http://bugs.winehq.org/show_bug.cgi?id=26207
--- Comment #4 from Nikolay Sivov bunglehead@gmail.com 2011-02-22 19:21:20 CST --- It's another reference counting bug:
--- 0009:trace:msxml:domelem_Release (0x23b2b98) ref=1 0009:trace:msxml:domelem_Release (0x23b2b98) ref=0 0009:trace:msxml:xmldoc_release (0x7dec3ed8)->(0) 0009:trace:msxml:xmldoc_release freeing docptr 0x7dec3ed8 ...and after a query... 0009:trace:msxml:domdoc_createElement (0x23b2588)->(L"FILE" 0x33d798) 0009:trace:msxml:domdoc_createNode (0x23b2588)->(L"FILE" (null) 0x33d758) 0009:trace:msxml:domdoc_createNode node_type 1 0009:trace:msxml:create_node type 1 0009:trace:msxml:xmldoc_add_ref (0x7dec3ed8)->(-1218935751) ---
So xmlDoc is released while domdoc document is still here. I'll take a closer look at log tomorrow.
Is it possible to reproduce with any hardware attached to COM?