[Bug 46339] New: comctl32//tests/edit.c shows an invalid read

https://bugs.winehq.org/show_bug.cgi?id=46339

Bug ID: 46339
           Summary: comctl32//tests/edit.c shows an invalid read
           Product: Wine
           Version: 4.0-rc3
          Hardware: x86
                OS: Linux
            Status: NEW
          Keywords: download, source, testcase, valgrind
          Severity: normal
          Priority: P2
         Component: comctl32
          Assignee: [e-mail]
          Reporter: [e-mail]
                CC: [e-mail]
      Distribution: Gentoo

../../../tools/runtest -q -P wine -T ../../.. -M comctl32.dll -p
comctl32_test.exe.so edit && touch edit.ok
==28392== Invalid read of size 2
==28392==    at 0x7B443813: GlobalLock (heap.c:441)
==28392==    by 0x7B444560: LocalLock (heap.c:1063)
==28392==    by 0x5914A4B: EDIT_LockBuffer (edit.c:1202)
==28392==    by 0x591BAF9: EDIT_WindowProc (edit.c:4571)
==28392==    by 0x4FDDF19: ??? (in
/home/austin/wine-valgrind/dlls/user32/user32.dll.so)
==28392==    by 0x4FDE537: call_window_proc (winproc.c:246)
==28392==    by 0x4FDFB1B: WINPROC_CallProcAtoW (winproc.c:606)
==28392==    by 0x4FE071C: WINPROC_call_window (winproc.c:953)
==28392==    by 0x4FA4D32: call_window_proc (message.c:2225)
==28392==    by 0x4FA8A39: send_message (message.c:3288)
==28392==    by 0x4FAB736: SendMessageA (message.c:3511)
==28392==    by 0x4A9BADE: test_EM_GETHANDLE (edit.c:2849)
==28392==    by 0x4A9DCBA: func_edit (edit.c:3213)
==28392==    by 0x4B2BBBD: run_test (test.h:617)
==28392==    by 0x4B2C5FB: main (test.h:701)
==28392==  Address 0x497eea8 is 664 bytes inside a block of size 2,048 free'd
==28392==    at 0x7BC48418: notify_free (heap.c:268)
==28392==    by 0x7BC4AFB7: RtlFreeHeap (heap.c:1772)
==28392==    by 0x5B44DC7: heap_free (heap.h:46)
==28392==    by 0x5B4735E: ScriptStringFree (usp10.c:2583)
==28392==    by 0x591598C: EDIT_InvalidateUniscribeData (edit.c:321)
==28392==    by 0x591A6E0: EDIT_EM_ReplaceSel (edit.c:2631)
==28392==    by 0x591C4BB: EDIT_WindowProc (edit.c:4665)
==28392==    by 0x4FDDF19: ??? (in
/home/austin/wine-valgrind/dlls/user32/user32.dll.so)
==28392==    by 0x4FDE537: call_window_proc (winproc.c:246)
==28392==    by 0x4FE014B: WINPROC_CallProcAtoW (winproc.c:507)
==28392==    by 0x4FE071C: WINPROC_call_window (winproc.c:953)
==28392==    by 0x4FA4D32: call_window_proc (message.c:2225)
==28392==    by 0x4FA8A39: send_message (message.c:3288)
==28392==    by 0x4FAB736: SendMessageA (message.c:3511)
==28392==    by 0x4A9289E: test_edit_control_3 (edit.c:1005)
==28392==    by 0x4A9DC51: func_edit (edit.c:3192)
==28392==    by 0x4B2BBBD: run_test (test.h:617)
==28392==    by 0x4B2C5FB: main (test.h:701)
==28392==  Block was alloc'd at
==28392==    at 0x7BC483AD: notify_alloc (heap.c:260)
==28392==    by 0x7BC4B8D1: RtlAllocateHeap (heap.c:1726)
==28392==    by 0x5B44A40: heap_calloc (heap.h:55)
==28392==    by 0x5B4A407: ScriptStringAnalyse (usp10.c:2012)
==28392==    by 0x5915093: EDIT_UpdateUniscribeData (edit.c:388)
==28392==    by 0x59150E8: EDIT_CalcLineWidth_SL (edit.c:755)
==28392==    by 0x591A448: EDIT_EM_ReplaceSel (edit.c:2527)
==28392==    by 0x591C4BB: EDIT_WindowProc (edit.c:4665)
==28392==    by 0x4FDDF19: ??? (in
/home/austin/wine-valgrind/dlls/user32/user32.dll.so)
==28392==    by 0x4FDE537: call_window_proc (winproc.c:246)
==28392==    by 0x4FE014B: WINPROC_CallProcAtoW (winproc.c:507)
==28392==    by 0x4FE071C: WINPROC_call_window (winproc.c:953)
==28392==    by 0x4FA4D32: call_window_proc (message.c:2225)
==28392==    by 0x4FA8A39: send_message (message.c:3288)
==28392==    by 0x4FAB736: SendMessageA (message.c:3511)
==28392==    by 0x4A9289E: test_edit_control_3 (edit.c:1005)
==28392==    by 0x4A9DC51: func_edit (edit.c:3192)
==28392==    by 0x4B2BBBD: run_test (test.h:617)
==28392==    by 0x4B2C5FB: main (test.h:701)
==28392==