[Bug 2796] Wine crashes when using Combobox from riched20

[Wine Bugs]

http://bugs.winehq.org/show_bug.cgi?id=2796

------- Additional Comments From [e-mail]  2005-15-03 11:39 -------
Just re-built from cvs. SImilar result:

fixme:menu:TrackPopupMenuEx not fully implemented
fixme:powermgnt:SetThreadExecutionState (0x0): stub, harmless.
err:heap:HEAP_ValidateInUseArena Heap 422c0000: in-use arena 422c0e68 next block
has PREV_FREE flag
wine: Unhandled exception (thread 0009), starting debugger...
WineDbg starting on pid 0x8
Unhandled exception: page fault on write access to 0x00710071 in 32-bit code
(0x4006e55c).
In 32 bit mode.
Register dump:
 CS:0023 SS:002b DS:002b ES:002b FS:003b GS:0033
 EIP:4006e55c ESP:406bd0e0 EBP:406bd0f8 EFLAGS:00010206(   - 00      - RIP1)
 EAX:00650075 EBX:400a18c4 ECX:406bd0e8 EDX:00710065
 ESI:422c0e88 EDI:00000018
Stack dump:
0x406bd0e0:  00000000 422c0000 422c0000 422b0714
0x406bd0f0:  00000016 0000044b 406bdb70 422981a1
0x406bd100:  422c0000 00000002 00000018 00001a70
0x406bd110:  04090000 00000009 00000020 422c0098
0x406bd120:  00000000 406bd168 406bd148 41526711
0x406bd130:  400a18c4 406bd240 00000009 00000010
Backtrace:
=>1 0x4006e55c RtlAllocateHeap(heap=0x422c0000, flags=0x2, size=0x18)
[heap.c:1163] in ntdll (0x406bd0f8)
  2 0x422981a1 RichEditANSIWndProc+0x164d(hWnd=0x200a6, msg=0x44b, wParam=0x0,
lParam=0x406be450) [/home/mteske/src/wine-cvs/wine/dlls/riched20/editor.c:971]
in riched20 (0x406bdb70)
  3 0x42296d16 RichEditANSIWndProc(hWnd=0x200a6, msg=0xd, wParam=0x17,
lParam=0x412c9f68) [editor.c:960] in riched20 (0x406be5ec)
  4 0x4073cd1f WINPROC_wrapper+0x17 in user32 (0x406be610)
  5 0x4073d014 WINPROC_CallWndProc+0x54(proc=0x42296b54, hwnd=0x200a6, msg=0xd,
wParam=0x17, lParam=0x412c9f68)
[/home/mteske/src/wine-cvs/wine/dlls/user/../../windows/winproc.c:420] in user32
(0x406be63c)
  6 0x40742431 CallWindowProcA(func=0x42296b54, hwnd=0x200a6, msg=0xd,
wParam=0x17, lParam=0x412c9f68)
[/home/mteske/src/wine-cvs/wine/dlls/user/../../windows/winproc.c:3240] in
user32 (0x406be670)
  7 0x5f401f01 L�p@�`@+0x5a5 in mfc42 (0x406be690)
  8 0x5f401b16 L�p@�`@+0x1ba in mfc42 (0x406be6ac)
  9 0x5f401a88 L�p@�`@+0x12c in mfc42 (0x406be70c)
  10 0x5f401a10 L�p@�`@+0xb4 in mfc42 (0x406be728)

... and so on.