08830: all sets in hornet.cpp: Debugger crashes when accessing 0x3500000 in SHARC data space memory

ID	Category [?]	Severity [?]	Reproducibility	Date Submitted	Last Update
08830	Crash/Freeze	Critical (emulator)	Always	Mar 3, 2024, 22:39	Mar 4, 2024, 23:00

Tester	Hydreigon	View Status	Public	Platform	MAME (Official Binary)
Assigned To		Resolution	Open	OS	Windows 10/11 (64-bit)
Status [?]	Confirmed			Driver	konami/hornet.cpp
Version	0.263	Fixed in Version		Build	64-bit
		Fixed in Git Commit		Github Pull Request #

Summary	08830: all sets in hornet.cpp: Debugger crashes when accessing 0x3500000 in SHARC data space memory
Description	Crashes mame to console when viewing memory under the described address, 0x3500000 (Konami 033906 PCI Bridge regs). It crashes with this message: Fatal error: ':dsp' (02003C): k033906_reg_r: 00000001 ----------------------------------------------------- Exception at EIP=00007ff6e9bb5e80 (device_debug::compute_debug_flags()): ACCESS VIOLATION While attempting to read memory at 0000000000000000 ----------------------------------------------------- RAX=000002e70c42a1b0 RBX=000002e70c2b13b0 RCX=0000000000000000 RDX=000002e707b80000 RSI=000002e70c2b0f10 RDI=0000000000000103 RBP=000000f3443c9fe0 RSP=000000f3443c9bb8 R8=000002e7078a1c80 R9=0000000000000001 R10=0000000000008000 R11=000000f3443c9bc0 R12=000002e70c2b0f10 R13=000000f3443c9d10 R14=000000f3443c9ed0 R15=000000f3443c9fc0 ----------------------------------------------------- Stack crawl: 000000f3443c9bb0: 00007ff6e9bb5e80 (device_debug::compute_debug_flags()) 000000f3443c9bf0: 00007ff6e9bb6c8a (device_debug::breakpoint_update_flags()+0x007a) 000000f3443c9c50: 00007ff6e9bb7630 (device_debug::~device_debug()+0x0050) 000000f3443c9c90: 00007ff6e6289e11 (device_t::stop()+0x0071) 000000f3443c9cd0: 00007ff6e645f2b6 (running_machine::stop_all_devices()+0x0026) 000000f3443c9e30: 00007ff6e6468bba (running_machine::run(bool)+0x027a) 000000f3443cf350: 00007ff6e9cc53cb (mame_machine_manager::execute()+0x020b) 000000f3443cf730: 00007ff6edef04bf (cli_frontend::start_execution(mame_machine_manager*, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&)+0x03cf) 000000f3443cf9f0: 00007ff6edef0acd (cli_frontend::execute(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&)+0x004d) 000000f3443cfa50: 00007ff6e9cbfa49 (emulator_info::start_frontend(emu_options&, osd_interface&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&)+0x0029) 000000f3443cfe10: 00007ff6efbca513 (luaopen_lfs+0xf786a3) 000000f3443cfee0: 00007ff6e18413b1 (__tmainCRTStartup+0x0231) 000000f3443cff10: 00007ff6e18414e6 (mainCRTStartup+0x0016) 000000f3443cff40: 00007ffca5207344 (BaseThreadInitThunk+0x0014) 000000f3443cffc0: 00007ffca59026b1 (RtlUserThreadStart+0x0021)
Steps To Reproduce	- mame gradius4 -debug -window - ctrl-m - Change memory area in dropdown tab to "Analog Devices ADSP21062 "SHARC" ":dsp" data space memory - enter 3500000 into memory window - press enter - press f5 - crash
Additional Information	Also happens with all sets in nwk-tr.cpp and hangplt (as they use the same custom PCI bridge IC and crashes with the same exact error).
Github Commit

Flags
Regression Version
Affected Sets / Systems	all sets in hornet.cpp

Attached Files