Commit graph

2 commits

Author SHA1 Message Date
acbot
92ec4e5ecf Clean source + repo down to deliverables only
- Remove disabled patches from DLL source (v18/v19/v20/v23/v24
  prototype paths and all v25-v38 d3d9 investigation tooling).
  Production DLL ships v3b/v5/v11/v14/v22 + crash handler only.
- Strip repo to 16 files: README, .gitignore, DLL source (8 files),
  build.bat, prebuilt dist/leakfix.dll, two installer tools.
- Rewrite README around per-patch pseudo-C showing each bug + fix.
- Update dist/leakfix.dll to the cleaned-source build (SHA 99ab51fe).
2026-05-26 20:50:57 +02:00
acbot
57b5e43d0e Initial commit — leak-hunt project complete
Five bugs identified and patched in retail Asheron's Call client:
- v3b: palette refcount over-increment (3-byte NOP at two sites)
- v5: RenderSurface PurgeResource no-op stub (vtable slot 2 thunk)
- v11: two dangling-pointer crash guards (NULL-check + reorder)
- v14: CEnvCell::Destroy ClipPlaneList leak (18-byte JMP to cleanup thunk)
- v22: unpacker stale-pointer SEH guard (whole-function __try/__except)

All five ship in leakfix.dll (117 KB, SHA d282f23c…) which is loaded
by acclient.exe at process start via PE import table patching by
tools/install_leakfix.py.

Controlled 15-client fleet soak: unpatched control died at 26h with
palette exhaustion; all 14 patched clients survived past that point
and reached ≥5-day uptime.

Residual ~15 MB/h growth traced to d3d9.dll's internal slab allocator
(260KB surface backing buffers retained after Release). See REPORT.md
§10 for the full investigation; conclusion is that it's unfixable from
outside d3d9.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-23 21:07:58 +02:00