hrydgard / ppsspp

A PSP emulator for Android, Windows, Mac and Linux, written in C++. Want to contribute? Join us on Discord at https://discord.gg/5NJB6dD or just send pull requests / issues. For discussion use the forums at forums.ppsspp.org.
https://www.ppsspp.org
Other
11.04k stars 2.15k forks source link

Toriko Gourmet Survival 2 Invalid address hangs and corrupted picture #5496

Open daniel229 opened 10 years ago

daniel229 commented 10 years ago

It is in the area 5,16 mission,other areas seem do not happen,after boss fight,then would report Invalid address,sometime hangs,someting does not,and the following picture is corrupted.In Gedebugger,it does not read that texture. 01

in psp 201402171945_001

Debug log (rename jpg to rar) ppsspplog

savestate https://drive.google.com/file/d/0BzGZGDfFE68zU2V4VHBoV2ZTT3M/edit?usp=sharing

sum2012 commented 10 years ago

Good ,this morning just want to test this game.

sum2012 commented 10 years ago

Add breakpoint on invalid memoary. Seem hard to solve 2

unknownbrackets commented 10 years ago

Is it possible to get these problems in the demo?

-[Unknown]

daniel229 commented 10 years ago

I do not see the bug in demo.

unknownbrackets commented 10 years ago

Has this changed or improved with "simulate block transfers"?

-[Unknown]

daniel229 commented 10 years ago

graphic is correct now,still hangs on Invalid address

sum2012 commented 10 years ago

@daniel229 Can you share game save or newsest save status ?

daniel229 commented 10 years ago

Sure. https://drive.google.com/file/d/0BzGZGDfFE68zaWpKLXU4ME9kdUE/edit?usp=sharing

sum2012 commented 10 years ago

v0.9.8-1074-g8dbc407 turn off fast memory info log https://gist.github.com/sum2012/46bfbab83575078cd3a9 debug log (stop on invalid address) https://gist.github.com/sum2012/49926634248ae28dfbfa

I feel sceKernelMemset() Do somewrong

@daniel229 Can you help to do JPCSPTrace log ? Thanks sceKernelMemset 0xa089eca4 3 xxx

daniel229 commented 10 years ago

JPCSPTrace shutdown PSP in laoding savedata.just log these. https://gist.github.com/daniel229/a7ea8d35f5ad13ffe77c

unknownbrackets commented 10 years ago

That happens sometimes. Try mine as well, I've made some tweaks that make it better for me: https://github.com/unknownbrackets/JpcspTrace (it does flush less often, though.)

If that doesn't work, some things can be gained by messing with buffer sizes.

That said, I'm not really sure what to expect to be wrong in sceKernelMemset().

-[Unknown]

daniel229 commented 10 years ago

Still does not work.

sum2012 commented 10 years ago

@daniel229 Thanks

sum2012 commented 10 years ago

@unknownbrackets this is disassembly (Use save status ,stop on invalid adress) Not sure whether you have idea. 2

unknownbrackets commented 10 years ago

First thing is to look at the caller. Who passed a0 = 0 to this function, and why? Gotta trace it back.

-[Unknown]

sum2012 commented 10 years ago

How to know "Who passed a0 = 0 to this function" ?

unknownbrackets commented 10 years ago

Well, ra shows the callers address, so that -8 (2 instructions up) is gonna be the jal. Somewhere there will be something setting a0.

That is equivalent to this C code:

u8 *a0 = 0;
func(a0);

// Func does blah blah blah blah blah blah.
// Must always pass a non-NULL a0.
// Returns blah blah.
void func(u8 *a0) {
   u8 a1 = *a0; // CRASH
}

Clearly, the caller should not have passed a NULL pointer to a0. Why did they do that? We emulated something wrong but we have to find the source of the problem. The problem is not in func; it is never supposed to get a NULL pointer in the first place.

-[Unknown]

daniel229 commented 10 years ago

It crashes 01

unknownbrackets commented 10 years ago

Unfortunately, still the same issue. Nothing is wrong with memset, it would also crash on a psp (although maybe we could avoid crashing with fast memory off.) Still need to figure out why it is passing bad arguments to memset somewhere in mips code out due to a recent syscall.

-[Unknown]

daniel229 commented 10 years ago

Still happen invalid addresses with v0.9.8-1558-g3cb59ee

daniel229 commented 10 years ago

The hangs seems randomly depend on the words what NPC said.So before fightting the boss make a savedata,just waitting NPC said someting,eventually will pass that hanging point.

daniel229 commented 9 years ago

Change CPU clock to 25 helps it.

benderscruffy01 commented 5 years ago

still happens DUMP.ZIP

Saramagrean commented 3 years ago

v1.11.3-1237-g730d2d288 still crash.

09-02 16:18:24.743  4373  4741 D DeviceStateHelper: Audio mode: 0
09-02 16:18:24.758 23017 23017 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
09-02 16:18:24.759 23017 23017 F DEBUG   : Build fingerprint: 'google/redfin/redfin:12/SPB4.210715.014/7654839:user/release-keys'
09-02 16:18:24.759 23017 23017 F DEBUG   : Revision: '0'
09-02 16:18:24.759 23017 23017 F DEBUG   : ABI: 'arm64'
09-02 16:18:24.759 23017 23017 F DEBUG   : Timestamp: 2021-09-02 16:18:23.514093388+0700
09-02 16:18:24.759 23017 23017 F DEBUG   : Process uptime: 614s
09-02 16:18:24.759 23017 23017 F DEBUG   : Cmdline: org.ppsspp.ppsspp
09-02 16:18:24.759 23017 23017 F DEBUG   : pid: 7915, tid: 21925, name: Emu  >>> org.ppsspp.ppsspp <<<
09-02 16:18:24.759 23017 23017 F DEBUG   : uid: 10239
09-02 16:18:24.759 23017 23017 F DEBUG   : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0
09-02 16:18:24.759 23017 23017 F DEBUG   : Cause: null pointer dereference
09-02 16:18:24.759 23017 23017 F DEBUG   :     x0  0000000000000000  x1  0000000000000004  x2  0000000000000000  x3  000000798de78047
09-02 16:18:24.759 23017 23017 F DEBUG   :     x4  00000000000001a9  x5  000000798de7811f  x6  00000079ece11410  x7  000000000897f6e8
09-02 16:18:24.759 23017 23017 F DEBUG   :     x8  0000000000000003  x9  0000000000000020  x10 0000000000000000  x11 000000798e15b1d0
09-02 16:18:24.759 23017 23017 F DEBUG   :     x12 000000798e181d30  x13 000000003f800000  x14 0000000000000000  x15 0000000000000000
09-02 16:18:24.759 23017 23017 F DEBUG   :     x16 000000798e14a8a8  x17 000000798d63a5d8  x18 0000000000000003  x19 0000000000000000
09-02 16:18:24.759 23017 23017 F DEBUG   :     x20 0000000000000000  x21 00000000f8800000  x22 00000079ece12000  x23 000000798e15b1d0
09-02 16:18:24.759 23017 23017 F DEBUG   :     x24 000000798dea9e80  x25 00000000f8800000  x26 000000798dea9e80  x27 000000798e0fc078
09-02 16:18:24.759 23017 23017 F DEBUG   :     x28 00000079ecd19000  x29 00000079ece11720
09-02 16:18:24.759 23017 23017 F DEBUG   :     lr  000000798d630d70  sp  00000079ece11710  pc  000000798d63a6ec  pst 0000000020000000
09-02 16:18:24.759 23017 23017 F DEBUG   : backtrace:
09-02 16:18:24.759 23017 23017 F DEBUG   :       #00 pc 000000000054f6ec  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (ReadVector(float*, VectorSize, int)+276) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG   :       #01 pc 0000000000545d6c  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (MIPSInt::Int_SVQ(Memory::Opcode)+288) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG   :       #02 pc 000000000054ebcc  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (MIPSInterpret(Memory::Opcode)+172) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG   :       #03 pc 000000000054ed94  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (MIPSInterpret_RunUntil(unsigned long long)+148) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG   :       #04 pc 000000000056e57c  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (PSP_RunLoopWhileState()+116) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG   :       #05 pc 00000000006d9738  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (EmuScreen::render()+296) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG   :       #06 pc 0000000000bcc764  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (ScreenManager::render()+220) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG   :       #07 pc 00000000006d03ac  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (NativeRender(GraphicsContext*)+752) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG   :       #08 pc 00000000006c7168  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (UpdateRunLoopAndroid(_JNIEnv*)+44) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.759 23017 23017 F DEBUG   :       #09 pc 00000000006c9448  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.760 23017 23017 F DEBUG   :       #10 pc 00000000003e40d0  /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (void* std::__ndk1::__thread_proxy<std::__ndk1::tuple<std::__ndk1::unique_ptr<std::__ndk1::__thread_struct, std::__ndk1::default_delete<std::__ndk1::__thread_struct> >, void (*)()> >(void*)+44) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995)
09-02 16:18:24.760 23017 23017 F DEBUG   :       #11 pc 00000000000b19e0  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-02 16:18:24.760 23017 23017 F DEBUG   :       #12 pc 000000000005148c  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-02 16:18:24.805   617   617 E tombstoned: Tombstone written to: tombstone_12
Saramagrean commented 3 years ago

Update log.

09-03 16:56:21.537  2427  7766 D qc_adm  : ns 2724114 > expected_ns 2000000 (skipped 20790)
09-03 16:56:21.755 19497 19497 F DEBUG   : *** *** *** *** *** *** *** *** *** *** *** *** *** *** *** ***
09-03 16:56:21.756 19497 19497 F DEBUG   : Build fingerprint: 'google/redfin/redfin:12/SPB4.210715.014/7654839:user/release-keys'
09-03 16:56:21.756 19497 19497 F DEBUG   : Revision: '0'
09-03 16:56:21.756 19497 19497 F DEBUG   : ABI: 'arm64'
09-03 16:56:21.756 19497 19497 F DEBUG   : Timestamp: 2021-09-03 16:56:20.571383719+0700
09-03 16:56:21.756 19497 19497 F DEBUG   : Process uptime: 272s
09-03 16:56:21.756 19497 19497 F DEBUG   : Cmdline: org.ppsspp.ppsspp
09-03 16:56:21.756 19497 19497 F DEBUG   : pid: 11066, tid: 16499, name: Thread-5  >>> org.ppsspp.ppsspp <<<
09-03 16:56:21.756 19497 19497 F DEBUG   : uid: 10293
09-03 16:56:21.756 19497 19497 F DEBUG   : signal 6 (SIGABRT), code -1 (SI_QUEUE), fault addr --------
09-03 16:56:21.756 19497 19497 F DEBUG   : Abort message: 'Scudo ERROR: corrupted chunk header at address 0x200007cc80a4150
09-03 16:56:21.756 19497 19497 F DEBUG   : '
09-03 16:56:21.756 19497 19497 F DEBUG   :     x0  0000000000000000  x1  0000000000004073  x2  0000000000000006  x3  0000007af990e6f0
09-03 16:56:21.756 19497 19497 F DEBUG   :     x4  0080808080808080  x5  0080808080808080  x6  0080808080808080  x7  8080808080808080
09-03 16:56:21.756 19497 19497 F DEBUG   :     x8  00000000000000f0  x9  8e2f5dca695a0b0e  x10 0000000000000000  x11 ffffff80fffffbdf
09-03 16:56:21.756 19497 19497 F DEBUG   :     x12 0000000000000001  x13 0000000000000030  x14 0000000000000030  x15 0000000000000010
09-03 16:56:21.756 19497 19497 F DEBUG   :     x16 0000007dab098050  x17 0000007dab074f80  x18 0000000000000001  x19 0000000000002b3a
09-03 16:56:21.756 19497 19497 F DEBUG   :     x20 0000000000004073  x21 00000000ffffffff  x22 0000000000000000  x23 b400007c880d06b0
09-03 16:56:21.756 19497 19497 F DEBUG   :     x24 0000007b0534cd88  x25 0000000000000002  x26 0000000000000053  x27 0000007af9910000
09-03 16:56:21.756 19497 19497 F DEBUG   :     x28 0000007af990ee10  x29 0000007af990e770
09-03 16:56:21.756 19497 19497 F DEBUG   :     lr  0000007dab027c3c  sp  0000007af990e6d0  pc  0000007dab027c68  pst 0000000000000000
09-03 16:56:21.756 19497 19497 F DEBUG   : backtrace:
09-03 16:56:21.756 19497 19497 F DEBUG   :       #00 pc 000000000004fc68  /apex/com.android.runtime/lib64/bionic/libc.so (abort+164) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-03 16:56:21.757 19497 19497 F DEBUG   :       #01 pc 0000000000040364  /apex/com.android.runtime/lib64/bionic/libc.so (scudo::die()+8) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-03 16:56:21.757 19497 19497 F DEBUG   :       #02 pc 0000000000040b00  /apex/com.android.runtime/lib64/bionic/libc.so (scudo::ScopedErrorReport::~ScopedErrorReport()+32) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-03 16:56:21.757 19497 19497 F DEBUG   :       #03 pc 0000000000040bc8  /apex/com.android.runtime/lib64/bionic/libc.so (scudo::reportHeaderCorruption(void*)+60) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-03 16:56:21.757 19497 19497 F DEBUG   :       #04 pc 0000000000042328  /apex/com.android.runtime/lib64/bionic/libc.so (scudo::Allocator<scudo::AndroidConfig, &(scudo_malloc_postinit)>::deallocate(void*, scudo::Chunk::Origin, unsigned long, unsigned long)+296) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-03 16:56:21.757 19497 19497 F DEBUG   :       #05 pc 0000000000fbf55c  /data/app/~~HFBz2D_t4Qqxa3NkAEiZnQ==/org.ppsspp.ppsspp-WtU7cD0-Q589UhMkG7oWVg==/lib/arm64/libppsspp_jni.so (UninstallExceptionHandler()+160) (BuildId: f891cc79ce7e9a3874014528ee58a234c740edda)
09-03 16:56:21.757 19497 19497 F DEBUG   :       #06 pc 0000000000cabeb4  /data/app/~~HFBz2D_t4Qqxa3NkAEiZnQ==/org.ppsspp.ppsspp-WtU7cD0-Q589UhMkG7oWVg==/lib/arm64/libppsspp_jni.so (CPU_Shutdown()+24) (BuildId: f891cc79ce7e9a3874014528ee58a234c740edda)
09-03 16:56:21.757 19497 19497 F DEBUG   :       #07 pc 0000000000caca98  /data/app/~~HFBz2D_t4Qqxa3NkAEiZnQ==/org.ppsspp.ppsspp-WtU7cD0-Q589UhMkG7oWVg==/lib/arm64/libppsspp_jni.so (PSP_Shutdown()+144) (BuildId: f891cc79ce7e9a3874014528ee58a234c740edda)
09-03 16:56:21.757 19497 19497 F DEBUG   :       #08 pc 0000000000ff7e14  /data/app/~~HFBz2D_t4Qqxa3NkAEiZnQ==/org.ppsspp.ppsspp-WtU7cD0-Q589UhMkG7oWVg==/lib/arm64/libppsspp_jni.so (EmuScreen::sendMessage(char const*, char const*)+332) (BuildId: f891cc79ce7e9a3874014528ee58a234c740edda)
09-03 16:56:21.757 19497 19497 F DEBUG   :       #09 pc 00000000017d4434  /data/app/~~HFBz2D_t4Qqxa3NkAEiZnQ==/org.ppsspp.ppsspp-WtU7cD0-Q589UhMkG7oWVg==/lib/arm64/libppsspp_jni.so (ScreenManager::sendMessage(char const*, char const*)+200) (BuildId: f891cc79ce7e9a3874014528ee58a234c740edda)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #10 pc 0000000000fe5b70  /data/app/~~HFBz2D_t4Qqxa3NkAEiZnQ==/org.ppsspp.ppsspp-WtU7cD0-Q589UhMkG7oWVg==/lib/arm64/libppsspp_jni.so (NativeUpdate()+336) (BuildId: f891cc79ce7e9a3874014528ee58a234c740edda)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #11 pc 0000000000fd1764  /data/app/~~HFBz2D_t4Qqxa3NkAEiZnQ==/org.ppsspp.ppsspp-WtU7cD0-Q589UhMkG7oWVg==/lib/arm64/libppsspp_jni.so (LockedNativeUpdateRender()+40) (BuildId: f891cc79ce7e9a3874014528ee58a234c740edda)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #12 pc 0000000000fd3364  /data/app/~~HFBz2D_t4Qqxa3NkAEiZnQ==/org.ppsspp.ppsspp-WtU7cD0-Q589UhMkG7oWVg==/lib/arm64/libppsspp_jni.so (Java_org_ppsspp_ppsspp_NativeActivity_runEGLRenderLoop+1016) (BuildId: f891cc79ce7e9a3874014528ee58a234c740edda)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #13 pc 0000000000330044  /apex/com.android.art/lib64/libart.so (art_quick_generic_jni_trampoline+148) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #14 pc 0000000000326764  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+548) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #15 pc 0000000000323b9c  /apex/com.android.art/lib64/libart.so (art::interpreter::ArtInterpreterToCompiledCodeBridge(art::Thread*, art::ArtMethod*, art::ShadowFrame*, unsigned short, art::JValue*)+312) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #16 pc 000000000032335c  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+2312) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #17 pc 0000000000321518  /apex/com.android.art/lib64/libart.so (MterpInvokeVirtual+436) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #18 pc 000000000033ce14  /apex/com.android.art/lib64/libart.so (mterp_op_invoke_virtual+20) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #19 pc 000000000010dbe8  [anon:dalvik-classes.dex extracted in memory from /data/app/~~HFBz2D_t4Qqxa3NkAEiZnQ==/org.ppsspp.ppsspp-WtU7cD0-Q589UhMkG7oWVg==/base.apk]
09-03 16:56:21.758 19497 19497 F DEBUG   :       #20 pc 0000000000349634  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.llvm.15880507524294088337)+628) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #21 pc 0000000000352ea4  /apex/com.android.art/lib64/libart.so (art::interpreter::ArtInterpreterToInterpreterBridge(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame*, art::JValue*)+124) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #22 pc 00000000003234bc  /apex/com.android.art/lib64/libart.so (bool art::interpreter::DoCall<false, false>(art::ArtMethod*, art::Thread*, art::ShadowFrame&, art::Instruction const*, unsigned short, art::JValue*)+2664) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #23 pc 0000000000464674  /apex/com.android.art/lib64/libart.so (MterpInvokeInterface+464) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #24 pc 000000000033d014  /apex/com.android.art/lib64/libart.so (mterp_op_invoke_interface+20) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #25 pc 00000000000eda70  /apex/com.android.art/javalib/core-oj.jar
09-03 16:56:21.758 19497 19497 F DEBUG   :       #26 pc 0000000000349634  /apex/com.android.art/lib64/libart.so (art::interpreter::Execute(art::Thread*, art::CodeItemDataAccessor const&, art::ShadowFrame&, art::JValue, bool, bool) (.llvm.15880507524294088337)+628) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #27 pc 0000000000348950  /apex/com.android.art/lib64/libart.so (artQuickToInterpreterBridge+1184) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #28 pc 0000000000330178  /apex/com.android.art/lib64/libart.so (art_quick_to_interpreter_bridge+88) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #29 pc 0000000000326764  /apex/com.android.art/lib64/libart.so (art_quick_invoke_stub+548) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #30 pc 000000000038fc74  /apex/com.android.art/lib64/libart.so (art::ArtMethod::Invoke(art::Thread*, unsigned int*, unsigned int, art::JValue*, char const*)+156) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #31 pc 00000000003ca084  /apex/com.android.art/lib64/libart.so (art::JValue art::InvokeVirtualOrInterfaceWithJValues<art::ArtMethod*>(art::ScopedObjectAccessAlreadyRunnable const&, _jobject*, art::ArtMethod*, jvalue const*)+380) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #32 pc 000000000071163c  /apex/com.android.art/lib64/libart.so (art::Thread::CreateCallback(void*)+1008) (BuildId: 50c25b4aa1972771dac15f87d726a606)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #33 pc 00000000000b19e0  /apex/com.android.runtime/lib64/bionic/libc.so (__pthread_start(void*)+264) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-03 16:56:21.758 19497 19497 F DEBUG   :       #34 pc 000000000005148c  /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 16a146efb5b048d744b674e300d5bcaf)
09-03 16:56:21.813   619   619 E tombstoned: Tombstone written to: tombstone_16

From PPSSPP Debug build.

unknownbrackets commented 3 years ago

That's not good, that implies memory corruption. It was already shutting down, though.

It draws the text box at 3075/3302, which seems fine.

After that, 3114/3302 appears to be intended to show a portrait. However, it shows a part of the text that was just drawn.

Interestingly, it goes through the trouble of setting up some miplevel texture addresses, but doesn't enable them. That said, the texture data at those addresses doesn't look interesting. Must be a bug. This even happens for the working portrait.

Anyway, my guess is that some error occurs allocating or loading the picture data, and then it sets the old texture address again. Just noting this for clarity - I don't think it's a graphics issue, specifically, but rather something CPU/HLE related.

-[Unknown]

Saramagrean commented 3 years ago

Seem like graphic show character picture cut-in correctly except effect border is strange flickering.

TRK2-Flikering

Video. (831 KB.) https://user-images.githubusercontent.com/26355472/132116980-3a597942-8481-4f90-8121-e7f8f0eb206a.mp4

TRK2-Hang

and dump from that scene. GE DUMP.zip

sum2012 commented 3 years ago

Can you share the save status ? I want to test again

在 2021年9月2日週四 下午5:20,Benjamin Benda Gates @.***> 寫道:

v1.11.3-1237-g730d2d288 still crash.

09-02 16:18:24.743 4373 4741 D DeviceStateHelper: Audio mode: 0 09-02 16:18:24.758 23017 23017 F DEBUG : 09-02 16:18:24.759 23017 23017 F DEBUG : Build fingerprint: 'google/redfin/redfin:12/SPB4.210715.014/7654839:user/release-keys' 09-02 16:18:24.759 23017 23017 F DEBUG : Revision: '0' 09-02 16:18:24.759 23017 23017 F DEBUG : ABI: 'arm64' 09-02 16:18:24.759 23017 23017 F DEBUG : Timestamp: 2021-09-02 16:18:23.514093388+0700 09-02 16:18:24.759 23017 23017 F DEBUG : Process uptime: 614s 09-02 16:18:24.759 23017 23017 F DEBUG : Cmdline: org.ppsspp.ppsspp 09-02 16:18:24.759 23017 23017 F DEBUG : pid: 7915, tid: 21925, name: Emu >>> org.ppsspp.ppsspp <<< 09-02 16:18:24.759 23017 23017 F DEBUG : uid: 10239 09-02 16:18:24.759 23017 23017 F DEBUG : signal 11 (SIGSEGV), code 1 (SEGV_MAPERR), fault addr 0x0 09-02 16:18:24.759 23017 23017 F DEBUG : Cause: null pointer dereference 09-02 16:18:24.759 23017 23017 F DEBUG : x0 0000000000000000 x1 0000000000000004 x2 0000000000000000 x3 000000798de78047 09-02 16:18:24.759 23017 23017 F DEBUG : x4 00000000000001a9 x5 000000798de7811f x6 00000079ece11410 x7 000000000897f6e8 09-02 16:18:24.759 23017 23017 F DEBUG : x8 0000000000000003 x9 0000000000000020 x10 0000000000000000 x11 000000798e15b1d0 09-02 16:18:24.759 23017 23017 F DEBUG : x12 000000798e181d30 x13 000000003f800000 x14 0000000000000000 x15 0000000000000000 09-02 16:18:24.759 23017 23017 F DEBUG : x16 000000798e14a8a8 x17 000000798d63a5d8 x18 0000000000000003 x19 0000000000000000 09-02 16:18:24.759 23017 23017 F DEBUG : x20 0000000000000000 x21 00000000f8800000 x22 00000079ece12000 x23 000000798e15b1d0 09-02 16:18:24.759 23017 23017 F DEBUG : x24 000000798dea9e80 x25 00000000f8800000 x26 000000798dea9e80 x27 000000798e0fc078 09-02 16:18:24.759 23017 23017 F DEBUG : x28 00000079ecd19000 x29 00000079ece11720 09-02 16:18:24.759 23017 23017 F DEBUG : lr 000000798d630d70 sp 00000079ece11710 pc 000000798d63a6ec pst 0000000020000000 09-02 16:18:24.759 23017 23017 F DEBUG : backtrace: 09-02 16:18:24.759 23017 23017 F DEBUG : #00 pc 000000000054f6ec /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (ReadVector(float, VectorSize, int)+276) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.759 23017 23017 F DEBUG : #01 pc 0000000000545d6c /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (MIPSInt::Int_SVQ(Memory::Opcode)+288) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.759 23017 23017 F DEBUG : #02 pc 000000000054ebcc /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (MIPSInterpret(Memory::Opcode)+172) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.759 23017 23017 F DEBUG : #03 pc 000000000054ed94 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (MIPSInterpret_RunUntil(unsigned long long)+148) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.759 23017 23017 F DEBUG : #04 pc 000000000056e57c /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (PSP_RunLoopWhileState()+116) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.759 23017 23017 F DEBUG : #05 pc 00000000006d9738 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (EmuScreen::render()+296) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.759 23017 23017 F DEBUG : #06 pc 0000000000bcc764 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (ScreenManager::render()+220) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.759 23017 23017 F DEBUG : #07 pc 00000000006d03ac /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (NativeRender(GraphicsContext)+752) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.759 23017 23017 F DEBUG : #08 pc 00000000006c7168 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (UpdateRunLoopAndroid(_JNIEnv)+44) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.759 23017 23017 F DEBUG : #09 pc 00000000006c9448 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.760 23017 23017 F DEBUG : #10 pc 00000000003e40d0 /data/app/~~uejzhAXIXZe_kSdgCDU02A==/org.ppsspp.ppsspp-9EUzOC1bfOu5lhpHG5qGgw==/lib/arm64/libppsspp_jni.so (void std::ndk1::thread_proxy<std::ndk1::tuple<std::ndk1::unique_ptr<std::ndk1::thread_struct, std::ndk1::default_delete >, void ()()> >(void)+44) (BuildId: 76a95db4e8eb35a8b0a619edbb267df7dda00995) 09-02 16:18:24.760 23017 23017 F DEBUG : #11 pc 00000000000b19e0 /apex/com.android.runtime/lib64/bionic/libc.so (pthread_start(void*)+264) (BuildId: 16a146efb5b048d744b674e300d5bcaf) 09-02 16:18:24.760 23017 23017 F DEBUG : #12 pc 000000000005148c /apex/com.android.runtime/lib64/bionic/libc.so (__start_thread+64) (BuildId: 16a146efb5b048d744b674e300d5bcaf) 09-02 16:18:24.805 617 617 E tombstoned: Tombstone written to: tombstone_12

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/hrydgard/ppsspp/issues/5496#issuecomment-911441156, or unsubscribe https://github.com/notifications/unsubscribe-auth/AAQTT7FO4PJ3VP7LERVUUTTT746W5ANCNFSM4AMJ3OYQ . Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

Saramagrean commented 3 years ago

Here, I download from gamefaq. :) https://gamefaqs.gamespot.com/psp/653321-toriko-gourmet-survival-2/saves

sum2012 commented 10 months ago

I want test again, Can anyone give me save status rather than game save ? Thanks

Saramagrean commented 10 months ago

I want test again, Can anyone give me save status rather than game save ? Thanks

Here. NPJH50564R00.zip

v1.16.6-341-g4d7f00f96 still crash.

sum2012 commented 10 months ago

@Saramagrean It is game save , I need save status 1

Saramagrean commented 10 months ago

Sure.

sum2012 commented 10 months ago

@Saramagrean Very thanks

2 3