http://bugs.winehq.org/show_bug.cgi?id=24387 Wolfgang Hartl <wolfo.dev@wolke7.net> changed: What |Removed |Added ---------------------------------------------------------------------------- Attachment #80397|0 |1 is obsolete| | --- Comment #49 from Wolfgang Hartl <wolfo.dev@wolke7.net> --- Created attachment 80585 --> http://bugs.winehq.org/attachment.cgi?id=80585 Crash log with relevant root cause Finally, I found the issue! with the following run: env "WINEPREFIX=/home/wolfgang/.wine110wow" "WINEDEBUG=+ole,+typelib" ./wine "C:\\Program Files (x86)\\Microsoft Money\\System\\MSMONEY.EXE" 2>&1 | tee -a ~/Local/log/run18.wow.ole.typelib.log The INV7.OCX calls ITypeInfo_fnInvoke "CreateProperties(pva, retval)", the arg 0 requests type VT_VARIANT|VT_ARRAY|VT_BYREF. The ITypeInfo_fnInvoke() gets it wrong and gives the DispCallFunc() the arg 0 type VT_VARIANT|VT_BYREF to VT_ERROR. The inv7.ocx crashes due to the wrong ptr. 0140:trace:ole:DispCallFunc (07CD0490, 44, 4, 10, 2, 064AC610, 064AC608, 0792FB48 (vt=10)) 0140:trace:ole:DispCallFunc arg 0: type VT_VARIANT|VT_ARRAY|VT_BYREF 064AC5C8 {VT_VARIANT|VT_BYREF: 064AC5E8 {VT_ERROR: 80020004}} 0140:trace:ole:DispCallFunc arg 1: type VT_VARIANT|VT_BYREF 064AC5D8 {VT_VARIANT|VT_BYREF: 0792FB38 {VT_EMPTY}} wine: Unhandled page fault on read access to 00000016 at address 600CDC79 (thread 0140), starting debugger... I have a fix that gives the correct argument and fixes the crash, but I am still not sure, if this is the correct way. Analyzing further. -- Do not reply to this email, post in Bugzilla using the above URL to reply. You are receiving this mail because: You are watching all bug changes.