-
Notifications
You must be signed in to change notification settings - Fork 2.2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Toriko Gourmet Survival 2 Invalid address hangs and corrupted picture #5496
Comments
Good ,this morning just want to test this game. |
Is it possible to get these problems in the demo? -[Unknown] |
I do not see the bug in demo. |
Has this changed or improved with "simulate block transfers"? -[Unknown] |
graphic is correct now,still hangs on Invalid address |
@daniel229 Can you share game save or newsest save status ? |
v0.9.8-1074-g8dbc407 turn off fast memory I feel sceKernelMemset() Do somewrong @daniel229 Can you help to do JPCSPTrace log ? Thanks |
JPCSPTrace shutdown PSP in laoding savedata.just log these. |
That happens sometimes. Try mine as well, I've made some tweaks that make it better for me: If that doesn't work, some things can be gained by messing with buffer sizes. That said, I'm not really sure what to expect to be wrong in sceKernelMemset(). -[Unknown] |
Still does not work. |
@daniel229 Thanks |
@unknownbrackets this is disassembly |
First thing is to look at the caller. Who passed a0 = 0 to this function, and why? Gotta trace it back. -[Unknown] |
How to know "Who passed a0 = 0 to this function" ? |
Well, ra shows the callers address, so that -8 (2 instructions up) is gonna be the jal. Somewhere there will be something setting a0. That is equivalent to this C code: u8 *a0 = 0;
func(a0);
// Func does blah blah blah blah blah blah.
// Must always pass a non-NULL a0.
// Returns blah blah.
void func(u8 *a0) {
u8 a1 = *a0; // CRASH
} Clearly, the caller should not have passed a NULL pointer to a0. Why did they do that? We emulated something wrong but we have to find the source of the problem. The problem is not in func; it is never supposed to get a NULL pointer in the first place. -[Unknown] |
Unfortunately, still the same issue. Nothing is wrong with memset, it would also crash on a psp (although maybe we could avoid crashing with fast memory off.) Still need to figure out why it is passing bad arguments to memset somewhere in mips code out due to a recent syscall. -[Unknown] |
Still happen invalid addresses with v0.9.8-1558-g3cb59ee |
The hangs seems randomly depend on the words what NPC said.So before fightting the boss make a savedata,just waitting NPC said someting,eventually will pass that hanging point. |
Change CPU clock to 25 helps it. |
still happens |
v1.11.3-1237-g730d2d288 still crash.
|
Update log.
From PPSSPP Debug build. |
That's not good, that implies memory corruption. It was already shutting down, though. It draws the text box at 3075/3302, which seems fine. After that, 3114/3302 appears to be intended to show a portrait. However, it shows a part of the text that was just drawn. Interestingly, it goes through the trouble of setting up some miplevel texture addresses, but doesn't enable them. That said, the texture data at those addresses doesn't look interesting. Must be a bug. This even happens for the working portrait. Anyway, my guess is that some error occurs allocating or loading the picture data, and then it sets the old texture address again. Just noting this for clarity - I don't think it's a graphics issue, specifically, but rather something CPU/HLE related. -[Unknown] |
Seem like graphic show character picture cut-in correctly except effect border is strange flickering. Video. (831 KB.) and dump from that scene. GE DUMP.zip |
Can you share the save status ?
I want to test again
在 2021年9月2日週四 下午5:20,Benjamin Benda Gates ***@***.***> 寫道:
… v1.11.3-1237-g730d2d288 still crash.
09-02 16:18:24.743 4373 4741 D DeviceStateHelper: Audio mode: 0
09-02 16:18:24.758 23017 23017 F DEBUG : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
09-02 16:18:24.759 23017 23017 F DEBUG : Build fingerprint: 'google/redfin/redfin:12/SPB4.210715.014/7654839:user/release-keys'
09-02 16:18:24.759 23017 23017 F DEBUG : Revision: '0'
09-02 16:18:24.759 23017 23017 F DEBUG : ABI: 'arm64'
09-02 16:18:24.759 23017 23017 F DEBUG : Timestamp: 2021-09-02 16:18:23.514093388+0700
09-02 16:18:24.759 23017 23017 F DEBUG : Process uptime: 614s
09-02 16:18:24.759 23017 23017 F DEBUG : Cmdline: org.ppsspp.ppsspp
09-02 16:18:24.759 23017 23017 F DEBUG : pid: 7915, tid: 21925, name: Emu >>> org.ppsspp.ppsspp <<<
09-02 16:18:24.759 23017 23017 F DEBUG : uid: 10239
09-02 16:18:24.759 23017 23017 F DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0
09-02 16:18:24.759 23017 23017 F DEBUG : Cause: null pointer dereference
09-02 16:18:24.759 23017 23017 F DEBUG : x0 0000000000000000 x1 0000000000000004 x2 0000000000000000 x3 000000798de78047
09-02 16:18:24.759 23017 23017 F DEBUG : x4 00000000000001a9 x5 000000798de7811f x6 00000079ece11410 x7 000000000897f6e8
09-02 16:18:24.759 23017 23017 F DEBUG : x8 0000000000000003 x9 0000000000000020 x10 0000000000000000 x11 000000798e15b1d0
09-02 16:18:24.759 23017 23017 F DEBUG : x12 000000798e181d30 x13 000000003f800000 x14 0000000000000000 x15 0000000000000000
09-02 16:18:24.759 23017 23017 F DEBUG : x16 000000798e14a8a8 x17 000000798d63a5d8 x18 0000000000000003 x19 0000000000000000
09-02 16:18:24.759 23017 23017 F DEBUG : x20 0000000000000000 x21 00000000f8800000 x22 00000079ece12000 x23 000000798e15b1d0
09-02 16:18:24.759 23017 23017 F DEBUG : x24 000000798dea9e80 x25 00000000f8800000 x26 000000798dea9e80 x27 000000798e0fc078
09-02 16:18:24.759 23017 23017 F DEBUG : x28 00000079ecd19000 x29 00000079ece11720
09-02 16:18:24.759 23017 23017 F DEBUG : lr 000000798d630d70 sp 00000079ece11710 pc 000000798d63a6ec pst 0000000020000000
09-02 16:18:24.759 23017 23017 F DEBUG : backtrace:
09-02 16:18:24.759 23017 23017 F DEBUG : #00 pc 000000000054f6ec /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (ReadVector(float*, VectorSize, int)+276) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG : #1 pc 0000000000545d6c /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (MIPSInt::Int_SVQ(Memory::Opcode)+288) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG : #2 pc 000000000054ebcc /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (MIPSInterpret(Memory::Opcode)+172) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG : #3 pc 000000000054ed94 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (MIPSInterpret_RunUntil(unsigned long long)+148) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG : #4 pc 000000000056e57c /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (PSP_RunLoopWhileState()+116) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG : #5 pc 00000000006d9738 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (EmuScreen::render()+296) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG : #6 pc 0000000000bcc764 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (ScreenManager::render()+220) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG : #7 pc 00000000006d03ac /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (NativeRender(GraphicsContext*)+752) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG : #8 pc 00000000006c7168 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (UpdateRunLoopAndroid(_JNIEnv*)+44) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG : #9 pc 00000000006c9448 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.760 23017 23017 F DEBUG : #10 pc 00000000003e40d0 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (void* std::__ndk1::__thread_proxy<std::__ndk1::tuple<std::__ndk1::unique_ptr<std::__ndk1::__thread_struct, std::__ndk1::default_delete<std::__ndk1::__thread_struct> >, void (*)()> >(void*)+44) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.760 23017 23017 F DEBUG : #11 pc 00000000000b19e0 /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-02 16:18:24.760 23017 23017 F DEBUG : #12 pc 000000000005148c /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-02 16:18:24.805 617 617 E tombstoned: Tombstone written to: tombstone_12
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
<#5496 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAQTT7FO4PJ3VP7LERVUUTTT746W5ANCNFSM4AMJ3OYQ>
.
Triage notifications on the go with GitHub Mobile for iOS
<https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675>
or Android
<https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub>.
|
Here, I download from gamefaq. :) |
I want test again, |
Here. NPJH50564R00.zip v1.16.6-341-g4d7f00f96 still crash. |
@Saramagrean It is game save , I need save status |
Sure.
|
@Saramagrean Very thanks |
It is in the area 5,16 mission,other areas seem do not happen,after boss fight,then would report Invalid address,sometime hangs,someting does not,and the following picture is corrupted.In Gedebugger,it does not read that texture.

in psp

Debug log (rename jpg to rar)

savestate
https://drive.google.com/file/d/0BzGZGDfFE68zU2V4VHBoV2ZTT3M/edit?usp=sharing
The text was updated successfully, but these errors were encountered: