[Bug 28746] New: use-after-free in acmDriverClose?

http://bugs.winehq.org/show_bug.cgi?id=28746

Bug #: 28746
           Summary: use-after-free in acmDriverClose?
           Product: Wine
           Version: 1.3.30
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: msacm32
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

valgrind complains:

Invalid read of size 4
   at MSACM_GetObj (internal.c:821)
   by MSACM_GetDriver (internal.c:839)
   by acmDriverClose (driver.c:195)
   by DriverEnumProc (msacm.c:374)
   by acmDriverEnum (driver.c:345)
   by func_msacm (msacm.c:485)
   by run_test (test.h:556)
   by main (test.h:624)
 Address 0x7f230a08 is 0 bytes inside a block of size 20 free'd
   at notify_free (heap.c:262)
   by RtlFreeHeap (heap.c:1748)
   by acmDriverClose (driver.c:218)
   by DriverEnumProc (msacm.c:368)
   by acmDriverEnum (driver.c:345)
   by func_msacm (msacm.c:485)
   by run_test (test.h:556)
   by main (test.h:624)