https://bugs.winehq.org/show_bug.cgi?id=43374
--- Comment #1 from Austin English austinenglish@gmail.com --- Still in wine-4.2: ==14046== Invalid read of size 2 ==14046== at 0x55C75D6: DispCallFunc (typelib.c:6721) ==14046== by 0x700163C: invoke_builtin_function (dispex.c:1135) ==14046== by 0x7002C37: function_invoke (dispex.c:1186) ==14046== by 0x7002EB7: invoke_builtin_prop (dispex.c:1260) ==14046== by 0x700342E: DispatchEx_InvokeEx (dispex.c:1584) ==14046== by 0x174AF255: IDispatchEx_InvokeEx (dispex.h:319) ==14046== by 0x174AF255: disp_call (???:0) ==14046== by 0x174B5D15: exprval_call (engine.c:327) ==14046== by 0x174B5DC8: interp_call_member (engine.c:1210) ==14046== by 0x174B6AB4: enter_bytecode (engine.c:2806) ==14046== by 0x174B850E: exec_source (engine.c:3059) ==14046== by 0x174BA03D: invoke_source (function.c:259) ==14046== by 0x174BAF1A: Function_invoke (function.c:352) ==14046== by 0x174AE9A3: invoke_prop_func (dispex.c:401) ==14046== by 0x174AEDB9: DispatchEx_InvokeEx (dispex.c:737) ==14046== by 0x703BE38: IDispatchEx_InvokeEx (dispex.h:319) ==14046== by 0x703BE38: call_disp_func (???:0) ==14046== by 0x703C037: call_event_handlers (htmlevent.c:2487) ==14046== by 0x703CDEC: dispatch_event_object (htmlevent.c:2739) ==14046== by 0x703D845: dispatch_event (htmlevent.c:2788) ==14046== by 0x70A7434: handle_load (nsevents.c:283) ==14046== by 0x6B18A8A8: ??? ==14046== Address 0x49547a8 is 0 bytes after a recently re-allocated block of size 0 alloc'd ==14046== at 0x7BC48A83: notify_alloc (heap.c:260) ==14046== by 0x7BC4BFA7: RtlAllocateHeap (heap.c:1726) ==14046== by 0x6FFF8A6: heap_alloc (heap.h:29) ==14046== by 0x6FFFA69: add_func_info (dispex.c:284) ==14046== by 0x6FFFE38: process_interface (dispex.c:364) ==14046== by 0x700005F: preprocess_dispex_data (dispex.c:431) ==14046== by 0x70009A6: ensure_dispex_info (dispex.c:1379) ==14046== by 0x7002984: init_dispex_with_compat_mode (dispex.c:1849) ==14046== by 0x70BD501: init_dispex (mshtml_private.h:364) ==14046== by 0x70BE44A: OmNavigator_Create (omnavigator.c:1320) ==14046== by 0x7091934: HTMLWindow2_get_navigator (htmlwindow.c:917) ==14046== by 0x4C82AFD: IHTMLWindow2_get_navigator (mshtml.h:45805) ==14046== by 0x4C82AFD: test_script_run (???:0) ==14046== by 0x4C8326A: ActiveScriptParse_ParseScriptText (script.c:2476) ==14046== by 0x70CD007: IActiveScriptParse32_ParseScriptText (activscp.h:1133) ==14046== by 0x70CD007: parse_elem_text (???:0) ==14046== by 0x70CD42C: parse_inline_script (script.c:1116) ==14046== by 0x70CDD97: parse_script_elem (script.c:1155) ==14046== by 0x70CDE1A: doc_insert_script (script.c:1298) ==14046== by 0x709903A: run_insert_script (mutation.c:342) ==14046== by 0x7098AF9: nsRunnable_Run (mutation.c:597) ==14046== by 0x6A83E0A0: ???