08615: mk4: Mortal Kombat 4 access violates running a benchmark, with -str 80 -norc -nothrottle switches

ID	Category [?]	Severity [?]	Reproducibility	Date Submitted	Last Update
08615	Crash/Freeze	Critical (emulator)	Always	Apr 27, 2023, 00:28	10 days ago

Tester	john_iv	View Status	Public	Platform	MAME (Official Binary)
Assigned To		Resolution	Open	OS	Windows 10/11 (64-bit)
Status [?]	Acknowledged			Driver	midway/midzeus.cpp
Version	0.254	Fixed in Version		Build	64-bit
		Fixed in Git Commit		Github Pull Request #

Summary	08615: mk4: Mortal Kombat 4 access violates running a benchmark, with -str 80 -norc -nothrottle switches
Description	Attempting to run video and sound benchmarks (vs. a simple -bench) I used the following command and see Mortal Kombat 4 access violate before the number of emulated seconds elapses. Interestingly, it doesn't AV if I use 60 emulated seconds. Be sure to use -norc to take any errant mame.ini settings out of the mix. mame mk4 -str 80 -nothrottle -norc c32boot.bin ROM NEEDS REDUMP WARNING: the machine might not run correctly. ----------------------------------------------------- Exception at EIP=00007ff7a220cdf2 (not found): ACCESS VIOLATION While attempting to read memory at 00000213dcd25e40 ----------------------------------------------------- RAX=000000008000bc00 RBX=000002135cd1a240 RCX=000002135cd1a240 RDX=000000008000bc00 RSI=000002135c12b2c0 RDI=0000000000000053 RBP=0000000000000000 RSP=00000064e1fffa58 R8=0000000000000000 R9=00000000c0005e00 R10=00000000546c6148 R11=000002135cf2518e R12=0000000000000100 R13=0000000000000000 R14=0000000000000001 R15=00000000ff8000bc ----------------------------------------------------- Stack crawl: 00000064e1fffa50: 00007ff7a220cdf2 (not found) 00000064e1f
Steps To Reproduce	1. Use the following commandline on x64 mame.exe. 2. mame mk4 -str 80 -nothrottle -norc 3. Observe abrupt early end to the benchmark with an access violation, as above.
Additional Information	Using the -bench switch for the same amount of time does not AV it. mame mk4 -bench 80 -norc System: i7-12700K @ 5.2Ghz OS: Win11 x64 22H2 (22621.1635) RAM: 64GB DDR5 5200MHz Video Card: AMD Radeon 5600XT
Github Commit

Flags
Regression Version
Affected Sets / Systems	mk4

Attached Files

No.21360 Robbbert Moderator Apr 27, 2023, 08:35	Unable to confirm, no crash here. Your dump is missing the symbols so there's no clue what caused it.
No.21364 Tafoid Administrator Apr 27, 2023, 18:18 edited on: Apr 27, 2023, 19:00	It crashes on my release builds starting with 0.252 - but for me it either shows nothing and drops to console/terminal window. I tried the daily builds I have and none of them seem to trigger a crash at all. The immediate conclusion is there may be a GCC issue - or something uninit'd - which started showing with the 0.252 release build. May also be something global changed during the extended dev time between 0.251/0.252, but that would take a bit more investigation.
No.21366 john_iv Senior Tester Apr 27, 2023, 19:32	I downloaded .254 mamedev.org release and put the .exe and the .sym file in my MAME directory per Robbbert and tried to repro this issue, and it didn't repro. I moved the .sym file out of the directory and then it AV'ed again. I don't know enough about programming to know what the presence or non-presence of the sym file interacting would have.
No.21372 Fujix Administrator Apr 30, 2023, 07:37	It works and quits normally here. mame mk4 -str 80 -norc -nothrottle c32boot.bin ROM NEEDS REDUMP WARNING: the machine might not run correctly. Average speed: 332.80% (79 seconds)
No.21424 Tafoid Administrator May 9, 2023, 12:46	This could be something un-init'd or some other weirdness. Acknowledging for now.
No.22641 Firewave Senior Tester Dec 20, 2024, 14:58	No ASAN failures with 0.272 on Linux after 247 seconds.
No.24372 Kale Developer 10 days ago	Randomly (?) getting this during attract, around the time Raiden shouts "the earth into centuries of darkness and banished Shinnok". Tested with 0.287 and 0.273. #0 0x00000000017e1846 in get_texel_8bit(void const, int, int, int) () #1 0x00000000017e19d0 in midzeus_renderer::render_poly(int, poly_manager<float, mz_poly_extra_data, 4, (unsigned char)0>::extent_t const&, mz_poly_extra_data const&, int) () #2 0x00000000017e8860 in poly_manager<float, mz_poly_extra_data, 4, (unsigned char)0>::work_item_callback(void, int) () #3 0x0000000006a6ecc2 in worker_thread_process(osd_work_queue, work_thread_info) [clone .isra.0] () #4 0x0000000006a6f11e in worker_thread_entry(void*) ()