[Bug 36003] New: mshtml/htmldoc tests crash with WINEDEBUG=warn+heap

https://bugs.winehq.org/show_bug.cgi?id=36003

Bug ID: 36003
           Summary: mshtml/htmldoc tests crash with WINEDEBUG=warn+heap
           Product: Wine
           Version: 1.7.16
          Hardware: x86
               URL: https://test.winehq.org/data/7e874aed75765f3c017673178
                    cfd64301b7ba3ed/linux_ae-fedora64-heap/mshtml:htmldoc.
                    html
                OS: Linux
            Status: NEW
          Keywords: download, testcase
          Severity: normal
          Priority: P2
         Component: mshtml
          Assignee: [e-mail]
          Reporter: [e-mail]

Created attachment 48136
  --> https://bugs.winehq.org/attachment.cgi?id=48136
WINEDEBUG=warn+heap,urlmon,mshtml,seh,tid

htmldoc.c:2528: Test failed: unexpected call UpdateUI
htmldoc.c:2835: Test failed: unexpected call Exec_UPDATECOMMANDS
..
Unhandled exception: page fault on read access to 0xfeeefeee in 32-bit code
(0x7e341ae2).
Register dump:
CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b
EIP:7e341ae2 ESP:0034f7c0 EBP:0034f7f8 EFLAGS:00010286( R- -- I S - -P- )
EAX:00000000 EBX:7e3ae000 ECX:0034f780 EDX:feeefeee
ESI:02cdce54 EDI:00000000
Stack dump:
0x0034f7c0: 02cdce20 00000000 00000000 7e3ae000
0x0034f7d0: 80004004 00000000 0034f828 7e337db2
0x0034f7e0: 00000003 7bccddd4 0034f810 7e3ae000
0x0034f7f0: 00000000 02cdce20 0034f848 7e33effe
0x0034f800: 7e018090 004a00d0 00000047 7e33effe
0x0034f810: 02cdce54 00000000 0034f840 7e3ae000
Backtrace:
=>0 0x7e341ae2 ProtocolHandler_Terminate+0x72(iface=<couldn't compute
location>, dwOptions=<couldn't compute location>)
[/home/austin/wine-git/dlls/urlmon/../../include/urlmon.h:2655] in urlmon
(0x0034f7f8)
1 0x7e33effe BindProtocol_Terminate+0x6d(iface=<couldn't compute location>,
dwOptions=<couldn't compute location>)
[/home/austin/wine-git/dlls/urlmon/../../include/urlmon.h:3305] in urlmon
(0x0034f848)
2 0x7e33ad15 InternetProtocolSink_ReportResult+0xb4(iface=<couldn't compute
location>, hrResult=<couldn't compute location>, dwError=<couldn't compute
location>, szResult=<couldn't compute location>)
[/home/austin/wine-git/dlls/urlmon/../../include/urlmon.h:7847] in urlmon
(0x0034f8a8)
3 0x7e33f2c0 ProtocolSinkHandler_ReportResult+0x4f(iface=<couldn't compute
location>, hrResult=<couldn't compute location>, dwError=<couldn't compute
location>, szResult=<couldn't compute location>)
[/home/austin/wine-git/dlls/urlmon/../../include/urlmon.h:3116] in urlmon
(0x0034f908)
4 0x7e340c28 BPInternetProtocolSink_ReportResult+0x77(iface=<couldn't compute
location>, hrResult=<couldn't compute location>, dwError=<couldn't compute
location>, szResult=<couldn't compute location>)
[/home/austin/wine-git/dlls/urlmon/../../include/urlmon.h:3116] in urlmon
(0x0034f968)
5 0x7e34ecfd protocol_abort+0x3c(protocol=0x22c5c40, reason=0x80004004)
[/home/austin/wine-git/dlls/urlmon/../../include/urlmon.h:3116] in urlmon
(0x0034f998)
6 0x7e347c01 HttpProtocol_Abort+0x70(iface=0x22c5ccc, hrReason=0x80004004,
dwOptions=0) [/home/austin/wine-git/dlls/urlmon/http.c:699] in urlmon
(0x0034f9d8)
7 0x7e33e970 ProtocolHandler_Abort+0x4f(iface=<couldn't compute location>,
hrReason=<couldn't compute location>, dwOptions=<couldn't compute location>)
[/home/austin/wine-git/dlls/urlmon/../../include/urlmon.h:3302] in urlmon
(0x0034fa18)
8 0x7e33f08f BindProtocol_Abort+0x7e(iface=<couldn't compute location>,
hrReason=<couldn't compute location>, dwOptions=<couldn't compute location>)
[/home/austin/wine-git/dlls/urlmon/../../include/urlmon.h:3302] in urlmon
(0x0034fa68)
9 0x7e33a14d Binding_Abort+0x4c(iface=<couldn't compute location>)
[/home/austin/wine-git/dlls/urlmon/../../include/urlmon.h:7844] in urlmon
(0x0034fab8)
10 0x7dfdd343 abort_window_bindings+0x72(window=0x29f9490)
[/home/austin/wine-git/dlls/mshtml/../../include/urlmon.h:408] in mshtml
(0x0034fb08)
11 0x7dfd126f HTMLWindow2_Release+0x26e(iface=<couldn't compute location>)
[/home/austin/wine-git/dlls/mshtml/htmlwindow.c:212] in mshtml (0x0034fb48)
12 0x7df7e44a CustomDoc_Release+0xb9(iface=<couldn't compute location>)
[/home/austin/wine-git/dlls/mshtml/../../include/mshtml.h:47873] in mshtml
(0x0034fba8)

Potentially related, bug 28295 and bug 28362.

[Bug 36003] mshtml/htmldoc tests crash with WINEDEBUG=warn+heap

http://bugs.winehq.org/show_bug.cgi?id=36003

Jacek Caban  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]
          Component|mshtml                      |urlmon

--- Comment #1 from Jacek Caban  ---
Patch sent, thanks for the report:

http://source.winehq.org/patches/data/104688

[Bug 36003] mshtml/htmldoc tests crash with WINEDEBUG=warn+heap

http://bugs.winehq.org/show_bug.cgi?id=36003

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
      Fixed by SHA1|                            |54bf34f1e7cd916cfee8b4c383d
                   |                            |7552296ae9a4b
             Status|NEW                         |RESOLVED
         Resolution|---                         |FIXED

--- Comment #2 from Austin English  ---
(In reply to Jacek Caban from comment #1)
> Patch sent, thanks for the report:
>
> http://source.winehq.org/patches/data/104688

http://source.winehq.org/git/wine.git/commitdiff/54bf34f1e7cd916cfee8b4c383d...

Works now, thanks.

[Bug 36003] mshtml/htmldoc tests crash with WINEDEBUG=warn+heap

https://bugs.winehq.org/show_bug.cgi?id=36003

Alexandre Julliard  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Alexandre Julliard  ---
Closing bugs fixed in 1.7.19.