[Bug 46870] League of Legends 8.12+ fails to start a game in Vista+ mode ( anticheat engine, SystemExtendedProcessInformation)

[wine-bugs at winehq.org]

https://bugs.winehq.org/show_bug.cgi?id=46870

Zebediah Figura <z.figura12 at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
    Staged patchset|                            |https://github.com/wine-sta
                   |                            |ging/wine-staging/tree/mast
                   |                            |er/patches/ntdll-SystemExte
                   |                            |ndedProcessInformation
           Hardware|x86-64                      |x86
            Summary|League of Legends 9.6       |League of Legends 8.12+
                   |crashes at game start with  |fails to start a game in
                   |>4.2 wine                   |Vista+ mode (anticheat
                   |                            |engine,
                   |                            |SystemExtendedProcessInform
                   |                            |ation)
             Status|NEW                         |STAGED
          Component|-unknown                    |ntdll
           Keywords|                            |obfuscation

--- Comment #36 from Zebediah Figura <z.figura12 at gmail.com> ---
(In reply to Zebediah Figura from comment #35)
> (In reply to Olivier F. R. Dierick from comment #34)
> > I think the next step is to make a staging patchset out of the patch.
> 
> I'll do some testing and see which parts of that patch are necessary. Though
> given that NtQueryObject() changes break existing tests, we'll want rather
> to fix them the right way. That shouldn't be too hard, though.

As far as my testing shows, only the SystemExtendedProcessInformation stub is
necessary. I've added to Staging.

--- Comment #37 from Louis Lenders <xerox.xerox2000x at gmail.com> ---
(In reply to Zebediah Figura from comment #36)
> (In reply to Zebediah Figura from comment #35)
> > (In reply to Olivier F. R. Dierick from comment #34)
> > > I think the next step is to make a staging patchset out of the patch.
> > 
> > I'll do some testing and see which parts of that patch are necessary. Though
> > given that NtQueryObject() changes break existing tests, we'll want rather
> > to fix them the right way. That shouldn't be too hard, though.
> 
> As far as my testing shows, only the SystemExtendedProcessInformation stub
> is necessary. I've added to Staging.

just for the info: this page suggests  
https://processhacker.sourceforge.io/doc/ntexapi_8h_source.html:

 1261  SystemExtendedProcessInformation, // q: SYSTEM_PROCESS_INFORMATION

i checked yesterday that the following fixes the crash for me too:

@@ -2524,6 +2553,7 @@ NTSTATUS WINAPI NtQuerySystemInformation(
             else ret = STATUS_INFO_LENGTH_MISMATCH;
         }
         break;
+    case SystemExtendedProcessInformation:
     case SystemProcessInformation:
         {
             SYSTEM_PROCESS_INFORMATION* spi = SystemInformation;

No clue if it`s better/worse, just for the info

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.