https://bugs.winehq.org/show_bug.cgi?id=45448
Bug ID: 45448 Summary: vSphere 5.5 client 'hcmon.sys' driver crashes on unimplemented function ntoskrnl.exe.KeFlushQueuedDpcs Product: Wine Version: 3.12 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs@winehq.org Reporter: focht@gmx.net Distribution: ---
Hello folks,
continuation of bug 45378
Prerequisite:
* .NET Framework 3.5 (SP1) installation ('winetricks -q dotnet35sp1')
Happens on teardown/unloading.
--- snip --- $ WINEDEBUG=+seh,+relay,+ntoskrnl,+service wineboot >>log.txt 2>&1 ... 0022:Ret advapi32.SetServiceStatus() retval=00000001 ret=7effb431 0022:Call driver unload 0x782f60 (obj=0x11cc98) 0022:Call ntoskrnl.exe.RtlInitUnicodeString(0076fc74,007859fc L"\DosDevices\hcmon") ret=00782f8b 0022:Call ntdll.RtlInitUnicodeString(0076fc74,007859fc L"\DosDevices\hcmon") ret=7bc81503 0022:Ret ntdll.RtlInitUnicodeString() retval=0076fc74 ret=7bc81503 0022:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0076fc74 ret=00782f8b 0022:Call ntoskrnl.exe.IoDeleteSymbolicLink(0076fc74) ret=00782f95 0022:Call ntdll.NtOpenSymbolicLinkObject(0076fc00,00000000,0076fbe8) ret=7e986ad9 0022:Ret ntdll.NtOpenSymbolicLinkObject() retval=00000000 ret=7e986ad9 0022:Call ntdll.NtClose(00000050) ret=7e986b52 0022:Ret ntdll.NtClose() retval=00000000 ret=7e986b52 0022:Ret ntoskrnl.exe.IoDeleteSymbolicLink() retval=00000000 ret=00782f95 0022:Call ntoskrnl.exe.IoUnregisterPlugPlayNotification(00000000) ret=00782fa3 0022:fixme:ntoskrnl:IoUnregisterPlugPlayNotification stub: (nil) 0022:Ret ntoskrnl.exe.IoUnregisterPlugPlayNotification() retval=00000000 ret=00782fa3 0022:Call ntoskrnl.exe.IoUnregisterPlugPlayNotification(00000000) ret=00782fab 0022:fixme:ntoskrnl:IoUnregisterPlugPlayNotification stub: (nil) 0022:Ret ntoskrnl.exe.IoUnregisterPlugPlayNotification() retval=00000000 ret=00782fab 0022:Call ntoskrnl.exe.KeSetEvent(00120f70,00000000,00000000) ret=00782fc1 0022:fixme:ntoskrnl:KeSetEvent (0x120f70, 0, 0): stub 0022:Ret ntoskrnl.exe.KeSetEvent() retval=00000000 ret=00782fc1 0022:Call ntoskrnl.exe.KeWaitForSingleObject(deadbeaf,00000000,00000000,00000000,00000000) ret=00782fd1 0022:fixme:ntoskrnl:KeWaitForSingleObject stub: 0xdeadbeaf, 0, 0, 0, (nil) 0022:Ret ntoskrnl.exe.KeWaitForSingleObject() retval=c0000002 ret=00782fd1 0022:Call ntoskrnl.exe.ExFreePoolWithTag(0011ce60,63684d76) ret=00782fe2 0022:trace:ntoskrnl:ExFreePoolWithTag 0x11ce60 0022:Call ntdll.RtlFreeHeap(00110000,00000000,0011ce60) ret=7e987d37 0022:Ret ntdll.RtlFreeHeap() retval=00000001 ret=7e987d37 0022:Ret ntoskrnl.exe.ExFreePoolWithTag() retval=00000001 ret=00782fe2 0022:trace:ntoskrnl:ObDereferenceObject (0xdeadbeaf): stub 0022:Call KERNEL32.RaiseException(80000100,00000001,00000002,0076fc40) ret=7e98c13a 0022:trace:seh:raise_exception code=80000100 flags=1 addr=0x7b447132 ip=7b447132 tid=0022 0022:trace:seh:raise_exception info[0]=7e98c160 0022:trace:seh:raise_exception info[1]=7e98e78d 0022:trace:seh:call_vectored_handlers calling handler at 0x7e983675 code=80000100 flags=1 0022:trace:seh:call_vectored_handlers handler at 0x7e983675 returned 0 0022:trace:seh:call_stack_handlers calling handler at 0x7bcb3cd2 code=80000100 flags=1 0022:Call KERNEL32.UnhandledExceptionFilter(0076f6f4) ret=7bcb3d0d 0022:trace:seh:start_debugger Starting debugger "winedbg --auto 27 80" 0022:err:seh:start_debugger Couldn't start debugger ("winedbg --auto 27 80") (1115) ... wine: Unimplemented function ntoskrnl.exe.KeFlushQueuedDpcs called at address 0x7b447132 (thread 0022), starting debugger... --- snip ---
API: https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/content/wdm/nf...
--- quote --- KeFlushQueuedDpcs function
The KeFlushQueuedDpcs routine returns after all queued DPCs on all processors have executed. Syntax
NTKERNELAPI VOID KeFlushQueuedDpcs(
);
Parameters
This function has no parameters. Return Value
None Remarks
Drivers can use this routine to wait until all currently-queued DPCs are run. Note that KeFlushQueuedDpcs can take a long time to return, so drivers should not use it along any critical code paths. --- quote ---
$ sha1sum VMware-viclient-all-5.5.0-1281650.exe dccbf3e787f05f7930ed712007375188ea99f009 VMware-viclient-all-5.5.0-1281650.exe
$ du -sh VMware-viclient-all-5.5.0-1281650.exe 349M VMware-viclient-all-5.5.0-1281650.exe
$ wine --version wine-3.12-110-g414fe80aeb
Regards
https://bugs.winehq.org/show_bug.cgi?id=45448
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download URL| |http://vsphereclient.vmware | |.com/vsphereclient/1/2/8/1/ | |6/5/0/VMware-viclient-all-5 | |.5.0-1281650.exe
https://bugs.winehq.org/show_bug.cgi?id=45448
--- Comment #1 from Austin English austinenglish@gmail.com --- https://source.winehq.org/patches/data/148571
https://bugs.winehq.org/show_bug.cgi?id=45448
Austin English austinenglish@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Fixed by SHA1| |af00d2cc1f8dde41b39426d7fc9 | |68205a30cf68a Resolution|--- |FIXED Status|NEW |RESOLVED
--- Comment #2 from Austin English austinenglish@gmail.com --- https://source.winehq.org/git/wine.git/commit/af00d2cc1f8dde41b39426d7fc9682...
https://bugs.winehq.org/show_bug.cgi?id=45448
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #3 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 3.13.
https://bugs.winehq.org/show_bug.cgi?id=45448
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- URL|http://vsphereclient.vmware |https://web.archive.org/web |.com/vsphereclient/1/2/8/1/ |/20140411010657/http://vsph |6/5/0/VMware-viclient-all-5 |ereclient.vmware.com/vspher |.5.0-1281650.exe |eclient/1/2/8/1/6/5/0/VMwar | |e-viclient-all-5.5.0-128165 | |0.exe