[Bug 3313] New: riched20: assertion in ME_RunOfsFromCharOfs+0x153

[Wine Bugs]

http://bugs.winehq.org/show_bug.cgi?id=3313

Summary: riched20: assertion in ME_RunOfsFromCharOfs+0x153
           Product: Wine
           Version: 20050725
          Platform: Other
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: wine-richedit
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]

This is not easily reproduceable. I've triggered it from Zilog's ZDS II 
debugger.

wine-pthread: run.c:142: ME_RunOfsFromCharOfs: Assertion `nCharOfs >=  
nParaOfs' failed.  
wine: Unhandled exception (thread 0009), starting debugger...  
WineDbg starting on pid 0x8  
Unhandled exception: assertion failed in 32-bit code (0x45d58772).  
In 32 bit mode.  
Register dump:  
 CS:0f33 SS:0f3b DS:0f3b ES:0f3b FS:1007 GS:0033  
 EIP:45d58772 ESP:7fdc93f4 EBP:7fdc9408 EFLAGS:00200202(   - 00      - - I1)  
 EAX:00000000 EBX:00001e80 ECX:00001e80 EDX:00000006  
 ESI:00000000 EDI:2014fff4  
Stack dump:  
0x7fdc93f4:  20053118 00001e80 2014fff4 00000000  
0x7fdc9404:  b7fa69e0 7fdc9534 20054888 00000006  
0x7fdc9414:  7fdc94a8 00000000 00000060 7c500000  
0x7fdc9424:  00000068 00000000 2008c7e7 7fdc946c  
0x7fdc9434:  7c500930 7c500994 7fdc9544 2014fff4  
0x7fdc9444:  00000058 00000059 7fdc9518 20087215  
0200: sel=1007 base=7befe000 limit=00001f97 32-bit rw-  
Backtrace:  
=>1 0x45d58772 (0x7fdc9408)  
  2 0x20054888 (0x7fdc9534)  
  3 0x2004c2f5 (0x7fdc9578)  
  4 0x208afe14 ME_RunOfsFromCharOfs+0x153 in riched20 (0x7fdc959c)  
  5 0x208a1708 ME_SetSelection+0x56 in riched20 (0x7fdc95c0)  
  6 0x208a6d4b RichEditANSIWndProc+0x1972 in riched20 (0x7fdcf80c)  
  7 0x208a941d RichEdit10ANSIWndProc+0x34 in riched20 (0x7fdcf830)  
  8 0x285067e7 WINPROC_wrapper+0x17 in user32 (0x7fdcf854)  
  9 0x285070db in user32 (+0x970db) (0x7fdcf890)  
  10 0x2850aa4e CallWindowProcA+0x1b5 in user32 (0x7fdcf8d4)  
  11 0x006ad6fa in zds2ide (+0x2ad6fa) (0x7fdcf8f4)  
  12 0x006add3d in zds2ide (+0x2add3d) (0x7fdcf910)  
  13 0x006acd0a in zds2ide (+0x2acd0a) (0x7fdcf970)  
  14 0x006acf12 in zds2ide (+0x2acf12) (0x7fdcf98c)  
  15 0x285067e7 WINPROC_wrapper+0x17 in user32 (0x7fdcf9b0)  
  16 0x285070db in user32 (+0x970db) (0x7fdcf9ec)  
  17 0x2850aa4e CallWindowProcA+0x1b5 in user32 (0x7fdcfa30)  
  18 0x284d7768 in user32 (+0x67768) (0x7fdcfa88)  
  19 0x284db388 SendMessageTimeoutA+0x218 in user32 (0x7fdcfae8)  
  20 0x284db443 SendMessageA+0x50 in user32 (0x7fdcfb14)  
  21 0x006aa0a6 in zds2ide (+0x2aa0a6) (0x7fdcfb34)  
  22 0x005023d2 in zds2ide (+0x1023d2) (0x00000770)  
  23 0x00000000 (0x00000000)