[Bug 30588] New: Houdini: Segmentation fault at startup

http://bugs.winehq.org/show_bug.cgi?id=30588

Bug #: 30588
           Summary: Houdini: Segmentation fault at startup
           Product: Wine
           Version: 1.5.3
          Platform: x86
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: -unknown
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

Created attachment 40020
  --> http://bugs.winehq.org/attachment.cgi?id=40020
Segmentation fault window

Steps to reproduce:
1) remove ~/.wine
2) install Houdini
3) wine houdini.exe

Behaviour:
Segmentation fault. (See attachment)

Expected behaviour:
No segmentation fault.

Terminal output:
fixme:win:EnumDisplayDevicesW ((null),0,0x441f0e8,0x00000000), stub!
fixme:win:EnumDisplayDevicesW ((null),1,0x441f0e8,0x00000000), stub!
fixme:win:EnumDisplayDevicesW ((null),0,0x442e1c0,0x00000000), stub!
fixme:win:EnumDisplayDevicesW ((null),1,0x442e1c0,0x00000000), stub!
fixme:win:EnumDisplayDevicesW ((null),0,0x461e910,0x00000000), stub!
fixme:win:EnumDisplayDevicesW ((null),1,0x461e910,0x00000000), stub!

[Bug 30588] Houdini: Segmentation fault at startup

http://bugs.winehq.org/show_bug.cgi?id=30588

--- Comment #1 from NSLW  2012-05-04 00:34:27 CDT ---
Created attachment 40021
  --> http://bugs.winehq.org/attachment.cgi?id=40021
WINEDEBUG=+relay,+seh,+tid on wine-1.5.3-73-g93a0ca7

[Bug 30588] Houdini: Segmentation fault at startup

http://bugs.winehq.org/show_bug.cgi?id=30588

NSLW  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download
                URL|                            |http://www.sidefx.com/index
                   |                            |.php?option=com_download&ta
                   |                            |sk=apprentice&Itemid=208

[Bug 30588] Houdini 12.x (3D animation tool) crashes on startup

http://bugs.winehq.org/show_bug.cgi?id=30588

Anastasius Focht  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
                 CC|                            |[e-mail]
          Component|-unknown                    |user32
            Summary|Houdini: Segmentation fault |Houdini 12.x (3D animation
                   |at startup                  |tool) crashes on startup
     Ever Confirmed|0                           |1

--- Comment #2 from Anastasius Focht  2012-05-04 06:17:02 CDT ---
Hello,

confirming.
It seems the app inserts menu some items with text and bitmap and retrieves
them later.
On retrieval of menu items that have both, text and bitmap associated it
crashes at one point because data is accessed as string (bitmap type).

--- snip ---
$ pwd
/home/focht/.wine/drive_c/Program Files/Side Effects Software/Houdini
12.0.581/bin

$ WINEDEBUG=+tid,+seh,+menu wine ./hkey

003b:trace:menu:InsertMenuItemA hmenu 0x100ac, item 0000, by pos 1, info
0x441df54
003b:trace:menu:MENU_InsertItem inserting at 0 flags 400
003b:trace:menu:do_debug_print_menuitem SetMenuItemInfo_common from:  { ID=0x0
} 
003b:trace:menu:do_debug_print_menuitem SetMenuItemInfo_common to :  { ID=0x20,
State=check, Text=L"Always On Top", ItemData=0x000100a8 } 
003b:trace:menu:InsertMenuItemA hmenu 0x100ac, item 0001, by pos 1, info
0x441df54
003b:trace:menu:MENU_InsertItem inserting at 1 flags 400
003b:trace:menu:do_debug_print_menuitem SetMenuItemInfo_common from:  { ID=0x0
} 
003b:trace:menu:do_debug_print_menuitem SetMenuItemInfo_common to :  { ID=0x0,
fType=sep } 
003b:trace:menu:do_debug_print_menuitem GetMenuItemInfo_common:  { ID=0x20,
State=check, Text=L"Always On Top", ItemData=0x000100a8 } 
003b:trace:menu:do_debug_print_menuitem GetMenuItemInfo_common:  { ID=0x20,
State=check, Text=L"Always On Top", ItemData=0x000100a8 } 
003b:trace:menu:do_debug_print_menuitem GetMenuItemInfo_common:  { ID=0x0,
fType=sep } 
003b:trace:menu:do_debug_print_menuitem GetMenuItemInfo_common:  { ID=0xf120,
Text=L"&Restore", hbitmap=HBMMENU_POPUP_RESTORE } 
003b:trace:menu:do_debug_print_menuitem GetMenuItemInfo_common:  { ID=0xf120,
Text=L"&Restore", hbitmap=HBMMENU_POPUP_RESTORE } 
003b:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7855b4c8
ip=7855b4c8 tid=003b
003b:trace:seh:raise_exception  info[0]=00000000
003b:trace:seh:raise_exception  info[1]=00000009
003b:trace:seh:raise_exception  eax=00000900 ebx=00000009 ecx=00000009
edx=00000009 esi=05b76740 edi=000100ac
003b:trace:seh:raise_exception  ebp=00000002 esp=0441df24 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00010202
--- snip ---

Dump of last calls to GetMenuItemInfo() before returning to caller:

--- snip ---
Wine-dbg>p *lpmii
{cbSize=0x30, fMask=0x10, fType=0, fState=0, wID=0x20, hSubMenu=(nil),
hbmpChecked=(nil), hbmpUnchecked=(nil), dwItemData=0x40096,
dwTypeData=0x0(nil), cch=0xd, hbmpItem=(nil)}

Wine-dbg>p *lpmii
{cbSize=0x30, fMask=0x10, fType=0, fState=0, wID=0x20, hSubMenu=(nil),
hbmpChecked=(nil), hbmpUnchecked=(nil), dwItemData=0x40096, dwTypeData="Always
On Top", cch=0xd, hbmpItem=(nil)}

Wine-dbg>p *lpmii
{cbSize=0x30, fMask=0x10, fType=0x800, fState=0, wID=0x20, hSubMenu=(nil),
hbmpChecked=(nil), hbmpUnchecked=(nil), dwItemData=0x40096,
dwTypeData=0x0(nil), cch=0, hbmpItem=(nil)}

Wine-dbg>p *lpmii
{cbSize=0x30, fMask=0x10, fType=0x4, fState=0, wID=0x20, hSubMenu=(nil),
hbmpChecked=(nil), hbmpUnchecked=(nil), dwItemData=0x40096, dwTypeData=***
invalid address 0x9 ***, cch=0x8, hbmpItem=0x9}

Wine-dbg>p *lpmii
{cbSize=0x30, fMask=0x10, fType=0x4, fState=0, wID=0x20, hSubMenu=(nil),
hbmpChecked=(nil), hbmpUnchecked=(nil), dwItemData=0x40096, dwTypeData=***
invalid address 0x9 ***, cch=0x8, hbmpItem=0x9}
--- snip ---

The last one is accessed as "string" data, causing a page fault in strchr():

--- snip ---
003b:Call user32.GetMenuItemInfoA(000100ac,00000002,00000001,0441df54)
ret=05b8f0c8
003b:Ret  user32.GetMenuItemInfoA() retval=00000001 ret=05b8f0c8
003b:Call user32.GetMenuItemInfoA(000100ac,00000002,00000001,0441df54)
ret=05b8f078
003b:Ret  user32.GetMenuItemInfoA() retval=00000001 ret=05b8f078
003b:CALL MSVCR90.strchr(00000009,00000009) ret=05b8f085
003b:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7855b4c8
ip=7855b4c8 tid=003b
003b:trace:seh:raise_exception  info[0]=00000000
003b:trace:seh:raise_exception  info[1]=00000009
003b:trace:seh:raise_exception  eax=00000900 ebx=00000009 ecx=00000000
edx=00000009 esi=05e66740 edi=000100ac
003b:trace:seh:raise_exception  ebp=00000002 esp=0441df24 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00010202
003b:trace:seh:call_stack_handlers calling handler at 0x5b95f6c code=c0000005
flags=0
--- snip ---

0x0 = MFT_STRING
0x4 = MFT_BITMAP
0x800 = MFT_SEPARATOR

$ du -sh houdini-12.0.581-win32-vc9.exe 
218M    houdini-12.0.581-win32-vc9.exe

$ sha1sum houdini-12.0.581-win32-vc9.exe 
b475599d669d35b6af9016726f1ef933caaf92a4  houdini-12.0.581-win32-vc9.exe

$ wine --version
wine-1.5.3-143-g081b06c

Regards

[Bug 30588] Houdini 12.x (3D animation tool) crashes on startup

http://bugs.winehq.org/show_bug.cgi?id=30588

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #3 from [e-mail] ---
I used this link http://www.idg.pl/ftp/pobierz/pc/31483.html (its english
installer)

fixme:service:scmdatabase_autostart_services Auto-start service
L"HoudiniLicenseServer" failed to start: 2
fixme:service:scmdatabase_autostart_services Auto-start service
L"HoudiniServer" failed to start: 2
fixme:win:EnumDisplayDevicesW ((null),0,0x441f228,0x00000000), stub!
fixme:win:EnumDisplayDevicesW ((null),1,0x441f228,0x00000000), stub!
UT_NetPacket::write: No such file or directory

It opens error box with message: Lisence error: incorrect version of hserver
detected (or problems with a connection to hserver).

wine 1.7.22

Any ideas?

[Bug 30588] Houdini 12.x (3D animation tool) crashes on startup

http://bugs.winehq.org/show_bug.cgi?id=30588

--- Comment #4 from [e-mail] ---
Created attachment 49113
  --> http://bugs.winehq.org/attachment.cgi?id=49113
WINEDEBUG=+tid,+seh,+menu wine ./hkey 1.7.22

I rerun with focht's command

[Bug 30588] Houdini 12.x (3D animation tool) crashes on startup

https://bugs.winehq.org/show_bug.cgi?id=30588

--- Comment #5 from Dmitry Timoshkov  ---
The following patches should fix this bug:

https://www.winehq.org/pipermail/wine-patches/2015-November/144638.html
https://www.winehq.org/pipermail/wine-patches/2015-November/144639.html

[Bug 30588] Houdini 12.x (3D animation tool) crashes on startup

https://bugs.winehq.org/show_bug.cgi?id=30588

--- Comment #6 from Dmitry Timoshkov  ---
Just for the record: it's the existing system menu items with "magic" bitmap
ids that cause this bug.

[Bug 30588] Houdini 12.x (3D animation tool) crashes on startup

https://bugs.winehq.org/show_bug.cgi?id=30588

Dmitry Timoshkov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
      Fixed by SHA1|                            |c0de7f8641f61e8e48ce8a2fa4c
                   |                            |6e7921eb1f313
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #7 from Dmitry Timoshkov  ---
Should be fixed by c0de7f8641f61e8e48ce8a2fa4c6e7921eb1f313.

[Bug 30588] Houdini 12.x (3D animation tool) crashes on startup

https://bugs.winehq.org/show_bug.cgi?id=30588

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #8 from Alexandre Julliard  ---
Closing bugs fixed in 1.8-rc1.

[Bug 30588] Houdini 12.x (3D animation tool) crashes on startup

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=30588

Anastasius Focht  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|http://www.sidefx.com/index |https://web.archive.org/web
                   |.php?option=com_download&ta |/20211208082207/https://ido
                   |sk=apprentice&Itemid=208    |wnload.idg.pl/zx/vol2/w95/m
                   |                            |ultimedia/houdiniapprentice
                   |                            |/houdini-12.0.581-win32-vc9
                   |                            |.exe?md5=56htah6YtER3r-4Y8V
                   |                            |RsAA&expires=1638952190

--- Comment #9 from Anastasius Focht  ---
Hello folks,

adding stable download link via Internet Archive for documentation.

https://web.archive.org/web/20211208082207/https://idownload.idg.pl/zx/vol2/...

https://www.virustotal.com/gui/file/9e23e0628e245d91e4f54b0f63fe78a03a667915...

64-bit Houdini just in case:

https://web.archive.org/web/20211208082452/https://idownload.idg.pl/zx/vol2/...

$ sha1sum houdini-12.0.581-win*
b475599d669d35b6af9016726f1ef933caaf92a4  houdini-12.0.581-win32-vc9.exe
6f27d8d7ad2afde8bc1638d100e0a1ce86c15d51  houdini-12.0.581-win64-vc9.exe

$ du -sh houdini-12.0.581-win*
218M    houdini-12.0.581-win32-vc9.exe
232M    houdini-12.0.581-win64-vc9.exe

Regards