[Bug 24131] New: HEAP corruption in-between 1.3.0~1.3.1-135

http://bugs.winehq.org/show_bug.cgi?id=24131

Summary: HEAP corruption in-between 1.3.0~1.3.1-135
           Product: Wine
           Version: 1.3.1
          Platform: x86
               URL: http://www.pouet.net/prod.php?which=30244
        OS/Version: Linux
            Status: NEW
          Keywords: download, regression
          Severity: normal
          Priority: P2
         Component: -unknown
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
                CC: [e-mail]

This happens to me under "Demoscene fr-041 debris". When i run this
application:

WINEDEBUG=warn+heap wine fr-041_debris.exe

then at the very end i get:
err:heap:HEAP_ValidateInUseArena Heap 0x110000: block 0x113678 tail overwritten
at 0x113b64 (byte 0/12 == 0x44)

There is always the same values "(byte 0/12 == 0x44)"

1. I did a regression test between 1.3.0 and 1.3.1-135:

commit 6120d7cc14522983fbc38026ab4fcb6e4a68cdf0
Author: Jeff Cook 
Date:   Mon Aug 2 17:48:52 2010 -0600

winealsa.drv: Init mixer on cards with a single Mic control, like
snd_usb_audio mics.

:040000 040000 0edca612f774126778453257b9149cf893d32f24
0a9b8d3df5d78d176a69bc52d4ceea22ba2d80cf M      dlls

2. There is another bug report suffering from this commit, see bug 23902.

3. Revert of this patch is not tested yet (time :-/).

4. Adding author of this patch to CC.

--private keyword: bisected

[Bug 24131] HEAP corruption in-between 1.3.0~1.3.1-135

http://bugs.winehq.org/show_bug.cgi?id=24131

--- Comment #1 from Wylda   2010-08-25 00:42:29 ---
Confirmed. Revert makes that problem go a way.

[Bug 24131] HEAP corruption in-between 1.3.0~1.3.1-135

http://bugs.winehq.org/show_bug.cgi?id=24131

--- Comment #2 from Luca Bennati   2010-08-25 09:19:21 ---
Created an attachment (id=30387)
 --> (http://bugs.winehq.org/attachment.cgi?id=30387)
Log with WINEDEBUG=warn+heap

cannot confirm with latest git: i didn't test with Windows but the scene seemed
to play till the end (be careful that it plays for several minutes)

[Bug 24131] HEAP corruption in-between 1.3.0~1.3.1-135

http://bugs.winehq.org/show_bug.cgi?id=24131

Luca Bennati  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #30387|application/octet-stream    |text/plain
          mime type|                            |

[Bug 24131] HEAP corruption in-between 1.3.0~1.3.1-135

http://bugs.winehq.org/show_bug.cgi?id=24131

--- Comment #3 from Wylda   2010-08-25 09:31:31 ---
(In reply to comment #2)
> cannot confirm with latest git

And how many soundcards do you have? I have two soundcards (onboard + graphics
card's HDMI). The problem is, that i can't turn one completely off, because
both use HD audio driver.

Note to back-trace. I have the same, but after your last line i have
err:heap:HEAP_ValidateInUseArena... in case of applied commit from comment #0.

[Bug 24131] Demoscene fr-041 debris leads to a heap corruption

http://bugs.winehq.org/show_bug.cgi?id=24131

Dmitry Timoshkov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
            Summary|HEAP corruption in-between  |Demoscene fr-041 debris
                   |1.3.0~1.3.1-135             |leads to a heap corruption

[Bug 24131] Demoscene fr-041 debris leads to a heap corruption

http://bugs.winehq.org/show_bug.cgi?id=24131

--- Comment #4 from Luca Bennati   2010-08-26 09:00:56 ---
> And how many soundcards do you have? I have two soundcards (onboard + graphics
> card's HDMI).

Same configuration, but don't know your cards, so i cannot say it's equal.
> Note to back-trace. I have the same, but after your last line i have
> err:heap:HEAP_ValidateInUseArena... in case of applied commit from comment #0.

What should we investigate here?

[Bug 24131] Demoscene fr-041 debris leads to a heap corruption

http://bugs.winehq.org/show_bug.cgi?id=24131

--- Comment #5 from Wylda   2010-08-26 10:56:52 ---
> Same configuration, but don't know your cards, so i cannot say it's equal.

See http://bugs.winehq.org/show_bug.cgi?id=23902#c35

So could you please check, whether any of 2001 SE, Harbinger, Warcraft 3
crashes for you on start up? (For more apps please check associated apps with
bug 23902).

Wild guess: To belong to this bugreport you need to crash for above games/apps.
> What should we investigate here?

Well, i'm not a programmer so this question probably does not belong to me. But
writing to memory which is not mine is bad and could leads to crash like bug
23902. But you can't say they are duplicate (even though they fail on same
commit) till you know what is cause...

Short answer: Land mine was uncovered so it would be pitty to dig it into dust
without investigation.

[Bug 24131] Demoscene fr-041 debris leads to a heap corruption

http://bugs.winehq.org/show_bug.cgi?id=24131

--- Comment #6 from Wylda   2010-08-27 09:01:15 ---

Just for not loosing connectivity with the root of the problem:
http://www.winehq.org/pipermail/wine-devel/2010-August/086261.html

[Bug 24131] Demoscene fr-041 debris leads to a heap corruption

http://bugs.winehq.org/show_bug.cgi?id=24131

--- Comment #7 from Luca Bennati  2010-08-27 14:11:47 CDT ---
Very unlucky situation: the old pc that had the interesting configuration broke
down on me and i can't afford (time and money) to fix/replace it now. My laptop
instead doesn't have an onboard, so it doesn't show the problem...

[Bug 24131] Demoscene fr-041 debris leads to a heap corruption

http://bugs.winehq.org/show_bug.cgi?id=24131

Wylda  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #8 from Wylda  2010-10-15 07:02:33 CDT ---

Tested under wine-1.3.4-387-g7c47a9d & no more heap corruptions.

[Bug 24131] Demoscene fr-041 debris leads to a heap corruption

http://bugs.winehq.org/show_bug.cgi?id=24131

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #9 from Alexandre Julliard  2010-10-15 12:53:10 CDT ---
Closing bugs fixed in 1.3.5.

[Bug 24131] Demoscene fr-041 debris leads to a heap corruption

http://bugs.winehq.org/show_bug.cgi?id=24131

Wylda  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
    Regression SHA1|                            |6120d7cc14522983fbc38026ab4
                   |                            |fcb6e4a68cdf0

[Bug 24131] Demoscene fr-041 debris leads to a heap corruption

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=24131

Anastasius Focht  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]
                URL|http://www.pouet.net/prod.p |https://web.archive.org/web
                   |hp?which=30244              |/20151120234114/http://arch
                   |                            |ive.scene.org/pub/parties/2
                   |                            |007/breakpoint07/demo/fr-04
                   |                            |1_debris.zip