[Bug 36758] Adobe Creative Cloud Setup crashes very early in windows 7 mode

wine-bugs at winehq.org wine-bugs at winehq.org
Sun Jun 22 06:21:20 CDT 2014


https://bugs.winehq.org/show_bug.cgi?id=36758

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |focht at gmx.net

--- Comment #1 from Anastasius Focht <focht at gmx.net> ---
Hello Austin,

I can't reproduce this, the bootstrapper installer runs fine here in 'Windows
7' mode.

I compared the relay outputs up to the crash location and it looks pretty much
the same.

Yours:

--- snip ---
...
0036:trace:msxml:domdoc_loadXML
(0x17daf8)->(L"<application>\r\n\t<name>CCLBS</name>\r\n\t<platform>win32</platform>\r\n\t<version>2.6.0.393</version>\r\n\t<releaseNotesUrl/>\r\n\t<packageSets>\r\n\t\t<packageSet>\r\n\t\t\t<name>CCLBS</name>\r\n\t\t\t<installPath>[PROGRAMFILES]\\Adobe\\Adobe
Creative Cloud</installPath>\r\n\t\t\t<sequenceNumber>1"... 0x7fe7c4)
0036:trace:msxml:domdoc_loadXML parsed document 0x7da06098 
...
0036:trace:msxml:domdoc_AddRef (0x17daf8)->(2)
0036:trace:msxml:domdoc_Release (0x17daf8)->(1)
0036:trace:msxml:domdoc_get_documentElement (0x17daf8)->(0x7fe7f4)
0036:trace:msxml:create_node type 1
0036:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7dd06b74
0036:Ret  ntdll.RtlAllocateHeap() retval=001786a0 ret=7dd06b74
0036:trace:msxml:xmldoc_add_refs (0x7da06098)->(2)
0036:trace:msxml:domelem_QueryInterface
(0x1786a0)->({2933bf80-7b36-11d2-b20e-00c04f983e60} 0x7fe77c)
0036:trace:msxml:domelem_AddRef (0x1786a0)->(2)
0036:trace:msxml:domelem_Release (0x1786a0)->(1)
0036:trace:msxml:domelem_QueryInterface
(0x1786a0)->({2933bf86-7b36-11d2-b20e-00c04f983e60} 0x7fe7f4)
0036:trace:msxml:domelem_AddRef (0x1786a0)->(2)
0036:trace:msxml:domelem_Release (0x1786a0)->(1)
0036:trace:msxml:domelem_AddRef (0x1786a0)->(2)
0036:trace:msxml:domelem_Release (0x1786a0)->(1)
0036:trace:msxml:domelem_AddRef (0x1786a0)->(2)
0036:trace:msxml:domelem_AddRef (0x162b88)->(2)
0036:trace:msxml:domelem_appendChild (0x1786a0)->(0x162ba0 0x7fe7c8)
0036:trace:msxml:domelem_get_nodeType (0x162b88)->(0x7fe73c)
0036:Call oleaut32.VariantInit(007fe740) ret=7dd1e3c9
0036:Ret  oleaut32.VariantInit() retval=00000000 ret=7dd1e3c9
0036:trace:msxml:domelem_insertBefore (0x1786a0)->(0x162ba0 {VT_EMPTY}
0x7fe7c8)
0036:trace:msxml:domelem_get_nodeType (0x162b88)->(0x7fe6dc)
0036:trace:msxml:domelem_insertBefore new node type 1
0036:trace:msxml:domelem_QueryInterface
(0x162b88)->({4f2f4ba2-b822-11df-8b8a-6850dfd72085} 0x7fe61c)
0036:trace:msxml:node_query_interface (0x162b88)->(IID_xmlnode 0x7fe61c)
0036:trace:msxml:node_insert_before new child 0x7da06190, This->node 0x7da49440
0036:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7dd1dcbb
ip=7dd1dcbb tid=0036
0036:trace:seh:raise_exception  info[0]=00000000
0036:trace:seh:raise_exception  info[1]=00000050
0036:trace:seh:raise_exception  eax=0017d4c8 ebx=7dd77000 ecx=00162ba0
edx=00000000 esi=00162b88 edi=7da06190
0036:trace:seh:raise_exception  ebp=007fe688 esp=007fe630 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00010202
0036:trace:seh:call_stack_handlers calling handler at 0x50d4d0 code=c0000005
flags=0 
--- snip ---

Mine:

--- snip ---
...
0024:trace:msxml:domdoc_loadXML
(0xd17760)->(L"<application>\r\n\t<name>CCLBS</name>\r\n\t<platform>win32</platform>\r\n\t<version>2.6.0.393</version>\r\n\t<releaseNotesUrl/>\r\n\t<packageSets>\r\n\t\t<packageSet>\r\n\t\t\t<name>CCLBS</name>\r\n\t\t\t<installPath>[PROGRAMFILES]\\Adobe\\Adobe
Creative Cloud</installPath>\r\n\t\t\t<sequenceNumber>1"... 0x7fe814)
0024:trace:msxml:domdoc_loadXML parsed document 0x7da49590 
...
0024:trace:msxml:domdoc_AddRef (0xd17760)->(2)
0024:trace:msxml:domdoc_Release (0xd17760)->(1)
0024:trace:msxml:domdoc_get_documentElement (0xd17760)->(0x7fe844)
0024:trace:msxml:create_node type 1
0024:Call ntdll.RtlAllocateHeap(00110000,00000000,00000020) ret=7d95cae5
0024:Ret  ntdll.RtlAllocateHeap() retval=001775a8 ret=7d95cae5
0024:trace:msxml:xmldoc_add_refs (0x7da49590)->(2)
0024:trace:msxml:domelem_QueryInterface
(0x1775a8)->({2933bf80-7b36-11d2-b20e-00c04f983e60} 0x7fe790)
0024:trace:msxml:domelem_AddRef (0x1775a8)->(2)
0024:trace:msxml:domelem_Release (0x1775a8)->(1)
0024:trace:msxml:domelem_QueryInterface
(0x1775a8)->({2933bf86-7b36-11d2-b20e-00c04f983e60} 0x7fe844)
0024:trace:msxml:domelem_AddRef (0x1775a8)->(2)
0024:trace:msxml:domelem_Release (0x1775a8)->(1)
0024:trace:msxml:domelem_AddRef (0x1775a8)->(2)
0024:trace:msxml:domelem_Release (0x1775a8)->(1)
0024:trace:msxml:domelem_AddRef (0x1775a8)->(2)
0024:trace:msxml:domelem_AddRef (0x15ec28)->(2)
0024:trace:msxml:domelem_appendChild (0x1775a8)->(0x15ec40 0x7fe818)
0024:trace:msxml:domelem_get_nodeType (0x15ec28)->(0x7fe794)
0024:Call oleaut32.VariantInit(007fe780) ret=7d97aecc
0024:Ret  oleaut32.VariantInit() retval=007fe780 ret=7d97aecc
0024:trace:msxml:domelem_insertBefore (0x1775a8)->(0x15ec40 {VT_EMPTY}
0x7fe818)
0024:trace:msxml:domelem_get_nodeType (0x15ec28)->(0x7fe6fc)
0024:trace:msxml:domelem_insertBefore new node type 1
0024:trace:msxml:domelem_QueryInterface
(0x15ec28)->({4f2f4ba2-b822-11df-8b8a-6850dfd72085} 0x7fe608)
0024:trace:msxml:node_query_interface (0x15ec28)->(IID_xmlnode 0x7fe608)
0024:trace:msxml:node_insert_before new child 0x7da06ca8, This->node 0x7da088b0
0024:trace:msxml:domelem_removeChild (0x164a70)->(0x15ec40 (nil))
0024:trace:msxml:domelem_QueryInterface
(0x15ec28)->({4f2f4ba2-b822-11df-8b8a-6850dfd72085} 0x7fe588)
0024:trace:msxml:node_query_interface (0x15ec28)->(IID_xmlnode 0x7fe588)
0024:Call ntdll.RtlAllocateHeap(00110000,00000000,0000000c) ret=7d9521fb
0024:Ret  ntdll.RtlAllocateHeap() retval=00178d00 ret=7d9521fb
0024:Call ntdll.RtlFreeHeap(00110000,00000000,00178d00) ret=7d952295
0024:Ret  ntdll.RtlFreeHeap() retval=00000001 ret=7d952295
0024:trace:msxml:xmldoc_add_refs (0x7da49590)->(3)
0024:trace:msxml:xmldoc_release_refs (0x7da139a8)->(0)
0024:trace:msxml:xmldoc_release_refs freeing docptr 0x7da139a8 
--- snip ---

The crash seems to happen during unlink from current parent of the node.

A parent node vtable pointer is NULL hence the call to 'domelem_removeChild'
method causes the crash.

Source:
http://source.winehq.org/git/wine.git/blob/980e9225d20ade10cd85c3edea518d78d021dd60:/dlls/msxml3/node.c#l432

--- snip ---
432 HRESULT node_insert_before(xmlnode *This, IXMLDOMNode *new_child, const
VARIANT *ref_child,
433 IXMLDOMNode **ret)
...
473     refcount = xmlnode_get_inst_cnt(node_obj);
474
475     if(before)
476     {
477         xmlnode *before_node_obj = get_node_obj(before);
478         IXMLDOMNode_Release(before);
479         if(!before_node_obj) return E_FAIL;
480
481         /* unlink from current parent first */
482         if(node_obj->parent)
483         {
484             hr = IXMLDOMNode_removeChild(node_obj->parent, node_obj->iface,
NULL);
485             if (hr == S_OK) xmldoc_remove_orphan(node_obj->node->doc,
node_obj->node);
486         }
...
--- snip ---

Do you use by chance this bugged gcc 4.9 compiler for building Wine?
If yes, try downgrading to 4.8.x series and check again.

$ sha1sum CreativeCloudSet-Up.exe 
5439e86c0378a2d0debaa071259cc741762e5374  CreativeCloudSet-Up.exe

$ du -sh CreativeCloudSet-Up.exe 
3.0M    CreativeCloudSet-Up.exe

$ wine --version
wine-1.7.20-112-g6e1d877

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.



More information about the wine-bugs mailing list