Here's some more info on this major regression in microsoft word, with my own trace messages added.
This feature works correctly in crossover office, by the way.
The crash occurs after create_whole_window and create_client_window are called, when we try to do a TSXSync.
----------------------------------------------------------------------
trace:win:WIN_CreateWindowEx (null) "_WwG" ex=00000000 style=46000000 0,0 1022x673 parent=2003f menu=0000 inst=30000000 params=(nil)trace:win:dump_window_styles style: WS_CHILD WS_CLIPSIBLINGS WS_CLIPCHILDREN trace:win:dump_window_styles exstyle: trace:win:WIN_CreateWindowEx winproc type is 2 (WIN_PROC_32A) trace:win:WIN_SetWindowLong 20040 -12 0 3 trace:x11drv:X11DRV_CreateWindow in trace:win:WIN_SetRectangles win 20040 window (0,0)-(1022,673) client (0,0)-(1022,673) trace:x11drv:X11DRV_CreateWindow before create_whole_window trace:x11drv:X11DRV_CreateWindow before create_client_window trace:x11drv:X11DRV_CreateWindow after create_client_window trace:x11drv:X11DRV_CreateWindow after TSXSync trace:x11drv:X11DRV_CreateWindow after SetPropA whole_window_atom trace:x11drv:X11DRV_CreateWindow after SetPropA client_window_atom trace:x11drv:X11DRV_CreateWindow before WM_GETMINMAXINFO trace:x11drv:X11DRV_CreateWindow before WM_NCCREATE trace:x11drv:X11DRV_CreateWindow hwnd 20040 cs 0,0 1022x673 trace:win:WIN_SetRectangles win 20040 window (0,0)-(1022,673) client (0,0)-(1022,673) trace:x11drv:X11DRV_CreateWindow win 20040 window 0,0,1022,673 client 0,0,1022,673 whole 0,0,1022,673 X client 0,0,1022,673 xwin 28000ff/2800100 trace:win:WIN_SetWindowLong 20040 0 41e903ec 2 trace:x11drv:X11DRV_CreateWindow returning... trace:win:WIN_CreateWindowEx created window 20040 trace:win:WIN_CreateWindowEx (null) "SCROLLBAR" ex=00000000 style=54000001 0,1079331068 1065353216x0 parent=2003f menu=0000 inst=30000000 params=(nil) trace:win:dump_window_styles style: WS_CHILD WS_VISIBLE WS_CLIPSIBLINGS 00000001 trace:win:dump_window_styles exstyle: trace:win:WIN_CreateWindowEx winproc type is 2 (WIN_PROC_32A) trace:win:WIN_SetWindowLong 2003c -12 0 3 trace:x11drv:X11DRV_CreateWindow in trace:win:WIN_SetRectangles win 2003c window (0,1079331068)-(1065353216,1079331068) client (0,1079331068)-(1065353216,1079331068) trace:x11drv:X11DRV_CreateWindow before create_whole_window trace:x11drv:X11DRV_CreateWindow before create_client_window trace:x11drv:X11DRV_CreateWindow after create_client_window X Error of failed request: BadValue (integer parameter out of range for operation) Major opcode of failed request: 1 (X_CreateWindow) Value in failed request: 0x0 Serial number of failed request: 2275 Current serial number in output stream: 2278