[Bug 4452] New: Riched20: Evernote crashes with Unhandled page fault

[Wine Bugs]

http://bugs.winehq.org/show_bug.cgi?id=4452

Summary: Riched20: Evernote crashes with Unhandled page fault
           Product: Wine
           Version: CVS
          Platform: PC
               URL: http://www.evernote.com/en/
        OS/Version: Linux
            Status: NEW
          Keywords: regression, download
          Severity: normal
          Priority: P2
         Component: wine-richedit
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

Hi, Evernote currently needs native riched20 to start up smoothly. With builtin
it crashes like here below. Steps to reproduce:
1. Start the installer from the website above.
2. Choose "Custom" install
3. Deselect (!) the option "Install Web Clipper extension Tool in Internet
Explorer (otherwise the installation will fail)
4. Start Evernote, and click ok on the popup window that asks to look for upgrades.

The crash:

wine: Unhandled page fault on read access to 0x0000000c at address 0x7e52f878
(thread 002e), starting debugger...
WineDbg starting on pid 0x26
Unhandled exception: page fault on read access to 0x0000000c in 32-bit code
(0x7e52f878).
In 32 bit mode.
Register dump:
 CS:0073 SS:007b DS:007b ES:007b FS:003b GS:0033
 EIP:7e52f878 ESP:7fc87414 EBP:7fc87438 EFLAGS:00210206(   - 00      - RIP1)
 EAX:00000000 EBX:7e549358 ECX:00000001 EDX:00000000
 ESI:00000050 EDI:00000002
Stack dump:
0x00000000:  00000000 00000000 00000000 00000000
0x00000010:  00000000 00000000 00000000 00000000
0x00000020:  00000000 00000000 00000000 00000000
0x00000030:  00000000 00000000 00000000 00000000
0x00000040:  00000000 00000000 00000000 00000000
0x00000050:  00000000 00000000 00000000 00000000
Backtrace:
=>1 0x7e52f878 ME_DestroyEditor+0xc(editor=0x0)
[/LFS/winecvs/wine/dlls/riched20/editor.c:965] in riched20 (0x7e52f878)
  2 0x7e52fcf2 RichEditANSIWndProc+0xaa(hWnd=0x0, msg=0x2, wParam=0x0,
lParam=0x0) [/LFS/winecvs/wine/dlls/riched20/editor.c:1822] in riched20 (0x7e52fcf2)
  3 0x7fb10506 WINPROC_wrapper in user32 (0x7fb10506)
  4 0x7fb108ce WINPROC_CallWndProc(msg=0x2, wParam=0x0, lParam=0x0)
[/LFS/winecvs/wine/dlls/user/winproc.c:418] in user32 (0x7fb108ce)
  5 0x7fb15c5f CallWindowProcW(func=0x7e52fc48, hwnd=0x0, msg=0x2, wParam=0x0,
lParam=0x0) [/LFS/winecvs/wine/dlls/user/winproc.c:3328] in user32 (0x7fb15c5f)
fixme:dbghelp:sffip_cb NIY on
'D:\Projects\EverNote\Src\enwin\ENTape\Release\ENTape.pdb'
  6 0x004225e1 in evernote (+0x225e1) (0x004225e1)
  7 0x7fb10506 WINPROC_wrapper+0x1a in user32 (0x7fb10506)
  8 0x7fb108ce WINPROC_CallWndProc+0x5e(msg=0x2, wParam=0x0, lParam=0x0)
[/LFS/winecvs/wine/dlls/user/winproc.c:418] in user32 (0x7fb108ce)
  9 0x7fb15c5f CallWindowProcW(func=0x7fc8e51c, hwnd=0x1101ac, msg=0x2,
wParam=0x0, lParam=0x0) [/LFS/winecvs/wine/dlls/user/winproc.c:3328] in user32
(0x7fb15c5f)
  10 0x7fae6afd call_window_proc+0xc1(wparam=0x0, lparam=0x0, unicode=0x1,
same_thread=0x1) [/LFS/winecvs/wine/dlls/user/message.c:1516] in user32 (0x7fae6afd)
  11 0x7fae6efa SendMessageTimeoutW+0x14a(hwnd=0x1101ac, msg=0x2, wparam=0x0,
lparam=0x0, flags=0x0, timeout=0x0, res_ptr=0x7fc8e334)
[/LFS/winecvs/wine/dlls/user/message.c:2350] in user32 (0x7fae6efa)
  12 0x7fae6f37 SendMessageW(hwnd=0x1101ac, msg=0x2, wparam=0x0, lparam=0x0)
[/LFS/winecvs/wine/dlls/user/message.c:2431] in user32 (0x7fae6f37)
  13 0x7fb08f9c WIN_SendDestroyMsg [/LFS/winecvs/wine/dlls/user/win.c:1294] in
user32 (0x7fb08f9c)
  14 0x7fb09040 WIN_SendDestroyMsg [/LFS/winecvs/wine/dlls/user/win.c:1303] in
user32 (0x7fb09040)
  15 0x7fb0a1e0 DestroyWindow+0x178(hwnd=0x1301a6)
[/LFS/winecvs/wine/dlls/user/win.c:1394] in user32 (0x7fb0a1e0)
  16 0x7fabe760 DIALOG_DoDialogBox(hwnd=0x1301a6, owner=0xb0192)
[/LFS/winecvs/wine/dlls/user/dialog.c:764] in user32 (0x7fabe760)
  17 0x7fabfd10 DialogBoxParamW(hInst=0x400000, name=0x17de, owner=0xb0192,
dlgProc=0x42279d, param=0x0) [/LFS/winecvs/wine/dlls/user/dialog.c:799] in
user32 (0x7fabfd10)
  18 0x0042ed03 in evernote (+0x2ed03) (0x0042ed03)
  19 0x0042ec81 in evernote (+0x2ec81) (0x0042ec81)
  20 0x0042ebdf in evernote (+0x2ebdf) (0x0042ebdf)
  21 0x0043170f in evernote (+0x3170f) (0x0043170f)
  22 0x00000000 (0x00000000)
0x7e52f878 ME_DestroyEditor+0xc [/LFS/winecvs/wine/dlls/riched20/editor.c:965]
in riched20: movl        0xc(%edx),%eax
965       ME_DisplayItem *pFirst = editor->pBuffer->pFirst;
Modules:
Module  Address                 Debug info      Name (90 modules)
PE      0x00400000-005f9000     Export          evernote
PE      0x00400000-005f9000     Export          evernote
ELF     0x00842000-0085a000     Deferred        ld-linux.so.2