[Bug 35093] Vkt7Easy2.exe crashes on shutdown

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=35093

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |download
             Status|UNCONFIRMED                 |NEW
                URL|                            |http://www.teplocom.msk.ru/
                   |                            |data/support/software/VKT7E
                   |                            |asy2.exe
                 CC|                            |focht at gmx.net
          Component|-unknown                    |richedit
            Summary|Vkt7Easy2.exe               |Vkt7Easy2.exe crashes on
                   |                            |shutdown
     Ever Confirmed|0                           |1

--- Comment #3 from Anastasius Focht <focht at gmx.net> 2013-12-09 07:35:10 CST ---
Hello folks,

this might be a dupe of one of the existing OLE related RichEdit control bugs.

Workaround: 'winetricks riched20'

The app is MFC based and uses CRichEditView wrapper for RichEdit control.
It tries to retrieve the currently activated in place OLE item for RichEdit
object.
Usually this would end up in IRichEditOle_fnGetObject (which is also a stub)
but the COM object instance is no longer alive at this point because of
app/window cleanup hence it crashes.

--- snip ---
$ pwd
/home/focht/.wine/drive_c/Program Files/Teplocom/ВКТ7Easy2/Exe

$ LANG=ru_RU.utf8 wine ./VKT7Easy2.exe
...
0024:fixme:richedit:IRichEditOle_fnInPlaceDeactivate stub 0x1173330
0024:Call user32.DestroyWindow(0001008e) ret=6c2d92d4 
...
0024:Call window proc 0x7dca7650
(hwnd=0x100d0,msg=WM_NCDESTROY,wp=00000000,lp=00000000)
0024:Call riched20.RichEdit10ANSIWndProc(000100d0,00000082,00000000,00000000)
ret=7e979d36
0024:trace:richedit:RichEditWndProc_common enter hwnd 0x100d0 msg 0082 () 0 0,
unicode 0 
...
0024:trace:richedit:IRichEditOle_fnRelease 0x1173330 ref=0
0024:trace:richedit:IRichEditOle_fnRelease Destroying 0x1173330 
...
0024:Call riched20.RichEdit10ANSIWndProc(00010096,00000002,00000000,00000000)
ret=7e979d36
0024:trace:richedit:RichEditWndProc_common enter hwnd 0x10096 msg 0002 () 0 0,
unicode 0 
...
0024:trace:richedit:ME_EmptyUndoStack Emptying undo stack 
...
0024:trace:richedit:ME_ReleaseStyle all style references freed (good!) 
...
0024:trace:richedit:RichEditWndProc_common exit hwnd 0x10096 msg 0002 () 0 0,
unicode 0 -> 0
0024:Ret  riched20.RichEdit10ANSIWndProc() retval=00000000 ret=7e979d36
0024:Ret  window proc 0x7dca7650
(hwnd=0x10096,msg=WM_DESTROY,wp=00000000,lp=00000000) retval=00000000
0024:Ret  user32.CallWindowProcA() retval=00000000 ret=6c2d9330
0024:Call msvcrt.memset(0033eae4,00000000,00000034) ret=6c2fb1d3
0024:Ret  msvcrt.memset() retval=0033eae4 ret=6c2fb1d3
0024:trace:seh:raise_exception code=c0000005 flags=0 addr=0x1 ip=00000001
tid=0024
0024:trace:seh:raise_exception  info[0]=00000000
0024:trace:seh:raise_exception  info[1]=00000001
0024:trace:seh:raise_exception  eax=01170088 ebx=00000000 ecx=0033eae0
edx=0033eb18 esi=01173330 edi=0014dd58
0024:trace:seh:raise_exception  ebp=0033eb24 esp=0033eac0 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00010246 
...
Backtrace:
=>0 0x00000001 (0x0033eb24)
  1 0x6c2fd6a1 in mfc42 (+0x6d6a0) (0x0033ebac)
  2 0x6c2d99d5 in mfc42 (+0x499d4) (0x0033ebcc)
  3 0x6c2d88ee in mfc42 (+0x488ed) (0x0033ec2c)
  4 0x6c2d8afb in mfc42 (+0x48afa) (0x0033ec4c)
  5 0x6c3013a8 in mfc42 (+0x713a7) (0x0033ec78)
  6 0x7e979d36 WINPROC_wrapper+0x19() in user32 (0x0033eca8) 
...
0x00000001: -- no code accessible --
Modules:
Module    Address            Debug info    Name (74 modules)
PE      400000-  464000    Deferred        vkt7easy2
PE     1280000- 1621000    Deferred        npmodule
PE    10000000-1001f000    Deferred        vkt7moduleex
ELF    44f76000-44f93000    Deferred        libgcc_s.so.1
PE    6c290000-6c38b000    Export          mfc42
ELF    7ac00000-7ac68000    Deferred        riched20<elf>
  \-PE    7ac10000-7ac68000    \               riched20 
...
Threads:
process  tid      prio (all id:s are in hex) 
...
00000023 (D) C:\Program Files\Teplocom\ÂÊÒ7Easy2\Exe\Vkt7Easy2.exe
    00000035    0
    00000034    0
    00000033    0
    00000031    0
    0000002f    0
    0000002e    0
    0000002c    0
    0000002b    0
    0000002a    0
    00000028    0
    00000026    0
    00000025    0
    00000024    0 <== 
--- snip ---

$ sha1sum VKT7Easy2.exe 
36e034bd7e59654b3f310f16e8f17505b73c6b08  VKT7Easy2.exe

$ du -sh VKT7Easy2.exe 
1.6M    VKT7Easy2.exe

$ wine --version
wine-1.7.8-128-g37460b6

Regards

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.