[Bug 41553] IETester 0.4.2 crashes with unimplemented function msls31.dll.LsdnQueryPenNode

WineHQ Bugzilla wine-bugs at winehq.org
Fri Nov 1 03:30:35 CDT 2019 

https://bugs.winehq.org/show_bug.cgi?id=41553

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |focht at gmx.net
           See Also|                            |https://bugs.winehq.org/sho
                   |                            |w_bug.cgi?id=32335
                URL|http://www.my-debugbar.com/ |https://web.archive.org/web
                   |ietester/install-ietester-v |/20100106063928/http://www.
                   |0.4.2.exe                   |my-debugbar.com/ietester/in
                   |                            |stall-ietester-v0.4.2.exe

--- Comment #2 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

from https://bugs.winehq.org/show_bug.cgi?id=34061#c6 - it applies here as
well.

Replaced URL with stable link from Internet Archive/Wayback machine in case the
original site goes down.

Copying my comment https://bugs.winehq.org/show_bug.cgi?id=32335#c15 for
reference here:

--- quote ---
Microsoft Line Services is an undocumented component/API for internal use with
certain Microsoft components. An area Wine certainly won't touch.

There is a supplementary document from the COMES v. MICROSOFT CORPORATION
anti-trust class action lawsuit by the State of Iowa which provides some
background information on this API (among others):

http://www.groklaw.net/pdf/Supp_Rpt_Andrew_Schulman.pdf (No. CL82311)

(https://web.archive.org/web/20180624102256/http://www.groklaw.net/pdf/Supp_Rpt_Andrew_Schulman.pdf)

The interesting sections:

--- quote ---
...

SUPPLEMENTAL EXPERT REPORT OF ANDREW SCHULMAN December 19, 2006 

...

2.The source code for Windows XP and Microsoft Office provide additional bases
for opinion #20 in my earlier report (“Microsoft Office and other Microsoft
applications use undocumented Windows Line Services APIs”).

a.There is substantial overlap (when measured by comparing MD5 hashes of entire
sources files) between Microsoft Line Services (MSLS) source code residing in
the Office source tree and that residing in the Windows source code. See the
following directory trees: 

...

b.That MSLS was intended as a robust API is shown in the source code by the use
of signatures such as “LSC:” (identified on page 28 of my earlier report) for
parameter validation. 

...

That MSLS is intended for use beyond Microsoft Office is shown by a “Line
Services Component Description” that “This component is required by Microsoft
Internet Explorer and the Microsoft Rich Edit text control for line layout”: 

On Dec. 8, 2006, a search at the MSDN web site for names of MSLS APIs such as
“LsCreateSubline” and “LsCreateLine” (along with hypothetical variants such as
“CreateSubline” or “MslsCreateSubline”) turned up no documentation.

Msls2.dll and msls31.dll are included with Windows Vista; version 7 of
mshtml.dll included with Windows Vista RC1 imports approximately 40 APIs from
msls31.dll; it is also used by msftedit.all and riched20.dll. 
--- quote ---

===

Finding the dlls that import this API:

--- snip ---
$ grep -ralZi msls31 .wine/drive_c/ | xargs -r0i bash -c "echo \"{}\" &&
winedump -j import \"{}\" | sed -n '/[Mm][Ss][Ll][Ss]31.[Dd][Ll][Ll]/,/^$/p'"

Done dumping .wine/drive_c/windows/system32/msls31.dll
.wine/drive_c/Program Files (x86)/Core Services/IETester/5shtml.dll
.wine/drive_c/Program Files (x86)/Core Services/IETester/8shtml.dll
  offset 005284c4 msls31.dll
  Hint/Name Table: 00529DBC
  TimeDateStamp:   00000000 (Thu Jan  1 01:00:00 1970)
  ForwarderChain:  00000000
  First thunk RVA: 00001C20
   Thunk    Ordn  Name
  00001c20    75  <by ordinal>
  00001c24    27  <by ordinal>
  00001c28    41  <by ordinal>
...
  00001cb4    71  <by ordinal>
  00001cb8    40  <by ordinal>
  00001cbc     1  <by ordinal>

.wine/drive_c/Program Files (x86)/Core Services/IETester/7shtml.dll
  offset 00300308 msls31.dll
  Hint/Name Table: 00301A9C
  TimeDateStamp:   00000000 (Thu Jan  1 01:00:00 1970)
  ForwarderChain:  00000000
  First thunk RVA: 00001AB4
   Thunk    Ordn  Name
  00001ab4    40  <by ordinal>
  00001ab8    17  <by ordinal>
  00001abc    19  <by ordinal>
...
  00001b44    12  <by ordinal>
  00001b48    13  <by ordinal>
  00001b4c    14  <by ordinal>
  00001b50    79  <by ordinal>

.wine/drive_c/Program Files (x86)/Core Services/IETester/6shtml.dll
  offset 002a0254 msls31.dll
  Hint/Name Table: 002A131C
  TimeDateStamp:   00000000 (Thu Jan  1 01:00:00 1970)
  ForwarderChain:  00000000
  First thunk RVA: 000013B0
   Thunk    Ordn  Name
  000013b0    16  <by ordinal>
  000013b4    20  <by ordinal>
...
  00001444    44  <by ordinal>
  00001448    75  <by ordinal>
  0000144c    40  <by ordinal>
--- snip ---

These files are in fact copies of native Microsoft dlls.

--- snip ---
-=[ ProtectionID v0.6.9.0 DECEMBER]=-
(c) 2003-2017 CDKiLLER & TippeX
Build 24/12/17-21:05:42
Ready...
Scanning -> C:\Program Files (x86)\Core Services\IETester\8shtml.dll
File Type : 32-Bit Dll (Subsystem : Win GUI / 2), Size : 5937152 (05A9800h)
Byte(s) | Machine: 0x14C (I386)
Compilation TimeStamp : 0x49B3AEB3 -> Sun 08th Mar 2009 11:40:35 (GMT)
[TimeStamp] 0x49B3AEB3 -> Sun 08th Mar 2009 11:40:35 (GMT) | PE Header | - |
Offset: 0x000000F8 | VA: 0x635800F8 | -
[TimeStamp] 0x49B3AEB3 -> Sun 08th Mar 2009 11:40:35 (GMT) | Export | - |
Offset: 0x0005F900 | VA: 0x635E0500 | -
[TimeStamp] 0x49B3AEB3 -> Sun 08th Mar 2009 11:40:35 (GMT) | DebugDirectory | -
| Offset: 0x0052C250 | VA: 0x63AACE50 | -
[TimeStamp] 0x49B3AEB3 -> Sun 08th Mar 2009 11:40:35 (GMT) | DebugDirectory | -
| Offset: 0x0052C26C | VA: 0x63AACE6C | -
[LoadConfig] Struct determined as v8 (Expected size 140 | Actual size 64)
[!] Executable uses SEH Tables (/SAFESEH) (809 calculated 2 recorded... 778
invalid addresses) 
[!]    * table may be compressed / encrypted *
[LoadConfig] CodeIntegrity -> Flags 0x8508 | Catalog 0x7CC0 (31936) | Catalog
Offset 0x16F8832E | Reserved 0x4D8B2973
[LoadConfig] GuardAddressTakenIatEntryTable 0x8B575610 | Count 0xE0C10C7D
(3770748029)
[LoadConfig] GuardLongJumpTargetTable 0x18B08B03 | Count 0xA5635900
(2774751488)
[LoadConfig] HybridMetadataPointer 0x8BA5A5A5 | DynamicValueRelocTable
0x59001C80
[LoadConfig] FailFastIndirectProc 0x8B018963 | FailFastPointer 0x51FF5008
[LoadConfig] UnknownZero1 0xC0335F04
[File Heuristics] -> Flag #1 : 00000100000001001001000100000000 (0x04049100)
[Entrypoint Section Entropy] : 6.65 (section #0) ".text   " | Size : 0x52BEAB
(5422763) byte(s)
[DllCharacteristics] -> Flag : (0x0140) -> ASLR | DEP
[SectionCount] 4 (0x4) | ImageSize 0x5AC000 (5947392) byte(s)
[Export] 100% of function(s) (20 of 20) are in file | 0 are forwarded | 20 code
| 0 data | 0 uninit data | 0 unknown | 
[VersionInfo] Company Name : Microsoft Corporation
[VersionInfo] Product Name : Windows® Internet Explorer
[VersionInfo] Product Version : 8.00.6001.18702
[VersionInfo] File Description : Microsoft (R) HTML Viewer
[VersionInfo] File Version : 8.00.6001.18702
(longhorn_ie8_rtm(wmbla).090308-0339)
[VersionInfo] Original FileName : MSHTML.DLL
[VersionInfo] Internal Name : MSHTML
[VersionInfo] Legal Copyrights : © Microsoft Corporation. All rights reserved.
[ModuleReport] [IAT] Modules -> msvcrt.dll | GDI32.dll | KERNEL32.dll |
USER32.dll | ADVAPI32.dll | ole32.dll | 8ertutil.dll | 8hlwapi.dll | msls31.dll
| OLEAUT32.dll | VERSION.dll
[ModuleReport] [DelayImport] Modules -> gdiplus.dll | 8eframe.dll | 8rlmon.dll
| COMCTL32.dll | COMDLG32.dll | hlink.dll | 8mgutil.dll | MPR.dll |
8srating.dll | SHELL32.dll | UxTheme.dll | USP10.dll | PSAPI.DLL | 8ininet.dll
| XmlLite.dll | WS2_32.dll | IPHLPAPI.DLL | CRYPT32.dll
[Debug Info] (record 1 of 2) (file offset 0x52C24C)
Characteristics : 0x0 | TimeDateStamp : 0x49B3AEB3 (Sun 08th Mar 2009 11:40:35
(GMT)) | MajorVer : 0 / MinorVer : 0 -> (0.0)
Type : 2 (0x2) -> CodeView | Size : 0x23 (35) 
AddressOfRawData : 0x52CE88 | PointerToRawData : 0x52C288
CvSig : 0x53445352 | SigGuid ED5A6B67-9BD6-40A0-90E0A92342B253D2
Age : 0x2 (2) | Pdb : mshtml.pdb
[Debug Info] (record 2 of 2) (file offset 0x52C268)
Characteristics : 0x0 | TimeDateStamp : 0x49B3AEB3 (Sun 08th Mar 2009 11:40:35
(GMT)) | MajorVer : 555 / MinorVer : 4318 -> (555.4318)
Type : 10 (0xA) -> Reserved10 | Size : 0x4 (4) 
AddressOfRawData : 0x52CE84 | PointerToRawData : 0x52C284
[!] File appears to have no protection or is using an unknown protection
- Scan Took : 1.855 Second(s) [000000479h (1145) tick(s)] [246 of 580 scan(s)
done]
--- snip ---

I doubt it is legal to redistribute/repackage all these files from MS Windows
OS/IE installations with an app hence validity/usefulness of the ticket is
rather questionable (see bug 32335 resolution).

$ wine --version
wine-4.18-275-gccec532879

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.

More information about the wine-bugs mailing list