http://bugs.winehq.org/show_bug.cgi?id=14897
Summary: Jojo's Fashion Show 2: Las Cruces demo crashes when starting Product: Wine Version: 1.1.2 Platform: PC URL: http://www.arcadetown.com/jojosfashionshow2/game.asp OS/Version: Linux Status: UNCONFIRMED Severity: normal Priority: P2 Component: directx-d3d AssignedTo: wine-bugs@winehq.org ReportedBy: madewokherd@gmail.com
Created an attachment (id=15468) --> (http://bugs.winehq.org/attachment.cgi?id=15468) console output
The demo of Jojo's Fashion Show 2: Las Cruces installs fine. When run, it resizes the screen, plays a sound, quickly displays a logo, and crashes.
http://bugs.winehq.org/show_bug.cgi?id=14897
Vincent Povirk madewokherd@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download
http://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #1 from CN Gnome cngnome@gmail.com 2009-03-26 12:47:14 --- I tried to download this for bugging to 1.1.17, but the download said that I have linux and they have no linux. I switched to windows and pressed download after which it said it has no linux version.
Pretty hard to test...
http://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #2 from Vincent Povirk madewokherd@gmail.com 2009-03-26 12:50:12 --- Use the windows version of firefox to do the download.
http://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #3 from CN Gnome cngnome@gmail.com 2009-03-27 15:27:27 --- Ok, I downloaded and installed firefox windows version to wine as I do not have genuine windows available now and downloaded it. The problem is, that it gets corrupted every time I try to run it :(
It says 'bad EXE format'.
So regrettably, I have to leave the testing to someone who can use genuine windows, unless of course, you have a proposka of what I can do about it.
http://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #4 from Vincent Povirk madewokherd@gmail.com 2010-06-23 13:35:19 --- Still present in wine-1.2-rc4-70-g802c4de.
http://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #5 from Vincent Povirk madewokherd@gmail.com 2011-03-30 12:13:57 CDT --- Still present in wine-1.3.16-145-g9ea9a05.
http://bugs.winehq.org/show_bug.cgi?id=14897
Vincent Povirk madewokherd@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |madewokherd@gmail.com
http://bugs.winehq.org/show_bug.cgi?id=14897
Frédéric Delanoy frederic.delanoy@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |NEW URL|http://www.arcadetown.com/j |http://cdn-www.arcadetown.c |ojosfashionshow2/game.asp |om/downloads/jojosfashionsh | |ow2_at.exe CC| |frederic.delanoy@gmail.com Ever Confirmed|0 |1
--- Comment #6 from Frédéric Delanoy frederic.delanoy@gmail.com 2013-05-17 08:32:17 CDT --- Still present in wine-1.5.30-116-g450617e
Updated the URL for easier test/download
http://bugs.winehq.org/show_bug.cgi?id=14897
David Gerard dgerard@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |dgerard@gmail.com
--- Comment #7 from David Gerard dgerard@gmail.com --- Still crashes under wine-1.7.9 (Ubuntu PPA) on x64. Loads initial screen, you click to play the demo now, it sets your screen to 800x600 then crashes.
End of command-line output:
fixme:d3d:resource_check_usage Unhandled usage flags 0x8. fixme:d3d:state_lastpixel Last Pixel Drawing Disabled, not handled yet fixme:d3d:resource_check_usage Unhandled usage flags 0x8. fixme:ddraw:ddraw_surface7_Flip Ignoring flags 0x1. fixme:mshtml:hidden_proc (0x2007a 49233 6d6e8112 3f) wine: Unhandled page fault on write access to 0x00000000 at address 0x5f7c33 (thread 003e), starting debugger... err:dbghelp_msc:pe_load_debug_directory Got a page fault while loading symbols fixme:ole:RemUnknown_QueryInterface No interface for iid {00000019-0000-0000-c000-000000000046}
Running in debug, I got a backtrace (attached next).
http://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #8 from David Gerard dgerard@gmail.com --- Created attachment 47092 --> http://bugs.winehq.org/attachment.cgi?id=47092 Jojo's Fashion Show 2 backtrace under wine 1.7.9 debug build
http://bugs.winehq.org/show_bug.cgi?id=14897
hanska2@luukku.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |hanska2@luukku.com
--- Comment #9 from hanska2@luukku.com --- Not full log, but some lines
fixme:ddraw:DirectDrawEnumerateExA flags 0x00000006 not handled fixme:win:EnumDisplayDevicesW ((null),0,0x33e308,0x00000000), stub! fixme:win:EnumDisplayDevicesW ((null),0,0x33d758,0x00000000), stub! fixme:win:EnumDisplayDevicesW ((null),0,0x33d758,0x00000000), stub! fixme:ddraw:ddraw7_Initialize Ignoring guid {aeb2cdd4-6e41-43ea-941c-8361cc760781}. fixme:win:EnumDisplayDevicesW ((null),0,0x33df08,0x00000000), stub! fixme:d3d:state_lastpixel Last Pixel Drawing Disabled, not handled yet fixme:ddraw:ddraw_surface7_Flip Ignoring flags 0x1. fixme:mshtml:hidden_proc (0x2007e 49216 6d6e8112 42) wine: Unhandled page fault on write access to 0x00000000 at address 0x5f7c33 (thread 0043), starting debugger... Unhandled exception: page fault on write access to 0x00000000 in 32-bit code (0x005f7c33). err:dbghelp_msc:pe_load_debug_directory Got a page fault while loading symbols Register dump:
Still crashing
wine 1.7.22
https://bugs.winehq.org/show_bug.cgi?id=14897
super_man@post.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |super_man@post.com
--- Comment #10 from super_man@post.com --- Still crashing after launch. I got a black screen with white cursor and that's it.
wine-1.7.49-41-g36a39ce
https://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #11 from super_man@post.com --- Still crashing both pure wine-git and staging 1.9.3
https://bugs.winehq.org/show_bug.cgi?id=14897
winetest@luukku.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |winetest@luukku.com
--- Comment #12 from winetest@luukku.com --- (In reply to super_man from comment #11)
Still crashing both pure wine-git and staging 1.9.3
Still crashing wine 1.9.20
https://bugs.winehq.org/show_bug.cgi?id=14897
Kimmo Myllyvirta kimmo.myllyvirta@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |kimmo.myllyvirta@gmail.com
--- Comment #13 from Kimmo Myllyvirta kimmo.myllyvirta@gmail.com --- Created attachment 56110 --> https://bugs.winehq.org/attachment.cgi?id=56110 hack patch
The game passes completely uninitalized DDSURFACEDESC2 (dwSize = whatever was in stack) to IDirectDrawSurface7::Lock.
trace:ddraw:ddraw_surface7_Lock iface 0x1369c98, rect (null), surface_desc 0x33e860, flags 0x21, h (nil). warn:ddraw:ddraw_surface7_Lock Invalid structure size 3403136, returning DDERR_INVALIDPARAMS wine: Unhandled page fault on write access to 0x00000000 at address 0x5f7c33 (thread 0009), starting debugger...
With the attached patch the game starts up. Is setting the dwSize actually required when calling IDirectDrawSurface7::Lock?
https://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #14 from Henri Verbeet hverbeet@gmail.com --- (In reply to Kimmo Myllyvirta from comment #13)
Is setting the dwSize actually required when calling IDirectDrawSurface7::Lock?
The tests in StructSizeTest() in ddraw/tests/dsurface.c at least suggest so. There's a chance the size check is supposed to less strict than what's currently there, but it doesn't seem very likely.
Any chance that "3403136" (or 0x33ed80 in hexadecimal...) is a bit less random than it appears at first sight? It looks like it could have been a stack address.
https://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #15 from Kimmo Myllyvirta kimmo.myllyvirta@gmail.com --- (In reply to Henri Verbeet from comment #14)
Any chance that "3403136" (or 0x33ed80 in hexadecimal...) is a bit less random than it appears at first sight? It looks like it could have been a stack address.
Yes, it is a stack address. The value is always the same before the crash (3403136), and everything else is also the same (like the surface_desc pointer).
Later on when the game is running with the hack, the log is filled with; warn:ddraw:ddraw_surface7_Lock Invalid structure size 2105540064, setting to sizeof(DDSURFACEDESC2). warn:ddraw:ddraw_surface7_Lock Invalid structure size 3401616, setting to sizeof(DDSURFACEDESC2). warn:ddraw:ddraw_surface7_Lock Invalid structure size 0, setting to sizeof(DDSURFACEDESC2). warn:ddraw:ddraw_surface7_Lock Invalid structure size 3401680, setting to sizeof(DDSURFACEDESC2). etc....
rect = null and flags = 0x21, always. I don't have windows box atm, but adding a test case with the same arguments might reveal something (or not).
https://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #16 from winetest@luukku.com --- Based on the comments I think bug 18725 is about the same issue. Analyze is here https://bugs.winehq.org/show_bug.cgi?id=18725#c14.
https://bugs.winehq.org/show_bug.cgi?id=14897
--- Comment #17 from Henri Verbeet hverbeet@gmail.com --- (In reply to winetest from comment #16)
Based on the comments I think bug 18725 is about the same issue. Analyze is here https://bugs.winehq.org/show_bug.cgi?id=18725#c14.
Right, I thought there was something familiar about this bug.
https://bugs.winehq.org/show_bug.cgi?id=14897
Józef Kucia joseph.kucia@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |irek.gierlach@gmail.com
--- Comment #18 from Józef Kucia joseph.kucia@gmail.com --- *** Bug 18725 has been marked as a duplicate of this bug. ***
https://bugs.winehq.org/show_bug.cgi?id=14897
Józef Kucia joseph.kucia@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |joseph.kucia@gmail.com Summary|Jojo's Fashion Show 2: Las |DirectDraw games (Jojo's |Cruces demo crashes when |Fashion Show 2: Las Cruces |starting |demo, The Chosen: Well of | |Souls) tries to lock | |surface with invalid dwSize
https://bugs.winehq.org/show_bug.cgi?id=14897
Józef Kucia joseph.kucia@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Summary|DirectDraw games (Jojo's |DirectDraw games (Jojo's |Fashion Show 2: Las Cruces |Fashion Show 2: Las Cruces |demo, The Chosen: Well of |demo, The Chosen: Well of |Souls) tries to lock |Souls) try to lock surface |surface with invalid dwSize |with invalid dwSize
https://bugs.winehq.org/show_bug.cgi?id=14897
Sebastian Lackner sebastian@fds-team.de changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |STAGED CC| |dmitry@baikal.ru, | |erich.e.hoover@wine-staging | |.com, michael@fds-team.de, | |sebastian@fds-team.de Staged patchset| |https://github.com/wine-com | |pholio/wine-staging/tree/ma | |ster/patches/ddraw-Relax_dw | |Size_Validation
https://bugs.winehq.org/show_bug.cgi?id=14897
Józef Kucia joseph.kucia@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |2bef0eafd03430189e88f535ffa | |3d3b9a981b678 Status|STAGED |RESOLVED Resolution|--- |FIXED
--- Comment #19 from Józef Kucia joseph.kucia@gmail.com --- This should be fixed with commit 2bef0eafd03430189e88f535ffa3d3b9a981b678.
https://bugs.winehq.org/show_bug.cgi?id=14897
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #20 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 2.1.
https://bugs.winehq.org/show_bug.cgi?id=14897
Michael Stefaniuc mstefani@redhat.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |2.0.x
https://bugs.winehq.org/show_bug.cgi?id=14897
Michael Stefaniuc mstefani@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|2.0.x |---
--- Comment #21 from Michael Stefaniuc mstefani@winehq.org --- Removing the 2.0.x milestone from bugs included in 2.0.1.