[Bug 31684] Crash in winealsa driver when exiting World of Warcraft

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=31684

--- Comment #9 from rankincj at yahoo.com 2012-09-16 17:53:42 CDT ---
The "bad free" is happening in wine/dlls/winealsa.drv/mmdevdrv.c:

static ULONG WINAPI AudioClient_Release(IAudioClient *iface)
{
    ACImpl *This = impl_from_IAudioClient(iface);
    ULONG ref;
    ref = InterlockedDecrement(&This->ref);
    TRACE("(%p) Refcount now %u\n", This, ref);
    if(!ref){
        ...

        // BAD FREE HERE!!
        HeapFree(GetProcessHeap(), 0, This->local_buffer);

        ...
    }
    return ref;
}

0009:Call ntdll.RtlFreeHeap(00110000,00000000,001cb4a8) ret=b4906fd9
err:heap:HEAP_ValidateInUseArena Heap 0x110000: block 0x1cb4a8 tail overwritten
at 0x1d31a8 (byte 0/8 == 0x00)
0009:Ret  ntdll.RtlFreeHeap() retval=00000000 ret=b4906fd9

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.