Crash - Revision history

Skazzy: Reverted edits by Oyion gaming (talk) to last revision by Meatball132

2024-12-09T02:12:10Z

Reverted edits by Oyion gaming (talk) to last revision by Meatball132

← Older revision		Revision as of 02:12, 9 December 2024
Line 22:		Line 22:
	\| Bully/Bob-omb Angle Overflow \|\| style="background-color: #ff9696"\| Floating-Point Overflow \|\| When a Bully or Bob-omb is out-of-bounds, the code to keep their angle between -32768 and 32767 doesn't run, and eventually it becomes big enough that a floating-point overflow exception occurs when casted back to an int.<ref>[https://www.youtube.com/watch?v=ZrMxO1eZPGU "Game Crash from Bully Angle Double-to-Int Conversion" by UncommentatedPannen]</ref><ref>[https://www.youtube.com/watch?v=kwQu5qQg-M0 "Game Crash from Bob-omb Angle Double-to-Int Conversion" by UncommentatedPannen]</ref>		\| Bully/Bob-omb Angle Overflow \|\| style="background-color: #ff9696"\| Floating-Point Overflow \|\| When a Bully or Bob-omb is out-of-bounds, the code to keep their angle between -32768 and 32767 doesn't run, and eventually it becomes big enough that a floating-point overflow exception occurs when casted back to an int.<ref>[https://www.youtube.com/watch?v=ZrMxO1eZPGU "Game Crash from Bully Angle Double-to-Int Conversion" by UncommentatedPannen]</ref><ref>[https://www.youtube.com/watch?v=kwQu5qQg-M0 "Game Crash from Bob-omb Angle Double-to-Int Conversion" by UncommentatedPannen]</ref>
	\|-		\|-
	\| Deleting a non-existent file on the File Select Screen<ref>[https://youtu.be/-N5OQPgA6YI "How to crash Super Mario 64 in 20 seconds" by rattleman123456]</ref> \|\| style="background-color: #fffca8"\| Address Error \|\| The game tries to find the button object corresponding to the file and set its state to erased. However, the button object doesn't exist (a New File button is there instead), so it ends up trying to write to NULL		\| Deleting a non-existent file on the File Select Screen<ref>[https://youtu.be/-N5OQPgA6YI "How to crash Super Mario 64 in 20 seconds" by rattleman123456]</ref> \|\| style="background-color: #fffca8"\| Address Error \|\| The game tries to find the button object corresponding to the file and set its state to erased. However, the button object doesn't exist (a New File button is there instead), so it ends up trying to write to NULL.
	~~In different versions like the new switch version it could not crash instead say file 9 has been deleted~~.
	\|-		\|-
	\| Moving a shadow above [[surface]] 12 while it's over OOB \|\| style="background-color: #fffca8"\| Address Error \|\| The surface SURFACE_INTANGIBLE (surface 12) has the special property that in some cases find_floor will look for floors below an intangible surface if it finds one. If there's no floor below the intangible surface, find_floor will return NULL for the found floor but the height of the intangible floor. As floors are null-checked by checking if their height is the default value of -11000, this will cause a NULL dereference the next time the game tries to use the floor variable.		\| Moving a shadow above [[surface]] 12 while it's over OOB \|\| style="background-color: #fffca8"\| Address Error \|\| The surface SURFACE_INTANGIBLE (surface 12) has the special property that in some cases find_floor will look for floors below an intangible surface if it finds one. If there's no floor below the intangible surface, find_floor will return NULL for the found floor but the height of the intangible floor. As floors are null-checked by checking if their height is the default value of -11000, this will cause a NULL dereference the next time the game tries to use the floor variable.

Oyion gaming: /* CPU Crashes */Idk

2024-12-08T23:09:37Z

CPU Crashes: Idk

← Older revision		Revision as of 23:09, 8 December 2024
Line 22:		Line 22:
	\| Bully/Bob-omb Angle Overflow \|\| style="background-color: #ff9696"\| Floating-Point Overflow \|\| When a Bully or Bob-omb is out-of-bounds, the code to keep their angle between -32768 and 32767 doesn't run, and eventually it becomes big enough that a floating-point overflow exception occurs when casted back to an int.<ref>[https://www.youtube.com/watch?v=ZrMxO1eZPGU "Game Crash from Bully Angle Double-to-Int Conversion" by UncommentatedPannen]</ref><ref>[https://www.youtube.com/watch?v=kwQu5qQg-M0 "Game Crash from Bob-omb Angle Double-to-Int Conversion" by UncommentatedPannen]</ref>		\| Bully/Bob-omb Angle Overflow \|\| style="background-color: #ff9696"\| Floating-Point Overflow \|\| When a Bully or Bob-omb is out-of-bounds, the code to keep their angle between -32768 and 32767 doesn't run, and eventually it becomes big enough that a floating-point overflow exception occurs when casted back to an int.<ref>[https://www.youtube.com/watch?v=ZrMxO1eZPGU "Game Crash from Bully Angle Double-to-Int Conversion" by UncommentatedPannen]</ref><ref>[https://www.youtube.com/watch?v=kwQu5qQg-M0 "Game Crash from Bob-omb Angle Double-to-Int Conversion" by UncommentatedPannen]</ref>
	\|-		\|-
	\| Deleting a non-existent file on the File Select Screen<ref>[https://youtu.be/-N5OQPgA6YI "How to crash Super Mario 64 in 20 seconds" by rattleman123456]</ref> \|\| style="background-color: #fffca8"\| Address Error \|\| The game tries to find the button object corresponding to the file and set its state to erased. However, the button object doesn't exist (a New File button is there instead), so it ends up trying to write to NULL.		\| Deleting a non-existent file on the File Select Screen<ref>[https://youtu.be/-N5OQPgA6YI "How to crash Super Mario 64 in 20 seconds" by rattleman123456]</ref> \|\| style="background-color: #fffca8"\| Address Error \|\| The game tries to find the button object corresponding to the file and set its state to erased. However, the button object doesn't exist (a New File button is there instead), so it ends up trying to write to NULL
			In different versions like the new switch version it could not crash instead say file 9 has been deleted.
	\|-		\|-
	\| Moving a shadow above [[surface]] 12 while it's over OOB \|\| style="background-color: #fffca8"\| Address Error \|\| The surface SURFACE_INTANGIBLE (surface 12) has the special property that in some cases find_floor will look for floors below an intangible surface if it finds one. If there's no floor below the intangible surface, find_floor will return NULL for the found floor but the height of the intangible floor. As floors are null-checked by checking if their height is the default value of -11000, this will cause a NULL dereference the next time the game tries to use the floor variable.		\| Moving a shadow above [[surface]] 12 while it's over OOB \|\| style="background-color: #fffca8"\| Address Error \|\| The surface SURFACE_INTANGIBLE (surface 12) has the special property that in some cases find_floor will look for floors below an intangible surface if it finds one. If there's no floor below the intangible surface, find_floor will return NULL for the found floor but the height of the intangible floor. As floors are null-checked by checking if their height is the default value of -11000, this will cause a NULL dereference the next time the game tries to use the floor variable.

Meatball132: /* CPU Crashes */ Health is set to 4, not 3

2024-08-01T23:00:37Z

CPU Crashes: Health is set to 4, not 3

← Older revision		Revision as of 23:00, 1 August 2024
Line 40:		Line 40:
	\| Warping out of a level while passing over a loading zone \|\| style="background-color: #fffca8"\| Address Error \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.		\| Warping out of a level while passing over a loading zone \|\| style="background-color: #fffca8"\| Address Error \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.
	\|-		\|-
	\| Entering Wiggler's Cave on the Disk Drive version \|\| style="background-color: #ff9696"\| Floating-Point Unimplemented Operation \|\| When Wiggler is initialized, his health value is 2048 for a single frame before being reset to 3. Wiggler uses his health to index into a table to get his speed (to move faster when at lower health); 2048 causes it to index out of range and read a denormalized floating-point number as his health, which causes an unimplemented operation exception since the N64 does not implement any operations on denormalized floats except comparisons.		\| Entering Wiggler's Cave on the Disk Drive version \|\| style="background-color: #ff9696"\| Floating-Point Unimplemented Operation \|\| When Wiggler is initialized, his health value is 2048 for a single frame before being reset to 4. Wiggler uses his health to index into a table to get his speed (to move faster when at lower health); 2048 causes it to index out of range and read a denormalized floating-point number as his health, which causes an unimplemented operation exception since the N64 does not implement any operations on denormalized floats except comparisons.
	\|-		\|-
	\| Having an object too far away from the camera make a noise (JP only)		\| Having an object too far away from the camera make a noise (JP only)

Deldee: typo fixed

2024-03-05T19:34:11Z

typo fixed

← Older revision		Revision as of 19:34, 5 March 2024
Line 48:		Line 48:
	\|Casting a shadow on a corrupted triangle		\|Casting a shadow on a corrupted triangle
	\| style="background-color: #ff9696" \| Floating-Point Unimplemented Operation		\| style="background-color: #ff9696" \| Floating-Point Unimplemented Operation
	\|The limit ~~iof~~ surface triangle loaded at once in the game is 2300. However, in [[Hazy Maze Cave]], when using [[Mario's Platform Adventure]], it is possible to load more triangle than this limit. This causes the surfaceList to overwrite part of the face table. If the game tries to cast a shadow on one of the "triangles" created by this situation, the normalX of the triangle will be a pointer and be processed as a denormalized float, which crashes the game when used for arithmethic.<ref>[https://www.twitch.tv/videos/1951116583?t=00h48m42s HMC Denorm Crash]</ref>		\|The limit of surface triangle loaded at once in the game is 2300. However, in [[Hazy Maze Cave]], when using [[Mario's Platform Adventure]], it is possible to load more triangle than this limit. This causes the surfaceList to overwrite part of the face table. If the game tries to cast a shadow on one of the "triangles" created by this situation, the normalX of the triangle will be a pointer and be processed as a denormalized float, which crashes the game when used for arithmethic.<ref>[https://www.twitch.tv/videos/1951116583?t=00h48m42s HMC Denorm Crash]</ref>
	\|-		\|-
	\|Having the same position as the camera's position \|\| style="background-color: #ff9696" \|Floating-Point Division-by-Zero\|\|When Mario stands in the same position as the camera, the game will crash due to a division by zero error.<ref>[https://www.youtube.com/watch?v=vK16L2J0la4 "Faster fastest crash in BoB" by Madghostkek]</ref>		\|Having the same position as the camera's position \|\| style="background-color: #ff9696" \|Floating-Point Division-by-Zero\|\|When Mario stands in the same position as the camera, the game will crash due to a division by zero error.<ref>[https://www.youtube.com/watch?v=vK16L2J0la4 "Faster fastest crash in BoB" by Madghostkek]</ref>

Deldee: wrong source for denorm

2023-10-15T16:42:02Z

wrong source for denorm

← Older revision		Revision as of 16:42, 15 October 2023
Line 48:		Line 48:
	\|Casting a shadow on a corrupted triangle		\|Casting a shadow on a corrupted triangle
	\| style="background-color: #ff9696" \| Floating-Point Unimplemented Operation		\| style="background-color: #ff9696" \| Floating-Point Unimplemented Operation
	\|The limit iof surface triangle loaded at once in the game is 2300. However, in [[Hazy Maze Cave]], when using [[Mario's Platform Adventure]], it is possible to load more triangle than this limit. This causes the surfaceList to overwrite part of the face table. If the game tries to cast a shadow on one of the "triangles" created by this situation, the normalX of the triangle will be a pointer and be processed as a denormalized float, which crashes the game when used for arithmethic.<ref>[https://www.twitch.tv/~~danpark~~/~~v/1934180374~~?~~sr=a&~~t=~~3885s~~ HMC Denorm Crash]</ref>		\|The limit iof surface triangle loaded at once in the game is 2300. However, in [[Hazy Maze Cave]], when using [[Mario's Platform Adventure]], it is possible to load more triangle than this limit. This causes the surfaceList to overwrite part of the face table. If the game tries to cast a shadow on one of the "triangles" created by this situation, the normalX of the triangle will be a pointer and be processed as a denormalized float, which crashes the game when used for arithmethic.<ref>[https://www.twitch.tv/videos/1951116583?t=00h48m42s HMC Denorm Crash]</ref>
	\|-		\|-
	\|Having the same position as the camera's position \|\| style="background-color: #ff9696" \|Floating-Point Division-by-Zero\|\|When Mario stands in the same position as the camera, the game will crash due to a division by zero error.<ref>[https://www.youtube.com/watch?v=vK16L2J0la4 "Faster fastest crash in BoB" by Madghostkek]</ref>		\|Having the same position as the camera's position \|\| style="background-color: #ff9696" \|Floating-Point Division-by-Zero\|\|When Mario stands in the same position as the camera, the game will crash due to a division by zero error.<ref>[https://www.youtube.com/watch?v=vK16L2J0la4 "Faster fastest crash in BoB" by Madghostkek]</ref>

Deldee: slight reqording

2023-10-15T05:38:13Z

slight reqording

← Older revision		Revision as of 05:38, 15 October 2023
Line 36:		Line 36:
	\| Sound glitch \|\| Unknown \|\| "Sound glitch" refers to when the audio thread encounters an exception (usually an address error exception), therefore causing the sound to cut out. When the game thread next tries to interface with the audio thread on a level load, the game thread crashes as well. Sound glitch is often treated as one singular glitch even though it is really a class of glitches in the audio library. Sound glitches are usually J-exclusive, however some instances such as the [[BitS]] sound glitch are not.		\| Sound glitch \|\| Unknown \|\| "Sound glitch" refers to when the audio thread encounters an exception (usually an address error exception), therefore causing the sound to cut out. When the game thread next tries to interface with the audio thread on a level load, the game thread crashes as well. Sound glitch is often treated as one singular glitch even though it is really a class of glitches in the audio library. Sound glitches are usually J-exclusive, however some instances such as the [[BitS]] sound glitch are not.
	\|-		\|-
	\| Teleporting while passing over a loading zone \|\| style="background-color: #fffca8"\| Address Error \|\| Since the area changed, there is now no teleporter with the same ID as the one Mario used to warp. Thus the game returns NULL when trying to find ~~the teleporter~~ to warp to, and crashes when trying to access information about its destination. Under certain conditions, this can cause a Wrong Warp on PAL or Shindou VC.		\| Teleporting while passing over a loading zone \|\| style="background-color: #fffca8"\| Address Error \|\| Since the area changed, there is now no teleporter with the same ID as the one Mario used to warp. Thus the game returns NULL when trying to find an associated warp node to warp to, and crashes when trying to access information about its destination. Under certain conditions, this can cause a Wrong Warp on PAL or Shindou VC.
	\|-		\|-
	\| Warping out of a level while passing over a loading zone \|\| style="background-color: #fffca8"\| Address Error \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.		\| Warping out of a level while passing over a loading zone \|\| style="background-color: #fffca8"\| Address Error \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.

Deldee: added denorm crash after today's discovery

2023-10-15T03:16:48Z

added denorm crash after today's discovery

← Older revision		Revision as of 03:16, 15 October 2023
Line 45:		Line 45:
	\| style="background-color: #ff9696" \| Floating-Point Unimplemented Operation		\| style="background-color: #ff9696" \| Floating-Point Unimplemented Operation
	\|When a noise's pan is determined, it uses the position of the object to calculate the pan. When the object's absolute z-position relative to the camera is large (>= 22000 units) and the x-position relative to the camera is very negative (< -66000), an index for the pan will be generated outside of the bounds of the array for the pan. When the value outside of the array is an invalid float, the audio thread will crash (sound glitch). Does not happen when sound mode is set to Mono.		\|When a noise's pan is determined, it uses the position of the object to calculate the pan. When the object's absolute z-position relative to the camera is large (>= 22000 units) and the x-position relative to the camera is very negative (< -66000), an index for the pan will be generated outside of the bounds of the array for the pan. When the value outside of the array is an invalid float, the audio thread will crash (sound glitch). Does not happen when sound mode is set to Mono.
			\|-
			\|Casting a shadow on a corrupted triangle
			\| style="background-color: #ff9696" \| Floating-Point Unimplemented Operation
			\|The limit iof surface triangle loaded at once in the game is 2300. However, in [[Hazy Maze Cave]], when using [[Mario's Platform Adventure]], it is possible to load more triangle than this limit. This causes the surfaceList to overwrite part of the face table. If the game tries to cast a shadow on one of the "triangles" created by this situation, the normalX of the triangle will be a pointer and be processed as a denormalized float, which crashes the game when used for arithmethic.<ref>[https://www.twitch.tv/danpark/v/1934180374?sr=a&t=3885s HMC Denorm Crash]</ref>
	\|-		\|-
	\|Having the same position as the camera's position \|\| style="background-color: #ff9696" \|Floating-Point Division-by-Zero\|\|When Mario stands in the same position as the camera, the game will crash due to a division by zero error.<ref>[https://www.youtube.com/watch?v=vK16L2J0la4 "Faster fastest crash in BoB" by Madghostkek]</ref>		\|Having the same position as the camera's position \|\| style="background-color: #ff9696" \|Floating-Point Division-by-Zero\|\|When Mario stands in the same position as the camera, the game will crash due to a division by zero error.<ref>[https://www.youtube.com/watch?v=vK16L2J0la4 "Faster fastest crash in BoB" by Madghostkek]</ref>

Nim: /* CPU Crashes */

2023-06-19T03:32:19Z

CPU Crashes

← Older revision		Revision as of 03:32, 19 June 2023
Line 40:		Line 40:
	\| Warping out of a level while passing over a loading zone \|\| style="background-color: #fffca8"\| Address Error \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.		\| Warping out of a level while passing over a loading zone \|\| style="background-color: #fffca8"\| Address Error \|\| Similar to above, but only hypothetical. Maybe possible in DDD using the Sub Gate warp and whirlpool cloning to reach the instant loading zone, but not yet achieved without hacks.
	\|-		\|-
	\| Entering Wiggler's Cave on the Disk Drive version \|\| style="background-color: #ff9696"\| Floating-Point Unimplemented Operation \|\| When Wiggler is initialized, his health value is ~~1024~~ for a single frame before being reset to 3. Wiggler uses his health to index into a table to get his speed (to move faster when at lower health); ~~1024~~ causes it to index out of range and read a denormalized floating-point number as his health, which causes an unimplemented operation exception since the N64 does not implement any operations on denormalized floats except comparisons.		\| Entering Wiggler's Cave on the Disk Drive version \|\| style="background-color: #ff9696"\| Floating-Point Unimplemented Operation \|\| When Wiggler is initialized, his health value is 2048 for a single frame before being reset to 3. Wiggler uses his health to index into a table to get his speed (to move faster when at lower health); 2048 causes it to index out of range and read a denormalized floating-point number as his health, which causes an unimplemented operation exception since the N64 does not implement any operations on denormalized floats except comparisons.
	\|-		\|-
	\| Having an object too far away from the camera make a noise (JP only)		\| Having an object too far away from the camera make a noise (JP only)

Pannenkoek2012: /* CPU Crashes */

2022-09-22T18:12:17Z

CPU Crashes

← Older revision		Revision as of 18:12, 22 September 2022
Line 51:		Line 51:
	\| style="background-color: #ff9696" \|Floating-Point Overflow		\| style="background-color: #ff9696" \|Floating-Point Overflow
	\|Manipulating the pendulum to rotate beyond the range of an int will error when truncating the float. Verification of this crash took 39 days.<ref>[https://clips.twitch.tv/TiredKnottyOrcaThunBeast-3MHslDyIHpEavrfG "Pendulum Crash" by rcombs]</ref>		\|Manipulating the pendulum to rotate beyond the range of an int will error when truncating the float. Verification of this crash took 39 days.<ref>[https://clips.twitch.tv/TiredKnottyOrcaThunBeast-3MHslDyIHpEavrfG "Pendulum Crash" by rcombs]</ref>
			\|-
			\|Touching a recovery heart with more than ~10.7M speed.
			\| style="background-color: #ff9696" \|Floating-Point Overflow
			\|Touching a recovery heart with more than ~10.7M speed will cause float-to-int conversion with a float value that's greater than the max integer value.<ref>[https://youtu.be/nDqSqrnjmHY Game Crash from Touching a Heart with 10.7M Speed]</ref>
	\|}		\|}

	==RCP (Graphics) Crashes==		==RCP (Graphics) Crashes==
	{\| class="wikitable sortable"		{\| class="wikitable sortable"

JoshDuMan: Technically doesn't need to be standing

2022-07-12T16:46:02Z

Technically doesn't need to be standing

← Older revision		Revision as of 16:46, 12 July 2022
Line 46:		Line 46:
	\|When a noise's pan is determined, it uses the position of the object to calculate the pan. When the object's absolute z-position relative to the camera is large (>= 22000 units) and the x-position relative to the camera is very negative (< -66000), an index for the pan will be generated outside of the bounds of the array for the pan. When the value outside of the array is an invalid float, the audio thread will crash (sound glitch). Does not happen when sound mode is set to Mono.		\|When a noise's pan is determined, it uses the position of the object to calculate the pan. When the object's absolute z-position relative to the camera is large (>= 22000 units) and the x-position relative to the camera is very negative (< -66000), an index for the pan will be generated outside of the bounds of the array for the pan. When the value outside of the array is an invalid float, the audio thread will crash (sound glitch). Does not happen when sound mode is set to Mono.
	\|-		\|-
	\|~~Standing in~~ the camera's position \|\| style="background-color: #ff9696" \|Floating-Point Division-by-Zero\|\|When Mario stands in the same position as the camera, the game will crash due to a division by zero error.<ref>[https://www.youtube.com/watch?v=vK16L2J0la4 "Faster fastest crash in BoB" by Madghostkek]</ref>		\|Having the same position as the camera's position \|\| style="background-color: #ff9696" \|Floating-Point Division-by-Zero\|\|When Mario stands in the same position as the camera, the game will crash due to a division by zero error.<ref>[https://www.youtube.com/watch?v=vK16L2J0la4 "Faster fastest crash in BoB" by Madghostkek]</ref>
	\|-		\|-
	\|Rotating a Pendulum using pendulum manipulation beyond the float angle limit.		\|Rotating a Pendulum using pendulum manipulation beyond the float angle limit.