https://bugs.winehq.org/show_bug.cgi?id=39734
Bug ID: 39734 Summary: ProtectDisc Driver 11: acedrv11.sys crashes Product: Wine Version: 1.8-rc2 Hardware: x86-64 URL: http://www.4players.de/4players.php/download_info/Down loads/Download/50183/Alarm_fuer_Cobra_11_Burning_Wheel s/Deutsche_Demo.html OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs@winehq.org Reporter: bernhardu@vr-web.de Distribution: Debian
Created attachment 52986 --> https://bugs.winehq.org/attachment.cgi?id=52986 backtrace.txt
The demo version of "Cobra 11: Burning Wheels" comes with this copy protection driver. It gets silently installed by default.
One can extract the protection driver from the setup with: 7z x BurningWheelsDemo.exe "$PLUGINSDIR/Driver_Setup.exe"
After this driver is installed wine tries to start the copy protection driver acedrv11.sys on every startup of this wineprefix. This results in a crash of this driver: bernhard@rechner:~/wine/drive_c$ wineserver -k; wine wineboot fixme:ntoskrnl:IoGetDeviceObjectPointer stub: L"\DosDevices\CdRom0" 80 0x53e690 0x53e694 fixme:ntoskrnl:KeInitializeEvent stub: 0x11264c 0 0 wine: Unhandled page fault on read access to 0x00000060 at address 0x57923a (thread 0019), starting debugger...
ProtectionID v0.6.7.0 identifies it as: #[VersionInfo] Product Name : ProtectDisc x64/x86 Hybrid Driver #[VersionInfo] Product Version : 9.0.0.0 #[VersionInfo] File Version : 11.0.0.11 built by: WinDDK #[VersionInfo] Original FileName : acedrv.sys #[!] ProtectDisc v 9.0.0.0 Driver
https://bugs.winehq.org/show_bug.cgi?id=39734
--- Comment #1 from Bernhard Übelacker bernhardu@vr-web.de --- Created attachment 52987 --> https://bugs.winehq.org/attachment.cgi?id=52987 ntoskrnl.exe: Avoid crash in acedrv11.sys.
A +ntoskrnl trace shows such a line: trace:ntoskrnl:IoAllocateIrp -128, 0
With the attached patch the driver does at least not crash. - It just casts the negative stack_size to an unsigned char in IoAllocateIrp and IoInitializeIrp. - Returns in IoCallDriver on NULL despatch function.
https://bugs.winehq.org/show_bug.cgi?id=39734
Vijay Kamuju infyquest@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |infyquest@gmail.com
--- Comment #2 from Vijay Kamuju infyquest@gmail.com --- send the patch to wine-patches@winehq.org
https://bugs.winehq.org/show_bug.cgi?id=39734
super_man@post.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |sebastian@fds-team.de, | |super_man@post.com
https://bugs.winehq.org/show_bug.cgi?id=39734
Bernhard Übelacker bernhardu@vr-web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Blocks| |39739
https://bugs.winehq.org/show_bug.cgi?id=39734
Sergey Isakov isakov-sl@bk.ru changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |isakov-sl@bk.ru
--- Comment #3 from Sergey Isakov isakov-sl@bk.ru --- I confirm the bug and the patch.
https://bugs.winehq.org/show_bug.cgi?id=39734
Alistair Leslie-Hughes leslie_alistair@hotmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |patch
https://bugs.winehq.org/show_bug.cgi?id=39734
--- Comment #4 from Bernhard Übelacker bernhardu@vr-web.de --- Created attachment 54059 --> https://bugs.winehq.org/attachment.cgi?id=54059 ntoskrnl.exe/tests: Add tests for IoAllocateIrp.
https://bugs.winehq.org/show_bug.cgi?id=39734
Bernhard Übelacker bernhardu@vr-web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Attachment #52987|0 |1 is obsolete| |
--- Comment #5 from Bernhard Übelacker bernhardu@vr-web.de --- Created attachment 54060 --> https://bugs.winehq.org/attachment.cgi?id=54060 ntoskrnl.exe: Make IoAllocateIrp not crash on negative values.
https://bugs.winehq.org/show_bug.cgi?id=39734
--- Comment #6 from Bernhard Übelacker bernhardu@vr-web.de --- Created attachment 54061 --> https://bugs.winehq.org/attachment.cgi?id=54061 ntoskrnl.exe: Do not try to call NULL function pointer in IoCallDriver.
https://bugs.winehq.org/show_bug.cgi?id=39734
Bernhard Übelacker bernhardu@vr-web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Attachment #54059|0 |1 is obsolete| |
--- Comment #7 from Bernhard Übelacker bernhardu@vr-web.de --- Created attachment 54115 --> https://bugs.winehq.org/attachment.cgi?id=54115 ntoskrnl.exe/tests: Add tests for IoAllocateIrp (try 2).
https://bugs.winehq.org/show_bug.cgi?id=39734
Bernhard Übelacker bernhardu@vr-web.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Attachment #54060|0 |1 is obsolete| |
--- Comment #8 from Bernhard Übelacker bernhardu@vr-web.de --- Created attachment 54116 --> https://bugs.winehq.org/attachment.cgi?id=54116 ntoskrnl.exe: Make IoAllocateIrp not crash on negative values. (try 3)
https://bugs.winehq.org/show_bug.cgi?id=39734
--- Comment #9 from Sergey Isakov isakov-sl@bk.ru --- (In reply to Bernhard Übelacker from comment #8)
Created attachment 54116 [details] ntoskrnl.exe: Make IoAllocateIrp not crash on negative values. (try 3)
irp->AllocationFlags will be undefined
https://bugs.winehq.org/show_bug.cgi?id=39734
--- Comment #10 from Sergey Isakov isakov-sl@bk.ru --- OK, zero.
https://bugs.winehq.org/show_bug.cgi?id=39734
winetest@luukku.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |bernhardu@mailbox.org
https://bugs.winehq.org/show_bug.cgi?id=39734
winetest@luukku.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |winetest@luukku.com
--- Comment #11 from winetest@luukku.com --- Is this bug actually fixed? Or does it need more work?
http://source.winehq.org/git/wine.git/commit/64aec5d8dbae329958b9b677d3289de...
I found this commit after I noticed that the latest patch doesn't merge cleanly.
https://bugs.winehq.org/show_bug.cgi?id=39734
Matteo Bruni matteo.mystral@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Fixed by SHA1| |64aec5d8dbae329958b9b677d32 | |89de78142e289 Status|UNCONFIRMED |RESOLVED
--- Comment #12 from Matteo Bruni matteo.mystral@gmail.com --- Let's resolve it, if there are other issues they should be covered by separate bugs anyway.
https://bugs.winehq.org/show_bug.cgi?id=39734
--- Comment #13 from Bernhard Übelacker bernhardu@mailbox.org --- Sorry for the late reply. In the last review [1] for some more test coverage was asked. Unfortunately I did not get around to that. And if I would have I do not see yet the ntoskrnl-DriverTest appear in wine, so I am not sure where to submit such a test to.
So yes, closing this bug is fine.
[1] https://www.winehq.org/pipermail/wine-devel/2016-March/112517.html
https://bugs.winehq.org/show_bug.cgi?id=39734
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #14 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 1.9.24.
https://bugs.winehq.org/show_bug.cgi?id=39734
Michael Stefaniuc mstefani@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |1.8.x
https://bugs.winehq.org/show_bug.cgi?id=39734
Michael Stefaniuc mstefani@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|1.8.x |---
--- Comment #15 from Michael Stefaniuc mstefani@redhat.com --- Removing 1.8.x milestone from bugs included in 1.8.6.
https://bugs.winehq.org/show_bug.cgi?id=39734
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download, obfuscation URL|http://www.4players.de/4pla |https://web.archive.org/web |yers.php/download_info/Down |/20210701055235/https://dl. |loads/Download/50183/Alarm_ |4players.de/f1/pc/cobra_11_ |fuer_Cobra_11_Burning_Wheel |nitro/BurningWheelsDemo.exe |s/Deutsche_Demo.html | CC| |focht@gmx.net