[Bug 25979] New: Duty Calls: frequently fails to install (memory corruption?)

http://bugs.winehq.org/show_bug.cgi?id=25979

Summary: Duty Calls: frequently fails to install (memory
                    corruption?)
           Product: Wine
           Version: 1.3.12
          Platform: x86
               URL: http://download.thedutycalls.com/DutyCallsUS.zip
        OS/Version: Linux
            Status: NEW
          Keywords: download, Installer
          Severity: normal
          Priority: P2
         Component: msi
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

Created an attachment (id=33116)
 --> (http://bugs.winehq.org/attachment.cgi?id=33116)
terminal output + backtrace

Backtrace:
=>0 0x7bc47116 HEAP_CreateFreeBlock+0x2f6(subheap=0x110014, ptr=0x1e1a98,
size=0xa8) [/home/austin/wine-git/dlls/ntdll/../../include/wine/list.h:98] in
ntdll (0x0033f938)
  1 0x7bc473b4 HEAP_MakeInUseBlockFree+0x163(subheap=0x110014, pArena=0x1e1b40)
[/home/austin/wine-git/dlls/ntdll/heap.c:648] in ntdll (0x0033f988)
  2 0x7bc47632 RtlFreeHeap+0x101(heap=0x110000, flags=0x2, ptr=0x1e1c58)
[/home/austin/wine-git/dlls/ntdll/heap.c:1756] in ntdll (0x0033fa28)
  3 0x7eedffbb ACTION_CostFinalize+0x3aa(package=0x1402d8)
[/home/austin/wine-git/dlls/msi/msipriv.h:1112] in msi (0x0033fa58)
  4 0x7eed5a24 ACTION_HandleStandardAction+0xb3(package=0x1402d8,
action="CostFinalize", rc=0x33fa88)
[/home/austin/wine-git/dlls/msi/action.c:7300] in msi (0x0033fa98)
  5 0x7eed5adb ACTION_PerformUIAction+0x3a(package=0x1402d8,
action="CostFinalize", script=0xffffffff)
[/home/austin/wine-git/dlls/msi/action.c:7344] in msi (0x0033fac8)
  6 0x7eed5d92 ITERATE_Actions+0xe1(row=0x1f57e8, param=0x1402d8)
[/home/austin/wine-git/dlls/msi/action.c:1007] in msi (0x0033fb08)
  7 0x7ef208ba MSI_IterateRecords+0x89(view=0x1e2180, count=0x0(nil),
func=0x7eed5cb0, param=0x1402d8)
[/home/austin/wine-git/dlls/msi/msiquery.c:193] in msi (0x0033fb58)
  8 0x7eed34bc ACTION_ProcessExecSequence+0xdb(package=0x1402d8, UIran=<is not
available>) [/home/austin/wine-git/dlls/msi/action.c:1094] in msi (0x0033fb88)
  9 0x7eed5a24 ACTION_HandleStandardAction+0xb3(package=0x1402d8,
action="ExecuteAction", rc=0x33fbb8)
[/home/austin/wine-git/dlls/msi/action.c:7300] in msi (0x0033fbc8)
  10 0x7eed5adb ACTION_PerformUIAction+0x3a(package=0x1402d8,
action="ExecuteAction", script=0xffffffff)
[/home/austin/wine-git/dlls/msi/action.c:7344] in msi (0x0033fbf8)
  11 0x7eed5d92 ITERATE_Actions+0xe1(row=0x15b518, param=0x1402d8)
[/home/austin/wine-git/dlls/msi/action.c:1007] in msi (0x0033fc38)
  12 0x7ef208ba MSI_IterateRecords+0x89(view=0x146c60, count=0x0(nil),
func=0x7eed5cb0, param=0x1402d8)
[/home/austin/wine-git/dlls/msi/msiquery.c:193] in msi (0x0033fc98)
  13 0x7eedf281 MSI_InstallPackage+0x580(package=0x1402d8,
szPackagePath="C:\users\austin\Temp{BA5F91EC-73EC-460D-9AC8-8DA9B2F356C3}\Duty
Calls.msi", szCommandLine=" SETUPEXEDIR=Z:\home\austin
SETUPEXENAME=DutyCallsSetup_US.exe")
[/home/austin/wine-git/dlls/msi/action.c:1119] in msi (0x0033fcd8)
  14 0x7ef13865
MsiInstallProductW+0x74(szPackagePath="C:\users\austin\Temp{BA5F91EC-73EC-460D-9AC8-8DA9B2F356C3}\Duty
Calls.msi", szCommandLine=" SETUPEXEDIR=Z:\home\austin
SETUPEXENAME=DutyCallsSetup_US.exe") [/home/austin/wine-git/dlls/msi/msi.c:243]
in msi (0x0033fde8)
  15 0x7eff5a43 WinMain+0x8d2(hInstance=0x7eff0000, hPrevInstance=(nil),
lpCmdLine="/i "C:\users\austin\Temp{BA5F91EC-73EC-460D-9AC8-8DA9B2F356C3}\Duty
Calls.msi"  SETUPEXEDIR="Z:\home\austin" SETUPEXENAME="DutyCallsSetup_US.exe"",
nCmdShow=0x1) [/home/austin/wine-git/programs/msiexec/msiexec.c:941] in msiexec
(0x0033fe68)
  16 0x7eff6f96 main+0xb5(argc=<has been optimized away by compiler>, argv=<has
been optimized away by compiler>)
[/home/austin/wine-git/dlls/winecrt0/exe_main.c:48] in msiexec (0x0033fea0)
  17 0x7eff6ec7 __wine_spec_exe_entry+0x76(peb=0x7ffdf000)
[/home/austin/wine-git/dlls/winecrt0/exe_entry.c:36] in msiexec (0x0033feb8)
  18 0x7b8552ac call_process_entry+0xb() in kernel32 (0x0033fee8)
  19 0x7b857543 start_process+0x52(peb=0x7ffdf000)
[/home/austin/wine-git/dlls/kernel32/process.c:1086] in kernel32 (0x0033fef8)
  20 0x7bc70668 call_thread_func+0xb() in ntdll (0x0033ffc8)
  21 0x7bc7084a call_thread_entry_point+0x69(entry=0x7b8574f0, arg=0x7ffdf000)
[/home/austin/wine-git/dlls/ntdll/signal_i386.c:2499] in ntdll (0x0033ffe8)
  22 0x7bc4d8c6 start_process+0x25(kernel_start=0x7b8574f0)
[/home/austin/wine-git/dlls/ntdll/loader.c:2606] in ntdll (0x00000000)
0x7bc47116 HEAP_CreateFreeBlock+0x2f6
[/home/austin/wine-git/dlls/ntdll/../../include/wine/list.h:98] in ntdll: movl 
  %eax,0x4(%edx)
98          elem->next->prev = elem->prev;

full output attached

[Bug 25979] Duty Calls: frequently fails to install (memory corruption?)

http://bugs.winehq.org/show_bug.cgi?id=25979

Dan Kegel  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #1 from Dan Kegel  2011-02-03 14:18:24 CST ---
does warn+heap catch it earlier?

[Bug 25979] Duty Calls: frequently fails to install (memory corruption?)

http://bugs.winehq.org/show_bug.cgi?id=25979

--- Comment #2 from Austin English  2011-02-03 14:25:01 CST ---
err:heap:HEAP_ValidateInUseArena Heap 0x110000: block 0x1b3150 tail overwritten
at 0x1b3160 (byte 0/8 == 0x00)
fixme:heap:HeapSetInformation (nil) 1 (nil) 0
fixme:heap:HeapSetInformation (nil) 1 (nil) 0
...
err:heap:HEAP_ValidateInUseArena Heap 0x110000: block 0x3d9a38 tail overwritten
at 0x3d9ada (byte 0/14 == 0x00)

but still installs fine.

[Bug 25979] Duty Calls: frequently fails to install (memory corruption?)

http://bugs.winehq.org/show_bug.cgi?id=25979

--- Comment #3 from Dan Kegel  2011-02-03 21:41:14 CST ---
I see this here, too, and warn+heap works around it.

[Bug 25979] Duty Calls: frequently fails to install (memory corruption?)

http://bugs.winehq.org/show_bug.cgi?id=25979

Hans Leidekker  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #4 from Hans Leidekker  2011-02-04 04:00:32 CST ---
> From a +msi,+relay,+seh,+tid,warn+heap trace:

0022:Call user32.PeekMessageW(006fe578,00000000,00000000,00000000,00000001)
ret=1000951c
0022:Call window proc 0x1000743e
(hwnd=0x10094,msg=WM_GETTEXT,wp=00000008,lp=00440020)
0022:Ret  window proc 0x1000743e
(hwnd=0x10094,msg=WM_GETTEXT,wp=00000008,lp=00440020) retval=00000007
0022:err:heap:HEAP_ValidateInUseArena Heap 0x110000: block 0x440020 tail
overwritten at 0x440030 (byte 0/8 == 0x00)
0022:Ret  user32.PeekMessageW() retval=00000000 ret=1000951c

This happens in a custom action called ISInstallPrerequisites.

[Bug 25979] Duty Calls: frequently fails to install (memory corruption?)

http://bugs.winehq.org/show_bug.cgi?id=25979

--- Comment #5 from Austin English  2011-12-23 19:39:46 CST ---
Still in wine-1.3.35-147-gb433f1c

[Bug 25979] Duty Calls: frequently fails to install (memory corruption?)

http://bugs.winehq.org/show_bug.cgi?id=25979

Frédéric Delanoy  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|http://download.thedutycall |http://www.gamershell.com/d
                   |s.com/DutyCallsUS.zip       |ownload_68952.shtml
                 CC|                            |[e-mail]

[Bug 25979] Duty Calls: frequently fails to install (memory corruption?)

http://bugs.winehq.org/show_bug.cgi?id=25979

Frédéric Delanoy  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |FIXED

--- Comment #6 from Frédéric Delanoy  2013-07-15 08:52:36 CDT ---
Works with wine-1.6-rc5 (installed 3 times without failure).

[Bug 25979] Duty Calls: frequently fails to install (memory corruption?)

http://bugs.winehq.org/show_bug.cgi?id=25979

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #7 from Alexandre Julliard  2013-08-02 13:18:54 CDT ---
Closing bugs fixed in 1.7.0.