[Bug 29636] New: QQ International crash after login (riched20)

http://bugs.winehq.org/show_bug.cgi?id=29636

Bug #: 29636
           Summary: QQ International crash after login (riched20)
           Product: Wine
           Version: 1.3.37
          Platform: x86
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: richedit
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

1. Download and install qq:
http://dl_dir.qq.com/qqfile/qq/QQ2010/QQIntl1.0.exe

sha1sum:
10f67ede6b52f260257d2217800dd2a700332f9d  QQIntl1.0.exe

2. Start QQ and login to QQ
$ cd ".wine/drive_c/Program Files/Tencent/QQIntl/Bin"
$ wine QQ.exe

3. if the password is correct, then there will be a crash without backtrace,
however, a minidump file will be generated by QQ

open the minidump file with winedbg:

Backtrace:
=>0 0x7bd59369 ME_GetOLEObjectSize+0x196(c=0x32c544, run=0xd263044,
pSize=0x32c3dc) [/home/fracting/wine-git/dlls/riched20/richole.c:1569] in
riched20 (0x0032c3a8)
  1 0x7bd5bb77 ME_GetRunSizeCommon+0x24e(c=0x32c544, para=0xd262a3c,
run=0xd263044, nLen=0x1, startx=0, pAscent=0xd263058, pDescent=0xd26305c)
[/home/fracting/wine-git/dlls/riched20/run.c:661] in riched20 (0x0032c408)
  2 0x7bd5bc7d ME_CalcRunExtent+0x7c(c=0x32c544, para=0xd262a3c, startx=0,
run=0xd263044) [/home/fracting/wine-git/dlls/riched20/run.c:697] in riched20
(0x0032c458)

winetricks riche20 will workaround for this crash, but there will be another
crash in iexplore