[Bug 35367] Multiple applications crash due to Wine ole32 code not taking implicit MTA into account (Cyberlink Powerdirector 8, PDFXChange Editor 5.5)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=35367

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|http://cyberlink-powerdirec |http://www.tracker-software
                   |tor.soft32.com/download/fil |.com/product/pdf-xchange-ed
                   |e/id/485879/                |itor/download

--- Comment #3 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

revisiting, still present.

Changing download link to PDF-XChange Editor Version 5.5.x since Cyberlink
mirror removed old v8.

--- snip ---
-=[ ProtectionID v0.6.6.7 DECEMBER]=-
(c) 2003-2015 CDKiLLER & TippeX
Build 24/12/14-22:48:13
Ready...
Scanning -> C:\Program Files\Tracker Software\PDF Editor\PDFXEdit.exe
File Type : 32-Bit Exe (Subsystem : Win GUI / 2), Size : 392760 (05FE38h)
Byte(s)
Compilation TimeStamp : 0x55F093ED -> Wed 09th Sep 2015 20:17:49 (GMT)
[TimeStamp] 0x55F093ED -> Wed 09th Sep 2015 20:17:49 (GMT) | PE Header | - |
Offset: 0x00000100 | VA: 0x00400100 | -
[TimeStamp] 0x55F093ED -> Wed 09th Sep 2015 20:17:49 (GMT) | DebugDirectory | -
| Offset: 0x00016EA4 | VA: 0x004182A4 | -
[TimeStamp] 0x55F093ED -> Wed 09th Sep 2015 20:17:49 (GMT) | DebugDirectory | -
| Offset: 0x00016EC0 | VA: 0x004182C0 | -
-> File Appears to be Digitally Signed @ Offset 05E000h, size : 01E38h / 07736
byte(s)
[!] Executable uses SEH Tables (/SAFESEH) (9 calculated 9 recorded... 0 invalid
addresses) 
[File Heuristics] -> Flag #1 : 00000100000001001101000000000100 (0x0404D004)
[Entrypoint Section Entropy] : 6.63 (section #0) ".text   " | Size : 0x1668D
(91789) byte(s)
[DllCharacteristics] -> Flag : (0x8140) -> ASLR | DEP | TSA
[SectionCount] 5 (0x5) | ImageSize 0x63000 (405504) byte(s)
[VersionInfo] Company Name : Tracker Software Products (Canada) Ltd.
[VersionInfo] Product Name : PDF-XChange Editor
[VersionInfo] Product Version : 5.5
[VersionInfo] File Description : PDF-XChange Editor
[VersionInfo] File Version : 5.5.0315.0000
[VersionInfo] Original FileName : PDFXEditor.exe
[VersionInfo] Internal Name : PDFXEditor
[VersionInfo] Version Comments : PDF-XChange Editor
[VersionInfo] Legal Trademarks : Tracker Software Products (Canada) Ltd.
[VersionInfo] Legal Copyrights : Copyright (C) 2001-2015 by Tracker Software
Products (Canada) Ltd.
[Debug Info] (record 1 of 2) (file offset 0x16EA0)
Characteristics : 0x0 | TimeDateStamp : 0x55F093ED (Wed 09th Sep 2015 20:17:49
(GMT)) | MajorVer : 0 / MinorVer : 0 -> (0.0)
Type : 2 (0x2) -> CodeView | Size : 0x5C (92) 
AddressOfRawData : 0x1E580 | PointerToRawData : 0x1D180
CvSig : 0x53445352 | SigGuid C8B09E8C-3DBB-4F86-B097F3650B554140
Age : 0x1 | Pdb :
F:\Development\PDF5\builds\RC.315\_build\Release.Win32\PDFXEdit.pdb
[Debug Info] (record 2 of 2) (file offset 0x16EBC)
Characteristics : 0x0 | TimeDateStamp : 0x55F093ED (Wed 09th Sep 2015 20:17:49
(GMT)) | MajorVer : 0 / MinorVer : 0 -> (0.0)
Type : 12 (0xC) -> Undocumented | Size : 0x14 (20) 
AddressOfRawData : 0x1E5DC | PointerToRawData : 0x1D1DC
[CompilerDetect] -> Visual C++ 12.0 (Visual Studio 2012)
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 0.473 Second(s) [0000001D9h (473) tick(s)] [499 of 573 scan(s)
done]
--- snip ---

$ sha1sum PDFXVE5.x86.msi 
b91eed002ed09f104661244515a8acfeedd39b96  PDFXVE5.x86.msi

$ du -sh PDFXVE5.x86.msi 
42M    PDFXVE5.x86.msi

$ wine --version
wine-1.7.54-179-ga0d0d0d

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.