Crash in EnumMRUListA

[Duane Clark]

Running MS Excel viewer, I seem to be able to crash it fairly easily 
when opening files. The is occurring in the apparently undocumented 
function EnumMRUListA, so I am not really sure what to expect here.

Unhandled exception: page fault on read access to 0x00000000 in 32-bit 
code (0x40a231f0).
In 32-bit mode.
0x40a231f0 (EnumMRUListA+0x88 [comctl32undoc.c:1056] in 
comctl32.dll.so): movl 0x0(%edi),%eax
1056            datasize = min( witem->size, nBufferSize );
Wine-dbg>bt
Backtrace:
=>0 0x40a231f0 (EnumMRUListA+0x88(hList=0x416c00b8, nItemPos=0x3, 
lpBuffer=0x405816a8, nBufferSize=0x800) [comctl32undoc.c:1056] in 
comctl32.dll.so) (ebp=40581230)
  1 0x4097b3d9 (SHAddToRecentDocs+0x3c9(uFlags=0x2, pv=0x4058242c) 
[shellord.c:788] in shell32.dll.so) (ebp=40582414)
  2 0x300c4151 (XLVIEW.EXE.EntryPoint+0xabc81 in XLVIEW.EXE) (ebp=40582530)
  3 0x301851a2 (XLVIEW.EXE.EntryPoint+0x16ccd2 in XLVIEW.EXE) 
(ebp=40582950)
  4 0x30047dae (XLVIEW.EXE.EntryPoint+0x2f8de in XLVIEW.EXE) (ebp=40582b94)
  5 0x30046b30 (XLVIEW.EXE.EntryPoint+0x2e660 in XLVIEW.EXE) (ebp=40582c10)
  6 0x300476cb (XLVIEW.EXE.EntryPoint+0x2f1fb in XLVIEW.EXE) (ebp=40582c44)
  7 0x30047790 (XLVIEW.EXE.EntryPoint+0x2f2c0 in XLVIEW.EXE) (ebp=40582c68)
  8 0x407de4f7 (WINPROC_wrapper+0x17 in user32.dll.so) (ebp=40582c8c)
  9 0x407de582 (WINPROC_CallWndProc+0x82(proc=0x300476d2, hwnd=0x10021, 
msg=0x111, wParam=0x2001, lParam=0x0) [winproc.c:219] in user32.dll.so) 
(ebp=40582cbc)
  10 0x407e492f (CallWindowProcW+0xcf(func=0x4086e3f4, hwnd=0x10021, 
msg=0x111, wParam=0x2001, lParam=0x0) [winproc.c:2928] in user32.dll.so) 
(ebp=40582cf0)
  11 0x407c7bd2 (DispatchMessageW+0x11e(msg=0x40582dc0) [message.c:886] 
in user32.dll.so) (ebp=40582d34)
  12 0x30043eae (XLVIEW.EXE.EntryPoint+0x2b9de in XLVIEW.EXE) 
(ebp=00000000)