http://bugs.winehq.org/show_bug.cgi?id=7562
truiken@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|UNCONFIRMED |NEW Ever Confirmed| |1
------- Additional Comments From truiken@gmail.com 2007-26-02 21:06 ------- This is from a +all log.
$ grep 358000 all.log 0009:trace:virtual:map_view got mem in reserved area 0x350000-0x358000 0009:trace:seh:raise_exception info[1]=00358000 wine: Unhandled page fault on read access to 0x00358000 at address 0x401d42 (thread 0009), starting debugger... 0009: queue_exception_event( first=0, record={context={flags=0001001f,eax=000082c8,ebx=ffffffff,ecx=00000000,edx=00657865,esi=0034fe60,edi=00400000,ebp=00000000,eip=00401d42,esp=0034fd24,eflags=00010297,cs=0073,ds=007b,es=007b,fs=0033,gs=003b,dr0=00000000,dr1=00000000,dr2=00000000,dr3=00000000,dr6=00000000,dr7=00000000,float={ffff027f,ffff4000,ffffffff,75c6cd6d,01c90073,0034f360,0000007b,00000000,00000000,00000000,00000000,00000000,00000000,80000000,00003fff,ff000000,4015ffff,00000000,80000000,00003ffe,00000000,3ffe8000,00000000,80000000,00003ffe,00000000,40038000,00004000}},rec={code=c0000005,flags=0,rec=(nil),addr=0x401d42,params={0,358000}} ) 000b: wait_debug_event() = 0 { pid=0008, tid=0009, wait=(nil), event={exception,{code=c0000005,flags=0,rec=(nil),addr=0x401d42,params={0,358000},first=0} } Unhandled exception: page fault on read access to 0x00358000 in 32-bit code (0x00401d42).
The interesting tidbit is:
0009:trace:virtual:map_view got mem in reserved area 0x350000-0x358000.
and then the access to 0x0035800. This line is a result of a call to NtAllocateVirtualMemory. Thus ends my current analysis :)