[Bug 45820] New: Symantec Eraser Control Driver 'eeCtrl64.sys' (Norton 360 ) crashes on unimplemented function ntoskrnl.exe.ExpInterlocked{Push, Pop}EntrySList

wine-bugs at winehq.org wine-bugs at winehq.org
Wed Sep 12 15:26:45 CDT 2018


https://bugs.winehq.org/show_bug.cgi?id=45820

            Bug ID: 45820
           Summary: Symantec Eraser Control Driver 'eeCtrl64.sys' (Norton
                    360) crashes on unimplemented function
                    ntoskrnl.exe.ExpInterlocked{Push,Pop}EntrySList
           Product: Wine
           Version: 3.15
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: ntoskrnl
          Assignee: wine-bugs at winehq.org
          Reporter: focht at gmx.net
      Distribution: ---

Hello folks,

continuation of bug 45819

--- snip ---
$ WINEDEBUG=+seh,+relay,+ntoskrnl wineboot >>log.txt 2>&1
...
0016:Call ntoskrnl.exe.RtlInitUnicodeString(0033f460,0002e730 L"C:\\Program
Files (x86)\\Common Files\\Symantec Shared\\EENGINE\\EPERSIST.DAT")
ret=0047a48a
0016:Call ntdll.RtlInitUnicodeString(0033f460,0002e730 L"C:\\Program Files
(x86)\\Common Files\\Symantec Shared\\EENGINE\\EPERSIST.DAT") ret=7bcfe083
0016:Ret  ntdll.RtlInitUnicodeString() retval=0033f460 ret=7bcfe083
0016:Ret  ntoskrnl.exe.RtlInitUnicodeString() retval=0033f460 ret=0047a48a
0016:Call ntoskrnl.exe.ZwOpenKey(0033f440,00020019,0033f3a0) ret=0047ca8d
0016:Call ntdll.NtOpenKey(0033f440,00020019,0033f3a0) ret=7bcfe083
0016:Ret  ntdll.NtOpenKey() retval=00000000 ret=7bcfe083
0016:Ret  ntoskrnl.exe.ZwOpenKey() retval=00000000 ret=0047ca8d
0016:Call ntoskrnl.exe.RtlInitUnicodeString(0033f390,004665b8 L"Started")
ret=0047c9ee
0016:Call ntdll.RtlInitUnicodeString(0033f390,004665b8 L"Started") ret=7bcfe083
0016:Ret  ntdll.RtlInitUnicodeString() retval=0033f390 ret=7bcfe083
0016:Ret  ntoskrnl.exe.RtlInitUnicodeString() retval=0033f390 ret=0047c9ee
0016:Call ntoskrnl.exe.ZwOpenKey(0033f418,000f003f,0033f3a0) ret=0047ca8d
0016:Call ntdll.NtOpenKey(0033f418,000f003f,0033f3a0) ret=7bcfe083
0016:Ret  ntdll.NtOpenKey() retval=c0000034 ret=7bcfe083
0016:Ret  ntoskrnl.exe.ZwOpenKey() retval=c0000034 ret=0047ca8d
0016:Call ntoskrnl.exe.RtlInitUnicodeString(0033f490,004665b8 L"Started")
ret=00474bfe
0016:Call ntdll.RtlInitUnicodeString(0033f490,004665b8 L"Started") ret=7bcfe083
0016:Ret  ntdll.RtlInitUnicodeString() retval=0033f490 ret=7bcfe083
0016:Ret  ntoskrnl.exe.RtlInitUnicodeString() retval=0033f490 ret=00474bfe
0016:Call
ntoskrnl.exe.ZwCreateKey(0033f418,000f003f,0033f460,00000000,00000000,00000001,00000000)
ret=0047cb6c
0016:Call
ntdll.NtCreateKey(0033f418,000f003f,0033f460,00000000,00000000,00000001,00000000)
ret=7bcfe083
0016:Ret  ntdll.NtCreateKey() retval=00000000 ret=7bcfe083
0016:Ret  ntoskrnl.exe.ZwCreateKey() retval=00000000 ret=0047cb6c
0016:Call ntoskrnl.exe.ZwClose(00000040) ret=0047c926
0016:Call ntdll.NtClose(00000040) ret=7bcfe083
0016:Ret  ntdll.NtClose() retval=00000000 ret=7bcfe083
0016:Ret  ntoskrnl.exe.ZwClose() retval=00000000 ret=0047c926
0016:Call ntoskrnl.exe.ZwClose(0000003c) ret=0047c926
0016:Call ntdll.NtClose(0000003c) ret=7bcfe083
0016:Ret  ntdll.NtClose() retval=00000000 ret=7bcfe083
0016:Ret  ntoskrnl.exe.ZwClose() retval=00000000 ret=0047c926
0016:trace:seh:NtRaiseException code=80000100 flags=1 addr=0x7bcd00e7
ip=7bcd00e7 tid=0016
0016:trace:seh:NtRaiseException  info[0]=00000000004c6878
0016:trace:seh:NtRaiseException  info[1]=00000000004c67ac
wine: Call from 0x7bcd00e7 to unimplemented function
ntoskrnl.exe.ExpInterlockedPopEntrySList, aborting 
--- snip ---

'ntoskrnl.exe.ExpInterlockedPushEntrySList' is imported too, so it makes sense
to add both stubs here.

$ sha1sum N360-TW-21.1.0-EN.exe 
aa05ccf9668e166ef28923d451f1c2ecad6f75f1  N360-TW-21.1.0-EN.exe

$ du -sh N360-TW-21.1.0-EN.exe 
202M    N360-TW-21.1.0-EN.exe

$ wine --version
wine-3.15-150-gb29cdbd5f2

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.



More information about the wine-bugs mailing list