[fixed] Crash occuring about a minute into gameplay

[DoomRater]

I was playing with a map and three weapons at the time. Let me know if you need any or all of the resources.

[spoiler]Code: ACCESS_VIOLATION
Tried to read address 00000004
Flags: 00000000
Address: 00404a03

Windows NT 5.0 Build 2195 Service Pack 4

GS=0000 FS=0038 ES=0023 DS=0023
EAX=0bfa46c0 EBX=00000001 ECX=00000000 EDX=fbc94108
ESI=0012fa40 EDI=02d1ff18
EBP=00f45590 EIP=00404a03 ESP=0012f9ac CS=001b SS=0023
EFlags=00210216
CF- PF+ AF+ ZF- SF- TF- IF+ DF- OF- NT- RF+ VM- AC- VI- VP-

FPU State:
ControlWord=027f StatusWord=0020 TagWord=ffff
ErrorOffset=0048fc86
ErrorSelector=035c001b
DataOffset=0012f9b0
DataSelector=ffff0023
Cr0NpxState=00000000

MM0=3f8000003f800000
MM1=0000000000000000
MM2=84d84c3e0a000000
MM3=9579748000000000
MM4=0000000000000000
MM5=0012fa4002d1ff18
MM6=00f455900bfa46c0
MM7=000000230012f9ac

Running threads:
00000448 at 00404a03*
00000440
00000260
0000044c
000002e4
000004c4
00000288
000002cc
000004f0
000002b8

Loaded modules:
00400000 - 006e3fff *GZDoom.exe
77f80000 - 77ffcfff ntdll.dll
6fac0000 - 6fadefff GLU32.dll
78000000 - 78044fff MSVCRT.dll
7c570000 - 7c627fff KERNEL32.dll
69510000 - 695d6fff OPENGL32.dll
7c2d0000 - 7c331fff ADVAPI32.dll
77d30000 - 77da0fff RPCRT4.DLL
77f40000 - 77f7dfff GDI32.dll
77e10000 - 77e74fff USER32.DLL
51000000 - 5104ffff DDRAW.dll
728a0000 - 728a5fff DCIMAN32.dll
10000000 - 10095fff fmod.dll
77410000 - 77422fff MSACM32.dll
77570000 - 7759ffff WINMM.dll
77a50000 - 77b3efff ole32.dll
75050000 - 75057fff WSOCK32.dll
75030000 - 75043fff WS2_32.DLL
75020000 - 75027fff WS2HELP.DLL
77b50000 - 77bd8fff COMCTL32.dll
00230000 - 003a2fff DevIL.dll
76b30000 - 76b6dfff comdlg32.dll
77c70000 - 77cb9fff SHLWAPI.DLL
782f0000 - 78537fff SHELL32.DLL
51080000 - 510e0fff dsound.dll
77820000 - 77826fff VERSION.dll
759b0000 - 759b5fff LZ32.DLL
77560000 - 77567fff wdmaud.drv
77400000 - 77407fff msacm32.drv
5ef80000 - 5ef83fff KsUser.dll
775a0000 - 7762ffff CLBCATQ.DLL
779b0000 - 77a4afff OLEAUT32.dll
03ad0000 - 03b7dfff dinput8.dll
6f9a0000 - 6f9a7fff HID.DLL
77880000 - 7790dfff SETUPAPI.DLL
7c0f0000 - 7c150fff USERENV.DLL
03bc0000 - 040d9fff nvoglnt.dll
01800000 - 01810fff r_opengl.dll

Bytes near EIP:
004049f3: 24 10 5f 5e c3 cc cc cc cc cc cc cc cc 83 ec 08
00404a03: 8b 41 04 8b 11 53 56 89 44 24 08 89 54 24 0c 8b
00404a13: 44 24 0c f7 6c 24 14 8b d8 8b 44 24 08 8b f2 f7

ZDoom version 2.0.96x (0.9.7)

Command line:
D:\gzdoom\GZDoom.exe -iwad D:\DOOM95\doom2.wad -file D:\DOOM95\DECORATE\molotov.WAD -file D:\DOOM95\DECORATE\HGRENADE.WAD -file C:\Documents and Settings\DoomRater\Desktop\m16b.wad -file D:\DOOM95\demolump\castle_1.wad -nomusic
IWAD: doom2.wad

Current map: MAP01

viewx = 118764636
viewy = 120982813
viewz = 2614842
viewangle = 3796959232

Possible call trace:
00404a03 BOOM
004d09ef call 00404a00
004be014 call 004d0920
00463a41 call 00404a00
004bd762 call 004be2e0
004be5f0 call 004bd720
004bd762 call 004be2e0
004be5f0 call 004bd720
004bd762 call 004be2e0
004be5f0 call 004bd720
004bd762 call 004be2e0
004be5f0 call 004bd720
004be1e5 call 004be550
004be1cc call 004be140
004be1cc call 004be140
004be1cc call 004be140
004be1cc call 004be140
004ccdda call 004be140
004ce766 call 004ccd90
004ceb3c call 004ce590
00417352 call 004ce9b0
0041c550 call 0041b1a0
00418383 call 004170b0
0040b851 call 0040b7a0
0040b851 call 0040b7a0
00539701 call 0040b840
00539803 call 0054e82a
005605eb
0053729d call 004183c0
005375d6 call 00536ea0
00552129 call 00537560
00551fbd call 0054f5d0
00551fa5

Stack Contents:
0012f9ac: 00000000 00000000 004d09ef 0bfa46c0 ··········M··F··
0012f9bc: fbc94108 00e062d0 00015570 02d1aed8 ·A···b··pU······
0012f9cc: 02d1aed8 004be014 00000024 02d1aed8 ······K·$·······
0012f9dc: 00000001 0012fcdc 00e894b8 d1d00000 ················
0012f9ec: 02d1d920 00000000 08000000 ffff0000 ···············
0012f9fc: 00ffffff 00000000 3f800000 00000a76 ···········?v···
0012fa0c: 00000000 00000000 ffff0000 08000000 ················
0012fa1c: ffffff01 ff00ffff 0000ffff 00000000 ················
0012fa2c: 00010000 0a13cff0 c1bc04fa 3f554640 ············@FU?
0012fa3c: bf87b531 410eff86 ff000000 0000ffff 1······A········
0012fa4c: 00000000 c1bbffa6 3f544640 bf8814b1 ········@FT?····
0012fa5c: c1bc0a4e 3f564640 bf8755b1 08000000 N···@FV?·U······
0012fa6c: 00000000 00000000 3f800000 00000000 ···········?····
0012fa7c: 00000000 01d300ff 41054102 c10e27da ·········A·A·'··
0012fa8c: 00000000 00463a41 00000000 c1b12ec6 ····A:F······.··
0012fa9c: 3cb305c0 410535ab c1b1396e 3cf305c0 ···<·5·An9·····<
0012faac: 41054d8b e201a2a8 00000001 00000000 ·M·A············
0012fabc: 3e848485 00000000 00000000 00000001 ···>············
0012facc: 00000035 01010053 e201a2a8 00000001 5···S···········
0012fadc: 0012fb40 00000004 00000000 006c5bec @············[l·
0012faec: 004bd762 c28ffd40 c2cb8a40 07d00000 b·K·@···@·······
0012fafc: 00593608 004be5f0 c28ffd40 c2cb8a40 ·6Y···K·@···@···
0012fb0c: 006c5bec 004bd762 ceddc440 cf15fdc0 ·[l·b·K·@·······
0012fb1c: 0b780000 00593608 004be5f0 ceddc440 ··x··6Y···K·@···
0012fb2c: cf15fdc0 006c5bec 004bd762 cf341e40 ·····[l·b·K·@·4·
0012fb3c: cf6c7380 0b940000 00593608 004be5f0 ·sl······6Y···K·
0012fb4c: cf341e40 cf6c7380 006c5bec 004bd762 @·4··sl··[l·b·K·
0012fb5c: cfce9180 d09aee40 0bc00000 00593608 ····@········6Y·
0012fb6c: 004be5f0 cfce9180 d09aee40 00e89480 ··K·····@·······
0012fb7c: 00000000 0012fcdc eae00000 004be1e5 ··············K·
0012fb8c: 00e89490 00e894b8 00000001 d1d00000 ················
0012fb9c: 00000000 044bcba4 00600000 0b660d1d ······K···`···f·
0012fbac: 004be1cc 00e062d1 00e897c8 00000000 ··K··b··········
0012fbbc: 62a40000 00000000 04c3cba4 00100000 ···b············
0012fbcc: 0b6e0d1d 004be1cc 00e894b8 00e89800 ··n···K·········
0012fbdc: 00000001 00000000 00000000 04ebcba4 ················
0012fbec: fff40000 0b7e0d1d 004be1cc 00e897c8 ······~···K·····
0012fbfc: 00e89838 00000001 d1d00000 00080000 8···············
0012fc0c: 04ebcba4 00000000 0b860d1d 004be1cc ··············K·
0012fc1c: 00e89800 02d138f8 00000000 00000010 ·····8··········
0012fc2c: 00000000 0453cba4 00100000 0bfa0d1d ······S·········
0012fc3c: 004ccdda 00e89838 c0e4e960 00000000 ··L·8···`·······
0012fc4c: 006c5bec 004ce766 0063d0d0 00000000 ·[l·f·L···c·····
0012fc5c: 00000000 005f69d4 0063c71c 00000040 ·····i_···c·@···
0012fc6c: 004ceb3c 02d138f8 00000000 42b40000 <·L··8·········B
0012fc7c: 3fccd9e9 00000001 0000026e 00e1fdb8 ···?····n·······
0012fc8c: 00000000 00417352 3fccd9e9 00e1fdb8 ····RsA····?····
0012fc9c: 00000001 0041c550 42b40000 38009054 ····P·A····BT··8
0012fcac: fffffec6 00418383 00000000 0000026e ······A·····n···
0012fcbc: 00e1fdb8 00000001 00000001 000003a9 ················
0012fccc: 0012fcb8 0012fe04 005607b0 00000000 ··········V·····
0012fcdc: 00000004 00000000 0012fe68 0000017e ········h···~···
0012fcec: 001303b0 02c83fe8 77a50000 00000000 ·····?·····w····
0012fcfc: 6d6f6f44 7475412e 616f6c6f 00730064 Doom.Autoload·s·
0012fd0c: 00000028 0000002a 77a55108 00000000 (···*····Q·w····
0012fd1c: 00000400 0012fd5c 77e2bbf4 00000000 ····\······w····
0012fd2c: 0000c036 77a55108 0012fd0c 80000000 6····Q·w········
0012fd3c: 80000000 80000000 005d9c70 36574192 ········p·]··AW6
0012fd4c: 0040b851 00000002 005d9c68 36574192 Q·@·····h·]··AW6
0012fd5c: 0040b851 00000002 005d9c68 0012fd74 Q·@·····h·]·t···
0012fd6c: 00539701 005d9c68 00539803 00000094 ··S·h·]···S·····
0012fd7c: 00000005 00000000 00000893 00000002 ················
0012fd8c: 76726553 20656369 6b636150 00003420 Service Pack 4··
0012fd9c: 001415b8 77aa64cf 77b2d600 8007000e ·····d·w···w····
0012fdac: 0012fe08 00000000 00000000 00000001 ················
0012fdbc: 00000000 7c5737d1 77a98e1a 00141548 ·····7W|···wH···
0012fdcc: 00000000 77a77ee4 0000026e 00000000 ·····~·wn·······
0012fddc: 0012fdfc 00000002 77a77b39 77a77b48 ········9{·wH{·w
0012fdec: 77b2d078 0000026e 36574192 0012fe5c x··wn····AW6\···
0012fdfc: 005605eb 36574192 0012fe5c 005607ce ··V··AW6\·····V·
0012fe0c: ffffffff 0053729d ffffffff 7c573aab ·····rS······:W|
0012fe1c: 7ffdf000 00000000 00000000 0000026e ···········n···
0012fe2c: 0000017e 00000001 000f4240 0012fe1c ~·······@B······
0012fe3c: 00000020 00000199 00000276 00400000 ·······v·····@·
0012fe4c: 00400250 00400228 7c570000 0012fe14 P·@·(·@···W|····
0012fe5c: 0012fe88 00562d10 00000000 0012fe98 ·····-V·········
0012fe6c: 005375d6 00400000 7c573dfc 00000000 ·uS···@··=W|····
0012fe7c: 7ffdf000 0012fe74 0012f5f8 0012ffb0 ···t···········
0012fe8c: 00551e1c 005d9600 00000000 0012ffc0 ··U···]·········
0012fe9c: 00552129 00400000 00000000 00133667 )!U···@·····g6··
0012feac: 00000001 00000094 00000005 00000000 ················
0012febc: 00000893 00000002 76726553 20656369 ········Service
0012fecc: 6b636150 b8003420 00000000 b8223c00 Pack 4·······<"·
0012fedc: 00000001 00000000 00000023 00000023 ········#···#···
0012feec: 512f0001 77f80000 00000000 00000001 ··/Q···w········
0012fefc: b8223d24 00000030 b8223d34 804fc6d5 $="·0···4="···O·
0012ff0c: b8223c38 00000458 b8223c4c 83d31020 8<"·X···L<"· ···
0012ff1c: 8052ec04 b8223c38 00000458 b8223c4c ··R·8<"·X···L<"·
0012ff2c: 83d31020 83e33b40 00000000 83e33b40 ···@;······@;··
0012ff3c: 83e33cd0 00551fbd 0159001c 66000000 ·<····U···Y····f
0012ff4c: 7ffdf000 00000044 001343c0 001343d0 ···D····C···C··
0012ff5c: 001343e8 00000000 00000000 00000000 ·C··············
0012ff6c: 00000000 00000000 00000000 00000000 ················
0012ff7c: 00000001 00000001 00000000 ffffffff ················
0012ff8c: ffffffff ffffffff 804312fb 00000000 ··········C·····
0012ff9c: 83e33b40 00133667 00000000 0012feb0 @;··g6··········
0012ffac: 00000000 0012ffe0 00551e1c 005dc9c8 ··········U···]·
0012ffbc: 00000000 0012fff0 7c581af6 0159001c ··········X|··Y·
0012ffcc: 66000000 7ffdf000 00000000 0012ffc8 ···f···········
0012ffdc: 00000000 ffffffff 7c57e597 7c581b00 ··········W|··X|
0012ffec: 00000000 00000000 00000000 00551fa5 ··············U·
0012fffc: 00000000 ····[/spoiler]

[Graf Zahl]

Yes, I do. The crash is geometry related so I can't test it without them.

[DoomRater]

Ataching the level WAD. Did you need the weapons as well? I wasn't firing any of them when the program crashed, and none of them overrode existing monsters or things.

EDIT: when running it without the weapons my HUD looked rather strange! and the pistol didn't show up unless I fired.

[Graf Zahl]

Fixed. It was a really stupid typo that only caused problems when spawning particles in sectors with 3D-floors. But since that can easily happen when particle blood is on I'll do an immediate re-release.