[Bug 21940] New: Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

Summary: Rise of Legends Demo crashes with null pointer
                    reference in msxml3?
           Product: Wine
           Version: 1.1.40
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: msxml3
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

Once you get past bug 19539, you have to choose to ignore
two BHG errors; the game then starts and runs (though I got
no sound).  Trying to play a campaign crashed for me quickly with
an msxml3 error (which is funny, since I had done winetricks msxml3,
and winecfg shows the override, but the backtrace still shows Wine's msxml3):

Unhandled exception: page fault on read access to 0x00000000 in 32-bit code
(0x7362be22).
Backtrace:
=>0 priv_from_xmlDocPtr+0x6(doc=(nil)) [dlls/msxml3/domdoc.c:127] in msxml3
  1 xmldoc_add_ref+0x1d(doc=(nil)) [dlls/msxml3/domdoc.c:160] in msxml3
  2 init_xmlnode+0x26(This=0x3fb63f8, node=0x7e222980, outer=0x3fb6418,
dispex_data=0x73666dec) [dlls/msxml3/node.c:1714] in msxml3
  3 create_element+0x6c(element=0x7e222980) [dlls/msxml3/element.c:797] in
msxml3d
  4 create_node+0x9d(node=0x7e222980) [dlls/msxml3/node.c:1736] in msxml3
  5 queryresult_nextNode+0xdf(iface=0x3ff1120, nextItem=0x32ad60)
[dlls/msxml3/queryresult.c:267] in msxml3
  6 xmlnode_selectSingleNode+0xd3(iface=0x1e9510, kqueryString="TRIBE_MASK",
resultNode=0x32ad60) [dlls/msxml3/node.c:1542] in msxml3
  7 in legends (+0x6f34c) (0x0032b2dc)
  ...
0x7362be22 priv_from_xmlDocPtr+0x6 [dlls/msxml3/domdoc.c:127] in msxml3: movl  
 0x0(%eax),%eax
127        return doc->_private;

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

Nikolay Sivov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
         Depends on|                            |19539

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #1 from Nikolay Sivov   2010-05-24 15:12:48 ---
Dan, could you get a +msxml for that?

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #2 from Nikolay Sivov   2010-06-11 17:30:58 ---
Still waiting for +msxml (with 1.2-rc3). I can't test in game parts, don't have
a working 3D setup.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #3 from Wylda   2010-06-12 12:47:04 ---
Created an attachment (id=28775)
 --> (http://bugs.winehq.org/attachment.cgi?id=28775)
console log from wine-1.2-rc3 +msxml

(In reply to comment #2)
> Still waiting for +msxml (with 1.2-rc3). I can't test in game parts, don't have
> a working 3D setup.

Hi Nikolay, there is a log +msxml from 1.2-rc3. The game crashes, when i click
new campaign. The log starts just before clicking new campaign. If you want
full log from the game start up, it's possible, but 450MB unpacked. Decide
soon, i won't keep the full log forever ;)

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

Wylda  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download
                URL|                            |http://www.gamershell.com/d
                   |                            |ownload_13151.shtml
                 CC|                            |[e-mail]

--- Comment #4 from Wylda   2010-06-12 12:53:02 ---

Hmmm... looks like, there are two demo available. I used 620MB demo bundled to
game magazine few years ago and provided link looks the same. Links to
microsoft download are 725MB. Anyway, my trace looks the same as Dan's.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #5 from Nikolay Sivov   2010-06-12 13:19:12 ---
Thanks for log. Yeah, wipe out a huge one, I don't think it's needed. Looks
like we got a detached tree node at this point. And cause we're using XPath
output from libxml2 and don't bother about returned node pointer I'll need to
look at its code.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #6 from Nikolay Sivov  2010-10-29 18:16:31 CDT ---
Please attach new +msxml,+tid near to a crash running current wine-1.3.6, also
specify libxml2 version you're using.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #7 from Nikolay Sivov  2011-11-23 09:24:29 CST ---
Please update +msxml,+tid log running recent wine.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #8 from Dan Kegel  2011-11-23 21:15:42 CST ---
With today's wine (wine-1.3.33-140-ga3c395b) and native wmp9,
the game starts up, gets a BHG error which you have to ignore,
and then crashes.
This is Ubuntu 11.04, libxml2    2.7.8.dfsg-2ubuntu0.1

The first time I ran it, I got an odd overflow crash in a log statement
(attached).  Running it again with
WINEDEBUG=+msxml,+tid,warn+heap taskset -c 1 ~/wine-git/wine legends.exe 
(not much difference from without warn+heap or taskset), I got the log
http://kegel.com/wine/bug21940-crash2.txt.rz

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #9 from Dan Kegel  2011-11-23 21:16:20 CST ---
Created attachment 37603
  --> http://bugs.winehq.org/attachment.cgi?id=37603
Backtrace from logging crash

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

joaopa  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #10 from joaopa  2012-05-12 00:04:58 CDT ---
Still a bug in current wine?

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

Jarkko K  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #11 from Jarkko K  ---
I did clean prefix install. I think that error is gone now.

err:msxml:domselection_create error code 1207
fixme:d3d9:Direct3DShaderValidatorCreate9 stub
wine: Unhandled page fault on read access to 0x00000090 at address 0xf3aa1d
(thread 001c), starting debugger...

Actually not...

I tried with few dx overrides, then installed hole dx9 via winetricks and still
not working.

I got constantly odd error message that noted that I have some agp issue.

Then I finally installed msxml via winetricks (version 4). And I got the game
running for the 1st time without crash.

I could imput username/playername. And it would shortly crash, console is full
of

fixme:wmvcore:WMCreateSyncReader ((nil), 0, 0x101b18cc): stub

messages

and

one line

fixme:avifile:AVIFileExit (): stub!

wine 1.7.18

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #12 from Nikolay Sivov  ---
Which one is gone? msxml problem still exists or it's fixed? Attach +msxml,+tid
log please if it still fails with msxml crash.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #13 from Jarkko K  ---
Installing wmp9 = goes further, but I have mouse issue that prevents me from
continue...

uncompressed debug 160megabytes, compressed over the limit here. And getting it
even open on some programs is pain in the ass, even 8gb memory.

It's a lot easier to download the demo and see yourself. Providing debug is no
use, if none really tries to fix this.

It's still an issue with some xml code.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #14 from Nikolay Sivov  ---
(In reply to Jarkko K from comment #13)
> Installing wmp9 = goes further, but I have mouse issue that prevents me from
> continue...
>
> uncompressed debug 160megabytes, compressed over the limit here. And getting
> it even open on some programs is pain in the ass, even 8gb memory.

I don't follow how is this problem opening a file is related to this report.
There are many ways to reduce log size if that's what you want.
> It's a lot easier to download the demo and see yourself.

Well, you already did, and have it set up. If you're commenting it (usually)
means you're willing to help with testing.
> Providing debug is no use, if none really tries to fix this.

I don't know what to say.
> It's still an issue with some xml code.

Is it a guess?

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #15 from Jarkko K  ---
Why do you comment here anyway if you haven't got anything to say?

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

http://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #16 from Austin English  ---
(In reply to Jarkko K from comment #15)
> Why do you comment here anyway if you haven't got anything to say?

You've been warned before about your unhelpful attitude:
http://bugs.winehq.org/show_bug.cgi?id=35988#c6

I've disabled your account.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #17 from joaopa  ---
Created attachment 62842
  --> https://bugs.winehq.org/attachment.cgi?id=62842
console output with msxml channel enabled

For me, the demo still crashes very early with msxml errors.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #18 from joaopa  ---
Bug still occurs with wine-4.9
Installing native msxml3 and msxml4 workarounds bug and the game starts.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

minion  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #19 from minion  ---
i just cloned and built 32bit wine from latest master and a campaign starts
without any issue. No dll overrides or anything. I would suggest trying the
same and post back if there's any issue

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #20 from joaopa  ---
The bug is still here with git: wine-4.9-341-g4d5c874f42

Did you try with a fresh wineprefix and the demo
https://www.fileplanet.com/archive/p-52761/Rise-of-Nations-Rise-of-Legends-D...

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #21 from minion  ---
yes it was a fresh prefix as i installed this demo specifically to answer on
this thread. I did however install from a different site, so I will try the one
you just posted tomorrow afternoon.

FWIW the commit I built against was 7d77d330a5b60be918dbf17d9d9ca357d93bff29.

Tomorrow i will do a fresh build, new prefix, fresh install. If i can't get it
to fail you might be sore outa luck.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #22 from minion  ---
yes! This application does indeed fail to start. I fixed the msxml issue that
prevents it from starting up, but I'm getting a different error when starting
the campaign. I'll do a little digging and see if i can come up with something,
otherwise I'll just upload the patch to get the application to start and start
a new bug thread for the new issue.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #23 from minion  ---
Created attachment 64647
  --> https://bugs.winehq.org/attachment.cgi?id=64647
fix msxml null pointer

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

pattietreutel  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

Alistair Leslie-Hughes  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |patch
                 CC|                            |[e-mail]

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #24 from joaopa  ---
With your patch, the demo goes further. But there is an other crash. Native
msxml3 is enough to make the demo work.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #25 from minion  ---
welp, maybe someone smarter than me can chime in here. Seems like we're failing
to properly allocate the string that gets set. I really don't know how to fix
this. You can achieve this log with WINEDEBUG=trace+msxml,+pid,+tid with the
previously attached patch applied.

Here's the relevant bit from the log:

0008:0009:trace:msxml:domtext_QueryInterface
(0x4596eb0)->({2933bf80-7b36-11d2-b20e-00c04f983e60} 0x34bf08)
0008:0009:trace:msxml:domtext_AddRef (0x4596eb0)->(2)
0008:0009:trace:msxml:domtext_Release (0x4596eb0)->(1)
0008:0009:trace:msxml:domtext_QueryInterface
(0x4596eb0)->({2933bf86-7b36-11d2-b20e-00c04f983e60} 0x34bfa8)
0008:0009:trace:msxml:domtext_AddRef (0x4596eb0)->(2)
0008:0009:trace:msxml:domtext_Release (0x4596eb0)->(1)
0008:0009:trace:msxml:domtext_AddRef (0x4596eb0)->(2)
0008:0009:trace:msxml:domelem_Release (0x48d7208)->(1)
0008:0009:trace:msxml:domelem_Release (0x48d7208)->(0)
0008:0009:trace:msxml:xmldoc_release_refs (0x53cacb00)->(3)
0008:0009:trace:msxml:domtext_AddRef (0x4596eb0)->(3)
0008:0009:trace:msxml:domtext_AddRef (0x4596eb0)->(4)
0008:0009:trace:msxml:domtext_Release (0x4596eb0)->(3)
0008:0009:trace:msxml:domtext_Release (0x4596eb0)->(2)
0008:0009:trace:msxml:domtext_put_data (0x4596eb0)->(L"ref_rect")
0008:0009:trace:msxml:node_set_content (0x4596eb0)->(L"ref_rect")
wine: Unhandled page fault on write access to 0x005f5041 at address 0x42e8fa
(thread 0009), starting debugger...

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #26 from Alistair Leslie-Hughes  ---
(In reply to minion from comment #23)
> Created attachment 64647 [details]
> fix msxml null pointer

This isn't correct. You cannot return a pointer to an interface that
IXMLDOMText doesn't support.  There is a test in msxml3 supporting this.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=21940

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jeffersoncarpenter2@gmail.c
                   |                            |om

--- Comment #27 from [e-mail] ---
It works for me in the latest version of Wine (6.20).  I can reach the campaign
map when I click New Campaign, and go through the dialog that lets me attack
another territory.

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=21940

Damjan Jovanovic  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO
                 CC|                            |[e-mail]

--- Comment #28 from Damjan Jovanovic  ---
(In reply to jeffersoncarpenter2 from comment #27)
> It works for me in the latest version of Wine (6.20).  I can reach the
> campaign map when I click New Campaign, and go through the dialog that lets
> me attack another territory.

That's great news. Is this bug safe to close then?

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=21940

--- Comment #29 from joaopa  ---
For me a crash still occurs with the demo (wine-8.11)
DOwnload link is burst. Here is a aworking one:
https://www.fileplanet.com/archive/p-52761/Rise-of-Nations-Rise-of-Legends-D...

[Bug 21940] Rise of Legends Demo crashes with null pointer reference in msxml3?

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=21940

Olivier F. R. Dierick  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]
                URL|http://www.gamershell.com/d |https://www.fileplanet.com/
                   |ownload_13151.shtml         |archive/p-52761/Rise-of-Nat
                   |                            |ions-Rise-of-Legends-Demo/d
                   |                            |ownload