https://bugs.winehq.org/show_bug.cgi?id=45820
Bug ID: 45820 Summary: Symantec Eraser Control Driver 'eeCtrl64.sys' (Norton 360) crashes on unimplemented function ntoskrnl.exe.ExpInterlocked{Push,Pop}EntrySList Product: Wine Version: 3.15 Hardware: x86-64 OS: Linux Status: NEW Severity: normal Priority: P2 Component: ntoskrnl Assignee: wine-bugs@winehq.org Reporter: focht@gmx.net Distribution: ---
Hello folks,
continuation of bug 45819
--- snip --- $ WINEDEBUG=+seh,+relay,+ntoskrnl wineboot >>log.txt 2>&1 ... 0016:Call ntoskrnl.exe.RtlInitUnicodeString(0033f460,0002e730 L"C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT") ret=0047a48a 0016:Call ntdll.RtlInitUnicodeString(0033f460,0002e730 L"C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EPERSIST.DAT") ret=7bcfe083 0016:Ret ntdll.RtlInitUnicodeString() retval=0033f460 ret=7bcfe083 0016:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0033f460 ret=0047a48a 0016:Call ntoskrnl.exe.ZwOpenKey(0033f440,00020019,0033f3a0) ret=0047ca8d 0016:Call ntdll.NtOpenKey(0033f440,00020019,0033f3a0) ret=7bcfe083 0016:Ret ntdll.NtOpenKey() retval=00000000 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwOpenKey() retval=00000000 ret=0047ca8d 0016:Call ntoskrnl.exe.RtlInitUnicodeString(0033f390,004665b8 L"Started") ret=0047c9ee 0016:Call ntdll.RtlInitUnicodeString(0033f390,004665b8 L"Started") ret=7bcfe083 0016:Ret ntdll.RtlInitUnicodeString() retval=0033f390 ret=7bcfe083 0016:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0033f390 ret=0047c9ee 0016:Call ntoskrnl.exe.ZwOpenKey(0033f418,000f003f,0033f3a0) ret=0047ca8d 0016:Call ntdll.NtOpenKey(0033f418,000f003f,0033f3a0) ret=7bcfe083 0016:Ret ntdll.NtOpenKey() retval=c0000034 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwOpenKey() retval=c0000034 ret=0047ca8d 0016:Call ntoskrnl.exe.RtlInitUnicodeString(0033f490,004665b8 L"Started") ret=00474bfe 0016:Call ntdll.RtlInitUnicodeString(0033f490,004665b8 L"Started") ret=7bcfe083 0016:Ret ntdll.RtlInitUnicodeString() retval=0033f490 ret=7bcfe083 0016:Ret ntoskrnl.exe.RtlInitUnicodeString() retval=0033f490 ret=00474bfe 0016:Call ntoskrnl.exe.ZwCreateKey(0033f418,000f003f,0033f460,00000000,00000000,00000001,00000000) ret=0047cb6c 0016:Call ntdll.NtCreateKey(0033f418,000f003f,0033f460,00000000,00000000,00000001,00000000) ret=7bcfe083 0016:Ret ntdll.NtCreateKey() retval=00000000 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwCreateKey() retval=00000000 ret=0047cb6c 0016:Call ntoskrnl.exe.ZwClose(00000040) ret=0047c926 0016:Call ntdll.NtClose(00000040) ret=7bcfe083 0016:Ret ntdll.NtClose() retval=00000000 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwClose() retval=00000000 ret=0047c926 0016:Call ntoskrnl.exe.ZwClose(0000003c) ret=0047c926 0016:Call ntdll.NtClose(0000003c) ret=7bcfe083 0016:Ret ntdll.NtClose() retval=00000000 ret=7bcfe083 0016:Ret ntoskrnl.exe.ZwClose() retval=00000000 ret=0047c926 0016:trace:seh:NtRaiseException code=80000100 flags=1 addr=0x7bcd00e7 ip=7bcd00e7 tid=0016 0016:trace:seh:NtRaiseException info[0]=00000000004c6878 0016:trace:seh:NtRaiseException info[1]=00000000004c67ac wine: Call from 0x7bcd00e7 to unimplemented function ntoskrnl.exe.ExpInterlockedPopEntrySList, aborting --- snip ---
'ntoskrnl.exe.ExpInterlockedPushEntrySList' is imported too, so it makes sense to add both stubs here.
$ sha1sum N360-TW-21.1.0-EN.exe aa05ccf9668e166ef28923d451f1c2ecad6f75f1 N360-TW-21.1.0-EN.exe
$ du -sh N360-TW-21.1.0-EN.exe 202M N360-TW-21.1.0-EN.exe
$ wine --version wine-3.15-150-gb29cdbd5f2
Regards
https://bugs.winehq.org/show_bug.cgi?id=45820
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- URL| |http://buy-download.norton. | |com/downloads/2014/21.1/N36 | |0/US/N360-TW-21.1.0-EN.exe Keywords| |download
https://bugs.winehq.org/show_bug.cgi?id=45820
Mathew Hodson mathew.hodson@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |mathew.hodson@gmail.com
--- Comment #1 from Mathew Hodson mathew.hodson@gmail.com --- https://source.winehq.org/git/wine.git/commitdiff/2401d86f68ee2100445ea8cd25...
https://bugs.winehq.org/show_bug.cgi?id=45820
Mathew Hodson mathew.hodson@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC|mathew.hodson@gmail.com |
https://bugs.winehq.org/show_bug.cgi?id=45820
Jacek Caban jacek@codeweavers.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |jacek@codeweavers.com Fixed by SHA1| |2401d86f68ee2100445ea8cd252 | |197ca42b3cc9a Status|NEW |RESOLVED Resolution|--- |FIXED
--- Comment #2 from Jacek Caban jacek@codeweavers.com --- Fixed in Git.
https://bugs.winehq.org/show_bug.cgi?id=45820
Alexandre Julliard julliard@winehq.org changed:
What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED
--- Comment #3 from Alexandre Julliard julliard@winehq.org --- Closing bugs fixed in 4.2.
https://bugs.winehq.org/show_bug.cgi?id=45820
Zebediah Figura z.figura12@gmail.com changed:
What |Removed |Added ---------------------------------------------------------------------------- CC| |unrealmy2000@yahoo.com.ar
--- Comment #4 from Zebediah Figura z.figura12@gmail.com --- *** Bug 48933 has been marked as a duplicate of this bug. ***
https://bugs.winehq.org/show_bug.cgi?id=45820
Anastasius Focht focht@gmx.net changed:
What |Removed |Added ---------------------------------------------------------------------------- URL|http://buy-download.norton. |https://web.archive.org/web |com/downloads/2014/21.1/N36 |/20190410163210/http://buy- |0/US/N360-TW-21.1.0-EN.exe |download.norton.com/downloa | |ds/2014/21.1/N360/US/N360-T | |W-21.1.0-EN.exe