57b5e43d0e
Five bugs identified and patched in retail Asheron's Call client: - v3b: palette refcount over-increment (3-byte NOP at two sites) - v5: RenderSurface PurgeResource no-op stub (vtable slot 2 thunk) - v11: two dangling-pointer crash guards (NULL-check + reorder) - v14: CEnvCell::Destroy ClipPlaneList leak (18-byte JMP to cleanup thunk) - v22: unpacker stale-pointer SEH guard (whole-function __try/__except) All five ship in leakfix.dll (117 KB, SHA d282f23c…) which is loaded by acclient.exe at process start via PE import table patching by tools/install_leakfix.py. Controlled 15-client fleet soak: unpatched control died at 26h with palette exhaustion; all 14 patched clients survived past that point and reached ≥5-day uptime. Residual ~15 MB/h growth traced to d3d9.dll's internal slab allocator (260KB surface backing buffers retained after Release). See REPORT.md §10 for the full investigation; conclusion is that it's unfixable from outside d3d9. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
26 lines
680 B
PowerShell
26 lines
680 B
PowerShell
# Take one UMDH stack-tagged heap snapshot of a running process.
|
|
#
|
|
# Requirements:
|
|
# - gflags /i acclient.exe +ust (one-time, registry-set)
|
|
# - _NT_SYMBOL_PATH pointing at acclient.pdb directory
|
|
# - umdh.exe on PATH (Windows Debugging Tools)
|
|
|
|
param(
|
|
[Parameter(Mandatory=$true)][int]$ProcessId,
|
|
[Parameter(Mandatory=$true)][string]$Out
|
|
)
|
|
|
|
$ErrorActionPreference = "Stop"
|
|
|
|
if (-not $env:_NT_SYMBOL_PATH) {
|
|
Write-Warning "_NT_SYMBOL_PATH not set — symbols may not resolve"
|
|
}
|
|
|
|
& umdh.exe -p:$ProcessId -f:$Out
|
|
|
|
if (-not (Test-Path $Out)) {
|
|
throw "umdh produced no output at $Out"
|
|
}
|
|
|
|
$size = (Get-Item $Out).Length
|
|
Write-Host "snapshot: $Out ($size bytes)"
|