I'm trying to run StarTeam Client, which used to work
as recently as earlier this month. Nowadays, I get
infinite recursion in the exception handlers, caused
by various NULL pointer deferences within
dlls/msvcrt/cppexcept.c. Any ideas? Looks like
stack corruption to me... Here's some +seh output:
trace:seh:EXC_RtlRaiseException code=e06d7363 flags=1 addr=0x401060f4
trace:seh:EXC_RtlRaiseException info[0]=19930520
trace:seh:EXC_RtlRaiseException info[1]=406f17f0
trace:seh:EXC_RtlRaiseException info[2]=41108f80
trace:seh:EXC_CallHandler calling handler at 0x411075e6 code=e06d7363 flags=1
trace:seh:EXC_CallHandler handler returned 1
trace:seh:EXC_CallHandler calling handler at 0x411074b4 code=e06d7363 flags=1
trace:seh:cxx_frame_handler handling C++ exception rec 0x406f1750 frame 0x406f186c
trylevel 0 descr 0x41108c20
exception type:
flags 0 destr (nil) handler (nil) type info 0x41108f68
0: flags 1 type 0x4110d400 ((nil) .PAVCStCommandExceptionDetected@@) offset 0
vbase -1,0 size 4 copy ctor (nil)
1: flags 1 type 0x4110d3e0 ((nil) .PAVCException@@) offset 0 vbase -1,0 size 4
copy ctor (nil)
2: flags 1 type 0x4110d440 ((nil) .PAVCObject@@) offset 0 vbase -1,0 size 4 copy
ctor (nil)
3: flags 1 type 0x4110d430 ((nil) .PAX) offset 0 vbase -1,0 size 4 copy ctor (nil)
function descr:
magic 19930520
unwind table: 0x41108c40 4
0: prev -1 func (nil)
1: prev -1 func (nil)
2: prev 1 func (nil)
3: prev 1 func (nil)
try table: 0x41108c60 2
0: start 2 end 2 catchlevel 3 catch 0x41108c88 1
0: flags 0 offset -28 handler 0x410fbb63 type 0x4110d3e0 ((nil)
.PAVCException@@)
1: start 0 end 0 catchlevel 3 catch 0x41108c98 2
0: flags 0 offset -24 handler 0x410fbb36 type 0x4110d400 ((nil)
.PAVCStCommandExceptionDetected@@)
1: flags 0 offset 0 handler 0x410fbb52 type (nil)
trace:seh:call_catch_block matched type 0x41108f48 in tryblock 1 catchblock 0
trace:seh:EXC_RtlUnwind code=e06d7363 flags=3
trace:seh:EXC_CallHandler calling handler at 0x4010c310 code=e06d7363 flags=3
trace:seh:EXC_CallHandler handler returned 1
trace:seh:EXC_CallHandler calling handler at 0x411075e6 code=e06d7363 flags=3
trace:seh:EXC_CallHandler handler returned 1
trace:seh:call_catch_block calling catch block 0x41108c98 for type 0x41108f48 addr
0x410fbb36 ebp 0x406f1878
trace:seh:EXC_RtlRaiseException code=e06d7363 flags=1 addr=0x401060f4
trace:seh:EXC_RtlRaiseException info[0]=19930520
trace:seh:EXC_RtlRaiseException info[1]=406f0e6c
trace:seh:EXC_RtlRaiseException info[2]=41108df8
trace:seh:EXC_CallHandler calling handler at 0x411074e6 code=e06d7363 flags=1
trace:seh:EXC_CallHandler handler returned 1
trace:seh:EXC_CallHandler calling handler at 0x411074b4 code=e06d7363 flags=1
trace:seh:cxx_frame_handler handling C++ exception rec 0x406f0dd4 frame 0x406f186c
trylevel 1 descr 0x41108c20
exception type:
flags 0 destr (nil) handler (nil) type info 0x41108de0
0: flags 1 type 0x4110d478 ((nil) .PAVCStBaseServerException@@) offset 0 vbase
-1,0 size 4 copy ctor (nil)
1: flags 1 type 0x4110d458 ((nil) .PAVCStException@@) offset 0 vbase -1,0 size 4
copy ctor (nil)
2: flags 1 type 0x4110d3e0 ((nil) .PAVCException@@) offset 0 vbase -1,0 size 4
copy ctor (nil)
3: flags 1 type 0x4110d440 ((nil) .PAVCObject@@) offset 0 vbase -1,0 size 4 copy
ctor (nil)
4: flags 1 type 0x4110d430 ((nil) .PAX) offset 0 vbase -1,0 size 4 copy ctor (nil)
function descr:
magic 19930520
unwind table: 0x41108c40 4
0: prev -1 func (nil)
1: prev -1 func (nil)
2: prev 1 func (nil)
3: prev 1 func (nil)
try table: 0x41108c60 2
0: start 2 end 2 catchlevel 3 catch 0x41108c88 1
0: flags 0 offset -28 handler 0x410fbb63 type 0x4110d3e0 ((nil)
.PAVCException@@)
1: start 0 end 0 catchlevel 3 catch 0x41108c98 2
0: flags 0 offset -24 handler 0x410fbb36 type 0x4110d400 ((nil)
.PAVCStCommandExceptionDetected@@)
1: flags 0 offset 0 handler 0x410fbb52 type (nil)
trace:seh:EXC_CallHandler handler returned 1
trace:seh:EXC_CallHandler calling handler at 0x410ceadd code=e06d7363 flags=1
trace:seh:cxx_frame_handler handling C++ exception rec 0x406f0dd4 frame 0x406f19ac
trylevel 1 descr 0x410d43f8
exception type:
flags 0 destr (nil) handler (nil) type info 0x41108de0
0: flags 1 type 0x4110d478 ((nil) .PAVCStBaseServerException@@) offset 0 vbase
-1,0 size 4 copy ctor (nil)
1: flags 1 type 0x4110d458 ((nil) .PAVCStException@@) offset 0 vbase -1,0 size 4
copy ctor (nil)
2: flags 1 type 0x4110d3e0 ((nil) .PAVCException@@) offset 0 vbase -1,0 size 4
copy ctor (nil)
3: flags 1 type 0x4110d440 ((nil) .PAVCObject@@) offset 0 vbase -1,0 size 4 copy
ctor (nil)
4: flags 1 type 0x4110d430 ((nil) .PAX) offset 0 vbase -1,0 size 4 copy ctor (nil)
function descr:
magic 19930520
unwind table: 0x410d4418 7
0: prev -1 func (nil)
1: prev 0 func (nil)
2: prev 1 func 0x410ceabd
3: prev 2 func 0x410ceac6
4: prev 3 func 0x410ceacf
5: prev 0 func (nil)
6: prev -1 func (nil)
try table: 0x410d4450 2
0: start 1 end 4 catchlevel 5 catch 0x410d4478 2
0: flags 0 offset -80 handler 0x410abe43 type 0x410de070 ((nil)
.PAVCException@@)
1: flags 0 offset 0 handler 0x410abe6d type (nil)
1: start 0 end 5 catchlevel 6 catch 0x410d4498 2
0: flags 0 offset -84 handler 0x410abe9c type 0x410de070 ((nil)
.PAVCException@@)
1: flags 0 offset 0 handler 0x410abeb9 type (nil)
trace:seh:call_catch_block matched type 0x41108d80 in tryblock 0 catchblock 0
trace:seh:EXC_RtlUnwind code=e06d7363 flags=3
trace:seh:EXC_CallHandler calling handler at 0x4010c310 code=e06d7363 flags=3
trace:seh:EXC_CallHandler handler returned 1
trace:seh:EXC_CallHandler calling handler at 0x411074e6 code=e06d7363 flags=3
trace:seh:EXC_CallHandler handler returned 1
trace:seh:EXC_CallHandler calling handler at 0x411074b4 code=e06d7363 flags=3
trace:seh:EXC_CallHandler handler returned 1
trace:seh:call_catch_block calling catch block 0x410d4478 for type 0x41108d80 addr
0x410abe43 ebp 0x406f19b8
trace:seh:EXC_RtlRaiseException code=e06d7363 flags=1 addr=0x401060f4
trace:seh:EXC_RtlRaiseException info[0]=19930520
trace:seh:EXC_RtlRaiseException info[1]=00000000
trace:seh:EXC_RtlRaiseException info[2]=00000000
trace:seh:EXC_CallHandler calling handler at 0x410ceadd code=e06d7363 flags=1
trace:seh:EXC_RtlRaiseException code=c0000005 flags=0 addr=0x40f3e9a3
trace:seh:EXC_RtlRaiseException info[0]=00000000
trace:seh:EXC_RtlRaiseException info[1]=00000008
trace:seh:EXC_CallHandler calling handler at 0x4010c310 code=c0000005 flags=0
trace:seh:EXC_CallHandler handler returned 2
trace:seh:EXC_CallHandler calling handler at 0x410ceadd code=c0000005 flags=10
trace:seh:cxx_frame_handler handling C++ exception rec 0x405e09d8 frame 0x406f19ac
trylevel 5 descr 0x410d43f8
exception type:
trace:seh:EXC_RtlRaiseException code=c0000005 flags=0 addr=0x40f3e1f5
trace:seh:EXC_RtlRaiseException info[0]=00000000
trace:seh:EXC_RtlRaiseException info[1]=0000000c
trace:seh:EXC_CallHandler calling handler at 0x4010c310 code=c0000005 flags=0
trace:seh:EXC_CallHandler handler returned 2
trace:seh:EXC_CallHandler calling handler at 0x4010c310 code=c0000005 flags=10
trace:seh:EXC_CallHandler handler returned 2
trace:seh:EXC_CallHandler calling handler at 0x410ceadd code=c0000005 flags=10
trace:seh:cxx_frame_handler handling C++ exception rec 0x405dfe98 frame 0x406f19ac
trylevel 5 descr 0x410d43f8
exception type:
trace:seh:EXC_RtlRaiseException code=c0000005 flags=0 addr=0x40f3e1f5
trace:seh:EXC_RtlRaiseException info[0]=00000000
trace:seh:EXC_RtlRaiseException info[1]=0000000c
trace:seh:EXC_CallHandler calling handler at 0x4010c310 code=c0000005 flags=0
trace:seh:EXC_CallHandler handler returned 2
trace:seh:EXC_CallHandler calling handler at 0x4010c310 code=c0000005 flags=10
trace:seh:EXC_CallHandler handler returned 2
trace:seh:EXC_CallHandler calling handler at 0x4010c310 code=c0000005 flags=10
trace:seh:EXC_CallHandler handler returned 2
trace:seh:EXC_CallHandler calling handler at 0x410ceadd code=c0000005 flags=10
.
.
.
and so on, forever.
The experience in a debugger is that the exception type
becomes NULL and is passed around like that until
it gets deferenced. Then all hell breaks loose. I don't understand
where __wine_call_from_32_regs lives in the source, and lose
track of what's going on in there, thwarting my debugging efforts.
--
gmt
"If ye love wealth better than liberty, the tranquility
of servitude better than the animating contest of freedom,
go home from us in peace. We ask not your counsels or your
arms. Crouch down and lick the hands, which feed you. May
your chains set lightly upon you, and may posterity forget
that ye were our countrymen."
-Samuel Adams
