Emulator Issues #2823
closed
Toy Story 3 - crash on boot - Error at address b0007a76 - more of the MMU needs to be implemented
0%
Description
What steps will reproduce the problem?
1.Open dolphin r5709, select Toy Story 3 and run.
2.Window has pop out but crash immediately.
What is the expected output? What do you see instead?
Can playable.
Dolphin version with the problem? Other Dolphin version without the
problem?
Dolphin r5709 x64 version has problem.
32-bit or 64-bit and any other build parameters?
64 bit
OS version and versions of tools/libraries used?
Window 7 64bit
Please provide any additional information below.
Here is the log:
46:28:669 .\Src\Boot\Boot.cpp:165 N[BOOT]: Booting D:/WiiGames/Toy Story 3[NTSC-U]/ws_ts3_ntsc.iso
46:28:689 .\Src\Hle\HLE_OS.cpp:52 N[OSREPORT]: 81200614->81300000|
Apploader Initialized.
46:28:689 .\Src\Hle\HLE_OS.cpp:52 N[OSREPORT]: 81200630->81300000| This Apploader built Jun 22 2009 18:54:04 for RVL
46:30:279 .\Src\PowerPC\Interpreter\Interpreter_SystemRegisters.cpp:344 N[PowerPC]: Flush Instruction Cache! ICE=0
46:30:279 .\Src\PowerPC\Interpreter\Interpreter_SystemRegisters.cpp:335 N[PowerPC]: Instruction Cache Enable (HID0.ICE) = 1
46:30:384 .\Src\FileUtil.cpp:91 W[COMMON]: IsDirectory: stat failed on : 系統找不到指定的路徑。
46:30:389 .\Src\IPC_HLE\WII_IPC_HLE_Device_DI.cpp:304 W[WII_IPC_DVD]: DVDLowUnencryptedRead: trying to read out of bounds @ 460a0000
46:30:389 .\Src\IPC_HLE\WII_IPC_HLE_Device_DI.cpp:395 W[WII_IPC_DVD]: DVDLowRequestError status = 0x00052100
46:30:389 .\Src\IPC_HLE\WII_IPC_HLE_Device_DI.cpp:395 W[WII_IPC_DVD]: DVDLowRequestError status = 0x00052000
46:30:389 .\Src\IPC_HLE\WII_IPC_HLE_Device_es.cpp:707 W[WII_IPC_ES]: IOCTL_ES_DIGETTICKETVIEW: this looks really wrong...
46:30:389 .\Src\IPC_HLE\WII_IPC_HLE_Device_es.cpp:580 W[WII_IPC_ES]: IOCTL_ES_GETCONSUMPTION:0
46:30:391 .\Src\IPC_HLE\WII_IPC_HLE_Device_FileIO.cpp:115 W[WII_IPC_FILEIO]: FileIO: Open failed - File doesn't exist ./User/Wii/title/00000001/00000002/data/play_rec.dat
46:30:430 .\Src\MsgHandler.cpp:53 E[*]: Warning: BackPatch - no support for operand size 2
Error encountered accessing emulated address b0007a76.
Culprit instruction:
mov word ptr ds:[rbx+rdx], cx
at 0000000011a40a7f
46:30:430 .\Src\MsgHandler.cpp:53 E[*]: Warning: BackPatch : Currently only supporting reads.
Attempted to write to b0007a76.
46:30:430 .\Src\MsgHandler.cpp:53 E[]: Warning: Backpatch write - not through EAX
46:30:430 .\Src\MsgHandler.cpp:53 E[]: Warning: BackPatch - no support for operand size 2
Error encountered accessing emulated address b0007a74.
Culprit instruction:
mov word ptr ds:[rbx+rdx], cx
at 0000000011a40b71
46:30:430 .\Src\MsgHandler.cpp:53 E[*]: Warning: BackPatch : Currently only supporting reads.
Attempted to write to b0007a74.
46:30:430 .\Src\MsgHandler.cpp:53 E[*]: Warning: Backpatch write - not through EAX
Updated by skidau over 14 years ago
Please retest this with the latest revision r6120 or newer.
Updated by 
Updated by
Updated by nicolaspanti over 12 years ago
I have the same problem, with dolphin-emu 3.0-486 under Linux Ubuntu 11.10 x86_64.
Updated by parlane over 12 years ago
LOL may have something to do with:
46:30:384 .\Src\FileUtil.cpp:91 W[COMMON]: IsDirectory: stat failed on : 系統找不到指定的路徑。
Updated by YuriShish over 12 years ago
This bug appears in 3.0-766.
http://pastebin.com/7vKY9bzD
Updated by Autoran1 about 12 years ago
Tried to ran on older revs (rev - 3600), before emu is crashing, it's showing messages
eieio - Not implemented
The instruction is still unimplemented, but error message was removed from Interpreter_LoadStore.cpp so in the newest builds we can't see it
Updated by
Updated by lizzardfish007 over 10 years ago
Any progress on this? It's been a while...
Updated by nicolaspanti over 10 years ago
No...
With dolphin-emu compiled 3 July 2014 on Debian GNU/Linux amd64 8/Jessie/testing:
22:52:237 /home/rydroid/dolphin-emu/master/Source/Core/Core/Boot/Boot.cpp:194 N[BOOT]: Booting /media/Data/Files/ROMs/Wii/Toy story 3.gcz
22:52:305 /home/rydroid/dolphin-emu/master/Source/Core/Core/HLE/HLE_OS.cpp:46 N[OSREPORT]: 81200614->81300000|
Apploader Initialized.
22:52:305 /home/rydroid/dolphin-emu/master/Source/Core/Core/HLE/HLE_OS.cpp:46 N[OSREPORT]: 81200630->81300000| This Apploader built Jun 22 2009 18:54:04 for RVL
22:52:378 /home/rydroid/dolphin-emu/master/Source/Core/AudioCommon/AlsaSoundStream.cpp:170 N[Audio]: ALSA gave us a 8192 sample "hardware" buffer with 32 periods. Will send 256 samples per fragments.
22:52:381 /home/rydroid/dolphin-emu/master/Source/Core/AudioCommon/AlsaSoundStream.cpp:201 N[Audio]: ALSA successfully initialized.
22:53:182 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: << RVL_SDK - EXI release build: Feb 27 2009 10:02:03 (0x4302_145) >>
22:53:183 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: << RVL_SDK - SI release build: Feb 27 2009 10:04:44 (0x4302_145) >>
22:53:189 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]:
22:53:189 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: Revolution OS
22:53:189 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: Kernel built : Feb 27 2009 10:04:29
22:53:189 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: Console Type : NDEV 2.1
22:53:190 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: Firmware : 53.16.17 (6/25/2007)
22:53:190 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: Memory 88 MB
22:53:190 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: MEM1 Arena : 0x808f7000 - 0x817e5cc0
22:53:190 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: MEM2 Arena : 0x90000800 - 0x93ae0000
22:53:190 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: << RVL_SDK - OS release build: Feb 27 2009 10:04:29 (0x4302_145) >>
22:53:282 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: << RVL_SDK - SC release build: Feb 27 2009 10:05:17 (0x4302_145) >>
22:53:298 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: << RVL_SDK - NAND release build: Feb 27 2009 10:05:16 (0x4302_145) >>
22:53:303 /home/rydroid/dolphin-emu/master/Source/Core/Core/HW/EXI_DeviceIPL.cpp:281 N[OSREPORT]: << RVL_SDK - DVD release build: Feb 27 2009 10:01:59 (0x4302_145) >>
Segmentation fault
Updated by JMC4789 over 10 years ago
There's been very, very little work done on the MMU in quite a while. There are a few branches, but nothing that addresses this.
Updated by shellashock about 10 years ago
Can someone test out this branch please? Skidau's PR says that it "Fixes Toy Story 3".
https://github.com/dolphin-emu/dolphin/pull/1266/files
Please report back if it fixes it.
Updated by nicolaspanti about 10 years ago
It does not work with Toy Story 3. However, there is a clearer message than with the master branch of the same repo.
(With mmu-exram branch:)
In the terminal, there was only a segmentation fault.
But there was also a "Warning" window
BackPatch - failed to disassemble MOV instruction
Error encountered accessing emulated address b0008080.
Culprit instruction:
movaps dqword ptr ds:[rbx+rax], xmm0
at 0x40ce738e
I am on Debian GNU/Linux 8/jessie/testing x86-64 with free/libre nouveau drivers (for Nvidia cards).
Updated by JMC4789 about 10 years ago
You also need to change "Skip DCBZ Clearing" as well as enable full MMU. I don't remember what setting though. Do it in the game properties page until it boots lol.
Updated by skidau about 10 years ago
No, do not enable "Skip DCBZ Clearing". The Enable MMU option is required. In my testing, Real XFB is also required but your results may differ.
Updated by Autoran1 about 10 years ago
Tested, game starts now, doesn't need XFB, but can't go ingame, loading scrren after menu stucks at 0fps/60vps and log shows endless
IPC_HLE\WII_IPC_HLE_Device_usb.cpp:496 E[WII_IPC_WIIMOTE]: ACL queue size reached 100 - current packet will be dropped!
But great job anyway skidau
Updated by JMC4789 about 10 years ago
Skid_au showed a screenshot of the title in-game. Regardless of what's wrong now, this is technically fixed now?
Updated by skidau about 10 years ago
- Status changed from Accepted to Fixed
- Category changed from jit to ppc
Autoran1, try using Speed up disc transfer rate.
Updated by Autoran1 about 10 years ago
Another brilliant success, thanks skid, Speed up the Disc helped