[Bug 34527] DAEMON Tools Ultra 1.1.0 installer crashes on exit, after clicking 'close' button

[WineHQ Bugzilla]

https://bugs.winehq.org/show_bug.cgi?id=34527

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                URL|https://docs.google.com/fil |https://archive.org/details
                   |e/d/0B-XzBtfOCMPRd3VIcHNHSX |/daemontools-ultra-110-0103
                   |VNQzA                       |
            Summary|DAEMON Tools Ultra 1.1.0    |DAEMON Tools Ultra 1.1.0
                   |fails to install            |installer crashes on exit,
                   |                            |after clicking 'close'
                   |                            |button

--- Comment #18 from Anastasius Focht <focht at gmx.net> ---
Hello Rafał,

--- quote ---
Link expired and I can't find this version on internet
--- quote ---

indeed, it was hard to find something. After visiting a lot of broken links I
found one old torrent still being seeded which contained
'DAEMONToolsUltra110-0103.exe' along with a binary "patch".

Downloaded and re-uploaded 'DAEMONToolsUltra110-0103.exe' to archive.org

https://archive.org/details/daemontools-ultra-110-0103

The checksum matches with the one from the comments here so this doesn't seem
an altered version. Sometimes torrents are (re)seeded with altered executables
containing malware bootstrappers/payloads.

A crash is still present with recent Wine.

--- snip ---
$ WINEDEBUG=+seh,+relay,+win,+msg wine ./DAEMONToolsUltra110-0103.exe >>log.txt
2>&1
...
00bc:Call KERNEL32.LoadLibraryExW(0040e0b0
L"C:\\users\\focht\\Temp\\nsk7810.tmp\\setuphlp.dll",00000000,00000008)
ret=0040218b 
...
00bc:Ret  KERNEL32.LoadLibraryExW() retval=01b00000 ret=0040218b 
...
00bc:Call KERNEL32.GetProcAddress(01b00000,0244ce10 "WelcomePageInit")
ret=00405d95
00bc:Ret  KERNEL32.GetProcAddress() retval=01b39429 ret=00405d95
...
00bc:Call user32.SetWindowLongW(00010076,fffffffc,01b39411) ret=01b39440
00bc:trace:win:WIN_SetWindowLong 0x10076 -4 1b39411 W
00bc:trace:win:alloc_winproc allocated 0xffff002b for W 0x1b39411 (44/4096
used)
00bc:Ret  user32.SetWindowLongW() retval=7e9561a0 ret=01b39440 
...
00bc:Call KERNEL32.FreeLibrary(01b00000) ret=00402205
00bc:Call ntdll.LdrUnloadDll(01b00000) ret=7b019baf
00bc:Call PE DLL (proc=0x1c47560,module=0x1b00000
L"setuphlp.dll",reason=PROCESS_DETACH,res=(nil)) 
...
00bc:Ret  KERNEL32.FreeLibrary() retval=00000001 ret=00402205
...
00bc:Call user32.DestroyWindow(000300ba) ret=004054ec
00bc:Ret  user32.DestroyWindow() retval=00000000 ret=004054ec
00bc:Call user32.EndDialog(00010076,00000000) ret=004054ff
00bc:trace:win:SetFocus 0x10076 prev 0x10080
00bc:Call window proc 0xa04840
(hwnd=0x10080,msg=WM_KILLFOCUS,wp=00010076,lp=00000000)
00bc:Call user32.GetWindowLongW(00010080,00000000) ret=00a04857
00bc:Ret  user32.GetWindowLongW() retval=02408850 ret=00a04857
00bc:Call user32.GetWindowLongW(00010080,fffffff0) ret=00a04861
00bc:Ret  user32.GetWindowLongW() retval=50010001 ret=00a04861
00bc:Call user32.IsWindow(00010080) ret=00a04869
00bc:Ret  user32.IsWindow() retval=00000001 ret=00a04869
00bc:Call user32.InvalidateRect(00010080,00000000,00000000) ret=00a05368
00bc:trace:win:RedrawWindow 0x10080 whole window flags: RDW_INVALIDATE
00bc:Ret  user32.InvalidateRect() retval=00000001 ret=00a05368
00bc:Ret  window proc 0xa04840
(hwnd=0x10080,msg=WM_KILLFOCUS,wp=00010076,lp=00000000) retval=00000000
00bc:Call winex11.drv.SetFocus(00010076) ret=7e96a0d4
00bc:Ret  winex11.drv.SetFocus() retval=00000000 ret=7e96a0d4
00bc:Call window proc 0x1b39411
(hwnd=0x10076,msg=WM_SETFOCUS,wp=00010080,lp=00000000)
00bc:trace:seh:KiUserExceptionDispatcher code=c0000005 flags=0 addr=0x1b39411
ip=01b39411 tid=00bc
00bc:trace:seh:KiUserExceptionDispatcher  info[0]=00000000
00bc:trace:seh:KiUserExceptionDispatcher  info[1]=01b39411
00bc:trace:seh:KiUserExceptionDispatcher  eax=01b39411 ebx=00010076
ecx=00000012 edx=00000012 esi=0031ede8 edi=00000000
00bc:trace:seh:KiUserExceptionDispatcher  ebp=0031ed18 esp=0031ecec cs=0023
ds=002b es=002b fs=0063 gs=006b flags=00210206
00bc:trace:seh:call_vectored_handlers calling handler at 0x7b637a90
code=c0000005 flags=0
00bc:trace:seh:call_vectored_handlers handler at 0x7b637a90 returned 0
00bc:trace:seh:call_stack_handlers calling handler at 0x7b657ac0 code=c0000005
flags=0
00bc:Call ntdll.NtCreateEvent(0031e888,001f0003,0031e800,00000000,00000000)
ret=7b00ef07
00bc:Ret  ntdll.NtCreateEvent() retval=00000000 ret=7b00ef07
wine: Unhandled page fault on read access to 01B39411 at address 01B39411
(thread 00bc), starting debugger... 
--- snip ---

Some dialog window proc gets called after the dll was already unloaded, causing
a crash. Maybe I'll have deeper look later if no one wants to take it ;-)

$ sha1sum DAEMONToolsUltra110-0103.exe 
2bcf13a9d3761af6896edc1f81394f4a8b46783b  DAEMONToolsUltra110-0103.exe

$ du -sh DAEMONToolsUltra110-0103.exe 
24M    DAEMONToolsUltra110-0103.exe

$ wine --version
wine-5.11-111-g1f6423f778

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.