Hallo, the installation of the MS Excel viewer , found somewhere on http://officeupdate.microsoft.com/downloadCatalog/dldExcel.asp#9798 crashes with EndDialog accessing the teb after terminating the thread: Call kernel32.685: TerminateThread(00000064,00000000) ret=0100340d fs=024f trace:thread:THREAD_FreeTEB (0x41137000) called Ret kernel32.685: TerminateThread() retval=00000001 ret=0100340d fs=024f Call user32.174: EndDialog(0000012c,00000001) ret=01003419 fs=024f trace:relay:WINPROC_CallWndProc (wndproc=0x400820e0,hwnd=00000210,msg=WM_KILLFOCUS,wp=0000012c,lp=00000000) trace:relay:WINPROC_CallWndProc (wndproc=0x401a7360,hwnd=0000012c,msg=WM_CTLCOLORBTN,wp=00000e90,lp=00000210) trace:relay:WINPROC_CallWndProc (wndproc=0x100326c,hwnd=0000012c,msg=WM_CTLCOLORBTN,wp=00000e90,lp=00000210) trace:relay:WINPROC_CallWndProc (wndproc=0x401a7360,hwnd=0000012c,msg=WM_SETFOCUS,wp=00000210,lp=00000000) trace:relay:WINPROC_CallWndProc (wndproc=0x100326c,hwnd=0000012c,msg=WM_SETFOCUS,wp=00000210,lp=00000000) trace:relay:WINPROC_CallWndProc (wndproc=0x401a7360,hwnd=0000012c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=40c86ac4) trace:relay:WINPROC_CallWndProc (wndproc=0x100326c,hwnd=0000012c,msg=WM_WINDOWPOSCHANGING,wp=00000000,lp=40c86ac4) trace:relay:WINPROC_CallWndProc (wndproc=0x40087620,hwnd=0000008c,msg=WM_ERASEBKGND,wp=00000910,lp=00000000) trace:relay:WINPROC_CallWndProc (wndproc=0x401a7360,hwnd=0000012c,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=40c86ac4) trace:relay:WINPROC_CallWndProc (wndproc=0x100326c,hwnd=0000012c,msg=WM_WINDOWPOSCHANGED,wp=00000000,lp=40c86ac4) Ret user32.174: EndDialog() retval=00000001 ret=01003419 fs=024f trace:thread:THREAD_IsWin16 BON: teb 0x41137000 trace:thread:THREAD_IsWin16 Call kernel32.340: GetLastError() ret=01006f5d fs=024f Ret kernel32.340: GetLastError() retval=00000000 ret=01006f5d fs=024f Call kernel32.693: TlsGetValue(00000000) ret=01006f6b fs=024f Ret kernel32.693: TlsGetValue() retval=40e300a0 ret=01006f6b fs=024f Call kernel32.654: SetLastError(00000000) ret=01006fbf fs=024f Ret kernel32.654: SetLastError() retval=00000000 ret=01006fbf fs=024f Call kernel32.702: UnhandledExceptionFilter(40b74d10) ret=01006558 fs=024f fixme:seh:UnhandledExceptionFilter BON:checking for debugger fixme:seh:UnhandledExceptionFilter BON: Using internal debugger /usr/local/bin/winedbg %ld %ld TRUE fixme:palette:X11DRV_PALETTE_ComputeShifts BON:maskbits ff0000 fixme:palette:X11DRV_PALETTE_ComputeShifts BON:maskbits ff00 fixme:palette:X11DRV_PALETTE_ComputeShifts BON:maskbits ff Starting WineDbg... on pid 136010928 Loading stabs debug symbols from /usr/local/bin/wine (0x00000000) Breakpoint 1 at 0x4000ad20 (_end+0x37fc082c) ... Loading stabs debug symbols from /home/bon/tmp/wine/compile/wine/dlls/libmidimap.drv.so (0x40b43000) Ret kernel32.702: UnhandledExceptionFilter() retval=00000000 ret=01006558 fs=024f fixme:seh:EXC_RtlRaiseException BON:res 1 Unhandled exception: page fault on read access to 0x4113701c in 32-bit code (0x40191277)(fs=024f . Loading new modules symbols: USER32 USER GDI gdi32 WINEPS WPROCS SYSTEM KERNEL KERNEL32 winedbg In 32 bit mode. Symbol h_errno is invalid 0x40191277 (THREAD_IsWin16+0x57 [thread.c:49]): movw 0x1c(%edi),%ax Wine-dbg>bt Backtrace: =>0 0x40191277 (THREAD_IsWin16+0x57 [thread.c:49]) (ebp=40c86c44) 1 0x401c7cdf (QUEUE_SetWakeBit+0x8f(queue=0x40423778, bit=0x8000) [queue.c:640]) (ebp=40c86c5c) 2 0x401ba4d6 (ReplyMessage+0x116(result=0x0) [message.c:969]) (ebp=40c86c88) 3 0x401c8607 (QUEUE_ReceiveMessage+0x267(queue=0x40420ef8) [queue.c:992]) (ebp=40c86cac) 4 0x401baa45 (MSG_PeekMessage+0x175(type=0x1, msg=0x40c86d80, hwnd=0x0, first=0x0, last=0x0, flags=0x1, peek=0x0) [message.c:1162]) (ebp=40c86d08) 5 0x401baef9 (MSG_InternalGetMessage+0x99(type=0x1, msg=0x40c86d80, hwnd=0x12c, hwndOwner=0x0, code=0x0, flags=0x1, sendIdle=0x1, idleSent=0x0) [message.c:1342]) (ebp=40c86d44) 6 0x401aaed5 (DIALOG_DoDialogBox+0xb5(hwnd=0x12c, owner=0x0) [dialog.c:969]) (ebp=40c86d9c) 7 0x401aaff7 (DialogBoxParamA+0x47(hInst=0x1000000, name=0x7d4, owner=0x0, dlgProc=0x100326c, param=0x0) [dialog.c:1018]) (ebp=40c86db8) 8 0x40187785 (RELAY_CallFrom32+0x615(ret_addr=0x100369f) [relay386.c:243]) (ebp=40c86e4c) 9 0x40b3a28d (USER32.DLL.DialogBoxParamA+0x5) (ebp=40c86f04) 10 0x4018dfac (PROCESS_Start+0x35c [process.c:897]) (ebp=40c86f38) 11 0x40190a28 (SYSDEPS_StartThread+0x98(teb=0x40c97000) [sysdeps.c:133]) (ebp=40c86ff4) 12 0x403a80da (thread_start+0x4 [sysctl.c]) (ebp=00000000) Bye Uwe Bonnes [EMAIL PROTECTED] Free Software: If you contribute nothing, expect nothing --