http://bugs.winehq.org/show_bug.cgi?id=23078
--- Comment #1 from Juan Lang juan_lang@yahoo.com 2010-06-07 14:18:24 --- Confirming. From a crash log with debugging symbols:
=>0 0x68507b2c GetCharacterPlacementW+0x3c(hdc=0xf450, lpString="No output!
wine", uCount=0x0001, nMaxExtent=0, lpResults=(nil), dwFlags=0x0008) [/home/juan/src/wine/dlls/gdi32/font.c:2851] in gdi32 (0x68507af0) 0x68507b2c GetCharacterPlacementW+0x3c [/home/juan/src/wine/dlls/gdi32/font.c:2851] in gdi32: movl 0x14(%eax),%eax 2851 lpResults->lStructSize, lpResults->lpOutString, lpResults->lpOrder,
GetCharacterPlacementW is dereferencing the pointer lpResults, which is NULL.