[Bug 36081] New: mshtml/doc test crashes

https://bugs.winehq.org/show_bug.cgi?id=36081

Bug ID: 36081
           Summary: mshtml/doc test crashes
           Product: Wine
           Version: 1.7.17
          Hardware: x86
               URL: https://test.winehq.org/data/fba08e34c4478fdce5055c5c3
                    ead7d8958875bae/linux_ae-fedora64/mshtml:dom.html
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: msi
          Assignee: [e-mail]
          Reporter: [e-mail]

Apparently it only occurs for me if I run from winetest, make dom.ok works, but
./wine winetest -c -t foo -o foo -m foo mshtml:dom

will fail.

backtrace/logs attached.

[Bug 36081] mshtml/doc test crashes

https://bugs.winehq.org/show_bug.cgi?id=36081

--- Comment #1 from Austin English  ---
Created attachment 48265
  --> https://bugs.winehq.org/attachment.cgi?id=48265
mshtml,tid,seh + backtrace

[Bug 36081] mshtml/doc test crashes

https://bugs.winehq.org/show_bug.cgi?id=36081

--- Comment #2 from Austin English  ---
Created attachment 48266
  --> https://bugs.winehq.org/attachment.cgi?id=48266
backtrace

[Bug 36081] mshtml/doc test crashes

https://bugs.winehq.org/show_bug.cgi?id=36081

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download, regression,
                   |                            |testcase
                 CC|                            |[e-mail]
    Regression SHA1|                            |3ec1da918ca8147a5780564fb63
                   |                            |d606b0fd8610f

--- Comment #3 from Austin English  ---
[austin@localhost wine-git]$ git bisect good
3ec1da918ca8147a5780564fb63d606b0fd8610f is the first bad commit
commit 3ec1da918ca8147a5780564fb63d606b0fd8610f
Author: Jacek Caban 
Date:   Tue Apr 22 16:23:01 2014 +0200

mshtml: Fixed HTMLElementCollectionEnum_Next implementation for NULL
pCeltFetched.

:040000 040000 a967aeb9bad7eba0029e1b53c436a47bf39affa2
176a78500b1055070db5205b5d04717383e4e9cc M    dlls

[Bug 36081] mshtml/doc test crashes

https://bugs.winehq.org/show_bug.cgi?id=36081

Jacek Caban  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
    Regression SHA1|3ec1da918ca8147a5780564fb63 |22c2d81a2d334a8ec324fb9bdb7
                   |d606b0fd8610f               |1c8f08ce12158

--- Comment #4 from Jacek Caban  ---
I'm pretty sure 22c2d81a2d334a8ec324fb9bdb71c8f08ce12158 is the real cause of
the regression (it corrupts memory, which would explain why git bisect could
return random other commit). Anyway, patch sent:

http://source.winehq.org/patches/data/104198

[Bug 36081] mshtml/doc test crashes

https://bugs.winehq.org/show_bug.cgi?id=36081

--- Comment #5 from Austin English  ---
Still crashes for me in wine-1.7.17-105-gcb1242a:
https://test.winehq.org/data/cb1242a8f286f00faece961616d613149166325a/linux_...

[Bug 36081] mshtml/doc test crashes

http://bugs.winehq.org/show_bug.cgi?id=36081

Hans Leidekker  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|msi                         |mshtml

[Bug 36081] mshtml/doc test crashes

https://bugs.winehq.org/show_bug.cgi?id=36081

--- Comment #6 from Nikolay Sivov  ---
Hi, Austin.

Does it still happen on your system? I don't see any such crashes on test page.

[Bug 36081] mshtml/dom test crashes

https://bugs.winehq.org/show_bug.cgi?id=36081

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED
            Summary|mshtml/doc test crashes     |mshtml/dom test crashes

--- Comment #7 from Austin English  ---
(In reply to Nikolay Sivov from comment #6)
> Hi, Austin.
>
> Does it still happen on your system? I don't see any such crashes on test
> page.

No. I can still get it to crash in wine-1.7.17-105-gcb1242a though, so it was
fixed in wine. Working on bisecting it, but the msi regression that broke gecko
install is making it a bit of a pain..

[Bug 36081] mshtml/dom test crashes

https://bugs.winehq.org/show_bug.cgi?id=36081

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #8 from Alexandre Julliard  ---
Closing bugs fixed in 1.8-rc2.