GCC编译的Win32程序在系统DLL调用期间崩溃

我尝试从不使用Microsoft SDK库的情况下调用IcmpSendEcho加载。我在Windows 7 x64上使用GCC 4.8.1（win32）。我这样尝试过：iphlpapi.dll

1. 创建所需的结构并定义常量
2. 获取指向DLL函数的指针
3. 调用DLL函数

我整理了一个小例子来说明我的问题：

#include <windows.h>
#include <stdio.h>
#include <stdint.h>

typedef struct {
  union {
    struct {
      u_char s_b1,s_b2,s_b3,s_b4;
    } S_un_b;
    struct {
      u_short s_w1,s_w2;
    } S_un_w;
    u_long S_addr;
  } S_un;
} IPAddr;


#define IP_FLAG_REVERSE 0x01
#define IP_FLAG_DF      0x02

typedef struct {
  UCHAR  Ttl;
  UCHAR  Tos;
  UCHAR  Flags;
  UCHAR  OptionsSize;
  PUCHAR OptionsData;
} IP_OPTION_INFORMATION;


typedef struct {
  IPAddr                       Address;
  ULONG                        Status;
  ULONG                        RoundTripTime;
  USHORT                       DataSize;
  USHORT                       Reserved;
  PVOID                        Data;
  IP_OPTION_INFORMATION        Options;
} ICMP_ECHO_REPLY;


typedef HANDLE (*IcmpCreateFile_t)();

typedef BOOL (*IcmpCloseHandle_t)(
    HANDLE IcmpHandle // _In_  HANDLE IcmpHandle
);

typedef DWORD (*IcmpSendEcho_t)(
    HANDLE IcmpHandle,  // _In_      HANDLE IcmpHandle,
    IPAddr dst,         // _In_      IPAddr DestinationAddress,
    void * RequestData, // _In_      LPVOID RequestData,
    WORD RequestSize,   // _In_      WORD RequestSize,
    IP_OPTION_INFORMATION * RequestOptions, // _In_opt_  PIP_OPTION_INFORMATION RequestOptions,
    void * ReplyBuffer, // _Out_     LPVOID ReplyBuffer,
    DWORD ReplySize,    // _In_      DWORD ReplySize,
    DWORD Timeout       // _In_      DWORD Timeout
);


HINSTANCE hIPHLPAPI = NULL;
IcmpCreateFile_t  IcmpCreateFile  = NULL;
IcmpCloseHandle_t IcmpCloseHandle = NULL;
IcmpSendEcho_t    IcmpSendEcho    = NULL;

HANDLE hIcmpFile;

int icmp_init() {
    hIPHLPAPI = LoadLibrary("iphlpapi.dll");
    if(hIPHLPAPI == NULL) return 0;

    IcmpCreateFile = (IcmpCreateFile_t) GetProcAddress(hIPHLPAPI, "IcmpCreateFile");
    if(IcmpCreateFile == NULL) return 0;

    IcmpCloseHandle = (IcmpCloseHandle_t) GetProcAddress(hIPHLPAPI, "IcmpCloseHandle");
    if(IcmpCloseHandle == NULL) return 0;

    IcmpSendEcho = (IcmpSendEcho_t) GetProcAddress(hIPHLPAPI, "IcmpSendEcho");
    if(IcmpSendEcho == NULL) return 0;

    hIcmpFile = IcmpCreateFile();
    if(!hIcmpFile) return 0;

    return 1;
}

int icmp_ping(uint32_t ip) {
    // Echo request data
    int dataSize = 32;
    void * data = malloc(dataSize);

    // Reply buffer
    int replySize = sizeof(ICMP_ECHO_REPLY) + 128;
    void * replyBuffer = malloc(replySize);
    if(replyBuffer == NULL) return 0;

    // Send echo request and wait for reply
    IPAddr dst;
    dst.S_un.S_addr = ip;
    printf("Calling IcmpSendEcho\n");
    DWORD dwRetVal = IcmpSendEcho(hIcmpFile, dst, data, dataSize, NULL, replyBuffer, replySize, 1000);
    if(dwRetVal == 0) return 0;

    ICMP_ECHO_REPLY *echoreply = (ICMP_ECHO_REPLY *) replyBuffer;
    printf("Status = %ld\n", echoreply->Status);

    free(replyBuffer);

    return 0;
}

int icmp_free() {
    FreeLibrary(hIPHLPAPI);
    return 1;
}

int main(int argc, char *argv[]) {
    if(icmp_init()) {
        int pret = icmp_ping(2915201282 /* google.com */);
        printf("icmp_ping returned %d\n", pret);
        icmp_free();
    }
}

我使用编译此示例gcc -o icmp_test.exe icmpt_test.c。它打印“ Calling IcmpSendEcho”并崩溃（请参阅下文）。

这不是“真实的”代码，但以相同的方式失败。调用IcmpCreateFile成功，但是调用IcmpSendEcho使程序崩溃，并使Windows显示“ ...已停止工作”。

我认为问题可能与错误的指针有关，但我找不到问题。