http://bugs.winehq.org/show_bug.cgi?id=24160
Summary: sigcheck incorrectly validates modified exes Product: Wine Version: 1.3.1 Platform: x86 URL: http://technet.microsoft.com/en-us/sysinternals/bb8974 41.aspx OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: crypt32 AssignedTo: wine-bugs@winehq.org ReportedBy: adys.wh@gmail.com
http://www.pastethat.com/dJurt/get (3MB compressed, 8MB uncompressed - cant attach)
wine sigcheck -q wow2.exe
Z:\home\adys\Wow2.exe: Verified: Signed Signing date: 1:43 PM 8/26/2010 Publisher: Blizzard Entertainment Description: World of Warcraft Retail Product: World of Warcraft Version: Version 3.3 File version: 3, 3, 5, 12340 fixme:mscoree:CorExitProcess (0) stub
The file is NOT valid, and on Windows it shows up as "Bad signature" instead of Signed.
http://bugs.winehq.org/show_bug.cgi?id=24160
--- Comment #1 from Jerome Leclanche adys.wh@gmail.com 2010-08-26 08:09:11 --- Created an attachment (id=30404) --> (http://bugs.winehq.org/attachment.cgi?id=30404) Smaller exe
Smaller exe that reproduces the issue
http://bugs.winehq.org/show_bug.cgi?id=24160
Jerome Leclanche adys.wh@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download
http://bugs.winehq.org/show_bug.cgi?id=24160
Juan Lang juan_lang@yahoo.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Component|crypt32 |wintrust
--- Comment #2 from Juan Lang juan_lang@yahoo.com 2010-08-26 11:41:27 --- Wintrust is a more likely component.
http://bugs.winehq.org/show_bug.cgi?id=24160
Juan Lang juan_lang@yahoo.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |NEW Ever Confirmed|0 |1
--- Comment #3 from Juan Lang juan_lang@yahoo.com 2010-09-02 11:24:38 CDT --- Confirming. Output on Windows XP on the smaller exe: C:\foo\WowError2.exe: Verified: Bad Signature Signing date: 9:23 AM 9/2/2010 Publisher: n/a Description: n/a Product: n/a Version: n/a File version: n/a
http://bugs.winehq.org/show_bug.cgi?id=24160
--- Comment #4 from Juan Lang juan_lang@yahoo.com 2010-09-07 11:42:09 CDT --- For what it's worth, I mentioned this limitation a while back: http://www.winehq.org/pipermail/wine-devel/2008-July/067661.html
In order to verify a file's signature, we need to be able to generate a correct one. That's partly bug 16420, i.e. an implementation of wintrust:CryptSIPCreateIndirectData is probably needed. I don't think they're quite duplicates.
http://bugs.winehq.org/show_bug.cgi?id=24160
Jerome Leclanche adys.wh@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends on| |16420
http://bugs.winehq.org/show_bug.cgi?id=24160
Chris Boyle chris@boyle.name changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |chris@boyle.name
http://bugs.winehq.org/show_bug.cgi?id=24160
Austin English austinenglish@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |austinenglish@gmail.com
http://bugs.winehq.org/show_bug.cgi?id=24160
--- Comment #5 from Austin English austinenglish@gmail.com 2013-09-19 20:13:17 CDT --- austin@aw25 ~ $ wine sigcheck.exe WowError2.exe fixme:process:SetProcessDEPPolicy (1): stub fixme:wer:WerSetFlags (2) stub! fixme:heap:HeapSetInformation (nil) 1 (nil) 0 fixme:process:SetProcessShutdownParameters (00000380, 00000000): partial stub.
Sigcheck v1.92 - File version and signature viewer Copyright (C) 2004-2013 Mark Russinovich Sysinternals - www.sysinternals.com
fixme:wintrust:CryptCATEnumerateMember unhandled object id "1.3.6.1.4.1.311.12.2.1" ^ repeats a dozen or so times
Z:\home\austin\WowError2.exe: Verified: Signed Signing date: 12:21 AM 6/25/2010 Publisher: Blizzard Entertainment Description: n/a Product: n/a Version: n/a File version: n/a
still in wine-1.7.2-106-g7f859e5
https://bugs.winehq.org/show_bug.cgi?id=24160
roger@mailinator.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |roger@mailinator.com
--- Comment #6 from roger@mailinator.com --- Sigcheck v2.1 - File version and signature viewer Copyright (C) 2004-2014 Mark Russinovich Sysinternals - www.sysinternals.com
Z:\home\ko\Downloads\WowError2.exe: Verified: Signed Signing date: 9:21 25.6.2010 Publisher: Blizzard Entertainment Description: n/a Product: n/a Prod version: n/a File version: n/a MachineType: 32-bit
wine 1.7.31
https://bugs.winehq.org/show_bug.cgi?id=24160 Bug 24160 depends on bug 16420, which changed state.
Bug 16420 Summary: Certificate chaining error trying to use Microsoft signcode tool https://bugs.winehq.org/show_bug.cgi?id=16420
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution|--- |ABANDONED
https://bugs.winehq.org/show_bug.cgi?id=24160
Romain Lechat romlepetitlyonnais@hotmail.fr changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |romlepetitlyonnais@hotmail. | |fr
--- Comment #7 from Romain Lechat romlepetitlyonnais@hotmail.fr --- Hello,
I am looking for a solution to this bug. Has anyone found it ?
Thanks
-
wine-bugs＠winehq.org