https://bugs.winehq.org/show_bug.cgi?id=32316
--- Comment #31 from Esme Povirk madewokherd@gmail.com --- Before the crash, we get a NullReferenceException in System.Windows.Forms.Control/ActiveXImpl.SetClientSite. It turns out this is caused by an attempt to cast a null object to bool. The null object comes from GetAmbientProperty, which gets it from winforms' UnsafeNativeMethods.IDispatch interface, which uses this:
6936 [Out, MarshalAs(UnmanagedType.LPArray)] 6937 object[] pVarResult,
So, I'm guessing this should marshal as a VARIANT array, and Mono is getting it wrong somehow.