Space Quest 4 (Floppy/Dos/English)
ScummVM 1.2.0SVN 52047
Windows 7 x64
This crash is a bit unpredictable. Sometimes the game just crashes when other skaters come on screen, sometimes it doesn't. When the crash happens it is with the message:
"Send to invalid selector 0x1eb of object at 002e:06a0!"
save before entering Skate-o-Rama
please enter "bt" into console when this happens and post the output of that command in here. (only the 2-3 last lines of the output are needed)
Ok, managed to reproduce this crash after a few tries. The last few lines of output from "bt" is:
a: [9] vsrewrite rm406::style (0000:0028)
by 9 obj@002a:0228 pc:none argp:ST:0023
b: script 994 - rm406::setScript(002a:03b4, 0000:0000, 0000:019b)
by 9 obj@002a:0228 pc=0010:0985 sp=ST:0025 fp=ST:0025 argp:ST:001e
c: script 999 - enterScript::init(002a:0228, 0000:0000, 0000:019b)
by b obj@002a:03b4 pc=0007:071e sp=ST:002a fp=ST:002a argp:ST:0026
d: script 406 - enterScript::changeState(0000:0000)
by c obj@002a:03b4 pc:002a02c8 sp=ST:003f fp=ST:003f argp:ST:002b
I'm pretty certain that this actually has something to do with the Sequel Police appearing, and maybe Roger leaving the screen at the same time.
What is the status of this item?
Merged in duplicate report #3112964
Same situation, error thrown is: "Send to invalid selector 0x21b of object at 0027:06a2!"
Attaching savegame from that bug
Savegame from German version from bug #3112964
Forgot to mention that the version in bug #3112964 is the German version:
Space Quest IV: Roger Wilco and the Time Rippers (DOS/German)
ScummVM 1.3.0svn54358 (Nov 19 2010 12:19:12)
In both situations, this occurs while flying in the skate-o-rama while the Sequel Police are shooting at you. The object in question in both cases is eSwimCode. Here's what happens before the crash:
English version:
Send to 002e:06a0 (eSwimCode), selector 0066 (init):Funcselector(0001:00d8) at 0030:0004
Send to 002e:06a0 (eSwimCode), selector 01f0 (inertizing):Send to invalid selector 0x1f0 of object at 002e:06a0!
German version:
Send to 0027:06a2 (eSwimCode), selector 006b (init):Funcselector(0001:00fa) at 002a:0004
Send to 0027:06a2 (eSwimCode), selector 021b (inertizing):Send to invalid selector 0x21b of object at 0027:06a2!
The odd thing is that the selector is there, so I believe that the problem lies with a bug withing eSwimCode:init()
Fixed in rev #54415