https://bugs.winehq.org/show_bug.cgi?id=54049
Bug ID: 54049 Summary: ddraw:ddraw2 test_texture_wrong_caps test triggers use after free bug Product: Wine Version: unspecified Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: d3d Assignee: wine-bugs@winehq.org Reporter: rbernon@codeweavers.com Distribution: ---
The test crashes when run with WINEDEBUG=warn+heap, with the following stack:
#0 wined3d_device_context_get_depth_stencil_view (context=0xfeeefeee) at ../source/dlls/wined3d/device.c:5297 #1 0x69ef72bb in ddraw_surface_delete_attached_surface (surface=surface@entry=0x63484e0, attachment=0x6348260, detach_iface=0x6348270) at ../source/dlls/ddraw/surface.c:2207 #2 0x69ef8791 in ddraw_surface_wined3d_object_destroyed (parent=0x63484e0) at ../source/dlls/ddraw/surface.c:5899 #3 0x6ce08858 in wined3d_texture_sub_resources_destroyed (texture=<optimized out>, texture@entry=0x2285810) at ../source/dlls/wined3d/texture.c:1100 #4 0x6cc8601a in adapter_gl_destroy_texture (texture=<optimized out>) at ../source/dlls/wined3d/adapter_gl.c:4808 #5 0x6cdfea7a in wined3d_texture_decref (texture=0x2285810) at ../source/dlls/wined3d/texture.c:1635 #6 wined3d_texture_decref (texture=0x2285810) at ../source/dlls/wined3d/texture.c:1603 #7 0x69ef524b in ddraw_surface_cleanup (surface=surface@entry=0x63484e0) at ../source/dlls/ddraw/surface.c:609 #8 0x69ef797f in ddraw_surface_release_iface (This=This@entry=0x63484e0) at ../source/dlls/ddraw/surface.c:638 #9 0x69eea830 in ddraw_surface1_Release (iface=0x63484f0) at ../source/dlls/ddraw/surface.c:749 #10 0x69ed4b76 in d3d_device_inner_Release (iface=0x34e4a90) at ../source/dlls/ddraw/device.c:356 #11 0x69ecae68 in d3d_device2_Release (iface=0x34e4a88) at ../source/dlls/ddraw/device.c:397 #12 0x0052ef3b in test_texture_wrong_caps (device_guid=<optimized out>) at ../source/dlls/ddraw/tests/ddraw2.c:15661 #13 0x00420a16 in run_for_each_device_type (test_func=0x52e9a0 <test_texture_wrong_caps>) at ../source/dlls/ddraw/tests/ddraw2.c:16338 #14 func_ddraw2 () at ../source/dlls/ddraw/tests/ddraw2.c:16464 #15 0x00560641 in run_test (name=0x90aae0 "ddraw2") at ../source/include/wine/test.h:718 #16 main (argc=2, argv=0x90aa80) at ../source/include/wine/test.h:833 #17 0x0043354d in mainCRTStartup () at ../source/dlls/msvcrt/crt_main.c:58 #18 0x7b60e6a4 in InterlockedDecrement@4 () #19 0x7bc0c99f in call_thread_func_wrapper () #20 0x7bc42160 in call_thread_func (entry=<optimized out>, arg=<optimized out>) at ../source/dlls/ntdll/thread.c:270 #21 0x00000000 in ?? ()
https://bugs.winehq.org/show_bug.cgi?id=54049
Zeb Figura z.figura12@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |1a9c1d593b5ac5aee7450ba510f | |46c2a153741f7 Resolution|--- |FIXED CC| |z.figura12@gmail.com Status|NEW |RESOLVED Keywords| |source, testcase Version|unspecified |8.0-rc1
--- Comment #1 from Zeb Figura z.figura12@gmail.com --- Should be fixed by https://source.winehq.org/git/wine.git/commitdiff/1a9c1d593b5ac5aee7450ba510f46c2a153741f7.
https://bugs.winehq.org/show_bug.cgi?id=54049
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #2 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 8.0-rc3.