http://bugs.winehq.org/show_bug.cgi?id=3756
--- Comment #10 from Anastasius Focht focht@gmx.net 2008-09-03 02:23:36 --- Hello,
--- quote --- Sounds like the same problem as reported in the bug 13152. --- quote ---
Reading your explanation in bug 13152 (comment 6), I'd say it's more likely bug 10368 there. The back pointer messes up the string data in free arena.
In this bug, the free arena back pointer is only a secondary problem. The primary problem here is that non-BSTR related allocations in between BSTR app code reuse BSTR arenas thus partly destroying the contents while the BSTR data is still being referenced (and then double freed). If you implement my hints, the problems should go away (already tested).
Regards