[Bug 29899] New: mapviewoffileex fails under certain condition with PE images

Bug #: 29899 Summary: mapviewoffileex fails under certain condition with PE images Product: Wine Version: unspecified Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: critical Priority: P2 Component: kernel32 AssignedTo: wine-bugs@winehq.org ReportedBy: tizbac2@gmail.com Classification: Unclassified

Created attachment 38887 --> http://bugs.winehq.org/attachment.cgi?id=38887 Test C program that fails on wine and works on windows

Using mapviewoffileex on the same pe image from 2 different file handles, on wine tries to relocate and if the dll does not have .reloc , it will fail , instead on windows the call to MapViewOfFileEx returns a valid pointer both times.

The attached C program together with a non relocatable DLL will fail on wine, but on windows xp it works and it gives both times "test succeeded"

-- Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email Do not reply to this email, post in Bugzilla using the above URL to reply. ------- You are receiving this mail because: ------- You are watching all bug changes.

Show replies by date

wine-bugs＠winehq.org

15 Feb 15 Feb

1:04 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #1 from tizbac2@gmail.com 2012-02-15 07:04:00 CST --- Created attachment 38888 --> http://bugs.winehq.org/attachment.cgi?id=38888 DLL Without .reloc section

wine-bugs＠winehq.org

1:06 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Dmitry Timoshkov dmitry@baikal.ru changed:

--- Comment #2 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-15 07:06:41 CST --- Wine version? Is there a real program that fails?

wine-bugs＠winehq.org

1:07 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Dmitry Timoshkov dmitry@baikal.ru changed:

wine-bugs＠winehq.org

1:09 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #3 from tizbac2@gmail.com 2012-02-15 07:09:32 CST --- alteriwnet fails cause of that bug, it maps iw4m1.dll 3 times, and iw4m1.dll is not relocatable

wine-bugs＠winehq.org

1:09 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

tizbac2@gmail.com changed:

wine-bugs＠winehq.org

1:12 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Dmitry Timoshkov dmitry@baikal.ru changed:

What |Removed |Added ---------------------------------------------------------------------------- Component|kernel32 |-unknown

wine-bugs＠winehq.org

1:12 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #4 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-15 07:12:45 CST --- (In reply to comment #3)

alteriwnet fails cause of that bug

What's that? URL?

wine-bugs＠winehq.org

1:29 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #5 from tizbac2@gmail.com 2012-02-15 07:29:43 CST --- http://alteriw.net , currently it would be the only way to play call of duty mw2 and mw3 online on linux, cause they use their own anticheat system that should not have problems

wine-bugs＠winehq.org

9:21 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Austin English austinenglish@gmail.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Keywords| |testcase

wine-bugs＠winehq.org

16 Feb 16 Feb

6:29 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Dmitry Timoshkov dmitry@baikal.ru changed:

--- Comment #6 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-16 00:29:17 CST --- Created attachment 38900 --> http://bugs.winehq.org/attachment.cgi?id=38900 Test C program that fails on wine and works on windows

Here is a version of the test without magic numbers, and its output under XP:

f 000007E8, fmap 000007F4, ptr 20000000 test succeeded f2 000007DC, fmap2 000007D8, ptr2 00350000 test succeeded

It looks like Windows successfully maps a PE file with SEC_IMAGE without relocations somewhere else if its specified base address already occupied.

wine-bugs＠winehq.org

8:53 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Dmitry Timoshkov dmitry@baikal.ru changed:

--- Comment #7 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-16 02:53:42 CST --- Using NtMapViewOfSection() instead of MapViewOfFile() in the test shows that under XP although NtMapViewOfSection() returns STATUS_IMAGE_NOT_AT_BASE, it returns a valid pointer which matches what MapViewOfFile() returns.

wine-bugs＠winehq.org

10:51 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #8 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-16 04:51:41 CST --- Created attachment 38906 --> http://bugs.winehq.org/attachment.cgi?id=38906 ntdll: Separate image relocation from NtMapViewOfSection

Something like this should fix it.

wine-bugs＠winehq.org

10:58 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #9 from tizbac2@gmail.com 2012-02-16 04:58:26 CST --- Created attachment 38907 --> http://bugs.winehq.org/attachment.cgi?id=38907 Crash after applying proposed patch

Crash after applying patch

wine-bugs＠winehq.org

11:04 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #10 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-16 05:04:42 CST --- (In reply to comment #9)

Created attachment 38907 [details] Crash after applying proposed patch

Crash after applying patch

You are too fast :) The patch (or rather a prototype) was supposed to fix only your test case. What is missing is changing the section protection to read-write and back when applying relocations.

wine-bugs＠winehq.org

11:18 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #11 from tizbac2@gmail.com 2012-02-16 05:18:16 CST --- (In reply to comment #10)

(In reply to comment #9)

...
Created attachment 38907 [details] Crash after applying proposed patch

Crash after applying patch

You are too fast :) The patch (or rather a prototype) was supposed to fix only your test case. What is missing is changing the section protection to read-write and back when applying relocations.

ah ok :)

wine-bugs＠winehq.org

17 Feb 17 Feb

6:40 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Dmitry Timoshkov dmitry@baikal.ru changed:

--- Comment #12 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-17 00:40:32 CST --- Created attachment 38922 --> http://bugs.winehq.org/attachment.cgi?id=38922 ntdll: Separate image relocation from NtMapViewOfSection

(In reply to comment #9)

Created attachment 38907 [details] Crash after applying proposed patch

Crash after applying patch

This version of the patch should fix the crash.

wine-bugs＠winehq.org

18 Feb 18 Feb

11:24 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #13 from tizbac2@gmail.com 2012-02-18 05:24:24 CST --- (In reply to comment #12)

Created attachment 38922 [details] ntdll: Separate image relocation from NtMapViewOfSection

(In reply to comment #9)

...
Created attachment 38907 [details] Crash after applying proposed patch

Crash after applying patch

This version of the patch should fix the crash.

It still crashes , but no stacktrace this time , just WineDbg starting on pid 0023 err:module:attach_process_dlls "CrashRpt.dll" failed to initialize, aborting err:module:LdrInitializeThunk Main exe initialization for L"Z:\media\Elements\Call Of Duty Modern Warfare 2\iw4mp.dat.exe" failed, status c0000005 Process of pid=0023 has terminated

wine-bugs＠winehq.org

19 Feb 19 Feb

5:53 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #14 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-18 23:53:48 CST --- (In reply to comment #13)

It still crashes , but no stacktrace this time , just WineDbg starting on pid 0023 err:module:attach_process_dlls "CrashRpt.dll" failed to initialize, aborting err:module:LdrInitializeThunk Main exe initialization for L"Z:\media\Elements\Call Of Duty Modern Warfare 2\iw4mp.dat.exe" failed, status c0000005 Process of pid=0023 has terminated

Could you please attach a +module,+virtual log (with the patch) here?

wine-bugs＠winehq.org

11:55 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #15 from tizbac2@gmail.com 2012-02-19 05:55:20 CST --- Created attachment 38964 --> http://bugs.winehq.org/attachment.cgi?id=38964 +virtual,+module log

wine-bugs＠winehq.org

11:57 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #16 from tizbac2@gmail.com 2012-02-19 05:57:24 CST --- You can download the game here http://staff.alteriw.net/tracker/torrents/aIW-Client.torrent if you want to try it yourself , update it under windows and then run iw4mp.dat , if you do not have windows i can give you python version of updater

wine-bugs＠winehq.org

5:18 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #17 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-19 11:18:44 CST --- Is there a demo version that could be used to reproduce it?

wine-bugs＠winehq.org

9:06 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #18 from tizbac2@gmail.com 2012-02-19 15:06:26 CST --- http://www.mediafire.com/?rnsrbkx72nlde0h *.dll and *.exe which is enough to reproduce the crash Launch iw4mp.dat.exe

wine-bugs＠winehq.org

20 Feb 20 Feb

4:09 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Dmitry Timoshkov dmitry@baikal.ru changed:

--- Comment #19 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-19 22:09:39 CST --- Created attachment 38983 --> http://bugs.winehq.org/attachment.cgi?id=38983 ntdll: Separate image relocation from NtMapViewOfSection

This version of the patch should work better.

wine-bugs＠winehq.org

7:04 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #20 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-20 01:04:31 CST --- I sent a test case for this bug: http://www.winehq.org/pipermail/wine-patches/2012-February/111682.html

wine-bugs＠winehq.org

3:47 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #21 from tizbac2@gmail.com 2012-02-20 09:47:18 CST --- The bug seems to be solved with latest patch , now there's another problem but i think it's unrelated to that

wine-bugs＠winehq.org

21 Feb 21 Feb

8:43 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Dmitry Timoshkov dmitry@baikal.ru changed:

What |Removed |Added ---------------------------------------------------------------------------- Keywords| |patch

--- Comment #22 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-21 02:43:32 CST --- http://www.winehq.org/pipermail/wine-patches/2012-February/111710.html

Probably going to be deferred though.

wine-bugs＠winehq.org

6:28 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #23 from tizbac2@gmail.com 2012-02-21 12:28:49 CST --- Seems that there's still something broken with that, i get random memory corruption on the fixed address dll ( it is a .NET 2.0 dll ) It crashes with random bad instructions on a runtime-created segment

wine-bugs＠winehq.org

7:16 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #24 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-21 13:16:37 CST --- (In reply to comment #23)

Seems that there's still something broken with that, i get random memory corruption on the fixed address dll ( it is a .NET 2.0 dll ) It crashes with random bad instructions on a runtime-created segment

Why do you think that it's related to the patch?

wine-bugs＠winehq.org

11:32 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #25 from tizbac2@gmail.com 2012-02-21 17:32:25 CST --- (In reply to comment #24)

(In reply to comment #23)

...
Seems that there's still something broken with that, i get random memory corruption on the fixed address dll ( it is a .NET 2.0 dll ) It crashes with random bad instructions on a runtime-created segment

Why do you think that it's related to the patch?

because it's .net crashing , and .net 2.0 especially its JIT compiler is known to work on wine

wine-bugs＠winehq.org

22 Feb 22 Feb

2:31 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #26 from Dmitry Timoshkov dmitry@baikal.ru 2012-02-21 20:31:35 CST --- (In reply to comment #25)

because it's .net crashing , and .net 2.0 especially its JIT compiler is known to work on wine

Can you try to run some other .net application that needs a JIT compiler with and without the patch and reproduce the problem?

wine-bugs＠winehq.org

7:41 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Anastasius Focht focht@gmx.net changed:

What |Removed |Added ---------------------------------------------------------------------------- CC| |focht@gmx.net

--- Comment #27 from Anastasius Focht focht@gmx.net 2012-02-22 01:41:48 CST --- Hello,

the patch fixes the mapping/relocation issue this bug is about.

With that patch applied you are now encountering a different class of problems -> different Wine bugs.

"corruption" = obfuscated code.

The code makes certain assumptions about the layout of Windows API entries. If you create a new bug for that, you'll get explanation and solution ;-)

Regards

wine-bugs＠winehq.org

25 Feb 25 Feb

9:38 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Anastasius Focht focht@gmx.net changed:

What |Removed |Added ---------------------------------------------------------------------------- Blocks| |30000

wine-bugs＠winehq.org

12 Apr 12 Apr

1:29 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

--- Comment #28 from Austin English austinenglish@gmail.com --- This is your friendly reminder that there has been no bug activity for 2 years. Is this still an issue in current (1.7.16 or newer) wine?

-- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

wine-bugs＠winehq.org

9:34 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

http://www.winehq.org/pipermail/wine-patches/2012-February/111710.html

--- Comment #29 from Anastasius Focht focht@gmx.net --- Hello folks,

the test was committed here: http://source.winehq.org/git/wine.git/commitdiff/20093556f92fbced66761526b88... ("kernel32: Add a test to show that NtMapViewOfSection should not perform an image... ")

The mailing list shows multiple attempts but no final resolution.

2012-02-21 ntdll: Separate image relocation from NtMapViewOfSection

http://www.winehq.org/pipermail/wine-patches/2012-March/112565.html

2012-03-19 ntdll: Separate image relocation from NtMapViewOfSection. Resend.

http://www.winehq.org/pipermail/wine-patches/2012-April/113746.html

2012-04-27 ntdll: Separate image relocation from NtMapViewOfSection. Resend.

So it's obviously still present.

$ wine --version wine-1.7.16-133-gd8ca8c2

Regards

-- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

wine-bugs＠winehq.org

20 Feb 20 Feb

1:20 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Qian Hong fracting@gmail.com changed:

What |Removed |Added ---------------------------------------------------------------------------- CC| |fracting@gmail.com

-- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

wine-bugs＠winehq.org

21 Feb 21 Feb

2:13 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Sebastian Lackner sebastian@fds-team.de changed:

What |Removed |Added ---------------------------------------------------------------------------- CC| |sebastian@fds-team.de

-- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

wine-bugs＠winehq.org

13 Nov 13 Nov

8:46 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Dmitry Timoshkov dmitry@baikal.ru changed:

--- Comment #30 from Dmitry Timoshkov dmitry@baikal.ru --- Should be fixed by e67a00b46694625e3c40386008affac42e7e3847.

-- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

wine-bugs＠winehq.org

8:49 a.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images

Nikolay Sivov bunglehead@gmail.com changed:

What |Removed |Added ---------------------------------------------------------------------------- Component|-unknown |ntdll

-- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.

wine-bugs＠winehq.org

2:38 p.m.

New subject: [Bug 29899] mapviewoffileex fails under certain condition with PE images