http://bugs.winehq.org/show_bug.cgi?id=2796
Summary: Wine crashes when using Combobox from riched20 Product: Wine Version: 20050310 Platform: Other OS/Version: Linux Status: UNCONFIRMED Severity: major Priority: P2 Component: wine-gui AssignedTo: wine-bugs@winehq.org ReportedBy: mteske@imagnos.com
This crash haoppens reproducable. The gui element is a Combobox (Text entry with attached pulldown menu). Crash happens when releasing mouse button to select. The entry then shows a Paragraph character (mirrored "P").
Here's the stack trace:
wine: Unhandled exception (thread 0015), starting debugger... WineDbg starting on pid 0x14 Unhandled exception: page fault on write access to 0x0000009c in 32-bit code (0x 4007088c). In 32 bit mode. Register dump: CS:0023 SS:002b DS:002b ES:002b FS:003b GS:0033 EIP:4007088c ESP:406cd170 EBP:406cd188 EFLAGS:00010206( - 00 - RIP1) EAX:422c004c EBX:400a4384 ECX:406cd178 EDX:00000090 ESI:422c0000 EDI:00000018 Stack dump: 0x406cd170: 00000000 422c0000 422c0000 422b8410 0x406cd180: 00000010 0000044b 406cdbd0 422a3a89 0x406cd190: 422c0000 00000002 00000012 406cd270 0x406cd1a0: 00000001 406cd248 406cd180 422c0098 0x406cd1b0: 00000001 00000000 00000000 406cd1d0 0x406cd1c0: 00000001 406cd2b4 4006c92c 40071c60 Backtrace: =>1 0x4007088c RtlAllocateHeap(heap=0x422c0000, flags=0x2, size=0x12) [heap.c:11 63] in ntdll (0x406cd188) 2 0x422a3a89 RichEditANSIWndProc+0x1561(hWnd=0x40022, msg=0x44b, wParam=0x0, l Param=0x406ce4a0) [/home/mteske/src/wine-20050310/dlls/riched20/editor.c:694] in riched20 (0x406cdbd0) 3 0x422a26ea RichEditANSIWndProc(hWnd=0x40022, msg=0xd, wParam=0x11, lParam=0x 412d9f68) [editor.c:683] in riched20 (0x406ce61c) 4 0x4074cd9f WINPROC_wrapper+0x17 in user32 (0x406ce640) 5 0x4074d094 WINPROC_CallWndProc+0x54(proc=0x422a2528, hwnd=0x40022, msg=0xd, wParam=0x11, lParam=0x412d9f68) [/home/mteske/src/wine-20050310/dlls/user/../../ windows/winproc.c:420] in user32 (0x406ce66c) 6 0x407524b1 CallWindowProcA(func=0x422a2528, hwnd=0x40022, msg=0xd, wParam=0x 11, lParam=0x412d9f68) [/home/mteske/src/wine-20050310/dlls/user/../../windows/w inproc.c:3240] in user32 (0x406ce6a0) 7 0x5f401f01 Lq@`a@+0x5a5 in mfc42 (0x406ce6c0) 8 0x5f401b16 Lq@`a@+0x1ba in mfc42 (0x406ce6dc) 9 0x5f401a88 Lq@`a@+0x12c in mfc42 (0x406ce73c) 10 0x5f401a10 Lq@`a@+0xb4 in mfc42 (0x406ce758) 11 0x5f4019cf Lq@`a@+0x73 in mfc42 (0x406ce784) 12 0x4074cd9f WINPROC_wrapper+0x17 in user32 (0x406ce7a8) 13 0x4074d094 WINPROC_CallWndProc+0x54(proc=0x5f401996, hwnd=0x40022, msg=0xd, wParam=0x11, lParam=0x412d9f68) [/home/mteske/src/wine-20050310/dlls/user/../.. /windows/winproc.c:420] in user32 (0x406ce7d4) 14 0x407524b1 CallWindowProcA(func=0x5f401996, hwnd=0x40022, msg=0xd, wParam=0 x11, lParam=0x412d9f68) [/home/mteske/src/wine-20050310/dlls/user/../../windows/ winproc.c:3240] in user32 (0x406ce808) 15 0x4077ce44 call_window_proc+0x110(hwnd=0x40022, msg=0xd, wparam=0x11, lpara m=0x412d9f68, unicode=0x0, same_thread=0x1) [/home/mteske/src/wine-20050310/dlls /user/message.c:1513] in user32 (0x406ce864) 16 0x4077e68d SendMessageTimeoutA+0x189(hwnd=0x40022, msg=0xd, wparam=0x11, lp aram=0x412d9f68, flags=0x0, timeout=0xffffffff, res_ptr=0x406ce8f4) [/home/mtesk e/src/wine-20050310/dlls/user/message.c:2385] in user32 (0x406ce8d0) 17 0x4077e731 SendMessageA(hwnd=0x40022, msg=0xd, wparam=0x11, lparam=0x412d9f 68) [/home/mteske/src/wine-20050310/dlls/user/message.c:2429] in user32 (0x406ce 8fc) 18 0x4074942e GetWindowTextA(hwnd=0x40022, lpString=0x412d9f68, nMaxCount=0x11 ) [/home/mteske/src/wine-20050310/dlls/user/../../windows/win.c:2355] in user32 (0x406ce920) 19 0x5f403504 Lq@`a@+0x4c2 in mfc42 (0x406ce954) 20 0x5f40228d Lq@`a@+0x25e in mfc42 (0x406ce964) 21 0x5f4021e6 Lq@`a@+0x1b7 in mfc42 (0x406ce994) 22 0x5f40230b Lq@`a@+0x2dc in mfc42 (0x406ce9bc) 23 0x5f4022db Lq@`a@+0x2ac in mfc42 (0x406ce9d8) 24 0x5f4022b8 Lq@`a@+0x289 in mfc42 (0x406cea50) 25 0x5f402acc Lq@`a@+0xa9d in mfc42 (0x406cea98) 26 0x5f401be1 Lq@`a@+0x285 in mfc42 (0x406ceb18) 27 0x5f401aff Lq@`a@+0x1a3 in mfc42 (0x406ceb38) 28 0x5f401a88 Lq@`a@+0x12c in mfc42 (0x406ceb98) 29 0x5f401a10 Lq@`a@+0xb4 in mfc42 (0x406cebb4) 30 0x5f4019cf Lq@`a@+0x73 in mfc42 (0x406cebe0) 31 0x4074cd9f WINPROC_wrapper+0x17 in user32 (0x406cec04) 32 0x4074d094 WINPROC_CallWndProc+0x54(proc=0x5f401996, hwnd=0x5005e, msg=0x11 1, wParam=0x3008000, lParam=0x40022) [/home/mteske/src/wine-20050310/dlls/user/. ./../windows/winproc.c:420] in user32 (0x406cec30) 33 0x407524b1 CallWindowProcA(func=0x5f401996, hwnd=0x5005e, msg=0x111, wParam =0x3008000, lParam=0x40022) [/home/mteske/src/wine-20050310/dlls/user/../../wind ows/winproc.c:3240] in user32 (0x406cec64) 34 0x4077ce44 call_window_proc+0x110(hwnd=0x5005e, msg=0x111, wparam=0x3008000 , lparam=0x40022, unicode=0x0, same_thread=0x1) [/home/mteske/src/wine-20050310/ dlls/user/message.c:1513] in user32 (0x406cecc0) 35 0x4077e68d SendMessageTimeoutA+0x189(hwnd=0x5005e, msg=0x111, wparam=0x3008 000, lparam=0x40022, flags=0x0, timeout=0xffffffff, res_ptr=0x406ced50) [/home/m teske/src/wine-20050310/dlls/user/message.c:2385] in user32 (0x406ced2c) 36 0x4077e731 SendMessageA(hwnd=0x5005e, msg=0x111, wparam=0x3008000, lparam=0 x40022) [/home/mteske/src/wine-20050310/dlls/user/message.c:2429] in user32 (0x4 06ced58) 37 0x422a402e ME_SendOldNotify(editor=0x422c0098, nCode=0x300) [/home/mteske/s rc/wine-20050310/dlls/riched20/editor.c:846] in riched20 (0x406ced7c) 38 0x422a4e53 ME_UpdateRepaint(editor=0x422c0098) [paint.c:169] in riched20 (0 x406ced94) 39 0x422a2819 RichEditANSIWndProc(hWnd=0x40022, msg=0xc2, wParam=0x0, lParam=0 x41fe1190) [editor.c:598] in riched20 (0x406cf7d4) 40 0x4074cd9f WINPROC_wrapper in user32 (0x406cf7f8) 41 0x4074d094 WINPROC_CallWndProc(proc=0x422a2528, hwnd=0x40022, msg=0xc2, wPa ram=0x0, lParam=0x41fe1190) [/home/mteske/src/wine-20050310/dlls/user/../../wind ows/winproc.c:420] in user32 (0x406cf824) 42 0x407524b1 CallWindowProcA(func=0x422a2528, hwnd=0x40022, msg=0xc2, wParam= 0x0, lParam=0x41fe1190) [/home/mteske/src/wine-20050310/dlls/user/../../windows/ winproc.c:3240] in user32 (0x406cf858) 43 0x5f401f01 Lq@`a@+0x5a5 in mfc42 (0x406cf878) 44 0x5f401b16 Lq@`a@+0x1ba in mfc42 (0x406cf894) 45 0x5f401a88 Lq@`a@+0x12c in mfc42 (0x406cf8f4) 46 0x5f401a10 Lq@`a@+0xb4 in mfc42 (0x406cf910) 47 0x5f4019cf Lq@`a@+0x73 in mfc42 (0x406cf93c) 48 0x4074cd9f WINPROC_wrapper+0x17 in user32 (0x406cf960) 49 0x4074d094 WINPROC_CallWndProc+0x54(proc=0x5f401996, hwnd=0x40022, msg=0xc2 , wParam=0x0, lParam=0x41fe1190) [/home/mteske/src/wine-20050310/dlls/user/../.. /windows/winproc.c:420] in user32 (0x406cf98c) 50 0x407524b1 CallWindowProcA(func=0x5f401996, hwnd=0x40022, msg=0xc2, wParam= 0x0, lParam=0x41fe1190) [/home/mteske/src/wine-20050310/dlls/user/../../windows/ winproc.c:3240] in user32 (0x406cf9c0) 51 0x4077ce44 call_window_proc+0x110(hwnd=0x40022, msg=0xc2, wparam=0x0, lpara m=0x41fe1190, unicode=0x0, same_thread=0x1) [/home/mteske/src/wine-20050310/dlls /user/message.c:1513] in user32 (0x406cfa1c) 52 0x4077e68d SendMessageTimeoutA+0x189(hwnd=0x40022, msg=0xc2, wparam=0x0, lp aram=0x41fe1190, flags=0x0, timeout=0xffffffff, res_ptr=0x406cfaac) [/home/mtesk e/src/wine-20050310/dlls/user/message.c:2385] in user32 (0x406cfa88) 53 0x4077e731 SendMessageA(hwnd=0x40022, msg=0xc2, wparam=0x0, lparam=0x41fe11 90) [/home/mteske/src/wine-20050310/dlls/user/message.c:2429] in user32 (0x406cf ab4) 54 0x005121c1 in aruser (+0x1121c1) (0x406cfad0) 55 0x005447f7 in aruser (+0x1447f7) (0x406cfc30) 56 0x5f401be1 Lq@`a@ in mfc42 (0x406cfcb0) 57 0x5f401aff Lq@`a@ in mfc42 (0x406cfcd0) 58 0x5f401a88 Lq@`a@ in mfc42 (0x406cfd30) 59 0x5f401a10 Lq@`a@ in mfc42 (0x406cfd4c) 60 0x5f4019cf Lq@`a@ in mfc42 (0x406cfd78) 61 0x4074cd9f WINPROC_wrapper in user32 (0x406cfd9c) 62 0x4074d094 WINPROC_CallWndProc(proc=0x5f401996, hwnd=0x40022, msg=0x111, wP aram=0x7, lParam=0x0) [/home/mteske/src/wine-20050310/dlls/user/../../windows/wi nproc.c:420] in user32 (0x406cfdc8) 63 0x407524b1 CallWindowProcA(func=0x407ea93c, hwnd=0x40022, msg=0x111, wParam =0x7, lParam=0x0) [/home/mteske/src/wine-20050310/dlls/user/../../windows/winpro c.c:3240] in user32 (0x406cfdfc) 64 0x4077f3ae DispatchMessageA+0xaa(msg=0x73a2f4) [/home/mteske/src/wine-20050 310/dlls/user/message.c:2907] in user32 (0x406cfe3c) 65 0x5f401328 Lq@`a@+0x2a5 in mfc42 (0x0073a2f4) 66 0x00000111 (0x00040022) 67 0x00000000 (0x00000000)