02847: all cloak.c and midzeus.c sets: [debug] Access Violation

ID	Category [?]	Severity [?]	Reproducibility	Date Submitted	Last Update
02847	Crash/Freeze	Critical (emulator)	Always	Jan 19, 2009, 13:45	Jan 19, 2009, 16:27

Tester	Firewave	View Status	Public	Platform	MAME (Self-compiled)
Assigned To	Phil Bennett	Resolution	Fixed	OS	Windows XP/Vista 64-bit
Status [?]	Resolved			Driver
Version	0.129u1	Fixed in Version	0.129u2	Build	Debug
		Fixed in Git Commit		Github Pull Request #

Summary	02847: all cloak.c and midzeus.c sets: [debug] Access Violation
Description	Program received signal SIGSEGV, Segmentation fault. 0x009942c1 in copyline_palette16 (dst=0x1df87808, src=0x15034002, width=256, palette=0xade1ef8, xborderpix=1) at src/osd/windows/drawd3d.c:1897 1897 dst++ = 0xff000000 \| palette[src++]; (gdb) bt full #0 0x009942c1 in copyline_palette16 (dst=0x1df87808, src=0x15034002, width=256, palette=0xade1ef8, xborderpix=1) at src/osd/windows/drawd3d.c:1897 x = 1 #1 0x00993f77 in texture_set_data (d3d=0xb481f44, texture=0x1da71fa4, texsource=0x19ba1fc8, flags=8208) at src/osd/windows/drawd3d.c:2309 srcy = 0 dst = (void ) 0x1df87800 rect = {Pitch = 1152, pBits = 0x1df87800} result = 0 miny = -1 maxy = 233 dsty = -1 #2 0x00993a86 in texture_create (d3d=0xb481f44, texsource=0x19ba1fc8, flags=8208) at src/osd/windows/drawd3d.c:1774 texture = (texture_info ) 0x1da71fa4 result = 0 #3 0x00995ce2 in texture_update (d3d=0xb481f44, prim=0x19ba1f98) at src/osd/windows/drawd3d.c:2517 texture = (texture_info ) 0x0 #4 0x0099081b in drawd3d_window_draw (window=0xb321e8c, dc=0xb1011d99, update=0) at src/osd/windows/drawd3d.c:620 d3d = (d3d_info ) 0xb481f44 prim = (const render_primitive ) 0x19ba1f98 result = 1 #5 0x00985bf6 in draw_video_contents (window=0xb321e8c, dc=0xb1011d99, update=0) at src/osd/windows/window.c:1407 No locals. #6 0x00985805 in winwindow_video_window_proc@16 (wnd=0x1500654, message=1026, wparam=0, lparam=187965344) at src/osd/windows/window.c:1334 hdc = (HDC) 0xb1011d99 ptr = 187833996 window = (win_window_info ) 0xb321e8c #7 0x7d9472d8 in USER32!DefDlgProcW () from C:\WINDOWS\syswow64\user32.dll No symbol table info available. #8 0x01500654 in rom_spacefrt () No symbol table info available. #9 0x00000402 in ?? () No symbol table info available. #10 0x00000000 in ?? () No symbol table info available.
Steps To Reproduce
Additional Information
Github Commit

Flags	Debug build specific
Regression Version	0.129u1
Affected Sets / Systems	all cloak.c and midzeus.c sets

Attached Files

No.03609 Firewave Senior Tester Jan 19, 2009, 13:53	Happens with all midzeus.c sets as well: Program received signal SIGSEGV, Segmentation fault. 0x009942c1 in copyline_palette16 (dst=0x2367a008, src=0x17bf14e0, width=400, palette=0xae31ff8, xborderpix=1) at src/osd/windows/drawd3d.c:1897 1897 dst++ = 0xff000000 \| palette[src++]; (gdb) bt full #0 0x009942c1 in copyline_palette16 (dst=0x2367a008, src=0x17bf14e0, width=400, palette=0xae31ff8, xborderpix=1) at src/osd/windows/drawd3d.c:1897 x = 1 #1 0x00993f77 in texture_set_data (d3d=0xb581f44, texture=0x23161fa4, texsource=0x1fc31fc8, flags=8208) at src/osd/windows/drawd3d.c:2309 srcy = 0 dst = (void ) 0x2367a000 rect = {Pitch = 1664, pBits = 0x2367a000} result = 0 miny = -1 maxy = 257 dsty = -1 #2 0x00993a86 in texture_create (d3d=0xb581f44, texsource=0x1fc31fc8, flags=8208) at src/osd/windows/drawd3d.c:1774 texture = (texture_info ) 0x23161fa4 result = 0 #3 0x00995ce2 in texture_update (d3d=0xb581f44, prim=0x1fc31f98) at src/osd/windows/drawd3d.c:2517 texture = (texture_info ) 0x0 #4 0x0099081b in drawd3d_window_draw (window=0xb411e8c, dc=0x5e01172f, update=0) at src/osd/windows/drawd3d.c:620 d3d = (d3d_info ) 0xb581f44 prim = (const render_primitive ) 0x1fc31f98 result = 1 #5 0x00985bf6 in draw_video_contents (window=0xb411e8c, dc=0x5e01172f, update=0) at src/osd/windows/window.c:1407 No locals. #6 0x00985805 in winwindow_video_window_proc@16 (wnd=0x1a00608, message=1026, wparam=0, lparam=188948400) at src/osd/windows/window.c:1334 hdc = (HDC) 0x5e01172f ptr = 188817036 window = (win_window_info ) 0xb411e8c #7 0x7d9472d8 in USER32!DefDlgProcW () from C:\WINDOWS\syswow64\user32.dll No symbol table info available. #8 0x01a00608 in rom_cosmogng () No symbol table info available. #9 0x00000402 in ?? () No symbol table info available. #10 0x00000000 in ?? () No symbol table info available.
No.03610 Phil Bennett Developer Jan 19, 2009, 16:27	Drivers for games using framebuffers will crash if the unused data bits are not masked out during the transfer to the MAME bitmap. This is due to the randomized buffer contents exceeding the number of palette entires.

No.03609

Firewave

Senior Tester

Jan 19, 2009, 13:53

Happens with all midzeus.c sets as well:

Program received signal SIGSEGV, Segmentation fault.
0x009942c1 in copyline_palette16 (dst=0x2367a008, src=0x17bf14e0, width=400,
    palette=0xae31ff8, xborderpix=1) at src/osd/windows/drawd3d.c:1897
1897                    *dst++ = 0xff000000 | palette[*src++];
(gdb) bt full
#0  0x009942c1 in copyline_palette16 (dst=0x2367a008, src=0x17bf14e0,
    width=400, palette=0xae31ff8, xborderpix=1)
    at src/osd/windows/drawd3d.c:1897
        x = 1
#1  0x00993f77 in texture_set_data (d3d=0xb581f44, texture=0x23161fa4,
    texsource=0x1fc31fc8, flags=8208) at src/osd/windows/drawd3d.c:2309
        srcy = 0
        dst = (void *) 0x2367a000
        rect = {Pitch = 1664, pBits = 0x2367a000}
        result = 0
        miny = -1
        maxy = 257
        dsty = -1
#2  0x00993a86 in texture_create (d3d=0xb581f44, texsource=0x1fc31fc8,
    flags=8208) at src/osd/windows/drawd3d.c:1774
        texture = (texture_info *) 0x23161fa4
        result = 0
#3  0x00995ce2 in texture_update (d3d=0xb581f44, prim=0x1fc31f98)
    at src/osd/windows/drawd3d.c:2517
        texture = (texture_info *) 0x0
#4  0x0099081b in drawd3d_window_draw (window=0xb411e8c, dc=0x5e01172f,
    update=0) at src/osd/windows/drawd3d.c:620
        d3d = (d3d_info *) 0xb581f44
        prim = (const render_primitive *) 0x1fc31f98
        result = 1
#5  0x00985bf6 in draw_video_contents (window=0xb411e8c, dc=0x5e01172f,
    update=0) at src/osd/windows/window.c:1407
No locals.
#6  0x00985805 in winwindow_video_window_proc@16 (wnd=0x1a00608,
    message=1026, wparam=0, lparam=188948400) at src/osd/windows/window.c:1334
        hdc = (HDC) 0x5e01172f
        ptr = 188817036
        window = (win_window_info *) 0xb411e8c
#7  0x7d9472d8 in USER32!DefDlgProcW () from C:\WINDOWS\syswow64\user32.dll
No symbol table info available.
#8  0x01a00608 in rom_cosmogng ()
No symbol table info available.
#9  0x00000402 in ?? ()
No symbol table info available.
#10 0x00000000 in ?? ()
No symbol table info available.

No.03610

Phil Bennett

Developer

Jan 19, 2009, 16:27

Drivers for games using framebuffers will crash if the unused data bits are not masked out during the transfer to the MAME bitmap. This is due to the randomized buffer contents exceeding the number of palette entires.