Viewing Issue Advanced Details
ID Category [?] Severity [?] Reproducibility Date Submitted Last Update
00752 Crash/Freeze Critical (emulation) Have not tried Feb 4, 2008, 12:05 31 days ago
Tester -Misc Reporters- View Status Public Platform
Assigned To Resolution Bugs That Aren't Bugs OS
Status [?] Resolved Driver midwunit.cpp
Version 0.67 Fixed in Version Build
Fixed in Git Commit Github Pull Request #
Summary 00752: wwfmania: Crash in the Buddy mode.
Description Sometimes when you do Buddy mode (both players tap Block 5 times during vs. screen) the computer randomly gives you "bad Doink" (bad sprites/colors) and the emulator exits..

Update by Firewave
Program received signal SIGSEGV, Segmentation fault.
0x007284ed in cpu_readop16 (A=0) at src/memory.h:1131
1131 INLINE data16_t cpu_readop16(offs_t A) { if (address_is_unsafe(
A)) { memory_set_opbase(A); } return cpu_readop16_unsafe(A); }
(gdb) bt
#0 0x007284ed in cpu_readop16 (A=0) at src/memory.h:1131
#1 0x007525f5 in ROPCODE () at src/cpu/tms34010/tms34010.c:477
#2 0x0075259d in tms34010_execute (cycles=3686)
at src/cpu/tms34010/tms34010.c:1101
#3 0x0046d146 in cpunum_execute (cpunum=0, cycles=3686) at src/cpuintrf.c:1334
#4 0x0046e91c in cpu_timeslice () at src/cpuexec.c:865
#5 0x0046e0f2 in cpu_run () at src/cpuexec.c:419
#6 0x00419dc3 in run_machine_core () at src/mame.c:596
#7 0x00419c67 in run_machine () at src/mame.c:533
#8 0x0041991f in run_game (game=4547) at src/mame.c:353
#9 0x00879340 in main (argc=3, argv=0x3f2598) at src/windows/winmain.c:212 
Steps To Reproduce
Additional Information Posted by Sew
Github Commit
Regression Version
Affected Sets / Systems wwfmania
Attached Files
zip file icon (344 bytes) Feb 14, 2008, 15:16
png file icon 0002.png (352,597 bytes) Jan 3, 2015, 22:22 Uploaded by B2K24
wwfmania 0.157
There are no relationship linked to this issue.
User avatar
Senior Tester
Jan 3, 2015, 20:35
Can anybody still reproduce it? I tried it about ten times (also tried the clones a few times) and I never got the "bad Doink" or a crash.
User avatar
Jan 3, 2015, 22:21
I was able to repo this when both players only press block button exactly 5 times. Also, the emulator doesn't exit, but instead just resets back to the initial boot up screen.

There also might be a difference in game behavior when you already have a nvram file created instead of starting fresh.

Another strange thing is, when I pick head to head option with both players, sometimes there is only the both of us in the ring and sometimes there is 4 competitors.

I'll attach a snap of what seems to be the described behavior.
User avatar
Jan 1, 2018, 21:31
edited on: Jan 1, 2018, 21:32
Well, testing various minutes with differents wrestlers, this happen (with high chances of reset the game), but has more chances with Doink of cause crash (and reset the game)

Can happen 2 things:

Select a random fighter without problems
Appear Doink with wrong colors, this can appear in left side or right side (CPU 1 with wrong red colors or CPU 2 with wrong blue, brown or default colors with incorrect pallete)
This can occours if choose 1 or 2 Doinks with great chances

(checked in 193 version)

Tested with clean config (default options) and with free play (not clean)
User avatar
Senior Tester
Jan 1, 2018, 22:19
I was able to reproduce it a few times and the game sometimes froze and sometimes just reset, but no crashes at all.

Got the following though, but it is probably unrelated since nothing of it came up at the point the bad Doink appeared.
../../../../../src/devices/cpu/tms34010/34010ops.hxx:875:45: runtime error: left shift of 180226 by 15 places cannot be represented in type 'int32_t' (aka 'int')
../../../../../src/devices/cpu/tms34010/34010ops.hxx:876:45: runtime error: left shift of 18232855 by 8 places cannot be represented in type 'int32_t' (aka 'int')
../../../../../src/devices/cpu/tms34010/34010ops.hxx:979:44: runtime error: signed integer overflow: -1543788236 - 1543788760 cannot be represented in type 'int'
../../../../../src/devices/cpu/tms34010/34010ops.hxx:978:44: runtime error: signed integer overflow: -2147483647 - 134217728 cannot be represented in type 'int'
User avatar
Aug 7, 2020, 21:36
may anyone recheck this please using latest GIT build ? cant reproduce it here.
User avatar
Senior Tester
Aug 14, 2020, 19:21
I can confirm this is still happening in mame 0.222
I'll test it when mame 0.223 comes out, unless somebody test a current git version before.
User avatar
Aug 25, 2020, 22:04
edited on: Aug 25, 2020, 22:40
OK, was able to reproduce this, looks like original game bug - out of bounds fetch from routines table, and then call to address 00000000 (video RAM) where is no meaningful code.

FF8623F0: MOVE *A13(590h),A0,0
FF862410: SLL 5h,A0
FF862420: ADDI FF862480h,A0
FF862450: MOVE *A0,A0,1
FF862460: CALL A0
User avatar
Apr 12, 2021, 08:25
apparently original game bug, in this code part
table value #7 should be not spare/zero, but move_doink routine address