http://bugs.winehq.org/show_bug.cgi?id=9612
--- Comment #20 from knan-wine@anduin.net 2008-06-05 13:00:12 --- The crash has moved a bit, but there's still a running-out-of-address-space OOM crash, yes.
Inside RtlSizeHeap today. Something ends up passing a null pointer as the third argument to RtlSizeHeap, and RtlSizeHeap crashes. That's probably another minor bug in itself, RtlSizeHeap is documented in the comments as returning -1 in that case.
Tested with today's git, post-rc3.