[Bug 30496] New: Serif WebPlus X2 and X5 crash on startup in mshtml

http://bugs.winehq.org/show_bug.cgi?id=30496

Bug #: 30496
           Summary: Serif WebPlus X2 and X5 crash on startup in mshtml
           Product: Wine
           Version: 1.5.2
          Platform: x86
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mshtml
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

Hello,

after working around bug 30495 ('winetricks -q windowscodecs') Serif WebPlus X2
crashes in mshtml:

--- snip ---
Unhandled exception: page fault on write access to 0x00000073 in 32-bit code
(0x7cc07c9b).
Register dump:
 CS:0023 SS:002b DS:002b ES:002b FS:0063 GS:006b
 EIP:7cc07c9b ESP:0033dd00 EBP:0033dd88 EFLAGS:00010246(  R- --  I  Z- -P- )
 EAX:0000000b EBX:7ccef8c8 ECX:7ccebb20 EDX:00000000
 ESI:00000000 EDI:06573800
Stack dump:
0x0033dd00:  06c3fe60 06c6d368 065738a0 00000000
0x0033dd10:  0000000d 06573800 06c3fe60 6a098c68
0x0033dd20:  0033ddb0 00000000 00010002 065737f0
0x0033dd30:  00000000 06bf5518 0033ddb0 6aece958
0x0033dd40:  06c3fe60 0033ddb0 0033ddd8 6a0a9b05
0x0033dd50:  06c3fe60 06c3fea0 00000000 00000000
Backtrace:
=>0 0x7cc07c9b fire_event+0x4a8(doc=0x6c3a9d0, eid=EVENTID_LOAD, set_event=0x1,
target=0x6c3fea0, nsevent=0x6c6d328)
[/home/focht/projects/wine/wine-git/dlls/mshtml/htmlevent.c:1068] in mshtml
(0x0033dd88)
  1 0x7cc5bcf0 handle_load+0x281(iface=0x6c31930, event=0x6c6d328)
[/home/focht/projects/wine/wine-git/dlls/mshtml/nsevents.c:271] in mshtml
(0x0033ddd8)
  2 0x6a06cc96 in xul (+0x42cc95) (0x06c31930)
  3 0x06c31918 (0x7ccedf14)
  4 0x7cc5b4ba nsDOMEventListener_QueryInterface+0x1c2(iface=0x7cc5ba6e,
riid=0x7cc5b2f7, result=0x7cc5b4ba)
[/home/focht/projects/wine/wine-git/dlls/mshtml/nsevents.c:101] in mshtml
(0x7cc5b2f7)
  5 0x7cc5b572 nsDOMEventListener_AddRef+0xb7(iface=0x7cc5b2f7)
[/home/focht/projects/wine/wine-git/dlls/mshtml/nsevents.c:111] in mshtml
(0x7cc5b2f7)
  6 0x7cc5ba6e handle_docobj_load+0x208(doc=0x7cc5b4ba)
[/home/focht/projects/wine/wine-git/dlls/mshtml/nsevents.c:228] in mshtml
(0x7cc5b2f7)
  7 0x7cc5b2f7 impl_from_nsIDOMEventListener+0x7(iface=0x7cc5b572)
[/home/focht/projects/wine/wine-git/dlls/mshtml/nsevents.c:77] in mshtml
(0x7cc5b2f7)
  8 0x7cc5b4ba nsDOMEventListener_QueryInterface+0x1c2(iface=0x7cc5bd0f,
riid=(nil), result=(nil))
[/home/focht/projects/wine/wine-git/dlls/mshtml/nsevents.c:101] in mshtml
(0x7cc5b2f7)
  9 0x7cc5b572 nsDOMEventListener_AddRef+0xb7(iface=(nil))
[/home/focht/projects/wine/wine-git/dlls/mshtml/nsevents.c:111] in mshtml
(0x7cc5b2f7)
  10 0x7cc5bd0f handle_load+0x2a0(iface=(nil), event=(nil))
[/home/focht/projects/wine/wine-git/dlls/mshtml/nsevents.c:276] in mshtml
(0x7cc5b2f7)
  11 0x00000000 (0x7cc5b2f7)
0x7cc07c9b fire_event+0x4a8
[/home/focht/projects/wine/wine-git/dlls/mshtml/htmlevent.c:1068] in mshtml:
movl    %edx,0x68(%eax)
1068        doc->basedoc.window->event = prev_event;
--- snip ---

Some time ago I tested the X5 version and remembered a similar crash.
Indeed the same problem.

====
X2
====

Download: http://www.softwareload.de/shop/downloadext/free/link/lid/33282/

$ du -sh 57723_Serif_Web_Plus_X2_Demo.zip 
289M    57723_Serif_Web_Plus_X2_Demo.zip

$ sha1sum 57723_Serif_Web_Plus_X2_Demo.zip 
d82fb1d12cdd9249c7a99bff0303fc5a44773c59  57723_Serif_Web_Plus_X2_Demo.zip

$ sha1sum DE-TRL-TO-WPX2-1008-Setup.exe 
9c3a53157729b6e2b0f7c16955e7a909fbfa4af0  DE-TRL-TO-WPX2-1008-Setup.exe

====
X5
====

Download: http://www.softwareload.de/shop/downloadext/free/link/lid/39145/

$ du -sh WebPlus-X5_DEMO_SWL.zip 
372M    WebPlus-X5_DEMO_SWL.zip

$ sha1sum WebPlus-X5_DEMO_SWL.zip 
3cae247b1e0ebc5c8c8abd5bb25abd08297810bf  WebPlus-X5_DEMO_SWL.zip

$ sha1sum DE-TRL-TO-WPX5-0611-Setup.exe 
7592e63351035c4ec067c6443524f49384d1f2a2  DE-TRL-TO-WPX5-0611-Setup.exe

$ wine --version
wine-1.5.2-191-gd080774

Regards