Five bugs identified and patched in retail Asheron's Call client: - v3b: palette refcount over-increment (3-byte NOP at two sites) - v5: RenderSurface PurgeResource no-op stub (vtable slot 2 thunk) - v11: two dangling-pointer crash guards (NULL-check + reorder) - v14: CEnvCell::Destroy ClipPlaneList leak (18-byte JMP to cleanup thunk) - v22: unpacker stale-pointer SEH guard (whole-function __try/__except) All five ship in leakfix.dll (117 KB, SHA d282f23c…) which is loaded by acclient.exe at process start via PE import table patching by tools/install_leakfix.py. Controlled 15-client fleet soak: unpatched control died at 26h with palette exhaustion; all 14 patched clients survived past that point and reached ≥5-day uptime. Residual ~15 MB/h growth traced to d3d9.dll's internal slab allocator (260KB surface backing buffers retained after Release). See REPORT.md §10 for the full investigation; conclusion is that it's unfixable from outside d3d9. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
18 lines
505 B
Text
18 lines
505 B
Text
$$ heap_summary.cdb — run via: cdb -z <dump.dmp> -cf bin\heap_summary.cdb
|
|
$$
|
|
$$ One command per line. .sympath eats the rest of its line, so the path goes
|
|
$$ on its own line. This avoids the -c semicolon-ambiguity hazard.
|
|
|
|
.sympath C:\Users\acbot\leakhunt\pdb
|
|
.symopt+ 0x40
|
|
.reload /f acclient.exe
|
|
|
|
$$ Heap summary — top-level overview, lightweight.
|
|
.echo === !heap -s ===
|
|
!heap -s
|
|
|
|
$$ Per-heap allocation-size histogram, useful for tracking growth.
|
|
.echo === !heap -stat -h 0 ===
|
|
!heap -stat -h 0
|
|
|
|
q
|