http://bugs.winehq.org/show_bug.cgi?id=18542
--- Comment #12 from Rein Klazes wijn@online.nl 2009-06-18 03:56:04 ---
Hmm, I was hoping for a WINEDEBUG=+tid,+seh,+relay,+menu trace.
Nevertheless, the menu calls are completely different from the previous, sufficient proof that it is not the menu code that causes the problem.
Now , I managed to get it running. It does not crash, probably becauseI don't stream. Yet with +heap (and a little patience) we do get a crash closing the app.
Last million of +menu,+shdocvw,+heap,+seh,+tid,+relay , lzma'd is attached.
Hilite:
0009:Ret window proc 0x4f1c24 (hwnd=0x10058,msg=WM_NCDESTROY,wp=00000000,lp=00000000) retval=00000000 0009:trace:heap:RtlFreeHeap (0x110000,00000002,0x20f8a8): returning TRUE 0009:Ret user32.DestroyWindow() retval=00000001 ret=004f153a 0009:trace:shdocvw:WebBrowser_Release (0x20f950) ref=0 0009:trace:seh:raise_exception code=c0000005 flags=0 addr=0x7d4668c2 ip=7d4668c2 tid=0009 0009:trace:seh:raise_exception info[0]=00000000 0009:trace:seh:raise_exception info[1]=aaaaaab2 0009:trace:seh:raise_exception eax=aaaaaaaa ebx=7d4841d4 ecx=00000000 edx=06c457cc esi=0020f9f0 edi=0020f950 0009:trace:seh:raise_exception ebp=0032eff4 esp=0032efdc cs=0073 ds=007b es=007b fs=0033 gs=003b flags=00010206
...
Unhandled exception: page fault on read access to 0xaaaaaab2 in 32-bit code (0x7d4668c2). Register dump: CS:0073 SS:007b DS:007b ES:007b FS:0033 GS:003b EIP:7d4668c2 ESP:0032efdc EBP:0032eff4 EFLAGS:00010206( R- -- I - -P- ) EAX:aaaaaaaa EBX:7d4841d4 ECX:00000000 EDX:06c457cc ESI:0020f9f0 EDI:0020f950 Stack dump: 0x0032efdc: 06c457cc 00000001 00000001 0032f008 0x0032efec: 7d4841d4 00000000 0032f024 7d479a9c 0x0032effc: 0020f9f0 7d48feb4 7d47fb59 7d47c34a 0x0032f00c: 0020f950 00000000 00000001 0048f5c0 0x0032f01c: 06c45570 01ab3848 0032f050 00502a20 0x0032f02c: 0020f950 389ac8c0 01ab3848 00000000 Backtrace: =>0 0x7d4668c2 DocHost_Release+0x22(This=0x20f9f0) [/home/rein/winedev/wine/dlls/shdocvw/dochost.c:534] in shdocvw (0x0032eff4) 1 0x7d479a9c WebBrowser_Release+0x5c(iface=<register EDI not in topmost frame>) [/home/rein/winedev/wine/dlls/shdocvw/webbrowser.c:161] in shdocvw (0x0032f024) 2 0x00502a20 in slingplayer (+0x102a20) (0x0032f050) 3 0x0046a416 in slingplayer (+0x6a416) (0x0032f05c) 4 0x00477a88 in slingplayer (+0x77a88) (0x0032f068) 5 0x00477c0f in slingplayer (+0x77c0f) (0x0032f074) 6 0x0048f407 in slingplayer (+0x8f407) (0x0032f090) 7 0x0048f5cf in slingplayer (+0x8f5cf) (0x0032f09c) 8 0x004f3718 in slingplayer (+0xf3718) (0x0032f130) 9 0x004ef05a in slingplayer (+0xef05a) (0x0032f150) 10 0x004f1bcb in slingplayer (+0xf1bcb) (0x0032f1b8) 11 0x004f1c5a in slingplayer (+0xf1c5a) (0x0032f1d8) 12 0x7ee2a94a WINPROC_wrapper+0x1a() in user32 (0x0032f208) 13 0x7ee2c13a call_window_proc+0x6a(hwnd=<register EDI not in topmost frame>, msg=<register ESI not in topmost frame>, wp=0, lp=0, result=0x32f2dc, arg=0x4f1c24) [/home/rein/winedev/wine/dlls/user32/winproc.c:458] in user32 (0x0032f248) 14 0x7ee30367 WINPROC_call_window+0xf7(hwnd=<register EDI not in topmost frame>, msg=2, wParam=0, lParam=0, result=0x32f2dc, unicode=1, mapping=65612) [/home/rein/winedev/wine/dlls/user32/winproc.c:2218] in user32 (0x0032f288) 15 0x7edefcd1 call_window_proc+0x91(hwnd=<register ESI not in topmost frame>, msg=<register EDI not in topmost frame>, wparam=0, lparam=0, unicode=1, same_thread=1, mapping=65612) [/home/rein/winedev/wine/dlls/user32/message.c:1634] in user32 (0x0032f2e8) 16 0x7edf4675 send_message+0x1d5(info=<register EDI not in topmost frame>, res_ptr=0x32f384, unicode=1) [/home/rein/winedev/wine/dlls/user32/message.c:2483] in user32 (0x0032f348) 17 0x7edf4b8c SendMessageW+0x4c(hwnd=0x1004c, msg=2, wparam=0, lparam=0) [/home/rein/winedev/wine/dlls/user32/message.c:2604] in user32 (0x0032f388) ...
The 'aaaaaaaa' data visible in the trace and the debugger output is the result from tracing with +heap. It shows that free'd memory is being used. It shows also that it happens in shdocvw.
Hopefully someone with knowledge of this stuff can have a look.