https://bugs.freedesktop.org/show_bug.cgi?id=39320
--- Comment #3 from Marek Olšák maraeo@gmail.com 2011-09-11 00:55:56 PDT --- I couldn't reproduce this with the Wine D3D9 tests.
Can you attach the full backtrace of the crash? Knowing the values of local variables and upload->buffer->width0 would be useful too. Alternatively, you can update your apitrace and give it a try again.