[Scummvm-tracker] [ScummVM :: Bugs] #17236: MACVENTURE: Uninvited: Crash when unlocking the cages in the heart of the maze

[ScummVM :: Bugs]

#17236: MACVENTURE: Uninvited: Crash when unlocking the cages in the heart of the
maze
-------------------------+-----------------------
Reporter:  eriktorbjorn  |      Owner:  (none)
    Type:  defect        |     Status:  new
Priority:  normal        |  Component:  --Unset--
 Version:                |   Keywords:
    Game:                |
-------------------------+-----------------------
 Zojoi re-release of the game.

 I reached the heart of the maze, where I tried to unlock the three cages:

 The game crashed with an invalid rect. The crash happened in clip(), where
 the current rect was `{top = 110, left = 142, bottom = 277, right = 121}`
 and the input rect was `{top = 0, left = 0, bottom = 110, right = 105}`.

 This is probably a game-breaking bug, and I'm not able to get any further.

 {{{
 (gdb) bt
 #0  __pthread_kill_implementation (no_tid=0, signo=6, threadid=<optimized
 out>)
     at ./nptl/pthread_kill.c:44
 #1  __pthread_kill_internal (signo=6, threadid=<optimized out>)
     at ./nptl/pthread_kill.c:78
 #2  __GI___pthread_kill (threadid=<optimized out>, signo=signo at entry=6)
     at ./nptl/pthread_kill.c:89
 #3  0x00007ffff604527e in __GI_raise (sig=sig at entry=6)
     at ../sysdeps/posix/raise.c:26
 #4  0x00007ffff60288ff in __GI_abort () at ./stdlib/abort.c:79
 #5  0x00007ffff602881b in __assert_fail_base
     (fmt=0x7ffff61d1208 "%s%s%s:%u: %s%sAssertion `%s' failed.\n%n",
 assertion=assertion at entry=0x5555573f5138 "isValidRect()",
 file=file at entry=0x5555573f5128 "./common/rect.h", line=line at entry=349,
 function=function at entry=0x5555573f5190 "void Common::RectBase<T,
 ConcreteRect, ConcretePoint>::clip(const ConcreteRect&) [with T = short
 int; ConcreteRect = Common::Rect; ConcretePoint = Common::Point]") at
 ./assert/assert.c:96
 #6  0x00007ffff603b517 in __assert_fail
     (assertion=0x5555573f5138 "isValidRect()", file=0x5555573f5128
 "./common/rect.h", line=349, function=0x5555573f5190 "void
 Common::RectBase<T, ConcreteRect, ConcretePoint>::clip(const
 ConcreteRect&) [with T = short int; ConcreteRect = Common::Rect;
 ConcretePoint = Common::Point]") at ./assert/assert.c:105
 #7  0x00005555585a56d8 in Common::RectBase<short, Common::Rect,
 Common::Point>::clip (this=0x7fffffffbf00, r=...) at ./common/rect.h:349
 #8  0x00005555585a5675 in Common::RectBase<short, Common::Rect,
 Common::Point>::clip (this=0x7fffffffbf00, maxw=105, maxh=110) at
 ./common/rect.h:369
 #9  0x000055555df6b8c4 in Graphics::Surface::fillRect
     (this=0x555564958c78, r=..., color=1) at graphics/surface.cpp:364
 #10 0x000055555895eac4 in Graphics::ManagedSurface::fillRect
     (this=0x555564958c70, r=..., color=1) at
 ./graphics/managed_surface.h:955
 #11 0x000055555b5dad62 in MacVenture::Gui::updateWindow
     (this=0x5555641d26f0, winID=5, containerOpen=true)
     at engines/macventure/gui.cpp:1084
 #12 0x000055555b5eb718 in MacVenture::MacVentureEngine::openObject
     (this=0x5555641e9220, objID=468) at
 engines/macventure/macventure.cpp:1057
 #13 0x000055555b5e9583 in MacVenture::MacVentureEngine::runObjQueue
     (this=0x5555641e9220) at engines/macventure/macventure.cpp:632
 #14 0x000055555b5e93d4 in MacVenture::MacVentureEngine::updateState
     (this=0x5555641e9220, pause=true) at
 engines/macventure/macventure.cpp:603
 #15 0x000055555b5f42d8 in MacVenture::ScriptEngine::opdeUPSC
     (this=0x555564942710, state=0x55556308a054, frame=0x55556308a040)
     at engines/macventure/script.cpp:1176
 #16 0x000055555b5f1675 in MacVenture::ScriptEngine::runFunc
     (this=0x555564942710, frame=0x55556308a040)
     at engines/macventure/script.cpp:477
 #17 0x000055555b5f0a82 in MacVenture::ScriptEngine::loadScript
     (this=0x555564942710, frame=0x55556308a040, scriptID=924)
     at engines/macventure/script.cpp:165
 #18 0x000055555b5f0961 in MacVenture::ScriptEngine::execFrame
     (this=0x555564942710, execAll=true) at
 engines/macventure/script.cpp:148
 #19 0x000055555b5f05cb in MacVenture::ScriptEngine::resume
     (this=0x555564942710, execAll=true) at
 engines/macventure/script.cpp:70
 #20 0x000055555b5f054c in MacVenture::ScriptEngine::runControl
     (this=0x555564942710, action=MacVenture::kOperate, source=625,
 destination=475, delta=...) at engines/macventure/script.cpp:64
 #21 0x000055555b5e92bf in MacVenture::MacVentureEngine::runScriptEngine
     (this=0x5555641e9220) at engines/macventure/macventure.cpp:579
 #22 0x000055555b5e7cf7 in MacVenture::MacVentureEngine::run
     (this=0x5555641e9220) at engines/macventure/macventure.cpp:189
 #23 0x00005555585660c0 in runGame
     (enginePlugin=0x5555606682a0, system=..., game=...,
 meDescriptor=0x555561ec4580) at base/main.cpp:328
 #24 0x0000555558568741 in scummvm_main (argc=1, argv=0x7fffffffdae8)
     at base/main.cpp:840
 #25 0x0000555558562caa in main (argc=1, argv=0x7fffffffdae8)
     at backends/platform/sdl/posix/posix-main.cpp:56
 }}}
-- 
Ticket URL: <https://bugs.scummvm.org/ticket/17236>
ScummVM :: Bugs <https://bugs.scummvm.org>
ScummVM