[Bug 18274] New: Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

Summary: Xenocode Virtual Appliance Runtime Error 0xD0000022
           Product: Wine
           Version: 1.1.20
          Platform: PC
               URL: http://rvgsoftware.fileburst.com/holdemmanager.zip
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: -unknown
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

Running the application Hold'em Manager(Free trial available at
http://rvgsoftware.fileburst.com/holdemmanager.zip) pops up an error dialog
with the following message:

"
Xenocode Virtual Appliance Runtime

The application has encountered an error: 0xD0000022

Please contact the publisher of this application for more information.
"

This message looks similar to the one from bug #12830, but with a different
error code(0xD0000022 instead of 0xD000003A).

Attached log using WINEDEBUG=+tid,+seh,+ntdll,+file,+snoop,+relay.

[Bug 18274] Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

--- Comment #1 from Nicholas   2009-04-28 22:13:05 ---
Created an attachment (id=20803)
 --> (http://bugs.winehq.org/attachment.cgi?id=20803)
log using WINEDEBUG=+tid,+seh,+ntdll,+file,+snoop,+relay

[Bug 18274] Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download

[Bug 18274] Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

Jeff Zaroyko  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |obfuscation

[Bug 18274] Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

Anastasius Focht  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #2 from Anastasius Focht   2009-04-29 15:40:01 ---
Hello,

use of +relay thunks is useless because Xenocode hooks into native API using
special trampolines and you won't see all calls made.

This seems to be the culprit:

--- snip ---
...
0009: create_mapping( access=00000006, attributes=00000000, protect=00000043,
size=003d6000, file_handle=0000, objattr={rootdir=0000,sd={},name=L""} )
0009: create_mapping() = 0 { handle=0054 } 
...
0009:trace:virtual:NtMapViewOfSection handle=0x54 process=0xffffffff addr=(nil)
off=000000000 size=0 access=4
0009: get_mapping_info( handle=0054, access=00000003 )
0009: get_mapping_info() = ACCESS_DENIED { size=00000000, protect=0,
header_size=0, base=00000000, mapping=0000, shared_file=0000 }
0009: close_handle( handle=0054 )
0009: close_handle() = 0
0009: output_debug_string( length=252, string=00137650, unicode=1 )
0009: output_debug_string() = 0
0009:warn:debugstr:OutputDebugStringW L"This application has encountered an
error: 0xD0000022\n\nPlease contact the publisher of this application for more
information." 
--- snip ---

Partly emulated NtCreateSection() (hook) passes down following params:

access: SECTION_MAP_READ | SECTION_MAP_WRITE 
protect = VPROT_READ | VPROT_WRITE | VPROT_COMMITTED

When the section is about to be mapped, NtMapViewOfSection() (not
emulated/hooked) is passed following params:

protect: PAGE_READWRITE which is tranlated into: SECTION_QUERY |
SECTION_MAP_WRITE for get_mapping_info()

This fails because no SECTION_QUERY right is present.
Seems this right has to be added internally to access flags before making
wineserver creating the section to have later map succeeding.
Don't know which access flags combinations imply this flag hence it might need
a conformance test case to find out.

Regards

[Bug 18274] Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

--- Comment #3 from Anastasius Focht   2009-05-09 11:10:49 ---
Hello,

note: after this bug is fixed you will run into bug 11030

Regards

[Bug 18274] Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

--- Comment #4 from Anastasius Focht   2009-05-20 15:14:21 ---
Hello,

thanks, fixed by commit d5d0738fb9f87f2c01c172d1653158444f520efa

--- snip ---
...
0009: create_mapping( access=00000006, attributes=00000000, protect=00000043,
size=003d6000, file_handle=0000, objattr={rootdir=0000,sd={},name=L""} )
0009: create_mapping() = 0 { handle=0054 }
...
0009:trace:virtual:NtMapViewOfSection handle=0x54 process=0xffffffff addr=(nil)
off=000000000 size=0 access=4
0009: get_mapping_info( handle=0054, access=00000002 )
0009: get_mapping_info() = 0 { size=003d6000, protect=67, header_size=0,
base=00000000, mapping=0060, shared_file=0000 }
0009: get_handle_fd( handle=0054 )
0009: *fd* 0054 -> 28
0009: get_handle_fd() = 0 { type=1, removable=0, access=00000006,
options=00000020 }
0009:trace:virtual:map_view got mem in reserved area 0xe50000-0x1226000
0009:trace:virtual:VIRTUAL_DumpView View: 0xe50000 - 0x1225fff (anonymous)
0009:trace:virtual:VIRTUAL_DumpView       0xe50000 - 0x1225fff c-rw-
0009:trace:virtual:create_view forcing exec permission on 0xe50000-0x1225fff
0009:trace:virtual:NtMapViewOfSection handle=0x54 size=3d6000 offset=000000000
0009:trace:virtual:NtProtectVirtualMemory 0xffffffff 0x400000 003da000 00000040
0009:trace:virtual:VIRTUAL_SetProt 0x400000-0x7d9fff c-rwx
0009:trace:virtual:VIRTUAL_DumpView View: 0x400000 - 0x7e9fff 0x20
0009:trace:virtual:VIRTUAL_DumpView       0x400000 - 0x7d9fff c-rwx
0009:trace:virtual:VIRTUAL_DumpView       0x7da000 - 0x7dffff c----
0009:trace:virtual:VIRTUAL_DumpView       0x7e0000 - 0x7e9fff c-r--
0009: close_handle( handle=0060 )
0009: close_handle() = 0
0009:trace:virtual:NtFreeVirtualMemory 0xffffffff 0xff8e0000 003e0000 4000
0009: close_handle( handle=0054 )
0009: close_handle() = 0 
...
--- snip ---

Regarding the follow up bug (comment #3) it seems the download has changed and
I get now a different result (which is another bug i've already seen but not
filed yet).
Most likely different flavours of this Xenocode appliance.

Please mark it FIXED - even if the app displays a crash dialog now.
This specific problem is resolved and follow up issues are tracked separately.

Regards

[Bug 18274] Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |FIXED

--- Comment #5 from Austin English   2009-05-20 16:08:59 ---
Fixed.

[Bug 18274] Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #6 from Alexandre Julliard   2009-05-22 11:18:13 ---
Closing bugs fixed in 1.1.22.

[Bug 18274] Xenocode Virtual Appliance Runtime Error 0xD0000022

http://bugs.winehq.org/show_bug.cgi?id=18274

Anastasius Focht  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
      Fixed by SHA1|                            |d5d0738fb9f87f2c01c172d1653
                   |                            |158444f520efa
          Component|-unknown                    |ntdll