Reproducible crash bug

[Beherith]

Massive crash for all involved:
http://replays.adune.nl/?2072
replay crashes as well, at 2 minutes. On Throne v1 with ba 7.04
http://buildbot.eat-peet.net/spring/sta ... 57262.html

[hoijui]

having a look

[Beherith]

Thanks, post if more info is needed.

[Tobi]

Did someone make a huge area order?

[hoijui]

running the demo in GDB with HEAD of 0.80.5-branch.
triggers an assert, but its an other part then your stack trace.
it somehow came up with 110 as a player number.

Code: Select all

#3  0x00000000006c88dc in CPlayerHandler::Player (this=0x1900160, i=110) at release_live/rts/Game/PlayerHandler.h:36
#4  0x00000000006e1e57 in CGame::ClientReadNet (this=0x1ecbc20) at release_live/rts/Game/Game.cpp:4067
#5  0x00000000006e39f3 in CGame::Update (this=0x1ecbc20) at release_live/rts/Game/Game.cpp:2839
#6  0x0000000000ce498e in SpringApp::Update (this=0x7fffffffdb60) at release_live/rts/System/SpringApp.cpp:849
#7  0x0000000000cecdb0 in SpringApp::Run (this=0x7fffffffdb60, argc=2, argv=0x7fffffffdc98) at release_live/rts/System/SpringApp.cpp:977
#8  0x0000000000d200e1 in Run (argc=2, argv=0x7fffffffdc98) at release_live/rts/System/Main.cpp:111
#9  0x0000000000d20136 in main (argc=2, argv=0x7fffffffdc98) at release_live/rts/System/Main.cpp:127
(gdb) list release_live/rts/Game/Game.cpp:4067
Line 4067 of "release_live/rts/Game/Game.cpp" starts at address 0x6e1e45 <_ZN5CGame13ClientReadNetEv+13221> and ends at 0x6e1e60 <_ZN5CGame13ClientReadNetEv+13248>.

see attached demo analyser output.
Tobi: i guess you know how to search are order there, let you do that :D
edit: ... or tell me how to look for it, if you know by head

[Tobi]

No I don't, I just know that's a big cause of everyone crashing in 0.80.5

(Actually in all releases since long time ago up to 0.80.5.2...)

[hoijui]

ok.. ill try to find out myself then

[hoijui]

last (unit-) command given before crash is this:

Code: Select all

005180 COMMAND Playernum:12 Size: 25

msg overhead + command id is 9 -> 25 - 9 = 16 bytes only float params -> 4 floats
this could be one position and a radius -> could be area command
-> we assume it is so, and therefore fixed in RC

[Beherith]

Thanks!