[Bug 18542] Slingplayer 2.0 unhandled exception

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=18542





--- Comment #12 from Rein Klazes <wijn at online.nl>  2009-06-18 03:56:04 ---

Hmm, I was hoping for a  WINEDEBUG=+tid,+seh,+relay,+menu trace.

Nevertheless, the menu calls are completely different from the previous,
sufficient proof that it is not the menu code that causes the problem. 

Now , I managed to get it running. It does not crash, probably becauseI don't
stream. Yet with +heap (and a little patience) we do get a crash closing the
app.

Last million of +menu,+shdocvw,+heap,+seh,+tid,+relay , lzma'd is attached.

Hilite:

0009:Ret  window proc 0x4f1c24
(hwnd=0x10058,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000
0009:trace:heap:RtlFreeHeap (0x110000,00000002,0x20f8a8): returning TRUE
0009:Ret  user32.DestroyWindow() retval=00000001 ret=004f153a
0009:trace:shdocvw:WebBrowser_Release (0x20f950) ref=0
0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7d4668c2
ip=7d4668c2 tid=0009
0009:trace:seh:raise_exception  info[0]=00000000
0009:trace:seh:raise_exception  info[1]=aaaaaab2
0009:trace:seh:raise_exception  eax=aaaaaaaa ebx=7d4841d4 ecx=00000000
edx=06c457cc esi=0020f9f0 edi=0020f950
0009:trace:seh:raise_exception  ebp=0032eff4 esp=0032efdc cs=0073 ds=007b
es=007b fs=0033 gs=003b flags=00010206

...

Unhandled exception: page fault on read access to 0xaaaaaab2 in 32-bit code
(0x7d4668c2).
Register dump:
 CS:0073 SS:007b DS:007b ES:007b FS:0033 GS:003b
 EIP:7d4668c2 ESP:0032efdc EBP:0032eff4 EFLAGS:00010206(  R- --  I   - -P- )
 EAX:aaaaaaaa EBX:7d4841d4 ECX:00000000 EDX:06c457cc
 ESI:0020f9f0 EDI:0020f950
Stack dump:
0x0032efdc:  06c457cc 00000001 00000001 0032f008
0x0032efec:  7d4841d4 00000000 0032f024 7d479a9c
0x0032effc:  0020f9f0 7d48feb4 7d47fb59 7d47c34a
0x0032f00c:  0020f950 00000000 00000001 0048f5c0
0x0032f01c:  06c45570 01ab3848 0032f050 00502a20
0x0032f02c:  0020f950 389ac8c0 01ab3848 00000000
Backtrace:
=>0 0x7d4668c2 DocHost_Release+0x22(This=0x20f9f0)
[/home/rein/winedev/wine/dlls/shdocvw/dochost.c:534] in shdocvw (0x0032eff4)
  1 0x7d479a9c WebBrowser_Release+0x5c(iface=<register EDI not in topmost
frame>) [/home/rein/winedev/wine/dlls/shdocvw/webbrowser.c:161] in shdocvw
(0x0032f024)
  2 0x00502a20 in slingplayer (+0x102a20) (0x0032f050)
  3 0x0046a416 in slingplayer (+0x6a416) (0x0032f05c)
  4 0x00477a88 in slingplayer (+0x77a88) (0x0032f068)
  5 0x00477c0f in slingplayer (+0x77c0f) (0x0032f074)
  6 0x0048f407 in slingplayer (+0x8f407) (0x0032f090)
  7 0x0048f5cf in slingplayer (+0x8f5cf) (0x0032f09c)
  8 0x004f3718 in slingplayer (+0xf3718) (0x0032f130)
  9 0x004ef05a in slingplayer (+0xef05a) (0x0032f150)
  10 0x004f1bcb in slingplayer (+0xf1bcb) (0x0032f1b8)
  11 0x004f1c5a in slingplayer (+0xf1c5a) (0x0032f1d8)
  12 0x7ee2a94a WINPROC_wrapper+0x1a() in user32 (0x0032f208)
  13 0x7ee2c13a call_window_proc+0x6a(hwnd=<register EDI not in topmost frame>,
msg=<register ESI not in topmost frame>, wp=0, lp=0, result=0x32f2dc,
arg=0x4f1c24) [/home/rein/winedev/wine/dlls/user32/winproc.c:458] in user32
(0x0032f248)
  14 0x7ee30367 WINPROC_call_window+0xf7(hwnd=<register EDI not in topmost
frame>, msg=2, wParam=0, lParam=0, result=0x32f2dc, unicode=1, mapping=65612)
[/home/rein/winedev/wine/dlls/user32/winproc.c:2218] in user32 (0x0032f288)
  15 0x7edefcd1 call_window_proc+0x91(hwnd=<register ESI not in topmost frame>,
msg=<register EDI not in topmost frame>, wparam=0, lparam=0, unicode=1,
same_thread=1, mapping=65612)
[/home/rein/winedev/wine/dlls/user32/message.c:1634] in user32 (0x0032f2e8)
  16 0x7edf4675 send_message+0x1d5(info=<register EDI not in topmost frame>,
res_ptr=0x32f384, unicode=1)
[/home/rein/winedev/wine/dlls/user32/message.c:2483] in user32 (0x0032f348)
  17 0x7edf4b8c SendMessageW+0x4c(hwnd=0x1004c, msg=2, wparam=0, lparam=0)
[/home/rein/winedev/wine/dlls/user32/message.c:2604] in user32 (0x0032f388)
...


The 'aaaaaaaa' data visible in the trace and the debugger output is the result
from tracing with +heap. It shows that free'd memory is being used. It shows
also that it happens in shdocvw. 

Hopefully someone with knowledge of this stuff can have a look.

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.