https://bugs.winehq.org/show_bug.cgi?id=39044
Bug ID: 39044 Summary: Skyforge: In-game browser crash (possibly crypt/ntdll.FILE_CreateFile related). Product: Wine Version: 1.7.48 Hardware: x86 OS: Mac OS X Status: UNCONFIRMED Severity: normal Priority: P2 Component: -unknown Assignee: wine-bugs@winehq.org Reporter: philippe.groarke@gmail.com
Created attachment 52009 --> https://bugs.winehq.org/attachment.cgi?id=52009 Good backtrace
Bug: In-game browser (called Aelinent) crashes on load. Repro: Go to community tab, click Aelinet, crash. (You may need to exit tab and repeat a few times).
Attached is a backtrace. I would definitely appreciate some tips/ideas to further pin-point the crash, ty :)
After spending a LONG time analyzing logs and trying different combinations of debugs, I believe it might be file creation, or crypt (file creation). These are wild guesses.
Of interest: +tid,seh,relay
--> 0088:Call KERNEL32.WriteFile(000014c8,d4e6e8a0,00000055,d5f2f310,00000000) ret=0489a01e 0088:Ret KERNEL32.WriteFile() retval=00000001 ret=0489a01e 0088:Call KERNEL32.ReleaseMutex(000014bc) ret=0489a033 0088:Ret KERNEL32.ReleaseMutex() retval=00000001 ret=0489a033 0088:Call KERNEL32.IsDebuggerPresent() ret=048c35c6 0088:Ret KERNEL32.IsDebuggerPresent() retval=00000000 ret=048c35c6 0088:trace:seh:raise_exception code=80000003 flags=0 addr=0x48c35e0 ip=048c35e1 tid=0088 0088:trace:seh:raise_exception eax=00000000 ebx=00000010 ecx=00000055 edx=00000000 esi=d5f2f480 edi=d5f2f478 0088:trace:seh:raise_exception ebp=d5f2f488 esp=d5f2f2fc cs=001b ds=0023 es=0023 fs=113f gs=000f flags=00000246 0088:trace:seh:call_stack_handlers calling handler at 0x7bc913a0 code=80000003 flags=0
More file creation, though it reports success... +tid,+seh,+ntdll,+mshtml,+wininet,+crypt,+cryptasn,+cryptdlg,+cryptdll,+cryptnet,+cryptui
008c:trace:ntdll:NtQueryInformationFile (0x14c8,0xc6fff270,0xc6fff260,0x00000008,0x00000014) 008c:trace:ntdll:NtSetInformationFile (0x14c8,0xc6fff270,0xc6fff268,0x00000008,0x0000000e) --> 008c:trace:ntdll:NtWriteFile (0x14c8,0x0,0x0,0x0,0xc6fff2b8,0xc77d3ae0,0x00000055,0x0,0x0)! 008c:trace:ntdll:NtWriteFile = SUCCESS (85) 008c:trace:seh:raise_exception code=80000003 flags=0 addr=0x48c35e0 ip=048c35e1 tid=008c 008c:trace:seh:raise_exception eax=00000000 ebx=00000010 ecx=00000001 edx=95e376d2 esi=c6fff480 edi=c6fff478 008c:trace:seh:raise_exception ebp=c6fff488 esp=c6fff2fc cs=001b ds=0023 es=0023 fs=1117 gs=000f flags=00000246 008c:trace:seh:call_stack_handlers calling handler at 0x7bc923c0 code=80000003 flags=0 ... wine: Unhandled exception 0x80000003 in thread 8c at address 0x48c35e0 (thread 008c), starting debugger...
So If I go back a long time before these errors, looking at the crashed thread mainly, some interesting things show up.
The last file created: 008c:trace:ntdll:FILE_CreateFile handle=0xc6ffebfc access=80000000 name=L"\??\C:\users\pgroarke\Local Settings\Temporary Internet Files\Content.IE5\CDJK03WH\DigiCertHighAssuranceEVRootCA[0]" objattr=00000040 root=0x0 sec=0x0 io=0xc6ffec00 alloc_size=0x0 attr=00000080 sharing=00000001 disp=1 options=00000060 ea=0x0.0x00000000
Cause? There are special chars in there (STX ESC SOH ETX ENQ ACK): 008c:trace:crypt:Base64WithHeaderAndTrailerToBinaryA Can't find -----BEGIN in 0‚0‚0 *†H†÷ .
Hope this helps narrow it down. I will continue digging.
https://bugs.winehq.org/show_bug.cgi?id=39044
Ken Sharp imwellcushtymelike@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download URL| |http://static.gc.my.com/Sky | |forgeLoader_en.exe
https://bugs.winehq.org/show_bug.cgi?id=39044
Sebastian Lackner sebastian@fds-team.de changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |sebastian@fds-team.de
--- Comment #1 from Sebastian Lackner sebastian@fds-team.de --- (In reply to philippe.groarke from comment #0)
0088:Call KERNEL32.IsDebuggerPresent() ret=048c35c6 0088:Ret KERNEL32.IsDebuggerPresent() retval=00000000 ret=048c35c6 0088:trace:seh:raise_exception code=80000003 flags=0 addr=0x48c35e0 ip=048c35e1 tid=0088
80000003 is a breakpoint exception, which means the application intentionally crashes, either because some precondition is not fulfilled, or because it thinks that a debugger is attached. It would be interesting to see some more lines of the +tid,+relay,+seh log, otherwise its difficult to come to a conclusion.
https://bugs.winehq.org/show_bug.cgi?id=39044
--- Comment #2 from philippe.groarke@gmail.com --- Created attachment 52013 --> https://bugs.winehq.org/attachment.cgi?id=52013 Thread 88 log (tid,seh,relay).
https://bugs.winehq.org/show_bug.cgi?id=39044
--- Comment #3 from philippe.groarke@gmail.com --- Sure thing! I will also add an excerpt of all threads log. Hopefully I can fix this crash too :)
https://bugs.winehq.org/show_bug.cgi?id=39044
--- Comment #4 from philippe.groarke@gmail.com --- Created attachment 52016 --> https://bugs.winehq.org/attachment.cgi?id=52016 All threads, small exceprt
https://bugs.winehq.org/show_bug.cgi?id=39044
--- Comment #5 from philippe.groarke@gmail.com --- Alright so I was still working on this. I believe the problem is crypt:CertContext_SetProperty. Sometimes the webpage just doesn't appear (first example), when it does it crashes (second output). These are normal wine outputs.
No-crash (empty page):
fixme:advapi:RegisterTraceGuidsW (0x48cf6e0, 0x5ba6cf4, {3dada31d-19ef-4dc1-b345-037927193422}, 1, 0x5b64d8c, (null), (null), 0x5ba6d0c): stub fixme:advapi:RegisterTraceGuidsW register trace class {00000000-0000-0000-0000-000000000000} fixme:advapi:RegisterTraceGuidsW (0x3424d0, 0x34d6e8, {7c830ece-5fb3-417a-a1bd-508f45277356}, 1, 0x33fb84, (null), (null), 0x34d6f0): stub fixme:advapi:RegisterTraceGuidsW register trace class {7c830ece-5fb3-417a-a1bd-508f45277356} fixme:heap:RtlSetHeapInformation 0x0 1 0x0 0 stub fixme:heap:RtlSetHeapInformation 0x0 1 0x0 0 stub fixme:advapi:RegisterTraceGuidsW (0x102bf6e0, 0x11596cf4, {3dada31d-19ef-4dc1-b345-037927193422}, 1, 0x11554d8c, (null), (null), 0x11596d0c): stub fixme:advapi:RegisterTraceGuidsW register trace class {00000000-0000-0000-0000-000000000000} fixme:gdi:GdiInitializeLanguagePack stub
Crash:
fixme:advapi:RegisterTraceGuidsW (0x3424d0, 0x34d6e8, {7c830ece-5fb3-417a-a1bd-508f45277356}, 1, 0x33fb84, (null), (null), 0x34d6f0): stub fixme:advapi:RegisterTraceGuidsW register trace class {7c830ece-5fb3-417a-a1bd-508f45277356} fixme:heap:RtlSetHeapInformation 0x0 1 0x0 0 stub fixme:heap:RtlSetHeapInformation 0x0 1 0x0 0 stub fixme:advapi:RegisterTraceGuidsW (0x102bf6e0, 0x11596cf4, {3dada31d-19ef-4dc1-b345-037927193422}, 1, 0x11554d8c, (null), (null), 0x11596d0c): stub fixme:advapi:RegisterTraceGuidsW register trace class {00000000-0000-0000-0000-000000000000} fixme:gdi:GdiInitializeLanguagePack stub fixme:crypt:CertContext_SetProperty 70: stub fixme:heap:RtlSetHeapInformation 0x0 1 0x0 0 stub fixme:resource:GetGuiResources (0x94,0): stub wine: Unhandled exception 0x80000003 in thread 59 at address 0x48c35e0 (thread 0059), starting debugger...
As I can't attach a debugger, can't analyze 4GB of logs and can't really tell what is crashing, I will let you decide wether you want to close this or not. I am getting headaches trying to debug this stuff, I've gathered all I could. Have a good day.
https://bugs.winehq.org/show_bug.cgi?id=39044
--- Comment #6 from philippe.groarke@gmail.com --- 0073:Call crypt32.CertSetCertificateContextProperty(853474fc,00000046,80000000,1f19ed10) ret=04a38e5f 0065:Call wined3d.wined3d_device_set_sampler_state(10060048,00000006,00000006,00000002) ret=45d27316 0073:fixme:crypt:CertContext_SetProperty 70: stub 007e:Ret KERNEL32.TlsGetValue() retval=00a3f000 ret=106257fb 0073:Ret crypt32.CertSetCertificateContextProperty() retval=00000000 ret=04a38e5f