
0031: get_thread_info( handle=01f4, tid_in=0000 )
0031: get_thread_info() = 0 { pid=001a, tid=0020, teb=81ff8000,
entry_point=7ed3feec, affinity=0000000f, exit_code=259, priority=0, last=0 }
0031:Ret  ntdll.NtQueryInformationThread() retval=00000000 ret=00448ffa
0031:Call KERNEL32.CloseHandle(000001f4) ret=00449004
0031: close_handle( handle=01f4 )
0031: close_handle() = 0
0031:Ret  KERNEL32.CloseHandle() retval=00000001 ret=00449004 
...
0031:Call ntdll.NtOpenThread(00eeca94,00000040,00eeca9c,00eeca8c) ret=00448fa3
0031: open_thread( tid=001f, access=00000040, attributes=00000000 )
0031: open_thread() = 0 { handle=01f8 }
0031:Ret  ntdll.NtOpenThread() retval=00000000 ret=00448fa3
0031:Call
ntdll.NtQueryInformationThread(000001f8,00000009,00eecacc,00000004,00eecac4)
ret=00448ffa
0031: get_thread_info( handle=01f8, tid_in=0000 )
0031: get_thread_info() = 0 { pid=001a, tid=001f, teb=81ffc000,
entry_point=7ed4037a, affinity=0000000f, exit_code=259, priority=0, last=0 }
0031:Ret  ntdll.NtQueryInformationThread() retval=00000000 ret=00448ffa
0031:Call KERNEL32.CloseHandle(000001f8) ret=00449004
0031: close_handle( handle=01f8 )
0031: close_handle() = 0
0031:Ret  KERNEL32.CloseHandle() retval=00000001 ret=00449004 
...
0031: open_thread( tid=001b, access=00000040, attributes=00000000 )
0031: open_thread() = 0 { handle=01fc }
0031:Ret  ntdll.NtOpenThread() retval=00000000 ret=00448fa3
0031:Call
ntdll.NtQueryInformationThread(000001fc,00000009,00eecacc,00000004,00eecac4)
ret=00448ffa
0031: get_thread_info( handle=01fc, tid_in=0000 )
0031: get_thread_info() = 0 { pid=001a, tid=001b, teb=7ffd8000,
entry_point=7ffdf000, affinity=0000000f, exit_code=259, priority=0, last=0 }
0031:Ret  ntdll.NtQueryInformationThread() retval=00000000 ret=00448ffa
0031:Call KERNEL32.CloseHandle(000001fc) ret=00449004
0031: close_handle( handle=01fc )
0031: close_handle() = 0
0031:Ret  KERNEL32.CloseHandle() retval=00000001 ret=00449004 
--- snip ---

After the main thread entry point is fixed (currently still zero), the issue is
finished ;-)

The module name translation is a different issue.

Regards