http://bugs.winehq.org/show_bug.cgi?id=27090
--- Comment #20 from Sami Aario saempylae@gmail.com 2012-07-07 16:36:53 CDT --- It looks like it could be a buffer overflow. If you look at Jerome's log in Attachment 34595, line 38396 reads:
0017:trace:wininet:refill_read_buffer read 4344 bytes, read_size 11584
This is right before the unhandled exception occurs. Looking at the relevant code, refill_read_buffer in http.c uses req->read_buf, which has a size defined as READ_BUFFER_SIZE == 8192 in internet.h
I went through the log and all the other refill_read_buffer traces I looked at had a read_size <= 8192. Not the final word, but I did look at a lot of them.
I can't investigate this further right now, so please take a look if you want.