Error loop when loading thegenerationofdanger.com

[muzikbike]

Summary

The error appears to be the same as in #7032, but despite that one being fixed, this one is not, indicating a different cause.

Operating system

Linux

Steps to reproduce

1. Go to thegenerationofdanger.com
2. Wait for the Unity logo to appear then disappear
3. Observe the log, and lack of further content loading

Expected behavior

We'd get into the game.

Actual behavior

That does not happen.

URL for a reduced test case

thegenerationofdanger.com

HTML/SVG/etc. source for a reduced test case

N/A

Log output and (if possible) backtrace

ninja: Entering directory `/home/conputer/other-dev/ladybird/20250807210822/ladybird/Build/release'
ninja: no work to do.
14568.099 WebContent(25861): (js log) "Loading player data from data.unity3d\n"
14568.110 WebContent(25861): (js log) "Initialize engine version: 2020.3.30f1 (1fb1bf06830e)\n"
14568.111 WebContent(25861): (js log) "Creating WebGL 2.0 context."
14568.116 WebContent(25861): (js log) "Renderer: ANGLE (AMD, AMD Radeon RX 7800 XT (radeonsi navi32 LLVM 20.1.2 DRM 3.57 6.8.0-88-generic), OpenGL ES 3.2)\n"
14568.116 WebContent(25861): (js log) "Vendor:   Google Inc. (AMD)\n"
14568.116 WebContent(25861): (js log) "Version:  OpenGL ES 3.0 (OpenGL ES 3.0.0 (ANGLE 2.1.7258 git hash: 79ac1a8cd767))\n"
14568.116 WebContent(25861): (js log) "GLES:     3\n"
14568.116 WebContent(25861): (js log) " EXT_texture_filter_anisotropic GL_EXT_texture_filter_anisotropic OES_texture_float_linear GL_OES_texture_float_linear WEBGL_compressed_texture_s3tc GL_WEBGL_compressed_texture_s3tc WEBGL_debug_renderer_info GL_WEBGL_debug_renderer_info WEBGL_debug_shaders GL_WEBGL_debug_shaders WEBGL_lose_context GL_WEBGL_lose_context EXT_clip_control GL_EXT_clip_control EXT_color_buffer_float GL_EXT_color_buffer_float EXT_color_buffer_half_float GL_EXT_color_buffer_half_float EXT_conservative_depth GL_EXT_conservative_depth EXT_depth_clamp GL_EXT_depth_clamp EXT_disjoint_timer_query_webgl2 GL_EXT_disjoint_timer_query_webgl2 EXT_float_blend GL_EXT_float_blend EXT_polygon_offset_clamp GL_EXT_polygon_offset_clamp EXT_render_snorm GL_EXT_render_snorm EXT_texture_compression_bptc GL_EXT_texture_compression_bptc EXT_texture_compression_rgtc GL_EXT_texture_compression_rgtc EXT_texture_mirror_clamp_to_edge GL_EXT_texture_mirror_clamp_to_edge EXT_texture_norm16 GL_EXT_texture_norm16 KHR_parallel_shader_compile GL_KHR_parallel_shade\n"
14568.116 WebContent(25861): (js log) "r_compile NV_shader_noperspective_interpolation GL_NV_shader_noperspective_interpolation OES_draw_buffers_indexed GL_OES_draw_buffers_indexed OES_sample_variables GL_OES_sample_variables OES_shader_multisample_interpolation GL_OES_shader_multisample_interpolation WEBGL_blend_func_extended GL_WEBGL_blend_func_extended WEBGL_clip_cull_distance GL_WEBGL_clip_cull_distance WEBGL_compressed_texture_etc GL_WEBGL_compressed_texture_etc WEBGL_compressed_texture_etc1 GL_WEBGL_compressed_texture_etc1 WEBGL_compressed_texture_s3tc_srgb GL_WEBGL_compressed_texture_s3tc_srgb WEBGL_multi_draw GL_WEBGL_multi_draw WEBGL_stencil_texturing GL_WEBGL_stencil_texturing\n"
14568.118 WebContent(25861): (js log) "OPENGL LOG: Creating OpenGL ES 3.0 graphics device ; Context level  <OpenGL ES 3.0> ; Context handle 24145032\n"
14569.669 WebContent(25861): (js log) "Input Manager initialize...\n"
14570.342 WebContent(25861): (js log) "UnloadTime: 5.600001 ms\n"
14570.485 WebContent(25861): FIXME: Implement AudioParam::set_value_at_time
14570.485 WebContent(25861): FIXME: Implement AudioParam::set_value_at_time
14570.485 WebContent(25861): FIXME: Implement AudioParam::set_value_at_time
14570.485 WebContent(25861): FIXME: Implement AudioParam::set_value_at_time
14570.485 WebContent(25861): FIXME: Implement AudioParam::set_value_at_time
14570.485 WebContent(25861): FIXME: Implement AudioParam::set_value_at_time
14570.485 WebContent(25861): FIXME: Implement AudioParam::set_value_at_time
14570.485 WebContent(25861): FIXME: Implement AudioParam::set_value_at_time
14570.485 WebContent(25861): FIXME: Implement AudioParam::set_value_at_time
14570.851 WebContent(25861): (js log) "[UnityCache] 'https://thegenerationofdanger.com/Build/TallahGame.data' successfully downloaded and stored in the indexedDB cache"
14570.900 WebContent(25861): (js log) "warning: 2 FS.syncfs operations in flight at once, probably just doing extra work"
14573.237 WebContent(25861): (js error) "NullReferenceException: Object reference not set to an instance of an object.\n\n\n"
14573.250 WebContent(25861): (js error) "exception thrown: RuntimeError: Wasm execution trapped (WIP): Memory access out of bounds,RuntimeError: Wasm execution trapped (WIP): Memory access out of bounds\n    at dynCall_viiii\n    at <unknown>\n    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:468918\n    at invoke_viiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:357241)\n    at dynCall_iiiii\n    at <unknown>\n    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:455142\n    at invoke_iiiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:331706)\n    at dynCall_v\n    at <unknown>\n    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:462736\n    at browserIterationFunc (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:171882)\n    at runIter (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:174947)\n    at Browser_mainLoop_runner (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:173412)\n"
14573.250 WebContent(25861): Unhandled JavaScript exception: [RuntimeError] Wasm execution trapped (WIP): Memory access out of bounds
14573.250 WebContent(25861):     at dynCall_viiii
    at <unknown>
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:468918
    at invoke_viiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:357241)
    at dynCall_iiiii
    at <unknown>
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:455142
    at invoke_iiiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:331706)
    at dynCall_v
    at <unknown>
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:462736
    at browserIterationFunc (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:171882)
    at runIter (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:174947)
    at Browser_mainLoop_runner (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:173412)

14573.827 WebContent(25861): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
14574.827 WebContent(25861): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
14575.827 WebContent(25861): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
14576.827 WebContent(25861): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
14577.826 WebContent(25861): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
14578.827 WebContent(25861): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
14579.826 WebContent(25861): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"

Screenshots or screen recordings

Build flags or config settings

No response

Contribute a patch?

• I’ll contribute a patch for this myself.

[rcorsi]

I think this error might be where things break (tried to clean up the output so easier to follow)

14573.250 WebContent(25861): (js error) "exception thrown: RuntimeError: Wasm execution trapped (WIP): Memory access out of bounds,
RuntimeError: Wasm execution trapped (WIP): Memory access out of bounds\n
    at dynCall_viiii\n
    at <unknown>\n
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:468918\n
    at invoke_viiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:357241)\n
    at dynCall_iiiii\n
    at <unknown>\n
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:455142\n
    at invoke_iiiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:331706)\n
    at dynCall_v\n
    at <unknown>\n
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:462736\n
    at browserIterationFunc (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:171882)\n
    at runIter (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:174947)\n
    at Browser_mainLoop_runner (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:173412)\n"
14573.250 WebContent(25861): Unhandled JavaScript exception: [RuntimeError] Wasm execution trapped (WIP): Memory access out of bounds
14573.250 WebContent(25861):     at dynCall_viiii
    at <unknown>
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:468918
    at invoke_viiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:357241)
    at dynCall_iiiii
    at <unknown>
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:455142
    at invoke_iiiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:331706)
    at dynCall_v
    at <unknown>
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:462736
    at browserIterationFunc (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:171882)
    at runIter (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:174947)
    at Browser_mainLoop_runner (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:173412)

[rcorsi]

I've seen the Memory access out of bounds in #7025

[rcorsi]

@muzikbike I don't remember if you told me which Linux distribution you are using. NixOS? or Ubuntu? or somthing else?

[muzikbike]

[rcorsi]

And you are on real hardware, no VMs involved? Do I see that correctly?

Asking as on a VM with Kubuntu 24.04.2, the VulkanContext can't be created and WebGL is not available, so I don't get far on a VM.

Anyway, I did see the memory access out of bound on Ubuntu 25.04 once or twice, just having issue reproducing it now.

[rcorsi]

Right now the issue I am looking for is the message in the log "Wasm execution trapped (WIP): Memory access out of bounds"

OK, I can more easily reproduce the issue on real hardware with Ubuntu 25.04, usually on a clean start. If I go to Edit -> Settings and in the Privacy section I 'Clear' all of the 'Browsing Data' before starting, I usually can reproduce the issue, well more easily.

In the VM it is a bit harder to reproduce. On the VM if I go to the site and even when the issue doesn't occur, the game still doesn't start, and WebContent seems stuck running in a loop, even if I stop Ladybird, WebContent stays running, eventually the VM is not responsive or very slow.

[rcorsi]

In a slightly modified version of Ladybird, so that I could see what the "Memory access out of bound" is. I get this output:

bobo@bobo-ThinkCentre-M920q:~/projects/ladybird$ ./Meta/ladybird.py run Ladybird https://thegenerationofdanger.com
ninja: Entering directory `/home/bobo/projects/ladybird/Build/release'
ninja: no work to do.
10109.170 WebContent(5800): (js log) "[UnityCache] 'https://thegenerationofdanger.com/Build/TallahGame.data' successfully downloaded and stored in the indexedDB cache"
10117.295 WebContent(5800): (js log) "Loading player data from data.unity3d\n"
10117.321 WebContent(5800): (js log) "Initialize engine version: 2020.3.30f1 (1fb1bf06830e)\n"
10117.323 WebContent(5800): (js log) "Creating WebGL 2.0 context."
10117.333 WebContent(5800): (js log) "Renderer: ANGLE (Intel, Mesa Intel(R) UHD Graphics 630 (CFL GT2), OpenGL ES 3.2)\n"
10117.333 WebContent(5800): (js log) "Vendor:   Google Inc. (Intel)\n"
10117.333 WebContent(5800): (js log) "Version:  OpenGL ES 3.0 (OpenGL ES 3.0.0 (ANGLE 2.1.7258 git hash: 79ac1a8cd767))\n"
10117.333 WebContent(5800): (js log) "GLES:     3\n"
10117.334 WebContent(5800): (js log) " EXT_texture_filter_anisotropic GL_EXT_texture_filter_anisotropic OES_texture_float_linear GL_OES_texture_float_linear WEBGL_compressed_texture_s3tc GL_WEBGL_compressed_texture_s3tc WEBGL_debug_renderer_info GL_WEBGL_debug_renderer_info WEBGL_debug_shaders GL_WEBGL_debug_shaders WEBGL_lose_context GL_WEBGL_lose_context EXT_clip_control GL_EXT_clip_control EXT_color_buffer_float GL_EXT_color_buffer_float EXT_color_buffer_half_float GL_EXT_color_buffer_half_float EXT_conservative_depth GL_EXT_conservative_depth EXT_depth_clamp GL_EXT_depth_clamp EXT_disjoint_timer_query_webgl2 GL_EXT_disjoint_timer_query_webgl2 EXT_float_blend GL_EXT_float_blend EXT_polygon_offset_clamp GL_EXT_polygon_offset_clamp EXT_render_snorm GL_EXT_render_snorm EXT_texture_compression_bptc GL_EXT_texture_compression_bptc EXT_texture_compression_rgtc GL_EXT_texture_compression_rgtc EXT_texture_mirror_clamp_to_edge GL_EXT_texture_mirror_clamp_to_edge EXT_texture_norm16 GL_EXT_texture_norm16 KHR_parallel_shader_compile GL_KHR_parallel_shade\n"
10117.334 WebContent(5800): (js log) "r_compile NV_shader_noperspective_interpolation GL_NV_shader_noperspective_interpolation OES_draw_buffers_indexed GL_OES_draw_buffers_indexed OES_sample_variables GL_OES_sample_variables OES_shader_multisample_interpolation GL_OES_shader_multisample_interpolation WEBGL_blend_func_extended GL_WEBGL_blend_func_extended WEBGL_clip_cull_distance GL_WEBGL_clip_cull_distance WEBGL_compressed_texture_etc GL_WEBGL_compressed_texture_etc WEBGL_compressed_texture_etc1 GL_WEBGL_compressed_texture_etc1 WEBGL_compressed_texture_s3tc_srgb GL_WEBGL_compressed_texture_s3tc_srgb WEBGL_multi_draw GL_WEBGL_multi_draw WEBGL_stencil_texturing GL_WEBGL_stencil_texturing\n"
10117.339 WebContent(5800): (js log) "OPENGL LOG: Creating OpenGL ES 3.0 graphics device ; Context level  <OpenGL ES 3.0> ; Context handle 24145032\n"
10120.849 WebContent(5800): (js log) "Input Manager initialize...\n"
10122.346 WebContent(5800): (js log) "UnloadTime: 11.500000 ms\n"
10122.669 WebContent(5800): FIXME: Implement AudioParam::set_value_at_time
10122.669 WebContent(5800): FIXME: Implement AudioParam::set_value_at_time
10122.669 WebContent(5800): FIXME: Implement AudioParam::set_value_at_time
10122.669 WebContent(5800): FIXME: Implement AudioParam::set_value_at_time
10122.669 WebContent(5800): FIXME: Implement AudioParam::set_value_at_time
10122.669 WebContent(5800): FIXME: Implement AudioParam::set_value_at_time
10122.669 WebContent(5800): FIXME: Implement AudioParam::set_value_at_time
10122.669 WebContent(5800): FIXME: Implement AudioParam::set_value_at_time
10122.669 WebContent(5800): FIXME: Implement AudioParam::set_value_at_time
10123.556 WebContent(5800): (js log) "warning: 2 FS.syncfs operations in flight at once, probably just doing extra work"
10126.229 WebContent(5800): (js error) "NullReferenceException: Object reference not set to an instance of an object.\n\n\n"
10126.258 WebContent(5800): LibWasm: 1 Memory access out of bounds (expected 4294967303 to be less than or equal to 33554432)
10126.259 WebContent(5800): (js error) "exception thrown: RuntimeError: Wasm execution trapped (WIP): Memory access out of bounds,RuntimeError: Wasm execution trapped (WIP): Memory access out of bounds\n    at dynCall_viiii\n    at <unknown>\n    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:468918\n    at invoke_viiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:357241)\n    at dynCall_iiiii\n    at <unknown>\n    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:455142\n    at invoke_iiiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:331706)\n    at dynCall_v\n    at <unknown>\n    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:462736\n    at browserIterationFunc (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:171882)\n    at runIter (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:174947)\n    at Browser_mainLoop_runner (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:173412)\n"
10126.259 WebContent(5800): Unhandled JavaScript exception: [RuntimeError] Wasm execution trapped (WIP): Memory access out of bounds
10126.259 WebContent(5800):     at dynCall_viiii
    at <unknown>
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:468918
    at invoke_viiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:357241)
    at dynCall_iiiii
    at <unknown>
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:455142
    at invoke_iiiii (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:331706)
    at dynCall_v
    at <unknown>
    at https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:462736
    at browserIterationFunc (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:171882)
    at runIter (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:174947)
    at Browser_mainLoop_runner (https://thegenerationofdanger.com/Build/TallahGame.framework.js:2:173412)

10126.446 WebContent(5800): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
10127.446 WebContent(5800): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
10128.446 WebContent(5800): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
10129.446 WebContent(5800): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
10130.446 WebContent(5800): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
10131.446 WebContent(5800): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
10132.446 WebContent(5800): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
10133.446 WebContent(5800): (js error) "An abnormal situation has occurred: the PlayerLoop internal function has been called recursively. Please contact Customer Support with a sample project so that we can reproduce the problem and troubleshoot it.\n"
^Cbobo@bobo-ThinkCentre-M920q:~/projects/ladybird$ 

[rcorsi]

The part I'm interested in is this:

10126.258 WebContent(5800): LibWasm: 1 Memory access out of bounds (expected 4294967303 to be less than or equal to 33554432)

it's from Libraries/LibWasm/AbstractMachine/BytecodeInterpreter.cpp:3885

NOTE: the value '1' between 'LibWasm:' and 'Memory' in the log output, is just something I added to the message so I could be sure where it was coming from.

So either the game is trying to access some memory it shouldn't be trying to access, or there is bug in wasm code.

[rcorsi]

@alimpfard We have two issues (both are full wasm games) where we are getting "Memory access out of bounds", in #7069 at load_and_push() and the other #7025 with the error in store_to_memory()

#7069 has issue in load_and_push() at Libraries/LibWasm/AbstractMachine/BytecodeInterpreter.cpp:3885

10126.258 WebContent(5800): LibWasm: Memory access out of bounds (expected 4294967303 to be less than or equal to 33554432)

and #7025 has issue in store_memory() at Libraries/LibWasm/AbstractMachine/BytecodeInterpreter.cpp:4184

973.475 WebContent(23111): LibWasm: Memory access out of bounds (expected 0 <= 4294967315 and 4294967319 <= 268435456)

Any idea what it could be?

We seem to always be at the 4GB / 32 bit boundary with the faulty values. I see that we are doing a lot of static casting of i32 u32 u64, size_t; could one of those be wrong?

Any tips on debugging wasm, especially these larger games? Have you seen a good video or posting about wasm debugging that would apply to Ladybird? I'm a bit new to wasm, so the ramp seems very steep.

Should I post this question in discord?

[muzikbike]

Yes, this is all happening on actual hardware, no virtualisation imvolved.

[alimpfard]

Hmm, I don't immediately see memory64 in the wasm file, but I didn't look too hard.
It might be that the memory is initialised in js and we have some js-api issues, or that there's an exec bug and we're making it deref garbage.