Doomsday Engine

I'm getting the following crash (repeatable for me)
in map 6 of doom2. This occurs seemingly randomly in
other maps, but once it starts happening, it happens
consistently at some point in the level.

If 3d models are turned off, the crash doesn't
happen.
The following is a backtrace of SVN head:

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 4155610800 (LWP 18307)]
0x080b2203 in PG_InitForNewFrame ()

at /home/ashridah/deng/doomsday/engine/portable/src/rend_particle.c:246
246 if(gen->ptcs[k].stage >= 0)
(gdb) bt
#0 0x080b2203 in PG_InitForNewFrame ()

at /home/ashridah/deng/doomsday/engine/portable/src/rend_particle.c:246
#1 0x080e1fbf in R_RenderPlayerView
(player=0x81e9b20)

at /home/ashridah/deng/doomsday/engine/portable/src/r_main.c:586
#2 0xf6e3ed9e in D_Display ()

at /home/ashridah/deng/doomsday/plugins/jdoom/src/d_refresh.c:302
#3 0x0807d05e in DD_DrawAndBlit ()

at /home/ashridah/deng/doomsday/engine/portable/src/dd_loop.c:177
#4 0x0807d445 in DD_GameLoop ()

at /home/ashridah/deng/doomsday/engine/portable/src/dd_loop.c:142
#5 0x08075e82 in DD_Main ()

at /home/ashridah/deng/doomsday/engine/portable/src/dd_main.c:600
#6 0x080f672a in main (argc=7, argv=0xffea07b4)

at /home/ashridah/deng/doomsday/engine/unix/src/dd_uinit.c:303
(gdb) print k
$1 = 0
(gdb) print gen
$2 = (ptcgen_t *) 0xf5ef16fe
(gdb) print gen->ptcs
$3 = (particle_t *) 0x1af405e
(gdb) print gen->ptcs⁰
Cannot access memory at address 0x1af405e

At this particular point, it looks like several
entries in active_ptcgens are corrupted. pointers
like 0x1af405e are not valid.

Attached is my jdoom config and a save game file from
the level that's causing the crash (it happens at
some point during the level). Also attaching a
doomsday -v -v output for references to addon packs

Labels: Graphics