MQ2-20130421a -- Crashing when searching in bazaar window

[ForoMoro]

As title suggests. I've tried recompiling, but am still getting crash to desktop every time I run a search in the Bazaar window.

Thought I'd give you guys a heads up!

Thanks for all the hard work.

[elix]

Just had this happen to me and came to see if i was the only one.

Standing in lower guk, searched for text 'defiant' in slot 'waist' Tried on two different toons, right as I click the Find button, both immediately had the client lock up before any results showed up.

After 60 seconds or so, windows advised me my client had locked up. Win8, 64bit.

[jtank]

crash confirmed

[ForoMoro]

Same, win8 64 bit. Compiled with Visual C++ 2010 Express.

I noticed, though, that it only crashes when a result comes into the search window. If you search for something and there is currently nothing matching the search terms, it won't crash.

[Ravenjack]

I see I am not the only one crashing on baz search. Tried on multiple boxes and locked up each time. Am sure you guys are working on it.

[ieatacid]

I see I am not the only one crashing on baz search. Tried on multiple boxes and locked up each time. Am sure you guys are working on it.

Nope. No one has posted a crash dump yet.

[jamie75]

patch tomorrow it looks like, so might break it again.....

[lodgeyboy]

I attempted to run through the install of the debugging tool, but the link you give is then bounced to a new page and a whole world of possible downloads become available.

As I have Win 7 64bit I tried that download but the install crashes so no clue where to go from that.

[ForoMoro]

0:000:x86> r
eax=00000000 ebx=00000000 ecx=004a7600 edx=000a6c08 esi=2f7e8e18 edi=000a6c08
eip=0119458a esp=004a7508 ebp=004a762c iopl=0 nv up ei pl zr na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010246
MQ2Bzsrch!BzSrchHook::BzDetour+0x18a:
0119458a 391c90 cmp dword ptr [eax+edx*4],ebx ds:002b:0029b020=????????
0:000:x86> kv
ChildEBP RetAddr Args to Child
004a762c 0142a291 004a7694 30d93a60 2fb02b28 MQ2Bzsrch!BzSrchHook::BzDetour+0x18a (FPO: [Non-Fpo]) (CONV: thiscall) [c:\users\jared\downloads\mq2-20130421a\mq2bzsrch\mq2bzsrch.cpp @ 299]
WARNING: Stack unwind information not available. Following frames may be wrong.
004acf60 013d2532 1dab8f68 00006c36 2fae4c4a eqgame+0xba291
004acfa4 0183a496 2fae4c48 0000010c e28bbd82 eqgame+0x62532
004acfec 014ace5a 000001f4 00000001 04a13790 eqgame+0x4ca496
00000000 00000000 00000000 00000000 00000000 eqgame+0x13ce5a

[Interstellarsurfer]

I see I am not the only one crashing on baz search. Tried on multiple boxes and locked up each time. Am sure you guys are working on it.

Nope. No one has posted a crash dump yet.

I'll have to give this a shot so I can actually be useful around here every once in a while

[ForoMoro]

KK I debugged, and now I'm staring at a whole bunch of code associated with MQ2bzsrch.cpp

Where do I locate the information needed in step 1 of the debug thread?

[ForoMoro]

I think I finally understand what i need to copy and paste from the debugger, lol. Will do that as soon as I get home.

Sorry for the delay. I don't understand these debuggers all too well.

[nytemyst]

Code: Select all

*** WARNING: Unable to verify checksum for MQ2Bzsrch.dll
*** ERROR: Module load completed but symbols could not be loaded for C:\Games\Sony\EverQuest\eqgame.exe
0:000:x86> r
eax=00000000 ebx=68ccb770 ecx=32a04f58 edx=000033e0 esi=016f7974 edi=000033e0
eip=68c74a51 esp=016f78b8 ebp=016f79cc iopl=0         nv up ei pl zr na pe nc
cs=0023  ss=002b  ds=002b  es=002b  fs=0053  gs=002b             efl=00010246
MQ2Bzsrch!BzSrchHook::BzDetour+0x4a1:
68c74a51 8b0490          mov     eax,dword ptr [eax+edx*4] ds:002b:0000cf80=????????
0:000:x86> kv
ChildEBP RetAddr  Args to Child              
016f79cc 0025a291 016f7a34 201ca050 0a9fea8c MQ2Bzsrch!BzSrchHook::BzDetour+0x4a1 (FPO: [Non-Fpo]) (CONV: thiscall) [c:\macroquest\mq2bzsrch\mq2bzsrch.cpp @ 322]
WARNING: Stack unwind information not available. Following frames may be wrong.
016fd300 00202532 206812e8 00006c36 2064e87a eqgame+0xba291
016fd344 0066a496 2064e878 0000009d 0dc23fc5 eqgame+0x62532
016fd38c 002dce5a 000001f4 00000001 06303790 eqgame+0x4ca496
00000000 00000000 00000000 00000000 00000000 eqgame+0x13ce5a

[ForoMoro]

Code: Select all

#define SetTraderName(trader)\
        {\
        nTmp = trader % pBzWnd->hashVal;\
        if(pBzWnd->ppTraderData[nTmp])\
        {\
        strcpy(bzResponse.BSSTraderName, ((traderData*)pBzWnd->ppTraderData[nTmp])->name);\
        }\
        }

        _BazaarSearchResponsePacket bzResponse;
        memset(&bzResponse, 0, sizeof(bzrItemData));
        NetStream ns((BYTE*)bz->pData, bz->nSize);
        _BAZAARSEARCHWND *pBzWnd = *((_BAZAARSEARCHWND**)pinstCBazaarSearchWnd);
        DWORD nIndex = 0;

        DWORD nTrader           = ns.readUInt32();
        DWORD wTmp              = ns.readUInt16();
        DWORD nTmp              = ns.readUInt32();
        BzCount                 = ns.readUInt32();
        DWORD nTrader1          = ns.readUInt32();
        string sTmp             = ns.readText();
        bzResponse.BSSPrice     = ns.readUInt32();
        bzResponse.BSSQuantity  = ns.readUInt32();
        bzResponse.BSSItemID    = ns.readUInt32();
        DWORD nIcon             = ns.readUInt32();
        sTmp                    = ns.readText();
        nTmp                    = ns.readUInt32();

        strcpy(bzResponse.BSSName, sTmp.c_str());

        SetTraderName(nTrader1);

        memcpy(&BzArray[nIndex++], &bzResponse, sizeof(_BazaarSearchResponsePacket));

        while(nIndex < BzCount)
        {
            memset(&bzResponse, 0, sizeof(bzrItemData));

            nTrader                 = ns.readUInt32();
            wTmp                    = ns.readUInt16();
            nTmp                    = ns.readUInt32();
            nTmp                    = ns.readUInt32();
            nTrader1                = ns.readUInt32();
            sTmp                    = ns.readText();
            bzResponse.BSSPrice     = ns.readUInt32();
            bzResponse.BSSQuantity  = ns.readUInt32();
            bzResponse.BSSItemID    = ns.readUInt32();
            nIcon                   = ns.readUInt32();
            sTmp                    = ns.readText();
            nTmp                    = ns.readUInt32();

            strcpy(bzResponse.BSSName, sTmp.c_str());

            SetTraderName(nTrader);

            memcpy(&BzArray[nIndex++], &bzResponse, sizeof(_BazaarSearchResponsePacket));
        }

        BzDone = TRUE;

        BzTrampoline(bz);
    };
};

SetTraderName(nTrader1); is what was highlighted by my debugger

[Chaosregen12010]

This bug is still live and is confirmed that it crashes your EQ client eqgame.exe after doing a bazaar search from anywhere. I have 19 boxes and they all crash anywhere from systems on XP,7,8 and 64 bit systems that I am running I haven't tried it on 32 bit systems as I don't own any. But I assume it effects them as well. After all EQ is 32 bit It's annoying as hell as it is I hope this is fixed soon. I have also tried 39 different zones to see if it was just the zone and they all did the same thing. crashed then the hourglass appears then I have to press the windows key to get back to desktop just to have a message that display's Macroquest2 is stooping the crash report blah blah blah. I tried compiling it in Visual Studio 2005/2008/2010/2012 and yielded same issue Just wanted to let you all know.