[Bug 54483] New: failed to install jrhbqq_1.0.5.1730.exe , report gdiplus crash

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=54483

Bug ID: 54483
           Summary: failed to install jrhbqq_1.0.5.1730.exe , report
                    gdiplus crash
           Product: Wine
           Version: 7.0.1
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: win32u
          Assignee: [e-mail]
          Reporter: [e-mail]
      Distribution: ---

jrhbqq_1.0.5.1730.exe is installed failed  using wine(7.0.1) and the log report
gdiplus crash.
the detail is as below.
Unhandled exception: page fault on read access to 0x00001000 in 32-bit code
(0x024c5258).
Register dump:
CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b
EIP:024c5258 ESP:0032ed50 EBP:0032ed88 EFLAGS:00210246( R- -- I Z- -P- )
EAX:00000000 EBX:0032ee34 ECX:00001000 EDX:00000000
ESI:038483f8 EDI:00000000
Stack dump:
0x0032ed50: 00000000 00000000 42c00000 00000000
0x0032ed60: 00000000 00000000 00000000 027f0e7f
0x0032ed70: 00000000 3f800000 00000000 03848318
0x0032ed80: 0032ee34 038483f8 0032eea8 024d4d92
0x0032ed90: 038483f8 03848318 0032ee34 0032ede0
0x0032eda0: 00000003 00000000 00000000 0032ee88
Backtrace:
=>0 0x024c5258 lstrcpyW+0x7(src=, dst=)
[Z:\home\keming\work\code\winehq\winehq\include\winbase.h:2873] in gdiplus
(0x0032ed88)
1 0x024c5258 get_log_fontW+0xb8(font=038483F8, graphics=03848318, lf=0032EE34)
[Z:\home\keming\work\code\winehq\winehq\dlls\gdiplus\graphics.c:2296] in
gdiplus (0x0032ed88)
2 0x024d4d92 get_font_hfont+0x1d2(graphics=, font=, hfont=, lfw_return=,
matrix=, format=)
[Z:\home\keming\work\code\winehq\winehq\dlls\gdiplus\graphics.c:2352] in
gdiplus (0x0032eea8)
3 0x024d574a GdipMeasureString+0x2ea(graphics=, string=, length=, font=, rect=,
format=, bounds=, codepointsfitted=, linesfilled=)
[Z:\home\keming\work\code\winehq\winehq\dlls\gdiplus\graphics.c:5592] in
gdiplus (0x0032f098)
4 0x024d6346 GdipDrawString+0x696(graphics=, string=, length=, font=, rect=,
format=, brush=)
[Z:\home\keming\work\code\winehq\winehq\dlls\gdiplus\graphics.c:5719] in
gdiplus (0x0032f2f8)
5 0x00487c52 in jrhbqq_1.0.5.1730 (+0x87c52) (0x0032f32c)
6 0x004888b2 in jrhbqq_1.0.5.1730 (+0x888b2) (0x0032f4c4)
7 0x00000218 (0x0032f4c4)
8 0x00000218 (0x0032f4c4)
9 0x00000218 (0x0032f4c4)
10 0x00000218 (0x0032f4c4)
11 0x00000218 (0x0032f4c4)
12 0x00000218 (0x0032f4c4)

[Bug 54483] failed to install jrhbqq_1.0.5.1730.exe , report gdiplus crash

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=54483

--- Comment #1 from Keming  ---
the tested software download website is

https://dl.softmgr.qq.com/original/net_app/jrhbqq_1.0.5.1730.exe

[Bug 54483] failed to install jrhbqq_1.0.5.1730.exe , report gdiplus crash

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=54483

--- Comment #2 from Keming  ---
add the log to analyze this issue ，and found font->family->FamilyName is
illegal addrese

0024:trace:gdiplus:GdipMultiplyMatrix (0032ED68, 0384841C, 1)
0024:trace:gdiplus:GdipTransformMatrixPoints (0032ED68, 0032EDE0, 3)
0024:trace:gdiplus:get_log_fontW keming,here , lfFaceName = 0032EE50;FamilyName
= 00001000
wine: Unhandled page fault on read access to 00001000 at address 024C5260
(thread 0024), starting debugger...

debug code：
lf->lfQuality = DEFAULT_QUALITY;
lf->lfPitchAndFamily = 0;
TRACE("keming,here , lfFaceName = %p;FamilyName = %p
\n",lf->lfFaceName,font->family->FamilyName);
lstrcpyW(lf->lfFaceName, font->family->FamilyName);
}

[Bug 54483] failed to install jrhbqq_1.0.5.1730.exe , report gdiplus crash

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=54483

--- Comment #3 from Keming  ---
I found the root cause of this issue is gdiplus can find ‘MS Shell Dlg’ when
the language is Chinesed simplified.

the patch

https://gitlab.winehq.org/wine/wine/-/merge_requests/2168

can resolve this problem