[Bug 24895] New: msxml4 installer crashes in 2nd dialog in msi_dialog_create_radiobutton

http://bugs.winehq.org/show_bug.cgi?id=24895

Summary: msxml4 installer crashes in 2nd dialog in
                    msi_dialog_create_radiobutton
           Product: Wine
           Version: 1.3.5
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: msi
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

"winetricks -q msxml4" works fine, but "winetricks msxml4" now crashes on 2nd
dialog with:

Executing wine msiexec /i /home/dank/.winetrickscache/msxml4sp3/msxml.msi
...
fixme:msi:msi_unimplemented_action_stub MigrateFeatureStates -> 1 ignored
L"Upgrade" table values
wine: Unhandled page fault on read access to 0x00000000 at address 0x7ef0ae3b
(thread 0036), starting debugger...
Backtrace:
=>0 msi_dialog_create_radiobutton+0xab(rec=0x13a500, param=0x32f488)
[dlls/msi/../../include/wine/unicode.h:216] in msi
  1 MSI_IterateRecords+0x89(view=0x139f58, count=0x0(nil), func=0x7ef0ad90,
param=0x32f488) [dlls/msi/msiquery.c:193] in msi
  2 msi_dialog_radiogroup_control+0x236(dialog=0x15ab20, rec=0x14dfb0)
[dlls/msi/dialog.c:2054] in msi
  3 msi_dialog_create_controls+0x81(rec=0x14dfb0, param=0x15ab20)
[dlls/msi/dialog.c:3098] in msi
  4 MSI_IterateRecords+0x89(view=0x163310, count=0x0(nil), func=0x7ef03430,
param=0x15ab20) [dlls/msi/msiquery.c:193] in msi
  5 MSIDialog_WndProc+0xc16(hwnd=0x90028, msg=0x0001, wParam=0,
lParam=0x32fac4) [dlls/msi/dialog.c:3126] in msi
...

msi_dialog_create_radiobutton+0xab [dlls/msi/../../include/wine/unicode.h:216]
in msi: cmpw      0x0(%ecx),%ax                                                 
216         while (*str1 && (*str1 == *str2)) { str1++; str2++; }