[Bug 2903] Unhandled exception: page fault on read access to 0x00000000 in 32-bit code (0x40753508).

[Wine Bugs]

http://bugs.winehq.org/show_bug.cgi?id=2903

------- Additional Comments From [e-mail]  2007-14-06 01:28 -------
This piece of code in WINPROC_CallProc16To32A
    case WM_CREATE:
        {
            CREATESTRUCT16 *cs16 = MapSL(lParam);
            CREATESTRUCTA cs;
            MDICREATESTRUCTA mdi_cs;

CREATESTRUCT16to32A( cs16, &cs );

calls CREATESTRUCT16to32A (which crashes)
    static void CREATESTRUCT16to32A( const CREATESTRUCT16* from,
                                     CREATESTRUCTA *to )
    {
        to->lpCreateParams = (LPVOID)from->lpCreateParams; /* CRASH */

which means that on this line cs16 is assigned NULL:
            CREATESTRUCT16 *cs16 = MapSL(lParam);

Where can I get a demo that exhibits this problem?