[Bug 49088] Acronis Storage Filter Management Driver 'fltsrv.sys' crashes on unimplemented function 'ntoskrnl.exe.IoIs32bitProcess'

WineHQ Bugzilla wine-bugs at winehq.org
Mon May 4 17:37:17 CDT 2020 

https://bugs.winehq.org/show_bug.cgi?id=49088

Anastasius Focht <focht at gmx.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED
      Fixed by SHA1|                            |0e09d5ea74d1c4a2b780c27a66b
                   |                            |227e7a406d9d9

--- Comment #1 from Anastasius Focht <focht at gmx.net> ---
Hello folks,

this is fixed by commit
https://source.winehq.org/git/wine.git/commitdiff/0e09d5ea74d1c4a2b780c27a66b227e7a406d9d9
("ntoskrnl.exe: Implement IoIs32bitProcess().")

Thanks Zebediah

--- snip ---
$ WINEDEBUG=+seh,+relay,+ntoskrnl,+module,+virtual,+msi wine
./ADD12_trial_en-US.exe >>log.txt 2>&1
...
0254:trace:ntoskrnl:load_driver loading driver
L"C:\\windows\\system32\\drivers\\fltsrv.sys" 
...
0254:trace:module:load_dll Loaded module
L"\\??\\C:\\windows\\system32\\drivers\\fltsrv.sys" at 0xe10000 
...
0254:trace:ntoskrnl:perform_relocations relocating from
0000000140000000-0000000140025000 to 0000000000E10000-0000000000E35000 
...
0254:Call driver init 0000000000E32000
(obj=00000000000FD2B0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\fltsrv") 
...
0254:Call
ntoskrnl.exe.PsCreateSystemThread(00cef460,001fffff,00000000,00000000,00000000,00e23858,009acf40)
ret=00e2371e
0254:Call
ntdll.RtlCreateUserThread(ffffffffffffffff,00000000,00000000,00000000,00000000,00000000,00e23858,009acf40,00cef460,00000000)
ret=002333fb 
...
0254:Ret  ntdll.RtlCreateUserThread() retval=00000000 ret=002333fb
0254:Ret  ntoskrnl.exe.PsCreateSystemThread() retval=00000000 ret=00e2371e
0254:Call
ntoskrnl.exe.ObReferenceObjectByHandle(00000044,001fffff,00000000,00000000,009ad088,00000000)
ret=00e237be
0254:trace:ntoskrnl:ObReferenceObjectByHandle 0000000000000044 1fffff
0000000000000000 0 00000000009AD088 0000000000000000 
...
0254:trace:ntoskrnl:IoCreateSymbolicLink L"\\??\\StorageFilterControl2227" ->
L"\\Device\\00000002" 
...
0254:trace:ntoskrnl:IoCreateSymbolicLink L"\\??\\StorageFilterControl" ->
L"\\Device\\00000002" 
...
0254:trace:ntoskrnl:ObReferenceObjectByName mostly-stub:L"\\Driver\\fltsrv" 64
0000000000000000 0 00000000002570D0 0 0000000000000000 0000000000CEF658
0254:fixme:ntoskrnl:ObReferenceObjectByName Unhandled ObjectType 
...
0254:Ret  driver init 0000000000E32000
(obj=00000000000FD2B0,str=L"\\Registry\\Machine\\System\\CurrentControlSet\\Services\\fltsrv")
retval=00000000 
...
0234:Call KERNEL32.CreateFileA(01c96a00
"\\\\.\\Global\\StorageFilterControl",c0000000,00000003,00000000,00000003,00000000,00000000)
ret=020426f3 
...
0234:Ret  KERNEL32.CreateFileA() retval=000000ac ret=020426f3
...
0234:Call
KERNEL32.DeviceIoControl(000000ac,8021240b,0220f560,00000018,00000000,00000000,0220f598,00000000)
ret=02042610
0258:trace:ntoskrnl:dispatch_create device 00000000007FD650 -> file
00000000000FD640
0258:trace:ntoskrnl:IoGetAttachedDevice (00000000007FD650)
0258:trace:ntoskrnl:IoAllocateIrp 1, 0
...
0258:trace:ntoskrnl:IoInitializeIrp 00000000009AD2B0, 280, 1 
...
0258:Call driver dispatch 0000000000E1BCF4
(device=00000000007FD650,irp=00000000009AD2B0)
...
0258:Call ntoskrnl.exe.IoGetCurrentProcess() ret=00e1cb6c
0258:Ret  ntoskrnl.exe.IoGetCurrentProcess() retval=007fd390 ret=00e1cb6c
...
0258:Call ntoskrnl.exe.IoGetRequestorProcess(009ad2b0) ret=00e1cbf9
0258:trace:ntoskrnl:IoGetRequestorProcess irp 00000000009AD2B0.
0258:Ret  ntoskrnl.exe.IoGetRequestorProcess() retval=007fd390 ret=00e1cbf9
0258:Call ntoskrnl.exe.IoIs32bitProcess(009ad2b0) ret=00e1cc07
0258:trace:ntoskrnl:IoIs32bitProcess irp 00000000009AD2B0.
0258:Ret  ntoskrnl.exe.IoIs32bitProcess() retval=007fd300 ret=00e1cc07
...
0258:Call ntoskrnl.exe.MmGetSystemRoutineAddress(00dff890) ret=00e2643b
...
0258:Call KERNEL32.GetProcAddress(00220000,000fc070
"KeExpandKernelStackAndCalloutEx") ret=0023380f
0258:Ret  KERNEL32.GetProcAddress() retval=00225d3c ret=0023380f
...
0258:trace:ntoskrnl:MmGetSystemRoutineAddress
L"KeExpandKernelStackAndCalloutEx" -> 0000000000225D3C
0258:Ret  ntoskrnl.exe.MmGetSystemRoutineAddress() retval=00225d3c ret=00e2643b
...
0258:Call
ntoskrnl.exe.KeExpandKernelStackAndCalloutEx(00e1eaf8,00dff8f0,00002000,00dfef01,00000000)
ret=00e1e158
0258:warn:ntoskrnl:KeExpandKernelStackAndCalloutEx (0000000000E1EAF8
0000000000DFF8F0 8192 1 0000000000000000) semi-stub: ignoring stack expand
0258:Call ntoskrnl.exe.IofCompleteRequest(009ad2b0,00000001) ret=00e1cf15
0258:trace:ntoskrnl:IofCompleteRequest 00000000009AD2B0 1
0258:trace:ntoskrnl:IoCompleteRequest 00000000009AD2B0 1
0258:trace:ntoskrnl:IoCompleteRequest calling 0000000000236470(
00000000007FD650, 00000000009AD2B0, 0000000000000058 )
0258:trace:ntoskrnl:IoCompleteRequest CompletionRoutine returned 0
0258:trace:ntoskrnl:IoFreeIrp 00000000009AD2B0
...
0258:Ret  ntoskrnl.exe.IofCompleteRequest() retval=00000001 ret=00e1cf15
...
0258:Ret  ntoskrnl.exe.KeExpandKernelStackAndCalloutEx() retval=00000000
ret=00e1e158
...
0258:Ret  driver dispatch 0000000000E1BCF4
(device=00000000007FD650,irp=00000000009AD2B0) retval=00000000
0258:Call
ntoskrnl.exe.KeExpandKernelStackAndCalloutEx(00e1eaf8,00dff8c0,00002000,00dff001,00000000)
ret=00e1e158
0258:warn:ntoskrnl:KeExpandKernelStackAndCalloutEx (0000000000E1EAF8
0000000000DFF8C0 8192 1 0000000000000000) semi-stub: ignoring stack expand
0258:Call ntoskrnl.exe.ProbeForRead(000fc070,00000018,00000001) ret=00e26845
0258:fixme:ntoskrnl:ProbeForRead (00000000000FC070 24 1) stub
0258:Ret  ntoskrnl.exe.ProbeForRead() retval=0000001d ret=00e26845
0258:Call ntoskrnl.exe.ProbeForWrite(0220f5c0,00000004,00000001) ret=00e268a1
0258:fixme:ntoskrnl:ProbeForWrite (000000000220F5C0 4 1) stub
0258:Ret  ntoskrnl.exe.ProbeForWrite() retval=0000001c ret=00e268a1
0258:Call ntoskrnl.exe.ProbeForWrite(0220f5c0,00000004,00000001) ret=00e268a1
0258:fixme:ntoskrnl:ProbeForWrite (000000000220F5C0 4 1) stub
0258:Ret  ntoskrnl.exe.ProbeForWrite() retval=0000001c ret=00e268a1
0258:trace:seh:raise_exception code=c0000005 flags=0 addr=0xe210fd ip=e210fd
tid=0258
0258:trace:seh:raise_exception  info[0]=0000000000000001
0258:trace:seh:raise_exception  info[1]=000000000220f5c0
0258:trace:seh:raise_exception  rax=00000000000008b3 rbx=0000000000000000
rcx=000000000220f5c0 rdx=0000000000000044
0258:trace:seh:raise_exception  rsi=00000000009aca40 rdi=0000000000dff6c0
rbp=0000000000dff6f0 rsp=0000000000dff600
0258:trace:seh:raise_exception   r8=0000000000000000  r9=0000000000dfed62
r10=0000000000000000 r11=0000000000000000
0258:trace:seh:raise_exception  r12=00000000009ad2b0 r13=0000000000000000
r14=0000000000000000 r15=00000000000fc070 
...
0258:Call
ntoskrnl.exe.__C_specific_handler(00dff4c0,00dff780,00dfeff0,00dfe970)
ret=7bcbf11a
0258:Call ntdll.__C_specific_handler(00dff4c0,00dff780,00dfeff0,00dfe970)
ret=7bca1bbf
0258:trace:seh:__C_specific_handler 0xdff4c0 0xdff780 0xdfeff0 0xdfe970
0258:trace:seh:dump_scope_table scope table at 0xe2e1e8
0258:trace:seh:dump_scope_table   0: e1eb01-e1eb16 handler e10001 target e1eb16
0258:trace:seh:__C_specific_handler unwinding to target e1eb16
0258:trace:seh:RtlUnwindEx code=c0000005 flags=2 end_frame=0xdff780
target_ip=0xe1eb16 rip=000000007bcbfdc5
0258:trace:seh:RtlUnwindEx  info[0]=0000000000000001
0258:trace:seh:RtlUnwindEx  info[1]=000000000220f5c0
0258:trace:seh:RtlUnwindEx  rax=00007fffffea0000 rbx=0000000000dfe960
rcx=0000000000dfeaa0 rdx=0000000000e1eb16
0258:trace:seh:RtlUnwindEx  rsi=000000007bcfefc5 rdi=0000000000dfe130
rbp=0000000000dfe6e0 rsp=0000000000dfdfa0
0258:trace:seh:RtlUnwindEx   r8=0000000000dff4c0  r9=0000000000000000
r10=0000000000000000 r11=0000000000000000
0258:trace:seh:RtlUnwindEx  r12=0000000000dff4c0 r13=0000000000dfe970
r14=000000007bd41160 r15=0000000000e2e1e8 
...
0258:Ret  ntoskrnl.exe.KeExpandKernelStackAndCalloutEx() retval=00000000
ret=00e1e158 
...
0258:Ret  driver dispatch 0000000000E1BCF4
(device=00000000007FD650,irp=00000000009AD2B0) retval=c0000010
0258:trace:ntoskrnl:KeLeaveCriticalRegion semi-stub 
...
0258:Call
KERNEL32.WaitForMultipleObjectsEx(00000002,00dffb40,00000000,ffffffff,00000001)
ret=0022e97e
0258:Call
ntdll.NtWaitForMultipleObjects(00000002,00dff800,00000001,00000001,00000000)
ret=7b04b037 
...
00b8:Call KERNEL32.WaitForSingleObject(00000170,000003e8) ret=004f5ed0
00b8:Call
ntdll.NtWaitForMultipleObjects(00000001,0239fd5c,00000001,00000000,0239fce0)
ret=7b040ec7 

<hangs>
--- snip ---

The installer hangs now, but that's a follow-up issue.

$ wine --version
wine-5.7-209-g4e2ad334b5

Regards

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.

More information about the wine-bugs mailing list