"services.exe" Crash on Wine Start

Questions about Wine on Linux
Locked
User avatar
Enverex
Level 2
Level 2
Posts: 10
Joined: Tue Nov 25, 2008 12:03 pm

"services.exe" Crash on Wine Start

Post by Enverex »

Something appears to have changed within my Wine prefix and now it semi-breaks every time I use it. Any time something "starts" Wine up, I'll get a crash before it carries on doing what it was supposed to do. Nothing specific triggers this, even just running "wineboot" will flag it up. Here's what happens:

Code: Select all

====== Console Log
fixme:winediag:start_process Wine Staging 1.9.19 is a testing version containing experimental patches.
fixme:winediag:start_process Please mention your exact version when filing bug reports on winehq.org.
fixme:process:SetProcessDEPPolicy (1): stub
fixme:wer:WerSetFlags (2) stub!
fixme:heap:RtlSetHeapInformation (nil) 1 (nil) 0 stub
wine: Unhandled page fault on read access to 0x00000000 at address 0x7efe88aa (thread 000f), starting debugger...
fixme:ntoskrnl:KeInitializeSpinLock stub: 0x862740
fixme:ntoskrnl:KeInitializeSpinLock stub: 0x86273c
fixme:ntoskrnl:KeInitializeSpinLock stub: 0x862744
fixme:ntoskrnl:KeInitializeSpinLock stub: 0x862748
fixme:ntoskrnl:KeInitializeSpinLock stub: 0x86274c
fixme:ntoskrnl:KeInitializeEvent stub: 0x86272c 1 0
fixme:ntoskrnl:IoInitializeTimer stub: 0x860020, 0x74c3d0, 0x860020
fixme:ntoskrnl:IoStartTimer stub: 0x860020
fixme:ntoskrnl:KeWaitForSingleObject stub: 0x86272c, 0, 0, 0, (nil)
fixme:ntoskrnl:PsTerminateSystemThread stub: 0
err:wineboot:start_services_process Unexpected termination of services.exe - exit code -1073741819


====== Page Fault
Unhandled exception: page fault on read access to 0x00000000 in 32-bit code (0x7efe88aa).
Register dump:
 CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b
 EIP:7efe88aa ESP:0033f9c0 EBP:0033fc68 EFLAGS:00010246(  R- --  I  Z- -P- )
 EAX:001110c0 EBX:7efff000 ECX:00000002 EDX:00000000
 ESI:00000000 EDI:00114da0
Stack dump:
0x0033f9c0:  0033fb58 00111270 00110b10 00115b70
0x0033f9d0:  0033fc94 0033fc98 00110b20 001111c8
0x0033f9e0:  00000001 0033fa1c 00000001 00000000
0x0033f9f0:  00000000 00000000 00000000 7b476a10
0x0033fa00:  00000000 00000000 00000000 a299a600
0x0033fa10:  f75bce59 7bce6000 0033fb8c 00000040
000c: sel=0067 base=00000000 limit=00000000 32-bit --x
Backtrace:
=>0 0x7efe88aa in services (+0x88aa) (0x0033fc68)
  1 0x7efe8fab service_start+0x4a() in services (0x0033fcd8)
  2 0x7efe1d20 main+0x60f() in services (0x0033fdd8)
  3 0x7eff7708 in services (+0x17707) (0x0033fe18)
  4 0x7b463842 call_process_entry+0x11() in kernel32 (0x0033fe38)
  5 0x7b464b35 in kernel32 (+0x44b34) (0x0033fe78)
  6 0x7bc8941c call_thread_func_wrapper+0xb() in ntdll (0x0033fea8)
  7 0x7bc8c507 call_thread_func+0xd6() in ntdll (0x0033ff98)
  8 0x7bc893fa RtlRaiseException+0x21() in ntdll (0x0033ffb8)
  9 0x7bc5b1c3 in ntdll (+0x4b1c2) (0x0033ffe8)
  10 0xf75d7b8d wine_call_on_stack+0x1c() in libwine.so.1 (0x00000000)
  11 0xf75d7c9d wine_switch_to_stack+0x2c() in libwine.so.1 (0xffdc2bc8)
  12 0x7bc5f5ee LdrInitializeThunk+0x26d() in ntdll (0xffdc2c28)
  13 0x7b46b320 __wine_kernel_init+0xa6f() in kernel32 (0xffdc3d98)
  14 0x7bc605f3 __wine_process_init+0x162() in ntdll (0xffdc3e08)
  15 0xf75d5dc7 wine_init+0x2d6() in libwine.so.1 (0xffdc3e68)
  16 0x7c000d18 main+0xa7() in <wine-loader> (0xffdc42c8)
  17 0xf740d196 __libc_start_main+0xf5() in libc.so.6 (0x00000000)
0x7efe88aa: movzwl      0x0(%edx),%ecx
Modules:
Module  Address                 Debug info      Name (22 modules)
ELF     7b400000-7b7e9000       Dwarf           kernel32<elf>
  \-PE  7b420000-7b7e9000       \               kernel32
ELF     7bc00000-7bd03000       Dwarf           ntdll<elf>
  \-PE  7bc10000-7bd03000       \               ntdll
ELF     7c000000-7c004000       Dwarf           <wine-loader>
ELF     7ec58000-7ec71000       Deferred        userenv<elf>
  \-PE  7ec60000-7ec71000       \               userenv
ELF     7ec71000-7eceb000       Deferred        advapi32<elf>
  \-PE  7ec80000-7eceb000       \               advapi32
ELF     7eceb000-7ed6d000       Deferred        rpcrt4<elf>
  \-PE  7ed00000-7ed6d000       \               rpcrt4
ELF     7ed6d000-7ed80000       Deferred        libnss_files.so.2
ELF     7ef62000-7efb7000       Deferred        libm.so.6
ELF     7efce000-7f000000       Dwarf           services<elf>
  \-PE  7efe0000-7f000000       \               services
ELF     f7389000-f73a5000       Deferred        libgcc_s.so.1
ELF     f73a7000-f73ac000       Deferred        libdl.so.2
ELF     f73f5000-f75ae000       Dwarf           libc.so.6
ELF     f75ae000-f75cb000       Deferred        libpthread.so.0
ELF     f75cb000-f7797000       Dwarf           libwine.so.1
ELF     f7799000-f77bd000       Deferred        ld-linux.so.2
ELF     f77bf000-f77c0000       Deferred        [vdso].so
Threads:
process  tid      prio (all id:s are in hex)
00000008 ntdll.dll
        00000009    0
0000000a wineboot.exe
        0000000b    0
0000000e (D) C:\windows\system32\services.exe
        00000037    0
        00000036    0
        0000002e    0
        00000028    0
        0000001f    0
        0000001c    0
        00000019    0
        00000018    0
        00000012    0
        0000000f    0 <==
00000010 explorer.exe
        00000041    0
        00000040    0
        0000003f    0
        00000011    0
0000001d winedevice.exe
        00000027    0
        00000024    0
        00000023    0
        00000022    0
        00000021    0
        0000001e    0
00000025 plugplay.exe
        0000002b    0
        0000002a    0
        00000026    0
0000002c winedevice.exe
        00000033    0
        00000032    0
        00000031    0
        00000030    0
        0000002d    0
00000034 winedevice.exe
        0000003b    0
        0000003a    0
        00000039    0
        00000038    0
        00000035    0
System information:
    Wine build: wine-1.9.19 (Staging)
    Platform: i386
    Version: Windows XP
    Host system: Linux
    Host version: 4.7.4-1-ARCH
Using a new prefix doesn't have the problem, but I've a decent amount of programs installed in this one so I'd rather get to the bottom of it. I'm only using one single override which is msccore for .NET overrides.

Any idea what's triggering this or how to fix it? The backtrace only seems to list bog-standard Wine programs/services, nothing untoward so I can't see anywhere to start diagnosing this here.
Top
User avatar
Bob Wya
Level 12
Level 12
Posts: 3068
Joined: Sat Oct 16, 2010 7:40 pm

Re: "services.exe" Crash on Wine Start

Post by Bob Wya »

Enverex wrote: ...
Using a new prefix doesn't have the problem, but I've a decent amount of programs installed in this one so I'd rather get to the bottom of it. I'm only using one single override which is msccore for .NET overrides.

Any idea what's triggering this or how to fix it? The backtrace only seems to list bog-standard Wine programs/services, nothing untoward so I can't see anywhere to start diagnosing this here.
To check what's going wrong:

Code: Select all

export WINEDEBUG=trace+service
winecfg
For reference looking, at the Wine Source code, the services executable reads a set of services from keys stored in:
HKLM\System\CurrentControlSet\Services
These are transferred to a VM structure at wineboot.

If you need to manually disable any services... The default Wineprefix System registry location is:

Code: Select all

~/.wine/system.reg
Only manually edit that file if you can't run:

Code: Select all

wine regedit
Bob
Top
User avatar
Enverex
Level 2
Level 2
Posts: 10
Joined: Tue Nov 25, 2008 12:03 pm

Re: "services.exe" Crash on Wine Start

Post by Enverex »

Thanks Bob, looks like it was the service "cdr4_2k" doing it. Removing that from the services list got rid of the issue entirely. God knows where that came from.

Amusingly, it appears to be a source of blue screens on Windows too - https://support.microsoft.com/en-us/kb/315345
Top
User avatar
Bob Wya
Level 12
Level 12
Posts: 3068
Joined: Sat Oct 16, 2010 7:40 pm

Re: "services.exe" Crash on Wine Start

Post by Bob Wya »

Enverex wrote:Thanks Bob, looks like it was the service "cdr4_2k" doing it. Removing that from the services list got rid of the issue entirely. God knows where that came from.

Amusingly, it appears to be a source of blue screens on Windows too - https://support.microsoft.com/en-us/kb/315345
Probably just a rootkit... :evil:
Bob
Top
Emdzej
Level 2
Level 2
Posts: 13
Joined: Wed Sep 28, 2016 7:32 pm

Re: "services.exe" Crash on Wine Start

Post by Emdzej »

This service comes from Windows Media Player 9 (wmp9). Some of 3rd party stuff from this program is causing that. I tested it few times today.
I not tested if installation of wmp10 cause this issue too.

Test suite:
Latest Ubuntu Mate LTS
Latest Wine staging
Latest winetricks
Top
User avatar
Enverex
Level 2
Level 2
Posts: 10
Joined: Tue Nov 25, 2008 12:03 pm

Re: "services.exe" Crash on Wine Start

Post by Enverex »

That makes sense, it ties in roughly with when I installed a bunch of codec related things (and WMP) to debug some Quartz/video playback issues.
Top
User avatar
Bob Wya
Level 12
Level 12
Posts: 3068
Joined: Sat Oct 16, 2010 7:40 pm

Re: "services.exe" Crash on Wine Start

Post by Bob Wya »

Emdzej wrote:This service comes from Windows Media Player 9 (wmp9). Some of 3rd party stuff from this program is causing that. I tested it few times today.
I not tested if installation of wmp10 cause this issue too.

Test suite:
Latest Ubuntu Mate LTS
Latest Wine staging
Latest winetricks
Have you fed that issue back to Austin English @ Github Winetricks / winetricks ?? 8)

Bob
Top
Emdzej
Level 2
Level 2
Posts: 13
Joined: Wed Sep 28, 2016 7:32 pm

Re: "services.exe" Crash on Wine Start

Post by Emdzej »

I've just start to fill the bug report ;)
Yesterday, I ran out of time to do this.
Top
Locked

Return to “Linux”