http://bugs.winehq.org/show_bug.cgi?id=4430
------- Additional Comments From dank@kegel.com 2006-28-01 14:30 ------- And, for completeness, here are a few lines from WINEDEBUG=+bitblt from right before the crash:
trace:bitblt:PatBlt 0x740 0,0 337x126 f00021 trace:bitblt:BITBLT_InternalStretchBlt rectdst=0,0-337,126 orgdst=33,41 trace:bitblt:BITBLT_InternalStretchBlt vissrc=none visdst=0,0-337,126 trace:bitblt:GdiAlphaBlend 0x1ce0 0,0 32x32 -> 0x740 1,1 32x32 op=00 flags=00 srcconstalpha=ff alphafmt=01
Running under winedbg yields a bit more info; the stack trace has memcpy on it:
First chance exception: page fault on read access to 0x7c8d1000 in 32-bit code (0x002464dc). Register dump: CS:0073 SS:007b DS:007b ES:007b FS:003b GS:0033 EIP:002464dc ESP:7b93cd74 EBP:7b93cf30 EFLAGS:00010212( - 00 - RIA1) EAX:00000001 EBX:7cbd446c ECX:00000020 EDX:00000020 ESI:7c8d1000 EDI:7bcbc558 Stack dump: 0x00000000: 00000000 00000000 00000000 00000000 0x00000010: 00000000 00000000 00000000 00000000 0x00000020: 00000000 00000000 00000000 00000000 0x00000030: 00000000 00000000 00000000 00000000 0x00000040: 00000000 00000000 00000000 00000000 0x00000050: 00000000 00000000 00000000 00000000 Backtrace: =>1 0x002464dc memcpy+0x1c in libc.so.6 (0x002464dc) 2 0x7b79ac73 GdiAlphaBlend+0x9b(hdcDst=0x740, xDst=0x1, yDst=0x1, widthDst=0x20, heightDst=0x20, hdcSrc=0x1cfc, xSrc=0x0, ySrc=0x0, widthSrc=0x20, heightSrc=0x20, blendFunction=0x1ff0000) [/home/dank/wine/dlls/gdi/bitblt.c:457] in gdi32 (0x7b79ac73) ... 0x002464dc memcpy+0x1c in libc.so.6: repe movsl (%esi),%es:(%edi)
According to winedbg, this is the first call to GdiAlphaBlend. Oddly, if I set a breakpoint on GdiAlphaBlend, and then hit "n" to step, the program exits. Hrm.
That's all the looking I can do for a while, I think.