https://bugs.winehq.org/show_bug.cgi?id=52452
Bug ID: 52452 Summary: Tooltip handler for wrong dialog is invoked in OpenMPT Product: Wine Version: 7.0 Hardware: x86-64 OS: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs@winehq.org Reporter: wine@sagagames.de Distribution: ---
In OpenMPT (https://openmpt.org/) we use an MDI interface, and MDI windows are split in half with a splitter inbetween. The two halfs are generated from two separate dialog resources and thus events sent to one half should not influence the other.
A user has reported a crash (https://bugs.openmpt.org/view.php?id=1553) that happens when hovering certain controls in the lower half of one of these views, and from the memory dump I can see that the hovering caused Wine to request tooltip information from the upper half of the view rather than the lower half. As the dialog item ID that was hovered didn't exist in the upper half of the view, the app crashed with a null-pointer access. Trying to reproduce this myself, I couldn't trigger the crash in Wine 7.0.0 (the user was on 7.0rc5-1) but nevertheless I found that the tooltips don't work in the lower half of the view, probably caused by the same issue that lead to the crash.
Reproduction steps:
1) File -> New -> IT to create a new document 2) You should now see the General Tab. You should be able to see various custom tooltips when hovering items above the splitter. 3) Hovering items (e.g. the sliders) below the splitter should either lead to a crash or not show any tooltip. On Windows, you would be seeing tooltips on those sliders. Hovering the tab control right below the splitter caused a crash for the user but it didn't for me.
https://bugs.winehq.org/show_bug.cgi?id=52452
--- Comment #1 from Johannes wine@sagagames.de --- Correction: I can reproduce the crash as well, but you require a current test version of OpenMPT, the latest stable version downloadable from our website doesn't contain this code path yet.
You can obtain current test versions which exhibit this issue at https://builds.openmpt.org/builds/auto/openmpt/pkg.win/1.31/
https://bugs.winehq.org/show_bug.cgi?id=52452
--- Comment #2 from Johannes wine@sagagames.de --- Specifically the version that was used for the memory dump attached to the OpenMPT bug report: https://builds.openmpt.org/builds/auto/openmpt/pkg.win/1.31/OpenMPT-1.31.00.... Debug symbols to decode the memory dump: https://builds.openmpt.org/builds/auto/openmpt/dbg.win/1.31/OpenMPT-1.31.00....