[Bug 29280] New: todolist crashes after using LVM_GETHEADER

http://bugs.winehq.org/show_bug.cgi?id=29280

Bug #: 29280
           Summary: todolist crashes after using LVM_GETHEADER
           Product: Wine
           Version: 1.3.34
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: comctl32
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

http://forum.winehq.org/viewtopic.php?t=14277 asked for help running
todolist ( http://www.abstractspoon.com/ ).
To run at all, it needs 'winetricks mfc42'.
Using wine-1.3.34-166-g71199ea, it then crashes with a null pointer access
unless you do 'winetricks comctl32'.

Here's the last bit of a +relay log of the crash:

002b:Call window proc 0x68aa7480
(hwnd=0x101f4,msg=LVM_GETHEADER,wp=00000000,lp=00000000)
002b:Call user32.GetWindowLongW(000101f4,00000000) ret=68aa74a5
002b:Ret  user32.GetWindowLongW() retval=0020e898 ret=68aa74a5
002b:Ret  window proc 0x68aa7480
(hwnd=0x101f4,msg=LVM_GETHEADER,wp=00000000,lp=00000000) retval=00000000
002b:Ret  user32.CallWindowProcW() retval=00000000 ret=5f801d93
002b:Ret  window proc 0x5f801868
(hwnd=0x101f4,msg=LVM_GETHEADER,wp=00000000,lp=00000000) retval=00000000
002b:Ret  user32.SendMessageW() retval=00000000 ret=5f856753
trace:seh:raise_exception code=c0000005 flags=0 addr=0x417294 ip=00417294
tid=002b
...
Unhandled exception: page fault on read access to 0x00000020 in 32-bit code
(0x00417294).