[Bug 31684] Crash in winealsa driver when exiting World of Warcraft

http://bugs.winehq.org/show_bug.cgi?id=31684

--- Comment #9 from [e-mail] 2012-09-16 17:53:42 CDT ---
The "bad free" is happening in wine/dlls/winealsa.drv/mmdevdrv.c:

static ULONG WINAPI AudioClient_Release(IAudioClient *iface)
{
    ACImpl *This = impl_from_IAudioClient(iface);
    ULONG ref;
    ref = InterlockedDecrement(&This->ref);
    TRACE("(%p) Refcount now %u\n", This, ref);
    if(!ref){
        ...

// BAD FREE HERE!!
        HeapFree(GetProcessHeap(), 0, This->local_buffer);

...
    }
    return ref;
}

0009:Call ntdll.RtlFreeHeap(00110000,00000000,001cb4a8) ret=b4906fd9
err:heap:HEAP_ValidateInUseArena Heap 0x110000: block 0x1cb4a8 tail overwritten
at 0x1d31a8 (byte 0/8 == 0x00)
0009:Ret  ntdll.RtlFreeHeap() retval=00000000 ret=b4906fd9