http://bugs.winehq.org/show_bug.cgi?id=32671
Bug #: 32671 Summary: wine: Unhandeled stack overflow by PhotoLine32 Product: Wine Version: 1.4.1 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: blocker Priority: P2 Component: -unknown AssignedTo: wine-bugs@winehq.org ReportedBy: mroek@yahoo.com Classification: Unclassified
Lenovo all-in-One B320 Ubuntu 12.04 WINE 1.4.1
Photoline32 gebnerate the following error (alll available PhotoLine32 Versions):
wine: Unhandled stack overflow at address 0x6d7478 (thread 0009), starting debugger... err:seh:setup_exception_record stack overflow 1056 bytes in thread 0009 eip 7bc5c244 esp 00230f10 stack 0x230000-0x231000-0x330000
After trying to start Photoline, I can observe in the process list:
winedevice.exe, wineserver and PhotoLine.exe appear shortly in the listing of running processes but then disdappear again.
Other WIN programs (e.g. LTSpice) are running smoothly under WINE!
During installation of PhotoLine32 there is no error shown.
I reinstalled WINE 1.4.1, I installed the latest 1.5 version -> same effect. I reinstalled Photoline32, -> same effect
I had the same PhotoLine32 under WINE 1.4.1. and same Ubuntu running smoothly on another PC.
Regards
Michael
http://bugs.winehq.org/show_bug.cgi?id=32671
Michael Roek mroek@yahoo.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mroek@yahoo.com
http://bugs.winehq.org/show_bug.cgi?id=32671
maikwagner@yahoo.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |maikwagner@yahoo.com
--- Comment #1 from maikwagner@yahoo.com 2013-01-06 23:09:01 CST --- AppDB entry is at: http://appdb.winehq.org/objectManager.php?sClass=version&iId=26999
and a trial version can be downloaded from http://www.pl32.com
http://bugs.winehq.org/show_bug.cgi?id=32671
--- Comment #2 from maikwagner@yahoo.com 2013-01-06 23:19:40 CST --- Created attachment 43104 --> http://bugs.winehq.org/attachment.cgi?id=43104 CentOS 6.3 Output (Wine 1.2.3)
I can confirm this issue on CentOS as far as wine 1.2.3 is concerned (see attachment). I tried running the programme from the command-line but only got the output shown in the attachment. Pressing "Enter" brings me back to the command-line.
http://bugs.winehq.org/show_bug.cgi?id=32671
Rosanne DiMesio dimesio@earthlink.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Severity|blocker |normal
--- Comment #3 from Rosanne DiMesio dimesio@earthlink.net 2013-01-06 23:32:23 CST --- Not a blocker. http://bugs.winehq.org/page.cgi?id=fields.html#importance
Post terminal output from the current development release.
http://bugs.winehq.org/show_bug.cgi?id=32671
Bruno Jesus 00cpxxx@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Attachment #43104|0 |1 is obsolete| |
--- Comment #4 from Bruno Jesus 00cpxxx@gmail.com 2013-01-07 19:26:51 CST --- Created attachment 43118 --> http://bugs.winehq.org/attachment.cgi?id=43118 crash log in wine 1.5.21
http://bugs.winehq.org/show_bug.cgi?id=32671
Bruno Jesus 00cpxxx@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download Status|UNCONFIRMED |NEW URL| |http://www.pl32.com/ CC| |00cpxxx@gmail.com Ever Confirmed|0 |1
--- Comment #5 from Bruno Jesus 00cpxxx@gmail.com 2013-01-07 19:27:18 CST --- I can confirm this issue in wine-git.
http://bugs.winehq.org/show_bug.cgi?id=32671
--- Comment #6 from Michael Roek mroek@yahoo.com 2013-01-07 20:53:16 CST --- Created attachment 43121 --> http://bugs.winehq.org/attachment.cgi?id=43121 Crash log in WINE 1.5.20
http://bugs.winehq.org/show_bug.cgi?id=32671
--- Comment #7 from Michael Roek mroek@yahoo.com 2013-01-07 20:56:44 CST --- Sorry for selecting it "blocker".... now I understand the meaning.
The bug "ixme:font:get_outline_text_metrics failed "
is known by the Photoline Developpers and will be fixed. There seems to be a workaround via WINECFG. The main Problem is the "err:seh:setup_exception_record stack overflow 848 bytes thread 0009"
Regards Michael
https://bugs.winehq.org/show_bug.cgi?id=32671
Jaro jaromir@mailinator.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jaromir@mailinator.com
--- Comment #8 from Jaro jaromir@mailinator.com --- Created attachment 50158 --> https://bugs.winehq.org/attachment.cgi?id=50158 wine 1.7.31
crashes 1.7.31
https://bugs.winehq.org/show_bug.cgi?id=32671
--- Comment #9 from Ken Sharp imwellcushtymelike@gmail.com --- wine: Unhandled page fault on read access to 0x000000d3 at address 0x7fa6c872d97d (thread 002a), starting debugger...
I would guess that the original bug has gone but seen as the result is the same... can someone please retest in Wine 1.7.44 or later and see if you can get a full trace?
https://bugs.winehq.org/show_bug.cgi?id=32671
super_man@post.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |super_man@post.com
--- Comment #10 from super_man@post.com --- I downloadaded the windows version from the link given and it starts with no issues, but I believe that the program has changed meawhile. So I cant tell if the program fixed itself or wine.
1.7.48-git
https://bugs.winehq.org/show_bug.cgi?id=32671
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |focht@gmx.net Summary|wine: Unhandeled stack |PhotoLine 32 v18.x crashes |overflow by PhotoLine32 |on startup (missing error | |handling on creation of | |multi-profile color | |transform)
--- Comment #11 from Anastasius Focht focht@gmx.net --- Hello folks,
confirming.
*always* provide the exact application version to reproduce the bug.
Deducing from OP's initial comment date (early 2013) it's likely PhotoLine 32 v18.x being the culprit here.
The current vendor download is PhotoLine 32 v19.x which works fine. I could reproduce a crash with v18 (released in 2013), which I found on some shady site.
--- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/PhotoLine
$ WINEDEBUG=+tid,+seh,+relay,+mscms wine ./PhotoLine.exe >>log.txt 2>&1 ... 0027:Call KERNEL32.LoadLibraryW(003224dc L"C:\windows\system32\mscms.dll") ret=006d5ca1 ... 0027:Ret KERNEL32.LoadLibraryW() retval=7d0d0000 ret=006d5ca1 ... 0027:Call mscms.SelectCMM(57696e20) ret=006a73e6 0027:fixme:mscms:SelectCMM ('Win ') stub 0027:Ret mscms.SelectCMM() retval=00000001 ret=006a73e6 ... 0027:Call mscms.OpenColorProfileA(00322734,00000001,00000001,00000003) ret=006a78c1 0027:trace:mscms:OpenColorProfileA ( 0x322734, 0x00000001, 0x00000001, 0x00000003 ) ... 0027:trace:mscms:OpenColorProfileW ( 0x32266c, 0x00000001, 0x00000001, 0x00000003 ) 0027:trace:mscms:OpenColorProfileW profile file: L"C:\Program Files\PhotoLine\Defaults\ISOcoated_v2_eci.icc" ... 0027:Call KERNEL32.CreateFileW(001a0438 L"C:\Program Files\PhotoLine\Defaults\ISOcoated_v2_eci.icc",80000000,00000001,00000000,00000003,00000000,00000000) ret=7d0d8c62 0027:Ret KERNEL32.CreateFileW() retval=00000248 ret=7d0d8c62 0027:Call KERNEL32.GetFileSize(00000248,00000000) ret=7d0d8e28 0027:Ret KERNEL32.GetFileSize() retval=001be8d5 ret=7d0d8e28 ... 0027:Call KERNEL32.ReadFile(00000248,0ce90020,001be8d5,003225a8,00000000) ret=7d0d8f44 0027:Ret KERNEL32.ReadFile() retval=00000001 ret=7d0d8f44 ... 0027:Ret mscms.OpenColorProfileA() retval=00000001 ret=006a78c1 ... 0027:Call mscms.IsColorProfileValid(00000001,0032271c) ret=006a78fb 0027:trace:mscms:IsColorProfileValid ( 0x1, 0x32271c ) 0027:Ret mscms.IsColorProfileValid() retval=00000001 ret=006a78fb ... 0027:Call mscms.OpenColorProfileA(00322734,00000001,00000001,00000003) ret=006a78c1 0027:trace:mscms:OpenColorProfileA ( 0x322734, 0x00000001, 0x00000001, 0x00000003 ) 0027:trace:mscms:OpenColorProfileW ( 0x322734, 0x00000001, 0x00000001, 0x00000003 ) ... 0027:Ret mscms.OpenColorProfileA() retval=00000002 ret=006a78c1 0027:Call mscms.IsColorProfileValid(00000002,0032271c) ret=006a78fb 0027:trace:mscms:IsColorProfileValid ( 0x2, 0x32271c ) 0027:Ret mscms.IsColorProfileValid() retval=00000001 ret=006a78fb ... 0027:Call mscms.CreateMultiProfileTransform(003227d0,00000002,003227c4,00000002,00000003,00000000) ret=006a74bf 0027:trace:mscms:CreateMultiProfileTransform ( 0x3227d0, 0x00000002, 0x3227c4, 0x00000002, 0x00000003, 0x00000000 ) 0027:trace:mscms:GetColorProfileHeader ( 0x1, 0x3225f0 ) 0027:trace:mscms:from_profile color space: 0x434d594b 'CMYK' 0027:trace:mscms:GetColorProfileHeader ( 0x2, 0x3225f0 ) 0027:trace:mscms:from_profile color space: 0x52474220 'RGB ' ... 0027:trace:mscms:lcms_error_handler 9 "Wrong output color space on transform" ... 0027:Ret mscms.CreateMultiProfileTransform() retval=00000001 ret=006a74bf ... 0027:Call mscms.TranslateColors(00000001,003228a0,00000001,00000007,003248a0,00000002) ret=006a75bf 0027:trace:mscms:TranslateColors ( 0x1, 0x3228a0, 1, 7, 0x3248a0, 2 ) 0027:trace:mscms:from_type color type: 0x00000002 0027:trace:mscms:from_type color type: 0x00000007 0027:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7cb564c3 ip=7cb564c3 tid=0027 0027:trace:seh:raise_exception info[0]=00000000 0027:trace:seh:raise_exception info[1]=000000ab 0027:trace:seh:raise_exception eax=00000000 ebx=7cb86000 ecx=00000000 edx=7bd01da8 esi=00000000 edi=003227e8 0027:trace:seh:raise_exception ebp=003227c8 esp=003226e0 cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00210246 0027:trace:seh:call_stack_handlers calling handler at 0xeb6c7b code=c0000005 flags=0 ... Unhandled exception: page fault on read access to 0x000000ab in 32-bit code (0x7cb564c3). ... Backtrace: =>0 0x7cb564c3 cmsChangeBuffersFormat+0x23() in liblcms2.so.2 (0x003227c8) 1 0x7d0da874 TranslateColors+0xd7(handle=0x1, in=0x3228a0, count=0x1, input_type=COLOR_CMYK, out=0x3248a0, output_type=COLOR_RGB) [/home/focht/projects/wine/wine.repo/src/dlls/mscms/transform.c:371] in mscms (0x003227c8) 2 0x7bc7e52e relay_call+0x39() in ntdll (0x003227f4) 3 0x7d0d420d in mscms (+0x420c) (0x003268ac) 4 0x006a75bf in photoline (+0x2a75be) (0x003268ac) 5 0x00754e6f in photoline (+0x354e6e) (0x00327a74) 0x7cb564c3 cmsChangeBuffersFormat+0x23 in liblcms2.so.2: testb $0x2,0xab(%esi) Modules: Module Address Debug info Name (115 modules) PE 400000- 14c7000 Export photoline ELF 495dd000-495fb000 Deferred libgcc_s.so.1 ELF 7b800000-7ba71000 Deferred kernel32<elf> -PE 7b820000-7ba71000 \ kernel32 ... Threads: process tid prio (all id:s are in hex) ... 00000026 (D) C:\Program Files\PhotoLine\PhotoLine.exe 0000002a 0 00000029 0 00000028 0 00000027 0 <== --- snip ---
Using winedbg proxy mode:
--- snip --- ... Program received signal SIGSEGV, Segmentation fault.
cmsChangeBuffersFormat (hTransform=0x0, InputFormat=393250, OutputFormat=262170) at cmsxform.c:1118 1118 if (!(xform ->dwOriginalFlags & cmsFLAGS_CAN_CHANGE_FORMATTER)) { Wine-gdb> bt #0 cmsChangeBuffersFormat (hTransform=0x0, InputFormat=393250, OutputFormat=262170) at cmsxform.c:1118 #1 0x7cc3c874 in TranslateColors (handle=0x1, in=0x3328e0, count=1, input_type=COLOR_CMYK, out=0x3348e0, output_type=COLOR_RGB) at /home/focht/projects/wine/wine.repo/src/dlls/mscms/transform.c:371 #2 0x006a75bf in ?? () #3 0x00754e6f in ?? () #4 0x00000000 in ?? () --- snip ---
The missing error handling of 'cmsCreateMultiprofileTransform()' causes a transform handle being returned when it shouldn't. The path leading to failure itself could be another issue.
Source: https://source.winehq.org/git/wine.git/blob/685b931c2a11219da3949cd1ad5a1fa9...
--- snip --- 204 HTRANSFORM WINAPI CreateMultiProfileTransform( PHPROFILE profiles, DWORD nprofiles, 205 PDWORD intents, DWORD nintents, DWORD flags, DWORD cmm ) 206 { 207 HTRANSFORM ret = NULL; 208 #ifdef HAVE_LCMS2 209 cmsHPROFILE *cmsprofiles, cmsconvert = NULL; 210 struct transform transform; 211 struct profile *profile0, *profile1; 212 DWORD in_format, out_format; ... 243 cmsprofiles = HeapAlloc( GetProcessHeap(), 0, (nprofiles + 1) * sizeof(cmsHPROFILE) ); 244 if (cmsprofiles) 245 { 246 cmsprofiles[0] = profile0->cmsprofile; 247 if (cmsconvert) 248 { 249 cmsprofiles[1] = cmsconvert; 250 cmsprofiles[2] = profile1->cmsprofile; 251 nprofiles++; 252 } 253 else 254 { 255 cmsprofiles[1] = profile1->cmsprofile; 256 } 257 transform.cmstransform = cmsCreateMultiprofileTransform( cmsprofiles, nprofiles, in_format, out_format, *intents, 0 ); 258 259 HeapFree( GetProcessHeap(), 0, cmsprofiles ); 260 ret = create_transform( &transform ); 261 } 262 263 release_profile( profile0 ); 264 release_profile( profile1 ); 265 266 #endif /* HAVE_LCMS2 */ 267 return ret; 268 } --- snip ---
(line 257)
$ sha1sum pl.exe 41043a0ee25ece198a3b91e176900c97901c1252 pl.exe
$ du -sh pl.exe 21M pl.exe
$ wine --version wine-1.7.48-100-ge3c6777
Regards
https://bugs.winehq.org/show_bug.cgi?id=32671
--- Comment #12 from Hans Leidekker hans@meelstraat.net --- Created attachment 51989 --> https://bugs.winehq.org/attachment.cgi?id=51989 patch
Does this patch help?
https://bugs.winehq.org/show_bug.cgi?id=32671
--- Comment #13 from Anastasius Focht focht@gmx.net --- Hello Hans,
your patch prevents the crash, letting the app start.
'CreateMultiProfileTransform()' still fails though, with the error code/path changed from:
--- snip --- lcms_error_handler 9 "Wrong output color space on transform" --- snip ---
to:
--- snip --- lcms_error_handler 8 "Unsupported raster format" --- snip ---
Trace log with patch applied:
--- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/PhotoLine
$ WINEDEBUG=+tid,+seh,+relay,+mscms wine ./PhotoLine.exe >>log.txt 2>&1 ... 0027:Call mscms.OpenColorProfileA(00322734,00000001,00000001,00000003) ret=006a78c1 0027:trace:mscms:OpenColorProfileA ( 0x322734, 0x00000001, 0x00000001, 0x00000003 ) ... 0027:trace:mscms:OpenColorProfileW ( 0x32266c, 0x00000001, 0x00000001, 0x00000003 ) 0027:trace:mscms:OpenColorProfileW profile file: L"C:\Program Files\PhotoLine\Defaults\ISOcoated_v2_eci.icc" ... 0027:Call KERNEL32.CreateFileW(001fb418 L"C:\Program Files\PhotoLine\Defaults\ISOcoated_v2_eci.icc",80000000,00000001,00000000,00000003,00000000,00000000) ret=7cc3acfa 0027:Ret KERNEL32.CreateFileW() retval=00000248 ret=7cc3acfa ... 0027:Ret mscms.OpenColorProfileA() retval=00000001 ret=006a78c1 ... 0027:Call mscms.IsColorProfileValid(00000001,0032271c) ret=006a78fb 0027:trace:mscms:IsColorProfileValid ( 0x1, 0x32271c ) 0027:Ret mscms.IsColorProfileValid() retval=00000001 ret=006a78fb ... 0027:Call mscms.OpenColorProfileA(00322734,00000001,00000001,00000003) ret=006a78c1 0027:trace:mscms:OpenColorProfileA ( 0x322734, 0x00000001, 0x00000001, 0x00000003 ) 0027:trace:mscms:OpenColorProfileW ( 0x322734, 0x00000001, 0x00000001, 0x00000003 ) ... 0027:Ret mscms.OpenColorProfileA() retval=00000002 ret=006a78c1 ... 0027:Call mscms.IsColorProfileValid(00000002,0032271c) ret=006a78fb 0027:trace:mscms:IsColorProfileValid ( 0x2, 0x32271c ) 0027:Ret mscms.IsColorProfileValid() retval=00000001 ret=006a78fb ... 0027:Call mscms.CreateMultiProfileTransform(003227d0,00000002,003227c4,00000002,00000003,00000000) ret=006a74bf 0027:trace:mscms:CreateMultiProfileTransform ( 0x3227d0, 0x00000002, 0x3227c4, 0x00000002, 0x00000003, 0x00000000 ) 0027:trace:mscms:from_profile color space (output 0): 434d594b 'CMYK' -> 00000006 0027:trace:mscms:from_profile color space (output 1): 58595a20 'XYZ ' -> 00000009 ... 0027:trace:mscms:lcms_error_handler 8 "Unsupported raster format" ... 0027:Ret mscms.CreateMultiProfileTransform() retval=00000000 ret=006a74bf --- snip ---
$ wine --version wine-1.7.48-100-ge3c6777
Regards
https://bugs.winehq.org/show_bug.cgi?id=32671
--- Comment #14 from Hans Leidekker hans@meelstraat.net --- Thanks for testing. I found ISOcoated_v2_eci.icc on the web with sha1sum 711de43d215ed1f69a6a04965b7c7e21f9a0a00f. Does it match yours?
https://bugs.winehq.org/show_bug.cgi?id=32671
--- Comment #15 from Anastasius Focht focht@gmx.net --- Hello Hans,
--- quote -- I found ISOcoated_v2_eci.icc on the web with sha1sum 711de43d215ed1f69a6a04965b7c7e21f9a0a00f. Does it match yours? --- quote ---
yes, it's the same:
--- snip --- $ sha1sum ISOcoated_v2_eci.icc 711de43d215ed1f69a6a04965b7c7e21f9a0a00f ISOcoated_v2_eci.icc
$ ls -lsa ISOcoated_v2_eci.icc 1788 -rw-rw-r--. 1 focht focht 1829077 Feb 28 2007 ISOcoated_v2_eci.icc --- snip ---
Regards
https://bugs.winehq.org/show_bug.cgi?id=32671
--- Comment #16 from Hans Leidekker hans@meelstraat.net --- The crash is fixed with ee849808957773e8ad8b21c86b1f4b347b2f0cbf and the "Wrong output color space on transform" error should be fixed with d2c9e5560a2aa13319e2ea3e8ea8899e5aea1f55.
https://bugs.winehq.org/show_bug.cgi?id=32671
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |ee849808957773e8ad8b21c86b1 | |f4b347b2f0cbf Status|NEW |RESOLVED Resolution|--- |FIXED
--- Comment #17 from Anastasius Focht focht@gmx.net --- Hello folks,
this is fixed by commits:
https://source.winehq.org/git/wine.git/commitdiff/ee849808957773e8ad8b21c86b... ("mscms: Check the return value of a couple of liblcms2 calls.")
https://source.winehq.org/git/wine.git/commitdiff/d2c9e5560a2aa13319e2ea3e8e... ("mscms: Let liblcms2 determine input and output format for transform profiles.")
Thanks Hans
--- snip --- $ pwd /home/focht/.wine/drive_c/Program Files/PhotoLine
$ WINEDEBUG=+tid,+seh,+relay,+mscms wine ./PhotoLine.exe >>log.txt 2>&1 ... 0033:Call mscms.OpenColorProfileA(00322734,00000001,00000001,00000003) ret=006a78c1 0033:trace:mscms:OpenColorProfileA ( 0x322734, 0x00000001, 0x00000001, 0x00000003 ) ... 0033:trace:mscms:OpenColorProfileW ( 0x32266c, 0x00000001, 0x00000001, 0x00000003 ) 0033:trace:mscms:OpenColorProfileW profile file: L"C:\Program Files\PhotoLine\Defaults\ISOcoated_v2_eci.icc" ... 0033:Call mscms.IsColorProfileValid(00000001,0032271c) ret=006a78fb 0033:trace:mscms:IsColorProfileValid ( 0x1, 0x32271c ) 0033:Ret mscms.IsColorProfileValid() retval=00000001 ret=006a78fb ... 0033:Call mscms.OpenColorProfileA(00322734,00000001,00000001,00000003) ret=006a78c1 0033:trace:mscms:OpenColorProfileA ( 0x322734, 0x00000001, 0x00000001, 0x00000003 ) 0033:trace:mscms:OpenColorProfileW ( 0x322734, 0x00000001, 0x00000001, 0x00000003 ) ... 0033:Ret mscms.OpenColorProfileA() retval=00000002 ret=006a78c1 0033:Call mscms.IsColorProfileValid(00000002,0032271c) ret=006a78fb 0033:trace:mscms:IsColorProfileValid ( 0x2, 0x32271c ) 0033:Ret mscms.IsColorProfileValid() retval=00000001 ret=006a78fb ... 0033:Call mscms.CreateMultiProfileTransform(003227d0,00000002,003227c4,00000002,00000003,00000000) ret=006a74bf 0033:trace:mscms:CreateMultiProfileTransform ( 0x3227d0, 0x00000002, 0x3227c4, 0x00000002, 0x00000003, 0x00000000 ) ... 0033:Ret mscms.CreateMultiProfileTransform() retval=00000001 ret=006a74bf ... 0033:Call mscms.TranslateColors(00000001,003228a0,00000001,00000007,003248a0,00000002) ret=006a75bf 0033:trace:mscms:TranslateColors ( 0x1, 0x3228a0, 1, 7, 0x3248a0, 2 ) 0033:trace:mscms:from_type color type: 00000002 -> 0004001a 0033:trace:mscms:from_type color type: 00000007 -> 00060022 0033:Ret mscms.TranslateColors() retval=00000001 ret=006a75bf ... --- snip ---
Regards
https://bugs.winehq.org/show_bug.cgi?id=32671
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #18 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 1.7.50.
https://bugs.winehq.org/show_bug.cgi?id=32671
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Component|-unknown |mscms