[Bug 29663] New: Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

Bug #: 29663
           Summary: Rayman 3 crashes with a new game
           Product: Wine
           Version: unspecified
          Platform: x86
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: critical
          Priority: P2
         Component: -unknown
        AssignedTo: [e-mail]
        ReportedBy: [e-mail]
    Classification: Unclassified

Created attachment 38467
  --> http://bugs.winehq.org/attachment.cgi?id=38467
Regression test result

Rayman 3 gets choppy and sometimes crashes when i start
a new game while Rayman is flying around with the frog. I
know that it works fine on wine-1.3.22 and that in wine-1.3.23
it is broken.

I tried to do a regression test which i will attach to this bug
report. Please keep in mind the this is my first regression test.

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |regression
                 CC|                            |[e-mail]
    Regression SHA1|                            |68b15bc5ffe6ddf5d08cbc13479
                   |                            |eaf718ad5e39f
           Severity|critical                    |normal

--- Comment #1 from Austin English  2012-01-20 14:43:55 CST ---
68b15bc5ffe6ddf5d08cbc13479eaf718ad5e39f is the first bad commit
commit 68b15bc5ffe6ddf5d08cbc13479eaf718ad5e39f
Author: Stefan D�singer 
Date:   Tue Apr 19 21:24:26 2011 +0200

wined3d: Give GL_ARB_map_buffer_range another try.

Nvidia's 270.xx.yy driver series fix the glMapBuffer alignment issues that
caused major
    performance problems. If the user is using an older driver we now drop the
VBO instead of using
    doublebuffered loading, which means that we fall back to the current
behavior(no dynamic VBO) as
    needed. Dynamic VBOs are needed on Nvidia drivers for
GL_ARB_instanced_arrays.

:040000 040000 0cada15043b731febf2ef2a673aaaecc4af75f8d
c474ade74a8db2a9c547674dbb4c809841087a3d M      dlls

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
          Component|-unknown                    |directx-d3d
            Version|unspecified                 |1.3.23

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

--- Comment #2 from Stefan Dösinger  2012-01-21 13:26:16 CST ---
Is there a demo I can use to reproduce this bug? Which graphics card and driver
do you  use?

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

--- Comment #3 from Lunknown  2012-01-22 08:54:19 CST ---
Hello Stefan Dösinger,

I found a Rayman 3 demo but it does not have the stage that cause the
error. However in the Dangerous stage i get a strange beeping sound
the first time i play the stage but if exit and reenter the stage 
there is not beeping

Here is the link

http://www.fileplanet.com/119466/110000/fileinfo/Rayman-3-Demo

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

--- Comment #4 from Lunknown  2012-01-22 12:05:31 CST ---
Hello Stefan Dösinger,

Forgot to mention my video card is
a NVIDIA Geforce GT430 1gig memory

and i'm using NVIDIA-Linux-x86-290.10.run
drive.

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

--- Comment #5 from Lunknown  2012-02-12 18:02:08 CST ---
Hello Everyone,

I just tried wine-1.4-rc3. The problem still persists. I forgot
to mention just before the game crashes there is a screeching 
sound.

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

--- Comment #6 from Stefan Dösinger  2012-02-27 09:01:32 CST ---
Can you attach a +d3d log? It will probably be too big to attach as-is, but
bzip2 or lrzip should compress it reasonably well.

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

--- Comment #7 from Lunknown  2012-03-16 07:43:27 CDT ---
Created attachment 39398
  --> http://bugs.winehq.org/attachment.cgi?id=39398
Rayman3Backtrace

Hello Stefan Dösinger,

When i did WINEDEBUG=+d3d the game did not crash but i still heard some garbage
sounds when i picked up red lums. At the end of the stage it finally crashed
with a backtrace which i will attached here. I will also note that without
WINEDEBUG=+d3d the game seems to hard lock after getting red lums.

Also I compressed the file with bzip2. The file is 21mb. How can i upload this?

BTW: Sorry i took so long to reply.

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

--- Comment #8 from Lunknown  2012-04-20 13:04:34 CDT ---
(In reply to comment #6)
> Can you attach a +d3d log? It will probably be too big to attach as-is, but
> bzip2 or lrzip should compress it reasonably well.

Hello Stefan,

Ok i uploaded the file to this site.

http://www.filetolink.com/ea268712

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

Austin  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]

--- Comment #9 from Austin  2012-05-19 17:25:49 CDT ---
I can confirm this same problem in Wine 1.5.4 in Arch Linux x86_64, with a
GeForce GT 430 graphics card.

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

Lunknown  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
            Version|1.3.23                      |1.5.5

--- Comment #10 from Lunknown  2012-05-28 14:32:04 CDT ---
Hello Everyone,

This is still an issue in wine 1.5.5.

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

--- Comment #11 from Stefan Dösinger  2013-01-06 16:06:13 CST ---
I was able to reproduce this on a i965 GPU. The game expects buffer::map() to
always return the same pointer. The bug has some similarities to Bug 18799. In
the case of Crysis an argument could be made that a D3DPOOL_MANAGED buffer can
be expected to stay at one address, but Rayman 3 expects this behavior from a
dynamic buffer.

I guess it is up to the somewhat random memory layout what the results of the
invalid memory access are. On my main system nothing bad happens. On my i965
system I get the beeping sound described in this bug. If I disable VBOs
entirely and randomize the address returned from buffer::map(), I get the
beeping sound on my Nvidia system as well, while apparently the full version of
the game just crashes.

I tested the demo on one Windows machine(r700 GPU, Core i7, Windows 7), and it
is working fine there. I suspect this is because of a lucky memory layout, but
there might also be a hack in the graphics driver or some other mechanism that
makes it work.

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

Stefan Dösinger  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|UNCONFIRMED                 |RESOLVED
         Resolution|                            |DUPLICATE

--- Comment #12 from Stefan Dösinger  2013-01-06 17:18:22 CST ---
I'm closing this bug as a duplicate of 29878. As far as I understand them, they
are the same issue(random memory corruption).

*** This bug has been marked as a duplicate of bug 29878 ***

[Bug 29663] Rayman 3 crashes with a new game

http://bugs.winehq.org/show_bug.cgi?id=29663

Austin English  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #13 from Austin English  2013-01-08 17:28:50 CST ---
Closing.

[Bug 29663] Rayman 3 crashes with a new game

https://bugs.winehq.org/show_bug.cgi?id=29663

Wylda  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |[e-mail]