http://bugs.winehq.org/show_bug.cgi?id=28738
Bug #: 28738 Summary: user32/tests: invalid read in server_end_to_end_callback in dde.ok? Product: Wine Version: 1.3.30 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: user32 AssignedTo: wine-bugs@winehq.org ReportedBy: dank@kegel.com Classification: Unclassified
Not sure how bad an invalid read in a dbgstr is, but here's the log:
Invalid read of size 2 at wine_dbgstr_wn (test.h:471) by server_end_to_end_callback (test.h:66) by WDML_InvokeCallback (dde_misc.c:734) by WDML_ServerHandle (dde_server.c:834) by WDML_ServerConvProc (dde_server.c:1112) by ??? (in user32/user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:908) by DispatchMessageA (message.c:3738) by test_end_to_end_server (dde.c:2680) by func_dde (dde.c:2746) by run_test (test.h:556) by main (test.h:624) Address 0x7f00dae8 is 16 bytes inside a block of size 20 free'd at notify_free (heap.c:262) by RtlFreeHeap (heap.c:1748) by RtlFreeUnicodeString (rtlstr.c:319) by RegQueryValueExA (registry.c:1489) by load_face (freetype.c:1207) by WineEngInit (freetype.c:1345) by DllMain (gdiobj.c:582)
http://bugs.winehq.org/show_bug.cgi?id=28738
--- Comment #1 from Dan Kegel dank@kegel.com 2011-10-15 23:05:23 CDT --- There are lots more, it's not just a debug print. e.g.
Invalid read of size 2 at strlenW (unicode.h:200) by CompareStringW (locale.c:2821) by lstrcmpW (locale.c:2976) by dde_server_wndprocW (dde.c:1424) by ??? (in user32.dll.so) by call_window_proc (winproc.c:242) by WINPROC_call_window (winproc.c:899) by DispatchMessageW (message.c:3809) by WDML_SyncWaitTransactionReply (dde_client.c:1069) by WDML_ClientHandle (dde_client.c:1126) by DdeClientTransaction (dde_client.c:1224) by test_dde_aw_transaction (dde.c:1613)
Invalid read of size 4 at WDML_GetConv (dde_misc.c:1989) by DdeQueryConvInfo (dde_misc.c:2194) by test_dde_aw_transaction (dde.c:1718)
Lots and lots of warning of that sort.
http://bugs.winehq.org/show_bug.cgi?id=28738
Jeff L lats@yless4u.com.au changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |lats@yless4u.com.au
--- Comment #2 from Jeff L lats@yless4u.com.au 2011-10-20 05:46:19 CDT --- Dan, can you give me the config that you were running when the test failed. I have not been able to reproduce it running the dde test.
http://bugs.winehq.org/show_bug.cgi?id=28738
--- Comment #3 from Dan Kegel dank@kegel.com 2011-10-20 07:02:49 CDT --- Sorry, I should have mentioned that.
I'm running the test under valgrind-3.6.1 like this:
svn export https://winezeug.googlecode.com/svn/trunk/valgrind/valgrind-suppressions
VALGRIND_OPTS="--trace-children=yes --track-origins=yes \ --gen-suppressions=all --suppressions=`pwd`/valgrind-suppressions \ --leak-check=no --num-callers=30 --workaround-gcc296-bugs=yes \ --vex-iropt-precise-memory-exns=yes -v" export VALGRIND_OPTS WINETEST_WRAPPER="valgrind" export WINETEST_WRAPPER
make dde.ok > log.txt 2>&1
https://bugs.winehq.org/show_bug.cgi?id=28738
--- Comment #4 from Austin English austinenglish@gmail.com --- Still in git: ==6245== Invalid read of size 2 ==6245== at 0x4D1E4E8: wine_dbgstr_wn (test.h:486) ==6245== by 0x4C3B542: wine_dbgstr_w (test.h:69) ==6245== by 0x4C49657: server_end_to_end_callback (dde.c:2465) ==6245== by 0x50BE856: WDML_InvokeCallback (dde_misc.c:1231) ==6245== by 0x50C3762: WDML_ServerHandleExecute (dde_server.c:834) ==6245== by 0x50C3D2E: WDML_ServerHandle (dde_server.c:1002) ==6245== by 0x50C42A4: WDML_ServerConvProc (dde_server.c:1112) ==6245== by 0x514B4DD: ??? (winproc.c:173) ==6245== by 0x514B652: call_window_proc (winproc.c:244) ==6245== by 0x514D8A1: WINPROC_call_window (winproc.c:909) ==6245== by 0x510E8CD: DispatchMessageA (message.c:3948) ==6245== by 0x4C4A6A8: test_end_to_end_server (dde.c:2675) ==6245== by 0x4C4AB15: func_dde (dde.c:2741) ==6245== by 0x4D1EA14: run_test (test.h:584) ==6245== by 0x4D1EE03: main (test.h:654) ==6245== Address 0x4725f08 is 16 bytes inside a block of size 17 alloc'd ==6245== at 0x7BC4C735: notify_alloc (heap.c:255) ==6245== by 0x7BC50F79: RtlAllocateHeap (heap.c:1716) ==6245== by 0x4C495A1: server_end_to_end_callback (dde.c:2461) ==6245== by 0x50BE856: WDML_InvokeCallback (dde_misc.c:1231) ==6245== by 0x50C3762: WDML_ServerHandleExecute (dde_server.c:834) ==6245== by 0x50C3D2E: WDML_ServerHandle (dde_server.c:1002) ==6245== by 0x50C42A4: WDML_ServerConvProc (dde_server.c:1112) ==6245== by 0x514B4DD: ??? (winproc.c:173) ==6245== by 0x514B652: call_window_proc (winproc.c:244) ==6245== by 0x514D8A1: WINPROC_call_window (winproc.c:909) ==6245== by 0x510E8CD: DispatchMessageA (message.c:3948) ==6245== by 0x4C4A6A8: test_end_to_end_server (dde.c:2675) ==6245== by 0x4C4AB15: func_dde (dde.c:2741) ==6245== by 0x4D1EA14: run_test (test.h:584) ==6245== by 0x4D1EE03: main (test.h:654) ==6245==
https://bugs.winehq.org/show_bug.cgi?id=28738
Austin English austinenglish@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download, source, testcase, | |valgrind
https://bugs.winehq.org/show_bug.cgi?id=28738
Jactry Zeng jactry92@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jactry92@gmail.com
https://bugs.winehq.org/show_bug.cgi?id=28738
François Gouget fgouget@codeweavers.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|user32/tests: invalid read |user32:dde: invalid read in |in |server_end_to_end_callback |server_end_to_end_callback | |in dde.ok? | CC| |fgouget@codeweavers.com