[Bug 44500] BattlEye 'BEDaisy' kernel service crashes on unimplemented fltmgr.sys functions ( FltRegisterFilter, FltStartFiltering, FltUnregisterFilter)
wine-bugs at winehq.org
wine-bugs at winehq.org
Wed Apr 4 16:22:48 CDT 2018
https://bugs.winehq.org/show_bug.cgi?id=44500
Anastasius Focht <focht at gmx.net> changed:
What |Removed |Added
----------------------------------------------------------------------------
Fixed by SHA1| |c248b6cfb124258145d318ff4dc
| |efa39e62e6a14
Status|STAGED |RESOLVED
Resolution|--- |FIXED
--- Comment #1 from Anastasius Focht <focht at gmx.net> ---
Hello folks,
the stubs have been committed:
*
https://source.winehq.org/git/wine.git/commitdiff/b2ebe2834fb5a87df095008c66ef713a5bf2b2f9
("fltmgr.sys: Add FltRegisterFilter stub.")
*
https://source.winehq.org/git/wine.git/commitdiff/f3a2bb1b10adb8577a2f753ab3d39e7c358d3f85
("fltmgr.sys: Add FltStartFiltering stub.")
*
https://source.winehq.org/git/wine.git/commitdiff/c248b6cfb124258145d318ff4dcefa39e62e6a14
("fltmgr.sys: Add FltUnregisterFilter stub.")
Thanks Alistair
It seems the author of the BattlEye driver is actively working on it, adding
new API dependencies/imports every week ;-)
There is now an additional one:
--- snip ---
$ WINEDEBUG=+seh,+relay,+ntoskrnl wine net start BEDaisy >>log.txt 2>&1
...
0035:Call ntoskrnl.exe.MmGetSystemRoutineAddress(0065ecac) ret=008560ad
...
0035:Call KERNEL32.GetProcAddress(7ec00000,0011d528 "IoDriverObjectType")
ret=7ec18587
0035:Ret KERNEL32.GetProcAddress() retval=7ec0700c ret=7ec18587
...
0035:trace:ntoskrnl:MmGetSystemRoutineAddress L"IoDriverObjectType" ->
0x7ec0700c
...
0035:Ret ntoskrnl.exe.MmGetSystemRoutineAddress() retval=7ec0700c ret=008560ad
...
0035:Call KERNEL32.RaiseException(80000100,00000001,00000002,0065eb78)
ret=f7dd1b0f
0035:trace:seh:raise_exception code=80000100 flags=1 addr=0x7b446c33
ip=7b446c33 tid=0035
0035:trace:seh:raise_exception info[0]=f7dd1b28
0035:trace:seh:raise_exception info[1]=f7dd228b
wine: Call from 0x7b446c33 to unimplemented function
fltmgr.sys.FltGetRoutineAddress, aborting
--- snip ---
I will create another ticket for that because it was an older version of the
driver to reproduce with.
Regards
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
More information about the wine-bugs
mailing list