[Bug 49335] New: Dolphin EasyReader for Windows 6.04 (TTS app) crashes after completing startup wizard (needs IMarkupServices::CreateMarkupPointer method implementation)
https://bugs.winehq.org/show_bug.cgi?id=49335
Bug ID: 49335 Summary: Dolphin EasyReader for Windows 6.04 (TTS app) crashes after completing startup wizard (needs IMarkupServices::CreateMarkupPointer method implementation) Product: Wine Version: 5.10 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: mshtml Assignee: wine-bugs@winehq.org Reporter: focht@gmx.net Distribution: ---
Hello folks,
continuation of bug 49062
Download:
https://yourdolphin.com/downloads/product?demo=true&lid=1&pvid=9
https://web.archive.org/web/20200430183420/https://yourdolphin.com/downloads...
Trace log:
--- snip --- $ pwd /home/focht/.wine/drive_c/Program Files (x86)/Dolphin/EasyReader604
$ WINEDEBUG=+seh,+relay,+mshtml,+ole,+variant wine ./Dolphin\ EasyReader.exe
log.txt 2>&1
... 0108:trace:variant:VariantClear (0031E58C {VT_BSTR: L"File open image"}) 0108:Ret oleaut32.VariantClear() retval=00000000 ret=0072c55a 0108:trace:mshtml:HTMLBodyElement_createTextRange (01D6AB70)->(0031E5E8) 0108:Call msvcrt.malloc(00000038) ret=661c3003 0108:Call ntdll.RtlAllocateHeap(0bc00000,00000000,00000038) ret=7ba7e2f8 0108:Ret ntdll.RtlAllocateHeap() retval=0f2c8370 ret=7ba7e2f8 0108:Ret msvcrt.malloc() retval=0f2c8370 ret=661c3003 0108:Call KERNEL32.GetLastError() ret=6ca5ce9f 0108:Ret KERNEL32.GetLastError() retval=00000000 ret=6ca5ce9f 0108:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=0301707b 0108:Ret ntdll.RtlAllocateHeap() retval=0357b348 ret=0301707b 0108:trace:mshtml:HTMLTxtRange_moveToElementText (0357B348)->(03575A9C) 0108:fixme:mshtml:MarkupServices_CreateMarkupPointer (01DEC718)->(0031E588) 0108:fixme:mshtml:MarkupServices_CreateMarkupPointer (01DEC718)->(0031E57C) 0108:fixme:mshtml:MarkupServices_MovePointersToRange (01DEC718)->(0357B358,00000000,00000000) 0108:trace:seh:raise_exception code=c0000005 flags=0 addr=0x72c669 ip=0072c669 tid=0108 0108:trace:seh:raise_exception info[0]=00000000 0108:trace:seh:raise_exception info[1]=00000000 0108:trace:seh:raise_exception eax=80004001 ebx=0031e458 ecx=0031e580 edx=00000000 esi=00000000 edi=0031e458 ... wine: Unhandled page fault on read access to 00000000 at address 0072C669 (thread 0108), starting debugger... ... --- snip ---
Disassembly at crash site, annotated:
--- snip --- ... 0072C5D8 | mov dword ptr ss:[ebp-10C],0 | 0072C5E2 | mov dword ptr ss:[ebp-108],0 | 0072C5EC | mov dword ptr ss:[ebp-F8],0 | 0072C5F6 | mov dword ptr ss:[ebp-104],0 | 0072C600 | lea edx,dword ptr ss:[ebp-F8] | 0072C606 | push edx | 0072C607 | mov eax,dword ptr ss:[ebp-18] | IMarkupPointer *pPointerStart 0072C60A | mov ecx,dword ptr ds:[eax] | 0072C60C | mov edx,dword ptr ss:[ebp-18] | 0072C60F | push edx | 0072C610 | mov eax,dword ptr ds:[ecx+C] | 0072C613 | call eax ; IMarkupServices::CreateMarkupPointer() 0072C615 | lea ecx,dword ptr ss:[ebp-104] | IMarkupPointer *pPointerFinish 0072C61B | push ecx | 0072C61C | mov edx,dword ptr ss:[ebp-18] | 0072C61F | mov eax,dword ptr ds:[edx] | 0072C621 | mov ecx,dword ptr ss:[ebp-18] | 0072C624 | push ecx | 0072C625 | mov edx,dword ptr ds:[eax+C] | 0072C628 | call edx ; IMarkupServices::CreateMarkupPointer() 0072C62A | mov eax,dword ptr ss:[ebp-104] | 0072C630 | push eax | IMarkupPointer *pPointerFinish 0072C631 | mov ecx,dword ptr ss:[ebp-F8] | 0072C637 | push ecx | IMarkupPointer *pPointerStart 0072C638 | mov edx,dword ptr ss:[ebp-98] | 0072C63E | push edx | IHTMLTxtRange *pIRange 0072C63F | mov eax,dword ptr ss:[ebp-18] | 0072C642 | mov ecx,dword ptr ds:[eax] | 0072C644 | mov edx,dword ptr ss:[ebp-18] | 0072C647 | push edx | 0072C648 | mov eax,dword ptr ds:[ecx+4C] | 0072C64B | call eax ; IMarkupServices::MovePointersToRange() 0072C64D | mov dword ptr ss:[ebp-100],0 | 0072C657 | lea ecx,dword ptr ss:[ebp-100] | 0072C65D | push ecx | 0072C65E | push dolphin easyreader.8D98A8 | 0072C663 | mov edx,dword ptr ss:[ebp-F8] | IMarkupPointer *pPointerStart 0072C669 | mov eax,dword ptr ds:[edx] | *boom* 0072C66B | mov ecx,dword ptr ss:[ebp-F8] | 0072C671 | push ecx | 0072C672 | mov edx,dword ptr ds:[eax] | 0072C674 | call edx | IMarkupPointer::QueryInterface() 0072C676 | cmp dword ptr ss:[ebp-100],0 | 0072C67D | je dolphin easyreader.72C6C1 | ... --- snip ---
Wine source:
https://source.winehq.org/git/wine.git/blob/3cc3b445752902e07231900befc296f7...
--- snip --- 4835 static HRESULT WINAPI MarkupServices_CreateMarkupPointer(IMarkupServices *iface, IMarkupPointer **ppPointer) 4836 { 4837 HTMLDocument *This = impl_from_IMarkupServices(iface); 4838 FIXME("(%p)->(%p)\n", This, ppPointer); 4839 return E_NOTIMPL; 4840 } --- snip ---
Microsoft docs:
* https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer...) ("Introduction to Markup Services")
* https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer...) ("IMarkupServices interface")
* https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer...) ("IMarkupContainer interface")
$ sha1sum EasyReader_for_Windows_6.04_English_(United_Kingdom)_DEMO.exe 19d0911a8b05bb0966ce80e2c0e62c48cd039c2c EasyReader_for_Windows_6.04_English_(United_Kingdom)_DEMO.exe
$ du -sh EasyReader_for_Windows_6.04_English_(United_Kingdom)_DEMO.exe 104M EasyReader_for_Windows_6.04_English_(United_Kingdom)_DEMO.exe
$ wine --version wine-5.10
Regards
https://bugs.winehq.org/show_bug.cgi?id=49335
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- URL| |https://web.archive.org/web | |/20200430183420/https://you | |rdolphin.com/downloads/prod | |uct?demo=true&lid=1&pvid=9 Keywords| |download
https://bugs.winehq.org/show_bug.cgi?id=49335
Gijs Vermeulen gijsvrm@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED Fixed by SHA1| |5679312635c075c7fc9a8ec7c2f | |c3c01a509bb30
--- Comment #1 from Gijs Vermeulen gijsvrm@gmail.com --- This was fixed by https://source.winehq.org/git/wine.git/commit/5679312635c075c7fc9a8ec7c2fc3c01a509bb30.
App starts and is able to finish startup wizard. I didn't test the app further.
https://bugs.winehq.org/show_bug.cgi?id=49335
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #2 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 5.18.
https://bugs.winehq.org/show_bug.cgi?id=49335
Michael Stefaniuc mstefani@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|--- |5.0.x
https://bugs.winehq.org/show_bug.cgi?id=49335
Michael Stefaniuc mstefani@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Target Milestone|5.0.x |---
--- Comment #3 from Michael Stefaniuc mstefani@winehq.org --- Removing the 5.0.x milestone from bug fixes included in 5.0.4.
-
WineHQ Bugzilla