[Bug 21234] Monopoly Deluxe installer crash at the end of the installation

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=21234

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |focht at gmx.net
          Component|-unknown                    |mshtml

--- Comment #7 from Anastasius Focht <focht at gmx.net> 2011-05-20 17:29:27 CDT ---
Hello,

the problem seems to be that the installer is trying to fetch active document
data and derefs NULL IHTMLElementCollection.
HTMLDocument_get_all() returns S_OK and out param (collection) is set to NULL,
leading to crash.

WINEDEBUG=+tid,+seh,+loaddll,+mshtml,+shdocvw,+variant,+ole wine
./monopolydownload.exe

--- snip ---
...
0009:trace:shdocvw:WebBrowser_get_Document (0x137f88)->(0x3278b4)
0009:trace:mshtml:htmldoc_qi (0x13b050)->(IID_IDispatch, 0x327890)
0009:trace:mshtml:CustomDoc_AddRef (0x13b050) ref = 5
0009:trace:mshtml:htmldoc_qi (0x13b050)->(IID_IHTMLDocument2, 0x327880)
0009:trace:mshtml:CustomDoc_AddRef (0x13b050) ref = 6
0009:trace:mshtml:CustomDoc_Release (0x13b050) ref = 5
0009:trace:mshtml:htmldoc_qi (0x13b050)->(IID_IHTMLDocument2, 0x3278b0)
0009:trace:mshtml:CustomDoc_AddRef (0x13b050) ref = 6
0009:trace:mshtml:CustomDoc_Release (0x13b050) ref = 5
0009:trace:mshtml:HTMLDocument_get_all (0x13b050)->(0x3278f4)
0009:trace:variant:VariantInit (0x3278cc)
0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0x419305 ip=00419305
tid=0009
0009:trace:seh:raise_exception  info[0]=00000000
0009:trace:seh:raise_exception  info[1]=00000000
0009:trace:seh:raise_exception  eax=00000000 ebx=00557d70 ecx=00000000
edx=003278f8 esi=003278d4 edi=003278b4
0009:trace:seh:raise_exception  ebp=003278fc esp=003278ac cs=0073 ds=007b
es=007b fs=0033 gs=003b flags=00210206
0009:trace:seh:call_vectored_handlers calling handler at 0x687b37aa
code=c0000005 flags=0
...
--- snip ---

Debugging the last mshtml call before the crash:

--- snip ---
0x004192ab: pushl    %ecx
Wine-dbg>
0x004192ac: pushl    %esi
Wine-dbg>
0x004192ad: call    *0x20(%eax)
Wine-dbg>si
HTMLDocument_get_all () at
/opt/projects/wine/wine-git/dlls/mshtml/htmldoc.c:115
0x20090adb HTMLDocument_get_all
[/opt/projects/wine/wine-git/dlls/mshtml/htmldoc.c:115] in mshtml: pushl   
%ebp
115    {
Wine-dbg>n
116        HTMLDocument *This = impl_from_IHTMLDocument2(iface);
Wine-dbg>n
117        nsIDOMElement *nselem = NULL;
Wine-dbg>n
122        TRACE("(%p)->(%p)\n", This, p);
Wine-dbg>n
124        if(!This->doc_node->nsdoc) {
Wine-dbg>n
129        nsres = nsIDOMHTMLDocument_GetDocumentElement(This->doc_node->nsdoc,
&nselem);
Wine-dbg>n
fixme:winedbg:be_i386_is_jump unknown 81
130        if(NS_FAILED(nsres)) {
Wine-dbg>n
135        if(!nselem) {
Wine-dbg>n
136            *p = NULL;
Wine-dbg>n
137            return S_OK;
--- snip ---

$ sha1sum monopolydownload.exe 
a4a37d6abb36de685aa78472b62988104dc77148  monopolydownload.exe

$ wine --version
wine-1.3.20-230-g456e48e

Regards

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.