[Bug 29222] New: builtin IE crash at https://mybank.icbc.com.cn/icbc/perbank/index.jsp but doesn't crash at the English version website

http://bugs.winehq.org/show_bug.cgi?id=29222

Bug #: 29222
           Summary: builtin IE crash at
                    https://mybank.icbc.com.cn/icbc/perbank/index.jsp but
                    doesn't crash at the English version website
           Product: Wine
           Version: 1.3.33
          Platform: x86
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: -unknown
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

wine-1.3.33-310-gbf644e0

using iexplore to open https://mybank.icbc.com.cn/icbc/perbank/index.jsp,
crash.
same crash at
'https://mybank.icbc.com.cn/icbc/newperbank/main/login.jsp?injectTranName=&am...'
(the second link is a frame of the first link)

However, the English version of ICBC website doesn't cause crash:
https://mybank.icbc.com.cn/icbc/enperbank/index.jsp

Backtrace:
=>0 0x330461c7 HTMLObjectElement_QI+0x271(iface=0x23449a0, riid=0x4b6ffa4c,
ppv=0x32a900) [/home/fracting/wine-git/dlls/mshtml/htmlobject.c:427] in mshtml
(0x0032a880)
  1 0x33042268 HTMLDOMNode_QueryInterface+0x31(iface=0x23449b0,
riid=0x4b6ffa4c, ppv=0x32a900)
[/home/fracting/wine-git/dlls/mshtml/htmlnode.c:307] in mshtml (0x0032a8b0)
  2 0x3301b427 HTMLElement_QueryInterface+0x34(iface=0x23449e4,
riid=0x4b6ffa4c, ppv=0x32a900)
[/home/fracting/wine-git/dlls/mshtml/htmlelem.c:211] in mshtml (0x0032a8e0)
  3 0x4b6cfe2c iface_to_jsdisp+0x31(iface=0x23449e4)
[/home/fracting/wine-git/dlls/jscript/dispex.c:941] in jscript (0x0032a910)
  4 0x4b6d0981 disp_propget+0x3a(ctx=0x22546e0, disp=0x23449e4, id=0x800103e9,
val=0x32aa38, ei=0x1f46c10, caller=(nil))
[/home/fracting/wine-git/dlls/jscript/dispex.c:1182] in jscript (0x0032a990)
  5 0x4b6d1412 exprval_value+0xe5(ctx=0x22546e0, val=0x32aa20, ei=0x1f46c10,
ret=0x32aa38) [/home/fracting/wine-git/dlls/jscript/engine.c:175] in jscript
(0x0032a9d0)
  6 0x4b6d14f2 exprval_to_value+0x5b(ctx=0x22546e0, val=0x32aa20, ei=0x1f46c10,
ret=0x32aa38) [/home/fracting/wine-git/dlls/jscript/engine.c:192] in jscript
(0x0032a9f0)

Will attach full log

[Bug 29222] builtin IE crash at https://mybank.icbc.com.cn/icbc/perbank/index.jsp but doesn't crash at the English version website

http://bugs.winehq.org/show_bug.cgi?id=29222

--- Comment #1 from fracting  2011-12-01 23:50:38 CST ---
Created attachment 37735
  --> http://bugs.winehq.org/attachment.cgi?id=37735
Log: iexplore crash

[Bug 29222] builtin IE crash at https://mybank.icbc.com.cn/icbc/perbank/index.jsp but doesn't crash at the English version website

http://bugs.winehq.org/show_bug.cgi?id=29222

--- Comment #2 from fracting  2011-12-01 23:54:32 CST ---
Created attachment 37736
  --> http://bugs.winehq.org/attachment.cgi?id=37736
Log: +mshtml trace, iexplore crash at icbc perbank

[Bug 29222] builtin IE crash at https://mybank.icbc.com.cn/icbc/perbank/index.jsp but doesn't crash at the English version website

http://bugs.winehq.org/show_bug.cgi?id=29222

fracting  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

[Bug 29222] builtin IE crash at https://mybank.icbc.com.cn/icbc/perbank/index.jsp but doesn't crash at the English version website

http://bugs.winehq.org/show_bug.cgi?id=29222

--- Comment #3 from fracting  2011-12-02 00:05:48 CST ---
I'm sorry, the crash only occurs with the hack in Bug 29123 (
http://bugs.winehq.org/attachment.cgi?id=37722 )

Forgive me if it is invalid

[Bug 29222] builtin IE crash at https://mybank.icbc.com.cn/icbc/perbank/index.jsp but doesn't crash at the English version website

http://bugs.winehq.org/show_bug.cgi?id=29222

Jacek Caban  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |INVALID

--- Comment #4 from Jacek Caban  2011-12-02 03:48:33 CST ---
Yeah, it is caused by the hack from 29123. Resolving invalid.

[Bug 29222] builtin IE crash at https://mybank.icbc.com.cn/icbc/perbank/index.jsp but doesn't crash at the English version website

http://bugs.winehq.org/show_bug.cgi?id=29222

Jacek Caban  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #5 from Jacek Caban  2011-12-02 03:48:43 CST ---
closing