[Bug 32082] New: CCleaner 3.x installer crashes at the same point (not fully reproducible)

http://bugs.winehq.org/show_bug.cgi?id=32082

Bug #: 32082
           Summary: CCleaner 3.x installer crashes at the same point (not
                    fully reproducible)
           Product: Wine
           Version: 1.5.15
          Platform: x86
               URL: http://www.piriform.com/ccleaner/download/standard
        OS/Version: Linux
            Status: UNCONFIRMED
          Keywords: download, regression
          Severity: normal
          Priority: P2
         Component: shell32
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
                CC: [e-mail]
    Classification: Unclassified
   Regression SHA1: 40b01c1bfc6635775c2a13485d31340062423356

Created attachment 42296
  --> http://bugs.winehq.org/attachment.cgi?id=42296
terminal output

ccsetup324.exe
md5: 63871c34f72f2f1f2fba4b5397686abb

I came across the problem when attempting to install the freeware version of
CCleaner v3.24 in Wine 1.5.16. I downloaded the installer (ccsetup324.exe) in
my ~/Desktop directory and launched the installer from that location. I can get
past the first couple of screens (language selection, EULA, install options),
but Wine crashes before the next page could appear(where the installer offers
to also install Google Chrome).
What's odd is that the crash happens only when the installer is launched from
certain directories in my /home. Such example is ~/Desktop or the root of my
/home.
Most of the directories in my /home don't trigger the crash and the installer
can get past that screen without crashing.
I must add that the crashes are consistent: launching the installer from a
certain directory always results in the crash.

If I start the installer with
WINEDEBUG=warn+heap wine ccsetup324.exe
then the crash doesn't happen and the following message is added to the
terminal output (just before the problematic screen appears):
> err:heap:HEAP_ValidateInUseArena Heap 0x110000: block 0x123f70 tail overwritten at 0x123fc0 (byte 0/8 == 0x00)

I found that the problem didn't occur with Wine 1.5.14, and reverting the
following commit on 1.5.16 resolves the crash:
40b01c1bfc6635775c2a13485d31340062423356 is the first bad commit
commit 40b01c1bfc6635775c2a13485d31340062423356
Author: Francois Gouget 
Date:   Tue Oct 9 00:13:48 2012 +0200

shell32: Fix CommandLineToArgvW()'s handling of the executable path and
consecutive quotes.

:040000 040000 80681ab2280bbf6961596fa154197351ef701bb8
fec0ca22e484112ceff0aefdff9f7991fc3a12e2 M    dlls

Let me know if you need further logs with specific debug channels enabled (in
case you can't reproduce the problem)

Fedora 17
gcc version 4.7.2 20120921 (Red Hat 4.7.2-2) (GCC)