[Bug 32007] New: AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

http://bugs.winehq.org/show_bug.cgi?id=32007

Bug #: 32007
           Summary: AMD Demo - Whiteout crashes with null-ish pointer read
                    after dxgi_output_GetDisplayModeList
           Product: Wine
           Version: 1.5.15
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: directx-dxgi
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

Found while checking bug 23402.

Installing just the demo, and declining DirectX runtime installation,
succeeds if you set wine for vista.  The app then aborts with

fixme:dxgi:dxgi_output_GetDisplayModeList iface 0x140a38, format
DXGI_FORMAT_R8G8B8A8_UNORM, flags 0x3, mode_count 0x33fa1c, desc (nil) partial
stub!
wine: Unhandled page fault on read access to 0x00000030 at address 0x30 (thread
0009), starting debugger...

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

http://bugs.winehq.org/show_bug.cgi?id=32007

Dan Kegel  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download
                URL|                            |http://www2.ati.com/misc/de
                   |                            |mos/amd-demo-whiteout-v1.0.
                   |                            |msi

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

http://bugs.winehq.org/show_bug.cgi?id=32007

sacrediou  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

http://bugs.winehq.org/show_bug.cgi?id=32007

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|directx-dxgi                |directx-d3d

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

http://bugs.winehq.org/show_bug.cgi?id=32007

John  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

narri  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #1 from narri  ---
Could someone test if he is able to install or run this with 1.7.39-1.7.41
wine.

I cant even install this now with 1.7.42, but I think I was not a long ago.

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

[e-mail] changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail],
                   |                            |[e-mail]

--- Comment #2 from [e-mail] ---
installed in vista mode, declined directx.

fixme:d3d11:D3D11CoreCreateDevice Ignoring feature levels.
fixme:dxgi:dxgi_check_d3d10_support Ignoring adapter type.
fixme:winediag:dxgi_check_d3d10_support Direct3D 10 is not supported on this
GPU with the current shader backend.

I don't get a crash. It complains about my gpu and doesnt run.

wine 1.7.55

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

--- Comment #3 from [e-mail] ---
Created attachment 52847
  --> https://bugs.winehq.org/attachment.cgi?id=52847
error message 1.8.rc1

It installs,

fixme:d3d11:D3D11CoreCreateDevice Ignoring feature levels.
fixme:dxgi:dxgi_check_d3d10_support Ignoring adapter type.
fixme:winediag:dxgi_check_d3d10_support Direct3D 10 is not supported on this
GPU with the current shader backend.

When trying to run it I hit the error message seen at attachment.

I don't get the crash mentioned here.

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

--- Comment #4 from [e-mail] ---
The original issue is still valid.

I had to get around

fixme:winediag:dxgi_check_d3d10_support Direct3D 10 is not supported on this
GPU with the current shader backend.

wine 1.9.1

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

Józef Kucia  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #5 from Józef Kucia  ---
Created attachment 53386
  --> https://bugs.winehq.org/attachment.cgi?id=53386
dxgi: Hack

This is similar to bug 37460. Generally, IDXGIObjects have to keep a reference
to a parent.

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

Józef Kucia  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           See Also|                            |https://bugs.winehq.org/sho
                   |                            |w_bug.cgi?id=37460

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

Sergey Isakov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #6 from Sergey Isakov  ---
(In reply to Józef Kucia from comment #5)
> Created attachment 53386 [details]
> dxgi: Hack
>
> This is similar to bug 37460. Generally, IDXGIObjects have to keep a
> reference to a parent.

Didn't help me. But strange, I have other log
~~~
fixme:ntoskrnl:IoCreateSynchronizationEvent (0x53f3a0 0x53f3ac) stub
fixme:ntoskrnl:IoAllocateErrorLogEntry stub: 0x3e3ac49c, 48
fixme:exec:SHELL_execute flags ignored: 0x00000100
fixme:ntdll:NtLockFile I/O completion on lock not implemented yet
err:msi:ITERATE_Actions Execution halted, action L"LaunchConditions" returned
1603
~~~

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

--- Comment #7 from Sergey Isakov  ---
Hi,
It requires Windows Vista, not Windows 7 as I set!  :)

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

--- Comment #8 from Sergey Isakov  ---
Crash
~~~
Backtrace:
=>0 0x40211e7b wined3d_rendertarget_view_create+0x13b() in wined3d (0x0033f828)
  1 0x400b5ff6 d3d_rendertarget_view_create+0x425() in d3d11 (0x0033f898)
  2 0x4009eb13 d3d10_device_CreateRenderTargetView+0xa2() in d3d11 (0x0033f8e4)
  3 0x00461894 in whiteoutd3d10 (+0x61893) (0x00facd28)
0x40211e7b wined3d_rendertarget_view_create+0x13b in wined3d: movl   
0x44(%eax),%ecx
Modules:
Module    Address            Debug info    Name (256 modules)
PE      340000-  3ad000    Deferred        d3dx10_33
PE      400000-  703000    Export          whiteoutd3d10
PE    10000000-10143000    Deferred        fmodex
PE    3c001000-3c1b6000    Deferred        libwine.1.0.dylib
~~~
and log
~~~~
fixme:d3d11:device_parent_create_swapchain_texture Implement DXGI<->wined3d
usage conversion
fixme:d3d11:d3d10_device_RSSetViewports Multiple viewports not implemented.
fixme:d3d11:d3d10_device_RSSetScissorRects Multiple scissor rects not
implemented.
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d11:d3d_texture2d_init Array textures not implemented.
wine: Unhandled page fault on read access to 0x00000044 at address 0x40211e7b
(thread 003b), starting debugger...
~~~~

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

--- Comment #9 from Sergey Isakov  ---
Created attachment 53432
  --> https://bugs.winehq.org/attachment.cgi?id=53432
avoid a crash with null-pointers

The crash appears because subresource == NULL.
The rough hack avoid the crash but then I fall into the next crash
~~~~
fixme:d3d11:d3d10_device_RSSetViewports Multiple viewports not implemented.
fixme:d3d11:d3d10_device_RSSetScissorRects Multiple scissor rects not
implemented.
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d11:d3d_texture2d_init Array textures not implemented.
err:d3d:wined3d_rendertarget_view_init no subresource idx=7
err:d3d:wined3d_rendertarget_view_init no subresource idx=14
err:d3d:wined3d_rendertarget_view_init no subresource idx=21
err:d3d:wined3d_rendertarget_view_init no subresource idx=28
err:d3d:wined3d_rendertarget_view_init no subresource idx=35
warn:d3d:resource_init Format WINED3DFMT_R32_TYPELESS cannot be used for
depth/stencil buffers.
warn:d3d:resource_init Format WINED3DFMT_R32_TYPELESS cannot be used for
depth/stencil buffers.
warn:d3d:resource_init Format WINED3DFMT_R32_TYPELESS cannot be used for
depth/stencil buffers.
warn:d3d:resource_init Did not find a suitable GL resource type, resource type,
d3d type 3.
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d:wined3d_buffer_create Ignoring access flags (pool)
fixme:d3d11:d3d10_device_ClearDepthStencilView iface 0x209b64,
depth_stencil_view 0x11e332c, flags 0x3, depth 1.000000, stencil 0 stub!
fixme:d3d11:d3d10_device_RSSetViewports Multiple viewports not implemented.
wine: Unhandled page fault on read access to 0x00000014 at address 0x50a100
(thread 0027), starting debugger...
~~~~

See messages from my patch err:d3d:...
it works every 7 subresources

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

Sergey Isakov  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
  Attachment #53432|0                           |1
           is patch|                            |

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

Józef Kucia  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
      Fixed by SHA1|                            |b835a358819a6bd70bfc3b6f5b7
                   |                            |6c1d9d5cc55a4
             Status|NEW                         |RESOLVED

--- Comment #10 from Józef Kucia  ---
This should be fixed now.

http://source.winehq.org/git/wine.git/?a=commit;h=b835a358819a6bd70bfc3b6f5b...

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

--- Comment #11 from Sergey Isakov  ---
(In reply to Józef Kucia from comment #10)
> This should be fixed now.
>
> http://source.winehq.org/git/wine.git/?a=commit;
> h=b835a358819a6bd70bfc3b6f5b76c1d9d5cc55a4

Yes, the crash fixed.

[Bug 32007] AMD Demo - Whiteout crashes with null-ish pointer read after dxgi_output_GetDisplayModeList

https://bugs.winehq.org/show_bug.cgi?id=32007

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #12 from Alexandre Julliard  ---
Closing bugs fixed in 1.9.8.