[Bug 33506] New: Microsoft Expression Design 4 (Free Version) crashes when quickly populating main menu items (dropdown sub-menu drawing)

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=33506

             Bug #: 33506
           Summary: Microsoft Expression Design 4 (Free Version) crashes
                    when quickly populating main menu items (dropdown
                    sub-menu drawing)
           Product: Wine
           Version: 1.5.29
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: -unknown
        AssignedTo: wine-bugs at winehq.org
        ReportedBy: focht at gmx.net
    Classification: Unclassified


Hello folks,

as the summary says.

Prerequisite: 'winetricks -q dotnet40 corefonts'

Start the app and click one of the main menu items to show the drop down
sub-menu.
Now cycle menus by hovering mouse over other top level items -> crash.
Alternatively click the top level menu item multiple times.

When using +synchronous the frequency changes (menu drawing lags a bit) though
it still crashes in the end.

Last output before the crash:

--- snip ---
...
0033:trace:d3d9:d3d9_device_EndScene iface 0x10955528.
0033:trace:d3d:wined3d_device_end_scene device 0x10956968.
0033:trace:d3d:context_acquire device 0x10956968, target (nil).
0033:trace:d3d:context_acquire Rendering onscreen.
0033:trace:d3d:context_enter Entering context 0x109760d8, level 1.
0033:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7e9a13fe
ip=7e9a13fe tid=0033
0033:trace:seh:raise_exception  info[0]=00000000
0033:trace:seh:raise_exception  info[1]=00000000
0033:trace:seh:raise_exception  eax=00000000 ebx=7e9f05c8 ecx=00000001
edx=00000390 esi=7ffbc000 edi=1179fbf0
0033:trace:seh:raise_exception  ebp=0644e5c8 esp=0644e580 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00010202
0033:trace:seh:call_vectored_handlers calling handler at 0x791f5a7c
code=c0000005 flags=0
0033:trace:seh:call_vectored_handlers handler at 0x791f5a7c returned 0
0033:trace:seh:call_stack_handlers calling handler at 0x7bc98301 code=c0000005
flags=0 
--- snip ---

Another (different) crash:

--- snip ---
...
0032:trace:d3d_surface:surface_modify_location surface 0x109bdcf8, location
SFLAG_INTEXTURE, persistent 0x1.
0032:trace:d3d9:d3d9_vertexbuffer_Lock iface 0x1099d888, offset 335552, size
128, data 0x644e288, flags 0x1000.
0032:trace:d3d:wined3d_buffer_map buffer 0x1099d8a8, offset 335552, size 128,
data 0x644e288, flags 0x1000
0032:trace:d3d:context_acquire device 0x109569b0, target (nil).
0032:trace:d3d:context_acquire Rendering onscreen.
0032:trace:d3d:context_enter Entering context 0x10976120, level 1.
0032:trace:d3d:wined3d_buffer_map glMapBufferRange call ok
/home/focht/projects/wine/wine-git/dlls/wined3d/buffer.c / 1028
0032:trace:d3d:context_release Releasing context 0x10976120, level 1.
0032:warn:d3d:context_release Context 0x10976120 is not the current context.
0032:trace:d3d:wined3d_buffer_map Returning memory at 0x51ec0 (base (nil),
offset 335552).
0032:trace:d3d9:d3d9_vertexbuffer_Unlock iface 0x1099d888.
0032:trace:d3d:wined3d_buffer_unmap buffer 0x1099d8a8.
0032:trace:d3d:context_acquire device 0x109569b0, target (nil).
0032:trace:d3d:context_acquire Rendering onscreen.
0032:trace:d3d:context_enter Entering context 0x10976120, level 1.
0032:trace:d3d:wined3d_buffer_unmap glFlushMappedBufferRange call ok
/home/focht/projects/wine/wine-git/dlls/wined3d/buffer.c / 1140
0032:trace:d3d:context_release Releasing context 0x10976120, level 1.
0032:warn:d3d:context_release Context 0x10976120 is not the current context.
0032:trace:d3d9:d3d9_device_SetStreamSource iface 0x2195c8, stream_idx 0,
buffer (nil), offset 0, stride 0.
0032:trace:d3d:wined3d_device_set_stream_source device 0x109569b0, stream_idx
0, buffer (nil), offset 0, stride 0.
0032:trace:d3d:wined3d_buffer_decref 0x1099d8a8 decreasing refcount to 1.
0032:trace:d3d9:d3d9_device_DrawPrimitiveUP iface 0x2195c8, primitive_type 0x6,
primitive_count 2, data 0x109af9c8, stride 32.
0032:trace:d3d:wined3d_buffer_map buffer 0x1179e7c8, offset 0, size 128, data
0x644e1c4, flags 0x2000
0032:trace:d3d:context_acquire device 0x109569b0, target (nil).
0032:trace:d3d:context_acquire Rendering onscreen.
0032:trace:d3d:context_enter Entering context 0x10976120, level 1.
0032:trace:d3d:wined3d_buffer_map glMapBufferRange call ok
/home/focht/projects/wine/wine-git/dlls/wined3d/buffer.c / 1028
0032:trace:d3d:context_release Releasing context 0x10976120, level 1.
0032:warn:d3d:context_release Context 0x10976120 is not the current context.
0032:trace:d3d:wined3d_buffer_map Returning memory at (nil) (base (nil), offset
0).
0032:trace:seh:raise_exception code=c0000005 flags=0 addr=0xf75e8271
ip=f75e8271 tid=0032
0032:trace:seh:raise_exception  info[0]=00000001
0032:trace:seh:raise_exception  info[1]=00000000
0032:trace:seh:raise_exception  eax=109af9d0 ebx=f7613720 ecx=00000050
edx=00000010 esi=00000000 edi=00000000
0032:trace:seh:raise_exception  ebp=0644e1f4 esp=0644e180 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00010206
0032:trace:seh:call_vectored_handlers calling handler at 0x791f5a7c
code=c0000005 flags=0
0032:trace:seh:call_vectored_handlers handler at 0x791f5a7c returned 0
0032:trace:seh:call_stack_handlers calling handler at 0x7bc98301 code=c0000005
flags=0 
--- snip ---

$ du -sh Design_Trial_en.exe 
47M    Design_Trial_en.exe

$ sha1sum Design_Trial_en.exe 
65229a31f44d5adcf11edd7a849f8e3d9c4e8233  Design_Trial_en.exe

$ wine --version
wine-1.5.29-100-ga0b4cd1

Regards

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.