[Bug 45699] Multiple applications crash on unimplemented function RPCRT4.dll.NdrClientCall3 (MS Office 2016 Pro Plus 64-bit/x64 installer, MS-MPI 10.x)

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=45699

Zebediah Figura <z.figura12 at gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |z.figura12 at gmail.com

--- Comment #7 from Zebediah Figura <z.figura12 at gmail.com> ---
So one of the nice things about NdrClientCall3() is that applications using it
can choose the MIDL "/protocol all" switch and generate both NDR and NDR64
format strings. Fortunately MS-MPI does this, so I've sent patches that just
hook up NdrClientCall3() and Ndr64AsyncClientCall().

Unfortunately, this isn't enough to make MS-MPI work. It crashes due to
use-after-free, because RPCRT4_process_packet() frees the stub message which
RpcAsyncCompleteCall() subsequently uses. I'd need to do more research to
figure out the right way to fix that.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.