[Bug 6054] New: MSN Messenger crashes due to missing BSTR length field

[Wine Bugs]

http://bugs.winehq.org/show_bug.cgi?id=6054

Summary: MSN Messenger crashes due to missing BSTR length field
           Product: Wine
           Version: CVS
          Platform: PC
        OS/Version: All
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: wine-ole
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

Just after the main window appears I get a page fault due to the following:

trace:variant:VariantCopy (0x32fba4->(VT_EMPTY),0x32fc5c->(VT_BSTR))
Src=L"about:blank"
trace:variant:VariantClear (0x32fba4->(VT_EMPTY))
trace:ole:SysStringByteLen (0xef9168 = L"about:blank") -> length = 4543317
trace:ole:SysAllocStringByteLen (L"about:blank", 4543317)
wine: Unhandled page fault on read access to 0x00f71000 at address 0xb7d0e98c
(thread 0009), starting debugger...

The BSTR does not contain the length. But I don't know where it is coming from.