[Bug 33162] Acrobat Reader 11 crashes on start (native API application virtualization, NtProtectVirtualMemory removes execute page protection on its own code)

wine-bugs at winehq.org wine-bugs at winehq.org
Sat Sep 28 05:25:35 CDT 2013


http://bugs.winehq.org/show_bug.cgi?id=33162

--- Comment #4 from Anastasius Focht <focht at gmx.net> 2013-09-28 05:25:35 CDT ---
Hello Austin,

your problem/regression finding has nothing to do with this bug, it's a
separate issue.

The underlying problem I analysed here is still present and it just works by
chance for the Wine version you are using.

Code changes to Wine's ntdll and/or compiler/linker settings/versions can make
this problem reappear any time.

Dumping the relevant range of ntdll export addresses for Wine 1.7.3 gives:

--- snip ---
...
NtAllocateVirtualMemory                            7BC98F66        
NtFreeVirtualMemory                                7BC9970C        
NtProtectVirtualMemory                             7BC99B5B        
NtQueryVirtualMemory                               7BC9A054        
NtLockVirtualMemory                                7BC9A88F        
NtUnlockVirtualMemory                              7BC9A9D2        
NtCreateSection                                    7BC9AB15        
NtOpenSection                                      7BC9AE1A        
...
--- snip ---

The API in question 'NtCreateSection' (0x7BC99xxx) from my previous analysis
(comment #2) now lives in a different page than 'NtProtectVirtualMemory'
(0x7BC9Axxx) hence the crash is "magically" gone.

Regards

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.



More information about the wine-bugs mailing list