[BUG] Psycho Dream - WIP 09/09/05 crash loading savestate

BaD.BoY · Post by **BaD.BoY** » Fri May 20, 2005 3:36 pm

A problem begin in the WIP 5/08/04.

5/08/04
Much better SPC7110 pack loading code. [Nach]
Fixed checksum calc on 24Mb SPC7110 ROMs - again. [Nach]
ROM info now dumped to rominfo.txt on game load. [Nach]
Fixed path input crashing bug. [Nach]
Fixed PNG height. [Nach]
NSRT Header support. [Nach]
Fix minimize bug [pagefault]
Add the name of the start address to the error message when mprotect fails. [theoddone33]
Update config.sub. This allows configuration on 64 bit targets, and requires autogen.sh to be rerun. [theoddone33]
Using secondary sound buffer in Win32 again. [Nach, ipher]

5/01/04
SPC7110 and SDD-1 timing update, we now do this properly [pagefault]
Updated authors.txt, support.txt, thanks.txt, and todo.txt [pagefault]
Add StatMat to the authors list [pagefault]
Rename linux version to SDL and win to win32 [pagefault]
New disable screensaver code [pagefault]
Yay more timing updates. More things work. [pagefault]
effects obj files now deleted with "make clean" [ipher]
Fix snapshot filenames [StatMat]
Fix rewind when using commandline filename [StatMat]
Add use of DirectSound primary buffer in win port [StatMat]
Netplay fixed [pagefault]
DSP 2 support [Overload, kentaro-k.21, pagefault]
Fix some weird emulation bugs [pagefault]
Savestate incrementor fix, this caused some crashes in linux [pagefault]
Updated icon [cdbsi]

To reproduce:

Download savestates
Load game and open .zs1
ZSNES crashes

.zs1 opens normally in the WIP 5/01/04

Somebody confirm?

OS: Slackware 10.1
PII 400Mhz, 128Mb

Backtrace:

Code: Select all

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 16343)]
0x080ab2b7 in reg2118inc8inc () at cpu/regsw.inc:894
894     in cpu/regsw.inc

(gdb) bt
#0  0x080ab2b7 in reg2118inc8inc () at cpu/regsw.inc:894
#1  0x00000202 in ?? ()
#2  0x08071b68 in exechdma.notransa () at cpu/dma.asm:1285
#3  0x00000090 in ?? ()
#4  0x00000000 in ?? ()
#5  0x083788d8 in tableBc ()
Cannot access memory at address 0xe13f90d2

(gdb) ni
Fatal signal: Segmentation Fault (SDL Parachute Deployed)
[Thread 49156 (LWP 16347) exited]

Program received signal SIGTRAP, Trace/breakpoint trap.
[Switching to Thread 49156 (LWP 16347)]
0x400cb3c1 in __linuxthreads_death_event () from /lib/libpthread.so.0
(gdb) bt
#0  0x400cb3c1 in __linuxthreads_death_event () from /lib/libpthread.so.0
#1  0xbf3ffab8 in ?? ()
#2  0x00000000 in ?? ()
#3  0x00000000 in ?? ()
#4  0x00000000 in ?? ()
#5  0x0e017007 in ?? ()
#6  0x00000000 in ?? ()
#7  0x00000000 in ?? ()
#8  0x00000000 in ?? ()
#9  0x400c80d0 in thread_self () from /lib/libpthread.so.0
Previous frame inner to this frame (corrupt stack?)

This is backtrace of DOS port using WIP 09/09/05:

Code: Select all

Page fault at eip=001ec168, error=0004
eax=00000007 ebx=000010d0 ecx=00002906 edx=00000028 esi=6c000000 edi=005df978
ebp=0029ca51 esp=005a0968 program=C:\MEUSDO~1\SUPER_~1\ZSNES_~4\ZSNES.EXE
cs: sel=00af  base=83a27000  limit=ffdd9fff
ds: sel=00b7  base=83a27000  limit=ffdd9fff
es: sel=00b7  base=83a27000  limit=ffdd9fff
fs: sel=0087  base=00016210  limit=0000ffff
gs: sel=00c7  base=00000000  limit=0010ffff
ss: sel=00b7  base=83a27000  limit=ffdd9fff
App stack: [005a09fc..005209fc]  Exceptn stack: [00520950..0051ea10]

Call frame traceback EIPs:
  0x001ec168

Code: Select all

---------------------Internal ROM Info---------------------- 
       File: Psycho Dream (J) 
       Name: Psycho dream           Company: Telenet 
     Header: None                      Bank: HiROM 
Interleaved: No                        SRAM: 0 Kb 
       Type: Normal                     ROM: 8 Mb 
    Country: Japan                    Video: NTSC 
  ROM Speed: 120ns (FastROM)       Revision: 1.0 
   Checksum: Good 0xAE39              CRC32: 5C145E98 
--------------------------Database-------------------------- 
   Name: Psycho Dream 
Country: Japan                  Revision: 1.0 
 Port 1: Gamepad                  Port 2: Gamepad 
Genre 1: Action                  Genre 2: General

-_pentium5.1_- · Post by **-_pentium5.1_-** » Sat May 21, 2005 8:16 pm

I have the ROM handy to test whether or not this also occurs in the Windows version. Where do I download the savestates? (I'm guessing it's from Zophar's Domain...or is there supposed to be a link in your post?)

BaD.BoY · Post by **BaD.BoY** » Sat May 21, 2005 10:05 pm

I posted the link:

http://zsnes.debianer.info/bugzilla/att ... ction=edit

Change theme of phpbb to subSilver, it is better to see.

If you have more time, you can confirm this bug for me?

xamenus · Post by **xamenus** » Sun May 22, 2005 4:02 pm

I confirm the bug, but I don't see this as a big problem.

It appears that this .zs1 savestate was created with the April 11th WIP. Savestates created in WIPs shouldn't be expected to work with other WIPs. WIP means "Work In Progress", so I think it's normal to find some incongruities like this in different WIP releases.

If a savestate created with v1.42 doesn't work in a WIP, however, this might be a problem.

BaD.BoY · Post by **BaD.BoY** » Sun May 22, 2005 5:28 pm

I agree with you IceFox. But, I created savestates in the same point using Official 1.42, and this crashes again.

Post by **grinvader** » Sun May 22, 2005 10:28 pm

Try to load a state made with 1.36.

1.40 to 1.42 and maybe a couple post-1.42 wips aren't to be trusted savestate-wise.

Post by **Nach** » Sun May 22, 2005 10:51 pm

Care to inform me on what was unstable?

Post by **grinvader** » Sun May 22, 2005 10:55 pm

Nach wrote:Care to inform me on what was unstable?

I was working on it. :þ

Post by **Nach** » Sun May 22, 2005 11:21 pm

grinvader wrote:
Nach wrote:Care to inform me on what was unstable?
I was working on it. :þ

So?

You didn't work on v1.4 much, at least not save state stuff then, so why do you say that was messed up?

And I still don't see what was messed up about saves then. Only thing that might have changed was how spchalted was stored.

Richard C. · Post by **Richard C.** » Tue May 24, 2005 2:40 am

BaD.BoY - i love you, that was the most accurate bug report ive ever seen. you are my hero.

BaD.BoY · Post by **BaD.BoY** » Mon Sep 12, 2005 10:13 pm

Updated with more info.

Post by **Nach** » Tue Sep 13, 2005 6:33 am

When doing gdb with backtrace, please compile a debug version.

BaD.BoY · Post by **BaD.BoY** » Tue Sep 13, 2005 8:49 am

Backtrace CVS Sep 13, 2005, loading savestate made with WIP 5/08/04:

Code: Select all

(gdb) run
Starting program: /home/cvs-1.11.20/zsnes/src/zsnesd
[Thread debugging using libthread_db enabled]
[New Thread 16384 (LWP 8259)]

ZSNES vPre 1.43, (c) 1997-2005, ZSNES Team
Be sure to check http://www.zsnes.com/ for the latest version.
Please report crashes to zsnes-devel@lists.sourceforge.net.

ZSNES is written by the ZSNES Team (See AUTHORS.TXT)
ZSNES comes with ABSOLUTELY NO WARRANTY.  This is free software,
and you are welcome to redistribute it under certain conditions;
please read 'LICENSE.TXT' thoroughly before doing so.

Use ZSNES -? for command line definitions.

[New Thread 32769 (LWP 8261)]
[New Thread 16386 (LWP 8262)]
[New Thread 32771 (LWP 8263)]
ZSNES could not find any joysticks.
[New Thread 49156 (LWP 8264)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 8259)]
0x080ab2b7 in ..@389.finished ()
(gdb) bt
#0  0x080ab2b7 in ..@389.finished ()
#1  0x08090bcb in hdmatype2indirect.notend ()
#2  0x00000202 in ?? ()
#3  0x08090c78 in exechdma.notransa ()
#4  0x00000090 in ?? ()
#5  0x00000000 in ?? ()
#6  0x0836ab30 in tableBc ()
#7  0x4112c0ab in ?? ()
#8  0x000000d0 in ?? ()
#9  0x080a3d7d in cpuover.noout ()
#10 0x080a33eb in reexecuteb2.soundta ()
#11 0x0805c62c in zstart () at uic.c:290
#12 0xbffff630 in ?? ()
#13 0x403b6ff4 in ?? () from /lib/libc.so.6
#14 0x00000000 in ?? ()
#15 0x00000000 in ?? ()
#16 0x00000000 in ?? ()
#17 0x00000001 in ?? ()
#18 0xbffff694 in ?? ()
#19 0x0831b3bc in cpuoverptr ()
#20 0x0806c1a4 in main (zargc=-462433840, zargv=0x9c04f00b) at zloader.c:594
(gdb) bt full
#11 0x0805c62c in zstart () at uic.c:290
        ptr = 3221222984
(gdb) continue
Continuing.
Fatal signal: Segmentation Fault (SDL Parachute Deployed)
[Thread 49156 (LWP 8264) exited]
[Thread 32771 (LWP 8263) exited]

Program exited with code 0365.

Backtrace CVS Sep 13, 2005, loading savestate made with WIP 07/10/05:

Code: Select all

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 8414)]
0x0836ab31 in tableCc ()
(gdb) bt
#0  0x0836ab31 in tableCc ()
#1  0x08322046 in SPCRAM ()
#2  0xbffff5e4 in ?? ()
#3  0x00000000 in ?? ()
#4  0x08331e72 in hdmadata ()
#5  0x000007d5 in ?? ()
#6  0x00000215 in ?? ()
#7  0x08090bcb in hdmatype2indirect.notend ()
#8  0x00000202 in ?? ()
#9  0x08090c78 in exechdma.notransa ()
#10 0x00000090 in ?? ()
#11 0x00000000 in ?? ()
#12 0x0836ab30 in tableBc ()
#13 0x4112c0ab in ?? ()
#14 0x000000d0 in ?? ()
#15 0x080a3d7d in cpuover.noout ()
#16 0x080a33eb in reexecuteb2.soundta ()
#17 0x0805c62c in zstart () at uic.c:290
#18 0xbffff630 in ?? ()
#19 0x403b6ff4 in ?? () from /lib/libc.so.6
#20 0x00000000 in ?? ()
#21 0x00000000 in ?? ()
#22 0x00000000 in ?? ()
#23 0x00000001 in ?? ()
#24 0xbffff694 in ?? ()
#25 0x0831b3bc in cpuoverptr ()
#26 0x0806c1a4 in main (zargc=-774857554, zargv=0xf00be46f) at zloader.c:594

Post by **grinvader** » Tue Sep 13, 2005 10:58 pm

Does it still crash with latest fixes ?

BaD.BoY · Post by **BaD.BoY** » Wed Sep 14, 2005 6:45 am

Yes grinvader.

Backtrace CVS Sep 14, 2005 loading savestate made with WIP 09/09/05:

Code: Select all

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 16384 (LWP 7413)]
0x080d07b6 in ..@704.nov ()
(gdb) bt
#0  0x080d07b6 in ..@704.nov ()
#1  0x08090bcb in hdmatype2indirect.notend ()
#2  0x00000202 in ?? ()
#3  0x08090c78 in exechdma.notransa ()
#4  0x00000010 in ?? ()
#5  0x00000000 in ?? ()
#6  0x0836ab30 in tableBc ()
#7  0x4112c0a9 in ?? ()
#8  0x000000c0 in ?? ()
#9  0x080a3d7d in cpuover.noout ()
#10 0x080a33eb in reexecuteb2.soundta ()
#11 0x0805c62c in zstart () at uic.c:290
#12 0xbffff630 in ?? ()
#13 0x403b6ff4 in ?? () from /lib/libc.so.6
#14 0x00000000 in ?? ()
#15 0x00000000 in ?? ()
#16 0x00000000 in ?? ()
#17 0x00000001 in ?? ()
#18 0xbffff694 in ?? ()
#19 0x0831b3bc in cpuoverptr ()
#20 0x0806c1a4 in main (zargc=9242575, zargv=0xd7bf00cd) at zloader.c:594

-_pentium5.1_- · Post by **-_pentium5.1_-** » Sat Sep 17, 2005 9:04 pm

Sorry I didn't actually do any testing yet - can anyone clarify if this problem is known in the Win port?

BaD.BoY · Post by **BaD.BoY** » Sat Sep 17, 2005 10:11 pm

Yes, it is present in all ports.