06352: mbombrd, mbombrdj: Crash in demonstration mode

ID	Category [?]	Severity [?]	Reproducibility	Date Submitted	Last Update
06352	Crash/Freeze	Critical (emulator)	Always	Aug 21, 2016, 22:31	Aug 22, 2016, 06:50

Tester	Fortuna	View Status	Public	Platform	MAME (Official Binary)
Assigned To	Osso	Resolution	Fixed	OS	Windows 10 (64-bit)
Status [?]	Resolved			Driver	capcom/cps1.cpp
Version	0.176	Fixed in Version	0.177	Build	64-bit
		Fixed in Git Commit		Github Pull Request #

Summary	06352: mbombrd, mbombrdj: Crash in demonstration mode
Description	Play the game or watch until the 2nd demo play, has a freeze and next a crash screen
Steps To Reproduce
Additional Information	Game exceptions about 2 minutes into demonstration Exception at EIP=00000000005d4313 (cps_state::qsound_rom_r(address_space&, unsigned int, unsigned short)+0x0023): ACCESS VIOLATION Stack crawl: 0000000000228820: 00000000005d4313 (cps_state::qsound_rom_r(address_space&, unsigned int, unsigned short)+0x0023) 00000000002288f0: 0000000003825e81 (address_space_specific<unsigned short, (endianness_t)1, true>::read_word(unsigned int)+0x0091) 0000000000228930: 0000000001f67451 (m68000_base_device_ops::m68k_op_move_16_d_di(m68000_base_device)+0x0061) 00000000002289e0: 0000000001f0a9f4 (m68000_base_device::execute_run()+0x0964) 0000000000228a80: 0000000002b7ffdb (device_scheduler::timeslice()+0x018b) 0000000000228b00: 0000000002b4a5d8 (running_machine::run(bool)+0x01a8) 000000000022f440: 00000000017df41f (mame_machine_manager::execute()+0x015f) 000000000022f8c0: 000000000183b384 (cli_frontend::execute(int, char)+0x0e04) 000000000022f930: 00000000017de4c5 (emulator_info::start_frontend(emu_options&osd_interface&, int, char)+0x0035) 000000000022fd70: 00000000017409bb (utf8_main(int, char*)+0x012b) 000000000022fe50: 0000000002f6453c (wmain+0x018c) 000000000022ff20: 000000000040140c (__tmainCRTStartup+0x025c) 000000000022ff50: 000000000040153b (mainCRTStartup+0x001b) 000000000022ff80: 00000000777959bd (BaseThreadInitThunk+0x000d) 000000000022ffd0: 00000000778ca2e1 (RtlUserThreadStart+0x0021)
Github Commit

Flags
Regression Version	0.170
Affected Sets / Systems	mbombrd, mbombrdj

Attached Files

No.13063 Tafoid Administrator Aug 22, 2016, 01:20 edited on: Aug 22, 2016, 01:21	Versions prior had a popupmessage about xxxxx read sound ROM byte xxxxx but not crash.