[Bug 48895] New: Mario Forever 5.0 installer crashes on exit

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=48895

            Bug ID: 48895
           Summary: Mario Forever 5.0 installer crashes on exit
           Product: Wine
           Version: 5.5
          Hardware: x86-64
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: -unknown
          Assignee: wine-bugs at winehq.org
          Reporter: focht at gmx.net
      Distribution: ---

Hello folks,

while revisiting some old issues I figured out that bug 29832 was incorrectly
closed as fixed some years ago. Apparently people tested with the wrong game
release. Creating new ticket here to track original crash.

It's very important to test the exact version from initial bug report - every
time. From https://bugs.winehq.org/show_bug.cgi?id=29832#c0 backtrace:

--- snip ---
00000024 Mario Forever 5.0.exe
    00000025    0
00000026 (D) C:\users\vr\Temp\mrt5cd.tmp\stdrt.exe
    0000002b   15
    00000029    0
    00000028    0
    00000027    0 <==
--- snip ---

-> 'Mario Forever 5.0'

I've found a snapshot in Internet Archive:

https://web.archive.org/web/20111101054124/http://www.softendo.com/mario_games_4/Install_Mario_Forever_v5_0.exe

I could reproduce the crash with Wine 1.4 until today -> Wine 5.5+. Looks like
heap corruption in installer engine. Might look later into it.

--- snip ---
$ WINEDEBUG=+seh,+relay,+heap wine ./Install_Mario_Forever_v5_0.exe >>log.txt
2>&1
...
007d:Call KERNEL32.CreateProcessA(00000000,00ad4038
"\"C:\\users\\focht\\Temp\\mrt6e38.tmp\\stdrt.exe\" /SF \"C:\\Program Files
(x86)\\softendo.com\\Mario Forever 5.0\\Mario Forever 5.0.exe\"
/SO94208",00000000,00000000,00000001,00000020,00000000,00000000,0032fe64,0032fe38)
ret=004016b4 
...
007d:Ret  KERNEL32.CreateProcessA() retval=00000001 ret=004016b4 
...
007f:Call ntdll.RtlAllocateHeap(024d0000,00000000,00000090) ret=103136e9
007f:trace:heap:RtlAllocateHeap (0x24d0000,70000062,00000090): returning
0x24ee378
007f:Ret  ntdll.RtlAllocateHeap() retval=024ee378 ret=103136e9
007f:Call ntdll.RtlAllocateHeap(024d0000,00000000,00000060) ret=103136e9
007f:err:heap:HEAP_ValidateInUseArena Heap 0x24d0000: block 0x24ee378 tail
overwritten at 0x24ee408 (byte 0/8 == 0x20)
007f:trace:heap:HEAP_Dump Heap: 0x24d0000
007f:trace:heap:HEAP_Dump Next: 0x1970000  Sub-heaps: 0x24d0014 
...
am Files (x86)\softendo.com\Mario Forever 5.0\Mario Forever 5.0.exe:
/home/focht/projects/wine/mainline-src/dlls/ntdll/heap.c:465: HEAP_GetPtr:
Assertion `FALSE' failed.
007f:trace:seh:raise_exception code=80000101 flags=1 addr=0xf7fee949
ip=f7fee949 tid=007f
007f:trace:seh:raise_exception  eax=00000000 ebx=00000002 ecx=0032f83c
edx=00000000 esi=00000008 edi=00000000
007f:trace:seh:raise_exception  ebp=0032f83c esp=0032f820 cs=0023 ds=002b
es=002b fs=0063 gs=006b flags=00000282
007f:trace:seh:call_stack_handlers calling handler at 0x10318d20 code=80000101
flags=1
007f:trace:seh:call_stack_handlers handler at 0x10318d20 returned 1
007f:trace:seh:call_stack_handlers calling handler at 0x44b29a code=80000101
flags=1
...
wine: Assertion failed at address F7FEE949 (thread 007f), starting debugger... 
...
0085:Call user32.SetDlgItemTextW(000400a6,00000065,0032eee0 L"The program
stdrt.exe has encountered a serious problem and needs to close. We are sorry
for the inconvenience.") ret=7e9c76c3 
--- snip ---

$ sha1sum Install_Mario_Forever_v5_0.exe 
af961a2a63f1380731c0f9cb7dc8a0e1447b1618  Install_Mario_Forever_v5_0.exe

$ du -sh Install_Mario_Forever_v5_0.exe 
17M    Install_Mario_Forever_v5_0.exe

$ wine --version
wine-5.5-325-gca092dcf81

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.