Crash with "privileged instruction in 16-bit code"

[Andriy Palamarchuk]

An app crashes with this message. Described in the bug
768:
http://bugs.winehq.com/show_bug.cgi?id=768

Does anybody want to look at it?

Information from debugger below:
*****************************************

Unhandled exception: privileged instruction in 16-bit
code (034f:49f0).
Symbol __strtol_internal is invalid
0x034f:0x49f0: pushw    %es:0x4(%bx)

Backtrace:

=>0 0x034f:0x49f0 (bp=932c)
  1 0x0317:0x3fb7 (bp=9344, far call assumed)
  2 0x09b7:0x22f9 (bp=9430, far call assumed)
  3 0x0317:0x1f4e (bp=944a, far call assumed)
  4 0x02d7:0x421b (bp=9460, far call assumed)
  5 0x02d7:0x4405 (bp=9486)
  6 0x0327:0x3652 (bp=95aa, far call assumed)
  7 0x0327:0x3013 (bp=9612)
  8 0x02d7:0x421b (bp=9628, far call assumed)
  9 0x0307:0x31cd (bp=964a, far call assumed)
 10 0x0957:0x3ac8 (bp=969e, far call assumed)
 11 0x0977:0x4e5b (bp=96b6, far call assumed)
 12 0x0297:0xc789 (bp=96c8, far call assumed)
 13 0x0297:0x40ca (bp=0000)

Wine-dbg>info reg
  CS:034f SS:0a27 DS:0a27 ES:0000 FS:0000 GS:0000
  IP:49f0 SP:90a0 BP:932c FLAGS:0206(   - 00  I   -
-P1 )
*****************************************

Andriy

__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com

[Andreas Mohr]

On Mon, Jun 10, 2002 at 09:58:27AM -0700, Andriy Palamarchuk wrote:
> An app crashes with this message. Described in the bug
> 768:
> http://bugs.winehq.com/show_bug.cgi?id=768
>
> Does anybody want to look at it?

[...]
> Unhandled exception: privileged instruction in 16-bit
> code (034f:49f0).
> Symbol __strtol_internal is invalid
> 0x034f:0x49f0: pushw    %es:0x4(%bx)
>
> Wine-dbg>info reg
>   CS:034f SS:0a27 DS:0a27 ES:0000 FS:0000 GS:0000
>   IP:49f0 SP:90a0 BP:932c FLAGS:0206(   - 00  I   -
> -P1 )

Sounds like ES:BX is a NULL pointer
(you forgot to list BX, though).
And as ES == NULL == evil, this results in a privileged instruction exception.
Try to find out where the NULL pointer comes from via relay trace
or by walking the function backtrace (checking where ES:BX gets loaded
and where this memory location or register gets its value from).