05688: hgkairak, hotgm4ev, hotgmck, hotgmck3, hotgmcki: MAME crashes when enabling flip screen in psikyo4 games

ID	Category [?]	Severity [?]	Reproducibility	Date Submitted	Last Update
05688	Crash/Freeze	Critical (emulator)	Always	Aug 25, 2014, 06:08	Aug 25, 2014, 10:19

Tester	cuavas	View Status	Public	Platform	MAME (Official Binary)
Assigned To	Osso	Resolution	Fixed	OS	Windows Vista/7/8 (64-bit)
Status [?]	Resolved			Driver	psikyo/psikyo4.cpp
Version	0.154	Fixed in Version	0.155	Build	64-bit
		Fixed in Git Commit		Github Pull Request #

Summary	05688: hgkairak, hotgm4ev, hotgmck, hotgmck3, hotgmcki: MAME crashes when enabling flip screen in psikyo4 games
Description	Consistently get a crash when enabling flip screen in service menu. ----------------------------------------------------- Exception at EIP=0000000000D1DEE3 (psikyo4_state::draw_sprites(bitmap_ind16&, rectangle const&, unsigned int)+0x0183): ACCESS VIOLATION While attempting to read memory at 00000000000005E4 ----------------------------------------------------- RAX=0000000000000010 RBX=0000000000000140 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000009B0E590 RDI=00000000002272F0 RBP=0000000000227270 RSP=0000000000227190 R8=0000000000000001 R9=0000000000000010 R10=0000000000000000 R11=0000000000000001 R12=0000000000000038 R13=0000000000000000 R14=0000000000000000 R15=0000000000000020 ----------------------------------------------------- Stack crawl: 0000000000227190: 0000000000D1DEE3 (psikyo4_state::draw_sprites(bitmap_ind16&, rectangle const&, unsigned int)+0x0183) 00000000002272C0: 0000000000D1E0F0 (psikyo4_state::screen_update_psikyo4_right(screen_device&, bitmap_ind16&, rectangle const&)+0x0050) 0000000000227310: 0000000001EB9A5E (screen_device::update_partial(int) [clone .part.53]+0x007e) 0000000000227360: 0000000001EBB077 (screen_device::update_partial(int)+0x0067) 00000000002273D0: 000000000202C3C3 (video_manager::finish_screen_updates()+0x00a3) 0000000000227440: 000000000202EF2D (video_manager::frame_update(bool)+0x014d) 00000000002274C0: 0000000001EBBC6F (screen_device::vblank_begin()+0x01df) 0000000000227540: 0000000001EBC1AE (screen_device::device_timer(emu_timer&, unsigned int, int, void)+0x001e) 00000000002275E0: 0000000001F22AD9 (device_scheduler::timeslice()+0x0179) 00000000002277C0: 0000000001F5227D (running_machine::run(bool)+0x02fd) 000000000022F0A0: 0000000001F67647 (machine_manager::execute()+0x0597) 000000000022F4C0: 0000000001FFD98D (cli_frontend::execute(int, char)+0x0e4d) 000000000022FE00: 000000000144DBA6 (utf8_main(int, char*)+0x0456) 000000000022FE60: 00000000022DDAAC (wmain+0x007c) 000000000022FF20: 00000000004013F0 (__tmainCRTStartup+0x0270) 000000000022FF50: 00000000004014F8 (mainCRTStartup+0x0018) 000000000022FF80: 00000000771F59ED (BaseThreadInitThunk+0x000d) 000000000022FFD0: 000000007732C541 (RtlUserThreadStart+0x0021)
Steps To Reproduce	Wait for game to boot to attract mode Hit Service Mode (F2) to enter service mode Hit P1 Mahjong A (A) three times to move cursor to ハードの設定 (hardware settings) Hit 1 Player Start (1) to select this option Hit P1 Mahjong A (A) once to move cursor to ２Ｐ画面反転 (invert P2 display) Hit 1 Player Start (1) to select this option Hit P1 Mahjong A (A) once to move cursor to する (do) Hit 1 Player Start (1) to select this option MAME will crash
Additional Information	For explanation of Taisen Hot Gimmick games' service mode see here: http://arcade.vastheman.com/service/psikyo/hotgmck/
Github Commit

Flags
Regression Version	0.150
Affected Sets / Systems	hgkairak, hotgm4ev, hotgmck, hotgmck3, hotgmcki

Attached Files

No.10947 Osso Moderator Aug 25, 2014, 09:08 edited on: Aug 25, 2014, 10:20	0.146 works, 0.150 doesn't. I don't have the intermediate versions handy to check the exact regression version. EDIT: Verified, regressed in 0.150.
No.10948 Osso Moderator Aug 25, 2014, 10:19	Will commit the fix in 1-2 hours.