Viewing Issue Advanced Details
ID Category [?] Severity [?] Reproducibility Date Submitted Last Update
04836 Crash/Freeze Critical (emulator) Always May 17, 2012, 20:39 May 28, 2013, 22:51
Tester Tafoid View Status Public Platform MAME (Self-compiled)
Assigned To Robbbert Resolution Fixed OS Windows XP
Status [?] Resolved Driver
Version 0.145u8 Fixed in Version 0.149 Build Normal
Fixed in Git Commit Github Pull Request #
Summary 04836: Many sets in mpu5.c: Crash after OK
Description Crash after OK
Program received signal SIGSEGV, Segmentation fault.
0x005e7d6d in mpu5_state::mpu5_mem_r (this=0x26a00c, space=...,
    offset=1048576, mem_mask=4294967295) at src/mame/drivers/mpu5.c:69
69 return m_cpuregion[offset];
(gdb) bt
#0 0x005e7d6d in mpu5_state::mpu5_mem_r (this=0x26a00c, space=..., offset=1048576, mem_mask=4294967295)
    at src/mame/drivers/mpu5.c:69
#1 0x0318afcc in delegate_base<unsigned int, address_space&, unsigned int, unsigned int, _noparam, _noparam>::operator() (this=0x30bd48cc, p1=..., p2=1048576, p3=4294967295)
    at src/emu/delegate.h:619
#2 0x031968f4 in handler_entry_read::read32 (this=0x30bd47f4, space=..., offset=1048576, mask=4294967295)
    at src/emu/memory.c:405
#3 0x030c2e38 in address_space_specific<unsigned int, (endianness_t)1, true>::read_native (this=0x2ffdc31c, offset=4194304, mask=4294967295)
    at src/emu/memory.c:1087
#4 0x030c2789 in address_space_specific<unsigned int, (endianness_t)1, true>::read_direct<unsigned int, false> (this=0x2ffdc31c, address=4194304, mask=4294967295)
    at src/emu/memory.c:1174
#5 0x030c398c in address_space_specific<unsigned int, (endianness_t)1, true>::read_dword_unaligned (this=0x2ffdc31c, address=4194304)
    at src/emu/memory.c:1422
#6 0x0318b0ee in delegate_base<unsigned int, unsigned int, _noparam, _noparam,_noparam, _noparam>::operator() (this=0x2f0d1b28, p1=4194304)
    at src/emu/delegate.h:617
#7 0x02311d34 in m68ki_read_32_fc (m68k=0x2f0d18b8, address=4194304, fc=5)
    at src/emu/cpu/m68000/m68kcpu.h:1094
#8 0x023121f1 in OPER_AY_AI_32 (m68k=0x2f0d18b8)
    at src/emu/cpu/m68000/m68kcpu.h:1276
#9 0x0234b927 in _m68ki_cpu_core::m68k_op_move_32_d_ai (mc68kcpu=0x2f0d18b8)
    at obj/windowsd/emu/cpu/m68000/m68kops.c:18996
#10 0x01d903d8 in cpu_execute_m68k (device=0x27d00c)
    at src/emu/cpu/m68000/m68kcpu.c:809
#11 0x027d9e87 in legacy_cpu_device::execute_run (this=0x27d00c)
    at src/emu/devcpu.c:260
#12 0x030d6e5c in device_execute_interface::run (this=0x27d2c4)
    at src/emu/diexec.h:228
#13 0x024693a3 in device_scheduler::timeslice (this=0x22f2f8)
    at src/emu/schedule.c:489
#14 0x02524010 in running_machine::run (this=0x22c410, firstrun=true)
    at src/emu/machine.c:389
#15 0x02456d7b in mame_execute (options=..., osd=...)
    at src/emu/mame.c:189
#16 0x027bb266 in cli_frontend::execute (this=0x22fe80, argc=4, argv=0x3f4bd8)
    at src/emu/clifront.c:252
#17 0x01d297f0 in utf8_main (argc=4, argv=0x3f4bd8)
    at src/osd/windows/winmain.c:482
#18 0x02a50cd6 in wmain (argc=4, argv=0x3f28f0)
    at src/osd/windows/main.c:82
#19 0x00401422 in __tmainCRTStartup ()
    at ../mingw-w64-crt/crt/crtexe.c:282
#20 0x7c817077 in RegisterWaitForInputIdle ()
    from C:\WINDOWS\system32\kernel32.dll
#21 0x00000000 in ?? ()
Steps To Reproduce
Additional Information Actual crashing sets:
m5arab03, m5biggam, m5biggam11, m5blkwht01, m5blkwht11, m5bwaves, m5bwaves07, m5cashar, m5cashar04, m5cashln, m5circlb00, m5circlb15, m5circus, m5circus0a, m5circus0b, m5circus11, m5circus20, m5circus21, m5clr, m5cos, m5cosclb, m5costa, m5cpcash, m5crzkni, m5crzkni03, m5cshstx, m5dick, m5dick10, m5elim, m5elim03, m5elim04, m5ewn, m5ewn08, m5frnzya, m5gpclub, m5grush, m5grush01, m5grush03, m5gstrik01a, m5gstrika, m5hgl, m5hgl14, m5hgl16, m5holy10, m5kkebaba, m5lotta, m5minesw, m5mmak, m5mmak06, m5monjok, m5oohaah, m5oohaah01, m5peepsh, m5piefaca, m5piefc2a, m5psychoa, m5psychoa21, m5qdrawb, m5redrcka, m5rgclb21, m5rhrga, m5ritj, m5sec7, m5sec7a, m5sheik, m5showtm, m5sil7, m5sil7a, m5silver, m5silver03, m5silver06, m5squids, m5squids04a, m5squids05, m5squids06, m5tbird, m5thtsmg, m5trail, m5tst, m5upover, m5upover15
Github Commit
Flags
Regression Version 0.145u8
Affected Sets / Systems Many sets in mpu5.c
Attached Files
 
Relationships
There are no relationship linked to this issue.
Notes
3
User avatar
No.08838
Tafoid
Administrator
Aug 5, 2012, 01:28
Updated game list of crashers due to making of many new clones.
User avatar
No.09527
Firewave
Senior Tester
May 22, 2013, 16:15
Possibly related to 04839
User avatar
No.09568
Robbbert
Senior Tester
May 28, 2013, 14:01
mpu5_mem_r was reading beyond end of region "maincpu". Seeing its a skeleton driver, added a check to prevent the crash, and it will log a message in the error log. Fixed in r23222.