[Bug 38753] Acrobat Reader DC 2015.007.20033 crashes on startup when running in 'Adobe protected mode' with WinVer set to 'Windows 7' (missing support for process security descriptor)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=38753

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
                 CC|                            |focht at gmx.net
          Component|-unknown                    |kernel32
         Resolution|---                         |DUPLICATE
            Summary|Acrobat Reader DC           |Acrobat Reader DC
                   |2015.007.20033 crashes with |2015.007.20033 crashes on
                   |a pagefault on startup      |startup when running in
                   |                            |'Adobe protected mode' with
                   |                            |WinVer set to 'Windows 7'
                   |                            |(missing support for
                   |                            |process security
                   |                            |descriptor)

--- Comment #4 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

Adam's problem results from running the reader in protected mode.
Not sure what Warren is talking about here.

Relevant trace log:

--- snip ---
$ pwd
/home/focht/.wine/drive_c/Program Files/Adobe/Acrobat Reader DC/Reader

$ WINEDEBUG=+tid,+seh,+relay,+advapi,+server wine ./AcroRd32.exe >>log.txt 2>&1
...
0009:Call advapi32.RegOpenKeyExW(80000002,0050c8b8
L"SOFTWARE\\Policies\\Adobe\\Acrobat
Reader\\DC\\FeatureLockdown",00000000,80000000,0032fac0) ret=0040b73f
0009: open_key( parent=001c, access=80000000, attributes=00000000,
name=L"SOFTWARE\\Policies\\Adobe\\Acrobat Reader\\DC\\FeatureLockdown" )
0009: open_key() = 0 { hkey=0050 }
0009:Ret  advapi32.RegOpenKeyExW() retval=00000000 ret=0040b73f
0009:Call advapi32.RegQueryValueExW(00000050,0050ca78
L"bEnableProcessIntegrityMitigations",00000000,0032fa90,0032fa98,0032fa94)
ret=0040b87a
0009: get_key_value( hkey=0050, name=L"bEnableProcessIntegrityMitigations" )
0009: get_key_value() = OBJECT_NAME_NOT_FOUND { type=-1, total=0, data={} }
0009:Ret  advapi32.RegQueryValueExW() retval=00000002 ret=0040b87a
0009:Call advapi32.RegOpenKeyExW(80000001,0050c988 L"Software\\Adobe\\Acrobat
Reader\\DC\\Privileged",00000000,80000000,0032fac8) ret=0040b73f
0009: open_key( parent=0024, access=80000000, attributes=00000000,
name=L"Software\\Adobe\\Acrobat Reader\\DC\\Privileged" )
0009: open_key() = OBJECT_NAME_NOT_FOUND { hkey=0000 }
0009:Ret  advapi32.RegOpenKeyExW() retval=00000002 ret=0040b73f
0009:Call advapi32.RegQueryValueExW(00000000,0050ca78
L"bEnableProcessIntegrityMitigations",00000000,0032fa90,0032fa98,0032fa94)
ret=0040b87a
0009:Ret  advapi32.RegQueryValueExW() retval=00000006 ret=0040b87a
0009:Call advapi32.RegCloseKey(00000050) ret=0040baa0
0009: close_handle( handle=0050 )
0009: close_handle() = 0
0009:Ret  advapi32.RegCloseKey() retval=00000000 ret=0040baa0
0009:Call advapi32.OpenProcessToken(ffffffff,000a0000,0032fad8) ret=0040e035
0009: open_token( handle=ffffffff, access=000a0000, attributes=00000000,
flags=00000000 )
0009: open_token() = 0 { token=0050 }
0009:Ret  advapi32.OpenProcessToken() retval=00000001 ret=0040e035
0009:Call
advapi32.GetKernelObjectSecurity(00000050,00000010,00000000,00000000,0032faa0)
ret=0040e3aa
0009:trace:advapi:GetKernelObjectSecurity
(0x50,0x00000010,(nil),0x00000000,0x32faa0)
0009: get_security_object( handle=0050, security_info=00000010 )
0009: get_security_object() = 0 { sd_len=00000000, sd={} }
0009:Ret  advapi32.GetKernelObjectSecurity() retval=00000000 ret=0040e3aa
0009:Call KERNEL32.GetLastError() ret=0040e3b2
0009:Ret  KERNEL32.GetLastError() retval=0000007a ret=0040e3b2
0009:Call ntdll.RtlAllocateHeap(00110000,00000008,00000014) ret=004031df
0009:Ret  ntdll.RtlAllocateHeap() retval=00133ed8 ret=004031df
0009:Call
advapi32.GetKernelObjectSecurity(00000050,00000010,00133ed8,00000014,0032faa0)
ret=0040e433
0009:trace:advapi:GetKernelObjectSecurity
(0x50,0x00000010,0x133ed8,0x00000014,0x32faa0)
0009: get_security_object( handle=0050, security_info=00000010 )
0009: get_security_object() = 0 { sd_len=00000000, sd={} }
0009:Ret  advapi32.GetKernelObjectSecurity() retval=00000001 ret=0040e433
0009:Call
advapi32.GetSecurityDescriptorSacl(00133ed8,0032faa4,0032fa9c,0032faa8)
ret=0040e46d
0009:Ret  advapi32.GetSecurityDescriptorSacl() retval=00000001 ret=0040e46d
0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0x40e47e ip=0040e47e
tid=0009
0009:trace:seh:raise_exception  info[0]=00000000
0009:trace:seh:raise_exception  info[1]=00000004
0009:trace:seh:raise_exception  eax=00000000 ebx=00000014 ecx=00000000
edx=00000000 esi=00000000 edi=00133ed8
0009:trace:seh:raise_exception  ebp=0032fabc esp=0032fa78 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00010246
0009:trace:seh:call_stack_handlers calling handler at 0x4fc728 code=c0000005
flags=0
0009:trace:seh:call_stack_handlers handler at 0x4fc728 returned 1
--- snip ---

-> crash due to NULL SACL dereference

That's a dupe of bug 22006

Workaround: disable protected mode.

--- snip ---
$ wine reg add "HKCU\\SOFTWARE\\Adobe\\Acrobat Reader\\DC\\Privileged" /v
bProtectedMode /t REG_DWORD /d 0 /f
--- snip ---

(beware of Bugzilla linebreaks)

After that:

--- snip ---
wine: Call from 0x7b8457b9 to unimplemented function msvcp120.dll._Cnd_init,
aborting
wine: Unimplemented function msvcp120.dll._Cnd_init called at address
0x7b8457b9 (thread 0009), starting debugger...
--- snip ---

-> bug 37881 ('winetricks -q vcrun2013')

The next problem would be missing 'GetThreadGroupAffinity' and
'SetThreadGroupAffinity' API (due to using native 'msvcr120.dll' override).

-> bug 36549

Regards

*** This bug has been marked as a duplicate of bug 22006 ***

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.