http://bugs.winehq.org/show_bug.cgi?id=22607
--- Comment #7 from Nikolay Sivov bunglehead@gmail.com 2010-10-25 13:42:00 CDT --- No, I don't think it's a XSLPattern crash, but still showed fixme should be fixed probably.
The reason it crashes is another case when developers ignore arguments type.
--- trace:msxml:domdoc_createProcessingInstruction (0x14a570)->(L"xml" L"version="1.0" encoding="UTF-8"" 0x32ec80) ... =>0 0x7ecd26cf SysAllocStringByteLen+0x5f(str="", len=0x8455355) ---
Processing instruction body passed as WCHAR string instead of be properly allocated BSTR.
This could be verified with tracing passed pointer and +relay to catch all SysAllocString() return values.
Fix is simple, already done for some methods with tests.