08967: mz2000, mz2200: Crashes if mz2500 disk is used

ID	Category [?]	Severity [?]	Reproducibility	Date Submitted	Last Update
08967	Crash/Freeze	Minor	Always	6 days ago	6 days ago

Tester	Robbbert	View Status	Public	Platform	MAME (Self-compiled)
Assigned To		Resolution	Open	OS	Windows 10/11 (64-bit)
Status [?]	New			Driver	sharp/mz2000.cpp
Version	0.271	Fixed in Version		Build	64-bit
		Fixed in Git Commit		Github Pull Request #

Summary	08967: mz2000, mz2200: Crashes if mz2500 disk is used
Description	If you use a D88 floppy that works perfectly in MZ2500 into MZ2000 or MZ2200, it issues a message about wrong tracks, and then crashes with a dump.
Steps To Reproduce	I used one of the many MZ2500 floppies available from Inufuto's homebrew site. Any of them will do. C:\MAME>mame mz2200 -flop1 "e:\data\sharp\mz2000,2200,2500\dsk_ok\guntus_mz2500.d88" It will firstly say: d88: Floppy disk has too many tracks for this drive (floppy tracks=82, drive tracks=42). and then immediately crash.
Additional Information	C:\MAME>mame mz2200 -flop1 "e:\data\sharp\mz2000,2200,2500\dsk_ok\guntus_mz2500.d88" font.bin ROM NEEDS REDUMP font400.bin ROM NEEDS REDUMP WARNING: the machine might not run correctly. d88: Floppy disk has too many tracks for this drive (floppy tracks=82, drive tracks=42). ----------------------------------------------------- Exception at EIP=00007ff615d9aeec (floppy_image_format_t::generate_track_from_levels(int, int, std::vector<unsigned int, std::allocator<unsigned int> > const&, int, floppy_image&)+0x005c): ACCESS VIOLATION While attempting to read memory at 0000000700680085 ----------------------------------------------------- RAX=00000238605cdee0 RBX=0000000700680085 RCX=000000000000002b RDX=0000000000000000 RSI=0000000000000000 RDI=0000000000001020 RBP=00000000500003e8 RSP=0000009917ee7130 R8=0000009917ee7230 R9=00000000000186a0 R10=00000238628497a0 R11=000000000001ebc4 R12=0000023860460ea0 R13=0000000000000016 R14=000002386284daa0 R15=00000238627ec020 ----------------------------------------------------- Stack crawl: 0000009917ee71b0: 00007ff615d9aeec (floppy_image_format_t::generate_track_from_levels(int, int, std::vector<unsigned int, std::allocator<unsigned int> > const&, int, floppy_image&)+0x005c) 0000009917ee72b0: 00007ff615d9b723 (floppy_image_format_t::build_pc_track_mfm(int, int, floppy_image&, int, int, floppy_image_format_t::desc_pc_sector const, int, int, int, int)+0x0713) 0000009917ef8eb0: 00007ff615dac898 (d88_format::load(util::random_read&, unsigned int, std::vector<unsigned int, std::allocator<unsigned int> > const&, floppy_image&) const+0x0668) 0000009917ef8fd0: 00007ff612b32141 (floppy_image_device::call_load[abi:cxx11]()+0x0161) 0000009917ef9080: 00007ff612d3e5be (device_image_interface::finish_load[abi:cxx11]()+0x026e) 0000009917ef91a0: 00007ff615d476ab (image_manager::postdevice_init()+0x017b) 0000009917ef91d0: 00007ff61d14da32 (luaopen_lfs+0x2714332) 0000009917ef9310: 00007ff612a3ec98 (device_t::start()+0x0698) 0000009917ef9460: 00007ff612bd1c6a (running_machine::start_all_devices()+0x014a) 0000009917ef9580: 00007ff612bd5d01 (running_machine::start()+0x0a91) 0000009917ef9700: 00007ff612bd92ac (running_machine::run(bool)+0x00cc) 0000009917efed20: 00007ff615d1910c (mame_machine_manager::execute()+0x024c) 0000009917eff110: 00007ff619a0adfa (cli_frontend::start_execution(mame_machine_manager, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > > const&)+0x03ea) 0000009917eff420: 00007ff619a0b42a (cli_frontend::execute(std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&)+0x007a) 0000009917eff480: 00007ff615d13eb7 (emulator_info::start_frontend(emu_options&, osd_interface&, std::vector<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, std::allocator<std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> > > >&)+0x0027) 0000009917eff850: 00007ff61b695a21 (luaopen_lfs+0xc5c321) 0000009917eff8a0: 00007ff60ee612ee (__tmainCRTStartup+0x016e) 0000009917eff8d0: 00007ff60ee61406 (mainCRTStartup+0x0016) 0000009917eff900: 00007ffaa42e7374 (BaseThreadInitThunk+0x0014) 0000009917eff980: 00007ffaa629cc91 (RtlUserThreadStart+0x0021)
Github Commit

Flags
Regression Version
Affected Sets / Systems	mz2000, mz2200

Attached Files