http://bugs.winehq.org/show_bug.cgi?id=23455
Summary: Using Filealyzer with wine o DLLs or EXE files causes an application error Product: Wine Version: 1.1.43 Platform: x86 URL: http://www.safer-networking.org/en/filealyzer/index.ht ml OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs@winehq.org ReportedBy: nil094@yahoo.com
Created an attachment (id=29272) --> (http://bugs.winehq.org/attachment.cgi?id=29272) Console output
Using Filealyzer with wine on DLLs or EXE Files causes an internal application error (see screenshot) in Filealyzer. This happens with any DLL or EXE File. It doesn't happen on Windows XP (SP2), though.
http://bugs.winehq.org/show_bug.cgi?id=23455
--- Comment #1 from Sebastian nil094@yahoo.com 2010-06-30 16:47:42 --- Created an attachment (id=29273) --> (http://bugs.winehq.org/attachment.cgi?id=29273) error screenshot
http://bugs.winehq.org/show_bug.cgi?id=23455
Dmitry Timoshkov dmitry@codeweavers.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|Using Filealyzer with wine |Filealyzer can't load PE |o DLLs or EXE files causes |images |an application error |
--- Comment #2 from Dmitry Timoshkov dmitry@codeweavers.com 2010-07-01 00:07:09 ---
fixme:imagehlp:ImageLoad (/home/nil/wine/windows/system32/kernel32.dll, ): stub
I suspect that it will fail to load any other PE image.
http://bugs.winehq.org/show_bug.cgi?id=23455
--- Comment #3 from Sebastian nil094@yahoo.com 2010-07-02 06:12:08 --- (In reply to comment #2)
fixme:imagehlp:ImageLoad (/home/nil/wine/windows/system32/kernel32.dll, ): stub
I suspect that it will fail to load any other PE image.
What makes you think that? is imagehlp.dll:ImageLoad broken or not implemented? :(
http://bugs.winehq.org/show_bug.cgi?id=23455
Alexander Scott-Johns alexander.scott.johns+winebug@googlemail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |alexander.scott.johns+wineb | |ug@googlemail.com
--- Comment #4 from Alexander Scott-Johns alexander.scott.johns+winebug@googlemail.com 2010-07-03 14:41:38 --- (In reply to comment #3)
(In reply to comment #2)
fixme:imagehlp:ImageLoad (/home/nil/wine/windows/system32/kernel32.dll, ): > > > stub
I suspect that it will fail to load any other PE image.
What makes you think that? is imagehlp.dll:ImageLoad broken or not implemented? :(
stub = unimplemented
http://bugs.winehq.org/show_bug.cgi?id=23455
Vincent Povirk madewokherd@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Component|-unknown |imagehlp
http://bugs.winehq.org/show_bug.cgi?id=23455
Vincent Povirk madewokherd@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download
http://bugs.winehq.org/show_bug.cgi?id=23455
--- Comment #5 from Vincent Povirk madewokherd@gmail.com 2010-07-27 15:56:50 --- Just loading a file seems to start at the General tab which works OK, but most of the other tabs are trouble. Which one were you using when it crashed?
http://bugs.winehq.org/show_bug.cgi?id=23455
Vincent Povirk madewokherd@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Component|imagehlp |-unknown
http://bugs.winehq.org/show_bug.cgi?id=23455
--- Comment #6 from Vincent Povirk madewokherd@gmail.com 2010-07-27 17:16:34 --- The app seems to expect ImageLoad to actually load the file like MapAndLoad (it accesses the Section attribute of the returned structure), but hacking the stub to actually call MapAndLoad doesn't change the behavior. I don't think it's an imagehlp bug (yet).
http://bugs.winehq.org/show_bug.cgi?id=23455
--- Comment #7 from Sebastian nil094@yahoo.com 2010-08-02 13:53:17 --- (In reply to comment #5)
Just loading a file seems to start at the General tab which works OK, but most of the other tabs are trouble. Which one were you using when it crashed?
File -> Open.
When starting FileAlyzer, it would automatically open a filebrowser and ask for a File.
http://bugs.winehq.org/show_bug.cgi?id=23455
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |NEW URL|http://www.safer-networking |http://www.spybotupdates.bi |.org/en/filealyzer/index.ht |z/files/filealyz-1.6.0.4.ex |ml |e Component|-unknown |imagehlp CC| |focht@gmx.net Ever Confirmed|0 |1 Summary|Filealyzer can't load PE |FileAlyzer 1.6.0.4 can't |images |load PE images (needs | |imagehlp.ImageLoad and | |imagehlp.ImageUnload | |implementation)
--- Comment #8 from Anastasius Focht focht@gmx.net 2011-11-22 15:56:14 CST --- Hello,
confirming, still present. Looking at screenshot from comment #1, app version 1.6.0.4 is the culprit.
Newer 2.x versions seem to work better.
--- snip --- 0023:Call imagehlp.ImageLoad(00ac46d8 "DelZip179.dll",00a705d8 "C:\Program Files (x86)\Safer Networking\FileAlyzer\") ret=005a39f5 0023:fixme:imagehlp:ImageLoad (DelZip179.dll, C:\Program Files (x86)\Safer Networking\FileAlyzer): stub 0023:Call ntdll.RtlAllocateHeap(0077c000,00000000,00000030) ret=68d8446b 0023:Ret ntdll.RtlAllocateHeap() retval=0077c138 ret=68d8446b 0023:Call ntdll.RtlAllocateHeap(0077c000,00000000,000000f8) ret=68d84495 0023:Ret ntdll.RtlAllocateHeap() retval=0077c170 ret=68d84495 0023:Ret imagehlp.ImageLoad() retval=0077c138 ret=005a39f5 0023:trace:seh:raise_exception code=c0000005 flags=0 addr=0x5a3a26 ip=005a3a26 tid=0023 0023:trace:seh:raise_exception info[0]=00000000 0023:trace:seh:raise_exception info[1]=0000000c 0023:trace:seh:raise_exception eax=00000000 ebx=00ad3218 ecx=0077c138 edx=00000000 esi=00000000 edi=00000000 0023:trace:seh:raise_exception ebp=0032ddd0 esp=0032dd90 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00210246 0023:trace:seh:call_vectored_handlers calling handler at 0x72f7ee66 code=c0000005 flags=0 0023:trace:seh:call_vectored_handlers handler at 0x72f7ee66 returned 0 0023:trace:seh:call_stack_handlers calling handler at 0x5a3a72 code=c0000005 flags=0 --- snip ---
The Delphi app uses madExcept library which gives some insight what it tried to do (reading PE header):
--- snip --- main thread ($9): 00668cdd +7e9 FileAlyzer.exe FormUnitFileAlyzerMain 2319 +89 TformFileAlyzerMain.ReadPEHeader 00678baa +082 FileAlyzer.exe FormUnitFileAlyzerMain 5320 +10 TformFileAlyzerMain.ActivateTab 00678f84 +0c0 FileAlyzer.exe FormUnitFileAlyzerMain 5403 +9 TformFileAlyzerMain.pcMainChange 004d62b1 +015 FileAlyzer.exe ComCtrls 4421 +1 TCustomTabControl.Change 004d7695 +041 FileAlyzer.exe ComCtrls 5169 +8 TPageControl.Change ... --- snip ---
If you implement ImageLoad (MapAndLoad) and ImageUnload (UnMapAndLoad) the app displays PE header/section info properly.
--- snip --- 0041:Call imagehlp.ImageLoad(00acd528 "DelZip179.dll",00a692a8 "C:\Program Files (x86)\Safer Networking\FileAlyzer\") ret=005a39f5 0041:fixme:imagehlp:ImageLoad (DelZip179.dll, C:\Program Files (x86)\Safer Networking\FileAlyzer): stub 0041:Call ntdll.RtlAllocateHeap(0077c000,00000000,00000030) ret=6c5c446b 0041:Ret ntdll.RtlAllocateHeap() retval=0077c138 ret=6c5c446b 0041:trace:imagehlp:MapAndLoad (DelZip179.dll, C:\Program Files (x86)\Safer Networking\FileAlyzer, 0x77c138, 1, 0) 0041:Call KERNEL32.SearchPathA(00a692a8 "C:\Program Files (x86)\Safer Networking\FileAlyzer\",00acd528 "DelZip179.dll",6c5c7c88 ".DLL",00000104,0032db60,00000000) ret=6c5c46fb 0041:Ret KERNEL32.SearchPathA() retval=00000040 ret=6c5c46fb 0041:Call KERNEL32.CreateFileA(0032db60 "C:\Program Files (x86)\Safer Networking\FileAlyzer\DelZip179.dll",c0000000,00000001,00000000,00000003,00000000,00000000) ret=6c5c4763 0041:Ret KERNEL32.CreateFileA() retval=000000e4 ret=6c5c4763 0041:Call KERNEL32.CreateFileMappingA(000000e4,00000000,08000004,00000000,00000000,00000000) ret=6c5c4813 0041:Ret KERNEL32.CreateFileMappingA() retval=000000e8 ret=6c5c4813 0041:Call KERNEL32.MapViewOfFile(000000e8,00000002,00000000,00000000,00000000) ret=6c5c48bb 0041:Ret KERNEL32.MapViewOfFile() retval=029c0000 ret=6c5c48bb 0041:Call KERNEL32.CloseHandle(000000e8) ret=6c5c48cc 0041:Ret KERNEL32.CloseHandle() retval=00000001 ret=6c5c48cc 0041:Call ntdll.RtlImageNtHeader(029c0000) ret=6c5c4943 0041:Ret ntdll.RtlImageNtHeader() retval=029c0200 ret=6c5c4943 0041:Call ntdll.RtlAllocateHeap(00110000,00000000,00000041) ret=6c5c49fa 0041:Ret ntdll.RtlAllocateHeap() retval=027e2d68 ret=6c5c49fa 0041:Call KERNEL32.GetFileSize(000000e4,00000000) ret=6c5c4a78 0041:Ret KERNEL32.GetFileSize() retval=0003e5a0 ret=6c5c4a78 0041:Ret imagehlp.ImageLoad() retval=0077c138 ret=005a39f5 ... 0041:Call imagehlp.ImageUnload(0077c138) ret=005a3a68 0041:trace:imagehlp:ImageUnload (0x77c138) 0041:Call ntdll.RtlFreeHeap(00110000,00000000,027e2d68) ret=6c5c4baa 0041:Ret ntdll.RtlFreeHeap() retval=00000001 ret=6c5c4baa 0041:Call KERNEL32.UnmapViewOfFile(029c0000) ret=6c5c4bc5 0041:Ret KERNEL32.UnmapViewOfFile() retval=00000001 ret=6c5c4bc5 0041:Call KERNEL32.CloseHandle(000000e4) ret=6c5c4be1 0041:Ret KERNEL32.CloseHandle() retval=00000001 ret=6c5c4be1 0041:Ret imagehlp.ImageUnload() retval=00000000 ret=005a3a68 --- snip ---
$ wine --version wine-1.3.33-62-g35b9c42
$ sha1sum filealyz-1.6.0.4.exe a06a60694c76bef76abe652454de8ef45475044f filealyz-1.6.0.4.exe
Regards
https://bugs.winehq.org/show_bug.cgi?id=23455
--- Comment #9 from Austin English austinenglish@gmail.com --- The same in wine-1.7.11-272-gc7a11f9
https://bugs.winehq.org/show_bug.cgi?id=23455
Sebastian Lackner sebastian@fds-team.de changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |sebastian@fds-team.de
https://bugs.winehq.org/show_bug.cgi?id=23455
super_man@post.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |super_man@post.com
--- Comment #10 from super_man@post.com --- I have an issue to reproduce the issue, getting similar error like in screenshot.
But I did try this program with staging too and it seems to correctly read the PE header. I just tried 1 file with both pure wine and staging.
I didnt try to figure out what patch fixes it, but these should help since they are related.
https://github.com/wine-compholio/wine-staging/tree/master/patches/imagehlp-...
wine 1.7.50(git)
https://bugs.winehq.org/show_bug.cgi?id=23455
Michael Müller michael@fds-team.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |STAGED CC| |michael@fds-team.de Staged patchset| |https://github.com/wine-com | |pholio/wine-staging/tree/ma | |ster/patches/imagehlp-Clean | |up
https://bugs.winehq.org/show_bug.cgi?id=23455
Bruno Jesus 00cpxxx@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |e39@free.fr
--- Comment #11 from Bruno Jesus 00cpxxx@gmail.com --- *** Bug 14646 has been marked as a duplicate of this bug. ***
https://bugs.winehq.org/show_bug.cgi?id=23455
Austin English austinenglish@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |patch
https://bugs.winehq.org/show_bug.cgi?id=23455
Matteo Bruni matteo.mystral@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |buliinwhite@gmail.com
--- Comment #12 from Matteo Bruni matteo.mystral@gmail.com --- *** Bug 44048 has been marked as a duplicate of this bug. ***
https://bugs.winehq.org/show_bug.cgi?id=23455
André H. nerv@dawncrow.de changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |nerv@dawncrow.de Staged patchset|https://github.com/wine-com |https://github.com/wine-sta |pholio/wine-staging/tree/ma |ging/wine-staging/tree/mast |ster/patches/imagehlp-Clean |er/patches/imagehlp-Cleanup |up |
https://bugs.winehq.org/show_bug.cgi?id=23455
Louis Lenders xerox.xerox2000x@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |xerox.xerox2000x@gmail.com
--- Comment #13 from Louis Lenders xerox.xerox2000x@gmail.com --- Created attachment 62550 --> https://bugs.winehq.org/attachment.cgi?id=62550 screenshot of the error in affinity-designer installer
Screenshot of the error in affinity-installer-1.6.5.123
Messagebox: Exception ResourceSection::ResourceSection
https://bugs.winehq.org/show_bug.cgi?id=23455
Louis Lenders xerox.xerox2000x@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|FileAlyzer 1.6.0.4 can't |FileAlyzer 1.6.0.4, |load PE images (needs |Affinity-installer-1.6.5.12 |imagehlp.ImageLoad and |3 can't load PE images |imagehlp.ImageUnload |(needs imagehlp.ImageLoad |implementation) |and imagehlp.ImageUnload | |implementation)
--- Comment #14 from Louis Lenders xerox.xerox2000x@gmail.com --- updated some info
https://bugs.winehq.org/show_bug.cgi?id=23455
Brian tehstealth@yahoo.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |tehstealth@yahoo.com
https://bugs.winehq.org/show_bug.cgi?id=23455
--- Comment #15 from Brian tehstealth@yahoo.com ---
0009:fixme:imagehlp:ImageLoad (affinity-designer-1.6.5.135.exe, (null)): stub
This is still the case on Wine 4.0
https://bugs.winehq.org/show_bug.cgi?id=23455
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|STAGED |RESOLVED Fixed by SHA1| |55a62c739c02135d18aa5af6ede | |304465cb0e030 URL|http://www.spybotupdates.bi |https://web.archive.org/web |z/files/filealyz-1.6.0.4.ex |/20111211082540/http://www. |e |spybotupdates.biz/files/fil | |ealyz-1.6.0.4.exe
--- Comment #16 from Anastasius Focht focht@gmx.net --- Hello folks,
this is fixed by commit https://source.winehq.org/git/wine.git/commitdiff/55a62c739c02135d18aa5af6ed... ("imagehlp: Implement ImageLoad and cleanup ImageUnload.")
Thanks Michael, Vijay (picking them up), Mark (tests).
Original download link/site seems to be down. I've replaced it with a stable one from Internet archive.
https://web.archive.org/web/20111211082540/http://www.spybotupdates.biz/file...
App works well now.
--- snip --- $ pwd /home/focht/.wine/drive_c/Program Files (x86)/Safer Networking/FileAlyzer
$ WINEDEBUG=+seh,+relay,+imagehlp wine ./FileAlyzer.exe >>log.txt 2>&1 ... 002e:Call imagehlp.ImageLoad(009beb88 "DelZip179.dll",00968bc8 "C:\Program Files (x86)\Safer Networking\FileAlyzer\") ret=005a39f5 002e:trace:imagehlp:ImageLoad (DelZip179.dll, C:\Program Files (x86)\Safer Networking\FileAlyzer) 002e:Call ntdll.RtlAllocateHeap(00110000,00000000,00000030) ret=7e1cbc54 002e:Ret ntdll.RtlAllocateHeap() retval=001a3088 ret=7e1cbc54 002e:trace:imagehlp:MapAndLoad (DelZip179.dll, C:\Program Files (x86)\Safer Networking\FileAlyzer, 0x1a3088, 1, 1) 002e:Call KERNEL32.SearchPathA(00968bc8 "C:\Program Files (x86)\Safer Networking\FileAlyzer\",009beb88 "DelZip179.dll",7e1ce8f2 ".DLL",00000104,0033e490,00000000) ret=7e1cbe8d 002e:Ret KERNEL32.SearchPathA() retval=00000040 ret=7e1cbe8d 002e:Call KERNEL32.CreateFileA(0033e490 "C:\Program Files (x86)\Safer Networking\FileAlyzer\DelZip179.dll",80000000,00000001,00000000,00000003,00000000,00000000) ret=7e1cbed5 002e:Ret KERNEL32.CreateFileA() retval=00000120 ret=7e1cbed5 002e:Call KERNEL32.CreateFileMappingA(00000120,00000000,08000002,00000000,00000000,00000000) ret=7e1cbf58 002e:Ret KERNEL32.CreateFileMappingA() retval=00000124 ret=7e1cbf58 002e:Call KERNEL32.MapViewOfFile(00000124,00000004,00000000,00000000,00000000) ret=7e1cbfd9 002e:Ret KERNEL32.MapViewOfFile() retval=03440000 ret=7e1cbfd9 002e:Call KERNEL32.CloseHandle(00000124) ret=7e1cbfea 002e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1cbfea 002e:Call ntdll.RtlImageNtHeader(03440000) ret=7e1cc04f 002e:Ret ntdll.RtlImageNtHeader() retval=03440200 ret=7e1cc04f 002e:Call ntdll.RtlAllocateHeap(00110000,00000000,00000041) ret=7e1cc0d6 002e:Ret ntdll.RtlAllocateHeap() retval=022343b0 ret=7e1cc0d6 002e:Call KERNEL32.GetFileSize(00000120,00000000) ret=7e1cc151 002e:Ret KERNEL32.GetFileSize() retval=0003e5a0 ret=7e1cc151 002e:Ret imagehlp.ImageLoad() retval=001a3088 ret=005a39f5 002e:Call imagehlp.ImageUnload(001a3088) ret=005a3a68 002e:trace:imagehlp:ImageUnload (0x1a3088) 002e:Call ntdll.RtlFreeHeap(00110000,00000000,022343b0) ret=7e1cc276 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1cc276 002e:Call KERNEL32.UnmapViewOfFile(03440000) ret=7e1cc290 002e:Ret KERNEL32.UnmapViewOfFile() retval=00000001 ret=7e1cc290 002e:Call KERNEL32.CloseHandle(00000120) ret=7e1cc2ab 002e:Ret KERNEL32.CloseHandle() retval=00000001 ret=7e1cc2ab 002e:Call ntdll.RtlFreeHeap(00110000,00000000,001a3088) ret=7e1cbdcf 002e:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e1cbdcf 002e:Ret imagehlp.ImageUnload() retval=00000001 ret=005a3a68 ... --- snip ---
$ sha1sum filealyz-1.6.0.4.exe a06a60694c76bef76abe652454de8ef45475044f filealyz-1.6.0.4.exe
$ du -sh filealyz-1.6.0.4.exe 2.9M filealyz-1.6.0.4.exe
$ wine --version wine-4.4-232-gc7f323107b
Regards
https://bugs.winehq.org/show_bug.cgi?id=23455
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #17 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 4.5.
https://bugs.winehq.org/show_bug.cgi?id=23455
Michael Stefaniuc mstefani@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |4.0.x
https://bugs.winehq.org/show_bug.cgi?id=23455
Michael Stefaniuc mstefani@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|4.0.x |---
--- Comment #18 from Michael Stefaniuc mstefani@winehq.org --- Removing the 4.0.x milestone from bug fixes included in 4.0.2.