From: Jactry Zeng <wine@jactry.com>
Subject: [PATCH] riched20: Avoid invalid memory access.
Message-Id: <541653B1.7040805@jactry.com>
Date: Mon, 15 Sep 2014 10:49:21 +0800

It was catched by Sebastian, thanks.
---
  dlls/riched20/richole.c | 7 +++++--
  1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/dlls/riched20/richole.c b/dlls/riched20/richole.c
index 826fa68..194f471 100644
--- a/dlls/riched20/richole.c
+++ b/dlls/riched20/richole.c
@@ -492,8 +492,11 @@ static ULONG WINAPI ITextRange_fnRelease(ITextRange *me)
     TRACE ("%p ref=%u\n", This, ref);
     if (ref == 0)
     {
-        This->reOle = NULL;
-        list_remove(&This->entry);
+        if (This->reOle)
+        {
+            list_remove(&This->entry);
+            This->reOle = NULL;
+        }
         heap_free(This);
     }
     return ref;