[Bug 17324] Lotus Notes Client 6.5.5 crashed

http://bugs.winehq.org/show_bug.cgi?id=17324

--- Comment #74 from Toralf Förster   2010-03-08 07:42:28 ---
Created an attachment (id=26692)
 --> (http://bugs.winehq.org/attachment.cgi?id=26692)
another creash trace example

This is another example of a Lotus Notes calendar invitation I got where LN
crashes as soon as I click on "Request information".

The trace is made of wine-1.1.40 with this patch :

tfoerste@n22 ~/devel/wine-git $ git diff
diff --git a/dlls/usp10/usp10.c b/dlls/usp10/usp10.c
index 28984e0..fcbedb1 100644
--- a/dlls/usp10/usp10.c
+++ b/dlls/usp10/usp10.c
@@ -558,6 +558,7 @@ HRESULT WINAPI ScriptItemize(const WCHAR *pwcInChars, int
cInChars, int cMaxItem

for (cnt=1; cnt < cInChars; cnt++)
     {
+       TRACE("debug: Index=%d cnt=%d iCharPos=%d\n", index, cnt,
pItems[index].iCharPos);
         if  (pwcInChars[cnt] == '\r')
             New_Script = Script_CR;
         else
@@ -605,6 +606,7 @@ HRESULT WINAPI ScriptItemize(const WCHAR *pwcInChars, int
cInChars, int cMaxItem
     TRACE("index=%d cnt=%d iCharPos=%d\n", index+1, cnt,
pItems[index+1].iCharPos);

/*  Set one SCRIPT_STATE item being returned  */
+    if  (index + 2 > cMaxItems) return E_OUTOFMEMORY;
     if (pcItems) *pcItems = index + 1;

/*  Set SCRIPT_ITEM                                     */

wine was configured with this line :

export CFLAGS="-O2 -march=native -pipe -g -ggdb"; export CXXFLAGS="$CFLAGS=";
export CC="ccache gcc"; ./configure

Before that I made a "make distclean" and for the trace a "export
WINEDEBUG=+uniscribe".