[Bug 38184] AutoHotkey script crashes when calling WScript.Shell's "exec" method (IWshShell3 vtable only supports up to IWshShell2)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=38184

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |NEW
                 CC|                            |focht at gmx.net
          Component|oleaut32                    |-unknown
            Summary|Application crash when      |AutoHotkey script crashes
                   |calling WScript.Shell's     |when calling
                   |"exec" method               |WScript.Shell's "exec"
                   |                            |method (IWshShell3 vtable
                   |                            |only supports up to
                   |                            |IWshShell2)
     Ever confirmed|0                           |1

--- Comment #3 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

confirming.

The null pointer access is the result from to out-of-bounds vtable access - it
misses IWshShell3 members.

IWshShell3 vtable only supports up to IWshShell2 as of now.

Source:
http://source.winehq.org/git/wine.git/blob/bf0e3a58517147d8711a1a757fe4dcd2d40a068c:/dlls/wshom.ocx/shell.c#l184 

--- snip ---
184 static const IWshShell3Vtbl WshShell3Vtbl = {
185     WshShell3_QueryInterface,
186     WshShell3_AddRef,
187     WshShell3_Release,
188     WshShell3_GetTypeInfoCount,
189     WshShell3_GetTypeInfo,
190     WshShell3_GetIDsOfNames,
191     WshShell3_Invoke,
192     WshShell3_get_SpecialFolders,
193     WshShell3_get_Environment,
194     WshShell3_Run,
195     WshShell3_Popup,
196     WshShell3_CreateShortcut,
197     WshShell3_ExpandEnvironmentStrings,
198     WshShell3_RegRead,
199     WshShell3_RegWrite,
200     WshShell3_RegDelete,
201     WshShell3_LogEvent,
202     WshShell3_AppActivate,
203     WshShell3_SendKeys
204 };
--- snip ---

Source:
http://source.winehq.org/git/wine.git/blob/bf0e3a58517147d8711a1a757fe4dcd2d40a068c:/dlls/wshom.ocx/wshom.idl#l256

--- snip ---
...
256     interface IWshShell3 : IWshShell2 {
257         [id(0x0bc4)]
258         HRESULT Exec(
259             [in] BSTR Command,
260             [out, retval] IWshExec** out_Exec);
261
262         [id(0x0bc5), propget]
263         HRESULT CurrentDirectory([out, retval] BSTR* out_Directory);
264
265         [id(0x0bc5), propput]
266         HRESULT CurrentDirectory([in] BSTR out_Directory);
267     };
--- snip ---

$ sha1sum AutoHotkey111903_Install.exe 
3a033b898ac9314fa2587a32e1d61e2ea9dbc6c5  AutoHotkey111903_Install.exe

$ du -sh AutoHotkey111903_Install.exe 
2.7M    AutoHotkey111903_Install.exe

$ wine --version
wine-1.7.38

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.