Viewing Issue Advanced Details
[ Jump to Notes ]
nintendo/mario.cpp
ID Category [?] Severity [?] Reproducibility Date Submitted Last Update
02207 Crash/Freeze Critical (emulator) Always Sep 6, 2008, 12:04 Sep 11, 2008, 14:37
Tester Firewave View Status Public Platform MAME (Self-compiled)
Assigned To aaron Resolution Fixed OS Windows XP/Vista 64-bit
Status [?] Resolved Driver
nintendo/mario.cpp
Version 0.127u2 Fixed in Version 0.127u3 Build Debug
Fixed in Git Commit Github Pull Request #
Summary 02207: marioj, marioo: Access Violation
Description -----------------------------------------------------
Exception at EIP=00A14742 (cpu_readop_arg64_safe+0x1b21): ACCESS VIOLATION
While attempting to read memory at 11AA3302
-----------------------------------------------------
EAX=11AA3302 EBX=00049D2F ECX=00000306 EDX=11AA2FFC
ESI=00000000 EDI=00000000 EBP=0022FC78 ESP=0022FC40
Steps To Reproduce
Additional Information It doesn't crash in any binary (debug only?) and sound is broken instead.
Github Commit
Flags
Regression Version 0.127u2
Affected Sets / Systems marioj, marioo
Attached Files
  
Relationships
There are no relationship linked to this issue.
Notes
4
User avatar
No.02370
Fujix
Administrator
Sep 6, 2008, 14:01
edited on: Sep 6, 2008, 14:04
 I tested with mame 32-bit on xp 32-bit and Vista 64-bit, vmame64 and mameui64 on Vista 64-bit, but didn't confirm the crash.
Although, the sound is broken in marioj nad marioo in any binary.

On symbol enabled mame, it output like this when I quit MAME.
Program received signal SIGSEGV, Segmentation fault.
[Switching to thread 3756.0xc74]
0x4b76ba36 in ?? ()
(gdb) bt
#0 0x4b76ba36 in ?? ()
#1 0x00000000 in ?? ()
User avatar
No.02373
Firewave
Senior Tester
Sep 6, 2008, 17:40
 Crashes right after the system information screen. Will try to post a back trace later.
User avatar
No.02374
Tafoid
Administrator
Sep 6, 2008, 17:44
 The crash might be Debug specific. I'll try to ensure a debug building later to test it out. I get the same behavior as Fujix (mangled sound)
User avatar
No.02385
Firewave
Senior Tester
Sep 7, 2008, 02:12
 
Program received signal SIGSEGV, Segmentation fault.
0x0098751b in read_byte_generic (spacenum=0 '
Program received signal SIGSEGV, Segmentation fault.

0x0098751b in read_byte_generic (spacenum=0 '\0', address=774)

    at src/emu/memory.c:464

464                     result = bank_ptr[entry][offset];

(gdb) bt full

#0  0x0098751b in read_byte_generic (spacenum=0 '\0', address=774)

    at src/emu/memory.c:464

        space = (const address_space *) 0x2be9670

        handler = (const handler_data *) 0x27d1b54

        offset = 774

        entry = 31

        result = 0 '\0'

#1  0x00989801 in program_read_byte_8le (address=774) at src/emu/memory.c:3750

No locals.

#2  0x008fd364 in movp3_a_xa () at src/emu/cpu/mcs48/mcs48.c:561

No locals.

#3  0x008fe4dd in mcs48_execute (cycles=952) at src/emu/cpu/mcs48/mcs48.c:939

        opcode = 227

#4  0x0097aafa in cpunum_execute (cpunum=1, cycles=952)

    at src/emu/cpuintrf.c:1495

        ran = 1

#5  0x009be216 in cpuexec_timeslice (machine=0xb601f34)

    at src/emu/cpuexec.c:283

        target = {seconds = 0, attoseconds = 1535999999993856}

        base = {seconds = 0, attoseconds = 237272835123954}

        cpunum = 1

        ran = 4

#6  0x0097d2db in mame_execute (options=0x8911e58) at src/emu/mame.c:345

        settingsloaded = 0

        driver = (const game_driver *) 0x1a7f7f0

        machine = (running_machine *) 0xb601f34

        mame = (mame_private *) 0xb611f68

        cb = (callback_item *) 0x8911e58

        gamename = (astring *) 0xb601f00

        exit_pending = 0

        error = 0

        firstgame = 0

        firstrun = 0

#7  0x00b9973c in cli_execute (argc=6, argv=0x8871fe8, osd_options=0x20e34e0)

    at src/emu/clifront.c:171

        options = (core_options *) 0x8911e58

        gamename = (astring *) 0x88f1f00

        exename = (astring *) 0x8901f00

        gamename_option = 0x8941f08 "marioj"

        driver = (const game_driver *) 0x1a7f7f0

        result = -1

#8  0x009234c8 in utf8_main (argc=6, argv=0x8871fe8)

    at src/osd/windows/winmain.c:257

        ext = 0x27bd1a8 ".map"

#9  0x011f0559 in main (argc=6, a_argv=0x6d126c0) at src/osd/windows/main.c:74

        i = 6

        rc = -1

        utf8_argv = (char **) 0x8871fe8

        argv = (TCHAR **) 0x6d12848

        wenviron = (WCHAR **) 0x6d14e78

        startupinfo = 3289943


', address=774)
    at src/emu/memory.c:464
464                     result = bank_ptr[entry][offset];
(gdb) bt full
#0  0x0098751b in read_byte_generic (spacenum=0 '
Program received signal SIGSEGV, Segmentation fault.

0x0098751b in read_byte_generic (spacenum=0 '\0', address=774)

    at src/emu/memory.c:464

464                     result = bank_ptr[entry][offset];

(gdb) bt full

#0  0x0098751b in read_byte_generic (spacenum=0 '\0', address=774)

    at src/emu/memory.c:464

        space = (const address_space *) 0x2be9670

        handler = (const handler_data *) 0x27d1b54

        offset = 774

        entry = 31

        result = 0 '\0'

#1  0x00989801 in program_read_byte_8le (address=774) at src/emu/memory.c:3750

No locals.

#2  0x008fd364 in movp3_a_xa () at src/emu/cpu/mcs48/mcs48.c:561

No locals.

#3  0x008fe4dd in mcs48_execute (cycles=952) at src/emu/cpu/mcs48/mcs48.c:939

        opcode = 227

#4  0x0097aafa in cpunum_execute (cpunum=1, cycles=952)

    at src/emu/cpuintrf.c:1495

        ran = 1

#5  0x009be216 in cpuexec_timeslice (machine=0xb601f34)

    at src/emu/cpuexec.c:283

        target = {seconds = 0, attoseconds = 1535999999993856}

        base = {seconds = 0, attoseconds = 237272835123954}

        cpunum = 1

        ran = 4

#6  0x0097d2db in mame_execute (options=0x8911e58) at src/emu/mame.c:345

        settingsloaded = 0

        driver = (const game_driver *) 0x1a7f7f0

        machine = (running_machine *) 0xb601f34

        mame = (mame_private *) 0xb611f68

        cb = (callback_item *) 0x8911e58

        gamename = (astring *) 0xb601f00

        exit_pending = 0

        error = 0

        firstgame = 0

        firstrun = 0

#7  0x00b9973c in cli_execute (argc=6, argv=0x8871fe8, osd_options=0x20e34e0)

    at src/emu/clifront.c:171

        options = (core_options *) 0x8911e58

        gamename = (astring *) 0x88f1f00

        exename = (astring *) 0x8901f00

        gamename_option = 0x8941f08 "marioj"

        driver = (const game_driver *) 0x1a7f7f0

        result = -1

#8  0x009234c8 in utf8_main (argc=6, argv=0x8871fe8)

    at src/osd/windows/winmain.c:257

        ext = 0x27bd1a8 ".map"

#9  0x011f0559 in main (argc=6, a_argv=0x6d126c0) at src/osd/windows/main.c:74

        i = 6

        rc = -1

        utf8_argv = (char **) 0x8871fe8

        argv = (TCHAR **) 0x6d12848

        wenviron = (WCHAR **) 0x6d14e78

        startupinfo = 3289943


', address=774)
    at src/emu/memory.c:464
        space = (const address_space *) 0x2be9670
        handler = (const handler_data *) 0x27d1b54
        offset = 774
        entry = 31
        result = 0 '
Program received signal SIGSEGV, Segmentation fault.

0x0098751b in read_byte_generic (spacenum=0 '\0', address=774)

    at src/emu/memory.c:464

464                     result = bank_ptr[entry][offset];

(gdb) bt full

#0  0x0098751b in read_byte_generic (spacenum=0 '\0', address=774)

    at src/emu/memory.c:464

        space = (const address_space *) 0x2be9670

        handler = (const handler_data *) 0x27d1b54

        offset = 774

        entry = 31

        result = 0 '\0'

#1  0x00989801 in program_read_byte_8le (address=774) at src/emu/memory.c:3750

No locals.

#2  0x008fd364 in movp3_a_xa () at src/emu/cpu/mcs48/mcs48.c:561

No locals.

#3  0x008fe4dd in mcs48_execute (cycles=952) at src/emu/cpu/mcs48/mcs48.c:939

        opcode = 227

#4  0x0097aafa in cpunum_execute (cpunum=1, cycles=952)

    at src/emu/cpuintrf.c:1495

        ran = 1

#5  0x009be216 in cpuexec_timeslice (machine=0xb601f34)

    at src/emu/cpuexec.c:283

        target = {seconds = 0, attoseconds = 1535999999993856}

        base = {seconds = 0, attoseconds = 237272835123954}

        cpunum = 1

        ran = 4

#6  0x0097d2db in mame_execute (options=0x8911e58) at src/emu/mame.c:345

        settingsloaded = 0

        driver = (const game_driver *) 0x1a7f7f0

        machine = (running_machine *) 0xb601f34

        mame = (mame_private *) 0xb611f68

        cb = (callback_item *) 0x8911e58

        gamename = (astring *) 0xb601f00

        exit_pending = 0

        error = 0

        firstgame = 0

        firstrun = 0

#7  0x00b9973c in cli_execute (argc=6, argv=0x8871fe8, osd_options=0x20e34e0)

    at src/emu/clifront.c:171

        options = (core_options *) 0x8911e58

        gamename = (astring *) 0x88f1f00

        exename = (astring *) 0x8901f00

        gamename_option = 0x8941f08 "marioj"

        driver = (const game_driver *) 0x1a7f7f0

        result = -1

#8  0x009234c8 in utf8_main (argc=6, argv=0x8871fe8)

    at src/osd/windows/winmain.c:257

        ext = 0x27bd1a8 ".map"

#9  0x011f0559 in main (argc=6, a_argv=0x6d126c0) at src/osd/windows/main.c:74

        i = 6

        rc = -1

        utf8_argv = (char **) 0x8871fe8

        argv = (TCHAR **) 0x6d12848

        wenviron = (WCHAR **) 0x6d14e78

        startupinfo = 3289943


'
#1  0x00989801 in program_read_byte_8le (address=774) at src/emu/memory.c:3750
No locals.
#2  0x008fd364 in movp3_a_xa () at src/emu/cpu/mcs48/mcs48.c:561
No locals.
#3  0x008fe4dd in mcs48_execute (cycles=952) at src/emu/cpu/mcs48/mcs48.c:939
        opcode = 227
#4  0x0097aafa in cpunum_execute (cpunum=1, cycles=952)
    at src/emu/cpuintrf.c:1495
        ran = 1
#5  0x009be216 in cpuexec_timeslice (machine=0xb601f34)
    at src/emu/cpuexec.c:283
        target = {seconds = 0, attoseconds = 1535999999993856}
        base = {seconds = 0, attoseconds = 237272835123954}
        cpunum = 1
        ran = 4
#6  0x0097d2db in mame_execute (options=0x8911e58) at src/emu/mame.c:345
        settingsloaded = 0
        driver = (const game_driver *) 0x1a7f7f0
        machine = (running_machine *) 0xb601f34
        mame = (mame_private *) 0xb611f68
        cb = (callback_item *) 0x8911e58
        gamename = (astring *) 0xb601f00
        exit_pending = 0
        error = 0
        firstgame = 0
        firstrun = 0
#7  0x00b9973c in cli_execute (argc=6, argv=0x8871fe8, osd_options=0x20e34e0)
    at src/emu/clifront.c:171
        options = (core_options *) 0x8911e58
        gamename = (astring *) 0x88f1f00
        exename = (astring *) 0x8901f00
        gamename_option = 0x8941f08 "marioj"
        driver = (const game_driver *) 0x1a7f7f0
        result = -1
#8  0x009234c8 in utf8_main (argc=6, argv=0x8871fe8)
    at src/osd/windows/winmain.c:257
        ext = 0x27bd1a8 ".map"
#9  0x011f0559 in main (argc=6, a_argv=0x6d126c0) at src/osd/windows/main.c:74
        i = 6
        rc = -1
        utf8_argv = (char **) 0x8871fe8
        argv = (TCHAR **) 0x6d12848
        wenviron = (WCHAR **) 0x6d14e78
        startupinfo = 3289943