http://bugs.winehq.org/show_bug.cgi?id=34895
Bug #: 34895 Summary: Internet Chess Club (ICC) Dasher 1.5.x crashes on startup Product: Wine Version: 1.7.6 Platform: x86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: mshtml AssignedTo: wine-bugs@winehq.org ReportedBy: focht@gmx.net Classification: Unclassified
Hello folks,
continuation of bug 34840
Internet Chess Club (ICC) Dasher 1.5.x still crashes on startup.
Looks like some HTMLElement reference counting issue...
--- snip --- 0024:trace:mshtml:DispatchEx_InvokeEx (0x13ac238)->(80010421 800 2 0x33e53c 0x33e5d0 0x33e51c (nil)) 0024:trace:mshtml:HTMLElement_QI (0x13ac238)->(IID_IHTMLElement2 0x33e388) 0024:trace:mshtml:HTMLDOMNode_AddRef (0x13ac238) ref=3 0024:trace:mshtml:HTMLElement2_get_scrollHeight (0x13ac238)->(0x33e380) 0024:trace:mshtml:HTMLElement2_get_scrollHeight *p = 100 0024:trace:mshtml:HTMLDOMNode_Release (0x13ac238) ref=2 0024:trace:mshtml:HTMLDOMNode_Release (0x13ac238) ref=1 0024:trace:mshtml:HTMLWindow2_Release (0x133d458) ref=2 0024:trace:mshtml:CustomDoc_Release (0x1255f08) ref = 3 0024:trace:mshtml:CustomDoc_Release (0x1255f08) ref = 2 0024:trace:mshtml:htmldoc_qi (0x1255f08)->(IID_IDispatch, 0x33e600) 0024:trace:mshtml:CustomDoc_AddRef (0x1255f08) ref = 3 0024:trace:mshtml:htmldoc_qi (0x1255f08)->(IID_IHTMLDocument2, 0x33e5fc) 0024:trace:mshtml:CustomDoc_AddRef (0x1255f08) ref = 4 0024:trace:mshtml:CustomDoc_Release (0x1255f08) ref = 3 0024:trace:mshtml:htmldoc_qi (0x1255f08)->(IID_IHTMLDocument2, 0x33e6a4) 0024:trace:mshtml:CustomDoc_AddRef (0x1255f08) ref = 4 0024:trace:mshtml:HTMLDocument_get_body (0x1255f08)->(0x33e6a0) 0024:trace:mshtml:HTMLDOMNode_AddRef (0x13ac238) ref=2 0024:trace:mshtml:HTMLDOMNode_AddRef (0x13ac238) ref=3 0024:trace:mshtml:HTMLDOMNode_Release (0x13ac238) ref=2 0024:trace:mshtml:HTMLElement_QI (0x13ac238)->(IID_IHTMLElement 0x33e6a0) 0024:trace:mshtml:HTMLDOMNode_AddRef (0x13ac238) ref=3 0024:trace:mshtml:HTMLDOMNode_Release (0x13ac238) ref=2 0024:trace:mshtml:HTMLElement_setAttribute (0x13ac238)->(L"scroll" {VT_BSTR: L"no"} 00000000) 0024:trace:mshtml:DispatchEx_GetDispID (0x13ac238)->(L"scroll" a 0x33e5ac) 0024:trace:mshtml:DispatchEx_InvokeEx (0x13ac238)->(800113d7 800 4 0x33e598 (nil) 0x33e578 (nil)) 0024:trace:mshtml:HTMLBodyElement_QI (0x13ac238)->(IID_IHTMLBodyElement 0x33e3bc) 0024:trace:mshtml:HTMLDOMNode_AddRef (0x13ac238) ref=3 0024:trace:mshtml:HTMLBodyElement_put_scroll (0x13ac238)->(L"no") 0024:trace:mshtml:nsURI_AddRef (0x13610c0) ref=5 0024:trace:mshtml:HTMLDOMNode_AddRef (0x136d898) ref=6 0024:trace:mshtml:HTMLDOMNode_Release (0x136d898) ref=5 0024:trace:mshtml:nsURI_AddRef (0x13610c0) ref=6 0024:trace:mshtml:nsURI_AddRef (0x13610c0) ref=7 0024:trace:mshtml:nsURI_Release (0x13610c0) ref=6 0024:trace:mshtml:nsURI_Release (0x13610c0) ref=5 0024:trace:mshtml:HTMLDOMNode_AddRef (0x136d898) ref=6 0024:trace:mshtml:HTMLDOMNode_Release (0x136d898) ref=5 0024:trace:mshtml:HTMLDOMNode_AddRef (0x136d898) ref=6 0024:trace:mshtml:HTMLDOMNode_Release (0x136d898) ref=5 0024:trace:mshtml:HTMLDOMNode_AddRef (0x136d898) ref=6 0024:trace:mshtml:HTMLDOMNode_Release (0x136d898) ref=5 0024:trace:mshtml:nsURI_Release (0x13610c0) ref=4 0024:trace:mshtml:HTMLDOMNode_Release (0x13ac238) ref=2 0024:trace:mshtml:CustomDoc_Release (0x1255f08) ref = 3 0024:trace:mshtml:HTMLDOMNode_Release (0x13ac238) ref=1 0024:trace:mshtml:HTMLDOMNode_Release (0x13ac238) ref=0 0024:trace:mshtml:HTMLDOMNode_Release (0x136d898) ref=4 0024:trace:mshtml:CustomDoc_Release (0x1255f08) ref = 2 0024:trace:mshtml:htmldoc_qi (0x1255f08)->(IID_IDispatch, 0x33e620) 0024:trace:mshtml:CustomDoc_AddRef (0x1255f08) ref = 3 0024:trace:mshtml:htmldoc_qi (0x1255f08)->(IID_IHTMLDocument2, 0x33e61c) 0024:trace:mshtml:CustomDoc_AddRef (0x1255f08) ref = 4 0024:trace:mshtml:CustomDoc_Release (0x1255f08) ref = 3 0024:trace:mshtml:htmldoc_qi (0x1255f08)->(IID_IHTMLDocument2, 0x33e6a4) 0024:trace:mshtml:CustomDoc_AddRef (0x1255f08) ref = 4 0024:trace:mshtml:HTMLDocument_get_title (0x1255f08)->(0x33e698) 0024:trace:mshtml:CustomDoc_Release (0x1255f08) ref = 3 0024:trace:mshtml:CustomDoc_Release (0x1255f08) ref = 2 0024:trace:seh:raise_exception code=c0000005 flags=0 addr=(nil) ip=00000000 tid=0024 0024:trace:seh:raise_exception info[0]=00000000 0024:trace:seh:raise_exception info[1]=00000000 0024:trace:seh:raise_exception eax=013ac248 ebx=7c738000 ecx=ffffff80 edx=05000002 esi=0033ead0 edi=013ecdd0 0024:trace:seh:raise_exception ebp=0033e998 esp=0033e97c cs=0023 ds=002b es=002b fs=0063 gs=006b flags=00010206 0024:trace:seh:call_stack_handlers calling handler at 0x78889b code=c0000005 flags=0 0024:trace:seh:call_stack_handlers handler at 0x78889b returned 1 0024:trace:seh:call_stack_handlers calling handler at 0x73c3f0 code=c0000005 flags=0 --- snip ---
-> HTMLDOMNode_Release (0x13ac238) ref=0
The exception frames are not really useful. It seems a vtable method is called on freed memory. An event gets fired (while still in document load?) that leads to node dereferenced that doesn't exist anymore.
Interestingly the browser window is located out of place at top left corner with seemingly desktop as parent? Additionally the MDI app duplicates Wine's sysmenu/window decoration as if run maximized in virtual desktop mode.
Regards
http://bugs.winehq.org/show_bug.cgi?id=34895
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Keywords| |download URL| |http://www.chessclub.com/do | |wnload-software/dasher/
--- Comment #1 from Anastasius Focht focht@gmx.net 2013-11-11 17:14:47 CST --- Hello folks,
filling fields...
$ sha1sum Dasher_156_installer.exe 455f8f030c93d49da25b6e93566f107682382a6d Dasher_156_installer.exe
$ du -sh Dasher_156_installer.exe 12M Dasher_156_installer.exe
$ wine --version wine-1.7.6-136-gde0928a
Regards
http://bugs.winehq.org/show_bug.cgi?id=34895
--- Comment #2 from Anastasius Focht focht@gmx.net 2013-11-11 17:16:07 CST --- Created attachment 46501 --> http://bugs.winehq.org/attachment.cgi?id=46501 WINEDEBUG=+tid,+seh,+loaddll,+process,+mshtml,+jscript NSPR_LOG_MODULES=all:5 wine ./Dasher.exe >>mshtml_log.txt 2>&1
https://bugs.winehq.org/show_bug.cgi?id=34895
hanska2@luukku.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |hanska2@luukku.com
--- Comment #3 from hanska2@luukku.com --- Created attachment 49345 --> https://bugs.winehq.org/attachment.cgi?id=49345 1.7.22 crash 1.5 version
They have updated the installer, but the old 1.5 is still available to downlaod. I tried that. crashes when you click that you want to play against your pc.
https://bugs.winehq.org/show_bug.cgi?id=34895
Teras teras@luukku.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |teras@luukku.com
--- Comment #4 from Teras teras@luukku.com --- Unless I am doing something wrong, 1.5.7 version works without any overrides.
wine-1.7.36-113-g797bd65
https://bugs.winehq.org/show_bug.cgi?id=34895
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED URL|http://www.chessclub.com/do |http://www.chessclub.com/bi |wnload-software/dasher/ |ts/interface/Dasher_156_ins | |taller.exe Resolution|--- |FIXED
--- Comment #5 from Anastasius Focht focht@gmx.net --- Hello folks,
indeed, the crash on startup is gone. Resolving 'fixed'.
$ sha1sum Dasher_156_installer.exe 455f8f030c93d49da25b6e93566f107682382a6d Dasher_156_installer.exe
$ du -sh Dasher_156_installer.exe 12M Dasher_156_installer.exe
$ wine --version wine-1.7.36-113-g797bd65
Regards
https://bugs.winehq.org/show_bug.cgi?id=34895
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #6 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 1.7.37.
https://bugs.winehq.org/show_bug.cgi?id=34895
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- URL|http://www.chessclub.com/bi |https://web.archive.org/web |ts/interface/Dasher_156_ins |/20120506235853/http://www. |taller.exe |chessclub.com/bits/interfac | |e/Dasher_155_installer.exe
--- Comment #7 from Anastasius Focht focht@gmx.net --- Hello folks,
adding stable download links via Internet Archive for documentation.
For 1.5.6 no snapshots exist but the adjacent versions.
https://web.archive.org/web/20120506235853/http://www.chessclub.com/bits/int...
https://www.virustotal.com/gui/file/ddd7c1926ce9323cd672da8ffdd17df58b67ba21...
https://web.archive.org/web/20140803064557/http://www6.chessclub.com/bits/in...
https://www.virustotal.com/gui/file/8f19bf0129f2b25f27a909c75c9d2c0214ea3d64...
$ sha1sum Dasher_15* 3d3aecf6868f9d5bc2e5dbc3b7fcfba8fcf54698 Dasher_155_installer.exe 6cf0cf42726e2edb4e06b9aa6fc7f770b0965f10 Dasher_157_installer.exe
$ du -sh Dasher_15* 12M Dasher_155_installer.exe 12M Dasher_157_installer.exe
Regards
-
wine-bugs＠winehq.org -
WineHQ Bugzilla