http://bugs.winehq.org/show_bug.cgi?id=29155
Bug #: 29155 Summary: Builtin IE with ICBC bank input control crash while closing Product: Wine Version: 1.3.33 Platform: x86 OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown AssignedTo: wine-bugs@winehq.org ReportedBy: fracting@gmail.com Classification: Unclassified
$ wine --version wine-1.3.33-140-ga3c395b
1. Apply patch in Bug 29113 2. Hack dlls/mshtml/persist.c to force use_gecko_script=FALSE
3. $ winetricks -q mfc42 4. Download the input control $ wget http://www.icbc.com.cn/icbc/html/download/dkq/icbc_netbank_client_controls.e... 5. $ wine icbc_netbank_client_controls.exe
6. $ wine iexplore https://mybank.icbc.com.cn
7. click on the second input form, (the password form)
8. click on the close button of iexplore
Result: iexplore crashed
Backtrace: =>0 0x20220e79 PHInPlaceSite_GetWindowContext+0x12b(iface=0x2bd27b0, ppFrame=0x3 2f868, ppDoc=0x32f86c, lprcPosRect=0x32f844, lprcClipRect=0x32f854, frame_info=0 x32f830) [/home/fracting/wine-git/dlls/mshtml/pluginhost.c:900] in mshtml (0x003 2f800) 1 0x0576d03d in inputcontrol (+0xd03c) (0x0032f87c) 2 0x0576d50c in inputcontrol (+0xd50b) (0x0032f8c0) 3 0x201fbf0d NPP_Destroy+0x88(instance=0x2a01e10, save=0x32f940) [/home/fracti ng/wine-git/dlls/mshtml/npplugin.c:290] in mshtml (0x0032f900)
http://bugs.winehq.org/show_bug.cgi?id=29155
fracting fracting@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download URL| |http://www.icbc.com.cn/icbc | |/html/download/dkq/icbc_net | |bank_client_controls.exe
http://bugs.winehq.org/show_bug.cgi?id=29155
Nikolay Sivov bunglehead@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Depends on| |29113
http://bugs.winehq.org/show_bug.cgi?id=29155
--- Comment #1 from fracting fracting@gmail.com 2011-11-24 11:57:03 CST --- Created attachment 37611 --> http://bugs.winehq.org/attachment.cgi?id=37611 Log: iexplore crash with icbc input control
http://bugs.winehq.org/show_bug.cgi?id=29155
Bug 29155 depends on bug 29113, which changed state.
Bug 29113 Summary: Builtin iexplore crashes clicking at https://mybank.icbc.com.cn/icbc/enperbank/index.jsp http://bugs.winehq.org/show_bug.cgi?id=29113
What |Old Value |New Value ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution| |FIXED
http://bugs.winehq.org/show_bug.cgi?id=29155
fracting fracting@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jacek@codeweavers.com
http://bugs.winehq.org/show_bug.cgi?id=29155
--- Comment #2 from Jacek Caban jacek@codeweavers.com 2011-11-28 06:36:23 CST --- I don't get the crash here, please attach mshtml traces.
http://bugs.winehq.org/show_bug.cgi?id=29155
--- Comment #3 from fracting fracting@gmail.com 2011-11-28 07:13:03 CST --- Created attachment 37679 --> http://bugs.winehq.org/attachment.cgi?id=37679 Log: +mshtml trace, however the crash disappear
(In reply to comment #2)
I don't get the crash here, please attach mshtml traces.
Hi Jacek, I found it never crash with WINEDEBUG=+mshtml, but always crash without WINEDEBUG=+mshtml
Any suggestions?
http://bugs.winehq.org/show_bug.cgi?id=29155
--- Comment #4 from fracting fracting@gmail.com 2011-11-28 08:38:32 CST --- (In reply to comment #3)
Hi Jacek, I found it never crash with WINEDEBUG=+mshtml, but always crash without WINEDEBUG=+mshtml
Sorry, this is wrong. After retest, I found iexplore only crash after double clicking on the input control.
Sometimes iexplore hang on after crashing. Will attach logs.
http://bugs.winehq.org/show_bug.cgi?id=29155
fracting fracting@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Attachment #37679|0 |1 is obsolete| |
--- Comment #5 from fracting fracting@gmail.com 2011-11-28 08:40:02 CST --- Created attachment 37680 --> http://bugs.winehq.org/attachment.cgi?id=37680 Log: +mshtml,+tid trace, iexplore crash
http://bugs.winehq.org/show_bug.cgi?id=29155
--- Comment #6 from fracting fracting@gmail.com 2011-11-30 22:47:21 CST --- Still present in today's git version
$ wine --version wine-1.3.33-310-gbf644e0
Doesn't effects 'https://mybank.icbc.com.cn/icbc/newenperbank/main/login.jsp?injectTranName=&...'
http://bugs.winehq.org/show_bug.cgi?id=29155
--- Comment #7 from fracting fracting@gmail.com 2011-12-01 08:22:21 CST --- Hello, the simple html files below is useful for reproduce the bug:
index.html: <html> <frameset > <frame name="indexFrame" src="index_1.html" /> </frameset> </html>
index_1.html: <object id="safeEdit1" classid= "CLSID:73E4740C-08EB-4133-896B-8D0A7C9EE3CD" height="21" width="145"> </object>
steps to reproduce: 1. setup a localhost server
2. open http://127.0.0.1:8000/index.html with wine iexplore
3. *double click* on the input control, then the control will be on focus, and wrapped by dotted lines
4. close iexplore
Actual result: crash
How reproducible: 100% here.
new +mshtml trace will be attached
http://bugs.winehq.org/show_bug.cgi?id=29155
fracting fracting@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Attachment #37680|0 |1 is obsolete| |
--- Comment #8 from fracting fracting@gmail.com 2011-12-01 08:36:17 CST --- Created attachment 37721 --> http://bugs.winehq.org/attachment.cgi?id=37721 iexplore crash, +mshtml trace
http://bugs.winehq.org/show_bug.cgi?id=29155
--- Comment #9 from fracting fracting@gmail.com 2011-12-07 01:37:08 CST --- Updates: * crash on my Ubuntu 11.10 $ uname -a Linux fracting-redhat 3.0.0-13-generic #22-Ubuntu SMP Wed Nov 2 13:25:36 UTC 2011 i686 i686 i386 GNU/Linux
$ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 11.10 Release: 11.10 Codename: oneiric
* doesn't crash on my Ubuntu 11.04
On my Ubuntu 11.10, all of these wine version crash: * wine-1.3.34 from wine ppa * wine-1.3.34-39-g95f81d1 build with gcc-4.6 * wine-1.3.34-39-g95f81d1 build with gcc-4.4 * wine-1.3.34-39-g95f81d1 build with gcc-4.4 on Ubuntu 11.04
On my Ubuntu 11.04, none of below wine version crashes: * wine-1.3.34 from wine ppa * wine-1.3.34-39-g95f81d1 build with gcc-4.4 * wine-1.3.34-39-g95f81d1 build with gcc-4.6 on Ubuntu 11.10
I still can't find much recognized pattern different between the crash one and the normal one.
While copying wine binary from Ubuntu 11.04 to Ubuntu 11.10, I found Ubuntu 11.04 ships libcrypto.so.0.9.8 and libssl.so.0.9.8, but Ubuntu 11.10 ships libcrypto.so.1.0.0 and libssl.so.1.0.0 . Not sure whether it is important.
Regards.
http://bugs.winehq.org/show_bug.cgi?id=29155
fracting fracting@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Attachment #37611|0 |1 is obsolete| |
--- Comment #10 from fracting fracting@gmail.com 2012-01-04 06:33:32 CST --- Created attachment 38257 --> http://bugs.winehq.org/attachment.cgi?id=38257 Log: +mshtml,+jscript trace, with gecko debug info
Yeah, this time gecko debug info works... not sure why till.
http://bugs.winehq.org/show_bug.cgi?id=29155
--- Comment #11 from fracting fracting@gmail.com 2012-01-04 06:34:18 CST --- Still present in wine-1.3.36-72-g8d66ca1, new log with gecko debug info updated
http://bugs.winehq.org/show_bug.cgi?id=29155
Qian Hong fracting@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |RESOLVED Resolution| |FIXED
--- Comment #12 from Qian Hong fracting@gmail.com 2012-07-21 18:23:24 CDT --- No longer crash for me after gecko 1.6 release. Assume fixed since I really don't want to bisect gecko ;-)
http://bugs.winehq.org/show_bug.cgi?id=29155
Qian Hong fracting@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |9fa443dcd9d16265a2d2b41441c | |ea17c3c07e782
http://bugs.winehq.org/show_bug.cgi?id=29155
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #13 from Alexandre Julliard julliard@winehq.org 2012-07-31 14:19:24 CDT --- Closing bugs fixed in 1.5.10.