http://bugzilla.opensuse.org/show_bug.cgi?id=1166141 Bug ID: 1166141 Summary: windows:mingw:win32/mingw32-runtime: linked applications crashes Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: 3rd party software Assignee: fstrba@suse.com Reporter: ralf.habacker@freenet.de QA Contact: bnc-team-screening@forge.provo.novell.com CC: fridrich.strba@bluewin.ch, hib@hiberis.nl, idonmez@suse.com, mkbosmans@gmail.com Found By: --- Blocker: --- With version 7.0.0 of this package linked executables are crashing for example https://gitlab.freedesktop.org/dbus/dbus/-/merge_requests/135#note_431395 Unhandled exception: page fault on read access to 0xffffffff in 32-bit code (0xffffffff). Register dump: CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b EIP:ffffffff ESP:0064fe3c EBP:0064fe68 EFLAGS:00010202( R- -- I - - - ) EAX:ffffffff EBX:00230f84 ECX:0064fe40 EDX:00000000 ESI:00230f80 EDI:00230f7c Stack dump: 0x0064fe3c: 00401542 7ed4f460 00111f6c 0064ff28 0x0064fe4c: 7ecc4df8 00230000 00000000 0064fe80 0x0064fe5c: 00000000 0000004f 00111f6c 0064fe88 0x0064fe6c: 7ecc4f9f 00230f28 00111f70 0064ff28 0x0064fe7c: 7ecc4f9f 0064fea0 00230f14 0064ff28 0x0064fe8c: 00401473 7b434268 00650000 0064ff28 Backtrace: =>0 0xffffffff (0x0064fe68) 1 0x7ecc4f9f MSVCRT_exit+0x1e(exitcode=) [Z:\usr\src\debug\wine-5.3-lp151.1131.1.i386\dlls\msvcrt\exit.c:374] in msvcrt (0x0064fe88) 2 0x00401473 EntryPoint+0xffffffff() in sanitycheckc_cross (0x0064ff28) 3 0x7b455ee2 call_process_entry+0x11() in kernel32 (0x0064ff48) 4 0x7b4563a1 start_process+0x130(entry=, peb=) [Z:\usr\src\debug\wine-5.3-lp151.1131.1.i386\dlls\kernel32\process.c:153] in kernel32 (0x0064ffd8) 5 0x7b455eee __wine_start_process+0x9() in kernel32 (0x0064ffec) 0xffffffff: -- no code accessible -- Modules: Module Address Debug info Name (20 modules) PE 400000- 44c000 Dwarf sanitycheckc_cross ELF 7b000000-7b0da000 Deferred kernelbase<elf> \-PE 7b020000-7b0da000 \ kernelbase ELF 7b400000-7b672000 Dwarf kernel32<elf> \-PE 7b420000-7b672000 \ kernel32 ELF 7bc00000-7bd44000 Deferred ntdll<elf> \-PE 7bc30000-7bd44000 \ ntdll ELF 7c000000-7c004000 Deferred <wine-loader> ELF 7eb95000-7ebb4000 Deferred libgcc_s.so.1 ELF 7ebb4000-7ebdf000 Deferred libtinfo.so.6 ELF 7ebdf000-7ec0c000 Deferred libncurses.so.6 ELF 7ec7a000-7ed51000 Dwarf msvcrt<elf> \-PE 7eca0000-7ed51000 \ msvcrt ELF 7eed2000-7efc7000 Deferred libm.so.6 ELF f7380000-f7385000 Deferred libdl.so.2 ELF f7385000-f7560000 Deferred libc.so.6 ELF f7560000-f757f000 Deferred libpthread.so.0 ELF f75b8000-f7740000 Dwarf libwine.so.1 ELF f7742000-f776a000 Deferred ld-linux.so.2 ELF f776d000-f776e000 Deferred [vdso].so Threads: process tid prio (all id:s are in hex) 00000008 sanitycheckc_cross.exe 00000045 0 00000009 0 0000000e services.exe 00000023 0 0000001a 0 00000013 0 00000010 0 0000000f 0 00000011 plugplay.exe 00000017 0 00000016 0 00000012 0 00000018 winedevice.exe 00000020 0 0000001d 0 0000001c 0 0000001b 0 00000019 0 00000021 winedevice.exe 00000026 0 00000025 0 00000024 0 00000022 0 00000040 winedbg.exe 00000043 0 00000041 0 00000046 (D) Z:\home\ralf\src\dbus-3-meson-cross-build\meson-private\sanitycheckc_cross.exe 00000047 0 <== System information: Wine build: wine-5.3 Platform: i386 Version: Windows 8 Host system: Linux Host version: 4.12.14-lp151.28.36-default How to reproduce: 1. Install mingw32-cross-gcc from windows:mingw:win32 project 2. run echo "int main(void) { int class=0; return class; }" > test.c i686-w64-mingw32-gcc -o test test.c wine ./test basic analysis: winedbg --gdb test.exe ... Wine-gdb> c Program received signal SIGSEGV, Segmentation fault. 0xffffffff in ?? () Wine-gdb> bt #0 0xffffffff in ?? () !!! #1 0x00401542 in ?? () #2 0x7ecc4f9f in MSVCRT_exit (exitcode=0) at exit.c:374 #3 0x00401473 in ?? () #4 0x7b455ee2 in call_process_entry () from /usr/bin/../lib/wine/kernel32.dll.so #5 0x7b4563a1 in start_process (entry=<optimized out>, peb=<optimized out>) at process.c:153 #6 0x7b455eee in __wine_start_process () from /usr/bin/../lib/wine/kernel32.dll.so #7 0x00000000 in ?? () objdump -D test.exe > test.exe.s The crash happens in __do_global_dtors (see !!!): 00401530 <___do_global_dtors>: 401530: a1 04 30 40 00 mov 0x403004,%eax 401535: 8b 00 mov (%eax),%eax 401537: 85 c0 test %eax,%eax 401539: 74 25 je 401560 <___do_global_dtors+0x30> 40153b: 83 ec 0c sub $0xc,%esp 40153e: 66 90 xchg %ax,%ax 401540: ff d0 call *%eax !!! 401542: a1 04 30 40 00 mov 0x403004,%eax 401547: 8d 50 04 lea 0x4(%eax),%edx 40154a: 8b 40 04 mov 0x4(%eax),%eax 40154d: 89 15 04 30 40 00 mov %edx,0x403004 401553: 85 c0 test %eax,%eax 401555: 75 e9 jne 401540 <___do_global_dtors+0x10> 401557: 83 c4 0c add $0xc,%esp 40155a: c3 ret 40155b: 8d 74 26 00 lea 0x0(%esi,%eiz,1),%esi 40155f: 90 nop 401560: c3 ret 401561: 8d b4 26 00 00 00 00 lea 0x0(%esi,%eiz,1),%esi 401568: 8d b4 26 00 00 00 00 lea 0x0(%esi,%eiz,1),%esi 40156f: 90 nop Detailed analysis: 401530: a1 04 30 40 00 mov 0x403004,%eax The function reads a pointer from 0x403004 Wine-gdb> x 0x403004 0x403004: 0x00402624 401535: 8b 00 mov (%eax),%eax and then loads the value from this memory address into eax Wine-gdb> x 0x00402624 0x402624: 0xffffffff 401537: 85 c0 test %eax,%eax 401539: 74 25 je 401560 <___do_global_dtors+0x30> Then it checks this register against 0x0 to find the end of the list, which fails because the value is 0xffffffff 40153b: 83 ec 0c sub $0xc,%esp 40153e: 66 90 xchg %ax,%ax 401540: ff d0 call *%eax If the value is not 0x0 it assumes that the register contains a pointer to a destructor to call, which also fails because the value 0xffffffff is invalid. Conclusion: There is something broken with the generating of the list of global destructors in mingw32-runtime-7.0.0. Workaround: After reverting mingw32-headers and mingw32-runtime to version 6.0.0 the crash does not occurs. -- You are receiving this mail because: You are on the CC list for the bug.