[Scummvm-tracker] [ScummVM] #9783: SCI: castlebrain: Crash in Wordsearch puzzle (was: SCI: castlebrain: Uninitialized read for temp 14 from method word::dispatchEvent)

[tsoliman]

#9783: SCI: castlebrain: Crash in Wordsearch puzzle
----------------------------------+-------------------------
  Reporter:  tsoliman             |      Owner:  (none)
      Type:  defect               |     Status:  new
  Priority:  normal               |  Component:  Engine: SCI
Resolution:                       |   Keywords:
      Game:  Castle of Dr. Brain  |
----------------------------------+-------------------------
Description changed by tsoliman:

Old description:

> Self compiled from git 8111544bd9
>
> Crashes with:
>
> Uninitialized read for temp 14 from method word::dispatchEvent (room 320,
> script 325, localCall ffffffff)!
>
> Backtrace:
>
> Call stack (current base: 0x0):
>  0: script 994 - Brain::replay()
>      obj at 0001:087c pc=0005:042f sp=ST:0000 fp=ST:0000 argp:ST:0001
>  1: script 994 - Brain::doit()
>      by 0 obj at 0001:087c pc=0005:0564 sp=ST:0003 fp=ST:0002 argp:ST:0001
>  2: script 996 - User::doit()
>      by 1 obj at 0016:02b2 pc=0016:008e sp=ST:0005 fp=ST:0005 argp:ST:0004
>  3: script 996 - User::handleEvent(0016:000c)
>      by 2 obj at 0016:02b2 pc=0016:024d sp=ST:000a fp=ST:0008 argp:ST:0006
>  4: script 999 - features::handleEvent(0016:000c)
>      by 3 obj at 0005:0028 pc=0004:0659 sp=ST:0010 fp=ST:000d argp:ST:000b
>  5: script 950 - leftFeat::handleEvent(0016:000c)
>      by 4 obj at 0026:0d3e pc=0019:0258 sp=ST:0014 fp=ST:0013 argp:ST:0011
>  6: script 950 - CueObj::changeState(0000:0003)
>      by 5 obj at 0019:00ae pc=0019:009b sp=ST:0018 fp=ST:0017 argp:ST:0015
>  7: script 320 - leftFeat::doVerb(0000:0003, 0000:0000)
>      by 6 obj at 0026:0d3e pc=0026:0ce9 sp=ST:001c fp=ST:001c argp:ST:0019
>  8: script 325 - word::init()
>      by 7 obj at 002a:06ce pc=002a:0068 sp=ST:001f fp=ST:001e argp:ST:001d
>  9: script 325 - word::show()
>      by 8 obj at 002a:06ce pc=002a:0077 sp=ST:0021 fp=ST:0021 argp:ST:0020
>  a: script 934 - PuzzleBar::show()
>      by 9 obj at 002a:06ce pc=000b:0531 sp=ST:0028 fp=ST:0023 argp:ST:0022
>  b: script 934 - word::hide()
>      by a obj at 002a:06ce pc=000b:06eb sp,fp:carry argp:ST:002b
>  c: script 937 - word::doit()
>      by a obj at 002a:06ce pc=0008:0a79 sp=ST:002d fp=ST:002c argp:ST:0029
>  d: script 325 - word::dispatchEvent(0021:05a7)
>      by c obj at 002a:06ce pc=002a:0593 sp=ST:0067 fp=ST:0030 argp:ST:002e
>
> Steps to reproduce:
> - load the attached savegame
> - Open the door on the left (word search puzzle)
> - Pick a letter in the middle and aggressively click and double-click it
> very rapidly
> - Crash

New description:

 Self compiled from git 8111544bd9

 Crashes with:

 {{{
 Uninitialized read for temp 14 from method word::dispatchEvent (room 320,
 script 325, localCall ffffffff)!
 }}}

 Backtrace:

 {{{
 Call stack (current base: 0x0):
  0: script 994 - Brain::replay()
      obj at 0001:087c pc=0005:042f sp=ST:0000 fp=ST:0000 argp:ST:0001
  1: script 994 - Brain::doit()
      by 0 obj at 0001:087c pc=0005:0564 sp=ST:0003 fp=ST:0002 argp:ST:0001
  2: script 996 - User::doit()
      by 1 obj at 0016:02b2 pc=0016:008e sp=ST:0005 fp=ST:0005 argp:ST:0004
  3: script 996 - User::handleEvent(0016:000c)
      by 2 obj at 0016:02b2 pc=0016:024d sp=ST:000a fp=ST:0008 argp:ST:0006
  4: script 999 - features::handleEvent(0016:000c)
      by 3 obj at 0005:0028 pc=0004:0659 sp=ST:0010 fp=ST:000d argp:ST:000b
  5: script 950 - leftFeat::handleEvent(0016:000c)
      by 4 obj at 0026:0d3e pc=0019:0258 sp=ST:0014 fp=ST:0013 argp:ST:0011
  6: script 950 - CueObj::changeState(0000:0003)
      by 5 obj at 0019:00ae pc=0019:009b sp=ST:0018 fp=ST:0017 argp:ST:0015
  7: script 320 - leftFeat::doVerb(0000:0003, 0000:0000)
      by 6 obj at 0026:0d3e pc=0026:0ce9 sp=ST:001c fp=ST:001c argp:ST:0019
  8: script 325 - word::init()
      by 7 obj at 002a:06ce pc=002a:0068 sp=ST:001f fp=ST:001e argp:ST:001d
  9: script 325 - word::show()
      by 8 obj at 002a:06ce pc=002a:0077 sp=ST:0021 fp=ST:0021 argp:ST:0020
  a: script 934 - PuzzleBar::show()
      by 9 obj at 002a:06ce pc=000b:0531 sp=ST:0028 fp=ST:0023 argp:ST:0022
  b: script 934 - word::hide()
      by a obj at 002a:06ce pc=000b:06eb sp,fp:carry argp:ST:002b
  c: script 937 - word::doit()
      by a obj at 002a:06ce pc=0008:0a79 sp=ST:002d fp=ST:002c argp:ST:0029
  d: script 325 - word::dispatchEvent(0021:05a7)
      by c obj at 002a:06ce pc=002a:0593 sp=ST:0067 fp=ST:0030 argp:ST:002e

 }}}

 Steps to reproduce:
 - load the attached savegame
 - Open the door on the left (word search puzzle)
 - Pick a letter in the middle and aggressively click and double-click it
 very rapidly
 - Crash

 Game version is 1.1 for what it's worth.

--

--
Ticket URL: <https://bugs.scummvm.org/ticket/9783#comment:1>
ScummVM <https://bugs.scummvm.org>
ScummVM