http://bugs.winehq.org/show_bug.cgi?id=22875
--- Comment #4 from Philip Nilsson leffeman@gmail.com 2010-05-26 04:09:43 --- I'm running wine-1.2-rc1-51-gab11102.
By the way, the last function called before the crash is GetGlyphOutlineA, I can't remember if that is where the zero comes from though.