[Bug 24249] Firestarter Demo crashes with page fault on read access on start

[wine-bugs at winehq.org]

http://bugs.winehq.org/show_bug.cgi?id=24249

--- Comment #2 from Rico <kgbricola at web.de> 2010-09-03 09:38:54 CDT ---
Created an attachment (id=30530)
 --> (http://bugs.winehq.org/attachment.cgi?id=30530)
Add argument check for the type in IDirect3DDevice8Impl_GetTextureStageState.

Does the attached patch help?

The game somehow queries all values for the Type(also not available ones) from
0 to 32 in IDirect3DDevice8::GetTextureStageState(), which seems a bit strange.

The problem is that the tss_lookup table has only 29 entries, which returns
random memory (or an access violation) in cases where the index >= table size.
The patch prevents this.

There might be another problem when WINED3DTSS_FORCE_DWORD is triggered (e.g.
Type == 0). So it could happen that there is also an access violation on read
access.

-- 
Configure bugmail: http://bugs.winehq.org/userprefs.cgi?tab=email
Do not reply to this email, post in Bugzilla using the
above URL to reply.
------- You are receiving this mail because: -------
You are watching all bug changes.