http://bugs.winehq.org/show_bug.cgi?id=4513
--- Comment #13 from alexd14@hushmail.com 2007-12-08 13:44:19 --- I appears it crashes within a glDrawBuffer(GL_BACK) call in IWineD3DSurfaceImpl_BltOverride (Colorfill path). That this seemingly innocent call leads to a crash, in glTexImage2D+0x266() in libgl.so.1 if winedbg doesn't lie, makes no sense. But if glFlush is added in the very beginning of IWineD3DSurfaceImpl_Blt, then it crashes right there, with a similar backtrace ( crash at 0x7e4efed6 glTexImage2D+0x446() in libgl.so.1, command jmp *0x2a8(%eax), eax = 0). So it might be that something is badly screwed already when entering the Blt routine. Wish I knew what :-/. Maybe some sort of multithreading issue.