[Bug 49335] New: Dolphin EasyReader for Windows 6.04 (TTS app) crashes after completing startup wizard (needs IMarkupServices::CreateMarkupPointer method implementation)
WineHQ Bugzilla
wine-bugs at winehq.org
Sun Jun 7 05:06:23 CDT 2020
https://bugs.winehq.org/show_bug.cgi?id=49335
Bug ID: 49335
Summary: Dolphin EasyReader for Windows 6.04 (TTS app) crashes
after completing startup wizard (needs
IMarkupServices::CreateMarkupPointer method
implementation)
Product: Wine
Version: 5.10
Hardware: x86-64
OS: Linux
Status: NEW
Severity: normal
Priority: P2
Component: mshtml
Assignee: wine-bugs at winehq.org
Reporter: focht at gmx.net
Distribution: ---
Hello folks,
continuation of bug 49062
Download:
https://yourdolphin.com/downloads/product?demo=true&lid=1&pvid=9
https://web.archive.org/web/20200430183420/https://yourdolphin.com/downloads/product?demo=true&lid=1&pvid=9
Trace log:
--- snip ---
$ pwd
/home/focht/.wine/drive_c/Program Files (x86)/Dolphin/EasyReader604
$ WINEDEBUG=+seh,+relay,+mshtml,+ole,+variant wine ./Dolphin\ EasyReader.exe
>>log.txt 2>&1
...
0108:trace:variant:VariantClear (0031E58C {VT_BSTR: L"File open image"})
0108:Ret oleaut32.VariantClear() retval=00000000 ret=0072c55a
0108:trace:mshtml:HTMLBodyElement_createTextRange (01D6AB70)->(0031E5E8)
0108:Call msvcrt.malloc(00000038) ret=661c3003
0108:Call ntdll.RtlAllocateHeap(0bc00000,00000000,00000038) ret=7ba7e2f8
0108:Ret ntdll.RtlAllocateHeap() retval=0f2c8370 ret=7ba7e2f8
0108:Ret msvcrt.malloc() retval=0f2c8370 ret=661c3003
0108:Call KERNEL32.GetLastError() ret=6ca5ce9f
0108:Ret KERNEL32.GetLastError() retval=00000000 ret=6ca5ce9f
0108:Call ntdll.RtlAllocateHeap(00110000,00000000,0000002c) ret=0301707b
0108:Ret ntdll.RtlAllocateHeap() retval=0357b348 ret=0301707b
0108:trace:mshtml:HTMLTxtRange_moveToElementText (0357B348)->(03575A9C)
0108:fixme:mshtml:MarkupServices_CreateMarkupPointer (01DEC718)->(0031E588)
0108:fixme:mshtml:MarkupServices_CreateMarkupPointer (01DEC718)->(0031E57C)
0108:fixme:mshtml:MarkupServices_MovePointersToRange
(01DEC718)->(0357B358,00000000,00000000)
0108:trace:seh:raise_exception code=c0000005 flags=0 addr=0x72c669 ip=0072c669
tid=0108
0108:trace:seh:raise_exception info[0]=00000000
0108:trace:seh:raise_exception info[1]=00000000
0108:trace:seh:raise_exception eax=80004001 ebx=0031e458 ecx=0031e580
edx=00000000 esi=00000000 edi=0031e458
...
wine: Unhandled page fault on read access to 00000000 at address 0072C669
(thread 0108), starting debugger...
...
--- snip ---
Disassembly at crash site, annotated:
--- snip ---
...
0072C5D8 | mov dword ptr ss:[ebp-10C],0 |
0072C5E2 | mov dword ptr ss:[ebp-108],0 |
0072C5EC | mov dword ptr ss:[ebp-F8],0 |
0072C5F6 | mov dword ptr ss:[ebp-104],0 |
0072C600 | lea edx,dword ptr ss:[ebp-F8] |
0072C606 | push edx |
0072C607 | mov eax,dword ptr ss:[ebp-18] | IMarkupPointer *pPointerStart
0072C60A | mov ecx,dword ptr ds:[eax] |
0072C60C | mov edx,dword ptr ss:[ebp-18] |
0072C60F | push edx |
0072C610 | mov eax,dword ptr ds:[ecx+C] |
0072C613 | call eax ; IMarkupServices::CreateMarkupPointer()
0072C615 | lea ecx,dword ptr ss:[ebp-104] | IMarkupPointer *pPointerFinish
0072C61B | push ecx |
0072C61C | mov edx,dword ptr ss:[ebp-18] |
0072C61F | mov eax,dword ptr ds:[edx] |
0072C621 | mov ecx,dword ptr ss:[ebp-18] |
0072C624 | push ecx |
0072C625 | mov edx,dword ptr ds:[eax+C] |
0072C628 | call edx ; IMarkupServices::CreateMarkupPointer()
0072C62A | mov eax,dword ptr ss:[ebp-104] |
0072C630 | push eax | IMarkupPointer *pPointerFinish
0072C631 | mov ecx,dword ptr ss:[ebp-F8] |
0072C637 | push ecx | IMarkupPointer *pPointerStart
0072C638 | mov edx,dword ptr ss:[ebp-98] |
0072C63E | push edx | IHTMLTxtRange *pIRange
0072C63F | mov eax,dword ptr ss:[ebp-18] |
0072C642 | mov ecx,dword ptr ds:[eax] |
0072C644 | mov edx,dword ptr ss:[ebp-18] |
0072C647 | push edx |
0072C648 | mov eax,dword ptr ds:[ecx+4C] |
0072C64B | call eax ; IMarkupServices::MovePointersToRange()
0072C64D | mov dword ptr ss:[ebp-100],0 |
0072C657 | lea ecx,dword ptr ss:[ebp-100] |
0072C65D | push ecx |
0072C65E | push dolphin easyreader.8D98A8 |
0072C663 | mov edx,dword ptr ss:[ebp-F8] | IMarkupPointer *pPointerStart
0072C669 | mov eax,dword ptr ds:[edx] | *boom*
0072C66B | mov ecx,dword ptr ss:[ebp-F8] |
0072C671 | push ecx |
0072C672 | mov edx,dword ptr ds:[eax] |
0072C674 | call edx | IMarkupPointer::QueryInterface()
0072C676 | cmp dword ptr ss:[ebp-100],0 |
0072C67D | je dolphin easyreader.72C6C1 |
...
--- snip ---
Wine source:
https://source.winehq.org/git/wine.git/blob/3cc3b445752902e07231900befc296f74ad6576e:/dlls/mshtml/htmldoc.c#l4835
--- snip ---
4835 static HRESULT WINAPI MarkupServices_CreateMarkupPointer(IMarkupServices
*iface, IMarkupPointer **ppPointer)
4836 {
4837 HTMLDocument *This = impl_from_IMarkupServices(iface);
4838 FIXME("(%p)->(%p)\n", This, ppPointer);
4839 return E_NOTIMPL;
4840 }
--- snip ---
Microsoft docs:
*
https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/platform-apis/bb508514(v=vs.85)
("Introduction to Markup Services")
*
https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/platform-apis/aa703587(v=vs.85)
("IMarkupServices interface")
*
https://docs.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/platform-apis/aa703631(v=vs.85)
("IMarkupContainer interface")
$ sha1sum EasyReader_for_Windows_6.04_English_\(United_Kingdom\)_DEMO.exe
19d0911a8b05bb0966ce80e2c0e62c48cd039c2c
EasyReader_for_Windows_6.04_English_(United_Kingdom)_DEMO.exe
$ du -sh EasyReader_for_Windows_6.04_English_\(United_Kingdom\)_DEMO.exe
104M EasyReader_for_Windows_6.04_English_(United_Kingdom)_DEMO.exe
$ wine --version
wine-5.10
Regards
--
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.
More information about the wine-bugs
mailing list