[Bug 20728] Multiple video players crash when opening audio or video file (MPC-HC v1.6.5, PotPlayer 1.5.x)(FilterGraph_create releases/destroys controlling IUnknown)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=20728

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|                            |http://sourceforge.net/proj
                   |                            |ects/mpc-hc/files/MPC%20Hom
                   |                            |eCinema%20-%20Win32/MPC-HC_
                   |                            |v1.6.5.6366_x86/
                 CC|                            |focht at gmx.net
            Summary|Media Player Classic Home   |Multiple video players
                   |Cinema crashes opening      |crash when opening audio or
                   |audio or video file         |video file (MPC-HC v1.6.5,
                   |                            |PotPlayer
                   |                            |1.5.x)(FilterGraph_create
                   |                            |releases/destroys
                   |                            |controlling IUnknown)

--- Comment #11 from Anastasius Focht <focht at gmx.net> ---
Hello Mohamad,

please don't paste huge backtraces, attach them instead.
You are using an outdated unsupported Wine version which is pointless for
testing.
Upgrade to newer Wine version, preferably Wine 1.7.x

Still present.

Only 'winetricks -q quartz' needed for playback (tested with h264 1080p .mkv).

--- snip ---
$ pwd
/home/focht/.wine/drive_c/Program Files/MPC-HC

$ WINEDEBUG=+tid,+seh,+relay,+quartz wine ./mpc-hc.exe >>log.txt 2>&1
...
0028:trace:quartz:DSCF_CreateInstance
(0x1c8aa8)->((nil),{b79bb0b0-33c1-11d1-abe1-00a0c905f375},0x13fc88c)
0028:trace:quartz:FilterMapper2_create ((nil), 0x19de00c)
...
0028:trace:quartz:FilterMapper2_create -- created at 0x15e1b8
0028:trace:quartz:Inner_QueryInterface
(0x15e1b8)->({b79bb0b0-33c1-11d1-abe1-00a0c905f375}, 0x13fc88c)
0028:trace:quartz:Inner_AddRef (0x15e1b8)->(): new ref = 2
0028:trace:quartz:Inner_Release (0x15e1b8)->(): new ref = 1
...
0028:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7bc4c11c
ip=7bc4c11c tid=0028
0028:trace:seh:raise_exception  info[0]=00000001
0028:trace:seh:raise_exception  info[1]=00409eb4
0028:trace:seh:raise_exception  eax=00409eb0 ebx=7bcd1000 ecx=7bcd1000
edx=013d00e8 esi=019de150 edi=019de15c
0028:trace:seh:raise_exception  ebp=019de0c8 esp=019de0c8 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00210216
0028:trace:seh:call_stack_handlers calling handler at 0xcfb81c code=c0000005
flags=0
...
0028:Call user32.MessageBoxW(00000000,019dd4ac L"MPC-HC terminated
unexpectedly. To help us fix this problem, please send this file
\"C:\\users\\focht\\Application Data\\Media Player
Classic\\mpc-hc.exe.1.6.5.6366.dmp\" to our bug tracker.\n\nDo you want to open
the folder containing the minidump file and visit the bug tracker
now?",0041223c L"MPC-HC - Mini Dump",00000004) ret=0061c1ea 
--- snip ---

The crash is caused by heap corruption.
Additionally the app hooks a large number of win32 API using 'detours' library.

... at this point I remembered one bug .. indeed: bug 35273

I'm choosing this one because it already has various dupes merged in.
It's unfortunate that comment #10 messed this one a bit up.

See: http://bugs.winehq.org/show_bug.cgi?id=35273#c3 for analysis and problem
solution.

Source:
http://source.winehq.org/git/wine.git/blob/HEAD:/dlls/quartz/filtergraph.c#l5615

$ sha1sum MPC-HC.1.6.5.6366.x86.exe 
89060d7c2ed071f5f64f2f0567f8e18e19f1081f  MPC-HC.1.6.5.6366.x86.exe

$ du -sh MPC-HC.1.6.5.6366.x86.exe 
7.0M    MPC-HC.1.6.5.6366.x86.exe

$ wine --version
wine-1.7.17-92-ge2bf516

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.